@stardeck-customer-apps/testing 0.17.0 → 0.19.0

package/SKILL.md

@@ -350,6 +350,9 @@ externalId })` helper models a trusted platform/channel link, and
   platform turning one down. `completeClaim` flips the claimed contact to
   `verified`, or records `invalidated` when the contact is no longer on that
   profile and `refused` / `contact_owned` when someone else already proved it.
+  A contact the claimant already proved on their own login profile is not
+  "someone else": the claim completes and the one verified copy ends up on the
+  claimed profile.
   Completing a finished claim replays the recorded result. Completion attaches
   the claimant's login to the profile (moving it off any profile it was on), but
   does not move history — the platform's merge core is not modelled.
@@ -368,7 +371,11 @@ externalId })` helper models a trusted platform/channel link, and
   back `refused` / `owned_elsewhere`. That refusal is the one a leaked bearer
   link runs into, so test it. A profile that holds an email or phone is refused
   at `create` with a 409 (send an `invite`); one that gains a contact before
-  the link is used completes as `refused` / `protected`, and a link still
+  the link is used completes as `refused` / `protected`. The same holds for a
+  profile another one was merged into (`app.identities.merge(other, target)`):
+  `create` is a 409 and an outstanding link completes as `refused` /
+  `protected`, because a bearer link hands over one visit's profile, never
+  history staff folded into it. A link still
   outstanding when `.enableBearerLinks(false)` runs completes as `refused` /
   `expired`. People seeded with only a `dashboard_user` link (team members) are
   left out of `identities.list()` and `search()`, as on the platform.

package/dist/index.d.mts

@@ -185,7 +185,9 @@ interface TestDirectory {
      * Test setup only: model the customer finishing the platform-hosted claim —
      * Clerk proof plus their confirmation. Flips the claimed contact to verified,
      * or records `invalidated` (the contact was removed from that profile) or
-     * `refused` with `contact_owned` (someone else already proved it). Replaying a
+     * `refused` with `contact_owned` (someone else already proved it — the
+     * claimant's own login profile does not count; its verified copy is dropped
+     * so the claimed profile holds the only one). Replaying a
      * finished claim returns the recorded result unchanged.
      *
      * It does NOT attach a login link or move history: the platform's merge core

package/dist/index.d.ts

@@ -185,7 +185,9 @@ interface TestDirectory {
      * Test setup only: model the customer finishing the platform-hosted claim —
      * Clerk proof plus their confirmation. Flips the claimed contact to verified,
      * or records `invalidated` (the contact was removed from that profile) or
-     * `refused` with `contact_owned` (someone else already proved it). Replaying a
+     * `refused` with `contact_owned` (someone else already proved it — the
+     * claimant's own login profile does not count; its verified copy is dropped
+     * so the claimed profile holds the only one). Replaying a
      * finished claim returns the recorded result unchanged.
      *
      * It does NOT attach a login link or move history: the platform's merge core

package/dist/index.js

@@ -867,6 +867,9 @@ function isCurrentTeamMember(identityId) {
 function hasRecordedContact(identityId) {
   return linksFor(identityId).some((link) => link.kind === "email" || link.kind === "phone");
 }
+function hasAbsorbedIdentity(identityId) {
+  return [...state.identities.values()].some((identity) => identity.mergedIntoId === identityId);
+}
 function handleList(request) {
   const typeParam = new URL(request.url).searchParams.get("type");
   const type = typeParam === "person" || typeParam === "account" ? typeParam : void 0;
@@ -1217,6 +1220,9 @@ function createBearerClaim(body, returnTo) {
   if (hasRecordedContact(identity.id)) {
     return failure("identity has an email or phone on record; send an invite claim instead", 409);
   }
+  if (hasAbsorbedIdentity(identity.id)) {
+    return failure("another profile was merged into this identity; reception must connect it", 409);
+  }
   return mintClaim({
     flow: "bearer",
     identityId: identity.id,
@@ -1415,8 +1421,12 @@ function completeClaim(claimId, params) {
     claim.state = "invalidated";
     return claim;
   }
+  const claimantIdentityId = state.identityLinks.find(
+    (link) => link.kind === "project_auth_user" && link.externalId === params.clerkUserId
+  )?.identityId;
   const otherVerified = rows.find((link) => link.verified && link.identityId !== claim.identityId);
-  if (otherVerified) {
+  const ownProof = otherVerified !== void 0 && otherVerified.identityId === claimantIdentityId;
+  if (otherVerified && !ownProof) {
     claim.state = "refused";
     claim.refusalReason = "contact_owned";
     return claim;
@@ -1426,6 +1436,7 @@ function completeClaim(claimId, params) {
     claim.refusalReason = "owned_elsewhere";
     return claim;
   }
+  if (ownProof) state.identityLinks = state.identityLinks.filter((link) => link !== otherVerified);
   target.verified = true;
   connectLogin(claim, params.clerkUserId);
   claim.state = "completed";
@@ -1458,7 +1469,7 @@ function completeBearerClaim(claim, clerkUserId) {
     claim.state = "invalidated";
     return claim;
   }
-  const refusal = !state.identityBearerLinksEnabled ? "expired" : hasRecordedContact(claim.identityId) ? "protected" : ownedByAnotherLogin(claim.identityId, clerkUserId) ? "owned_elsewhere" : null;
+  const refusal = !state.identityBearerLinksEnabled ? "expired" : hasRecordedContact(claim.identityId) || hasAbsorbedIdentity(claim.identityId) ? "protected" : ownedByAnotherLogin(claim.identityId, clerkUserId) ? "owned_elsewhere" : null;
   if (refusal) {
     claim.state = "refused";
     claim.refusalReason = refusal;

package/dist/index.mjs

@@ -818,6 +818,9 @@ function isCurrentTeamMember(identityId) {
 function hasRecordedContact(identityId) {
   return linksFor(identityId).some((link) => link.kind === "email" || link.kind === "phone");
 }
+function hasAbsorbedIdentity(identityId) {
+  return [...state.identities.values()].some((identity) => identity.mergedIntoId === identityId);
+}
 function handleList(request) {
   const typeParam = new URL(request.url).searchParams.get("type");
   const type = typeParam === "person" || typeParam === "account" ? typeParam : void 0;
@@ -1168,6 +1171,9 @@ function createBearerClaim(body, returnTo) {
   if (hasRecordedContact(identity.id)) {
     return failure("identity has an email or phone on record; send an invite claim instead", 409);
   }
+  if (hasAbsorbedIdentity(identity.id)) {
+    return failure("another profile was merged into this identity; reception must connect it", 409);
+  }
   return mintClaim({
     flow: "bearer",
     identityId: identity.id,
@@ -1366,8 +1372,12 @@ function completeClaim(claimId, params) {
     claim.state = "invalidated";
     return claim;
   }
+  const claimantIdentityId = state.identityLinks.find(
+    (link) => link.kind === "project_auth_user" && link.externalId === params.clerkUserId
+  )?.identityId;
   const otherVerified = rows.find((link) => link.verified && link.identityId !== claim.identityId);
-  if (otherVerified) {
+  const ownProof = otherVerified !== void 0 && otherVerified.identityId === claimantIdentityId;
+  if (otherVerified && !ownProof) {
     claim.state = "refused";
     claim.refusalReason = "contact_owned";
     return claim;
@@ -1377,6 +1387,7 @@ function completeClaim(claimId, params) {
     claim.refusalReason = "owned_elsewhere";
     return claim;
   }
+  if (ownProof) state.identityLinks = state.identityLinks.filter((link) => link !== otherVerified);
   target.verified = true;
   connectLogin(claim, params.clerkUserId);
   claim.state = "completed";
@@ -1409,7 +1420,7 @@ function completeBearerClaim(claim, clerkUserId) {
     claim.state = "invalidated";
     return claim;
   }
-  const refusal = !state.identityBearerLinksEnabled ? "expired" : hasRecordedContact(claim.identityId) ? "protected" : ownedByAnotherLogin(claim.identityId, clerkUserId) ? "owned_elsewhere" : null;
+  const refusal = !state.identityBearerLinksEnabled ? "expired" : hasRecordedContact(claim.identityId) || hasAbsorbedIdentity(claim.identityId) ? "protected" : ownedByAnotherLogin(claim.identityId, clerkUserId) ? "owned_elsewhere" : null;
   if (refusal) {
     claim.state = "refused";
     claim.refusalReason = refusal;

package/dist/setup.js

@@ -769,6 +769,9 @@ function isCurrentTeamMember(identityId) {
 function hasRecordedContact(identityId) {
   return linksFor(identityId).some((link) => link.kind === "email" || link.kind === "phone");
 }
+function hasAbsorbedIdentity(identityId) {
+  return [...state.identities.values()].some((identity) => identity.mergedIntoId === identityId);
+}
 function handleList(request) {
   const typeParam = new URL(request.url).searchParams.get("type");
   const type = typeParam === "person" || typeParam === "account" ? typeParam : void 0;
@@ -1119,6 +1122,9 @@ function createBearerClaim(body, returnTo) {
   if (hasRecordedContact(identity.id)) {
     return failure("identity has an email or phone on record; send an invite claim instead", 409);
   }
+  if (hasAbsorbedIdentity(identity.id)) {
+    return failure("another profile was merged into this identity; reception must connect it", 409);
+  }
   return mintClaim({
     flow: "bearer",
     identityId: identity.id,

package/dist/setup.mjs

@@ -745,6 +745,9 @@ function isCurrentTeamMember(identityId) {
 function hasRecordedContact(identityId) {
   return linksFor(identityId).some((link) => link.kind === "email" || link.kind === "phone");
 }
+function hasAbsorbedIdentity(identityId) {
+  return [...state.identities.values()].some((identity) => identity.mergedIntoId === identityId);
+}
 function handleList(request) {
   const typeParam = new URL(request.url).searchParams.get("type");
   const type = typeParam === "person" || typeParam === "account" ? typeParam : void 0;
@@ -1095,6 +1098,9 @@ function createBearerClaim(body, returnTo) {
   if (hasRecordedContact(identity.id)) {
     return failure("identity has an email or phone on record; send an invite claim instead", 409);
   }
+  if (hasAbsorbedIdentity(identity.id)) {
+    return failure("another profile was merged into this identity; reception must connect it", 409);
+  }
   return mintClaim({
     flow: "bearer",
     identityId: identity.id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stardeck-customer-apps/testing",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": "Vitest test harness for Stardeck customer apps — in-process Postgres (PGlite) plus a control-plane simulator so the real Stardeck SDKs run unmodified in tests",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -47,9 +47,9 @@
   "scripts": {
     "build": "tsup src/index.ts src/config.ts src/setup.ts src/next/headers-shim.ts src/server-only-shim.ts --format cjs,esm --dts --no-splitting",
     "dev": "tsup src/index.ts src/config.ts src/setup.ts src/next/headers-shim.ts src/server-only-shim.ts --format cjs,esm --dts --no-splitting --watch",
-    "format": "prettier --write . && eslint . --fix",
+    "format": "prettier --write . && oxlint . --fix",
     "typecheck": "tsc --noEmit && tsc -p tsconfig.test.json",
-    "lint": "eslint src/",
+    "lint": "oxlint src/",
     "test": "vitest run",
     "test:watch": "vitest"
   },
@@ -94,7 +94,6 @@
     }
   },
   "devDependencies": {
-    "@eslint/js": "^9.0.0",
     "@neondatabase/serverless": "^1.0.0",
     "@stardeck-customer-apps/data-store-sdk": "*",
     "@stardeck-customer-apps/edge-sdk": "*",
@@ -109,7 +108,6 @@
     "next": "^16.3.0",
     "tsup": "^8.0.0",
     "typescript": "^5.0.0",
-    "typescript-eslint": "^8.0.0",
     "vitest": "^3.2.4",
     "@stardeck-customer-apps/starlens": "*",
     "zod": "^4.3.5"