04ceed61c9
Some checks failed
CI / go-lint (pull_request) Failing after 1s
CI / python-lint (pull_request) Failing after 10s
CI / nodejs-lint (pull_request) Failing after 2s
CI / test-go-consent (pull_request) Failing after 2s
CI / test-python-voice (pull_request) Failing after 9s
CI / test-bqas (pull_request) Failing after 12s
CI / Deploy (pull_request) Has been skipped
Adds vitest with 36 tests covering the security primitives: - lib/auth: token gen uniqueness, hashToken determinism, JWT roundtrip, validateAdminSecret bearer flow, getClientIp x-forwarded-for parsing - lib/admin-auth: bcrypt hash uniqueness/verify, JWT roundtrip, audience claim isolation (admin JWT does not validate as investor JWT) - lib/rate-limit: limit enforcement, key isolation, window reset via fake timers, preset config sanity Pure-function coverage only — route handler integration tests would need a test DB and are deferred. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>