weichenandCursor 2dd8f46e64 fix(server): login/register rate limiting + compose secret hygiene (H4/H8/M8) ...

- H4: sliding-window rate limiter (10 attempts / 5min per IP+username)
  on login and register; successful login resets the counter; pure
  stdlib, no new dependency
- H8: docker-compose.test.yml DB/ADMIN passwords now :?required (align
  with main); docker-compose.main.yml AUTH_REGISTRATION_ENABLED
  defaults to false
- M8: fix FAV_PUBLISHER_ENABLE -> FAV_PUBLISHER_ENABLED typo so the
  gate test actually guards the real flag

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-19 06:00:30 +00:00

..

backfill_test.go

feat(artifactvault): checkpoint backfill without scanning workspace

2026-09-15 02:40:12 +00:00

backfill.go

feat(artifactvault): checkpoint backfill without scanning workspace

2026-09-15 02:40:12 +00:00

coverage.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

crypto.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

eligibility_test.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

eligibility.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

filesystem_store.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

ingest_test.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

ingest.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

manifest.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

publisher_gate_test.go

fix(server): login/register rate limiting + compose secret hygiene (H4/H8/M8)

2026-09-19 06:00:30 +00:00

publisher_test.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

publisher.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

recovery_test.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

recovery.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

registry.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00

types.go

feat(artifactvault): extract audited FAV with union-deny reads

2026-09-14 15:59:36 +00:00