maaz519 063049b724 feat(p9): scope-ownership assert + fence routing approve/deny/listDecisions ...

Task T3.1: ActorResolver gains findScope (no-create) + assertOwns(principal,
resourceScopeId) → ForbiddenException on mismatch (KG-02). RouteService.approve/
deny now assertOwns on the decision's binding scope before mutating; listDecisions
is scoped to the caller. Fixes the critical cross-tenant mutation (tenant A could
approve tenant B's route). Also adds IiosScope.cellId + IiosOutboundCommand.scopeId
columns (migration tenant-isolation) + cell assignment on scope create. Test:
another tenant approving → Forbidden, decision unchanged, no scope created, empty list.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-02 21:46:40 +05:30

.github/workflows

ci: import-boundary law + CI workflow (P0 complete)

2026-06-30 21:09:37 +05:30

apps

feat(p8): meeting-studio demo + smoke-calendar; P8 verification green

2026-07-01 18:22:24 +05:30

docs

feat(p9): Capability Broker — governed egress + fail-closed gate + obligations

2026-07-01 19:58:25 +05:30

packages

feat(p9): scope-ownership assert + fence routing approve/deny/listDecisions

2026-07-02 21:46:40 +05:30

scripts

feat(p8): /v1/calendar REST + kernel-client methods + @insignia/iios-meeting-web

2026-07-01 18:09:18 +05:30

test

ci: import-boundary law + CI workflow (P0 complete)

2026-06-30 21:09:37 +05:30

.env.example

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

.gitignore

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

docker-compose.yml

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

package.json

feat(contracts): @insignia/iios-contracts — scope, enums, platform ports, CloudEvents, errors

2026-06-30 20:59:34 +05:30

pnpm-lock.yaml

feat(p8): meeting-studio demo + smoke-calendar; P8 verification green

2026-07-01 18:22:24 +05:30

pnpm-workspace.yaml

feat(demo): P2.7 Vite React two-pane realtime demo + dev token endpoint (P2 complete)

2026-07-01 01:36:14 +05:30

tsconfig.base.json

chore: iios workspace skeleton (pnpm workspace, configs, postgres:5434)

2026-06-30 20:56:36 +05:30

vitest.config.ts

feat(sdk): P5.1 @insignia/iios-adapter-sdk — ChannelAdapter contract + HMAC webhook adapter + sandbox + fixtures

2026-07-01 13:37:55 +05:30

S

Description

No description provided

1.6 MiB

Languages

TypeScript 88.8%

JavaScript 10.4%

Dockerfile 0.4%

HTML 0.3%

Shell 0.1%