@crvouga/mockingbird-service-recaptcha 1.1.0 → 1.3.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog — @crvouga/mockingbird-service-recaptcha
 
+## 1.3.0 (2026-10-12)
+
+### Features
+
+- unify the emulator control plane ([2068547](https://github.com/crvouga/mockingbird/commit/2068547bedde4e2e2331c1657c1a78120e84428b))
+
+### Dependencies
+
+- `@crvouga/mockingbird-service-sqlite`
+
+## 1.2.0 (2026-10-08)
+
+### Features
+
+- match Emulate provider coverage ([16b65ce](https://github.com/crvouga/mockingbird/commit/16b65ce791fa216f28ec1521df636f57771d9c5e))
+
 ## 1.1.0 (2026-10-08)
 
 ### Features

package/DISCOVERY.md

@@ -35,6 +35,7 @@ repository; live parity is an additional oracle check, not a substitute for the
 
 - `GET /__admin/health`
 - `GET /__admin`
+- `GET /__admin/controls`
 - `GET /__admin/state`
 - `GET /__admin/requests`
 - `GET /__admin/metrics`
@@ -45,6 +46,28 @@ For HTTP services, use `x-mockingbird-namespace` (or the documented credential/p
 parallel tests do not share state. Admin state, journal, metrics and fault-preset endpoints are
 designed for assertions and diagnosis by consuming test suites.
 
+## Admin controls
+
+Every HTTP emulator takes the same controls, and each means the same thing at boot
+(`createRuntime({ adminControls })`, `serve --admin-controls`), over `/__admin`, and in a request header:
+
+| Control | Admin API | Request header | Interface |
+| --- | --- | --- | --- |
+| Isolate state by key | `GET /__admin/namespaces` | `x-mockingbird-namespace: <key>` | [Namespaces](https://mockingbird.chrisvouga.dev/docs/admin-controls/namespaces) |
+| Reset to boot | `POST /__admin/reset` | `x-mockingbird-reset: true` | [Reset](https://mockingbird.chrisvouga.dev/docs/admin-controls/reset) |
+| Snapshot and restore | `POST /__admin/snapshots`, `POST /__admin/snapshots/<id>/restore` | `x-mockingbird-snapshot: <name>`, `x-mockingbird-restore: <name>` | [Snapshot and restore](https://mockingbird.chrisvouga.dev/docs/admin-controls/snapshot-and-restore) |
+| Move the clock | `POST /__admin/clock` | `x-mockingbird-time: <instant>`, `x-mockingbird-advance: <duration>` | [Clock](https://mockingbird.chrisvouga.dev/docs/admin-controls/clock) |
+| Read or branch from old state | `GET /__admin/timeline` | `x-mockingbird-at: <checkpoint>`, `x-mockingbird-branch: <name>` | [Checkpoints and branches](https://mockingbird.chrisvouga.dev/docs/admin-controls/checkpoints-and-branches) |
+| Inject a fault | `POST /__admin/faults` | `x-mockingbird-fault: <fault>` | [Faults](https://mockingbird.chrisvouga.dev/docs/admin-controls/faults) |
+| Latency and timeouts | `PUT /__admin/latency` | `x-mockingbird-delay: <duration>`, `x-mockingbird-timeout: <duration>` | [Latency and timeouts](https://mockingbird.chrisvouga.dev/docs/admin-controls/latency-and-timeouts) |
+| Replay from a seed | `PUT /__admin/controls` | `x-mockingbird-seed: <seed>` | [Seed and determinism](https://mockingbird.chrisvouga.dev/docs/admin-controls/seed-and-determinism) |
+| See what happened | `GET /__admin/requests`, `GET /__admin/state` | | [Journal, metrics and state](https://mockingbird.chrisvouga.dev/docs/admin-controls/journal-and-state) |
+
+`GET /__admin` lists every route and header with a one-line summary, and `GET /__admin/controls`
+is the namespace's current control document. The same seed and the same requests give the same
+bytes. Setting controls as an emulator starts is [Boot](https://mockingbird.chrisvouga.dev/docs/admin-controls/boot); every route and header is in
+the [Reference](https://mockingbird.chrisvouga.dev/docs/admin-controls/reference). The full guide: <https://mockingbird.chrisvouga.dev/docs/admin-controls>.
+
 ## Report a mismatch or missing capability
 
 Follow the [agent reporting contract](https://github.com/crvouga/mockingbird/blob/main/docs/REPORTING_ISSUES.md). Include package version,

package/README.md

@@ -15,22 +15,30 @@ bun add @crvouga/mockingbird-service-recaptcha
 ## Usage
 
 ```ts
-import { createRuntime } from "@crvouga/mockingbird-service-recaptcha"
+import { createServer } from "@crvouga/mockingbird-service-recaptcha/server"
 
-const runtime = createRuntime()
-const issued = await runtime.fetch(new Request("http://mock.test/__admin/issue", {
+// Test setup: a local reCAPTCHA, and a token like the one grecaptcha.execute hands the browser.
+const server = await createServer()
+const issued = await fetch(`${server.url}/__admin/issue`, {
   method: "POST",
   headers: { "content-type": "application/json" },
   body: JSON.stringify({ siteKey: "mock_site", action: "login", hostname: "app.example" }),
-}))
+})
 const { token } = await issued.json()
-const verified = await runtime.fetch(new Request("http://mock.test/recaptcha/api/siteverify", {
+
+// Application code: the Siteverify call it makes to Google, sent to the emulator's URL.
+const siteverifyUrl = `${server.url}/recaptcha/api/siteverify`
+const verified = await fetch(siteverifyUrl, {
   method: "POST",
   body: new URLSearchParams({ secret: "mock_secret", response: token }),
-}))
+})
+const { success, score, action } = await verified.json()
+
+await server.close()
 ```
 
-For HTTP, use `createServer` from the `/server` entry or `mockingbird-recaptcha serve`.
+`mockingbird-recaptcha serve` runs the same server standalone; `createRuntime` from the main
+entry is the in-process form.
 Override the browser script URL to `/recaptcha/api.js?render=mock_site` and the server
 verification URL to `/recaptcha/api/siteverify` on the local origin. The browser shim
 uses a local `/__admin/issue` request to obtain tokens; an admin-key-protected runtime