Fix GET policies collection to filter by profileId from route params.

Author: jameseaster

CHANGELOG.md

@@ -1,5 +1,10 @@
 # bedrock-profile-http ChangeLog
 
+## 26.2.4 - 2026-06-xx
+
+### Fixed
+- Fix get zcap policies by query.
+
 ## 26.2.3 - 2026-04-20
 
 ### Fixed

lib/zcaps.js

@@ -81,9 +81,10 @@ bedrock.events.on('bedrock-express.configure.routes', app => {
     validate({querySchema: schemas.getZcapPoliciesQuery}),
     middleware.authorizeProfileZcapRequest(),
     asyncHandler(async (req, res) => {
-      const {profileId} = req.query;
+      const {profileId} = req.params;
       const results = await brZcapStorage.policies.find({
-        profileId, req, options: {projection: {_id: 0, policy: 1}, limit: 100}
+        query: {'policy.controller': profileId},
+        options: {projection: {_id: 0, policy: 1}, limit: 100}
       });
       res.json({
         // return as `results` to enable adding `hasMore` / `cursor`