55f3b40aff
Per Greptile review: viewers keep the read-only visibility actions (agent:read, company_scope:read, issue:read, project:read) but are denied runtime:manage and secrets:read with deny_missing_grant, matching the tasks:assign viewer carve-out in the same board block. Adds the missing issue:mutate deny_unsupported_action assertion and a viewer-role coverage test. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| scripts | ||
| src | ||
| CHANGELOG.md | ||
| package.json | ||
| tsconfig.json | ||
| vitest.config.ts | ||