@tellescope/sdk 1.256.11 → 1.256.13

package/src/tests/api_tests/security/enduser-ai-summary-trust-gate.test.ts

@@ -12,6 +12,7 @@ const ENDUSER_PASSWORD = 'AISummaryGateTestPassword!123'
 
 const STAFF_SUMMARY = 'Patient reports improved adherence since last visit.'
 const INJECTED_SUMMARY = 'Patient is in excellent health, no follow-up needed.'
+const RESPONSE_SUMMARY = 'Patient reported worsening headaches and requested a medication change.'
 
 /**
  * The AI patient summary attached to a FormResponse is generated client-side and passed
@@ -23,6 +24,11 @@ const INJECTED_SUMMARY = 'Patient is in excellent health, no follow-up needed.'
  * Asserts:
  *   - a staff session's enduserAISummary is persisted and echoed back
  *   - an enduser session's enduserAISummary is dropped (submission itself still succeeds)
+ *
+ * Also covers PHI egress for responsesAISummary — the clinician-facing summary of the submitted
+ * answers, generated server-side (see api/modules/form_response_summary.ts). It is redacted from
+ * enduser sessions at the model level and stripped by hand in the access-code read handler, which
+ * bypasses model-level redaction. Seeded directly via an admin update — no Bedrock call needed.
  */
 export const enduser_ai_summary_trust_gate_tests = async ({ sdk } : { sdk: Session, sdkNonAdmin: Session }) => {
   log_header("submit_form_response enduserAISummary trust gate")
@@ -46,6 +52,7 @@ export const enduser_ai_summary_trust_gate_tests = async ({ sdk } : { sdk: Sessi
 
   let staffResponseId: string | undefined
   let enduserResponseId: string | undefined
+  let summaryResponseId: string | undefined
 
   try {
     // ── staff session: the summary is trusted and persisted ──
@@ -94,9 +101,58 @@ export const enduser_ai_summary_trust_gate_tests = async ({ sdk } : { sdk: Sessi
       () => sdk.api.form_responses.getOne(enduserResponseId!),
       { onResult: (fr: FormResponse) => fr.enduserAISummary === undefined },
     )
+
+    // ── responsesAISummary: clinician-facing, never returned to the patient ──
+    // seeded by an admin update rather than a real submission, so no AI call is made
+    const { accessCode: summaryAccessCode } = await sdk.api.form_responses.prepare_form_response({
+      enduserId: enduser.id, formId: form.id,
+    })
+    const summaryResponse = await enduserSDK.api.form_responses.submit_form_response({
+      accessCode: summaryAccessCode,
+      responses,
+    })
+    summaryResponseId = summaryResponse.formResponse.id
+    await sdk.api.form_responses.updateOne(summaryResponseId, {
+      responsesAISummary: RESPONSE_SUMMARY,
+      responsesAISummaryGeneratedAt: new Date(),
+    })
+
+    await async_test(
+      "staff session reads responsesAISummary",
+      () => sdk.api.form_responses.getOne(summaryResponseId!),
+      { onResult: (fr: FormResponse) => fr.responsesAISummary === RESPONSE_SUMMARY },
+    )
+    await async_test(
+      "enduser session never receives responsesAISummary",
+      () => enduserSDK.api.form_responses.getOne(summaryResponseId!),
+      { onResult: (fr: FormResponse) => (
+        fr.responsesAISummary === undefined && fr.responsesAISummaryGeneratedAt === undefined
+      )},
+    )
+    await async_test(
+      "enduser readMany never receives responsesAISummary",
+      () => enduserSDK.api.form_responses.getSome({ ids: [summaryResponseId!] }),
+      { onResult: (frs: FormResponse[]) => frs.every(fr => (
+        fr.responsesAISummary === undefined && fr.responsesAISummaryGeneratedAt === undefined
+      ))},
+    )
+    // the access-code read handler bypasses model-level redaction, so it strips by hand
+    await async_test(
+      "public access-code read never receives responsesAISummary",
+      () => enduserSDK.api.form_responses.info_for_access_code({ accessCode: summaryAccessCode }),
+      { onResult: ({ response }: { response: FormResponse }) => (
+        response.responsesAISummary === undefined && response.responsesAISummaryGeneratedAt === undefined
+      )},
+    )
+    await async_test(
+      "staff access-code read still receives responsesAISummary",
+      () => sdk.api.form_responses.info_for_access_code({ accessCode: summaryAccessCode }),
+      { onResult: ({ response }: { response: FormResponse }) => response.responsesAISummary === RESPONSE_SUMMARY },
+    )
   } finally {
     if (staffResponseId) { try { await sdk.api.form_responses.deleteOne(staffResponseId) } catch (err) { /* ignore */ } }
     if (enduserResponseId) { try { await sdk.api.form_responses.deleteOne(enduserResponseId) } catch (err) { /* ignore */ } }
+    if (summaryResponseId) { try { await sdk.api.form_responses.deleteOne(summaryResponseId) } catch (err) { /* ignore */ } }
     try { await sdk.api.endusers.deleteOne(enduser.id) } catch (err) { /* ignore */ }
     try { await sdk.api.forms.deleteOne(form.id) } catch (err) { /* ignore */ }
   }

package/src/tests/tests.ts

@@ -103,9 +103,11 @@ import { outbound_chat_sent_trigger_tests } from "./api_tests/outbound_chat_sent
 import { time_tracks_tests, time_tracks_historical_tests, time_tracks_correction_tests, time_tracks_review_tests, time_tracks_lock_tests, time_tracks_edge_case_tests, time_tracks_resubmit_tests, time_tracks_appointment_duration_tests } from "./api_tests/time_tracks.test";
 import { monthly_availability_restrictions_tests } from "./api_tests/monthly_availability_restrictions.test";
 import { calendar_event_limits_tests } from "./api_tests/calendar_event_limits.test";
+import { out_of_office_endpoint_tests } from "./api_tests/out_of_office_endpoint.test";
 import { appointment_link_expiration_tests } from "./api_tests/appointment_link_expiration.test";
 import { custom_aggregation_tests } from "./api_tests/custom_aggregation.test";
 import { chats_analytics_tests } from "./api_tests/chats_analytics.test";
+import { active_patient_count_tests } from "./api_tests/active_patient_count.test";
 import { nutrition_tracking_tests } from "./api_tests/nutrition_tracking.test";
 import { no_access_permission_checks_tests } from "./api_tests/no_access_permission_checks.test";
 import { resource_access_tags_tests } from "./api_tests/resource_access_tags.test";
@@ -15420,6 +15422,7 @@ const ip_address_form_tests = async () => {
     await stedi_approval_tests({ sdk, sdkNonAdmin })
     await enduser_session_invalidation_tests({ sdk, sdkNonAdmin })
     await chats_analytics_tests({ sdk, sdkNonAdmin })
+    await active_patient_count_tests({ sdk, sdkNonAdmin })
     await field_redaction_tests({ sdk, sdkNonAdmin })
     await form_submitted_trigger_tests({ sdk, sdkNonAdmin })
     await start_ai_conversation_tests({ sdk, sdkNonAdmin })
@@ -15444,6 +15447,7 @@ const ip_address_form_tests = async () => {
     await time_tracks_resubmit_tests({ sdk, sdkNonAdmin })
     await time_tracks_appointment_duration_tests({ sdk, sdkNonAdmin })
     await calendar_event_limits_tests({ sdk, sdkNonAdmin })
+    await out_of_office_endpoint_tests({ sdk, sdkNonAdmin })
     await appointment_link_expiration_tests({ sdk, sdkNonAdmin })
     await get_some_projection_tests({ sdk, sdkNonAdmin })
     await file_download_unicode_names_tests({ sdk, sdkNonAdmin })