@gagandeep023/api-gateway 0.1.0

package/dist/index.js

@@ -0,0 +1,698 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  AnalyticsService: () => AnalyticsService,
+  DEFAULT_API_KEYS: () => DEFAULT_API_KEYS,
+  DEFAULT_IP_RULES: () => DEFAULT_IP_RULES,
+  DEFAULT_RATE_LIMIT_CONFIG: () => DEFAULT_RATE_LIMIT_CONFIG,
+  GatewayDashboard: () => GatewayDashboard,
+  RateLimiterService: () => RateLimiterService,
+  createApiKeyAuth: () => createApiKeyAuth,
+  createGatewayMiddleware: () => createGatewayMiddleware,
+  createGatewayRoutes: () => createGatewayRoutes,
+  createIpFilter: () => createIpFilter,
+  createRateLimiter: () => createRateLimiter,
+  createRequestLogger: () => createRequestLogger
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/backend/middleware/gateway.ts
+var import_express = require("express");
+
+// src/backend/services/RateLimiterService.ts
+var TokenBucket = class {
+  buckets = /* @__PURE__ */ new Map();
+  tryConsume(ip, maxTokens, refillRate) {
+    const now = Date.now();
+    let bucket = this.buckets.get(ip);
+    if (!bucket) {
+      bucket = { tokens: maxTokens, lastRefill: now };
+      this.buckets.set(ip, bucket);
+    }
+    const elapsed = (now - bucket.lastRefill) / 1e3;
+    bucket.tokens = Math.min(maxTokens, bucket.tokens + elapsed * refillRate);
+    bucket.lastRefill = now;
+    if (bucket.tokens >= 1) {
+      bucket.tokens -= 1;
+      const resetMs2 = bucket.tokens <= 0 ? Math.ceil(1 / refillRate * 1e3) : 0;
+      return { allowed: true, remaining: Math.floor(bucket.tokens), resetMs: resetMs2 };
+    }
+    const resetMs = Math.ceil((1 - bucket.tokens) / refillRate * 1e3);
+    return { allowed: false, remaining: 0, resetMs };
+  }
+};
+var SlidingWindowLog = class {
+  windows = /* @__PURE__ */ new Map();
+  tryConsume(ip, maxRequests, windowMs) {
+    const now = Date.now();
+    let state = this.windows.get(ip);
+    if (!state) {
+      state = { timestamps: [] };
+      this.windows.set(ip, state);
+    }
+    state.timestamps = state.timestamps.filter((t) => now - t < windowMs);
+    if (state.timestamps.length < maxRequests) {
+      state.timestamps.push(now);
+      return {
+        allowed: true,
+        remaining: maxRequests - state.timestamps.length,
+        resetMs: state.timestamps.length > 0 ? windowMs - (now - state.timestamps[0]) : windowMs
+      };
+    }
+    const oldestInWindow = state.timestamps[0];
+    const resetMs = windowMs - (now - oldestInWindow);
+    return { allowed: false, remaining: 0, resetMs };
+  }
+};
+var FixedWindowCounter = class {
+  windows = /* @__PURE__ */ new Map();
+  tryConsume(ip, maxRequests, windowMs) {
+    const now = Date.now();
+    let state = this.windows.get(ip);
+    if (!state || now - state.windowStart >= windowMs) {
+      state = { count: 0, windowStart: now };
+      this.windows.set(ip, state);
+    }
+    const resetMs = windowMs - (now - state.windowStart);
+    if (state.count < maxRequests) {
+      state.count++;
+      return { allowed: true, remaining: maxRequests - state.count, resetMs };
+    }
+    return { allowed: false, remaining: 0, resetMs };
+  }
+};
+var RateLimiterService = class {
+  tokenBucket = new TokenBucket();
+  slidingWindow = new SlidingWindowLog();
+  fixedWindow = new FixedWindowCounter();
+  globalWindow = new FixedWindowCounter();
+  config;
+  _rateLimitHits = 0;
+  constructor(config) {
+    this.config = config;
+  }
+  get rateLimitHits() {
+    return this._rateLimitHits;
+  }
+  checkLimit(ip, tier) {
+    const globalResult = this.globalWindow.tryConsume(
+      "__global__",
+      this.config.globalLimit.maxRequests,
+      this.config.globalLimit.windowMs
+    );
+    if (!globalResult.allowed) {
+      this._rateLimitHits++;
+      return { allowed: false, remaining: 0, resetMs: globalResult.resetMs, limit: this.config.globalLimit.maxRequests };
+    }
+    const tierConfig = this.config.tiers[tier] || this.config.tiers[this.config.defaultTier];
+    if (!tierConfig || tierConfig.algorithm === "none") {
+      return { allowed: true, remaining: -1, resetMs: 0, limit: -1 };
+    }
+    let result;
+    switch (tierConfig.algorithm) {
+      case "tokenBucket":
+        result = this.tokenBucket.tryConsume(
+          ip,
+          tierConfig.maxRequests,
+          tierConfig.refillRate || 1
+        );
+        break;
+      case "slidingWindow":
+        result = this.slidingWindow.tryConsume(
+          ip,
+          tierConfig.maxRequests,
+          tierConfig.windowMs
+        );
+        break;
+      case "fixedWindow":
+        result = this.fixedWindow.tryConsume(
+          ip,
+          tierConfig.maxRequests,
+          tierConfig.windowMs
+        );
+        break;
+      default:
+        return { allowed: true, remaining: -1, resetMs: 0, limit: -1 };
+    }
+    if (!result.allowed) {
+      this._rateLimitHits++;
+    }
+    return { ...result, limit: tierConfig.maxRequests };
+  }
+  getConfig() {
+    return this.config;
+  }
+};
+
+// src/backend/services/AnalyticsService.ts
+var MAX_LOG_SIZE = 1e4;
+var ACTIVE_WINDOW_MS = 3e5;
+var AnalyticsService = class {
+  logs = [];
+  head = 0;
+  count = 0;
+  addLog(log) {
+    if (this.count < MAX_LOG_SIZE) {
+      this.logs.push(log);
+      this.count++;
+    } else {
+      this.logs[this.head] = log;
+      this.head = (this.head + 1) % MAX_LOG_SIZE;
+    }
+  }
+  getRecentLogs(limit = 20, offset = 0) {
+    const ordered = this.getOrderedLogs();
+    return ordered.slice(offset, offset + limit);
+  }
+  getAnalytics(rateLimitHits) {
+    const now = Date.now();
+    const oneMinuteAgo = now - 6e4;
+    const activeWindowStart = now - ACTIVE_WINDOW_MS;
+    const ordered = this.getOrderedLogs();
+    const recentLogs = ordered.filter((l) => l.timestamp > oneMinuteAgo);
+    const requestsPerMinute = recentLogs.length;
+    const endpointCounts = /* @__PURE__ */ new Map();
+    for (const log of ordered) {
+      const current = endpointCounts.get(log.path) || 0;
+      endpointCounts.set(log.path, current + 1);
+    }
+    const topEndpoints = Array.from(endpointCounts.entries()).map(([path, count]) => ({ path, count })).sort((a, b) => b.count - a.count).slice(0, 5);
+    const errorCount = ordered.filter((l) => l.statusCode >= 400).length;
+    const errorRate = this.count > 0 ? errorCount / this.count * 100 : 0;
+    const totalResponseTime = ordered.reduce((sum, l) => sum + l.responseTime, 0);
+    const avgResponseTime = this.count > 0 ? totalResponseTime / this.count : 0;
+    const activeLogs = ordered.filter((l) => l.timestamp > activeWindowStart);
+    const uniqueIps = new Set(activeLogs.map((l) => l.ip));
+    const keyUsePairs = /* @__PURE__ */ new Set();
+    for (const log of activeLogs) {
+      if (log.apiKey) {
+        keyUsePairs.add(`${log.ip}::${log.apiKey}`);
+      }
+    }
+    return {
+      totalRequests: this.count,
+      requestsPerMinute,
+      topEndpoints,
+      errorRate: Math.round(errorRate * 100) / 100,
+      avgResponseTime: Math.round(avgResponseTime * 100) / 100,
+      activeClients: uniqueIps.size,
+      activeKeyUses: keyUsePairs.size,
+      rateLimitHits
+    };
+  }
+  getOrderedLogs() {
+    if (this.count < MAX_LOG_SIZE) {
+      return [...this.logs].reverse();
+    }
+    const tail = this.logs.slice(0, this.head);
+    const headPart = this.logs.slice(this.head);
+    return [...headPart, ...tail].reverse();
+  }
+};
+
+// src/config/defaults.ts
+var DEFAULT_RATE_LIMIT_CONFIG = {
+  tiers: {
+    free: { algorithm: "tokenBucket", maxRequests: 100, windowMs: 6e4, refillRate: 10 },
+    pro: { algorithm: "slidingWindow", maxRequests: 1e3, windowMs: 6e4 },
+    unlimited: { algorithm: "none" }
+  },
+  defaultTier: "free",
+  globalLimit: { maxRequests: 1e4, windowMs: 6e4 }
+};
+var DEFAULT_IP_RULES = {
+  allowlist: [],
+  blocklist: [],
+  mode: "blocklist"
+};
+var DEFAULT_API_KEYS = {
+  keys: []
+};
+
+// src/backend/middleware/apiKeyAuth.ts
+function createApiKeyAuth(getKeys) {
+  return function apiKeyAuth(req, res, next) {
+    const apiKey = req.header("X-API-Key") || req.query.apiKey;
+    if (!apiKey) {
+      req.clientId = req.ip || "unknown";
+      req.tier = "free";
+      next();
+      return;
+    }
+    const config = getKeys();
+    const keyEntry = config.keys.find((k) => k.key === apiKey && k.active);
+    if (!keyEntry) {
+      res.status(401).json({ error: "Invalid or revoked API key" });
+      return;
+    }
+    req.clientId = keyEntry.id;
+    req.tier = keyEntry.tier;
+    req.apiKeyValue = keyEntry.key;
+    next();
+  };
+}
+
+// src/backend/middleware/ipFilter.ts
+function createIpFilter(getRules) {
+  return function ipFilter(req, res, next) {
+    const rules = getRules();
+    const clientIp = req.ip || req.socket.remoteAddress || "unknown";
+    if (rules.mode === "allowlist" && rules.allowlist.length > 0) {
+      if (!rules.allowlist.includes(clientIp)) {
+        res.status(403).json({ error: "IP not in allowlist" });
+        return;
+      }
+    }
+    if (rules.mode === "blocklist" && rules.blocklist.length > 0) {
+      if (rules.blocklist.includes(clientIp)) {
+        res.status(403).json({ error: "IP is blocked" });
+        return;
+      }
+    }
+    next();
+  };
+}
+
+// src/backend/middleware/rateLimiter.ts
+function createRateLimiter(service) {
+  return function rateLimiter(req, res, next) {
+    const ip = req.ip || req.socket.remoteAddress || "unknown";
+    const tier = req.tier || "free";
+    const result = service.checkLimit(ip, tier);
+    if (result.limit > 0) {
+      res.setHeader("X-RateLimit-Limit", result.limit);
+      res.setHeader("X-RateLimit-Remaining", Math.max(0, result.remaining));
+      res.setHeader("X-RateLimit-Reset", Math.ceil(result.resetMs / 1e3));
+    }
+    if (!result.allowed) {
+      res.status(429).json({
+        error: "Rate limit exceeded",
+        retryAfter: Math.ceil(result.resetMs / 1e3)
+      });
+      return;
+    }
+    next();
+  };
+}
+
+// src/backend/middleware/requestLogger.ts
+function createRequestLogger(analytics) {
+  return function requestLogger(req, res, next) {
+    const start = Date.now();
+    res.on("finish", () => {
+      const responseTime = Date.now() - start;
+      analytics.addLog({
+        timestamp: Date.now(),
+        method: req.method,
+        path: req.originalUrl,
+        statusCode: res.statusCode,
+        responseTime,
+        clientId: req.clientId || req.ip || "unknown",
+        ip: req.ip || req.socket.remoteAddress || "unknown",
+        apiKey: req.apiKeyValue || void 0
+      });
+    });
+    next();
+  };
+}
+
+// src/backend/middleware/gateway.ts
+function createGatewayMiddleware(userConfig) {
+  const config = {
+    rateLimits: userConfig?.rateLimits ?? DEFAULT_RATE_LIMIT_CONFIG,
+    ipRules: userConfig?.ipRules ?? DEFAULT_IP_RULES,
+    apiKeys: userConfig?.apiKeys ?? DEFAULT_API_KEYS
+  };
+  const rateLimiterService = new RateLimiterService(config.rateLimits);
+  const analyticsService = new AnalyticsService();
+  const router = (0, import_express.Router)();
+  router.use(createRequestLogger(analyticsService));
+  router.use(createApiKeyAuth(() => config.apiKeys));
+  router.use(createIpFilter(() => config.ipRules));
+  router.use(createRateLimiter(rateLimiterService));
+  return {
+    rateLimiterService,
+    analyticsService,
+    middleware: router,
+    config
+  };
+}
+
+// src/backend/routes/gateway.ts
+var import_express2 = require("express");
+var import_crypto = __toESM(require("crypto"));
+function createGatewayRoutes(options) {
+  const { rateLimiterService, analyticsService, config } = options;
+  const router = (0, import_express2.Router)();
+  router.get("/analytics", (_req, res) => {
+    const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);
+    res.json(analytics);
+  });
+  router.get("/analytics/live", (_req, res) => {
+    res.setHeader("Content-Type", "text/event-stream");
+    res.setHeader("Cache-Control", "no-cache");
+    res.setHeader("Connection", "keep-alive");
+    res.setHeader("X-Accel-Buffering", "no");
+    res.setHeader("Access-Control-Allow-Origin", "*");
+    res.flushHeaders();
+    const send = () => {
+      const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);
+      res.write(`data: ${JSON.stringify(analytics)}
+
+`);
+    };
+    send();
+    const interval = setInterval(send, 5e3);
+    _req.on("close", () => {
+      clearInterval(interval);
+    });
+  });
+  router.get("/config", (_req, res) => {
+    const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);
+    res.json({
+      rateLimits: config.rateLimits,
+      ipRules: config.ipRules,
+      activeKeys: config.apiKeys.keys.filter((k) => k.active).length,
+      activeKeyUses: analytics.activeKeyUses
+    });
+  });
+  router.post("/keys", (req, res) => {
+    const { name, tier } = req.body;
+    if (!name) {
+      res.status(400).json({ error: "Name is required" });
+      return;
+    }
+    const newKey = {
+      id: `key_${String(config.apiKeys.keys.length + 1).padStart(3, "0")}`,
+      key: `gw_live_${import_crypto.default.randomBytes(16).toString("hex")}`,
+      name,
+      tier: tier || "free",
+      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+      active: true
+    };
+    config.apiKeys.keys.push(newKey);
+    res.status(201).json(newKey);
+  });
+  router.delete("/keys/:keyId", (req, res) => {
+    const { keyId } = req.params;
+    const key = config.apiKeys.keys.find((k) => k.id === keyId);
+    if (!key) {
+      res.status(404).json({ error: "API key not found" });
+      return;
+    }
+    key.active = false;
+    res.json({ message: "API key revoked", id: keyId });
+  });
+  router.get("/logs", (req, res) => {
+    const limit = parseInt(req.query.limit) || 20;
+    const offset = parseInt(req.query.offset) || 0;
+    const logs = analyticsService.getRecentLogs(limit, offset);
+    res.json({ logs, limit, offset });
+  });
+  return router;
+}
+
+// src/frontend/GatewayDashboard.tsx
+var import_react = require("react");
+var import_recharts = require("recharts");
+var import_jsx_runtime = require("react/jsx-runtime");
+function useGatewayApi(apiBaseUrl, path) {
+  const [data, setData] = (0, import_react.useState)(null);
+  (0, import_react.useEffect)(() => {
+    fetch(`${apiBaseUrl}${path}`).then((r) => r.json()).then(setData).catch(() => {
+    });
+  }, [apiBaseUrl, path]);
+  return { data };
+}
+function GatewayDashboard({ apiBaseUrl }) {
+  const [analytics, setAnalytics] = (0, import_react.useState)(null);
+  const [rpmHistory, setRpmHistory] = (0, import_react.useState)([]);
+  const { data: config } = useGatewayApi(apiBaseUrl, "/gateway/config");
+  const { data: logsData } = useGatewayApi(apiBaseUrl, "/gateway/logs?limit=20");
+  const eventSourceRef = (0, import_react.useRef)(null);
+  (0, import_react.useEffect)(() => {
+    const es = new EventSource(`${apiBaseUrl}/gateway/analytics/live`);
+    eventSourceRef.current = es;
+    es.onmessage = (event) => {
+      const data = JSON.parse(event.data);
+      setAnalytics(data);
+      setRpmHistory((prev) => {
+        const next = [
+          ...prev,
+          { time: (/* @__PURE__ */ new Date()).toLocaleTimeString(), rpm: data.requestsPerMinute }
+        ];
+        return next.slice(-20);
+      });
+    };
+    return () => {
+      es.close();
+    };
+  }, [apiBaseUrl]);
+  const getMethodClass = (method) => {
+    switch (method) {
+      case "GET":
+        return "gw-method-get";
+      case "POST":
+        return "gw-method-post";
+      case "DELETE":
+        return "gw-method-delete";
+      default:
+        return "gw-method-get";
+    }
+  };
+  const getStatusClass = (code) => {
+    if (code === 429) return "gw-status-rate-limit";
+    if (code >= 400) return "gw-status-error";
+    return "gw-status-ok";
+  };
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-dashboard", children: [
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-header", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h1", { children: "API Gateway Dashboard" }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", { children: "Real-time monitoring for the API gateway and rate limiter" }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-status-badge", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-status-dot" }),
+        "Live"
+      ] })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stats-grid", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stat-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-label", children: "Total Requests" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-value", children: analytics?.totalRequests ?? 0 })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stat-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-label", children: "Requests / Min" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-value gw-accent", children: analytics?.requestsPerMinute ?? 0 })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stat-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-label", children: "Error Rate" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: `gw-stat-value ${analytics && analytics.errorRate > 5 ? "gw-danger" : ""}`, children: [
+          analytics?.errorRate ?? 0,
+          "%"
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stat-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-label", children: "Avg Response Time" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stat-value", children: [
+          analytics?.avgResponseTime ?? 0,
+          "ms"
+        ] })
+      ] })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stats-grid", style: { marginBottom: 32 }, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stat-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-label", children: "Rate Limit Hits" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-value gw-warning", children: analytics?.rateLimitHits ?? 0 })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stat-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-label", children: "Active IPs" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-value", children: analytics?.activeClients ?? 0 })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stat-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-label", children: "Active Key Sessions" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-value", children: analytics?.activeKeyUses ?? 0 })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-stat-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-label", children: "Rate Limit Tiers" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-stat-value", children: config ? Object.keys(config.rateLimits.tiers).length : 0 })
+      ] })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-charts-row", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-chart-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-chart-title", children: "Requests Per Minute" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_recharts.ResponsiveContainer, { width: "100%", height: 250, children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_recharts.LineChart, { data: rpmHistory, children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_recharts.CartesianGrid, { strokeDasharray: "3 3", stroke: "var(--gw-border, #2a2a2a)" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_recharts.XAxis, { dataKey: "time", tick: { fill: "var(--gw-text-muted, #888)", fontSize: 11 } }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_recharts.YAxis, { tick: { fill: "var(--gw-text-muted, #888)", fontSize: 11 } }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            import_recharts.Tooltip,
+            {
+              contentStyle: { background: "var(--gw-bg-card, #1a1a1a)", border: "1px solid var(--gw-border, #2a2a2a)", borderRadius: 8 },
+              labelStyle: { color: "var(--gw-text-muted, #888)" }
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+            import_recharts.Line,
+            {
+              type: "monotone",
+              dataKey: "rpm",
+              stroke: "var(--gw-accent, #64ffda)",
+              strokeWidth: 2,
+              dot: false,
+              activeDot: { r: 4, fill: "var(--gw-accent, #64ffda)" }
+            }
+          )
+        ] }) })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-chart-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-chart-title", children: "Top Endpoints" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_recharts.ResponsiveContainer, { width: "100%", height: 250, children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(
+          import_recharts.BarChart,
+          {
+            data: analytics?.topEndpoints ?? [],
+            layout: "vertical",
+            children: [
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_recharts.CartesianGrid, { strokeDasharray: "3 3", stroke: "var(--gw-border, #2a2a2a)" }),
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_recharts.XAxis, { type: "number", tick: { fill: "var(--gw-text-muted, #888)", fontSize: 11 } }),
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+                import_recharts.YAxis,
+                {
+                  dataKey: "path",
+                  type: "category",
+                  tick: { fill: "var(--gw-text-muted, #888)", fontSize: 10 },
+                  width: 120
+                }
+              ),
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+                import_recharts.Tooltip,
+                {
+                  contentStyle: { background: "var(--gw-bg-card, #1a1a1a)", border: "1px solid var(--gw-border, #2a2a2a)", borderRadius: 8 }
+                }
+              ),
+              /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_recharts.Bar, { dataKey: "count", fill: "var(--gw-accent, #64ffda)", radius: [0, 4, 4, 0] })
+            ]
+          }
+        ) })
+      ] })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-logs-section", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "gw-logs-title", children: "Recent Requests" }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("table", { className: "gw-logs-table", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("thead", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("tr", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "Time" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "Method" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "Path" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "Status" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "Duration" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "IP" })
+        ] }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("tbody", { children: [
+          (logsData?.logs ?? []).map((log, i) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("tr", { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { children: new Date(log.timestamp).toLocaleTimeString() }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: `gw-method-badge ${getMethodClass(log.method)}`, children: log.method }) }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { children: log.path }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { className: getStatusClass(log.statusCode), children: log.statusCode }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("td", { children: [
+              log.responseTime,
+              "ms"
+            ] }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { children: log.ip })
+          ] }, i)),
+          (!logsData?.logs || logsData.logs.length === 0) && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("tr", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { colSpan: 6, style: { textAlign: "center", color: "var(--gw-text-muted, #666)" }, children: "No requests logged yet. Make some API calls to see data here." }) })
+        ] })
+      ] })
+    ] }),
+    config && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-config-section", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-config-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h3", { children: "Rate Limit Tiers" }),
+        Object.entries(config.rateLimits.tiers).map(([name, tier]) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-tier-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-name", children: name }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-detail", children: tier.algorithm === "none" ? "unlimited" : `${tier.maxRequests} req / ${(tier.windowMs || 6e4) / 1e3}s` })
+        ] }, name))
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-config-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h3", { children: "IP Rules" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-tier-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-name", children: "Mode" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-detail", children: config.ipRules.mode })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-tier-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-name", children: "Allowlist" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-detail", children: config.ipRules.allowlist.length === 0 ? "empty" : config.ipRules.allowlist.length + " IPs" })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-tier-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-name", children: "Blocklist" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-detail", children: config.ipRules.blocklist.length === 0 ? "empty" : config.ipRules.blocklist.length + " IPs" })
+        ] })
+      ] }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-config-card", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h3", { children: "Global Limit" }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-tier-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-name", children: "Max Requests" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { className: "gw-tier-detail", children: [
+            config.rateLimits.globalLimit.maxRequests,
+            " / ",
+            config.rateLimits.globalLimit.windowMs / 1e3,
+            "s"
+          ] })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-tier-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-name", children: "Default Tier" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-detail", children: config.rateLimits.defaultTier })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-tier-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-name", children: "Active Keys" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-detail", children: config.activeKeys })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "gw-tier-item", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-name", children: "Active Key Sessions" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: "gw-tier-detail", children: config.activeKeyUses })
+        ] })
+      ] })
+    ] })
+  ] });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AnalyticsService,
+  DEFAULT_API_KEYS,
+  DEFAULT_IP_RULES,
+  DEFAULT_RATE_LIMIT_CONFIG,
+  GatewayDashboard,
+  RateLimiterService,
+  createApiKeyAuth,
+  createGatewayMiddleware,
+  createGatewayRoutes,
+  createIpFilter,
+  createRateLimiter,
+  createRequestLogger
+});
+//# sourceMappingURL=index.js.map