schalli 57bc7f96b3 feat(260728-lih): make LDAP sync strictly selective (empty selection = no-op)
- collectSearchEntries() returns [] on empty/undefined groupFilterDns
  instead of scanning the whole baseDn subtree
- syncUsersForTenant() early-returns an empty successful result before
  any LDAP search or the deactivation loop when groupFilterDns is empty,
  so an empty selection can never mass-deactivate existing LDAP users
- Updated exclude-list tests to use a non-empty groupFilterDns; added a
  dedicated no-op test proving empty selection performs zero search/
  create/update/deactivate operations

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-28 15:41:33 +02:00
S
Description
Tessera - Modulare Workflow-Automatisierung und Tool-Integration
36 MiB
Tessera 1.9.2 Latest
2026-10-02 10:13:53 +02:00
Languages
TypeScript 91.3%
JavaScript 5%
Rust 1.3%
HTML 1%
Shell 0.5%
Other 0.8%