@kb-labs/rest-api-app 2.81.0 → 2.87.0

package/dist/index.js

@@ -27,6 +27,7 @@ import fastifyCors from '@fastify/cors';
 import fastifyRateLimit from '@fastify/rate-limit';
 import { ulid } from 'ulid';
 import { randomUUID, createHash } from 'crypto';
+import { TenantRateLimiter, getDefaultTenantTier } from '@kb-labs/core-tenant';
 import { promises, existsSync, readFileSync } from 'fs';
 import { findRepoRoot } from '@kb-labs/core-sys';
 
@@ -2904,7 +2905,7 @@ async function registerCacheRoutes(server, config, registry) {
     }
   });
 }
-async function registerObservabilityRoutes(fastify, config, repoRoot, historicalMetrics, platform16) {
+async function registerObservabilityRoutes(fastify, config, repoRoot, historicalMetrics, platform17) {
   const basePath = normalizeBasePath(config.basePath);
   const stateBrokerPaths = resolvePaths(basePath, "/observability/state-broker");
   const systemMetricsPaths = resolvePaths(basePath, "/observability/system-metrics");
@@ -2951,7 +2952,7 @@ async function registerObservabilityRoutes(fastify, config, repoRoot, historical
           }
         };
       } catch (error) {
-        platform16?.logger.error("Failed to fetch State Broker stats", error instanceof Error ? error : new Error(String(error)));
+        platform17?.logger.error("Failed to fetch State Broker stats", error instanceof Error ? error : new Error(String(error)));
         const isTimeout = error instanceof Error && error.name === "AbortError";
         return reply.code(503).send({
           ok: false,
@@ -2969,7 +2970,7 @@ async function registerObservabilityRoutes(fastify, config, repoRoot, historical
   for (const path3 of systemMetricsPaths) {
     fastify.get(path3, { schema: { tags: ["Observability"], summary: "System resource metrics" } }, async (_request, reply) => {
       try {
-        if (!platform16?.cache) {
+        if (!platform17?.cache) {
           return reply.code(503).send({
             ok: false,
             error: {
@@ -2981,17 +2982,17 @@ async function registerObservabilityRoutes(fastify, config, repoRoot, historical
         fastify.log.debug("Fetching system metrics from all instances");
         const allMetrics = [];
         try {
-          if ("scan" in platform16.cache && typeof platform16.cache.scan === "function") {
-            const keys = await platform16.cache.scan("system-metrics:*");
+          if ("scan" in platform17.cache && typeof platform17.cache.scan === "function") {
+            const keys = await platform17.cache.scan("system-metrics:*");
             for (const key of keys) {
-              const metrics = await platform16.cache.get(key);
+              const metrics = await platform17.cache.get(key);
               if (metrics) {
                 allMetrics.push(metrics);
               }
             }
           } else {
             const currentInstanceId = hostname();
-            const metrics = await platform16.cache.get(`system-metrics:${currentInstanceId}`);
+            const metrics = await platform17.cache.get(`system-metrics:${currentInstanceId}`);
             if (metrics) {
               allMetrics.push(metrics);
             }
@@ -3000,7 +3001,7 @@ async function registerObservabilityRoutes(fastify, config, repoRoot, historical
         } catch (scanError) {
           fastify.log.warn({ err: scanError }, "Failed to scan platform.cache for system metrics");
           const currentInstanceId = hostname();
-          const metrics = await platform16.cache.get(`system-metrics:${currentInstanceId}`);
+          const metrics = await platform17.cache.get(`system-metrics:${currentInstanceId}`);
           if (metrics) {
             allMetrics.push(metrics);
           }
@@ -3048,7 +3049,7 @@ async function registerObservabilityRoutes(fastify, config, repoRoot, historical
           }
         };
       } catch (error) {
-        platform16?.logger.error("Failed to fetch system metrics", error instanceof Error ? error : new Error(String(error)));
+        platform17?.logger.error("Failed to fetch system metrics", error instanceof Error ? error : new Error(String(error)));
         return reply.code(500).send({
           ok: false,
           error: {
@@ -3146,7 +3147,7 @@ async function registerObservabilityRoutes(fastify, config, repoRoot, historical
           }
         };
       } catch (error) {
-        platform16?.logger.error("Failed to query historical metrics", error instanceof Error ? error : new Error(String(error)), { query });
+        platform17?.logger.error("Failed to query historical metrics", error instanceof Error ? error : new Error(String(error)), { query });
         return reply.code(500).send({
           ok: false,
           error: {
@@ -3237,7 +3238,7 @@ async function registerObservabilityRoutes(fastify, config, repoRoot, historical
           }
         };
       } catch (error) {
-        platform16?.logger.error("Failed to query heatmap data", error instanceof Error ? error : new Error(String(error)), { query });
+        platform17?.logger.error("Failed to query heatmap data", error instanceof Error ? error : new Error(String(error)), { query });
         return reply.code(500).send({
           ok: false,
           error: {
@@ -3271,7 +3272,7 @@ async function registerObservabilityRoutes(fastify, config, repoRoot, historical
         }
       }
     }, async (request, reply) => {
-      if (!platform16?.llm) {
+      if (!platform17?.llm) {
         return reply.code(503).send({
           ok: false,
           error: {
@@ -3337,15 +3338,15 @@ Provide a clear, actionable response based on the data above. Include:
 
 Be concise but thorough. Use markdown formatting.`;
         fastify.log.debug({ question: body.question, contextLength: contextText.length }, "Calling LLM for insights");
-        const result = await platform16.llm.complete(prompt, {
+        const result = await platform17.llm.complete(prompt, {
           systemPrompt: "You are a DevOps and SRE expert assistant. Analyze system metrics and provide actionable insights. Be concise, technical, and helpful.",
           temperature: 0.7,
           maxTokens: 1e3
         });
         const totalTokens = result.usage.promptTokens + result.usage.completionTokens;
         fastify.log.debug({ tokensUsed: totalTokens }, "LLM response received for insights");
-        if (platform16.analytics) {
-          platform16.analytics.track("ai_insights.chat", {
+        if (platform17.analytics) {
+          platform17.analytics.track("ai_insights.chat", {
             questionLength: body.question.length,
             contextIncluded: Object.keys(contextConfig).filter((k) => contextConfig[k]),
             timeRange: contextConfig.timeRange,
@@ -3374,9 +3375,9 @@ Be concise but thorough. Use markdown formatting.`;
           }
         };
       } catch (error) {
-        platform16?.logger.error("Failed to generate insights", error instanceof Error ? error : new Error(String(error)));
-        if (platform16?.analytics) {
-          platform16.analytics.track("ai_insights.error", {
+        platform17?.logger.error("Failed to generate insights", error instanceof Error ? error : new Error(String(error)));
+        if (platform17?.analytics) {
+          platform17.analytics.track("ai_insights.error", {
             error: error instanceof Error ? error.message : "Unknown error",
             questionLength: request.body?.question?.length ?? 0
           }).catch(() => {
@@ -6224,11 +6225,46 @@ function registerRequestTimeoutGuard(server, config) {
   });
 }
 
+// src/middleware/rate-limit.ts
+function extractTenantId(request) {
+  return request.headers["x-tenant-id"] || process.env.KB_TENANT_ID || "default";
+}
+function createRateLimitMiddleware(rateLimiter) {
+  return async function rateLimitMiddleware(request, reply) {
+    const tenantId = extractTenantId(request);
+    const result = await rateLimiter.checkLimit(tenantId, "requests");
+    reply.header("X-RateLimit-Limit", result.limit);
+    reply.header("X-RateLimit-Remaining", result.remaining);
+    reply.header("X-RateLimit-Reset", result.resetAt);
+    if (!result.allowed) {
+      const retryAfter = Math.ceil((result.resetAt - Date.now()) / 1e3);
+      reply.header("Retry-After", retryAfter);
+      return reply.code(429).send({
+        error: "RATE_LIMIT_EXCEEDED",
+        message: "Too many requests. Please try again later.",
+        retryAfter,
+        limit: result.limit,
+        resetAt: new Date(result.resetAt).toISOString()
+      });
+    }
+    request.tenantId = tenantId;
+  };
+}
+
+// src/middleware/tenant-rate-limit.ts
+function registerTenantRateLimitMiddleware(server, cache) {
+  const limiter = new TenantRateLimiter(cache);
+  limiter.setTier("default", getDefaultTenantTier());
+  const handler = createRateLimitMiddleware(limiter);
+  server.addHook("preHandler", handler);
+}
+
 // src/middleware/index.ts
 function registerMiddleware(server, config) {
   registerStartupGuard(server, config);
   registerSecurityHeadersMiddleware(server);
   registerRequestIdMiddleware(server);
+  registerTenantRateLimitMiddleware(server, platform.cache);
   registerMockModeMiddleware(server, config);
   registerCacheMiddleware(server);
   registerRequestTimeoutGuard(server, config);