Juan DenisandClaude Fable 5 75db466096 fix(pairing): require developer role for claim/lookup (audit L1) ...

Pairing /claim creates a fleet server and /lookup reveals a pending agent's
details; both were @jwt_required() only, so any authenticated user (incl. a
read-only viewer) could use them. Gate both with @developer_required to match
POST /servers. Test: viewer 403, developer clears the gate.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-12 18:35:43 -04:00

..

conftest.py

Auth key usage, sudo user option, test path fix

2026-03-04 03:20:23 -05:00

test_agent_features_honest.py

fix(plugins): make plugin/template features fail honestly, not silently (audit H2)

2026-06-12 18:35:35 -04:00

test_agent_poll_e2e.py

test(agent): end-to-end test for the panel<->agent command loop

2026-06-12 17:31:26 -04:00

test_agent_poll_ratelimit.py

fix(agent): rate-limit the poll /connect auth path

2026-05-31 14:46:47 -04:00

test_agent_registry_security.py

fix(agent): fail-closed agent registration + surface stuck-command errors

2026-05-31 16:08:13 -04:00

test_agent_update_authz.py

fix(servers): require developer role for agent self-update (audit H3)

2026-06-12 17:33:29 -04:00

test_ai_assistant.py

feat(ai): add core AI assistant primitive powered by Prompture

2026-06-01 02:39:05 -04:00

test_audit_log.py

Add audit fallback, builtin extensions, and ports

2026-05-03 15:57:02 -04:00

test_connection_string.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_pairing_authz.py

fix(pairing): require developer role for claim/lookup (audit L1)

2026-06-12 18:35:43 -04:00

test_pairing_pop.py

fix(pairing): verify Ed25519 proof-of-possession on pairing poll

2026-05-31 16:08:32 -04:00

test_repository_manifest_service.py

Add repository manifest detection and templates

2026-05-03 07:07:57 -04:00

test_resource_grants.py

feat(workspaces): make python.py grant-aware — every app blueprint now covered (#33)

2026-06-05 23:08:44 -04:00

test_server_permissions.py

Remote Docker remove, normalize API & permissions

2026-04-29 00:11:46 -04:00

test_servers_api_pairing.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_utils_system_integration.py

Move EXPECTED_MANAGER check into pytest test

2026-02-10 16:03:19 -05:00

test_utils_system.py

Silence Bandit and mock sudo/posix in tests

2026-03-04 02:54:14 -05:00

test_workspace_scope.py

feat(workspaces): scope the WordPress sites hub to the active workspace (#33)

2026-06-01 11:15:15 -04:00

test_wp_reports.py

feat(wordpress): monthly client reports — persisted per-month rollups (#33)

2026-06-01 03:04:03 -04:00