@tellescope/sdk 1.255.19 → 1.256.0

package/lib/esm/tests/tests.js

@@ -77,6 +77,7 @@ import { user_portal_settings_tests } from "./api_tests/user_portal_settings.tes
 import { integrations_redacted_tests } from "./api_tests/integrations_redacted.test";
 import { healthie_multi_integration_tests } from "./api_tests/healthie_multi_integration.test";
 import { get_some_projection_tests } from "./api_tests/get_some_projection.test";
+import { file_download_unicode_names_tests } from "./api_tests/file_download_unicode_names.test";
 import { mdb_sort_tests } from "./api_tests/mdb_sort.test";
 import { create_user_notifications_trigger_tests } from "./api_tests/create_user_notifications_trigger.test";
 import { inbox_thread_assignment_updates_tests } from "./api_tests/inbox_thread_assignment_updates.test";
@@ -129,6 +130,7 @@ import { invite_user_enumeration_tests } from "./api_tests/security/F-0007-invit
 import { register_business_id_injection_tests } from "./api_tests/security/register_business_id_injection.test";
 import { handle_incoming_communication_cross_tenant_tests } from "./api_tests/security/F-0008-handle-incoming-communication-cross-tenant.test";
 import { sanitize_user_html_xss_tests } from "./api_tests/security/F-0013-sanitize-user-html.test";
+import { sanitize_user_html_with_iframes_tests } from "./api_tests/security/F-0013-sanitize-user-html-with-iframes.test";
 import { prototype_pollution_tests } from "./api_tests/security/F-0016-prototype-pollution.test";
 import { enduser_cross_create_tests } from "./api_tests/security/F-0116-F-0119-enduser-cross-create.test";
 import { globalunique_leak_tests } from "./api_tests/security/F-0145-globalunique-leak.test";
@@ -9254,9 +9256,9 @@ var auto_reply_tests = function () { return __awaiter(void 0, void 0, void 0, fu
     });
 }); };
 var merge_enduser_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
-    var stripeCustomerId, stripeKey, _a, source, destination, otherEnduser, _b, emailToMove, email, _c, eventToMove, event, _d, roomToMove, room, chatToMove, chat;
-    return __generator(this, function (_f) {
-        switch (_f.label) {
+    var stripeCustomerId, stripeKey, _a, source, destination, otherEnduser, _b, emailToMove, email, _c, eventToMove, event, _d, roomToMove, room, chatToMove, chat, _f, noInsuranceSource, noInsuranceDestination;
+    return __generator(this, function (_g) {
+        switch (_g.label) {
             case 0:
                 log_header("Merge Endusers");
                 stripeCustomerId = 'example_cu_id';
@@ -9277,39 +9279,39 @@ var merge_enduser_tests = function () { return __awaiter(void 0, void 0, void 0,
                         { email: 'other@tellescope.com' },
                     ])];
             case 1:
-                _a = (_f.sent()).created, source = _a[0], destination = _a[1], otherEnduser = _a[2];
+                _a = (_g.sent()).created, source = _a[0], destination = _a[1], otherEnduser = _a[2];
                 return [4 /*yield*/, sdk.api.emails.createSome([
                         { enduserId: source.id, subject: 'subject', logOnly: true, textContent: 'email' },
                         { enduserId: otherEnduser.id, subject: 'subject', logOnly: true, textContent: 'email' },
                     ])];
             case 2:
-                _b = (_f.sent()).created, emailToMove = _b[0], email = _b[1];
+                _b = (_g.sent()).created, emailToMove = _b[0], email = _b[1];
                 return [4 /*yield*/, sdk.api.calendar_events.createSome([
                         { attendees: [{ type: 'enduser', id: source.id }], durationInMinutes: 5, startTimeInMS: Date.now(), title: 'title' },
                         { attendees: [{ type: 'enduser', id: otherEnduser.id }], durationInMinutes: 5, startTimeInMS: Date.now(), title: 'title' },
                     ])];
             case 3:
-                _c = (_f.sent()).created, eventToMove = _c[0], event = _c[1];
+                _c = (_g.sent()).created, eventToMove = _c[0], event = _c[1];
                 return [4 /*yield*/, sdk.api.chat_rooms.createSome([
                         { enduserIds: [source.id], title: 'title' },
                         { enduserIds: [otherEnduser.id], title: 'title' },
                     ])];
             case 4:
-                _d = (_f.sent()).created, roomToMove = _d[0], room = _d[1];
+                _d = (_g.sent()).created, roomToMove = _d[0], room = _d[1];
                 return [4 /*yield*/, sdk.api.chats.createOne({ roomId: roomToMove.id, senderId: source.id, message: 'test' })];
             case 5:
-                chatToMove = _f.sent();
+                chatToMove = _g.sent();
                 return [4 /*yield*/, sdk.api.chats.createOne({
                         roomId: room.id, senderId: otherEnduser.id, message: 'test'
                     })];
             case 6:
-                chat = _f.sent();
+                chat = _g.sent();
                 return [4 /*yield*/, sdk.api.endusers.merge({ sourceEnduserId: source.id, destinationEnduserId: destination.id })];
             case 7:
-                _f.sent();
+                _g.sent();
                 return [4 /*yield*/, async_test("Source is deleted", function () { return sdk.api.endusers.getOne(source.id); }, handleAnyError)];
             case 8:
-                _f.sent();
+                _g.sent();
                 return [4 /*yield*/, async_test("Destination merged", function () { return sdk.api.endusers.getOne(destination.id); }, { onResult: function (e) {
                             var _a, _b, _c, _d, _f, _g, _h, _j, _k, _l, _m;
                             return (e.email === destination.email
@@ -9329,39 +9331,88 @@ var merge_enduser_tests = function () { return __awaiter(void 0, void 0, void 0,
                                 && ((_m = e.insuranceSecondary) === null || _m === void 0 ? void 0 : _m.memberId) === 'src-secondary');
                         } })];
             case 9:
-                _f.sent();
+                _g.sent();
                 return [4 /*yield*/, async_test("Other email is unchanged", function () { return sdk.api.emails.getOne(email.id); }, { onResult: function (e) { return e.enduserId === otherEnduser.id; } })];
             case 10:
-                _f.sent();
+                _g.sent();
                 return [4 /*yield*/, async_test("Other event is unchanged", function () { return sdk.api.calendar_events.getOne(event.id); }, { onResult: function (e) { var _a; return ((_a = e.attendees) === null || _a === void 0 ? void 0 : _a.length) === 1 && !!e.attendees.find(function (e) { return e.id === otherEnduser.id; }); } })];
             case 11:
-                _f.sent();
+                _g.sent();
                 return [4 /*yield*/, async_test("Other room is unchanged", function () { return sdk.api.chat_rooms.getOne(room.id); }, { onResult: function (e) { var _a, _b; return ((_a = room.enduserIds) === null || _a === void 0 ? void 0 : _a.length) === 1 && !!((_b = e.enduserIds) === null || _b === void 0 ? void 0 : _b.find(function (id) { return id === otherEnduser.id; })); } })];
             case 12:
-                _f.sent();
+                _g.sent();
                 return [4 /*yield*/, async_test("Other chat is unchanged", function () { return sdk.api.chats.getOne(chat.id); }, { onResult: function (e) { return e.senderId === otherEnduser.id; } })];
             case 13:
-                _f.sent();
+                _g.sent();
                 return [4 /*yield*/, async_test("Email moved", function () { return sdk.api.emails.getOne(emailToMove.id); }, { onResult: function (e) { return e.enduserId === destination.id; } })];
             case 14:
-                _f.sent();
+                _g.sent();
                 return [4 /*yield*/, async_test("Chat moved", function () { return sdk.api.chats.getOne(chatToMove.id); }, { onResult: function (e) { return e.senderId === destination.id; } })];
             case 15:
-                _f.sent();
+                _g.sent();
                 return [4 /*yield*/, async_test("Room moved", function () { return sdk.api.chat_rooms.getOne(roomToMove.id); }, { onResult: function (e) { var _a, _b; return ((_a = e.enduserIds) === null || _a === void 0 ? void 0 : _a.length) === 1 && !!((_b = e.enduserIds) === null || _b === void 0 ? void 0 : _b.includes(destination.id)); } })];
             case 16:
-                _f.sent();
-                return [4 /*yield*/, async_test("Event moved", function () { return sdk.api.calendar_events.getOne(eventToMove.id); }, { onResult: function (e) { var _a; return e.attendees.length === 1 && !!((_a = e.attendees) === null || _a === void 0 ? void 0 : _a.find(function (a) { return a.id === destination.id; })); } })];
+                _g.sent();
+                return [4 /*yield*/, async_test("Event moved", function () { return sdk.api.calendar_events.getOne(eventToMove.id); }, { onResult: function (e) { var _a; return e.attendees.length === 1 && !!((_a = e.attendees) === null || _a === void 0 ? void 0 : _a.find(function (a) { return a.id === destination.id; })); } })
+                    // merging two endusers that both lack insurance must leave the fields absent, NOT null.
+                    // a stored null breaks every later partial update: those get flattened to dotted paths
+                    // ('insurance.memberId'), and MongoDB rejects a dotted $set under a null parent
+                ];
             case 17:
-                _f.sent();
+                _g.sent();
+                return [4 /*yield*/, sdk.api.endusers.createSome([
+                        { email: 'noins-source@tellescope.com', fname: 'no', lname: 'insurance' },
+                        { email: 'noins-destination@tellescope.com' },
+                    ])];
+            case 18:
+                _f = (_g.sent()).created, noInsuranceSource = _f[0], noInsuranceDestination = _f[1];
+                return [4 /*yield*/, sdk.api.endusers.merge({
+                        sourceEnduserId: noInsuranceSource.id,
+                        destinationEnduserId: noInsuranceDestination.id,
+                    })];
+            case 19:
+                _g.sent();
+                return [4 /*yield*/, async_test("Merged endusers have no null insurance", function () { return sdk.api.endusers.getOne(noInsuranceDestination.id); }, { onResult: function (e) { return e.insurance === undefined && e.insuranceSecondary === undefined; } })];
+            case 20:
+                _g.sent();
+                return [4 /*yield*/, async_test("Partial insurance update applies after merge", function () { return __awaiter(void 0, void 0, void 0, function () {
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0: return [4 /*yield*/, sdk.api.endusers.updateOne(noInsuranceDestination.id, {
+                                        insurance: { memberId: 'M1', payerName: 'Test Payer' },
+                                    })]; // no replaceObjectFields, matching the standard update from the UI
+                                case 1:
+                                    _a.sent(); // no replaceObjectFields, matching the standard update from the UI
+                                    return [4 /*yield*/, sdk.api.endusers.getOne(noInsuranceDestination.id)];
+                                case 2: // no replaceObjectFields, matching the standard update from the UI
+                                return [2 /*return*/, _a.sent()];
+                            }
+                        });
+                    }); }, { onResult: function (e) { var _a, _b; return ((_a = e.insurance) === null || _a === void 0 ? void 0 : _a.memberId) === 'M1' && ((_b = e.insurance) === null || _b === void 0 ? void 0 : _b.payerName) === 'Test Payer'; } })];
+            case 21:
+                _g.sent();
+                return [4 /*yield*/, async_test("Second partial insurance update merges", function () { return __awaiter(void 0, void 0, void 0, function () {
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0: return [4 /*yield*/, sdk.api.endusers.updateOne(noInsuranceDestination.id, { insurance: { groupNumber: 'G1' } })];
+                                case 1:
+                                    _a.sent();
+                                    return [4 /*yield*/, sdk.api.endusers.getOne(noInsuranceDestination.id)];
+                                case 2: return [2 /*return*/, _a.sent()];
+                            }
+                        });
+                    }); }, { onResult: function (e) { var _a, _b; return ((_a = e.insurance) === null || _a === void 0 ? void 0 : _a.groupNumber) === 'G1' && ((_b = e.insurance) === null || _b === void 0 ? void 0 : _b.memberId) === 'M1'; } })];
+            case 22:
+                _g.sent();
                 return [4 /*yield*/, Promise.all([
                         sdk.api.endusers.deleteOne(destination.id),
                         sdk.api.endusers.deleteOne(otherEnduser.id),
+                        sdk.api.endusers.deleteOne(noInsuranceDestination.id),
                         sdk.api.calendar_events.deleteOne(event.id),
                         sdk.api.calendar_events.deleteOne(eventToMove.id),
                     ])];
-            case 18:
-                _f.sent();
+            case 23:
+                _g.sent();
                 return [2 /*return*/];
         }
     });
@@ -10034,31 +10085,32 @@ var pollForResults = function (f, evaluate, intervalInMS, iterations, shouldErro
     });
 };
 var test_ticket_automation_assignment_and_optimization = function () { return __awaiter(void 0, void 0, void 0, function () {
-    var users, journey, queue, foregroundTestCounter, testForegroundTicket, backgroundTestCounter, testBackgroundTicket, enduser, _a, _b, _c;
-    return __generator(this, function (_d) {
-        switch (_d.label) {
+    var users, journey, queue, foregroundTestCounter, testForegroundTicket, backgroundTestCounter, testBackgroundTicket, enduser, HOST_A, HOST_B, appointmentHostInfo, createHostedEvent, e, older, newer, e, older, newer, e, deleted, hosted, e, enduserOnly, hosted, e, older, newer, _a, _b, _c;
+    var _d;
+    return __generator(this, function (_f) {
+        switch (_f.label) {
             case 0:
                 log_header("Ticket Automation / Assignment Tests");
                 return [4 /*yield*/, sdk.api.users.getSome()];
             case 1:
-                users = _d.sent();
+                users = _f.sent();
                 if (users.length < 3)
                     throw new Error("Must have at least 3 users to detect invalid assignment");
                 return [4 /*yield*/, sdk.api.users.updateOne(sdk.userInfo.id, { tags: ['tag1', 'tag2'] })];
             case 2:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, sdk.api.users.updateOne(sdkNonAdmin.userInfo.id, { tags: ['tag1', 'tag3'] })];
             case 3:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, sdk.api.journeys.createOne({ title: "Testing" })];
             case 4:
-                journey = _d.sent();
+                journey = _f.sent();
                 return [4 /*yield*/, sdk.api.ticket_queues.createOne({ title: 'test queue', userIds: [] })];
             case 5:
-                queue = _d.sent();
+                queue = _f.sent();
                 foregroundTestCounter = 0;
                 testForegroundTicket = function (_a) {
-                    var assignedTo = _a.assignedTo, info = _a.info, validOwners = _a.validOwners, enduser = _a.enduser, closedForReason = _a.closedForReason, testDelayedChild = _a.testDelayedChild;
+                    var assignedTo = _a.assignedTo, info = _a.info, validOwners = _a.validOwners, enduser = _a.enduser, closedForReason = _a.closedForReason, testDelayedChild = _a.testDelayedChild, calendarEventId = _a.calendarEventId, ticketOwner = _a.ticketOwner;
                     return __awaiter(void 0, void 0, void 0, function () {
                         var e, _b, step, statusStep, child, ticket;
                         var _c;
@@ -10106,14 +10158,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                                         })];
                                 case 5:
                                     child = _d.sent();
-                                    return [4 /*yield*/, sdk.api.tickets.createOne({
-                                            title: 'foreground ticket',
-                                            enduserId: e.id,
-                                            automationStepId: PLACEHOLDER_ID,
-                                            journeyId: journey.id,
-                                            owner: validOwners[0],
-                                            closedForReason: closedForReason,
-                                        })];
+                                    return [4 /*yield*/, sdk.api.tickets.createOne(__assign({ title: 'foreground ticket', enduserId: e.id, automationStepId: PLACEHOLDER_ID, journeyId: journey.id, owner: ticketOwner !== null && ticketOwner !== void 0 ? ticketOwner : validOwners[0], closedForReason: closedForReason }, (calendarEventId ? { calendarEventId: calendarEventId } : {})))];
                                 case 6:
                                     ticket = _d.sent();
                                     return [4 /*yield*/, async_test("Foreground ticket assignment ".concat(++foregroundTestCounter), function () { return sdk.api.tickets.close_ticket({ ticketId: ticket.id, closedForReason: closedForReason }); }, { onResult: function (_a) {
@@ -10162,7 +10207,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         testDelayedChild: true,
                     })];
             case 6:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testForegroundTicket({
                         assignedTo: [],
                         info: {
@@ -10173,7 +10218,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         testDelayedChild: true,
                     })];
             case 7:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testForegroundTicket({
                         assignedTo: [],
                         info: {
@@ -10185,7 +10230,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         testDelayedChild: true,
                     })];
             case 8:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testForegroundTicket({
                         assignedTo: [],
                         info: {
@@ -10195,7 +10240,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdkNonAdmin.userInfo.id],
                     })];
             case 9:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testForegroundTicket({
                         assignedTo: [],
                         info: {
@@ -10205,7 +10250,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdkNonAdmin.userInfo.id],
                     })];
             case 10:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testForegroundTicket({
                         assignedTo: [sdkNonAdmin.userInfo.id, sdk.userInfo.id],
                         info: {
@@ -10215,7 +10260,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdkNonAdmin.userInfo.id],
                     })];
             case 11:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testForegroundTicket({
                         assignedTo: [sdkNonAdmin.userInfo.id, sdk.userInfo.id],
                         info: {
@@ -10225,7 +10270,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdkNonAdmin.userInfo.id, sdk.userInfo.id],
                     })];
             case 12:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testForegroundTicket({
                         assignedTo: [sdkNonAdmin.userInfo.id, sdk.userInfo.id],
                         info: {
@@ -10235,7 +10280,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdk.userInfo.id, sdkNonAdmin.userInfo.id,],
                     })];
             case 13:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testForegroundTicket({
                         assignedTo: [sdkNonAdmin.userInfo.id, sdk.userInfo.id],
                         info: {
@@ -10245,7 +10290,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdk.userInfo.id],
                     })];
             case 14:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testForegroundTicket({
                         assignedTo: [],
                         info: {
@@ -10255,10 +10300,10 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdkNonAdmin.userInfo.id],
                     })];
             case 15:
-                _d.sent();
+                _f.sent();
                 backgroundTestCounter = 0;
                 testBackgroundTicket = function (_a) {
-                    var assignedTo = _a.assignedTo, info = _a.info, validOwners = _a.validOwners, enduser = _a.enduser;
+                    var assignedTo = _a.assignedTo, info = _a.info, validOwners = _a.validOwners, enduser = _a.enduser, journeyContext = _a.journeyContext;
                     return __awaiter(void 0, void 0, void 0, function () {
                         var e, _b;
                         return __generator(this, function (_c) {
@@ -10272,15 +10317,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                                     _c.label = 2;
                                 case 2:
                                     e = _b;
-                                    return [4 /*yield*/, sdk.api.automated_actions.createOne({
-                                            action: { type: 'createTicket', info: __assign(__assign({}, info), { title: 'background ticket' }) },
-                                            automationStepId: PLACEHOLDER_ID,
-                                            enduserId: e.id,
-                                            event: { type: 'afterAction', info: { automationStepId: PLACEHOLDER_ID, delay: 0, delayInMS: 0, unit: 'Days' } },
-                                            journeyId: journey.id,
-                                            status: 'active',
-                                            processAfter: Date.now(),
-                                        })];
+                                    return [4 /*yield*/, sdk.api.automated_actions.createOne(__assign({ action: { type: 'createTicket', info: __assign(__assign({}, info), { title: 'background ticket' }) }, automationStepId: PLACEHOLDER_ID, enduserId: e.id, event: { type: 'afterAction', info: { automationStepId: PLACEHOLDER_ID, delay: 0, delayInMS: 0, unit: 'Days' } }, journeyId: journey.id, status: 'active', processAfter: Date.now() }, (journeyContext ? { journeyContext: journeyContext } : {})))];
                                 case 3:
                                     _c.sent();
                                     return [4 /*yield*/, async_test("Background ticket assignment ".concat(++backgroundTestCounter), function () { return pollForResults(function () { return sdk.api.tickets.getSome({ filter: { enduserId: e.id, title: 'background ticket' } }); }, function (t) { return !!t.length; }, 500, 20); }, {
@@ -10306,7 +10343,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [],
                     })];
             case 16:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testBackgroundTicket({
                         assignedTo: [],
                         info: {
@@ -10316,7 +10353,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdk.userInfo.id],
                     })];
             case 17:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testBackgroundTicket({
                         assignedTo: [],
                         info: {
@@ -10328,16 +10365,16 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                     // ticket needs existing enduser, previous owner for test to work
                 ];
             case 18:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, sdk.api.endusers.createOne({ fname: 'previous-owner-test' })];
             case 19:
-                enduser = _d.sent();
+                enduser = _f.sent();
                 return [4 /*yield*/, sdk.api.tickets.createOne({
                         // title should be different than 'background test' so it doesn't create false positive test
                         title: 'previous-owner-test', enduserId: enduser.id, journeyId: journey.id, owner: sdkNonAdmin.userInfo.id
                     })];
             case 20:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testBackgroundTicket({
                         assignedTo: [],
                         enduser: enduser,
@@ -10348,7 +10385,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdkNonAdmin.userInfo.id],
                     })];
             case 21:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testBackgroundTicket({
                         assignedTo: [sdkNonAdmin.userInfo.id, sdk.userInfo.id],
                         info: {
@@ -10358,7 +10395,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdkNonAdmin.userInfo.id],
                     })];
             case 22:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testBackgroundTicket({
                         assignedTo: [sdkNonAdmin.userInfo.id, sdk.userInfo.id],
                         info: {
@@ -10368,7 +10405,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdkNonAdmin.userInfo.id, sdk.userInfo.id],
                     })];
             case 23:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testBackgroundTicket({
                         assignedTo: [sdkNonAdmin.userInfo.id, sdk.userInfo.id],
                         info: {
@@ -10378,7 +10415,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdk.userInfo.id, sdkNonAdmin.userInfo.id,],
                     })];
             case 24:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testBackgroundTicket({
                         assignedTo: [sdkNonAdmin.userInfo.id, sdk.userInfo.id],
                         info: {
@@ -10388,7 +10425,7 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                         validOwners: [sdk.userInfo.id],
                     })];
             case 25:
-                _d.sent();
+                _f.sent();
                 return [4 /*yield*/, testBackgroundTicket({
                         assignedTo: [],
                         info: {
@@ -10396,18 +10433,161 @@ var test_ticket_automation_assignment_and_optimization = function () { return __
                             defaultAssignee: sdk.userInfo.id
                         },
                         validOwners: [sdkNonAdmin.userInfo.id],
-                    })];
+                    })
+                    // 'Recently-Booked Appointment Host' assignment
+                    // journeyContext.calendarEventId, when it resolves to a host, takes priority over the legacy
+                    // "newest event for this enduser" lookup. one enduser per case, to avoid trigger throttling.
+                ];
             case 26:
-                _d.sent();
+                _f.sent();
+                HOST_A = sdkNonAdmin.userInfo.id;
+                HOST_B = sdk.userInfo.id;
+                appointmentHostInfo = function (defaultAssignee) { return ({
+                    assignmentStrategy: { type: 'Recently-Booked Appointment Host', info: {} },
+                    defaultAssignee: defaultAssignee,
+                }); };
+                createHostedEvent = function (enduserId, hostId) { return sdk.api.calendar_events.createOne({
+                    title: 'appointment host test',
+                    durationInMinutes: 30,
+                    startTimeInMS: Date.now(),
+                    attendees: [{ type: 'enduser', id: enduserId }, { type: 'user', id: hostId }],
+                }); };
+                return [4 /*yield*/, sdk.api.endusers.createOne({ fields: { Tag: 'tag3' } })];
+            case 27:
+                e = _f.sent();
+                return [4 /*yield*/, createHostedEvent(e.id, HOST_A)];
+            case 28:
+                older = _f.sent();
+                return [4 /*yield*/, createHostedEvent(e.id, HOST_B)]; // higher _id, so legacy sort picks this one
+            case 29:
+                newer = _f.sent() // higher _id, so legacy sort picks this one
+                ;
+                return [4 /*yield*/, testBackgroundTicket({
+                        assignedTo: [],
+                        enduser: e,
+                        info: appointmentHostInfo(HOST_B),
+                        validOwners: [HOST_A],
+                        journeyContext: { calendarEventId: older.id },
+                    })];
+            case 30:
+                _f.sent();
+                return [4 /*yield*/, Promise.all([older, newer].map(function (ev) { return sdk.api.calendar_events.deleteOne(ev.id); }))];
+            case 31:
+                _f.sent();
+                return [4 /*yield*/, sdk.api.endusers.createOne({ fields: { Tag: 'tag3' } })];
+            case 32:
+                e = _f.sent();
+                return [4 /*yield*/, createHostedEvent(e.id, HOST_A)];
+            case 33:
+                older = _f.sent();
+                return [4 /*yield*/, createHostedEvent(e.id, HOST_B)];
+            case 34:
+                newer = _f.sent();
+                return [4 /*yield*/, testBackgroundTicket({
+                        assignedTo: [],
+                        enduser: e,
+                        info: appointmentHostInfo(HOST_A),
+                        validOwners: [HOST_B], // newest created event's host
+                    })];
+            case 35:
+                _f.sent();
+                return [4 /*yield*/, Promise.all([older, newer].map(function (ev) { return sdk.api.calendar_events.deleteOne(ev.id); }))];
+            case 36:
+                _f.sent();
+                return [4 /*yield*/, sdk.api.endusers.createOne({ fields: { Tag: 'tag3' } })];
+            case 37:
+                e = _f.sent();
+                return [4 /*yield*/, createHostedEvent(e.id, HOST_B)];
+            case 38:
+                deleted = _f.sent();
+                return [4 /*yield*/, sdk.api.calendar_events.deleteOne(deleted.id)];
+            case 39:
+                _f.sent();
+                return [4 /*yield*/, createHostedEvent(e.id, HOST_A)];
+            case 40:
+                hosted = _f.sent();
+                return [4 /*yield*/, testBackgroundTicket({
+                        assignedTo: [],
+                        enduser: e,
+                        info: appointmentHostInfo(HOST_B),
+                        validOwners: [HOST_A],
+                        journeyContext: { calendarEventId: deleted.id },
+                    })];
+            case 41:
+                _f.sent();
+                return [4 /*yield*/, sdk.api.calendar_events.deleteOne(hosted.id)];
+            case 42:
+                _f.sent();
+                return [4 /*yield*/, sdk.api.endusers.createOne({ fields: { Tag: 'tag3' } })];
+            case 43:
+                e = _f.sent();
+                return [4 /*yield*/, sdk.api.calendar_events.createOne({
+                        title: 'appointment host test, no host',
+                        durationInMinutes: 30,
+                        startTimeInMS: Date.now(),
+                        attendees: [{ type: 'enduser', id: e.id }],
+                    })];
+            case 44:
+                enduserOnly = _f.sent();
+                return [4 /*yield*/, createHostedEvent(e.id, HOST_A)];
+            case 45:
+                hosted = _f.sent();
+                return [4 /*yield*/, testBackgroundTicket({
+                        assignedTo: [],
+                        enduser: e,
+                        info: appointmentHostInfo(HOST_B),
+                        validOwners: [HOST_A],
+                        journeyContext: { calendarEventId: enduserOnly.id },
+                    })];
+            case 46:
+                _f.sent();
+                return [4 /*yield*/, Promise.all([enduserOnly, hosted].map(function (ev) { return sdk.api.calendar_events.deleteOne(ev.id); }))];
+            case 47:
+                _f.sent();
+                // no events at all -> no resolvable host, so defaultAssignee wins
+                return [4 /*yield*/, testBackgroundTicket({
+                        assignedTo: [],
+                        info: appointmentHostInfo(HOST_A),
+                        validOwners: [HOST_A],
+                    })
+                    // api path: close_ticket copies the original ticket's calendarEventId into journeyContext
+                ];
+            case 48:
+                // no events at all -> no resolvable host, so defaultAssignee wins
+                _f.sent();
+                return [4 /*yield*/, sdk.api.endusers.createOne({
+                        journeys: (_d = {}, _d[journey.id] = '', _d), fields: { Tag: 'tag3' },
+                    })];
+            case 49:
+                e = _f.sent();
+                return [4 /*yield*/, createHostedEvent(e.id, HOST_A)];
+            case 50:
+                older = _f.sent();
+                return [4 /*yield*/, createHostedEvent(e.id, HOST_B)];
+            case 51:
+                newer = _f.sent();
+                return [4 /*yield*/, testForegroundTicket({
+                        assignedTo: [],
+                        enduser: e,
+                        info: appointmentHostInfo(HOST_B),
+                        validOwners: [HOST_A],
+                        calendarEventId: older.id,
+                        ticketOwner: HOST_B, // so a previous-owner style fallback would also fail
+                    })];
+            case 52:
+                _f.sent();
+                return [4 /*yield*/, Promise.all([older, newer].map(function (ev) { return sdk.api.calendar_events.deleteOne(ev.id); }))];
+            case 53:
+                _f.sent();
                 _b = (_a = Promise).all;
                 return [4 /*yield*/, sdk.api.journeys.deleteOne(journey.id)];
-            case 27:
+            case 54:
                 _c = [
-                    _d.sent()
+                    _f.sent()
                 ];
                 return [4 /*yield*/, sdk.api.ticket_queues.deleteOne(queue.id)];
-            case 28: return [2 /*return*/, _b.apply(_a, [_c.concat([
-                        _d.sent()
+            case 55: return [2 /*return*/, _b.apply(_a, [_c.concat([
+                        _f.sent()
                     ])])];
         }
     });
@@ -15573,7 +15753,7 @@ var replace_enduser_template_values_tests = function () { return __awaiter(void
     });
 }); };
 var replace_form_field_template_values_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
-    var enduserWithMultilineField, enduserWithLiteralEscapeField, enduserWithCRLFField;
+    var enduserWithMultilineField, enduserWithLiteralEscapeField, enduserWithCRLFField, enduserWithMarkupField, escaped, enduserWithMarkupAndNewline, enduserWithAmpersand;
     return __generator(this, function (_a) {
         log_header("Replace Form Field Template Values Tests");
         enduserWithMultilineField = {
@@ -15601,6 +15781,21 @@ var replace_form_field_template_values_tests = function () { return __awaiter(vo
             fields: { Locations: 'NYC\r\nSF\r\nLA' },
         };
         assert(replace_form_field_template_values('<p>Locations: {{enduser.Locations}}</p>', { enduser: enduserWithCRLFField, escapeNewlinesAsHTMLBreaks: true }) === '<p>Locations: NYC<br />SF<br />LA</p>', 'fail CRLF in substituted value', 'CRLF in substituted value');
+        enduserWithMarkupField = {
+            fname: "Multi",
+            fields: { Injected: '<iframe src="https://evil.example"></iframe>' },
+        };
+        escaped = replace_form_field_template_values('<p>{{enduser.Injected}}</p>', { enduser: enduserWithMarkupField, escapeNewlinesAsHTMLBreaks: true, escapeHTMLValues: true });
+        assert(escaped.includes('&lt;iframe') && !escaped.includes('<iframe'), 'fail escapeHTMLValues escapes markup', 'escapeHTMLValues escapes markup');
+        enduserWithMarkupAndNewline = {
+            fields: { Mixed: 'a<b\nc&d' },
+        };
+        assert(replace_form_field_template_values('{{enduser.Mixed}}', { enduser: enduserWithMarkupAndNewline, escapeNewlinesAsHTMLBreaks: true, escapeHTMLValues: true }) === 'a&lt;b<br />c&amp;d', 'fail escapeHTMLValues ordering vs newline breaks', 'escapeHTMLValues ordering vs newline breaks');
+        enduserWithAmpersand = {
+            fields: { Practice: 'Smith & Jones <Cardiology>' },
+        };
+        assert(replace_form_field_template_values('Practice: {{enduser.Practice}}', { enduser: enduserWithAmpersand }) === 'Practice: Smith & Jones <Cardiology>', 'fail no escaping without the flag', 'no escaping without the flag');
+        assert(replace_form_field_template_values('Practice: {{enduser.Practice}}', { enduser: enduserWithAmpersand, escapeHTMLValues: true }) === 'Practice: Smith &amp; Jones &lt;Cardiology&gt;', 'fail escaping with the flag', 'escaping with the flag');
         return [2 /*return*/];
     });
 }); };
@@ -16975,7 +17170,7 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
                 assert(truncate_string(null, { length: 4, showEllipsis: false }) === '', 'truncate doesnt work for non string', 'trucate works for non-string');
                 _l.label = 2;
             case 2:
-                _l.trys.push([2, 174, , 175]);
+                _l.trys.push([2, 176, , 177]);
                 get_next_reminder_timestamp_tests();
                 form_conditional_logic_tests();
                 return [4 /*yield*/, test_weighted_round_robin()];
@@ -17212,387 +17407,393 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
                 return [4 /*yield*/, sanitize_user_html_xss_tests()];
             case 48:
                 _l.sent();
-                return [4 /*yield*/, prototype_pollution_tests()];
+                return [4 /*yield*/, sanitize_user_html_with_iframes_tests()];
             case 49:
                 _l.sent();
-                return [4 /*yield*/, account_switcher_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, prototype_pollution_tests()];
             case 50:
                 _l.sent();
-                return [4 /*yield*/, totp_mfa_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, account_switcher_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 51:
                 _l.sent();
-                return [4 /*yield*/, enduser_login_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, totp_mfa_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 52:
                 _l.sent();
-                return [4 /*yield*/, outbound_chat_sent_trigger_tests({ sdk: sdk })];
+                return [4 /*yield*/, enduser_login_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 53:
                 _l.sent();
-                return [4 /*yield*/, enduser_cross_access_isolation_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, outbound_chat_sent_trigger_tests({ sdk: sdk })];
             case 54:
                 _l.sent();
-                return [4 /*yield*/, eom_procedure_codes_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, enduser_cross_access_isolation_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 55:
                 _l.sent();
-                return [4 /*yield*/, cross_org_api_key_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, eom_procedure_codes_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 56:
                 _l.sent();
-                return [4 /*yield*/, organization_api_keys_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, cross_org_api_key_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 57:
                 _l.sent();
-                return [4 /*yield*/, scoped_api_keys_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, organization_api_keys_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 58:
                 _l.sent();
-                return [4 /*yield*/, organization_settings_duplicates_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, scoped_api_keys_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 59:
                 _l.sent();
-                return [4 /*yield*/, enduser_session_invalidation_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, organization_settings_duplicates_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 60:
                 _l.sent();
-                return [4 /*yield*/, chats_analytics_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, enduser_session_invalidation_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 61:
                 _l.sent();
-                return [4 /*yield*/, field_redaction_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, chats_analytics_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 62:
                 _l.sent();
-                return [4 /*yield*/, form_submitted_trigger_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, field_redaction_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 63:
                 _l.sent();
-                return [4 /*yield*/, dont_sync_to_elation_form_submission_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, form_submitted_trigger_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 64:
                 _l.sent();
-                return [4 /*yield*/, date_string_validation_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, dont_sync_to_elation_form_submission_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 65:
                 _l.sent();
-                return [4 /*yield*/, phone_tree_enduser_condition_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, date_string_validation_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 66:
                 _l.sent();
-                return [4 /*yield*/, openloop_webhooks_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, phone_tree_enduser_condition_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 67:
                 _l.sent();
-                return [4 /*yield*/, mdi_webhooks_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, openloop_webhooks_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 68:
                 _l.sent();
-                return [4 /*yield*/, integrations_redacted_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, mdi_webhooks_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 69:
                 _l.sent();
-                return [4 /*yield*/, healthie_multi_integration_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, integrations_redacted_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 70:
                 _l.sent();
-                return [4 /*yield*/, mdb_sort_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, healthie_multi_integration_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 71:
                 _l.sent();
-                return [4 /*yield*/, search_tests()];
+                return [4 /*yield*/, mdb_sort_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 72:
                 _l.sent();
-                return [4 /*yield*/, time_tracks_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, search_tests()];
             case 73:
                 _l.sent();
-                return [4 /*yield*/, time_tracks_historical_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, time_tracks_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 74:
                 _l.sent();
-                return [4 /*yield*/, time_tracks_correction_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, time_tracks_historical_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 75:
                 _l.sent();
-                return [4 /*yield*/, time_tracks_review_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, time_tracks_correction_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 76:
                 _l.sent();
-                return [4 /*yield*/, time_tracks_lock_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, time_tracks_review_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 77:
                 _l.sent();
-                return [4 /*yield*/, time_tracks_edge_case_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, time_tracks_lock_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 78:
                 _l.sent();
-                return [4 /*yield*/, time_tracks_resubmit_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, time_tracks_edge_case_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 79:
                 _l.sent();
-                return [4 /*yield*/, time_tracks_appointment_duration_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, time_tracks_resubmit_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 80:
                 _l.sent();
-                return [4 /*yield*/, calendar_event_limits_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, time_tracks_appointment_duration_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 81:
                 _l.sent();
-                return [4 /*yield*/, get_some_projection_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, calendar_event_limits_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 82:
                 _l.sent();
-                return [4 /*yield*/, elation_user_id_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, get_some_projection_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 83:
                 _l.sent();
-                return [4 /*yield*/, concurrent_build_threads_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, file_download_unicode_names_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 84:
                 _l.sent();
-                return [4 /*yield*/, custom_aggregation_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, elation_user_id_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 85:
                 _l.sent();
-                return [4 /*yield*/, no_access_permission_checks_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, concurrent_build_threads_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 86:
                 _l.sent();
-                return [4 /*yield*/, enduser_tests()];
+                return [4 /*yield*/, custom_aggregation_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 87:
                 _l.sent();
-                return [4 /*yield*/, form_started_trigger_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, no_access_permission_checks_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 88:
                 _l.sent();
-                return [4 /*yield*/, load_team_chat_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, enduser_tests()];
             case 89:
                 _l.sent();
-                return [4 /*yield*/, ai_conversations_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, form_started_trigger_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 90:
                 _l.sent();
-                return [4 /*yield*/, inbox_thread_assignment_updates_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, load_team_chat_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 91:
                 _l.sent();
-                return [4 /*yield*/, inbox_thread_draft_scheduled_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, ai_conversations_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 92:
                 _l.sent();
-                return [4 /*yield*/, load_threads_autobuild_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, inbox_thread_assignment_updates_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 93:
                 _l.sent();
-                return [4 /*yield*/, inbox_threads_new_fields_tests()];
+                return [4 /*yield*/, inbox_thread_draft_scheduled_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 94:
                 _l.sent();
-                return [4 /*yield*/, auto_merge_form_submission_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, load_threads_autobuild_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 95:
                 _l.sent();
-                return [4 /*yield*/, threadKeyTests()];
+                return [4 /*yield*/, inbox_threads_new_fields_tests()];
             case 96:
                 _l.sent();
-                return [4 /*yield*/, managed_content_enduser_access_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, auto_merge_form_submission_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 97:
                 _l.sent();
-                return [4 /*yield*/, managed_content_file_access_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, threadKeyTests()];
             case 98:
                 _l.sent();
-                return [4 /*yield*/, afteraction_day_of_month_delay_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, managed_content_enduser_access_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 99:
                 _l.sent();
-                return [4 /*yield*/, bulk_assignment_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, managed_content_file_access_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 100:
                 _l.sent();
-                return [4 /*yield*/, formsort_tests()];
+                return [4 /*yield*/, afteraction_day_of_month_delay_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 101:
                 _l.sent();
-                return [4 /*yield*/, formsort_header_auth_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, bulk_assignment_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 102:
                 _l.sent();
-                return [4 /*yield*/, self_serve_appointment_booking_tests()];
+                return [4 /*yield*/, formsort_tests()];
             case 103:
                 _l.sent();
-                return [4 /*yield*/, test_ticket_automation_assignment_and_optimization()];
+                return [4 /*yield*/, formsort_header_auth_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 104:
                 _l.sent();
-                return [4 /*yield*/, monthly_availability_restrictions_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, self_serve_appointment_booking_tests()];
             case 105:
                 _l.sent();
-                return [4 /*yield*/, journey_error_branching_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, test_ticket_automation_assignment_and_optimization()];
             case 106:
                 _l.sent();
-                return [4 /*yield*/, journey_delete_cancels_actions_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, monthly_availability_restrictions_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 107:
                 _l.sent();
-                return [4 /*yield*/, message_assignment_trigger_tests({ sdk: sdk })];
+                return [4 /*yield*/, journey_error_branching_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 108:
                 _l.sent();
-                return [4 /*yield*/, inbox_threads_building_tests()];
+                return [4 /*yield*/, journey_delete_cancels_actions_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 109:
                 _l.sent();
-                return [4 /*yield*/, inbox_threads_loading_tests()];
+                return [4 /*yield*/, message_assignment_trigger_tests({ sdk: sdk })];
             case 110:
                 _l.sent();
-                return [4 /*yield*/, load_inbox_data_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, inbox_threads_building_tests()];
             case 111:
                 _l.sent();
-                return [4 /*yield*/, phone_calls_cold_transfer_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, inbox_threads_loading_tests()];
             case 112:
                 _l.sent();
-                return [4 /*yield*/, enduser_observations_acknowledge_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, load_inbox_data_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 113:
                 _l.sent();
-                return [4 /*yield*/, nutrition_tracking_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, phone_calls_cold_transfer_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 114:
                 _l.sent();
-                return [4 /*yield*/, translations_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, enduser_observations_acknowledge_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 115:
                 _l.sent();
-                return [4 /*yield*/, create_user_notifications_trigger_tests({ sdk: sdk })];
+                return [4 /*yield*/, nutrition_tracking_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 116:
                 _l.sent();
-                return [4 /*yield*/, group_mms_active_tests()];
+                return [4 /*yield*/, translations_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 117:
                 _l.sent();
-                return [4 /*yield*/, auto_reply_tests()];
+                return [4 /*yield*/, create_user_notifications_trigger_tests({ sdk: sdk })];
             case 118:
                 _l.sent();
-                return [4 /*yield*/, relationships_tests()];
+                return [4 /*yield*/, group_mms_active_tests()];
             case 119:
                 _l.sent();
-                return [4 /*yield*/, rate_limit_tests()];
+                return [4 /*yield*/, auto_reply_tests()];
             case 120:
                 _l.sent();
-                return [4 /*yield*/, ip_address_form_tests()];
+                return [4 /*yield*/, relationships_tests()];
             case 121:
                 _l.sent();
-                return [4 /*yield*/, bulk_update_tests()];
+                return [4 /*yield*/, rate_limit_tests()];
             case 122:
                 _l.sent();
-                return [4 /*yield*/, calendar_events_bulk_update_tests({ sdk: sdk })];
+                return [4 /*yield*/, ip_address_form_tests()];
             case 123:
                 _l.sent();
-                return [4 /*yield*/, calendar_event_references_update_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
+                return [4 /*yield*/, bulk_update_tests()];
             case 124:
                 _l.sent();
-                return [4 /*yield*/, cancel_upcoming_appointments_journey_action_test()];
+                return [4 /*yield*/, calendar_events_bulk_update_tests({ sdk: sdk })];
             case 125:
                 _l.sent();
-                return [4 /*yield*/, multi_tenant_tests()]; // should come right after setup tests
+                return [4 /*yield*/, calendar_event_references_update_tests({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
             case 126:
+                _l.sent();
+                return [4 /*yield*/, cancel_upcoming_appointments_journey_action_test()];
+            case 127:
+                _l.sent();
+                return [4 /*yield*/, multi_tenant_tests()]; // should come right after setup tests
+            case 128:
                 _l.sent(); // should come right after setup tests
                 return [4 /*yield*/, sync_tests_with_access_tags()]; // should come directly after setup to avoid extra sync values
-            case 127:
+            case 129:
                 _l.sent(); // should come directly after setup to avoid extra sync values
                 return [4 /*yield*/, sync_tests()]; // should come directly after setup to avoid extra sync values
-            case 128:
+            case 130:
                 _l.sent(); // should come directly after setup to avoid extra sync values
                 return [4 /*yield*/, get_templated_message_tests()];
-            case 129:
+            case 131:
                 _l.sent();
                 return [4 /*yield*/, updatedAt_tests()];
-            case 130:
+            case 132:
                 _l.sent();
                 return [4 /*yield*/, file_source_tests()];
-            case 131:
+            case 133:
                 _l.sent();
                 return [4 /*yield*/, enduser_access_tags_tests()];
-            case 132:
+            case 134:
                 _l.sent();
                 return [4 /*yield*/, enduserAccessTests()];
-            case 133:
+            case 135:
                 _l.sent();
                 return [4 /*yield*/, test_form_response_search()];
-            case 134:
+            case 136:
                 _l.sent();
                 return [4 /*yield*/, date_parsing_tests()];
-            case 135:
+            case 137:
                 _l.sent();
                 return [4 /*yield*/, fromEmailOverride_tests()];
-            case 136:
+            case 138:
                 _l.sent();
                 return [4 /*yield*/, ticket_tests()];
-            case 137:
+            case 139:
                 _l.sent();
                 return [4 /*yield*/, uniqueness_tests()];
-            case 138:
+            case 140:
                 _l.sent();
                 return [4 /*yield*/, enduser_orders_tests()];
-            case 139:
+            case 141:
                 _l.sent();
                 return [4 /*yield*/, calendar_event_care_team_tests()];
-            case 140:
+            case 142:
                 _l.sent();
                 return [4 /*yield*/, merge_enduser_tests()];
-            case 141:
+            case 143:
                 _l.sent();
                 return [4 /*yield*/, input_modifier_tests()];
-            case 142:
+            case 144:
                 _l.sent();
                 return [4 /*yield*/, switch_to_related_contacts_tests()];
-            case 143:
+            case 145:
                 _l.sent();
                 return [4 /*yield*/, redaction_tests()];
-            case 144:
+            case 146:
                 _l.sent();
                 return [4 /*yield*/, no_chained_triggers_tests()];
-            case 145:
+            case 147:
                 _l.sent();
                 return [4 /*yield*/, mdb_filter_tests()];
-            case 146:
+            case 148:
                 _l.sent();
                 return [4 /*yield*/, superadmin_tests()];
-            case 147:
+            case 149:
                 _l.sent();
                 return [4 /*yield*/, ticket_queue_tests()];
-            case 148:
+            case 150:
                 _l.sent();
                 return [4 /*yield*/, vital_trigger_tests()];
-            case 149:
+            case 151:
                 _l.sent();
                 return [4 /*yield*/, close_reasons_no_duplicates_tests()];
-            case 150:
+            case 152:
                 _l.sent();
                 return [4 /*yield*/, register_as_enduser_tests()];
-            case 151:
+            case 153:
                 _l.sent();
                 return [4 /*yield*/, lockout_tests()];
-            case 152:
+            case 154:
                 _l.sent();
                 return [4 /*yield*/, delete_user_tests()
                     // await test_send_with_template()
                 ];
-            case 153:
+            case 155:
                 _l.sent();
                 // await test_send_with_template()
                 return [4 /*yield*/, bulk_read_tests()];
-            case 154:
+            case 156:
                 // await test_send_with_template()
                 _l.sent();
                 return [4 /*yield*/, ticket_reminder_tests()];
-            case 155:
+            case 157:
                 _l.sent();
                 return [4 /*yield*/, marketing_email_unsubscribe_tests()];
-            case 156:
+            case 158:
                 _l.sent();
                 return [4 /*yield*/, unique_strings_tests()];
-            case 157:
+            case 159:
                 _l.sent();
                 return [4 /*yield*/, alternate_phones_tests()];
-            case 158:
+            case 160:
                 _l.sent();
                 return [4 /*yield*/, role_based_access_tests()];
-            case 159:
+            case 161:
                 _l.sent();
                 return [4 /*yield*/, enduser_session_tests()];
-            case 160:
+            case 162:
                 _l.sent();
                 return [4 /*yield*/, nextReminderInMS_tests()];
-            case 161:
+            case 163:
                 _l.sent();
                 return [4 /*yield*/, wait_for_trigger_tests()];
-            case 162:
+            case 164:
                 _l.sent();
                 return [4 /*yield*/, pdf_generation()];
-            case 163:
+            case 165:
                 _l.sent();
                 return [4 /*yield*/, remove_from_journey_on_incoming_comms_tests().catch(console.error)]; // timing is unreliable, uncomment if changing logic
-            case 164:
+            case 166:
                 _l.sent(); // timing is unreliable, uncomment if changing logic
                 return [4 /*yield*/, sub_organization_enduser_tests()];
-            case 165:
+            case 167:
                 _l.sent();
                 return [4 /*yield*/, sub_organization_tests()];
-            case 166:
+            case 168:
                 _l.sent();
                 return [4 /*yield*/, filter_by_date_tests()];
-            case 167:
+            case 169:
                 _l.sent();
                 return [4 /*yield*/, generate_user_auth_tests()];
-            case 168:
+            case 170:
                 _l.sent();
                 return [4 /*yield*/, generateEnduserAuthTests()];
-            case 169:
+            case 171:
                 _l.sent();
                 return [4 /*yield*/, public_form_tests()];
-            case 170:
+            case 172:
                 _l.sent();
                 return [4 /*yield*/, badInputTests()];
-            case 171:
+            case 173:
                 _l.sent();
                 return [4 /*yield*/, filterTests()];
-            case 172:
+            case 174:
                 _l.sent();
                 return [4 /*yield*/, updatesTests()];
-            case 173:
+            case 175:
                 _l.sent();
-                return [3 /*break*/, 175];
-            case 174:
+                return [3 /*break*/, 177];
+            case 176:
                 err_1 = _l.sent();
                 console.error("Failed during custom test");
                 if (err_1.message && err_1.info) {
@@ -17602,18 +17803,18 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
                     console.error(err_1);
                 }
                 process.exit(1);
-                return [3 /*break*/, 175];
-            case 175:
+                return [3 /*break*/, 177];
+            case 177:
                 _a = schema;
                 _b = [];
                 for (_c in _a)
                     _b.push(_c);
                 _i = 0;
-                _l.label = 176;
-            case 176:
-                if (!(_i < _b.length)) return [3 /*break*/, 179];
+                _l.label = 178;
+            case 178:
+                if (!(_i < _b.length)) return [3 /*break*/, 181];
                 _c = _b[_i];
-                if (!(_c in _a)) return [3 /*break*/, 178];
+                if (!(_c in _a)) return [3 /*break*/, 180];
                 n = _c;
                 returnValidation = (_k = (_j = schema[n].customActions) === null || _j === void 0 ? void 0 : _j.create) === null || _k === void 0 ? void 0 : _k.returns;
                 return [4 /*yield*/, run_generated_tests({
@@ -17624,41 +17825,41 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
                             create: returnValidation // ModelFields<ClientModel>,
                         }
                     })];
-            case 177:
+            case 179:
                 _l.sent();
-                _l.label = 178;
-            case 178:
+                _l.label = 180;
+            case 180:
                 _i++;
-                return [3 /*break*/, 176];
-            case 179:
+                return [3 /*break*/, 178];
+            case 181:
                 _d = tests;
                 _f = [];
                 for (_g in _d)
                     _f.push(_g);
                 _h = 0;
-                _l.label = 180;
-            case 180:
-                if (!(_h < _f.length)) return [3 /*break*/, 185];
+                _l.label = 182;
+            case 182:
+                if (!(_h < _f.length)) return [3 /*break*/, 187];
                 _g = _f[_h];
-                if (!(_g in _d)) return [3 /*break*/, 184];
+                if (!(_g in _d)) return [3 /*break*/, 186];
                 t = _g;
-                _l.label = 181;
-            case 181:
-                _l.trys.push([181, 183, , 184]);
+                _l.label = 183;
+            case 183:
+                _l.trys.push([183, 185, , 186]);
                 return [4 /*yield*/, tests[t]()];
-            case 182:
+            case 184:
                 _l.sent();
-                return [3 /*break*/, 184];
-            case 183:
+                return [3 /*break*/, 186];
+            case 185:
                 err_2 = _l.sent();
                 console.error("Error running test:");
                 console.error(err_2);
                 process.exit(1);
-                return [3 /*break*/, 184];
-            case 184:
+                return [3 /*break*/, 186];
+            case 186:
                 _h++;
-                return [3 /*break*/, 180];
-            case 185:
+                return [3 /*break*/, 182];
+            case 187:
                 process.exit();
                 return [2 /*return*/];
         }