mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-09 13:35:12 +09:00
The three restore-point read routes authenticated with bare @jwt_required(), pushing the census to 579 against a 577 ceiling. They now use the auth_required() policy door like the file's mutating routes (which already accept API keys via @developer_required), keeping read access consistent with write access for API-key callers; scope authorization stays in-route. test_restore_point_env.py hand-rolled Application/User seeds — switched to the make_application/make_user factories. Migration inventory regenerated. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>