rogerpadilla / uql / 28990276955

95%

push

github

feat(uql-orm): security filter condition {} means "no restriction" (trusted system context)

Driven by real multi-tenant usage: maintenance jobs (startup recovery, cleanup
sweeps) must span all tenants, but a fail-closed security filter had no sanctioned
escape - a condition returning {} previously produced broken SQL ($and: [{}]).
Now {} means "resolved: no restriction" and merges nothing, while undefined still
fails closed. Covered by a unit spec (system/tenant/missing-context) and verified
end-to-end against the sqlite dialect.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

3230 of 3577 branches covered (90.3%)

Branch coverage included in aggregate %.

2 of 2 new or added lines in 1 file covered. (100.0%)

5611 of 5738 relevant lines covered (97.79%)

384.98 hits per line