glm-5.1 ac28c9308c fix(checkAccess): deny access when resourceType set but identity.resources undefined ...

The resource access check in checkAccess() was bypassed when identity.resources
was undefined because the condition  evaluated to false, falling through to .

Changed to  with an explicit
 check inside the block, implementing
default-deny semantics per ADR-006.

Added 7 test cases covering:
- undefined resources with resourceType set (denied)
- empty resources with resourceType set (denied)
- non-matching resource type (denied)
- matching type but wrong action (denied)
- matching type and action (granted)
- no resourceType/resourceAction set (granted)
- matching resources with extra scopes (granted)

2026-05-11 01:50:12 +00:00

.opencode/agents

added agent defs

2026-05-08 18:09:02 +00:00

docs

Add ADR-006 unified invocation path and source-vs-spec drift tables

2026-05-10 09:30:22 +00:00

src

fix(checkAccess): deny access when resourceType set but identity.resources undefined

2026-05-11 01:50:12 +00:00

test

fix(checkAccess): deny access when resourceType set but identity.resources undefined

2026-05-11 01:50:12 +00:00

.gitignore

Initial package implementation: operations registry, call protocol, and adapters

2026-04-30 12:34:26 +00:00

AGENTS.md

Update architecture docs for handler separation and pubsub API changes

2026-05-09 08:34:41 +00:00

package-lock.json

Initial package implementation: operations registry, call protocol, and adapters

2026-04-30 12:34:26 +00:00

package.json

Initial package implementation: operations registry, call protocol, and adapters

2026-04-30 12:34:26 +00:00

tsconfig.json

Initial package implementation: operations registry, call protocol, and adapters

2026-04-30 12:34:26 +00:00

tsup.config.ts

Initial package implementation: operations registry, call protocol, and adapters

2026-04-30 12:34:26 +00:00

vitest.config.ts

Initial package implementation: operations registry, call protocol, and adapters

2026-04-30 12:34:26 +00:00

Description

No description provided

692 KiB

Languages

TypeScript 100%