@meith/plugin-kit 0.15.0 → 0.16.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meith/plugin-kit",
-  "version": "0.15.0",
+  "version": "0.16.0",
   "description": "The SDK for writing a Meith plugin: typed manifests, hooks, routes, pages and migrations.",
   "license": "LGPL-3.0-or-later",
   "repository": {
@@ -20,7 +20,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@meith/theme-kit": "^0.15.0"
+    "@meith/core": "^0.16.0",
+    "@meith/theme-kit": "^0.16.0"
   },
   "peerDependencies": {
     "react": "^19.2.0"

package/src/hooks.ts

@@ -247,6 +247,16 @@ export const HOOKS = {
     kind: 'filter',
     purpose: 'The composer page’s model. The form itself is app-rendered and arrives as a region.',
   },
+  'view.quick-reply': {
+    kind: 'filter',
+    purpose:
+      'The quick-reply island’s model, at the foot of a thread. The reply form itself is ' +
+      'app-rendered and arrives as `children`.',
+  },
+  'view.editor-toolbar': {
+    kind: 'filter',
+    purpose: 'The composer’s formatting-toolbar model — its buttons and the attachment picker.',
+  },
   'view.redirect-notice': {
     kind: 'filter',
     purpose:
@@ -339,7 +349,9 @@ export const HOOKS = {
   },
   'poll.voted': {
     kind: 'event',
-    purpose: 'A vote was cast. Fires once; the database enforces one per member.',
+    purpose:
+      'A vote was cast, once per option chosen. It fires again when a poll that allows ' +
+      're-voting takes a replacement.',
   },
   'rating.recorded': {
     kind: 'event',

package/src/payloads.ts

@@ -45,6 +45,7 @@ import type {
   BoardStatsModel,
   CategoryBlockModel,
   DiscoveryViewModel,
+  EditorToolbarModel,
   ErrorNoticeModel,
   FooterModel,
   ForumDisplayModel,
@@ -64,6 +65,7 @@ import type {
   PostActionsSlotModel,
   PostBitSlotModel,
   PostFormModel,
+  QuickReplyModel,
   RedirectNoticeModel,
   SearchFormModel,
   SearchResultsModel,
@@ -200,7 +202,9 @@ export interface HookSignatures {
   'view.subforum-list': { value: SubforumListModel; context: ViewerRef & ForumRef }
   'view.forum-display': { value: ForumDisplayModel; context: ViewerRef & ForumRef }
   'view.thread-view': { value: ThreadViewModel; context: ViewerRef & ThreadRef }
+  'view.quick-reply': { value: QuickReplyModel; context: ViewerRef & ThreadRef }
   'view.post-form': { value: PostFormModel; context: ViewerRef }
+  'view.editor-toolbar': { value: EditorToolbarModel; context: ViewerRef }
   'view.redirect-notice': { value: RedirectNoticeModel; context: ViewerRef }
 
   /* ---- Posting ---- */

package/src/rate-limit.ts

@@ -1,42 +1,66 @@
+import { type RateLimitBucketStore, spendRateLimit } from '@meith/core'
+
 export interface RateLimitVerdict {
   readonly allowed: boolean
   readonly retryAfterSeconds: number
 }
 
 export interface RouteRateLimiter {
-  consume(key: string, limit: number, windowSeconds: number, nowMs: number): RateLimitVerdict
+  consume(
+    key: string,
+    limit: number,
+    windowSeconds: number,
+    nowMs: number,
+  ): Promise<RateLimitVerdict>
 }
 
 const SWEEP_EVERY = 512
+const RETENTION_MS = 6 * 3600 * 1000
 
-export function createRouteRateLimiter(): RouteRateLimiter {
-  const windows = new Map<string, { start: number; count: number }>()
+function memoryRateLimitBucketStore(): RateLimitBucketStore<string> {
+  const buckets = new Map<string, { start: number; used: number }>()
   let calls = 0
 
+  const bucketKey = (key: string, windowStart: Date) => `${key}|${windowStart.getTime()}`
+
   return {
-    consume(key, limit, windowSeconds, nowMs) {
+    async spend(key, windowStart, cost) {
       calls += 1
-      const windowMs = windowSeconds * 1000
-
       if (calls % SWEEP_EVERY === 0) {
-        for (const [stale, entry] of windows) {
-          if (nowMs - entry.start >= windowMs) windows.delete(stale)
+        const cutoff = windowStart.getTime() - RETENTION_MS
+        for (const [id, bucket] of buckets) {
+          if (bucket.start < cutoff) buckets.delete(id)
         }
       }
 
-      const entry = windows.get(key)
-      if (entry === undefined || nowMs - entry.start >= windowMs) {
-        windows.set(key, { start: nowMs, count: 1 })
-        return { allowed: true, retryAfterSeconds: 0 }
-      }
+      const id = bucketKey(key, windowStart)
+      const next = (buckets.get(id)?.used ?? 0) + cost
+      buckets.set(id, { start: windowStart.getTime(), used: next })
+      return next
+    },
+
+    async peek(key, windowStart) {
+      return buckets.get(bucketKey(key, windowStart))?.used ?? 0
+    },
+  }
+}
 
-      entry.count += 1
-      if (entry.count <= limit) return { allowed: true, retryAfterSeconds: 0 }
+export function createRouteRateLimiter(): RouteRateLimiter {
+  const store = memoryRateLimitBucketStore()
 
-      return {
-        allowed: false,
-        retryAfterSeconds: Math.max(1, Math.ceil((entry.start + windowMs - nowMs) / 1000)),
-      }
+  return {
+    async consume(key, limit, windowSeconds, nowMs) {
+      const outcome = await spendRateLimit(
+        store,
+        key,
+        1,
+        { seconds: windowSeconds, budget: limit },
+        new Date(nowMs),
+      )
+
+      return outcome.allowed
+        ? { allowed: true, retryAfterSeconds: 0 }
+        : { allowed: false, retryAfterSeconds: outcome.resetSeconds }
     },
   }
 }