@jskit-ai/users-core 0.1.42 → 0.1.44

package/test/avatarStorageService.test.js

@@ -18,8 +18,8 @@ function createStorageDouble() {
 }
 
 test("avatarStorageService builds stable storage key by user id", () => {
-  assert.equal(__testables.buildAvatarStorageKey(7), "users/avatars/7/avatar");
-  assert.throws(() => __testables.buildAvatarStorageKey(0), /positive integer user id/);
+  assert.equal(__testables.buildAvatarStorageKey("7"), "users/avatars/7/avatar");
+  assert.throws(() => __testables.buildAvatarStorageKey("0"), /valid user id/);
 });
 
 test("avatarStorageService detects common avatar mime types", () => {
@@ -45,7 +45,7 @@ test("avatarStorageService saves, reads, and deletes avatar bytes", async () =>
   const payload = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
 
   const saved = await avatarStorageService.saveAvatar({
-    userId: 42,
+    userId: "42",
     buffer: payload
   });
   assert.equal(saved.storageKey, "users/avatars/42/avatar");

package/test/consoleService.test.js

@@ -10,7 +10,7 @@ function createFixture(initialOwnerUserId = null) {
   const service = createService({
     consoleSettingsRepository: {
       async ensureOwnerUserId(userId) {
-        const normalizedUserId = Number(userId);
+        const normalizedUserId = String(userId || "");
         if (!state.ownerUserId) {
           state.ownerUserId = normalizedUserId;
         }
@@ -25,22 +25,22 @@ function createFixture(initialOwnerUserId = null) {
 test("consoleService seeds the first authenticated user as console owner", async () => {
   const { service, state } = createFixture();
 
-  const firstOwner = await service.ensureInitialConsoleMember(7);
-  const secondAttempt = await service.ensureInitialConsoleMember(9);
+  const firstOwner = await service.ensureInitialConsoleMember("7");
+  const secondAttempt = await service.ensureInitialConsoleMember("9");
 
-  assert.equal(firstOwner, 7);
-  assert.equal(secondAttempt, 7);
-  assert.equal(state.ownerUserId, 7);
+  assert.equal(firstOwner, "7");
+  assert.equal(secondAttempt, "7");
+  assert.equal(state.ownerUserId, "7");
 });
 
 test("consoleService.requireConsoleOwner denies authenticated non-owners", async () => {
-  const { service } = createFixture(7);
+  const { service } = createFixture("7");
 
   await assert.rejects(
     () =>
       service.requireConsoleOwner({
         actor: {
-          id: 9
+          id: "9"
         }
       }),
     (error) => error?.status === 403
@@ -48,7 +48,7 @@ test("consoleService.requireConsoleOwner denies authenticated non-owners", async
 });
 
 test("consoleService.requireConsoleOwner requires authentication", async () => {
-  const { service } = createFixture(7);
+  const { service } = createFixture("7");
 
   await assert.rejects(
     () => service.requireConsoleOwner({}),

package/test/registerServiceRealtimeEvents.test.js

@@ -76,7 +76,7 @@ test("workspace register functions publish members/invites/workspace-list realti
   assert.equal(members?.metadata?.events?.removeMember?.[1]?.realtime?.event, "users.bootstrap.changed");
   assert.equal(members?.metadata?.events?.createInvite?.[0]?.realtime?.event, "workspace.invites.changed");
   assert.equal(members?.metadata?.events?.createInvite?.[1]?.realtime?.event, "users.bootstrap.changed");
-  assert.equal(members?.metadata?.events?.createInvite?.[1]?.entityId?.({ result: { createdInviteId: 91 } }), 91);
+  assert.equal(members?.metadata?.events?.createInvite?.[1]?.entityId?.({ result: { createdInviteId: "91" } }), "91");
   assert.equal(members?.metadata?.events?.createInvite?.[1]?.realtime?.audience?.preset, "event_scope");
   assert.equal(typeof members?.metadata?.events?.createInvite?.[1]?.realtime?.audience?.userQuery, "function");
   const createInviteAudienceQueryResult = await members?.metadata?.events?.createInvite?.[1]?.realtime?.audience?.userQuery({
@@ -87,7 +87,7 @@ test("workspace register functions publish members/invites/workspace-list realti
         },
         where(field, value) {
           assert.equal(field, "wi.id");
-          assert.equal(value, 91);
+          assert.equal(value, "91");
           return this;
         },
         async first() {
@@ -98,13 +98,13 @@ test("workspace register functions publish members/invites/workspace-list realti
       };
     },
     event: {
-      entityId: 91
+      entityId: "91"
     }
   });
-  assert.deepEqual(createInviteAudienceQueryResult, [{ userId: 55 }]);
+  assert.deepEqual(createInviteAudienceQueryResult, [{ userId: "55" }]);
   assert.equal(members?.metadata?.events?.revokeInvite?.[0]?.realtime?.event, "workspace.invites.changed");
   assert.equal(members?.metadata?.events?.revokeInvite?.[1]?.realtime?.event, "users.bootstrap.changed");
-  assert.equal(members?.metadata?.events?.revokeInvite?.[1]?.entityId?.({ result: { revokedInviteId: 19 } }), 19);
+  assert.equal(members?.metadata?.events?.revokeInvite?.[1]?.entityId?.({ result: { revokedInviteId: "19" } }), "19");
   assert.equal(members?.metadata?.events?.revokeInvite?.[1]?.realtime?.audience?.preset, "event_scope");
   assert.equal(typeof members?.metadata?.events?.revokeInvite?.[1]?.realtime?.audience?.userQuery, "function");
 
@@ -124,22 +124,22 @@ test("workspace register functions publish members/invites/workspace-list realti
   const acceptedMembersChange = acceptInviteEvents.find(
     (entry) => entry?.realtime?.event === "workspace.members.changed"
   );
-  assert.equal(acceptedMembersChange?.entityId?.({ result: { workspaceId: 9 } }), 9);
+  assert.equal(acceptedMembersChange?.entityId?.({ result: { workspaceId: "9" } }), "9");
   assert.deepEqual(
     acceptedMembersChange?.realtime?.audience?.({
       event: {
-        entityId: 9
+        entityId: "9"
       }
     }),
     {
-      workspaceId: 9
+      workspaceId: "9"
     }
   );
 
   const acceptedInvitesChange = acceptInviteEvents.find(
     (entry) => entry?.realtime?.event === "workspace.invites.changed"
   );
-  assert.equal(acceptedInvitesChange?.entityId?.({ result: { workspaceId: 9 } }), 9);
+  assert.equal(acceptedInvitesChange?.entityId?.({ result: { workspaceId: "9" } }), "9");
 
   const refuseInviteEvents = Array.isArray(pending?.metadata?.events?.refuseInviteByToken)
     ? pending.metadata.events.refuseInviteByToken

package/test/repositoryContracts.test.js

@@ -0,0 +1,40 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { createRepository as createUsersRepository } from "../src/server/common/repositories/usersRepository.js";
+import { createRepository as createUserSettingsRepository } from "../src/server/common/repositories/userSettingsRepository.js";
+import { createRepository as createWorkspaceInvitesRepository } from "../src/server/common/repositories/workspaceInvitesRepository.js";
+import { createRepository as createWorkspaceMembershipsRepository } from "../src/server/common/repositories/workspaceMembershipsRepository.js";
+import { createRepository as createWorkspacesRepository } from "../src/server/common/repositories/workspacesRepository.js";
+import { createRepository as createConsoleSettingsRepository } from "../src/server/consoleSettings/consoleSettingsRepository.js";
+import { createRepository as createWorkspaceSettingsRepository } from "../src/server/workspaceSettings/workspaceSettingsRepository.js";
+
+function createKnexStub() {
+  const knex = Object.assign(() => {
+    throw new Error("query execution not expected");
+  }, {
+    async transaction(work) {
+      return work({ trxId: "trx-1" });
+    }
+  });
+
+  return knex;
+}
+
+test("users-core repositories expose withTransaction", async () => {
+  const knex = createKnexStub();
+  const repositories = [
+    createUsersRepository(knex),
+    createUserSettingsRepository(knex),
+    createWorkspaceInvitesRepository(knex),
+    createWorkspaceMembershipsRepository(knex),
+    createWorkspacesRepository(knex),
+    createConsoleSettingsRepository(knex),
+    createWorkspaceSettingsRepository(knex)
+  ];
+
+  for (const repository of repositories) {
+    assert.equal(typeof repository.withTransaction, "function");
+    const result = await repository.withTransaction(async (trx) => ({ id: trx.trxId }));
+    assert.deepEqual(result, { id: "trx-1" });
+  }
+});

package/test/usersBootstrapContributor.test.js

@@ -8,7 +8,7 @@ import {
 
 function createAuthenticatedProfile(overrides = {}) {
   return {
-    id: 7,
+    id: "7",
     authProvider: "local",
     authProviderUserSid: "user-7",
     username: "tester",
@@ -34,7 +34,7 @@ function createUserSettings() {
 }
 
 test("users bootstrap contributor seeds the initial console owner and exposes generic app payload", async () => {
-  const profile = createAuthenticatedProfile({ id: 12 });
+  const profile = createAuthenticatedProfile({ id: "12" });
   const consoleOwnerSeeds = [];
   const writtenSessions = [];
   const contributor = createUsersBootstrapContributor({
@@ -64,7 +64,7 @@ test("users bootstrap contributor seeds the initial console owner and exposes ge
     consoleService: {
       async ensureInitialConsoleMember(userId) {
         consoleOwnerSeeds.push(Number(userId));
-        return Number(userId);
+        return String(userId || "");
       }
     }
   });
@@ -92,7 +92,7 @@ test("users bootstrap contributor seeds the initial console owner and exposes ge
     csrfToken: "csrf-1"
   });
   assert.equal(payload.session.authenticated, true);
-  assert.equal(payload.session.userId, 12);
+  assert.equal(payload.session.userId, "12");
   assert.equal(payload.surfaceAccess.consoleowner, true);
   assert.equal(payload.app.features.workspaceSwitching, false);
   assert.deepEqual(payload.session.oauthProviders, [

package/test/workspaceBootstrapContributor.test.js

@@ -4,7 +4,7 @@ import { createWorkspaceBootstrapContributor } from "../src/server/workspaceBoot
 
 function createAuthenticatedProfile(overrides = {}) {
   return {
-    id: 7,
+    id: "7",
     authProvider: "local",
     authProviderUserSid: "user-7",
     username: "tester",

package/test/workspaceInvitesRepository.test.js

@@ -55,12 +55,12 @@ test("workspaceInvitesRepository.insert normalizes expiresAt ISO input to databa
   const repository = createRepository(knexStub);
 
   await repository.insert({
-    workspaceId: 1,
+    workspaceId: "1",
     email: "invitee@example.com",
     roleSid: "member",
     status: "pending",
     tokenHash: "hash",
-    invitedByUserId: 1,
+    invitedByUserId: "1",
     expiresAt: "2026-03-16T00:26:35.709Z"
   });
 
@@ -106,6 +106,6 @@ test("workspaceInvitesRepository.findPendingByTokenHash reads from invites table
     token_hash: "hash-token",
     status: "pending"
   });
-  assert.equal(invite?.workspaceId, 9);
+  assert.equal(invite?.workspaceId, "9");
   assert.equal(invite?.workspaceSlug, undefined);
 });

package/test/workspaceMembersService.test.js

@@ -7,7 +7,7 @@ function authorizedOptions(permissions = []) {
   return {
     context: {
       actor: {
-        id: 1
+        id: "1"
       },
       permissions
     }
@@ -40,10 +40,10 @@ function createRoleCatalog() {
 
 function createFixture() {
   const workspace = {
-    id: 7,
+    id: "7",
     slug: "tonymobily3",
     name: "TonyMobily3",
-    ownerUserId: 9,
+    ownerUserId: "9",
     avatarUrl: ""
   };
 
@@ -53,7 +53,7 @@ function createFixture() {
         assert.equal(Number(workspaceId), 7);
         return [
           {
-            userId: 11,
+            userId: "11",
             roleSid: "member",
             status: "active",
             displayName: "Alice",
@@ -65,8 +65,8 @@ function createFixture() {
         assert.equal(Number(workspaceId), 7);
         assert.equal(Number(userId), 11);
         return {
-          workspaceId: 7,
-          userId: 11,
+          workspaceId: "7",
+          userId: "11",
           roleSid: "member",
           status: "active"
         };
@@ -112,7 +112,7 @@ test("workspaceMembersService.createInvite uses configured inviteExpiresInMs", a
       async insert(payload) {
         expiresAtValues.push(payload.expiresAt);
         return {
-          id: 31
+          id: "31"
         };
       },
       async listPendingByWorkspaceIdWithWorkspace() {
@@ -130,10 +130,10 @@ test("workspaceMembersService.createInvite uses configured inviteExpiresInMs", a
   const before = Date.now();
   const response = await service.createInvite(
     {
-      id: 7,
-      ownerUserId: 9
+      id: "7",
+      ownerUserId: "9"
     },
-    { id: 11 },
+    { id: "11" },
     {
       email: "alice@example.com",
       roleSid: "member"
@@ -146,7 +146,7 @@ test("workspaceMembersService.createInvite uses configured inviteExpiresInMs", a
   const expiresAt = new Date(expiresAtValues[0]).getTime();
   assert.ok(expiresAt >= before + 30 * 60 * 1000);
   assert.ok(expiresAt <= after + 30 * 60 * 1000);
-  assert.equal(response.createdInviteId, 31);
+  assert.equal(response.createdInviteId, "31");
 });
 
 test("workspaceMembersService.revokeInvite returns the revoked invite id", async () => {
@@ -164,15 +164,15 @@ test("workspaceMembersService.revokeInvite returns the revoked invite id", async
       async expirePendingByWorkspaceIdAndEmail() {},
       async insert() {
         return {
-          id: 1
+          id: "1"
         };
       },
       async findPendingByIdForWorkspace(inviteId, workspaceId) {
         assert.equal(Number(inviteId), 47);
         assert.equal(Number(workspaceId), 7);
         return {
-          id: 47,
-          workspaceId: 7,
+          id: "47",
+          workspaceId: "7",
           status: "pending"
         };
       },
@@ -186,15 +186,15 @@ test("workspaceMembersService.revokeInvite returns the revoked invite id", async
 
   const response = await service.revokeInvite(
     {
-      id: 7,
-      ownerUserId: 9
+      id: "7",
+      ownerUserId: "9"
     },
-    47,
+    "47",
     authorizedOptions(["workspace.invites.revoke"])
   );
 
   assert.equal(revokedInviteId, 47);
-  assert.equal(response.revokedInviteId, 47);
+  assert.equal(response.revokedInviteId, "47");
 });
 
 test("workspaceMembersService rejects invite operations when invitations are disabled", async () => {
@@ -230,8 +230,8 @@ test("workspaceMembersService rejects invite operations when invitations are dis
     () =>
       service.listInvites(
         {
-          id: 7,
-          ownerUserId: 9
+          id: "7",
+          ownerUserId: "9"
         },
         authorizedOptions(["workspace.members.view"])
       ),
@@ -245,10 +245,10 @@ test("workspaceMembersService.listMembers uses the resolved workspace directly",
   const response = await service.listMembers(workspace, authorizedOptions(["workspace.members.view"]));
 
   assert.deepEqual(response.workspace, {
-    id: 7,
+    id: "7",
     slug: "tonymobily3",
     name: "TonyMobily3",
-    ownerUserId: 9,
+    ownerUserId: "9",
     avatarUrl: ""
   });
   assert.equal(response.members.length, 1);
@@ -261,7 +261,7 @@ test("workspaceMembersService.updateMemberRole returns the refreshed member list
   const response = await service.updateMemberRole(
     workspace,
     {
-      memberUserId: 11,
+      memberUserId: "11",
       roleSid: "admin"
     },
     authorizedOptions(["workspace.members.manage"])
@@ -274,10 +274,10 @@ test("workspaceMembersService.updateMemberRole returns the refreshed member list
 test("workspaceMembersService.removeMember marks membership revoked and returns refreshed members", async () => {
   let removed = false;
   const workspace = {
-    id: 7,
+    id: "7",
     slug: "tonymobily3",
     name: "TonyMobily3",
-    ownerUserId: 9,
+    ownerUserId: "9",
     avatarUrl: ""
   };
   const service = createService({
@@ -288,7 +288,7 @@ test("workspaceMembersService.removeMember marks membership revoked and returns
           ? []
           : [
               {
-                userId: 11,
+                userId: "11",
                 roleSid: "member",
                 status: "active",
                 displayName: "Alice",
@@ -300,8 +300,8 @@ test("workspaceMembersService.removeMember marks membership revoked and returns
         assert.equal(Number(workspaceId), 7);
         assert.equal(Number(userId), 11);
         return {
-          workspaceId: 7,
-          userId: 11,
+          workspaceId: "7",
+          userId: "11",
           roleSid: "member",
           status: "active"
         };
@@ -334,7 +334,7 @@ test("workspaceMembersService.removeMember marks membership revoked and returns
   const response = await service.removeMember(
     workspace,
     {
-      memberUserId: 11
+      memberUserId: "11"
     },
     authorizedOptions(["workspace.members.manage"])
   );
@@ -344,10 +344,10 @@ test("workspaceMembersService.removeMember marks membership revoked and returns
 
 test("workspaceMembersService.removeMember rejects removing the owner", async () => {
   const workspace = {
-    id: 7,
+    id: "7",
     slug: "tonymobily3",
     name: "TonyMobily3",
-    ownerUserId: 9,
+    ownerUserId: "9",
     avatarUrl: ""
   };
   const service = createService({
@@ -359,8 +359,8 @@ test("workspaceMembersService.removeMember rejects removing the owner", async ()
         assert.equal(Number(workspaceId), 7);
         assert.equal(Number(userId), 9);
         return {
-          workspaceId: 7,
-          userId: 9,
+          workspaceId: "7",
+          userId: "9",
           roleSid: "owner",
           status: "active"
         };
@@ -389,7 +389,7 @@ test("workspaceMembersService.removeMember rejects removing the owner", async ()
       service.removeMember(
         workspace,
         {
-          memberUserId: 9
+          memberUserId: "9"
         },
         authorizedOptions(["workspace.members.manage"])
       ),

package/test/workspacePendingInvitationsResource.test.js

@@ -9,8 +9,8 @@ test("workspacePendingInvitationsResource output normalizer shapes raw invite ro
   const result = workspacePendingInvitationsResource.operations.list.outputValidator.normalize({
     pendingInvites: [
       {
-        id: 10,
-        workspaceId: 3,
+        id: "10",
+        workspaceId: "3",
         workspaceSlug: "tonymobily3",
         workspaceName: "",
         workspaceAvatarUrl: "",
@@ -24,8 +24,8 @@ test("workspacePendingInvitationsResource output normalizer shapes raw invite ro
 
   assert.deepEqual(result, [
     {
-      id: 10,
-      workspaceId: 3,
+      id: "10",
+      workspaceId: "3",
       workspaceSlug: "tonymobily3",
       workspaceName: "tonymobily3",
       workspaceAvatarUrl: "",

package/test/workspacePendingInvitationsService.test.js

@@ -59,8 +59,8 @@ test("listPendingInvitesForUser returns raw pending invite rows for the action l
   const { service } = createFixture({
     pendingInvitesByEmail: [
       {
-        id: 10,
-        workspaceId: 1,
+        id: "10",
+        workspaceId: "1",
         workspaceSlug: "tonymobily3",
         workspaceName: "TonyMobily3",
         workspaceAvatarUrl: "",
@@ -73,7 +73,7 @@ test("listPendingInvitesForUser returns raw pending invite rows for the action l
   });
 
   const pendingInvites = await service.listPendingInvitesForUser({
-    id: 7,
+    id: "7",
     email: "chiaramobily@gmail.com"
   });
 
@@ -88,8 +88,8 @@ test("acceptInviteByToken accepts opaque invite token and resolves invite by dec
   const { service, calls } = createFixture({
     inviteByTokenHash: {
       [tokenHash]: {
-        id: 44,
-        workspaceId: 1,
+        id: "44",
+        workspaceId: "1",
         email: "chiaramobily@gmail.com",
         roleSid: "member",
         status: "pending",
@@ -101,7 +101,7 @@ test("acceptInviteByToken accepts opaque invite token and resolves invite by dec
 
   const response = await service.acceptInviteByToken({
     user: {
-      id: 7,
+      id: "7",
       email: "chiaramobily@gmail.com",
       displayName: "Chiara"
     },
@@ -113,7 +113,7 @@ test("acceptInviteByToken accepts opaque invite token and resolves invite by dec
   assert.deepEqual(calls.acceptCalls, [44]);
   assert.deepEqual(calls.revokeCalls, []);
   assert.equal(response.decision, "accepted");
-  assert.equal(response.workspaceId, 1);
+  assert.equal(response.workspaceId, "1");
 });
 
 test("refuseInviteByToken revokes the invite and returns refused", async () => {
@@ -122,8 +122,8 @@ test("refuseInviteByToken revokes the invite and returns refused", async () => {
   const { service, calls } = createFixture({
     inviteByTokenHash: {
       [tokenHash]: {
-        id: 45,
-        workspaceId: 1,
+        id: "45",
+        workspaceId: "1",
         email: "chiaramobily@gmail.com",
         roleSid: "member",
         status: "pending",
@@ -135,7 +135,7 @@ test("refuseInviteByToken revokes the invite and returns refused", async () => {
 
   const response = await service.refuseInviteByToken({
     user: {
-      id: 7,
+      id: "7",
       email: "chiaramobily@gmail.com",
       displayName: "Chiara"
     },
@@ -147,5 +147,5 @@ test("refuseInviteByToken revokes the invite and returns refused", async () => {
   assert.deepEqual(calls.revokeCalls, [45]);
   assert.equal(calls.upsertCalls.length, 0);
   assert.equal(response.decision, "refused");
-  assert.equal(response.workspaceId, 1);
+  assert.equal(response.workspaceId, "1");
 });

package/test/workspaceRouteVisibilityResolver.test.js

@@ -18,7 +18,7 @@ test("workspace route visibility resolver contributes workspace_user scope and a
         id: "user_42"
       },
       workspace: {
-        id: 11
+        id: "11"
       }
     }
   });
@@ -26,8 +26,8 @@ test("workspace route visibility resolver contributes workspace_user scope and a
   assert.deepEqual(contribution, {
     scopeKind: "workspace_user",
     requiresActorScope: true,
-    scopeOwnerId: 11,
-    userOwnerId: "user_42"
+    scopeOwnerId: "11",
+    userId: "user_42"
   });
 });
 
@@ -44,7 +44,7 @@ test("workspace route visibility resolver keeps workspace-only visibility actor-
     visibility: "workspace",
     context: {
       workspace: {
-        id: 11
+        id: "11"
       }
     }
   });
@@ -52,7 +52,7 @@ test("workspace route visibility resolver keeps workspace-only visibility actor-
   assert.deepEqual(contribution, {
     scopeKind: "workspace",
     requiresActorScope: false,
-    scopeOwnerId: 11
+    scopeOwnerId: "11"
   });
 });
 
@@ -78,6 +78,6 @@ test("workspace route visibility resolver still marks workspace_user as actor-sc
   assert.deepEqual(contribution, {
     scopeKind: "workspace_user",
     requiresActorScope: true,
-    userOwnerId: "user_99"
+    userId: "user_99"
   });
 });