Spaces:
Running
Running
Commit History
9 days ago
-
Replace ineffective collaborator authorization tests with async regressions
Verified signature72e3bad -
Document explicit operator onboarding for Studio identities
Verified signatureb806db1 -
Add explicit operator-controlled Studio user provisioning
Verified signaturee06816a -
Restrict workspace invitations and membership role changes
Verified signature4c08f3a -
Pass authenticated actor to workspace invitation authorization
Verified signaturebdd5f1d -
Add regression tests for workspace-scoped approval service calls
Verified signature379008f -
Enforce workspace scope in approval service operations
Verified signature5d99e9f -
Scope approval persistence reads and writes to workspace
Verified signature35bd705 -
Require workspace scope for project collaborator operations
Verified signatured400336 -
Enforce workspace ownership for project collaborators
Verified signature425020d -
Scope approval and project collaborator endpoints to authenticated workspace
Verified signature766854b -
test: align signature fixture with newline-delimited HMAC
Verified signatured2833fd -
test: fix canonical HMAC newline in fixture
Verified signature3fad031 -
test: clean up SQLAlchemy test query
Verified signature18f6622 -
test: cover inactive Studio tenant identities
Verified signature049beed -
docs: document Studio identity and tenant isolation setup
Verified signature27f84dc -
Align identity tests with Studio signature format
Verified signatureTest the same newline-separated HMAC canonicalization used by the Studio proxy.e446305 -
Match Studio HMAC canonicalization
Verified signatureUse the exact newline-separated envelope format produced by the Studio proxy.a4fde0f -
Organize Studio identity regression test imports
Verified signatureKeep tenant-resolution test imports at module scope.a760c15 -
Test Studio tenant membership resolution
Verified signatureCover unique membership resolution, ambiguous workspace denial, and unknown subject fail-closed behavior.b97b02f -
Test Studio identity and privilege boundaries
Verified signatureAdd regression coverage for signed identity, tampering, expiry, and membership scope downgrade.85cfd93 -
Use membership-constrained Studio context
Verified signatureApply shared-key scope intersection via tested authorization helper.3d2941f -
Enforce role-limited Studio authorization
Verified signatureExtract role-scope intersection so membership authorization can be regression tested.c8a0391 -
Test Studio identity signature validation
Verified signatureCover valid signatures, field tampering, expired timestamps, incomplete envelopes, and weak secrets.5bceb55 -
Add Studio identity HMAC verifier
Verified signatureValidate the signed timestamped Supabase identity envelope forwarded by Studio.00c3273 -
Resolve Studio subjects through active memberships
Verified signatureFail closed for unknown users, inactive memberships, and ambiguous workspace membership.64d5cff -
Add verified Studio identity authorization
Verified signatureVerify signed Studio identity and constrain shared API-key scopes by persisted membership role.8ce9df1
10 days ago
-
Add signed Studio identity setting
Verified signatureee2f2de
11 days ago
-
Update production config tests for ORM schema initialization
Verified signature1cff605 -
Document additive ORM schema initialization
Verified signaturef299d68 -
Enable automatic ORM schema initialization
Verified signatured557c63 -
Enable ORM schema creation for missing tables
Verified signature35e09f3 -
test: keep project migration contracts aligned
Verified signature26591c4 -
fix: repair missing project brand kit column
Verified signature6ca12fe -
fix: disable asyncpg statement cache for social poolers
Verified signature77fb0a2 -
fix: disable asyncpg statement cache for postgres poolers
Verified signaturea3a768d -
fix: return proper HTTP status for security errors
Verified signaturef0b0f29 -
test: cover unified media inspection route
Verified signature96a740e -
feat: add unified media inspection endpoint
Verified signature64412b1
12 days ago
-
Test downloader size limits and partial-file cleanup
Verified signaturef29ebb0 -
Test concurrent downloader DNS pin isolation
Verified signaturebc3de6f -
Assert downloader transport preserves TLS verification
Verified signature6322513 -
Pin HTTP core for secure downloader transport
Verified signatureb719d88 -
Test DNS pin normalization and blocked redirect targets
Verified signature166e261 -
Cover unpinned hosts and redirect validation
Verified signaturea7268a6 -
Fail closed when downloader host lacks a DNS pin
Verified signaturedd641c9 -
Use HTTPX mock transport for downloader regression tests
Verified signatureaf7ae9b -
Make downloader transport creation testable
Verified signatureecae65b -
Update downloader tests for per-request DNS pins
Verified signature662f226 -
Restore complete downloader and isolate DNS pins per request
Verified signatureba98fc9