@tellescope/sdk 1.256.14 → 1.256.16

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (293) hide show
  1. package/lib/cjs/sdk.d.ts +2 -2
  2. package/lib/cjs/tests/api_tests/auto_merge_form_submission.test.js +1 -1
  3. package/lib/cjs/tests/api_tests/auto_merge_form_submission.test.js.map +1 -1
  4. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.d.ts +5 -0
  5. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.d.ts.map +1 -0
  6. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.js +388 -0
  7. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.js.map +1 -0
  8. package/lib/cjs/tests/api_tests/integrations_redacted.test.js +3 -3
  9. package/lib/cjs/tests/api_tests/integrations_redacted.test.js.map +1 -1
  10. package/lib/cjs/tests/api_tests/organization_signup.test.d.ts +1 -1
  11. package/lib/cjs/tests/api_tests/organization_signup.test.js +1 -1
  12. package/lib/cjs/tests/api_tests/purchase_made_trigger.test.d.ts.map +1 -1
  13. package/lib/cjs/tests/api_tests/purchase_made_trigger.test.js +103 -162
  14. package/lib/cjs/tests/api_tests/purchase_made_trigger.test.js.map +1 -1
  15. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts +33 -0
  16. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts.map +1 -0
  17. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.js +249 -0
  18. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.js.map +1 -0
  19. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts +42 -0
  20. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts.map +1 -0
  21. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js +281 -0
  22. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js.map +1 -0
  23. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.d.ts +38 -0
  24. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.d.ts.map +1 -0
  25. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.js +390 -0
  26. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.js.map +1 -0
  27. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.d.ts +6 -0
  28. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.d.ts.map +1 -0
  29. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.js +1003 -0
  30. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.js.map +1 -0
  31. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.d.ts +42 -0
  32. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.d.ts.map +1 -0
  33. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.js +323 -0
  34. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.js.map +1 -0
  35. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts +29 -0
  36. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts.map +1 -0
  37. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.js +335 -0
  38. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.js.map +1 -0
  39. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts +32 -0
  40. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts.map +1 -0
  41. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js +237 -0
  42. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js.map +1 -0
  43. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts +28 -0
  44. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts.map +1 -0
  45. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.js +349 -0
  46. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.js.map +1 -0
  47. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts +30 -0
  48. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts.map +1 -0
  49. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js +314 -0
  50. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js.map +1 -0
  51. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.d.ts +21 -0
  52. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.d.ts.map +1 -0
  53. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.js +362 -0
  54. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.js.map +1 -0
  55. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.d.ts +21 -0
  56. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.d.ts.map +1 -0
  57. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.js +366 -0
  58. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.js.map +1 -0
  59. package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.d.ts +5 -0
  60. package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.d.ts.map +1 -0
  61. package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.js +357 -0
  62. package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.js.map +1 -0
  63. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.d.ts +32 -0
  64. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.d.ts.map +1 -0
  65. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.js +248 -0
  66. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.js.map +1 -0
  67. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts +19 -0
  68. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts.map +1 -0
  69. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.js +138 -0
  70. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.js.map +1 -0
  71. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts +24 -0
  72. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts.map +1 -0
  73. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js +201 -0
  74. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js.map +1 -0
  75. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.d.ts +29 -0
  76. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.d.ts.map +1 -0
  77. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.js +278 -0
  78. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.js.map +1 -0
  79. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.d.ts +17 -0
  80. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.d.ts.map +1 -0
  81. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.js +155 -0
  82. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.js.map +1 -0
  83. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.d.ts +2 -0
  84. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.d.ts.map +1 -0
  85. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.js +88 -0
  86. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.js.map +1 -0
  87. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts +34 -0
  88. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts.map +1 -0
  89. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.js +230 -0
  90. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.js.map +1 -0
  91. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts +2 -0
  92. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts.map +1 -0
  93. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.js +242 -0
  94. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.js.map +1 -0
  95. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.d.ts +2 -0
  96. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.d.ts.map +1 -0
  97. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.js +148 -0
  98. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.js.map +1 -0
  99. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts +45 -0
  100. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts.map +1 -0
  101. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.js +388 -0
  102. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.js.map +1 -0
  103. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.d.ts +38 -0
  104. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.d.ts.map +1 -0
  105. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.js +222 -0
  106. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.js.map +1 -0
  107. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts +6 -0
  108. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts.map +1 -0
  109. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js +354 -0
  110. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js.map +1 -0
  111. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts +28 -0
  112. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts.map +1 -0
  113. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.js +442 -0
  114. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.js.map +1 -0
  115. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.d.ts +19 -0
  116. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.d.ts.map +1 -0
  117. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.js +156 -0
  118. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.js.map +1 -0
  119. package/lib/cjs/tests/api_tests/webhook_error_handling.test.js +2 -2
  120. package/lib/cjs/tests/api_tests/webhook_error_handling.test.js.map +1 -1
  121. package/lib/cjs/tests/tests.d.ts.map +1 -1
  122. package/lib/cjs/tests/tests.js +60 -46
  123. package/lib/cjs/tests/tests.js.map +1 -1
  124. package/lib/cjs/tests/unit_tests/openapi_spec_freshness.test.d.ts +1 -1
  125. package/lib/cjs/tests/unit_tests/openapi_spec_freshness.test.js +1 -1
  126. package/lib/cjs/tsconfig.cjs.tsbuildinfo +1 -0
  127. package/lib/esm/enduser.d.ts +0 -1
  128. package/lib/esm/enduser.d.ts.map +1 -1
  129. package/lib/esm/sdk.d.ts +4 -5
  130. package/lib/esm/sdk.d.ts.map +1 -1
  131. package/lib/esm/session.d.ts +0 -1
  132. package/lib/esm/session.d.ts.map +1 -1
  133. package/lib/esm/tests/api_tests/auto_merge_form_submission.test.js +1 -1
  134. package/lib/esm/tests/api_tests/auto_merge_form_submission.test.js.map +1 -1
  135. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.d.ts +5 -0
  136. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.d.ts.map +1 -0
  137. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.js +383 -0
  138. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.js.map +1 -0
  139. package/lib/esm/tests/api_tests/integrations_redacted.test.js +3 -3
  140. package/lib/esm/tests/api_tests/integrations_redacted.test.js.map +1 -1
  141. package/lib/esm/tests/api_tests/organization_signup.test.d.ts +1 -1
  142. package/lib/esm/tests/api_tests/organization_signup.test.js +1 -1
  143. package/lib/esm/tests/api_tests/purchase_made_trigger.test.d.ts.map +1 -1
  144. package/lib/esm/tests/api_tests/purchase_made_trigger.test.js +104 -163
  145. package/lib/esm/tests/api_tests/purchase_made_trigger.test.js.map +1 -1
  146. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts +33 -0
  147. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts.map +1 -0
  148. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.js +244 -0
  149. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.js.map +1 -0
  150. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts +42 -0
  151. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts.map +1 -0
  152. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js +276 -0
  153. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js.map +1 -0
  154. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.d.ts +38 -0
  155. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.d.ts.map +1 -0
  156. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.js +386 -0
  157. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.js.map +1 -0
  158. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.d.ts +6 -0
  159. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.d.ts.map +1 -0
  160. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.js +996 -0
  161. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.js.map +1 -0
  162. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.d.ts +42 -0
  163. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.d.ts.map +1 -0
  164. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.js +316 -0
  165. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.js.map +1 -0
  166. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts +29 -0
  167. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts.map +1 -0
  168. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.js +331 -0
  169. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.js.map +1 -0
  170. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts +32 -0
  171. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts.map +1 -0
  172. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js +233 -0
  173. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js.map +1 -0
  174. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts +28 -0
  175. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts.map +1 -0
  176. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.js +345 -0
  177. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.js.map +1 -0
  178. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts +30 -0
  179. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts.map +1 -0
  180. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js +310 -0
  181. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js.map +1 -0
  182. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.d.ts +21 -0
  183. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.d.ts.map +1 -0
  184. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.js +358 -0
  185. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.js.map +1 -0
  186. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.d.ts +21 -0
  187. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.d.ts.map +1 -0
  188. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.js +362 -0
  189. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.js.map +1 -0
  190. package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.d.ts +5 -0
  191. package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.d.ts.map +1 -0
  192. package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.js +349 -0
  193. package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.js.map +1 -0
  194. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.d.ts +32 -0
  195. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.d.ts.map +1 -0
  196. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.js +243 -0
  197. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.js.map +1 -0
  198. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts +19 -0
  199. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts.map +1 -0
  200. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.js +134 -0
  201. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.js.map +1 -0
  202. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts +24 -0
  203. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts.map +1 -0
  204. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js +194 -0
  205. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js.map +1 -0
  206. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.d.ts +29 -0
  207. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.d.ts.map +1 -0
  208. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.js +271 -0
  209. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.js.map +1 -0
  210. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.d.ts +17 -0
  211. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.d.ts.map +1 -0
  212. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.js +151 -0
  213. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.js.map +1 -0
  214. package/lib/esm/tests/api_tests/security/prototype-pollution.test.d.ts +2 -0
  215. package/lib/esm/tests/api_tests/security/prototype-pollution.test.d.ts.map +1 -0
  216. package/lib/esm/tests/api_tests/security/prototype-pollution.test.js +84 -0
  217. package/lib/esm/tests/api_tests/security/prototype-pollution.test.js.map +1 -0
  218. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts +34 -0
  219. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts.map +1 -0
  220. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.js +223 -0
  221. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.js.map +1 -0
  222. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts +2 -0
  223. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts.map +1 -0
  224. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.js +238 -0
  225. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.js.map +1 -0
  226. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.d.ts +2 -0
  227. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.d.ts.map +1 -0
  228. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.js +144 -0
  229. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.js.map +1 -0
  230. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts +45 -0
  231. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts.map +1 -0
  232. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.js +381 -0
  233. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.js.map +1 -0
  234. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.d.ts +38 -0
  235. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.d.ts.map +1 -0
  236. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.js +218 -0
  237. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.js.map +1 -0
  238. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts +6 -0
  239. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts.map +1 -0
  240. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js +350 -0
  241. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js.map +1 -0
  242. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts +28 -0
  243. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts.map +1 -0
  244. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.js +435 -0
  245. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.js.map +1 -0
  246. package/lib/esm/tests/api_tests/security/webhook-timeout.test.d.ts +19 -0
  247. package/lib/esm/tests/api_tests/security/webhook-timeout.test.d.ts.map +1 -0
  248. package/lib/esm/tests/api_tests/security/webhook-timeout.test.js +149 -0
  249. package/lib/esm/tests/api_tests/security/webhook-timeout.test.js.map +1 -0
  250. package/lib/esm/tests/api_tests/webhook_error_handling.test.js +2 -2
  251. package/lib/esm/tests/api_tests/webhook_error_handling.test.js.map +1 -1
  252. package/lib/esm/tests/tests.d.ts.map +1 -1
  253. package/lib/esm/tests/tests.js +38 -24
  254. package/lib/esm/tests/tests.js.map +1 -1
  255. package/lib/esm/tests/unit_tests/openapi_spec_freshness.test.d.ts +1 -1
  256. package/lib/esm/tests/unit_tests/openapi_spec_freshness.test.js +1 -1
  257. package/lib/tsconfig.tsbuildinfo +1 -1
  258. package/package.json +10 -10
  259. package/src/tests/api_tests/auto_merge_form_submission.test.ts +1 -1
  260. package/src/tests/api_tests/enduser_observations_auto_review.test.ts +358 -0
  261. package/src/tests/api_tests/integrations_redacted.test.ts +1 -1
  262. package/src/tests/api_tests/organization_signup.test.ts +2 -2
  263. package/src/tests/api_tests/purchase_made_trigger.test.ts +29 -41
  264. package/src/tests/api_tests/security/{F-0196-add-to-journey-foreign-enduserid.test.ts → add-to-journey-foreign-enduserid.test.ts} +6 -7
  265. package/src/tests/api_tests/security/{F-0005-ai-conversations-rbac.test.ts → ai-conversations-rbac.test.ts} +14 -14
  266. package/src/tests/api_tests/security/{F-0166-allowed-paths-wildcard-bypass.test.ts → allowed-paths-confinement.test.ts} +11 -11
  267. package/src/tests/api_tests/security/{F-0192-automated-actions-process-gate.test.ts → automated-actions-process-gate.test.ts} +6 -7
  268. package/src/tests/api_tests/security/{F-0179-booking-info-idor-token-mint.test.ts → booking-info-idor-token-mint.test.ts} +5 -6
  269. package/src/tests/api_tests/security/{F-0053-cascade-role-rename-cross-tenant.test.ts → cascade-role-rename-cross-tenant.test.ts} +10 -10
  270. package/src/tests/api_tests/security/{F-0001-data-sync-redaction-bypass.test.ts → data-sync-redaction-bypass.test.ts} +9 -9
  271. package/src/tests/api_tests/security/{F-0006-develop-health-benefit-verification-rbac.test.ts → develop-health-benefit-verification-rbac.test.ts} +7 -8
  272. package/src/tests/api_tests/security/{F-0116-F-0119-enduser-cross-create.test.ts → enduser-cross-create.test.ts} +25 -25
  273. package/src/tests/api_tests/security/{F-0106-F-0110-enduser-write-restrictions.test.ts → enduser-write-restrictions.test.ts} +12 -14
  274. package/src/tests/api_tests/security/file-link-session-confinement.test.ts +291 -0
  275. package/src/tests/api_tests/security/form-logic-js-execution.test.ts +183 -0
  276. package/src/tests/api_tests/security/{F-0145-globalunique-leak.test.ts → globalunique-conflict-redaction.test.ts} +5 -6
  277. package/src/tests/api_tests/security/{F-0008-handle-incoming-communication-cross-tenant.test.ts → handle-incoming-communication-cross-tenant.test.ts} +8 -8
  278. package/src/tests/api_tests/security/{F-0007-invite-user-enumeration.test.ts → invite-user-enumeration.test.ts} +8 -8
  279. package/src/tests/api_tests/security/{F-0151-load-inbox-redaction.test.ts → load-inbox-redaction.test.ts} +5 -6
  280. package/src/tests/api_tests/security/{F-0016-prototype-pollution.test.ts → prototype-pollution.test.ts} +4 -4
  281. package/src/tests/api_tests/security/{F-0025-proxy-image-unauth-ssrf.test.ts → proxy-image-unauth-ssrf.test.ts} +11 -12
  282. package/src/tests/api_tests/security/{F-0013-sanitize-user-html-with-iframes.test.ts → sanitize-user-html-with-iframes.test.ts} +5 -5
  283. package/src/tests/api_tests/security/{F-0013-sanitize-user-html.test.ts → sanitize-user-html.test.ts} +4 -4
  284. package/src/tests/api_tests/security/{F-0191-schema-adminonly-enforcement.test.ts → schema-adminonly-enforcement.test.ts} +6 -7
  285. package/src/tests/api_tests/security/{F-0076-self-admin-role-assignment.test.ts → self-admin-role-assignment.test.ts} +13 -13
  286. package/src/tests/api_tests/security/{F-0185-startlinktoken-enduser-staff-escalation.test.ts → startlinktoken-enduser-staff-escalation.test.ts} +6 -6
  287. package/src/tests/api_tests/security/{F-0015-webhook-outbound-ssrf.test.ts → webhook-outbound-ssrf.test.ts} +13 -14
  288. package/src/tests/api_tests/security/{F-0155-webhook-timeout.test.ts → webhook-timeout.test.ts} +6 -7
  289. package/src/tests/api_tests/webhook_error_handling.test.ts +1 -1
  290. package/src/tests/tests.ts +43 -24
  291. package/src/tests/unit_tests/openapi_spec_freshness.test.ts +1 -1
  292. package/test_generated.pdf +0 -0
  293. package/src/tests/api_tests/security/readonly-enduser-preview.test.ts +0 -301
@@ -0,0 +1,156 @@
1
+ "use strict";
2
+ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
3
+ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
4
+ return new (P || (P = Promise))(function (resolve, reject) {
5
+ function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
6
+ function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
7
+ function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
8
+ step((generator = generator.apply(thisArg, _arguments || [])).next());
9
+ });
10
+ };
11
+ var __generator = (this && this.__generator) || function (thisArg, body) {
12
+ var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
13
+ return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
14
+ function verb(n) { return function (v) { return step([n, v]); }; }
15
+ function step(op) {
16
+ if (f) throw new TypeError("Generator is already executing.");
17
+ while (g && (g = 0, op[0] && (_ = 0)), _) try {
18
+ if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
19
+ if (y = 0, t) op = [op[0] & 2, t.value];
20
+ switch (op[0]) {
21
+ case 0: case 1: t = op; break;
22
+ case 4: _.label++; return { value: op[1], done: false };
23
+ case 5: _.label++; y = op[1]; op = [0]; continue;
24
+ case 7: op = _.ops.pop(); _.trys.pop(); continue;
25
+ default:
26
+ if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
27
+ if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
28
+ if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
29
+ if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
30
+ if (t[2]) _.ops.pop();
31
+ _.trys.pop(); continue;
32
+ }
33
+ op = body.call(thisArg, _);
34
+ } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
35
+ if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
36
+ }
37
+ };
38
+ var __importDefault = (this && this.__importDefault) || function (mod) {
39
+ return (mod && mod.__esModule) ? mod : { "default": mod };
40
+ };
41
+ Object.defineProperty(exports, "__esModule", { value: true });
42
+ exports.webhook_timeout_tests = void 0;
43
+ require('source-map-support').install();
44
+ var http_1 = __importDefault(require("http"));
45
+ var sdk_1 = require("../../../sdk");
46
+ var testing_1 = require("@tellescope/testing");
47
+ var setup_1 = require("../../setup");
48
+ var host = process.env.API_URL || 'http://localhost:8080';
49
+ // The server-side axios timeout is 15s (the fix under test). We bound our own wait above that.
50
+ var CLIENT_WAIT_MS = 20000;
51
+ /**
52
+ * Regression test: outbound webhook delivery must time out rather than hang.
53
+ *
54
+ * Outbound webhook delivery used axios.post(url, ...) with no `timeout` (axios default = infinite).
55
+ * A tenant-controlled receiver that accepts the connection and never responds hangs the awaited
56
+ * request indefinitely (slow-loris → worker exhaustion). Fix: timeout: 15_000 on the axios calls.
57
+ *
58
+ * Repro: stand up a local HTTP server that accepts the connection but NEVER responds, point
59
+ * send_automation_webhook (which awaits the axios call) at it, and race the call against a 20s
60
+ * client timer.
61
+ * - green (fixed): server times out at ~15s → handler returns 400 → SDK call rejects < 20s
62
+ * - red (unfixed): the call is still pending at 20s → client timer wins
63
+ */
64
+ var webhook_timeout_tests = function (_a) {
65
+ var sdk = _a.sdk;
66
+ return __awaiter(void 0, void 0, void 0, function () {
67
+ var enduserId, slowServer, port, blackholeUrl_1, enduser_1, _b;
68
+ return __generator(this, function (_c) {
69
+ switch (_c.label) {
70
+ case 0:
71
+ (0, testing_1.log_header)("outbound webhook timeout");
72
+ slowServer = http_1.default.createServer(function () { });
73
+ _c.label = 1;
74
+ case 1:
75
+ _c.trys.push([1, , 5, 10]);
76
+ return [4 /*yield*/, new Promise(function (resolve) { return slowServer.listen(0, '127.0.0.1', function () { return resolve(); }); })];
77
+ case 2:
78
+ _c.sent();
79
+ port = slowServer.address().port;
80
+ blackholeUrl_1 = "http://127.0.0.1:".concat(port, "/hook");
81
+ return [4 /*yield*/, sdk.api.endusers.createOne({ email: "f0155-".concat(Date.now(), "@example.com"), fname: 'F0155', lname: 'Webhook' })];
82
+ case 3:
83
+ enduser_1 = _c.sent();
84
+ enduserId = enduser_1.id;
85
+ return [4 /*yield*/, (0, testing_1.async_test)('outbound webhook to a non-responding receiver times out server-side (does not hang)', function () { return __awaiter(void 0, void 0, void 0, function () {
86
+ var start, outcome;
87
+ return __generator(this, function (_a) {
88
+ switch (_a.label) {
89
+ case 0:
90
+ start = Date.now();
91
+ return [4 /*yield*/, Promise.race([
92
+ sdk.api.webhooks.send_automation_webhook({
93
+ enduserId: enduser_1.id,
94
+ action: { info: { url: blackholeUrl_1 } },
95
+ }).then(function () { return 'completed'; }).catch(function () { return 'errored'; }),
96
+ new Promise(function (r) { return setTimeout(function () { return r('client-timeout'); }, CLIENT_WAIT_MS); }),
97
+ ])];
98
+ case 1:
99
+ outcome = _a.sent();
100
+ return [2 /*return*/, { outcome: outcome, elapsed: Date.now() - start }];
101
+ }
102
+ });
103
+ }); },
104
+ // green: the server-side axios timeout fired (call settled) before our 20s client wait
105
+ { onResult: function (r) { return r.outcome !== 'client-timeout' && r.elapsed < CLIENT_WAIT_MS; } })];
106
+ case 4:
107
+ _c.sent();
108
+ return [3 /*break*/, 10];
109
+ case 5:
110
+ slowServer.close();
111
+ if (!enduserId) return [3 /*break*/, 9];
112
+ _c.label = 6;
113
+ case 6:
114
+ _c.trys.push([6, 8, , 9]);
115
+ return [4 /*yield*/, sdk.api.endusers.deleteOne(enduserId)];
116
+ case 7:
117
+ _c.sent();
118
+ return [3 /*break*/, 9];
119
+ case 8:
120
+ _b = _c.sent();
121
+ return [3 /*break*/, 9];
122
+ case 9: return [7 /*endfinally*/];
123
+ case 10: return [2 /*return*/];
124
+ }
125
+ });
126
+ });
127
+ };
128
+ exports.webhook_timeout_tests = webhook_timeout_tests;
129
+ if (require.main === module) {
130
+ console.log("\uD83C\uDF10 Using API URL: ".concat(host));
131
+ var sdk_2 = new sdk_1.Session({ host: host });
132
+ var sdkNonAdmin_1 = new sdk_1.Session({ host: host });
133
+ var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
134
+ return __generator(this, function (_a) {
135
+ switch (_a.label) {
136
+ case 0: return [4 /*yield*/, (0, setup_1.setup_tests)(sdk_2, sdkNonAdmin_1)];
137
+ case 1:
138
+ _a.sent();
139
+ return [4 /*yield*/, (0, exports.webhook_timeout_tests)({ sdk: sdk_2, sdkNonAdmin: sdkNonAdmin_1 })];
140
+ case 2:
141
+ _a.sent();
142
+ return [2 /*return*/];
143
+ }
144
+ });
145
+ }); };
146
+ runTests()
147
+ .then(function () {
148
+ console.log("✅ webhook timeout test suite completed successfully");
149
+ process.exit(0);
150
+ })
151
+ .catch(function (error) {
152
+ console.error("❌ webhook timeout test suite failed:", error);
153
+ process.exit(1);
154
+ });
155
+ }
156
+ //# sourceMappingURL=webhook-timeout.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"webhook-timeout.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/webhook-timeout.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,8CAAuB;AACvB,oCAAsC;AACtC,+CAG4B;AAC5B,qCAAyC;AAEzC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,+FAA+F;AAC/F,IAAM,cAAc,GAAG,KAAM,CAAA;AAE7B;;;;;;;;;;;;GAYG;AACI,IAAM,qBAAqB,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;oBAC/C,IAAA,oBAAU,EAAC,0BAA0B,CAAC,CAAA;oBAGhC,UAAU,GAAG,cAAI,CAAC,YAAY,CAAC,cAA+C,CAAC,CAAC,CAAA;;;;oBAGpF,qBAAM,IAAI,OAAO,CAAO,UAAA,OAAO,IAAI,OAAA,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,cAAM,OAAA,OAAO,EAAE,EAAT,CAAS,CAAC,EAAlD,CAAkD,CAAC,EAAA;;oBAAtF,SAAsF,CAAA;oBAChF,IAAI,GAAI,UAAU,CAAC,OAAO,EAAU,CAAC,IAAI,CAAA;oBACzC,iBAAe,2BAAoB,IAAI,UAAO,CAAA;oBAEpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAS,IAAI,CAAC,GAAG,EAAE,iBAAc,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;oBAA1H,YAAU,SAAgH;oBAChI,SAAS,GAAG,SAAO,CAAC,EAAE,CAAA;oBAEtB,qBAAM,IAAA,oBAAU,EACd,qFAAqF,EACrF;;;;;wCACQ,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;wCACR,qBAAM,OAAO,CAAC,IAAI,CAAC;gDACjC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC;oDACvC,SAAS,EAAE,SAAO,CAAC,EAAE;oDACrB,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,cAAY,EAAE,EAAE;iDACjC,CAAC,CAAC,IAAI,CAAC,cAAM,OAAA,WAAW,EAAX,CAAW,CAAC,CAAC,KAAK,CAAC,cAAM,OAAA,SAAS,EAAT,CAAS,CAAC;gDACxD,IAAI,OAAO,CAAS,UAAA,CAAC,IAAI,OAAA,UAAU,CAAC,cAAM,OAAA,CAAC,CAAC,gBAAgB,CAAC,EAAnB,CAAmB,EAAE,cAAc,CAAC,EAArD,CAAqD,CAAC;6CAChF,CAAC,EAAA;;wCANI,OAAO,GAAG,SAMd;wCACF,sBAAO,EAAE,OAAO,SAAA,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,EAAA;;;6BAChD;wBACD,uFAAuF;wBACvF,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,OAAO,KAAK,gBAAgB,IAAI,CAAC,CAAC,OAAO,GAAG,cAAc,EAA5D,CAA4D,EAAE,CACvF,EAAA;;oBAfD,SAeC,CAAA;;;oBAED,UAAU,CAAC,KAAK,EAAE,CAAA;yBACd,SAAS,EAAT,wBAAS;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAA;;oBAA3C,SAA2C,CAAA;;;;;;;;;;CAErE,CAAA;AAlCY,QAAA,qBAAqB,yBAkCjC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,6BAAqB,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAjD,SAAiD,CAAA;;;;SAClD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAA;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAA;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
@@ -221,13 +221,13 @@ var webhook_error_handling_tests = function (_a) {
221
221
  'deliveryFailureCount incremented after HTTP 500']);
222
222
  // Scenario 3 (timeout): skipped — WEBHOOK_TIMEOUT_MS is a constant (15s), not env-overridable,
223
223
  // and a 15s+ non-responding receiver would make this suite unacceptably slow.
224
- // Covered by security/F-0155-webhook-timeout.test.ts via send_automation_webhook.
224
+ // Covered by security/webhook-timeout.test.ts via send_automation_webhook.
225
225
  // Scenario 4: success path unchanged — 200 logged, counter untouched
226
226
  return [4 /*yield*/, sdk.api.webhooks.update({ url: "".concat(receiverBase, "/success") })];
227
227
  case 17:
228
228
  // Scenario 3 (timeout): skipped — WEBHOOK_TIMEOUT_MS is a constant (15s), not env-overridable,
229
229
  // and a 15s+ non-responding receiver would make this suite unacceptably slow.
230
- // Covered by security/F-0155-webhook-timeout.test.ts via send_automation_webhook.
230
+ // Covered by security/webhook-timeout.test.ts via send_automation_webhook.
231
231
  // Scenario 4: success path unchanged — 200 logged, counter untouched
232
232
  _j.sent();
233
233
  return [4 /*yield*/, trigger_delivery('success')];
@@ -1 +1 @@
1
- {"version":3,"file":"webhook_error_handling.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/webhook_error_handling.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,oDAA6B;AAC7B,4DAAoC;AACpC,kDAA2B;AAG3B,iCAAmC;AACnC,+CAK4B;AAC5B,kCAAsC;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,WAAW,GAAG,4DAA4D,CAAA;AAChF,IAAM,MAAM,GAAG,UAAC,CAAS,IAAK,OAAA,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAnD,CAAmD,CAAA;AAEjF,iGAAiG;AACjG,IAAM,aAAa,GAAG,iDAAiD,CAAA;AAEvE,IAAM,eAAe,GAAG,KAAM,CAAA;AAC9B,IAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,IAAM,gBAAgB,GAAG,UAAO,GAAY,EAAE,GAAW;;;;;gBACjD,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;;;qBACjB,CAAA,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,eAAe,CAAA;gBAC5B,qBAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,UAAiB,EAAE,CAAC,EAAA;;gBAAjF,IAAI,GAAG,SAAwF;gBAC/F,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,GAAG,KAAK,GAAG,EAAb,CAAa,CAAC,CAAA;gBAC3C,IAAI,KAAK;oBAAE,sBAAO,KAAK,EAAA;gBACvB,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,gBAAgB,CAAC,EAAA;;gBAAvC,SAAuC,CAAA;;oBAEzC,sBAAO,IAAI,EAAA;;;KACZ,CAAA;AAED,IAAM,iBAAiB,GAAG,UAAO,GAAY;;;;;oBAC3B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAA;;gBAA1C,OAAO,GAAG,SAA8C;gBAC9D,sBAAO,CAAC,MAAA,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,oBAAoB,mCAAI,CAAC,CAAW,EAAA;;;KACzD,CAAA;AAED,0EAA0E;AAC1E,IAAM,sBAAsB,GAAG,UAAO,GAAY,EAAE,QAAgB;;;;;gBAC5D,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACpB,KAAK,GAAG,CAAC,CAAC,CAAA;;;qBACP,CAAA,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,eAAe,CAAA;gBACjC,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;gBAApC,KAAK,GAAG,SAA4B,CAAA;gBACpC,IAAI,KAAK,KAAK,QAAQ;oBAAE,sBAAO,KAAK,EAAA;gBACpC,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,gBAAgB,CAAC,EAAA;;gBAAvC,SAAuC,CAAA;;oBAEzC,sBAAO,KAAK,EAAA;;;KACb,CAAA;AAED,sDAAsD;AAC/C,IAAM,4BAA4B,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;;oBACnE,IAAA,oBAAU,EAAC,8BAA8B,CAAC,CAAA;oBAGpC,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAA;oBACrB,GAAG,CAAC,GAAG,CAAC,qBAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;oBAEvC,wBAAwB,GAAG,KAAK,CAAA;oBACpC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,UAAC,CAAC,EAAE,GAAG,IAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;oBACrF,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,UAAC,CAAC,EAAE,GAAG,IAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;oBACtF,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,UAAC,GAAG,EAAE,GAAG;wBACtB,IAAA,KAAoC,GAAG,CAAC,IAAI,EAA1C,OAAO,aAAA,EAAE,SAAS,eAAA,EAAE,SAAS,eAAa,CAAA;wBAClD,wBAAwB,GAAG,CACzB,MAAM,CAAC,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAC,CAAiB,IAAK,OAAA,CAAC,CAAC,EAAE,EAAJ,CAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,GAAG,WAAW,CAAC,KAAK,SAAS,CAC1G,CAAA;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;oBAC1B,CAAC,CAAC,CAAA;oBAE0B,qBAAM,IAAI,OAAO,CAAC,UAAA,OAAO;4BACnD,IAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,cAAM,OAAA,OAAO,CAAC,CAAC,CAAC,EAAV,CAAU,CAAC,CAAA;wBACxD,CAAC,CAAC,EAAA;;oBAFI,MAAM,GAAgB,SAE1B;oBACI,YAAY,GAAG,2BAAqB,MAAM,CAAC,OAAO,EAAU,CAAC,IAAI,CAAE,CAAA;oBAEnE,UAAU,GAAa,EAAE,CAAA;oBACzB,gBAAgB,GAAG,UAAO,KAAa;;;;wCAC3B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAiB,KAAK,cAAI,IAAI,CAAC,GAAG,EAAE,oBAAiB,EAAE,CAAC,EAAA;;oCAA5G,OAAO,GAAG,SAAkG;oCAClH,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;;;;yBAC5B,CAAA;;;;oBAGC,qBAAM,IAAA,oBAAU,EACd,mBAAmB,EACnB,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAvE,CAAuE,EAC7E,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC7C,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAA;;oBAApH,SAAoH,CAAA;oBAE/F,qBAAM,iBAAiB,CAAC,GAAG,CAAC;wBAEjD,kDAAkD;sBAFD;;oBAA3C,YAAY,GAAG,SAA4B;oBAEjD,kDAAkD;oBAClD,qBAAM,gBAAgB,CAAC,WAAW,CAAC,EAAA;;oBADnC,kDAAkD;oBAClD,SAAmC,CAAA;oBACd,qBAAM,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,EAAA;;oBAAzD,YAAY,GAAG,SAA0C;oBAC/D,IAAA,gBAAM,EAAC,CAAC,CAAC,YAAY,EAAE,8CAA8C,EAAE,0CAA0C,CAAC,CAAA;oBAClH,IAAA,gBAAM,EACJ,OAAO,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,QAAQ,CAAA,KAAK,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAC9E,uDAAgD,IAAI,CAAC,SAAS,CAAC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,QAAQ,CAAC,CAAE,EACxF,6CAA6C,CAC9C,CAAA;oBACD,IAAA,gBAAM,EAAC,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,YAAY,MAAK,SAAS,EAAE,uCAAuC,EAAE,mCAAmC,CAAC,CAAA;oBAC9H,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,sDAAsD;wBACtD,kDAAkD,EACnD,CAAA;oBAED,0CAA0C;oBAC1C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,cAAW,EAAE,CAAC,EAAA;;oBADlE,0CAA0C;oBAC1C,SAAkE,CAAA;oBAClE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBAClB,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,cAAW,CAAC,EAAA;;oBAAhE,MAAM,GAAG,SAAuD;oBACtE,IAAA,gBAAM,EAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAE,EAAE,gCAAgC,CAAC,CAAA;oBAChI,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,qDAAqD;wBACrD,iDAAiD,EAClD,CAAA;oBAED,0CAA0C;oBAC1C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,cAAW,EAAE,CAAC,EAAA;;oBADlE,0CAA0C;oBAC1C,SAAkE,CAAA;oBAClE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBAClB,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,cAAW,CAAC,EAAA;;oBAAhE,MAAM,GAAG,SAAuD;oBACtE,IAAA,gBAAM,EAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAE,EAAE,gCAAgC,CAAC,CAAA;oBAChI,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,qDAAqD;wBACrD,iDAAiD,EAClD,CAAA;oBAED,+FAA+F;oBAC/F,8EAA8E;oBAC9E,kFAAkF;oBAElF,qEAAqE;oBACrE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,aAAU,EAAE,CAAC,EAAA;;oBALjE,+FAA+F;oBAC/F,8EAA8E;oBAC9E,kFAAkF;oBAElF,qEAAqE;oBACrE,SAAiE,CAAA;oBACjE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBACd,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,aAAU,CAAC,EAAA;;oBAAnE,UAAU,GAAG,SAAsD;oBACzE,IAAA,gBAAM,EAAC,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,YAAY,CAAE,EAAE,+BAA+B,CAAC,CAAA;oBACvI,IAAA,gBAAM,EAAC,wBAAwB,EAAE,4CAA4C,EAAE,qCAAqC,CAAC,CAAA;oBACrH,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA,CAAC,+DAA+D;;oBAA3F,SAA2B,CAAA,CAAC,+DAA+D;oBAC3F,KAAA,gBAAM,CAAA;oBACJ,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;oBAD9B,kBACE,CAAA,SAA4B,MAAK,YAAY,GAAG,CAAC;wBACjD,qDAAqD;wBACrD,2CAA2C,EAC5C,CAAA;oBAGe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAA;;oBAA1C,OAAO,GAAG,SAA8C;oBACxD,SAAS,GAAG,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,EAAE,CAAA;oBAChC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAS,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA,CAAC,wBAAwB;;oBAA3H,SAAkG,CAAA,CAAC,wBAAwB;oBAC3H,KAAA,gBAAM,CAAA;oBACJ,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;oBAD9B,kBACE,CAAA,SAA4B,MAAK,YAAY,GAAG,CAAC;wBACjD,qDAAqD;wBACrD,4CAA4C,EAC7C,CAAA;;;gBAED,wEAAwE;gBACxE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBADrI,wEAAwE;oBACxE,SAAqI,CAAA;oBACrI,MAAM,CAAC,KAAK,EAAE,CAAA;0BACa,EAAV,yBAAU;;;yBAAV,CAAA,wBAAU,CAAA;oBAAhB,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAApC,SAAoC,CAAA;;;;;;oBAD3B,IAAU,CAAA;;;;;;;CAI9B,CAAA;AA/GY,QAAA,4BAA4B,gCA+GxC;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,oCAA4B,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAxD,SAAwD,CAAA;;;;SACzD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAA;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAA;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
1
+ {"version":3,"file":"webhook_error_handling.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/webhook_error_handling.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,oDAA6B;AAC7B,4DAAoC;AACpC,kDAA2B;AAG3B,iCAAmC;AACnC,+CAK4B;AAC5B,kCAAsC;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,WAAW,GAAG,4DAA4D,CAAA;AAChF,IAAM,MAAM,GAAG,UAAC,CAAS,IAAK,OAAA,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAnD,CAAmD,CAAA;AAEjF,iGAAiG;AACjG,IAAM,aAAa,GAAG,iDAAiD,CAAA;AAEvE,IAAM,eAAe,GAAG,KAAM,CAAA;AAC9B,IAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,IAAM,gBAAgB,GAAG,UAAO,GAAY,EAAE,GAAW;;;;;gBACjD,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;;;qBACjB,CAAA,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,eAAe,CAAA;gBAC5B,qBAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,UAAiB,EAAE,CAAC,EAAA;;gBAAjF,IAAI,GAAG,SAAwF;gBAC/F,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,GAAG,KAAK,GAAG,EAAb,CAAa,CAAC,CAAA;gBAC3C,IAAI,KAAK;oBAAE,sBAAO,KAAK,EAAA;gBACvB,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,gBAAgB,CAAC,EAAA;;gBAAvC,SAAuC,CAAA;;oBAEzC,sBAAO,IAAI,EAAA;;;KACZ,CAAA;AAED,IAAM,iBAAiB,GAAG,UAAO,GAAY;;;;;oBAC3B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAA;;gBAA1C,OAAO,GAAG,SAA8C;gBAC9D,sBAAO,CAAC,MAAA,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,oBAAoB,mCAAI,CAAC,CAAW,EAAA;;;KACzD,CAAA;AAED,0EAA0E;AAC1E,IAAM,sBAAsB,GAAG,UAAO,GAAY,EAAE,QAAgB;;;;;gBAC5D,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACpB,KAAK,GAAG,CAAC,CAAC,CAAA;;;qBACP,CAAA,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,eAAe,CAAA;gBACjC,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;gBAApC,KAAK,GAAG,SAA4B,CAAA;gBACpC,IAAI,KAAK,KAAK,QAAQ;oBAAE,sBAAO,KAAK,EAAA;gBACpC,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,gBAAgB,CAAC,EAAA;;gBAAvC,SAAuC,CAAA;;oBAEzC,sBAAO,KAAK,EAAA;;;KACb,CAAA;AAED,sDAAsD;AAC/C,IAAM,4BAA4B,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;;oBACnE,IAAA,oBAAU,EAAC,8BAA8B,CAAC,CAAA;oBAGpC,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAA;oBACrB,GAAG,CAAC,GAAG,CAAC,qBAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;oBAEvC,wBAAwB,GAAG,KAAK,CAAA;oBACpC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,UAAC,CAAC,EAAE,GAAG,IAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;oBACrF,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,UAAC,CAAC,EAAE,GAAG,IAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;oBACtF,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,UAAC,GAAG,EAAE,GAAG;wBACtB,IAAA,KAAoC,GAAG,CAAC,IAAI,EAA1C,OAAO,aAAA,EAAE,SAAS,eAAA,EAAE,SAAS,eAAa,CAAA;wBAClD,wBAAwB,GAAG,CACzB,MAAM,CAAC,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,EAAE,CAAC,CAAC,GAAG,CAAC,UAAC,CAAiB,IAAK,OAAA,CAAC,CAAC,EAAE,EAAJ,CAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,GAAG,WAAW,CAAC,KAAK,SAAS,CAC1G,CAAA;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;oBAC1B,CAAC,CAAC,CAAA;oBAE0B,qBAAM,IAAI,OAAO,CAAC,UAAA,OAAO;4BACnD,IAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,cAAM,OAAA,OAAO,CAAC,CAAC,CAAC,EAAV,CAAU,CAAC,CAAA;wBACxD,CAAC,CAAC,EAAA;;oBAFI,MAAM,GAAgB,SAE1B;oBACI,YAAY,GAAG,2BAAqB,MAAM,CAAC,OAAO,EAAU,CAAC,IAAI,CAAE,CAAA;oBAEnE,UAAU,GAAa,EAAE,CAAA;oBACzB,gBAAgB,GAAG,UAAO,KAAa;;;;wCAC3B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAiB,KAAK,cAAI,IAAI,CAAC,GAAG,EAAE,oBAAiB,EAAE,CAAC,EAAA;;oCAA5G,OAAO,GAAG,SAAkG;oCAClH,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;;;;yBAC5B,CAAA;;;;oBAGC,qBAAM,IAAA,oBAAU,EACd,mBAAmB,EACnB,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAvE,CAAuE,EAC7E,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC7C,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAA;;oBAApH,SAAoH,CAAA;oBAE/F,qBAAM,iBAAiB,CAAC,GAAG,CAAC;wBAEjD,kDAAkD;sBAFD;;oBAA3C,YAAY,GAAG,SAA4B;oBAEjD,kDAAkD;oBAClD,qBAAM,gBAAgB,CAAC,WAAW,CAAC,EAAA;;oBADnC,kDAAkD;oBAClD,SAAmC,CAAA;oBACd,qBAAM,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,EAAA;;oBAAzD,YAAY,GAAG,SAA0C;oBAC/D,IAAA,gBAAM,EAAC,CAAC,CAAC,YAAY,EAAE,8CAA8C,EAAE,0CAA0C,CAAC,CAAA;oBAClH,IAAA,gBAAM,EACJ,OAAO,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,QAAQ,CAAA,KAAK,QAAQ,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAC9E,uDAAgD,IAAI,CAAC,SAAS,CAAC,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,QAAQ,CAAC,CAAE,EACxF,6CAA6C,CAC9C,CAAA;oBACD,IAAA,gBAAM,EAAC,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,YAAY,MAAK,SAAS,EAAE,uCAAuC,EAAE,mCAAmC,CAAC,CAAA;oBAC9H,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,sDAAsD;wBACtD,kDAAkD,EACnD,CAAA;oBAED,0CAA0C;oBAC1C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,cAAW,EAAE,CAAC,EAAA;;oBADlE,0CAA0C;oBAC1C,SAAkE,CAAA;oBAClE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBAClB,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,cAAW,CAAC,EAAA;;oBAAhE,MAAM,GAAG,SAAuD;oBACtE,IAAA,gBAAM,EAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAE,EAAE,gCAAgC,CAAC,CAAA;oBAChI,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,qDAAqD;wBACrD,iDAAiD,EAClD,CAAA;oBAED,0CAA0C;oBAC1C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,cAAW,EAAE,CAAC,EAAA;;oBADlE,0CAA0C;oBAC1C,SAAkE,CAAA;oBAClE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBAClB,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,cAAW,CAAC,EAAA;;oBAAhE,MAAM,GAAG,SAAuD;oBACtE,IAAA,gBAAM,EAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAE,EAAE,gCAAgC,CAAC,CAAA;oBAChI,KAAA,gBAAM,CAAA;oBACJ,qBAAM,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,EAAA;;oBADrD,kBACE,CAAA,SAAmD,MAAK,YAAY,GAAG,CAAC;wBACxE,qDAAqD;wBACrD,iDAAiD,EAClD,CAAA;oBAED,+FAA+F;oBAC/F,8EAA8E;oBAC9E,2EAA2E;oBAE3E,qEAAqE;oBACrE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,UAAG,YAAY,aAAU,EAAE,CAAC,EAAA;;oBALjE,+FAA+F;oBAC/F,8EAA8E;oBAC9E,2EAA2E;oBAE3E,qEAAqE;oBACrE,SAAiE,CAAA;oBACjE,qBAAM,gBAAgB,CAAC,SAAS,CAAC,EAAA;;oBAAjC,SAAiC,CAAA;oBACd,qBAAM,gBAAgB,CAAC,GAAG,EAAE,UAAG,YAAY,aAAU,CAAC,EAAA;;oBAAnE,UAAU,GAAG,SAAsD;oBACzE,IAAA,gBAAM,EAAC,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,YAAY,MAAK,GAAG,EAAE,yCAAkC,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,YAAY,CAAE,EAAE,+BAA+B,CAAC,CAAA;oBACvI,IAAA,gBAAM,EAAC,wBAAwB,EAAE,4CAA4C,EAAE,qCAAqC,CAAC,CAAA;oBACrH,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA,CAAC,+DAA+D;;oBAA3F,SAA2B,CAAA,CAAC,+DAA+D;oBAC3F,KAAA,gBAAM,CAAA;oBACJ,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;oBAD9B,kBACE,CAAA,SAA4B,MAAK,YAAY,GAAG,CAAC;wBACjD,qDAAqD;wBACrD,2CAA2C,EAC5C,CAAA;oBAGe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAA;;oBAA1C,OAAO,GAAG,SAA8C;oBACxD,SAAS,GAAG,MAAA,OAAO,CAAC,CAAC,CAAC,0CAAE,EAAE,CAAA;oBAChC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAS,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA,CAAC,wBAAwB;;oBAA3H,SAAkG,CAAA,CAAC,wBAAwB;oBAC3H,KAAA,gBAAM,CAAA;oBACJ,qBAAM,iBAAiB,CAAC,GAAG,CAAC,EAAA;;oBAD9B,kBACE,CAAA,SAA4B,MAAK,YAAY,GAAG,CAAC;wBACjD,qDAAqD;wBACrD,4CAA4C,EAC7C,CAAA;;;gBAED,wEAAwE;gBACxE,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,cAAO,CAAC,CAAC,EAAA;;oBADrI,wEAAwE;oBACxE,SAAqI,CAAA;oBACrI,MAAM,CAAC,KAAK,EAAE,CAAA;0BACa,EAAV,yBAAU;;;yBAAV,CAAA,wBAAU,CAAA;oBAAhB,EAAE;;;;oBACL,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAApC,SAAoC,CAAA;;;;;;oBAD3B,IAAU,CAAA;;;;;;;CAI9B,CAAA;AA/GY,QAAA,4BAA4B,gCA+GxC;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,oCAA4B,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAxD,SAAwD,CAAA;;;;SACzD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAA;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAA;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
@@ -1 +1 @@
1
- {"version":3,"file":"tests.d.ts","sourceRoot":"","sources":["../../../src/tests/tests.ts"],"names":[],"mappings":"AAu3EA,eAAO,MAAM,kCAAkC,qBAgJ9C,CAAA;AAED,eAAO,MAAM,mCAAmC,qBA2K/C,CAAA;AAGD,eAAO,MAAM,oBAAoB,qBAoHhC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBAsF3C,CAAA;AAID,eAAO,MAAM,0BAA0B,qBAqCtC,CAAA;AAy1FD,eAAO,MAAM,cAAc,qBAqC1B,CAAA;AAotBD,eAAO,MAAM,0BAA0B,qBAmFtC,CAAA;AAqED,eAAO,MAAM,eAAe,qBAmD3B,CAAA;AAED,eAAO,MAAM,oBAAoB,6BAsBhC,CAAA;AAED,eAAO,MAAM,oCAAoC,qBAiqBhD,CAAA;AAED,eAAO,MAAM,mCAAmC,qBAkE/C,CAAA;AAqlDD,eAAO,MAAM,yBAAyB,qBA0DrC,CAAA;AAED,eAAO,MAAM,kBAAkB,qBAmK9B,CAAA;AAED,eAAO,MAAM,sBAAsB,qBA0BlC,CAAA;AAGD,eAAO,MAAM,mBAAmB,qBAmC/B,CAAA;AAED,eAAO,MAAM,gCAAgC,mCA8C5C,CAAA;AAED,eAAO,MAAM,cAAc,qBA+b1B,CAAA;AAGD,eAAO,MAAM,oBAAoB,uBAuBhC,CAAA;AA4wBD,eAAO,MAAM,4BAA4B,qBAoExC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBA4U3C,CAAA;AAED,eAAO,MAAM,gDAAgD,qBAyD5D,CAAA;AAED,eAAO,MAAM,qBAAqB,qBAwIjC,CAAA"}
1
+ {"version":3,"file":"tests.d.ts","sourceRoot":"","sources":["../../../src/tests/tests.ts"],"names":[],"mappings":"AA03EA,eAAO,MAAM,kCAAkC,qBAgJ9C,CAAA;AAED,eAAO,MAAM,mCAAmC,qBA2K/C,CAAA;AAGD,eAAO,MAAM,oBAAoB,qBAoHhC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBAsF3C,CAAA;AAID,eAAO,MAAM,0BAA0B,qBAqCtC,CAAA;AAy1FD,eAAO,MAAM,cAAc,qBAqC1B,CAAA;AAotBD,eAAO,MAAM,0BAA0B,qBAmFtC,CAAA;AAqED,eAAO,MAAM,eAAe,qBAmD3B,CAAA;AAED,eAAO,MAAM,oBAAoB,6BAsBhC,CAAA;AAED,eAAO,MAAM,oCAAoC,qBAiqBhD,CAAA;AAED,eAAO,MAAM,mCAAmC,qBAkE/C,CAAA;AAqlDD,eAAO,MAAM,yBAAyB,qBA0DrC,CAAA;AAED,eAAO,MAAM,kBAAkB,qBAmK9B,CAAA;AAED,eAAO,MAAM,sBAAsB,qBA0BlC,CAAA;AAGD,eAAO,MAAM,mBAAmB,qBAmC/B,CAAA;AAED,eAAO,MAAM,gCAAgC,mCA8C5C,CAAA;AAED,eAAO,MAAM,cAAc,qBA+b1B,CAAA;AAGD,eAAO,MAAM,oBAAoB,uBAuBhC,CAAA;AA4wBD,eAAO,MAAM,4BAA4B,qBAiFxC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBA4U3C,CAAA;AAED,eAAO,MAAM,gDAAgD,qBAyD5D,CAAA;AAED,eAAO,MAAM,qBAAqB,qBAwIjC,CAAA"}
@@ -159,33 +159,34 @@ var nutrition_tracking_test_1 = require("./api_tests/nutrition_tracking.test");
159
159
  var no_access_permission_checks_test_1 = require("./api_tests/no_access_permission_checks.test");
160
160
  var resource_access_tags_test_1 = require("./api_tests/resource_access_tags.test");
161
161
  var field_redaction_test_1 = require("./api_tests/field_redaction.test");
162
- var F_0001_data_sync_redaction_bypass_test_1 = require("./api_tests/security/F-0001-data-sync-redaction-bypass.test");
163
- var F_0106_F_0110_enduser_write_restrictions_test_1 = require("./api_tests/security/F-0106-F-0110-enduser-write-restrictions.test");
164
- var F_0005_ai_conversations_rbac_test_1 = require("./api_tests/security/F-0005-ai-conversations-rbac.test");
165
- var F_0006_develop_health_benefit_verification_rbac_test_1 = require("./api_tests/security/F-0006-develop-health-benefit-verification-rbac.test");
166
- var F_0053_cascade_role_rename_cross_tenant_test_1 = require("./api_tests/security/F-0053-cascade-role-rename-cross-tenant.test");
167
- var F_0076_self_admin_role_assignment_test_1 = require("./api_tests/security/F-0076-self-admin-role-assignment.test");
168
- var F_0007_invite_user_enumeration_test_1 = require("./api_tests/security/F-0007-invite-user-enumeration.test");
162
+ var data_sync_redaction_bypass_test_1 = require("./api_tests/security/data-sync-redaction-bypass.test");
163
+ var enduser_write_restrictions_test_1 = require("./api_tests/security/enduser-write-restrictions.test");
164
+ var ai_conversations_rbac_test_1 = require("./api_tests/security/ai-conversations-rbac.test");
165
+ var develop_health_benefit_verification_rbac_test_1 = require("./api_tests/security/develop-health-benefit-verification-rbac.test");
166
+ var cascade_role_rename_cross_tenant_test_1 = require("./api_tests/security/cascade-role-rename-cross-tenant.test");
167
+ var self_admin_role_assignment_test_1 = require("./api_tests/security/self-admin-role-assignment.test");
168
+ var invite_user_enumeration_test_1 = require("./api_tests/security/invite-user-enumeration.test");
169
169
  var register_business_id_injection_test_1 = require("./api_tests/security/register_business_id_injection.test");
170
- var F_0008_handle_incoming_communication_cross_tenant_test_1 = require("./api_tests/security/F-0008-handle-incoming-communication-cross-tenant.test");
171
- var F_0013_sanitize_user_html_test_1 = require("./api_tests/security/F-0013-sanitize-user-html.test");
172
- var F_0013_sanitize_user_html_with_iframes_test_1 = require("./api_tests/security/F-0013-sanitize-user-html-with-iframes.test");
173
- var F_0016_prototype_pollution_test_1 = require("./api_tests/security/F-0016-prototype-pollution.test");
174
- var F_0116_F_0119_enduser_cross_create_test_1 = require("./api_tests/security/F-0116-F-0119-enduser-cross-create.test");
175
- var F_0145_globalunique_leak_test_1 = require("./api_tests/security/F-0145-globalunique-leak.test");
176
- var F_0151_load_inbox_redaction_test_1 = require("./api_tests/security/F-0151-load-inbox-redaction.test");
170
+ var handle_incoming_communication_cross_tenant_test_1 = require("./api_tests/security/handle-incoming-communication-cross-tenant.test");
171
+ var sanitize_user_html_test_1 = require("./api_tests/security/sanitize-user-html.test");
172
+ var sanitize_user_html_with_iframes_test_1 = require("./api_tests/security/sanitize-user-html-with-iframes.test");
173
+ var prototype_pollution_test_1 = require("./api_tests/security/prototype-pollution.test");
174
+ var enduser_cross_create_test_1 = require("./api_tests/security/enduser-cross-create.test");
175
+ var globalunique_conflict_redaction_test_1 = require("./api_tests/security/globalunique-conflict-redaction.test");
176
+ var load_inbox_redaction_test_1 = require("./api_tests/security/load-inbox-redaction.test");
177
177
  var suggested_reply_redaction_test_1 = require("./api_tests/security/suggested-reply-redaction.test");
178
- var F_0155_webhook_timeout_test_1 = require("./api_tests/security/F-0155-webhook-timeout.test");
178
+ var webhook_timeout_test_1 = require("./api_tests/security/webhook-timeout.test");
179
179
  var enduser_ai_summary_trust_gate_test_1 = require("./api_tests/security/enduser-ai-summary-trust-gate.test");
180
- var F_0166_allowed_paths_wildcard_bypass_test_1 = require("./api_tests/security/F-0166-allowed-paths-wildcard-bypass.test");
181
- var F_0025_proxy_image_unauth_ssrf_test_1 = require("./api_tests/security/F-0025-proxy-image-unauth-ssrf.test");
182
- var F_0015_webhook_outbound_ssrf_test_1 = require("./api_tests/security/F-0015-webhook-outbound-ssrf.test");
180
+ var allowed_paths_confinement_test_1 = require("./api_tests/security/allowed-paths-confinement.test");
181
+ var proxy_image_unauth_ssrf_test_1 = require("./api_tests/security/proxy-image-unauth-ssrf.test");
182
+ var webhook_outbound_ssrf_test_1 = require("./api_tests/security/webhook-outbound-ssrf.test");
183
183
  var public_endpoint_auth_field_lock_test_1 = require("./api_tests/security/public_endpoint_auth_field_lock.test");
184
184
  var formsort_webhook_auth_field_lock_test_1 = require("./api_tests/security/formsort_webhook_auth_field_lock.test");
185
- var F_0179_booking_info_idor_token_mint_test_1 = require("./api_tests/security/F-0179-booking-info-idor-token-mint.test");
186
- var F_0192_automated_actions_process_gate_test_1 = require("./api_tests/security/F-0192-automated-actions-process-gate.test");
187
- var F_0191_schema_adminonly_enforcement_test_1 = require("./api_tests/security/F-0191-schema-adminonly-enforcement.test");
188
- var F_0185_startlinktoken_enduser_staff_escalation_test_1 = require("./api_tests/security/F-0185-startlinktoken-enduser-staff-escalation.test");
185
+ var booking_info_idor_token_mint_test_1 = require("./api_tests/security/booking-info-idor-token-mint.test");
186
+ var automated_actions_process_gate_test_1 = require("./api_tests/security/automated-actions-process-gate.test");
187
+ var schema_adminonly_enforcement_test_1 = require("./api_tests/security/schema-adminonly-enforcement.test");
188
+ var startlinktoken_enduser_staff_escalation_test_1 = require("./api_tests/security/startlinktoken-enduser-staff-escalation.test");
189
+ var form_logic_js_execution_test_1 = require("./api_tests/security/form-logic-js-execution.test");
189
190
  var bulk_assignment_test_1 = require("./api_tests/bulk_assignment.test");
190
191
  var tickets_bulk_assign_care_team_test_1 = require("./api_tests/tickets_bulk_assign_care_team.test");
191
192
  var managed_content_enduser_access_test_1 = require("./api_tests/managed_content_enduser_access.test");
@@ -206,8 +207,10 @@ var phone_validation_test_1 = require("./unit_tests/phone_validation.test");
206
207
  var openapi_spec_freshness_test_1 = require("./unit_tests/openapi_spec_freshness.test");
207
208
  var do_not_send_address_test_1 = require("./unit_tests/do_not_send_address.test");
208
209
  var organization_signup_test_1 = require("./api_tests/organization_signup.test");
209
- var F_0196_add_to_journey_foreign_enduserid_test_1 = require("./api_tests/security/F-0196-add-to-journey-foreign-enduserid.test");
210
+ var add_to_journey_foreign_enduserid_test_1 = require("./api_tests/security/add-to-journey-foreign-enduserid.test");
210
211
  var tickets_bulk_assign_from_queue_test_1 = require("./api_tests/tickets_bulk_assign_from_queue.test");
212
+ var enduser_observations_auto_review_test_1 = require("./api_tests/enduser_observations_auto_review.test");
213
+ var file_link_session_confinement_test_1 = require("./api_tests/security/file-link-session-confinement.test");
211
214
  var setup_isolated_1 = require("./setup_isolated");
212
215
  var elation_user_id_test_1 = require("./api_tests/elation_user_id.test");
213
216
  var organization_settings_duplicates_test_1 = require("./api_tests/organization_settings_duplicates.test");
@@ -12891,6 +12894,14 @@ var form_conditional_logic_tests = function () { return __awaiter(void 0, void 0
12891
12894
  run_conditional_form_test({ $and: [{ condition: (_a = {}, _a[utilities_1.FORM_LOGIC_CALCULATED_FIELDS[0]] = { $exists: true }, _a) }] }, true);
12892
12895
  run_conditional_form_test({ $and: [{ condition: (_b = {}, _b[utilities_1.FORM_LOGIC_CALCULATED_FIELDS[0]] = { $gt: 25 }, _b) }] }, true);
12893
12896
  run_conditional_form_test({ $and: [{ condition: (_c = {}, _c[utilities_1.FORM_LOGIC_CALCULATED_FIELDS[0]] = { $lt: 25 }, _c) }] }, false);
12897
+ // A $JS(...) condition value was previously compiled and executed with new Function().
12898
+ // These must evaluate to false (parseInt -> NaN -> no match), and must never be executed.
12899
+ // The values are typed `number` on BasicFilter but are strings in stored data, hence the casts.
12900
+ delete globalThis.__F0200;
12901
+ run_conditional_form_test({ $and: [{ condition: { '3': { $gt: '$JS(return 0)' } } }] }, false, '$gt $JS not evaluated');
12902
+ run_conditional_form_test({ $and: [{ condition: { '3': { $lt: '$JS(return 99999)' } } }] }, false, '$lt $JS not evaluated');
12903
+ run_conditional_form_test({ $and: [{ condition: { '3': { $gt: '$JS(globalThis.__F0200 = 1; return 0)' } } }] }, false, '$JS side effect not evaluated');
12904
+ (0, testing_1.assert)(globalThis.__F0200 === undefined, 'a $JS(...) condition value was executed', '$JS payload never executed');
12894
12905
  return [2 /*return*/];
12895
12906
  });
12896
12907
  }); };
@@ -17482,8 +17493,11 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
17482
17493
  // process.exit, which would otherwise strand the other suite's tenants.
17483
17494
  return [4 /*yield*/, (0, setup_isolated_1.run_isolated_in_parallel)([
17484
17495
  { name: 'Organization signup', run: organization_signup_test_1.organization_signup_checks },
17485
- { name: 'F-0196 add_to_journey foreign enduserId', run: F_0196_add_to_journey_foreign_enduserid_test_1.add_to_journey_foreign_enduserid_checks },
17496
+ { name: 'add_to_journey foreign enduserId', run: add_to_journey_foreign_enduserid_test_1.add_to_journey_foreign_enduserid_checks },
17486
17497
  { name: 'Tickets bulk assign from queue', run: tickets_bulk_assign_from_queue_test_1.tickets_bulk_assign_from_queue_checks },
17498
+ { name: 'Vital auto-review on create', run: enduser_observations_auto_review_test_1.enduser_observations_auto_review_checks },
17499
+ { name: '$JS in stored conditional logic', run: form_logic_js_execution_test_1.form_logic_js_execution_checks },
17500
+ { name: 'Shared file link session confinement', run: file_link_session_confinement_test_1.file_link_session_confinement_checks },
17487
17501
  ])];
17488
17502
  case 23:
17489
17503
  // Isolated, tenant-provisioned suites run first and CONCURRENTLY: each provisions its own
@@ -17494,13 +17508,13 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
17494
17508
  return [4 /*yield*/, (0, embeddables_auth_token_test_1.embeddables_auth_token_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17495
17509
  case 24:
17496
17510
  _l.sent();
17497
- return [4 /*yield*/, (0, F_0025_proxy_image_unauth_ssrf_test_1.proxy_image_ssrf_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17511
+ return [4 /*yield*/, (0, proxy_image_unauth_ssrf_test_1.proxy_image_ssrf_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17498
17512
  case 25:
17499
17513
  _l.sent();
17500
- return [4 /*yield*/, (0, F_0015_webhook_outbound_ssrf_test_1.webhook_outbound_ssrf_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17514
+ return [4 /*yield*/, (0, webhook_outbound_ssrf_test_1.webhook_outbound_ssrf_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17501
17515
  case 26:
17502
17516
  _l.sent();
17503
- return [4 /*yield*/, (0, F_0166_allowed_paths_wildcard_bypass_test_1.allowed_paths_confinement_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17517
+ return [4 /*yield*/, (0, allowed_paths_confinement_test_1.allowed_paths_confinement_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17504
17518
  case 27:
17505
17519
  _l.sent();
17506
17520
  return [4 /*yield*/, (0, phone_calls_conference_hold_test_1.phone_calls_conference_hold_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
@@ -17539,37 +17553,37 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
17539
17553
  return [4 /*yield*/, (0, mdi_case_offerings_test_1.mdi_case_offerings_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17540
17554
  case 39:
17541
17555
  _l.sent();
17542
- return [4 /*yield*/, (0, F_0106_F_0110_enduser_write_restrictions_test_1.enduser_write_restrictions_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17556
+ return [4 /*yield*/, (0, enduser_write_restrictions_test_1.enduser_write_restrictions_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17543
17557
  case 40:
17544
17558
  _l.sent();
17545
17559
  return [4 /*yield*/, (0, enduser_ai_summary_trust_gate_test_1.enduser_ai_summary_trust_gate_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17546
17560
  case 41:
17547
17561
  _l.sent();
17548
- return [4 /*yield*/, (0, F_0116_F_0119_enduser_cross_create_test_1.enduser_cross_create_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17562
+ return [4 /*yield*/, (0, enduser_cross_create_test_1.enduser_cross_create_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17549
17563
  case 42:
17550
17564
  _l.sent();
17551
- return [4 /*yield*/, (0, F_0179_booking_info_idor_token_mint_test_1.booking_info_idor_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17565
+ return [4 /*yield*/, (0, booking_info_idor_token_mint_test_1.booking_info_idor_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17552
17566
  case 43:
17553
17567
  _l.sent();
17554
- return [4 /*yield*/, (0, F_0192_automated_actions_process_gate_test_1.automated_actions_process_gate_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17568
+ return [4 /*yield*/, (0, automated_actions_process_gate_test_1.automated_actions_process_gate_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17555
17569
  case 44:
17556
17570
  _l.sent();
17557
- return [4 /*yield*/, (0, F_0191_schema_adminonly_enforcement_test_1.schema_adminonly_enforcement_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17571
+ return [4 /*yield*/, (0, schema_adminonly_enforcement_test_1.schema_adminonly_enforcement_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17558
17572
  case 45:
17559
17573
  _l.sent();
17560
- return [4 /*yield*/, (0, F_0185_startlinktoken_enduser_staff_escalation_test_1.startlinktoken_escalation_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17574
+ return [4 /*yield*/, (0, startlinktoken_enduser_staff_escalation_test_1.startlinktoken_escalation_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17561
17575
  case 46:
17562
17576
  _l.sent();
17563
- return [4 /*yield*/, (0, F_0145_globalunique_leak_test_1.globalunique_leak_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17577
+ return [4 /*yield*/, (0, globalunique_conflict_redaction_test_1.globalunique_leak_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17564
17578
  case 47:
17565
17579
  _l.sent();
17566
- return [4 /*yield*/, (0, F_0151_load_inbox_redaction_test_1.load_inbox_redaction_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17580
+ return [4 /*yield*/, (0, load_inbox_redaction_test_1.load_inbox_redaction_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17567
17581
  case 48:
17568
17582
  _l.sent();
17569
17583
  return [4 /*yield*/, (0, suggested_reply_redaction_test_1.suggested_reply_redaction_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17570
17584
  case 49:
17571
17585
  _l.sent();
17572
- return [4 /*yield*/, (0, F_0155_webhook_timeout_test_1.webhook_timeout_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17586
+ return [4 /*yield*/, (0, webhook_timeout_test_1.webhook_timeout_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17573
17587
  case 50:
17574
17588
  _l.sent();
17575
17589
  return [4 /*yield*/, (0, public_endpoint_auth_field_lock_test_1.public_endpoint_auth_field_lock_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
@@ -17581,10 +17595,10 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
17581
17595
  return [4 /*yield*/, (0, user_portal_settings_test_1.user_portal_settings_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17582
17596
  case 53:
17583
17597
  _l.sent();
17584
- return [4 /*yield*/, (0, F_0007_invite_user_enumeration_test_1.invite_user_enumeration_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17598
+ return [4 /*yield*/, (0, invite_user_enumeration_test_1.invite_user_enumeration_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17585
17599
  case 54:
17586
17600
  _l.sent();
17587
- return [4 /*yield*/, (0, F_0008_handle_incoming_communication_cross_tenant_test_1.handle_incoming_communication_cross_tenant_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17601
+ return [4 /*yield*/, (0, handle_incoming_communication_cross_tenant_test_1.handle_incoming_communication_cross_tenant_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17588
17602
  case 55:
17589
17603
  _l.sent();
17590
17604
  return [4 /*yield*/, (0, calendar_event_webhook_template_test_1.calendar_event_webhook_template_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
@@ -17602,28 +17616,28 @@ var ip_address_form_tests = function () { return __awaiter(void 0, void 0, void
17602
17616
  return [4 /*yield*/, (0, enduser_login_rate_limits_test_1.enduser_login_rate_limits_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17603
17617
  case 60:
17604
17618
  _l.sent();
17605
- return [4 /*yield*/, (0, F_0001_data_sync_redaction_bypass_test_1.data_sync_redaction_bypass_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17619
+ return [4 /*yield*/, (0, data_sync_redaction_bypass_test_1.data_sync_redaction_bypass_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17606
17620
  case 61:
17607
17621
  _l.sent();
17608
- return [4 /*yield*/, (0, F_0005_ai_conversations_rbac_test_1.ai_conversations_rbac_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17622
+ return [4 /*yield*/, (0, ai_conversations_rbac_test_1.ai_conversations_rbac_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17609
17623
  case 62:
17610
17624
  _l.sent();
17611
- return [4 /*yield*/, (0, F_0006_develop_health_benefit_verification_rbac_test_1.develop_health_benefit_verification_rbac_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17625
+ return [4 /*yield*/, (0, develop_health_benefit_verification_rbac_test_1.develop_health_benefit_verification_rbac_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17612
17626
  case 63:
17613
17627
  _l.sent();
17614
- return [4 /*yield*/, (0, F_0053_cascade_role_rename_cross_tenant_test_1.cascade_role_rename_cross_tenant_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17628
+ return [4 /*yield*/, (0, cascade_role_rename_cross_tenant_test_1.cascade_role_rename_cross_tenant_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17615
17629
  case 64:
17616
17630
  _l.sent();
17617
- return [4 /*yield*/, (0, F_0076_self_admin_role_assignment_test_1.self_admin_role_assignment_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17631
+ return [4 /*yield*/, (0, self_admin_role_assignment_test_1.self_admin_role_assignment_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];
17618
17632
  case 65:
17619
17633
  _l.sent();
17620
- return [4 /*yield*/, (0, F_0013_sanitize_user_html_test_1.sanitize_user_html_xss_tests)()];
17634
+ return [4 /*yield*/, (0, sanitize_user_html_test_1.sanitize_user_html_xss_tests)()];
17621
17635
  case 66:
17622
17636
  _l.sent();
17623
- return [4 /*yield*/, (0, F_0013_sanitize_user_html_with_iframes_test_1.sanitize_user_html_with_iframes_tests)()];
17637
+ return [4 /*yield*/, (0, sanitize_user_html_with_iframes_test_1.sanitize_user_html_with_iframes_tests)()];
17624
17638
  case 67:
17625
17639
  _l.sent();
17626
- return [4 /*yield*/, (0, F_0016_prototype_pollution_test_1.prototype_pollution_tests)()];
17640
+ return [4 /*yield*/, (0, prototype_pollution_test_1.prototype_pollution_tests)()];
17627
17641
  case 68:
17628
17642
  _l.sent();
17629
17643
  return [4 /*yield*/, (0, account_switcher_test_1.account_switcher_tests)({ sdk: sdk, sdkNonAdmin: sdkNonAdmin })];