@7365admin1/core 3.59.0 → 3.59.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@7365admin1/core",
   "license": "MIT",
-  "version": "3.59.0",
+  "version": "3.59.1",
   "author": "7365admin1",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -13,7 +13,7 @@
     "build": "tsup src/index.ts --format cjs,esm --dts && shx cp -r src/public dist && shx cp -r src/utils/handlebars dist",
     "release": "yarn run build && changeset publish",
     "lint": "tsc",
-    "test": "tsup src/config.ts src/utils/anpr-revoke.util.ts src/utils/vehicle-request.util.ts src/utils/camera-view.util.ts src/utils/camera-bulk-import.util.ts src/utils/dashboard-metrics.util.ts src/utils/camera-capability.util.ts src/services/camera-device-http.service.ts src/utils/camera-alert.util.ts src/utils/dahua-protocol.util.ts src/utils/site-name.util.ts src/utils/service-provider-invite.util.ts src/utils/notification-category.util.ts src/utils/hid-card.util.ts src/utils/hid-json.util.ts src/utils/hid-access.util.ts src/models/customer-site.model.ts src/models/site-camera.model.ts src/models/member.model.ts src/models/subscription.model.ts src/utils/session-id.util.ts src/utils/occurrence-query.util.ts src/utils/update-result.util.ts src/utils/hid-amico-authz.util.ts src/utils/promo-code-currency.util.ts src/utils/console-audit.util.ts src/utils/org-suspension.util.ts src/utils/session-revoke.util.ts src/models/hid-amico.model.ts src/models/patrol-email.model.ts src/utils/patrol-email-pdf.util.ts src/utils/visitor-status.util.ts src/utils/self-service-email.util.ts src/utils/hid-secret.util.ts src/models/visitor-invite.model.ts src/models/guard-invite.model.ts src/utils/site-timezone.util.ts src/utils/bulletin-service-apps.util.ts src/models/bulletin-board.model.ts src/utils/vehicle-import.util.ts src/utils/expired-vehicle-sweep.util.ts src/models/vehicle.model.ts src/controllers/chat.controller.ts src/utils/file-owner.util.ts src/utils/console-permission.util.ts src/utils/role-scope.util.ts src/utils/org-default-roles.util.ts src/utils/resident-default-role.util.ts src/utils/invite-role-scope.util.ts src/models/personal-emergency-chain.model.ts --format esm --out-dir test/.build --no-dts --silent && node --test test/*.test.mjs",
+    "test": "tsup src/config.ts src/utils/anpr-revoke.util.ts src/utils/vehicle-request.util.ts src/utils/camera-view.util.ts src/utils/camera-bulk-import.util.ts src/utils/dashboard-metrics.util.ts src/utils/camera-capability.util.ts src/services/camera-device-http.service.ts src/utils/camera-alert.util.ts src/utils/dahua-protocol.util.ts src/utils/site-name.util.ts src/utils/service-provider-invite.util.ts src/utils/notification-category.util.ts src/utils/hid-card.util.ts src/utils/hid-json.util.ts src/utils/hid-access.util.ts src/models/customer-site.model.ts src/models/site-camera.model.ts src/models/member.model.ts src/models/subscription.model.ts src/utils/session-id.util.ts src/utils/occurrence-query.util.ts src/utils/update-result.util.ts src/utils/hid-amico-authz.util.ts src/utils/promo-code-currency.util.ts src/utils/console-audit.util.ts src/utils/org-suspension.util.ts src/utils/session-revoke.util.ts src/models/hid-amico.model.ts src/models/patrol-email.model.ts src/utils/patrol-email-pdf.util.ts src/utils/visitor-status.util.ts src/utils/self-service-email.util.ts src/utils/hid-secret.util.ts src/models/visitor-invite.model.ts src/models/guard-invite.model.ts src/utils/site-timezone.util.ts src/utils/bulletin-service-apps.util.ts src/models/bulletin-board.model.ts src/utils/vehicle-import.util.ts src/utils/expired-vehicle-sweep.util.ts src/models/vehicle.model.ts src/controllers/chat.controller.ts src/utils/file-owner.util.ts src/utils/console-permission.util.ts src/utils/role-scope.util.ts src/utils/org-default-roles.util.ts src/utils/resident-default-role.util.ts src/utils/invite-role-scope.util.ts src/models/personal-emergency-chain.model.ts src/utils/self-signup-files.util.ts src/models/person.model.ts --format esm --out-dir test/.build --no-dts --silent && node --test test/*.test.mjs",
     "test:camera": "yarn test",
     "test:e2e": "yarn build && node --test --test-concurrency=1 --test-timeout=600000 \"test/e2e/*.test.mjs\""
   },

package/test/self-signup-files.test.mjs

@@ -0,0 +1,154 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+
+import { dropUnsentFiles } from "./.build/utils/self-signup-files.util.mjs";
+import { schemaResidentSelfSignUp, schemaPerson } from "./.build/models/person.model.mjs";
+
+/**
+ * Resident sign-up outage, 2026-09-08.
+ *
+ * A document whose upload failed stays in the app's list with no `id`
+ * (`UserDocumentStep.tsx:83-85` swallows the error), the wizard sends it, and
+ * `schemaFiles.id.required()` 400s the WHOLE registration with
+ * `"files[0].id" is required`. Measured against production: a body with no
+ * `files` reached the write, the same body with one id-less entry died at Joi.
+ * The resident sees nothing, because `createUser.tsx:458` only logs it.
+ *
+ * These pin the fix and, just as importantly, pin that it is STRICTLY WIDENING:
+ * everything that validated before still validates, identically.
+ */
+
+// A body that is otherwise a perfectly good registration.
+const base = () => ({
+  name: "Resident Test",
+  email: "resident@example.com",
+  password: "not-a-real-password",
+  type: "resident",
+  isOwner: true,
+  site: "0123456789abcdef01234567",
+  unit: "0123456789abcdef01234568",
+});
+
+const validFile = { id: "0123456789abcdef01234569", name: "ic-front.jpg", mimeType: "image/jpeg" };
+// What the app sends after a failed upload: named, listed, and never uploaded.
+const unsentFile = { name: "SEVEN365_Company_Profile_2026.pdf", mimeType: "application/pdf" };
+
+const selfSignUp = (body) => schemaResidentSelfSignUp.validate(body, { abortEarly: false, stripUnknown: true });
+
+test("the outage: a registration whose ONLY defect is an id-less file now goes through", () => {
+  const broken = { ...base(), files: [unsentFile] };
+
+  // Exactly the failure the owner's residents hit, before the fix.
+  const before = selfSignUp(broken);
+  assert.match(before.error?.message ?? "", /"files\[0\]\.id" is required/);
+
+  const after = selfSignUp(dropUnsentFiles(broken));
+  assert.equal(after.error, undefined);
+  // The applicant is kept, the attachment we never received is not.
+  assert.deepEqual(after.value.files, []);
+  assert.equal(after.value.email, "resident@example.com");
+});
+
+test("a valid file id is still linked, byte for byte, in the same order", () => {
+  const second = { id: "0123456789abcdef0123456a", name: "ic-back.jpg", mimeType: "image/jpeg" };
+  const body = { ...base(), files: [validFile, second] };
+
+  const { error, value } = selfSignUp(dropUnsentFiles(body));
+
+  assert.equal(error, undefined);
+  assert.deepEqual(value.files, [validFile, second]);
+  // Nothing was reordered or rewritten - this is what the status-flip loop reads.
+  assert.equal(value.files[0].id, validFile.id);
+  assert.equal(value.files[1].id, second.id);
+});
+
+test("a mixed list keeps every real upload and drops only the failed one", () => {
+  const body = { ...base(), files: [validFile, unsentFile] };
+
+  const { error, value } = selfSignUp(dropUnsentFiles(body));
+
+  assert.equal(error, undefined);
+  assert.deepEqual(value.files, [validFile]);
+});
+
+test("a body with no files key is returned completely unchanged", () => {
+  const body = base();
+  const out = dropUnsentFiles(body);
+
+  assert.deepEqual(out, body);
+  // Not `files: undefined` - the key must not appear at all, or a later
+  // `"files" in body` check silently changes meaning.
+  assert.equal("files" in out, false);
+  assert.equal(selfSignUp(out).error, undefined);
+});
+
+test("a files value that is not an array is handed to the schema untouched", () => {
+  // `null` is explicitly allowed by the schema and must stay allowed; a string
+  // is not, and must still be refused by Joi rather than quietly swallowed here.
+  assert.equal(dropUnsentFiles({ ...base(), files: null }).files, null);
+  assert.equal(selfSignUp(dropUnsentFiles({ ...base(), files: null })).error, undefined);
+
+  assert.equal(dropUnsentFiles({ ...base(), files: "nonsense" }).files, "nonsense");
+  assert.match(selfSignUp(dropUnsentFiles({ ...base(), files: "nonsense" })).error?.message ?? "", /files/);
+});
+
+test("an empty files array stays an empty files array", () => {
+  const { error, value } = selfSignUp(dropUnsentFiles({ ...base(), files: [] }));
+  assert.equal(error, undefined);
+  assert.deepEqual(value.files, []);
+});
+
+test("the input body is not mutated", () => {
+  const body = { ...base(), files: [unsentFile] };
+  dropUnsentFiles(body);
+  assert.deepEqual(body.files, [unsentFile]);
+});
+
+test("the authenticated staff path is untouched - schemaPerson still refuses an id-less file", () => {
+  const staffBody = {
+    name: "Added By Staff",
+    email: "staff-added@example.com",
+    type: "resident",
+    site: "0123456789abcdef01234567",
+    files: [unsentFile],
+  };
+
+  // schemaPerson is what `add()` uses when there IS a caller. A staff client
+  // sending a file with no id is a bug in that client, and stays a 400.
+  assert.match(schemaPerson.validate(staffBody, { abortEarly: false }).error?.message ?? "", /"files\[0\]\.id" is required/);
+  // And it is refused for the same reason with the util applied, proving the
+  // util is not reachable from that path by accident.
+  assert.equal(schemaPerson.validate(staffBody, { abortEarly: false }).error !== undefined, true);
+});
+
+/**
+ * The decision above is pure. What it cannot show is the WIRING: constructing
+ * the controller opens a live Mongo handle, so the only way to prove the filter
+ * runs on the self-signup path - and ONLY there - is to assert the source.
+ */
+const controller = readFileSync(
+  fileURLToPath(new URL("../src/controllers/person.controller.ts", import.meta.url)),
+  "utf8",
+);
+
+test("the filter runs on the self-signup path, before validation, and nowhere else", () => {
+  const selfSignUpFn = controller.slice(
+    controller.indexOf("async function addResidentSelfSignUp"),
+    controller.indexOf("async function add("),
+  );
+  assert.ok(selfSignUpFn.length > 0, "addResidentSelfSignUp was renamed or moved");
+
+  const dropAt = selfSignUpFn.indexOf("dropUnsentFiles(req.body)");
+  const validateAt = selfSignUpFn.indexOf("schemaResidentSelfSignUp.validate(");
+  assert.ok(dropAt > -1, "self-signup no longer drops unsent files");
+  assert.ok(validateAt > dropAt, "unsent files must be dropped BEFORE validation, or the 400 is unchanged");
+  assert.match(selfSignUpFn, /schemaResidentSelfSignUp\.validate\(\s*body\s*,/);
+
+  // Exactly one call site in the whole controller. If it ever appears on the
+  // authenticated `add`/`updateById` paths, staff stop being told about a
+  // client that is silently losing their attachments.
+  assert.equal(controller.match(/dropUnsentFiles\(/g)?.length, 1);
+  assert.match(controller, /import \{ dropUnsentFiles \} from "\.\.\/utils\/self-signup-files\.util"/);
+});