@tellescope/sdk 2.0.0-beta.1 → 2.0.0-beta.3

package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.js

@@ -48,14 +48,17 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
 require('source-map-support').install();
 import axios from "axios";
 import { Session } from "../../../sdk";
-import { assert, log_header, } from "@tellescope/testing";
 import { PROVIDER_PERMISSIONS, PLACEHOLDER_ID } from "@tellescope/constants";
-import { setup_tests } from "../../setup";
+import { assert_checks, setup_isolated_tenant, } from "../../setup_isolated";
 var host = process.env.API_URL || 'http://localhost:8080';
 var RAND = function () { return Math.random().toString(36).slice(2, 10); };
 var ALL = 'All';
 var FULL_ACCESS = { create: ALL, read: ALL, update: ALL, delete: ALL };
 var PROCESS_PATH = '/v1/automated-actions/process';
+// Checks are gathered and returned rather than asserted inline, because the testing harness exits
+// the process on the first failed assert — collecting first means a RED run prints the full evidence
+// table (and reaches `finally` cleanup) before anything exits, and in the parallel pool nothing
+// asserts until every concurrent suite has torn its own tenant down.
 /**
  * Regression test: `automated_actions.process` must be admin-gated, single-fire and audited.
  *
@@ -91,219 +94,232 @@ var PROCESS_PATH = '/v1/automated-actions/process';
  * and C1 fails (the second call on the same row executes again instead of being rejected).
  * B1 (admin positive control) passes pre-fix and must keep passing.
  * GREEN (post-fix): all five checks pass.
+ *
+ * Runs on its own provisioned tenant: the throwaway role, staff user and automated_actions rows all
+ * live there, so nothing touches the shared organization.
  */
-export var automated_actions_process_gate_tests = function (_a) {
-    var sdk = _a.sdk;
-    return __awaiter(void 0, void 0, void 0, function () {
-        var checks, record, post, roleId, attackerId, enduserId, automatedActionIds, role, rbap, attacker, attackerToken, adminToken, attackerSDK, enduser, seedAction, attackerRow, attackerAttempt, baselineRow, baseline, badProbe, attackerRowAfter, replay, baselineRowAfter, _i, checks_1, c, _b, checks_2, c, _c, automatedActionIds_1, id, _d, _e, _f, _g;
-        var _h, _j;
-        return __generator(this, function (_k) {
-            switch (_k.label) {
-                case 0:
-                    log_header("automated_actions.process must be admin-only and single-fire");
-                    checks = [];
-                    record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
-                    post = function (authToken, automatedActionId) { return __awaiter(void 0, void 0, void 0, function () {
-                        var r;
-                        return __generator(this, function (_a) {
-                            switch (_a.label) {
-                                case 0: return [4 /*yield*/, axios.request({
-                                        method: 'post',
-                                        url: "".concat(host).concat(PROCESS_PATH),
-                                        data: { automatedActionId: automatedActionId },
-                                        headers: { Authorization: "Bearer ".concat(authToken) },
-                                        validateStatus: function () { return true; },
-                                    })];
-                                case 1:
-                                    r = _a.sent();
-                                    return [2 /*return*/, { status: r.status, body: r.data }];
-                            }
-                        });
-                    }); };
-                    roleId = '';
-                    attackerId = '';
-                    enduserId = '';
-                    automatedActionIds = [];
-                    _k.label = 1;
-                case 1:
-                    _k.trys.push([1, , 15, 34]);
-                    role = "f0192-automations-".concat(RAND());
-                    return [4 /*yield*/, sdk.api.role_based_access_permissions.createOne({
-                            role: role,
-                            permissions: __assign(__assign({}, PROVIDER_PERMISSIONS), { automated_actions: FULL_ACCESS }),
-                        })];
-                case 2:
-                    rbap = _k.sent();
-                    roleId = rbap.id;
-                    return [4 /*yield*/, sdk.api.users.createOne({
-                            email: "f0192-attacker-".concat(RAND(), "@tellescope.example"),
-                            fname: 'F0192', lname: 'Staff',
-                            verifiedEmail: true,
-                            notificationEmailsDisabled: true,
-                            roles: [role],
-                        })];
-                case 3:
-                    attacker = _k.sent();
-                    attackerId = attacker.id;
-                    return [4 /*yield*/, sdk.api.users.generate_auth_token({ id: attackerId })];
-                case 4:
-                    attackerToken = (_k.sent()).authToken;
-                    return [4 /*yield*/, sdk.api.users.generate_auth_token({ id: sdk.userInfo.id })];
-                case 5:
-                    adminToken = (_k.sent()).authToken;
-                    attackerSDK = new Session({ host: host, authToken: attackerToken });
-                    return [4 /*yield*/, attackerSDK.refresh_session()];
-                case 6:
-                    _k.sent();
-                    record('setup: attacker session is a non-admin holding automated_actions.update', attackerSDK.userInfo.id === attackerId && !((_h = attackerSDK.userInfo.roles) !== null && _h !== void 0 ? _h : []).includes('Admin'), "id=".concat(attackerSDK.userInfo.id, " roles=").concat(JSON.stringify(attackerSDK.userInfo.roles)));
-                    return [4 /*yield*/, sdk.api.endusers.createOne({ fname: 'F0192', lname: 'Patient' })];
-                case 7:
-                    enduser = _k.sent();
-                    enduserId = enduser.id;
-                    seedAction = function () { return __awaiter(void 0, void 0, void 0, function () {
-                        var a;
-                        return __generator(this, function (_a) {
-                            switch (_a.label) {
-                                case 0: return [4 /*yield*/, sdk.api.automated_actions.createOne({
-                                        enduserId: enduserId,
-                                        journeyId: PLACEHOLDER_ID,
-                                        automationStepId: PLACEHOLDER_ID,
-                                        event: { type: 'onJourneyStart', info: {} },
-                                        action: { type: 'setEnduserStatus', info: { status: 'Working' } },
-                                        status: 'active',
-                                        processAfter: Date.now() + 60 * 60 * 1000,
-                                    })];
-                                case 1:
-                                    a = _a.sent();
-                                    automatedActionIds.push(a.id);
-                                    return [2 /*return*/, a];
-                            }
-                        });
-                    }); };
-                    return [4 /*yield*/, seedAction()];
-                case 8:
-                    attackerRow = _k.sent();
-                    return [4 /*yield*/, post(attackerToken, attackerRow.id)
-                        // Baseline on the same path with an admin token, so a blanket 401 (expired subscription,
-                        // bad route, broken fixture) cannot masquerade as a working gate.
-                    ];
-                case 9:
-                    attackerAttempt = _k.sent();
-                    return [4 /*yield*/, seedAction()];
-                case 10:
-                    baselineRow = _k.sent();
-                    return [4 /*yield*/, post(adminToken, baselineRow.id)];
-                case 11:
-                    baseline = _k.sent();
-                    badProbe = baseline.status === 401 || baseline.status === 403;
-                    record('A1: a non-admin holding automated_actions.update cannot call process', !badProbe && (attackerAttempt.status === 401 || attackerAttempt.status === 403), "attacker=".concat(attackerAttempt.status, " ").concat(JSON.stringify(attackerAttempt.body), " baseline(admin)=").concat(baseline.status)
-                        + (badProbe ? ' BAD PROBE: admin baseline was also rejected' : ''));
-                    return [4 /*yield*/, sdk.api.automated_actions.getOne(attackerRow.id)];
-                case 12:
-                    attackerRowAfter = _k.sent();
-                    record('A2: a rejected non-admin call leaves the row unfired (status still active)', attackerRowAfter.status === 'active', "status=".concat(attackerRowAfter.status, " (expected active)"));
-                    /* ===== B: positive control — an admin can still call it ===== */
-                    record('B1: an admin can still process a pending row', baseline.status === 200 && ((_j = baseline.body) === null || _j === void 0 ? void 0 : _j.unimplemented) === true, "status=".concat(baseline.status, " body=").concat(JSON.stringify(baseline.body)));
-                    return [4 /*yield*/, post(adminToken, baselineRow.id)];
-                case 13:
-                    replay = _k.sent();
-                    record('C1: processing the same row twice is rejected (no replay)', replay.status === 409, "second call status=".concat(replay.status, " body=").concat(JSON.stringify(replay.body), " (expected 409)"));
-                    return [4 /*yield*/, sdk.api.automated_actions.getOne(baselineRow.id)];
-                case 14:
-                    baselineRowAfter = _k.sent();
-                    record('C2: a processed row is marked finished so neither a replay nor the worker re-runs it', baselineRowAfter.status === 'finished', "status=".concat(baselineRowAfter.status, " (expected finished)"));
-                    /* ===== report: print full table first, then assert (harness exits on first failure) ===== */
-                    console.log('\n  check summary:');
-                    for (_i = 0, checks_1 = checks; _i < checks_1.length; _i++) {
-                        c = checks_1[_i];
-                        console.log("    ".concat(c.pass ? 'PASS' : 'FAIL', "  ").concat(c.label, "  \u2014  ").concat(c.detail));
-                    }
-                    console.log('');
-                    for (_b = 0, checks_2 = checks; _b < checks_2.length; _b++) {
-                        c = checks_2[_b];
-                        assert(c.pass, "".concat(c.label, " \u2014 ").concat(c.detail), c.label);
-                    }
-                    return [3 /*break*/, 34];
-                case 15:
-                    _c = 0, automatedActionIds_1 = automatedActionIds;
-                    _k.label = 16;
-                case 16:
-                    if (!(_c < automatedActionIds_1.length)) return [3 /*break*/, 21];
-                    id = automatedActionIds_1[_c];
-                    _k.label = 17;
-                case 17:
-                    _k.trys.push([17, 19, , 20]);
-                    return [4 /*yield*/, sdk.api.automated_actions.deleteOne(id)];
-                case 18:
-                    _k.sent();
-                    return [3 /*break*/, 20];
-                case 19:
-                    _d = _k.sent();
-                    return [3 /*break*/, 20];
-                case 20:
-                    _c++;
-                    return [3 /*break*/, 16];
-                case 21:
-                    if (!enduserId) return [3 /*break*/, 25];
-                    _k.label = 22;
-                case 22:
-                    _k.trys.push([22, 24, , 25]);
-                    return [4 /*yield*/, sdk.api.endusers.deleteOne(enduserId)];
-                case 23:
-                    _k.sent();
-                    return [3 /*break*/, 25];
-                case 24:
-                    _e = _k.sent();
-                    return [3 /*break*/, 25];
-                case 25:
-                    if (!attackerId) return [3 /*break*/, 29];
-                    _k.label = 26;
-                case 26:
-                    _k.trys.push([26, 28, , 29]);
-                    return [4 /*yield*/, sdk.api.users.deleteOne(attackerId)];
-                case 27:
-                    _k.sent();
-                    return [3 /*break*/, 29];
-                case 28:
-                    _f = _k.sent();
-                    return [3 /*break*/, 29];
-                case 29:
-                    if (!roleId) return [3 /*break*/, 33];
-                    _k.label = 30;
-                case 30:
-                    _k.trys.push([30, 32, , 33]);
-                    return [4 /*yield*/, sdk.api.role_based_access_permissions.deleteOne(roleId)];
-                case 31:
-                    _k.sent();
-                    return [3 /*break*/, 33];
-                case 32:
-                    _g = _k.sent();
-                    return [3 /*break*/, 33];
-                case 33: return [7 /*endfinally*/];
-                case 34: return [2 /*return*/];
-            }
-        });
+export var automated_actions_process_gate_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var checks, record, post, tenant, roleId, attackerId, enduserId, automatedActionIds, sdk_1, role, rbap, attacker, attackerToken, adminToken, attackerSDK, enduser, seedAction, attackerRow, attackerAttempt, baselineRow, baseline, badProbe, attackerRowAfter, replay, baselineRowAfter, sdk, _i, automatedActionIds_1, id, _a, _b, _c, _d, e_1;
+    var _e, _f;
+    return __generator(this, function (_g) {
+        switch (_g.label) {
+            case 0:
+                checks = [];
+                record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
+                post = function (authToken, automatedActionId) { return __awaiter(void 0, void 0, void 0, function () {
+                    var r;
+                    return __generator(this, function (_a) {
+                        switch (_a.label) {
+                            case 0: return [4 /*yield*/, axios.request({
+                                    method: 'post',
+                                    url: "".concat(host).concat(PROCESS_PATH),
+                                    data: { automatedActionId: automatedActionId },
+                                    headers: { Authorization: "Bearer ".concat(authToken) },
+                                    validateStatus: function () { return true; },
+                                })];
+                            case 1:
+                                r = _a.sent();
+                                return [2 /*return*/, { status: r.status, body: r.data }];
+                        }
+                    });
+                }); };
+                roleId = '';
+                attackerId = '';
+                enduserId = '';
+                automatedActionIds = [];
+                _g.label = 1;
+            case 1:
+                _g.trys.push([1, , 16, 38]);
+                return [4 /*yield*/, setup_isolated_tenant({
+                        name: "Automated actions process gate ".concat(RAND()),
+                        users: [{ isAdmin: true }],
+                        apiKeys: 0,
+                    })];
+            case 2:
+                tenant = _g.sent();
+                sdk_1 = tenant.sdk;
+                role = "f0192-automations-".concat(RAND());
+                return [4 /*yield*/, sdk_1.api.role_based_access_permissions.createOne({
+                        role: role,
+                        permissions: __assign(__assign({}, PROVIDER_PERMISSIONS), { automated_actions: FULL_ACCESS }),
+                    })];
+            case 3:
+                rbap = _g.sent();
+                roleId = rbap.id;
+                return [4 /*yield*/, sdk_1.api.users.createOne({
+                        email: "f0192-attacker-".concat(RAND(), "@tellescope.example"),
+                        fname: 'F0192', lname: 'Staff',
+                        verifiedEmail: true,
+                        notificationEmailsDisabled: true,
+                        roles: [role],
+                    })];
+            case 4:
+                attacker = _g.sent();
+                attackerId = attacker.id;
+                return [4 /*yield*/, sdk_1.api.users.generate_auth_token({ id: attackerId })];
+            case 5:
+                attackerToken = (_g.sent()).authToken;
+                return [4 /*yield*/, sdk_1.api.users.generate_auth_token({ id: sdk_1.userInfo.id })];
+            case 6:
+                adminToken = (_g.sent()).authToken;
+                attackerSDK = new Session({ host: host, authToken: attackerToken });
+                return [4 /*yield*/, attackerSDK.refresh_session()];
+            case 7:
+                _g.sent();
+                record('setup: attacker session is a non-admin holding automated_actions.update', attackerSDK.userInfo.id === attackerId && !((_e = attackerSDK.userInfo.roles) !== null && _e !== void 0 ? _e : []).includes('Admin'), "id=".concat(attackerSDK.userInfo.id, " roles=").concat(JSON.stringify(attackerSDK.userInfo.roles)));
+                return [4 /*yield*/, sdk_1.api.endusers.createOne({ fname: 'F0192', lname: 'Patient' })];
+            case 8:
+                enduser = _g.sent();
+                enduserId = enduser.id;
+                seedAction = function () { return __awaiter(void 0, void 0, void 0, function () {
+                    var a;
+                    return __generator(this, function (_a) {
+                        switch (_a.label) {
+                            case 0: return [4 /*yield*/, sdk_1.api.automated_actions.createOne({
+                                    enduserId: enduserId,
+                                    journeyId: PLACEHOLDER_ID,
+                                    automationStepId: PLACEHOLDER_ID,
+                                    event: { type: 'onJourneyStart', info: {} },
+                                    action: { type: 'setEnduserStatus', info: { status: 'Working' } },
+                                    status: 'active',
+                                    processAfter: Date.now() + 60 * 60 * 1000,
+                                })];
+                            case 1:
+                                a = _a.sent();
+                                automatedActionIds.push(a.id);
+                                return [2 /*return*/, a];
+                        }
+                    });
+                }); };
+                return [4 /*yield*/, seedAction()];
+            case 9:
+                attackerRow = _g.sent();
+                return [4 /*yield*/, post(attackerToken, attackerRow.id)
+                    // Baseline on the same path with an admin token, so a blanket 401 (expired subscription,
+                    // bad route, broken fixture) cannot masquerade as a working gate.
+                ];
+            case 10:
+                attackerAttempt = _g.sent();
+                return [4 /*yield*/, seedAction()];
+            case 11:
+                baselineRow = _g.sent();
+                return [4 /*yield*/, post(adminToken, baselineRow.id)];
+            case 12:
+                baseline = _g.sent();
+                badProbe = baseline.status === 401 || baseline.status === 403;
+                record('A1: a non-admin holding automated_actions.update cannot call process', !badProbe && (attackerAttempt.status === 401 || attackerAttempt.status === 403), "attacker=".concat(attackerAttempt.status, " ").concat(JSON.stringify(attackerAttempt.body), " baseline(admin)=").concat(baseline.status)
+                    + (badProbe ? ' BAD PROBE: admin baseline was also rejected' : ''));
+                return [4 /*yield*/, sdk_1.api.automated_actions.getOne(attackerRow.id)];
+            case 13:
+                attackerRowAfter = _g.sent();
+                record('A2: a rejected non-admin call leaves the row unfired (status still active)', attackerRowAfter.status === 'active', "status=".concat(attackerRowAfter.status, " (expected active)"));
+                /* ===== B: positive control — an admin can still call it ===== */
+                record('B1: an admin can still process a pending row', baseline.status === 200 && ((_f = baseline.body) === null || _f === void 0 ? void 0 : _f.unimplemented) === true, "status=".concat(baseline.status, " body=").concat(JSON.stringify(baseline.body)));
+                return [4 /*yield*/, post(adminToken, baselineRow.id)];
+            case 14:
+                replay = _g.sent();
+                record('C1: processing the same row twice is rejected (no replay)', replay.status === 409, "second call status=".concat(replay.status, " body=").concat(JSON.stringify(replay.body), " (expected 409)"));
+                return [4 /*yield*/, sdk_1.api.automated_actions.getOne(baselineRow.id)];
+            case 15:
+                baselineRowAfter = _g.sent();
+                record('C2: a processed row is marked finished so neither a replay nor the worker re-runs it', baselineRowAfter.status === 'finished', "status=".concat(baselineRowAfter.status, " (expected finished)"));
+                return [3 /*break*/, 38];
+            case 16:
+                if (!tenant) return [3 /*break*/, 37];
+                sdk = tenant.sdk;
+                _i = 0, automatedActionIds_1 = automatedActionIds;
+                _g.label = 17;
+            case 17:
+                if (!(_i < automatedActionIds_1.length)) return [3 /*break*/, 22];
+                id = automatedActionIds_1[_i];
+                _g.label = 18;
+            case 18:
+                _g.trys.push([18, 20, , 21]);
+                return [4 /*yield*/, sdk.api.automated_actions.deleteOne(id)];
+            case 19:
+                _g.sent();
+                return [3 /*break*/, 21];
+            case 20:
+                _a = _g.sent();
+                return [3 /*break*/, 21];
+            case 21:
+                _i++;
+                return [3 /*break*/, 17];
+            case 22:
+                if (!enduserId) return [3 /*break*/, 26];
+                _g.label = 23;
+            case 23:
+                _g.trys.push([23, 25, , 26]);
+                return [4 /*yield*/, sdk.api.endusers.deleteOne(enduserId)];
+            case 24:
+                _g.sent();
+                return [3 /*break*/, 26];
+            case 25:
+                _b = _g.sent();
+                return [3 /*break*/, 26];
+            case 26:
+                if (!attackerId) return [3 /*break*/, 30];
+                _g.label = 27;
+            case 27:
+                _g.trys.push([27, 29, , 30]);
+                return [4 /*yield*/, sdk.api.users.deleteOne(attackerId)];
+            case 28:
+                _g.sent();
+                return [3 /*break*/, 30];
+            case 29:
+                _c = _g.sent();
+                return [3 /*break*/, 30];
+            case 30:
+                if (!roleId) return [3 /*break*/, 34];
+                _g.label = 31;
+            case 31:
+                _g.trys.push([31, 33, , 34]);
+                return [4 /*yield*/, sdk.api.role_based_access_permissions.deleteOne(roleId)];
+            case 32:
+                _g.sent();
+                return [3 /*break*/, 34];
+            case 33:
+                _d = _g.sent();
+                return [3 /*break*/, 34];
+            case 34:
+                _g.trys.push([34, 36, , 37]);
+                return [4 /*yield*/, tenant.teardown()];
+            case 35:
+                _g.sent();
+                return [3 /*break*/, 37];
+            case 36:
+                e_1 = _g.sent();
+                console.error('teardown failed', e_1);
+                return [3 /*break*/, 37];
+            case 37: return [7 /*endfinally*/];
+            case 38: return [2 /*return*/, checks];
+        }
     });
+}); };
+/** Asserting wrapper, for standalone runs. */
+export var automated_actions_process_gate_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _a = assert_checks;
+                _b = ['Automated actions process gate'];
+                return [4 /*yield*/, automated_actions_process_gate_checks()];
+            case 1:
+                _a.apply(void 0, _b.concat([_c.sent()]));
+                return [2 /*return*/];
+        }
+    });
+}); };
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+export var ISOLATED_SUITE = {
+    name: 'Automated actions process gate',
+    run: automated_actions_process_gate_checks,
 };
 // Allow running this test file independently
 if (require.main === module) {
     console.log("\uD83C\uDF10 Using API URL: ".concat(host));
-    var sdk_1 = new Session({ host: host });
-    var sdkNonAdmin_1 = new Session({ host: host });
-    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, setup_tests(sdk_1, sdkNonAdmin_1)];
-                case 1:
-                    _a.sent();
-                    return [4 /*yield*/, automated_actions_process_gate_tests({ sdk: sdk_1, sdkNonAdmin: sdkNonAdmin_1 })];
-                case 2:
-                    _a.sent();
-                    return [2 /*return*/];
-            }
-        });
-    }); };
-    runTests()
+    automated_actions_process_gate_tests()
         .then(function () {
         console.log("✅ automated_actions.process gate test suite completed successfully");
         process.exit(0);

package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"automated-actions-process-gate.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/automated-actions-process-gate.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EACL,MAAM,EACN,UAAU,GACX,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D,IAAM,GAAG,GAAG,KAAc,CAAA;AAC1B,IAAM,WAAW,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAExE,IAAM,YAAY,GAAG,+BAA+B,CAAA;AAWpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,IAAM,oCAAoC,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;;oBAC9D,UAAU,CAAC,8DAA8D,CAAC,CAAA;oBAEpE,MAAM,GAAY,EAAE,CAAA;oBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;oBAI/F,IAAI,GAAG,UAAO,SAAiB,EAAE,iBAAyB;;;;wCACpD,qBAAM,KAAK,CAAC,OAAO,CAAC;wCAC5B,MAAM,EAAE,MAAM;wCACd,GAAG,EAAE,UAAG,IAAI,SAAG,YAAY,CAAE;wCAC7B,IAAI,EAAE,EAAE,iBAAiB,mBAAA,EAAE;wCAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,iBAAU,SAAS,CAAE,EAAE;wCACjD,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;qCAC3B,CAAC,EAAA;;oCANI,CAAC,GAAG,SAMR;oCACF,sBAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAA;;;yBAC1C,CAAA;oBAEG,MAAM,GAAG,EAAE,CAAA;oBACX,UAAU,GAAG,EAAE,CAAA;oBACf,SAAS,GAAG,EAAE,CAAA;oBACZ,kBAAkB,GAAa,EAAE,CAAA;;;;oBAO/B,IAAI,GAAG,4BAAqB,IAAI,EAAE,CAAE,CAAA;oBAC7B,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;4BACjE,IAAI,MAAA;4BACJ,WAAW,wBAAO,oBAAoB,KAAE,iBAAiB,EAAE,WAAW,GAAE;yBAClE,CAAC,EAAA;;oBAHH,IAAI,GAAG,SAGJ;oBACT,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;oBAKC,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;4BAC7C,KAAK,EAAE,yBAAkB,IAAI,EAAE,wBAAqB;4BACpD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;4BAC9B,aAAa,EAAE,IAAI;4BACnB,0BAA0B,EAAE,IAAI;4BAChC,KAAK,EAAE,CAAC,IAAI,CAAC;yBACP,CAAC,EAAA;;oBANH,QAAQ,GAAG,SAMR;oBACT,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;oBAGD,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAA5E,aAAa,GAAG,CAAC,SAA2D,CAAC,CAAC,SAAS;oBACzE,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAA9E,UAAU,GAAG,CAAC,SAAgE,CAAC,CAAC,SAAS;oBAEzF,WAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;oBACnE,qBAAM,WAAW,CAAC,eAAe,EAAE,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,MAAM,CACJ,yEAAyE,EACzE,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,MAAA,WAAW,CAAC,QAAQ,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/F,aAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,oBAAU,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAE,CACpF,CAAA;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;oBAAhF,OAAO,GAAG,SAAsE;oBACtF,SAAS,GAAG,OAAO,CAAC,EAAE,CAAA;oBAKhB,UAAU,GAAG;;;;wCACP,qBAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC;wCAClD,SAAS,WAAA;wCACT,SAAS,EAAE,cAAc;wCACzB,gBAAgB,EAAE,cAAc;wCAChC,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE;wCAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;wCACjE,MAAM,EAAE,QAAQ;wCAChB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;qCACnC,CAAC,EAAA;;oCARH,CAAC,GAAG,SAQD;oCACT,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;oCAC7B,sBAAO,CAAC,EAAA;;;yBACT,CAAA;oBAImB,qBAAM,UAAU,EAAE,EAAA;;oBAAhC,WAAW,GAAG,SAAkB;oBACd,qBAAM,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;wBAEjE,yFAAyF;wBACzF,kEAAkE;sBAHD;;oBAA3D,eAAe,GAAG,SAAyC;oBAI7C,qBAAM,UAAU,EAAE,EAAA;;oBAAhC,WAAW,GAAG,SAAkB;oBACrB,qBAAM,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,EAAA;;oBAAjD,QAAQ,GAAG,SAAsC;oBACjD,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAA;oBAEnE,MAAM,CACJ,sEAAsE,EACtE,CAAC,QAAQ,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,MAAM,KAAK,GAAG,CAAC,EAC/E,mBAAY,eAAe,CAAC,MAAM,cAAI,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,8BAAoB,QAAQ,CAAC,MAAM,CAAE;0BAC3G,CAAC,QAAQ,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,EAAE,CAAC,CACrE,CAAA;oBAGwB,qBAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAA;;oBAAzE,gBAAgB,GAAG,SAAsD;oBAC/E,MAAM,CACJ,4EAA4E,EAC5E,gBAAgB,CAAC,MAAM,KAAK,QAAQ,EACpC,iBAAU,gBAAgB,CAAC,MAAM,uBAAoB,CACtD,CAAA;oBAED,kEAAkE;oBAElE,MAAM,CACJ,8CAA8C,EAC9C,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,aAAa,MAAK,IAAI,EAChE,iBAAU,QAAQ,CAAC,MAAM,mBAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAE,CAClE,CAAA;oBAIc,qBAAM,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,EAAA;;oBAA/C,MAAM,GAAG,SAAsC;oBACrD,MAAM,CACJ,2DAA2D,EAC3D,MAAM,CAAC,MAAM,KAAK,GAAG,EACrB,6BAAsB,MAAM,CAAC,MAAM,mBAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAiB,CACzF,CAAA;oBAEwB,qBAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAA;;oBAAzE,gBAAgB,GAAG,SAAsD;oBAC/E,MAAM,CACJ,sFAAsF,EACtF,gBAAgB,CAAC,MAAM,KAAK,UAAU,EACtC,iBAAU,gBAAgB,CAAC,MAAM,yBAAsB,CACxD,CAAA;oBAED,8FAA8F;oBAC9F,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;oBACjC,WAAsB,EAAN,iBAAM,EAAN,oBAAM,EAAN,IAAM,EAAE;wBAAb,CAAC;wBACV,OAAO,CAAC,GAAG,CAAC,cAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,eAAK,CAAC,CAAC,KAAK,uBAAQ,CAAC,CAAC,MAAM,CAAE,CAAC,CAAA;qBAC3E;oBACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;oBAEf,WAAsB,EAAN,iBAAM,EAAN,oBAAM,EAAN,IAAM,EAAE;wBAAb,CAAC;wBACV,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,UAAG,CAAC,CAAC,KAAK,qBAAM,CAAC,CAAC,MAAM,CAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;qBACpD;;;0BAIkC,EAAlB,yCAAkB;;;yBAAlB,CAAA,gCAAkB,CAAA;oBAAxB,EAAE;;;;oBAAgC,qBAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;;;;;;oBAAzE,IAAkB,CAAA;;;yBAC/B,SAAS,EAAT,yBAAS;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAA;;oBAA3C,SAA2C,CAAA;;;;;;yBAC9D,UAAU,EAAV,yBAAU;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAAA;;oBAAzC,SAAyC,CAAA;;;;;;yBAC7D,MAAM,EAAN,yBAAM;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,EAAA;;oBAA7D,SAA6D,CAAA;;;;;;;;;;CAEpF,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,oCAAoC,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAhE,SAAgE,CAAA;;;;SACjE,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAA;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAAA;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
+{"version":3,"file":"automated-actions-process-gate.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/automated-actions-process-gate.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EACL,aAAa,EAGb,qBAAqB,GACtB,MAAM,sBAAsB,CAAA;AAE7B,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D,IAAM,GAAG,GAAG,KAAc,CAAA;AAC1B,IAAM,WAAW,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAExE,IAAM,YAAY,GAAG,+BAA+B,CAAA;AAEpD,kGAAkG;AAClG,qGAAqG;AACrG,gGAAgG;AAChG,qEAAqE;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,CAAC,IAAM,qCAAqC,GAAG;;;;;;gBAC7C,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;gBAI/F,IAAI,GAAG,UAAO,SAAiB,EAAE,iBAAyB;;;;oCACpD,qBAAM,KAAK,CAAC,OAAO,CAAC;oCAC5B,MAAM,EAAE,MAAM;oCACd,GAAG,EAAE,UAAG,IAAI,SAAG,YAAY,CAAE;oCAC7B,IAAI,EAAE,EAAE,iBAAiB,mBAAA,EAAE;oCAC3B,OAAO,EAAE,EAAE,aAAa,EAAE,iBAAU,SAAS,CAAE,EAAE;oCACjD,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI;iCAC3B,CAAC,EAAA;;gCANI,CAAC,GAAG,SAMR;gCACF,sBAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAA;;;qBAC1C,CAAA;gBAGG,MAAM,GAAG,EAAE,CAAA;gBACX,UAAU,GAAG,EAAE,CAAA;gBACf,SAAS,GAAG,EAAE,CAAA;gBACZ,kBAAkB,GAAa,EAAE,CAAA;;;;gBAG5B,qBAAM,qBAAqB,CAAC;wBACnC,IAAI,EAAE,yCAAkC,IAAI,EAAE,CAAE;wBAChD,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;wBAC1B,OAAO,EAAE,CAAC;qBACX,CAAC,EAAA;;gBAJF,MAAM,GAAG,SAIP,CAAA;gBACM,QAAQ,MAAM,IAAX,CAAW;gBAMhB,IAAI,GAAG,4BAAqB,IAAI,EAAE,CAAE,CAAA;gBAC7B,qBAAM,KAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;wBACjE,IAAI,MAAA;wBACJ,WAAW,wBAAO,oBAAoB,KAAE,iBAAiB,EAAE,WAAW,GAAE;qBAClE,CAAC,EAAA;;gBAHH,IAAI,GAAG,SAGJ;gBACT,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;gBAKC,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;wBAC7C,KAAK,EAAE,yBAAkB,IAAI,EAAE,wBAAqB;wBACpD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;wBAC9B,aAAa,EAAE,IAAI;wBACnB,0BAA0B,EAAE,IAAI;wBAChC,KAAK,EAAE,CAAC,IAAI,CAAC;qBACP,CAAC,EAAA;;gBANH,QAAQ,GAAG,SAMR;gBACT,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;gBAGD,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAA;;gBAA5E,aAAa,GAAG,CAAC,SAA2D,CAAC,CAAC,SAAS;gBACzE,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,KAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAA;;gBAA9E,UAAU,GAAG,CAAC,SAAgE,CAAC,CAAC,SAAS;gBAEzF,WAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;gBACnE,qBAAM,WAAW,CAAC,eAAe,EAAE,EAAA;;gBAAnC,SAAmC,CAAA;gBACnC,MAAM,CACJ,yEAAyE,EACzE,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,MAAA,WAAW,CAAC,QAAQ,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/F,aAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,oBAAU,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAE,CACpF,CAAA;gBAEe,qBAAM,KAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;gBAAhF,OAAO,GAAG,SAAsE;gBACtF,SAAS,GAAG,OAAO,CAAC,EAAE,CAAA;gBAKhB,UAAU,GAAG;;;;oCACP,qBAAM,KAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC;oCAClD,SAAS,WAAA;oCACT,SAAS,EAAE,cAAc;oCACzB,gBAAgB,EAAE,cAAc;oCAChC,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE;oCAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;oCACjE,MAAM,EAAE,QAAQ;oCAChB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;iCACnC,CAAC,EAAA;;gCARH,CAAC,GAAG,SAQD;gCACT,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gCAC7B,sBAAO,CAAC,EAAA;;;qBACT,CAAA;gBAImB,qBAAM,UAAU,EAAE,EAAA;;gBAAhC,WAAW,GAAG,SAAkB;gBACd,qBAAM,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;oBAEjE,yFAAyF;oBACzF,kEAAkE;kBAHD;;gBAA3D,eAAe,GAAG,SAAyC;gBAI7C,qBAAM,UAAU,EAAE,EAAA;;gBAAhC,WAAW,GAAG,SAAkB;gBACrB,qBAAM,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,EAAA;;gBAAjD,QAAQ,GAAG,SAAsC;gBACjD,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAA;gBAEnE,MAAM,CACJ,sEAAsE,EACtE,CAAC,QAAQ,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,MAAM,KAAK,GAAG,CAAC,EAC/E,mBAAY,eAAe,CAAC,MAAM,cAAI,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,8BAAoB,QAAQ,CAAC,MAAM,CAAE;sBAC3G,CAAC,QAAQ,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,EAAE,CAAC,CACrE,CAAA;gBAGwB,qBAAM,KAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAA;;gBAAzE,gBAAgB,GAAG,SAAsD;gBAC/E,MAAM,CACJ,4EAA4E,EAC5E,gBAAgB,CAAC,MAAM,KAAK,QAAQ,EACpC,iBAAU,gBAAgB,CAAC,MAAM,uBAAoB,CACtD,CAAA;gBAED,kEAAkE;gBAElE,MAAM,CACJ,8CAA8C,EAC9C,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,aAAa,MAAK,IAAI,EAChE,iBAAU,QAAQ,CAAC,MAAM,mBAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAE,CAClE,CAAA;gBAIc,qBAAM,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,EAAA;;gBAA/C,MAAM,GAAG,SAAsC;gBACrD,MAAM,CACJ,2DAA2D,EAC3D,MAAM,CAAC,MAAM,KAAK,GAAG,EACrB,6BAAsB,MAAM,CAAC,MAAM,mBAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAiB,CACzF,CAAA;gBAEwB,qBAAM,KAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAA;;gBAAzE,gBAAgB,GAAG,SAAsD;gBAC/E,MAAM,CACJ,sFAAsF,EACtF,gBAAgB,CAAC,MAAM,KAAK,UAAU,EACtC,iBAAU,gBAAgB,CAAC,MAAM,yBAAsB,CACxD,CAAA;;;qBAEG,MAAM,EAAN,yBAAM;gBACA,GAAG,GAAK,MAAM,IAAX,CAAW;sBAGa,EAAlB,yCAAkB;;;qBAAlB,CAAA,gCAAkB,CAAA;gBAAxB,EAAE;;;;gBAAgC,qBAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;gBAA7C,SAA6C,CAAA;;;;;;gBAAzE,IAAkB,CAAA;;;qBAC/B,SAAS,EAAT,yBAAS;;;;gBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAA;;gBAA3C,SAA2C,CAAA;;;;;;qBAC9D,UAAU,EAAV,yBAAU;;;;gBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAAA;;gBAAzC,SAAyC,CAAA;;;;;;qBAC7D,MAAM,EAAN,yBAAM;;;;gBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,EAAA;;gBAA7D,SAA6D,CAAA;;;;;;;gBAE3E,qBAAM,MAAM,CAAC,QAAQ,EAAE,EAAA;;gBAAvB,SAAuB,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;qBAInF,sBAAO,MAAM,EAAA;;;KACd,CAAA;AAED,8CAA8C;AAC9C,MAAM,CAAC,IAAM,oCAAoC,GAAG;;;;;gBAClD,KAAA,aAAa,CAAA;sBAAC,gCAAgC;gBAAE,qBAAM,qCAAqC,EAAE,EAAA;;gBAA7F,4BAAgD,SAA6C,GAAC,CAAA;;;;KAC/F,CAAA;AAED,oGAAoG;AACpG,MAAM,CAAC,IAAM,cAAc,GAAkB;IAC3C,IAAI,EAAE,gCAAgC;IACtC,GAAG,EAAE,qCAAqC;CAC3C,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,oCAAoC,EAAE;SACnC,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAA;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAAA;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts

@@ -1,4 +1,4 @@
-import { Session } from "../../../sdk";
+import { Check, IsolatedSuite } from "../../setup_isolated";
 /**
  * Regression test: `form_fields.booking_info` must not mint a booking token for another patient.
  *
@@ -18,12 +18,17 @@ import { Session } from "../../../sdk";
  * the VICTIM's id, and the victim's `state` is overwritten. B/C (positive controls) pass pre-fix.
  * GREEN (post-fix): all six checks pass.
  *
- * Checks are collected and printed before any assert runs: the testing harness has
- * EXIT_ON_FIRST_ERROR, so asserting inline would kill the process before the evidence table and
- * before `finally` cleanup.
+ * Checks are collected and returned rather than asserted inline: the testing harness's `assert`
+ * calls process.exit, which would kill the process before the evidence table, before `finally`
+ * cleanup, and — in the parallel pool — before every other in-flight suite's teardown.
+ *
+ * Runs on its own provisioned tenant, so the patient's businessId comes from the tenant rather than
+ * a TEST_BUSINESS_ID env var with a hardcoded fallback, and the "oldest contact" the staff preview
+ * branch (C2) resolves is this suite's own fixture.
  */
-export declare const booking_info_idor_tests: ({ sdk }: {
-    sdk: Session;
-    sdkNonAdmin: Session;
-}) => Promise<void>;
+export declare const booking_info_idor_checks: () => Promise<Check[]>;
+/** Asserting wrapper, for standalone runs. */
+export declare const booking_info_idor_tests: () => Promise<void>;
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+export declare const ISOLATED_SUITE: IsolatedSuite;
 //# sourceMappingURL=booking-info-idor-token-mint.test.d.ts.map

package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"booking-info-idor-token-mint.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/booking-info-idor-token-mint.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAkB,MAAM,cAAc,CAAA;AAqBtD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,uBAAuB;SAA2B,OAAO;iBAAe,OAAO;mBA2J3F,CAAA"}
+{"version":3,"file":"booking-info-idor-token-mint.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/booking-info-idor-token-mint.test.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,EACL,aAAa,EAEd,MAAM,sBAAsB,CAAA;AAS7B;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,wBAAwB,QAAa,QAAQ,KAAK,EAAE,CAkKhE,CAAA;AAED,8CAA8C;AAC9C,eAAO,MAAM,uBAAuB,qBAEnC,CAAA;AAED,oGAAoG;AACpG,eAAO,MAAM,cAAc,EAAE,aAG5B,CAAA"}