@memberjunction/ng-conversations 5.40.2 → 5.41.0

package/dist/__tests__/slot-defaults.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slot-defaults.test.js","sourceRoot":"","sources":["../../src/__tests__/slot-defaults.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,mBAAmB,CAAC;AAC3B,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,gCAAgC,EAAE,MAAM,+DAA+D,CAAC;AACjH,OAAO,EAAE,mCAAmC,EAAE,MAAM,kEAAkE,CAAC;AACvH,OAAO,EAAE,4BAA4B,EAAE,MAAM,0DAA0D,CAAC;AACxG,OAAO,EAAE,kCAAkC,EAAE,MAAM,iEAAiE,CAAC;AACrH,OAAO,EAAE,0CAA0C,EAAE,MAAM,yEAAyE,CAAC;AACrI,OAAO,EAAE,mCAAmC,EAAE,MAAM,kEAAkE,CAAC;AAWvH,QAAQ,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACvE,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,OAAO,gCAAgC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAQjE,MAAM,eAAe,GAAW,IAAI,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,OAAO,mCAAmC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAIpE,MAAM,eAAe,GAAW,IAAI,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAI7D,MAAM,eAAe,GAAW,IAAI,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAInE,MAAM,eAAe,GAAW,IAAI,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,OAAO,0CAA0C,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAI3E,MAAM,eAAe,GAAW,IAAI,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,OAAO,mCAAmC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAIpE,MAAM,eAAe,GAAW,IAAI,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC","sourcesContent":["/**\n * @fileoverview Compile-time interface-conformance checks for the 5 default\n * slot components.\n *\n * These tests deliberately do NOT instantiate the components (instantiating\n * Angular standalone components at runtime requires `@angular/compiler` +\n * a TestBed, which adds substantial machinery for very little signal).\n * Instead we verify that:\n *\n *   - Each default class is importable and is a class (`typeof === 'function'`).\n *   - The class satisfies its declared interface at compile time (the\n *     `interfaceCheck` assignments fail TypeScript if a contract drifts).\n *\n * That's the actual contract we care about: any consumer-supplied component\n * for a given slot will be type-compatible with the widget's interaction\n * because the default it replaces was compatible.\n *\n * Behavioral tests for slot content rendering belong in a future commit that\n * sets up TestBed + the ChatSlotDirective + the chat-area component\n * together — once those are in place we'll have end-to-end coverage of the\n * projection path, not just the type shape.\n */\n\nimport '@angular/compiler';\nimport { describe, it, expect } from 'vitest';\n\nimport { MJChatEmptyStateDefaultComponent } from '../lib/components/slots/mj-chat-empty-state-default.component';\nimport { MJChatAgentPresenceDefaultComponent } from '../lib/components/slots/mj-chat-agent-presence-default.component';\nimport { MJChatHeaderDefaultComponent } from '../lib/components/slots/mj-chat-header-default.component';\nimport { MJChatMessageExtraDefaultComponent } from '../lib/components/slots/mj-chat-message-extra-default.component';\nimport { MJChatDemonstrationSurfaceDefaultComponent } from '../lib/components/slots/mj-chat-demonstration-surface-default.component';\nimport { MJChatMessageBubbleDefaultComponent } from '../lib/components/slots/mj-chat-message-bubble-default.component';\n\nimport type {\n    IMJChatEmptyStateComponent,\n    IMJChatAgentPresenceComponent,\n    IMJChatHeaderComponent,\n    IMJChatMessageExtraComponent,\n    IMJChatDemonstrationSurfaceComponent,\n    IMJChatMessageRendererComponent,\n} from '../lib/components/slots/slot-interfaces';\n\ndescribe('Slot default components — exports + interface conformance', () => {\n    it('MJChatEmptyStateDefaultComponent is exported as a class', () => {\n        expect(typeof MJChatEmptyStateDefaultComponent).toBe('function');\n        // Compile-time check: the class must structurally satisfy the interface.\n        // If this assignment ever fails to type-check, the interface drifted from\n        // the default — fix one or the other. Using a no-op cast keeps this at\n        // type-level only (no runtime instantiation).\n        type _Check = InstanceType<typeof MJChatEmptyStateDefaultComponent> extends IMJChatEmptyStateComponent\n            ? true\n            : never;\n        const _interfaceCheck: _Check = true;\n        expect(_interfaceCheck).toBe(true);\n    });\n\n    it('MJChatAgentPresenceDefaultComponent is exported as a class', () => {\n        expect(typeof MJChatAgentPresenceDefaultComponent).toBe('function');\n        type _Check = InstanceType<typeof MJChatAgentPresenceDefaultComponent> extends IMJChatAgentPresenceComponent\n            ? true\n            : never;\n        const _interfaceCheck: _Check = true;\n        expect(_interfaceCheck).toBe(true);\n    });\n\n    it('MJChatHeaderDefaultComponent is exported as a class', () => {\n        expect(typeof MJChatHeaderDefaultComponent).toBe('function');\n        type _Check = InstanceType<typeof MJChatHeaderDefaultComponent> extends IMJChatHeaderComponent\n            ? true\n            : never;\n        const _interfaceCheck: _Check = true;\n        expect(_interfaceCheck).toBe(true);\n    });\n\n    it('MJChatMessageExtraDefaultComponent is exported as a class', () => {\n        expect(typeof MJChatMessageExtraDefaultComponent).toBe('function');\n        type _Check = InstanceType<typeof MJChatMessageExtraDefaultComponent> extends IMJChatMessageExtraComponent\n            ? true\n            : never;\n        const _interfaceCheck: _Check = true;\n        expect(_interfaceCheck).toBe(true);\n    });\n\n    it('MJChatDemonstrationSurfaceDefaultComponent is exported as a class', () => {\n        expect(typeof MJChatDemonstrationSurfaceDefaultComponent).toBe('function');\n        type _Check = InstanceType<typeof MJChatDemonstrationSurfaceDefaultComponent> extends IMJChatDemonstrationSurfaceComponent\n            ? true\n            : never;\n        const _interfaceCheck: _Check = true;\n        expect(_interfaceCheck).toBe(true);\n    });\n\n    it('MJChatMessageBubbleDefaultComponent is exported as a class', () => {\n        expect(typeof MJChatMessageBubbleDefaultComponent).toBe('function');\n        type _Check = InstanceType<typeof MJChatMessageBubbleDefaultComponent> extends IMJChatMessageRendererComponent\n            ? true\n            : never;\n        const _interfaceCheck: _Check = true;\n        expect(_interfaceCheck).toBe(true);\n    });\n});\n"]}

package/dist/__tests__/user-authorization.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=user-authorization.test.d.ts.map

package/dist/__tests__/user-authorization.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-authorization.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/user-authorization.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/user-authorization.test.js

@@ -0,0 +1,97 @@
+import { describe, it, expect } from 'vitest';
+import { REALTIME_ADVANCED_SESSION_CONTROLS, UserHoldsAuthorization, } from '../lib/services/user-authorization';
+/**
+ * Pure client-side authorization check — resolves the cached-metadata
+ * Authorizations ↔ Authorization Roles ↔ user.UserRoles chain with
+ * `AuthorizationInfo.UserCanExecute` semantics (Deny wins, Allow required,
+ * inactive never grants) and is DEFENSIVE: every missing-data shape resolves
+ * to false. This is the disclosure gate for the realtime advanced session
+ * controls (model picker / config overrides); the server enforces the same
+ * authorization on the mint mutation.
+ */
+const AUTH_ID = 'A0000000-0000-0000-0000-00000000000A';
+const ROLE_ADMIN = 'B0000000-0000-0000-0000-00000000000B';
+const ROLE_USER = 'C0000000-0000-0000-0000-00000000000C';
+function source(overrides) {
+    return {
+        Authorizations: [{ ID: AUTH_ID, Name: REALTIME_ADVANCED_SESSION_CONTROLS, IsActive: true }],
+        AuthorizationRoles: [{ AuthorizationID: AUTH_ID, RoleID: ROLE_ADMIN, Type: 'Allow' }],
+        ...overrides,
+    };
+}
+function userWithRoles(...roleIds) {
+    return { UserRoles: roleIds.map(RoleID => ({ RoleID })) };
+}
+describe('UserHoldsAuthorization', () => {
+    describe('grants', () => {
+        it('returns true when one of the user roles has an Allow row on the active authorization', () => {
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(true);
+        });
+        it('matches the authorization name case-insensitively with surrounding whitespace', () => {
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), '  realtime: ADVANCED session controls ', source())).toBe(true);
+        });
+        it('matches role ids across SQL Server (upper) vs PostgreSQL (lower) UUID casing', () => {
+            const user = userWithRoles(ROLE_ADMIN.toLowerCase());
+            const src = source({
+                Authorizations: [{ ID: AUTH_ID.toLowerCase(), Name: REALTIME_ADVANCED_SESSION_CONTROLS, IsActive: true }],
+                AuthorizationRoles: [{ AuthorizationID: AUTH_ID.toUpperCase(), RoleID: ROLE_ADMIN.toUpperCase(), Type: 'allow' }],
+            });
+            expect(UserHoldsAuthorization(user, REALTIME_ADVANCED_SESSION_CONTROLS, src)).toBe(true);
+        });
+        it('grants when the user holds an unrelated role plus the allowed role', () => {
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_USER, ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(true);
+        });
+    });
+    describe('denials', () => {
+        it('returns false when none of the user roles is mapped to the authorization', () => {
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_USER), REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(false);
+        });
+        it('Deny on any user role vetoes an Allow on another role (Deny wins globally)', () => {
+            const src = source({
+                AuthorizationRoles: [
+                    { AuthorizationID: AUTH_ID, RoleID: ROLE_ADMIN, Type: 'Allow' },
+                    { AuthorizationID: AUTH_ID, RoleID: ROLE_USER, Type: 'Deny' },
+                ],
+            });
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN, ROLE_USER), REALTIME_ADVANCED_SESSION_CONTROLS, src)).toBe(false);
+        });
+        it('returns false when the authorization is inactive', () => {
+            const src = source({
+                Authorizations: [{ ID: AUTH_ID, Name: REALTIME_ADVANCED_SESSION_CONTROLS, IsActive: false }],
+            });
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, src)).toBe(false);
+        });
+        it('returns false for an unknown authorization name', () => {
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), 'Some Other Authorization', source())).toBe(false);
+        });
+        it('treats a matching row with a null/blank Type as a Deny (missing data never grants)', () => {
+            const src = source({
+                AuthorizationRoles: [{ AuthorizationID: AUTH_ID, RoleID: ROLE_ADMIN, Type: null }],
+            });
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, src)).toBe(false);
+        });
+    });
+    describe('defensive missing-data shapes — always false', () => {
+        it('null/undefined user', () => {
+            expect(UserHoldsAuthorization(null, REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(false);
+            expect(UserHoldsAuthorization(undefined, REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(false);
+        });
+        it('user with no roles', () => {
+            expect(UserHoldsAuthorization({ UserRoles: [] }, REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(false);
+            expect(UserHoldsAuthorization({}, REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(false);
+        });
+        it('null/undefined metadata source', () => {
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, null)).toBe(false);
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, undefined)).toBe(false);
+        });
+        it('metadata source missing either collection', () => {
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, source({ Authorizations: [] }))).toBe(false);
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, source({ AuthorizationRoles: null }))).toBe(false);
+        });
+        it('empty authorization name', () => {
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), '', source())).toBe(false);
+            expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), '   ', source())).toBe(false);
+        });
+    });
+});
+//# sourceMappingURL=user-authorization.test.js.map

package/dist/__tests__/user-authorization.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-authorization.test.js","sourceRoot":"","sources":["../../src/__tests__/user-authorization.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAGL,kCAAkC,EAClC,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAE5C;;;;;;;;GAQG;AAEH,MAAM,OAAO,GAAG,sCAAsC,CAAC;AACvD,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAC1D,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD,SAAS,MAAM,CAAC,SAAgD;IAC9D,OAAO;QACL,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,kCAAkC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC3F,kBAAkB,EAAE,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrF,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAG,OAAiB;IACzC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;YAC9F,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;YACvF,MAAM,CACJ,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,wCAAwC,EAAE,MAAM,EAAE,CAAC,CACtG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;YACtF,MAAM,IAAI,GAAG,aAAa,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,MAAM,CAAC;gBACjB,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,kCAAkC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACzG,kBAAkB,EAAE,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aAClH,CAAC,CAAC;YACH,MAAM,CAAC,sBAAsB,CAAC,IAAI,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;YAC5E,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChI,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACvB,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;YAClF,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;YACpF,MAAM,GAAG,GAAG,MAAM,CAAC;gBACjB,kBAAkB,EAAE;oBAClB,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;oBAC/D,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;iBAC9D;aACF,CAAC,CAAC;YACH,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5H,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,GAAG,GAAG,MAAM,CAAC;gBACjB,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,kCAAkC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;aAC7F,CAAC,CAAC;YACH,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,0BAA0B,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9G,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;YAC5F,MAAM,GAAG,GAAG,MAAM,CAAC;gBACjB,kBAAkB,EAAE,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;aACnF,CAAC,CAAC;YACH,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;QAC5D,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,sBAAsB,CAAC,IAAI,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/F,MAAM,CAAC,sBAAsB,CAAC,SAAS,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;YAC5B,MAAM,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5G,MAAM,CAAC,sBAAsB,CAAC,EAAE,EAAE,kCAAkC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,kCAAkC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChH,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,kCAAkC,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,CACJ,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,kCAAkC,EAAE,MAAM,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CACtH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACd,MAAM,CACJ,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,kCAAkC,EAAE,MAAM,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAC5H,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;YAClC,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpF,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { describe, it, expect } from 'vitest';\nimport {\n  AuthorizationMetadataSource,\n  AuthorizationUserLike,\n  REALTIME_ADVANCED_SESSION_CONTROLS,\n  UserHoldsAuthorization,\n} from '../lib/services/user-authorization';\n\n/**\n * Pure client-side authorization check — resolves the cached-metadata\n * Authorizations ↔ Authorization Roles ↔ user.UserRoles chain with\n * `AuthorizationInfo.UserCanExecute` semantics (Deny wins, Allow required,\n * inactive never grants) and is DEFENSIVE: every missing-data shape resolves\n * to false. This is the disclosure gate for the realtime advanced session\n * controls (model picker / config overrides); the server enforces the same\n * authorization on the mint mutation.\n */\n\nconst AUTH_ID = 'A0000000-0000-0000-0000-00000000000A';\nconst ROLE_ADMIN = 'B0000000-0000-0000-0000-00000000000B';\nconst ROLE_USER = 'C0000000-0000-0000-0000-00000000000C';\n\nfunction source(overrides?: Partial<AuthorizationMetadataSource>): AuthorizationMetadataSource {\n  return {\n    Authorizations: [{ ID: AUTH_ID, Name: REALTIME_ADVANCED_SESSION_CONTROLS, IsActive: true }],\n    AuthorizationRoles: [{ AuthorizationID: AUTH_ID, RoleID: ROLE_ADMIN, Type: 'Allow' }],\n    ...overrides,\n  };\n}\n\nfunction userWithRoles(...roleIds: string[]): AuthorizationUserLike {\n  return { UserRoles: roleIds.map(RoleID => ({ RoleID })) };\n}\n\ndescribe('UserHoldsAuthorization', () => {\n  describe('grants', () => {\n    it('returns true when one of the user roles has an Allow row on the active authorization', () => {\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(true);\n    });\n\n    it('matches the authorization name case-insensitively with surrounding whitespace', () => {\n      expect(\n        UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), '  realtime: ADVANCED session controls ', source())\n      ).toBe(true);\n    });\n\n    it('matches role ids across SQL Server (upper) vs PostgreSQL (lower) UUID casing', () => {\n      const user = userWithRoles(ROLE_ADMIN.toLowerCase());\n      const src = source({\n        Authorizations: [{ ID: AUTH_ID.toLowerCase(), Name: REALTIME_ADVANCED_SESSION_CONTROLS, IsActive: true }],\n        AuthorizationRoles: [{ AuthorizationID: AUTH_ID.toUpperCase(), RoleID: ROLE_ADMIN.toUpperCase(), Type: 'allow' }],\n      });\n      expect(UserHoldsAuthorization(user, REALTIME_ADVANCED_SESSION_CONTROLS, src)).toBe(true);\n    });\n\n    it('grants when the user holds an unrelated role plus the allowed role', () => {\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_USER, ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(true);\n    });\n  });\n\n  describe('denials', () => {\n    it('returns false when none of the user roles is mapped to the authorization', () => {\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_USER), REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(false);\n    });\n\n    it('Deny on any user role vetoes an Allow on another role (Deny wins globally)', () => {\n      const src = source({\n        AuthorizationRoles: [\n          { AuthorizationID: AUTH_ID, RoleID: ROLE_ADMIN, Type: 'Allow' },\n          { AuthorizationID: AUTH_ID, RoleID: ROLE_USER, Type: 'Deny' },\n        ],\n      });\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN, ROLE_USER), REALTIME_ADVANCED_SESSION_CONTROLS, src)).toBe(false);\n    });\n\n    it('returns false when the authorization is inactive', () => {\n      const src = source({\n        Authorizations: [{ ID: AUTH_ID, Name: REALTIME_ADVANCED_SESSION_CONTROLS, IsActive: false }],\n      });\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, src)).toBe(false);\n    });\n\n    it('returns false for an unknown authorization name', () => {\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), 'Some Other Authorization', source())).toBe(false);\n    });\n\n    it('treats a matching row with a null/blank Type as a Deny (missing data never grants)', () => {\n      const src = source({\n        AuthorizationRoles: [{ AuthorizationID: AUTH_ID, RoleID: ROLE_ADMIN, Type: null }],\n      });\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, src)).toBe(false);\n    });\n  });\n\n  describe('defensive missing-data shapes — always false', () => {\n    it('null/undefined user', () => {\n      expect(UserHoldsAuthorization(null, REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(false);\n      expect(UserHoldsAuthorization(undefined, REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(false);\n    });\n\n    it('user with no roles', () => {\n      expect(UserHoldsAuthorization({ UserRoles: [] }, REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(false);\n      expect(UserHoldsAuthorization({}, REALTIME_ADVANCED_SESSION_CONTROLS, source())).toBe(false);\n    });\n\n    it('null/undefined metadata source', () => {\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, null)).toBe(false);\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, undefined)).toBe(false);\n    });\n\n    it('metadata source missing either collection', () => {\n      expect(\n        UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, source({ Authorizations: [] }))\n      ).toBe(false);\n      expect(\n        UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), REALTIME_ADVANCED_SESSION_CONTROLS, source({ AuthorizationRoles: null }))\n      ).toBe(false);\n    });\n\n    it('empty authorization name', () => {\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), '', source())).toBe(false);\n      expect(UserHoldsAuthorization(userWithRoles(ROLE_ADMIN), '   ', source())).toBe(false);\n    });\n  });\n});\n"]}

package/dist/__tests__/voice-session-narration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=voice-session-narration.test.d.ts.map

package/dist/__tests__/voice-session-narration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"voice-session-narration.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/voice-session-narration.test.ts"],"names":[],"mappings":""}