@fabrika/provider-zerops 0.9.0-dev.1 → 0.9.0-dev.2

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@fabrika/provider-zerops",
-	"version": "0.9.0-dev.1",
+	"version": "0.9.0-dev.2",
 	"type": "module",
 	"repository": {
 		"type": "git",
@@ -12,27 +12,28 @@
 	},
 	"files": [
 		"src",
-		"!src/**/__tests__/**"
+		"!src/**/__tests__/**",
+		"types"
 	],
 	"exports": {
 		".": {
 			"bun": "./src/index.ts",
-			"types": "./src/index.ts",
+			"types": "./types/src/index.d.ts",
 			"default": "./src/index.ts"
 		},
 		"./cli": {
 			"bun": "./src/cli.ts",
-			"types": "./src/cli.ts",
+			"types": "./types/src/cli.d.ts",
 			"default": "./src/cli.ts"
 		},
 		"./installation": {
 			"bun": "./src/installation/index.ts",
-			"types": "./src/installation/index.ts",
+			"types": "./types/src/installation/index.d.ts",
 			"default": "./src/installation/index.ts"
 		},
 		"./installation/topology": {
 			"bun": "./src/installation/topology/index.ts",
-			"types": "./src/installation/topology/index.ts",
+			"types": "./types/src/installation/topology/index.d.ts",
 			"default": "./src/installation/topology/index.ts"
 		}
 	},
@@ -43,14 +44,14 @@
 	},
 	"dependencies": {
 		"zod": "^3.25.76",
-		"@fabrika/auth": "0.9.0-dev.1",
-		"@fabrika/auth-core": "0.9.0-dev.1",
-		"@fabrika/email": "0.9.0-dev.1",
-		"@fabrika/iam-contract": "0.9.0-dev.1",
-		"@fabrika/installation-init": "0.9.0-dev.1",
-		"@fabrika/operations-contract": "0.9.0-dev.1",
-		"@fabrika/provider-contract": "0.9.0-dev.1",
-		"@fabrika/proxy-core": "0.9.0-dev.1",
+		"@fabrika/auth": "0.9.0-dev.2",
+		"@fabrika/auth-core": "0.9.0-dev.2",
+		"@fabrika/email": "0.9.0-dev.2",
+		"@fabrika/iam-contract": "0.9.0-dev.2",
+		"@fabrika/installation-init": "0.9.0-dev.2",
+		"@fabrika/operations-contract": "0.9.0-dev.2",
+		"@fabrika/provider-contract": "0.9.0-dev.2",
+		"@fabrika/proxy-core": "0.9.0-dev.2",
 		"yaml": "^2.9.1"
 	}
 }

package/src/execution.ts

@@ -265,13 +265,17 @@ const START_SCRIPT = 'fabrika/start.generated.sh'
 const DEV_INIT_SCRIPT = 'fabrika/dev-init.generated.sh'
 const PLATFORM_TSCONFIG = 'fabrika/tsconfig.platform.json'
 
-/** The compiler options of the platform's type check; the application's own `tsconfig.json` and its `paths` are not read. */
+/**
+ * The compiler options of the platform's type check; the application's own `tsconfig.json` and its `paths` are not read.
+ * It covers the SPA under `web/` too: Bun bundles the SPA without checking its types.
+ */
 const PLATFORM_TSCONFIG_CONTENTS = JSON.stringify({
 	compilerOptions: {
 		target: 'ES2022',
 		module: 'ESNext',
 		moduleResolution: 'bundler',
 		lib: ['ES2022', 'DOM', 'DOM.Iterable'],
+		jsx: 'react-jsx',
 		types: ['bun'],
 		strict: true,
 		noUncheckedIndexedAccess: true,
@@ -282,7 +286,7 @@ const PLATFORM_TSCONFIG_CONTENTS = JSON.stringify({
 		isolatedModules: true,
 		noEmit: true,
 	},
-	include: ['../fabrika.contract.ts', '../src', 'entry.generated.ts'],
+	include: ['../fabrika.contract.ts', '../src', '../web', 'entry.generated.ts'],
 })
 
 /** One `printf` writing `lines` to `path`. Each line is single-quoted, so it may hold neither `'` nor an expansion. */
@@ -351,11 +355,11 @@ const writeBase64Command = (path: string, content: string): string => {
 	return `printf '%s' '${encoded}' | base64 -d > ${path}`
 }
 
-/** The build's check chain as the dev launcher runs it in the application root, on what the container holds. */
+/** The build's check chain, in its order, as the dev launcher runs it in the application root on what the container holds. */
 const devChecks = (release: string): DevLauncherConfig['checks'] => [
-	{ name: 'tests', command: 'bun test --isolate --pass-with-no-tests' },
-	{ name: 'fabrika-check', command: `cd /tmp && bun x --bun -p @fabrika/check@${release} fabrika-check ${RUNTIME_ROOT}` },
+	{ name: 'tests', command: TESTS_COMMAND },
 	{ name: 'tsc', command: `cd /tmp && bun x --bun -p typescript@${PLATFORM_TYPESCRIPT_VERSION} tsc -p ${RUNTIME_ROOT}/${PLATFORM_TSCONFIG}` },
+	{ name: 'fabrika-check', command: `cd /tmp && bun x --bun -p @fabrika/check@${release} fabrika-check ${RUNTIME_ROOT}` },
 ]
 
 /** What the dev launcher reads (`DEV_LAUNCHER_CONFIG_FILE`): the platform's, written after the checks. */
@@ -394,6 +398,37 @@ const initCommandScripts = (execution: ZeropsLockedExecution): readonly string[]
 
 const INSTALL = 'bun install --frozen-lockfile --ignore-scripts'
 
+/**
+ * What `@fabrika/db/testing` prints after the label of a test file it skips without `FABRIKA_TEST_POSTGRES_URL`. Every
+ * framework release prints it, so the platform counts it for any application's release.
+ */
+const DATABASE_TEST_SKIP_MARKER = ' skipped: set FABRIKA_TEST_POSTGRES_URL to run the Postgres-backed tests'
+
+/** The prefix of the line the tests command prints after the test run. */
+const TESTS_REPORT_PREFIX = 'fabrika-tests:'
+
+/** One `bun -e "…"` running `script`, which may hold none of the characters a double-quoted shell word expands. */
+const bunEvalCommand = (script: readonly string[]): string => {
+	const source = script.join(' ')
+	if (/["$`\\!]/.test(source)) throw new Error('zerops: a generated bun -e script must not contain a quote, an expansion or a backslash')
+	return `bun -e "${source}"`
+}
+
+// The build has no database, so every Postgres-backed test file skips and the run still passes. This command runs the
+// tests as before and then says how many files did not run, so a green test step does not read as a tested database.
+const TESTS_COMMAND = bunEvalCommand([
+	"const child = Bun.spawn([process.execPath, 'test', '--isolate', '--pass-with-no-tests'], { stdout: 'inherit', stderr: 'pipe' });",
+	'const decoder = new TextDecoder();',
+	"let output = '';",
+	'for await (const chunk of child.stderr) { process.stderr.write(chunk); output += decoder.decode(chunk, { stream: true }) }',
+	'const code = await child.exited;',
+	`const marker = '${DATABASE_TEST_SKIP_MARKER}';`,
+	'const skipped = output.split(String.fromCharCode(10)).filter((line) => line.includes(marker)).map((line) => line.slice(0, line.indexOf(marker)).trim());',
+	`const prefix = '${TESTS_REPORT_PREFIX}';`,
+	"console.warn(skipped.length === 0 ? prefix + ' no Postgres-backed test file skipped' : prefix + ' ' + skipped.length + ' Postgres-backed test files did not run, because the build has no database: ' + skipped.join(', '));",
+	'process.exit(code);',
+])
+
 // After every check: a map is uploaded only for a build that can deploy. A failed upload never fails the build; the
 // provider reads the state from the report line.
 const sourceMapUpload = (release: string): string => `cd /tmp && bun x --bun -p @fabrika/check@${release} fabrika-source-maps ${SOURCE_ROOT} || true`
@@ -412,19 +447,21 @@ const sourceMapBuildVariables = (upload: OperationsSourceMapBuildUpload): Record
 /**
  * The generated build commands, in order; the authored SPA commands run before all of them. The application's tests
  * run first: they are authored code, so everything after them is reinstalled, regenerated or checked again. They run
- * `--isolate`, as the application skill runs them: a test file's DOM globals otherwise leak into the next file.
+ * `--isolate`, as the application skill runs them: a test file's DOM globals otherwise leak into the next file. `tsc`
+ * runs before the checker, as in the skill's loop: the usual quick fix of a type error is a cast or an `any`, which only
+ * the checker refuses, so the checker is the last word on the code.
  */
 export function generatedBuildCommands(execution: ZeropsLockedExecution, authoredSpa: readonly string[] = []): readonly string[] {
 	if (!LOCKED_APP_ID_PATTERN.test(execution.appId)) throw new Error('zerops: a contract application id must match [a-z0-9][a-z0-9-]*')
 	if (!FRAMEWORK_RELEASE_PATTERN.test(execution.checkRelease)) throw new Error('zerops: the checker release must be a release version')
 	return [
 		INSTALL,
-		'bun test --isolate --pass-with-no-tests',
+		TESTS_COMMAND,
 		`rm -rf node_modules && ${INSTALL}`,
 		`bun -e "await import('@fabrika/app/build').then((build) => build.writeGeneratedEntry('.', 'bun'))"`,
-		`cd /tmp && bun x --bun -p @fabrika/check@${execution.checkRelease} fabrika-check ${SOURCE_ROOT}`,
 		writeFileCommand(PLATFORM_TSCONFIG, [PLATFORM_TSCONFIG_CONTENTS]),
 		`cd /tmp && bun x --bun -p typescript@${PLATFORM_TYPESCRIPT_VERSION} tsc -p ${SOURCE_ROOT}/${PLATFORM_TSCONFIG}`,
+		`cd /tmp && bun x --bun -p @fabrika/check@${execution.checkRelease} fabrika-check ${SOURCE_ROOT}`,
 		...initScripts(execution).map((script) => writeFileCommand(script.path, script.lines)),
 		...(execution.dev === undefined
 			? [writeFileCommand(START_SCRIPT, startScript)]

package/types/src/api/client.d.ts

@@ -0,0 +1,5 @@
+import type { ZeropsApi, ZeropsApiOptions } from './types';
+/** Base URL of the Zerops public REST API. */
+export declare const ZEROPS_API_BASE = "https://api.app-prg1.zerops.io/api/rest/public";
+/** Build the real client. Every request carries the bearer and the run's signal. */
+export declare const createZeropsApi: (options: ZeropsApiOptions) => ZeropsApi;

package/types/src/api/errors.d.ts

@@ -0,0 +1,24 @@
+export declare const isAppVersionNotFoundResponse: (value: unknown) => boolean;
+/**
+ * A non-2xx answer from the Zerops API. `code` is the platform's own error identifier, so a caller can
+ * branch on `userDataDuplicateKey` rather than matching a prose message.
+ */
+export declare class ZeropsApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(message: string, status: number, code: string);
+}
+/**
+ * The platform's code for "this service publishes no HTTP port", the answer `enableSubdomainAccess` gives
+ * before a service's first deploy. Exported so a caller can say what is missing instead of relaying prose.
+ */
+export declare const ZEROPS_SERVICE_NOT_HTTP = "serviceStackIsNotHttp";
+/**
+ * Turn a non-2xx response into a `ZeropsApiError`. Zerops answers with `{ error: { code, message, meta } }`
+ * (the envelope observed live; the OpenAPI `Error` schema shows the inner `{ code, message }`).
+ *
+ * `redactDetail` drops the server's MESSAGE, which a validation error can fill with the value it
+ * rejected. The CODE is a fixed identifier and is kept either way — without it nothing downstream can
+ * tell a duplicate key from a missing service.
+ */
+export declare const apiError: (label: string, status: number, body: unknown, redactDetail: boolean) => ZeropsApiError;

package/types/src/api/polling.d.ts

@@ -0,0 +1,41 @@
+import type { Sleeper } from '../collaborators';
+import { type ZeropsApi, type ZeropsProcess } from './types';
+/**
+ * Poll ONE process to completion.
+ *
+ * The same loop `deployPlatformService` (`installation/deploy.ts`) runs over `/app-version`, run over `/process`
+ * instead: read, decide ONLY on a status this build knows to be terminal, sleep, and give up on a deadline
+ * of our own rather than on a coincidence. Returns the finished process so a caller can read
+ * `actionName`/`appVersionId` off it.
+ *
+ * Anything outside `ZEROPS_PROCESS_TERMINAL` means "keep waiting", including a status this build has never
+ * seen — which is why an unpublished vocabulary (see that constant) can cost a timeout and never a false
+ * success. A non-`FINISHED` terminal status throws, naming the status and nothing else.
+ */
+export declare const waitForProcess: (input: {
+    api: Pick<ZeropsApi, "getProcess">;
+    processId: string;
+    sleep: Sleeper;
+    signal: AbortSignal;
+    /** What to call this process in a failure or timeout message. Defaults to its id. */
+    label?: string;
+    intervalMs?: number;
+    attempts?: number;
+}) => Promise<ZeropsProcess>;
+/**
+ * `enableSubdomainAccess`, repeated while the service does not yet publish an HTTP port.
+ *
+ * Live-verified: right after a service's first app version reads ACTIVE the platform still answers
+ * `serviceStackIsNotHttp`, and a minute later the same call is accepted. The ports lag ACTIVE, so that
+ * answer means "not yet" for a bounded window. Past it the last refusal is rethrown unchanged, so a caller
+ * still names the missing port. Any other failure is rethrown at once. The 2xx still proves nothing: the
+ * caller decides by reading `subdomainAccess` back.
+ */
+export declare const enableSubdomainAccessWhenHttp: (input: {
+    api: Pick<ZeropsApi, "enableSubdomainAccess">;
+    serviceId: string;
+    sleep: Sleeper;
+    signal: AbortSignal;
+    intervalMs?: number;
+    attempts?: number;
+}) => Promise<void>;