@xyph3r/rate-limiter 0.1.0

package/dist/stores/memory-store.js

@@ -0,0 +1,24 @@
+export class MemoryStore {
+    entries = new Map();
+    async consume(key, strategy, context) {
+        this.pruneExpired(key, context.now);
+        const current = this.entries.get(key);
+        const snapshot = strategy.evaluate(current?.state, context);
+        const expiresAt = context.now + snapshot.ttlMs;
+        this.entries.set(key, {
+            expiresAt,
+            state: snapshot.state,
+        });
+        return snapshot;
+    }
+    async reset(key) {
+        this.entries.delete(key);
+    }
+    pruneExpired(key, now) {
+        const current = this.entries.get(key);
+        if (current && current.expiresAt <= now) {
+            this.entries.delete(key);
+        }
+    }
+}
+//# sourceMappingURL=memory-store.js.map

package/dist/stores/memory-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.js","sourceRoot":"","sources":["../../src/stores/memory-store.ts"],"names":[],"mappings":"AAYA,MAAM,OAAO,WAAW;IACL,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IAEnE,KAAK,CAAC,OAAO,CACX,GAAW,EACX,QAAmC,EACnC,OAAiC;QAEjC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAoC,CAAC;QACzE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC;QAE/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACpB,SAAS;YACT,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAEO,YAAY,CAAC,GAAW,EAAE,GAAW;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;CACF"}

package/dist/stores/rate-limit-store.d.ts

@@ -0,0 +1,6 @@
+import type { RateLimitStrategy, StrategyExecutionContext, StrategyExecutionSnapshot } from "../types.js";
+export interface RateLimitStore {
+    consume<TState>(key: string, strategy: RateLimitStrategy<TState>, context: StrategyExecutionContext): Promise<StrategyExecutionSnapshot<TState>>;
+    reset(key: string): Promise<void>;
+}
+//# sourceMappingURL=rate-limit-store.d.ts.map

package/dist/stores/rate-limit-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-store.d.ts","sourceRoot":"","sources":["../../src/stores/rate-limit-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC"}

package/dist/stores/rate-limit-store.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rate-limit-store.js.map

package/dist/stores/rate-limit-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit-store.js","sourceRoot":"","sources":["../../src/stores/rate-limit-store.ts"],"names":[],"mappings":""}

package/dist/stores/redis-store.d.ts

@@ -0,0 +1,26 @@
+import type { RateLimitStrategy, StrategyExecutionContext, StrategyExecutionSnapshot } from "../types.js";
+import type { RateLimitStore } from "./rate-limit-store.js";
+export interface RedisCommandExecutor {
+    del(key: string): Promise<void>;
+    eval(script: string, key: string, args: string[]): Promise<unknown>;
+}
+export interface NodeRedisLikeClient {
+    del(key: string): Promise<unknown>;
+    eval(script: string, options: {
+        keys: string[];
+        arguments: string[];
+    }): Promise<unknown>;
+}
+export interface IORedisLikeClient {
+    del(key: string): Promise<unknown>;
+    eval(script: string, numKeys: number, ...args: string[]): Promise<unknown>;
+}
+export declare class RedisStore implements RateLimitStore {
+    private readonly executor;
+    constructor(executor: RedisCommandExecutor);
+    consume<TState>(key: string, strategy: RateLimitStrategy<TState>, context: StrategyExecutionContext): Promise<StrategyExecutionSnapshot<TState>>;
+    reset(key: string): Promise<void>;
+}
+export declare function createNodeRedisExecutor(client: NodeRedisLikeClient): RedisCommandExecutor;
+export declare function createIORedisExecutor(client: IORedisLikeClient): RedisCommandExecutor;
+//# sourceMappingURL=redis-store.d.ts.map

package/dist/stores/redis-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-store.d.ts","sourceRoot":"","sources":["../../src/stores/redis-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CACF,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAC/C,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5E;AAED,qBAAa,UAAW,YAAW,cAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,oBAAoB;IAErD,OAAO,CAAC,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,EACnC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAgBvC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGxC;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,mBAAmB,GAC1B,oBAAoB,CAYtB;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,GACxB,oBAAoB,CAStB"}

package/dist/stores/redis-store.js

@@ -0,0 +1,41 @@
+import { UnsupportedStoreError } from "../errors.js";
+export class RedisStore {
+    executor;
+    constructor(executor) {
+        this.executor = executor;
+    }
+    async consume(key, strategy, context) {
+        if (!strategy.redis) {
+            throw new UnsupportedStoreError(`Strategy "${strategy.kind}" does not provide a Redis program.`);
+        }
+        const raw = await this.executor.eval(strategy.redis.script, key, strategy.redis.getArgs(context));
+        return strategy.redis.parse(raw);
+    }
+    async reset(key) {
+        await this.executor.del(key);
+    }
+}
+export function createNodeRedisExecutor(client) {
+    return {
+        async del(key) {
+            await client.del(key);
+        },
+        async eval(script, key, args) {
+            return client.eval(script, {
+                keys: [key],
+                arguments: args,
+            });
+        },
+    };
+}
+export function createIORedisExecutor(client) {
+    return {
+        async del(key) {
+            await client.del(key);
+        },
+        async eval(script, key, args) {
+            return client.eval(script, 1, key, ...args);
+        },
+    };
+}
+//# sourceMappingURL=redis-store.js.map

package/dist/stores/redis-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-store.js","sourceRoot":"","sources":["../../src/stores/redis-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AA0BrD,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,QAA8B;QAA9B,aAAQ,GAAR,QAAQ,CAAsB;IAAG,CAAC;IAE/D,KAAK,CAAC,OAAO,CACX,GAAW,EACX,QAAmC,EACnC,OAAiC;QAEjC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,qBAAqB,CAC7B,aAAa,QAAQ,CAAC,IAAI,qCAAqC,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAClC,QAAQ,CAAC,KAAK,CAAC,MAAM,EACrB,GAAG,EACH,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAChC,CAAC;QAEF,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,UAAU,uBAAuB,CACrC,MAA2B;IAE3B,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAW;YACnB,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,GAAW,EAAE,IAAc;YACpD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;gBACzB,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAAyB;IAEzB,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,GAAW;YACnB,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,GAAW,EAAE,IAAc;YACpD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/strategies/sliding-window-strategy.d.ts

@@ -0,0 +1,31 @@
+import type { RateLimitStrategy, RedisStrategyProgram, StrategyExecutionContext, StrategyExecutionSnapshot } from "../types.js";
+export interface SlidingWindowConfig {
+    limit: number;
+    windowMs: number;
+}
+export interface SlidingWindowState {
+    currentCount: number;
+    currentWindowStart: number;
+    previousCount: number;
+    previousWindowStart: number;
+}
+/**
+ * Pattern: Strategy
+ * Problem: Sliding window and token bucket use materially different accounting logic.
+ * Solution: Both implement the same strategy contract, so the limiter delegates without branching.
+ * Trade-off: One extra layer of indirection; justified because these algorithms diverge quickly.
+ */
+export declare class SlidingWindowStrategy implements RateLimitStrategy<SlidingWindowState> {
+    readonly kind = "sliding-window";
+    readonly limit: number;
+    readonly policy: string;
+    readonly redis: RedisStrategyProgram<SlidingWindowState>;
+    private readonly windowMs;
+    constructor(config: SlidingWindowConfig);
+    initialState(now: number): SlidingWindowState;
+    evaluate(currentState: SlidingWindowState | undefined, context: StrategyExecutionContext): StrategyExecutionSnapshot<SlidingWindowState>;
+    private advanceState;
+    private calculateRetryAfterMs;
+    private getWindowStart;
+}
+//# sourceMappingURL=sliding-window-strategy.d.ts.map

package/dist/strategies/sliding-window-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sliding-window-strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/sliding-window-strategy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,qBAAa,qBACX,YAAW,iBAAiB,CAAC,kBAAkB,CAAC;IAEhD,QAAQ,CAAC,IAAI,oBAAoB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,MAAM,EAAE,mBAAmB;IAmBvC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB;IAU7C,QAAQ,CACN,YAAY,EAAE,kBAAkB,GAAG,SAAS,EAC5C,OAAO,EAAE,wBAAwB,GAChC,yBAAyB,CAAC,kBAAkB,CAAC;IAiChD,OAAO,CAAC,YAAY;IAyBpB,OAAO,CAAC,qBAAqB;IAoB7B,OAAO,CAAC,cAAc;CAGvB"}

package/dist/strategies/sliding-window-strategy.js

@@ -0,0 +1,212 @@
+import { RateLimiterConfigurationError } from "../errors.js";
+import { clamp, normalizeRawRedisResult, toWholeNumber } from "../utils/math.js";
+/**
+ * Pattern: Strategy
+ * Problem: Sliding window and token bucket use materially different accounting logic.
+ * Solution: Both implement the same strategy contract, so the limiter delegates without branching.
+ * Trade-off: One extra layer of indirection; justified because these algorithms diverge quickly.
+ */
+export class SlidingWindowStrategy {
+    kind = "sliding-window";
+    limit;
+    policy;
+    redis;
+    windowMs;
+    constructor(config) {
+        if (!Number.isFinite(config.limit) || config.limit <= 0) {
+            throw new RateLimiterConfigurationError("SlidingWindowStrategy requires a positive limit.");
+        }
+        if (!Number.isFinite(config.windowMs) || config.windowMs <= 0) {
+            throw new RateLimiterConfigurationError("SlidingWindowStrategy requires a positive windowMs.");
+        }
+        this.limit = Math.floor(config.limit);
+        this.windowMs = Math.floor(config.windowMs);
+        this.policy = `${this.limit};w=${Math.ceil(this.windowMs / 1000)}`;
+        this.redis = createSlidingWindowRedisProgram(this.limit, this.windowMs);
+    }
+    initialState(now) {
+        const windowStart = this.getWindowStart(now);
+        return {
+            currentCount: 0,
+            currentWindowStart: windowStart,
+            previousCount: 0,
+            previousWindowStart: windowStart - this.windowMs,
+        };
+    }
+    evaluate(currentState, context) {
+        const state = this.advanceState(currentState, context.now);
+        const elapsed = context.now - state.currentWindowStart;
+        const previousWeight = clamp((this.windowMs - elapsed) / this.windowMs, 0, 1);
+        const effectiveBefore = state.currentCount + state.previousCount * previousWeight;
+        const allowed = effectiveBefore + context.cost <= this.limit + 1e-9;
+        if (allowed) {
+            state.currentCount += context.cost;
+        }
+        const effectiveAfter = state.currentCount + state.previousCount * previousWeight;
+        const resetAt = state.currentWindowStart + this.windowMs;
+        return {
+            state,
+            allowed,
+            used: this.limit - toWholeNumber(this.limit - effectiveAfter),
+            remaining: toWholeNumber(this.limit - effectiveAfter),
+            resetAt,
+            retryAfterMs: allowed
+                ? 0
+                : this.calculateRetryAfterMs(state, context.cost, elapsed),
+            ttlMs: this.windowMs * 2,
+        };
+    }
+    advanceState(currentState, now) {
+        if (!currentState) {
+            return this.initialState(now);
+        }
+        const nextWindowStart = this.getWindowStart(now);
+        if (currentState.currentWindowStart === nextWindowStart) {
+            return { ...currentState };
+        }
+        if (currentState.currentWindowStart === nextWindowStart - this.windowMs) {
+            return {
+                currentCount: 0,
+                currentWindowStart: nextWindowStart,
+                previousCount: currentState.currentCount,
+                previousWindowStart: currentState.currentWindowStart,
+            };
+        }
+        return this.initialState(now);
+    }
+    calculateRetryAfterMs(state, cost, elapsed) {
+        const resetAt = state.currentWindowStart + this.windowMs;
+        if (state.currentCount + cost > this.limit || state.previousCount <= 0) {
+            return Math.max(1, resetAt - (state.currentWindowStart + elapsed));
+        }
+        const decayBudget = this.limit - cost - state.currentCount;
+        if (decayBudget < 0) {
+            return Math.max(1, resetAt - (state.currentWindowStart + elapsed));
+        }
+        const targetWeight = clamp(decayBudget / state.previousCount, 0, 1);
+        const targetElapsed = this.windowMs - targetWeight * this.windowMs;
+        return Math.max(1, Math.ceil(targetElapsed - elapsed));
+    }
+    getWindowStart(now) {
+        return Math.floor(now / this.windowMs) * this.windowMs;
+    }
+}
+function createSlidingWindowRedisProgram(limit, windowMs) {
+    const script = `
+local key = KEYS[1]
+local now = tonumber(ARGV[1])
+local cost = tonumber(ARGV[2])
+local limit = tonumber(ARGV[3])
+local windowMs = tonumber(ARGV[4])
+
+local raw = redis.call("GET", key)
+local state
+if raw then
+  state = cjson.decode(raw)
+else
+  local windowStart = math.floor(now / windowMs) * windowMs
+  state = {
+    currentCount = 0,
+    currentWindowStart = windowStart,
+    previousCount = 0,
+    previousWindowStart = windowStart - windowMs
+  }
+end
+
+local nextWindowStart = math.floor(now / windowMs) * windowMs
+if state.currentWindowStart ~= nextWindowStart then
+  if state.currentWindowStart == nextWindowStart - windowMs then
+    state = {
+      currentCount = 0,
+      currentWindowStart = nextWindowStart,
+      previousCount = state.currentCount,
+      previousWindowStart = state.currentWindowStart
+    }
+  else
+    state = {
+      currentCount = 0,
+      currentWindowStart = nextWindowStart,
+      previousCount = 0,
+      previousWindowStart = nextWindowStart - windowMs
+    }
+  end
+end
+
+local elapsed = now - state.currentWindowStart
+local previousWeight = (windowMs - elapsed) / windowMs
+if previousWeight < 0 then
+  previousWeight = 0
+elseif previousWeight > 1 then
+  previousWeight = 1
+end
+
+local effectiveBefore = state.currentCount + (state.previousCount * previousWeight)
+local allowed = 0
+if effectiveBefore + cost <= limit + 0.000000001 then
+  allowed = 1
+  state.currentCount = state.currentCount + cost
+end
+
+local effectiveAfter = state.currentCount + (state.previousCount * previousWeight)
+local remaining = math.max(0, math.floor(limit - effectiveAfter + 0.000000001))
+local used = limit - remaining
+local resetAt = state.currentWindowStart + windowMs
+local retryAfterMs = 0
+
+if allowed == 0 then
+  if state.currentCount + cost > limit or state.previousCount <= 0 then
+    retryAfterMs = math.max(1, resetAt - now)
+  else
+    local decayBudget = limit - cost - state.currentCount
+    if decayBudget < 0 then
+      retryAfterMs = math.max(1, resetAt - now)
+    else
+      local targetWeight = decayBudget / state.previousCount
+      if targetWeight < 0 then
+        targetWeight = 0
+      elseif targetWeight > 1 then
+        targetWeight = 1
+      end
+      local targetElapsed = windowMs - (targetWeight * windowMs)
+      retryAfterMs = math.max(1, math.ceil(targetElapsed - elapsed))
+    end
+  end
+end
+
+local ttlMs = windowMs * 2
+redis.call("PSETEX", key, ttlMs, cjson.encode(state))
+return {
+  cjson.encode(state),
+  tostring(allowed),
+  tostring(used),
+  tostring(remaining),
+  tostring(resetAt),
+  tostring(retryAfterMs),
+  tostring(ttlMs)
+}
+`;
+    return {
+        script,
+        getArgs(context) {
+            return [
+                String(context.now),
+                String(context.cost),
+                String(limit),
+                String(windowMs),
+            ];
+        },
+        parse(raw) {
+            const values = normalizeRawRedisResult(raw, "sliding-window");
+            return {
+                state: JSON.parse(values[0]),
+                allowed: values[1] === "1",
+                used: Number(values[2]),
+                remaining: Number(values[3]),
+                resetAt: Number(values[4]),
+                retryAfterMs: Number(values[5]),
+                ttlMs: Number(values[6]),
+            };
+        },
+    };
+}
+//# sourceMappingURL=sliding-window-strategy.js.map

package/dist/strategies/sliding-window-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sliding-window-strategy.js","sourceRoot":"","sources":["../../src/strategies/sliding-window-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAoBjF;;;;;GAKG;AACH,MAAM,OAAO,qBAAqB;IAGvB,IAAI,GAAG,gBAAgB,CAAC;IACxB,KAAK,CAAS;IACd,MAAM,CAAS;IACf,KAAK,CAA2C;IACxC,QAAQ,CAAS;IAElC,YAAY,MAA2B;QACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,6BAA6B,CACrC,kDAAkD,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,6BAA6B,CACrC,qDAAqD,CACtD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1E,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7C,OAAO;YACL,YAAY,EAAE,CAAC;YACf,kBAAkB,EAAE,WAAW;YAC/B,aAAa,EAAE,CAAC;YAChB,mBAAmB,EAAE,WAAW,GAAG,IAAI,CAAC,QAAQ;SACjD,CAAC;IACJ,CAAC;IAED,QAAQ,CACN,YAA4C,EAC5C,OAAiC;QAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,kBAAkB,CAAC;QACvD,MAAM,cAAc,GAAG,KAAK,CAC1B,CAAC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,EACzC,CAAC,EACD,CAAC,CACF,CAAC;QACF,MAAM,eAAe,GACnB,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,aAAa,GAAG,cAAc,CAAC;QAC5D,MAAM,OAAO,GAAG,eAAe,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAEpE,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;QACrC,CAAC;QAED,MAAM,cAAc,GAClB,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,aAAa,GAAG,cAAc,CAAC;QAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEzD,OAAO;YACL,KAAK;YACL,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC;YAC7D,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC;YACrD,OAAO;YACP,YAAY,EAAE,OAAO;gBACnB,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;YAC5D,KAAK,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC;SACzB,CAAC;IACJ,CAAC;IAEO,YAAY,CAClB,YAA4C,EAC5C,GAAW;QAEX,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,YAAY,CAAC,kBAAkB,KAAK,eAAe,EAAE,CAAC;YACxD,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,YAAY,CAAC,kBAAkB,KAAK,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxE,OAAO;gBACL,YAAY,EAAE,CAAC;gBACf,kBAAkB,EAAE,eAAe;gBACnC,aAAa,EAAE,YAAY,CAAC,YAAY;gBACxC,mBAAmB,EAAE,YAAY,CAAC,kBAAkB;aACrD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAEO,qBAAqB,CAC3B,KAAyB,EACzB,IAAY,EACZ,OAAe;QAEf,MAAM,OAAO,GAAG,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzD,IAAI,KAAK,CAAC,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC;QAC3D,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;QACnE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IAEO,cAAc,CAAC,GAAW;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;IACzD,CAAC;CACF;AAED,SAAS,+BAA+B,CACtC,KAAa,EACb,QAAgB;IAEhB,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4FhB,CAAC;IAEA,OAAO;QACL,MAAM;QACN,OAAO,CAAC,OAAiC;YACvC,OAAO;gBACL,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;gBACnB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC;gBACb,MAAM,CAAC,QAAQ,CAAC;aACjB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAY;YAChB,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC9D,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAuB;gBAClD,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;gBAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC1B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;aACzB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/strategies/token-bucket-strategy.d.ts

@@ -0,0 +1,30 @@
+import type { RateLimitStrategy, RedisStrategyProgram, StrategyExecutionContext, StrategyExecutionSnapshot } from "../types.js";
+export interface TokenBucketConfig {
+    capacity: number;
+    refillIntervalMs: number;
+    refillRate: number;
+}
+export interface TokenBucketState {
+    lastRefillAt: number;
+    tokens: number;
+}
+/**
+ * Pattern: Strategy
+ * Problem: Burst control and rolling windows are separate rate-limit behaviors.
+ * Solution: Token bucket is isolated behind the shared strategy contract.
+ * Trade-off: Slightly more structure; justified because callers should not care which algorithm is active.
+ */
+export declare class TokenBucketStrategy implements RateLimitStrategy<TokenBucketState> {
+    readonly kind = "token-bucket";
+    readonly limit: number;
+    readonly policy: string;
+    readonly redis: RedisStrategyProgram<TokenBucketState>;
+    private readonly capacity;
+    private readonly refillIntervalMs;
+    private readonly refillRate;
+    private readonly refillPerMs;
+    constructor(config: TokenBucketConfig);
+    initialState(now: number): TokenBucketState;
+    evaluate(currentState: TokenBucketState | undefined, context: StrategyExecutionContext): StrategyExecutionSnapshot<TokenBucketState>;
+}
+//# sourceMappingURL=token-bucket-strategy.d.ts.map

package/dist/strategies/token-bucket-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-bucket-strategy.d.ts","sourceRoot":"","sources":["../../src/strategies/token-bucket-strategy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,qBAAa,mBACX,YAAW,iBAAiB,CAAC,gBAAgB,CAAC;IAE9C,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,MAAM,EAAE,iBAAiB;IAqCrC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB;IAO3C,QAAQ,CACN,YAAY,EAAE,gBAAgB,GAAG,SAAS,EAC1C,OAAO,EAAE,wBAAwB,GAChC,yBAAyB,CAAC,gBAAgB,CAAC;CAiC/C"}

package/dist/strategies/token-bucket-strategy.js

@@ -0,0 +1,154 @@
+import { RateLimiterConfigurationError } from "../errors.js";
+import { clamp, normalizeRawRedisResult, toWholeNumber } from "../utils/math.js";
+/**
+ * Pattern: Strategy
+ * Problem: Burst control and rolling windows are separate rate-limit behaviors.
+ * Solution: Token bucket is isolated behind the shared strategy contract.
+ * Trade-off: Slightly more structure; justified because callers should not care which algorithm is active.
+ */
+export class TokenBucketStrategy {
+    kind = "token-bucket";
+    limit;
+    policy;
+    redis;
+    capacity;
+    refillIntervalMs;
+    refillRate;
+    refillPerMs;
+    constructor(config) {
+        if (!Number.isFinite(config.capacity) || config.capacity <= 0) {
+            throw new RateLimiterConfigurationError("TokenBucketStrategy requires a positive capacity.");
+        }
+        if (!Number.isFinite(config.refillIntervalMs) ||
+            config.refillIntervalMs <= 0) {
+            throw new RateLimiterConfigurationError("TokenBucketStrategy requires a positive refillIntervalMs.");
+        }
+        if (!Number.isFinite(config.refillRate) || config.refillRate <= 0) {
+            throw new RateLimiterConfigurationError("TokenBucketStrategy requires a positive refillRate.");
+        }
+        this.capacity = config.capacity;
+        this.refillIntervalMs = config.refillIntervalMs;
+        this.refillRate = config.refillRate;
+        this.refillPerMs = this.refillRate / this.refillIntervalMs;
+        this.limit = Math.floor(this.capacity);
+        this.policy = `${this.limit};w=${Math.ceil(this.refillIntervalMs / 1000)};burst=${this.limit}`;
+        this.redis = createTokenBucketRedisProgram(this.capacity, this.refillRate, this.refillIntervalMs);
+    }
+    initialState(now) {
+        return {
+            lastRefillAt: now,
+            tokens: this.capacity,
+        };
+    }
+    evaluate(currentState, context) {
+        const state = currentState
+            ? { ...currentState }
+            : this.initialState(context.now);
+        if (context.now > state.lastRefillAt) {
+            const refill = (context.now - state.lastRefillAt) * this.refillPerMs;
+            state.tokens = clamp(state.tokens + refill, 0, this.capacity);
+            state.lastRefillAt = context.now;
+        }
+        const allowed = state.tokens + 1e-9 >= context.cost;
+        if (allowed) {
+            state.tokens = clamp(state.tokens - context.cost, 0, this.capacity);
+        }
+        const retryAfterMs = allowed
+            ? 0
+            : Math.max(1, Math.ceil((context.cost - state.tokens) / this.refillPerMs));
+        const timeToFullMs = Math.ceil((this.capacity - state.tokens) / this.refillPerMs);
+        return {
+            state,
+            allowed,
+            used: this.limit - toWholeNumber(state.tokens),
+            remaining: toWholeNumber(state.tokens),
+            resetAt: context.now + Math.max(0, timeToFullMs),
+            retryAfterMs,
+            ttlMs: Math.max(this.refillIntervalMs, timeToFullMs),
+        };
+    }
+}
+function createTokenBucketRedisProgram(capacity, refillRate, refillIntervalMs) {
+    const script = `
+local key = KEYS[1]
+local now = tonumber(ARGV[1])
+local cost = tonumber(ARGV[2])
+local capacity = tonumber(ARGV[3])
+local refillRate = tonumber(ARGV[4])
+local refillIntervalMs = tonumber(ARGV[5])
+local refillPerMs = refillRate / refillIntervalMs
+
+local raw = redis.call("GET", key)
+local state
+if raw then
+  state = cjson.decode(raw)
+else
+  state = {
+    lastRefillAt = now,
+    tokens = capacity
+  }
+end
+
+if now > state.lastRefillAt then
+  local refill = (now - state.lastRefillAt) * refillPerMs
+  state.tokens = math.min(capacity, math.max(0, state.tokens + refill))
+  state.lastRefillAt = now
+end
+
+local allowed = 0
+if state.tokens + 0.000000001 >= cost then
+  allowed = 1
+  state.tokens = math.min(capacity, math.max(0, state.tokens - cost))
+end
+
+local remaining = math.max(0, math.floor(state.tokens + 0.000000001))
+local used = math.floor(capacity) - remaining
+local retryAfterMs = 0
+if allowed == 0 then
+  retryAfterMs = math.max(1, math.ceil((cost - state.tokens) / refillPerMs))
+end
+
+local timeToFullMs = math.ceil((capacity - state.tokens) / refillPerMs)
+if timeToFullMs < 0 then
+  timeToFullMs = 0
+end
+local ttlMs = math.max(refillIntervalMs, timeToFullMs)
+local resetAt = now + timeToFullMs
+
+redis.call("PSETEX", key, ttlMs, cjson.encode(state))
+return {
+  cjson.encode(state),
+  tostring(allowed),
+  tostring(used),
+  tostring(remaining),
+  tostring(resetAt),
+  tostring(retryAfterMs),
+  tostring(ttlMs)
+}
+`;
+    return {
+        script,
+        getArgs(context) {
+            return [
+                String(context.now),
+                String(context.cost),
+                String(capacity),
+                String(refillRate),
+                String(refillIntervalMs),
+            ];
+        },
+        parse(raw) {
+            const values = normalizeRawRedisResult(raw, "token-bucket");
+            return {
+                state: JSON.parse(values[0]),
+                allowed: values[1] === "1",
+                used: Number(values[2]),
+                remaining: Number(values[3]),
+                resetAt: Number(values[4]),
+                retryAfterMs: Number(values[5]),
+                ttlMs: Number(values[6]),
+            };
+        },
+    };
+}
+//# sourceMappingURL=token-bucket-strategy.js.map

package/dist/strategies/token-bucket-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-bucket-strategy.js","sourceRoot":"","sources":["../../src/strategies/token-bucket-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAmBjF;;;;;GAKG;AACH,MAAM,OAAO,mBAAmB;IAGrB,IAAI,GAAG,cAAc,CAAC;IACtB,KAAK,CAAS;IACd,MAAM,CAAS;IACf,KAAK,CAAyC;IACtC,QAAQ,CAAS;IACjB,gBAAgB,CAAS;IACzB,UAAU,CAAS;IACnB,WAAW,CAAS;IAErC,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,6BAA6B,CACrC,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACzC,MAAM,CAAC,gBAAgB,IAAI,CAAC,EAC5B,CAAC;YACD,MAAM,IAAI,6BAA6B,CACrC,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,6BAA6B,CACrC,qDAAqD,CACtD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC3D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,IAAI,CACxC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAC7B,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,6BAA6B,CACxC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,gBAAgB,CACtB,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,OAAO;YACL,YAAY,EAAE,GAAG;YACjB,MAAM,EAAE,IAAI,CAAC,QAAQ;SACtB,CAAC;IACJ,CAAC;IAED,QAAQ,CACN,YAA0C,EAC1C,OAAiC;QAEjC,MAAM,KAAK,GAAG,YAAY;YACxB,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE;YACrB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEnC,IAAI,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;YACrE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9D,KAAK,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC;QACnC,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,YAAY,GAAG,OAAO;YAC1B,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAC5B,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAClD,CAAC;QAEF,OAAO;YACL,KAAK;YACL,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YAC9C,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;YACtC,OAAO,EAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC;YAChD,YAAY;YACZ,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,CAAC;SACrD,CAAC;IACJ,CAAC;CACF;AAED,SAAS,6BAA6B,CACpC,QAAgB,EAChB,UAAkB,EAClB,gBAAwB;IAExB,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwDhB,CAAC;IAEA,OAAO;QACL,MAAM;QACN,OAAO,CAAC,OAAiC;YACvC,OAAO;gBACL,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;gBACnB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBACpB,MAAM,CAAC,QAAQ,CAAC;gBAChB,MAAM,CAAC,UAAU,CAAC;gBAClB,MAAM,CAAC,gBAAgB,CAAC;aACzB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAY;YAChB,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAC5D,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAqB;gBAChD,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;gBAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC1B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;aACzB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,48 @@
+export interface RateLimitCheckOptions {
+    cost?: number;
+}
+export interface RateLimitDecision {
+    key: string;
+    allowed: boolean;
+    strategy: string;
+    policy: string;
+    limit: number;
+    used: number;
+    remaining: number;
+    checkedAt: Date;
+    resetAt: Date;
+    resetAfterMs: number;
+    retryAfterMs: number;
+    retryAfterSeconds: number;
+}
+export interface RateLimiterLike {
+    check(key: string, options?: RateLimitCheckOptions): Promise<RateLimitDecision>;
+    reset(key: string): Promise<void>;
+}
+export interface StrategyExecutionContext {
+    now: number;
+    cost: number;
+}
+export interface StrategyExecutionSnapshot<TState> {
+    state: TState;
+    allowed: boolean;
+    used: number;
+    remaining: number;
+    resetAt: number;
+    retryAfterMs: number;
+    ttlMs: number;
+}
+export interface RedisStrategyProgram<TState> {
+    script: string;
+    getArgs(context: StrategyExecutionContext): string[];
+    parse(raw: unknown): StrategyExecutionSnapshot<TState>;
+}
+export interface RateLimitStrategy<TState> {
+    kind: string;
+    limit: number;
+    policy: string;
+    initialState(now: number): TState;
+    evaluate(currentState: TState | undefined, context: StrategyExecutionContext): StrategyExecutionSnapshot<TState>;
+    redis?: RedisStrategyProgram<TState>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChF,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB,CAAC,MAAM;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB,CAAC,MAAM;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,EAAE,CAAC;IACrD,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,iBAAiB,CAAC,MAAM;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CACN,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,EAAE,wBAAwB,GAChC,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;CACtC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/utils/headers.d.ts

@@ -0,0 +1,4 @@
+import type { RateLimitDecision } from "../types.js";
+export declare function buildRateLimitHeaders(decision: RateLimitDecision): Record<string, string>;
+export declare function applyHeaders(setHeader: (name: string, value: string) => void, decision: RateLimitDecision): void;
+//# sourceMappingURL=headers.d.ts.map

package/dist/utils/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/utils/headers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,iBAAiB,GAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQxB;AAED,wBAAgB,YAAY,CAC1B,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,EAChD,QAAQ,EAAE,iBAAiB,GAC1B,IAAI,CAKN"}