Juan DenisandAruvasgaChithan 696226002b fix(security): enforce files.write permission on File Manager mutations (GHSA-4wqh-7f4f-5qmx) ...

Mutating File Manager endpoints (write/create/mkdir/delete/rename/copy/
move/chmod/upload and the S3 equivalents) only required a valid JWT, so a
viewer account (files.write=false) could write and delete files. They now
require the files.write permission via permission_required(). Read
endpoints are unchanged. Adds regression tests covering both advisories.

Co-authored-by: AruvasgaChithan <AruvasgaChithan@users.noreply.github.com>

2026-07-26 15:19:22 -04:00

..

__init__.py

Initial project structure and core API implementation

2026-01-17 04:22:12 -05:00

admin.py

feat(settings): manage the base-domain registry from Settings → Site

2026-07-01 00:27:30 -04:00

advanced_ssl.py

Add advanced SSL: wildcard, SAN, custom certs, health checks

2026-03-23 02:15:16 -04:00

agent_plugins.py

Add agent plugin system with full lifecycle management

2026-03-23 02:08:00 -04:00

agent_poll.py

Add review rules and proxy/auth docs

2026-07-18 01:23:47 -04:00

ai.py

feat(ai): add core AI assistant primitive powered by Prompture

2026-06-01 02:39:05 -04:00

api_analytics.py

Add Services UI and service-detail pages

2026-03-07 12:15:02 -05:00

api_keys.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

app_volumes.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

apps.py

feat(databases): install any engine, because an engine is just a template

2026-07-25 20:09:05 -04:00

auth.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

backups.py

feat(plugins): let extensions contribute backup kinds

2026-07-25 13:59:51 -04:00

bandwidth.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

buildpacks.py

feat: Phase 2 developer experience — build packs, config snapshots, catalog certification

2026-06-23 18:49:04 -04:00

builds.py

feat(deploy): every deploy is a job — async deploy_app, retry endpoint, plan-in-GET

2026-07-22 16:37:08 -04:00

connections.py

feat(connections): authenticate private container registry pulls

2026-07-01 01:35:44 -04:00

container_status.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

cron.py

Add review rules and proxy/auth docs

2026-07-18 01:23:47 -04:00

dashboards.py

feat(dashboard): boards that survive the browser they were built in

2026-07-25 19:30:51 -04:00

database_engines.py

fix(databases): scope the extension listing to apps the caller can see

2026-07-26 00:19:46 -04:00

databases.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

db_tuner.py

feat(databases): curated engine config tuner

2026-07-03 14:24:03 -04:00

ddns.py

feat(security): trust reverse-proxy client IP via one gated seam

2026-07-18 00:51:21 -04:00

deploy.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

deployment_jobs.py

feat(deployments): simulated demo deploys through the real console pipeline

2026-07-23 16:58:46 -04:00

deployments.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

dns_cutover.py

fix(dns-cutover): restore snapshot() staging + provider-named 501 (plan 42 D7/ph5)

2026-07-09 04:50:16 -04:00

dns_providers.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

dns_zones.py

feat(domains): unify domains & DNS into one surface + admin-only Connections

2026-06-23 00:34:55 -04:00

docker.py

Protect ServerKit containers from lifecycle actions

2026-06-24 01:43:29 -04:00

docs.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

doctor.py

feat(ops): config drift detection, per-resource repair and doctor sweep

2026-07-03 15:21:09 -04:00

domains.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

env_vars.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

environments.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

event_subscriptions.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

files.py

fix(security): enforce files.write permission on File Manager mutations (GHSA-4wqh-7f4f-5qmx)

2026-07-26 15:19:22 -04:00

firewall.py

feat(security): cloud-metadata egress guard for app containers

2026-07-03 14:23:11 -04:00

fleet_monitor.py

Add auth checks, logging, DNS API & UI

2026-03-24 06:10:58 -04:00

fleet.py

Add agent capability probing and reporting

2026-05-01 00:37:48 -04:00

git.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

htaccess_tools.py

feat(hosting): .htaccess to nginx converter

2026-07-03 15:22:05 -04:00

image_updates.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

invitations.py

Add invitations, email models, admin APIs

2026-03-04 02:34:49 -05:00

jobs.py

feat(jobs): host-idiom Jobs page + server-side search/paging + job retention

2026-07-08 23:01:12 -04:00

linked_panel.py

feat(servers): ServerKit-to-ServerKit peering — embedded agent mode

2026-07-22 00:35:33 -04:00

logs.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

managed_db_users.py

feat(databases): managed DB users and one-click Adminer SSO

2026-07-03 14:24:15 -04:00

manifests.py

feat(manifest): finish appliance volumes + one-shot bootstrap (plan 35 ph2)

2026-07-09 03:05:08 -04:00

marketplace.py

Marketplace trust: split 409 reasons, hide unreviewed outside dev mode

2026-07-22 23:18:33 -04:00

metrics.py

Replace jwt_required with RBAC, use socket auth

2026-02-08 23:14:13 -05:00

migrations.py

Add SSO/OAuth and DB migration framework

2026-03-04 01:37:22 -05:00

mobile.py

Add auth checks, logging, DNS API & UI

2026-03-24 06:10:58 -04:00

modules.py

feat(extensions): Phase 1 — seed marketplace (GPU + Workflow), module toggles

2026-07-01 21:34:54 -04:00

monitoring.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

nginx_advanced.py

Add Nginx advanced config: reverse proxy, load balancing, caching

2026-03-23 02:19:33 -04:00

nginx.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

notifications.py

feat(notifications): restore email-bounce webhook slice (plan 42 ph3)

2026-07-09 04:55:53 -04:00

pairing.py

Add review rules and proxy/auth docs

2026-07-18 01:23:47 -04:00

performance.py

feat(jobs): unified background-job orchestration on the Queue Bus

2026-06-21 20:44:12 -04:00

php.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

plugins.py

feat(sdk): a second widget surface — types users place, not just slots

2026-07-25 19:24:41 -04:00

previews.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

private_urls.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

processes.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

projects.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

proxy.py

feat: make the ingress-plane boundary explicit (host Nginx vs proxy stack)

2026-06-23 20:57:40 -04:00

python.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

queue_bus.py

Workspace and queue bus improvements

2026-06-22 01:16:00 -04:00

registrars.py

Add registrars, GitLab, DO/Godaddy DNS and SMTP relay

2026-06-15 09:19:56 -04:00

search.py

feat(search): unified entity omnisearch endpoint for the palette

2026-07-11 00:26:40 -04:00

secrets_webhooks.py

Truncate large telemetry payloads & UI robustness fixes

2026-06-22 01:45:15 -04:00

security.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

server_templates.py

Add server templates with config drift detection and compliance

2026-03-23 02:11:16 -04:00

servers.py

fix(recovery): restore agent scopes, DNS preflight, catalog events, thread guards

2026-07-08 02:06:01 -04:00

setup_health.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

shared_resources.py

feat: per-service targeting for the compose env overlay

2026-06-23 23:19:41 -04:00

site_imports.py

feat(adoption): DNS cutover+verify, snapshots, SSH import (plan 31)

2026-07-07 20:29:26 -04:00

snapshots.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

source_connections.py

feat(connections): one-click GitHub setup via the GitHub App manifest flow

2026-07-10 23:06:09 -04:00

speed_test.py

feat(monitoring): on-demand server speed test card

2026-07-03 14:23:29 -04:00

ssl.py

refactor(backend): extract reusable format_bytes, admin_required, and validate_app_name

2026-06-21 02:11:47 -04:00

sso.py

Add audit fallback, builtin extensions, and ports

2026-05-03 15:57:02 -04:00

support_bundle.py

feat(cli): API-backed operator verbs and diagnostic support bundle

2026-07-03 15:21:22 -04:00

survey.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

system.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

telemetry.py

feat(telemetry): unified system event stream with correlation

2026-06-21 20:19:57 -04:00

templates.py

feat(databases): engine extensions, without the silent failure

2026-07-25 23:44:34 -04:00

test_sandbox.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00

themes.py

feat(themes): backend model, API, and registry pipeline (plan 60 Phase 2-3)

2026-07-23 00:24:00 -04:00

two_factor.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

uptime.py

Add server uptime tracking and visualization

2026-01-17 13:37:40 -05:00

waf.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

webhooks.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

workspaces.py

feat(workspace): scoping audit + per-scope matrix (plan 19)

2026-07-07 20:29:22 -04:00