@tellescope/sdk 1.256.14 → 1.256.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (283) hide show
  1. package/lib/cjs/tests/api_tests/auto_merge_form_submission.test.js +1 -1
  2. package/lib/cjs/tests/api_tests/auto_merge_form_submission.test.js.map +1 -1
  3. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.d.ts +5 -0
  4. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.d.ts.map +1 -0
  5. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.js +388 -0
  6. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.js.map +1 -0
  7. package/lib/cjs/tests/api_tests/integrations_redacted.test.js +3 -3
  8. package/lib/cjs/tests/api_tests/integrations_redacted.test.js.map +1 -1
  9. package/lib/cjs/tests/api_tests/organization_signup.test.d.ts +1 -1
  10. package/lib/cjs/tests/api_tests/organization_signup.test.js +1 -1
  11. package/lib/cjs/tests/api_tests/purchase_made_trigger.test.d.ts.map +1 -1
  12. package/lib/cjs/tests/api_tests/purchase_made_trigger.test.js +103 -162
  13. package/lib/cjs/tests/api_tests/purchase_made_trigger.test.js.map +1 -1
  14. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts +33 -0
  15. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts.map +1 -0
  16. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.js +249 -0
  17. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.js.map +1 -0
  18. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts +42 -0
  19. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts.map +1 -0
  20. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js +281 -0
  21. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js.map +1 -0
  22. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.d.ts +38 -0
  23. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.d.ts.map +1 -0
  24. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.js +390 -0
  25. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.js.map +1 -0
  26. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.d.ts +6 -0
  27. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.d.ts.map +1 -0
  28. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.js +1003 -0
  29. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.js.map +1 -0
  30. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.d.ts +42 -0
  31. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.d.ts.map +1 -0
  32. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.js +323 -0
  33. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.js.map +1 -0
  34. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts +29 -0
  35. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts.map +1 -0
  36. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.js +335 -0
  37. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.js.map +1 -0
  38. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts +32 -0
  39. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts.map +1 -0
  40. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js +237 -0
  41. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js.map +1 -0
  42. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts +28 -0
  43. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts.map +1 -0
  44. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.js +349 -0
  45. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.js.map +1 -0
  46. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts +30 -0
  47. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts.map +1 -0
  48. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js +314 -0
  49. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js.map +1 -0
  50. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.d.ts +21 -0
  51. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.d.ts.map +1 -0
  52. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.js +362 -0
  53. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.js.map +1 -0
  54. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.d.ts +21 -0
  55. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.d.ts.map +1 -0
  56. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.js +366 -0
  57. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.js.map +1 -0
  58. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.d.ts +32 -0
  59. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.d.ts.map +1 -0
  60. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.js +248 -0
  61. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.js.map +1 -0
  62. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts +19 -0
  63. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts.map +1 -0
  64. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.js +138 -0
  65. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.js.map +1 -0
  66. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts +24 -0
  67. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts.map +1 -0
  68. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js +201 -0
  69. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js.map +1 -0
  70. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.d.ts +29 -0
  71. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.d.ts.map +1 -0
  72. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.js +278 -0
  73. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.js.map +1 -0
  74. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.d.ts +17 -0
  75. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.d.ts.map +1 -0
  76. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.js +155 -0
  77. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.js.map +1 -0
  78. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.d.ts +2 -0
  79. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.d.ts.map +1 -0
  80. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.js +88 -0
  81. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.js.map +1 -0
  82. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts +34 -0
  83. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts.map +1 -0
  84. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.js +230 -0
  85. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.js.map +1 -0
  86. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts +2 -0
  87. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts.map +1 -0
  88. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.js +242 -0
  89. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.js.map +1 -0
  90. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.d.ts +2 -0
  91. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.d.ts.map +1 -0
  92. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.js +148 -0
  93. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.js.map +1 -0
  94. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts +45 -0
  95. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts.map +1 -0
  96. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.js +388 -0
  97. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.js.map +1 -0
  98. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.d.ts +38 -0
  99. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.d.ts.map +1 -0
  100. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.js +222 -0
  101. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.js.map +1 -0
  102. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts +6 -0
  103. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts.map +1 -0
  104. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js +354 -0
  105. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js.map +1 -0
  106. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts +28 -0
  107. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts.map +1 -0
  108. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.js +442 -0
  109. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.js.map +1 -0
  110. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.d.ts +19 -0
  111. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.d.ts.map +1 -0
  112. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.js +156 -0
  113. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.js.map +1 -0
  114. package/lib/cjs/tests/api_tests/webhook_error_handling.test.js +2 -2
  115. package/lib/cjs/tests/api_tests/webhook_error_handling.test.js.map +1 -1
  116. package/lib/cjs/tests/tests.d.ts.map +1 -1
  117. package/lib/cjs/tests/tests.js +58 -46
  118. package/lib/cjs/tests/tests.js.map +1 -1
  119. package/lib/cjs/tests/unit_tests/openapi_spec_freshness.test.d.ts +1 -1
  120. package/lib/cjs/tests/unit_tests/openapi_spec_freshness.test.js +1 -1
  121. package/lib/cjs/tsconfig.cjs.tsbuildinfo +1 -0
  122. package/lib/esm/enduser.d.ts +0 -1
  123. package/lib/esm/enduser.d.ts.map +1 -1
  124. package/lib/esm/sdk.d.ts +2 -3
  125. package/lib/esm/sdk.d.ts.map +1 -1
  126. package/lib/esm/session.d.ts +0 -1
  127. package/lib/esm/session.d.ts.map +1 -1
  128. package/lib/esm/tests/api_tests/auto_merge_form_submission.test.js +1 -1
  129. package/lib/esm/tests/api_tests/auto_merge_form_submission.test.js.map +1 -1
  130. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.d.ts +5 -0
  131. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.d.ts.map +1 -0
  132. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.js +383 -0
  133. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.js.map +1 -0
  134. package/lib/esm/tests/api_tests/integrations_redacted.test.js +3 -3
  135. package/lib/esm/tests/api_tests/integrations_redacted.test.js.map +1 -1
  136. package/lib/esm/tests/api_tests/organization_signup.test.d.ts +1 -1
  137. package/lib/esm/tests/api_tests/organization_signup.test.js +1 -1
  138. package/lib/esm/tests/api_tests/purchase_made_trigger.test.d.ts.map +1 -1
  139. package/lib/esm/tests/api_tests/purchase_made_trigger.test.js +104 -163
  140. package/lib/esm/tests/api_tests/purchase_made_trigger.test.js.map +1 -1
  141. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts +33 -0
  142. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts.map +1 -0
  143. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.js +244 -0
  144. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.js.map +1 -0
  145. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts +42 -0
  146. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts.map +1 -0
  147. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js +276 -0
  148. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js.map +1 -0
  149. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.d.ts +38 -0
  150. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.d.ts.map +1 -0
  151. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.js +386 -0
  152. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.js.map +1 -0
  153. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.d.ts +6 -0
  154. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.d.ts.map +1 -0
  155. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.js +996 -0
  156. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.js.map +1 -0
  157. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.d.ts +42 -0
  158. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.d.ts.map +1 -0
  159. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.js +316 -0
  160. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.js.map +1 -0
  161. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts +29 -0
  162. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts.map +1 -0
  163. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.js +331 -0
  164. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.js.map +1 -0
  165. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts +32 -0
  166. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts.map +1 -0
  167. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js +233 -0
  168. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js.map +1 -0
  169. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts +28 -0
  170. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts.map +1 -0
  171. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.js +345 -0
  172. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.js.map +1 -0
  173. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts +30 -0
  174. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts.map +1 -0
  175. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js +310 -0
  176. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js.map +1 -0
  177. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.d.ts +21 -0
  178. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.d.ts.map +1 -0
  179. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.js +358 -0
  180. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.js.map +1 -0
  181. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.d.ts +21 -0
  182. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.d.ts.map +1 -0
  183. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.js +362 -0
  184. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.js.map +1 -0
  185. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.d.ts +32 -0
  186. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.d.ts.map +1 -0
  187. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.js +243 -0
  188. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.js.map +1 -0
  189. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts +19 -0
  190. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts.map +1 -0
  191. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.js +134 -0
  192. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.js.map +1 -0
  193. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts +24 -0
  194. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts.map +1 -0
  195. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js +194 -0
  196. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js.map +1 -0
  197. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.d.ts +29 -0
  198. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.d.ts.map +1 -0
  199. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.js +271 -0
  200. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.js.map +1 -0
  201. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.d.ts +17 -0
  202. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.d.ts.map +1 -0
  203. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.js +151 -0
  204. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.js.map +1 -0
  205. package/lib/esm/tests/api_tests/security/prototype-pollution.test.d.ts +2 -0
  206. package/lib/esm/tests/api_tests/security/prototype-pollution.test.d.ts.map +1 -0
  207. package/lib/esm/tests/api_tests/security/prototype-pollution.test.js +84 -0
  208. package/lib/esm/tests/api_tests/security/prototype-pollution.test.js.map +1 -0
  209. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts +34 -0
  210. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts.map +1 -0
  211. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.js +223 -0
  212. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.js.map +1 -0
  213. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts +2 -0
  214. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts.map +1 -0
  215. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.js +238 -0
  216. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.js.map +1 -0
  217. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.d.ts +2 -0
  218. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.d.ts.map +1 -0
  219. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.js +144 -0
  220. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.js.map +1 -0
  221. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts +45 -0
  222. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts.map +1 -0
  223. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.js +381 -0
  224. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.js.map +1 -0
  225. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.d.ts +38 -0
  226. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.d.ts.map +1 -0
  227. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.js +218 -0
  228. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.js.map +1 -0
  229. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts +6 -0
  230. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts.map +1 -0
  231. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js +350 -0
  232. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js.map +1 -0
  233. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts +28 -0
  234. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts.map +1 -0
  235. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.js +435 -0
  236. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.js.map +1 -0
  237. package/lib/esm/tests/api_tests/security/webhook-timeout.test.d.ts +19 -0
  238. package/lib/esm/tests/api_tests/security/webhook-timeout.test.d.ts.map +1 -0
  239. package/lib/esm/tests/api_tests/security/webhook-timeout.test.js +149 -0
  240. package/lib/esm/tests/api_tests/security/webhook-timeout.test.js.map +1 -0
  241. package/lib/esm/tests/api_tests/webhook_error_handling.test.js +2 -2
  242. package/lib/esm/tests/api_tests/webhook_error_handling.test.js.map +1 -1
  243. package/lib/esm/tests/tests.d.ts.map +1 -1
  244. package/lib/esm/tests/tests.js +36 -24
  245. package/lib/esm/tests/tests.js.map +1 -1
  246. package/lib/esm/tests/unit_tests/openapi_spec_freshness.test.d.ts +1 -1
  247. package/lib/esm/tests/unit_tests/openapi_spec_freshness.test.js +1 -1
  248. package/lib/tsconfig.tsbuildinfo +1 -1
  249. package/package.json +10 -10
  250. package/src/tests/api_tests/auto_merge_form_submission.test.ts +1 -1
  251. package/src/tests/api_tests/enduser_observations_auto_review.test.ts +358 -0
  252. package/src/tests/api_tests/integrations_redacted.test.ts +1 -1
  253. package/src/tests/api_tests/organization_signup.test.ts +2 -2
  254. package/src/tests/api_tests/purchase_made_trigger.test.ts +29 -41
  255. package/src/tests/api_tests/security/{F-0196-add-to-journey-foreign-enduserid.test.ts → add-to-journey-foreign-enduserid.test.ts} +6 -7
  256. package/src/tests/api_tests/security/{F-0005-ai-conversations-rbac.test.ts → ai-conversations-rbac.test.ts} +14 -14
  257. package/src/tests/api_tests/security/{F-0166-allowed-paths-wildcard-bypass.test.ts → allowed-paths-confinement.test.ts} +11 -11
  258. package/src/tests/api_tests/security/{F-0192-automated-actions-process-gate.test.ts → automated-actions-process-gate.test.ts} +6 -7
  259. package/src/tests/api_tests/security/{F-0179-booking-info-idor-token-mint.test.ts → booking-info-idor-token-mint.test.ts} +5 -6
  260. package/src/tests/api_tests/security/{F-0053-cascade-role-rename-cross-tenant.test.ts → cascade-role-rename-cross-tenant.test.ts} +10 -10
  261. package/src/tests/api_tests/security/{F-0001-data-sync-redaction-bypass.test.ts → data-sync-redaction-bypass.test.ts} +9 -9
  262. package/src/tests/api_tests/security/{F-0006-develop-health-benefit-verification-rbac.test.ts → develop-health-benefit-verification-rbac.test.ts} +7 -8
  263. package/src/tests/api_tests/security/{F-0116-F-0119-enduser-cross-create.test.ts → enduser-cross-create.test.ts} +25 -25
  264. package/src/tests/api_tests/security/{F-0106-F-0110-enduser-write-restrictions.test.ts → enduser-write-restrictions.test.ts} +12 -14
  265. package/src/tests/api_tests/security/form-logic-js-execution.test.ts +183 -0
  266. package/src/tests/api_tests/security/{F-0145-globalunique-leak.test.ts → globalunique-conflict-redaction.test.ts} +5 -6
  267. package/src/tests/api_tests/security/{F-0008-handle-incoming-communication-cross-tenant.test.ts → handle-incoming-communication-cross-tenant.test.ts} +8 -8
  268. package/src/tests/api_tests/security/{F-0007-invite-user-enumeration.test.ts → invite-user-enumeration.test.ts} +8 -8
  269. package/src/tests/api_tests/security/{F-0151-load-inbox-redaction.test.ts → load-inbox-redaction.test.ts} +5 -6
  270. package/src/tests/api_tests/security/{F-0016-prototype-pollution.test.ts → prototype-pollution.test.ts} +4 -4
  271. package/src/tests/api_tests/security/{F-0025-proxy-image-unauth-ssrf.test.ts → proxy-image-unauth-ssrf.test.ts} +11 -12
  272. package/src/tests/api_tests/security/{F-0013-sanitize-user-html-with-iframes.test.ts → sanitize-user-html-with-iframes.test.ts} +5 -5
  273. package/src/tests/api_tests/security/{F-0013-sanitize-user-html.test.ts → sanitize-user-html.test.ts} +4 -4
  274. package/src/tests/api_tests/security/{F-0191-schema-adminonly-enforcement.test.ts → schema-adminonly-enforcement.test.ts} +6 -7
  275. package/src/tests/api_tests/security/{F-0076-self-admin-role-assignment.test.ts → self-admin-role-assignment.test.ts} +13 -13
  276. package/src/tests/api_tests/security/{F-0185-startlinktoken-enduser-staff-escalation.test.ts → startlinktoken-enduser-staff-escalation.test.ts} +6 -6
  277. package/src/tests/api_tests/security/{F-0015-webhook-outbound-ssrf.test.ts → webhook-outbound-ssrf.test.ts} +13 -14
  278. package/src/tests/api_tests/security/{F-0155-webhook-timeout.test.ts → webhook-timeout.test.ts} +6 -7
  279. package/src/tests/api_tests/webhook_error_handling.test.ts +1 -1
  280. package/src/tests/tests.ts +41 -24
  281. package/src/tests/unit_tests/openapi_spec_freshness.test.ts +1 -1
  282. package/test_generated.pdf +0 -0
  283. package/src/tests/api_tests/security/readonly-enduser-preview.test.ts +0 -301
@@ -0,0 +1,156 @@
1
+ "use strict";
2
+ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
3
+ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
4
+ return new (P || (P = Promise))(function (resolve, reject) {
5
+ function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
6
+ function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
7
+ function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
8
+ step((generator = generator.apply(thisArg, _arguments || [])).next());
9
+ });
10
+ };
11
+ var __generator = (this && this.__generator) || function (thisArg, body) {
12
+ var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
13
+ return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
14
+ function verb(n) { return function (v) { return step([n, v]); }; }
15
+ function step(op) {
16
+ if (f) throw new TypeError("Generator is already executing.");
17
+ while (g && (g = 0, op[0] && (_ = 0)), _) try {
18
+ if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
19
+ if (y = 0, t) op = [op[0] & 2, t.value];
20
+ switch (op[0]) {
21
+ case 0: case 1: t = op; break;
22
+ case 4: _.label++; return { value: op[1], done: false };
23
+ case 5: _.label++; y = op[1]; op = [0]; continue;
24
+ case 7: op = _.ops.pop(); _.trys.pop(); continue;
25
+ default:
26
+ if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
27
+ if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
28
+ if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
29
+ if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
30
+ if (t[2]) _.ops.pop();
31
+ _.trys.pop(); continue;
32
+ }
33
+ op = body.call(thisArg, _);
34
+ } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
35
+ if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
36
+ }
37
+ };
38
+ var __importDefault = (this && this.__importDefault) || function (mod) {
39
+ return (mod && mod.__esModule) ? mod : { "default": mod };
40
+ };
41
+ Object.defineProperty(exports, "__esModule", { value: true });
42
+ exports.webhook_timeout_tests = void 0;
43
+ require('source-map-support').install();
44
+ var http_1 = __importDefault(require("http"));
45
+ var sdk_1 = require("../../../sdk");
46
+ var testing_1 = require("@tellescope/testing");
47
+ var setup_1 = require("../../setup");
48
+ var host = process.env.API_URL || 'http://localhost:8080';
49
+ // The server-side axios timeout is 15s (the fix under test). We bound our own wait above that.
50
+ var CLIENT_WAIT_MS = 20000;
51
+ /**
52
+ * Regression test: outbound webhook delivery must time out rather than hang.
53
+ *
54
+ * Outbound webhook delivery used axios.post(url, ...) with no `timeout` (axios default = infinite).
55
+ * A tenant-controlled receiver that accepts the connection and never responds hangs the awaited
56
+ * request indefinitely (slow-loris → worker exhaustion). Fix: timeout: 15_000 on the axios calls.
57
+ *
58
+ * Repro: stand up a local HTTP server that accepts the connection but NEVER responds, point
59
+ * send_automation_webhook (which awaits the axios call) at it, and race the call against a 20s
60
+ * client timer.
61
+ * - green (fixed): server times out at ~15s → handler returns 400 → SDK call rejects < 20s
62
+ * - red (unfixed): the call is still pending at 20s → client timer wins
63
+ */
64
+ var webhook_timeout_tests = function (_a) {
65
+ var sdk = _a.sdk;
66
+ return __awaiter(void 0, void 0, void 0, function () {
67
+ var enduserId, slowServer, port, blackholeUrl_1, enduser_1, _b;
68
+ return __generator(this, function (_c) {
69
+ switch (_c.label) {
70
+ case 0:
71
+ (0, testing_1.log_header)("outbound webhook timeout");
72
+ slowServer = http_1.default.createServer(function () { });
73
+ _c.label = 1;
74
+ case 1:
75
+ _c.trys.push([1, , 5, 10]);
76
+ return [4 /*yield*/, new Promise(function (resolve) { return slowServer.listen(0, '127.0.0.1', function () { return resolve(); }); })];
77
+ case 2:
78
+ _c.sent();
79
+ port = slowServer.address().port;
80
+ blackholeUrl_1 = "http://127.0.0.1:".concat(port, "/hook");
81
+ return [4 /*yield*/, sdk.api.endusers.createOne({ email: "f0155-".concat(Date.now(), "@example.com"), fname: 'F0155', lname: 'Webhook' })];
82
+ case 3:
83
+ enduser_1 = _c.sent();
84
+ enduserId = enduser_1.id;
85
+ return [4 /*yield*/, (0, testing_1.async_test)('outbound webhook to a non-responding receiver times out server-side (does not hang)', function () { return __awaiter(void 0, void 0, void 0, function () {
86
+ var start, outcome;
87
+ return __generator(this, function (_a) {
88
+ switch (_a.label) {
89
+ case 0:
90
+ start = Date.now();
91
+ return [4 /*yield*/, Promise.race([
92
+ sdk.api.webhooks.send_automation_webhook({
93
+ enduserId: enduser_1.id,
94
+ action: { info: { url: blackholeUrl_1 } },
95
+ }).then(function () { return 'completed'; }).catch(function () { return 'errored'; }),
96
+ new Promise(function (r) { return setTimeout(function () { return r('client-timeout'); }, CLIENT_WAIT_MS); }),
97
+ ])];
98
+ case 1:
99
+ outcome = _a.sent();
100
+ return [2 /*return*/, { outcome: outcome, elapsed: Date.now() - start }];
101
+ }
102
+ });
103
+ }); },
104
+ // green: the server-side axios timeout fired (call settled) before our 20s client wait
105
+ { onResult: function (r) { return r.outcome !== 'client-timeout' && r.elapsed < CLIENT_WAIT_MS; } })];
106
+ case 4:
107
+ _c.sent();
108
+ return [3 /*break*/, 10];
109
+ case 5:
110
+ slowServer.close();
111
+ if (!enduserId) return [3 /*break*/, 9];
112
+ _c.label = 6;
113
+ case 6:
114
+ _c.trys.push([6, 8, , 9]);
115
+ return [4 /*yield*/, sdk.api.endusers.deleteOne(enduserId)];
116
+ case 7:
117
+ _c.sent();
118
+ return [3 /*break*/, 9];
119
+ case 8:
120
+ _b = _c.sent();
121
+ return [3 /*break*/, 9];
122
+ case 9: return [7 /*endfinally*/];
123
+ case 10: return [2 /*return*/];
124
+ }
125
+ });
126
+ });
127
+ };
128
+ exports.webhook_timeout_tests = webhook_timeout_tests;
129
+ if (require.main === module) {
130
+ console.log("\uD83C\uDF10 Using API URL: ".concat(host));
131
+ var sdk_2 = new sdk_1.Session({ host: host });
132
+ var sdkNonAdmin_1 = new sdk_1.Session({ host: host });
133
+ var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
134
+ return __generator(this, function (_a) {
135
+ switch (_a.label) {
136
+ case 0: return [4 /*yield*/, (0, setup_1.setup_tests)(sdk_2, sdkNonAdmin_1)];
137
+ case 1:
138
+ _a.sent();
139
+ return [4 /*yield*/, (0, exports.webhook_timeout_tests)({ sdk: sdk_2, sdkNonAdmin: sdkNonAdmin_1 })];
140
+ case 2:
141
+ _a.sent();
142
+ return [2 /*return*/];
143
+ }
144
+ });
145
+ }); };
146
+ runTests()
147
+ .then(function () {
148
+ console.log("✅ webhook timeout test suite completed successfully");
149
+ process.exit(0);
150
+ })
151
+ .catch(function (error) {
152
+ console.error("❌ webhook timeout test suite failed:", error);
153
+ process.exit(1);
154
+ });
155
+ }
156
+ //# sourceMappingURL=webhook-timeout.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"webhook-timeout.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/webhook-timeout.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,8CAAuB;AACvB,oCAAsC;AACtC,+CAG4B;AAC5B,qCAAyC;AAEzC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,+FAA+F;AAC/F,IAAM,cAAc,GAAG,KAAM,CAAA;AAE7B;;;;;;;;;;;;GAYG;AACI,IAAM,qBAAqB,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;oBAC/C,IAAA,oBAAU,EAAC,0BAA0B,CAAC,CAAA;oBAGhC,UAAU,GAAG,cAAI,CAAC,YAAY,CAAC,cAA+C,CAAC,CAAC,CAAA;;;;oBAGpF,qBAAM,IAAI,OAAO,CAAO,UAAA,OAAO,IAAI,OAAA,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,cAAM,OAAA,OAAO,EAAE,EAAT,CAAS,CAAC,EAAlD,CAAkD,CAAC,EAAA;;oBAAtF,SAAsF,CAAA;oBAChF,IAAI,GAAI,UAAU,CAAC,OAAO,EAAU,CAAC,IAAI,CAAA;oBACzC,iBAAe,2BAAoB,IAAI,UAAO,CAAA;oBAEpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAS,IAAI,CAAC,GAAG,EAAE,iBAAc,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;oBAA1H,YAAU,SAAgH;oBAChI,SAAS,GAAG,SAAO,CAAC,EAAE,CAAA;oBAEtB,qBAAM,IAAA,oBAAU,EACd,qFAAqF,EACrF;;;;;wCACQ,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;wCACR,qBAAM,OAAO,CAAC,IAAI,CAAC;gDACjC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC;oDACvC,SAAS,EAAE,SAAO,CAAC,EAAE;oDACrB,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,cAAY,EAAE,EAAE;iDACjC,CAAC,CAAC,IAAI,CAAC,cAAM,OAAA,WAAW,EAAX,CAAW,CAAC,CAAC,KAAK,CAAC,cAAM,OAAA,SAAS,EAAT,CAAS,CAAC;gDACxD,IAAI,OAAO,CAAS,UAAA,CAAC,IAAI,OAAA,UAAU,CAAC,cAAM,OAAA,CAAC,CAAC,gBAAgB,CAAC,EAAnB,CAAmB,EAAE,cAAc,CAAC,EAArD,CAAqD,CAAC;6CAChF,CAAC,EAAA;;wCANI,OAAO,GAAG,SAMd;wCACF,sBAAO,EAAE,OAAO,SAAA,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,EAAA;;;6BAChD;wBACD,uFAAuF;wBACvF,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,OAAO,KAAK,gBAAgB,IAAI,CAAC,CAAC,OAAO,GAAG,cAAc,EAA5D,CAA4D,EAAE,CACvF,EAAA;;oBAfD,SAeC,CAAA;;;oBAED,UAAU,CAAC,KAAK,EAAE,CAAA;yBACd,SAAS,EAAT,wBAAS;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAA;;oBAA3C,SAA2C,CAAA;;;;;;;;;;CAErE,CAAA;AAlCY,QAAA,qBAAqB,yBAkCjC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,6BAAqB,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAjD,SAAiD,CAAA;;;;SAClD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAA;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAA;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
@@ -221,13 +221,13 @@ var webhook_error_handling_tests = function (_a) {
221
221
  'deliveryFailureCount incremented after HTTP 500']);
222
222
  // Scenario 3 (timeout): skipped — WEBHOOK_TIMEOUT_MS is a constant (15s), not env-overridable,
223
223
  // and a 15s+ non-responding receiver would make this suite unacceptably slow.
224
- // Covered by security/F-0155-webhook-timeout.test.ts via send_automation_webhook.
224
+ // Covered by security/webhook-timeout.test.ts via send_automation_webhook.
225
225
  // Scenario 4: success path unchanged — 200 logged, counter untouched
226
226
  return [4 /*yield*/, sdk.api.webhooks.update({ url: "".concat(receiverBase, "/success") })];
227
227
  case 17:
228
228
  // Scenario 3 (timeout): skipped — WEBHOOK_TIMEOUT_MS is a constant (15s), not env-overridable,
229
229
  // and a 15s+ non-responding receiver would make this suite unacceptably slow.
230
- // Covered by security/F-0155-webhook-timeout.test.ts via send_automation_webhook.
230
+ // Covered by security/webhook-timeout.test.ts via send_automation_webhook.
231
231
  // Scenario 4: success path unchanged — 200 logged, counter untouched
232
232
  _j.sent();
233
233
  return [4 /*yield*/, trigger_delivery('success')];
@@ -1 +1 @@
1
- {"version":3,"file":"webhook_error_handling.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/webhook_error_handling.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,oDAA6B;AAC7B,4DAAoC;AACpC,kDAA2B;AAG3B,iCAAmC;AACnC,+CAK4B;AAC5B,kCAAsC;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,WAAW,GAAG,4DAA4D,CAAA;AAChF,IAAM,MAAM,GAAG,UAAC,CAAS,IAAK,OAAA,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAnD,CAAmD,CAAA;AAEjF,iGAAiG;AACjG,IAAM,aAAa,GAAG,iDAAiD,CAAA;AAEvE,IAAM,eAAe,GAAG,KAAM,CAAA;AAC9B,IAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,IAAM,gBAAgB,GAAG,UAAO,GAAY,EAAE,GAAW;;;;;gBACjD,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;;;qBACjB,CAAA,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,eAAe,CAAA;gBAC5B,qBAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,UAAiB,EAAE,CAAC,EAAA;;gBAAjF,IAAI,GAAG,SAAwF;gBAC/F,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,GAAG,KAAK,GAAG,EAAb,CAAa,CAAC,CAAA;gBAC3C,IAAI,KAAK;oBAAE,sBAAO,KAAK,EAAA;gBACvB,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,gBAAgB,CAAC,EAAA;;gBAAvC,SAAuC,CAAA;;oBAEzC,sBAAO,IAAI,EAAA;;;KACZ,CAAA;AAED,IAAM,iBAAiB,GAAG,UAAO,GAAY;;;;;oBAC3B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAA;;gBAA1C,OAAO,GAAG,SAA8C;gBAC9D,sBAAO,CAAC,MAAA,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,oBAAoB,mCAAI,CAAC,CAAW,EAAA;;;KACzD,CAAA;AAED,0EAA0E;AAC1E,IAAM,sBAAsB,GAAG,UAAO,GAAY,EAAE,QAAgB;;;;;gBAC5D,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACpB,KAAK,GAAG,CAAC,CAAC,CAAA;;;qBACP,CAAA,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,eAAe,CAAA;gBACjC,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;gBAApC,KAAK,GAAG,SAA4B,CAAA;gBACpC,IAAI,KAAK,KAAK,QAAQ;oBAAE,sBAAO,KAAK,EAAA;gBACpC,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,gBAAgB,CAAC,EAAA;;gBAAvC,SAAuC,CAAA;;oBAEzC,sBAAO,KAAK,EAAA;;;KACb,CAAA;AAED,sDAAsD;AAC/C,IAAM,4BAA4B,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;;oBACnE,IAAA,oBAAU,EAAC,8BAA8B,CAAC,CAAA;oBAGpC,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAA;oBACrB,GAAG,CAAC,GAAG,CAAC,qBAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;oBAEvC,wBAAwB,GAAG,KAAK,CAAA;oBACpC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,UAAC,CAAC,EAAE,GAAG,IAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;oBACrF,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,UAAC,CAAC,EAAE,GAAG,IAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;oBACtF,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,UAAC,GAAG,EAAE,GAAG;wBACtB,IAAA,KAAoC,GAAG,CAAC,IAAI,EAA1C,OAAO,aAAA,EAAE,SAAS,eAAA,EAAE,SAAS,eAAa,CAAA;wBAClD,wBAAwB,GAAG,CACzB,MAAM,CAAC,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAC,CAAiB,IAAK,OAAA,CAAC,CAAC,EAAE,EAAJ,CAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,GAAG,WAAW,CAAC,KAAK,SAAS,CAC1G,CAAA;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;oBAC1B,CAAC,CAAC,CAAA;oBAE0B,qBAAM,IAAI,OAAO,CAAC,UAAA,OAAO;4BACnD,IAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,cAAM,OAAA,OAAO,CAAC,CAAC,CAAC,EAAV,CAAU,CAAC,CAAA;wBACxD,CAAC,CAAC,EAAA;;oBAFI,MAAM,GAAgB,SAE1B;oBACI,YAAY,GAAG,2BAAqB,MAAM,CAAC,OAAO,EAAU,CAAC,IAAI,CAAE,CAAA;oBAEnE,UAAU,GAAa,EAAE,CAAA;oBACzB,gBAAgB,GAAG,UAAO,KAAa;;;;wCAC3B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAiB,KAAK,cAAI,IAAI,CAAC,GAAG,EAAE,oBAAiB,EAAE,CAAC,EAAA;;oCAA5G,OAAO,GAAG,SAAkG;oCAClH,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;;;;yBAC5B,CAAA;;;;oBAGC,qBAAM,IAAA,oBAAU,EACd,mBAAmB,EACnB,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAvE,CAAuE,EAC7E,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC7C,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAA;;oBAApH,SAAoH,CAAA;oBAE/F,qBAAM,iBAAiB,CAAC,GAAG,CAAC;wBAEjD,kDAAkD;sBAFD;;oBAA3C,YAAY,GAAG,SAA4B;oBAEjD,kDAAkD;oBAClD,qBAAM,gBAAgB,CAAC,WAAW,CAAC,EAAA;;oBADnC,kDAAkD;oBAClD,SAAmC,CAAA;oBACd,qBAAM,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,EAAA;;oBAAzD,YAAY,GAAG,SAA0C;oBAC/D,IAAA,gBAAM,EAAC,CAAC,CAAC,YAAY,EAAE,8CAA8C,EAAE,0CAA0C,CAAC,CAAA;oBAClH,IAAA,gBAAM,EACJ,OAAO,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,QAAQ,CAAA,KAAK,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAC9E,uDAAgD,IAAI,CAAC,SAAS,CAAC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,QAAQ,CAAC,CAAE,EACxF,6CAA6C,CAC9C,CAAA;oBACD,IAAA,gBAAM,EAAC,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,YAAY,MAAK,SAAS,EAAE,uCAAuC,EAAE,mCAAmC,CAAC,CAAA;oBAC9H,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,sDAAsD;wBACtD,kDAAkD,EACnD,CAAA;oBAED,0CAA0C;oBAC1C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,cAAW,EAAE,CAAC,EAAA;;oBADlE,0CAA0C;oBAC1C,SAAkE,CAAA;oBAClE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBAClB,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,cAAW,CAAC,EAAA;;oBAAhE,MAAM,GAAG,SAAuD;oBACtE,IAAA,gBAAM,EAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAE,EAAE,gCAAgC,CAAC,CAAA;oBAChI,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,qDAAqD;wBACrD,iDAAiD,EAClD,CAAA;oBAED,0CAA0C;oBAC1C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,cAAW,EAAE,CAAC,EAAA;;oBADlE,0CAA0C;oBAC1C,SAAkE,CAAA;oBAClE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBAClB,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,cAAW,CAAC,EAAA;;oBAAhE,MAAM,GAAG,SAAuD;oBACtE,IAAA,gBAAM,EAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAE,EAAE,gCAAgC,CAAC,CAAA;oBAChI,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,qDAAqD;wBACrD,iDAAiD,EAClD,CAAA;oBAED,+FAA+F;oBAC/F,8EAA8E;oBAC9E,kFAAkF;oBAElF,qEAAqE;oBACrE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,aAAU,EAAE,CAAC,EAAA;;oBALjE,+FAA+F;oBAC/F,8EAA8E;oBAC9E,kFAAkF;oBAElF,qEAAqE;oBACrE,SAAiE,CAAA;oBACjE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBACd,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,aAAU,CAAC,EAAA;;oBAAnE,UAAU,GAAG,SAAsD;oBACzE,IAAA,gBAAM,EAAC,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,YAAY,CAAE,EAAE,+BAA+B,CAAC,CAAA;oBACvI,IAAA,gBAAM,EAAC,wBAAwB,EAAE,4CAA4C,EAAE,qCAAqC,CAAC,CAAA;oBACrH,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA,CAAC,+DAA+D;;oBAA3F,SAA2B,CAAA,CAAC,+DAA+D;oBAC3F,KAAA,gBAAM,CAAA;oBACJ,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;oBAD9B,kBACE,CAAA,SAA4B,MAAK,YAAY,GAAG,CAAC;wBACjD,qDAAqD;wBACrD,2CAA2C,EAC5C,CAAA;oBAGe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAA;;oBAA1C,OAAO,GAAG,SAA8C;oBACxD,SAAS,GAAG,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,EAAE,CAAA;oBAChC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAS,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA,CAAC,wBAAwB;;oBAA3H,SAAkG,CAAA,CAAC,wBAAwB;oBAC3H,KAAA,gBAAM,CAAA;oBACJ,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;oBAD9B,kBACE,CAAA,SAA4B,MAAK,YAAY,GAAG,CAAC;wBACjD,qDAAqD;wBACrD,4CAA4C,EAC7C,CAAA;;;gBAED,wEAAwE;gBACxE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBADrI,wEAAwE;oBACxE,SAAqI,CAAA;oBACrI,MAAM,CAAC,KAAK,EAAE,CAAA;0BACa,EAAV,yBAAU;;;yBAAV,CAAA,wBAAU,CAAA;oBAAhB,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAApC,SAAoC,CAAA;;;;;;oBAD3B,IAAU,CAAA;;;;;;;CAI9B,CAAA;AA/GY,QAAA,4BAA4B,gCA+GxC;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,oCAA4B,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAxD,SAAwD,CAAA;;;;SACzD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAA;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAA;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
1
+ {"version":3,"file":"webhook_error_handling.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/webhook_error_handling.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,oDAA6B;AAC7B,4DAAoC;AACpC,kDAA2B;AAG3B,iCAAmC;AACnC,+CAK4B;AAC5B,kCAAsC;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,WAAW,GAAG,4DAA4D,CAAA;AAChF,IAAM,MAAM,GAAG,UAAC,CAAS,IAAK,OAAA,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAnD,CAAmD,CAAA;AAEjF,iGAAiG;AACjG,IAAM,aAAa,GAAG,iDAAiD,CAAA;AAEvE,IAAM,eAAe,GAAG,KAAM,CAAA;AAC9B,IAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,IAAM,gBAAgB,GAAG,UAAO,GAAY,EAAE,GAAW;;;;;gBACjD,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;;;qBACjB,CAAA,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,eAAe,CAAA;gBAC5B,qBAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,UAAiB,EAAE,CAAC,EAAA;;gBAAjF,IAAI,GAAG,SAAwF;gBAC/F,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,GAAG,KAAK,GAAG,EAAb,CAAa,CAAC,CAAA;gBAC3C,IAAI,KAAK;oBAAE,sBAAO,KAAK,EAAA;gBACvB,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,gBAAgB,CAAC,EAAA;;gBAAvC,SAAuC,CAAA;;oBAEzC,sBAAO,IAAI,EAAA;;;KACZ,CAAA;AAED,IAAM,iBAAiB,GAAG,UAAO,GAAY;;;;;oBAC3B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAA;;gBAA1C,OAAO,GAAG,SAA8C;gBAC9D,sBAAO,CAAC,MAAA,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,oBAAoB,mCAAI,CAAC,CAAW,EAAA;;;KACzD,CAAA;AAED,0EAA0E;AAC1E,IAAM,sBAAsB,GAAG,UAAO,GAAY,EAAE,QAAgB;;;;;gBAC5D,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACpB,KAAK,GAAG,CAAC,CAAC,CAAA;;;qBACP,CAAA,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,eAAe,CAAA;gBACjC,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;gBAApC,KAAK,GAAG,SAA4B,CAAA;gBACpC,IAAI,KAAK,KAAK,QAAQ;oBAAE,sBAAO,KAAK,EAAA;gBACpC,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,gBAAgB,CAAC,EAAA;;gBAAvC,SAAuC,CAAA;;oBAEzC,sBAAO,KAAK,EAAA;;;KACb,CAAA;AAED,sDAAsD;AAC/C,IAAM,4BAA4B,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;;oBACnE,IAAA,oBAAU,EAAC,8BAA8B,CAAC,CAAA;oBAGpC,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAA;oBACrB,GAAG,CAAC,GAAG,CAAC,qBAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;oBAEvC,wBAAwB,GAAG,KAAK,CAAA;oBACpC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,UAAC,CAAC,EAAE,GAAG,IAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;oBACrF,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,UAAC,CAAC,EAAE,GAAG,IAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;oBACtF,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,UAAC,GAAG,EAAE,GAAG;wBACtB,IAAA,KAAoC,GAAG,CAAC,IAAI,EAA1C,OAAO,aAAA,EAAE,SAAS,eAAA,EAAE,SAAS,eAAa,CAAA;wBAClD,wBAAwB,GAAG,CACzB,MAAM,CAAC,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAC,CAAiB,IAAK,OAAA,CAAC,CAAC,EAAE,EAAJ,CAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,GAAG,WAAW,CAAC,KAAK,SAAS,CAC1G,CAAA;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;oBAC1B,CAAC,CAAC,CAAA;oBAE0B,qBAAM,IAAI,OAAO,CAAC,UAAA,OAAO;4BACnD,IAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,cAAM,OAAA,OAAO,CAAC,CAAC,CAAC,EAAV,CAAU,CAAC,CAAA;wBACxD,CAAC,CAAC,EAAA;;oBAFI,MAAM,GAAgB,SAE1B;oBACI,YAAY,GAAG,2BAAqB,MAAM,CAAC,OAAO,EAAU,CAAC,IAAI,CAAE,CAAA;oBAEnE,UAAU,GAAa,EAAE,CAAA;oBACzB,gBAAgB,GAAG,UAAO,KAAa;;;;wCAC3B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAiB,KAAK,cAAI,IAAI,CAAC,GAAG,EAAE,oBAAiB,EAAE,CAAC,EAAA;;oCAA5G,OAAO,GAAG,SAAkG;oCAClH,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;;;;yBAC5B,CAAA;;;;oBAGC,qBAAM,IAAA,oBAAU,EACd,mBAAmB,EACnB,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAvE,CAAuE,EAC7E,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC7C,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAA;;oBAApH,SAAoH,CAAA;oBAE/F,qBAAM,iBAAiB,CAAC,GAAG,CAAC;wBAEjD,kDAAkD;sBAFD;;oBAA3C,YAAY,GAAG,SAA4B;oBAEjD,kDAAkD;oBAClD,qBAAM,gBAAgB,CAAC,WAAW,CAAC,EAAA;;oBADnC,kDAAkD;oBAClD,SAAmC,CAAA;oBACd,qBAAM,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,EAAA;;oBAAzD,YAAY,GAAG,SAA0C;oBAC/D,IAAA,gBAAM,EAAC,CAAC,CAAC,YAAY,EAAE,8CAA8C,EAAE,0CAA0C,CAAC,CAAA;oBAClH,IAAA,gBAAM,EACJ,OAAO,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,QAAQ,CAAA,KAAK,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAC9E,uDAAgD,IAAI,CAAC,SAAS,CAAC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,QAAQ,CAAC,CAAE,EACxF,6CAA6C,CAC9C,CAAA;oBACD,IAAA,gBAAM,EAAC,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,YAAY,MAAK,SAAS,EAAE,uCAAuC,EAAE,mCAAmC,CAAC,CAAA;oBAC9H,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,sDAAsD;wBACtD,kDAAkD,EACnD,CAAA;oBAED,0CAA0C;oBAC1C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,cAAW,EAAE,CAAC,EAAA;;oBADlE,0CAA0C;oBAC1C,SAAkE,CAAA;oBAClE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBAClB,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,cAAW,CAAC,EAAA;;oBAAhE,MAAM,GAAG,SAAuD;oBACtE,IAAA,gBAAM,EAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAE,EAAE,gCAAgC,CAAC,CAAA;oBAChI,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,qDAAqD;wBACrD,iDAAiD,EAClD,CAAA;oBAED,0CAA0C;oBAC1C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,cAAW,EAAE,CAAC,EAAA;;oBADlE,0CAA0C;oBAC1C,SAAkE,CAAA;oBAClE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBAClB,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,cAAW,CAAC,EAAA;;oBAAhE,MAAM,GAAG,SAAuD;oBACtE,IAAA,gBAAM,EAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAE,EAAE,gCAAgC,CAAC,CAAA;oBAChI,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,qDAAqD;wBACrD,iDAAiD,EAClD,CAAA;oBAED,+FAA+F;oBAC/F,8EAA8E;oBAC9E,2EAA2E;oBAE3E,qEAAqE;oBACrE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,aAAU,EAAE,CAAC,EAAA;;oBALjE,+FAA+F;oBAC/F,8EAA8E;oBAC9E,2EAA2E;oBAE3E,qEAAqE;oBACrE,SAAiE,CAAA;oBACjE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBACd,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,aAAU,CAAC,EAAA;;oBAAnE,UAAU,GAAG,SAAsD;oBACzE,IAAA,gBAAM,EAAC,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,YAAY,CAAE,EAAE,+BAA+B,CAAC,CAAA;oBACvI,IAAA,gBAAM,EAAC,wBAAwB,EAAE,4CAA4C,EAAE,qCAAqC,CAAC,CAAA;oBACrH,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA,CAAC,+DAA+D;;oBAA3F,SAA2B,CAAA,CAAC,+DAA+D;oBAC3F,KAAA,gBAAM,CAAA;oBACJ,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;oBAD9B,kBACE,CAAA,SAA4B,MAAK,YAAY,GAAG,CAAC;wBACjD,qDAAqD;wBACrD,2CAA2C,EAC5C,CAAA;oBAGe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAA;;oBAA1C,OAAO,GAAG,SAA8C;oBACxD,SAAS,GAAG,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,EAAE,CAAA;oBAChC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAS,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA,CAAC,wBAAwB;;oBAA3H,SAAkG,CAAA,CAAC,wBAAwB;oBAC3H,KAAA,gBAAM,CAAA;oBACJ,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;oBAD9B,kBACE,CAAA,SAA4B,MAAK,YAAY,GAAG,CAAC;wBACjD,qDAAqD;wBACrD,4CAA4C,EAC7C,CAAA;;;gBAED,wEAAwE;gBACxE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBADrI,wEAAwE;oBACxE,SAAqI,CAAA;oBACrI,MAAM,CAAC,KAAK,EAAE,CAAA;0BACa,EAAV,yBAAU;;;yBAAV,CAAA,wBAAU,CAAA;oBAAhB,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAApC,SAAoC,CAAA;;;;;;oBAD3B,IAAU,CAAA;;;;;;;CAI9B,CAAA;AA/GY,QAAA,4BAA4B,gCA+GxC;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,oCAA4B,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAxD,SAAwD,CAAA;;;;SACzD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAA;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAA;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
@@ -1 +1 @@
1
- {"version":3,"file":"tests.d.ts","sourceRoot":"","sources":["../../../src/tests/tests.ts"],"names":[],"mappings":"AAu3EA,eAAO,MAAM,kCAAkC,qBAgJ9C,CAAA;AAED,eAAO,MAAM,mCAAmC,qBA2K/C,CAAA;AAGD,eAAO,MAAM,oBAAoB,qBAoHhC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBAsF3C,CAAA;AAID,eAAO,MAAM,0BAA0B,qBAqCtC,CAAA;AAy1FD,eAAO,MAAM,cAAc,qBAqC1B,CAAA;AAotBD,eAAO,MAAM,0BAA0B,qBAmFtC,CAAA;AAqED,eAAO,MAAM,eAAe,qBAmD3B,CAAA;AAED,eAAO,MAAM,oBAAoB,6BAsBhC,CAAA;AAED,eAAO,MAAM,oCAAoC,qBAiqBhD,CAAA;AAED,eAAO,MAAM,mCAAmC,qBAkE/C,CAAA;AAqlDD,eAAO,MAAM,yBAAyB,qBA0DrC,CAAA;AAED,eAAO,MAAM,kBAAkB,qBAmK9B,CAAA;AAED,eAAO,MAAM,sBAAsB,qBA0BlC,CAAA;AAGD,eAAO,MAAM,mBAAmB,qBAmC/B,CAAA;AAED,eAAO,MAAM,gCAAgC,mCA8C5C,CAAA;AAED,eAAO,MAAM,cAAc,qBA+b1B,CAAA;AAGD,eAAO,MAAM,oBAAoB,uBAuBhC,CAAA;AA4wBD,eAAO,MAAM,4BAA4B,qBAoExC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBA4U3C,CAAA;AAED,eAAO,MAAM,gDAAgD,qBAyD5D,CAAA;AAED,eAAO,MAAM,qBAAqB,qBAwIjC,CAAA"}
1
+ {"version":3,"file":"tests.d.ts","sourceRoot":"","sources":["../../../src/tests/tests.ts"],"names":[],"mappings":"AAy3EA,eAAO,MAAM,kCAAkC,qBAgJ9C,CAAA;AAED,eAAO,MAAM,mCAAmC,qBA2K/C,CAAA;AAGD,eAAO,MAAM,oBAAoB,qBAoHhC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBAsF3C,CAAA;AAID,eAAO,MAAM,0BAA0B,qBAqCtC,CAAA;AAy1FD,eAAO,MAAM,cAAc,qBAqC1B,CAAA;AAotBD,eAAO,MAAM,0BAA0B,qBAmFtC,CAAA;AAqED,eAAO,MAAM,eAAe,qBAmD3B,CAAA;AAED,eAAO,MAAM,oBAAoB,6BAsBhC,CAAA;AAED,eAAO,MAAM,oCAAoC,qBAiqBhD,CAAA;AAED,eAAO,MAAM,mCAAmC,qBAkE/C,CAAA;AAqlDD,eAAO,MAAM,yBAAyB,qBA0DrC,CAAA;AAED,eAAO,MAAM,kBAAkB,qBAmK9B,CAAA;AAED,eAAO,MAAM,sBAAsB,qBA0BlC,CAAA;AAGD,eAAO,MAAM,mBAAmB,qBAmC/B,CAAA;AAED,eAAO,MAAM,gCAAgC,mCA8C5C,CAAA;AAED,eAAO,MAAM,cAAc,qBA+b1B,CAAA;AAGD,eAAO,MAAM,oBAAoB,uBAuBhC,CAAA;AA4wBD,eAAO,MAAM,4BAA4B,qBAiFxC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBA4U3C,CAAA;AAED,eAAO,MAAM,gDAAgD,qBAyD5D,CAAA;AAED,eAAO,MAAM,qBAAqB,qBAwIjC,CAAA"}
@@ -159,33 +159,34 @@ var nutrition_tracking_test_1 = require("./api_tests/nutrition_tracking.test");
159
159
  var no_access_permission_checks_test_1 = require("./api_tests/no_access_permission_checks.test");
160
160
  var resource_access_tags_test_1 = require("./api_tests/resource_access_tags.test");
161
161
  var field_redaction_test_1 = require("./api_tests/field_redaction.test");
162
- var F_0001_data_sync_redaction_bypass_test_1 = require("./api_tests/security/F-0001-data-sync-redaction-bypass.test");
163
- var F_0106_F_0110_enduser_write_restrictions_test_1 = require("./api_tests/security/F-0106-F-0110-enduser-write-restrictions.test");
164
- var F_0005_ai_conversations_rbac_test_1 = require("./api_tests/security/F-0005-ai-conversations-rbac.test");
165
- var F_0006_develop_health_benefit_verification_rbac_test_1 = require("./api_tests/security/F-0006-develop-health-benefit-verification-rbac.test");
166
- var F_0053_cascade_role_rename_cross_tenant_test_1 = require("./api_tests/security/F-0053-cascade-role-rename-cross-tenant.test");
167
- var F_0076_self_admin_role_assignment_test_1 = require("./api_tests/security/F-0076-self-admin-role-assignment.test");
168
- var F_0007_invite_user_enumeration_test_1 = require("./api_tests/security/F-0007-invite-user-enumeration.test");
162
+ var data_sync_redaction_bypass_test_1 = require("./api_tests/security/data-sync-redaction-bypass.test");
163
+ var enduser_write_restrictions_test_1 = require("./api_tests/security/enduser-write-restrictions.test");
164
+ var ai_conversations_rbac_test_1 = require("./api_tests/security/ai-conversations-rbac.test");
165
+ var develop_health_benefit_verification_rbac_test_1 = require("./api_tests/security/develop-health-benefit-verification-rbac.test");
166
+ var cascade_role_rename_cross_tenant_test_1 = require("./api_tests/security/cascade-role-rename-cross-tenant.test");
167
+ var self_admin_role_assignment_test_1 = require("./api_tests/security/self-admin-role-assignment.test");
168
+ var invite_user_enumeration_test_1 = require("./api_tests/security/invite-user-enumeration.test");
169
169
  var register_business_id_injection_test_1 = require("./api_tests/security/register_business_id_injection.test");
170
- var F_0008_handle_incoming_communication_cross_tenant_test_1 = require("./api_tests/security/F-0008-handle-incoming-communication-cross-tenant.test");
171
- var F_0013_sanitize_user_html_test_1 = require("./api_tests/security/F-0013-sanitize-user-html.test");
172
- var F_0013_sanitize_user_html_with_iframes_test_1 = require("./api_tests/security/F-0013-sanitize-user-html-with-iframes.test");
173
- var F_0016_prototype_pollution_test_1 = require("./api_tests/security/F-0016-prototype-pollution.test");
174
- var F_0116_F_0119_enduser_cross_create_test_1 = require("./api_tests/security/F-0116-F-0119-enduser-cross-create.test");
175
- var F_0145_globalunique_leak_test_1 = require("./api_tests/security/F-0145-globalunique-leak.test");
176
- var F_0151_load_inbox_redaction_test_1 = require("./api_tests/security/F-0151-load-inbox-redaction.test");
170
+ var handle_incoming_communication_cross_tenant_test_1 = require("./api_tests/security/handle-incoming-communication-cross-tenant.test");
171
+ var sanitize_user_html_test_1 = require("./api_tests/security/sanitize-user-html.test");
172
+ var sanitize_user_html_with_iframes_test_1 = require("./api_tests/security/sanitize-user-html-with-iframes.test");
173
+ var prototype_pollution_test_1 = require("./api_tests/security/prototype-pollution.test");
174
+ var enduser_cross_create_test_1 = require("./api_tests/security/enduser-cross-create.test");
175
+ var globalunique_conflict_redaction_test_1 = require("./api_tests/security/globalunique-conflict-redaction.test");
176
+ var load_inbox_redaction_test_1 = require("./api_tests/security/load-inbox-redaction.test");
177
177
  var suggested_reply_redaction_test_1 = require("./api_tests/security/suggested-reply-redaction.test");
178
- var F_0155_webhook_timeout_test_1 = require("./api_tests/security/F-0155-webhook-timeout.test");
178
+ var webhook_timeout_test_1 = require("./api_tests/security/webhook-timeout.test");
179
179
  var enduser_ai_summary_trust_gate_test_1 = require("./api_tests/security/enduser-ai-summary-trust-gate.test");
180
- var F_0166_allowed_paths_wildcard_bypass_test_1 = require("./api_tests/security/F-0166-allowed-paths-wildcard-bypass.test");
181
- var F_0025_proxy_image_unauth_ssrf_test_1 = require("./api_tests/security/F-0025-proxy-image-unauth-ssrf.test");
182
- var F_0015_webhook_outbound_ssrf_test_1 = require("./api_tests/security/F-0015-webhook-outbound-ssrf.test");
180
+ var allowed_paths_confinement_test_1 = require("./api_tests/security/allowed-paths-confinement.test");
181
+ var proxy_image_unauth_ssrf_test_1 = require("./api_tests/security/proxy-image-unauth-ssrf.test");
182
+ var webhook_outbound_ssrf_test_1 = require("./api_tests/security/webhook-outbound-ssrf.test");
183
183
  var public_endpoint_auth_field_lock_test_1 = require("./api_tests/security/public_endpoint_auth_field_lock.test");
184
184
  var formsort_webhook_auth_field_lock_test_1 = require("./api_tests/security/formsort_webhook_auth_field_lock.test");
185
- var F_0179_booking_info_idor_token_mint_test_1 = require("./api_tests/security/F-0179-booking-info-idor-token-mint.test");
186
- var F_0192_automated_actions_process_gate_test_1 = require("./api_tests/security/F-0192-automated-actions-process-gate.test");
187
- var F_0191_schema_adminonly_enforcement_test_1 = require("./api_tests/security/F-0191-schema-adminonly-enforcement.test");
188
- var F_0185_startlinktoken_enduser_staff_escalation_test_1 = require("./api_tests/security/F-0185-startlinktoken-enduser-staff-escalation.test");
185
+ var booking_info_idor_token_mint_test_1 = require("./api_tests/security/booking-info-idor-token-mint.test");
186
+ var automated_actions_process_gate_test_1 = require("./api_tests/security/automated-actions-process-gate.test");
187
+ var schema_adminonly_enforcement_test_1 = require("./api_tests/security/schema-adminonly-enforcement.test");
188
+ var startlinktoken_enduser_staff_escalation_test_1 = require("./api_tests/security/startlinktoken-enduser-staff-escalation.test");
189
+ var form_logic_js_execution_test_1 = require("./api_tests/security/form-logic-js-execution.test");
189
190
  var bulk_assignment_test_1 = require("./api_tests/bulk_assignment.test");
190
191
  var tickets_bulk_assign_care_team_test_1 = require("./api_tests/tickets_bulk_assign_care_team.test");
191
192
  var managed_content_enduser_access_test_1 = require("./api_tests/managed_content_enduser_access.test");
@@ -206,8 +207,9 @@ var phone_validation_test_1 = require("./unit_tests/phone_validation.test");
206
207
  var openapi_spec_freshness_test_1 = require("./unit_tests/openapi_spec_freshness.test");
207
208
  var do_not_send_address_test_1 = require("./unit_tests/do_not_send_address.test");
208
209
  var organization_signup_test_1 = require("./api_tests/organization_signup.test");
209
- var F_0196_add_to_journey_foreign_enduserid_test_1 = require("./api_tests/security/F-0196-add-to-journey-foreign-enduserid.test");
210
+ var add_to_journey_foreign_enduserid_test_1 = require("./api_tests/security/add-to-journey-foreign-enduserid.test");
210
211
  var tickets_bulk_assign_from_queue_test_1 = require("./api_tests/tickets_bulk_assign_from_queue.test");
212
+ var enduser_observations_auto_review_test_1 = require("./api_tests/enduser_observations_auto_review.test");
211
213
  var setup_isolated_1 = require("./setup_isolated");
212
214
  var elation_user_id_test_1 = require("./api_tests/elation_user_id.test");
213
215
  var organization_settings_duplicates_test_1 = require("./api_tests/organization_settings_duplicates.test");
@@ -12891,6 +12893,14 @@ var form_conditional_logic_tests = function () { return __awaiter(void 0, void 0
12891
12893
  run_conditional_form_test({ $and: [{ condition: (_a = {}, _a[utilities_1.FORM_LOGIC_CALCULATED_FIELDS[0]] = { $exists: true }, _a) }] }, true);
12892
12894
  run_conditional_form_test({ $and: [{ condition: (_b = {}, _b[utilities_1.FORM_LOGIC_CALCULATED_FIELDS[0]] = { $gt: 25 }, _b) }] }, true);
12893
12895
  run_conditional_form_test({ $and: [{ condition: (_c = {}, _c[utilities_1.FORM_LOGIC_CALCULATED_FIELDS[0]] = { $lt: 25 }, _c) }] }, false);
12896
+ // A $JS(...) condition value was previously compiled and executed with new Function().
12897
+ // These must evaluate to false (parseInt -> NaN -> no match), and must never be executed.
12898
+ // The values are typed `number` on BasicFilter but are strings in stored data, hence the casts.
12899
+ delete globalThis.__F0200;
12900
+ run_conditional_form_test({ $and: [{ condition: { '3': { $gt: '$JS(return 0)' } } }] }, false, '$gt $JS not evaluated');
12901
+ run_conditional_form_test({ $and: [{ condition: { '3': { $lt: '$JS(return 99999)' } } }] }, false, '$lt $JS not evaluated');
12902
+ run_conditional_form_test({ $and: [{ condition: { '3': { $gt: '$JS(globalThis.__F0200 = 1; return 0)' } } }] }, false, '$JS side effect not evaluated');
12903
+ (0, testing_1.assert)(globalThis.__F0200 === undefined, 'a $JS(...) condition value was executed', '$JS payload never executed');
12894
12904
  return [2 /*return*/];
12895
12905
  });
12896
12906
  }); };
@@ -17482,8 +17492,10 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
17482
17492
  // process.exit, which would otherwise strand the other suite's tenants.
17483
17493
  return [4 /*yield*/, (0, setup_isolated_1.run_isolated_in_parallel)([
17484
17494
  { name: 'Organization signup', run: organization_signup_test_1.organization_signup_checks },
17485
- { name: 'F-0196 add_to_journey foreign enduserId', run: F_0196_add_to_journey_foreign_enduserid_test_1.add_to_journey_foreign_enduserid_checks },
17495
+ { name: 'add_to_journey foreign enduserId', run: add_to_journey_foreign_enduserid_test_1.add_to_journey_foreign_enduserid_checks },
17486
17496
  { name: 'Tickets bulk assign from queue', run: tickets_bulk_assign_from_queue_test_1.tickets_bulk_assign_from_queue_checks },
17497
+ { name: 'Vital auto-review on create', run: enduser_observations_auto_review_test_1.enduser_observations_auto_review_checks },
17498
+ { name: '$JS in stored conditional logic', run: form_logic_js_execution_test_1.form_logic_js_execution_checks },
17487
17499
  ])];
17488
17500
  case 23:
17489
17501
  // Isolated, tenant-provisioned suites run first and CONCURRENTLY: each provisions its own
@@ -17494,13 +17506,13 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
17494
17506
  return [4 /*yield*/, (0, embeddables_auth_token_test_1.embeddables_auth_token_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17495
17507
  case 24:
17496
17508
  _l.sent();
17497
- return [4 /*yield*/, (0, F_0025_proxy_image_unauth_ssrf_test_1.proxy_image_ssrf_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17509
+ return [4 /*yield*/, (0, proxy_image_unauth_ssrf_test_1.proxy_image_ssrf_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17498
17510
  case 25:
17499
17511
  _l.sent();
17500
- return [4 /*yield*/, (0, F_0015_webhook_outbound_ssrf_test_1.webhook_outbound_ssrf_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17512
+ return [4 /*yield*/, (0, webhook_outbound_ssrf_test_1.webhook_outbound_ssrf_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17501
17513
  case 26:
17502
17514
  _l.sent();
17503
- return [4 /*yield*/, (0, F_0166_allowed_paths_wildcard_bypass_test_1.allowed_paths_confinement_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17515
+ return [4 /*yield*/, (0, allowed_paths_confinement_test_1.allowed_paths_confinement_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17504
17516
  case 27:
17505
17517
  _l.sent();
17506
17518
  return [4 /*yield*/, (0, phone_calls_conference_hold_test_1.phone_calls_conference_hold_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
@@ -17539,37 +17551,37 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
17539
17551
  return [4 /*yield*/, (0, mdi_case_offerings_test_1.mdi_case_offerings_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17540
17552
  case 39:
17541
17553
  _l.sent();
17542
- return [4 /*yield*/, (0, F_0106_F_0110_enduser_write_restrictions_test_1.enduser_write_restrictions_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17554
+ return [4 /*yield*/, (0, enduser_write_restrictions_test_1.enduser_write_restrictions_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17543
17555
  case 40:
17544
17556
  _l.sent();
17545
17557
  return [4 /*yield*/, (0, enduser_ai_summary_trust_gate_test_1.enduser_ai_summary_trust_gate_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17546
17558
  case 41:
17547
17559
  _l.sent();
17548
- return [4 /*yield*/, (0, F_0116_F_0119_enduser_cross_create_test_1.enduser_cross_create_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17560
+ return [4 /*yield*/, (0, enduser_cross_create_test_1.enduser_cross_create_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17549
17561
  case 42:
17550
17562
  _l.sent();
17551
- return [4 /*yield*/, (0, F_0179_booking_info_idor_token_mint_test_1.booking_info_idor_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17563
+ return [4 /*yield*/, (0, booking_info_idor_token_mint_test_1.booking_info_idor_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17552
17564
  case 43:
17553
17565
  _l.sent();
17554
- return [4 /*yield*/, (0, F_0192_automated_actions_process_gate_test_1.automated_actions_process_gate_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17566
+ return [4 /*yield*/, (0, automated_actions_process_gate_test_1.automated_actions_process_gate_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17555
17567
  case 44:
17556
17568
  _l.sent();
17557
- return [4 /*yield*/, (0, F_0191_schema_adminonly_enforcement_test_1.schema_adminonly_enforcement_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17569
+ return [4 /*yield*/, (0, schema_adminonly_enforcement_test_1.schema_adminonly_enforcement_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17558
17570
  case 45:
17559
17571
  _l.sent();
17560
- return [4 /*yield*/, (0, F_0185_startlinktoken_enduser_staff_escalation_test_1.startlinktoken_escalation_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17572
+ return [4 /*yield*/, (0, startlinktoken_enduser_staff_escalation_test_1.startlinktoken_escalation_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17561
17573
  case 46:
17562
17574
  _l.sent();
17563
- return [4 /*yield*/, (0, F_0145_globalunique_leak_test_1.globalunique_leak_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17575
+ return [4 /*yield*/, (0, globalunique_conflict_redaction_test_1.globalunique_leak_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17564
17576
  case 47:
17565
17577
  _l.sent();
17566
- return [4 /*yield*/, (0, F_0151_load_inbox_redaction_test_1.load_inbox_redaction_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17578
+ return [4 /*yield*/, (0, load_inbox_redaction_test_1.load_inbox_redaction_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17567
17579
  case 48:
17568
17580
  _l.sent();
17569
17581
  return [4 /*yield*/, (0, suggested_reply_redaction_test_1.suggested_reply_redaction_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17570
17582
  case 49:
17571
17583
  _l.sent();
17572
- return [4 /*yield*/, (0, F_0155_webhook_timeout_test_1.webhook_timeout_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17584
+ return [4 /*yield*/, (0, webhook_timeout_test_1.webhook_timeout_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17573
17585
  case 50:
17574
17586
  _l.sent();
17575
17587
  return [4 /*yield*/, (0, public_endpoint_auth_field_lock_test_1.public_endpoint_auth_field_lock_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
@@ -17581,10 +17593,10 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
17581
17593
  return [4 /*yield*/, (0, user_portal_settings_test_1.user_portal_settings_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17582
17594
  case 53:
17583
17595
  _l.sent();
17584
- return [4 /*yield*/, (0, F_0007_invite_user_enumeration_test_1.invite_user_enumeration_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17596
+ return [4 /*yield*/, (0, invite_user_enumeration_test_1.invite_user_enumeration_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17585
17597
  case 54:
17586
17598
  _l.sent();
17587
- return [4 /*yield*/, (0, F_0008_handle_incoming_communication_cross_tenant_test_1.handle_incoming_communication_cross_tenant_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17599
+ return [4 /*yield*/, (0, handle_incoming_communication_cross_tenant_test_1.handle_incoming_communication_cross_tenant_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17588
17600
  case 55:
17589
17601
  _l.sent();
17590
17602
  return [4 /*yield*/, (0, calendar_event_webhook_template_test_1.calendar_event_webhook_template_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
@@ -17602,28 +17614,28 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
17602
17614
  return [4 /*yield*/, (0, enduser_login_rate_limits_test_1.enduser_login_rate_limits_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17603
17615
  case 60:
17604
17616
  _l.sent();
17605
- return [4 /*yield*/, (0, F_0001_data_sync_redaction_bypass_test_1.data_sync_redaction_bypass_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17617
+ return [4 /*yield*/, (0, data_sync_redaction_bypass_test_1.data_sync_redaction_bypass_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17606
17618
  case 61:
17607
17619
  _l.sent();
17608
- return [4 /*yield*/, (0, F_0005_ai_conversations_rbac_test_1.ai_conversations_rbac_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17620
+ return [4 /*yield*/, (0, ai_conversations_rbac_test_1.ai_conversations_rbac_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17609
17621
  case 62:
17610
17622
  _l.sent();
17611
- return [4 /*yield*/, (0, F_0006_develop_health_benefit_verification_rbac_test_1.develop_health_benefit_verification_rbac_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17623
+ return [4 /*yield*/, (0, develop_health_benefit_verification_rbac_test_1.develop_health_benefit_verification_rbac_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17612
17624
  case 63:
17613
17625
  _l.sent();
17614
- return [4 /*yield*/, (0, F_0053_cascade_role_rename_cross_tenant_test_1.cascade_role_rename_cross_tenant_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17626
+ return [4 /*yield*/, (0, cascade_role_rename_cross_tenant_test_1.cascade_role_rename_cross_tenant_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17615
17627
  case 64:
17616
17628
  _l.sent();
17617
- return [4 /*yield*/, (0, F_0076_self_admin_role_assignment_test_1.self_admin_role_assignment_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17629
+ return [4 /*yield*/, (0, self_admin_role_assignment_test_1.self_admin_role_assignment_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17618
17630
  case 65:
17619
17631
  _l.sent();
17620
- return [4 /*yield*/, (0, F_0013_sanitize_user_html_test_1.sanitize_user_html_xss_tests)()];
17632
+ return [4 /*yield*/, (0, sanitize_user_html_test_1.sanitize_user_html_xss_tests)()];
17621
17633
  case 66:
17622
17634
  _l.sent();
17623
- return [4 /*yield*/, (0, F_0013_sanitize_user_html_with_iframes_test_1.sanitize_user_html_with_iframes_tests)()];
17635
+ return [4 /*yield*/, (0, sanitize_user_html_with_iframes_test_1.sanitize_user_html_with_iframes_tests)()];
17624
17636
  case 67:
17625
17637
  _l.sent();
17626
- return [4 /*yield*/, (0, F_0016_prototype_pollution_test_1.prototype_pollution_tests)()];
17638
+ return [4 /*yield*/, (0, prototype_pollution_test_1.prototype_pollution_tests)()];
17627
17639
  case 68:
17628
17640
  _l.sent();
17629
17641
  return [4 /*yield*/, (0, account_switcher_test_1.account_switcher_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];