chore: import upstream snapshot with attribution

apps/sim/lib/api/contracts/permission-groups.test.ts

@@ -0,0 +1,82 @@
+/**
+ * @vitest-environment node
+ */
+import { describe, expect, it } from 'vitest'
+import {
+  createPermissionGroupBodySchema,
+  updatePermissionGroupBodySchema,
+} from '@/lib/api/contracts/permission-groups'
+
+describe('createPermissionGroupBodySchema', () => {
+  it('accepts a name-only body (scope is resolved and validated server-side)', () => {
+    const result = createPermissionGroupBodySchema.safeParse({ name: 'Engineering' })
+    expect(result.success).toBe(true)
+  })
+
+  it('accepts a default group', () => {
+    const result = createPermissionGroupBodySchema.safeParse({
+      name: 'Baseline',
+      isDefault: true,
+    })
+    expect(result.success).toBe(true)
+  })
+
+  it('accepts a specific-scope group with workspaces', () => {
+    const result = createPermissionGroupBodySchema.safeParse({
+      name: 'Contractors',
+      workspaceIds: ['ws-1'],
+    })
+    expect(result.success).toBe(true)
+  })
+
+  it('accepts a name + empty workspaces (the create route enforces at least one)', () => {
+    const result = createPermissionGroupBodySchema.safeParse({
+      name: 'Contractors',
+      workspaceIds: [],
+    })
+    expect(result.success).toBe(true)
+  })
+
+  it('rejects a default group that targets specific workspaces', () => {
+    const result = createPermissionGroupBodySchema.safeParse({
+      name: 'Baseline',
+      isDefault: true,
+      workspaceIds: ['ws-1'],
+    })
+    expect(result.success).toBe(false)
+  })
+})
+
+describe('updatePermissionGroupBodySchema', () => {
+  it('accepts an empty update', () => {
+    expect(updatePermissionGroupBodySchema.safeParse({}).success).toBe(true)
+  })
+
+  it('accepts demoting the default via isDefault:false alone (the route re-scopes it)', () => {
+    expect(updatePermissionGroupBodySchema.safeParse({ isDefault: false }).success).toBe(true)
+  })
+
+  it('accepts emptying scope (group then governs nothing)', () => {
+    const result = updatePermissionGroupBodySchema.safeParse({ workspaceIds: [] })
+    expect(result.success).toBe(true)
+  })
+
+  it('accepts a specific scope with workspaces', () => {
+    const result = updatePermissionGroupBodySchema.safeParse({
+      workspaceIds: ['ws-1', 'ws-2'],
+    })
+    expect(result.success).toBe(true)
+  })
+
+  it('accepts promoting a group to the default', () => {
+    expect(updatePermissionGroupBodySchema.safeParse({ isDefault: true }).success).toBe(true)
+  })
+
+  it('rejects promoting to the default while naming workspaces', () => {
+    const result = updatePermissionGroupBodySchema.safeParse({
+      isDefault: true,
+      workspaceIds: ['ws-1'],
+    })
+    expect(result.success).toBe(false)
+  })
+})