openxiangda-cli 2.0.0-alpha.60 → 2.0.0-alpha.62

package/template/apps/web/test/contracts.test.ts

@@ -1,697 +1,35 @@
 import assert from 'node:assert/strict';
 import { readFileSync } from 'node:fs';
 import test from 'node:test';
-import {
-  instrumentFieldAllowed,
-  sanitizeInstrumentValues,
-} from '../src/InstrumentForm';
-import { instrumentFields } from '../src/fields';
-import {
-  browseDepartmentTree,
-  browseDepartmentUsers,
-  instrumentDataApi,
-  fetchDataFileBlob,
-  loadDataFilePreview,
-  loadCurrentIdentity,
-  resolveCollegeScope,
-  resolveDirectory,
-  searchCollegeScope,
-  searchDirectory,
-} from '../src/platform-client';
-import {
-  applicationApiPath,
-  readRuntimeMount,
-  resolveAttachmentPreviewPath,
-  resolveApplicationApiPath,
-  resolveApplicationBasename,
-} from '../src/runtime-meta';
-
-const collegeId = '11111111-1111-4111-8111-111111111111';
-const userId = '22222222-2222-4222-8222-222222222222';
-
-test('the golden module exposes exactly 30 fields and five restricted fields', () => {
-  assert.equal(instrumentFields.length, 30);
-  assert.deepEqual(
-    instrumentFields
-      .filter(field => field.createCapability && field.updateCapability)
-      .map(field => field.key),
-    [
-      'instrumentCode',
-      'assetCode',
-      'assetValue',
-      'collegeId',
-      'instrumentAdminIds',
-    ]
-  );
-  assert.deepEqual(
-    instrumentFields.filter(field => field.system).map(field => field.key),
-    ['id', 'revision']
-  );
-});
-
-test('application shell and instrument surfaces match the approved navigation model', () => {
-  const shell = readFileSync(new URL('../src/Shell.tsx', import.meta.url), 'utf8');
-  const list = readFileSync(
-    new URL('../src/InstrumentListPage.tsx', import.meta.url),
-    'utf8'
-  );
-  const routes = readFileSync(new URL('../src/main.tsx', import.meta.url), 'utf8');
-  const form = readFileSync(
-    new URL('../src/InstrumentForm.tsx', import.meta.url),
-    'utf8'
-  );
-  const colleges = readFileSync(
-    new URL('../src/CollegePage.tsx', import.meta.url),
-    'utf8'
-  );
-  const directory = readFileSync(
-    new URL('../src/components/platform-fields/PlatformDirectoryPicker.tsx', import.meta.url),
-    'utf8'
-  );
-  const attachment = readFileSync(
-    new URL('../src/components/platform-fields/AttachmentFileList.tsx', import.meta.url),
-    'utf8'
-  );
-  const preview = readFileSync(
-    new URL('../src/FilePreviewPage.tsx', import.meta.url),
-    'utf8'
-  );
-  for (const marker of [
-    '仪器资源管理',
-    '工作台',
-    '仪器管理',
-    '仪器资源',
-    '开放记录',
-    '基础数据',
-    '学院字典',
-    '系统设置',
-    '应用管理员',
-    '收起侧边栏',
-  ]) {
-    assert.match(shell, new RegExp(marker));
-  }
-  assert.doesNotMatch(shell, /<span>\{identity\.userId\}<\/span>/);
-  assert.doesNotMatch(shell, /验证本地 Nest|roleCodes\.join|environment\.key/);
-  assert.doesNotMatch(list, /<Drawer|surface="drawer"/);
-  assert.match(routes, /path="\/instruments\/new"[\s\S]*<InstrumentFormPage mode="create"/);
-  assert.match(colleges, /<Drawer/);
-  assert.match(colleges, /size=\{520\}/);
-  assert.match(directory, /width=\{kind === 'user' \? 980 : 760\}/);
-  assert.match(directory, /browseDepartmentTree|browseDepartmentUsers/);
-  assert.match(directory, /选择成员|选择部门|组织架构|已选/);
-  assert.match(form, /oxa-form-full/);
-  assert.match(form, /PlatformDirectoryPicker/);
-  assert.match(form, /oxa-file-dropzone/);
-  assert.match(form, /oxa-detail-layout/);
-  assert.match(routes, /path="\/files\/:resourceCode\/:fileId\/preview"/);
-  assert.match(attachment, /Image\.PreviewGroup/);
-  assert.match(attachment, /attachmentPreviewPath/);
-  assert.match(preview, /import\('docx-preview'\)/);
-  assert.match(preview, /import\('xlsx'\)/);
-  assert.match(preview, /只读预览/);
-  assert.doesNotMatch(form, /instrumentFileContentUrl|window\.open/);
-  assert.doesNotMatch(
-    `${form}\n${directory}`,
-    /FormContext|tools\/openxiangda|RoleSession/
-  );
-});
-
-test('college, user, and department selectors have authoritative owners only', () => {
-  const appConfig = readFileSync(
-    new URL('../../../openxiangda.config.ts', import.meta.url),
-    'utf8'
-  );
-  const colleges = readFileSync(
-    new URL('../../../platform/data/colleges.ts', import.meta.url),
-    'utf8'
-  );
-  const fields = readFileSync(new URL('../src/fields.ts', import.meta.url), 'utf8');
-  assert.match(appConfig, /valueType:\s*'uuid'/);
-  assert.match(appConfig, /kind:\s*'native_resource'/);
-  assert.match(appConfig, /resourceCode:\s*'colleges'/);
-  assert.match(appConfig, /data:\s*\{\s*resources:\s*\[colleges, instruments\]/);
-  assert.match(colleges, /code:\s*'name'.*type:\s*'string'/s);
-  assert.match(colleges, /code:\s*'enabled'.*type:\s*'boolean'/s);
-  assert.match(fields, /kind:\s*'scope'/);
-  assert.match(fields, /kind:\s*'directory-user'/);
-  assert.match(fields, /kind:\s*'directory-department'/);
-  for (const marker of [
-    ['college', 'am'].join('-'),
-    ['user', 'wang'].join('-'),
-    ['dept', 'am-test'].join('-'),
-  ]) {
-    assert.equal(appConfig.includes(marker), false);
-    assert.equal(fields.includes(marker), false);
-  }
-});
-
-test('college create restores five fields while update omits college reassignment', () => {
-  const protectedFields = instrumentFields.filter(
-    field => field.createCapability && field.updateCapability
-  );
-  const collegeCapabilities = new Set<string>([
-    ...protectedFields.map(field => field.createCapability!),
-    ...protectedFields
-      .filter(field => field.key !== 'collegeId')
-      .map(field => field.updateCapability!),
-  ]);
-  const hasCapability = (capability: string) =>
-    collegeCapabilities.has(capability);
-  const values = {
-    instrumentCode: 'INS-001',
-    chineseName: '电子显微镜',
-    assetCode: 'ASSET-001',
-    assetValue: 100,
-    collegeId,
-    instrumentAdminIds: [userId],
-    revision: 7,
-  };
-  assert.equal(
-    instrumentFieldAllowed(
-      instrumentFields.find(field => field.key === 'collegeId')!,
-      'create',
-      hasCapability
-    ),
-    true
-  );
-  assert.equal(
-    instrumentFieldAllowed(
-      instrumentFields.find(field => field.key === 'collegeId')!,
-      'edit',
-      hasCapability
-    ),
-    false
-  );
-  assert.deepEqual(sanitizeInstrumentValues(values, 'create', hasCapability), {
-    instrumentCode: 'INS-001',
-    chineseName: '电子显微镜',
-    assetCode: 'ASSET-001',
-    assetValue: 100,
-    collegeId,
-    instrumentAdminIds: [userId],
-  });
-  assert.deepEqual(sanitizeInstrumentValues(values, 'edit', hasCapability), {
-    instrumentCode: 'INS-001',
-    chineseName: '电子显微镜',
-    assetCode: 'ASSET-001',
-    assetValue: 100,
-    instrumentAdminIds: [userId],
-  });
-});
-
-test('instrument admin update payload omits every protected field', () => {
-  const values = Object.fromEntries(
-    instrumentFields
-      .filter(field => !field.system)
-      .map(field => [field.key, `value:${field.key}`])
-  );
-  const sanitized = sanitizeInstrumentValues(values, 'edit', () => false);
-  assert.equal(sanitized.chineseName, 'value:chineseName');
-  for (const field of instrumentFields.filter(
-    item => item.createCapability && item.updateCapability
-  )) {
-    assert.equal(
-      Object.prototype.hasOwnProperty.call(sanitized, field.key),
-      false
-    );
-  }
-});
-
-test('school admin keeps every protected field in create and update payloads', () => {
-  const values = Object.fromEntries(
-    instrumentFields
-      .filter(field => !field.system)
-      .map(field => [field.key, `value:${field.key}`])
-  );
-  for (const mode of ['create', 'edit'] as const) {
-    const sanitized = sanitizeInstrumentValues(values, mode, () => true);
-    for (const field of instrumentFields.filter(
-      item => item.createCapability && item.updateCapability
-    )) {
-      assert.equal(sanitized[field.key], `value:${field.key}`);
-    }
-  }
+import { resourceDefinitions, resourceCodes } from '../../../packages/contracts/src/generated.js';
+import { readRuntimeMount, resolveApplicationBasename } from '../src/runtime-meta';
+
+test('clean template is resource-driven and contains no HGY fixture', () => {
+  const config = readFileSync(new URL('../../../openxiangda.config.ts', import.meta.url), 'utf8');
+  const source = readFileSync(new URL('../src/main.tsx', import.meta.url), 'utf8');
+  assert.deepEqual(Object.keys(resourceDefinitions).sort(), [...resourceCodes].sort());
+  assert.match(config, /data:\s*\{\s*resources:/);
+  assert.match(source, /Object\.keys\(resourceDefinitions\)/);
+  const legacyMarkers = ['instruments', 'colleges', '仪器' + '资源管理', '学院' + '字典', 'HGY', 'Instrument'];
+  assert.doesNotMatch(`${config}\n${source}`, new RegExp(legacyMarkers.join('|')));
+});
+
+test('standard surfaces keep authoritative directory/resource selectors and mobile routes', () => {
+  const surface = readFileSync(new URL('../src/components/resource/SurfaceFields.tsx', import.meta.url), 'utf8');
+  const selector = readFileSync(new URL('../src/AuthoritativeSelector.tsx', import.meta.url), 'utf8');
+  const crud = readFileSync(new URL('../src/components/resource/GeneratedResourceCrud.tsx', import.meta.url), 'utf8');
+  assert.match(surface, /PlatformDirectoryPicker/);
+  assert.match(surface, /source="resource"/);
+  assert.match(selector, /searchResource|resolveResource/);
+  assert.match(crud, /MobileResourceListPage/);
+  assert.match(crud, /fieldWritable/);
+});
+
+test('runtime metadata stays mount-scoped', () => {
+  const mount = readRuntimeMount(name => ({
+    'openxiangda-runtime-base': '/view/example-app/',
+    'openxiangda-app-code': 'example-app',
+    'openxiangda-environment': 'preproduction',
+  }[name]));
+  assert.equal(resolveApplicationBasename(mount), '/view/example-app');
 });
-
-test('deployed app/environment come only from platform-injected runtime meta', () => {
-  const values = new Map([
-    ['openxiangda-runtime-base', '/view/instrument-center/'],
-    ['openxiangda-app-code', 'instrument-center'],
-    ['openxiangda-environment', 'production'],
-  ]);
-  const mount = readRuntimeMount(name => values.get(name));
-  assert.deepEqual(mount, {
-    runtimeBase:
-      '/view/instrument-center/',
-    appCode: 'instrument-center',
-    environmentKey: 'production',
-  });
-  assert.equal(readRuntimeMount(() => undefined), null);
-  assert.throws(
-    () =>
-      readRuntimeMount(name =>
-        name === 'openxiangda-environment' ? 'production' : undefined
-      ),
-    /OPENXIANGDA_RUNTIME_META_INVALID/
-  );
-  assert.equal(
-    applicationApiPath('api/instruments/context'),
-    '/api/instruments/context'
-  );
-  assert.equal(resolveApplicationBasename(mount), '/view/instrument-center');
-  assert.equal(
-    resolveApplicationBasename({
-      ...mount!,
-      runtimeBase: '/dev/instrument-center/',
-      environmentKey: 'preproduction',
-    }),
-    '/dev/instrument-center'
-  );
-  assert.equal(
-    resolveApplicationApiPath(mount, 'api/instruments/context'),
-    '/service/openxiangda-app-api/v2/instrument-center/production/api/instruments/context'
-  );
-  assert.equal(
-    resolveAttachmentPreviewPath(
-      mount,
-      'instruments',
-      '77777777-7777-4777-8777-777777777777'
-    ),
-    '/view/instrument-center/files/instruments/77777777-7777-4777-8777-777777777777/preview'
-  );
-});
-
-test('managed file preview reads metadata and bytes without a RoleSession', async () => {
-  const calls: Array<{ path: string; init?: RequestInit }> = [];
-  const originalFetch = globalThis.fetch;
-  globalThis.fetch = async (input, init) => {
-    const path = String(input);
-    calls.push({ path, init });
-    if (path.endsWith('/dev-sessions/current')) {
-      return Response.json({
-        code: 200,
-        data: {
-          environment: { id: 'test-id', key: 'preproduction' },
-          principal: {
-            userId,
-            roleCodes: ['school_admin'],
-            capabilityCodes: [],
-            isAppSuperAdmin: false,
-          },
-        },
-      });
-    }
-    if (path.includes('/files/file-1/preview?')) {
-      return Response.json({
-        code: 200,
-        data: {
-          schemaVersion: 'openxiangda.data-file-preview/v2',
-          resourceCode: 'instruments',
-          file: {
-            schemaVersion: 'openxiangda.data-file-ref/v2',
-            id: 'file-1',
-            name: 'manual.docx',
-            size: 12,
-            contentType:
-              'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
-          },
-          extension: 'docx',
-          previewType: 'office',
-          renderMode: 'docx-html',
-          previewSurface: 'document',
-          previewProvider: 'browser',
-          canPreview: true,
-          canDownload: true,
-        },
-      });
-    }
-    if (path.includes('/files/file-1/content?')) {
-      return new Response(new Uint8Array([80, 75, 3, 4]), {
-        status: 200,
-        headers: {
-          'content-type':
-            'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
-        },
-      });
-    }
-    return Response.json({ code: 404, message: 'not mocked' }, { status: 404 });
-  };
-  try {
-    await loadCurrentIdentity();
-    const preview = await loadDataFilePreview('instruments', 'file-1');
-    const blob = await fetchDataFileBlob('instruments', 'file-1');
-    assert.equal(preview.renderMode, 'docx-html');
-    assert.equal(blob.size, 4);
-  } finally {
-    globalThis.fetch = originalFetch;
-  }
-  const previewCall = calls.find(call => call.path.includes('/files/file-1/preview?'))!;
-  const contentCall = calls.find(call => call.path.includes('/files/file-1/content?'))!;
-  assert.match(previewCall.path, /environmentKey=preproduction/);
-  assert.match(contentCall.path, /disposition=inline/);
-  assert.equal(
-    calls.some(call =>
-      Object.keys(call.init?.headers || {}).some(header =>
-        header.toLowerCase().includes('role-session')
-      )
-    ),
-    false
-  );
-});
-
-test('list uses the native Data API with server paging, filters, and sorting', async () => {
-  const calls: Array<{ path: string; init?: RequestInit }> = [];
-  const originalFetch = globalThis.fetch;
-  globalThis.fetch = async (input, init) => {
-    calls.push({ path: String(input), init });
-    if (String(input).endsWith('/dev-sessions/current')) {
-      return new Response(
-        JSON.stringify({
-          code: 200,
-          data: {
-            environment: { id: 'test-id', key: 'preproduction' },
-            principal: {
-              userId: 'user-test',
-              roleCodes: ['college_admin'],
-              capabilityCodes: [],
-              isAppSuperAdmin: false,
-            },
-          },
-        }),
-        { status: 200, headers: { 'content-type': 'application/json' } }
-      );
-    }
-    return new Response(
-      JSON.stringify({
-        code: 200,
-        data: {
-          schemaVersion: 'openxiangda.data-page/v2',
-          resourceCode: 'instruments',
-          items: [],
-          total: 0,
-          limit: 20,
-          offset: 20,
-        },
-      }),
-      { status: 200, headers: { 'content-type': 'application/json' } }
-    );
-  };
-  try {
-    await loadCurrentIdentity();
-    await instrumentDataApi.list({
-      page: 2,
-      pageSize: 20,
-      collegeId,
-      instrumentAdminId: userId,
-      sort: { field: 'assetValue', order: 'asc' },
-    });
-    await instrumentDataApi.list({ page: 1, pageSize: 20 });
-  } finally {
-    globalThis.fetch = originalFetch;
-  }
-  assert.equal(calls.length, 3);
-  assert.match(
-    calls[1]!.path,
-    /\/native\/data\/instruments\/query$/
-  );
-  const body = JSON.parse(String(calls[1]!.init?.body));
-  const resourceSource = readFileSync(
-    new URL('../../../platform/data/instruments.ts', import.meta.url),
-    'utf8'
-  );
-  const declaredFields = new Set(
-    [...resourceSource.matchAll(/\{\s*code:\s*'([^']+)'/g)].map(
-      match => match[1]!
-    )
-  );
-  assert.deepEqual(
-    [...declaredFields],
-    instrumentFields.filter(field => !field.system).map(field => field.key)
-  );
-  assert.equal(body.environmentKey, 'preproduction');
-  assert.equal(body.limit, 20);
-  assert.equal(body.offset, 20);
-  assert.deepEqual(body.order, [{ field: 'assetValue', direction: 'asc' }]);
-  assert.equal(
-    [...body.filters, ...body.order].every(item =>
-      declaredFields.has(item.field)
-    ),
-    true
-  );
-  assert.deepEqual(body.filters, [
-    { field: 'collegeId', operator: 'eq', value: collegeId },
-    {
-      field: 'instrumentAdminIds',
-      operator: 'cs',
-      value: [userId],
-    },
-  ]);
-  const defaultBody = JSON.parse(String(calls[2]!.init?.body));
-  assert.deepEqual(defaultBody.order, [
-    { field: 'instrumentCode', direction: 'asc' },
-  ]);
-  assert.equal(
-    [...defaultBody.filters, ...defaultBody.order].every(item =>
-      declaredFields.has(item.field)
-    ),
-    true
-  );
-});
-
-test('list rejects an undeclared sorter before issuing a Data API request', async () => {
-  let requests = 0;
-  const originalFetch = globalThis.fetch;
-  globalThis.fetch = async () => {
-    requests += 1;
-    throw new Error('unexpected fetch');
-  };
-  try {
-    await assert.rejects(
-      instrumentDataApi.list({
-        page: 1,
-        pageSize: 20,
-        sort: { field: 'updatedAt', order: 'desc' },
-      }),
-      /OPENXIANGDA_INSTRUMENT_QUERY_FIELD_NOT_DECLARED:updatedAt/
-    );
-  } finally {
-    globalThis.fetch = originalFetch;
-  }
-  assert.equal(requests, 0);
-});
-
-test('authoritative selectors page, resolve exact IDs, and never send RoleSession', async () => {
-  const calls: Array<{ path: string; init?: RequestInit }> = [];
-  const originalFetch = globalThis.fetch;
-  globalThis.fetch = async (input, init) => {
-    const path = String(input);
-    calls.push({ path, init });
-    if (path.endsWith('/dev-sessions/current')) {
-      return Response.json({
-        code: 200,
-        data: {
-          environment: {
-            id: 'test-id',
-            key: 'preproduction',
-            activeAppVersionId: 'version-1',
-            headRevision: 2,
-            authzRevisionId: 'authz-1',
-            authzVersion: 3,
-            scopeDataVersion: 'scope-1',
-          },
-          principal: {
-            userId,
-            roleCodes: ['school_admin'],
-            capabilityCodes: [],
-            isAppSuperAdmin: false,
-          },
-        },
-      });
-    }
-    if (path.includes('/directory/users?')) {
-      return Response.json({
-        code: 200,
-        data: {
-          schemaVersion: 'openxiangda.directory-entry-page/v2',
-          kind: 'user',
-          items: [
-            { kind: 'user', id: userId, label: '王老师', selectable: true },
-          ],
-          nextCursor: 'next-user-page',
-        },
-      });
-    }
-    if (path.includes('/directory/departments/tree?')) {
-      return Response.json({
-        code: 200,
-        data: {
-          schemaVersion: 'openxiangda.directory-entry-page/v2',
-          kind: 'department',
-          items: [
-            {
-              kind: 'department',
-              id: 'department-root',
-              label: '材料学院',
-              hasChildren: true,
-              selectable: true,
-            },
-          ],
-          nextCursor: null,
-        },
-      });
-    }
-    if (path.includes('/directory/departments/department-root/users?')) {
-      return Response.json({
-        code: 200,
-        data: {
-          schemaVersion: 'openxiangda.directory-entry-page/v2',
-          kind: 'user',
-          items: [
-            { kind: 'user', id: userId, label: '王老师', selectable: true },
-          ],
-          nextCursor: null,
-        },
-      });
-    }
-    if (path.includes('/directory/resolve?')) {
-      const body = JSON.parse(String(init?.body));
-      return Response.json({
-        code: 200,
-        data: {
-          schemaVersion: 'openxiangda.directory-entry-page/v2',
-          kind: body.kind,
-          items: body.ids.map((id: string) => ({
-            kind: body.kind,
-            id,
-            label: '精确解析',
-            selectable: false,
-          })),
-          nextCursor: null,
-        },
-      });
-    }
-    if (path.includes('/scope-values/resolve?')) {
-      const body = JSON.parse(String(init?.body));
-      return Response.json({
-        code: 200,
-        data: scopePage(
-          body.operation,
-          body.values.map((value: string) => ({
-            value,
-            label: '先进材料学院',
-            selectable: false,
-          }))
-        ),
-      });
-    }
-    if (path.includes('/scope-values?')) {
-      return Response.json({
-        code: 200,
-        data: scopePage('create', [
-          { value: collegeId, label: '先进材料学院', selectable: true },
-        ]),
-      });
-    }
-    return Response.json({ code: 404, message: 'not mocked' }, { status: 404 });
-  };
-  try {
-    await loadCurrentIdentity();
-    const users = await searchDirectory('user', {
-      keyword: '王老',
-      cursor: 'cursor-1',
-    });
-    assert.equal(users.nextCursor, 'next-user-page');
-    assert.equal((await resolveDirectory('department', [userId])).items[0]?.selectable, false);
-    assert.equal(
-      (await browseDepartmentTree({ parentId: 'department-parent' })).items[0]
-        ?.id,
-      'department-root'
-    );
-    assert.equal(
-      (await browseDepartmentUsers('department-root', 2)).items[0]?.id,
-      userId
-    );
-    assert.equal(
-      (await searchCollegeScope('create', { keyword: '', cursor: 'scope-1' }))
-        .items[0]?.value,
-      collegeId
-    );
-    assert.equal(
-      (await resolveCollegeScope('update', [collegeId])).items[0]?.selectable,
-      false
-    );
-    await assert.rejects(
-      resolveDirectory('user', []),
-      /OPENXIANGDA_DIRECTORY_RESOLVE_IDS_REQUIRED/
-    );
-    await assert.rejects(
-      resolveCollegeScope('update', []),
-      /OPENXIANGDA_SCOPE_RESOLVE_VALUES_REQUIRED/
-    );
-    await assert.rejects(
-      resolveDirectory(
-        'user',
-        Array.from({ length: 51 }, (_, index) => `user-${index}`)
-      ),
-      /OPENXIANGDA_DIRECTORY_RESOLVE_IDS_EXCEEDED/
-    );
-    await assert.rejects(
-      resolveCollegeScope(
-        'update',
-        Array.from({ length: 51 }, (_, index) =>
-          `${String(index).padStart(8, '0')}-0000-4000-8000-000000000000`
-        )
-      ),
-      /OPENXIANGDA_SCOPE_RESOLVE_VALUES_EXCEEDED/
-    );
-  } finally {
-    globalThis.fetch = originalFetch;
-  }
-  const userSearch = calls.find(call => call.path.includes('/directory/users?'))!;
-  const treeBrowse = calls.find(call => call.path.includes('/directory/departments/tree?'))!;
-  const memberBrowse = calls.find(call => call.path.includes('/directory/departments/department-root/users?'))!;
-  const scopeSearch = calls.find(call => call.path.includes('/scope-values?'))!;
-  assert.match(userSearch.path, /keyword=%E7%8E%8B%E8%80%81/);
-  assert.match(userSearch.path, /cursor=cursor-1/);
-  assert.match(treeBrowse.path, /parentId=department-parent/);
-  assert.match(memberBrowse.path, /page=2/);
-  assert.match(scopeSearch.path, /environmentKey=preproduction/);
-  assert.match(
-    scopeSearch.path,
-    /\/native\/data-resources\/instruments\/fields\/collegeId\/scope-values\?/
-  );
-  assert.match(scopeSearch.path, /operation=create/);
-  assert.match(scopeSearch.path, /cursor=scope-1/);
-  assert.equal(
-    calls.some(call =>
-      Object.keys(call.init?.headers || {}).some(header =>
-        header.toLowerCase().includes('role-session')
-      )
-    ),
-    false
-  );
-});
-
-function scopePage(
-  operation: 'create' | 'update',
-  items: Array<{ value: string; label: string; selectable: boolean }>
-) {
-  return {
-    schemaVersion: 'openxiangda.native-scope-value-page/v2',
-    environment: {
-      id: 'test-id',
-      key: 'preproduction',
-      activeAppVersionId: 'version-1',
-      headRevision: 2,
-      authzRevisionId: 'authz-1',
-      authzVersion: 3,
-      scopeDataVersion: 'scope-1',
-    },
-    resourceCode: 'instruments',
-    fieldCode: 'collegeId',
-    dimensionCode: 'college',
-    operation,
-    items,
-    nextCursor: null,
-  };
-}