@qwickapps/server 1.3.1 → 1.5.0

package/dist/plugins/rate-limit/env-config.js

@@ -0,0 +1,318 @@
+/**
+ * Rate Limit Plugin Environment Configuration
+ *
+ * Factory function for configuring rate limiting via environment variables.
+ *
+ * Environment Variables:
+ * - RATE_LIMIT_ENABLED: Enable rate limiting (default: true)
+ * - RATE_LIMIT_STRATEGY: Strategy to use: sliding-window, fixed-window, token-bucket (default: sliding-window)
+ * - RATE_LIMIT_WINDOW_MS: Window size in milliseconds (default: 60000 = 1 minute)
+ * - RATE_LIMIT_MAX_REQUESTS: Maximum requests per window (default: 100)
+ * - RATE_LIMIT_CACHE_TYPE: Cache type: redis, memory, auto (default: auto)
+ * - RATE_LIMIT_CLEANUP_ENABLED: Enable cleanup job (default: true)
+ * - RATE_LIMIT_CLEANUP_INTERVAL_MS: Cleanup interval in ms (default: 300000 = 5 minutes)
+ * - RATE_LIMIT_API_ENABLED: Enable status API endpoints (default: true)
+ * - RATE_LIMIT_API_PREFIX: API route prefix (default: /rate-limit)
+ * - RATE_LIMIT_DEBUG: Enable debug logging (default: false)
+ *
+ * PostgreSQL Store (via postgres-plugin):
+ * - RATE_LIMIT_TABLE_NAME: Table name (default: rate_limits)
+ * - RATE_LIMIT_ENABLE_RLS: Enable Row-Level Security (default: true)
+ * - RATE_LIMIT_AUTO_CREATE_TABLES: Auto-create tables (default: true)
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import { createRateLimitPlugin } from './rate-limit-plugin.js';
+import { postgresRateLimitStore } from './stores/postgres-store.js';
+import { getPostgres, hasPostgres } from '../postgres-plugin.js';
+let currentStatus = {
+    state: 'disabled',
+    strategy: null,
+};
+// ═══════════════════════════════════════════════════════════════════════════
+// Environment Variable Helpers
+// ═══════════════════════════════════════════════════════════════════════════
+/**
+ * Get an environment variable, treating empty strings as undefined
+ */
+function getEnv(key) {
+    const value = process.env[key];
+    if (value === undefined || value === null || value.trim() === '') {
+        return undefined;
+    }
+    return value.trim();
+}
+/**
+ * Parse a boolean environment variable
+ */
+function getEnvBool(key, defaultValue) {
+    const value = getEnv(key);
+    if (value === undefined) {
+        return defaultValue;
+    }
+    const lower = value.toLowerCase();
+    if (['true', '1', 'yes'].includes(lower)) {
+        return true;
+    }
+    if (['false', '0', 'no'].includes(lower)) {
+        return false;
+    }
+    return defaultValue;
+}
+/**
+ * Parse an integer environment variable
+ */
+function getEnvInt(key, defaultValue) {
+    const value = getEnv(key);
+    if (value === undefined) {
+        return defaultValue;
+    }
+    const parsed = parseInt(value, 10);
+    return isNaN(parsed) ? defaultValue : parsed;
+}
+// ═══════════════════════════════════════════════════════════════════════════
+// Factory Function
+// ═══════════════════════════════════════════════════════════════════════════
+const VALID_STRATEGIES = ['sliding-window', 'fixed-window', 'token-bucket'];
+const VALID_CACHE_TYPES = ['redis', 'memory', 'auto'];
+/**
+ * Create a rate limit plugin configured from environment variables.
+ *
+ * The plugin state depends on environment configuration:
+ * - **disabled**: RATE_LIMIT_ENABLED=false - no rate limiting is applied
+ * - **enabled**: Valid configuration - rate limiting is active
+ * - **error**: Invalid configuration or missing postgres - plugin is disabled with error details
+ *
+ * @example
+ * ```typescript
+ * // Zero-config setup - reads everything from env vars
+ * // Requires postgres-plugin to be registered first
+ * const rateLimitPlugin = createRateLimitPluginFromEnv();
+ *
+ * // With custom store
+ * const rateLimitPlugin = createRateLimitPluginFromEnv({
+ *   store: myCustomStore,
+ * });
+ * ```
+ *
+ * @param options - Optional overrides
+ * @returns A Plugin instance
+ */
+export function createRateLimitPluginFromEnv(options) {
+    const enabled = getEnvBool('RATE_LIMIT_ENABLED', true);
+    // Check if disabled
+    if (!enabled) {
+        currentStatus = {
+            state: 'disabled',
+            strategy: null,
+        };
+        return createDisabledPlugin();
+    }
+    // Parse strategy
+    const strategyName = getEnv('RATE_LIMIT_STRATEGY')?.toLowerCase() || 'sliding-window';
+    if (!VALID_STRATEGIES.includes(strategyName)) {
+        const error = `Invalid RATE_LIMIT_STRATEGY: "${strategyName}". Valid options: ${VALID_STRATEGIES.join(', ')}`;
+        currentStatus = {
+            state: 'error',
+            strategy: null,
+            error,
+        };
+        return createErrorPlugin(error);
+    }
+    const strategy = strategyName;
+    // Parse cache type
+    const cacheTypeName = getEnv('RATE_LIMIT_CACHE_TYPE')?.toLowerCase() || 'auto';
+    if (!VALID_CACHE_TYPES.includes(cacheTypeName)) {
+        const error = `Invalid RATE_LIMIT_CACHE_TYPE: "${cacheTypeName}". Valid options: ${VALID_CACHE_TYPES.join(', ')}`;
+        currentStatus = {
+            state: 'error',
+            strategy: null,
+            error,
+        };
+        return createErrorPlugin(error);
+    }
+    const cacheType = cacheTypeName;
+    // Parse other config
+    const windowMs = getEnvInt('RATE_LIMIT_WINDOW_MS', 60000);
+    const maxRequests = getEnvInt('RATE_LIMIT_MAX_REQUESTS', 100);
+    const cleanupEnabled = getEnvBool('RATE_LIMIT_CLEANUP_ENABLED', true);
+    const cleanupIntervalMs = getEnvInt('RATE_LIMIT_CLEANUP_INTERVAL_MS', 300000);
+    const apiEnabled = getEnvBool('RATE_LIMIT_API_ENABLED', true);
+    const apiPrefix = getEnv('RATE_LIMIT_API_PREFIX') || '/rate-limit';
+    const debug = options?.debug ?? getEnvBool('RATE_LIMIT_DEBUG', false);
+    // PostgreSQL store config
+    const tableName = getEnv('RATE_LIMIT_TABLE_NAME') || 'rate_limits';
+    const enableRLS = getEnvBool('RATE_LIMIT_ENABLE_RLS', true);
+    const autoCreateTables = getEnvBool('RATE_LIMIT_AUTO_CREATE_TABLES', true);
+    // Build config
+    const config = {
+        defaults: {
+            windowMs,
+            maxRequests,
+            strategy,
+        },
+        cache: {
+            type: cacheType,
+        },
+        cleanup: {
+            enabled: cleanupEnabled,
+            intervalMs: cleanupIntervalMs,
+        },
+        api: {
+            enabled: apiEnabled,
+            prefix: apiPrefix,
+        },
+        debug,
+    };
+    // Update status
+    currentStatus = {
+        state: 'enabled',
+        strategy,
+        config: {
+            strategy,
+            windowMs,
+            maxRequests,
+            cacheType: cacheType,
+            cleanupEnabled,
+            cleanupIntervalMs,
+            apiEnabled,
+            apiPrefix,
+            tableName,
+            enableRLS,
+            autoCreateTables,
+        },
+    };
+    // Return a plugin that will initialize store on start
+    return createDeferredPlugin(config, options?.store, {
+        tableName,
+        enableRLS,
+        autoCreateTables,
+    });
+}
+// ═══════════════════════════════════════════════════════════════════════════
+// Status API
+// ═══════════════════════════════════════════════════════════════════════════
+/**
+ * Get current rate limit plugin status
+ */
+export function getRateLimitConfigStatus() {
+    return { ...currentStatus };
+}
+/**
+ * Register config API routes
+ */
+function registerConfigRoutes(registry) {
+    // GET /rate-limit/config/status - Get current rate limit status
+    registry.addRoute({
+        method: 'get',
+        path: '/rate-limit/config/status',
+        pluginId: 'rate-limit',
+        handler: (_req, res) => {
+            res.json(getRateLimitConfigStatus());
+        },
+    });
+}
+/**
+ * Create a deferred plugin that initializes the store on start
+ * This allows the postgres-plugin to be initialized first
+ */
+function createDeferredPlugin(config, customStore, pgOptions) {
+    return {
+        id: 'rate-limit',
+        name: 'Rate Limit Plugin',
+        version: '1.0.0',
+        async onStart(pluginConfig, registry) {
+            const logger = registry.getLogger('rate-limit');
+            // Get or create store
+            let store = customStore;
+            if (!store) {
+                // Check if postgres plugin is available
+                if (!hasPostgres()) {
+                    const error = 'Rate limit plugin requires postgres-plugin to be registered and started first';
+                    logger.error(error);
+                    currentStatus = {
+                        state: 'error',
+                        strategy: null,
+                        error,
+                    };
+                    // Register config routes so admin can see the error
+                    registerConfigRoutes(registry);
+                    return;
+                }
+                // Create postgres store
+                store = postgresRateLimitStore({
+                    pool: () => getPostgres().getPool(),
+                    tableName: pgOptions.tableName,
+                    enableRLS: pgOptions.enableRLS,
+                    autoCreateTables: pgOptions.autoCreateTables,
+                });
+            }
+            // Create the actual plugin and delegate
+            const actualPlugin = createRateLimitPlugin({
+                ...config,
+                store,
+            });
+            // Call its onStart
+            await actualPlugin.onStart?.(pluginConfig, registry);
+            // Register config routes
+            registerConfigRoutes(registry);
+            logger.info('Rate limit plugin started from env config', {
+                strategy: config.defaults.strategy,
+                windowMs: config.defaults.windowMs,
+                maxRequests: config.defaults.maxRequests,
+            });
+        },
+        async onStop() {
+            // The actual plugin handles cleanup
+        },
+    };
+}
+/**
+ * Create a disabled plugin (no rate limiting)
+ */
+function createDisabledPlugin() {
+    return {
+        id: 'rate-limit',
+        name: 'Rate Limit Plugin (Disabled)',
+        version: '1.0.0',
+        async onStart(_pluginConfig, registry) {
+            const logger = registry.getLogger('rate-limit');
+            logger.info('Rate limit plugin disabled - RATE_LIMIT_ENABLED=false');
+            // Register status routes even when disabled
+            registerConfigRoutes(registry);
+        },
+        async onStop() {
+            // Nothing to cleanup
+        },
+    };
+}
+/**
+ * Create an error plugin (rate limiting disabled due to configuration error)
+ */
+function createErrorPlugin(error) {
+    return {
+        id: 'rate-limit',
+        name: 'Rate Limit Plugin (Error)',
+        version: '1.0.0',
+        async onStart(_pluginConfig, registry) {
+            const logger = registry.getLogger('rate-limit');
+            logger.error(`Rate limit plugin error: ${error}`);
+            // Register status routes so admin can see the error
+            registerConfigRoutes(registry);
+        },
+        async onStop() {
+            // Nothing to cleanup
+        },
+    };
+}
+// ═══════════════════════════════════════════════════════════════════════════
+// Exports for Testing
+// ═══════════════════════════════════════════════════════════════════════════
+export const __testing = {
+    getEnv,
+    getEnvBool,
+    getEnvInt,
+    VALID_STRATEGIES,
+    VALID_CACHE_TYPES,
+};
+//# sourceMappingURL=env-config.js.map

package/dist/plugins/rate-limit/env-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-config.js","sourceRoot":"","sources":["../../../src/plugins/rate-limit/env-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAKH,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAajE,IAAI,aAAa,GAA0B;IACzC,KAAK,EAAE,UAAU;IACjB,QAAQ,EAAE,IAAI;CACf,CAAC;AAEF,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E;;GAEG;AACH,SAAS,MAAM,CAAC,GAAW;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,YAAqB;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,GAAW,EAAE,YAAoB;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/C,CAAC;AAkBD,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,gBAAgB,GAAwB,CAAC,gBAAgB,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AACjG,MAAM,iBAAiB,GAAmC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAEtF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAmC;IAC9E,MAAM,OAAO,GAAG,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IAEvD,oBAAoB;IACpB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,aAAa,GAAG;YACd,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,OAAO,oBAAoB,EAAE,CAAC;IAChC,CAAC;IAED,iBAAiB;IACjB,MAAM,YAAY,GAAG,MAAM,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,IAAI,gBAAgB,CAAC;IACtF,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAiC,CAAC,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,iCAAiC,YAAY,qBAAqB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9G,aAAa,GAAG;YACd,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,IAAI;YACd,KAAK;SACN,CAAC;QACF,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,QAAQ,GAAG,YAAiC,CAAC;IAEnD,mBAAmB;IACnB,MAAM,aAAa,GAAG,MAAM,CAAC,uBAAuB,CAAC,EAAE,WAAW,EAAE,IAAI,MAAM,CAAC;IAC/E,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,aAA6C,CAAC,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,mCAAmC,aAAa,qBAAqB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClH,aAAa,GAAG;YACd,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,IAAI;YACd,KAAK;SACN,CAAC;QACF,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,SAAS,GAAG,aAA6C,CAAC;IAEhE,qBAAqB;IACrB,MAAM,QAAQ,GAAG,SAAS,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,SAAS,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,UAAU,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;IACtE,MAAM,iBAAiB,GAAG,SAAS,CAAC,gCAAgC,EAAE,MAAM,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,UAAU,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,uBAAuB,CAAC,IAAI,aAAa,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,UAAU,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAEtE,0BAA0B;IAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,uBAAuB,CAAC,IAAI,aAAa,CAAC;IACnE,MAAM,SAAS,GAAG,UAAU,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAG,UAAU,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;IAE3E,eAAe;IACf,MAAM,MAAM,GAAyC;QACnD,QAAQ,EAAE;YACR,QAAQ;YACR,WAAW;YACX,QAAQ;SACT;QACD,KAAK,EAAE;YACL,IAAI,EAAE,SAAS;SAChB;QACD,OAAO,EAAE;YACP,OAAO,EAAE,cAAc;YACvB,UAAU,EAAE,iBAAiB;SAC9B;QACD,GAAG,EAAE;YACH,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,SAAS;SAClB;QACD,KAAK;KACN,CAAC;IAEF,gBAAgB;IAChB,aAAa,GAAG;QACd,KAAK,EAAE,SAAS;QAChB,QAAQ;QACR,MAAM,EAAE;YACN,QAAQ;YACR,QAAQ;YACR,WAAW;YACX,SAAS,EAAE,SAAmB;YAC9B,cAAc;YACd,iBAAiB;YACjB,UAAU;YACV,SAAS;YACT,SAAS;YACT,SAAS;YACT,gBAAgB;SACjB;KACF,CAAC;IAEF,sDAAsD;IACtD,OAAO,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;QAClD,SAAS;QACT,SAAS;QACT,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,EAAE,GAAG,aAAa,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,QAAwB;IACpD,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC;QAChB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;YACxC,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC,CAAC;QACvC,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAYD;;;GAGG;AACH,SAAS,oBAAoB,CAC3B,MAA4C,EAC5C,WAAuD,EACvD,SAA+B;IAE/B,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,OAAO;QAEhB,KAAK,CAAC,OAAO,CAAC,YAA0B,EAAE,QAAwB;YAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAEhD,sBAAsB;YACtB,IAAI,KAAK,GAAG,WAAW,CAAC;YACxB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,wCAAwC;gBACxC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACnB,MAAM,KAAK,GAAG,+EAA+E,CAAC;oBAC9F,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACpB,aAAa,GAAG;wBACd,KAAK,EAAE,OAAO;wBACd,QAAQ,EAAE,IAAI;wBACd,KAAK;qBACN,CAAC;oBACF,oDAAoD;oBACpD,oBAAoB,CAAC,QAAQ,CAAC,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBAED,wBAAwB;gBACxB,KAAK,GAAG,sBAAsB,CAAC;oBAC7B,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE;oBACnC,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;iBAC7C,CAAC,CAAC;YACL,CAAC;YAED,wCAAwC;YACxC,MAAM,YAAY,GAAG,qBAAqB,CAAC;gBACzC,GAAG,MAAM;gBACT,KAAK;aACN,CAAC,CAAC;YAEH,mBAAmB;YACnB,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAErD,yBAAyB;YACzB,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAE/B,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBACvD,QAAQ,EAAE,MAAM,CAAC,QAAS,CAAC,QAAQ;gBACnC,QAAQ,EAAE,MAAM,CAAC,QAAS,CAAC,QAAQ;gBACnC,WAAW,EAAE,MAAM,CAAC,QAAS,CAAC,WAAW;aAC1C,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM;YACV,oCAAoC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB;IAC3B,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,OAAO;QAEhB,KAAK,CAAC,OAAO,CAAC,aAA2B,EAAE,QAAwB;YACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;YAErE,4CAA4C;YAC5C,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,MAAM;YACV,qBAAqB;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,OAAO;QAEhB,KAAK,CAAC,OAAO,CAAC,aAA2B,EAAE,QAAwB;YACjE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;YAElD,oDAAoD;YACpD,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,MAAM;YACV,qBAAqB;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,MAAM;IACN,UAAU;IACV,SAAS;IACT,gBAAgB;IAChB,iBAAiB;CAClB,CAAC"}

package/dist/plugins/rate-limit/index.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Rate Limit Plugin
+ *
+ * Provides rate limiting capabilities for @qwickapps/server.
+ *
+ * ## Features
+ * - Multiple strategies: sliding window, fixed window, token bucket
+ * - PostgreSQL persistence with RLS for multi-tenant isolation
+ * - Redis caching with in-memory fallback
+ * - Express middleware for automatic enforcement
+ * - Programmatic API for custom rate limiting
+ * - Auto-cleanup of expired limits
+ *
+ * ## Usage
+ *
+ * ```typescript
+ * import {
+ *   createGateway,
+ *   createRateLimitPlugin,
+ *   postgresRateLimitStore,
+ *   rateLimitMiddleware,
+ *   isLimited,
+ *   clearLimit,
+ *   getPostgres,
+ * } from '@qwickapps/server';
+ *
+ * // Create the gateway with rate limit plugin
+ * const gateway = createGateway({
+ *   plugins: [
+ *     createRateLimitPlugin({
+ *       store: postgresRateLimitStore({
+ *         pool: () => getPostgres().getPool(),
+ *       }),
+ *       defaults: {
+ *         windowMs: 60000,    // 1 minute
+ *         maxRequests: 100,   // 100 requests per window
+ *         strategy: 'sliding-window',
+ *       },
+ *     }),
+ *   ],
+ * });
+ *
+ * // Use middleware
+ * app.use('/api', rateLimitMiddleware());
+ *
+ * // Per-route configuration
+ * app.post('/api/chat', rateLimitMiddleware({
+ *   windowMs: 60000,
+ *   max: 50,
+ *   keyGenerator: (req) => `chat:${req.user.id}`,
+ * }));
+ *
+ * // Programmatic API
+ * const limited = await isLimited('user:123:api');
+ * if (limited) {
+ *   // Handle rate limit
+ * }
+ *
+ * // Clear limit (e.g., after CAPTCHA)
+ * await clearLimit('user:123:api');
+ * ```
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export { createRateLimitPlugin } from './rate-limit-plugin.js';
+export { createRateLimitPluginFromEnv, getRateLimitConfigStatus } from './env-config.js';
+export type { RateLimitEnvPluginOptions } from './env-config.js';
+export { postgresRateLimitStore } from './stores/postgres-store.js';
+export { createRateLimitCache, createNoOpCache } from './stores/cache-store.js';
+export { createSlidingWindowStrategy, createFixedWindowStrategy, createTokenBucketStrategy, getStrategy, } from './strategies/index.js';
+export { rateLimitMiddleware, rateLimitStatusMiddleware } from './middleware.js';
+export { RateLimitService, getRateLimitService, isLimited, checkLimit, incrementLimit, getRemainingRequests, getLimitStatus, clearLimit, } from './rate-limit-service.js';
+export { createCleanupJob } from './cleanup.js';
+export type { CleanupJob, CleanupJobConfig } from './cleanup.js';
+export type { RateLimitStrategy, LimitStatus, Strategy, StrategyOptions, StrategyContext, StoredLimit, IncrementOptions, RateLimitStore, PostgresRateLimitStoreConfig, CachedLimit, RateLimitCache, RateLimitCacheConfig, RateLimitMiddlewareOptions, RateLimitPluginConfig, CheckLimitOptions, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/rate-limit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/plugins/rate-limit/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AACzF,YAAY,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAGjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAGhF,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAGjF,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EACT,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,UAAU,GACX,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGjE,YAAY,EAEV,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,eAAe,EACf,eAAe,EAGf,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,4BAA4B,EAG5B,WAAW,EACX,cAAc,EACd,oBAAoB,EAGpB,0BAA0B,EAG1B,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,YAAY,CAAC"}

package/dist/plugins/rate-limit/index.js

@@ -0,0 +1,79 @@
+/**
+ * Rate Limit Plugin
+ *
+ * Provides rate limiting capabilities for @qwickapps/server.
+ *
+ * ## Features
+ * - Multiple strategies: sliding window, fixed window, token bucket
+ * - PostgreSQL persistence with RLS for multi-tenant isolation
+ * - Redis caching with in-memory fallback
+ * - Express middleware for automatic enforcement
+ * - Programmatic API for custom rate limiting
+ * - Auto-cleanup of expired limits
+ *
+ * ## Usage
+ *
+ * ```typescript
+ * import {
+ *   createGateway,
+ *   createRateLimitPlugin,
+ *   postgresRateLimitStore,
+ *   rateLimitMiddleware,
+ *   isLimited,
+ *   clearLimit,
+ *   getPostgres,
+ * } from '@qwickapps/server';
+ *
+ * // Create the gateway with rate limit plugin
+ * const gateway = createGateway({
+ *   plugins: [
+ *     createRateLimitPlugin({
+ *       store: postgresRateLimitStore({
+ *         pool: () => getPostgres().getPool(),
+ *       }),
+ *       defaults: {
+ *         windowMs: 60000,    // 1 minute
+ *         maxRequests: 100,   // 100 requests per window
+ *         strategy: 'sliding-window',
+ *       },
+ *     }),
+ *   ],
+ * });
+ *
+ * // Use middleware
+ * app.use('/api', rateLimitMiddleware());
+ *
+ * // Per-route configuration
+ * app.post('/api/chat', rateLimitMiddleware({
+ *   windowMs: 60000,
+ *   max: 50,
+ *   keyGenerator: (req) => `chat:${req.user.id}`,
+ * }));
+ *
+ * // Programmatic API
+ * const limited = await isLimited('user:123:api');
+ * if (limited) {
+ *   // Handle rate limit
+ * }
+ *
+ * // Clear limit (e.g., after CAPTCHA)
+ * await clearLimit('user:123:api');
+ * ```
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+// Plugin
+export { createRateLimitPlugin } from './rate-limit-plugin.js';
+export { createRateLimitPluginFromEnv, getRateLimitConfigStatus } from './env-config.js';
+// Stores
+export { postgresRateLimitStore } from './stores/postgres-store.js';
+export { createRateLimitCache, createNoOpCache } from './stores/cache-store.js';
+// Strategies
+export { createSlidingWindowStrategy, createFixedWindowStrategy, createTokenBucketStrategy, getStrategy, } from './strategies/index.js';
+// Middleware
+export { rateLimitMiddleware, rateLimitStatusMiddleware } from './middleware.js';
+// Service and programmatic API
+export { RateLimitService, getRateLimitService, isLimited, checkLimit, incrementLimit, getRemainingRequests, getLimitStatus, clearLimit, } from './rate-limit-service.js';
+// Cleanup
+export { createCleanupJob } from './cleanup.js';
+//# sourceMappingURL=index.js.map

package/dist/plugins/rate-limit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/plugins/rate-limit/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AAEH,SAAS;AACT,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAGzF,SAAS;AACT,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAEhF,aAAa;AACb,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAE/B,aAAa;AACb,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,+BAA+B;AAC/B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EACT,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,UAAU,GACX,MAAM,yBAAyB,CAAC;AAEjC,UAAU;AACV,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/plugins/rate-limit/middleware.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Rate Limit Middleware
+ *
+ * Express middleware for automatic rate limiting.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import type { RequestHandler } from 'express';
+import type { RateLimitMiddlewareOptions } from './types.js';
+/**
+ * Create rate limit middleware
+ *
+ * @param options Middleware configuration
+ * @returns Express middleware function
+ *
+ * @example
+ * ```ts
+ * // Basic usage
+ * app.use('/api', rateLimitMiddleware());
+ *
+ * // Custom configuration
+ * app.post('/api/chat', rateLimitMiddleware({
+ *   windowMs: 60000,
+ *   max: 50,
+ *   keyGenerator: (req) => `chat:${req.user.id}`,
+ * }));
+ *
+ * // Tiered limits
+ * app.use(rateLimitMiddleware({
+ *   max: (req) => req.user?.tier === 'premium' ? 1000 : 50,
+ * }));
+ * ```
+ */
+export declare function rateLimitMiddleware(options?: RateLimitMiddlewareOptions): RequestHandler;
+/**
+ * Create a rate limit middleware that only checks without incrementing
+ * Useful for displaying rate limit status without counting the request
+ */
+export declare function rateLimitStatusMiddleware(options?: RateLimitMiddlewareOptions): RequestHandler;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/plugins/rate-limit/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../../src/plugins/rate-limit/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAmC,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,KAAK,EAAE,0BAA0B,EAAe,MAAM,YAAY,CAAC;AAwD1E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,0BAA+B,GAAG,cAAc,CAkE5F;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,GAAE,0BAA+B,GAAG,cAAc,CAkDlG"}