@vibescope/mcp-server 0.0.1

package/src/handlers/organizations.test.ts

@@ -0,0 +1,997 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import {
+	listOrganizations,
+	createOrganization,
+	updateOrganization,
+	deleteOrganization,
+	listOrgMembers,
+	inviteMember,
+	updateMemberRole,
+	removeMember,
+	leaveOrganization,
+	shareProjectWithOrg,
+	updateProjectShare,
+	unshareProject,
+	listProjectShares,
+} from './organizations.js';
+import { ValidationError } from '../validators.js';
+import { createMockSupabase, createMockContext, testUUID } from './__test-utils__.js';
+
+// ============================================================================
+// listOrganizations Tests
+// ============================================================================
+
+describe('listOrganizations', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should return empty array when no organizations', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: [], error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await listOrganizations({}, ctx);
+
+		expect(result.result).toMatchObject({
+			organizations: [],
+			count: 0,
+		});
+	});
+
+	it('should return organizations with role and joined_at', async () => {
+		const supabase = createMockSupabase({
+			selectResult: {
+				data: [
+					{
+						role: 'admin',
+						joined_at: '2025-01-14T12:00:00Z',
+						organizations: {
+							id: 'org-1',
+							name: 'Test Org',
+							slug: 'test-org',
+							description: 'A test organization',
+							logo_url: null,
+							owner_id: 'user-123',
+							created_at: '2025-01-01T00:00:00Z',
+						},
+					},
+				],
+				error: null,
+			},
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await listOrganizations({}, ctx);
+
+		expect(result.result).toMatchObject({
+			count: 1,
+		});
+	});
+
+	it('should throw error when query fails', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: null, error: { message: 'Query failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(listOrganizations({}, ctx)).rejects.toThrow(
+			'Failed to list organizations: Query failed'
+		);
+	});
+});
+
+// ============================================================================
+// createOrganization Tests
+// ============================================================================
+
+describe('createOrganization', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing name', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(createOrganization({}, ctx)).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error when slug is taken', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: { id: 'existing-org' }, error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			createOrganization({ name: 'Test Org' }, ctx)
+		).rejects.toThrow('Organization slug "test-org" is already taken');
+	});
+
+	it('should create organization with auto-generated slug', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: null, error: null }, // No existing slug
+			insertResult: {
+				data: {
+					id: 'org-1',
+					name: 'Test Org',
+					slug: 'test-org',
+					owner_id: 'user-123',
+				},
+				error: null,
+			},
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await createOrganization({ name: 'Test Org' }, ctx);
+
+		expect(result.result).toMatchObject({
+			success: true,
+			message: 'Organization "Test Org" created. You are the owner.',
+		});
+	});
+
+	it('should create organization with custom slug', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: null, error: null },
+			insertResult: {
+				data: {
+					id: 'org-1',
+					name: 'Test Org',
+					slug: 'my-custom-slug',
+					owner_id: 'user-123',
+				},
+				error: null,
+			},
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await createOrganization(
+			{ name: 'Test Org', slug: 'my-custom-slug' },
+			ctx
+		);
+
+		expect(result.result).toMatchObject({
+			success: true,
+		});
+	});
+
+	it('should throw error when insert fails', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: null, error: null },
+			insertResult: { data: null, error: { message: 'Insert failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			createOrganization({ name: 'Test Org' }, ctx)
+		).rejects.toThrow('Failed to create organization: Insert failed');
+	});
+});
+
+// ============================================================================
+// updateOrganization Tests
+// ============================================================================
+
+describe('updateOrganization', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing organization_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateOrganization({ name: 'New Name' }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for invalid organization_id UUID', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateOrganization({ organization_id: 'invalid', name: 'New Name' }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error when no updates provided', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateOrganization({ organization_id: testUUID() }, ctx)
+		).rejects.toThrow('No updates provided');
+	});
+
+	it('should update organization successfully', async () => {
+		const supabase = createMockSupabase({
+			updateResult: {
+				data: { id: testUUID(), name: 'Updated Org', description: 'New desc' },
+				error: null,
+			},
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await updateOrganization(
+			{
+				organization_id: testUUID(),
+				name: 'Updated Org',
+				description: 'New desc',
+			},
+			ctx
+		);
+
+		expect(result.result).toMatchObject({
+			success: true,
+		});
+	});
+
+	it('should throw error when update fails', async () => {
+		const supabase = createMockSupabase({
+			updateResult: { data: null, error: { message: 'Update failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateOrganization({ organization_id: testUUID(), name: 'New Name' }, ctx)
+		).rejects.toThrow('Failed to update organization: Update failed');
+	});
+});
+
+// ============================================================================
+// deleteOrganization Tests
+// ============================================================================
+
+describe('deleteOrganization', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing organization_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(deleteOrganization({}, ctx)).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for invalid organization_id UUID', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			deleteOrganization({ organization_id: 'invalid' }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should delete organization successfully', async () => {
+		const supabase = createMockSupabase({
+			deleteResult: { data: null, error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await deleteOrganization({ organization_id: testUUID() }, ctx);
+
+		expect(result.result).toMatchObject({
+			success: true,
+			message: 'Organization deleted. All shares have been removed.',
+		});
+	});
+
+	it('should throw error when delete fails', async () => {
+		const supabase = createMockSupabase({
+			deleteResult: { data: null, error: { message: 'Delete failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			deleteOrganization({ organization_id: testUUID() }, ctx)
+		).rejects.toThrow('Failed to delete organization: Delete failed');
+	});
+});
+
+// ============================================================================
+// listOrgMembers Tests
+// ============================================================================
+
+describe('listOrgMembers', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing organization_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(listOrgMembers({}, ctx)).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for invalid organization_id UUID', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			listOrgMembers({ organization_id: 'invalid' }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should return empty array when no members', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: [], error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await listOrgMembers({ organization_id: testUUID() }, ctx);
+
+		expect(result.result).toMatchObject({
+			members: [],
+			count: 0,
+		});
+	});
+
+	it('should return members list', async () => {
+		const supabase = createMockSupabase({
+			selectResult: {
+				data: [
+					{ id: 'm-1', user_id: 'u-1', role: 'owner', joined_at: '2025-01-01T00:00:00Z' },
+					{ id: 'm-2', user_id: 'u-2', role: 'member', joined_at: '2025-01-02T00:00:00Z' },
+				],
+				error: null,
+			},
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await listOrgMembers({ organization_id: testUUID() }, ctx);
+
+		expect(result.result).toMatchObject({
+			count: 2,
+		});
+	});
+
+	it('should throw error when query fails', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: null, error: { message: 'Query failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			listOrgMembers({ organization_id: testUUID() }, ctx)
+		).rejects.toThrow('Failed to list members: Query failed');
+	});
+});
+
+// ============================================================================
+// inviteMember Tests
+// ============================================================================
+
+describe('inviteMember', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing organization_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			inviteMember({ email: 'test@example.com' }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for missing email', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			inviteMember({ organization_id: testUUID() }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for invalid role', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: null, error: null }, // No existing invite
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			inviteMember({
+				organization_id: testUUID(),
+				email: 'test@example.com',
+				role: 'owner', // Invalid - can't invite as owner
+			}, ctx)
+		).rejects.toThrow('Invalid role. Must be admin, member, or viewer.');
+	});
+
+	it('should throw error when invite already exists', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: { id: 'existing-invite' }, error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			inviteMember({
+				organization_id: testUUID(),
+				email: 'test@example.com',
+			}, ctx)
+		).rejects.toThrow('A pending invite already exists for test@example.com');
+	});
+
+	it('should create invite successfully with default role', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: null, error: null }, // No existing invite
+			insertResult: {
+				data: {
+					id: 'invite-1',
+					email: 'test@example.com',
+					role: 'member',
+					token: 'abc123',
+				},
+				error: null,
+			},
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await inviteMember({
+			organization_id: testUUID(),
+			email: 'test@example.com',
+		}, ctx);
+
+		expect(result.result).toMatchObject({
+			success: true,
+			message: 'Invite sent to test@example.com with role "member"',
+		});
+	});
+
+	it('should throw error when insert fails', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: null, error: null },
+			insertResult: { data: null, error: { message: 'Insert failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			inviteMember({
+				organization_id: testUUID(),
+				email: 'test@example.com',
+			}, ctx)
+		).rejects.toThrow('Failed to create invite: Insert failed');
+	});
+});
+
+// ============================================================================
+// updateMemberRole Tests
+// ============================================================================
+
+describe('updateMemberRole', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing organization_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateMemberRole({ user_id: testUUID(), role: 'admin' }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for missing user_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateMemberRole({ organization_id: testUUID(), role: 'admin' }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for missing role', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateMemberRole({ organization_id: testUUID(), user_id: testUUID() }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for invalid role', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateMemberRole({
+				organization_id: testUUID(),
+				user_id: testUUID(),
+				role: 'superadmin',
+			}, ctx)
+		).rejects.toThrow('Invalid role. Must be one of: viewer, member, admin, owner');
+	});
+
+	it('should throw error when trying to assign owner role', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateMemberRole({
+				organization_id: testUUID(),
+				user_id: testUUID(),
+				role: 'owner',
+			}, ctx)
+		).rejects.toThrow('Cannot assign owner role. Use transfer ownership instead.');
+	});
+
+	it('should throw error when changing own role', async () => {
+		const supabase = createMockSupabase();
+		const ownUserId = testUUID(); // Use valid UUID
+		const ctx = createMockContext(supabase, { userId: ownUserId });
+
+		await expect(
+			updateMemberRole({
+				organization_id: testUUID(),
+				user_id: ownUserId,
+				role: 'admin',
+			}, ctx)
+		).rejects.toThrow('Cannot change your own role');
+	});
+
+	it('should update member role successfully', async () => {
+		const supabase = createMockSupabase({
+			updateResult: {
+				data: { user_id: testUUID(), role: 'admin' },
+				error: null,
+			},
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await updateMemberRole({
+			organization_id: testUUID(),
+			user_id: testUUID(),
+			role: 'admin',
+		}, ctx);
+
+		expect(result.result).toMatchObject({
+			success: true,
+		});
+	});
+
+	it('should throw error when update fails', async () => {
+		const supabase = createMockSupabase({
+			updateResult: { data: null, error: { message: 'Update failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateMemberRole({
+				organization_id: testUUID(),
+				user_id: testUUID(),
+				role: 'admin',
+			}, ctx)
+		).rejects.toThrow('Failed to update member role: Update failed');
+	});
+});
+
+// ============================================================================
+// removeMember Tests
+// ============================================================================
+
+describe('removeMember', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing organization_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			removeMember({ user_id: testUUID() }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for missing user_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			removeMember({ organization_id: testUUID() }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should remove member successfully', async () => {
+		const supabase = createMockSupabase({
+			deleteResult: { data: null, error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await removeMember({
+			organization_id: testUUID(),
+			user_id: testUUID(),
+		}, ctx);
+
+		expect(result.result).toMatchObject({
+			success: true,
+			message: 'Member removed. Their org-scoped API keys have been invalidated.',
+		});
+	});
+
+	it('should throw error when delete fails', async () => {
+		const supabase = createMockSupabase({
+			deleteResult: { data: null, error: { message: 'Delete failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			removeMember({
+				organization_id: testUUID(),
+				user_id: testUUID(),
+			}, ctx)
+		).rejects.toThrow('Failed to remove member: Delete failed');
+	});
+});
+
+// ============================================================================
+// leaveOrganization Tests
+// ============================================================================
+
+describe('leaveOrganization', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing organization_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(leaveOrganization({}, ctx)).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error when user is owner', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: { role: 'owner' }, error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			leaveOrganization({ organization_id: testUUID() }, ctx)
+		).rejects.toThrow('Owner cannot leave. Transfer ownership first or delete the organization.');
+	});
+
+	it('should leave organization successfully', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: { role: 'member' }, error: null },
+			deleteResult: { data: null, error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await leaveOrganization({ organization_id: testUUID() }, ctx);
+
+		expect(result.result).toMatchObject({
+			success: true,
+			message: 'You have left the organization.',
+		});
+	});
+
+	it('should throw error when delete fails', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: { role: 'member' }, error: null },
+			deleteResult: { data: null, error: { message: 'Delete failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			leaveOrganization({ organization_id: testUUID() }, ctx)
+		).rejects.toThrow('Failed to leave organization: Delete failed');
+	});
+});
+
+// ============================================================================
+// shareProjectWithOrg Tests
+// ============================================================================
+
+describe('shareProjectWithOrg', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing project_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			shareProjectWithOrg({ organization_id: testUUID() }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for missing organization_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			shareProjectWithOrg({ project_id: testUUID() }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for invalid permission', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			shareProjectWithOrg({
+				project_id: testUUID(),
+				organization_id: testUUID(),
+				permission: 'invalid',
+			}, ctx)
+		).rejects.toThrow('Invalid permission. Must be one of: read, write, admin');
+	});
+
+	it('should throw error when project not found or not owned', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: null, error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			shareProjectWithOrg({
+				project_id: testUUID(),
+				organization_id: testUUID(),
+			}, ctx)
+		).rejects.toThrow('Project not found or you are not the owner');
+	});
+
+	it('should share project successfully with default permission', async () => {
+		// Need to simulate multiple select calls
+		const supabase = createMockSupabase();
+		let selectCount = 0;
+		supabase.select = vi.fn(() => {
+			selectCount++;
+			return supabase;
+		});
+		supabase.single = vi.fn(() => {
+			if (selectCount === 1) {
+				// First call: get project
+				return Promise.resolve({ data: { id: testUUID(), name: 'Test Project' }, error: null });
+			}
+			// Insert result
+			return Promise.resolve({
+				data: { id: 'share-1', permission: 'read' },
+				error: null,
+			});
+		});
+		supabase.maybeSingle = vi.fn(() => {
+			// Check for existing share
+			return Promise.resolve({ data: null, error: null });
+		});
+
+		const ctx = createMockContext(supabase);
+
+		const result = await shareProjectWithOrg({
+			project_id: testUUID(),
+			organization_id: testUUID(),
+		}, ctx);
+
+		expect(result.result).toMatchObject({
+			success: true,
+		});
+	});
+
+	it('should throw error when share already exists', async () => {
+		const supabase = createMockSupabase();
+		let selectCount = 0;
+		supabase.select = vi.fn(() => {
+			selectCount++;
+			return supabase;
+		});
+		supabase.single = vi.fn(() => {
+			// First call: get project
+			return Promise.resolve({ data: { id: testUUID(), name: 'Test Project' }, error: null });
+		});
+		supabase.maybeSingle = vi.fn(() => {
+			// Check for existing share - exists
+			return Promise.resolve({ data: { id: 'existing-share' }, error: null });
+		});
+
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			shareProjectWithOrg({
+				project_id: testUUID(),
+				organization_id: testUUID(),
+			}, ctx)
+		).rejects.toThrow('Project is already shared with this organization');
+	});
+});
+
+// ============================================================================
+// updateProjectShare Tests
+// ============================================================================
+
+describe('updateProjectShare', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing project_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateProjectShare({ organization_id: testUUID(), permission: 'write' }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for missing organization_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateProjectShare({ project_id: testUUID(), permission: 'write' }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for missing permission', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateProjectShare({ project_id: testUUID(), organization_id: testUUID() }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for invalid permission', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateProjectShare({
+				project_id: testUUID(),
+				organization_id: testUUID(),
+				permission: 'invalid',
+			}, ctx)
+		).rejects.toThrow('Invalid permission. Must be one of: read, write, admin');
+	});
+
+	it('should update share permission successfully', async () => {
+		const supabase = createMockSupabase({
+			updateResult: {
+				data: { id: 'share-1', permission: 'write' },
+				error: null,
+			},
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await updateProjectShare({
+			project_id: testUUID(),
+			organization_id: testUUID(),
+			permission: 'write',
+		}, ctx);
+
+		expect(result.result).toMatchObject({
+			success: true,
+		});
+	});
+
+	it('should throw error when update fails', async () => {
+		const supabase = createMockSupabase({
+			updateResult: { data: null, error: { message: 'Update failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			updateProjectShare({
+				project_id: testUUID(),
+				organization_id: testUUID(),
+				permission: 'write',
+			}, ctx)
+		).rejects.toThrow('Failed to update share: Update failed');
+	});
+});
+
+// ============================================================================
+// unshareProject Tests
+// ============================================================================
+
+describe('unshareProject', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing project_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			unshareProject({ organization_id: testUUID() }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for missing organization_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			unshareProject({ project_id: testUUID() }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should unshare project successfully', async () => {
+		const supabase = createMockSupabase({
+			deleteResult: { data: null, error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await unshareProject({
+			project_id: testUUID(),
+			organization_id: testUUID(),
+		}, ctx);
+
+		expect(result.result).toMatchObject({
+			success: true,
+			message: 'Project share removed. Org members can no longer access this project.',
+		});
+	});
+
+	it('should throw error when delete fails', async () => {
+		const supabase = createMockSupabase({
+			deleteResult: { data: null, error: { message: 'Delete failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			unshareProject({
+				project_id: testUUID(),
+				organization_id: testUUID(),
+			}, ctx)
+		).rejects.toThrow('Failed to unshare project: Delete failed');
+	});
+});
+
+// ============================================================================
+// listProjectShares Tests
+// ============================================================================
+
+describe('listProjectShares', () => {
+	beforeEach(() => vi.clearAllMocks());
+
+	it('should throw error for missing project_id', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(listProjectShares({}, ctx)).rejects.toThrow(ValidationError);
+	});
+
+	it('should throw error for invalid project_id UUID', async () => {
+		const supabase = createMockSupabase();
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			listProjectShares({ project_id: 'invalid' }, ctx)
+		).rejects.toThrow(ValidationError);
+	});
+
+	it('should return empty array when no shares', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: [], error: null },
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await listProjectShares({ project_id: testUUID() }, ctx);
+
+		expect(result.result).toMatchObject({
+			shares: [],
+			count: 0,
+		});
+	});
+
+	it('should return shares list', async () => {
+		const supabase = createMockSupabase({
+			selectResult: {
+				data: [
+					{
+						id: 'share-1',
+						permission: 'read',
+						shared_at: '2025-01-14T12:00:00Z',
+						shared_by: 'user-123',
+						organizations: { id: 'org-1', name: 'Test Org', slug: 'test-org' },
+					},
+				],
+				error: null,
+			},
+		});
+		const ctx = createMockContext(supabase);
+
+		const result = await listProjectShares({ project_id: testUUID() }, ctx);
+
+		expect(result.result).toMatchObject({
+			count: 1,
+		});
+	});
+
+	it('should throw error when query fails', async () => {
+		const supabase = createMockSupabase({
+			selectResult: { data: null, error: { message: 'Query failed' } },
+		});
+		const ctx = createMockContext(supabase);
+
+		await expect(
+			listProjectShares({ project_id: testUUID() }, ctx)
+		).rejects.toThrow('Failed to list shares: Query failed');
+	});
+});