@aventara/testing 1.0.0-rc.1 → 1.0.0-rc.11

package/CHANGELOG.md

@@ -1,5 +1,142 @@
 # @aventara/testing
 
+## 1.0.0-rc.11
+
+### Patch Changes
+
+- 67551ca: The protocol corpus covers rc.11's Operation Sets and cached reads. `POST /_all` rows: a mix of reads and writes answered
+  `200 A1000` with each key's own envelope, hostile keys, the streamed NDJSON answer, and the whole-request refusals
+  (`limits.maxAll`, an empty set, a bad key or member, a stale hash, `GET`). Cached-read rows run against a fourth corpus
+  ClientContract with `cache` stages, named by their query's `v`: each `for` audience's headers, the compressed `q`,
+  `ETag` and `304`, the `no-store` refusals, and the `405`s. `runAvProtocolConformance` and `AvProtocolCorpus.framework`
+  pick a `GET` row's contract by its `v`, and `fixtures/protocol-v1.json` lists the fourth contract.
+- 186bc29: The corpus Contracts' hashes and `fixtures/protocol-v1.json` move once, because every Client Contract's limits now
+  include `maxAll` and `maxAllConcurrency`.
+- Updated dependencies [6197c08]
+- Updated dependencies [e0e89c1]
+- Updated dependencies [186bc29]
+- Updated dependencies [33b5f83]
+- Updated dependencies [6d8b589]
+- Updated dependencies [11ece49]
+- Updated dependencies [92fd093]
+- Updated dependencies [e5e98e6]
+- Updated dependencies [a05d970]
+  - @aventara/core@1.0.0-rc.11
+
+## 1.0.0-rc.10
+
+### Patch Changes
+
+- 04bb39a: `engines.node` is now `^22.23.4 || >=24.22.1`, the Node security releases of 2026-10-20 (CVE-2026-105481,
+  CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-106072, CVE-2026-106073, CVE-2026-106074,
+  CVE-2026-111497). The bins refuse an older Node in one sentence naming that range.
+- 587dd01: The protocol corpus covers `POST /_access/can`: its answers and refusals, driven against a third corpus Client
+  Contract built with `access`. `AvProtocolCorpus.framework(hash)` serves that Contract for its hash, and
+  `fixtures/protocol-v1.json` carries it beside the other two.
+- Updated dependencies [587dd01]
+- Updated dependencies [d7e7369]
+- Updated dependencies [7ee547b]
+- Updated dependencies [f52c499]
+- Updated dependencies [2907484]
+- Updated dependencies [a6bbdf0]
+- Updated dependencies [3e26549]
+- Updated dependencies [a6bbdf0]
+- Updated dependencies [6f3f6f6]
+- Updated dependencies [04bb39a]
+- Updated dependencies [3fb3333]
+- Updated dependencies [827ccb6]
+- Updated dependencies [7f5abc3]
+- Updated dependencies [88263a1]
+- Updated dependencies [10341d5]
+- Updated dependencies [8129844]
+- Updated dependencies [88263a1]
+- Updated dependencies [3020b5c]
+- Updated dependencies [88263a1]
+- Updated dependencies [88263a1]
+  - @aventara/core@1.0.0-rc.10
+
+## 1.0.0-rc.9
+
+### Patch Changes
+
+- Updated dependencies [205a379]
+- Updated dependencies [a0bb05e]
+- Updated dependencies [86ab319]
+- Updated dependencies [fdf52e6]
+  - @aventara/core@1.0.0-rc.9
+
+## 1.0.0-rc.8
+
+1.0.0-rc.5, rc.6 and rc.7 were tagged but never published; 1.0.0-rc.8 contains everything listed under them and the changes below.
+
+### Patch Changes
+
+- Updated dependencies [1c8e4ee]
+  - @aventara/core@1.0.0-rc.8
+
+## 1.0.0-rc.7
+
+1.0.0-rc.5 and 1.0.0-rc.6 were tagged but never published; 1.0.0-rc.7 contains everything listed under them and the changes below.
+
+### Patch Changes
+
+- Updated dependencies [f917c1c]
+  - @aventara/core@1.0.0-rc.7
+
+## 1.0.0-rc.6
+
+1.0.0-rc.5 was tagged but never published. 1.0.0-rc.6 contains everything listed under 1.0.0-rc.5 and the fix below.
+
+### Patch Changes
+
+- Updated dependencies [1cf72e0]
+  - @aventara/core@1.0.0-rc.6
+
+## 1.0.0-rc.5
+
+### Patch Changes
+
+- Updated dependencies [4795ff1]
+- Updated dependencies [9e178ca]
+  - @aventara/core@1.0.0-rc.5
+
+## 1.0.0-rc.4
+
+### Patch Changes
+
+- Updated dependencies [e3d03a7]
+- Updated dependencies [d10639a]
+- Updated dependencies [f67e68c]
+- Updated dependencies [708556c]
+- Updated dependencies [3a0dfca]
+- Updated dependencies [99169d2]
+- Updated dependencies [0fd2608]
+- Updated dependencies [154e440]
+- Updated dependencies [2fcffdb]
+  - @aventara/core@1.0.0-rc.4
+
+## 1.0.0-rc.3
+
+### Patch Changes
+
+- Updated dependencies [b38034d]
+- Updated dependencies [b38034d]
+- Updated dependencies [b38034d]
+- Updated dependencies [b38034d]
+- Updated dependencies [b38034d]
+- Updated dependencies [b38034d]
+  - @aventara/core@1.0.0-rc.3
+
+## 1.0.0-rc.2
+
+### Patch Changes
+
+- Updated dependencies [9366e16]
+- Updated dependencies [9366e16]
+- Updated dependencies [9366e16]
+- Updated dependencies [9366e16]
+  - @aventara/core@1.0.0-rc.2
+
 ## 1.0.0-rc.1
 
 ### Patch Changes
@@ -465,7 +602,7 @@
   `framework.transaction`, `framework.executeTransaction` and `POST /_transactions` alike. A single call is unchanged
   (`["arguments", …]`). If your code reads `issue.path` from a transaction's answer, drop the `"operations", i, "args"`
   prefix to get the path inside that step's arguments. `@aventara/testing`'s protocol corpus row "a client-hidden
-  field — /_transactions" and `fixtures/protocol-v1.json` carry the new path.
+  field — /\_transactions" and `fixtures/protocol-v1.json` carry the new path.
 - 032f792: **Behaviour changes, transactions:** an error about a transaction step itself — rather than its arguments — now
   names the step too, so every path in a transaction's answer is a path through the request you sent: an unknown or
   hidden Resource is at `["operations", i, "resource"]`, a fingerprint that does not match at

package/README.md

@@ -20,7 +20,7 @@ It depends on `@aventara/core` only.
 npm install --save-dev @aventara/testing@rc
 ```
 
-Node `^22.18.0 || >=24.2.0`. ES modules.
+Node `^22.23.4 || >=24.22.1`. ES modules.
 
 ## Serving the corpus through your own stack
 
@@ -36,8 +36,10 @@ const framework = await AvProtocolCorpus.framework();
 ```
 
 - `framework(contractHash?)`: a fresh corpus `AvFramework`, backed by an in-memory adapter whose answers every row
-  states. Pass a row's `Aventara-Contract-Hash` to get the contract that row targets: a few rows target a second
-  contract without transactions, and every other hash (a stale one included) gets the main contract.
+  states. Pass a row's `Aventara-Contract-Hash` to get the contract that row targets (a cached read's `GET` sends no
+  such header: pass its query's `v`). A few rows target a contract without transactions, the `/_access/can` rows one
+  with `access`, and the cached-read rows one with `cache` stages; every other hash (a stale one included) gets the
+  main contract.
 - `entrypoint`: where the corpus is mounted; every row's `path` is relative to it.
 - `clientContractHash`: the main ClientContract's hash. A client generated against it sends this hash, and
   `GET /_contract` names it.
@@ -63,8 +65,11 @@ or host written in another language can be held to the same answers:
 ```
 
 - `contracts`: each ClientContract a row targets: its hash and its exact `GET /_contract` bytes (`document`, a
-  string). The first is the main contract, `clientContractHash`; a row targets the other by sending its hash.
-- `rows`: as `AvProtocolFixture` describes them. One body is too large to write out (one byte over the 1 MiB request
+  string). The first is the main contract, `clientContractHash`; a row targets another by sending its hash (a cached
+  read's `GET` as its query's `v`).
+- `rows`: as `AvProtocolFixture` describes them. A cached read's `request` carries its `query` (without the `?`). A
+  streamed `POST /_all` answer (`Accept: application/x-ndjson`) is no envelope: its row's `code` is `null` and its
+  `bodyBytes` are the lines in order. One body is too large to write out (one byte over the 1 MiB request
   limit): its `request.body.content` is a recipe, `{ "prefix": "…", "repeat": "x", "times": 1048567, "suffix": "…" }`,
   standing for `prefix` + `repeat` repeated `times` times + `suffix`. Every other `content` is the body's text.