Release v0.1.17: Unit Testing with Vitest

12 February 2026

Note: This release is currently blocked pending CI fixes. It will ship once pipeline issues are resolved.

What changed

• Vitest configured as the project's unit testing framework with V8 coverage reporting
• 5 test suites added covering core library modules:
  • Matching — Jaro-Winkler, Levenshtein, name normalisation, token matching, DOB/nationality cross-validation, full screening pipeline
  • Validation — HTML stripping, XSS prevention, Zod schemas, CSV validation & injection detection
  • Encryption — AES-256-GCM round-trips, PII field encryption, unicode handling, graceful degradation when disabled
  • Rate limiting — Sliding window, identifier/tier isolation, header generation, path-to-config mapping
  • Utilities — cn() classname merging
• CI updated to run npm test as a required build step
• New scripts: test, test:watch, test:coverage

Why it matters

This gives us automated verification of the core sanctions matching engine, encryption layer, and input validation — the modules where correctness matters most. Every future change now runs against these tests in CI.

Technical notes

• Path aliases configured to match tsconfig (@/ → src/)
• Tests are pure unit tests with no database or external service dependencies
• Coverage scoped to src/lib/**/*.ts