fix(index): use dynamic import for rate-limit to fix local TS module error

apps/api/src/index.ts

@@ -1,6 +1,5 @@
 import Fastify from 'fastify';
 import cors from '@fastify/cors';
-import rateLimit from '@fastify/rate-limit';
 import { whatsappRoutes } from './routes/whatsapp';
 import { adminRoutes } from './routes/admin';
 import { aiRoutes } from './routes/ai';
@@ -14,19 +13,26 @@ const server = Fastify({
 // ── CORS ───────────────────────────────────────────────────────────────────────
 server.register(cors);
 
-// ── Rate Limiting (global defaults) ───────────────────────────────────────────
-server.register(rateLimit, {
-    global: true,
-    max: 300,
-    timeWindow: '1 minute',
-});
+// ── Rate Limiting (lazy import — package installed at runtime on HF) ───────────
+async function setupRateLimit() {
+    try {
+        const rateLimit = await import('@fastify/rate-limit');
+        await server.register(rateLimit.default, {
+            global: true,
+            max: 300,
+            timeWindow: '1 minute',
+        });
+        console.log('[RATE-LIMIT] Rate limiting enabled (300 req/min global)');
+    } catch {
+        console.warn('[RATE-LIMIT] @fastify/rate-limit not available — skipping');
+    }
+}
 
 // ── Public Routes (no auth) ────────────────────────────────────────────────────
 server.register(whatsappRoutes, { prefix: '/v1/whatsapp' });
 
 // ── Private Routes (require ADMIN_API_KEY) ─────────────────────────────────────
-// Inline addHook on an isolated scope guarantees the auth check fires BEFORE
-// any child route handler, properly encapsulated in Fastify v4.
+// Inline addHook on guardedRoutes scope — properly encapsulated in Fastify v4
 server.register(async function guardedRoutes(scope) {
     scope.addHook('onRequest', async (request, reply) => {
         const apiKey = process.env.ADMIN_API_KEY;
@@ -64,6 +70,7 @@ server.get('/health', async () => {
 // ── Start Server ───────────────────────────────────────────────────────────────
 const start = async () => {
     try {
+        await setupRateLimit();
         const port = parseInt(process.env.PORT || '3001');
         await server.listen({ port, host: '0.0.0.0' });
         console.log(`Server listening on http://0.0.0.0:${port}`);