raffel 0.1.2

package/dist/middleware/interceptors/logging.js

@@ -0,0 +1,294 @@
+/**
+ * Logging Interceptor
+ *
+ * Protocol-agnostic request/response logging with support for
+ * structured logging, filtering, and performance metrics.
+ *
+ * Features:
+ * - Sensitive header redaction (Authorization, Cookie, etc.)
+ * - High-precision timing with hrtime
+ * - Memory-efficient timing with WeakMap
+ * - Glob pattern filtering
+ */
+/**
+ * Default logger that uses console
+ */
+const defaultLogger = {
+    trace: (obj, msg) => console.debug(msg, obj),
+    debug: (obj, msg) => console.debug(msg, obj),
+    info: (obj, msg) => console.info(msg, obj),
+    warn: (obj, msg) => console.warn(msg, obj),
+    error: (obj, msg) => console.error(msg, obj),
+};
+/**
+ * Default sensitive headers to redact
+ */
+const DEFAULT_SENSITIVE_HEADERS = [
+    'authorization',
+    'cookie',
+    'set-cookie',
+    'x-api-key',
+    'x-auth-token',
+    'x-access-token',
+    'x-refresh-token',
+    'x-csrf-token',
+    'x-xsrf-token',
+    'proxy-authorization',
+    'www-authenticate',
+];
+/**
+ * WeakMap for memory-efficient timer tracking
+ * Automatically cleans up when envelope is garbage collected
+ */
+const timers = new WeakMap();
+/**
+ * Redact sensitive values from metadata
+ */
+export function redactSensitiveHeaders(metadata, sensitiveHeaders = DEFAULT_SENSITIVE_HEADERS) {
+    const redacted = {};
+    const sensitiveSet = new Set(sensitiveHeaders.map(h => h.toLowerCase()));
+    for (const [key, value] of Object.entries(metadata)) {
+        if (sensitiveSet.has(key.toLowerCase())) {
+            redacted[key] = '[REDACTED]';
+        }
+        else {
+            redacted[key] = value;
+        }
+    }
+    return redacted;
+}
+/**
+ * ANSI color codes for terminal output
+ */
+const colors = {
+    reset: '\x1b[0m',
+    dim: '\x1b[2m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    red: '\x1b[31m',
+    cyan: '\x1b[36m',
+    magenta: '\x1b[35m',
+    blue: '\x1b[34m',
+};
+/**
+ * Colorize a value based on its context
+ */
+function colorize(value, type) {
+    switch (type) {
+        case 'procedure':
+            return `${colors.cyan}${value}${colors.reset}`;
+        case 'duration':
+            const ms = typeof value === 'number' ? value : parseFloat(value);
+            if (ms < 100)
+                return `${colors.green}${value}ms${colors.reset}`;
+            if (ms < 500)
+                return `${colors.yellow}${value}ms${colors.reset}`;
+            return `${colors.red}${value}ms${colors.reset}`;
+        case 'status':
+            return `${colors.green}✓${colors.reset}`;
+        case 'error':
+            return `${colors.red}✗ ${value}${colors.reset}`;
+        default:
+            return String(value);
+    }
+}
+/**
+ * Match a procedure name against glob patterns
+ */
+function matchProcedure(patterns, procedure) {
+    return patterns.some((pattern) => {
+        const regex = pattern
+            .replace(/[.+^${}()|[\]\\]/g, '\\$&')
+            .replace(/\*\*/g, '{{DOUBLE_STAR}}')
+            .replace(/\*/g, '[^.]*')
+            .replace(/{{DOUBLE_STAR}}/g, '.*');
+        return new RegExp(`^${regex}$`).test(procedure);
+    });
+}
+/**
+ * Create a logging interceptor
+ *
+ * @example
+ * ```typescript
+ * // Basic usage
+ * const logging = createLoggingInterceptor()
+ *
+ * // With custom logger (e.g., pino)
+ * import pino from 'pino'
+ * const logger = pino()
+ *
+ * const logging = createLoggingInterceptor({
+ *   logger: logger,
+ *   level: 'info',
+ *   excludeProcedures: ['health.*', 'metrics.*'],
+ * })
+ *
+ * // Include payloads in debug mode
+ * const logging = createLoggingInterceptor({
+ *   includePayload: process.env.NODE_ENV === 'development',
+ *   includeResponse: process.env.NODE_ENV === 'development',
+ * })
+ *
+ * server.use(logging)
+ * ```
+ */
+export function createLoggingInterceptor(config = {}) {
+    const { level: _level = 'info', format = process.env.NODE_ENV === 'production' ? 'json' : 'pretty', includePayload = false, includeResponse = false, includeMetadata = false, sensitiveHeaders = DEFAULT_SENSITIVE_HEADERS, filter, excludeProcedures = [], logger = defaultLogger, } = config;
+    return async (envelope, ctx, next) => {
+        // Use WeakMap for memory-efficient timer storage
+        // Automatically garbage collected when envelope is no longer referenced
+        timers.set(envelope, process.hrtime.bigint());
+        const procedure = envelope.procedure;
+        const requestId = ctx.requestId;
+        let error;
+        let result;
+        try {
+            result = await next();
+            return result;
+        }
+        catch (err) {
+            error = err;
+            throw err;
+        }
+        finally {
+            const startTime = timers.get(envelope);
+            const endTime = process.hrtime.bigint();
+            const duration = startTime ? Number(endTime - startTime) / 1_000_000 : 0;
+            // Clean up timer reference
+            timers.delete(envelope);
+            // Check exclusions
+            if (excludeProcedures.length > 0 && matchProcedure(excludeProcedures, procedure)) {
+                return;
+            }
+            // Check custom filter
+            const filterContext = {
+                envelope,
+                ctx,
+                duration,
+                error,
+            };
+            if (filter && !filter(filterContext)) {
+                return;
+            }
+            // Build log data
+            const logData = {
+                requestId,
+                procedure,
+                type: envelope.type,
+                duration: parseFloat(duration.toFixed(3)),
+            };
+            // Add auth info if available
+            if (ctx.auth?.principal) {
+                logData.principal = ctx.auth.principal;
+            }
+            // Add tracing info
+            if (ctx.tracing) {
+                logData.traceId = ctx.tracing.traceId;
+                logData.spanId = ctx.tracing.spanId;
+                if (ctx.tracing.parentSpanId) {
+                    logData.parentSpanId = ctx.tracing.parentSpanId;
+                }
+            }
+            // Add metadata with automatic redaction of sensitive headers
+            if (includeMetadata && envelope.metadata) {
+                logData.metadata = redactSensitiveHeaders(envelope.metadata, sensitiveHeaders);
+            }
+            // Add payload if requested
+            if (includePayload) {
+                logData.payload = envelope.payload;
+            }
+            // Add response if requested
+            if (includeResponse && result !== undefined) {
+                logData.response = result;
+            }
+            // Add error info
+            if (error) {
+                logData.error = {
+                    name: error.name,
+                    message: error.message,
+                    code: error.code,
+                };
+            }
+            // Format and log
+            if (format === 'pretty') {
+                const durationStr = colorize(duration.toFixed(2), 'duration');
+                const procedureStr = colorize(procedure, 'procedure');
+                if (error) {
+                    const errorStr = colorize(error.message, 'error');
+                    logger.error(logData, `${procedureStr} ${errorStr} (${durationStr})`);
+                }
+                else {
+                    const statusStr = colorize('✓', 'status');
+                    logger.info(logData, `${procedureStr} ${statusStr} (${durationStr})`);
+                }
+            }
+            else {
+                // JSON format
+                if (error) {
+                    logger.error(logData);
+                }
+                else {
+                    logger.info(logData);
+                }
+            }
+        }
+    };
+}
+/**
+ * Create a minimal logging interceptor for production
+ *
+ * Only logs errors and slow requests (> threshold).
+ */
+export function createProductionLoggingInterceptor(config = {}) {
+    const { slowThresholdMs = 1000, logger = defaultLogger, } = config;
+    return async (envelope, ctx, next) => {
+        const startTime = process.hrtime.bigint();
+        let error;
+        try {
+            return await next();
+        }
+        catch (err) {
+            error = err;
+            throw err;
+        }
+        finally {
+            const endTime = process.hrtime.bigint();
+            const duration = Number(endTime - startTime) / 1_000_000;
+            // Only log errors or slow requests
+            if (error || duration > slowThresholdMs) {
+                const logData = {
+                    requestId: ctx.requestId,
+                    procedure: envelope.procedure,
+                    duration: parseFloat(duration.toFixed(3)),
+                };
+                if (error) {
+                    logData.error = {
+                        name: error.name,
+                        message: error.message,
+                        code: error.code,
+                    };
+                    logger.error(logData);
+                }
+                else {
+                    logData.slow = true;
+                    logger.warn(logData);
+                }
+            }
+        }
+    };
+}
+/**
+ * Create a debug logging interceptor
+ *
+ * Logs everything including payloads. Use only in development.
+ */
+export function createDebugLoggingInterceptor(logger) {
+    return createLoggingInterceptor({
+        level: 'debug',
+        format: 'pretty',
+        includePayload: true,
+        includeResponse: true,
+        logger,
+    });
+}
+//# sourceMappingURL=logging.js.map

package/dist/middleware/interceptors/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../../src/middleware/interceptors/logging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH;;GAEG;AACH,MAAM,aAAa,GAAG;IACpB,KAAK,EAAE,CAAC,GAAW,EAAE,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAW,EAAE,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAW,EAAE,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;IAC3D,IAAI,EAAE,CAAC,GAAW,EAAE,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;IAC3D,KAAK,EAAE,CAAC,GAAW,EAAE,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;CAC9D,CAAA;AAED;;GAEG;AACH,MAAM,yBAAyB,GAAG;IAChC,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,cAAc;IACd,cAAc;IACd,qBAAqB;IACrB,kBAAkB;CACnB,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,GAAG,IAAI,OAAO,EAAoB,CAAA;AAE9C;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgC,EAChC,mBAA6B,yBAAyB;IAEtD,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAExE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACxC,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAA;QAC9B,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACvB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,SAAS;IAChB,GAAG,EAAE,SAAS;IACd,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,UAAU;IAClB,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,UAAU;CACjB,CAAA;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,KAAsB,EAAE,IAAmD;IAC3F,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACd,OAAO,GAAG,MAAM,CAAC,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAA;QAChD,KAAK,UAAU;YACb,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAe,CAAC,CAAA;YAC1E,IAAI,EAAE,GAAG,GAAG;gBAAE,OAAO,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAA;YAC/D,IAAI,EAAE,GAAG,GAAG;gBAAE,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAA;YAChE,OAAO,GAAG,MAAM,CAAC,GAAG,GAAG,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAA;QACjD,KAAK,QAAQ;YACX,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAA;QAC1C,KAAK,OAAO;YACV,OAAO,GAAG,MAAM,CAAC,GAAG,KAAK,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAA;QACjD;YACE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACxB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,QAAkB,EAAE,SAAiB;IAC3D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,OAAO;aAClB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;aACpC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC;aACnC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;aACvB,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAA;QAEpC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAwB,EAAE;IACjE,MAAM,EACJ,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAClE,cAAc,GAAG,KAAK,EACtB,eAAe,GAAG,KAAK,EACvB,eAAe,GAAG,KAAK,EACvB,gBAAgB,GAAG,yBAAyB,EAC5C,MAAM,EACN,iBAAiB,GAAG,EAAE,EACtB,MAAM,GAAG,aAAa,GACvB,GAAG,MAAM,CAAA;IAEV,OAAO,KAAK,EAAE,QAAkB,EAAE,GAAY,EAAE,IAA4B,EAAE,EAAE;QAC9E,iDAAiD;QACjD,wEAAwE;QACxE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QAE7C,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;QACpC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAA;QAE/B,IAAI,KAAwB,CAAA;QAC5B,IAAI,MAAe,CAAA;QAEnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,EAAE,CAAA;YACrB,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,GAAG,GAAY,CAAA;YACpB,MAAM,GAAG,CAAA;QACX,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACtC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;YACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;YAExE,2BAA2B;YAC3B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAEvB,mBAAmB;YACnB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,CAAC;gBACjF,OAAM;YACR,CAAC;YAED,sBAAsB;YACtB,MAAM,aAAa,GAAqB;gBACtC,QAAQ;gBACR,GAAG;gBACH,QAAQ;gBACR,KAAK;aACN,CAAA;YAED,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBACrC,OAAM;YACR,CAAC;YAED,iBAAiB;YACjB,MAAM,OAAO,GAA4B;gBACvC,SAAS;gBACT,SAAS;gBACT,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;aAC1C,CAAA;YAED,6BAA6B;YAC7B,IAAI,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAA;YACxC,CAAC;YAED,mBAAmB;YACnB,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAA;gBACrC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;gBACnC,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;oBAC7B,OAAO,CAAC,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAA;gBACjD,CAAC;YACH,CAAC;YAED,6DAA6D;YAC7D,IAAI,eAAe,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACzC,OAAO,CAAC,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;YAChF,CAAC;YAED,2BAA2B;YAC3B,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAA;YACpC,CAAC;YAED,4BAA4B;YAC5B,IAAI,eAAe,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC5C,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAA;YAC3B,CAAC;YAED,iBAAiB;YACjB,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,GAAG;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI,EAAG,KAAa,CAAC,IAAI;iBAC1B,CAAA;YACH,CAAC;YAED,iBAAiB;YACjB,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;gBAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;gBAErD,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;oBACjD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,YAAY,IAAI,QAAQ,KAAK,WAAW,GAAG,CAAC,CAAA;gBACvE,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;oBACzC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,YAAY,IAAI,SAAS,KAAK,WAAW,GAAG,CAAC,CAAA;gBACvE,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,cAAc;gBACd,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACvB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAAC,SAG/C,EAAE;IACJ,MAAM,EACJ,eAAe,GAAG,IAAI,EACtB,MAAM,GAAG,aAAa,GACvB,GAAG,MAAM,CAAA;IAEV,OAAO,KAAK,EAAE,QAAkB,EAAE,GAAY,EAAE,IAA4B,EAAE,EAAE;QAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;QACzC,IAAI,KAAwB,CAAA;QAE5B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,EAAE,CAAA;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,GAAG,GAAY,CAAA;YACpB,MAAM,GAAG,CAAA;QACX,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;YACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,SAAS,CAAA;YAExD,mCAAmC;YACnC,IAAI,KAAK,IAAI,QAAQ,GAAG,eAAe,EAAE,CAAC;gBACxC,MAAM,OAAO,GAA4B;oBACvC,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;iBAC1C,CAAA;gBAED,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,GAAG;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,IAAI,EAAG,KAAa,CAAC,IAAI;qBAC1B,CAAA;oBACD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACvB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,GAAG,IAAI,CAAA;oBACnB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAgC;IAC5E,OAAO,wBAAwB,CAAC;QAC9B,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,QAAQ;QAChB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,IAAI;QACrB,MAAM;KACP,CAAC,CAAA;AACJ,CAAC"}

package/dist/middleware/interceptors/rate-limit.d.ts

@@ -0,0 +1,147 @@
+/**
+ * Rate Limiting Interceptor
+ *
+ * Protocol-agnostic rate limiting that works across all transports.
+ * Uses sliding window algorithm with in-memory storage.
+ *
+ * Features:
+ * - Sliding window rate limiting
+ * - Token bucket with burst support
+ * - Adaptive rate limit parsing for proxied responses
+ * - Rate limit event hooks for observability
+ */
+import type { Interceptor, Envelope, Context } from '../../types/index.js';
+import type { RateLimitConfig } from '../types.js';
+/**
+ * Parsed rate limit info from upstream headers
+ */
+export interface ParsedRateLimitInfo {
+    /** Maximum requests allowed in the window */
+    limit?: number;
+    /** Remaining requests in current window */
+    remaining?: number;
+    /** Timestamp when the rate limit resets (ms since epoch) */
+    resetAt?: number;
+    /** Seconds until rate limit resets */
+    retryAfter?: number;
+}
+/**
+ * Parse rate limit headers from metadata or response headers
+ *
+ * Parses standard x-ratelimit-* headers and retry-after.
+ * Useful when Raffel acts as a proxy or for client-side logic.
+ *
+ * @example
+ * ```typescript
+ * const info = parseRateLimitHeaders({
+ *   'x-ratelimit-limit': '100',
+ *   'x-ratelimit-remaining': '42',
+ *   'x-ratelimit-reset': '1699876543000',
+ *   'retry-after': '30',
+ * })
+ *
+ * console.log(info)
+ * // { limit: 100, remaining: 42, resetAt: 1699876543000, retryAfter: 30 }
+ * ```
+ */
+export declare function parseRateLimitHeaders(headers: Record<string, string | undefined>): ParsedRateLimitInfo;
+/**
+ * Check if rate limit is exceeded based on parsed headers
+ */
+export declare function isRateLimitExceeded(info: ParsedRateLimitInfo): boolean;
+/**
+ * Calculate delay before next request based on rate limit info
+ */
+export declare function calculateRateLimitDelay(info: ParsedRateLimitInfo): number;
+/**
+ * Create a rate limiting interceptor
+ *
+ * @example
+ * ```typescript
+ * // Basic usage
+ * const rateLimit = createRateLimitInterceptor({
+ *   windowMs: 60000,  // 1 minute
+ *   maxRequests: 100,
+ * })
+ *
+ * // With path-specific rules
+ * const rateLimit = createRateLimitInterceptor({
+ *   windowMs: 60000,
+ *   maxRequests: 100,
+ *   rules: [
+ *     { id: 'auth', pattern: 'auth.*', maxRequests: 10 },
+ *     { id: 'admin', pattern: 'admin.**', maxRequests: 50 },
+ *   ]
+ * })
+ *
+ * server.use(rateLimit)
+ * ```
+ */
+export declare function createRateLimitInterceptor(config?: RateLimitConfig): Interceptor;
+/**
+ * Create a rate limiter with authentication-aware defaults
+ *
+ * @example
+ * ```typescript
+ * const authRateLimit = createAuthRateLimiter({
+ *   authenticated: { windowMs: 60000, maxRequests: 1000 },
+ *   anonymous: { windowMs: 60000, maxRequests: 100 },
+ * })
+ * ```
+ */
+export declare function createAuthRateLimiter(config: {
+    authenticated?: Partial<RateLimitConfig>;
+    anonymous?: Partial<RateLimitConfig>;
+}): Interceptor;
+/**
+ * Token bucket rate limiter configuration
+ */
+export interface TokenBucketConfig {
+    /** Maximum tokens (burst capacity) */
+    bucketSize: number;
+    /** Tokens added per second (sustained rate) */
+    refillRate: number;
+    /** Maximum unique keys to track (default: 10000) */
+    maxUniqueKeys?: number;
+    /** Custom key generator */
+    keyGenerator?: (envelope: Envelope, ctx: Context) => string;
+    /**
+     * Callback when rate limit is exceeded
+     * Useful for monitoring and alerting
+     */
+    onRateLimited?: (info: {
+        key: string;
+        procedure: string;
+        requestId?: string;
+        tokensNeeded: number;
+        tokensAvailable: number;
+    }) => void;
+}
+/**
+ * Create a token bucket rate limiter
+ *
+ * Token bucket allows bursts while maintaining an average rate.
+ * This is more flexible than sliding window for bursty traffic.
+ *
+ * @example
+ * ```typescript
+ * // Allow bursts of 10 requests, sustained rate of 1 req/sec
+ * const rateLimit = createTokenBucketLimiter({
+ *   bucketSize: 10,    // Max burst
+ *   refillRate: 1,     // 1 token per second
+ * })
+ *
+ * // Allow bursts of 100 requests, sustained rate of 10 req/sec
+ * const rateLimit = createTokenBucketLimiter({
+ *   bucketSize: 100,
+ *   refillRate: 10,
+ *   onRateLimited: ({ key, procedure }) => {
+ *     console.warn(`Rate limited: ${key} on ${procedure}`)
+ *   }
+ * })
+ *
+ * server.use(rateLimit)
+ * ```
+ */
+export declare function createTokenBucketLimiter(config: TokenBucketConfig): Interceptor;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/middleware/interceptors/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/middleware/interceptors/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,aAAa,CAAA;AAahF;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC1C,mBAAmB,CAuDrB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAKtE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAQzE;AAoFD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,GAAE,eAAoB,GAAG,WAAW,CA8DpF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,aAAa,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;CACrC,GAAG,WAAW,CAsBd;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAA;IAElB,+CAA+C;IAC/C,UAAU,EAAE,MAAM,CAAA;IAElB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB,2BAA2B;IAC3B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,KAAK,MAAM,CAAA;IAE3D;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE;QACrB,GAAG,EAAE,MAAM,CAAA;QACX,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,YAAY,EAAE,MAAM,CAAA;QACpB,eAAe,EAAE,MAAM,CAAA;KACxB,KAAK,IAAI,CAAA;CACX;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CA0F/E"}

package/dist/middleware/interceptors/rate-limit.int.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Rate Limit Interceptor Tests
+ */
+export {};
+//# sourceMappingURL=rate-limit.int.test.d.ts.map

package/dist/middleware/interceptors/rate-limit.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.int.test.d.ts","sourceRoot":"","sources":["../../../src/middleware/interceptors/rate-limit.int.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}