@crowdsource.you/core 1.2.0

package/dist/testing/index.js

@@ -0,0 +1,43 @@
+"use strict";
+/**
+ * `@crowdsource.you/core/testing` — integrate against CrowdSource before a jury
+ * exists.
+ *
+ * ```ts
+ * import { createCrowdSourceSandbox } from '@crowdsource.you/core/testing';
+ * import { CrowdSource } from '@crowdsource.you/core';
+ *
+ * const sandbox = createCrowdSourceSandbox();
+ * const crowdsource = new CrowdSource({
+ *   serviceKey: sandbox.serviceKey,
+ *   baseUrl: sandbox.baseUrl,
+ *   fetch: sandbox.fetch,
+ * });
+ *
+ * const { caseId } = await crowdsource.reports.create({ ... });
+ * const decision = sandbox.decide(caseId, { outcome: 'violation' });
+ * await sandbox.deliver('http://localhost:3000/webhooks/crowdsource', sandbox.eventFor(decision));
+ * ```
+ *
+ * The report goes through the real client, the sandbox applies the real rules
+ * (tenant from the credential, idempotency, 409 on a changed body, one case per
+ * reported version), and the webhook that comes back is genuinely signed — so
+ * the receiver being tested is the receiver that will run in production.
+ *
+ * The simulator can also deliver a stale, forged or tampered event on purpose.
+ * Asserting that a receiver REFUSES those is the half of a webhook test that
+ * actually proves something.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signWebhookDelivery = exports.WebhookSimulator = exports.createCrowdSourceSandbox = exports.CrowdSourceSandbox = exports.decisionFixture = exports.caseEnvelopeFixture = exports.caseDecidedEventFixture = void 0;
+var fixtures_js_1 = require("./fixtures.js");
+Object.defineProperty(exports, "caseDecidedEventFixture", { enumerable: true, get: function () { return fixtures_js_1.caseDecidedEventFixture; } });
+Object.defineProperty(exports, "caseEnvelopeFixture", { enumerable: true, get: function () { return fixtures_js_1.caseEnvelopeFixture; } });
+Object.defineProperty(exports, "decisionFixture", { enumerable: true, get: function () { return fixtures_js_1.decisionFixture; } });
+var sandbox_js_1 = require("./sandbox.js");
+Object.defineProperty(exports, "CrowdSourceSandbox", { enumerable: true, get: function () { return sandbox_js_1.CrowdSourceSandbox; } });
+Object.defineProperty(exports, "createCrowdSourceSandbox", { enumerable: true, get: function () { return sandbox_js_1.createCrowdSourceSandbox; } });
+var webhook_simulator_js_1 = require("./webhook-simulator.js");
+Object.defineProperty(exports, "WebhookSimulator", { enumerable: true, get: function () { return webhook_simulator_js_1.WebhookSimulator; } });
+Object.defineProperty(exports, "signWebhookDelivery", { enumerable: true, get: function () { return webhook_simulator_js_1.signWebhookDelivery; } });
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AAEH,6CAIuB;AAHrB,sHAAA,uBAAuB,OAAA;AACvB,kHAAA,mBAAmB,OAAA;AACnB,8GAAA,eAAe,OAAA;AAQjB,2CAA4E;AAAnE,gHAAA,kBAAkB,OAAA;AAAE,sHAAA,wBAAwB,OAAA;AAQrD,+DAA+E;AAAtE,wHAAA,gBAAgB,OAAA;AAAE,2HAAA,mBAAmB,OAAA"}

package/dist/testing/sandbox.d.ts

@@ -0,0 +1,109 @@
+/**
+ * An in-process CrowdSource, so an integration can be exercised end to end
+ * before a jury exists.
+ *
+ * The path an application actually cares about is: deliver a report → get a
+ * case → a decision is published → a signed webhook arrives → enforcement runs.
+ * Today the middle of that does not exist anywhere — sortition, review and
+ * consensus are not built, so nothing publishes a decision. Waiting for them
+ * means an integrator cannot write, or test, the half of their code that
+ * matters most: what they DO when a decision says `violation`.
+ *
+ * So this sandbox implements the two ends and lets the test drive the middle.
+ * It accepts reports over a `fetch` the real `@crowdsource.you/core` client can be
+ * pointed at — same transport, same idempotency, same 409, same tenant check —
+ * and `decide()` publishes a decision the way consensus eventually will, which
+ * `deliver()` then sends as a genuinely signed `case.decided`.
+ *
+ * **What it is and is not.** It is a faithful implementation of the RULES an
+ * integrator's code depends on: `applicationId` from the credential, an
+ * idempotency key that returns the same `reportId`, a 409 for a reused
+ * `externalReportId` with a changed body, and §7.3's "two reports about the same
+ * version of the same content are one case". It is NOT the service, it holds no
+ * state between processes, and where it and the backend ever disagree the
+ * backend is right. The deduplication projection below mirrors the backend's
+ * `modules/evidence/contentSnapshot.ts`; that logic belongs in the contracts
+ * package so both sides share one implementation, and until it moves this file
+ * is the second copy — which is a thing to know rather than a thing to rely on.
+ */
+import { type CaseEnvelope, type Decision, type DecisionFinding, type DecisionOutcome, type DecisionRecommendedAction, type KnownWebhookEvent, type TaxonomyCode } from '@crowdsource.you/contracts';
+import { type WebhookDeliveryResult } from './webhook-simulator.js';
+export interface SandboxReport {
+    readonly reportId: string;
+    readonly externalReportId: string;
+    readonly caseId: string;
+    readonly idempotencyKey: string;
+    readonly envelope: CaseEnvelope;
+    /** `merged` when this report joined a case another report had already opened. */
+    readonly status: 'received' | 'merged';
+    readonly receivedAt: string;
+    /**
+     * The fingerprint of what was delivered — the backend calls it `payloadHash`
+     * and computes it over `{ externalReportId, envelope }`, deliberately without
+     * the idempotency key, so the same content re-sent under a fresh key is
+     * recognised as the same report rather than conflicting with it.
+     */
+    readonly payloadHash: string;
+}
+export interface SandboxCase {
+    readonly caseId: string;
+    readonly externalSubjectId: string;
+    readonly dedupKey: string;
+    readonly policy: CaseEnvelope['policy'];
+    /** The union of what every merged report alleged (§6.2). */
+    readonly allegationCodes: readonly TaxonomyCode[];
+    readonly reportIds: readonly string[];
+    readonly decisions: readonly Decision[];
+}
+export interface CrowdSourceSandboxOptions {
+    readonly applicationId?: string;
+    readonly organizationId?: string;
+    readonly webhookSecret?: string;
+    /** The origin the client believes it is calling. Never reached over a socket. */
+    readonly baseUrl?: string;
+}
+export interface SandboxDecisionInput {
+    readonly outcome?: DecisionOutcome;
+    readonly status?: Decision['status'];
+    readonly findings?: readonly DecisionFinding[];
+    readonly recommendedActions?: readonly DecisionRecommendedAction[];
+    readonly confidence?: number;
+}
+export declare class CrowdSourceSandbox {
+    readonly applicationId: string;
+    readonly organizationId: string;
+    readonly baseUrl: string;
+    readonly webhookSecret: string;
+    /** The one opaque string an integration configures. */
+    readonly serviceKey: string;
+    private readonly bearerToken;
+    private readonly reportsById;
+    private readonly reportsByIdempotencyKey;
+    private readonly reportsByExternalId;
+    private readonly casesById;
+    private readonly caseIdByDedupKey;
+    private readonly decisionsById;
+    constructor(options?: CrowdSourceSandboxOptions);
+    get reports(): readonly SandboxReport[];
+    get cases(): readonly SandboxCase[];
+    /** The `fetch` to hand `new CrowdSource({ fetch, serviceKey, baseUrl })`. */
+    readonly fetch: typeof globalThis.fetch;
+    /**
+     * Publishes a decision for a case, the way consensus eventually will.
+     *
+     * A published revision is immutable (Appendix F), so calling this twice
+     * produces revision 2 superseding revision 1 rather than editing anything.
+     */
+    decide(caseId: string, input?: SandboxDecisionInput): Decision;
+    /** The `case.decided` (or `decision.corrected`) event for a decision. */
+    eventFor(decision: Decision): KnownWebhookEvent;
+    /** Signs and POSTs an event to the integration's webhook endpoint. */
+    deliver(url: string, event: unknown): Promise<WebhookDeliveryResult>;
+    private createReport;
+    private receiptResponse;
+    private readReport;
+    private readCase;
+    private readDecision;
+}
+export declare function createCrowdSourceSandbox(options?: CrowdSourceSandboxOptions): CrowdSourceSandbox;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/testing/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/testing/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,EAML,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAClB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAoB,KAAK,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEtF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,4DAA4D;IAC5D,QAAQ,CAAC,eAAe,EAAE,SAAS,YAAY,EAAE,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAqED,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,uDAAuD;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoC;IAChE,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAoC;IAC5E,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoC;IACxE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;IAC5D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA+B;gBAEjD,OAAO,GAAE,yBAA8B;IAYnD,IAAI,OAAO,IAAI,SAAS,aAAa,EAAE,CAEtC;IAED,IAAI,KAAK,IAAI,SAAS,WAAW,EAAE,CAElC;IAED,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CA+BrC;IAEF;;;;;OAKG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,oBAAyB,GAAG,QAAQ;IA+ClE,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,iBAAiB;IAW/C,sEAAsE;IAChE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI1E,OAAO,CAAC,YAAY;IAoHpB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,QAAQ;IAmBhB,OAAO,CAAC,YAAY;CAKrB;AAED,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,yBAA8B,GACtC,kBAAkB,CAEpB"}

package/dist/testing/sandbox.js

@@ -0,0 +1,342 @@
+"use strict";
+/**
+ * An in-process CrowdSource, so an integration can be exercised end to end
+ * before a jury exists.
+ *
+ * The path an application actually cares about is: deliver a report → get a
+ * case → a decision is published → a signed webhook arrives → enforcement runs.
+ * Today the middle of that does not exist anywhere — sortition, review and
+ * consensus are not built, so nothing publishes a decision. Waiting for them
+ * means an integrator cannot write, or test, the half of their code that
+ * matters most: what they DO when a decision says `violation`.
+ *
+ * So this sandbox implements the two ends and lets the test drive the middle.
+ * It accepts reports over a `fetch` the real `@crowdsource.you/core` client can be
+ * pointed at — same transport, same idempotency, same 409, same tenant check —
+ * and `decide()` publishes a decision the way consensus eventually will, which
+ * `deliver()` then sends as a genuinely signed `case.decided`.
+ *
+ * **What it is and is not.** It is a faithful implementation of the RULES an
+ * integrator's code depends on: `applicationId` from the credential, an
+ * idempotency key that returns the same `reportId`, a 409 for a reused
+ * `externalReportId` with a changed body, and §7.3's "two reports about the same
+ * version of the same content are one case". It is NOT the service, it holds no
+ * state between processes, and where it and the backend ever disagree the
+ * backend is right. The deduplication projection below mirrors the backend's
+ * `modules/evidence/contentSnapshot.ts`; that logic belongs in the contracts
+ * package so both sides share one implementation, and until it moves this file
+ * is the second copy — which is a thing to know rather than a thing to rely on.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CrowdSourceSandbox = void 0;
+exports.createCrowdSourceSandbox = createCrowdSourceSandbox;
+const node_crypto_1 = require("node:crypto");
+const contracts_1 = require("@crowdsource.you/contracts");
+const webhook_simulator_js_1 = require("./webhook-simulator.js");
+const DEFAULT_BASE_URL = 'https://sandbox.crowdsource.test';
+function publicId(prefix) {
+    return `${prefix}_${(0, node_crypto_1.randomUUID)().replace(/-/g, '')}`;
+}
+function sha256Hex(value) {
+    return (0, node_crypto_1.createHash)('sha256').update(value, 'utf8').digest('hex');
+}
+/**
+ * §7.3's `contentEnvelopeHash`, over the same projection the backend hashes.
+ *
+ * The three normalisations that make two reporters agree, restated so a reader
+ * does not have to open the backend to know what is excluded: order is removed
+ * where it is not meaning, proof-of-delivery fields are dropped from principal
+ * bindings, and nothing per-reporter is included at all — no
+ * `externalReportId`, no `source`, no `allegations`, no reporter binding, no
+ * `urgency`, no `metadata`.
+ */
+function contentHashOf(envelope) {
+    const referencedPrincipals = new Set();
+    for (const resource of envelope.resources) {
+        if (resource.authorPrincipalRef !== undefined) {
+            referencedPrincipals.add(resource.authorPrincipalRef);
+        }
+        if (resource.type === 'listing' && resource.data.sellerRef !== undefined) {
+            referencedPrincipals.add(resource.data.sellerRef);
+        }
+    }
+    for (const relation of envelope.relations) {
+        if (contracts_1.PRINCIPAL_TARGETED_RELATION_TYPES.some((type) => type === relation.type)) {
+            referencedPrincipals.add(relation.to);
+        }
+    }
+    const snapshot = {
+        schemaVersion: envelope.schemaVersion,
+        subject: envelope.subject,
+        resources: [...envelope.resources].sort((left, right) => (left.id < right.id ? -1 : 1)),
+        relations: [...envelope.relations].sort((left, right) => `${left.from} ${left.type} ${left.to}` < `${right.from} ${right.type} ${right.to}` ? -1 : 1),
+        principals: envelope.principalBindings
+            .filter((binding) => referencedPrincipals.has(binding.principalRef))
+            .sort((left, right) => (left.principalRef < right.principalRef ? -1 : 1))
+            .map((binding) => ({
+            principalRef: binding.principalRef,
+            type: binding.type,
+            externalPrincipalId: binding.externalPrincipalId,
+        })),
+    };
+    return sha256Hex(JSON.stringify(snapshot));
+}
+function jsonResponse(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+function apiError(status, code, message) {
+    return jsonResponse(status, { error: { code, message } });
+}
+class CrowdSourceSandbox {
+    constructor(options = {}) {
+        this.reportsById = new Map();
+        this.reportsByIdempotencyKey = new Map();
+        this.reportsByExternalId = new Map();
+        this.casesById = new Map();
+        this.caseIdByDedupKey = new Map();
+        this.decisionsById = new Map();
+        /** The `fetch` to hand `new CrowdSource({ fetch, serviceKey, baseUrl })`. */
+        this.fetch = async (input, init) => {
+            const url = new URL(typeof input === 'string' ? input : input instanceof URL ? input.href : input.url);
+            const method = (init?.method ?? 'GET').toUpperCase();
+            const headers = new Headers(init?.headers);
+            if (headers.get('authorization') !== `Bearer ${this.bearerToken}`) {
+                return apiError(401, 'unauthorized', 'The service credential is missing or invalid.');
+            }
+            if (method === 'POST' && url.pathname === '/v1/reports') {
+                return this.createReport(headers, init?.body);
+            }
+            if (method === 'GET' && url.pathname.startsWith('/v1/reports/')) {
+                return this.readReport(decodeURIComponent(url.pathname.slice('/v1/reports/'.length)));
+            }
+            if (method === 'GET' && url.pathname.startsWith('/v1/cases/')) {
+                return this.readCase(decodeURIComponent(url.pathname.slice('/v1/cases/'.length)));
+            }
+            if (method === 'GET' && url.pathname.startsWith('/v1/decisions/')) {
+                return this.readDecision(decodeURIComponent(url.pathname.slice('/v1/decisions/'.length)));
+            }
+            /**
+             * Everything else, including the upload routes, answers 404 — the same thing
+             * the deployed backend does today. A sandbox that faked an endpoint the
+             * service does not serve would let an integration pass its tests and fail on
+             * its first real call.
+             */
+            return apiError(404, 'not_found', `The sandbox does not serve ${method} ${url.pathname}.`);
+        };
+        this.applicationId = options.applicationId ?? publicId('app');
+        this.organizationId = options.organizationId ?? publicId('org');
+        this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;
+        this.webhookSecret = options.webhookSecret ?? (0, node_crypto_1.randomUUID)();
+        const credentialId = publicId('csk');
+        const secret = (0, node_crypto_1.randomUUID)().replace(/-/g, '');
+        this.bearerToken = `${credentialId}.${secret}`;
+        this.serviceKey = [this.applicationId, credentialId, secret].join(':');
+    }
+    get reports() {
+        return [...this.reportsById.values()];
+    }
+    get cases() {
+        return [...this.casesById.values()];
+    }
+    /**
+     * Publishes a decision for a case, the way consensus eventually will.
+     *
+     * A published revision is immutable (Appendix F), so calling this twice
+     * produces revision 2 superseding revision 1 rather than editing anything.
+     */
+    decide(caseId, input = {}) {
+        const stored = this.casesById.get(caseId);
+        if (!stored)
+            throw new Error(`The sandbox holds no case '${caseId}'.`);
+        const previous = stored.decisions.at(-1);
+        const revision = (previous?.revision ?? 0) + 1;
+        const outcome = input.outcome ?? 'violation';
+        const decision = contracts_1.DecisionSchema.parse({
+            id: publicId('dec'),
+            caseId,
+            revision,
+            status: input.status ?? 'final',
+            outcome,
+            contextSufficiency: outcome === 'insufficient_context' ? 'insufficient' : 'sufficient',
+            confidence: input.confidence ?? 1,
+            findings: input.findings ??
+                (outcome === 'violation'
+                    ? [
+                        {
+                            code: stored.allegationCodes[0] ?? 'other.unclassifiable',
+                            resourceIds: ['res_subject'],
+                            severity: 'medium',
+                            scope: 'application_local',
+                            attribution: 'author',
+                        },
+                    ]
+                    : []),
+            recommendedActions: input.recommendedActions ??
+                (outcome === 'violation' ? [{ action: 'remove_or_restrict' }] : [{ action: 'no_action' }]),
+            jury: { size: 3, decisiveVotes: 3, winningVotes: 3, agreement: 1, specialistPresent: false },
+            policyVersions: {
+                taxonomy: contracts_1.UNIVERSAL_TAXONOMY_VERSION,
+                application: stored.policy.version,
+                oxyConduct: stored.policy.version,
+            },
+            ...(previous === undefined ? {} : { supersedesDecisionId: previous.id }),
+            publishedAt: new Date().toISOString(),
+        });
+        this.decisionsById.set(decision.id, decision);
+        this.casesById.set(caseId, { ...stored, decisions: [...stored.decisions, decision] });
+        return decision;
+    }
+    /** The `case.decided` (or `decision.corrected`) event for a decision. */
+    eventFor(decision) {
+        return contracts_1.KnownWebhookEventSchema.parse({
+            id: publicId('evt'),
+            type: decision.revision === 1 ? 'case.decided' : 'decision.corrected',
+            createdAt: new Date().toISOString(),
+            organizationId: this.organizationId,
+            applicationId: this.applicationId,
+            data: { caseId: decision.caseId, decision },
+        });
+    }
+    /** Signs and POSTs an event to the integration's webhook endpoint. */
+    async deliver(url, event) {
+        return await new webhook_simulator_js_1.WebhookSimulator({ secret: this.webhookSecret, url }).deliver(event);
+    }
+    createReport(headers, body) {
+        const idempotencyKey = headers.get('idempotency-key');
+        if (idempotencyKey === null || idempotencyKey.length === 0) {
+            return apiError(400, 'invalid_request', 'The Idempotency-Key header is required.');
+        }
+        if (typeof body !== 'string') {
+            return apiError(400, 'invalid_request', 'The request body must be JSON.');
+        }
+        let payload;
+        try {
+            payload = JSON.parse(body);
+        }
+        catch {
+            return apiError(400, 'invalid_request', 'The request body must be JSON.');
+        }
+        const parsed = contracts_1.CreateReportRequestSchema.safeParse(payload);
+        if (!parsed.success) {
+            return apiError(422, 'unprocessable_envelope', `The envelope cannot be processed — ${parsed.error.issues
+                .map((issue) => `${issue.path.join('.') || '(root)'}: ${issue.message}`)
+                .join('; ')}`);
+        }
+        const { externalReportId, envelope } = parsed.data;
+        if (envelope.applicationId !== this.applicationId) {
+            return apiError(403, 'forbidden', 'The envelope names a different applicationId than the credential it was delivered with.');
+        }
+        const payloadHash = sha256Hex(JSON.stringify(parsed.data));
+        /**
+         * Appendix D, both halves. The same key with the same payload is the SAME
+         * report and returns the same `reportId`; the same `externalReportId` with a
+         * DIFFERENT payload is §10.5's 409 — the two cannot both be that report, and
+         * no retry resolves it.
+         */
+        const byKey = this.reportsByIdempotencyKey.get(idempotencyKey);
+        if (byKey !== undefined) {
+            if (byKey.payloadHash !== payloadHash) {
+                return apiError(409, 'conflict', 'This Idempotency-Key was already used with a different payload.');
+            }
+            return this.receiptResponse(byKey);
+        }
+        const byExternalId = this.reportsByExternalId.get(externalReportId);
+        if (byExternalId !== undefined) {
+            if (byExternalId.payloadHash !== payloadHash) {
+                return apiError(409, 'conflict', `externalReportId '${externalReportId}' was already delivered with different content.`);
+            }
+            return this.receiptResponse(byExternalId);
+        }
+        const dedupKey = sha256Hex([
+            this.applicationId,
+            envelope.subject.externalId,
+            contentHashOf(envelope),
+            `${envelope.policy.policySetId}@${envelope.policy.version}`,
+        ].join(':'));
+        const existingCaseId = this.caseIdByDedupKey.get(dedupKey);
+        const merged = existingCaseId !== undefined;
+        const caseId = existingCaseId ?? publicId('case');
+        const report = {
+            reportId: publicId('rpt'),
+            externalReportId,
+            caseId,
+            idempotencyKey,
+            envelope,
+            status: merged ? 'merged' : 'received',
+            receivedAt: new Date().toISOString(),
+            payloadHash,
+        };
+        this.reportsById.set(report.reportId, report);
+        this.reportsByIdempotencyKey.set(idempotencyKey, report);
+        this.reportsByExternalId.set(externalReportId, report);
+        const existingCase = this.casesById.get(caseId);
+        this.casesById.set(caseId, {
+            caseId,
+            externalSubjectId: envelope.subject.externalId,
+            dedupKey,
+            policy: envelope.policy,
+            allegationCodes: [
+                ...new Set([
+                    ...(existingCase?.allegationCodes ?? []),
+                    ...envelope.allegations.map((allegation) => allegation.code),
+                ]),
+            ],
+            reportIds: [...(existingCase?.reportIds ?? []), report.reportId],
+            decisions: existingCase?.decisions ?? [],
+        });
+        this.caseIdByDedupKey.set(dedupKey, caseId);
+        return this.receiptResponse(report);
+    }
+    receiptResponse(report) {
+        return jsonResponse(202, {
+            reportId: report.reportId,
+            caseId: report.caseId,
+            status: report.status,
+            merged: report.status === 'merged',
+        });
+    }
+    readReport(reportId) {
+        const report = this.reportsById.get(reportId);
+        if (!report)
+            return apiError(404, 'not_found', 'No such report.');
+        return jsonResponse(200, {
+            reportId: report.reportId,
+            externalReportId: report.externalReportId,
+            caseId: report.caseId,
+            status: report.status,
+            receivedAt: report.receivedAt,
+        });
+    }
+    readCase(caseId) {
+        const stored = this.casesById.get(caseId);
+        if (!stored)
+            return apiError(404, 'not_found', 'No such case.');
+        return jsonResponse(200, {
+            caseId: stored.caseId,
+            status: stored.decisions.length > 0 ? 'decided' : 'awaiting_review',
+            subject: { externalId: stored.externalSubjectId, type: 'social.post' },
+            policy: stored.policy,
+            taxonomyVersion: contracts_1.UNIVERSAL_TAXONOMY_VERSION,
+            allegationCodes: stored.allegationCodes,
+            reportCount: stored.reportIds.length,
+            sensitivityClass: 'standard',
+            currentRevision: stored.decisions.length,
+            createdAt: new Date(0).toISOString(),
+            updatedAt: new Date().toISOString(),
+        });
+    }
+    readDecision(decisionId) {
+        const decision = this.decisionsById.get(decisionId);
+        if (!decision)
+            return apiError(404, 'not_found', 'No such decision.');
+        return jsonResponse(200, decision);
+    }
+}
+exports.CrowdSourceSandbox = CrowdSourceSandbox;
+function createCrowdSourceSandbox(options = {}) {
+    return new CrowdSourceSandbox(options);
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/testing/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/testing/sandbox.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AAqbH,4DAIC;AAvbD,6CAAqD;AAErD,0DAaoC;AAEpC,iEAAsF;AA+CtF,MAAM,gBAAgB,GAAG,kCAAkC,CAAC;AAE5D,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,GAAG,MAAM,IAAI,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,QAAsB;IAC3C,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC9C,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACzE,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,IAAI,6CAAiC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtD,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC5F;QACD,UAAU,EAAE,QAAQ,CAAC,iBAAiB;aACnC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;aACnE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;SACjD,CAAC,CAAC;KACN,CAAC;IAEF,OAAO,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IAC7D,OAAO,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAa,kBAAkB;IAgB7B,YAAY,UAAqC,EAAE;QAPlC,gBAAW,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC/C,4BAAuB,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC3D,wBAAmB,GAAG,IAAI,GAAG,EAAyB,CAAC;QACvD,cAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC3C,qBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,kBAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;QAsB7D,6EAA6E;QACpE,UAAK,GAA4B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAClF,CAAC;YACF,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAE3C,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,UAAU,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAClE,OAAO,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,+CAA+C,CAAC,CAAC;YACxF,CAAC;YAED,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAChE,OAAO,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9D,OAAO,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAClE,OAAO,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC5F,CAAC;YAED;;;;;eAKG;YACH,OAAO,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,8BAA8B,MAAM,IAAI,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7F,CAAC,CAAC;QAnDA,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;QACnD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAA,wBAAU,GAAE,CAAC;QAE3D,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAA,wBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,GAAG,YAAY,IAAI,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,OAAO;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,KAAK;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,CAAC;IAoCD;;;;;OAKG;IACH,MAAM,CAAC,MAAc,EAAE,QAA8B,EAAE;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,IAAI,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC;QAE7C,MAAM,QAAQ,GAAG,0BAAc,CAAC,KAAK,CAAC;YACpC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC;YACnB,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO;YAC/B,OAAO;YACP,kBAAkB,EAAE,OAAO,KAAK,sBAAsB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY;YACtF,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;YACjC,QAAQ,EACN,KAAK,CAAC,QAAQ;gBACd,CAAC,OAAO,KAAK,WAAW;oBACtB,CAAC,CAAC;wBACE;4BACE,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,sBAAsB;4BACzD,WAAW,EAAE,CAAC,aAAa,CAAC;4BAC5B,QAAQ,EAAE,QAAQ;4BAClB,KAAK,EAAE,mBAAmB;4BAC1B,WAAW,EAAE,QAAQ;yBACtB;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;YACT,kBAAkB,EAChB,KAAK,CAAC,kBAAkB;gBACxB,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5F,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE;YAC5F,cAAc,EAAE;gBACd,QAAQ,EAAE,sCAA0B;gBACpC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;gBAClC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;aAClC;YACD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;YACxE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,yEAAyE;IACzE,QAAQ,CAAC,QAAkB;QACzB,OAAO,mCAAuB,CAAC,KAAK,CAAC;YACnC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC;YACnB,IAAI,EAAE,QAAQ,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,oBAAoB;YACrE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,KAAc;QACvC,OAAO,MAAM,IAAI,uCAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxF,CAAC;IAEO,YAAY,CAAC,OAAgB,EAAE,IAAiC;QACtE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACtD,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,OAAO,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,MAAM,GAAG,qCAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,QAAQ,CACb,GAAG,EACH,wBAAwB,EACxB,sCAAsC,MAAM,CAAC,KAAK,CAAC,MAAM;iBACtD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;iBACvE,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAEnD,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAClD,OAAO,QAAQ,CACb,GAAG,EACH,WAAW,EACX,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAE3D;;;;;WAKG;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBACtC,OAAO,QAAQ,CACb,GAAG,EACH,UAAU,EACV,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,YAAY,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBAC7C,OAAO,QAAQ,CACb,GAAG,EACH,UAAU,EACV,qBAAqB,gBAAgB,iDAAiD,CACvF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CACxB;YACE,IAAI,CAAC,aAAa;YAClB,QAAQ,CAAC,OAAO,CAAC,UAAU;YAC3B,aAAa,CAAC,QAAQ,CAAC;YACvB,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;SAC5D,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,cAAc,KAAK,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,cAAc,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAElD,MAAM,MAAM,GAAkB;YAC5B,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC;YACzB,gBAAgB;YAChB,MAAM;YACN,cAAc;YACd,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;YACtC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,WAAW;SACZ,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAEvD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE;YACzB,MAAM;YACN,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;YAC9C,QAAQ;YACR,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,eAAe,EAAE;gBACf,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,CAAC,YAAY,EAAE,eAAe,IAAI,EAAE,CAAC;oBACxC,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;iBAC7D,CAAC;aACH;YACD,SAAS,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;YAChE,SAAS,EAAE,YAAY,EAAE,SAAS,IAAI,EAAE;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE5C,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAEO,eAAe,CAAC,MAAqB;QAC3C,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ;SACnC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAElE,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CAAC,MAAc;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;QAEhE,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;YACnE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,aAAa,EAAE;YACtE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe,EAAE,sCAA0B;YAC3C,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;YACpC,gBAAgB,EAAE,UAAU;YAC5B,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;YACxC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,UAAkB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;QACtE,OAAO,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;CACF;AA9SD,gDA8SC;AAED,SAAgB,wBAAwB,CACtC,UAAqC,EAAE;IAEvC,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC"}

package/dist/testing/webhook-simulator.d.ts

@@ -0,0 +1,78 @@
+/**
+ * The webhook simulator — the producer side of §10.8.
+ *
+ * An integrator can point this at their own receiver and watch a real delivery
+ * arrive, signed exactly as CrowdSource signs one, without a jury having sat and
+ * without anything being enforced against a real user.
+ *
+ * It deliberately also makes it easy to send a delivery that is WRONG:
+ * `expired`, `wrongSecret`, `tampered` and a raw `signature` override are here
+ * so an integration test can assert that the receiver REFUSES those. A test
+ * suite that only ever sends valid deliveries proves the receiver can say yes.
+ * Proving it can say no is the part that matters, and it is the part nobody
+ * writes unless the tooling makes it a one-liner.
+ *
+ * Signing lives here rather than in `@crowdsource.you/core/express` because the two
+ * are opposite sides of the contract: the verifier must never import a signer
+ * that could be "corrected" until they agree with each other and both disagree
+ * with the service. What they share instead is
+ * `buildWebhookSignedPayload` from the contracts package, which is the one
+ * definition of what gets signed.
+ */
+export interface SignedWebhookDelivery {
+    /** Headers as CrowdSource sends them, plus `content-type`. */
+    readonly headers: Readonly<Record<string, string>>;
+    /** The exact bytes that were signed. Send these, not a re-serialisation. */
+    readonly body: string;
+}
+export interface SignWebhookInput {
+    readonly secret: string;
+    /**
+     * The event to deliver. Typed as `unknown` on purpose: a simulator that only
+     * accepted `KnownWebhookEvent` could not send an event type from a future
+     * version of the service, which is precisely the case §10.11 asks every
+     * receiver to survive.
+     */
+    readonly event: unknown;
+    /** Unix seconds. Defaults to now. */
+    readonly timestampSeconds?: number;
+    /** Overrides the body sent, WITHOUT re-signing it. For tamper tests. */
+    readonly tamperedBody?: string;
+    /** Overrides the signature header verbatim. For forgery tests. */
+    readonly signature?: string;
+    /** Overrides the event id header, to test header/body disagreement. */
+    readonly eventId?: string;
+}
+/** Signs one delivery. */
+export declare function signWebhookDelivery(input: SignWebhookInput): SignedWebhookDelivery;
+export interface WebhookDeliveryResult {
+    readonly status: number;
+    readonly body: unknown;
+}
+export interface WebhookSimulatorOptions {
+    readonly secret: string;
+    /** The receiver's webhook URL. */
+    readonly url: string;
+    readonly fetch?: typeof globalThis.fetch;
+}
+/** How a delivery should be wrong, for a test that asserts a refusal. */
+export interface WebhookDeliveryOverrides {
+    /** Signs with a timestamp far outside §10.8's five-minute window. */
+    readonly expired?: boolean;
+    /** Signs with a secret the receiver does not hold. */
+    readonly wrongSecret?: string;
+    /** Sends a body different from the one that was signed. */
+    readonly tamperedBody?: string;
+    readonly signature?: string;
+    readonly eventId?: string;
+    readonly timestampSeconds?: number;
+}
+export declare class WebhookSimulator {
+    private readonly options;
+    constructor(options: WebhookSimulatorOptions);
+    /** Signs a delivery without sending it. */
+    sign(event: unknown, overrides?: WebhookDeliveryOverrides): SignedWebhookDelivery;
+    /** Signs and POSTs a delivery to the receiver. */
+    deliver(event: unknown, overrides?: WebhookDeliveryOverrides): Promise<WebhookDeliveryResult>;
+}
+//# sourceMappingURL=webhook-simulator.d.ts.map

package/dist/testing/webhook-simulator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-simulator.d.ts","sourceRoot":"","sources":["../../src/testing/webhook-simulator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAYH,MAAM,WAAW,qBAAqB;IACpC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAUD,0BAA0B;AAC1B,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,qBAAqB,CAsBlF;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAC1C;AAED,yEAAyE;AACzE,MAAM,WAAW,wBAAwB;IACvC,qEAAqE;IACrE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,2DAA2D;IAC3D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAKD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;gBAEtC,OAAO,EAAE,uBAAuB;IAI5C,2CAA2C;IAC3C,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,GAAE,wBAA6B,GAAG,qBAAqB;IAarF,kDAAkD;IAC5C,OAAO,CACX,KAAK,EAAE,OAAO,EACd,SAAS,GAAE,wBAA6B,GACvC,OAAO,CAAC,qBAAqB,CAAC;CAqBlC"}