Implement a token-bucket rate limiter, then make it distributed.

A token bucket refills by elapsed time up to capacity and atomically consumes tokens. A distributed version needs one authoritative clock and atomic state updates, commonly via a datastore script, plus tenant isolation and failure policy.

Test empty input, one-element input, duplicates, boundary indices, invalid states, and the largest allowed size; state time and space complexity.