Andrey Antukh 18705f2d00 🐛 Make the audit events concurrency limit per profile ...

The command declared its limit as a plain keyword next to
`::climit/key-fn`, metadata that `climit/wrap` does not read: it
takes the key only from the positional `key-fn` of the vector form.
The limit was a single shared one, so when one call got stuck it
held the only permit and every audit batch of that instance was
rejected with 429 from then on.

The test builds the limiter from the command metadata and checks
that two profiles end up with different limiters.

AI-assisted-by: deepseek-v4.1-flash

2026-10-13 14:33:32 +02:00

..

test_files

🐛 Keep camelCase svg attribute names when importing a penpot file (#11974)

2026-09-29 14:15:21 +02:00

auth_ldap_test.clj

🐛 Escape LDAP filter values and use directory email in retrieve-user (#11085)

2026-09-10 16:39:35 +02:00

auth_oidc_test.clj

🐛 Fix nitrate sso failure message (#11214)

2026-08-26 17:24:59 +02:00

binfile_svg_test.clj

🐛 Sanitize SVG on binfile import (#12105)

2026-10-06 14:21:12 +02:00

binfile_test.clj

🐛 Keep camelCase svg attribute names when importing a penpot file (#11974)

2026-09-29 14:15:21 +02:00

bounce_handling_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

db_test.clj

⬆️ Update JVM, pnpm and node dependencies (#11404)

2026-09-01 12:01:35 +02:00

demo_test.clj

✨ Add several improvements for demo profile creation mechanism (#11257)

2026-09-01 08:46:28 +02:00

email_blacklist_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

email_sending_test.clj

♻️ Normalize organization naming across Penpot (#10977)

2026-07-31 12:04:10 +02:00

helpers.clj

🚑 Revoke file access when a member leaves the team (#12097)

2026-10-05 16:47:07 +02:00

http_assets_test.clj

🐛 Enforce ownership check on tempfile bucket access (#11270)

2026-08-26 13:05:36 +02:00

http_client_test.clj

🐛 Add ssrf check for nitrate sso and add timeouts to http client (#11576)

2026-09-09 11:23:53 +02:00

http_management_test.clj

🐛 Use constant-time comparison for management API shared key auth (#11534)

2026-09-14 13:26:16 +02:00

http_metrics_test.clj

✨ Add observability improvements (#11854)

2026-09-23 18:03:03 +02:00

http_middleware_security.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

http_middleware_test.clj

🐛 Use constant-time comparison for management API shared key auth (#11534)

2026-09-14 13:26:16 +02:00

loggers_webhooks_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

logical_deletion_test.clj

✨ Inherit subscriptions perks to Nitrate

2026-06-02 09:33:02 +02:00

media_remote_test.clj

🐛 Add ssrf check for nitrate sso and add timeouts to http client (#11576)

2026-09-09 11:23:53 +02:00

media_sanitize_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

media_test.clj

🐛 Sanitize SVG namespace-prefixed elements and attributes (#12073)

2026-10-05 11:56:59 +02:00

metrics_test.clj

✨ Add observability improvements (#11854)

2026-09-23 18:03:03 +02:00

passwords_test.clj

⬆️ Update JVM, pnpm and node dependencies (#11404)

2026-09-01 12:01:35 +02:00

rpc_access_tokens_test.clj

🐛 Prevent MCP tokens from being used as access tokens (#10962)

2026-07-31 13:19:45 +02:00

rpc_audit_test.clj

🐛 Make the audit events concurrency limit per profile

2026-10-13 14:33:32 +02:00

rpc_auth_test.clj

🐛 Fix session invalidation on logout to prevent token replay (#11317)

2026-08-21 12:55:24 +02:00

rpc_binfile_test.clj

🐛 Validate version parameter in import-binfile (#11107)

2026-08-18 15:13:49 +02:00

rpc_commands_error_reports_test.clj

🐛 Attribute audit events to the caller, not the response (#11952)

2026-09-29 09:47:07 +02:00

rpc_comment_test.clj

🐛 Enforce share-link comment permissions and page scope (#11371)

2026-09-01 08:48:55 +02:00

rpc_cond_middleware_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

rpc_demo_test.clj

✨ Add expires-in TTL option to demo profile creation (#11574)

2026-09-14 13:24:38 +02:00

rpc_doc_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

rpc_feedback_test.clj

🐛 Add size limit and rate limiting to send-user-feedback (#10979) (#10990)

2026-08-05 17:35:59 +02:00

rpc_file_snapshot_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

rpc_file_test.clj

✨ Restrict optional RPC ids to user-provided UUIDs (#11777)

2026-09-22 09:45:50 +02:00

rpc_file_thumbnails_test.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-06-15 13:04:19 +02:00

rpc_font_test.clj

✨ Add several improvements for demo profile creation mechanism (#11257)

2026-09-01 08:46:28 +02:00

rpc_management_nitrate_test.clj

🐛 Store audit initiator as plain string for shared-key callers (#11629)

2026-09-22 19:44:44 +02:00

rpc_management_test.clj

🐛 Validate content-type on management upload endpoints (#11026)

2026-08-17 12:13:56 +02:00

rpc_media_test.clj

✨ Restrict optional RPC ids to user-provided UUIDs (#11777)

2026-09-22 09:45:50 +02:00

rpc_nitrate_test.clj

🐛 Fix missing warning when moving a team (#11357)

2026-08-26 08:08:40 +02:00

rpc_organization_owner_permissions_test.clj

⚡ Fetch team organization in a single batch (#11140)

2026-08-10 13:43:27 +02:00

rpc_profile_test.clj

🐛 Attribute audit events to the caller, not the response (#11952)

2026-09-29 09:47:07 +02:00

rpc_project_test.clj

✨ Restrict optional RPC ids to user-provided UUIDs (#11777)

2026-09-22 09:45:50 +02:00

rpc_quotes_test.clj

🐛 Add accumulated storage byte quota for media uploads (#11038)

2026-08-26 08:33:20 +02:00

rpc_rlimit_test.clj

🐛 Normalize fractional rate-limit reset durations (#11254)

2026-08-17 15:27:06 +02:00

rpc_team_test.clj

🚑 Revoke file access when a member leaves the team (#12097)

2026-10-05 16:47:07 +02:00

rpc_viewer_test.clj

🐛 Filter share-link tokens in get-view-only-bundle response (#11286)

2026-09-01 08:46:59 +02:00

rpc_webhooks_test.clj

🐛 Restrict webhook creation/edit/delete to team members only (#11029)

2026-08-05 17:42:49 +02:00

shell_test.clj

🐛 Fix backend util shell tests

2026-07-09 19:34:15 +02:00

srepl_main_test.clj

✨ Add observability improvements (#11854)

2026-09-23 18:03:03 +02:00

storage_test.clj

✨ Add media-processor service for image and font processing (#10767)

2026-08-05 09:41:48 +02:00

storage_tmp_test.clj

🐛 Reserve S3 download path without creating the file

2026-10-05 17:16:47 +02:00

tasks_telemetry_test.clj

🐛 Emit the accept-organization-invitation audit event once

2026-09-29 22:40:03 +02:00

util_blob_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

util_objects_map_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

util_pointer_map_test.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

util_ssrf_test.clj

🐛 Block IPv6 transition addresses in SSRF guard (#11320)

2026-09-01 08:47:46 +02:00