3 commits

Author	SHA1	Message	Date
Virgil	2f8f8f805e	fix(api): scope rate limiting by key ... Co-Authored-By: Virgil <virgil@lethean.io>	2026-04-01 18:22:17 +00:00
Virgil	e713fb9f56	feat(api): emit rate limit headers on success and reject ... Adds X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset to successful responses and 429 rejections, and documents the headers in OpenAPI. Co-Authored-By: Virgil <virgil@lethean.io>	2026-04-01 16:01:09 +00:00
Virgil	6fdd769212	feat(api): add per-IP rate limiting middleware ... Adds a token-bucket WithRateLimit option that rejects excess requests with 429 Too Many Requests and a standard error envelope. Co-Authored-By: Virgil <virgil@lethean.io>	2026-04-01 06:54:58 +00:00