zyycnandClaude 9322b7aeb8 fix(api,store): aggregate IPv6 login buckets by /64 and honor CI truthiness ...

Review follow-ups. The login throttle keyed on the full IPv6 /128 address,
so a direct-connect attacker with a routed /64 got an independent
five-guess bucket per address; bucket IPv6 sources by their /64 prefix so
the whole allocation shares one quota. IPv4 keying is unchanged, and a
router-level test pins both the aggregation and cross-prefix isolation.

The store test_env guard treated any present CI variable as CI, so a
developer running CI=false to signal not-CI turned skips into panics; parse
CI per the is-ci convention (present and not 0/false/empty).

Co-authored-by: Claude <noreply@anthropic.com>

2026-07-27 00:17:02 +08:00

..

apps/gateway

chore(release): prepare v3.0.0

2026-07-25 01:54:18 +08:00

crates

fix(api,store): aggregate IPv6 login buckets by /64 and honor CI truthiness

2026-07-27 00:17:02 +08:00

migrations

ci: freeze applied migrations behind a sha256 manifest

2026-07-26 23:20:38 +08:00

Cargo.lock

perf(openai,xai): trim passive quota round trips and stream chunk copies

2026-07-26 20:35:22 +08:00

Cargo.toml

refactor(backend): finalize gateway package boundaries

2026-07-25 00:33:11 +08:00

rust-toolchain.toml

refactor: migrate backend to Rust 1.97 and edition 2024

2026-07-12 19:10:56 +08:00