arkonandClaude Opus 4.6 18217268bf fix: extract QR auth magic numbers into named constants, add 16 security tests ...

Replace hardcoded per-IP rate limit (10) and cookie maxAge (86400) in
system-routes.ts with QR_AUTH_FAILURE_MAX and AUTH_SESSION_TTL_MS/1000
so both auth paths stay in sync if constants change.

Add 16 new tests: grace period boundary precision, base62 charset
validation, current+previous token during grace, stopTokenRotation
state cleanup, rate limit reset, consumed token eviction, full
end-to-end QR flow, per-IP 429, cookie attributes, concurrent race,
regenerate invalidation, URL encoding, path traversal, /q without
param, and session record method:qr.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-01 17:32:02 +01:00

..

mocks

fix: overlay rendering — vertical alignment, line artifact, and duplicate class members

2026-03-01 16:27:40 +01:00

routes

test: add shared mock infrastructure and route tests (phase 7)

2026-03-01 14:33:18 +01:00

utils

fix(test): allow timing variance in StaleExpirationMap remaining TTL test

2026-01-28 05:20:10 +01:00

ai-idle-checker.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

api-generate-plan.test.ts

chore: bump version to 0.1402

2026-01-27 23:15:25 +01:00

api-responses.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

auth-security.test.ts

chore: bump version to 0.1655

2026-02-27 01:13:58 +01:00

bash-tool-parser.test.ts

chore: bump version to 0.1486

2026-02-12 13:44:07 +01:00

buffer-management.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

cleanup-manager.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

cli-commands.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

debouncer.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

edge-cases.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

file-link-click.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

file-stream-manager.test.ts

chore: bump version to 0.1486

2026-02-12 13:44:07 +01:00

hooks-config.test.ts

fix: formatting and async test bug in hooks-config

2026-03-01 17:08:41 +01:00

image-watcher.test.ts

perf: implement phase 1-3 performance optimizations

2026-02-28 17:39:44 +01:00

input-echo-test.mjs

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

integration-flows.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

local-echo-basic-test.mjs

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

local-echo-daily-test.mjs

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

local-echo-edge-test.mjs

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

local-echo-mobile-test.mjs

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

local-echo-scroll-test.mjs

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

local-echo-tabswitch-test.mjs

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

local-echo-user-test.mjs

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

memory-leak-prevention.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

mux-factory.test.ts

chore: bump version to 0.1538

2026-02-18 12:51:35 +01:00

nice-wrapper.test.ts

chore: bump version to 0.1486

2026-02-12 13:44:07 +01:00

opencode-resize.test.ts

fix: address code review findings for OpenCode integration

2026-02-26 15:58:26 +01:00

perf-browser.test.ts

chore: bump version to 0.1582

2026-02-20 15:58:28 +01:00

perf-subagent-load.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

pty-interactive.test.ts

fix: bulletproof test safety — IS_TEST_MODE guards prevent tests from killing real tmux sessions

2026-02-12 18:26:16 +01:00

qr-auth.test.ts

fix: extract QR auth magic numbers into named constants, add 16 security tests

2026-03-01 17:32:02 +01:00

quick-start.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

ralph-config.test.ts

refactor: rename inner-loop-tracker to ralph-tracker with API improvements

2026-01-21 22:36:45 +01:00

ralph-integration.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

ralph-loop-deep.test.ts

fix: ralph tracker — 3 bugs: first-occurrence completion, double-counting, TodoWrite pattern

2026-02-19 14:00:10 +01:00

ralph-loop.test.ts

refactor: improve code quality with stricter TypeScript and memory leak prevention

2026-01-21 14:01:47 +01:00

ralph-tracker.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

respawn-analysis.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

respawn-controller.test.ts

test: add unit tests for Debouncer, CleanupManager, and timer migration refactors

2026-03-01 16:50:23 +01:00

respawn-scenarios.md

fix: use temp file for plan checker prompt to avoid E2BIG + fix cancel race condition

2026-01-25 07:52:40 +01:00

respawn-team-awareness.test.ts

test: add shared mock infrastructure and route tests (phase 7)

2026-03-01 14:33:18 +01:00

respawn-test-plan.md

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

respawn-test-utils.ts

test: add shared mock infrastructure and route tests (phase 7)

2026-03-01 14:33:18 +01:00

scheduled-runs.test.ts

chore: bump version to 0.1439

2026-01-30 17:50:02 +01:00

screenshot-capture.test.ts

chore: bump version to 0.1541

2026-02-18 18:14:13 +01:00

session-cleanup.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

session-manager.test.ts

perf: implement phase 1-3 performance optimizations

2026-02-28 17:39:44 +01:00

session-state.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

session.test.ts

chore: bump version to 0.1439

2026-01-30 17:50:02 +01:00

setup.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

sse-events.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

state-store.test.ts

chore: version packages

2026-02-28 14:45:39 +01:00

string-utilities.test.ts

test: add global test setup with screen limits and reach 1337 tests

2026-01-22 11:30:10 +01:00

subagent-watcher.test.ts

chore: version packages

2026-02-28 14:45:39 +01:00

task-queue.test.ts

perf: implement phase 1-3 performance optimizations

2026-02-28 17:39:44 +01:00

task-tracker.test.ts

perf: implement phase 1-3 performance optimizations

2026-02-28 17:39:44 +01:00

task.test.ts

test: add unit tests for Task class

2026-01-21 07:19:49 +01:00

team-watcher.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

templates.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

terminal-parsing.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

tmux-manager.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

tmux-restart-recovery.test.ts

chore: rename Claudeman to Codeman

2026-02-26 16:44:34 +01:00

transcript-watcher.test.ts

feat: add hook-based idle detection for respawn controller

2026-01-25 21:29:35 +01:00

types.test.ts

fix: stale types test and unreachable ralph full-reset API path

2026-03-01 17:17:05 +01:00

validation-utilities.test.ts

test: add global test setup with screen limits and reach 1337 tests

2026-01-22 11:30:10 +01:00