@stratum-hq/lib 0.6.0 → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (95) hide show
  1. package/dist/index.d.ts +1 -0
  2. package/dist/index.d.ts.map +1 -1
  3. package/dist/index.js +28 -1
  4. package/dist/index.js.map +1 -1
  5. package/dist/migrations/019_rls_policies.sql +236 -0
  6. package/dist/pool-helpers.d.ts.map +1 -1
  7. package/dist/pool-helpers.js +31 -1
  8. package/dist/pool-helpers.js.map +1 -1
  9. package/dist/services/api-key-service.d.ts.map +1 -1
  10. package/dist/services/api-key-service.js +4 -1
  11. package/dist/services/api-key-service.js.map +1 -1
  12. package/dist/services/config-service.js +2 -2
  13. package/dist/services/config-service.js.map +1 -1
  14. package/dist/services/key-rotation-service.js +1 -1
  15. package/dist/services/key-rotation-service.js.map +1 -1
  16. package/dist/services/role-service.d.ts +13 -3
  17. package/dist/services/role-service.d.ts.map +1 -1
  18. package/dist/services/role-service.js +18 -5
  19. package/dist/services/role-service.js.map +1 -1
  20. package/dist/services/tenant-service.d.ts.map +1 -1
  21. package/dist/services/tenant-service.js +12 -2
  22. package/dist/services/tenant-service.js.map +1 -1
  23. package/dist/stratum.d.ts +4 -4
  24. package/dist/stratum.d.ts.map +1 -1
  25. package/dist/stratum.js +1 -1
  26. package/dist/stratum.js.map +1 -1
  27. package/package.json +8 -1
  28. package/dist/__tests__/crypto.test.d.ts +0 -2
  29. package/dist/__tests__/crypto.test.d.ts.map +0 -1
  30. package/dist/__tests__/crypto.test.js +0 -41
  31. package/dist/__tests__/crypto.test.js.map +0 -1
  32. package/dist/__tests__/migrate-schemas.test.d.ts +0 -2
  33. package/dist/__tests__/migrate-schemas.test.d.ts.map +0 -1
  34. package/dist/__tests__/migrate-schemas.test.js +0 -225
  35. package/dist/__tests__/migrate-schemas.test.js.map +0 -1
  36. package/dist/__tests__/stratum-als.test.d.ts +0 -2
  37. package/dist/__tests__/stratum-als.test.d.ts.map +0 -1
  38. package/dist/__tests__/stratum-als.test.js +0 -49
  39. package/dist/__tests__/stratum-als.test.js.map +0 -1
  40. package/dist/__tests__/webhook-signature.test.d.ts +0 -2
  41. package/dist/__tests__/webhook-signature.test.d.ts.map +0 -1
  42. package/dist/__tests__/webhook-signature.test.js +0 -103
  43. package/dist/__tests__/webhook-signature.test.js.map +0 -1
  44. package/dist/services/__tests__/abac-service.test.d.ts +0 -2
  45. package/dist/services/__tests__/abac-service.test.d.ts.map +0 -1
  46. package/dist/services/__tests__/abac-service.test.js +0 -108
  47. package/dist/services/__tests__/abac-service.test.js.map +0 -1
  48. package/dist/services/__tests__/api-key-service.test.d.ts +0 -2
  49. package/dist/services/__tests__/api-key-service.test.d.ts.map +0 -1
  50. package/dist/services/__tests__/api-key-service.test.js +0 -76
  51. package/dist/services/__tests__/api-key-service.test.js.map +0 -1
  52. package/dist/services/__tests__/audit-service.test.d.ts +0 -2
  53. package/dist/services/__tests__/audit-service.test.d.ts.map +0 -1
  54. package/dist/services/__tests__/audit-service.test.js +0 -230
  55. package/dist/services/__tests__/audit-service.test.js.map +0 -1
  56. package/dist/services/__tests__/config-service.test.d.ts +0 -2
  57. package/dist/services/__tests__/config-service.test.d.ts.map +0 -1
  58. package/dist/services/__tests__/config-service.test.js +0 -565
  59. package/dist/services/__tests__/config-service.test.js.map +0 -1
  60. package/dist/services/__tests__/consent-service.test.d.ts +0 -2
  61. package/dist/services/__tests__/consent-service.test.d.ts.map +0 -1
  62. package/dist/services/__tests__/consent-service.test.js +0 -169
  63. package/dist/services/__tests__/consent-service.test.js.map +0 -1
  64. package/dist/services/__tests__/event-service.test.d.ts +0 -2
  65. package/dist/services/__tests__/event-service.test.d.ts.map +0 -1
  66. package/dist/services/__tests__/event-service.test.js +0 -193
  67. package/dist/services/__tests__/event-service.test.js.map +0 -1
  68. package/dist/services/__tests__/key-rotation-service.test.d.ts +0 -2
  69. package/dist/services/__tests__/key-rotation-service.test.d.ts.map +0 -1
  70. package/dist/services/__tests__/key-rotation-service.test.js +0 -132
  71. package/dist/services/__tests__/key-rotation-service.test.js.map +0 -1
  72. package/dist/services/__tests__/permission-service.test.d.ts +0 -2
  73. package/dist/services/__tests__/permission-service.test.d.ts.map +0 -1
  74. package/dist/services/__tests__/permission-service.test.js +0 -480
  75. package/dist/services/__tests__/permission-service.test.js.map +0 -1
  76. package/dist/services/__tests__/retention-service.test.d.ts +0 -2
  77. package/dist/services/__tests__/retention-service.test.d.ts.map +0 -1
  78. package/dist/services/__tests__/retention-service.test.js +0 -152
  79. package/dist/services/__tests__/retention-service.test.js.map +0 -1
  80. package/dist/services/__tests__/role-service.test.d.ts +0 -2
  81. package/dist/services/__tests__/role-service.test.d.ts.map +0 -1
  82. package/dist/services/__tests__/role-service.test.js +0 -134
  83. package/dist/services/__tests__/role-service.test.js.map +0 -1
  84. package/dist/services/__tests__/tenant-service.test.d.ts +0 -2
  85. package/dist/services/__tests__/tenant-service.test.d.ts.map +0 -1
  86. package/dist/services/__tests__/tenant-service.test.js +0 -548
  87. package/dist/services/__tests__/tenant-service.test.js.map +0 -1
  88. package/dist/services/__tests__/test-helpers.d.ts +0 -9
  89. package/dist/services/__tests__/test-helpers.d.ts.map +0 -1
  90. package/dist/services/__tests__/test-helpers.js +0 -19
  91. package/dist/services/__tests__/test-helpers.js.map +0 -1
  92. package/dist/services/__tests__/webhook-service.test.d.ts +0 -2
  93. package/dist/services/__tests__/webhook-service.test.d.ts.map +0 -1
  94. package/dist/services/__tests__/webhook-service.test.js +0 -184
  95. package/dist/services/__tests__/webhook-service.test.js.map +0 -1
@@ -1,225 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const vitest_1 = require("vitest");
4
- const migrate_schemas_js_1 = require("../migrate-schemas.js");
5
- // Mock fs and path so we don't need real migration files
6
- vitest_1.vi.mock("node:fs", () => ({
7
- default: {
8
- existsSync: vitest_1.vi.fn().mockReturnValue(true),
9
- readdirSync: vitest_1.vi.fn().mockReturnValue(["001_init.sql", "002_schema.sql"]),
10
- readFileSync: vitest_1.vi.fn().mockImplementation((_path) => {
11
- if (_path.includes("001_init"))
12
- return "CREATE TABLE test1 (id INT);";
13
- return "CREATE TABLE test2 (id INT);";
14
- }),
15
- },
16
- }));
17
- function createMockClient() {
18
- const applied = new Set();
19
- return {
20
- query: vitest_1.vi.fn().mockImplementation((sql, params) => {
21
- // Track SET search_path calls
22
- if (typeof sql === "string" && sql.includes("search_path")) {
23
- return Promise.resolve({ rows: [] });
24
- }
25
- // Check if migration already applied
26
- if (typeof sql === "string" &&
27
- sql.includes("SELECT 1 FROM _migrations") &&
28
- params) {
29
- const name = params[0];
30
- if (applied.has(name)) {
31
- return Promise.resolve({ rows: [{ "?column?": 1 }] });
32
- }
33
- return Promise.resolve({ rows: [] });
34
- }
35
- // Record applied migration
36
- if (typeof sql === "string" &&
37
- sql.includes("INSERT INTO _migrations") &&
38
- params) {
39
- applied.add(params[0]);
40
- return Promise.resolve({ rows: [] });
41
- }
42
- return Promise.resolve({ rows: [] });
43
- }),
44
- release: vitest_1.vi.fn(),
45
- };
46
- }
47
- function createMockPool(schemas, opts) {
48
- const clients = [];
49
- const pool = {
50
- query: vitest_1.vi.fn().mockImplementation((sql) => {
51
- if (sql.includes("SELECT slug FROM tenants")) {
52
- return Promise.resolve({
53
- rows: schemas.map((s) => ({ slug: s })),
54
- });
55
- }
56
- return Promise.resolve({ rows: [] });
57
- }),
58
- connect: vitest_1.vi.fn().mockImplementation(() => {
59
- const client = createMockClient();
60
- if (opts?.failSchema) {
61
- const origQuery = client.query;
62
- client.query = vitest_1.vi.fn().mockImplementation((sql, params) => {
63
- // Fail on the actual migration SQL for the target schema
64
- if (typeof sql === "string" &&
65
- sql.includes("search_path") &&
66
- sql.includes(`tenant_${opts.failSchema}`)) {
67
- // Let the search_path call succeed, but fail on the next migration SQL
68
- const innerQuery = vitest_1.vi.fn().mockImplementation((innerSql, innerParams) => {
69
- if (innerSql.startsWith("CREATE TABLE test")) {
70
- return Promise.reject(new Error(`Migration failed for schema tenant_${opts.failSchema}`));
71
- }
72
- return origQuery(innerSql, innerParams);
73
- });
74
- // Replace query for subsequent calls
75
- client.query = innerQuery;
76
- return Promise.resolve({ rows: [] });
77
- }
78
- return origQuery(sql, params);
79
- });
80
- }
81
- clients.push(client);
82
- return Promise.resolve(client);
83
- }),
84
- _clients: clients,
85
- };
86
- return pool;
87
- }
88
- (0, vitest_1.beforeEach)(() => {
89
- vitest_1.vi.clearAllMocks();
90
- });
91
- (0, vitest_1.describe)("migrateAllSchemas", () => {
92
- (0, vitest_1.it)("discovers schemas from tenants table", async () => {
93
- const pool = createMockPool(["acme", "globex"]);
94
- await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool });
95
- (0, vitest_1.expect)(pool.query).toHaveBeenCalledWith(vitest_1.expect.stringContaining("SELECT slug FROM tenants"));
96
- });
97
- (0, vitest_1.it)("runs migrations per schema with correct search_path", async () => {
98
- const pool = createMockPool(["acme"]);
99
- const result = await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool });
100
- (0, vitest_1.expect)(result.succeeded).toContain("tenant_acme");
101
- (0, vitest_1.expect)(result.failed).toHaveLength(0);
102
- // Verify search_path was set for the schema
103
- const allCalls = pool._clients.flatMap((c) => c.query.mock.calls.map((call) => call[0]));
104
- const searchPathCalls = allCalls.filter((s) => typeof s === "string" && s.includes("search_path"));
105
- (0, vitest_1.expect)(searchPathCalls.some((s) => s.includes("tenant_acme"))).toBe(true);
106
- });
107
- (0, vitest_1.it)("continue-on-error: collects failures in result.failed[]", async () => {
108
- // Create a pool where one schema will fail
109
- const pool = createMockPool(["acme", "badco"]);
110
- // Override connect to fail for badco's migration
111
- let callCount = 0;
112
- const origConnect = pool.connect;
113
- pool.connect = vitest_1.vi.fn().mockImplementation(() => {
114
- callCount++;
115
- const client = createMockClient();
116
- // Make every other set of clients fail for badco
117
- const origQuery = client.query;
118
- let currentSchema = "";
119
- client.query = vitest_1.vi.fn().mockImplementation((sql, params) => {
120
- if (typeof sql === "string" && sql.includes("search_path")) {
121
- if (sql.includes("tenant_badco")) {
122
- currentSchema = "badco";
123
- }
124
- else {
125
- currentSchema = "";
126
- }
127
- }
128
- if (currentSchema === "badco" &&
129
- typeof sql === "string" &&
130
- sql.startsWith("CREATE TABLE test")) {
131
- return Promise.reject(new Error("Schema migration failed"));
132
- }
133
- return origQuery(sql, params);
134
- });
135
- pool._clients.push(client);
136
- return Promise.resolve(client);
137
- });
138
- const result = await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool });
139
- (0, vitest_1.expect)(result.succeeded).toContain("tenant_acme");
140
- (0, vitest_1.expect)(result.failed.length).toBeGreaterThan(0);
141
- (0, vitest_1.expect)(result.failed[0].schema).toBe("tenant_badco");
142
- (0, vitest_1.expect)(result.failed[0].error).toBeInstanceOf(Error);
143
- });
144
- (0, vitest_1.it)("progress callback called with correct args", async () => {
145
- const pool = createMockPool(["acme", "globex"]);
146
- const progress = vitest_1.vi.fn();
147
- await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool, onProgress: progress });
148
- (0, vitest_1.expect)(progress).toHaveBeenCalledTimes(2);
149
- // Each call should have (schema, index, total)
150
- const calls = progress.mock.calls;
151
- for (const call of calls) {
152
- (0, vitest_1.expect)(typeof call[0]).toBe("string");
153
- (0, vitest_1.expect)(typeof call[1]).toBe("number");
154
- (0, vitest_1.expect)(call[2]).toBe(2);
155
- }
156
- // Indices should be 1 and 2 (completed count)
157
- const indices = calls.map((c) => c[1]).sort();
158
- (0, vitest_1.expect)(indices).toEqual([1, 2]);
159
- });
160
- (0, vitest_1.it)("idempotent re-run: already-applied migrations skipped", async () => {
161
- // Create pool with a client that reports migrations as already applied
162
- const pool = createMockPool(["acme"]);
163
- const origConnect = pool.connect;
164
- pool.connect = vitest_1.vi.fn().mockImplementation(() => {
165
- const client = createMockClient();
166
- // Override: all migrations already applied
167
- const origQuery = client.query;
168
- client.query = vitest_1.vi.fn().mockImplementation((sql, params) => {
169
- if (typeof sql === "string" &&
170
- sql.includes("SELECT 1 FROM _migrations") &&
171
- params) {
172
- return Promise.resolve({ rows: [{ "?column?": 1 }] });
173
- }
174
- return origQuery(sql, params);
175
- });
176
- pool._clients.push(client);
177
- return Promise.resolve(client);
178
- });
179
- const result = await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool });
180
- (0, vitest_1.expect)(result.succeeded).toContain("tenant_acme");
181
- (0, vitest_1.expect)(result.failed).toHaveLength(0);
182
- // No INSERT should have been called (migrations skipped)
183
- const allCalls = pool._clients.flatMap((c) => c.query.mock.calls.map((call) => call[0]));
184
- const inserts = allCalls.filter((s) => typeof s === "string" && s.includes("INSERT INTO _migrations"));
185
- (0, vitest_1.expect)(inserts).toHaveLength(0);
186
- });
187
- (0, vitest_1.it)("empty schema list returns empty result", async () => {
188
- const pool = createMockPool([]);
189
- const result = await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool });
190
- (0, vitest_1.expect)(result.succeeded).toEqual([]);
191
- (0, vitest_1.expect)(result.failed).toEqual([]);
192
- });
193
- (0, vitest_1.it)("respects concurrency limit", async () => {
194
- const schemas = Array.from({ length: 10 }, (_, i) => `tenant${i}`);
195
- const pool = createMockPool(schemas);
196
- let maxConcurrent = 0;
197
- let currentConcurrent = 0;
198
- const origConnect = pool.connect;
199
- pool.connect = vitest_1.vi.fn().mockImplementation(async () => {
200
- currentConcurrent++;
201
- if (currentConcurrent > maxConcurrent) {
202
- maxConcurrent = currentConcurrent;
203
- }
204
- const client = createMockClient();
205
- // Add a small delay to simulate work
206
- const origQuery = client.query;
207
- client.query = vitest_1.vi.fn().mockImplementation(async (sql, params) => {
208
- if (typeof sql === "string" && sql.includes("COMMIT")) {
209
- // Small delay on commit
210
- await new Promise((r) => setTimeout(r, 5));
211
- currentConcurrent--;
212
- }
213
- return origQuery(sql, params);
214
- });
215
- pool._clients.push(client);
216
- return client;
217
- });
218
- await (0, migrate_schemas_js_1.migrateAllSchemas)({ pool, concurrency: 3 });
219
- // maxConcurrent should not exceed concurrency * migrations_per_schema
220
- // but the schema-level concurrency should be limited
221
- // Due to the semaphore, we expect at most 3 schemas in flight
222
- (0, vitest_1.expect)(maxConcurrent).toBeLessThanOrEqual(3 * 2); // 3 concurrent * 2 migration files
223
- });
224
- });
225
- //# sourceMappingURL=migrate-schemas.test.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"migrate-schemas.test.js","sourceRoot":"","sources":["../../src/__tests__/migrate-schemas.test.ts"],"names":[],"mappings":";;AAAA,mCAA8D;AAC9D,8DAA0D;AAE1D,yDAAyD;AACzD,WAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,EAAE;QACP,UAAU,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;QACzC,WAAW,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACxE,YAAY,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,KAAa,EAAE,EAAE;YACzD,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,OAAO,8BAA8B,CAAC;YACtE,OAAO,8BAA8B,CAAC;QACxC,CAAC,CAAC;KACH;CACF,CAAC,CAAC,CAAC;AAEJ,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,OAAO;QACL,KAAK,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,MAAkB,EAAE,EAAE;YACpE,8BAA8B;YAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC3D,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,qCAAqC;YACrC,IACE,OAAO,GAAG,KAAK,QAAQ;gBACvB,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC;gBACzC,MAAM,EACN,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAW,CAAC;gBACjC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACxD,CAAC;gBACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,2BAA2B;YAC3B,IACE,OAAO,GAAG,KAAK,QAAQ;gBACvB,GAAG,CAAC,QAAQ,CAAC,yBAAyB,CAAC;gBACvC,MAAM,EACN,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAW,CAAC,CAAC;gBACjC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,OAAO,EAAE,WAAE,CAAC,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAiB,EAAE,IAA8B;IACvE,MAAM,OAAO,GAA0C,EAAE,CAAC;IAE1D,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,EAAE;YAChD,IAAI,GAAG,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAC7C,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;iBACxC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,OAAO,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;YACvC,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAElC,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC;gBACrB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC/B,MAAM,CAAC,KAAK,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,MAAkB,EAAE,EAAE;oBAC5E,yDAAyD;oBACzD,IACE,OAAO,GAAG,KAAK,QAAQ;wBACvB,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;wBAC3B,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC,EACzC,CAAC;wBACD,uEAAuE;wBACvE,MAAM,UAAU,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,QAAgB,EAAE,WAAuB,EAAE,EAAE;4BAC1F,IAAI,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;gCAC7C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;4BAC5F,CAAC;4BACD,OAAO,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;wBAC1C,CAAC,CAAC,CAAC;wBACH,qCAAqC;wBACrC,MAAM,CAAC,KAAK,GAAG,UAAiB,CAAC;wBACjC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;oBACvC,CAAC;oBACD,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAChC,CAAC,CAAQ,CAAC;YACZ,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC;QACF,QAAQ,EAAE,OAAO;KAClB,CAAC;IAEF,OAAO,IAAW,CAAC;AACrB,CAAC;AAED,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,WAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAA,WAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACrC,eAAM,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,CACpD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAClD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEtC,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CACpC,CAAC,CAAsC,EAAE,EAAE,CACzC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CACvD,CAAC;QACF,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CACrC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAClE,CAAC;QACF,IAAA,eAAM,EAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,2CAA2C;QAC3C,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,iDAAiD;QACjD,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;YAC7C,SAAS,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAElC,iDAAiD;YACjD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;YAC/B,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,MAAkB,EAAE,EAAE;gBAC5E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC3D,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;wBACjC,aAAa,GAAG,OAAO,CAAC;oBAC1B,CAAC;yBAAM,CAAC;wBACN,aAAa,GAAG,EAAE,CAAC;oBACrB,CAAC;gBACH,CAAC;gBACD,IACE,aAAa,KAAK,OAAO;oBACzB,OAAO,GAAG,KAAK,QAAQ;oBACvB,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC,EACnC,CAAC;oBACD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChC,CAAC,CAAQ,CAAC;YAEV,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAQ,CAAC;QAEV,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAClD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAChD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAExD,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,+CAA+C;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAA,eAAM,EAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,8CAA8C;QAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,uEAAuE;QACvE,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;YAC7C,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,2CAA2C;YAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;YAC/B,MAAM,CAAC,KAAK,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,GAAW,EAAE,MAAkB,EAAE,EAAE;gBAC5E,IACE,OAAO,GAAG,KAAK,QAAQ;oBACvB,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC;oBACzC,MAAM,EACN,CAAC;oBACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACxD,CAAC;gBACD,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChC,CAAC,CAAQ,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAQ,CAAC;QAEV,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAClD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEtC,yDAAyD;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CACpC,CAAC,CAAsC,EAAE,EAAE,CACzC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAe,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CACvD,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAC7B,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAC9E,CAAC;QACF,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;QAEjC,IAAI,CAAC,OAAO,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACnD,iBAAiB,EAAE,CAAC;YACpB,IAAI,iBAAiB,GAAG,aAAa,EAAE,CAAC;gBACtC,aAAa,GAAG,iBAAiB,CAAC;YACpC,CAAC;YACD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,qCAAqC;YACrC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;YAC/B,MAAM,CAAC,KAAK,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAW,EAAE,MAAkB,EAAE,EAAE;gBAClF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,wBAAwB;oBACxB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC3C,iBAAiB,EAAE,CAAC;gBACtB,CAAC;gBACD,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChC,CAAC,CAAQ,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAQ,CAAC;QAEV,MAAM,IAAA,sCAAiB,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QAElD,sEAAsE;QACtE,qDAAqD;QACrD,8DAA8D;QAC9D,IAAA,eAAM,EAAC,aAAa,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,mCAAmC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -1,2 +0,0 @@
1
- export {};
2
- //# sourceMappingURL=stratum-als.test.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"stratum-als.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/stratum-als.test.ts"],"names":[],"mappings":""}
@@ -1,49 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const vitest_1 = require("vitest");
4
- const stratum_js_1 = require("../stratum.js");
5
- const mockContext = {
6
- tenant_id: "t_abc-123",
7
- ancestry_path: "/t_abc-123",
8
- depth: 0,
9
- resolved_config: { feature_x: true },
10
- resolved_permissions: {},
11
- isolation_strategy: "SHARED_RLS",
12
- };
13
- (0, vitest_1.describe)("Stratum ALS convenience methods", () => {
14
- (0, vitest_1.it)("currentTenantId() returns tenant ID inside runWithTenant", () => {
15
- const result = stratum_js_1.Stratum.runWithTenant(mockContext, () => {
16
- return stratum_js_1.Stratum.currentTenantId();
17
- });
18
- (0, vitest_1.expect)(result).toBe("t_abc-123");
19
- });
20
- (0, vitest_1.it)("currentTenantId() returns undefined outside any context", () => {
21
- (0, vitest_1.expect)(stratum_js_1.Stratum.currentTenantId()).toBeUndefined();
22
- });
23
- (0, vitest_1.it)("currentTenantContext() returns full context object", () => {
24
- const result = stratum_js_1.Stratum.runWithTenant(mockContext, () => {
25
- return stratum_js_1.Stratum.currentTenantContext();
26
- });
27
- (0, vitest_1.expect)(result).toEqual(mockContext);
28
- });
29
- (0, vitest_1.it)("currentTenantContext() returns undefined outside any context", () => {
30
- (0, vitest_1.expect)(stratum_js_1.Stratum.currentTenantContext()).toBeUndefined();
31
- });
32
- (0, vitest_1.it)("runWithTenant() executes the function and returns its value", () => {
33
- const result = stratum_js_1.Stratum.runWithTenant(mockContext, () => 42);
34
- (0, vitest_1.expect)(result).toBe(42);
35
- });
36
- (0, vitest_1.it)("nested runWithTenant() uses innermost context", () => {
37
- const inner = {
38
- ...mockContext,
39
- tenant_id: "t_inner-456",
40
- };
41
- const result = stratum_js_1.Stratum.runWithTenant(mockContext, () => {
42
- return stratum_js_1.Stratum.runWithTenant(inner, () => {
43
- return stratum_js_1.Stratum.currentTenantId();
44
- });
45
- });
46
- (0, vitest_1.expect)(result).toBe("t_inner-456");
47
- });
48
- });
49
- //# sourceMappingURL=stratum-als.test.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"stratum-als.test.js","sourceRoot":"","sources":["../../src/__tests__/stratum-als.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,8CAAwC;AAGxC,MAAM,WAAW,GAAwB;IACvC,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,YAAY;IAC3B,KAAK,EAAE,CAAC;IACR,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;IACpC,oBAAoB,EAAE,EAAE;IACxB,kBAAkB,EAAE,YAAY;CACjC,CAAC;AAEF,IAAA,iBAAQ,EAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAA,WAAE,EAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,MAAM,GAAG,oBAAO,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,EAAE;YACrD,OAAO,oBAAO,CAAC,eAAe,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,IAAA,eAAM,EAAC,oBAAO,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,MAAM,GAAG,oBAAO,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,EAAE;YACrD,OAAO,oBAAO,CAAC,oBAAoB,EAAE,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,IAAA,eAAM,EAAC,oBAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,oBAAO,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,KAAK,GAAwB;YACjC,GAAG,WAAW;YACd,SAAS,EAAE,aAAa;SACzB,CAAC;QACF,MAAM,MAAM,GAAG,oBAAO,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,EAAE;YACrD,OAAO,oBAAO,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE;gBACvC,OAAO,oBAAO,CAAC,eAAe,EAAE,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -1,2 +0,0 @@
1
- export {};
2
- //# sourceMappingURL=webhook-signature.test.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"webhook-signature.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/webhook-signature.test.ts"],"names":[],"mappings":""}
@@ -1,103 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const vitest_1 = require("vitest");
4
- const webhook_signature_js_1 = require("../webhook-signature.js");
5
- const SECRET = "whsec_test_secret";
6
- const PAYLOAD = JSON.stringify({ id: "evt_1", type: "tenant.created" });
7
- (0, vitest_1.describe)("signWebhookPayload", () => {
8
- (0, vitest_1.it)("binds the timestamp into the signature", () => {
9
- const t1 = "2026-07-24T00:00:00.000Z";
10
- const t2 = "2026-07-24T00:00:01.000Z";
11
- (0, vitest_1.expect)((0, webhook_signature_js_1.signWebhookPayload)(SECRET, t1, PAYLOAD)).not.toBe((0, webhook_signature_js_1.signWebhookPayload)(SECRET, t2, PAYLOAD));
12
- });
13
- (0, vitest_1.it)("produces a sha256= prefixed hex digest", () => {
14
- const sig = (0, webhook_signature_js_1.signWebhookPayload)(SECRET, "2026-07-24T00:00:00.000Z", PAYLOAD);
15
- (0, vitest_1.expect)(sig).toMatch(/^sha256=[0-9a-f]{64}$/);
16
- });
17
- });
18
- (0, vitest_1.describe)("verifyWebhookSignature", () => {
19
- const now = Date.parse("2026-07-24T12:00:00.000Z");
20
- const timestamp = "2026-07-24T12:00:00.000Z";
21
- const signature = (0, webhook_signature_js_1.signWebhookPayload)(SECRET, timestamp, PAYLOAD);
22
- (0, vitest_1.it)("accepts a fresh, correctly signed delivery", () => {
23
- (0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({ secret: SECRET, payload: PAYLOAD, signature, timestamp, now })).toBe(true);
24
- });
25
- (0, vitest_1.it)("rejects a tampered payload", () => {
26
- (0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
27
- secret: SECRET,
28
- payload: PAYLOAD + "x",
29
- signature,
30
- timestamp,
31
- now,
32
- })).toBe(false);
33
- });
34
- (0, vitest_1.it)("rejects a wrong secret", () => {
35
- (0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
36
- secret: "whsec_wrong",
37
- payload: PAYLOAD,
38
- signature,
39
- timestamp,
40
- now,
41
- })).toBe(false);
42
- });
43
- (0, vitest_1.it)("rejects a replayed delivery once it ages past the window", () => {
44
- const stale = now + (webhook_signature_js_1.DEFAULT_WEBHOOK_TOLERANCE_SECONDS + 1) * 1000;
45
- (0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
46
- secret: SECRET,
47
- payload: PAYLOAD,
48
- signature,
49
- timestamp,
50
- now: stale,
51
- })).toBe(false);
52
- });
53
- (0, vitest_1.it)("rejects a timestamp too far in the future", () => {
54
- const future = now - (webhook_signature_js_1.DEFAULT_WEBHOOK_TOLERANCE_SECONDS + 1) * 1000;
55
- (0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
56
- secret: SECRET,
57
- payload: PAYLOAD,
58
- signature,
59
- timestamp,
60
- now: future,
61
- })).toBe(false);
62
- });
63
- (0, vitest_1.it)("accepts a delivery at the edge of the window", () => {
64
- const edge = now + webhook_signature_js_1.DEFAULT_WEBHOOK_TOLERANCE_SECONDS * 1000;
65
- (0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
66
- secret: SECRET,
67
- payload: PAYLOAD,
68
- signature,
69
- timestamp,
70
- now: edge,
71
- })).toBe(true);
72
- });
73
- (0, vitest_1.it)("respects a custom tolerance", () => {
74
- const drift = now + 10_000; // 10s later
75
- (0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
76
- secret: SECRET,
77
- payload: PAYLOAD,
78
- signature,
79
- timestamp,
80
- toleranceSeconds: 5,
81
- now: drift,
82
- })).toBe(false);
83
- });
84
- (0, vitest_1.it)("fails closed on a malformed timestamp", () => {
85
- (0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
86
- secret: SECRET,
87
- payload: PAYLOAD,
88
- signature,
89
- timestamp: "not-a-date",
90
- now,
91
- })).toBe(false);
92
- });
93
- (0, vitest_1.it)("rejects a malformed signature without throwing", () => {
94
- (0, vitest_1.expect)((0, webhook_signature_js_1.verifyWebhookSignature)({
95
- secret: SECRET,
96
- payload: PAYLOAD,
97
- signature: "sha256=deadbeef",
98
- timestamp,
99
- now,
100
- })).toBe(false);
101
- });
102
- });
103
- //# sourceMappingURL=webhook-signature.test.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"webhook-signature.test.js","sourceRoot":"","sources":["../../src/__tests__/webhook-signature.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,kEAIiC;AAEjC,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAExE,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAA,WAAE,EAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,EAAE,GAAG,0BAA0B,CAAC;QACtC,MAAM,EAAE,GAAG,0BAA0B,CAAC;QACtC,IAAA,eAAM,EAAC,IAAA,yCAAkB,EAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CACtD,IAAA,yCAAkB,EAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CACxC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,GAAG,GAAG,IAAA,yCAAkB,EAAC,MAAM,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAC;QAC5E,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,0BAA0B,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAA,yCAAkB,EAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAEjE,IAAA,WAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CACxF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO,GAAG,GAAG;YACtB,SAAS;YACT,SAAS;YACT,GAAG;SACJ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS;YACT,GAAG;SACJ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,wDAAiC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;QACnE,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS;YACT,GAAG,EAAE,KAAK;SACX,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,wDAAiC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;QACpE,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS;YACT,GAAG,EAAE,MAAM;SACZ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,GAAG,GAAG,GAAG,wDAAiC,GAAG,IAAI,CAAC;QAC5D,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS;YACT,GAAG,EAAE,IAAI;SACV,CAAC,CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,YAAY;QACxC,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS;YACT,gBAAgB,EAAE,CAAC;YACnB,GAAG,EAAE,KAAK;SACX,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS;YACT,SAAS,EAAE,YAAY;YACvB,GAAG;SACJ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,IAAA,eAAM,EACJ,IAAA,6CAAsB,EAAC;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,iBAAiB;YAC5B,SAAS;YACT,GAAG;SACJ,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -1,2 +0,0 @@
1
- export {};
2
- //# sourceMappingURL=abac-service.test.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"abac-service.test.d.ts","sourceRoot":"","sources":["../../../src/services/__tests__/abac-service.test.ts"],"names":[],"mappings":""}
@@ -1,108 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const vitest_1 = require("vitest");
4
- const abac_service_js_1 = require("../abac-service.js");
5
- function makePolicy(overrides = {}) {
6
- return {
7
- id: "pol-1",
8
- tenant_id: "t-1",
9
- name: "test-policy",
10
- resource_type: "document",
11
- action: "read",
12
- effect: "allow",
13
- conditions: [],
14
- priority: 0,
15
- mode: "INHERITED",
16
- source_tenant_id: "t-1",
17
- created_at: new Date(),
18
- updated_at: new Date(),
19
- ...overrides,
20
- };
21
- }
22
- // ---------------------------------------------------------------------------
23
- // evaluateCondition — operator tests
24
- // ---------------------------------------------------------------------------
25
- (0, vitest_1.describe)("evaluateCondition", () => {
26
- (0, vitest_1.it)("eq: matches when values are equal", () => {
27
- const c = { attribute: "role", operator: "eq", value: "admin" };
28
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { role: "admin" })).toBe(true);
29
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { role: "viewer" })).toBe(false);
30
- });
31
- (0, vitest_1.it)("neq: matches when values differ", () => {
32
- const c = { attribute: "role", operator: "neq", value: "admin" };
33
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { role: "viewer" })).toBe(true);
34
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { role: "admin" })).toBe(false);
35
- });
36
- (0, vitest_1.it)("in: matches when value is in array", () => {
37
- const c = { attribute: "dept", operator: "in", value: ["eng", "product"] };
38
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { dept: "eng" })).toBe(true);
39
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { dept: "sales" })).toBe(false);
40
- });
41
- (0, vitest_1.it)("not_in: matches when value is not in array", () => {
42
- const c = { attribute: "dept", operator: "not_in", value: ["eng", "product"] };
43
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { dept: "sales" })).toBe(true);
44
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { dept: "eng" })).toBe(false);
45
- });
46
- (0, vitest_1.it)("contains: matches when array attribute contains value", () => {
47
- const c = { attribute: "tags", operator: "contains", value: "urgent" };
48
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { tags: ["urgent", "important"] })).toBe(true);
49
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { tags: ["normal"] })).toBe(false);
50
- });
51
- (0, vitest_1.it)("gt: numeric greater than", () => {
52
- const c = { attribute: "level", operator: "gt", value: 5 };
53
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { level: 10 })).toBe(true);
54
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { level: 5 })).toBe(false);
55
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { level: 3 })).toBe(false);
56
- });
57
- (0, vitest_1.it)("gte: numeric greater than or equal", () => {
58
- const c = { attribute: "level", operator: "gte", value: 5 };
59
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { level: 5 })).toBe(true);
60
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { level: 4 })).toBe(false);
61
- });
62
- (0, vitest_1.it)("lt: numeric less than", () => {
63
- const c = { attribute: "risk", operator: "lt", value: 3 };
64
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { risk: 1 })).toBe(true);
65
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { risk: 3 })).toBe(false);
66
- });
67
- (0, vitest_1.it)("lte: numeric less than or equal", () => {
68
- const c = { attribute: "risk", operator: "lte", value: 3 };
69
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { risk: 3 })).toBe(true);
70
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { risk: 4 })).toBe(false);
71
- });
72
- (0, vitest_1.it)("returns false when attribute is missing from context", () => {
73
- const c = { attribute: "missing", operator: "eq", value: "x" };
74
- (0, vitest_1.expect)((0, abac_service_js_1.evaluateCondition)(c, { other: "y" })).toBe(false);
75
- });
76
- (0, vitest_1.it)("throws for unknown operator", () => {
77
- const c = { attribute: "x", operator: "nope", value: "y" };
78
- (0, vitest_1.expect)(() => (0, abac_service_js_1.evaluateCondition)(c, { x: "y" })).toThrow();
79
- });
80
- });
81
- // ---------------------------------------------------------------------------
82
- // evaluatePolicy
83
- // ---------------------------------------------------------------------------
84
- (0, vitest_1.describe)("evaluatePolicy", () => {
85
- (0, vitest_1.it)("empty conditions → always matches", () => {
86
- const policy = makePolicy({ conditions: [] });
87
- (0, vitest_1.expect)((0, abac_service_js_1.evaluatePolicy)(policy, {})).toBe(true);
88
- });
89
- (0, vitest_1.it)("all conditions true → matches", () => {
90
- const policy = makePolicy({
91
- conditions: [
92
- { attribute: "role", operator: "eq", value: "admin" },
93
- { attribute: "level", operator: "gte", value: 3 },
94
- ],
95
- });
96
- (0, vitest_1.expect)((0, abac_service_js_1.evaluatePolicy)(policy, { role: "admin", level: 5 })).toBe(true);
97
- });
98
- (0, vitest_1.it)("one condition false → does not match (AND semantics)", () => {
99
- const policy = makePolicy({
100
- conditions: [
101
- { attribute: "role", operator: "eq", value: "admin" },
102
- { attribute: "level", operator: "gte", value: 10 },
103
- ],
104
- });
105
- (0, vitest_1.expect)((0, abac_service_js_1.evaluatePolicy)(policy, { role: "admin", level: 5 })).toBe(false);
106
- });
107
- });
108
- //# sourceMappingURL=abac-service.test.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"abac-service.test.js","sourceRoot":"","sources":["../../../src/services/__tests__/abac-service.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,wDAAuE;AAGvE,SAAS,UAAU,CAAC,YAAiC,EAAE;IACrD,OAAO;QACL,EAAE,EAAE,OAAO;QACX,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,aAAa;QACnB,aAAa,EAAE,UAAU;QACzB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,WAAW;QACjB,gBAAgB,EAAE,KAAK;QACvB,UAAU,EAAE,IAAI,IAAI,EAAE;QACtB,UAAU,EAAE,IAAI,IAAI,EAAE;QACtB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qCAAqC;AACrC,8EAA8E;AAC9E,IAAA,iBAAQ,EAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAA,WAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC/E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAChF,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1F,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9F,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACtF,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACzE,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC9E,IAAA,eAAM,EAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAa,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAClE,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAC9E,IAAA,iBAAQ,EAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAA,WAAE,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,IAAA,gCAAc,EAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,UAAU,EAAE;gBACV,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;gBACrD,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE;aAClD;SACF,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,IAAA,gCAAc,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC;YACxB,UAAU,EAAE;gBACV,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE;gBACrD,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;aACnD;SACF,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,IAAA,gCAAc,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -1,2 +0,0 @@
1
- export {};
2
- //# sourceMappingURL=api-key-service.test.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"api-key-service.test.d.ts","sourceRoot":"","sources":["../../../src/services/__tests__/api-key-service.test.ts"],"names":[],"mappings":""}
@@ -1,76 +0,0 @@
1
- "use strict";
2
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
- if (k2 === undefined) k2 = k;
4
- var desc = Object.getOwnPropertyDescriptor(m, k);
5
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
- desc = { enumerable: true, get: function() { return m[k]; } };
7
- }
8
- Object.defineProperty(o, k2, desc);
9
- }) : (function(o, m, k, k2) {
10
- if (k2 === undefined) k2 = k;
11
- o[k2] = m[k];
12
- }));
13
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
- Object.defineProperty(o, "default", { enumerable: true, value: v });
15
- }) : function(o, v) {
16
- o["default"] = v;
17
- });
18
- var __importStar = (this && this.__importStar) || (function () {
19
- var ownKeys = function(o) {
20
- ownKeys = Object.getOwnPropertyNames || function (o) {
21
- var ar = [];
22
- for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
- return ar;
24
- };
25
- return ownKeys(o);
26
- };
27
- return function (mod) {
28
- if (mod && mod.__esModule) return mod;
29
- var result = {};
30
- if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
- __setModuleDefault(result, mod);
32
- return result;
33
- };
34
- })();
35
- Object.defineProperty(exports, "__esModule", { value: true });
36
- const vitest_1 = require("vitest");
37
- // Mock pool-helpers before importing api-key-service
38
- vitest_1.vi.mock("../../pool-helpers.js", () => ({
39
- withClient: vitest_1.vi.fn(),
40
- withTransaction: vitest_1.vi.fn(),
41
- }));
42
- const poolHelpers = __importStar(require("../../pool-helpers.js"));
43
- const apiKeyService = __importStar(require("../api-key-service.js"));
44
- const test_helpers_js_1 = require("./test-helpers.js");
45
- /** Wire withClient to call the callback with a { query } client. */
46
- function withMockQuery(mockQuery) {
47
- vitest_1.vi.mocked(poolHelpers.withClient).mockImplementation(async (_pool, fn) => {
48
- const client = { query: mockQuery };
49
- return fn(client);
50
- });
51
- }
52
- (0, vitest_1.beforeEach)(() => {
53
- vitest_1.vi.clearAllMocks();
54
- });
55
- (0, vitest_1.describe)("getApiKey", () => {
56
- (0, vitest_1.it)("selects a key by id and returns its owning tenant", async () => {
57
- const pool = (0, test_helpers_js_1.makeMockPool)();
58
- const row = { id: "key-1", tenant_id: "tenant-1", name: null, created_at: new Date(), last_used_at: null, revoked_at: null, expires_at: null };
59
- const mockQuery = vitest_1.vi.fn().mockResolvedValueOnce({ rows: [row] });
60
- withMockQuery(mockQuery);
61
- const result = await apiKeyService.getApiKey(pool, "key-1");
62
- (0, vitest_1.expect)(result).toEqual(row);
63
- const [sql, params] = mockQuery.mock.calls[0];
64
- (0, vitest_1.expect)(sql).toContain("FROM api_keys WHERE id = $1");
65
- (0, vitest_1.expect)(sql).toContain("tenant_id");
66
- (0, vitest_1.expect)(params).toEqual(["key-1"]);
67
- });
68
- (0, vitest_1.it)("returns null when no key has that id", async () => {
69
- const pool = (0, test_helpers_js_1.makeMockPool)();
70
- const mockQuery = vitest_1.vi.fn().mockResolvedValueOnce({ rows: [] });
71
- withMockQuery(mockQuery);
72
- const result = await apiKeyService.getApiKey(pool, "ghost");
73
- (0, vitest_1.expect)(result).toBeNull();
74
- });
75
- });
76
- //# sourceMappingURL=api-key-service.test.js.map