Lucas Berger 6d1d338a45 test(03-09): add RED OIDC path tests — resolveUserId must call upsertUser (CR-06) ...

- POST /create with valid OIDC session (devBypassInjectUser.active=false, getAuth
  returns valid iss/sub) must return 202 not 401
- POST /create with no session (getAuth=null) must return 401
- Refactor getAuth/devBypass mocks to use vi.hoisted configurable flags for
  per-test OIDC path isolation
- Mock upsertUser from auth/user.js so OIDC resolution can be verified

2026-06-05 20:40:09 -04:00

..

auth

feat(02-01): dev-auth bypass middleware with production hard guard

2026-06-05 09:32:00 -04:00

broker

feat(03-04): implement outbox drain state machine (GREEN)

2026-06-05 18:20:18 -04:00

fixtures

fix(02): correct DURATION-only event end in expand.ts (BUG 1)

2026-06-05 14:33:00 -04:00

helpers

fix(02): populate hasRrule on every sync upsert so recurring masters are flagged

2026-06-05 14:50:18 -04:00

routes

test(03-09): add RED OIDC path tests — resolveUserId must call upsertUser (CR-06)

2026-06-05 20:40:09 -04:00

health.test.ts

feat(01-01): Drizzle schema + DB client + /health slice (GREEN)

2026-06-04 09:52:36 -04:00