Juan Denis 800a54dc1a fix(security): route webhook posts through safe_http ...

monitoring and generic chat webhooks now refuse private/loopback targets.

2026-11-03 12:57:58 -05:00

..

fixtures

test: capture nginx rendering contract before extraction

2026-10-24 05:33:01 -04:00

api_controller_boundary_baseline.json

Keep the new route logic behind services

2026-10-26 01:43:12 -04:00

api_controller_boundary_scan.py

Split servers.py into area modules

2026-10-10 18:49:59 -04:00

BASELINE_COUNT

fix(connect): stop the client loop when poll mode learns of revocation

2026-09-12 15:09:28 -04:00

check_test_count.py

fix(ci): make the test-count ratchet count what a clean checkout collects

2026-08-21 19:40:42 -04:00

conftest.py

Fix CI: test seeds and leaked SQLite FK mode

2026-09-24 01:20:45 -04:00

ERROR_SHAPE_CEILING

Give common API errors stable codes and service wording

2026-10-04 18:59:25 -04:00

error_shape_census.py

test(contracts): ratchet the four remaining adoption populations

2026-08-19 00:13:59 -04:00

factories.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

hand_rolled_subprocess_stub_census.py

test(ratchet): census hand-rolled subprocess stubs in the suite

2026-08-27 04:47:38 -04:00

IDENTITY_DOOR_CEILING

Raise typed errors from the new auth checks

2026-10-10 09:47:11 -04:00

identity_door_census.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

JWT_ONLY_CEILING

Lower the JWT-only ceiling to 598

2026-10-10 22:05:38 -04:00

jwt_only_census.py

fix(authz census): count extension routes from a source git tracks

2026-08-31 00:53:15 -04:00

popen_guard.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

RAW_SUBPROCESS_CEILING

Fix gzip database backups and restores

2026-10-10 06:32:13 -04:00

raw_subprocess_census.py

fix(census): measure only tracked files — the instruments count what ships

2026-08-19 10:06:38 -04:00

STATUS_SNIFFING_CEILING

refactor(db-tuner): typed errors close the status-sniffing census at 0

2026-08-19 00:03:50 -04:00

status_sniffing_census.py

refactor(db-tuner): typed errors close the status-sniffing census at 0

2026-08-19 00:03:50 -04:00

STUB_ADOPTION_CEILING

test(ratchet): census hand-rolled subprocess stubs in the suite

2026-08-27 04:47:38 -04:00

subprocess_stub.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

test_2fa_verify_hardening.py

Enforce lockout and single use at 2FA verify

2026-10-10 09:35:08 -04:00

test_activity_summary_rollup.py

perf(api): stop /status/apps spawning a subprocess per app, and roll up the activity summary

2026-08-12 18:15:53 -04:00

test_advanced_ssl_hardening.py

fix(security): harden nginx write path and certbot issuance trust bugs

2026-08-27 23:54:01 -04:00

test_agent_features_honest.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_agent_handshake_matrix.py

refactor(agent): transport-neutral handshake + state ingest doors (plan 77 A2)

2026-08-19 02:04:29 -04:00

test_agent_installer_endpoints.py

Split servers.py into area modules

2026-10-10 18:49:59 -04:00

test_agent_poll_e2e.py

fix(agent): tunnel reconcile fires on both transports (plan 77 A1)

2026-08-19 01:42:13 -04:00

test_agent_poll_ratelimit.py

fix(agent): rate-limit the poll /connect auth path

2026-05-31 14:46:47 -04:00

test_agent_registry_security.py

fix(agent): fail-closed agent registration + surface stuck-command errors

2026-05-31 16:08:13 -04:00

test_agent_update_authz.py

fix(servers): require developer role for agent self-update (audit H3)

2026-06-12 17:33:29 -04:00

test_ai_assistant.py

feat(ai): add core AI assistant primitive powered by Prompture

2026-06-01 02:39:05 -04:00

test_ai_attachments.py

fix(ai): enforce assistant enable state and conversation cost limits

2026-09-08 03:03:00 -04:00

test_ai_connections.py

feat(ai): connect task routing, guarded fallback, and scoped run accounting

2026-09-08 04:09:27 -04:00

test_ai_lazy_import.py

perf(ai): keep Prompture out of the panel's boot path (-24 MB RSS)

2026-07-25 14:15:29 -04:00

test_ai_management.py

fix(ai): normalize usage quota scope IDs [skip version]

2026-09-08 09:34:35 -04:00

test_ai_operations.py

feat: run approved assistant deployments through persistent recipe operations

2026-10-24 06:30:26 -04:00

test_ai_security_boundaries.py

fix(ai): enforce assistant enable state and conversation cost limits

2026-09-08 03:03:00 -04:00

test_alerting_resumes_at_boot.py

Don't 500 on uptime stop when its data dir is unwritable

2026-10-11 00:52:44 -04:00

test_api_authz_hardening.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_api_contracts.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

test_api_controller_boundaries.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

test_api_error_shape.py

feat(api): centralize typed errors and request correlation

2026-08-18 02:42:25 -04:00

test_api_key_identity.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

test_api_key_scope_boundary.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

test_api_scopes.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_api_surface_inventory.py

test(api): pin the served API surface to a committed inventory

2026-08-27 05:03:40 -04:00

test_app_attachments.py

Trace apps through an OpenTelemetry Collector

2026-09-27 22:13:55 -04:00

test_app_deploy_jobs.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_app_host_binding_fields.py

Move this round's new tests onto shared factories

2026-10-10 09:47:11 -04:00

test_app_lifecycle_noncompose.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

test_app_observability_runtime.py

fix(logs): keep remote runtime lookups off the panel host

2026-09-07 22:46:16 -04:00

test_app_process_env.py

Move this round's new tests onto shared factories

2026-10-10 09:47:11 -04:00

test_app_resource_limits.py

fix(deployments): stop stuck 0% installs, deploy repo apps on create, unify install UX

2026-07-21 22:57:33 -04:00

test_app_volumes.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

test_application_lifecycle_service.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

test_application_soft_delete.py

Give common API errors stable codes and service wording

2026-10-04 18:59:25 -04:00

test_attach_domain.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_audit_log.py

feat(activity): audit feed filters by target_id

2026-08-09 13:53:59 -04:00

test_auth_decorator_boundaries.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

test_auth_version_backfill.py

fix(auth): backfill users.auth_version so upgrades keep logins working

2026-09-05 16:27:35 -04:00

test_authz_round3_guards.py

test(authz): default-deny backstops plus proving tests for the gates

2026-08-19 21:44:45 -04:00

test_authz_structural_sweep.py

Replace nine per-app access helpers with one

2026-10-10 16:36:01 -04:00

test_available_servers.py

feat(servers): store the agent's self-reported footprint dirs

2026-07-02 22:36:34 -04:00

test_background_loop.py

feat(realtime): BackgroundLoop helper; sockets broadcasters adopt it (plan 77 E5)

2026-08-19 05:01:10 -04:00

test_backup_alerts.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_crypto.py

feat(backups): client-side encryption (opt-in, reuses the Fernet key)

2026-06-19 13:22:43 -04:00

test_backup_db_files_executors.py

refactor(unify): §8 Phase B2 — database + files executors in policy service

2026-06-24 14:19:32 -04:00

test_backup_db_gzip.py

Move this round's new tests onto shared factories

2026-10-10 09:47:11 -04:00

test_backup_drill_cadence.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_drill_docker.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_drill_honesty.py

fix(backups): a skipped restore drill no longer reads as proof

2026-08-17 21:03:06 -04:00

test_backup_drill_integrity.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

test_backup_drill_scheduling.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_drill.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_expectations.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_generic_api.py

refactor(unify): §8 Phase B5 — generic backup-policy CRUD for every target

2026-06-24 14:27:08 -04:00

test_backup_global_api.py

refactor(unify): §8 Phase B3 — global backup policy/run listing API

2026-06-24 14:20:43 -04:00

test_backup_offsite_failure.py

Fail scheduled backups whose offsite upload fails

2026-10-10 13:46:17 -04:00

test_backup_offsite.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_protection.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

test_backup_restore_application.py

Restore app backups into the requested path

2026-10-10 06:34:56 -04:00

test_backup_schedule_service.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_backup_target_types.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

test_backup_verify_honesty.py

fix(doctor): a failed backup verification no longer reads as verified

2026-08-17 21:15:45 -04:00

test_backup_verify.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_bandwidth.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_best_effort_failures_logged.py

Log best-effort failures instead of dropping them

2026-10-10 14:26:59 -04:00

test_bootstrap_boundaries.py

fix: start agent maintenance only in the guarded runtime phase

2026-10-24 05:14:36 -04:00

test_botocore_prune_contract.py

build(docker): halve the panel image, 1.07 GB -> 501 MB

2026-07-25 12:38:56 -04:00

test_bottleneck_hints.py

Flag apps that keep crashing

2026-09-27 23:05:56 -04:00

test_buildpacks.py

fix(buildpack): stop browser-driver postinstalls from filling the build disk

2026-09-01 00:05:21 -04:00

test_builtin_extension_drift.py

test(drift): re-anchor the builtin-copy guard on serverkit-status

2026-08-30 22:07:53 -04:00

test_capacity_preflight.py

fix(capacity): an attached volume rescues a disk-shortfall verdict

2026-08-28 21:50:19 -04:00

test_channel_registry.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_cli_api.py

feat(cli): API-backed operator verbs and diagnostic support bundle

2026-07-03 15:21:22 -04:00

test_cli_json.py

feat(cli): add serverkit disk to report and reclaim disk space

2026-08-21 19:12:12 -04:00

test_cli_manifest.py

feat(manifest): fleet targeting, manifest-powered previews, CLI verbs (Phase 5 backend)

2026-07-04 01:46:34 -04:00

test_cli_skips_background.py

Keep CLI commands from starting the daemons

2026-10-10 13:03:37 -04:00

test_cloud_provision_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_cloudflare_extraction.py

cutover(cloudflare-ops): the last in-place flagship leaves the tree (plan 52 Phase 2)

2026-08-29 14:51:17 -04:00

test_cloudflare_round2.py

cutover(cloudflare-ops): the last in-place flagship leaves the tree (plan 52 Phase 2)

2026-08-29 14:51:17 -04:00

test_cloudflare_zone_settings.py

cutover(cloudflare-ops): the last in-place flagship leaves the tree (plan 52 Phase 2)

2026-08-29 14:51:17 -04:00

test_compose_env_overlay.py

fix(deployments): stop stuck 0% installs, deploy repo apps on create, unify install UX

2026-07-21 22:57:33 -04:00

test_compose_v1_compat.py

fix(docker): stop sending compose v1 a v2-only flag

2026-07-25 16:19:33 -04:00

test_config_checkpoint_alias.py

Give common API errors stable codes and service wording

2026-10-04 18:59:25 -04:00

test_config_snapshots.py

feat: UX hardening for the new organization/proxy/snapshot surfaces

2026-06-23 21:15:16 -04:00

test_config_store.py

Keep corrupt configs and serialize config writes

2026-10-10 14:04:09 -04:00

test_connect_hosts.py

feat(connect): tell Cloud every id we hold for each agent

2026-09-04 21:11:50 -04:00

test_connect_inventory.py

fix(connect): enforce consent and recover bounded log delivery [skip version]

2026-09-10 22:05:21 -04:00

test_connect_logs.py

fix(connect): enforce consent and recover bounded log delivery [skip version]

2026-09-10 22:05:21 -04:00

test_connect_managed_profile.py

feat(connect): apply the managed presentation profile (plan 25)

2026-09-13 03:50:02 -04:00

test_connect_metrics.py

fix(connect): surface silent metrics collection failures

2026-09-11 19:08:37 -04:00

test_connect_policy.py

feat(connect): report this server's policy facts to ServerKit Cloud

2026-09-02 16:00:04 -04:00

test_connect_relay.py

fix(connect): stop the client loop when poll mode learns of revocation

2026-09-12 15:09:28 -04:00

test_connect_sealing.py

feat(connect): open commands sealed to this server's own key

2026-09-02 17:00:00 -04:00

test_connect_storage.py

feat(connect): let ServerKit Cloud set where this server backs up

2026-09-02 15:19:38 -04:00

test_connect_tunnel.py

Harden the Cloud tunnel per review

2026-10-01 22:47:48 -04:00

test_connection_provider_sdk.py

feat(connections): add provider SDK contract

2026-08-28 00:48:36 -04:00

test_connection_string.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_container_registry.py

feat(connections): add provider SDK contract

2026-08-28 00:48:36 -04:00

test_container_sleep.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_container_status_bulk.py

perf(api): stop /status/apps spawning a subprocess per app, and roll up the activity summary

2026-08-12 18:15:53 -04:00

test_container_status.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

test_core_blueprint_registry.py

Add /ports/check and /ports/suggest

2026-10-03 22:46:54 -04:00

test_crash_loop.py

Flag apps that keep crashing

2026-09-27 23:05:56 -04:00

test_cron_crontab_join.py

fix(cron): match job lines exactly

2026-08-27 20:30:17 -04:00

test_cron_percent_escape.py

Escape % in crontab commands

2026-10-26 00:51:38 -04:00

test_cron_preview.py

Keep cron jobs added in the same second apart

2026-10-10 06:33:12 -04:00

test_cron_rbac.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_cron_runs.py

feat(cron): rebuild /cron on the Domains list pattern

2026-07-27 22:44:40 -04:00

test_crypto_fold_in.py

refactor(crypto): fold the parallel Fernet stacks into utils/crypto (plan 77 C2)

2026-08-19 05:37:32 -04:00

test_crypto_one_door_ratchet.py

fix(ratchets): reconcile plan-77 additions with the standing gates

2026-08-19 06:04:59 -04:00

test_custom_domain_ssl_survives.py

Satisfy the test seed ratchet

2026-10-26 01:03:40 -04:00

test_dashboards.py

feat(dashboard): one control row, and the clock becomes a widget

2026-07-25 21:23:14 -04:00

test_database_engine_extensions.py

fix(databases): scope the extension listing to apps the caller can see

2026-07-26 00:19:46 -04:00

test_database_engines.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

test_database_service_doors.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

test_db_admin_sso.py

Give common API errors stable codes and service wording

2026-10-04 18:59:25 -04:00

test_db_config_tuner.py

refactor(db-tuner): typed errors close the status-sniffing census at 0

2026-08-19 00:03:50 -04:00

test_db_explorer_honesty.py

fix(databases): distinguish a connection failure from an empty database

2026-06-15 00:01:41 -04:00

test_db_insights.py

Give common API errors stable codes and service wording

2026-10-04 18:59:25 -04:00

test_db_password_not_on_argv.py

Pass DB passwords via env, not the command line

2026-10-26 00:56:42 -04:00

test_db_processes.py

Give common API errors stable codes and service wording

2026-10-04 18:59:25 -04:00

test_db_snapshot_relocation.py

refactor(models): relocate DatabaseSnapshot/SyncJob; untrack stale gui/email copies

2026-07-22 17:31:18 -04:00

test_ddns.py

refactor(ddns): typed errors replace the token-prose sniff

2026-08-18 23:55:17 -04:00

test_demo_deploys.py

fix(demo-deploy): guard repo params; time-box the distro integration job

2026-09-05 00:25:18 -04:00

test_demo_mode.py

feat(auth): one-time login links and demo mode

2026-07-03 14:23:50 -04:00

test_deploy_console.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_deploy_preflight.py

Check free disk before a deploy stops anything

2026-09-27 16:37:54 -04:00

test_deployment_jobs_authz.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_deployments_unified.py

perf(deployments): skip unused plan parsing

2026-08-22 15:00:52 -04:00

test_disk_alert.py

Warn admins before the disk fills

2026-09-27 16:36:17 -04:00

test_disk_api.py

feat(disk): reclaim space from the panel

2026-08-21 23:05:40 -04:00

test_disk_reclaim.py

feat(jobs): bound telemetry growth with a retention handler

2026-08-21 19:12:27 -04:00

test_dns_aaaa_conflict.py

fix(dns): catch the stray AAAA record that silently breaks SSL issuance

2026-08-13 16:17:23 -04:00

test_dns_caa.py

test(ssl): let the CAA tests past the new nginx-plugin preflight

2026-08-13 16:45:38 -04:00

test_dns_change_log.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

test_dns_cloudflare_client.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

test_dns_credential_resolution.py

feat(dns): unify Cloudflare credentials behind one connection + shared client

2026-06-22 16:12:31 -04:00

test_dns_cutover_api.py

fix(recovery): rebuild DNS cutover service+API and SSH site importer

2026-07-08 01:41:22 -04:00

test_dns_cutover_providers.py

fix(dns-cutover): restore snapshot() staging + provider-named 501 (plan 42 D7/ph5)

2026-07-09 04:50:16 -04:00

test_dns_cutover.py

fix(recovery): rebuild DNS cutover service+API and SSH site importer

2026-07-08 01:41:22 -04:00

test_dns_give_subdomain.py

Give common API errors stable codes and service wording

2026-10-04 18:59:25 -04:00

test_dns_ownership.py

feat(dns): ownership ledger + never-touch-foreign guard + zone mirror (Phase 1)

2026-06-22 16:24:53 -04:00

test_dns_portfolio.py

feat(domains): unify domains & DNS into one surface + admin-only Connections

2026-06-23 00:34:55 -04:00

test_dns_providers_core.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

test_dns_restore_points.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

test_dns_subdomain_modes.py

feat(dns): per-base-domain subdomain modes — wildcard vs per-site (Phase 3)

2026-06-22 16:40:35 -04:00

test_docker_db_client.py

fix(databases): the panel could not read the MariaDB it installs

2026-07-25 22:01:15 -04:00

test_docker_list_unreachable.py

Show Docker list errors and ignore stale loads

2026-10-10 14:01:56 -04:00

test_docker_protection.py

refactor(docker): route docker_service through the shared doors

2026-08-18 13:45:25 -04:00

test_docker_quick_timeouts.py

Bound Docker metadata reads with a timeout

2026-10-10 20:54:12 -04:00

test_docker_runner.py

refactor(docker): route docker_service through the shared doors

2026-08-18 13:45:25 -04:00

test_doctor_backup_repairs.py

fix(doctor): verify local-only backups on disk instead of hiding the button

2026-08-13 17:26:14 -04:00

test_doctor_dns.py

fix(doctor): couldn't-check is its own answer, never the negative

2026-08-17 22:48:10 -04:00

test_domain_and_encryption.py

feat: canonical domain + encryption key bootstrap

2026-06-19 01:34:02 -04:00

test_domain_attach_service.py

Give common API errors stable codes and service wording

2026-10-04 18:59:25 -04:00

test_domain_vhost_ssl.py

fix(domains): adding or removing one domain no longer drops the site to HTTP

2026-08-12 09:05:56 -04:00

test_drift_doctor.py

feat(operations): adopt core run workflows

2026-08-21 10:40:42 -04:00

test_effective_env.py

feat: expose value-free effective environment provenance through app access boundary

2026-10-24 05:58:02 -04:00

test_email_bounce.py

feat(notifications): restore email-bounce webhook slice (plan 42 ph3)

2026-07-09 04:55:53 -04:00

test_email_dovecot_probe.py

cutover(email): serverkit-email leaves the tree (plan 52 Phase 2, D8)

2026-08-29 14:45:22 -04:00

test_email_extraction.py

cutover(email): serverkit-email leaves the tree (plan 52 Phase 2, D8)

2026-08-29 14:45:22 -04:00

test_email_provider_usage_flags.py

refactor(unify): §6 Phase C6a — email provider usage flags

2026-06-24 14:32:41 -04:00

test_email_relay_unified.py

refactor(unify): §6 Phase C6b — Postfix relay backed by EmailProviderConnection

2026-06-24 14:36:08 -04:00

test_encrypted_secret.py

feat(models): EncryptedSecret descriptor; server.py stops swallowing encrypt failures (plan 77 C1)

2026-08-19 01:45:12 -04:00

test_enhancements_integration.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

test_env_export_import_roundtrip.py

fix(env-vars): make .env export/import lossless and injection-safe

2026-08-27 04:05:05 -04:00

test_env_one_door.py

feat(utils): env one-door — env_str/env_bool/env_int (plan 77 F4)

2026-08-19 02:12:45 -04:00

test_env_secret_masking.py

Move this round's new tests onto shared factories

2026-10-10 09:47:11 -04:00

test_env_var_doc_guard.py

Document every panel environment variable

2026-10-10 22:13:09 -04:00

test_env_vars_api.py

feat: add effective environment inspector with browser regression checks

2026-10-24 06:02:51 -04:00

test_error_logs.py

test(api): assert correlated error contract

2026-08-18 03:33:22 -04:00

test_error_shape_ratchet.py

test(contracts): ratchet the four remaining adoption populations

2026-08-19 00:13:59 -04:00

test_event_listeners.py

Let extensions listen for core events in process

2026-09-27 22:59:40 -04:00

test_event_subscriptions.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

test_extension_manifests.py

fix(extensions): gate GPU auto-install on a present GPU; purge em dashes from manifests

2026-07-08 23:12:48 -04:00

test_extension_migration.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_extension_pending_requirements.py

feat(extensions): answer which Python dependencies an install skipped

2026-08-13 17:48:36 -04:00

test_extension_permission_observation.py

feat(extensions): observe permission use, and say which permissions we can't see

2026-08-13 17:44:11 -04:00

test_extension_platform.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_extension_signing.py

Move extension zip fetching into plugin_fetch

2026-10-10 21:32:19 -04:00

test_external_reverse_proxy.py

test(proxy): pin what an external reverse proxy depends on

2026-08-13 23:07:10 -04:00

test_fail2ban_jail_service.py

refactor(security): jail service owns fail2ban status probing (plan 47 Ph3c inversion)

2026-08-29 13:36:08 -04:00

test_failed_logins_window.py

fix(security): honour the failed-login time window (#180)

2026-10-24 04:27:36 -04:00

test_file_integrity.py

feat(security): scoped file-integrity monitoring

2026-07-03 15:21:34 -04:00

test_files_protected_parent.py

Block file ops on parents of protected roots

2026-10-26 00:39:26 -04:00

test_files_rbac.py

Protect the idle update slot in the file manager

2026-10-10 06:15:56 -04:00

test_files_readonly_roots.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

test_files_typed_errors.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

test_firewall_detection.py

test(firewall): pin the honest tri-state, not the old fabrication

2026-08-17 23:50:10 -04:00

test_firewall_rule_removal_guard.py

feat(firewall): refuse to remove the last rule admitting SSH

2026-08-17 10:40:03 -04:00

test_firewall_self_block_guard.py

feat(firewall): guard self-block and default-zone lockouts

2026-08-17 19:28:24 -04:00

test_firewall_ssh_lockout.py

feat(firewall): refuse to enable ufw when it would cut off SSH

2026-08-17 10:19:45 -04:00

test_fixture_scope_guard.py

fix(tests): the create_app guard must read code, not prose

2026-08-21 20:14:34 -04:00

test_fleet_doctor_api.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_fleet_doctor_dns_rotation.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_fleet_doctor.py

Use the platform's EAI_NONAME in the DNS test

2026-10-10 23:44:00 -04:00

test_fleet_metrics_batching.py

refactor: share backend lifecycle and fleet metrics operations

2026-09-05 05:06:41 -04:00

test_fleet_monitoring_reliability.py

Make fleet monitoring actually monitor

2026-09-06 21:04:17 -04:00

test_fleet_proxy.py

feat: UX hardening for the new organization/proxy/snapshot surfaces

2026-06-23 21:15:16 -04:00

test_fleet_repair.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_fleet_sweep.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_fleet_threads_app_context.py

Run fleet threads inside the live app

2026-10-10 13:06:09 -04:00

test_frontend_route_contract.py

cutover: contracts follow the flagship departure

2026-08-29 14:57:57 -04:00

test_ftp_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_generate_password_bounds.py

Bound the generate-password length parameter

2026-10-10 18:02:03 -04:00

test_generic_previews.py

fix: preserve container port semantics for previews of slot deployments

2026-10-24 06:24:18 -04:00

test_git_compose_deploy.py

Let extensions listen for core events in process

2026-09-27 22:59:40 -04:00

test_git_deployment_authz.py

fix(git): enforce app-level authorization on deployment read endpoints

2026-08-03 23:44:56 -04:00

test_git_security.py

fix(security): close git argument injection in repo_url/app_path/branch (GHSA-8vx6-432p-h62q)

2026-08-11 19:43:46 -04:00

test_git_split.py

feat(git)!: split the Gitea self-host half into the serverkit-git extension (plan 52 Phase 6)

2026-08-29 14:30:07 -04:00

test_git_webhook_authz.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_git_webhook_token.py

Compare legacy deploy webhook tokens safely

2026-10-10 09:32:03 -04:00

test_github_app_manifest.py

fix(github): repair app manifest setup flow (#131)

2026-09-04 22:20:16 -04:00

test_health_readiness.py

Make the health check probe the database

2026-10-10 18:23:24 -04:00

test_health_staging.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

test_history_retention.py

Regenerate inventories for the Storage work

2026-09-27 17:04:36 -04:00

test_host_inventory.py

feat(monitoring): detect host spec changes and inventory filesystems

2026-08-17 09:31:18 -04:00

test_htaccess_converter.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_html_sink_sweep.py

feat(security): HTML-sink sweep guard (D4) — keep XSS sinks swept

2026-07-22 19:22:43 -04:00

test_identity_door_ratchet.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

test_image_update.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_immutable_assets.py

Let proxied sites long-cache fingerprinted assets

2026-09-27 22:45:53 -04:00

test_ingress_plane.py

feat: make the ingress-plane boundary explicit (host Nginx vs proxy stack)

2026-06-23 20:57:40 -04:00

test_install_retry_after_failure.py

fix(deploy): let a failed install be retried from the panel

2026-07-25 16:51:44 -04:00

test_invitation_service_boundary.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

test_jobs_restart_recovery.py

Recover jobs stranded by a panel restart

2026-10-10 13:21:22 -04:00

test_jobs.py

Drop the retired workflow-schedules job

2026-10-10 13:12:09 -04:00

test_journal_priority.py

Validate the journal priority parameter

2026-10-10 20:54:45 -04:00

test_json_column_mixin.py

refactor(models): finish JsonColumnMixin adoption — no hand-rolled json.loads (plan 77 B4)

2026-08-19 02:15:09 -04:00

test_json_object_body.py

Read 40 more route bodies through json_object()

2026-10-10 21:48:18 -04:00

test_jwt_only_ratchet.py

test(auth): ratchet the JWT-only population and record the A decision

2026-08-19 00:11:16 -04:00

test_linked_panel.py

fix(linked-panel): accept compose file path in project_path from remote runner

2026-07-22 00:48:13 -04:00

test_log_path_containment.py

fix(logs): keep panel-internal roots out of the log viewer

2026-09-18 01:05:13 -04:00

test_log_tail_stop.py

Check the tail stand-in by pid, not a Popen wrapper

2026-10-10 14:32:03 -04:00

test_login_bruteforce.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

test_login_links.py

Make login-link redemption truly single-use

2026-10-26 00:57:28 -04:00

test_managed_database_soft_delete.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

test_managed_database.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

test_managed_db_users.py

Give common API errors stable codes and service wording

2026-10-04 18:59:25 -04:00

test_manifest_appliance_hardening.py

feat(manifest): reference appliance + adoption hardening (plan 35 ph6)

2026-07-09 03:35:53 -04:00

test_manifest_appliance_ports.py

feat(manifest): appliance-tier typed L4 ports + plan-time blockers rail (plan 35 ph1)

2026-07-09 02:57:23 -04:00

test_manifest_appliance_volumes_bootstrap.py

feat(manifest): finish appliance volumes + one-shot bootstrap (plan 35 ph2)

2026-07-09 03:05:08 -04:00

test_manifest_apply.py

Add a queue broker and provision manifest Redis

2026-09-27 21:04:02 -04:00

test_manifest_drift.py

feat(manifest): push re-sync, drift check family, events (Phase 4)

2026-07-04 01:39:53 -04:00

test_manifest_image_hostreq.py

feat(manifest): BYO image + host requirements (plan 35 ph4)

2026-07-09 03:21:14 -04:00

test_manifest_network_identity.py

feat(manifest): network identity — fromServer, SERVER_PUBLIC_IP, shared net (plan 35 ph5)

2026-07-09 03:28:08 -04:00

test_manifest_persistence.py

Deploy compose apps through A/B slots

2026-09-28 22:26:44 -04:00

test_manifest_reach.py

Remove the orphaned manifest preview service

2026-10-26 01:02:35 -04:00

test_manifest_reference_appliance.py

feat(manifest): reference appliance + adoption hardening (plan 35 ph6)

2026-07-09 03:35:53 -04:00

test_manifest_references.py

feat(manifest): fromSecret/fromService/generate reference binders (Phase 3)

2026-07-04 01:34:54 -04:00

test_manifest_spec.py

feat: add resumable recipe execution foundation

2026-08-21 21:47:24 -04:00

test_manifest_sync.py

feat(manifest): push re-sync, drift check family, events (Phase 4)

2026-07-04 01:39:53 -04:00

test_manifest_unit.py

feat(manifest): multi-container units (plan 35 ph3)

2026-07-09 03:13:54 -04:00

test_member_actions.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_metadata_guard.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

test_metrics_history_routes.py

fix(dashboard): avoid content blockers on metrics history requests (#133)

2026-09-04 22:20:22 -04:00

test_metrics_token.py

Let an installed Prometheus scrape the panel

2026-09-27 21:42:18 -04:00

test_micro_cache.py

Make the micro-cache a real page cache

2026-09-27 18:51:05 -04:00

test_migration_109_auth_version.py

Randomize auth_version left at the '0' backfill

2026-10-10 09:47:11 -04:00

test_migration_110_workflow_schedules.py

Drop the retired workflow-schedules job

2026-10-10 13:12:09 -04:00

test_migration_inventory.py

fix(ratchets): regenerate the boundary baseline and the migration inventory

2026-08-21 20:14:34 -04:00

test_migration_schema_drift.py

fix(tests): exclude extension-owned ext_* tables from migration drift

2026-08-27 19:18:26 -04:00

test_migration_status.py

test(authz): default-deny backstops plus proving tests for the gates

2026-08-19 21:44:45 -04:00

test_model_shape_mixins.py

refactor(models): TimestampMixin + uuid_pk() one-door shapes (plan 77 B1/B3)

2026-08-19 01:59:10 -04:00

test_models_json_one_door.py

refactor(models): finish JsonColumnMixin adoption — no hand-rolled json.loads (plan 77 B4)

2026-08-19 02:15:09 -04:00

test_module_toggles.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_monitor_service.py

Stop status pages claiming 100% with no data

2026-10-10 14:17:41 -04:00

test_new_ip_history.py

fix: remember agent IP alerts across panel restarts

2026-10-23 18:05:15 -04:00

test_nginx_boundaries.py

test: enforce pure nginx configuration boundaries

2026-10-24 05:36:59 -04:00

test_nginx_compression.py

Compress responses for every site

2026-09-27 18:18:39 -04:00

test_nginx_health_and_service_status.py

refactor(services): one CompletedProcess -> dict translation (F5)

2026-08-17 23:03:39 -04:00

test_nginx_remote_upstream.py

feat(remote-access): NAT-traversing WireGuard tunnels to expose private services

2026-06-15 23:20:00 -04:00

test_nginx_render_contract.py

test: capture nginx rendering contract before extraction

2026-10-24 05:33:01 -04:00

test_nginx_timed_log.py

Remove internal plan citations from app code

2026-10-10 15:50:45 -04:00

test_nginx_write_vhost.py

Compress responses for every site

2026-09-27 18:18:39 -04:00

test_no_background_threads.py

fix: start agent maintenance only in the guarded runtime phase

2026-10-24 05:14:36 -04:00

test_no_plan_references.py

Catch plan citations at commit time

2026-10-25 23:27:21 -04:00

test_notification_bus.py

feat(notifications): queue-backed Notification Bus + email system

2026-06-21 19:57:02 -04:00

test_notification_chat_connections.py

fix(security): route webhook posts through safe_http

2026-11-03 12:57:58 -05:00

test_notification_deep_links.py

feat(notifications): polish — digests, prefs, deep-links (plans 24/33)

2026-07-07 20:29:29 -04:00

test_notification_digest.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_notification_prefs_resolution.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_notification_telegram_format.py

fix(notifications): escape interpolated values in Telegram alerts

2026-08-31 00:07:47 -04:00

test_observability_namespace.py

refactor(status): extract status-pages backend into serverkit-status extension

2026-07-14 22:34:24 -04:00

test_observe_enforcement.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_onboarding_recommendations.py

cutover(cloudflare-ops): the last in-place flagship leaves the tree (plan 52 Phase 2)

2026-08-29 14:51:17 -04:00

test_pairing_authz.py

fix(pairing): require developer role for claim/lookup (audit L1)

2026-06-12 18:35:43 -04:00

test_pairing_pop.py

fix(pairing): verify Ed25519 proof-of-possession on pairing poll

2026-05-31 16:08:32 -04:00

test_panel_update.py

feat(panel): one-click self-update from the About tab

2026-08-31 08:09:52 -04:00

test_panel_version.py

feat(files): Stack quick link follows the real install dir

2026-07-02 22:19:14 -04:00

test_passkey_security.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

test_per_app_read_scoping.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_pg_helpers_sql.py

Validate Postgres helper SQL and report user errors

2026-10-26 00:43:13 -04:00

test_php_pool_guards.py

fix(php): guard pool paths and stop fabricating unreadable pool configs

2026-08-27 04:56:12 -04:00

test_php_security_templates.py

fix: require patched PHP runtimes in WordPress templates

2026-10-23 18:05:08 -04:00

test_plan87_compose_slots.py

Fix stopping an app that deploys on compose slots

2026-10-10 21:55:33 -04:00

test_plan87_deploy_foundations.py

Deploy compose apps through A/B slots

2026-09-28 22:26:44 -04:00

test_plan87_slot_deploys.py

Run release commands and DB snapshots before the switch

2026-09-28 21:41:52 -04:00

test_plugin_agents_sdk.py

feat(plugins): let extensions run commands on the fleet

2026-07-25 14:02:08 -04:00

test_plugin_backups_sdk.py

test: WP hook inversion matrix (present x absent)

2026-08-05 01:18:32 -04:00

test_plugin_deploys_sdk.py

feat(plugins): let plugins own deployment-shaped work

2026-07-25 12:46:59 -04:00

test_plugin_doctor_sdk.py

feat(plugins): let extensions contribute doctor checks

2026-07-25 13:56:09 -04:00

test_plugin_preview.py

Move extension zip fetching into plugin_fetch

2026-10-10 21:32:19 -04:00

test_plugin_search_sdk.py

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

test_plugin_store_sdk.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_plugins_pipeline.py

fix(plugins): hot-load extension blueprints on a live app (#144)

2026-09-18 01:28:59 -04:00

test_pooler.py

Offer an opt-in PgBouncer beside PostgreSQL

2026-09-27 22:27:32 -04:00

test_popen_guard.py

fix(tests): stub-kit and popen-guard samples no longer depend on the host's ufw

2026-08-19 10:08:00 -04:00

test_port_claims.py

Split TemplateService into mixin modules

2026-10-10 21:10:14 -04:00

test_ports_api.py

Add /ports/check and /ports/suggest

2026-10-03 22:46:54 -04:00

test_postfix_install_hostname.py

Reject trailing newline in Postfix install hostname

2026-10-01 22:22:00 -04:00

test_postfix_map_roundtrip.py

fix(postfix): match virtual-map entries by address token, not substring

2026-08-27 04:10:14 -04:00

test_preview_boundaries.py

feat: queue preview automation and preserve cleanup ownership through app deletion

2026-10-24 06:21:26 -04:00

test_previews.py

feat: provision isolated generic previews with retryable resource cleanup

2026-10-24 06:11:46 -04:00

test_probe_env_integration.py

test(scripts): stop the §D shim replacing the real firewall_service

2026-08-18 00:17:06 -04:00

test_probe_honesty_doctor.py

fix(tests): docker-probe test patches the door, not the removed subprocess import

2026-08-19 10:35:23 -04:00

test_probe_honesty_fleet.py

fix(doctor): couldn't-check is its own answer, never the negative

2026-08-17 22:48:10 -04:00

test_probe_honesty_metrics.py

Let the load-average test run where os lacks it

2026-10-10 23:44:20 -04:00

test_probe_honesty_ssl.py

fix(ssl): a failed certificate check no longer reports fine

2026-08-17 22:48:27 -04:00

test_projects.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_provider_secret_encryption.py

refactor(cloud): extract cloud-provision backend + add upgrade re-acquisition

2026-07-14 22:22:18 -04:00

test_proxy_stack.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_query_layer.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

test_queue_bus_webhooks.py

Refuse internal targets for user-set webhook URLs

2026-10-10 06:52:32 -04:00

test_queue_bus.py

feat(queue-bus): auto-generate slugs and resolve duplicates

2026-06-20 22:38:38 -04:00

test_rate_limit_storage.py

feat(config): optional Redis-backed rate-limit storage via RATELIMIT_STORAGE_URI

2026-08-28 00:51:51 -04:00

test_raw_infra_authz.py

test(one-doors): route_rules fixture, create_app ratchet, authz one-liners (plan 77 G3/G4)

2026-08-19 05:46:25 -04:00

test_raw_subprocess_ratchet.py

fix(census): measure only tracked files — the instruments count what ships

2026-08-19 10:06:38 -04:00

test_real_buildpack_docker.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_real_crontab_roundtrip.py

test(real-binaries): run cron and nginx service code against real parsers

2026-08-27 05:03:31 -04:00

test_real_db_insights_docker.py

Show top queries and hit ratios per database

2026-09-27 21:30:07 -04:00

test_real_generic_preview.py

feat: queue preview automation and preserve cleanup ownership through app deletion

2026-10-24 06:21:26 -04:00

test_real_grafana_attach_docker.py

Wire Grafana to Prometheus and Loki by attaching

2026-09-27 21:53:52 -04:00

test_real_nginx_vhost_syntax.py

Let proxied sites long-cache fingerprinted assets

2026-09-27 22:45:53 -04:00

test_real_pooler_docker.py

Offer an opt-in PgBouncer beside PostgreSQL

2026-09-27 22:27:32 -04:00

test_real_prometheus_scrape_docker.py

Let an installed Prometheus scrape the panel

2026-09-27 21:42:18 -04:00

test_real_service_connections_docker.py

Add a queue broker and provision manifest Redis

2026-09-27 21:04:02 -04:00

test_real_slot_deploy_docker.py

Deploy compose apps through A/B slots

2026-09-28 22:26:44 -04:00

test_real_storage_attach_docker.py

Give each app its own bucket and a scoped key

2026-09-27 20:36:38 -04:00

test_real_tracing_docker.py

Trace apps through an OpenTelemetry Collector

2026-09-27 22:13:55 -04:00

test_real_worker_processes_docker.py

Run Procfile workers beside a build-pack app

2026-09-27 21:03:59 -04:00

test_recipe_registry.py

fix(recipes): restore CI boundary contracts

2026-08-22 14:49:11 -04:00

test_recipes.py

feat: add resumable recipe execution foundation

2026-08-21 21:47:24 -04:00

test_recycle_bin.py

fix(restore-points): json one-door model reads; modernize last-domain restore test

2026-08-25 03:13:06 -04:00

test_redaction_one_door.py

refactor(security): one sensitive-keyword union for all four redaction sinks (plan 77 F3)

2026-08-19 02:10:22 -04:00

test_registration_token_lookup.py

Look up agent registration tokens by digest

2026-10-26 01:00:48 -04:00

test_registry_bundled_index.py

security(extensions): trust signed first-party catalog

2026-08-28 00:56:12 -04:00

test_registry.py

feat(utils): CachedRemoteIndex — one remote-catalog engine (plan 77 F1)

2026-08-19 05:27:10 -04:00

test_release_smoke_permissions.py

fix(ci): isolate dev release publication from PR builds [skip version]

2026-09-10 22:05:17 -04:00

test_remote_access_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_remote_agent_failure_status.py

Split servers.py into area modules

2026-10-10 18:49:59 -04:00

test_remote_command_dispatcher.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

test_remote_cron_update.py

feat(cron): completion — run history, project scope, cwd/run-as (plan 34)

2026-07-07 20:29:29 -04:00

test_remote_index.py

feat(utils): CachedRemoteIndex — one remote-catalog engine (plan 77 F1)

2026-08-19 05:27:10 -04:00

test_repository_application_service.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_repository_manifest_service.py

Add repository manifest detection and templates

2026-05-03 07:07:57 -04:00

test_request_metrics.py

Cascade request rollups in the ORM, not the DB

2026-09-27 20:36:37 -04:00

test_request_profiling.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_require_app.py

Replace nine per-app access helpers with one

2026-10-10 16:36:01 -04:00

test_resource_grants.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_restore_point_adapters.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

test_restore_point_cron.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

test_restore_point_env.py

fix(restore-points): satisfy jwt-only and seed-factory ratchets

2026-08-25 02:52:59 -04:00

test_restore_point_firewall.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

test_restore_point_nginx.py

Compress responses for every site

2026-09-27 18:18:39 -04:00

test_restore_point_service.py

feat(restore-points): add generic checkpoint core

2026-08-23 16:07:09 -04:00

test_restore_points_api.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_route_authz_static.py

Replace nine per-app access helpers with one

2026-10-10 16:36:01 -04:00

test_route_authz_sweep.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

test_run_envelope.py

feat(realtime): generalized run envelope — one stream door for every run kind (plan 77 E1)

2026-08-19 05:13:02 -04:00

test_run_log_stream.py

feat(deploy): batched RunLogStream seam + streaming compose + deploy socket channel

2026-07-22 16:36:58 -04:00

test_runtime_frontend.py

feat(extensions): deliver runtime ESM frontends to production panels (#39)

2026-07-22 17:24:36 -04:00

test_safe_http.py

Refuse internal targets for user-set webhook URLs

2026-10-10 06:52:32 -04:00

test_saml_metadata_unconfigured.py

Drop route try/excepts the 500 handler duplicates

2026-10-10 18:14:28 -04:00

test_sandbox_runtime.py

feat(test): passive cgroup-v2 runtime baselines for full installs

2026-09-19 04:52:24 -04:00

test_sbin_command_guard.py

docs(tests): stop the sbin guard reading as coverage

2026-08-17 21:23:00 -04:00

test_sdk_contract.py

feat(extensions): enforce the SDK gate at install; localize the GUI builtin

2026-08-20 00:31:42 -04:00

test_search.py

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

test_secrets_webhooks_authz.py

Verify webhook signatures before deduplicating

2026-10-10 09:25:22 -04:00

test_security_feed.py

feat(security): daily GHSA feed check with admin notifications

2026-08-02 18:35:25 -04:00

test_security_headers.py

fix(security): drop unsafe-inline/unsafe-eval from script-src

2026-11-03 12:57:58 -05:00

test_security_policy.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_security_suite_extraction.py

feat(security)!: extract the install-gated security suite to extensions (plan 47 Ph3b-5 / plan 55 Ph3)

2026-08-29 13:53:04 -04:00

test_seed_one_door_ratchet.py

Satisfy the test seed ratchet

2026-10-26 01:03:40 -04:00

test_serializable_mixin.py

feat(restore-points): add surface adapters and checkpoints

2026-08-23 16:41:02 -04:00

test_server_capacity.py

feat(cache): ttl_cached decorator on CacheService; two TTL dicts migrate (plan 77 F2)

2026-08-19 05:20:59 -04:00

test_server_onboarding.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

test_server_permissions.py

Add an SSH Access server permission profile

2026-10-26 11:16:21 -04:00

test_server_time_timezone.py

fix(system): report IANA timezone_id; guard chart formatting against bad zones

2026-07-01 22:55:11 -04:00

test_server_timeline.py

feat(servers): add merged restore timeline

2026-08-23 17:16:29 -04:00

test_server_workspace_access.py

Enforce workspace access on every server route

2026-10-26 00:35:55 -04:00

test_serverkit_gui_agent_gate.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_serverkit_installer.py

fix(distro): patch all 6 failing distro-compatibility probes

2026-08-28 23:31:36 -04:00

test_servers_api_key_scope.py

Let GET /api/v1/servers accept a scoped API key

2026-10-03 00:31:36 -04:00

test_servers_api_pairing.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_servers_list_metrics.py

fix(api): GET /servers never sent the metrics the servers list renders

2026-08-12 05:52:37 -04:00

test_service_connections.py

Add a queue broker and provision manifest Redis

2026-09-27 21:04:02 -04:00

test_service_templates.py

Feature templates the registry marks as featured

2026-10-11 16:41:38 -04:00

test_services_alias.py

refactor(unify): §1 — single Services detail surface; /apps→/services

2026-06-24 14:06:05 -04:00

test_session_security.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_settings_files_atomic.py

Write cron and storage settings atomically

2026-10-26 00:53:25 -04:00

test_setup_code.py

Guard first admin with a setup code, fix Git deploys

2026-09-24 00:50:02 -04:00

test_setup_health.py

feat(security)!: extract the install-gated security suite to extensions (plan 47 Ph3b-5 / plan 55 Ph3)

2026-08-29 13:53:04 -04:00

test_setup_nag.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

test_setup_preflight.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

test_setup_reconcile.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_setup_security.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_setup_sidebar_preset.py

Fix first-run sidebar preferences and extension loading [skip version]

2026-09-11 00:17:39 -04:00

test_shared_queue_authz.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_shared_resources.py

test(authz): default-deny backstops plus proving tests for the gates

2026-08-19 21:44:45 -04:00

test_shared_service_helpers.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_site_base_domains.py

feat(services): pick a base domain when giving an app a subdomain

2026-07-01 00:31:22 -04:00

test_site_import.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_site_importers_extra.py

feat(imports): panel-migration pipeline with cPanel, DirectAdmin and Hestia importers

2026-07-03 14:24:29 -04:00

test_site_routing.py

feat(wordpress): shared-state contract and login rate limiting at the edge

2026-08-27 22:35:54 -04:00

test_sites_https.py

fix(security): harden nginx write path and certbot issuance trust bugs

2026-08-27 23:54:01 -04:00

test_sites_publishing_gaps.py

feat(sites): warn when the site base domain overlaps the panel domain

2026-06-30 23:48:28 -04:00

test_socket_contract.py

feat(realtime): one room grammar + mirrored event constants (plan 77 E3)

2026-08-19 04:58:49 -04:00

test_socket_security.py

Send container log streams only to their viewer

2026-10-26 00:59:21 -04:00

test_socket_session_lifetime.py

Keep live sockets alive past access-token expiry

2026-10-26 00:44:28 -04:00

test_soft_delete_leaks.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

test_source_connection_oauth.py

fix(bitbucket): send redirect_uri on the authorize hop

2026-09-07 06:12:48 -04:00

test_source_connection_providers.py

Share one OAuth implementation across git providers

2026-10-10 16:43:14 -04:00

test_speed_test.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

test_ssh_import_wiring.py

test(ssh-import): redirect APPS_DIR to tmp so create_app step passes on CI

2026-07-08 23:58:45 -04:00

test_ssh_importer.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_ssh_keys_roundtrip.py

fix(security): parse restricted authorized keys

2026-08-27 20:30:17 -04:00

test_ssl_acme_contact.py

Keep the new route logic behind services

2026-10-26 01:43:12 -04:00

test_ssl_certbot_resolution.py

fix(ssl): resolve certbot outside $PATH and preflight the nginx plugin

2026-08-13 15:59:47 -04:00

test_ssl_unified_surface.py

refactor(unify): §5 — single SSL surface (basic + advanced)

2026-06-24 14:40:08 -04:00

test_sso_provisioning.py

Require a verified email before SSO account linking

2026-10-26 00:37:57 -04:00

test_status_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_status_pages_json_body.py

fix(status): a null JSON body no longer 500s the status-page routes

2026-08-31 00:34:20 -04:00

test_status_sniffing_ratchet.py

test(api): ratchet the statuses derived from error prose, ahead of milestone C

2026-08-18 20:48:33 -04:00

test_status_vocabulary.py

feat(models): canonical status vocabulary + RunLifecycleMixin (plan 77 D1/D2)

2026-08-19 02:06:05 -04:00

test_storage_guardrails.py

Bound panel logs, old installs and small-disk data

2026-09-27 16:32:29 -04:00

test_storage_overview.py

Add a storage overview endpoint

2026-09-27 16:33:53 -04:00

test_stub_adoption_ratchet.py

test(ratchet): census hand-rolled subprocess stubs in the suite

2026-08-27 04:47:38 -04:00

test_subprocess_stub.py

fix(tests): stub-kit and popen-guard samples no longer depend on the host's ufw

2026-08-19 10:08:00 -04:00

test_support_bundle.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_survey_api.py

fix(servers): restore the Observed-mode surface lost in the recovery rebuild

2026-08-27 04:45:37 -04:00

test_survey_catalog.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_survey_service.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

test_telemetry.py

Truncate large telemetry payloads & UI robustness fixes

2026-06-22 01:45:15 -04:00

test_template_auto_domain.py

fix(templates): the deploy drawer's domain promise now sticks

2026-08-28 21:59:26 -04:00

test_template_catalog_validation.py

Let an installed Prometheus scrape the panel

2026-09-27 21:42:18 -04:00

test_template_files_render.py

fix(templates): only bind-mount absolute file paths; relative files are build-context only

2026-07-21 23:26:13 -04:00

test_template_magic_vars.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

test_template_registry_cache.py

Split TemplateService into mixin modules

2026-10-10 21:10:14 -04:00

test_template_repo_kind.py

Point the agentsite template at its serverkit.yaml, drop false env requirements

2026-08-18 00:45:15 -04:00

test_template_repo_sync.py

Split TemplateService into mixin modules

2026-10-10 21:10:14 -04:00

test_test_sandbox_catalog.py

fix(installer): provision native Python build dependencies (#148)

2026-09-20 22:29:53 -04:00

test_theme_registry.py

feat(themes): hardening — preview validation, registry caching, token wiring (plan 61)

2026-07-23 09:25:01 -04:00

test_themes.py

feat(themes): hardening — preview validation, registry caching, token wiring (plan 61)

2026-07-23 09:25:01 -04:00

test_thread_ownership.py

fix(census): measure only tracked files — the instruments count what ships

2026-08-19 10:06:38 -04:00

test_tramo_panel_core.py

refactor(extensions): extract seven builtins to standalone repos

2026-07-20 01:16:16 -04:00

test_trusted_client_ip.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_ttl_cached.py

feat(cache): ttl_cached decorator on CacheService; two TTL dicts migrate (plan 77 F2)

2026-08-19 05:20:59 -04:00

test_typed_error_codes.py

Give common API errors stable codes and service wording

2026-10-04 18:59:25 -04:00

test_ufw_listing_parity.py

fix(firewall): share one ufw parser between the listing and the guard

2026-08-27 04:08:12 -04:00

test_unexpected_error_reporting.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

test_unit_of_work.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

test_unreported_crash_ratchet.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

test_upload_extract.py

Guard first admin with a setup code, fix Git deploys

2026-09-24 00:50:02 -04:00

test_url_swap.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_user_language_preference.py

feat: add second-wave locale bundles

2026-08-20 23:22:32 -04:00

test_utils_system_integration.py

Move EXPECTED_MANAGER check into pytest test

2026-02-10 16:03:19 -05:00

test_utils_system.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

test_vendor_shim_mime.py

fix(update): stop snapshotting the SQLite DB twice per update; test vendor shim MIME

2026-09-08 00:27:42 -04:00

test_views.py

refactor(views): saved views onto the typed-error contract

2026-08-18 23:51:34 -04:00

test_waf_vhost_injection.py

fix(waf): keep the include through drift detection and repair

2026-08-27 04:51:38 -04:00

test_waf.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_walkthroughs.py

fix(walkthroughs): accept the step-level shorthand in extension manifests

2026-09-01 00:46:35 -04:00

test_webhook_ssrf_guard.py

fix(security): route webhook posts through safe_http

2026-11-03 12:57:58 -05:00

test_wordpress_ha_foundations.py

test(wordpress): seed the HA drift fixture through make_application

2026-08-28 22:20:34 -04:00

test_worker_processes.py

fix: start agent maintenance only in the guarded runtime phase

2026-10-24 05:14:36 -04:00

test_workspace_scope.py

fix(workspaces): require admin role to create workspaces

2026-08-19 19:16:42 -04:00

test_workspace_scoping_matrix.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_wp_hook_inversions.py

fix(tests): the "absent extension" seam test named a real extension

2026-08-12 21:48:21 -04:00

tracked_files.py

fix(census): measure only tracked files — the instruments count what ships

2026-08-19 10:06:38 -04:00

UNREPORTED_CRASH_CEILING

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

unreported_crash_census.py

fix(queue-bus): report the crashes a local error-mapper was hiding

2026-08-18 22:12:48 -04:00