@stratum-hq/lib 0.1.0

package/dist/services/__tests__/consent-service.test.js

@@ -0,0 +1,159 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+// Mock pool-helpers before importing consent-service
+vitest_1.vi.mock("../../pool-helpers.js", () => ({
+    withClient: vitest_1.vi.fn(),
+    withTransaction: vitest_1.vi.fn(),
+}));
+const poolHelpers = __importStar(require("../../pool-helpers.js"));
+const consentService = __importStar(require("../consent-service.js"));
+function makeMockPool() {
+    return {};
+}
+const mockConsentRecord = {
+    id: "550e8400-e29b-41d4-a716-446655440000",
+    tenant_id: "tenant-456",
+    subject_id: "user-789",
+    purpose: "data_processing",
+    granted: true,
+    granted_at: "2024-01-01T00:00:00.000Z",
+    revoked_at: null,
+    expires_at: null,
+    metadata: {},
+    created_at: "2024-01-01T00:00:00.000Z",
+    updated_at: "2024-01-01T00:00:00.000Z",
+};
+(0, vitest_1.beforeEach)(() => {
+    vitest_1.vi.clearAllMocks();
+});
+(0, vitest_1.describe)("grantConsent", () => {
+    (0, vitest_1.it)("inserts a consent record and returns it", async () => {
+        const pool = makeMockPool();
+        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [mockConsentRecord] });
+        vitest_1.vi.mocked(poolHelpers.withTransaction).mockImplementation(async (_pool, fn) => {
+            const client = {
+                query: mockQuery,
+            };
+            return fn(client);
+        });
+        const input = {
+            subject_id: "user-789",
+            purpose: "data_processing",
+        };
+        const result = await consentService.grantConsent(pool, "tenant-456", input);
+        (0, vitest_1.expect)(result).toEqual(mockConsentRecord);
+        (0, vitest_1.expect)(mockQuery).toHaveBeenCalledTimes(1);
+        const [sql, params] = mockQuery.mock.calls[0];
+        (0, vitest_1.expect)(sql).toContain("INSERT INTO consent_records");
+        (0, vitest_1.expect)(sql).toContain("ON CONFLICT");
+        (0, vitest_1.expect)(params[0]).toBe("tenant-456"); // tenant_id
+        (0, vitest_1.expect)(params[1]).toBe("user-789"); // subject_id
+        (0, vitest_1.expect)(params[2]).toBe("data_processing"); // purpose
+    });
+    (0, vitest_1.it)("passes expires_at and metadata when provided", async () => {
+        const pool = makeMockPool();
+        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [mockConsentRecord] });
+        vitest_1.vi.mocked(poolHelpers.withTransaction).mockImplementation(async (_pool, fn) => {
+            const client = {
+                query: mockQuery,
+            };
+            return fn(client);
+        });
+        const input = {
+            subject_id: "user-789",
+            purpose: "analytics",
+            expires_at: "2025-12-31T23:59:59.000Z",
+            metadata: { source: "web" },
+        };
+        await consentService.grantConsent(pool, "tenant-456", input);
+        const params = mockQuery.mock.calls[0][1];
+        (0, vitest_1.expect)(params[3]).toBe("2025-12-31T23:59:59.000Z"); // expires_at
+        (0, vitest_1.expect)(params[4]).toBe(JSON.stringify({ source: "web" })); // metadata
+    });
+});
+(0, vitest_1.describe)("revokeConsent", () => {
+    (0, vitest_1.it)("returns true when a record is revoked", async () => {
+        const pool = makeMockPool();
+        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rowCount: 1, rows: [{ id: "some-id" }] });
+        vitest_1.vi.mocked(poolHelpers.withClient).mockImplementation(async (_pool, fn) => {
+            const client = {
+                query: mockQuery,
+            };
+            return fn(client);
+        });
+        const result = await consentService.revokeConsent(pool, "tenant-456", "user-789", "data_processing");
+        (0, vitest_1.expect)(result).toBe(true);
+        const [sql, params] = mockQuery.mock.calls[0];
+        (0, vitest_1.expect)(sql).toContain("UPDATE consent_records");
+        (0, vitest_1.expect)(sql).toContain("granted = false");
+        (0, vitest_1.expect)(params).toEqual(["tenant-456", "user-789", "data_processing"]);
+    });
+    (0, vitest_1.it)("returns false when no record matches", async () => {
+        const pool = makeMockPool();
+        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rowCount: 0, rows: [] });
+        vitest_1.vi.mocked(poolHelpers.withClient).mockImplementation(async (_pool, fn) => {
+            const client = {
+                query: mockQuery,
+            };
+            return fn(client);
+        });
+        const result = await consentService.revokeConsent(pool, "tenant-456", "user-789", "nonexistent");
+        (0, vitest_1.expect)(result).toBe(false);
+    });
+});
+(0, vitest_1.describe)("listConsent", () => {
+    (0, vitest_1.it)("returns all consent records for a tenant", async () => {
+        const pool = makeMockPool();
+        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [mockConsentRecord] });
+        vitest_1.vi.mocked(poolHelpers.withClient).mockImplementation(async (_pool, fn) => {
+            const client = {
+                query: mockQuery,
+            };
+            return fn(client);
+        });
+        const result = await consentService.listConsent(pool, "tenant-456");
+        (0, vitest_1.expect)(result).toEqual([mockConsentRecord]);
+        const [sql, params] = mockQuery.mock.calls[0];
+        (0, vitest_1.expect)(sql).toContain("FROM consent_records");
+        (0, vitest_1.expect)(params).toEqual(["tenant-456"]);
+    });
+    (0, vitest_1.it)("filters by subject_id when provided", async () => {
+        const pool = makeMockPool();
+        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [mockConsentRecord] });
+        vitest_1.vi.mocked(poolHelpers.withClient).mockImplementation(async (_pool, fn) => {
+            const client = {
+                query: mockQuery,
+            };
+            return fn(client);
+        });
+        await consentService.listConsent(pool, "tenant-456", "user-789");
+        const [sql, params] = mockQuery.mock.calls[0];
+        (0, vitest_1.expect)(sql).toContain("subject_id = $2");
+        (0, vitest_1.expect)(params).toEqual(["tenant-456", "user-789"]);
+    });
+});
+//# sourceMappingURL=consent-service.test.js.map

package/dist/services/__tests__/consent-service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-service.test.js","sourceRoot":"","sources":["../../../src/services/__tests__/consent-service.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAA8D;AAE9D,qDAAqD;AACrD,WAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,UAAU,EAAE,WAAE,CAAC,EAAE,EAAE;IACnB,eAAe,EAAE,WAAE,CAAC,EAAE,EAAE;CACzB,CAAC,CAAC,CAAC;AAEJ,mEAAqD;AACrD,sEAAwD;AAGxD,SAAS,YAAY;IACnB,OAAO,EAAuB,CAAC;AACjC,CAAC;AAED,MAAM,iBAAiB,GAAkB;IACvC,EAAE,EAAE,sCAAsC;IAC1C,SAAS,EAAE,YAAY;IACvB,UAAU,EAAE,UAAU;IACtB,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,0BAA0B;IACtC,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,0BAA0B;IACtC,UAAU,EAAE,0BAA0B;CACvC,CAAC;AAEF,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,WAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAA,WAAE,EAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3E,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC5E,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAsB;YAC/B,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,iBAAiB;SAC3B,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAE5E,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1C,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACrC,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY;QAClD,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;QACjD,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3E,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC5E,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAsB;YAC/B,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,0BAA0B;YACtC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;SAC5B,CAAC;QAEF,MAAM,cAAc,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,aAAa;QACjE,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAA,WAAE,EAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QACxF,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACvE,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAErG,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QAChD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACvE,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QACjG,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAA,WAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3E,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACvE,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAEpE,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3E,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACvE,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,cAAc,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAEjE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/__tests__/event-service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=event-service.test.d.ts.map

package/dist/services/__tests__/event-service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-service.test.d.ts","sourceRoot":"","sources":["../../../src/services/__tests__/event-service.test.ts"],"names":[],"mappings":""}

package/dist/services/__tests__/event-service.test.js

@@ -0,0 +1,151 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const node_crypto_1 = __importDefault(require("node:crypto"));
+// Mock pool-helpers before importing event-service
+vitest_1.vi.mock("../../pool-helpers.js", () => ({
+    withClient: vitest_1.vi.fn(),
+    withTransaction: vitest_1.vi.fn(),
+}));
+// Mock webhook-service
+vitest_1.vi.mock("../webhook-service.js", () => ({
+    getWebhooksForEvent: vitest_1.vi.fn(),
+    decryptSecret: vitest_1.vi.fn().mockReturnValue("decrypted-test-secret"),
+}));
+const poolHelpers = __importStar(require("../../pool-helpers.js"));
+const webhookServiceMock = __importStar(require("../webhook-service.js"));
+const eventService = __importStar(require("../event-service.js"));
+const core_1 = require("@stratum-hq/core");
+function makeMockPool() {
+    return {};
+}
+function signPayload(secret, payload) {
+    return "sha256=" + node_crypto_1.default.createHmac("sha256", secret).update(payload).digest("hex");
+}
+(0, vitest_1.beforeEach)(() => {
+    vitest_1.vi.clearAllMocks();
+});
+(0, vitest_1.describe)("HMAC signature generation", () => {
+    (0, vitest_1.it)("produces sha256= prefixed signature", () => {
+        const sig = signPayload("mysecretkey", "payload-body");
+        (0, vitest_1.expect)(sig).toMatch(/^sha256=[0-9a-f]{64}$/);
+    });
+    (0, vitest_1.it)("same secret and payload produce same signature", () => {
+        const sig1 = signPayload("mysecretkey", "payload-body");
+        const sig2 = signPayload("mysecretkey", "payload-body");
+        (0, vitest_1.expect)(sig1).toBe(sig2);
+    });
+    (0, vitest_1.it)("different secrets produce different signatures", () => {
+        const sig1 = signPayload("secret-one-key", "payload-body");
+        const sig2 = signPayload("secret-two-key", "payload-body");
+        (0, vitest_1.expect)(sig1).not.toBe(sig2);
+    });
+    (0, vitest_1.it)("different payloads produce different signatures", () => {
+        const sig1 = signPayload("mysecretkey", "payload-one");
+        const sig2 = signPayload("mysecretkey", "payload-two");
+        (0, vitest_1.expect)(sig1).not.toBe(sig2);
+    });
+});
+(0, vitest_1.describe)("retry backoff calculation", () => {
+    // attempts^2 * 5000ms
+    const cases = [
+        [1, 5000],
+        [2, 20000],
+        [3, 45000],
+        [4, 80000],
+        [5, 125000],
+    ];
+    for (const [attempts, expectedMs] of cases) {
+        (0, vitest_1.it)(`attempt ${attempts} => ${expectedMs}ms delay`, () => {
+            const delayMs = Math.pow(attempts, 2) * 5000;
+            (0, vitest_1.expect)(delayMs).toBe(expectedMs);
+        });
+    }
+});
+(0, vitest_1.describe)("emitEvent", () => {
+    (0, vitest_1.it)("inserts event record and creates delivery records for matching webhooks", async () => {
+        const pool = makeMockPool();
+        const mockEvent = {
+            id: "event-id-1",
+            type: "tenant.created",
+            tenant_id: "tenant-id-1",
+            data: {},
+            created_at: "2024-01-01T00:00:00.000Z",
+        };
+        const mockWebhook = {
+            id: "webhook-id-1",
+            tenant_id: null,
+            url: "https://example.com/hook",
+            secret_hash: "abc123",
+            events: ["tenant.created"],
+            active: true,
+            created_at: "2024-01-01T00:00:00.000Z",
+            updated_at: "2024-01-01T00:00:00.000Z",
+        };
+        const insertEventQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [mockEvent] });
+        const insertDeliveryQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [] });
+        // First withClient call: insert event
+        // Second withClient call: insert deliveries
+        vitest_1.vi.mocked(poolHelpers.withClient)
+            .mockImplementationOnce(async (_pool, fn) => {
+            const client = { query: insertEventQuery };
+            return fn(client);
+        })
+            .mockImplementationOnce(async (_pool, fn) => {
+            const client = { query: insertDeliveryQuery };
+            return fn(client);
+        });
+        vitest_1.vi.mocked(webhookServiceMock.getWebhooksForEvent).mockResolvedValue([mockWebhook]);
+        await eventService.emitEvent(pool, core_1.TenantEvent.TENANT_CREATED, "tenant-id-1", { tenant: {} });
+        (0, vitest_1.expect)(insertEventQuery).toHaveBeenCalledOnce();
+        (0, vitest_1.expect)(webhookServiceMock.getWebhooksForEvent).toHaveBeenCalledWith(pool, core_1.TenantEvent.TENANT_CREATED, "tenant-id-1");
+        (0, vitest_1.expect)(insertDeliveryQuery).toHaveBeenCalledWith(vitest_1.expect.stringContaining("INSERT INTO webhook_deliveries"), ["webhook-id-1", "event-id-1"]);
+    });
+    (0, vitest_1.it)("does not create deliveries when no matching webhooks", async () => {
+        const pool = makeMockPool();
+        const mockEvent = {
+            id: "event-id-2",
+            type: "tenant.created",
+            tenant_id: "tenant-id-2",
+            data: {},
+            created_at: "2024-01-01T00:00:00.000Z",
+        };
+        vitest_1.vi.mocked(poolHelpers.withClient).mockImplementationOnce(async (_pool, fn) => {
+            const client = {
+                query: vitest_1.vi.fn().mockResolvedValue({ rows: [mockEvent] }),
+            };
+            return fn(client);
+        });
+        vitest_1.vi.mocked(webhookServiceMock.getWebhooksForEvent).mockResolvedValue([]);
+        await eventService.emitEvent(pool, core_1.TenantEvent.TENANT_CREATED, "tenant-id-2", {});
+        // withClient should only have been called once (event insert), not again for deliveries
+        (0, vitest_1.expect)(poolHelpers.withClient).toHaveBeenCalledOnce();
+    });
+});
+//# sourceMappingURL=event-service.test.js.map

package/dist/services/__tests__/event-service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-service.test.js","sourceRoot":"","sources":["../../../src/services/__tests__/event-service.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAA8D;AAC9D,8DAAiC;AAEjC,mDAAmD;AACnD,WAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,UAAU,EAAE,WAAE,CAAC,EAAE,EAAE;IACnB,eAAe,EAAE,WAAE,CAAC,EAAE,EAAE;CACzB,CAAC,CAAC,CAAC;AAEJ,uBAAuB;AACvB,WAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,mBAAmB,EAAE,WAAE,CAAC,EAAE,EAAE;IAC5B,aAAa,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,uBAAuB,CAAC;CAChE,CAAC,CAAC,CAAC;AAEJ,mEAAqD;AACrD,0EAA4D;AAC5D,kEAAoD;AACpD,2CAA+C;AAE/C,SAAS,YAAY;IACnB,OAAO,EAAuB,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,OAAe;IAClD,OAAO,SAAS,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,WAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAA,WAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACxD,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;QAC3D,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,sBAAsB;IACtB,MAAM,KAAK,GAAuB;QAChC,CAAC,CAAC,EAAE,IAAI,CAAC;QACT,CAAC,CAAC,EAAE,KAAK,CAAC;QACV,CAAC,CAAC,EAAE,KAAK,CAAC;QACV,CAAC,CAAC,EAAE,KAAK,CAAC;QACV,CAAC,CAAC,EAAE,MAAM,CAAC;KACZ,CAAC;IAEF,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC;QAC3C,IAAA,WAAE,EAAC,WAAW,QAAQ,OAAO,UAAU,UAAU,EAAE,GAAG,EAAE;YACtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;YAC7C,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,WAAW,EAAE,GAAG,EAAE;IACzB,IAAA,WAAE,EAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG;YAChB,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,0BAA0B;SACvC,CAAC;QACF,MAAM,WAAW,GAAG;YAClB,EAAE,EAAE,cAAc;YAClB,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,0BAA0B;YAC/B,WAAW,EAAE,QAAQ;YACrB,MAAM,EAAE,CAAC,gBAAgB,CAAC;YAC1B,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,0BAA0B;YACtC,UAAU,EAAE,0BAA0B;SACvC,CAAC;QAEF,MAAM,gBAAgB,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,mBAAmB,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpE,sCAAsC;QACtC,4CAA4C;QAC5C,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;aAC9B,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAwC,CAAC;YACjF,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC;aACD,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAwC,CAAC;YACpF,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEL,WAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,iBAAiB,CAAC,CAAC,WAAkB,CAAC,CAAC,CAAC;QAE1F,MAAM,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,kBAAW,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAE9F,IAAA,eAAM,EAAC,gBAAgB,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAChD,IAAA,eAAM,EAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CACjE,IAAI,EACJ,kBAAW,CAAC,cAAc,EAC1B,aAAa,CACd,CAAC;QACF,IAAA,eAAM,EAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAC9C,eAAM,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,EACzD,CAAC,cAAc,EAAE,YAAY,CAAC,CAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG;YAChB,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,0BAA0B;SACvC,CAAC;QAEF,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC3E,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAClB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,WAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAExE,MAAM,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,kBAAW,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QAElF,wFAAwF;QACxF,IAAA,eAAM,EAAC,WAAW,CAAC,UAAU,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/__tests__/permission-service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=permission-service.test.d.ts.map

package/dist/services/__tests__/permission-service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-service.test.d.ts","sourceRoot":"","sources":["../../../src/services/__tests__/permission-service.test.ts"],"names":[],"mappings":""}