Files
Michael NguyenandClaude Opus 4.8 b01c9e42b9 test(plugins): cover the never-a-wildcard invariant for proactive scope resolution
Closes the Greptile P2 on #10103: referencedCompanyId's null path had no
coverage. Two cases, one per derivation branch:

- direct-companyId branch: a proactive call referencing no company reaches
  the gate scope-less (handler sees no injected companyId)
- scopeKind:company branch: empty scopeId resolves to null, not to an
  authorized company — denied with 'company context is required', proving
  no grant occurred (a wrong grant would fail with a different message)

Refs LOOA-629 / PR #10103 (LOOA-693 security review flagged the same gap).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J4onvauR8cQq9uo9iJbcZ7
2026-07-23 11:44:40 -07:00
..
2026-03-12 13:09:22 -05:00