Adam Moussa 042a03b3a4 Merge main into WO template-parser + Bedrock branch ... Bring the two post-fork main merges into the feature branch: #97 (PO revision/cancellation conditional-write logic, web-UI auth/XSS, KMS-grant removal, Secrets Manager hardening) and #98 (fail-closed SES sender authentication). Conflicts resolved by union so all prior work survives: - wo/po email_processor handlers: authenticate first (#98), then parse; WO keeps template-first parse + Bedrock fallback + EMF metric + issue #23 comment_id fix; PO keeps #97 conditional writes on top of the Bedrock provider switch. The retired Anthropic Secrets Manager client is dropped (Bedrock migration) rather than hardened. - cdk stacks: union of #97 web-ui secret handling + KMS-grant removal, #98 ALLOWED_DKIM_DOMAINS env + sender-auth-rejected alarm, and the branch's Bedrock dual-ARN grant, anthropic-secret removal, and template-fallback alarm. Restore the aws_secretsmanager import that the auto-merge silently dropped from both stacks. - README, conftest, requirements, .gitignore: union of all suites/docs. - test_bedrock_fallback: bypass the new INFRA-107 auth gate in the two dispatch tests (auth is covered by test_ses_auth). Refs: #99		2026-07-15 21:15:11 -04:00
..
conftest.py	Merge main into WO template-parser + Bedrock branch	2026-07-15 21:15:11 -04:00
requirements.txt	Land safe fixes from 2026-06-17 security sweep (#97)	2026-07-15 20:17:46 -04:00
test_pad_zip.py	Add pytest suite and enable tests in CI (#95)	2026-07-15 19:06:20 -04:00
test_parse_raw_email.py	Add pytest suite and enable tests in CI (#95)	2026-07-15 19:06:20 -04:00
test_po_merge.py	Land safe fixes from 2026-06-17 security sweep (#97)	2026-07-15 20:17:46 -04:00
test_ses_auth.py	Add fail-closed SES sender authentication (INFRA-107) (#98)	2026-07-15 20:58:47 -04:00