Michael Chihlas 7a5b853b3b feat(api): role-gate handoff claim to engineer-or-admin ...

POST /ai-sessions/{id}/handoffs/{hid}/claim previously required only an
authenticated user, so a viewer-role account user could claim escalations.
Codex review flagged this as wedge-relevant: the Escalation Mode race-
condition story (two seniors clicking Pick Up simultaneously) depends on
auth gating for audit integrity. Originally captured as a deferred TODO
during /plan-eng-review, then moved in-scope by /codex review.

Swap the dep to require_engineer_or_admin. One-line change. Two new tests:
- viewer_role gets 403 with "Engineer or admin access required"
- engineer/owner role still succeeds and claimed_at + claimed_by populate

Existing handoff create + queue tests unaffected.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-27 15:46:59 -04:00

..

conftest.py

perf(ci): pytest-xdist with per-worker DBs — 22m → ~4m

2026-04-25 15:53:47 -04:00

test_account_lifecycle.py

feat: Slate & Ice Modern aesthetic redesign (#94)

2026-03-04 20:44:25 -05:00

test_account_management.py

feat: update all endpoints and schemas for account-based model

2026-02-07 02:39:01 -05:00

test_account_transfer.py

feat: Slate & Ice Modern aesthetic redesign (#94)

2026-03-04 20:44:25 -05:00

test_admin_audit_logs.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin_categories_global.py

fix(tests): update expectations for RLS-correct behavior

2026-04-12 03:48:30 +00:00

test_admin_dashboard.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin_feature_flags.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin_gallery.py

fix: propagate account_id through all write paths missing NOT NULL coverage

2026-04-11 04:24:36 +00:00

test_admin_plan_limits.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin_settings.py

feat: implement full admin panel with dashboard, user management, and platform settings

2026-02-08 06:05:59 -05:00

test_admin.py

feat: extract admin account management rework from PR 124 (#138)

2026-04-13 04:44:51 -04:00

test_ai_chat.py

fix: resolve CI failures — ESLint unused vars and AI chat tests in CI

2026-03-01 14:21:48 -05:00

test_ai_delta_response.py

feat: flow export/import + procedural Flow Assist (#96)

2026-03-07 15:51:37 -05:00

test_ai_endpoints.py

wip(handoff): restore backend suite to green

2026-04-25 06:13:23 -04:00

test_ai_fix_endpoint.py

feat: add POST /ai/fix-tree endpoint for AI-powered validation fixes

2026-02-26 17:25:38 -05:00

test_ai_fix_service.py

feat: add AI fix service with prompt building and validation

2026-02-26 17:25:34 -05:00

test_ai_provider.py

fix: use correct google-genai async API and remove debug endpoint

2026-02-27 00:08:20 -05:00

test_ai_suggestions.py

feat: flow export/import + procedural Flow Assist (#96)

2026-03-07 15:51:37 -05:00

test_ai_tree_validator.py

feat: relax decision option validation — allow cross-references to any node in tree

2026-02-28 19:18:02 -05:00

test_analytics_phase5.py

fix: propagate account_id through all write paths missing NOT NULL coverage

2026-04-11 04:24:36 +00:00

test_analytics.py

feat: analytics dashboards & two-tier feedback system (#78)

2026-02-16 15:23:14 -05:00

test_auth_profile.py

feat: Slate & Ice Modern aesthetic redesign (#94)

2026-03-04 20:44:25 -05:00

test_auth.py

feat: update all endpoints and schemas for account-based model

2026-02-07 02:39:01 -05:00

test_batch_sessions.py

fix: add auth guards, optimize refresh loop, and improve batch session tests

2026-02-17 12:29:04 -05:00

test_branch_aware_prompt_builder.py

feat: add BranchAwarePromptBuilder with unit tests

2026-03-24 08:36:13 +00:00

test_branch_manager.py

wip(handoff): restore backend suite to green

2026-04-25 06:13:23 -04:00

test_branding.py

fix: propagate account_id through all write paths missing NOT NULL coverage

2026-04-11 04:24:36 +00:00

test_config_model_tiers.py

feat: flow export/import + procedural Flow Assist (#96)

2026-03-07 15:51:37 -05:00

test_draft_trees.py

fix: propagate account_id through all write paths missing NOT NULL coverage

2026-04-11 04:24:36 +00:00

test_email_verification.py

feat: Slate & Ice Modern aesthetic redesign (#94)

2026-03-04 20:44:25 -05:00

test_export_security.py

test: add export security tests and CI coverage reporting

2026-02-08 14:53:22 -05:00

test_feedback.py

test: add feedback endpoint tests including DB persistence

2026-02-18 17:56:29 -05:00

test_fix_outcome_endpoint.py

fix(pilot): persist AI-proposal rejection + clear on outcome write

2026-04-23 22:15:48 -04:00

test_fix_outcome_marker.py

feat(pilot): [FIX_OUTCOME] marker parser + AI outcome proposal

2026-04-23 15:08:43 -04:00

test_fix_script_endpoint.py

feat(pilot): PATCH /suggested-fixes/:id/script endpoint

2026-04-24 02:34:06 -04:00

test_flowpilot_analytics_escalations.py

feat(analytics): add escalation time-to-first-action metric endpoint

2026-04-27 15:25:46 -04:00

test_handoff_manager.py

feat: add HandoffManager service with dual-write and integration tests

2026-03-24 08:42:21 +00:00

test_invite_plan.py

feat: admin invite codes with plan assignment + user detail page

2026-02-11 21:42:58 -05:00

test_kb_accelerator.py

fix: KB tree builder — post-build repair, validation gate, and root ID handling

2026-03-11 02:53:55 -04:00

test_maintenance_schedules.py

fix: propagate account_id through all write paths missing NOT NULL coverage

2026-04-11 04:24:36 +00:00

test_maintenance_tree_type.py

refactor: extract PROCEDURAL_TREE_TYPES constant and add negative tree_type test

2026-02-17 10:54:39 -05:00

test_network_diagrams.py

feat: extract network map builder from PR 124 (#137)

2026-04-13 02:38:01 -04:00

test_onboarding.py

feat: add onboarding status and dismiss endpoints with tests

2026-03-17 00:05:28 -04:00

test_pdf_export.py

feat: add PDF export generation via WeasyPrint with branded template

2026-03-17 00:28:22 -04:00

test_permissions_account.py

fix(tests): update expectations for RLS-correct behavior

2026-04-12 03:48:30 +00:00

test_permissions_unit.py

test: add 113 unit tests for permissions, tree validation, and settings

2026-02-08 17:58:48 -05:00

test_phase1_migrations.py

fix: tree_shares.account_id must come from tree owner, not the actor

2026-04-11 07:02:35 +00:00

test_phase5_inline_script.py

feat(pilot): Phase 5 — inline Script Generator integration

2026-04-22 00:15:29 -04:00

test_phase6_draft_templates.py

feat(pilot): Phase 6 — post-resolve templatize prompt + draft accept/reject

2026-04-22 02:37:49 -04:00

test_procedural_flows.py

feat: flexible intake — deferred variables + prepared sessions (#103)

2026-03-10 09:49:51 -04:00

test_prompt_anti_parrot.py

feat(pilot): [FIX_OUTCOME] system prompt instructions

2026-04-23 15:17:21 -04:00

test_psa_connections.py

feat: ConnectWise PSA integration (#106)

2026-03-15 01:45:35 -04:00

test_psa_encryption.py

feat: ConnectWise PSA integration (#106)

2026-03-15 01:45:35 -04:00

test_psa_export.py

test: add Phase B tests for custom markers, detail levels, and summary block

2026-02-13 13:12:52 -05:00

test_psa_tickets.py

feat(psa): add spin-off ticket system prompt rule, backend routing tests

2026-04-16 03:01:21 +00:00

test_psa_writeback_phase4.py

wip(handoff): restore backend suite to green

2026-04-25 06:13:23 -04:00

test_public_templates.py

fix: propagate account_id through all write paths missing NOT NULL coverage

2026-04-11 04:24:36 +00:00

test_ratings.py

feat: analytics dashboards & two-tier feedback system (#78)

2026-02-16 15:23:14 -05:00

test_redaction_service.py

feat: add sensitive data redaction to export (Phase C)

2026-02-14 00:11:20 -05:00

test_resolution_outputs.py

fix: propagate account_id through all write paths missing NOT NULL coverage

2026-04-11 04:24:36 +00:00

test_rls_isolation.py

chore(tests): gate RLS tests behind RUN_RLS_TESTS flag

2026-04-24 16:09:13 -04:00

test_save_session_as_tree.py

fix: propagate account_id through all write paths missing NOT NULL coverage

2026-04-11 04:24:36 +00:00

test_script_builder_inline.py

feat(pilot): inline Script Builder session — idempotent create + auth + filtered list

2026-04-24 02:24:57 -04:00

test_script_builder.py

wip(handoff): restore backend suite to green

2026-04-25 06:13:23 -04:00

test_script_template_engine.py

feat: Script Generator Phase 1+2 — backend, engine, API, frontend, template editor, parameter detector

2026-03-14 20:18:59 -04:00

test_script_templates.py

fix: persist account ownership for script templates and generations

2026-04-09 17:18:38 +00:00

test_scripts.py

fix: persist account ownership for script templates and generations

2026-04-09 17:18:38 +00:00

test_security_headers.py

feat: add security headers middleware with report-only CSP

2026-03-18 02:38:42 +00:00

test_service_account.py

fix: bootstrap service account with BYPASSRLS session

2026-04-12 02:44:36 +00:00

test_session_branches_api.py

wip(handoff): restore backend suite to green

2026-04-25 06:13:23 -04:00

test_session_facts_api.py

feat(pilot): Phase 2 — What we know (facts) with stable task-lane IDs

2026-04-21 21:13:44 -04:00

test_session_handoffs_api.py

feat(api): role-gate handoff claim to engineer-or-admin

2026-04-27 15:46:59 -04:00

test_session_resolutions_api.py

wip(handoff): restore backend suite to green

2026-04-25 06:13:23 -04:00

test_session_sharing.py

wip(handoff): restore backend suite to green

2026-04-25 06:13:23 -04:00

test_session_suggested_fixes_api.py

fix(ci): mock AI provider in record_decision test + cache pip/npm + drop term-missing

2026-04-25 12:01:05 -04:00

test_sessions.py

feat: close sessions from history page with inline popover

2026-03-11 01:59:12 -04:00

test_settings_manager.py

test: add 113 unit tests for permissions, tree validation, and settings

2026-02-08 17:58:48 -05:00

test_sidebar_stats.py

feat: sidebar redesign — activity feed, grouped nav, AI split (#107)

2026-03-16 01:35:16 -04:00

test_step_sync.py

feat: Step Library sync + service account for default tree ownership

2026-02-25 23:17:29 -05:00

test_subscription_limits.py

fix: repair all test fixtures - add missing solution fields and fix httpx API

2026-02-08 14:21:29 -05:00

test_supporting_data.py

feat: add supporting data CRUD endpoints with tests

2026-03-17 00:22:40 -04:00

test_survey.py

feat: admin survey responses page with expandable detail and CSV export

2026-03-05 07:55:49 -05:00

test_target_lists.py

feat: tenant isolation Phase 3 — audit_logs, tree_shares, remaining RLS

2026-04-11 07:02:35 +00:00

test_tenant_context.py

feat: add require_tenant_context and require_admin_db dependencies

2026-04-10 03:50:59 +00:00

test_tenant_isolation_p0.py

wip(handoff): restore backend suite to green

2026-04-25 06:13:23 -04:00

test_tree_forking.py

feat: add tree forking, custom step tracking, and session sharing

2026-02-07 19:10:47 -05:00

test_tree_markdown.py

feat: add dual-mode tree editor with Code Mode, variables, and markdown sync

2026-02-10 09:45:26 -05:00

test_tree_sharing.py

wip(handoff): restore backend suite to green

2026-04-25 06:13:23 -04:00

test_tree_transfer.py

feat: flow export/import + procedural Flow Assist (#96)

2026-03-07 15:51:37 -05:00

test_tree_validation.py

feat: AI-assisted flow builder with 4-stage wizard (#87)

2026-02-23 00:03:54 -05:00

test_trees.py

fix: get_tree returns 404 (not 403) for inaccessible trees — don't leak resource existence

2026-04-10 04:17:31 +00:00

test_uploads.py

wip(handoff): restore backend suite to green

2026-04-25 06:13:23 -04:00

test_variable_service.py

feat: add dual-mode tree editor with Code Mode, variables, and markdown sync

2026-02-10 09:45:26 -05:00