raffel 0.1.2

package/dist/middleware/rate-limit.int.test.js

@@ -0,0 +1,350 @@
+/**
+ * Rate Limiting Middleware Tests
+ */
+import { describe, it, expect, vi } from 'vitest';
+import { createRateLimitMiddleware, createPerProcedureRateLimitMiddleware, createInMemoryStore, createSlidingWindowRateLimiter, } from './rate-limit.js';
+import { createContext } from '../types/index.js';
+// Helper to create test envelope
+function createTestEnvelope(procedure, metadata) {
+    return {
+        id: 'test-1',
+        procedure,
+        type: 'request',
+        payload: {},
+        metadata: metadata ?? {},
+        context: createContext('test-1'),
+    };
+}
+// Helper to create context with auth
+function createAuthenticatedContext(principal) {
+    const ctx = createContext('test');
+    ctx.auth = {
+        authenticated: true,
+        principal,
+        claims: {},
+    };
+    return ctx;
+}
+describe('Rate Limiting Middleware', () => {
+    describe('In-Memory Store', () => {
+        it('should increment counter for new key', async () => {
+            const store = createInMemoryStore();
+            const result = await store.increment('user:test', 60000);
+            expect(result.count).toBe(1);
+            expect(result.resetAt).toBeGreaterThan(Date.now());
+        });
+        it('should increment counter for existing key', async () => {
+            const store = createInMemoryStore();
+            await store.increment('user:test', 60000);
+            await store.increment('user:test', 60000);
+            const result = await store.increment('user:test', 60000);
+            expect(result.count).toBe(3);
+        });
+        it('should get current count', async () => {
+            const store = createInMemoryStore();
+            await store.increment('user:test', 60000);
+            await store.increment('user:test', 60000);
+            const result = await store.get('user:test');
+            expect(result?.count).toBe(2);
+        });
+        it('should return null for non-existent key', async () => {
+            const store = createInMemoryStore();
+            const result = await store.get('non-existent');
+            expect(result).toBeNull();
+        });
+        it('should reset key', async () => {
+            const store = createInMemoryStore();
+            await store.increment('user:test', 60000);
+            await store.increment('user:test', 60000);
+            await store.reset('user:test');
+            const result = await store.get('user:test');
+            expect(result).toBeNull();
+        });
+        it('should apply sliding window - remove old timestamps', async () => {
+            const store = createInMemoryStore();
+            const windowMs = 100; // 100ms window
+            // Add a request
+            await store.increment('user:test', windowMs);
+            // Wait for window to expire
+            await new Promise((resolve) => setTimeout(resolve, 150));
+            // New request should be count 1 (old one expired)
+            const result = await store.increment('user:test', windowMs);
+            expect(result.count).toBe(1);
+        });
+    });
+    describe('Rate Limit Middleware', () => {
+        it('should allow requests within limit', async () => {
+            const middleware = createRateLimitMiddleware({
+                limit: 5,
+                windowMs: 60000,
+            });
+            const envelope = createTestEnvelope('test');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            // Make 5 requests (all should pass)
+            for (let i = 0; i < 5; i++) {
+                await middleware(envelope, ctx, next);
+            }
+            expect(next).toHaveBeenCalledTimes(5);
+        });
+        it('should block requests over limit', async () => {
+            const middleware = createRateLimitMiddleware({
+                limit: 3,
+                windowMs: 60000,
+            });
+            const envelope = createTestEnvelope('test');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            // Make 3 requests (all should pass)
+            for (let i = 0; i < 3; i++) {
+                await middleware(envelope, ctx, next);
+            }
+            // 4th request should be blocked
+            await expect(middleware(envelope, ctx, next)).rejects.toThrow('Rate limit exceeded');
+            expect(next).toHaveBeenCalledTimes(3);
+        });
+        it('should use principal for key extraction', async () => {
+            const store = createInMemoryStore();
+            const middleware = createRateLimitMiddleware({
+                limit: 2,
+                windowMs: 60000,
+                store,
+            });
+            const envelope = createTestEnvelope('test');
+            const ctx1 = createAuthenticatedContext('user-1');
+            const ctx2 = createAuthenticatedContext('user-2');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            // User 1 makes 2 requests
+            await middleware(envelope, ctx1, next);
+            await middleware(envelope, ctx1, next);
+            // User 1 blocked
+            await expect(middleware(envelope, ctx1, next)).rejects.toThrow('Rate limit exceeded');
+            // User 2 can still make requests
+            await middleware(envelope, ctx2, next);
+            expect(next).toHaveBeenCalledTimes(3);
+        });
+        it('should skip rate limiting for specified procedures', async () => {
+            const middleware = createRateLimitMiddleware({
+                limit: 1,
+                windowMs: 60000,
+                skipProcedures: ['health', 'status'],
+            });
+            const healthEnvelope = createTestEnvelope('health');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            // Health check should always pass
+            await middleware(healthEnvelope, ctx, next);
+            await middleware(healthEnvelope, ctx, next);
+            await middleware(healthEnvelope, ctx, next);
+            expect(next).toHaveBeenCalledTimes(3);
+        });
+        it('should use custom skip function', async () => {
+            const middleware = createRateLimitMiddleware({
+                limit: 1,
+                windowMs: 60000,
+                skip: (envelope) => envelope.procedure.startsWith('internal.'),
+            });
+            const internalEnvelope = createTestEnvelope('internal.sync');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            // Internal procedures should be skipped
+            await middleware(internalEnvelope, ctx, next);
+            await middleware(internalEnvelope, ctx, next);
+            expect(next).toHaveBeenCalledTimes(2);
+        });
+        it('should call onLimitReached handler', async () => {
+            const onLimitReached = vi.fn();
+            const middleware = createRateLimitMiddleware({
+                limit: 1,
+                windowMs: 60000,
+                onLimitReached,
+            });
+            const envelope = createTestEnvelope('test');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            await middleware(envelope, ctx, next);
+            await expect(middleware(envelope, ctx, next)).rejects.toThrow('Rate limit exceeded');
+            expect(onLimitReached).toHaveBeenCalledTimes(1);
+            expect(onLimitReached).toHaveBeenCalledWith(envelope, ctx, expect.objectContaining({
+                limit: 1,
+                remaining: 0,
+                exceeded: true,
+            }));
+        });
+        it('should use custom key extractor', async () => {
+            const middleware = createRateLimitMiddleware({
+                limit: 2,
+                windowMs: 60000,
+                keyExtractor: (envelope) => `custom:${envelope.procedure}`,
+            });
+            const envelope1 = createTestEnvelope('proc1');
+            const envelope2 = createTestEnvelope('proc2');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            // Different procedures = different keys
+            await middleware(envelope1, ctx, next);
+            await middleware(envelope1, ctx, next);
+            await expect(middleware(envelope1, ctx, next)).rejects.toThrow();
+            // proc2 should still work
+            await middleware(envelope2, ctx, next);
+            expect(next).toHaveBeenCalledTimes(3);
+        });
+        it('should use IP from x-forwarded-for header', async () => {
+            const store = createInMemoryStore();
+            const middleware = createRateLimitMiddleware({
+                limit: 2,
+                windowMs: 60000,
+                store,
+            });
+            const envelope = createTestEnvelope('test', { 'x-forwarded-for': '192.168.1.1' });
+            const ctx = createContext('test'); // No auth
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            await middleware(envelope, ctx, next);
+            await middleware(envelope, ctx, next);
+            await expect(middleware(envelope, ctx, next)).rejects.toThrow('Rate limit exceeded');
+        });
+        it('should include retry-after in error', async () => {
+            const middleware = createRateLimitMiddleware({
+                limit: 1,
+                windowMs: 60000,
+            });
+            const envelope = createTestEnvelope('test');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            await middleware(envelope, ctx, next);
+            try {
+                await middleware(envelope, ctx, next);
+                expect.fail('Should have thrown');
+            }
+            catch (error) {
+                expect(error.code).toBe('RATE_LIMITED');
+                expect(error.details).toHaveProperty('retryAfter');
+                expect(error.details.retryAfter).toBeGreaterThan(0);
+            }
+        });
+    });
+    describe('Per-Procedure Rate Limit Middleware', () => {
+        it('should apply different limits per procedure', async () => {
+            const middleware = createPerProcedureRateLimitMiddleware({
+                limits: [
+                    { procedure: 'expensive', limit: 2, windowMs: 60000 },
+                    { procedure: 'cheap', limit: 10, windowMs: 60000 },
+                ],
+            });
+            const expensiveEnvelope = createTestEnvelope('expensive');
+            const cheapEnvelope = createTestEnvelope('cheap');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            // Expensive procedure limited to 2
+            await middleware(expensiveEnvelope, ctx, next);
+            await middleware(expensiveEnvelope, ctx, next);
+            await expect(middleware(expensiveEnvelope, ctx, next)).rejects.toThrow();
+            // Cheap procedure still works
+            for (let i = 0; i < 5; i++) {
+                await middleware(cheapEnvelope, ctx, next);
+            }
+            expect(next).toHaveBeenCalledTimes(7); // 2 expensive + 5 cheap
+        });
+        it('should match wildcard patterns', async () => {
+            const middleware = createPerProcedureRateLimitMiddleware({
+                limits: [{ procedure: 'admin.*', limit: 5, windowMs: 60000 }],
+                defaultLimit: { limit: 100, windowMs: 60000 },
+            });
+            const adminEnvelope = createTestEnvelope('admin.users');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            // Admin namespace limited to 5
+            for (let i = 0; i < 5; i++) {
+                await middleware(adminEnvelope, ctx, next);
+            }
+            await expect(middleware(adminEnvelope, ctx, next)).rejects.toThrow();
+        });
+        it('should use default limit for unmatched procedures', async () => {
+            const middleware = createPerProcedureRateLimitMiddleware({
+                limits: [{ procedure: 'specific', limit: 1, windowMs: 60000 }],
+                defaultLimit: { limit: 3, windowMs: 60000 },
+            });
+            const unknownEnvelope = createTestEnvelope('unknown');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            // Default limit of 3
+            for (let i = 0; i < 3; i++) {
+                await middleware(unknownEnvelope, ctx, next);
+            }
+            await expect(middleware(unknownEnvelope, ctx, next)).rejects.toThrow();
+        });
+        it('should pass through when no limit configured', async () => {
+            const middleware = createPerProcedureRateLimitMiddleware({
+                limits: [{ procedure: 'specific', limit: 1, windowMs: 60000 }],
+                // No defaultLimit
+            });
+            const unknownEnvelope = createTestEnvelope('unknown');
+            const ctx = createAuthenticatedContext('user-1');
+            const next = vi.fn().mockResolvedValue({ ok: true });
+            // Should pass through unlimited
+            for (let i = 0; i < 100; i++) {
+                await middleware(unknownEnvelope, ctx, next);
+            }
+            expect(next).toHaveBeenCalledTimes(100);
+        });
+    });
+    describe('Sliding Window Rate Limiter', () => {
+        it('should allow requests within limit', () => {
+            const limiter = createSlidingWindowRateLimiter({
+                limit: 5,
+                windowMs: 60000,
+            });
+            for (let i = 0; i < 5; i++) {
+                const result = limiter.check('user-1');
+                expect(result.allowed).toBe(true);
+            }
+        });
+        it('should block requests over limit', () => {
+            const limiter = createSlidingWindowRateLimiter({
+                limit: 3,
+                windowMs: 60000,
+            });
+            // Use up limit
+            for (let i = 0; i < 3; i++) {
+                limiter.check('user-1');
+            }
+            // Should be blocked
+            const result = limiter.check('user-1');
+            expect(result.allowed).toBe(false);
+            expect(result.remaining).toBe(0);
+        });
+        it('should track remaining correctly', () => {
+            const limiter = createSlidingWindowRateLimiter({
+                limit: 5,
+                windowMs: 60000,
+            });
+            expect(limiter.check('user-1').remaining).toBe(4);
+            expect(limiter.check('user-1').remaining).toBe(3);
+            expect(limiter.check('user-1').remaining).toBe(2);
+        });
+        it('should reset key', () => {
+            const limiter = createSlidingWindowRateLimiter({
+                limit: 2,
+                windowMs: 60000,
+            });
+            // Use up limit
+            limiter.check('user-1');
+            limiter.check('user-1');
+            expect(limiter.check('user-1').allowed).toBe(false);
+            // Reset
+            limiter.reset('user-1');
+            // Should work again
+            expect(limiter.check('user-1').allowed).toBe(true);
+        });
+        it('should provide reset time', () => {
+            const limiter = createSlidingWindowRateLimiter({
+                limit: 5,
+                windowMs: 60000,
+            });
+            const result = limiter.check('user-1');
+            expect(result.resetAt).toBeGreaterThan(Date.now());
+            expect(result.resetAt).toBeLessThanOrEqual(Date.now() + 60000);
+        });
+    });
+});
+//# sourceMappingURL=rate-limit.int.test.js.map

package/dist/middleware/rate-limit.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.int.test.js","sourceRoot":"","sources":["../../src/middleware/rate-limit.int.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAyB,MAAM,QAAQ,CAAA;AACxE,OAAO,EACL,yBAAyB,EACzB,qCAAqC,EACrC,mBAAmB,EACnB,8BAA8B,GAE/B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGjD,iCAAiC;AACjC,SAAS,kBAAkB,CAAC,SAAiB,EAAE,QAAiC;IAC9E,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,SAAS;QACT,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,QAAQ,IAAI,EAAE;QACxB,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC;KACjC,CAAA;AACH,CAAC;AAED,qCAAqC;AACrC,SAAS,0BAA0B,CAAC,SAAiB;IACnD,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAQ,CAAA;IACxC,GAAG,CAAC,IAAI,GAAG;QACT,aAAa,EAAE,IAAI;QACnB,SAAS;QACT,MAAM,EAAE,EAAE;KACX,CAAA;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;YACnC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YAExD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QACpD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;YAEnC,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACzC,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACzC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YAExD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;YAEnC,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACzC,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YAEzC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAC3C,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;YACnC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;YAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAChC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;YAEnC,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACzC,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;YACzC,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;YAE9B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC3B,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;YACnC,MAAM,QAAQ,GAAG,GAAG,CAAA,CAAC,eAAe;YAEpC,gBAAgB;YAChB,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;YAE5C,4BAA4B;YAC5B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;YAExD,kDAAkD;YAClD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;YAC3D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;YAC3C,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,oCAAoC;YACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YACvC,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;YAC3C,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,oCAAoC;YACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YACvC,CAAC;YAED,gCAAgC;YAChC,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;YACpF,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;YACnC,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;gBACf,KAAK;aACN,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;YAC3C,MAAM,IAAI,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YACjD,MAAM,IAAI,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YACjD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,0BAA0B;YAC1B,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YACtC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YAEtC,iBAAiB;YACjB,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;YAErF,iCAAiC;YACjC,MAAM,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YACtC,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;gBACf,cAAc,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACrC,CAAC,CAAA;YAEF,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;YACnD,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,kCAAkC;YAClC,MAAM,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAE3C,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;aAC/D,CAAC,CAAA;YAEF,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAA;YAC5D,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,wCAAwC;YACxC,MAAM,UAAU,CAAC,gBAAgB,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC7C,MAAM,UAAU,CAAC,gBAAgB,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAE7C,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;YAC9B,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;gBACf,cAAc;aACf,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;YAC3C,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YACrC,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;YAEpF,MAAM,CAAC,cAAc,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAC/C,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,QAAQ,EACR,GAAG,EACH,MAAM,CAAC,gBAAgB,CAAC;gBACtB,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,CAAC;gBACZ,QAAQ,EAAE,IAAI;aACf,CAAC,CACH,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;gBACf,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,QAAQ,CAAC,SAAS,EAAE;aAC3D,CAAC,CAAA;YAEF,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;YAC7C,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;YAC7C,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,wCAAwC;YACxC,MAAM,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YACtC,MAAM,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YACtC,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;YAEhE,0BAA0B;YAC1B,MAAM,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YACtC,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAA;YACnC,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;gBACf,KAAK;aACN,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAA;YACjF,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA,CAAC,UAAU;YAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YACrC,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YACrC,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;QACtF,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,UAAU,GAAG,yBAAyB,CAAC;gBAC3C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;YAC3C,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAErC,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;gBACrC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;YACnC,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;gBACvC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAA;gBAClD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YACrD,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;QACnD,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,UAAU,GAAG,qCAAqC,CAAC;gBACvD,MAAM,EAAE;oBACN,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;oBACrD,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;iBACnD;aACF,CAAC,CAAA;YAEF,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAA;YACzD,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;YACjD,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,mCAAmC;YACnC,MAAM,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC9C,MAAM,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC9C,MAAM,MAAM,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;YAExE,8BAA8B;YAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,UAAU,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC5C,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA,CAAC,wBAAwB;QAChE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,UAAU,GAAG,qCAAqC,CAAC;gBACvD,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBAC7D,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC9C,CAAC,CAAA;YAEF,MAAM,aAAa,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAA;YACvD,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,+BAA+B;YAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,UAAU,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC5C,CAAC;YACD,MAAM,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QACtE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,UAAU,GAAG,qCAAqC,CAAC;gBACvD,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBAC9D,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5C,CAAC,CAAA;YAEF,MAAM,eAAe,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAA;YACrD,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,qBAAqB;YACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,UAAU,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC9C,CAAC;YACD,MAAM,MAAM,CAAC,UAAU,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;QACxE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,UAAU,GAAG,qCAAqC,CAAC;gBACvD,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBAC9D,kBAAkB;aACnB,CAAC,CAAA;YAEF,MAAM,eAAe,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAA;YACrD,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;YAChD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEpD,gCAAgC;YAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7B,MAAM,UAAU,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC9C,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAA;QACzC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,OAAO,GAAG,8BAA8B,CAAC;gBAC7C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;YAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;gBACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnC,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,OAAO,GAAG,8BAA8B,CAAC;gBAC7C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;YAEF,eAAe;YACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACzB,CAAC;YAED,oBAAoB;YACpB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,OAAO,GAAG,8BAA8B,CAAC;gBAC7C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;YAEF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAC1B,MAAM,OAAO,GAAG,8BAA8B,CAAC;gBAC7C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;YAEF,eAAe;YACf,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACvB,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAEnD,QAAQ;YACR,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAEvB,oBAAoB;YACpB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;YACnC,MAAM,OAAO,GAAG,8BAA8B,CAAC;gBAC7C,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;YAEF,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;YAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAA;QAChE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/middleware/rate-limit.js

@@ -0,0 +1,206 @@
+/**
+ * Rate Limiting Middleware
+ *
+ * Protects services from abuse with configurable rate limiting.
+ * Supports sliding window algorithm with in-memory or custom stores.
+ */
+import { RaffelError } from '../core/index.js';
+/**
+ * Create an in-memory rate limit store
+ */
+export function createInMemoryStore() {
+    const entries = new Map();
+    // Clean up expired entries periodically
+    const cleanupInterval = setInterval(() => {
+        const now = Date.now();
+        for (const [key, entry] of entries) {
+            // Remove entries that haven't been touched in 5 minutes
+            if (now - entry.lastClean > 300000) {
+                entries.delete(key);
+            }
+        }
+    }, 60000); // Run every minute
+    // Make interval non-blocking
+    if (cleanupInterval.unref) {
+        cleanupInterval.unref();
+    }
+    return {
+        async increment(key, windowMs) {
+            const now = Date.now();
+            const windowStart = now - windowMs;
+            let entry = entries.get(key);
+            if (!entry) {
+                entry = { timestamps: [], lastClean: now };
+                entries.set(key, entry);
+            }
+            // Remove timestamps outside the window (sliding window)
+            entry.timestamps = entry.timestamps.filter((ts) => ts > windowStart);
+            entry.lastClean = now;
+            // Add current request
+            entry.timestamps.push(now);
+            // Calculate reset time (oldest timestamp + window, or now + window if fresh)
+            const oldestInWindow = entry.timestamps[0] || now;
+            const resetAt = oldestInWindow + windowMs;
+            return {
+                count: entry.timestamps.length,
+                resetAt,
+            };
+        },
+        async get(key) {
+            const entry = entries.get(key);
+            if (!entry || entry.timestamps.length === 0) {
+                return null;
+            }
+            const oldestInWindow = entry.timestamps[0];
+            return {
+                count: entry.timestamps.length,
+                resetAt: oldestInWindow + 60000, // Approximate, store doesn't track windowMs
+            };
+        },
+        async reset(key) {
+            entries.delete(key);
+        },
+    };
+}
+/**
+ * Default key extractor - uses auth principal or falls back to a constant
+ */
+function defaultKeyExtractor(envelope, ctx) {
+    // Try to use authenticated principal
+    if (ctx.auth?.principal) {
+        return `user:${ctx.auth.principal}`;
+    }
+    // Try to use request ID as a proxy for connection
+    if (envelope.metadata?.['x-forwarded-for']) {
+        return `ip:${envelope.metadata['x-forwarded-for']}`;
+    }
+    if (envelope.metadata?.['x-real-ip']) {
+        return `ip:${envelope.metadata['x-real-ip']}`;
+    }
+    // Fallback to a general key (not recommended for production)
+    return `global:${envelope.procedure}`;
+}
+/**
+ * Create rate limiting middleware
+ */
+export function createRateLimitMiddleware(options) {
+    const { limit, windowMs = 60000, keyExtractor = defaultKeyExtractor, store = createInMemoryStore(), onLimitReached, skip, skipProcedures = [], includeHeaders = false, } = options;
+    return async (envelope, ctx, next) => {
+        // Check if should skip
+        if (skipProcedures.includes(envelope.procedure)) {
+            return next();
+        }
+        if (skip && (await skip(envelope, ctx))) {
+            return next();
+        }
+        // Extract key for rate limiting
+        const key = keyExtractor(envelope, ctx);
+        // Increment counter
+        const { count, resetAt } = await store.increment(key, windowMs);
+        const remaining = Math.max(0, limit - count);
+        const exceeded = count > limit;
+        const info = {
+            limit,
+            remaining,
+            resetAt,
+            exceeded,
+        };
+        // Add rate limit headers to context if configured
+        if (includeHeaders) {
+            ;
+            ctx.rateLimitInfo = info;
+        }
+        // Check if exceeded
+        if (exceeded) {
+            if (onLimitReached) {
+                await onLimitReached(envelope, ctx, info);
+            }
+            throw new RaffelError('RATE_LIMITED', `Rate limit exceeded. Try again in ${Math.ceil((resetAt - Date.now()) / 1000)} seconds.`, {
+                limit,
+                remaining: 0,
+                resetAt,
+                retryAfter: Math.ceil((resetAt - Date.now()) / 1000),
+            });
+        }
+        return next();
+    };
+}
+/**
+ * Create rate limit middleware with different limits per procedure
+ */
+export function createPerProcedureRateLimitMiddleware(options) {
+    const { limits, defaultLimit, ...baseOptions } = options;
+    const store = baseOptions.store ?? createInMemoryStore();
+    // Compile procedure patterns
+    const compiledLimits = limits.map((l) => ({
+        ...l,
+        pattern: l.procedure,
+        matches: createMatcher(l.procedure),
+    }));
+    function createMatcher(pattern) {
+        if (pattern === '*')
+            return () => true;
+        if (pattern.endsWith('.*')) {
+            const prefix = pattern.slice(0, -2) + '.';
+            return (p) => p.startsWith(prefix);
+        }
+        return (p) => p === pattern;
+    }
+    function findLimit(procedure) {
+        for (const compiled of compiledLimits) {
+            if (compiled.matches(procedure)) {
+                return { limit: compiled.limit, windowMs: compiled.windowMs ?? 60000 };
+            }
+        }
+        return defaultLimit ? { limit: defaultLimit.limit, windowMs: defaultLimit.windowMs ?? 60000 } : null;
+    }
+    return async (envelope, ctx, next) => {
+        // Find applicable limit
+        const procedureLimit = findLimit(envelope.procedure);
+        // If no limit configured, pass through
+        if (!procedureLimit) {
+            return next();
+        }
+        // Create a rate limiter for this specific configuration
+        const middleware = createRateLimitMiddleware({
+            ...baseOptions,
+            limit: procedureLimit.limit,
+            windowMs: procedureLimit.windowMs,
+            store,
+            keyExtractor: (e, c) => {
+                const baseKey = (baseOptions.keyExtractor ?? defaultKeyExtractor)(e, c);
+                return `${baseKey}:${e.procedure}`;
+            },
+        });
+        return middleware(envelope, ctx, next);
+    };
+}
+/**
+ * Sliding window rate limiter for more precise rate limiting
+ */
+export function createSlidingWindowRateLimiter(options) {
+    const { limit, windowMs } = options;
+    const windows = new Map();
+    return {
+        check(key) {
+            const now = Date.now();
+            const windowStart = now - windowMs;
+            let timestamps = windows.get(key) || [];
+            timestamps = timestamps.filter((ts) => ts > windowStart);
+            const count = timestamps.length;
+            const remaining = Math.max(0, limit - count);
+            const oldestInWindow = timestamps[0] || now;
+            const resetAt = oldestInWindow + windowMs;
+            if (count < limit) {
+                timestamps.push(now);
+                windows.set(key, timestamps);
+                return { allowed: true, remaining: remaining - 1, resetAt };
+            }
+            return { allowed: false, remaining: 0, resetAt };
+        },
+        reset(key) {
+            windows.delete(key);
+        },
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/middleware/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AA6D9C;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAA;IAE9C,wCAAwC;IACxC,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,wDAAwD;YACxD,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;gBACnC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACrB,CAAC;QACH,CAAC;IACH,CAAC,EAAE,KAAK,CAAC,CAAA,CAAC,mBAAmB;IAE7B,6BAA6B;IAC7B,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;QAC1B,eAAe,CAAC,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,QAAgB;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,MAAM,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAA;YAElC,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAA;gBAC1C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACzB,CAAC;YAED,wDAAwD;YACxD,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAA;YACpE,KAAK,CAAC,SAAS,GAAG,GAAG,CAAA;YAErB,sBAAsB;YACtB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAE1B,6EAA6E;YAC7E,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAA;YACjD,MAAM,OAAO,GAAG,cAAc,GAAG,QAAQ,CAAA;YAEzC,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;gBAC9B,OAAO;aACR,CAAA;QACH,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,GAAW;YACnB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAA;YACb,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;YAC1C,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;gBAC9B,OAAO,EAAE,cAAc,GAAG,KAAK,EAAE,4CAA4C;aAC9E,CAAA;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,GAAW;YACrB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;KACF,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,QAAkB,EAAE,GAAY;IAC3D,qCAAqC;IACrC,IAAI,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACxB,OAAO,QAAQ,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;IACrC,CAAC;IAED,kDAAkD;IAClD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3C,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAA;IACrD,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,OAAO,MAAM,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAA;IAC/C,CAAC;IAED,6DAA6D;IAC7D,OAAO,UAAU,QAAQ,CAAC,SAAS,EAAE,CAAA;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAyB;IACjE,MAAM,EACJ,KAAK,EACL,QAAQ,GAAG,KAAK,EAChB,YAAY,GAAG,mBAAmB,EAClC,KAAK,GAAG,mBAAmB,EAAE,EAC7B,cAAc,EACd,IAAI,EACJ,cAAc,GAAG,EAAE,EACnB,cAAc,GAAG,KAAK,GACvB,GAAG,OAAO,CAAA;IAEX,OAAO,KAAK,EAAE,QAAkB,EAAE,GAAY,EAAE,IAA4B,EAAE,EAAE;QAC9E,uBAAuB;QACvB,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAChD,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,gCAAgC;QAChC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QAEvC,oBAAoB;QACpB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,CAAA;QAC5C,MAAM,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAA;QAE9B,MAAM,IAAI,GAAkB;YAC1B,KAAK;YACL,SAAS;YACT,OAAO;YACP,QAAQ;SACT,CAAA;QAED,kDAAkD;QAClD,IAAI,cAAc,EAAE,CAAC;YACnB,CAAC;YAAC,GAAW,CAAC,aAAa,GAAG,IAAI,CAAA;QACpC,CAAC;QAED,oBAAoB;QACpB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YAC3C,CAAC;YAED,MAAM,IAAI,WAAW,CACnB,cAAc,EACd,qCAAqC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,EACxF;gBACE,KAAK;gBACL,SAAS,EAAE,CAAC;gBACZ,OAAO;gBACP,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;aACrD,CACF,CAAA;QACH,CAAC;QAED,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAqBD;;GAEG;AACH,MAAM,UAAU,qCAAqC,CACnD,OAAqC;IAErC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAA;IACxD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,mBAAmB,EAAE,CAAA;IAExD,6BAA6B;IAC7B,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,GAAG,CAAC;QACJ,OAAO,EAAE,CAAC,CAAC,SAAS;QACpB,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;KACpC,CAAC,CAAC,CAAA;IAEH,SAAS,aAAa,CAAC,OAAe;QACpC,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,GAAG,EAAE,CAAC,IAAI,CAAA;QACtC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAA;YACzC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QACpC,CAAC;QACD,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAA;IAC7B,CAAC;IAED,SAAS,SAAS,CAAC,SAAiB;QAClC,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;YACtC,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAA;YACxE,CAAC;QACH,CAAC;QACD,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IACtG,CAAC;IAED,OAAO,KAAK,EAAE,QAAkB,EAAE,GAAY,EAAE,IAA4B,EAAE,EAAE;QAC9E,wBAAwB;QACxB,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QAEpD,uCAAuC;QACvC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QAED,wDAAwD;QACxD,MAAM,UAAU,GAAG,yBAAyB,CAAC;YAC3C,GAAG,WAAW;YACd,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,KAAK;YACL,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACrB,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBACvE,OAAO,GAAG,OAAO,IAAI,CAAC,CAAC,SAAS,EAAE,CAAA;YACpC,CAAC;SACF,CAAC,CAAA;QAEF,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IACxC,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAG9C;IAIC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAA;IAE3C,OAAO;QACL,KAAK,CAAC,GAAW;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,MAAM,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAA;YAElC,IAAI,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;YACvC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAA;YAExD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAA;YAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,CAAA;YAC5C,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAA;YAC3C,MAAM,OAAO,GAAG,cAAc,GAAG,QAAQ,CAAA;YAEzC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBACpB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;gBAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,OAAO,EAAE,CAAA;YAC7D,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAA;QAClD,CAAC;QAED,KAAK,CAAC,GAAW;YACf,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;KACF,CAAA;AACH,CAAC"}