test(cmc): update [CMCL1OA] for readOffer omit-streams contract

The contract test was asserting the buggy intermediate shape from PR
#67 (`streams: [':_cmc:_internal:offer']`). PR #68 corrected that to
omit the streams filter entirely (parent stream isn't auto-provisioned).
Update the assertion to match the final correct wire-shape: no `streams`,
no `streamIds`, with `types: ['consent/request-cmc']` as the only filter.

Author: perki

components/pryv-cmc/test/cmc.test.js

@@ -322,7 +322,23 @@ describe('[CMCL1] @pryv/cmc Level-1 protocol functions', function () {
       };
     }
 
-    it('[CMCL1OA] calls events.get with `streams` (not `streamIds`) — schema-rejected otherwise', async function () {
+    it('[CMCL1OA] calls events.get WITHOUT a streams filter — relies on capability-access permissions to narrow the response', async function () {
+      // Bug history (two PRs back-to-back):
+      //   1. PR #67 fixed `streamIds → streams` (api-server schema rejects
+      //      `streamIds` on events.get with OBJECT_ADDITIONAL_PROPERTIES).
+      //   2. PR #68 fixed the resulting `unknown-referenced-resource` —
+      //      the parent stream `:_cmc:_internal:offer` is NOT
+      //      auto-provisioned on every user account (only the
+      //      per-capability children `:_cmc:_internal:offer:<capId>` are,
+      //      and the accepter doesn't know <capId> from the capabilityUrl).
+      //      The capability access's permissions already narrow the
+      //      response to the one offer event this token can read; a
+      //      streams filter at the request level is wrong.
+      //
+      // Contract: events.get is called WITHOUT a `streams` field (and
+      // without the typo `streamIds`). The `types` filter is kept as
+      // defense in case the offer stream ever holds more than one event
+      // in future revisions.
       const calls = [];
       const fakePryv = fakePryvWithApiOne(async function (method, params, expectedKey) {
         calls.push({ method, params, expectedKey });
@@ -332,14 +348,12 @@ describe('[CMCL1] @pryv/cmc Level-1 protocol functions', function () {
         throw new Error('unexpected method: ' + method);
       });
       await cmc.readOffer('https://Tok@example.com/', { pryv: fakePryv });
-      expect(calls).to.have.length.greaterThanOrEqual(1);
       const getCall = calls.find(function (c) { return c.method === 'events.get'; });
       expect(getCall, 'expected one events.get call').to.exist;
-      // The contract: `streams` is the read filter (recursive). `streamIds`
-      // here is the api-server-rejected typo.
-      expect(getCall.params).to.have.property('streams');
-      expect(getCall.params.streams).to.deep.equal([':_cmc:_internal:offer']);
+      expect(getCall.params).to.not.have.property('streams');
       expect(getCall.params).to.not.have.property('streamIds');
+      expect(getCall.params).to.have.property('types');
+      expect(getCall.params.types).to.deep.equal(['consent/request-cmc']);
     });
   });