@aeolus-fleet/core 0.26.1 → 0.27.1

package/dist/testing/container-images.js

@@ -0,0 +1,18 @@
+/**
+ * The images Testcontainers pulls for the tests, from mirrors outside Docker
+ * Hub: CI runners share IPs, so anonymous Docker Hub pulls hit its rate limit
+ * at random (#437). Both mirrors serve the same image as Docker Hub and need
+ * no sign-in. ECR Public throttles anonymous pulls per IP too (#464), so CI
+ * keeps the images in the Actions cache; it lists them by running this file
+ * (see .github/actions/test-images).
+ */
+/** Postgres 16, the oldest version the architecture supports, from Docker's official images on Amazon ECR Public. */
+export const POSTGRES_IMAGE = 'public.ecr.aws/docker/library/postgres:16-alpine';
+/** Ryuk, the reaper Testcontainers starts to remove containers a run leaves behind, from Testcontainers' own GitHub registry. */
+export const REAPER_IMAGE = 'ghcr.io/testcontainers/ryuk:0.14.0';
+/** Every image the tests start, one per line when this file runs, for CI to cache. */
+export const TEST_IMAGES = [POSTGRES_IMAGE, REAPER_IMAGE];
+if (import.meta.main) {
+    console.log(TEST_IMAGES.join('\n'));
+}
+//# sourceMappingURL=container-images.js.map

package/dist/testing/container-images.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-images.js","sourceRoot":"","sources":["../../src/testing/container-images.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qHAAqH;AACrH,MAAM,CAAC,MAAM,cAAc,GAAG,kDAAkD,CAAC;AAEjF,iIAAiI;AACjI,MAAM,CAAC,MAAM,YAAY,GAAG,oCAAoC,CAAC;AAEjE,sFAAsF;AACtF,MAAM,CAAC,MAAM,WAAW,GAAsB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;AAE7E,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/testing/database.d.ts

@@ -0,0 +1,14 @@
+/** Creates an empty database in the shared Postgres container and returns its URL. */
+export declare function createEmptyDatabase(): Promise<string>;
+/**
+ * Creates a database with the committed migrations applied, as `prisma
+ * migrate deploy` leaves it: a copy of the template the global setup migrated.
+ */
+export declare function createMigratedDatabase(): Promise<string>;
+/** Creates a copy of the named template database in the shared Postgres container and returns its URL. */
+export declare function createCopyOf(template: string): Promise<string>;
+/**
+ * Runs a SQL file against the given database in one round trip, as
+ * `prisma db execute --file` does, without starting a Prisma CLI per file.
+ */
+export declare function executeSqlFile(databaseUrl: string, file: string): Promise<void>;

package/dist/testing/database.js

@@ -0,0 +1,48 @@
+import { randomBytes } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { inject } from 'vitest';
+import { createPrismaClient } from '../adapters/prisma/client.js';
+import { databaseUrlOf, MIGRATED_TEMPLATE } from './migrated-template.js';
+/** Creates an empty database in the shared Postgres container and returns its URL. */
+export function createEmptyDatabase() {
+    return createDatabase('');
+}
+/**
+ * Creates a database with the committed migrations applied, as `prisma
+ * migrate deploy` leaves it: a copy of the template the global setup migrated.
+ */
+export function createMigratedDatabase() {
+    return createCopyOf(MIGRATED_TEMPLATE);
+}
+/** Creates a copy of the named template database in the shared Postgres container and returns its URL. */
+export function createCopyOf(template) {
+    return createDatabase(` TEMPLATE ${template}`);
+}
+/**
+ * Runs a SQL file against the given database in one round trip, as
+ * `prisma db execute --file` does, without starting a Prisma CLI per file.
+ */
+export async function executeSqlFile(databaseUrl, file) {
+    const client = createPrismaClient(databaseUrl);
+    try {
+        // The file is a committed migration, never outside input.
+        await client.$executeRawUnsafe(await readFile(file, 'utf8'));
+    }
+    finally {
+        await client.$disconnect();
+    }
+}
+async function createDatabase(template) {
+    const adminUrl = inject('postgresUrl');
+    const name = `aeolus_test_${randomBytes(6).toString('hex')}`;
+    const admin = createPrismaClient(adminUrl);
+    try {
+        // The name is generated above and the template is a constant, never outside input.
+        await admin.$executeRawUnsafe(`CREATE DATABASE ${name}${template}`);
+    }
+    finally {
+        await admin.$disconnect();
+    }
+    return databaseUrlOf(adminUrl, name);
+}
+//# sourceMappingURL=database.js.map

package/dist/testing/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../src/testing/database.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE1E,sFAAsF;AACtF,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,YAAY,CAAC,iBAAiB,CAAC,CAAC;AACzC,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,cAAc,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAmB,EAAE,IAAY;IACpE,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,0DAA0D;QAC1D,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,eAAe,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,mFAAmF;QACnF,MAAM,KAAK,CAAC,iBAAiB,CAAC,mBAAmB,IAAI,GAAG,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/dist/testing/fleet.d.ts

@@ -0,0 +1,13 @@
+import type { FleetInitialised } from '../domain/registry/initialise-fleet.js';
+import type { Caller } from '../domain/shared/caller.js';
+/** The fleet's public URL in tests: where ships reach it. */
+export declare const FLEET_URL = "https://fleet.example.com";
+/** The operator's login in tests: what fleet init asks for, and sign-in takes. */
+export declare const OPERATOR: {
+    email: string;
+    password: string;
+};
+/** argo as the caller, holding every scope, as its secret or console session makes it. */
+export declare function operatorCaller(fleet: FleetInitialised): Caller;
+/** The ship secret a use case issued; a commission that comes again issues none. */
+export declare function secretOf(secret: string | null): string;

package/dist/testing/fleet.js

@@ -0,0 +1,17 @@
+import { SCOPES } from '@aeolus-fleet/common';
+/** The fleet's public URL in tests: where ships reach it. */
+export const FLEET_URL = 'https://fleet.example.com';
+/** The operator's login in tests: what fleet init asks for, and sign-in takes. */
+export const OPERATOR = { email: 'operator@example.com', password: 'correct horse battery staple' };
+/** argo as the caller, holding every scope, as its secret or console session makes it. */
+export function operatorCaller(fleet) {
+    return { shipId: fleet.operatorShipId, fleetId: fleet.fleetId, kind: 'operator', scopes: [...SCOPES] };
+}
+/** The ship secret a use case issued; a commission that comes again issues none. */
+export function secretOf(secret) {
+    if (secret === null) {
+        throw new Error('No ship secret was issued');
+    }
+    return secret;
+}
+//# sourceMappingURL=fleet.js.map

package/dist/testing/fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../src/testing/fleet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAK9C,6DAA6D;AAC7D,MAAM,CAAC,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAErD,kFAAkF;AAClF,MAAM,CAAC,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,8BAA8B,EAAE,CAAC;AAEpG,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,KAAuB;IACpD,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;AACzG,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,QAAQ,CAAC,MAAqB;IAC5C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/testing/index.d.ts

@@ -0,0 +1,12 @@
+export { argon2idPasswordHasher } from '../adapters/crypto/passwords.js';
+export { createPrismaClient, type PrismaClient } from '../adapters/prisma/client.js';
+export { SHIP_PROTOCOL } from '../adapters/trpc/ship-protocol.js';
+export { createApp } from '../app.js';
+export type { Caller } from '../domain/shared/caller.js';
+export { createUseCases, type UseCases } from '../wiring.js';
+export { createCopyOf, createEmptyDatabase, createMigratedDatabase, executeSqlFile } from './database.js';
+export { FLEET_URL, OPERATOR, operatorCaller, secretOf } from './fleet.js';
+export { newKey } from './keys.js';
+export { migrateWhileAnotherHoldsTheLock } from './migrate-lock.js';
+export { databaseUrlOf } from './migrated-template.js';
+export { refusalOf, unwrap } from './result.js';

package/dist/testing/index.js

@@ -0,0 +1,12 @@
+export { argon2idPasswordHasher } from '../adapters/crypto/passwords.js';
+export { createPrismaClient } from '../adapters/prisma/client.js';
+export { SHIP_PROTOCOL } from '../adapters/trpc/ship-protocol.js';
+export { createApp } from '../app.js';
+export { createUseCases } from '../wiring.js';
+export { createCopyOf, createEmptyDatabase, createMigratedDatabase, executeSqlFile } from './database.js';
+export { FLEET_URL, OPERATOR, operatorCaller, secretOf } from './fleet.js';
+export { newKey } from './keys.js';
+export { migrateWhileAnotherHoldsTheLock } from './migrate-lock.js';
+export { databaseUrlOf } from './migrated-template.js';
+export { refusalOf, unwrap } from './result.js';
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAqB,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAiB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC1G,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC"}

package/dist/testing/keys.d.ts

@@ -0,0 +1 @@
+export declare function newKey(): string;

package/dist/testing/keys.js

@@ -0,0 +1,7 @@
+/** A new idempotency key on every call, for tests whose requests must never repeat one by chance. */
+let next = 0;
+export function newKey() {
+    next += 1;
+    return `key-${String(next)}`;
+}
+//# sourceMappingURL=keys.js.map

package/dist/testing/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/testing/keys.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,IAAI,IAAI,GAAG,CAAC,CAAC;AAEb,MAAM,UAAU,MAAM;IACpB,IAAI,IAAI,CAAC,CAAC;IACV,OAAO,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/B,CAAC"}

package/dist/testing/migrate-lock.d.ts

@@ -0,0 +1,12 @@
+export interface WaitedMigrate<T> {
+    outcome: T;
+    releasedAt: number;
+    finishedAt: number;
+}
+/**
+ * Holds Prisma Migrate's lock on the database as a long migrate in progress
+ * does: starts `migrate`, holds the lock until it has waited for it longer
+ * than Prisma's own wait, then lets go. Says when it let go and when the
+ * migrate finished.
+ */
+export declare function migrateWhileAnotherHoldsTheLock<T>(databaseUrl: string, migrate: () => Promise<T>): Promise<WaitedMigrate<T>>;

package/dist/testing/migrate-lock.js

@@ -0,0 +1,51 @@
+import { createPrismaClient } from '../adapters/prisma/client.js';
+/** The advisory lock Prisma Migrate holds on a database while it migrates. */
+const PRISMA_MIGRATE_LOCK = 72_707_369;
+/** Longer than Prisma Migrate itself waits for its lock (10 seconds). */
+const LONG_MIGRATION_MS = 12_000;
+/** How often to look whether the migrate waits for the lock. */
+const POLL_MS = 100;
+/**
+ * Holds Prisma Migrate's lock on the database as a long migrate in progress
+ * does: starts `migrate`, holds the lock until it has waited for it longer
+ * than Prisma's own wait, then lets go. Says when it let go and when the
+ * migrate finished.
+ */
+export async function migrateWhileAnotherHoldsTheLock(databaseUrl, migrate) {
+    const database = createPrismaClient(databaseUrl);
+    let migrating;
+    try {
+        await database.$transaction(async (inProgress) => {
+            await inProgress.$executeRaw `SELECT pg_advisory_xact_lock(${PRISMA_MIGRATE_LOCK})`;
+            migrating = migrate().then((outcome) => ({ outcome, finishedAt: Date.now() }));
+            // Awaited below, once the lock is let go; a failure surfaces there.
+            migrating.catch(() => undefined);
+            await waitForLockWaiter(inProgress);
+            await new Promise((resolve) => setTimeout(resolve, LONG_MIGRATION_MS));
+        }, { timeout: 60_000 });
+    }
+    finally {
+        await database.$disconnect();
+    }
+    const releasedAt = Date.now();
+    if (migrating === undefined) {
+        throw new Error('the migrate never started');
+    }
+    return { ...(await migrating), releasedAt };
+}
+/** Resolves once another session waits for Prisma Migrate's lock, which this one holds. */
+async function waitForLockWaiter(holder) {
+    for (;;) {
+        const [row] = await holder.$queryRaw `
+      SELECT EXISTS (
+        SELECT 1 FROM pg_locks
+        WHERE locktype = 'advisory' AND objid = ${PRISMA_MIGRATE_LOCK} AND NOT granted
+          AND database = (SELECT oid FROM pg_database WHERE datname = current_database())
+      ) AS "isWaiting"`;
+        if (row?.isWaiting === true) {
+            return;
+        }
+        await new Promise((resolve) => setTimeout(resolve, POLL_MS));
+    }
+}
+//# sourceMappingURL=migrate-lock.js.map

package/dist/testing/migrate-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-lock.js","sourceRoot":"","sources":["../../src/testing/migrate-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAW,MAAM,8BAA8B,CAAC;AAE3E,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,gEAAgE;AAChE,MAAM,OAAO,GAAG,GAAG,CAAC;AAQpB;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAI,WAAmB,EAAE,OAAyB;IACrG,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,SAAkE,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,YAAY,CACzB,KAAK,EAAE,UAAU,EAAE,EAAE;YACnB,MAAM,UAAU,CAAC,WAAW,CAAA,gCAAgC,mBAAmB,GAAG,CAAC;YACnF,SAAS,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/E,oEAAoE;YACpE,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjC,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACpC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACzE,CAAC,EACD,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,MAAM,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC;AAC9C,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,iBAAiB,CAAC,MAAU;IACzC,SAAS,CAAC;QACR,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,MAAM,CAAC,SAAS,CAA0B;;;kDAGhB,mBAAmB;;uBAE9C,CAAC;QACpB,IAAI,GAAG,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC"}

package/dist/testing/migrated-template.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The database the global setup migrates once per Postgres container; every
+ * migrated database a test asks for is a copy of it. Migrating each test
+ * file's database itself started a Prisma CLI over every migration in every
+ * worker at once, and under a full run that load took the tests' own time
+ * (#499).
+ */
+export declare const MIGRATED_TEMPLATE = "aeolus_test_migrated_template";
+/** The URL of the named database on the server the admin URL points at. */
+export declare function databaseUrlOf(adminUrl: string, name: string): string;
+/** Creates the template with `prisma migrate deploy`, as an installation migrates. */
+export declare function createMigratedTemplate(adminUrl: string): Promise<void>;

package/dist/testing/migrated-template.js

@@ -0,0 +1,29 @@
+import { createPrismaClient } from '../adapters/prisma/client.js';
+import { prisma } from './prisma-cli.js';
+/**
+ * The database the global setup migrates once per Postgres container; every
+ * migrated database a test asks for is a copy of it. Migrating each test
+ * file's database itself started a Prisma CLI over every migration in every
+ * worker at once, and under a full run that load took the tests' own time
+ * (#499).
+ */
+export const MIGRATED_TEMPLATE = 'aeolus_test_migrated_template';
+/** The URL of the named database on the server the admin URL points at. */
+export function databaseUrlOf(adminUrl, name) {
+    const url = new URL(adminUrl);
+    url.pathname = `/${name}`;
+    return url.toString();
+}
+/** Creates the template with `prisma migrate deploy`, as an installation migrates. */
+export async function createMigratedTemplate(adminUrl) {
+    const admin = createPrismaClient(adminUrl);
+    try {
+        // The name is a constant of this file, never outside input.
+        await admin.$executeRawUnsafe(`CREATE DATABASE ${MIGRATED_TEMPLATE}`);
+    }
+    finally {
+        await admin.$disconnect();
+    }
+    await prisma(databaseUrlOf(adminUrl, MIGRATED_TEMPLATE), 'migrate', 'deploy');
+}
+//# sourceMappingURL=migrated-template.js.map

package/dist/testing/migrated-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrated-template.js","sourceRoot":"","sources":["../../src/testing/migrated-template.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AAEjE,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,IAAY;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,GAAG,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAAgB;IAC3D,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,4DAA4D;QAC5D,MAAM,KAAK,CAAC,iBAAiB,CAAC,mBAAmB,iBAAiB,EAAE,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAChF,CAAC"}

package/dist/testing/postgres-container.d.ts

@@ -0,0 +1,16 @@
+import { PostgreSqlContainer } from '@testcontainers/postgresql';
+/**
+ * Postgres for the tests, waited for by its log and its port instead of a
+ * health check. The module's own check runs every 250 ms, and on rootless
+ * Podman each run is a systemd unit of its own: a full run floods the user
+ * manager and leaves units behind (#554). It flushes nothing to disk: a commit
+ * that waits for the disk waits behind every other test's writes, and under a
+ * loaded full run Prisma Migrate's commits alone outlasted a test's time
+ * (#499). Only a crash of the host loses a commit then, and no test survives
+ * that anyway.
+ */
+export declare class TestPostgres extends PostgreSqlContainer {
+    constructor(image: string);
+    /** Drops the check the module sets on start; the image defines none of its own. */
+    protected beforeContainerCreated(): Promise<void>;
+}

package/dist/testing/postgres-container.js

@@ -0,0 +1,30 @@
+import { PostgreSqlContainer } from '@testcontainers/postgresql';
+import { Wait } from 'testcontainers';
+/**
+ * Postgres says it is ready twice: once for the server the image's entrypoint
+ * starts to initialise the database, once for the server that stays.
+ */
+const READY_LOG = /database system is ready to accept connections/;
+/**
+ * Postgres for the tests, waited for by its log and its port instead of a
+ * health check. The module's own check runs every 250 ms, and on rootless
+ * Podman each run is a systemd unit of its own: a full run floods the user
+ * manager and leaves units behind (#554). It flushes nothing to disk: a commit
+ * that waits for the disk waits behind every other test's writes, and under a
+ * loaded full run Prisma Migrate's commits alone outlasted a test's time
+ * (#499). Only a crash of the host loses a commit then, and no test survives
+ * that anyway.
+ */
+export class TestPostgres extends PostgreSqlContainer {
+    constructor(image) {
+        super(image);
+        this.withCommand(['postgres', '-c', 'fsync=off']);
+        this.withWaitStrategy(Wait.forAll([Wait.forLogMessage(READY_LOG, 2), Wait.forListeningPorts()]));
+    }
+    /** Drops the check the module sets on start; the image defines none of its own. */
+    async beforeContainerCreated() {
+        delete this.createOpts.Healthcheck;
+        await super.beforeContainerCreated?.();
+    }
+}
+//# sourceMappingURL=postgres-container.js.map

package/dist/testing/postgres-container.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-container.js","sourceRoot":"","sources":["../../src/testing/postgres-container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEtC;;;GAGG;AACH,MAAM,SAAS,GAAG,gDAAgD,CAAC;AAEnE;;;;;;;;;GASG;AACH,MAAM,OAAO,YAAa,SAAQ,mBAAmB;IACnD,YAAY,KAAa;QACvB,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC;IACnG,CAAC;IAED,mFAAmF;IAChE,KAAK,CAAC,sBAAsB;QAC7C,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QACnC,MAAM,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC;IACzC,CAAC;CACF"}

package/dist/testing/postgres-global-setup.d.ts

@@ -0,0 +1,15 @@
+import type { TestProject } from 'vitest/node';
+declare module 'vitest' {
+    interface ProvidedContext {
+        /** Admin URL of the Postgres container shared by the integration tests. */
+        postgresUrl: string;
+    }
+}
+/**
+ * Starts one Postgres for the integration project. Each test file creates its
+ * own database in it (see database.ts), so files stay isolated; a
+ * migrated one is a copy of the template migrated here, before any test runs.
+ * Testcontainers reads the reaper image from the environment when it starts
+ * the first container; a reaper image set from outside wins.
+ */
+export declare function setup(project: TestProject): Promise<() => Promise<void>>;

package/dist/testing/postgres-global-setup.js

@@ -0,0 +1,20 @@
+import { POSTGRES_IMAGE, REAPER_IMAGE } from './container-images.js';
+import { TestPostgres } from './postgres-container.js';
+import { createMigratedTemplate } from './migrated-template.js';
+/**
+ * Starts one Postgres for the integration project. Each test file creates its
+ * own database in it (see database.ts), so files stay isolated; a
+ * migrated one is a copy of the template migrated here, before any test runs.
+ * Testcontainers reads the reaper image from the environment when it starts
+ * the first container; a reaper image set from outside wins.
+ */
+export async function setup(project) {
+    process.env.RYUK_CONTAINER_IMAGE ??= REAPER_IMAGE;
+    const container = await new TestPostgres(POSTGRES_IMAGE).start();
+    await createMigratedTemplate(container.getConnectionUri());
+    project.provide('postgresUrl', container.getConnectionUri());
+    return async () => {
+        await container.stop();
+    };
+}
+//# sourceMappingURL=postgres-global-setup.js.map

package/dist/testing/postgres-global-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-global-setup.js","sourceRoot":"","sources":["../../src/testing/postgres-global-setup.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAShE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAoB;IAC9C,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,YAAY,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,IAAI,YAAY,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,CAAC;IACjE,MAAM,sBAAsB,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAE7D,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC"}

package/dist/testing/prisma-cli.d.ts

@@ -0,0 +1,5 @@
+/** Runs the Prisma CLI from the server package against the given database. */
+export declare function prisma(databaseUrl: string, ...args: string[]): Promise<{
+    stdout: string;
+    stderr: string;
+}>;

package/dist/testing/prisma-cli.js

@@ -0,0 +1,15 @@
+import { execFile } from 'node:child_process';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+import { promisify } from 'node:util';
+const run = promisify(execFile);
+const serverRoot = fileURLToPath(new URL('../..', import.meta.url));
+const prismaCli = createRequire(import.meta.url).resolve('prisma/build/index.js');
+/** Runs the Prisma CLI from the server package against the given database. */
+export function prisma(databaseUrl, ...args) {
+    return run(process.execPath, [prismaCli, ...args], {
+        cwd: serverRoot,
+        env: { ...process.env, DATABASE_URL: databaseUrl },
+    });
+}
+//# sourceMappingURL=prisma-cli.js.map

package/dist/testing/prisma-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-cli.js","sourceRoot":"","sources":["../../src/testing/prisma-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAChC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAElF,8EAA8E;AAC9E,MAAM,UAAU,MAAM,CAAC,WAAmB,EAAE,GAAG,IAAc;IAC3D,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,EAAE;QACjD,GAAG,EAAE,UAAU;QACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE;KACnD,CAAC,CAAC;AACL,CAAC"}

package/dist/testing/result.d.ts

@@ -0,0 +1,5 @@
+import type { Result } from '../domain/shared/result.js';
+/** The value of an ok result. Fails the test with the domain's refusal otherwise. */
+export declare function unwrap<T, E>(result: Result<T, E>): T;
+/** The refusal of an error result. Fails the test with the value otherwise. */
+export declare function refusalOf<T, E>(result: Result<T, E>): E;

package/dist/testing/result.js

@@ -0,0 +1,15 @@
+/** The value of an ok result. Fails the test with the domain's refusal otherwise. */
+export function unwrap(result) {
+    if (!result.isOk) {
+        throw new Error(`Expected an ok result, but the domain refused: ${JSON.stringify(result.error)}`);
+    }
+    return result.value;
+}
+/** The refusal of an error result. Fails the test with the value otherwise. */
+export function refusalOf(result) {
+    if (result.isOk) {
+        throw new Error(`Expected a refusal, but the domain answered: ${JSON.stringify(result.value)}`);
+    }
+    return result.error;
+}
+//# sourceMappingURL=result.js.map

package/dist/testing/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/testing/result.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,MAAM,UAAU,MAAM,CAAO,MAAoB;IAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,SAAS,CAAO,MAAoB;IAClD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC"}

package/dist/wiring.d.ts

@@ -29,6 +29,7 @@ import { type MarkRead } from './domain/messaging/mark-read.js';
 import type { ReceiverWakeups } from './domain/messaging/ports.js';
 import { type PushReceiveDeliveries } from './domain/messaging/push-receive-deliveries.js';
 import { type ReceiveDeliveries } from './domain/messaging/receive-deliveries.js';
+import { type ReceiveReply } from './domain/messaging/receive-reply.js';
 import { type ReplyToMessage } from './domain/messaging/reply-to-message.js';
 import { type ResendDelivery } from './domain/messaging/resend-delivery.js';
 import { type PingShip } from './domain/messaging/ping-ship.js';
@@ -38,14 +39,19 @@ import { type CommissionShip } from './domain/registry/commission-ship.js';
 import { type Deregister } from './domain/registry/deregister.js';
 import { type GetStartingPrompt } from './domain/registry/get-starting-prompt.js';
 import { type GetShip } from './domain/registry/get-ship.js';
+import { type ReadOnBehalf } from './domain/registry/read-on-behalf.js';
 import { type InitialiseFleet } from './domain/registry/initialise-fleet.js';
 import { type ListFleet } from './domain/registry/list-fleet.js';
 import { type ListFleets } from './domain/registry/list-fleets.js';
 import { type RecrewShip } from './domain/registry/recrew-ship.js';
 import { type ReleaseShip } from './domain/registry/release-ship.js';
 import { type RenameShip } from './domain/registry/rename-ship.js';
+import { type SetOwner } from './domain/registry/set-owner.js';
+import { type ConnectPlugin } from './domain/registry/connect-plugin.js';
 import { type RetireShip } from './domain/registry/retire-ship.js';
 import { type Report } from './domain/registry/report.js';
+import { type SetStatement } from './domain/registry/set-statement.js';
+import { type Discover } from './domain/registry/discover.js';
 import { type ReportTurn } from './domain/registry/report-turn.js';
 import { type RequestCrew } from './domain/registry/request-crew.js';
 import { type RemoveCrewRequest } from './domain/registry/remove-crew-request.js';
@@ -58,6 +64,8 @@ import { type ConfirmWorktreeCleared } from './domain/registry/confirm-worktree-
 import { type ReadClearRequests } from './domain/registry/read-clear-requests.js';
 import { type RequestWorktreeClear } from './domain/registry/request-worktree-clear.js';
 import { type ExplainCrewRequest } from './domain/registry/explain-crew-request.js';
+import { type DeclareScopes } from './domain/registry/declare-scopes.js';
+import { type GrantScopes } from './domain/registry/grant-scopes.js';
 import { type DefineLabel } from './domain/registry/define-label.js';
 import { type ExplainReach } from './domain/registry/explain-reach.js';
 import { type ReadReachRefusals } from './domain/registry/read-reach-refusals.js';
@@ -65,11 +73,15 @@ import { type DeclareNetworkRules } from './domain/registry/declare-network-rule
 import { type ReadDeclaredNetworkRules } from './domain/registry/read-declared-network-rules.js';
 import { type RegisterNetworkPlugin } from './domain/registry/register-network-plugin.js';
 import { type SetNetworkRules } from './domain/registry/set-network-rules.js';
+import { type ReadBuiltInRules } from './domain/registry/read-built-in-rules.js';
+import { type ReadNetworkPlugin } from './domain/registry/read-network-plugin.js';
+import { type SetBuiltInRule } from './domain/registry/set-built-in-rule.js';
 import { type UnregisterNetworkPlugin } from './domain/registry/unregister-network-plugin.js';
 import { type ChangeLabelValues } from './domain/registry/change-label-values.js';
 import { type AssignLabel } from './domain/registry/assign-label.js';
 import { type UnassignLabel } from './domain/registry/unassign-label.js';
 import { type ListLabels } from './domain/registry/list-labels.js';
+import { type ListScopes } from './domain/registry/list-scopes.js';
 import { type DeleteLabel } from './domain/registry/delete-label.js';
 import { type FindLabelValue } from './domain/registry/find-label-value.js';
 import { type ReadReportLog } from './domain/registry/report-log.js';
@@ -90,11 +102,10 @@ import { type GetInstallationFleet } from './domain/registry/get-installation-fl
 import { type ListInstallationFleets } from './domain/registry/list-installation-fleets.js';
 import { type ReadInbox } from './domain/shared/read-inbox.js';
 import { type ReadMessage } from './domain/shared/read-message.js';
+import { type ReadSentMessage } from './domain/shared/read-sent-message.js';
 import { type ReadShipWay } from './domain/shared/read-ship-way.js';
 import { type ReadNeedsAttention } from './domain/shared/read-needs-attention.js';
-import { type ReadNoShipCanTake } from './domain/shared/read-no-ship-can-take.js';
 import { type ReadHealth } from './domain/shared/read-health.js';
-import { type ReadOverdue } from './domain/shared/read-overdue.js';
 import { type ReadShipMessages } from './domain/shared/read-ship-messages.js';
 import { type ReadShipTimeline } from './domain/shared/read-ship-timeline.js';
 export interface UseCases {
@@ -106,12 +117,17 @@ export interface UseCases {
     releaseShip: ReleaseShip;
     retireShip: RetireShip;
     renameShip: RenameShip;
+    setOwner: SetOwner;
+    connectPlugin: ConnectPlugin;
     recrewShip: RecrewShip;
     listFleet: ListFleet;
     getShip: GetShip;
+    readOnBehalf: ReadOnBehalf;
     claimShip: ClaimShip;
     whoami: Whoami;
     report: Report;
+    setStatement: SetStatement;
+    discover: Discover;
     reportTurn: ReportTurn;
     requestCrew: RequestCrew;
     removeCrewRequest: RemoveCrewRequest;
@@ -125,9 +141,15 @@ export interface UseCases {
     confirmWorktreeCleared: ConfirmWorktreeCleared;
     explainCrewRequest: ExplainCrewRequest;
     defineLabel: DefineLabel;
+    declareScopes: DeclareScopes;
+    grantScopes: GrantScopes;
+    listScopes: ListScopes;
     setNetworkRules: SetNetworkRules;
     registerNetworkPlugin: RegisterNetworkPlugin;
     unregisterNetworkPlugin: UnregisterNetworkPlugin;
+    setBuiltInRule: SetBuiltInRule;
+    readBuiltInRules: ReadBuiltInRules;
+    readNetworkPlugin: ReadNetworkPlugin;
     readReachRefusals: ReadReachRefusals;
     declareNetworkRules: DeclareNetworkRules;
     readDeclaredNetworkRules: ReadDeclaredNetworkRules;
@@ -142,6 +164,7 @@ export interface UseCases {
     deregister: Deregister;
     sendMessage: SendMessage;
     receiveDeliveries: ReceiveDeliveries;
+    receiveReply: ReceiveReply;
     pushReceiveDeliveries: PushReceiveDeliveries;
     handOverDelivery: HandOverDelivery;
     reportHandled: ReportHandled;
@@ -162,10 +185,9 @@ export interface UseCases {
     readShipTimeline: ReadShipTimeline;
     readShipMessages: ReadShipMessages;
     readMessage: ReadMessage;
+    sentMessage: ReadSentMessage;
     readShipWay: ReadShipWay;
     readNeedsAttention: ReadNeedsAttention;
-    readOverdue: ReadOverdue;
-    readNoShipCanTake: ReadNoShipCanTake;
     readHealth: ReadHealth;
     readInbox: ReadInbox;
     signIn: SignIn;