-module(glimit). -compile([no_auto_import, nowarn_unused_vars, nowarn_unused_function, nowarn_nomatch, inline]). -define(FILEPATH, "src/glimit.gleam"). -export([new/0, per_second/2, per_second_fn/2, burst_limit/2, burst_limit_fn/2, max_idle/2, store/2, on_limit_exceeded/2, identifier/2, build/1, hit/2, apply_built/2, apply/2, get_count/1, remove/2, apply2/2, apply3/2, apply4/2]). -export_type([hit_error/0, rate_limiter/3, rate_limiter_builder/3]). -if(?OTP_RELEASE >= 27). -define(MODULEDOC(Str), -moduledoc(Str)). -define(DOC(Str), -doc(Str)). -else. -define(MODULEDOC(Str), -compile([])). -define(DOC(Str), -compile([])). -endif. ?MODULEDOC( " This module provides a rate limiter that can be used to limit the number of\n" " requests or function calls per second for a given identifier.\n" "\n" " By default, rate limit state is stored in an ETS table with lock-free\n" " atomic operations. A periodic sweep removes full or idle buckets to\n" " reduce memory usage. The idle threshold defaults to 60 seconds and can\n" " be configured via `max_idle`.\n" "\n" " For distributed rate limiting, you can provide a custom `Store` that\n" " persists bucket state externally (Redis, Postgres, etc.).\n" "\n" " The rate limiter fails open — if the store is unavailable, requests are\n" " allowed through.\n" "\n" " The rate limits are configured using the following two options:\n" "\n" " - `per_second`: The rate of new available tokens per second. Think of this\n" " as the steady state rate limit.\n" " - `burst_limit`: The maximum number of available tokens. Think of this as\n" " the burst rate limit. The default value is the `per_second` rate limit.\n" "\n" " The rate limiter can be applied to a function or handler using the `apply`\n" " function, which returns a new function that checks the rate limit before\n" " calling the original function.\n" "\n" " # Example\n" "\n" " ```gleam\n" " import glimit\n" "\n" " let limiter =\n" " glimit.new()\n" " |> glimit.per_second(10)\n" " |> glimit.burst_limit(100)\n" " |> glimit.identifier(fn(request) { request.ip })\n" " |> glimit.on_limit_exceeded(fn(_request) { \"Rate limit reached\" })\n" "\n" " let handler =\n" " fn(_request) { \"Hello, world!\" }\n" " |> glimit.apply(limiter)\n" " ```\n" "\n" " # Multi-argument functions\n" "\n" " `apply` wraps a single-argument function `fn(a) -> b`. To rate-limit a\n" " function with multiple arguments, use `apply2`, `apply3`, or `apply4`:\n" "\n" " ```gleam\n" " let limiter =\n" " glimit.new()\n" " |> glimit.per_second(10)\n" " |> glimit.identifier(fn(args: #(String, String)) { args.0 })\n" " |> glimit.on_limit_exceeded(fn(_args) { too_many_requests() })\n" "\n" " let limited_handle =\n" " handle\n" " |> glimit.apply2(limiter)\n" "\n" " limited_handle(\"user_123\", \"upload\")\n" " ```\n" "\n" " # Pluggable store backend\n" "\n" " By default, rate limit state is stored in-memory using ETS. For\n" " distributed rate limiting (e.g. across multiple nodes), you can provide a\n" " custom `Store` that persists bucket state externally (Redis, Postgres, etc.).\n" "\n" " All token bucket logic stays in glimit — adapters only implement\n" " `lock_and_get` / `set_and_unlock` / `unlock` operations. The `glimit/bucket`\n" " module is public and provides `to_pairs`/`from_pairs` helpers for\n" " serialization.\n" "\n" " See `examples/redis/` for a complete Redis adapter using\n" " [valkyrie](https://hexdocs.pm/valkyrie/).\n" "\n" ). -type hit_error() :: rate_limited | unavailable | store_lock_failed. -type rate_limiter(FMD, FME, FMF) :: {rate_limiter, fun((FMD) -> FME), fun((FMD) -> FMF), fun((FMF) -> integer()), fun((FMF) -> integer()), glimit@bucket:store(), gleam@option:option(glimit@ets_store:ets_store()), fun(() -> integer())}. -type rate_limiter_builder(FMG, FMH, FMI) :: {rate_limiter_builder, gleam@option:option(fun((FMI) -> integer())), gleam@option:option(fun((FMI) -> integer())), gleam@option:option(fun((FMG) -> FMI)), gleam@option:option(fun((FMG) -> FMH)), gleam@option:option(integer()), gleam@option:option(glimit@bucket:store())}. -file("src/glimit.gleam", 132). ?DOC(" Create a new rate limiter builder.\n"). -spec new() -> rate_limiter_builder(any(), any(), any()). new() -> {rate_limiter_builder, none, none, none, none, {some, 60000}, none}. -file("src/glimit.gleam", 162). ?DOC( " Set the rate of new available tokens per second.\n" "\n" " Note that this is not the maximum number of requests that can be made in a single\n" " second, but the rate at which tokens are added to the bucket. Think of this as the\n" " steady state rate limit, while the `burst_limit` function sets the maximum number of\n" " available tokens (or the burst rate limit).\n" "\n" " This value is also used as the default value for the `burst_limit` function.\n" "\n" " # Example\n" "\n" " ```gleam\n" " import glimit\n" "\n" " let limiter =\n" " glimit.new()\n" " |> glimit.per_second(10)\n" " ```\n" ). -spec per_second(rate_limiter_builder(FMP, FMQ, FMR), integer()) -> rate_limiter_builder(FMP, FMQ, FMR). per_second(Limiter, Limit) -> {rate_limiter_builder, {some, fun(_) -> Limit end}, erlang:element(3, Limiter), erlang:element(4, Limiter), erlang:element(5, Limiter), erlang:element(6, Limiter), erlang:element(7, Limiter)}. -file("src/glimit.gleam", 189). ?DOC( " Set the rate limit per second, based on the identifier.\n" "\n" " Note: this function is evaluated once when a bucket is first created for an\n" " identifier. If the function returns a different value later, existing buckets\n" " are not affected until they are swept (due to idleness or being full) and\n" " re-created on the next hit.\n" "\n" " # Example\n" "\n" " ```gleam\n" " import glimit\n" "\n" " let limiter =\n" " glimit.new()\n" " |> glimit.identifier(fn(request) { request.user_id })\n" " |> glimit.per_second_fn(fn(user_id) {\n" " db.get_rate_limit(user_id)\n" " })\n" " ```\n" ). -spec per_second_fn( rate_limiter_builder(FMY, FMZ, FNA), fun((FNA) -> integer()) ) -> rate_limiter_builder(FMY, FMZ, FNA). per_second_fn(Limiter, Limit_fn) -> {rate_limiter_builder, {some, Limit_fn}, erlang:element(3, Limiter), erlang:element(4, Limiter), erlang:element(5, Limiter), erlang:element(6, Limiter), erlang:element(7, Limiter)}. -file("src/glimit.gleam", 213). ?DOC( " Set the maximum number of available tokens.\n" "\n" " The maximum number of available tokens is the maximum number of requests that can be\n" " made in a single burst when the bucket is full. The default value is the same as the\n" " rate limit per second.\n" "\n" " # Example\n" "\n" " ```gleam\n" " import glimit\n" "\n" " let limiter =\n" " glimit.new()\n" " |> glimit.per_second(10)\n" " |> glimit.burst_limit(100)\n" " ```\n" ). -spec burst_limit(rate_limiter_builder(FNH, FNI, FNJ), integer()) -> rate_limiter_builder(FNH, FNI, FNJ). burst_limit(Limiter, Burst_limit) -> {rate_limiter_builder, erlang:element(2, Limiter), {some, fun(_) -> Burst_limit end}, erlang:element(4, Limiter), erlang:element(5, Limiter), erlang:element(6, Limiter), erlang:element(7, Limiter)}. -file("src/glimit.gleam", 241). ?DOC( " Set the maximum number of available tokens, based on the identifier.\n" "\n" " Note: this function is evaluated once when a bucket is first created for an\n" " identifier. If the function returns a different value later, existing buckets\n" " are not affected until they are swept (due to idleness or being full) and\n" " re-created on the next hit.\n" "\n" " # Example\n" "\n" " ```gleam\n" " import glimit\n" "\n" " let limiter =\n" " glimit.new()\n" " |> glimit.identifier(fn(request) { request.user_id })\n" " |> glimit.per_second(10)\n" " |> glimit.burst_limit_fn(fn(user_id) {\n" " db.get_burst_limit(user_id)\n" " })\n" " ```\n" ). -spec burst_limit_fn( rate_limiter_builder(FNQ, FNR, FNS), fun((FNS) -> integer()) ) -> rate_limiter_builder(FNQ, FNR, FNS). burst_limit_fn(Limiter, Burst_limit_fn) -> {rate_limiter_builder, erlang:element(2, Limiter), {some, Burst_limit_fn}, erlang:element(4, Limiter), erlang:element(5, Limiter), erlang:element(6, Limiter), erlang:element(7, Limiter)}. -file("src/glimit.gleam", 271). ?DOC( " Set the idle eviction threshold in seconds.\n" "\n" " Buckets that have not been hit for longer than this duration are removed\n" " during periodic sweeps. The default is 60 seconds. Set to `0` to disable\n" " idle eviction entirely.\n" "\n" " For rate limiters with a high `burst_limit` relative to `per_second`, you\n" " may want to increase this value so that partially-refilled buckets are not\n" " evicted prematurely. A good rule of thumb is\n" " `burst_limit / per_second` seconds.\n" "\n" " # Example\n" "\n" " ```gleam\n" " import glimit\n" "\n" " let limiter =\n" " glimit.new()\n" " |> glimit.per_second(1)\n" " |> glimit.burst_limit(1000)\n" " |> glimit.max_idle(1000)\n" " ```\n" ). -spec max_idle(rate_limiter_builder(FNZ, FOA, FOB), integer()) -> rate_limiter_builder(FNZ, FOA, FOB). max_idle(Limiter, Seconds) -> case Seconds of S when S =< 0 -> {rate_limiter_builder, erlang:element(2, Limiter), erlang:element(3, Limiter), erlang:element(4, Limiter), erlang:element(5, Limiter), none, erlang:element(7, Limiter)}; S@1 -> {rate_limiter_builder, erlang:element(2, Limiter), erlang:element(3, Limiter), erlang:element(4, Limiter), erlang:element(5, Limiter), {some, S@1 * 1000}, erlang:element(7, Limiter)} end. -file("src/glimit.gleam", 300). ?DOC( " Set a pluggable store backend for distributed rate limiting.\n" "\n" " When a store is configured, bucket state is read from and written to the\n" " store on each hit instead of using the default ETS backend.\n" " External stores handle expiry via TTL.\n" "\n" " # Example\n" "\n" " ```gleam\n" " import glimit\n" "\n" " let limiter =\n" " glimit.new()\n" " |> glimit.per_second(10)\n" " |> glimit.store(my_redis_store)\n" " |> glimit.identifier(fn(request) { request.ip })\n" " |> glimit.on_limit_exceeded(fn(_request) { \"Rate limit reached\" })\n" " ```\n" ). -spec store(rate_limiter_builder(FOI, FOJ, FOK), glimit@bucket:store()) -> rate_limiter_builder(FOI, FOJ, FOK). store(Limiter, Store) -> {rate_limiter_builder, erlang:element(2, Limiter), erlang:element(3, Limiter), erlang:element(4, Limiter), erlang:element(5, Limiter), erlang:element(6, Limiter), {some, Store}}. -file("src/glimit.gleam", 320). ?DOC( " Set the handler to be called when the rate limit is reached.\n" "\n" " # Example\n" "\n" " ```gleam\n" " import glimit\n" "\n" " let limiter =\n" " glimit.new()\n" " |> glimit.per_second(10)\n" " |> glimit.on_limit_exceeded(fn(_request) { \"Rate limit reached\" })\n" " ```\n" ). -spec on_limit_exceeded(rate_limiter_builder(FOR, FOS, FOT), fun((FOR) -> FOS)) -> rate_limiter_builder(FOR, FOS, FOT). on_limit_exceeded(Limiter, On_limit_exceeded) -> {rate_limiter_builder, erlang:element(2, Limiter), erlang:element(3, Limiter), erlang:element(4, Limiter), {some, On_limit_exceeded}, erlang:element(6, Limiter), erlang:element(7, Limiter)}. -file("src/glimit.gleam", 339). ?DOC( " Set the identifier function to be used to identify the rate limit.\n" "\n" " # Example\n" "\n" " ```gleam\n" " import glimit\n" "\n" " let limiter =\n" " glimit.new()\n" " |> glimit.identifier(fn(request) { request.ip })\n" " ```\n" ). -spec identifier(rate_limiter_builder(FPA, FPB, FPC), fun((FPA) -> FPC)) -> rate_limiter_builder(FPA, FPB, FPC). identifier(Limiter, Identifier) -> {rate_limiter_builder, erlang:element(2, Limiter), erlang:element(3, Limiter), {some, Identifier}, erlang:element(5, Limiter), erlang:element(6, Limiter), erlang:element(7, Limiter)}. -file("src/glimit.gleam", 346). -spec string_key(any()) -> binary(). string_key(Identifier) -> <<"glimit:"/utf8, (gleam@string:inspect(Identifier))/binary>>. -file("src/glimit.gleam", 350). -spec store_hit( glimit@bucket:store(), fun(() -> integer()), binary(), integer(), integer() ) -> {ok, nil} | {error, hit_error()}. store_hit(Store, Now, Key, Max_token_count, Token_rate) -> gleam@result:'try'( begin _pipe = (erlang:element(2, Store))(Key), gleam@result:replace_error(_pipe, store_lock_failed) end, fun(Maybe_bucket) -> B@1 = case Maybe_bucket of {some, B} -> {ok, B}; none -> glimit@bucket:new(Max_token_count, Token_rate) end, case B@1 of {error, _} -> _ = (erlang:element(4, Store))(Key), {error, unavailable}; {ok, B@2} -> {Hit_result, New_b} = glimit@bucket:hit(B@2, Now()), Ttl = glimit@bucket:compute_ttl(New_b), _ = (erlang:element(3, Store))(Key, New_b, Ttl), case Hit_result of {ok, nil} -> {ok, nil}; {error, nil} -> {error, rate_limited} end end end ). -file("src/glimit.gleam", 390). ?DOC( " Build the rate limiter.\n" "\n" " Note that using `apply` will already build the rate limiter, so this function is\n" " only useful if you want to build the rate limiter manually and apply it to multiple\n" " functions.\n" "\n" " To apply the resulting rate limiter to a function or handler, use the `apply_built`\n" " function.\n" ). -spec build(rate_limiter_builder(FPM, FPN, FPO)) -> {ok, rate_limiter(FPM, FPN, FPO)} | {error, binary()}. build(Config) -> gleam@result:'try'(case erlang:element(2, Config) of {some, Per_second} -> {ok, Per_second}; none -> {error, <<"`per_second` rate limit is required"/utf8>>} end, fun(Per_second@1) -> Burst_limit@1 = case erlang:element(3, Config) of {some, Burst_limit} -> Burst_limit; none -> Per_second@1 end, gleam@result:'try'(case erlang:element(4, Config) of {some, Identifier} -> {ok, Identifier}; none -> {error, <<"`identifier` function is required"/utf8>>} end, fun(Identifier@1) -> gleam@result:'try'(case erlang:element(5, Config) of {some, On_limit_exceeded} -> {ok, On_limit_exceeded}; none -> {error, <<"`on_limit_exceeded` function is required"/utf8>>} end, fun(On_limit_exceeded@1) -> {Store, Es@1} = case erlang:element(7, Config) of {some, Ext_store} -> {Ext_store, none}; none -> Es = glimit@ets_store:new_with_sweep( erlang:element(6, Config), 10000 ), {glimit@ets_store:make_store(Es), {some, Es}} end, {ok, {rate_limiter, On_limit_exceeded@1, Identifier@1, Per_second@1, Burst_limit@1, Store, Es@1, fun glimit@utils:now/0}} end) end) end). -file("src/glimit.gleam", 435). ?DOC(" Hit the rate limiter for the given identifier directly.\n"). -spec hit(rate_limiter(any(), any(), FPZ), FPZ) -> {ok, nil} | {error, hit_error()}. hit(Limiter, Identifier) -> Key = string_key(Identifier), case glimit_ffi:rescue( fun() -> (erlang:element(5, Limiter))(Identifier) end ) of {error, _} -> {error, unavailable}; {ok, Max} -> case glimit_ffi:rescue( fun() -> (erlang:element(4, Limiter))(Identifier) end ) of {error, _} -> {error, unavailable}; {ok, Rate} -> store_hit( erlang:element(6, Limiter), erlang:element(8, Limiter), Key, Max, Rate ) end end. -file("src/glimit.gleam", 471). ?DOC( " Apply the rate limiter to a request handler or function.\n" "\n" " This function is useful if you want to build the rate limiter manually using the\n" " `build` function.\n" ). -spec apply_built(fun((FQL) -> FQM), rate_limiter(FQL, FQM, any())) -> fun((FQL) -> FQM). apply_built(Func, Limiter) -> fun(Input) -> Identifier = (erlang:element(3, Limiter))(Input), case hit(Limiter, Identifier) of {ok, nil} -> Func(Input); {error, rate_limited} -> (erlang:element(2, Limiter))(Input); {error, unavailable} -> Func(Input); {error, store_lock_failed} -> Func(Input) end end. -file("src/glimit.gleam", 455). ?DOC( " Apply the rate limiter to a request handler or function.\n" "\n" " Panics if the rate limiter cannot be started or if the `identifier`\n" " function or `on_limit_exceeded` function is missing.\n" ). -spec apply(fun((FQF) -> FQG), rate_limiter_builder(FQF, FQG, any())) -> fun((FQF) -> FQG). apply(Func, Config) -> Limiter@1 = case build(Config) of {ok, Limiter} -> Limiter; {error, Message} -> erlang:error(#{gleam_error => panic, message => Message, file => <>, module => <<"glimit"/utf8>>, function => <<"apply"/utf8>>, line => 461}) end, apply_built(Func, Limiter@1). -file("src/glimit.gleam", 489). ?DOC( " Return the number of tracked identifiers in the ETS store.\n" "\n" " Returns 0 if the rate limiter uses an external store.\n" ). -spec get_count(rate_limiter(any(), any(), any())) -> integer(). get_count(Limiter) -> case erlang:element(7, Limiter) of {some, Es} -> glimit@ets_store:get_count(Es); none -> 0 end. -file("src/glimit.gleam", 500). ?DOC( " Remove an identifier from the ETS store.\n" "\n" " No-op if the rate limiter uses an external store.\n" ). -spec remove(rate_limiter(any(), any(), FQZ), FQZ) -> nil. remove(Limiter, Identifier) -> case erlang:element(7, Limiter) of {some, Es} -> Key = string_key(Identifier), _ = glimit@ets_store:remove(Es, Key), nil; none -> nil end. -file("src/glimit.gleam", 531). ?DOC( " Apply the rate limiter to a 2-argument function.\n" "\n" " The config's `identifier` and `on_limit_exceeded` receive a `#(a, b)` tuple.\n" "\n" " # Example\n" "\n" " ```gleam\n" " let limiter =\n" " glimit.new()\n" " |> glimit.per_second(10)\n" " |> glimit.identifier(fn(args: #(String, String)) { args.0 })\n" " |> glimit.on_limit_exceeded(fn(_) { \"Rate limited\" })\n" "\n" " let limited =\n" " handle\n" " |> glimit.apply2(limiter)\n" "\n" " limited(\"user_123\", \"upload\")\n" " ```\n" ). -spec apply2( fun((FRD, FRE) -> FRF), rate_limiter_builder({FRD, FRE}, FRF, any()) ) -> fun((FRD, FRE) -> FRF). apply2(Func, Config) -> Wrapped = begin _pipe = fun(Args) -> Func(erlang:element(1, Args), erlang:element(2, Args)) end, apply(_pipe, Config) end, fun(A, B) -> Wrapped({A, B}) end. -file("src/glimit.gleam", 561). ?DOC( " Apply the rate limiter to a 3-argument function.\n" "\n" " The config's `identifier` and `on_limit_exceeded` receive a `#(a, b, c)` tuple.\n" "\n" " # Example\n" "\n" " ```gleam\n" " let limiter =\n" " glimit.new()\n" " |> glimit.per_second(10)\n" " |> glimit.identifier(fn(args: #(String, String, Int)) { args.0 })\n" " |> glimit.on_limit_exceeded(fn(_) { \"Rate limited\" })\n" "\n" " let limited =\n" " handle\n" " |> glimit.apply3(limiter)\n" "\n" " limited(\"user_123\", \"upload\", 42)\n" " ```\n" ). -spec apply3( fun((FRK, FRL, FRM) -> FRN), rate_limiter_builder({FRK, FRL, FRM}, FRN, any()) ) -> fun((FRK, FRL, FRM) -> FRN). apply3(Func, Config) -> Wrapped = begin _pipe = fun(Args) -> Func( erlang:element(1, Args), erlang:element(2, Args), erlang:element(3, Args) ) end, apply(_pipe, Config) end, fun(A, B, C) -> Wrapped({A, B, C}) end. -file("src/glimit.gleam", 591). ?DOC( " Apply the rate limiter to a 4-argument function.\n" "\n" " The config's `identifier` and `on_limit_exceeded` receive a `#(a, b, c, d)` tuple.\n" "\n" " # Example\n" "\n" " ```gleam\n" " let limiter =\n" " glimit.new()\n" " |> glimit.per_second(10)\n" " |> glimit.identifier(fn(args: #(String, String, Int, Bool)) { args.0 })\n" " |> glimit.on_limit_exceeded(fn(_) { \"Rate limited\" })\n" "\n" " let limited =\n" " handle\n" " |> glimit.apply4(limiter)\n" "\n" " limited(\"user_123\", \"upload\", 42, True)\n" " ```\n" ). -spec apply4( fun((FRS, FRT, FRU, FRV) -> FRW), rate_limiter_builder({FRS, FRT, FRU, FRV}, FRW, any()) ) -> fun((FRS, FRT, FRU, FRV) -> FRW). apply4(Func, Config) -> Wrapped = begin _pipe = fun(Args) -> Func( erlang:element(1, Args), erlang:element(2, Args), erlang:element(3, Args), erlang:element(4, Args) ) end, apply(_pipe, Config) end, fun(A, B, C, D) -> Wrapped({A, B, C, D}) end.