@topolo/sdk 0.7.0 → 0.8.1

package/src/modules/identity.test.ts

@@ -1,165 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from 'vitest';
-import { TopoloClient } from '../client.js';
-import { IdentityModule } from './identity.js';
-
-const AGENT = { clientName: 'topolo-sdk-test', clientVersion: '0.0.0' };
-
-function stubFetch(responses: Array<{ status?: number; body?: unknown }>) {
-  const calls: Array<{ url: string; init: RequestInit }> = [];
-  const impl = vi.fn(async (url: string, init: RequestInit) => {
-    calls.push({ url, init });
-    if (String(url).includes('/api/services/by-slug/')) {
-      return new Response(JSON.stringify({ success: true, data: { app_id: 'service_auth' } }), {
-        status: 200,
-        headers: { 'Content-Type': 'application/json' },
-      });
-    }
-    if (String(url).includes('/api/services/catalog')) {
-      return new Response(JSON.stringify({ data: { services: [] } }), {
-        status: 200,
-        headers: { 'Content-Type': 'application/json' },
-      });
-    }
-    const next = responses.shift() ?? { status: 200, body: {} };
-    return new Response(JSON.stringify(next.body ?? {}), {
-      status: next.status ?? 200,
-      headers: { 'Content-Type': 'application/json' },
-    });
-  });
-  return { impl: impl as unknown as typeof fetch, calls };
-}
-
-function requestCalls(calls: Array<{ url: string; init: RequestInit }>) {
-  return calls.filter(
-    (call) =>
-      !call.url.includes('/api/services/by-slug/') &&
-      !call.url.includes('/api/services/catalog'),
-  );
-}
-
-function clientWith(
-  impl: typeof fetch,
-  credential: { kind: 'access_token'; accessToken: string } | { kind: 'api_key'; apiKey: string } = {
-    kind: 'access_token',
-    accessToken: 'tok_test',
-  },
-) {
-  return new TopoloClient({
-    credential,
-    agent: AGENT,
-    fetch: impl,
-    appIds: { auth: 'service_auth' },
-  });
-}
-
-beforeEach(() => {
-  TopoloClient.clearAppIdCache();
-});
-
-describe('IdentityModule.whoami', () => {
-  it('resolves a data-enveloped access-token identity with an organization', async () => {
-    const { impl, calls } = stubFetch([
-      {
-        body: {
-          data: {
-            credentialType: 'access_token',
-            user: { id: 'u_1', email: 'ada@example.com', name: 'Ada', role: 'owner' },
-            organization: { id: 'org_1', slug: 'acme', name: 'Acme Inc' },
-            permissions: ['crm.contacts:read'],
-          },
-        },
-      },
-    ]);
-    const identity = new IdentityModule(clientWith(impl));
-
-    const me = await identity.whoami();
-
-    expect(me).toEqual({
-      kind: 'access_token',
-      user: {
-        id: 'u_1',
-        email: 'ada@example.com',
-        name: 'Ada',
-        role: 'owner',
-        permissions: ['crm.contacts:read'],
-      },
-      organization: { id: 'org_1', slug: 'acme', name: 'Acme Inc' },
-    });
-    expect(new URL(requestCalls(calls)[0]!.url).pathname).toBe('/api/auth/me');
-  });
-
-  it('defaults api_key role to "service" and reads a bare (non-enveloped) payload', async () => {
-    const { impl } = stubFetch([
-      {
-        body: {
-          credentialType: 'api_key',
-          user: { id: 'usr_1', email: 'user@example.com' },
-          organization: { id: 'org_2', slug: 'beta' },
-        },
-      },
-    ]);
-    const identity = new IdentityModule(
-      clientWith(impl, { kind: 'api_key', apiKey: 'dak_xyz' }),
-    );
-
-    const me = await identity.whoami();
-
-    expect(me.kind).toBe('api_key');
-    expect(me.user.role).toBe('service');
-    expect(me.user.name).toBeNull();
-    // organization name falls back to slug when name is absent
-    expect(me.organization).toEqual({ id: 'org_2', slug: 'beta', name: 'beta' });
-  });
-
-  it('defaults access_token role to "member" and reads permissions from user when top-level absent', async () => {
-    const { impl } = stubFetch([
-      {
-        body: {
-          data: {
-            user: {
-              id: 'u_3',
-              email: 'm@example.com',
-              permissions: ['mail.messages:read'],
-            },
-          },
-        },
-      },
-    ]);
-    const identity = new IdentityModule(clientWith(impl));
-
-    const me = await identity.whoami();
-
-    expect(me.kind).toBe('access_token');
-    expect(me.user.role).toBe('member');
-    expect(me.user.permissions).toEqual(['mail.messages:read']);
-    expect(me.organization).toBeNull();
-  });
-
-  it('synthesizes an organization from user.orgId/orgSlug when no organization object is present', async () => {
-    const { impl } = stubFetch([
-      {
-        body: {
-          data: {
-            user: { id: 'u_4', email: 'o@example.com', orgId: 'org_9', orgSlug: 'gamma' },
-          },
-        },
-      },
-    ]);
-    const identity = new IdentityModule(clientWith(impl));
-
-    const me = await identity.whoami();
-
-    expect(me.organization).toEqual({ id: 'org_9', slug: 'gamma', name: 'gamma' });
-  });
-
-  it('defaults missing permissions to an empty array', async () => {
-    const { impl } = stubFetch([
-      { body: { data: { user: { id: 'u_5', email: 'n@example.com' } } } },
-    ]);
-    const identity = new IdentityModule(clientWith(impl));
-
-    const me = await identity.whoami();
-
-    expect(me.user.permissions).toEqual([]);
-  });
-});

package/src/modules/identity.ts

@@ -1,18 +0,0 @@
-import type { CredentialIntrospection, TopoloClient } from '../client.js';
-
-/**
- * Identity module — wraps TopoloAuth's caller-identity endpoints.
- *
- * All responses are scoped to the organization the credential was issued for;
- * there is no way to ask this module about a different org.
- */
-export class IdentityModule {
-  constructor(private readonly client: TopoloClient) {}
-
-  /** Returns the resolved user, organization, and permission set for the
-   *  current credential. Equivalent to `TopoloClient.introspect()` — exposed
-   *  on this module for symmetry with the other domain modules. */
-  whoami(): Promise<CredentialIntrospection> {
-    return this.client.introspect();
-  }
-}