How does authentication work?
Every request checks the session token before accessing a protected route.
Can you add rate limiting?
I'll add a shared limiter to the API routes and verify the changes with tests.
Every coding agent.
One workspace to build.
Code, chat, terminals, and agents. The tools you already use, together in one workspace.
projects/mainmain
42export async function handler(req) {
43 const token = extractBearer(req);
44 if (!token) return unauthorized();
45
46 const user = await verify(token);
47 const key = `api:${user.id}`;
48 const limit = await rateLimit(key);
49
50 if (!limit.allowed) {
51 return tooManyRequests();
52 }
53
54 return handleRequest(req, user);
55}
Reviewing changes...
› read_file src/api/routes.ts
› edit shared rate limiter done
› run npm test
✓ auth.test.ts 8 passed
✓ limits.test.ts 10 passed
✓ routes.test.ts 6 passed
24 tests passed. Ready for review.
42export async function handler(req) {
43 const token = extractBearer(req);
44 if (!token) return unauthorized();
45
46 const user = await verify(token);
47 const key = `api:${user.id}`;
48 const limit = await rateLimit(key);
49
50 if (!limit.allowed) {
51 return tooManyRequests();
52 }
53
54 return handleRequest(req, user);
55}
Reviewing changes...
› read_file src/api/routes.ts
› edit shared rate limiter done
› run npm test
✓ auth.test.ts 8 passed
✓ limits.test.ts 10 passed
✓ routes.test.ts 6 passed
24 tests passed. Ready for review.
› Add rate limiting to all API routes.
Can you take care of the tests for me?
I’ll check every change, run the tests, and report anything that needs your attention.
Created task Review & test
Exploring
betterc0de / agent
Add rate limiting to the upload endpoint.
✓ Read src/lib/redis.ts
✓ Edit rate-limit.ts
~/projects/acme-api
❯ npm test
✓ All tests passed
Ready for your review.
Thinking...
