amitwh cd2980277b feat(pdf): restore real PDF encryption; close out D1 ...

@ cantoo/pdf-lib 2.9.1 was already the dep in use; the encryption plumbing
and probe were already in place from the prior hardening pass. This commit:

- adds a test confirming executeOperation('permissions', ...) routes through
  pdfSetPermissions and produces an encrypted PDF unlocked by the owner
  password (mirrors the existing 'encrypt' route coverage)
- updates docs/superpowers/plans/2026-08-23-security-assessment-summary.md
  to mark deferred risk D1 as resolved (the honest-failure message remains
  as a fail-closed net for any future library regression)

35 PDF ops tests pass; lint/format clean.

Amit Haridas

2026-09-13 23:55:51 +05:30

..

plans

docs: add Writer's Studio implementation plan

2026-04-06 07:47:35 +05:30

superpowers

feat(pdf): restore real PDF encryption; close out D1

2026-09-13 23:55:51 +05:30

THREAT_MODEL.md

fix: improve tab safety and app feedback

2026-04-14 22:30:46 +05:30