busya 20071b8c7a security: fullstack hardening — task ownership, mapping validation, API-key scoping, test fixes ...

Backend:
- Add validate_mapping_database_ownership() to verify source/target UUIDs
  belong to declared environments before persisting mappings (mappings.py)
- Add API-key environment scoping to get_mappings (filter) and
  suggest_mappings_api (enforce) (mappings.py)
- Add user_id Column to TaskRecord model + Alembic migration (task.py)
- Persist task.user_id on save, restore on load (persistence.py)
- Wire current_user.id into migrate_dashboards + backup_dashboards
  task creation (_action_routes.py)
- Fix test_migration_routes.py: module-level patch leak → autouse fixture,
  SupersetClient→AsyncSupersetClient, AsyncMock for sync_environment/run
- Fix 7 Pydantic serializer warnings: 'PENDING'→TaskStatus.PENDING
  in test_tasks.py + import TaskStatus

Frontend:
- Deepen isDryRunResult(): validate selection field, risk.items entries
  (all 5 fields), and diff object uuids individually (ExecutorModel.svelte.ts)

Prior work included: task password redaction, resume ownership checks,
canonical dry-run DTO alignment, migration UI callback fixes, credential
exposure reduction, assistant dry-run await fix.

2026-07-15 23:02:23 +03:00

..

migration

037: fix 99 failing tests — missing await after async migration

2026-06-05 15:43:35 +03:00

superset_client

security: fullstack hardening — task ownership, mapping validation, API-key scoping, test fixes

2026-07-15 23:02:23 +03:00

task_manager

test: 8 parallel agents — fix 150+ failures, add 30+ test files. schemas/models 99-100%, core/client_registry ~98%, maintenance 95-98%, git edges 97%, translate 98-100%, dashboard routes 95-96%, dataset_review 100%

2026-06-15 17:31:43 +03:00

test_async_client.py

032: final — tombstones, tests, cleanup

2026-06-04 20:57:20 +03:00

test_async_job_runner_integration.py

fix(core): centralize async/sync bridge for APScheduler scheduled jobs

2026-06-17 16:22:30 +03:00

test_async_job_runner.py

fix(core): centralize async/sync bridge for APScheduler scheduled jobs

2026-06-17 16:22:30 +03:00

test_async_regression.py

test(backend): add 55+ test files to push coverage to 98%

2026-06-15 13:55:57 +03:00

test_auth_logger.py

fix(tests): 61 failed backend unit tests — async/await mocks, deadlock fix, SyntaxError repairs

2026-06-18 14:41:13 +03:00

test_client_registry.py

test(core): add unit tests for 7 core utility modules

2026-06-10 14:56:48 +03:00

test_core_config_manager.py

fix(git): fix 17 missing async/await bugs + UX overhaul

2026-07-01 20:47:25 +03:00

test_core_database.py

refactor: remove rejected dataset review feature

2026-07-14 15:56:31 +03:00

test_core_db_executor.py

test(backend): add 55+ test files to push coverage to 98%

2026-06-15 13:55:57 +03:00

test_core_fileio.py

fix(agent): resolve ModuleNotFoundError for backend, add E2E test infra

2026-06-14 15:41:46 +03:00

test_cot_logger.py

feat(agent-centric-logging): consolidate CoT infra in shared, close REASON→REFLECT chains

2026-07-12 19:30:57 +03:00

test_defensive_guards.py

chore: update backend tests

2026-06-16 12:01:03 +03:00

test_encryption.py

perf: fix translate deadlock, speed, trace_id, UI bugs — fullstack patch

2026-06-18 23:54:57 +03:00

test_executors.py

test(core): add unit tests for 7 core utility modules

2026-06-10 14:56:48 +03:00

test_fileio_async.py

032: Phase 5 (T036-T039) + Phase 6 (T040-T044) completed

2026-06-04 20:30:43 +03:00

test_fileio_utils.py

feat: add backup integrity verification

2026-07-14 16:05:28 +03:00

test_git_service_gitea_pr.py

chore: eliminate all deprecation warnings from tests and linter

2026-05-26 19:18:28 +03:00

test_mapping_service.py

fix(core): centralize async/sync bridge for APScheduler scheduled jobs

2026-06-17 16:22:30 +03:00

test_migration_engine.py

test(app): add split app.py tests and extend migration_engine coverage

2026-06-10 14:57:18 +03:00

test_rate_limiter.py

fix(agent): resolve ModuleNotFoundError for backend, add E2E test infra

2026-06-14 15:41:46 +03:00

test_scheduler.py

security: fullstack hardening — task ownership, mapping validation, API-key scoping, test fixes

2026-07-15 23:02:23 +03:00

test_superset_client_async.py

032: dead code cleanup — remove sync APIClient, _llm_http, preview_llm_client, fix retry chains

2026-06-05 08:31:18 +03:00

test_timezone.py

fix(agent): resolve ModuleNotFoundError for backend, add E2E test infra

2026-06-14 15:41:46 +03:00