@nexttylabs/echo 0.2.0

package/tests/lib/org-context.test.ts

@@ -0,0 +1,95 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getOrgContext } from "@/lib/auth/org-context";
+
+const makeRequest = (options: {
+  query?: Record<string, string>;
+  headerOrgId?: string;
+  cookieOrgId?: string;
+}) => {
+  const url = new URL("https://example.com");
+  if (options.query) {
+    for (const [key, value] of Object.entries(options.query)) {
+      url.searchParams.set(key, value);
+    }
+  }
+
+  return {
+    nextUrl: url,
+    headers: new Headers(
+      options.headerOrgId ? { "x-organization-id": options.headerOrgId } : undefined,
+    ),
+    cookies: {
+      get: (name: string) =>
+        name === "orgId" && options.cookieOrgId
+          ? { value: options.cookieOrgId }
+          : undefined,
+    },
+  } as const;
+};
+
+const makeDb = (hasMember: boolean) => ({
+  select: () => ({
+    from: () => ({
+      where: () => ({
+        limit: async () => (hasMember ? [{ role: "admin" }] : []),
+      }),
+    }),
+  }),
+});
+
+describe("getOrgContext", () => {
+  it("prefers query over header and cookie", async () => {
+    const req = makeRequest({
+      query: { organizationId: "org_query" },
+      headerOrgId: "org_header",
+      cookieOrgId: "org_cookie",
+    });
+    const context = await getOrgContext({
+      request: req,
+      db: makeDb(true),
+      userId: "user_1",
+    });
+    expect(context.organizationId).toBe("org_query");
+    expect(context.source).toBe("query");
+  });
+
+  it("throws when membership missing", async () => {
+    const req = makeRequest({ cookieOrgId: "org_cookie" });
+    await expect(
+      getOrgContext({
+        request: req,
+        db: makeDb(false),
+        userId: "user_1",
+        requireMembership: true,
+      }),
+    ).rejects.toThrow("Access denied");
+  });
+
+  it("accepts explicit organization id", async () => {
+    const req = makeRequest({});
+    const context = await getOrgContext({
+      request: req,
+      db: makeDb(true),
+      organizationId: "org_explicit",
+    });
+    expect(context.organizationId).toBe("org_explicit");
+    expect(context.source).toBe("explicit");
+  });
+});

package/tests/lib/organization-access.test.ts

@@ -0,0 +1,44 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { assertOrganizationAccess } from "@/lib/auth/organization";
+
+const makeDb = (member: { role: string } | null) => ({
+  select: () => ({
+    from: () => ({
+      where: () => ({
+        limit: async () => (member ? [member] : []),
+      }),
+    }),
+  }),
+});
+
+describe("assertOrganizationAccess", () => {
+  it("returns member when user belongs to organization", async () => {
+    const db = makeDb({ role: "admin" });
+    const member = await assertOrganizationAccess(db, "user_1", "org_1");
+    expect(member.role).toBe("admin");
+  });
+
+  it("throws when user is not a member", async () => {
+    const db = makeDb(null);
+    await expect(
+      assertOrganizationAccess(db, "user_1", "org_1"),
+    ).rejects.toThrow("Access denied");
+  });
+});

package/tests/lib/organization-member-role-schema.test.ts

@@ -0,0 +1,41 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { organizationMemberRoleSchema } from "@/lib/validations/organizations";
+
+describe("organizationMemberRoleSchema", () => {
+  it("accepts known organization roles", () => {
+    expect(organizationMemberRoleSchema.safeParse("admin").success).toBe(true);
+    expect(
+      organizationMemberRoleSchema.safeParse("product_manager").success,
+    ).toBe(true);
+    expect(organizationMemberRoleSchema.safeParse("developer").success).toBe(
+      true,
+    );
+    expect(
+      organizationMemberRoleSchema.safeParse("customer_support").success,
+    ).toBe(true);
+  });
+
+  it("rejects non-organization roles", () => {
+    expect(organizationMemberRoleSchema.safeParse("customer").success).toBe(
+      false,
+    );
+    expect(organizationMemberRoleSchema.safeParse("member").success).toBe(false);
+  });
+});

package/tests/lib/permissions.test.ts

@@ -0,0 +1,88 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import {
+  PERMISSIONS,
+  ROLE_PERMISSIONS,
+  canSubmitOnBehalf,
+  hasAllPermissions,
+  hasPermission,
+} from "@/lib/auth/permissions";
+
+describe("permissions", () => {
+  it("maps roles to expected permissions", () => {
+    expect(ROLE_PERMISSIONS.admin).toEqual(
+      expect.arrayContaining([
+        PERMISSIONS.CREATE_FEEDBACK,
+        PERMISSIONS.SUBMIT_ON_BEHALF,
+        PERMISSIONS.DELETE_FEEDBACK,
+        PERMISSIONS.MANAGE_ORG,
+      ]),
+    );
+
+    expect(ROLE_PERMISSIONS.product_manager).toEqual(
+      expect.arrayContaining([
+        PERMISSIONS.CREATE_FEEDBACK,
+        PERMISSIONS.SUBMIT_ON_BEHALF,
+        PERMISSIONS.DELETE_FEEDBACK,
+      ]),
+    );
+
+    expect(ROLE_PERMISSIONS.developer).toEqual(
+      expect.arrayContaining([PERMISSIONS.CREATE_FEEDBACK]),
+    );
+
+    expect(ROLE_PERMISSIONS.customer_support).toEqual(
+      expect.arrayContaining([
+        PERMISSIONS.CREATE_FEEDBACK,
+        PERMISSIONS.SUBMIT_ON_BEHALF,
+      ]),
+    );
+
+    expect(ROLE_PERMISSIONS.customer).toEqual(
+      expect.arrayContaining([PERMISSIONS.CREATE_FEEDBACK]),
+    );
+  });
+
+  it("checks permissions by role", () => {
+    expect(hasPermission("admin", PERMISSIONS.MANAGE_ORG)).toBe(true);
+    expect(hasPermission("developer", PERMISSIONS.DELETE_FEEDBACK)).toBe(false);
+    expect(hasPermission("customer", PERMISSIONS.CREATE_FEEDBACK)).toBe(true);
+  });
+
+  it("checks multiple permissions (all-of)", () => {
+    expect(
+      hasAllPermissions("admin", [
+        PERMISSIONS.CREATE_FEEDBACK,
+        PERMISSIONS.MANAGE_ORG,
+      ]),
+    ).toBe(true);
+
+    expect(
+      hasAllPermissions("developer", [
+        PERMISSIONS.CREATE_FEEDBACK,
+        PERMISSIONS.DELETE_FEEDBACK,
+      ]),
+    ).toBe(false);
+  });
+
+  it("checks submit-on-behalf permission", () => {
+    expect(canSubmitOnBehalf("customer_support")).toBe(true);
+    expect(canSubmitOnBehalf("customer")).toBe(false);
+  });
+});

package/tests/lib/portal-analytics.test.ts

@@ -0,0 +1,25 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getEmptyPortalAnalytics } from "@/lib/portal/analytics";
+
+describe("portal analytics", () => {
+  it("returns default analytics structure", () => {
+    expect(getEmptyPortalAnalytics()).toHaveProperty("timeseries");
+  });
+});

package/tests/lib/portal-contributors.test.ts

@@ -0,0 +1,25 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getContributorLevel } from "@/lib/portal/contributors";
+
+describe("contributors", () => {
+  it("returns level 1 by default", () => {
+    expect(getContributorLevel({ votes: 0, comments: 0, accepted: 0 })).toBe(1);
+  });
+});

package/tests/lib/portal-copy.test.ts

@@ -0,0 +1,27 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getDefaultPortalCopy } from "@/lib/portal/portal-copy";
+
+describe("portal copy", () => {
+  it("returns defaults", () => {
+    const copy = getDefaultPortalCopy();
+    expect(copy).toHaveProperty("title");
+    expect(copy).toHaveProperty("ctaLabel");
+  });
+});

package/tests/lib/portal-i18n.test.ts

@@ -0,0 +1,30 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getDefaultPortalI18n } from "@/lib/portal/i18n";
+
+describe("portal i18n", () => {
+  it("returns default locale", () => {
+    expect(getDefaultPortalI18n().defaultLocale).toBe("en");
+  });
+
+  it("includes supported locales", () => {
+    const { supportedLocales } = getDefaultPortalI18n();
+    expect(supportedLocales).toEqual(["en", "zh-CN", "jp"]);
+  });
+});

package/tests/lib/portal-leaderboard-settings.test.ts

@@ -0,0 +1,25 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getDefaultLeaderboardSettings } from "@/lib/portal/leaderboard-settings";
+
+describe("portal leaderboard settings", () => {
+  it("defaults to visible", () => {
+    expect(getDefaultLeaderboardSettings().enabled).toBe(true);
+  });
+});

package/tests/lib/portal-modules.test.ts

@@ -0,0 +1,25 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getDefaultPortalModules } from "@/lib/portal/modules";
+
+describe("portal modules", () => {
+  it("enables feedback module by default", () => {
+    expect(getDefaultPortalModules().feedback).toBe(true);
+  });
+});

package/tests/lib/portal-seo.test.ts

@@ -0,0 +1,25 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getDefaultPortalSeo } from "@/lib/portal/seo";
+
+describe("portal seo", () => {
+  it("returns defaults", () => {
+    expect(getDefaultPortalSeo()).toHaveProperty("title");
+  });
+});

package/tests/lib/portal-sharing.test.ts

@@ -0,0 +1,25 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getPortalShareMethods } from "@/lib/portal/sharing";
+
+describe("portal sharing", () => {
+  it("lists share methods", () => {
+    expect(getPortalShareMethods()).toEqual(["link", "widget", "embedded"]);
+  });
+});

package/tests/lib/portal-sorting.test.ts

@@ -0,0 +1,25 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getDefaultPortalSorting } from "@/lib/portal/sorting";
+
+describe("portal sorting", () => {
+  it("defaults to top", () => {
+    expect(getDefaultPortalSorting().order).toBe("top");
+  });
+});

package/tests/lib/portal-theme.test.ts

@@ -0,0 +1,25 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { getDefaultPortalTheme } from "@/lib/portal/theme";
+
+describe("portal theme", () => {
+  it("returns a default theme", () => {
+    expect(getDefaultPortalTheme()).toHaveProperty("name");
+  });
+});

package/tests/lib/rate-limit.test.ts

@@ -0,0 +1,142 @@
+/*
+ * Copyright (c) 2026 Echo Team
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { describe, expect, it, beforeEach } from 'bun:test';
+import { NextRequest } from 'next/server';
+import {
+  rateLimit,
+  clearMemoryStore,
+  RateLimitConfig,
+} from '@/lib/middleware/rate-limit';
+
+function createMockRequest(url = 'http://localhost:3000/api/test'): NextRequest {
+  return new NextRequest(url);
+}
+
+describe('Rate Limiter', () => {
+  beforeEach(() => {
+    clearMemoryStore();
+  });
+
+  it('should allow requests within limit', async () => {
+    const config: RateLimitConfig = {
+      windowMs: 10,
+      maxRequests: 5,
+      keyGenerator: () => 'test-key-1',
+    };
+
+    const req = createMockRequest();
+
+    for (let i = 0; i < 5; i++) {
+      const result = await rateLimit(req, config);
+      expect(result.result.allowed).toBe(true);
+      expect(result.response).toBeUndefined();
+    }
+  });
+
+  it('should block requests exceeding limit', async () => {
+    const config: RateLimitConfig = {
+      windowMs: 10,
+      maxRequests: 2,
+      keyGenerator: () => 'test-key-2',
+    };
+
+    const req = createMockRequest();
+
+    await rateLimit(req, config);
+    await rateLimit(req, config);
+
+    const result = await rateLimit(req, config);
+    expect(result.result.allowed).toBe(false);
+    expect(result.response).toBeDefined();
+    expect(result.response!.status).toBe(429);
+  });
+
+  it('should return correct remaining count', async () => {
+    const config: RateLimitConfig = {
+      windowMs: 10,
+      maxRequests: 5,
+      keyGenerator: () => 'test-key-3',
+    };
+
+    const req = createMockRequest();
+
+    const result1 = await rateLimit(req, config);
+    expect(result1.result.remaining).toBe(4);
+
+    const result2 = await rateLimit(req, config);
+    expect(result2.result.remaining).toBe(3);
+
+    const result3 = await rateLimit(req, config);
+    expect(result3.result.remaining).toBe(2);
+  });
+
+  it('should include rate limit headers in 429 response', async () => {
+    const config: RateLimitConfig = {
+      windowMs: 60,
+      maxRequests: 1,
+      keyGenerator: () => 'test-key-4',
+    };
+
+    const req = createMockRequest();
+
+    await rateLimit(req, config);
+    const result = await rateLimit(req, config);
+
+    expect(result.response).toBeDefined();
+    expect(result.response!.headers.get('X-RateLimit-Limit')).toBe('1');
+    expect(result.response!.headers.get('X-RateLimit-Remaining')).toBe('0');
+    expect(result.response!.headers.get('X-RateLimit-Reset')).toBeTruthy();
+    expect(result.response!.headers.get('Retry-After')).toBeTruthy();
+  });
+
+  it('should use different limits for different keys', async () => {
+    let keyValue = 'key-a';
+    const config: RateLimitConfig = {
+      windowMs: 60,
+      maxRequests: 2,
+      keyGenerator: () => keyValue,
+    };
+
+    const req = createMockRequest();
+
+    await rateLimit(req, config);
+    await rateLimit(req, config);
+    const resultA = await rateLimit(req, config);
+    expect(resultA.result.allowed).toBe(false);
+
+    keyValue = 'key-b';
+    const resultB = await rateLimit(req, config);
+    expect(resultB.result.allowed).toBe(true);
+  });
+
+  it('should support async key generator', async () => {
+    const config: RateLimitConfig = {
+      windowMs: 60,
+      maxRequests: 2,
+      keyGenerator: async () => {
+        await new Promise((resolve) => setTimeout(resolve, 1));
+        return 'async-key';
+      },
+    };
+
+    const req = createMockRequest();
+
+    const result = await rateLimit(req, config);
+    expect(result.result.allowed).toBe(true);
+  });
+});