4 Commits

Include renames

Author	SHA1	Message	Date
sysadmin	c74b8da400	fix(webui): package-qualify webui_testclient import across test suite (Closes #682)	2026-07-24 18:18:10 -04:00
sysadmin	5deb66c7f6	fix(webui): migrate Starlette TestClient to httpx2 (#682) ... Starlette 1.3.x prefers httpx2 for starlette.testclient.TestClient; plain httpx still works but emits StarletteDeprecationWarning. - Pin httpx2==2.9.1 (keep httpx for MCP/runtime) - Centralize Web UI TestClient import via tests/webui_testclient.py - Point all test_webui_* modules at the helper - Add regression tests that the deprecation warning is gone Closes #682	2026-07-24 17:29:16 -04:00
sysadminandClaude Opus 4.8	b179610e7f	fix(webui): remediate PR #876 REQUEST_CHANGES for analytics (#651) ... Address review blockers and medium/low findings: - F1: HTML-escape all dynamic analytics fields (html.escape quote=True) - F2: Gate POST /api/v1/analytics/usage through console_authz record_analytics_usage (fail closed for unauthenticated / Phase 1) - F3: Enforce usage_events retention (max rows + max age) - F4: Coerce None remote/org/repo to empty strings in load_analytics Add tests for XSS escaping, unauthorized ingest deny, retention, and None scope coercion. Document authz + retention in analytics guide. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-07-24 08:11:12 -04:00
sysadmin	5c5c1fdf77	feat(webui): model usage, token cost, latency, and performance analytics (Closes #651)	2026-07-24 07:16:44 -04:00