@oxy.so/core 1.18.0 → 3.0.0

package/src/session/__tests__/accountDialogShape.test.ts

@@ -1,120 +0,0 @@
-/**
- * The two halves of the retired flat account list that a text scan cannot prove
- * gone.
- *
- * `scripts/validate-no-flat-account-list.mjs` bans the identifiers that left the
- * packages outright — `SwitchableAccount`, `projectSwitchableAccounts`,
- * `useSwitchableAccounts`, `useAccountStore` and the rest — because each of
- * those names is unique enough that a match is always a reintroduction. Two
- * pieces of the same removal are NOT: an `accounts` field on the snapshot and a
- * `switchTo` method on the controller are ordinary words. `'accounts'` is a live
- * VIEW name three lines away in the same file, so a scoped grep there would fire
- * on the thing that is supposed to be there.
- *
- * ## Why this is a RUNTIME check and not a type-level one
- *
- * A `type Has<S, K> = K extends keyof S ? true : false` assertion reads better
- * and is checked by nothing here. `packages/core/tsconfig*.json` all carry
- * `"exclude": ["**\/__tests__"]`, so `tsc` never sees a test file, and
- * `jest.config.js` sets `diagnostics: false`, so ts-jest transpiles without
- * typechecking. That version was written first and MUTATION-TESTED: putting
- * `accounts: string[]` back on the interface and `switchTo()` back on the class
- * left both assertions green. It is recorded here because the type-level form is
- * the obvious thing to reach for, and it cannot fail in this package.
- *
- * The residual gap of the runtime form is an OPTIONAL field nobody writes —
- * `accounts?: SwitchableAccount[]` would satisfy `tsc` without appearing on a
- * snapshot. A REQUIRED one cannot hide: `computeSnapshot()` is strict, so the
- * field has to be populated, and then it is here. An optional list nothing
- * writes is not the mechanism coming back.
- */
-
-import type { DeviceSessionState } from '@oxy.so/contracts';
-import type { OxyServices } from '../../OxyServices';
-import { SessionClient, type SessionClientHost } from '../SessionClient';
-import { createAccountDialogController } from '../accountDialogController';
-
-const host: SessionClientHost = {
-  makeRequest: jest.fn(async () => undefined),
-  getBaseURL: () => 'http://test.invalid',
-  getAccessToken: () => null,
-  getDeviceCredential: () => null,
-  onTokensChanged: () => () => undefined,
-  setTokens: jest.fn(),
-  getCurrentAccountId: () => null,
-};
-
-const oxyServices = {
-  getAccessToken: jest.fn(() => null),
-  getBaseURL: jest.fn(() => 'http://test.invalid'),
-  onTokensChanged: jest.fn(() => () => undefined),
-  getFileDownloadUrl: jest.fn((id: string) => `https://cdn/${id}`),
-} as unknown as OxyServices;
-
-/**
- * Every key the snapshot carries, and the whole set of them.
- *
- * An exact set rather than `not.toContain('accounts')` on purpose: it fails on
- * ANY new field, not only on one spelled the way the old one was. The snapshot
- * is a published contract that four surfaces render from, so growing it should
- * be a deliberate edit here — and a flat list would come back under a new name
- * (`rows`, `switchable`, `entries`) at least as readily as under the old one,
- * which a name-specific check would wave through.
- */
-const SNAPSHOT_KEYS = [
-  'activatingContextId',
-  'activeContext',
-  'backView',
-  'commonsAvailability',
-  'directory',
-  'error',
-  'hasSession',
-  'loading',
-  'removingContextId',
-  'removingPrincipalId',
-  'signIn',
-  'view',
-];
-
-describe('the account dialog surface after the flat list was retired', () => {
-  it('carries the server directory, and no flat account list beside it', () => {
-    const controller = createAccountDialogController({
-      oxyServices,
-      sessionClient: new SessionClient(host),
-      clientId: 'oxy_dk_test',
-    });
-
-    const snapshot = controller.getSnapshot();
-
-    // The absence half. `accounts` was the deduped union of the device's
-    // sign-ins and the CALLER's account graph — and a client holds one caller's
-    // graph and cannot enumerate another principal's, so on a device holding two
-    // people it answered with one person's accounts as though they were the
-    // device's.
-    expect(Object.keys(snapshot).sort()).toEqual(SNAPSHOT_KEYS);
-
-    // The positive control, in the same assertion and again here: a snapshot
-    // that stopped being built at all would satisfy "has no `accounts`" too.
-    expect(snapshot).toHaveProperty('directory');
-    expect(snapshot).toHaveProperty('activeContext');
-  });
-
-  it('switches on a context pair, and offers no account-id switch', () => {
-    const controller = createAccountDialogController({
-      oxyServices,
-      sessionClient: new SessionClient(host),
-      clientId: 'oxy_dk_test',
-    });
-
-    // `switchTo(accountId)` could not express WHICH person's route into a shared
-    // organization was being taken, so on a device where two people both reach
-    // one org it chose for the user. `activateContext(contextId)` names the
-    // pair, and `signOutContext` / `signOutPrincipal` are the two removals an
-    // account id likewise cannot name.
-    expect('switchTo' in controller).toBe(false);
-
-    expect(typeof controller.activateContext).toBe('function');
-    expect(typeof controller.signOutContext).toBe('function');
-    expect(typeof controller.signOutPrincipal).toBe('function');
-  });
-});

package/src/session/__tests__/accountSwitchTargets.test.ts

@@ -1,137 +0,0 @@
-import { ACCOUNT_KINDS } from '@oxy.so/contracts';
-import type { User } from '../../models/interfaces';
-import type { AccountNode } from '../../mixins/OxyServices.accounts';
-import { canSwitchIntoAccount, isSwitchTargetAccount } from '../accountSwitchTargets';
-
-function graphNode(id: string, over: Partial<AccountNode> = {}): AccountNode {
-  return {
-    accountId: id,
-    kind: 'organization',
-    parentAccountId: null,
-    account: { id, publicKey: `pk_${id}`, username: `user_${id}` } as User,
-    relationship: 'owner',
-    callerMembership: null,
-    ...over,
-  };
-}
-
-describe('isSwitchTargetAccount', () => {
-  /**
-   * EXHAUSTIVE over `ACCOUNT_KINDS`, as one object equality rather than a
-   * per-kind assertion, for two reasons that a `channel → false` spot-check
-   * cannot give:
-   *
-   *  - It distinguishes "excludes channels" from "excludes everything". Three
-   *    kinds must come back `true` here, so a predicate that answered `false`
-   *    unconditionally — the shape that empties a switcher instead of filtering
-   *    it — fails on those three, not on the channel.
-   *  - Adding a sixth kind fails this test with a missing key, forcing the
-   *    decision to be made HERE rather than inherited silently from whichever
-   *    literal comparison happened to be written first.
-   */
-  it('answers by kind for an account the caller merely owns or is a member of', () => {
-    expect(
-      Object.fromEntries(
-        ACCOUNT_KINDS.map((kind) => [kind, isSwitchTargetAccount({ kind, relationship: 'owner' })]),
-      ),
-    ).toEqual({
-      personal: false,
-      organization: true,
-      project: true,
-      // `bot` USED to be `true` here, and that was the bug. This predicate asks
-      // what a PERSON may become, and a bot is something that operates on their
-      // behalf — the identity that exists to act while nobody is present. It read
-      // the delegation predicate, which admits `bot` for exactly the opposite
-      // reason, and the switcher offered a seat inside one. Somebody took it.
-      bot: false,
-      channel: false,
-    });
-  });
-
-  /**
-   * The `self` ground, and the reason this predicate is not `isOperatorSwitchTargetKind`.
-   *
-   * `personal` is act-as INELIGIBLE — assuming somebody's human login would be
-   * impersonation — so a switcher gated on that predicate alone would drop the
-   * caller's OWN account and render an empty list. `GET /accounts` resolves its
-   * caller through `resolveOperatorId`, so a `self` node is always the human
-   * operator's own personal account, even while they operate an org.
-   */
-  it('admits the caller’s own personal account, which is act-as ineligible', () => {
-    expect(isSwitchTargetAccount({ kind: 'personal', relationship: 'self' })).toBe(true);
-    // Same kind, not the caller's own → refused. The `relationship` is doing the
-    // work, so neither half of the predicate can be deleted without a failure.
-    expect(isSwitchTargetAccount({ kind: 'personal', relationship: 'member' })).toBe(false);
-  });
-
-  it('refuses an account with no kind information rather than assuming', () => {
-    expect(isSwitchTargetAccount({})).toBe(false);
-    expect(isSwitchTargetAccount({ kind: null })).toBe(false);
-    expect(isSwitchTargetAccount({ kind: undefined, relationship: 'owner' })).toBe(false);
-  });
-});
-
-describe('canSwitchIntoAccount', () => {
-  it('admits self without membership permissions', () => {
-    expect(canSwitchIntoAccount({ kind: 'personal', relationship: 'self' })).toBe(true);
-  });
-
-  it('admits an owned switch target when membership is absent (owner baseline)', () => {
-    expect(canSwitchIntoAccount({ kind: 'organization', relationship: 'owner' })).toBe(true);
-  });
-
-  it('requires account:act_as for member relationships', () => {
-    expect(
-      canSwitchIntoAccount({
-        kind: 'organization',
-        relationship: 'member',
-        callerMembership: {
-          _id: 'm1',
-          accountId: 'org1',
-          memberUserId: 'u1',
-          role: 'billing',
-          status: 'active',
-          permissions: ['account:read', 'billing:manage'],
-          inherit: true,
-          source: 'direct',
-        },
-      }),
-    ).toBe(false);
-
-    expect(
-      canSwitchIntoAccount({
-        kind: 'organization',
-        relationship: 'member',
-        callerMembership: {
-          _id: 'm2',
-          accountId: 'org1',
-          memberUserId: 'u1',
-          role: 'admin',
-          status: 'active',
-          permissions: ['account:act_as', 'account:read'],
-          inherit: true,
-          source: 'direct',
-        },
-      }),
-    ).toBe(true);
-  });
-
-  it('refuses channels even with act_as permission', () => {
-    expect(
-      canSwitchIntoAccount({
-        kind: 'channel',
-        relationship: 'owner',
-        callerMembership: {
-          _id: 'm3',
-          accountId: 'chan1',
-          memberUserId: 'u1',
-          role: 'owner',
-          status: 'active',
-          permissions: ['account:act_as'],
-          inherit: true,
-          source: 'direct',
-        },
-      }),
-    ).toBe(false);
-  });
-});