@tellescope/sdk 2.0.0-beta.1 → 2.0.0-beta.3

package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema-adminonly-enforcement.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/schema-adminonly-enforcement.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,gDAAyB;AAEzB,oCAAsC;AACtC,+CAG4B;AAC5B,mDAA4D;AAC5D,qCAAyC;AAEzC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D,IAAM,GAAG,GAAG,KAAc,CAAA;AAC1B,IAAM,WAAW,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAQxE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACI,IAAM,kCAAkC,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;;oBAC5D,IAAA,oBAAU,EAAC,8DAA8D,CAAC,CAAA;oBAEpE,MAAM,GAAY,EAAE,CAAA;oBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;oBAG/F,OAAO,GAAG,UACd,SAAiB,EAAE,MAAsB,EAAE,IAAY,EAAE,IAAU;;;;wCAEzD,qBAAM,eAAK,CAAC,OAAO,qBAC3B,MAAM,QAAA,EACN,GAAG,EAAE,UAAG,IAAI,gBAAM,IAAI,CAAE,IACrB,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,MAAA,EAAE,KACjD,OAAO,EAAE,EAAE,aAAa,EAAE,iBAAU,SAAS,CAAE,EAAE,EACjD,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,IAC1B,EAAA;;oCANI,CAAC,GAAG,SAMR;oCACF,sBAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAA;;;yBAC1C,CAAA;oBAEK,aAAa,GAAG,UAAC,CAAgC;;wBAAK,OAAA,CAC1D,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,OAAO,MAAK,mBAAmB,CAC5D,CAAA;qBAAA,CAAA;oBACK,SAAS,GAAG,UAAC,CAAgC;;wBAAK,OAAA,CACtD,UAAG,CAAC,CAAC,MAAM,cAAI,CAAC,MAAA,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,mCAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAE,CAC9D,CAAA;qBAAA,CAAA;oBAEG,MAAM,GAAG,EAAE,CAAA;oBACX,UAAU,GAAG,EAAE,CAAA;oBACf,SAAS,GAAG,EAAE,CAAA;;;;oBAKV,IAAI,GAAG,sBAAe,IAAI,EAAE,CAAE,CAAA;oBACvB,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;4BACjE,IAAI,MAAA;4BACJ,WAAW,wBACN,gCAAoB;gCACvB,0FAA0F;gCAC1F,uCAAuC;gCACvC,mBAAmB,EAAE,WAAW,EAChC,aAAa,EAAE,WAAW,EAC1B,mBAAmB,EAAE,WAAW,EAChC,iBAAiB,EAAE,WAAW,EAC9B,KAAK,EAAE,WAAW,GACnB;yBACK,CAAC,EAAA;;oBAZH,IAAI,GAAG,SAYJ;oBACT,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;oBAEC,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;4BAC7C,KAAK,EAAE,yBAAkB,IAAI,EAAE,wBAAqB;4BACpD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;4BAC9B,aAAa,EAAE,IAAI;4BACnB,0BAA0B,EAAE,IAAI;4BAChC,KAAK,EAAE,CAAC,IAAI,CAAC;yBACP,CAAC,EAAA;;oBANH,QAAQ,GAAG,SAMR;oBACT,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;oBAED,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAA5E,aAAa,GAAG,CAAC,SAA2D,CAAC,CAAC,SAAS;oBACzE,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAA;;oBAA9E,UAAU,GAAG,CAAC,SAAgE,CAAC,CAAC,SAAS;oBAEzF,WAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;oBACnE,qBAAM,WAAW,CAAC,eAAe,EAAE,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,MAAM,CACJ,8DAA8D,EAC9D,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,MAAA,WAAW,CAAC,QAAQ,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/F,aAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,oBAAU,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAE,CACpF,CAAA;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;oBAAhF,OAAO,GAAG,SAAsE;oBACtF,SAAS,GAAG,OAAO,CAAC,EAAE,CAAA;oBAIP,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAA;;oBAA9E,MAAM,GAAG,SAAqE;oBAC9E,SAAS,GAAG,MAAM,CAAC,EAAE,CAAA;oBAC3B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC;wBAE3C,oFAAoF;sBAFzC;;oBAA3C,SAA2C,CAAA;oBAIvC,uBAAuB,GAAG,KAAK,CAAA;;;;oBAEhB,qBAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC,EAAA;;oBAAvD,QAAQ,GAAG,SAA4C;oBAC7D,uBAAuB,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,UAAC,CAAM,YAAK,OAAA,SAAS,CAAC,IAAI,CAAC,MAAA,CAAC,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAA,EAAA,CAAC,CAAA;;;;;;oBAG/F,eAAe,GAAG,KAAK,CAAA;;;;oBAEb,qBAAM,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAA;;oBAAjE,GAAG,GAAG,SAA2D;oBACvE,eAAe,GAAG,CAAC,CAAC,CAAC,GAAW,aAAX,GAAG,uBAAH,GAAG,CAAU,SAAS,CAAA,CAAA;;;;;;oBAKvC,MAAM,GAEN;wBACJ;4BACE,KAAK,EAAE,oCAAoC;4BAC3C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC;4BAC3D,4EAA4E;4BAC5E,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,WAAA,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,EAAE;yBACpE;wBACD;4BACE,KAAK,EAAE,uCAAuC;4BAC9C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oCAAoC;4BAC1D,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,oDAAoD;yBAC/F;wBACD;4BACE,KAAK,EAAE,wCAAwC;4BAC/C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,yCAAyC;4BAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;4BAC1B,IAAI,EAAE,uBAAuB;gCAC3B,CAAC,CAAC,yFAAyF;gCAC3F,CAAC,CAAC,SAAS;yBACd;wBACD;4BACE,KAAK,EAAE,2BAA2B;4BAClC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B;4BAClD,IAAI,EAAE,EAAE;4BACR,IAAI,EAAE,eAAe;gCACnB,CAAC,CAAC,SAAS;gCACX,CAAC,CAAC,sEAAsE;yBAC3E;wBACD;4BACE,KAAK,EAAE,iCAAiC;4BACxC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B;4BAClD,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,uDAAuD;yBAC5F;wBACD;4BACE,KAAK,EAAE,sCAAsC;4BAC7C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC;4BACvD,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,8CAA8C;yBACjG;qBACF,CAAA;0BAEyB,EAAN,iBAAM;;;yBAAN,CAAA,oBAAM,CAAA;oBAAf,KAAK;oBACd,IAAI,KAAK,CAAC,IAAI,EAAE;wBACd,MAAM,CAAC,aAAM,KAAK,CAAC,KAAK,yBAAsB,EAAE,IAAI,EAAE,kCAAsB,KAAK,CAAC,IAAI,CAAE,CAAC,CAAA;wBACzF,yBAAQ;qBACT;oBAEsB,qBAAM,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;wBACzF,4FAA4F;sBADH;;oBAAnF,cAAc,GAAG,SAAkE;oBAExE,qBAAM,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAA;;oBAA1E,QAAQ,GAAG,SAA+D;oBAC1E,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;oBAExC,MAAM,CACJ,aAAM,KAAK,CAAC,KAAK,yBAAsB,EACvC,CAAC,QAAQ,IAAI,aAAa,CAAC,cAAc,CAAC,EAC1C,mBAAY,SAAS,CAAC,cAAc,CAAC,+BAAqB,QAAQ,CAAC,MAAM,CAAE;0BACvE,CAAC,QAAQ,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,EAAE,CAAC,CAChE,CAAA;;;oBAhBiB,IAAM,CAAA;;;oBAqBpB,MAAM,GAA0E;wBACpF;4BACE,KAAK,EAAE,mCAAmC;4BAC1C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oCAAoC;4BAC1D,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,wBAAwB;yBAC1E;wBACD;4BACE,KAAK,EAAE,6BAA6B;4BACpC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,EAAE;yBAC/D;wBACD;4BACE,KAAK,EAAE,mCAAmC;4BAC1C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC;4BAC7D,4FAA4F;4BAC5F,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;yBAC5B;qBACF,CAAA;0BAEyB,EAAN,iBAAM;;;yBAAN,CAAA,oBAAM,CAAA;oBAAf,KAAK;oBACJ,qBAAM,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAA;;oBAAtE,CAAC,GAAG,SAAkE;oBAC5E,MAAM,CACJ,aAAM,KAAK,CAAC,KAAK,iEAA8D,EAC/E,CAAC,aAAa,CAAC,CAAC,CAAC,EACjB,UAAG,SAAS,CAAC,CAAC,CAAC,8DAA2D,CAC3E,CAAA;;;oBANiB,IAAM,CAAA;;;oBAS1B,8FAA8F;oBAC9F,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;oBACjC,WAAsB,EAAN,iBAAM,EAAN,oBAAM,EAAN,IAAM,EAAE;wBAAb,CAAC;wBACV,OAAO,CAAC,GAAG,CAAC,cAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,eAAK,CAAC,CAAC,KAAK,uBAAQ,CAAC,CAAC,MAAM,CAAE,CAAC,CAAA;qBAC3E;oBACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;oBAEf,WAAsB,EAAN,iBAAM,EAAN,oBAAM,EAAN,IAAM,EAAE;wBAAb,CAAC;wBACV,IAAA,gBAAM,EAAC,CAAC,CAAC,IAAI,EAAE,UAAG,CAAC,CAAC,KAAK,qBAAM,CAAC,CAAC,MAAM,CAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;qBACpD;;;yBAEG,SAAS,EAAT,yBAAS;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAA;;oBAA3C,SAA2C,CAAA;;;;;;yBAC9D,UAAU,EAAV,yBAAU;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAAA;;oBAAzC,SAAyC,CAAA;;;;;;yBAC7D,MAAM,EAAN,yBAAM;;;;oBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,EAAA;;oBAA7D,SAA6D,CAAA;;;;;;;;;;CAEpF,CAAA;AAxMY,QAAA,kCAAkC,sCAwM9C;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,0CAAkC,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAA9D,SAA8D,CAAA;;;;SAC/D,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAA;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAA;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
+{"version":3,"file":"schema-adminonly-enforcement.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/schema-adminonly-enforcement.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,gDAAyB;AAEzB,oCAAsC;AACtC,mDAA4D;AAC5D,uDAK6B;AAE7B,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D,IAAM,GAAG,GAAG,KAAc,CAAA;AAC1B,IAAM,WAAW,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACI,IAAM,mCAAmC,GAAG;;;;;;gBAC3C,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;gBAG/F,OAAO,GAAG,UACd,SAAiB,EAAE,MAAsB,EAAE,IAAY,EAAE,IAAU;;;;oCAEzD,qBAAM,eAAK,CAAC,OAAO,qBAC3B,MAAM,QAAA,EACN,GAAG,EAAE,UAAG,IAAI,gBAAM,IAAI,CAAE,IACrB,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,MAAA,EAAE,KACjD,OAAO,EAAE,EAAE,aAAa,EAAE,iBAAU,SAAS,CAAE,EAAE,EACjD,cAAc,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,IAC1B,EAAA;;gCANI,CAAC,GAAG,SAMR;gCACF,sBAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAA;;;qBAC1C,CAAA;gBAEK,aAAa,GAAG,UAAC,CAAgC;;oBAAK,OAAA,CAC1D,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,OAAO,MAAK,mBAAmB,CAC5D,CAAA;iBAAA,CAAA;gBACK,SAAS,GAAG,UAAC,CAAgC;;oBAAK,OAAA,CACtD,UAAG,CAAC,CAAC,MAAM,cAAI,CAAC,MAAA,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,mCAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAE,CAC9D,CAAA;iBAAA,CAAA;gBAGG,MAAM,GAAG,EAAE,CAAA;gBACX,UAAU,GAAG,EAAE,CAAA;gBACf,SAAS,GAAG,EAAE,CAAA;;;;gBAGP,qBAAM,IAAA,sCAAqB,EAAC;wBACnC,IAAI,EAAE,uCAAgC,IAAI,EAAE,CAAE;wBAC9C,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;wBAC1B,OAAO,EAAE,CAAC;qBACX,CAAC,EAAA;;gBAJF,MAAM,GAAG,SAIP,CAAA;gBACM,GAAG,GAAK,MAAM,IAAX,CAAW;gBAIhB,IAAI,GAAG,sBAAe,IAAI,EAAE,CAAE,CAAA;gBACvB,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC;wBACjE,IAAI,MAAA;wBACJ,WAAW,wBACN,gCAAoB;4BACvB,0FAA0F;4BAC1F,uCAAuC;4BACvC,mBAAmB,EAAE,WAAW,EAChC,aAAa,EAAE,WAAW,EAC1B,mBAAmB,EAAE,WAAW,EAChC,iBAAiB,EAAE,WAAW,EAC9B,KAAK,EAAE,WAAW,GACnB;qBACK,CAAC,EAAA;;gBAZH,IAAI,GAAG,SAYJ;gBACT,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;gBAEC,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;wBAC7C,KAAK,EAAE,yBAAkB,IAAI,EAAE,wBAAqB;wBACpD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO;wBAC9B,aAAa,EAAE,IAAI;wBACnB,0BAA0B,EAAE,IAAI;wBAChC,KAAK,EAAE,CAAC,IAAI,CAAC;qBACP,CAAC,EAAA;;gBANH,QAAQ,GAAG,SAMR;gBACT,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;gBAED,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAA;;gBAA5E,aAAa,GAAG,CAAC,SAA2D,CAAC,CAAC,SAAS;gBACzE,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAA;;gBAA9E,UAAU,GAAG,CAAC,SAAgE,CAAC,CAAC,SAAS;gBAEzF,WAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;gBACnE,qBAAM,WAAW,CAAC,eAAe,EAAE,EAAA;;gBAAnC,SAAmC,CAAA;gBACnC,MAAM,CACJ,8DAA8D,EAC9D,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,MAAA,WAAW,CAAC,QAAQ,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/F,aAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,oBAAU,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAE,CACpF,CAAA;gBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAA;;gBAAhF,OAAO,GAAG,SAAsE;gBACtF,SAAS,GAAG,OAAO,CAAC,EAAE,CAAA;gBAIP,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAA;;gBAA9E,MAAM,GAAG,SAAqE;gBAC9E,SAAS,GAAG,MAAM,CAAC,EAAE,CAAA;gBAC3B,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC;oBAE3C,oFAAoF;kBAFzC;;gBAA3C,SAA2C,CAAA;gBAIvC,uBAAuB,GAAG,KAAK,CAAA;;;;gBAEhB,qBAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC,EAAA;;gBAAvD,QAAQ,GAAG,SAA4C;gBAC7D,uBAAuB,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,UAAC,CAAM,YAAK,OAAA,SAAS,CAAC,IAAI,CAAC,MAAA,CAAC,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAA,EAAA,CAAC,CAAA;;;;;;gBAG/F,eAAe,GAAG,KAAK,CAAA;;;;gBAEb,qBAAM,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAA;;gBAAjE,GAAG,GAAG,SAA2D;gBACvE,eAAe,GAAG,CAAC,CAAC,CAAC,GAAW,aAAX,GAAG,uBAAH,GAAG,CAAU,SAAS,CAAA,CAAA;;;;;;gBAKvC,MAAM,GAEN;oBACJ;wBACE,KAAK,EAAE,oCAAoC;wBAC3C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC;wBAC3D,4EAA4E;wBAC5E,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,WAAA,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,EAAE;qBACpE;oBACD;wBACE,KAAK,EAAE,uCAAuC;wBAC9C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oCAAoC;wBAC1D,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,oDAAoD;qBAC/F;oBACD;wBACE,KAAK,EAAE,wCAAwC;wBAC/C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,yCAAyC;wBAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;wBAC1B,IAAI,EAAE,uBAAuB;4BAC3B,CAAC,CAAC,yFAAyF;4BAC3F,CAAC,CAAC,SAAS;qBACd;oBACD;wBACE,KAAK,EAAE,2BAA2B;wBAClC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B;wBAClD,IAAI,EAAE,EAAE;wBACR,IAAI,EAAE,eAAe;4BACnB,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,sEAAsE;qBAC3E;oBACD;wBACE,KAAK,EAAE,iCAAiC;wBACxC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B;wBAClD,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,uDAAuD;qBAC5F;oBACD;wBACE,KAAK,EAAE,sCAAsC;wBAC7C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC;wBACvD,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,8CAA8C;qBACjG;iBACF,CAAA;sBAEyB,EAAN,iBAAM;;;qBAAN,CAAA,oBAAM,CAAA;gBAAf,KAAK;gBACd,IAAI,KAAK,CAAC,IAAI,EAAE;oBACd,MAAM,CAAC,aAAM,KAAK,CAAC,KAAK,yBAAsB,EAAE,IAAI,EAAE,kCAAsB,KAAK,CAAC,IAAI,CAAE,CAAC,CAAA;oBACzF,yBAAQ;iBACT;gBAEsB,qBAAM,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;oBACzF,4FAA4F;kBADH;;gBAAnF,cAAc,GAAG,SAAkE;gBAExE,qBAAM,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAA;;gBAA1E,QAAQ,GAAG,SAA+D;gBAC1E,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;gBAExC,MAAM,CACJ,aAAM,KAAK,CAAC,KAAK,yBAAsB,EACvC,CAAC,QAAQ,IAAI,aAAa,CAAC,cAAc,CAAC,EAC1C,mBAAY,SAAS,CAAC,cAAc,CAAC,+BAAqB,QAAQ,CAAC,MAAM,CAAE;sBACvE,CAAC,QAAQ,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,EAAE,CAAC,CAChE,CAAA;;;gBAhBiB,IAAM,CAAA;;;gBAqBpB,MAAM,GAA0E;oBACpF;wBACE,KAAK,EAAE,mCAAmC;wBAC1C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oCAAoC;wBAC1D,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,wBAAwB;qBAC1E;oBACD;wBACE,KAAK,EAAE,6BAA6B;wBACpC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,EAAE;qBAC/D;oBACD;wBACE,KAAK,EAAE,mCAAmC;wBAC1C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC;wBAC7D,4FAA4F;wBAC5F,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;qBAC5B;iBACF,CAAA;sBAEyB,EAAN,iBAAM;;;qBAAN,CAAA,oBAAM,CAAA;gBAAf,KAAK;gBACJ,qBAAM,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAA;;gBAAtE,CAAC,GAAG,SAAkE;gBAC5E,MAAM,CACJ,aAAM,KAAK,CAAC,KAAK,iEAA8D,EAC/E,CAAC,aAAa,CAAC,CAAC,CAAC,EACjB,UAAG,SAAS,CAAC,CAAC,CAAC,8DAA2D,CAC3E,CAAA;;;gBANiB,IAAM,CAAA;;;;qBAStB,MAAM,EAAN,yBAAM;gBACA,GAAG,GAAK,MAAM,IAAX,CAAW;qBAClB,SAAS,EAAT,yBAAS;;;;gBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAA;;gBAA3C,SAA2C,CAAA;;;;;;qBAC9D,UAAU,EAAV,yBAAU;;;;gBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAAA;;gBAAzC,SAAyC,CAAA;;;;;;qBAC7D,MAAM,EAAN,yBAAM;;;;gBAAU,qBAAM,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,SAAS,CAAC,MAAM,CAAC,EAAA;;gBAA7D,SAA6D,CAAA;;;;;;;gBAE3E,qBAAM,MAAM,CAAC,QAAQ,EAAE,EAAA;;gBAAvB,SAAuB,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;qBAInF,sBAAO,MAAM,EAAA;;;KACd,CAAA;AA1MY,QAAA,mCAAmC,uCA0M/C;AAED,8CAA8C;AACvC,IAAM,kCAAkC,GAAG;;;;;gBAChD,KAAA,8BAAa,CAAA;sBAAC,8BAA8B;gBAAE,qBAAM,IAAA,2CAAmC,GAAE,EAAA;;gBAAzF,4BAA8C,SAA2C,GAAC,CAAA;;;;KAC3F,CAAA;AAFY,QAAA,kCAAkC,sCAE9C;AAED,oGAAoG;AACvF,QAAA,cAAc,GAAkB;IAC3C,IAAI,EAAE,8BAA8B;IACpC,GAAG,EAAE,2CAAmC;CACzC,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAA,0CAAkC,GAAE;SACjC,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAA;QAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAA;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.d.ts

@@ -1,4 +1,4 @@
-import { Session } from "../../../sdk";
+import { Check, IsolatedSuite } from "../../setup_isolated";
 /**
  * Self-role privilege-escalation guard (relates to a prior internal review, which was
  * investigated and closed as a FALSE POSITIVE — see that file for the full code trace).
@@ -18,21 +18,28 @@ import { Session } from "../../../sdk";
  * The self-promotion is blocked.
  *
  * This test locks that boundary in place so a future refactor of the role constraints can't
- * silently reintroduce the escalation. A dedicated throwaway non-admin user is used as the
- * "attacker" (we never mutate the shared sdkNonAdmin's roles):
+ * silently reintroduce the escalation. It runs on its own provisioned tenant, whose single user is
+ * the admin; the "attacker" is a throwaway user this suite creates:
  *   1. Admin creates a throwaway user and assigns it a non-admin role (`['Provider']`).
  *   2. Authenticate AS that user via a freshly-minted auth token.
  *   3. As the attacker, attempt four self-role mutations — ['Admin'], ['Provider','Admin'],
- *      an arbitrary role, and [] — and assert EACH is blocked.       <-- the security assertions
+ *      an arbitrary role, and [] — and check EACH is blocked.        <-- the security checks
  *   4. Confirm (as admin) the attacker's roles are still ['Provider'] — nothing slipped through.
  *   5. Positive control: admin CAN update the throwaway user's roles. <-- guards against an
  *      over-restrictive regression that would block legitimate admin role management.
  *
- * Expected on current (correct) code: all assertions pass. A regression that made the self-update
- * path role-writable by non-admins would flip the step-3/step-4 assertions to red.
+ * The tenant provisions `roles: [{ role: 'Provider' }]` so the attacker's permissions come from a
+ * real role record (users.update: 'Default'), rather than from get_access_permissions_by_roles'
+ * unknown-role fallback — the escalation checks must only be able to pass via the role constraint.
+ * That `roles:` spec replaces the provisioner's default `[Non-Admin, Test]` entirely, which is safe
+ * here only because this tenant provisions no non-admin user.
+ *
+ * Expected on current (correct) code: all checks pass. A regression that made the self-update
+ * path role-writable by non-admins would flip the step-3/step-4 checks to red.
  */
-export declare const self_admin_role_assignment_tests: ({ sdk }: {
-    sdk: Session;
-    sdkNonAdmin: Session;
-}) => Promise<void>;
+export declare const self_admin_role_assignment_checks: () => Promise<Check[]>;
+/** Asserting wrapper, for standalone runs. */
+export declare const self_admin_role_assignment_tests: () => Promise<void>;
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+export declare const ISOLATED_SUITE: IsolatedSuite;
 //# sourceMappingURL=self-admin-role-assignment.test.d.ts.map

package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"self-admin-role-assignment.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/self-admin-role-assignment.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAUtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,gCAAgC;SAA2B,OAAO;iBAAe,OAAO;mBAkGpG,CAAA"}
+{"version":3,"file":"self-admin-role-assignment.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/self-admin-role-assignment.test.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,EACL,aAAa,EAEd,MAAM,sBAAsB,CAAA;AAM7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,eAAO,MAAM,iCAAiC,QAAa,QAAQ,KAAK,EAAE,CA4HzE,CAAA;AAED,8CAA8C;AAC9C,eAAO,MAAM,gCAAgC,qBAE5C,CAAA;AAED,oGAAoG;AACpG,eAAO,MAAM,cAAc,EAAE,aAG5B,CAAA"}

package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.js

@@ -36,12 +36,13 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
     }
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.self_admin_role_assignment_tests = void 0;
+exports.ISOLATED_SUITE = exports.self_admin_role_assignment_tests = exports.self_admin_role_assignment_checks = void 0;
 require('source-map-support').install();
 var sdk_1 = require("../../../sdk");
 var testing_1 = require("@tellescope/testing");
-var setup_1 = require("../../setup");
+var setup_isolated_1 = require("../../setup_isolated");
 var host = process.env.API_URL || 'http://localhost:8080';
+var RAND = function () { return Math.random().toString(36).slice(2, 10); };
 /**
  * Self-role privilege-escalation guard (relates to a prior internal review, which was
  * investigated and closed as a FALSE POSITIVE — see that file for the full code trace).
@@ -61,155 +62,189 @@ var host = process.env.API_URL || 'http://localhost:8080';
  * The self-promotion is blocked.
  *
  * This test locks that boundary in place so a future refactor of the role constraints can't
- * silently reintroduce the escalation. A dedicated throwaway non-admin user is used as the
- * "attacker" (we never mutate the shared sdkNonAdmin's roles):
+ * silently reintroduce the escalation. It runs on its own provisioned tenant, whose single user is
+ * the admin; the "attacker" is a throwaway user this suite creates:
  *   1. Admin creates a throwaway user and assigns it a non-admin role (`['Provider']`).
  *   2. Authenticate AS that user via a freshly-minted auth token.
  *   3. As the attacker, attempt four self-role mutations — ['Admin'], ['Provider','Admin'],
- *      an arbitrary role, and [] — and assert EACH is blocked.       <-- the security assertions
+ *      an arbitrary role, and [] — and check EACH is blocked.        <-- the security checks
  *   4. Confirm (as admin) the attacker's roles are still ['Provider'] — nothing slipped through.
  *   5. Positive control: admin CAN update the throwaway user's roles. <-- guards against an
  *      over-restrictive regression that would block legitimate admin role management.
  *
- * Expected on current (correct) code: all assertions pass. A regression that made the self-update
- * path role-writable by non-admins would flip the step-3/step-4 assertions to red.
+ * The tenant provisions `roles: [{ role: 'Provider' }]` so the attacker's permissions come from a
+ * real role record (users.update: 'Default'), rather than from get_access_permissions_by_roles'
+ * unknown-role fallback — the escalation checks must only be able to pass via the role constraint.
+ * That `roles:` spec replaces the provisioner's default `[Non-Admin, Test]` entirely, which is safe
+ * here only because this tenant provisions no non-admin user.
+ *
+ * Expected on current (correct) code: all checks pass. A regression that made the self-update
+ * path role-writable by non-admins would flip the step-3/step-4 checks to red.
  */
-var self_admin_role_assignment_tests = function (_a) {
-    var sdk = _a.sdk;
-    return __awaiter(void 0, void 0, void 0, function () {
-        var stamp, NON_ADMIN_ROLE, expect_blocked, attackerId, attacker, attackerBefore, sdkAttacker_1, _b, attackerAfter, afterAdminUpdate, _c;
-        var _d;
-        var _e;
-        return __generator(this, function (_f) {
-            switch (_f.label) {
-                case 0:
-                    (0, testing_1.log_header)("self-admin role assignment privilege-escalation regression");
-                    stamp = Date.now();
-                    NON_ADMIN_ROLE = 'Provider';
-                    expect_blocked = function (fn, description) { return __awaiter(void 0, void 0, void 0, function () {
-                        var e_1;
-                        return __generator(this, function (_a) {
-                            switch (_a.label) {
-                                case 0:
-                                    _a.trys.push([0, 2, , 3]);
-                                    return [4 /*yield*/, fn()];
-                                case 1:
-                                    _a.sent();
-                                    (0, testing_1.assert)(false, "".concat(description, " - SELF-ROLE ESCALATION SUCCEEDED (expected it to be blocked)"));
-                                    return [3 /*break*/, 3];
-                                case 2:
-                                    e_1 = _a.sent();
-                                    // CRUD relationship-constraint failures surface as 400 { message, info } via SDK parseError.
-                                    (0, testing_1.assert)((e_1 === null || e_1 === void 0 ? void 0 : e_1.code) === 400 || (e_1 === null || e_1 === void 0 ? void 0 : e_1.statusCode) === 400 || typeof (e_1 === null || e_1 === void 0 ? void 0 : e_1.message) === 'string', "".concat(description, " - expected a block error, got: ").concat(JSON.stringify(e_1)), description);
-                                    return [3 /*break*/, 3];
-                                case 3: return [2 /*return*/];
-                            }
-                        });
-                    }); };
-                    _f.label = 1;
-                case 1:
-                    _f.trys.push([1, , 15, 20]);
-                    return [4 /*yield*/, sdk.api.users.createOne({
-                            email: "f0076-attacker-".concat(stamp, "@example.com"),
-                            notificationEmailsDisabled: true,
-                            verifiedEmail: true,
-                        })];
-                case 2:
-                    attacker = _f.sent();
-                    attackerId = attacker.id;
-                    return [4 /*yield*/, sdk.api.users.updateOne(attackerId, { roles: [NON_ADMIN_ROLE] }, { replaceObjectFields: true })];
-                case 3:
-                    _f.sent();
-                    return [4 /*yield*/, (0, testing_1.wait)(undefined, 2000)
-                        // Setup sanity: the attacker holds exactly the non-admin role and is NOT an admin.
-                    ]; // role change triggers a logout; let it propagate before minting a token
-                case 4:
-                    _f.sent(); // role change triggers a logout; let it propagate before minting a token
-                    return [4 /*yield*/, sdk.api.users.getOne(attackerId)];
-                case 5:
-                    attackerBefore = _f.sent();
-                    (0, testing_1.assert)(JSON.stringify(attackerBefore.roles) === JSON.stringify([NON_ADMIN_ROLE]), "Setup failed: expected attacker to hold [".concat(NON_ADMIN_ROLE, "], got ").concat(JSON.stringify(attackerBefore.roles)), 'setup: attacker holds a non-admin role');
-                    _b = sdk_1.Session.bind;
-                    _d = {
-                        host: host
-                    };
-                    return [4 /*yield*/, sdk.api.users.generate_auth_token({ id: attackerId })];
-                case 6:
-                    sdkAttacker_1 = new (_b.apply(sdk_1.Session, [void 0, (_d.authToken = (_f.sent()).authToken,
-                            _d)]))();
-                    return [4 /*yield*/, sdkAttacker_1.refresh_session()]; // populate userInfo from the freshly-minted token
-                case 7:
-                    _f.sent(); // populate userInfo from the freshly-minted token
-                    (0, testing_1.assert)(sdkAttacker_1.userInfo.id === attackerId && !((_e = sdkAttacker_1.userInfo.roles) !== null && _e !== void 0 ? _e : []).includes('Admin'), "Setup failed: attacker session is not the expected non-admin user", 'setup: authenticated as the non-admin attacker');
-                    // 3. SECURITY ASSERTIONS — every self-role mutation by the non-admin must be blocked.
-                    return [4 /*yield*/, expect_blocked(function () { return sdkAttacker_1.api.users.updateOne(attackerId, { roles: ['Admin'] }, { replaceObjectFields: true }); }, 'non-admin self-update to [Admin] is blocked')];
-                case 8:
-                    // 3. SECURITY ASSERTIONS — every self-role mutation by the non-admin must be blocked.
-                    _f.sent();
-                    return [4 /*yield*/, expect_blocked(function () { return sdkAttacker_1.api.users.updateOne(attackerId, { roles: [NON_ADMIN_ROLE, 'Admin'] }, { replaceObjectFields: true }); }, 'non-admin self-update to [Provider, Admin] is blocked')];
-                case 9:
-                    _f.sent();
-                    return [4 /*yield*/, expect_blocked(function () { return sdkAttacker_1.api.users.updateOne(attackerId, { roles: ["Arbitrary_".concat(stamp)] }, { replaceObjectFields: true }); }, 'non-admin self-update to an arbitrary role is blocked')];
-                case 10:
-                    _f.sent();
-                    return [4 /*yield*/, expect_blocked(function () { return sdkAttacker_1.api.users.updateOne(attackerId, { roles: [] }, { replaceObjectFields: true }); }, 'non-admin self-update to [] (would grant defaults) is blocked')
-                        // 4. STATE ASSERTION — nothing slipped through; roles are still the original non-admin role.
-                    ];
-                case 11:
-                    _f.sent();
-                    return [4 /*yield*/, sdk.api.users.getOne(attackerId)];
-                case 12:
-                    attackerAfter = _f.sent();
-                    (0, testing_1.assert)(JSON.stringify(attackerAfter.roles) === JSON.stringify([NON_ADMIN_ROLE]), "ESCALATION LEAK: attacker roles changed to ".concat(JSON.stringify(attackerAfter.roles), " ")
-                        + "after self-update attempts. Expected [".concat(NON_ADMIN_ROLE, "]."), 'attacker roles unchanged after all self-escalation attempts');
-                    // 5. POSITIVE CONTROL — an Admin CAN update the user's roles (mechanism is not over-restricted).
-                    return [4 /*yield*/, sdk.api.users.updateOne(attackerId, { roles: [NON_ADMIN_ROLE] }, { replaceObjectFields: true })];
-                case 13:
-                    // 5. POSITIVE CONTROL — an Admin CAN update the user's roles (mechanism is not over-restricted).
-                    _f.sent();
-                    return [4 /*yield*/, sdk.api.users.getOne(attackerId)];
-                case 14:
-                    afterAdminUpdate = _f.sent();
-                    (0, testing_1.assert)(JSON.stringify(afterAdminUpdate.roles) === JSON.stringify([NON_ADMIN_ROLE]), "Admin role update failed: roles are ".concat(JSON.stringify(afterAdminUpdate.roles), ", expected [").concat(NON_ADMIN_ROLE, "]"), 'admin can manage user roles (positive control)');
-                    return [3 /*break*/, 20];
-                case 15:
-                    if (!attackerId) return [3 /*break*/, 19];
-                    _f.label = 16;
-                case 16:
-                    _f.trys.push([16, 18, , 19]);
-                    return [4 /*yield*/, sdk.api.users.deleteOne(attackerId)];
-                case 17:
-                    _f.sent();
-                    return [3 /*break*/, 19];
-                case 18:
-                    _c = _f.sent();
-                    return [3 /*break*/, 19];
-                case 19: return [7 /*endfinally*/];
-                case 20: return [2 /*return*/];
-            }
-        });
+var self_admin_role_assignment_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var checks, record, stamp, NON_ADMIN_ROLE, tenant, attackerId, sdk, expect_blocked, attacker, attackerBefore, sdkAttacker_1, _a, attackerAfter, afterAdminUpdate, _b, e_1;
+    var _c;
+    var _d, _e, _f, _g, _h, _j;
+    return __generator(this, function (_k) {
+        switch (_k.label) {
+            case 0:
+                checks = [];
+                record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
+                stamp = Date.now();
+                NON_ADMIN_ROLE = 'Provider';
+                _k.label = 1;
+            case 1:
+                _k.trys.push([1, , 16, 24]);
+                return [4 /*yield*/, (0, setup_isolated_1.setup_isolated_tenant)({
+                        name: "SelfAdminRoleAssignment ".concat(RAND()),
+                        users: [{ isAdmin: true }],
+                        roles: [{ role: NON_ADMIN_ROLE }],
+                        apiKeys: 0,
+                    })];
+            case 2:
+                tenant = _k.sent();
+                sdk = tenant.sdk;
+                expect_blocked = function (fn, description) { return __awaiter(void 0, void 0, void 0, function () {
+                    var unexpected, e_2;
+                    return __generator(this, function (_a) {
+                        switch (_a.label) {
+                            case 0:
+                                _a.trys.push([0, 2, , 3]);
+                                return [4 /*yield*/, fn()];
+                            case 1:
+                                unexpected = _a.sent();
+                                record(description, false, "SELF-ROLE ESCALATION SUCCEEDED (expected it to be blocked); result="
+                                    + "".concat(unexpected === undefined ? '(none)' : JSON.stringify(unexpected)));
+                                return [3 /*break*/, 3];
+                            case 2:
+                                e_2 = _a.sent();
+                                // CRUD relationship-constraint failures surface as 400 { message, info } via SDK parseError.
+                                record(description, (e_2 === null || e_2 === void 0 ? void 0 : e_2.code) === 400 || (e_2 === null || e_2 === void 0 ? void 0 : e_2.statusCode) === 400 || typeof (e_2 === null || e_2 === void 0 ? void 0 : e_2.message) === 'string', "blocked with ".concat(typeof (e_2 === null || e_2 === void 0 ? void 0 : e_2.message) === 'string' && e_2.message !== ''
+                                    ? e_2.message
+                                    : (e_2 === undefined || e_2 === null ? String(e_2) : JSON.stringify(e_2))));
+                                return [3 /*break*/, 3];
+                            case 3: return [2 /*return*/];
+                        }
+                    });
+                }); };
+                return [4 /*yield*/, sdk.api.users.createOne({
+                        email: "f0076-attacker-".concat(stamp, "@example.com"),
+                        notificationEmailsDisabled: true,
+                        verifiedEmail: true,
+                    })];
+            case 3:
+                attacker = _k.sent();
+                attackerId = attacker.id;
+                return [4 /*yield*/, sdk.api.users.updateOne(attackerId, { roles: [NON_ADMIN_ROLE] }, { replaceObjectFields: true })];
+            case 4:
+                _k.sent();
+                return [4 /*yield*/, (0, testing_1.wait)(undefined, 2000)
+                    // Setup sanity: the attacker holds exactly the non-admin role and is NOT an admin.
+                ]; // role change triggers a logout; let it propagate before minting a token
+            case 5:
+                _k.sent(); // role change triggers a logout; let it propagate before minting a token
+                return [4 /*yield*/, sdk.api.users.getOne(attackerId)];
+            case 6:
+                attackerBefore = _k.sent();
+                record('setup: attacker holds a non-admin role', JSON.stringify(attackerBefore.roles) === JSON.stringify([NON_ADMIN_ROLE]), "roles=".concat(JSON.stringify((_d = attackerBefore.roles) !== null && _d !== void 0 ? _d : null), " (want [").concat(NON_ADMIN_ROLE, "])"));
+                _a = sdk_1.Session.bind;
+                _c = {
+                    host: host
+                };
+                return [4 /*yield*/, sdk.api.users.generate_auth_token({ id: attackerId })];
+            case 7:
+                sdkAttacker_1 = new (_a.apply(sdk_1.Session, [void 0, (_c.authToken = (_k.sent()).authToken,
+                        _c)]))();
+                return [4 /*yield*/, sdkAttacker_1.refresh_session()]; // populate userInfo from the freshly-minted token
+            case 8:
+                _k.sent(); // populate userInfo from the freshly-minted token
+                record('setup: authenticated as the non-admin attacker', sdkAttacker_1.userInfo.id === attackerId && !((_e = sdkAttacker_1.userInfo.roles) !== null && _e !== void 0 ? _e : []).includes('Admin'), "session id=".concat(JSON.stringify((_f = sdkAttacker_1.userInfo.id) !== null && _f !== void 0 ? _f : null), " roles=")
+                    + "".concat(JSON.stringify((_g = sdkAttacker_1.userInfo.roles) !== null && _g !== void 0 ? _g : null), " (want id=").concat(attackerId, ", no Admin)"));
+                // 3. SECURITY CHECKS — every self-role mutation by the non-admin must be blocked.
+                return [4 /*yield*/, expect_blocked(function () { return sdkAttacker_1.api.users.updateOne(attackerId, { roles: ['Admin'] }, { replaceObjectFields: true }); }, 'non-admin self-update to [Admin] is blocked')];
+            case 9:
+                // 3. SECURITY CHECKS — every self-role mutation by the non-admin must be blocked.
+                _k.sent();
+                return [4 /*yield*/, expect_blocked(function () { return sdkAttacker_1.api.users.updateOne(attackerId, { roles: [NON_ADMIN_ROLE, 'Admin'] }, { replaceObjectFields: true }); }, 'non-admin self-update to [Provider, Admin] is blocked')];
+            case 10:
+                _k.sent();
+                return [4 /*yield*/, expect_blocked(function () { return sdkAttacker_1.api.users.updateOne(attackerId, { roles: ["Arbitrary_".concat(stamp)] }, { replaceObjectFields: true }); }, 'non-admin self-update to an arbitrary role is blocked')];
+            case 11:
+                _k.sent();
+                return [4 /*yield*/, expect_blocked(function () { return sdkAttacker_1.api.users.updateOne(attackerId, { roles: [] }, { replaceObjectFields: true }); }, 'non-admin self-update to [] (would grant defaults) is blocked')
+                    // 4. STATE CHECK — nothing slipped through; roles are still the original non-admin role.
+                ];
+            case 12:
+                _k.sent();
+                return [4 /*yield*/, sdk.api.users.getOne(attackerId)];
+            case 13:
+                attackerAfter = _k.sent();
+                record('attacker roles unchanged after all self-escalation attempts', JSON.stringify(attackerAfter.roles) === JSON.stringify([NON_ADMIN_ROLE]), "roles=".concat(JSON.stringify((_h = attackerAfter.roles) !== null && _h !== void 0 ? _h : null), " after self-update attempts")
+                    + " (want [".concat(NON_ADMIN_ROLE, "]; anything else is an ESCALATION LEAK)"));
+                // 5. POSITIVE CONTROL — an Admin CAN update the user's roles (mechanism is not over-restricted).
+                return [4 /*yield*/, sdk.api.users.updateOne(attackerId, { roles: [NON_ADMIN_ROLE] }, { replaceObjectFields: true })];
+            case 14:
+                // 5. POSITIVE CONTROL — an Admin CAN update the user's roles (mechanism is not over-restricted).
+                _k.sent();
+                return [4 /*yield*/, sdk.api.users.getOne(attackerId)];
+            case 15:
+                afterAdminUpdate = _k.sent();
+                record('admin can manage user roles (positive control)', JSON.stringify(afterAdminUpdate.roles) === JSON.stringify([NON_ADMIN_ROLE]), "roles=".concat(JSON.stringify((_j = afterAdminUpdate.roles) !== null && _j !== void 0 ? _j : null), " (want [").concat(NON_ADMIN_ROLE, "])"));
+                return [3 /*break*/, 24];
+            case 16:
+                if (!tenant) return [3 /*break*/, 23];
+                if (!attackerId) return [3 /*break*/, 20];
+                _k.label = 17;
+            case 17:
+                _k.trys.push([17, 19, , 20]);
+                return [4 /*yield*/, tenant.sdk.api.users.deleteOne(attackerId)];
+            case 18:
+                _k.sent();
+                return [3 /*break*/, 20];
+            case 19:
+                _b = _k.sent();
+                return [3 /*break*/, 20];
+            case 20:
+                _k.trys.push([20, 22, , 23]);
+                return [4 /*yield*/, tenant.teardown()];
+            case 21:
+                _k.sent();
+                return [3 /*break*/, 23];
+            case 22:
+                e_1 = _k.sent();
+                console.error('teardown failed', e_1);
+                return [3 /*break*/, 23];
+            case 23: return [7 /*endfinally*/];
+            case 24: return [2 /*return*/, checks];
+        }
     });
-};
+}); };
+exports.self_admin_role_assignment_checks = self_admin_role_assignment_checks;
+/** Asserting wrapper, for standalone runs. */
+var self_admin_role_assignment_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0:
+                _a = setup_isolated_1.assert_checks;
+                _b = ['Self-admin role assignment'];
+                return [4 /*yield*/, (0, exports.self_admin_role_assignment_checks)()];
+            case 1:
+                _a.apply(void 0, _b.concat([_c.sent()]));
+                return [2 /*return*/];
+        }
+    });
+}); };
 exports.self_admin_role_assignment_tests = self_admin_role_assignment_tests;
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+exports.ISOLATED_SUITE = {
+    name: 'Self-admin role assignment',
+    run: exports.self_admin_role_assignment_checks,
+};
 // Allow running this test file independently
 if (require.main === module) {
     console.log("\uD83C\uDF10 Using API URL: ".concat(host));
-    var sdk_2 = new sdk_1.Session({ host: host });
-    var sdkNonAdmin_1 = new sdk_1.Session({ host: host });
-    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
-        return __generator(this, function (_a) {
-            switch (_a.label) {
-                case 0: return [4 /*yield*/, (0, setup_1.setup_tests)(sdk_2, sdkNonAdmin_1)];
-                case 1:
-                    _a.sent();
-                    return [4 /*yield*/, (0, exports.self_admin_role_assignment_tests)({ sdk: sdk_2, sdkNonAdmin: sdkNonAdmin_1 })];
-                case 2:
-                    _a.sent();
-                    return [2 /*return*/];
-            }
-        });
-    }); };
-    runTests()
+    (0, exports.self_admin_role_assignment_tests)()
         .then(function () {
         console.log("✅ self-admin role assignment test suite completed successfully");
         process.exit(0);

package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"self-admin-role-assignment.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/self-admin-role-assignment.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,oCAAsC;AACtC,+CAI4B;AAC5B,qCAAyC;AAEzC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACI,IAAM,gCAAgC,GAAG,UAAO,EAAgD;QAA9C,GAAG,SAAA;;;;;;;;oBAC1D,IAAA,oBAAU,EAAC,4DAA4D,CAAC,CAAA;oBAElE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;oBAClB,cAAc,GAAG,UAAU,CAAA;oBAG3B,cAAc,GAAG,UAAO,EAAsB,EAAE,WAAmB;;;;;;oCAErE,qBAAM,EAAE,EAAE,EAAA;;oCAAV,SAAU,CAAA;oCACV,IAAA,gBAAM,EAAC,KAAK,EAAE,UAAG,WAAW,kEAA+D,CAAC,CAAA;;;;oCAE5F,6FAA6F;oCAC7F,IAAA,gBAAM,EACJ,CAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,IAAI,MAAK,GAAG,IAAI,CAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,UAAU,MAAK,GAAG,IAAI,OAAO,CAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,OAAO,CAAA,KAAK,QAAQ,EAC1E,UAAG,WAAW,6CAAmC,IAAI,CAAC,SAAS,CAAC,GAAC,CAAC,CAAE,EACpE,WAAW,CACZ,CAAA;;;;;yBAEJ,CAAA;;;;oBASkB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;4BAC7C,KAAK,EAAE,yBAAkB,KAAK,iBAAc;4BAC5C,0BAA0B,EAAE,IAAI;4BAChC,aAAa,EAAE,IAAI;yBACb,CAAC,EAAA;;oBAJH,QAAQ,GAAG,SAIR;oBACT,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;oBACxB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAA;;oBAArG,SAAqG,CAAA;oBACrG,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC;wBAE3B,mFAAmF;sBAFxD,CAAC,yEAAyE;;oBAArG,SAA2B,CAAA,CAAC,yEAAyE;oBAG9E,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAA;;oBAAvD,cAAc,GAAG,SAAsC;oBAC7D,IAAA,gBAAM,EACJ,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC,EACzE,mDAA4C,cAAc,oBAAU,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAE,EAC1G,wCAAwC,CACzC,CAAA;yBAGuB,aAAO;;wBAC7B,IAAI,MAAA;;oBACQ,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAFnE,gBAAc,cAAI,aAAO,YAE7B,YAAS,GAAE,CAAC,SAA2D,CAAC,CAAC,SAAS;oCAClF;oBACF,qBAAM,aAAW,CAAC,eAAe,EAAE,EAAA,CAAC,kDAAkD;;oBAAtF,SAAmC,CAAA,CAAC,kDAAkD;oBACtF,IAAA,gBAAM,EACJ,aAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,MAAA,aAAW,CAAC,QAAQ,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/F,mEAAmE,EACnE,gDAAgD,CACjD,CAAA;oBAED,sFAAsF;oBACtF,qBAAM,cAAc,CAClB,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAW,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAjG,CAAiG,EACvG,6CAA6C,CAC9C,EAAA;;oBAJD,sFAAsF;oBACtF,SAGC,CAAA;oBACD,qBAAM,cAAc,CAClB,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAW,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAjH,CAAiH,EACvH,uDAAuD,CACxD,EAAA;;oBAHD,SAGC,CAAA;oBACD,qBAAM,cAAc,CAClB,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAW,EAAE,EAAE,KAAK,EAAE,CAAC,oBAAa,KAAK,CAAE,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAA9G,CAA8G,EACpH,uDAAuD,CACxD,EAAA;;oBAHD,SAGC,CAAA;oBACD,qBAAM,cAAc,CAClB,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAA1F,CAA0F,EAChG,+DAA+D,CAChE;wBAED,6FAA6F;sBAF5F;;oBAHD,SAGC,CAAA;oBAGqB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAA;;oBAAtD,aAAa,GAAG,SAAsC;oBAC5D,IAAA,gBAAM,EACJ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC,EACxE,qDAA8C,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAG;0BAChF,gDAAyC,cAAc,OAAI,EAC/D,6DAA6D,CAC9D,CAAA;oBAED,iGAAiG;oBACjG,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAA;;oBADrG,iGAAiG;oBACjG,SAAqG,CAAA;oBAC5E,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAA;;oBAAzD,gBAAgB,GAAG,SAAsC;oBAC/D,IAAA,gBAAM,EACJ,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC,EAC3E,8CAAuC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,yBAAe,cAAc,MAAG,EAC7G,gDAAgD,CACjD,CAAA;;;yBAGG,UAAU,EAAV,yBAAU;;;;oBACN,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAAA;;oBAAzC,SAAyC,CAAA;;;;;;;;;;CAGpD,CAAA;AAlGY,QAAA,gCAAgC,oCAkG5C;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAM,KAAG,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,aAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,IAAA,mBAAW,EAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,IAAA,wCAAgC,EAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAA5D,SAA4D,CAAA;;;;SAC7D,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAA;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAA;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
+{"version":3,"file":"self-admin-role-assignment.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/self-admin-role-assignment.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,oCAAsC;AACtC,+CAA0C;AAC1C,uDAK6B;AAE7B,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACI,IAAM,iCAAiC,GAAG;;;;;;;gBACzC,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;gBAE/F,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBAClB,cAAc,GAAG,UAAU,CAAA;;;;gBAMtB,qBAAM,IAAA,sCAAqB,EAAC;wBACnC,IAAI,EAAE,kCAA2B,IAAI,EAAE,CAAE;wBACzC,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;wBAC1B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;wBACjC,OAAO,EAAE,CAAC;qBACX,CAAC,EAAA;;gBALF,MAAM,GAAG,SAKP,CAAA;gBACM,GAAG,GAAK,MAAM,IAAX,CAAW;gBAGhB,cAAc,GAAG,UAAO,EAAsB,EAAE,WAAmB;;;;;;gCAElD,qBAAM,EAAE,EAAE,EAAA;;gCAAvB,UAAU,GAAG,SAAU;gCAC7B,MAAM,CACJ,WAAW,EACX,KAAK,EACL,qEAAqE;sCACnE,UAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAE,CACxE,CAAA;;;;gCAED,6FAA6F;gCAC7F,MAAM,CACJ,WAAW,EACX,CAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,IAAI,MAAK,GAAG,IAAI,CAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,UAAU,MAAK,GAAG,IAAI,OAAO,CAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,OAAO,CAAA,KAAK,QAAQ,EAC1E,uBACE,OAAO,CAAA,GAAC,aAAD,GAAC,uBAAD,GAAC,CAAE,OAAO,CAAA,KAAK,QAAQ,IAAI,GAAC,CAAC,OAAO,KAAK,EAAE;oCAChD,CAAC,CAAC,GAAC,CAAC,OAAO;oCACX,CAAC,CAAC,CAAC,GAAC,KAAK,SAAS,IAAI,GAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAC,CAAC,CAAC,CACnE,CACH,CAAA;;;;;qBAEJ,CAAA;gBAMgB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;wBAC7C,KAAK,EAAE,yBAAkB,KAAK,iBAAc;wBAC5C,0BAA0B,EAAE,IAAI;wBAChC,aAAa,EAAE,IAAI;qBACb,CAAC,EAAA;;gBAJH,QAAQ,GAAG,SAIR;gBACT,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;gBACxB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAA;;gBAArG,SAAqG,CAAA;gBACrG,qBAAM,IAAA,cAAI,EAAC,SAAS,EAAE,IAAI,CAAC;oBAE3B,mFAAmF;kBAFxD,CAAC,yEAAyE;;gBAArG,SAA2B,CAAA,CAAC,yEAAyE;gBAG9E,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAA;;gBAAvD,cAAc,GAAG,SAAsC;gBAC7D,MAAM,CACJ,wCAAwC,EACxC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC,EACzE,gBAAS,IAAI,CAAC,SAAS,CAAC,MAAA,cAAc,CAAC,KAAK,mCAAI,IAAI,CAAC,qBAAW,cAAc,OAAI,CACnF,CAAA;qBAGuB,aAAO;;oBAC7B,IAAI,MAAA;;gBACQ,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAA;;gBAFnE,gBAAc,cAAI,aAAO,YAE7B,YAAS,GAAE,CAAC,SAA2D,CAAC,CAAC,SAAS;gCAClF;gBACF,qBAAM,aAAW,CAAC,eAAe,EAAE,EAAA,CAAC,kDAAkD;;gBAAtF,SAAmC,CAAA,CAAC,kDAAkD;gBACtF,MAAM,CACJ,gDAAgD,EAChD,aAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,CAAC,MAAA,aAAW,CAAC,QAAQ,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/F,qBAAc,IAAI,CAAC,SAAS,CAAC,MAAA,aAAW,CAAC,QAAQ,CAAC,EAAE,mCAAI,IAAI,CAAC,YAAS;sBACpE,UAAG,IAAI,CAAC,SAAS,CAAC,MAAA,aAAW,CAAC,QAAQ,CAAC,KAAK,mCAAI,IAAI,CAAC,uBAAa,UAAU,gBAAa,CAC5F,CAAA;gBAED,kFAAkF;gBAClF,qBAAM,cAAc,CAClB,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAW,EAAE,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAjG,CAAiG,EACvG,6CAA6C,CAC9C,EAAA;;gBAJD,kFAAkF;gBAClF,SAGC,CAAA;gBACD,qBAAM,cAAc,CAClB,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAW,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAjH,CAAiH,EACvH,uDAAuD,CACxD,EAAA;;gBAHD,SAGC,CAAA;gBACD,qBAAM,cAAc,CAClB,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAW,EAAE,EAAE,KAAK,EAAE,CAAC,oBAAa,KAAK,CAAE,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAA9G,CAA8G,EACpH,uDAAuD,CACxD,EAAA;;gBAHD,SAGC,CAAA;gBACD,qBAAM,cAAc,CAClB,cAAM,OAAA,aAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAA1F,CAA0F,EAChG,+DAA+D,CAChE;oBAED,yFAAyF;kBAFxF;;gBAHD,SAGC,CAAA;gBAGqB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAA;;gBAAtD,aAAa,GAAG,SAAsC;gBAC5D,MAAM,CACJ,6DAA6D,EAC7D,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC,EACxE,gBAAS,IAAI,CAAC,SAAS,CAAC,MAAA,aAAa,CAAC,KAAK,mCAAI,IAAI,CAAC,gCAA6B;sBAC/E,kBAAW,cAAc,4CAAyC,CACrE,CAAA;gBAED,iGAAiG;gBACjG,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAA;;gBADrG,iGAAiG;gBACjG,SAAqG,CAAA;gBAC5E,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAA;;gBAAzD,gBAAgB,GAAG,SAAsC;gBAC/D,MAAM,CACJ,gDAAgD,EAChD,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,CAAC,EAC3E,gBAAS,IAAI,CAAC,SAAS,CAAC,MAAA,gBAAgB,CAAC,KAAK,mCAAI,IAAI,CAAC,qBAAW,cAAc,OAAI,CACrF,CAAA;;;qBAEG,MAAM,EAAN,yBAAM;qBAEJ,UAAU,EAAV,yBAAU;;;;gBACN,qBAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAAA;;gBAAhD,SAAgD,CAAA;;;;;;;gBAGlD,qBAAM,MAAM,CAAC,QAAQ,EAAE,EAAA;;gBAAvB,SAAuB,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;qBAInF,sBAAO,MAAM,EAAA;;;KACd,CAAA;AA5HY,QAAA,iCAAiC,qCA4H7C;AAED,8CAA8C;AACvC,IAAM,gCAAgC,GAAG;;;;;gBAC9C,KAAA,8BAAa,CAAA;sBAAC,4BAA4B;gBAAE,qBAAM,IAAA,yCAAiC,GAAE,EAAA;;gBAArF,4BAA4C,SAAyC,GAAC,CAAA;;;;KACvF,CAAA;AAFY,QAAA,gCAAgC,oCAE5C;AAED,oGAAoG;AACvF,QAAA,cAAc,GAAkB;IAC3C,IAAI,EAAE,4BAA4B;IAClC,GAAG,EAAE,yCAAiC;CACvC,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,IAAA,wCAAgC,GAAE;SAC/B,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAA;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAA;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts

@@ -1,6 +1,7 @@
-import { Session } from "../../../sdk";
-export declare const startlinktoken_escalation_tests: ({ sdk }: {
-    sdk: Session;
-    sdkNonAdmin: Session;
-}) => Promise<void>;
+import { Check, IsolatedSuite } from "../../setup_isolated";
+export declare const startlinktoken_escalation_checks: () => Promise<Check[]>;
+/** Asserting wrapper, for standalone runs. */
+export declare const startlinktoken_escalation_tests: () => Promise<void>;
+/** Enrolls this suite in the auto-discovered parallel pool — see run_discovered_isolated_suites. */
+export declare const ISOLATED_SUITE: IsolatedSuite;
 //# sourceMappingURL=startlinktoken-enduser-staff-escalation.test.d.ts.map

package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"startlinktoken-enduser-staff-escalation.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAkB,MAAM,cAAc,CAAA;AAuCtD,eAAO,MAAM,+BAA+B;SAA2B,OAAO;iBAAe,OAAO;mBA+GnG,CAAA"}
+{"version":3,"file":"startlinktoken-enduser-staff-escalation.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,EACL,aAAa,EAEd,MAAM,sBAAsB,CAAA;AAsC7B,eAAO,MAAM,gCAAgC,QAAa,QAAQ,KAAK,EAAE,CA0IxE,CAAA;AAED,8CAA8C;AAC9C,eAAO,MAAM,+BAA+B,qBAE3C,CAAA;AAED,oGAAoG;AACpG,eAAO,MAAM,cAAc,EAAE,aAG5B,CAAA"}