@appsemble/cli 0.27.10 → 0.27.12

package/lib/app.test.js

@@ -1,11 +1,12 @@
-import { authenticate } from '@appsemble/node-utils';
+import { authenticate, readFixture, resolveFixture } from '@appsemble/node-utils';
 import { authorizeClientCredentials, createServer, createTestUser, models, setArgv, useTestDatabase, } from '@appsemble/server';
+import { ISODateTimePattern } from '@appsemble/utils';
 import { setTestApp } from 'axios-test-instance';
 import { hash } from 'bcrypt';
 import { afterAll, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest';
-import { patchApp } from './app.js';
+import { patchApp, publishApp, updateApp } from './app.js';
 import { initAxios } from './initAxios.js';
-const { App, Organization, OrganizationMember } = models;
+const { App, AppBlockStyle, AppCollection, AppCollectionApp, AppMessages, AppOAuth2Secret, AppSamlSecret, AppScreenshot, AppServiceSecret, AppVariable, Asset, BlockVersion, Organization, OrganizationMember, Resource, } = models;
 const argv = { host: 'http://localhost', secret: 'test', aesSecret: 'testSecret' };
 let user;
 let organization;
@@ -15,6 +16,7 @@ async function authorizeCLI(scopes) {
     const { id, secret } = OAuth2AuthorizationCode;
     await OAuth2AuthorizationCode.update({ secret: await hash(secret, 10) });
     await authenticate(testApp.defaults.baseURL, scopes, `${id}:${secret}`);
+    return `${id}:${secret}`;
 }
 useTestDatabase(import.meta);
 beforeAll(() => {
@@ -37,10 +39,1467 @@ beforeEach(async () => {
         UserId: user.id,
         role: 'Owner',
     });
+    await Organization.create({ id: 'appsemble', name: 'Appsemble' });
+    await BlockVersion.create({
+        name: 'test',
+        OrganizationId: 'appsemble',
+        version: '0.0.0',
+        parameters: {
+            type: 'object',
+            properties: {
+                foo: {
+                    type: 'number',
+                },
+            },
+        },
+    });
 });
 afterAll(() => {
     vi.useRealTimers();
 });
+describe('publishApp', () => {
+    it('should publish app', async () => {
+        vi.useRealTimers();
+        const clientCredentials = await authorizeCLI('apps:write resources:write');
+        await publishApp({
+            path: resolveFixture('apps/test'),
+            organization: organization.id,
+            remote: testApp.defaults.baseURL,
+            clientCredentials,
+            // Required defaults
+            visibility: 'unlisted',
+            iconBackground: '#ffffff',
+        });
+        vi.useFakeTimers();
+        const app = await App.findOne();
+        expect(app.toJSON()).toMatchInlineSnapshot({
+            $created: expect.stringMatching(ISODateTimePattern),
+            $updated: expect.stringMatching(ISODateTimePattern),
+            iconUrl: expect.any(String),
+        }, `
+      {
+        "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "OrganizationId": "testorganization",
+        "OrganizationName": undefined,
+        "controllerCode": null,
+        "controllerImplementations": null,
+        "coreStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "definition": {
+          "defaultPage": "Test Page",
+          "name": "Test App",
+          "pages": [
+            {
+              "blocks": [
+                {
+                  "type": "test",
+                  "version": "0.0.0",
+                },
+              ],
+              "name": "Test Page",
+            },
+          ],
+          "resources": {
+            "test": {
+              "schema": {
+                "additionalProperties": false,
+                "properties": {
+                  "test": {
+                    "format": "binary",
+                    "type": "string",
+                  },
+                },
+                "type": "object",
+              },
+            },
+          },
+        },
+        "demoMode": false,
+        "domain": null,
+        "emailName": null,
+        "enableSelfRegistration": true,
+        "enableUnsecuredServiceSecrets": false,
+        "googleAnalyticsID": null,
+        "hasClonableAssets": undefined,
+        "hasClonableResources": undefined,
+        "hasIcon": true,
+        "hasMaskableIcon": true,
+        "iconBackground": "#ffffff",
+        "iconUrl": Any<String>,
+        "id": 1,
+        "locked": "unlocked",
+        "messages": undefined,
+        "path": "test-app",
+        "rating": undefined,
+        "readmeUrl": undefined,
+        "screenshotUrls": undefined,
+        "sentryDsn": null,
+        "sentryEnvironment": null,
+        "sharedStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "showAppDefinition": true,
+        "showAppsembleLogin": false,
+        "showAppsembleOAuth2Login": true,
+        "visibility": "unlisted",
+        "yaml": "name: Test App
+      defaultPage: Test Page
+      resources:
+        test:
+          schema:
+            additionalProperties: false
+            type: object
+            properties:
+              test:
+                type: string
+                format: binary
+      pages:
+        - name: Test Page
+          blocks:
+            - type: test
+              version: 0.0.0
+      ",
+      }
+    `);
+        expect(app.icon).toStrictEqual(await readFixture('apps/test/icon.png'));
+        expect(app.maskableIcon).toStrictEqual(await readFixture('apps/test/maskable-icon.png'));
+        const appBlockStyle = await AppBlockStyle.findOne();
+        expect(appBlockStyle.style).toBe(`.tux {
+  color: rgb(0 0 0);
+}`);
+        const appScreenshot = await AppScreenshot.findOne();
+        expect(appScreenshot.screenshot).toStrictEqual(await readFixture('apps/test/screenshots/test_en-us.png'));
+        const appMessages = await AppMessages.findAll({ order: [['language', 'DESC']] });
+        expect(appMessages.map(({ language, messages }) => [language, messages])).toStrictEqual([
+            ['nl', JSON.parse(String(await readFixture('apps/test/i18n/nl.json')))],
+            ['en', JSON.parse(String(await readFixture('apps/test/i18n/en.json')))],
+        ]);
+        const resource = await Resource.findAll();
+        expect(resource).toStrictEqual([]);
+        const asset = await Asset.findAll();
+        expect(asset).toStrictEqual([]);
+    });
+    it('should publish app with resources and assets', async () => {
+        vi.useRealTimers();
+        const clientCredentials = await authorizeCLI('apps:write resources:write');
+        await publishApp({
+            path: resolveFixture('apps/test'),
+            organization: organization.id,
+            remote: testApp.defaults.baseURL,
+            clientCredentials,
+            // Required defaults
+            visibility: 'unlisted',
+            iconBackground: '#ffffff',
+            // Additional
+            resources: true,
+            assets: true,
+        });
+        vi.useFakeTimers();
+        const app = await App.findOne();
+        expect(app.toJSON()).toMatchInlineSnapshot({
+            $created: expect.stringMatching(ISODateTimePattern),
+            $updated: expect.stringMatching(ISODateTimePattern),
+            iconUrl: expect.any(String),
+        }, `
+      {
+        "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "OrganizationId": "testorganization",
+        "OrganizationName": undefined,
+        "controllerCode": null,
+        "controllerImplementations": null,
+        "coreStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "definition": {
+          "defaultPage": "Test Page",
+          "name": "Test App",
+          "pages": [
+            {
+              "blocks": [
+                {
+                  "type": "test",
+                  "version": "0.0.0",
+                },
+              ],
+              "name": "Test Page",
+            },
+          ],
+          "resources": {
+            "test": {
+              "schema": {
+                "additionalProperties": false,
+                "properties": {
+                  "test": {
+                    "format": "binary",
+                    "type": "string",
+                  },
+                },
+                "type": "object",
+              },
+            },
+          },
+        },
+        "demoMode": false,
+        "domain": null,
+        "emailName": null,
+        "enableSelfRegistration": true,
+        "enableUnsecuredServiceSecrets": false,
+        "googleAnalyticsID": null,
+        "hasClonableAssets": undefined,
+        "hasClonableResources": undefined,
+        "hasIcon": true,
+        "hasMaskableIcon": true,
+        "iconBackground": "#ffffff",
+        "iconUrl": Any<String>,
+        "id": 1,
+        "locked": "unlocked",
+        "messages": undefined,
+        "path": "test-app",
+        "rating": undefined,
+        "readmeUrl": undefined,
+        "screenshotUrls": undefined,
+        "sentryDsn": null,
+        "sentryEnvironment": null,
+        "sharedStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "showAppDefinition": true,
+        "showAppsembleLogin": false,
+        "showAppsembleOAuth2Login": true,
+        "visibility": "unlisted",
+        "yaml": "name: Test App
+      defaultPage: Test Page
+      resources:
+        test:
+          schema:
+            additionalProperties: false
+            type: object
+            properties:
+              test:
+                type: string
+                format: binary
+      pages:
+        - name: Test Page
+          blocks:
+            - type: test
+              version: 0.0.0
+      ",
+      }
+    `);
+        expect(app.icon).toStrictEqual(await readFixture('apps/test/icon.png'));
+        expect(app.maskableIcon).toStrictEqual(await readFixture('apps/test/maskable-icon.png'));
+        const appBlockStyle = await AppBlockStyle.findOne();
+        expect(appBlockStyle.style).toBe(`.tux {
+  color: rgb(0 0 0);
+}`);
+        const appScreenshot = await AppScreenshot.findOne();
+        expect(appScreenshot.screenshot).toStrictEqual(await readFixture('apps/test/screenshots/test_en-us.png'));
+        const appMessages = await AppMessages.findAll({ order: [['language', 'DESC']] });
+        expect(appMessages.map(({ language, messages }) => [language, messages])).toStrictEqual([
+            ['nl', JSON.parse(String(await readFixture('apps/test/i18n/nl.json')))],
+            ['en', JSON.parse(String(await readFixture('apps/test/i18n/en.json')))],
+        ]);
+        const resources = await Resource.findAll();
+        expect(resources.map((r) => r.toJSON())).toMatchInlineSnapshot([
+            {
+                $created: expect.stringMatching(ISODateTimePattern),
+                $updated: expect.stringMatching(ISODateTimePattern),
+            },
+        ], `
+      [
+        {
+          "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "id": 1,
+          "test": "tux",
+        },
+      ]
+    `);
+        const assets = await Asset.findAll();
+        expect(assets.map((a) => a.data)).toStrictEqual([
+            await readFixture('apps/test/assets/tux.png'),
+        ]);
+    });
+    it('should publish app with runtime config', async () => {
+        await AppCollection.create({
+            name: 'test',
+            expertName: 'Expert',
+            expertProfileImage: Buffer.alloc(0),
+            expertProfileImageMimeType: 'image/png',
+            headerImage: Buffer.alloc(0),
+            headerImageMimeType: 'image/png',
+            OrganizationId: organization.id,
+            visibility: 'public',
+        });
+        vi.useRealTimers();
+        const clientCredentials = await authorizeCLI('apps:write resources:write');
+        await publishApp({
+            path: resolveFixture('apps/test'),
+            organization: organization.id,
+            remote: testApp.defaults.baseURL,
+            clientCredentials,
+            // Required defaults
+            visibility: 'unlisted',
+            iconBackground: '#ffffff',
+            // Define context
+            context: 'test',
+        });
+        vi.useFakeTimers();
+        const app = await App.findOne();
+        expect(app.toJSON()).toMatchInlineSnapshot({
+            $created: expect.stringMatching(ISODateTimePattern),
+            $updated: expect.stringMatching(ISODateTimePattern),
+            iconUrl: expect.any(String),
+        }, `
+      {
+        "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "OrganizationId": "testorganization",
+        "OrganizationName": undefined,
+        "controllerCode": null,
+        "controllerImplementations": null,
+        "coreStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "definition": {
+          "defaultPage": "Test Page",
+          "name": "Test App",
+          "pages": [
+            {
+              "blocks": [
+                {
+                  "type": "test",
+                  "version": "0.0.0",
+                },
+              ],
+              "name": "Test Page",
+            },
+          ],
+          "resources": {
+            "test": {
+              "schema": {
+                "additionalProperties": false,
+                "properties": {
+                  "test": {
+                    "format": "binary",
+                    "type": "string",
+                  },
+                },
+                "type": "object",
+              },
+            },
+          },
+        },
+        "demoMode": true,
+        "domain": null,
+        "emailName": null,
+        "enableSelfRegistration": true,
+        "enableUnsecuredServiceSecrets": false,
+        "googleAnalyticsID": "test",
+        "hasClonableAssets": undefined,
+        "hasClonableResources": undefined,
+        "hasIcon": true,
+        "hasMaskableIcon": true,
+        "iconBackground": "#000000",
+        "iconUrl": Any<String>,
+        "id": 1,
+        "locked": "unlocked",
+        "messages": undefined,
+        "path": "test-app",
+        "rating": undefined,
+        "readmeUrl": undefined,
+        "screenshotUrls": undefined,
+        "sentryDsn": "https://public@sentry.example.com/1",
+        "sentryEnvironment": "test",
+        "sharedStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "showAppDefinition": true,
+        "showAppsembleLogin": false,
+        "showAppsembleOAuth2Login": true,
+        "visibility": "public",
+        "yaml": "name: Test App
+      defaultPage: Test Page
+      resources:
+        test:
+          schema:
+            additionalProperties: false
+            type: object
+            properties:
+              test:
+                type: string
+                format: binary
+      pages:
+        - name: Test Page
+          blocks:
+            - type: test
+              version: 0.0.0
+      ",
+      }
+    `);
+        expect(app.icon).toStrictEqual(await readFixture('apps/test/icon.png'));
+        expect(app.maskableIcon).toStrictEqual(await readFixture('apps/test/maskable-icon.png'));
+        const appBlockStyle = await AppBlockStyle.findOne();
+        expect(appBlockStyle.style).toBe(`.tux {
+  color: rgb(0 0 0);
+}`);
+        const appScreenshot = await AppScreenshot.findOne();
+        expect(appScreenshot.screenshot).toStrictEqual(await readFixture('apps/test/screenshots/test_en-us.png'));
+        const appMessages = await AppMessages.findAll({ order: [['language', 'DESC']] });
+        expect(appMessages.map(({ language, messages }) => [language, messages])).toStrictEqual([
+            ['nl', JSON.parse(String(await readFixture('apps/test/i18n/nl.json')))],
+            ['en', JSON.parse(String(await readFixture('apps/test/i18n/en.json')))],
+        ]);
+        const resources = await Resource.findAll();
+        expect(resources.map((r) => r.toJSON())).toMatchInlineSnapshot([
+            {
+                $created: expect.stringMatching(ISODateTimePattern),
+                $updated: expect.stringMatching(ISODateTimePattern),
+            },
+            {
+                $created: expect.stringMatching(ISODateTimePattern),
+                $updated: expect.stringMatching(ISODateTimePattern),
+            },
+        ], `
+      [
+        {
+          "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "id": 1,
+          "test": "tux",
+        },
+        {
+          "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "$ephemeral": true,
+          "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "id": 2,
+          "test": "tux",
+        },
+      ]
+    `);
+        const assets = await Asset.findAll();
+        expect(assets.map((a) => a.data)).toStrictEqual([
+            await readFixture('apps/test/assets/tux.png'),
+            await readFixture('apps/test/assets/tux.png'),
+        ]);
+        const appCollectionApp = await AppCollectionApp.findOne();
+        expect(appCollectionApp.AppId).toBe(1);
+        expect(appCollectionApp.AppCollectionId).toBe(1);
+    });
+    it('should publish app with app variant patches applied', async () => {
+        vi.useRealTimers();
+        const clientCredentials = await authorizeCLI('apps:write resources:write');
+        await publishApp({
+            path: resolveFixture('apps/test'),
+            organization: organization.id,
+            remote: testApp.defaults.baseURL,
+            clientCredentials,
+            // Required defaults
+            visibility: 'unlisted',
+            iconBackground: '#ffffff',
+            // Define app variant
+            variant: 'tux',
+            resources: true,
+            assets: true,
+        });
+        vi.useFakeTimers();
+        const app = await App.findOne();
+        expect(app.toJSON()).toMatchInlineSnapshot({
+            $created: expect.stringMatching(ISODateTimePattern),
+            $updated: expect.stringMatching(ISODateTimePattern),
+            iconUrl: expect.any(String),
+        }, `
+      {
+        "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "OrganizationId": "testorganization",
+        "OrganizationName": undefined,
+        "controllerCode": null,
+        "controllerImplementations": null,
+        "coreStyle": ".tux{color:rgb(1 2 3)}",
+        "definition": {
+          "defaultPage": "Test Page",
+          "name": "Test App",
+          "pages": [
+            {
+              "blocks": [
+                {
+                  "type": "test",
+                  "version": "0.0.0",
+                },
+              ],
+              "name": "Test Page",
+            },
+          ],
+          "resources": {
+            "test": {
+              "schema": {
+                "additionalProperties": false,
+                "properties": {
+                  "tux": {
+                    "format": "binary",
+                    "type": "string",
+                  },
+                },
+                "type": "object",
+              },
+            },
+          },
+        },
+        "demoMode": false,
+        "domain": null,
+        "emailName": null,
+        "enableSelfRegistration": true,
+        "enableUnsecuredServiceSecrets": false,
+        "googleAnalyticsID": null,
+        "hasClonableAssets": undefined,
+        "hasClonableResources": undefined,
+        "hasIcon": true,
+        "hasMaskableIcon": true,
+        "iconBackground": "#ffffff",
+        "iconUrl": Any<String>,
+        "id": 1,
+        "locked": "unlocked",
+        "messages": undefined,
+        "path": "test-app",
+        "rating": undefined,
+        "readmeUrl": undefined,
+        "screenshotUrls": undefined,
+        "sentryDsn": null,
+        "sentryEnvironment": null,
+        "sharedStyle": ".tux{color:rgb(1 2 3)}",
+        "showAppDefinition": true,
+        "showAppsembleLogin": false,
+        "showAppsembleOAuth2Login": true,
+        "visibility": "unlisted",
+        "yaml": "name: Test App
+      defaultPage: Test Page
+      resources:
+        test:
+          schema:
+            additionalProperties: false
+            type: object
+            properties:
+              tux:
+                type: string
+                format: binary
+      pages:
+        - name: Test Page
+          blocks:
+            - type: test
+              version: 0.0.0
+      ",
+      }
+    `);
+        expect(app.icon).toStrictEqual(await readFixture('apps/test/variants/tux/icon.png'));
+        expect(app.maskableIcon).toStrictEqual(await readFixture('apps/test/variants/tux/maskable-icon.png'));
+        const appBlockStyle = await AppBlockStyle.findOne();
+        expect(appBlockStyle.style).toBe('.tux{color:rgb(1 2 3)}');
+        const appScreenshot = await AppScreenshot.findOne();
+        expect(appScreenshot.screenshot).toStrictEqual(await readFixture('apps/test/variants/tux/screenshots/tux.png'));
+        const appMessages = await AppMessages.findAll({ order: [['language', 'DESC']] });
+        const messages = JSON.parse(String(await readFixture('apps/test/variants/tux/patches/messages.json')));
+        expect(appMessages.map(({ language, messages: msgs }) => [language, msgs])).toStrictEqual([
+            ['nl', messages.nl],
+            ['en', messages.en],
+        ]);
+        const resources = await Resource.findAll();
+        expect(resources.map((r) => r.toJSON())).toMatchInlineSnapshot([
+            {
+                $created: expect.stringMatching(ISODateTimePattern),
+                $updated: expect.stringMatching(ISODateTimePattern),
+            },
+        ], `
+      [
+        {
+          "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "id": 1,
+          "tux": "small-tux",
+        },
+      ]
+    `);
+        const assets = await Asset.findAll();
+        expect(assets.map((a) => a.data)).toStrictEqual([
+            await readFixture('apps/test/variants/tux/assets/small-tux.png'),
+        ]);
+    });
+    it('should publish app variables and secrets', async () => {
+        vi.useRealTimers();
+        const clientCredentials = await authorizeCLI('apps:write resources:write');
+        process.env.TEST_VARIABLE_1 = 'test-variable-1';
+        process.env.TEST_VARIABLE_2 = 'test-variable-2';
+        process.env.TEST_SECRET = 'test-secret';
+        process.env.TEST_SERVICE_URL_PATTERNS = 'http://localhost:1234';
+        process.env.TEST_SERVICE_IDENTIFIER = 'Authorization';
+        process.env.TEST_SERVICE_SECRET = 'secret';
+        process.env.TEST_SAML_IDP_CERTIFICATE = 'certificate';
+        process.env.TEST_SAML_ENTITY_ID = 'http://localhost:1234';
+        process.env.TEST_SAML_SSO_URL = 'http://localhost:1234';
+        process.env.TEST_OAUTH2_AUTHORIZATION_URL = 'http://localhost:1234';
+        process.env.TEST_OAUTH2_TOKEN_URL = 'http://localhost:1234';
+        process.env.TEST_OAUTH2_USER_INFO_URL = 'http://localhost:1234';
+        process.env.TEST_OAUTH2_CLIENT_ID = 'id';
+        process.env.TEST_OAUTH2_CLIENT_SECRET = 'secret';
+        process.env.TEST_SCIM_TOKEN = 'token';
+        process.env.TEST_SSL_KEY = 'key';
+        process.env.TEST_SSL_CERTIFICATE = 'certificate';
+        await publishApp({
+            path: resolveFixture('apps/test'),
+            organization: organization.id,
+            remote: testApp.defaults.baseURL,
+            clientCredentials,
+            visibility: 'unlisted',
+            iconBackground: '#ffffff',
+        });
+        vi.useFakeTimers();
+        const app = await App.findOne({
+            attributes: ['scimEnabled', 'scimToken', 'sslKey', 'sslCertificate'],
+            where: {
+                id: 1,
+            },
+        });
+        expect({
+            scimEnabled: app.scimEnabled,
+            scimToken: app.scimToken,
+            sslKey: app.sslKey,
+            sslCertificate: app.sslCertificate,
+        }).toStrictEqual({
+            scimEnabled: true,
+            scimToken: expect.any(Buffer),
+            sslKey: 'key',
+            sslCertificate: 'certificate',
+        });
+        const appVariables = await AppVariable.findAll({
+            attributes: ['name', 'value'],
+            where: {
+                AppId: 1,
+            },
+        });
+        expect(appVariables[0].toJSON()).toStrictEqual({
+            name: 'test-variable-inline',
+            value: 'inline',
+        });
+        expect(appVariables[1].toJSON()).toStrictEqual({
+            name: 'test-variable',
+            value: 'test-variable-1.test-variable-2',
+        });
+        const appServiceSecret = await AppServiceSecret.findOne({
+            attributes: ['name', 'authenticationMethod', 'urlPatterns', 'identifier', 'secret'],
+            where: {
+                AppId: 1,
+            },
+        });
+        expect(appServiceSecret.toJSON()).toStrictEqual({
+            name: 'test-service-secret',
+            authenticationMethod: 'custom-header',
+            urlPatterns: 'http://localhost:1234',
+            identifier: 'Authorization',
+            secret: expect.any(Buffer),
+        });
+        const appSamlSecret = await AppSamlSecret.findOne({
+            attributes: [
+                'name',
+                'icon',
+                'nameAttribute',
+                'emailAttribute',
+                'idpCertificate',
+                'entityId',
+                'ssoUrl',
+            ],
+            where: {
+                AppId: 1,
+            },
+        });
+        expect(appSamlSecret.toJSON()).toStrictEqual({
+            emailAttribute: 'email',
+            entityId: 'http://localhost:1234',
+            icon: 'redhat',
+            id: 1,
+            idpCertificate: 'certificate',
+            name: 'test-saml-secret',
+            nameAttribute: 'name',
+            ssoUrl: 'http://localhost:1234',
+            spCertificate: expect.any(String),
+        });
+        const appOauth2Secret = await AppOAuth2Secret.findOne({
+            attributes: [
+                'name',
+                'icon',
+                'scope',
+                'remapper',
+                'authorizationUrl',
+                'tokenUrl',
+                'userInfoUrl',
+                'clientId',
+                'clientSecret',
+            ],
+            where: {
+                AppId: 1,
+            },
+        });
+        expect({
+            authorizationUrl: appOauth2Secret.authorizationUrl,
+            clientId: appOauth2Secret.clientId,
+            clientSecret: appOauth2Secret.clientSecret,
+            icon: appOauth2Secret.icon,
+            name: appOauth2Secret.name,
+            remapper: appOauth2Secret.remapper,
+            scope: appOauth2Secret.scope,
+            tokenUrl: appOauth2Secret.tokenUrl,
+            userInfoUrl: appOauth2Secret.userInfoUrl,
+        }).toStrictEqual({
+            authorizationUrl: 'http://localhost:1234',
+            clientId: 'id',
+            clientSecret: 'secret',
+            icon: 'redhat',
+            name: 'test-oauth2-secret',
+            remapper: [{ prop: 'email' }],
+            scope: 'email openid profile',
+            tokenUrl: 'http://localhost:1234',
+            userInfoUrl: 'http://localhost:1234',
+        });
+    });
+});
+describe('updateApp', () => {
+    let app;
+    beforeEach(async () => {
+        app = await App.create({
+            path: 'test-app',
+            definition: { name: 'Test App', defaultPage: 'Test Page' },
+            vapidPublicKey: 'a',
+            vapidPrivateKey: 'b',
+            visibility: 'public',
+            OrganizationId: organization.id,
+        });
+    });
+    it('should update app', async () => {
+        vi.useRealTimers();
+        const clientCredentials = await authorizeCLI('apps:write resources:write');
+        await updateApp({
+            id: app.id,
+            path: resolveFixture('apps/test'),
+            remote: testApp.defaults.baseURL,
+            clientCredentials,
+            // Required defaults
+            visibility: 'unlisted',
+            iconBackground: '#ffffff',
+            force: false,
+        });
+        vi.useFakeTimers();
+        await app.reload();
+        expect(app.toJSON()).toMatchInlineSnapshot({
+            $created: expect.stringMatching(ISODateTimePattern),
+            $updated: expect.stringMatching(ISODateTimePattern),
+            iconUrl: expect.any(String),
+        }, `
+      {
+        "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "OrganizationId": "testorganization",
+        "OrganizationName": undefined,
+        "controllerCode": null,
+        "controllerImplementations": null,
+        "coreStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "definition": {
+          "defaultPage": "Test Page",
+          "name": "Test App",
+          "pages": [
+            {
+              "blocks": [
+                {
+                  "type": "test",
+                  "version": "0.0.0",
+                },
+              ],
+              "name": "Test Page",
+            },
+          ],
+          "resources": {
+            "test": {
+              "schema": {
+                "additionalProperties": false,
+                "properties": {
+                  "test": {
+                    "format": "binary",
+                    "type": "string",
+                  },
+                },
+                "type": "object",
+              },
+            },
+          },
+        },
+        "demoMode": false,
+        "domain": null,
+        "emailName": null,
+        "enableSelfRegistration": true,
+        "enableUnsecuredServiceSecrets": false,
+        "googleAnalyticsID": null,
+        "hasClonableAssets": undefined,
+        "hasClonableResources": undefined,
+        "hasIcon": true,
+        "hasMaskableIcon": true,
+        "iconBackground": "#ffffff",
+        "iconUrl": Any<String>,
+        "id": 1,
+        "locked": "unlocked",
+        "messages": undefined,
+        "path": "test-app",
+        "rating": undefined,
+        "readmeUrl": undefined,
+        "screenshotUrls": undefined,
+        "sentryDsn": null,
+        "sentryEnvironment": null,
+        "sharedStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "showAppDefinition": false,
+        "showAppsembleLogin": false,
+        "showAppsembleOAuth2Login": true,
+        "visibility": "unlisted",
+        "yaml": "name: Test App
+      defaultPage: Test Page
+      resources:
+        test:
+          schema:
+            additionalProperties: false
+            type: object
+            properties:
+              test:
+                type: string
+                format: binary
+      pages:
+        - name: Test Page
+          blocks:
+            - type: test
+              version: 0.0.0
+      ",
+      }
+    `);
+        expect(app.icon).toStrictEqual(await readFixture('apps/test/icon.png'));
+        expect(app.maskableIcon).toStrictEqual(await readFixture('apps/test/maskable-icon.png'));
+        const appBlockStyle = await AppBlockStyle.findOne();
+        expect(appBlockStyle.style).toBe(`.tux {
+  color: rgb(0 0 0);
+}`);
+        const appScreenshot = await AppScreenshot.findOne();
+        expect(appScreenshot.screenshot).toStrictEqual(await readFixture('apps/test/screenshots/test_en-us.png'));
+        const appMessages = await AppMessages.findAll({ order: [['language', 'DESC']] });
+        expect(appMessages.map(({ language, messages }) => [language, messages])).toStrictEqual([
+            ['nl', JSON.parse(String(await readFixture('apps/test/i18n/nl.json')))],
+            ['en', JSON.parse(String(await readFixture('apps/test/i18n/en.json')))],
+        ]);
+        const resource = await Resource.findAll();
+        expect(resource).toStrictEqual([]);
+        const asset = await Asset.findAll();
+        expect(asset).toStrictEqual([]);
+    });
+    it('should update app with resources and assets', async () => {
+        vi.useRealTimers();
+        const clientCredentials = await authorizeCLI('apps:write resources:write');
+        await updateApp({
+            id: app.id,
+            path: resolveFixture('apps/test'),
+            remote: testApp.defaults.baseURL,
+            clientCredentials,
+            // Required defaults
+            visibility: 'unlisted',
+            iconBackground: '#ffffff',
+            force: false,
+            // Additional
+            resources: true,
+            assets: true,
+        });
+        vi.useFakeTimers();
+        await app.reload();
+        expect(app.toJSON()).toMatchInlineSnapshot({
+            $created: expect.stringMatching(ISODateTimePattern),
+            $updated: expect.stringMatching(ISODateTimePattern),
+            iconUrl: expect.any(String),
+        }, `
+      {
+        "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "OrganizationId": "testorganization",
+        "OrganizationName": undefined,
+        "controllerCode": null,
+        "controllerImplementations": null,
+        "coreStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "definition": {
+          "defaultPage": "Test Page",
+          "name": "Test App",
+          "pages": [
+            {
+              "blocks": [
+                {
+                  "type": "test",
+                  "version": "0.0.0",
+                },
+              ],
+              "name": "Test Page",
+            },
+          ],
+          "resources": {
+            "test": {
+              "schema": {
+                "additionalProperties": false,
+                "properties": {
+                  "test": {
+                    "format": "binary",
+                    "type": "string",
+                  },
+                },
+                "type": "object",
+              },
+            },
+          },
+        },
+        "demoMode": false,
+        "domain": null,
+        "emailName": null,
+        "enableSelfRegistration": true,
+        "enableUnsecuredServiceSecrets": false,
+        "googleAnalyticsID": null,
+        "hasClonableAssets": undefined,
+        "hasClonableResources": undefined,
+        "hasIcon": true,
+        "hasMaskableIcon": true,
+        "iconBackground": "#ffffff",
+        "iconUrl": Any<String>,
+        "id": 1,
+        "locked": "unlocked",
+        "messages": undefined,
+        "path": "test-app",
+        "rating": undefined,
+        "readmeUrl": undefined,
+        "screenshotUrls": undefined,
+        "sentryDsn": null,
+        "sentryEnvironment": null,
+        "sharedStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "showAppDefinition": false,
+        "showAppsembleLogin": false,
+        "showAppsembleOAuth2Login": true,
+        "visibility": "unlisted",
+        "yaml": "name: Test App
+      defaultPage: Test Page
+      resources:
+        test:
+          schema:
+            additionalProperties: false
+            type: object
+            properties:
+              test:
+                type: string
+                format: binary
+      pages:
+        - name: Test Page
+          blocks:
+            - type: test
+              version: 0.0.0
+      ",
+      }
+    `);
+        expect(app.icon).toStrictEqual(await readFixture('apps/test/icon.png'));
+        expect(app.maskableIcon).toStrictEqual(await readFixture('apps/test/maskable-icon.png'));
+        const appBlockStyle = await AppBlockStyle.findOne();
+        expect(appBlockStyle.style).toBe(`.tux {
+  color: rgb(0 0 0);
+}`);
+        const appScreenshot = await AppScreenshot.findOne();
+        expect(appScreenshot.screenshot).toStrictEqual(await readFixture('apps/test/screenshots/test_en-us.png'));
+        const appMessages = await AppMessages.findAll({ order: [['language', 'DESC']] });
+        expect(appMessages.map(({ language, messages }) => [language, messages])).toStrictEqual([
+            ['nl', JSON.parse(String(await readFixture('apps/test/i18n/nl.json')))],
+            ['en', JSON.parse(String(await readFixture('apps/test/i18n/en.json')))],
+        ]);
+        const resources = await Resource.findAll();
+        expect(resources.map((r) => r.toJSON())).toMatchInlineSnapshot([
+            {
+                $created: expect.stringMatching(ISODateTimePattern),
+                $updated: expect.stringMatching(ISODateTimePattern),
+            },
+        ], `
+      [
+        {
+          "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "id": 1,
+          "test": "tux",
+        },
+      ]
+    `);
+        const assets = await Asset.findAll();
+        expect(assets.map((a) => a.data)).toStrictEqual([
+            await readFixture('apps/test/assets/tux.png'),
+        ]);
+    });
+    it('should update app with runtime config', async () => {
+        await AppCollection.create({
+            name: 'test',
+            expertName: 'Expert',
+            expertProfileImage: Buffer.alloc(0),
+            expertProfileImageMimeType: 'image/png',
+            headerImage: Buffer.alloc(0),
+            headerImageMimeType: 'image/png',
+            OrganizationId: organization.id,
+            visibility: 'public',
+        });
+        vi.useRealTimers();
+        const clientCredentials = await authorizeCLI('apps:write resources:write');
+        await updateApp({
+            path: resolveFixture('apps/test'),
+            id: app.id,
+            remote: testApp.defaults.baseURL,
+            clientCredentials,
+            // Required defaults
+            visibility: 'unlisted',
+            iconBackground: '#ffffff',
+            force: false,
+            // Define context
+            context: 'test',
+        });
+        vi.useFakeTimers();
+        await app.reload();
+        expect(app.toJSON()).toMatchInlineSnapshot({
+            $created: expect.stringMatching(ISODateTimePattern),
+            $updated: expect.stringMatching(ISODateTimePattern),
+            iconUrl: expect.any(String),
+        }, `
+      {
+        "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "OrganizationId": "testorganization",
+        "OrganizationName": undefined,
+        "controllerCode": null,
+        "controllerImplementations": null,
+        "coreStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "definition": {
+          "defaultPage": "Test Page",
+          "name": "Test App",
+          "pages": [
+            {
+              "blocks": [
+                {
+                  "type": "test",
+                  "version": "0.0.0",
+                },
+              ],
+              "name": "Test Page",
+            },
+          ],
+          "resources": {
+            "test": {
+              "schema": {
+                "additionalProperties": false,
+                "properties": {
+                  "test": {
+                    "format": "binary",
+                    "type": "string",
+                  },
+                },
+                "type": "object",
+              },
+            },
+          },
+        },
+        "demoMode": true,
+        "domain": null,
+        "emailName": null,
+        "enableSelfRegistration": true,
+        "enableUnsecuredServiceSecrets": false,
+        "googleAnalyticsID": "test",
+        "hasClonableAssets": undefined,
+        "hasClonableResources": undefined,
+        "hasIcon": true,
+        "hasMaskableIcon": true,
+        "iconBackground": "#000000",
+        "iconUrl": Any<String>,
+        "id": 1,
+        "locked": "studioLock",
+        "messages": undefined,
+        "path": "test-app",
+        "rating": undefined,
+        "readmeUrl": undefined,
+        "screenshotUrls": undefined,
+        "sentryDsn": "https://public@sentry.example.com/1",
+        "sentryEnvironment": "test",
+        "sharedStyle": ".tux {
+        color: rgb(0 0 0);
+      }
+      ",
+        "showAppDefinition": false,
+        "showAppsembleLogin": false,
+        "showAppsembleOAuth2Login": true,
+        "visibility": "public",
+        "yaml": "name: Test App
+      defaultPage: Test Page
+      resources:
+        test:
+          schema:
+            additionalProperties: false
+            type: object
+            properties:
+              test:
+                type: string
+                format: binary
+      pages:
+        - name: Test Page
+          blocks:
+            - type: test
+              version: 0.0.0
+      ",
+      }
+    `);
+        expect(app.icon).toStrictEqual(await readFixture('apps/test/icon.png'));
+        expect(app.maskableIcon).toStrictEqual(await readFixture('apps/test/maskable-icon.png'));
+        const appBlockStyle = await AppBlockStyle.findOne();
+        expect(appBlockStyle.style).toBe(`.tux {
+  color: rgb(0 0 0);
+}`);
+        const appScreenshot = await AppScreenshot.findOne();
+        expect(appScreenshot.screenshot).toStrictEqual(await readFixture('apps/test/screenshots/test_en-us.png'));
+        const appMessages = await AppMessages.findAll({ order: [['language', 'DESC']] });
+        expect(appMessages.map(({ language, messages }) => [language, messages])).toStrictEqual([
+            ['nl', JSON.parse(String(await readFixture('apps/test/i18n/nl.json')))],
+            ['en', JSON.parse(String(await readFixture('apps/test/i18n/en.json')))],
+        ]);
+        const resources = await Resource.findAll();
+        expect(resources.map((r) => r.toJSON())).toMatchInlineSnapshot([
+            {
+                $created: expect.stringMatching(ISODateTimePattern),
+                $updated: expect.stringMatching(ISODateTimePattern),
+            },
+            {
+                $created: expect.stringMatching(ISODateTimePattern),
+                $updated: expect.stringMatching(ISODateTimePattern),
+            },
+        ], `
+      [
+        {
+          "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "id": 1,
+          "test": "tux",
+        },
+        {
+          "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "$ephemeral": true,
+          "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "id": 2,
+          "test": "tux",
+        },
+      ]
+    `);
+        const assets = await Asset.findAll();
+        expect(assets.map((a) => a.data)).toStrictEqual([
+            await readFixture('apps/test/assets/tux.png'),
+            await readFixture('apps/test/assets/tux.png'),
+        ]);
+        // TODO: not yet implemented
+        // const appCollectionApp = await AppCollectionApp.findOne();
+        // expect(appCollectionApp.AppId).toBe(1);
+        // expect(appCollectionApp.AppCollectionId).toBe(1);
+    });
+    it('should update app with app variant patches applied', async () => {
+        vi.useRealTimers();
+        const clientCredentials = await authorizeCLI('apps:write resources:write');
+        await updateApp({
+            path: resolveFixture('apps/test'),
+            id: app.id,
+            remote: testApp.defaults.baseURL,
+            clientCredentials,
+            // Required defaults
+            visibility: 'unlisted',
+            iconBackground: '#ffffff',
+            force: false,
+            // Define app variant
+            variant: 'tux',
+            resources: true,
+            assets: true,
+        });
+        vi.useFakeTimers();
+        await app.reload();
+        expect(app.toJSON()).toMatchInlineSnapshot({
+            $created: expect.stringMatching(ISODateTimePattern),
+            $updated: expect.stringMatching(ISODateTimePattern),
+            iconUrl: expect.any(String),
+        }, `
+      {
+        "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+        "OrganizationId": "testorganization",
+        "OrganizationName": undefined,
+        "controllerCode": null,
+        "controllerImplementations": null,
+        "coreStyle": ".tux{color:rgb(1 2 3)}",
+        "definition": {
+          "defaultPage": "Test Page",
+          "name": "Test App",
+          "pages": [
+            {
+              "blocks": [
+                {
+                  "type": "test",
+                  "version": "0.0.0",
+                },
+              ],
+              "name": "Test Page",
+            },
+          ],
+          "resources": {
+            "test": {
+              "schema": {
+                "additionalProperties": false,
+                "properties": {
+                  "tux": {
+                    "format": "binary",
+                    "type": "string",
+                  },
+                },
+                "type": "object",
+              },
+            },
+          },
+        },
+        "demoMode": false,
+        "domain": null,
+        "emailName": null,
+        "enableSelfRegistration": true,
+        "enableUnsecuredServiceSecrets": false,
+        "googleAnalyticsID": null,
+        "hasClonableAssets": undefined,
+        "hasClonableResources": undefined,
+        "hasIcon": true,
+        "hasMaskableIcon": true,
+        "iconBackground": "#ffffff",
+        "iconUrl": Any<String>,
+        "id": 1,
+        "locked": "unlocked",
+        "messages": undefined,
+        "path": "test-app",
+        "rating": undefined,
+        "readmeUrl": undefined,
+        "screenshotUrls": undefined,
+        "sentryDsn": null,
+        "sentryEnvironment": null,
+        "sharedStyle": ".tux{color:rgb(1 2 3)}",
+        "showAppDefinition": false,
+        "showAppsembleLogin": false,
+        "showAppsembleOAuth2Login": true,
+        "visibility": "unlisted",
+        "yaml": "name: Test App
+      defaultPage: Test Page
+      resources:
+        test:
+          schema:
+            additionalProperties: false
+            type: object
+            properties:
+              tux:
+                type: string
+                format: binary
+      pages:
+        - name: Test Page
+          blocks:
+            - type: test
+              version: 0.0.0
+      ",
+      }
+    `);
+        expect(app.icon).toStrictEqual(await readFixture('apps/test/variants/tux/icon.png'));
+        expect(app.maskableIcon).toStrictEqual(await readFixture('apps/test/variants/tux/maskable-icon.png'));
+        const appBlockStyle = await AppBlockStyle.findOne();
+        expect(appBlockStyle.style).toBe('.tux{color:rgb(1 2 3)}');
+        const appScreenshot = await AppScreenshot.findOne();
+        expect(appScreenshot.screenshot).toStrictEqual(await readFixture('apps/test/variants/tux/screenshots/tux.png'));
+        const appMessages = await AppMessages.findAll({ order: [['language', 'DESC']] });
+        const messages = JSON.parse(String(await readFixture('apps/test/variants/tux/patches/messages.json')));
+        expect(appMessages.map(({ language, messages: msgs }) => [language, msgs])).toStrictEqual([
+            ['nl', messages.nl],
+            ['en', messages.en],
+        ]);
+        const resources = await Resource.findAll();
+        expect(resources.map((r) => r.toJSON())).toMatchInlineSnapshot([
+            {
+                $created: expect.stringMatching(ISODateTimePattern),
+                $updated: expect.stringMatching(ISODateTimePattern),
+            },
+        ], `
+      [
+        {
+          "$created": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "$updated": StringMatching /\\\\d\\{4\\}\\(\\.\\\\d\\{2\\}\\)\\{2\\}\\(\\\\s\\|T\\)\\(\\\\d\\{2\\}\\.\\)\\{2\\}\\\\d\\{2\\}/,
+          "id": 1,
+          "tux": "small-tux",
+        },
+      ]
+    `);
+        const assets = await Asset.findAll();
+        expect(assets.map((a) => a.data)).toStrictEqual([
+            await readFixture('apps/test/variants/tux/assets/small-tux.png'),
+        ]);
+    });
+    it('should update app variables and secrets', async () => {
+        vi.useRealTimers();
+        const clientCredentials = await authorizeCLI('apps:write resources:write');
+        process.env.TEST_VARIABLE_1 = 'test-variable-1';
+        process.env.TEST_VARIABLE_2 = 'test-variable-2';
+        process.env.TEST_SECRET = 'test-secret';
+        process.env.TEST_SERVICE_URL_PATTERNS = 'http://localhost:1234';
+        process.env.TEST_SERVICE_IDENTIFIER = 'Authorization';
+        process.env.TEST_SERVICE_SECRET = 'secret';
+        process.env.TEST_SAML_IDP_CERTIFICATE = 'certificate';
+        process.env.TEST_SAML_ENTITY_ID = 'http://localhost:1234';
+        process.env.TEST_SAML_SSO_URL = 'http://localhost:1234';
+        process.env.TEST_OAUTH2_AUTHORIZATION_URL = 'http://localhost:1234';
+        process.env.TEST_OAUTH2_TOKEN_URL = 'http://localhost:1234';
+        process.env.TEST_OAUTH2_USER_INFO_URL = 'http://localhost:1234';
+        process.env.TEST_OAUTH2_CLIENT_ID = 'id';
+        process.env.TEST_OAUTH2_CLIENT_SECRET = 'secret';
+        process.env.TEST_SCIM_TOKEN = 'token';
+        process.env.TEST_SSL_KEY = 'key';
+        process.env.TEST_SSL_CERTIFICATE = 'certificate';
+        await updateApp({
+            id: 1,
+            path: resolveFixture('apps/test'),
+            remote: testApp.defaults.baseURL,
+            clientCredentials,
+            visibility: 'unlisted',
+            iconBackground: '#ffffff',
+            force: true,
+        });
+        vi.useFakeTimers();
+        const updatedApp = await App.findOne({
+            attributes: ['scimEnabled', 'scimToken', 'sslKey', 'sslCertificate'],
+            where: {
+                id: 1,
+            },
+        });
+        expect({
+            scimEnabled: updatedApp.scimEnabled,
+            scimToken: updatedApp.scimToken,
+            sslKey: updatedApp.sslKey,
+            sslCertificate: updatedApp.sslCertificate,
+        }).toStrictEqual({
+            scimEnabled: true,
+            scimToken: expect.any(Buffer),
+            sslKey: 'key',
+            sslCertificate: 'certificate',
+        });
+        const appVariables = await AppVariable.findAll({
+            attributes: ['name', 'value'],
+            where: {
+                AppId: 1,
+            },
+        });
+        expect(appVariables[0].toJSON()).toStrictEqual({
+            name: 'test-variable-inline',
+            value: 'inline',
+        });
+        expect(appVariables[1].toJSON()).toStrictEqual({
+            name: 'test-variable',
+            value: 'test-variable-1.test-variable-2',
+        });
+        const appServiceSecret = await AppServiceSecret.findOne({
+            attributes: ['name', 'authenticationMethod', 'urlPatterns', 'identifier', 'secret'],
+            where: {
+                AppId: 1,
+            },
+        });
+        expect(appServiceSecret.toJSON()).toStrictEqual({
+            name: 'test-service-secret',
+            authenticationMethod: 'custom-header',
+            urlPatterns: 'http://localhost:1234',
+            identifier: 'Authorization',
+            secret: expect.any(Buffer),
+        });
+        const appSamlSecret = await AppSamlSecret.findOne({
+            attributes: [
+                'name',
+                'icon',
+                'nameAttribute',
+                'emailAttribute',
+                'idpCertificate',
+                'entityId',
+                'ssoUrl',
+            ],
+            where: {
+                AppId: 1,
+            },
+        });
+        expect(appSamlSecret.toJSON()).toStrictEqual({
+            emailAttribute: 'email',
+            entityId: 'http://localhost:1234',
+            icon: 'redhat',
+            id: 1,
+            idpCertificate: 'certificate',
+            name: 'test-saml-secret',
+            nameAttribute: 'name',
+            ssoUrl: 'http://localhost:1234',
+            spCertificate: expect.any(String),
+        });
+        const appOauth2Secret = await AppOAuth2Secret.findOne({
+            attributes: [
+                'name',
+                'icon',
+                'scope',
+                'remapper',
+                'authorizationUrl',
+                'tokenUrl',
+                'userInfoUrl',
+                'clientId',
+                'clientSecret',
+            ],
+            where: {
+                AppId: 1,
+            },
+        });
+        expect({
+            authorizationUrl: appOauth2Secret.authorizationUrl,
+            clientId: appOauth2Secret.clientId,
+            clientSecret: appOauth2Secret.clientSecret,
+            icon: appOauth2Secret.icon,
+            name: appOauth2Secret.name,
+            remapper: appOauth2Secret.remapper,
+            scope: appOauth2Secret.scope,
+            tokenUrl: appOauth2Secret.tokenUrl,
+            userInfoUrl: appOauth2Secret.userInfoUrl,
+        }).toStrictEqual({
+            authorizationUrl: 'http://localhost:1234',
+            clientId: 'id',
+            clientSecret: 'secret',
+            icon: 'redhat',
+            name: 'test-oauth2-secret',
+            remapper: [{ prop: 'email' }],
+            scope: 'email openid profile',
+            tokenUrl: 'http://localhost:1234',
+            userInfoUrl: 'http://localhost:1234',
+        });
+    });
+});
 describe('patchApp', () => {
     it('should apply patches to app', async () => {
         const patches = {