Juan DenisandClaude Fable 5 3dbd234eb6 fix(ratchets): reconcile plan-77 additions with the standing gates ...

The full-suite run tripped four ratchets on plan-77's own additions —
exactly their job: /api/v1/runs moves onto auth_required (the JWT-only
ceiling holds at 605) and behind run_log_service.list_run_logs (no
model access in the controller); the core-blueprint snapshot records
runs_bp deliberately (108 -> 109 + sha); sso_service joins the crypto
allowlist (C2 dual-read lives there by design); the controller-boundary
baseline re-records the two pre-existing ManagedDatabase crossings under
their B5 query_active spelling (count unchanged).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-19 06:04:59 -04:00

..

schemas

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

__init__.py

Initial project structure and core API implementation

2026-01-17 04:22:12 -05:00

_query.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

admin.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

advanced_ssl.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

agent_plugins.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

agent_poll.py

refactor(agent): transport-neutral handshake + state ingest doors (plan 77 A2)

2026-08-19 02:04:29 -04:00

ai.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

api_analytics.py

Add Services UI and service-detail pages

2026-03-07 12:15:02 -05:00

api_keys.py

feat: Phase 1 foundation — status aggregator, API scopes, onboarding, template magic vars

2026-06-23 18:23:47 -04:00

app_volumes.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

apps.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

auth.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

backups.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

bandwidth.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

buildpacks.py

feat: Phase 2 developer experience — build packs, config snapshots, catalog certification

2026-06-23 18:49:04 -04:00

builds.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

connections.py

feat(connections): authenticate private container registry pulls

2026-07-01 01:35:44 -04:00

container_status.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

contracts.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

cron.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

dashboards.py

feat(dashboard): boards that survive the browser they were built in

2026-07-25 19:30:51 -04:00

database_engines.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

databases.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

db_tuner.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

ddns.py

refactor(ddns): typed errors replace the token-prose sniff

2026-08-18 23:55:17 -04:00

deploy.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

deployment_jobs.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

deployments.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

dns_cutover.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

dns_providers.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

dns_zones.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

docker.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

docs.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

doctor.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

domains.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

env_vars.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

environments.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

error_logs.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

event_subscriptions.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

files.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

firewall.py

feat(firewall): guard self-block and default-zone lockouts

2026-08-17 19:28:24 -04:00

fleet_doctor.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

fleet_monitor.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

fleet.py

Add agent capability probing and reporting

2026-05-01 00:37:48 -04:00

git.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

htaccess_tools.py

feat(hosting): .htaccess to nginx converter

2026-07-03 15:22:05 -04:00

image_updates.py

refactor(image-updates): typed errors replace the not-found prose sniff

2026-08-18 23:52:40 -04:00

invitations.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

jobs.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

linked_panel.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

logs.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

managed_db_users.py

feat(databases): managed DB users and one-click Adminer SSO

2026-07-03 14:24:15 -04:00

manifests.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

marketplace.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

metrics.py

Replace jwt_required with RBAC, use socket auth

2026-02-08 23:14:13 -05:00

migrations.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

mobile.py

fix(metrics): unknown is not zero, and zero is not unknown

2026-08-17 22:40:12 -04:00

modules.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

monitoring.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

monitors.py

feat(api): centralize typed errors and request correlation

2026-08-18 02:42:25 -04:00

nginx_advanced.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

nginx.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

notifications.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

pairing.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

performance.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

php.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

plugins.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

previews.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

private_urls.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

processes.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

projects.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

proxy.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

python.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

queue_bus.py

fix(queue-bus): report the crashes a local error-mapper was hiding

2026-08-18 22:12:48 -04:00

recycle_bin.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

registrars.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

responses.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

runs.py

fix(ratchets): reconcile plan-77 additions with the standing gates

2026-08-19 06:04:59 -04:00

search.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

secrets_webhooks.py

refactor(secrets): vaults + webhook gateway onto the typed-error contract

2026-08-19 00:00:36 -04:00

security.py

refactor(security): malware-scan enqueue raises typed errors

2026-08-18 23:54:06 -04:00

server_templates.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

servers.py

refactor(remote): close the dispatch_agent_command seam

2026-08-18 23:31:46 -04:00

setup_health.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

shared_resources.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

site_imports.py

feat(adoption): DNS cutover+verify, snapshots, SSH import (plan 31)

2026-07-07 20:29:26 -04:00

snapshots.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

source_connections.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

speed_test.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

ssl.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

sso.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

support_bundle.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

survey.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

system.py

feat(utils): env one-door — env_str/env_bool/env_int (plan 77 F4)

2026-08-19 02:12:45 -04:00

telemetry.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

templates.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

test_sandbox.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00

themes.py

refactor(themes): registry install raises typed errors

2026-08-18 23:56:15 -04:00

two_factor.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

uptime.py

Add server uptime tracking and visualization

2026-01-17 13:37:40 -05:00

views.py

refactor(views): saved views onto the typed-error contract

2026-08-18 23:51:34 -04:00

waf.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

webhooks.py

fix(webhooks): record the crash the PR-webhook 200 was hiding

2026-08-19 00:05:33 -04:00

workspaces.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00