@tellescope/sdk 2.0.0-beta.1 → 2.0.0-beta.3

package/lib/cjs/tests/api_tests/security/enduser-ai-summary-trust-gate.test.d.ts

@@ -1,4 +1,4 @@
-import { Session } from "../../../sdk";
+import { Check, IsolatedSuite } from "../../setup_isolated";
 /**
  * The AI patient summary attached to a FormResponse is generated client-side and passed
  * into submit_form_response as an input, so the handler only trusts it from a staff
@@ -14,9 +14,15 @@ import { Session } from "../../../sdk";
  * answers, generated server-side (see api/modules/form_response_summary.ts). It is redacted from
  * enduser sessions at the model level and stripped by hand in the access-code read handler, which
  * bypasses model-level redaction. Seeded directly via an admin update — no Bedrock call needed.
+ *
+ * Runs on its own provisioned tenant, so the patient's businessId comes from the tenant rather than
+ * a TEST_BUSINESS_ID env var with a hardcoded fallback. The patient session is minted from
+ * endusers.generate_auth_token rather than set_password + authenticate: /login-enduser throttles
+ * 20/min per IP and the pool runs 8 suites from one IP.
  */
-export declare const enduser_ai_summary_trust_gate_tests: ({ sdk }: {
-    sdk: Session;
-    sdkNonAdmin: Session;
-}) => Promise<void>;
+export declare const enduser_ai_summary_trust_gate_checks: () => Promise<Check[]>;
+/** Asserting wrapper, for standalone runs. */
+export declare const enduser_ai_summary_trust_gate_tests: () => Promise<void>;
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+export declare const ISOLATED_SUITE: IsolatedSuite;
 //# sourceMappingURL=enduser-ai-summary-trust-gate.test.d.ts.map

package/lib/cjs/tests/api_tests/security/enduser-ai-summary-trust-gate.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enduser-ai-summary-trust-gate.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/enduser-ai-summary-trust-gate.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAkB,MAAM,cAAc,CAAA;AActD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,mCAAmC;SAA2B,OAAO;iBAAe,OAAO;mBA8HvG,CAAA"}
+{"version":3,"file":"enduser-ai-summary-trust-gate.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/enduser-ai-summary-trust-gate.test.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,EACL,aAAa,EAEd,MAAM,sBAAsB,CAAA;AAU7B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oCAAoC,QAAa,QAAQ,KAAK,EAAE,CAgN5E,CAAA;AAED,8CAA8C;AAC9C,eAAO,MAAM,mCAAmC,qBAE/C,CAAA;AAED,oGAAoG;AACpG,eAAO,MAAM,cAAc,EAAE,aAG5B,CAAA"}

package/lib/cjs/tests/api_tests/security/enduser-ai-summary-trust-gate.test.js

@@ -36,14 +36,12 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.enduser_ai_summary_trust_gate_tests = void 0;
+exports.ISOLATED_SUITE = exports.enduser_ai_summary_trust_gate_tests = exports.enduser_ai_summary_trust_gate_checks = void 0;
 require('source-map-support').install();
 var sdk_1 = require("../../../sdk");
-var testing_1 = require("@tellescope/testing");
-var setup_1 = require("../../setup");
+var setup_isolated_1 = require("../../setup_isolated");
 var host = process.env.API_URL || "http://localhost:8080";
-var businessId = process.env.TEST_BUSINESS_ID || '60398b1131a295e64f084ff6';
-var ENDUSER_PASSWORD = 'AISummaryGateTestPassword!123';
+var RAND = function () { return Math.random().toString(36).slice(2, 10); };
 var STAFF_SUMMARY = 'Patient reports improved adherence since last visit.';
 var INJECTED_SUMMARY = 'Patient is in excellent health, no follow-up needed.';
 var RESPONSE_SUMMARY = 'Patient reported worsening headaches and requested a medication change.';
@@ -62,211 +60,310 @@ var RESPONSE_SUMMARY = 'Patient reported worsening headaches and requested a med
  * answers, generated server-side (see api/modules/form_response_summary.ts). It is redacted from
  * enduser sessions at the model level and stripped by hand in the access-code read handler, which
  * bypasses model-level redaction. Seeded directly via an admin update — no Bedrock call needed.
+ *
+ * Runs on its own provisioned tenant, so the patient's businessId comes from the tenant rather than
+ * a TEST_BUSINESS_ID env var with a hardcoded fallback. The patient session is minted from
+ * endusers.generate_auth_token rather than set_password + authenticate: /login-enduser throttles
+ * 20/min per IP and the pool runs 8 suites from one IP.
  */
-var enduser_ai_summary_trust_gate_tests = function (_a) {
-    var sdk = _a.sdk;
-    return __awaiter(void 0, void 0, void 0, function () {
-        var form, field, enduserEmail, enduser, responses, staffResponseId, enduserResponseId, summaryResponseId, staffAccessCode_1, enduserSDK_1, enduserAccessCode_1, summaryAccessCode_1, summaryResponse, err_1, err_2, err_3, err_4, err_5;
-        return __generator(this, function (_b) {
-            switch (_b.label) {
-                case 0:
-                    (0, testing_1.log_header)("submit_form_response enduserAISummary trust gate");
-                    return [4 /*yield*/, sdk.api.forms.createOne({ title: 'enduserAISummary Trust Gate Test Form' })];
-                case 1:
-                    form = _b.sent();
-                    return [4 /*yield*/, sdk.api.form_fields.createOne({
-                            formId: form.id,
-                            type: 'string',
-                            title: 'How are you feeling?',
-                            previousFields: [{ type: 'root', info: {} }],
-                        })];
-                case 2:
-                    field = _b.sent();
-                    enduserEmail = "ai-summary-gate-".concat(Date.now(), "@example.com");
-                    return [4 /*yield*/, sdk.api.endusers.createOne({ email: enduserEmail, fname: 'AISummary', lname: 'Gate' })];
-                case 3:
-                    enduser = _b.sent();
-                    return [4 /*yield*/, sdk.api.endusers.set_password({ id: enduser.id, password: ENDUSER_PASSWORD })];
-                case 4:
-                    _b.sent();
-                    responses = [{
-                            fieldId: field.id, fieldTitle: 'How are you feeling?',
-                            answer: { type: 'string', value: 'Doing well' },
-                        }];
-                    _b.label = 5;
-                case 5:
-                    _b.trys.push([5, , 21, 40]);
-                    return [4 /*yield*/, sdk.api.form_responses.prepare_form_response({
-                            enduserId: enduser.id, formId: form.id,
-                        })];
-                case 6:
-                    staffAccessCode_1 = (_b.sent()).accessCode;
-                    return [4 /*yield*/, (0, testing_1.async_test)("staff session's enduserAISummary is persisted on submit", function () { return sdk.api.form_responses.submit_form_response({
-                            accessCode: staffAccessCode_1,
-                            responses: responses,
-                            enduserAISummary: STAFF_SUMMARY,
-                        }); }, { onResult: function (_a) {
-                                var formResponse = _a.formResponse;
-                                staffResponseId = formResponse.id;
-                                return !!formResponse.submittedAt && formResponse.enduserAISummary === STAFF_SUMMARY;
-                            } })];
-                case 7:
-                    _b.sent();
-                    return [4 /*yield*/, (0, testing_1.async_test)("staff-submitted enduserAISummary survives a re-fetch", function () { return sdk.api.form_responses.getOne(staffResponseId); }, { onResult: function (fr) { return fr.enduserAISummary === STAFF_SUMMARY; } })
-                        // ── enduser session: the summary is untrusted and dropped ──
-                    ];
-                case 8:
-                    _b.sent();
-                    enduserSDK_1 = new sdk_1.EnduserSession({ host: host, businessId: businessId });
-                    return [4 /*yield*/, enduserSDK_1.authenticate(enduserEmail, ENDUSER_PASSWORD)];
-                case 9:
-                    _b.sent();
-                    return [4 /*yield*/, sdk.api.form_responses.prepare_form_response({
-                            enduserId: enduser.id, formId: form.id,
-                        })];
-                case 10:
-                    enduserAccessCode_1 = (_b.sent()).accessCode;
-                    return [4 /*yield*/, (0, testing_1.async_test)("enduser session cannot inject enduserAISummary (submission still succeeds)", function () { return enduserSDK_1.api.form_responses.submit_form_response({
-                            accessCode: enduserAccessCode_1,
-                            responses: responses,
-                            enduserAISummary: INJECTED_SUMMARY,
-                        }); }, { onResult: function (_a) {
-                                var formResponse = _a.formResponse;
-                                enduserResponseId = formResponse.id;
-                                return !!formResponse.submittedAt && formResponse.enduserAISummary === undefined;
-                            } })];
-                case 11:
-                    _b.sent();
-                    return [4 /*yield*/, (0, testing_1.async_test)("injected enduserAISummary did not persist", function () { return sdk.api.form_responses.getOne(enduserResponseId); }, { onResult: function (fr) { return fr.enduserAISummary === undefined; } })
-                        // ── responsesAISummary: clinician-facing, never returned to the patient ──
-                        // seeded by an admin update rather than a real submission, so no AI call is made
-                    ];
-                case 12:
-                    _b.sent();
-                    return [4 /*yield*/, sdk.api.form_responses.prepare_form_response({
-                            enduserId: enduser.id, formId: form.id,
-                        })];
-                case 13:
-                    summaryAccessCode_1 = (_b.sent()).accessCode;
-                    return [4 /*yield*/, enduserSDK_1.api.form_responses.submit_form_response({
-                            accessCode: summaryAccessCode_1,
-                            responses: responses,
-                        })];
-                case 14:
-                    summaryResponse = _b.sent();
-                    summaryResponseId = summaryResponse.formResponse.id;
-                    return [4 /*yield*/, sdk.api.form_responses.updateOne(summaryResponseId, {
-                            responsesAISummary: RESPONSE_SUMMARY,
-                            responsesAISummaryGeneratedAt: new Date(),
-                        })];
-                case 15:
-                    _b.sent();
-                    return [4 /*yield*/, (0, testing_1.async_test)("staff session reads responsesAISummary", function () { return sdk.api.form_responses.getOne(summaryResponseId); }, { onResult: function (fr) { return fr.responsesAISummary === RESPONSE_SUMMARY; } })];
-                case 16:
-                    _b.sent();
-                    return [4 /*yield*/, (0, testing_1.async_test)("enduser session never receives responsesAISummary", function () { return enduserSDK_1.api.form_responses.getOne(summaryResponseId); }, { onResult: function (fr) { return (fr.responsesAISummary === undefined && fr.responsesAISummaryGeneratedAt === undefined); } })];
-                case 17:
-                    _b.sent();
-                    return [4 /*yield*/, (0, testing_1.async_test)("enduser readMany never receives responsesAISummary", function () { return enduserSDK_1.api.form_responses.getSome({ ids: [summaryResponseId] }); }, { onResult: function (frs) { return frs.every(function (fr) { return (fr.responsesAISummary === undefined && fr.responsesAISummaryGeneratedAt === undefined); }); } })
-                        // the access-code read handler bypasses model-level redaction, so it strips by hand
-                    ];
-                case 18:
-                    _b.sent();
-                    // the access-code read handler bypasses model-level redaction, so it strips by hand
-                    return [4 /*yield*/, (0, testing_1.async_test)("public access-code read never receives responsesAISummary", function () { return enduserSDK_1.api.form_responses.info_for_access_code({ accessCode: summaryAccessCode_1 }); }, { onResult: function (_a) {
-                                var response = _a.response;
-                                return (response.responsesAISummary === undefined && response.responsesAISummaryGeneratedAt === undefined);
-                            } })];
-                case 19:
+var enduser_ai_summary_trust_gate_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var checks, record, describe, errorMessage, expect_result, tenant, formId, enduserId, staffResponseId, enduserResponseId, summaryResponseId, sdk_2, form, field, enduser, responses_1, staffAccessCode_1, _a, authToken, enduserInfo, enduserSDK_1, enduserAccessCode_1, summaryAccessCode_1, summaryResponse, sdk, err_1, err_2, err_3, err_4, err_5, e_1;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                checks = [];
+                record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
+                describe = function (value) {
+                    if (value === undefined || value === null)
+                        return String(value);
+                    var stringified = JSON.stringify(value);
+                    return stringified === undefined ? String(value) : stringified;
+                };
+                errorMessage = function (e) { return (typeof (e === null || e === void 0 ? void 0 : e.message) === 'string' && e.message !== '' ? e.message : describe(e)); };
+                expect_result = function (label, fn, inspect) { return __awaiter(void 0, void 0, void 0, function () {
+                    var _a, pass, detail, _b, e_2;
+                    return __generator(this, function (_c) {
+                        switch (_c.label) {
+                            case 0:
+                                _c.trys.push([0, 2, , 3]);
+                                _b = inspect;
+                                return [4 /*yield*/, fn()];
+                            case 1:
+                                _a = _b.apply(void 0, [_c.sent()]), pass = _a.pass, detail = _a.detail;
+                                record(label, pass, detail);
+                                return [3 /*break*/, 3];
+                            case 2:
+                                e_2 = _c.sent();
+                                record(label, false, "rejected instead of resolving: ".concat(errorMessage(e_2)));
+                                return [3 /*break*/, 3];
+                            case 3: return [2 /*return*/];
+                        }
+                    });
+                }); };
+                _b.label = 1;
+            case 1:
+                _b.trys.push([1, , 21, 45]);
+                return [4 /*yield*/, (0, setup_isolated_1.setup_isolated_tenant)({
+                        name: "Enduser AI summary trust gate ".concat(RAND()),
+                        users: [{ isAdmin: true }],
+                        apiKeys: 0,
+                    })];
+            case 2:
+                tenant = _b.sent();
+                sdk_2 = tenant.sdk;
+                return [4 /*yield*/, sdk_2.api.forms.createOne({ title: 'enduserAISummary Trust Gate Test Form' })];
+            case 3:
+                form = _b.sent();
+                formId = form.id;
+                return [4 /*yield*/, sdk_2.api.form_fields.createOne({
+                        formId: form.id,
+                        type: 'string',
+                        title: 'How are you feeling?',
+                        previousFields: [{ type: 'root', info: {} }],
+                    })];
+            case 4:
+                field = _b.sent();
+                return [4 /*yield*/, sdk_2.api.endusers.createOne({
+                        email: "ai-summary-gate-".concat(Date.now(), "@example.com"), fname: 'AISummary', lname: 'Gate',
+                    })];
+            case 5:
+                enduser = _b.sent();
+                enduserId = enduser.id;
+                responses_1 = [{
+                        fieldId: field.id, fieldTitle: 'How are you feeling?',
+                        answer: { type: 'string', value: 'Doing well' },
+                    }];
+                return [4 /*yield*/, sdk_2.api.form_responses.prepare_form_response({
+                        enduserId: enduser.id, formId: form.id,
+                    })];
+            case 6:
+                staffAccessCode_1 = (_b.sent()).accessCode;
+                return [4 /*yield*/, expect_result("staff session's enduserAISummary is persisted on submit", function () { return sdk_2.api.form_responses.submit_form_response({
+                        accessCode: staffAccessCode_1,
+                        responses: responses_1,
+                        enduserAISummary: STAFF_SUMMARY,
+                    }); }, function (_a) {
+                        var formResponse = _a.formResponse;
+                        staffResponseId = formResponse.id;
+                        return {
+                            pass: !!formResponse.submittedAt && formResponse.enduserAISummary === STAFF_SUMMARY,
+                            detail: "submittedAt=".concat(!!formResponse.submittedAt, " enduserAISummary=")
+                                + "".concat(describe(formResponse.enduserAISummary), " (want the staff summary)"),
+                        };
+                    })];
+            case 7:
+                _b.sent();
+                return [4 /*yield*/, expect_result("staff-submitted enduserAISummary survives a re-fetch", function () { return sdk_2.api.form_responses.getOne(staffResponseId); }, function (fr) { return ({
+                        pass: fr.enduserAISummary === STAFF_SUMMARY,
+                        detail: "enduserAISummary=".concat(describe(fr.enduserAISummary), " (want the staff summary)"),
+                    }); })
+                    // ── enduser session: the summary is untrusted and dropped ──
+                ];
+            case 8:
+                _b.sent();
+                return [4 /*yield*/, sdk_2.api.endusers.generate_auth_token({ id: enduser.id })];
+            case 9:
+                _a = _b.sent(), authToken = _a.authToken, enduserInfo = _a.enduser;
+                enduserSDK_1 = new sdk_1.EnduserSession({
+                    host: host,
+                    authToken: authToken,
+                    enduser: enduserInfo, businessId: tenant.businessId,
+                });
+                return [4 /*yield*/, sdk_2.api.form_responses.prepare_form_response({
+                        enduserId: enduser.id, formId: form.id,
+                    })];
+            case 10:
+                enduserAccessCode_1 = (_b.sent()).accessCode;
+                return [4 /*yield*/, expect_result("enduser session cannot inject enduserAISummary (submission still succeeds)", function () { return enduserSDK_1.api.form_responses.submit_form_response({
+                        accessCode: enduserAccessCode_1,
+                        responses: responses_1,
+                        enduserAISummary: INJECTED_SUMMARY,
+                    }); }, function (_a) {
+                        var formResponse = _a.formResponse;
+                        enduserResponseId = formResponse.id;
+                        return {
+                            pass: !!formResponse.submittedAt && formResponse.enduserAISummary === undefined,
+                            detail: "submittedAt=".concat(!!formResponse.submittedAt, " enduserAISummary=")
+                                + "".concat(describe(formResponse.enduserAISummary), " (want undefined \u2014 the injected summary must be dropped)"),
+                        };
+                    })];
+            case 11:
+                _b.sent();
+                return [4 /*yield*/, expect_result("injected enduserAISummary did not persist", function () { return sdk_2.api.form_responses.getOne(enduserResponseId); }, function (fr) { return ({
+                        pass: fr.enduserAISummary === undefined,
+                        detail: "enduserAISummary=".concat(describe(fr.enduserAISummary), " (want undefined)"),
+                    }); })
+                    // ── responsesAISummary: clinician-facing, never returned to the patient ──
+                    // seeded by an admin update rather than a real submission, so no AI call is made
+                ];
+            case 12:
+                _b.sent();
+                return [4 /*yield*/, sdk_2.api.form_responses.prepare_form_response({
+                        enduserId: enduser.id, formId: form.id,
+                    })];
+            case 13:
+                summaryAccessCode_1 = (_b.sent()).accessCode;
+                return [4 /*yield*/, enduserSDK_1.api.form_responses.submit_form_response({
+                        accessCode: summaryAccessCode_1,
+                        responses: responses_1,
+                    })];
+            case 14:
+                summaryResponse = _b.sent();
+                summaryResponseId = summaryResponse.formResponse.id;
+                return [4 /*yield*/, sdk_2.api.form_responses.updateOne(summaryResponseId, {
+                        responsesAISummary: RESPONSE_SUMMARY,
+                        responsesAISummaryGeneratedAt: new Date(),
+                    })];
+            case 15:
+                _b.sent();
+                return [4 /*yield*/, expect_result("staff session reads responsesAISummary", function () { return sdk_2.api.form_responses.getOne(summaryResponseId); }, function (fr) { return ({
+                        pass: fr.responsesAISummary === RESPONSE_SUMMARY,
+                        detail: "responsesAISummary=".concat(describe(fr.responsesAISummary), " (want the seeded summary)"),
+                    }); })];
+            case 16:
+                _b.sent();
+                return [4 /*yield*/, expect_result("enduser session never receives responsesAISummary", function () { return enduserSDK_1.api.form_responses.getOne(summaryResponseId); }, function (fr) { return ({
+                        pass: fr.responsesAISummary === undefined && fr.responsesAISummaryGeneratedAt === undefined,
+                        detail: "responsesAISummary=".concat(describe(fr.responsesAISummary), " generatedAt=")
+                            + "".concat(describe(fr.responsesAISummaryGeneratedAt), " (want both undefined)"),
+                    }); })];
+            case 17:
+                _b.sent();
+                return [4 /*yield*/, expect_result("enduser readMany never receives responsesAISummary", function () { return enduserSDK_1.api.form_responses.getSome({ ids: [summaryResponseId] }); }, function (frs) { return ({
+                        pass: frs.every(function (fr) { return (fr.responsesAISummary === undefined && fr.responsesAISummaryGeneratedAt === undefined); }),
+                        detail: "".concat(frs.length, " response(s); leaking=").concat(describe(frs
+                            .filter(function (fr) { return fr.responsesAISummary !== undefined || fr.responsesAISummaryGeneratedAt !== undefined; })
+                            .map(function (fr) { return fr.id; })), " (want none)"),
+                    }); })
                     // the access-code read handler bypasses model-level redaction, so it strips by hand
-                    _b.sent();
-                    return [4 /*yield*/, (0, testing_1.async_test)("staff access-code read still receives responsesAISummary", function () { return sdk.api.form_responses.info_for_access_code({ accessCode: summaryAccessCode_1 }); }, { onResult: function (_a) {
-                                var response = _a.response;
-                                return response.responsesAISummary === RESPONSE_SUMMARY;
-                            } })];
-                case 20:
-                    _b.sent();
-                    return [3 /*break*/, 40];
-                case 21:
-                    if (!staffResponseId) return [3 /*break*/, 25];
-                    _b.label = 22;
-                case 22:
-                    _b.trys.push([22, 24, , 25]);
-                    return [4 /*yield*/, sdk.api.form_responses.deleteOne(staffResponseId)];
-                case 23:
-                    _b.sent();
-                    return [3 /*break*/, 25];
-                case 24:
-                    err_1 = _b.sent();
-                    return [3 /*break*/, 25];
-                case 25:
-                    if (!enduserResponseId) return [3 /*break*/, 29];
-                    _b.label = 26;
-                case 26:
-                    _b.trys.push([26, 28, , 29]);
-                    return [4 /*yield*/, sdk.api.form_responses.deleteOne(enduserResponseId)];
-                case 27:
-                    _b.sent();
-                    return [3 /*break*/, 29];
-                case 28:
-                    err_2 = _b.sent();
-                    return [3 /*break*/, 29];
-                case 29:
-                    if (!summaryResponseId) return [3 /*break*/, 33];
-                    _b.label = 30;
-                case 30:
-                    _b.trys.push([30, 32, , 33]);
-                    return [4 /*yield*/, sdk.api.form_responses.deleteOne(summaryResponseId)];
-                case 31:
-                    _b.sent();
-                    return [3 /*break*/, 33];
-                case 32:
-                    err_3 = _b.sent();
-                    return [3 /*break*/, 33];
-                case 33:
-                    _b.trys.push([33, 35, , 36]);
-                    return [4 /*yield*/, sdk.api.endusers.deleteOne(enduser.id)];
-                case 34:
-                    _b.sent();
-                    return [3 /*break*/, 36];
-                case 35:
-                    err_4 = _b.sent();
-                    return [3 /*break*/, 36];
-                case 36:
-                    _b.trys.push([36, 38, , 39]);
-                    return [4 /*yield*/, sdk.api.forms.deleteOne(form.id)];
-                case 37:
-                    _b.sent();
-                    return [3 /*break*/, 39];
-                case 38:
-                    err_5 = _b.sent();
-                    return [3 /*break*/, 39];
-                case 39: return [7 /*endfinally*/];
-                case 40: return [2 /*return*/];
-            }
-        });
+                ];
+            case 18:
+                _b.sent();
+                // the access-code read handler bypasses model-level redaction, so it strips by hand
+                return [4 /*yield*/, expect_result("public access-code read never receives responsesAISummary", function () { return enduserSDK_1.api.form_responses.info_for_access_code({ accessCode: summaryAccessCode_1 }); }, function (_a) {
+                        var response = _a.response;
+                        return ({
+                            pass: response.responsesAISummary === undefined && response.responsesAISummaryGeneratedAt === undefined,
+                            detail: "responsesAISummary=".concat(describe(response.responsesAISummary), " generatedAt=")
+                                + "".concat(describe(response.responsesAISummaryGeneratedAt), " (want both undefined)"),
+                        });
+                    })];
+            case 19:
+                // the access-code read handler bypasses model-level redaction, so it strips by hand
+                _b.sent();
+                return [4 /*yield*/, expect_result("staff access-code read still receives responsesAISummary", function () { return sdk_2.api.form_responses.info_for_access_code({ accessCode: summaryAccessCode_1 }); }, function (_a) {
+                        var response = _a.response;
+                        return ({
+                            pass: response.responsesAISummary === RESPONSE_SUMMARY,
+                            detail: "responsesAISummary=".concat(describe(response.responsesAISummary), " (want the seeded summary)"),
+                        });
+                    })];
+            case 20:
+                _b.sent();
+                return [3 /*break*/, 45];
+            case 21:
+                if (!tenant) return [3 /*break*/, 44];
+                sdk = tenant.sdk;
+                if (!staffResponseId) return [3 /*break*/, 25];
+                _b.label = 22;
+            case 22:
+                _b.trys.push([22, 24, , 25]);
+                return [4 /*yield*/, sdk.api.form_responses.deleteOne(staffResponseId)];
+            case 23:
+                _b.sent();
+                return [3 /*break*/, 25];
+            case 24:
+                err_1 = _b.sent();
+                return [3 /*break*/, 25];
+            case 25:
+                if (!enduserResponseId) return [3 /*break*/, 29];
+                _b.label = 26;
+            case 26:
+                _b.trys.push([26, 28, , 29]);
+                return [4 /*yield*/, sdk.api.form_responses.deleteOne(enduserResponseId)];
+            case 27:
+                _b.sent();
+                return [3 /*break*/, 29];
+            case 28:
+                err_2 = _b.sent();
+                return [3 /*break*/, 29];
+            case 29:
+                if (!summaryResponseId) return [3 /*break*/, 33];
+                _b.label = 30;
+            case 30:
+                _b.trys.push([30, 32, , 33]);
+                return [4 /*yield*/, sdk.api.form_responses.deleteOne(summaryResponseId)];
+            case 31:
+                _b.sent();
+                return [3 /*break*/, 33];
+            case 32:
+                err_3 = _b.sent();
+                return [3 /*break*/, 33];
+            case 33:
+                if (!enduserId) return [3 /*break*/, 37];
+                _b.label = 34;
+            case 34:
+                _b.trys.push([34, 36, , 37]);
+                return [4 /*yield*/, sdk.api.endusers.deleteOne(enduserId)];
+            case 35:
+                _b.sent();
+                return [3 /*break*/, 37];
+            case 36:
+                err_4 = _b.sent();
+                return [3 /*break*/, 37];
+            case 37:
+                if (!formId) return [3 /*break*/, 41];
+                _b.label = 38;
+            case 38:
+                _b.trys.push([38, 40, , 41]);
+                return [4 /*yield*/, sdk.api.forms.deleteOne(formId)];
+            case 39:
+                _b.sent();
+                return [3 /*break*/, 41];
+            case 40:
+                err_5 = _b.sent();
+                return [3 /*break*/, 41];
+            case 41:
+                _b.trys.push([41, 43, , 44]);
+                return [4 /*yield*/, tenant.teardown()];
+            case 42:
+                _b.sent();
+                return [3 /*break*/, 44];
+            case 43:
+                e_1 = _b.sent();
+                console.error('teardown failed', e_1);
+                return [3 /*break*/, 44];
+            case 44: return [7 /*endfinally*/];
+            case 45: return [2 /*return*/, checks];
+        }
     });
-};
+}); };
+exports.enduser_ai_summary_trust_gate_checks = enduser_ai_summary_trust_gate_checks;
+/** Asserting wrapper, for standalone runs. */
+var enduser_ai_summary_trust_gate_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _a = setup_isolated_1.assert_checks;
+                _b = ['Enduser AI summary trust gate'];
+                return [4 /*yield*/, (0, exports.enduser_ai_summary_trust_gate_checks)()];
+            case 1:
+                _a.apply(void 0, _b.concat([_c.sent()]));
+                return [2 /*return*/];
+        }
+    });
+}); };
 exports.enduser_ai_summary_trust_gate_tests = enduser_ai_summary_trust_gate_tests;
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+exports.ISOLATED_SUITE = {
+    name: 'Enduser AI summary trust gate',
+    run: exports.enduser_ai_summary_trust_gate_checks,
+};
 // Allow running this test file independently
 if (require.main === module) {
     console.log("\uD83C\uDF10 Using API URL: ".concat(host));
-    var sdk_2 = new sdk_1.Session({ host: host });
-    var sdkNonAdmin_1 = new sdk_1.Session({ host: host });
-    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, (0, setup_1.setup_tests)(sdk_2, sdkNonAdmin_1)];
-                case 1:
-                    _a.sent();
-                    return [4 /*yield*/, (0, exports.enduser_ai_summary_trust_gate_tests)({ sdk: sdk_2, sdkNonAdmin: sdkNonAdmin_1 })];
-                case 2:
-                    _a.sent();
-                    return [2 /*return*/];
-            }
-        });
-    }); };
-    runTests()
+    (0, exports.enduser_ai_summary_trust_gate_tests)()
         .then(function () {
         console.log("✅ enduserAISummary trust gate tests completed successfully");
         process.exit(0);