@futdevpro/nts-dynamo 1.15.145 → 1.15.150

package/build/_modules/rate-limit/_enums/rate-limit-store-kind.type-enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-store-kind.type-enum.d.ts","sourceRoot":"","sources":["../../../../src/_modules/rate-limit/_enums/rate-limit-store-kind.type-enum.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,oBAAY,6BAA6B;IACvC,QAAQ,cAAc;IACtB,MAAM,WAAW;CAClB"}

package/build/_modules/rate-limit/_enums/rate-limit-store-kind.type-enum.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_RateLimitStoreKind_Type = void 0;
+/** Persistence scope advertised by a rate-limit store implementation. */
+var DyNTS_RateLimitStoreKind_Type;
+(function (DyNTS_RateLimitStoreKind_Type) {
+    DyNTS_RateLimitStoreKind_Type["inMemory"] = "in-memory";
+    DyNTS_RateLimitStoreKind_Type["shared"] = "shared";
+})(DyNTS_RateLimitStoreKind_Type || (exports.DyNTS_RateLimitStoreKind_Type = DyNTS_RateLimitStoreKind_Type = {}));
+//# sourceMappingURL=rate-limit-store-kind.type-enum.js.map

package/build/_modules/rate-limit/_enums/rate-limit-store-kind.type-enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-store-kind.type-enum.js","sourceRoot":"","sources":["../../../../src/_modules/rate-limit/_enums/rate-limit-store-kind.type-enum.ts"],"names":[],"mappings":";;;AAAA,yEAAyE;AACzE,IAAY,6BAGX;AAHD,WAAY,6BAA6B;IACvC,uDAAsB,CAAA;IACtB,kDAAiB,CAAA;AACnB,CAAC,EAHW,6BAA6B,6CAA7B,6BAA6B,QAGxC"}

package/build/_modules/rate-limit/_models/rate-limit-config.interface.d.ts

@@ -1,5 +1,6 @@
 import { Request } from 'express';
 import { DyNTS_RateLimit_Policy } from './rate-limit-policy.interface';
+import { DyNTS_RateLimit_Store_Interface } from './rate-limit-store.interface';
 /**
  * Config a `DyNTS_RateLimit_Middleware.configure(...)`-hoz.
  *
@@ -21,22 +22,30 @@ export interface DyNTS_RateLimit_Config {
      * Rate-limit subject-extractor. Visszater a karakterlanccal, ami azonositja
      * a rate-limit alanyat (pl. IP-cim, API-kulcs ID, account ID).
      *
-     * Default: a `req.headers['x-forwarded-for']` (csak az elso IP, ha lista)
-     * vagy ha hianyzik akkor `req.ip` vagy `'unknown'`. Ez webszerver elotti
-     * proxy/CDN-mentes setup-ra megfelelo; ha az nd-space mar identifikalja az
-     * API-kulcsot a `req`-ben, a host adhat sajat extractort ami a key-ID-t
-     * adja vissza.
+     * Default: az Express altal mar megbizhatonak minositett `req.ip`, vagy ha
+     * hianyzik akkor `'unknown'`. A middleware szandekosan nem olvassa kozvetlenul
+     * az ugyfel altal hamisithato `x-forwarded-for` headert. Production uzemben a
+     * shared-store gate explicit, opaque extractort kovetel.
      */
     keyExtractor?: (req: Request) => string;
     /**
      * Endpoint-csoportosito. Visszater a karakterlanccal, ami azonositja az
-     * adott endpoint-csoportot. A storage-key `${subject}|${endpoint}` lesz.
+     * adott endpoint-csoportot. A storage-key egyertelmuen hossz-prefixelt
+     * subject + endpoint kompozicio lesz.
      *
      * Default: `req.path` — minden uri-path kulon vodorbe kerul. Csoportositas
      * mas szempontok szerint (pl. "datasets" csoport = `/api/datasets/*`)
      * a hostnal felulirhato.
      */
     endpointGrouper?: (req: Request) => string;
+    /** Optional permit cost per request. Default: one. */
+    costExtractor?: (req: Request) => number;
+    /** Atomic store. The default in-memory implementation is for tests and single-instance development only. */
+    store?: DyNTS_RateLimit_Store_Interface;
+    /** Fail configuration unless a shared store plus explicit opaque key/group extractors are supplied. */
+    requireSharedStore?: boolean;
+    /** Deterministic clock seam. Production callers normally omit it. */
+    clock?: () => number;
     /**
      * Beallitja-e a `X-RateLimit-Limit`, `X-RateLimit-Remaining`,
      * `X-RateLimit-Reset` (es a 429-re `Retry-After`) response header-eket.

package/build/_modules/rate-limit/_models/rate-limit-config.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit-config.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/rate-limit/_models/rate-limit-config.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAExC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAE3C;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAE5D;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;CAClE"}
+{"version":3,"file":"rate-limit-config.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/rate-limit/_models/rate-limit-config.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAE/E;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAExC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAE3C,sDAAsD;IACtD,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAEzC,4GAA4G;IAC5G,KAAK,CAAC,EAAE,+BAA+B,CAAC;IAExC,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAE5D;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;CAClE"}

package/build/_modules/rate-limit/_models/rate-limit-consume-request.interface.d.ts

@@ -0,0 +1,9 @@
+import { DyNTS_RateLimit_Policy } from './rate-limit-policy.interface';
+/** Atomic permit request passed to a rate-limit store. */
+export interface DyNTS_RateLimit_ConsumeRequest_Interface {
+    bucketKey: string;
+    policy: DyNTS_RateLimit_Policy;
+    cost: number;
+    now: number;
+}
+//# sourceMappingURL=rate-limit-consume-request.interface.d.ts.map

package/build/_modules/rate-limit/_models/rate-limit-consume-request.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-consume-request.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/rate-limit/_models/rate-limit-consume-request.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEvE,0DAA0D;AAC1D,MAAM,WAAW,wCAAwC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb"}

package/build/_modules/rate-limit/_models/rate-limit-consume-request.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=rate-limit-consume-request.interface.js.map

package/build/_modules/rate-limit/_models/rate-limit-consume-request.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-consume-request.interface.js","sourceRoot":"","sources":["../../../../src/_modules/rate-limit/_models/rate-limit-consume-request.interface.ts"],"names":[],"mappings":""}

package/build/_modules/rate-limit/_models/rate-limit-consume-result.interface.d.ts

@@ -0,0 +1,7 @@
+/** Content-free result of one atomically committed permit request. */
+export interface DyNTS_RateLimit_ConsumeResult_Interface {
+    allowed: boolean;
+    remaining: number;
+    resetAt: number;
+}
+//# sourceMappingURL=rate-limit-consume-result.interface.d.ts.map

package/build/_modules/rate-limit/_models/rate-limit-consume-result.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-consume-result.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/rate-limit/_models/rate-limit-consume-result.interface.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,MAAM,WAAW,uCAAuC;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/build/_modules/rate-limit/_models/rate-limit-consume-result.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=rate-limit-consume-result.interface.js.map

package/build/_modules/rate-limit/_models/rate-limit-consume-result.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-consume-result.interface.js","sourceRoot":"","sources":["../../../../src/_modules/rate-limit/_models/rate-limit-consume-result.interface.ts"],"names":[],"mappings":""}

package/build/_modules/rate-limit/_models/rate-limit-store.interface.d.ts

@@ -0,0 +1,9 @@
+import { DyNTS_RateLimitStoreKind_Type } from '../_enums/rate-limit-store-kind.type-enum';
+import { DyNTS_RateLimit_ConsumeRequest_Interface } from './rate-limit-consume-request.interface';
+import { DyNTS_RateLimit_ConsumeResult_Interface } from './rate-limit-consume-result.interface';
+/** Atomic persistence seam. Production hosts can require `shared` scope at configuration time. */
+export interface DyNTS_RateLimit_Store_Interface {
+    readonly storeKind: DyNTS_RateLimitStoreKind_Type;
+    consume(request: DyNTS_RateLimit_ConsumeRequest_Interface): Promise<DyNTS_RateLimit_ConsumeResult_Interface>;
+}
+//# sourceMappingURL=rate-limit-store.interface.d.ts.map

package/build/_modules/rate-limit/_models/rate-limit-store.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-store.interface.d.ts","sourceRoot":"","sources":["../../../../src/_modules/rate-limit/_models/rate-limit-store.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAC;AAClG,OAAO,EAAE,uCAAuC,EAAE,MAAM,uCAAuC,CAAC;AAEhG,kGAAkG;AAClG,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;IAClD,OAAO,CAAC,OAAO,EAAE,wCAAwC,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;CAC9G"}

package/build/_modules/rate-limit/_models/rate-limit-store.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=rate-limit-store.interface.js.map

package/build/_modules/rate-limit/_models/rate-limit-store.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-store.interface.js","sourceRoot":"","sources":["../../../../src/_modules/rate-limit/_models/rate-limit-store.interface.ts"],"names":[],"mappings":""}

package/build/_modules/rate-limit/index.d.ts

@@ -1,4 +1,9 @@
 export { DyNTS_RateLimit_Middleware } from './rate-limit.middleware';
+export { DyNTS_RateLimit_InMemoryStore } from './rate-limit-in-memory.store';
 export { DyNTS_RateLimit_Config } from './_models/rate-limit-config.interface';
+export { DyNTS_RateLimit_ConsumeRequest_Interface } from './_models/rate-limit-consume-request.interface';
+export { DyNTS_RateLimit_ConsumeResult_Interface } from './_models/rate-limit-consume-result.interface';
 export { DyNTS_RateLimit_Policy } from './_models/rate-limit-policy.interface';
+export { DyNTS_RateLimit_Store_Interface } from './_models/rate-limit-store.interface';
+export { DyNTS_RateLimitStoreKind_Type } from './_enums/rate-limit-store-kind.type-enum';
 //# sourceMappingURL=index.d.ts.map

package/build/_modules/rate-limit/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_modules/rate-limit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/_modules/rate-limit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AACvF,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC"}

package/build/_modules/rate-limit/index.js

@@ -1,6 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DyNTS_RateLimit_Middleware = void 0;
+exports.DyNTS_RateLimitStoreKind_Type = exports.DyNTS_RateLimit_InMemoryStore = exports.DyNTS_RateLimit_Middleware = void 0;
 var rate_limit_middleware_1 = require("./rate-limit.middleware");
 Object.defineProperty(exports, "DyNTS_RateLimit_Middleware", { enumerable: true, get: function () { return rate_limit_middleware_1.DyNTS_RateLimit_Middleware; } });
+var rate_limit_in_memory_store_1 = require("./rate-limit-in-memory.store");
+Object.defineProperty(exports, "DyNTS_RateLimit_InMemoryStore", { enumerable: true, get: function () { return rate_limit_in_memory_store_1.DyNTS_RateLimit_InMemoryStore; } });
+var rate_limit_store_kind_type_enum_1 = require("./_enums/rate-limit-store-kind.type-enum");
+Object.defineProperty(exports, "DyNTS_RateLimitStoreKind_Type", { enumerable: true, get: function () { return rate_limit_store_kind_type_enum_1.DyNTS_RateLimitStoreKind_Type; } });
 //# sourceMappingURL=index.js.map

package/build/_modules/rate-limit/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/_modules/rate-limit/index.ts"],"names":[],"mappings":";;;AAAA,iEAAqE;AAA5D,mIAAA,0BAA0B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/_modules/rate-limit/index.ts"],"names":[],"mappings":";;;AAAA,iEAAqE;AAA5D,mIAAA,0BAA0B,OAAA;AACnC,2EAA6E;AAApE,2IAAA,6BAA6B,OAAA;AAMtC,4FAAyF;AAAhF,gJAAA,6BAA6B,OAAA"}

package/build/_modules/rate-limit/rate-limit-in-memory.store.d.ts

@@ -0,0 +1,19 @@
+import { DyNTS_RateLimitStoreKind_Type } from './_enums/rate-limit-store-kind.type-enum';
+import { DyNTS_RateLimit_ConsumeRequest_Interface } from './_models/rate-limit-consume-request.interface';
+import { DyNTS_RateLimit_ConsumeResult_Interface } from './_models/rate-limit-consume-result.interface';
+import { DyNTS_RateLimit_Store_Interface } from './_models/rate-limit-store.interface';
+/** Deterministic single-process store for tests and explicitly single-instance development. */
+export declare class DyNTS_RateLimit_InMemoryStore implements DyNTS_RateLimit_Store_Interface {
+    readonly storeKind: DyNTS_RateLimitStoreKind_Type;
+    private readonly records;
+    /** Consumes permit units with exact sliding-window semantics and no background cleanup task. */
+    consume(request: DyNTS_RateLimit_ConsumeRequest_Interface): Promise<DyNTS_RateLimit_ConsumeResult_Interface>;
+    /** Opportunistically removes expired local records when explicitly invoked by the host. */
+    cleanup(now: number): void;
+    /** Clears all local state for deterministic tests. */
+    reset(): void;
+    /** Returns only the aggregate local bucket count for diagnostics. */
+    getTrackedBucketCount(): number;
+    private assertRequest;
+}
+//# sourceMappingURL=rate-limit-in-memory.store.d.ts.map

package/build/_modules/rate-limit/rate-limit-in-memory.store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-in-memory.store.d.ts","sourceRoot":"","sources":["../../../src/_modules/rate-limit/rate-limit-in-memory.store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,wCAAwC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AACxG,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AAOvF,+FAA+F;AAC/F,qBAAa,6BAA8B,YAAW,+BAA+B;IACnF,SAAgB,SAAS,EAAE,6BAA6B,CAA0C;IAClG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoE;IAE5F,gGAAgG;IACnF,OAAO,CAClB,OAAO,EAAE,wCAAwC,GAChD,OAAO,CAAC,uCAAuC,CAAC;IA4BnD,2FAA2F;IACpF,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAgBjC,sDAAsD;IAC/C,KAAK,IAAI,IAAI;IAIpB,qEAAqE;IAC9D,qBAAqB,IAAI,MAAM;IAItC,OAAO,CAAC,aAAa;CAiBtB"}

package/build/_modules/rate-limit/rate-limit-in-memory.store.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_RateLimit_InMemoryStore = void 0;
+const rate_limit_store_kind_type_enum_1 = require("./_enums/rate-limit-store-kind.type-enum");
+/** Deterministic single-process store for tests and explicitly single-instance development. */
+class DyNTS_RateLimit_InMemoryStore {
+    storeKind = rate_limit_store_kind_type_enum_1.DyNTS_RateLimitStoreKind_Type.inMemory;
+    records = new Map();
+    /** Consumes permit units with exact sliding-window semantics and no background cleanup task. */
+    async consume(request) {
+        this.assertRequest(request);
+        const windowStart = request.now - request.policy.windowMs;
+        const existing = this.records.get(request.bucketKey);
+        const recent = (existing?.timestamps ?? []).filter((timestamp) => timestamp > windowStart);
+        const allowed = recent.length + request.cost <= request.policy.limit;
+        if (allowed) {
+            for (let index = 0; index < request.cost; index += 1) {
+                recent.push(request.now);
+            }
+        }
+        this.records.set(request.bucketKey, {
+            timestamps: recent,
+            windowMs: request.policy.windowMs,
+        });
+        return {
+            allowed: allowed,
+            remaining: Math.max(0, request.policy.limit - recent.length),
+            resetAt: (recent[0] ?? request.now) + request.policy.windowMs,
+        };
+    }
+    /** Opportunistically removes expired local records when explicitly invoked by the host. */
+    cleanup(now) {
+        for (const entry of this.records.entries()) {
+            const key = entry[0];
+            const record = entry[1];
+            const recent = record.timestamps.filter((timestamp) => timestamp > now - record.windowMs);
+            if (!recent.length) {
+                this.records.delete(key);
+            }
+            else {
+                this.records.set(key, { ...record, timestamps: recent });
+            }
+        }
+    }
+    /** Clears all local state for deterministic tests. */
+    reset() {
+        this.records.clear();
+    }
+    /** Returns only the aggregate local bucket count for diagnostics. */
+    getTrackedBucketCount() {
+        return this.records.size;
+    }
+    assertRequest(request) {
+        const isValid = Boolean(request.bucketKey.trim())
+            && request.bucketKey.length <= 512
+            && Number.isSafeInteger(request.now)
+            && request.now >= 0
+            && Number.isSafeInteger(request.cost)
+            && request.cost > 0
+            && Number.isSafeInteger(request.policy.limit)
+            && request.policy.limit > 0
+            && Number.isSafeInteger(request.policy.windowMs)
+            && request.policy.windowMs > 0
+            && request.cost <= request.policy.limit;
+        if (!isValid) {
+            throw new Error('DYNTS_RATE_LIMIT_STORE_REQUEST_INVALID');
+        }
+    }
+}
+exports.DyNTS_RateLimit_InMemoryStore = DyNTS_RateLimit_InMemoryStore;
+//# sourceMappingURL=rate-limit-in-memory.store.js.map

package/build/_modules/rate-limit/rate-limit-in-memory.store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-in-memory.store.js","sourceRoot":"","sources":["../../../src/_modules/rate-limit/rate-limit-in-memory.store.ts"],"names":[],"mappings":";;;AAAA,8FAAyF;AAUzF,+FAA+F;AAC/F,MAAa,6BAA6B;IACxB,SAAS,GAAkC,+DAA6B,CAAC,QAAQ,CAAC;IACjF,OAAO,GAA0D,IAAI,GAAG,EAAE,CAAC;IAE5F,gGAAgG;IACzF,KAAK,CAAC,OAAO,CAClB,OAAiD;QAEjD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAE5B,MAAM,WAAW,GAAW,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClE,MAAM,QAAQ,GAAyD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3G,MAAM,MAAM,GAAa,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAC1D,CAAC,SAAiB,EAAW,EAAE,CAAC,SAAS,GAAG,WAAW,CACxD,CAAC;QACF,MAAM,OAAO,GAAY,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAE9E,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,IAAI,KAAK,GAAW,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC7D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE;YAClC,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;SAClC,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YAC5D,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ;SAC9D,CAAC;IACJ,CAAC;IAED,2FAA2F;IACpF,OAAO,CAAC,GAAW;QACxB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAW,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,MAAM,GAA6C,KAAK,CAAC,CAAC,CAAC,CAAC;YAClE,MAAM,MAAM,GAAa,MAAM,CAAC,UAAU,CAAC,MAAM,CAC/C,CAAC,SAAiB,EAAW,EAAE,CAAC,SAAS,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,CAClE,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED,sDAAsD;IAC/C,KAAK;QACV,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,qEAAqE;IAC9D,qBAAqB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAEO,aAAa,CAAC,OAAiD;QACrE,MAAM,OAAO,GAAY,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;eACrD,OAAO,CAAC,SAAS,CAAC,MAAM,IAAI,GAAG;eAC/B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;eACjC,OAAO,CAAC,GAAG,IAAI,CAAC;eAChB,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;eAClC,OAAO,CAAC,IAAI,GAAG,CAAC;eAChB,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;eAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC;eACxB,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;eAC7C,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC;eAC3B,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAE1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF;AA/ED,sEA+EC"}

package/build/_modules/rate-limit/rate-limit.middleware.d.ts

@@ -1,69 +1,28 @@
 import { Request, Response } from 'express';
 import { DyNTS_SingletonServiceBase } from '../../_services/base/singleton.service-base';
+import { DyNTS_RateLimitStoreKind_Type } from './_enums/rate-limit-store-kind.type-enum';
 import { DyNTS_RateLimit_Config } from './_models/rate-limit-config.interface';
 import { DyNTS_RateLimit_Policy } from './_models/rate-limit-policy.interface';
-/**
- * Sliding-window HTTP rate-limit middleware — opt-in service-szel, a meglevo
- * `DyNTS_Endpoint_Params.preProcesses` mechanizmus mellol mukodik.
- *
- * **Hasznalat (host app):**
- * ```ts
- * const rateLimit = DyNTS_RateLimit_Middleware.getInstance();
- * rateLimit.configure({
- *   defaultLimit: 100,            // 100 req/perc default
- *   defaultWindowMs: 60_000,
- *   keyExtractor: (req) => req.headers['x-api-key'] as string || req.ip,
- * });
- *
- * new DyNTS_Endpoint_Params({
- *   ...,
- *   preProcesses: [rateLimit.check, ...other],
- * });
- *
- * // subscription-tier-up: per-kulcs egyedi limit
- * rateLimit.setPolicyForKey('subscriber-tier-key-123', {
- *   limit: 1000,
- *   windowMs: 60_000,
- * });
- * ```
- *
- * **Viselkedes:**
- * - Sliding-window algoritmus: minden request egy timestamp; a window-on
- *   kivuli timestamp-ek nem szamolnak. Tobb pontos mint a fix-bucket
- *   (boundary-burst nincs).
- * - In-memory storage — single-instance MVP-nek megfelelo. Multi-instance
- *   prod-hoz Redis-backed extension kell (lasd a kozelebb dokumentumaltot).
- * - Limit lepes: 429 DyFM_Error + `X-RateLimit-*` + `Retry-After` header-ek.
- *
- * **Storage:** `Map<storageKey, timestamps[]>` ahol storageKey = `${subject}|${endpoint}`.
- * Periodikus GC takaritja a inaktiv kulcsokat.
- *
- * **Singleton:** `getInstance()`-szel hivd. A `.check` mezo binding-elve van
- * `this`-re, igy direkt atadhato `preProcesses`-be ujracsomagolas nelkul.
- */
+/** Atomic HTTP rate-limit boundary with an explicit shared-store production gate. */
 export declare class DyNTS_RateLimit_Middleware extends DyNTS_SingletonServiceBase {
-    static getInstance(): DyNTS_RateLimit_Middleware;
     private defaultLimit;
     private defaultWindowMs;
-    private responseHeaders;
+    private isResponseHeadersEnabled;
+    private isSharedStoreRequired;
+    private isKeyExtractorExplicit;
+    private isEndpointGrouperExplicit;
     private keyExtractor;
     private endpointGrouper;
-    /** request-log: storageKey → timestamp-tomb (Date.now() ms). */
-    private requestLog;
-    /** Per-kulcs egyedi policy-k. */
+    private costExtractor;
+    private clock;
+    private store;
     private keyPolicies;
-    /** Per-endpoint(-csoport) egyedi policy-k (a `endpointGrouper` outputjara kulcsolva). */
     private endpointPolicies;
-    /** GC timer handle. */
-    private gcTimer;
-    /**
-     * Konfig override. Hianyzo mezok a default-okat orzik. Hivhato barmikor —
-     * a `check()` a friss config-ot olvassa.
-     */
+    /** Returns the process-wide rate-limit middleware. */
+    static getInstance(): DyNTS_RateLimit_Middleware;
+    /** Applies a validated configuration atomically; invalid settings do not partially mutate the service. */
     configure(config: DyNTS_RateLimit_Config): void;
-    /**
-     * Aktualis konfig olvasasa (diagnosztika celokra).
-     */
+    /** Returns content-free configuration diagnostics. */
     getConfig(): {
         defaultLimit: number;
         defaultWindowMs: number;
@@ -71,63 +30,40 @@ export declare class DyNTS_RateLimit_Middleware extends DyNTS_SingletonServiceBa
         activeKeyPolicies: number;
         activeEndpointPolicies: number;
         trackedStorageKeys: number;
+        storeKind: DyNTS_RateLimitStoreKind_Type;
+        requireSharedStore: boolean;
     };
-    /**
-     * Per-kulcs egyedi policy beallitas (pl. subscription-tier alapjan).
-     * A `key`-nek pontosan azzal a stringgel kell egyeznie, amit a `keyExtractor`
-     * visszaad.
-     */
+    /** Sets one validated subject policy. */
     setPolicyForKey(key: string, policy: DyNTS_RateLimit_Policy): void;
-    /**
-     * Per-kulcs policy torlese (visszaall a default-ra).
-     */
+    /** Removes one subject policy. */
     clearPolicyForKey(key: string): void;
-    /**
-     * Per-endpoint(-csoport) egyedi policy beallitas. Az `endpoint`-nek pontosan
-     * azzal a stringgel kell egyeznie, amit az `endpointGrouper` visszaad (default: `req.path`).
-     * Akkor hasznos, ha egy endpointnak a globalis default-tol eltero limit kell — pl. egy
-     * webhook nagy burst-toleranciat igenyel (a legit, distributed forgalom ne bukjon), mig
-     * egy admin-endpoint szuk limitet. Precedencia: per-kulcs policy > per-endpoint policy > default.
-     */
+    /** Sets one validated endpoint-group policy. */
     setPolicyForEndpoint(endpoint: string, policy: DyNTS_RateLimit_Policy): void;
-    /**
-     * Per-endpoint policy torlese (visszaall a default-ra).
-     */
+    /** Removes one endpoint-group policy. */
     clearPolicyForEndpoint(endpoint: string): void;
-    /**
-     * Pre-process function — atadhato `DyNTS_Endpoint_Params.preProcesses`-be.
-     *
-     * Throws:
-     *   - 429 ha az aktualis request meghaladna a limit-et a sliding window-on
-     *
-     * Side-effect: ha `responseHeaders === true`, beallitja az `X-RateLimit-Limit`,
-     * `X-RateLimit-Remaining`, `X-RateLimit-Reset` header-eket; 429 eseten
-     * a `Retry-After` header-t is.
-     */
+    /** Atomically consumes one request permit or raises a stable content-free error. */
     readonly check: (req: Request, res: Response) => Promise<void>;
-    /**
-     * Default key-extractor: x-forwarded-for vagy req.ip vagy 'unknown'.
-     * Csak akkor hasznalt, ha a host nem allit be sajat extractort a configure-ben.
-     */
-    private defaultKeyExtractor;
-    /**
-     * GC timer inditasa (idempotent). Periodikusan eltavolitja az inaktiv
-     * storage-key-eket a request-log-bol — memory-leak prevention.
-     */
-    private startGcTimer;
-    /**
-     * GC sweep — minden storage-key-rol levagja a regi timestamp-eket, es
-     * eltavolitja az ureseket. Hivhato kulonosen test-bol.
-     */
+    /** Performs explicit opportunistic cleanup only for the local test/development store. */
     runGc(): void;
-    /**
-     * GC timer leallitasa (graceful shutdown vagy test-cleanup).
-     */
+    /** Backward-compatible no-op: this implementation never starts a timer. */
     stopGcTimer(): void;
-    /**
-     * Test-only: visszaallitja a default config-ot + uriti a state-et, hogy a
-     * specfajlok ne szivarogjak at egymas state-jet. Production code NE hivja.
-     */
+    /** Resets all state to deterministic local defaults for tests. */
     _resetForTesting(): void;
+    private buildConfigSnapshot;
+    private addInitialPolicies;
+    private assertPolicy;
+    private assertCost;
+    private assertConfigurationFunctions;
+    private assertStore;
+    private extractBucketPart;
+    private extractCost;
+    private buildBucketKey;
+    private getNow;
+    private assertBucketPart;
+    private throwBucketKeyInvalid;
+    private assertStoreResult;
+    private setResponseHeaders;
+    private getRetryAfterSeconds;
+    private throwRateLimitError;
 }
 //# sourceMappingURL=rate-limit.middleware.d.ts.map

package/build/_modules/rate-limit/rate-limit.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.middleware.d.ts","sourceRoot":"","sources":["../../../src/_modules/rate-limit/rate-limit.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAI5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAGzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AA2B/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,qBAAa,0BAA2B,SAAQ,0BAA0B;IAExE,MAAM,CAAC,WAAW,IAAI,0BAA0B;IAIhD,OAAO,CAAC,YAAY,CAAyB;IAC7C,OAAO,CAAC,eAAe,CAA6B;IACpD,OAAO,CAAC,eAAe,CAAqC;IAE5D,OAAO,CAAC,YAAY,CACsC;IAC1D,OAAO,CAAC,eAAe,CACc;IAErC,gEAAgE;IAChE,OAAO,CAAC,UAAU,CAAoC;IAEtD,iCAAiC;IACjC,OAAO,CAAC,WAAW,CAAkD;IAErE,yFAAyF;IACzF,OAAO,CAAC,gBAAgB,CAAkD;IAE1E,uBAAuB;IACvB,OAAO,CAAC,OAAO,CAA+B;IAG9C;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI;IA6B/C;;OAEG;IACH,SAAS,IAAI;QACX,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,OAAO,CAAC;QACzB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,kBAAkB,EAAE,MAAM,CAAC;KAC5B;IAWD;;;;OAIG;IACH,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,IAAI;IAIlE;;OAEG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIpC;;;;;;OAMG;IACH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,IAAI;IAI5E;;OAEG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAK9C;;;;;;;;;OASG;IACH,QAAQ,CAAC,KAAK,QAAe,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CAuDjE;IAGF;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAkB3B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAapB;;;OAGG;IACH,KAAK,IAAI,IAAI;IAcb;;OAEG;IACH,WAAW,IAAI,IAAI;IAQnB;;;OAGG;IACH,gBAAgB,IAAI,IAAI;CAWzB"}
+{"version":3,"file":"rate-limit.middleware.d.ts","sourceRoot":"","sources":["../../../src/_modules/rate-limit/rate-limit.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAK5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAE/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAyC/E,qFAAqF;AACrF,qBAAa,0BAA2B,SAAQ,0BAA0B;IACxE,OAAO,CAAC,YAAY,CAAyB;IAC7C,OAAO,CAAC,eAAe,CAA6B;IACpD,OAAO,CAAC,wBAAwB,CAAqC;IACrE,OAAO,CAAC,qBAAqB,CAAkB;IAC/C,OAAO,CAAC,sBAAsB,CAAkB;IAChD,OAAO,CAAC,yBAAyB,CAAkB;IACnD,OAAO,CAAC,YAAY,CAA2E;IAC/F,OAAO,CAAC,eAAe,CAAgE;IACvF,OAAO,CAAC,aAAa,CAInB;IACF,OAAO,CAAC,KAAK,CAA0C;IACvD,OAAO,CAAC,KAAK,CAAwE;IACrF,OAAO,CAAC,WAAW,CAAkD;IACrE,OAAO,CAAC,gBAAgB,CAAkD;IAE1E,sDAAsD;WACxC,WAAW,IAAI,0BAA0B;IAIvD,0GAA0G;IACnG,SAAS,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI;IAkBtD,sDAAsD;IAC/C,SAAS,IAAI;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,OAAO,CAAC;QACzB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,6BAA6B,CAAC;QACzC,kBAAkB,EAAE,OAAO,CAAC;KAC3B;IAeH,yCAAyC;IAClC,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,IAAI;IAMzE,kCAAkC;IAC3B,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI3C,gDAAgD;IACzC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,IAAI;IAMnF,yCAAyC;IAClC,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIrD,oFAAoF;IACpF,SAAgB,KAAK,QAAe,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CAgDxE;IAEF,yFAAyF;IAClF,KAAK,IAAI,IAAI;IAMpB,2EAA2E;IACpE,WAAW,IAAI,IAAI;IAE1B,kEAAkE;IAC3D,gBAAgB,IAAI,IAAI;IAoB/B,OAAO,CAAC,mBAAmB;IAkD3B,OAAO,CAAC,kBAAkB;IAkB1B,OAAO,CAAC,YAAY;IAkBpB,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,4BAA4B;IAqBpC,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,iBAAiB;IAoBzB,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,MAAM;IAqBd,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,iBAAiB;IA6BzB,OAAO,CAAC,kBAAkB;IA4B1B,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,mBAAmB;CAY5B"}