Claude 9254812c4c fix(tools): don't force PIXLET_EDITOR_HOST, and stop hard-assuming the MQTT bridge is uninstalled in tests ...

CodeRabbit review on #544:
- start_pixlet_editor() unconditionally set PIXLET_EDITOR_HOST=0.0.0.0,
  overriding any operator-configured loopback-only value and always exposing
  the unauthenticated `pixlet serve` dev process on the LAN (CWE-1188). Use
  env.setdefault() so it's only a default; also stop hardcoding 'host' in the
  recorded session state so status reporting matches what was actually used.
- test_tools_sections.js asserted an Install button always renders, which
  assumes the bridge service is never installed on the test/dev host. Branch
  on the same service.installed flag the template itself renders from.

Adds regression coverage in test_starlark_pixlet_routes.py for the
setdefault-vs-override behavior (both the "nothing configured" and
"operator pinned loopback" cases).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01S3bPMESe2TfrGvbs1ef9c5

2026-09-11 02:32:18 +00:00

..

integration

fix: Codacy security fixes, CVE dependency bumps, and code quality cleanup (#331)

2026-05-15 10:19:55 -04:00

test_api_v3_backup_paths.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

test_api_v3_backup_restore.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

test_api_v3_config_raw.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

test_api_v3_helpers.py

Test suite overhaul + fixes for the three bugs it uncovered (#441)

2026-08-07 10:17:30 -04:00

test_api_v3_secret_roundtrip.py

Stop array-item secrets being wiped, and logging them (#493)

2026-08-23 11:43:08 -04:00

test_cache.py

Codebase audit: fix shipping bugs, remove verified-dead code, repair doc drift, add regression guards (#438)

2026-08-06 14:04:23 -04:00

test_calendar_oauth_endpoints.py

fix(calendar): implement the OAuth and calendar-listing endpoints (#458)

2026-08-13 15:25:43 -04:00

test_config_logging_omits_secrets.py

Stop array-item secrets being wiped, and logging them (#493)

2026-08-23 11:43:08 -04:00

test_config_manager_atomic.py

Plugins (#145)

2025-12-27 14:15:49 -05:00

test_config_secrets_masking.py

consolidate(web): credential exposure, secret loss, and the update path (#485)

2026-08-21 14:30:29 -04:00

test_dedup_unique_arrays.py

fix: Codacy security fixes, CVE dependency bumps, and code quality cleanup (#331)

2026-05-15 10:19:55 -04:00

test_dotted_league_keys.py

fix(web): preserve dotted schema keys when saving plugin config (#370)

2026-06-15 14:06:32 -04:00

test_error_handler.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

test_errors.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

test_plugin_operation_queue.py

Plugins (#145)

2025-12-27 14:15:49 -05:00

test_secret_helpers.py

Stop array-item secrets being wiped, and logging them (#493)

2026-08-23 11:43:08 -04:00

test_secret_separation_parity.py

Follow-ups from #441: secret-helper migration, ten more bug fixes, and coverage for every remaining untested module (#444)

2026-08-07 16:17:11 -04:00

test_starlark_pixlet_routes.py

fix(tools): don't force PIXLET_EDITOR_HOST, and stop hard-assuming the MQTT bridge is uninstalled in tests

2026-09-11 02:32:18 +00:00

test_state_reconciliation.py

Test suite overhaul + fixes for the three bugs it uncovered (#441)

2026-08-07 10:17:30 -04:00

test_systemctl_sudoers_alignment.py

fix(web): use fully-qualified .service unit names for privileged systemctl (#360)

2026-06-04 15:17:00 -04:00

test_validators.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00