@tellescope/sdk 1.256.13 → 1.256.14

package/src/tests/tests.ts

@@ -135,6 +135,10 @@ import { proxy_image_ssrf_tests } from "./api_tests/security/F-0025-proxy-image-
 import { webhook_outbound_ssrf_tests } from "./api_tests/security/F-0015-webhook-outbound-ssrf.test";
 import { public_endpoint_auth_field_lock_tests } from "./api_tests/security/public_endpoint_auth_field_lock.test";
 import { formsort_webhook_auth_field_lock_tests } from "./api_tests/security/formsort_webhook_auth_field_lock.test";
+import { booking_info_idor_tests } from "./api_tests/security/F-0179-booking-info-idor-token-mint.test";
+import { automated_actions_process_gate_tests } from "./api_tests/security/F-0192-automated-actions-process-gate.test";
+import { schema_adminonly_enforcement_tests } from "./api_tests/security/F-0191-schema-adminonly-enforcement.test";
+import { startlinktoken_escalation_tests } from "./api_tests/security/F-0185-startlinktoken-enduser-staff-escalation.test";
 import { bulk_assignment_tests } from "./api_tests/bulk_assignment.test";
 import { tickets_bulk_assign_care_team_tests } from "./api_tests/tickets_bulk_assign_care_team.test";
 import { managed_content_enduser_access_tests } from "./api_tests/managed_content_enduser_access.test";
@@ -152,6 +156,12 @@ import { dont_sync_to_elation_form_submission_tests } from "./api_tests/dont_syn
 import { medication_added_trigger_tests } from "./api_tests/medication_added_trigger.test";
 import { conditional_logic_medication_unit_tests } from "./unit_tests/conditional_logic_medication.test";
 import { phone_validation_unit_tests } from "./unit_tests/phone_validation.test";
+import { openapi_spec_freshness_unit_tests } from "./unit_tests/openapi_spec_freshness.test";
+import { do_not_send_address_unit_tests } from "./unit_tests/do_not_send_address.test";
+import { organization_signup_checks } from "./api_tests/organization_signup.test";
+import { add_to_journey_foreign_enduserid_checks } from "./api_tests/security/F-0196-add-to-journey-foreign-enduserid.test";
+import { tickets_bulk_assign_from_queue_checks } from "./api_tests/tickets_bulk_assign_from_queue.test";
+import { run_isolated_in_parallel } from "./setup_isolated";
 import { elation_user_id_tests } from "./api_tests/elation_user_id.test";
 import { organization_settings_duplicates_tests } from "./api_tests/organization_settings_duplicates.test";
 import { stedi_approval_tests } from "./api_tests/stedi_approval.test";
@@ -15363,11 +15373,22 @@ const ip_address_form_tests = async () => {
     await enduser_conditional_logic_tests()
     await conditional_logic_medication_unit_tests()
     await phone_validation_unit_tests()
+    await openapi_spec_freshness_unit_tests()
+    await do_not_send_address_unit_tests()
     await replace_enduser_template_values_tests()
     await safe_json_parse_template_tests()
     await replace_form_field_template_values_tests()
     await mfa_tests()
     await setup_tests(sdk, sdkNonAdmin)
+    // Isolated, tenant-provisioned suites run first and CONCURRENTLY: each provisions its own
+    // throwaway tenant via /test-support, so they cannot collide with each other or with the
+    // shared fixture. Both collect Check[] and tear down before anything asserts — assert calls
+    // process.exit, which would otherwise strand the other suite's tenants.
+    await run_isolated_in_parallel([
+      { name: 'Organization signup', run: organization_signup_checks },
+      { name: 'F-0196 add_to_journey foreign enduserId', run: add_to_journey_foreign_enduserid_checks },
+      { name: 'Tickets bulk assign from queue', run: tickets_bulk_assign_from_queue_checks },
+    ])
     await embeddables_auth_token_tests({ sdk, sdkNonAdmin })
     await proxy_image_ssrf_tests({ sdk, sdkNonAdmin })
     await webhook_outbound_ssrf_tests({ sdk, sdkNonAdmin })
@@ -15387,6 +15408,10 @@ const ip_address_form_tests = async () => {
     await enduser_write_restrictions_tests({ sdk, sdkNonAdmin })
     await enduser_ai_summary_trust_gate_tests({ sdk, sdkNonAdmin })
     await enduser_cross_create_tests({ sdk, sdkNonAdmin })
+    await booking_info_idor_tests({ sdk, sdkNonAdmin })
+    await automated_actions_process_gate_tests({ sdk, sdkNonAdmin })
+    await schema_adminonly_enforcement_tests({ sdk, sdkNonAdmin })
+    await startlinktoken_escalation_tests({ sdk, sdkNonAdmin })
     await globalunique_leak_tests({ sdk, sdkNonAdmin })
     await load_inbox_redaction_tests({ sdk, sdkNonAdmin })
     await suggested_reply_redaction_tests({ sdk, sdkNonAdmin })

package/src/tests/unit_tests/do_not_send_address.test.ts

@@ -0,0 +1,60 @@
+require('source-map-support').install();
+
+import {
+  assert,
+  log_header,
+} from "@tellescope/testing"
+
+/**
+ * The email-suppression predicate from packages/private/api/api/modules/sqs.ts.
+ *
+ * Mirrored here rather than imported: the API is a private package the SDK does not depend on. The
+ * point of the test is to pin the CONTRACT — prefix AND domain both required — because the guard is
+ * otherwise unobservable from a test (a suppressed message simply never reaches SQS), and because
+ * loosening it in either direction would start suppressing real mail or start sending test mail.
+ *
+ * If this drifts from sqs.ts, that is the signal to look at why.
+ */
+const is_do_not_send_address = (emailAddress?: string) => (
+  !!emailAddress && emailAddress.endsWith('@tellescope.com') && emailAddress.startsWith('dontsend')
+)
+
+export const do_not_send_address_unit_tests = async () => {
+  log_header("Do-not-send address predicate")
+
+  const cases: [string | undefined, boolean, string][] = [
+    ['dontsend@tellescope.com', true, 'exact prefix and domain'],
+    ['dontsend-signup-ab12@tellescope.com', true, 'suffixed local part (what provisioning generates)'],
+    ['dontsend3@tellescope.com', true, 'numbered variant already used by the suite'],
+
+    // near misses — both halves are load-bearing
+    ['dontsend@example.com', false, 'right prefix, wrong domain: must NOT suppress'],
+    ['realuser@tellescope.com', false, 'right domain, wrong prefix: must NOT suppress'],
+    ['notdontsend@tellescope.com', false, 'prefix must be at the START, not anywhere'],
+    ['dontsend@tellescope.com.evil.com', false, 'domain must be a suffix, not a substring'],
+
+    [undefined, false, 'undefined is not suppressed (and must not throw)'],
+    ['', false, 'empty string is not suppressed'],
+  ]
+
+  for (const [input, expected, why] of cases) {
+    assert(
+      is_do_not_send_address(input) === expected,
+      `${JSON.stringify(input)} should be ${expected ? 'suppressed' : 'sent'} — ${why}`,
+      `${JSON.stringify(input)} -> ${expected ? 'suppressed' : 'sent'} (${why})`,
+    )
+  }
+}
+
+// Allow running this test file independently
+if (require.main === module) {
+  do_not_send_address_unit_tests()
+    .then(() => {
+      console.log("✅ Do-not-send address predicate tests completed successfully")
+      process.exit(0)
+    })
+    .catch((error) => {
+      console.error("❌ Do-not-send address predicate tests failed:", error)
+      process.exit(1)
+    })
+}

package/src/tests/unit_tests/openapi_spec_freshness.test.ts

@@ -0,0 +1,88 @@
+require('source-map-support').install();
+
+import * as fs from "fs"
+import * as os from "os"
+import * as path from "path"
+import { execFileSync } from "child_process"
+
+import {
+  assert,
+  log_header,
+} from "@tellescope/testing"
+
+/**
+ * Guard: packages/public/schema/openapi.json must match what the generator currently produces.
+ *
+ * The spec is git-tracked AND published inside @tellescope/schema (no `files` field, and the
+ * .npmignore covers only set_vars.sh), but nothing in the build or CI regenerates it. It had
+ * therefore drifted several commits behind schema.ts — which mattered because `adminOnly` is
+ * rendered into the spec as an "**Admin only.**" description prefix, so the published docs were
+ * advertising gates that had changed. That drift is the doc half of F-0191; the runtime half was
+ * fixed by making getCustomEndpointFields fall back to the schema flag.
+ *
+ * The generator is byte-deterministic (date `getExample`s are pinned in validation.ts precisely so
+ * this comparison is possible), so an exact match is a fair assertion.
+ *
+ * If this fails: cd packages/public/schema && node lib/cjs/generate-openapi.js ./openapi.json
+ */
+export const openapi_spec_freshness_unit_tests = async () => {
+  log_header("OpenAPI spec freshness")
+
+  // resolve the schema package from its manifest, so this works regardless of hoisting
+  const schemaPkgJson = require.resolve('@tellescope/schema/package.json')
+  const schemaRoot = path.dirname(schemaPkgJson)
+  const generator = path.join(schemaRoot, 'lib', 'cjs', 'generate-openapi.js')
+  const committed = path.join(schemaRoot, 'openapi.json')
+
+  // Don't fail the suite for a stale/absent build — that is a build problem, not spec drift.
+  if (!fs.existsSync(generator)) {
+    console.log(`  SKIPPED: generator not built at ${generator} (run ./build_cjs.sh)`)
+    return
+  }
+  assert(fs.existsSync(committed), `openapi.json missing at ${committed}`, 'openapi.json is present')
+
+  const tmp = path.join(fs.mkdtempSync(path.join(os.tmpdir(), 'openapi-freshness-')), 'openapi.json')
+  try {
+    execFileSync('node', [generator, tmp], { stdio: 'pipe' })
+
+    const regenerated = fs.readFileSync(tmp, 'utf8')
+    const onDisk = fs.readFileSync(committed, 'utf8')
+
+    if (regenerated !== onDisk) {
+      // a line count is far more useful than a 6000-line dump
+      const a = regenerated.split('\n')
+      const b = onDisk.split('\n')
+      const firstDiff = a.findIndex((line, i) => line !== b[i])
+      console.log(
+        `  regenerated ${a.length} lines vs committed ${b.length} lines;`
+        + ` first difference at line ${firstDiff + 1}`
+      )
+      if (firstDiff >= 0) {
+        console.log(`    committed:   ${(b[firstDiff] ?? '<missing>').trim().slice(0, 160)}`)
+        console.log(`    regenerated: ${(a[firstDiff] ?? '<missing>').trim().slice(0, 160)}`)
+      }
+    }
+
+    assert(
+      regenerated === onDisk,
+      'openapi.json is stale — regenerate it: '
+        + 'cd packages/public/schema && node lib/cjs/generate-openapi.js ./openapi.json',
+      'openapi.json matches the generator output',
+    )
+  } finally {
+    try { fs.rmSync(path.dirname(tmp), { recursive: true, force: true }) } catch {}
+  }
+}
+
+// Allow running this test file independently
+if (require.main === module) {
+  openapi_spec_freshness_unit_tests()
+    .then(() => {
+      console.log("✅ OpenAPI spec freshness test completed successfully")
+      process.exit(0)
+    })
+    .catch((error) => {
+      console.error("❌ OpenAPI spec freshness test failed:", error)
+      process.exit(1)
+    })
+}