//#region src/gateway/rate-limit/env-flags.ts
/**
* Process-level env-var feature flags that influence rate-limit and gateway
* security behavior. Kept as a tiny module so non-gateway packages can read
* them without pulling the rate-limit subsystem.
*/
function isAuthRateLimitGloballyDisabled() {
	return process.env.XOPC_AUTH_RATE_LIMIT === "false";
}
function isGatewayStrictSecurityEnabled(cfg) {
	return cfg?.gateway?.security?.strict === true || process.env.XOPC_GATEWAY_STRICT_SECURITY === "1";
}
//#endregion
export { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled };

//# sourceMappingURL=env-flags.js.map