datatug / datatug-cli / 41664325970

100%

push

github

feat: expose bound read-only environment discovery (#558)

Allow a restricted native connection to report its bound environment through the existing `project_full` response, so the web client can list it without access to owner-only environment management state. The optional versioned `contextualEnvironments` projection includes exact source scope and read-only parent lifecycle provenance. An archived parent preserves authorized contextual reads; a separately archived child is omitted from default choices.

Existing raw bound fields and all unbound responses remain intact. Missing or malformed lifecycle metadata makes only the new projection unavailable. Revoked/replaced source, root or session authority still denies the read. No route allowlist, policy evaluator, Core export, management state or write authority is added.

Validation: full affected API/local-project/endpoint suites passed, followed by focused revocation, metadata, archive/restore and filesystem custody checks after review fixes; scoped lint reports zero issues. All92/92 instrumented blocks touching added production lines, including endpoint changes, have coverage. Independent exact-head security review has no findings. Browser integration and post-release acceptance belong to the coordinated Apps consumer increment.

Source commits:

- b9eed135e1bd feat: project bound contextual environment discovery
- ca591e04fed4 fix: fence contextual metadata failures and cover producer boundaries

Pull request: datatug/datatug-cli#558
Review: /private/tmp/das-cli-contextual-ca591-review.md

166 of 166 new or added lines in 3 files covered. (100.0%)

89250 of 89251 relevant lines covered (100.0%)

1.01 hits per line