@gagandeep023/api-gateway 0.2.0 → 0.3.1

package/dist/backend/index.js

@@ -326,6 +326,7 @@ function createRequestLogger(analytics) {
     const start = Date.now();
     res.on("finish", () => {
       const responseTime = Date.now() - start;
+      const apiKeyValue = req.apiKeyValue || void 0;
       analytics.addLog({
         timestamp: Date.now(),
         method: req.method,
@@ -334,7 +335,8 @@ function createRequestLogger(analytics) {
         responseTime,
         clientId: req.clientId || req.ip || "unknown",
         ip: req.ip || req.socket.remoteAddress || "unknown",
-        apiKey: req.apiKeyValue || void 0
+        apiKey: apiKeyValue,
+        authenticated: !!apiKeyValue
       });
     });
     next();
@@ -378,7 +380,6 @@ function createGatewayRoutes(options) {
     res.setHeader("Cache-Control", "no-cache");
     res.setHeader("Connection", "keep-alive");
     res.setHeader("X-Accel-Buffering", "no");
-    res.setHeader("Access-Control-Allow-Origin", "*");
     res.flushHeaders();
     const send = () => {
       const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);

package/dist/backend/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/backend/index.ts","../../src/backend/middleware/gateway.ts","../../src/backend/services/RateLimiterService.ts","../../src/backend/services/AnalyticsService.ts","../../src/config/defaults.ts","../../src/backend/middleware/apiKeyAuth.ts","../../src/backend/middleware/ipFilter.ts","../../src/backend/middleware/rateLimiter.ts","../../src/backend/middleware/requestLogger.ts","../../src/backend/routes/gateway.ts"],"sourcesContent":["export { createGatewayMiddleware } from './middleware/gateway';\nexport type { GatewayInstances } from './middleware/gateway';\nexport { createGatewayRoutes } from './routes/gateway';\nexport type { GatewayRoutesOptions } from './routes/gateway';\nexport { RateLimiterService } from './services/RateLimiterService';\nexport { AnalyticsService } from './services/AnalyticsService';\nexport { createApiKeyAuth } from './middleware/apiKeyAuth';\nexport { createIpFilter } from './middleware/ipFilter';\nexport { createRateLimiter } from './middleware/rateLimiter';\nexport { createRequestLogger } from './middleware/requestLogger';\n","import { Router } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\nimport { AnalyticsService } from '../services/AnalyticsService';\nimport type { GatewayMiddlewareConfig } from '../../types';\nimport { DEFAULT_RATE_LIMIT_CONFIG, DEFAULT_IP_RULES, DEFAULT_API_KEYS } from '../../config/defaults';\nimport { createApiKeyAuth } from './apiKeyAuth';\nimport { createIpFilter } from './ipFilter';\nimport { createRateLimiter } from './rateLimiter';\nimport { createRequestLogger } from './requestLogger';\n\nexport interface GatewayInstances {\n  rateLimiterService: RateLimiterService;\n  analyticsService: AnalyticsService;\n  middleware: Router;\n  config: Required<GatewayMiddlewareConfig>;\n}\n\nexport function createGatewayMiddleware(userConfig?: GatewayMiddlewareConfig): GatewayInstances {\n  const config: Required<GatewayMiddlewareConfig> = {\n    rateLimits: userConfig?.rateLimits ?? DEFAULT_RATE_LIMIT_CONFIG,\n    ipRules: userConfig?.ipRules ?? DEFAULT_IP_RULES,\n    apiKeys: userConfig?.apiKeys ?? DEFAULT_API_KEYS,\n  };\n\n  const rateLimiterService = new RateLimiterService(config.rateLimits);\n  const analyticsService = new AnalyticsService();\n\n  const router = Router();\n  router.use(createRequestLogger(analyticsService));\n  router.use(createApiKeyAuth(() => config.apiKeys));\n  router.use(createIpFilter(() => config.ipRules));\n  router.use(createRateLimiter(rateLimiterService));\n\n  return {\n    rateLimiterService,\n    analyticsService,\n    middleware: router,\n    config,\n  };\n}\n","import type { BucketState, SlidingWindowState, FixedWindowState, TierConfig, RateLimitConfig } from '../../types';\n\nclass TokenBucket {\n  private buckets = new Map<string, BucketState>();\n\n  tryConsume(ip: string, maxTokens: number, refillRate: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let bucket = this.buckets.get(ip);\n\n    if (!bucket) {\n      bucket = { tokens: maxTokens, lastRefill: now };\n      this.buckets.set(ip, bucket);\n    }\n\n    const elapsed = (now - bucket.lastRefill) / 1000;\n    bucket.tokens = Math.min(maxTokens, bucket.tokens + elapsed * refillRate);\n    bucket.lastRefill = now;\n\n    if (bucket.tokens >= 1) {\n      bucket.tokens -= 1;\n      const resetMs = bucket.tokens <= 0 ? Math.ceil((1 / refillRate) * 1000) : 0;\n      return { allowed: true, remaining: Math.floor(bucket.tokens), resetMs };\n    }\n\n    const resetMs = Math.ceil(((1 - bucket.tokens) / refillRate) * 1000);\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nclass SlidingWindowLog {\n  private windows = new Map<string, SlidingWindowState>();\n\n  tryConsume(ip: string, maxRequests: number, windowMs: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let state = this.windows.get(ip);\n\n    if (!state) {\n      state = { timestamps: [] };\n      this.windows.set(ip, state);\n    }\n\n    state.timestamps = state.timestamps.filter(t => now - t < windowMs);\n\n    if (state.timestamps.length < maxRequests) {\n      state.timestamps.push(now);\n      return {\n        allowed: true,\n        remaining: maxRequests - state.timestamps.length,\n        resetMs: state.timestamps.length > 0 ? windowMs - (now - state.timestamps[0]) : windowMs,\n      };\n    }\n\n    const oldestInWindow = state.timestamps[0];\n    const resetMs = windowMs - (now - oldestInWindow);\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nclass FixedWindowCounter {\n  private windows = new Map<string, FixedWindowState>();\n\n  tryConsume(ip: string, maxRequests: number, windowMs: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let state = this.windows.get(ip);\n\n    if (!state || now - state.windowStart >= windowMs) {\n      state = { count: 0, windowStart: now };\n      this.windows.set(ip, state);\n    }\n\n    const resetMs = windowMs - (now - state.windowStart);\n\n    if (state.count < maxRequests) {\n      state.count++;\n      return { allowed: true, remaining: maxRequests - state.count, resetMs };\n    }\n\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nexport class RateLimiterService {\n  private tokenBucket = new TokenBucket();\n  private slidingWindow = new SlidingWindowLog();\n  private fixedWindow = new FixedWindowCounter();\n  private globalWindow = new FixedWindowCounter();\n  private config: RateLimitConfig;\n  private _rateLimitHits = 0;\n\n  constructor(config: RateLimitConfig) {\n    this.config = config;\n  }\n\n  get rateLimitHits(): number {\n    return this._rateLimitHits;\n  }\n\n  checkLimit(ip: string, tier: string): { allowed: boolean; remaining: number; resetMs: number; limit: number } {\n    const globalResult = this.globalWindow.tryConsume(\n      '__global__',\n      this.config.globalLimit.maxRequests,\n      this.config.globalLimit.windowMs\n    );\n\n    if (!globalResult.allowed) {\n      this._rateLimitHits++;\n      return { allowed: false, remaining: 0, resetMs: globalResult.resetMs, limit: this.config.globalLimit.maxRequests };\n    }\n\n    const tierConfig = this.config.tiers[tier] || this.config.tiers[this.config.defaultTier];\n\n    if (!tierConfig || tierConfig.algorithm === 'none') {\n      return { allowed: true, remaining: -1, resetMs: 0, limit: -1 };\n    }\n\n    let result: { allowed: boolean; remaining: number; resetMs: number };\n\n    switch (tierConfig.algorithm) {\n      case 'tokenBucket':\n        result = this.tokenBucket.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.refillRate || 1\n        );\n        break;\n      case 'slidingWindow':\n        result = this.slidingWindow.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.windowMs!\n        );\n        break;\n      case 'fixedWindow':\n        result = this.fixedWindow.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.windowMs!\n        );\n        break;\n      default:\n        return { allowed: true, remaining: -1, resetMs: 0, limit: -1 };\n    }\n\n    if (!result.allowed) {\n      this._rateLimitHits++;\n    }\n\n    return { ...result, limit: tierConfig.maxRequests! };\n  }\n\n  getConfig(): RateLimitConfig {\n    return this.config;\n  }\n}\n","import type { RequestLog, GatewayAnalytics } from '../../types';\n\nconst MAX_LOG_SIZE = 10000;\nconst ACTIVE_WINDOW_MS = 300000; // 5 minutes\n\nexport class AnalyticsService {\n  private logs: RequestLog[] = [];\n  private head = 0;\n  private count = 0;\n\n  addLog(log: RequestLog): void {\n    if (this.count < MAX_LOG_SIZE) {\n      this.logs.push(log);\n      this.count++;\n    } else {\n      this.logs[this.head] = log;\n      this.head = (this.head + 1) % MAX_LOG_SIZE;\n    }\n  }\n\n  getRecentLogs(limit = 20, offset = 0): RequestLog[] {\n    const ordered = this.getOrderedLogs();\n    return ordered.slice(offset, offset + limit);\n  }\n\n  getAnalytics(rateLimitHits: number): GatewayAnalytics {\n    const now = Date.now();\n    const oneMinuteAgo = now - 60000;\n    const activeWindowStart = now - ACTIVE_WINDOW_MS;\n    const ordered = this.getOrderedLogs();\n\n    const recentLogs = ordered.filter(l => l.timestamp > oneMinuteAgo);\n    const requestsPerMinute = recentLogs.length;\n\n    // Top endpoints\n    const endpointCounts = new Map<string, number>();\n    for (const log of ordered) {\n      const current = endpointCounts.get(log.path) || 0;\n      endpointCounts.set(log.path, current + 1);\n    }\n    const topEndpoints = Array.from(endpointCounts.entries())\n      .map(([path, count]) => ({ path, count }))\n      .sort((a, b) => b.count - a.count)\n      .slice(0, 5);\n\n    // Error rate\n    const errorCount = ordered.filter(l => l.statusCode >= 400).length;\n    const errorRate = this.count > 0 ? (errorCount / this.count) * 100 : 0;\n\n    // Average response time\n    const totalResponseTime = ordered.reduce((sum, l) => sum + l.responseTime, 0);\n    const avgResponseTime = this.count > 0 ? totalResponseTime / this.count : 0;\n\n    // Active clients: unique IPs in last 5 minutes\n    const activeLogs = ordered.filter(l => l.timestamp > activeWindowStart);\n    const uniqueIps = new Set(activeLogs.map(l => l.ip));\n\n    // Active key uses: unique (IP + apiKey) pairs in last 5 minutes\n    const keyUsePairs = new Set<string>();\n    for (const log of activeLogs) {\n      if (log.apiKey) {\n        keyUsePairs.add(`${log.ip}::${log.apiKey}`);\n      }\n    }\n\n    return {\n      totalRequests: this.count,\n      requestsPerMinute,\n      topEndpoints,\n      errorRate: Math.round(errorRate * 100) / 100,\n      avgResponseTime: Math.round(avgResponseTime * 100) / 100,\n      activeClients: uniqueIps.size,\n      activeKeyUses: keyUsePairs.size,\n      rateLimitHits,\n    };\n  }\n\n  private getOrderedLogs(): RequestLog[] {\n    if (this.count < MAX_LOG_SIZE) {\n      return [...this.logs].reverse();\n    }\n    const tail = this.logs.slice(0, this.head);\n    const headPart = this.logs.slice(this.head);\n    return [...headPart, ...tail].reverse();\n  }\n}\n","import type { RateLimitConfig, IpRules, ApiKeysConfig } from '../types';\n\nexport const DEFAULT_RATE_LIMIT_CONFIG: RateLimitConfig = {\n  tiers: {\n    free: { algorithm: 'tokenBucket', maxRequests: 100, windowMs: 60000, refillRate: 10 },\n    pro: { algorithm: 'slidingWindow', maxRequests: 1000, windowMs: 60000 },\n    unlimited: { algorithm: 'none' },\n  },\n  defaultTier: 'free',\n  globalLimit: { maxRequests: 10000, windowMs: 60000 },\n};\n\nexport const DEFAULT_IP_RULES: IpRules = {\n  allowlist: [],\n  blocklist: [],\n  mode: 'blocklist',\n};\n\nexport const DEFAULT_API_KEYS: ApiKeysConfig = {\n  keys: [],\n};\n","import { Request, Response, NextFunction } from 'express';\nimport type { ApiKeysConfig } from '../../types';\n\nexport function createApiKeyAuth(getKeys: () => ApiKeysConfig) {\n  return function apiKeyAuth(req: Request, res: Response, next: NextFunction): void {\n    const apiKey = req.header('X-API-Key') || req.query.apiKey as string;\n\n    if (!apiKey) {\n      (req as any).clientId = req.ip || 'unknown';\n      (req as any).tier = 'free';\n      next();\n      return;\n    }\n\n    const config = getKeys();\n    const keyEntry = config.keys.find(k => k.key === apiKey && k.active);\n\n    if (!keyEntry) {\n      res.status(401).json({ error: 'Invalid or revoked API key' });\n      return;\n    }\n\n    (req as any).clientId = keyEntry.id;\n    (req as any).tier = keyEntry.tier;\n    (req as any).apiKeyValue = keyEntry.key;\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport type { IpRules } from '../../types';\n\nexport function createIpFilter(getRules: () => IpRules) {\n  return function ipFilter(req: Request, res: Response, next: NextFunction): void {\n    const rules = getRules();\n    const clientIp = req.ip || req.socket.remoteAddress || 'unknown';\n\n    if (rules.mode === 'allowlist' && rules.allowlist.length > 0) {\n      if (!rules.allowlist.includes(clientIp)) {\n        res.status(403).json({ error: 'IP not in allowlist' });\n        return;\n      }\n    }\n\n    if (rules.mode === 'blocklist' && rules.blocklist.length > 0) {\n      if (rules.blocklist.includes(clientIp)) {\n        res.status(403).json({ error: 'IP is blocked' });\n        return;\n      }\n    }\n\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\n\nexport function createRateLimiter(service: RateLimiterService) {\n  return function rateLimiter(req: Request, res: Response, next: NextFunction): void {\n    const ip = req.ip || req.socket.remoteAddress || 'unknown';\n    const tier = (req as any).tier || 'free';\n\n    const result = service.checkLimit(ip, tier);\n\n    if (result.limit > 0) {\n      res.setHeader('X-RateLimit-Limit', result.limit);\n      res.setHeader('X-RateLimit-Remaining', Math.max(0, result.remaining));\n      res.setHeader('X-RateLimit-Reset', Math.ceil(result.resetMs / 1000));\n    }\n\n    if (!result.allowed) {\n      res.status(429).json({\n        error: 'Rate limit exceeded',\n        retryAfter: Math.ceil(result.resetMs / 1000),\n      });\n      return;\n    }\n\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport { AnalyticsService } from '../services/AnalyticsService';\n\nexport function createRequestLogger(analytics: AnalyticsService) {\n  return function requestLogger(req: Request, res: Response, next: NextFunction): void {\n    const start = Date.now();\n\n    res.on('finish', () => {\n      const responseTime = Date.now() - start;\n      analytics.addLog({\n        timestamp: Date.now(),\n        method: req.method,\n        path: req.originalUrl,\n        statusCode: res.statusCode,\n        responseTime,\n        clientId: (req as any).clientId || req.ip || 'unknown',\n        ip: req.ip || req.socket.remoteAddress || 'unknown',\n        apiKey: (req as any).apiKeyValue || undefined,\n      });\n    });\n\n    next();\n  };\n}\n","import { Router, Request, Response } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\nimport { AnalyticsService } from '../services/AnalyticsService';\nimport type { ApiKeysConfig, GatewayMiddlewareConfig } from '../../types';\nimport crypto from 'crypto';\n\nexport interface GatewayRoutesOptions {\n  rateLimiterService: RateLimiterService;\n  analyticsService: AnalyticsService;\n  config: Required<GatewayMiddlewareConfig>;\n}\n\nexport function createGatewayRoutes(options: GatewayRoutesOptions): Router {\n  const { rateLimiterService, analyticsService, config } = options;\n  const router = Router();\n\n  // GET /analytics - Returns current analytics snapshot\n  router.get('/analytics', (_req: Request, res: Response) => {\n    const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n    res.json(analytics);\n  });\n\n  // GET /analytics/live - SSE stream pushing analytics every 5 seconds\n  router.get('/analytics/live', (_req: Request, res: Response) => {\n    res.setHeader('Content-Type', 'text/event-stream');\n    res.setHeader('Cache-Control', 'no-cache');\n    res.setHeader('Connection', 'keep-alive');\n    res.setHeader('X-Accel-Buffering', 'no');\n    res.setHeader('Access-Control-Allow-Origin', '*');\n    res.flushHeaders();\n\n    const send = (): void => {\n      const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n      res.write(`data: ${JSON.stringify(analytics)}\\n\\n`);\n    };\n\n    send();\n    const interval = setInterval(send, 5000);\n\n    _req.on('close', () => {\n      clearInterval(interval);\n    });\n  });\n\n  // GET /config - Returns current gateway config\n  router.get('/config', (_req: Request, res: Response) => {\n    const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n    res.json({\n      rateLimits: config.rateLimits,\n      ipRules: config.ipRules,\n      activeKeys: config.apiKeys.keys.filter(k => k.active).length,\n      activeKeyUses: analytics.activeKeyUses,\n    });\n  });\n\n  // POST /keys - Create a new API key\n  router.post('/keys', (req: Request, res: Response) => {\n    const { name, tier } = req.body;\n\n    if (!name) {\n      res.status(400).json({ error: 'Name is required' });\n      return;\n    }\n\n    const newKey = {\n      id: `key_${String(config.apiKeys.keys.length + 1).padStart(3, '0')}`,\n      key: `gw_live_${crypto.randomBytes(16).toString('hex')}`,\n      name,\n      tier: tier || 'free',\n      createdAt: new Date().toISOString(),\n      active: true,\n    };\n\n    config.apiKeys.keys.push(newKey);\n    res.status(201).json(newKey);\n  });\n\n  // DELETE /keys/:keyId - Revoke an API key\n  router.delete('/keys/:keyId', (req: Request, res: Response) => {\n    const { keyId } = req.params;\n    const key = config.apiKeys.keys.find(k => k.id === keyId);\n\n    if (!key) {\n      res.status(404).json({ error: 'API key not found' });\n      return;\n    }\n\n    key.active = false;\n    res.json({ message: 'API key revoked', id: keyId });\n  });\n\n  // GET /logs - Returns recent request logs (paginated)\n  router.get('/logs', (req: Request, res: Response) => {\n    const limit = parseInt(req.query.limit as string) || 20;\n    const offset = parseInt(req.query.offset as string) || 0;\n    const logs = analyticsService.getRecentLogs(limit, offset);\n    res.json({ logs, limit, offset });\n  });\n\n  return router;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,qBAAuB;;;ACEvB,IAAM,cAAN,MAAkB;AAAA,EACR,UAAU,oBAAI,IAAyB;AAAA,EAE/C,WAAW,IAAY,WAAmB,YAA8E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,SAAS,KAAK,QAAQ,IAAI,EAAE;AAEhC,QAAI,CAAC,QAAQ;AACX,eAAS,EAAE,QAAQ,WAAW,YAAY,IAAI;AAC9C,WAAK,QAAQ,IAAI,IAAI,MAAM;AAAA,IAC7B;AAEA,UAAM,WAAW,MAAM,OAAO,cAAc;AAC5C,WAAO,SAAS,KAAK,IAAI,WAAW,OAAO,SAAS,UAAU,UAAU;AACxE,WAAO,aAAa;AAEpB,QAAI,OAAO,UAAU,GAAG;AACtB,aAAO,UAAU;AACjB,YAAMA,WAAU,OAAO,UAAU,IAAI,KAAK,KAAM,IAAI,aAAc,GAAI,IAAI;AAC1E,aAAO,EAAE,SAAS,MAAM,WAAW,KAAK,MAAM,OAAO,MAAM,GAAG,SAAAA,SAAQ;AAAA,IACxE;AAEA,UAAM,UAAU,KAAK,MAAO,IAAI,OAAO,UAAU,aAAc,GAAI;AACnE,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEA,IAAM,mBAAN,MAAuB;AAAA,EACb,UAAU,oBAAI,IAAgC;AAAA,EAEtD,WAAW,IAAY,aAAqB,UAA4E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,QAAQ,KAAK,QAAQ,IAAI,EAAE;AAE/B,QAAI,CAAC,OAAO;AACV,cAAQ,EAAE,YAAY,CAAC,EAAE;AACzB,WAAK,QAAQ,IAAI,IAAI,KAAK;AAAA,IAC5B;AAEA,UAAM,aAAa,MAAM,WAAW,OAAO,OAAK,MAAM,IAAI,QAAQ;AAElE,QAAI,MAAM,WAAW,SAAS,aAAa;AACzC,YAAM,WAAW,KAAK,GAAG;AACzB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,WAAW,cAAc,MAAM,WAAW;AAAA,QAC1C,SAAS,MAAM,WAAW,SAAS,IAAI,YAAY,MAAM,MAAM,WAAW,CAAC,KAAK;AAAA,MAClF;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,WAAW,CAAC;AACzC,UAAM,UAAU,YAAY,MAAM;AAClC,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEA,IAAM,qBAAN,MAAyB;AAAA,EACf,UAAU,oBAAI,IAA8B;AAAA,EAEpD,WAAW,IAAY,aAAqB,UAA4E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,QAAQ,KAAK,QAAQ,IAAI,EAAE;AAE/B,QAAI,CAAC,SAAS,MAAM,MAAM,eAAe,UAAU;AACjD,cAAQ,EAAE,OAAO,GAAG,aAAa,IAAI;AACrC,WAAK,QAAQ,IAAI,IAAI,KAAK;AAAA,IAC5B;AAEA,UAAM,UAAU,YAAY,MAAM,MAAM;AAExC,QAAI,MAAM,QAAQ,aAAa;AAC7B,YAAM;AACN,aAAO,EAAE,SAAS,MAAM,WAAW,cAAc,MAAM,OAAO,QAAQ;AAAA,IACxE;AAEA,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEO,IAAM,qBAAN,MAAyB;AAAA,EACtB,cAAc,IAAI,YAAY;AAAA,EAC9B,gBAAgB,IAAI,iBAAiB;AAAA,EACrC,cAAc,IAAI,mBAAmB;AAAA,EACrC,eAAe,IAAI,mBAAmB;AAAA,EACtC;AAAA,EACA,iBAAiB;AAAA,EAEzB,YAAY,QAAyB;AACnC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAI,gBAAwB;AAC1B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,WAAW,IAAY,MAAuF;AAC5G,UAAM,eAAe,KAAK,aAAa;AAAA,MACrC;AAAA,MACA,KAAK,OAAO,YAAY;AAAA,MACxB,KAAK,OAAO,YAAY;AAAA,IAC1B;AAEA,QAAI,CAAC,aAAa,SAAS;AACzB,WAAK;AACL,aAAO,EAAE,SAAS,OAAO,WAAW,GAAG,SAAS,aAAa,SAAS,OAAO,KAAK,OAAO,YAAY,YAAY;AAAA,IACnH;AAEA,UAAM,aAAa,KAAK,OAAO,MAAM,IAAI,KAAK,KAAK,OAAO,MAAM,KAAK,OAAO,WAAW;AAEvF,QAAI,CAAC,cAAc,WAAW,cAAc,QAAQ;AAClD,aAAO,EAAE,SAAS,MAAM,WAAW,IAAI,SAAS,GAAG,OAAO,GAAG;AAAA,IAC/D;AAEA,QAAI;AAEJ,YAAQ,WAAW,WAAW;AAAA,MAC5B,KAAK;AACH,iBAAS,KAAK,YAAY;AAAA,UACxB;AAAA,UACA,WAAW;AAAA,UACX,WAAW,cAAc;AAAA,QAC3B;AACA;AAAA,MACF,KAAK;AACH,iBAAS,KAAK,cAAc;AAAA,UAC1B;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AACA;AAAA,MACF,KAAK;AACH,iBAAS,KAAK,YAAY;AAAA,UACxB;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AACA;AAAA,MACF;AACE,eAAO,EAAE,SAAS,MAAM,WAAW,IAAI,SAAS,GAAG,OAAO,GAAG;AAAA,IACjE;AAEA,QAAI,CAAC,OAAO,SAAS;AACnB,WAAK;AAAA,IACP;AAEA,WAAO,EAAE,GAAG,QAAQ,OAAO,WAAW,YAAa;AAAA,EACrD;AAAA,EAEA,YAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AACF;;;ACvJA,IAAM,eAAe;AACrB,IAAM,mBAAmB;AAElB,IAAM,mBAAN,MAAuB;AAAA,EACpB,OAAqB,CAAC;AAAA,EACtB,OAAO;AAAA,EACP,QAAQ;AAAA,EAEhB,OAAO,KAAuB;AAC5B,QAAI,KAAK,QAAQ,cAAc;AAC7B,WAAK,KAAK,KAAK,GAAG;AAClB,WAAK;AAAA,IACP,OAAO;AACL,WAAK,KAAK,KAAK,IAAI,IAAI;AACvB,WAAK,QAAQ,KAAK,OAAO,KAAK;AAAA,IAChC;AAAA,EACF;AAAA,EAEA,cAAc,QAAQ,IAAI,SAAS,GAAiB;AAClD,UAAM,UAAU,KAAK,eAAe;AACpC,WAAO,QAAQ,MAAM,QAAQ,SAAS,KAAK;AAAA,EAC7C;AAAA,EAEA,aAAa,eAAyC;AACpD,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,MAAM;AAC3B,UAAM,oBAAoB,MAAM;AAChC,UAAM,UAAU,KAAK,eAAe;AAEpC,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,YAAY,YAAY;AACjE,UAAM,oBAAoB,WAAW;AAGrC,UAAM,iBAAiB,oBAAI,IAAoB;AAC/C,eAAW,OAAO,SAAS;AACzB,YAAM,UAAU,eAAe,IAAI,IAAI,IAAI,KAAK;AAChD,qBAAe,IAAI,IAAI,MAAM,UAAU,CAAC;AAAA,IAC1C;AACA,UAAM,eAAe,MAAM,KAAK,eAAe,QAAQ,CAAC,EACrD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,MAAM,MAAM,EAAE,EACxC,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAChC,MAAM,GAAG,CAAC;AAGb,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,cAAc,GAAG,EAAE;AAC5D,UAAM,YAAY,KAAK,QAAQ,IAAK,aAAa,KAAK,QAAS,MAAM;AAGrE,UAAM,oBAAoB,QAAQ,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,cAAc,CAAC;AAC5E,UAAM,kBAAkB,KAAK,QAAQ,IAAI,oBAAoB,KAAK,QAAQ;AAG1E,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,YAAY,iBAAiB;AACtE,UAAM,YAAY,IAAI,IAAI,WAAW,IAAI,OAAK,EAAE,EAAE,CAAC;AAGnD,UAAM,cAAc,oBAAI,IAAY;AACpC,eAAW,OAAO,YAAY;AAC5B,UAAI,IAAI,QAAQ;AACd,oBAAY,IAAI,GAAG,IAAI,EAAE,KAAK,IAAI,MAAM,EAAE;AAAA,MAC5C;AAAA,IACF;AAEA,WAAO;AAAA,MACL,eAAe,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,WAAW,KAAK,MAAM,YAAY,GAAG,IAAI;AAAA,MACzC,iBAAiB,KAAK,MAAM,kBAAkB,GAAG,IAAI;AAAA,MACrD,eAAe,UAAU;AAAA,MACzB,eAAe,YAAY;AAAA,MAC3B;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,iBAA+B;AACrC,QAAI,KAAK,QAAQ,cAAc;AAC7B,aAAO,CAAC,GAAG,KAAK,IAAI,EAAE,QAAQ;AAAA,IAChC;AACA,UAAM,OAAO,KAAK,KAAK,MAAM,GAAG,KAAK,IAAI;AACzC,UAAM,WAAW,KAAK,KAAK,MAAM,KAAK,IAAI;AAC1C,WAAO,CAAC,GAAG,UAAU,GAAG,IAAI,EAAE,QAAQ;AAAA,EACxC;AACF;;;ACnFO,IAAM,4BAA6C;AAAA,EACxD,OAAO;AAAA,IACL,MAAM,EAAE,WAAW,eAAe,aAAa,KAAK,UAAU,KAAO,YAAY,GAAG;AAAA,IACpF,KAAK,EAAE,WAAW,iBAAiB,aAAa,KAAM,UAAU,IAAM;AAAA,IACtE,WAAW,EAAE,WAAW,OAAO;AAAA,EACjC;AAAA,EACA,aAAa;AAAA,EACb,aAAa,EAAE,aAAa,KAAO,UAAU,IAAM;AACrD;AAEO,IAAM,mBAA4B;AAAA,EACvC,WAAW,CAAC;AAAA,EACZ,WAAW,CAAC;AAAA,EACZ,MAAM;AACR;AAEO,IAAM,mBAAkC;AAAA,EAC7C,MAAM,CAAC;AACT;;;ACjBO,SAAS,iBAAiB,SAA8B;AAC7D,SAAO,SAAS,WAAW,KAAc,KAAe,MAA0B;AAChF,UAAM,SAAS,IAAI,OAAO,WAAW,KAAK,IAAI,MAAM;AAEpD,QAAI,CAAC,QAAQ;AACX,MAAC,IAAY,WAAW,IAAI,MAAM;AAClC,MAAC,IAAY,OAAO;AACpB,WAAK;AACL;AAAA,IACF;AAEA,UAAM,SAAS,QAAQ;AACvB,UAAM,WAAW,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,UAAU,EAAE,MAAM;AAEnE,QAAI,CAAC,UAAU;AACb,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,6BAA6B,CAAC;AAC5D;AAAA,IACF;AAEA,IAAC,IAAY,WAAW,SAAS;AACjC,IAAC,IAAY,OAAO,SAAS;AAC7B,IAAC,IAAY,cAAc,SAAS;AACpC,SAAK;AAAA,EACP;AACF;;;ACxBO,SAAS,eAAe,UAAyB;AACtD,SAAO,SAAS,SAAS,KAAc,KAAe,MAA0B;AAC9E,UAAM,QAAQ,SAAS;AACvB,UAAM,WAAW,IAAI,MAAM,IAAI,OAAO,iBAAiB;AAEvD,QAAI,MAAM,SAAS,eAAe,MAAM,UAAU,SAAS,GAAG;AAC5D,UAAI,CAAC,MAAM,UAAU,SAAS,QAAQ,GAAG;AACvC,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,sBAAsB,CAAC;AACrD;AAAA,MACF;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,eAAe,MAAM,UAAU,SAAS,GAAG;AAC5D,UAAI,MAAM,UAAU,SAAS,QAAQ,GAAG;AACtC,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,gBAAgB,CAAC;AAC/C;AAAA,MACF;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;;;ACrBO,SAAS,kBAAkB,SAA6B;AAC7D,SAAO,SAAS,YAAY,KAAc,KAAe,MAA0B;AACjF,UAAM,KAAK,IAAI,MAAM,IAAI,OAAO,iBAAiB;AACjD,UAAM,OAAQ,IAAY,QAAQ;AAElC,UAAM,SAAS,QAAQ,WAAW,IAAI,IAAI;AAE1C,QAAI,OAAO,QAAQ,GAAG;AACpB,UAAI,UAAU,qBAAqB,OAAO,KAAK;AAC/C,UAAI,UAAU,yBAAyB,KAAK,IAAI,GAAG,OAAO,SAAS,CAAC;AACpE,UAAI,UAAU,qBAAqB,KAAK,KAAK,OAAO,UAAU,GAAI,CAAC;AAAA,IACrE;AAEA,QAAI,CAAC,OAAO,SAAS;AACnB,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,OAAO;AAAA,QACP,YAAY,KAAK,KAAK,OAAO,UAAU,GAAI;AAAA,MAC7C,CAAC;AACD;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;;;ACvBO,SAAS,oBAAoB,WAA6B;AAC/D,SAAO,SAAS,cAAc,KAAc,KAAe,MAA0B;AACnF,UAAM,QAAQ,KAAK,IAAI;AAEvB,QAAI,GAAG,UAAU,MAAM;AACrB,YAAM,eAAe,KAAK,IAAI,IAAI;AAClC,gBAAU,OAAO;AAAA,QACf,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,MAAM,IAAI;AAAA,QACV,YAAY,IAAI;AAAA,QAChB;AAAA,QACA,UAAW,IAAY,YAAY,IAAI,MAAM;AAAA,QAC7C,IAAI,IAAI,MAAM,IAAI,OAAO,iBAAiB;AAAA,QAC1C,QAAS,IAAY,eAAe;AAAA,MACtC,CAAC;AAAA,IACH,CAAC;AAED,SAAK;AAAA,EACP;AACF;;;APNO,SAAS,wBAAwB,YAAwD;AAC9F,QAAM,SAA4C;AAAA,IAChD,YAAY,YAAY,cAAc;AAAA,IACtC,SAAS,YAAY,WAAW;AAAA,IAChC,SAAS,YAAY,WAAW;AAAA,EAClC;AAEA,QAAM,qBAAqB,IAAI,mBAAmB,OAAO,UAAU;AACnE,QAAM,mBAAmB,IAAI,iBAAiB;AAE9C,QAAM,aAAS,uBAAO;AACtB,SAAO,IAAI,oBAAoB,gBAAgB,CAAC;AAChD,SAAO,IAAI,iBAAiB,MAAM,OAAO,OAAO,CAAC;AACjD,SAAO,IAAI,eAAe,MAAM,OAAO,OAAO,CAAC;AAC/C,SAAO,IAAI,kBAAkB,kBAAkB,CAAC;AAEhD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ;AAAA,EACF;AACF;;;AQvCA,IAAAC,kBAA0C;AAI1C,oBAAmB;AAQZ,SAAS,oBAAoB,SAAuC;AACzE,QAAM,EAAE,oBAAoB,kBAAkB,OAAO,IAAI;AACzD,QAAM,aAAS,wBAAO;AAGtB,SAAO,IAAI,cAAc,CAAC,MAAe,QAAkB;AACzD,UAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,QAAI,KAAK,SAAS;AAAA,EACpB,CAAC;AAGD,SAAO,IAAI,mBAAmB,CAAC,MAAe,QAAkB;AAC9D,QAAI,UAAU,gBAAgB,mBAAmB;AACjD,QAAI,UAAU,iBAAiB,UAAU;AACzC,QAAI,UAAU,cAAc,YAAY;AACxC,QAAI,UAAU,qBAAqB,IAAI;AACvC,QAAI,UAAU,+BAA+B,GAAG;AAChD,QAAI,aAAa;AAEjB,UAAM,OAAO,MAAY;AACvB,YAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,UAAI,MAAM,SAAS,KAAK,UAAU,SAAS,CAAC;AAAA;AAAA,CAAM;AAAA,IACpD;AAEA,SAAK;AACL,UAAM,WAAW,YAAY,MAAM,GAAI;AAEvC,SAAK,GAAG,SAAS,MAAM;AACrB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AAGD,SAAO,IAAI,WAAW,CAAC,MAAe,QAAkB;AACtD,UAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,QAAI,KAAK;AAAA,MACP,YAAY,OAAO;AAAA,MACnB,SAAS,OAAO;AAAA,MAChB,YAAY,OAAO,QAAQ,KAAK,OAAO,OAAK,EAAE,MAAM,EAAE;AAAA,MACtD,eAAe,UAAU;AAAA,IAC3B,CAAC;AAAA,EACH,CAAC;AAGD,SAAO,KAAK,SAAS,CAAC,KAAc,QAAkB;AACpD,UAAM,EAAE,MAAM,KAAK,IAAI,IAAI;AAE3B,QAAI,CAAC,MAAM;AACT,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAClD;AAAA,IACF;AAEA,UAAM,SAAS;AAAA,MACb,IAAI,OAAO,OAAO,OAAO,QAAQ,KAAK,SAAS,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,MAClE,KAAK,WAAW,cAAAC,QAAO,YAAY,EAAE,EAAE,SAAS,KAAK,CAAC;AAAA,MACtD;AAAA,MACA,MAAM,QAAQ;AAAA,MACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,QAAQ;AAAA,IACV;AAEA,WAAO,QAAQ,KAAK,KAAK,MAAM;AAC/B,QAAI,OAAO,GAAG,EAAE,KAAK,MAAM;AAAA,EAC7B,CAAC;AAGD,SAAO,OAAO,gBAAgB,CAAC,KAAc,QAAkB;AAC7D,UAAM,EAAE,MAAM,IAAI,IAAI;AACtB,UAAM,MAAM,OAAO,QAAQ,KAAK,KAAK,OAAK,EAAE,OAAO,KAAK;AAExD,QAAI,CAAC,KAAK;AACR,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;AAAA,IACF;AAEA,QAAI,SAAS;AACb,QAAI,KAAK,EAAE,SAAS,mBAAmB,IAAI,MAAM,CAAC;AAAA,EACpD,CAAC;AAGD,SAAO,IAAI,SAAS,CAAC,KAAc,QAAkB;AACnD,UAAM,QAAQ,SAAS,IAAI,MAAM,KAAe,KAAK;AACrD,UAAM,SAAS,SAAS,IAAI,MAAM,MAAgB,KAAK;AACvD,UAAM,OAAO,iBAAiB,cAAc,OAAO,MAAM;AACzD,QAAI,KAAK,EAAE,MAAM,OAAO,OAAO,CAAC;AAAA,EAClC,CAAC;AAED,SAAO;AACT;","names":["resetMs","import_express","crypto"]}
+{"version":3,"sources":["../../src/backend/index.ts","../../src/backend/middleware/gateway.ts","../../src/backend/services/RateLimiterService.ts","../../src/backend/services/AnalyticsService.ts","../../src/config/defaults.ts","../../src/backend/middleware/apiKeyAuth.ts","../../src/backend/middleware/ipFilter.ts","../../src/backend/middleware/rateLimiter.ts","../../src/backend/middleware/requestLogger.ts","../../src/backend/routes/gateway.ts"],"sourcesContent":["export { createGatewayMiddleware } from './middleware/gateway';\nexport type { GatewayInstances } from './middleware/gateway';\nexport { createGatewayRoutes } from './routes/gateway';\nexport type { GatewayRoutesOptions } from './routes/gateway';\nexport { RateLimiterService } from './services/RateLimiterService';\nexport { AnalyticsService } from './services/AnalyticsService';\nexport { createApiKeyAuth } from './middleware/apiKeyAuth';\nexport { createIpFilter } from './middleware/ipFilter';\nexport { createRateLimiter } from './middleware/rateLimiter';\nexport { createRequestLogger } from './middleware/requestLogger';\n","import { Router } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\nimport { AnalyticsService } from '../services/AnalyticsService';\nimport type { GatewayMiddlewareConfig } from '../../types';\nimport { DEFAULT_RATE_LIMIT_CONFIG, DEFAULT_IP_RULES, DEFAULT_API_KEYS } from '../../config/defaults';\nimport { createApiKeyAuth } from './apiKeyAuth';\nimport { createIpFilter } from './ipFilter';\nimport { createRateLimiter } from './rateLimiter';\nimport { createRequestLogger } from './requestLogger';\n\nexport interface GatewayInstances {\n  rateLimiterService: RateLimiterService;\n  analyticsService: AnalyticsService;\n  middleware: Router;\n  config: Required<GatewayMiddlewareConfig>;\n}\n\nexport function createGatewayMiddleware(userConfig?: GatewayMiddlewareConfig): GatewayInstances {\n  const config: Required<GatewayMiddlewareConfig> = {\n    rateLimits: userConfig?.rateLimits ?? DEFAULT_RATE_LIMIT_CONFIG,\n    ipRules: userConfig?.ipRules ?? DEFAULT_IP_RULES,\n    apiKeys: userConfig?.apiKeys ?? DEFAULT_API_KEYS,\n  };\n\n  const rateLimiterService = new RateLimiterService(config.rateLimits);\n  const analyticsService = new AnalyticsService();\n\n  const router = Router();\n  router.use(createRequestLogger(analyticsService));\n  router.use(createApiKeyAuth(() => config.apiKeys));\n  router.use(createIpFilter(() => config.ipRules));\n  router.use(createRateLimiter(rateLimiterService));\n\n  return {\n    rateLimiterService,\n    analyticsService,\n    middleware: router,\n    config,\n  };\n}\n","import type { BucketState, SlidingWindowState, FixedWindowState, TierConfig, RateLimitConfig } from '../../types';\n\nclass TokenBucket {\n  private buckets = new Map<string, BucketState>();\n\n  tryConsume(ip: string, maxTokens: number, refillRate: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let bucket = this.buckets.get(ip);\n\n    if (!bucket) {\n      bucket = { tokens: maxTokens, lastRefill: now };\n      this.buckets.set(ip, bucket);\n    }\n\n    const elapsed = (now - bucket.lastRefill) / 1000;\n    bucket.tokens = Math.min(maxTokens, bucket.tokens + elapsed * refillRate);\n    bucket.lastRefill = now;\n\n    if (bucket.tokens >= 1) {\n      bucket.tokens -= 1;\n      const resetMs = bucket.tokens <= 0 ? Math.ceil((1 / refillRate) * 1000) : 0;\n      return { allowed: true, remaining: Math.floor(bucket.tokens), resetMs };\n    }\n\n    const resetMs = Math.ceil(((1 - bucket.tokens) / refillRate) * 1000);\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nclass SlidingWindowLog {\n  private windows = new Map<string, SlidingWindowState>();\n\n  tryConsume(ip: string, maxRequests: number, windowMs: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let state = this.windows.get(ip);\n\n    if (!state) {\n      state = { timestamps: [] };\n      this.windows.set(ip, state);\n    }\n\n    state.timestamps = state.timestamps.filter(t => now - t < windowMs);\n\n    if (state.timestamps.length < maxRequests) {\n      state.timestamps.push(now);\n      return {\n        allowed: true,\n        remaining: maxRequests - state.timestamps.length,\n        resetMs: state.timestamps.length > 0 ? windowMs - (now - state.timestamps[0]) : windowMs,\n      };\n    }\n\n    const oldestInWindow = state.timestamps[0];\n    const resetMs = windowMs - (now - oldestInWindow);\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nclass FixedWindowCounter {\n  private windows = new Map<string, FixedWindowState>();\n\n  tryConsume(ip: string, maxRequests: number, windowMs: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let state = this.windows.get(ip);\n\n    if (!state || now - state.windowStart >= windowMs) {\n      state = { count: 0, windowStart: now };\n      this.windows.set(ip, state);\n    }\n\n    const resetMs = windowMs - (now - state.windowStart);\n\n    if (state.count < maxRequests) {\n      state.count++;\n      return { allowed: true, remaining: maxRequests - state.count, resetMs };\n    }\n\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nexport class RateLimiterService {\n  private tokenBucket = new TokenBucket();\n  private slidingWindow = new SlidingWindowLog();\n  private fixedWindow = new FixedWindowCounter();\n  private globalWindow = new FixedWindowCounter();\n  private config: RateLimitConfig;\n  private _rateLimitHits = 0;\n\n  constructor(config: RateLimitConfig) {\n    this.config = config;\n  }\n\n  get rateLimitHits(): number {\n    return this._rateLimitHits;\n  }\n\n  checkLimit(ip: string, tier: string): { allowed: boolean; remaining: number; resetMs: number; limit: number } {\n    const globalResult = this.globalWindow.tryConsume(\n      '__global__',\n      this.config.globalLimit.maxRequests,\n      this.config.globalLimit.windowMs\n    );\n\n    if (!globalResult.allowed) {\n      this._rateLimitHits++;\n      return { allowed: false, remaining: 0, resetMs: globalResult.resetMs, limit: this.config.globalLimit.maxRequests };\n    }\n\n    const tierConfig = this.config.tiers[tier] || this.config.tiers[this.config.defaultTier];\n\n    if (!tierConfig || tierConfig.algorithm === 'none') {\n      return { allowed: true, remaining: -1, resetMs: 0, limit: -1 };\n    }\n\n    let result: { allowed: boolean; remaining: number; resetMs: number };\n\n    switch (tierConfig.algorithm) {\n      case 'tokenBucket':\n        result = this.tokenBucket.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.refillRate || 1\n        );\n        break;\n      case 'slidingWindow':\n        result = this.slidingWindow.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.windowMs!\n        );\n        break;\n      case 'fixedWindow':\n        result = this.fixedWindow.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.windowMs!\n        );\n        break;\n      default:\n        return { allowed: true, remaining: -1, resetMs: 0, limit: -1 };\n    }\n\n    if (!result.allowed) {\n      this._rateLimitHits++;\n    }\n\n    return { ...result, limit: tierConfig.maxRequests! };\n  }\n\n  getConfig(): RateLimitConfig {\n    return this.config;\n  }\n}\n","import type { RequestLog, GatewayAnalytics } from '../../types';\n\nconst MAX_LOG_SIZE = 10000;\nconst ACTIVE_WINDOW_MS = 300000; // 5 minutes\n\nexport class AnalyticsService {\n  private logs: RequestLog[] = [];\n  private head = 0;\n  private count = 0;\n\n  addLog(log: RequestLog): void {\n    if (this.count < MAX_LOG_SIZE) {\n      this.logs.push(log);\n      this.count++;\n    } else {\n      this.logs[this.head] = log;\n      this.head = (this.head + 1) % MAX_LOG_SIZE;\n    }\n  }\n\n  getRecentLogs(limit = 20, offset = 0): RequestLog[] {\n    const ordered = this.getOrderedLogs();\n    return ordered.slice(offset, offset + limit);\n  }\n\n  getAnalytics(rateLimitHits: number): GatewayAnalytics {\n    const now = Date.now();\n    const oneMinuteAgo = now - 60000;\n    const activeWindowStart = now - ACTIVE_WINDOW_MS;\n    const ordered = this.getOrderedLogs();\n\n    const recentLogs = ordered.filter(l => l.timestamp > oneMinuteAgo);\n    const requestsPerMinute = recentLogs.length;\n\n    // Top endpoints\n    const endpointCounts = new Map<string, number>();\n    for (const log of ordered) {\n      const current = endpointCounts.get(log.path) || 0;\n      endpointCounts.set(log.path, current + 1);\n    }\n    const topEndpoints = Array.from(endpointCounts.entries())\n      .map(([path, count]) => ({ path, count }))\n      .sort((a, b) => b.count - a.count)\n      .slice(0, 5);\n\n    // Error rate\n    const errorCount = ordered.filter(l => l.statusCode >= 400).length;\n    const errorRate = this.count > 0 ? (errorCount / this.count) * 100 : 0;\n\n    // Average response time\n    const totalResponseTime = ordered.reduce((sum, l) => sum + l.responseTime, 0);\n    const avgResponseTime = this.count > 0 ? totalResponseTime / this.count : 0;\n\n    // Active clients: unique IPs in last 5 minutes\n    const activeLogs = ordered.filter(l => l.timestamp > activeWindowStart);\n    const uniqueIps = new Set(activeLogs.map(l => l.ip));\n\n    // Active key uses: unique (IP + apiKey) pairs in last 5 minutes\n    const keyUsePairs = new Set<string>();\n    for (const log of activeLogs) {\n      if (log.apiKey) {\n        keyUsePairs.add(`${log.ip}::${log.apiKey}`);\n      }\n    }\n\n    return {\n      totalRequests: this.count,\n      requestsPerMinute,\n      topEndpoints,\n      errorRate: Math.round(errorRate * 100) / 100,\n      avgResponseTime: Math.round(avgResponseTime * 100) / 100,\n      activeClients: uniqueIps.size,\n      activeKeyUses: keyUsePairs.size,\n      rateLimitHits,\n    };\n  }\n\n  private getOrderedLogs(): RequestLog[] {\n    if (this.count < MAX_LOG_SIZE) {\n      return [...this.logs].reverse();\n    }\n    const tail = this.logs.slice(0, this.head);\n    const headPart = this.logs.slice(this.head);\n    return [...headPart, ...tail].reverse();\n  }\n}\n","import type { RateLimitConfig, IpRules, ApiKeysConfig } from '../types';\n\nexport const DEFAULT_RATE_LIMIT_CONFIG: RateLimitConfig = {\n  tiers: {\n    free: { algorithm: 'tokenBucket', maxRequests: 100, windowMs: 60000, refillRate: 10 },\n    pro: { algorithm: 'slidingWindow', maxRequests: 1000, windowMs: 60000 },\n    unlimited: { algorithm: 'none' },\n  },\n  defaultTier: 'free',\n  globalLimit: { maxRequests: 10000, windowMs: 60000 },\n};\n\nexport const DEFAULT_IP_RULES: IpRules = {\n  allowlist: [],\n  blocklist: [],\n  mode: 'blocklist',\n};\n\nexport const DEFAULT_API_KEYS: ApiKeysConfig = {\n  keys: [],\n};\n","import { Request, Response, NextFunction } from 'express';\nimport type { ApiKeysConfig } from '../../types';\n\nexport function createApiKeyAuth(getKeys: () => ApiKeysConfig) {\n  return function apiKeyAuth(req: Request, res: Response, next: NextFunction): void {\n    const apiKey = req.header('X-API-Key') || req.query.apiKey as string;\n\n    if (!apiKey) {\n      (req as any).clientId = req.ip || 'unknown';\n      (req as any).tier = 'free';\n      next();\n      return;\n    }\n\n    const config = getKeys();\n    const keyEntry = config.keys.find(k => k.key === apiKey && k.active);\n\n    if (!keyEntry) {\n      res.status(401).json({ error: 'Invalid or revoked API key' });\n      return;\n    }\n\n    (req as any).clientId = keyEntry.id;\n    (req as any).tier = keyEntry.tier;\n    (req as any).apiKeyValue = keyEntry.key;\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport type { IpRules } from '../../types';\n\nexport function createIpFilter(getRules: () => IpRules) {\n  return function ipFilter(req: Request, res: Response, next: NextFunction): void {\n    const rules = getRules();\n    const clientIp = req.ip || req.socket.remoteAddress || 'unknown';\n\n    if (rules.mode === 'allowlist' && rules.allowlist.length > 0) {\n      if (!rules.allowlist.includes(clientIp)) {\n        res.status(403).json({ error: 'IP not in allowlist' });\n        return;\n      }\n    }\n\n    if (rules.mode === 'blocklist' && rules.blocklist.length > 0) {\n      if (rules.blocklist.includes(clientIp)) {\n        res.status(403).json({ error: 'IP is blocked' });\n        return;\n      }\n    }\n\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\n\nexport function createRateLimiter(service: RateLimiterService) {\n  return function rateLimiter(req: Request, res: Response, next: NextFunction): void {\n    const ip = req.ip || req.socket.remoteAddress || 'unknown';\n    const tier = (req as any).tier || 'free';\n\n    const result = service.checkLimit(ip, tier);\n\n    if (result.limit > 0) {\n      res.setHeader('X-RateLimit-Limit', result.limit);\n      res.setHeader('X-RateLimit-Remaining', Math.max(0, result.remaining));\n      res.setHeader('X-RateLimit-Reset', Math.ceil(result.resetMs / 1000));\n    }\n\n    if (!result.allowed) {\n      res.status(429).json({\n        error: 'Rate limit exceeded',\n        retryAfter: Math.ceil(result.resetMs / 1000),\n      });\n      return;\n    }\n\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport { AnalyticsService } from '../services/AnalyticsService';\n\nexport function createRequestLogger(analytics: AnalyticsService) {\n  return function requestLogger(req: Request, res: Response, next: NextFunction): void {\n    const start = Date.now();\n\n    res.on('finish', () => {\n      const responseTime = Date.now() - start;\n      const apiKeyValue = (req as any).apiKeyValue || undefined;\n      analytics.addLog({\n        timestamp: Date.now(),\n        method: req.method,\n        path: req.originalUrl,\n        statusCode: res.statusCode,\n        responseTime,\n        clientId: (req as any).clientId || req.ip || 'unknown',\n        ip: req.ip || req.socket.remoteAddress || 'unknown',\n        apiKey: apiKeyValue,\n        authenticated: !!apiKeyValue,\n      });\n    });\n\n    next();\n  };\n}\n","import { Router, Request, Response } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\nimport { AnalyticsService } from '../services/AnalyticsService';\nimport type { GatewayMiddlewareConfig } from '../../types';\nimport crypto from 'crypto';\n\nexport interface GatewayRoutesOptions {\n  rateLimiterService: RateLimiterService;\n  analyticsService: AnalyticsService;\n  config: Required<GatewayMiddlewareConfig>;\n}\n\nexport function createGatewayRoutes(options: GatewayRoutesOptions): Router {\n  const { rateLimiterService, analyticsService, config } = options;\n  const router = Router();\n\n  // GET /analytics - Returns current analytics snapshot\n  router.get('/analytics', (_req: Request, res: Response) => {\n    const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n    res.json(analytics);\n  });\n\n  // GET /analytics/live - SSE stream pushing analytics every 5 seconds\n  router.get('/analytics/live', (_req: Request, res: Response) => {\n    res.setHeader('Content-Type', 'text/event-stream');\n    res.setHeader('Cache-Control', 'no-cache');\n    res.setHeader('Connection', 'keep-alive');\n    res.setHeader('X-Accel-Buffering', 'no');\n    res.flushHeaders();\n\n    const send = (): void => {\n      const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n      res.write(`data: ${JSON.stringify(analytics)}\\n\\n`);\n    };\n\n    send();\n    const interval = setInterval(send, 5000);\n\n    _req.on('close', () => {\n      clearInterval(interval);\n    });\n  });\n\n  // GET /config - Returns current gateway config\n  router.get('/config', (_req: Request, res: Response) => {\n    const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n    res.json({\n      rateLimits: config.rateLimits,\n      ipRules: config.ipRules,\n      activeKeys: config.apiKeys.keys.filter(k => k.active).length,\n      activeKeyUses: analytics.activeKeyUses,\n    });\n  });\n\n  // POST /keys - Create a new API key\n  router.post('/keys', (req: Request, res: Response) => {\n    const { name, tier } = req.body;\n\n    if (!name) {\n      res.status(400).json({ error: 'Name is required' });\n      return;\n    }\n\n    const newKey = {\n      id: `key_${String(config.apiKeys.keys.length + 1).padStart(3, '0')}`,\n      key: `gw_live_${crypto.randomBytes(16).toString('hex')}`,\n      name,\n      tier: tier || 'free',\n      createdAt: new Date().toISOString(),\n      active: true,\n    };\n\n    config.apiKeys.keys.push(newKey);\n    res.status(201).json(newKey);\n  });\n\n  // DELETE /keys/:keyId - Revoke an API key\n  router.delete('/keys/:keyId', (req: Request, res: Response) => {\n    const { keyId } = req.params;\n    const key = config.apiKeys.keys.find(k => k.id === keyId);\n\n    if (!key) {\n      res.status(404).json({ error: 'API key not found' });\n      return;\n    }\n\n    key.active = false;\n    res.json({ message: 'API key revoked', id: keyId });\n  });\n\n  // GET /logs - Returns recent request logs (paginated)\n  router.get('/logs', (req: Request, res: Response) => {\n    const limit = parseInt(req.query.limit as string) || 20;\n    const offset = parseInt(req.query.offset as string) || 0;\n    const logs = analyticsService.getRecentLogs(limit, offset);\n    res.json({ logs, limit, offset });\n  });\n\n  return router;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,qBAAuB;;;ACEvB,IAAM,cAAN,MAAkB;AAAA,EACR,UAAU,oBAAI,IAAyB;AAAA,EAE/C,WAAW,IAAY,WAAmB,YAA8E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,SAAS,KAAK,QAAQ,IAAI,EAAE;AAEhC,QAAI,CAAC,QAAQ;AACX,eAAS,EAAE,QAAQ,WAAW,YAAY,IAAI;AAC9C,WAAK,QAAQ,IAAI,IAAI,MAAM;AAAA,IAC7B;AAEA,UAAM,WAAW,MAAM,OAAO,cAAc;AAC5C,WAAO,SAAS,KAAK,IAAI,WAAW,OAAO,SAAS,UAAU,UAAU;AACxE,WAAO,aAAa;AAEpB,QAAI,OAAO,UAAU,GAAG;AACtB,aAAO,UAAU;AACjB,YAAMA,WAAU,OAAO,UAAU,IAAI,KAAK,KAAM,IAAI,aAAc,GAAI,IAAI;AAC1E,aAAO,EAAE,SAAS,MAAM,WAAW,KAAK,MAAM,OAAO,MAAM,GAAG,SAAAA,SAAQ;AAAA,IACxE;AAEA,UAAM,UAAU,KAAK,MAAO,IAAI,OAAO,UAAU,aAAc,GAAI;AACnE,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEA,IAAM,mBAAN,MAAuB;AAAA,EACb,UAAU,oBAAI,IAAgC;AAAA,EAEtD,WAAW,IAAY,aAAqB,UAA4E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,QAAQ,KAAK,QAAQ,IAAI,EAAE;AAE/B,QAAI,CAAC,OAAO;AACV,cAAQ,EAAE,YAAY,CAAC,EAAE;AACzB,WAAK,QAAQ,IAAI,IAAI,KAAK;AAAA,IAC5B;AAEA,UAAM,aAAa,MAAM,WAAW,OAAO,OAAK,MAAM,IAAI,QAAQ;AAElE,QAAI,MAAM,WAAW,SAAS,aAAa;AACzC,YAAM,WAAW,KAAK,GAAG;AACzB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,WAAW,cAAc,MAAM,WAAW;AAAA,QAC1C,SAAS,MAAM,WAAW,SAAS,IAAI,YAAY,MAAM,MAAM,WAAW,CAAC,KAAK;AAAA,MAClF;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,WAAW,CAAC;AACzC,UAAM,UAAU,YAAY,MAAM;AAClC,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEA,IAAM,qBAAN,MAAyB;AAAA,EACf,UAAU,oBAAI,IAA8B;AAAA,EAEpD,WAAW,IAAY,aAAqB,UAA4E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,QAAQ,KAAK,QAAQ,IAAI,EAAE;AAE/B,QAAI,CAAC,SAAS,MAAM,MAAM,eAAe,UAAU;AACjD,cAAQ,EAAE,OAAO,GAAG,aAAa,IAAI;AACrC,WAAK,QAAQ,IAAI,IAAI,KAAK;AAAA,IAC5B;AAEA,UAAM,UAAU,YAAY,MAAM,MAAM;AAExC,QAAI,MAAM,QAAQ,aAAa;AAC7B,YAAM;AACN,aAAO,EAAE,SAAS,MAAM,WAAW,cAAc,MAAM,OAAO,QAAQ;AAAA,IACxE;AAEA,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEO,IAAM,qBAAN,MAAyB;AAAA,EACtB,cAAc,IAAI,YAAY;AAAA,EAC9B,gBAAgB,IAAI,iBAAiB;AAAA,EACrC,cAAc,IAAI,mBAAmB;AAAA,EACrC,eAAe,IAAI,mBAAmB;AAAA,EACtC;AAAA,EACA,iBAAiB;AAAA,EAEzB,YAAY,QAAyB;AACnC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAI,gBAAwB;AAC1B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,WAAW,IAAY,MAAuF;AAC5G,UAAM,eAAe,KAAK,aAAa;AAAA,MACrC;AAAA,MACA,KAAK,OAAO,YAAY;AAAA,MACxB,KAAK,OAAO,YAAY;AAAA,IAC1B;AAEA,QAAI,CAAC,aAAa,SAAS;AACzB,WAAK;AACL,aAAO,EAAE,SAAS,OAAO,WAAW,GAAG,SAAS,aAAa,SAAS,OAAO,KAAK,OAAO,YAAY,YAAY;AAAA,IACnH;AAEA,UAAM,aAAa,KAAK,OAAO,MAAM,IAAI,KAAK,KAAK,OAAO,MAAM,KAAK,OAAO,WAAW;AAEvF,QAAI,CAAC,cAAc,WAAW,cAAc,QAAQ;AAClD,aAAO,EAAE,SAAS,MAAM,WAAW,IAAI,SAAS,GAAG,OAAO,GAAG;AAAA,IAC/D;AAEA,QAAI;AAEJ,YAAQ,WAAW,WAAW;AAAA,MAC5B,KAAK;AACH,iBAAS,KAAK,YAAY;AAAA,UACxB;AAAA,UACA,WAAW;AAAA,UACX,WAAW,cAAc;AAAA,QAC3B;AACA;AAAA,MACF,KAAK;AACH,iBAAS,KAAK,cAAc;AAAA,UAC1B;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AACA;AAAA,MACF,KAAK;AACH,iBAAS,KAAK,YAAY;AAAA,UACxB;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AACA;AAAA,MACF;AACE,eAAO,EAAE,SAAS,MAAM,WAAW,IAAI,SAAS,GAAG,OAAO,GAAG;AAAA,IACjE;AAEA,QAAI,CAAC,OAAO,SAAS;AACnB,WAAK;AAAA,IACP;AAEA,WAAO,EAAE,GAAG,QAAQ,OAAO,WAAW,YAAa;AAAA,EACrD;AAAA,EAEA,YAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AACF;;;ACvJA,IAAM,eAAe;AACrB,IAAM,mBAAmB;AAElB,IAAM,mBAAN,MAAuB;AAAA,EACpB,OAAqB,CAAC;AAAA,EACtB,OAAO;AAAA,EACP,QAAQ;AAAA,EAEhB,OAAO,KAAuB;AAC5B,QAAI,KAAK,QAAQ,cAAc;AAC7B,WAAK,KAAK,KAAK,GAAG;AAClB,WAAK;AAAA,IACP,OAAO;AACL,WAAK,KAAK,KAAK,IAAI,IAAI;AACvB,WAAK,QAAQ,KAAK,OAAO,KAAK;AAAA,IAChC;AAAA,EACF;AAAA,EAEA,cAAc,QAAQ,IAAI,SAAS,GAAiB;AAClD,UAAM,UAAU,KAAK,eAAe;AACpC,WAAO,QAAQ,MAAM,QAAQ,SAAS,KAAK;AAAA,EAC7C;AAAA,EAEA,aAAa,eAAyC;AACpD,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,MAAM;AAC3B,UAAM,oBAAoB,MAAM;AAChC,UAAM,UAAU,KAAK,eAAe;AAEpC,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,YAAY,YAAY;AACjE,UAAM,oBAAoB,WAAW;AAGrC,UAAM,iBAAiB,oBAAI,IAAoB;AAC/C,eAAW,OAAO,SAAS;AACzB,YAAM,UAAU,eAAe,IAAI,IAAI,IAAI,KAAK;AAChD,qBAAe,IAAI,IAAI,MAAM,UAAU,CAAC;AAAA,IAC1C;AACA,UAAM,eAAe,MAAM,KAAK,eAAe,QAAQ,CAAC,EACrD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,MAAM,MAAM,EAAE,EACxC,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAChC,MAAM,GAAG,CAAC;AAGb,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,cAAc,GAAG,EAAE;AAC5D,UAAM,YAAY,KAAK,QAAQ,IAAK,aAAa,KAAK,QAAS,MAAM;AAGrE,UAAM,oBAAoB,QAAQ,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,cAAc,CAAC;AAC5E,UAAM,kBAAkB,KAAK,QAAQ,IAAI,oBAAoB,KAAK,QAAQ;AAG1E,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,YAAY,iBAAiB;AACtE,UAAM,YAAY,IAAI,IAAI,WAAW,IAAI,OAAK,EAAE,EAAE,CAAC;AAGnD,UAAM,cAAc,oBAAI,IAAY;AACpC,eAAW,OAAO,YAAY;AAC5B,UAAI,IAAI,QAAQ;AACd,oBAAY,IAAI,GAAG,IAAI,EAAE,KAAK,IAAI,MAAM,EAAE;AAAA,MAC5C;AAAA,IACF;AAEA,WAAO;AAAA,MACL,eAAe,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,WAAW,KAAK,MAAM,YAAY,GAAG,IAAI;AAAA,MACzC,iBAAiB,KAAK,MAAM,kBAAkB,GAAG,IAAI;AAAA,MACrD,eAAe,UAAU;AAAA,MACzB,eAAe,YAAY;AAAA,MAC3B;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,iBAA+B;AACrC,QAAI,KAAK,QAAQ,cAAc;AAC7B,aAAO,CAAC,GAAG,KAAK,IAAI,EAAE,QAAQ;AAAA,IAChC;AACA,UAAM,OAAO,KAAK,KAAK,MAAM,GAAG,KAAK,IAAI;AACzC,UAAM,WAAW,KAAK,KAAK,MAAM,KAAK,IAAI;AAC1C,WAAO,CAAC,GAAG,UAAU,GAAG,IAAI,EAAE,QAAQ;AAAA,EACxC;AACF;;;ACnFO,IAAM,4BAA6C;AAAA,EACxD,OAAO;AAAA,IACL,MAAM,EAAE,WAAW,eAAe,aAAa,KAAK,UAAU,KAAO,YAAY,GAAG;AAAA,IACpF,KAAK,EAAE,WAAW,iBAAiB,aAAa,KAAM,UAAU,IAAM;AAAA,IACtE,WAAW,EAAE,WAAW,OAAO;AAAA,EACjC;AAAA,EACA,aAAa;AAAA,EACb,aAAa,EAAE,aAAa,KAAO,UAAU,IAAM;AACrD;AAEO,IAAM,mBAA4B;AAAA,EACvC,WAAW,CAAC;AAAA,EACZ,WAAW,CAAC;AAAA,EACZ,MAAM;AACR;AAEO,IAAM,mBAAkC;AAAA,EAC7C,MAAM,CAAC;AACT;;;ACjBO,SAAS,iBAAiB,SAA8B;AAC7D,SAAO,SAAS,WAAW,KAAc,KAAe,MAA0B;AAChF,UAAM,SAAS,IAAI,OAAO,WAAW,KAAK,IAAI,MAAM;AAEpD,QAAI,CAAC,QAAQ;AACX,MAAC,IAAY,WAAW,IAAI,MAAM;AAClC,MAAC,IAAY,OAAO;AACpB,WAAK;AACL;AAAA,IACF;AAEA,UAAM,SAAS,QAAQ;AACvB,UAAM,WAAW,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,UAAU,EAAE,MAAM;AAEnE,QAAI,CAAC,UAAU;AACb,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,6BAA6B,CAAC;AAC5D;AAAA,IACF;AAEA,IAAC,IAAY,WAAW,SAAS;AACjC,IAAC,IAAY,OAAO,SAAS;AAC7B,IAAC,IAAY,cAAc,SAAS;AACpC,SAAK;AAAA,EACP;AACF;;;ACxBO,SAAS,eAAe,UAAyB;AACtD,SAAO,SAAS,SAAS,KAAc,KAAe,MAA0B;AAC9E,UAAM,QAAQ,SAAS;AACvB,UAAM,WAAW,IAAI,MAAM,IAAI,OAAO,iBAAiB;AAEvD,QAAI,MAAM,SAAS,eAAe,MAAM,UAAU,SAAS,GAAG;AAC5D,UAAI,CAAC,MAAM,UAAU,SAAS,QAAQ,GAAG;AACvC,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,sBAAsB,CAAC;AACrD;AAAA,MACF;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,eAAe,MAAM,UAAU,SAAS,GAAG;AAC5D,UAAI,MAAM,UAAU,SAAS,QAAQ,GAAG;AACtC,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,gBAAgB,CAAC;AAC/C;AAAA,MACF;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;;;ACrBO,SAAS,kBAAkB,SAA6B;AAC7D,SAAO,SAAS,YAAY,KAAc,KAAe,MAA0B;AACjF,UAAM,KAAK,IAAI,MAAM,IAAI,OAAO,iBAAiB;AACjD,UAAM,OAAQ,IAAY,QAAQ;AAElC,UAAM,SAAS,QAAQ,WAAW,IAAI,IAAI;AAE1C,QAAI,OAAO,QAAQ,GAAG;AACpB,UAAI,UAAU,qBAAqB,OAAO,KAAK;AAC/C,UAAI,UAAU,yBAAyB,KAAK,IAAI,GAAG,OAAO,SAAS,CAAC;AACpE,UAAI,UAAU,qBAAqB,KAAK,KAAK,OAAO,UAAU,GAAI,CAAC;AAAA,IACrE;AAEA,QAAI,CAAC,OAAO,SAAS;AACnB,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,OAAO;AAAA,QACP,YAAY,KAAK,KAAK,OAAO,UAAU,GAAI;AAAA,MAC7C,CAAC;AACD;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;;;ACvBO,SAAS,oBAAoB,WAA6B;AAC/D,SAAO,SAAS,cAAc,KAAc,KAAe,MAA0B;AACnF,UAAM,QAAQ,KAAK,IAAI;AAEvB,QAAI,GAAG,UAAU,MAAM;AACrB,YAAM,eAAe,KAAK,IAAI,IAAI;AAClC,YAAM,cAAe,IAAY,eAAe;AAChD,gBAAU,OAAO;AAAA,QACf,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,MAAM,IAAI;AAAA,QACV,YAAY,IAAI;AAAA,QAChB;AAAA,QACA,UAAW,IAAY,YAAY,IAAI,MAAM;AAAA,QAC7C,IAAI,IAAI,MAAM,IAAI,OAAO,iBAAiB;AAAA,QAC1C,QAAQ;AAAA,QACR,eAAe,CAAC,CAAC;AAAA,MACnB,CAAC;AAAA,IACH,CAAC;AAED,SAAK;AAAA,EACP;AACF;;;APRO,SAAS,wBAAwB,YAAwD;AAC9F,QAAM,SAA4C;AAAA,IAChD,YAAY,YAAY,cAAc;AAAA,IACtC,SAAS,YAAY,WAAW;AAAA,IAChC,SAAS,YAAY,WAAW;AAAA,EAClC;AAEA,QAAM,qBAAqB,IAAI,mBAAmB,OAAO,UAAU;AACnE,QAAM,mBAAmB,IAAI,iBAAiB;AAE9C,QAAM,aAAS,uBAAO;AACtB,SAAO,IAAI,oBAAoB,gBAAgB,CAAC;AAChD,SAAO,IAAI,iBAAiB,MAAM,OAAO,OAAO,CAAC;AACjD,SAAO,IAAI,eAAe,MAAM,OAAO,OAAO,CAAC;AAC/C,SAAO,IAAI,kBAAkB,kBAAkB,CAAC;AAEhD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ;AAAA,EACF;AACF;;;AQvCA,IAAAC,kBAA0C;AAI1C,oBAAmB;AAQZ,SAAS,oBAAoB,SAAuC;AACzE,QAAM,EAAE,oBAAoB,kBAAkB,OAAO,IAAI;AACzD,QAAM,aAAS,wBAAO;AAGtB,SAAO,IAAI,cAAc,CAAC,MAAe,QAAkB;AACzD,UAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,QAAI,KAAK,SAAS;AAAA,EACpB,CAAC;AAGD,SAAO,IAAI,mBAAmB,CAAC,MAAe,QAAkB;AAC9D,QAAI,UAAU,gBAAgB,mBAAmB;AACjD,QAAI,UAAU,iBAAiB,UAAU;AACzC,QAAI,UAAU,cAAc,YAAY;AACxC,QAAI,UAAU,qBAAqB,IAAI;AACvC,QAAI,aAAa;AAEjB,UAAM,OAAO,MAAY;AACvB,YAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,UAAI,MAAM,SAAS,KAAK,UAAU,SAAS,CAAC;AAAA;AAAA,CAAM;AAAA,IACpD;AAEA,SAAK;AACL,UAAM,WAAW,YAAY,MAAM,GAAI;AAEvC,SAAK,GAAG,SAAS,MAAM;AACrB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AAGD,SAAO,IAAI,WAAW,CAAC,MAAe,QAAkB;AACtD,UAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,QAAI,KAAK;AAAA,MACP,YAAY,OAAO;AAAA,MACnB,SAAS,OAAO;AAAA,MAChB,YAAY,OAAO,QAAQ,KAAK,OAAO,OAAK,EAAE,MAAM,EAAE;AAAA,MACtD,eAAe,UAAU;AAAA,IAC3B,CAAC;AAAA,EACH,CAAC;AAGD,SAAO,KAAK,SAAS,CAAC,KAAc,QAAkB;AACpD,UAAM,EAAE,MAAM,KAAK,IAAI,IAAI;AAE3B,QAAI,CAAC,MAAM;AACT,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAClD;AAAA,IACF;AAEA,UAAM,SAAS;AAAA,MACb,IAAI,OAAO,OAAO,OAAO,QAAQ,KAAK,SAAS,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,MAClE,KAAK,WAAW,cAAAC,QAAO,YAAY,EAAE,EAAE,SAAS,KAAK,CAAC;AAAA,MACtD;AAAA,MACA,MAAM,QAAQ;AAAA,MACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,QAAQ;AAAA,IACV;AAEA,WAAO,QAAQ,KAAK,KAAK,MAAM;AAC/B,QAAI,OAAO,GAAG,EAAE,KAAK,MAAM;AAAA,EAC7B,CAAC;AAGD,SAAO,OAAO,gBAAgB,CAAC,KAAc,QAAkB;AAC7D,UAAM,EAAE,MAAM,IAAI,IAAI;AACtB,UAAM,MAAM,OAAO,QAAQ,KAAK,KAAK,OAAK,EAAE,OAAO,KAAK;AAExD,QAAI,CAAC,KAAK;AACR,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;AAAA,IACF;AAEA,QAAI,SAAS;AACb,QAAI,KAAK,EAAE,SAAS,mBAAmB,IAAI,MAAM,CAAC;AAAA,EACpD,CAAC;AAGD,SAAO,IAAI,SAAS,CAAC,KAAc,QAAkB;AACnD,UAAM,QAAQ,SAAS,IAAI,MAAM,KAAe,KAAK;AACrD,UAAM,SAAS,SAAS,IAAI,MAAM,MAAgB,KAAK;AACvD,UAAM,OAAO,iBAAiB,cAAc,OAAO,MAAM;AACzD,QAAI,KAAK,EAAE,MAAM,OAAO,OAAO,CAAC;AAAA,EAClC,CAAC;AAED,SAAO;AACT;","names":["resetMs","import_express","crypto"]}

package/dist/backend/index.mjs

@@ -283,6 +283,7 @@ function createRequestLogger(analytics) {
     const start = Date.now();
     res.on("finish", () => {
       const responseTime = Date.now() - start;
+      const apiKeyValue = req.apiKeyValue || void 0;
       analytics.addLog({
         timestamp: Date.now(),
         method: req.method,
@@ -291,7 +292,8 @@ function createRequestLogger(analytics) {
         responseTime,
         clientId: req.clientId || req.ip || "unknown",
         ip: req.ip || req.socket.remoteAddress || "unknown",
-        apiKey: req.apiKeyValue || void 0
+        apiKey: apiKeyValue,
+        authenticated: !!apiKeyValue
       });
     });
     next();
@@ -335,7 +337,6 @@ function createGatewayRoutes(options) {
     res.setHeader("Cache-Control", "no-cache");
     res.setHeader("Connection", "keep-alive");
     res.setHeader("X-Accel-Buffering", "no");
-    res.setHeader("Access-Control-Allow-Origin", "*");
     res.flushHeaders();
     const send = () => {
       const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);

package/dist/backend/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/backend/middleware/gateway.ts","../../src/backend/services/RateLimiterService.ts","../../src/backend/services/AnalyticsService.ts","../../src/config/defaults.ts","../../src/backend/middleware/apiKeyAuth.ts","../../src/backend/middleware/ipFilter.ts","../../src/backend/middleware/rateLimiter.ts","../../src/backend/middleware/requestLogger.ts","../../src/backend/routes/gateway.ts"],"sourcesContent":["import { Router } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\nimport { AnalyticsService } from '../services/AnalyticsService';\nimport type { GatewayMiddlewareConfig } from '../../types';\nimport { DEFAULT_RATE_LIMIT_CONFIG, DEFAULT_IP_RULES, DEFAULT_API_KEYS } from '../../config/defaults';\nimport { createApiKeyAuth } from './apiKeyAuth';\nimport { createIpFilter } from './ipFilter';\nimport { createRateLimiter } from './rateLimiter';\nimport { createRequestLogger } from './requestLogger';\n\nexport interface GatewayInstances {\n  rateLimiterService: RateLimiterService;\n  analyticsService: AnalyticsService;\n  middleware: Router;\n  config: Required<GatewayMiddlewareConfig>;\n}\n\nexport function createGatewayMiddleware(userConfig?: GatewayMiddlewareConfig): GatewayInstances {\n  const config: Required<GatewayMiddlewareConfig> = {\n    rateLimits: userConfig?.rateLimits ?? DEFAULT_RATE_LIMIT_CONFIG,\n    ipRules: userConfig?.ipRules ?? DEFAULT_IP_RULES,\n    apiKeys: userConfig?.apiKeys ?? DEFAULT_API_KEYS,\n  };\n\n  const rateLimiterService = new RateLimiterService(config.rateLimits);\n  const analyticsService = new AnalyticsService();\n\n  const router = Router();\n  router.use(createRequestLogger(analyticsService));\n  router.use(createApiKeyAuth(() => config.apiKeys));\n  router.use(createIpFilter(() => config.ipRules));\n  router.use(createRateLimiter(rateLimiterService));\n\n  return {\n    rateLimiterService,\n    analyticsService,\n    middleware: router,\n    config,\n  };\n}\n","import type { BucketState, SlidingWindowState, FixedWindowState, TierConfig, RateLimitConfig } from '../../types';\n\nclass TokenBucket {\n  private buckets = new Map<string, BucketState>();\n\n  tryConsume(ip: string, maxTokens: number, refillRate: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let bucket = this.buckets.get(ip);\n\n    if (!bucket) {\n      bucket = { tokens: maxTokens, lastRefill: now };\n      this.buckets.set(ip, bucket);\n    }\n\n    const elapsed = (now - bucket.lastRefill) / 1000;\n    bucket.tokens = Math.min(maxTokens, bucket.tokens + elapsed * refillRate);\n    bucket.lastRefill = now;\n\n    if (bucket.tokens >= 1) {\n      bucket.tokens -= 1;\n      const resetMs = bucket.tokens <= 0 ? Math.ceil((1 / refillRate) * 1000) : 0;\n      return { allowed: true, remaining: Math.floor(bucket.tokens), resetMs };\n    }\n\n    const resetMs = Math.ceil(((1 - bucket.tokens) / refillRate) * 1000);\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nclass SlidingWindowLog {\n  private windows = new Map<string, SlidingWindowState>();\n\n  tryConsume(ip: string, maxRequests: number, windowMs: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let state = this.windows.get(ip);\n\n    if (!state) {\n      state = { timestamps: [] };\n      this.windows.set(ip, state);\n    }\n\n    state.timestamps = state.timestamps.filter(t => now - t < windowMs);\n\n    if (state.timestamps.length < maxRequests) {\n      state.timestamps.push(now);\n      return {\n        allowed: true,\n        remaining: maxRequests - state.timestamps.length,\n        resetMs: state.timestamps.length > 0 ? windowMs - (now - state.timestamps[0]) : windowMs,\n      };\n    }\n\n    const oldestInWindow = state.timestamps[0];\n    const resetMs = windowMs - (now - oldestInWindow);\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nclass FixedWindowCounter {\n  private windows = new Map<string, FixedWindowState>();\n\n  tryConsume(ip: string, maxRequests: number, windowMs: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let state = this.windows.get(ip);\n\n    if (!state || now - state.windowStart >= windowMs) {\n      state = { count: 0, windowStart: now };\n      this.windows.set(ip, state);\n    }\n\n    const resetMs = windowMs - (now - state.windowStart);\n\n    if (state.count < maxRequests) {\n      state.count++;\n      return { allowed: true, remaining: maxRequests - state.count, resetMs };\n    }\n\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nexport class RateLimiterService {\n  private tokenBucket = new TokenBucket();\n  private slidingWindow = new SlidingWindowLog();\n  private fixedWindow = new FixedWindowCounter();\n  private globalWindow = new FixedWindowCounter();\n  private config: RateLimitConfig;\n  private _rateLimitHits = 0;\n\n  constructor(config: RateLimitConfig) {\n    this.config = config;\n  }\n\n  get rateLimitHits(): number {\n    return this._rateLimitHits;\n  }\n\n  checkLimit(ip: string, tier: string): { allowed: boolean; remaining: number; resetMs: number; limit: number } {\n    const globalResult = this.globalWindow.tryConsume(\n      '__global__',\n      this.config.globalLimit.maxRequests,\n      this.config.globalLimit.windowMs\n    );\n\n    if (!globalResult.allowed) {\n      this._rateLimitHits++;\n      return { allowed: false, remaining: 0, resetMs: globalResult.resetMs, limit: this.config.globalLimit.maxRequests };\n    }\n\n    const tierConfig = this.config.tiers[tier] || this.config.tiers[this.config.defaultTier];\n\n    if (!tierConfig || tierConfig.algorithm === 'none') {\n      return { allowed: true, remaining: -1, resetMs: 0, limit: -1 };\n    }\n\n    let result: { allowed: boolean; remaining: number; resetMs: number };\n\n    switch (tierConfig.algorithm) {\n      case 'tokenBucket':\n        result = this.tokenBucket.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.refillRate || 1\n        );\n        break;\n      case 'slidingWindow':\n        result = this.slidingWindow.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.windowMs!\n        );\n        break;\n      case 'fixedWindow':\n        result = this.fixedWindow.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.windowMs!\n        );\n        break;\n      default:\n        return { allowed: true, remaining: -1, resetMs: 0, limit: -1 };\n    }\n\n    if (!result.allowed) {\n      this._rateLimitHits++;\n    }\n\n    return { ...result, limit: tierConfig.maxRequests! };\n  }\n\n  getConfig(): RateLimitConfig {\n    return this.config;\n  }\n}\n","import type { RequestLog, GatewayAnalytics } from '../../types';\n\nconst MAX_LOG_SIZE = 10000;\nconst ACTIVE_WINDOW_MS = 300000; // 5 minutes\n\nexport class AnalyticsService {\n  private logs: RequestLog[] = [];\n  private head = 0;\n  private count = 0;\n\n  addLog(log: RequestLog): void {\n    if (this.count < MAX_LOG_SIZE) {\n      this.logs.push(log);\n      this.count++;\n    } else {\n      this.logs[this.head] = log;\n      this.head = (this.head + 1) % MAX_LOG_SIZE;\n    }\n  }\n\n  getRecentLogs(limit = 20, offset = 0): RequestLog[] {\n    const ordered = this.getOrderedLogs();\n    return ordered.slice(offset, offset + limit);\n  }\n\n  getAnalytics(rateLimitHits: number): GatewayAnalytics {\n    const now = Date.now();\n    const oneMinuteAgo = now - 60000;\n    const activeWindowStart = now - ACTIVE_WINDOW_MS;\n    const ordered = this.getOrderedLogs();\n\n    const recentLogs = ordered.filter(l => l.timestamp > oneMinuteAgo);\n    const requestsPerMinute = recentLogs.length;\n\n    // Top endpoints\n    const endpointCounts = new Map<string, number>();\n    for (const log of ordered) {\n      const current = endpointCounts.get(log.path) || 0;\n      endpointCounts.set(log.path, current + 1);\n    }\n    const topEndpoints = Array.from(endpointCounts.entries())\n      .map(([path, count]) => ({ path, count }))\n      .sort((a, b) => b.count - a.count)\n      .slice(0, 5);\n\n    // Error rate\n    const errorCount = ordered.filter(l => l.statusCode >= 400).length;\n    const errorRate = this.count > 0 ? (errorCount / this.count) * 100 : 0;\n\n    // Average response time\n    const totalResponseTime = ordered.reduce((sum, l) => sum + l.responseTime, 0);\n    const avgResponseTime = this.count > 0 ? totalResponseTime / this.count : 0;\n\n    // Active clients: unique IPs in last 5 minutes\n    const activeLogs = ordered.filter(l => l.timestamp > activeWindowStart);\n    const uniqueIps = new Set(activeLogs.map(l => l.ip));\n\n    // Active key uses: unique (IP + apiKey) pairs in last 5 minutes\n    const keyUsePairs = new Set<string>();\n    for (const log of activeLogs) {\n      if (log.apiKey) {\n        keyUsePairs.add(`${log.ip}::${log.apiKey}`);\n      }\n    }\n\n    return {\n      totalRequests: this.count,\n      requestsPerMinute,\n      topEndpoints,\n      errorRate: Math.round(errorRate * 100) / 100,\n      avgResponseTime: Math.round(avgResponseTime * 100) / 100,\n      activeClients: uniqueIps.size,\n      activeKeyUses: keyUsePairs.size,\n      rateLimitHits,\n    };\n  }\n\n  private getOrderedLogs(): RequestLog[] {\n    if (this.count < MAX_LOG_SIZE) {\n      return [...this.logs].reverse();\n    }\n    const tail = this.logs.slice(0, this.head);\n    const headPart = this.logs.slice(this.head);\n    return [...headPart, ...tail].reverse();\n  }\n}\n","import type { RateLimitConfig, IpRules, ApiKeysConfig } from '../types';\n\nexport const DEFAULT_RATE_LIMIT_CONFIG: RateLimitConfig = {\n  tiers: {\n    free: { algorithm: 'tokenBucket', maxRequests: 100, windowMs: 60000, refillRate: 10 },\n    pro: { algorithm: 'slidingWindow', maxRequests: 1000, windowMs: 60000 },\n    unlimited: { algorithm: 'none' },\n  },\n  defaultTier: 'free',\n  globalLimit: { maxRequests: 10000, windowMs: 60000 },\n};\n\nexport const DEFAULT_IP_RULES: IpRules = {\n  allowlist: [],\n  blocklist: [],\n  mode: 'blocklist',\n};\n\nexport const DEFAULT_API_KEYS: ApiKeysConfig = {\n  keys: [],\n};\n","import { Request, Response, NextFunction } from 'express';\nimport type { ApiKeysConfig } from '../../types';\n\nexport function createApiKeyAuth(getKeys: () => ApiKeysConfig) {\n  return function apiKeyAuth(req: Request, res: Response, next: NextFunction): void {\n    const apiKey = req.header('X-API-Key') || req.query.apiKey as string;\n\n    if (!apiKey) {\n      (req as any).clientId = req.ip || 'unknown';\n      (req as any).tier = 'free';\n      next();\n      return;\n    }\n\n    const config = getKeys();\n    const keyEntry = config.keys.find(k => k.key === apiKey && k.active);\n\n    if (!keyEntry) {\n      res.status(401).json({ error: 'Invalid or revoked API key' });\n      return;\n    }\n\n    (req as any).clientId = keyEntry.id;\n    (req as any).tier = keyEntry.tier;\n    (req as any).apiKeyValue = keyEntry.key;\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport type { IpRules } from '../../types';\n\nexport function createIpFilter(getRules: () => IpRules) {\n  return function ipFilter(req: Request, res: Response, next: NextFunction): void {\n    const rules = getRules();\n    const clientIp = req.ip || req.socket.remoteAddress || 'unknown';\n\n    if (rules.mode === 'allowlist' && rules.allowlist.length > 0) {\n      if (!rules.allowlist.includes(clientIp)) {\n        res.status(403).json({ error: 'IP not in allowlist' });\n        return;\n      }\n    }\n\n    if (rules.mode === 'blocklist' && rules.blocklist.length > 0) {\n      if (rules.blocklist.includes(clientIp)) {\n        res.status(403).json({ error: 'IP is blocked' });\n        return;\n      }\n    }\n\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\n\nexport function createRateLimiter(service: RateLimiterService) {\n  return function rateLimiter(req: Request, res: Response, next: NextFunction): void {\n    const ip = req.ip || req.socket.remoteAddress || 'unknown';\n    const tier = (req as any).tier || 'free';\n\n    const result = service.checkLimit(ip, tier);\n\n    if (result.limit > 0) {\n      res.setHeader('X-RateLimit-Limit', result.limit);\n      res.setHeader('X-RateLimit-Remaining', Math.max(0, result.remaining));\n      res.setHeader('X-RateLimit-Reset', Math.ceil(result.resetMs / 1000));\n    }\n\n    if (!result.allowed) {\n      res.status(429).json({\n        error: 'Rate limit exceeded',\n        retryAfter: Math.ceil(result.resetMs / 1000),\n      });\n      return;\n    }\n\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport { AnalyticsService } from '../services/AnalyticsService';\n\nexport function createRequestLogger(analytics: AnalyticsService) {\n  return function requestLogger(req: Request, res: Response, next: NextFunction): void {\n    const start = Date.now();\n\n    res.on('finish', () => {\n      const responseTime = Date.now() - start;\n      analytics.addLog({\n        timestamp: Date.now(),\n        method: req.method,\n        path: req.originalUrl,\n        statusCode: res.statusCode,\n        responseTime,\n        clientId: (req as any).clientId || req.ip || 'unknown',\n        ip: req.ip || req.socket.remoteAddress || 'unknown',\n        apiKey: (req as any).apiKeyValue || undefined,\n      });\n    });\n\n    next();\n  };\n}\n","import { Router, Request, Response } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\nimport { AnalyticsService } from '../services/AnalyticsService';\nimport type { ApiKeysConfig, GatewayMiddlewareConfig } from '../../types';\nimport crypto from 'crypto';\n\nexport interface GatewayRoutesOptions {\n  rateLimiterService: RateLimiterService;\n  analyticsService: AnalyticsService;\n  config: Required<GatewayMiddlewareConfig>;\n}\n\nexport function createGatewayRoutes(options: GatewayRoutesOptions): Router {\n  const { rateLimiterService, analyticsService, config } = options;\n  const router = Router();\n\n  // GET /analytics - Returns current analytics snapshot\n  router.get('/analytics', (_req: Request, res: Response) => {\n    const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n    res.json(analytics);\n  });\n\n  // GET /analytics/live - SSE stream pushing analytics every 5 seconds\n  router.get('/analytics/live', (_req: Request, res: Response) => {\n    res.setHeader('Content-Type', 'text/event-stream');\n    res.setHeader('Cache-Control', 'no-cache');\n    res.setHeader('Connection', 'keep-alive');\n    res.setHeader('X-Accel-Buffering', 'no');\n    res.setHeader('Access-Control-Allow-Origin', '*');\n    res.flushHeaders();\n\n    const send = (): void => {\n      const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n      res.write(`data: ${JSON.stringify(analytics)}\\n\\n`);\n    };\n\n    send();\n    const interval = setInterval(send, 5000);\n\n    _req.on('close', () => {\n      clearInterval(interval);\n    });\n  });\n\n  // GET /config - Returns current gateway config\n  router.get('/config', (_req: Request, res: Response) => {\n    const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n    res.json({\n      rateLimits: config.rateLimits,\n      ipRules: config.ipRules,\n      activeKeys: config.apiKeys.keys.filter(k => k.active).length,\n      activeKeyUses: analytics.activeKeyUses,\n    });\n  });\n\n  // POST /keys - Create a new API key\n  router.post('/keys', (req: Request, res: Response) => {\n    const { name, tier } = req.body;\n\n    if (!name) {\n      res.status(400).json({ error: 'Name is required' });\n      return;\n    }\n\n    const newKey = {\n      id: `key_${String(config.apiKeys.keys.length + 1).padStart(3, '0')}`,\n      key: `gw_live_${crypto.randomBytes(16).toString('hex')}`,\n      name,\n      tier: tier || 'free',\n      createdAt: new Date().toISOString(),\n      active: true,\n    };\n\n    config.apiKeys.keys.push(newKey);\n    res.status(201).json(newKey);\n  });\n\n  // DELETE /keys/:keyId - Revoke an API key\n  router.delete('/keys/:keyId', (req: Request, res: Response) => {\n    const { keyId } = req.params;\n    const key = config.apiKeys.keys.find(k => k.id === keyId);\n\n    if (!key) {\n      res.status(404).json({ error: 'API key not found' });\n      return;\n    }\n\n    key.active = false;\n    res.json({ message: 'API key revoked', id: keyId });\n  });\n\n  // GET /logs - Returns recent request logs (paginated)\n  router.get('/logs', (req: Request, res: Response) => {\n    const limit = parseInt(req.query.limit as string) || 20;\n    const offset = parseInt(req.query.offset as string) || 0;\n    const logs = analyticsService.getRecentLogs(limit, offset);\n    res.json({ logs, limit, offset });\n  });\n\n  return router;\n}\n"],"mappings":";AAAA,SAAS,cAAc;;;ACEvB,IAAM,cAAN,MAAkB;AAAA,EACR,UAAU,oBAAI,IAAyB;AAAA,EAE/C,WAAW,IAAY,WAAmB,YAA8E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,SAAS,KAAK,QAAQ,IAAI,EAAE;AAEhC,QAAI,CAAC,QAAQ;AACX,eAAS,EAAE,QAAQ,WAAW,YAAY,IAAI;AAC9C,WAAK,QAAQ,IAAI,IAAI,MAAM;AAAA,IAC7B;AAEA,UAAM,WAAW,MAAM,OAAO,cAAc;AAC5C,WAAO,SAAS,KAAK,IAAI,WAAW,OAAO,SAAS,UAAU,UAAU;AACxE,WAAO,aAAa;AAEpB,QAAI,OAAO,UAAU,GAAG;AACtB,aAAO,UAAU;AACjB,YAAMA,WAAU,OAAO,UAAU,IAAI,KAAK,KAAM,IAAI,aAAc,GAAI,IAAI;AAC1E,aAAO,EAAE,SAAS,MAAM,WAAW,KAAK,MAAM,OAAO,MAAM,GAAG,SAAAA,SAAQ;AAAA,IACxE;AAEA,UAAM,UAAU,KAAK,MAAO,IAAI,OAAO,UAAU,aAAc,GAAI;AACnE,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEA,IAAM,mBAAN,MAAuB;AAAA,EACb,UAAU,oBAAI,IAAgC;AAAA,EAEtD,WAAW,IAAY,aAAqB,UAA4E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,QAAQ,KAAK,QAAQ,IAAI,EAAE;AAE/B,QAAI,CAAC,OAAO;AACV,cAAQ,EAAE,YAAY,CAAC,EAAE;AACzB,WAAK,QAAQ,IAAI,IAAI,KAAK;AAAA,IAC5B;AAEA,UAAM,aAAa,MAAM,WAAW,OAAO,OAAK,MAAM,IAAI,QAAQ;AAElE,QAAI,MAAM,WAAW,SAAS,aAAa;AACzC,YAAM,WAAW,KAAK,GAAG;AACzB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,WAAW,cAAc,MAAM,WAAW;AAAA,QAC1C,SAAS,MAAM,WAAW,SAAS,IAAI,YAAY,MAAM,MAAM,WAAW,CAAC,KAAK;AAAA,MAClF;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,WAAW,CAAC;AACzC,UAAM,UAAU,YAAY,MAAM;AAClC,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEA,IAAM,qBAAN,MAAyB;AAAA,EACf,UAAU,oBAAI,IAA8B;AAAA,EAEpD,WAAW,IAAY,aAAqB,UAA4E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,QAAQ,KAAK,QAAQ,IAAI,EAAE;AAE/B,QAAI,CAAC,SAAS,MAAM,MAAM,eAAe,UAAU;AACjD,cAAQ,EAAE,OAAO,GAAG,aAAa,IAAI;AACrC,WAAK,QAAQ,IAAI,IAAI,KAAK;AAAA,IAC5B;AAEA,UAAM,UAAU,YAAY,MAAM,MAAM;AAExC,QAAI,MAAM,QAAQ,aAAa;AAC7B,YAAM;AACN,aAAO,EAAE,SAAS,MAAM,WAAW,cAAc,MAAM,OAAO,QAAQ;AAAA,IACxE;AAEA,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEO,IAAM,qBAAN,MAAyB;AAAA,EACtB,cAAc,IAAI,YAAY;AAAA,EAC9B,gBAAgB,IAAI,iBAAiB;AAAA,EACrC,cAAc,IAAI,mBAAmB;AAAA,EACrC,eAAe,IAAI,mBAAmB;AAAA,EACtC;AAAA,EACA,iBAAiB;AAAA,EAEzB,YAAY,QAAyB;AACnC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAI,gBAAwB;AAC1B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,WAAW,IAAY,MAAuF;AAC5G,UAAM,eAAe,KAAK,aAAa;AAAA,MACrC;AAAA,MACA,KAAK,OAAO,YAAY;AAAA,MACxB,KAAK,OAAO,YAAY;AAAA,IAC1B;AAEA,QAAI,CAAC,aAAa,SAAS;AACzB,WAAK;AACL,aAAO,EAAE,SAAS,OAAO,WAAW,GAAG,SAAS,aAAa,SAAS,OAAO,KAAK,OAAO,YAAY,YAAY;AAAA,IACnH;AAEA,UAAM,aAAa,KAAK,OAAO,MAAM,IAAI,KAAK,KAAK,OAAO,MAAM,KAAK,OAAO,WAAW;AAEvF,QAAI,CAAC,cAAc,WAAW,cAAc,QAAQ;AAClD,aAAO,EAAE,SAAS,MAAM,WAAW,IAAI,SAAS,GAAG,OAAO,GAAG;AAAA,IAC/D;AAEA,QAAI;AAEJ,YAAQ,WAAW,WAAW;AAAA,MAC5B,KAAK;AACH,iBAAS,KAAK,YAAY;AAAA,UACxB;AAAA,UACA,WAAW;AAAA,UACX,WAAW,cAAc;AAAA,QAC3B;AACA;AAAA,MACF,KAAK;AACH,iBAAS,KAAK,cAAc;AAAA,UAC1B;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AACA;AAAA,MACF,KAAK;AACH,iBAAS,KAAK,YAAY;AAAA,UACxB;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AACA;AAAA,MACF;AACE,eAAO,EAAE,SAAS,MAAM,WAAW,IAAI,SAAS,GAAG,OAAO,GAAG;AAAA,IACjE;AAEA,QAAI,CAAC,OAAO,SAAS;AACnB,WAAK;AAAA,IACP;AAEA,WAAO,EAAE,GAAG,QAAQ,OAAO,WAAW,YAAa;AAAA,EACrD;AAAA,EAEA,YAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AACF;;;ACvJA,IAAM,eAAe;AACrB,IAAM,mBAAmB;AAElB,IAAM,mBAAN,MAAuB;AAAA,EACpB,OAAqB,CAAC;AAAA,EACtB,OAAO;AAAA,EACP,QAAQ;AAAA,EAEhB,OAAO,KAAuB;AAC5B,QAAI,KAAK,QAAQ,cAAc;AAC7B,WAAK,KAAK,KAAK,GAAG;AAClB,WAAK;AAAA,IACP,OAAO;AACL,WAAK,KAAK,KAAK,IAAI,IAAI;AACvB,WAAK,QAAQ,KAAK,OAAO,KAAK;AAAA,IAChC;AAAA,EACF;AAAA,EAEA,cAAc,QAAQ,IAAI,SAAS,GAAiB;AAClD,UAAM,UAAU,KAAK,eAAe;AACpC,WAAO,QAAQ,MAAM,QAAQ,SAAS,KAAK;AAAA,EAC7C;AAAA,EAEA,aAAa,eAAyC;AACpD,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,MAAM;AAC3B,UAAM,oBAAoB,MAAM;AAChC,UAAM,UAAU,KAAK,eAAe;AAEpC,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,YAAY,YAAY;AACjE,UAAM,oBAAoB,WAAW;AAGrC,UAAM,iBAAiB,oBAAI,IAAoB;AAC/C,eAAW,OAAO,SAAS;AACzB,YAAM,UAAU,eAAe,IAAI,IAAI,IAAI,KAAK;AAChD,qBAAe,IAAI,IAAI,MAAM,UAAU,CAAC;AAAA,IAC1C;AACA,UAAM,eAAe,MAAM,KAAK,eAAe,QAAQ,CAAC,EACrD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,MAAM,MAAM,EAAE,EACxC,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAChC,MAAM,GAAG,CAAC;AAGb,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,cAAc,GAAG,EAAE;AAC5D,UAAM,YAAY,KAAK,QAAQ,IAAK,aAAa,KAAK,QAAS,MAAM;AAGrE,UAAM,oBAAoB,QAAQ,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,cAAc,CAAC;AAC5E,UAAM,kBAAkB,KAAK,QAAQ,IAAI,oBAAoB,KAAK,QAAQ;AAG1E,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,YAAY,iBAAiB;AACtE,UAAM,YAAY,IAAI,IAAI,WAAW,IAAI,OAAK,EAAE,EAAE,CAAC;AAGnD,UAAM,cAAc,oBAAI,IAAY;AACpC,eAAW,OAAO,YAAY;AAC5B,UAAI,IAAI,QAAQ;AACd,oBAAY,IAAI,GAAG,IAAI,EAAE,KAAK,IAAI,MAAM,EAAE;AAAA,MAC5C;AAAA,IACF;AAEA,WAAO;AAAA,MACL,eAAe,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,WAAW,KAAK,MAAM,YAAY,GAAG,IAAI;AAAA,MACzC,iBAAiB,KAAK,MAAM,kBAAkB,GAAG,IAAI;AAAA,MACrD,eAAe,UAAU;AAAA,MACzB,eAAe,YAAY;AAAA,MAC3B;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,iBAA+B;AACrC,QAAI,KAAK,QAAQ,cAAc;AAC7B,aAAO,CAAC,GAAG,KAAK,IAAI,EAAE,QAAQ;AAAA,IAChC;AACA,UAAM,OAAO,KAAK,KAAK,MAAM,GAAG,KAAK,IAAI;AACzC,UAAM,WAAW,KAAK,KAAK,MAAM,KAAK,IAAI;AAC1C,WAAO,CAAC,GAAG,UAAU,GAAG,IAAI,EAAE,QAAQ;AAAA,EACxC;AACF;;;ACnFO,IAAM,4BAA6C;AAAA,EACxD,OAAO;AAAA,IACL,MAAM,EAAE,WAAW,eAAe,aAAa,KAAK,UAAU,KAAO,YAAY,GAAG;AAAA,IACpF,KAAK,EAAE,WAAW,iBAAiB,aAAa,KAAM,UAAU,IAAM;AAAA,IACtE,WAAW,EAAE,WAAW,OAAO;AAAA,EACjC;AAAA,EACA,aAAa;AAAA,EACb,aAAa,EAAE,aAAa,KAAO,UAAU,IAAM;AACrD;AAEO,IAAM,mBAA4B;AAAA,EACvC,WAAW,CAAC;AAAA,EACZ,WAAW,CAAC;AAAA,EACZ,MAAM;AACR;AAEO,IAAM,mBAAkC;AAAA,EAC7C,MAAM,CAAC;AACT;;;ACjBO,SAAS,iBAAiB,SAA8B;AAC7D,SAAO,SAAS,WAAW,KAAc,KAAe,MAA0B;AAChF,UAAM,SAAS,IAAI,OAAO,WAAW,KAAK,IAAI,MAAM;AAEpD,QAAI,CAAC,QAAQ;AACX,MAAC,IAAY,WAAW,IAAI,MAAM;AAClC,MAAC,IAAY,OAAO;AACpB,WAAK;AACL;AAAA,IACF;AAEA,UAAM,SAAS,QAAQ;AACvB,UAAM,WAAW,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,UAAU,EAAE,MAAM;AAEnE,QAAI,CAAC,UAAU;AACb,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,6BAA6B,CAAC;AAC5D;AAAA,IACF;AAEA,IAAC,IAAY,WAAW,SAAS;AACjC,IAAC,IAAY,OAAO,SAAS;AAC7B,IAAC,IAAY,cAAc,SAAS;AACpC,SAAK;AAAA,EACP;AACF;;;ACxBO,SAAS,eAAe,UAAyB;AACtD,SAAO,SAAS,SAAS,KAAc,KAAe,MAA0B;AAC9E,UAAM,QAAQ,SAAS;AACvB,UAAM,WAAW,IAAI,MAAM,IAAI,OAAO,iBAAiB;AAEvD,QAAI,MAAM,SAAS,eAAe,MAAM,UAAU,SAAS,GAAG;AAC5D,UAAI,CAAC,MAAM,UAAU,SAAS,QAAQ,GAAG;AACvC,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,sBAAsB,CAAC;AACrD;AAAA,MACF;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,eAAe,MAAM,UAAU,SAAS,GAAG;AAC5D,UAAI,MAAM,UAAU,SAAS,QAAQ,GAAG;AACtC,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,gBAAgB,CAAC;AAC/C;AAAA,MACF;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;;;ACrBO,SAAS,kBAAkB,SAA6B;AAC7D,SAAO,SAAS,YAAY,KAAc,KAAe,MAA0B;AACjF,UAAM,KAAK,IAAI,MAAM,IAAI,OAAO,iBAAiB;AACjD,UAAM,OAAQ,IAAY,QAAQ;AAElC,UAAM,SAAS,QAAQ,WAAW,IAAI,IAAI;AAE1C,QAAI,OAAO,QAAQ,GAAG;AACpB,UAAI,UAAU,qBAAqB,OAAO,KAAK;AAC/C,UAAI,UAAU,yBAAyB,KAAK,IAAI,GAAG,OAAO,SAAS,CAAC;AACpE,UAAI,UAAU,qBAAqB,KAAK,KAAK,OAAO,UAAU,GAAI,CAAC;AAAA,IACrE;AAEA,QAAI,CAAC,OAAO,SAAS;AACnB,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,OAAO;AAAA,QACP,YAAY,KAAK,KAAK,OAAO,UAAU,GAAI;AAAA,MAC7C,CAAC;AACD;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;;;ACvBO,SAAS,oBAAoB,WAA6B;AAC/D,SAAO,SAAS,cAAc,KAAc,KAAe,MAA0B;AACnF,UAAM,QAAQ,KAAK,IAAI;AAEvB,QAAI,GAAG,UAAU,MAAM;AACrB,YAAM,eAAe,KAAK,IAAI,IAAI;AAClC,gBAAU,OAAO;AAAA,QACf,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,MAAM,IAAI;AAAA,QACV,YAAY,IAAI;AAAA,QAChB;AAAA,QACA,UAAW,IAAY,YAAY,IAAI,MAAM;AAAA,QAC7C,IAAI,IAAI,MAAM,IAAI,OAAO,iBAAiB;AAAA,QAC1C,QAAS,IAAY,eAAe;AAAA,MACtC,CAAC;AAAA,IACH,CAAC;AAED,SAAK;AAAA,EACP;AACF;;;APNO,SAAS,wBAAwB,YAAwD;AAC9F,QAAM,SAA4C;AAAA,IAChD,YAAY,YAAY,cAAc;AAAA,IACtC,SAAS,YAAY,WAAW;AAAA,IAChC,SAAS,YAAY,WAAW;AAAA,EAClC;AAEA,QAAM,qBAAqB,IAAI,mBAAmB,OAAO,UAAU;AACnE,QAAM,mBAAmB,IAAI,iBAAiB;AAE9C,QAAM,SAAS,OAAO;AACtB,SAAO,IAAI,oBAAoB,gBAAgB,CAAC;AAChD,SAAO,IAAI,iBAAiB,MAAM,OAAO,OAAO,CAAC;AACjD,SAAO,IAAI,eAAe,MAAM,OAAO,OAAO,CAAC;AAC/C,SAAO,IAAI,kBAAkB,kBAAkB,CAAC;AAEhD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ;AAAA,EACF;AACF;;;AQvCA,SAAS,UAAAC,eAAiC;AAI1C,OAAO,YAAY;AAQZ,SAAS,oBAAoB,SAAuC;AACzE,QAAM,EAAE,oBAAoB,kBAAkB,OAAO,IAAI;AACzD,QAAM,SAASA,QAAO;AAGtB,SAAO,IAAI,cAAc,CAAC,MAAe,QAAkB;AACzD,UAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,QAAI,KAAK,SAAS;AAAA,EACpB,CAAC;AAGD,SAAO,IAAI,mBAAmB,CAAC,MAAe,QAAkB;AAC9D,QAAI,UAAU,gBAAgB,mBAAmB;AACjD,QAAI,UAAU,iBAAiB,UAAU;AACzC,QAAI,UAAU,cAAc,YAAY;AACxC,QAAI,UAAU,qBAAqB,IAAI;AACvC,QAAI,UAAU,+BAA+B,GAAG;AAChD,QAAI,aAAa;AAEjB,UAAM,OAAO,MAAY;AACvB,YAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,UAAI,MAAM,SAAS,KAAK,UAAU,SAAS,CAAC;AAAA;AAAA,CAAM;AAAA,IACpD;AAEA,SAAK;AACL,UAAM,WAAW,YAAY,MAAM,GAAI;AAEvC,SAAK,GAAG,SAAS,MAAM;AACrB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AAGD,SAAO,IAAI,WAAW,CAAC,MAAe,QAAkB;AACtD,UAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,QAAI,KAAK;AAAA,MACP,YAAY,OAAO;AAAA,MACnB,SAAS,OAAO;AAAA,MAChB,YAAY,OAAO,QAAQ,KAAK,OAAO,OAAK,EAAE,MAAM,EAAE;AAAA,MACtD,eAAe,UAAU;AAAA,IAC3B,CAAC;AAAA,EACH,CAAC;AAGD,SAAO,KAAK,SAAS,CAAC,KAAc,QAAkB;AACpD,UAAM,EAAE,MAAM,KAAK,IAAI,IAAI;AAE3B,QAAI,CAAC,MAAM;AACT,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAClD;AAAA,IACF;AAEA,UAAM,SAAS;AAAA,MACb,IAAI,OAAO,OAAO,OAAO,QAAQ,KAAK,SAAS,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,MAClE,KAAK,WAAW,OAAO,YAAY,EAAE,EAAE,SAAS,KAAK,CAAC;AAAA,MACtD;AAAA,MACA,MAAM,QAAQ;AAAA,MACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,QAAQ;AAAA,IACV;AAEA,WAAO,QAAQ,KAAK,KAAK,MAAM;AAC/B,QAAI,OAAO,GAAG,EAAE,KAAK,MAAM;AAAA,EAC7B,CAAC;AAGD,SAAO,OAAO,gBAAgB,CAAC,KAAc,QAAkB;AAC7D,UAAM,EAAE,MAAM,IAAI,IAAI;AACtB,UAAM,MAAM,OAAO,QAAQ,KAAK,KAAK,OAAK,EAAE,OAAO,KAAK;AAExD,QAAI,CAAC,KAAK;AACR,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;AAAA,IACF;AAEA,QAAI,SAAS;AACb,QAAI,KAAK,EAAE,SAAS,mBAAmB,IAAI,MAAM,CAAC;AAAA,EACpD,CAAC;AAGD,SAAO,IAAI,SAAS,CAAC,KAAc,QAAkB;AACnD,UAAM,QAAQ,SAAS,IAAI,MAAM,KAAe,KAAK;AACrD,UAAM,SAAS,SAAS,IAAI,MAAM,MAAgB,KAAK;AACvD,UAAM,OAAO,iBAAiB,cAAc,OAAO,MAAM;AACzD,QAAI,KAAK,EAAE,MAAM,OAAO,OAAO,CAAC;AAAA,EAClC,CAAC;AAED,SAAO;AACT;","names":["resetMs","Router"]}
+{"version":3,"sources":["../../src/backend/middleware/gateway.ts","../../src/backend/services/RateLimiterService.ts","../../src/backend/services/AnalyticsService.ts","../../src/config/defaults.ts","../../src/backend/middleware/apiKeyAuth.ts","../../src/backend/middleware/ipFilter.ts","../../src/backend/middleware/rateLimiter.ts","../../src/backend/middleware/requestLogger.ts","../../src/backend/routes/gateway.ts"],"sourcesContent":["import { Router } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\nimport { AnalyticsService } from '../services/AnalyticsService';\nimport type { GatewayMiddlewareConfig } from '../../types';\nimport { DEFAULT_RATE_LIMIT_CONFIG, DEFAULT_IP_RULES, DEFAULT_API_KEYS } from '../../config/defaults';\nimport { createApiKeyAuth } from './apiKeyAuth';\nimport { createIpFilter } from './ipFilter';\nimport { createRateLimiter } from './rateLimiter';\nimport { createRequestLogger } from './requestLogger';\n\nexport interface GatewayInstances {\n  rateLimiterService: RateLimiterService;\n  analyticsService: AnalyticsService;\n  middleware: Router;\n  config: Required<GatewayMiddlewareConfig>;\n}\n\nexport function createGatewayMiddleware(userConfig?: GatewayMiddlewareConfig): GatewayInstances {\n  const config: Required<GatewayMiddlewareConfig> = {\n    rateLimits: userConfig?.rateLimits ?? DEFAULT_RATE_LIMIT_CONFIG,\n    ipRules: userConfig?.ipRules ?? DEFAULT_IP_RULES,\n    apiKeys: userConfig?.apiKeys ?? DEFAULT_API_KEYS,\n  };\n\n  const rateLimiterService = new RateLimiterService(config.rateLimits);\n  const analyticsService = new AnalyticsService();\n\n  const router = Router();\n  router.use(createRequestLogger(analyticsService));\n  router.use(createApiKeyAuth(() => config.apiKeys));\n  router.use(createIpFilter(() => config.ipRules));\n  router.use(createRateLimiter(rateLimiterService));\n\n  return {\n    rateLimiterService,\n    analyticsService,\n    middleware: router,\n    config,\n  };\n}\n","import type { BucketState, SlidingWindowState, FixedWindowState, TierConfig, RateLimitConfig } from '../../types';\n\nclass TokenBucket {\n  private buckets = new Map<string, BucketState>();\n\n  tryConsume(ip: string, maxTokens: number, refillRate: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let bucket = this.buckets.get(ip);\n\n    if (!bucket) {\n      bucket = { tokens: maxTokens, lastRefill: now };\n      this.buckets.set(ip, bucket);\n    }\n\n    const elapsed = (now - bucket.lastRefill) / 1000;\n    bucket.tokens = Math.min(maxTokens, bucket.tokens + elapsed * refillRate);\n    bucket.lastRefill = now;\n\n    if (bucket.tokens >= 1) {\n      bucket.tokens -= 1;\n      const resetMs = bucket.tokens <= 0 ? Math.ceil((1 / refillRate) * 1000) : 0;\n      return { allowed: true, remaining: Math.floor(bucket.tokens), resetMs };\n    }\n\n    const resetMs = Math.ceil(((1 - bucket.tokens) / refillRate) * 1000);\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nclass SlidingWindowLog {\n  private windows = new Map<string, SlidingWindowState>();\n\n  tryConsume(ip: string, maxRequests: number, windowMs: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let state = this.windows.get(ip);\n\n    if (!state) {\n      state = { timestamps: [] };\n      this.windows.set(ip, state);\n    }\n\n    state.timestamps = state.timestamps.filter(t => now - t < windowMs);\n\n    if (state.timestamps.length < maxRequests) {\n      state.timestamps.push(now);\n      return {\n        allowed: true,\n        remaining: maxRequests - state.timestamps.length,\n        resetMs: state.timestamps.length > 0 ? windowMs - (now - state.timestamps[0]) : windowMs,\n      };\n    }\n\n    const oldestInWindow = state.timestamps[0];\n    const resetMs = windowMs - (now - oldestInWindow);\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nclass FixedWindowCounter {\n  private windows = new Map<string, FixedWindowState>();\n\n  tryConsume(ip: string, maxRequests: number, windowMs: number): { allowed: boolean; remaining: number; resetMs: number } {\n    const now = Date.now();\n    let state = this.windows.get(ip);\n\n    if (!state || now - state.windowStart >= windowMs) {\n      state = { count: 0, windowStart: now };\n      this.windows.set(ip, state);\n    }\n\n    const resetMs = windowMs - (now - state.windowStart);\n\n    if (state.count < maxRequests) {\n      state.count++;\n      return { allowed: true, remaining: maxRequests - state.count, resetMs };\n    }\n\n    return { allowed: false, remaining: 0, resetMs };\n  }\n}\n\nexport class RateLimiterService {\n  private tokenBucket = new TokenBucket();\n  private slidingWindow = new SlidingWindowLog();\n  private fixedWindow = new FixedWindowCounter();\n  private globalWindow = new FixedWindowCounter();\n  private config: RateLimitConfig;\n  private _rateLimitHits = 0;\n\n  constructor(config: RateLimitConfig) {\n    this.config = config;\n  }\n\n  get rateLimitHits(): number {\n    return this._rateLimitHits;\n  }\n\n  checkLimit(ip: string, tier: string): { allowed: boolean; remaining: number; resetMs: number; limit: number } {\n    const globalResult = this.globalWindow.tryConsume(\n      '__global__',\n      this.config.globalLimit.maxRequests,\n      this.config.globalLimit.windowMs\n    );\n\n    if (!globalResult.allowed) {\n      this._rateLimitHits++;\n      return { allowed: false, remaining: 0, resetMs: globalResult.resetMs, limit: this.config.globalLimit.maxRequests };\n    }\n\n    const tierConfig = this.config.tiers[tier] || this.config.tiers[this.config.defaultTier];\n\n    if (!tierConfig || tierConfig.algorithm === 'none') {\n      return { allowed: true, remaining: -1, resetMs: 0, limit: -1 };\n    }\n\n    let result: { allowed: boolean; remaining: number; resetMs: number };\n\n    switch (tierConfig.algorithm) {\n      case 'tokenBucket':\n        result = this.tokenBucket.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.refillRate || 1\n        );\n        break;\n      case 'slidingWindow':\n        result = this.slidingWindow.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.windowMs!\n        );\n        break;\n      case 'fixedWindow':\n        result = this.fixedWindow.tryConsume(\n          ip,\n          tierConfig.maxRequests!,\n          tierConfig.windowMs!\n        );\n        break;\n      default:\n        return { allowed: true, remaining: -1, resetMs: 0, limit: -1 };\n    }\n\n    if (!result.allowed) {\n      this._rateLimitHits++;\n    }\n\n    return { ...result, limit: tierConfig.maxRequests! };\n  }\n\n  getConfig(): RateLimitConfig {\n    return this.config;\n  }\n}\n","import type { RequestLog, GatewayAnalytics } from '../../types';\n\nconst MAX_LOG_SIZE = 10000;\nconst ACTIVE_WINDOW_MS = 300000; // 5 minutes\n\nexport class AnalyticsService {\n  private logs: RequestLog[] = [];\n  private head = 0;\n  private count = 0;\n\n  addLog(log: RequestLog): void {\n    if (this.count < MAX_LOG_SIZE) {\n      this.logs.push(log);\n      this.count++;\n    } else {\n      this.logs[this.head] = log;\n      this.head = (this.head + 1) % MAX_LOG_SIZE;\n    }\n  }\n\n  getRecentLogs(limit = 20, offset = 0): RequestLog[] {\n    const ordered = this.getOrderedLogs();\n    return ordered.slice(offset, offset + limit);\n  }\n\n  getAnalytics(rateLimitHits: number): GatewayAnalytics {\n    const now = Date.now();\n    const oneMinuteAgo = now - 60000;\n    const activeWindowStart = now - ACTIVE_WINDOW_MS;\n    const ordered = this.getOrderedLogs();\n\n    const recentLogs = ordered.filter(l => l.timestamp > oneMinuteAgo);\n    const requestsPerMinute = recentLogs.length;\n\n    // Top endpoints\n    const endpointCounts = new Map<string, number>();\n    for (const log of ordered) {\n      const current = endpointCounts.get(log.path) || 0;\n      endpointCounts.set(log.path, current + 1);\n    }\n    const topEndpoints = Array.from(endpointCounts.entries())\n      .map(([path, count]) => ({ path, count }))\n      .sort((a, b) => b.count - a.count)\n      .slice(0, 5);\n\n    // Error rate\n    const errorCount = ordered.filter(l => l.statusCode >= 400).length;\n    const errorRate = this.count > 0 ? (errorCount / this.count) * 100 : 0;\n\n    // Average response time\n    const totalResponseTime = ordered.reduce((sum, l) => sum + l.responseTime, 0);\n    const avgResponseTime = this.count > 0 ? totalResponseTime / this.count : 0;\n\n    // Active clients: unique IPs in last 5 minutes\n    const activeLogs = ordered.filter(l => l.timestamp > activeWindowStart);\n    const uniqueIps = new Set(activeLogs.map(l => l.ip));\n\n    // Active key uses: unique (IP + apiKey) pairs in last 5 minutes\n    const keyUsePairs = new Set<string>();\n    for (const log of activeLogs) {\n      if (log.apiKey) {\n        keyUsePairs.add(`${log.ip}::${log.apiKey}`);\n      }\n    }\n\n    return {\n      totalRequests: this.count,\n      requestsPerMinute,\n      topEndpoints,\n      errorRate: Math.round(errorRate * 100) / 100,\n      avgResponseTime: Math.round(avgResponseTime * 100) / 100,\n      activeClients: uniqueIps.size,\n      activeKeyUses: keyUsePairs.size,\n      rateLimitHits,\n    };\n  }\n\n  private getOrderedLogs(): RequestLog[] {\n    if (this.count < MAX_LOG_SIZE) {\n      return [...this.logs].reverse();\n    }\n    const tail = this.logs.slice(0, this.head);\n    const headPart = this.logs.slice(this.head);\n    return [...headPart, ...tail].reverse();\n  }\n}\n","import type { RateLimitConfig, IpRules, ApiKeysConfig } from '../types';\n\nexport const DEFAULT_RATE_LIMIT_CONFIG: RateLimitConfig = {\n  tiers: {\n    free: { algorithm: 'tokenBucket', maxRequests: 100, windowMs: 60000, refillRate: 10 },\n    pro: { algorithm: 'slidingWindow', maxRequests: 1000, windowMs: 60000 },\n    unlimited: { algorithm: 'none' },\n  },\n  defaultTier: 'free',\n  globalLimit: { maxRequests: 10000, windowMs: 60000 },\n};\n\nexport const DEFAULT_IP_RULES: IpRules = {\n  allowlist: [],\n  blocklist: [],\n  mode: 'blocklist',\n};\n\nexport const DEFAULT_API_KEYS: ApiKeysConfig = {\n  keys: [],\n};\n","import { Request, Response, NextFunction } from 'express';\nimport type { ApiKeysConfig } from '../../types';\n\nexport function createApiKeyAuth(getKeys: () => ApiKeysConfig) {\n  return function apiKeyAuth(req: Request, res: Response, next: NextFunction): void {\n    const apiKey = req.header('X-API-Key') || req.query.apiKey as string;\n\n    if (!apiKey) {\n      (req as any).clientId = req.ip || 'unknown';\n      (req as any).tier = 'free';\n      next();\n      return;\n    }\n\n    const config = getKeys();\n    const keyEntry = config.keys.find(k => k.key === apiKey && k.active);\n\n    if (!keyEntry) {\n      res.status(401).json({ error: 'Invalid or revoked API key' });\n      return;\n    }\n\n    (req as any).clientId = keyEntry.id;\n    (req as any).tier = keyEntry.tier;\n    (req as any).apiKeyValue = keyEntry.key;\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport type { IpRules } from '../../types';\n\nexport function createIpFilter(getRules: () => IpRules) {\n  return function ipFilter(req: Request, res: Response, next: NextFunction): void {\n    const rules = getRules();\n    const clientIp = req.ip || req.socket.remoteAddress || 'unknown';\n\n    if (rules.mode === 'allowlist' && rules.allowlist.length > 0) {\n      if (!rules.allowlist.includes(clientIp)) {\n        res.status(403).json({ error: 'IP not in allowlist' });\n        return;\n      }\n    }\n\n    if (rules.mode === 'blocklist' && rules.blocklist.length > 0) {\n      if (rules.blocklist.includes(clientIp)) {\n        res.status(403).json({ error: 'IP is blocked' });\n        return;\n      }\n    }\n\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\n\nexport function createRateLimiter(service: RateLimiterService) {\n  return function rateLimiter(req: Request, res: Response, next: NextFunction): void {\n    const ip = req.ip || req.socket.remoteAddress || 'unknown';\n    const tier = (req as any).tier || 'free';\n\n    const result = service.checkLimit(ip, tier);\n\n    if (result.limit > 0) {\n      res.setHeader('X-RateLimit-Limit', result.limit);\n      res.setHeader('X-RateLimit-Remaining', Math.max(0, result.remaining));\n      res.setHeader('X-RateLimit-Reset', Math.ceil(result.resetMs / 1000));\n    }\n\n    if (!result.allowed) {\n      res.status(429).json({\n        error: 'Rate limit exceeded',\n        retryAfter: Math.ceil(result.resetMs / 1000),\n      });\n      return;\n    }\n\n    next();\n  };\n}\n","import { Request, Response, NextFunction } from 'express';\nimport { AnalyticsService } from '../services/AnalyticsService';\n\nexport function createRequestLogger(analytics: AnalyticsService) {\n  return function requestLogger(req: Request, res: Response, next: NextFunction): void {\n    const start = Date.now();\n\n    res.on('finish', () => {\n      const responseTime = Date.now() - start;\n      const apiKeyValue = (req as any).apiKeyValue || undefined;\n      analytics.addLog({\n        timestamp: Date.now(),\n        method: req.method,\n        path: req.originalUrl,\n        statusCode: res.statusCode,\n        responseTime,\n        clientId: (req as any).clientId || req.ip || 'unknown',\n        ip: req.ip || req.socket.remoteAddress || 'unknown',\n        apiKey: apiKeyValue,\n        authenticated: !!apiKeyValue,\n      });\n    });\n\n    next();\n  };\n}\n","import { Router, Request, Response } from 'express';\nimport { RateLimiterService } from '../services/RateLimiterService';\nimport { AnalyticsService } from '../services/AnalyticsService';\nimport type { GatewayMiddlewareConfig } from '../../types';\nimport crypto from 'crypto';\n\nexport interface GatewayRoutesOptions {\n  rateLimiterService: RateLimiterService;\n  analyticsService: AnalyticsService;\n  config: Required<GatewayMiddlewareConfig>;\n}\n\nexport function createGatewayRoutes(options: GatewayRoutesOptions): Router {\n  const { rateLimiterService, analyticsService, config } = options;\n  const router = Router();\n\n  // GET /analytics - Returns current analytics snapshot\n  router.get('/analytics', (_req: Request, res: Response) => {\n    const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n    res.json(analytics);\n  });\n\n  // GET /analytics/live - SSE stream pushing analytics every 5 seconds\n  router.get('/analytics/live', (_req: Request, res: Response) => {\n    res.setHeader('Content-Type', 'text/event-stream');\n    res.setHeader('Cache-Control', 'no-cache');\n    res.setHeader('Connection', 'keep-alive');\n    res.setHeader('X-Accel-Buffering', 'no');\n    res.flushHeaders();\n\n    const send = (): void => {\n      const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n      res.write(`data: ${JSON.stringify(analytics)}\\n\\n`);\n    };\n\n    send();\n    const interval = setInterval(send, 5000);\n\n    _req.on('close', () => {\n      clearInterval(interval);\n    });\n  });\n\n  // GET /config - Returns current gateway config\n  router.get('/config', (_req: Request, res: Response) => {\n    const analytics = analyticsService.getAnalytics(rateLimiterService.rateLimitHits);\n    res.json({\n      rateLimits: config.rateLimits,\n      ipRules: config.ipRules,\n      activeKeys: config.apiKeys.keys.filter(k => k.active).length,\n      activeKeyUses: analytics.activeKeyUses,\n    });\n  });\n\n  // POST /keys - Create a new API key\n  router.post('/keys', (req: Request, res: Response) => {\n    const { name, tier } = req.body;\n\n    if (!name) {\n      res.status(400).json({ error: 'Name is required' });\n      return;\n    }\n\n    const newKey = {\n      id: `key_${String(config.apiKeys.keys.length + 1).padStart(3, '0')}`,\n      key: `gw_live_${crypto.randomBytes(16).toString('hex')}`,\n      name,\n      tier: tier || 'free',\n      createdAt: new Date().toISOString(),\n      active: true,\n    };\n\n    config.apiKeys.keys.push(newKey);\n    res.status(201).json(newKey);\n  });\n\n  // DELETE /keys/:keyId - Revoke an API key\n  router.delete('/keys/:keyId', (req: Request, res: Response) => {\n    const { keyId } = req.params;\n    const key = config.apiKeys.keys.find(k => k.id === keyId);\n\n    if (!key) {\n      res.status(404).json({ error: 'API key not found' });\n      return;\n    }\n\n    key.active = false;\n    res.json({ message: 'API key revoked', id: keyId });\n  });\n\n  // GET /logs - Returns recent request logs (paginated)\n  router.get('/logs', (req: Request, res: Response) => {\n    const limit = parseInt(req.query.limit as string) || 20;\n    const offset = parseInt(req.query.offset as string) || 0;\n    const logs = analyticsService.getRecentLogs(limit, offset);\n    res.json({ logs, limit, offset });\n  });\n\n  return router;\n}\n"],"mappings":";AAAA,SAAS,cAAc;;;ACEvB,IAAM,cAAN,MAAkB;AAAA,EACR,UAAU,oBAAI,IAAyB;AAAA,EAE/C,WAAW,IAAY,WAAmB,YAA8E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,SAAS,KAAK,QAAQ,IAAI,EAAE;AAEhC,QAAI,CAAC,QAAQ;AACX,eAAS,EAAE,QAAQ,WAAW,YAAY,IAAI;AAC9C,WAAK,QAAQ,IAAI,IAAI,MAAM;AAAA,IAC7B;AAEA,UAAM,WAAW,MAAM,OAAO,cAAc;AAC5C,WAAO,SAAS,KAAK,IAAI,WAAW,OAAO,SAAS,UAAU,UAAU;AACxE,WAAO,aAAa;AAEpB,QAAI,OAAO,UAAU,GAAG;AACtB,aAAO,UAAU;AACjB,YAAMA,WAAU,OAAO,UAAU,IAAI,KAAK,KAAM,IAAI,aAAc,GAAI,IAAI;AAC1E,aAAO,EAAE,SAAS,MAAM,WAAW,KAAK,MAAM,OAAO,MAAM,GAAG,SAAAA,SAAQ;AAAA,IACxE;AAEA,UAAM,UAAU,KAAK,MAAO,IAAI,OAAO,UAAU,aAAc,GAAI;AACnE,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEA,IAAM,mBAAN,MAAuB;AAAA,EACb,UAAU,oBAAI,IAAgC;AAAA,EAEtD,WAAW,IAAY,aAAqB,UAA4E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,QAAQ,KAAK,QAAQ,IAAI,EAAE;AAE/B,QAAI,CAAC,OAAO;AACV,cAAQ,EAAE,YAAY,CAAC,EAAE;AACzB,WAAK,QAAQ,IAAI,IAAI,KAAK;AAAA,IAC5B;AAEA,UAAM,aAAa,MAAM,WAAW,OAAO,OAAK,MAAM,IAAI,QAAQ;AAElE,QAAI,MAAM,WAAW,SAAS,aAAa;AACzC,YAAM,WAAW,KAAK,GAAG;AACzB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,WAAW,cAAc,MAAM,WAAW;AAAA,QAC1C,SAAS,MAAM,WAAW,SAAS,IAAI,YAAY,MAAM,MAAM,WAAW,CAAC,KAAK;AAAA,MAClF;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,WAAW,CAAC;AACzC,UAAM,UAAU,YAAY,MAAM;AAClC,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEA,IAAM,qBAAN,MAAyB;AAAA,EACf,UAAU,oBAAI,IAA8B;AAAA,EAEpD,WAAW,IAAY,aAAqB,UAA4E;AACtH,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,QAAQ,KAAK,QAAQ,IAAI,EAAE;AAE/B,QAAI,CAAC,SAAS,MAAM,MAAM,eAAe,UAAU;AACjD,cAAQ,EAAE,OAAO,GAAG,aAAa,IAAI;AACrC,WAAK,QAAQ,IAAI,IAAI,KAAK;AAAA,IAC5B;AAEA,UAAM,UAAU,YAAY,MAAM,MAAM;AAExC,QAAI,MAAM,QAAQ,aAAa;AAC7B,YAAM;AACN,aAAO,EAAE,SAAS,MAAM,WAAW,cAAc,MAAM,OAAO,QAAQ;AAAA,IACxE;AAEA,WAAO,EAAE,SAAS,OAAO,WAAW,GAAG,QAAQ;AAAA,EACjD;AACF;AAEO,IAAM,qBAAN,MAAyB;AAAA,EACtB,cAAc,IAAI,YAAY;AAAA,EAC9B,gBAAgB,IAAI,iBAAiB;AAAA,EACrC,cAAc,IAAI,mBAAmB;AAAA,EACrC,eAAe,IAAI,mBAAmB;AAAA,EACtC;AAAA,EACA,iBAAiB;AAAA,EAEzB,YAAY,QAAyB;AACnC,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAI,gBAAwB;AAC1B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,WAAW,IAAY,MAAuF;AAC5G,UAAM,eAAe,KAAK,aAAa;AAAA,MACrC;AAAA,MACA,KAAK,OAAO,YAAY;AAAA,MACxB,KAAK,OAAO,YAAY;AAAA,IAC1B;AAEA,QAAI,CAAC,aAAa,SAAS;AACzB,WAAK;AACL,aAAO,EAAE,SAAS,OAAO,WAAW,GAAG,SAAS,aAAa,SAAS,OAAO,KAAK,OAAO,YAAY,YAAY;AAAA,IACnH;AAEA,UAAM,aAAa,KAAK,OAAO,MAAM,IAAI,KAAK,KAAK,OAAO,MAAM,KAAK,OAAO,WAAW;AAEvF,QAAI,CAAC,cAAc,WAAW,cAAc,QAAQ;AAClD,aAAO,EAAE,SAAS,MAAM,WAAW,IAAI,SAAS,GAAG,OAAO,GAAG;AAAA,IAC/D;AAEA,QAAI;AAEJ,YAAQ,WAAW,WAAW;AAAA,MAC5B,KAAK;AACH,iBAAS,KAAK,YAAY;AAAA,UACxB;AAAA,UACA,WAAW;AAAA,UACX,WAAW,cAAc;AAAA,QAC3B;AACA;AAAA,MACF,KAAK;AACH,iBAAS,KAAK,cAAc;AAAA,UAC1B;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AACA;AAAA,MACF,KAAK;AACH,iBAAS,KAAK,YAAY;AAAA,UACxB;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AACA;AAAA,MACF;AACE,eAAO,EAAE,SAAS,MAAM,WAAW,IAAI,SAAS,GAAG,OAAO,GAAG;AAAA,IACjE;AAEA,QAAI,CAAC,OAAO,SAAS;AACnB,WAAK;AAAA,IACP;AAEA,WAAO,EAAE,GAAG,QAAQ,OAAO,WAAW,YAAa;AAAA,EACrD;AAAA,EAEA,YAA6B;AAC3B,WAAO,KAAK;AAAA,EACd;AACF;;;ACvJA,IAAM,eAAe;AACrB,IAAM,mBAAmB;AAElB,IAAM,mBAAN,MAAuB;AAAA,EACpB,OAAqB,CAAC;AAAA,EACtB,OAAO;AAAA,EACP,QAAQ;AAAA,EAEhB,OAAO,KAAuB;AAC5B,QAAI,KAAK,QAAQ,cAAc;AAC7B,WAAK,KAAK,KAAK,GAAG;AAClB,WAAK;AAAA,IACP,OAAO;AACL,WAAK,KAAK,KAAK,IAAI,IAAI;AACvB,WAAK,QAAQ,KAAK,OAAO,KAAK;AAAA,IAChC;AAAA,EACF;AAAA,EAEA,cAAc,QAAQ,IAAI,SAAS,GAAiB;AAClD,UAAM,UAAU,KAAK,eAAe;AACpC,WAAO,QAAQ,MAAM,QAAQ,SAAS,KAAK;AAAA,EAC7C;AAAA,EAEA,aAAa,eAAyC;AACpD,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,MAAM;AAC3B,UAAM,oBAAoB,MAAM;AAChC,UAAM,UAAU,KAAK,eAAe;AAEpC,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,YAAY,YAAY;AACjE,UAAM,oBAAoB,WAAW;AAGrC,UAAM,iBAAiB,oBAAI,IAAoB;AAC/C,eAAW,OAAO,SAAS;AACzB,YAAM,UAAU,eAAe,IAAI,IAAI,IAAI,KAAK;AAChD,qBAAe,IAAI,IAAI,MAAM,UAAU,CAAC;AAAA,IAC1C;AACA,UAAM,eAAe,MAAM,KAAK,eAAe,QAAQ,CAAC,EACrD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,MAAM,MAAM,EAAE,EACxC,KAAK,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAChC,MAAM,GAAG,CAAC;AAGb,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,cAAc,GAAG,EAAE;AAC5D,UAAM,YAAY,KAAK,QAAQ,IAAK,aAAa,KAAK,QAAS,MAAM;AAGrE,UAAM,oBAAoB,QAAQ,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,cAAc,CAAC;AAC5E,UAAM,kBAAkB,KAAK,QAAQ,IAAI,oBAAoB,KAAK,QAAQ;AAG1E,UAAM,aAAa,QAAQ,OAAO,OAAK,EAAE,YAAY,iBAAiB;AACtE,UAAM,YAAY,IAAI,IAAI,WAAW,IAAI,OAAK,EAAE,EAAE,CAAC;AAGnD,UAAM,cAAc,oBAAI,IAAY;AACpC,eAAW,OAAO,YAAY;AAC5B,UAAI,IAAI,QAAQ;AACd,oBAAY,IAAI,GAAG,IAAI,EAAE,KAAK,IAAI,MAAM,EAAE;AAAA,MAC5C;AAAA,IACF;AAEA,WAAO;AAAA,MACL,eAAe,KAAK;AAAA,MACpB;AAAA,MACA;AAAA,MACA,WAAW,KAAK,MAAM,YAAY,GAAG,IAAI;AAAA,MACzC,iBAAiB,KAAK,MAAM,kBAAkB,GAAG,IAAI;AAAA,MACrD,eAAe,UAAU;AAAA,MACzB,eAAe,YAAY;AAAA,MAC3B;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,iBAA+B;AACrC,QAAI,KAAK,QAAQ,cAAc;AAC7B,aAAO,CAAC,GAAG,KAAK,IAAI,EAAE,QAAQ;AAAA,IAChC;AACA,UAAM,OAAO,KAAK,KAAK,MAAM,GAAG,KAAK,IAAI;AACzC,UAAM,WAAW,KAAK,KAAK,MAAM,KAAK,IAAI;AAC1C,WAAO,CAAC,GAAG,UAAU,GAAG,IAAI,EAAE,QAAQ;AAAA,EACxC;AACF;;;ACnFO,IAAM,4BAA6C;AAAA,EACxD,OAAO;AAAA,IACL,MAAM,EAAE,WAAW,eAAe,aAAa,KAAK,UAAU,KAAO,YAAY,GAAG;AAAA,IACpF,KAAK,EAAE,WAAW,iBAAiB,aAAa,KAAM,UAAU,IAAM;AAAA,IACtE,WAAW,EAAE,WAAW,OAAO;AAAA,EACjC;AAAA,EACA,aAAa;AAAA,EACb,aAAa,EAAE,aAAa,KAAO,UAAU,IAAM;AACrD;AAEO,IAAM,mBAA4B;AAAA,EACvC,WAAW,CAAC;AAAA,EACZ,WAAW,CAAC;AAAA,EACZ,MAAM;AACR;AAEO,IAAM,mBAAkC;AAAA,EAC7C,MAAM,CAAC;AACT;;;ACjBO,SAAS,iBAAiB,SAA8B;AAC7D,SAAO,SAAS,WAAW,KAAc,KAAe,MAA0B;AAChF,UAAM,SAAS,IAAI,OAAO,WAAW,KAAK,IAAI,MAAM;AAEpD,QAAI,CAAC,QAAQ;AACX,MAAC,IAAY,WAAW,IAAI,MAAM;AAClC,MAAC,IAAY,OAAO;AACpB,WAAK;AACL;AAAA,IACF;AAEA,UAAM,SAAS,QAAQ;AACvB,UAAM,WAAW,OAAO,KAAK,KAAK,OAAK,EAAE,QAAQ,UAAU,EAAE,MAAM;AAEnE,QAAI,CAAC,UAAU;AACb,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,6BAA6B,CAAC;AAC5D;AAAA,IACF;AAEA,IAAC,IAAY,WAAW,SAAS;AACjC,IAAC,IAAY,OAAO,SAAS;AAC7B,IAAC,IAAY,cAAc,SAAS;AACpC,SAAK;AAAA,EACP;AACF;;;ACxBO,SAAS,eAAe,UAAyB;AACtD,SAAO,SAAS,SAAS,KAAc,KAAe,MAA0B;AAC9E,UAAM,QAAQ,SAAS;AACvB,UAAM,WAAW,IAAI,MAAM,IAAI,OAAO,iBAAiB;AAEvD,QAAI,MAAM,SAAS,eAAe,MAAM,UAAU,SAAS,GAAG;AAC5D,UAAI,CAAC,MAAM,UAAU,SAAS,QAAQ,GAAG;AACvC,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,sBAAsB,CAAC;AACrD;AAAA,MACF;AAAA,IACF;AAEA,QAAI,MAAM,SAAS,eAAe,MAAM,UAAU,SAAS,GAAG;AAC5D,UAAI,MAAM,UAAU,SAAS,QAAQ,GAAG;AACtC,YAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,gBAAgB,CAAC;AAC/C;AAAA,MACF;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;;;ACrBO,SAAS,kBAAkB,SAA6B;AAC7D,SAAO,SAAS,YAAY,KAAc,KAAe,MAA0B;AACjF,UAAM,KAAK,IAAI,MAAM,IAAI,OAAO,iBAAiB;AACjD,UAAM,OAAQ,IAAY,QAAQ;AAElC,UAAM,SAAS,QAAQ,WAAW,IAAI,IAAI;AAE1C,QAAI,OAAO,QAAQ,GAAG;AACpB,UAAI,UAAU,qBAAqB,OAAO,KAAK;AAC/C,UAAI,UAAU,yBAAyB,KAAK,IAAI,GAAG,OAAO,SAAS,CAAC;AACpE,UAAI,UAAU,qBAAqB,KAAK,KAAK,OAAO,UAAU,GAAI,CAAC;AAAA,IACrE;AAEA,QAAI,CAAC,OAAO,SAAS;AACnB,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,OAAO;AAAA,QACP,YAAY,KAAK,KAAK,OAAO,UAAU,GAAI;AAAA,MAC7C,CAAC;AACD;AAAA,IACF;AAEA,SAAK;AAAA,EACP;AACF;;;ACvBO,SAAS,oBAAoB,WAA6B;AAC/D,SAAO,SAAS,cAAc,KAAc,KAAe,MAA0B;AACnF,UAAM,QAAQ,KAAK,IAAI;AAEvB,QAAI,GAAG,UAAU,MAAM;AACrB,YAAM,eAAe,KAAK,IAAI,IAAI;AAClC,YAAM,cAAe,IAAY,eAAe;AAChD,gBAAU,OAAO;AAAA,QACf,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ,IAAI;AAAA,QACZ,MAAM,IAAI;AAAA,QACV,YAAY,IAAI;AAAA,QAChB;AAAA,QACA,UAAW,IAAY,YAAY,IAAI,MAAM;AAAA,QAC7C,IAAI,IAAI,MAAM,IAAI,OAAO,iBAAiB;AAAA,QAC1C,QAAQ;AAAA,QACR,eAAe,CAAC,CAAC;AAAA,MACnB,CAAC;AAAA,IACH,CAAC;AAED,SAAK;AAAA,EACP;AACF;;;APRO,SAAS,wBAAwB,YAAwD;AAC9F,QAAM,SAA4C;AAAA,IAChD,YAAY,YAAY,cAAc;AAAA,IACtC,SAAS,YAAY,WAAW;AAAA,IAChC,SAAS,YAAY,WAAW;AAAA,EAClC;AAEA,QAAM,qBAAqB,IAAI,mBAAmB,OAAO,UAAU;AACnE,QAAM,mBAAmB,IAAI,iBAAiB;AAE9C,QAAM,SAAS,OAAO;AACtB,SAAO,IAAI,oBAAoB,gBAAgB,CAAC;AAChD,SAAO,IAAI,iBAAiB,MAAM,OAAO,OAAO,CAAC;AACjD,SAAO,IAAI,eAAe,MAAM,OAAO,OAAO,CAAC;AAC/C,SAAO,IAAI,kBAAkB,kBAAkB,CAAC;AAEhD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ;AAAA,EACF;AACF;;;AQvCA,SAAS,UAAAC,eAAiC;AAI1C,OAAO,YAAY;AAQZ,SAAS,oBAAoB,SAAuC;AACzE,QAAM,EAAE,oBAAoB,kBAAkB,OAAO,IAAI;AACzD,QAAM,SAASA,QAAO;AAGtB,SAAO,IAAI,cAAc,CAAC,MAAe,QAAkB;AACzD,UAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,QAAI,KAAK,SAAS;AAAA,EACpB,CAAC;AAGD,SAAO,IAAI,mBAAmB,CAAC,MAAe,QAAkB;AAC9D,QAAI,UAAU,gBAAgB,mBAAmB;AACjD,QAAI,UAAU,iBAAiB,UAAU;AACzC,QAAI,UAAU,cAAc,YAAY;AACxC,QAAI,UAAU,qBAAqB,IAAI;AACvC,QAAI,aAAa;AAEjB,UAAM,OAAO,MAAY;AACvB,YAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,UAAI,MAAM,SAAS,KAAK,UAAU,SAAS,CAAC;AAAA;AAAA,CAAM;AAAA,IACpD;AAEA,SAAK;AACL,UAAM,WAAW,YAAY,MAAM,GAAI;AAEvC,SAAK,GAAG,SAAS,MAAM;AACrB,oBAAc,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AAGD,SAAO,IAAI,WAAW,CAAC,MAAe,QAAkB;AACtD,UAAM,YAAY,iBAAiB,aAAa,mBAAmB,aAAa;AAChF,QAAI,KAAK;AAAA,MACP,YAAY,OAAO;AAAA,MACnB,SAAS,OAAO;AAAA,MAChB,YAAY,OAAO,QAAQ,KAAK,OAAO,OAAK,EAAE,MAAM,EAAE;AAAA,MACtD,eAAe,UAAU;AAAA,IAC3B,CAAC;AAAA,EACH,CAAC;AAGD,SAAO,KAAK,SAAS,CAAC,KAAc,QAAkB;AACpD,UAAM,EAAE,MAAM,KAAK,IAAI,IAAI;AAE3B,QAAI,CAAC,MAAM;AACT,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAClD;AAAA,IACF;AAEA,UAAM,SAAS;AAAA,MACb,IAAI,OAAO,OAAO,OAAO,QAAQ,KAAK,SAAS,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,MAClE,KAAK,WAAW,OAAO,YAAY,EAAE,EAAE,SAAS,KAAK,CAAC;AAAA,MACtD;AAAA,MACA,MAAM,QAAQ;AAAA,MACd,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,QAAQ;AAAA,IACV;AAEA,WAAO,QAAQ,KAAK,KAAK,MAAM;AAC/B,QAAI,OAAO,GAAG,EAAE,KAAK,MAAM;AAAA,EAC7B,CAAC;AAGD,SAAO,OAAO,gBAAgB,CAAC,KAAc,QAAkB;AAC7D,UAAM,EAAE,MAAM,IAAI,IAAI;AACtB,UAAM,MAAM,OAAO,QAAQ,KAAK,KAAK,OAAK,EAAE,OAAO,KAAK;AAExD,QAAI,CAAC,KAAK;AACR,UAAI,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;AAAA,IACF;AAEA,QAAI,SAAS;AACb,QAAI,KAAK,EAAE,SAAS,mBAAmB,IAAI,MAAM,CAAC;AAAA,EACpD,CAAC;AAGD,SAAO,IAAI,SAAS,CAAC,KAAc,QAAkB;AACnD,UAAM,QAAQ,SAAS,IAAI,MAAM,KAAe,KAAK;AACrD,UAAM,SAAS,SAAS,IAAI,MAAM,MAAgB,KAAK;AACvD,UAAM,OAAO,iBAAiB,cAAc,OAAO,MAAM;AACzD,QAAI,KAAK,EAAE,MAAM,OAAO,OAAO,CAAC;AAAA,EAClC,CAAC;AAED,SAAO;AACT;","names":["resetMs","Router"]}

package/dist/frontend/GatewayDashboard.css

@@ -209,6 +209,24 @@
   color: var(--gw-warning);
 }
 
+.gw-auth-badge {
+  padding: 2px 8px;
+  border-radius: 4px;
+  font-size: 0.7rem;
+  font-weight: 600;
+  font-family: var(--gw-font-mono);
+}
+
+.gw-auth-yes {
+  background: rgba(100, 255, 218, 0.1);
+  color: var(--gw-accent);
+}
+
+.gw-auth-no {
+  background: rgba(136, 136, 136, 0.1);
+  color: var(--gw-text-muted);
+}
+
 .gw-config-section {
   margin-top: 32px;
   display: grid;

package/dist/frontend/index.d.mts

@@ -2,7 +2,8 @@ import * as react_jsx_runtime from 'react/jsx-runtime';
 
 interface GatewayDashboardProps {
     apiBaseUrl: string;
+    apiKey?: string;
 }
-declare function GatewayDashboard({ apiBaseUrl }: GatewayDashboardProps): react_jsx_runtime.JSX.Element;
+declare function GatewayDashboard({ apiBaseUrl, apiKey }: GatewayDashboardProps): react_jsx_runtime.JSX.Element;
 
 export { GatewayDashboard, type GatewayDashboardProps };

package/dist/frontend/index.d.ts

@@ -2,7 +2,8 @@ import * as react_jsx_runtime from 'react/jsx-runtime';
 
 interface GatewayDashboardProps {
     apiBaseUrl: string;
+    apiKey?: string;
 }
-declare function GatewayDashboard({ apiBaseUrl }: GatewayDashboardProps): react_jsx_runtime.JSX.Element;
+declare function GatewayDashboard({ apiBaseUrl, apiKey }: GatewayDashboardProps): react_jsx_runtime.JSX.Element;
 
 export { GatewayDashboard, type GatewayDashboardProps };

package/dist/frontend/index.js

@@ -28,20 +28,21 @@ module.exports = __toCommonJS(frontend_exports);
 var import_react = require("react");
 var import_recharts = require("recharts");
 var import_jsx_runtime = require("react/jsx-runtime");
-function useGatewayApi(apiBaseUrl, path) {
+function useGatewayApi(apiBaseUrl, path, apiKey) {
   const [data, setData] = (0, import_react.useState)(null);
   (0, import_react.useEffect)(() => {
-    fetch(`${apiBaseUrl}${path}`).then((r) => r.json()).then(setData).catch(() => {
+    const headers = {};
+    if (apiKey) headers["X-API-Key"] = apiKey;
+    fetch(`${apiBaseUrl}${path}`, { headers }).then((r) => r.json()).then(setData).catch(() => {
     });
-  }, [apiBaseUrl, path]);
+  }, [apiBaseUrl, path, apiKey]);
   return { data };
 }
-function GatewayDashboard({ apiBaseUrl }) {
+function GatewayDashboard({ apiBaseUrl, apiKey }) {
   const [analytics, setAnalytics] = (0, import_react.useState)(null);
   const [rpmHistory, setRpmHistory] = (0, import_react.useState)([]);
-  const { data: config } = useGatewayApi(apiBaseUrl, "/gateway/config");
-  const { data: logsData } = useGatewayApi(apiBaseUrl, "/gateway/logs?limit=20");
-  const eventSourceRef = (0, import_react.useRef)(null);
+  const { data: config } = useGatewayApi(apiBaseUrl, "/gateway/config", apiKey);
+  const { data: logsData } = useGatewayApi(apiBaseUrl, "/gateway/logs?limit=20", apiKey);
   const [keyName, setKeyName] = (0, import_react.useState)("");
   const [keyTier, setKeyTier] = (0, import_react.useState)("free");
   const [createdKeys, setCreatedKeys] = (0, import_react.useState)([]);
@@ -56,9 +57,11 @@ function GatewayDashboard({ apiBaseUrl }) {
     setKeyError("");
     setKeyLoading(true);
     try {
+      const headers = { "Content-Type": "application/json" };
+      if (apiKey) headers["X-API-Key"] = apiKey;
       const res = await fetch(`${apiBaseUrl}/gateway/keys`, {
         method: "POST",
-        headers: { "Content-Type": "application/json" },
+        headers,
         body: JSON.stringify({ name: keyName.trim(), tier: keyTier })
       });
       if (!res.ok) {
@@ -77,7 +80,9 @@ function GatewayDashboard({ apiBaseUrl }) {
   };
   const handleRevokeKey = async (keyId) => {
     try {
-      const res = await fetch(`${apiBaseUrl}/gateway/keys/${keyId}`, { method: "DELETE" });
+      const headers = {};
+      if (apiKey) headers["X-API-Key"] = apiKey;
+      const res = await fetch(`${apiBaseUrl}/gateway/keys/${keyId}`, { method: "DELETE", headers });
       if (res.ok) {
         setCreatedKeys((prev) => prev.map((k) => k.id === keyId ? { ...k, active: false } : k));
       }
@@ -91,23 +96,44 @@ function GatewayDashboard({ apiBaseUrl }) {
     });
   };
   (0, import_react.useEffect)(() => {
-    const es = new EventSource(`${apiBaseUrl}/gateway/analytics/live`);
-    eventSourceRef.current = es;
-    es.onmessage = (event) => {
-      const data = JSON.parse(event.data);
-      setAnalytics(data);
-      setRpmHistory((prev) => {
-        const next = [
-          ...prev,
-          { time: (/* @__PURE__ */ new Date()).toLocaleTimeString(), rpm: data.requestsPerMinute }
-        ];
-        return next.slice(-20);
-      });
-    };
+    let cancelled = false;
+    async function connectSSE() {
+      const headers = {};
+      if (apiKey) headers["X-API-Key"] = apiKey;
+      try {
+        const res = await fetch(`${apiBaseUrl}/gateway/analytics/live`, { headers });
+        if (!res.ok || !res.body) return;
+        const reader = res.body.getReader();
+        const decoder = new TextDecoder();
+        let buffer = "";
+        while (!cancelled) {
+          const { done, value } = await reader.read();
+          if (done) break;
+          buffer += decoder.decode(value, { stream: true });
+          const lines = buffer.split("\n");
+          buffer = lines.pop() || "";
+          for (const line of lines) {
+            if (!line.startsWith("data: ")) continue;
+            const data = JSON.parse(line.slice(6));
+            setAnalytics(data);
+            setRpmHistory((prev) => {
+              const next = [
+                ...prev,
+                { time: (/* @__PURE__ */ new Date()).toLocaleTimeString(), rpm: data.requestsPerMinute }
+              ];
+              return next.slice(-20);
+            });
+          }
+        }
+        reader.cancel();
+      } catch {
+      }
+    }
+    connectSSE();
     return () => {
-      es.close();
+      cancelled = true;
     };
-  }, [apiBaseUrl]);
+  }, [apiBaseUrl, apiKey]);
   const getMethodClass = (method) => {
     switch (method) {
       case "GET":
@@ -243,7 +269,8 @@ function GatewayDashboard({ apiBaseUrl }) {
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "Path" }),
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "Status" }),
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "Duration" }),
-          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "IP" })
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "IP" }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)("th", { children: "Auth" })
         ] }) }),
         /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("tbody", { children: [
           (logsData?.logs ?? []).map((log, i) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("tr", { children: [
@@ -255,9 +282,10 @@ function GatewayDashboard({ apiBaseUrl }) {
               log.responseTime,
               "ms"
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { children: log.ip })
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { children: log.ip }),
+            /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: `gw-auth-badge ${log.authenticated ? "gw-auth-yes" : "gw-auth-no"}`, children: log.authenticated ? "key" : "none" }) })
           ] }, i)),
-          (!logsData?.logs || logsData.logs.length === 0) && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("tr", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { colSpan: 6, style: { textAlign: "center", color: "var(--gw-text-muted, #666)" }, children: "No requests logged yet. Make some API calls to see data here." }) })
+          (!logsData?.logs || logsData.logs.length === 0) && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("tr", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("td", { colSpan: 7, style: { textAlign: "center", color: "var(--gw-text-muted, #666)" }, children: "No requests logged yet. Make some API calls to see data here." }) })
         ] })
       ] })
     ] }),