feat: Add usage budget controls

[niemyjski]

Add organization budget alerts and optional project event caps to the Svelte Usage pages. Automatic 5% sampling limits noisy projects while preserving the organization allowance as the outer limit. Existing organizations keep alerts disabled and existing projects remain uncapped unless configured.

Ingestion uses atomic reservations so concurrent posts cannot exceed remaining capacity. Retries preserve accepted and blocked counts and failed event indexes, including when a plan becomes unlimited or a project cap is removed. Notification handlers recheck current usage and recipient preferences before sending mail. Latest main is integrated.

Validation: release build (0 warnings/errors), 84 focused backend tests, 812 frontend tests, type check, lint, production build, and four localhost desktop/mobile browser cases passed. Browser cases use mocked APIs. Hosted API, client, E2E, and Docker checks passed on 9489eb067; CLA also passed.

Pending local verification: service-backed localhost ingestion and integration/OpenAPI snapshot reruns are waiting for an exclusive shared-runtime slot. Atomic reservations require a single Redis endpoint; Redis Cluster is unsupported. Retry delivery is at least once, so an enqueue followed by a failed acknowledgement may duplicate that failed event.

Verification and implementation details

• A completed mixed batch retried after an unlimited-plan upgrade reprocessed an accepted event before the fix. The regression now passes, along with active and released reservations retried after cap removal.
• New unlimited posts remain outside the organization reservation lock; redeliveries check for a reservation created under prior limits, while first deliveries keep the no-lookup fast path.
• Backend checks cover retry recovery, notification handling, Razor mail rendering, legacy serialization, and project validation. Hosted API checks include the integration suite.
• Browser checks at 1280px and 390px cover validation, preserving input after server errors, saving, clearing, page errors, and horizontal overflow.
• PATCH contracts remain additive and nullable so clients can clear budget settings. All 37 review threads were audited and are resolved.

[Copilot]

Pull request overview

Adds backend usage budget controls for organizations and projects, including budget alert settings, project ingest caps, smart throttling calculations, notification work items, and API contract updates.

Changes:

• Adds organization budget alert and project ingest limit models/API fields.
• Extends usage/event processing with alert checks, project budget allowance, and smart throttling sampling.
• Adds notification messages, work items, mailer methods/templates, OpenSpec docs, OpenAPI baseline updates, and limited regression tests.

Reviewed changes

Copilot reviewed 39 out of 39 changed files in this pull request and generated 19 comments.

Show a summary per file

File	Description
tests/Exceptionless.Tests/Services/UsageServiceTests.cs	Adds a regression test for missing organization smart throttle handling.
tests/Exceptionless.Tests/Mail/NullMailer.cs	Adds no-op implementations for new mailer methods.
tests/Exceptionless.Tests/Mail/CountingMailer.cs	Adds stub implementations for new mailer methods.
tests/Exceptionless.Tests/Controllers/OrganizationControllerTests.cs	Adds PATCH regression coverage for budget alert settings without name.
tests/Exceptionless.Tests/Controllers/Data/openapi.json	Updates OpenAPI baseline for new usage budget fields and DTOs.
src/Exceptionless.Web/Models/Project/ViewProject.cs	Exposes project ingest limit and smart throttle state.
src/Exceptionless.Web/Models/Project/UpdateProject.cs	Allows project ingest limit updates.
src/Exceptionless.Web/Models/Organization/ViewOrganization.cs	Exposes organization budget alert settings.
src/Exceptionless.Web/Models/Organization/UpdateOrganization.cs	Adds organization PATCH DTO.
src/Exceptionless.Web/Mapping/ProjectMapper.cs	Ignores computed project usage budget fields in mapper.
src/Exceptionless.Web/Mapping/OrganizationMapper.cs	Adds organization update mapping.
src/Exceptionless.Web/Controllers/ProjectController.cs	Populates computed project ingest/throttle fields.
src/Exceptionless.Web/Controllers/OrganizationController.cs	Switches update DTO and adjusts name validation condition.
src/Exceptionless.Web/Bootstrapper.cs	Registers new startup notification subscribers.
src/Exceptionless.Core/Services/UsageService.cs	Adds budget alert checks, project allowance calculation, and smart throttle calculation.
src/Exceptionless.Core/Models/WorkItems/ProjectSmartThrottleWorkItem.cs	Adds smart throttle notification work item.
src/Exceptionless.Core/Models/WorkItems/OrganizationBudgetAlertWorkItem.cs	Adds budget alert notification work item.
src/Exceptionless.Core/Models/ProjectIngestLimit.cs	Adds project ingest limit model and enum.
src/Exceptionless.Core/Models/Project.cs	Persists optional project ingest limit.
src/Exceptionless.Core/Models/OrganizationBudgetAlertSettings.cs	Adds organization budget alert settings model.
src/Exceptionless.Core/Models/Organization.cs	Persists and validates organization budget alert settings.
src/Exceptionless.Core/Models/Messaging/ProjectSmartThrottleApplied.cs	Adds smart throttle notification message.
src/Exceptionless.Core/Models/Messaging/OrganizationBudgetAlert.cs	Adds budget alert notification message.
src/Exceptionless.Core/Mail/Templates/project-smart-throttle.html	Adds smart throttle email template.
src/Exceptionless.Core/Mail/Templates/organization-budget-alert.html	Adds budget alert email template.
src/Exceptionless.Core/Mail/Mailer.cs	Implements new budget/throttle emails.
src/Exceptionless.Core/Mail/IMailer.cs	Adds new budget/throttle mailer contracts.
src/Exceptionless.Core/Jobs/WorkItemHandlers/ProjectSmartThrottleWorkItemHandler.cs	Adds smart throttle subscriber and email handler.
src/Exceptionless.Core/Jobs/WorkItemHandlers/OrganizationBudgetAlertWorkItemHandler.cs	Adds budget alert subscriber and email handler.
src/Exceptionless.Core/Jobs/EventPostsJob.cs	Enforces project allowance and applies smart throttle sampling.
src/Exceptionless.Core/Exceptionless.Core.csproj	Embeds new email templates.
src/Exceptionless.Core/Bootstrapper.cs	Registers new work item handlers.
openspec/changes/add-usage-budget-controls/tasks.md	Adds implementation/verification task plan.
openspec/changes/add-usage-budget-controls/specs/organizations-projects-users-auth/spec.md	Adds auth/ownership requirements.
openspec/changes/add-usage-budget-controls/specs/jobs-notifications-and-queues/spec.md	Adds notification and queue requirements.
openspec/changes/add-usage-budget-controls/specs/event-ingestion/spec.md	Adds ingestion, throttling, and project budget requirements.
openspec/changes/add-usage-budget-controls/specs/api-compatibility/spec.md	Adds API compatibility requirements.
openspec/changes/add-usage-budget-controls/proposal.md	Documents proposal and user-visible behavior.
openspec/changes/add-usage-budget-controls/design.md	Documents detailed backend/UI design.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 49 out of 52 changed files in this pull request and generated 14 comments.

[niemyjski]

Completed the final reviewer-feedback, thermo-nuclear, and runtime dogfood pass on b696ef46de562819aee5bbd5b79dc80f102e2b47.

• Feedback audit: 37/37 review threads are resolved. 32 are outdated after later rewrites; the 5 still attached to current lines are already fixed by project-limit validation, nullable typed OpenAPI schemas, and delayed notification-handler rechecks. All 59 submitted reviews are COMMENTED; there are no change-request reviews, open threads to reply to, or actionable human/bot top-level comments.
• Architecture: retained the minimal generic atomic-cache boundary rather than adding a thin ingest-store wrapper. Reservation generations, identity checks, accounting, blocked totals, capacity, state, TTLs, and usage-set membership are now handled atomically and fail closed. No changed production file crosses 1,000 lines and the final structural audit found no remaining code-judo, spaghetti, boundary, or partial-update blocker.
• Local Redis dogfood: cap 2 produced 2 accepted / 3 blocked; two simultaneous 5-event requests against cap 6 produced exactly 6 accepted / 4 blocked; clearing the cap restored ingestion without altering prior blocked counts. Both isolated projects were deleted and verified absent.
• Runtime cost/health: Aspire served the exact head; API/Jobs/dependencies were healthy. Each concurrent ingest used exactly two atomic scripts (reserve and complete), each 0.35–0.77 ms. No error traces were tied to the dogfood projects.
• Browser: Svelte Usage saved 6 → 7 and returned effective_ingest_limit: 7; related requests were 200, page errors were empty, and desktop plus 390×844 layouts passed.
• Verification: release build 0 warnings/errors; 2,592 passed / 2 skipped / 0 failed; focused usage 61/61, EventPost 7/7, real Redis 5/5; strict OpenSpec and diff checks passed. Required CI, including API coverage, is terminal green.

No external blocker remains.

[github-actions]

Package	Line Rate	Branch Rate	Complexity	Health
Exceptionless.Insulation	39%	38%	304	❌
Exceptionless.Web	85%	70%	8156	✔
Exceptionless.Core	77%	69%	11127	✔
Exceptionless.AppHost	38%	41%	147	❌
Summary	79% (27456 / 34541)	69% (12813 / 18675)	19734	✔