@tellescope/sdk 1.255.6 → 1.255.8

package/lib/cjs/tests/api_tests/gmail_sync_related_contact_emails.test.js

@@ -0,0 +1,183 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gmail_sync_related_contact_emails_tests = void 0;
+require('source-map-support').install();
+var sdk_1 = require("../../sdk");
+var testing_1 = require("@tellescope/testing");
+var setup_1 = require("../setup");
+var host = process.env.API_URL || 'http://localhost:8080';
+// Builds the same related-contact-scoped mdbFilter the EnduserProfile Emails tab (useEmailThreads)
+// constructs on the client — anchored on enduserId so the address scan only runs across a related
+// contact's emails. This exercises the display/read path for CU-86e23ffay without a live Gmail sync.
+var buildRelatedContactFilter = function (_a) {
+    var enduserId = _a.enduserId, relatedIds = _a.relatedIds, addresses = _a.addresses;
+    return ({
+        $and: [{
+                $or: [
+                    { enduserId: enduserId },
+                    { enduserId: { $in: relatedIds }, $or: [
+                            { source: { $in: addresses } },
+                            { destination: { $in: addresses } },
+                            { cc: { $in: addresses } },
+                        ] },
+                ],
+            }],
+    });
+};
+// Main test function that can be called independently
+var gmail_sync_related_contact_emails_tests = function (_a) {
+    var sdk = _a.sdk;
+    return __awaiter(void 0, void 0, void 0, function () {
+        var unique, careAddress, husbandAddress, wifeAddress, strangerAddress, createdEnduserIds, createdEmailIds, wife, husband, stranger, wifeReloaded, relatedIds, husbandEmail_1, strangerEmail_1, wifeFilter, wifeEmails, husbandOwn;
+        var _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0:
+                    (0, testing_1.log_header)("Gmail Sync — Related Contact Email Association Tests");
+                    unique = Date.now();
+                    careAddress = "care-team+".concat(unique, "@example.com").toLowerCase();
+                    husbandAddress = "husband+".concat(unique, "@example.com").toLowerCase();
+                    wifeAddress = "wife+".concat(unique, "@example.com").toLowerCase();
+                    strangerAddress = "stranger+".concat(unique, "@example.com").toLowerCase();
+                    createdEnduserIds = [];
+                    createdEmailIds = [];
+                    _c.label = 1;
+                case 1:
+                    _c.trys.push([1, , 10, 13]);
+                    return [4 /*yield*/, sdk.api.endusers.createOne({ fname: 'Wife', email: wifeAddress })];
+                case 2:
+                    wife = _c.sent();
+                    return [4 /*yield*/, sdk.api.endusers.createOne({
+                            fname: 'Husband', email: husbandAddress,
+                            relationships: [{ type: 'Spouse', id: wife.id }],
+                        })
+                        // An unrelated third contact who also appears (CC'd) on an unrelated email
+                    ];
+                case 3:
+                    husband = _c.sent();
+                    return [4 /*yield*/, sdk.api.endusers.createOne({ fname: 'Stranger', email: strangerAddress })];
+                case 4:
+                    stranger = _c.sent();
+                    createdEnduserIds.push(wife.id, husband.id, stranger.id);
+                    return [4 /*yield*/, sdk.api.endusers.getOne(wife.id)];
+                case 5:
+                    wifeReloaded = _c.sent();
+                    relatedIds = ((_b = wifeReloaded.relationships) !== null && _b !== void 0 ? _b : []).map(function (r) { return r.id; });
+                    (0, testing_1.assert)(relatedIds.includes(husband.id), "Wife's relationships did not include Husband after bidirectional sync", "Relationship bidirectionally synced onto Wife");
+                    return [4 /*yield*/, sdk.api.emails.createOne({
+                            enduserId: husband.id,
+                            subject: "Husband to care team ".concat(unique),
+                            textContent: 'inbound from husband, wife cc',
+                            cc: [wifeAddress],
+                            inbound: true,
+                            logOnly: true,
+                        })];
+                case 6:
+                    husbandEmail_1 = _c.sent();
+                    createdEmailIds.push(husbandEmail_1.id);
+                    return [4 /*yield*/, sdk.api.emails.createOne({
+                            enduserId: stranger.id,
+                            subject: "Stranger email ".concat(unique),
+                            textContent: 'unrelated contact, wife cc',
+                            cc: [wifeAddress],
+                            inbound: true,
+                            logOnly: true,
+                        })];
+                case 7:
+                    strangerEmail_1 = _c.sent();
+                    createdEmailIds.push(strangerEmail_1.id);
+                    wifeFilter = buildRelatedContactFilter({
+                        enduserId: wife.id,
+                        relatedIds: relatedIds,
+                        addresses: [wifeAddress],
+                    });
+                    return [4 /*yield*/, sdk.api.emails.getSome({ mdbFilter: wifeFilter })];
+                case 8:
+                    wifeEmails = _c.sent();
+                    (0, testing_1.assert)(!!wifeEmails.find(function (e) { return e.id === husbandEmail_1.id; }), "Husband's email (Wife CC'd) did NOT surface on Wife's related-contact query", "Husband's CC'd email cross-surfaces on Wife via related-contact match");
+                    (0, testing_1.assert)(!wifeEmails.find(function (e) { return e.id === strangerEmail_1.id; }), "Unrelated stranger email incorrectly cross-surfaced on Wife", "Unrelated contact's email does NOT cross-surface (control)");
+                    return [4 /*yield*/, sdk.api.emails.getSome({ filter: { enduserId: husband.id } })];
+                case 9:
+                    husbandOwn = _c.sent();
+                    (0, testing_1.assert)(!!husbandOwn.find(function (e) { return e.id === husbandEmail_1.id; }), "Husband's own email missing from his single-enduserId load", "Normal 1:1 load still returns the email on its owning contact");
+                    return [3 /*break*/, 13];
+                case 10: 
+                // Cleanup
+                return [4 /*yield*/, Promise.all(createdEmailIds.map(function (id) { return sdk.api.emails.deleteOne(id).catch(function () { }); }))];
+                case 11:
+                    // Cleanup
+                    _c.sent();
+                    return [4 /*yield*/, Promise.all(createdEnduserIds.map(function (id) { return sdk.api.endusers.deleteOne(id).catch(function () { }); }))];
+                case 12:
+                    _c.sent();
+                    return [7 /*endfinally*/];
+                case 13: return [2 /*return*/];
+            }
+        });
+    });
+};
+exports.gmail_sync_related_contact_emails_tests = gmail_sync_related_contact_emails_tests;
+// Allow running this test file independently
+if (require.main === module) {
+    var sdk_2 = new sdk_1.Session({ host: host });
+    var sdkNonAdmin_1 = new sdk_1.Session({ host: host });
+    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, setup_1.setup_tests)(sdk_2, sdkNonAdmin_1)];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, (0, exports.gmail_sync_related_contact_emails_tests)({ sdk: sdk_2, sdkNonAdmin: sdkNonAdmin_1 })];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); };
+    runTests()
+        .then(function () {
+        console.log("✅ Gmail sync related contact emails test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ Gmail sync related contact emails test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=gmail_sync_related_contact_emails.test.js.map

package/lib/cjs/tests/api_tests/gmail_sync_related_contact_emails.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gmail_sync_related_contact_emails.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/gmail_sync_related_contact_emails.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,iCAAmC;AACnC,+CAG4B;AAC5B,kCAAsC;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,mGAAmG;AACnG,kGAAkG;AAClG,qGAAqG;AACrG,IAAM,yBAAyB,GAAG,UAAC,EAElC;QAFoC,SAAS,eAAA,EAAE,UAAU,gBAAA,EAAE,SAAS,eAAA;IAE/D,OAAA,CAAC;QACL,IAAI,EAAE,CAAC;gBACL,GAAG,EAAE;oBACH,EAAE,SAAS,WAAA,EAAE;oBACb,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE;4BACrC,EAAE,MAAM,EAAO,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;4BACnC,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;4BACnC,EAAE,EAAE,EAAW,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;yBACpC,EAAE;iBACJ;aACF,CAAC;KACH,CAAC;AAXI,CAWJ,CAAA;AAEF,sDAAsD;AAC/C,IAAM,uCAAuC,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;;oBACjE,IAAA,oBAAU,EAAC,sDAAsD,CAAC,CAAA;oBAE5D,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;oBACnB,WAAW,GAAG,oBAAa,MAAM,iBAAc,CAAC,WAAW,EAAE,CAAA;oBAC7D,cAAc,GAAG,kBAAW,MAAM,iBAAc,CAAC,WAAW,EAAE,CAAA;oBAC9D,WAAW,GAAG,eAAQ,MAAM,iBAAc,CAAC,WAAW,EAAE,CAAA;oBACxD,eAAe,GAAG,mBAAY,MAAM,iBAAc,CAAC,WAAW,EAAE,CAAA;oBAEhE,iBAAiB,GAAa,EAAE,CAAA;oBAChC,eAAe,GAAa,EAAE,CAAA;;;;oBAIrB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAA;;oBAA9E,IAAI,GAAG,SAAuE;oBACpE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAC/C,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc;4BACvC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;yBACjD,CAAC;wBACF,2EAA2E;sBADzE;;oBAHI,OAAO,GAAG,SAGd;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAA;;oBAA1F,QAAQ,GAAG,SAA+E;oBAChG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAA;oBAGnC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAArD,YAAY,GAAG,SAAsC;oBACrD,UAAU,GAAG,CAAC,MAAA,YAAY,CAAC,aAAa,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,EAAJ,CAAI,CAAC,CAAA;oBACpE,IAAA,gBAAM,EACJ,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAC/B,uEAAuE,EACvE,+CAA+C,CAChD,CAAA;oBAKoB,qBAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,OAAO,CAAC,EAAE;4BACrB,OAAO,EAAE,+BAAwB,MAAM,CAAE;4BACzC,WAAW,EAAE,+BAA+B;4BAC5C,EAAE,EAAE,CAAC,WAAW,CAAC;4BACjB,OAAO,EAAE,IAAI;4BACb,OAAO,EAAE,IAAI;yBACd,CAAC,EAAA;;oBAPI,iBAAe,SAOnB;oBACF,eAAe,CAAC,IAAI,CAAC,cAAY,CAAC,EAAE,CAAC,CAAA;oBAIf,qBAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,OAAO,EAAE,yBAAkB,MAAM,CAAE;4BACnC,WAAW,EAAE,4BAA4B;4BACzC,EAAE,EAAE,CAAC,WAAW,CAAC;4BACjB,OAAO,EAAE,IAAI;4BACb,OAAO,EAAE,IAAI;yBACd,CAAC,EAAA;;oBAPI,kBAAgB,SAOpB;oBACF,eAAe,CAAC,IAAI,CAAC,eAAa,CAAC,EAAE,CAAC,CAAA;oBAGhC,UAAU,GAAG,yBAAyB,CAAC;wBAC3C,SAAS,EAAE,IAAI,CAAC,EAAE;wBAClB,UAAU,YAAA;wBACV,SAAS,EAAE,CAAC,WAAW,CAAC;qBACzB,CAAC,CAAA;oBACiB,qBAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAApE,UAAU,GAAG,SAAuD;oBAE1E,IAAA,gBAAM,EACJ,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,cAAY,CAAC,EAAE,EAAxB,CAAwB,CAAC,EAChD,6EAA6E,EAC7E,uEAAuE,CACxE,CAAA;oBACD,IAAA,gBAAM,EACJ,CAAC,UAAU,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,eAAa,CAAC,EAAE,EAAzB,CAAyB,CAAC,EAChD,6DAA6D,EAC7D,4DAA4D,CAC7D,CAAA;oBAIkB,qBAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,EAAA;;oBAAhF,UAAU,GAAG,SAAmE;oBACtF,IAAA,gBAAM,EACJ,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,cAAY,CAAC,EAAE,EAAxB,CAAwB,CAAC,EAChD,4DAA4D,EAC5D,+DAA+D,CAChE,CAAA;;;gBAED,UAAU;gBACV,qBAAM,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,UAAA,EAAE,IAAI,OAAA,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAA5C,CAA4C,CAAC,CAAC,EAAA;;oBAD1F,UAAU;oBACV,SAA0F,CAAA;oBAC1F,qBAAM,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAA,EAAE,IAAI,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAA9C,CAA8C,CAAC,CAAC,EAAA;;oBAA9F,SAA8F,CAAA;;;;;;CAEjG,CAAA;AAzFY,QAAA,uCAAuC,2CAyFnD;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,+CAAuC,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAnE,SAAmE,CAAA;;;;SACpE,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAA;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,wDAAwD,EAAE,KAAK,CAAC,CAAA;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/cjs/tests/api_tests/journey_delete_cancels_actions.test.d.ts

@@ -0,0 +1,6 @@
+import { Session } from '../../sdk';
+export declare const journey_delete_cancels_actions_tests: ({ sdk, sdkNonAdmin }: {
+    sdk: Session;
+    sdkNonAdmin: Session;
+}) => Promise<void>;
+//# sourceMappingURL=journey_delete_cancels_actions.test.d.ts.map

package/lib/cjs/tests/api_tests/journey_delete_cancels_actions.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journey_delete_cancels_actions.test.d.ts","sourceRoot":"","sources":["../../../../src/tests/api_tests/journey_delete_cancels_actions.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAMnC,eAAO,MAAM,oCAAoC;SAAuC,OAAO;iBAAe,OAAO;mBAmGpH,CAAA"}

package/lib/cjs/tests/api_tests/journey_delete_cancels_actions.test.js

@@ -0,0 +1,250 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.journey_delete_cancels_actions_tests = void 0;
+var sdk_1 = require("../../sdk");
+var testing_1 = require("@tellescope/testing");
+var constants_1 = require("@tellescope/constants");
+var host = process.env.API_URL || 'http://localhost:8080';
+var journey_delete_cancels_actions_tests = function (_a) {
+    var sdk = _a.sdk, sdkNonAdmin = _a.sdkNonAdmin;
+    return __awaiter(void 0, void 0, void 0, function () {
+        var journeyId, enduserId, stepId, journey, step, enduser_1, activeAction_1, finishedAction_1, before, expectedReason_1, finishedAfter;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    (0, testing_1.log_header)("Journey Delete Cancels Pending Actions Tests");
+                    _b.label = 1;
+                case 1:
+                    _b.trys.push([1, , 11, 13]);
+                    return [4 /*yield*/, sdk.api.journeys.createOne({ title: "Cascade Cancel Journey " + Date.now() })];
+                case 2:
+                    journey = _b.sent();
+                    journeyId = journey.id;
+                    return [4 /*yield*/, sdk.api.automation_steps.createOne({
+                            journeyId: journey.id,
+                            action: { type: 'setEnduserStatus', info: { status: 'Test Status' } },
+                            events: [{ type: 'onJourneyStart', info: {} }],
+                        })];
+                case 3:
+                    step = _b.sent();
+                    stepId = step.id;
+                    return [4 /*yield*/, sdk.api.endusers.createOne({
+                            fname: 'Cascade',
+                            lname: 'Cancel',
+                            email: 'test-cascade-cancel-' + Date.now() + '@example.com',
+                        })];
+                case 4:
+                    enduser_1 = _b.sent();
+                    enduserId = enduser_1.id;
+                    return [4 /*yield*/, sdk.api.automated_actions.createOne({
+                            journeyId: journey.id,
+                            automationStepId: step.id,
+                            enduserId: enduser_1.id,
+                            processAfter: Date.now() + 1000000,
+                            status: 'active',
+                            event: { type: 'onJourneyStart', info: {} },
+                            action: { type: 'setEnduserStatus', info: { status: 'Test Status' } },
+                        })
+                        // Create a finished action to confirm it is left untouched by the cascade
+                    ];
+                case 5:
+                    activeAction_1 = _b.sent();
+                    return [4 /*yield*/, sdk.api.automated_actions.createOne({
+                            journeyId: journey.id,
+                            automationStepId: step.id,
+                            enduserId: enduser_1.id,
+                            processAfter: Date.now() + 1000000,
+                            status: 'finished',
+                            event: { type: 'onJourneyStart', info: {} },
+                            action: { type: 'setEnduserStatus', info: { status: 'Test Status' } },
+                        })
+                        // Assert the action starts active
+                    ];
+                case 6:
+                    finishedAction_1 = _b.sent();
+                    return [4 /*yield*/, sdk.api.automated_actions.getOne(activeAction_1.id)];
+                case 7:
+                    before = _b.sent();
+                    if (before.status !== 'active') {
+                        throw new Error("Expected action to start 'active', got '".concat(before.status, "'"));
+                    }
+                    console.log("✓ Action is active before journey deletion");
+                    // Delete the journey — this should cascade cancel the pending action
+                    return [4 /*yield*/, sdk.api.journeys.deleteOne(journey.id)];
+                case 8:
+                    // Delete the journey — this should cascade cancel the pending action
+                    _b.sent();
+                    journeyId = undefined; // already deleted, skip in cleanup
+                    expectedReason_1 = constants_1.AUTOMATED_ACTION_CANCEL_REASONS.indexOf('Journey Deleted');
+                    return [4 /*yield*/, pollForResults(function () { return __awaiter(void 0, void 0, void 0, function () {
+                            var actions, active, finished;
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0: return [4 /*yield*/, sdk.api.automated_actions.getSome({ filter: { enduserId: enduser_1.id } })];
+                                    case 1:
+                                        actions = _a.sent();
+                                        active = actions.find(function (a) { return a.id === activeAction_1.id; });
+                                        finished = actions.find(function (a) { return a.id === finishedAction_1.id; });
+                                        return [2 /*return*/, { active: active, finished: finished }];
+                                }
+                            });
+                        }); }, function (_a) {
+                            var active = _a.active;
+                            return ((active === null || active === void 0 ? void 0 : active.status) === 'cancelled'
+                                && (active === null || active === void 0 ? void 0 : active.cancelReason) === expectedReason_1
+                                && (active === null || active === void 0 ? void 0 : active.cancelledBy) === sdk.userInfo.id);
+                        }, 'Active action should be cancelled with Journey Deleted reason and cancelledBy after journey deletion')];
+                case 9:
+                    _b.sent();
+                    console.log("✓ Active action cancelled with Journey Deleted reason and cancelledBy set to deleting user");
+                    return [4 /*yield*/, sdk.api.automated_actions.getOne(finishedAction_1.id)];
+                case 10:
+                    finishedAfter = _b.sent();
+                    if (finishedAfter.status !== 'finished') {
+                        throw new Error("Expected finished action to remain 'finished', got '".concat(finishedAfter.status, "'"));
+                    }
+                    console.log("✓ Finished action left untouched");
+                    console.log("✅ Journey Delete Cancels Pending Actions tests completed successfully");
+                    return [3 /*break*/, 13];
+                case 11: 
+                // Cleanup — journey is already deleted if the flow completed
+                return [4 /*yield*/, Promise.all([
+                        enduserId ? sdk.api.endusers.deleteOne(enduserId).catch(function () { }) : undefined,
+                        stepId ? sdk.api.automation_steps.deleteOne(stepId).catch(function () { }) : undefined,
+                        journeyId ? sdk.api.journeys.deleteOne(journeyId).catch(function () { }) : undefined,
+                    ])];
+                case 12:
+                    // Cleanup — journey is already deleted if the flow completed
+                    _b.sent();
+                    return [7 /*endfinally*/];
+                case 13: return [2 /*return*/];
+            }
+        });
+    });
+};
+exports.journey_delete_cancels_actions_tests = journey_delete_cancels_actions_tests;
+var pollForResults = function (fetchFn, evaluateFn, description, intervalMs, maxIterations) {
+    if (intervalMs === void 0) { intervalMs = 500; }
+    if (maxIterations === void 0) { maxIterations = 30; }
+    return __awaiter(void 0, void 0, void 0, function () {
+        var lastResult, i;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    i = 0;
+                    _a.label = 1;
+                case 1:
+                    if (!(i < maxIterations)) return [3 /*break*/, 5];
+                    return [4 /*yield*/, (0, testing_1.wait)(undefined, intervalMs)];
+                case 2:
+                    _a.sent();
+                    return [4 /*yield*/, fetchFn()];
+                case 3:
+                    lastResult = _a.sent();
+                    if (evaluateFn(lastResult)) {
+                        console.log("\u2713 ".concat(description, " - completed after ").concat((i + 1) * intervalMs, "ms"));
+                        return [2 /*return*/];
+                    }
+                    _a.label = 4;
+                case 4:
+                    i++;
+                    return [3 /*break*/, 1];
+                case 5:
+                    console.log('Final polling result:', lastResult);
+                    throw new Error("Polling timeout: ".concat(description, " - waited ").concat(maxIterations * intervalMs, "ms"));
+            }
+        });
+    });
+};
+// Allow running this test file independently
+if (require.main === module) {
+    console.log("\uD83C\uDF10 Using API URL: ".concat(host));
+    var sdk_2 = new sdk_1.Session({ host: host });
+    var sdkNonAdmin_1 = new sdk_1.Session({ host: host });
+    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
+        var setup_tests;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, Promise.resolve().then(function () { return __importStar(require("../setup")); })];
+                case 1:
+                    setup_tests = (_a.sent()).setup_tests;
+                    return [4 /*yield*/, setup_tests(sdk_2, sdkNonAdmin_1)];
+                case 2:
+                    _a.sent();
+                    return [4 /*yield*/, (0, exports.journey_delete_cancels_actions_tests)({ sdk: sdk_2, sdkNonAdmin: sdkNonAdmin_1 })];
+                case 3:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); };
+    runTests()
+        .then(function () {
+        console.log("✅ Journey Delete Cancels Pending Actions test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ Journey Delete Cancels Pending Actions test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=journey_delete_cancels_actions.test.js.map

package/lib/cjs/tests/api_tests/journey_delete_cancels_actions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journey_delete_cancels_actions.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/journey_delete_cancels_actions.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iCAAmC;AACnC,+CAAsD;AACtD,mDAAuE;AAEvE,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;AAEpD,IAAM,oCAAoC,GAAG,UAAO,EAA4D;QAA1D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;oBAC3E,IAAA,oBAAU,EAAC,8CAA8C,CAAC,CAAA;;;;oBAQxC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,yBAAyB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,EAAA;;oBAA7F,OAAO,GAAG,SAAmF;oBACnG,SAAS,GAAG,OAAO,CAAC,EAAE,CAAA;oBAET,qBAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC;4BACpD,SAAS,EAAE,OAAO,CAAC,EAAE;4BACrB,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;4BACrE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;yBAC/C,CAAC,EAAA;;oBAJI,IAAI,GAAG,SAIX;oBACF,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;oBAGA,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAC/C,KAAK,EAAE,SAAS;4BAChB,KAAK,EAAE,QAAQ;4BACf,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc;yBAC5D,CAAC,EAAA;;oBAJI,YAAU,SAId;oBACF,SAAS,GAAG,SAAO,CAAC,EAAE,CAAA;oBAGD,qBAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC;4BAC7D,SAAS,EAAE,OAAO,CAAC,EAAE;4BACrB,gBAAgB,EAAE,IAAI,CAAC,EAAE;4BACzB,SAAS,EAAE,SAAO,CAAC,EAAE;4BACrB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;4BAClC,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE;4BAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;yBACtE,CAAC;wBAEF,0EAA0E;sBAFxE;;oBARI,iBAAe,SAQnB;oBAGqB,qBAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC;4BAC/D,SAAS,EAAE,OAAO,CAAC,EAAE;4BACrB,gBAAgB,EAAE,IAAI,CAAC,EAAE;4BACzB,SAAS,EAAE,SAAO,CAAC,EAAE;4BACrB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;4BAClC,MAAM,EAAE,UAAU;4BAClB,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE;4BAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE;yBACtE,CAAC;wBAEF,kCAAkC;sBAFhC;;oBARI,mBAAiB,SAQrB;oBAGa,qBAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,cAAY,CAAC,EAAE,CAAC,EAAA;;oBAAhE,MAAM,GAAG,SAAuD;oBACtE,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE;wBAC9B,MAAM,IAAI,KAAK,CAAC,kDAA2C,MAAM,CAAC,MAAM,MAAG,CAAC,CAAA;qBAC7E;oBACD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAA;oBAEzD,qEAAqE;oBACrE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAA;;oBAD5C,qEAAqE;oBACrE,SAA4C,CAAA;oBAC5C,SAAS,GAAG,SAAS,CAAA,CAAC,mCAAmC;oBAInD,mBAAiB,2CAA+B,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;oBACjF,qBAAM,cAAc,CAClB;;;;4CACkB,qBAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAO,CAAC,EAAE,EAAE,EAAE,CAAC,EAAA;;wCAAxF,OAAO,GAAG,SAA8E;wCACxF,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,cAAY,CAAC,EAAE,EAAxB,CAAwB,CAAC,CAAA;wCACpD,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,gBAAc,CAAC,EAAE,EAA1B,CAA0B,CAAC,CAAA;wCAC9D,sBAAO,EAAE,MAAM,QAAA,EAAE,QAAQ,UAAA,EAAE,EAAA;;;6BAC5B,EACD,UAAC,EAAU;gCAAR,MAAM,YAAA;4BAAO,OAAA,CACd,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,MAAK,WAAW;mCAC3B,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,MAAK,gBAAc;mCACvC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,WAAW,MAAK,GAAG,CAAC,QAAQ,CAAC,EAAE,CAC3C;wBAJe,CAIf,EACD,sGAAsG,CACvG,EAAA;;oBAbD,SAaC,CAAA;oBACD,OAAO,CAAC,GAAG,CAAC,4FAA4F,CAAC,CAAA;oBAOnF,qBAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,gBAAc,CAAC,EAAE,CAAC,EAAA;;oBAAzE,aAAa,GAAG,SAAyD;oBAC/E,IAAI,aAAa,CAAC,MAAM,KAAK,UAAU,EAAE;wBACvC,MAAM,IAAI,KAAK,CAAC,8DAAuD,aAAa,CAAC,MAAM,MAAG,CAAC,CAAA;qBAChG;oBACD,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAA;oBAE/C,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAA;;;gBAEpF,6DAA6D;gBAC7D,qBAAM,OAAO,CAAC,GAAG,CAAC;wBAChB,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;wBAC7E,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;wBAC/E,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;qBAC9E,CAAC,EAAA;;oBALF,6DAA6D;oBAC7D,SAIE,CAAA;;;;;;CAEL,CAAA;AAnGY,QAAA,oCAAoC,wCAmGhD;AAED,IAAM,cAAc,GAAG,UACrB,OAAyB,EACzB,UAAkC,EAClC,WAAmB,EACnB,UAAgB,EAChB,aAAkB;IADlB,2BAAA,EAAA,gBAAgB;IAChB,8BAAA,EAAA,kBAAkB;;;;;;oBAIT,CAAC,GAAG,CAAC;;;yBAAE,CAAA,CAAC,GAAG,aAAa,CAAA;oBAC/B,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,UAAU,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBAEpB,qBAAM,OAAO,EAAE,EAAA;;oBAA5B,UAAU,GAAG,SAAe,CAAA;oBAC5B,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE;wBAC1B,OAAO,CAAC,GAAG,CAAC,iBAAK,WAAW,gCAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,OAAI,CAAC,CAAA;wBAC3E,sBAAM;qBACP;;;oBAPgC,CAAC,EAAE,CAAA;;;oBAUtC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAA;oBAChD,MAAM,IAAI,KAAK,CAAC,2BAAoB,WAAW,uBAAa,aAAa,GAAG,UAAU,OAAI,CAAC,CAAA;;;;CAC5F,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;;wBACS,sFAAa,UAAU,QAAC;;oBAAxC,WAAW,GAAK,CAAA,SAAwB,CAAA,YAA7B;oBACnB,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,4CAAoC,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAhE,SAAgE,CAAA;;;;SACjE,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAA;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,6DAA6D,EAAE,KAAK,CAAC,CAAA;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/cjs/tests/api_tests/security/register_business_id_injection.test.d.ts

@@ -0,0 +1,36 @@
+import { Session } from "../../../sdk";
+/**
+ * Reproduction + regression test for the reported vulnerability:
+ *
+ *   A @wearehackerone.com email "joined" a customer's organization without being invited, and
+ *   duplicate user records existed for that email — each bound to a different businessId.
+ *
+ * Root cause: the public `POST /v1/users/register` endpoint. `addPublicEndpoint` accepts an
+ * OPTIONAL, caller-supplied `businessId` (routing.ts) and bakes it into the handler's DB. The
+ * register handler's only duplicate guard (`DB.users.findOne({ email })`) is therefore scoped to
+ * whatever org the caller named, and the subsequent `DB.users.insertOne(...)` stamps that
+ * caller-supplied businessId onto a new `accountType: 'Business'` user — bypassing the
+ * globalUnique: ['email'] enforcement that only runs in the generic create route.
+ *
+ * The "victim org" here is the test admin's own org (sdk.userInfo.businessId): an org the
+ * anonymous caller was never invited to. The admin is used purely to OBSERVE whether an
+ * uninvited user record materialized inside their org (getOne({ email }) is org-scoped and
+ * throws when the email is absent from the caller's tenant).
+ *
+ * Expected results:
+ *   - VULNERABLE code: the assertions FAIL — the planted user appears inside the victim org,
+ *     proving the exploit ("EXPLOIT CONFIRMED" in the failure message).
+ *   - FIXED code: register ignores the caller-supplied businessId (self-signups are created
+ *     org-less and duplicates are rejected globally), so nothing appears in the victim org and
+ *     the assertions PASS.
+ *
+ * Uses unique emails per run (Date.now()) so re-runs never collide on the platform-wide unique
+ * email constraint. NOTE: on the FIXED path these registrations create org-less user records
+ * that an org-scoped admin cannot delete — harmless residue (unique emails), inherent to the
+ * legitimate "root register, no org" signup behavior.
+ */
+export declare const register_business_id_injection_tests: ({ sdk }: {
+    sdk: Session;
+    sdkNonAdmin: Session;
+}) => Promise<void>;
+//# sourceMappingURL=register_business_id_injection.test.d.ts.map

package/lib/cjs/tests/api_tests/security/register_business_id_injection.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register_business_id_injection.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/register_business_id_injection.test.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAsBtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,oCAAoC;SAA2B,OAAO;iBAAe,OAAO;mBA+DxG,CAAA"}