3 Commits

Author	SHA1	Message	Date
Jakub Zych	b45af8ebbf	fix(cabana): scope the token last_used_at throttle to the guard instance ... - The process-global debounce map was keyed by token ID, so a stamp from one test database suppressed a later write in another and turned TestBackendTokenPostgres red depending on order - Each compositeGuard now owns a stampThrottle; the backend guard and the ResolveBackend guard of one activation share it, so a single-app binary still writes last_used_at at most once a minute per token - TestTokenLastUsedThrottlePerGuard pins the per-guard isolation	2026-10-11 15:19:55 +02:00
Jakub Zych	183583e0e9	feat(16.3-01): interactive-only gates, ResolveBackend, last_used stamp ... - Refuse g15_ tokens on account/avatar/refresh/logout; gate field-types and markdown - Publish cookie-less ResolveBackend; debounce last_used_at once per minute - Reserve account vendor segment; TestTokenGatesSmoke covers the deny path Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-11 01:47:52 +02:00
Jakub Zych	b9273c1da7	feat(16.3-01): tracer — g15_ token scopes through composite backend guard ... - Add pact.TokenScope/HasTokenScopes and bouncer.ScopeLimit on Principal - Append backend_api_tokens migration; Allows evaluates scope before superuser - Composite guard routes Bearer g15_… to token lookup; smoke tests cover path Co-authored-by: Cursor <cursoragent@cursor.com>	2026-10-11 01:46:32 +02:00