Rate limiting

[innovativedesign-lab]

Close: #766

Description

Here's a summary of the complete spec:

Design (design.md)
The approach uses a strategy pattern — an IRateLimiterStore interface with two implementations:

InMemoryStore — the existing Map logic, used in dev/test and as a production fallback
UpstashStore — wraps @upstash/ratelimit SlidingWindow over Redis, used in production when env vars are set withRateLimit() stays synchronous and unchanged (zero call-site breakage). A new withRateLimitAsync() is the distributed-capable function that route handlers migrate to incrementally. The key insight: making withRateLimit async would silently break every call site since if (rateLimitResponse) would always be truthy on an unawaited Promise — a complete silent outage.

Tasks (tasks.md) — 8 tasks in 5 waves:

Wave Tasks
1 Install @upstash/ratelimit + @upstash/redis · Document env vars in .env.example
2 Extract InMemoryStore + IRateLimiterStore from existing code
3 Implement UpstashStore with fail-open error handling
4 Implement createStore() factory + withRateLimitAsync()
5 Migrate 25 call sites · Verify existing tests pass · Add distributed tests
Ready to implement? You can click "Start Task" on any task, or ask me to begin.

Related Issue

Closes #766

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update

Checklist

• Code follows project style guidelines
• Self-review completed
• No console errors
• Uses Lucide icons consistently
• Responsive design implemented
• Starknet best practices followed

[innovativedesign-lab]

Close: #791

[RUKAYAT-CODER]

Close: #776