AegisGitea-MCP

integration

fix: keep the harness admin password out of the docker exec argv

2026-10-14 16:11:46 +02:00

mcp

test: add MCP smoke tests over stdio and streamable HTTP, from source and from the built image

2026-10-14 16:26:16 +02:00

security

fix: do not echo setting values in configuration errors; test: stdio and config redaction

2026-10-14 17:52:07 +02:00

__init__.py

.

2026-01-29 19:53:36 +01:00

conftest.py

fix: load ./.env only when private and owned, add --env-file and AEGIS_ENV_FILE (SEC-04)

2026-10-14 17:22:29 +02:00

test_audit.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00

test_auth.py

fix: serialize the admin login lookup so concurrent first calls send one request

2026-10-14 16:24:51 +02:00

test_catalog_build.py

test: satisfy lint in catalog override test

2026-10-14 16:10:04 +02:00

test_catalog_generator.py

feat: generate the tool catalog from the pinned swagger

2026-10-14 15:51:01 +02:00

test_catalog_model.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00

test_catalog_naming.py

feat: generate the tool catalog from the pinned swagger

2026-10-14 15:51:01 +02:00

test_check_docs.py

feat: add docs drift check

2026-10-14 16:13:11 +02:00

test_cli.py

fix: report an invalid --port with a short message instead of listing every choice

2026-10-14 16:24:51 +02:00

test_config.py

fix: load ./.env only when private and owned, add --env-file and AEGIS_ENV_FILE (SEC-04)

2026-10-14 17:22:29 +02:00

test_errors.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00

test_executor_hardening.py

fix: key slash encoding on route, redact more request secrets, bound JSON depth and uploads

2026-10-14 16:08:42 +02:00

test_executor_helpers.py

feat: add Gitea request executor with result envelope, pagination and redaction

2026-10-14 15:55:56 +02:00

test_executor_units.py

fix: key slash encoding on route, redact more request secrets, bound JSON depth and uploads

2026-10-14 16:08:42 +02:00

test_executor.py

feat: add Gitea request executor with result envelope, pagination and redaction

2026-10-14 15:55:56 +02:00

test_identity.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00

test_logging_utils.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00

test_no_host_paths.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00

test_oauth_flow_security.py

fix: require a matching Origin on consent and name the binding cookie per flow (SEC-17, SEC-19)

2026-10-14 17:26:52 +02:00

test_oauth_flow.py

test: cover the per-user OAuth flow, threat cases, store and startup

2026-10-14 16:41:18 +02:00

test_oauth_helpers.py

test: cover the per-user OAuth flow, threat cases, store and startup

2026-10-14 16:41:18 +02:00

test_oauth_provider.py

fix: quota pending sign-ins and registrations per address, keep young clients, write the store off the loop (SEC-09)

2026-10-14 17:32:03 +02:00

test_oauth_resolver.py

fix: redact identity secrets through a public hook and mask issued agm_ tokens

2026-10-14 16:45:36 +02:00

test_oauth_startup.py

fix: redact identity secrets through a public hook and mask issued agm_ tokens

2026-10-14 16:45:36 +02:00

test_oauth_store.py

test: cover the per-user OAuth flow, threat cases, store and startup

2026-10-14 16:41:18 +02:00

test_oauth_upstream.py

test: cover the per-user OAuth flow, threat cases, store and startup

2026-10-14 16:41:18 +02:00

test_rate_limit.py

fix: fail closed on an unwritable audit log, bound the rate limiter and harden startup

2026-10-14 16:24:51 +02:00

test_request_context.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00

test_response_limits.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00

test_security.py

fix: redact identity secrets through a public hook and mask issued agm_ tokens

2026-10-14 16:45:36 +02:00

test_server_helpers.py

feat: add MCP server core, stdio and streamable HTTP transports and serve command

2026-10-14 16:13:11 +02:00

test_server.py

fix: record the calling client and only schema-known names in audit entries (SEC-12, SEC-18)

2026-10-14 17:14:13 +02:00

test_setup_template.py

feat: add the aegis-gitea-mcp setup command

2026-10-14 15:50:02 +02:00

test_setup.py

fix: harden setup against plain http, untrusted output and unsafe values

2026-10-14 16:11:01 +02:00

test_transports_startup.py

fix: rate limit /token and /revoke, bucket IPv6 by /64 and warn about untrusted forwarded headers (SEC-08)

2026-10-14 17:29:12 +02:00

test_transports.py

fix: fail closed on an unwritable audit log, bound the rate limiter and harden startup

2026-10-14 16:24:51 +02:00

test_validate_audit_script.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00