milestone 33: contract closure — samples, file-authority enumeration, dead code, bundle ceiling

src/web/server.zig

@@ -301,7 +301,7 @@ pub const QuerylogRead = struct {
 /// one, so a password set through the API locks the routes without a restart.
 /// With it set but no session store wired, every session route is refused: the
 /// failure mode of a half-wired server must be locked, not open.
-pub fn sessionAuth(state: *WebState, io: std.Io, request: *const http_util.Request) bool {
+fn sessionAuth(state: *WebState, io: std.Io, request: *const http_util.Request) bool {
     if (!state.live_hash.enabled(io)) return true;
     const sessions = state.sessions orelse return false;
     const cookie = http_util.cookieValue(request.cookie, auth.cookie_name) orelse return false;
@@ -313,7 +313,7 @@ pub fn sessionAuth(state: *WebState, io: std.Io, request: *const http_util.Reque
 ///
 /// Keyed on `client_addr`, not on the socket peer: behind a trusted proxy every
 /// peer is the proxy, and one bucket for every remote user is no limiter at all.
-pub fn bucketLimit(state: *WebState, io: std.Io, request: *const http_util.Request) LimitVerdict {
+fn bucketLimit(state: *WebState, io: std.Io, request: *const http_util.Request) LimitVerdict {
     const limiter = state.limiter orelse return .ok;
     const now = std.Io.Clock.awake.now(io);
     return limiter.check(io, now, address.NetAddress.fromIp(request.client_addr));