ratelimit state

rate

// one token every 2 blocks

burst

Limiter configuration, shared by every caller bucket. rate = tokens replenished per block. burst = bucket capacity (max tokens, also the largest single burst).

bucket

bucket is the per-caller state persisted in the avl tree.

buckets

buckets maps address string -> \*bucket, ordered by key (deterministic).

fmin

fmin returns the smaller of two float64 values.

refill

refill returns the token count at height \`now\` given \`tokens\` observed at height \`last\`, replenishing at \`r\` tokens/block up to capacity \`cap\`. It never decreases below the stored value and never exceeds \`cap\`.

tokensToInt

tokensToInt floors a token count to a whole, non-negative token.

load

load returns the live bucket for addr, refilled to \`now\`, creating a full bucket the first time an address is seen.

Allow

Allow consumes one token for the calling realm/user and reports whether the request is permitted. Returns false (and consumes nothing) when the bucket is empty.

SetConfig

SetConfig updates the shared rate (tokens per block) and burst (capacity). Values are clamped to be non-negative; burst is forced to at least 1.

Tokens

Tokens is a read-only view of how many whole tokens \`addr\` has available at the current block height, without mutating any state.

ftoa

Render

Render shows the limiter config and a table of known callers with their current tokens and last-seen height. Path "/addr/\<address>" focuses one caller.