ducoterra 42a4222949 phase: 81_login_rate_limit ...

All gates verified. The phase is complete — everything was already implemented by prior task runs; this pass verified each completion criterion end-to-end and found no defects.

**Phase 81 final verification report** (tasks 01–03 all present in `complete/`; no code changes needed this pass)

- Verified: `app/core/rate_limit.py` (stdlib sliding window, fail-open) + both login routes' 429 pre-check/record/reset wiring + all unit/integration pins present (11th-429, blocked-success-still-429, clean-counter reset, shared counter, autouse `clean_rate_limit` fixture documented).
- Live check (task 03): dev server + 11 rapid wrong logins → `401 ×10, 429`; 429 body carries `retry-after: 900` + generic detail; server restarted (per-process counter cleared by design).
- `uv run pytest tests/unit/test_rate_limit.py -v --no-cov` → 10 passed
- `uv run pytest --cov=app --cov-report=term-missing` → 1652 passed, **TOTAL 99%** (>90%; rate_limit.py 100%, auth.py 100%)
- `uv run pytest tests/e2e/test_smoke.py -v --no-cov` (isolation) → 3 passed
- `uv run ruff check . && uv run pyright` → All checks passed / 0 errors, 0 warnings
- Completion criteria: all met, except commit + phase-dir move — per harness rules I left all changes uncommitted in the working tree (harness commits atomically and moves the phase).
- Diff scope: exactly `app/core/rate_limit.py`, `app/api/auth.py`, `tests/unit/test_rate_limit.py`, `tests/integration/test_auth_api.py` + phase files; `pyproject.toml` / `uv.lock` / `frontend/` untouched.
- Deviations: none in code; commit/move deferred to harness as instructed.
- Next pending phase: `82_security_headers`.

2026-09-07 23:08:46 -04:00

..

test_agent_tools.py

fix(agent): teach the document-identity contract on ls/read/grep refusals — end the post-harness tool-loop rambling

2026-09-04 13:11:07 -04:00

test_api.py

feat: phases 77–80 — navbar view refresh, static background, API tokens, history suggestion chips

2026-09-07 12:39:01 -04:00

test_auth_api.py

phase: 81_login_rate_limit

2026-09-07 23:08:46 -04:00

test_caching_revalidation.py

feat: phases 77–80 — navbar view refresh, static background, API tokens, history suggestion chips

2026-09-07 12:39:01 -04:00

test_chat_api.py

feat: phases 77–80 — navbar view refresh, static background, API tokens, history suggestion chips

2026-09-07 12:39:01 -04:00

test_chats_api.py

feat(agent): align the document tools with the harness-trained shape — ls, read(path), grep(pattern, path?)

2026-09-03 11:17:47 -04:00

test_containerfile_assets.py

fix(chat): keep in-flight answers alive across in-app view switches

2026-09-06 06:31:31 -04:00

test_doc_drafts_api.py

feat(docs): save chat answers as docs — edit screen, commit + push to the .env docs branch

2026-09-01 03:52:03 -04:00

test_docs_api.py

feat(auth): single-admin password login (signed cookie) — gate tuning + Sources catalog, keep chat and document viewer public

2026-08-23 19:58:39 -04:00

test_document_content.py

feat: phases 77–80 — navbar view refresh, static background, API tokens, history suggestion chips

2026-09-07 12:39:01 -04:00

test_git_sources_api.py

feat(sources): removing a source deletes its files and index entries behind a confirmation modal

2026-09-02 15:55:33 -04:00

test_git_sources_upload.py

feat(sources): real-time file progress for sync and upload — background upload with success toast

2026-09-01 23:51:43 -04:00

test_import_docs_git.py

feat(chat): invalidate saved chats on sources sync — versioned stamps, stale marker, Regenerate against the new index

2026-08-30 23:39:15 -04:00

test_import_docs_overview.py

feat(chat): invalidate saved chats on sources sync — versioned stamps, stale marker, Regenerate against the new index

2026-08-30 23:39:15 -04:00

test_import_extensions_env.py

feat(import): user-extensible BOR_IMPORT_EXTENSIONS — any well-formed extension, A9 family stays the default

2026-08-31 22:42:41 -04:00

test_import_quadlet_jinja.py

feat(import): index quadlet unit files and jinja templates (A9 revision)

2026-08-28 07:02:24 -04:00

test_importer_e2e.py

feat(import): index quadlet unit files and jinja templates (A9 revision)

2026-08-28 07:02:24 -04:00

test_kb_overview_api.py

feat: phases 77–80 — navbar view refresh, static background, API tokens, history suggestion chips

2026-09-07 12:39:01 -04:00

test_migration_0002.py

feat(rag): hybrid FTS+vector retrieval and multi-format ingestion — name-your-tool questions find the right document

2026-08-22 01:27:02 -04:00

test_migration_0004.py

feat(rag): lite-generated KB overview in the system prompt — stored single row, regenerated on import, <knowledge_base> section in HIGH+LOW prompts

2026-08-25 20:22:51 -04:00

test_migration_0005.py

feat(sources): admin page to add and remove git sources (TODO.md L4)

2026-08-26 18:42:28 -04:00

test_migration_0006.py

feat(sources): admin page to add and remove git sources (TODO.md L4)

2026-08-26 18:42:28 -04:00

test_migration_0007.py

feat(admin): local directory sources — kind/path on git_sources, combined sync + import, page form + badges

2026-08-27 01:04:16 -04:00

test_migration_0008.py

feat(chat): save and view chat history — admin-only saved_chats, History page, open-a-chat return

2026-08-29 21:22:25 -04:00

test_migration_0009.py

feat(chat): share a chat by link — anonymous read-only /shared/<token> page, share/unshare

2026-08-30 01:34:44 -04:00

test_migration_0010.py

feat(chat): invalidate saved chats on sources sync — versioned stamps, stale marker, Regenerate against the new index

2026-08-30 23:39:15 -04:00

test_migration_0011.py

feat(docs): save chat answers as docs — edit screen, commit + push to the .env docs branch

2026-09-01 03:52:03 -04:00

test_migration_0012.py

feat: phases 77–80 — navbar view refresh, static background, API tokens, history suggestion chips

2026-09-07 12:39:01 -04:00

test_name_hit_lexical.py

finally getting accurate answers

2026-09-05 10:26:39 -04:00

test_source_removal_api.py

feat(sources): removing a source deletes its files and index entries behind a confirmation modal

2026-09-02 15:55:33 -04:00

test_steering_api.py

feat(import): index quadlet unit files and jinja templates (A9 revision)

2026-08-28 07:02:24 -04:00

test_suggestions_api.py

feat: phases 77–80 — navbar view refresh, static background, API tokens, history suggestion chips

2026-09-07 12:39:01 -04:00

test_sync_api.py

feat(sources): real-time file progress for sync and upload — background upload with success toast

2026-09-01 23:51:43 -04:00

test_tokens_api.py

feat: phases 77–80 — navbar view refresh, static background, API tokens, history suggestion chips

2026-09-07 12:39:01 -04:00