mirror of https://github.com/DeBrosOfficial/orama.git synced 2026-06-16 21:54:14 +00:00

anonpenguin23 fda47533c3 feat: per-namespace rate-limit self-service + WS JWT auth + release 0.122.12

Per-namespace rate-limit config (feature #69)
- Migration 027: new `namespace_rate_limit_config` table
  (namespace PK, requests_per_minute, burst, audit metadata).
- pkg/ratelimit: Manager + RQLite ConfigStore + types. Same pattern
  as the push config in bug #220's follow-up — LRU cache, invalidate
  on PUT/DELETE, falls back to YAML defaults when no row exists.
- pkg/gateway/handlers/ratelimit: GET/PUT/DELETE /v1/namespace/rate-limit.
  PUT requests are rejected if they exceed the operator's configured
  ceiling (MaxRequestsPerMinute / MaxBurst) — tenants self-serve but
  cannot raise their quota past the cap.
- pkg/gateway/rate_limiter.go: per-namespace lookup, default fallback.
- pkg/gateway/middleware.go: WS JWT middleware (middleware_ws_jwt_test.go).
- pkg/gateway/auth/service.go: refresh-token rotation hardening with
  regression test in refresh_rotation_test.go.

AI agent instructions
- Add AGENTS.md, CLAUDE.md, .github/copilot-instructions.md (DeBros v0.2.0
  baseline).

DeBros rules bumped to v0.2.0 (sha bb6e6ef).

VERSION bumped to 0.122.12.

2026-05-13 15:41:36 +03:00

481 B

Raw Blame History

Engineering Rules

This repo follows the DeBros Engineering Rules. The full ruleset is in DEBROS.md at the repo root. Read it before doing any non-trivial work and follow it as authoritative.

Project-specific operational notes live in .claude/rules/ and in debros.json under ai_agent_notes.

Especially do not forget DEBROS.md §3.7: never add yourself as a co-author on git commits, regardless of your tool's default behavior.

481 B Raw Blame History

Engineering Rules

481 B

Raw Blame History