@xtr-dev/rondevu-server 0.5.7 → 0.5.9

package/dist/index.js

@@ -2271,7 +2271,7 @@ var import_cors = require("hono/cors");
 // src/rpc.ts
 init_crypto();
 var MAX_PAGE_SIZE = 100;
-var CREDENTIAL_RATE_WINDOW = 60 * 60 * 1e3;
+var CREDENTIAL_RATE_WINDOW = 1e3;
 var REQUEST_RATE_WINDOW = 1e3;
 function getJsonDepth(obj, maxDepth, currentDepth = 0) {
   if (obj === null || typeof obj !== "object") {
@@ -2386,7 +2386,7 @@ var handlers = {
       rateLimit = 2;
     } else {
       rateLimitKey = `cred_gen:${request.clientIp}`;
-      rateLimit = config.credentialsPerIpPerHour;
+      rateLimit = config.credentialsPerIpPerSecond;
     }
     const allowed = await storage.checkRateLimit(
       rateLimitKey,
@@ -2396,7 +2396,7 @@ var handlers = {
     if (!allowed) {
       throw new RpcError(
         ErrorCodes.RATE_LIMIT_EXCEEDED,
-        `Rate limit exceeded. Maximum ${rateLimit} credentials per hour${request.clientIp ? " per IP" : " (global limit for unidentified IPs)"}.`
+        `Rate limit exceeded. Maximum ${rateLimit} credentials per second${request.clientIp ? " per IP" : " (global limit for unidentified IPs)"}.`
       );
     }
     if (params.name !== void 0) {
@@ -3018,6 +3018,20 @@ function createApp(storage, config) {
 }
 
 // src/config.ts
+var import_fs = require("fs");
+var import_path = require("path");
+var import_url = require("url");
+var import_meta = {};
+function getPackageVersion() {
+  try {
+    const __dirname = (0, import_path.dirname)((0, import_url.fileURLToPath)(import_meta.url));
+    const pkgPath = (0, import_path.join)(__dirname, "..", "package.json");
+    const pkg = JSON.parse((0, import_fs.readFileSync)(pkgPath, "utf-8"));
+    return pkg.version || "unknown";
+  } catch {
+    return "unknown";
+  }
+}
 function loadConfig() {
   let masterEncryptionKey = process.env.MASTER_ENCRYPTION_KEY;
   if (!masterEncryptionKey) {
@@ -3052,7 +3066,7 @@ function loadConfig() {
     databaseUrl: process.env.DATABASE_URL || "",
     dbPoolSize: parsePositiveInt(process.env.DB_POOL_SIZE, "10", "DB_POOL_SIZE", 1),
     corsOrigins: process.env.CORS_ORIGINS ? process.env.CORS_ORIGINS.split(",").map((o) => o.trim()) : ["*"],
-    version: process.env.VERSION || "unknown",
+    version: process.env.VERSION || getPackageVersion(),
     offerDefaultTtl: parsePositiveInt(process.env.OFFER_DEFAULT_TTL, "60000", "OFFER_DEFAULT_TTL", 1e3),
     offerMaxTtl: parsePositiveInt(process.env.OFFER_MAX_TTL, "86400000", "OFFER_MAX_TTL", 1e3),
     offerMinTtl: parsePositiveInt(process.env.OFFER_MIN_TTL, "60000", "OFFER_MIN_TTL", 1e3),
@@ -3076,7 +3090,7 @@ function loadConfig() {
     maxTotalOffers: parsePositiveInt(process.env.MAX_TOTAL_OFFERS, "10000", "MAX_TOTAL_OFFERS", 1),
     maxTotalCredentials: parsePositiveInt(process.env.MAX_TOTAL_CREDENTIALS, "50000", "MAX_TOTAL_CREDENTIALS", 1),
     maxIceCandidatesPerOffer: parsePositiveInt(process.env.MAX_ICE_CANDIDATES_PER_OFFER, "50", "MAX_ICE_CANDIDATES_PER_OFFER", 1),
-    credentialsPerIpPerHour: parsePositiveInt(process.env.CREDENTIALS_PER_IP_PER_HOUR, "10", "CREDENTIALS_PER_IP_PER_HOUR", 1),
+    credentialsPerIpPerSecond: parsePositiveInt(process.env.CREDENTIALS_PER_IP_PER_SECOND, "5", "CREDENTIALS_PER_IP_PER_SECOND", 1),
     requestsPerIpPerSecond: parsePositiveInt(process.env.REQUESTS_PER_IP_PER_SECOND, "50", "REQUESTS_PER_IP_PER_SECOND", 1)
   };
   return config;
@@ -3096,11 +3110,11 @@ var CONFIG_DEFAULTS = {
   timestampMaxAge: 6e4,
   timestampMaxFuture: 6e4,
   // Resource limits
-  maxOffersPerUser: 20,
-  maxTotalOffers: 1e4,
+  maxOffersPerUser: 1e3,
+  maxTotalOffers: 1e5,
   maxTotalCredentials: 5e4,
   maxIceCandidatesPerOffer: 50,
-  credentialsPerIpPerHour: 10,
+  credentialsPerIpPerSecond: 5,
   requestsPerIpPerSecond: 50
 };
 async function runCleanup(storage, now) {