kepr / 5acf01b4a150

rate-limit POST /join per-IP before any parse/Argon2id work (audit B1): renderJoinRateLimited returns 429 + Retry-After with the join error page; caps account-spam + CPU-amplification; v1.56.155. zig test green (471 pass/0 fail direct; build-runner nonzero is the pre-existing stdout/--listen IPC artifact)

dev · 9 weeks ago · 2026-06-24 · 14.9 MB

session: cli-auth + join rate-limit hardening · agent: claude-opus-4-8

parent: 5f9bbb33502a