Function buildMessageRateGuard

packages/core/src/sentinel/message-rate-guard.ts:104–116

(queries: {
  sentinelActivities: MessageRateGuardQueries;
  logtoConfigs: Pick<LogtoConfigQueries, 'getMessageRateLimitOverride'>;
})

 * tenant config cache, so the common (no-override) path adds no per-send database hit.
 */
export const buildMessageRateGuard = async (queries: {
  sentinelActivities: MessageRateGuardQueries;
  logtoConfigs: Pick<LogtoConfigQueries, 'getMessageRateLimitOverride'>;
}): Promise<MessageRateGuard> => {
  // Fail open: a failed override read must not block a legitimate send, mirroring the guard's own
  // best-effort count query. `trySafe` returns `undefined` on error, so we fall back to the default.
  const override = await trySafe(queries.logtoConfigs.getMessageRateLimitOverride());
  const policy: MessageRateLimitPolicy = override
    ? { ...defaultMessageRateLimitPolicy, ...override }
    : defaultMessageRateLimitPolicy;

  return new MessageRateGuard(queries.sentinelActivities, policy);
};

/**
 * Wraps a message send with the {@link MessageRateGuard}: rejects with a 429 before sending if the