clawbot 9f4663cedb fix(backend): rate-limit and cap report ingest, drop wildcard CORS (closes #20) ...

POST /api/v1/reports stays unauthenticated but is bounded. Each client
address, as the trusted-proxy logic resolves it, may send
REPORTS_PER_MINUTE reports a minute (default 60), counted by
go-chi/httprate over a sliding minute; past that it gets 429 with
Retry-After. reportbuf refuses a report that would take the report
files past DATA_DIR_MAX_BYTES (default 1 GiB) with ErrFull, answered
with 507; the count starts from the files already in DATA_DIR, and
reports not yet written count at their uncompressed size. CORS adds
nothing unless CORS_ALLOWED_ORIGINS lists origins. A limit that is
not a positive number stops the server from starting.

Model: opus-5-5

2026-09-29 01:11:33 +00:00

..

export_test.go

fix(backend): report ingest correctness: 500 on a refused report, 413 on oversize, global body cap (closes #23)

2026-09-28 20:39:39 +02:00

handlers_test.go

Add backend with buffered zstd-compressed report storage

2026-02-27 12:14:34 +07:00

handlers.go

fix(backend): report ingest correctness: 500 on a refused report, 413 on oversize, global body cap (closes #23)

2026-09-28 20:39:39 +02:00

healthcheck.go

Add backend with buffered zstd-compressed report storage

2026-02-27 12:14:34 +07:00

report_test.go

fix(backend): rate-limit and cap report ingest, drop wildcard CORS (closes #20)

2026-09-29 01:11:33 +00:00

report.go

fix(backend): rate-limit and cap report ingest, drop wildcard CORS (closes #20)

2026-09-29 01:11:33 +00:00