chore(release): merge develop into main - #64
Merged
Merged
Conversation
…M2M agent guards and tarpitting (closes #24)
…UPDATE, DELETE, MANAGE) and protocol decoupling
…npmignore test exclusions
…ne registry tarball
…g and staging release automation
…n-demand QA preview releases
…stro compatibility
feat(auth-rbac): implement isomorphic RBAC security engine with FLS, M2M agent guards and tarpitting
… and pipeline triggers (#28) * fix(docs): repair typedoc exports resolution, nextra _meta validation and pipeline triggers * fix(docs): expose per-package API reference in navigation and accelerate CI build
…en, Ollama) (#48) * feat(ai-openai): implement universal OpenAI-compatible AI adapter Add @quatrain/ai-openai package providing zero-dependency integration for DeepSeek (V3/R1), Alibaba Qwen (DashScope), OpenAI, and local LLMs (Ollama) with streaming and structured JSON output. Closes #47 * style(ai-openai): address static code analysis and markdownlint issues Fix Codacy and SonarCloud reports: reduce cognitive complexity, eliminate regex backtracking, remove redundant optional chaining and comply with 80-col markdown formatting. * style(ai-openai): eliminate redundant optional chains and conditional checks * style(ai-openai): use optional chaining on config checks
) * feat(config): implement canonical @quatrain/config registry package - Pivot Config class extending Core and managing isolated ConfigContainer namespaces - Fail-Fast validation via ConfigurationError for missing or blank parameters - Hierarchical multi-source cascading (Memory > Env > Object) - Support for dot-notation paths, camelCase mapping, and sub-scoping - Full test suite with near-100% coverage Closes #49 * fix(config): address Codacy security, quality and complexity feedback - Use Map for ConfigRegistry to eliminate object injection sinks and dynamic delete - Prevent Prototype Pollution with isSafeKey and isSafePath across all sources - Refactor MemoryConfigSource and EnvConfigSource to use Map and Reflect - Implement safe deepMerge in ConfigContainer.toRecord() - Optimize scope.getAll() to retrieve sub-tree in O(1) - Format LICENSE.md to <=80 chars line length * fix(config): eliminate remaining Codacy injection sink and void expression in tests * fix(config): address static analysis quality gates and security edge cases * fix(config): eliminate array index access in MemoryConfigSource * refactor(config): reduce cognitive complexity in EnvConfigSource and MemoryConfigSource
* fix(ci): allow mutable yarn install in docs container build to prevent lockfile resolution failure * fix(auth): align AuthInterface User import and register signature with AbstractAuthAdapter
* fix(ci): remove PR preview package publishing * fix(security): resolve timing attack and path traversal warnings in publish_all
… ignore docs in Codacy (#65)
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release Summary
This release merges validated staging changes from
developintomain:Key Capabilities & Enhancements
getConfigandaddConfigmethods.@quatrain/config).vYYYY.MM.DD) onmain.-beta.0-> stable SemVer) under npm dist-taglatest.