ilpanich / axiam-typescript-sdk / 29520182767

94%

push

github

feat(middleware): add requireAuth/requireAccess/requireRole route guards (CONTRACT §11) (#13)

* docs(contract): sync CONTRACT.md §11 declarative authorization helpers

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

* feat(middleware): add requireAuth/requireAccess/requireRole route guards (CONTRACT §11)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

* feat(nestjs): add AxiamGuard and @RequireAccess decorator

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

* docs: use en-dash in CONTRACT §1–§11 header comment

Match the exact wording in CONTRACT.md's Closing Notes (en-dash U+2013).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

* ci: add advanced CodeQL setup excluding js/missing-rate-limiting

Rate limiting is the consuming application's responsibility, not the SDK's:
the route guards deliberately do not impose a rate limiter on a consumer's
routes, so CodeQL's 'route handler performs authorization but is not
rate-limited' finding is a false positive for this library and its example
apps. Default CodeQL setup cannot read a repo-level config, so this switches
to advanced setup with a documented query exclusion.

Repo admins must disable 'Default setup' (Settings -> Code security -> CodeQL
analysis) for this workflow to become the active analysis.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

---------

Co-authored-by: Claude <noreply@anthropic.com>

342 of 385 branches covered (88.83%)

Branch coverage included in aggregate %.

158 of 161 new or added lines in 6 files covered. (98.14%)

670 of 695 relevant lines covered (96.4%)

15.58 hits per line