@kumwe/studio-testkit 0.1.0-alpha.8 → 0.1.0-beta.2

package/invalid/authoring-target.missing-resource-types.json

@@ -0,0 +1,24 @@
+{
+  "schema": "authoring-target.schema.json",
+  "description": "A target cannot be resolved without a bounded host resource type inventory.",
+  "value": {
+    "contractVersion": "0.1-draft",
+    "kind": "authoring-target",
+    "id": "org.example.catalog/product-content",
+    "owner": {
+      "id": "org.example/catalog",
+      "version": "1.0.0"
+    },
+    "label": {
+      "key": "org.example.catalog/product-content"
+    },
+    "surface": "org.example.catalog/product-editor",
+    "eligibility": ["create", "edit"],
+    "modes": ["content"],
+    "startKinds": ["existing"],
+    "presentationStates": ["inline"],
+    "saveOutcomes": ["save-item"],
+    "requiredCapabilities": [],
+    "contributionDependencies": []
+  }
+}

package/invalid/binding-projection-vector.unknown-status.json

@@ -0,0 +1,85 @@
+{
+  "schema": "binding-projection-vector.schema.json",
+  "description": "A binding projection vector cannot invent a status a second host cannot reproduce.",
+  "value": {
+    "contractVersion": "0.1-draft",
+    "kind": "binding-projection-vector",
+    "id": "binding-projection/invalid-status",
+    "description": "Invalid status probe.",
+    "profile": "studio.profile/binding-projection-v1",
+    "blueprint": {
+      "contractVersion": "0.1-draft",
+      "kind": "blueprint",
+      "id": "studio.test/invalid-vector-blueprint",
+      "version": "1.0.0",
+      "revision": "blueprint-r1",
+      "owner": { "id": "studio.test/host", "version": "1.0.0" },
+      "status": "draft",
+      "label": { "key": "studio.test/blueprint", "defaultMessage": "Blueprint" },
+      "model": { "id": "studio.test/model", "version": "1.0.0", "revision": "model-r1" },
+      "dependencyLock": {
+        "theme": { "id": "studio.test/theme", "version": "1.0.0", "revision": "theme-r1" },
+        "blocks": []
+      },
+      "roots": []
+    },
+    "model": {
+      "contractVersion": "0.1-draft",
+      "kind": "content-model",
+      "id": "studio.test/model",
+      "version": "1.0.0",
+      "revision": "model-r1",
+      "owner": { "id": "studio.test/host", "version": "1.0.0" },
+      "status": "published",
+      "label": { "key": "studio.test/model", "defaultMessage": "Model" },
+      "fields": [
+        {
+          "id": "title",
+          "kind": "string",
+          "label": { "key": "studio.test/title", "defaultMessage": "Title" },
+          "required": false,
+          "localized": false,
+          "cardinality": "one"
+        }
+      ],
+      "relationships": []
+    },
+    "blockDefinitions": [
+      {
+        "contractVersion": "0.1-draft",
+        "kind": "block-definition",
+        "type": "studio.test/text",
+        "version": "1.0.0",
+        "revision": "block-r1",
+        "owner": { "id": "studio.test/host", "version": "1.0.0" },
+        "label": { "key": "studio.test/text", "defaultMessage": "Text" },
+        "category": "studio.category/content",
+        "propertySchema": { "type": "object", "additionalProperties": false },
+        "slots": [],
+        "ports": [],
+        "editingModes": ["blueprint"],
+        "themeControls": [],
+        "rendererRequirements": [
+          { "surface": "preview", "capability": "studio.renderer/test", "versions": "^1.0.0" }
+        ],
+        "accessibility": {
+          "category": "text",
+          "accessibleName": "not-applicable",
+          "keyboard": { "key": "studio.test/keyboard", "defaultMessage": "Use the outline." },
+          "reducedMotion": "not-applicable",
+          "outputChecks": ["studio.check/text"]
+        }
+      }
+    ],
+    "expect": {
+      "model": { "id": "studio.test/model", "version": "1.0.0", "revision": "model-r1" },
+      "nodes": [
+        {
+          "nodeId": "node-1",
+          "ports": [{ "port": "title", "status": "silently-repaired", "candidates": [] }]
+        }
+      ],
+      "diagnostics": []
+    }
+  }
+}

package/invalid/host-error.retry-delay-without-retry.json

@@ -0,0 +1,16 @@
+{
+  "schema": "host-error.schema.json",
+  "description": "A retry delay is present only on a retryable rate-limit or unavailable failure.",
+  "value": {
+    "contractVersion": "0.1-draft",
+    "kind": "host-error",
+    "category": "rate-limited",
+    "correlationId": "requests/invalid-retry-delay",
+    "message": {
+      "key": "studio.host/rate-limited",
+      "defaultMessage": "The request is rate limited."
+    },
+    "retryable": false,
+    "retryAfterMilliseconds": 1000
+  }
+}

package/invalid/host-error.retry-delay-wrong-category.json

@@ -0,0 +1,16 @@
+{
+  "schema": "host-error.schema.json",
+  "description": "A retry delay is present only on a rate-limit or unavailable failure.",
+  "value": {
+    "contractVersion": "0.1-draft",
+    "kind": "host-error",
+    "category": "forbidden",
+    "correlationId": "requests/invalid-retry-delay-category",
+    "message": {
+      "key": "studio.host/forbidden",
+      "defaultMessage": "The request is forbidden."
+    },
+    "retryable": true,
+    "retryAfterMilliseconds": 1000
+  }
+}

package/invalid/host-error.revision-without-conflict.json

@@ -0,0 +1,16 @@
+{
+  "schema": "host-error.schema.json",
+  "description": "A safe current revision is disclosed only for a conflict.",
+  "value": {
+    "contractVersion": "0.1-draft",
+    "kind": "host-error",
+    "category": "validation-failed",
+    "correlationId": "requests/invalid-revision",
+    "message": {
+      "key": "studio.host/validation-failed",
+      "defaultMessage": "The request failed validation."
+    },
+    "retryable": false,
+    "revision": "entry-r2"
+  }
+}

package/invalid/reusable-content-type.entry-values.json

@@ -0,0 +1,32 @@
+{
+  "schema": "reusable-content-type.schema.json",
+  "description": "A reusable content type coordinates Model and Blueprint revisions but never contains Entry values.",
+  "value": {
+    "contractVersion": "0.1-draft",
+    "kind": "reusable-content-type",
+    "id": "content-types/product-page",
+    "version": "1.0.0",
+    "revision": "product-page-type-r1",
+    "label": {
+      "key": "org.example.catalog/product-page-type"
+    },
+    "status": "published",
+    "model": {
+      "id": "org.example.models/product",
+      "version": "1.0.0",
+      "revision": "product-model-r1"
+    },
+    "blueprint": {
+      "id": "org.example.blueprints/product-card",
+      "version": "1.0.0",
+      "revision": "product-card-r5"
+    },
+    "authoringPolicy": {
+      "modes": ["content"],
+      "itemComposition": "denied"
+    },
+    "values": {
+      "name": "Must not cross this boundary"
+    }
+  }
+}

package/invalid/studio-chart.script-config.json

@@ -0,0 +1,10 @@
+{
+  "schema": "studio-chart.schema.json",
+  "description": "Chart.js options and authored callbacks are not canonical Studio chart data.",
+  "value": {
+    "type": "bar",
+    "labels": ["Unsafe"],
+    "datasets": [{ "label": "Values", "values": [1] }],
+    "options": { "onClick": "alert(1)" }
+  }
+}

package/invalid/studio-deployment.long-lived-token.json

@@ -0,0 +1,24 @@
+{
+  "schema": "studio-deployment.schema.json",
+  "description": "Serialized bearer authentication without required issuance and expiry metadata cannot represent a bounded lifetime.",
+  "value": {
+    "kind": "studio-deployment",
+    "mount": "#studio-page",
+    "release": {
+      "version": "0.1.0-beta.2",
+      "corpusManifestDigest": "sha256-HCQ5pF8NMk9nPOXfU6kVX/E8sjgJjHdyDQ86CTOjGi0="
+    },
+    "transport": {
+      "kind": "http",
+      "routing": {
+        "kind": "single-endpoint",
+        "endpoint": "/api/studio"
+      },
+      "authentication": {
+        "kind": "bearer-token",
+        "credentials": "omit",
+        "token": "<bearer-token>"
+      }
+    }
+  }
+}

package/invalid/studio-deployment.missing-required.json

@@ -0,0 +1,5 @@
+{
+  "schema": "studio-deployment.schema.json",
+  "description": "An emitted deployment must identify its kind, exact mount, and browser archive release.",
+  "value": {}
+}

package/invalid/studio-deployment.unknown-member.json

@@ -0,0 +1,15 @@
+{
+  "schema": "studio-deployment.schema.json",
+  "description": "Deployment configuration is closed and rejects inferred backend configuration.",
+  "value": {
+    "kind": "studio-deployment",
+    "mount": "#studio-page",
+    "release": {
+      "version": "0.1.0-beta.2",
+      "corpusManifestDigest": "sha256-HCQ5pF8NMk9nPOXfU6kVX/E8sjgJjHdyDQ86CTOjGi0="
+    },
+    "backend": {
+      "url": "/api/studio"
+    }
+  }
+}

package/invalid/studio-drawing.svg-payload.json

@@ -0,0 +1,10 @@
+{
+  "schema": "studio-drawing.schema.json",
+  "description": "Drawing colors cannot carry CSS URLs or executable SVG payloads.",
+  "value": {
+    "width": 100,
+    "height": 100,
+    "alt": "Unsafe drawing",
+    "strokes": [{ "color": "url(javascript:alert(1))", "width": 2, "points": [{ "x": 1, "y": 1 }] }]
+  }
+}

package/invalid/studio-money.float.json

@@ -0,0 +1,8 @@
+{
+  "schema": "studio-money.schema.json",
+  "description": "Persisted money must use an exact decimal string rather than a binary float.",
+  "value": {
+    "amount": 19.99,
+    "currency": "USD"
+  }
+}

package/invalid/studio-presentation.css-injection.json

@@ -0,0 +1,8 @@
+{
+  "schema": "studio-presentation.schema.json",
+  "description": "Presentation intent rejects arbitrary CSS and selectors.",
+  "value": {
+    "position": "fixed;inset:0",
+    "style": "background:url(javascript:alert(1))"
+  }
+}

package/invalid/studio-table.html-cell.json

@@ -0,0 +1,8 @@
+{
+  "schema": "studio-table.schema.json",
+  "description": "Table data rejects cell objects carrying executable markup.",
+  "value": {
+    "columns": ["Name"],
+    "rows": [[{ "html": "<img src=x onerror=alert(1)>" }]]
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kumwe/studio-testkit",
-  "version": "0.1.0-alpha.8",
+  "version": "0.1.0-beta.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/kumwe/studio.git",
@@ -13,12 +13,15 @@
   "sideEffects": false,
   "files": [
     "LICENSE",
+    "THIRD_PARTY_NOTICES.md",
+    "third-party-licenses",
     "README.md",
     "conformance",
     "corpus-manifest.json",
     "dist",
     "fixtures",
     "invalid",
+    "studio-release.json",
     "vectors"
   ],
   "exports": {
@@ -30,14 +33,15 @@
     "./corpus-manifest.json": "./corpus-manifest.json",
     "./fixtures/*": "./fixtures/*",
     "./invalid/*": "./invalid/*",
+    "./studio-release.json": "./studio-release.json",
     "./vectors/*": "./vectors/*"
   },
   "scripts": {
-    "build": "tsc -b"
+    "build": "tsc -b && node ../../scripts/minify-package-dist.mjs --package packages/testkit"
   },
   "dependencies": {
-    "@kumwe/studio-core": "0.1.0-alpha.8",
-    "@kumwe/studio-protocol": "0.1.0-alpha.6"
+    "@kumwe/studio-core": "0.1.0-beta.2",
+    "@kumwe/studio-protocol": "0.1.0-beta.2"
   },
   "publishConfig": {
     "access": "public",

package/studio-release.json

@@ -0,0 +1,35 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "studio-release",
+  "release": "0.1.0-beta.2",
+  "packages": {
+    "@kumwe/studio-core": "0.1.0-beta.2",
+    "@kumwe/studio-media": "0.1.0-beta.2",
+    "@kumwe/studio-preview": "0.1.0-beta.2",
+    "@kumwe/studio-protocol": "0.1.0-beta.2",
+    "@kumwe/studio-renderer-web": "0.1.0-beta.2",
+    "@kumwe/studio-rich-text": "0.1.0-beta.2",
+    "@kumwe/studio": "0.1.0-beta.2",
+    "@kumwe/studio-testkit": "0.1.0-beta.2"
+  },
+  "browserArtifacts": {
+    "manifest": {
+      "name": "studio-assets.json",
+      "schema": "https://schemas.kumwe.org/studio/v1/studio-browser-assets.schema.json"
+    },
+    "authoringArchive": {
+      "archiveStem": "studio-browser-0.1.0-beta.2",
+      "assetRole": "browser-module",
+      "loading": "module"
+    },
+    "enhancementRuntime": {
+      "assetRole": "enhancement-runtime",
+      "loading": "defer",
+      "package": "@kumwe/studio-renderer-web",
+      "packageBasePath": "dist/browser/"
+    }
+  },
+  "protocolVersion": "0.1.0-draft.2",
+  "corpusManifestDigest": "sha256-PupdZVv+htI0wd7bnFtwVdFzhYVB7DxTXh+viiBClNM=",
+  "claimedProfiles": []
+}

package/vectors/authoring-http/transport-matrix.json

@@ -0,0 +1,237 @@
+{
+  "contractVersion": "0.1-draft",
+  "kind": "authoring-http-vector",
+  "id": "vectors/authoring-http-transport-matrix",
+  "operations": [
+    {
+      "route": "authoring/resolve-target",
+      "capability": "studio.operation/authoring.resolve-target",
+      "argumentMember": "request",
+      "requestSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/resolveTargetRequest",
+      "responseSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/resolveTargetResult",
+      "mutating": false,
+      "idempotencyKey": "forbidden",
+      "expectedRevision": "forbidden",
+      "resourceContextMatch": true,
+      "successStatus": 200
+    },
+    {
+      "route": "authoring/list-types",
+      "capability": "studio.operation/authoring.list-types",
+      "argumentMember": "query",
+      "requestSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/listTypesRequest",
+      "responseSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/listTypesResult",
+      "mutating": false,
+      "idempotencyKey": "forbidden",
+      "expectedRevision": "forbidden",
+      "resourceContextMatch": true,
+      "successStatus": 200
+    },
+    {
+      "route": "authoring/start",
+      "capability": "studio.operation/authoring.start",
+      "argumentMember": "request",
+      "requestSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/startRequest",
+      "responseSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/startResult",
+      "mutating": true,
+      "idempotencyKey": "required",
+      "expectedRevision": "forbidden",
+      "resourceContextMatch": true,
+      "successStatus": 200
+    },
+    {
+      "route": "authoring/plan-save",
+      "capability": "studio.operation/authoring.plan-save",
+      "argumentMember": "intent",
+      "requestSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/planSaveRequest",
+      "responseSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/planSaveResult",
+      "mutating": false,
+      "idempotencyKey": "forbidden",
+      "expectedRevision": "forbidden",
+      "resourceContextMatch": false,
+      "successStatus": 200
+    },
+    {
+      "route": "authoring/save-item",
+      "capability": "studio.operation/authoring.save-item",
+      "argumentMember": "request",
+      "requestSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/saveItemRequest",
+      "responseSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/saveItemResult",
+      "mutating": true,
+      "idempotencyKey": "required",
+      "expectedRevision": "forbidden",
+      "resourceContextMatch": false,
+      "successStatus": 200
+    },
+    {
+      "route": "authoring/save-new-type-version",
+      "capability": "studio.operation/authoring.save-new-type-version",
+      "argumentMember": "request",
+      "requestSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/saveNewTypeVersionRequest",
+      "responseSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/saveNewTypeVersionResult",
+      "mutating": true,
+      "idempotencyKey": "required",
+      "expectedRevision": "forbidden",
+      "resourceContextMatch": false,
+      "successStatus": 200
+    },
+    {
+      "route": "authoring/save-as-new-type",
+      "capability": "studio.operation/authoring.save-as-new-type",
+      "argumentMember": "request",
+      "requestSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/saveAsNewTypeRequest",
+      "responseSchema": "https://schemas.kumwe.org/studio/v1/authoring-http.schema.json#/$defs/saveAsNewTypeResult",
+      "mutating": true,
+      "idempotencyKey": "required",
+      "expectedRevision": "forbidden",
+      "resourceContextMatch": false,
+      "successStatus": 200
+    }
+  ],
+  "securityCases": [
+    {
+      "id": "accepted",
+      "authenticated": true,
+      "requestIntegrity": true,
+      "request": "valid",
+      "expect": { "outcome": "result", "status": 200, "dispatch": true }
+    },
+    {
+      "id": "unauthenticated",
+      "authenticated": false,
+      "requestIntegrity": true,
+      "request": "valid",
+      "expect": {
+        "outcome": "error",
+        "status": 401,
+        "category": "unauthenticated",
+        "dispatch": false
+      }
+    },
+    {
+      "id": "csrf-refused",
+      "authenticated": true,
+      "requestIntegrity": false,
+      "request": "valid",
+      "expect": { "outcome": "error", "status": 403, "category": "forbidden", "dispatch": false }
+    },
+    {
+      "id": "malformed-json",
+      "authenticated": true,
+      "requestIntegrity": true,
+      "request": "malformed-json",
+      "expect": {
+        "outcome": "error",
+        "status": 400,
+        "category": "invalid-request",
+        "dispatch": false
+      }
+    },
+    {
+      "id": "context-mismatch",
+      "authenticated": true,
+      "requestIntegrity": true,
+      "request": "context-mismatch",
+      "expect": {
+        "outcome": "error",
+        "status": 400,
+        "category": "invalid-request",
+        "dispatch": false
+      }
+    },
+    {
+      "id": "missing-idempotency",
+      "authenticated": true,
+      "requestIntegrity": true,
+      "request": "missing-idempotency-key",
+      "expect": {
+        "outcome": "error",
+        "status": 400,
+        "category": "invalid-request",
+        "dispatch": false
+      }
+    },
+    {
+      "id": "wrong-operation",
+      "authenticated": true,
+      "requestIntegrity": true,
+      "request": "wrong-operation-id",
+      "expect": {
+        "outcome": "error",
+        "status": 400,
+        "category": "invalid-request",
+        "dispatch": false
+      }
+    },
+    {
+      "id": "host-conflict",
+      "authenticated": true,
+      "requestIntegrity": true,
+      "request": "host-conflict",
+      "expect": { "outcome": "error", "status": 409, "category": "conflict", "dispatch": true }
+    },
+    {
+      "id": "host-rate-limited",
+      "authenticated": true,
+      "requestIntegrity": true,
+      "request": "host-rate-limited",
+      "expect": {
+        "outcome": "error",
+        "status": 429,
+        "category": "rate-limited",
+        "dispatch": true
+      }
+    },
+    {
+      "id": "host-internal",
+      "authenticated": true,
+      "requestIntegrity": true,
+      "request": "host-internal-failure",
+      "expect": { "outcome": "error", "status": 500, "category": "internal", "dispatch": true }
+    }
+  ],
+  "errorMappings": [
+    { "category": "invalid-request", "status": 400 },
+    { "category": "unauthenticated", "status": 401 },
+    { "category": "forbidden", "status": 403 },
+    { "category": "not-found", "status": 404 },
+    { "category": "conflict", "status": 409 },
+    { "category": "validation-failed", "status": 422 },
+    { "category": "incompatible", "status": 400 },
+    { "category": "limit-exceeded", "status": 413 },
+    { "category": "rate-limited", "status": 429 },
+    { "category": "unavailable", "status": 503 },
+    { "category": "cancelled", "status": 400 },
+    { "category": "internal", "status": 500 }
+  ],
+  "successorContextCases": [
+    {
+      "id": "accepted-advance",
+      "beforeContext": { "key": "returns/articles/entry-r7" },
+      "planReference": {
+        "id": "save-plans/article-entry-r8",
+        "revision": "save-plan-r1",
+        "successorContext": { "key": "returns/articles/entry-r8" }
+      },
+      "resultContext": { "key": "returns/articles/entry-r8" },
+      "expect": {
+        "outcome": "accepted",
+        "acceptedContext": { "key": "returns/articles/entry-r8" }
+      }
+    },
+    {
+      "id": "mismatched-result",
+      "beforeContext": { "key": "returns/articles/entry-r7" },
+      "planReference": {
+        "id": "save-plans/article-entry-r8",
+        "revision": "save-plan-r1",
+        "successorContext": { "key": "returns/articles/entry-r8" }
+      },
+      "resultContext": { "key": "returns/articles/unplanned" },
+      "expect": {
+        "outcome": "rejected",
+        "code": "studio.host/unexpected-authoring-save-result"
+      }
+    }
+  ]
+}