@hsuite/smart-engines-cli 1.0.0

package/dist/libs/shared/src/services/subscription-rate-limiter.service.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SubscriptionRateLimiterService = void 0;
+class SubscriptionRateLimiterService {
+    usage = new Map();
+    resetTimer = null;
+    constructor() {
+        this.scheduleNextReset();
+    }
+    checkLimit(appId, _tier, dailyLimit) {
+        const resetsAt = this.getNextResetTime();
+        if (dailyLimit === Infinity) {
+            const entry = this.getOrCreateEntry(appId, Infinity, resetsAt);
+            entry.used++;
+            return {
+                allowed: true,
+                used: entry.used,
+                limit: Infinity,
+                remaining: Infinity,
+                resetsAt,
+            };
+        }
+        const entry = this.getOrCreateEntry(appId, dailyLimit, resetsAt);
+        if (entry.used >= entry.limit) {
+            return {
+                allowed: false,
+                used: entry.used,
+                limit: entry.limit,
+                remaining: 0,
+                resetsAt,
+            };
+        }
+        entry.used++;
+        return {
+            allowed: true,
+            used: entry.used,
+            limit: entry.limit,
+            remaining: Math.max(0, entry.limit - entry.used),
+            resetsAt,
+        };
+    }
+    getUsage(appId) {
+        const entry = this.usage.get(appId);
+        if (!entry) {
+            return null;
+        }
+        const resetsAt = this.getNextResetTime();
+        return {
+            appId,
+            used: entry.used,
+            limit: entry.limit,
+            remaining: entry.limit === Infinity ? Infinity : Math.max(0, entry.limit - entry.used),
+            resetsAt,
+        };
+    }
+    resetDaily() {
+        this.usage.clear();
+    }
+    destroy() {
+        if (this.resetTimer) {
+            clearTimeout(this.resetTimer);
+            this.resetTimer = null;
+        }
+    }
+    getOrCreateEntry(appId, limit, resetsAt) {
+        let entry = this.usage.get(appId);
+        if (!entry) {
+            entry = { used: 0, limit, resetsAt };
+            this.usage.set(appId, entry);
+        }
+        else {
+            entry.limit = limit;
+            entry.resetsAt = resetsAt;
+        }
+        return entry;
+    }
+    getNextResetTime() {
+        const now = new Date();
+        const tomorrow = new Date(now);
+        tomorrow.setUTCDate(tomorrow.getUTCDate() + 1);
+        tomorrow.setUTCHours(0, 0, 0, 0);
+        return tomorrow;
+    }
+    scheduleNextReset() {
+        const now = new Date();
+        const nextMidnight = this.getNextResetTime();
+        const msUntilReset = nextMidnight.getTime() - now.getTime();
+        this.resetTimer = setTimeout(() => {
+            this.resetDaily();
+            this.scheduleNextReset();
+        }, msUntilReset);
+        if (this.resetTimer.unref) {
+            this.resetTimer.unref();
+        }
+    }
+}
+exports.SubscriptionRateLimiterService = SubscriptionRateLimiterService;
+//# sourceMappingURL=subscription-rate-limiter.service.js.map

package/dist/libs/shared/src/services/subscription-rate-limiter.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription-rate-limiter.service.js","sourceRoot":"","sources":["../../../../../../../libs/shared/src/services/subscription-rate-limiter.service.ts"],"names":[],"mappings":";;;AA4CA,MAAa,8BAA8B;IACxB,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,UAAU,GAAyC,IAAI,CAAC;IAEhE;QACE,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAUD,UAAU,CAAC,KAAa,EAAE,KAAa,EAAE,UAAkB;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAGzC,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/D,KAAK,CAAC,IAAI,EAAE,CAAC;YAEb,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,QAAQ;gBACnB,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAGjE,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,CAAC;gBACZ,QAAQ;aACT,CAAC;QACJ,CAAC;QAGD,KAAK,CAAC,IAAI,EAAE,CAAC;QAEb,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;YAChD,QAAQ;SACT,CAAC;IACJ,CAAC;IAQD,QAAQ,CAAC,KAAa;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEzC,OAAO;YACL,KAAK;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;YACtF,QAAQ;SACT,CAAC;IACJ,CAAC;IAMD,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAKD,OAAO;QACL,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAKO,gBAAgB,CAAC,KAAa,EAAE,KAAa,EAAE,QAAc;QACnE,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YAEN,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YACpB,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAKO,gBAAgB;QACtB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAKO,iBAAiB;QACvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;QAE5D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,CAAC,EAAE,YAAY,CAAC,CAAC;QAGjB,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;CACF;AAjJD,wEAiJC"}

package/dist/libs/shared/src/services/threshold-event-listener.service.d.ts

@@ -0,0 +1,12 @@
+import { OnModuleInit } from '@nestjs/common';
+import { UsageThresholdService } from './usage-threshold.service';
+export declare const THRESHOLD_EVENT_PUBLISHER_TOKEN = "THRESHOLD_EVENT_PUBLISHER";
+export type ThresholdEventPublisher = (streamName: string, eventType: string, data: unknown) => Promise<void>;
+export declare class ThresholdEventListenerService implements OnModuleInit {
+    private readonly thresholdService?;
+    private readonly publishEvent?;
+    private readonly logger;
+    constructor(thresholdService?: UsageThresholdService | undefined, publishEvent?: ThresholdEventPublisher | undefined);
+    onModuleInit(): void;
+}
+//# sourceMappingURL=threshold-event-listener.service.d.ts.map

package/dist/libs/shared/src/services/threshold-event-listener.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threshold-event-listener.service.d.ts","sourceRoot":"","sources":["../../../../../../../libs/shared/src/services/threshold-event-listener.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwC,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAMlE,eAAO,MAAM,+BAA+B,8BAA8B,CAAC;AAK3E,MAAM,MAAM,uBAAuB,GAAG,CACpC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,KACV,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,qBACa,6BAA8B,YAAW,YAAY;IAIlD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAG9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IANhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkD;gBAG1C,gBAAgB,CAAC,EAAE,qBAAqB,YAAA,EAGpD,YAAY,CAAC,EAAE,uBAAuB,YAAA;IAGzD,YAAY,IAAI,IAAI;CA2BrB"}

package/dist/libs/shared/src/services/threshold-event-listener.service.js

@@ -0,0 +1,64 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var ThresholdEventListenerService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ThresholdEventListenerService = exports.THRESHOLD_EVENT_PUBLISHER_TOKEN = void 0;
+const common_1 = require("@nestjs/common");
+const usage_threshold_service_1 = require("./usage-threshold.service");
+exports.THRESHOLD_EVENT_PUBLISHER_TOKEN = 'THRESHOLD_EVENT_PUBLISHER';
+let ThresholdEventListenerService = ThresholdEventListenerService_1 = class ThresholdEventListenerService {
+    thresholdService;
+    publishEvent;
+    logger = new common_1.Logger(ThresholdEventListenerService_1.name);
+    constructor(thresholdService, publishEvent) {
+        this.thresholdService = thresholdService;
+        this.publishEvent = publishEvent;
+    }
+    onModuleInit() {
+        if (!this.thresholdService)
+            return;
+        this.thresholdService.on('threshold.warning', async (data) => {
+            this.logger.warn(`Usage threshold warning for ${data.appId}: ${data.usagePercent}%`);
+            if (this.publishEvent) {
+                try {
+                    await this.publishEvent('subscription', 'threshold.warning', data);
+                }
+                catch (error) {
+                    this.logger.debug(`Failed to publish threshold warning: ${error.message}`);
+                }
+            }
+        });
+        this.thresholdService.on('threshold.blocked', async (data) => {
+            this.logger.error(`Usage threshold BLOCKED for ${data.appId}: limit exceeded`);
+            if (this.publishEvent) {
+                try {
+                    await this.publishEvent('subscription', 'threshold.blocked', data);
+                }
+                catch (error) {
+                    this.logger.debug(`Failed to publish threshold block: ${error.message}`);
+                }
+            }
+        });
+        this.logger.log('Threshold event listener initialized');
+    }
+};
+exports.ThresholdEventListenerService = ThresholdEventListenerService;
+exports.ThresholdEventListenerService = ThresholdEventListenerService = ThresholdEventListenerService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(exports.THRESHOLD_EVENT_PUBLISHER_TOKEN)),
+    __metadata("design:paramtypes", [usage_threshold_service_1.UsageThresholdService, Function])
+], ThresholdEventListenerService);
+//# sourceMappingURL=threshold-event-listener.service.js.map

package/dist/libs/shared/src/services/threshold-event-listener.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threshold-event-listener.service.js","sourceRoot":"","sources":["../../../../../../../libs/shared/src/services/threshold-event-listener.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoF;AACpF,uEAAkE;AAMrD,QAAA,+BAA+B,GAAG,2BAA2B,CAAC;AAYpE,IAAM,6BAA6B,qCAAnC,MAAM,6BAA6B;IAIT;IAGZ;IANF,MAAM,GAAG,IAAI,eAAM,CAAC,+BAA6B,CAAC,IAAI,CAAC,CAAC;IAEzE,YAC+B,gBAAwC,EAGpD,YAAsC;QAH1B,qBAAgB,GAAhB,gBAAgB,CAAwB;QAGpD,iBAAY,GAAZ,YAAY,CAA0B;IACtD,CAAC;IAEJ,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO;QAEnC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAS,EAAE,EAAE;YAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACrF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;gBACrE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAyC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxF,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAS,EAAE,EAAE;YAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,IAAI,CAAC,KAAK,kBAAkB,CAAC,CAAC;YAC/E,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;gBACrE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAuC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;CACF,CAAA;AArCY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,uCAA+B,CAAC,CAAA;qCAFQ,+CAAqB;GAJ5D,6BAA6B,CAqCzC"}

package/dist/libs/shared/src/services/usage-threshold.service.d.ts

@@ -0,0 +1,26 @@
+import { EventEmitter } from 'events';
+export type ThresholdConfig = {
+    warnAt: number[];
+    blockAt: number;
+};
+export type ThresholdCheckResult = {
+    blocked: boolean;
+    warnings: number[];
+    shouldNotify: boolean;
+    usagePercent: number;
+    suggestUpgrade: boolean;
+    softBlocked: boolean;
+    graceExpiresAt: Date | null;
+    overagePercent: number;
+};
+export declare class UsageThresholdService extends EventEmitter {
+    private readonly state;
+    private static readonly GRACE_DURATION_MS;
+    private static readonly MAX_GRACE_OVERAGE;
+    private readonly defaultConfig;
+    constructor();
+    checkThresholds(appId: string, used: number, limit: number, config?: ThresholdConfig): ThresholdCheckResult;
+    resetThresholds(appId: string): void;
+    private getOrCreateState;
+}
+//# sourceMappingURL=usage-threshold.service.d.ts.map

package/dist/libs/shared/src/services/usage-threshold.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-threshold.service.d.ts","sourceRoot":"","sources":["../../../../../../../libs/shared/src/services/usage-threshold.service.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAatC,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAKF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAmBF,qBACa,qBAAsB,SAAQ,YAAY;IAErD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwC;IAG9D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAsB;IAG/D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAM;IAG/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;;IAeF,eAAe,CACb,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,eAAe,GACvB,oBAAoB;IAmHvB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAepC,OAAO,CAAC,gBAAgB;CAczB"}

package/dist/libs/shared/src/services/usage-threshold.service.js

@@ -0,0 +1,140 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var UsageThresholdService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UsageThresholdService = void 0;
+const common_1 = require("@nestjs/common");
+const events_1 = require("events");
+let UsageThresholdService = class UsageThresholdService extends events_1.EventEmitter {
+    static { UsageThresholdService_1 = this; }
+    state = new Map();
+    static GRACE_DURATION_MS = 2 * 60 * 60 * 1000;
+    static MAX_GRACE_OVERAGE = 10;
+    defaultConfig = {
+        warnAt: [80, 90, 95],
+        blockAt: 100,
+    };
+    constructor() {
+        super();
+    }
+    checkThresholds(appId, used, limit, config) {
+        const cfg = config || this.defaultConfig;
+        const rawPercent = (used / limit) * 100;
+        const usagePercent = rawPercent;
+        const overagePercent = Math.max(0, rawPercent - 100);
+        const appState = this.getOrCreateState(appId);
+        const now = new Date();
+        let softBlocked = false;
+        let graceExpiresAt = null;
+        let blocked = false;
+        if (rawPercent >= cfg.blockAt) {
+            const withinOverageCap = overagePercent <= UsageThresholdService_1.MAX_GRACE_OVERAGE;
+            if (withinOverageCap) {
+                if (!appState.graceStartedAt) {
+                    appState.graceStartedAt = now;
+                    this.emit('threshold.grace-started', { appId, usagePercent, overagePercent, used, limit });
+                }
+                graceExpiresAt = new Date(appState.graceStartedAt.getTime() + UsageThresholdService_1.GRACE_DURATION_MS);
+                if (now < graceExpiresAt) {
+                    softBlocked = true;
+                    blocked = false;
+                }
+                else {
+                    blocked = true;
+                    softBlocked = false;
+                }
+            }
+            else {
+                blocked = true;
+                softBlocked = false;
+                if (appState.graceStartedAt) {
+                    graceExpiresAt = new Date(appState.graceStartedAt.getTime() + UsageThresholdService_1.GRACE_DURATION_MS);
+                }
+            }
+            if (blocked && !appState.thresholds.get(cfg.blockAt)?.notified) {
+                const threshold = appState.thresholds.get(cfg.blockAt) || { percent: cfg.blockAt, notified: false };
+                threshold.notified = true;
+                appState.thresholds.set(cfg.blockAt, threshold);
+                this.emit('threshold.blocked', { appId, usagePercent, used, limit });
+            }
+        }
+        else {
+            appState.graceStartedAt = null;
+        }
+        const warnings = [];
+        let shouldNotify = false;
+        for (const warnThreshold of cfg.warnAt) {
+            if (usagePercent >= warnThreshold) {
+                const threshold = appState.thresholds.get(warnThreshold) || {
+                    percent: warnThreshold,
+                    notified: false,
+                };
+                if (!threshold.notified) {
+                    threshold.notified = true;
+                    warnings.push(warnThreshold);
+                    shouldNotify = true;
+                    this.emit('threshold.warning', { appId, threshold: warnThreshold, usagePercent, used, limit });
+                }
+                appState.thresholds.set(warnThreshold, threshold);
+            }
+        }
+        if (usagePercent > 70) {
+            appState.highUsageCount++;
+        }
+        const suggestUpgrade = appState.highUsageCount >= 3;
+        if (suggestUpgrade && !appState.thresholds.get(-1)?.notified) {
+            const upgradeMarker = appState.thresholds.get(-1) || { percent: -1, notified: false };
+            upgradeMarker.notified = true;
+            appState.thresholds.set(-1, upgradeMarker);
+            this.emit('threshold.upgrade-suggestion', { appId, usagePercent, used, limit });
+        }
+        return {
+            blocked,
+            warnings,
+            shouldNotify,
+            usagePercent,
+            suggestUpgrade,
+            softBlocked,
+            graceExpiresAt,
+            overagePercent,
+        };
+    }
+    resetThresholds(appId) {
+        const appState = this.state.get(appId);
+        if (!appState) {
+            return;
+        }
+        appState.thresholds.clear();
+        appState.highUsageCount = 0;
+        appState.lastResetAt = new Date();
+        appState.graceStartedAt = null;
+    }
+    getOrCreateState(appId) {
+        let appState = this.state.get(appId);
+        if (!appState) {
+            appState = {
+                appId,
+                thresholds: new Map(),
+                highUsageCount: 0,
+                lastResetAt: new Date(),
+                graceStartedAt: null,
+            };
+            this.state.set(appId, appState);
+        }
+        return appState;
+    }
+};
+exports.UsageThresholdService = UsageThresholdService;
+exports.UsageThresholdService = UsageThresholdService = UsageThresholdService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], UsageThresholdService);
+//# sourceMappingURL=usage-threshold.service.js.map

package/dist/libs/shared/src/services/usage-threshold.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-threshold.service.js","sourceRoot":"","sources":["../../../../../../../libs/shared/src/services/usage-threshold.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAQA,2CAA4C;AAC5C,mCAAsC;AAkD/B,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,qBAAY;;IAEpC,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IAGtD,MAAM,CAAU,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAGvD,MAAM,CAAU,iBAAiB,GAAG,EAAE,CAAC;IAG9B,aAAa,GAAoB;QAChD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,GAAG;KACb,CAAC;IAEF;QACE,KAAK,EAAE,CAAC;IACV,CAAC;IAWD,eAAe,CACb,KAAa,EACb,IAAY,EACZ,KAAa,EACb,MAAwB;QAExB,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC;QAEzC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC;QACxC,MAAM,YAAY,GAAG,UAAU,CAAC;QAChC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAGvB,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,cAAc,GAAgB,IAAI,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,gBAAgB,GAAG,cAAc,IAAI,uBAAqB,CAAC,iBAAiB,CAAC;YAEnF,IAAI,gBAAgB,EAAE,CAAC;gBAErB,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;oBAC7B,QAAQ,CAAC,cAAc,GAAG,GAAG,CAAC;oBAC9B,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7F,CAAC;gBAED,cAAc,GAAG,IAAI,IAAI,CACvB,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,uBAAqB,CAAC,iBAAiB,CAC5E,CAAC;gBAEF,IAAI,GAAG,GAAG,cAAc,EAAE,CAAC;oBAEzB,WAAW,GAAG,IAAI,CAAC;oBACnB,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBAEN,OAAO,GAAG,IAAI,CAAC;oBACf,WAAW,GAAG,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;iBAAM,CAAC;gBAEN,OAAO,GAAG,IAAI,CAAC;gBACf,WAAW,GAAG,KAAK,CAAC;gBAEpB,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;oBAC5B,cAAc,GAAG,IAAI,IAAI,CACvB,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,uBAAqB,CAAC,iBAAiB,CAC5E,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;gBAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACpG,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC;gBAC1B,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;aAAM,CAAC;YAEN,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC;QACjC,CAAC;QAGD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,YAAY,GAAG,KAAK,CAAC;QAEzB,KAAK,MAAM,aAAa,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACvC,IAAI,YAAY,IAAI,aAAa,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI;oBAC1D,OAAO,EAAE,aAAa;oBACtB,QAAQ,EAAE,KAAK;iBAChB,CAAC;gBAEF,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;oBACxB,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC;oBAC1B,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC7B,YAAY,GAAG,IAAI,CAAC;oBACpB,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjG,CAAC;gBAED,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAGD,IAAI,YAAY,GAAG,EAAE,EAAE,CAAC;YACtB,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,cAAc,GAAG,QAAQ,CAAC,cAAc,IAAI,CAAC,CAAC;QACpD,IAAI,cAAc,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC7D,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACtF,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC;YAC9B,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,OAAO;YACL,OAAO;YACP,QAAQ;YACR,YAAY;YACZ,YAAY;YACZ,cAAc;YACd,WAAW;YACX,cAAc;YACd,cAAc;SACf,CAAC;IACJ,CAAC;IASD,eAAe,CAAC,KAAa;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5B,QAAQ,CAAC,cAAc,GAAG,CAAC,CAAC;QAC5B,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC;IACjC,CAAC;IAKO,gBAAgB,CAAC,KAAa;QACpC,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG;gBACT,KAAK;gBACL,UAAU,EAAE,IAAI,GAAG,EAAE;gBACrB,cAAc,EAAE,CAAC;gBACjB,WAAW,EAAE,IAAI,IAAI,EAAE;gBACvB,cAAc,EAAE,IAAI;aACrB,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;;AAjLU,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;;GACA,qBAAqB,CAkLjC"}

package/dist/libs/shared/src/services/web3-session-to-customer-validator.d.ts

@@ -0,0 +1,15 @@
+import type { MinimalCustomerSessionValidator } from '../utils/resolve-customer-session';
+interface MinimalWeb3Auth {
+    validateSession(token: string): Promise<{
+        sessionId: string;
+        address: string;
+        chain: string;
+        createdAt: Date;
+        expiresAt: Date;
+        lastActivityAt?: Date;
+        metadata?: unknown;
+    } | null>;
+}
+export declare function buildWeb3SessionToCustomerValidator(web3: MinimalWeb3Auth): MinimalCustomerSessionValidator;
+export {};
+//# sourceMappingURL=web3-session-to-customer-validator.d.ts.map

package/dist/libs/shared/src/services/web3-session-to-customer-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web3-session-to-customer-validator.d.ts","sourceRoot":"","sources":["../../../../../../../libs/shared/src/services/web3-session-to-customer-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AAEzF,UAAU,eAAe;IACvB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QACtC,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,IAAI,CAAC;QAChB,SAAS,EAAE,IAAI,CAAC;QAChB,cAAc,CAAC,EAAE,IAAI,CAAC;QACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,IAAI,CAAC,CAAC;CACX;AAyBD,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,eAAe,GACpB,+BAA+B,CA4CjC"}

package/dist/libs/shared/src/services/web3-session-to-customer-validator.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildWeb3SessionToCustomerValidator = buildWeb3SessionToCustomerValidator;
+const VALID_TIERS = ['free_testnet', 'starter', 'professional', 'enterprise'];
+function isValidTier(value) {
+    return typeof value === 'string' && VALID_TIERS.includes(value);
+}
+function buildWeb3SessionToCustomerValidator(web3) {
+    return {
+        async validateCustomerSession(token) {
+            const session = await web3.validateSession(token);
+            if (!session)
+                return null;
+            const meta = session.metadata;
+            const rawCtx = meta?.['subscriptionContext'];
+            const validatedCtx = (() => {
+                if (!rawCtx)
+                    return undefined;
+                if (typeof rawCtx.nftSerial !== 'number')
+                    return undefined;
+                if (!isValidTier(rawCtx.tier))
+                    return undefined;
+                const expiresAt = rawCtx.expiresAt instanceof Date
+                    ? rawCtx.expiresAt
+                    : typeof rawCtx.expiresAt === 'string'
+                        ? new Date(rawCtx.expiresAt)
+                        : undefined;
+                if (!expiresAt || Number.isNaN(expiresAt.getTime()))
+                    return undefined;
+                const allowedAutomations = Array.isArray(rawCtx.allowedAutomations)
+                    ? rawCtx.allowedAutomations.filter((s) => typeof s === 'string')
+                    : [];
+                return {
+                    nftSerial: rawCtx.nftSerial,
+                    tier: rawCtx.tier,
+                    expiresAt,
+                    allowedAutomations,
+                };
+            })();
+            return {
+                sessionId: session.sessionId,
+                appId: typeof meta?.['nodeId'] === 'string' ? meta['nodeId'] : '',
+                customerAddress: session.address,
+                customerChain: session.chain,
+                createdAt: session.createdAt,
+                expiresAt: session.expiresAt,
+                lastActivityAt: session.lastActivityAt ?? session.createdAt,
+                subscriptionContext: validatedCtx,
+            };
+        },
+    };
+}
+//# sourceMappingURL=web3-session-to-customer-validator.js.map

package/dist/libs/shared/src/services/web3-session-to-customer-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web3-session-to-customer-validator.js","sourceRoot":"","sources":["../../../../../../../libs/shared/src/services/web3-session-to-customer-validator.ts"],"names":[],"mappings":";;AAqCA,kFA8CC;AArED,MAAM,WAAW,GAAG,CAAC,cAAc,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,CAAU,CAAC;AAGvF,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAkBD,SAAgB,mCAAmC,CACjD,IAAqB;IAErB,OAAO;QACL,KAAK,CAAC,uBAAuB,CAAC,KAAa;YACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAE1B,MAAM,IAAI,GAAG,OAAO,CAAC,QAA+C,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,qBAAqB,CAE9B,CAAC;YAEd,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;gBACzB,IAAI,CAAC,MAAM;oBAAE,OAAO,SAAS,CAAC;gBAC9B,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBAC3D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;oBAAE,OAAO,SAAS,CAAC;gBAChD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,YAAY,IAAI;oBAChD,CAAC,CAAC,MAAM,CAAC,SAAS;oBAClB,CAAC,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;wBACpC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;wBAC5B,CAAC,CAAC,SAAS,CAAC;gBAChB,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;oBAAE,OAAO,SAAS,CAAC;gBACtE,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC;oBACjE,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;oBAC7E,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS;oBACT,kBAAkB;iBACnB,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;YAEL,OAAO;gBACL,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,QAAQ,CAAY,CAAC,CAAC,CAAC,EAAE;gBAC7E,eAAe,EAAE,OAAO,CAAC,OAAO;gBAChC,aAAa,EAAE,OAAO,CAAC,KAAK;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,SAAS;gBAC3D,mBAAmB,EAAE,YAAY;aAClC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/libs/shared/src/strategies/index.d.ts

@@ -0,0 +1,2 @@
+export * from './ip-rate-limit.strategy';
+//# sourceMappingURL=index.d.ts.map

package/dist/libs/shared/src/strategies/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../libs/shared/src/strategies/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}

package/dist/libs/shared/src/strategies/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./ip-rate-limit.strategy"), exports);
+//# sourceMappingURL=index.js.map

package/dist/libs/shared/src/strategies/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/shared/src/strategies/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC"}

package/dist/libs/shared/src/strategies/ip-rate-limit.strategy.d.ts

@@ -0,0 +1,38 @@
+import { OnModuleDestroy } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import type { Request } from 'express';
+export interface MinimalRateLimitCache {
+    isEnabled(): boolean;
+    get<T = unknown>(key: string): Promise<T | undefined | null>;
+    set(key: string, value: unknown, ttlSeconds?: number): Promise<void>;
+}
+export declare const IP_RATE_LIMIT_CACHE = "IP_RATE_LIMIT_CACHE";
+export type IpRateLimitDecision = {
+    allow: boolean;
+    retryAfter?: number;
+    headers: Record<string, string>;
+};
+export declare class IpRateLimitStrategy implements OnModuleDestroy {
+    private readonly configService?;
+    private readonly cacheService?;
+    private readonly logger;
+    private readonly enabled;
+    private readonly trustedProxyCidrs;
+    private readonly globalTtl;
+    private readonly globalLimit;
+    private readonly requestCounts;
+    private readonly blockedIps;
+    private cleanupTimer;
+    constructor(configService?: ConfigService | undefined, cacheService?: MinimalRateLimitCache | undefined);
+    onModuleDestroy(): void;
+    evaluate(request: Request, overrides?: {
+        ttl?: number;
+        limit?: number;
+    }): Promise<IpRateLimitDecision>;
+    private evaluateRedis;
+    private evaluateInMemory;
+    private getClientIp;
+    private cleanup;
+    resetForTesting(): void;
+}
+//# sourceMappingURL=ip-rate-limit.strategy.d.ts.map

package/dist/libs/shared/src/strategies/ip-rate-limit.strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-rate-limit.strategy.d.ts","sourceRoot":"","sources":["../../../../../../../libs/shared/src/strategies/ip-rate-limit.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,eAAe,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AASvC,MAAM,WAAW,qBAAqB;IACpC,SAAS,IAAI,OAAO,CAAC;IACrB,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;IAC7D,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE;AAED,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AASzD,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC,CAAC;AAgCF,qBACa,mBAAoB,YAAW,eAAe;IAY3C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;IACF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAZzE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAW;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IAErC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0C;IACxE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,YAAY,CAA+C;gBAGpC,aAAa,CAAC,EAAE,aAAa,YAAA,EACA,YAAY,CAAC,EAAE,qBAAqB,YAAA;IA2BhG,eAAe,IAAI,IAAI;IAOjB,QAAQ,CACZ,OAAO,EAAE,OAAO,EAChB,SAAS,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,OAAO,CAAC,mBAAmB,CAAC;YAYjB,aAAa;IAsC3B,OAAO,CAAC,gBAAgB;IAuDxB,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,OAAO;IAgBf,eAAe,IAAI,IAAI;CAIxB"}