@tellescope/sdk 2.0.0-beta.1 → 2.0.0-beta.2

package/lib/cjs/tests/api_tests/stripe_checkout_items.test.js

@@ -0,0 +1,219 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ISOLATED_SUITE = exports.stripe_checkout_items_tests = exports.stripe_checkout_items_checks = void 0;
+require('source-map-support').install();
+var setup_isolated_1 = require("../setup_isolated");
+var setup_1 = require("../setup");
+var sdk_1 = require("../../sdk");
+var host = process.env.API_URL || 'http://localhost:8080';
+var RAND = function () { return Math.random().toString(36).slice(2, 10); };
+var ENDUSER_RAW_IDS_MESSAGE = "stripePriceId and subscriptionPriceId are not supported for enduser sessions";
+var QUANTITY_MESSAGE = "quantity must be a whole number of at least 1";
+var EXACTLY_ONE_ID_MESSAGE = "Each items entry must specify exactly one of productId, stripePriceId, or subscriptionPriceId";
+// what the handler throws once a request is past every items guard and no Stripe account is
+// configured - the marker for "this cart was accepted, it only ran out of Stripe"
+var NO_STRIPE_MESSAGE = "Stripe Connection not found";
+/**
+ * The guards on the `items` parameter of products/prepare-stripe-checkout that run BEFORE any Stripe
+ * integration is resolved, so they are reachable without a Stripe account: the enduser rejection of
+ * raw Stripe price ids, the productIds/items exclusivity, the per-entry shape rules and the quantity
+ * validator.
+ *
+ * The quantity guards themselves (the cap of 99, the two "greater than 1" rejections) sit on the
+ * Stripe Custom branch and are pinned instead by the unit suite in
+ * packages/private/api/api/integrations/payments/stripe_line_items.test.ts, which needs no database
+ * and no Stripe account. Anything that creates or inspects a real Checkout session is manual QA.
+ */
+var stripe_checkout_items_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var checks, record, tenant, sdk_2, businessId, product, enduser, enduserSDK_1, errorFor, enduserRawPrice, enduserRawSubscription, enduserProduct, userRawPrice, both, neither, noId, twoIds, unknownId, unknown, _i, _a, quantity, message, productIdsOnly, e_1;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                checks = [];
+                record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
+                _b.label = 1;
+            case 1:
+                _b.trys.push([1, , 20, 25]);
+                return [4 /*yield*/, (0, setup_isolated_1.setup_isolated_tenant)({
+                        name: "stripe items ".concat(RAND()),
+                        users: [{ isAdmin: true }],
+                        apiKeys: 0,
+                    })];
+            case 2:
+                tenant = _b.sent();
+                sdk_2 = tenant.sdk, businessId = tenant.businessId;
+                return [4 /*yield*/, sdk_2.api.products.createOne({
+                        title: "Checkout Item Product ".concat(RAND()),
+                        cost: { amount: 500, currency: 'USD' },
+                        processor: 'Stripe',
+                    })];
+            case 3:
+                product = _b.sent();
+                return [4 /*yield*/, sdk_2.api.endusers.createOne({ email: "items_".concat(RAND(), "@test.tellescope.com") })];
+            case 4:
+                enduser = _b.sent();
+                enduserSDK_1 = new sdk_1.EnduserSession({ host: host, businessId: businessId });
+                return [4 /*yield*/, (0, setup_1.authenticate_enduser_via_token)(sdk_2, enduserSDK_1, { id: enduser.id })
+                    // returns the error message for a rejected request, or '' when the request succeeded
+                ];
+            case 5:
+                _b.sent();
+                errorFor = function (session, args) { return __awaiter(void 0, void 0, void 0, function () {
+                    var err_1;
+                    var _a;
+                    return __generator(this, function (_b) {
+                        switch (_b.label) {
+                            case 0:
+                                _b.trys.push([0, 2, , 3]);
+                                return [4 /*yield*/, session.api.products.prepare_stripe_checkout(args)];
+                            case 1:
+                                _b.sent();
+                                return [2 /*return*/, ''];
+                            case 2:
+                                err_1 = _b.sent();
+                                return [2 /*return*/, typeof err_1 === 'string' ? err_1 : ((_a = err_1 === null || err_1 === void 0 ? void 0 : err_1.message) !== null && _a !== void 0 ? _a : JSON.stringify(err_1))];
+                            case 3: return [2 /*return*/];
+                        }
+                    });
+                }); };
+                return [4 /*yield*/, errorFor(enduserSDK_1, { items: [{ stripePriceId: 'price_raw', quantity: 1 }] })];
+            case 6:
+                enduserRawPrice = _b.sent();
+                record('an enduser naming a raw stripePriceId is rejected', enduserRawPrice === ENDUSER_RAW_IDS_MESSAGE, "expected \"".concat(ENDUSER_RAW_IDS_MESSAGE, "\", got \"").concat(enduserRawPrice, "\""));
+                return [4 /*yield*/, errorFor(enduserSDK_1, { items: [{ subscriptionPriceId: 'price_sub', quantity: 1 }] })];
+            case 7:
+                enduserRawSubscription = _b.sent();
+                record('an enduser naming a raw subscriptionPriceId is rejected', enduserRawSubscription === ENDUSER_RAW_IDS_MESSAGE, "expected \"".concat(ENDUSER_RAW_IDS_MESSAGE, "\", got \"").concat(enduserRawSubscription, "\""));
+                return [4 /*yield*/, errorFor(enduserSDK_1, { items: [{ productId: product.id, quantity: 2 }] })];
+            case 8:
+                enduserProduct = _b.sent();
+                record('an enduser naming a Tellescope productId is allowed through the guard', enduserProduct === NO_STRIPE_MESSAGE, "expected \"".concat(NO_STRIPE_MESSAGE, "\", got \"").concat(enduserProduct, "\""));
+                return [4 /*yield*/, errorFor(sdk_2, { items: [{ stripePriceId: 'price_raw', quantity: 1 }] })];
+            case 9:
+                userRawPrice = _b.sent();
+                record('a user session naming a raw stripePriceId is allowed through the guard', userRawPrice === NO_STRIPE_MESSAGE, "expected \"".concat(NO_STRIPE_MESSAGE, "\", got \"").concat(userRawPrice, "\""));
+                return [4 /*yield*/, errorFor(sdk_2, { productIds: [product.id], items: [{ productId: product.id, quantity: 1 }] })];
+            case 10:
+                both = _b.sent();
+                record('passing both productIds and items is rejected', both === "Pass either productIds or items, not both", "expected the \"not both\" message, got \"".concat(both, "\""));
+                return [4 /*yield*/, errorFor(sdk_2, {})];
+            case 11:
+                neither = _b.sent();
+                record('passing neither productIds nor items is rejected', neither === "One of productIds or items is required", "expected the \"one of\" message, got \"".concat(neither, "\""));
+                return [4 /*yield*/, errorFor(sdk_2, { items: [{ quantity: 1 }] })];
+            case 12:
+                noId = _b.sent();
+                record('an items entry naming no id is rejected', noId === EXACTLY_ONE_ID_MESSAGE, "expected the \"exactly one\" message, got \"".concat(noId, "\""));
+                return [4 /*yield*/, errorFor(sdk_2, { items: [{ productId: product.id, stripePriceId: 'price_raw', quantity: 1 }] })];
+            case 13:
+                twoIds = _b.sent();
+                record('an items entry naming two ids is rejected', twoIds === EXACTLY_ONE_ID_MESSAGE, "expected the \"exactly one\" message, got \"".concat(twoIds, "\""));
+                unknownId = '60398b0231a295e64f084fd9';
+                return [4 /*yield*/, errorFor(sdk_2, { items: [{ productId: unknownId, quantity: 1 }] })];
+            case 14:
+                unknown = _b.sent();
+                record('an items entry naming an unknown productId is rejected, naming the id', unknown.includes(unknownId) && unknown.includes('No product found'), "expected a \"No product found for productId ".concat(unknownId, "\", got \"").concat(unknown, "\""));
+                _i = 0, _a = [0, -1, 1.5];
+                _b.label = 15;
+            case 15:
+                if (!(_i < _a.length)) return [3 /*break*/, 18];
+                quantity = _a[_i];
+                return [4 /*yield*/, errorFor(sdk_2, { items: [{ productId: product.id, quantity: quantity }] })];
+            case 16:
+                message = _b.sent();
+                record("quantity ".concat(quantity, " is rejected"), message.includes(QUANTITY_MESSAGE), "expected a message containing \"".concat(QUANTITY_MESSAGE, "\", got \"").concat(message, "\""));
+                _b.label = 17;
+            case 17:
+                _i++;
+                return [3 /*break*/, 15];
+            case 18: return [4 /*yield*/, errorFor(sdk_2, { productIds: [product.id] })];
+            case 19:
+                productIdsOnly = _b.sent();
+                record('a productIds-only request is unaffected', productIdsOnly === NO_STRIPE_MESSAGE, "expected \"".concat(NO_STRIPE_MESSAGE, "\", got \"").concat(productIdsOnly, "\""));
+                return [3 /*break*/, 25];
+            case 20:
+                if (!tenant) return [3 /*break*/, 24];
+                _b.label = 21;
+            case 21:
+                _b.trys.push([21, 23, , 24]);
+                return [4 /*yield*/, tenant.teardown()];
+            case 22:
+                _b.sent();
+                return [3 /*break*/, 24];
+            case 23:
+                e_1 = _b.sent();
+                console.error('teardown failed', e_1);
+                return [3 /*break*/, 24];
+            case 24: return [7 /*endfinally*/];
+            case 25: return [2 /*return*/, checks];
+        }
+    });
+}); };
+exports.stripe_checkout_items_checks = stripe_checkout_items_checks;
+var stripe_checkout_items_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _a = setup_isolated_1.assert_checks;
+                _b = ['prepare_stripe_checkout items guards'];
+                return [4 /*yield*/, (0, exports.stripe_checkout_items_checks)()];
+            case 1:
+                _a.apply(void 0, _b.concat([_c.sent()]));
+                return [2 /*return*/];
+        }
+    });
+}); };
+exports.stripe_checkout_items_tests = stripe_checkout_items_tests;
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+exports.ISOLATED_SUITE = { name: 'prepare_stripe_checkout items guards', run: exports.stripe_checkout_items_checks };
+// Allow running this test file independently
+if (require.main === module) {
+    console.log("\uD83C\uDF10 Using API URL: ".concat(host));
+    (0, exports.stripe_checkout_items_tests)()
+        .then(function () {
+        console.log("✅ stripe_checkout_items test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ stripe_checkout_items test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=stripe_checkout_items.test.js.map

package/lib/cjs/tests/api_tests/stripe_checkout_items.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe_checkout_items.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/stripe_checkout_items.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,oDAK0B;AAC1B,kCAAyD;AACzD,iCAA0C;AAE1C,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D,IAAM,uBAAuB,GAAG,8EAA8E,CAAA;AAC9G,IAAM,gBAAgB,GAAG,+CAA+C,CAAA;AACxE,IAAM,sBAAsB,GAAG,+FAA+F,CAAA;AAC9H,4FAA4F;AAC5F,kFAAkF;AAClF,IAAM,iBAAiB,GAAG,6BAA6B,CAAA;AAEvD;;;;;;;;;;GAUG;AACI,IAAM,4BAA4B,GAAG;;;;;gBACpC,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;;;;gBAK1F,qBAAM,IAAA,sCAAqB,EAAC;wBACnC,IAAI,EAAE,uBAAgB,IAAI,EAAE,CAAE;wBAC9B,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;wBAC1B,OAAO,EAAE,CAAC;qBACX,CAAC,EAAA;;gBAJF,MAAM,GAAG,SAIP,CAAA;gBACM,QAAoB,MAAM,IAAvB,EAAE,UAAU,GAAK,MAAM,WAAX,CAAW;gBAElB,qBAAM,KAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;wBAC/C,KAAK,EAAE,gCAAyB,IAAI,EAAE,CAAE;wBACxC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;wBACtC,SAAS,EAAE,QAAQ;qBACpB,CAAC,EAAA;;gBAJI,OAAO,GAAG,SAId;gBAEc,qBAAM,KAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAS,IAAI,EAAE,yBAAsB,EAAE,CAAC,EAAA;;gBAA5F,OAAO,GAAG,SAAkF;gBAC5F,eAAa,IAAI,oBAAc,CAAC,EAAE,IAAI,MAAA,EAAE,UAAU,YAAA,EAAE,CAAC,CAAA;gBAC3D,qBAAM,IAAA,sCAA8B,EAAC,KAAG,EAAE,YAAU,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;oBAEzE,qFAAqF;kBAFZ;;gBAAzE,SAAyE,CAAA;gBAGnE,QAAQ,GAAG,UAAO,OAAuC,EAAE,IAAS;;;;;;;gCAEtE,qBAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,uBAA+B,CAAC,IAAI,CAAC,EAAA;;gCAAjE,SAAiE,CAAA;gCACjE,sBAAO,EAAE,EAAA;;;gCAET,sBAAO,OAAO,KAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAG,CAAC,CAAC,CAAC,CAAC,MAAA,KAAG,aAAH,KAAG,uBAAH,KAAG,CAAE,OAAO,mCAAI,IAAI,CAAC,SAAS,CAAC,KAAG,CAAC,CAAC,EAAA;;;;qBAE/E,CAAA;gBAGuB,qBAAM,QAAQ,CAAC,YAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAAtG,eAAe,GAAG,SAAoF;gBAC5G,MAAM,CACJ,mDAAmD,EACnD,eAAe,KAAK,uBAAuB,EAC3C,qBAAa,uBAAuB,uBAAW,eAAe,OAAG,CAClE,CAAA;gBAE8B,qBAAM,QAAQ,CAAC,YAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,mBAAmB,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAAnH,sBAAsB,GAAG,SAA0F;gBACzH,MAAM,CACJ,yDAAyD,EACzD,sBAAsB,KAAK,uBAAuB,EAClD,qBAAa,uBAAuB,uBAAW,sBAAsB,OAAG,CACzE,CAAA;gBAIsB,qBAAM,QAAQ,CAAC,YAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAAhG,cAAc,GAAG,SAA+E;gBACtG,MAAM,CACJ,uEAAuE,EACvE,cAAc,KAAK,iBAAiB,EACpC,qBAAa,iBAAiB,uBAAW,cAAc,OAAG,CAC3D,CAAA;gBAGoB,qBAAM,QAAQ,CAAC,KAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAA5F,YAAY,GAAG,SAA6E;gBAClG,MAAM,CACJ,wEAAwE,EACxE,YAAY,KAAK,iBAAiB,EAClC,qBAAa,iBAAiB,uBAAW,YAAY,OAAG,CACzD,CAAA;gBAGY,qBAAM,QAAQ,CAAC,KAAG,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAAzG,IAAI,GAAG,SAAkG;gBAC/G,MAAM,CACJ,+CAA+C,EAC/C,IAAI,KAAK,2CAA2C,EACpD,mDAAyC,IAAI,OAAG,CACjD,CAAA;gBAEe,qBAAM,QAAQ,CAAC,KAAG,EAAE,EAAE,CAAC,EAAA;;gBAAjC,OAAO,GAAG,SAAuB;gBACvC,MAAM,CACJ,kDAAkD,EAClD,OAAO,KAAK,wCAAwC,EACpD,iDAAuC,OAAO,OAAG,CAClD,CAAA;gBAGY,qBAAM,QAAQ,CAAC,KAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAAxD,IAAI,GAAG,SAAiD;gBAC9D,MAAM,CACJ,yCAAyC,EACzC,IAAI,KAAK,sBAAsB,EAC/B,sDAA4C,IAAI,OAAG,CACpD,CAAA;gBAEc,qBAAM,QAAQ,CAAC,KAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAA7G,MAAM,GAAG,SAAoG;gBACnH,MAAM,CACJ,2CAA2C,EAC3C,MAAM,KAAK,sBAAsB,EACjC,sDAA4C,MAAM,OAAG,CACtD,CAAA;gBAGK,SAAS,GAAG,0BAA0B,CAAA;gBAC5B,qBAAM,QAAQ,CAAC,KAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAAjF,OAAO,GAAG,SAAuE;gBACvF,MAAM,CACJ,uEAAuE,EACvE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EACnE,sDAA8C,SAAS,uBAAW,OAAO,OAAG,CAC7E,CAAA;sBAMkC,EAAZ,MAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;;;qBAAZ,CAAA,cAAY,CAAA;gBAAxB,QAAQ;gBACD,qBAAM,QAAQ,CAAC,KAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,UAAA,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAA/E,OAAO,GAAG,SAAqE;gBACrF,MAAM,CACJ,mBAAY,QAAQ,iBAAc,EAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAClC,0CAAkC,gBAAgB,uBAAW,OAAO,OAAG,CACxE,CAAA;;;gBANoB,IAAY,CAAA;;qBAUZ,qBAAM,QAAQ,CAAC,KAAG,EAAE,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAAlE,cAAc,GAAG,SAAiD;gBACxE,MAAM,CACJ,yCAAyC,EACzC,cAAc,KAAK,iBAAiB,EACpC,qBAAa,iBAAiB,uBAAW,cAAc,OAAG,CAC3D,CAAA;;;qBAGG,MAAM,EAAN,yBAAM;;;;gBAAU,qBAAM,MAAM,CAAC,QAAQ,EAAE,EAAA;;gBAAvB,SAAuB,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;qBAG/F,sBAAO,MAAM,EAAA;;;KACd,CAAA;AAnIY,QAAA,4BAA4B,gCAmIxC;AAEM,IAAM,2BAA2B,GAAG;;;;;gBACzC,KAAA,8BAAa,CAAA;sBAAC,sCAAsC;gBAAE,qBAAM,IAAA,oCAA4B,GAAE,EAAA;;gBAA1F,4BAAsD,SAAoC,GAAC,CAAA;;;;KAC5F,CAAA;AAFY,QAAA,2BAA2B,+BAEvC;AAED,oGAAoG;AACvF,QAAA,cAAc,GAAkB,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,oCAA4B,EAAE,CAAA;AAEhI,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAA,mCAA2B,GAAE;SAC1B,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAA;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAA;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/cjs/tests/api_tests/stripe_multiple_customer_ids.test.d.ts

@@ -0,0 +1,5 @@
+import { Check } from "../setup_isolated";
+export declare const stripe_multiple_customer_ids_checks: () => Promise<Check[]>;
+/** Asserting wrapper, for standalone runs and for sequential use in the suite. */
+export declare const stripe_multiple_customer_ids_tests: () => Promise<void>;
+//# sourceMappingURL=stripe_multiple_customer_ids.test.d.ts.map

package/lib/cjs/tests/api_tests/stripe_multiple_customer_ids.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe_multiple_customer_ids.test.d.ts","sourceRoot":"","sources":["../../../../src/tests/api_tests/stripe_multiple_customer_ids.test.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,EAEN,MAAM,mBAAmB,CAAA;AAiD1B,eAAO,MAAM,mCAAmC,QAAa,QAAQ,KAAK,EAAE,CAuR3E,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,kCAAkC,qBAE9C,CAAA"}

package/lib/cjs/tests/api_tests/stripe_multiple_customer_ids.test.js

@@ -0,0 +1,396 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripe_multiple_customer_ids_tests = exports.stripe_multiple_customer_ids_checks = void 0;
+require('source-map-support').install();
+var enduser_1 = require("../../enduser");
+var setup_isolated_1 = require("../setup_isolated");
+var stripe_webhook_helpers_1 = require("../stripe_webhook_helpers");
+var crypto_1 = __importDefault(require("crypto"));
+var host = process.env.API_URL || 'http://localhost:8080';
+var RAND = function () { return Math.random().toString(36).slice(2, 10); };
+var ENDUSER_PASSWORD = 'StripeMulti!Password1';
+var KEY_A = 'pk_test_stripe_account_a';
+var KEY_B = 'pk_test_stripe_account_b';
+var poll_for = function (get, done, attempts) {
+    if (attempts === void 0) { attempts = 20; }
+    return __awaiter(void 0, void 0, void 0, function () {
+        var value, i;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, get()];
+                case 1:
+                    value = _a.sent();
+                    i = 0;
+                    _a.label = 2;
+                case 2:
+                    if (!(i < attempts && !done(value))) return [3 /*break*/, 6];
+                    return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 250); })];
+                case 3:
+                    _a.sent();
+                    return [4 /*yield*/, get()];
+                case 4:
+                    value = _a.sent();
+                    _a.label = 5;
+                case 5:
+                    i++;
+                    return [3 /*break*/, 2];
+                case 6: return [2 /*return*/, value];
+            }
+        });
+    });
+};
+var id_for = function (entries, stripeKey) {
+    var _a;
+    return ((_a = (entries !== null && entries !== void 0 ? entries : []).find(function (e) { return e.stripeKey === stripeKey; })) === null || _a === void 0 ? void 0 : _a.customerId);
+};
+var stripe_multiple_customer_ids_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var checks, record, tenant, sdk_1, businessId, enduserEmail, enduser_2, entries_after, afterA, afterB, afterCorrection, afterDirect, destination, source_1, sourceEntries, merged, sourceOnly, destinationOnly, _a, _b, mergedUnion, stripe_integration, accountA, accountB, webhookEnduser_1, purchases_for, secondAccountWebhook, secondAccountPurchases, wrongAccountWebhook, afterWrongAccount, duplicateCustomerWebhook, purchasesAfterDuplicate, afterDuplicate, enduserSDK, selfRead, selfWrite, afterSelfWrite, e_1;
+    var _c;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0:
+                checks = [];
+                record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
+                _d.label = 1;
+            case 1:
+                _d.trys.push([1, , 43, 48]);
+                return [4 /*yield*/, (0, setup_isolated_1.setup_isolated_tenant)({
+                        name: "StripeMultiCustomer ".concat(RAND()),
+                        users: [{ isAdmin: true }],
+                        apiKeys: 0,
+                    })];
+            case 2:
+                tenant = _d.sent();
+                sdk_1 = tenant.sdk, businessId = tenant.businessId;
+                enduserEmail = "stripe-multi-".concat(RAND(), "@example.com");
+                return [4 /*yield*/, sdk_1.api.endusers.createOne({ email: enduserEmail, fname: 'Stripe', lname: 'Multi' })];
+            case 3:
+                enduser_2 = _d.sent();
+                entries_after = function (expect) { return poll_for(function () { return sdk_1.api.endusers.getOne(enduser_2.id).then(function (e) { var _a; return ((_a = e.stripeCustomerIds) !== null && _a !== void 0 ? _a : []); }); }, expect); };
+                /* ===== A: a pair write is mirrored into the per-account list ===== */
+                return [4 /*yield*/, sdk_1.api.endusers.updateOne(enduser_2.id, { stripeKey: KEY_A, stripeCustomerId: 'cus_account_a' })];
+            case 4:
+                /* ===== A: a pair write is mirrored into the per-account list ===== */
+                _d.sent();
+                return [4 /*yield*/, entries_after(function (e) { return id_for(e, KEY_A) === 'cus_account_a'; })];
+            case 5:
+                afterA = _d.sent();
+                record('A1: a staff write of the pair is mirrored into stripeCustomerIds', id_for(afterA, KEY_A) === 'cus_account_a' && afterA.length === 1, "entries=".concat(JSON.stringify(afterA), " (want one entry for ").concat(KEY_A, " -> cus_account_a)"));
+                /* ===== A/B: a second account is added, and the pair does not move ===== */
+                return [4 /*yield*/, sdk_1.api.endusers.updateOne(enduser_2.id, { stripeKey: KEY_B, stripeCustomerId: 'cus_account_b' })];
+            case 6:
+                /* ===== A/B: a second account is added, and the pair does not move ===== */
+                _d.sent();
+                return [4 /*yield*/, entries_after(function (e) { return !!id_for(e, KEY_B); })];
+            case 7:
+                afterB = _d.sent();
+                record('A2: linking a second Stripe account adds an entry and keeps the first', id_for(afterB, KEY_A) === 'cus_account_a' && id_for(afterB, KEY_B) === 'cus_account_b' && afterB.length === 2, "entries=".concat(JSON.stringify(afterB), " (want both accounts; losing ").concat(KEY_A, " is the clobber this feature removes)"));
+                /* ===== C: the same account can be corrected in place ===== */
+                return [4 /*yield*/, sdk_1.api.endusers.updateOne(enduser_2.id, { stripeKey: KEY_A, stripeCustomerId: 'cus_account_a_corrected' })];
+            case 8:
+                /* ===== C: the same account can be corrected in place ===== */
+                _d.sent();
+                return [4 /*yield*/, entries_after(function (e) { return id_for(e, KEY_A) === 'cus_account_a_corrected'; })];
+            case 9:
+                afterCorrection = _d.sent();
+                record('C1: re-saving an account replaces its entry rather than duplicating it', id_for(afterCorrection, KEY_A) === 'cus_account_a_corrected'
+                    && id_for(afterCorrection, KEY_B) === 'cus_account_b'
+                    && afterCorrection.length === 2, "entries=".concat(JSON.stringify(afterCorrection)));
+                // direct staff write of the list (manual correction / API clients)
+                return [4 /*yield*/, sdk_1.api.endusers.updateOne(enduser_2.id, { stripeCustomerIds: [{ stripeKey: KEY_A, customerId: 'cus_direct_a' }] }, { replaceObjectFields: true })];
+            case 10:
+                // direct staff write of the list (manual correction / API clients)
+                _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.getOne(enduser_2.id)];
+            case 11:
+                afterDirect = _d.sent();
+                record('C2: staff can write stripeCustomerIds directly', id_for(afterDirect.stripeCustomerIds, KEY_A) === 'cus_direct_a', "entries=".concat(JSON.stringify(afterDirect.stripeCustomerIds)));
+                return [4 /*yield*/, sdk_1.api.endusers.createOne({
+                        email: "stripe-multi-dest-".concat(RAND(), "@example.com"), fname: 'Stripe', lname: 'Destination',
+                    })];
+            case 12:
+                destination = _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.createOne({
+                        email: "stripe-multi-src-".concat(RAND(), "@example.com"), fname: 'Stripe', lname: 'Source',
+                    })];
+            case 13:
+                source_1 = _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.updateOne(destination.id, { stripeCustomerIds: [{ stripeKey: KEY_A, customerId: 'cus_destination_a' }, { stripeKey: KEY_B, customerId: 'cus_destination_b' }] }, { replaceObjectFields: true })];
+            case 14:
+                _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.updateOne(source_1.id, { stripeKey: KEY_B, stripeCustomerId: 'cus_source_b' })];
+            case 15:
+                _d.sent();
+                return [4 /*yield*/, poll_for(function () { return sdk_1.api.endusers.getOne(source_1.id).then(function (e) { var _a; return ((_a = e.stripeCustomerIds) !== null && _a !== void 0 ? _a : []); }); }, function (e) { return !!id_for(e, KEY_B); })];
+            case 16:
+                sourceEntries = _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.merge({ sourceEnduserId: source_1.id, destinationEnduserId: destination.id })];
+            case 17:
+                _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.getOne(destination.id)];
+            case 18:
+                merged = (_d.sent()).stripeCustomerIds;
+                record('D1: merge keeps the destination id for an account both patients were linked to', id_for(merged, KEY_B) === 'cus_destination_b' && id_for(merged, KEY_A) === 'cus_destination_a'
+                    && (merged !== null && merged !== void 0 ? merged : []).length === 2, "merged=".concat(JSON.stringify(merged), " source had ").concat(JSON.stringify(sourceEntries)));
+                return [4 /*yield*/, sdk_1.api.endusers.createOne({
+                        email: "stripe-multi-src2-".concat(RAND(), "@example.com"), fname: 'Stripe', lname: 'SourceOnly',
+                        stripeKey: KEY_B, stripeCustomerId: 'cus_source_only_b',
+                    })];
+            case 19:
+                sourceOnly = _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.createOne({
+                        email: "stripe-multi-dest2-".concat(RAND(), "@example.com"), fname: 'Stripe', lname: 'DestinationOnly',
+                        stripeKey: KEY_A, stripeCustomerId: 'cus_dest_only_a',
+                    })];
+            case 20:
+                destinationOnly = _d.sent();
+                _a = record;
+                _b = ['D2 setup: a patient created with the pair alone carries no per-account list'];
+                return [4 /*yield*/, sdk_1.api.endusers.getOne(sourceOnly.id)];
+            case 21:
+                _a.apply(void 0, _b.concat([!((_c = (_d.sent()).stripeCustomerIds) !== null && _c !== void 0 ? _c : []).length,
+                    'the legacy shape this merge has to cope with']));
+                return [4 /*yield*/, sdk_1.api.endusers.merge({ sourceEnduserId: sourceOnly.id, destinationEnduserId: destinationOnly.id })];
+            case 22:
+                _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.getOne(destinationOnly.id)];
+            case 23:
+                mergedUnion = (_d.sent()).stripeCustomerIds;
+                record('D3: merging two legacy-pair patients lists both accounts on the survivor', id_for(mergedUnion, KEY_A) === 'cus_dest_only_a' && id_for(mergedUnion, KEY_B) === 'cus_source_only_b', "merged=".concat(JSON.stringify(mergedUnion), " (the survivor must be chargeable on both accounts)"));
+                stripe_integration = function (sdkSession) { return __awaiter(void 0, void 0, void 0, function () {
+                    var stripePublicKey, webhooksSecret;
+                    return __generator(this, function (_a) {
+                        switch (_a.label) {
+                            case 0:
+                                stripePublicKey = "pk_test_multi_".concat(Date.now(), "_").concat(Math.floor(Math.random() * 1e6));
+                                webhooksSecret = "whsec_test_".concat(crypto_1.default.randomBytes(16).toString('hex'));
+                                return [4 /*yield*/, sdkSession.api.integrations.createOne({
+                                        title: 'Stripe',
+                                        environment: stripe_webhook_helpers_1.TEST_STRIPE_ENVIRONMENT,
+                                        authentication: {
+                                            type: 'apiKey',
+                                            info: {
+                                                access_token: 'sk_test_unused_by_this_path',
+                                                refresh_token: 'unused',
+                                                scope: '',
+                                                expiry_date: Date.now(),
+                                                token_type: 'Bearer',
+                                                external_id: stripePublicKey,
+                                            },
+                                        },
+                                        webhooksSecret: webhooksSecret,
+                                    })];
+                            case 1:
+                                _a.sent();
+                                return [2 /*return*/, { stripePublicKey: stripePublicKey, webhooksSecret: webhooksSecret }];
+                        }
+                    });
+                }); };
+                return [4 /*yield*/, stripe_integration(sdk_1)];
+            case 24:
+                accountA = _d.sent();
+                return [4 /*yield*/, stripe_integration(sdk_1)];
+            case 25:
+                accountB = _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.createOne({
+                        email: "stripe-multi-webhook-".concat(RAND(), "@example.com"), fname: 'Stripe', lname: 'Webhook',
+                    })
+                    // linked to account A by the pinned pair, and to account B only through the per-account list —
+                    // exactly the shape a patient ends up in after buying on a second Stripe account
+                ];
+            case 26:
+                webhookEnduser_1 = _d.sent();
+                // linked to account A by the pinned pair, and to account B only through the per-account list —
+                // exactly the shape a patient ends up in after buying on a second Stripe account
+                return [4 /*yield*/, sdk_1.api.endusers.updateOne(webhookEnduser_1.id, { stripeKey: accountA.stripePublicKey, stripeCustomerId: 'cus_webhook_a' })];
+            case 27:
+                // linked to account A by the pinned pair, and to account B only through the per-account list —
+                // exactly the shape a patient ends up in after buying on a second Stripe account
+                _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.updateOne(webhookEnduser_1.id, { stripeCustomerIds: [
+                            { stripeKey: accountA.stripePublicKey, customerId: 'cus_webhook_a' },
+                            { stripeKey: accountB.stripePublicKey, customerId: 'cus_webhook_b' },
+                        ] }, { replaceObjectFields: true })];
+            case 28:
+                _d.sent();
+                purchases_for = function () { return sdk_1.api.purchases.getSome({ filter: { enduserId: webhookEnduser_1.id } }); };
+                return [4 /*yield*/, (0, stripe_webhook_helpers_1.post_stripe_webhook)({
+                        stripePublicKey: accountB.stripePublicKey,
+                        secret: accountB.webhooksSecret,
+                        event: (0, stripe_webhook_helpers_1.invoice_paid_event)({ stripeCustomerId: 'cus_webhook_b' }),
+                    })];
+            case 29:
+                secondAccountWebhook = _d.sent();
+                return [4 /*yield*/, poll_for(purchases_for, function (p) { return p.length > 0; })];
+            case 30:
+                secondAccountPurchases = _d.sent();
+                record('F1: an invoice.paid from the second account is attributed to the patient linked to it', secondAccountWebhook.status === 200 && secondAccountPurchases.length === 1, "webhook=".concat(secondAccountWebhook.status, " purchases=").concat(secondAccountPurchases.length)
+                    + ' — 0 means the lookup only read the pinned pair, so the second account matches no patient');
+                return [4 /*yield*/, (0, stripe_webhook_helpers_1.post_stripe_webhook)({
+                        stripePublicKey: accountA.stripePublicKey,
+                        secret: accountA.webhooksSecret,
+                        event: (0, stripe_webhook_helpers_1.invoice_paid_event)({ stripeCustomerId: 'cus_webhook_b' }),
+                    })];
+            case 31:
+                wrongAccountWebhook = _d.sent();
+                return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 1500); })];
+            case 32:
+                _d.sent();
+                return [4 /*yield*/, purchases_for()];
+            case 33:
+                afterWrongAccount = _d.sent();
+                record('F2: an id belonging to another account does not resolve through this one', wrongAccountWebhook.status === 200 && afterWrongAccount.length === 1, "webhook=".concat(wrongAccountWebhook.status, " purchases=").concat(afterWrongAccount.length, " (want the 1 from F1)"));
+                return [4 /*yield*/, (0, stripe_webhook_helpers_1.post_stripe_webhook)({
+                        stripePublicKey: accountB.stripePublicKey,
+                        secret: accountB.webhooksSecret,
+                        event: {
+                            type: 'invoice.paid',
+                            data: {
+                                object: {
+                                    id: "in_test_dupe_".concat(Date.now()),
+                                    customer: 'cus_webhook_b_duplicate',
+                                    customer_email: webhookEnduser_1.email,
+                                    amount_paid: 1999,
+                                    lines: { object: 'list', data: [], has_more: false },
+                                    discount: null,
+                                    discounts: [],
+                                },
+                            },
+                        },
+                    })
+                    // the second purchase is what proves the handler REACHED the linkage write: it means the email
+                    // fallback matched this patient, so "the entry did not move" is a decision and not a no-op
+                ];
+            case 34:
+                duplicateCustomerWebhook = _d.sent();
+                return [4 /*yield*/, poll_for(purchases_for, function (p) { return p.length > 1; })];
+            case 35:
+                purchasesAfterDuplicate = _d.sent();
+                return [4 /*yield*/, poll_for(function () { return sdk_1.api.endusers.getOne(webhookEnduser_1.id).then(function (e) { var _a; return ((_a = e.stripeCustomerIds) !== null && _a !== void 0 ? _a : []); }); }, function () { return false; }, // always poll to the end, so a late write would be seen
+                    6)];
+            case 36:
+                afterDuplicate = _d.sent();
+                record('F3: a webhook for a different customer on an already-linked account does not repoint it', duplicateCustomerWebhook.status === 200
+                    && purchasesAfterDuplicate.length === 2
+                    && id_for(afterDuplicate, accountB.stripePublicKey) === 'cus_webhook_b', "webhook=".concat(duplicateCustomerWebhook.status, " purchases=").concat(purchasesAfterDuplicate.length, " (want 2,")
+                    + " so the email fallback matched and the linkage write was reached) entries=".concat(JSON.stringify(afterDuplicate)));
+                /* ===== E: never visible or writable from a patient session ===== */
+                return [4 /*yield*/, sdk_1.api.endusers.set_password({ id: enduser_2.id, password: ENDUSER_PASSWORD })];
+            case 37:
+                /* ===== E: never visible or writable from a patient session ===== */
+                _d.sent();
+                enduserSDK = new enduser_1.EnduserSession({ host: host, businessId: businessId });
+                return [4 /*yield*/, enduserSDK.authenticate(enduserEmail, ENDUSER_PASSWORD)];
+            case 38:
+                _d.sent();
+                return [4 /*yield*/, enduserSDK.api.endusers.getOne(enduser_2.id)];
+            case 39:
+                selfRead = _d.sent();
+                record('E1: a model read from a patient session is redacted', !selfRead.stripeCustomerIds && !selfRead.stripeCustomerId, "enduser read back stripeCustomerIds=".concat(JSON.stringify(selfRead.stripeCustomerIds))
+                    + " stripeCustomerId=".concat(JSON.stringify(selfRead.stripeCustomerId)));
+                // The login / refresh payloads return the enduser record itself, NOT a schema-redacted model
+                // read, so this is a separate exposure path — it is how the portal receives its own record, and
+                // how stripeCustomerId (which the portal's Manage Subscriptions button needs) reaches it.
+                record('E1b: the login payload the portal receives carries no per-account customer ids', !enduserSDK.userInfo.stripeCustomerIds, "login payload stripeCustomerIds=".concat(JSON.stringify(enduserSDK.userInfo.stripeCustomerIds))
+                    + " (stripeCustomerId=".concat(JSON.stringify(enduserSDK.userInfo.stripeCustomerId), " stays, the portal reads it)"));
+                return [4 /*yield*/, enduserSDK.refresh_session()];
+            case 40:
+                _d.sent();
+                record('E1c: the refresh_session payload carries no per-account customer ids', !enduserSDK.userInfo.stripeCustomerIds, "refreshed payload stripeCustomerIds=".concat(JSON.stringify(enduserSDK.userInfo.stripeCustomerIds)));
+                return [4 /*yield*/, enduserSDK.api.endusers.updateOne(enduser_2.id, { stripeCustomerIds: [{ stripeKey: KEY_A, customerId: 'cus_attacker' }] }).then(function () { return ({ resolved: true }); }).catch(function (e) { return ({ rejected: (e === null || e === void 0 ? void 0 : e.message) || String(e) }); })];
+            case 41:
+                selfWrite = _d.sent();
+                return [4 /*yield*/, sdk_1.api.endusers.getOne(enduser_2.id)];
+            case 42:
+                afterSelfWrite = _d.sent();
+                record('E2: a patient cannot write the per-account customer ids', selfWrite.rejected === 'stripeCustomerIds cannot be updated by endusers'
+                    && id_for(afterSelfWrite.stripeCustomerIds, KEY_A) === 'cus_direct_a', "result=".concat(JSON.stringify(selfWrite), " entries=").concat(JSON.stringify(afterSelfWrite.stripeCustomerIds)));
+                return [3 /*break*/, 48];
+            case 43:
+                if (!tenant) return [3 /*break*/, 47];
+                _d.label = 44;
+            case 44:
+                _d.trys.push([44, 46, , 47]);
+                return [4 /*yield*/, tenant.teardown()];
+            case 45:
+                _d.sent();
+                return [3 /*break*/, 47];
+            case 46:
+                e_1 = _d.sent();
+                console.error('teardown failed', e_1);
+                return [3 /*break*/, 47];
+            case 47: return [7 /*endfinally*/];
+            case 48: return [2 /*return*/, checks];
+        }
+    });
+}); };
+exports.stripe_multiple_customer_ids_checks = stripe_multiple_customer_ids_checks;
+/** Asserting wrapper, for standalone runs and for sequential use in the suite. */
+var stripe_multiple_customer_ids_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _a = setup_isolated_1.assert_checks;
+                _b = ['Stripe multiple customer ids'];
+                return [4 /*yield*/, (0, exports.stripe_multiple_customer_ids_checks)()];
+            case 1:
+                _a.apply(void 0, _b.concat([_c.sent()]));
+                return [2 /*return*/];
+        }
+    });
+}); };
+exports.stripe_multiple_customer_ids_tests = stripe_multiple_customer_ids_tests;
+// Allow running this test file independently
+if (require.main === module) {
+    console.log("\uD83C\uDF10 Using API URL: ".concat(host));
+    (0, exports.stripe_multiple_customer_ids_tests)()
+        .then(function () {
+        console.log("✅ Stripe multiple customer ids test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ Stripe multiple customer ids test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=stripe_multiple_customer_ids.test.js.map