curo1305
46b7ea6c12
test(12.1): verify live cloud browse integration
...
Phase 12.1 close — docs, version, and security evidence:
- Bump version 0.2.5 → 0.2.6 in backend/main.py, frontend/package.json
- CLAUDE.md: update current state to Phase 12.1 complete v0.2.6
- README.md: add Phase 12.1 corrections, live smoke variable names, Phase 13/14 exclusions
- RUNBOOK.md: add live smoke invocation, warning semantics table, fixture reconciliation procedure
- SECURITY.md: add Phase 12.1 Plan 04 threat table (T-12.1-16..20, T-12.1-SC) and gate evidence
- 12.1-VALIDATION.md: mark Plan 04 complete with final gate evidence
2026-06-22 09:46:25 +02:00
curo1305
6d294ea7e6
test(12.1): add rendered-flow integration tests and security gate evidence
...
- Add CloudFolderRenderedFlow.test.js: 7 tests mounting real CloudFolderView
with real StorageBrowser/BreadcrumbBar (only API and router stubbed)
— mixed root render, opaque-ref folder navigation, breadcrumb lineage,
warning freshness cached rows, fresh freshness, XSS text escaping
- Update 12.1-VALIDATION.md with Task 3 security gate results:
bandit 0 HIGH, npm audit 0 critical, no Phase-12.1 gitleaks findings,
595 backend / 376 frontend tests pass, build clean
2026-06-22 09:41:36 +02:00
curo1305
1ec5158c65
test(12.1): owner-confirmed expected root manifest
...
- Create backend/tests/fixtures/cloud/nextcloud_expected_root.json with
owner_confirmed: true and corrected 10-item name/kind manifest
- Add test_nextcloud_expected_root_manifest: exact set and kind equality
against fixture (T-12.1-19 — count-only acceptance blocked)
- Update 12.1-VALIDATION.md: manifest status OWNER CONFIRMED, add
exact-acceptance row to Nyquist matrix
2026-06-22 09:35:36 +02:00
curo1305
779b05086b
test(12.1-04): add opt-in live Nextcloud smoke test suite
...
- backend/tests/test_nextcloud_live.py: three read-only live tests behind
live_nextcloud marker (adapter root metadata, sanitized diagnostic, connection-ID
browse as testuser@docuvault.example with IDOR/admin negatives)
- backend/pytest.ini: register live_nextcloud marker; addopts excludes it from
ordinary runs so CI never contacts Nextcloud without explicit selection
- 12.1-VALIDATION.md: live test contract, commands, skip behaviour, sanitized
7-of-10 probe result, and threat references T-12.1-16 through T-12.1-20
- Manifest status: unconfirmed — Task 2 exact-name gate pending owner decision
2026-06-22 09:02:42 +02:00
curo1305