Juan DenisandClaude Opus 5 009d9c4d7f fix(ai): raise a typed error for a malformed attachment manifest ...

The attachment round added two hand-shaped `jsonify({'error': str(exc)}), 400`
returns in api/ai.py, which pushed the error-shape census to 1146 against a
ceiling of 1144 and turned shard 2 red. The census policy is not "raise the
ceiling" -- new endpoints raise, and these are new.

AttachmentValidationError now subclasses app.exceptions.ValidationError, so the
global handler owns the 400 body, the `code`, and the X-Request-ID correlation.
It is still a ValueError (ValidationError subclasses one), so every existing
`except ValueError` caller and the pytest.raises assertions in
test_ai_attachments.py are unchanged, and the two try/except blocks in the
routes disappear entirely.

Census back to 1144 = ceiling. Verified: test_ai_attachments, test_ai_assistant,
test_error_shape_ratchet all green.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-21 20:14:34 -04:00

..

schemas

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

__init__.py

Initial project structure and core API implementation

2026-01-17 04:22:12 -05:00

_query.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

admin.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

advanced_ssl.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

agent_plugins.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

agent_poll.py

refactor(agent): transport-neutral handshake + state ingest doors (plan 77 A2)

2026-08-19 02:04:29 -04:00

ai.py

fix(ai): raise a typed error for a malformed attachment manifest

2026-08-21 20:14:34 -04:00

api_analytics.py

Add Services UI and service-detail pages

2026-03-07 12:15:02 -05:00

api_keys.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

app_volumes.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

apps.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

auth.py

fix(i18n): address review — reset locale readiness, typed error for bad language, correct parity test reference

2026-08-20 19:04:09 -04:00

backups.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

bandwidth.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

buildpacks.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

builds.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

connections.py

feat(connections): authenticate private container registry pulls

2026-07-01 01:35:44 -04:00

container_status.py

fix(recovery): restore per-app route authz gating (plan 29)

2026-07-08 02:05:50 -04:00

contracts.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

cron.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

dashboards.py

feat(dashboard): boards that survive the browser they were built in

2026-07-25 19:30:51 -04:00

database_engines.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

databases.py

feat(databases): ManagedDatabase adopts SoftDelete into the Recycle Bin (plan 77 B5)

2026-08-19 05:43:53 -04:00

db_tuner.py

refactor(crypto): EncryptedSecret adoption sweep + service-level crypto ratchet (plan 77 C1)

2026-08-19 01:49:42 -04:00

ddns.py

refactor(ddns): typed errors replace the token-prose sniff

2026-08-18 23:55:17 -04:00

deploy.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

deployment_jobs.py

feat(operations): expose authoritative run actions

2026-08-21 10:34:52 -04:00

deployments.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

dns_cutover.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

dns_providers.py

fix(dns): move DNS provider routes back to core

2026-07-03 23:18:08 -04:00

dns_zones.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

docker.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

docs.py

Add API keys, analytics, webhooks, and middleware

2026-03-04 01:53:46 -05:00

doctor.py

feat(operations): adopt core run workflows

2026-08-21 10:40:42 -04:00

domains.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

env_vars.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

environments.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

error_logs.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

event_subscriptions.py

refactor(webhooks): move subscription use cases behind service boundary

2026-08-18 02:56:33 -04:00

files.py

refactor(files): file manager onto the typed-error contract (C reference)

2026-08-18 23:49:09 -04:00

firewall.py

feat(firewall): guard self-block and default-zone lockouts

2026-08-17 19:28:24 -04:00

fleet_doctor.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

fleet_monitor.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

fleet.py

Add agent capability probing and reporting

2026-05-01 00:37:48 -04:00

git.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

htaccess_tools.py

feat(hosting): .htaccess to nginx converter

2026-07-03 15:22:05 -04:00

image_updates.py

refactor(image-updates): typed errors replace the not-found prose sniff

2026-08-18 23:52:40 -04:00

invitations.py

test(api): ratchet controller boundary debt

2026-08-18 03:11:37 -04:00

jobs.py

feat(operations): expose authoritative run actions

2026-08-21 10:34:52 -04:00

linked_panel.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

logs.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

managed_db_users.py

feat(databases): managed DB users and one-click Adminer SSO

2026-07-03 14:24:15 -04:00

manifests.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

marketplace.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

metrics.py

Replace jwt_required with RBAC, use socket auth

2026-02-08 23:14:13 -05:00

migrations.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

mobile.py

fix(metrics): unknown is not zero, and zero is not unknown

2026-08-17 22:40:12 -04:00

modules.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

monitoring.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

monitors.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

nginx_advanced.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

nginx.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

notifications.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

pairing.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

performance.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

php.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

plugins.py

feat(sdk): share i18next with extensions; generate the vendor shims

2026-08-20 00:16:04 -04:00

previews.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

private_urls.py

feat(recycle-bin): applications are soft-deletable, and a delete stops keeping data hostage

2026-08-12 20:26:04 -04:00

processes.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

projects.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

proxy.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

python.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

queue_bus.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

recycle_bin.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

registrars.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

responses.py

feat(api): add typed endpoint contracts and envelopes

2026-08-18 02:47:57 -04:00

runs.py

fix(ratchets): reconcile plan-77 additions with the standing gates

2026-08-19 06:04:59 -04:00

search.py

feat(search): add resource picker contract

2026-08-21 09:20:54 -04:00

secrets_webhooks.py

refactor(secrets): vaults + webhook gateway onto the typed-error contract

2026-08-19 00:00:36 -04:00

security.py

refactor(security): malware-scan enqueue raises typed errors

2026-08-18 23:54:06 -04:00

server_templates.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

servers.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

setup_health.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

shared_resources.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

site_imports.py

feat(adoption): DNS cutover+verify, snapshots, SSH import (plan 31)

2026-07-07 20:29:26 -04:00

snapshots.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

source_connections.py

fix(auth): resolve the caller through one identity door, not the raw JWT

2026-08-18 19:33:57 -04:00

speed_test.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

ssl.py

refactor(auth): enforce one policy boundary per route

2026-08-18 02:42:39 -04:00

sso.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

support_bundle.py

fix(api): a crash the route caught must still reach /monitoring/errors

2026-08-18 20:38:20 -04:00

survey.py

feat(agent): V2 capability pack — survey/doctor/fleet sweep+repair (plan 28)

2026-07-07 20:29:24 -04:00

system.py

chore: drop the imports the door migrations orphaned

2026-08-19 10:10:40 -04:00

telemetry.py

refactor(list-queries): one PageQuery door for the page/per_page dialect (C3)

2026-08-19 00:10:09 -04:00

templates.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

test_sandbox.py

Add test sandbox and harden install scripts

2026-07-20 22:26:19 -04:00

themes.py

refactor(themes): registry install raises typed errors

2026-08-18 23:56:15 -04:00

two_factor.py

feat(auth): per-IP login brute-force throttle

2026-07-18 00:59:19 -04:00

uptime.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

views.py

refactor(views): saved views onto the typed-error contract

2026-08-18 23:51:34 -04:00

waf.py

refactor(auth): one mid-route admin gate instead of three contracts

2026-08-18 18:22:01 -04:00

webhooks.py

fix(webhooks): record the crash the PR-webhook 200 was hiding

2026-08-19 00:05:33 -04:00

workspaces.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00