@mastra/nestjs 0.0.0

package/dist/guards/mastra-route.guard.d.ts

@@ -0,0 +1,23 @@
+import type { Mastra } from '@mastra/core/mastra';
+import type { CanActivate, ExecutionContext } from '@nestjs/common';
+import type { MastraModuleOptions } from '../mastra.module.js';
+import { AuthService } from '../services/auth.service.js';
+import { RequestContextService } from '../services/request-context.service.js';
+import { RouteHandlerService } from '../services/route-handler.service.js';
+import { MastraThrottleGuard } from './mastra-throttle.guard.js';
+/**
+ * Guard for Mastra routes handled by MastraController.
+ * Runs route matching to avoid authenticating non-Mastra paths,
+ * then enforces auth + rate limiting for matched Mastra routes.
+ */
+export declare class MastraRouteGuard implements CanActivate {
+    private readonly mastra;
+    private readonly options;
+    private readonly routeHandler;
+    private readonly requestContext;
+    private readonly authService;
+    private readonly throttleGuard;
+    constructor(mastra: Mastra, options: MastraModuleOptions, routeHandler: RouteHandlerService, requestContext: RequestContextService, authService: AuthService, throttleGuard: MastraThrottleGuard);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
+//# sourceMappingURL=mastra-route.guard.d.ts.map

package/dist/guards/mastra-route.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mastra-route.guard.d.ts","sourceRoot":"","sources":["../../src/guards/mastra-route.guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D;;;;GAIG;AACH,qBACa,gBAAiB,YAAW,WAAW;IAEhC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACf,OAAO,CAAC,QAAQ,CAAC,OAAO;IACnB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW;IACpB,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAL1B,MAAM,EAAE,MAAM,EACN,OAAO,EAAE,mBAAmB,EACvB,YAAY,EAAE,mBAAmB,EAC/B,cAAc,EAAE,qBAAqB,EAC/C,WAAW,EAAE,WAAW,EAChB,aAAa,EAAE,mBAAmB;IAG5E,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CA4B/D"}

package/dist/guards/mastra-throttle.guard.d.ts

@@ -0,0 +1,53 @@
+import type { CanActivate, ExecutionContext, OnModuleDestroy } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import type { Request } from 'express';
+import type { ThrottleOptions } from '../decorators/throttle.decorator.js';
+import type { MastraModuleOptions } from '../mastra.module.js';
+/**
+ * Guard that implements rate limiting.
+ * Rate limiting is ON by default - set rateLimitOptions.enabled: false to disable.
+ */
+export declare class MastraThrottleGuard implements CanActivate, OnModuleDestroy {
+    private readonly options;
+    private readonly reflector;
+    private readonly logger;
+    private readonly store;
+    private cleanupInterval;
+    constructor(options: MastraModuleOptions, reflector: Reflector);
+    /**
+     * Clean up the interval when the module is destroyed.
+     */
+    onModuleDestroy(): void;
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    /**
+     * Check rate limit for a request.
+     * Can be called directly from controllers for manual rate limiting.
+     */
+    checkLimit(request: Request, limit: number, windowMs: number, rateLimitPath?: string): Promise<void>;
+    /**
+     * Get rate limit settings for this request.
+     */
+    getRateLimitSettings(request: Request, decoratorOptions?: ThrottleOptions, rateLimitPath?: string): {
+        limit: number;
+        windowMs: number;
+    };
+    /**
+     * Get client identifier for rate limiting.
+     * Uses user ID if authenticated, IP address otherwise.
+     *
+     * Security note: X-Forwarded-For is only trusted when the app is configured
+     * with 'trust proxy' in Express. Without that setting, we use the direct
+     * connection IP to prevent header spoofing attacks.
+     */
+    private getClientId;
+    /**
+     * Evict oldest entries when store exceeds max size.
+     * Uses a simple LRU-like approach based on resetAt time.
+     */
+    private evictOldestEntries;
+    /**
+     * Clean up expired entries from the store.
+     */
+    private cleanupExpiredEntries;
+}
+//# sourceMappingURL=mastra-throttle.guard.d.ts.map

package/dist/guards/mastra-throttle.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mastra-throttle.guard.d.ts","sourceRoot":"","sources":["../../src/guards/mastra-throttle.guard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAa5D;;;GAGG;AACH,qBACa,mBAAoB,YAAW,WAAW,EAAE,eAAe;IAM5C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAN/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;IAC1D,OAAO,CAAC,eAAe,CAA+C;gBAG3B,OAAO,EAAE,mBAAmB,EACjC,SAAS,EAAE,SAAS;IAM1D;;OAEG;IACH,eAAe,IAAI,IAAI;IAQjB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAsB9D;;;OAGG;IACG,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0C1G;;OAEG;IACH,oBAAoB,CAClB,OAAO,EAAE,OAAO,EAChB,gBAAgB,CAAC,EAAE,eAAe,EAClC,aAAa,CAAC,EAAE,MAAM,GACrB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;IAuBtC;;;;;;;OAOG;IACH,OAAO,CAAC,WAAW;IAcnB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAc1B;;OAEG;IACH,OAAO,CAAC,qBAAqB;CAe9B"}