ugly-app 0.1.0

package/dist/server/Nats.js

@@ -0,0 +1,162 @@
+import { connect, RetentionPolicy, StringCodec, } from 'nats';
+const codec = StringCodec();
+let natsConnection = null;
+let jetStreamClient = null;
+// Active subscriptions tracked for leak detection
+const activeSubscriptions = new Map();
+let subIdCounter = 0;
+const SUBSCRIPTION_LEAK_THRESHOLD = 20;
+/**
+ * Connect to NATS. Called once at server startup.
+ * Development: connects to localhost:4222
+ * Production: uses NATS_URL env var (and NATS_CREDS for Synadia Cloud)
+ */
+export async function connectNats(config) {
+    const url = config?.url ?? process.env['NATS_URL'] ?? 'nats://localhost:4222';
+    const connectOptions = { servers: url };
+    if (config?.creds ?? process.env['NATS_CREDS']) {
+        const { credsAuthenticator } = await import('nats');
+        const fs = await import('fs');
+        const credsPath = config?.creds ?? process.env['NATS_CREDS'];
+        const credsContent = fs.readFileSync(credsPath);
+        connectOptions.authenticator = credsAuthenticator(credsContent);
+    }
+    natsConnection = await connect(connectOptions);
+    console.log('[NATS] Connected', { url });
+    natsConnection
+        .closed()
+        .then(() => {
+        console.log('[NATS] Connection closed');
+        natsConnection = null;
+        jetStreamClient = null;
+    })
+        .catch((err) => {
+        console.error('[NATS] Connection closed with error', err);
+        natsConnection = null;
+        jetStreamClient = null;
+    });
+    return natsConnection;
+}
+/**
+ * Get the active NATS connection. Throws if not connected.
+ */
+export function getNatsConnection() {
+    if (!natsConnection) {
+        throw new Error('[NATS] Not connected. Call connectNats() first.');
+    }
+    return natsConnection;
+}
+/**
+ * Publish a message to a NATS subject.
+ * @param subject - NATS subject (e.g. 'user.updates.abc123')
+ * @param payload - JSON-serializable payload
+ */
+export function natsPublish(subject, payload) {
+    const conn = getNatsConnection();
+    conn.publish(subject, codec.encode(JSON.stringify(payload)));
+}
+/**
+ * Subscribe to a NATS subject.
+ * Returns an unsubscribe function — ALWAYS call it when done to prevent leaks.
+ *
+ * @example
+ * const unsub = await natsSubscribe('user.updates.*', (msg) => {
+ *   console.log(msg.subject, msg.data);
+ * });
+ * // Later:
+ * unsub();
+ */
+export async function natsSubscribe(subject, handler) {
+    const conn = getNatsConnection();
+    const sub = conn.subscribe(subject);
+    const subId = ++subIdCounter;
+    activeSubscriptions.set(String(subId), { subject, createdAt: new Date() });
+    // Check for subscription leaks
+    if (activeSubscriptions.size > SUBSCRIPTION_LEAK_THRESHOLD) {
+        const oldest = [...activeSubscriptions.entries()].sort((a, b) => a[1].createdAt.getTime() - b[1].createdAt.getTime())[0];
+        console.error('[NATS] Possible subscription leak detected', {
+            activeCount: activeSubscriptions.size,
+            threshold: SUBSCRIPTION_LEAK_THRESHOLD,
+            oldestSubject: oldest?.[1]?.subject,
+            oldestAge: oldest
+                ? `${Math.round((Date.now() - oldest[1].createdAt.getTime()) / 1000)}s`
+                : 'unknown',
+            fix: 'Ensure you call the unsubscribe() function returned by natsSubscribe()',
+            example: 'const unsub = await natsSubscribe(subject, handler); // later: unsub();',
+        });
+    }
+    // Process messages asynchronously
+    (async () => {
+        for await (const msg of sub) {
+            try {
+                const data = JSON.parse(codec.decode(msg.data));
+                await handler({ subject: msg.subject, data });
+            }
+            catch (err) {
+                console.error('[NATS] Message handler error', {
+                    subject: msg.subject,
+                    err,
+                });
+            }
+        }
+    })().catch((err) => {
+        console.error('[NATS] Subscription loop error', { subject, err });
+    });
+    return () => {
+        sub.unsubscribe();
+        activeSubscriptions.delete(String(subId));
+    };
+}
+/**
+ * Get the JetStream client for durable queues.
+ * JetStream must be enabled on the NATS server (pass -js flag).
+ */
+export async function getJetStream() {
+    if (!jetStreamClient) {
+        const conn = getNatsConnection();
+        jetStreamClient = conn.jetstream();
+    }
+    return jetStreamClient;
+}
+/**
+ * Ensure a JetStream stream exists (idempotent).
+ * Creates the stream if it doesn't exist; updates if config differs.
+ */
+export async function ensureStream(config) {
+    const conn = getNatsConnection();
+    const jsm = await conn.jetstreamManager();
+    try {
+        await jsm.streams.info(config.name);
+        // Stream exists, update subjects (retention policy cannot be changed after creation)
+        await jsm.streams.update(config.name, {
+            subjects: config.subjects,
+        });
+    }
+    catch (err) {
+        // Only create if stream doesn't exist; re-throw other errors
+        const isNotFound = err instanceof Error &&
+            (err.message.includes('stream not found') || err.message.includes('404'));
+        if (!isNotFound) {
+            throw err;
+        }
+        // Stream doesn't exist, create it
+        await jsm.streams.add({
+            name: config.name,
+            subjects: config.subjects,
+            retention: config.retentionPolicy ?? RetentionPolicy.Limits,
+        });
+        console.log('[NATS] Stream created', { name: config.name });
+    }
+}
+/**
+ * Gracefully close the NATS connection.
+ * Call during server shutdown.
+ */
+export async function closeNats() {
+    if (natsConnection) {
+        await natsConnection.close();
+        natsConnection = null;
+        jetStreamClient = null;
+    }
+}
+//# sourceMappingURL=Nats.js.map

package/dist/server/Nats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Nats.js","sourceRoot":"","sources":["../../src/server/Nats.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EAIP,eAAe,EACf,WAAW,GACZ,MAAM,MAAM,CAAC;AAEd,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;AAE5B,IAAI,cAAc,GAA0B,IAAI,CAAC;AACjD,IAAI,eAAe,GAA2B,IAAI,CAAC;AAEnD,kDAAkD;AAClD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAGhC,CAAC;AACJ,IAAI,YAAY,GAAG,CAAC,CAAC;AACrB,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAOvC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAmB;IAEnB,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,uBAAuB,CAAC;IAE9E,MAAM,cAAc,GAAkC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAEvE,IAAI,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAE,CAAC;QAC9D,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAChD,cAAc,CAAC,aAAa,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC;IAED,cAAc,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAEzC,cAAc;SACX,MAAM,EAAE;SACR,IAAI,CAAC,GAAG,EAAE;QACT,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,cAAc,GAAG,IAAI,CAAC;QACtB,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;QAC1D,cAAc,GAAG,IAAI,CAAC;QACtB,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC,CAAC,CAAC;IAEL,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAgB;IAC3D,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,OAA0E;IAE1E,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAEpC,MAAM,KAAK,GAAG,EAAE,YAAY,CAAC;IAC7B,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAE3E,+BAA+B;IAC/B,IAAI,mBAAmB,CAAC,IAAI,GAAG,2BAA2B,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,CAAC,GAAG,mBAAmB,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CACpD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAC9D,CAAC,CAAC,CAAC,CAAC;QACL,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE;YAC1D,WAAW,EAAE,mBAAmB,CAAC,IAAI;YACrC,SAAS,EAAE,2BAA2B;YACtC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO;YACnC,SAAS,EAAE,MAAM;gBACf,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG;gBACvE,CAAC,CAAC,SAAS;YACb,GAAG,EAAE,wEAAwE;YAC7E,OAAO,EACL,yEAAyE;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,CAAC,KAAK,IAAI,EAAE;QACV,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAY,CAAC;gBAC3D,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBAC5C,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,GAAG;iBACJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC1B,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,EAAE;QACV,GAAG,CAAC,WAAW,EAAE,CAAC;QAClB,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAIlC;IACC,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAqB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAE5D,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,qFAAqF;QACrF,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,6DAA6D;QAC7D,MAAM,UAAU,GACd,GAAG,YAAY,KAAK;YACpB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,kCAAkC;QAClC,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;YACpB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM;SAC5D,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;QAC7B,cAAc,GAAG,IAAI,CAAC;QACtB,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/server/NatsStore.d.ts

@@ -0,0 +1,26 @@
+import type { DBObject } from '../shared/DB.js';
+export type NatsDocMessage<T = DBObject> = {
+    type: 'update';
+    item: T;
+} | {
+    type: 'delete';
+    id: string;
+};
+/**
+ * Subscribe to changes for a specific document.
+ * Subject format: db.{collection}.{escapeNatsToken(id)}
+ * Returns an unsubscribe function (synchronous).
+ *
+ * Do NOT use natsSubscribe() from Nats.ts — it is async. Call conn.subscribe() directly.
+ */
+export declare function subscribeDoc(collection: string, id: string, callback: (msg: NatsDocMessage) => void): () => void;
+/**
+ * Subscribe to all doc-level changes in a collection.
+ * Subject: db.{collection}.> (wildcard — matches all doc-level subjects).
+ * The bare db.{collection} collection-level events are intentionally not subscribed to;
+ * DocumentNotifier always publishes both, so doc-level events alone are sufficient.
+ * Returns an unsubscribe function (synchronous).
+ */
+export declare function subscribeCollection(collection: string, callback: (msg: NatsDocMessage) => void): () => void;
+export declare function escapeNatsToken(token: string): string;
+//# sourceMappingURL=NatsStore.d.ts.map

package/dist/server/NatsStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NatsStore.d.ts","sourceRoot":"","sources":["../../src/server/NatsStore.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAsBhD,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,QAAQ,IACnC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,GACtC,MAAM,IAAI,CAuBZ;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,GACtC,MAAM,IAAI,CAuBZ;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMrD"}

package/dist/server/NatsStore.js

@@ -0,0 +1,86 @@
+import { StringCodec } from 'nats';
+import { getNatsConnection } from './Nats.js';
+const sc = StringCodec();
+// Subscription leak detection — separate from Nats.ts's tracker because
+// NatsStore calls conn.subscribe() directly (not natsSubscribe()).
+// Threshold is 100 (vs Nats.ts's 20) because each tracked doc per connected
+// socket opens one subscription; steady-state with active users easily reaches 50+.
+let activeCount = 0;
+const LEAK_THRESHOLD = 100;
+function checkLeak(subject) {
+    activeCount++;
+    if (activeCount > LEAK_THRESHOLD) {
+        console.warn('[NatsStore] Subscription leak detected', {
+            activeCount,
+            subject,
+        });
+    }
+}
+/**
+ * Subscribe to changes for a specific document.
+ * Subject format: db.{collection}.{escapeNatsToken(id)}
+ * Returns an unsubscribe function (synchronous).
+ *
+ * Do NOT use natsSubscribe() from Nats.ts — it is async. Call conn.subscribe() directly.
+ */
+export function subscribeDoc(collection, id, callback) {
+    const subject = `db.${collection}.${escapeNatsToken(id)}`;
+    const conn = getNatsConnection();
+    const sub = conn.subscribe(subject);
+    checkLeak(subject);
+    (async () => {
+        for await (const msg of sub) {
+            try {
+                const parsed = JSON.parse(sc.decode(msg.data));
+                callback(parsed);
+            }
+            catch (err) {
+                console.error('[NatsStore] Failed to parse message', { subject, err });
+            }
+        }
+    })().catch((err) => {
+        console.error('[NatsStore] Subscription loop error', { subject, err });
+    });
+    return () => {
+        sub.unsubscribe();
+        activeCount--;
+    };
+}
+/**
+ * Subscribe to all doc-level changes in a collection.
+ * Subject: db.{collection}.> (wildcard — matches all doc-level subjects).
+ * The bare db.{collection} collection-level events are intentionally not subscribed to;
+ * DocumentNotifier always publishes both, so doc-level events alone are sufficient.
+ * Returns an unsubscribe function (synchronous).
+ */
+export function subscribeCollection(collection, callback) {
+    const subject = `db.${collection}.>`;
+    const conn = getNatsConnection();
+    const sub = conn.subscribe(subject);
+    checkLeak(subject);
+    (async () => {
+        for await (const msg of sub) {
+            try {
+                const parsed = JSON.parse(sc.decode(msg.data));
+                callback(parsed);
+            }
+            catch (err) {
+                console.error('[NatsStore] Failed to parse message', { subject, err });
+            }
+        }
+    })().catch((err) => {
+        console.error('[NatsStore] Subscription loop error', { subject, err });
+    });
+    return () => {
+        sub.unsubscribe();
+        activeCount--;
+    };
+}
+export function escapeNatsToken(token) {
+    return token
+        .replace(/\./g, '_DOT_')
+        .replace(/\+/g, '_PLUS_')
+        .replace(/\*/g, '_STAR_')
+        .replace(/>/g, '_GT_');
+}
+//# sourceMappingURL=NatsStore.js.map

package/dist/server/NatsStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NatsStore.js","sourceRoot":"","sources":["../../src/server/NatsStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAEnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;AAEzB,wEAAwE;AACxE,mEAAmE;AACnE,4EAA4E;AAC5E,oFAAoF;AACpF,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,SAAS,SAAS,CAAC,OAAe;IAChC,WAAW,EAAE,CAAC;IACd,IAAI,WAAW,GAAG,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE;YACrD,WAAW;YACX,OAAO;SACR,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAMD;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,UAAkB,EAClB,EAAU,EACV,QAAuC;IAEvC,MAAM,OAAO,GAAG,MAAM,UAAU,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,OAAO,CAAC,CAAC;IAEnB,CAAC,KAAK,IAAI,EAAE;QACV,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAmB,CAAC;gBACjE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC1B,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,EAAE;QACV,GAAG,CAAC,WAAW,EAAE,CAAC;QAClB,WAAW,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,QAAuC;IAEvC,MAAM,OAAO,GAAG,MAAM,UAAU,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,OAAO,CAAC,CAAC;IAEnB,CAAC,KAAK,IAAI,EAAE;QACV,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAmB,CAAC;gBACjE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC1B,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,EAAE;QACV,GAAG,CAAC,WAAW,EAAE,CAAC;QAClB,WAAW,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;SACxB,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC"}

package/dist/server/PushNotification.d.ts

@@ -0,0 +1,33 @@
+import type { WebSocket } from 'ws';
+export interface PushNotification {
+    title: string;
+    body: string;
+    uri?: string;
+    imageUrl?: string;
+    data?: Record<string, string>;
+}
+export interface PushToken {
+    userId: string;
+    token: string;
+    platform: 'web' | 'ios' | 'android';
+    updatedAt: Date;
+}
+/**
+ * Register a WebSocket connection for push notifications.
+ * Called when a user authenticates a WebSocket session.
+ * Returns an unregister function to call when connection closes.
+ */
+export declare function registerPushConnection(userId: string, ws: WebSocket): Promise<() => void>;
+/**
+ * Send a push notification to a user.
+ * Delivers via WebSocket (cross-server via Redis pub/sub).
+ * Also sends via FCM if token is available and FCM is configured.
+ */
+export declare function sendPush(userId: string, notification: PushNotification): Promise<void>;
+/**
+ * Send an FCM push notification.
+ * Only works if Firebase is configured via env vars:
+ * FIREBASE_PROJECT_ID, FIREBASE_PRIVATE_KEY, FIREBASE_CLIENT_EMAIL
+ */
+export declare function sendFcmPush(fcmToken: string, notification: PushNotification): Promise<void>;
+//# sourceMappingURL=PushNotification.d.ts.map

package/dist/server/PushNotification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PushNotification.d.ts","sourceRoot":"","sources":["../../src/server/PushNotification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAGpC,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;IACpC,SAAS,EAAE,IAAI,CAAC;CACjB;AAUD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,SAAS,GACZ,OAAO,CAAC,MAAM,IAAI,CAAC,CAkCrB;AA4BD;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,gBAAgB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,gBAAgB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAoDf"}

package/dist/server/PushNotification.js

@@ -0,0 +1,131 @@
+import { redisPublish, redisSubscribe } from './Redis.js';
+const PUSH_CHANNEL_PREFIX = 'push:';
+// Map of userId → Set of local WebSocket connections
+const localConnections = new Map();
+// Map of userId → Redis unsubscribe function (one subscription per userId)
+const redisUnsubscribers = new Map();
+/**
+ * Register a WebSocket connection for push notifications.
+ * Called when a user authenticates a WebSocket session.
+ * Returns an unregister function to call when connection closes.
+ */
+export async function registerPushConnection(userId, ws) {
+    if (!localConnections.has(userId)) {
+        localConnections.set(userId, new Set());
+    }
+    localConnections.get(userId).add(ws);
+    // Subscribe to Redis if this is the first connection for this user.
+    // Set a no-op placeholder BEFORE the await so concurrent calls for the same
+    // userId skip this branch and don't create duplicate Redis subscriptions.
+    if (!redisUnsubscribers.has(userId)) {
+        redisUnsubscribers.set(userId, () => { }); // placeholder — prevents race
+        const unsub = await redisSubscribe(`${PUSH_CHANNEL_PREFIX}${userId}`, (message) => {
+            deliverToLocalConnections(userId, message);
+        });
+        redisUnsubscribers.set(userId, unsub); // replace placeholder with real unsub
+    }
+    return () => {
+        const connections = localConnections.get(userId);
+        if (connections) {
+            connections.delete(ws);
+            if (connections.size === 0) {
+                localConnections.delete(userId);
+                const unsub = redisUnsubscribers.get(userId);
+                if (unsub) {
+                    unsub();
+                    redisUnsubscribers.delete(userId);
+                }
+            }
+        }
+    };
+}
+function deliverToLocalConnections(userId, message) {
+    const connections = localConnections.get(userId);
+    if (!connections)
+        return;
+    let notification;
+    try {
+        notification = JSON.parse(message);
+    }
+    catch (err) {
+        console.error('[Push] Failed to parse notification message', {
+            userId,
+            err,
+        });
+        return;
+    }
+    for (const ws of connections) {
+        if (ws.readyState === 1 /* OPEN */) {
+            try {
+                ws.send(JSON.stringify({ type: 'pushNotification', data: notification }));
+            }
+            catch (err) {
+                console.error('[Push] WebSocket send error', { userId, err });
+            }
+        }
+    }
+}
+/**
+ * Send a push notification to a user.
+ * Delivers via WebSocket (cross-server via Redis pub/sub).
+ * Also sends via FCM if token is available and FCM is configured.
+ */
+export async function sendPush(userId, notification) {
+    const message = JSON.stringify(notification);
+    // Publish to Redis → all servers with connections for this user receive it
+    await redisPublish(`${PUSH_CHANNEL_PREFIX}${userId}`, message);
+}
+/**
+ * Send an FCM push notification.
+ * Only works if Firebase is configured via env vars:
+ * FIREBASE_PROJECT_ID, FIREBASE_PRIVATE_KEY, FIREBASE_CLIENT_EMAIL
+ */
+export async function sendFcmPush(fcmToken, notification) {
+    const projectId = process.env['FIREBASE_PROJECT_ID'];
+    const privateKey = process.env['FIREBASE_PRIVATE_KEY'];
+    const clientEmail = process.env['FIREBASE_CLIENT_EMAIL'];
+    if (!projectId || !privateKey || !clientEmail) {
+        console.error('[Push] FCM not configured - missing FIREBASE_* env vars');
+        return;
+    }
+    try {
+        // Dynamic import via Function to avoid TS static resolution of optional dep
+        // eslint-disable-next-line @typescript-eslint/no-implied-eval
+        const importFn = new Function('m', 'return import(m)');
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const admin = (await importFn('firebase-admin'));
+        if (!admin.apps.length) {
+            admin.initializeApp({
+                credential: admin.credential.cert({
+                    projectId,
+                    privateKey: privateKey.replace(/\\n/g, '\n'),
+                    clientEmail,
+                }),
+            });
+        }
+        await admin.messaging().send({
+            token: fcmToken,
+            notification: {
+                title: notification.title,
+                body: notification.body,
+                imageUrl: notification.imageUrl,
+            },
+            webpush: notification.uri
+                ? {
+                    fcmOptions: { link: notification.uri },
+                }
+                : undefined,
+            apns: notification.uri
+                ? {
+                    payload: { aps: { sound: 'default' } },
+                    fcmOptions: { imageUrl: notification.imageUrl },
+                }
+                : undefined,
+            data: notification.data,
+        });
+    }
+    catch (err) {
+        console.error('[Push] FCM send error', { err });
+    }
+}
+//# sourceMappingURL=PushNotification.js.map

package/dist/server/PushNotification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PushNotification.js","sourceRoot":"","sources":["../../src/server/PushNotification.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAiB1D,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAEpC,qDAAqD;AACrD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0B,CAAC;AAE3D,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,EAAa;IAEb,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEtC,oEAAoE;IACpE,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,8BAA8B;QACxE,MAAM,KAAK,GAAG,MAAM,cAAc,CAChC,GAAG,mBAAmB,GAAG,MAAM,EAAE,EACjC,CAAC,OAAO,EAAE,EAAE;YACV,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC,CACF,CAAC;QACF,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,sCAAsC;IAC/E,CAAC;IAED,OAAO,GAAG,EAAE;QACV,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvB,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC3B,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAChC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,KAAK,EAAE,CAAC;oBACV,KAAK,EAAE,CAAC;oBACR,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAc,EAAE,OAAe;IAChE,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,WAAW;QAAE,OAAO;IACzB,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE;YAC3D,MAAM;YACN,GAAG;SACJ,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CACjE,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAc,EACd,YAA8B;IAE9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAE7C,2EAA2E;IAC3E,MAAM,YAAY,CAAC,GAAG,mBAAmB,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,YAA8B;IAE9B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAEzD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,4EAA4E;QAC5E,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAEhC,CAAC;QACtB,8DAA8D;QAC9D,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,CAAQ,CAAC;QAExD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,aAAa,CAAC;gBAClB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;oBAChC,SAAS;oBACT,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;oBAC5C,WAAW;iBACZ,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC;YAC3B,KAAK,EAAE,QAAQ;YACf,YAAY,EAAE;gBACZ,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,QAAQ,EAAE,YAAY,CAAC,QAAQ;aAChC;YACD,OAAO,EAAE,YAAY,CAAC,GAAG;gBACvB,CAAC,CAAC;oBACE,UAAU,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,EAAE;iBACvC;gBACH,CAAC,CAAC,SAAS;YACb,IAAI,EAAE,YAAY,CAAC,GAAG;gBACpB,CAAC,CAAC;oBACE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;oBACtC,UAAU,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE;iBAChD;gBACH,CAAC,CAAC,SAAS;YACb,IAAI,EAAE,YAAY,CAAC,IAAI;SACxB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/server/RateLimit.d.ts

@@ -0,0 +1,28 @@
+export interface RateLimitConfig {
+    windowSeconds?: number;
+    maxPerWindow?: number;
+    maxQueueDepth?: number;
+    maxWaitMs?: number;
+}
+export interface UsageRecord {
+    userId: string;
+    operation: string;
+    used: number;
+    limit: number;
+    windowStart: Date;
+    queued: number;
+}
+export interface RateLimiter {
+    check(userId: string, operation: string, estimatedCost: number): Promise<void>;
+    charge(userId: string, operation: string, actualCost: number): Promise<void>;
+    getUsage(userId: string, operation: string): Promise<UsageRecord>;
+}
+export declare class RateLimitError extends Error {
+    readonly userId: string;
+    readonly operation: string;
+    readonly used: number;
+    readonly limit: number;
+    constructor(userId: string, operation: string, used: number, limit: number);
+}
+export declare function createRateLimiter(config?: RateLimitConfig): RateLimiter;
+//# sourceMappingURL=RateLimit.d.ts.map

package/dist/server/RateLimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimit.d.ts","sourceRoot":"","sources":["../../src/server/RateLimit.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAE9B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,IAAI,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAK1B,KAAK,CACH,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAAC;IAGjB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG7E,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACnE;AAED,qBAAa,cAAe,SAAQ,KAAK;aAErB,MAAM,EAAE,MAAM;aACd,SAAS,EAAE,MAAM;aACjB,IAAI,EAAE,MAAM;aACZ,KAAK,EAAE,MAAM;gBAHb,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM;CAKhC;AAED,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,eAAoB,GAAG,WAAW,CAgH3E"}

package/dist/server/RateLimit.js

@@ -0,0 +1,101 @@
+export class RateLimitError extends Error {
+    userId;
+    operation;
+    used;
+    limit;
+    constructor(userId, operation, used, limit) {
+        super(`[RateLimit] Rate limit exceeded for operation '${operation}'`);
+        this.userId = userId;
+        this.operation = operation;
+        this.used = used;
+        this.limit = limit;
+        this.name = 'RateLimitError';
+    }
+}
+export function createRateLimiter(config = {}) {
+    const { windowSeconds = 3600, maxPerWindow = 1.0, maxQueueDepth = 100, maxWaitMs = 300_000, } = config;
+    const usages = new Map();
+    function getKey(userId, operation) {
+        return `${userId}:${operation}`;
+    }
+    function getUsageEntry(key) {
+        let entry = usages.get(key);
+        if (!entry) {
+            entry = { used: 0, windowStart: new Date(), queue: [] };
+            usages.set(key, entry);
+        }
+        // Reset window if expired
+        const age = (Date.now() - entry.windowStart.getTime()) / 1000;
+        if (age >= windowSeconds) {
+            entry.used = 0;
+            entry.windowStart = new Date();
+        }
+        return entry;
+    }
+    function drainQueue(entry) {
+        while (entry.queue.length > 0) {
+            const next = entry.queue[0];
+            if (entry.used + next.cost <= maxPerWindow) {
+                entry.queue.shift();
+                next.resolve();
+            }
+            else {
+                break;
+            }
+        }
+    }
+    return {
+        async check(userId, operation, estimatedCost) {
+            const key = getKey(userId, operation);
+            const entry = getUsageEntry(key);
+            if (entry.used + estimatedCost <= maxPerWindow) {
+                // Within limit — proceed immediately
+                return;
+            }
+            // A single request that exceeds the entire window limit can never be served.
+            // Queuing it would block for maxWaitMs with no possibility of resolution.
+            if (estimatedCost > maxPerWindow) {
+                throw new RateLimitError(userId, operation, entry.used, maxPerWindow);
+            }
+            // Over limit — queue if there's room
+            if (entry.queue.length >= maxQueueDepth) {
+                throw new RateLimitError(userId, operation, entry.used, maxPerWindow);
+            }
+            await new Promise((resolve, reject) => {
+                const timer = setTimeout(() => {
+                    const idx = entry.queue.findIndex((q) => q.resolve === resolve);
+                    if (idx >= 0)
+                        entry.queue.splice(idx, 1);
+                    reject(new RateLimitError(userId, operation, entry.used, maxPerWindow));
+                }, maxWaitMs);
+                entry.queue.push({
+                    cost: estimatedCost,
+                    resolve: () => {
+                        clearTimeout(timer);
+                        resolve();
+                    },
+                    reject,
+                });
+            });
+        },
+        async charge(userId, operation, actualCost) {
+            const key = getKey(userId, operation);
+            const entry = getUsageEntry(key);
+            entry.used += actualCost;
+            drainQueue(entry);
+        },
+        async getUsage(userId, operation) {
+            const key = getKey(userId, operation);
+            const entry = getUsageEntry(key);
+            return {
+                userId,
+                operation,
+                used: entry.used,
+                limit: maxPerWindow,
+                windowStart: entry.windowStart,
+                queued: entry.queue.length,
+            };
+        },
+    };
+}
+//# sourceMappingURL=RateLimit.js.map

package/dist/server/RateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimit.js","sourceRoot":"","sources":["../../src/server/RateLimit.ts"],"names":[],"mappings":"AAsCA,MAAM,OAAO,cAAe,SAAQ,KAAK;IAErB;IACA;IACA;IACA;IAJlB,YACkB,MAAc,EACd,SAAiB,EACjB,IAAY,EACZ,KAAa;QAE7B,KAAK,CAAC,kDAAkD,SAAS,GAAG,CAAC,CAAC;QALtD,WAAM,GAAN,MAAM,CAAQ;QACd,cAAS,GAAT,SAAS,CAAQ;QACjB,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAQ;QAG7B,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,SAA0B,EAAE;IAC5D,MAAM,EACJ,aAAa,GAAG,IAAI,EACpB,YAAY,GAAG,GAAG,EAClB,aAAa,GAAG,GAAG,EACnB,SAAS,GAAG,OAAO,GACpB,GAAG,MAAM,CAAC;IAYX,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAExC,SAAS,MAAM,CAAC,MAAc,EAAE,SAAiB;QAC/C,OAAO,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC;IAClC,CAAC;IAED,SAAS,aAAa,CAAC,GAAW;QAChC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,0BAA0B;QAC1B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;QAC9D,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;YACf,KAAK,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QACjC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,UAAU,CAAC,KAAY;QAC9B,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;gBAC3C,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa;YAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAEjC,IAAI,KAAK,CAAC,IAAI,GAAG,aAAa,IAAI,YAAY,EAAE,CAAC;gBAC/C,qCAAqC;gBACrC,OAAO;YACT,CAAC;YAED,6EAA6E;YAC7E,0EAA0E;YAC1E,IAAI,aAAa,GAAG,YAAY,EAAE,CAAC;gBACjC,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACxE,CAAC;YAED,qCAAqC;YACrC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;gBACxC,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;oBAChE,IAAI,GAAG,IAAI,CAAC;wBAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBACzC,MAAM,CACJ,IAAI,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAChE,CAAC;gBACJ,CAAC,EAAE,SAAS,CAAC,CAAC;gBAEd,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,EAAE;wBACZ,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,OAAO,EAAE,CAAC;oBACZ,CAAC;oBACD,MAAM;iBACP,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC;YACzB,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS;YAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO;gBACL,MAAM;gBACN,SAAS;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,YAAY;gBACnB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;aAC3B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}