@kb-labs/core-tenant 1.0.0 → 1.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kb-labs/core-tenant",
-  "version": "1.0.0",
+  "version": "1.3.0",
   "description": "Multi-tenancy primitives for KB Labs",
   "type": "module",
   "main": "./dist/index.js",
@@ -14,17 +14,26 @@
   },
   "files": [
     "dist",
-    "src",
     "README.md"
   ],
+  "scripts": {
+    "build": "tsup",
+    "clean": "rimraf dist",
+    "dev": "tsup --watch",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint src --ext .ts",
+    "lint:fix": "eslint . --fix",
+    "test": "vitest run --passWithNoTests",
+    "test:watch": "vitest"
+  },
   "dependencies": {
-    "@kb-labs/core-state-broker": "1.0.0"
+    "@kb-labs/core-state-broker": "workspace:*"
   },
   "devDependencies": {
     "tsup": "^8.5.0",
     "typescript": "^5.6.3",
     "rimraf": "^6.0.1",
-    "@kb-labs/devkit": "link:../../../kb-labs-devkit",
+    "@kb-labs/devkit": "link:../../../../infra/kb-labs-devkit",
     "@types/node": "^24.3.3",
     "vitest": "^3.2.4"
   },
@@ -34,15 +43,5 @@
   },
   "publishConfig": {
     "access": "public"
-  },
-  "scripts": {
-    "build": "tsup",
-    "clean": "rimraf dist",
-    "dev": "tsup --watch",
-    "type-check": "tsc --noEmit",
-    "lint": "eslint src --ext .ts",
-    "lint:fix": "eslint . --fix",
-    "test": "vitest run --passWithNoTests",
-    "test:watch": "vitest"
   }
-}
+}

package/src/index.ts

@@ -1,10 +0,0 @@
-/**
- * @module @kb-labs/tenant
- * Multi-tenancy primitives for KB Labs
- *
- * Provides tenant management, quotas, and rate limiting
- * using existing infrastructure (State Broker, LogContext, Prometheus)
- */
-
-export * from './types';
-export * from './rate-limiter';

package/src/rate-limiter.ts

@@ -1,153 +0,0 @@
-/**
- * @module @kb-labs/tenant/rate-limiter
- * Tenant rate limiter using existing State Broker infrastructure
- *
- * Benefits:
- * - Zero new dependencies
- * - TTL cleanup already implemented (30s interval)
- * - Consistent with state management patterns
- * - Same backend as plugin state (in-memory or HTTP daemon)
- */
-
-import type { StateBroker } from '@kb-labs/core-state-broker';
-import type { TenantQuotas, TenantTier } from './types';
-import { DEFAULT_QUOTAS } from './types';
-
-/**
- * Rate limit check result
- */
-export interface RateLimitResult {
-  /** Whether the request is allowed */
-  allowed: boolean;
-  /** Remaining requests in current window */
-  remaining: number;
-  /** Timestamp when the limit resets (Unix ms) */
-  resetAt: number;
-  /** Limit for current window */
-  limit: number;
-}
-
-/**
- * Rate limit resource types
- */
-export type RateLimitResource = 'requests' | 'workflows' | 'plugins';
-
-/**
- * Tenant rate limiter
- * Uses State Broker for distributed rate limiting with TTL
- */
-export class TenantRateLimiter {
-  constructor(
-    private broker: StateBroker,
-    private quotas: Map<string, TenantQuotas> = new Map()
-  ) {}
-
-  /**
-   * Check rate limit for a tenant
-   *
-   * @param tenantId - Tenant identifier
-   * @param resource - Resource type to rate limit
-   * @returns Rate limit check result
-   *
-   * @example
-   * const result = await limiter.checkLimit('acme', 'requests');
-   * if (!result.allowed) {
-   *   throw new Error(`Rate limit exceeded. Reset at ${result.resetAt}`);
-   * }
-   */
-  async checkLimit(
-    tenantId: string,
-    resource: RateLimitResource
-  ): Promise<RateLimitResult> {
-    const quota = this.quotas.get(tenantId) ?? DEFAULT_QUOTAS.free;
-
-    // Key pattern: ratelimit:tenant:default:requests:2025-01-15T10:30
-    // Follows existing namespace:key pattern from State Broker
-    const key = `ratelimit:tenant:${tenantId}:${resource}:${this.getWindow()}`;
-
-    const current = (await this.broker.get<number>(key)) ?? 0;
-    const limit = this.getLimit(quota, resource);
-
-    if (current >= limit) {
-      return {
-        allowed: false,
-        remaining: 0,
-        resetAt: this.getResetTime(),
-        limit,
-      };
-    }
-
-    // Increment counter with 60s TTL
-    // State Broker cleanup (30s interval) will remove expired entries
-    await this.broker.set(key, current + 1, 60 * 1000);
-
-    return {
-      allowed: true,
-      remaining: limit - current - 1,
-      resetAt: this.getResetTime(),
-      limit,
-    };
-  }
-
-  /**
-   * Set quotas for a tenant
-   *
-   * @param tenantId - Tenant identifier
-   * @param quotas - Tenant quotas
-   */
-  setQuotas(tenantId: string, quotas: TenantQuotas): void {
-    this.quotas.set(tenantId, quotas);
-  }
-
-  /**
-   * Set quotas for a tenant tier
-   *
-   * @param tenantId - Tenant identifier
-   * @param tier - Tenant tier
-   */
-  setTier(tenantId: string, tier: TenantTier): void {
-    this.quotas.set(tenantId, { ...DEFAULT_QUOTAS[tier] });
-  }
-
-  /**
-   * Get current window identifier (minute precision)
-   * @returns ISO timestamp truncated to minutes
-   */
-  private getWindow(): string {
-    return new Date().toISOString().slice(0, 16); // YYYY-MM-DDTHH:MM
-  }
-
-  /**
-   * Get limit for resource type
-   *
-   * @param quota - Tenant quotas
-   * @param resource - Resource type
-   * @returns Limit value
-   */
-  private getLimit(quota: TenantQuotas, resource: RateLimitResource): number {
-    switch (resource) {
-      case 'requests':
-        return quota.requestsPerMinute;
-      case 'workflows':
-        return quota.maxConcurrentWorkflows;
-      case 'plugins':
-        // Convert daily limit to per-minute (1440 minutes in a day)
-        return quota.pluginExecutionsPerDay === -1
-          ? Number.MAX_SAFE_INTEGER
-          : Math.ceil(quota.pluginExecutionsPerDay / 1440);
-      default:
-        return 100; // default fallback
-    }
-  }
-
-  /**
-   * Get reset time for current window
-   * @returns Unix timestamp in milliseconds
-   */
-  private getResetTime(): number {
-    const now = new Date();
-    now.setSeconds(0, 0);
-    now.setMinutes(now.getMinutes() + 1);
-    return now.getTime();
-  }
-}

package/src/types.ts

@@ -1,97 +0,0 @@
-/**
- * @module @kb-labs/tenant/types
- * Multi-tenancy types and quota definitions
- */
-
-/**
- * Tenant tier levels
- */
-export type TenantTier = 'free' | 'pro' | 'enterprise';
-
-/**
- * Tenant resource quotas
- */
-export interface TenantQuotas {
-  /** Requests per minute limit */
-  requestsPerMinute: number;
-  /** Requests per day limit (-1 = unlimited) */
-  requestsPerDay: number;
-  /** Maximum concurrent workflows */
-  maxConcurrentWorkflows: number;
-  /** Maximum storage in MB */
-  maxStorageMB: number;
-  /** Plugin executions per day (-1 = unlimited) */
-  pluginExecutionsPerDay: number;
-}
-
-/**
- * Tenant configuration
- */
-export interface TenantConfig {
-  /** Unique tenant identifier */
-  id: string;
-  /** Tenant tier */
-  tier: TenantTier;
-  /** Resource quotas */
-  quotas: TenantQuotas;
-  /** Creation timestamp */
-  createdAt: string;
-  /** Last update timestamp */
-  updatedAt: string;
-}
-
-/**
- * Default quotas by tier
- */
-export const DEFAULT_QUOTAS: Record<TenantTier, TenantQuotas> = {
-  free: {
-    requestsPerMinute: 10,
-    requestsPerDay: 1000,
-    maxConcurrentWorkflows: 1,
-    maxStorageMB: 10,
-    pluginExecutionsPerDay: 100,
-  },
-  pro: {
-    requestsPerMinute: 100,
-    requestsPerDay: 100_000,
-    maxConcurrentWorkflows: 10,
-    maxStorageMB: 1000,
-    pluginExecutionsPerDay: 10_000,
-  },
-  enterprise: {
-    requestsPerMinute: 1000,
-    requestsPerDay: -1, // unlimited
-    maxConcurrentWorkflows: 100,
-    maxStorageMB: 10_000,
-    pluginExecutionsPerDay: -1, // unlimited
-  },
-};
-
-/**
- * Get default tenant ID from environment
- * @returns Tenant ID (defaults to 'default' for single-tenant deployments)
- */
-export function getDefaultTenantId(): string {
-  return process.env.KB_TENANT_ID || 'default';
-}
-
-/**
- * Get default tenant tier from environment
- * @returns Tenant tier (defaults to 'free')
- */
-export function getDefaultTenantTier(): TenantTier {
-  const tier = process.env.KB_TENANT_DEFAULT_TIER?.toLowerCase();
-  if (tier === 'pro' || tier === 'enterprise') {
-    return tier;
-  }
-  return 'free';
-}
-
-/**
- * Get tenant quotas for a tier
- * @param tier - Tenant tier
- * @returns Quotas for the tier
- */
-export function getQuotasForTier(tier: TenantTier): TenantQuotas {
-  return { ...DEFAULT_QUOTAS[tier] };
-}