Token-bucket rate limiter + hard request-budget cap for the FM bridge server.
The bridge listens on 127.0.0.1 + a random per-session token. The token check
is the trust boundary, but a misbehaving local process holding the token can
still hammer FileMaker indefinitely. This limiter caps both throughput
(per-second burst) and total volume (per-token-lifetime budget) so a runaway
client gets backpressure and eventually 429s.
Token-bucket rate limiter + hard request-budget cap for the FM bridge server.
The bridge listens on 127.0.0.1 + a random per-session token. The token check is the trust boundary, but a misbehaving local process holding the token can still hammer FileMaker indefinitely. This limiter caps both throughput (per-second burst) and total volume (per-token-lifetime budget) so a runaway client gets backpressure and eventually 429s.