aboutsummaryrefslogtreecommitdiff
path: root/tests/test-pearl-normalize.el
diff options
context:
space:
mode:
authorCraig Jennings <c@cjennings.net>2026-06-01 18:05:52 -0500
committerCraig Jennings <c@cjennings.net>2026-06-01 18:05:52 -0500
commit96ac9855cfda77f81d7f12e55d737e8bdd54eccc (patch)
treed295ddb285383be799165c36f840cbc89bf81041 /tests/test-pearl-normalize.el
parent49e79a262638ca5fb673ac3f5d8e9cde0cb7905a (diff)
downloadpearl-96ac9855cfda77f81d7f12e55d737e8bdd54eccc.tar.gz
pearl-96ac9855cfda77f81d7f12e55d737e8bdd54eccc.zip
feat(views): guard publish and delete against cross-account local views
I extended the account guard from edit and run to the two remote-mutating commands. pearl-publish-local-view now refuses a local view tagged to another account before any customViewCreate or customViewUpdate, and pearl-delete-local-view refuses before the confirm prompt or any customViewDelete. Publishing or deleting under the wrong account would resolve ids against the wrong workspace or target the wrong remote, so the guard fires at the command boundary, before Linear is touched. publish-current-view inherits the guard by delegating to publish-local-view. This completes the round-6 finding that one guard should cover every read and mutate of a local-view entry, not only edit and copy. Phase 5 of the views spec. Tests confirm both commands error on a cross-account entry and make no Linear call. Suite, compile, and lint are green.
Diffstat (limited to 'tests/test-pearl-normalize.el')
0 files changed, 0 insertions, 0 deletions