@tellescope/sdk 1.247.0 → 1.249.0

package/lib/esm/tests/api_tests/managed_content_file_access.test.js

@@ -0,0 +1,358 @@
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+require('source-map-support').install();
+import * as buffer from 'buffer';
+import { Session, EnduserSession } from "../../sdk";
+import { async_test, log_header, } from "@tellescope/testing";
+import { setup_tests } from "../setup";
+var host = process.env.API_URL || 'http://localhost:8080';
+var businessId = '60398b1131a295e64f084ff6';
+/**
+ * Tests for file_download_URL enduser access via managed content fallback.
+ *
+ * Verifies the backend fallback logic that allows endusers to access files
+ * attached to managed content records they have access to, even when the
+ * file itself does not have enduserId set or publicRead: true.
+ */
+export var managed_content_file_access_tests = function (_a) {
+    var sdk = _a.sdk, sdkNonAdmin = _a.sdkNonAdmin;
+    return __awaiter(void 0, void 0, void 0, function () {
+        var contentRecordIds, assignmentIds, fileIds, testEnduserId, otherEnduserId, enduserSDK, otherEnduserSDK, uploadFile, testEnduser, otherEnduser, fileForAll_1, contentAll, fileForIndividual_1, contentIndividual, fileNoContent_1, fileWithEnduser_1, filePublic_1, _i, assignmentIds_1, assignmentId, _b, contentRecordIds_1, recordId, _c, fileIds_1, fileId, error_1;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
+                case 0:
+                    log_header("Managed Content File Access Tests");
+                    contentRecordIds = [];
+                    assignmentIds = [];
+                    fileIds = [];
+                    uploadFile = function (name, opts) {
+                        if (opts === void 0) { opts = {}; }
+                        return __awaiter(void 0, void 0, void 0, function () {
+                            var buff, _a, presignedUpload, file;
+                            return __generator(this, function (_b) {
+                                switch (_b.label) {
+                                    case 0:
+                                        buff = buffer.Buffer.from("test file content for ".concat(name));
+                                        return [4 /*yield*/, sdk.api.files.prepare_file_upload(__assign({ name: name, type: 'text/plain', size: buff.byteLength }, opts))];
+                                    case 1:
+                                        _a = _b.sent(), presignedUpload = _a.presignedUpload, file = _a.file;
+                                        return [4 /*yield*/, sdk.UPLOAD(presignedUpload, buff)];
+                                    case 2:
+                                        _b.sent();
+                                        return [4 /*yield*/, sdk.api.files.confirm_file_upload({ id: file.id })];
+                                    case 3:
+                                        _b.sent();
+                                        fileIds.push(file.id);
+                                        return [2 /*return*/, file];
+                                }
+                            });
+                        });
+                    };
+                    _d.label = 1;
+                case 1:
+                    _d.trys.push([1, , 21, 41]);
+                    console.log("Setting up test data...");
+                    return [4 /*yield*/, sdk.api.endusers.createOne({
+                            email: "mcr_file_access_test_".concat(Date.now(), "@test.tellescope.com"),
+                        })];
+                case 2:
+                    testEnduser = _d.sent();
+                    testEnduserId = testEnduser.id;
+                    return [4 /*yield*/, sdk.api.endusers.set_password({ id: testEnduser.id, password: 'TestPassword123!' })];
+                case 3:
+                    _d.sent();
+                    return [4 /*yield*/, sdk.api.endusers.createOne({
+                            email: "mcr_file_access_other_".concat(Date.now(), "@test.tellescope.com"),
+                        })];
+                case 4:
+                    otherEnduser = _d.sent();
+                    otherEnduserId = otherEnduser.id;
+                    return [4 /*yield*/, sdk.api.endusers.set_password({ id: otherEnduser.id, password: 'TestPassword123!' })];
+                case 5:
+                    _d.sent();
+                    enduserSDK = new EnduserSession({ host: host, businessId: businessId });
+                    return [4 /*yield*/, enduserSDK.authenticate(testEnduser.email, 'TestPassword123!')];
+                case 6:
+                    _d.sent();
+                    otherEnduserSDK = new EnduserSession({ host: host, businessId: businessId });
+                    return [4 /*yield*/, otherEnduserSDK.authenticate(otherEnduser.email, 'TestPassword123!')
+                        // ===== Test 1: File attached to assignmentType: 'All' content - enduser CAN access =====
+                    ];
+                case 7:
+                    _d.sent();
+                    return [4 /*yield*/, uploadFile('mcr-file-all.txt')];
+                case 8:
+                    fileForAll_1 = _d.sent();
+                    return [4 /*yield*/, sdk.api.managed_content_records.createOne({
+                            title: 'MCR File Access - All',
+                            htmlContent: '<p>All</p>',
+                            textContent: 'All',
+                            assignmentType: 'All',
+                            attachments: [{ secureName: fileForAll_1.secureName, type: 'file', name: fileForAll_1.name }],
+                        })];
+                case 9:
+                    contentAll = _d.sent();
+                    contentRecordIds.push(contentAll.id);
+                    return [4 /*yield*/, async_test('staff-uploaded file in assignmentType:All content - enduser CAN access', function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var result;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0: return [4 /*yield*/, enduserSDK.api.files.file_download_URL({ secureName: fileForAll_1.secureName })];
+                                    case 1:
+                                        result = _a.sent();
+                                        return [2 /*return*/, !!(result === null || result === void 0 ? void 0 : result.downloadURL)];
+                                }
+                            });
+                        }); }, { onResult: function (r) { return r === true; } })
+                        // ===== Test 2: File attached to Individual content for enduser A - enduser B CANNOT access =====
+                    ];
+                case 10:
+                    _d.sent();
+                    return [4 /*yield*/, uploadFile('mcr-file-individual.txt')];
+                case 11:
+                    fileForIndividual_1 = _d.sent();
+                    return [4 /*yield*/, sdk.api.managed_content_records.createOne({
+                            title: 'MCR File Access - Individual',
+                            htmlContent: '<p>Individual</p>',
+                            textContent: 'Individual',
+                            enduserId: testEnduser.id,
+                            attachments: [{ secureName: fileForIndividual_1.secureName, type: 'file', name: fileForIndividual_1.name }],
+                        })];
+                case 12:
+                    contentIndividual = _d.sent();
+                    contentRecordIds.push(contentIndividual.id);
+                    return [4 /*yield*/, async_test('file attached to Individual content - assigned enduser CAN access', function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var result;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0: return [4 /*yield*/, enduserSDK.api.files.file_download_URL({ secureName: fileForIndividual_1.secureName })];
+                                    case 1:
+                                        result = _a.sent();
+                                        return [2 /*return*/, !!(result === null || result === void 0 ? void 0 : result.downloadURL)];
+                                }
+                            });
+                        }); }, { onResult: function (r) { return r === true; } })];
+                case 13:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('file attached to Individual content - unassigned enduser CANNOT access', function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var err_1;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        _a.trys.push([0, 2, , 3]);
+                                        return [4 /*yield*/, otherEnduserSDK.api.files.file_download_URL({ secureName: fileForIndividual_1.secureName })];
+                                    case 1:
+                                        _a.sent();
+                                        return [2 /*return*/, false];
+                                    case 2:
+                                        err_1 = _a.sent();
+                                        return [2 /*return*/, true];
+                                    case 3: return [2 /*return*/];
+                                }
+                            });
+                        }); }, { onResult: function (r) { return r === true; } })
+                        // ===== Test 3: File not attached to any managed content - enduser CANNOT access =====
+                    ];
+                case 14:
+                    _d.sent();
+                    return [4 /*yield*/, uploadFile('mcr-file-no-content.txt')];
+                case 15:
+                    fileNoContent_1 = _d.sent();
+                    return [4 /*yield*/, async_test('file not attached to any managed content - enduser CANNOT access', function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var err_2;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        _a.trys.push([0, 2, , 3]);
+                                        return [4 /*yield*/, enduserSDK.api.files.file_download_URL({ secureName: fileNoContent_1.secureName })];
+                                    case 1:
+                                        _a.sent();
+                                        return [2 /*return*/, false];
+                                    case 2:
+                                        err_2 = _a.sent();
+                                        return [2 /*return*/, true];
+                                    case 3: return [2 /*return*/];
+                                }
+                            });
+                        }); }, { onResult: function (r) { return r === true; } })
+                        // ===== Test 4: File with enduserId set - existing behavior preserved =====
+                    ];
+                case 16:
+                    _d.sent();
+                    return [4 /*yield*/, uploadFile('mcr-file-with-enduser.txt', { enduserId: testEnduser.id })];
+                case 17:
+                    fileWithEnduser_1 = _d.sent();
+                    return [4 /*yield*/, async_test('file with enduserId set - enduser CAN access (no fallback needed)', function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var result;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0: return [4 /*yield*/, enduserSDK.api.files.file_download_URL({ secureName: fileWithEnduser_1.secureName })];
+                                    case 1:
+                                        result = _a.sent();
+                                        return [2 /*return*/, !!(result === null || result === void 0 ? void 0 : result.downloadURL)];
+                                }
+                            });
+                        }); }, { onResult: function (r) { return r === true; } })
+                        // ===== Test 5: File with publicRead: true - existing behavior preserved =====
+                    ];
+                case 18:
+                    _d.sent();
+                    return [4 /*yield*/, uploadFile('mcr-file-public.txt', { publicRead: true })];
+                case 19:
+                    filePublic_1 = _d.sent();
+                    return [4 /*yield*/, async_test('file with publicRead - enduser CAN access', function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var result;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0: return [4 /*yield*/, enduserSDK.api.files.file_download_URL({ secureName: filePublic_1.secureName })];
+                                    case 1:
+                                        result = _a.sent();
+                                        return [2 /*return*/, !!(result === null || result === void 0 ? void 0 : result.downloadURL)];
+                                }
+                            });
+                        }); }, { onResult: function (r) { return r === true; } })];
+                case 20:
+                    _d.sent();
+                    console.log("All Managed Content File Access tests passed!");
+                    return [3 /*break*/, 41];
+                case 21:
+                    console.log("Cleaning up test data...");
+                    _d.label = 22;
+                case 22:
+                    _d.trys.push([22, 39, , 40]);
+                    _i = 0, assignmentIds_1 = assignmentIds;
+                    _d.label = 23;
+                case 23:
+                    if (!(_i < assignmentIds_1.length)) return [3 /*break*/, 26];
+                    assignmentId = assignmentIds_1[_i];
+                    return [4 /*yield*/, sdk.api.managed_content_record_assignments.deleteOne(assignmentId).catch(function () { })];
+                case 24:
+                    _d.sent();
+                    _d.label = 25;
+                case 25:
+                    _i++;
+                    return [3 /*break*/, 23];
+                case 26:
+                    _b = 0, contentRecordIds_1 = contentRecordIds;
+                    _d.label = 27;
+                case 27:
+                    if (!(_b < contentRecordIds_1.length)) return [3 /*break*/, 30];
+                    recordId = contentRecordIds_1[_b];
+                    return [4 /*yield*/, sdk.api.managed_content_records.deleteOne(recordId).catch(function () { })];
+                case 28:
+                    _d.sent();
+                    _d.label = 29;
+                case 29:
+                    _b++;
+                    return [3 /*break*/, 27];
+                case 30:
+                    _c = 0, fileIds_1 = fileIds;
+                    _d.label = 31;
+                case 31:
+                    if (!(_c < fileIds_1.length)) return [3 /*break*/, 34];
+                    fileId = fileIds_1[_c];
+                    return [4 /*yield*/, sdk.api.files.deleteOne(fileId).catch(function () { })];
+                case 32:
+                    _d.sent();
+                    _d.label = 33;
+                case 33:
+                    _c++;
+                    return [3 /*break*/, 31];
+                case 34:
+                    if (!testEnduserId) return [3 /*break*/, 36];
+                    return [4 /*yield*/, sdk.api.endusers.deleteOne(testEnduserId).catch(function () { })];
+                case 35:
+                    _d.sent();
+                    _d.label = 36;
+                case 36:
+                    if (!otherEnduserId) return [3 /*break*/, 38];
+                    return [4 /*yield*/, sdk.api.endusers.deleteOne(otherEnduserId).catch(function () { })];
+                case 37:
+                    _d.sent();
+                    _d.label = 38;
+                case 38:
+                    console.log("Cleanup completed");
+                    return [3 /*break*/, 40];
+                case 39:
+                    error_1 = _d.sent();
+                    console.error('Cleanup error:', error_1);
+                    return [3 /*break*/, 40];
+                case 40: return [7 /*endfinally*/];
+                case 41: return [2 /*return*/];
+            }
+        });
+    });
+};
+if (require.main === module) {
+    console.log("Using API URL: ".concat(host));
+    var sdk_1 = new Session({ host: host });
+    var sdkNonAdmin_1 = new Session({ host: host });
+    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup_tests(sdk_1, sdkNonAdmin_1)];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, managed_content_file_access_tests({ sdk: sdk_1, sdkNonAdmin: sdkNonAdmin_1 })];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); };
+    runTests()
+        .then(function () {
+        console.log("Managed content file access test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("Managed content file access test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=managed_content_file_access.test.js.map

package/lib/esm/tests/api_tests/managed_content_file_access.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed_content_file_access.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/managed_content_file_access.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EACL,UAAU,EACV,UAAU,GACX,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AACpE,IAAM,UAAU,GAAG,0BAA0B,CAAA;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,IAAM,iCAAiC,GAAG,UAAO,EAA4D;QAA1D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;oBACxE,UAAU,CAAC,mCAAmC,CAAC,CAAA;oBAEzC,gBAAgB,GAAa,EAAE,CAAA;oBAC/B,aAAa,GAAa,EAAE,CAAA;oBAC5B,OAAO,GAAa,EAAE,CAAA;oBAMtB,UAAU,GAAG,UACjB,IAAY,EACZ,IAAuD;wBAAvD,qBAAA,EAAA,SAAuD;;;;;;wCAEjD,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAyB,IAAI,CAAE,CAAC,CAAA;wCAC9B,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,YACvE,IAAI,MAAA,EACJ,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,IAAI,CAAC,UAAU,IAClB,IAAI,EACP,EAAA;;wCALI,KAA4B,SAKhC,EALM,eAAe,qBAAA,EAAE,IAAI,UAAA;wCAM7B,qBAAM,GAAG,CAAC,MAAM,CAAC,eAAsB,EAAE,IAAI,CAAC,EAAA;;wCAA9C,SAA8C,CAAA;wCAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAA;;wCAAxD,SAAwD,CAAA;wCACxD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;wCACrB,sBAAO,IAAI,EAAA;;;;qBACZ,CAAA;;;;oBAGC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;oBAElB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BACnD,KAAK,EAAE,+BAAwB,IAAI,CAAC,GAAG,EAAE,yBAAsB;yBAChE,CAAC,EAAA;;oBAFI,WAAW,GAAG,SAElB;oBACF,aAAa,GAAG,WAAW,CAAC,EAAE,CAAA;oBAC9B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,EAAA;;oBAAzF,SAAyF,CAAA;oBAEpE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BACpD,KAAK,EAAE,gCAAyB,IAAI,CAAC,GAAG,EAAE,yBAAsB;yBACjE,CAAC,EAAA;;oBAFI,YAAY,GAAG,SAEnB;oBACF,cAAc,GAAG,YAAY,CAAC,EAAE,CAAA;oBAChC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,EAAA;;oBAA1F,SAA0F,CAAA;oBAE1F,UAAU,GAAG,IAAI,cAAc,CAAC,EAAE,IAAI,MAAA,EAAE,UAAU,YAAA,EAAE,CAAC,CAAA;oBACrD,qBAAM,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,KAAM,EAAE,kBAAkB,CAAC,EAAA;;oBAArE,SAAqE,CAAA;oBAErE,eAAe,GAAG,IAAI,cAAc,CAAC,EAAE,IAAI,MAAA,EAAE,UAAU,YAAA,EAAE,CAAC,CAAA;oBAC1D,qBAAM,eAAe,CAAC,YAAY,CAAC,YAAY,CAAC,KAAM,EAAE,kBAAkB,CAAC;wBAE3E,0FAA0F;sBAFf;;oBAA3E,SAA2E,CAAA;oBAGxD,qBAAM,UAAU,CAAC,kBAAkB,CAAC,EAAA;;oBAAjD,eAAa,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BACjE,KAAK,EAAE,uBAAuB;4BAC9B,WAAW,EAAE,YAAY;4BACzB,WAAW,EAAE,KAAK;4BAClB,cAAc,EAAE,KAAK;4BACrB,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,YAAU,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAU,CAAC,IAAI,EAAE,CAAC;yBAC1F,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;oBAEpC,qBAAM,UAAU,CACd,wEAAwE,EACxE;;;;4CACiB,qBAAM,UAAW,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,YAAU,CAAC,UAAU,EAAE,CAAC,EAAA;;wCAA7F,MAAM,GAAG,SAAoF;wCACnG,sBAAO,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,WAAW,CAAA,EAAA;;;6BAC7B,EACD,EAAE,QAAQ,EAAE,UAAC,CAAC,IAAK,OAAA,CAAC,KAAK,IAAI,EAAV,CAAU,EAAE,CAChC;wBAED,kGAAkG;sBAFjG;;oBAPD,SAOC,CAAA;oBAGyB,qBAAM,UAAU,CAAC,yBAAyB,CAAC,EAAA;;oBAA/D,sBAAoB,SAA2C;oBAC3C,qBAAM,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC;4BACxE,KAAK,EAAE,8BAA8B;4BACrC,WAAW,EAAE,mBAAmB;4BAChC,WAAW,EAAE,YAAY;4BACzB,SAAS,EAAE,WAAW,CAAC,EAAE;4BACzB,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,mBAAiB,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAiB,CAAC,IAAI,EAAE,CAAC;yBACxG,CAAC,EAAA;;oBANI,iBAAiB,GAAG,SAMxB;oBACF,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;oBAE3C,qBAAM,UAAU,CACd,mEAAmE,EACnE;;;;4CACiB,qBAAM,UAAW,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,mBAAiB,CAAC,UAAU,EAAE,CAAC,EAAA;;wCAApG,MAAM,GAAG,SAA2F;wCAC1G,sBAAO,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,WAAW,CAAA,EAAA;;;6BAC7B,EACD,EAAE,QAAQ,EAAE,UAAC,CAAC,IAAK,OAAA,CAAC,KAAK,IAAI,EAAV,CAAU,EAAE,CAChC,EAAA;;oBAPD,SAOC,CAAA;oBAED,qBAAM,UAAU,CACd,wEAAwE,EACxE;;;;;;wCAEI,qBAAM,eAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,mBAAiB,CAAC,UAAU,EAAE,CAAC,EAAA;;wCAAhG,SAAgG,CAAA;wCAChG,sBAAO,KAAK,EAAA;;;wCAEZ,sBAAO,IAAI,EAAA;;;;6BAEd,EACD,EAAE,QAAQ,EAAE,UAAC,CAAC,IAAK,OAAA,CAAC,KAAK,IAAI,EAAV,CAAU,EAAE,CAChC;wBAED,uFAAuF;sBAFtF;;oBAXD,SAWC,CAAA;oBAGqB,qBAAM,UAAU,CAAC,yBAAyB,CAAC,EAAA;;oBAA3D,kBAAgB,SAA2C;oBAEjE,qBAAM,UAAU,CACd,kEAAkE,EAClE;;;;;;wCAEI,qBAAM,UAAW,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,eAAa,CAAC,UAAU,EAAE,CAAC,EAAA;;wCAAvF,SAAuF,CAAA;wCACvF,sBAAO,KAAK,EAAA;;;wCAEZ,sBAAO,IAAI,EAAA;;;;6BAEd,EACD,EAAE,QAAQ,EAAE,UAAC,CAAC,IAAK,OAAA,CAAC,KAAK,IAAI,EAAV,CAAU,EAAE,CAChC;wBAED,4EAA4E;sBAF3E;;oBAXD,SAWC,CAAA;oBAGuB,qBAAM,UAAU,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAA9F,oBAAkB,SAA4E;oBAEpG,qBAAM,UAAU,CACd,mEAAmE,EACnE;;;;4CACiB,qBAAM,UAAW,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,iBAAe,CAAC,UAAU,EAAE,CAAC,EAAA;;wCAAlG,MAAM,GAAG,SAAyF;wCACxG,sBAAO,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,WAAW,CAAA,EAAA;;;6BAC7B,EACD,EAAE,QAAQ,EAAE,UAAC,CAAC,IAAK,OAAA,CAAC,KAAK,IAAI,EAAV,CAAU,EAAE,CAChC;wBAED,+EAA+E;sBAF9E;;oBAPD,SAOC,CAAA;oBAGkB,qBAAM,UAAU,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAA;;oBAA1E,eAAa,SAA6D;oBAEhF,qBAAM,UAAU,CACd,2CAA2C,EAC3C;;;;4CACiB,qBAAM,UAAW,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,YAAU,CAAC,UAAU,EAAE,CAAC,EAAA;;wCAA7F,MAAM,GAAG,SAAoF;wCACnG,sBAAO,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,WAAW,CAAA,EAAA;;;6BAC7B,EACD,EAAE,QAAQ,EAAE,UAAC,CAAC,IAAK,OAAA,CAAC,KAAK,IAAI,EAAV,CAAU,EAAE,CAChC,EAAA;;oBAPD,SAOC,CAAA;oBAED,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAA;;;oBAG5D,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;;;;0BAGG,EAAb,+BAAa;;;yBAAb,CAAA,2BAAa,CAAA;oBAA7B,YAAY;oBACrB,qBAAM,GAAG,CAAC,GAAG,CAAC,kCAAkC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBAAxF,SAAwF,CAAA;;;oBAD/D,IAAa,CAAA;;;0BAID,EAAhB,qCAAgB;;;yBAAhB,CAAA,8BAAgB,CAAA;oBAA5B,QAAQ;oBACjB,qBAAM,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBAAzE,SAAyE,CAAA;;;oBADpD,IAAgB,CAAA;;;0BAIX,EAAP,mBAAO;;;yBAAP,CAAA,qBAAO,CAAA;oBAAjB,MAAM;oBACf,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBAArD,SAAqD,CAAA;;;oBADlC,IAAO,CAAA;;;yBAIxB,aAAa,EAAb,yBAAa;oBACf,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBAA/D,SAA+D,CAAA;;;yBAE7D,cAAc,EAAd,yBAAc;oBAChB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBAAhE,SAAgE,CAAA;;;oBAGlE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;;;;oBAEhC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,OAAK,CAAC,CAAA;;;;;;;CAG3C,CAAA;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,yBAAkB,IAAI,CAAE,CAAC,CAAA;IACrC,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,iCAAiC,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAA7D,SAA6D,CAAA;;;;SAC9D,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAA;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAA;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/esm/tests/api_tests/openloop_webhooks.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openloop_webhooks.test.d.ts","sourceRoot":"","sources":["../../../../src/tests/api_tests/openloop_webhooks.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AA2EnC,eAAO,MAAM,uBAAuB;SAAuC,OAAO;iBAAe,OAAO;mBAkjBvG,CAAA"}
+{"version":3,"file":"openloop_webhooks.test.d.ts","sourceRoot":"","sources":["../../../../src/tests/api_tests/openloop_webhooks.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AA2EnC,eAAO,MAAM,uBAAuB;SAAuC,OAAO;iBAAe,OAAO;mBAknBvG,CAAA"}

package/lib/esm/tests/api_tests/openloop_webhooks.test.js

@@ -113,7 +113,7 @@ export var openloop_webhooks_tests = function (_a) {
                     enduser2 = _b.sent();
                     _b.label = 3;
                 case 3:
-                    _b.trys.push([3, , 25, 28]);
+                    _b.trys.push([3, , 28, 31]);
                     // ===== SECTION A: V1 Validation =====
                     log_header("V1 Validation");
                     return [4 /*yield*/, async_test('V1: missing patientID returns 400', function () { return __awaiter(void 0, void 0, void 0, function () {
@@ -185,6 +185,33 @@ export var openloop_webhooks_tests = function (_a) {
                             });
                         }); }, { onResult: function (r) { return r === true; } })];
                 case 6:
+                    _b.sent();
+                    return [4 /*yield*/, async_test('V1: order_confirmation maps program_code to protocol field', function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var orderNum, res, orders;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        orderNum = "ol-conf-protocol-".concat(uid());
+                                        return [4 /*yield*/, postV1(makeV1Confirmation({
+                                                patientID: healthieId1,
+                                                orderNumber: orderNum,
+                                                program_code: 'Weight-Loss',
+                                            }))];
+                                    case 1:
+                                        res = _a.sent();
+                                        assert(res.status === 200, "Expected 200, got ".concat(res.status));
+                                        return [4 /*yield*/, sdk.api.enduser_orders.getSome({
+                                                filter: { source: 'OpenLoop', externalId: orderNum }
+                                            })];
+                                    case 2:
+                                        orders = _a.sent();
+                                        assert(orders.length === 1, "Expected 1 order, got ".concat(orders.length));
+                                        assert(orders[0].protocol === 'Weight-Loss', "protocol mismatch: ".concat(orders[0].protocol));
+                                        return [2 /*return*/, true];
+                                }
+                            });
+                        }); }, { onResult: function (r) { return r === true; } })];
+                case 7:
                     _b.sent();
                     return [4 /*yield*/, async_test('V1: order_confirmation idempotency - same order not duplicated', function () { return __awaiter(void 0, void 0, void 0, function () {
                             var res, orders;
@@ -212,7 +239,7 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (r) { return r === true; } })];
-                case 7:
+                case 8:
                     _b.sent();
                     return [4 /*yield*/, async_test('V1: order_confirmation without sku_med falls back to pharmacy name', function () { return __awaiter(void 0, void 0, void 0, function () {
                             var orderNum, res, orders;
@@ -242,7 +269,7 @@ export var openloop_webhooks_tests = function (_a) {
                         }); }, { onResult: function (r) { return r === true; } })
                         // ===== SECTION C: V1 order_shipped =====
                     ];
-                case 8:
+                case 9:
                     _b.sent();
                     // ===== SECTION C: V1 order_shipped =====
                     log_header("V1 order_shipped");
@@ -285,7 +312,7 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (r) { return r === true; } })];
-                case 9:
+                case 10:
                     _b.sent();
                     return [4 /*yield*/, async_test('V1: order_shipped updates title and sku when provided', function () { return __awaiter(void 0, void 0, void 0, function () {
                             var res, orders, order;
@@ -315,7 +342,7 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (r) { return r === true; } })];
-                case 10:
+                case 11:
                     _b.sent();
                     return [4 /*yield*/, async_test('V1: order_shipped creates new order if none exists', function () { return __awaiter(void 0, void 0, void 0, function () {
                             var newOrderNum, res, orders, order;
@@ -351,7 +378,7 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (r) { return r === true; } })];
-                case 11:
+                case 12:
                     _b.sent();
                     return [4 /*yield*/, async_test('V1: order_shipped can re-ship with updated tracking', function () { return __awaiter(void 0, void 0, void 0, function () {
                             var reshipOrderNum, res, orders;
@@ -394,10 +421,40 @@ export var openloop_webhooks_tests = function (_a) {
                                         return [2 /*return*/, true];
                                 }
                             });
+                        }); }, { onResult: function (r) { return r === true; } })];
+                case 13:
+                    _b.sent();
+                    return [4 /*yield*/, async_test('V1: order_shipped maps program_code to protocol field', function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var orderNum, res, orders;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        orderNum = "ol-ship-protocol-".concat(uid());
+                                        return [4 /*yield*/, postV1(makeV1Confirmation({ patientID: healthieId1, orderNumber: orderNum }))];
+                                    case 1:
+                                        _a.sent();
+                                        return [4 /*yield*/, postV1(makeV1Shipped({
+                                                patientID: healthieId1,
+                                                orderNumber: orderNum,
+                                                program_code: 'Diabetes',
+                                            }))];
+                                    case 2:
+                                        res = _a.sent();
+                                        assert(res.status === 200, "Expected 200, got ".concat(res.status));
+                                        return [4 /*yield*/, sdk.api.enduser_orders.getSome({
+                                                filter: { source: 'OpenLoop', externalId: orderNum }
+                                            })];
+                                    case 3:
+                                        orders = _a.sent();
+                                        assert(orders.length === 1, "Expected 1 order, got ".concat(orders.length));
+                                        assert(orders[0].protocol === 'Diabetes', "protocol mismatch: ".concat(orders[0].protocol));
+                                        return [2 /*return*/, true];
+                                }
+                            });
                         }); }, { onResult: function (r) { return r === true; } })
                         // ===== SECTION D: V1 enduserId Isolation =====
                     ];
-                case 12:
+                case 14:
                     _b.sent();
                     // ===== SECTION D: V1 enduserId Isolation =====
                     log_header("V1 enduserId Isolation");
@@ -436,7 +493,7 @@ export var openloop_webhooks_tests = function (_a) {
                         }); }, { onResult: function (r) { return r === true; } })
                         // ===== SECTION E: V2 Validation =====
                     ];
-                case 13:
+                case 15:
                     _b.sent();
                     // ===== SECTION E: V2 Validation =====
                     log_header("V2 Validation");
@@ -454,7 +511,7 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (s) { return s === 400; } })];
-                case 14:
+                case 16:
                     _b.sent();
                     return [4 /*yield*/, async_test('V2: invalid eventType returns 400', function () { return __awaiter(void 0, void 0, void 0, function () {
                             var res;
@@ -467,7 +524,7 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (s) { return s === 400; } })];
-                case 15:
+                case 17:
                     _b.sent();
                     return [4 /*yield*/, async_test('V2: unknown patient returns 404', function () { return __awaiter(void 0, void 0, void 0, function () {
                             var res;
@@ -482,7 +539,7 @@ export var openloop_webhooks_tests = function (_a) {
                         }); }, { onResult: function (s) { return s === 404; } })
                         // ===== SECTION F: V2 Order Lifecycle =====
                     ];
-                case 16:
+                case 18:
                     _b.sent();
                     // ===== SECTION F: V2 Order Lifecycle =====
                     log_header("V2 Order Lifecycle");
@@ -517,7 +574,34 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (r) { return r === true; } })];
-                case 17:
+                case 19:
+                    _b.sent();
+                    return [4 /*yield*/, async_test('V2: prescription-created maps program_code to protocol field', function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var orderNum, res, orders;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        orderNum = "v2-protocol-".concat(uid());
+                                        return [4 /*yield*/, postV2(makeV2Payload('prescription-created', {
+                                                id: orderNum,
+                                                patientId: healthieId1,
+                                                program_code: 'GLP-1',
+                                            }))];
+                                    case 1:
+                                        res = _a.sent();
+                                        assert(res.status === 200, "Expected 200, got ".concat(res.status));
+                                        return [4 /*yield*/, sdk.api.enduser_orders.getSome({
+                                                filter: { source: 'OpenLoop', externalId: orderNum }
+                                            })];
+                                    case 2:
+                                        orders = _a.sent();
+                                        assert(orders.length === 1, "Expected 1 order, got ".concat(orders.length));
+                                        assert(orders[0].protocol === 'GLP-1', "protocol mismatch: ".concat(orders[0].protocol));
+                                        return [2 /*return*/, true];
+                                }
+                            });
+                        }); }, { onResult: function (r) { return r === true; } })];
+                case 20:
                     _b.sent();
                     return [4 /*yield*/, async_test('V2: prescription-shipped updates with carrier and tracking', function () { return __awaiter(void 0, void 0, void 0, function () {
                             var res, orders, order;
@@ -550,7 +634,7 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (r) { return r === true; } })];
-                case 18:
+                case 21:
                     _b.sent();
                     v2CancelId_1 = "v2-cancel-".concat(uid());
                     return [4 /*yield*/, async_test('V2: prescription-cancelled sets cancelledDate and reason', function () { return __awaiter(void 0, void 0, void 0, function () {
@@ -591,7 +675,7 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (r) { return r === true; } })];
-                case 19:
+                case 22:
                     _b.sent();
                     v2RefundId_1 = "v2-refund-".concat(uid());
                     return [4 /*yield*/, async_test('V2: prescription-refunded sets status', function () { return __awaiter(void 0, void 0, void 0, function () {
@@ -625,7 +709,7 @@ export var openloop_webhooks_tests = function (_a) {
                         }); }, { onResult: function (r) { return r === true; } })
                         // ===== SECTION G: V2 Idempotency & Isolation =====
                     ];
-                case 20:
+                case 23:
                     _b.sent();
                     // ===== SECTION G: V2 Idempotency & Isolation =====
                     log_header("V2 Idempotency & Isolation");
@@ -657,7 +741,7 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (r) { return r === true; } })];
-                case 21:
+                case 24:
                     _b.sent();
                     return [4 /*yield*/, async_test('V2: same id for different patients creates separate orders', function () { return __awaiter(void 0, void 0, void 0, function () {
                             var sharedV2Id, res1, res2, orders, enduserIds, expected;
@@ -694,7 +778,7 @@ export var openloop_webhooks_tests = function (_a) {
                         }); }, { onResult: function (r) { return r === true; } })
                         // ===== SECTION H: V2 Full Lifecycle =====
                     ];
-                case 22:
+                case 25:
                     _b.sent();
                     // ===== SECTION H: V2 Full Lifecycle =====
                     log_header("V2 Full Lifecycle");
@@ -738,7 +822,7 @@ export var openloop_webhooks_tests = function (_a) {
                         }); }, { onResult: function (r) { return r === true; } })
                         // ===== SECTION I: V2 Undefined Field Handling =====
                     ];
-                case 23:
+                case 26:
                     _b.sent();
                     // ===== SECTION I: V2 Undefined Field Handling =====
                     log_header("V2 Undefined Field Handling");
@@ -782,18 +866,18 @@ export var openloop_webhooks_tests = function (_a) {
                                 }
                             });
                         }); }, { onResult: function (r) { return r === true; } })];
-                case 24:
+                case 27:
                     _b.sent();
                     console.log("All OpenLoop webhook tests passed!");
-                    return [3 /*break*/, 28];
-                case 25: return [4 /*yield*/, sdk.api.endusers.deleteOne(enduser1.id).catch(console.error)];
-                case 26:
+                    return [3 /*break*/, 31];
+                case 28: return [4 /*yield*/, sdk.api.endusers.deleteOne(enduser1.id).catch(console.error)];
+                case 29:
                     _b.sent();
                     return [4 /*yield*/, sdk.api.endusers.deleteOne(enduser2.id).catch(console.error)];
-                case 27:
+                case 30:
                     _b.sent();
                     return [7 /*endfinally*/];
-                case 28: return [2 /*return*/];
+                case 31: return [2 /*return*/];
             }
         });
     });