3 Commits

Author	SHA1	Message	Date
tegwick	fa27adbc77	feat: implement T16, T17 — Keycloak realm import transformer, LDIF generator ... - T16: canonical → Keycloak realm JSON (profile-safe: no identity brokering, implicit flow always false) - T17: canonical → LDIF for openldap/389ds/ad targets with pre-validation 27 migration tests pass. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-13 02:13:04 +01:00
tegwick	3ee8090a98	feat: implement T09, T15, T21 — userinfo endpoint, LLDAP export, negative tests ... - T09: /userinfo with RS256 JWT validation, scope-filtered claims - T15: LLDAP→canonical export tool with validation, migration_event telemetry - T21: Negative test suite (Scenario D) — all 7 unsupported features verified All go tests passing. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-13 02:08:03 +01:00
tegwick	329e996619	feat: implement T01-T04 — Go module, canonical model, LDAP validator, error taxonomy ... - T01: Go module (keycape), full directory skeleton, Makefile, CI workflow - T02: spec/canonical-model.yaml with 6 entities + Go domain types - T03: spec/ldap-schema.yaml + validator binary with structural/semantic rules - T04: Error taxonomy — 4 stable error types, JSON format, HTTP helpers 28 tests pass, go vet clean, go build clean. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-13 01:27:54 +01:00