Commit Graph

Select branches

Hide Pull Requests

chore/pending-workspace-changes

feat/navigation-phase-1

feat/navigation-phase-3

feat/react-islands

feat/wrn-html-editing

fix/runtime-observer-consolidation

fix/ui-typography-pagination-i18n

main

main-80

ui/sso-component-parity

v0.2.31

v0.2.32

v0.2.33

v0.2.34

v0.2.35

v0.2.38

v0.2.39

v0.2.40

v0.2.41

v0.2.42

v0.2.43

v0.2.44

v0.2.46

v0.2.47

v0.7.0

Mono Color

• b4d3cb3695 feat(ui): rewrite Tabs onto wire classes with URL sync and roving focus ClintchizandClaude Opus 5 2026-08-07 17:18:00 +05:30
• 124da548b8 chore(ui): wire color and size into the new navigation components ClintchizandClaude Opus 5 2026-08-07 16:57:10 +05:30
• f4960f2fc5 feat(ui): build the Nav component with submenus and roving focus ClintchizandClaude Opus 5 2026-08-07 16:47:20 +05:30
• 45ef035bae feat(ui): build the Stepper component ClintchizandClaude Opus 5 2026-08-07 16:44:12 +05:30
• b67a5e43eb feat(ui): build the Pagination component ClintchizandClaude Opus 5 2026-08-07 16:41:56 +05:30
• 7ac6e08544 fix(csr): make dialog visibility testable and cover the focus trap ClintchizandClaude Opus 5 2026-08-07 16:40:30 +05:30
• f94004648d feat(csr): runtime-owned roving arrow-key focus ClintchizandClaude Opus 5 2026-08-07 16:38:44 +05:30
• e8e1a2623b docs: navigation phase 1 implementation plan ClintchizandClaude Opus 5 2026-08-07 16:35:42 +05:30
• ecb93c7116 docs: navigation component group design ClintchizandClaude Opus 5 2026-08-07 16:28:30 +05:30
• f01a308287 chore(release): stage 0.8.5 package tarballs ClintchizandClaude Opus 5 2026-08-07 15:16:43 +05:30
• 1fb1a8d2d0 chore(release): prepare 0.8.5 ClintchizandClaude Opus 5 2026-08-07 15:08:05 +05:30
• 949cf78636 feat(ui): add DataTable and Toaster, drop the legacy Table, fix overlay dialogs ClintchizandClaude Opus 5 2026-08-07 14:57:17 +05:30
• 296728d51d merge: inter-app RPC Clintchiz 2026-08-05 21:40:30 +05:30
• 98205daef6 fix(rpc): isolate integration test from cross-suite fetch pollution Clintchiz 2026-08-05 20:57:08 +05:30
• 3eec9fd8c6 fix(rpc): close the four final-review blockers on inter-app RPC ClintchizandClaude Opus 5 2026-08-05 20:36:31 +05:30
• 6aaf21aa06 feat(rpc): add the caller-side example and close remaining coverage gaps ClintchizandClaude Opus 5 2026-08-05 20:21:41 +05:30
• ce68803471 fix(rpc): close the service-collision fail-open and the fix-wave gaps ClintchizandClaude Opus 5 2026-08-05 20:10:20 +05:30
• 7c4b484d0a fix(rpc): close prototype-chain permission bypass, add server/client/transport tests ClintchizandClaude Opus 5 2026-08-05 19:46:59 +05:30
• fcf4ed3039 docs: close a prototype-chain authorization bypass in the plan ClintchizandClaude Opus 5 2026-08-05 19:42:49 +05:30
• e01915823a feat(rpc): transport, server, client, http, mounting, docs (Tasks 5-11) ClintchizandClaude Opus 5 2026-08-05 19:38:04 +05:30
• 9bc0f48514 fix(rpc): close the iat fail-open and tighten the identity guards ClintchizandClaude Opus 5 2026-08-05 18:32:41 +05:30
• 9f599e02e8 docs: close the iat fail-open and tighten the Task 4 identity guards ClintchizandClaude Opus 5 2026-08-05 14:36:05 +05:30
• 83c99cc3e5 fix(rpc): close identity-token fail-open and validation gaps ClintchizandClaude Opus 5 2026-08-05 14:26:14 +05:30
• 1393a8a3b8 docs: close a fail-open and three gaps in the Task 4 identity plan ClintchizandClaude Opus 5 2026-08-05 14:21:38 +05:30
• 2257ee871e feat(rpc): add the signed subject-context token ClintchizandClaude Opus 5 2026-08-05 14:12:42 +05:30
• 40625e98ed fix(rpc): deep-freeze procedures in defineService, not just the map Clintchiz 2026-08-05 14:03:40 +05:30
• e0bd84247e docs: deep-freeze procedures in the Task 3 plan snippet ClintchizandClaude Opus 5 2026-08-05 14:01:52 +05:30
• 34d5bbc810 docs: add the missing cast to .input() in the Task 3 plan snippet ClintchizandClaude Opus 5 2026-08-05 13:54:23 +05:30
• e16903b286 feat(rpc): add defineService and the immutable procedure builder Clintchiz 2026-08-05 13:53:14 +05:30
• 21ea8a84a0 fix(rpc): bound retryable status range and add malformed-response code ClintchizandClaude Opus 5 2026-08-05 13:45:37 +05:30
• dd8354477d docs: close three retryability gaps in the Task 2 plan snippet ClintchizandClaude Opus 5 2026-08-05 13:43:39 +05:30
• 796b19d923 feat(rpc): add service errors and retryability classification ClintchizandClaude Opus 5 2026-08-05 13:37:52 +05:30
• 3e1d7db537 fix(rpc): resolve lint warnings from review follow-up Clintchiz 2026-08-05 09:59:23 +05:30
• a4c7d7b298 docs: drop a redundant eslint directive and note a Bun test quirk ClintchizandClaude Opus 5 2026-08-05 09:54:08 +05:30
• e1fca3eddf feat(rpc): scaffold the package and shared contract types Clintchiz 2026-08-05 09:52:48 +05:30
• 63e6148cdb docs: implementation plan for the inter-app communication system ClintchizandClaude Opus 5 2026-08-05 09:37:39 +05:30
• 87d33a2ce1 docs: design for the inter-app communication system ClintchizandClaude Opus 5 2026-08-05 09:27:43 +05:30
• 2ab7b1e762 chore: sync the lockfile with the authz workspace dependencies ClintchizandClaude Opus 5 2026-08-05 08:41:22 +05:30
• 2e93124080 merge: 0.8.4 security audit fixes and the permissions system ClintchizandClaude Opus 5 2026-08-05 08:37:55 +05:30
• 2c339bee15 docs: record the adjudicated non-blocking authz findings ClintchizandClaude Opus 5 2026-08-05 02:20:39 +05:30
• 41b6e2ed2b fix(authz): freeze catalog values after boot; correct compile-time-check claims ClintchizandClaude Opus 5 2026-08-05 02:10:24 +05:30
• 3867e7c183 fix(authz): audit getResource denials; fail closed on a malformed denies shape ClintchizandClaude Opus 5 2026-08-05 02:10:11 +05:30
• a7255fa1bd fix(dev-server): don't clobber a caller-set authz catalog; drop dead RuntimeDeps.authz ClintchizandClaude Opus 5 2026-08-05 02:10:00 +05:30
• fd5e2b7128 test(authz): end-to-end integration coverage, worked example, and docs Clintchiz 2026-08-05 01:22:13 +05:30
• 57097c8204 fix(authz): fix prod boot-order (C1), dev HMR staleness (I2), add prod coverage (I4) Clintchiz 2026-08-04 23:16:41 +05:30
• 226217ecbf feat(authz): reach the merged catalog from boot via a process-wide singleton Clintchiz 2026-08-04 22:40:42 +05:30
• daea59cf5d feat(dev-server): load the authz catalog at boot Clintchiz 2026-08-04 22:03:28 +05:30
• bc5437063d fix(cli): declare @wrnexus/authz dependency, exit cleanly on bad authz input Clintchiz 2026-08-04 21:51:38 +05:30
• b9098382b3 feat(cli): add wrnexus authz list/generate/init Clintchiz 2026-08-04 21:34:56 +05:30
• e5d0654d2a docs: join the DDL statement lists in the Task 13 init command ClintchizandClaude Opus 5 2026-08-04 21:26:10 +05:30
• 3ef353de83 docs: use JSON.stringify for codegen escaping in the Task 12 plan ClintchizandClaude Opus 5 2026-08-04 21:20:11 +05:30
• 726b8a7d24 feat(authz): generate Permission and Role union types Clintchiz 2026-08-04 21:19:04 +05:30
• 91e5c6e0c5 fix(authz): guard scopeKey's tenantId type, add deterministic C1/C2 guard ClintchizandClaude Opus 5 2026-08-04 21:06:11 +05:30
• 2fbf059c00 docs: type-guard tenantId and add a no-transaction regression guard ClintchizandClaude Opus 5 2026-08-04 21:01:26 +05:30
• 1cc0b97a72 fix(authz): replace vacuous concurrency test, validate effect in memory store ClintchizandClaude Opus 5 2026-08-04 20:52:18 +05:30
• 134c5fa4bc docs: replace a vacuous conformance test with an honest one ClintchizandClaude Opus 5 2026-08-04 20:48:38 +05:30
• 205f4e2d4c fix(authz): close fail-open db store defects from review round 1 ClintchizandClaude Opus 5 2026-08-04 20:46:48 +05:30
• f19462dff0 docs: fix fail-open concurrency and effect handling in the Task 11 plan ClintchizandClaude Opus 5 2026-08-04 20:33:45 +05:30
• 3fa3fce5df feat(authz): add database-backed PermissionStore Clintchiz 2026-08-04 20:22:31 +05:30
• 218f5e2dd6 chore: add .gitattributes enforcing LF ClintchizandClaude Opus 5 2026-08-04 20:17:39 +05:30
• e136fbc56a fix(router): quietly skip permissions.gen.{ts,js} in authz scan ClintchizandClaude Opus 5 2026-08-04 20:09:16 +05:30
• 41fb82b9e9 docs: skip generated type files in the Task 10 authz scan ClintchizandClaude Opus 5 2026-08-04 19:55:33 +05:30
• e7743cdbb5 feat(router): discover app/authz declarations Clintchiz 2026-08-04 19:52:37 +05:30
• 703baa1ead fix(authz): strengthen permissionMatches warning, complete export coverage Clintchiz 2026-08-04 19:38:07 +05:30
• e05ddc7aa5 docs: warn against the permissionMatches + permissionsFor composition ClintchizandClaude Opus 5 2026-08-04 19:36:24 +05:30
• 6f3a53b9ff feat(authz): export registry, store, engine, and middleware surface Clintchiz 2026-08-04 19:29:08 +05:30
• 13859ce7dc docs: add deniedBy to the Task 9 export list ClintchizandClaude Opus 5 2026-08-04 19:25:40 +05:30
• e15422ed8d fix(authz): stop authorizeDecision leaking policy names in 403 bodies Clintchiz 2026-08-04 19:17:48 +05:30
• 3f1fcd0d2d fix(authz): stop encodeURI from double-encoding a percent-escaped redirectTo Clintchiz 2026-08-04 19:10:09 +05:30
• 798f56734a docs: stop double-encoding redirectTo in the Task 7 plan snippet ClintchizandClaude Opus 5 2026-08-04 19:07:15 +05:30
• 77b9e49bf2 fix(authz): fold subject into the memo key, fix symbol/-0 and redirect issues Clintchiz 2026-08-04 18:59:56 +05:30
• 9e3624e584 docs: put the subject in the memo key in the Task 7 plan snippet ClintchizandClaude Opus 5 2026-08-04 18:54:30 +05:30
• b7f3507b59 fix(authz): close memo cross-authorization and guard hardening gaps Clintchiz 2026-08-04 18:41:18 +05:30
• cc8085bcfa docs: fix memo-key cross-authorization in the Task 7 plan snippet ClintchizandClaude Opus 5 2026-08-04 18:35:05 +05:30
• 984c6236d3 feat(authz): add request middleware, can(), and guardPermission Clintchiz 2026-08-04 18:24:40 +05:30
• cd82bec414 fix(authz): fix perf, doc, and fail-open gaps found in second review ClintchizandClaude Opus 5 2026-08-04 18:15:34 +05:30
• d6a2d05407 docs: hoist the deny set and document permissionsFor's limits ClintchizandClaude Opus 5 2026-08-04 18:09:34 +05:30
• ae37c9b57a fix(authz): close fail-open engine gaps found in review ClintchizandClaude Opus 5 2026-08-04 17:58:28 +05:30
• 86b3dc1e6a docs: close two auth bypasses and four fail-open paths in the Task 6 engine snippet ClintchizandClaude Opus 5 2026-08-04 17:52:04 +05:30
• c499f136fd docs: fix self-contradictory audit test in the Task 6 plan snippet ClintchizandClaude Opus 5 2026-08-04 17:41:11 +05:30
• 6d8b6daba9 feat(authz): add resolution engine with deny-wins precedence and fail-closed errors Clintchiz 2026-08-04 17:40:19 +05:30
• d7509421c7 fix(authz): widen logSafe to strip NEL and Unicode line separators Clintchiz 2026-08-04 17:29:46 +05:30
• d609a41222 docs: widen logSafe to Unicode line separators in the Task 5 plan snippet ClintchizandClaude Opus 5 2026-08-04 17:26:02 +05:30
• e710756baf fix(authz): sanitize control characters in console audit sink Clintchiz 2026-08-04 17:21:09 +05:30
• ba83038d8d docs: fix audit-log injection in the Task 5 plan snippet ClintchizandClaude Opus 5 2026-08-04 17:19:05 +05:30
• f033197850 feat(authz): add pluggable authorization audit sink Clintchiz 2026-08-04 17:10:03 +05:30
• dc0771308a fix(authz): eliminate cache-key collision in cachedPermissionStore Clintchiz 2026-08-04 17:04:19 +05:30
• 83f2951035 docs: fix cache-key collision in the Task 4 plan snippet ClintchizandClaude Opus 5 2026-08-04 17:00:35 +05:30
• 4362d49770 feat(authz): add caching decorator for PermissionStore Clintchiz 2026-08-04 16:47:50 +05:30
• a01b7bc99e fix(authz): cover grant/deny scope isolation and revoke scope-isolation in conformance suite Clintchiz 2026-08-04 16:43:08 +05:30
• 9b6b970cae chore: exclude the SDD scratch workspace from prettier ClintchizandClaude Opus 5 2026-08-04 16:38:24 +05:30
• 1849213ce4 feat(authz): add PermissionStore contract with memory adapter and conformance suite Clintchiz 2026-08-04 16:36:57 +05:30
• d694dda320 feat(authz): merge declaration modules into a frozen catalog Clintchiz 2026-08-04 16:30:41 +05:30
• 212fdaa5b5 feat(authz): add defineAuthz declaration registry Clintchiz 2026-08-04 16:26:17 +05:30
• 0ac648bc26 docs: resolve two pre-flight conflicts in the authz plan ClintchizandClaude Opus 5 2026-08-04 16:24:07 +05:30
• 10da210b0a docs: implementation plan for the authz permissions system ClintchizandClaude Opus 5 2026-08-04 16:10:37 +05:30
• b209936f86 docs: design for the authz permissions system ClintchizandClaude Opus 5 2026-08-04 15:57:22 +05:30
• c64434a131 fix(security): close SSRF, credential-leak, and auth bypass findings in 0.8.4 ClintchizandClaude Opus 5 2026-08-04 15:57:22 +05:30
• 72e4d3eceb release: WRNexusJS 0.8.0 Clintchiz 2026-08-04 12:19:09 +05:30
• 4cebacadfe release: WRNexusJS 0.8.3 Clintchiz 2026-08-03 19:47:30 +05:30