onboardconnect-agent 1.4.0 → 1.4.1

package/dist/sis/peoplesoft.test.js

@@ -0,0 +1,266 @@
+import { describe, it, expect, beforeAll, afterEach, afterAll } from "vitest";
+import { createServer } from "http";
+import { join } from "path";
+import { tmpdir } from "os";
+// Redirect the agent logger to a writable temp dir BEFORE importing peoplesoft.js
+// (transitively constructs the winston file logger). Mirrors binary.test.ts.
+process.env["OC_LOG_DIR"] = join(tmpdir(), "oc-agent-test-logs");
+let ocPeoplesoftCall;
+beforeAll(async () => {
+    ({ ocPeoplesoftCall } = await import("./peoplesoft.js"));
+});
+let openServers = [];
+function ocStartServer(handler) {
+    const recorded = [];
+    return new Promise((resolve) => {
+        const server = createServer((req, res) => {
+            const chunks = [];
+            req.on("data", (c) => chunks.push(c));
+            req.on("end", () => {
+                const rec = {
+                    method: req.method ?? "",
+                    url: req.url ?? "",
+                    headers: req.headers,
+                    body: Buffer.concat(chunks).toString("utf8"),
+                };
+                recorded.push(rec);
+                handler(req, res, rec);
+            });
+        });
+        openServers.push(server);
+        server.listen(0, "127.0.0.1", () => {
+            const { port } = server.address();
+            resolve({ url: `http://127.0.0.1:${port}`, recorded });
+        });
+    });
+}
+// Await closes so no listener handle leaks (binary.test.ts teardown note).
+async function ocCloseServers() {
+    await Promise.all(openServers.map((s) => new Promise((resolve) => s.close(() => resolve()))));
+    openServers = [];
+}
+afterEach(ocCloseServers);
+afterAll(ocCloseServers);
+let profileSeq = 0;
+function ocPsProfile(baseUrl, over = {}) {
+    return {
+        id: `ps-${++profileSeq}`,
+        vendor: "peoplesoft",
+        baseUrl,
+        authType: "basic",
+        username: "isuser",
+        password: "isupass",
+        ...over,
+    };
+}
+function payload(over = {}) {
+    return {
+        profileId: "ps-x",
+        vendor: "peoplesoft",
+        operation: "test",
+        resource: "OC_PING",
+        ...over,
+    };
+}
+// Expected Basic header for the default credentials.
+const BASIC = "Basic " + Buffer.from("isuser:isupass").toString("base64");
+describe("ocPeoplesoftCall — test operation", () => {
+    it("probes the resource path with a Basic-auth header and resolves", async () => {
+        const { url, recorded } = await ocStartServer((_req, res) => {
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: true }));
+        });
+        const profile = ocPsProfile(url);
+        const result = await ocPeoplesoftCall({
+            payload: payload({ profileId: profile.id, resource: "OC_PING" }),
+            profile,
+        });
+        expect(result.raw).toEqual({ ok: true, vendor: "peoplesoft", resource: "OC_PING" });
+        const probe = recorded[0];
+        expect(probe.method).toBe("GET");
+        expect(probe.url).toBe("/OC_PING");
+        expect(probe.headers["authorization"]).toBe(BASIC);
+    });
+    it("sends a Bearer header when authType is bearer", async () => {
+        const { url, recorded } = await ocStartServer((_req, res) => {
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end("{}");
+        });
+        const profile = ocPsProfile(url, { authType: "bearer", bearerToken: "tok-123" });
+        await ocPeoplesoftCall({
+            payload: payload({ profileId: profile.id, resource: "OC_PING" }),
+            profile,
+        });
+        expect(recorded[0].headers["authorization"]).toBe("Bearer tok-123");
+    });
+    it("throws including the status when the probe fails", async () => {
+        const { url } = await ocStartServer((_req, res) => {
+            res.writeHead(401);
+            res.end("denied");
+        });
+        const profile = ocPsProfile(url);
+        await expect(ocPeoplesoftCall({
+            payload: payload({ profileId: profile.id, resource: "OC_PING" }),
+            profile,
+        })).rejects.toThrow(/PeopleSoft test probe failed \(401\)/);
+    });
+    it("throws when basic auth profile is missing username/password", async () => {
+        const profile = ocPsProfile("http://127.0.0.1:1", { username: "" });
+        await expect(ocPeoplesoftCall({
+            payload: payload({ profileId: profile.id, resource: "OC_PING" }),
+            profile,
+        })).rejects.toThrow(/missing username\/password/i);
+    });
+});
+describe("ocPeoplesoftCall — upsert", () => {
+    it("POSTs to the service-op path when no match key is present (create)", async () => {
+        const { url, recorded } = await ocStartServer((_req, res) => {
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ EMPLID: "E999" }));
+        });
+        const profile = ocPsProfile(url);
+        const result = await ocPeoplesoftCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "OC_CONSTITUENT",
+                record: { firstName: "Ann" },
+            }),
+            profile,
+        });
+        // Service op echoes EMPLID → that surfaces as sisId.
+        expect(result.sisId).toBe("E999");
+        const post = recorded[0];
+        expect(post.method).toBe("POST");
+        expect(post.url).toBe("/OC_CONSTITUENT");
+        expect(post.headers["content-type"]).toMatch(/application\/json/);
+        expect(JSON.parse(post.body)).toEqual({ firstName: "Ann" });
+    });
+    it("PUTs to the keyed instance path when a match key is present (update)", async () => {
+        const { url, recorded } = await ocStartServer((_req, res) => {
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end("{}");
+        });
+        const profile = ocPsProfile(url);
+        const result = await ocPeoplesoftCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "OC_CONSTITUENT",
+                record: { firstName: "Bo" },
+                match: { EMPLID: "E123" },
+            }),
+            profile,
+        });
+        const put = recorded[0];
+        expect(put.method).toBe("PUT");
+        expect(put.url).toBe("/OC_CONSTITUENT/E123");
+        // No echoed id → falls back to the supplied natural key.
+        expect(result.sisId).toBe("E123");
+    });
+    it("throws including the status when the write returns non-2xx", async () => {
+        const { url } = await ocStartServer((_req, res) => {
+            res.writeHead(500);
+            res.end("server error");
+        });
+        const profile = ocPsProfile(url);
+        await expect(ocPeoplesoftCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "OC_CONSTITUENT",
+                record: { firstName: "X" },
+            }),
+            profile,
+        })).rejects.toThrow(/PeopleSoft POST OC_CONSTITUENT failed \(500\)/);
+    });
+});
+describe("ocPeoplesoftCall — read", () => {
+    it("normalises a wrapped { data: [...] } collection into flattened rows", async () => {
+        const { url, recorded } = await ocStartServer((_req, res) => {
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({
+                data: [
+                    { EMPLID: "E1", name: { last: "A" } },
+                    { EMPLID: "E2", flag: null },
+                ],
+            }));
+        });
+        const profile = ocPsProfile(url);
+        const result = await ocPeoplesoftCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "read",
+                resource: "OC_GET",
+                match: { EMPLID: "E1" },
+            }),
+            profile,
+        });
+        expect(result.rows).toHaveLength(2);
+        expect(result.rows[0]).toEqual({ EMPLID: "E1", name: '{"last":"A"}' });
+        expect(result.rows[1]).toEqual({ EMPLID: "E2" });
+        // Match keys ride both the path segment and the query string.
+        const get = recorded[0];
+        expect(get.url).toBe("/OC_GET/E1?EMPLID=E1");
+    });
+    it("throws including the status when read returns non-2xx", async () => {
+        const { url } = await ocStartServer((_req, res) => {
+            res.writeHead(404);
+            res.end("not found");
+        });
+        const profile = ocPsProfile(url);
+        await expect(ocPeoplesoftCall({
+            payload: payload({ profileId: profile.id, operation: "read", resource: "OC_GET" }),
+            profile,
+        })).rejects.toThrow(/PeopleSoft read failed \(404\)/);
+    });
+});
+describe("ocPeoplesoftCall — SOAP variant", () => {
+    it("POSTs a WS-Security SOAP envelope to the listener and surfaces the match key", async () => {
+        const { url, recorded } = await ocStartServer((_req, res) => {
+            res.writeHead(200, { "Content-Type": "text/xml" });
+            res.end("<soapenv:Envelope><soapenv:Body><Result>ok</Result></soapenv:Body></soapenv:Envelope>");
+        });
+        const profile = ocPsProfile(url, { authType: "soap" });
+        const result = await ocPeoplesoftCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "OC_PostConstituent",
+                record: { firstName: "Ann" },
+                match: { EMPLID: "E777" },
+            }),
+            profile,
+        });
+        const soap = recorded[0];
+        expect(soap.method).toBe("POST");
+        expect(soap.headers["content-type"]).toMatch(/text\/xml/);
+        expect(soap.headers["soapaction"]).toBe("OC_PostConstituent");
+        // Envelope carries the WS-Security UsernameToken and the data fields.
+        expect(soap.body).toContain("<soapenv:Envelope");
+        expect(soap.body).toContain("<wsse:Username>isuser</wsse:Username>");
+        expect(soap.body).toContain("<wsse:Password>isupass</wsse:Password>");
+        expect(soap.body).toContain("<OC_PostConstituent>");
+        expect(soap.body).toContain("<firstName>Ann</firstName>");
+        expect(soap.body).toContain("<EMPLID>E777</EMPLID>");
+        // First match value surfaces as the sisId.
+        expect(result.sisId).toBe("E777");
+    });
+    it("throws when the SOAP body contains a Fault", async () => {
+        const { url } = await ocStartServer((_req, res) => {
+            res.writeHead(200, { "Content-Type": "text/xml" });
+            res.end("<soapenv:Envelope><soapenv:Body><soapenv:Fault><faultstring>nope</faultstring></soapenv:Fault></soapenv:Body></soapenv:Envelope>");
+        });
+        const profile = ocPsProfile(url, { authType: "soap" });
+        await expect(ocPeoplesoftCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "OC_PostConstituent",
+                record: { firstName: "X" },
+            }),
+            profile,
+        })).rejects.toThrow(/PeopleSoft SOAP OC_PostConstituent failed/);
+    });
+});
+//# sourceMappingURL=peoplesoft.test.js.map

package/dist/sis/peoplesoft.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peoplesoft.test.js","sourceRoot":"","sources":["../../src/sis/peoplesoft.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAC9E,OAAO,EAAE,YAAY,EAA0D,MAAM,MAAM,CAAC;AAE5F,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAE5B,kFAAkF;AAClF,6EAA6E;AAC7E,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC;AAEjE,IAAI,gBAAmE,CAAC;AACxE,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,CAAC,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAaH,IAAI,WAAW,GAAa,EAAE,CAAC;AAE/B,SAAS,aAAa,CAAC,OAAgB;IACrC,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACvC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC,CAAC;YAChD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,GAAG,GAAa;oBACpB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;oBACxB,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;oBAClB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;iBAC7C,CAAC;gBACF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;YACjD,OAAO,CAAC,EAAE,GAAG,EAAE,oBAAoB,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,cAAc;IAC3B,MAAM,OAAO,CAAC,GAAG,CACf,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CACjF,CAAC;IACF,WAAW,GAAG,EAAE,CAAC;AACnB,CAAC;AACD,SAAS,CAAC,cAAc,CAAC,CAAC;AAC1B,QAAQ,CAAC,cAAc,CAAC,CAAC;AAEzB,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,SAAS,WAAW,CAAC,OAAe,EAAE,OAA8B,EAAE;IACpE,OAAO;QACL,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;QACxB,MAAM,EAAE,YAAY;QACpB,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,SAAS;QACnB,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,OAAkC,EAAE;IACnD,OAAO;QACL,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,MAAM;QACjB,QAAQ,EAAE,SAAS;QACnB,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAE1E,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YAChE,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QACjF,MAAM,gBAAgB,CAAC;YACrB,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YAChE,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAChD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,CACV,gBAAgB,CAAC;YACf,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YAChE,OAAO;SACR,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,CACV,gBAAgB,CAAC;YACf,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YAChE,OAAO;SACR,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC;gBACf,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,gBAAgB;gBAC1B,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;aAC7B,CAAC;YACF,OAAO;SACR,CAAC,CAAC;QAEH,qDAAqD;QACrD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC;gBACf,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,gBAAgB;gBAC1B,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;gBAC3B,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC1B,CAAC;YACF,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC7C,yDAAyD;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAChD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,CACV,gBAAgB,CAAC;YACf,OAAO,EAAE,OAAO,CAAC;gBACf,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,gBAAgB;gBAC1B,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;aAC3B,CAAC;YACF,OAAO;SACR,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE;oBACJ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;oBACrC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;iBAC7B;aACF,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC;gBACf,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;aACxB,CAAC;YACF,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,8DAA8D;QAC9D,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAChD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,CACV,gBAAgB,CAAC;YACf,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;YAClF,OAAO;SACR,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;QACnG,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC;gBACf,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,oBAAoB;gBAC9B,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;gBAC5B,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;aAC1B,CAAC;YACF,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9D,sEAAsE;QACtE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACrD,2CAA2C;QAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAChD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,GAAG,CAAC,kIAAkI,CAAC,CAAC;QAC9I,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,CACV,gBAAgB,CAAC;YACf,OAAO,EAAE,OAAO,CAAC;gBACf,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,oBAAoB;gBAC9B,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;aAC3B,CAAC;YACF,OAAO;SACR,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sis/workday.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=workday.test.d.ts.map

package/dist/sis/workday.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workday.test.d.ts","sourceRoot":"","sources":["../../src/sis/workday.test.ts"],"names":[],"mappings":""}

package/dist/sis/workday.test.js

@@ -0,0 +1,369 @@
+import { describe, it, expect, beforeAll, afterEach, afterAll } from "vitest";
+import { createServer } from "http";
+import { join } from "path";
+import { tmpdir } from "os";
+// Redirect the agent logger to a writable temp dir BEFORE importing workday.js
+// (transitively constructs the winston file logger). Mirrors binary.test.ts.
+process.env["OC_LOG_DIR"] = join(tmpdir(), "oc-agent-test-logs");
+let ocWorkdayCall;
+beforeAll(async () => {
+    ({ ocWorkdayCall } = await import("./workday.js"));
+});
+let openServers = [];
+function ocStartServer(handler) {
+    const recorded = [];
+    return new Promise((resolve) => {
+        const server = createServer((req, res) => {
+            const chunks = [];
+            req.on("data", (c) => chunks.push(c));
+            req.on("end", () => {
+                const rec = {
+                    method: req.method ?? "",
+                    url: req.url ?? "",
+                    headers: req.headers,
+                    body: Buffer.concat(chunks).toString("utf8"),
+                };
+                recorded.push(rec);
+                handler(req, res, rec);
+            });
+        });
+        openServers.push(server);
+        server.listen(0, "127.0.0.1", () => {
+            const { port } = server.address();
+            resolve({ url: `http://127.0.0.1:${port}`, recorded });
+        });
+    });
+}
+// Await closes so no listener handle leaks (binary.test.ts teardown note).
+async function ocCloseServers() {
+    await Promise.all(openServers.map((s) => new Promise((resolve) => s.close(() => resolve()))));
+    openServers = [];
+}
+afterEach(ocCloseServers);
+afterAll(ocCloseServers);
+const TENANT = "acme_impl";
+const TOKEN_PATH = `/ccx/oauth2/${TENANT}/token`;
+const CLIENT_BASIC = "Basic " + Buffer.from("cid:csecret").toString("base64");
+let profileSeq = 0;
+function ocWdProfile(baseUrl, over = {}) {
+    // Unique id per profile so the process-lifetime bearer cache never bleeds
+    // between tests (caching is only asserted where we deliberately reuse one id).
+    return {
+        id: `wd-${++profileSeq}`,
+        vendor: "workday",
+        baseUrl,
+        authType: "oauth_client_credentials",
+        clientId: "cid",
+        clientSecret: "csecret",
+        tenant: TENANT,
+        ...over,
+    };
+}
+function payload(over = {}) {
+    return {
+        profileId: "wd-x",
+        vendor: "workday",
+        operation: "test",
+        resource: "students",
+        ...over,
+    };
+}
+// Mock token endpoint responder. Returns the access token for a valid grant.
+function tokenOk(res, token = "wd-access-token") {
+    res.writeHead(200, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ access_token: token, expires_in: 3600 }));
+}
+describe("ocWorkdayCall — test operation", () => {
+    it("obtains an OAuth client_credentials token then probes the workers endpoint", async () => {
+        const { url, recorded } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH && rec.method === "POST") {
+                tokenOk(res);
+                return;
+            }
+            if (rec.method === "GET" && rec.url.startsWith(`/ccx/api/v1/${TENANT}/workers`)) {
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ data: [] }));
+                return;
+            }
+            res.writeHead(404);
+            res.end();
+        });
+        const profile = ocWdProfile(url);
+        const result = await ocWorkdayCall({ payload: payload({ profileId: profile.id }), profile });
+        expect(result.raw).toEqual({ ok: true, vendor: "workday", tenant: TENANT });
+        // Token call used client_credentials grant + Basic client auth.
+        const tok = recorded.find((r) => r.url === TOKEN_PATH);
+        expect(tok.method).toBe("POST");
+        expect(tok.headers["authorization"]).toBe(CLIENT_BASIC);
+        expect(tok.headers["content-type"]).toMatch(/application\/x-www-form-urlencoded/);
+        expect(tok.body).toContain("grant_type=client_credentials");
+        // Probe carried the Bearer token.
+        const probe = recorded.find((r) => r.url.startsWith(`/ccx/api/v1/${TENANT}/workers`));
+        expect(probe.headers["authorization"]).toBe("Bearer wd-access-token");
+    });
+    it("uses the refresh_token grant when authType is oauth_refresh_token", async () => {
+        const { url, recorded } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                tokenOk(res);
+                return;
+            }
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ data: [] }));
+        });
+        const profile = ocWdProfile(url, {
+            authType: "oauth_refresh_token",
+            refreshToken: "rt-abc",
+        });
+        await ocWorkdayCall({ payload: payload({ profileId: profile.id }), profile });
+        const tok = recorded.find((r) => r.url === TOKEN_PATH);
+        expect(tok.body).toContain("grant_type=refresh_token");
+        expect(tok.body).toContain("refresh_token=rt-abc");
+    });
+    it("caches the bearer — a second call reuses it (one token hit)", async () => {
+        const { url, recorded } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                tokenOk(res);
+                return;
+            }
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ data: [] }));
+        });
+        const profile = ocWdProfile(url);
+        await ocWorkdayCall({ payload: payload({ profileId: profile.id }), profile });
+        await ocWorkdayCall({ payload: payload({ profileId: profile.id }), profile });
+        const tokenHits = recorded.filter((r) => r.url === TOKEN_PATH);
+        expect(tokenHits).toHaveLength(1);
+    });
+    it("throws including the status when the token request fails", async () => {
+        const { url } = await ocStartServer((_req, res) => {
+            res.writeHead(401);
+            res.end("bad client");
+        });
+        const profile = ocWdProfile(url);
+        await expect(ocWorkdayCall({ payload: payload({ profileId: profile.id }), profile })).rejects.toThrow(/Workday auth failed \(401\)/);
+    });
+    it("throws when the token response omits access_token", async () => {
+        const { url } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ expires_in: 3600 }));
+                return;
+            }
+            res.writeHead(200);
+            res.end("{}");
+        });
+        const profile = ocWdProfile(url);
+        await expect(ocWorkdayCall({ payload: payload({ profileId: profile.id }), profile })).rejects.toThrow(/no access_token/i);
+    });
+    it("throws when the profile has no tenant", async () => {
+        const profile = ocWdProfile("http://127.0.0.1:1", { tenant: "" });
+        await expect(ocWorkdayCall({ payload: payload({ profileId: profile.id }), profile })).rejects.toThrow(/no tenant/i);
+    });
+});
+describe("ocWorkdayCall — REST upsert", () => {
+    it("POSTs to the collection when no match ref id is present (create)", async () => {
+        const { url, recorded } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                tokenOk(res);
+                return;
+            }
+            if (rec.method === "POST") {
+                res.writeHead(201, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ id: "wd-id-1" }));
+                return;
+            }
+            res.writeHead(404);
+            res.end();
+        });
+        const profile = ocWdProfile(url);
+        const result = await ocWorkdayCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "students",
+                record: { firstName: "Ann" },
+            }),
+            profile,
+        });
+        expect(result.sisId).toBe("wd-id-1");
+        // The token request is also a POST — match on the api path to find the write.
+        const post = recorded.find((r) => r.method === "POST" && r.url.startsWith("/ccx/api/"));
+        expect(post.url).toBe(`/ccx/api/students/${TENANT}?version=v1`);
+        expect(post.headers["authorization"]).toBe("Bearer wd-access-token");
+        expect(JSON.parse(post.body)).toEqual({ firstName: "Ann" });
+    });
+    it("PUTs to the keyed instance URL when a match ref id is present (update)", async () => {
+        const { url, recorded } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                tokenOk(res);
+                return;
+            }
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end("{}");
+        });
+        const profile = ocWdProfile(url);
+        const result = await ocWorkdayCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "students",
+                record: { firstName: "Bo" },
+                match: { Student_ID: "S55" },
+            }),
+            profile,
+        });
+        const put = recorded.find((r) => r.method === "PUT");
+        // Ref id becomes a path segment before the ?version query.
+        expect(put.url).toBe(`/ccx/api/students/${TENANT}/S55?version=v1`);
+        // No echoed id → falls back to the supplied reference id.
+        expect(result.sisId).toBe("S55");
+    });
+    it("honours a custom version segment from the profile", async () => {
+        const { url, recorded } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                tokenOk(res);
+                return;
+            }
+            res.writeHead(201, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ id: "x" }));
+        });
+        const profile = ocWdProfile(url, { version: "v40.0" });
+        await ocWorkdayCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "students",
+                record: { a: "b" },
+            }),
+            profile,
+        });
+        const post = recorded.find((r) => r.method === "POST" && r.url.startsWith("/ccx/api/"));
+        expect(post.url).toBe(`/ccx/api/students/${TENANT}?version=v40.0`);
+    });
+    it("throws including the status when the REST write returns non-2xx", async () => {
+        const { url } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                tokenOk(res);
+                return;
+            }
+            res.writeHead(500);
+            res.end("boom");
+        });
+        const profile = ocWdProfile(url);
+        await expect(ocWorkdayCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "students",
+                record: { a: "b" },
+            }),
+            profile,
+        })).rejects.toThrow(/Workday POST students failed \(500\)/);
+    });
+});
+describe("ocWorkdayCall — SOAP upsert routing", () => {
+    it("POSTs a SOAP envelope to the service endpoint when record.__transport is soap", async () => {
+        const { url, recorded } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                tokenOk(res);
+                return;
+            }
+            res.writeHead(200, { "Content-Type": "text/xml" });
+            res.end("<soapenv:Envelope><soapenv:Body><Put_Student_Response/></soapenv:Body></soapenv:Envelope>");
+        });
+        const profile = ocWdProfile(url);
+        const result = await ocWorkdayCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "Put_Student",
+                record: { __transport: "soap", First_Name: "Ann" },
+                match: { Student_ID: "S900" },
+            }),
+            profile,
+        });
+        const soap = recorded.find((r) => r.method === "POST" && r.url.includes("/ccx/service/"));
+        expect(soap).toBeDefined();
+        expect(soap.url).toBe(`/ccx/service/${TENANT}/v1`);
+        expect(soap.headers["content-type"]).toMatch(/text\/xml/);
+        expect(soap.headers["soapaction"]).toBe("Put_Student");
+        expect(soap.headers["authorization"]).toBe("Bearer wd-access-token");
+        // Envelope carries the operation request, the typed Reference ID, and data
+        // fields — but NOT the __transport hint.
+        expect(soap.body).toContain("<wd:Put_Student_Request>");
+        expect(soap.body).toContain('<wd:ID wd:type="Student_ID">S900</wd:ID>');
+        expect(soap.body).toContain("<wd:First_Name>Ann</wd:First_Name>");
+        expect(soap.body).not.toContain("__transport");
+        // First match value surfaces as the sisId.
+        expect(result.sisId).toBe("S900");
+    });
+    it("throws when the SOAP response contains a Fault", async () => {
+        const { url } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                tokenOk(res);
+                return;
+            }
+            res.writeHead(200, { "Content-Type": "text/xml" });
+            res.end("<soapenv:Envelope><soapenv:Body><soapenv:Fault><faultstring>no</faultstring></soapenv:Fault></soapenv:Body></soapenv:Envelope>");
+        });
+        const profile = ocWdProfile(url);
+        await expect(ocWorkdayCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "upsert",
+                resource: "Put_Student",
+                record: { __transport: "soap", First_Name: "X" },
+            }),
+            profile,
+        })).rejects.toThrow(/Workday SOAP Put_Student failed/);
+    });
+});
+describe("ocWorkdayCall — read", () => {
+    it("returns flattened rows from a { data: [...] } collection", async () => {
+        const { url, recorded } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                tokenOk(res);
+                return;
+            }
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({
+                data: [
+                    { id: "1", descriptor: { name: "Ann" }, active: true },
+                    { id: "2", note: null },
+                ],
+            }));
+        });
+        const profile = ocWdProfile(url);
+        const result = await ocWorkdayCall({
+            payload: payload({
+                profileId: profile.id,
+                operation: "read",
+                resource: "students",
+                match: { Student_ID: "1" },
+            }),
+            profile,
+        });
+        expect(result.rows).toHaveLength(2);
+        expect(result.rows[0]).toEqual({ id: "1", descriptor: '{"name":"Ann"}', active: "true" });
+        expect(result.rows[1]).toEqual({ id: "2" });
+        // Match keys appended as query filters alongside the version param.
+        const get = recorded.find((r) => r.method === "GET");
+        expect(get.url).toBe(`/ccx/api/students/${TENANT}?version=v1&Student_ID=1`);
+    });
+    it("throws including the status when read returns non-2xx", async () => {
+        const { url } = await ocStartServer((_req, res, rec) => {
+            if (rec.url === TOKEN_PATH) {
+                tokenOk(res);
+                return;
+            }
+            res.writeHead(403);
+            res.end("forbidden");
+        });
+        const profile = ocWdProfile(url);
+        await expect(ocWorkdayCall({
+            payload: payload({ profileId: profile.id, operation: "read", resource: "students" }),
+            profile,
+        })).rejects.toThrow(/Workday read failed \(403\)/);
+    });
+});
+//# sourceMappingURL=workday.test.js.map