operations

Files

glm-5.1 ac28c9308c fix(checkAccess): deny access when resourceType set but identity.resources undefined

The resource access check in checkAccess() was bypassed when identity.resources
was undefined because the condition  evaluated to false, falling through to .

Changed to  with an explicit
 check inside the block, implementing
default-deny semantics per ADR-006.

Added 7 test cases covering:
- undefined resources with resourceType set (denied)
- empty resources with resourceType set (denied)
- non-matching resource type (denied)
- matching type but wrong action (denied)
- matching type and action (granted)
- no resourceType/resourceAction set (granted)
- matching resources with extra scopes (granted)

2026-05-11 01:50:12 +00:00

call.test.ts

fix(checkAccess): deny access when resourceType set but identity.resources undefined

2026-05-11 01:50:12 +00:00

env.test.ts

Initial package implementation: operations registry, call protocol, and adapters

2026-04-30 12:34:26 +00:00

error.test.ts

Initial package implementation: operations registry, call protocol, and adapters

2026-04-30 12:34:26 +00:00

from_openapi.test.ts

Initial package implementation: operations registry, call protocol, and adapters