4 Commits

Include renames

Author	SHA1	Message	Date
ClintchizandClaude Opus 5	e01915823a	feat(rpc): transport, server, client, http, mounting, docs (Tasks 5-11) ... Brings the uncommitted body of work under version control so it cannot be lost. Gates are green: 152 tests pass across rpc/router/dev-server, typecheck, lint, format and check:public-api all clean. NOT YET REVIEWED. None of Tasks 5-11 has had an independent task review, and Task 4's second fix round was never re-reviewed either. Known gaps against the plan, recorded here rather than discovered later: - packages/rpc/test/{transport,server,client}.test.ts are ABSENT. The plan required a test file for each. server.ts holds the fail-closed identity and permission checks and currently has no direct coverage at all. - rpc-endpoint.test.ts has 3 tests where the plan specified 9. Missing: unknown service, non-POST, malformed body, non-rpc passthrough, and the isInternalCaller sweep. This is the task where a reachable /__wrnexus/rpc/* makes every permission check in the workspace bypassable. - http.test.ts has 3 of 7; integration.test.ts 2 of 3; services-discovery.test.ts 1 of 4. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-05 19:38:04 +05:30
Clintchiz	e7743cdbb5	feat(router): discover app/authz declarations ... Scan app/authz/<name>.{ts,js} the same way app/schemas is scanned, exposing Router.authz: ComponentRef[]. Also update the two other literal Router construction sites (prod runtime, dev-server test fixture) that now need the new required field. scanDir gains an optional extraExtensions parameter (default []) so the authz scan can accept .js files without widening the extension allow-list used by route scanning (app/pages, app/api, app/realtime), which would otherwise leak .js into generated route URLs via fileToRoute.	2026-08-04 19:52:37 +05:30
Clintchiz	4550a11460	release: WRNexusJS 0.8.2	2026-08-03 02:14:54 +05:30
Clintchiz	586a6db8ff	release: WRNexusJS 0.8.0	2026-08-02 23:18:51 +05:30