@voltro/plugin-ratelimit 0.85.0 → 0.87.0

package/dist/inspect.js

@@ -0,0 +1,72 @@
+import { parseWindow as e } from "./window.js";
+//#region src/inspect.ts
+var t = (e) => typeof e == "function" ? "dynamic" : e, n = (e) => typeof e == "function" ? "dynamic" : e, r = (r, i) => ({
+	id: i === null ? "default" : `r${i}`,
+	match: "match" in r ? r.match instanceof RegExp ? String(r.match) : Array.isArray(r.match) ? r.match.join(", ") : r.match ?? "*" : "*",
+	kinds: r.kind === void 0 ? [] : typeof r.kind == "string" ? [r.kind] : r.kind,
+	limit: t(r.limit),
+	windowMs: typeof r.window == "function" ? "dynamic" : e(r.window),
+	algorithm: r.algorithm ?? "sliding-window",
+	burst: r.burst === void 0 ? t(r.limit) : t(r.burst),
+	by: Array.isArray(r.by) ? r.by.map(n) : [n(r.by ?? "subject")],
+	scope: r.scope ?? "tag",
+	tenantOverrides: Object.keys(r.tenants ?? {}).length
+}), i = () => ({
+	allowed: 0,
+	rejected: 0,
+	bypassed: 0,
+	unbound: 0,
+	storeErrors: 0,
+	lastRejectedAt: null,
+	lastStoreErrorAt: null
+}), a = (t, n) => {
+	let a = Date.now(), o = {
+		rpc: i(),
+		http: i()
+	}, s = n.bind ? "waiting" : "not-required";
+	return {
+		binding: (e) => {
+			s = e;
+		},
+		bypass: () => {
+			o.rpc.bypassed++;
+		},
+		record: (e, t) => {
+			let n = o[e];
+			t.failOpenReason === "unbound" ? n.unbound++ : t.failOpenReason === "store-error" ? (n.storeErrors++, n.lastStoreErrorAt = Date.now()) : t.allowed ? n.allowed++ : (n.rejected++, n.lastRejectedAt = Date.now());
+		},
+		snapshot: () => {
+			let i = null;
+			try {
+				let e = n.size();
+				Number.isFinite(e) && e >= 0 && (i = e);
+			} catch {}
+			let c = t.store === "redis" && t.redis?.hotStore !== void 0 ? "custom" : typeof t.store == "string" ? t.store : t.store === void 0 ? "memory" : "custom";
+			return {
+				capturedAt: Date.now(),
+				startedAt: a,
+				rpcGate: t.enabled === !1 ? "disabled" : typeof t.enabled == "function" ? "dynamic" : "enabled",
+				dynamicResolver: t.resolve !== void 0,
+				store: {
+					kind: c,
+					scope: c === "memory" ? "process" : c === "custom" ? "unknown" : "shared-store",
+					sqlBinding: s,
+					trackedBuckets: i
+				},
+				rules: (t.rules ?? []).map((e, t) => r(e, t)),
+				defaultRule: t.default ? r(t.default, null) : null,
+				http: t.http ? {
+					limit: t.http.limit,
+					windowMs: e(t.http.window),
+					algorithm: t.http.algorithm ?? "fixed-window"
+				} : null,
+				counters: {
+					rpc: { ...o.rpc },
+					http: { ...o.http }
+				}
+			};
+		}
+	};
+};
+//#endregion
+export { a as makeRateLimitInspect };

package/dist/postgresStore.d.ts

@@ -1,28 +1,13 @@
 import { ColumnBuilder } from '@voltro/database';
+import { ConnectionRegistryShape } from '@voltro/kv/connection';
 import { DataStore } from '@voltro/database';
 import { Effect } from 'effect';
 import { FieldDefinitions } from '@voltro/database';
+import { HotRateLimitState } from '@voltro/kv/hot';
 import { Table } from '@voltro/database';
 
 declare type Algorithm = 'fixed-window' | 'sliding-window' | 'token-bucket';
 
-/** Opaque per-key state. The store persists it verbatim; only this
- *  module reads its shape. */
-declare type BucketState = {
-    readonly kind: 'fixed';
-    readonly windowStart: number;
-    readonly count: number;
-} | {
-    readonly kind: 'sliding';
-    readonly currStart: number;
-    readonly currCount: number;
-    readonly prevCount: number;
-} | {
-    readonly kind: 'token';
-    readonly tokens: number;
-    readonly lastRefill: number;
-};
-
 export declare const postgresStore: (options?: PostgresStoreOptions) => RateLimitStore;
 
 export declare interface PostgresStoreOptions {
@@ -55,7 +40,7 @@ declare interface RateLimitStore {
     readonly size: () => number;
     /** Optional one-shot setup at plugin activate (open pools, create
      *  tables). Receives the process env. */
-    readonly activate?: (env: NodeJS.ProcessEnv) => Promise<void>;
+    readonly activate?: (env: NodeJS.ProcessEnv, connectionRegistry?: ConnectionRegistryShape) => Promise<void>;
     /** Optional teardown at plugin deactivate (close pools). */
     readonly deactivate?: () => Promise<void>;
     /** Optional bind of the app's `DataStore` (the plugin's `bindDataStore`).
@@ -70,7 +55,7 @@ declare interface RateLimitStore {
 export declare const rateLimitTable: Table<"_voltro_ratelimit", FieldDefinitions<{
     readonly id: ColumnBuilder<number, "id", boolean>;
     readonly key: ColumnBuilder<string, "text", boolean>;
-    readonly state: ColumnBuilder<BucketState | null, "json", boolean>;
+    readonly state: ColumnBuilder< HotRateLimitState | null, "json", boolean>;
     readonly touchedAt: ColumnBuilder<Date, "timestamp", true>;
     readonly touched: ColumnBuilder<unknown, "text", boolean>;
 }>, false, never>;

package/dist/postgresStore.js

@@ -1,2 +1,48 @@
-import { n as e, r as t, t as n } from "./postgresStore-D_oHSGXq.js";
-export { n as RATELIMIT_TABLE, e as postgresStore, t as rateLimitTable };
+import { consumeBucket as e } from "./window.js";
+import { Effect as t } from "effect";
+import { dropped as n, eq as r, id as i, json as a, lt as o, queryFor as s, table as c, text as l, timestamp as u } from "@voltro/database";
+//#region src/postgresStore.ts
+var d = "_voltro_ratelimit", f = c(d, {
+	id: i({ scheme: "numeric" }),
+	key: l().maxLength(512),
+	state: a().nullable(),
+	touchedAt: u().default("now"),
+	touched: n()
+}).unique("rateLimitKey", ["key"]).nonReactive(), p = (n = {}) => {
+	let i = n.staleAfterMs ?? 36e5, a = null, c = (e, t, n) => ({
+		failOpenReason: n,
+		allowed: !0,
+		remaining: e.limit,
+		resetAtMs: t + e.windowMs,
+		retryAfterMs: 0
+	}), l = async (t, n, i, a) => {
+		let o = new Date(a);
+		return await t.insertIgnore(d, {
+			key: n,
+			state: null,
+			touchedAt: o
+		}, { conflictColumns: ["key"] }), t.transactional(async (t) => {
+			let c = (await t.query(s(f).where(r("key", n)).forUpdate().descriptor))[0]?.state ?? void 0, { state: l, decision: u } = e(c ?? void 0, i, a);
+			return await t.updateMany(d, {
+				state: l,
+				touchedAt: o
+			}, { where: r("key", n) }), u;
+		});
+	};
+	return {
+		consume: (e, n, r) => {
+			let i = a;
+			return i ? t.tryPromise(() => l(i, e, n, r)).pipe(t.catch(() => t.succeed(c(n, r, "store-error")))) : t.succeed(c(n, r, "unbound"));
+		},
+		sweep: (e) => {
+			let t = a;
+			t && t.deleteMany(d, { where: o("touchedAt", new Date(e - i)) }).catch(() => {});
+		},
+		size: () => -1,
+		bind: async (e) => {
+			a = e;
+		}
+	};
+};
+//#endregion
+export { d as RATELIMIT_TABLE, p as postgresStore, f as rateLimitTable };

package/dist/redisStore.d.ts

@@ -1,6 +1,8 @@
+import { ConnectionRef } from '@voltro/kv/connection';
+import { ConnectionRegistryShape } from '@voltro/kv/connection';
 import { DataStore } from '@voltro/database';
 import { Effect } from 'effect';
-import { RespClient } from '@voltro/kv/connection';
+import { HotStoreShape } from '@voltro/kv/hot';
 
 declare type Algorithm = 'fixed-window' | 'sliding-window' | 'token-bucket';
 
@@ -27,7 +29,7 @@ declare interface RateLimitStore {
     readonly size: () => number;
     /** Optional one-shot setup at plugin activate (open pools, create
      *  tables). Receives the process env. */
-    readonly activate?: (env: NodeJS.ProcessEnv) => Promise<void>;
+    readonly activate?: (env: NodeJS.ProcessEnv, connectionRegistry?: ConnectionRegistryShape) => Promise<void>;
     /** Optional teardown at plugin deactivate (close pools). */
     readonly deactivate?: () => Promise<void>;
     /** Optional bind of the app's `DataStore` (the plugin's `bindDataStore`).
@@ -37,32 +39,15 @@ declare interface RateLimitStore {
     readonly bind?: (store: DataStore) => Promise<void>;
 }
 
+/** Redis limiter decisions go only through HotStore. The app owns every socket. */
 export declare const redisStore: (options?: RedisStoreOptions) => RateLimitStore;
 
 export declare interface RedisStoreOptions {
-    /** Connection url. `resp` driver: `redis://…` / `rediss://…`. `http`
-     *  driver: the Upstash REST url. Falls back to `CACHE_REDIS_URL` /
-     *  `REDIS_URL` env at activate time. */
-    readonly url?: string;
-    /**
-     * How to talk to the server — mirrors the cache plugin's axis:
-     *   - `'resp'` (default) — ioredis over TCP. Works for Redis, Valkey,
-     *     KeyDB, Dragonfly, and Upstash's TCP endpoint.
-     *   - `'http'` — `@upstash/redis` over REST, for serverless/edge where
-     *     TCP isn't available.
-     * Resolved from `CACHE_REDIS_DRIVER` env when omitted. `'redis'` as a
-     * store value is the umbrella for the whole RESP family — the server
-     * brand is just the url; only the DRIVER is a real choice.
-     */
-    readonly driver?: 'resp' | 'http';
-    /** Auth token — `http` (Upstash REST) driver only. Falls back to
-     *  `CACHE_REDIS_TOKEN` / `UPSTASH_REDIS_REST_TOKEN` env. */
-    readonly token?: string;
-    /** Bring your own already-connected RESP client (from
-     *  `@voltro/kv/connection`'s `connect`, or the shared registry). Takes
-     *  precedence over `url` / `driver`. */
-    readonly client?: RespClient;
-    /** Key namespace. Default `'voltro:rl:'`. */
+    /** Registry reference. Omit to use the app's default Redis connection. */
+    readonly connection?: ConnectionRef<'redis'>;
+    /** Borrow a replacement HotStore port. Its owner retains disposal. */
+    readonly hotStore?: HotStoreShape;
+    /** HotStore namespace. Default 'voltro:rl'; cannot contain braces. */
     readonly keyPrefix?: string;
 }
 

package/dist/redisStore.js

@@ -1,44 +1,48 @@
-import { Effect as e } from "effect";
-import { connect as t } from "@voltro/kv/connection";
+import { Effect as e, Layer as t, ManagedRuntime as n } from "effect";
+import { ConnectionRegistry as r } from "@voltro/kv/connection";
+import { HotStore as i, layerRoutedHotRedis as a } from "@voltro/kv/hot";
 //#region src/redisStore.ts
-var n = "\nlocal key = KEYS[1]\nlocal algo = ARGV[1]\nlocal limit = tonumber(ARGV[2])\nlocal windowMs = tonumber(ARGV[3])\nlocal burst = tonumber(ARGV[4])\nlocal now = tonumber(ARGV[5])\n\nlocal raw = redis.call('GET', key)\nlocal s = nil\nif raw then s = cjson.decode(raw) end\n\nlocal allowed, remaining, resetAt, retryAfter\nlocal newstate\n\nif algo == 'fixed-window' then\n  local windowStart = (s and s.windowStart) or now\n  local count = (s and s.count) or 0\n  if now - windowStart >= windowMs then windowStart = now; count = 0 end\n  resetAt = windowStart + windowMs\n  if count >= limit then\n    allowed = false; remaining = 0; retryAfter = resetAt - now\n  else\n    count = count + 1; allowed = true; remaining = limit - count; retryAfter = 0\n  end\n  newstate = { kind = 'fixed', windowStart = windowStart, count = count }\n\nelseif algo == 'token-bucket' then\n  local capacity = burst\n  local refillPerMs = limit / windowMs\n  local tokens = (s and s.tokens) or capacity\n  local lastRefill = (s and s.lastRefill) or now\n  tokens = math.min(capacity, tokens + (now - lastRefill) * refillPerMs)\n  if tokens >= 1 then\n    tokens = tokens - 1\n    resetAt = now + math.ceil((capacity - tokens) / refillPerMs)\n    allowed = true; remaining = math.floor(tokens); retryAfter = 0\n  else\n    retryAfter = math.ceil((1 - tokens) / refillPerMs)\n    resetAt = now + retryAfter; allowed = false; remaining = 0\n  end\n  newstate = { kind = 'token', tokens = tokens, lastRefill = now }\n\nelse\n  -- sliding-window (weighted counter)\n  local w = windowMs\n  local currStart = (s and s.currStart) or now\n  local currCount = (s and s.currCount) or 0\n  local prevCount = (s and s.prevCount) or 0\n  local elapsed = math.floor((now - currStart) / w)\n  if elapsed >= 2 then\n    prevCount = 0; currCount = 0; currStart = now\n  elseif elapsed == 1 then\n    prevCount = currCount; currCount = 0; currStart = currStart + w\n  end\n  local intoCurr = now - currStart\n  local weight = (w - intoCurr) / w\n  local estimate = prevCount * weight + currCount\n  resetAt = currStart + w\n  if estimate >= limit then\n    allowed = false; remaining = 0; retryAfter = resetAt - now\n  else\n    currCount = currCount + 1\n    allowed = true\n    remaining = math.max(0, math.floor(limit - estimate - 1))\n    retryAfter = 0\n  end\n  newstate = { kind = 'sliding', currStart = currStart, currCount = currCount, prevCount = prevCount }\nend\n\nlocal ttl = math.max(windowMs * 2, 60000) + 1000\nredis.call('SET', key, cjson.encode(newstate), 'PX', ttl)\nreturn cjson.encode({ allowed = allowed, remaining = remaining, resetAtMs = resetAt, retryAfterMs = retryAfter })\n", r = (r = {}) => {
-	let i = r.keyPrefix ?? "voltro:rl:", a = r.client ?? null, o = !1, s = (e, t, n) => ({
+var o = (o = {}) => {
+	if (typeof o != "object" || !o || Array.isArray(o)) throw Error("Redis rate-limit options must be an object");
+	if (Object.keys(o).some((e) => ![
+		"connection",
+		"hotStore",
+		"keyPrefix"
+	].includes(e))) throw Error("Redis rate-limit options accept only connection, hotStore and keyPrefix; configure credentials in the app connection registry");
+	if (o.hotStore !== void 0 && (o.connection !== void 0 || o.keyPrefix !== void 0)) throw Error("An injected rate limiter HotStore owns its connection and namespace");
+	let s = o.hotStore, c, l, u, d = !1, f = (e, t, n) => ({
 		failOpenReason: n,
 		allowed: !0,
 		remaining: e.limit,
 		resetAtMs: t + e.windowMs,
 		retryAfterMs: 0
-	}), c, l = (e) => r.url ?? e.RATELIMIT_REDIS_URL ?? e.CACHE_REDIS_URL ?? e.REDIS_URL, u = (n) => a ? Promise.resolve() : (c === void 0 && (c = (async () => {
-		let i = l(n);
-		if (!i) throw Error("@voltro/plugin-ratelimit redisStore: no client and no url (set RATELIMIT_REDIS_URL / REDIS_URL or pass { url }).");
-		let s = r.driver ?? ((n.RATELIMIT_REDIS_DRIVER ?? n.CACHE_REDIS_DRIVER) === "http" ? "http" : "resp"), c = r.token ?? n.RATELIMIT_REDIS_TOKEN ?? n.CACHE_REDIS_TOKEN ?? n.UPSTASH_REDIS_REST_TOKEN, u = {
-			url: i,
-			driver: s,
-			...c === void 0 ? {} : { token: c }
-		};
-		a = await e.runPromise(t(u)), o = !0;
-	})().finally(() => {
-		c = void 0;
-	})), c), d = (t, r, o) => {
-		let c = a;
-		return c ? e.tryPromise(async () => {
-			let e = await c.eval(n, 1, `${i}${t}`, r.algorithm, r.limit, r.windowMs, r.burst, o);
-			return JSON.parse(String(e));
-		}).pipe(e.catch(() => e.succeed(s(r, o, "store-error")))) : e.succeed(s(r, o, "unbound"));
-	};
+	});
 	return {
-		consume: (t, n, r) => a ? d(t, n, r) : l(process.env) === void 0 ? e.succeed(s(n, r, "unbound")) : e.tryPromise(() => u(process.env)).pipe(e.matchEffect({
-			onFailure: () => e.succeed(s(n, r, "store-error")),
-			onSuccess: () => d(t, n, r)
-		})),
+		consume: (t, n, r) => e.suspend(() => {
+			let i = s;
+			return i === void 0 || d ? e.succeed(f(n, r, "unbound")) : i.rateLimit(t, n, r).pipe(e.catch(() => e.succeed(f(n, r, "store-error"))));
+		}),
 		sweep: () => {},
 		size: () => -1,
-		activate: (e) => u(e),
-		deactivate: async () => {
-			let e = a;
-			a = null, e && o && await e.close();
-		}
+		activate: (e, u) => d ? Promise.reject(/* @__PURE__ */ Error("Rate limiter HotStore scope is closed")) : s === void 0 ? l === void 0 ? u === void 0 ? Promise.reject(/* @__PURE__ */ Error("Redis rate limiter requires the app connection registry or an injected HotStore port")) : (l = (async () => {
+			let e = n.make(a({
+				consumer: "ratelimit",
+				namespace: o.keyPrefix ?? "voltro:rl",
+				...o.connection === void 0 ? {} : { connection: o.connection }
+			}).pipe(t.provide(t.succeed(r, u))));
+			c = e;
+			try {
+				s = await e.runPromise(i);
+			} catch {
+				throw await e.dispose(), c = void 0, Error("Redis rate limiter HotStore activation failed; check the registry reference and environment declarations");
+			}
+		})().finally(() => {
+			l = void 0;
+		}), l) : l : Promise.resolve(),
+		deactivate: () => u ??= (async () => {
+			d = !0, await l?.catch(() => void 0), s = void 0, await c?.dispose();
+		})()
 	};
 };
 //#endregion
-export { r as redisStore };
+export { o as redisStore };

package/dist/resolve.js

@@ -0,0 +1,65 @@
+import { parseWindow as e } from "./window.js";
+//#region src/resolve.ts
+var t = (e, t) => typeof e == "function" ? e(t) : e, n = /* @__PURE__ */ new WeakMap(), r = (e) => {
+	if (!e.global && !e.sticky) return e;
+	let t = n.get(e);
+	return t === void 0 && (t = new RegExp(e.source, e.flags.replace(/[gy]/g, "")), n.set(e, t)), t;
+}, i = (e, t) => e === void 0 ? !0 : typeof e == "string" ? e === t : Array.isArray(e) ? e.includes(t) : r(e).test(t), a = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, o = (e, t) => {
+	let n = t === null ? void 0 : e.tenants?.[t];
+	return {
+		limit: n?.limit ?? e.limit,
+		window: n?.window ?? e.window,
+		algorithm: n?.algorithm ?? e.algorithm,
+		burst: n?.burst ?? e.burst,
+		by: e.by ?? "subject",
+		scope: e.scope ?? "tag",
+		disabled: n?.disabled ?? !1
+	};
+}, s = (e, t, n) => {
+	for (let t = 0; t < e.length; t++) {
+		let r = e[t];
+		if (i(r.match, n.tag) && a(r.kind, n.kind)) return {
+			effective: o(r, n.tenantId),
+			ruleId: `r${t}`
+		};
+	}
+	if (t && a(t.kind, n.kind)) return {
+		effective: o(t, n.tenantId),
+		ruleId: "default"
+	};
+}, c = (n, r) => {
+	let i = t(n.limit, r);
+	return {
+		limit: i,
+		windowMs: e(t(n.window, r)),
+		algorithm: n.algorithm ?? "sliding-window",
+		burst: n.burst === void 0 ? i : t(n.burst, r)
+	};
+}, l = (t) => {
+	let n = t.limit;
+	return {
+		limit: n,
+		windowMs: e(t.window),
+		algorithm: t.algorithm ?? "sliding-window",
+		burst: t.burst ?? n
+	};
+}, u = (e) => ({
+	limit: e.limit,
+	window: e.windowMs,
+	algorithm: e.algorithm,
+	burst: e.burst
+}), d = (e, t) => {
+	if (typeof e == "function") return e(t);
+	switch (e) {
+		case "subject": return `s:${t.tenantId ?? "∅"}:${t.subject.id ?? "anon"}`;
+		case "tenant": return `t:${t.tenantId ?? "∅"}`;
+		case "apiKey": return t.subject.type === "apiKey" ? `k:${t.subject.id}` : `s:${t.tenantId ?? "∅"}:${t.subject.id ?? "anon"}`;
+		case "global": return "g";
+		case "ip": return `i:${t.remoteAddr ?? "unknown"}`;
+	}
+}, f = (e, t) => {
+	let { effective: n, ruleId: r } = e, i = n.scope === "rule" ? `rule#${r}` : `tag:${t.tag}`, a = n.by;
+	return `${i}|${Array.isArray(a) ? a.map((e) => d(e, t)).join("|") : d(a, t)}`;
+};
+//#endregion
+export { f as buildKey, l as limitFromOverride, s as matchRule, c as resolveLimit, u as toOverride };

package/dist/store.js

@@ -0,0 +1,29 @@
+import { consumeBucket as e } from "./window.js";
+import { Effect as t } from "effect";
+//#region src/store.ts
+var n = (n = {}) => {
+	let r = n.maxKeys ?? 1e5, i = n.staleAfterMs ?? 36e5, a = /* @__PURE__ */ new Map(), o = (e) => {
+		if (a.size <= r) return;
+		let t = a.size - r, n = 0;
+		for (let r of a.keys()) {
+			if (n >= t) break;
+			r !== e && (a.delete(r), n += 1);
+		}
+	};
+	return {
+		consume: (n, r, i) => t.sync(() => {
+			let t = a.get(n), { state: s, decision: c } = e(t?.state, r, i);
+			return a.set(n, {
+				state: s,
+				touched: i
+			}), o(n), c;
+		}),
+		sweep: (e) => {
+			let t = e - i;
+			for (let [e, n] of a) n.touched < t && a.delete(e);
+		},
+		size: () => a.size
+	};
+};
+//#endregion
+export { n as memoryStore };

package/dist/window.js

@@ -0,0 +1,19 @@
+import { consumeHotRateLimit as e } from "@voltro/kv/hot/contract";
+//#region src/window.ts
+var t = {
+	ms: 1,
+	s: 1e3,
+	m: 6e4,
+	h: 36e5,
+	d: 864e5
+}, n = (e) => {
+	if (typeof e == "number") {
+		if (!Number.isFinite(e) || e <= 0) throw Error(`@voltro/plugin-ratelimit: window must be a positive number, got ${e}`);
+		return e;
+	}
+	let n = /^(\d+(?:\.\d+)?)(ms|s|m|h|d)$/.exec(e.trim());
+	if (!n) throw Error(`@voltro/plugin-ratelimit: invalid window "${e}" — use e.g. "1m", "10s", "500ms", "2h", "1d"`);
+	return Number(n[1]) * t[n[2]];
+}, r = e;
+//#endregion
+export { r as consumeBucket, n as parseWindow };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/plugin-ratelimit",
-  "version": "0.85.0",
+  "version": "0.87.0",
   "description": "Rate-limiting plugin — per-endpoint, per-subject and per-tenant request limits via the RPC interceptors. Highly configurable rules (fixed-window / sliding-window / token-bucket), composite keying, static per-tenant overrides and a dynamic resolve() hook. Stores: memory (default, single-node), postgres + redis (multi-node, atomic).",
   "keywords": [
     "voltro",
@@ -48,10 +48,12 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@voltro/database": "0.85.0",
-    "@voltro/kv": "0.85.0",
-    "@voltro/logger": "0.85.0",
-    "@voltro/protocol": "0.85.0"
+    "@voltro/shared": "0.87.0",
+    "@voltro/database": "0.87.0",
+    "@voltro/kv": "0.87.0",
+    "@voltro/logger": "0.87.0",
+    "@voltro/protocol": "0.87.0",
+    "@voltro/runtime": "0.87.0"
   },
   "peerDependencies": {
     "effect": "4.0.1"

package/dist/postgresStore-D_oHSGXq.js

@@ -1,160 +0,0 @@
-import { Effect as e } from "effect";
-import { dropped as t, eq as n, id as r, json as i, lt as a, queryFor as o, table as s, text as c, timestamp as l } from "@voltro/database";
-//#region src/window.ts
-var u = {
-	ms: 1,
-	s: 1e3,
-	m: 6e4,
-	h: 36e5,
-	d: 864e5
-}, d = (e) => {
-	if (typeof e == "number") {
-		if (!Number.isFinite(e) || e <= 0) throw Error(`@voltro/plugin-ratelimit: window must be a positive number, got ${e}`);
-		return e;
-	}
-	let t = /^(\d+(?:\.\d+)?)(ms|s|m|h|d)$/.exec(e.trim());
-	if (!t) throw Error(`@voltro/plugin-ratelimit: invalid window "${e}" — use e.g. "1m", "10s", "500ms", "2h", "1d"`);
-	return Number(t[1]) * u[t[2]];
-}, f = (e, t, n) => {
-	switch (t.algorithm) {
-		case "fixed-window": return p(e, t, n);
-		case "sliding-window": return m(e, t, n);
-		case "token-bucket": return h(e, t, n);
-	}
-}, p = (e, t, n) => {
-	let r = e?.kind === "fixed" ? e.windowStart : n, i = e?.kind === "fixed" ? e.count : 0;
-	n - r >= t.windowMs && (r = n, i = 0);
-	let a = r + t.windowMs;
-	return i >= t.limit ? {
-		state: {
-			kind: "fixed",
-			windowStart: r,
-			count: i
-		},
-		decision: {
-			allowed: !1,
-			remaining: 0,
-			resetAtMs: a,
-			retryAfterMs: a - n
-		}
-	} : (i += 1, {
-		state: {
-			kind: "fixed",
-			windowStart: r,
-			count: i
-		},
-		decision: {
-			allowed: !0,
-			remaining: t.limit - i,
-			resetAtMs: a,
-			retryAfterMs: 0
-		}
-	});
-}, m = (e, t, n) => {
-	let r = t.windowMs, i = e?.kind === "sliding" ? e.currStart : n, a = e?.kind === "sliding" ? e.currCount : 0, o = e?.kind === "sliding" ? e.prevCount : 0, s = Math.floor((n - i) / r);
-	s >= 2 ? (o = 0, a = 0, i = n) : s === 1 && (o = a, a = 0, i += r);
-	let c = (r - (n - i)) / r, l = o * c + a, u = i + r;
-	return l >= t.limit ? {
-		state: {
-			kind: "sliding",
-			currStart: i,
-			currCount: a,
-			prevCount: o
-		},
-		decision: {
-			allowed: !1,
-			remaining: 0,
-			resetAtMs: u,
-			retryAfterMs: u - n
-		}
-	} : (a += 1, {
-		state: {
-			kind: "sliding",
-			currStart: i,
-			currCount: a,
-			prevCount: o
-		},
-		decision: {
-			allowed: !0,
-			remaining: Math.max(0, Math.floor(t.limit - l - 1)),
-			resetAtMs: u,
-			retryAfterMs: 0
-		}
-	});
-}, h = (e, t, n) => {
-	let r = t.burst, i = t.limit / t.windowMs, a = e?.kind === "token" ? e.tokens : r, o = e?.kind === "token" ? e.lastRefill : n;
-	if (a = Math.min(r, a + (n - o) * i), a >= 1) {
-		--a;
-		let e = n + Math.ceil((r - a) / i);
-		return {
-			state: {
-				kind: "token",
-				tokens: a,
-				lastRefill: n
-			},
-			decision: {
-				allowed: !0,
-				remaining: Math.floor(a),
-				resetAtMs: e,
-				retryAfterMs: 0
-			}
-		};
-	}
-	let s = Math.ceil((1 - a) / i);
-	return {
-		state: {
-			kind: "token",
-			tokens: a,
-			lastRefill: n
-		},
-		decision: {
-			allowed: !1,
-			remaining: 0,
-			resetAtMs: n + s,
-			retryAfterMs: s
-		}
-	};
-}, g = "_voltro_ratelimit", _ = s(g, {
-	id: r({ scheme: "numeric" }),
-	key: c().maxLength(512),
-	state: i().nullable(),
-	touchedAt: l().default("now"),
-	touched: t()
-}).unique("rateLimitKey", ["key"]).nonReactive(), v = (t = {}) => {
-	let r = t.staleAfterMs ?? 36e5, i = null, s = (e, t, n) => ({
-		failOpenReason: n,
-		allowed: !0,
-		remaining: e.limit,
-		resetAtMs: t + e.windowMs,
-		retryAfterMs: 0
-	}), c = async (e, t, r, i) => {
-		let a = new Date(i);
-		return await e.insertIgnore(g, {
-			key: t,
-			state: null,
-			touchedAt: a
-		}, { conflictColumns: ["key"] }), e.transactional(async (e) => {
-			let { state: s, decision: c } = f((await e.query(o(_).where(n("key", t)).forUpdate().descriptor))[0]?.state ?? void 0 ?? void 0, r, i);
-			return await e.updateMany(g, {
-				state: s,
-				touchedAt: a
-			}, { where: n("key", t) }), c;
-		});
-	};
-	return {
-		consume: (t, n, r) => {
-			let a = i;
-			return a ? e.tryPromise(() => c(a, t, n, r)).pipe(e.catch(() => e.succeed(s(n, r, "store-error")))) : e.succeed(s(n, r, "unbound"));
-		},
-		sweep: (e) => {
-			let t = i;
-			t && t.deleteMany(g, { where: a("touchedAt", new Date(e - r)) }).catch(() => {});
-		},
-		size: () => -1,
-		bind: async (e) => {
-			i = e;
-		}
-	};
-};
-//#endregion
-export { d as a, f as i, v as n, _ as r, g as t };