mehmet turacandGitHub a588cefd2b test(daemon): add regression tests for headerless /raw/ reads of workspace-bound projects (#7206) ...

* test(daemon): add regression tests for headerless raw reads of workspace-bound projects

Closes #7072.

The /raw/ and /preview/ routes call authorizeProjectRequest with
{ mode: 'read', allowNavigationQuery: true }. Before the
enforceLocalProjectDataPlaneRequest refactor, these routes delegated to
enforceVerifiedWorkspaceResourceRead, which required an explicit workspace
context for any workspace-bound project and returned
WORKSPACE_CONTEXT_REQUIRED (400) when headers were absent — breaking
local/desktop preview iframes and MCP preview URLs for projects with a
personal workspace_projects binding.

The two new test cases pin the corrected behaviour: a headerless request
to authorizeProjectRequest with allowNavigationQuery: true must succeed
(return true, not call any remote verifier) for both personal and team
workspace-bound projects, matching exactly what an iframe src or a bare
loopback fetch sends.

* chore: retrigger CI after flaky workspace-restoration P0

* chore: retrigger CI after repeated workspace-restoration flake

2026-08-23 03:48:14 +00:00

..

daemon

test(daemon): add regression tests for headerless /raw/ reads of workspace-bound projects (#7206)

2026-08-23 03:48:14 +00:00

desktop

chore(release): bump main to 0.20.3 ahead of stable 0.20.2 (#7253)

2026-08-21 20:57:23 +00:00

landing-page

chore(release): bump main to 0.20.3 ahead of stable 0.20.2 (#7253)

2026-08-21 20:57:23 +00:00

packaged

chore(release): bump main to 0.20.3 ahead of stable 0.20.2 (#7253)

2026-08-21 20:57:23 +00:00

web

chore(release): bump main to 0.20.3 ahead of stable 0.20.2 (#7253)

2026-08-21 20:57:23 +00:00

AGENTS.md

refactor(ci): align tools-pack sources with scope boundaries (#7230)

2026-08-21 07:56:48 +00:00