Phase 1+2: Foundation & Security Tests - #452

Open

BillyOutlast wants to merge 134 commits into

Drop-OSS:developfrom

BillyOutlast:chore/test-strategy-phase1-2

Commits on Jul 24, 2026

Commits on Jul 25, 2026

fix: resolve SonarCloud-flagged bugs and configure suppressions
John Smith
committed
refactor: batch SonarCloud code quality fixes
John Smith
committed
Merge remote-tracking branch 'origin/develop' into chore/sonarcloud-remediation
John Smith
committed
fix: patch regressions from SonarCloud codemods
John Smith
committed
fix: patch additional SonarCloud regressions
John Smith
committed
fix: restore Dialog wrapper, list roles, error serialization
John Smith
committed
fix: disable persisted checkout credentials in CI workflows
John Smith
committed
fix: include workspace root dependency files in E2E path filters
John Smith
committed
fix: order E2E test rule before generic server rule in SKILL.md
John Smith
committed
docs: remove obsolete pre-lib.rs CLI workaround from AGENTS.md
John Smith
committed
fix: make S3 secret_key private
John Smith
committed
chore: SonarCloud remediation — fix bugs, code quality, and suppressions (#23)
BillyOutlast
authored
chore: SonarCloud remediation — bulk fix 284+ code quality issues (#25)

authored
fix(ci): dependabot auto-merge waits for CI, fix unscoped filter (#27)

BillyOutlast
and
bot
authored
chore(deps,ci): dependabot desktop/main + .codecov.yml + CI merge + MSW error + coverage scope (#28)

BillyOutlast
and
bot
authored
fix(ts): guard 39 unchecked-indexed sites in auth/metadata/backend (#29)

BillyOutlast
and
bot
authored
test(server): add H3 event stubs and createMockH3Event factory (#30)

BillyOutlast
and
bot
authored
chore(deps): consolidate tar override entries across workspaces (#31)

BillyOutlast
and
bot
authored
test(server): add pure-function unit tests (array, tuple, colors, utils, prioritylist) (#32)

BillyOutlast
and
bot
authored
test(server): add security-surface tests (TOTP base64, session memory) (#33)

BillyOutlast
and
bot
authored
fix(deps): upgrade vulnerable transitive dependencies (#26)

authored
fix(server): replace MD5 with SHA-256 in FsHashStore
John Smith
committed
fix(server): extract manifest gen helper to clarify Promise return
John Smith
committed
test(server): add SHA-256 hash tests for FsHashStore
John Smith
committed
chore(ci): add SonarCloud scan step (informational)
John Smith
committed
chore: exclude .omo/run-continuation from git

John Smith
and
sisyphus-dev-ai
committed
docs: add project skills section to AGENTS.md

John Smith
and
sisyphus-dev-ai
committed
ci: add cargo-llvm-cov coverage steps to Rust CI workflows

John Smith
and
sisyphus-dev-ai
committed
feat(desktop): extract TailscaleProvider trait with MockTailscale

John Smith
and
sisyphus-dev-ai
committed
fix(server): return false for missing CA certs instead of true

John Smith
and
sisyphus-dev-ai
committed
fix(server): prevent session fixation by always issuing new signin token

John Smith
and
sisyphus-dev-ai
committed
fix(server): add vitest ~ alias resolving Nuxt path convention

John Smith
and
sisyphus-dev-ai
committed
test(server): add property-based tests for PriorityListIndexed

John Smith
and
sisyphus-dev-ai
committed
test(server): add 6 security tests for threat model P0+P1 scenarios

John Smith
and
sisyphus-dev-ai
committed
test(server): add metadata provider chain and plugin init-order tests

John Smith
and
sisyphus-dev-ai
committed
chore: update torrential Cargo.lock (rand 0.9.2 -> 0.9.3)

John Smith
and
sisyphus-dev-ai
committed
Phase 3+: Integration Seams & CI Gates (#39)

authored
fix: prettier formatting on 7 test files + fix codecov SHA

John Smith
and
sisyphus-dev-ai
committed

Commits on Jul 26, 2026

style: cargo fmt bindings.rs stub declarations

John Smith
and
sisyphus-dev-ai
committed