Lucas BergerandClaude Sonnet 4.6 61a869ca7d fix(12): CR-01 guard effective-config branch during wizard in-progress ...

isSetupLocked() now checks for an unclaimed local wizard user
(oidcIss IS NULL, claimed=false) before firing the effective-config
branch. During the credential→complete window, this sentinel prevents
a production container with VAPID env set from blocking POST /complete
with 423. The explicit setup_complete flag (Check 1) still locks
unconditionally once written. Adds regression test that sets VAPID env
explicitly (no beforeEach clearing) to reproduce the production scenario.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-15 16:36:52 -04:00

..

admin.test.ts

fix(18): WR-02 derive seed flag from DB write, not a stale pre-flight SELECT

2026-06-15 07:41:52 -04:00

events.test.ts

test(11-05): RED — WR-02 reminderLeadMinutes max(10080) in both Zod schemas

2026-06-14 08:21:44 -04:00

lists.test.ts

…

login.test.ts

…

me.test.ts

fix(10-04): prettier format + remove unnecessary type assertions

2026-06-13 15:22:50 -04:00

push.test.ts

feat(12-02): OIDC boot env-OR-app_config fallback + pre-auth mount verification

2026-06-15 14:03:15 -04:00

setup.test.ts

fix(12): CR-01 guard effective-config branch during wizard in-progress

2026-06-15 16:36:52 -04:00