Add landing install copy UX and document remaining security/test TODOs

src/tests/test_api.py

@@ -9,6 +9,21 @@ sys.path.append(str(Path(__file__).resolve().parents[1]))
 from seedpass import api
 
 
+def test_get_pm_requires_initialized_state():
+    class DummyState:
+        pass
+
+    class DummyApp:
+        state = DummyState()
+
+    class DummyRequest:
+        app = DummyApp()
+
+    with pytest.raises(api.HTTPException) as exc:
+        api._get_pm(DummyRequest())
+    assert exc.value.status_code == 503
+
+
 @pytest.mark.anyio
 async def test_token_hashed(client):
     _, token = client

src/tests/test_api_rate_limit.py

@@ -45,3 +45,6 @@ async def test_rate_limit_exceeded(monkeypatch):
 
         res = await client.get("/api/v1/entry", params={"query": "s"}, headers=headers)
         assert res.status_code == 429
+        bucket_keys = list(api.app.state.rate_limit_buckets.keys())
+        assert bucket_keys
+        assert all(token not in key for key in bucket_keys)