@qwickapps/server 1.3.1 → 1.5.0

package/dist/plugins/rate-limit/strategies/sliding-window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sliding-window.js","sourceRoot":"","sources":["../../../../src/plugins/rate-limit/strategies/sliding-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAUH;;GAEG;AACH,SAAS,qBAAqB,CAC5B,YAAoB,EACpB,aAAqB,EACrB,QAAgB,EAChB,WAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,GAAG,GAAG,WAAW,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,QAAQ,CAAC;IAE3D,4EAA4E;IAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,aAAa,GAAG,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO;QACL,IAAI,EAAE,gBAAgB;QAEtB,KAAK,CAAC,KAAK,CACT,GAAW,EACX,OAAwB,EACxB,OAAwB;YAExB,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;YAC5D,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;YAE9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,2BAA2B;YACvE,MAAM,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;YAEzC,kBAAkB;YAClB,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,aAAa,GAAG,CAAC,CAAC;YAEtB,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBACrC,sCAAsC;gBACtC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;gBAE5B,2DAA2D;gBAC3D,iDAAiD;gBACjD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC;gBAClD,IAAI,UAAU,EAAE,CAAC;oBACf,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;gBACnC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC5C,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;oBAC/C,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC9B,CAAC;YACH,CAAC;YAED,iCAAiC;YACjC,MAAM,YAAY,GAAG,qBAAqB,CACxC,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,WAAW,CACZ,CAAC;YAEF,mBAAmB;YACnB,MAAM,OAAO,GAAG,YAAY,IAAI,WAAW,CAAC;YAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,YAAY,GAAG,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;YAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAEpE,yCAAyC;YACzC,IAAI,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC1B,qEAAqE;gBACrE,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;oBAC3E,0DAA0D;oBAC1D,MAAM,UAAU,GAAgB;wBAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,WAAW;wBACX,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,QAAQ,EAAE,gBAAgB;qBAC3B,CAAC;oBACF,6EAA6E;oBAC7E,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,OAAO,EAAE,UAAU,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;gBAC3D,CAAC;gBAED,qBAAqB;gBACrB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;oBACzC,WAAW;oBACX,QAAQ;oBACR,QAAQ,EAAE,gBAAgB;oBAC1B,MAAM;oBACN,QAAQ;oBACR,SAAS;oBACT,MAAM,EAAE,CAAC;iBACV,CAAC,CAAC;gBAEH,mCAAmC;gBACnC,MAAM,SAAS,GAAgB;oBAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,WAAW;oBACX,WAAW;oBACX,SAAS;oBACT,QAAQ,EAAE,gBAAgB;iBAC3B,CAAC;gBACF,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAE1C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,OAAO,CAAC,KAAK;oBACtB,KAAK,EAAE,WAAW;oBAClB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;oBACnD,OAAO;oBACP,UAAU;iBACX,CAAC;YACJ,CAAC;YAED,qCAAqC;YACrC,OAAO;gBACL,OAAO;gBACP,OAAO,EAAE,YAAY;gBACrB,KAAK,EAAE,WAAW;gBAClB,SAAS;gBACT,OAAO;gBACP,UAAU;aACX,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/rate-limit/strategies/token-bucket.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Token Bucket Rate Limit Strategy
+ *
+ * Implements a token bucket algorithm that allows bursts while maintaining
+ * a long-term rate limit.
+ *
+ * How it works:
+ * - Bucket starts full with `maxRequests` tokens
+ * - Each request consumes 1 token
+ * - Tokens refill at a constant rate (maxRequests / windowMs)
+ * - If no tokens available, request is rate limited
+ *
+ * Pros:
+ * - Allows short bursts of traffic
+ * - Smooth long-term rate limiting
+ *
+ * Cons:
+ * - More complex state management
+ * - Can allow more requests than fixed/sliding in short bursts
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import type { Strategy } from '../types.js';
+/**
+ * Create the token bucket strategy
+ */
+export declare function createTokenBucketStrategy(): Strategy;
+//# sourceMappingURL=token-bucket.d.ts.map

package/dist/plugins/rate-limit/strategies/token-bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-bucket.d.ts","sourceRoot":"","sources":["../../../../src/plugins/rate-limit/strategies/token-bucket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EACV,QAAQ,EAKT,MAAM,aAAa,CAAC;AAoBrB;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,QAAQ,CAqGpD"}

package/dist/plugins/rate-limit/strategies/token-bucket.js

@@ -0,0 +1,121 @@
+/**
+ * Token Bucket Rate Limit Strategy
+ *
+ * Implements a token bucket algorithm that allows bursts while maintaining
+ * a long-term rate limit.
+ *
+ * How it works:
+ * - Bucket starts full with `maxRequests` tokens
+ * - Each request consumes 1 token
+ * - Tokens refill at a constant rate (maxRequests / windowMs)
+ * - If no tokens available, request is rate limited
+ *
+ * Pros:
+ * - Allows short bursts of traffic
+ * - Smooth long-term rate limiting
+ *
+ * Cons:
+ * - More complex state management
+ * - Can allow more requests than fixed/sliding in short bursts
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+/**
+ * Calculate tokens to refill based on time elapsed
+ */
+function calculateRefill(lastRefill, maxTokens, refillRatePerMs) {
+    const now = Date.now();
+    const elapsed = now - lastRefill;
+    const tokensToAdd = elapsed * refillRatePerMs;
+    return {
+        tokens: Math.min(maxTokens, tokensToAdd),
+        newLastRefill: now,
+    };
+}
+/**
+ * Create the token bucket strategy
+ */
+export function createTokenBucketStrategy() {
+    return {
+        name: 'token-bucket',
+        async check(key, options, context) {
+            const { maxRequests, windowMs, increment = true } = options;
+            const { store, cache, userId, tenantId, ipAddress } = context;
+            const now = Date.now();
+            // Refill rate: how many tokens per millisecond
+            const refillRatePerMs = maxRequests / windowMs;
+            // Try cache first
+            let cached = await cache.get(key);
+            let tokensRemaining = maxRequests; // Start with full bucket
+            let lastRefill = now;
+            if (cached && cached.tokensRemaining !== undefined && cached.lastRefill !== undefined) {
+                // Cache hit - calculate current tokens with refill
+                const refill = calculateRefill(cached.lastRefill, maxRequests, refillRatePerMs);
+                tokensRemaining = Math.min(maxRequests, (cached.tokensRemaining || 0) + refill.tokens);
+                lastRefill = refill.newLastRefill;
+            }
+            else {
+                // Cache miss - check store
+                const stored = await store.get(key, userId);
+                if (stored && stored.tokensRemaining !== undefined && stored.lastRefill) {
+                    const refill = calculateRefill(stored.lastRefill.getTime(), maxRequests, refillRatePerMs);
+                    tokensRemaining = Math.min(maxRequests, (stored.tokensRemaining || 0) + refill.tokens);
+                    lastRefill = refill.newLastRefill;
+                }
+                // If no stored data, start with full bucket
+            }
+            // Check if limited (less than 1 full token)
+            const limited = tokensRemaining < 1;
+            // Calculate when next token will be available
+            const timeUntilNextToken = limited ? Math.ceil((1 - tokensRemaining) / refillRatePerMs) : 0;
+            const resetAt = Math.ceil((now + timeUntilNextToken) / 1000);
+            const retryAfter = Math.max(0, Math.ceil(timeUntilNextToken / 1000));
+            // Calculate remaining (floor to show integer tokens)
+            const remaining = Math.max(0, Math.floor(tokensRemaining) - (increment && !limited ? 1 : 0));
+            // Consume token if requested and not limited
+            if (increment && !limited) {
+                const newTokens = tokensRemaining - 1;
+                // Update store with new token count
+                // We use a special increment that sets tokens instead of incrementing count
+                const updated = await store.increment(key, {
+                    maxRequests,
+                    windowMs,
+                    strategy: 'token-bucket',
+                    userId,
+                    tenantId,
+                    ipAddress,
+                    amount: -1, // Signal to set tokens, not increment count
+                });
+                // Update cache
+                const newCached = {
+                    count: Math.floor(maxRequests - newTokens), // Count as consumed tokens
+                    maxRequests,
+                    windowStart: now,
+                    windowEnd: now + windowMs,
+                    strategy: 'token-bucket',
+                    tokensRemaining: newTokens,
+                    lastRefill,
+                };
+                await cache.set(key, newCached, windowMs);
+                return {
+                    limited: false,
+                    current: Math.floor(maxRequests - newTokens),
+                    limit: maxRequests,
+                    remaining: Math.floor(newTokens),
+                    resetAt,
+                    retryAfter: 0,
+                };
+            }
+            // Return status without consuming
+            return {
+                limited,
+                current: Math.floor(maxRequests - tokensRemaining),
+                limit: maxRequests,
+                remaining,
+                resetAt,
+                retryAfter,
+            };
+        },
+    };
+}
+//# sourceMappingURL=token-bucket.js.map

package/dist/plugins/rate-limit/strategies/token-bucket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-bucket.js","sourceRoot":"","sources":["../../../../src/plugins/rate-limit/strategies/token-bucket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAUH;;GAEG;AACH,SAAS,eAAe,CACtB,UAAkB,EAClB,SAAiB,EACjB,eAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,GAAG,GAAG,UAAU,CAAC;IACjC,MAAM,WAAW,GAAG,OAAO,GAAG,eAAe,CAAC;IAE9C,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;QACxC,aAAa,EAAE,GAAG;KACnB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,IAAI,EAAE,cAAc;QAEpB,KAAK,CAAC,KAAK,CACT,GAAW,EACX,OAAwB,EACxB,OAAwB;YAExB,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;YAC5D,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;YAE9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,+CAA+C;YAC/C,MAAM,eAAe,GAAG,WAAW,GAAG,QAAQ,CAAC;YAE/C,kBAAkB;YAClB,IAAI,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,eAAe,GAAG,WAAW,CAAC,CAAC,yBAAyB;YAC5D,IAAI,UAAU,GAAG,GAAG,CAAC;YAErB,IAAI,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACtF,mDAAmD;gBACnD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;gBAChF,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvF,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,2BAA2B;gBAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC5C,IAAI,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACxE,MAAM,MAAM,GAAG,eAAe,CAC5B,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,EAC3B,WAAW,EACX,eAAe,CAChB,CAAC;oBACF,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;oBACvF,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC;gBACpC,CAAC;gBACD,4CAA4C;YAC9C,CAAC;YAED,4CAA4C;YAC5C,MAAM,OAAO,GAAG,eAAe,GAAG,CAAC,CAAC;YAEpC,8CAA8C;YAC9C,MAAM,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC,CAAC;YAErE,qDAAqD;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAE7F,6CAA6C;YAC7C,IAAI,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,eAAe,GAAG,CAAC,CAAC;gBAEtC,oCAAoC;gBACpC,4EAA4E;gBAC5E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;oBACzC,WAAW;oBACX,QAAQ;oBACR,QAAQ,EAAE,cAAc;oBACxB,MAAM;oBACN,QAAQ;oBACR,SAAS;oBACT,MAAM,EAAE,CAAC,CAAC,EAAE,4CAA4C;iBACzD,CAAC,CAAC;gBAEH,eAAe;gBACf,MAAM,SAAS,GAAgB;oBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC,EAAE,2BAA2B;oBACvE,WAAW;oBACX,WAAW,EAAE,GAAG;oBAChB,SAAS,EAAE,GAAG,GAAG,QAAQ;oBACzB,QAAQ,EAAE,cAAc;oBACxB,eAAe,EAAE,SAAS;oBAC1B,UAAU;iBACX,CAAC;gBACF,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAE1C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;oBAC5C,KAAK,EAAE,WAAW;oBAClB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;oBAChC,OAAO;oBACP,UAAU,EAAE,CAAC;iBACd,CAAC;YACJ,CAAC;YAED,kCAAkC;YAClC,OAAO;gBACL,OAAO;gBACP,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,eAAe,CAAC;gBAClD,KAAK,EAAE,WAAW;gBAClB,SAAS;gBACT,OAAO;gBACP,UAAU;aACX,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/rate-limit/types.d.ts

@@ -0,0 +1,265 @@
+/**
+ * Rate Limit Plugin Types
+ *
+ * Type definitions for the rate limiting plugin.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import type { Request, Response, NextFunction } from 'express';
+export type RateLimitStrategy = 'sliding-window' | 'fixed-window' | 'token-bucket';
+/**
+ * Result from a rate limit check
+ */
+export interface LimitStatus {
+    /** Whether the limit has been exceeded */
+    limited: boolean;
+    /** Current request count in window */
+    current: number;
+    /** Maximum requests allowed */
+    limit: number;
+    /** Remaining requests in window */
+    remaining: number;
+    /** When the current window resets (Unix timestamp in seconds) */
+    resetAt: number;
+    /** Seconds until reset (for Retry-After header) */
+    retryAfter: number;
+}
+/**
+ * Strategy interface - all strategies must implement this
+ */
+export interface Strategy {
+    name: RateLimitStrategy;
+    /**
+     * Check if the key is rate limited and optionally increment counter
+     */
+    check(key: string, options: StrategyOptions, context: StrategyContext): Promise<LimitStatus>;
+}
+export interface StrategyOptions {
+    maxRequests: number;
+    windowMs: number;
+    /** Whether to increment the counter (default: true) */
+    increment?: boolean;
+}
+export interface StrategyContext {
+    store: RateLimitStore;
+    cache: RateLimitCache;
+    userId?: string;
+    tenantId?: string;
+    ipAddress?: string;
+}
+/**
+ * Stored rate limit record
+ */
+export interface StoredLimit {
+    id: string;
+    key: string;
+    count: number;
+    maxRequests: number;
+    windowMs: number;
+    windowStart: Date;
+    windowEnd: Date;
+    strategy: RateLimitStrategy;
+    userId?: string;
+    tenantId?: string;
+    ipAddress?: string;
+    /** Token bucket: remaining tokens */
+    tokensRemaining?: number;
+    /** Token bucket: last refill time */
+    lastRefill?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+}
+/**
+ * Options for incrementing a rate limit
+ */
+export interface IncrementOptions {
+    maxRequests: number;
+    windowMs: number;
+    strategy: RateLimitStrategy;
+    userId?: string;
+    tenantId?: string;
+    ipAddress?: string;
+    /** Amount to increment by (default: 1) */
+    amount?: number;
+}
+/**
+ * Rate limit store interface - implementations handle persistence
+ */
+export interface RateLimitStore {
+    /** Store name for logging */
+    name: string;
+    /** Initialize store (create tables, indexes, RLS) */
+    initialize(): Promise<void>;
+    /** Get current limit status for a key */
+    get(key: string, userId?: string): Promise<StoredLimit | null>;
+    /** Increment counter for a key, returns updated record */
+    increment(key: string, options: IncrementOptions): Promise<StoredLimit>;
+    /** Clear a specific limit */
+    clear(key: string, userId?: string): Promise<boolean>;
+    /** Clean up expired limits, returns count of deleted records */
+    cleanup(): Promise<number>;
+    /** Shutdown store */
+    shutdown(): Promise<void>;
+}
+/**
+ * PostgreSQL store configuration
+ */
+export interface PostgresRateLimitStoreConfig {
+    /**
+     * PostgreSQL pool instance or function that returns one.
+     * Use a function for lazy initialization.
+     */
+    pool: unknown | (() => unknown);
+    /** Table name (default: 'rate_limits') */
+    tableName?: string;
+    /** Schema name (default: 'public') */
+    schema?: string;
+    /** Auto-create tables on initialize (default: true) */
+    autoCreateTables?: boolean;
+    /** Enable RLS policies (default: true) */
+    enableRLS?: boolean;
+}
+/**
+ * Cached rate limit entry
+ */
+export interface CachedLimit {
+    count: number;
+    maxRequests: number;
+    windowStart: number;
+    windowEnd: number;
+    strategy: RateLimitStrategy;
+    /** Token bucket specific */
+    tokensRemaining?: number;
+    lastRefill?: number;
+}
+/**
+ * Rate limit cache interface
+ */
+export interface RateLimitCache {
+    /** Cache name for logging */
+    name: string;
+    /** Get cached limit for a key */
+    get(key: string): Promise<CachedLimit | null>;
+    /** Set cached limit with TTL */
+    set(key: string, value: CachedLimit, ttlMs: number): Promise<void>;
+    /** Atomic increment of count, returns new count */
+    increment(key: string, amount?: number): Promise<number | null>;
+    /** Delete a cached entry */
+    delete(key: string): Promise<boolean>;
+    /** Check if cache is available */
+    isAvailable(): boolean;
+    /** Shutdown cache */
+    shutdown(): Promise<void>;
+}
+/**
+ * Cache store configuration
+ */
+export interface RateLimitCacheConfig {
+    /**
+     * Cache type:
+     * - 'redis': Use Redis via cache plugin
+     * - 'memory': Use in-memory cache
+     * - 'auto': Use Redis if available, fall back to memory
+     */
+    type?: 'redis' | 'memory' | 'auto';
+    /** Redis cache instance name (default: 'default') */
+    redisInstance?: string;
+    /** Default TTL in milliseconds (default: 60000) */
+    defaultTtlMs?: number;
+    /** Max in-memory entries (default: 10000) */
+    maxMemoryEntries?: number;
+    /** Key prefix for cache entries (default: 'ratelimit:') */
+    keyPrefix?: string;
+}
+/**
+ * Express middleware options
+ */
+export interface RateLimitMiddlewareOptions {
+    /** Time window in milliseconds (default: 60000 = 1 min) */
+    windowMs?: number;
+    /** Max requests per window (static or dynamic) */
+    max?: number | ((req: Request) => number | Promise<number>);
+    /** Generate the rate limit key from request */
+    keyGenerator?: (req: Request) => string | Promise<string>;
+    /** Skip rate limiting for certain requests */
+    skip?: (req: Request) => boolean | Promise<boolean>;
+    /** Custom handler when limit is exceeded */
+    handler?: (req: Request, res: Response, next: NextFunction, status: LimitStatus) => void;
+    /** Strategy to use (default: 'sliding-window') */
+    strategy?: RateLimitStrategy;
+    /** Include standard rate limit headers (default: true) */
+    headers?: boolean;
+    /** Key prefix for this middleware instance */
+    keyPrefix?: string;
+}
+/**
+ * Rate limit plugin configuration
+ */
+export interface RateLimitPluginConfig {
+    /**
+     * PostgreSQL store configuration (required for persistence)
+     */
+    store: RateLimitStore;
+    /**
+     * Default limits applied when not specified per-route
+     */
+    defaults?: {
+        /** Time window in milliseconds (default: 60000 = 1 min) */
+        windowMs?: number;
+        /** Max requests per window (default: 100) */
+        maxRequests?: number;
+        /** Strategy to use (default: 'sliding-window') */
+        strategy?: RateLimitStrategy;
+    };
+    /**
+     * Cache configuration
+     */
+    cache?: RateLimitCacheConfig;
+    /**
+     * Auto-cleanup configuration
+     */
+    cleanup?: {
+        /** Enable auto-cleanup of expired limits (default: true) */
+        enabled?: boolean;
+        /** Cleanup interval in milliseconds (default: 300000 = 5 min) */
+        intervalMs?: number;
+    };
+    /**
+     * API routes configuration
+     */
+    api?: {
+        /** Enable status API endpoints (default: true) */
+        enabled?: boolean;
+        /** Route prefix (default: '/rate-limit') */
+        prefix?: string;
+    };
+    /**
+     * UI configuration
+     */
+    ui?: {
+        /** Enable UI menu item and config page (default: true) */
+        enabled?: boolean;
+    };
+    /** Enable debug logging (default: false) */
+    debug?: boolean;
+}
+/**
+ * Options for checking a rate limit programmatically
+ */
+export interface CheckLimitOptions {
+    /** Max requests (uses plugin default if not specified) */
+    maxRequests?: number;
+    /** Window in milliseconds (uses plugin default if not specified) */
+    windowMs?: number;
+    /** Strategy (uses plugin default if not specified) */
+    strategy?: RateLimitStrategy;
+    /** User ID for scoped limits */
+    userId?: string;
+    /** Tenant ID for scoped limits */
+    tenantId?: string;
+    /** IP address for scoped limits */
+    ipAddress?: string;
+    /** Whether to increment counter (default: true) */
+    increment?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/plugins/rate-limit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/plugins/rate-limit/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAM/D,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,iBAAiB,CAAC;IAExB;;OAEG;IACH,KAAK,CACH,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,WAAW,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,IAAI,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qCAAqC;IACrC,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IAEb,qDAAqD;IACrD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B,yCAAyC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAE/D,0DAA0D;IAC1D,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAExE,6BAA6B;IAC7B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtD,gEAAgE;IAChE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3B,qBAAqB;IACrB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;;OAGG;IACH,IAAI,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAC;IAEhC,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,0CAA0C;IAC1C,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAMD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,4BAA4B;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAE9C,gCAAgC;IAChC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE,mDAAmD;IACnD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEhE,4BAA4B;IAC5B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtC,kCAAkC;IAClC,WAAW,IAAI,OAAO,CAAC;IAEvB,qBAAqB;IACrB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IAEnC,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAE5D,+CAA+C;IAC/C,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1D,8CAA8C;IAC9C,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpD,4CAA4C;IAC5C,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;IAEzF,kDAAkD;IAClD,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAE7B,0DAA0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,KAAK,EAAE,cAAc,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,EAAE;QACT,2DAA2D;QAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,6CAA6C;QAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kDAAkD;QAClD,QAAQ,CAAC,EAAE,iBAAiB,CAAC;KAC9B,CAAC;IAEF;;OAEG;IACH,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAE7B;;OAEG;IACH,OAAO,CAAC,EAAE;QACR,4DAA4D;QAC5D,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,iEAAiE;QACjE,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IAEF;;OAEG;IACH,GAAG,CAAC,EAAE;QACJ,kDAAkD;QAClD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,4CAA4C;QAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IAEF;;OAEG;IACH,EAAE,CAAC,EAAE;QACH,0DAA0D;QAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF,4CAA4C;IAC5C,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}

package/dist/plugins/rate-limit/types.js

@@ -0,0 +1,9 @@
+/**
+ * Rate Limit Plugin Types
+ *
+ * Type definitions for the rate limiting plugin.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/plugins/rate-limit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/plugins/rate-limit/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/plugins/subscriptions/__tests__/subscriptions-plugin.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Subscriptions Plugin Tests
+ *
+ * Unit tests for the subscriptions plugin including:
+ * - Plugin lifecycle
+ * - Tier management
+ * - Entitlement checks
+ * - User subscription management
+ */
+export {};
+//# sourceMappingURL=subscriptions-plugin.test.d.ts.map

package/dist/plugins/subscriptions/__tests__/subscriptions-plugin.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptions-plugin.test.d.ts","sourceRoot":"","sources":["../../../../src/plugins/subscriptions/__tests__/subscriptions-plugin.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}