@kumwe/studio-testkit 0.1.0-alpha.10

package/vectors/host-sequence/recovery.store.changed-context.sequence.json

@@ -0,0 +1,61 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "host-sequence-vector",
+  "id": "vector.host-sequence.recovery.store.changed-context",
+  "description": "Adding an optional semantic context field changes the canonical intent: an accepted key with absent locale refuses the same argument when locale becomes present.",
+  "profile": "studio.profile/host-baseline-v2",
+  "assertions": ["idempotency-changed-context-refusal"],
+  "idempotencyPolicy": {
+    "scopeFields": ["idempotencyKey", "operationId", "resourceContextKey", "sessionGeneration"],
+    "argumentCanonicalization": "canonical-json",
+    "intentContextFields": ["expectedRevision", "locale", "protocolVersion"],
+    "absentOptionalFields": "omit",
+    "numberNormalization": "canonical-json",
+    "excludedContextFields": ["requestId", "traceContext"]
+  },
+  "given": { "artifacts": [], "permissions": [], "sessionGeneration": "session-r1" },
+  "steps": [
+    {
+      "action": "invoke",
+      "id": "store-without-locale",
+      "port": "recovery",
+      "operation": "store",
+      "context": {
+        "operationId": "studio.operation/recovery.store",
+        "protocolVersion": "0.1.0-draft.2",
+        "requestId": "requests/store-without-locale",
+        "resourceContextKey": "contexts/context-intent",
+        "sessionGeneration": "session-r1",
+        "idempotencyKey": "idempotency/context-intent"
+      },
+      "argument": { "draft": "retained" },
+      "completion": "settled",
+      "expect": { "outcome": "result", "value": "null" }
+    },
+    {
+      "action": "invoke",
+      "id": "store-with-locale",
+      "port": "recovery",
+      "operation": "store",
+      "context": {
+        "operationId": "studio.operation/recovery.store",
+        "protocolVersion": "0.1.0-draft.2",
+        "requestId": "requests/store-with-locale",
+        "resourceContextKey": "contexts/context-intent",
+        "sessionGeneration": "session-r1",
+        "idempotencyKey": "idempotency/context-intent",
+        "locale": "en"
+      },
+      "argument": { "draft": "retained" },
+      "completion": "settled",
+      "expect": { "outcome": "error", "category": "invalid-request", "retryable": false }
+    }
+  ],
+  "expectFinal": {
+    "recovery": [
+      { "resourceContextKey": "contexts/context-intent", "value": { "draft": "retained" } }
+    ],
+    "pendingPreviewRenders": 0,
+    "previewDeliveries": []
+  }
+}

package/vectors/host-sequence/recovery.store.rate-limited.sequence.json

@@ -0,0 +1,93 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "host-sequence-vector",
+  "id": "vector.host-sequence.recovery.store.rate-limited",
+  "description": "A refused recovery write has no side effect or accepted idempotency record; advancing the logical clock resets the fixed window and the exact failed intent can then succeed.",
+  "profile": "studio.profile/host-baseline-v2",
+  "assertions": ["fixed-window-rate-limit", "fixed-window-reset", "failed-attempt-retry"],
+  "idempotencyPolicy": {
+    "scopeFields": ["idempotencyKey", "operationId", "resourceContextKey", "sessionGeneration"],
+    "argumentCanonicalization": "canonical-json",
+    "intentContextFields": ["expectedRevision", "locale", "protocolVersion"],
+    "absentOptionalFields": "omit",
+    "numberNormalization": "canonical-json",
+    "excludedContextFields": ["requestId", "traceContext"]
+  },
+  "given": {
+    "artifacts": [],
+    "permissions": [],
+    "sessionGeneration": "session-r1",
+    "rateLimits": [
+      {
+        "operationId": "studio.operation/recovery.store",
+        "maximumRequests": 1,
+        "windowMilliseconds": 60000,
+        "retryAfterMilliseconds": 60000
+      }
+    ]
+  },
+  "steps": [
+    {
+      "action": "invoke",
+      "id": "store-primer",
+      "port": "recovery",
+      "operation": "store",
+      "context": {
+        "operationId": "studio.operation/recovery.store",
+        "protocolVersion": "0.1.0-draft.2",
+        "requestId": "requests/recovery-primer",
+        "resourceContextKey": "contexts/vector",
+        "sessionGeneration": "session-r1",
+        "idempotencyKey": "idempotency/recovery-primer"
+      },
+      "argument": { "draft": "primer" },
+      "completion": "settled",
+      "expect": { "outcome": "result", "value": "null" }
+    },
+    {
+      "action": "invoke",
+      "id": "store-limited",
+      "port": "recovery",
+      "operation": "store",
+      "context": {
+        "operationId": "studio.operation/recovery.store",
+        "protocolVersion": "0.1.0-draft.2",
+        "requestId": "requests/recovery-limited",
+        "resourceContextKey": "contexts/vector",
+        "sessionGeneration": "session-r1",
+        "idempotencyKey": "idempotency/recovery-target"
+      },
+      "argument": { "draft": "target" },
+      "completion": "settled",
+      "expect": {
+        "outcome": "error",
+        "category": "rate-limited",
+        "retryable": true,
+        "retryAfterMilliseconds": 60000
+      }
+    },
+    { "action": "advance-clock", "id": "advance-rate-window", "milliseconds": 60000 },
+    {
+      "action": "invoke",
+      "id": "store-retried",
+      "port": "recovery",
+      "operation": "store",
+      "context": {
+        "operationId": "studio.operation/recovery.store",
+        "protocolVersion": "0.1.0-draft.2",
+        "requestId": "requests/recovery-retried",
+        "resourceContextKey": "contexts/vector",
+        "sessionGeneration": "session-r1",
+        "idempotencyKey": "idempotency/recovery-target"
+      },
+      "argument": { "draft": "target" },
+      "completion": "settled",
+      "expect": { "outcome": "result", "value": "null" }
+    }
+  ],
+  "expectFinal": {
+    "recovery": [{ "resourceContextKey": "contexts/vector", "value": { "draft": "target" } }],
+    "pendingPreviewRenders": 0,
+    "previewDeliveries": []
+  }
+}

package/vectors/host-sequence/recovery.store.resource-scope.sequence.json

@@ -0,0 +1,61 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "host-sequence-vector",
+  "id": "vector.host-sequence.recovery.store.resource-scope",
+  "description": "The same idempotency key and intent in two resource contexts are independent accepted records, and each context receives its own recovery state.",
+  "profile": "studio.profile/host-baseline-v2",
+  "assertions": ["idempotency-resource-scope-separation"],
+  "idempotencyPolicy": {
+    "scopeFields": ["idempotencyKey", "operationId", "resourceContextKey", "sessionGeneration"],
+    "argumentCanonicalization": "canonical-json",
+    "intentContextFields": ["expectedRevision", "locale", "protocolVersion"],
+    "absentOptionalFields": "omit",
+    "numberNormalization": "canonical-json",
+    "excludedContextFields": ["requestId", "traceContext"]
+  },
+  "given": { "artifacts": [], "permissions": [], "sessionGeneration": "session-r1" },
+  "steps": [
+    {
+      "action": "invoke",
+      "id": "store-context-a",
+      "port": "recovery",
+      "operation": "store",
+      "context": {
+        "operationId": "studio.operation/recovery.store",
+        "protocolVersion": "0.1.0-draft.2",
+        "requestId": "requests/store-context-a",
+        "resourceContextKey": "contexts/scope-a",
+        "sessionGeneration": "session-r1",
+        "idempotencyKey": "idempotency/shared-scope-key"
+      },
+      "argument": { "draft": "same-intent" },
+      "completion": "settled",
+      "expect": { "outcome": "result", "value": "null" }
+    },
+    {
+      "action": "invoke",
+      "id": "store-context-b",
+      "port": "recovery",
+      "operation": "store",
+      "context": {
+        "operationId": "studio.operation/recovery.store",
+        "protocolVersion": "0.1.0-draft.2",
+        "requestId": "requests/store-context-b",
+        "resourceContextKey": "contexts/scope-b",
+        "sessionGeneration": "session-r1",
+        "idempotencyKey": "idempotency/shared-scope-key"
+      },
+      "argument": { "draft": "same-intent" },
+      "completion": "settled",
+      "expect": { "outcome": "result", "value": "null" }
+    }
+  ],
+  "expectFinal": {
+    "recovery": [
+      { "resourceContextKey": "contexts/scope-a", "value": { "draft": "same-intent" } },
+      { "resourceContextKey": "contexts/scope-b", "value": { "draft": "same-intent" } }
+    ],
+    "pendingPreviewRenders": 0,
+    "previewDeliveries": []
+  }
+}

package/vectors/host-sequence/recovery.store.wrong-operation-id.sequence.json

@@ -0,0 +1,56 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "host-sequence-vector",
+  "id": "vector.host-sequence.recovery.store.wrong-operation-id",
+  "description": "A structurally valid capability for another operation is refused as invalid-request before work, while the exact recovery.store capability succeeds.",
+  "profile": "studio.profile/host-baseline-v2",
+  "assertions": ["operation-id-mismatch-refusal"],
+  "idempotencyPolicy": {
+    "scopeFields": ["idempotencyKey", "operationId", "resourceContextKey", "sessionGeneration"],
+    "argumentCanonicalization": "canonical-json",
+    "intentContextFields": ["expectedRevision", "locale", "protocolVersion"],
+    "absentOptionalFields": "omit",
+    "numberNormalization": "canonical-json",
+    "excludedContextFields": ["requestId", "traceContext"]
+  },
+  "given": { "artifacts": [], "permissions": [], "sessionGeneration": "session-r1" },
+  "steps": [
+    {
+      "action": "invoke",
+      "id": "store-wrong-operation",
+      "port": "recovery",
+      "operation": "store",
+      "context": {
+        "operationId": "studio.operation/recovery.load",
+        "protocolVersion": "0.1.0-draft.2",
+        "requestId": "requests/store-wrong-operation",
+        "resourceContextKey": "contexts/operation-id",
+        "sessionGeneration": "session-r1"
+      },
+      "argument": { "draft": "must-not-store" },
+      "completion": "settled",
+      "expect": { "outcome": "error", "category": "invalid-request", "retryable": false }
+    },
+    {
+      "action": "invoke",
+      "id": "store-exact-operation",
+      "port": "recovery",
+      "operation": "store",
+      "context": {
+        "operationId": "studio.operation/recovery.store",
+        "protocolVersion": "0.1.0-draft.2",
+        "requestId": "requests/store-exact-operation",
+        "resourceContextKey": "contexts/operation-id",
+        "sessionGeneration": "session-r1"
+      },
+      "argument": { "draft": "stored" },
+      "completion": "settled",
+      "expect": { "outcome": "result", "value": "null" }
+    }
+  ],
+  "expectFinal": {
+    "recovery": [{ "resourceContextKey": "contexts/operation-id", "value": { "draft": "stored" } }],
+    "pendingPreviewRenders": 0,
+    "previewDeliveries": []
+  }
+}

package/vectors/media/accept.plan-deterministic.json

@@ -0,0 +1,26 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.accept.plan-deterministic",
+  "description": "A well-formed request inside every policy bound is accepted with the deterministic plan derived from the policy: same maximum, same chunk size, same resumability.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "windhoek-skyline.jpg",
+    "mediaType": "image/jpeg",
+    "byteSize": 2500,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "accepted",
+    "plan": {
+      "maximumBytes": 4096,
+      "chunkBytes": 1024,
+      "resumable": true
+    }
+  }
+}

package/vectors/media/accept.size-at-boundary.json

@@ -0,0 +1,26 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.accept.size-at-boundary",
+  "description": "A request of exactly the policy maximum byte size is accepted: the size bound is inclusive.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "boundary.png",
+    "mediaType": "image/png",
+    "byteSize": 4096,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "accepted",
+    "plan": {
+      "maximumBytes": 4096,
+      "chunkBytes": 1024,
+      "resumable": true
+    }
+  }
+}

package/vectors/media/cancel.complete-noop.json

@@ -0,0 +1,30 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.cancel.complete-noop",
+  "description": "Cancelling after the session has completed is not legal and does nothing: the session stays complete and the accepted asset identity is kept.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "completed.jpg",
+    "mediaType": "image/jpeg",
+    "byteSize": 1500,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "accepted",
+    "plan": {
+      "maximumBytes": 4096,
+      "chunkBytes": 1024,
+      "resumable": true
+    }
+  },
+  "cancel": {
+    "during": "complete",
+    "finalState": "complete"
+  }
+}

package/vectors/media/cancel.requested.json

@@ -0,0 +1,30 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.cancel.requested",
+  "description": "Cancelling while the session is still requested — before the host answers authorization — is legal and ends the session in cancelled without any transfer.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "cancelled-early.jpg",
+    "mediaType": "image/jpeg",
+    "byteSize": 2000,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "accepted",
+    "plan": {
+      "maximumBytes": 4096,
+      "chunkBytes": 1024,
+      "resumable": true
+    }
+  },
+  "cancel": {
+    "during": "requested",
+    "finalState": "cancelled"
+  }
+}

package/vectors/media/cancel.transferring.json

@@ -0,0 +1,30 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.cancel.transferring",
+  "description": "Cancelling mid-transfer is legal: the session ends in cancelled, keeps the plan and the progress reached so far, and sends no further chunks.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "cancelled-mid-transfer.jpg",
+    "mediaType": "image/jpeg",
+    "byteSize": 3000,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "accepted",
+    "plan": {
+      "maximumBytes": 4096,
+      "chunkBytes": 1024,
+      "resumable": true
+    }
+  },
+  "cancel": {
+    "during": "transferring",
+    "finalState": "cancelled"
+  }
+}

package/vectors/media/cancel.verifying.json

@@ -0,0 +1,30 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.cancel.verifying",
+  "description": "Cancelling while the host verifies the transferred bytes is legal: the session ends in cancelled and never reports an accepted asset.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "cancelled-verifying.png",
+    "mediaType": "image/png",
+    "byteSize": 2048,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "accepted",
+    "plan": {
+      "maximumBytes": 4096,
+      "chunkBytes": 1024,
+      "resumable": true
+    }
+  },
+  "cancel": {
+    "during": "verifying",
+    "finalState": "cancelled"
+  }
+}

package/vectors/media/reject.disallowed-kind.json

@@ -0,0 +1,23 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.reject.disallowed-kind",
+  "description": "A well-formed media type outside the policy's accepted kinds fails with the generic upload failure; the user-facing message never echoes the declared media type.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "archive.zip",
+    "mediaType": "application/zip",
+    "byteSize": 2048,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "rejected",
+    "code": "studio.media/upload-failed",
+    "messageMustNotContain": ["application/zip"]
+  }
+}

package/vectors/media/reject.filename-empty.json

@@ -0,0 +1,22 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.reject.filename-empty",
+  "description": "An empty filename violates the canonical upload request shape and is rejected before any session state is exchanged with the host.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "",
+    "mediaType": "image/png",
+    "byteSize": 2048,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "rejected",
+    "code": "studio.media/upload-failed"
+  }
+}

package/vectors/media/reject.filename-path.json

@@ -0,0 +1,23 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.reject.filename-path",
+  "description": "A filename carrying path separators is rejected: per the media contract, upload filenames are display metadata, never storage paths. The user-facing message never echoes the offending name.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "../uploads/skyline.jpg",
+    "mediaType": "image/jpeg",
+    "byteSize": 2048,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "rejected",
+    "code": "studio.media/upload-failed",
+    "messageMustNotContain": ["../uploads/skyline.jpg"]
+  }
+}

package/vectors/media/reject.size-one-byte-over.json

@@ -0,0 +1,23 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.reject.size-one-byte-over",
+  "description": "A request one byte over the policy maximum fails with the stable oversize code; the user-facing message never echoes the raw byte counts, which travel only as machine-readable diagnostic parameters.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "one-byte-over.png",
+    "mediaType": "image/png",
+    "byteSize": 4097,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "rejected",
+    "code": "studio.media/upload-too-large",
+    "messageMustNotContain": ["4097", "4096"]
+  }
+}

package/vectors/media/retry.fresh-session.json

@@ -0,0 +1,26 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "media-vector",
+  "id": "vector.media-vector.retry.fresh-session",
+  "description": "Retrying a failed upload is legal only from the failed state and always runs under a fresh session identity with the identical request; a deterministic policy rejection therefore repeats identically.",
+  "policy": {
+    "acceptedMediaTypes": ["image/jpeg", "image/png"],
+    "chunkBytes": 1024,
+    "maximumBytes": 4096,
+    "resumable": true
+  },
+  "request": {
+    "filename": "clip.mp4",
+    "mediaType": "video/mp4",
+    "byteSize": 2048,
+    "purpose": "studio.media/entry-image"
+  },
+  "expect": {
+    "outcome": "rejected",
+    "code": "studio.media/upload-failed",
+    "messageMustNotContain": ["video/mp4"]
+  },
+  "retry": {
+    "freshSession": true
+  }
+}