flyemoji 85b8a92a0e test(api): pin restore's owner gate against a superseded former owner ...

handleRestoreBackup's owner-or-admin gate was not pinned by any test: the former-owner gate backstopped every non-owner case the suite exercised, so a broken owner gate would not redden. Add the mirror of the former-owner test — a released former owner (still the backup's former_owner, no longer the current owner) must get 403 — the sole subtest that fails when the owner gate is disabled. Found by the round-2 backup/restore mutation audit; production code unchanged.

2026-07-08 05:58:00 +09:00

..

api_test.go

feat(account): migrate a live account's owned servers to a new account (§B3 inherit)

2026-07-05 20:50:48 +09:00

api.go

feat(api): add internal-face break-glass world backup endpoint (§B4 Sync)

2026-07-07 10:48:01 +09:00

auth.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

backuper_wire_test.go

feat(api): add on-demand world backup endpoint and Job executor (§B4 Sync)

2026-07-07 10:04:30 +09:00

backuper.go

feat(api): add on-demand world backup endpoint and Job executor (§B4 Sync)

2026-07-07 10:04:30 +09:00

cluster.go

fix(api): implement /readyz with real DB + K8s API + CRD checks (§7)

2026-07-05 16:22:08 +08:00

console.go

feat(api): add felis-api service with permissions, modpack lane, and fleet read

2026-06-26 23:32:38 +09:00

errors.go

feat(auth): add discoverable (usernameless) passkey login

2026-07-05 04:05:56 +09:00

handlers_access_test.go

feat(panel): player management

2026-07-02 03:30:50 +08:00

handlers_access.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_account_migrate_test.go

feat(account): migrate a live account's owned servers to a new account (§B3 inherit)

2026-07-05 20:50:48 +09:00

handlers_account_migrate.go

feat(account): migrate a live account's owned servers to a new account (§B3 inherit)

2026-07-05 20:50:48 +09:00

handlers_account_test.go

feat(api): record account-link auth source (mojang|thirdparty)

2026-06-27 13:01:19 +09:00

handlers_account.go

feat(api): add QR scan-login completion poll on the internal face

2026-06-30 04:08:01 +09:00

handlers_auth_email_test.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_auth_email.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_auth_options_test.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_auth_options.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_auth.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_backup_now_test.go

feat(breakglass): add "back up a world now" console peer (§B4 Sync)

2026-07-07 19:32:13 +09:00

handlers_backups_test.go

test(api): pin restore's owner gate against a superseded former owner

2026-07-08 05:58:00 +09:00

handlers_backups.go

feat(breakglass): add "back up a world now" console peer (§B4 Sync)

2026-07-07 19:32:13 +09:00

handlers_console_test.go

feat(api): add felis-api service with permissions, modpack lane, and fleet read

2026-06-26 23:32:38 +09:00

handlers_console.go

feat(api): add felis-api service with permissions, modpack lane, and fleet read

2026-06-26 23:32:38 +09:00

handlers_create_test.go

feat(api): add felis-api service with permissions, modpack lane, and fleet read

2026-06-26 23:32:38 +09:00

handlers_email_otp_test.go

fix(api): make OTP-start throttle atomic to close concurrent-burst bypass

2026-06-30 23:04:07 +09:00

handlers_email_otp.go

fix(api): make OTP-start throttle atomic to close concurrent-burst bypass

2026-06-30 23:04:07 +09:00

handlers_internal_menu_test.go

feat(api): add felis-api service with permissions, modpack lane, and fleet read

2026-06-26 23:32:38 +09:00

handlers_internal_wake_test.go

feat(api): add felis-api service with permissions, modpack lane, and fleet read

2026-06-26 23:32:38 +09:00

handlers_internal.go

fix(api): implement /readyz with real DB + K8s API + CRD checks (§7)

2026-07-05 16:22:08 +08:00

handlers_logstream_test.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_logstream.go

fix(api): cap concurrent SSE streams per principal

2026-07-01 22:04:19 +09:00

handlers_onboard_test.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_onboard.go

feat(api): add public Bind-Code onboarding for the player console

2026-07-01 18:00:13 +09:00

handlers_op_login_test.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_op_login.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_passkey_discoverable_test.go

feat(passkey): advance sign_count, reject clone-warned assertions

2026-07-05 16:02:30 +09:00

handlers_passkey_discoverable.go

feat(passkey): advance sign_count, reject clone-warned assertions

2026-07-05 16:02:30 +09:00

handlers_passkey_login_test.go

feat(passkey): advance sign_count, reject clone-warned assertions

2026-07-05 16:02:30 +09:00

handlers_passkey_test.go

fix(api): record credential id in passkey-register audit event

2026-07-02 06:55:21 +09:00

handlers_passkey.go

feat(passkey): advance sign_count, reject clone-warned assertions

2026-07-05 16:02:30 +09:00

handlers_patch_test.go

feat(api): enforce CPU/memory/storage quotas (spec §9.3, §22)

2026-07-05 02:05:44 +08:00

handlers_player_reclaim_test.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_player_reclaim.go

docs(auth): cite MultiLogin reference for UUID-keyed reclaim split

2026-07-05 04:05:56 +09:00

handlers_qr_login_test.go

feat(api): add QR scan-login completion poll on the internal face

2026-06-30 04:08:01 +09:00

handlers_setup.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

handlers_updates_shape_test.go

fix(updates): tag Window JSON so the persisted maintenance window round-trips

2026-07-01 18:26:42 +09:00

handlers_updates_test.go

feat(api): add admin API for the SysAdmin-set auto-update maintenance window

2026-07-01 18:17:07 +09:00

handlers_updates.go

feat(api): add admin API for the SysAdmin-set auto-update maintenance window

2026-07-01 18:17:07 +09:00

handlers_user.go

feat(api): enforce CPU/memory/storage quotas (spec §9.3, §22)

2026-07-05 02:05:44 +08:00

handlers_users.go

refactor(api): drop dead password-era ResetMailer, reconcile passkey-unbind docs

2026-07-04 21:47:13 +09:00

images_logs_test.go

feat(api): add felis-api service with permissions, modpack lane, and fleet read

2026-06-26 23:32:38 +09:00

images_test.go

feat(api): add felis-api service with permissions, modpack lane, and fleet read

2026-06-26 23:32:38 +09:00

images.go

fix(api): cap concurrent SSE streams per principal

2026-07-01 22:04:19 +09:00

k8scluster.go

fix(api): implement /readyz with real DB + K8s API + CRD checks (§7)

2026-07-05 16:22:08 +08:00

logstream.go

fix(api): clear the SSE write deadline on return so it can't leak to a reused connection

2026-07-01 23:06:26 +09:00

middleware_test.go

fix(api): validate inbound X-Request-Id before echo and audit persist

2026-07-01 21:07:08 +09:00

middleware.go

feat(auth): migrate console login to passwordless

2026-07-04 21:47:12 +09:00

openapi_test.go

feat(panel): implement user management administration panel with sessions and minecraft link support

2026-07-04 04:08:14 +08:00

pgrepo.go

feat(account): migrate a live account's owned servers to a new account (§B3 inherit)

2026-07-05 20:50:48 +09:00

repo.go

feat(account): migrate a live account's owned servers to a new account (§B3 inherit)

2026-07-05 20:50:48 +09:00

restore_wire_test.go

feat(api): add felis-api service with permissions, modpack lane, and fleet read

2026-06-26 23:32:38 +09:00

restorer.go

feat(api): add felis-api service with permissions, modpack lane, and fleet read

2026-06-26 23:32:38 +09:00

session.go

refactor(api): drop dead login concurrency limiter and reconcile passwordless comments

2026-07-04 21:47:12 +09:00

submissions_test.go

feat(submit): local + S3 backends for modpack upload contexts, installer-selectable

2026-07-02 23:38:46 +08:00

submissions.go

feat(submit): local + S3 backends for modpack upload contexts, installer-selectable

2026-07-02 23:38:46 +08:00

util.go

refactor(api): drop dead login concurrency limiter and reconcile passwordless comments

2026-07-04 21:47:12 +09:00