Tejas Chopra 1f96dabc19 fix(security): address u9up assessment findings (WEB-01–07) (#2207) ... Hardens client-selected upstreams, memory identity resolution, downloaded binary integrity, telemetry import, Docker defaults, Neo4j credentials, and archive extraction. Refreshes the branch against current main and preserves newer same-origin and loopback protections.		2026-08-20 09:02:44 -05:00
..
test_anthropic_buffered_timeout.py	fix(proxy/anthropic): None-guard usage token counts on the direct buffered path (#2434)	2026-08-12 00:07:51 -05:00
test_anthropic_ccr_deferred_injection.py	fix(ccr): verify a scanned marker's hash before advertising it (#2908)	2026-08-13 11:46:21 -05:00
test_anthropic_ccr_raise.py	fix(anthropic): CCR exception must re-raise, not silently swallow (#838)	2026-06-10 21:11:46 -05:00
test_anthropic_no_optimize_history_passthrough.py	fix(proxy/anthropic): don't replay recorded prefix over live history (#3026) (#3052)	2026-08-17 15:02:18 -07:00
test_anthropic_recount_and_reparse_safety.py	perf(proxy): bound upstream calls and hot-path costs (#2852)	2026-08-09 16:24:33 -07:00
test_anthropic_streaming_ccr_retrieve.py	fix(ccr): only buffer a stream when a marker is actually redeemable (#3092)	2026-08-17 11:19:26 -07:00
test_anthropic_upstream_header.py	fix(proxy): honor x-headroom-base-url on /v1/messages route (#1763)	2026-07-09 12:43:40 -05:00
test_background_compression.py	perf(compression): take large cold-start contexts off the synchronous kompress path (#1171) (#1298)	2026-06-23 10:48:06 -05:00
test_bedrock_passthrough.py	feat(proxy): compress AWS Bedrock InvokeModel requests via configurable upstream (#720)	2026-06-16 14:56:16 -05:00
test_bedrock_sse_ping.py	fix: emit SSE ping before message_start on Bedrock streaming path (issue #902) (#1080)	2026-08-04 21:41:58 -05:00
test_cc_switch_reconciler.py	feat(proxy): cc-switch reconciler — keep Headroom in the request path alongside cc-switch (#1030)	2026-06-17 08:41:16 -05:00
test_ccr_frozen_prefix_coupling.py	fix(proxy): stop toggling headroom_retrieve in the Anthropic tools array (#2672)	2026-08-03 16:18:11 -07:00
test_compression_failure_action.py	fix(codex): fail open for proxy compression timeout	2026-06-04 14:04:49 +05:30
test_compression_timeout_config.py	feat(proxy): make COMPRESSION_TIMEOUT_SECONDS configurable via env (#946) (#991)	2026-06-16 21:10:01 -05:00
test_compute_turn_id.py	fix(proxy): strip cache_control before hashing turn_id	2026-04-23 16:04:57 +02:00
test_gemini_savings_profile.py	fix(proxy/gemini): keep streaming-parity baseline so eligible_pct can't exceed 100 (#2824)	2026-08-06 19:21:56 -07:00
test_header_safe_transforms.py	feat(transforms): attribute read_lifecycle + smart_crush tags (#249)	2026-06-11 11:51:26 -05:00
test_mcp_stats_aggregation.py	fix(proxy): Strands MCP bundle + backend path fixes + Codex fail-closed protection	2026-05-21 11:00:14 -07:00
test_model_router.py	feat(proxy): add opt-in cost-aware model router (#1706) (#2205)	2026-07-15 19:58:17 +00:00
test_model_router_wiring.py	feat(proxy): add opt-in cost-aware model router (#1706) (#2205)	2026-07-15 19:58:17 +00:00
test_openai_backend_path.py	fix(proxy): skip max_tokens rename for backend-routed openai chat (#2401)	2026-07-18 16:47:10 -07:00
test_openai_chat_ccr_injection.py	fix(ccr): avoid injecting tool on chat streaming	2026-08-11 16:18:57 -07:00
test_openai_chat_savings_profile.py	fix(proxy/openai): None-guard usage token counts on the chat path (#2431)	2026-07-19 22:15:22 -07:00
test_openai_responses_ccr.py	fix(proxy): complete stateless Responses and buffered CCR lifecycle (#2997)	2026-08-13 21:12:38 -05:00
test_openai_stream_usage_option.py	fix(proxy/openai): respect explicit stream_options.include_usage (#2026)	2026-07-13 00:43:16 -04:00
test_openai_transport_path_prefix.py	fix(codex): OpenCode Zen telemetry attribution (#1648)	2026-07-07 11:35:21 -05:00
test_openai_upstream_header.py	fix(security): address u9up assessment findings (WEB-01–07) (#2207)	2026-08-20 09:02:44 -05:00
test_phase3_byte_identity.py	perf(compression): take large cold-start contexts off the synchronous kompress path (#1171) (#1298)	2026-06-23 10:48:06 -05:00
test_request_logger.py	feat(proxy): log compressed messages alongside original request (#261)	2026-06-11 19:02:54 -05:00
test_settings_fresh_process_precedence.py	fix(proxy): dedupe Codex WS request logging for accurate mixed-provider dashboards (#2189)	2026-07-15 18:18:34 +00:00
test_settings_store.py	fix(settings): accept documented HEADROOM_* env names as settings keys (#2833)	2026-08-11 17:22:27 -05:00
test_tool_search_repair_after_turn_hooks.py	fix(proxy/anthropic): repair headroom_retrieve history references the tools array cannot support (#2876)	2026-08-13 15:05:07 -05:00
test_transformations_feed.py	fix(proxy): scope CORS to loopback + gate operator/content endpoints (#1226)	2026-06-21 00:50:55 -07:00