@antelopejs/dms 0.0.1

package/dist/test/unit/implementations/dms/dynamic-menu-hardening.test.js

@@ -0,0 +1,168 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_core_1 = require("@antelopejs/interface-core");
+const chai_1 = require("chai");
+const page_1 = require("../../../../implementations/dms/page");
+const permissionsImpl = __importStar(require("../../../../implementations/dms/permissions"));
+const permissionsResolverImpl = __importStar(require("../../../../implementations/dms/permissions-resolver"));
+const tenantAccessImpl = __importStar(require("../../../../implementations/dms/tenant-access"));
+const page_2 = require("@antelopejs/interface-dms/page");
+const permissionsInterface = __importStar(require("@antelopejs/interface-dms/permissions"));
+const permissionsResolverInterface = __importStar(require("@antelopejs/interface-dms/permissions-resolver"));
+const tenantAccessInterface = __importStar(require("@antelopejs/interface-dms/tenant-access"));
+const page_access_1 = require("../../../helpers/page-access");
+const TENANT = "menu-hardening-tenant";
+const CATEGORY_FULL_ID = page_2.pagesCategory.fullId;
+const MEMBER = { _id: "menu-hardening-member" };
+const TARGET_SLUG = "/menu-hardening-target";
+const RESOLVER_TIMEOUT_MS = 2000;
+function entry(id, displayName) {
+    return { id, displayName, fullSlug: TARGET_SLUG };
+}
+async function menuChildren() {
+    const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([CATEGORY_FULL_ID]);
+    const payload = await (0, page_1.buildSiteLayoutPayload)(MEMBER, memberModel, roleModel, TENANT);
+    return payload.siteLayoutTree.children.pages?.childrenOrders ?? [];
+}
+describe("[unit] implementations/dms/page — dynamic menu hardening", () => {
+    const cleanups = [];
+    before(async () => {
+        (0, interface_core_1.ImplementInterface)(permissionsInterface, permissionsImpl);
+        (0, interface_core_1.ImplementInterface)(permissionsResolverInterface, permissionsResolverImpl);
+        (0, interface_core_1.ImplementInterface)(tenantAccessInterface, tenantAccessImpl);
+        (0, interface_core_1.ImplementInterface)(page_2.internal, page_1.internal);
+        cleanups.push(await (0, page_access_1.registerTestPage)((0, page_2.PageController)("menu-hardening-target", {
+            displayName: "Target",
+            category: page_2.pagesCategory,
+            publicAccess: true,
+            hidden: true,
+        })));
+    });
+    after(() => {
+        for (const cleanup of cleanups.splice(0)) {
+            cleanup();
+        }
+    });
+    it("orders entries of equal rank by what the reader sees", async () => {
+        const dispose = (0, page_2.RegisterDynamicMenuProvider)(CATEGORY_FULL_ID, async () => [
+            entry("zebra", "Zebra"),
+            entry("alpha", "Alpha"),
+            entry("mango", "Mango"),
+        ]);
+        try {
+            const children = await menuChildren();
+            const dynamic = children.filter((id) => ["alpha", "mango", "zebra"].includes(id));
+            (0, chai_1.expect)(dynamic).to.deep.equal(["alpha", "mango", "zebra"]);
+        }
+        finally {
+            dispose();
+        }
+    });
+    it("drops the entries of a resolver that does not answer in time", async () => {
+        const dispose = (0, page_2.RegisterDynamicMenuProvider)(CATEGORY_FULL_ID, () => new Promise(() => undefined));
+        try {
+            const started = Date.now();
+            const children = await menuChildren();
+            const elapsed = Date.now() - started;
+            (0, chai_1.expect)(children).to.not.include("alpha");
+            (0, chai_1.expect)(elapsed).to.be.greaterThanOrEqual(RESOLVER_TIMEOUT_MS - 100);
+            (0, chai_1.expect)(elapsed).to.be.lessThan(RESOLVER_TIMEOUT_MS * 2);
+        }
+        finally {
+            dispose();
+        }
+    }).timeout(RESOLVER_TIMEOUT_MS * 3);
+    it("runs the providers together rather than one after the other", async () => {
+        const RESOLVER_DELAY_MS = 300;
+        const PROVIDER_COUNT = 4;
+        const slow = (id) => async () => {
+            await new Promise((resolve) => setTimeout(resolve, RESOLVER_DELAY_MS));
+            return [entry(id, id)];
+        };
+        const disposers = Array.from({ length: PROVIDER_COUNT }, (_, index) => (0, page_2.RegisterDynamicMenuProvider)(CATEGORY_FULL_ID, slow(`slow-${index}`)));
+        try {
+            const started = Date.now();
+            await menuChildren();
+            const elapsed = Date.now() - started;
+            (0, chai_1.expect)(elapsed).to.be.lessThan(RESOLVER_DELAY_MS * PROVIDER_COUNT);
+        }
+        finally {
+            for (const dispose of disposers)
+                dispose();
+        }
+    }).timeout(RESOLVER_TIMEOUT_MS * 3);
+    it("survives a provider unregistering while the resolvers run", async () => {
+        let disposeSecond;
+        const first = (0, page_2.RegisterDynamicMenuProvider)(CATEGORY_FULL_ID, async () => {
+            disposeSecond?.();
+            return [entry("still-here", "Still here")];
+        });
+        disposeSecond = (0, page_2.RegisterDynamicMenuProvider)(CATEGORY_FULL_ID, async () => [
+            entry("also-here", "Also here"),
+        ]);
+        try {
+            const children = await menuChildren();
+            (0, chai_1.expect)(children).to.include("still-here");
+            (0, chai_1.expect)(children).to.include("also-here");
+        }
+        finally {
+            first();
+            disposeSecond();
+        }
+    });
+    it("merges in registration order however the resolvers finish", async () => {
+        const first = (0, page_2.RegisterDynamicMenuProvider)(CATEGORY_FULL_ID, async () => {
+            await new Promise((resolve) => setTimeout(resolve, 120));
+            return [entry("shared", "From the first provider")];
+        });
+        const second = (0, page_2.RegisterDynamicMenuProvider)(CATEGORY_FULL_ID, async () => [
+            entry("shared", "From the second provider"),
+        ]);
+        try {
+            const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([
+                CATEGORY_FULL_ID,
+            ]);
+            const payload = await (0, page_1.buildSiteLayoutPayload)(MEMBER, memberModel, roleModel, TENANT);
+            const node = payload.siteLayoutTree.children.pages?.children.shared;
+            (0, chai_1.expect)(node?.displayName).to.equal("From the first provider");
+        }
+        finally {
+            first();
+            second();
+        }
+    }).timeout(RESOLVER_TIMEOUT_MS * 3);
+});
+//# sourceMappingURL=dynamic-menu-hardening.test.js.map

package/dist/test/unit/implementations/dms/dynamic-menu-hardening.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic-menu-hardening.test.js","sourceRoot":"","sources":["../../../../../src/test/unit/implementations/dms/dynamic-menu-hardening.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+DAAgE;AAChE,+BAA8B;AAC9B,+DAG8C;AAC9C,6FAA+E;AAC/E,8GAAgG;AAChG,gGAAkF;AAClF,yDAMwC;AACxC,4FAA8E;AAC9E,6GAA+F;AAC/F,+FAAiF;AAEjF,8DAGsC;AAEtC,MAAM,MAAM,GAAG,uBAAuB,CAAC;AACvC,MAAM,gBAAgB,GAAG,oBAAa,CAAC,MAAM,CAAC;AAC9C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAU,CAAC;AACxD,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAC7C,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,SAAS,KAAK,CAAC,EAAU,EAAE,WAAmB;IAC5C,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAsB,EAC1C,MAAM,EACN,WAAW,EACX,SAAS,EACT,MAAM,CACP,CAAC;IACF,OAAO,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACxE,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,IAAA,mCAAkB,EAAC,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAC1D,IAAA,mCAAkB,EAAC,4BAA4B,EAAE,uBAAuB,CAAC,CAAC;QAC1E,IAAA,mCAAkB,EAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;QAC5D,IAAA,mCAAkB,EAAC,eAAqB,EAAE,eAAgB,CAAC,CAAC;QAE5D,QAAQ,CAAC,IAAI,CACX,MAAM,IAAA,8BAAgB,EACpB,IAAA,qBAAc,EAAC,uBAAuB,EAAE;YACtC,WAAW,EAAE,QAAQ;YACrB,QAAQ,EAAE,oBAAa;YACvB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,IAAI;SACb,CAAC,CACH,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAIH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,OAAO,GAAG,IAAA,kCAA2B,EAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC;YACxE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;YACvB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;YACvB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CACrC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CACzC,CAAC;YACF,IAAA,aAAM,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAGH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,OAAO,GAAG,IAAA,kCAA2B,EACzC,gBAAgB,EAChB,GAAG,EAAE,CAAC,IAAI,OAAO,CAAoB,GAAG,EAAE,CAAC,SAAS,CAAC,CACtD,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YAErC,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzC,IAAA,aAAM,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,GAAG,GAAG,CAAC,CAAC;YACpE,IAAA,aAAM,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;QAC1D,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;IAGpC,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,iBAAiB,GAAG,GAAG,CAAC;QAC9B,MAAM,cAAc,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;YACvE,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CACpE,IAAA,kCAA2B,EAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CACrE,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,YAAY,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YAGrC,IAAA,aAAM,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,iBAAiB,GAAG,cAAc,CAAC,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,KAAK,MAAM,OAAO,IAAI,SAAS;gBAAE,OAAO,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;IAKpC,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,IAAI,aAAuC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAA,kCAA2B,EAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAErE,aAAa,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,aAAa,GAAG,IAAA,kCAA2B,EAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC;YACxE,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC;SAChC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;YAEtC,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,KAAK,EAAE,CAAC;YACR,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAGH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,IAAA,kCAA2B,EAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,kCAA2B,EAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC;YACvE,KAAK,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAoB,EAAC;gBACtD,gBAAgB;aACjB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAsB,EAC1C,MAAM,EACN,WAAW,EACX,SAAS,EACT,MAAM,CACP,CAAC;YACF,MAAM,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC;YAEpE,IAAA,aAAM,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC"}

package/dist/test/unit/implementations/dms/dynamic-menu.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/implementations/dms/dynamic-menu.test.js

@@ -0,0 +1,478 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_core_1 = require("@antelopejs/interface-core");
+const chai_1 = require("chai");
+const page_1 = require("../../../../implementations/dms/page");
+const permissionsImpl = __importStar(require("../../../../implementations/dms/permissions"));
+const permissionsResolverImpl = __importStar(require("../../../../implementations/dms/permissions-resolver"));
+const tenantAccessImpl = __importStar(require("../../../../implementations/dms/tenant-access"));
+const page_2 = require("@antelopejs/interface-dms/page");
+const permissionsInterface = __importStar(require("@antelopejs/interface-dms/permissions"));
+const permissionsResolverInterface = __importStar(require("@antelopejs/interface-dms/permissions-resolver"));
+const tenantAccessInterface = __importStar(require("@antelopejs/interface-dms/tenant-access"));
+const page_access_1 = require("../../../helpers/page-access");
+const CATEGORY_ID = "dyn-projects";
+const CATEGORY_FULL_ID = `pages.${CATEGORY_ID}`;
+const PAGE_SLUG = "/dyn-project";
+const PARAM_PAGE_SLUG = "/dyn-projects/:projectId/services";
+const TENANT_A = "dyn-tenant-a";
+const TENANT_B = "dyn-tenant-b";
+const OWNER = { _id: "dyn-owner", owner: true };
+const RESTRICTED_PERMISSION = "dyn.restricted";
+const DENIED_TENANT = "dyn-denied-tenant";
+const BYPASS_TARGET_ACTION = "pages.dyn-bypass-target.settle";
+const denyingGate = (0, page_access_1.denyingTenantGate)("dyn-gate", DENIED_TENANT);
+async function resolveCategoryNode(user, tenantId) {
+    const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([]);
+    const payload = await (0, page_1.buildSiteLayoutPayload)(user, memberModel, roleModel, tenantId);
+    return payload.siteLayoutTree.children.pages?.children[CATEGORY_ID];
+}
+function registerProvider(resolver) {
+    return (0, page_2.RegisterDynamicMenuProvider)(CATEGORY_FULL_ID, resolver);
+}
+describe("[unit] implementations/dms/page — dynamic menu providers", () => {
+    const cleanups = [];
+    const suiteCleanups = [];
+    let projectsCategory;
+    before(async () => {
+        (0, interface_core_1.ImplementInterface)(permissionsInterface, permissionsImpl);
+        (0, interface_core_1.ImplementInterface)(permissionsResolverInterface, permissionsResolverImpl);
+        (0, interface_core_1.ImplementInterface)(tenantAccessInterface, tenantAccessImpl);
+        (0, interface_core_1.ImplementInterface)(page_2.internal, page_1.internal);
+        const projects = (0, page_access_1.registerTestCategory)(CATEGORY_ID, {
+            displayName: "Projects",
+            category: page_2.pagesCategory,
+            type: "label",
+        });
+        projectsCategory = projects.category;
+        suiteCleanups.push(projects.cleanup);
+        suiteCleanups.push(await (0, page_access_1.registerTestPage)((0, page_2.PageController)("dyn-project", {
+            displayName: "Project",
+            category: page_2.pagesCategory,
+            hidden: true,
+            publicAccess: true,
+        })));
+        suiteCleanups.push(await (0, page_access_1.registerTestPage)((0, page_2.PageController)("dyn-project-services", {
+            displayName: "Project services",
+            category: page_2.pagesCategory,
+            urlSlug: "dyn-projects/:projectId/services",
+            hidden: true,
+            publicAccess: true,
+        })));
+    });
+    afterEach(() => {
+        for (const cleanup of cleanups.splice(0)) {
+            cleanup();
+        }
+    });
+    after(() => {
+        for (const cleanup of suiteCleanups.splice(0)) {
+            cleanup();
+        }
+    });
+    it("grafts a tenant's entries without leaking them to another tenant", async () => {
+        cleanups.push(registerProvider((_user, tenantId) => [
+            {
+                id: `project-${tenantId}`,
+                displayName: `Project of ${tenantId}`,
+                fullSlug: PAGE_SLUG,
+                query: { project: tenantId },
+            },
+        ]));
+        const nodeA = await resolveCategoryNode(OWNER, TENANT_A);
+        const nodeB = await resolveCategoryNode(OWNER, TENANT_B);
+        (0, chai_1.expect)(nodeA?.childrenOrders).to.deep.equal([`project-${TENANT_A}`]);
+        (0, chai_1.expect)(nodeB?.childrenOrders).to.deep.equal([`project-${TENANT_B}`]);
+    });
+    it("never grafts onto the global navigation tree", async () => {
+        cleanups.push(registerProvider(() => [
+            {
+                id: "leaking-project",
+                displayName: "Leaking project",
+                fullSlug: PAGE_SLUG,
+            },
+        ]));
+        await resolveCategoryNode(OWNER, TENANT_A);
+        for (const cleanup of cleanups.splice(0)) {
+            cleanup();
+        }
+        const node = await resolveCategoryNode(OWNER, TENANT_A);
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal([]);
+    });
+    it("sorts dynamic and static entries of the category together by order", async () => {
+        const staticPage = (0, page_2.PageController)("dyn-static-cta", {
+            displayName: "New project",
+            category: projectsCategory,
+            order: 100,
+            publicAccess: true,
+            variant: "accent",
+        });
+        cleanups.push(await (0, page_access_1.registerTestPage)(staticPage));
+        cleanups.push(registerProvider(() => [
+            {
+                id: "project-b",
+                displayName: "B",
+                fullSlug: PAGE_SLUG,
+                order: 2,
+            },
+            {
+                id: "project-a",
+                displayName: "A",
+                fullSlug: PAGE_SLUG,
+                order: 1,
+            },
+        ]));
+        const node = await resolveCategoryNode(OWNER, TENANT_A);
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal([
+            "project-a",
+            "project-b",
+            "dyn-static-cta",
+        ]);
+        (0, chai_1.expect)(node?.children["dyn-static-cta"]?.variant).to.equal("accent");
+    });
+    it("never lets a dynamic entry shadow a static one with the same id", async () => {
+        const staticPage = (0, page_2.PageController)("dyn-shadowed", {
+            displayName: "Static entry",
+            category: projectsCategory,
+            publicAccess: true,
+        });
+        cleanups.push(await (0, page_access_1.registerTestPage)(staticPage));
+        cleanups.push(registerProvider(() => [
+            {
+                id: "dyn-shadowed",
+                displayName: "Impostor",
+                fullSlug: PAGE_SLUG,
+            },
+        ]));
+        const node = await resolveCategoryNode(OWNER, TENANT_A);
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal(["dyn-shadowed"]);
+        (0, chai_1.expect)(node?.children["dyn-shadowed"]?.displayName).to.equal("Static entry");
+    });
+    it("keeps the entries a resolver filtered out of reach", async () => {
+        cleanups.push(registerProvider(() => [
+            {
+                id: "granted",
+                displayName: "Granted",
+                fullSlug: PAGE_SLUG,
+            },
+            {
+                id: "restricted",
+                displayName: "Restricted",
+                fullSlug: PAGE_SLUG,
+                permissionId: RESTRICTED_PERMISSION,
+            },
+        ]));
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([CATEGORY_FULL_ID]);
+        const member = { _id: "dyn-member" };
+        const payload = await (0, page_1.buildSiteLayoutPayload)(member, memberModel, roleModel, TENANT_A);
+        const node = payload.siteLayoutTree.children.pages?.children[CATEGORY_ID];
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal(["granted"]);
+    });
+    it("does not resolve a provider whose category the caller cannot reach", async () => {
+        let resolverCalls = 0;
+        cleanups.push(registerProvider(() => {
+            resolverCalls += 1;
+            return [
+                {
+                    id: "hidden-project",
+                    displayName: "Hidden project",
+                    fullSlug: PAGE_SLUG,
+                },
+            ];
+        }));
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([]);
+        const outsider = { _id: "dyn-outsider" };
+        const payload = await (0, page_1.buildSiteLayoutPayload)(outsider, memberModel, roleModel, TENANT_A);
+        const node = payload.siteLayoutTree.children.pages?.children[CATEGORY_ID];
+        (0, chai_1.expect)(resolverCalls).to.equal(0);
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal([]);
+    });
+    it("skips an entry whose target page the caller cannot access", async () => {
+        const restrictedPage = (0, page_2.PageController)("dyn-restricted", {
+            displayName: "Restricted project",
+            category: page_2.pagesCategory,
+            hidden: true,
+        });
+        cleanups.push(await (0, page_access_1.registerTestPage)(restrictedPage));
+        cleanups.push(registerProvider(() => [
+            {
+                id: "restricted-target",
+                displayName: "Restricted target",
+                fullSlug: "/dyn-restricted",
+            },
+            {
+                id: "open-target",
+                displayName: "Open target",
+                fullSlug: PAGE_SLUG,
+            },
+        ]));
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([CATEGORY_FULL_ID]);
+        const member = { _id: "dyn-member" };
+        const payload = await (0, page_1.buildSiteLayoutPayload)(member, memberModel, roleModel, TENANT_A);
+        const node = payload.siteLayoutTree.children.pages?.children[CATEGORY_ID];
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal(["open-target"]);
+    });
+    it("keeps the caller's real permissions under a gate-bypassing category", async () => {
+        const bypassCategory = (0, page_access_1.registerTestCategory)("dyn-bypass", {
+            displayName: "Recovery",
+            category: page_2.pagesCategory,
+            type: "label",
+            bypassTenantAccessGate: true,
+        });
+        cleanups.push(bypassCategory.cleanup);
+        const bypassPage = (0, page_2.PageController)("dyn-bypass-target", {
+            displayName: "Recovery target",
+            category: page_2.pagesCategory,
+            hidden: true,
+            bypassTenantAccessGate: true,
+        });
+        cleanups.push(await (0, page_access_1.registerTestPage)(bypassPage));
+        let resolverPermissions;
+        cleanups.push((0, page_2.RegisterDynamicMenuProvider)(bypassCategory.category.fullId, (_user, _t, perms) => {
+            resolverPermissions = perms;
+            return [
+                {
+                    id: "recover",
+                    displayName: "Recover",
+                    fullSlug: "/dyn-bypass-target",
+                    permissionId: BYPASS_TARGET_ACTION,
+                },
+            ];
+        }));
+        tenantAccessInterface.RegisterTenantAccessGate(denyingGate);
+        cleanups.push(() => tenantAccessInterface.internal.RegisterTenantAccessGate.unregister(denyingGate));
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([
+            bypassCategory.category.fullId,
+            "pages.dyn-bypass-target",
+            BYPASS_TARGET_ACTION,
+            RESTRICTED_PERMISSION,
+        ]);
+        const member = { _id: "dyn-suspended" };
+        const payload = await (0, page_1.buildSiteLayoutPayload)(member, memberModel, roleModel, DENIED_TENANT);
+        const node = payload.siteLayoutTree.children.pages?.children["dyn-bypass"];
+        (0, chai_1.expect)(resolverPermissions?.has(RESTRICTED_PERMISSION)).to.equal(true);
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal(["recover"]);
+    });
+    it("hides an entry the caller's permission set cannot explain", async () => {
+        const publicCategory = (0, page_access_1.registerTestCategory)("dyn-public", {
+            displayName: "Recovery links",
+            category: page_2.pagesCategory,
+            type: "label",
+            publicAccess: true,
+        });
+        cleanups.push(publicCategory.cleanup);
+        const bypassPage = (0, page_2.PageController)("dyn-public-target", {
+            displayName: "Recovery target",
+            category: page_2.pagesCategory,
+            hidden: true,
+            bypassTenantAccessGate: true,
+        });
+        cleanups.push(await (0, page_access_1.registerTestPage)(bypassPage));
+        cleanups.push((0, page_2.RegisterDynamicMenuProvider)(publicCategory.category.fullId, () => [
+            {
+                id: "settle",
+                displayName: "Settle invoice",
+                fullSlug: "/dyn-public-target",
+                permissionId: RESTRICTED_PERMISSION,
+            },
+        ]));
+        tenantAccessInterface.RegisterTenantAccessGate(denyingGate);
+        cleanups.push(() => tenantAccessInterface.internal.RegisterTenantAccessGate.unregister(denyingGate));
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([
+            "pages.dyn-public-target",
+            RESTRICTED_PERMISSION,
+        ]);
+        const member = { _id: "dyn-suspended-member" };
+        const payload = await (0, page_1.buildSiteLayoutPayload)(member, memberModel, roleModel, DENIED_TENANT);
+        const node = payload.siteLayoutTree.children.pages?.children["dyn-public"];
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal([]);
+    });
+    it("keeps an entry whose permission belongs to the flagged page", async () => {
+        const publicCategory = (0, page_access_1.registerTestCategory)("dyn-public-kept", {
+            displayName: "Recovery links",
+            category: page_2.pagesCategory,
+            type: "label",
+            publicAccess: true,
+        });
+        cleanups.push(publicCategory.cleanup);
+        const bypassPage = (0, page_2.PageController)("dyn-kept-target", {
+            displayName: "Recovery target",
+            category: page_2.pagesCategory,
+            hidden: true,
+            bypassTenantAccessGate: true,
+        });
+        cleanups.push(await (0, page_access_1.registerTestPage)(bypassPage));
+        const settlePermission = "pages.dyn-kept-target.settle";
+        cleanups.push((0, page_2.RegisterDynamicMenuProvider)(publicCategory.category.fullId, () => [
+            {
+                id: "settle",
+                displayName: "Settle invoice",
+                fullSlug: "/dyn-kept-target",
+                permissionId: settlePermission,
+            },
+        ]));
+        tenantAccessInterface.RegisterTenantAccessGate(denyingGate);
+        cleanups.push(() => tenantAccessInterface.internal.RegisterTenantAccessGate.unregister(denyingGate));
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([
+            "pages.dyn-kept-target",
+            settlePermission,
+        ]);
+        const member = { _id: "dyn-suspended-owner" };
+        const payload = await (0, page_1.buildSiteLayoutPayload)(member, memberModel, roleModel, DENIED_TENANT);
+        const node = payload.siteLayoutTree.children.pages?.children["dyn-public-kept"];
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal(["settle"]);
+    });
+    it("hides an entry granted only by a defaultGranted permission", async () => {
+        const openPage = (0, page_2.PageController)("dyn-default-granted", {
+            displayName: "Open page",
+            category: page_2.pagesCategory,
+            hidden: true,
+            publicAccess: true,
+        });
+        cleanups.push(await (0, page_access_1.registerTestPage)(openPage));
+        cleanups.push(registerProvider(() => [
+            {
+                id: "default-granted",
+                displayName: "Granted by default",
+                fullSlug: PAGE_SLUG,
+                permissionId: "pages.dyn-default-granted",
+            },
+        ]));
+        const { memberModel, roleModel } = (0, page_access_1.stubPageAccessModels)([CATEGORY_FULL_ID]);
+        const member = { _id: "dyn-plain-member" };
+        const payload = await (0, page_1.buildSiteLayoutPayload)(member, memberModel, roleModel, TENANT_A);
+        const node = payload.siteLayoutTree.children.pages?.children[CATEGORY_ID];
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal([]);
+    });
+    it("keeps an entry the owner wildcard covers", async () => {
+        cleanups.push(registerProvider(() => [
+            {
+                id: "owner-only",
+                displayName: "Owner only",
+                fullSlug: PAGE_SLUG,
+                permissionId: RESTRICTED_PERMISSION,
+            },
+        ]));
+        const node = await resolveCategoryNode(OWNER, TENANT_A);
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal(["owner-only"]);
+    });
+    it("skips an entry whose id would alias a nested path", async () => {
+        cleanups.push(registerProvider(() => [
+            {
+                id: "team.project",
+                displayName: "Dotted id",
+                fullSlug: PAGE_SLUG,
+            },
+            {
+                id: "plain",
+                displayName: "Plain id",
+                fullSlug: PAGE_SLUG,
+            },
+        ]));
+        const node = await resolveCategoryNode(OWNER, TENANT_A);
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal(["plain"]);
+    });
+    it("skips an entry whose target page is not registered", async () => {
+        cleanups.push(registerProvider(() => [
+            {
+                id: "orphan",
+                displayName: "Orphan",
+                fullSlug: "/does-not-exist",
+            },
+        ]));
+        const node = await resolveCategoryNode(OWNER, TENANT_A);
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal([]);
+    });
+    it("links an entry to its target page with the route parameters filled", async () => {
+        cleanups.push(registerProvider(() => [
+            {
+                id: "acme",
+                displayName: "Acme",
+                fullSlug: PARAM_PAGE_SLUG,
+                params: { projectId: "acme/1" },
+            },
+        ]));
+        const node = await resolveCategoryNode(OWNER, TENANT_A);
+        (0, chai_1.expect)(node?.children.acme?.fullSlug).to.equal("/dyn-projects/acme%2F1/services");
+        (0, chai_1.expect)(node?.children.acme).to.not.have.property("params");
+    });
+    it("skips an entry that does not fill exactly its target's route parameters", async () => {
+        cleanups.push(registerProvider(() => [
+            { id: "unfilled", displayName: "Unfilled", fullSlug: PARAM_PAGE_SLUG },
+            {
+                id: "empty",
+                displayName: "Empty",
+                fullSlug: PARAM_PAGE_SLUG,
+                params: { projectId: "" },
+            },
+            {
+                id: "misnamed",
+                displayName: "Misnamed",
+                fullSlug: PARAM_PAGE_SLUG,
+                params: { project: "acme" },
+            },
+            {
+                id: "extra",
+                displayName: "Extra",
+                fullSlug: PAGE_SLUG,
+                params: { projectId: "acme" },
+            },
+            {
+                id: "filled",
+                displayName: "Filled",
+                fullSlug: PARAM_PAGE_SLUG,
+                params: { projectId: "acme" },
+            },
+        ]));
+        const node = await resolveCategoryNode(OWNER, TENANT_A);
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal(["filled"]);
+    });
+    it("resolves the rest of the menu when a resolver throws", async () => {
+        cleanups.push(registerProvider(() => {
+            throw new Error("resolver exploded");
+        }));
+        cleanups.push(registerProvider(() => [
+            {
+                id: "survivor",
+                displayName: "Survivor",
+                fullSlug: PAGE_SLUG,
+            },
+        ]));
+        const node = await resolveCategoryNode(OWNER, TENANT_A);
+        (0, chai_1.expect)(node?.childrenOrders).to.deep.equal(["survivor"]);
+    });
+});
+//# sourceMappingURL=dynamic-menu.test.js.map