feat(auth): source plan limits from gateway headers

README.md

@@ -162,7 +162,6 @@ The Token API provides access to onchain NFT and fungible token data, including
 | `LARGE_QUERIES_ROWS_TRIGGER` | Row threshold for large-query metrics | `10000000` | No |
 | `LARGE_QUERIES_BYTES_TRIGGER` | Byte threshold for large-query metrics | `1000000000` | No |
 | `SKIP_NETWORKS_VALIDATION` | Skip startup validation that configured networks exist in ClickHouse | `false` | No |
-| `PLANS` | Plan limits as `name:limit,batched,intervals` entries | empty (disabled) | No |
 | `PRETTY_LOGGING` | Enable pretty console logging | `false` | No |
 | `VERBOSE` | Enable verbose logging | `false` | No |
 

index.ts

@@ -11,13 +11,7 @@ const app = new Hono();
 
 // Tracking all incoming requests
 app.use(async (c: Context, next) => {
-    const pathname = c.req.path;
-    logger.trace(`Incoming request: '${pathname}'`);
-
-    // Set `X-Plan` to free by default if none received
-    // This will have no effect unless `config.plans` is setup through ENV or CLI
-    if (!c.req.header('X-Plan')) c.req.raw.headers.set('X-Plan', 'free');
-
+    logger.trace(`Incoming request: '${c.req.path}'`);
     await next();
 });
 

src/config.ts

@@ -39,8 +39,6 @@ export const DEFAULT_SKIP_NETWORKS_VALIDATION = false;
 export const DEFAULT_CACHE_SERVER_MAX_AGE = 600; // s-maxage for shared/proxy caches
 export const DEFAULT_CACHE_MAX_AGE = 60; // max-age for browser caches
 export const DEFAULT_CACHE_STALE_WHILE_REVALIDATE = 30; // RFC 5861 stale-while-revalidate window
-export const DEFAULT_PLANS = '';
-
 // GitHub metadata
 const GIT_COMMIT = (process.env.GIT_COMMIT ?? (await $`git rev-parse HEAD`.text())).replace(/\n/, '').slice(0, 7);
 const GIT_DATE = (process.env.GIT_DATE ?? (await $`git log -1 --format=%cd --date=short`.text())).replace(/\n/, '');
@@ -58,65 +56,6 @@ export const APP_NAME = pkg.name;
 export const APP_DESCRIPTION = pkg.description;
 export const APP_VERSION = `${GIT_APP.version}+${GIT_APP.commit} (${GIT_APP.date})`;
 
-/**
- * Parse plan configuration string into a Map.
- * Format: "name:limit,batched,intervals;name2:limit,batched,intervals"
- * Intervals are pipe-separated: "1m|5m|15m"
- * Returns null if input is empty (bypasses plan limits for local development).
- */
-export function parsePlans(val: string) {
-    if (!val || val.trim() === '') {
-        return null;
-    }
-
-    const plans = new Map<
-        string,
-        {
-            maxLimit: number;
-            maxBatched: number;
-            allowedIntervals: string[];
-        }
-    >();
-
-    val.split(';').forEach((planDef) => {
-        const [name, limits] = planDef.split(':');
-        if (!name || !limits) {
-            throw new Error(`Malformed plan entry: "${planDef}". Skipping.`);
-        }
-
-        // Format: name:limit,batched,intervals
-        const parts = limits.split(',');
-        if (parts.length !== 3) {
-            throw new Error(`Invalid limits format for plan "${name}". Expected 3 values.`);
-        }
-
-        const [limit, batched, intervals] = parts;
-        const maxLimit = Number(limit);
-        const maxBatched = Number(batched);
-        const allowedIntervals = intervals ? intervals.split('|').filter((s) => s.length > 0) : [];
-
-        if (Number.isNaN(maxLimit) || Number.isNaN(maxBatched)) {
-            throw new Error(`Invalid numeric limits for plan "${name}".`);
-        }
-
-        plans.set(name, {
-            maxLimit,
-            maxBatched,
-            allowedIntervals,
-        });
-
-        if (!name.startsWith('tgm-')) {
-            plans.set(`tgm-${name.toUpperCase()}`, {
-                maxLimit,
-                maxBatched,
-                allowedIntervals,
-            });
-        }
-    });
-
-    return plans;
-}
-
 // parse command line options
 const opts = program
     .name(pkg.name)
@@ -250,11 +189,6 @@ const opts = program
             .env('CACHE_STALE_WHILE_REVALIDATE')
             .default(DEFAULT_CACHE_STALE_WHILE_REVALIDATE)
     )
-    .addOption(
-        new Option('--plans <string>', 'Plan configurations (name:limit,batched,intervals)')
-            .env('PLANS')
-            .default(DEFAULT_PLANS)
-    )
     .allowUnknownOption()
     .allowExcessArguments()
     .parse()
@@ -293,7 +227,6 @@ const config = z
         cacheServerMaxAge: z.coerce.number().nonnegative('Cache server max-age must be non-negative'),
         cacheMaxAge: z.coerce.number().nonnegative('Cache max-age must be non-negative'),
         cacheStaleWhileRevalidate: z.coerce.number().nonnegative('Cache stale-while-revalidate must be non-negative'),
-        plans: z.string().transform(parsePlans),
     })
     .transform((data) => {
         // Use YAML config as the authoritative source — spread all database maps dynamically

src/routes/routes.perf.spec.ts

@@ -587,7 +587,7 @@ function getNetworkForChain(chain: ChainType): string {
 
 async function fetchRoute(url: string): Promise<{ status: number; body: any; duration_ms: number }> {
     const start = performance.now();
-    const response = await app.request(url, { headers: { 'X-Plan': 'free', 'Cache-Control': 'no-cache' } });
+    const response = await app.request(url, { headers: { 'Cache-Control': 'no-cache' } });
     const body = await response.json();
     const duration_ms = Math.round((performance.now() - start) * 100) / 100;
     return { status: response.status, body, duration_ms };
@@ -613,8 +613,6 @@ const allResults: TestResult[] = [];
 describe.skipIf(!DB_TESTS)('Database performance', () => {
     beforeAll(async () => {
         const { config } = await import('../config.js');
-        // Bypass plan limits for tests
-        (config as any).plans = null;
 
         app = new Hono();
         const routes = await import('./index.js');

src/routes/routes.sql.spec.ts

@@ -207,7 +207,7 @@ const SINGLE_FILTER_ROUTE_CASES = [
 ] as const;
 
 async function fetchRoute(path: string) {
-    const response = await app.request(path, { headers: { 'X-Plan': 'free' } });
+    const response = await app.request(path);
     const body = await response.json();
     return { response, body };
 }
@@ -238,9 +238,6 @@ describe.skipIf(!DB_TESTS)('SQL queries', () => {
         const { config } = await import('../config.js');
         const { hasDatabase } = await import('../supported-routes.js');
 
-        // Bypass plan limits for DB integration tests (config.plans may be mutated by other test files)
-        (config as any).plans = null;
-
         app = new Hono();
         const routes = await import('./index.js');
         app.route('/', routes.default);

src/routes/swaps/evm.uniswap-v3.sql.spec.ts

@@ -13,7 +13,7 @@
 let hasEvmDex: boolean;
 
 async function fetchRoute(path: string) {
-    const response = await app.request(path, { headers: { 'X-Plan': 'free' } });
+    const response = await app.request(path);
     const body = await response.json();
     return { response, body };
 }
@@ -24,8 +24,6 @@
         const { hasDatabase } = await import('../../supported-routes.js');
         const { default: evmSwapsRoute } = await import('./evm.js');
 
-        (config as any).plans = null;
-
         app = new Hono();
         app.route('/v1/evm/swaps', evmSwapsRoute);
 
@@ -40,7 +38,7 @@
             `/v1/evm/swaps?network=${evmNetwork}&transaction_id=${EVM_TRANSACTION_SWAP_EXAMPLE}&limit=1`
         );
 
         expect(response.status).toBe(200);
         expect(body.data).toBeArray();
         expect(body.data.length).toBe(1);
 
@@ -60,7 +58,7 @@
 
         const { response, body } = await fetchRoute(`/v1/evm/swaps?network=${evmNetwork}&protocol=uniswap_v3&limit=5`);
 
         expect(response.status).toBe(200);
         expect(body.data).toBeArray();
         expect(body.data.length).toBeGreaterThan(0);
 
@@ -76,7 +74,7 @@
             `/v1/evm/swaps?network=${evmNetwork}&protocol=uniswap_v3&transaction_id=${EVM_TRANSACTION_SWAP_EXAMPLE}&limit=1`
         );
 
         expect(response.status).toBe(200);
         expect(body.data).toBeArray();
         expect(body.data.length).toBe(1);
 
@@ -105,7 +103,7 @@
             `/v1/evm/swaps?network=${evmNetwork}&protocol=uniswap_v3&input_contract=${EVM_CONTRACT_USDC_EXAMPLE}&limit=5`
         );
 
         expect(response.status).toBe(200);
         expect(body.data).toBeArray();
         expect(body.data.length).toBeGreaterThan(0);