2 Commits

Include renames

Author	SHA1	Message	Date
genichinandClaude Sonnet 4.6	83e6ddead4	fix(bat-022): owner 재할당 credential 무효화 원자화 — leak 방지 (QC Major) ... update_daemon_owner()에서 owner UPDATE + credential DELETE를 단일 conn.transaction() 블록으로 묶어 원자성 보장. 실패 시 두 연산 모두 롤백되므로 "새 owner + 이전 credential 잔류" leak 상태(dcy-011 OQ-3) 가 불가능해짐. 실행 순서도 DELETE-first(안전 순서)로 고정. 단위 테스트 3종 추가: - DELETE-before-UPDATE 실행 순서 검증 - UPDATE 실패 시 rollback(commit 미호출) 검증 - 단일 transaction() 블록 안에서 두 연산 실행 검증 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VHtM5Ws1HKCKQ4JGi6GRb5	2026-06-28 14:31:00 +09:00
genichinandClaude Sonnet 4.6	d24058d863	feat(bat-022): daemon CRUD admin API + self-service credential management (REQ-052/053/054) ... - POST/PATCH/deactivate/activate /v1/admin/daemons — admin-only daemon CRUD (REQ-053) - GET/PUT/DELETE /v1/daemons/{daemon_id}/credential — user-owned scoped credential management (REQ-052) - Owner re-assignment auto-invalidates BrokerCredential via update_daemon_owner() (REQ-053 AC-4) - Deactivation auto-revokes service tokens via revoke_tokens_by_daemon_id() (REQ-022 reuse, REQ-053 AC-6) - DELETE /v1/admin/daemons/{id} → 405 (hard delete not provided, REQ-053 AC-8) - All responses exclude app_key/app_secret; Fernet encryption at rest (REQ-054) - Service-token → 403 on credential endpoints (REQ-052 AC-10) - Admin ownership scope enforced: admin cannot write other user's credential (REQ-052 AC-9) - REQ-051 regression: 4 service-token guard tests pass (REQ-054 AC-7) - 44 new tests, 565 total passed (521 baseline + 44 new), 0 failures Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VHtM5Ws1HKCKQ4JGi6GRb5	2026-06-28 14:18:37 +09:00