@tellescope/sdk 1.255.8 → 1.255.10

package/lib/esm/tests/api_tests/nutrition_tracking.test.js

@@ -0,0 +1,479 @@
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+require('source-map-support').install();
+import { Session, EnduserSession } from "../../sdk";
+import { async_test, log_header, } from "@tellescope/testing";
+import { authenticate_enduser_via_token, setup_tests } from "../setup";
+var host = process.env.API_URL || 'http://localhost:8080';
+var businessId = '60398b1131a295e64f084ff6';
+var ENDUSER_PASSWORD = 'NutritionTestPassword!123';
+var NUTRITION_TARGETS = {
+    dailyCalorieTarget: 2200,
+    dailyProteinTarget: 150,
+    dailyCarbTarget: 250,
+    dailyFatTarget: 70,
+    dailyFiberTarget: 30,
+    dailyWaterTarget: 2500,
+};
+var MACRO_COMPONENTS = [
+    { code: { text: 'Calories' }, valueQuantity: { value: 450, unit: 'kcal' } },
+    { code: { text: 'Protein' }, valueQuantity: { value: 42, unit: 'g' } },
+    { code: { text: 'Carbohydrates' }, valueQuantity: { value: 30, unit: 'g' } },
+    { code: { text: 'Fat' }, valueQuantity: { value: 18, unit: 'g' } },
+    {
+        code: {
+            text: 'Cheddar cheese',
+            coding: [{ system: 'https://fdc.nal.usda.gov', code: '328637', display: 'Cheese, cheddar' }],
+        },
+        valueQuantity: { value: 100, unit: 'g' },
+    },
+];
+var USDA_NOT_CONFIGURED_MESSAGE = 'USDA food search is not configured';
+// contract shape returned by the USDA proxy — nothing else may leak through
+var EXPECTED_FOOD_KEYS = ['fdcId', 'description', 'calories', 'protein', 'carbs', 'fat', 'fiber'];
+var MACRO_KEYS = ['calories', 'protein', 'carbs', 'fat', 'fiber'];
+var is_valid_food_summary = function (f) { return (typeof (f === null || f === void 0 ? void 0 : f.fdcId) === 'number' && Number.isInteger(f.fdcId) && f.fdcId > 0
+    && typeof (f === null || f === void 0 ? void 0 : f.description) === 'string' && f.description.length > 0
+    && Object.keys(f).every(function (k) { return EXPECTED_FOOD_KEYS.includes(k); })
+    && MACRO_KEYS.every(function (m) { return f[m] === undefined || (typeof f[m] === 'number' && isFinite(f[m]) && f[m] >= 0); })); };
+// values are per 100g: grams of a macro can't exceed 100, energy tops out near pure fat (~900 kcal)
+var is_plausible_per_100g = function (f) { return ((f.calories === undefined || f.calories <= 950)
+    && ['protein', 'carbs', 'fat', 'fiber'].every(function (m) { return f[m] === undefined || f[m] <= 100; })); };
+// same food fetched via different USDA response shapes should yield the same numbers
+var approx_equal = function (a, b) { return ((a === undefined && b === undefined)
+    || (typeof a === 'number' && typeof b === 'number' && Math.abs(a - b) <= Math.max(1, 0.1 * Math.max(a, b)))); };
+var usda_proxy_tests = function (_a) {
+    var sdk = _a.sdk, enduserSDK = _a.enduserSDK;
+    return __awaiter(void 0, void 0, void 0, function () {
+        var searchResult, err_1, firstFood, fullFatCheddar;
+        var _b, _c;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
+                case 0:
+                    log_header("USDA Food Search Proxy");
+                    _d.label = 1;
+                case 1:
+                    _d.trys.push([1, 3, , 4]);
+                    return [4 /*yield*/, enduserSDK.api.integrations.proxy_read({
+                            integration: 'USDA',
+                            type: 'search',
+                            query: JSON.stringify({ keywords: 'cheddar cheese' }),
+                        })];
+                case 2:
+                    searchResult = _d.sent();
+                    return [3 /*break*/, 4];
+                case 3:
+                    err_1 = _d.sent();
+                    if ((_c = (_b = err_1 === null || err_1 === void 0 ? void 0 : err_1.message) === null || _b === void 0 ? void 0 : _b.includes) === null || _c === void 0 ? void 0 : _c.call(_b, USDA_NOT_CONFIGURED_MESSAGE)) {
+                        console.log("⏭️  Skipping USDA proxy tests (no { type: 'usda' } zz_secrets doc configured)");
+                        return [2 /*return*/];
+                    }
+                    throw err_1;
+                case 4: return [4 /*yield*/, async_test('USDA search (enduser): non-empty foods with fdcId/description, totalHits > 0', function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                        return [2 /*return*/, searchResult];
+                    }); }); }, { onResult: function (r) {
+                            var _a;
+                            return (Array.isArray((_a = r === null || r === void 0 ? void 0 : r.data) === null || _a === void 0 ? void 0 : _a.foods)
+                                && r.data.foods.length > 0
+                                && r.data.foods.every(function (f) { return typeof f.fdcId === 'number' && typeof f.description === 'string'; })
+                                && r.data.foods.every(function (f) { return ['calories', 'protein', 'carbs', 'fat', 'fiber'].every(function (macro) { return f[macro] === undefined || typeof f[macro] === 'number'; }); })
+                                && r.data.totalHits > 0);
+                        } })];
+                case 5:
+                    _d.sent();
+                    firstFood = searchResult.data.foods[0];
+                    return [4 /*yield*/, async_test('USDA food detail (enduser): matching single food by fdcId', function () { return enduserSDK.api.integrations.proxy_read({
+                            integration: 'USDA',
+                            type: 'food',
+                            id: String(firstFood.fdcId),
+                        }); }, { onResult: function (r) {
+                                var _a;
+                                return (((_a = r === null || r === void 0 ? void 0 : r.data) === null || _a === void 0 ? void 0 : _a.fdcId) === firstFood.fdcId
+                                    && typeof r.data.description === 'string');
+                            } })];
+                case 6:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('USDA search (staff session) also succeeds', function () { return sdk.api.integrations.proxy_read({
+                            integration: 'USDA',
+                            type: 'search',
+                            query: JSON.stringify({ keywords: 'cheddar cheese' }),
+                        }); }, { onResult: function (r) { var _a; return Array.isArray((_a = r === null || r === void 0 ? void 0 : r.data) === null || _a === void 0 ? void 0 : _a.foods) && r.data.foods.length > 0; } })];
+                case 7:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('USDA search: missing keywords rejected', function () { return enduserSDK.api.integrations.proxy_read({
+                            integration: 'USDA',
+                            type: 'search',
+                            query: JSON.stringify({}),
+                        }); }, { shouldError: true, onError: function () { return true; } })];
+                case 8:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('USDA search: 1-char keywords rejected', function () { return enduserSDK.api.integrations.proxy_read({
+                            integration: 'USDA',
+                            type: 'search',
+                            query: JSON.stringify({ keywords: 'c' }),
+                        }); }, { shouldError: true, onError: function () { return true; } })
+                        // ---- rigorous output-format validation ----
+                    ];
+                case 9:
+                    _d.sent();
+                    // ---- rigorous output-format validation ----
+                    return [4 /*yield*/, async_test('USDA format: every search result matches the contract shape exactly (no extra fields)', function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                            return [2 /*return*/, searchResult];
+                        }); }); }, { onResult: function (r) { return r.data.foods.every(function (f) { return is_valid_food_summary(f) && is_plausible_per_100g(f); }); } })];
+                case 10:
+                    // ---- rigorous output-format validation ----
+                    _d.sent();
+                    return [4 /*yield*/, async_test('USDA format: no api_key or raw USDA payload fields leak into the response', function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                            return [2 /*return*/, searchResult];
+                        }); }); }, { onResult: function (r) {
+                                var serialized = JSON.stringify(r.data);
+                                return !serialized.includes('api_key') && !serialized.includes('foodNutrients') && !serialized.includes('nutrientNumber');
+                            } })
+                        // extraction must actually populate macros across the result set (catches a broken
+                        // nutrient-number mapping, which the undefined-tolerant shape checks above would miss)
+                    ];
+                case 11:
+                    _d.sent();
+                    // extraction must actually populate macros across the result set (catches a broken
+                    // nutrient-number mapping, which the undefined-tolerant shape checks above would miss)
+                    return [4 /*yield*/, async_test('USDA format: macro extraction populated for nearly all results', function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                            return [2 /*return*/, searchResult];
+                        }); }); }, { onResult: function (r) {
+                                var foods = r.data.foods;
+                                var fullyPopulated = foods.filter(function (f) { return MACRO_KEYS.every(function (m) { return typeof f[m] === 'number'; }); });
+                                return foods.length > 0 && fullyPopulated.length >= foods.length * 0.8;
+                            } })
+                        // at least one result must match full-fat cheddar's real per-100g profile
+                        // (search includes reduced-fat branded variants, so assert existence rather than checking an arbitrary pick)
+                    ];
+                case 12:
+                    // extraction must actually populate macros across the result set (catches a broken
+                    // nutrient-number mapping, which the undefined-tolerant shape checks above would miss)
+                    _d.sent();
+                    fullFatCheddar = searchResult.data.foods.find(function (f) {
+                        var _a;
+                        return (((_a = f.description) === null || _a === void 0 ? void 0 : _a.toLowerCase().includes('cheddar'))
+                            && f.calories >= 300 && f.calories <= 500
+                            && f.protein >= 15 && f.protein <= 35
+                            && f.fat >= 25 && f.fat <= 45
+                            && f.carbs >= 0 && f.carbs <= 15
+                            && (f.fiber === undefined || (f.fiber >= 0 && f.fiber <= 5)));
+                    });
+                    return [4 /*yield*/, async_test('USDA format: a result matches full-fat cheddar\'s realistic per-100g values', function () { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+                            return [2 /*return*/, fullFatCheddar];
+                        }); }); }, { onResult: function (f) { return !!f; } })];
+                case 13:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('USDA format: food detail (abridged shape) yields same values as search (search shape) for same fdcId', function () { return enduserSDK.api.integrations.proxy_read({
+                            integration: 'USDA',
+                            type: 'food',
+                            id: String(fullFatCheddar === null || fullFatCheddar === void 0 ? void 0 : fullFatCheddar.fdcId),
+                        }); }, { onResult: function (r) { return (is_valid_food_summary(r === null || r === void 0 ? void 0 : r.data)
+                                && r.data.fdcId === (fullFatCheddar === null || fullFatCheddar === void 0 ? void 0 : fullFatCheddar.fdcId)
+                                && MACRO_KEYS.every(function (m) { return approx_equal(r.data[m], fullFatCheddar === null || fullFatCheddar === void 0 ? void 0 : fullFatCheddar[m]); })); } })];
+                case 14:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('USDA format: pageSize honored (5 -> exactly 5 valid foods)', function () { return enduserSDK.api.integrations.proxy_read({
+                            integration: 'USDA',
+                            type: 'search',
+                            query: JSON.stringify({ keywords: 'apple', pageSize: 5 }),
+                        }); }, { onResult: function (r) {
+                                var _a, _b;
+                                return (((_b = (_a = r === null || r === void 0 ? void 0 : r.data) === null || _a === void 0 ? void 0 : _a.foods) === null || _b === void 0 ? void 0 : _b.length) === 5
+                                    && r.data.totalHits >= 5
+                                    && r.data.foods.every(function (f) { return is_valid_food_summary(f) && is_plausible_per_100g(f); }));
+                            } })];
+                case 15:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('USDA format: oversized pageSize clamped to at most 50', function () { return enduserSDK.api.integrations.proxy_read({
+                            integration: 'USDA',
+                            type: 'search',
+                            query: JSON.stringify({ keywords: 'banana', pageSize: 10000 }),
+                        }); }, { onResult: function (r) { var _a, _b; return ((_b = (_a = r === null || r === void 0 ? void 0 : r.data) === null || _a === void 0 ? void 0 : _a.foods) === null || _b === void 0 ? void 0 : _b.length) > 0 && r.data.foods.length <= 50; } })];
+                case 16:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('USDA format: non-numeric food id rejected', function () { return enduserSDK.api.integrations.proxy_read({
+                            integration: 'USDA',
+                            type: 'food',
+                            id: '../foods/search',
+                        }); }, { shouldError: true, onError: function () { return true; } })];
+                case 17:
+                    _d.sent();
+                    return [2 /*return*/];
+            }
+        });
+    });
+};
+export var nutrition_tracking_tests = function (_a) {
+    var sdk = _a.sdk;
+    return __awaiter(void 0, void 0, void 0, function () {
+        var enduserAId, enduserBId, ts, enduserAEmail, enduserBEmail, enduserA_1, enduserB, enduserSDK_1, enduserSDKB_1, withComponents_1, withoutComponents_1, staffCreated_1, enduserACreated_1, _b, _c;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
+                case 0:
+                    log_header("Nutrition Tracking (weight & macro backend support)");
+                    _d.label = 1;
+                case 1:
+                    _d.trys.push([1, , 30, 39]);
+                    ts = Date.now();
+                    enduserAEmail = "nutrition-a-".concat(ts, "@test.tellescope.com");
+                    enduserBEmail = "nutrition-b-".concat(ts, "@test.tellescope.com");
+                    return [4 /*yield*/, sdk.api.endusers.createOne({ email: enduserAEmail, fname: 'Nutrition', lname: 'TesterA' })];
+                case 2:
+                    enduserA_1 = _d.sent();
+                    enduserAId = enduserA_1.id;
+                    return [4 /*yield*/, sdk.api.endusers.set_password({ id: enduserA_1.id, password: ENDUSER_PASSWORD })];
+                case 3:
+                    _d.sent();
+                    return [4 /*yield*/, sdk.api.endusers.createOne({ email: enduserBEmail, fname: 'Nutrition', lname: 'TesterB' })];
+                case 4:
+                    enduserB = _d.sent();
+                    enduserBId = enduserB.id;
+                    return [4 /*yield*/, sdk.api.endusers.set_password({ id: enduserB.id, password: ENDUSER_PASSWORD })];
+                case 5:
+                    _d.sent();
+                    enduserSDK_1 = new EnduserSession({ host: host, businessId: businessId });
+                    return [4 /*yield*/, authenticate_enduser_via_token(sdk, enduserSDK_1, { email: enduserAEmail })];
+                case 6:
+                    _d.sent();
+                    enduserSDKB_1 = new EnduserSession({ host: host, businessId: businessId });
+                    return [4 /*yield*/, authenticate_enduser_via_token(sdk, enduserSDKB_1, { email: enduserBEmail })
+                        // ---- Requirement 3: daily nutrition targets (enduser-readable and -writable) ----
+                    ];
+                case 7:
+                    _d.sent();
+                    // ---- Requirement 3: daily nutrition targets (enduser-readable and -writable) ----
+                    return [4 /*yield*/, async_test('targets: enduser sets all six daily nutrition targets on own record', function () { return enduserSDK_1.api.endusers.updateOne(enduserA_1.id, __assign({}, NUTRITION_TARGETS)); }, { onResult: function (e) { return Object.entries(NUTRITION_TARGETS).every(function (_a) {
+                                var field = _a[0], value = _a[1];
+                                return e[field] === value;
+                            }); } })];
+                case 8:
+                    // ---- Requirement 3: daily nutrition targets (enduser-readable and -writable) ----
+                    _d.sent();
+                    return [4 /*yield*/, async_test('targets: enduser reads all six targets back (no redaction)', function () { return enduserSDK_1.api.endusers.getOne(enduserA_1.id); }, { onResult: function (e) { return Object.entries(NUTRITION_TARGETS).every(function (_a) {
+                                var field = _a[0], value = _a[1];
+                                return e[field] === value;
+                            }); } })];
+                case 9:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('targets: staff can read targets', function () { return sdk.api.endusers.getOne(enduserA_1.id); }, { onResult: function (e) { return Object.entries(NUTRITION_TARGETS).every(function (_a) {
+                                var field = _a[0], value = _a[1];
+                                return e[field] === value;
+                            }); } })];
+                case 10:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('targets: staff can write targets', function () { return sdk.api.endusers.updateOne(enduserA_1.id, { dailyCalorieTarget: 2000, dailyWaterTarget: 3000 }); }, { onResult: function (e) { return e.dailyCalorieTarget === 2000 && e.dailyWaterTarget === 3000; } })];
+                case 11:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('targets: negative values rejected', function () { return enduserSDK_1.api.endusers.updateOne(enduserA_1.id, { dailyProteinTarget: -10 }); }, { shouldError: true, onError: function () { return true; } })
+                        // ---- Requirement 2: EnduserObservation.components round-trip ----
+                    ];
+                case 12:
+                    _d.sent();
+                    return [4 /*yield*/, enduserSDK_1.api.enduser_observations.createOne({
+                            enduserId: enduserA_1.id,
+                            status: 'final',
+                            category: 'vital-signs',
+                            type: 'food',
+                            measurement: { value: 450, unit: 'kcal' },
+                            components: MACRO_COMPONENTS,
+                        })];
+                case 13:
+                    withComponents_1 = _d.sent();
+                    return [4 /*yield*/, async_test('components: enduser round-trips observation with macros + coded food item', function () { return enduserSDK_1.api.enduser_observations.getOne(withComponents_1.id); }, { onResult: function (o) {
+                                var _a, _b, _c, _d, _e, _f, _g;
+                                return (((_a = o.components) === null || _a === void 0 ? void 0 : _a.length) === MACRO_COMPONENTS.length
+                                    && o.components[1].code.text === 'Protein'
+                                    && o.components[1].valueQuantity.value === 42
+                                    && o.components[1].valueQuantity.unit === 'g'
+                                    && ((_c = (_b = o.components[4].code.coding) === null || _b === void 0 ? void 0 : _b[0]) === null || _c === void 0 ? void 0 : _c.system) === 'https://fdc.nal.usda.gov'
+                                    && ((_e = (_d = o.components[4].code.coding) === null || _d === void 0 ? void 0 : _d[0]) === null || _e === void 0 ? void 0 : _e.code) === '328637'
+                                    && ((_g = (_f = o.components[4].code.coding) === null || _f === void 0 ? void 0 : _f[0]) === null || _g === void 0 ? void 0 : _g.display) === 'Cheese, cheddar'
+                                    && o.measurement.value === 450);
+                            } })];
+                case 14:
+                    _d.sent();
+                    return [4 /*yield*/, enduserSDK_1.api.enduser_observations.createOne({
+                            enduserId: enduserA_1.id,
+                            status: 'final',
+                            category: 'vital-signs',
+                            type: 'weight',
+                            measurement: { value: 180, unit: 'lbs' },
+                        })];
+                case 15:
+                    withoutComponents_1 = _d.sent();
+                    return [4 /*yield*/, async_test('components: observation without components still works (back-compat)', function () { return enduserSDK_1.api.enduser_observations.getOne(withoutComponents_1.id); }, { onResult: function (o) { return o.components === undefined && o.measurement.value === 180; } })
+                        // ---- Requirement 4: creatorOnly update/delete ----
+                    ];
+                case 16:
+                    _d.sent();
+                    // ---- Requirement 4: creatorOnly update/delete ----
+                    return [4 /*yield*/, async_test('creatorOnly: enduser updates own observation', function () { return enduserSDK_1.api.enduser_observations.updateOne(withoutComponents_1.id, { measurement: { value: 178, unit: 'lbs' } }); }, { onResult: function (o) { return o.measurement.value === 178; } })];
+                case 17:
+                    // ---- Requirement 4: creatorOnly update/delete ----
+                    _d.sent();
+                    return [4 /*yield*/, async_test('creatorOnly: enduser deletes own observation', function () { return enduserSDK_1.api.enduser_observations.deleteOne(withoutComponents_1.id); }, { shouldError: false, onResult: function () { return true; } })
+                        // Negative: staff-created observation for the enduser remains locked
+                    ];
+                case 18:
+                    _d.sent();
+                    return [4 /*yield*/, sdk.api.enduser_observations.createOne({
+                            enduserId: enduserA_1.id,
+                            status: 'final',
+                            category: 'vital-signs',
+                            type: 'weight',
+                            measurement: { value: 182, unit: 'lbs' },
+                        })];
+                case 19:
+                    staffCreated_1 = _d.sent();
+                    return [4 /*yield*/, async_test('creatorOnly: enduser cannot update staff-created observation', function () { return enduserSDK_1.api.enduser_observations.updateOne(staffCreated_1.id, { measurement: { value: 1, unit: 'lbs' } }); }, { shouldError: true, onError: function () { return true; } })];
+                case 20:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('creatorOnly: enduser cannot delete staff-created observation', function () { return enduserSDK_1.api.enduser_observations.deleteOne(staffCreated_1.id); }, { shouldError: true, onError: function () { return true; } })];
+                case 21:
+                    _d.sent();
+                    return [4 /*yield*/, async_test('creatorOnly: enduser can still read staff-created observation', function () { return enduserSDK_1.api.enduser_observations.getOne(staffCreated_1.id); }, { onResult: function (o) { return o.id === staffCreated_1.id && o.measurement.value === 182; } })
+                        // Staff sessions unaffected by creatorOnly (applies to enduser sessions only)
+                    ];
+                case 22:
+                    _d.sent();
+                    // Staff sessions unaffected by creatorOnly (applies to enduser sessions only)
+                    return [4 /*yield*/, async_test('staff unchanged: staff updates enduser-created observation', function () { return sdk.api.enduser_observations.updateOne(withComponents_1.id, { measurement: { value: 500, unit: 'kcal' } }); }, { onResult: function (o) { return o.measurement.value === 500; } })];
+                case 23:
+                    // Staff sessions unaffected by creatorOnly (applies to enduser sessions only)
+                    _d.sent();
+                    return [4 /*yield*/, async_test('staff unchanged: staff deletes enduser-created observation', function () { return sdk.api.enduser_observations.deleteOne(withComponents_1.id); }, { shouldError: false, onResult: function () { return true; } })
+                        // Cross-enduser: B cannot update/delete A's observation
+                    ];
+                case 24:
+                    _d.sent();
+                    return [4 /*yield*/, enduserSDK_1.api.enduser_observations.createOne({
+                            enduserId: enduserA_1.id,
+                            status: 'final',
+                            category: 'vital-signs',
+                            type: 'weight',
+                            measurement: { value: 179, unit: 'lbs' },
+                        })];
+                case 25:
+                    enduserACreated_1 = _d.sent();
+                    return [4 /*yield*/, async_test("cross-enduser: enduser B cannot update enduser A's observation", function () { return enduserSDKB_1.api.enduser_observations.updateOne(enduserACreated_1.id, { measurement: { value: 1, unit: 'lbs' } }); }, { shouldError: true, onError: function () { return true; } })];
+                case 26:
+                    _d.sent();
+                    return [4 /*yield*/, async_test("cross-enduser: enduser B cannot delete enduser A's observation", function () { return enduserSDKB_1.api.enduser_observations.deleteOne(enduserACreated_1.id); }, { shouldError: true, onError: function () { return true; } })];
+                case 27:
+                    _d.sent();
+                    return [4 /*yield*/, async_test("cross-enduser: enduser A's observation still exists (admin verify)", function () { return sdk.api.enduser_observations.getOne(enduserACreated_1.id); }, { onResult: function (o) { return o.id === enduserACreated_1.id && o.measurement.value === 179; } })
+                        // ---- Requirement 1: USDA food search proxy (behavioral skip when not configured) ----
+                    ];
+                case 28:
+                    _d.sent();
+                    // ---- Requirement 1: USDA food search proxy (behavioral skip when not configured) ----
+                    return [4 /*yield*/, usda_proxy_tests({ sdk: sdk, enduserSDK: enduserSDK_1 })];
+                case 29:
+                    // ---- Requirement 1: USDA food search proxy (behavioral skip when not configured) ----
+                    _d.sent();
+                    return [3 /*break*/, 39];
+                case 30:
+                    if (!enduserAId) return [3 /*break*/, 34];
+                    _d.label = 31;
+                case 31:
+                    _d.trys.push([31, 33, , 34]);
+                    return [4 /*yield*/, sdk.api.endusers.deleteOne(enduserAId)];
+                case 32:
+                    _d.sent();
+                    return [3 /*break*/, 34];
+                case 33:
+                    _b = _d.sent();
+                    return [3 /*break*/, 34];
+                case 34:
+                    if (!enduserBId) return [3 /*break*/, 38];
+                    _d.label = 35;
+                case 35:
+                    _d.trys.push([35, 37, , 38]);
+                    return [4 /*yield*/, sdk.api.endusers.deleteOne(enduserBId)];
+                case 36:
+                    _d.sent();
+                    return [3 /*break*/, 38];
+                case 37:
+                    _c = _d.sent();
+                    return [3 /*break*/, 38];
+                case 38: return [7 /*endfinally*/];
+                case 39: return [2 /*return*/];
+            }
+        });
+    });
+};
+// Allow running this test file independently
+if (require.main === module) {
+    console.log("\uD83C\uDF10 Using API URL: ".concat(host));
+    var sdk_1 = new Session({ host: host });
+    var sdkNonAdmin_1 = new Session({ host: host });
+    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup_tests(sdk_1, sdkNonAdmin_1)];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, nutrition_tracking_tests({ sdk: sdk_1, sdkNonAdmin: sdkNonAdmin_1 })];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); };
+    runTests()
+        .then(function () {
+        console.log("✅ Nutrition tracking test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ Nutrition tracking test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=nutrition_tracking.test.js.map

package/lib/esm/tests/api_tests/nutrition_tracking.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nutrition_tracking.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/nutrition_tracking.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EACL,UAAU,EACV,UAAU,GACX,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,8BAA8B,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEtE,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AACpE,IAAM,UAAU,GAAG,0BAA0B,CAAA;AAE7C,IAAM,gBAAgB,GAAG,2BAA2B,CAAA;AAEpD,IAAM,iBAAiB,GAAG;IACxB,kBAAkB,EAAE,IAAI;IACxB,kBAAkB,EAAE,GAAG;IACvB,eAAe,EAAE,GAAG;IACpB,cAAc,EAAE,EAAE;IAClB,gBAAgB,EAAE,EAAE;IACpB,gBAAgB,EAAE,IAAI;CACvB,CAAA;AAED,IAAM,gBAAgB,GAA2B;IAC/C,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;IAC3E,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IACtE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IAC5E,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IAClE;QACE,IAAI,EAAE;YACJ,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;SAC7F;QACD,aAAa,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE;KACzC;CACF,CAAA;AAED,IAAM,2BAA2B,GAAG,oCAAoC,CAAA;AAExE,4EAA4E;AAC5E,IAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;AACnG,IAAM,UAAU,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAU,CAAA;AAE5E,IAAM,qBAAqB,GAAG,UAAC,CAAM,IAAK,OAAA,CACxC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,CAAA,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;OACrE,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,WAAW,CAAA,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;OAC9D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAA,CAAC,IAAI,OAAA,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAA9B,CAA8B,CAAC;OACzD,UAAU,CAAC,KAAK,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAA/E,CAA+E,CAAC,CAC1G,EALyC,CAKzC,CAAA;AAED,oGAAoG;AACpG,IAAM,qBAAqB,GAAG,UAAC,CAAM,IAAK,OAAA,CACxC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;OAC3C,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAW,CAAC,KAAK,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAjC,CAAiC,CAAC,CACjG,EAHyC,CAGzC,CAAA;AAED,qFAAqF;AACrF,IAAM,YAAY,GAAG,UAAC,CAAU,EAAE,CAAU,IAAK,OAAA,CAC/C,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,CAAC;OACjC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAC5G,EAHgD,CAGhD,CAAA;AAED,IAAM,gBAAgB,GAAG,UAAO,EAAiE;QAA/D,GAAG,SAAA,EAAE,UAAU,gBAAA;;;;;;;oBAC/C,UAAU,CAAC,wBAAwB,CAAC,CAAA;;;;oBAMnB,qBAAM,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;4BAC1D,WAAW,EAAE,MAAM;4BACnB,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;yBACtD,CAAC,EAAA;;oBAJF,YAAY,GAAG,SAIb,CAAA;;;;oBAEF,IAAI,MAAA,MAAA,KAAG,aAAH,KAAG,uBAAH,KAAG,CAAE,OAAO,0CAAE,QAAQ,mDAAG,2BAA2B,CAAC,EAAE;wBACzD,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAA;wBAC5F,sBAAM;qBACP;oBACD,MAAM,KAAG,CAAA;wBAGX,qBAAM,UAAU,CACd,8EAA8E,EAC9E;wBAAY,sBAAA,YAAY,EAAA;6BAAA,EACxB,EAAE,QAAQ,EAAE,UAAC,CAAM;;4BAAK,OAAA,CACtB,KAAK,CAAC,OAAO,CAAC,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,0CAAE,KAAK,CAAC;mCAC1B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;mCACvB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAC,CAAM,IAAK,OAAA,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAhE,CAAgE,CAAC;mCAChG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAC,CAAM,IAAK,OAChC,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAChD,CAAC,KAAK,CAAC,UAAA,KAAK,IAAI,OAAA,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAtD,CAAsD,CAAC,EAFtC,CAEsC,CAAC;mCACtE,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CACxB,CAAA;yBAAA,EAAE,CACJ,EAAA;;oBAZD,SAYC,CAAA;oBAEK,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;oBAC5C,qBAAM,UAAU,CACd,2DAA2D,EAC3D,cAAM,OAAA,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;4BAC3C,WAAW,EAAE,MAAM;4BACnB,IAAI,EAAE,MAAM;4BACZ,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;yBAC5B,CAAC,EAJI,CAIJ,EACF,EAAE,QAAQ,EAAE,UAAC,CAAM;;gCAAK,OAAA,CACtB,CAAA,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,0CAAE,KAAK,MAAK,SAAS,CAAC,KAAK;uCAC/B,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,KAAK,QAAQ,CAC1C,CAAA;6BAAA,EAAE,CACJ,EAAA;;oBAXD,SAWC,CAAA;oBAED,qBAAM,UAAU,CACd,2CAA2C,EAC3C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;4BACpC,WAAW,EAAE,MAAM;4BACnB,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;yBACtD,CAAC,EAJI,CAIJ,EACF,EAAE,QAAQ,EAAE,UAAC,CAAM,YAAK,OAAA,KAAK,CAAC,OAAO,CAAC,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,0CAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA,EAAA,EAAE,CACnF,EAAA;;oBARD,SAQC,CAAA;oBAED,qBAAM,UAAU,CACd,wCAAwC,EACxC,cAAM,OAAA,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;4BAC3C,WAAW,EAAE,MAAM;4BACnB,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;yBAC1B,CAAC,EAJI,CAIJ,EACF,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC3C,EAAA;;oBARD,SAQC,CAAA;oBACD,qBAAM,UAAU,CACd,uCAAuC,EACvC,cAAM,OAAA,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;4BAC3C,WAAW,EAAE,MAAM;4BACnB,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;yBACzC,CAAC,EAJI,CAIJ,EACF,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC3C;wBAED,8CAA8C;sBAF7C;;oBARD,SAQC,CAAA;oBAED,8CAA8C;oBAC9C,qBAAM,UAAU,CACd,uFAAuF,EACvF;4BAAY,sBAAA,YAAY,EAAA;iCAAA,EACxB,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAC,CAAM,IAAK,OAAA,qBAAqB,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,CAAC,CAAC,EAApD,CAAoD,CAAC,EAApF,CAAoF,EAAE,CAC/G,EAAA;;oBALD,8CAA8C;oBAC9C,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,2EAA2E,EAC3E;4BAAY,sBAAA,YAAY,EAAA;iCAAA,EACxB,EAAE,QAAQ,EAAE,UAAC,CAAM;gCACjB,IAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;gCACzC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAA;4BAC3H,CAAC,EAAE,CACJ;wBAED,mFAAmF;wBACnF,uFAAuF;sBAHtF;;oBAPD,SAOC,CAAA;oBAED,mFAAmF;oBACnF,uFAAuF;oBACvF,qBAAM,UAAU,CACd,gEAAgE,EAChE;4BAAY,sBAAA,YAAY,EAAA;iCAAA,EACxB,EAAE,QAAQ,EAAE,UAAC,CAAM;gCACjB,IAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;gCAC1B,IAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,UAAC,CAAM,IAAK,OAAA,UAAU,CAAC,KAAK,CAAC,UAAA,CAAC,IAAI,OAAA,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAxB,CAAwB,CAAC,EAA/C,CAA+C,CAAC,CAAA;gCAChG,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAA;4BACxE,CAAC,EAAE,CACJ;wBAED,0EAA0E;wBAC1E,6GAA6G;sBAH5G;;oBAVD,mFAAmF;oBACnF,uFAAuF;oBACvF,SAQC,CAAA;oBAIK,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAC,CAAM;;wBAAK,OAAA,CAC9D,CAAA,MAAA,CAAC,CAAC,WAAW,0CAAE,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC;+BAC7C,CAAC,CAAC,QAAQ,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG;+BACtC,CAAC,CAAC,OAAO,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE;+BAClC,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE;+BAC1B,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE;+BAC7B,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAC7D,CAAA;qBAAA,CAAC,CAAA;oBACF,qBAAM,UAAU,CACd,6EAA6E,EAC7E;4BAAY,sBAAA,cAAc,EAAA;iCAAA,EAC1B,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,CAAC,EAAH,CAAG,EAAE,CAC9B,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,sGAAsG,EACtG,cAAM,OAAA,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;4BAC3C,WAAW,EAAE,MAAM;4BACnB,IAAI,EAAE,MAAM;4BACZ,EAAE,EAAE,MAAM,CAAC,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,KAAK,CAAC;yBAClC,CAAC,EAJI,CAIJ,EACF,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAK,OAAA,CACtB,qBAAqB,CAAC,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,CAAC;mCAC3B,CAAC,CAAC,IAAI,CAAC,KAAK,MAAK,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,KAAK,CAAA;mCACtC,UAAU,CAAC,KAAK,CAAC,UAAA,CAAC,IAAI,OAAA,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAG,CAAC,CAAC,CAAC,EAA5C,CAA4C,CAAC,CACvE,EAJuB,CAIvB,EAAE,CACJ,EAAA;;oBAZD,SAYC,CAAA;oBAED,qBAAM,UAAU,CACd,4DAA4D,EAC5D,cAAM,OAAA,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;4BAC3C,WAAW,EAAE,MAAM;4BACnB,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;yBAC1D,CAAC,EAJI,CAIJ,EACF,EAAE,QAAQ,EAAE,UAAC,CAAM;;gCAAK,OAAA,CACtB,CAAA,MAAA,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,0CAAE,KAAK,0CAAE,MAAM,MAAK,CAAC;uCACzB,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC;uCACrB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAC,CAAM,IAAK,OAAA,qBAAqB,CAAC,CAAC,CAAC,IAAI,qBAAqB,CAAC,CAAC,CAAC,EAApD,CAAoD,CAAC,CACxF,CAAA;6BAAA,EAAE,CACJ,EAAA;;oBAZD,SAYC,CAAA;oBACD,qBAAM,UAAU,CACd,uDAAuD,EACvD,cAAM,OAAA,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;4BAC3C,WAAW,EAAE,MAAM;4BACnB,IAAI,EAAE,QAAQ;4BACd,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;yBAC/D,CAAC,EAJI,CAIJ,EACF,EAAE,QAAQ,EAAE,UAAC,CAAM,gBAAK,OAAA,CAAA,MAAA,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,0CAAE,KAAK,0CAAE,MAAM,IAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAA,EAAA,EAAE,CAClF,EAAA;;oBARD,SAQC,CAAA;oBACD,qBAAM,UAAU,CACd,2CAA2C,EAC3C,cAAM,OAAA,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;4BAC3C,WAAW,EAAE,MAAM;4BACnB,IAAI,EAAE,MAAM;4BACZ,EAAE,EAAE,iBAAiB;yBACtB,CAAC,EAJI,CAIJ,EACF,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC3C,EAAA;;oBARD,SAQC,CAAA;;;;;CACF,CAAA;AAED,MAAM,CAAC,IAAM,wBAAwB,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;oBAClD,UAAU,CAAC,qDAAqD,CAAC,CAAA;;;;oBAOzD,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;oBACf,aAAa,GAAG,sBAAe,EAAE,yBAAsB,CAAA;oBACvD,aAAa,GAAG,sBAAe,EAAE,yBAAsB,CAAA;oBAE5C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;oBAA3G,aAAW,SAAgG;oBACjH,UAAU,GAAG,UAAQ,CAAC,EAAE,CAAA;oBACxB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,UAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,EAAA;;oBAApF,SAAoF,CAAA;oBAEnE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;oBAA3G,QAAQ,GAAG,SAAgG;oBACjH,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;oBACxB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,EAAA;;oBAApF,SAAoF,CAAA;oBAE9E,eAAa,IAAI,cAAc,CAAC,EAAE,IAAI,MAAA,EAAE,UAAU,YAAA,EAAE,CAAC,CAAA;oBAC3D,qBAAM,8BAA8B,CAAC,GAAG,EAAE,YAAU,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAA;;oBAA/E,SAA+E,CAAA;oBAEzE,gBAAc,IAAI,cAAc,CAAC,EAAE,IAAI,MAAA,EAAE,UAAU,YAAA,EAAE,CAAC,CAAA;oBAC5D,qBAAM,8BAA8B,CAAC,GAAG,EAAE,aAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;wBAEhF,oFAAoF;sBAFJ;;oBAAhF,SAAgF,CAAA;oBAEhF,oFAAoF;oBACpF,qBAAM,UAAU,CACd,qEAAqE,EACrE,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAQ,CAAC,EAAE,eAAO,iBAAiB,EAAG,EAAxE,CAAwE,EAC9E,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,UAAC,EAAc;oCAAb,KAAK,QAAA,EAAE,KAAK,QAAA;gCAAM,OAAC,CAAS,CAAC,KAAK,CAAC,KAAK,KAAK;4BAA3B,CAA2B,CAAC,EAAxF,CAAwF,EAAE,CAC5G,EAAA;;oBALD,oFAAoF;oBACpF,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,4DAA4D,EAC5D,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAQ,CAAC,EAAE,CAAC,EAA3C,CAA2C,EACjD,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,UAAC,EAAc;oCAAb,KAAK,QAAA,EAAE,KAAK,QAAA;gCAAM,OAAC,CAAS,CAAC,KAAK,CAAC,KAAK,KAAK;4BAA3B,CAA2B,CAAC,EAAxF,CAAwF,EAAE,CAC5G,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,iCAAiC,EACjC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,UAAC,EAAc;oCAAb,KAAK,QAAA,EAAE,KAAK,QAAA;gCAAM,OAAC,CAAS,CAAC,KAAK,CAAC,KAAK,KAAK;4BAA3B,CAA2B,CAAC,EAAxF,CAAwF,EAAE,CAC5G,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,kCAAkC,EAClC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAQ,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,EAA7F,CAA6F,EACnG,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,kBAAkB,KAAK,IAAI,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,EAA5D,CAA4D,EAAE,CAChF,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,mCAAmC,EACnC,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAQ,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAC,EAA3E,CAA2E,EACjF,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC3C;wBAED,oEAAoE;sBAFnE;;oBAJD,SAIC,CAAA;oBAGsB,qBAAM,YAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;4BACzE,SAAS,EAAE,UAAQ,CAAC,EAAE;4BACtB,MAAM,EAAE,OAAO;4BACf,QAAQ,EAAE,aAAa;4BACvB,IAAI,EAAE,MAAM;4BACZ,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE;4BACzC,UAAU,EAAE,gBAAgB;yBAC7B,CAAC,EAAA;;oBAPI,mBAAiB,SAOrB;oBACF,qBAAM,UAAU,CACd,2EAA2E,EAC3E,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAc,CAAC,EAAE,CAAC,EAA7D,CAA6D,EACnE,EAAE,QAAQ,EAAE,UAAA,CAAC;;gCAAI,OAAA,CACf,CAAA,MAAA,CAAC,CAAC,UAAU,0CAAE,MAAM,MAAK,gBAAgB,CAAC,MAAM;uCAC7C,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;uCACvC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,KAAK,EAAE;uCAC1C,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,KAAK,GAAG;uCAC1C,CAAA,MAAA,MAAA,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,0CAAG,CAAC,CAAC,0CAAE,MAAM,MAAK,0BAA0B;uCACvE,CAAA,MAAA,MAAA,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,0CAAG,CAAC,CAAC,0CAAE,IAAI,MAAK,QAAQ;uCACnD,CAAA,MAAA,MAAA,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,0CAAG,CAAC,CAAC,0CAAE,OAAO,MAAK,iBAAiB;uCAC/D,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK,GAAG,CAC/B,CAAA;6BAAA,EAAE,CACJ,EAAA;;oBAbD,SAaC,CAAA;oBAEyB,qBAAM,YAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;4BAC5E,SAAS,EAAE,UAAQ,CAAC,EAAE;4BACtB,MAAM,EAAE,OAAO;4BACf,QAAQ,EAAE,aAAa;4BACvB,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE;yBACzC,CAAC,EAAA;;oBANI,sBAAoB,SAMxB;oBACF,qBAAM,UAAU,CACd,sEAAsE,EACtE,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,mBAAiB,CAAC,EAAE,CAAC,EAAhE,CAAgE,EACtE,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK,GAAG,EAAzD,CAAyD,EAAE,CAC7E;wBAED,qDAAqD;sBAFpD;;oBAJD,SAIC,CAAA;oBAED,qDAAqD;oBACrD,qBAAM,UAAU,CACd,8CAA8C,EAC9C,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,mBAAiB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAjH,CAAiH,EACvH,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK,GAAG,EAA3B,CAA2B,EAAE,CAC/C,EAAA;;oBALD,qDAAqD;oBACrD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,8CAA8C,EAC9C,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,mBAAiB,CAAC,EAAE,CAAC,EAAnE,CAAmE,EACzE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC7C;wBAED,qEAAqE;sBAFpE;;oBAJD,SAIC,CAAA;oBAGoB,qBAAM,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;4BAChE,SAAS,EAAE,UAAQ,CAAC,EAAE;4BACtB,MAAM,EAAE,OAAO;4BACf,QAAQ,EAAE,aAAa;4BACvB,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE;yBACzC,CAAC,EAAA;;oBANI,iBAAe,SAMnB;oBACF,qBAAM,UAAU,CACd,8DAA8D,EAC9D,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAA1G,CAA0G,EAChH,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC3C,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,8DAA8D,EAC9D,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,cAAY,CAAC,EAAE,CAAC,EAA9D,CAA8D,EACpE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC3C,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,+DAA+D,EAC/D,cAAM,OAAA,YAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,cAAY,CAAC,EAAE,CAAC,EAA3D,CAA2D,EACjE,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,cAAY,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK,GAAG,EAAvD,CAAuD,EAAE,CAC3E;wBAED,8EAA8E;sBAF7E;;oBAJD,SAIC,CAAA;oBAED,8EAA8E;oBAC9E,qBAAM,UAAU,CACd,4DAA4D,EAC5D,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,gBAAc,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAxG,CAAwG,EAC9G,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK,GAAG,EAA3B,CAA2B,EAAE,CAC/C,EAAA;;oBALD,8EAA8E;oBAC9E,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,4DAA4D,EAC5D,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,gBAAc,CAAC,EAAE,CAAC,EAAzD,CAAyD,EAC/D,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC7C;wBAED,wDAAwD;sBAFvD;;oBAJD,SAIC,CAAA;oBAGuB,qBAAM,YAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC;4BAC1E,SAAS,EAAE,UAAQ,CAAC,EAAE;4BACtB,MAAM,EAAE,OAAO;4BACf,QAAQ,EAAE,aAAa;4BACvB,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE;yBACzC,CAAC,EAAA;;oBANI,oBAAkB,SAMtB;oBACF,qBAAM,UAAU,CACd,gEAAgE,EAChE,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,iBAAe,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAA9G,CAA8G,EACpH,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC3C,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,gEAAgE,EAChE,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,iBAAe,CAAC,EAAE,CAAC,EAAlE,CAAkE,EACxE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC3C,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,UAAU,CACd,oEAAoE,EACpE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAe,CAAC,EAAE,CAAC,EAAvD,CAAuD,EAC7D,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,EAAE,KAAK,iBAAe,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK,GAAG,EAA1D,CAA0D,EAAE,CAC9E;wBAED,wFAAwF;sBAFvF;;oBAJD,SAIC,CAAA;oBAED,wFAAwF;oBACxF,qBAAM,gBAAgB,CAAC,EAAE,GAAG,KAAA,EAAE,UAAU,cAAA,EAAE,CAAC,EAAA;;oBAD3C,wFAAwF;oBACxF,SAA2C,CAAA;;;yBAGvC,UAAU,EAAV,yBAAU;;;;oBACN,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAA;;oBAA5C,SAA4C,CAAA;;;;;;yBAEhD,UAAU,EAAV,yBAAU;;;;oBACN,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAA;;oBAA5C,SAA4C,CAAA;;;;;;;;;;CAGvD,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,wBAAwB,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAApD,SAAoD,CAAA;;;;SACrD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAA;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAA;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/esm/tests/api_tests/security/F-0005-ai-conversations-rbac.test.d.ts

@@ -14,6 +14,16 @@ import { Session } from "../../../sdk";
  *   2. Assigns the role to the non-admin user.
  *   3. Calls each endpoint as the non-admin.
  *   4. Asserts each endpoint returns a 403-equivalent error (not 200).
+ *   5. Positive case: a role granting ai_conversations create (read/update denied) must pass
+ *      the send_message gate — generating a NEW conversation requires only create access.
+ *   6. But the same role must still 403 when passing a conversationId: continuing an existing
+ *      conversation reads its stored history (returned in the response) and appends to it,
+ *      so it requires read + update access in addition to create.
+ *   7. Default-provider-permissions role (ai_conversations = Assigned): send_message must not
+ *      500. Regression: the post-generation $push previously ran through the caller's
+ *      access-scoped DB, where "Assigned" filters can't match the just-created conversation,
+ *      returning null and crashing the handler (Cannot read properties of null '_id') after
+ *      credits were consumed. bedrock.ts now persists via tenant-scoped org-wide queries.
  *
  * Pre-fix:
  *   - send_message: 200 (or some downstream error from Bedrock) — NOT 403. Test fails.

package/lib/esm/tests/api_tests/security/F-0005-ai-conversations-rbac.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"F-0005-ai-conversations-rbac.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/F-0005-ai-conversations-rbac.test.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAYtC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,2BAA2B;SAAwC,OAAO;iBAAe,OAAO;mBA8F5G,CAAA"}
+{"version":3,"file":"F-0005-ai-conversations-rbac.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/F-0005-ai-conversations-rbac.test.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAYtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,2BAA2B;SAAwC,OAAO;iBAAe,OAAO;mBA+M5G,CAAA"}