weichen 4b98e25687 Seed settings with an auto-minted temporary key when auth is on ...

Why: seed_settings PUTs /api/settings/user without credentials, so under the PG tier's always-on auth the seed always 401s and model config silently never lands (reproduced on the dev instance 2026-10-11; settings had to be written by hand).
Evidence: make test-governance && make test exit=0 (receipt 8ffc3a89); tests/test_svc.py adds three stub-based cases - auth-on seeds with a Bearer header and create/revoke around the PUT, --seed-owner skips account lookup, auth-off stays credential-free; 14/14 svc tests green.
Impact: deployments that pass SVC_MODEL_*/SVC_TAVILY_KEYS now seed reliably regardless of auth mode; a temporary apikey (name=svc-seed) is minted for the first admin (or --seed-owner/SVC_SEED_OWNER) and revoked right after; auth-off path unchanged.
Refs: task card feature-svc-seed-auth.

2026-10-11 14:58:36 +00:00

..

test_ci_credentials.py

Lock CI checkout credential scope to the injected server and allowlist

2026-10-05 13:45:58 +00:00

test_evidence.py

Close review gaps in cleanup and evidence handling

2026-10-05 13:07:10 +00:00

test_svc_precheck.py

Merge origin/main: supersede the PR #317 minimal fix with the unified resolver

2026-10-11 09:21:27 +00:00

test_svc.py

Seed settings with an auto-minted temporary key when auth is on

2026-10-11 14:58:36 +00:00

test_task.py

Disable auto-gc in the task-lifecycle remote fixture

2026-10-09 17:10:18 +00:00

test_write_guard.py

Make development gates preserve work and verifiable evidence

2026-10-05 12:36:02 +00:00