@7365admin1/core 3.65.0 → 3.65.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@7365admin1/core",
   "license": "MIT",
-  "version": "3.65.0",
+  "version": "3.65.1",
   "author": "7365admin1",
   "main": "dist/index.js",
   "module": "dist/index.mjs",

package/test/site-modules.test.mjs

@@ -33,7 +33,29 @@ import {
   permissionsOutsideModules,
   requireWithinModules,
   keepStoredSiteModules,
+  siteModulesForOrg,
 } from "./.build/utils/site-modules.util.mjs";
+
+test("a site's list narrows a role only when the site belongs to the role's organisation", () => {
+  const site = { orgId: "org-client", metadata: { modules: ["visitor-mgmt"] } };
+  assert.deepEqual(siteModulesForOrg(site, "org-client"), ["visitor-mgmt"]);
+  // A provider's role at the client's site: the client's site list does not apply.
+  assert.equal(siteModulesForOrg(site, "org-provider"), undefined);
+  // Older site rows carry `org` instead of `orgId`.
+  assert.deepEqual(siteModulesForOrg({ org: "org-client", metadata: { modules: ["a"] } }, "org-client"), ["a"]);
+  // A site with no recorded owner does not narrow an org's role; no site, nothing.
+  assert.equal(siteModulesForOrg({ metadata: { modules: ["a"] } }, "org-client"), undefined);
+  assert.equal(siteModulesForOrg(null, "org-client"), undefined);
+  // A role with NO organisation (role-v2 allows it) is still limited by the
+  // site's own list, exactly as before - leaving `org` out must not widen.
+  assert.deepEqual(siteModulesForOrg(site, ""), ["visitor-mgmt"]);
+  assert.deepEqual(siteModulesForOrg(site, undefined), ["visitor-mgmt"]);
+});
+
+test("moduleCeiling passes the site list through the owner check", () => {
+  const src = readFileSync("src/utils/module-ceiling.util.ts", "utf8");
+  assert.match(src, /effectiveSiteModules\(\s*\(orgDoc as any\)\?\.modules,\s*siteModulesForOrg\(siteDoc, orgId\),\s*\)/);
+});
 import { ALWAYS_ALLOWED } from "./.build/utils/org-modules.util.mjs";
 
 /* ── reading: it must never return "nothing" ───────────────────────────── */