@crvouga/mockingbird-service-aws-secrets 1.7.1 → 2.0.0

package/dist/cli.js

@@ -3,8 +3,8 @@ import {
   runCli,
   serveCommand,
   serveTarget
-} from "./chunk-GDZSTAIM.js";
-import "./chunk-3ZIKSFTQ.js";
+} from "./chunk-Q6YFMIYD.js";
+import "./chunk-XQ45L6Q4.js";
 
 // src/cli.ts
 var code = await runCli(

package/dist/index.d.ts

@@ -207,6 +207,15 @@ type FaultCandidate = {
     namespace: string;
 };
 type FaultRegistry = {
+    isolateNamespaces(): void;
+    snapshot(namespace: string): {
+        rules: (FaultRule & {
+            remaining: number | null;
+            hits: number;
+            position: number;
+        })[];
+        rngState: number;
+    };
     add(rule: FaultRule): FaultRule;
     list(): (FaultRule & {
         remaining: number | null;
@@ -214,6 +223,14 @@ type FaultRegistry = {
     })[];
     remove(id: string): boolean;
     clear(): void;
+    restore(namespace: string, state: {
+        rules: (FaultRule & {
+            remaining: number | null;
+            hits: number;
+            position: number;
+        })[];
+        rngState: number;
+    }): void;
     /**
      * Every fault this request should get, in rule order, stopping at the first that answers
      * or drops (effect-only and delay-only rules let later rules match too). Consumes one of
@@ -391,8 +408,8 @@ type MetricsReport = {
 };
 type Metrics = {
     record(entry: RequestLog): void;
-    report(): MetricsReport;
-    reset(): void;
+    report(namespace?: string): MetricsReport;
+    reset(namespace?: string): void;
 };
 
 /** One journal entry: a request log stamped with when (on the mock clock) it was handled. */
@@ -558,6 +575,9 @@ type PublishInput = {
     id?: string;
 };
 type WebhookHub = {
+    pending(namespace: string): number;
+    snapshot(namespace: string): unknown;
+    restore(namespace: string, snapshot: unknown): void;
     publish(input: PublishInput): WebhookMessage;
     /** Replace a namespace's own endpoints (`PUT /__admin/webhook-endpoints`). */
     setEndpoints(namespace: string, endpoints: WebhookEndpoint[]): WebhookEndpoint[];
@@ -585,6 +605,8 @@ type ServiceTimelineState = Readonly<{
 }>;
 type ServiceCheckpoint = Checkpoint<ServiceTimelineState>;
 type ServiceRuntime<T extends ServiceInstance> = FetchAPI & {
+    /** Stop package-owned lifecycle timers when a supervisor closes the runtime. */
+    stop?(): void;
     readonly name: string;
     readonly sqlite: SqliteClient$1;
     readonly clock: Clock;
@@ -595,6 +617,13 @@ type ServiceRuntime<T extends ServiceInstance> = FetchAPI & {
     readonly credentials: CredentialRegistry;
     /** The webhook hub, when the service has outbound webhooks. */
     readonly webhooks: WebhookHub | undefined;
+    /** Enable independent namespace clocks and PRNGs before serving a fleet. */
+    isolateNamespaces(): void;
+    namespaceClock(namespace?: string): Clock;
+    namespaceOf(request: Request): string;
+    /** Opaque in-process checkpoint including records, controls and webhook history. */
+    fleetSnapshot(namespace: string): object;
+    fleetRestore(snapshot: unknown, namespace: string): void;
     /** Expand a named preset into fault rules (and webhook faults) for `namespace`. */
     applyPreset(name: string, namespace?: string, overrides?: Partial<FaultRule>): FaultRule[];
     /** The instance behind `namespace` (the default one when omitted), created on first use. */
@@ -867,6 +896,7 @@ type AwsSecretsRuntimeOptions = {
     sqlite?: SqliteClient;
     clock?: Clock;
     seed?: number | string;
+    adminPrefix?: string;
     adminKey?: string;
     onLog?: (entry: RequestLog) => void;
     region?: string;

package/dist/index.js

@@ -7,7 +7,7 @@ import {
   document,
   operationIds,
   supportedOperationIds
-} from "./chunk-3ZIKSFTQ.js";
+} from "./chunk-XQ45L6Q4.js";
 export {
   AWS_SECRETS_NAMESPACE,
   AWS_SECRETS_PRESETS,

package/dist/server.d.ts

@@ -154,6 +154,15 @@ type FaultCandidate$1 = {
     namespace: string;
 };
 type FaultRegistry$1 = {
+    isolateNamespaces(): void;
+    snapshot(namespace: string): {
+        rules: (FaultRule$1 & {
+            remaining: number | null;
+            hits: number;
+            position: number;
+        })[];
+        rngState: number;
+    };
     add(rule: FaultRule$1): FaultRule$1;
     list(): (FaultRule$1 & {
         remaining: number | null;
@@ -161,6 +170,14 @@ type FaultRegistry$1 = {
     })[];
     remove(id: string): boolean;
     clear(): void;
+    restore(namespace: string, state: {
+        rules: (FaultRule$1 & {
+            remaining: number | null;
+            hits: number;
+            position: number;
+        })[];
+        rngState: number;
+    }): void;
     /**
      * Every fault this request should get, in rule order, stopping at the first that answers
      * or drops (effect-only and delay-only rules let later rules match too). Consumes one of
@@ -325,8 +342,8 @@ type MetricsReport$1 = {
 };
 type Metrics$1 = {
     record(entry: RequestLog$1): void;
-    report(): MetricsReport$1;
-    reset(): void;
+    report(namespace?: string): MetricsReport$1;
+    reset(namespace?: string): void;
 };
 
 /** One journal entry: a request log stamped with when (on the mock clock) it was handled. */
@@ -480,6 +497,9 @@ type PublishInput$1 = {
     id?: string;
 };
 type WebhookHub$1 = {
+    pending(namespace: string): number;
+    snapshot(namespace: string): unknown;
+    restore(namespace: string, snapshot: unknown): void;
     publish(input: PublishInput$1): WebhookMessage$1;
     /** Replace a namespace's own endpoints (`PUT /__admin/webhook-endpoints`). */
     setEndpoints(namespace: string, endpoints: WebhookEndpoint$1[]): WebhookEndpoint$1[];
@@ -507,6 +527,8 @@ type ServiceTimelineState$1 = Readonly<{
 }>;
 type ServiceCheckpoint$1 = Checkpoint$1<ServiceTimelineState$1>;
 type ServiceRuntime$1<T extends ServiceInstance$1> = FetchAPI$1 & {
+    /** Stop package-owned lifecycle timers when a supervisor closes the runtime. */
+    stop?(): void;
     readonly name: string;
     readonly sqlite: SqliteClient$2;
     readonly clock: Clock$1;
@@ -517,6 +539,13 @@ type ServiceRuntime$1<T extends ServiceInstance$1> = FetchAPI$1 & {
     readonly credentials: CredentialRegistry$1;
     /** The webhook hub, when the service has outbound webhooks. */
     readonly webhooks: WebhookHub$1 | undefined;
+    /** Enable independent namespace clocks and PRNGs before serving a fleet. */
+    isolateNamespaces(): void;
+    namespaceClock(namespace?: string): Clock$1;
+    namespaceOf(request: Request): string;
+    /** Opaque in-process checkpoint including records, controls and webhook history. */
+    fleetSnapshot(namespace: string): object;
+    fleetRestore(snapshot: unknown, namespace: string): void;
     /** Expand a named preset into fault rules (and webhook faults) for `namespace`. */
     applyPreset(name: string, namespace?: string, overrides?: Partial<FaultRule$1>): FaultRule$1[];
     /** The instance behind `namespace` (the default one when omitted), created on first use. */
@@ -563,6 +592,7 @@ type CliOption = {
 };
 type CliValues = Record<string, string | boolean | undefined>;
 type CommonServeOptions = {
+    adminPrefix?: string;
     adminKey: string | undefined;
     seed: string | undefined;
     onLog: ((entry: RequestLog$1) => void) | undefined;
@@ -780,6 +810,15 @@ type FaultCandidate = {
     namespace: string;
 };
 type FaultRegistry = {
+    isolateNamespaces(): void;
+    snapshot(namespace: string): {
+        rules: (FaultRule & {
+            remaining: number | null;
+            hits: number;
+            position: number;
+        })[];
+        rngState: number;
+    };
     add(rule: FaultRule): FaultRule;
     list(): (FaultRule & {
         remaining: number | null;
@@ -787,6 +826,14 @@ type FaultRegistry = {
     })[];
     remove(id: string): boolean;
     clear(): void;
+    restore(namespace: string, state: {
+        rules: (FaultRule & {
+            remaining: number | null;
+            hits: number;
+            position: number;
+        })[];
+        rngState: number;
+    }): void;
     /**
      * Every fault this request should get, in rule order, stopping at the first that answers
      * or drops (effect-only and delay-only rules let later rules match too). Consumes one of
@@ -964,8 +1011,8 @@ type MetricsReport = {
 };
 type Metrics = {
     record(entry: RequestLog): void;
-    report(): MetricsReport;
-    reset(): void;
+    report(namespace?: string): MetricsReport;
+    reset(namespace?: string): void;
 };
 
 /** One journal entry: a request log stamped with when (on the mock clock) it was handled. */
@@ -1131,6 +1178,9 @@ type PublishInput = {
     id?: string;
 };
 type WebhookHub = {
+    pending(namespace: string): number;
+    snapshot(namespace: string): unknown;
+    restore(namespace: string, snapshot: unknown): void;
     publish(input: PublishInput): WebhookMessage;
     /** Replace a namespace's own endpoints (`PUT /__admin/webhook-endpoints`). */
     setEndpoints(namespace: string, endpoints: WebhookEndpoint[]): WebhookEndpoint[];
@@ -1158,6 +1208,8 @@ type ServiceTimelineState = Readonly<{
 }>;
 type ServiceCheckpoint = Checkpoint<ServiceTimelineState>;
 type ServiceRuntime<T extends ServiceInstance> = FetchAPI & {
+    /** Stop package-owned lifecycle timers when a supervisor closes the runtime. */
+    stop?(): void;
     readonly name: string;
     readonly sqlite: SqliteClient$1;
     readonly clock: Clock;
@@ -1168,6 +1220,13 @@ type ServiceRuntime<T extends ServiceInstance> = FetchAPI & {
     readonly credentials: CredentialRegistry;
     /** The webhook hub, when the service has outbound webhooks. */
     readonly webhooks: WebhookHub | undefined;
+    /** Enable independent namespace clocks and PRNGs before serving a fleet. */
+    isolateNamespaces(): void;
+    namespaceClock(namespace?: string): Clock;
+    namespaceOf(request: Request): string;
+    /** Opaque in-process checkpoint including records, controls and webhook history. */
+    fleetSnapshot(namespace: string): object;
+    fleetRestore(snapshot: unknown, namespace: string): void;
     /** Expand a named preset into fault rules (and webhook faults) for `namespace`. */
     applyPreset(name: string, namespace?: string, overrides?: Partial<FaultRule>): FaultRule[];
     /** The instance behind `namespace` (the default one when omitted), created on first use. */
@@ -1317,6 +1376,7 @@ type AwsSecretsRuntimeOptions = {
     sqlite?: SqliteClient;
     clock?: Clock;
     seed?: number | string;
+    adminPrefix?: string;
     adminKey?: string;
     onLog?: (entry: RequestLog) => void;
     region?: string;

package/dist/server.js

@@ -2,8 +2,8 @@ import {
   DEFAULT_PORT,
   createServer,
   serveTarget
-} from "./chunk-GDZSTAIM.js";
-import "./chunk-3ZIKSFTQ.js";
+} from "./chunk-Q6YFMIYD.js";
+import "./chunk-XQ45L6Q4.js";
 export {
   DEFAULT_PORT,
   createServer,

package/openapi.yaml

@@ -0,0 +1,22 @@
+openapi: 3.1.0
+info:
+  title: AWS Secrets Manager and SSM Parameter Store (Mockingbird subset)
+  version: "2017-10-17"
+  description: AWS JSON contracts used by the pinned Secrets Manager and SSM clients.
+servers:
+  - url: https://secretsmanager.us-east-1.amazonaws.com
+paths:
+  /:
+    post:
+      operationId: AwsSecretsRpc
+      x-mockingbird: { supported: true, parity: { enabled: true, safe: false } }
+      parameters:
+        - { name: X-Amz-Target, in: header, required: true, schema: { type: string } }
+      requestBody:
+        required: true
+        content:
+          application/x-amz-json-1.1: { schema: { type: object, additionalProperties: true } }
+          application/json: { schema: { type: object, additionalProperties: true } }
+      responses:
+        "200": { description: Operation response, content: { application/x-amz-json-1.1: { schema: { type: object, additionalProperties: true } } } }
+        "400": { description: AWS exception, content: { application/x-amz-json-1.1: { schema: { type: object, additionalProperties: true } } } }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crvouga/mockingbird-service-aws-secrets",
-  "version": "1.7.1",
+  "version": "2.0.0",
   "description": "Stateful AWS Secrets Manager and SSM Parameter Store mock with versions, stages, rotation, and redacted controls.",
   "license": "MIT",
   "type": "module",
@@ -8,7 +8,10 @@
   "files": [
     "dist",
     "README.md",
-    "CHANGELOG.md"
+    "CHANGELOG.md",
+    "DISCOVERY.md",
+    "SUPPORT.md",
+    "openapi.yaml"
   ],
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -57,7 +60,29 @@
       "docs": "https://docs.aws.amazon.com/secretsmanager/latest/apireference/"
     },
     "parity": "Secrets Manager and Parameter Store",
-    "parityTier": "cold"
+    "parityTier": "cold",
+    "discovery": {
+      "guide": "DISCOVERY.md",
+      "behavior": "README.md",
+      "capabilities": "SUPPORT.md",
+      "contract": "openapi.yaml",
+      "types": "dist/index.d.ts",
+      "oracle": {
+        "kind": "Live vendor API or sandbox",
+        "command": "bun run parity:service -- aws-secrets",
+        "note": "Run from a Mockingbird checkout; credentials come only from .env.local or GitHub Actions secrets. Missing credentials exit 2."
+      },
+      "introspection": [
+        "GET /__admin/health",
+        "GET /__admin",
+        "GET /__admin/state",
+        "GET /__admin/requests",
+        "GET /__admin/metrics",
+        "GET /__admin/faults/presets",
+        "GET /__admin/ui"
+      ],
+      "reporting": "https://github.com/crvouga/mockingbird/blob/main/docs/REPORTING_ISSUES.md"
+    }
   },
   "scripts": {
     "generate": "bun ../../openapi/codegen/dist/cli.js",
@@ -72,7 +97,7 @@
     "pack:check": "bun ../../../scripts/pack-check.ts"
   },
   "dependencies": {
-    "@crvouga/mockingbird-service-sqlite": "1.3.0"
+    "@crvouga/mockingbird-service-sqlite": "2.0.0"
   },
   "devDependencies": {
     "@aws-sdk/client-secrets-manager": "3.1132.0",