tyler b80e40e7e9 fix(permissions): expose GET /api/acks, /api/ta1-acks, /api/277ca-acks ...

The PERMISSIONS matrix only listed the POST /api/acks entry (parse-999
ingest). The GET list + detail endpoints for 999 / TA1 / 277CA acks
were missing, so the matrix_gate (default-deny) returned 403 to every
authenticated role, breaking the 999 ACKs / TA1 / 277CA inbox pages.

Add the three GET entries as ALL_ROLES — they're read-only metadata
surfaces that every authenticated operator needs to see. Add a
regression test that logs in as admin via the public route and
exercises the matrix; the existing test_existing_endpoints_require_auth
suite only checks the unauthenticated 401 path, which is why this slipped
through.

Fixes the live-verification 'Couldn't load ACKs from the backend /
forbidden' error reported against the UI.

2026-06-24 17:51:44 -06:00

..

fixtures

feat(sp20): NPI Luhn checksum + Tax ID (EIN) format validation

2026-06-21 10:46:10 -06:00

conftest.py

fix(api): use request.app.state in inbox endpoints; preserve dict HTTPException detail

2026-06-22 16:55:55 -06:00

test_999_rejected_state.py

feat(sp6): wire 999 ingest → claim rejected state

2026-06-20 18:29:28 -06:00

test_ack_endpoints_authenticated.py

fix(permissions): expose GET /api/acks, /api/ta1-acks, /api/277ca-acks

2026-06-24 17:51:44 -06:00

test_acks.py

feat(sp22): migration 0015 — drop inline UNIQUE on claims, add tests

2026-06-23 16:11:42 -06:00

test_api_277ca.py

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

test_api_835.py

feat(release): v0.2.0 — batch 837 export, ClaimCard, theme tokens

2026-06-22 11:01:58 -06:00

test_api_999.py

fix(api): regenerate raw_999_text in /api/acks/{id} detail response (SP3 P3 follow-up)

2026-06-20 08:06:21 -06:00

test_api_audit_log.py

feat(sp11): tamper-evident hash-chained audit_log

2026-06-20 23:45:43 -06:00

test_api_backup.py

feat(sp17): encrypted DB backup automation

2026-06-21 09:43:51 -06:00

test_api_batch_export_837.py

feat(release): v0.2.0 — batch 837 export, ClaimCard, theme tokens

2026-06-22 11:01:58 -06:00

test_api_claim_detail.py

feat(sp7): claim detail includes lineReconciliation slim projection

2026-06-20 19:37:38 -06:00

test_api_eligibility.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_api_gets.py

feat: History tab on Upload page with one-click Re-export ZIP

2026-06-24 13:57:12 -06:00

test_api_line_reconciliation.py

feat(sp7): GET /api/claims/{id}/line-reconciliation endpoint

2026-06-20 19:35:17 -06:00

test_api_parse_includes_batch_id.py

feat(release): v0.2.0 — batch 837 export, ClaimCard, theme tokens

2026-06-22 11:01:58 -06:00

test_api_parse_persists_ack.py

feat(parsers+api+ui+db): 999 ACK transaction set end-to-end (SP3 P3)

2026-06-20 08:03:37 -06:00

test_api_parse_persists.py

feat(ta1): TA1 interchange ACK parser, persistence, and API

2026-06-20 18:58:56 -06:00

test_api_rotate_key.py

feat(sp15): SQLCipher key rotation via PRAGMA rekey

2026-06-21 00:33:37 -06:00

test_api_scheduler.py

feat(sp16): live MFT polling scheduler

2026-06-21 09:20:58 -06:00

test_api_serialize_837.py

feat(sp8): GET /api/claims/{id}/serialize-837 endpoint

2026-06-20 20:34:44 -06:00

test_api_stream_live.py

feat(api): GET /api/{claims,remittances,activity}/stream + unsubscribe

2026-06-20 16:57:30 -06:00

test_api_ta1.py

feat(ta1): TA1 interchange ACK parser, persistence, and API

2026-06-20 18:58:56 -06:00

test_api_validate_provider.py

feat(sp20): NPI Luhn checksum + Tax ID (EIN) format validation

2026-06-21 10:46:10 -06:00

test_api.py

feat(release): v0.2.0 — batch 837 export, ClaimCard, theme tokens

2026-06-22 11:01:58 -06:00

test_apply_277ca_rejections.py

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

test_audit_log_user_id.py

feat(audit): record user_id on log events

2026-06-22 15:34:18 -06:00

test_audit_log.py

feat(sp11): tamper-evident hash-chained audit_log

2026-06-20 23:45:43 -06:00

test_auth_admin.py

test(auth): add test_existing_endpoints_require_auth + per-test AUTH_DISABLED flips

2026-06-22 15:59:08 -06:00

test_auth_bootstrap_file.py

feat(sp23): auth bootstrap reads CYCLONE_ADMIN_*_FILE for Docker secrets

2026-06-23 17:24:23 -06:00

test_auth_bootstrap.py

feat(auth): bootstrap first admin from env vars

2026-06-22 15:34:05 -06:00

test_auth_login_rate_limit.py

test(auth): add test_existing_endpoints_require_auth + per-test AUTH_DISABLED flips

2026-06-22 15:59:08 -06:00

test_auth_routes.py

test(auth): add test_existing_endpoints_require_auth + per-test AUTH_DISABLED flips

2026-06-22 15:59:08 -06:00

test_auth_sessions.py

test(auth): add test_existing_endpoints_require_auth + per-test AUTH_DISABLED flips

2026-06-22 15:59:08 -06:00

test_auth_users.py

test(auth): add test_existing_endpoints_require_auth + per-test AUTH_DISABLED flips

2026-06-22 15:59:08 -06:00

test_backup_crypto.py

feat(sp17): encrypted DB backup automation

2026-06-21 09:43:51 -06:00

test_backup_scheduler.py

feat(sp17): encrypted DB backup automation

2026-06-21 09:43:51 -06:00

test_backup_service.py

feat(sp17): encrypted DB backup automation

2026-06-21 09:43:51 -06:00

test_batch_diff.py

feat(batch-diff): side-by-side claim diff between two batches

2026-06-20 17:17:09 -06:00

test_cas_codes.py

feat(parsers+api+ui): expose CARC-labeled CAS adjustments (SP3 P2)

2026-06-20 07:44:41 -06:00

test_clearhouse_api.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_cli_835.py

fix(backend): make 835 summary counts consistent with total_claims

2026-06-19 17:07:54 -06:00

test_cli_backup.py

feat(sp17): encrypted DB backup automation

2026-06-21 09:43:51 -06:00

test_cli_users.py

feat(auth): CLI users subcommand

2026-06-22 15:34:18 -06:00

test_cli_validate.py

feat(sp20): NPI Luhn checksum + Tax ID (EIN) format validation

2026-06-21 10:46:10 -06:00

test_cli.py

feat(backend): click CLI for parse-837

2026-06-19 16:00:47 -06:00

test_co_medicaid_835_fixture.py

feat(backend): 835 ERA parser with BPR/CLP/SVC balancing, CO Medicaid config, CLI, and FastAPI route

2026-06-19 17:01:57 -06:00

test_co_medicaid_fixture.py

test(backend): multi-claim CO Medicaid fixture + integration test

2026-06-19 15:54:46 -06:00

test_db_crypto.py

feat(sp15): SQLCipher key rotation via PRAGMA rekey

2026-06-21 00:33:37 -06:00

test_db_migrate.py

fix(sp22): correct test fixtures in SP22 migration tests

2026-06-23 16:18:01 -06:00

test_db_models.py

feat(sp6): migration 0004 — rejection columns + state-history index

2026-06-20 18:21:29 -06:00

test_db.py

feat(backend): add cyclone.db with engine, SessionLocal, Base, init_db

2026-06-19 21:03:21 -06:00

test_docker.py

test(sp23): live bring-up test uses override + skips on port conflict

2026-06-23 17:55:41 -06:00

test_exceptions.py

feat(backend): add CycloneParseError and CycloneValidationError

2026-06-19 15:31:06 -06:00

test_existing_endpoints_require_auth.py

test(auth): add test_existing_endpoints_require_auth + per-test AUTH_DISABLED flips

2026-06-22 15:59:08 -06:00

test_filenames.py

feat(release): v0.2.0 — batch 837 export, ClaimCard, theme tokens

2026-06-22 11:01:58 -06:00

test_inbox_endpoints_sp7.py

feat(sp7): inbox lanes matched_remittance includes matched/total line counts

2026-06-20 19:43:43 -06:00

test_inbox_endpoints.py

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

test_inbox_lanes.py

feat(sp6): compute_lanes — 4 lanes on read with scoring

2026-06-20 18:31:01 -06:00

test_inbox_state.py

feat(sp6): apply_999_rejections state helper

2026-06-20 18:25:25 -06:00

test_iter_claims_received.py

Populate receivedAmount from matched Remittance.total_paid

2026-06-22 17:46:47 -06:00

test_lane_filter_acknowledged.py

feat(sp14): 5-lane Inbox UI with Payer-Rejected acknowledge action

2026-06-21 00:13:47 -06:00

test_line_reconciliation.py

feat(sp7): match_service_lines() pure function + tests

2026-06-20 19:29:21 -06:00

test_logging_formatter.py

feat(sp18): structured JSON logging + PII scrubber

2026-06-21 09:59:34 -06:00

test_logging_scrubber.py

feat(sp18): structured JSON logging + PII scrubber

2026-06-21 09:59:34 -06:00

test_logging_setup.py

feat(sp18): structured JSON logging + PII scrubber

2026-06-21 09:59:34 -06:00

test_models_270.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_models_271.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_models_835.py

feat(backend): 835 ERA parser with BPR/CLP/SVC balancing, CO Medicaid config, CLI, and FastAPI route

2026-06-19 17:01:57 -06:00

test_models_999.py

feat(parsers+api+ui+db): 999 ACK transaction set end-to-end (SP3 P3)

2026-06-20 08:03:37 -06:00

test_models.py

feat(backend): Pydantic v2 models for 837P claims

2026-06-19 15:39:08 -06:00

test_npi.py

feat(sp20): NPI Luhn checksum + Tax ID (EIN) format validation

2026-06-21 10:46:10 -06:00

test_parse_270.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_parse_271.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_parse_277ca.py

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

test_parse_835.py

fix(835): correct SVC04/SVC05 mapping per X12 005010X221A1

2026-06-20 20:44:28 -06:00

test_parse_837.py

feat(sp20): NPI Luhn checksum + Tax ID (EIN) format validation

2026-06-21 10:46:10 -06:00

test_parse_999.py

feat(parsers+api+ui+db): 999 ACK transaction set end-to-end (SP3 P3)

2026-06-20 08:03:37 -06:00

test_parse_ta1.py

feat(ta1): TA1 interchange ACK parser, persistence, and API

2026-06-20 18:58:56 -06:00

test_payer_config_277ca.py

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

test_payer_config_loading.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_payer_rejected_acknowledge.py

feat(sp14): 5-lane Inbox UI with Payer-Rejected acknowledge action

2026-06-21 00:13:47 -06:00

test_payer_summary.py

feat(api): GET /api/payers/{payer_id}/summary with 60s cache + pubsub invalidation

2026-06-21 14:28:49 -06:00

test_payer.py

feat(backend): PayerConfig with co_medicaid and generic factories

2026-06-19 15:40:09 -06:00

test_prodfiles_smoke.py

feat(sp8): outbound 837P serializer — full rebuild + round-trip tests

2026-06-20 20:27:48 -06:00

test_provider_extended_response.py

feat(api): extend /api/config/providers/{npi} with recent_claims + recent_activity

2026-06-21 14:28:49 -06:00

test_providers_seed.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_pubsub.py

feat(api): GET /api/{claims,remittances,activity}/stream + unsubscribe

2026-06-20 16:57:30 -06:00

test_reconcile_line_level.py

feat(sp7): wire match_service_lines into reconcile.run

2026-06-20 19:33:02 -06:00

test_reconcile.py

fix(backend): spec-bug fixes for T10 — Match.claim_id non-unique + reconcile test dates

2026-06-19 22:59:20 -06:00

test_scheduler.py

feat(sp16): live MFT polling scheduler

2026-06-21 09:20:58 -06:00

test_scoring.py

feat(sp6): 4-field weighted scoring module

2026-06-20 18:30:05 -06:00

test_secrets.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_security.py

feat(sp19): security hardening + rich health probe

2026-06-21 10:21:01 -06:00

test_segments.py

feat(backend): X12 segment tokenizer with ISA delimiter detection

2026-06-19 15:36:01 -06:00

test_serialize_270.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_serialize_837.py

feat(release): v0.2.0 — batch 837 export, ClaimCard, theme tokens

2026-06-22 11:01:58 -06:00

test_serialize_999.py

feat(parsers+api+ui+db): 999 ACK transaction set end-to-end (SP3 P3)

2026-06-20 08:03:37 -06:00

test_service_line_payments.py

feat(sp7): persist ServiceLinePayment + link CAS rows on 835 ingest

2026-06-20 19:27:24 -06:00

test_sftp_paramiko.py

feat(sp13): paramiko-backed SftpClient wire-up

2026-06-21 00:00:13 -06:00

test_sftp_stub.py

feat(release): v0.2.0 — batch 837 export, ClaimCard, theme tokens

2026-06-22 11:01:58 -06:00

test_store_claim_detail.py

feat(store): get_claim_detail returns full claim context with history + matched remit

2026-06-20 09:21:07 -06:00

test_store_reconcile.py

feat(sp7): wire _reconcile_pair into manual_match (T21)

2026-06-20 20:13:16 -06:00

test_store.py

fix(835): drop over-constraining UNIQUE constraints, add multi-BPR warning

2026-06-20 18:10:07 -06:00

test_validation_r200_r210.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_validator_835.py

feat(backend): 835 ERA parser with BPR/CLP/SVC balancing, CO Medicaid config, CLI, and FastAPI route

2026-06-19 17:01:57 -06:00

test_validator.py

feat(sp20): NPI Luhn checksum + Tax ID (EIN) format validation

2026-06-21 10:46:10 -06:00

test_writer.py

feat(backend): per-claim JSON writer + summary.json

2026-06-19 15:56:09 -06:00