@ima-jin/config 0.8.27 → 0.8.28

package/dist/index.cjs

@@ -226,8 +226,8 @@ var SERVICES = [
   { name: "github", label: "GitHub", icon: "\u{1F419}", description: "Source code", devPort: 3e3, prodPort: 7e3, schema: "public", tier: "core", visibility: "public", category: "meta", externalUrl: "https://github.com/ima-jin/imajin-ai" },
   { name: "docs", label: "Docs", icon: "\u{1F4C4}", description: "API documentation", devPort: 3e3, prodPort: 7e3, schema: "public", tier: "core", visibility: "public", category: "meta", wwwPath: "/developer-guide" },
   // Daemon processes — not web apps, no HTTP port exposed
-  { name: "broker-agent", label: "Broker Agent", icon: "\u{1F916}", description: "Telegram broker agent \u2014 conversational surface for social coordination (#1101)", devPort: 0, prodPort: 0, schema: null, tier: "core", visibility: "internal", category: "infrastructure" },
-  { name: "corpus", label: "Corpus", icon: "\u{1F50E}", description: "Per-DID corpus indexing and BM25 search service (#1737)", devPort: 8013, prodPort: 8013, schema: null, tier: "core", visibility: "internal", category: "infrastructure" }
+  { name: "broker-agent", label: "Broker Agent", icon: "\u{1F916}", description: "Telegram broker agent \u2014 conversational surface for social coordination", devPort: 0, prodPort: 0, schema: null, tier: "core", visibility: "internal", category: "infrastructure" },
+  { name: "corpus", label: "Corpus", icon: "\u{1F50E}", description: "Per-DID corpus indexing and BM25 search service", devPort: 8013, prodPort: 8013, schema: null, tier: "core", visibility: "internal", category: "infrastructure" }
   // Connected apps (separate repos) will use the plugin architecture (#249).
   // Not included here — they authenticate via delegated sessions, not the monorepo manifest.
 ];
@@ -426,7 +426,7 @@ var lastGlobalCleanup = Date.now();
 function pruneStore(now) {
   if (now - lastGlobalCleanup < 6e4) return;
   store.forEach((entry, key) => {
-    if (now - entry.lastSeen > 12e4) {
+    if (now >= entry.retainUntil) {
       store.delete(key);
     }
   });
@@ -436,9 +436,9 @@ function rateLimit(key, limit, windowMs) {
   const now = Date.now();
   pruneStore(now);
   const windowStart = now - windowMs;
-  const entry = store.get(key) ?? { timestamps: [], lastSeen: now };
+  const entry = store.get(key) ?? { timestamps: [], retainUntil: now };
   entry.timestamps = entry.timestamps.filter((t) => t > windowStart);
-  entry.lastSeen = now;
+  entry.retainUntil = Math.max(entry.retainUntil, now + Math.max(12e4, windowMs));
   if (entry.timestamps.length >= limit) {
     const oldest = entry.timestamps[0];
     const retryAfter = Math.ceil((oldest + windowMs - now) / 1e3);

package/dist/index.js

@@ -66,8 +66,8 @@ var SERVICES = [
   { name: "github", label: "GitHub", icon: "\u{1F419}", description: "Source code", devPort: 3e3, prodPort: 7e3, schema: "public", tier: "core", visibility: "public", category: "meta", externalUrl: "https://github.com/ima-jin/imajin-ai" },
   { name: "docs", label: "Docs", icon: "\u{1F4C4}", description: "API documentation", devPort: 3e3, prodPort: 7e3, schema: "public", tier: "core", visibility: "public", category: "meta", wwwPath: "/developer-guide" },
   // Daemon processes — not web apps, no HTTP port exposed
-  { name: "broker-agent", label: "Broker Agent", icon: "\u{1F916}", description: "Telegram broker agent \u2014 conversational surface for social coordination (#1101)", devPort: 0, prodPort: 0, schema: null, tier: "core", visibility: "internal", category: "infrastructure" },
-  { name: "corpus", label: "Corpus", icon: "\u{1F50E}", description: "Per-DID corpus indexing and BM25 search service (#1737)", devPort: 8013, prodPort: 8013, schema: null, tier: "core", visibility: "internal", category: "infrastructure" }
+  { name: "broker-agent", label: "Broker Agent", icon: "\u{1F916}", description: "Telegram broker agent \u2014 conversational surface for social coordination", devPort: 0, prodPort: 0, schema: null, tier: "core", visibility: "internal", category: "infrastructure" },
+  { name: "corpus", label: "Corpus", icon: "\u{1F50E}", description: "Per-DID corpus indexing and BM25 search service", devPort: 8013, prodPort: 8013, schema: null, tier: "core", visibility: "internal", category: "infrastructure" }
   // Connected apps (separate repos) will use the plugin architecture (#249).
   // Not included here — they authenticate via delegated sessions, not the monorepo manifest.
 ];
@@ -266,7 +266,7 @@ var lastGlobalCleanup = Date.now();
 function pruneStore(now) {
   if (now - lastGlobalCleanup < 6e4) return;
   store.forEach((entry, key) => {
-    if (now - entry.lastSeen > 12e4) {
+    if (now >= entry.retainUntil) {
       store.delete(key);
     }
   });
@@ -276,9 +276,9 @@ function rateLimit(key, limit, windowMs) {
   const now = Date.now();
   pruneStore(now);
   const windowStart = now - windowMs;
-  const entry = store.get(key) ?? { timestamps: [], lastSeen: now };
+  const entry = store.get(key) ?? { timestamps: [], retainUntil: now };
   entry.timestamps = entry.timestamps.filter((t) => t > windowStart);
-  entry.lastSeen = now;
+  entry.retainUntil = Math.max(entry.retainUntil, now + Math.max(12e4, windowMs));
   if (entry.timestamps.length >= limit) {
     const oldest = entry.timestamps[0];
     const retryAfter = Math.ceil((oldest + windowMs - now) / 1e3);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ima-jin/config",
-  "version": "0.8.27",
+  "version": "0.8.28",
   "description": "Shared configuration for Imajin services — CORS, service routing, session config, handle validation, and route helpers",
   "license": "MIT",
   "repository": {

package/src/rate-limit.ts

@@ -5,7 +5,7 @@
 
 interface RateLimitEntry {
   timestamps: number[];
-  lastSeen: number;
+  retainUntil: number;
 }
 
 const store = new Map<string, RateLimitEntry>();
@@ -14,7 +14,7 @@ let lastGlobalCleanup = Date.now();
 function pruneStore(now: number) {
   if (now - lastGlobalCleanup < 60_000) return;
   store.forEach((entry, key) => {
-    if (now - entry.lastSeen > 120_000) {
+    if (now >= entry.retainUntil) {
       store.delete(key);
     }
   });
@@ -30,10 +30,11 @@ export function rateLimit(
   pruneStore(now);
 
   const windowStart = now - windowMs;
-  const entry = store.get(key) ?? { timestamps: [], lastSeen: now };
+  const entry = store.get(key) ?? { timestamps: [], retainUntil: now };
 
   entry.timestamps = entry.timestamps.filter((t) => t > windowStart);
-  entry.lastSeen = now;
+  // Cleanup must not erase a still-live long window (e.g. hourly warnings).
+  entry.retainUntil = Math.max(entry.retainUntil, now + Math.max(120_000, windowMs));
 
   if (entry.timestamps.length >= limit) {
     const oldest = entry.timestamps[0];

package/src/services.ts

@@ -75,8 +75,8 @@ export const SERVICES: readonly ServiceDefinition[] = [
   { name: 'docs',        label: 'Docs',        icon: '📄', description: 'API documentation',                                 devPort: 3000, prodPort: 7000, schema: "public",      tier: 'core',   visibility: 'public',        category: 'meta', wwwPath: '/developer-guide' },
 
   // Daemon processes — not web apps, no HTTP port exposed
-  { name: 'broker-agent', label: 'Broker Agent', icon: '🤖', description: 'Telegram broker agent — conversational surface for social coordination (#1101)', devPort: 0, prodPort: 0, schema: null, tier: 'core', visibility: 'internal', category: 'infrastructure' },
-  { name: 'corpus',       label: 'Corpus',       icon: '🔎', description: 'Per-DID corpus indexing and BM25 search service (#1737)',                    devPort: 8013, prodPort: 8013, schema: null, tier: 'core', visibility: 'internal', category: 'infrastructure' },
+  { name: 'broker-agent', label: 'Broker Agent', icon: '🤖', description: 'Telegram broker agent — conversational surface for social coordination', devPort: 0, prodPort: 0, schema: null, tier: 'core', visibility: 'internal', category: 'infrastructure' },
+  { name: 'corpus',       label: 'Corpus',       icon: '🔎', description: 'Per-DID corpus indexing and BM25 search service',                    devPort: 8013, prodPort: 8013, schema: null, tier: 'core', visibility: 'internal', category: 'infrastructure' },
 
   // Connected apps (separate repos) will use the plugin architecture (#249).
   // Not included here — they authenticate via delegated sessions, not the monorepo manifest.