3 Commits

Include renames

Author	SHA1	Message	Date
Juan Denis	6068b099dc	Replace nine per-app access helpers with one ... Nine route files each loaded the live app and checked access, with four return shapes, docstrings promising error tuples the code never returned, and 41 dead 'if err: return err' branches. require_app() backed by ResourceGrantService.get_app_for does it once; conceal=True keeps the 404-for-denied answer the previews, WAF and slot routes already gave, so no route's status changes. Nine query sites leave the API layer.	2026-10-10 16:36:01 -04:00
Juan Denis	ba3bc685fe	test: split WP suites — extension-owned move to serverkit-wordpress ... 10 extension-owned suites (surface, extraction, import-zip, php errors/ limits, pipelines alias, plugin library, promote, reports, ssh import) move to the extension repo via the SERVERKIT_WORDPRESS_DIR loader. Panel-core suites (bridge, hooks-absent, seeding, authz sweeps) updated for WP-absent behavior; conftest seeds the manifest onto test plugin rows.	2026-08-05 02:38:41 -04:00
Juan Denis	6b6237bc17	feat(security): authz hardening round 2 (plan 29)	2026-07-07 20:29:24 -04:00