ng-eventually

Files

T

Sylvain Duchesne 42174608f8 fix(client): reserve the discovery @index account key (prevent user collision)

The special discovery-index account was keyed as "@index", which the consumer's
normalizeUsername collapses to "index" — colliding with a real user named
"index" (who could then hijack/tamper the global index document). Introduce a
reserved-account namespace (a sentinel key unreachable by any typed username) so
the index account can never collide with user input. Test proves a user named
"index"/"@index" resolves to a DIFFERENT document than the reserved index
account. 80 tests pass; tsc rc=0.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-04 09:58:52 +02:00

accounts.test.ts

feat(client): generic shared-wallet shim surface (docs/storeRegistry/isolation/accounts)

2026-07-03 10:12:55 +02:00

caps.test.ts

feat(client): inbox mechanism, write-guard, SPARQL injection hardening

2026-07-03 15:51:00 +02:00

discovery.test.ts

fix(client): reserve the discovery @index account key (prevent user collision)

2026-07-04 09:58:52 +02:00

docs.test.ts

feat(client): generic shared-wallet shim surface (docs/storeRegistry/isolation/accounts)