[SEA-NodeJS] (8/8) M1 Phase 1 — OAuth M2M + OAuth U2M (5 review rounds, ZERO HIGH at close)#383

Draft

msrathore-db wants to merge 10 commits into

msrathore/sea-operationfrom

msrathore/sea-auth-u2m

Commits on May 24, 2026

sea-auth-u2m: OAuth M2M + U2M through SeaBackend → napi binding → kernel
msrathore-db
committed
sea-auth-u2m: address round-1 M2M review parity — shared fakeBinding helper, doc + loader cleanup
msrathore-db
committed
sea-auth-u2m: address round-1 review (HIGH error-mapping wiring + 7 mediums)
msrathore-db
committed
sea-auth-u2m: round-2 fixup — wrap close() in decodeNapiKernelError, raise on U2M+id, case-insensitive validation, preserve all error envelope fields
msrathore-db
committed
sea-auth-u2m: round-3 fixup — namespace kernel metadata, dedupe predicate, type-guard envelope, treat blank secret as U2M
msrathore-db
committed
sea-auth-u2m: rewire M2M e2e to AAD SP on pecotesting HTTP_PATH2
msrathore-db
committed
sea-auth-u2m: round-4 fixup — restore M2M-with-bad-secret class, strip envelope sentinel, trim RetryError doc
msrathore-db
committed
sea-auth-u2m: round-5 fixup — JSDoc selector contract, defense-in-depth test, message mutation safety, class-pin simplification
msrathore-db
committed
sea-auth-u2m: dry-run rebase reconciliation — API-shear fix for post-integration shape
msrathore-db
committed
refactor(sea)!: move catalog/schema/sessionConf from per-statement forwarding to openSession
msrathore-db
committed