Paul BakausandClaude Fable 5 0f80c1f5aa Add regression tests for token-authorized CORS on non-localhost dev hosts ...

Covers the fix for the ddev breakage reported in #304: the live server
now reflects Access-Control-Allow-Origin for any request bearing the
valid session token, so dev servers on loopback aliases (https://*.ddev.site,
Valet's *.test, hosts-file entries) work again while tokenless remote
origins stay blocked. The server/browser source changes shipped in
b1c5707f; this adds the test coverage that was written alongside them:

- tokenless remote origins get no ACAO on any route, token'd or not
- a non-loopback origin with the valid token is reflected, with
  Vary: Origin, on both the real request and its OPTIONS preflight
- the /manual-edit-stash source assertion tracks the token-bearing URL

Prepared with AI assistance.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-31 18:02:54 -07:00

..

fixtures

See through versioned stylesheets and catch standard-tracked kickers

2026-07-29 17:45:45 -07:00

framework-fixtures

fix: stop cross-project live session leakage and stale-adapter 401s

2026-07-28 17:38:46 -07:00

lib

Fix Google Fonts value suppression

2026-07-29 14:28:15 -07:00

live-e2e

feat: just-in-time event instructions + frontier default for the LLM e2e agent

2026-07-27 19:20:02 -07:00

new-work-e2e

Add deterministic new-work interactive smoke suite

2026-07-22 12:23:07 -07:00

skill-behavior

Restore dice assignment, fusion, and the commitment counterweights

2026-07-21 10:43:44 -07:00

build.test.js

Add regression tests for Antigravity provider transform and CLI lifecycle

2026-07-31 13:04:45 +02:00

ci-test-plan.test.mjs

fix: address PR review bot findings

2026-07-27 15:19:58 -07:00

cli-args.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

cli-ignores.test.js

Fix: file-scoped wildcard ignores suppress non-value-bearing rules (#296) (#309)

2026-07-07 17:23:39 -07:00

concept-seed.test.mjs

Pull compositions from the deal until the expanded catalog ships

2026-07-29 17:46:54 -07:00

context-signals.test.mjs

The develop candidate leads with an advertised develop default rev

2026-07-26 19:04:48 -07:00

context.test.mjs

Flag and repair drift in Impeccable's own project artifacts

2026-07-21 21:50:40 -07:00

critique-storage.test.mjs

Improve critique skill reliability

2026-05-18 15:15:14 -07:00

design-parser.test.mjs

Fix wrapped design characteristics

2026-07-31 17:21:29 -07:00

design-system.test.mjs

Give DESIGN.md a real type ramp so the design hook stops crying wolf (#390)

2026-07-19 20:39:55 -07:00

detect-antipatterns-browser.test.mjs

Harden detector against form.id shadowing and gradient/non-rendered false positives

2026-07-24 16:17:24 -07:00

detect-antipatterns-fixtures.test.mjs

Retire the single-font rule

2026-07-29 17:45:45 -07:00

detect-antipatterns.test.js

Ignore rounded-none in border accents

2026-07-29 14:28:15 -07:00

detect-cli-design-contamination.test.mjs

Resolve detect DESIGN.md from each target's project, not cwd

2026-07-22 12:23:06 -07:00

detect-url-launch.test.mjs

fix(detect): use system Chrome on Windows to stop GPU crash-loop window (#372)

2026-07-22 20:29:18 +05:30

doctor.test.mjs

Cover provider seed markers

2026-07-31 17:32:57 -07:00

extension-build.test.mjs

Fix Firefox DevTools extension paths (#231)

2026-06-08 15:23:37 -07:00

framework-fixtures.test.mjs

Live v2: root manifest, mount-ack protocol, AST scaffolder, mechanical accept

2026-07-27 15:09:40 -07:00

github-sheriff.test.mjs

Base sheriff stale clock on blocker age (#364)

2026-07-10 12:02:52 -07:00

hook-build.test.mjs

Enforce the engines floor in the probe instead of a capability check

2026-07-26 22:17:19 +05:00

hook.test.mjs

Fix Google Fonts value suppression

2026-07-29 14:28:15 -07:00

impeccable-paths.test.mjs

Add monorepo context support (#213)

2026-06-20 19:49:37 +09:00

inline-ignores.test.mjs

Fix detector coverage for generated UI tells

2026-07-18 14:21:06 -07:00

live-accept-css.test.mjs

fix: stop treating the child combinator as a prelude boundary when pruning

2026-07-28 18:05:41 -07:00

live-accept-scrub.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-accept.test.mjs

Fix Live accept for Elixir templates in lib/ (#374)

2026-07-20 10:49:36 -07:00

live-browser-dom.test.mjs

Extract live browser DOM helpers (#239)

2026-06-09 23:10:10 +02:00

live-browser-regression.test.mjs

fix: restrict server-session adoption to comparison phases

2026-07-27 16:11:52 -07:00

live-browser-script-parts.test.mjs

Add OpenAI plugin submission bundle (#363)

2026-07-09 17:09:13 -07:00

live-browser-session.test.mjs

Refactor: cleaner top-level directory structure (#138)

2026-05-04 16:38:03 -07:00

live-browser-source.test.mjs

Add regression tests for token-authorized CORS on non-localhost dev hosts

2026-07-31 18:02:54 -07:00

live-commit-manual-edits.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-completion.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-copy-edit-agent.test.mjs

Live mode: staged AI copy edits (#158)

2026-05-28 19:02:12 -07:00

live-discard-manual-edits.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-e2e-accept-cleanup-regression.test.mjs

Fix live accept cleanup for mapped lists (#229)

2026-06-08 11:30:15 -07:00

live-e2e-agent-output.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-e2e-cli-options.test.mjs

Add DeepSeek live E2E adapter (#163)

2026-05-22 09:28:36 -07:00

live-e2e-llm-agent.test.mjs

feat: just-in-time event instructions + frontier default for the LLM e2e agent

2026-07-27 19:20:02 -07:00

live-e2e-steer-agent.test.mjs

[codex] Improve CI test coverage (#212)

2026-06-08 10:39:12 -07:00

live-e2e.test.mjs

fix: stop cross-project live session leakage and stale-adapter 401s

2026-07-28 17:38:46 -07:00

live-event-validation.test.mjs

Live v2: root manifest, mount-ack protocol, AST scaffolder, mechanical accept

2026-07-27 15:09:40 -07:00

live-frameworks.test.mjs

fix: stop cross-project live session leakage and stale-adapter 401s

2026-07-28 17:38:46 -07:00

live-generation-preflight.test.mjs

Live: stop the preflight writing source, cache the resolution

2026-07-22 22:49:44 -07:00

live-inject.test.mjs

Live v2: root manifest, mount-ack protocol, AST scaffolder, mechanical accept

2026-07-27 15:09:40 -07:00

live-insert-ui.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-insert.test.mjs

Neo Kinpaku design system + Live Mode v3 (#169)

2026-05-28 14:22:22 -07:00

live-manual-edits-buffer.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-poll-lanes.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-poll-stream.test.mjs

Refresh the Impeccable product experience

2026-07-15 23:29:47 -07:00

live-poll.test.mjs

feat: just-in-time event instructions + frontier default for the LLM e2e agent

2026-07-27 19:20:02 -07:00

live-recovery-commands.test.mjs

fix: fifth review round (durable mount failures, {#key} hydration slots)

2026-07-27 16:33:34 -07:00

live-reference.test.mjs

Fix the applier contract regex: .mjs filenames contain periods

2026-07-29 17:45:45 -07:00

live-roots.test.mjs

fix: reject a valueless --target instead of falling back to implicit selection

2026-07-28 15:57:33 -07:00

live-server.test.mjs

Add regression tests for token-authorized CORS on non-localhost dev hosts

2026-07-31 18:02:54 -07:00

live-session-store.test.mjs

fix: fifth review round (durable mount failures, {#key} hydration slots)

2026-07-27 16:33:34 -07:00

live-source-lock.test.mjs

Live: polling rework, source locks, preflight scaffolding (#381)

2026-07-19 18:42:41 -07:00

live-source-search.test.mjs

Fix Live accept for Elixir templates in lib/ (#374)

2026-07-20 10:49:36 -07:00

live-svelte-adapter-deepseek.test.mjs

Fix DeepSeek Svelte live submit assertion (#342)

2026-07-07 17:11:04 -07:00

live-svelte-ast.test.mjs

fix: scope each keys during restore and fail loudly on an unenterable app root

2026-07-28 18:18:05 -07:00

live-svelte-component-accept.test.mjs

fix: bound CSS seeding to real matches and ownership before supersession removal

2026-07-28 17:55:13 -07:00

live-tanstack-adapter.test.mjs

Add TanStack Router + Start support to live mode

2026-07-22 22:49:44 -07:00

live-target-context.test.mjs

feat: just-in-time event instructions + frontier default for the LLM e2e agent

2026-07-27 19:20:02 -07:00

live-wrap-buffer-aware.test.mjs

Organize skill script support modules

2026-06-08 16:58:55 -07:00

live-wrap.test.mjs

Live: stop the preflight writing source, cache the resolution

2026-07-22 22:49:44 -07:00

new-work-e2e.test.mjs

Add deterministic new-work interactive smoke suite

2026-07-22 12:23:07 -07:00

openai-plugin.test.mjs

Split service layer into private impeccable-site repo

2026-07-20 22:41:53 -07:00

pin.test.mjs

Add OpenAI plugin submission bundle (#363)

2026-07-09 17:09:13 -07:00

serve-question.test.mjs

A sandboxed wait cannot signal the server, and EPERM was read as death

2026-07-28 17:07:51 -07:00

skills-cli.test.js

Add regression tests for Antigravity provider transform and CLI lifecycle

2026-07-31 13:04:45 +02:00

staleness.test.mjs

Flag and repair drift in Impeccable's own project artifacts

2026-07-21 21:50:40 -07:00

surface-brief.test.mjs

Refine product and visual work lifecycle

2026-07-17 16:10:13 -07:00

target-args.test.mjs

Add monorepo context support (#213)

2026-06-20 19:49:37 +09:00

template-extensions.test.mjs

Fix Live accept for Elixir templates in lib/ (#374)

2026-07-20 10:49:36 -07:00

test-suites.test.mjs

[codex] Improve CI test coverage (#212)

2026-06-08 10:39:12 -07:00

validate-plugin-versions.test.js

Add OpenAI plugin submission bundle (#363)

2026-07-09 17:09:13 -07:00

windows-path-fix.test.js

Detector architecture v2: static engine, benchmarks, lab, and visual contrast (#156)

2026-05-17 19:49:38 -07:00

zip.test.mjs

fix(cli): replace extract-zip with fflate to fix silent install on Node v24.16.0+ (#253)

2026-06-15 20:33:43 -07:00