The copied loopback recipe inherits http_proxy and ALL_PROXY even with curl --disable. Real-curl parent controls sent the synthetic administrator-capable header to the proxy and could report its denial as a Pulse role result. Explicitly bypass proxies for the selected backend and keep the protocol boundary clear.
Exercise both response directions and three proxy environment selectors, preserving privacy, deadlines, cleanup and the existing role/IdP trust boundary. Add a repeatable production Docs/browser check for the exact copied guide.
Contract-Neutral: Documentation and synthetic recipe/browser checks only; proxy authentication semantics and runtime contracts are unchanged.
Change-source: pulse-maintainer
The first exact-source documentation shard stopped on the old lower-case phrase after the guide moved it to the start of a sentence. Keep the same uncertainty requirement and all privacy checks, then complete the failed and unreached validation.
Contract-Neutral: Case-only expected documentation wording in a regression test; no runtime or guide change.
Change-source: pulse-maintainer
The strengthened copied-command test also checks private output files, so use the shared sensitive-response fixture for its success body before qualification.
Contract-Neutral: Test fixture selection only; no runtime or access-control change.
Change-source: pulse-maintainer
Reuse the existing API helper for saved Patrol settings and deliberate Assistant control changes. Preserve methods, payloads and access scopes while keeping private response bodies out of terminal recordings and making lost-write readback explicit.
Contract-Neutral: Documentation and recipe regression tests only; existing AI settings methods, payloads and access controls are unchanged.
Change-source: pulse-maintainer
The complete current-source smoke suite exposed two stale fixtures: release objects omitted the required draft flag, and the proxy safety check assumed an emoji presentation selector absent from the shipped heading. Supply complete positive metadata while retaining draft/chart/preview and missing-maturity refusals; locate exactly one named Markdown section and discriminate missing or duplicate boundaries. Preserve all runtime, authentication, update and workflow gates.
Contract-Neutral: Test fixtures and section extraction only; product runtime, subsystem contracts, authentication boundaries and release-metadata admission are unchanged.
Change-source: pulse-maintainer
Replace incomplete provider snippets with the existing authenticator and header-replacement requirements. Surface the all-users-admin default before enablement and stop copied diagnostics on bounded transport failure, preserving credentials and actual access checks.
Contract-Neutral: Documentation and synthetic recipe tests only; proxy authentication semantics and runtime contracts are unchanged.
Change-source: pulse-maintainer
The first complete authentication-help proof exposed a fixture expectation error: curl removes a colon-only header rather than sending an empty value. Preserve that case and add the semicolon form, checking the exact transmitted value across success, denial and redirect controls. Documentation and runtime behaviour are unchanged.
Contract-Neutral: Executable documentation control correction only; no authentication, authorisation, frontend or runtime contract delta.
Change-source: pulse-maintainer
Use private header files rather than shared passwords or proxy secrets in process arguments. Separate intentional AI settings writes from diagnostics, distinguish proxy denials from authentication/transport failures, and preserve the real proxy trust boundary and 5.x limitation. Exercise copied commands, private-file preparation and rendered help.
Contract-Neutral: Documentation and executable help controls only; no authentication, authorization, AI autonomy or runtime contract change.
Change-source: pulse-maintainer
pulse-triage[bot]