add features

.github/workflows/ci.yml

@@ -71,6 +71,10 @@ jobs:
         working-directory: web
         run: bun install --frozen-lockfile
 
+      - name: Test
+        working-directory: web/default
+        run: bun run test
+
       - name: Typecheck
         working-directory: web/default
         run: bun run typecheck

common/constants.go

@@ -226,15 +226,15 @@ var (
 	GlobalWebRateLimitDuration int64
 
 	CriticalRateLimitEnable        bool
-	CriticalRateLimitNum                 = 20
+	CriticalRateLimitNum                 = 200
 	CriticalRateLimitDuration      int64 = 20 * 60
-	CriticalRouteRateLimitNum            = 20
+	CriticalRouteRateLimitNum            = 200
 	CriticalRouteRateLimitDuration int64 = 20 * 60
 
 	// Password login is limited by account as well as the shared API bucket.
 	// This prevents a shared NAT address from making unrelated users unable to log in.
 	LoginRateLimitEnable   bool
-	LoginRateLimitNum            = 10
+	LoginRateLimitNum            = 100
 	LoginRateLimitDuration int64 = 15 * 60
 
 	UploadRateLimitNum            = 10
@@ -245,7 +245,7 @@ var (
 
 	// Per-user search rate limit (applies after authentication, keyed by user ID)
 	SearchRateLimitEnable         = true
-	SearchRateLimitNum            = 10
+	SearchRateLimitNum            = 100
 	SearchRateLimitDuration int64 = 60
 )
 
@@ -277,8 +277,9 @@ const (
 )
 
 const (
-	TopUpStatusPending = "pending"
-	TopUpStatusSuccess = "success"
-	TopUpStatusFailed  = "failed"
-	TopUpStatusExpired = "expired"
+	TopUpStatusPending            = "pending"
+	TopUpStatusSuccess            = "success"
+	TopUpStatusFailed             = "failed"
+	TopUpStatusExpired            = "expired"
+	TopUpStatusPaidReconciliation = "paid_reconciliation"
 )

common/init.go

@@ -127,29 +127,32 @@ func InitEnv() {
 	GeminiSafetySetting = GetEnvOrDefaultString("GEMINI_SAFETY_SETTING", "BLOCK_NONE")
 	CohereSafetySetting = GetEnvOrDefaultString("COHERE_SAFETY_SETTING", "NONE")
 
-	// Initialize rate limit variables
+	initRateLimitEnv()
+	initConstantEnv()
+}
+
+func initRateLimitEnv() {
 	GlobalApiRateLimitEnable = GetEnvOrDefaultBool("GLOBAL_API_RATE_LIMIT_ENABLE", true)
 	GlobalApiRateLimitNum = GetEnvOrDefault("GLOBAL_API_RATE_LIMIT", 720)
 	GlobalApiRateLimitDuration = int64(GetEnvOrDefault("GLOBAL_API_RATE_LIMIT_DURATION", 180))
 
 	GlobalWebRateLimitEnable = GetEnvOrDefaultBool("GLOBAL_WEB_RATE_LIMIT_ENABLE", true)
-	GlobalWebRateLimitNum = GetEnvOrDefault("GLOBAL_WEB_RATE_LIMIT", 60)
+	GlobalWebRateLimitNum = GetEnvOrDefault("GLOBAL_WEB_RATE_LIMIT", 600)
 	GlobalWebRateLimitDuration = int64(GetEnvOrDefault("GLOBAL_WEB_RATE_LIMIT_DURATION", 180))
 
 	CriticalRateLimitEnable = GetEnvOrDefaultBool("CRITICAL_RATE_LIMIT_ENABLE", true)
-	CriticalRateLimitNum = GetEnvOrDefault("CRITICAL_RATE_LIMIT", 20)
+	CriticalRateLimitNum = GetEnvOrDefault("CRITICAL_RATE_LIMIT", 200)
 	CriticalRateLimitDuration = int64(GetEnvOrDefault("CRITICAL_RATE_LIMIT_DURATION", 20*60))
-	CriticalRouteRateLimitNum = GetEnvOrDefault("CRITICAL_ROUTE_RATE_LIMIT", 20)
+	CriticalRouteRateLimitNum = GetEnvOrDefault("CRITICAL_ROUTE_RATE_LIMIT", 200)
 	CriticalRouteRateLimitDuration = int64(GetEnvOrDefault("CRITICAL_ROUTE_RATE_LIMIT_DURATION", 20*60))
 
 	LoginRateLimitEnable = GetEnvOrDefaultBool("LOGIN_RATE_LIMIT_ENABLE", true)
-	LoginRateLimitNum = GetEnvOrDefault("LOGIN_RATE_LIMIT", 10)
+	LoginRateLimitNum = GetEnvOrDefault("LOGIN_RATE_LIMIT", 100)
 	LoginRateLimitDuration = int64(GetEnvOrDefault("LOGIN_RATE_LIMIT_DURATION", 15*60))
 
 	SearchRateLimitEnable = GetEnvOrDefaultBool("SEARCH_RATE_LIMIT_ENABLE", true)
-	SearchRateLimitNum = GetEnvOrDefault("SEARCH_RATE_LIMIT", 10)
+	SearchRateLimitNum = GetEnvOrDefault("SEARCH_RATE_LIMIT", 100)
 	SearchRateLimitDuration = int64(GetEnvOrDefault("SEARCH_RATE_LIMIT_DURATION", 60))
-	initConstantEnv()
 }
 
 func initConstantEnv() {

common/init_rate_limit_test.go

@@ -0,0 +1,52 @@
+package common
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func TestRateLimitEnvironmentDefaults(t *testing.T) {
+	envKeys := []string{
+		"GLOBAL_API_RATE_LIMIT_ENABLE",
+		"GLOBAL_API_RATE_LIMIT",
+		"GLOBAL_API_RATE_LIMIT_DURATION",
+		"GLOBAL_WEB_RATE_LIMIT_ENABLE",
+		"GLOBAL_WEB_RATE_LIMIT",
+		"GLOBAL_WEB_RATE_LIMIT_DURATION",
+		"CRITICAL_RATE_LIMIT_ENABLE",
+		"CRITICAL_RATE_LIMIT",
+		"CRITICAL_RATE_LIMIT_DURATION",
+		"CRITICAL_ROUTE_RATE_LIMIT",
+		"CRITICAL_ROUTE_RATE_LIMIT_DURATION",
+		"LOGIN_RATE_LIMIT_ENABLE",
+		"LOGIN_RATE_LIMIT",
+		"LOGIN_RATE_LIMIT_DURATION",
+		"SEARCH_RATE_LIMIT_ENABLE",
+		"SEARCH_RATE_LIMIT",
+		"SEARCH_RATE_LIMIT_DURATION",
+	}
+	for _, key := range envKeys {
+		t.Setenv(key, "")
+	}
+
+	initRateLimitEnv()
+
+	require.True(t, GlobalApiRateLimitEnable)
+	require.Equal(t, 720, GlobalApiRateLimitNum)
+	require.EqualValues(t, 180, GlobalApiRateLimitDuration)
+	require.True(t, GlobalWebRateLimitEnable)
+	require.Equal(t, 600, GlobalWebRateLimitNum)
+	require.EqualValues(t, 180, GlobalWebRateLimitDuration)
+	require.True(t, CriticalRateLimitEnable)
+	require.Equal(t, 200, CriticalRateLimitNum)
+	require.EqualValues(t, 20*60, CriticalRateLimitDuration)
+	require.Equal(t, 200, CriticalRouteRateLimitNum)
+	require.EqualValues(t, 20*60, CriticalRouteRateLimitDuration)
+	require.True(t, LoginRateLimitEnable)
+	require.Equal(t, 100, LoginRateLimitNum)
+	require.EqualValues(t, 15*60, LoginRateLimitDuration)
+	require.True(t, SearchRateLimitEnable)
+	require.Equal(t, 100, SearchRateLimitNum)
+	require.EqualValues(t, 60, SearchRateLimitDuration)
+}

common/quota_math.go

@@ -129,3 +129,9 @@ func QuotaFromDecimalChecked(d decimal.Decimal) (int, *QuotaClamp) {
 	f, _ := d.Round(0).Float64()
 	return saturateQuota(f, "QuotaFromDecimal")
 }
+
+// QuotaFromDecimalStrict rejects unrepresentable values instead of silently
+// saturating them. Payment and settlement inputs must use this form.
+func QuotaFromDecimalStrict(d decimal.Decimal) (int, error) {
+	return strictQuota(QuotaFromDecimalChecked(d))
+}