@vorionsys/platform-core 0.1.0

package/dist/api/middleware/rate-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limits.js","sourceRoot":"","sources":["../../../src/api/middleware/rate-limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAG5D,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;AACrD,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;AA2D1C,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAA4C;IACtE,6EAA6E;IAC7E,2DAA2D;IAC3D,6EAA6E;IAC7E,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,cAAc;IAClE,oBAAoB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IACnE,mBAAmB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAClE,uBAAuB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,aAAa;IAEvE,6EAA6E;IAC7E,6CAA6C;IAC7C,6EAA6E;IAC7E,sBAAsB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,cAAc;IACxE,qBAAqB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,cAAc;IACvE,yBAAyB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,cAAc;IAC3E,wCAAwC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,cAAc;IAE1F,6EAA6E;IAC7E,+DAA+D;IAC/D,6EAA6E;IAC7E,qBAAqB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IACpE,8BAA8B,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAC7E,yCAAyC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IACxF,iBAAiB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,cAAc;IAEnE,6EAA6E;IAC7E,sDAAsD;IACtD,6EAA6E;IAC7E,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,YAAY;IACjE,gCAAgC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,YAAY;IAC7E,+BAA+B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,YAAY;IAE5E,6EAA6E;IAC7E,qCAAqC;IACrC,6EAA6E;IAC7E,0BAA0B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,aAAa;IAC1E,0BAA0B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,YAAY;IAE1E,6EAA6E;IAC7E,8BAA8B;IAC9B,6EAA6E;IAC7E,gBAAgB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAC/D,mBAAmB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAClE,4BAA4B,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAC3E,8BAA8B,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAC7E,4BAA4B,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAE3E,6EAA6E;IAC7E,oBAAoB;IACpB,6EAA6E;IAC7E,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,cAAc;IAChE,0BAA0B,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IACzE,0BAA0B,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAEzE,6EAA6E;IAC7E,wBAAwB;IACxB,6EAA6E;IAC7E,mCAAmC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAClF,+BAA+B,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAC9E,8BAA8B,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;IAC7E,8BAA8B,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,aAAa;CAC9E,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAyB;IACtD,SAAS,EAAE,GAAG,EAAE,oBAAoB;IACpC,aAAa,EAAE,GAAG,EAAE,4BAA4B;IAChD,KAAK,EAAE,GAAG,EAAE,qBAAqB;IACjC,OAAO,EAAE,QAAQ,EAAE,+BAA+B;CACnD,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAAmB,CAAC;AAEhE,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,kBAAkB;IACd,OAAO,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC9C,eAAe,GAA0B,IAAI,CAAC;IACrC,OAAO,GAAW,MAAM,CAAC;IAE1C;QACE,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,MAAc,EAAE,KAAa;QAC/C,OAAO,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CACH,MAAc,EACd,KAAa,EACb,KAAa,EACb,aAAqB;QASrB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,aAAa,GAAG,IAAI,CAAC;QAEtC,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElC,8BAA8B;QAC9B,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,oBAAoB;YACpB,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC;YAE9C,+BAA+B;YAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACtC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;YAC1D,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;QAEhC,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAE/D,OAAO;YACL,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,KAAK;YACpB,KAAK;YACL,SAAS;YACT,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;YACxC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,CACF,MAAc,EACd,KAAa,EACb,KAAa;QAQb,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAE/D,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,KAAK;YACpB,KAAK;YACL,SAAS;YACT,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;YACxC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,MAAc;QAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;QAChD,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC;QAE5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,KAAa;QACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aAC/C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAE/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF;AAED,mCAAmC;AACnC,IAAI,WAAW,GAA8B,IAAI,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,IAAI,WAAW,EAAE,CAAC;QAChB,WAAW,CAAC,IAAI,EAAE,CAAC;QACnB,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,eAAe,CAAC,OAAuB;IAO9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAMR,CAAC;IAEd,MAAM,IAAI,GAAG,OAAO,CAAC,IAKR,CAAC;IAEd,6CAA6C;IAC7C,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,IAAI,MAAM,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAE7E,gBAAgB;IAChB,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC;IAE1D,YAAY;IACZ,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IAE/C,kBAAkB;IAClB,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;IAEjE,sBAAsB;IACtB,IAAI,QAAQ,GAAa,WAAW,CAAC;IAErC,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzE,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,IACL,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvB,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC9B,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC9B,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC;IACrB,CAAC;SAAM,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,EAAE,CAAC;QACrC,QAAQ,GAAG,eAAe,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAuB;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAChD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAE9C,OAAO,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CACjB,MAAc,EACd,GAAW,EACX,OAAe;IAEf,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAExD,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2BAA2B;IAC3B,IAAI,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,qCAAqC;IACrC,MAAM,YAAY,GAAG,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAErD,IAAI,YAAY,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;QACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAE7B,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,gCAAgC;YAChC,SAAS;QACX,CAAC;QAED,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,MAAc,EACd,GAAW;IAEX,2BAA2B;IAC3B,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAEtD,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAChE,IAAI,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,SAAiB,EACjB,QAAkB,EAClB,cAAoC,kBAAkB;IAEtD,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,WAAqB;IAC/C,OAAO,WAAW,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,KAAmB,EACnB,KAAa,EACb,SAAiB,EACjB,OAAe,EACf,UAAmB;IAEnB,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IACzC,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;IACjD,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IAE3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,4BAA4B,CACnC,KAAa,EACb,SAAiB,EACjB,OAAe,EACf,UAAkB,EAClB,SAAiB;IAEjB,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,wCAAwC;YACjD,OAAO,EAAE;gBACP,KAAK;gBACL,SAAS;gBACT,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;gBAC/C,UAAU;aACX;YACD,UAAU;SACX;QACD,IAAI,EAAE;YACJ,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAClC,QAAgB,EAChB,MAAc,EACd,KAAa,EACb,EAAU;IAEV,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,MAAM,CAAC;YACxB,QAAQ;YACR,SAAS,EAAE,8BAA8B;YACzC,KAAK,EAAE;gBACL,IAAI,EAAE,SAAS;gBACf,EAAE,EAAE,MAAM;gBACV,EAAE;aACH;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,KAAK;aACV;YACD,MAAM,EAAE,mBAAmB;YAC3B,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE;gBACR,KAAK;gBACL,YAAY,EAAE,oBAAoB;aACnC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,0CAA0C,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAOtC;IACC,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,eAAe,CAAC;IAClD,MAAM,WAAW,GAAG,EAAE,GAAG,kBAAkB,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,CAAC;IAEvE,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;QAC1C,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QAEvC,uBAAuB;QACvB,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,kCAAkC;QAClC,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,0CAA0C;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QAE/C,oBAAoB;QACpB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAE7E,8BAA8B;QAC9B,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAElD,OAAO,MAAM,CAAC,eAAe,CAC3B,yBAAyB,EACzB;YACE,IAAI,EAAE,QAAQ,CAAC,QAAQ;YACvB,UAAU,EAAE;gBACV,iBAAiB,EAAE,OAAO;gBAC1B,kBAAkB,EAAE,MAAM;gBAC1B,oBAAoB,EAAE,QAAQ;gBAC9B,qBAAqB,EAAE,SAAS;gBAChC,YAAY,EAAE,SAAS;gBACvB,GAAG,CAAC,YAAY,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;aAC1D;SACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,IAAI,CAAC;gBACH,uCAAuC;gBACvC,IAAI,SAAS,EAAE,CAAC;oBACd,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;oBAE9C,6BAA6B;oBAC7B,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,qBAAqB,CACzB,QAAQ,EACR,MAAM,EACN,OAAO,EACP,eAAe,CAAC,OAAO,CAAC,CACzB,CAAC;oBACJ,CAAC;oBAED,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EACrC,wCAAwC,CACzC,CAAC;oBAEF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;oBACX,OAAO;gBACT,CAAC;gBAED,+CAA+C;gBAC/C,MAAM,cAAc,GAAG,uBAAuB,CAC5C,WAAW,CAAC,GAAG,EACf,QAAQ,EACR,WAAW,CACZ,CAAC;gBAEF,mBAAmB;gBACnB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CACxB,MAAM,EACN,OAAO,EACP,cAAc,EACd,WAAW,CAAC,aAAa,CAC1B,CAAC;gBAEF,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;gBACrD,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvD,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3D,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBAEvD,yBAAyB;gBACzB,mBAAmB,CACjB,KAAK,EACL,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CACnD,CAAC;gBAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;oBAC/E,IAAI,CAAC,GAAG,EAAE,CAAC;oBAEX,MAAM,CAAC,IAAI,CACT;wBACE,SAAS;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK,EAAE,OAAO;wBACd,KAAK,EAAE,cAAc;wBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,UAAU,EAAE,MAAM,CAAC,cAAc;qBAClC,EACD,qBAAqB,CACtB,CAAC;oBAEF,MAAM,QAAQ,GAAG,4BAA4B,CAC3C,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,cAAc,EACrB,SAAS,CACV,CAAC;oBAEF,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACjC,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;gBACnF,IAAI,CAAC,eAAe,CAAC,KAAc,CAAC,CAAC;gBACrC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAEX,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC;gBAEtE,+CAA+C;gBAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,8DAA8D,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA+B,EAC/B,OAKC;IAED,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;IACtC,MAAM,WAAW,GAAG,EAAE,GAAG,kBAAkB,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,CAAC;IAEvE,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAE9G,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAElD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YACxF,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAEvF,mBAAmB,CACjB,KAAK,EACL,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CACnD,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,EAC3E,qBAAqB,CACtB,CAAC;YAEF,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CACpB,4BAA4B,CAC1B,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,cAAc,EACrB,SAAS,CACV,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,qCAAqC;AACrC,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAuB;IAUvB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;IAEtC,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,+CAA+C;IAC/C,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAChE,MAAM,cAAc,GAAG,uBAAuB,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QAE3D,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,QAAQ;gBACR,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,sCAAsC;YACtC,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,cAAc;gBACrB,SAAS,EAAE,cAAc;gBACzB,OAAO,EAAE,CAAC;gBACV,cAAc,EAAE,CAAC;gBACjB,QAAQ;gBACR,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE;YACJ,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,QAAQ;YACd,SAAS;SACV;QACD,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE;KAC7B,CAAC;AACJ,CAAC;AAkBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,qBAAqB,GAAgD,KAAK,EAC9E,MAAuB,EACvB,OAAgC,EAChC,EAAE;IACF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAE3F,MAAM,IAAI,GAAG,CAAC,OAAuB,EAAW,EAAE;QAChD,gCAAgC;QAChC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC;QAC/D,IAAI,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,gCAAgC;QAChC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,wBAAwB;IACxB,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;QACjD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,IAAI;KACL,CAAC,CAAC;IAEH,iCAAiC;IACjC,MAAM,CAAC,QAAQ,CAAC,8BAA8B,EAAE,mBAAmB,CAAC,CAAC;IACrE,MAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;IAC1E,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,kBAAkB,CAAC,CAAC;IAEhE,kBAAkB;IAClB,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAElD,sCAAsC;IACtC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAChF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,iCAAiC,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,sCAAsC;iBAChD;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QACnC,uBAAuB,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CACT;QACE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,MAAM;QACvE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;KACjC,EACD,6CAA6C,CAC9C,CAAC;AACJ,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,qBAAqB,EAAE;IACxD,IAAI,EAAE,oBAAoB;IAC1B,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAWH,eAAe,gBAAgB,CAAC"}

package/dist/api/middleware/rateLimit.d.ts

@@ -0,0 +1,165 @@
+/**
+ * Rate Limiting Middleware
+ *
+ * Provides configurable per-tenant and per-endpoint rate limiting with
+ * graceful degradation, rate limit headers, and OpenTelemetry tracing.
+ *
+ * @packageDocumentation
+ */
+import type { FastifyRequest, FastifyReply, FastifyInstance } from 'fastify';
+/** Type for preHandler hook function */
+type PreHandlerFn = (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+/**
+ * Rate limit configuration for an endpoint
+ */
+export interface RateLimitConfig {
+    /** Maximum requests allowed in the window */
+    limit: number;
+    /** Time window in seconds */
+    windowSeconds: number;
+    /** Optional burst limit (max requests per second) */
+    burstLimit?: number;
+    /** Skip rate limiting for certain conditions */
+    skip?: (request: FastifyRequest) => boolean;
+    /** Custom key generator for rate limiting (default: tenantId) */
+    keyGenerator?: (request: FastifyRequest) => string | null;
+    /** Custom error message */
+    errorMessage?: string;
+    /** Enable graceful degradation (allow requests when rate limiter fails) */
+    gracefulDegradation?: boolean;
+}
+/**
+ * Per-tenant rate limit configuration
+ */
+export interface TenantRateLimitConfig extends RateLimitConfig {
+    /** Per-tenant limit overrides */
+    tenantOverrides?: Record<string, Partial<RateLimitConfig>>;
+}
+/**
+ * Rate limit result
+ */
+export interface RateLimitResult {
+    /** Whether the request is allowed */
+    allowed: boolean;
+    /** Current request count in window */
+    current: number;
+    /** Maximum requests allowed */
+    limit: number;
+    /** Remaining requests in window */
+    remaining: number;
+    /** Seconds until window resets */
+    resetInSeconds: number;
+    /** Unix timestamp when window resets */
+    resetAt: number;
+    /** Retry-After value in seconds (only if not allowed) */
+    retryAfter?: number;
+}
+/**
+ * In-memory rate limit store
+ *
+ * For production use with multiple instances, use Redis-backed store.
+ */
+declare class InMemoryRateLimitStore {
+    private windows;
+    private cleanupInterval;
+    constructor();
+    /**
+     * Check and increment rate limit counter
+     */
+    check(key: string, limit: number, windowSeconds: number): RateLimitResult;
+    /**
+     * Get current state without incrementing
+     */
+    peek(key: string, limit: number): RateLimitResult | null;
+    /**
+     * Reset rate limit for a key
+     */
+    reset(key: string): void;
+    /**
+     * Reset all rate limits for a tenant (matches keys starting with tenantId)
+     */
+    resetTenant(tenantId: string): void;
+    /**
+     * Cleanup expired entries
+     */
+    private cleanup;
+    /**
+     * Get store statistics
+     */
+    getStats(): {
+        activeKeys: number;
+        totalRequests: number;
+    };
+    /**
+     * Stop the cleanup timer
+     */
+    stop(): void;
+}
+/**
+ * Get or create the global rate limit store
+ */
+export declare function getRateLimitStore(): InMemoryRateLimitStore;
+/**
+ * Reset the global rate limit store (for testing)
+ */
+export declare function resetRateLimitStore(): void;
+/**
+ * Create rate limiting middleware for an endpoint
+ *
+ * @param config - Rate limit configuration
+ * @returns Fastify preHandler hook
+ *
+ * @example
+ * ```typescript
+ * // Basic rate limiting
+ * server.post('/api/data', {
+ *   preHandler: rateLimit({ limit: 100, windowSeconds: 60 }),
+ * }, handler);
+ *
+ * // With per-tenant limits
+ * server.post('/api/data', {
+ *   preHandler: rateLimitPerTenant({
+ *     limit: 100,
+ *     windowSeconds: 60,
+ *     tenantOverrides: {
+ *       'enterprise-tenant': { limit: 1000 },
+ *     },
+ *   }),
+ * }, handler);
+ * ```
+ */
+export declare function rateLimit(config: RateLimitConfig): PreHandlerFn;
+/**
+ * Create per-tenant rate limiting middleware
+ *
+ * @param config - Per-tenant rate limit configuration
+ * @returns Fastify preHandler hook
+ */
+export declare function rateLimitPerTenant(config: TenantRateLimitConfig): PreHandlerFn;
+/**
+ * Create endpoint-specific rate limiter with different limits per method
+ *
+ * @param configs - Configuration per HTTP method
+ * @returns Fastify preHandler hook
+ */
+export declare function rateLimitByMethod(configs: Partial<Record<'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE', RateLimitConfig>>): PreHandlerFn;
+/**
+ * Register rate limiting plugin for Fastify
+ *
+ * @param server - Fastify instance
+ * @param defaultConfig - Default rate limit configuration
+ */
+export declare function registerRateLimitPlugin(server: FastifyInstance, defaultConfig?: RateLimitConfig): Promise<void>;
+/**
+ * Get rate limit statistics
+ */
+export declare function getRateLimitStats(): {
+    activeKeys: number;
+    totalRequests: number;
+};
+/**
+ * Reset rate limit for a specific tenant
+ */
+export declare function resetTenantRateLimit(tenantId: string): void;
+export {};
+//# sourceMappingURL=rateLimit.d.ts.map

package/dist/api/middleware/rateLimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.d.ts","sourceRoot":"","sources":["../../../src/api/middleware/rateLimit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE7E,wCAAwC;AACxC,KAAK,YAAY,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AASpF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC;IAC5C,iEAAiE;IACjE,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,GAAG,IAAI,CAAC;IAC1D,2BAA2B;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAsB,SAAQ,eAAe;IAC5D,iCAAiC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;CAC5D;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAUD;;;;GAIG;AACH,cAAM,sBAAsB;IAC1B,OAAO,CAAC,OAAO,CAAuC;IACtD,OAAO,CAAC,eAAe,CAA+B;;IAQtD;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,eAAe;IAkCzE;;OAEG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAoBxD;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIxB;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQnC;;OAEG;IACH,OAAO,CAAC,OAAO;IASf;;OAEG;IACH,QAAQ,IAAI;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE;IAWzD;;OAEG;IACH,IAAI,IAAI,IAAI;CAMb;AAKD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,sBAAsB,CAK1D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAK1C;AAoED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,CA+E/D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,GAAG,YAAY,CAqJ9E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,EAAE,eAAe,CAAC,CAAC,GACrF,YAAY,CAad;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,eAAe,EACvB,aAAa,GAAE,eAAmD,GACjE,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAEjF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAG3D"}

package/dist/api/middleware/rateLimit.js

@@ -0,0 +1,477 @@
+/**
+ * Rate Limiting Middleware
+ *
+ * Provides configurable per-tenant and per-endpoint rate limiting with
+ * graceful degradation, rate limit headers, and OpenTelemetry tracing.
+ *
+ * @packageDocumentation
+ */
+import { trace, SpanStatusCode, SpanKind } from '@opentelemetry/api';
+import { createLogger } from '../../common/logger.js';
+import { getTraceContext } from '../../common/trace.js';
+const logger = createLogger({ component: 'api-rate-limit' });
+const tracer = trace.getTracer('vorion-api-rate-limit');
+/**
+ * In-memory rate limit store
+ *
+ * For production use with multiple instances, use Redis-backed store.
+ */
+class InMemoryRateLimitStore {
+    windows = new Map();
+    cleanupInterval = null;
+    constructor() {
+        // Cleanup stale entries every minute
+        this.cleanupInterval = setInterval(() => this.cleanup(), 60000);
+        this.cleanupInterval.unref();
+    }
+    /**
+     * Check and increment rate limit counter
+     */
+    check(key, limit, windowSeconds) {
+        const now = Date.now();
+        const windowMs = windowSeconds * 1000;
+        const resetAt = now + windowMs;
+        let entry = this.windows.get(key);
+        // Reset if window expired
+        if (!entry || now >= entry.resetAt) {
+            entry = { count: 0, resetAt };
+            this.windows.set(key, entry);
+        }
+        const current = entry.count;
+        const remaining = Math.max(0, limit - current - 1);
+        const allowed = current < limit;
+        if (allowed) {
+            entry.count++;
+        }
+        const resetInSeconds = Math.ceil((entry.resetAt - now) / 1000);
+        return {
+            allowed,
+            current: entry.count,
+            limit,
+            remaining: allowed ? remaining : 0,
+            resetInSeconds,
+            resetAt: Math.ceil(entry.resetAt / 1000),
+            retryAfter: allowed ? undefined : resetInSeconds,
+        };
+    }
+    /**
+     * Get current state without incrementing
+     */
+    peek(key, limit) {
+        const entry = this.windows.get(key);
+        if (!entry)
+            return null;
+        const now = Date.now();
+        if (now >= entry.resetAt)
+            return null;
+        const remaining = Math.max(0, limit - entry.count);
+        const resetInSeconds = Math.ceil((entry.resetAt - now) / 1000);
+        return {
+            allowed: entry.count < limit,
+            current: entry.count,
+            limit,
+            remaining,
+            resetInSeconds,
+            resetAt: Math.ceil(entry.resetAt / 1000),
+        };
+    }
+    /**
+     * Reset rate limit for a key
+     */
+    reset(key) {
+        this.windows.delete(key);
+    }
+    /**
+     * Reset all rate limits for a tenant (matches keys starting with tenantId)
+     */
+    resetTenant(tenantId) {
+        for (const key of this.windows.keys()) {
+            if (key.startsWith(`${tenantId}:`)) {
+                this.windows.delete(key);
+            }
+        }
+    }
+    /**
+     * Cleanup expired entries
+     */
+    cleanup() {
+        const now = Date.now();
+        for (const [key, entry] of this.windows.entries()) {
+            if (now >= entry.resetAt) {
+                this.windows.delete(key);
+            }
+        }
+    }
+    /**
+     * Get store statistics
+     */
+    getStats() {
+        let totalRequests = 0;
+        for (const entry of this.windows.values()) {
+            totalRequests += entry.count;
+        }
+        return {
+            activeKeys: this.windows.size,
+            totalRequests,
+        };
+    }
+    /**
+     * Stop the cleanup timer
+     */
+    stop() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+        }
+    }
+}
+// Global rate limit store instance
+let globalStore = null;
+/**
+ * Get or create the global rate limit store
+ */
+export function getRateLimitStore() {
+    if (!globalStore) {
+        globalStore = new InMemoryRateLimitStore();
+    }
+    return globalStore;
+}
+/**
+ * Reset the global rate limit store (for testing)
+ */
+export function resetRateLimitStore() {
+    if (globalStore) {
+        globalStore.stop();
+        globalStore = null;
+    }
+}
+/**
+ * Set rate limit response headers
+ */
+function setRateLimitHeaders(reply, result) {
+    reply.header('X-RateLimit-Limit', result.limit);
+    reply.header('X-RateLimit-Remaining', result.remaining);
+    reply.header('X-RateLimit-Reset', result.resetAt);
+    if (result.retryAfter !== undefined) {
+        reply.header('Retry-After', result.retryAfter);
+    }
+}
+/**
+ * Create rate limit error response
+ */
+function createRateLimitErrorResponse(result, requestId, customMessage) {
+    return {
+        success: false,
+        error: {
+            code: 'RATE_LIMIT_EXCEEDED',
+            message: customMessage ?? 'Too many requests. Please retry later.',
+            details: {
+                limit: result.limit,
+                remaining: result.remaining,
+                resetAt: new Date(result.resetAt * 1000).toISOString(),
+                retryAfter: result.retryAfter,
+            },
+            retryAfter: result.retryAfter,
+        },
+        meta: {
+            requestId,
+            timestamp: new Date().toISOString(),
+        },
+    };
+}
+/**
+ * Extract tenant ID from request
+ */
+function extractTenantId(request) {
+    // Try to get from JWT payload
+    const user = request.user;
+    if (user?.tenantId) {
+        return user.tenantId;
+    }
+    // Try to get from auth decorator
+    const auth = request.auth;
+    if (auth?.tenantId) {
+        return auth.tenantId;
+    }
+    // Try to get from header
+    const headerTenantId = request.headers['x-tenant-id'];
+    if (typeof headerTenantId === 'string') {
+        return headerTenantId;
+    }
+    return null;
+}
+/**
+ * Create rate limiting middleware for an endpoint
+ *
+ * @param config - Rate limit configuration
+ * @returns Fastify preHandler hook
+ *
+ * @example
+ * ```typescript
+ * // Basic rate limiting
+ * server.post('/api/data', {
+ *   preHandler: rateLimit({ limit: 100, windowSeconds: 60 }),
+ * }, handler);
+ *
+ * // With per-tenant limits
+ * server.post('/api/data', {
+ *   preHandler: rateLimitPerTenant({
+ *     limit: 100,
+ *     windowSeconds: 60,
+ *     tenantOverrides: {
+ *       'enterprise-tenant': { limit: 1000 },
+ *     },
+ *   }),
+ * }, handler);
+ * ```
+ */
+export function rateLimit(config) {
+    const store = getRateLimitStore();
+    return async (request, reply) => {
+        const requestId = request.id || 'unknown';
+        const traceContext = getTraceContext();
+        // Check skip condition
+        if (config.skip?.(request)) {
+            return;
+        }
+        // Generate rate limit key
+        const customKey = config.keyGenerator?.(request);
+        const key = customKey ?? `global:${request.routeOptions?.url ?? request.url}`;
+        return tracer.startActiveSpan('rateLimit.check', {
+            kind: SpanKind.INTERNAL,
+            attributes: {
+                'rateLimit.key': key,
+                'rateLimit.limit': config.limit,
+                'rateLimit.windowSeconds': config.windowSeconds,
+                'request.id': requestId,
+                ...(traceContext && { 'trace.id': traceContext.traceId }),
+            },
+        }, async (span) => {
+            try {
+                const result = store.check(key, config.limit, config.windowSeconds);
+                span.setAttribute('rateLimit.current', result.current);
+                span.setAttribute('rateLimit.remaining', result.remaining);
+                span.setAttribute('rateLimit.allowed', result.allowed);
+                // Always set rate limit headers
+                setRateLimitHeaders(reply, result);
+                if (!result.allowed) {
+                    span.setStatus({ code: SpanStatusCode.ERROR, message: 'Rate limit exceeded' });
+                    span.end();
+                    logger.warn({
+                        requestId,
+                        key,
+                        limit: config.limit,
+                        current: result.current,
+                        retryAfter: result.retryAfter,
+                    }, 'Rate limit exceeded');
+                    const response = createRateLimitErrorResponse(result, requestId, config.errorMessage);
+                    reply.status(429).send(response);
+                    return;
+                }
+                span.setStatus({ code: SpanStatusCode.OK });
+                span.end();
+            }
+            catch (error) {
+                span.setStatus({ code: SpanStatusCode.ERROR, message: 'Rate limit check failed' });
+                span.recordException(error);
+                span.end();
+                logger.error({ error, requestId, key }, 'Rate limit check failed');
+                // Graceful degradation: allow request if rate limiter fails
+                if (config.gracefulDegradation !== false) {
+                    logger.warn({ requestId, key }, 'Rate limiter failed, allowing request (graceful degradation)');
+                    return;
+                }
+                throw error;
+            }
+        });
+    };
+}
+/**
+ * Create per-tenant rate limiting middleware
+ *
+ * @param config - Per-tenant rate limit configuration
+ * @returns Fastify preHandler hook
+ */
+export function rateLimitPerTenant(config) {
+    const store = getRateLimitStore();
+    return async (request, reply) => {
+        const requestId = request.id || 'unknown';
+        const traceContext = getTraceContext();
+        // Check skip condition
+        if (config.skip?.(request)) {
+            return;
+        }
+        // Extract tenant ID
+        const tenantId = extractTenantId(request);
+        // If no tenant ID, use global limit or skip
+        if (!tenantId) {
+            // For unauthenticated requests, apply a stricter limit
+            const key = `anonymous:${request.ip}:${request.routeOptions?.url ?? request.url}`;
+            return tracer.startActiveSpan('rateLimit.checkAnonymous', {
+                kind: SpanKind.INTERNAL,
+                attributes: {
+                    'rateLimit.key': key,
+                    'rateLimit.type': 'anonymous',
+                    'request.id': requestId,
+                },
+            }, async (span) => {
+                try {
+                    // Use half the normal limit for anonymous requests
+                    const anonymousLimit = Math.ceil(config.limit / 2);
+                    const result = store.check(key, anonymousLimit, config.windowSeconds);
+                    span.setAttribute('rateLimit.current', result.current);
+                    span.setAttribute('rateLimit.remaining', result.remaining);
+                    span.setAttribute('rateLimit.allowed', result.allowed);
+                    setRateLimitHeaders(reply, result);
+                    if (!result.allowed) {
+                        span.setStatus({ code: SpanStatusCode.ERROR, message: 'Rate limit exceeded' });
+                        span.end();
+                        const response = createRateLimitErrorResponse(result, requestId, config.errorMessage);
+                        reply.status(429).send(response);
+                        return;
+                    }
+                    span.setStatus({ code: SpanStatusCode.OK });
+                    span.end();
+                }
+                catch (error) {
+                    span.setStatus({ code: SpanStatusCode.ERROR, message: 'Rate limit check failed' });
+                    span.recordException(error);
+                    span.end();
+                    if (config.gracefulDegradation !== false) {
+                        return;
+                    }
+                    throw error;
+                }
+            });
+        }
+        // Get tenant-specific limits
+        const tenantOverride = config.tenantOverrides?.[tenantId];
+        const effectiveLimit = tenantOverride?.limit ?? config.limit;
+        const effectiveWindow = tenantOverride?.windowSeconds ?? config.windowSeconds;
+        // Generate tenant-scoped key
+        const customKey = config.keyGenerator?.(request);
+        const endpoint = request.routeOptions?.url ?? request.url;
+        const key = customKey ?? `tenant:${tenantId}:${endpoint}`;
+        return tracer.startActiveSpan('rateLimit.checkTenant', {
+            kind: SpanKind.INTERNAL,
+            attributes: {
+                'rateLimit.key': key,
+                'rateLimit.type': 'tenant',
+                'rateLimit.tenantId': tenantId,
+                'rateLimit.limit': effectiveLimit,
+                'rateLimit.windowSeconds': effectiveWindow,
+                'request.id': requestId,
+                ...(traceContext && { 'trace.id': traceContext.traceId }),
+            },
+        }, async (span) => {
+            try {
+                const result = store.check(key, effectiveLimit, effectiveWindow);
+                span.setAttribute('rateLimit.current', result.current);
+                span.setAttribute('rateLimit.remaining', result.remaining);
+                span.setAttribute('rateLimit.allowed', result.allowed);
+                // Add tenant-specific headers
+                reply.header('X-RateLimit-Limit', result.limit);
+                reply.header('X-RateLimit-Remaining', result.remaining);
+                reply.header('X-RateLimit-Reset', result.resetAt);
+                reply.header('X-RateLimit-Tenant', tenantId);
+                if (result.retryAfter !== undefined) {
+                    reply.header('Retry-After', result.retryAfter);
+                }
+                if (!result.allowed) {
+                    span.setStatus({ code: SpanStatusCode.ERROR, message: 'Tenant rate limit exceeded' });
+                    span.end();
+                    logger.warn({
+                        requestId,
+                        tenantId,
+                        key,
+                        limit: effectiveLimit,
+                        current: result.current,
+                        retryAfter: result.retryAfter,
+                    }, 'Tenant rate limit exceeded');
+                    const response = createRateLimitErrorResponse(result, requestId, config.errorMessage);
+                    reply.status(429).send(response);
+                    return;
+                }
+                span.setStatus({ code: SpanStatusCode.OK });
+                span.end();
+            }
+            catch (error) {
+                span.setStatus({ code: SpanStatusCode.ERROR, message: 'Rate limit check failed' });
+                span.recordException(error);
+                span.end();
+                logger.error({ error, requestId, tenantId, key }, 'Tenant rate limit check failed');
+                if (config.gracefulDegradation !== false) {
+                    logger.warn({ requestId, tenantId }, 'Rate limiter failed, allowing request (graceful degradation)');
+                    return;
+                }
+                throw error;
+            }
+        });
+    };
+}
+/**
+ * Create endpoint-specific rate limiter with different limits per method
+ *
+ * @param configs - Configuration per HTTP method
+ * @returns Fastify preHandler hook
+ */
+export function rateLimitByMethod(configs) {
+    return async (request, reply) => {
+        const method = request.method;
+        const config = configs[method];
+        if (!config) {
+            // No rate limit configured for this method
+            return;
+        }
+        const middleware = rateLimit(config);
+        return middleware(request, reply);
+    };
+}
+/**
+ * Register rate limiting plugin for Fastify
+ *
+ * @param server - Fastify instance
+ * @param defaultConfig - Default rate limit configuration
+ */
+export async function registerRateLimitPlugin(server, defaultConfig = { limit: 100, windowSeconds: 60 }) {
+    // Create factory functions for rate limiting
+    const createRateLimiter = (config) => rateLimit({ ...defaultConfig, ...config });
+    const createTenantRateLimiter = (config) => rateLimitPerTenant({ ...defaultConfig, ...config });
+    // Decorate server with rate limit helpers
+    server.decorate('vorionRateLimit', createRateLimiter);
+    server.decorate('vorionRateLimitPerTenant', createTenantRateLimiter);
+    // Add global hook for overall API rate limiting
+    server.addHook('onRequest', async (request, reply) => {
+        // Skip health check endpoints
+        if (request.url === '/health' || request.url === '/ready' || request.url === '/metrics') {
+            return;
+        }
+        const tenantId = extractTenantId(request);
+        if (!tenantId)
+            return;
+        const store = getRateLimitStore();
+        const globalKey = `global:${tenantId}`;
+        // Check global tenant limit (e.g., 10000 requests per hour)
+        const result = store.check(globalKey, 10000, 3600);
+        if (!result.allowed) {
+            logger.warn({ tenantId, current: result.current }, 'Global tenant rate limit exceeded');
+            setRateLimitHeaders(reply, result);
+            reply.status(429).send(createRateLimitErrorResponse(result, request.id, 'Global rate limit exceeded for tenant'));
+        }
+    });
+    logger.info({ defaultLimit: defaultConfig.limit, defaultWindow: defaultConfig.windowSeconds }, 'Rate limit plugin registered');
+}
+/**
+ * Get rate limit statistics
+ */
+export function getRateLimitStats() {
+    return getRateLimitStore().getStats();
+}
+/**
+ * Reset rate limit for a specific tenant
+ */
+export function resetTenantRateLimit(tenantId) {
+    getRateLimitStore().resetTenant(tenantId);
+    logger.info({ tenantId }, 'Tenant rate limits reset');
+}
+//# sourceMappingURL=rateLimit.js.map