@stardeck-customer-apps/testing 0.17.0 → 0.18.0

package/SKILL.md

@@ -350,6 +350,9 @@ externalId })` helper models a trusted platform/channel link, and
   platform turning one down. `completeClaim` flips the claimed contact to
   `verified`, or records `invalidated` when the contact is no longer on that
   profile and `refused` / `contact_owned` when someone else already proved it.
+  A contact the claimant already proved on their own login profile is not
+  "someone else": the claim completes and the one verified copy ends up on the
+  claimed profile.
   Completing a finished claim replays the recorded result. Completion attaches
   the claimant's login to the profile (moving it off any profile it was on), but
   does not move history — the platform's merge core is not modelled.

package/dist/index.d.mts

@@ -185,7 +185,9 @@ interface TestDirectory {
      * Test setup only: model the customer finishing the platform-hosted claim —
      * Clerk proof plus their confirmation. Flips the claimed contact to verified,
      * or records `invalidated` (the contact was removed from that profile) or
-     * `refused` with `contact_owned` (someone else already proved it). Replaying a
+     * `refused` with `contact_owned` (someone else already proved it — the
+     * claimant's own login profile does not count; its verified copy is dropped
+     * so the claimed profile holds the only one). Replaying a
      * finished claim returns the recorded result unchanged.
      *
      * It does NOT attach a login link or move history: the platform's merge core

package/dist/index.d.ts

@@ -185,7 +185,9 @@ interface TestDirectory {
      * Test setup only: model the customer finishing the platform-hosted claim —
      * Clerk proof plus their confirmation. Flips the claimed contact to verified,
      * or records `invalidated` (the contact was removed from that profile) or
-     * `refused` with `contact_owned` (someone else already proved it). Replaying a
+     * `refused` with `contact_owned` (someone else already proved it — the
+     * claimant's own login profile does not count; its verified copy is dropped
+     * so the claimed profile holds the only one). Replaying a
      * finished claim returns the recorded result unchanged.
      *
      * It does NOT attach a login link or move history: the platform's merge core

package/dist/index.js

@@ -1415,8 +1415,12 @@ function completeClaim(claimId, params) {
     claim.state = "invalidated";
     return claim;
   }
+  const claimantIdentityId = state.identityLinks.find(
+    (link) => link.kind === "project_auth_user" && link.externalId === params.clerkUserId
+  )?.identityId;
   const otherVerified = rows.find((link) => link.verified && link.identityId !== claim.identityId);
-  if (otherVerified) {
+  const ownProof = otherVerified !== void 0 && otherVerified.identityId === claimantIdentityId;
+  if (otherVerified && !ownProof) {
     claim.state = "refused";
     claim.refusalReason = "contact_owned";
     return claim;
@@ -1426,6 +1430,7 @@ function completeClaim(claimId, params) {
     claim.refusalReason = "owned_elsewhere";
     return claim;
   }
+  if (ownProof) state.identityLinks = state.identityLinks.filter((link) => link !== otherVerified);
   target.verified = true;
   connectLogin(claim, params.clerkUserId);
   claim.state = "completed";

package/dist/index.mjs

@@ -1366,8 +1366,12 @@ function completeClaim(claimId, params) {
     claim.state = "invalidated";
     return claim;
   }
+  const claimantIdentityId = state.identityLinks.find(
+    (link) => link.kind === "project_auth_user" && link.externalId === params.clerkUserId
+  )?.identityId;
   const otherVerified = rows.find((link) => link.verified && link.identityId !== claim.identityId);
-  if (otherVerified) {
+  const ownProof = otherVerified !== void 0 && otherVerified.identityId === claimantIdentityId;
+  if (otherVerified && !ownProof) {
     claim.state = "refused";
     claim.refusalReason = "contact_owned";
     return claim;
@@ -1377,6 +1381,7 @@ function completeClaim(claimId, params) {
     claim.refusalReason = "owned_elsewhere";
     return claim;
   }
+  if (ownProof) state.identityLinks = state.identityLinks.filter((link) => link !== otherVerified);
   target.verified = true;
   connectLogin(claim, params.clerkUserId);
   claim.state = "completed";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardeck-customer-apps/testing",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "Vitest test harness for Stardeck customer apps — in-process Postgres (PGlite) plus a control-plane simulator so the real Stardeck SDKs run unmodified in tests",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -47,9 +47,9 @@
   "scripts": {
     "build": "tsup src/index.ts src/config.ts src/setup.ts src/next/headers-shim.ts src/server-only-shim.ts --format cjs,esm --dts --no-splitting",
     "dev": "tsup src/index.ts src/config.ts src/setup.ts src/next/headers-shim.ts src/server-only-shim.ts --format cjs,esm --dts --no-splitting --watch",
-    "format": "prettier --write . && eslint . --fix",
+    "format": "prettier --write . && oxlint . --fix",
     "typecheck": "tsc --noEmit && tsc -p tsconfig.test.json",
-    "lint": "eslint src/",
+    "lint": "oxlint src/",
     "test": "vitest run",
     "test:watch": "vitest"
   },
@@ -94,7 +94,6 @@
     }
   },
   "devDependencies": {
-    "@eslint/js": "^9.0.0",
     "@neondatabase/serverless": "^1.0.0",
     "@stardeck-customer-apps/data-store-sdk": "*",
     "@stardeck-customer-apps/edge-sdk": "*",
@@ -109,7 +108,6 @@
     "next": "^16.3.0",
     "tsup": "^8.0.0",
     "typescript": "^5.0.0",
-    "typescript-eslint": "^8.0.0",
     "vitest": "^3.2.4",
     "@stardeck-customer-apps/starlens": "*",
     "zod": "^4.3.5"