Rate Limiting Foundations for Distributed Safety

1/**
2 * Rate Limiter with Firestore storage
3 * Tracks API usage per IP/user and enforces limits
4 */
5 
6import { getFirestore } from './firestore';
7 
8export interface RateLimitConfig {
9  /** Maximum requests allowed in the window */
10  maxRequests: number;
11  /** Time window in seconds */
12  windowSeconds: number;
13  /** Identifier type */
14  identifierType: 'ip' | 'user' | 'both';
15}
16 
17export interface RateLimitResult {
18  allowed: boolean;
19  remaining: number;
20  resetAt: Date;
21  error?: string;

1/**
2 * POST /api/maku/brief
3 *
4 * Receives a 5-question brief from the /maku page and emails it to
5 * the founder via Resend. Rate-limited via the existing rate-limiter
6 * to stop bot floods.
7 *
8 * v1: email only. v2 candidate: also INSERT into a service_inquiries
9 * table for backlog tracking.
10 */
11import { NextRequest, NextResponse } from 'next/server';
12import { Resend } from 'resend';
13import { checkRateLimit, getClientIP, rateLimitResponse } from '@/lib/rate-limiter';
14 
15export const dynamic = 'force-dynamic';
16 
17const resend = new Resend(process.env.RESEND_API_KEY || 'placeholder_key_for_build');
18const TO = process.env.MAKU_INQUIRY_EMAIL || 'makpalyy@gmail.com';
19 
20interface BriefBody {
21  what?: string;