@things-factory/auth-base 10.1.28 → 10.1.29

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/auth-base",
-  "version": "10.1.28",
+  "version": "10.1.29",
   "main": "dist-server/index.js",
   "browser": "dist-client/index.js",
   "things-factory": true,
@@ -34,9 +34,9 @@
     "@reduxjs/toolkit": "^2.2.5",
     "@simplewebauthn/browser": "^13.0.0",
     "@simplewebauthn/server": "^13.0.0",
-    "@things-factory/email-base": "^10.1.28",
+    "@things-factory/email-base": "^10.1.29",
     "@things-factory/env": "^10.1.20",
-    "@things-factory/shell": "^10.1.28",
+    "@things-factory/shell": "^10.1.29",
     "@things-factory/utils": "^10.1.20",
     "@types/webappsec-credential-management": "^0.6.9",
     "jsonwebtoken": "^9.0.0",
@@ -48,5 +48,5 @@
     "passport-jwt": "^4.0.0",
     "passport-local": "^1.0.0"
   },
-  "gitHead": "3a260a0f79bc6b41a692a103955bfcc541aff60e"
+  "gitHead": "e6bf9dec003fe5e794746aaeb5852b3b50478232"
 }

package/tests/privilege-directive.test.ts

@@ -16,7 +16,7 @@ import { makeExecutableSchema } from '@graphql-tools/schema'
 
 import { loadCompiled } from './compiled'
 
-const { privilegeDirectiveTypeDefs, privilegeDirectiveResolver } = loadCompiled(
+const { privilegeDirectiveTypeDefs, privilegeDirectiveResolver, privilegeOfField } = loadCompiled(
   'service/privilege/privilege-directive'
 )
 const { User } = loadCompiled('service/user/user')
@@ -171,6 +171,40 @@ describe('스키마를 지으면서 남기는 것', () => {
     expect((process as any).PRIVILEGES['board mutation']).toEqual(['board', 'mutation'])
   })
 
+  /*
+   * What each field asks for, by name — so another entrance to the same door (an AI tool) reads
+   * the door's own declaration instead of copying it (operato-twin ADR-0071 / ADR-0072).
+   */
+  it('records what a declared field asks for, all four parts', () => {
+    buildSchema()
+
+    expect(privilegeOfField('Query', 'guardedBoard')).toEqual({
+      known: true,
+      gate: { category: 'board', privilege: 'mutation', owner: false, super: false }
+    })
+  })
+
+  it('records an ownership-only field too — it names no pair but it is still a gate', () => {
+    buildSchema()
+
+    expect(privilegeOfField('Query', 'ownershipOnly')).toEqual({
+      known: true,
+      gate: { category: undefined, privilege: undefined, owner: true, super: false }
+    })
+  })
+
+  it('says a root field with no directive is known and open', () => {
+    buildSchema()
+
+    expect(privilegeOfField('Query', 'undeclared')).toEqual({ known: true, gate: null })
+  })
+
+  it('does not call a field it has never seen open — a typo is not an open door', () => {
+    buildSchema()
+
+    expect(privilegeOfField('Query', 'guardedBord')).toEqual({ known: false })
+  })
+
   it('필드 설명에 필요한 권한을 적어 둔다', async () => {
     const schema = buildSchema()
     const description = (schema.getQueryType() as any).getFields().guardedBoard.description