json-render/apps/web/lib/rate-limit.ts

import { Ratelimit } from "@upstash/ratelimit";
import { Redis } from "@upstash/redis";

// Lazy initialization to avoid errors when Redis env vars are not configured
let _minuteRateLimit: Ratelimit | null = null;
let _dailyRateLimit: Ratelimit | null = null;

function getRedis(): Redis | null {
  const url = process.env.KV_REST_API_URL;
  const token = process.env.KV_REST_API_TOKEN;

  if (!url || !token) {
    return null;
  }

  return new Redis({ url, token });
}

// No-op rate limiter for when Redis is not configured
const noopRateLimiter = {
  limit: async () => ({ success: true, limit: 0, remaining: 0, reset: 0 }),
};

// 10 requests per minute (sliding window)
export const minuteRateLimit = {
  limit: async (identifier: string) => {
    if (!_minuteRateLimit) {
      const redis = getRedis();
      if (!redis) return noopRateLimiter.limit();
      _minuteRateLimit = new Ratelimit({
        redis,
        limiter: Ratelimit.slidingWindow(10, "1 m"),
        prefix: "ratelimit:minute",
      });
    }
    return _minuteRateLimit.limit(identifier);
  },
};

// 100 requests per day (fixed window)
export const dailyRateLimit = {
  limit: async (identifier: string) => {
    if (!_dailyRateLimit) {
      const redis = getRedis();
      if (!redis) return noopRateLimiter.limit();
      _dailyRateLimit = new Ratelimit({
        redis,
        limiter: Ratelimit.fixedWindow(100, "1 d"),
        prefix: "ratelimit:daily",
      });
    }
    return _dailyRateLimit.limit(identifier);
  },
};