Clintchiz 703baa1ead fix(authz): strengthen permissionMatches warning, complete export coverage ...

Move the "don't gate on permissionsFor() with permissionMatches" warning
onto permissionMatches itself so it's visible via autocomplete, not just
on AuthzResolver.permissionsFor. Round out exports.test.ts to cover
scopeKey, safeRecord, and AUTHZ_LOCALS_KEY, closing the gap where
dropping either export from index.ts would not fail the test.

2026-08-04 19:38:07 +05:30

..

audit.test.ts

fix(authz): widen logSafe to strip NEL and Unicode line separators

2026-08-04 17:29:46 +05:30

authz.test.ts

fix(authz): stop authorizeDecision leaking policy names in 403 bodies

2026-08-04 19:17:48 +05:30

catalog.test.ts

feat(authz): merge declaration modules into a frozen catalog

2026-08-04 16:30:41 +05:30

engine.test.ts

fix(authz): fix perf, doc, and fail-open gaps found in second review

2026-08-04 18:15:34 +05:30

exports.test.ts

fix(authz): strengthen permissionMatches warning, complete export coverage

2026-08-04 19:38:07 +05:30

middleware.test.ts

fix(authz): stop encodeURI from double-encoding a percent-escaped redirectTo

2026-08-04 19:10:09 +05:30

rbac-wildcard.test.ts

fix(security): close SSRF, credential-leak, and auth bypass findings in 0.8.4

2026-08-04 15:57:22 +05:30

registry.test.ts

feat(authz): add defineAuthz declaration registry

2026-08-04 16:26:17 +05:30

store-cached.test.ts

fix(authz): eliminate cache-key collision in cachedPermissionStore

2026-08-04 17:04:19 +05:30

store-conformance.ts

fix(authz): cover grant/deny scope isolation and revoke scope-isolation in conformance suite

2026-08-04 16:43:08 +05:30

store-memory.test.ts

feat(authz): add PermissionStore contract with memory adapter and conformance suite

2026-08-04 16:36:57 +05:30