Chris CoutinhoandClaude Opus 4.8 18baa501c9 test: address round-2 claude-review on #883 ...

- pact.yml: guard `can-i-deploy` job on `env.PACT_BROKER != ''` so a secret
  rotation/fork can't break every master merge (the CLI errors on empty URL)
- pact.yml: pin install.sh to the v2.6.1 commit SHA (immune to tag force-push)
- astrolabe_client.py: `_token_cache` Optional[dict] -> `dict | None` and drop
  the now-unused `Optional` import (CLAUDE.md union syntax)
- add tests/unit/test_astrolabe_client.py: mocked unit coverage for
  get_background_sync_status field mapping (200 provisioned / 200 not-provisioned
  / 404) — the layer that would have caught the original silent app_password bug
- consumer pact test: note the 404 branch is internal defensive handling (covered
  by the unit test), not a contract obligation

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-10 20:53:54 +02:00

..

static

feat: add Tailscale Funnel config for Claude AI connector testing

2026-03-29 21:00:00 +02:00

templates

fix(auth): address PR #758 review — XSS, CSRF, open redirect, JWKS cache

2026-05-02 18:26:39 +02:00

__init__.py

feat: Implement ADR-005 unified token verifier to eliminate token passthrough vulnerability

2025-11-05 18:53:14 +01:00

astrolabe_client.py

test: address round-2 claude-review on #883

2026-06-10 20:53:54 +02:00

bearer_auth.py

feat(server): Experimental support for OAuth2/OIDC authentication

2025-10-14 01:22:15 +02:00

browser_oauth_routes.py

fix(auth): address PR #758 round-7 medium/minor review

2026-05-03 14:21:12 +02:00

client_registration.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

client_registry.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

context_helper.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

elicitation.py

fix(auth): address PR #757 round-3 review feedback

2026-05-02 17:24:50 +02:00

login_flow.py

fix(auth): login-flow provisioning — public login_url + session app passwords

2026-05-28 23:06:11 +02:00

oauth_routes.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

permissions.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

provision_routes.py

fix(auth): login-flow provisioning — public login_url + session app passwords

2026-05-28 23:06:11 +02:00

provisioning_decorator.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

scope_authorization.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

session_backend.py

fix(auth): address PR #758 round-7 medium/minor review

2026-05-03 14:21:12 +02:00

storage.py

feat(usage): record per-tenant usage events into the app DB

2026-06-07 15:13:14 +02:00

token_broker.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

token_utils.py

fix(auth): address PR #758 round-6 medium/low review

2026-05-03 13:03:49 +02:00

unified_verifier.py

refactor: convert f-string logging to lazy %-style format (G004)

2026-05-13 01:12:17 +02:00

userinfo_routes.py

feat: harmonize MCP tool + userinfo page to documents/chunks model

2026-06-04 20:28:44 +02:00

viz_routes.py

fix(search): address review feedback on multi-folder path filter

2026-06-03 13:03:42 +02:00

webhook_routes.py

fix(webhooks): escape webhook_uri, lazy logging, document 401 header omission

2026-04-30 14:37:34 +02:00