SnapOtter db6f7bf38a feat(enterprise): add IP allowlisting with CIDR matching and Redis cache ...

Enterprise-gated onRequest hook that restricts API access to
configured CIDR ranges using Node 22's native BlockList.

- Plugin (ip-allowlist.ts): builds a BlockList from the ipAllowlist
  setting, caches in-process, syncs across instances via Redis pub/sub.
  Exempt paths for health probes, SCIM, SAML/OIDC callbacks.
  Handles IPv4-mapped IPv6 (::ffff:x.x.x.x) transparently.
- Admin API (enterprise/ip-allowlist.ts): GET/PUT endpoints gated by
  security:manage permission and ip_allowlist feature flag.  Validates
  CIDRs, prevents self-lockout, emits IP_ALLOWLIST_UPDATED audit event.
- 32 unit tests covering CIDR matching, validation, exempt paths, IPv6,
  and edge cases (/0, /32, mapped addresses).

2026-06-13 22:54:06 +08:00

..

ai-bridge.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

ai-tools.test.ts

fix: convert input buffer to PNG before passing to face landmarks Python sidecar

2026-05-13 14:18:49 +08:00

analytics-env.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

analytics-no-leak.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

analytics-route.test.ts

test: major coverage expansion — 18 new test files, ~830 new tests

2026-04-26 12:03:08 +08:00

analytics.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

anonymous-admin.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

api-keys-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

aspect-tools.test.ts

feat(tools): 2.0 phase 5 wave 3a - video depth (22 tools) (#221)

2026-06-13 10:19:00 +08:00

audio-output.test.ts

feat(tools): 2.0 phase 5 wave 3b - audio depth (14 tools) (#222)

2026-06-13 10:19:06 +08:00

audit-archival.test.ts

feat(enterprise): add audit log archival with crash-safe state machine

2026-06-13 16:57:20 +08:00

audit-helpers.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

audit-integrity.test.ts

feat(enterprise): add tamper-resistant audit mode with HMAC integrity

2026-06-13 16:48:09 +08:00

audit-lib.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

audit-log-route.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

auth-functions.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

auth-routes.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

auto-orient.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

background-composite.test.ts

feat(tools): 2.0 phase 5 wave 5b - ai pool: ocr-pdf, transcription, background composites (5 tools) (#226)

2026-06-13 10:19:47 +08:00

batch.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

bg-effects.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

csp.test.ts

fix: QR code logo causes preview to vanish and become unrecoverable

2026-05-06 21:38:12 +08:00

docs-route.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

effective-permissions.test.ts

test: update permission count tests for new enterprise permissions

2026-06-13 17:07:39 +08:00

encryption.test.ts

feat: add AES-256-GCM encryption at rest for sensitive settings

2026-06-13 16:35:28 +08:00

enterprise-flags.test.ts

feat: add enterprise Phase 1-4 feature flags and new permissions

2026-06-13 16:20:24 +08:00

enterprise-mock.test.ts

test: add enterprise feature mock utilities

2026-06-13 16:22:01 +08:00

errors.test.ts

fix(jobs): strip internal paths from all worker SSE error frames

2026-06-13 10:36:01 +08:00

exiftool.test.ts

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

external-auth-resolver.test.ts

refactor: extract external auth resolver from OIDC for SAML reuse

2026-06-13 22:20:22 +08:00

features-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

fetch-urls-helpers.test.ts

test: expand test coverage across all layers (+1,157 tests)

2026-06-06 19:37:29 +08:00

file-storage.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

filename.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

files-route.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

format-decoders.test.ts

fix: tolerate missing ImageMagick for all format decoder/encoder tests in CI

2026-05-09 13:03:57 +08:00

format-encoders.test.ts

fix: tolerate missing ImageMagick for all format decoder/encoder tests in CI

2026-05-09 13:03:57 +08:00

heic-converter.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

ip-allowlist.test.ts

feat(enterprise): add IP allowlisting with CIDR matching and Redis cache

2026-06-13 22:54:06 +08:00

meme-text-renderer.test.ts

feat(meme-generator): add text renderer with opentype.js SVG path generation

2026-05-08 16:01:46 +08:00

mfa.test.ts

feat(enterprise): add TOTP MFA with enrollment, verification, and recovery codes

2026-06-13 22:49:00 +08:00

object-storage.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

output-format.test.ts

fix: batch file ordering and format preservation for image tools (#20)

2026-04-06 12:53:53 +08:00

page-range.test.ts

test: comprehensive test coverage expansion (+965 tests)

2026-04-23 17:12:02 +08:00

page-spec.test.ts

feat(tools): 2.0 phase 5 wave 2 - pdf depth (21 tools) (#220)

2026-06-13 10:18:55 +08:00

permissions-extended.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

permissions.test.ts

test: update permission count tests for new enterprise permissions

2026-06-13 17:07:39 +08:00

pipeline.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

postprocess.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

progress.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

rbac-enforcement.test.ts

test: update permission count tests for new enterprise permissions

2026-06-13 17:07:39 +08:00

roles-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

settings-route.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

ssrf.test.ts

fix: block hex IPv4-mapped IPv6 in SSRF guard

2026-06-06 20:27:48 +08:00

static-upload.test.ts

fix: resolve 6 production Sentry errors

2026-06-06 16:05:59 +08:00

subtitle-format.test.ts

feat(tools): 2.0 phase 5 wave 5b - ai pool: ocr-pdf, transcription, background composites (5 tools) (#226)

2026-06-13 10:19:47 +08:00

svg-sanitize.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

teams-route.test.ts

test: massive test coverage expansion (+1,437 tests, 22 new files)

2026-05-09 09:02:29 +08:00

timeout.test.ts

test: expand unit test coverage (+437 tests, 17 new files)

2026-05-09 07:35:27 +08:00

tool-factory-route.test.ts

feat(tools): 2.0 phase 5 wave 3b - audio depth (14 tools) (#222)

2026-06-13 10:19:06 +08:00

tool-factory.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

user-files-route.test.ts

feat(db)!: SnapOtter 2.0 phase 1 foundation: postgres, migrator, compose stack (#216)

2026-06-13 10:15:23 +08:00

username-validation.test.ts

feat: production-grade RBAC with editor role, custom roles, API key scoping, and audit log (#89)

2026-04-22 18:10:04 +08:00

utilities.test.ts

feat(jobs)!: SnapOtter 2.0 phase 2 job spine: async queues, worker pools, object storage, admin dashboard (#217)

2026-06-13 10:17:13 +08:00

video-speed.test.ts

feat(tools): 2.0 phase 5 wave 3b - audio depth (14 tools) (#222)

2026-06-13 10:19:06 +08:00

webhook-delivery.test.ts

feat: add webhook delivery module with retry and backoff

2026-06-13 16:49:47 +08:00