9aff427ad8
Release-cycle review: the per-workspace cost cap was fixed-window + per-instance (allowed ~2x at a window boundary and K*cap behind K instances) on an anonymous endpoint that spends the owner's provider budget. Rewrite it as a sliding-window, CLUSTER-WIDE Redis limiter: one atomic Lua EVAL does ZREMRANGEBYSCORE (age out) -> ZCARD -> ZADD with PEXPIRE, so concurrent instances share one budget and the true rate over any trailing window is <= cap. Fails OPEN on a Redis error (logged) — it's a cost backstop, not access control (the funnel gates + per-IP throttle still apply), so a Redis blip must not take the assistant offline. Per-IP @Throttle kept; commented that it needs an XFF-rewriting trusted proxy to be meaningful. Extract deriveShareAccess (resolvedShareId===requestedShareId + isSharingAllowed + !restricted, equality-only, never widening) and filterShareTranscript into pure helpers, and add tests: limiter sliding-window + boundary-burst + fail-open; access derivation; and red-team boundary locks (cross-share/cross-workspace swap rejected, forged shareId can't widen tool scope, transcript injection filtered). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
A progressive Node.js framework for building efficient and scalable server-side applications.
Description
Nest framework TypeScript starter repository.
Installation
$ npm install
Running the app
# development
$ npm run start
# watch mode
$ npm run start:dev
# production mode
$ npm run start:prod
Migrations
# This creates a new empty migration file named 'init'
$ npm run migration:create --name=init
# Generates 'init' migration file from existing entities to update the database schema
$ npm run migration:generate --name=init
# Runs all pending migrations to update the database schema
$ npm run migration:run
# Reverts the last executed migration
$ npm run migration:revert
# Reverts all migrations
$ npm run migration:revert
# Shows the list of executed and pending migrations
$ npm run migration:show
## Test
```bash
# unit tests
$ npm run test
# e2e tests
$ npm run test:e2e
# test coverage
$ npm run test:cov
Support
Nest is an MIT-licensed open source project. It can grow thanks to the sponsors and support by the amazing backers. If you'd like to join them, please read more here.
Stay in touch
- Author - Kamil Myśliwiec
- Website - https://nestjs.com
- Twitter - @nestframework
License
Nest is MIT licensed.