chihlasm 09118ae377 fix: CRITICAL — scope copilot tree query to current account ...

A user who knew another account's tree UUID could start a copilot
conversation, causing the tree's full node structure, names, and
descriptions to be sent to the AI as part of the system prompt.

Fix: add account_id (or is_default / visibility='public') filter to
the tree SELECT in copilot_service.start_conversation(). Returns 404
for inaccessible trees. Test added in test_tenant_isolation_p0.py.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-09 03:41:48 +00:00

..

conftest.py

feat: wire PDF and text file content into AI chat messages

2026-03-27 21:02:56 +00:00

test_account_lifecycle.py

feat: Slate & Ice Modern aesthetic redesign (#94)

2026-03-04 20:44:25 -05:00

test_account_management.py

feat: update all endpoints and schemas for account-based model

2026-02-07 02:39:01 -05:00

test_account_transfer.py

feat: Slate & Ice Modern aesthetic redesign (#94)

2026-03-04 20:44:25 -05:00

test_admin_audit_logs.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin_categories_global.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin_dashboard.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin_feature_flags.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin_gallery.py

feat(gallery): add admin gallery curation endpoints and management page (Task 6)

2026-03-19 20:04:40 +00:00

test_admin_plan_limits.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin_settings.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin.py

feat: update all endpoints and schemas for account-based model

2026-02-07 02:39:01 -05:00

test_ai_chat.py

fix: resolve CI failures — ESLint unused vars and AI chat tests in CI

2026-03-01 14:21:48 -05:00

test_ai_delta_response.py

feat: flow export/import + procedural Flow Assist (#96)

2026-03-07 15:51:37 -05:00

test_ai_endpoints.py

refactor: migrate AI tree generator to provider abstraction

2026-02-26 17:20:48 -05:00

test_ai_fix_endpoint.py

feat: add POST /ai/fix-tree endpoint for AI-powered validation fixes

2026-02-26 17:25:38 -05:00

test_ai_fix_service.py

feat: add AI fix service with prompt building and validation

2026-02-26 17:25:34 -05:00

test_ai_provider.py

fix: use correct google-genai async API and remove debug endpoint

2026-02-27 00:08:20 -05:00

test_ai_suggestions.py

feat: flow export/import + procedural Flow Assist (#96)

2026-03-07 15:51:37 -05:00

test_ai_tree_validator.py

feat: relax decision option validation — allow cross-references to any node in tree

2026-02-28 19:18:02 -05:00

test_analytics_phase5.py

test(analytics): add PSA metrics endpoint tests — funnel, time entries, daily trend

2026-03-20 01:06:30 +00:00

test_analytics.py

feat: analytics dashboards & two-tier feedback system (#78)

2026-02-16 15:23:14 -05:00

test_auth_profile.py

feat: Slate & Ice Modern aesthetic redesign (#94)

2026-03-04 20:44:25 -05:00

test_auth.py

feat: update all endpoints and schemas for account-based model

2026-02-07 02:39:01 -05:00

test_batch_sessions.py

fix: add auth guards, optimize refresh loop, and improve batch session tests

2026-02-17 12:29:04 -05:00

test_branch_aware_prompt_builder.py

feat: add BranchAwarePromptBuilder with unit tests

2026-03-24 08:36:13 +00:00

test_branch_manager.py

feat: add BranchManager service with integration tests

2026-03-24 08:34:49 +00:00

test_branding.py

feat: add team branding CRUD endpoints with tests

2026-03-17 00:12:00 -04:00

test_config_model_tiers.py

feat: flow export/import + procedural Flow Assist (#96)

2026-03-07 15:51:37 -05:00

test_draft_trees.py

feat: AI-assisted flow builder with 4-stage wizard (#87)

2026-02-23 00:03:54 -05:00

test_email_verification.py

feat: Slate & Ice Modern aesthetic redesign (#94)

2026-03-04 20:44:25 -05:00

test_export_security.py

test: add export security tests and CI coverage reporting

2026-02-08 14:53:22 -05:00

test_feedback.py

test: add feedback endpoint tests including DB persistence

2026-02-18 17:56:29 -05:00

test_handoff_manager.py

feat: add HandoffManager service with dual-write and integration tests

2026-03-24 08:42:21 +00:00

test_invite_plan.py

feat: admin invite codes with plan assignment + user detail page

2026-02-11 21:42:58 -05:00

test_kb_accelerator.py

fix: KB tree builder — post-build repair, validation gate, and root ID handling

2026-03-11 02:53:55 -04:00

test_maintenance_schedules.py

fix: stabilize maintenance flow run/resume and procedural scrolling

2026-02-17 20:12:07 -05:00

test_maintenance_tree_type.py

refactor: extract PROCEDURAL_TREE_TYPES constant and add negative tree_type test

2026-02-17 10:54:39 -05:00

test_onboarding.py

feat: add onboarding status and dismiss endpoints with tests

2026-03-17 00:05:28 -04:00

test_pdf_export.py

feat: add PDF export generation via WeasyPrint with branded template

2026-03-17 00:28:22 -04:00

test_permissions_account.py

fix: repair all test fixtures - add missing solution fields and fix httpx API

2026-02-08 14:21:29 -05:00

test_permissions_unit.py

test: add 113 unit tests for permissions, tree validation, and settings

2026-02-08 17:58:48 -05:00

test_procedural_flows.py

feat: flexible intake — deferred variables + prepared sessions (#103)

2026-03-10 09:49:51 -04:00

test_psa_connections.py

feat: ConnectWise PSA integration (#106)

2026-03-15 01:45:35 -04:00

test_psa_encryption.py

feat: ConnectWise PSA integration (#106)

2026-03-15 01:45:35 -04:00

test_psa_export.py

test: add Phase B tests for custom markers, detail levels, and summary block

2026-02-13 13:12:52 -05:00

test_public_templates.py

feat(public-gallery): add public templates gallery API (Tasks 2 & 3)

2026-03-19 19:12:34 +00:00

test_ratings.py

feat: analytics dashboards & two-tier feedback system (#78)

2026-02-16 15:23:14 -05:00

test_redaction_service.py

feat: add sensitive data redaction to export (Phase C)

2026-02-14 00:11:20 -05:00

test_resolution_outputs.py

feat: add ResolutionOutputGenerator with three-output generation

2026-03-24 08:46:29 +00:00

test_save_session_as_tree.py

feat: AI-assisted flow builder with 4-stage wizard (#87)

2026-02-23 00:03:54 -05:00

test_script_builder.py

fix: give test user a real team in test_shared_filter

2026-03-27 20:32:25 +00:00

test_script_template_engine.py

feat: Script Generator Phase 1+2 — backend, engine, API, frontend, template editor, parameter detector

2026-03-14 20:18:59 -04:00

test_script_templates.py

feat: Script Generator Phase 1+2 — backend, engine, API, frontend, template editor, parameter detector

2026-03-14 20:18:59 -04:00

test_scripts.py

fix: resolve final 5 backend test failures

2026-03-27 19:37:49 +00:00

test_security_headers.py

feat: add security headers middleware with report-only CSP

2026-03-18 02:38:42 +00:00

test_session_branches_api.py

fix: resolve final 5 backend test failures

2026-03-27 19:37:49 +00:00

test_session_handoffs_api.py

feat: add handoff API endpoints with queue and integration tests

2026-03-24 08:43:32 +00:00

test_session_resolutions_api.py

feat: add resolution output API endpoints

2026-03-24 08:47:09 +00:00

test_session_sharing.py

feat: add tree forking, custom step tracking, and session sharing

2026-02-07 19:10:47 -05:00

test_sessions.py

feat: close sessions from history page with inline popover

2026-03-11 01:59:12 -04:00

test_settings_manager.py

test: add 113 unit tests for permissions, tree validation, and settings

2026-02-08 17:58:48 -05:00

test_sidebar_stats.py

feat: sidebar redesign — activity feed, grouped nav, AI split (#107)

2026-03-16 01:35:16 -04:00

test_step_sync.py

feat: Step Library sync + service account for default tree ownership

2026-02-25 23:17:29 -05:00

test_subscription_limits.py

fix: repair all test fixtures - add missing solution fields and fix httpx API

2026-02-08 14:21:29 -05:00

test_supporting_data.py

feat: add supporting data CRUD endpoints with tests

2026-03-17 00:22:40 -04:00

test_survey.py

feat: admin survey responses page with expandable detail and CSV export

2026-03-05 07:55:49 -05:00

test_target_lists.py

fix: clean migration, cross-team isolation test, and PUT field-set fix for target_lists

2026-02-17 11:29:25 -05:00

test_tenant_isolation_p0.py

fix: CRITICAL — scope copilot tree query to current account

2026-04-09 03:41:48 +00:00

test_tree_forking.py

feat: add tree forking, custom step tracking, and session sharing

2026-02-07 19:10:47 -05:00

test_tree_markdown.py

feat: add dual-mode tree editor with Code Mode, variables, and markdown sync

2026-02-10 09:45:26 -05:00

test_tree_sharing.py

feat: implement tree sharing, draft trees, and session-to-tree conversion (Issues #16, #25, #17)

2026-02-07 23:06:13 -05:00

test_tree_transfer.py

feat: flow export/import + procedural Flow Assist (#96)

2026-03-07 15:51:37 -05:00

test_tree_validation.py

feat: AI-assisted flow builder with 4-stage wizard (#87)

2026-02-23 00:03:54 -05:00

test_trees.py

feat: AI flow builder, visibility model, dashboard tabs, fork UI (#88)

2026-02-24 07:40:44 -05:00

test_uploads.py

feat: add .docx upload support with text extraction

2026-03-27 21:08:12 +00:00

test_variable_service.py

feat: add dual-mode tree editor with Code Mode, variables, and markdown sync

2026-02-10 09:45:26 -05:00