@fourier-labs/harbour 0.1.19 → 0.1.20

package/dist/packages/harbour-cli/src/starter.js

@@ -125,7 +125,10 @@ function kitFiles() {
             }
         }, null, 2)}\n`,
         "migrations/0001_notes.sql": MIGRATION,
-        ".harbour/checks/notes-journey.mjs": JOURNEY_CHECK
+        // One retained check per capability the starter's UI uses: the pipeline's
+        // flow gate refuses an app whose checks never exercise a declared capability.
+        ".harbour/checks/notes-journey.mjs": JOURNEY_CHECK,
+        ".harbour/checks/files-journey.mjs": FILES_JOURNEY_CHECK
     };
 }
 function starterFiles(bundle) {
@@ -147,7 +150,7 @@ function starterFiles(bundle) {
         "src/harbour.client.ts": HARBOUR_CLIENT,
         "src/App.tsx": APP,
         "src/SlackPanel.tsx": SLACK_PANEL,
-        "README.md": "# Harbour app\n\nCreated by `harbour init`. Run `harbour dev --app-root .` and open the printed origin. See CLAUDE.md / AGENTS.md for the kit rules.\n\n`.harbour/integrations.json` declares `company-slack` only. Declare a connection only when the app calls it: `harbour productionise` refuses to deploy until every declared connection has a preview grant (`harbour integrations request <connection> --environment preview --reason \"<why>\" --app-root .`). The warehouse example (`sales-warehouse` / `warehouse.view.read`) is in a comment in `src/App.tsx`.\n"
+        "README.md": "# Harbour app\n\nCreated by `harbour init`. Run `harbour dev --app-root .` and open the printed origin. See CLAUDE.md / AGENTS.md for the kit rules.\n\n`.harbour/checks/` holds one journey per capability the app uses (`notes-journey.mjs` for data, `files-journey.mjs` for files); `harbour check` and the deployment pipeline refuse an app whose checks never exercise an operation its own code performs, so a new feature needs its own retained check.\n\n`.harbour/integrations.json` declares `company-slack` only. Declare a connection only when the app calls it: `harbour productionise` refuses to deploy until every declared connection has a preview grant (`harbour integrations request <connection> --environment preview --reason \"<why>\" --app-root .`). The warehouse example (`sales-warehouse` / `warehouse.view.read`) is in a comment in `src/App.tsx`.\n"
     };
 }
 const VITE_CONFIG = `import { defineConfig } from "vite";
@@ -388,3 +391,27 @@ await harbour.data.from("notes").delete().eq("id", notes[0].id);
 const { data: remaining } = await harbour.data.from("notes").select("id").eq("title", title);
 assert.equal(remaining.length, 0, "the note is deleted");
 `;
+const FILES_JOURNEY_CHECK = `// Journey check: the signed-in identity can upload a private file and list it back
+// through the running app (HARBOUR_APP_URL) — the two operations the "Private
+// files" section of src/App.tsx performs (\`harbour.files.upload\` / \`harbour.files.list\`).
+// The deployment pipeline refuses an app whose checks never exercise a capability
+// its own code uses, so this runs under \`harbour check\` while \`harbour dev\` is up,
+// and in the pipeline's retained-check container.
+import assert from "node:assert/strict";
+
+const appUrl = process.env.HARBOUR_APP_URL;
+assert.ok(appUrl, "HARBOUR_APP_URL is required");
+const sdk = await import(process.env.HARBOUR_SDK_MODULE ?? "@harbour/app-sdk");
+const token = process.env.HARBOUR_IDENTITY_CONTEXT_TOKEN;
+const fetchWithIdentity = (input, init = {}) => fetch(input, { ...init, headers: { ...(init.headers ?? {}), ...(token ? { "x-harbour-identity-context": token } : {}) } });
+const harbour = sdk.createClient({ baseUrl: appUrl, fetch: fetchWithIdentity });
+
+const user = await harbour.identity.current();
+assert.ok(user && user.email, "identity/current must return the signed-in user");
+const name = \`journey-\${Date.now()}.txt\`;
+await harbour.files.upload(\`private/\${name}\`, new Blob(["harbour journey check\\n"], { type: "text/plain" }));
+const listed = await harbour.files.list("private/");
+assert.ok(Array.isArray(listed), "files.list must return a list");
+const found = listed.some(entry => String(typeof entry === "string" ? entry : entry?.path ?? entry?.name ?? "").endsWith(name));
+assert.ok(found, \`the uploaded file is listed back to its owner (looking for \${name})\`);
+`;

package/dist/packages/harbour-cli/src/version.js

@@ -1 +1 @@
-export const CLI_VERSION = "0.1.19";
+export const CLI_VERSION = "0.1.20";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fourier-labs/harbour",
-  "version": "0.1.19",
+  "version": "0.1.20",
   "description": "Harbour productionisation helper",
   "type": "module",
   "bin": { "harbour": "./dist/packages/harbour-cli/src/cli.js" },