C3B2W23andClaude Fable 5.1 667f51cb7a fix(basemap): serve CARTO key from backend, bound the map gate, add source attribution ...

Review follow-up:

- Drop the Next.js route. CARTO_API_KEY is now a regular backend registry
  key (env, .env, or the API Keys panel) served by public
  GET /api/basemap-config. Every frontend mode already proxies /api/* to
  the backend (Next.js proxy in web mode, companion server in packaged
  desktop), so this covers web and desktop with one mechanism and leaves
  the static export untouched. Also removes the invalid non-handler
  export from the route module by removing the module.
- useBasemapConfig: fail open to the unkeyed style after 3 s, abort the
  request at 15 s, apply a late key when it arrives, cache successes per
  page and retry failures on the next mount.
- Declare OSM/CARTO attribution on the raster source (same markup as the
  viewer's existing AttributionControl so MapLibre de-duplicates it).
- Tests: backend endpoint (unset / set+trimmed / persisted operator key /
  registry), hook behaviour (success, non-OK, network error, soft timeout
  then late key, hard abort, shared request and retry), attribution and
  gating source checks.
- CARTO_API_KEY moves to the backend service in docker-compose.yml; docs
  updated accordingly.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

2026-09-13 15:16:47 -07:00

..

data

Harden production checklist: dedupe live-data routes and align serializers.

2026-06-06 20:16:18 -06:00

fixtures

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00

mesh

Harden mesh bootstrap defaults

2026-07-10 20:27:56 -06:00

__init__.py

v0.9.0: in-app auto-updater, ship toggle split, stable entity IDs, performance fixes

2026-03-13 11:32:16 -06:00

conftest.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_1b_admin_hardening.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_2a_reliability.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_2b_data_access.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_2c_exception_visibility.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_3b_backend_split.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_3c_router_extraction.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_3d_peer_sync_canonicalization.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_5c_auth_log_redaction.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_5e_meshtastic_transport.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_acars_summarize.py

Add multi-airline ACARS summarizer for readable datalink dossiers.

2026-06-24 22:52:00 -06:00

test_agent_shell_settings.py

Replace mock Agent Shell overlay with inline xterm PTY and dock/expand UX.

2026-06-10 11:30:50 -06:00

test_agent_shell_ws_auth.py

security: agent-shell WS tokens and dependency audit fixes (#409)

2026-06-18 16:40:36 -06:00

test_ai_intel_store_copy_on_write.py

fix(agent): reject invalid telemetry injection payloads

2026-08-16 10:00:28 +00:00

test_ai_intel_store_mixed_items.py

fix(store): preserve non-mapping native layer entries (#508)

2026-08-14 18:30:08 -06:00

test_airframes_datalink.py

Add Airframes ACARS datalink on plane dossiers and Meshtastic planet scan.

2026-06-24 22:15:50 -06:00

test_ais_spki_pinning.py

Fix #258: AIS proxy SPKI pinning fallback for expired upstream cert (#262)

2026-05-20 20:31:56 -06:00

test_ais_upstream_health.py

Expose AISHub as an optional ships-layer backup when AISStream is silent.

2026-08-09 18:56:30 -06:00

test_aishub_api_settings.py

Expose AISHub as an optional ships-layer backup when AISStream is silent.

2026-08-09 18:56:30 -06:00

test_aishub_fallback.py

feat(ais): AISHub REST fallback when AISStream WebSocket is offline

2026-05-23 07:00:32 -06:00

test_analytics_api.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_api_settings.py

Add in-app local API key setup

2026-05-02 21:16:32 -06:00

test_api_smoke.py

Address #375 production-readiness: dev bind, live-data lock, heavy fetch pool.

2026-06-04 17:29:04 -06:00

test_aprs_is_resource_safety.py

fix: complete intelligence layer refreshes and UAP fallback

2026-08-23 20:14:07 -06:00

test_badhost_hardening.py

Fix BadHost path handling

2026-05-28 01:24:33 -06:00

test_basemap_config.py

fix(basemap): serve CARTO key from backend, bound the map gate, add source attribution

2026-09-13 15:16:47 -07:00

test_carrier_tracker_quality.py

Fix #244/#245/#246: carrier tracker seed/cache/freshness model (#285)

2026-05-21 11:15:52 -06:00

test_cctv_pipeline.py

feat: Telegram OSINT map layer, Osiris intel ports, and maritime settings

2026-06-08 21:04:08 -06:00

test_cctv_redirect_ssrf.py

[security] Close tg12 audit gaps #192, #198, #199, #200 (#260)

2026-05-20 14:45:11 -06:00

test_control_surface_auth.py

Fix #299/#300/#301: gate Sentinel proxy routes with require_local_operator

2026-05-22 09:58:25 -06:00

test_crowdthreat_opt_in.py

Harden infonet control surfaces

2026-05-18 11:22:38 -06:00

test_datacenters_fetch.py

feat: Telegram OSINT map layer, Osiris intel ports, and maritime settings

2026-06-08 21:04:08 -06:00

test_deepstate_mirror_pin.py

Pin DeepState mirror, prefer HTTPS for Madrid/KiwiSDR, document outbound data (#362–#364).

2026-06-03 14:31:31 -06:00

test_dm_relay_per_sender_cap.py

DM mailbox: per-(sender, recipient) anti-spam cap + replication primitives

2026-05-22 19:18:01 -06:00

test_dm_replicate_envelope_endpoint.py

DM mailbox: outbound replication + receiving endpoint

2026-05-22 19:23:09 -06:00

test_docker_bridge_hostname_trust.py

Fix #250: bind Docker bridge local-operator trust to frontend hostname (#278)

2026-05-21 02:06:11 -06:00

test_entity_profile.py

Add entity trail and profile commands for OpenClaw agent dossiers.

2026-06-26 00:23:40 -06:00

test_entity_trail.py

Add entity trail and profile commands for OpenClaw agent dossiers.

2026-06-26 00:23:40 -06:00

test_fetch_health.py

Add sanitized fetch health for agents

2026-07-30 22:24:25 +03:00

test_fetchers_geo.py

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00

test_flight_observations.py

feat(flights): cumulative fuel burned + CO2 emitted per flight

2026-05-23 07:56:23 -06:00

test_flight_source_attribution.py

feat(flights): stamp source attribution on every flight record

2026-05-23 06:14:39 -06:00

test_gdelt_enrichment_isolation.py

fix(gdelt): stop background thread mutating already-published features (dictionary changed size during iteration) (#388)

2026-06-15 18:23:25 -06:00

test_gdelt_gcs_direct_rewrite.py

Round 7a: per-operator outbound attribution + GDELT GCS-direct fix (#292)

2026-05-21 15:11:28 -06:00

test_gdelt_https.py

[security] Close tg12 audit gaps #192, #198, #199, #200 (#260)

2026-05-20 14:45:11 -06:00

test_gdelt_updater_hardening.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_geo_fetchers.py

feat: Telegram OSINT map layer, Osiris intel ports, and maritime settings

2026-06-08 21:04:08 -06:00

test_geocode_api.py

Pass Nominatim bbox and place_rank through the geocode proxy

2026-08-11 00:40:47 -07:00

test_gps_jamming_detector.py

fix(gps-jamming): count nac_p=0 + lower thresholds so the layer actually fires

2026-05-22 23:40:18 -06:00

test_gt_alerts.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_gt_backtest.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_gt_early_warning.py

fix: complete intelligence layer refreshes and UAP fallback

2026-08-23 20:14:07 -06:00

test_gt_feed_adapter_translate.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_gt_lean_profile.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_gt_micro_rolling.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_gt_rolling_backtest.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_icao_military.py

feat: enhance East Asia coverage with adversary bases, news sources, ICAO ranges, and PLAN vessel DB

2026-03-16 12:46:40 +09:00

test_infonet_status_verify_gate.py

[security] Close tg12 audit issues #201–#214 seamlessly (#261)

2026-05-20 19:57:06 -06:00

test_injection_entrypoints.py

fix(agent): reject invalid telemetry injection payloads

2026-08-16 10:00:28 +00:00

test_issue_375_production_hardening.py

perf: live-data deltas, payload caps, and map render polish

2026-07-30 19:40:11 -06:00

test_kiwisdr_fallback.py

[security] Close tg12 audit issues #201–#214 seamlessly (#261)

2026-05-20 19:57:06 -06:00

test_kiwisdr_https_first.py

Pin DeepState mirror, prefer HTTPS for Madrid/KiwiSDR, document outbound data (#362–#364).

2026-06-03 14:31:31 -06:00

test_layer_enable_integration.py

fix(ui): SAR credential setup in Settings and async layer toggles.

2026-06-23 01:31:16 -06:00

test_layer_enable_refresh.py

fix: complete intelligence layer refreshes and UAP fallback

2026-08-23 20:14:07 -06:00

test_layer_overrides.py

Add tests for native map layer overrides.

2026-08-08 02:08:51 -07:00

test_live_data_etag_cache.py

perf: live-data deltas, payload caps, and map render polish

2026-07-30 19:40:11 -06:00

test_live_data_snapshot_resilience.py

fix(store): harden snapshot vs concurrent writer mutation; fix SIGINT dict aliasing (#389)

2026-06-15 17:35:27 -06:00

test_live_data_viewport_bbox.py

fix: stop truncating live telemetry payloads

2026-08-01 20:31:50 -06:00

test_liveuamap_docker_contract.py

test(liveuamap): lock Playwright runtime packaging contract

2026-08-18 17:34:21 -06:00

test_liveuamap_parser.py

fix(liveuamap): preserve safe marker and wrapper semantics

2026-08-18 16:08:32 -06:00

test_liveuamap_provider.py

fix(liveuamap): preserve safe marker and wrapper semantics

2026-08-18 16:08:32 -06:00

test_liveuamap_scraper_opt_in.py

fix(liveuamap): make enrichment resilient and non-blocking

2026-08-18 15:52:46 -06:00

test_madrid_kml_https_first.py

test(cctv): Madrid KML HTTPS-first fallback; clarify KiwiSDR #364 docs

2026-06-03 14:33:01 -06:00

test_merkle_cache.py

[security] Close tg12 audit issues #201–#214 seamlessly (#261)

2026-05-20 19:57:06 -06:00

test_meshtastic_callsign_optout.py

Close tg12 outbound audit (#348-#366): operator UA, opt-ins, docs

2026-06-03 15:01:32 -06:00

test_meshtastic_topics.py

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00

test_military_bases.py

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00

test_network_utils.py

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00

test_news_keywords.py

Address remaining safe security hardening

2026-06-02 13:34:11 -06:00

test_no_new_duplicate_routes.py

Fix #239: CI guard against new duplicate route registrations (#286)

2026-05-21 13:27:16 -06:00

test_nuforc_enrichment.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_openclaw_channel_honesty.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_openclaw_connect_info_reveal.py

Fix #302: split OpenClaw HMAC reveal into dedicated POST with no-store

2026-05-22 18:40:24 -06:00

test_openclaw_gt_analytics.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_openclaw_hmac_body_binding.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_openclaw_infonet_agent.py

Ship DM connect delivery, fleet pubkey lookup, OpenClaw Infonet agent, and relay auto-wormhole.

2026-06-12 02:15:56 -06:00

test_openclaw_persisted_env.py

Fix Docker OpenClaw HMAC persistence and privacy-core build warnings.

2026-06-30 20:38:44 -06:00

test_openclaw_query_helpers.py

Add OpenClaw fast-path routing with playbooks and expensive-command gate.

2026-06-09 21:32:08 -06:00

test_openclaw_recon.py

Expose new telemetry and recon toolkit to OpenClaw agents.

2026-06-08 22:44:16 -06:00

test_openclaw_route_security.py

Add sanitized fetch health for agents

2026-07-30 22:24:25 +03:00

test_openclaw_routing.py

Add entity trail and profile commands for OpenClaw agent dossiers.

2026-06-26 00:23:40 -06:00

test_openclaw_skill_env.py

Add sanitized fetch health for agents

2026-07-30 22:24:25 +03:00

test_openmhz_redirect_ssrf.py

[security] Close tg12 audit issues #201–#214 seamlessly (#261)

2026-05-20 19:57:06 -06:00

test_oracle_resolve_auth_gate.py

Fix #240/#241: require admin auth on oracle resolve endpoints (#280)

2026-05-21 09:45:08 -06:00

test_osiris_port.py

feat: Telegram OSINT map layer, Osiris intel ports, and maritime settings

2026-06-08 21:04:08 -06:00

test_overflights_clamp.py

[security] Close tg12 audit issues #201–#214 seamlessly (#261)

2026-05-20 19:57:06 -06:00

test_p0_security.py

Fix #250: bind Docker bridge local-operator trust to frontend hostname (#278)

2026-05-21 02:06:11 -06:00

test_per_operator_outbound_attribution.py

Prepare v0.9.82 release: bump versions and changelog UI.

2026-06-08 23:05:26 -06:00

test_per_peer_secret_resolver.py

Fix #256: per-peer HMAC secrets defeat cross-peer impersonation (#281)

2026-05-21 10:05:29 -06:00

test_perf_guardrail_caps.py

fix: stop truncating live telemetry payloads

2026-08-01 20:31:50 -06:00

test_perf_p2_p8_p12.py

perf: live-data deltas, payload caps, and map render polish

2026-07-30 19:40:11 -06:00

test_perf_safe_optimizations.py

perf: live-data deltas, payload caps, and map render polish

2026-07-30 19:40:11 -06:00

test_prediction_markets_jitter.py

Add MKT opt-in on threat intercept, jittered market fetches, and Sentinel multi-scene dossier.

2026-06-04 09:01:21 -06:00

test_prediction_markets_opt_in.py

Add MKT opt-in on threat intercept, jittered market fetches, and Sentinel multi-scene dossier.

2026-06-04 09:01:21 -06:00

test_rate_limit_proxy_aware.py

Fix #287: proxy-aware rate-limit key (#295)

2026-05-22 00:51:54 -06:00

test_regen_duplicate_routes_baseline.py

chore(backend): add duplicate route baseline regenerator

2026-08-11 17:23:57 +01:00

test_region_dossier_wikimedia_ua.py

Round 7a: per-operator outbound attribution + GDELT GCS-direct fix (#292)

2026-05-21 15:11:28 -06:00

test_release_helper.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_road_corridor_sat.py

Add Sentinel-2 road freight trends with Analyze Here UI.

2026-06-07 23:39:13 -06:00

test_round5_settings_info_disclosure.py

Fix #243/#252/#253: stop leaking settings posture to anonymous callers (#283)

2026-05-21 10:32:23 -06:00

test_runtime_profile.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_schemas.py

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00

test_scm_suppliers.py

feat: Telegram OSINT map layer, Osiris intel ports, and maritime settings

2026-06-08 21:04:08 -06:00

test_security_hardening_2026_08.py

test(security): cover shell capabilities and updater trust

2026-08-17 01:07:49 -06:00

test_sentinel_credentials_server_side.py

Fix #298: move Sentinel credentials from browser storage to backend .env

2026-05-22 10:44:50 -06:00

test_sentinel_routes_auth_gate.py

Fix #299/#300/#301: gate Sentinel proxy routes with require_local_operator

2026-05-22 09:58:25 -06:00

test_sentinel_search_scenes.py

Add MKT opt-in on threat intercept, jittered market fetches, and Sentinel multi-scene dossier.

2026-06-04 09:01:21 -06:00

test_sentinel_token_cache.py

[security] Close tg12 audit gaps #192, #198, #199, #200 (#260)

2026-05-20 14:45:11 -06:00

test_sigint_cctv_accuracy.py

fix(cctv): update DGT Spain camera endpoint to etraffic.dgt.es (#413)

2026-06-24 18:57:39 -06:00

test_sigint_snapshot_isolation.py

fix(store): harden snapshot vs concurrent writer mutation; fix SIGINT dict aliasing (#389)

2026-06-15 17:35:27 -06:00

test_store.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

test_telegram_osint.py

feat: Telegram OSINT map layer, Osiris intel ports, and maritime settings

2026-06-08 21:04:08 -06:00

test_telegram_translate.py

Wire Persian into Telegram OSINT translate labels and locale docs.

2026-08-03 11:05:25 -06:00

test_telegram_watchdog.py

Feat/gt analytics openclaw (#392)

2026-06-16 17:05:46 -06:00

test_third_party_fetchers_opt_in.py

Add MKT opt-in on threat intercept, jittered market fetches, and Sentinel multi-scene dossier.

2026-06-04 09:01:21 -06:00

test_tor_bundle_symlink_filter.py

Fix #251: refuse symlink/hardlink members during Tor bundle extraction (#277)

2026-05-21 01:41:13 -06:00

test_tor_bundle_verification.py

[security] Close tg12 audit issues #201–#214 seamlessly (#261)

2026-05-20 19:57:06 -06:00

test_tor_hidden_service_socks.py

Ship ShadowBroker v0.9.83 with live Infonet gate messaging and DM protocols.

2026-06-15 15:37:29 -06:00

test_trains_fetcher.py

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00

test_uap_hf_fallback_cutoff.py

fix: complete intelligence layer refreshes and UAP fallback

2026-08-23 20:14:07 -06:00

test_update_integrity_chain.py

Fix #231: multi-source SHA-256 verification for the self-updater (#265)

2026-05-21 01:31:20 -06:00

test_wikimedia_proxy_routes.py

Route dossier, geocode, and Wikimedia through the backend (#351, #352, #360)

2026-06-02 15:20:44 -06:00

test_xquik_news.py

test(xquik): cover outage backoff and credential rotation

2026-08-23 01:45:49 -06:00