Merge branch 'main' into build/deterministic-npm-toolchain-on-main

Author: opencode-agent[bot]

src/rate-limit.ts

@@ -55,7 +55,9 @@ function jsonResponse(body: unknown, status = 200): Response {
 export function configuredDistributedRateLimit(raw: string | undefined): number {
   const parsed = Number(raw ?? String(DEFAULT_RATE_LIMIT_PER_MINUTE));
   if (!Number.isFinite(parsed) || parsed <= 0) return DEFAULT_RATE_LIMIT_PER_MINUTE;
-  return Math.min(Math.floor(parsed), MAX_RATE_LIMIT_PER_MINUTE);
+  const normalized = Math.floor(parsed);
+  if (normalized <= 0) return DEFAULT_RATE_LIMIT_PER_MINUTE;
+  return Math.min(normalized, MAX_RATE_LIMIT_PER_MINUTE);
 }
 
 function canonicalIpv4(candidate: string): string | undefined {

test/rate-limit-config-regression.test.ts

@@ -0,0 +1,14 @@
+import { describe, expect, it } from "vitest";
+import { configuredDistributedRateLimit } from "../src/rate-limit";
+
+describe("distributed rate-limit configuration regression", () => {
+  it("never normalizes a positive sub-unit rate limit to zero", () => {
+    expect(configuredDistributedRateLimit("0.5")).toBe(60);
+    expect(configuredDistributedRateLimit("0.999999")).toBe(60);
+  });
+
+  it("preserves the existing floor semantics once the configured value can yield a positive integer", () => {
+    expect(configuredDistributedRateLimit("1")).toBe(1);
+    expect(configuredDistributedRateLimit("1.9")).toBe(1);
+  });
+});