@kb-labs/core-tenant 2.82.0 → 2.87.0

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { StateBroker } from '@kb-labs/core-state-broker';
+import { ICache } from '@kb-labs/core-platform';
 
 /**
  * @module @kb-labs/tenant/types
@@ -22,6 +22,8 @@ interface TenantQuotas {
     maxStorageMB: number;
     /** Plugin executions per day (-1 = unlimited) */
     pluginExecutionsPerDay: number;
+    /** LLM tokens per day across all requests (-1 = unlimited) */
+    tokensPerDay: number;
 }
 /**
  * Tenant configuration
@@ -61,13 +63,10 @@ declare function getQuotasForTier(tier: TenantTier): TenantQuotas;
 
 /**
  * @module @kb-labs/tenant/rate-limiter
- * Tenant rate limiter using existing State Broker infrastructure
+ * Tenant rate limiter backed by platform.cache (ICache).
  *
- * Benefits:
- * - Zero new dependencies
- * - TTL cleanup already implemented (30s interval)
- * - Consistent with state management patterns
- * - Same backend as plugin state (in-memory or HTTP daemon)
+ * Uses the same cache adapter as all other platform components —
+ * no extra dependencies, swappable backend (memory / Redis / etc.).
  */
 
 /**
@@ -83,64 +82,69 @@ interface RateLimitResult {
     /** Limit for current window */
     limit: number;
 }
+/**
+ * Token consumption result
+ */
+interface TokenLimitResult {
+    /** Whether token budget allows the request */
+    allowed: boolean;
+    /** Tokens consumed so far today */
+    consumed: number;
+    /** Daily token limit (-1 = unlimited) */
+    limit: number;
+    /** Timestamp when the daily window resets (start of next UTC day, Unix ms) */
+    resetAt: number;
+}
 /**
  * Rate limit resource types
  */
 type RateLimitResource = 'requests' | 'workflows' | 'plugins';
 /**
- * Tenant rate limiter
- * Uses State Broker for distributed rate limiting with TTL
+ * Tenant rate limiter backed by platform.cache.
+ *
+ * All counters use cache TTL for cleanup — no background timers needed.
  */
 declare class TenantRateLimiter {
-    private broker;
+    private cache;
     private quotas;
-    constructor(broker: StateBroker, quotas?: Map<string, TenantQuotas>);
+    constructor(cache: ICache, quotas?: Map<string, TenantQuotas>);
     /**
-     * Check rate limit for a tenant
+     * Check (and increment) the per-minute rate limit for a tenant.
      *
      * @param tenantId - Tenant identifier
      * @param resource - Resource type to rate limit
      * @returns Rate limit check result
-     *
-     * @example
-     * const result = await limiter.checkLimit('acme', 'requests');
-     * if (!result.allowed) {
-     *   throw new Error(`Rate limit exceeded. Reset at ${result.resetAt}`);
-     * }
      */
     checkLimit(tenantId: string, resource: RateLimitResource): Promise<RateLimitResult>;
     /**
-     * Set quotas for a tenant
+     * Record consumed tokens and check whether the daily token budget is exceeded.
      *
-     * @param tenantId - Tenant identifier
-     * @param quotas - Tenant quotas
-     */
-    setQuotas(tenantId: string, quotas: TenantQuotas): void;
-    /**
-     * Set quotas for a tenant tier
+     * Call this after a successful LLM response when the token count is known.
+     * Returns allowed=false when the budget was already exceeded BEFORE this call
+     * (i.e. the previous total was already >= limit). The current call's tokens
+     * are still recorded so the counter stays accurate.
      *
-     * @param tenantId - Tenant identifier
-     * @param tier - Tenant tier
-     */
-    setTier(tenantId: string, tier: TenantTier): void;
-    /**
-     * Get current window identifier (minute precision)
-     * @returns ISO timestamp truncated to minutes
+     * @param tenantId  - Tenant identifier
+     * @param tokens    - Number of tokens consumed in this request (prompt + completion)
      */
-    private getWindow;
+    trackTokens(tenantId: string, tokens: number): Promise<TokenLimitResult>;
     /**
-     * Get limit for resource type
-     *
-     * @param quota - Tenant quotas
-     * @param resource - Resource type
-     * @returns Limit value
+     * Read current token consumption without incrementing.
      */
+    getTokenUsage(tenantId: string): Promise<TokenLimitResult>;
+    /** Set quotas for a specific tenant (overrides tier default). */
+    setQuotas(tenantId: string, quotas: TenantQuotas): void;
+    /** Set quotas for a tenant by tier. */
+    setTier(tenantId: string, tier: TenantTier): void;
+    /** Current minute window identifier: YYYY-MM-DDTHH:MM */
+    private getMinuteWindow;
+    /** Unix ms when the current minute window ends. */
+    private getMinuteResetTime;
+    /** Current day window identifier: YYYY-MM-DD (UTC) */
+    private getDayWindow;
+    /** Unix ms for start of next UTC day. */
+    private getDayResetTime;
     private getLimit;
-    /**
-     * Get reset time for current window
-     * @returns Unix timestamp in milliseconds
-     */
-    private getResetTime;
 }
 
-export { DEFAULT_QUOTAS, type RateLimitResource, type RateLimitResult, type TenantConfig, type TenantQuotas, TenantRateLimiter, type TenantTier, getDefaultTenantId, getDefaultTenantTier, getQuotasForTier };
+export { DEFAULT_QUOTAS, type RateLimitResource, type RateLimitResult, type TenantConfig, type TenantQuotas, TenantRateLimiter, type TenantTier, type TokenLimitResult, getDefaultTenantId, getDefaultTenantTier, getQuotasForTier };

package/dist/index.js

@@ -5,23 +5,24 @@ var DEFAULT_QUOTAS = {
     requestsPerDay: 1e3,
     maxConcurrentWorkflows: 1,
     maxStorageMB: 10,
-    pluginExecutionsPerDay: 100
+    pluginExecutionsPerDay: 100,
+    tokensPerDay: 1e5
   },
   pro: {
     requestsPerMinute: 100,
     requestsPerDay: 1e5,
     maxConcurrentWorkflows: 10,
     maxStorageMB: 1e3,
-    pluginExecutionsPerDay: 1e4
+    pluginExecutionsPerDay: 1e4,
+    tokensPerDay: 1e7
   },
   enterprise: {
     requestsPerMinute: 1e3,
     requestsPerDay: -1,
-    // unlimited
     maxConcurrentWorkflows: 100,
     maxStorageMB: 1e4,
-    pluginExecutionsPerDay: -1
-    // unlimited
+    pluginExecutionsPerDay: -1,
+    tokensPerDay: -1
   }
 };
 function getDefaultTenantId() {
@@ -40,78 +41,119 @@ function getQuotasForTier(tier) {
 
 // src/rate-limiter.ts
 var TenantRateLimiter = class {
-  constructor(broker, quotas = /* @__PURE__ */ new Map()) {
-    this.broker = broker;
+  constructor(cache, quotas = /* @__PURE__ */ new Map()) {
+    this.cache = cache;
     this.quotas = quotas;
   }
-  broker;
+  cache;
   quotas;
   /**
-   * Check rate limit for a tenant
+   * Check (and increment) the per-minute rate limit for a tenant.
    *
    * @param tenantId - Tenant identifier
    * @param resource - Resource type to rate limit
    * @returns Rate limit check result
-   *
-   * @example
-   * const result = await limiter.checkLimit('acme', 'requests');
-   * if (!result.allowed) {
-   *   throw new Error(`Rate limit exceeded. Reset at ${result.resetAt}`);
-   * }
    */
   async checkLimit(tenantId, resource) {
     const quota = this.quotas.get(tenantId) ?? DEFAULT_QUOTAS.free;
-    const key = `ratelimit:tenant:${tenantId}:${resource}:${this.getWindow()}`;
-    const current = await this.broker.get(key) ?? 0;
     const limit = this.getLimit(quota, resource);
+    const window = this.getMinuteWindow();
+    const key = `ratelimit:tenant:${tenantId}:${resource}:${window}`;
+    const ttl = 6e4;
+    const current = await this.cache.get(key) ?? 0;
     if (current >= limit) {
       return {
         allowed: false,
         remaining: 0,
-        resetAt: this.getResetTime(),
+        resetAt: this.getMinuteResetTime(),
         limit
       };
     }
-    await this.broker.set(key, current + 1, 60 * 1e3);
+    await this.cache.set(key, current + 1, ttl);
     return {
       allowed: true,
       remaining: limit - current - 1,
-      resetAt: this.getResetTime(),
+      resetAt: this.getMinuteResetTime(),
       limit
     };
   }
   /**
-   * Set quotas for a tenant
+   * Record consumed tokens and check whether the daily token budget is exceeded.
    *
-   * @param tenantId - Tenant identifier
-   * @param quotas - Tenant quotas
+   * Call this after a successful LLM response when the token count is known.
+   * Returns allowed=false when the budget was already exceeded BEFORE this call
+   * (i.e. the previous total was already >= limit). The current call's tokens
+   * are still recorded so the counter stays accurate.
+   *
+   * @param tenantId  - Tenant identifier
+   * @param tokens    - Number of tokens consumed in this request (prompt + completion)
    */
-  setQuotas(tenantId, quotas) {
-    this.quotas.set(tenantId, quotas);
+  async trackTokens(tenantId, tokens) {
+    const quota = this.quotas.get(tenantId) ?? DEFAULT_QUOTAS.free;
+    const limit = quota.tokensPerDay;
+    const day = this.getDayWindow();
+    const key = `ratelimit:tenant:${tenantId}:tokens:${day}`;
+    const ttl = 25 * 60 * 60 * 1e3;
+    const consumed = await this.cache.get(key) ?? 0;
+    const newTotal = consumed + tokens;
+    await this.cache.set(key, newTotal, ttl);
+    if (limit === -1) {
+      return { allowed: true, consumed: newTotal, limit, resetAt: this.getDayResetTime() };
+    }
+    return {
+      allowed: consumed < limit,
+      // allowed if budget wasn't exhausted before this call
+      consumed: newTotal,
+      limit,
+      resetAt: this.getDayResetTime()
+    };
   }
   /**
-   * Set quotas for a tenant tier
-   *
-   * @param tenantId - Tenant identifier
-   * @param tier - Tenant tier
+   * Read current token consumption without incrementing.
    */
+  async getTokenUsage(tenantId) {
+    const quota = this.quotas.get(tenantId) ?? DEFAULT_QUOTAS.free;
+    const limit = quota.tokensPerDay;
+    const day = this.getDayWindow();
+    const key = `ratelimit:tenant:${tenantId}:tokens:${day}`;
+    const consumed = await this.cache.get(key) ?? 0;
+    return {
+      allowed: limit === -1 || consumed < limit,
+      consumed,
+      limit,
+      resetAt: this.getDayResetTime()
+    };
+  }
+  /** Set quotas for a specific tenant (overrides tier default). */
+  setQuotas(tenantId, quotas) {
+    this.quotas.set(tenantId, quotas);
+  }
+  /** Set quotas for a tenant by tier. */
   setTier(tenantId, tier) {
     this.quotas.set(tenantId, { ...DEFAULT_QUOTAS[tier] });
   }
-  /**
-   * Get current window identifier (minute precision)
-   * @returns ISO timestamp truncated to minutes
-   */
-  getWindow() {
+  // ── private helpers ────────────────────────────────────────────────────────
+  /** Current minute window identifier: YYYY-MM-DDTHH:MM */
+  getMinuteWindow() {
     return (/* @__PURE__ */ new Date()).toISOString().slice(0, 16);
   }
-  /**
-   * Get limit for resource type
-   *
-   * @param quota - Tenant quotas
-   * @param resource - Resource type
-   * @returns Limit value
-   */
+  /** Unix ms when the current minute window ends. */
+  getMinuteResetTime() {
+    const now = /* @__PURE__ */ new Date();
+    now.setSeconds(0, 0);
+    now.setMinutes(now.getMinutes() + 1);
+    return now.getTime();
+  }
+  /** Current day window identifier: YYYY-MM-DD (UTC) */
+  getDayWindow() {
+    return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  }
+  /** Unix ms for start of next UTC day. */
+  getDayResetTime() {
+    const d = /* @__PURE__ */ new Date();
+    d.setUTCHours(24, 0, 0, 0);
+    return d.getTime();
+  }
   getLimit(quota, resource) {
     switch (resource) {
       case "requests":
@@ -124,16 +166,6 @@ var TenantRateLimiter = class {
         return 100;
     }
   }
-  /**
-   * Get reset time for current window
-   * @returns Unix timestamp in milliseconds
-   */
-  getResetTime() {
-    const now = /* @__PURE__ */ new Date();
-    now.setSeconds(0, 0);
-    now.setMinutes(now.getMinutes() + 1);
-    return now.getTime();
-  }
 };
 
 export { DEFAULT_QUOTAS, TenantRateLimiter, getDefaultTenantId, getDefaultTenantTier, getQuotasForTier };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/types.ts","../src/rate-limiter.ts"],"names":[],"mappings":";AA6CO,IAAM,cAAA,GAAmD;AAAA,EAC9D,IAAA,EAAM;AAAA,IACJ,iBAAA,EAAmB,EAAA;AAAA,IACnB,cAAA,EAAgB,GAAA;AAAA,IAChB,sBAAA,EAAwB,CAAA;AAAA,IACxB,YAAA,EAAc,EAAA;AAAA,IACd,sBAAA,EAAwB;AAAA,GAC1B;AAAA,EACA,GAAA,EAAK;AAAA,IACH,iBAAA,EAAmB,GAAA;AAAA,IACnB,cAAA,EAAgB,GAAA;AAAA,IAChB,sBAAA,EAAwB,EAAA;AAAA,IACxB,YAAA,EAAc,GAAA;AAAA,IACd,sBAAA,EAAwB;AAAA,GAC1B;AAAA,EACA,UAAA,EAAY;AAAA,IACV,iBAAA,EAAmB,GAAA;AAAA,IACnB,cAAA,EAAgB,EAAA;AAAA;AAAA,IAChB,sBAAA,EAAwB,GAAA;AAAA,IACxB,YAAA,EAAc,GAAA;AAAA,IACd,sBAAA,EAAwB;AAAA;AAAA;AAE5B;AAMO,SAAS,kBAAA,GAA6B;AAC3C,EAAA,OAAO,OAAA,CAAQ,IAAI,YAAA,IAAgB,SAAA;AACrC;AAMO,SAAS,oBAAA,GAAmC;AACjD,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,sBAAA,EAAwB,WAAA,EAAY;AAC7D,EAAA,IAAI,IAAA,KAAS,KAAA,IAAS,IAAA,KAAS,YAAA,EAAc;AAC3C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,MAAA;AACT;AAOO,SAAS,iBAAiB,IAAA,EAAgC;AAC/D,EAAA,OAAO,EAAE,GAAG,cAAA,CAAe,IAAI,CAAA,EAAE;AACnC;;;AC1DO,IAAM,oBAAN,MAAwB;AAAA,EAC7B,WAAA,CACU,MAAA,EACA,MAAA,mBAAoC,IAAI,KAAI,EACpD;AAFQ,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EACP;AAAA,EAFO,MAAA;AAAA,EACA,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBV,MAAM,UAAA,CACJ,QAAA,EACA,QAAA,EAC0B;AAC1B,IAAA,MAAM,QAAQ,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,QAAQ,KAAK,cAAA,CAAe,IAAA;AAI1D,IAAA,MAAM,GAAA,GAAM,oBAAoB,QAAQ,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,WAAW,CAAA,CAAA;AAExE,IAAA,MAAM,UAAW,MAAM,IAAA,CAAK,MAAA,CAAO,GAAA,CAAY,GAAG,CAAA,IAAM,CAAA;AACxD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,KAAA,EAAO,QAAQ,CAAA;AAE3C,IAAA,IAAI,WAAW,KAAA,EAAO;AACpB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,SAAA,EAAW,CAAA;AAAA,QACX,OAAA,EAAS,KAAK,YAAA,EAAa;AAAA,QAC3B;AAAA,OACF;AAAA,IACF;AAIA,IAAA,MAAM,KAAK,MAAA,CAAO,GAAA,CAAI,KAAK,OAAA,GAAU,CAAA,EAAG,KAAK,GAAI,CAAA;AAEjD,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,SAAA,EAAW,QAAQ,OAAA,GAAU,CAAA;AAAA,MAC7B,OAAA,EAAS,KAAK,YAAA,EAAa;AAAA,MAC3B;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,SAAA,CAAU,UAAkB,MAAA,EAA4B;AACtD,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAA,CAAQ,UAAkB,IAAA,EAAwB;AAChD,IAAA,IAAA,CAAK,MAAA,CAAO,IAAI,QAAA,EAAU,EAAE,GAAG,cAAA,CAAe,IAAI,GAAG,CAAA;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAA,GAAoB;AAC1B,IAAA,OAAA,qBAAW,IAAA,EAAK,EAAE,aAAY,CAAE,KAAA,CAAM,GAAG,EAAE,CAAA;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,QAAA,CAAS,OAAqB,QAAA,EAAqC;AACzE,IAAA,QAAQ,QAAA;AAAU,MAChB,KAAK,UAAA;AACH,QAAA,OAAO,KAAA,CAAM,iBAAA;AAAA,MACf,KAAK,WAAA;AACH,QAAA,OAAO,KAAA,CAAM,sBAAA;AAAA,MACf,KAAK,SAAA;AAEH,QAAA,OAAO,KAAA,CAAM,2BAA2B,EAAA,GACpC,MAAA,CAAO,mBACP,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,sBAAA,GAAyB,IAAI,CAAA;AAAA,MACnD;AACE,QAAA,OAAO,GAAA;AAAA;AACX,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,YAAA,GAAuB;AAC7B,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,GAAA,CAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AACnB,IAAA,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,UAAA,EAAW,GAAI,CAAC,CAAA;AACnC,IAAA,OAAO,IAAI,OAAA,EAAQ;AAAA,EACrB;AACF","file":"index.js","sourcesContent":["/**\n * @module @kb-labs/tenant/types\n * Multi-tenancy types and quota definitions\n */\n\n/**\n * Tenant tier levels\n */\nexport type TenantTier = 'free' | 'pro' | 'enterprise';\n\n/**\n * Tenant resource quotas\n */\nexport interface TenantQuotas {\n  /** Requests per minute limit */\n  requestsPerMinute: number;\n  /** Requests per day limit (-1 = unlimited) */\n  requestsPerDay: number;\n  /** Maximum concurrent workflows */\n  maxConcurrentWorkflows: number;\n  /** Maximum storage in MB */\n  maxStorageMB: number;\n  /** Plugin executions per day (-1 = unlimited) */\n  pluginExecutionsPerDay: number;\n}\n\n/**\n * Tenant configuration\n */\nexport interface TenantConfig {\n  /** Unique tenant identifier */\n  id: string;\n  /** Tenant tier */\n  tier: TenantTier;\n  /** Resource quotas */\n  quotas: TenantQuotas;\n  /** Creation timestamp */\n  createdAt: string;\n  /** Last update timestamp */\n  updatedAt: string;\n}\n\n/**\n * Default quotas by tier\n */\nexport const DEFAULT_QUOTAS: Record<TenantTier, TenantQuotas> = {\n  free: {\n    requestsPerMinute: 10,\n    requestsPerDay: 1000,\n    maxConcurrentWorkflows: 1,\n    maxStorageMB: 10,\n    pluginExecutionsPerDay: 100,\n  },\n  pro: {\n    requestsPerMinute: 100,\n    requestsPerDay: 100_000,\n    maxConcurrentWorkflows: 10,\n    maxStorageMB: 1000,\n    pluginExecutionsPerDay: 10_000,\n  },\n  enterprise: {\n    requestsPerMinute: 1000,\n    requestsPerDay: -1, // unlimited\n    maxConcurrentWorkflows: 100,\n    maxStorageMB: 10_000,\n    pluginExecutionsPerDay: -1, // unlimited\n  },\n};\n\n/**\n * Get default tenant ID from environment\n * @returns Tenant ID (defaults to 'default' for single-tenant deployments)\n */\nexport function getDefaultTenantId(): string {\n  return process.env.KB_TENANT_ID || 'default';\n}\n\n/**\n * Get default tenant tier from environment\n * @returns Tenant tier (defaults to 'free')\n */\nexport function getDefaultTenantTier(): TenantTier {\n  const tier = process.env.KB_TENANT_DEFAULT_TIER?.toLowerCase();\n  if (tier === 'pro' || tier === 'enterprise') {\n    return tier;\n  }\n  return 'free';\n}\n\n/**\n * Get tenant quotas for a tier\n * @param tier - Tenant tier\n * @returns Quotas for the tier\n */\nexport function getQuotasForTier(tier: TenantTier): TenantQuotas {\n  return { ...DEFAULT_QUOTAS[tier] };\n}\n","/**\n * @module @kb-labs/tenant/rate-limiter\n * Tenant rate limiter using existing State Broker infrastructure\n *\n * Benefits:\n * - Zero new dependencies\n * - TTL cleanup already implemented (30s interval)\n * - Consistent with state management patterns\n * - Same backend as plugin state (in-memory or HTTP daemon)\n */\n\nimport type { StateBroker } from '@kb-labs/core-state-broker';\nimport type { TenantQuotas, TenantTier } from './types';\nimport { DEFAULT_QUOTAS } from './types';\n\n/**\n * Rate limit check result\n */\nexport interface RateLimitResult {\n  /** Whether the request is allowed */\n  allowed: boolean;\n  /** Remaining requests in current window */\n  remaining: number;\n  /** Timestamp when the limit resets (Unix ms) */\n  resetAt: number;\n  /** Limit for current window */\n  limit: number;\n}\n\n/**\n * Rate limit resource types\n */\nexport type RateLimitResource = 'requests' | 'workflows' | 'plugins';\n\n/**\n * Tenant rate limiter\n * Uses State Broker for distributed rate limiting with TTL\n */\nexport class TenantRateLimiter {\n  constructor(\n    private broker: StateBroker,\n    private quotas: Map<string, TenantQuotas> = new Map()\n  ) {}\n\n  /**\n   * Check rate limit for a tenant\n   *\n   * @param tenantId - Tenant identifier\n   * @param resource - Resource type to rate limit\n   * @returns Rate limit check result\n   *\n   * @example\n   * const result = await limiter.checkLimit('acme', 'requests');\n   * if (!result.allowed) {\n   *   throw new Error(`Rate limit exceeded. Reset at ${result.resetAt}`);\n   * }\n   */\n  async checkLimit(\n    tenantId: string,\n    resource: RateLimitResource\n  ): Promise<RateLimitResult> {\n    const quota = this.quotas.get(tenantId) ?? DEFAULT_QUOTAS.free;\n\n    // Key pattern: ratelimit:tenant:default:requests:2025-01-15T10:30\n    // Follows existing namespace:key pattern from State Broker\n    const key = `ratelimit:tenant:${tenantId}:${resource}:${this.getWindow()}`;\n\n    const current = (await this.broker.get<number>(key)) ?? 0;\n    const limit = this.getLimit(quota, resource);\n\n    if (current >= limit) {\n      return {\n        allowed: false,\n        remaining: 0,\n        resetAt: this.getResetTime(),\n        limit,\n      };\n    }\n\n    // Increment counter with 60s TTL\n    // State Broker cleanup (30s interval) will remove expired entries\n    await this.broker.set(key, current + 1, 60 * 1000);\n\n    return {\n      allowed: true,\n      remaining: limit - current - 1,\n      resetAt: this.getResetTime(),\n      limit,\n    };\n  }\n\n  /**\n   * Set quotas for a tenant\n   *\n   * @param tenantId - Tenant identifier\n   * @param quotas - Tenant quotas\n   */\n  setQuotas(tenantId: string, quotas: TenantQuotas): void {\n    this.quotas.set(tenantId, quotas);\n  }\n\n  /**\n   * Set quotas for a tenant tier\n   *\n   * @param tenantId - Tenant identifier\n   * @param tier - Tenant tier\n   */\n  setTier(tenantId: string, tier: TenantTier): void {\n    this.quotas.set(tenantId, { ...DEFAULT_QUOTAS[tier] });\n  }\n\n  /**\n   * Get current window identifier (minute precision)\n   * @returns ISO timestamp truncated to minutes\n   */\n  private getWindow(): string {\n    return new Date().toISOString().slice(0, 16); // YYYY-MM-DDTHH:MM\n  }\n\n  /**\n   * Get limit for resource type\n   *\n   * @param quota - Tenant quotas\n   * @param resource - Resource type\n   * @returns Limit value\n   */\n  private getLimit(quota: TenantQuotas, resource: RateLimitResource): number {\n    switch (resource) {\n      case 'requests':\n        return quota.requestsPerMinute;\n      case 'workflows':\n        return quota.maxConcurrentWorkflows;\n      case 'plugins':\n        // Convert daily limit to per-minute (1440 minutes in a day)\n        return quota.pluginExecutionsPerDay === -1\n          ? Number.MAX_SAFE_INTEGER\n          : Math.ceil(quota.pluginExecutionsPerDay / 1440);\n      default:\n        return 100; // default fallback\n    }\n  }\n\n  /**\n   * Get reset time for current window\n   * @returns Unix timestamp in milliseconds\n   */\n  private getResetTime(): number {\n    const now = new Date();\n    now.setSeconds(0, 0);\n    now.setMinutes(now.getMinutes() + 1);\n    return now.getTime();\n  }\n}\n"]}
+{"version":3,"sources":["../src/types.ts","../src/rate-limiter.ts"],"names":[],"mappings":";AA+CO,IAAM,cAAA,GAAmD;AAAA,EAC9D,IAAA,EAAM;AAAA,IACJ,iBAAA,EAAmB,EAAA;AAAA,IACnB,cAAA,EAAgB,GAAA;AAAA,IAChB,sBAAA,EAAwB,CAAA;AAAA,IACxB,YAAA,EAAc,EAAA;AAAA,IACd,sBAAA,EAAwB,GAAA;AAAA,IACxB,YAAA,EAAc;AAAA,GAChB;AAAA,EACA,GAAA,EAAK;AAAA,IACH,iBAAA,EAAmB,GAAA;AAAA,IACnB,cAAA,EAAgB,GAAA;AAAA,IAChB,sBAAA,EAAwB,EAAA;AAAA,IACxB,YAAA,EAAc,GAAA;AAAA,IACd,sBAAA,EAAwB,GAAA;AAAA,IACxB,YAAA,EAAc;AAAA,GAChB;AAAA,EACA,UAAA,EAAY;AAAA,IACV,iBAAA,EAAmB,GAAA;AAAA,IACnB,cAAA,EAAgB,EAAA;AAAA,IAChB,sBAAA,EAAwB,GAAA;AAAA,IACxB,YAAA,EAAc,GAAA;AAAA,IACd,sBAAA,EAAwB,EAAA;AAAA,IACxB,YAAA,EAAc;AAAA;AAElB;AAMO,SAAS,kBAAA,GAA6B;AAC3C,EAAA,OAAO,OAAA,CAAQ,IAAI,YAAA,IAAgB,SAAA;AACrC;AAMO,SAAS,oBAAA,GAAmC;AACjD,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,sBAAA,EAAwB,WAAA,EAAY;AAC7D,EAAA,IAAI,IAAA,KAAS,KAAA,IAAS,IAAA,KAAS,YAAA,EAAc;AAC3C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,MAAA;AACT;AAOO,SAAS,iBAAiB,IAAA,EAAgC;AAC/D,EAAA,OAAO,EAAE,GAAG,cAAA,CAAe,IAAI,CAAA,EAAE;AACnC;;;ACnDO,IAAM,oBAAN,MAAwB;AAAA,EAC7B,WAAA,CACU,KAAA,EACA,MAAA,mBAAoC,IAAI,KAAI,EACpD;AAFQ,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EACP;AAAA,EAFO,KAAA;AAAA,EACA,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUV,MAAM,UAAA,CACJ,QAAA,EACA,QAAA,EAC0B;AAC1B,IAAA,MAAM,QAAQ,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,QAAQ,KAAK,cAAA,CAAe,IAAA;AAC1D,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,QAAA,CAAS,KAAA,EAAO,QAAQ,CAAA;AAC3C,IAAA,MAAM,MAAA,GAAS,KAAK,eAAA,EAAgB;AAEpC,IAAA,MAAM,MAAM,CAAA,iBAAA,EAAoB,QAAQ,CAAA,CAAA,EAAI,QAAQ,IAAI,MAAM,CAAA,CAAA;AAC9D,IAAA,MAAM,GAAA,GAAM,GAAA;AAEZ,IAAA,MAAM,UAAW,MAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAY,GAAG,CAAA,IAAM,CAAA;AAEvD,IAAA,IAAI,WAAW,KAAA,EAAO;AACpB,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,KAAA;AAAA,QACT,SAAA,EAAW,CAAA;AAAA,QACX,OAAA,EAAS,KAAK,kBAAA,EAAmB;AAAA,QACjC;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,KAAK,KAAA,CAAM,GAAA,CAAI,GAAA,EAAK,OAAA,GAAU,GAAG,GAAG,CAAA;AAE1C,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT,SAAA,EAAW,QAAQ,OAAA,GAAU,CAAA;AAAA,MAC7B,OAAA,EAAS,KAAK,kBAAA,EAAmB;AAAA,MACjC;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,WAAA,CAAY,QAAA,EAAkB,MAAA,EAA2C;AAC7E,IAAA,MAAM,QAAQ,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,QAAQ,KAAK,cAAA,CAAe,IAAA;AAC1D,IAAA,MAAM,QAAQ,KAAA,CAAM,YAAA;AACpB,IAAA,MAAM,GAAA,GAAM,KAAK,YAAA,EAAa;AAE9B,IAAA,MAAM,GAAA,GAAM,CAAA,iBAAA,EAAoB,QAAQ,CAAA,QAAA,EAAW,GAAG,CAAA,CAAA;AACtD,IAAA,MAAM,GAAA,GAAM,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAA;AAE3B,IAAA,MAAM,WAAY,MAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAY,GAAG,CAAA,IAAM,CAAA;AACxD,IAAA,MAAM,WAAW,QAAA,GAAW,MAAA;AAC5B,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAA,EAAK,UAAU,GAAG,CAAA;AAEvC,IAAA,IAAI,UAAU,EAAA,EAAI;AAChB,MAAA,OAAO,EAAE,SAAS,IAAA,EAAM,QAAA,EAAU,UAAU,KAAA,EAAO,OAAA,EAAS,IAAA,CAAK,eAAA,EAAgB,EAAE;AAAA,IACrF;AAEA,IAAA,OAAO;AAAA,MACL,SAAS,QAAA,GAAW,KAAA;AAAA;AAAA,MACpB,QAAA,EAAU,QAAA;AAAA,MACV,KAAA;AAAA,MACA,OAAA,EAAS,KAAK,eAAA;AAAgB,KAChC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAAc,QAAA,EAA6C;AAC/D,IAAA,MAAM,QAAQ,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,QAAQ,KAAK,cAAA,CAAe,IAAA;AAC1D,IAAA,MAAM,QAAQ,KAAA,CAAM,YAAA;AACpB,IAAA,MAAM,GAAA,GAAM,KAAK,YAAA,EAAa;AAC9B,IAAA,MAAM,GAAA,GAAM,CAAA,iBAAA,EAAoB,QAAQ,CAAA,QAAA,EAAW,GAAG,CAAA,CAAA;AACtD,IAAA,MAAM,WAAY,MAAM,IAAA,CAAK,KAAA,CAAM,GAAA,CAAY,GAAG,CAAA,IAAM,CAAA;AAExD,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA,KAAU,EAAA,IAAM,QAAA,GAAW,KAAA;AAAA,MACpC,QAAA;AAAA,MACA,KAAA;AAAA,MACA,OAAA,EAAS,KAAK,eAAA;AAAgB,KAChC;AAAA,EACF;AAAA;AAAA,EAGA,SAAA,CAAU,UAAkB,MAAA,EAA4B;AACtD,IAAA,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,OAAA,CAAQ,UAAkB,IAAA,EAAwB;AAChD,IAAA,IAAA,CAAK,MAAA,CAAO,IAAI,QAAA,EAAU,EAAE,GAAG,cAAA,CAAe,IAAI,GAAG,CAAA;AAAA,EACvD;AAAA;AAAA;AAAA,EAKQ,eAAA,GAA0B;AAChC,IAAA,OAAA,qBAAW,IAAA,EAAK,EAAE,aAAY,CAAE,KAAA,CAAM,GAAG,EAAE,CAAA;AAAA,EAC7C;AAAA;AAAA,EAGQ,kBAAA,GAA6B;AACnC,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,GAAA,CAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AACnB,IAAA,GAAA,CAAI,UAAA,CAAW,GAAA,CAAI,UAAA,EAAW,GAAI,CAAC,CAAA;AACnC,IAAA,OAAO,IAAI,OAAA,EAAQ;AAAA,EACrB;AAAA;AAAA,EAGQ,YAAA,GAAuB;AAC7B,IAAA,OAAA,qBAAW,IAAA,EAAK,EAAE,aAAY,CAAE,KAAA,CAAM,GAAG,EAAE,CAAA;AAAA,EAC7C;AAAA;AAAA,EAGQ,eAAA,GAA0B;AAChC,IAAA,MAAM,CAAA,uBAAQ,IAAA,EAAK;AACnB,IAAA,CAAA,CAAE,WAAA,CAAY,EAAA,EAAI,CAAA,EAAG,CAAA,EAAG,CAAC,CAAA;AACzB,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB;AAAA,EAEQ,QAAA,CAAS,OAAqB,QAAA,EAAqC;AACzE,IAAA,QAAQ,QAAA;AAAU,MAChB,KAAK,UAAA;AACH,QAAA,OAAO,KAAA,CAAM,iBAAA;AAAA,MACf,KAAK,WAAA;AACH,QAAA,OAAO,KAAA,CAAM,sBAAA;AAAA,MACf,KAAK,SAAA;AACH,QAAA,OAAO,KAAA,CAAM,2BAA2B,EAAA,GACpC,MAAA,CAAO,mBACP,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,sBAAA,GAAyB,IAAI,CAAA;AAAA,MACnD;AACE,QAAA,OAAO,GAAA;AAAA;AACX,EACF;AACF","file":"index.js","sourcesContent":["/**\n * @module @kb-labs/tenant/types\n * Multi-tenancy types and quota definitions\n */\n\n/**\n * Tenant tier levels\n */\nexport type TenantTier = 'free' | 'pro' | 'enterprise';\n\n/**\n * Tenant resource quotas\n */\nexport interface TenantQuotas {\n  /** Requests per minute limit */\n  requestsPerMinute: number;\n  /** Requests per day limit (-1 = unlimited) */\n  requestsPerDay: number;\n  /** Maximum concurrent workflows */\n  maxConcurrentWorkflows: number;\n  /** Maximum storage in MB */\n  maxStorageMB: number;\n  /** Plugin executions per day (-1 = unlimited) */\n  pluginExecutionsPerDay: number;\n  /** LLM tokens per day across all requests (-1 = unlimited) */\n  tokensPerDay: number;\n}\n\n/**\n * Tenant configuration\n */\nexport interface TenantConfig {\n  /** Unique tenant identifier */\n  id: string;\n  /** Tenant tier */\n  tier: TenantTier;\n  /** Resource quotas */\n  quotas: TenantQuotas;\n  /** Creation timestamp */\n  createdAt: string;\n  /** Last update timestamp */\n  updatedAt: string;\n}\n\n/**\n * Default quotas by tier\n */\nexport const DEFAULT_QUOTAS: Record<TenantTier, TenantQuotas> = {\n  free: {\n    requestsPerMinute: 10,\n    requestsPerDay: 1000,\n    maxConcurrentWorkflows: 1,\n    maxStorageMB: 10,\n    pluginExecutionsPerDay: 100,\n    tokensPerDay: 100_000,\n  },\n  pro: {\n    requestsPerMinute: 100,\n    requestsPerDay: 100_000,\n    maxConcurrentWorkflows: 10,\n    maxStorageMB: 1000,\n    pluginExecutionsPerDay: 10_000,\n    tokensPerDay: 10_000_000,\n  },\n  enterprise: {\n    requestsPerMinute: 1000,\n    requestsPerDay: -1,\n    maxConcurrentWorkflows: 100,\n    maxStorageMB: 10_000,\n    pluginExecutionsPerDay: -1,\n    tokensPerDay: -1,\n  },\n};\n\n/**\n * Get default tenant ID from environment\n * @returns Tenant ID (defaults to 'default' for single-tenant deployments)\n */\nexport function getDefaultTenantId(): string {\n  return process.env.KB_TENANT_ID || 'default';\n}\n\n/**\n * Get default tenant tier from environment\n * @returns Tenant tier (defaults to 'free')\n */\nexport function getDefaultTenantTier(): TenantTier {\n  const tier = process.env.KB_TENANT_DEFAULT_TIER?.toLowerCase();\n  if (tier === 'pro' || tier === 'enterprise') {\n    return tier;\n  }\n  return 'free';\n}\n\n/**\n * Get tenant quotas for a tier\n * @param tier - Tenant tier\n * @returns Quotas for the tier\n */\nexport function getQuotasForTier(tier: TenantTier): TenantQuotas {\n  return { ...DEFAULT_QUOTAS[tier] };\n}\n","/**\n * @module @kb-labs/tenant/rate-limiter\n * Tenant rate limiter backed by platform.cache (ICache).\n *\n * Uses the same cache adapter as all other platform components —\n * no extra dependencies, swappable backend (memory / Redis / etc.).\n */\n\nimport type { ICache } from '@kb-labs/core-platform';\nimport type { TenantQuotas, TenantTier } from './types.js';\nimport { DEFAULT_QUOTAS } from './types.js';\n\n/**\n * Rate limit check result\n */\nexport interface RateLimitResult {\n  /** Whether the request is allowed */\n  allowed: boolean;\n  /** Remaining requests in current window */\n  remaining: number;\n  /** Timestamp when the limit resets (Unix ms) */\n  resetAt: number;\n  /** Limit for current window */\n  limit: number;\n}\n\n/**\n * Token consumption result\n */\nexport interface TokenLimitResult {\n  /** Whether token budget allows the request */\n  allowed: boolean;\n  /** Tokens consumed so far today */\n  consumed: number;\n  /** Daily token limit (-1 = unlimited) */\n  limit: number;\n  /** Timestamp when the daily window resets (start of next UTC day, Unix ms) */\n  resetAt: number;\n}\n\n/**\n * Rate limit resource types\n */\nexport type RateLimitResource = 'requests' | 'workflows' | 'plugins';\n\n/**\n * Tenant rate limiter backed by platform.cache.\n *\n * All counters use cache TTL for cleanup — no background timers needed.\n */\nexport class TenantRateLimiter {\n  constructor(\n    private cache: ICache,\n    private quotas: Map<string, TenantQuotas> = new Map()\n  ) {}\n\n  /**\n   * Check (and increment) the per-minute rate limit for a tenant.\n   *\n   * @param tenantId - Tenant identifier\n   * @param resource - Resource type to rate limit\n   * @returns Rate limit check result\n   */\n  async checkLimit(\n    tenantId: string,\n    resource: RateLimitResource\n  ): Promise<RateLimitResult> {\n    const quota = this.quotas.get(tenantId) ?? DEFAULT_QUOTAS.free;\n    const limit = this.getLimit(quota, resource);\n    const window = this.getMinuteWindow();\n    // key: ratelimit:tenant:<id>:<resource>:<YYYY-MM-DDTHH:MM>\n    const key = `ratelimit:tenant:${tenantId}:${resource}:${window}`;\n    const ttl = 60_000; // 1 minute\n\n    const current = (await this.cache.get<number>(key)) ?? 0;\n\n    if (current >= limit) {\n      return {\n        allowed: false,\n        remaining: 0,\n        resetAt: this.getMinuteResetTime(),\n        limit,\n      };\n    }\n\n    await this.cache.set(key, current + 1, ttl);\n\n    return {\n      allowed: true,\n      remaining: limit - current - 1,\n      resetAt: this.getMinuteResetTime(),\n      limit,\n    };\n  }\n\n  /**\n   * Record consumed tokens and check whether the daily token budget is exceeded.\n   *\n   * Call this after a successful LLM response when the token count is known.\n   * Returns allowed=false when the budget was already exceeded BEFORE this call\n   * (i.e. the previous total was already >= limit). The current call's tokens\n   * are still recorded so the counter stays accurate.\n   *\n   * @param tenantId  - Tenant identifier\n   * @param tokens    - Number of tokens consumed in this request (prompt + completion)\n   */\n  async trackTokens(tenantId: string, tokens: number): Promise<TokenLimitResult> {\n    const quota = this.quotas.get(tenantId) ?? DEFAULT_QUOTAS.free;\n    const limit = quota.tokensPerDay;\n    const day = this.getDayWindow();\n    // key: ratelimit:tenant:<id>:tokens:<YYYY-MM-DD>\n    const key = `ratelimit:tenant:${tenantId}:tokens:${day}`;\n    const ttl = 25 * 60 * 60 * 1000; // 25 h — outlasts the day window with margin\n\n    const consumed = (await this.cache.get<number>(key)) ?? 0;\n    const newTotal = consumed + tokens;\n    await this.cache.set(key, newTotal, ttl);\n\n    if (limit === -1) {\n      return { allowed: true, consumed: newTotal, limit, resetAt: this.getDayResetTime() };\n    }\n\n    return {\n      allowed: consumed < limit, // allowed if budget wasn't exhausted before this call\n      consumed: newTotal,\n      limit,\n      resetAt: this.getDayResetTime(),\n    };\n  }\n\n  /**\n   * Read current token consumption without incrementing.\n   */\n  async getTokenUsage(tenantId: string): Promise<TokenLimitResult> {\n    const quota = this.quotas.get(tenantId) ?? DEFAULT_QUOTAS.free;\n    const limit = quota.tokensPerDay;\n    const day = this.getDayWindow();\n    const key = `ratelimit:tenant:${tenantId}:tokens:${day}`;\n    const consumed = (await this.cache.get<number>(key)) ?? 0;\n\n    return {\n      allowed: limit === -1 || consumed < limit,\n      consumed,\n      limit,\n      resetAt: this.getDayResetTime(),\n    };\n  }\n\n  /** Set quotas for a specific tenant (overrides tier default). */\n  setQuotas(tenantId: string, quotas: TenantQuotas): void {\n    this.quotas.set(tenantId, quotas);\n  }\n\n  /** Set quotas for a tenant by tier. */\n  setTier(tenantId: string, tier: TenantTier): void {\n    this.quotas.set(tenantId, { ...DEFAULT_QUOTAS[tier] });\n  }\n\n  // ── private helpers ────────────────────────────────────────────────────────\n\n  /** Current minute window identifier: YYYY-MM-DDTHH:MM */\n  private getMinuteWindow(): string {\n    return new Date().toISOString().slice(0, 16);\n  }\n\n  /** Unix ms when the current minute window ends. */\n  private getMinuteResetTime(): number {\n    const now = new Date();\n    now.setSeconds(0, 0);\n    now.setMinutes(now.getMinutes() + 1);\n    return now.getTime();\n  }\n\n  /** Current day window identifier: YYYY-MM-DD (UTC) */\n  private getDayWindow(): string {\n    return new Date().toISOString().slice(0, 10);\n  }\n\n  /** Unix ms for start of next UTC day. */\n  private getDayResetTime(): number {\n    const d = new Date();\n    d.setUTCHours(24, 0, 0, 0);\n    return d.getTime();\n  }\n\n  private getLimit(quota: TenantQuotas, resource: RateLimitResource): number {\n    switch (resource) {\n      case 'requests':\n        return quota.requestsPerMinute;\n      case 'workflows':\n        return quota.maxConcurrentWorkflows;\n      case 'plugins':\n        return quota.pluginExecutionsPerDay === -1\n          ? Number.MAX_SAFE_INTEGER\n          : Math.ceil(quota.pluginExecutionsPerDay / 1440);\n      default:\n        return 100;\n    }\n  }\n}\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kb-labs/core-tenant",
   "description": "Multi-tenancy primitives for KB Labs",
-  "version": "2.82.0",
+  "version": "2.87.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -17,7 +17,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@kb-labs/core-state-broker": "2.82.0"
+    "@kb-labs/core-platform": "2.87.0"
   },
   "devDependencies": {
     "@types/node": "^24.3.3",
@@ -25,7 +25,7 @@
     "tsup": "^8.5.0",
     "typescript": "^5.6.3",
     "vitest": "^3.2.4",
-    "@kb-labs/devkit": "2.82.0"
+    "@kb-labs/devkit": "2.87.0"
   },
   "engines": {
     "node": ">=18.18.0",