@tellescope/sdk 1.254.0 → 1.255.0

package/lib/cjs/tests/api_tests/order_status_equals_frequency.test.js

@@ -0,0 +1,254 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.order_status_equals_frequency_tests = void 0;
+require('source-map-support').install();
+var sdk_1 = require("../../sdk");
+var testing_1 = require("@tellescope/testing");
+var setup_1 = require("../setup");
+var host = process.env.API_URL || 'http://localhost:8080';
+// Focused coverage for the optional `frequencies` exact-match filter on the
+// "Order Status Equals" automation trigger. Mirrors the fills/skus/protocols
+// array-filter pattern: blank/absent -> fires for all, otherwise the order's
+// frequency must exactly match one of the listed values.
+var order_status_equals_frequency_tests = function (_a) {
+    var sdk = _a.sdk, sdkNonAdmin = _a.sdkNonAdmin;
+    return __awaiter(void 0, void 0, void 0, function () {
+        var tf1, tf2, tf3, tf4, tf5, ef;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    (0, testing_1.log_header)("Order Status Equals - Frequency Filter Tests");
+                    return [4 /*yield*/, sdk.api.automation_triggers.createOne({
+                            event: { type: 'Order Status Equals', info: { source: 'FreqSource', status: "FreqStatus" } },
+                            action: { type: 'Add Tags', info: { tags: ['Freq No Filter'] } },
+                            status: 'Active',
+                            title: "Frequency - no filter (backward compat)"
+                        })];
+                case 1:
+                    tf1 = _b.sent();
+                    return [4 /*yield*/, sdk.api.automation_triggers.createOne({
+                            event: { type: 'Order Status Equals', info: { source: 'FreqSource', status: "FreqStatus", frequencies: ['4', '12'] } },
+                            action: { type: 'Add Tags', info: { tags: ['Freq Match'] } },
+                            status: 'Active',
+                            title: "Frequency - multi-value match"
+                        })];
+                case 2:
+                    tf2 = _b.sent();
+                    return [4 /*yield*/, sdk.api.automation_triggers.createOne({
+                            event: { type: 'Order Status Equals', info: { source: 'FreqSource', status: "FreqStatus", frequencies: [] } },
+                            action: { type: 'Add Tags', info: { tags: ['Freq Empty All'] } },
+                            status: 'Active',
+                            title: "Frequency - empty array means all"
+                        })];
+                case 3:
+                    tf3 = _b.sent();
+                    return [4 /*yield*/, sdk.api.automation_triggers.createOne({
+                            event: { type: 'Order Status Equals', info: { source: 'FreqSource', status: "FreqShipped", frequencies: ['4'] } },
+                            action: { type: 'Add Tags', info: { tags: ['Freq Status Combo'] } },
+                            status: 'Active',
+                            title: "Frequency + status combination (AND semantics)"
+                        })];
+                case 4:
+                    tf4 = _b.sent();
+                    return [4 /*yield*/, sdk.api.automation_triggers.createOne({
+                            event: { type: 'Order Status Equals', info: { source: 'FreqSource', status: "FreqStatus", frequencies: ['12'] } },
+                            action: { type: 'Add Tags', info: { tags: ['Freq Match 12'] } },
+                            status: 'Active',
+                            title: "Frequency - second listed value"
+                        })];
+                case 5:
+                    tf5 = _b.sent();
+                    return [4 /*yield*/, sdk.api.endusers.createOne({})];
+                case 6:
+                    ef = _b.sent();
+                    _b.label = 7;
+                case 7:
+                    _b.trys.push([7, , 26, 28]);
+                    // Order with NO frequency: no-filter trigger (tf1) and empty-array trigger (tf3) both fire;
+                    // populated-filter trigger (tf2) does NOT (missing frequency must never match a populated filter).
+                    return [4 /*yield*/, sdk.api.enduser_orders.createOne({ status: 'FreqStatus', source: 'FreqSource', externalId: 'f1', enduserId: ef.id, title: "Freq No Frequency" })];
+                case 8:
+                    // Order with NO frequency: no-filter trigger (tf1) and empty-array trigger (tf3) both fire;
+                    // populated-filter trigger (tf2) does NOT (missing frequency must never match a populated filter).
+                    _b.sent();
+                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 500)]; // allow triggers to happen
+                case 9:
+                    _b.sent(); // allow triggers to happen
+                    return [4 /*yield*/, (0, testing_1.async_test)("Frequency: no-filter + empty-array fire for order with no frequency (backward compat)", function () { return sdk.api.endusers.getOne(ef.id); }, { onResult: function (e) {
+                                var _a, _b, _c, _d;
+                                return !!(((_a = e.tags) === null || _a === void 0 ? void 0 : _a.length) === 2
+                                    && ((_b = e.tags) === null || _b === void 0 ? void 0 : _b.includes('Freq No Filter'))
+                                    && ((_c = e.tags) === null || _c === void 0 ? void 0 : _c.includes('Freq Empty All'))
+                                    && !((_d = e.tags) === null || _d === void 0 ? void 0 : _d.includes('Freq Match')));
+                            } })
+                        // Order with a frequency NOT in ['4','12'] -> populated-filter trigger still does not fire.
+                    ];
+                case 10:
+                    _b.sent();
+                    // Order with a frequency NOT in ['4','12'] -> populated-filter trigger still does not fire.
+                    return [4 /*yield*/, sdk.api.enduser_orders.createOne({ status: 'FreqStatus', source: 'FreqSource', externalId: 'f2', enduserId: ef.id, title: "Freq 8", frequency: '8' })];
+                case 11:
+                    // Order with a frequency NOT in ['4','12'] -> populated-filter trigger still does not fire.
+                    _b.sent();
+                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 500)]; // allow triggers to happen
+                case 12:
+                    _b.sent(); // allow triggers to happen
+                    return [4 /*yield*/, (0, testing_1.async_test)("Frequency: no match (order frequency '8' not in ['4','12'])", function () { return sdk.api.endusers.getOne(ef.id); }, { onResult: function (e) {
+                                var _a, _b;
+                                return !!(((_a = e.tags) === null || _a === void 0 ? void 0 : _a.length) === 2
+                                    && !((_b = e.tags) === null || _b === void 0 ? void 0 : _b.includes('Freq Match')));
+                            } })
+                        // Order with frequency '4' -> ['4','12'] trigger fires.
+                    ];
+                case 13:
+                    _b.sent();
+                    // Order with frequency '4' -> ['4','12'] trigger fires.
+                    return [4 /*yield*/, sdk.api.enduser_orders.createOne({ status: 'FreqStatus', source: 'FreqSource', externalId: 'f3', enduserId: ef.id, title: "Freq 4", frequency: '4' })];
+                case 14:
+                    // Order with frequency '4' -> ['4','12'] trigger fires.
+                    _b.sent();
+                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 500)]; // allow triggers to happen
+                case 15:
+                    _b.sent(); // allow triggers to happen
+                    return [4 /*yield*/, (0, testing_1.async_test)("Frequency: match (order frequency '4' is in ['4','12'])", function () { return sdk.api.endusers.getOne(ef.id); }, { onResult: function (e) {
+                                var _a, _b, _c;
+                                return !!(((_a = e.tags) === null || _a === void 0 ? void 0 : _a.length) === 3
+                                    && ((_b = e.tags) === null || _b === void 0 ? void 0 : _b.includes('Freq Match'))
+                                    && !((_c = e.tags) === null || _c === void 0 ? void 0 : _c.includes('Freq Match 12')));
+                            } })
+                        // Order with frequency '12' -> the second listed value also matches (tf5 frequencies: ['12']).
+                    ];
+                case 16:
+                    _b.sent();
+                    // Order with frequency '12' -> the second listed value also matches (tf5 frequencies: ['12']).
+                    return [4 /*yield*/, sdk.api.enduser_orders.createOne({ status: 'FreqStatus', source: 'FreqSource', externalId: 'f4', enduserId: ef.id, title: "Freq 12", frequency: '12' })];
+                case 17:
+                    // Order with frequency '12' -> the second listed value also matches (tf5 frequencies: ['12']).
+                    _b.sent();
+                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 500)]; // allow triggers to happen
+                case 18:
+                    _b.sent(); // allow triggers to happen
+                    return [4 /*yield*/, (0, testing_1.async_test)("Frequency: second listed value '12' also matches", function () { return sdk.api.endusers.getOne(ef.id); }, { onResult: function (e) {
+                                var _a, _b;
+                                return !!(((_a = e.tags) === null || _a === void 0 ? void 0 : _a.length) === 4
+                                    && ((_b = e.tags) === null || _b === void 0 ? void 0 : _b.includes('Freq Match 12')));
+                            } })
+                        // AND semantics: frequency + status must BOTH match. Right status, wrong frequency -> no fire.
+                    ];
+                case 19:
+                    _b.sent();
+                    // AND semantics: frequency + status must BOTH match. Right status, wrong frequency -> no fire.
+                    return [4 /*yield*/, sdk.api.enduser_orders.createOne({ status: 'FreqShipped', source: 'FreqSource', externalId: 'f5', enduserId: ef.id, title: "Freq Combo Wrong Freq", frequency: '8' })];
+                case 20:
+                    // AND semantics: frequency + status must BOTH match. Right status, wrong frequency -> no fire.
+                    _b.sent();
+                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 500)]; // allow triggers to happen
+                case 21:
+                    _b.sent(); // allow triggers to happen
+                    return [4 /*yield*/, (0, testing_1.async_test)("Frequency + status combo: status matches but frequency does not -> no fire", function () { return sdk.api.endusers.getOne(ef.id); }, { onResult: function (e) {
+                                var _a, _b;
+                                return !!(((_a = e.tags) === null || _a === void 0 ? void 0 : _a.length) === 4
+                                    && !((_b = e.tags) === null || _b === void 0 ? void 0 : _b.includes('Freq Status Combo')));
+                            } })
+                        // AND semantics: right status AND right frequency -> fires.
+                    ];
+                case 22:
+                    _b.sent();
+                    // AND semantics: right status AND right frequency -> fires.
+                    return [4 /*yield*/, sdk.api.enduser_orders.createOne({ status: 'FreqShipped', source: 'FreqSource', externalId: 'f6', enduserId: ef.id, title: "Freq Combo Match", frequency: '4' })];
+                case 23:
+                    // AND semantics: right status AND right frequency -> fires.
+                    _b.sent();
+                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 500)]; // allow triggers to happen
+                case 24:
+                    _b.sent(); // allow triggers to happen
+                    return [4 /*yield*/, (0, testing_1.async_test)("Frequency + status combo: both match -> fires (AND semantics)", function () { return sdk.api.endusers.getOne(ef.id); }, { onResult: function (e) {
+                                var _a, _b;
+                                return !!(((_a = e.tags) === null || _a === void 0 ? void 0 : _a.length) === 5
+                                    && ((_b = e.tags) === null || _b === void 0 ? void 0 : _b.includes('Freq Status Combo')));
+                            } })];
+                case 25:
+                    _b.sent();
+                    return [3 /*break*/, 28];
+                case 26: return [4 /*yield*/, Promise.all([
+                        sdk.api.automation_triggers.deleteOne(tf1.id),
+                        sdk.api.automation_triggers.deleteOne(tf2.id),
+                        sdk.api.automation_triggers.deleteOne(tf3.id),
+                        sdk.api.automation_triggers.deleteOne(tf4.id),
+                        sdk.api.automation_triggers.deleteOne(tf5.id),
+                        sdk.api.endusers.deleteOne(ef.id),
+                    ])];
+                case 27:
+                    _b.sent();
+                    return [7 /*endfinally*/];
+                case 28: return [2 /*return*/];
+            }
+        });
+    });
+};
+exports.order_status_equals_frequency_tests = order_status_equals_frequency_tests;
+// Allow running this test file independently
+if (require.main === module) {
+    console.log("\uD83C\uDF10 Using API URL: ".concat(host));
+    var sdk_2 = new sdk_1.Session({ host: host });
+    var sdkNonAdmin_1 = new sdk_1.Session({ host: host });
+    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, setup_1.setup_tests)(sdk_2, sdkNonAdmin_1)];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, (0, exports.order_status_equals_frequency_tests)({ sdk: sdk_2, sdkNonAdmin: sdkNonAdmin_1 })];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); };
+    runTests()
+        .then(function () {
+        console.log("✅ Order Status Equals frequency test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ Order Status Equals frequency test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=order_status_equals_frequency.test.js.map

package/lib/cjs/tests/api_tests/order_status_equals_frequency.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"order_status_equals_frequency.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/order_status_equals_frequency.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,iCAAmC;AACnC,+CAI4B;AAC5B,kCAAsC;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,yDAAyD;AAClD,IAAM,mCAAmC,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;oBAC1E,IAAA,oBAAU,EAAC,8CAA8C,CAAC,CAAA;oBAE9C,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;4BAC5F,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAC;4BAC/D,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,yCAAyC;yBACjD,CAAC,EAAA;;oBALI,GAAG,GAAG,SAKV;oBACU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;4BACtH,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,EAAC;4BAC3D,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,+BAA+B;yBACvC,CAAC,EAAA;;oBALI,GAAG,GAAG,SAKV;oBACU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE;4BAC7G,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAC;4BAC/D,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,mCAAmC;yBAC3C,CAAC,EAAA;;oBALI,GAAG,GAAG,SAKV;oBACU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE;4BACjH,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAC;4BAClE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,gDAAgD;yBACxD,CAAC,EAAA;;oBALI,GAAG,GAAG,SAKV;oBACU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE;4BACjH,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,EAAC;4BAC9D,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,iCAAiC;yBACzC,CAAC,EAAA;;oBALI,GAAG,GAAG,SAKV;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAzC,EAAE,GAAG,SAAoC;;;;oBAG7C,4FAA4F;oBAC5F,mGAAmG;oBACnG,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,EAAA;;oBAFtJ,4FAA4F;oBAC5F,mGAAmG;oBACnG,SAAsJ,CAAA;oBACtJ,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,2BAA2B;;oBAAtD,SAA0B,CAAA,CAAC,2BAA2B;oBACtD,qBAAM,IAAA,oBAAU,EACd,uFAAuF,EACvF,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAA9B,CAA8B,EACpC,EAAE,QAAQ,EAAE,UAAA,CAAC;;gCAAI,OAAA,CAAC,CAAC,CAChB,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,MAAM,MAAK,CAAC;wCACpB,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAA;wCAClC,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAA;uCAClC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,YAAY,CAAC,CAAA,CACjC,CAAA;6BAAA,EAAE,CACJ;wBAED,4FAA4F;sBAF3F;;oBATD,SASC,CAAA;oBAED,4FAA4F;oBAC5F,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAA;;oBAD3J,4FAA4F;oBAC5F,SAA2J,CAAA;oBAC3J,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,2BAA2B;;oBAAtD,SAA0B,CAAA,CAAC,2BAA2B;oBACtD,qBAAM,IAAA,oBAAU,EACd,6DAA6D,EAC7D,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAA9B,CAA8B,EACpC,EAAE,QAAQ,EAAE,UAAA,CAAC;;gCAAI,OAAA,CAAC,CAAC,CAChB,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,MAAM,MAAK,CAAC;uCACpB,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,YAAY,CAAC,CAAA,CACjC,CAAA;6BAAA,EAAE,CACJ;wBAED,wDAAwD;sBAFvD;;oBAPD,SAOC,CAAA;oBAED,wDAAwD;oBACxD,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAA;;oBAD3J,wDAAwD;oBACxD,SAA2J,CAAA;oBAC3J,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,2BAA2B;;oBAAtD,SAA0B,CAAA,CAAC,2BAA2B;oBACtD,qBAAM,IAAA,oBAAU,EACd,yDAAyD,EACzD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAA9B,CAA8B,EACpC,EAAE,QAAQ,EAAE,UAAA,CAAC;;gCAAI,OAAA,CAAC,CAAC,CAChB,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,MAAM,MAAK,CAAC;wCACpB,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;uCAC9B,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,eAAe,CAAC,CAAA,CACpC,CAAA;6BAAA,EAAE,CACJ;wBAED,+FAA+F;sBAF9F;;oBARD,SAQC,CAAA;oBAED,+FAA+F;oBAC/F,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAA;;oBAD7J,+FAA+F;oBAC/F,SAA6J,CAAA;oBAC7J,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,2BAA2B;;oBAAtD,SAA0B,CAAA,CAAC,2BAA2B;oBACtD,qBAAM,IAAA,oBAAU,EACd,kDAAkD,EAClD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAA9B,CAA8B,EACpC,EAAE,QAAQ,EAAE,UAAA,CAAC;;gCAAI,OAAA,CAAC,CAAC,CAChB,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,MAAM,MAAK,CAAC;wCACpB,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,eAAe,CAAC,CAAA,CACnC,CAAA;6BAAA,EAAE,CACJ;wBAED,+FAA+F;sBAF9F;;oBAPD,SAOC,CAAA;oBAED,+FAA+F;oBAC/F,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAA;;oBAD3K,+FAA+F;oBAC/F,SAA2K,CAAA;oBAC3K,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,2BAA2B;;oBAAtD,SAA0B,CAAA,CAAC,2BAA2B;oBACtD,qBAAM,IAAA,oBAAU,EACd,4EAA4E,EAC5E,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAA9B,CAA8B,EACpC,EAAE,QAAQ,EAAE,UAAA,CAAC;;gCAAI,OAAA,CAAC,CAAC,CAChB,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,MAAM,MAAK,CAAC;uCACpB,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAA,CACxC,CAAA;6BAAA,EAAE,CACJ;wBAED,4DAA4D;sBAF3D;;oBAPD,SAOC,CAAA;oBAED,4DAA4D;oBAC5D,qBAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAA;;oBADtK,4DAA4D;oBAC5D,SAAsK,CAAA;oBACtK,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,2BAA2B;;oBAAtD,SAA0B,CAAA,CAAC,2BAA2B;oBACtD,qBAAM,IAAA,oBAAU,EACd,+DAA+D,EAC/D,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAA9B,CAA8B,EACpC,EAAE,QAAQ,EAAE,UAAA,CAAC;;gCAAI,OAAA,CAAC,CAAC,CAChB,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,MAAM,MAAK,CAAC;wCACpB,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAA,CACvC,CAAA;6BAAA,EAAE,CACJ,EAAA;;oBAPD,SAOC,CAAA;;yBAED,qBAAM,OAAO,CAAC,GAAG,CAAC;wBAChB,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7C,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7C,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7C,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7C,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7C,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;qBAClC,CAAC,EAAA;;oBAPF,SAOE,CAAA;;;;;;CAEL,CAAA;AA1HY,QAAA,mCAAmC,uCA0H/C;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,2CAAmC,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAA/D,SAA+D,CAAA;;;;SAChE,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAA;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAA;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/cjs/tests/api_tests/organization_api_keys.test.d.ts

@@ -0,0 +1,6 @@
+import { Session } from "../../sdk";
+export declare const organization_api_keys_tests: ({ sdk, sdkNonAdmin }: {
+    sdk: Session;
+    sdkNonAdmin: Session;
+}) => Promise<void>;
+//# sourceMappingURL=organization_api_keys.test.d.ts.map

package/lib/cjs/tests/api_tests/organization_api_keys.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization_api_keys.test.d.ts","sourceRoot":"","sources":["../../../../src/tests/api_tests/organization_api_keys.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAcnC,eAAO,MAAM,2BAA2B;SACT,OAAO;iBAAe,OAAO;mBAwK3D,CAAA"}

package/lib/cjs/tests/api_tests/organization_api_keys.test.js

@@ -0,0 +1,226 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.organization_api_keys_tests = void 0;
+require('source-map-support').install();
+var sdk_1 = require("../../sdk");
+var testing_1 = require("@tellescope/testing");
+var setup_1 = require("../setup");
+var host = process.env.API_URL || 'http://localhost:8080';
+// fields that the admin org-wide list endpoint is allowed to return
+var ALLOWED_FIELDS = ['id', 'creator', 'businessId', 'updatedAt'].sort();
+var organization_api_keys_tests = function (_a) {
+    var sdk = _a.sdk, sdkNonAdmin = _a.sdkNonAdmin;
+    return __awaiter(void 0, void 0, void 0, function () {
+        var adminKeyIds, otherKeyId, otherUserId, apiKeysRoleId, apiKeysRole, otherUser_1, _b, otherSdk_1, _c, adminKey_1, otherKey, apiKeys, offending, afterGating, afterDelete, afterNoop, _i, adminKeyIds_1, id;
+        var _d;
+        return __generator(this, function (_e) {
+            switch (_e.label) {
+                case 0:
+                    (0, testing_1.log_header)("Organization API Keys (admin org-wide management)");
+                    adminKeyIds = [];
+                    _e.label = 1;
+                case 1:
+                    _e.trys.push([1, , 19, 30]);
+                    return [4 /*yield*/, sdk.api.role_based_access_permissions.createOne({
+                            role: 'api-keys-test-role',
+                            permissions: { api_keys: { create: 'All', read: 'All', update: 'All', delete: 'All' } },
+                        })];
+                case 2:
+                    apiKeysRole = _e.sent();
+                    apiKeysRoleId = apiKeysRole.id;
+                    return [4 /*yield*/, sdk.api.users.getOne({ email: 'api.keys.other.user@tellescope.com' }).catch(function () { return null; })];
+                case 3:
+                    _b = (_e.sent());
+                    if (_b) return [3 /*break*/, 5];
+                    return [4 /*yield*/, sdk.api.users.createOne({ email: 'api.keys.other.user@tellescope.com', notificationEmailsDisabled: true, verifiedEmail: true })];
+                case 4:
+                    _b = (_e.sent());
+                    _e.label = 5;
+                case 5:
+                    otherUser_1 = _b;
+                    otherUserId = otherUser_1.id;
+                    return [4 /*yield*/, sdk.api.users.updateOne(otherUser_1.id, { roles: [apiKeysRole.role] }, { replaceObjectFields: true })];
+                case 6:
+                    _e.sent();
+                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 2000)]; // wait for the role change to propagate before authenticating
+                case 7:
+                    _e.sent(); // wait for the role change to propagate before authenticating
+                    _c = sdk_1.Session.bind;
+                    _d = {
+                        host: host
+                    };
+                    return [4 /*yield*/, sdk.api.users.generate_auth_token({ id: otherUser_1.id })];
+                case 8:
+                    otherSdk_1 = new (_c.apply(sdk_1.Session, [void 0, (_d.authToken = (_e.sent()).authToken,
+                            _d)]))();
+                    return [4 /*yield*/, sdk.api.api_keys.createOne({})];
+                case 9:
+                    adminKey_1 = _e.sent();
+                    adminKeyIds.push(adminKey_1.id);
+                    return [4 /*yield*/, otherSdk_1.api.api_keys.createOne({})];
+                case 10:
+                    otherKey = _e.sent();
+                    otherKeyId = otherKey.id;
+                    return [4 /*yield*/, sdk.api.api_keys.get_organization_api_keys()];
+                case 11:
+                    apiKeys = (_e.sent()).apiKeys;
+                    (0, testing_1.assert)(apiKeys.some(function (k) { return k.id === otherKeyId; }), "admin list did not include another user's key ".concat(otherKeyId), "admin get_organization_api_keys returns keys created by other users in the org");
+                    (0, testing_1.assert)(apiKeys.some(function (k) { return k.id === adminKey_1.id; }), "admin list did not include the admin's own key", "admin get_organization_api_keys returns the admin's own keys");
+                    (0, testing_1.assert)(!!apiKeys.find(function (k) { return k.id === otherKeyId && k.creator === otherUser_1.id; }), "creator on the other user's key did not match", "returned key reports the correct creator");
+                    // =============================================
+                    // SECRET REDACTION (server-side, allowlist)
+                    // =============================================
+                    (0, testing_1.assert)(apiKeys.every(function (k) { return k.key === undefined; }), "a returned record exposed a plaintext `key`", "no returned record exposes a plaintext key (legacy field)");
+                    (0, testing_1.assert)(apiKeys.every(function (k) { return k.hashedKey === undefined; }), "a returned record exposed `hashedKey`", "no returned record exposes hashedKey");
+                    offending = apiKeys
+                        .map(function (k) { return Object.keys(k).filter(function (key) { return !ALLOWED_FIELDS.includes(key); }); })
+                        .find(function (extra) { return extra.length > 0; });
+                    (0, testing_1.assert)(offending === undefined, "a returned record exposed non-allowlisted fields: ".concat(JSON.stringify(offending)), "returned records contain only allowlisted fields (subset of id, creator, businessId, updatedAt)");
+                    // =============================================
+                    // CROSS-ORG ISOLATION (no leakage across businesses)
+                    // =============================================
+                    (0, testing_1.assert)(apiKeys.every(function (k) { return k.businessId === sdk.userInfo.businessId; }), "a returned key belonged to a different business", "all returned keys are scoped to the admin's businessId");
+                    // =============================================
+                    // ADMIN GATING (negative tests)
+                    // =============================================
+                    return [4 /*yield*/, (0, testing_1.async_test)("non-admin get_organization_api_keys is rejected (401)", function () { return otherSdk_1.api.api_keys.get_organization_api_keys(); }, { shouldError: true, onError: function (e) { return e.statusCode === 401 || /admin access only/i.test(e.message || ''); } })];
+                case 12:
+                    // =============================================
+                    // ADMIN GATING (negative tests)
+                    // =============================================
+                    _e.sent();
+                    return [4 /*yield*/, (0, testing_1.async_test)("non-admin delete_organization_api_key is rejected (401)", function () { return otherSdk_1.api.api_keys.delete_organization_api_key({ id: adminKey_1.id }); }, { shouldError: true, onError: function (e) { return e.statusCode === 401 || /admin access only/i.test(e.message || ''); } })
+                        // confirm the gating did not delete the key
+                    ];
+                case 13:
+                    _e.sent();
+                    return [4 /*yield*/, sdk.api.api_keys.get_organization_api_keys()];
+                case 14:
+                    afterGating = _e.sent();
+                    (0, testing_1.assert)(afterGating.apiKeys.some(function (k) { return k.id === adminKey_1.id; }), "rejected non-admin delete still removed the key", "rejected non-admin delete left the key intact");
+                    // =============================================
+                    // ADMIN DELETE another user's key
+                    // =============================================
+                    return [4 /*yield*/, (0, testing_1.async_test)("admin delete_organization_api_key deletes another user's key", function () { return sdk.api.api_keys.delete_organization_api_key({ id: otherKeyId }); }, { shouldError: false, onResult: function () { return true; } })];
+                case 15:
+                    // =============================================
+                    // ADMIN DELETE another user's key
+                    // =============================================
+                    _e.sent();
+                    return [4 /*yield*/, sdk.api.api_keys.get_organization_api_keys()];
+                case 16:
+                    afterDelete = _e.sent();
+                    (0, testing_1.assert)(!afterDelete.apiKeys.some(function (k) { return k.id === otherKeyId; }), "deleted key still present in org-wide list", "deleted key no longer appears in the org-wide list");
+                    otherKeyId = undefined; // successfully deleted; nothing to clean up
+                    // deleting a key in a different org (fabricated id) must be a no-op for our org
+                    return [4 /*yield*/, (0, testing_1.async_test)("admin delete of a non-existent/cross-org key id is a safe no-op", function () { return sdk.api.api_keys.delete_organization_api_key({ id: '000000000000000000000000' }); }, { shouldError: false, onResult: function () { return true; } })];
+                case 17:
+                    // deleting a key in a different org (fabricated id) must be a no-op for our org
+                    _e.sent();
+                    return [4 /*yield*/, sdk.api.api_keys.get_organization_api_keys()];
+                case 18:
+                    afterNoop = _e.sent();
+                    (0, testing_1.assert)(afterNoop.apiKeys.some(function (k) { return k.id === adminKey_1.id; }), "no-op delete removed an unrelated key", "no-op cross-org delete left our org's keys intact");
+                    return [3 /*break*/, 30];
+                case 19:
+                    _i = 0, adminKeyIds_1 = adminKeyIds;
+                    _e.label = 20;
+                case 20:
+                    if (!(_i < adminKeyIds_1.length)) return [3 /*break*/, 23];
+                    id = adminKeyIds_1[_i];
+                    return [4 /*yield*/, sdk.api.api_keys.deleteOne(id).catch(function () { })];
+                case 21:
+                    _e.sent();
+                    _e.label = 22;
+                case 22:
+                    _i++;
+                    return [3 /*break*/, 20];
+                case 23:
+                    if (!otherKeyId) return [3 /*break*/, 25];
+                    return [4 /*yield*/, sdk.api.api_keys.delete_organization_api_key({ id: otherKeyId }).catch(function () { })];
+                case 24:
+                    _e.sent();
+                    _e.label = 25;
+                case 25:
+                    if (!otherUserId) return [3 /*break*/, 27];
+                    return [4 /*yield*/, sdk.api.users.deleteOne(otherUserId).catch(function () { })];
+                case 26:
+                    _e.sent();
+                    _e.label = 27;
+                case 27:
+                    if (!apiKeysRoleId) return [3 /*break*/, 29];
+                    return [4 /*yield*/, sdk.api.role_based_access_permissions.deleteOne(apiKeysRoleId).catch(function () { })];
+                case 28:
+                    _e.sent();
+                    _e.label = 29;
+                case 29: return [7 /*endfinally*/];
+                case 30: return [2 /*return*/];
+            }
+        });
+    });
+};
+exports.organization_api_keys_tests = organization_api_keys_tests;
+// Allow running this test file independently
+if (require.main === module) {
+    var sdk_2 = new sdk_1.Session({ host: host });
+    var sdkNonAdmin_1 = new sdk_1.Session({ host: host });
+    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, setup_1.setup_tests)(sdk_2, sdkNonAdmin_1)];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, (0, exports.organization_api_keys_tests)({ sdk: sdk_2, sdkNonAdmin: sdkNonAdmin_1 })];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); };
+    runTests()
+        .then(function () {
+        console.log("✅ Organization API keys test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ Organization API keys test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=organization_api_keys.test.js.map

package/lib/cjs/tests/api_tests/organization_api_keys.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization_api_keys.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/organization_api_keys.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,iCAAmC;AACnC,+CAK4B;AAC5B,kCAAsC;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,oEAAoE;AACpE,IAAM,cAAc,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAA;AAEnE,IAAM,2BAA2B,GAAG,UACzC,EAA4D;QAA1D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;;oBAElB,IAAA,oBAAU,EAAC,mDAAmD,CAAC,CAAA;oBAQzD,WAAW,GAAa,EAAE,CAAA;;;;oBAOV,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;4BACxE,IAAI,EAAE,oBAAoB;4BAC1B,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;yBACxF,CAAC,EAAA;;oBAHI,WAAW,GAAG,SAGlB;oBACF,aAAa,GAAG,WAAW,CAAC,EAAE,CAAA;oBAI5B,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC,KAAK,CAAC,cAAM,OAAA,IAAI,EAAJ,CAAI,CAAC,EAAA;;oBAD7E,KAAA,CAChB,SAA6F,CAC9F,CAAA;4BAFiB,wBAEjB;oBACC,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,0BAA0B,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAA;;oBADlI,KAAA,CACH,SAAqI,CACtI,CAAA;;;oBAJK,gBAIL;oBACD,WAAW,GAAG,WAAS,CAAC,EAAE,CAAA;oBAC1B,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,WAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAA;;oBAAzG,SAAyG,CAAA;oBACzG,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA,CAAC,8DAA8D;;oBAA1F,SAA2B,CAAA,CAAC,8DAA8D;yBAErE,aAAO;;wBAC1B,IAAI,MAAA;;oBACQ,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,WAAS,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAFrE,aAAW,cAAI,aAAO,YAE1B,YAAS,GAAE,CAAC,SAA6D,CAAC,CAAC,SAAS;oCACpF;oBAGe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,aAAW,SAAoC;oBACrD,WAAW,CAAC,IAAI,CAAC,UAAQ,CAAC,EAAE,CAAC,CAAA;oBAGZ,qBAAM,UAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAApD,QAAQ,GAAG,SAAyC;oBAC1D,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;oBAKJ,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,yBAAyB,EAAE,EAAA;;oBAA9D,OAAO,GAAK,CAAA,SAAkD,CAAA,QAAvD;oBAEf,IAAA,gBAAM,EACJ,OAAO,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,UAAU,EAAnB,CAAmB,CAAC,EACtC,wDAAiD,UAAU,CAAE,EAC7D,gFAAgF,CACjF,CAAA;oBACD,IAAA,gBAAM,EACJ,OAAO,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,UAAQ,CAAC,EAAE,EAApB,CAAoB,CAAC,EACvC,gDAAgD,EAChD,8DAA8D,CAC/D,CAAA;oBACD,IAAA,gBAAM,EACJ,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,WAAS,CAAC,EAAE,EAAjD,CAAiD,CAAC,EACtE,+CAA+C,EAC/C,0CAA0C,CAC3C,CAAA;oBAED,gDAAgD;oBAChD,4CAA4C;oBAC5C,gDAAgD;oBAChD,IAAA,gBAAM,EACJ,OAAO,CAAC,KAAK,CAAC,UAAA,CAAC,IAAI,OAAC,CAAS,CAAC,GAAG,KAAK,SAAS,EAA5B,CAA4B,CAAC,EAChD,6CAA6C,EAC7C,2DAA2D,CAC5D,CAAA;oBACD,IAAA,gBAAM,EACJ,OAAO,CAAC,KAAK,CAAC,UAAA,CAAC,IAAI,OAAC,CAAS,CAAC,SAAS,KAAK,SAAS,EAAlC,CAAkC,CAAC,EACtD,uCAAuC,EACvC,sCAAsC,CACvC,CAAA;oBAIK,SAAS,GAAG,OAAO;yBACtB,GAAG,CAAC,UAAA,CAAC,IAAI,OAAA,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAA,GAAG,IAAI,OAAA,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAA7B,CAA6B,CAAC,EAA3D,CAA2D,CAAC;yBACrE,IAAI,CAAC,UAAA,KAAK,IAAI,OAAA,KAAK,CAAC,MAAM,GAAG,CAAC,EAAhB,CAAgB,CAAC,CAAA;oBAClC,IAAA,gBAAM,EACJ,SAAS,KAAK,SAAS,EACvB,4DAAqD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAE,EAChF,iGAAiG,CAClG,CAAA;oBAED,gDAAgD;oBAChD,qDAAqD;oBACrD,gDAAgD;oBAChD,IAAA,gBAAM,EACJ,OAAO,CAAC,KAAK,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAxC,CAAwC,CAAC,EAC5D,iDAAiD,EACjD,wDAAwD,CACzD,CAAA;oBAED,gDAAgD;oBAChD,gCAAgC;oBAChC,gDAAgD;oBAChD,qBAAM,IAAA,oBAAU,EACd,uDAAuD,EACvD,cAAM,OAAA,UAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,yBAAyB,EAAE,EAAjD,CAAiD,EACvD,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAlE,CAAkE,EAAE,CAC/G,EAAA;;oBAPD,gDAAgD;oBAChD,gCAAgC;oBAChC,gDAAgD;oBAChD,SAIC,CAAA;oBACD,qBAAM,IAAA,oBAAU,EACd,yDAAyD,EACzD,cAAM,OAAA,UAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,EAAE,EAAE,UAAQ,CAAC,EAAE,EAAE,CAAC,EAAtE,CAAsE,EAC5E,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAlE,CAAkE,EAAE,CAC/G;wBAED,4CAA4C;sBAF3C;;oBAJD,SAIC,CAAA;oBAGmB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,yBAAyB,EAAE,EAAA;;oBAAhE,WAAW,GAAG,SAAkD;oBACtE,IAAA,gBAAM,EACJ,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,UAAQ,CAAC,EAAE,EAApB,CAAoB,CAAC,EACnD,iDAAiD,EACjD,+CAA+C,CAChD,CAAA;oBAED,gDAAgD;oBAChD,kCAAkC;oBAClC,gDAAgD;oBAChD,qBAAM,IAAA,oBAAU,EACd,8DAA8D,EAC9D,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,EAAE,EAAE,UAAW,EAAE,CAAC,EAAjE,CAAiE,EACvE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC7C,EAAA;;oBAPD,gDAAgD;oBAChD,kCAAkC;oBAClC,gDAAgD;oBAChD,SAIC,CAAA;oBAEmB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,yBAAyB,EAAE,EAAA;;oBAAhE,WAAW,GAAG,SAAkD;oBACtE,IAAA,gBAAM,EACJ,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,UAAU,EAAnB,CAAmB,CAAC,EACnD,4CAA4C,EAC5C,oDAAoD,CACrD,CAAA;oBACD,UAAU,GAAG,SAAS,CAAA,CAAC,4CAA4C;oBAEnE,gFAAgF;oBAChF,qBAAM,IAAA,oBAAU,EACd,iEAAiE,EACjE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,EAAE,EAAE,0BAA0B,EAAE,CAAC,EAAhF,CAAgF,EACtF,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC7C,EAAA;;oBALD,gFAAgF;oBAChF,SAIC,CAAA;oBACiB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,yBAAyB,EAAE,EAAA;;oBAA9D,SAAS,GAAG,SAAkD;oBACpE,IAAA,gBAAM,EACJ,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,UAAQ,CAAC,EAAE,EAApB,CAAoB,CAAC,EACjD,uCAAuC,EACvC,mDAAmD,CACpD,CAAA;;;0BAG2B,EAAX,2BAAW;;;yBAAX,CAAA,yBAAW,CAAA;oBAAjB,EAAE;oBACX,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBAApD,SAAoD,CAAA;;;oBADrC,IAAW,CAAA;;;yBAIxB,UAAU,EAAV,yBAAU;oBACZ,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBAAtF,SAAsF,CAAA;;;yBAEpF,WAAW,EAAX,yBAAW;oBACb,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBAA1D,SAA0D,CAAA;;;yBAExD,aAAa,EAAb,yBAAa;oBACf,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBAApF,SAAoF,CAAA;;;;;;;CAGzF,CAAA;AAzKY,QAAA,2BAA2B,+BAyKvC;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,mCAA2B,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAvD,SAAuD,CAAA;;;;SACxD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAA;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAA;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/cjs/tests/api_tests/security/F-0116-F-0119-enduser-cross-create.test.d.ts

@@ -0,0 +1,21 @@
+import { Session } from "../../../sdk";
+/**
+ * Regression test for the enduser cross-enduser CREATE gating gaps:
+ *   F-0116 enduser_observations  (security-audit/findings/F-0116-*.md)
+ *   F-0117 enduser_orders        (security-audit/findings/F-0117-*.md)
+ *   F-0119 managed_content_records (security-audit/findings/F-0119-*.md)
+ *   F-0118 chat_rooms (enduserIds-only gate; staff userIds targeting is by-design)
+ *
+ * Each model exposed enduserActions.create with an `enduserId`/`enduserIds` field that
+ * lacked a write-side gate, letting an authenticated enduser create records bound to a
+ * DIFFERENT enduser in the same tenant. The fix adds a `constraints.relationship`
+ * evaluator mirroring the canonical `tickets` pattern (schema.ts).
+ *
+ * Methodology: each section asserts BOTH the exploit-is-blocked case AND that the
+ * legitimate path (self-create + staff-create) still works.
+ */
+export declare const enduser_cross_create_tests: ({ sdk }: {
+    sdk: Session;
+    sdkNonAdmin: Session;
+}) => Promise<void>;
+//# sourceMappingURL=F-0116-F-0119-enduser-cross-create.test.d.ts.map

package/lib/cjs/tests/api_tests/security/F-0116-F-0119-enduser-cross-create.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"F-0116-F-0119-enduser-cross-create.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/F-0116-F-0119-enduser-cross-create.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAkB,MAAM,cAAc,CAAA;AActD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,0BAA0B;SAA2B,OAAO;iBAAe,OAAO;mBAuK9F,CAAA"}