@acmekit/acmekit 2.13.83 → 2.13.84

package/dist/templates/plugin/.claude/agents/test-writer.md

@@ -1,287 +1,400 @@
 ---
 name: test-writer
-description: Generates comprehensive integration tests for AcmeKit plugins. Auto-detects the correct test runner (pluginIntegrationTestRunner for full plugin tests, moduleIntegrationTestRunner for isolated module services). Use proactively after implementing a feature to add test coverage.
+description: Generates comprehensive integration tests for AcmeKit plugins. Auto-detects the correct mode (plugin for container/HTTP, module for isolated services). Use proactively after implementing a feature to add test coverage.
 tools: Read, Write, Edit, Glob, Grep
 model: sonnet
 maxTurns: 20
 ---
 
-You are an AcmeKit test engineer for plugins. Generate comprehensive integration tests using the correct test runner and patterns.
+You are an AcmeKit test engineer for plugins. Generate comprehensive integration tests using the unified `integrationTestRunner` with the correct mode and patterns.
 
 **BEFORE writing any test:**
-1. Read `.claude/rules/testing.md` — it contains anti-patterns and error handling patterns you MUST follow
+1. Read `.claude/rules/testing.md` — it contains anti-patterns, fixtures, lifecycle, and error handling rules you MUST follow
 2. Read the source code you're testing — understand service methods, models, workflows, and subscribers
-3. Identify whether this needs a plugin test or module test
+3. Identify the correct test tier (HTTP, plugin container, module, or unit)
 
 ---
 
-## Test Runner Selection
+## Test Runner — `integrationTestRunner` (unified)
 
-| What to test | Runner | Test location |
+**NEVER use `pluginIntegrationTestRunner` or `moduleIntegrationTestRunner` — those are deprecated.**
+
+```typescript
+import { integrationTestRunner } from "@acmekit/test-utils"
+```
+
+| What to test | Mode | File location |
 |---|---|---|
-| Full plugin (modules + workflows + subscribers + jobs) | `pluginIntegrationTestRunner` | `integration-tests/plugin/<feature>.spec.ts` |
-| Module service CRUD in isolation | `moduleIntegrationTestRunner` | `src/modules/<mod>/__tests__/<name>.spec.ts` |
-| Pure functions (no DB) | Plain Jest `describe/it` | `src/**/__tests__/<name>.unit.spec.ts` |
+| API routes (HTTP end-to-end) | `mode: "plugin"` + `http: true` | `integration-tests/http/<feature>.spec.ts` |
+| Workflows, subscribers, jobs (container) | `mode: "plugin"` | `integration-tests/plugin/<feature>.spec.ts` |
+| Module service CRUD (isolated) | `mode: "module"` | `src/modules/<mod>/__tests__/<name>.spec.ts` |
+| Pure functions (no DB) | Plain Jest | `src/**/__tests__/<name>.unit.spec.ts` |
 
-**CRITICAL:** `pluginIntegrationTestRunner` does NOT start an HTTP server. There is no `api` fixture. Do NOT write tests that call `api.get()` or `api.post()` — test services directly through `container.resolve()`.
+**CRITICAL:** `mode: "plugin"` without `http: true` has NO HTTP server. There is no `api` fixture. Do NOT write tests using `api.get()` or `api.post()` — test services directly through `container.resolve()`.
 
 ---
 
-## Plugin Integration Test Template
+## Plugin HTTP Integration Test Template
 
-```typescript
-import { pluginIntegrationTestRunner } from "@acmekit/test-utils"
-import { plugin } from "../../src/plugin"
-
-jest.setTimeout(60 * 1000)
+Boots the full framework with plugin installed. Requires auth setup (JWT + client API key).
 
-pluginIntegrationTestRunner({
+```typescript
+import { integrationTestRunner } from "@acmekit/test-utils"
+import {
+  ApiKeyType,
+  CLIENT_API_KEY_HEADER,
+  ContainerRegistrationKeys,
+  generateJwtToken,
+  Modules,
+} from "@acmekit/framework/utils"
+import { GREETING_MODULE } from "../../src/modules/greeting"
+
+jest.setTimeout(120 * 1000)
+
+integrationTestRunner({
+  mode: "plugin",
+  http: true,
   pluginPath: process.cwd(),
-  pluginOptions: {
-    apiKey: "test-api-key",
-  },
-  testSuite: ({ container, acmekitApp }) => {
-    describe("Plugin loading", () => {
-      it("should load plugin modules", () => {
-        expect(acmekitApp.modules).toBeDefined()
+  pluginOptions: { apiKey: "test-api-key" },
+  testSuite: ({ api, container }) => {
+    let adminHeaders: Record<string, any>
+    let clientHeaders: Record<string, any>
+
+    beforeEach(async () => {
+      const userModule = container.resolve(Modules.USER)
+      const authModule = container.resolve(Modules.AUTH)
+      const apiKeyModule = container.resolve(Modules.API_KEY)
+
+      const user = await userModule.createUsers({
+        email: "admin@test.js",
       })
 
-      it("should resolve typed plugin options", () => {
-        const options = plugin.resolveOptions(container)
-        expect(options.apiKey).toBe("test-api-key")
+      const authIdentity = await authModule.createAuthIdentities({
+        provider_identities: [
+          { provider: "emailpass", entity_id: "admin@test.js" },
+        ],
+        app_metadata: { user_id: user.id },
       })
-    })
 
-    describe("BlogModule CRUD", () => {
-      let service: any
+      const config = container.resolve(
+        ContainerRegistrationKeys.CONFIG_MODULE
+      )
+      const { jwtSecret, jwtOptions } = config.projectConfig.http
+
+      const token = generateJwtToken(
+        {
+          actor_id: user.id,
+          actor_type: "user",
+          auth_identity_id: authIdentity.id,
+          app_metadata: { user_id: user.id },
+        },
+        { secret: jwtSecret, expiresIn: "1d", jwtOptions }
+      )
+
+      adminHeaders = {
+        headers: { authorization: `Bearer ${token}` },
+      }
 
-      beforeEach(() => {
-        service = container.resolve(BLOG_MODULE)
+      const apiKey = await apiKeyModule.createApiKeys({
+        title: "Test Client Key",
+        type: ApiKeyType.CLIENT,
+        created_by: "test",
       })
 
-      it("should create a blog post", async () => {
-        const result = await service.createBlogPosts([
-          { title: "Launch Announcement" },
-        ])
-        expect(result).toHaveLength(1)
-        expect(result[0]).toEqual(
+      clientHeaders = {
+        headers: { [CLIENT_API_KEY_HEADER]: apiKey.token },
+      }
+    })
+
+    describe("POST /admin/plugin/greetings", () => {
+      it("should create a greeting", async () => {
+        const response = await api.post(
+          "/admin/plugin/greetings",
+          { message: "Hello from HTTP" },
+          adminHeaders
+        )
+        expect(response.status).toEqual(200)
+        expect(response.data.greeting).toEqual(
           expect.objectContaining({
             id: expect.any(String),
-            title: "Launch Announcement",
+            message: "Hello from HTTP",
           })
         )
       })
 
-      it("should list and count", async () => {
-        await service.createBlogPosts([
-          { title: "Post A" },
-          { title: "Post B" },
-        ])
-        const [posts, count] = await service.listAndCountBlogPosts()
-        expect(count).toBe(2)
+      it("should reject missing required fields", async () => {
+        const { response } = await api
+          .post("/admin/plugin/greetings", {}, adminHeaders)
+          .catch((e: any) => e)
+        expect(response.status).toEqual(400)
       })
+    })
 
-      it("should filter by field", async () => {
-        await service.createBlogPosts([
-          { title: "Active", status: "published" },
-          { title: "Draft", status: "draft" },
-        ])
-        const published = await service.listBlogPosts({
-          status: "published",
+    describe("DELETE /admin/plugin/greetings/:id", () => {
+      it("should soft-delete and return confirmation", async () => {
+        const created = (
+          await api.post(
+            "/admin/plugin/greetings",
+            { message: "Delete me" },
+            adminHeaders
+          )
+        ).data.greeting
+
+        const response = await api.delete(
+          `/admin/plugin/greetings/${created.id}`,
+          adminHeaders
+        )
+        expect(response.data).toEqual({
+          id: created.id,
+          object: "greeting",
+          deleted: true,
         })
-        expect(published).toHaveLength(1)
-        expect(published[0].title).toBe("Active")
       })
+    })
 
-      it("should soft delete and restore", async () => {
-        const [created] = await service.createBlogPosts([
-          { title: "To Delete" },
-        ])
-        await service.softDeleteBlogPosts([created.id])
-        await expect(
-          service.retrieveBlogPost(created.id)
-        ).rejects.toThrow()
-
-        await service.restoreBlogPosts([created.id])
-        const restored = await service.retrieveBlogPost(created.id)
-        expect(restored.title).toBe("To Delete")
+    describe("Client routes", () => {
+      it("GET /client/plugin/greetings with API key", async () => {
+        await api.post(
+          "/admin/plugin/greetings",
+          { message: "Public" },
+          adminHeaders
+        )
+        const response = await api.get(
+          "/client/plugin/greetings",
+          clientHeaders
+        )
+        expect(response.status).toEqual(200)
+        expect(response.data.greetings).toHaveLength(1)
       })
 
-      it("should throw on missing required field", async () => {
-        await expect(service.createBlogPosts([{}])).rejects.toThrow()
+      it("should reject without API key", async () => {
+        const error = await api
+          .get("/client/plugin/greetings")
+          .catch((e: any) => e)
+        expect(error.response.status).toEqual(400)
       })
+    })
 
-      it("should return meaningful error for not found", async () => {
-        const error = await service
-          .retrieveBlogPost("nonexistent")
-          .catch((e) => e)
-        expect(error.message).toContain("not found")
+    describe("Auth enforcement", () => {
+      it("admin route rejects without JWT", async () => {
+        const error = await api
+          .get("/admin/plugin")
+          .catch((e: any) => e)
+        expect(error.response.status).toEqual(401)
       })
     })
   },
 })
 ```
 
-**Lifecycle:** Each `it` gets schema drop + recreate → fresh plugin boot (all modules, subscribers, workflows, jobs loaded). No manual cleanup needed.
+**Fixtures (HTTP mode):** `api`, `container`, `dbConfig`.
 
 ---
 
-## Module Integration Test Template (Isolated)
+## Plugin Container Integration Test Template
 
-Use when testing a single module in isolation (faster, no full plugin boot):
+No HTTP server — test services, workflows, subscribers, and jobs directly through the container:
 
 ```typescript
-import { moduleIntegrationTestRunner } from "@acmekit/test-utils"
+import { integrationTestRunner } from "@acmekit/test-utils"
+import { createGreetingsWorkflow } from "../../src/workflows"
+import { GREETING_MODULE } from "../../src/modules/greeting"
 
-jest.setTimeout(30000)
+jest.setTimeout(60 * 1000)
 
-moduleIntegrationTestRunner<IBlogModuleService>({
-  moduleName: BLOG_MODULE,
-  resolve: "./src/modules/my-module",
-  testSuite: ({ service }) => {
-    afterEach(() => {
-      jest.restoreAllMocks()
+integrationTestRunner({
+  mode: "plugin",
+  pluginPath: process.cwd(),
+  pluginOptions: { apiKey: "test-api-key" },
+  testSuite: ({ container, acmekitApp }) => {
+    describe("Plugin loading", () => {
+      it("should load plugin resources", () => {
+        expect(acmekitApp.modules).toBeDefined()
+      })
     })
 
-    describe("createBlogPosts", () => {
-      it("should create a blog post", async () => {
-        const result = await service.createBlogPosts([
-          { title: "Quarterly Report" },
+    describe("GreetingModule CRUD", () => {
+      it("should create a greeting", async () => {
+        const service: any = container.resolve(GREETING_MODULE)
+        const result = await service.createGreetings([
+          { message: "Launch Announcement" },
         ])
         expect(result).toHaveLength(1)
         expect(result[0]).toEqual(
           expect.objectContaining({
             id: expect.any(String),
-            title: "Quarterly Report",
+            message: "Launch Announcement",
           })
         )
       })
+
+      it("should throw on missing required field", async () => {
+        const service: any = container.resolve(GREETING_MODULE)
+        await expect(service.createGreetings([{}])).rejects.toThrow()
+      })
+    })
+
+    describe("createGreetingsWorkflow", () => {
+      it("should create via workflow", async () => {
+        const { result } = await createGreetingsWorkflow(container).run({
+          input: { greetings: [{ message: "Workflow Hello" }] },
+        })
+        expect(result).toHaveLength(1)
+        expect(result[0].message).toBe("Workflow Hello")
+      })
+
+      it("should reject invalid input", async () => {
+        const { errors } = await createGreetingsWorkflow(container).run({
+          input: { greetings: [{ message: "", status: "invalid" }] },
+          throwOnError: false,
+        })
+        expect(errors).toHaveLength(1)
+        expect(errors[0].error.message).toContain("Invalid")
+      })
     })
   },
 })
 ```
 
+**Fixtures (container-only):** `container`, `acmekitApp`, `MikroOrmWrapper`, `dbConfig`.
+
 ---
 
-## Testing Workflows
+## Subscriber Test Template (direct handler invocation)
 
-### Happy path + error inspection
+Plugin container mode doesn't have a real event bus — import the handler and call it manually:
 
 ```typescript
-import { createOrderWorkflow } from "../../src/workflows"
+import { integrationTestRunner } from "@acmekit/test-utils"
+import greetingCreatedHandler from "../../src/subscribers/greeting-created"
+import { GREETING_MODULE } from "../../src/modules/greeting"
+
+jest.setTimeout(60 * 1000)
 
-pluginIntegrationTestRunner({
+integrationTestRunner({
+  mode: "plugin",
   pluginPath: process.cwd(),
   testSuite: ({ container }) => {
-    it("should execute the workflow", async () => {
-      const { result } = await createOrderWorkflow(container).run({
-        input: {
-          customerId: "cus_123",
-          items: [{ sku: "SKU-001", qty: 2 }],
+    it("should append ' [notified]' to greeting message", async () => {
+      const service: any = container.resolve(GREETING_MODULE)
+      const [greeting] = await service.createGreetings([
+        { message: "Hello World" },
+      ])
+
+      // Call handler directly with event + container
+      await greetingCreatedHandler({
+        event: {
+          data: { id: greeting.id },
+          name: "greeting.created",
         },
+        container,
       })
-      expect(result.order).toEqual(
-        expect.objectContaining({ customerId: "cus_123" })
-      )
-    })
 
-    it("should reject invalid input via inputSchema", async () => {
-      const { errors } = await createOrderWorkflow(container).run({
-        input: {},
-        throwOnError: false,
-      })
-      expect(errors).toHaveLength(1)
-      expect(errors[0].error.message).toContain("customerId")
+      const updated = await service.retrieveGreeting(greeting.id)
+      expect(updated.message).toBe("Hello World [notified]")
     })
   },
 })
 ```
 
-### Step compensation
+---
+
+## Job Test Template (direct invocation)
 
 ```typescript
-it("should compensate on failure", async () => {
-  const service = container.resolve("orderModuleService")
-
-  const { errors } = await createOrderWorkflow(container).run({
-    input: {
-      customerId: "cus_123",
-      items: [{ sku: "SKU-001", qty: 2 }],
-      paymentMethod: "invalid-method",
-    },
-    throwOnError: false,
-  })
-
-  expect(errors).toHaveLength(1)
-
-  // Verify compensation ran — order was rolled back
-  const orders = await service.listOrders({ customerId: "cus_123" })
-  expect(orders).toHaveLength(0)
-})
-```
+import { integrationTestRunner } from "@acmekit/test-utils"
+import cleanupGreetingsJob from "../../src/jobs/cleanup-greetings"
+import { GREETING_MODULE } from "../../src/modules/greeting"
+
+jest.setTimeout(60 * 1000)
 
-### `when()` branches
+integrationTestRunner({
+  mode: "plugin",
+  pluginPath: process.cwd(),
+  testSuite: ({ container }) => {
+    it("should soft-delete greetings with lang='old'", async () => {
+      const service: any = container.resolve(GREETING_MODULE)
 
-```typescript
-it("should skip notification when flag is false", async () => {
-  const eventBusSpy = jest.spyOn(MockEventBusService.prototype, "emit")
-
-  await createOrderWorkflow(container).run({
-    input: {
-      customerId: "cus_123",
-      items: [{ sku: "SKU-001", qty: 1 }],
-      sendNotification: false,
-    },
-  })
-
-  const allEvents = eventBusSpy.mock.calls.flatMap((call) => call[0])
-  expect(allEvents).toEqual(
-    expect.not.arrayContaining([
-      expect.objectContaining({ name: "order.notification.sent" }),
-    ])
-  )
-  eventBusSpy.mockRestore()
-})
-```
+      await service.createGreetings([
+        { message: "Old 1", lang: "old" },
+        { message: "Old 2", lang: "old" },
+        { message: "Current", lang: "en" },
+      ])
 
-### `parallelize()` results
+      await cleanupGreetingsJob(container)
 
-```typescript
-it("should run parallel steps", async () => {
-  const { result } = await enrichOrderWorkflow(container).run({
-    input: { orderId: order.id },
-  })
+      const remaining = await service.listGreetings()
+      expect(remaining).toHaveLength(1)
+      expect(remaining[0].lang).toBe("en")
+    })
+
+    it("should do nothing when no old greetings exist", async () => {
+      const service: any = container.resolve(GREETING_MODULE)
+      await service.createGreetings([{ message: "Hello", lang: "en" }])
+
+      await cleanupGreetingsJob(container)
 
-  expect(result.customerDetails).toBeDefined()
-  expect(result.inventoryCheck).toBeDefined()
+      const remaining = await service.listGreetings()
+      expect(remaining).toHaveLength(1)
+    })
+  },
 })
 ```
 
-### Workflow hooks
+---
+
+## Module Integration Test Template
 
 ```typescript
-it("should execute hook handler", async () => {
-  const hookResult: any[] = []
+import { integrationTestRunner } from "@acmekit/test-utils"
 
-  const workflow = createOrderWorkflow(container)
-  workflow.hooks.orderCreated((input) => {
-    hookResult.push(input)
-  })
+jest.setTimeout(30000)
+
+integrationTestRunner<IGreetingModuleService>({
+  mode: "module",
+  moduleName: "greeting",
+  resolve: process.cwd() + "/src/modules/greeting",
+  testSuite: ({ service }) => {
+    describe("createGreetings", () => {
+      it("should create a greeting", async () => {
+        const result = await service.createGreetings([
+          { message: "Hello" },
+        ])
+        expect(result).toHaveLength(1)
+        expect(result[0]).toEqual(
+          expect.objectContaining({
+            id: expect.any(String),
+            message: "Hello",
+          })
+        )
+      })
+    })
 
-  await workflow.run({
-    input: { customerId: "cus_123", items: [{ sku: "SKU-001", qty: 1 }] },
-  })
+    describe("softDeleteGreetings / restoreGreetings", () => {
+      it("should soft delete and restore", async () => {
+        const [created] = await service.createGreetings([
+          { message: "To Delete" },
+        ])
+        await service.softDeleteGreetings([created.id])
 
-  expect(hookResult).toHaveLength(1)
-  expect(hookResult[0]).toEqual(
-    expect.objectContaining({ orderId: expect.any(String) })
-  )
+        const listed = await service.listGreetings({ id: created.id })
+        expect(listed).toHaveLength(0)
+
+        await service.restoreGreetings([created.id])
+
+        const restored = await service.listGreetings({ id: created.id })
+        expect(restored).toHaveLength(1)
+      })
+    })
+  },
 })
 ```
 
 ---
 
-## Asserting Domain Events
+## Asserting Domain Events (container-only mode)
+
+Plugin mode (without HTTP) injects `MockEventBusService`. Spy on the **prototype**, not an instance.
 
 ```typescript
 import { MockEventBusService } from "@acmekit/test-utils"
@@ -296,16 +409,16 @@ afterEach(() => {
   eventBusSpy.mockClear()
 })
 
-it("should emit blog-post.created event", async () => {
-  const service = container.resolve(BLOG_MODULE)
-  await service.createBlogPosts([{ title: "Event Test" }])
+it("should emit greeting.created event", async () => {
+  const service: any = container.resolve(GREETING_MODULE)
+  await service.createGreetings([{ message: "Event Test" }])
 
+  // MockEventBusService.emit receives an ARRAY of events
   const events = eventBusSpy.mock.calls[0][0]
-  expect(events).toHaveLength(1)
   expect(events).toEqual(
     expect.arrayContaining([
       expect.objectContaining({
-        name: "blog-post.created",
+        name: "greeting.created",
         data: expect.objectContaining({ id: expect.any(String) }),
       }),
     ])
@@ -315,131 +428,77 @@ it("should emit blog-post.created event", async () => {
 
 ---
 
-## Waiting for Subscribers
-
-**CRITICAL: create the promise BEFORE triggering the event.**
-
-```typescript
-import { TestEventUtils } from "@acmekit/test-utils"
-import { Modules } from "@acmekit/framework/utils"
-
-it("should execute subscriber side-effect", async () => {
-  const eventBus = container.resolve(Modules.EVENT_BUS)
-
-  const subscriberExecution = TestEventUtils.waitSubscribersExecution(
-    "blog-post.created",
-    eventBus
-  )
-  const service = container.resolve(BLOG_MODULE)
-  await service.createBlogPosts([{ title: "Trigger" }])
-  await subscriberExecution
-  // assert side-effect
-})
-```
-
----
-
-## Link / Relation Testing
-
-```typescript
-import { ContainerRegistrationKeys } from "@acmekit/framework/utils"
-
-it("should create and query a cross-module link", async () => {
-  const remoteLink = container.resolve(ContainerRegistrationKeys.LINK)
-  const query = container.resolve(ContainerRegistrationKeys.QUERY)
-
-  const blogService = container.resolve(BLOG_MODULE)
-  const [post] = await blogService.createBlogPosts([{ title: "Linked Post" }])
-  const [category] = await blogService.createBlogCategories([{ name: "Tech" }])
-
-  await remoteLink.create([{
-    blogModuleService: { blog_post_id: post.id },
-    blogCategoryModuleService: { blog_category_id: category.id },
-  }])
-
-  const { data: [linkedPost] } = await query.graph({
-    entity: "blog_post",
-    fields: ["id", "title", "category.*"],
-    filters: { id: post.id },
-  })
-  expect(linkedPost.category.name).toBe("Tech")
-})
-```
-
----
-
 ## What to Test
 
 **Plugin loading:**
 - Modules resolve from container
-- Plugin options accessible via `plugin.resolveOptions(container)`
 - Auto-discovered resources loaded (subscribers, workflows, jobs)
 
 **Module services:**
 - Create (single + batch), list (with filters), listAndCount, retrieve, update, softDelete/restore
 - Custom service methods
-- Validation (required fields → `rejects.toThrow()`, not found → check error.message)
-- Related entities (create parent → child, retrieve with `{ relations: [...] }`)
+- Required field validation → `rejects.toThrow()`
+- Not found → `.catch((e: any) => e)` + `error.message` check
 
 **Workflows:**
-- Happy path + correct result
-- `throwOnError: false` + `errors` array inspection
-- `inputSchema` rejection with specific error messages
-- Compensation on failure (verify side-effects rolled back)
-- `when()` branches (verify skipped/executed paths)
-- `parallelize()` results (verify both branches complete)
-- Hook handlers (`workflow.hooks.hookName(handler)`)
+- Happy path + correct result via `workflow(container).run({ input })`
+- `throwOnError: false` + `errors[0].error.message` for invalid input
+- Step compensation on failure (verify side-effects rolled back)
+
+**Subscribers:**
+- Import handler directly, call with `{ event: { data, name }, container }`
+- Verify side-effects after handler call
 
-**Events:**
-- Spy on `MockEventBusService.prototype.emit`
-- Access events via `eventBusSpy.mock.calls[0][0]`
+**Jobs:**
+- Import function directly, call with `container`
+- Verify mutations (records created/deleted/updated)
+- Handle no-op case (empty result set)
 
-**Links:**
-- `remoteLink.create()` + `query.graph()` with related fields
+**HTTP routes (with `http: true`):**
+- Success responses with correct shape
+- Delete responses: `{ id, object: "resource", deleted: true }`
+- Validation errors (400 via `.catch((e: any) => e)`)
+- Auth: 401 without JWT, 400 without client API key
 
-**HTTP routes:**
-- Cannot be tested in plugin tests — mount in host app for HTTP testing
+**Events (container mode):**
+- Spy on `MockEventBusService.prototype.emit` (prototype, not instance)
+- Access events via `eventBusSpy.mock.calls[0][0]` (array of event objects)
 
 ---
 
 ## Rules
 
+### MANDATORY
+
+- **Unified runner only** — `integrationTestRunner` with `mode`, never deprecated names
+- **Container-only tests have NO `api` fixture** — use `container.resolve()` for service access
+- **HTTP tests require `http: true`** — and full auth setup in `beforeEach`
+- **Always use `pluginPath: process.cwd()`** — never hardcode paths
+- **JWT from config** — use `generateJwtToken` from `@acmekit/framework/utils` with `config.projectConfig.http.jwtSecret`
+- **Client API key** — use `ApiKeyType.CLIENT` and `CLIENT_API_KEY_HEADER`. NEVER `"publishable"` or `"x-publishable-api-key"`
+
 ### Assertions
 
 - Use `.toEqual()` for exact matches
 - Use `expect.objectContaining()` with `expect.any(String)` for IDs and timestamps
-- Use `expect.arrayContaining()` for list assertions
-- Use `expect.not.arrayContaining()` for negative list assertions
 - **Only standard Jest matchers** — NEVER `expect.toBeOneOf()`, `expect.toSatisfy()`
 - For nullable fields: `expect(value === null || typeof value === "string").toBe(true)`
 
 ### Error Testing
 
-- `.catch((e) => e)` + `error.message` check — preferred for specific message assertions
-- `.rejects.toThrow()` — when only checking that it throws
-- `try/catch` + `error.type` check — when checking AcmeKitError type
+- `.catch((e: any) => e)` + `error.message` check — for service errors with specific messages
+- `.rejects.toThrow()` — when only checking service errors throw (NOT workflows)
 - For workflow errors: `{ errors } = await workflow.run({ throwOnError: false })`, check `errors[0].error.message`
-
-### Structure
-
-- Use realistic test data ("Launch Announcement", "Quarterly Report") not "test", "foo"
-- One assertion per test when possible
-- Always check both success AND error cases
-- For update tests: create → update → verify
-- For delete tests: create → delete → verify not found
-- Runners handle DB setup/teardown — no manual cleanup needed
+- NEVER use `.rejects.toThrow()` on workflows — always fails (plain objects, not Error instances)
 
 ### Imports & Style
 
 - **Only import what you use** — remove unused imports
-- Resolve plugin services via module constant: `container.resolve(BLOG_MODULE)` where BLOG_MODULE matches the string in `Module()`
-- Resolve core services via `Modules.*` constants: `container.resolve(Modules.AUTH)` — NEVER string literals like `"auth"`
-- Always use `pluginPath: process.cwd()`
-- NEVER use `api.get()` / `api.post()` — plugin tests have no HTTP server
+- Resolve plugin services via module constant: `container.resolve(GREETING_MODULE)`
+- Resolve core services via `Modules.*` constants: `container.resolve(Modules.AUTH)`
+- Use realistic test data ("Launch Announcement", "Quarterly Report") not "test", "foo"
+- Pass body directly: `api.post(url, body, headers)` — NOT `{ body: {...} }`
+- Runners handle DB setup/teardown — no manual cleanup needed
 - Spy on `MockEventBusService.prototype` — not an instance
-- `waitSubscribersExecution` promise BEFORE triggering event
 - `jest.restoreAllMocks()` in `afterEach` when spying
-- Direct workflow execution: `workflow(container).run({ input })` — always pass container
-- Use `throwOnError: false` to inspect workflow errors without throwing
-- For JWT tokens: use `generateJwtToken` from `@acmekit/framework/utils` — NEVER `jsonwebtoken` directly
-- For client API keys: use `ApiKeyType.CLIENT` and `CLIENT_API_KEY_HEADER` — NEVER `"publishable"` or `"x-publishable-api-key"`
+- NEVER use JSDoc blocks or type casts in test files