Build a reqwest client that stores cookies automatically (for session auth).

Start a test server in a temporary directory bound to a random port. Returns `(base_url, temp_dir)`. Keep `temp_dir` alive for the duration of the te

Log in as the seeded admin; the session cookie is stored on `client`.

Run the built-in detector identified by `key` using `client`. Returns `(UnlockStatus, Option<region_string>, latency_ms)`. Unknown keys return `Unloc

Find a single preset target by ID.

Close a terminal session.

Register an agent (enrollment → register) and return `(server_id, token)`.

Create a pending server via the admin API and return its server id.

Create a second user with the given role and return an authenticated client logged in as that user. Requires an already-authenticated admin client.

Receive the next text frame from the agent socket, parsed as JSON (5s timeout).

Build a reqwest client that stores cookies automatically.

Start a test server in a temporary directory with a random port. Returns `(base_url, temp_dir)` where `temp_dir` is kept alive for the duration of the

Extract the real client IP address from a request. Security model: - If `trusted_proxies` is empty, return the TCP source IP directly (XFF ignored).

Login as admin and return the authenticated client (with session cookie).

Dispatch a single `ServerMessage` (as JSON) through the method.

Delete a file or directory.

Get the mpsc sender for a specific agent to send commands to it.

Open the agent WebSocket with the given token and return its split halves.

Set a config value by key (upsert).

Check if a specific capability bit is set.

Build the dedicated reqwest client for IP quality checks. - Automatic redirects are disabled; the checker follows them manually so every hop's host c

Complete the SystemInfo handshake with the given capability bitmask and wait for the server's Ack. `agent_local_capabilities = None` lets the server a

Register a new agent connection and broadcast ServerOnline to browsers.

Fetch `request`, following redirects manually (so each hop is SSRF-checked), and return an [`HttpOutcome`]. - Validates the initial URL via [`ssrf::v

Parse the host and port from target string. Supports "host" and "host:port".

Classify a TikTok probe response.

Compute billing cycle date range. Returns (start_date_inclusive, end_date_inclusive).

Persist a security event, broadcast it, and evaluate matching alert rules inline. Returns the generated event id.

Send any `ServerMessage` as a text frame.

Helper: POST /api/servers and return (server_id, enrollment_id, code).

Build a DockerManager pointing at a bogus HTTP endpoint. `Docker::connect_with_http` only constructs the transport; it performs no network I/O and ne

Bind a loopback listener and return it plus its bound address.

Build a reporter config that points at the given loopback `ws_addr` (`host:port`) and disables every network-touching background task so the fake serv

Helper: insert a test server into the database.

Build a minimal CreateIncident with all optional fields at their defaults.

Read text frames from the agent until one decodes into an `AgentMessage` matching `pred`, returning it. Pings/Pongs/binary frames and non-matching mes

Overwrite the migration-seeded singleton `status_page` row so tests can drive the config / scope branches deterministically.

Start an in-process test server and return a context exposing both the base URL and the underlying sea-orm connection so tests can seed rows directly.

Accept one TCP connection and complete the WebSocket handshake.