@koalarx/nest 4.0.6 → 4.1.0

package/cli/constants/cli-project-checklist.js

@@ -29,6 +29,11 @@ export const WORKSPACE_SETUP_PATHS = [
 ];
 export const CORE_REQUIRED_PATHS = [
   "src/core/env.ts",
+  "src/core/common/list-response.base.ts",
+  "src/core/utils/initialize-undefined-array-props.ts",
+  "src/core/http/rate-limit.middleware.ts",
+  "src/core/utils/resolve-cors-origins.ts",
+  "src/host/bootstrap/apply-http-middleware.ts",
   "src/host/main.ts",
   "src/host/app.module.ts",
   "src/host/jobs/jobs.module.ts",

package/cli/constants/core-packages.js

@@ -5,21 +5,19 @@ export const CORE_PACKAGES = [
   "typeorm",
   "pg",
   "zod",
-  "@scalar/nestjs-api-reference"
+  "@scalar/nestjs-api-reference",
+  "cookie-parser"
 ];
+export const CORE_DEV_PACKAGES = ["@types/cookie-parser"];
 export const CACHE_PACKAGES = ["ioredis"];
 export const AUTH_PACKAGES = [
   "@nestjs/jwt",
   "@nestjs/passport",
   "passport",
   "passport-jwt",
-  "cookie-parser",
   "bcrypt"
 ];
-export const AUTH_DEV_PACKAGES = [
-  "@types/cookie-parser",
-  "@types/bcrypt"
-];
+export const AUTH_DEV_PACKAGES = ["@types/bcrypt"];
 export const CRON_PACKAGES = ["cron-parser"];
 export const HEALTH_PACKAGES = ["@nestjs/terminus", "@nestjs/axios"];
 export function devAddFlag(packageManager) {

package/cli/utils/install-module.js

@@ -1,29 +1,32 @@
-import {
-  cpSync,
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  rmSync,
-  writeFileSync
-} from "node:fs";
-import path from "node:path";
 import {
   AUTH_DEV_PACKAGES,
   AUTH_PACKAGES,
   CACHE_PACKAGES,
+  CORE_DEV_PACKAGES,
   CORE_PACKAGES,
   CRON_PACKAGES,
   devAddFlag,
   HEALTH_PACKAGES
 } from "../constants/core-packages.js";
 import {
-  AuthChoice,
   AuthStrategy,
   ExtraFeature,
   InstallModule as Modules,
   Template
 } from "../constants/domain.js";
+import {
+  cpSync,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  rmSync,
+  writeFileSync
+} from "node:fs";
+import path from "node:path";
+import { getPackageManager } from "./get-package-manager.js";
 import { getSourceCodePath } from "./get-source-code-path.js";
+import { patchAuthInstall } from "./patch-auth-install.js";
+import { restoreDefineDocumentationWithAuth } from "./patch-define-documentation.js";
 import {
   patchAppModuleForHealth,
   patchHealthCheckWithoutRedis
@@ -33,22 +36,19 @@ import {
   patchInfraModuleForCache,
   stripInfraModuleCache
 } from "./patch-infra-module.js";
-import { patchAuthInstall } from "./patch-auth-install.js";
-import { patchMainForAuth, stripMainOptionalFeatures } from "./patch-main.js";
-import { restoreDefineDocumentationWithAuth } from "./patch-define-documentation.js";
+import { patchMainForAuth } from "./patch-main.js";
 import { pruneCoreAuthForSlimTemplate } from "./prune-core-auth.js";
 import { removeSampleParts } from "./remove-sample-parts.js";
 import { resolveProjectPath } from "./resolve-project-path.js";
 import { runCommand } from "./run-command.js";
-import { getPackageManager } from "./get-package-manager.js";
 export {
   AuthChoice,
   AuthStrategy,
   CRUD_BUNDLED_FEATURES,
   ExtraFeature,
-  InstallModule as Modules,
   mapExtraFeatureToModule,
   mergeCrudSampleFeatures,
+  InstallModule as Modules,
   resolveNewProjectOptions,
   Template
 } from "../constants/domain.js";
@@ -127,15 +127,16 @@ export async function installModule(module, template, projectName = "", options
       install("src/infra/repositories/repository.base.ts", projectName);
       install("src/infra/repositories/repository.module.ts", projectName);
       install("src/infra/infra.module.ts", projectName);
+      install("src/core/http/rate-limit.middleware.ts", projectName);
+      install("src/core/utils/resolve-cors-origins.ts", projectName);
+      install("src/host/bootstrap/apply-http-middleware.ts", projectName);
+      install("src/test/core/http/rate-limit.middleware.spec.ts", projectName);
+      install("src/test/core/resolve-cors-origins.spec.ts", projectName);
       install("src/test", projectName);
       rmSync(path.join(resolveProjectPath(projectName), "src/core/background-services"), { recursive: true, force: true });
       rmSync(path.join(resolveProjectPath(projectName), "src/core/utils/cron-expression-to-boolean.ts"), { force: true });
       rmSync(path.join(resolveProjectPath(projectName), "src/core/utils/person-list-cache.ts"), { force: true });
       rmSync(path.join(resolveProjectPath(projectName), "src/core/utils/build-list-cache-key.ts"), { force: true });
-      rmSync(path.join(resolveProjectPath(projectName), "src/host/bootstrap"), {
-        recursive: true,
-        force: true
-      });
       rmSync(path.join(resolveProjectPath(projectName), "src/host/controllers/health-check"), { recursive: true, force: true });
       rmSync(path.join(resolveProjectPath(projectName), "src/infra/services/database.indicator.service.ts"), { force: true });
       rmSync(path.join(resolveProjectPath(projectName), "src/infra/services/redis.indicator.service.ts"), { force: true });
@@ -159,9 +160,8 @@ export async function installModule(module, template, projectName = "", options
         }
       }
       patchInfraModuleFile(projectName, false);
-      patchMainFile(projectName, stripMainOptionalFeatures);
       if (!options.skipPackages) {
-        await installPackages(projectName, CORE_PACKAGES);
+        await installPackages(projectName, CORE_PACKAGES, CORE_DEV_PACKAGES);
       }
       if (template === Template.DEFAULT) {
         await removeSampleParts(projectName);

package/cli/utils/parse-new-args.js

@@ -1,5 +1,4 @@
 import {
-  AuthStrategy,
   FEATURE_ALIASES,
   parseAuthStrategies,
   Template,

package/cli/utils/patch-app-test-module.js

@@ -5,7 +5,7 @@ const defaultAppTestModule = `import { envSchema } from '@/core/env';
 import { Module } from '@nestjs/common';
 import { ConfigModule } from '@nestjs/config';
 import { InfraModule } from '@/infra/infra.module';
-import { e2eDatabaseUrl } from '@/test/e2e-context';
+import { e2eDatabaseUrl, e2eSchemaName } from '@/test/e2e-context';
 
 @Module({
   imports: [
@@ -17,6 +17,7 @@ import { e2eDatabaseUrl } from '@/test/e2e-context';
           PORT: 3000,
           NODE_ENV: 'test',
           DATABASE_URL: e2eDatabaseUrl,
+          DATABASE_SCHEMA: e2eSchemaName,
         }),
     }),
     InfraModule,

package/cli/utils/patch-env.js

@@ -8,12 +8,18 @@ import { z } from 'zod';
 
 export const envSchema = z.object({
   PORT: z.coerce.number().default(3000),
+  HOST: z.string().default('0.0.0.0'),
   NODE_ENV: z.enum(['test', 'develop', 'staging', 'production']),
   DATABASE_URL: z.string(),
+  DATABASE_SCHEMA: z.string().optional(),
   REDIS_CONNECTION_STRING: z.string().optional(),
   CACHE_KEY_PREFIX: z.string().optional(),
   CRON_JOBS_ENABLED: envBooleanSchema(false),
   BOOTSTRAP_DELAY_MS: z.coerce.number().default(0),
+  RATE_LIMIT_MAX: z.coerce.number().default(0),
+  RATE_LIMIT_WINDOW_MS: z.coerce.number().default(60_000),
+  CORS_ORIGINS: z.string().optional(),
+  BCRYPT_ROUNDS: z.coerce.number().min(4).max(15).default(10),
 });
 
 export type Env = z.infer<typeof envSchema>;
@@ -23,6 +29,8 @@ export function validateEnvConfig(config: Record<string, unknown>): Env {
 }
 `;
 const envExampleWithoutAuth = `PORT=3000
+# Endereço de bind do servidor (Docker/K8s). URLs públicas usam API_HOST.
+HOST=0.0.0.0
 NODE_ENV=develop
 DATABASE_URL=postgresql://postgres:root@localhost:5432/koala_nest
 
@@ -35,6 +43,16 @@ DATABASE_URL=postgresql://postgres:root@localhost:5432/koala_nest
 # Cron jobs internos. Ative com \`kl-nest add cron\`.
 CRON_JOBS_ENABLED=false
 BOOTSTRAP_DELAY_MS=0
+
+# Rate limit (0 = desabilitado)
+# RATE_LIMIT_MAX=300
+# RATE_LIMIT_WINDOW_MS=60000
+
+# CORS — aberto por padrão; restrinja com origens separadas por vírgula se necessário
+# CORS_ORIGINS=http://localhost:4200,https://app.example.com
+
+# Custo do bcrypt (padrão 10)
+# BCRYPT_ROUNDS=10
 `;
 export function stripEnvAuth(projectName) {
   const projectRoot = resolveProjectPath(projectName);
@@ -53,12 +71,18 @@ import { z } from 'zod';
 
 export const envSchema = z.object({
   PORT: z.coerce.number().default(3000),
+  HOST: z.string().default('0.0.0.0'),
   NODE_ENV: z.enum(['test', 'develop', 'staging', 'production']),
   DATABASE_URL: z.string(),
+  DATABASE_SCHEMA: z.string().optional(),
   REDIS_CONNECTION_STRING: z.string().optional(),
   CACHE_KEY_PREFIX: z.string().optional(),
   CRON_JOBS_ENABLED: envBooleanSchema(false),
   BOOTSTRAP_DELAY_MS: z.coerce.number().default(0),
+  RATE_LIMIT_MAX: z.coerce.number().default(0),
+  RATE_LIMIT_WINDOW_MS: z.coerce.number().default(60_000),
+  CORS_ORIGINS: z.string().optional(),
+  BCRYPT_ROUNDS: z.coerce.number().min(4).max(15).default(10),
   JWT_PRIVATE_KEY: z.string().optional(),
   JWT_PUBLIC_KEY: z.string().optional(),
   JWT_ACCESS_TOKEN_EXPIRES_IN: z.string().default('15m'),
@@ -73,6 +97,8 @@ export function validateEnvConfig(config: Record<string, unknown>): Env {
 }
 `;
 const envExampleJwtOnly = `PORT=3000
+# Endereço de bind do servidor (Docker/K8s). URLs públicas usam API_HOST.
+HOST=0.0.0.0
 NODE_ENV=develop
 DATABASE_URL=postgresql://postgres:root@localhost:5432/koala_nest
 
@@ -83,6 +109,16 @@ DATABASE_URL=postgresql://postgres:root@localhost:5432/koala_nest
 CRON_JOBS_ENABLED=false
 BOOTSTRAP_DELAY_MS=0
 
+# Rate limit (0 = desabilitado)
+# RATE_LIMIT_MAX=300
+# RATE_LIMIT_WINDOW_MS=60000
+
+# CORS — aberto por padrão; restrinja com origens separadas por vírgula se necessário
+# CORS_ORIGINS=http://localhost:4200,https://app.example.com
+
+# Custo do bcrypt (padrão 10)
+# BCRYPT_ROUNDS=10
+
 # JWT (RS256 — chaves em base64)
 JWT_PRIVATE_KEY=
 JWT_PUBLIC_KEY=

package/cli/utils/patch-main.js

@@ -1,8 +1,7 @@
-export function stripMainOptionalFeatures(content) {
-  return content.replace(/import cookieParser from 'cookie-parser';\n/, "").replace(/\n {2}app\.use\(cookieParser\(\)\);\n/, `
-`);
-}
 export function patchMainForAuth(content) {
+  if (content.includes("applyHttpMiddleware")) {
+    return content;
+  }
   if (content.includes("cookieParser()")) {
     return content;
   }

package/cli/utils/remove-sample-parts.js

@@ -4,7 +4,6 @@ import { removeImportLines } from "./project-files.js";
 import { patchAppModuleJobs } from "./patch-jobs-module.js";
 import { patchAppTestModuleForDefault } from "./patch-app-test-module.js";
 import { resolveProjectPath } from "./resolve-project-path.js";
-import { stripMainOptionalFeatures } from "./patch-main.js";
 import { stripDefineDocumentationAuth } from "./patch-define-documentation.js";
 import { stripEnvAuth } from "./patch-env.js";
 import { pruneCoreAuthForSlimTemplate } from "./prune-core-auth.js";
@@ -205,6 +204,6 @@ function stripDefaultProjectAuth(projectName) {
     ]);
     main = main.replace(/\n {2}app\.useGlobalGuards\([\s\S]*?\);\n/, `
 `);
-    writeFileSync(mainPath, stripMainOptionalFeatures(main), "utf8");
+    writeFileSync(mainPath, main, "utf8");
   }
 }

package/koala-nest/.env.example

@@ -1,4 +1,6 @@
 PORT=3000
+# Endereço de bind do servidor (Docker/K8s). URLs públicas usam API_HOST.
+HOST=0.0.0.0
 NODE_ENV=develop
 DATABASE_URL=postgresql://postgres:root@localhost:5432/koala_nest
 
@@ -12,6 +14,16 @@ DATABASE_URL=postgresql://postgres:root@localhost:5432/koala_nest
 CRON_JOBS_ENABLED=true
 BOOTSTRAP_DELAY_MS=0
 
+# Rate limit (0 = desabilitado)
+# RATE_LIMIT_MAX=300
+# RATE_LIMIT_WINDOW_MS=60000
+
+# CORS — aberto por padrão; restrinja com origens separadas por vírgula se necessário
+# CORS_ORIGINS=http://localhost:4200,https://app.example.com
+
+# Custo do bcrypt (padrão 10)
+# BCRYPT_ROUNDS=10
+
 # JWT (RS256 — chaves em base64) — ative com `kl-nest new --auth jwt` ou `kl-nest add auth jwt`
 JWT_PRIVATE_KEY=
 JWT_PUBLIC_KEY=

package/koala-nest/src/application/common/pagination.request.ts

@@ -3,11 +3,6 @@ import { AutoMap } from '@/core/tools/mapping';
 import type { QueryDirectionType } from '@/core/types';
 import { ApiProperty } from '@nestjs/swagger';
 
-export type PaginatedRequestProps<T extends PaginationRequest> = Omit<
-  { [K in keyof T as T[K] extends Function ? never : K]: T[K] },
-  '_id'
->;
-
 export class PaginationRequest {
   @ApiProperty({
     required: false,

package/koala-nest/src/application/mapping/person.mapper.ts

@@ -15,11 +15,6 @@ import {
   ReadPersonContactResponse,
   ReadPersonResponse,
 } from '@/application/person/read/read-person.response';
-import {
-  UpdatePersonAddressRequest,
-  UpdatePersonContactRequest,
-  UpdatePersonRequest,
-} from '@/application/person/update/update-person.request';
 import { ReadManyPersonResponseItem } from '@/application/person/read-many/read-many-person.response';
 
 export class PersonMapper {
@@ -34,10 +29,6 @@ export class PersonMapper {
     createMap(CreatePersonAddressRequest, PersonAddress);
     createMap(CreatePersonContactRequest, PersonContact);
 
-    createMap(UpdatePersonRequest, Person);
-    createMap(UpdatePersonAddressRequest, PersonAddress);
-    createMap(UpdatePersonContactRequest, PersonContact);
-
     createMap(ReadManyPersonRequest, PersonQueryDto);
     createMap(Person, ReadManyPersonResponseItem);
   }

package/koala-nest/src/application/person/jobs/cron/delete-inactive.job.ts

@@ -1,16 +1,18 @@
 import { CronExpression } from '@/core/constants/cron.constants';
 import { DeletePersonHandler } from '@/application/person/delete/delete-person.handler';
-import { ReadManyPersonHandler } from '@/application/person/read-many/read-many-person.handler';
-import { ReadManyPersonRequest } from '@/application/person/read-many/read-many-person.request';
 import {
   CronJobHandlerBase,
   CronJobSettings,
   cronJobSettings,
 } from '@/core/background-services/cron-service/cron-job.handler.base';
+import { PersonQueryDto } from '@/domain/dtos/person-query.dto';
 import { ILoggingService } from '@/domain/common/ilogging.service';
 import { IRedLockService } from '@/domain/common/ired-lock.service';
+import { IPersonRepository } from '@/domain/repositories/iperson.repository';
 import { Injectable, Logger } from '@nestjs/common';
 
+const DELETE_INACTIVE_BATCH_SIZE = 100;
+
 @Injectable()
 export class DeleteInactiveJob extends CronJobHandlerBase {
   private readonly logger = new Logger(DeleteInactiveJob.name);
@@ -18,7 +20,7 @@ export class DeleteInactiveJob extends CronJobHandlerBase {
   constructor(
     redlockService: IRedLockService,
     loggingService: ILoggingService,
-    private readonly readManyPerson: ReadManyPersonHandler,
+    private readonly repository: IPersonRepository,
     private readonly deletePerson: DeletePersonHandler,
   ) {
     super(redlockService, loggingService);
@@ -31,27 +33,42 @@ export class DeleteInactiveJob extends CronJobHandlerBase {
   protected async run(): Promise<void> {
     this.logger.debug('Iniciando remoção de pessoas inativas...');
 
-    const request = new ReadManyPersonRequest();
-    request.active = false;
+    let page = 0;
+    let totalDeleted = 0;
+
+    while (true) {
+      const query = PersonQueryDto.from({
+        active: false,
+        page,
+        limit: DELETE_INACTIVE_BATCH_SIZE,
+      });
+      const { items, count } = await this.repository.findMany(query);
+
+      if (items.length === 0) {
+        break;
+      }
+
+      this.logger.debug('Removendo pessoas inativas...', items.length);
+
+      for (const person of items) {
+        await this.deletePerson.handle(person.id);
+      }
 
-    const result = await this.readManyPerson.handle(request);
+      totalDeleted += items.length;
+      page += 1;
 
-    if (result.items.length === 0) {
+      if (page * DELETE_INACTIVE_BATCH_SIZE >= count) {
+        break;
+      }
+    }
+
+    if (totalDeleted === 0) {
       this.logger.log('Nenhuma pessoa inativa encontrada.');
       this.logger.log('Job concluído sem ação.');
       return;
     }
 
-    this.logger.debug('Removendo pessoas inativas...', result.items.length);
-
-    for (const person of result.items) {
-      await this.deletePerson.handle(person.id);
-    }
-
-    this.logger.log(
-      'Pessoas inativas removidas com sucesso.',
-      result.items.length,
-    );
+    this.logger.log('Pessoas inativas removidas com sucesso.', totalDeleted);
     this.logger.log('Job concluído.');
   }
 }

package/koala-nest/src/application/person/read-many/read-many-person.response.ts

@@ -1,6 +1,5 @@
-import { ObjectClass } from '@/core/base/object-class';
+import { ListResponseBase } from '@/core/common/list-response.base';
 import { AutoMap } from '@/core/tools/mapping';
-import { ListResponse } from '@/core/types';
 import { ApiProperty } from '@nestjs/swagger';
 
 export class ReadManyPersonResponseItem {
@@ -17,14 +16,4 @@ export class ReadManyPersonResponseItem {
   active: boolean;
 }
 
-export class ReadManyPersonResponse extends ObjectClass<
-  ListResponse<ReadManyPersonResponseItem>
-> {
-  @ApiProperty({ type: [ReadManyPersonResponseItem] })
-  @AutoMap({ type: () => ReadManyPersonResponseItem })
-  items: ReadManyPersonResponseItem[];
-
-  @ApiProperty()
-  @AutoMap()
-  count: number;
-}
+export class ReadManyPersonResponse extends ListResponseBase<ReadManyPersonResponseItem> {}

package/koala-nest/src/core/background-services/cron-service/cron-job.handler.base.ts

@@ -1,6 +1,9 @@
 import { ILoggingService } from '@/domain/common/ilogging.service';
 import { IRedLockService } from '@/domain/common/ired-lock.service';
-import { cronExpressionToBoolean } from '@/core/utils/cron-expression-to-boolean';
+import {
+  cronExpressionToBoolean,
+  getCronExecutionKey,
+} from '@/core/utils/cron-expression-to-boolean';
 import { DEFAULT_CRON_POLL_MINUTES } from '@/core/constants/cron.constants';
 import { MINUTES_TO_MS, MS_TO_SECONDS } from '@/core/utils/time.constants';
 import { delay } from '@koalarx/utils/KlDelay';
@@ -9,6 +12,7 @@ import { reportErrorToLogging } from '@/core/utils/report-error';
 export interface CronJobSettings {
   isActive: boolean;
   timeInMinutes: number;
+  cronExpression?: string;
 }
 
 export function cronJobSettings(
@@ -18,10 +22,13 @@ export function cronJobSettings(
   return {
     isActive: cronExpressionToBoolean(cronExpression),
     timeInMinutes,
+    cronExpression,
   };
 }
 
 export abstract class CronJobHandlerBase {
+  private lastExecutedCronKey: string | null = null;
+
   constructor(
     private readonly redlockService: IRedLockService,
     private readonly loggingService: ILoggingService,
@@ -39,22 +46,36 @@ export abstract class CronJobHandlerBase {
       const timeout = settings.timeInMinutes * MINUTES_TO_MS;
 
       if (settings.isActive) {
-        const ttlSecondsLock = timeout / MS_TO_SECONDS;
-        const acquiredLock = await this.redlockService.acquiredLock(
-          name,
-          ttlSecondsLock,
-        );
+        const executionKey = settings.cronExpression
+          ? getCronExecutionKey(settings.cronExpression)
+          : null;
+
+        const alreadyExecutedThisTick =
+          executionKey !== null &&
+          executionKey === this.lastExecutedCronKey;
+
+        if (!alreadyExecutedThisTick) {
+          const ttlSecondsLock = timeout / MS_TO_SECONDS;
+          const acquiredLock = await this.redlockService.acquiredLock(
+            name,
+            ttlSecondsLock,
+          );
+
+          if (acquiredLock) {
+            try {
+              await this.run();
+            } catch (error) {
+              const reportError =
+                error instanceof Error ? error : new Error(String(error));
 
-        if (acquiredLock) {
-          try {
-            await this.run();
-          } catch (error) {
-            const reportError =
-              error instanceof Error ? error : new Error(String(error));
+              await reportErrorToLogging(this.loggingService, reportError);
+            } finally {
+              if (executionKey !== null) {
+                this.lastExecutedCronKey = executionKey;
+              }
 
-            await reportErrorToLogging(this.loggingService, reportError);
-          } finally {
-            await this.redlockService.releaseLock(name);
+              await this.redlockService.releaseLock(name);
+            }
           }
         }
       }

package/koala-nest/src/core/background-services/event-service/event-queue.ts

@@ -1,4 +1,3 @@
-import { IComparableId } from '@/core/utils/icomparable';
 import { EventClass } from './event-class';
 import { EventJob } from './event-job';
 
@@ -62,7 +61,7 @@ export class EventQueue {
     }
   }
 
-  static dispatchEventsForAggregate(id: IComparableId) {
+  static dispatchEventsForAggregate(id: string) {
     const aggregate = this.findMarkedAggregateByID(id);
 
     if (aggregate) {
@@ -96,7 +95,7 @@ export class EventQueue {
   }
 
   static findMarkedAggregateByID(
-    id: IComparableId,
+    id: string,
   ): EventJob<unknown> | undefined {
     return this.markedAggregates.find((aggregate) => aggregate._id === id);
   }

package/koala-nest/src/core/common/list-response.base.ts

@@ -0,0 +1,10 @@
+import { ObjectClass } from '@/core/base/object-class';
+import { AutoMap } from '@/core/tools/mapping';
+
+export class ListResponseBase<T> extends ObjectClass<ListResponseBase<T>> {
+  @AutoMap()
+  items!: T[];
+
+  @AutoMap()
+  count!: number;
+}

package/koala-nest/src/core/database/db-context.ts

@@ -0,0 +1,3 @@
+export class DbContext {
+  static entities: Set<Function> = new Set();
+}

package/koala-nest/src/core/database/entity.ts

@@ -0,0 +1,9 @@
+import { Entity as TypeOrmEntity } from 'typeorm';
+import { DbContext } from './db-context';
+
+export function Entity(tableName: string) {
+  return function (target: Function) {
+    TypeOrmEntity(tableName)(target);
+    DbContext.entities.add(target);
+  };
+}

package/koala-nest/src/core/env.ts

@@ -8,12 +8,18 @@ import { z } from 'zod';
 
 export const envSchema = z.object({
   PORT: z.coerce.number().default(3000),
+  HOST: z.string().default('0.0.0.0'),
   NODE_ENV: z.enum(['test', 'develop', 'staging', 'production']),
   DATABASE_URL: z.string(),
+  DATABASE_SCHEMA: z.string().optional(),
   REDIS_CONNECTION_STRING: z.string().optional(),
   CACHE_KEY_PREFIX: z.string().optional(),
   CRON_JOBS_ENABLED: envBooleanSchema(false),
   BOOTSTRAP_DELAY_MS: z.coerce.number().default(0),
+  RATE_LIMIT_MAX: z.coerce.number().default(0),
+  RATE_LIMIT_WINDOW_MS: z.coerce.number().default(60_000),
+  CORS_ORIGINS: z.string().optional(),
+  BCRYPT_ROUNDS: z.coerce.number().min(4).max(15).default(10),
   JWT_PRIVATE_KEY: z.string().optional(),
   JWT_PUBLIC_KEY: z.string().optional(),
   JWT_ACCESS_TOKEN_EXPIRES_IN: z.string().default('15m'),

package/koala-nest/src/core/http/rate-limit.middleware.ts

@@ -0,0 +1,36 @@
+import type { NextFunction, Request, Response } from 'express';
+
+export interface RateLimitOptions {
+  windowMs: number;
+  maxRequests: number;
+}
+
+export function createRateLimitMiddleware(options: RateLimitOptions) {
+  const hits = new Map<string, number[]>();
+
+  return (req: Request, res: Response, next: NextFunction) => {
+    if (options.maxRequests <= 0) {
+      next();
+      return;
+    }
+
+    const key = req.ip ?? req.socket.remoteAddress ?? 'unknown';
+    const now = Date.now();
+    const windowStart = now - options.windowMs;
+    const timestamps = (hits.get(key) ?? []).filter(
+      (timestamp) => timestamp > windowStart,
+    );
+
+    if (timestamps.length >= options.maxRequests) {
+      res.status(429).json({
+        statusCode: 429,
+        message: 'Muitas requisições. Tente novamente em instantes.',
+      });
+      return;
+    }
+
+    timestamps.push(now);
+    hits.set(key, timestamps);
+    next();
+  };
+}