nogoo9 / no-crd / 27233490639

76%

push

github

release: v0.8.1 (#27)

* fix(auth): support custom JSONPaths in session cookie reconstitution

Stateless session cookies (nocr_sess) are reconstituted into dummy JWT
payloads upon parsing. Reconstruct the payload dynamically using dot-notation
JSONPaths (AUTH_SUB_JSONPATH and AUTH_ROLES_JSONPATH) so downstream resource
ownership and role verification guards succeed when custom claims are configured.

Also updates Keycloak realm mappings to use custom claims, configures MCP
deployment to use them in the local sandbox, and adds ADR-016 to document the
design decision. Refactors E2E testing to cover session cookie validation under
custom JSONPath mappings on live k3d clusters.

* chore: bump version to 0.8.1

* feat(api): parse and support dynamic refresh interval annotations

* docs(changelog): update 0.8.1 release notes and map refresh annotations

- Document v0.8.1 release with links to ADR-016, ADR-017, and ADR-018.
- Register `nogoo9/api.stats.refresh` and `nogoo9/api.last_activity.refresh` constants.
- Regenerate dynamic permissions and annotations tables in README and docs.

* docs(templates): document reserved stats & last_activity api annotations

---------

Co-authored-by: Antigravity Agent <agent@antigravity>

129 of 154 new or added lines in 10 files covered. (83.77%)

6707 of 9238 relevant lines covered (72.6%)

20.3 hits per line