Juan DenisandClaude Opus 5 bb20db70db feat(extensions): observe permission use, and say which permissions we can't see ...

Plan 55 task 7, backend half. A manifest's `permissions` array was
declaration-only: the install dialog showed it and nothing ever compared it
against what the extension went on to do.

The capability gate now records every call through it -- including the
refusals, which are the interesting ones -- so `usage_report(slug)` can answer
declared-versus-observed per extension. Observations are in-memory and
per-process by design: the question is "what has this extension done since the
panel started", and persisting it would outlive the evidence and start reading
like an audit trail, which this is not. `has()` deliberately does not record; it
is a question, not a use, and counting it would fabricate activity for callers
that only checked.

The larger half of this change is admitting what the panel cannot see. Task 7
was specified as hooks at "the shell/docker/db helper entry points", and those
do not exist: the SDK exposes no shell, docker, filesystem or network helper at
all, and hands out `db` as raw SQLAlchemy. An extension wanting any of them
imports the host module directly, where no in-process gate is involved. The one
genuinely gated capability is `agent.command:<action>`, because the SDK is the
only way to reach an agent.

So observability is data, not prose: OBSERVABLE_PREFIXES marks what the gate
truly mediates, and the report marks every other declared permission
`observable: false` rather than showing it as "never used". Absence of evidence
is not evidence of absence here, and a UI claiming otherwise would be inventing
enforcement the panel does not have -- exactly the honesty the plan's D2
decision asks for.

GET /plugins/<id>/permissions returns the report, admin-only: it describes what
third-party code has been reaching for.

The UI surface and the docs follow.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-13 17:44:11 -04:00

..

fixtures/runtime-extension

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

BASELINE_COUNT

fix(plugins): write manifests with LF instead of the platform newline

2026-08-13 14:57:51 -04:00

check_test_count.py

ci(tests): add test-count ratchet + changelog recovery-parity (plan 42 ph6)

2026-07-09 05:27:22 -04:00

conftest.py

fix(tests): wp_extension_package must mark the extension ACTIVE, not just import it

2026-08-12 21:48:21 -04:00

test_activity_summary_rollup.py

perf(api): stop /status/apps spawning a subprocess per app, and roll up the activity summary

2026-08-12 18:15:53 -04:00

test_agent_features_honest.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_agent_poll_e2e.py

test(agent): end-to-end test for the panel<->agent command loop

2026-06-12 17:31:26 -04:00

test_agent_poll_ratelimit.py

fix(agent): rate-limit the poll /connect auth path

2026-05-31 14:46:47 -04:00

test_agent_registry_security.py

fix(agent): fail-closed agent registration + surface stuck-command errors

2026-05-31 16:08:13 -04:00

test_agent_update_authz.py

fix(servers): require developer role for agent self-update (audit H3)

2026-06-12 17:33:29 -04:00

test_ai_assistant.py

feat(ai): add core AI assistant primitive powered by Prompture

2026-06-01 02:39:05 -04:00

test_ai_lazy_import.py

perf(ai): keep Prompture out of the panel's boot path (-24 MB RSS)

2026-07-25 14:15:29 -04:00

test_api_authz_hardening.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_api_scopes.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_app_deploy_jobs.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

test_app_resource_limits.py

fix(deployments): stop stuck 0% installs, deploy repo apps on create, unify install UX

2026-07-21 22:57:33 -04:00

test_app_volumes.py

docs: adopt numbered filenames for docs/plans and update references

2026-07-01 20:49:41 -04:00

test_application_soft_delete.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

test_attach_domain.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_audit_log.py

feat(activity): audit feed filters by target_id

2026-08-09 13:53:59 -04:00

test_authz_structural_sweep.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_available_servers.py

feat(servers): store the agent's self-reported footprint dirs

2026-07-02 22:36:34 -04:00

test_backup_alerts.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_crypto.py

feat(backups): client-side encryption (opt-in, reuses the Fernet key)

2026-06-19 13:22:43 -04:00

test_backup_db_files_executors.py

refactor(unify): §8 Phase B2 — database + files executors in policy service

2026-06-24 14:19:32 -04:00

test_backup_drill_cadence.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_drill_docker.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_drill_integrity.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

test_backup_drill_scheduling.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_drill.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_backup_expectations.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_generic_api.py

refactor(unify): §8 Phase B5 — generic backup-policy CRUD for every target

2026-06-24 14:27:08 -04:00

test_backup_global_api.py

refactor(unify): §8 Phase B3 — global backup policy/run listing API

2026-06-24 14:20:43 -04:00

test_backup_offsite.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_backup_protection.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

test_backup_target_types.py

security: hook seam lifecycle + registrant binding

2026-08-05 13:36:33 -04:00

test_backup_verify.py

feat(backup): trust round 2 — restore drills, offsite/verify (plan 30)

2026-07-07 20:29:25 -04:00

test_bandwidth.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_botocore_prune_contract.py

build(docker): halve the panel image, 1.07 GB -> 501 MB

2026-07-25 12:38:56 -04:00

test_buildpacks.py

feat: Phase 2 developer experience — build packs, config snapshots, catalog certification

2026-06-23 18:49:04 -04:00

test_capacity_preflight.py

feat(templates): tell people whether a template actually fits the server

2026-07-25 15:48:36 -04:00

test_cli_api.py

feat(cli): API-backed operator verbs and diagnostic support bundle

2026-07-03 15:21:22 -04:00

test_cli_json.py

feat(cli): --json output on read-only admin CLI verbs

2026-07-11 01:22:49 -04:00

test_cli_manifest.py

feat(manifest): fleet targeting, manifest-powered previews, CLI verbs (Phase 5 backend)

2026-07-04 01:46:34 -04:00

test_cloud_provision_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_cloudflare_extraction.py

feat(extensions): Phase 5 — extract Cloudflare zone-ops into serverkit-cloudflare-ops

2026-07-02 01:04:03 -04:00

test_cloudflare_round2.py

feat(cloudflare): restore Round 2 engine — DNSSEC, Origin CA, rules, activity (plan 42 ph2)

2026-07-09 05:02:54 -04:00

test_cloudflare_zone_settings.py

feat(extensions): Phase 5 — extract Cloudflare zone-ops into serverkit-cloudflare-ops

2026-07-02 01:04:03 -04:00

test_compose_env_overlay.py

fix(deployments): stop stuck 0% installs, deploy repo apps on create, unify install UX

2026-07-21 22:57:33 -04:00

test_compose_v1_compat.py

fix(docker): stop sending compose v1 a v2-only flag

2026-07-25 16:19:33 -04:00

test_config_checkpoint_alias.py

refactor(unify): §8 Phase B4 — surface DeploymentSnapshot as "Config Checkpoint"

2026-06-24 14:24:13 -04:00

test_config_snapshots.py

feat: UX hardening for the new organization/proxy/snapshot surfaces

2026-06-23 21:15:16 -04:00

test_connection_string.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_container_registry.py

docs: adopt numbered filenames for docs/plans and update references

2026-07-01 20:49:41 -04:00

test_container_scale.py

feat(docker): horizontal auto-scaling (CPU thresholds, min/max, cooldown)

2026-06-19 10:13:50 -04:00

test_container_sleep.py

feat(docker): container auto-sleep (policy, manual sleep/wake, idle sweep)

2026-06-19 09:54:40 -04:00

test_container_status_bulk.py

perf(api): stop /status/apps spawning a subprocess per app, and roll up the activity summary

2026-08-12 18:15:53 -04:00

test_container_status.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

test_cron_preview.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_cron_rbac.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_cron_runs.py

feat(cron): rebuild /cron on the Domains list pattern

2026-07-27 22:44:40 -04:00

test_dashboards.py

feat(dashboard): one control row, and the clock becomes a widget

2026-07-25 21:23:14 -04:00

test_database_engine_extensions.py

fix(databases): scope the extension listing to apps the caller can see

2026-07-26 00:19:46 -04:00

test_database_engines.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

test_db_admin_sso.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_db_config_tuner.py

feat(databases): curated engine config tuner

2026-07-03 14:24:03 -04:00

test_db_explorer_honesty.py

fix(databases): distinguish a connection failure from an empty database

2026-06-15 00:01:41 -04:00

test_db_processes.py

feat(databases): live processlist with kill in the explorer

2026-07-03 14:24:02 -04:00

test_db_snapshot_relocation.py

refactor(models): relocate DatabaseSnapshot/SyncJob; untrack stale gui/email copies

2026-07-22 17:31:18 -04:00

test_ddns.py

feat(dns): dynamic DNS — token-authenticated A/AAAA updates

2026-06-19 03:12:07 -04:00

test_demo_deploys.py

feat(deployments): simulated demo deploys through the real console pipeline

2026-07-23 16:58:46 -04:00

test_demo_mode.py

feat(auth): one-time login links and demo mode

2026-07-03 14:23:50 -04:00

test_deploy_console.py

fix(tests): stop the compose-flag test depending on the host having Docker

2026-07-25 20:04:39 -04:00

test_deploy_preflight.py

feat(deploy): prove a deploy can work before stopping the live one

2026-08-13 17:33:35 -04:00

test_deployment_jobs_authz.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

test_deployments_unified.py

refactor(unify): §3 — canonical DeploymentJob links + unified /deployments surface

2026-06-24 14:52:04 -04:00

test_dns_aaaa_conflict.py

fix(dns): catch the stray AAAA record that silently breaks SSL issuance

2026-08-13 16:17:23 -04:00

test_dns_caa.py

test(ssl): let the CAA tests past the new nginx-plugin preflight

2026-08-13 16:45:38 -04:00

test_dns_change_log.py

feat(dns): change log + admin notice on failure (Phase 2 backend)

2026-06-22 16:34:17 -04:00

test_dns_cloudflare_client.py

feat(dns): unify Cloudflare credentials behind one connection + shared client

2026-06-22 16:12:31 -04:00

test_dns_credential_resolution.py

feat(dns): unify Cloudflare credentials behind one connection + shared client

2026-06-22 16:12:31 -04:00

test_dns_cutover_api.py

fix(recovery): rebuild DNS cutover service+API and SSH site importer

2026-07-08 01:41:22 -04:00

test_dns_cutover_providers.py

fix(dns-cutover): restore snapshot() staging + provider-named 501 (plan 42 D7/ph5)

2026-07-09 04:50:16 -04:00

test_dns_cutover.py

fix(recovery): rebuild DNS cutover service+API and SSH site importer

2026-07-08 01:41:22 -04:00

test_dns_give_subdomain.py

fix(sites): route every managed app type on give-subdomain, not just docker

2026-06-30 23:31:57 -04:00

test_dns_ownership.py

feat(dns): ownership ledger + never-touch-foreign guard + zone mirror (Phase 1)

2026-06-22 16:24:53 -04:00

test_dns_portfolio.py

feat(domains): unify domains & DNS into one surface + admin-only Connections

2026-06-23 00:34:55 -04:00

test_dns_providers_core.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

test_dns_subdomain_modes.py

feat(dns): per-base-domain subdomain modes — wildcard vs per-site (Phase 3)

2026-06-22 16:40:35 -04:00

test_docker_db_client.py

fix(databases): the panel could not read the MariaDB it installs

2026-07-25 22:01:15 -04:00

test_docker_protection.py

Protect ServerKit containers from lifecycle actions

2026-06-24 01:43:29 -04:00

test_doctor_backup_repairs.py

fix(doctor): verify local-only backups on disk instead of hiding the button

2026-08-13 17:26:14 -04:00

test_doctor_dns.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

test_domain_and_encryption.py

feat: canonical domain + encryption key bootstrap

2026-06-19 01:34:02 -04:00

test_domain_attach_service.py

feat(manifest): apply engine — resolve/plan/apply + core domain attach (Phase 2)

2026-07-04 01:28:16 -04:00

test_domain_vhost_ssl.py

fix(domains): adding or removing one domain no longer drops the site to HTTP

2026-08-12 09:05:56 -04:00

test_drift_doctor.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_effective_env.py

feat: inject shared variables into the deploy env (under local precedence)

2026-06-23 21:33:53 -04:00

test_email_bounce.py

feat(notifications): restore email-bounce webhook slice (plan 42 ph3)

2026-07-09 04:55:53 -04:00

test_email_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_email_provider_usage_flags.py

refactor(unify): §6 Phase C6a — email provider usage flags

2026-06-24 14:32:41 -04:00

test_email_relay_unified.py

refactor(unify): §6 Phase C6b — Postfix relay backed by EmailProviderConnection

2026-06-24 14:36:08 -04:00

test_enhancements_integration.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

test_extension_manifests.py

fix(extensions): gate GPU auto-install on a present GPU; purge em dashes from manifests

2026-07-08 23:12:48 -04:00

test_extension_migration.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_extension_permission_observation.py

feat(extensions): observe permission use, and say which permissions we can't see

2026-08-13 17:44:11 -04:00

test_extension_platform.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_extension_signing.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_fail2ban_jail_service.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_file_integrity.py

feat(security): scoped file-integrity monitoring

2026-07-03 15:21:34 -04:00

test_files_rbac.py

fix(security): correct PROTECTED_ROOTS path math; tighten root matching

2026-08-02 18:56:33 -04:00

test_files_readonly_roots.py

fix(files): make the File Manager's "Web config" shortcut resolve, read-only

2026-08-13 16:03:25 -04:00

test_fixture_scope_guard.py

test: guard the app fixture's scope so the suite can't quietly get slow again

2026-08-06 03:01:24 -04:00

test_fleet_doctor_api.py

feat(doctor): connect the fleet doctor that was already written

2026-08-13 17:27:59 -04:00

test_fleet_doctor_dns_rotation.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_fleet_doctor.py

fix(recovery): rebuild agent-fleet survey + fleet doctor/repair services

2026-07-08 01:41:13 -04:00

test_fleet_proxy.py

feat: UX hardening for the new organization/proxy/snapshot surfaces

2026-06-23 21:15:16 -04:00

test_fleet_repair.py

fix(recovery): rebuild agent-fleet survey + fleet doctor/repair services

2026-07-08 01:41:13 -04:00

test_fleet_sweep.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_ftp_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_git_deployment_authz.py

fix(git): enforce app-level authorization on deployment read endpoints

2026-08-03 23:44:56 -04:00

test_git_security.py

fix(security): close git argument injection in repo_url/app_path/branch (GHSA-8vx6-432p-h62q)

2026-08-11 19:43:46 -04:00

test_git_webhook_authz.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_github_app_manifest.py

feat(connections): one-click GitHub setup via the GitHub App manifest flow

2026-07-10 23:06:09 -04:00

test_health_staging.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

test_htaccess_converter.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_html_sink_sweep.py

feat(security): HTML-sink sweep guard (D4) — keep XSS sinks swept

2026-07-22 19:22:43 -04:00

test_image_update.py

feat(docker): one-click apply for image updates

2026-06-19 09:37:30 -04:00

test_ingress_plane.py

feat: make the ingress-plane boundary explicit (host Nginx vs proxy stack)

2026-06-23 20:57:40 -04:00

test_install_retry_after_failure.py

fix(deploy): let a failed install be retried from the panel

2026-07-25 16:51:44 -04:00

test_jobs.py

feat(doctor): connect the fleet doctor that was already written

2026-08-13 17:27:59 -04:00

test_linked_panel.py

fix(linked-panel): accept compose file path in project_path from remote runner

2026-07-22 00:48:13 -04:00

test_login_bruteforce.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

test_login_links.py

feat(auth): one-time login links and demo mode

2026-07-03 14:23:50 -04:00

test_malware_scan_job.py

feat(security): job-backed malware scans with a web-shell YARA pass

2026-07-03 15:21:23 -04:00

test_managed_database.py

docs: adopt numbered filenames for docs/plans and update references

2026-07-01 20:49:41 -04:00

test_managed_db_users.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_manifest_appliance_hardening.py

feat(manifest): reference appliance + adoption hardening (plan 35 ph6)

2026-07-09 03:35:53 -04:00

test_manifest_appliance_ports.py

feat(manifest): appliance-tier typed L4 ports + plan-time blockers rail (plan 35 ph1)

2026-07-09 02:57:23 -04:00

test_manifest_appliance_volumes_bootstrap.py

feat(manifest): finish appliance volumes + one-shot bootstrap (plan 35 ph2)

2026-07-09 03:05:08 -04:00

test_manifest_apply.py

feat(manifest): dockerfilePath — build services from a repo Dockerfile

2026-07-10 01:13:14 -04:00

test_manifest_drift.py

feat(manifest): push re-sync, drift check family, events (Phase 4)

2026-07-04 01:39:53 -04:00

test_manifest_image_hostreq.py

feat(manifest): BYO image + host requirements (plan 35 ph4)

2026-07-09 03:21:14 -04:00

test_manifest_network_identity.py

feat(manifest): network identity — fromServer, SERVER_PUBLIC_IP, shared net (plan 35 ph5)

2026-07-09 03:28:08 -04:00

test_manifest_persistence.py

feat(manifest): persist manifest + seed env + health-check gate (Phase 1)

2026-07-04 01:16:29 -04:00

test_manifest_reach.py

feat(manifest): fleet targeting, manifest-powered previews, CLI verbs (Phase 5 backend)

2026-07-04 01:46:34 -04:00

test_manifest_reference_appliance.py

feat(manifest): reference appliance + adoption hardening (plan 35 ph6)

2026-07-09 03:35:53 -04:00

test_manifest_references.py

feat(manifest): fromSecret/fromService/generate reference binders (Phase 3)

2026-07-04 01:34:54 -04:00

test_manifest_spec.py

feat(manifest): dockerfilePath — build services from a repo Dockerfile

2026-07-10 01:13:14 -04:00

test_manifest_sync.py

feat(manifest): push re-sync, drift check family, events (Phase 4)

2026-07-04 01:39:53 -04:00

test_manifest_unit.py

feat(manifest): multi-container units (plan 35 ph3)

2026-07-09 03:13:54 -04:00

test_member_actions.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_metadata_guard.py

feat(security): cloud-metadata egress guard for app containers

2026-07-03 14:23:11 -04:00

test_micro_cache.py

feat(hosting): per-site nginx micro-cache toggle

2026-07-03 15:21:50 -04:00

test_migration_status.py

test(migrate): pin the three states the update screen can be in

2026-07-25 20:35:19 -04:00

test_module_toggles.py

feat(extensions): Phase 5 — extract WordPress into serverkit-wordpress (backend)

2026-07-02 00:15:10 -04:00

test_monitor_service.py

test: WP hook inversion matrix (present x absent)

2026-08-05 01:18:32 -04:00

test_nginx_health_and_service_status.py

fix(nginx): see a running-but-broken nginx, and stop claiming uncontrollable state

2026-08-13 16:12:19 -04:00

test_nginx_remote_upstream.py

feat(remote-access): NAT-traversing WireGuard tunnels to expose private services

2026-06-15 23:20:00 -04:00

test_no_background_threads.py

restore: remaining reconstructed July 5-7 changes (clean recovered files not attributable to one plan)

2026-07-07 20:29:31 -04:00

test_notification_bus.py

feat(notifications): queue-backed Notification Bus + email system

2026-06-21 19:57:02 -04:00

test_notification_chat_connections.py

fix(notifications): redact transport errors before they reach the log

2026-08-13 14:36:24 -04:00

test_notification_deep_links.py

feat(notifications): polish — digests, prefs, deep-links (plans 24/33)

2026-07-07 20:29:29 -04:00

test_notification_digest.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_notification_prefs_resolution.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_observability_namespace.py

refactor(status): extract status-pages backend into serverkit-status extension

2026-07-14 22:34:24 -04:00

test_observe_enforcement.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_onboarding_recommendations.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_pairing_authz.py

fix(pairing): require developer role for claim/lookup (audit L1)

2026-06-12 18:35:43 -04:00

test_pairing_pop.py

fix(pairing): verify Ed25519 proof-of-possession on pairing poll

2026-05-31 16:08:32 -04:00

test_panel_version.py

feat(files): Stack quick link follows the real install dir

2026-07-02 22:19:14 -04:00

test_per_app_read_scoping.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_plugin_agents_sdk.py

feat(plugins): let extensions run commands on the fleet

2026-07-25 14:02:08 -04:00

test_plugin_backups_sdk.py

test: WP hook inversion matrix (present x absent)

2026-08-05 01:18:32 -04:00

test_plugin_deploys_sdk.py

feat(plugins): let plugins own deployment-shaped work

2026-07-25 12:46:59 -04:00

test_plugin_doctor_sdk.py

feat(plugins): let extensions contribute doctor checks

2026-07-25 13:56:09 -04:00

test_plugin_preview.py

security: signature lifecycle, update-path consent gates, download hardening

2026-08-05 13:36:20 -04:00

test_plugin_search_sdk.py

feat(plugins): let extensions put their objects in global search

2026-07-25 13:40:00 -04:00

test_plugin_store_sdk.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_plugins_pipeline.py

fix(plugins): write manifests with LF instead of the platform newline

2026-08-13 14:57:51 -04:00

test_previews.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_projects.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_provider_secret_encryption.py

refactor(cloud): extract cloud-provision backend + add upgrade re-acquisition

2026-07-14 22:22:18 -04:00

test_proxy_stack.py

feat: Phase 3 team & scale — projects/environments, shared resources, PR previews, proxy stacks

2026-06-23 19:33:44 -04:00

test_query_layer.py

perf(api): opt /servers into the query layer

2026-08-12 13:16:58 -04:00

test_queue_bus_webhooks.py

feat(queue-bus): introduce ServerKit Queue Bus under Operations

2026-06-20 22:25:06 -04:00

test_queue_bus.py

feat(queue-bus): auto-generate slugs and resolve duplicates

2026-06-20 22:38:38 -04:00

test_raw_infra_authz.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

test_recycle_bin.py

fix(recycle-bin): say when a restored domain comes back without HTTPS

2026-08-12 13:08:49 -04:00

test_registry.py

security: signature lifecycle, update-path consent gates, download hardening

2026-08-05 13:36:20 -04:00

test_remote_access_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_remote_cron_update.py

feat(cron): completion — run history, project scope, cwd/run-as (plan 34)

2026-07-07 20:29:29 -04:00

test_repository_manifest_service.py

Add repository manifest detection and templates

2026-05-03 07:07:57 -04:00

test_resource_grants.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_run_log_stream.py

feat(deploy): batched RunLogStream seam + streaming compose + deploy socket channel

2026-07-22 16:36:58 -04:00

test_runtime_frontend.py

feat(extensions): deliver runtime ESM frontends to production panels (#39)

2026-07-22 17:24:36 -04:00

test_sdk_contract.py

feat(extensions): deliver runtime ESM frontends to production panels (#39)

2026-07-22 17:24:36 -04:00

test_search.py

feat(search): unified entity omnisearch endpoint for the palette

2026-07-11 00:26:40 -04:00

test_secrets_webhooks_authz.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

test_security_clamav.py

Add ClamAV start action and UI posture fixes

2026-06-21 01:54:51 -04:00

test_security_feed.py

feat(security): daily GHSA feed check with admin notifications

2026-08-02 18:35:25 -04:00

test_security_headers.py

feat(security): gate panel HSTS on installer SSL mode (keep HTTPS optional)

2026-06-19 16:52:40 -04:00

test_security_policy.py

fix(recovery): rebuild authz-R2 policy + notification digests/chat webhooks

2026-07-08 01:41:43 -04:00

test_server_capacity.py

feat(setup): capacity-aware install profiles and resource advisory

2026-07-31 14:56:37 -04:00

test_server_onboarding.py

feat: Phase 4 polish & fleet — onboarding completion, fleet proxy, shared-resource depth, docs

2026-06-23 20:04:04 -04:00

test_server_permissions.py

feat(security): authz hardening round 2 (plan 29)

2026-07-07 20:29:24 -04:00

test_server_time_timezone.py

fix(system): report IANA timezone_id; guard chart formatting against bad zones

2026-07-01 22:55:11 -04:00

test_serverkit_gui_agent_gate.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_serverkit_installer.py

feat(installer): Phase 5 — additive Python bootstrap foundation

2026-06-25 01:06:44 -04:00

test_servers_api_pairing.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_servers_list_metrics.py

fix(api): GET /servers never sent the metrics the servers list renders

2026-08-12 05:52:37 -04:00

test_service_templates.py

test(services): catalog proving test for the template roadmap

2026-06-23 17:31:28 -04:00

test_services_alias.py

refactor(unify): §1 — single Services detail surface; /apps→/services

2026-06-24 14:06:05 -04:00

test_setup_health.py

feat(install): put a default-deny firewall and fail2ban on a stock install

2026-08-13 16:33:47 -04:00

test_setup_nag.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

test_setup_preflight.py

feat(onboarding): setup health, preflight + reconcile (plan 22)

2026-07-07 20:29:23 -04:00

test_setup_reconcile.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_setup_security.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_shared_queue_authz.py

fix(api): close IDOR/authz gaps across deployment jobs, vaults, queues, docker, databases

2026-08-04 08:53:27 -04:00

test_shared_resources.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_site_base_domains.py

feat(services): pick a base domain when giving an app a subdomain

2026-07-01 00:31:22 -04:00

test_site_import.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_site_importers_extra.py

feat(imports): panel-migration pipeline with cPanel, DirectAdmin and Hestia importers

2026-07-03 14:24:29 -04:00

test_site_routing.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_sites_https.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_sites_publishing_gaps.py

feat(sites): warn when the site base domain overlaps the panel domain

2026-06-30 23:48:28 -04:00

test_soft_delete_leaks.py

fix(domains): stop soft-delete tombstones leaking into every read path

2026-08-12 09:27:05 -04:00

test_speed_test.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_ssh_import_wiring.py

test(ssh-import): redirect APPS_DIR to tmp so create_app step passes on CI

2026-07-08 23:58:45 -04:00

test_ssh_importer.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_ssl_acme_contact.py

feat(ssl): remember one Let's Encrypt contact instead of asking every time

2026-08-13 16:22:33 -04:00

test_ssl_certbot_resolution.py

fix(ssl): resolve certbot outside $PATH and preflight the nginx plugin

2026-08-13 15:59:47 -04:00

test_ssl_unified_surface.py

refactor(unify): §5 — single SSL surface (basic + advanced)

2026-06-24 14:40:08 -04:00

test_status_extraction.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_support_bundle.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_survey_api.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_survey_catalog.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_survey_service.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

test_telemetry.py

Truncate large telemetry payloads & UI robustness fixes

2026-06-22 01:45:15 -04:00

test_template_catalog_validation.py

feat(databases): install any engine, because an engine is just a template

2026-07-25 20:09:05 -04:00

test_template_files_render.py

fix(templates): only bind-mount absolute file paths; relative files are build-context only

2026-07-21 23:26:13 -04:00

test_template_magic_vars.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

test_template_registry_cache.py

perf(templates): cache parsed local templates on file mtime

2026-08-06 09:32:40 -04:00

test_template_repo_kind.py

feat(templates): deploy templates as a backend repo-kind catalog entry

2026-07-10 02:38:46 -04:00

test_template_repo_sync.py

fix(templates): point the default repo at a host that exists, and verify what it sends

2026-08-06 00:33:46 -04:00

test_theme_registry.py

feat(themes): hardening — preview validation, registry caching, token wiring (plan 61)

2026-07-23 09:25:01 -04:00

test_themes.py

feat(themes): hardening — preview validation, registry caching, token wiring (plan 61)

2026-07-23 09:25:01 -04:00

test_tramo_panel_core.py

refactor(extensions): extract seven builtins to standalone repos

2026-07-20 01:16:16 -04:00

test_trusted_client_ip.py

perf(tests): build the Flask app once per session, not once per test

2026-08-06 02:59:14 -04:00

test_url_swap.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_utils_system_integration.py

Move EXPECTED_MANAGER check into pytest test

2026-02-10 16:03:19 -05:00

test_utils_system.py

fix(system): put a ceiling on every privileged subprocess call

2026-07-25 05:41:00 -04:00

test_views.py

feat(views): per-user saved table views API

2026-08-09 02:32:55 -04:00

test_waf.py

feat(security): per-app WAF (ModSecurity v3 + OWASP CRS)

2026-06-19 14:02:24 -04:00

test_workspace_scope.py

test: split WP suites — extension-owned move to serverkit-wordpress

2026-08-05 02:38:41 -04:00

test_workspace_scoping_matrix.py

test(recovery): restore 18 lost proving-test suites from pyc trove (plan 42 ph1)

2026-07-09 04:41:00 -04:00

test_wp_hook_inversions.py

fix(tests): the "absent extension" seam test named a real extension

2026-08-12 21:48:21 -04:00

test_yara_scan.py

feat(security): job-backed malware scans with a web-shell YARA pass

2026-07-03 15:21:23 -04:00