@tellescope/sdk 2.0.0-beta.1 → 2.0.0-beta.3

package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js

@@ -46,14 +46,11 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 require('source-map-support').install();
-import { Session } from "../../../sdk";
-import { assert, log_header, wait, } from "@tellescope/testing";
-import { setup_tests } from "../../setup";
+import { poll_for_results } from "@tellescope/testing";
 import { PROVIDER_PERMISSIONS } from "@tellescope/constants";
+import { assert_checks, setup_isolated_tenant, } from "../../setup_isolated";
 var host = process.env.API_URL || 'http://localhost:8080';
-// Separate tenant (different businessId), reusing the same hardcoded apiKey that
-// multi_tenant_tests relies on in tests.ts.
-var OTHER_TENANT_API_KEY = "ba745e25162bb95a795c5fa1af70df188d93c4d3aac9c48b34a5c8c9dd7b80f7";
+var RAND = function () { return Math.random().toString(36).slice(2, 10); };
 /**
  * Tenant-boundary guard for cascade_role_rename (relates to a prior internal review,
  * which was investigated and closed as a FALSE POSITIVE — see that file for the code trace).
@@ -78,149 +75,176 @@ var OTHER_TENANT_API_KEY = "ba745e25162bb95a795c5fa1af70df188d93c4d3aac9c48b34a5
  * Expected on current (correct) code: BOTH assertions pass. A regression that drops the
  * `businessId` scoping would flip assertion #4 to red (Tenant B user becomes `[ROLE_NEW]`).
  *
- * A collision-proof unique role name (timestamped) is used so the test never touches real roles.
+ * Both tenants are provisioned (`apiKeys: 0` — both sessions are bearer-token admin ones). Tenant B
+ * used to be a hardcoded seeded API key, which tied the file to one developer's database.
+ *
+ * SEQUENCING: the cascade is a fire-and-forget side effect, so the negative assertion must not be
+ * read before it has had its chance to run — otherwise "Tenant B is unchanged" is vacuously true
+ * because NOTHING has happened yet. The positive control (Tenant A's user showing `[ROLE_NEW]`) is
+ * the signal that the cascade has run, so we poll for THAT first and read Tenant B afterwards. A
+ * fixed sleep cannot do this job under an 8-wide parallel pool.
+ *
+ * A collision-proof unique role name is used so the test never touches real roles.
  */
-export var cascade_role_rename_cross_tenant_tests = function (_a) {
-    var sdk = _a.sdk;
-    return __awaiter(void 0, void 0, void 0, function () {
-        var stamp, ROLE_OLD, ROLE_NEW, sdkOther, rbapId, controlUserId, victimUserId, tenantABusinessId, rbap, controlUser, victimUser, victimBefore, controlBefore, victimAfter, controlAfter, _b, _c, _d;
-        return __generator(this, function (_e) {
-            switch (_e.label) {
-                case 0:
-                    log_header("cascade role rename cross-tenant regression");
-                    stamp = Date.now();
-                    ROLE_OLD = "XTenantRename_".concat(stamp);
-                    ROLE_NEW = "".concat(ROLE_OLD, "_renamed");
-                    sdkOther = new Session({ host: host, apiKey: OTHER_TENANT_API_KEY });
-                    _e.label = 1;
-                case 1:
-                    _e.trys.push([1, , 13, 26]);
-                    tenantABusinessId = sdk.userInfo.businessId;
-                    return [4 /*yield*/, sdk.api.role_based_access_permissions.createOne({
-                            role: ROLE_OLD,
-                            permissions: __assign({}, PROVIDER_PERMISSIONS),
-                        })];
-                case 2:
-                    rbap = _e.sent();
-                    rbapId = rbap.id;
-                    return [4 /*yield*/, sdk.api.users.createOne({
-                            email: "f0053-control-".concat(stamp, "@example.com"),
-                            notificationEmailsDisabled: true,
-                        })];
-                case 3:
-                    controlUser = _e.sent();
-                    controlUserId = controlUser.id;
-                    return [4 /*yield*/, sdk.api.users.updateOne(controlUserId, { roles: [ROLE_OLD] }, { replaceObjectFields: true })
-                        // 3. Tenant B: create a throwaway victim user holding the SAME ROLE_OLD.
-                    ];
-                case 4:
-                    _e.sent();
-                    return [4 /*yield*/, sdkOther.api.users.createOne({
-                            email: "f0053-victim-".concat(stamp, "@example.com"),
-                            notificationEmailsDisabled: true,
-                        })];
-                case 5:
-                    victimUser = _e.sent();
-                    victimUserId = victimUser.id;
-                    return [4 /*yield*/, sdkOther.api.users.updateOne(victimUserId, { roles: [ROLE_OLD] }, { replaceObjectFields: true })
-                        // 4. Setup sanity: tenants are distinct and both users actually hold ROLE_OLD before the rename.
-                        //    (Distinguishes a setup failure from the security assertion below.)
-                    ];
-                case 6:
-                    _e.sent();
+export var cascade_role_rename_cross_tenant_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var checks, record, stamp, ROLE_OLD, ROLE_NEW, tenantA, tenantB, sdk_1, sdkOther, rbap, controlUser_1, victimUser, victimBefore, controlBefore, controlAfter, victimAfter, _i, _a, t, e_1;
+    var _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                checks = [];
+                record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
+                stamp = "".concat(Date.now(), "_").concat(RAND());
+                ROLE_OLD = "XTenantRename_".concat(stamp);
+                ROLE_NEW = "".concat(ROLE_OLD, "_renamed");
+                _c.label = 1;
+            case 1:
+                _c.trys.push([1, , 13, 20]);
+                // Tenant B is a genuinely separate businessId. Admin is required to create / set roles on users,
+                // so both provisioned sessions are admins.
+                ;
+                return [4 /*yield*/, Promise.all([
+                        setup_isolated_tenant({ name: "F0053 tenant A ".concat(RAND()), users: [{ isAdmin: true }], apiKeys: 0 }),
+                        setup_isolated_tenant({ name: "F0053 tenant B ".concat(RAND()), users: [{ isAdmin: true }], apiKeys: 0 }),
+                    ])];
+            case 2:
+                _b = _c.sent(), tenantA = _b[0], tenantB = _b[1];
+                sdk_1 = tenantA.sdk;
+                sdkOther = tenantB.sdk;
+                return [4 /*yield*/, sdk_1.api.role_based_access_permissions.createOne({
+                        role: ROLE_OLD,
+                        permissions: __assign({}, PROVIDER_PERMISSIONS),
+                    })
+                    // 2. Tenant A: create a throwaway control user holding ROLE_OLD (notification emails off).
+                    //    We never mutate a pre-existing user, in either tenant. controlUser lives in Tenant A and
+                    //    SHOULD be renamed by the same-tenant cascade; victimUser lives in Tenant B and must be
+                    //    UNTOUCHED.
+                ];
+            case 3:
+                rbap = _c.sent();
+                return [4 /*yield*/, sdk_1.api.users.createOne({
+                        email: "f0053-control-".concat(stamp, "@example.com"),
+                        notificationEmailsDisabled: true,
+                    })];
+            case 4:
+                controlUser_1 = _c.sent();
+                return [4 /*yield*/, sdk_1.api.users.updateOne(controlUser_1.id, { roles: [ROLE_OLD] }, { replaceObjectFields: true })
+                    // 3. Tenant B: create a throwaway victim user holding the SAME ROLE_OLD.
+                ];
+            case 5:
+                _c.sent();
+                return [4 /*yield*/, sdkOther.api.users.createOne({
+                        email: "f0053-victim-".concat(stamp, "@example.com"),
+                        notificationEmailsDisabled: true,
+                    })];
+            case 6:
+                victimUser = _c.sent();
+                return [4 /*yield*/, sdkOther.api.users.updateOne(victimUser.id, { roles: [ROLE_OLD] }, { replaceObjectFields: true })
                     // 4. Setup sanity: tenants are distinct and both users actually hold ROLE_OLD before the rename.
                     //    (Distinguishes a setup failure from the security assertion below.)
-                    assert(victimUser.businessId !== tenantABusinessId, "Victim user shares businessId with Tenant A (".concat(victimUser.businessId, ") \u2014 not a cross-tenant scenario"), 'setup: tenants are distinct');
-                    return [4 /*yield*/, sdkOther.api.users.getOne(victimUserId)];
-                case 7:
-                    victimBefore = _e.sent();
-                    return [4 /*yield*/, sdk.api.users.getOne(controlUserId)];
-                case 8:
-                    controlBefore = _e.sent();
-                    assert(JSON.stringify(victimBefore.roles) === JSON.stringify([ROLE_OLD])
-                        && JSON.stringify(controlBefore.roles) === JSON.stringify([ROLE_OLD]), "Setup failed: expected both users to hold [".concat(ROLE_OLD, "] (victim=").concat(JSON.stringify(victimBefore.roles), ", control=").concat(JSON.stringify(controlBefore.roles), ")"), 'setup: both users hold ROLE_OLD');
-                    // 5. Tenant A renames the role. This triggers cascade_role_rename.
-                    return [4 /*yield*/, sdk.api.role_based_access_permissions.updateOne(rbapId, { role: ROLE_NEW })];
-                case 9:
-                    // 5. Tenant A renames the role. This triggers cascade_role_rename.
-                    _e.sent();
-                    return [4 /*yield*/, wait(undefined, 1500)
-                        // 6. SECURITY ASSERTION — the Tenant B victim must be untouched by Tenant A's rename.
-                    ]; // let the side effect run
-                case 10:
-                    _e.sent(); // let the side effect run
-                    return [4 /*yield*/, sdkOther.api.users.getOne(victimUserId)];
-                case 11:
-                    victimAfter = _e.sent();
-                    assert(JSON.stringify(victimAfter.roles) === JSON.stringify([ROLE_OLD]), "CROSS-TENANT LEAK: Tenant B victim roles changed to ".concat(JSON.stringify(victimAfter.roles), " ")
-                        + "after Tenant A renamed its role. Expected [".concat(ROLE_OLD, "]."), 'Tenant B user roles unaffected by other-tenant role rename');
-                    return [4 /*yield*/, sdk.api.users.getOne(controlUserId)];
-                case 12:
-                    controlAfter = _e.sent();
-                    assert(JSON.stringify(controlAfter.roles) === JSON.stringify([ROLE_NEW]), "Same-tenant cascade broken: Tenant A control roles are ".concat(JSON.stringify(controlAfter.roles), ", ")
-                        + "expected [".concat(ROLE_NEW, "]."), 'Tenant A user roles renamed by same-tenant cascade');
-                    return [3 /*break*/, 26];
-                case 13:
-                    if (!victimUserId) return [3 /*break*/, 17];
-                    _e.label = 14;
-                case 14:
-                    _e.trys.push([14, 16, , 17]);
-                    return [4 /*yield*/, sdkOther.api.users.deleteOne(victimUserId)];
-                case 15:
-                    _e.sent();
-                    return [3 /*break*/, 17];
-                case 16:
-                    _b = _e.sent();
-                    return [3 /*break*/, 17];
-                case 17:
-                    if (!controlUserId) return [3 /*break*/, 21];
-                    _e.label = 18;
-                case 18:
-                    _e.trys.push([18, 20, , 21]);
-                    return [4 /*yield*/, sdk.api.users.deleteOne(controlUserId)];
-                case 19:
-                    _e.sent();
-                    return [3 /*break*/, 21];
-                case 20:
-                    _c = _e.sent();
-                    return [3 /*break*/, 21];
-                case 21:
-                    if (!rbapId) return [3 /*break*/, 25];
-                    _e.label = 22;
-                case 22:
-                    _e.trys.push([22, 24, , 25]);
-                    return [4 /*yield*/, sdk.api.role_based_access_permissions.deleteOne(rbapId)];
-                case 23:
-                    _e.sent();
-                    return [3 /*break*/, 25];
-                case 24:
-                    _d = _e.sent();
-                    return [3 /*break*/, 25];
-                case 25: return [7 /*endfinally*/];
-                case 26: return [2 /*return*/];
-            }
-        });
+                    // Positively pinned to tenant B rather than merely `!== tenantA`, which would pass vacuously if
+                    // businessId were ever absent from the create response — and this row is what licenses reading
+                    // the security assertion below as a cross-tenant result at all.
+                ];
+            case 7:
+                _c.sent();
+                // 4. Setup sanity: tenants are distinct and both users actually hold ROLE_OLD before the rename.
+                //    (Distinguishes a setup failure from the security assertion below.)
+                // Positively pinned to tenant B rather than merely `!== tenantA`, which would pass vacuously if
+                // businessId were ever absent from the create response — and this row is what licenses reading
+                // the security assertion below as a cross-tenant result at all.
+                record('setup: tenants are distinct', victimUser.businessId === tenantB.businessId && tenantA.businessId !== tenantB.businessId, "tenant A=".concat(tenantA.businessId, " tenant B=").concat(tenantB.businessId)
+                    + " victim user businessId=".concat(victimUser.businessId, " (must equal tenant B, and the two tenants must differ)"));
+                return [4 /*yield*/, sdkOther.api.users.getOne(victimUser.id)];
+            case 8:
+                victimBefore = _c.sent();
+                return [4 /*yield*/, sdk_1.api.users.getOne(controlUser_1.id)];
+            case 9:
+                controlBefore = _c.sent();
+                record('setup: both users hold ROLE_OLD', JSON.stringify(victimBefore.roles) === JSON.stringify([ROLE_OLD])
+                    && JSON.stringify(controlBefore.roles) === JSON.stringify([ROLE_OLD]), "expected both to hold [".concat(ROLE_OLD, "] \u2014 victim=").concat(JSON.stringify(victimBefore.roles))
+                    + " control=".concat(JSON.stringify(controlBefore.roles)));
+                // 5. Tenant A renames the role. This triggers cascade_role_rename, which is fire-and-forget.
+                return [4 /*yield*/, sdk_1.api.role_based_access_permissions.updateOne(rbap.id, { role: ROLE_NEW })
+                    // 6. Wait for the cascade to have actually run, by polling the SAME-TENANT control user. Reading
+                    //    Tenant B before this point would make the negative assertion vacuous: the cascade would
+                    //    simply not have happened yet. (A fixed wait was what this file did before; under an 8-wide
+                    //    pool it is not long enough to mean anything.)
+                ];
+            case 10:
+                // 5. Tenant A renames the role. This triggers cascade_role_rename, which is fire-and-forget.
+                _c.sent();
+                return [4 /*yield*/, poll_for_results(function () { return sdk_1.api.users.getOne(controlUser_1.id); }, function (u) { return JSON.stringify(u.roles) === JSON.stringify([ROLE_NEW]); }, 
+                    // 20s cap rather than the 10s default: this returns the moment the cascade lands, so the only
+                    // cost of a generous cap is paid when the test is about to fail anyway. On timeout
+                    // poll_for_results returns the last read, which step 8 then reports as a FAIL row with evidence
+                    // — the negative assertion below is explicitly cross-referenced to it so a timeout can never
+                    // read as a quiet pass.
+                    { iterations: 40 })
+                    // 7. SECURITY ASSERTION — the Tenant B victim must be untouched by Tenant A's rename.
+                ];
+            case 11:
+                controlAfter = _c.sent();
+                return [4 /*yield*/, sdkOther.api.users.getOne(victimUser.id)];
+            case 12:
+                victimAfter = _c.sent();
+                record('Tenant B user roles unaffected by other-tenant role rename', JSON.stringify(victimAfter.roles) === JSON.stringify([ROLE_OLD]), "Tenant B victim roles=".concat(JSON.stringify(victimAfter.roles), ", expected [").concat(ROLE_OLD, "]")
+                    + " (read after Tenant A's cascade was observed to complete \u2014 control=".concat(JSON.stringify(controlAfter.roles), ")"));
+                // 8. POSITIVE CONTROL — the Tenant A control user SHOULD be renamed (same-tenant cascade intact).
+                //    This is also what makes step 7 meaningful, so it is recorded as its own row rather than
+                //    being left implicit in the poll.
+                record('Tenant A user roles renamed by same-tenant cascade', JSON.stringify(controlAfter.roles) === JSON.stringify([ROLE_NEW]), "Tenant A control roles=".concat(JSON.stringify(controlAfter.roles), ", expected [").concat(ROLE_NEW, "]"));
+                return [3 /*break*/, 20];
+            case 13:
+                _i = 0, _a = [tenantA, tenantB];
+                _c.label = 14;
+            case 14:
+                if (!(_i < _a.length)) return [3 /*break*/, 19];
+                t = _a[_i];
+                if (!t) return [3 /*break*/, 18];
+                _c.label = 15;
+            case 15:
+                _c.trys.push([15, 17, , 18]);
+                return [4 /*yield*/, t.teardown()];
+            case 16:
+                _c.sent();
+                return [3 /*break*/, 18];
+            case 17:
+                e_1 = _c.sent();
+                console.error('teardown failed', e_1);
+                return [3 /*break*/, 18];
+            case 18:
+                _i++;
+                return [3 /*break*/, 14];
+            case 19: return [7 /*endfinally*/];
+            case 20: return [2 /*return*/, checks];
+        }
     });
+}); };
+/** Asserting wrapper, for standalone runs. */
+export var cascade_role_rename_cross_tenant_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _a = assert_checks;
+                _b = ['cascade role rename cross-tenant'];
+                return [4 /*yield*/, cascade_role_rename_cross_tenant_checks()];
+            case 1:
+                _a.apply(void 0, _b.concat([_c.sent()]));
+                return [2 /*return*/];
+        }
+    });
+}); };
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+export var ISOLATED_SUITE = {
+    name: 'cascade role rename cross-tenant',
+    run: cascade_role_rename_cross_tenant_checks,
 };
 // Allow running this test file independently
 if (require.main === module) {
     console.log("\uD83C\uDF10 Using API URL: ".concat(host));
-    var sdk_1 = new Session({ host: host });
-    var sdkNonAdmin_1 = new Session({ host: host });
-    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, setup_tests(sdk_1, sdkNonAdmin_1)];
-                case 1:
-                    _a.sent();
-                    return [4 /*yield*/, cascade_role_rename_cross_tenant_tests({ sdk: sdk_1, sdkNonAdmin: sdkNonAdmin_1 })];
-                case 2:
-                    _a.sent();
-                    return [2 /*return*/];
-            }
-        });
-    }); };
-    runTests()
+    cascade_role_rename_cross_tenant_tests()
         .then(function () {
         console.log("✅ cascade role rename cross-tenant test suite completed successfully");
         process.exit(0);

package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"cascade-role-rename-cross-tenant.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/cascade-role-rename-cross-tenant.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EACL,MAAM,EACN,UAAU,EACV,IAAI,GACL,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAE5D,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,iFAAiF;AACjF,4CAA4C;AAC5C,IAAM,oBAAoB,GAAG,kEAAkE,CAAA;AAE/F;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,IAAM,sCAAsC,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;oBAChE,UAAU,CAAC,6CAA6C,CAAC,CAAA;oBAEnD,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;oBAClB,QAAQ,GAAG,wBAAiB,KAAK,CAAE,CAAA;oBACnC,QAAQ,GAAG,UAAG,QAAQ,aAAU,CAAA;oBAIhC,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;;;;oBAY5D,iBAAiB,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAA;oBAGpC,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;4BACjE,IAAI,EAAE,QAAQ;4BACd,WAAW,eAAO,oBAAoB,CAAE;yBACzC,CAAC,EAAA;;oBAHI,IAAI,GAAG,SAGX;oBACF,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;oBAGI,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,wBAAiB,KAAK,iBAAc;4BAC3C,0BAA0B,EAAE,IAAI;yBAC1B,CAAC,EAAA;;oBAHH,WAAW,GAAG,SAGX;oBACT,aAAa,GAAG,WAAW,CAAC,EAAE,CAAA;oBAC9B,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;wBAElG,yEAAyE;sBAFyB;;oBAAlG,SAAkG,CAAA;oBAG/E,qBAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;4BACpD,KAAK,EAAE,uBAAgB,KAAK,iBAAc;4BAC1C,0BAA0B,EAAE,IAAI;yBAC1B,CAAC,EAAA;;oBAHH,UAAU,GAAG,SAGV;oBACT,YAAY,GAAG,UAAU,CAAC,EAAE,CAAA;oBAC5B,qBAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;wBAEtG,iGAAiG;wBACjG,wEAAwE;sBAH8B;;oBAAtG,SAAsG,CAAA;oBAEtG,iGAAiG;oBACjG,wEAAwE;oBACxE,MAAM,CACJ,UAAU,CAAC,UAAU,KAAK,iBAAiB,EAC3C,uDAAgD,UAAU,CAAC,UAAU,yCAAiC,EACtG,6BAA6B,CAC9B,CAAA;oBACoB,qBAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAA;;oBAA5D,YAAY,GAAG,SAA6C;oBAC5C,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAA;;oBAAzD,aAAa,GAAG,SAAyC;oBAC/D,MAAM,CACJ,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;2BAC5D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EACvE,qDAA8C,QAAQ,uBAAa,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,uBAAa,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAG,EACxJ,iCAAiC,CAClC,CAAA;oBAED,mEAAmE;oBACnE,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAA;;oBADjF,mEAAmE;oBACnE,SAAiF,CAAA;oBACjF,qBAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;wBAE3B,sFAAsF;sBAF3D,CAAC,0BAA0B;;oBAAtD,SAA2B,CAAA,CAAC,0BAA0B;oBAGlC,qBAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAA;;oBAA3D,WAAW,GAAG,SAA6C;oBACjE,MAAM,CACJ,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EAChE,8DAAuD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,MAAG;0BACvF,qDAA8C,QAAQ,OAAI,EAC9D,4DAA4D,CAC7D,CAAA;oBAGoB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,EAAA;;oBAAxD,YAAY,GAAG,SAAyC;oBAC9D,MAAM,CACJ,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EACjE,iEAA0D,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,OAAI;0BAC5F,oBAAa,QAAQ,OAAI,EAC7B,oDAAoD,CACrD,CAAA;;;yBAGG,YAAY,EAAZ,yBAAY;;;;oBACR,qBAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,EAAA;;oBAAhD,SAAgD,CAAA;;;;;;yBAEpD,aAAa,EAAb,yBAAa;;;;oBACT,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,EAAA;;oBAA5C,SAA4C,CAAA;;;;;;yBAEhD,MAAM,EAAN,yBAAM;;;;oBACF,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,EAAA;;oBAA7D,SAA6D,CAAA;;;;;;;;;;CAGxE,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,sCAAsC,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAlE,SAAkE,CAAA;;;;SACnE,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAA;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,KAAK,CAAC,CAAA;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
+{"version":3,"file":"cascade-role-rename-cross-tenant.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/cascade-role-rename-cross-tenant.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAE5D,OAAO,EACL,aAAa,EAGb,qBAAqB,GACtB,MAAM,sBAAsB,CAAA;AAE7B,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,CAAC,IAAM,uCAAuC,GAAG;;;;;;gBAC/C,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;gBAE/F,KAAK,GAAG,UAAG,IAAI,CAAC,GAAG,EAAE,cAAI,IAAI,EAAE,CAAE,CAAA;gBACjC,QAAQ,GAAG,wBAAiB,KAAK,CAAE,CAAA;gBACnC,QAAQ,GAAG,UAAG,QAAQ,aAAU,CAAA;;;;gBAMpC,iGAAiG;gBACjG,2CAA2C;gBAC3C,CAAC;gBAAqB,qBAAM,OAAO,CAAC,GAAG,CAAC;wBACtC,qBAAqB,CAAC,EAAE,IAAI,EAAE,yBAAkB,IAAI,EAAE,CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;wBACnG,qBAAqB,CAAC,EAAE,IAAI,EAAE,yBAAkB,IAAI,EAAE,CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;qBACpG,CAAC,EAAA;;gBAHD,KAAqB,SAGpB,EAHA,OAAO,QAAA,EAAE,OAAO,QAAA,CAGhB;gBACI,QAAM,OAAO,CAAC,GAAG,CAAA;gBACjB,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAA;gBAGf,qBAAM,KAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;wBACjE,IAAI,EAAE,QAAQ;wBACd,WAAW,eAAO,oBAAoB,CAAE;qBACzC,CAAC;oBAEF,2FAA2F;oBAC3F,8FAA8F;oBAC9F,4FAA4F;oBAC5F,gBAAgB;kBALd;;gBAHI,IAAI,GAAG,SAGX;gBAMkB,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;wBAChD,KAAK,EAAE,wBAAiB,KAAK,iBAAc;wBAC3C,0BAA0B,EAAE,IAAI;qBAC1B,CAAC,EAAA;;gBAHH,gBAAc,SAGX;gBACT,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,aAAW,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;oBAEnG,yEAAyE;kBAF0B;;gBAAnG,SAAmG,CAAA;gBAGhF,qBAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;wBACpD,KAAK,EAAE,uBAAgB,KAAK,iBAAc;wBAC1C,0BAA0B,EAAE,IAAI;qBAC1B,CAAC,EAAA;;gBAHH,UAAU,GAAG,SAGV;gBACT,qBAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;oBAEvG,iGAAiG;oBACjG,wEAAwE;oBACxE,gGAAgG;oBAChG,+FAA+F;oBAC/F,gEAAgE;kBANuC;;gBAAvG,SAAuG,CAAA;gBAEvG,iGAAiG;gBACjG,wEAAwE;gBACxE,gGAAgG;gBAChG,+FAA+F;gBAC/F,gEAAgE;gBAChE,MAAM,CACJ,6BAA6B,EAC7B,UAAU,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EACzF,mBAAY,OAAO,CAAC,UAAU,uBAAa,OAAO,CAAC,UAAU,CAAE;sBAC3D,kCAA2B,UAAU,CAAC,UAAU,4DAAyD,CAC9G,CAAA;gBAEoB,qBAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAA;;gBAA7D,YAAY,GAAG,SAA8C;gBAC7C,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAW,CAAC,EAAE,CAAC,EAAA;;gBAA1D,aAAa,GAAG,SAA0C;gBAChE,MAAM,CACJ,iCAAiC,EACjC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;uBAC5D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EACvE,iCAA0B,QAAQ,6BAAc,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAE;sBAChF,mBAAY,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAE,CACtD,CAAA;gBAED,6FAA6F;gBAC7F,qBAAM,KAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;oBAElF,iGAAiG;oBACjG,6FAA6F;oBAC7F,gGAAgG;oBAChG,mDAAmD;kBAL+B;;gBADlF,6FAA6F;gBAC7F,SAAkF,CAAA;gBAM7D,qBAAM,gBAAgB,CACzC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAW,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,UAAA,CAAC,IAAI,OAAA,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAtD,CAAsD;oBAC3D,8FAA8F;oBAC9F,mFAAmF;oBACnF,gGAAgG;oBAChG,6FAA6F;oBAC7F,wBAAwB;oBACxB,EAAE,UAAU,EAAE,EAAE,EAAE,CACnB;oBAED,sFAAsF;kBAFrF;;gBATK,YAAY,GAAG,SASpB;gBAGmB,qBAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAA;;gBAA5D,WAAW,GAAG,SAA8C;gBAClE,MAAM,CACJ,4DAA4D,EAC5D,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EAChE,gCAAyB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,yBAAe,QAAQ,MAAG;sBAChF,kFAAsE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,MAAG,CAChH,CAAA;gBAED,kGAAkG;gBAClG,6FAA6F;gBAC7F,sCAAsC;gBACtC,MAAM,CACJ,oDAAoD,EACpD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,EACjE,iCAA0B,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,yBAAe,QAAQ,MAAG,CACvF,CAAA;;;sBAKiC,EAAlB,MAAC,OAAO,EAAE,OAAO,CAAC;;;qBAAlB,CAAA,cAAkB,CAAA;gBAAvB,CAAC;qBACN,CAAC,EAAD,yBAAC;;;;gBAAU,qBAAM,CAAC,CAAC,QAAQ,EAAE,EAAA;;gBAAlB,SAAkB,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;gBADrE,IAAkB,CAAA;;;qBAKpC,sBAAO,MAAM,EAAA;;;KACd,CAAA;AAED,8CAA8C;AAC9C,MAAM,CAAC,IAAM,sCAAsC,GAAG;;;;;gBACpD,KAAA,aAAa,CAAA;sBAAC,kCAAkC;gBAAE,qBAAM,uCAAuC,EAAE,EAAA;;gBAAjG,4BAAkD,SAA+C,GAAC,CAAA;;;;KACnG,CAAA;AAED,oGAAoG;AACpG,MAAM,CAAC,IAAM,cAAc,GAAkB;IAC3C,IAAI,EAAE,kCAAkC;IACxC,GAAG,EAAE,uCAAuC;CAC7C,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,sCAAsC,EAAE;SACrC,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAA;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,KAAK,CAAC,CAAA;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts

@@ -1,4 +1,4 @@
-import { Session } from "../../../sdk";
+import { Check, IsolatedSuite } from "../../setup_isolated";
 /**
  * Regression test: `/v1/data-sync` redaction.
  *
@@ -20,9 +20,14 @@ import { Session } from "../../../sdk";
  *
  * Pre-fix: assertion fails with leaked records.
  * Post-fix: assertion passes.
+ *
+ * Runs on its own provisioned tenant. It used to overwrite the SHARED non-admin user's roles with
+ * this deliberately over-permissive role and restore them in a finally, so a crash stranded the
+ * fixture user on it; the mutated user is now this tenant's own, and it is thrown away at teardown.
  */
-export declare const data_sync_redaction_bypass_tests: ({ sdk, sdkNonAdmin }: {
-    sdk: Session;
-    sdkNonAdmin: Session;
-}) => Promise<void>;
+export declare const data_sync_redaction_bypass_checks: () => Promise<Check[]>;
+/** Asserting wrapper, for standalone runs. */
+export declare const data_sync_redaction_bypass_tests: () => Promise<void>;
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+export declare const ISOLATED_SUITE: IsolatedSuite;
 //# sourceMappingURL=data-sync-redaction-bypass.test.d.ts.map

package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"data-sync-redaction-bypass.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/data-sync-redaction-bypass.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAwCtC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,gCAAgC;SAAwC,OAAO;iBAAe,OAAO;mBAqJjH,CAAA"}
+{"version":3,"file":"data-sync-redaction-bypass.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/data-sync-redaction-bypass.test.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,EACL,aAAa,EAEd,MAAM,sBAAsB,CAAA;AAmC7B;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,iCAAiC,QAAa,QAAQ,KAAK,EAAE,CA6MzE,CAAA;AAED,8CAA8C;AAC9C,eAAO,MAAM,gCAAgC,qBAE5C,CAAA;AAED,oGAAoG;AACpG,eAAO,MAAM,cAAc,EAAE,aAG5B,CAAA"}