@tellescope/sdk 2.0.0-beta.1 → 2.0.0-beta.3

package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"data-sync-redaction-bypass.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/data-sync-redaction-bypass.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,oCAAsC;AACtC,+CAI4B;AAC5B,qCAAyC;AACzC,mDAA4D;AAE5D,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAC9D,IAAA,KAAoC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAhG,aAAa,QAAA,EAAE,gBAAgB,QAAiE,CAAA;AAEvG,IAAM,WAAW,GAAG,EAAE,MAAM,EAAE,KAAc,EAAE,IAAI,EAAE,KAAc,EAAE,MAAM,EAAE,KAAc,EAAE,MAAM,EAAE,KAAc,EAAE,CAAA;AAEpH,uEAAuE;AACvE,qEAAqE;AACrE,IAAM,0BAA0B,GAA6B;IAC3D,KAAK,EAAK,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC5C,QAAQ,EAAE,CAAC,gBAAgB,CAAC;CAC7B,CAAA;AAID,IAAM,iBAAiB,GAAG,UAAC,OAAgE;IACzF,IAAM,UAAU,GAAgB,EAAE,CAAA;IAClC,KAAqB,UAAO,EAAP,mBAAO,EAAP,qBAAO,EAAP,IAAO,EAAE;QAAzB,IAAM,MAAM,gBAAA;QACf,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,SAAQ;QACvD,IAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC3D,IAAI,CAAC,MAAM;YAAE,SAAQ;QACrB,IAAI,MAAM,SAAK,CAAA;QACf,IAAI;YAAE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;SAAE;QAAC,WAAM;YAAE,SAAQ;SAAE;QAC3D,KAAgB,UAAM,EAAN,iBAAM,EAAN,oBAAM,EAAN,IAAM,EAAE;YAAnB,IAAM,CAAC,eAAA;YACV,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpF,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;aAC5F;SACF;KACF;IACD,OAAO,UAAU,CAAA;AACnB,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACI,IAAM,gCAAgC,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;oBACvE,IAAA,oBAAU,EAAC,iDAAiD,CAAC,CAAA;oBAEvD,QAAQ,GAAG,iCAA0B,IAAI,CAAC,GAAG,EAAE,CAAE,CAAA;oBAGjD,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAA;;;;oBAMjC,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;4BACjE,IAAI,EAAE,QAAQ;4BACd,WAAW,wBACN,gCAAoB,KACvB,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,WAAW,GACtB;4BACD,oEAAoE;yBACrE,CAAC,EAAA;;oBARI,IAAI,GAAG,SAQX;oBACF,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;oBAEhB,sEAAsE;oBACtE,8CAA8C;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAC3B,WAAW,CAAC,QAAQ,CAAC,EAAE,EACvB,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,EACrB,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAC9B,EAAA;;oBAND,sEAAsE;oBACtE,8CAA8C;oBAC9C,SAIC,CAAA;oBACD,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;oBAA3B,SAA2B,CAAA;oBAC3B,qBAAM,WAAW,CAAC,YAAY,CAAC,aAAc,EAAE,gBAAiB,CAAC;wBAEjE,+DAA+D;wBAC/D,2EAA2E;wBAC3E,iBAAiB;sBAJgD;;oBAAjE,SAAiE,CAAA;oBAK7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BACnD,KAAK,EAAE,aAAa;4BACpB,KAAK,EAAE,SAAS;4BAChB,KAAK,EAAE,uBAAgB,IAAI,CAAC,GAAG,EAAE,iBAAc;yBAChD,CAAC,EAAA;;oBAJI,WAAW,GAAG,SAIlB;oBACF,aAAa,GAAG,WAAW,CAAC,EAAE,CAAA;oBAC9B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAC;wBAE9F,wEAAwE;wBACxE,wEAAwE;wBACxE,0EAA0E;sBAJoB;;oBAA9F,SAA8F,CAAA;oBAE9F,wEAAwE;oBACxE,wEAAwE;oBACxE,0EAA0E;oBAE1E,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,GAAG,CAAC;wBAE1B,yEAAyE;wBACzE,oCAAoC;sBAHV;;oBAJ1B,wEAAwE;oBACxE,wEAAwE;oBACxE,0EAA0E;oBAE1E,SAA0B,CAAA;oBAIb,qBAAM,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;wBAE1D,4EAA4E;sBAFlB;;oBAApD,SAAO,SAA6C;oBAGpD,eAAa,iBAAiB,CAAC,MAAI,CAAC,OAAO,CAAC,CAAA;oBAK5C,wBAAsB,MAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,SAAS,KAAK,OAAO,EAAvB,CAAuB,CAAC,CAAC,MAAM,CAAA;oBACpF,qBAAM,IAAA,oBAAU,EACd,oEAAoE,EACpE;4BAAY,sBAAA,CAAC,EAAE,WAAW,EAAE,qBAAmB,EAAE,YAAY,EAAE,MAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAA;iCAAA,EACrF,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,WAAW,IAAI,CAAC,EAAlB,CAAkB,EAAE,CACtC,EAAA;;oBAJD,SAIC,CAAA;oBAED,qBAAM,IAAA,oBAAU,EACd,8EAA8E,EAC9E;;gCAAY,sBAAA,CAAC;wCACX,cAAc,EAAE,YAAU,CAAC,MAAM;wCACjC,UAAU,EAAE,YAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;wCACnC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAU,CAAC,GAAG,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,SAAS,EAAX,CAAW,CAAC,CAAC,CAAC;wCACrE,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAU,CAAC,GAAG,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,WAAW,EAAb,CAAa,CAAC,CAAC,CAAC;qCACxE,CAAC,EAAA;;6BAAA,EACF,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,cAAc,KAAK,CAAC,EAAtB,CAAsB,EAAE,CAC1C;wBAED,2EAA2E;wBAC3E,kFAAkF;wBAClF,+EAA+E;wBAC/E,+CAA+C;wBAC/C,2EAA2E;wBAE3E,+EAA+E;wBAC/E,kFAAkF;wBAClF,4FAA4F;wBAC5F,uFAAuF;sBAXtF;;oBATD,SASC,CAAA;oBAYiB,qBAAM,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAA;;oBAAjD,SAAS,GAAG,SAAqC;oBACjD,oBAAkB,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;oBAC5D,qBAAM,IAAA,oBAAU,EACd,yFAAyF,EACzF;;gCAAY,sBAAA,CAAC;wCACX,cAAc,EAAE,iBAAe,CAAC,MAAM;wCACtC,UAAU,EAAE,iBAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;qCACzC,CAAC,EAAA;;6BAAA,EACF,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,cAAc,KAAK,CAAC,EAAtB,CAAsB,EAAE,CAC1C;wBAED,iFAAiF;wBACjF,0FAA0F;wBAC1F,+EAA+E;wBAC/E,6EAA6E;wBAC7E,qEAAqE;sBANpE;;oBAPD,SAOC,CAAA;oBAOK,uBAAqB,MAAI,CAAC,OAAO,CAAC,MAAM,CAC5C,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAjE,CAAiE,CACvE,CAAA;oBACK,uBAA6C,EAAE,CAAA;oBACrD,WAAuC,EAAlB,uBAAA,oBAAkB,EAAlB,gCAAkB,EAAlB,IAAkB,EAAE;wBAA9B,MAAM;wBACf,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;4BAAE,SAAQ;wBACvD,IAAI;4BACI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;4BACtC,IAAI,qBAAqB,IAAI,MAAM,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE;gCAC/E,oBAAkB,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;6BACvD;yBACF;wBAAC,WAAM,GAAE;qBACX;oBACD,qBAAM,IAAA,oBAAU,EACd,gFAAgF,EAChF;;gCAAY,sBAAA,CAAC;wCACX,gBAAgB,EAAE,oBAAkB,CAAC,MAAM;wCAC3C,SAAS,EAAE,oBAAkB,CAAC,MAAM;wCACpC,KAAK,EAAE,oBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;qCACtC,CAAC,EAAA;;6BAAA,EACF,EAAE,QAAQ,EAAE,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,SAAS,KAAK,CAAC,EAAjB,CAAiB,EAAE,CACrC,EAAA;;oBARD,SAQC,CAAA;;;;oBAIC,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAC3B,WAAW,CAAC,QAAQ,CAAC,EAAE,EACvB,EAAE,KAAK,EAAE,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,EAAE,EAAE,EAC9B,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAC9B,EAAA;;oBAJD,SAIC,CAAA;;;;;;yBAEC,MAAM,EAAN,yBAAM;;;;oBACF,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,EAAA;;oBAA7D,SAA6D,CAAA;;;;;;yBAEjE,aAAa,EAAb,yBAAa;;;;oBACT,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,EAAA;;oBAA/C,SAA+C,CAAA;;;;;;gBAEvD,wEAAwE;gBACxE,+BAA+B;gBAC/B,sFAAsF;gBACtF,sFAAsF;gBACtF,iFAAiF;gBACjF,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;oBAL3B,wEAAwE;oBACxE,+BAA+B;oBAC/B,sFAAsF;oBACtF,sFAAsF;oBACtF,iFAAiF;oBACjF,SAA2B,CAAA;;;;oBACrB,qBAAM,WAAW,CAAC,YAAY,CAAC,aAAc,EAAE,gBAAiB,CAAC,EAAA;;oBAAjE,SAAiE,CAAA;;;;;;;;;;CAE1E,CAAA;AArJY,QAAA,gCAAgC,oCAqJ5C;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,wCAAgC,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAA5D,SAA4D,CAAA;;;;SAC7D,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAA;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAA;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
+{"version":3,"file":"data-sync-redaction-bypass.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/data-sync-redaction-bypass.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,+CAE4B;AAC5B,uDAK6B;AAC7B,mDAA4D;AAE5D,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D,IAAM,WAAW,GAAG,EAAE,MAAM,EAAE,KAAc,EAAE,IAAI,EAAE,KAAc,EAAE,MAAM,EAAE,KAAc,EAAE,MAAM,EAAE,KAAc,EAAE,CAAA;AAEpH,uEAAuE;AACvE,qEAAqE;AACrE,IAAM,0BAA0B,GAA6B;IAC3D,KAAK,EAAK,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC5C,QAAQ,EAAE,CAAC,gBAAgB,CAAC;CAC7B,CAAA;AAID,IAAM,iBAAiB,GAAG,UAAC,OAAgE;IACzF,IAAM,UAAU,GAAgB,EAAE,CAAA;IAClC,KAAqB,UAAO,EAAP,mBAAO,EAAP,qBAAO,EAAP,IAAO,EAAE;QAAzB,IAAM,MAAM,gBAAA;QACf,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,SAAQ;QACvD,IAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC3D,IAAI,CAAC,MAAM;YAAE,SAAQ;QACrB,IAAI,MAAM,SAAK,CAAA;QACf,IAAI;YAAE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;SAAE;QAAC,WAAM;YAAE,SAAQ;SAAE;QAC3D,KAAgB,UAAM,EAAN,iBAAM,EAAN,oBAAM,EAAN,IAAM,EAAE;YAAnB,IAAM,CAAC,eAAA;YACV,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpF,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAA;aAC5F;SACF;KACF;IACD,OAAO,UAAU,CAAA;AACnB,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACI,IAAM,iCAAiC,GAAG;;;;;gBACzC,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;gBAI/F,QAAQ,GAAG,UAAC,KAAU;oBAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;wBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;oBAC/D,IAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;oBACzC,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;gBAChE,CAAC,CAAA;gBACK,YAAY,GAAG,UAAC,CAAM,IAAa,OAAA,CACvC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,CAAA,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC7E,EAFwC,CAExC,CAAA;gBAUK,aAAa,GAAG,UAAW,KAAa,EAAE,EAAoB,EAAE,QAA2B;;;;;;;;gCAGzE,qBAAM,EAAE,EAAE,EAAA;;gCAA9B,QAAQ,IAAK,QAAK,GAAE,SAAU,KAAE,CAAA;;;;gCAEhC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,yCAAkC,YAAY,CAAC,GAAC,CAAC,CAAE,CAAC,CAAA;gCACzE,sBAAM;;gCAGA,KAAK,GAAK,QAAQ,MAAb,CAAa;gCAC1B,IAAI;oCACF,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAU,QAAQ,CAAC,KAAK,CAAC,CAAE,CAAC,CAAA;iCAC5D;gCAAC,OAAO,cAAmB,EAAE;oCAC5B,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,oCAA6B,QAAQ,CAAC,KAAK,CAAC,eAAK,YAAY,CAAC,cAAc,CAAC,CAAE,CAAC,CAAA;iCACtG;;;;qBACF,CAAA;gBAEK,QAAQ,GAAG,iCAA0B,IAAI,EAAE,CAAE,CAAA;;;;gBAKxC,qBAAM,IAAA,sCAAqB,EAAC;wBACnC,IAAI,EAAE,oCAA6B,IAAI,EAAE,CAAE;wBAC3C,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;wBACpD,OAAO,EAAE,CAAC;qBACX,CAAC,EAAA;;gBAJF,MAAM,GAAG,SAIP,CAAA;gBACM,QAAqB,MAAM,IAAxB,EAAE,WAAW,GAAK,MAAM,YAAX,CAAW;gBAC7B,KAAoB,MAAM,CAAC,KAAK,EAA/B,eAAK,EAAE,kBAAQ,CAAgB;gBAEtC,kEAAkE;gBAClE,qEAAqE;gBACrE,sDAAsD;gBACtD,qBAAM,KAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;wBACpD,IAAI,EAAE,QAAQ;wBACd,WAAW,wBACN,gCAAoB,KACvB,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,WAAW,GACtB;wBACD,oEAAoE;qBACrE,CAAC;oBAEF,oFAAoF;oBACpF,8CAA8C;kBAH5C;;gBAXF,kEAAkE;gBAClE,qEAAqE;gBACrE,sDAAsD;gBACtD,SAQE,CAAA;gBAEF,oFAAoF;gBACpF,8CAA8C;gBAC9C,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAC3B,UAAQ,CAAC,EAAE,EACX,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,EACrB,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAC9B,EAAA;;gBAND,oFAAoF;gBACpF,8CAA8C;gBAC9C,SAIC,CAAA;gBACD,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;gBAA3B,SAA2B,CAAA;gBAC3B,qBAAM,WAAW,CAAC,YAAY,CAAC,UAAQ,CAAC,KAAK,EAAE,UAAQ,CAAC,QAAQ,CAAC;oBAEjE,8FAA8F;oBAC9F,8FAA8F;oBAC9F,8FAA8F;oBAC9F,iCAAiC;oBACjC,EAAE;oBACF,2FAA2F;oBAC3F,6FAA6F;oBAC7F,8FAA8F;oBAC9F,8FAA8F;oBAC9F,4EAA4E;kBAXX;;gBAAjE,SAAiE,CAAA;gBAEjE,8FAA8F;gBAC9F,8FAA8F;gBAC9F,8FAA8F;gBAC9F,iCAAiC;gBACjC,EAAE;gBACF,2FAA2F;gBAC3F,6FAA6F;gBAC7F,8FAA8F;gBAC9F,8FAA8F;gBAC9F,4EAA4E;gBAC5E,qBAAM,KAAG,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,EAAA;;gBAV3F,8FAA8F;gBAC9F,8FAA8F;gBAC9F,8FAA8F;gBAC9F,iCAAiC;gBACjC,EAAE;gBACF,2FAA2F;gBAC3F,6FAA6F;gBAC7F,8FAA8F;gBAC9F,8FAA8F;gBAC9F,4EAA4E;gBAC5E,SAA2F,CAAA;gBAC3F,qBAAM,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,EAAE,WAAW,EAAE,OAAK,CAAC,KAAK,EAAE,CAAC,EAAA;;gBAAvF,SAAuF,CAAA;gBACvF,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;oBAEnE,4FAA4F;oBAC5F,kFAAkF;oBAClF,4FAA4F;oBAC5F,yEAAyE;kBALN;;gBAAnE,SAAmE,CAAA;gBAEnE,4FAA4F;gBAC5F,kFAAkF;gBAClF,4FAA4F;gBAC5F,yEAAyE;gBACzE,qBAAM,aAAa,CACjB,gFAAgF,EAChF,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAK,CAAC,EAAE,CAAC,EAA9B,CAA8B,EACpC,UAAA,CAAC,YAAI,OAAA,CAAC,MAAC,CAAS,CAAC,mBAAmB,mCAAI,EAAE,CAAC,CAAC,IAAI,CAAC,UAAC,CAAM,IAAK,OAAA,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,MAAM,MAAK,UAAQ,CAAC,EAAE,EAAzB,CAAyB,CAAC,CAAA,EAAA,CACxF;oBAED,+DAA+D;oBAC/D,2EAA2E;oBAC3E,iBAAiB;kBAJhB;;gBARD,4FAA4F;gBAC5F,kFAAkF;gBAClF,4FAA4F;gBAC5F,yEAAyE;gBACzE,SAIC,CAAA;gBAKmB,qBAAM,KAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;wBACnD,KAAK,EAAE,aAAa;wBACpB,KAAK,EAAE,SAAS;wBAChB,KAAK,EAAE,uBAAgB,IAAI,CAAC,GAAG,EAAE,iBAAc;qBAChD,CAAC,EAAA;;gBAJI,WAAW,GAAG,SAIlB;gBACF,qBAAM,KAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE,CAAC;oBAE9F,wEAAwE;oBACxE,wEAAwE;oBACxE,0EAA0E;kBAJoB;;gBAA9F,SAA8F,CAAA;gBAE9F,wEAAwE;gBACxE,wEAAwE;gBACxE,0EAA0E;gBAE1E,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,GAAG,CAAC;oBAE1B,yEAAyE;oBACzE,oCAAoC;kBAHV;;gBAJ1B,wEAAwE;gBACxE,wEAAwE;gBACxE,0EAA0E;gBAE1E,SAA0B,CAAA;gBAIb,qBAAM,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAE1D,4EAA4E;kBAFlB;;gBAApD,SAAO,SAA6C;gBAGpD,eAAa,iBAAiB,CAAC,MAAI,CAAC,OAAO,CAAC,CAAA;gBAK5C,wBAAsB,MAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,SAAS,KAAK,OAAO,EAAvB,CAAuB,CAAC,CAAC,MAAM,CAAA;gBACpF,qBAAM,aAAa,CACjB,oEAAoE,EACpE;wBAAY,sBAAA,CAAC,EAAE,WAAW,EAAE,qBAAmB,EAAE,YAAY,EAAE,MAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAA;6BAAA,EACrF,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,WAAW,IAAI,CAAC,EAAlB,CAAkB,CACxB,EAAA;;gBAJD,SAIC,CAAA;gBAED,qBAAM,aAAa,CACjB,8EAA8E,EAC9E;;4BAAY,sBAAA,CAAC;oCACX,cAAc,EAAE,YAAU,CAAC,MAAM;oCACjC,UAAU,EAAE,YAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;oCACnC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAU,CAAC,GAAG,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,SAAS,EAAX,CAAW,CAAC,CAAC,CAAC;oCACrE,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAU,CAAC,GAAG,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,WAAW,EAAb,CAAa,CAAC,CAAC,CAAC;iCACxE,CAAC,EAAA;;yBAAA,EACF,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,cAAc,KAAK,CAAC,EAAtB,CAAsB,CAC5B;oBAED,2EAA2E;oBAC3E,kFAAkF;oBAClF,+EAA+E;oBAC/E,+CAA+C;oBAC/C,2EAA2E;oBAE3E,+EAA+E;oBAC/E,kFAAkF;oBAClF,4FAA4F;oBAC5F,uFAAuF;kBAXtF;;gBATD,SASC,CAAA;gBAYiB,qBAAM,KAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAA;;gBAAjD,SAAS,GAAG,SAAqC;gBACjD,oBAAkB,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;gBAC5D,qBAAM,aAAa,CACjB,yFAAyF,EACzF;;4BAAY,sBAAA,CAAC;oCACX,cAAc,EAAE,iBAAe,CAAC,MAAM;oCACtC,UAAU,EAAE,iBAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iCACzC,CAAC,EAAA;;yBAAA,EACF,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,cAAc,KAAK,CAAC,EAAtB,CAAsB,CAC5B;oBAED,iFAAiF;oBACjF,0FAA0F;oBAC1F,+EAA+E;oBAC/E,6EAA6E;oBAC7E,qEAAqE;oBACrE,4FAA4F;oBAC5F,+BAA+B;kBAR9B;;gBAPD,SAOC,CAAA;gBASK,uBAAqB,MAAI,CAAC,OAAO,CAAC,MAAM,CAC5C,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAQ,CAAC,EAAE,EAArD,CAAqD,CAC3D,CAAA;gBACK,uBAA6C,EAAE,CAAA;gBACrD,WAA2C,EAAlB,uBAAA,oBAAkB,EAAlB,gCAAkB,EAAlB,IAAkB,EAAE;oBAAlC,UAAU;oBACnB,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;wBAAE,SAAQ;oBAC/D,IAAI;wBACI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;wBAC1C,IAAI,qBAAqB,IAAI,MAAM,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE;4BAC/E,oBAAkB,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAA;yBAC3D;qBACF;oBAAC,WAAM,GAAE;iBACX;gBACD,qBAAM,aAAa,CACjB,gFAAgF,EAChF;;4BAAY,sBAAA,CAAC;oCACX,gBAAgB,EAAE,oBAAkB,CAAC,MAAM;oCAC3C,mBAAmB,EAAE,oBAAkB,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,QAAQ,KAAK,OAAK,CAAC,EAAE,EAAvB,CAAuB,CAAC;oCAC1E,SAAS,EAAE,oBAAkB,CAAC,MAAM;oCACpC,KAAK,EAAE,oBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iCACtC,CAAC,EAAA;;yBAAA;oBACF,4FAA4F;oBAC5F,kBAAkB;oBAClB,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,EAA1C,CAA0C,CAChD,EAAA;;gBAXD,SAWC,CAAA;;;qBAGG,MAAM,EAAN,yBAAM;;;;gBACF,qBAAM,MAAM,CAAC,QAAQ,EAAE,EAAA;;gBAAvB,SAAuB,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;qBAInF,sBAAO,MAAM,EAAA;;;KACd,CAAA;AA7MY,QAAA,iCAAiC,qCA6M7C;AAED,8CAA8C;AACvC,IAAM,gCAAgC,GAAG;;;;;gBAC9C,KAAA,8BAAa,CAAA;sBAAC,kCAAkC;gBAAE,qBAAM,IAAA,yCAAiC,GAAE,EAAA;;gBAA3F,4BAAkD,SAAyC,GAAC,CAAA;;;;KAC7F,CAAA;AAFY,QAAA,gCAAgC,oCAE5C;AAED,oGAAoG;AACvF,QAAA,cAAc,GAAkB;IAC3C,IAAI,EAAE,kCAAkC;IACxC,GAAG,EAAE,yCAAiC;CACvC,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAA,wCAAgC,GAAE;SAC/B,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAA;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAA;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts

@@ -1,4 +1,4 @@
-import { Session } from "../../../sdk";
+import { Check, IsolatedSuite } from "../../setup_isolated";
 /**
  * Regression test: the `develop_health_run_benefit_verification` RBAC gate.
  *
@@ -22,9 +22,16 @@ import { Session } from "../../../sdk";
  * check never fires. Test fails (no access-denial signal).
  *
  * Post-fix: the handler throws 403 before touching `DB.endusers` at all. Test passes.
+ *
+ * Runs on its own provisioned tenant: both roles below are assigned to a throwaway non-admin
+ * rather than to the SHARED fixture user, whose permissions were previously arbitrary for every
+ * concurrent suite while this ran (and stayed broken if either cleanup crashed). A freshly
+ * provisioned tenant also has no Develop Health integration, which is what the positive control
+ * below depends on — on the shared org that was whatever the last developer left behind.
  */
-export declare const develop_health_benefit_verification_rbac_tests: ({ sdk, sdkNonAdmin }: {
-    sdk: Session;
-    sdkNonAdmin: Session;
-}) => Promise<void>;
+export declare const develop_health_benefit_verification_rbac_checks: () => Promise<Check[]>;
+/** Asserting wrapper, for standalone runs. */
+export declare const develop_health_benefit_verification_rbac_tests: () => Promise<void>;
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+export declare const ISOLATED_SUITE: IsolatedSuite;
 //# sourceMappingURL=develop-health-benefit-verification-rbac.test.d.ts.map

package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"develop-health-benefit-verification-rbac.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/develop-health-benefit-verification-rbac.test.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAYtC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,8CAA8C;SAAwC,OAAO;iBAAe,OAAO;mBA6I/H,CAAA"}
+{"version":3,"file":"develop-health-benefit-verification-rbac.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/develop-health-benefit-verification-rbac.test.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,EACL,aAAa,EAEd,MAAM,sBAAsB,CAAA;AAO7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,+CAA+C,QAAa,QAAQ,KAAK,EAAE,CA6JvF,CAAA;AAED,8CAA8C;AAC9C,eAAO,MAAM,8CAA8C,qBAE1D,CAAA;AAED,oGAAoG;AACpG,eAAO,MAAM,cAAc,EAAE,aAG5B,CAAA"}

package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js

@@ -47,15 +47,14 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.develop_health_benefit_verification_rbac_tests = void 0;
+exports.ISOLATED_SUITE = exports.develop_health_benefit_verification_rbac_tests = exports.develop_health_benefit_verification_rbac_checks = void 0;
 require('source-map-support').install();
 var bson_1 = require("bson");
-var sdk_1 = require("../../../sdk");
 var testing_1 = require("@tellescope/testing");
-var setup_1 = require("../../setup");
+var setup_isolated_1 = require("../../setup_isolated");
 var constants_1 = require("@tellescope/constants");
 var host = process.env.API_URL || 'http://localhost:8080';
-var _a = [process.env.NON_ADMIN_EMAIL, process.env.NON_ADMIN_PASSWORD], nonAdminEmail = _a[0], nonAdminPassword = _a[1];
+var RAND = function () { return Math.random().toString(36).slice(2, 10); };
 /**
  * Regression test: the `develop_health_run_benefit_verification` RBAC gate.
  *
@@ -79,229 +78,235 @@ var _a = [process.env.NON_ADMIN_EMAIL, process.env.NON_ADMIN_PASSWORD], nonAdmin
  * check never fires. Test fails (no access-denial signal).
  *
  * Post-fix: the handler throws 403 before touching `DB.endusers` at all. Test passes.
+ *
+ * Runs on its own provisioned tenant: both roles below are assigned to a throwaway non-admin
+ * rather than to the SHARED fixture user, whose permissions were previously arbitrary for every
+ * concurrent suite while this ran (and stayed broken if either cleanup crashed). A freshly
+ * provisioned tenant also has no Develop Health integration, which is what the positive control
+ * below depends on — on the shared org that was whatever the last developer left behind.
  */
-var develop_health_benefit_verification_rbac_tests = function (_a) {
-    var sdk = _a.sdk, sdkNonAdmin = _a.sdkNonAdmin;
-    return __awaiter(void 0, void 0, void 0, function () {
-        var roleName, rbapId, originalRoles, rbap, providerRoleName, providerRbapId, providerRbap, _b, _c, _d, _e, _f, _g;
-        return __generator(this, function (_h) {
-            switch (_h.label) {
-                case 0:
-                    (0, testing_1.log_header)("develop_health benefit verification RBAC regression");
-                    roleName = "f0006-develop-health-no-access-".concat(Date.now());
-                    originalRoles = sdkNonAdmin.userInfo.roles;
-                    _h.label = 1;
-                case 1:
-                    _h.trys.push([1, , 27, 40]);
-                    return [4 /*yield*/, sdk.api.role_based_access_permissions.createOne({
-                            role: roleName,
-                            permissions: __assign(__assign({}, constants_1.PROVIDER_PERMISSIONS), { endusers: { create: null, read: null, update: null, delete: null }, enduser_eligibility_results: { create: null, read: null, update: null, delete: null } }),
-                        })];
-                case 2:
-                    rbap = _h.sent();
-                    rbapId = rbap.id;
-                    // 2. Assign the role to the non-admin user and re-authenticate so the new
-                    //    session reflects the role's denied permissions.
-                    return [4 /*yield*/, sdk.api.users.updateOne(sdkNonAdmin.userInfo.id, { roles: [roleName] }, { replaceObjectFields: true })];
-                case 3:
-                    // 2. Assign the role to the non-admin user and re-authenticate so the new
-                    //    session reflects the role's denied permissions.
-                    _h.sent();
-                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 1500)];
-                case 4:
-                    _h.sent();
-                    return [4 /*yield*/, sdkNonAdmin.authenticate(nonAdminEmail, nonAdminPassword)
-                        // 3. develop_health_run_benefit_verification must throw 403 BEFORE any enduser lookup.
-                        //    Pre-fix: proceeds to DB.endusers.findById and either 400s on validation (fake id) or
-                        //    succeeds and forwards PHI to Develop Health (real id) — never a 403.
-                    ];
-                case 5:
-                    _h.sent();
-                    // 3. develop_health_run_benefit_verification must throw 403 BEFORE any enduser lookup.
-                    //    Pre-fix: proceeds to DB.endusers.findById and either 400s on validation (fake id) or
-                    //    succeeds and forwards PHI to Develop Health (real id) — never a 403.
-                    return [4 /*yield*/, (0, testing_1.async_test)("enduser_eligibility_results.develop_health_run_benefit_verification must throw 403 when role denies endusers/enduser_eligibility_results", function () { return sdkNonAdmin.api.enduser_eligibility_results.develop_health_run_benefit_verification({
-                            enduserId: new bson_1.ObjectId().toHexString(),
-                            providerUserId: new bson_1.ObjectId().toHexString(),
-                            insuranceType: 'primary',
-                            diagnoses: [],
-                            // drugs uses a plain (non-empty-ok) list validator, so a real-shaped entry is required
-                            // to pass request validation and actually reach the handler's access check.
-                            drugs: [{ name: 'Test Drug', dosage: '10mg', quantity: 1 }],
-                            drug_history: { currently_taking_drugs: [], previously_taken_drugs: [] },
-                        }); }, {
-                            shouldError: true,
-                            onError: function (e) {
-                                var _a;
-                                // Match the gate's exact message. The SDK error surfaces { message, info } (no top-level
-                                // status/code), so we key on the message rather than the HTTP status. This is deliberately
-                                // specific: a lapsed subscription ("Your subscription has expired") or an expired token
-                                // ("Unauthenticated") also errors BEFORE the handler runs, but neither contains this string,
-                                // so the test can't false-pass without the gate executing. Also reject the pre-fix
-                                // downstream messages, which would indicate the access check never fired.
-                                var msg = ((_a = e === null || e === void 0 ? void 0 : e.message) !== null && _a !== void 0 ? _a : '').toLowerCase();
-                                if (msg.includes('integration not found') || msg.includes('enduser is required')
-                                    || msg.includes('organization') || msg.includes('provider')) {
-                                    return false; // reached past the access gate — regression
+var develop_health_benefit_verification_rbac_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var checks, record, describe, errorMessage, expect_rejected, roleName, providerRoleName, tenant, sdk, sdkNonAdmin_1, nonAdmin, e_1;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                checks = [];
+                record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
+                describe = function (value) {
+                    if (value === undefined || value === null)
+                        return String(value);
+                    var stringified = JSON.stringify(value);
+                    return stringified === undefined ? String(value) : stringified;
+                };
+                errorMessage = function (e) { return (typeof (e === null || e === void 0 ? void 0 : e.message) === 'string' && e.message !== '' ? e.message : describe(e)); };
+                expect_rejected = function (label, fn, onError) { return __awaiter(void 0, void 0, void 0, function () {
+                    var rejection, unexpected, e_2, e;
+                    return __generator(this, function (_a) {
+                        switch (_a.label) {
+                            case 0:
+                                _a.trys.push([0, 2, , 3]);
+                                return [4 /*yield*/, fn()];
+                            case 1:
+                                unexpected = _a.sent();
+                                record(label, false, "resolved instead of rejecting; result=".concat(describe(unexpected)));
+                                return [2 /*return*/];
+                            case 2:
+                                e_2 = _a.sent();
+                                rejection = { e: e_2 };
+                                return [3 /*break*/, 3];
+                            case 3:
+                                e = rejection.e;
+                                try {
+                                    record(label, onError(e), "rejected with ".concat(errorMessage(e)));
                                 }
-                                return msg.includes('access to this resource');
-                            },
-                        })
-                        // 4. POSITIVE case: a provider role WITH enduser access must PASS the gate and reach the
-                        //    integration stage (this test org has no Develop Health integration, so it 400s with
-                        //    "Integration not found"). This guards against the gate over-blocking legitimate users —
-                        //    the failure mode a future tightening (e.g. gating on 'All') would introduce.
-                    ];
-                case 6:
+                                catch (predicateError) {
+                                    record(label, false, "predicate threw on rejection \"".concat(errorMessage(e), "\": ").concat(errorMessage(predicateError)));
+                                }
+                                return [2 /*return*/];
+                        }
+                    });
+                }); };
+                roleName = "f0006-develop-health-no-access-".concat(RAND());
+                providerRoleName = "f0006-develop-health-provider-".concat(RAND());
+                _a.label = 1;
+            case 1:
+                _a.trys.push([1, , 13, 18]);
+                return [4 /*yield*/, (0, setup_isolated_1.setup_isolated_tenant)({
+                        name: "develop_health benefit verification RBAC ".concat(RAND()),
+                        users: [{ isAdmin: true }, { roles: ['Non-Admin'] }],
+                        apiKeys: 0,
+                    })];
+            case 2:
+                tenant = _a.sent();
+                sdk = tenant.sdk, sdkNonAdmin_1 = tenant.sdkNonAdmin;
+                nonAdmin = tenant.users[1];
+                // 1. Create a role that explicitly denies endusers access AND enduser_eligibility_results
+                //    access. This is the realistic configuration the bypass affects: a tenant operator
+                //    deliberately restricts a role from reading enduser PHI (e.g. for PHI-restricted
+                //    integration/API-key roles).
+                return [4 /*yield*/, sdk.api.role_based_access_permissions.createOne({
+                        role: roleName,
+                        permissions: __assign(__assign({}, constants_1.PROVIDER_PERMISSIONS), { endusers: { create: null, read: null, update: null, delete: null }, enduser_eligibility_results: { create: null, read: null, update: null, delete: null } }),
+                    })
+                    // 2. Assign the role to this tenant's own non-admin user and re-authenticate so the new
+                    //    session reflects the role's denied permissions.
+                ];
+            case 3:
+                // 1. Create a role that explicitly denies endusers access AND enduser_eligibility_results
+                //    access. This is the realistic configuration the bypass affects: a tenant operator
+                //    deliberately restricts a role from reading enduser PHI (e.g. for PHI-restricted
+                //    integration/API-key roles).
+                _a.sent();
+                // 2. Assign the role to this tenant's own non-admin user and re-authenticate so the new
+                //    session reflects the role's denied permissions.
+                return [4 /*yield*/, sdk.api.users.updateOne(nonAdmin.id, { roles: [roleName] }, { replaceObjectFields: true })];
+            case 4:
+                // 2. Assign the role to this tenant's own non-admin user and re-authenticate so the new
+                //    session reflects the role's denied permissions.
+                _a.sent();
+                return [4 /*yield*/, (0, testing_1.wait)(undefined, 1500)];
+            case 5:
+                _a.sent();
+                return [4 /*yield*/, sdkNonAdmin_1.authenticate(nonAdmin.email, nonAdmin.password)
                     // 3. develop_health_run_benefit_verification must throw 403 BEFORE any enduser lookup.
                     //    Pre-fix: proceeds to DB.endusers.findById and either 400s on validation (fake id) or
                     //    succeeds and forwards PHI to Develop Health (real id) — never a 403.
-                    _h.sent();
-                    providerRoleName = "f0006-develop-health-provider-".concat(Date.now());
-                    providerRbapId = void 0;
-                    _h.label = 7;
-                case 7:
-                    _h.trys.push([7, , 13, 26]);
-                    return [4 /*yield*/, sdk.api.role_based_access_permissions.createOne({
-                            role: providerRoleName,
-                            permissions: __assign({}, constants_1.PROVIDER_PERMISSIONS), // endusers read/create non-null, eligibility create non-null
-                        })];
-                case 8:
-                    providerRbap = _h.sent();
-                    providerRbapId = providerRbap.id;
-                    return [4 /*yield*/, sdk.api.users.updateOne(sdkNonAdmin.userInfo.id, { roles: [providerRoleName] }, { replaceObjectFields: true })];
-                case 9:
-                    _h.sent();
-                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 1500)];
-                case 10:
-                    _h.sent();
-                    return [4 /*yield*/, sdkNonAdmin.authenticate(nonAdminEmail, nonAdminPassword)];
-                case 11:
-                    _h.sent();
-                    return [4 /*yield*/, (0, testing_1.async_test)("a provider role with enduser access passes the gate (reaches 'Integration not found', not 403)", function () { return sdkNonAdmin.api.enduser_eligibility_results.develop_health_run_benefit_verification({
-                            enduserId: new bson_1.ObjectId().toHexString(),
-                            providerUserId: new bson_1.ObjectId().toHexString(),
-                            insuranceType: 'primary',
-                            diagnoses: [],
-                            drugs: [{ name: 'Test Drug', dosage: '10mg', quantity: 1 }],
-                            drug_history: { currently_taking_drugs: [], previously_taken_drugs: [] },
-                        }); }, {
-                            shouldError: true,
-                            onError: function (e) {
-                                var _a;
-                                var msg = ((_a = e === null || e === void 0 ? void 0 : e.message) !== null && _a !== void 0 ? _a : '').toLowerCase();
-                                // Must NOT be the access-denial message (that would mean the gate wrongly blocked a
-                                // provider). Reaching "Integration not found" (or org/provider validation) proves the
-                                // gate passed and the read-scoped enduser load did not over-restrict a legitimate role.
-                                if (msg.includes('access to this resource'))
-                                    return false;
-                                return msg.includes('integration not found') || msg.includes('organization') || msg.includes('provider');
-                            },
-                        })];
-                case 12:
-                    _h.sent();
-                    return [3 /*break*/, 26];
-                case 13:
-                    if (!providerRbapId) return [3 /*break*/, 25];
-                    _h.label = 14;
-                case 14:
-                    _h.trys.push([14, 16, , 17]);
-                    return [4 /*yield*/, sdk.api.users.updateOne(sdkNonAdmin.userInfo.id, { roles: originalRoles !== null && originalRoles !== void 0 ? originalRoles : [] }, { replaceObjectFields: true })];
-                case 15:
-                    _h.sent();
-                    return [3 /*break*/, 17];
-                case 16:
-                    _b = _h.sent();
-                    return [3 /*break*/, 17];
-                case 17:
-                    _h.trys.push([17, 19, , 20]);
-                    return [4 /*yield*/, sdk.api.role_based_access_permissions.deleteOne(providerRbapId)];
-                case 18:
-                    _h.sent();
-                    return [3 /*break*/, 20];
-                case 19:
-                    _c = _h.sent();
-                    return [3 /*break*/, 20];
-                case 20: return [4 /*yield*/, (0, testing_1.wait)(undefined, 1500)];
-                case 21:
-                    _h.sent();
-                    _h.label = 22;
-                case 22:
-                    _h.trys.push([22, 24, , 25]);
-                    return [4 /*yield*/, sdkNonAdmin.authenticate(nonAdminEmail, nonAdminPassword)];
-                case 23:
-                    _h.sent();
-                    return [3 /*break*/, 25];
-                case 24:
-                    _d = _h.sent();
-                    return [3 /*break*/, 25];
-                case 25: return [7 /*endfinally*/];
-                case 26: return [3 /*break*/, 40];
-                case 27:
-                    _h.trys.push([27, 29, , 30]);
-                    return [4 /*yield*/, sdk.api.users.updateOne(sdkNonAdmin.userInfo.id, { roles: originalRoles !== null && originalRoles !== void 0 ? originalRoles : [] }, { replaceObjectFields: true })];
-                case 28:
-                    _h.sent();
-                    return [3 /*break*/, 30];
-                case 29:
-                    _e = _h.sent();
-                    return [3 /*break*/, 30];
-                case 30:
-                    if (!rbapId) return [3 /*break*/, 34];
-                    _h.label = 31;
-                case 31:
-                    _h.trys.push([31, 33, , 34]);
-                    return [4 /*yield*/, sdk.api.role_based_access_permissions.deleteOne(rbapId)];
-                case 32:
-                    _h.sent();
-                    return [3 /*break*/, 34];
-                case 33:
-                    _f = _h.sent();
-                    return [3 /*break*/, 34];
-                case 34: 
-                // Re-authenticate the non-admin to drop the no-access role from their JWT
-                // before subsequent tests run.
+                ];
+            case 6:
+                _a.sent();
+                // 3. develop_health_run_benefit_verification must throw 403 BEFORE any enduser lookup.
+                //    Pre-fix: proceeds to DB.endusers.findById and either 400s on validation (fake id) or
+                //    succeeds and forwards PHI to Develop Health (real id) — never a 403.
+                return [4 /*yield*/, expect_rejected("enduser_eligibility_results.develop_health_run_benefit_verification must throw 403 when role denies endusers/enduser_eligibility_results", function () { return sdkNonAdmin_1.api.enduser_eligibility_results.develop_health_run_benefit_verification({
+                        enduserId: new bson_1.ObjectId().toHexString(),
+                        providerUserId: new bson_1.ObjectId().toHexString(),
+                        insuranceType: 'primary',
+                        diagnoses: [],
+                        // drugs uses a plain (non-empty-ok) list validator, so a real-shaped entry is required
+                        // to pass request validation and actually reach the handler's access check.
+                        drugs: [{ name: 'Test Drug', dosage: '10mg', quantity: 1 }],
+                        drug_history: { currently_taking_drugs: [], previously_taken_drugs: [] },
+                    }); }, function (e) {
+                        var _a;
+                        // Match the gate's exact message. The SDK error surfaces { message, info } (no top-level
+                        // status/code), so we key on the message rather than the HTTP status. This is deliberately
+                        // specific: a lapsed subscription ("Your subscription has expired") or an expired token
+                        // ("Unauthenticated") also errors BEFORE the handler runs, but neither contains this string,
+                        // so the test can't false-pass without the gate executing. Also reject the pre-fix
+                        // downstream messages, which would indicate the access check never fired.
+                        var msg = ((_a = e === null || e === void 0 ? void 0 : e.message) !== null && _a !== void 0 ? _a : '').toLowerCase();
+                        if (msg.includes('integration not found') || msg.includes('enduser is required')
+                            || msg.includes('organization') || msg.includes('provider')) {
+                            return false; // reached past the access gate — regression
+                        }
+                        return msg.includes('access to this resource');
+                    })
+                    // 4. POSITIVE case: a provider role WITH enduser access must PASS the gate and reach the
+                    //    integration stage (this tenant has no Develop Health integration, so it 400s with
+                    //    "Integration not found"). This guards against the gate over-blocking legitimate users —
+                    //    the failure mode a future tightening (e.g. gating on 'All') would introduce.
+                ];
+            case 7:
+                // 3. develop_health_run_benefit_verification must throw 403 BEFORE any enduser lookup.
+                //    Pre-fix: proceeds to DB.endusers.findById and either 400s on validation (fake id) or
+                //    succeeds and forwards PHI to Develop Health (real id) — never a 403.
+                _a.sent();
+                // 4. POSITIVE case: a provider role WITH enduser access must PASS the gate and reach the
+                //    integration stage (this tenant has no Develop Health integration, so it 400s with
+                //    "Integration not found"). This guards against the gate over-blocking legitimate users —
+                //    the failure mode a future tightening (e.g. gating on 'All') would introduce.
+                return [4 /*yield*/, sdk.api.role_based_access_permissions.createOne({
+                        role: providerRoleName,
+                        permissions: __assign({}, constants_1.PROVIDER_PERMISSIONS), // endusers read/create non-null, eligibility create non-null
+                    })];
+            case 8:
+                // 4. POSITIVE case: a provider role WITH enduser access must PASS the gate and reach the
+                //    integration stage (this tenant has no Develop Health integration, so it 400s with
+                //    "Integration not found"). This guards against the gate over-blocking legitimate users —
+                //    the failure mode a future tightening (e.g. gating on 'All') would introduce.
+                _a.sent();
+                return [4 /*yield*/, sdk.api.users.updateOne(nonAdmin.id, { roles: [providerRoleName] }, { replaceObjectFields: true })];
+            case 9:
+                _a.sent();
                 return [4 /*yield*/, (0, testing_1.wait)(undefined, 1500)];
-                case 35:
-                    // Re-authenticate the non-admin to drop the no-access role from their JWT
-                    // before subsequent tests run.
-                    _h.sent();
-                    _h.label = 36;
-                case 36:
-                    _h.trys.push([36, 38, , 39]);
-                    return [4 /*yield*/, sdkNonAdmin.authenticate(nonAdminEmail, nonAdminPassword)];
-                case 37:
-                    _h.sent();
-                    return [3 /*break*/, 39];
-                case 38:
-                    _g = _h.sent();
-                    return [3 /*break*/, 39];
-                case 39: return [7 /*endfinally*/];
-                case 40: return [2 /*return*/];
-            }
-        });
+            case 10:
+                _a.sent();
+                return [4 /*yield*/, sdkNonAdmin_1.authenticate(nonAdmin.email, nonAdmin.password)];
+            case 11:
+                _a.sent();
+                return [4 /*yield*/, expect_rejected("a provider role with enduser access passes the gate (reaches 'Integration not found', not 403)", function () { return sdkNonAdmin_1.api.enduser_eligibility_results.develop_health_run_benefit_verification({
+                        enduserId: new bson_1.ObjectId().toHexString(),
+                        providerUserId: new bson_1.ObjectId().toHexString(),
+                        insuranceType: 'primary',
+                        diagnoses: [],
+                        drugs: [{ name: 'Test Drug', dosage: '10mg', quantity: 1 }],
+                        drug_history: { currently_taking_drugs: [], previously_taken_drugs: [] },
+                    }); }, function (e) {
+                        var _a;
+                        var msg = ((_a = e === null || e === void 0 ? void 0 : e.message) !== null && _a !== void 0 ? _a : '').toLowerCase();
+                        // Must NOT be the access-denial message (that would mean the gate wrongly blocked a
+                        // provider). Reaching "Integration not found" (or org/provider validation) proves the
+                        // gate passed and the read-scoped enduser load did not over-restrict a legitimate role.
+                        if (msg.includes('access to this resource'))
+                            return false;
+                        return msg.includes('integration not found') || msg.includes('organization') || msg.includes('provider');
+                    })
+                    // NOTE — the create>read bypass (endusers.create broader than endusers.read) that the 2026-08-19
+                    // read-scoping closes is NOT live-testable here: this tenant has no Develop Health integration, so
+                    // the handler throws "Integration not found" BEFORE reaching the (now read-scoped) enduser load,
+                    // and the enduser load is what the create>read fix governs. Exercising it would need either a real
+                    // Develop Health integration or reordering the handler purely for the test. It is covered by code
+                    // review + the systemic follow-up. If a Develop Health sandbox integration is ever available
+                    // to a provisioned tenant, add: role { endusers: create 'All', read 'Assigned' } → call with a real
+                    // enduser NOT assigned to the caller → expect the enduser-not-found path, not a successful forward.
+                ];
+            case 12:
+                _a.sent();
+                return [3 /*break*/, 18];
+            case 13:
+                if (!tenant) return [3 /*break*/, 17];
+                _a.label = 14;
+            case 14:
+                _a.trys.push([14, 16, , 17]);
+                return [4 /*yield*/, tenant.teardown()];
+            case 15:
+                _a.sent();
+                return [3 /*break*/, 17];
+            case 16:
+                e_1 = _a.sent();
+                console.error('teardown failed', e_1);
+                return [3 /*break*/, 17];
+            case 17: return [7 /*endfinally*/];
+            case 18: return [2 /*return*/, checks];
+        }
     });
-};
+}); };
+exports.develop_health_benefit_verification_rbac_checks = develop_health_benefit_verification_rbac_checks;
+/** Asserting wrapper, for standalone runs. */
+var develop_health_benefit_verification_rbac_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _a = setup_isolated_1.assert_checks;
+                _b = ['develop_health benefit verification RBAC'];
+                return [4 /*yield*/, (0, exports.develop_health_benefit_verification_rbac_checks)()];
+            case 1:
+                _a.apply(void 0, _b.concat([_c.sent()]));
+                return [2 /*return*/];
+        }
+    });
+}); };
 exports.develop_health_benefit_verification_rbac_tests = develop_health_benefit_verification_rbac_tests;
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+exports.ISOLATED_SUITE = {
+    name: 'develop_health benefit verification RBAC',
+    run: exports.develop_health_benefit_verification_rbac_checks,
+};
 // Allow running this test file independently
 if (require.main === module) {
     console.log("\uD83C\uDF10 Using API URL: ".concat(host));
-    var sdk_2 = new sdk_1.Session({ host: host });
-    var sdkNonAdmin_1 = new sdk_1.Session({ host: host });
-    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, (0, setup_1.setup_tests)(sdk_2, sdkNonAdmin_1)];
-                case 1:
-                    _a.sent();
-                    return [4 /*yield*/, (0, exports.develop_health_benefit_verification_rbac_tests)({ sdk: sdk_2, sdkNonAdmin: sdkNonAdmin_1 })];
-                case 2:
-                    _a.sent();
-                    return [2 /*return*/];
-            }
-        });
-    }); };
-    runTests()
+    (0, exports.develop_health_benefit_verification_rbac_tests)()
         .then(function () {
         console.log("✅ develop_health_run_benefit_verification RBAC test suite completed successfully");
         process.exit(0);

package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"develop-health-benefit-verification-rbac.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/develop-health-benefit-verification-rbac.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,6BAA+B;AAC/B,oCAAsC;AACtC,+CAI4B;AAC5B,qCAAyC;AACzC,mDAA4D;AAE5D,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAC9D,IAAA,KAAoC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAhG,aAAa,QAAA,EAAE,gBAAgB,QAAiE,CAAA;AAEvG;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACI,IAAM,8CAA8C,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;oBACrF,IAAA,oBAAU,EAAC,qDAAqD,CAAC,CAAA;oBAE3D,QAAQ,GAAG,yCAAkC,IAAI,CAAC,GAAG,EAAE,CAAE,CAAA;oBAEzD,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAA;;;;oBAOjC,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;4BACjE,IAAI,EAAE,QAAQ;4BACd,WAAW,wBACN,gCAAoB,KACvB,QAAQ,EAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EACvF,2BAA2B,EAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GACxF;yBACF,CAAC,EAAA;;oBAPI,IAAI,GAAG,SAOX;oBACF,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;oBAEhB,0EAA0E;oBAC1E,qDAAqD;oBACrD,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAC3B,WAAW,CAAC,QAAQ,CAAC,EAAE,EACvB,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,EACrB,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAC9B,EAAA;;oBAND,0EAA0E;oBAC1E,qDAAqD;oBACrD,SAIC,CAAA;oBACD,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;oBAA3B,SAA2B,CAAA;oBAC3B,qBAAM,WAAW,CAAC,YAAY,CAAC,aAAc,EAAE,gBAAiB,CAAC;wBAEjE,uFAAuF;wBACvF,0FAA0F;wBAC1F,0EAA0E;sBAJT;;oBAAjE,SAAiE,CAAA;oBAEjE,uFAAuF;oBACvF,0FAA0F;oBAC1F,0EAA0E;oBAC1E,qBAAM,IAAA,oBAAU,EACd,0IAA0I,EAC1I,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC,uCAAuC,CAAC;4BACxF,SAAS,EAAE,IAAI,eAAQ,EAAE,CAAC,WAAW,EAAE;4BACvC,cAAc,EAAE,IAAI,eAAQ,EAAE,CAAC,WAAW,EAAE;4BAC5C,aAAa,EAAE,SAAS;4BACxB,SAAS,EAAE,EAAE;4BACb,uFAAuF;4BACvF,4EAA4E;4BAC5E,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;4BAC3D,YAAY,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE;yBAClE,CAAC,EATH,CASG,EACT;4BACE,WAAW,EAAE,IAAI;4BACjB,OAAO,EAAE,UAAC,CAAM;;gCACd,yFAAyF;gCACzF,2FAA2F;gCAC3F,wFAAwF;gCACxF,6FAA6F;gCAC7F,mFAAmF;gCACnF,0EAA0E;gCAC1E,IAAM,GAAG,GAAG,CAAC,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;gCAC5C,IAAI,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC;uCAC3E,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;oCAC7D,OAAO,KAAK,CAAA,CAAC,4CAA4C;iCAC1D;gCACD,OAAO,GAAG,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAA;4BAChD,CAAC;yBACF,CACF;wBAED,yFAAyF;wBACzF,yFAAyF;wBACzF,6FAA6F;wBAC7F,kFAAkF;sBALjF;;oBAhCD,uFAAuF;oBACvF,0FAA0F;oBAC1F,0EAA0E;oBAC1E,SA6BC,CAAA;oBAMK,gBAAgB,GAAG,wCAAiC,IAAI,CAAC,GAAG,EAAE,CAAE,CAAA;oBAClE,cAAc,SAAoB,CAAA;;;;oBAEf,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;4BACzE,IAAI,EAAE,gBAAgB;4BACtB,WAAW,eAAO,gCAAoB,CAAE,EAAE,6DAA6D;yBACxG,CAAC,EAAA;;oBAHI,YAAY,GAAG,SAGnB;oBACF,cAAc,GAAG,YAAY,CAAC,EAAE,CAAA;oBAEhC,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAA;;oBAApH,SAAoH,CAAA;oBACpH,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;oBAA3B,SAA2B,CAAA;oBAC3B,qBAAM,WAAW,CAAC,YAAY,CAAC,aAAc,EAAE,gBAAiB,CAAC,EAAA;;oBAAjE,SAAiE,CAAA;oBAEjE,qBAAM,IAAA,oBAAU,EACd,gGAAgG,EAChG,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC,uCAAuC,CAAC;4BACxF,SAAS,EAAE,IAAI,eAAQ,EAAE,CAAC,WAAW,EAAE;4BACvC,cAAc,EAAE,IAAI,eAAQ,EAAE,CAAC,WAAW,EAAE;4BAC5C,aAAa,EAAE,SAAS;4BACxB,SAAS,EAAE,EAAE;4BACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;4BAC3D,YAAY,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE;yBAClE,CAAC,EAPH,CAOG,EACT;4BACE,WAAW,EAAE,IAAI;4BACjB,OAAO,EAAE,UAAC,CAAM;;gCACd,IAAM,GAAG,GAAG,CAAC,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;gCAC5C,oFAAoF;gCACpF,sFAAsF;gCACtF,wFAAwF;gCACxF,IAAI,GAAG,CAAC,QAAQ,CAAC,yBAAyB,CAAC;oCAAE,OAAO,KAAK,CAAA;gCACzD,OAAO,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;4BAC1G,CAAC;yBACF,CACF,EAAA;;oBArBD,SAqBC,CAAA;;;yBAEG,cAAc,EAAd,yBAAc;;;;oBAEd,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAA;;oBAArH,SAAqH,CAAA;;;;;;;oBAEjH,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,cAAc,CAAC,EAAA;;oBAArE,SAAqE,CAAA;;;;;yBAC3E,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;oBAA3B,SAA2B,CAAA;;;;oBACrB,qBAAM,WAAW,CAAC,YAAY,CAAC,aAAc,EAAE,gBAAiB,CAAC,EAAA;;oBAAjE,SAAiE,CAAA;;;;;;;;;oBAezE,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAC3B,WAAW,CAAC,QAAQ,CAAC,EAAE,EACvB,EAAE,KAAK,EAAE,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,EAAE,EAAE,EAC9B,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAC9B,EAAA;;oBAJD,SAIC,CAAA;;;;;;yBAEC,MAAM,EAAN,yBAAM;;;;oBACF,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,EAAA;;oBAA7D,SAA6D,CAAA;;;;;;gBAErE,0EAA0E;gBAC1E,+BAA+B;gBAC/B,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;oBAF3B,0EAA0E;oBAC1E,+BAA+B;oBAC/B,SAA2B,CAAA;;;;oBACrB,qBAAM,WAAW,CAAC,YAAY,CAAC,aAAc,EAAE,gBAAiB,CAAC,EAAA;;oBAAjE,SAAiE,CAAA;;;;;;;;;;CAE1E,CAAA;AA7IY,QAAA,8CAA8C,kDA6I1D;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,sDAA8C,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAA1E,SAA0E,CAAA;;;;SAC3E,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAA;QAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,mEAAmE,EAAE,KAAK,CAAC,CAAA;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
+{"version":3,"file":"develop-health-benefit-verification-rbac.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/develop-health-benefit-verification-rbac.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,6BAA+B;AAC/B,+CAE4B;AAC5B,uDAK6B;AAC7B,mDAA4D;AAE5D,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACI,IAAM,+CAA+C,GAAG;;;;;gBACvD,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;gBAI/F,QAAQ,GAAG,UAAC,KAAU;oBAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;wBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;oBAC/D,IAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;oBACzC,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;gBAChE,CAAC,CAAA;gBACK,YAAY,GAAG,UAAC,CAAM,IAAa,OAAA,CACvC,OAAO,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,CAAA,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC7E,EAFwC,CAExC,CAAA;gBAMK,eAAe,GAAG,UAAO,KAAa,EAAE,EAAsB,EAAE,OAA4B;;;;;;gCAG3E,qBAAM,EAAE,EAAE,EAAA;;gCAAvB,UAAU,GAAG,SAAU;gCAC7B,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,gDAAyC,QAAQ,CAAC,UAAU,CAAC,CAAE,CAAC,CAAA;gCACrF,sBAAM;;;gCAEN,SAAS,GAAG,EAAE,CAAC,KAAA,EAAE,CAAA;;;gCAMX,CAAC,GAAK,SAAS,EAAd,CAAc;gCACvB,IAAI;oCACF,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,wBAAiB,YAAY,CAAC,CAAC,CAAC,CAAE,CAAC,CAAA;iCAC9D;gCAAC,OAAO,cAAmB,EAAE;oCAC5B,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,yCAAiC,YAAY,CAAC,CAAC,CAAC,iBAAM,YAAY,CAAC,cAAc,CAAC,CAAE,CAAC,CAAA;iCAC3G;;;;qBACF,CAAA;gBAEK,QAAQ,GAAG,yCAAkC,IAAI,EAAE,CAAE,CAAA;gBACrD,gBAAgB,GAAG,wCAAiC,IAAI,EAAE,CAAE,CAAA;;;;gBAKvD,qBAAM,IAAA,sCAAqB,EAAC;wBACnC,IAAI,EAAE,mDAA4C,IAAI,EAAE,CAAE;wBAC1D,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;wBACpD,OAAO,EAAE,CAAC;qBACX,CAAC,EAAA;;gBAJF,MAAM,GAAG,SAIP,CAAA;gBACM,GAAG,GAAkB,MAAM,IAAxB,EAAE,gBAAgB,MAAM,YAAX,CAAW;gBAC7B,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBAEhC,0FAA0F;gBAC1F,uFAAuF;gBACvF,qFAAqF;gBACrF,iCAAiC;gBACjC,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;wBACpD,IAAI,EAAE,QAAQ;wBACd,WAAW,wBACN,gCAAoB,KACvB,QAAQ,EAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EACvF,2BAA2B,EAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GACxF;qBACF,CAAC;oBAEF,wFAAwF;oBACxF,qDAAqD;kBAHnD;;gBAXF,0FAA0F;gBAC1F,uFAAuF;gBACvF,qFAAqF;gBACrF,iCAAiC;gBACjC,SAOE,CAAA;gBAEF,wFAAwF;gBACxF,qDAAqD;gBACrD,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAC3B,QAAQ,CAAC,EAAE,EACX,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,EACrB,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAC9B,EAAA;;gBAND,wFAAwF;gBACxF,qDAAqD;gBACrD,SAIC,CAAA;gBACD,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;gBAA3B,SAA2B,CAAA;gBAC3B,qBAAM,aAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC;oBAEjE,uFAAuF;oBACvF,0FAA0F;oBAC1F,0EAA0E;kBAJT;;gBAAjE,SAAiE,CAAA;gBAEjE,uFAAuF;gBACvF,0FAA0F;gBAC1F,0EAA0E;gBAC1E,qBAAM,eAAe,CACnB,0IAA0I,EAC1I,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC,uCAAuC,CAAC;wBACxF,SAAS,EAAE,IAAI,eAAQ,EAAE,CAAC,WAAW,EAAE;wBACvC,cAAc,EAAE,IAAI,eAAQ,EAAE,CAAC,WAAW,EAAE;wBAC5C,aAAa,EAAE,SAAS;wBACxB,SAAS,EAAE,EAAE;wBACb,uFAAuF;wBACvF,4EAA4E;wBAC5E,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;wBAC3D,YAAY,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE;qBAClE,CAAC,EATH,CASG,EACT,UAAC,CAAM;;wBACL,yFAAyF;wBACzF,2FAA2F;wBAC3F,wFAAwF;wBACxF,6FAA6F;wBAC7F,mFAAmF;wBACnF,0EAA0E;wBAC1E,IAAM,GAAG,GAAG,CAAC,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;wBAC5C,IAAI,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC;+BAC3E,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE;4BAC7D,OAAO,KAAK,CAAA,CAAC,4CAA4C;yBAC1D;wBACD,OAAO,GAAG,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAA;oBAChD,CAAC,CACF;oBAED,yFAAyF;oBACzF,uFAAuF;oBACvF,6FAA6F;oBAC7F,kFAAkF;kBALjF;;gBA7BD,uFAAuF;gBACvF,0FAA0F;gBAC1F,0EAA0E;gBAC1E,SA0BC,CAAA;gBAED,yFAAyF;gBACzF,uFAAuF;gBACvF,6FAA6F;gBAC7F,kFAAkF;gBAClF,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;wBACpD,IAAI,EAAE,gBAAgB;wBACtB,WAAW,eAAO,gCAAoB,CAAE,EAAE,6DAA6D;qBACxG,CAAC,EAAA;;gBAPF,yFAAyF;gBACzF,uFAAuF;gBACvF,6FAA6F;gBAC7F,kFAAkF;gBAClF,SAGE,CAAA;gBAEF,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAA;;gBAAxG,SAAwG,CAAA;gBACxG,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;gBAA3B,SAA2B,CAAA;gBAC3B,qBAAM,aAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAA;;gBAAjE,SAAiE,CAAA;gBAEjE,qBAAM,eAAe,CACnB,gGAAgG,EAChG,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC,uCAAuC,CAAC;wBACxF,SAAS,EAAE,IAAI,eAAQ,EAAE,CAAC,WAAW,EAAE;wBACvC,cAAc,EAAE,IAAI,eAAQ,EAAE,CAAC,WAAW,EAAE;wBAC5C,aAAa,EAAE,SAAS;wBACxB,SAAS,EAAE,EAAE;wBACb,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;wBAC3D,YAAY,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE;qBAClE,CAAC,EAPH,CAOG,EACT,UAAC,CAAM;;wBACL,IAAM,GAAG,GAAG,CAAC,MAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,mCAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;wBAC5C,oFAAoF;wBACpF,sFAAsF;wBACtF,wFAAwF;wBACxF,IAAI,GAAG,CAAC,QAAQ,CAAC,yBAAyB,CAAC;4BAAE,OAAO,KAAK,CAAA;wBACzD,OAAO,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;oBAC1G,CAAC,CACF;oBAED,iGAAiG;oBACjG,mGAAmG;oBACnG,iGAAiG;oBACjG,mGAAmG;oBACnG,kGAAkG;oBAClG,6FAA6F;oBAC7F,oGAAoG;oBACpG,oGAAoG;kBATnG;;gBAlBD,SAkBC,CAAA;;;qBAYG,MAAM,EAAN,yBAAM;;;;gBACF,qBAAM,MAAM,CAAC,QAAQ,EAAE,EAAA;;gBAAvB,SAAuB,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;qBAInF,sBAAO,MAAM,EAAA;;;KACd,CAAA;AA7JY,QAAA,+CAA+C,mDA6J3D;AAED,8CAA8C;AACvC,IAAM,8CAA8C,GAAG;;;;;gBAC5D,KAAA,8BAAa,CAAA;sBAAC,0CAA0C;gBAAE,qBAAM,IAAA,uDAA+C,GAAE,EAAA;;gBAAjH,4BAA0D,SAAuD,GAAC,CAAA;;;;KACnH,CAAA;AAFY,QAAA,8CAA8C,kDAE1D;AAED,oGAAoG;AACvF,QAAA,cAAc,GAAkB;IAC3C,IAAI,EAAE,0CAA0C;IAChD,GAAG,EAAE,uDAA+C;CACrD,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAA,sDAA8C,GAAE;SAC7C,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAA;QAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,mEAAmE,EAAE,KAAK,CAAC,CAAA;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}