Juan DenisandAlex a92d40a042 fix(workspaces): require admin role to create workspaces ...

POST /api/v1/workspaces/ was gated only by @jwt_required(), so any
authenticated user - including the read-only viewer role - could create
a workspace, automatically become its owner, then add arbitrary members
and mint workspace-scoped API keys (GHSA-r4q7-x795-vr4j, CWE-862).

Add @admin_required, matching the owner/admin checks every other
mutating workspace route already enforces, plus a regression test
asserting viewer and developer JWTs get 403 while an admin still
creates.

Co-authored-by: Alex <134992700+campguyuz@users.noreply.github.com>

2026-08-19 19:16:42 -04:00

..

fixtures/runtime-extension

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

api_controller_boundary_baseline.json

fix(ratchets): reconcile plan-77 additions with the standing gates

2026-08-19 06:04:59 -04:00

api_controller_boundary_scan.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

BASELINE_COUNT

fix(ci): scope the test-count guard to tests/ and correct the inflated floor

2026-08-19 10:09:21 -04:00

check_test_count.py

fix(ci): scope the test-count guard to tests/ and correct the inflated floor

2026-08-19 10:09:21 -04:00

conftest.py

test(one-doors): route_rules fixture, create_app ratchet, authz one-liners (plan 77 G3/G4)

2026-08-19 05:46:25 -04:00

ERROR_SHAPE_CEILING

test(contracts): ratchet the four remaining adoption populations

2026-08-19 00:13:59 -04:00

error_shape_census.py

test(contracts): ratchet the four remaining adoption populations

2026-08-19 00:13:59 -04:00

factories.py

test(one-doors): route_rules fixture, create_app ratchet, authz one-liners (plan 77 G3/G4)

2026-08-19 05:46:25 -04:00

IDENTITY_DOOR_CEILING

refactor(auth): remove the last inline role checks

2026-08-18 22:06:35 -04:00

identity_door_census.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

JWT_ONLY_CEILING

test(auth): ratchet the JWT-only population and record the A decision

2026-08-19 00:11:16 -04:00

jwt_only_census.py

test(auth): ratchet the JWT-only population and record the A decision

2026-08-19 00:11:16 -04:00

popen_guard.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

RAW_SUBPROCESS_CEILING

fix(census): measure only tracked files — the instruments count what ships

2026-08-19 10:06:38 -04:00

raw_subprocess_census.py

fix(census): measure only tracked files — the instruments count what ships

2026-08-19 10:06:38 -04:00

STATUS_SNIFFING_CEILING

refactor(db-tuner): typed errors close the status-sniffing census at 0

2026-08-19 00:03:50 -04:00

status_sniffing_census.py

refactor(db-tuner): typed errors close the status-sniffing census at 0

2026-08-19 00:03:50 -04:00

subprocess_stub.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

test_activity_summary_rollup.py

perf(api): stop /status/apps spawning a subprocess per app, and roll up the activity summary

2026-08-12 18:15:53 -04:00

test_agent_features_honest.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_agent_handshake_matrix.py

refactor(agent): transport-neutral handshake + state ingest doors (plan 77 A2)

2026-08-19 02:04:29 -04:00

test_agent_installer_endpoints.py

fix(api): honest errors for the installer routes, and the right agent repo

2026-08-16 05:27:08 -04:00

test_agent_poll_e2e.py

fix(agent): tunnel reconcile fires on both transports (plan 77 A1)

2026-08-19 01:42:13 -04:00

test_agent_poll_ratelimit.py

fix(agent): rate-limit the poll /connect auth path

2026-05-31 14:46:47 -04:00

test_agent_registry_security.py

fix(agent): fail-closed agent registration + surface stuck-command errors

2026-05-31 16:08:13 -04:00

test_agent_update_authz.py

fix(servers): require developer role for agent self-update (audit H3)

2026-06-12 17:33:29 -04:00

test_ai_assistant.py

feat(ai): add core AI assistant primitive powered by Prompture

2026-06-01 02:39:05 -04:00

test_ai_lazy_import.py

perf(ai): keep Prompture out of the panel's boot path (-24 MB RSS)

2026-07-25 14:15:29 -04:00

test_api_authz_hardening.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_api_contracts.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

test_api_controller_boundaries.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

test_api_error_shape.py

feat(api): centralize typed errors and request correlation

2026-08-18 02:42:25 -04:00

test_api_key_identity.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

test_api_scopes.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_app_deploy_jobs.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

test_app_resource_limits.py

fix(deployments): stop stuck 0% installs, deploy repo apps on create, unify install UX

2026-07-21 22:57:33 -04:00

test_app_volumes.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

test_application_soft_delete.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

test_attach_domain.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_audit_log.py

feat(activity): audit feed filters by target_id

2026-08-09 13:53:59 -04:00

test_auth_decorator_boundaries.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

test_authz_structural_sweep.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_available_servers.py

feat(servers): store the agent's self-reported footprint dirs

2026-07-02 22:36:34 -04:00

test_background_loop.py

feat(realtime): BackgroundLoop helper; sockets broadcasters adopt it (plan 77 E5)

2026-08-19 05:01:10 -04:00

test_backup_alerts.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_crypto.py

feat(backups): client-side encryption (opt-in, reuses the Fernet key)

2026-06-19 13:22:43 -04:00

test_backup_db_files_executors.py

refactor(unify): §8 Phase B2 — database + files executors in policy service

2026-06-24 14:19:32 -04:00

test_backup_drill_cadence.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_drill_docker.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_drill_honesty.py

fix(backups): a skipped restore drill no longer reads as proof

2026-08-17 21:03:06 -04:00

test_backup_drill_integrity.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

test_backup_drill_scheduling.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_drill.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_expectations.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_generic_api.py

refactor(unify): §8 Phase B5 — generic backup-policy CRUD for every target

2026-06-24 14:27:08 -04:00

test_backup_global_api.py

refactor(unify): §8 Phase B3 — global backup policy/run listing API

2026-06-24 14:20:43 -04:00

test_backup_offsite.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_protection.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

test_backup_target_types.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

test_backup_verify_honesty.py

fix(doctor): a failed backup verification no longer reads as verified

2026-08-17 21:15:45 -04:00

test_backup_verify.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_bandwidth.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_botocore_prune_contract.py

build(docker): halve the panel image, 1.07 GB -> 501 MB

2026-07-25 12:38:56 -04:00

test_buildpacks.py

feat: Phase 2 developer experience — build packs, config snapshots, catalog certification

2026-06-23 18:49:04 -04:00

test_builtin_extension_drift.py

test(extensions): fail when a bundled extension's two copies diverge

2026-08-17 20:07:26 -04:00

test_capacity_preflight.py

feat(templates): tell people whether a template actually fits the server

2026-07-25 15:48:36 -04:00

test_channel_registry.py

refactor(realtime): declarative channel registry; dead pipeline_* retired (plan 77 E2)

2026-08-19 05:04:28 -04:00

test_cli_api.py

feat(cli): API-backed operator verbs and diagnostic support bundle

2026-07-03 15:21:22 -04:00

test_cli_json.py

feat(cli): --json output on read-only admin CLI verbs

2026-07-11 01:22:49 -04:00

test_cli_manifest.py

feat(manifest): fleet targeting, manifest-powered previews, CLI verbs (Phase 5 backend)

2026-07-04 01:46:34 -04:00

test_cloud_provision_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_cloudflare_extraction.py

feat(extensions): Phase 5 — extract Cloudflare zone-ops into serverkit-cloudflare-ops

2026-07-02 01:04:03 -04:00

test_cloudflare_round2.py

feat(cloudflare): restore Round 2 engine — DNSSEC, Origin CA, rules, activity (plan 42 ph2)

2026-07-09 05:02:54 -04:00

test_cloudflare_zone_settings.py

feat(extensions): Phase 5 — extract Cloudflare zone-ops into serverkit-cloudflare-ops

2026-07-02 01:04:03 -04:00

test_compose_env_overlay.py

fix(deployments): stop stuck 0% installs, deploy repo apps on create, unify install UX

2026-07-21 22:57:33 -04:00

test_compose_v1_compat.py

fix(docker): stop sending compose v1 a v2-only flag

2026-07-25 16:19:33 -04:00

test_config_checkpoint_alias.py

test(one-doors): route_rules fixture, create_app ratchet, authz one-liners (plan 77 G3/G4)

2026-08-19 05:46:25 -04:00

test_config_snapshots.py

feat: UX hardening for the new organization/proxy/snapshot surfaces

2026-06-23 21:15:16 -04:00

test_config_store.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

test_connection_string.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_container_registry.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

test_container_scale.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_container_sleep.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_container_status_bulk.py

perf(api): stop /status/apps spawning a subprocess per app, and roll up the activity summary

2026-08-12 18:15:53 -04:00

test_container_status.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

test_core_blueprint_registry.py

fix(ratchets): reconcile plan-77 additions with the standing gates

2026-08-19 06:04:59 -04:00

test_cron_preview.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_cron_rbac.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_cron_runs.py

feat(cron): rebuild /cron on the Domains list pattern

2026-07-27 22:44:40 -04:00

test_crypto_fold_in.py

refactor(crypto): fold the parallel Fernet stacks into utils/crypto (plan 77 C2)

2026-08-19 05:37:32 -04:00

test_crypto_one_door_ratchet.py

fix(ratchets): reconcile plan-77 additions with the standing gates

2026-08-19 06:04:59 -04:00

test_dashboards.py

feat(dashboard): one control row, and the clock becomes a widget

2026-07-25 21:23:14 -04:00

test_database_engine_extensions.py

fix(databases): scope the extension listing to apps the caller can see

2026-07-26 00:19:46 -04:00

test_database_engines.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

test_database_service_doors.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

test_db_admin_sso.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_db_config_tuner.py

refactor(db-tuner): typed errors close the status-sniffing census at 0

2026-08-19 00:03:50 -04:00

test_db_explorer_honesty.py

fix(databases): distinguish a connection failure from an empty database

2026-06-15 00:01:41 -04:00

test_db_processes.py

refactor(db): one SQL-exec dispatcher, and adopt the doors already built

2026-08-18 11:26:40 -04:00

test_db_snapshot_relocation.py

refactor(models): relocate DatabaseSnapshot/SyncJob; untrack stale gui/email copies

2026-07-22 17:31:18 -04:00

test_ddns.py

refactor(ddns): typed errors replace the token-prose sniff

2026-08-18 23:55:17 -04:00

test_demo_deploys.py

feat(deployments): simulated demo deploys through the real console pipeline

2026-07-23 16:58:46 -04:00

test_demo_mode.py

feat(auth): one-time login links and demo mode

2026-07-03 14:23:50 -04:00

test_deploy_console.py

test(deploy-console): drive the registry-generated subscribe handler (plan 77 E2)

2026-08-19 05:05:11 -04:00

test_deploy_preflight.py

feat(deploy): prove a deploy can work before stopping the live one

2026-08-13 17:33:35 -04:00

test_deployment_jobs_authz.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

test_deployments_unified.py

refactor(unify): §3 — canonical DeploymentJob links + unified /deployments surface

2026-06-24 14:52:04 -04:00

test_dns_aaaa_conflict.py

fix(dns): catch the stray AAAA record that silently breaks SSL issuance

2026-08-13 16:17:23 -04:00

test_dns_caa.py

test(ssl): let the CAA tests past the new nginx-plugin preflight

2026-08-13 16:45:38 -04:00

test_dns_change_log.py

feat(dns): change log + admin notice on failure (Phase 2 backend)

2026-06-22 16:34:17 -04:00

test_dns_cloudflare_client.py

feat(dns): unify Cloudflare credentials behind one connection + shared client

2026-06-22 16:12:31 -04:00

test_dns_credential_resolution.py

feat(dns): unify Cloudflare credentials behind one connection + shared client

2026-06-22 16:12:31 -04:00

test_dns_cutover_api.py

fix(recovery): rebuild DNS cutover service+API and SSH site importer

2026-07-08 01:41:22 -04:00

test_dns_cutover_providers.py

fix(dns-cutover): restore snapshot() staging + provider-named 501 (plan 42 D7/ph5)

2026-07-09 04:50:16 -04:00

test_dns_cutover.py

fix(recovery): rebuild DNS cutover service+API and SSH site importer

2026-07-08 01:41:22 -04:00

test_dns_give_subdomain.py

fix(sites): route every managed app type on give-subdomain, not just docker

2026-06-30 23:31:57 -04:00

test_dns_ownership.py

feat(dns): ownership ledger + never-touch-foreign guard + zone mirror (Phase 1)

2026-06-22 16:24:53 -04:00

test_dns_portfolio.py

feat(domains): unify domains & DNS into one surface + admin-only Connections

2026-06-23 00:34:55 -04:00

test_dns_providers_core.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

test_dns_subdomain_modes.py

feat(dns): per-base-domain subdomain modes — wildcard vs per-site (Phase 3)

2026-06-22 16:40:35 -04:00

test_docker_db_client.py

fix(databases): the panel could not read the MariaDB it installs

2026-07-25 22:01:15 -04:00

test_docker_protection.py

refactor(docker): route docker_service through the shared doors

2026-08-18 13:45:25 -04:00

test_docker_runner.py

refactor(docker): route docker_service through the shared doors

2026-08-18 13:45:25 -04:00

test_doctor_backup_repairs.py

fix(doctor): verify local-only backups on disk instead of hiding the button

2026-08-13 17:26:14 -04:00

test_doctor_dns.py

fix(doctor): couldn't-check is its own answer, never the negative

2026-08-17 22:48:10 -04:00

test_domain_and_encryption.py

feat: canonical domain + encryption key bootstrap

2026-06-19 01:34:02 -04:00

test_domain_attach_service.py

feat(manifest): apply engine — resolve/plan/apply + core domain attach (Phase 2)

2026-07-04 01:28:16 -04:00

test_domain_vhost_ssl.py

fix(domains): adding or removing one domain no longer drops the site to HTTP

2026-08-12 09:05:56 -04:00

test_drift_doctor.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_effective_env.py

feat: inject shared variables into the deploy env (under local precedence)

2026-06-23 21:33:53 -04:00

test_email_bounce.py

feat(notifications): restore email-bounce webhook slice (plan 42 ph3)

2026-07-09 04:55:53 -04:00

test_email_dovecot_probe.py

fix(email): a dovecot probe that cannot run reports unknown, not stopped

2026-08-18 01:56:59 -04:00

test_email_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_email_provider_usage_flags.py

refactor(unify): §6 Phase C6a — email provider usage flags

2026-06-24 14:32:41 -04:00

test_email_relay_unified.py

refactor(unify): §6 Phase C6b — Postfix relay backed by EmailProviderConnection

2026-06-24 14:36:08 -04:00

test_encrypted_secret.py

feat(models): EncryptedSecret descriptor; server.py stops swallowing encrypt failures (plan 77 C1)

2026-08-19 01:45:12 -04:00

test_enhancements_integration.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

test_env_one_door.py

feat(utils): env one-door — env_str/env_bool/env_int (plan 77 F4)

2026-08-19 02:12:45 -04:00

test_error_logs.py

test(api): assert correlated error contract

2026-08-18 03:33:22 -04:00

test_error_shape_ratchet.py

test(contracts): ratchet the four remaining adoption populations

2026-08-19 00:13:59 -04:00

test_event_subscriptions.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

test_extension_manifests.py

fix(extensions): gate GPU auto-install on a present GPU; purge em dashes from manifests

2026-07-08 23:12:48 -04:00

test_extension_migration.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_extension_pending_requirements.py

feat(extensions): answer which Python dependencies an install skipped

2026-08-13 17:48:36 -04:00

test_extension_permission_observation.py

feat(extensions): observe permission use, and say which permissions we can't see

2026-08-13 17:44:11 -04:00

test_extension_platform.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_extension_signing.py

feat(utils): CachedRemoteIndex — one remote-catalog engine (plan 77 F1)

2026-08-19 05:27:10 -04:00

test_external_reverse_proxy.py

test(proxy): pin what an external reverse proxy depends on

2026-08-13 23:07:10 -04:00

test_fail2ban_jail_service.py

refactor(nginx): one privileged-write door, one vhost lifecycle

2026-08-18 11:26:23 -04:00

test_file_integrity.py

feat(security): scoped file-integrity monitoring

2026-07-03 15:21:34 -04:00

test_files_rbac.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

test_files_readonly_roots.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

test_files_typed_errors.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

test_firewall_detection.py

test(firewall): pin the honest tri-state, not the old fabrication

2026-08-17 23:50:10 -04:00

test_firewall_rule_removal_guard.py

feat(firewall): refuse to remove the last rule admitting SSH

2026-08-17 10:40:03 -04:00

test_firewall_self_block_guard.py

feat(firewall): guard self-block and default-zone lockouts

2026-08-17 19:28:24 -04:00

test_firewall_ssh_lockout.py

feat(firewall): refuse to enable ufw when it would cut off SSH

2026-08-17 10:19:45 -04:00

test_fixture_scope_guard.py

test(one-doors): route_rules fixture, create_app ratchet, authz one-liners (plan 77 G3/G4)

2026-08-19 05:46:25 -04:00

test_fleet_doctor_api.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_fleet_doctor_dns_rotation.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_fleet_doctor.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_fleet_proxy.py

feat: UX hardening for the new organization/proxy/snapshot surfaces

2026-06-23 21:15:16 -04:00

test_fleet_repair.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_fleet_sweep.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_ftp_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_git_deployment_authz.py

fix(git): enforce app-level authorization on deployment read endpoints

2026-08-03 23:44:56 -04:00

test_git_security.py

fix(security): close git argument injection in repo_url/app_path/branch (GHSA-8vx6-432p-h62q)

2026-08-11 19:43:46 -04:00

test_git_webhook_authz.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_github_app_manifest.py

feat(connections): one-click GitHub setup via the GitHub App manifest flow

2026-07-10 23:06:09 -04:00

test_health_staging.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

test_host_inventory.py

feat(monitoring): detect host spec changes and inventory filesystems

2026-08-17 09:31:18 -04:00

test_htaccess_converter.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_html_sink_sweep.py

feat(security): HTML-sink sweep guard (D4) — keep XSS sinks swept

2026-07-22 19:22:43 -04:00

test_identity_door_ratchet.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

test_image_update.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_ingress_plane.py

feat: make the ingress-plane boundary explicit (host Nginx vs proxy stack)

2026-06-23 20:57:40 -04:00

test_install_retry_after_failure.py

fix(deploy): let a failed install be retried from the panel

2026-07-25 16:51:44 -04:00

test_invitation_service_boundary.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

test_jobs.py

feat(doctor): connect the fleet doctor that was already written

2026-08-13 17:27:59 -04:00

test_json_column_mixin.py

refactor(models): finish JsonColumnMixin adoption — no hand-rolled json.loads (plan 77 B4)

2026-08-19 02:15:09 -04:00

test_jwt_only_ratchet.py

test(auth): ratchet the JWT-only population and record the A decision

2026-08-19 00:11:16 -04:00

test_linked_panel.py

fix(linked-panel): accept compose file path in project_path from remote runner

2026-07-22 00:48:13 -04:00

test_login_bruteforce.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

test_login_links.py

feat(auth): one-time login links and demo mode

2026-07-03 14:23:50 -04:00

test_malware_scan_job.py

refactor(security): malware-scan enqueue raises typed errors

2026-08-18 23:54:06 -04:00

test_managed_database_soft_delete.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

test_managed_database.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

test_managed_db_users.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

test_manifest_appliance_hardening.py

feat(manifest): reference appliance + adoption hardening (plan 35 ph6)

2026-07-09 03:35:53 -04:00

test_manifest_appliance_ports.py

feat(manifest): appliance-tier typed L4 ports + plan-time blockers rail (plan 35 ph1)

2026-07-09 02:57:23 -04:00

test_manifest_appliance_volumes_bootstrap.py

feat(manifest): finish appliance volumes + one-shot bootstrap (plan 35 ph2)

2026-07-09 03:05:08 -04:00

test_manifest_apply.py

feat(manifest): dockerfilePath — build services from a repo Dockerfile

2026-07-10 01:13:14 -04:00

test_manifest_drift.py

feat(manifest): push re-sync, drift check family, events (Phase 4)

2026-07-04 01:39:53 -04:00

test_manifest_image_hostreq.py

feat(manifest): BYO image + host requirements (plan 35 ph4)

2026-07-09 03:21:14 -04:00

test_manifest_network_identity.py

feat(manifest): network identity — fromServer, SERVER_PUBLIC_IP, shared net (plan 35 ph5)

2026-07-09 03:28:08 -04:00

test_manifest_persistence.py

feat(manifest): persist manifest + seed env + health-check gate (Phase 1)

2026-07-04 01:16:29 -04:00

test_manifest_reach.py

feat(manifest): fleet targeting, manifest-powered previews, CLI verbs (Phase 5 backend)

2026-07-04 01:46:34 -04:00

test_manifest_reference_appliance.py

feat(manifest): reference appliance + adoption hardening (plan 35 ph6)

2026-07-09 03:35:53 -04:00

test_manifest_references.py

feat(manifest): fromSecret/fromService/generate reference binders (Phase 3)

2026-07-04 01:34:54 -04:00

test_manifest_spec.py

feat(manifest): dockerfilePath — build services from a repo Dockerfile

2026-07-10 01:13:14 -04:00

test_manifest_sync.py

feat(manifest): push re-sync, drift check family, events (Phase 4)

2026-07-04 01:39:53 -04:00

test_manifest_unit.py

feat(manifest): multi-container units (plan 35 ph3)

2026-07-09 03:13:54 -04:00

test_member_actions.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_metadata_guard.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

test_micro_cache.py

refactor(nginx): one privileged-write door, one vhost lifecycle

2026-08-18 11:26:23 -04:00

test_migration_inventory.py

feat(conformance): generated remaining-migration inventory (H closure)

2026-08-19 00:16:39 -04:00

test_migration_status.py

test(migrate): pin the three states the update screen can be in

2026-07-25 20:35:19 -04:00

test_model_shape_mixins.py

refactor(models): TimestampMixin + uuid_pk() one-door shapes (plan 77 B1/B3)

2026-08-19 01:59:10 -04:00

test_models_json_one_door.py

refactor(models): finish JsonColumnMixin adoption — no hand-rolled json.loads (plan 77 B4)

2026-08-19 02:15:09 -04:00

test_module_toggles.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_monitor_service.py

refactor(utils): rename run_command -> run_unprivileged

2026-08-17 20:07:39 -04:00

test_nginx_health_and_service_status.py

refactor(services): one CompletedProcess -> dict translation (F5)

2026-08-17 23:03:39 -04:00

test_nginx_remote_upstream.py

feat(remote-access): NAT-traversing WireGuard tunnels to expose private services

2026-06-15 23:20:00 -04:00

test_nginx_write_vhost.py

refactor(nginx): one privileged-write door, one vhost lifecycle

2026-08-18 11:26:23 -04:00

test_no_background_threads.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

test_notification_bus.py

feat(notifications): queue-backed Notification Bus + email system

2026-06-21 19:57:02 -04:00

test_notification_chat_connections.py

fix(notifications): redact transport errors before they reach the log

2026-08-13 14:36:24 -04:00

test_notification_deep_links.py

feat(notifications): polish — digests, prefs, deep-links (plans 24/33)

2026-07-07 20:29:29 -04:00

test_notification_digest.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_notification_prefs_resolution.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_observability_namespace.py

refactor(status): extract status-pages backend into serverkit-status extension

2026-07-14 22:34:24 -04:00

test_observe_enforcement.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_onboarding_recommendations.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_pairing_authz.py

fix(pairing): require developer role for claim/lookup (audit L1)

2026-06-12 18:35:43 -04:00

test_pairing_pop.py

fix(pairing): verify Ed25519 proof-of-possession on pairing poll

2026-05-31 16:08:32 -04:00

test_panel_version.py

feat(files): Stack quick link follows the real install dir

2026-07-02 22:19:14 -04:00

test_per_app_read_scoping.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_plugin_agents_sdk.py

feat(plugins): let extensions run commands on the fleet

2026-07-25 14:02:08 -04:00

test_plugin_backups_sdk.py

test: WP hook inversion matrix (present x absent)

2026-08-05 01:18:32 -04:00

test_plugin_deploys_sdk.py

feat(plugins): let plugins own deployment-shaped work

2026-07-25 12:46:59 -04:00

test_plugin_doctor_sdk.py

feat(plugins): let extensions contribute doctor checks

2026-07-25 13:56:09 -04:00

test_plugin_preview.py

security: signature lifecycle, update-path consent gates, download hardening

2026-08-05 13:36:20 -04:00

test_plugin_search_sdk.py

feat(plugins): let extensions put their objects in global search

2026-07-25 13:40:00 -04:00

test_plugin_store_sdk.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_plugins_pipeline.py

fix(plugins): write manifests with LF instead of the platform newline

2026-08-13 14:57:51 -04:00

test_popen_guard.py

fix(tests): stub-kit and popen-guard samples no longer depend on the host's ufw

2026-08-19 10:08:00 -04:00

test_previews.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_probe_env_integration.py

test(scripts): stop the §D shim replacing the real firewall_service

2026-08-18 00:17:06 -04:00

test_probe_honesty_doctor.py

fix(tests): docker-probe test patches the door, not the removed subprocess import

2026-08-19 10:35:23 -04:00

test_probe_honesty_fleet.py

fix(doctor): couldn't-check is its own answer, never the negative

2026-08-17 22:48:10 -04:00

test_probe_honesty_metrics.py

fix(metrics): unknown is not zero, and zero is not unknown

2026-08-17 22:40:12 -04:00

test_probe_honesty_ssl.py

fix(ssl): a failed certificate check no longer reports fine

2026-08-17 22:48:27 -04:00

test_projects.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_provider_secret_encryption.py

refactor(cloud): extract cloud-provision backend + add upgrade re-acquisition

2026-07-14 22:22:18 -04:00

test_proxy_stack.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_query_layer.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

test_queue_bus_webhooks.py

feat(queue-bus): introduce ServerKit Queue Bus under Operations

2026-06-20 22:25:06 -04:00

test_queue_bus.py

feat(queue-bus): auto-generate slugs and resolve duplicates

2026-06-20 22:38:38 -04:00

test_raw_infra_authz.py

test(one-doors): route_rules fixture, create_app ratchet, authz one-liners (plan 77 G3/G4)

2026-08-19 05:46:25 -04:00

test_raw_subprocess_ratchet.py

fix(census): measure only tracked files — the instruments count what ships

2026-08-19 10:06:38 -04:00

test_recycle_bin.py

refactor(views): saved views onto the typed-error contract

2026-08-18 23:51:34 -04:00

test_redaction_one_door.py

refactor(security): one sensitive-keyword union for all four redaction sinks (plan 77 F3)

2026-08-19 02:10:22 -04:00

test_registry_bundled_index.py

test(registry): assert bundled catalog entries match what the panel ships

2026-08-16 15:54:08 -04:00

test_registry.py

feat(utils): CachedRemoteIndex — one remote-catalog engine (plan 77 F1)

2026-08-19 05:27:10 -04:00

test_remote_access_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_remote_command_dispatcher.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

test_remote_cron_update.py

feat(cron): completion — run history, project scope, cwd/run-as (plan 34)

2026-07-07 20:29:29 -04:00

test_remote_index.py

feat(utils): CachedRemoteIndex — one remote-catalog engine (plan 77 F1)

2026-08-19 05:27:10 -04:00

test_repository_manifest_service.py

Add repository manifest detection and templates

2026-05-03 07:07:57 -04:00

test_resource_grants.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_run_envelope.py

feat(realtime): generalized run envelope — one stream door for every run kind (plan 77 E1)

2026-08-19 05:13:02 -04:00

test_run_log_stream.py

feat(deploy): batched RunLogStream seam + streaming compose + deploy socket channel

2026-07-22 16:36:58 -04:00

test_runtime_frontend.py

feat(extensions): deliver runtime ESM frontends to production panels (#39)

2026-07-22 17:24:36 -04:00

test_sbin_command_guard.py

docs(tests): stop the sbin guard reading as coverage

2026-08-17 21:23:00 -04:00

test_sdk_contract.py

feat(extensions): deliver runtime ESM frontends to production panels (#39)

2026-07-22 17:24:36 -04:00

test_search.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

test_secrets_webhooks_authz.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

test_security_clamav.py

Add ClamAV start action and UI posture fixes

2026-06-21 01:54:51 -04:00

test_security_feed.py

feat(security): daily GHSA feed check with admin notifications

2026-08-02 18:35:25 -04:00

test_security_headers.py

feat(security): gate panel HSTS on installer SSL mode (keep HTTPS optional)

2026-06-19 16:52:40 -04:00

test_security_policy.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_security_scan_jobs.py

refactor(security): run durable scans through job system

2026-08-18 03:00:22 -04:00

test_seed_one_door_ratchet.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_serializable_mixin.py

refactor(models): SerializableMixin — mechanical to_dicts become introspection (plan 77 B2)

2026-08-19 05:33:17 -04:00

test_server_capacity.py

feat(cache): ttl_cached decorator on CacheService; two TTL dicts migrate (plan 77 F2)

2026-08-19 05:20:59 -04:00

test_server_onboarding.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

test_server_permissions.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_server_time_timezone.py

fix(system): report IANA timezone_id; guard chart formatting against bad zones

2026-07-01 22:55:11 -04:00

test_serverkit_gui_agent_gate.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_serverkit_installer.py

feat(installer): Phase 5 — additive Python bootstrap foundation

2026-06-25 01:06:44 -04:00

test_servers_api_pairing.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_servers_list_metrics.py

fix(api): GET /servers never sent the metrics the servers list renders

2026-08-12 05:52:37 -04:00

test_service_templates.py

test(services): catalog proving test for the template roadmap

2026-06-23 17:31:28 -04:00

test_services_alias.py

refactor(unify): §1 — single Services detail surface; /apps→/services

2026-06-24 14:06:05 -04:00

test_setup_health.py

feat(install): put a default-deny firewall and fail2ban on a stock install

2026-08-13 16:33:47 -04:00

test_setup_nag.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

test_setup_preflight.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

test_setup_reconcile.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_setup_security.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_shared_queue_authz.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

test_shared_resources.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_site_base_domains.py

feat(services): pick a base domain when giving an app a subdomain

2026-07-01 00:31:22 -04:00

test_site_import.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_site_importers_extra.py

feat(imports): panel-migration pipeline with cPanel, DirectAdmin and Hestia importers

2026-07-03 14:24:29 -04:00

test_site_routing.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_sites_https.py

refactor(utils): rename run_command -> run_unprivileged

2026-08-17 20:07:39 -04:00

test_sites_publishing_gaps.py

feat(sites): warn when the site base domain overlaps the panel domain

2026-06-30 23:48:28 -04:00

test_socket_contract.py

feat(realtime): one room grammar + mirrored event constants (plan 77 E3)

2026-08-19 04:58:49 -04:00

test_soft_delete_leaks.py

fix(domains): stop soft-delete tombstones leaking into every read path

2026-08-12 09:27:05 -04:00

test_speed_test.py

test(subprocess): one stub kit for subprocess seams

2026-08-18 11:24:20 -04:00

test_ssh_import_wiring.py

test(ssh-import): redirect APPS_DIR to tmp so create_app step passes on CI

2026-07-08 23:58:45 -04:00

test_ssh_importer.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_ssl_acme_contact.py

feat(ssl): remember one Let's Encrypt contact instead of asking every time

2026-08-13 16:22:33 -04:00

test_ssl_certbot_resolution.py

fix(ssl): resolve certbot outside $PATH and preflight the nginx plugin

2026-08-13 15:59:47 -04:00

test_ssl_unified_surface.py

refactor(unify): §5 — single SSL surface (basic + advanced)

2026-06-24 14:40:08 -04:00

test_status_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_status_sniffing_ratchet.py

test(api): ratchet the statuses derived from error prose, ahead of milestone C

2026-08-18 20:48:33 -04:00

test_status_vocabulary.py

feat(models): canonical status vocabulary + RunLifecycleMixin (plan 77 D1/D2)

2026-08-19 02:06:05 -04:00

test_subprocess_stub.py

fix(tests): stub-kit and popen-guard samples no longer depend on the host's ufw

2026-08-19 10:08:00 -04:00

test_support_bundle.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_survey_api.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

test_survey_catalog.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_survey_service.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

test_telemetry.py

Truncate large telemetry payloads & UI robustness fixes

2026-06-22 01:45:15 -04:00

test_template_catalog_validation.py

feat(databases): install any engine, because an engine is just a template

2026-07-25 20:09:05 -04:00

test_template_files_render.py

fix(templates): only bind-mount absolute file paths; relative files are build-context only

2026-07-21 23:26:13 -04:00

test_template_magic_vars.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

test_template_registry_cache.py

perf(templates): cache parsed local templates on file mtime

2026-08-06 09:32:40 -04:00

test_template_repo_kind.py

Point the agentsite template at its serverkit.yaml, drop false env requirements

2026-08-18 00:45:15 -04:00

test_template_repo_sync.py

fix(templates): point the default repo at a host that exists, and verify what it sends

2026-08-06 00:33:46 -04:00

test_theme_registry.py

feat(themes): hardening — preview validation, registry caching, token wiring (plan 61)

2026-07-23 09:25:01 -04:00

test_themes.py

feat(themes): hardening — preview validation, registry caching, token wiring (plan 61)

2026-07-23 09:25:01 -04:00

test_thread_ownership.py

fix(census): measure only tracked files — the instruments count what ships

2026-08-19 10:06:38 -04:00

test_tramo_panel_core.py

refactor(extensions): extract seven builtins to standalone repos

2026-07-20 01:16:16 -04:00

test_trusted_client_ip.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_ttl_cached.py

feat(cache): ttl_cached decorator on CacheService; two TTL dicts migrate (plan 77 F2)

2026-08-19 05:20:59 -04:00

test_unexpected_error_reporting.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

test_unit_of_work.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

test_unreported_crash_ratchet.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

test_url_swap.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_utils_system_integration.py

Move EXPECTED_MANAGER check into pytest test

2026-02-10 16:03:19 -05:00

test_utils_system.py

refactor: finish the §G1 subprocess migration (census 195 -> 28)

2026-08-18 16:38:25 -04:00

test_views.py

refactor(views): saved views onto the typed-error contract

2026-08-18 23:51:34 -04:00

test_waf.py

test(seeds): one-door factories + persona headers + adoption ratchet (plan 77 G1/G2)

2026-08-19 01:55:18 -04:00

test_workspace_scope.py

fix(workspaces): require admin role to create workspaces

2026-08-19 19:16:42 -04:00

test_workspace_scoping_matrix.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_wp_hook_inversions.py

fix(tests): the "absent extension" seam test named a real extension

2026-08-12 21:48:21 -04:00

test_yara_scan.py

feat(security): job-backed malware scans with a web-shell YARA pass

2026-07-03 15:21:23 -04:00

tracked_files.py

fix(census): measure only tracked files — the instruments count what ships

2026-08-19 10:06:38 -04:00

UNREPORTED_CRASH_CEILING

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

unreported_crash_census.py

fix(queue-bus): report the crashes a local error-mapper was hiding

2026-08-18 22:12:48 -04:00