fix(V2): scope live-api XLSX round-trip to home org

TheLastCicada · TheLastCicada · commit 2ea65d3c3655 · 2026-06-01T13:51:28.000-07:00
With governance sync enabled, /v2/project and /v2/unit XLSX exports
included projects and units owned by other organizations. The Step 15
round-trip re-import staged UPDATEs for every exported row, so the
ownership guard rejected the foreign rows and the import returned 400.

Export and compare only home-org data (orgUid=me) in the round-trip and
fidelity checks, matching the existing Step 16 home-org export pattern,
so the re-import only touches records the home org can modify.
diff --git a/tests/v2/live-api/xlsx-import-export.live.spec.js b/tests/v2/live-api/xlsx-import-export.live.spec.js
@@ -466,7 +466,7 @@ describe('XLSX Import/Export Live API Tests', function () {
     it('should export and re-import project XLSX', async function () {
       const exportResponse = await request
         .get('/v2/project')
-        .query({ xls: 'true' })
+        .query({ xls: 'true', orgUid: 'me' })
         .buffer(true)
         .parse((res, callback) => {
           const chunks = [];
@@ -478,7 +478,7 @@ describe('XLSX Import/Export Live API Tests', function () {
 
       const beforeResponse = await request
         .get('/v2/project')
-        .query({ page: 1, limit: 1000 });
+        .query({ page: 1, limit: 1000, orgUid: 'me' });
       beforeProjects = beforeResponse.body?.data || beforeResponse.body || [];
 
       const importResponse = await request
@@ -492,7 +492,7 @@ describe('XLSX Import/Export Live API Tests', function () {
     it('should export and re-import unit XLSX', async function () {
       const exportResponse = await request
         .get('/v2/unit')
-        .query({ xls: 'true' })
+        .query({ xls: 'true', orgUid: 'me' })
         .buffer(true)
         .parse((res, callback) => {
           const chunks = [];
@@ -504,7 +504,7 @@ describe('XLSX Import/Export Live API Tests', function () {
 
       const beforeResponse = await request
         .get('/v2/unit')
-        .query({ page: 1, limit: 1000 });
+        .query({ page: 1, limit: 1000, orgUid: 'me' });
       beforeUnits = beforeResponse.body?.data || beforeResponse.body || [];
 
       const importResponse = await request
@@ -526,7 +526,7 @@ describe('XLSX Import/Export Live API Tests', function () {
     it('should verify projects match after round-trip', async function () {
       const afterResponse = await request
         .get('/v2/project')
-        .query({ page: 1, limit: 1000 });
+        .query({ page: 1, limit: 1000, orgUid: 'me' });
       const afterProjects = afterResponse.body?.data || afterResponse.body || [];
 
       expect(afterProjects.length).to.equal(beforeProjects.length);
@@ -545,7 +545,7 @@ describe('XLSX Import/Export Live API Tests', function () {
     it('should verify units match after round-trip', async function () {
       const afterResponse = await request
         .get('/v2/unit')
-        .query({ page: 1, limit: 1000 });
+        .query({ page: 1, limit: 1000, orgUid: 'me' });
       const afterUnits = afterResponse.body?.data || afterResponse.body || [];
 
       expect(afterUnits.length).to.equal(beforeUnits.length);
