Function enforceUserRateLimit

apps/sim/lib/core/rate-limiter/route-helpers.ts:45–55

(
  bucketName: string,
  userId: string,
  config: TokenBucketConfig = DEFAULT_USER_ROUTE_LIMIT
)

 * Returns a `NextResponse` on 429, otherwise `null` so the caller can proceed.
 */
export async function enforceUserRateLimit(
  bucketName: string,
  userId: string,
  config: TokenBucketConfig = DEFAULT_USER_ROUTE_LIMIT
): Promise<NextResponse | null> {
  const key = `route:${bucketName}:user:${userId}`
  const { allowed, resetAt } = await rateLimiter.checkRateLimitDirect(key, config)
  if (allowed) return null
  logger.warn('User rate limit exceeded', { bucket: bucketName, userId })
  return buildRateLimitResponse(resetAt)
}

/**
 * Apply a per-IP token bucket to an unauthenticated route. The `unknown` IP