@stratum-hq/lib 0.6.0 → 1.0.0

package/dist/services/__tests__/consent-service.test.js

@@ -1,169 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-// Mock pool-helpers before importing consent-service
-vitest_1.vi.mock("../../pool-helpers.js", () => ({
-    withClient: vitest_1.vi.fn(),
-    withTransaction: vitest_1.vi.fn(),
-}));
-const poolHelpers = __importStar(require("../../pool-helpers.js"));
-const consentService = __importStar(require("../consent-service.js"));
-function makeMockPool() {
-    return {};
-}
-const mockConsentRecord = {
-    id: "550e8400-e29b-41d4-a716-446655440000",
-    tenant_id: "tenant-456",
-    subject_id: "user-789",
-    purpose: "data_processing",
-    granted: true,
-    granted_at: "2024-01-01T00:00:00.000Z",
-    revoked_at: null,
-    expires_at: null,
-    metadata: {},
-    created_at: "2024-01-01T00:00:00.000Z",
-    updated_at: "2024-01-01T00:00:00.000Z",
-};
-(0, vitest_1.beforeEach)(() => {
-    vitest_1.vi.clearAllMocks();
-});
-(0, vitest_1.describe)("grantConsent", () => {
-    (0, vitest_1.it)("inserts a consent record and returns it", async () => {
-        const pool = makeMockPool();
-        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [mockConsentRecord] });
-        vitest_1.vi.mocked(poolHelpers.withTransaction).mockImplementation(async (_pool, fn) => {
-            const client = {
-                query: mockQuery,
-            };
-            return fn(client);
-        });
-        const input = {
-            subject_id: "user-789",
-            purpose: "data_processing",
-        };
-        const result = await consentService.grantConsent(pool, "tenant-456", input);
-        (0, vitest_1.expect)(result).toEqual(mockConsentRecord);
-        (0, vitest_1.expect)(mockQuery).toHaveBeenCalledTimes(1);
-        const [sql, params] = mockQuery.mock.calls[0];
-        (0, vitest_1.expect)(sql).toContain("INSERT INTO consent_records");
-        (0, vitest_1.expect)(sql).toContain("ON CONFLICT");
-        (0, vitest_1.expect)(params[0]).toBe("tenant-456"); // tenant_id
-        (0, vitest_1.expect)(params[1]).toBe("user-789"); // subject_id
-        (0, vitest_1.expect)(params[2]).toBe("data_processing"); // purpose
-    });
-    (0, vitest_1.it)("passes expires_at and metadata when provided", async () => {
-        const pool = makeMockPool();
-        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [mockConsentRecord] });
-        vitest_1.vi.mocked(poolHelpers.withTransaction).mockImplementation(async (_pool, fn) => {
-            const client = {
-                query: mockQuery,
-            };
-            return fn(client);
-        });
-        const input = {
-            subject_id: "user-789",
-            purpose: "analytics",
-            expires_at: "2025-12-31T23:59:59.000Z",
-            metadata: { source: "web" },
-        };
-        await consentService.grantConsent(pool, "tenant-456", input);
-        const params = mockQuery.mock.calls[0][1];
-        (0, vitest_1.expect)(params[3]).toBe("2025-12-31T23:59:59.000Z"); // expires_at
-        (0, vitest_1.expect)(params[4]).toBe(JSON.stringify({ source: "web" })); // metadata
-    });
-});
-(0, vitest_1.describe)("revokeConsent", () => {
-    (0, vitest_1.it)("returns true when a record is revoked", async () => {
-        const pool = makeMockPool();
-        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rowCount: 1, rows: [{ id: "some-id" }] });
-        vitest_1.vi.mocked(poolHelpers.withClient).mockImplementation(async (_pool, fn) => {
-            const client = {
-                query: mockQuery,
-            };
-            return fn(client);
-        });
-        const result = await consentService.revokeConsent(pool, "tenant-456", "user-789", "data_processing");
-        (0, vitest_1.expect)(result).toBe(true);
-        const [sql, params] = mockQuery.mock.calls[0];
-        (0, vitest_1.expect)(sql).toContain("UPDATE consent_records");
-        (0, vitest_1.expect)(sql).toContain("granted = false");
-        (0, vitest_1.expect)(params).toEqual(["tenant-456", "user-789", "data_processing"]);
-    });
-    (0, vitest_1.it)("returns false when no record matches", async () => {
-        const pool = makeMockPool();
-        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rowCount: 0, rows: [] });
-        vitest_1.vi.mocked(poolHelpers.withClient).mockImplementation(async (_pool, fn) => {
-            const client = {
-                query: mockQuery,
-            };
-            return fn(client);
-        });
-        const result = await consentService.revokeConsent(pool, "tenant-456", "user-789", "nonexistent");
-        (0, vitest_1.expect)(result).toBe(false);
-    });
-});
-(0, vitest_1.describe)("listConsent", () => {
-    (0, vitest_1.it)("returns all consent records for a tenant", async () => {
-        const pool = makeMockPool();
-        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [mockConsentRecord] });
-        vitest_1.vi.mocked(poolHelpers.withClient).mockImplementation(async (_pool, fn) => {
-            const client = {
-                query: mockQuery,
-            };
-            return fn(client);
-        });
-        const result = await consentService.listConsent(pool, "tenant-456");
-        (0, vitest_1.expect)(result).toEqual([mockConsentRecord]);
-        const [sql, params] = mockQuery.mock.calls[0];
-        (0, vitest_1.expect)(sql).toContain("FROM consent_records");
-        (0, vitest_1.expect)(params).toEqual(["tenant-456"]);
-    });
-    (0, vitest_1.it)("filters by subject_id when provided", async () => {
-        const pool = makeMockPool();
-        const mockQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [mockConsentRecord] });
-        vitest_1.vi.mocked(poolHelpers.withClient).mockImplementation(async (_pool, fn) => {
-            const client = {
-                query: mockQuery,
-            };
-            return fn(client);
-        });
-        await consentService.listConsent(pool, "tenant-456", "user-789");
-        const [sql, params] = mockQuery.mock.calls[0];
-        (0, vitest_1.expect)(sql).toContain("subject_id = $2");
-        (0, vitest_1.expect)(params).toEqual(["tenant-456", "user-789"]);
-    });
-});
-//# sourceMappingURL=consent-service.test.js.map

package/dist/services/__tests__/consent-service.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"consent-service.test.js","sourceRoot":"","sources":["../../../src/services/__tests__/consent-service.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAA8D;AAE9D,qDAAqD;AACrD,WAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,UAAU,EAAE,WAAE,CAAC,EAAE,EAAE;IACnB,eAAe,EAAE,WAAE,CAAC,EAAE,EAAE;CACzB,CAAC,CAAC,CAAC;AAEJ,mEAAqD;AACrD,sEAAwD;AAGxD,SAAS,YAAY;IACnB,OAAO,EAAuB,CAAC;AACjC,CAAC;AAED,MAAM,iBAAiB,GAAkB;IACvC,EAAE,EAAE,sCAAsC;IAC1C,SAAS,EAAE,YAAY;IACvB,UAAU,EAAE,UAAU;IACtB,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,0BAA0B;IACtC,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,0BAA0B;IACtC,UAAU,EAAE,0BAA0B;CACvC,CAAC;AAEF,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,WAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAA,WAAE,EAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3E,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC5E,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAsB;YAC/B,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,iBAAiB;SAC3B,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAE5E,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1C,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACrC,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY;QAClD,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;QACjD,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3E,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC5E,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAsB;YAC/B,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,0BAA0B;YACtC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;SAC5B,CAAC;QAEF,MAAM,cAAc,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,aAAa;QACjE,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAA,WAAE,EAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QACxF,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACvE,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAErG,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QAChD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACvE,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QACjG,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAA,WAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3E,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACvE,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAEpE,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3E,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACvE,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,SAAS;aACqB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,cAAc,CAAC,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAEjE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/__tests__/event-service.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=event-service.test.d.ts.map

package/dist/services/__tests__/event-service.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"event-service.test.d.ts","sourceRoot":"","sources":["../../../src/services/__tests__/event-service.test.ts"],"names":[],"mappings":""}

package/dist/services/__tests__/event-service.test.js

@@ -1,193 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const node_crypto_1 = __importDefault(require("node:crypto"));
-// Mock pool-helpers before importing event-service
-vitest_1.vi.mock("../../pool-helpers.js", () => ({
-    withClient: vitest_1.vi.fn(),
-    withTransaction: vitest_1.vi.fn(),
-}));
-// Mock webhook-service
-vitest_1.vi.mock("../webhook-service.js", () => ({
-    getWebhooksForEvent: vitest_1.vi.fn(),
-    decryptSecret: vitest_1.vi.fn().mockReturnValue("decrypted-test-secret"),
-}));
-const poolHelpers = __importStar(require("../../pool-helpers.js"));
-const webhookServiceMock = __importStar(require("../webhook-service.js"));
-const eventService = __importStar(require("../event-service.js"));
-const core_1 = require("@stratum-hq/core");
-function makeMockPool() {
-    return {};
-}
-function signPayload(secret, payload) {
-    return "sha256=" + node_crypto_1.default.createHmac("sha256", secret).update(payload).digest("hex");
-}
-(0, vitest_1.beforeEach)(() => {
-    vitest_1.vi.clearAllMocks();
-});
-(0, vitest_1.describe)("HMAC signature generation", () => {
-    (0, vitest_1.it)("produces sha256= prefixed signature", () => {
-        const sig = signPayload("mysecretkey", "payload-body");
-        (0, vitest_1.expect)(sig).toMatch(/^sha256=[0-9a-f]{64}$/);
-    });
-    (0, vitest_1.it)("same secret and payload produce same signature", () => {
-        const sig1 = signPayload("mysecretkey", "payload-body");
-        const sig2 = signPayload("mysecretkey", "payload-body");
-        (0, vitest_1.expect)(sig1).toBe(sig2);
-    });
-    (0, vitest_1.it)("different secrets produce different signatures", () => {
-        const sig1 = signPayload("secret-one-key", "payload-body");
-        const sig2 = signPayload("secret-two-key", "payload-body");
-        (0, vitest_1.expect)(sig1).not.toBe(sig2);
-    });
-    (0, vitest_1.it)("different payloads produce different signatures", () => {
-        const sig1 = signPayload("mysecretkey", "payload-one");
-        const sig2 = signPayload("mysecretkey", "payload-two");
-        (0, vitest_1.expect)(sig1).not.toBe(sig2);
-    });
-});
-(0, vitest_1.describe)("webhook egress filter (SSRF protection)", () => {
-    // Regression: bracketed IPv6 literals must be rejected in every notation.
-    // The URL parser exposes IPv6 hosts wrapped in brackets, so a filter that
-    // only matches the unbracketed textual form lets internal targets through.
-    const mustReject = [
-        ["bracketed IPv6 loopback", "http://[::1]/hook"],
-        ["expanded IPv6 loopback", "http://[0:0:0:0:0:0:0:1]/hook"],
-        ["IPv6 link-local", "http://[fe80::1]/hook"],
-        ["IPv6 unique-local", "http://[fd00:ec2::254]/hook"],
-        ["IPv4-mapped loopback", "http://[::ffff:127.0.0.1]/hook"],
-        ["IPv4-mapped metadata address", "http://[::ffff:169.254.169.254]/hook"],
-        ["unspecified IPv6 address", "http://[::]/hook"],
-        ["integer-coerced loopback", "http://2130706433/hook"],
-    ];
-    for (const [label, url] of mustReject) {
-        (0, vitest_1.it)(`rejects ${label}`, () => {
-            (0, vitest_1.expect)(() => eventService.validateWebhookUrl(url)).toThrow();
-        });
-    }
-    // Unbracketed forms that already worked must keep working.
-    (0, vitest_1.it)("still rejects IPv4 loopback and metadata", () => {
-        (0, vitest_1.expect)(() => eventService.validateWebhookUrl("http://127.0.0.1/hook")).toThrow();
-        (0, vitest_1.expect)(() => eventService.validateWebhookUrl("http://169.254.169.254/hook")).toThrow();
-        (0, vitest_1.expect)(() => eventService.validateWebhookUrl("http://localhost/hook")).toThrow();
-    });
-    (0, vitest_1.it)("allows a public https target", () => {
-        (0, vitest_1.expect)(() => eventService.validateWebhookUrl("https://example.com/hook")).not.toThrow();
-    });
-    (0, vitest_1.it)("fails closed on an unparseable URL", () => {
-        (0, vitest_1.expect)(() => eventService.validateWebhookUrl("http://[not-an-ip/hook")).toThrow();
-    });
-});
-(0, vitest_1.describe)("retry backoff calculation", () => {
-    // attempts^2 * 5000ms
-    const cases = [
-        [1, 5000],
-        [2, 20000],
-        [3, 45000],
-        [4, 80000],
-        [5, 125000],
-    ];
-    for (const [attempts, expectedMs] of cases) {
-        (0, vitest_1.it)(`attempt ${attempts} => ${expectedMs}ms delay`, () => {
-            const delayMs = Math.pow(attempts, 2) * 5000;
-            (0, vitest_1.expect)(delayMs).toBe(expectedMs);
-        });
-    }
-});
-(0, vitest_1.describe)("emitEvent", () => {
-    (0, vitest_1.it)("inserts event record and creates delivery records for matching webhooks", async () => {
-        const pool = makeMockPool();
-        const mockEvent = {
-            id: "event-id-1",
-            type: "tenant.created",
-            tenant_id: "tenant-id-1",
-            data: {},
-            created_at: "2024-01-01T00:00:00.000Z",
-        };
-        const mockWebhook = {
-            id: "webhook-id-1",
-            tenant_id: null,
-            url: "https://example.com/hook",
-            secret_hash: "abc123",
-            events: ["tenant.created"],
-            active: true,
-            created_at: "2024-01-01T00:00:00.000Z",
-            updated_at: "2024-01-01T00:00:00.000Z",
-        };
-        const insertEventQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [mockEvent] });
-        const insertDeliveryQuery = vitest_1.vi.fn().mockResolvedValue({ rows: [] });
-        // First withClient call: insert event
-        // Second withClient call: insert deliveries
-        vitest_1.vi.mocked(poolHelpers.withClient)
-            .mockImplementationOnce(async (_pool, fn) => {
-            const client = { query: insertEventQuery };
-            return fn(client);
-        })
-            .mockImplementationOnce(async (_pool, fn) => {
-            const client = { query: insertDeliveryQuery };
-            return fn(client);
-        });
-        vitest_1.vi.mocked(webhookServiceMock.getWebhooksForEvent).mockResolvedValue([mockWebhook]);
-        await eventService.emitEvent(pool, core_1.TenantEvent.TENANT_CREATED, "tenant-id-1", { tenant: {} });
-        (0, vitest_1.expect)(insertEventQuery).toHaveBeenCalledOnce();
-        (0, vitest_1.expect)(webhookServiceMock.getWebhooksForEvent).toHaveBeenCalledWith(pool, core_1.TenantEvent.TENANT_CREATED, "tenant-id-1");
-        (0, vitest_1.expect)(insertDeliveryQuery).toHaveBeenCalledWith(vitest_1.expect.stringContaining("INSERT INTO webhook_deliveries"), ["webhook-id-1", "event-id-1"]);
-    });
-    (0, vitest_1.it)("does not create deliveries when no matching webhooks", async () => {
-        const pool = makeMockPool();
-        const mockEvent = {
-            id: "event-id-2",
-            type: "tenant.created",
-            tenant_id: "tenant-id-2",
-            data: {},
-            created_at: "2024-01-01T00:00:00.000Z",
-        };
-        vitest_1.vi.mocked(poolHelpers.withClient).mockImplementationOnce(async (_pool, fn) => {
-            const client = {
-                query: vitest_1.vi.fn().mockResolvedValue({ rows: [mockEvent] }),
-            };
-            return fn(client);
-        });
-        vitest_1.vi.mocked(webhookServiceMock.getWebhooksForEvent).mockResolvedValue([]);
-        await eventService.emitEvent(pool, core_1.TenantEvent.TENANT_CREATED, "tenant-id-2", {});
-        // withClient should only have been called once (event insert), not again for deliveries
-        (0, vitest_1.expect)(poolHelpers.withClient).toHaveBeenCalledOnce();
-    });
-});
-//# sourceMappingURL=event-service.test.js.map

package/dist/services/__tests__/event-service.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"event-service.test.js","sourceRoot":"","sources":["../../../src/services/__tests__/event-service.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAA8D;AAC9D,8DAAiC;AAEjC,mDAAmD;AACnD,WAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,UAAU,EAAE,WAAE,CAAC,EAAE,EAAE;IACnB,eAAe,EAAE,WAAE,CAAC,EAAE,EAAE;CACzB,CAAC,CAAC,CAAC;AAEJ,uBAAuB;AACvB,WAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,mBAAmB,EAAE,WAAE,CAAC,EAAE,EAAE;IAC5B,aAAa,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,uBAAuB,CAAC;CAChE,CAAC,CAAC,CAAC;AAEJ,mEAAqD;AACrD,0EAA4D;AAC5D,kEAAoD;AACpD,2CAA+C;AAE/C,SAAS,YAAY;IACnB,OAAO,EAAuB,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,OAAe;IAClD,OAAO,SAAS,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,WAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAA,WAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACxD,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,GAAG,WAAW,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;QAC3D,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,UAAU,GAAuB;QACrC,CAAC,yBAAyB,EAAE,mBAAmB,CAAC;QAChD,CAAC,wBAAwB,EAAE,+BAA+B,CAAC;QAC3D,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;QAC5C,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;QACpD,CAAC,sBAAsB,EAAE,gCAAgC,CAAC;QAC1D,CAAC,8BAA8B,EAAE,sCAAsC,CAAC;QACxE,CAAC,0BAA0B,EAAE,kBAAkB,CAAC;QAChD,CAAC,0BAA0B,EAAE,wBAAwB,CAAC;KACvD,CAAC;IAEF,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC;QACtC,IAAA,WAAE,EAAC,WAAW,KAAK,EAAE,EAAE,GAAG,EAAE;YAC1B,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2DAA2D;IAC3D,IAAA,WAAE,EAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACjF,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACvF,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,sBAAsB;IACtB,MAAM,KAAK,GAAuB;QAChC,CAAC,CAAC,EAAE,IAAI,CAAC;QACT,CAAC,CAAC,EAAE,KAAK,CAAC;QACV,CAAC,CAAC,EAAE,KAAK,CAAC;QACV,CAAC,CAAC,EAAE,KAAK,CAAC;QACV,CAAC,CAAC,EAAE,MAAM,CAAC;KACZ,CAAC;IAEF,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC;QAC3C,IAAA,WAAE,EAAC,WAAW,QAAQ,OAAO,UAAU,UAAU,EAAE,GAAG,EAAE;YACtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;YAC7C,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,WAAW,EAAE,GAAG,EAAE;IACzB,IAAA,WAAE,EAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG;YAChB,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,0BAA0B;SACvC,CAAC;QACF,MAAM,WAAW,GAAG;YAClB,EAAE,EAAE,cAAc;YAClB,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,0BAA0B;YAC/B,WAAW,EAAE,QAAQ;YACrB,MAAM,EAAE,CAAC,gBAAgB,CAAC;YAC1B,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,0BAA0B;YACtC,UAAU,EAAE,0BAA0B;SACvC,CAAC;QAEF,MAAM,gBAAgB,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,mBAAmB,GAAG,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpE,sCAAsC;QACtC,4CAA4C;QAC5C,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC;aAC9B,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAwC,CAAC;YACjF,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC;aACD,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAwC,CAAC;YACpF,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEL,WAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,iBAAiB,CAAC,CAAC,WAAkB,CAAC,CAAC,CAAC;QAE1F,MAAM,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,kBAAW,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAE9F,IAAA,eAAM,EAAC,gBAAgB,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAChD,IAAA,eAAM,EAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CACjE,IAAI,EACJ,kBAAW,CAAC,cAAc,EAC1B,aAAa,CACd,CAAC;QACF,IAAA,eAAM,EAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAC9C,eAAM,CAAC,gBAAgB,CAAC,gCAAgC,CAAC,EACzD,CAAC,cAAc,EAAE,YAAY,CAAC,CAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG;YAChB,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,0BAA0B;SACvC,CAAC;QAEF,WAAE,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAC3E,MAAM,MAAM,GAAG;gBACb,KAAK,EAAE,WAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAClB,CAAC;YACxC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,WAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAExE,MAAM,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,kBAAW,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QAElF,wFAAwF;QACxF,IAAA,eAAM,EAAC,WAAW,CAAC,UAAU,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/__tests__/key-rotation-service.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=key-rotation-service.test.d.ts.map

package/dist/services/__tests__/key-rotation-service.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"key-rotation-service.test.d.ts","sourceRoot":"","sources":["../../../src/services/__tests__/key-rotation-service.test.ts"],"names":[],"mappings":""}

package/dist/services/__tests__/key-rotation-service.test.js

@@ -1,132 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const key_rotation_service_js_1 = require("../key-rotation-service.js");
-const crypto_js_1 = require("../../crypto.js");
-function paramFor(sql, re, params) {
-    const m = sql.match(re);
-    return m ? params[Number(m[1]) - 1] : undefined;
-}
-function makeFakePool(store) {
-    const client = {
-        query: async (sql, params = []) => {
-            const s = sql.trim();
-            if (/^(BEGIN|COMMIT|ROLLBACK|RESET|SET)\b/.test(s)) {
-                return { rows: [], rowCount: 0 };
-            }
-            const limit = Number(paramFor(s, /LIMIT \$(\d+)/, params));
-            const gtId = paramFor(s, /id > \$(\d+)/, params);
-            const ordered = /ORDER BY id/.test(s);
-            // The previous query tried to exclude already-rotated rows with a
-            // `value NOT LIKE 'rotated:%'` predicate. Emulate that literally.
-            const excludeRotatedPrefix = /NOT LIKE 'rotated:%'/.test(s);
-            const byId = (rows) => ordered
-                ? [...rows].sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0))
-                : rows;
-            if (/SELECT id, value FROM config_entries/.test(s)) {
-                let rows = store.config.filter((r) => r.sensitive === true);
-                if (excludeRotatedPrefix)
-                    rows = rows.filter((r) => !r.value.startsWith("rotated:"));
-                if (gtId !== undefined)
-                    rows = rows.filter((r) => r.id > gtId);
-                rows = byId(rows).slice(0, limit);
-                return {
-                    rows: rows.map((r) => ({ id: r.id, value: r.value })),
-                    rowCount: rows.length,
-                };
-            }
-            if (/UPDATE config_entries SET value/.test(s)) {
-                const [value, id] = params;
-                const row = store.config.find((r) => r.id === id);
-                if (row)
-                    row.value = value;
-                return { rows: [], rowCount: row ? 1 : 0 };
-            }
-            if (/SELECT id, secret_hash FROM webhooks/.test(s)) {
-                let rows = store.webhooks.filter((r) => r.secret_hash != null);
-                if (gtId !== undefined)
-                    rows = rows.filter((r) => r.id > gtId);
-                rows = byId(rows).slice(0, limit);
-                return {
-                    rows: rows.map((r) => ({ id: r.id, secret_hash: r.secret_hash })),
-                    rowCount: rows.length,
-                };
-            }
-            if (/UPDATE webhooks SET secret_hash/.test(s)) {
-                const [secret, id] = params;
-                const row = store.webhooks.find((r) => r.id === id);
-                if (row)
-                    row.secret_hash = secret;
-                return { rows: [], rowCount: row ? 1 : 0 };
-            }
-            throw new Error(`unexpected SQL in test double: ${s}`);
-        },
-        release: () => { },
-    };
-    return { connect: async () => client };
-}
-// Deterministic ascending ids, all strictly greater than the zero UUID so a
-// keyset cursor starting there sees every row.
-function seedId(i) {
-    return `00000000-0000-0000-0000-${String(i + 1).padStart(12, "0")}`;
-}
-const OLD_KEY = "old-key-material-abc";
-const NEW_KEY = "new-key-material-xyz";
-(0, vitest_1.describe)("rotateEncryptionKey batching", () => {
-    const savedEnv = { ...process.env };
-    (0, vitest_1.beforeEach)(() => {
-        delete process.env.STRATUM_ENCRYPTION_KEY_PREVIOUS;
-    });
-    (0, vitest_1.afterEach)(() => {
-        process.env = { ...savedEnv };
-    });
-    (0, vitest_1.it)("re-encrypts every sensitive config row exactly once past the first batch", async () => {
-        const batchSize = 100;
-        const total = 250; // spans three batches
-        // Seed rows encrypted under the old key.
-        process.env.STRATUM_ENCRYPTION_KEY = OLD_KEY;
-        const plaintexts = [];
-        const config = [];
-        for (let i = 0; i < total; i++) {
-            const pt = `config-secret-${i}`;
-            plaintexts.push(pt);
-            config.push({
-                id: seedId(i),
-                value: JSON.stringify((0, crypto_js_1.encrypt)(pt)),
-                sensitive: true,
-            });
-        }
-        const store = { config, webhooks: [] };
-        const pool = makeFakePool(store);
-        const result = await (0, key_rotation_service_js_1.rotateEncryptionKey)(pool, OLD_KEY, NEW_KEY, batchSize);
-        (0, vitest_1.expect)(result.config_entries_rotated).toBe(total);
-        // Every row must now decrypt under the NEW key back to its original
-        // plaintext — i.e. rotated exactly once, none skipped or double-encrypted.
-        process.env.STRATUM_ENCRYPTION_KEY = NEW_KEY;
-        for (let i = 0; i < total; i++) {
-            const blob = JSON.parse(store.config[i].value);
-            (0, vitest_1.expect)((0, crypto_js_1.decrypt)(blob)).toBe(plaintexts[i]);
-        }
-    });
-    (0, vitest_1.it)("re-encrypts every webhook secret exactly once past the first batch", async () => {
-        const batchSize = 100;
-        const total = 250;
-        process.env.STRATUM_ENCRYPTION_KEY = OLD_KEY;
-        const plaintexts = [];
-        const webhooks = [];
-        for (let i = 0; i < total; i++) {
-            const pt = `webhook-secret-${i}`;
-            plaintexts.push(pt);
-            webhooks.push({ id: seedId(i), secret_hash: (0, crypto_js_1.encrypt)(pt) });
-        }
-        const store = { config: [], webhooks };
-        const pool = makeFakePool(store);
-        const result = await (0, key_rotation_service_js_1.rotateEncryptionKey)(pool, OLD_KEY, NEW_KEY, batchSize);
-        (0, vitest_1.expect)(result.webhooks_rotated).toBe(total);
-        process.env.STRATUM_ENCRYPTION_KEY = NEW_KEY;
-        for (let i = 0; i < total; i++) {
-            (0, vitest_1.expect)((0, crypto_js_1.decrypt)(store.webhooks[i].secret_hash)).toBe(plaintexts[i]);
-        }
-    });
-});
-//# sourceMappingURL=key-rotation-service.test.js.map

package/dist/services/__tests__/key-rotation-service.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"key-rotation-service.test.js","sourceRoot":"","sources":["../../../src/services/__tests__/key-rotation-service.test.ts"],"names":[],"mappings":";;AAAA,mCAAqE;AAErE,wEAAiE;AACjE,+CAAmD;AA6BnD,SAAS,QAAQ,CAAC,GAAW,EAAE,EAAU,EAAE,MAAiB;IAC1D,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAY;IAChC,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,KAAK,EAAE,GAAW,EAAE,SAAoB,EAAE,EAAE,EAAE;YACnD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACrB,IAAI,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACnC,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAuB,CAAC;YACvE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtC,kEAAkE;YAClE,kEAAkE;YAClE,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,CAA2B,IAAS,EAAO,EAAE,CACxD,OAAO;gBACL,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,CAAC,CAAC,IAAI,CAAC;YAEX,IAAI,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;gBAC5D,IAAI,oBAAoB;oBACtB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC7D,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;gBAC/D,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAClC,OAAO;oBACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;oBACrD,QAAQ,EAAE,IAAI,CAAC,MAAM;iBACtB,CAAC;YACJ,CAAC;YACD,IAAI,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,MAA0B,CAAC;gBAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClD,IAAI,GAAG;oBAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;gBAC3B,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,CAAC;YACD,IAAI,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,IAAI,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;gBAC/D,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;gBAC/D,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAClC,OAAO;oBACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;oBACjE,QAAQ,EAAE,IAAI,CAAC,MAAM;iBACtB,CAAC;YACJ,CAAC;YACD,IAAI,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAA0B,CAAC;gBAChD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACpD,IAAI,GAAG;oBAAE,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC;gBAClC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;KAClB,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,EAAwB,CAAC;AAC/D,CAAC;AAED,4EAA4E;AAC5E,+CAA+C;AAC/C,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,2BAA2B,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,OAAO,GAAG,sBAAsB,CAAC;AACvC,MAAM,OAAO,GAAG,sBAAsB,CAAC;AAEvC,IAAA,iBAAQ,EAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEpC,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,OAAO,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,IAAA,kBAAS,EAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,SAAS,GAAG,GAAG,CAAC;QACtB,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,sBAAsB;QAEzC,yCAAyC;QACzC,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,OAAO,CAAC;QAC7C,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,iBAAiB,CAAC,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;gBACb,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAA,mBAAO,EAAC,EAAE,CAAC,CAAC;gBAClC,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAA,6CAAmB,EAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAE5E,IAAA,eAAM,EAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAElD,oEAAoE;QACpE,2EAA2E;QAC3E,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,OAAO,CAAC;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAW,CAAC;YACzD,IAAA,eAAM,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,SAAS,GAAG,GAAG,CAAC;QACtB,MAAM,KAAK,GAAG,GAAG,CAAC;QAElB,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,OAAO,CAAC;QAC7C,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,kBAAkB,CAAC,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAA,mBAAO,EAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,KAAK,GAAU,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAA,6CAAmB,EAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAE5E,IAAA,eAAM,EAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE5C,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,OAAO,CAAC;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,IAAA,eAAM,EAAC,IAAA,mBAAO,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAqB,CAAC,CAAC,CAAC,IAAI,CAC3D,UAAU,CAAC,CAAC,CAAC,CACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/__tests__/permission-service.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=permission-service.test.d.ts.map

package/dist/services/__tests__/permission-service.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission-service.test.d.ts","sourceRoot":"","sources":["../../../src/services/__tests__/permission-service.test.ts"],"names":[],"mappings":""}