@stackmemoryai/stackmemory 0.2.8 → 0.3.0

package/dist/src/middleware/exponential-rate-limiter.js

@@ -0,0 +1,293 @@
+import { logger } from '../core/monitoring/logger.js';
+import { metrics } from '../core/monitoring/metrics.js';
+export class ExponentialRateLimiter {
+    redis;
+    localCache = new Map();
+    localCacheOrder = [];
+    config;
+    constructor(redis, config = {}) {
+        this.redis = redis;
+        this.config = {
+            baseLimit: 10,
+            windowMs: 60 * 1000, // 1 minute
+            maxBackoff: 32,
+            backoffMultiplier: 2,
+            localCacheSize: 10000,
+            localCacheTTL: 5 * 60 * 1000, // 5 minutes
+            whitelistIPs: [],
+            blacklistIPs: [],
+            customKeyGenerator: (req) => this.getClientIdentifier(req),
+            ...config,
+        };
+        // Clean up local cache periodically
+        setInterval(() => this.cleanupLocalCache(), this.config.localCacheTTL);
+    }
+    /**
+     * Main middleware function with exponential backoff
+     */
+    middleware() {
+        return async (req, res, next) => {
+            const clientId = this.config.customKeyGenerator(req);
+            // Check whitelist/blacklist
+            if (this.isWhitelisted(clientId)) {
+                return next();
+            }
+            if (this.isBlacklisted(clientId)) {
+                metrics.increment('rate_limit.blacklisted', { ip: clientId });
+                res.status(403).json({
+                    error: 'Access denied',
+                    code: 'BLACKLISTED_IP',
+                });
+                return;
+            }
+            try {
+                // Try local cache first for performance
+                let entry = this.getFromLocalCache(clientId);
+                if (!entry) {
+                    // Fallback to Redis
+                    entry = await this.getFromRedis(clientId);
+                }
+                const now = Date.now();
+                // Check if client is in backoff period
+                if (entry.blockedUntil && entry.blockedUntil > now) {
+                    const retryAfter = Math.ceil((entry.blockedUntil - now) / 1000);
+                    metrics.increment('rate_limit.blocked', {
+                        ip: clientId,
+                        backoffLevel: String(entry.backoffLevel),
+                    });
+                    res.status(429).json({
+                        error: 'Too many requests - exponential backoff applied',
+                        code: 'RATE_LIMIT_BACKOFF',
+                        retryAfter,
+                        backoffLevel: entry.backoffLevel,
+                    });
+                    res.setHeader('Retry-After', String(retryAfter));
+                    res.setHeader('X-RateLimit-BackoffLevel', String(entry.backoffLevel));
+                    return;
+                }
+                // Check if window has expired
+                if (now - entry.firstRequest > this.config.windowMs) {
+                    // Reset window
+                    entry = {
+                        requests: 1,
+                        violations: Math.max(0, entry.violations - 1), // Decay violations
+                        backoffLevel: Math.max(0, entry.backoffLevel - 1), // Decay backoff
+                        firstRequest: now,
+                        lastRequest: now,
+                    };
+                }
+                else {
+                    entry.requests++;
+                    entry.lastRequest = now;
+                }
+                // Calculate current limit with exponential backoff reduction
+                const currentLimit = Math.max(1, Math.floor(this.config.baseLimit /
+                    Math.pow(this.config.backoffMultiplier, entry.backoffLevel)));
+                // Check if limit exceeded
+                if (entry.requests > currentLimit) {
+                    entry.violations++;
+                    // Increase backoff level
+                    if (entry.backoffLevel < Math.log2(this.config.maxBackoff)) {
+                        entry.backoffLevel++;
+                    }
+                    // Calculate backoff duration with exponential increase
+                    const backoffDuration = this.config.windowMs *
+                        Math.pow(this.config.backoffMultiplier, entry.backoffLevel);
+                    entry.blockedUntil = now + backoffDuration;
+                    // Update caches
+                    await this.updateCaches(clientId, entry);
+                    const retryAfter = Math.ceil(backoffDuration / 1000);
+                    metrics.increment('rate_limit.exceeded', {
+                        ip: clientId,
+                        violations: String(entry.violations),
+                        backoffLevel: String(entry.backoffLevel),
+                    });
+                    res.status(429).json({
+                        error: 'Rate limit exceeded - entering exponential backoff',
+                        code: 'RATE_LIMIT_EXCEEDED',
+                        retryAfter,
+                        violations: entry.violations,
+                        backoffLevel: entry.backoffLevel,
+                        currentLimit,
+                    });
+                    res.setHeader('Retry-After', String(retryAfter));
+                    res.setHeader('X-RateLimit-Limit', String(currentLimit));
+                    res.setHeader('X-RateLimit-Remaining', '0');
+                    res.setHeader('X-RateLimit-BackoffLevel', String(entry.backoffLevel));
+                    return;
+                }
+                // Update successful request
+                await this.updateCaches(clientId, entry);
+                // Add rate limit headers
+                res.setHeader('X-RateLimit-Limit', String(currentLimit));
+                res.setHeader('X-RateLimit-Remaining', String(currentLimit - entry.requests));
+                res.setHeader('X-RateLimit-Reset', String(new Date(entry.firstRequest + this.config.windowMs).getTime()));
+                if (entry.backoffLevel > 0) {
+                    res.setHeader('X-RateLimit-BackoffLevel', String(entry.backoffLevel));
+                }
+                next();
+            }
+            catch (error) {
+                logger.error('Rate limiter error', error instanceof Error ? error : new Error(String(error)));
+                // Fail open - allow request on error
+                next();
+            }
+        };
+    }
+    /**
+     * Get client identifier from request
+     */
+    getClientIdentifier(req) {
+        // Try various methods to identify the client
+        const forwarded = req.headers['x-forwarded-for'];
+        const realIp = req.headers['x-real-ip'];
+        const cfIp = req.headers['cf-connecting-ip']; // Cloudflare
+        if (typeof forwarded === 'string') {
+            return forwarded.split(',')[0].trim();
+        }
+        if (typeof realIp === 'string') {
+            return realIp;
+        }
+        if (typeof cfIp === 'string') {
+            return cfIp;
+        }
+        return req.ip || req.socket.remoteAddress || 'unknown';
+    }
+    /**
+     * Check if IP is whitelisted
+     */
+    isWhitelisted(ip) {
+        return (this.config.whitelistIPs.includes(ip) ||
+            ip === '127.0.0.1' ||
+            ip === '::1' ||
+            ip.startsWith('192.168.') ||
+            ip.startsWith('10.'));
+    }
+    /**
+     * Check if IP is blacklisted
+     */
+    isBlacklisted(ip) {
+        return this.config.blacklistIPs.includes(ip);
+    }
+    /**
+     * Get rate limit entry from local cache
+     */
+    getFromLocalCache(clientId) {
+        const cached = this.localCache.get(clientId);
+        if (cached) {
+            const now = Date.now();
+            // Check if cache entry is still valid
+            if (now - cached.lastRequest < this.config.localCacheTTL) {
+                return cached;
+            }
+            // Remove stale entry
+            this.localCache.delete(clientId);
+            const index = this.localCacheOrder.indexOf(clientId);
+            if (index > -1) {
+                this.localCacheOrder.splice(index, 1);
+            }
+        }
+        return null;
+    }
+    /**
+     * Get rate limit entry from Redis
+     */
+    async getFromRedis(clientId) {
+        const key = `rate_limit:${clientId}`;
+        const data = await this.redis.get(key);
+        if (data) {
+            return JSON.parse(data);
+        }
+        // Return new entry
+        return {
+            requests: 0,
+            violations: 0,
+            backoffLevel: 0,
+            firstRequest: Date.now(),
+            lastRequest: Date.now(),
+        };
+    }
+    /**
+     * Update both local cache and Redis
+     */
+    async updateCaches(clientId, entry) {
+        // Update local cache with LRU eviction
+        if (!this.localCache.has(clientId)) {
+            // Check cache size limit
+            if (this.localCache.size >= this.config.localCacheSize) {
+                // Remove oldest entry
+                const oldest = this.localCacheOrder.shift();
+                if (oldest) {
+                    this.localCache.delete(oldest);
+                }
+            }
+            this.localCacheOrder.push(clientId);
+        }
+        this.localCache.set(clientId, entry);
+        // Update Redis with TTL
+        const key = `rate_limit:${clientId}`;
+        const ttl = Math.ceil((this.config.windowMs * Math.pow(2, entry.backoffLevel)) / 1000);
+        await this.redis.setex(key, ttl, JSON.stringify(entry));
+    }
+    /**
+     * Clean up stale entries from local cache
+     */
+    cleanupLocalCache() {
+        const now = Date.now();
+        const staleThreshold = now - this.config.localCacheTTL;
+        for (const [clientId, entry] of this.localCache.entries()) {
+            if (entry.lastRequest < staleThreshold) {
+                this.localCache.delete(clientId);
+                const index = this.localCacheOrder.indexOf(clientId);
+                if (index > -1) {
+                    this.localCacheOrder.splice(index, 1);
+                }
+            }
+        }
+        metrics.record('rate_limit.local_cache_size', this.localCache.size);
+    }
+    /**
+     * Reset rate limit for a specific client
+     */
+    async reset(clientId) {
+        this.localCache.delete(clientId);
+        const index = this.localCacheOrder.indexOf(clientId);
+        if (index > -1) {
+            this.localCacheOrder.splice(index, 1);
+        }
+        await this.redis.del(`rate_limit:${clientId}`);
+    }
+    /**
+     * Get current rate limit status for a client
+     */
+    async getStatus(clientId) {
+        let entry = this.getFromLocalCache(clientId);
+        if (!entry) {
+            const data = await this.redis.get(`rate_limit:${clientId}`);
+            if (data) {
+                entry = JSON.parse(data);
+            }
+        }
+        return entry;
+    }
+    /**
+     * Add IP to blacklist
+     */
+    blacklistIP(ip) {
+        if (!this.config.blacklistIPs.includes(ip)) {
+            this.config.blacklistIPs.push(ip);
+            logger.warn('IP blacklisted', { ip });
+        }
+    }
+    /**
+     * Remove IP from blacklist
+     */
+    unblacklistIP(ip) {
+        const index = this.config.blacklistIPs.indexOf(ip);
+        if (index > -1) {
+            this.config.blacklistIPs.splice(index, 1);
+            logger.info('IP unblacklisted', { ip });
+        }
+    }
+}
+//# sourceMappingURL=exponential-rate-limiter.js.map

package/dist/src/middleware/exponential-rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exponential-rate-limiter.js","sourceRoot":"","sources":["../../../src/middleware/exponential-rate-limiter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAuBxD,MAAM,OAAO,sBAAsB;IACzB,KAAK,CAAQ;IACb,UAAU,GAAgC,IAAI,GAAG,EAAE,CAAC;IACpD,eAAe,GAAa,EAAE,CAAC;IAC/B,MAAM,CAA4B;IAE1C,YAAY,KAAY,EAAE,SAAmC,EAAE;QAC7D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW;YAChC,UAAU,EAAE,EAAE;YACd,iBAAiB,EAAE,CAAC;YACpB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,YAAY;YAC1C,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;YAC1D,GAAG,MAAM;SACV,CAAC;QAEF,oCAAoC;QACpC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,KAAK,EACV,GAAY,EACZ,GAAa,EACb,IAAkB,EACH,EAAE;YACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAErD,4BAA4B;YAC5B,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,SAAS,CAAC,wBAAwB,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,eAAe;oBACtB,IAAI,EAAE,gBAAgB;iBACvB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,wCAAwC;gBACxC,IAAI,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAE7C,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,oBAAoB;oBACpB,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC5C,CAAC;gBAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAEvB,uCAAuC;gBACvC,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC;oBACnD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;oBAChE,OAAO,CAAC,SAAS,CAAC,oBAAoB,EAAE;wBACtC,EAAE,EAAE,QAAQ;wBACZ,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;qBACzC,CAAC,CAAC;oBAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,iDAAiD;wBACxD,IAAI,EAAE,oBAAoB;wBAC1B,UAAU;wBACV,YAAY,EAAE,KAAK,CAAC,YAAY;qBACjC,CAAC,CAAC;oBACH,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;oBACjD,GAAG,CAAC,SAAS,CAAC,0BAA0B,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpD,eAAe;oBACf,KAAK,GAAG;wBACN,QAAQ,EAAE,CAAC;wBACX,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,mBAAmB;wBAClE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,EAAE,gBAAgB;wBACnE,YAAY,EAAE,GAAG;wBACjB,WAAW,EAAE,GAAG;qBACjB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACjB,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC;gBAC1B,CAAC;gBAED,6DAA6D;gBAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAC3B,CAAC,EACD,IAAI,CAAC,KAAK,CACR,IAAI,CAAC,MAAM,CAAC,SAAS;oBACnB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,CAC9D,CACF,CAAC;gBAEF,0BAA0B;gBAC1B,IAAI,KAAK,CAAC,QAAQ,GAAG,YAAY,EAAE,CAAC;oBAClC,KAAK,CAAC,UAAU,EAAE,CAAC;oBAEnB,yBAAyB;oBACzB,IAAI,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC3D,KAAK,CAAC,YAAY,EAAE,CAAC;oBACvB,CAAC;oBAED,uDAAuD;oBACvD,MAAM,eAAe,GACnB,IAAI,CAAC,MAAM,CAAC,QAAQ;wBACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;oBAC9D,KAAK,CAAC,YAAY,GAAG,GAAG,GAAG,eAAe,CAAC;oBAE3C,gBAAgB;oBAChB,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAEzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;oBACrD,OAAO,CAAC,SAAS,CAAC,qBAAqB,EAAE;wBACvC,EAAE,EAAE,QAAQ;wBACZ,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;wBACpC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;qBACzC,CAAC,CAAC;oBAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,KAAK,EAAE,oDAAoD;wBAC3D,IAAI,EAAE,qBAAqB;wBAC3B,UAAU;wBACV,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;wBAChC,YAAY;qBACb,CAAC,CAAC;oBACH,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;oBACjD,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;oBACzD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;oBAC5C,GAAG,CAAC,SAAS,CAAC,0BAA0B,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBAED,4BAA4B;gBAC5B,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAEzC,yBAAyB;gBACzB,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBACzD,GAAG,CAAC,SAAS,CACX,uBAAuB,EACvB,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,CACtC,CAAC;gBACF,GAAG,CAAC,SAAS,CACX,mBAAmB,EACnB,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CACtE,CAAC;gBAEF,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;oBAC3B,GAAG,CAAC,SAAS,CAAC,0BAA0B,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBACxE,CAAC;gBAED,IAAI,EAAE,CAAC;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,oBAAoB,EACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;gBACF,qCAAqC;gBACrC,IAAI,EAAE,CAAC;YACT,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,GAAY;QACtC,6CAA6C;QAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa;QAE3D,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IACzD,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,EAAU;QAC9B,OAAO,CACL,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,EAAE,KAAK,WAAW;YAClB,EAAE,KAAK,KAAK;YACZ,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YACzB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,EAAU;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,QAAgB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,sCAAsC;YACtC,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzD,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,qBAAqB;YACrB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;gBACf,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,QAAgB;QACzC,MAAM,GAAG,GAAG,cAAc,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAED,mBAAmB;QACnB,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CACxB,QAAgB,EAChB,KAAqB;QAErB,uCAAuC;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,yBAAyB;YACzB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACvD,sBAAsB;gBACtB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;gBAC5C,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAErC,wBAAwB;QACxB,MAAM,GAAG,GAAG,cAAc,QAAQ,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI,CAChE,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QAEvD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1D,IAAI,KAAK,CAAC,WAAW,GAAG,cAAc,EAAE,CAAC;gBACvC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACjC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACrD,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;oBACf,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,6BAA6B,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB;QAC1B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,IAAI,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;YAC5D,IAAI,IAAI,EAAE,CAAC;gBACT,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,EAAU;QACpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,EAAU;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;CACF"}

package/dist/src/models/user.model.d.ts

@@ -0,0 +1,62 @@
+import BetterSqlite3 from 'better-sqlite3';
+type Database = BetterSqlite3.Database;
+export interface User {
+    id: string;
+    sub: string;
+    email: string;
+    name?: string;
+    avatar?: string;
+    tier: 'free' | 'pro' | 'enterprise';
+    permissions: string[];
+    organizations: Array<{
+        id: string;
+        name: string;
+        role: string;
+    }>;
+    apiKeys?: string[];
+    createdAt: Date;
+    updatedAt: Date;
+    lastLoginAt?: Date;
+    metadata?: Record<string, any>;
+}
+export interface UserSession {
+    id: string;
+    userId: string;
+    token: string;
+    expiresAt: Date;
+    createdAt: Date;
+    metadata?: Record<string, any>;
+}
+export declare class UserModel {
+    private db;
+    constructor(db: Database);
+    private initialize;
+    createUser(userData: Partial<User>): Promise<User>;
+    findUserBySub(sub: string): Promise<User | null>;
+    findUserByEmail(email: string): Promise<User | null>;
+    findUserById(id: string): Promise<User | null>;
+    updateUser(id: string, updates: Partial<User>): Promise<User | null>;
+    deleteUser(id: string): Promise<boolean>;
+    updateLastLogin(id: string): Promise<void>;
+    createSession(userId: string, expiresIn?: number): Promise<UserSession>;
+    findSessionByToken(token: string): Promise<UserSession | null>;
+    validateSession(token: string): Promise<User | null>;
+    deleteSession(id: string): Promise<boolean>;
+    deleteExpiredSessions(): Promise<number>;
+    generateApiKey(userId: string, name?: string): Promise<string>;
+    validateApiKey(apiKey: string): Promise<User | null>;
+    revokeApiKey(userId: string, apiKeyId: string): Promise<boolean>;
+    listApiKeys(userId: string): Promise<Array<{
+        id: string;
+        name: string;
+        lastUsed?: Date;
+        createdAt: Date;
+    }>>;
+    private rowToUser;
+    private rowToSession;
+    private generateSessionToken;
+    private generateToken;
+}
+export declare function getUserModel(db: BetterSqlite3.Database): UserModel;
+export {};
+//# sourceMappingURL=user.model.d.ts.map

package/dist/src/models/user.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.model.d.ts","sourceRoot":"","sources":["../../../src/models/user.model.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,gBAAgB,CAAC;AAK3C,KAAK,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;AAEvC,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;IACpC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,KAAK,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,EAAE,CAAW;gBAET,EAAE,EAAE,QAAQ;IAKxB,OAAO,CAAC,UAAU;IA8DZ,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA0ClD,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAWhD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAWpD,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAW9C,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAsCpE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAYxC,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1C,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IA4BtE,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAW9D,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAiBpD,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM3C,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC;IAcxC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4B9D,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IA0BpD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAchE,WAAW,CACf,MAAM,EAAE,MAAM,GACb,OAAO,CACR,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC,CACtE;IAkBD,OAAO,CAAC,SAAS;IAkBjB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,aAAa;CAStB;AAKD,wBAAgB,YAAY,CAAC,EAAE,EAAE,aAAa,CAAC,QAAQ,GAAG,SAAS,CAKlE"}