Danijel Martinek b61bb0c11e feat(auth): add signIn rate-limit backfill with dual ip/account budgets ...

Wires the rate-limit primitive end-to-end through auth.signIn as the
canonical credential-stuffing defence example:

- manifest: rateLimit [ip 5/1m, account 10/1h] on signIn use case
- use case: rateLimit: IRateLimit dep; dual consume + TooManyRequestsError
- binders: ctx.rateLimit ?? new NoopRateLimit() in bind-production + bind-dev-seed
- tRPC: TooManyRequestsError → TOO_MANY_REQUESTS error code in authProcedure
- tests: RecordingRateLimit dual-consume assertion; InMemoryRateLimit
  budget-1 ip + account rejection; coverage 100% on use-cases layer
- ESLint: _manifest-ast.js extractRateLimitNames handles RateLimitBudget
  objects ({name,window,budget}) in addition to plain string literals,
  no-undeclared-rate-limit passes on both "ip" and "account" call sites

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-20 09:22:41 +00:00

..

_manifest-ast.js

feat(auth): add signIn rate-limit backfill with dual ip/account budgets

2026-05-20 09:22:41 +00:00

_manifest-ast.test.js

feat(core-eslint): add no-undeclared-rate-limit conformance rule

2026-05-20 08:43:30 +00:00

_manifest-source.js

refactor(core-eslint): readManifestSource delegates to AST parser

2026-05-13 07:34:00 +02:00

_manifest-source.test.js

feat(core-eslint): manifest source helper for conformance rules

2026-05-12 23:18:02 +02:00

_rule-context.js

feat(core-eslint): add no-undeclared-consent-check rule (conformance gate 12)

2026-05-19 11:51:30 +00:00

_rule-schema.js

feat(core-eslint): add no-undeclared-consent-check rule (conformance gate 12)

2026-05-19 11:51:30 +00:00

_usecase-name.js

feat(core-eslint): use-case name helper (file slug → manifest key)

2026-05-12 23:49:32 +02:00

_usecase-name.test.js

feat(core-eslint): use-case name helper (file slug → manifest key)

2026-05-12 23:49:32 +02:00

_workspace.js

feat(core-eslint): workspace helper for conformance rules

2026-05-12 23:19:11 +02:00

_workspace.test.js

feat(core-eslint): workspace helper for conformance rules

2026-05-12 23:19:11 +02:00

atomic-tier-import-direction.js

feat(core-eslint): atomic-tier-import-direction rule

2026-05-13 07:41:01 +02:00

atomic-tier-import-direction.test.js

feat(core-eslint): atomic-tier-import-direction rule

2026-05-13 07:41:01 +02:00

component-must-have-story.js

feat(core-eslint): component-must-have-story rule

2026-05-13 07:40:19 +02:00

component-must-have-story.test.js

feat(core-eslint): component-must-have-story rule

2026-05-13 07:40:19 +02:00

component-must-have-test.js

feat(core-eslint): component-must-have-test rule

2026-05-13 07:40:40 +02:00

component-must-have-test.test.js

feat(core-eslint): component-must-have-test rule

2026-05-13 07:40:40 +02:00

feature-must-have-manifest.js

feat(core-eslint): feature-must-have-manifest rule

2026-05-12 23:20:37 +02:00

feature-must-have-manifest.test.js

feat(core-eslint): feature-must-have-manifest rule

2026-05-12 23:20:37 +02:00

no-undeclared-analytics-event.js

feat(core-eslint): add no-undeclared-consent-check rule (conformance gate 12)

2026-05-19 11:51:30 +00:00

no-undeclared-analytics-event.test.js

feat(core-eslint): add no-undeclared-analytics-event ESLint rule

2026-05-18 15:43:37 +00:00

no-undeclared-audit.js

feat(core-eslint): add no-undeclared-consent-check rule (conformance gate 12)

2026-05-19 11:51:30 +00:00

no-undeclared-audit.test.js

feat(core-eslint): no-undeclared-audit rule

2026-05-12 23:51:42 +02:00

no-undeclared-consent-check.js

feat(core-eslint): add no-undeclared-consent-check rule (conformance gate 12)

2026-05-19 11:51:30 +00:00

no-undeclared-consent-check.test.js

feat(core-eslint): add no-undeclared-consent-check rule (conformance gate 12)

2026-05-19 11:51:30 +00:00

no-undeclared-event-publish.js

feat(core-eslint): add no-undeclared-consent-check rule (conformance gate 12)

2026-05-19 11:51:30 +00:00

no-undeclared-event-publish.test.js

feat(core-eslint): no-undeclared-event-publish rule

2026-05-12 23:51:06 +02:00

no-undeclared-rate-limit.js

feat(core-eslint): add no-undeclared-rate-limit conformance rule

2026-05-20 08:43:30 +00:00

no-undeclared-rate-limit.test.js

feat(auth): add signIn rate-limit backfill with dual ip/account budgets

2026-05-20 09:22:41 +00:00

pii-declaration-must-be-complete.js

feat(core-eslint): add pii-declaration-must-be-complete rule

2026-05-18 18:33:48 +00:00

pii-declaration-must-be-complete.test.js

feat(core-eslint): add pii-declaration-must-be-complete rule

2026-05-18 18:33:48 +00:00

required-cores-installed.js

feat(core-eslint): required-cores-installed rule

2026-05-12 23:22:43 +02:00

required-cores-installed.test.js

feat(core-eslint): required-cores-installed rule

2026-05-12 23:22:43 +02:00

usecase-must-be-wired.js

feat(core-eslint): add usecase-must-be-wired conformance rule

2026-05-18 11:03:17 +02:00

usecase-must-be-wired.test.js

feat(core-eslint): add usecase-must-be-wired conformance rule

2026-05-18 11:03:17 +02:00

usecase-must-have-test-file.js

feat(core-eslint): usecase-must-have-test-file rule

2026-05-12 23:21:38 +02:00

usecase-must-have-test-file.test.js

feat(core-eslint): usecase-must-have-test-file rule

2026-05-12 23:21:38 +02:00