Ben Stull 9e1b7ce34f feat(ratelimit): env-tunable per-IP auth limiter budgets ...

Add RATELIMIT_OTC_REQUEST_MAX / RATELIMIT_VERIFY_MAX / RATELIMIT_CHECK_MAX
(default to the existing secure values; non-positive/unparseable → default).
Lets a test/PPE stack that drives the auth endpoints repeatedly from one IP
lift the budget; production leaves them unset. Mirrors the existing
OTC_REQUEST_COOLDOWN_SECONDS knob.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-07 22:28:57 -07:00

..

conftest.py

Release v0.27.0: security hardening (audit 0026)

2026-05-28 18:28:10 -07:00

test_admin_create_user_invite_vertical.py

…

test_admin_users_vertical.py

…

test_anon_offlimits_vertical.py

…

test_api_deployment.py

§22 S1: thread collection_id through backend + update tests (N=1 unchanged, 454 green)

2026-06-05 08:26:14 -07:00

test_beta_access_vertical.py

…

test_bot_entry_files.py

feat(slice4): bot.commit_entry_files + open_entry_pr multi-file primitives (§22.4a)

2026-06-07 18:46:09 -07:00

test_branch_path_routing.py

…

test_cache_bootstrap.py

…

test_cache_review_fields.py

feat(cache): mirror §22.4c review fields into cached_rfcs

2026-06-03 22:42:05 -07:00

test_chrome_vertical.py

…

test_collection_create_vertical.py

§22 S2: create-collection endpoint (bot commit + registry refresh)

2026-06-05 13:10:09 -07:00

test_collection_helpers.py

v0.48.0 — SLICE-2: collection field schema + central validation (§22.4a)

2026-06-07 17:06:04 -07:00

test_collection_registry.py

v0.48.0 — SLICE-2: collection field schema + central validation (§22.4a)

2026-06-07 17:06:04 -07:00

test_collection_scoped_serve.py

§22 S3: scope-role enforcement + collection-grain visibility (@S3) — v0.42.0

2026-06-05 18:07:51 -07:00

test_contributions_vertical.py

v0.29.0: #28 Parts 2+3 — create-RFC offers + contribute-to-pending requests

2026-05-28 20:10:13 -07:00

test_cookie_consent_vertical.py

…

test_create_project_vertical.py

§22 S5: in-app create-project + global-directory empty states (@S5 C3.1–C3.2)

2026-06-06 01:02:16 -07:00

test_device_trust_vertical.py

…

test_discussion_vertical.py

…

test_docs_sessions_vertical.py

feat(registry): hard-cut META_REPO -> REGISTRY_REPO; wire mirror into startup/webhook/sweep

2026-06-03 23:16:51 -07:00

test_docs_specs_vertical.py

feat(registry): hard-cut META_REPO -> REGISTRY_REPO; wire mirror into startup/webhook/sweep

2026-06-03 23:16:51 -07:00

test_e2e_smoke.py

v0.31.0: meta-only repository topology (ROADMAP #36)

2026-05-29 07:12:06 -07:00

test_email_envelope.py

Release v0.28.0: security-audit-0026 I3 + I4 (HTML-email guard + async Turnstile)

2026-05-28 19:12:16 -07:00

test_entry_review_fields.py

feat(entry): §22.4c unreviewed/reviewed_at/reviewed_by frontmatter fields

2026-06-03 22:28:11 -07:00

test_facets_api.py

test(slice3): integration tests for faceted list endpoint (§22.4a PUC-3)

2026-06-07 17:37:46 -07:00

test_facets.py

feat(slice3): pure facet field-set + filter/count helper (§22.4a)

2026-06-07 17:34:33 -07:00

test_funder_vertical.py

…

test_graduation_vertical.py

fix(slice4): make all entry write paths sidecar-aware (§22.4a carried from SLICE-1)

2026-06-07 18:57:54 -07:00

test_health.py

…

test_hygiene_vertical.py

v0.31.0: meta-only repository topology (ROADMAP #36)

2026-05-29 07:12:06 -07:00

test_initial_state_landing.py

§22 S1: thread collection_id through backend + update tests (N=1 unchanged, 454 green)

2026-06-05 08:26:14 -07:00

test_join_requests_vertical.py

§22 S6: request-to-join + cross-collection inbox (§22.8) — v0.46.0

2026-06-06 02:11:16 -07:00

test_mark_reviewed.py

fix(slice4): make all entry write paths sidecar-aware (§22.4a carried from SLICE-1)

2026-06-07 18:57:54 -07:00

test_metadata_bulk_endpoint.py

fix(slice5): validate raw metadata input + prune stale bulk selections

2026-06-07 21:03:29 -07:00

test_metadata_cache.py

v0.48.0 — SLICE-2: collection field schema + central validation (§22.4a)

2026-06-07 17:06:04 -07:00

test_metadata_edit_endpoint.py

feat(slice4): Owner-gated collection migrate endpoint (§22.4a PUC-5)

2026-06-07 19:01:18 -07:00

test_metadata_gitio.py

feat(slice4): metadata sidecar git read/write helpers — dual-read + lazy-migrate ops (§22.4a)

2026-06-07 18:44:14 -07:00

test_metadata_migration.py

v0.47.0 — SLICE-1: metadata sidecars — storage + dual-read + migration tool

2026-06-07 08:24:27 -07:00

test_metadata_pr_merge.py

…

test_metadata_schema.py

v0.48.0 — SLICE-2: collection field schema + central validation (§22.4a)

2026-06-07 17:06:04 -07:00

test_metadata_writepaths.py

fix(slice4): make all entry write paths sidecar-aware (§22.4a carried from SLICE-1)

2026-06-07 18:57:54 -07:00

test_metadata.py

feat(slice4): metadata sidecar git read/write helpers — dual-read + lazy-migrate ops (§22.4a)

2026-06-07 18:44:14 -07:00

test_migration_027.py

§22 S1: thread collection_id through backend + update tests (N=1 unchanged, 454 green)

2026-06-05 08:26:14 -07:00

test_migration_029_collections.py

v0.46.1 — fix migration 029 for the §22.13 re-stamp aftermath (OHM deploy fault)

2026-06-06 12:02:53 -07:00

test_migration_030_global_scope.py

§22 S3: scope-role enforcement + collection-grain visibility (@S3) — v0.42.0

2026-06-05 18:07:51 -07:00

test_migration_032_join_requests.py

§22 S6: request-to-join + cross-collection inbox (§22.8) — v0.46.0

2026-06-06 02:11:16 -07:00

test_multi_project_authz_vertical.py

§22 S1: thread collection_id through backend + update tests (N=1 unchanged, 454 green)

2026-06-05 08:26:14 -07:00

test_multi_project_spine_vertical.py

§22 S1: thread collection_id through backend + update tests (N=1 unchanged, 454 green)

2026-06-05 08:26:14 -07:00

test_notifications_vertical.py

…

test_otc_vertical.py

…

test_outbound_emails_vertical.py

…

test_passcode_vertical.py

…

test_per_rfc_models.py

…

test_pr_flow_vertical.py

…

test_project_scoped_propose.py

§22 S3: scope-role enforcement + collection-grain visibility (@S3) — v0.42.0

2026-06-05 18:07:51 -07:00

test_project_scoped_serving.py

§22 S1: thread collection_id through backend + update tests (N=1 unchanged, 454 green)

2026-06-05 08:26:14 -07:00

test_propose_vertical.py

feat(slice5): POST .../meta/bulk one-commit bulk metadata edit (§22.4a PUC-2)

2026-06-07 20:48:54 -07:00

test_proposed_use_case_vertical.py

#26: optional proposed-use-case field on propose-RFC + propose-PR

2026-05-28 12:28:52 -07:00

test_ratelimit_env.py

feat(ratelimit): env-tunable per-IP auth limiter budgets

2026-06-07 22:28:57 -07:00

test_reconcile_default_collection.py

fix(§22): heal mig-029 vs registry-mirror collection-id divergence

2026-06-07 21:54:52 -07:00

test_registry_wiring.py

§22 S1: thread collection_id through backend + update tests (N=1 unchanged, 454 green)

2026-06-05 08:26:14 -07:00

test_registry.py

§22 S1: thread collection_id through backend + update tests (N=1 unchanged, 454 green)

2026-06-05 08:26:14 -07:00

test_restamp_default_project.py

§22 S1: thread collection_id through backend + update tests (N=1 unchanged, 454 green)

2026-06-05 08:26:14 -07:00

test_retire_vertical.py

fix(slice4): make all entry write paths sidecar-aware (§22.4a carried from SLICE-1)

2026-06-07 18:57:54 -07:00

test_rfc_invitations_vertical.py

…

test_rfc_links_vertical.py

v0.29.0: #28 Parts 2+3 — create-RFC offers + contribute-to-pending requests

2026-05-28 20:10:13 -07:00

test_rfc_view_vertical.py

…

test_s1_collection_grain_vertical.py

§22 S1: thread collection_id through backend + update tests (N=1 unchanged, 454 green)

2026-06-05 08:26:14 -07:00

test_s3_scope_roles_vertical.py

§22 S3: scope-role enforcement + collection-grain visibility (@S3) — v0.42.0

2026-06-05 18:07:51 -07:00

test_s4_invitations_vertical.py

§22 S4: scope-role invitation backend + capability flags (@S4 C.2)

2026-06-05 23:47:28 -07:00

test_s6_collection_models_vertical.py

§22 S6: per-collection enabled_models — the §22.12 model-universe chain

2026-06-06 01:30:16 -07:00

test_s6_entry_noun_vertical.py

§22 S6: type-driven entry noun (§22.4a) — backend source of truth + chrome

2026-06-06 01:35:57 -07:00

test_s6_two_project_multicollection.py

§22 S6: release v0.45.0 — two-project/multi-collection test + §20.4 changelog

2026-06-06 01:43:09 -07:00

test_session_resume_vertical.py

v0.23.0: server-side sign-in state resume (roadmap #29)

2026-05-28 12:34:19 -07:00

test_super_draft_vertical.py

…

test_tag_suggest_vertical.py

v0.24.0: Claude Haiku tag suggestions on propose-RFC (roadmap #27)

2026-05-28 13:25:39 -07:00

test_turnstile_vertical.py

Release v0.28.0: security-audit-0026 I3 + I4 (HTML-email guard + async Turnstile)

2026-05-28 19:12:16 -07:00

test_webhooks_vertical.py

feat(registry): hard-cut META_REPO -> REGISTRY_REPO; wire mirror into startup/webhook/sweep

2026-06-03 23:16:51 -07:00