Repository navigation

feat(server): add least-privilege data-plane catalog endpoint - #1557

Closed

LeoWang331 wants to merge 18 commits into

lidge-jun:devfrom

LeoWang331:feat/809-v1-catalog

Closed

feat(server): add least-privilege data-plane catalog endpoint#1557
LeoWang331 wants to merge 18 commits into
lidge-jun:devfrom
LeoWang331:feat/809-v1-catalog

Commits on Aug 13, 2026
- feat(server): add data-plane catalog endpoint
  
  LeoWang331
  and
  cursoragent
  committed
  9cdb9ae
- test(server): pin data-plane catalog read-only method semantics
  
  LeoWang331
  and
  cursoragent
  committed
  0881a01
- test(server): prove the catalog credential stays off the management plane
  
  LeoWang331
  and
  cursoragent
  committed
  6159dcc
- test(server): bound the data-plane catalog response and pin its redaction
  
  LeoWang331
  and
  cursoragent
  committed
  ef596b4
- docs(catalog): document the least-privilege catalog surface
  
  LeoWang331
  and
  cursoragent
  committed
  2f4f826
- test(server): use scanner-recognized fixture sentinels in catalog leak probes
  
  LeoWang331
  and
  cursoragent
  committed
  1a81ddb
- refactor(server): keep the catalog route off the sponsored auth surface
  
  LeoWang331
  and
  cursoragent
  committed
  ea7a454
- feat(catalog): vet and bound the shared catalog distribution boundary
  
  LeoWang331
  and
  cursoragent
  committed
  1533a6d
- feat(server): list /v1/catalog in the auth matrix and allow preflighted HEAD
  
  LeoWang331
  and
  cursoragent
  committed
  a99e4f8
- test(server): pin loopback-listener denial for the catalog route
  
  LeoWang331
  and
  cursoragent
  committed
  a39e75e
- docs(catalog): atomic download, preflight exception, and policy split
  
  LeoWang331
  and
  cursoragent
  committed
  29f24a2
- fix(catalog): close representation-equivalent safety bypasses and pin real-catalog compatibility
  
  LeoWang331
  and
  cursoragent
  committed
  2409cb6
- fix(server): separate the source-read refusal from the response-ceiling refusal
  
  LeoWang331
  and
  cursoragent
  committed
  2446054
- docs(catalog): scope the accepted invariant and harden the download snippet
  
  LeoWang331
  and
  cursoragent
  committed
  818141f
- docs(catalog): document management catalog refusals and harden the download snippet
  
  LeoWang331
  and
  cursoragent
  committed
  a809421
- docs(catalog): use a portable mktemp invocation in the download snippet
  
  LeoWang331
  and
  cursoragent
  committed
  e05b6cc
- docs(catalog): route remote catalog downloads through the data plane
  
  LeoWang331
  and
  cursoragent
  committed
  86c0636
- docs(catalog): describe the catalog safety check without overclaiming
  
  LeoWang331
  and
  cursoragent
  committed
  5586e4e

Commits

Commits on Aug 13, 2026