@nwire/test-kit 0.8.0 → 0.9.0

package/README.md

@@ -44,6 +44,46 @@ describe("enrolStudent", () => {
 - `createTestApp` / `bootTestApp` — supertest agent helpers for HTTP-level tests.
 - `isReachable(url)` — startup probe for Docker-backed services.
 
+## Integration helpers
+
+Layered on `harness()` for ergonomic integration tests. Each one is a thin proxy — the base `Harness` interface stays untouched.
+
+### asUser
+
+Pin `envelope.user` on every dispatch/query in a scoped proxy. The acting user (and tenant) flows through to handlers, RBAC middleware, and audit fields automatically.
+
+```ts
+await asUser(h, { id: "u-1", roles: ["admin"], tenant: "t-1" }).dispatch(createPost, { ... });
+```
+
+### simulateRequest
+
+Run a request through a wired Koa app as if it came over HTTP — wraps supertest so test code doesn't need to know which agent helper to import. Returns `{ status, body, headers }`.
+
+```ts
+const res = await simulateRequest(api.toKoa(), { method: "POST", path: "/posts", body: { ... } });
+expect(res.status).toBe(201);
+```
+
+### checkPolicy
+
+Build an ability for a user via a `@nwire/rbac`-shaped factory and run a `can(action, subject?)` check. Returns `{ can, reason? }` — `reason` carries the CASL rule message when access is denied.
+
+```ts
+const check = await checkPolicy(buildAbility, user, "delete", subject("Post", post));
+expect(check.can).toBe(false);
+```
+
+### onLog
+
+Tap every `logger.{info,warn,error,debug}` call made through the runtime. Returns an unsubscribe function. Use to assert "warned about X" without swapping in a fake logger.
+
+```ts
+const off = onLog(h, (e) => expect(e.message).not.toMatch(/PII/));
+// ... drive a flow ...
+off();
+```
+
 ## When to use
 
 In every Nwire test file. Fits every level — `harness` covers unit/integration, `dockerCompose` covers real-deps, `feature` covers BDD acceptance.

package/dist/__tests__/harness-extensions.test.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Coverage for the four harness extension helpers — one spec each:
+ *
+ *   asUser          — pinned envelope.user reaches the handler
+ *   simulateRequest — runs a request through a wired Koa app
+ *   checkPolicy     — wraps a CASL-shaped ability factory
+ *   onLog           — taps every logger call
+ *
+ * Each spec is intentionally small — the helpers are thin proxies, the
+ * unit-tests prove the contract, not the underlying primitives.
+ */
+export {};
+//# sourceMappingURL=harness-extensions.test.d.ts.map

package/dist/__tests__/harness-extensions.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-extensions.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/harness-extensions.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/__tests__/harness-extensions.test.js

@@ -0,0 +1,135 @@
+/**
+ * Coverage for the four harness extension helpers — one spec each:
+ *
+ *   asUser          — pinned envelope.user reaches the handler
+ *   simulateRequest — runs a request through a wired Koa app
+ *   checkPolicy     — wraps a CASL-shaped ability factory
+ *   onLog           — taps every logger call
+ *
+ * Each spec is intentionally small — the helpers are thin proxies, the
+ * unit-tests prove the contract, not the underlying primitives.
+ */
+import { describe, it, expect } from "vitest";
+import { z } from "zod";
+import * as forge from "@nwire/forge";
+import { defineEvent } from "@nwire/messages";
+import { httpInterface, post } from "@nwire/http";
+import { harness } from "../harness.js";
+import { asUser, simulateRequest, checkPolicy, onLog } from "../harness-extensions.js";
+// ─── shared fixture: a one-action demo app ─────────────────────────
+// Tiny app that captures envelope.user on dispatch so the asUser spec
+// can assert on it. Same shape as the existing harness.test.ts demo.
+const GreetInput = z.object({ who: z.string() });
+const GreetedEvent = defineEvent({
+    name: "ext-demo.greeted",
+    schema: z.object({ who: z.string() }),
+});
+const Greeted = forge.eventFactory(GreetedEvent);
+let lastUser = undefined;
+const greet = forge.defineAction({
+    name: "ext-demo.greet",
+    schema: GreetInput,
+    emits: [GreetedEvent],
+    handler: async (input, ctx) => {
+        lastUser = ctx.envelope.user;
+        return Greeted({ who: input.who });
+    },
+});
+const demoModule = forge.defineModule("ext-demo", {
+    actions: [greet],
+    events: [GreetedEvent],
+});
+const demoApp = forge.defineApp("ext-demo", { modules: [demoModule] });
+describe("harness extensions", () => {
+    describe("asUser", () => {
+        it("pins envelope.user on subsequent dispatches", async () => {
+            const h = await harness({ app: demoApp });
+            try {
+                lastUser = undefined;
+                const alex = { id: "u-alex", roles: ["admin"], tenant: "t-1" };
+                await asUser(h, alex).dispatch(greet, { who: "Alice" });
+                await h.idle();
+                expect(lastUser).toEqual(alex);
+            }
+            finally {
+                await h.stop();
+            }
+        });
+    });
+    describe("simulateRequest", () => {
+        it("runs a POST through a wired httpInterface", async () => {
+            // A standalone http() app — no Nwire app needed. simulateRequest
+            // doesn't depend on the harness; the api param carries the
+            // wired Koa instance. We pass `null` for the harness in the
+            // helper signature (helper ignores it for the standalone path).
+            const api = httpInterface().wire(post("/echo", { body: z.object({ msg: z.string() }) }), async ({ input }) => ({ echoed: input.msg }));
+            const koaApp = api.toKoa();
+            const res = await simulateRequest(koaApp, {
+                method: "POST",
+                path: "/echo",
+                body: { msg: "hi" },
+                headers: { "content-type": "application/json" },
+            });
+            expect(res.status).toBe(200);
+            expect(res.body).toEqual({ echoed: "hi" });
+        });
+    });
+    describe("checkPolicy", () => {
+        it("returns can/cannot for a CASL-shaped ability factory", async () => {
+            // Inline ability factory mimicking @nwire/rbac's defineAbility
+            // shape — { can(action, subj), cannot, relevantRuleFor }. Keeps
+            // the test self-contained without pulling in CASL.
+            const buildAbility = (user) => {
+                const isAdmin = user?.roles?.includes("admin") ?? false;
+                return {
+                    can: (action) => isAdmin || action === "read",
+                    cannot: (action) => !(isAdmin || action === "read"),
+                    relevantRuleFor: () => ({ reason: "role required" }),
+                };
+            };
+            const admin = await checkPolicy(buildAbility, { id: "a", roles: ["admin"] }, "delete");
+            expect(admin).toEqual({ can: true });
+            const guest = await checkPolicy(buildAbility, { id: "g" }, "delete");
+            expect(guest.can).toBe(false);
+            expect(guest.reason).toBe("role required");
+        });
+    });
+    describe("onLog", () => {
+        it("invokes the tap for every logger call and unsubscribes cleanly", async () => {
+            // Inject our own captured logger so we can prove the wrapper
+            // forwards calls AND fires the tap.
+            const sink = [];
+            const capture = {
+                debug: (m) => sink.push({ level: "debug", message: m }),
+                info: (m) => sink.push({ level: "info", message: m }),
+                warn: (m) => sink.push({ level: "warn", message: m }),
+                error: (m) => sink.push({ level: "error", message: m }),
+                child: () => capture,
+            };
+            const h = await harness({ app: demoApp, providers: { logger: capture } });
+            try {
+                const tapped = [];
+                const off = onLog(h, (entry) => tapped.push({ level: entry.level, message: entry.message }));
+                // Drive logger calls directly through the runtime's logger so
+                // we don't have to reason about which dispatch sites log what.
+                const runtime = h.app.runtime;
+                runtime.logger.warn("watch out", { foo: 1 });
+                runtime.logger.info("hello");
+                expect(tapped).toEqual([
+                    { level: "warn", message: "watch out" },
+                    { level: "info", message: "hello" },
+                ]);
+                // Inner logger still received the calls.
+                expect(sink.find((e) => e.message === "watch out")).toBeDefined();
+                // After unsubscribe, the tap stops firing.
+                off();
+                runtime.logger.error("post-unsub");
+                expect(tapped.find((e) => e.message === "post-unsub")).toBeUndefined();
+            }
+            finally {
+                await h.stop();
+            }
+        });
+    });
+});
+//# sourceMappingURL=harness-extensions.test.js.map

package/dist/__tests__/harness-extensions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-extensions.test.js","sourceRoot":"","sources":["../../src/__tests__/harness-extensions.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAEpF,sEAAsE;AACtE,sEAAsE;AACtE,qEAAqE;AACrE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjD,MAAM,YAAY,GAAG,WAAW,CAAC;IAC/B,IAAI,EAAE,kBAAkB;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACtC,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;AAEjD,IAAI,QAAQ,GAAY,SAAS,CAAC;AAClC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;IAC/B,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,CAAC,YAAY,CAAC;IACrB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC7B,OAAO,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE;IAChD,OAAO,EAAE,CAAC,KAAK,CAAC;IAChB,MAAM,EAAE,CAAC,YAAY,CAAC;CACvB,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAEvE,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC;gBACH,QAAQ,GAAG,SAAS,CAAC;gBACrB,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAW,CAAC;gBACxE,MAAM,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBACxD,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,iEAAiE;YACjE,2DAA2D;YAC3D,4DAA4D;YAC5D,gEAAgE;YAChE,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC,IAAI,CAC9B,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EACtD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAG,KAAyB,CAAC,GAAG,EAAE,CAAC,CAClE,CAAC;YACF,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE;gBACxC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;gBACnB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,+DAA+D;YAC/D,gEAAgE;YAChE,mDAAmD;YACnD,MAAM,YAAY,GAAG,CAAC,IAA0C,EAAE,EAAE;gBAClE,MAAM,OAAO,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;gBACxD,OAAO;oBACL,GAAG,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,OAAO,IAAI,MAAM,KAAK,MAAM;oBACrD,MAAM,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC;oBAC3D,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;iBACrD,CAAC;YACJ,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACvF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAErC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;YACrE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,6DAA6D;YAC7D,oCAAoC;YACpC,MAAM,IAAI,GAA8C,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAW;gBACtB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;gBACvD,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;gBACrD,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;gBACrD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;gBACvD,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO;aACrB,CAAC;YACF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC;gBACH,MAAM,MAAM,GAA8C,EAAE,CAAC;gBAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAC;gBAEF,8DAA8D;gBAC9D,+DAA+D;gBAC/D,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAwC,CAAC;gBAC/D,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC7C,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAE7B,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;oBACrB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE;oBACvC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;iBACpC,CAAC,CAAC;gBACH,yCAAyC;gBACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBAElE,2CAA2C;gBAC3C,GAAG,EAAE,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YACzE,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/harness.test.js

@@ -6,7 +6,7 @@ import { describe, it, expect } from "vitest";
 import { z } from "zod";
 import * as forge from "@nwire/forge";
 import { defineEvent } from "@nwire/messages";
-import { harness } from "../harness";
+import { harness } from "../harness.js";
 const GreetInput = z.object({ who: z.string() });
 const GreetedEvent = defineEvent({
     name: "demo.greeted",

package/dist/bdd.d.ts

@@ -24,7 +24,7 @@
  * The wrapper is intentionally tiny — we pass through to the real Gherkin
  * runner. `@amiceli/vitest-cucumber` is a peerDependency.
  */
-import type { Harness } from "./harness";
+import type { Harness } from "./harness.js";
 export interface BddContext {
     /** Filled in by the user's background step. */
     harness?: Harness;

package/dist/harness-extensions.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Harness extensions — four ergonomic helpers layered on `harness()` for
+ * integration tests:
+ *
+ *   - `asUser(user)` — pins envelope.user for every dispatch/query in a
+ *     scoped proxy. Use to test "logged in as X" flows without re-stitching
+ *     envelopes by hand.
+ *   - `simulateRequest(req)` — runs a request through a wired Koa app as
+ *     if it came over HTTP. Wraps supertest so callers don't need to know
+ *     which agent helper to import.
+ *   - `checkPolicy(user, action, subject?)` — wraps `@nwire/rbac`'s
+ *     `defineAbility` result for assert-style policy tests.
+ *   - `onLog(handler)` — taps every `logger.{info,warn,error,debug}` call
+ *     made by the runtime. Lets a test assert "warned about X" without
+ *     swapping in a fake logger.
+ *
+ * These helpers are additive — the base `Harness` interface is unchanged.
+ * They live in a separate file so the in-memory `harness` core stays small
+ * and the optional deps (`@nwire/auth`, `@nwire/rbac`, `koa`) stay opt-in.
+ */
+import type { ActionDefinition } from "@nwire/forge";
+import type { ZodTypeAny } from "@nwire/messages";
+import type { z } from "zod";
+import type { Harness } from "./harness.js";
+export interface UserLike {
+    readonly id: string;
+    readonly email?: string;
+    readonly name?: string;
+    readonly roles?: readonly string[];
+    readonly scopes?: readonly string[];
+    readonly tenant?: string;
+}
+/**
+ * Subset of `Harness` returned by `asUser()`. Same `dispatch` / `query`
+ * shape, but with the pinned user threaded through every call. Other
+ * surface (telemetry, idle, stop) stays on the original harness — the
+ * scoped proxy is intentionally narrow.
+ */
+export interface ScopedHarness {
+    dispatch<TSchema extends ZodTypeAny>(action: ActionDefinition<TSchema>, input: z.input<TSchema>, envelope?: {
+        tenant?: string;
+        correlationId?: string;
+    }): Promise<unknown>;
+    query<TResult = unknown>(queryDef: {
+        readonly name: string;
+    }, input: unknown, tenant?: string): Promise<TResult>;
+}
+/**
+ * Return a thin proxy that pins `envelope.user` (and `envelope.userId`,
+ * `envelope.tenant` derived from the user) on every dispatch/query.
+ * Pass `undefined` to clear — the returned proxy is then anonymous.
+ *
+ *   await harness.asUser({ id: "u1", roles: ["admin"] }).dispatch(...)
+ */
+export declare function asUser(harness: Harness, user: UserLike | undefined): ScopedHarness;
+export interface SimulatedRequest {
+    readonly method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+    readonly path: string;
+    readonly body?: unknown;
+    readonly headers?: Record<string, string>;
+}
+export interface SimulatedResponse {
+    readonly status: number;
+    readonly body: unknown;
+    readonly headers: Record<string, string>;
+}
+/**
+ * Run a request through a Koa app as if it came over HTTP. The harness
+ * doesn't boot a Koa app on its own (the in-process runtime has no HTTP
+ * surface), so callers pass the wired Koa instance explicitly. Returns a
+ * minimal `{ status, body, headers }` triple so test code doesn't have to
+ * know the supertest API.
+ */
+export declare function simulateRequest(app: any, req: SimulatedRequest): Promise<SimulatedResponse>;
+export interface PolicyCheck {
+    readonly can: boolean;
+    readonly reason?: string;
+}
+/**
+ * Build a CASL Ability for `user` via the supplied `buildAbility` factory
+ * and run a `can(action, subject?)` check. Returns `{ can, reason? }` —
+ * `reason` carries the CASL rule message when access is denied.
+ *
+ * Requires `@nwire/rbac` to be available. We `await import()` it instead
+ * of declaring a hard dep so test-kit doesn't force a CASL install on
+ * users who don't run RBAC tests.
+ */
+export declare function checkPolicy(buildAbility: (user: UserLike | null) => {
+    can(action: string, subject?: unknown): boolean;
+    cannot(action: string, subject?: unknown): boolean;
+    relevantRuleFor?(action: string, subject?: unknown): {
+        reason?: string;
+    } | null;
+}, user: UserLike | null, action: string, subject?: unknown): Promise<PolicyCheck>;
+export type LogLevel = "debug" | "info" | "warn" | "error";
+export interface LogEntry {
+    readonly level: LogLevel;
+    readonly message: string;
+    readonly fields?: Record<string, unknown>;
+}
+/**
+ * Tap every log call made through the harness's logger. Returns an
+ * unsubscribe function. The tap wraps `harness.app.runtime.logger` —
+ * `child()` calls inherit the tap so envelope-scoped loggers fire it too.
+ *
+ * This mutates the runtime's logger reference in place (test-only). Call
+ * the returned function to restore the original logger.
+ */
+export declare function onLog(harness: Harness, handler: (entry: LogEntry) => void): () => void;
+//# sourceMappingURL=harness-extensions.d.ts.map

package/dist/harness-extensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-extensions.d.ts","sourceRoot":"","sources":["../src/harness-extensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,SAAS,UAAU,EACjC,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,EACjC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EACvB,QAAQ,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GACrD,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,KAAK,CAAC,OAAO,GAAG,OAAO,EACrB,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EACnC,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,aAAa,CA0BlF;AAID,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAEnC,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,iBAAiB,CAAC,CA2B5B;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,YAAY,EAAE,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,KAAK;IACvC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAChD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IACnD,eAAe,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACjF,EACD,IAAI,EAAE,QAAQ,GAAG,IAAI,EACrB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,WAAW,CAAC,CAetB;AAID,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,wBAAgB,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,MAAM,IAAI,CAWtF"}

package/dist/harness-extensions.js

@@ -0,0 +1,148 @@
+/**
+ * Harness extensions — four ergonomic helpers layered on `harness()` for
+ * integration tests:
+ *
+ *   - `asUser(user)` — pins envelope.user for every dispatch/query in a
+ *     scoped proxy. Use to test "logged in as X" flows without re-stitching
+ *     envelopes by hand.
+ *   - `simulateRequest(req)` — runs a request through a wired Koa app as
+ *     if it came over HTTP. Wraps supertest so callers don't need to know
+ *     which agent helper to import.
+ *   - `checkPolicy(user, action, subject?)` — wraps `@nwire/rbac`'s
+ *     `defineAbility` result for assert-style policy tests.
+ *   - `onLog(handler)` — taps every `logger.{info,warn,error,debug}` call
+ *     made by the runtime. Lets a test assert "warned about X" without
+ *     swapping in a fake logger.
+ *
+ * These helpers are additive — the base `Harness` interface is unchanged.
+ * They live in a separate file so the in-memory `harness` core stays small
+ * and the optional deps (`@nwire/auth`, `@nwire/rbac`, `koa`) stay opt-in.
+ */
+import supertest from "supertest";
+/**
+ * Return a thin proxy that pins `envelope.user` (and `envelope.userId`,
+ * `envelope.tenant` derived from the user) on every dispatch/query.
+ * Pass `undefined` to clear — the returned proxy is then anonymous.
+ *
+ *   await harness.asUser({ id: "u1", roles: ["admin"] }).dispatch(...)
+ */
+export function asUser(harness, user) {
+    // Direct runtime access — the public Harness.dispatch path only accepts
+    // tenant/userId/correlationId on its envelope arg. We need to seed
+    // `user` too, which is on MessageEnvelope but not on the public dispatch
+    // overload. Going through runtime.dispatch with a hand-seeded envelope
+    // keeps the type contract honest without widening the public Harness API.
+    const runtime = harness.app.runtime;
+    return {
+        async dispatch(action, input, envelope) {
+            if (!user)
+                return runtime.dispatch(action, input);
+            const { seedEnvelope } = await import("@nwire/envelope");
+            const seeded = seedEnvelope({
+                tenant: envelope?.tenant ?? user.tenant,
+                userId: user.id,
+                user,
+                correlationId: envelope?.correlationId,
+            });
+            return runtime.dispatch(action, input, seeded);
+        },
+        async query(queryDef, input, tenant) {
+            // Queries don't carry an envelope today — pass the user's tenant if
+            // the caller didn't override. Once queries gain envelope support,
+            // user pinning flows through here automatically.
+            return runtime.query(queryDef.name, input, tenant ?? user?.tenant ?? "");
+        },
+    };
+}
+/**
+ * Run a request through a Koa app as if it came over HTTP. The harness
+ * doesn't boot a Koa app on its own (the in-process runtime has no HTTP
+ * surface), so callers pass the wired Koa instance explicitly. Returns a
+ * minimal `{ status, body, headers }` triple so test code doesn't have to
+ * know the supertest API.
+ */
+export async function simulateRequest(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+app, req) {
+    if (!app) {
+        throw new Error("simulateRequest: pass a wired Koa app instance as the first argument — " +
+            "the harness's in-process runtime has no HTTP surface.");
+    }
+    // Accept either a raw Koa instance (has .callback) or a pre-built agent.
+    const agent = typeof app.callback === "function"
+        ? supertest(app.callback())
+        : app;
+    const method = req.method.toLowerCase();
+    let request = agent[method](req.path);
+    for (const [key, value] of Object.entries(req.headers ?? {})) {
+        request = request.set(key, value);
+    }
+    if (req.body !== undefined)
+        request = request.send(req.body);
+    const res = await request;
+    return {
+        status: res.status,
+        body: res.body,
+        headers: res.headers,
+    };
+}
+/**
+ * Build a CASL Ability for `user` via the supplied `buildAbility` factory
+ * and run a `can(action, subject?)` check. Returns `{ can, reason? }` —
+ * `reason` carries the CASL rule message when access is denied.
+ *
+ * Requires `@nwire/rbac` to be available. We `await import()` it instead
+ * of declaring a hard dep so test-kit doesn't force a CASL install on
+ * users who don't run RBAC tests.
+ */
+export async function checkPolicy(buildAbility, user, action, subject) {
+    try {
+        const ability = buildAbility(user);
+        const can = subject !== undefined ? ability.can(action, subject) : ability.can(action);
+        if (can)
+            return { can: true };
+        const rule = typeof ability.relevantRuleFor === "function"
+            ? ability.relevantRuleFor(action, subject)
+            : null;
+        return { can: false, reason: rule?.reason ?? `denied: ${action}` };
+    }
+    catch (err) {
+        throw new Error(`checkPolicy: buildAbility threw — ensure @nwire/rbac is installed and the factory is valid (${err.message})`);
+    }
+}
+/**
+ * Tap every log call made through the harness's logger. Returns an
+ * unsubscribe function. The tap wraps `harness.app.runtime.logger` —
+ * `child()` calls inherit the tap so envelope-scoped loggers fire it too.
+ *
+ * This mutates the runtime's logger reference in place (test-only). Call
+ * the returned function to restore the original logger.
+ */
+export function onLog(harness, handler) {
+    // We monkey-patch the logger on the runtime so every existing reference
+    // (envelope-scoped child loggers already handed out) sees the tap too.
+    // The wrapper preserves the original behavior and forwards calls.
+    const runtime = harness.app.runtime;
+    const original = runtime.logger;
+    const wrapped = wrapLogger(original, handler);
+    runtime.logger = wrapped;
+    return () => {
+        runtime.logger = original;
+    };
+}
+function wrapLogger(inner, handler) {
+    const wrap = (level) => function (message, fields) {
+        handler({ level, message, fields });
+        inner[level](message, fields);
+    };
+    return {
+        debug: wrap("debug"),
+        info: wrap("info"),
+        warn: wrap("warn"),
+        error: wrap("error"),
+        child(bindings) {
+            return wrapLogger(inner.child(bindings), handler);
+        },
+    };
+}
+//# sourceMappingURL=harness-extensions.js.map

package/dist/harness-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-extensions.js","sourceRoot":"","sources":["../src/harness-extensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,SAAS,MAAM,WAAW,CAAC;AA4ClC;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,OAAgB,EAAE,IAA0B;IACjE,wEAAwE;IACxE,mEAAmE;IACnE,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IACpC,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ;YACpC,IAAI,CAAC,IAAI;gBAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAc,CAAC,CAAC;YAC3D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,YAAY,CAAC;gBAC1B,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBACvC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,IAAI;gBACJ,aAAa,EAAE,QAAQ,EAAE,aAAa;aACvC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAc,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM;YACjC,oEAAoE;YACpE,kEAAkE;YAClE,iDAAiD;YACjD,OAAO,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC;AAiBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;AACnC,8DAA8D;AAC9D,GAAQ,EACR,GAAqB;IAErB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,yEAAyE;YACvE,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,MAAM,KAAK,GACT,OAAQ,GAAoC,CAAC,QAAQ,KAAK,UAAU;QAClE,CAAC,CAAC,SAAS,CACN,GAAmC,CAAC,QAAQ,EAAqC,CACnF;QACH,CAAC,CAAE,GAAa,CAAC;IAErB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAA2C,CAAC;IACjF,IAAI,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7D,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAc,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;IAC1B,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAiC;KAC/C,CAAC;AACJ,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,YAIC,EACD,IAAqB,EACrB,MAAc,EACd,OAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvF,IAAI,GAAG;YAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GACR,OAAO,OAAO,CAAC,eAAe,KAAK,UAAU;YAC3C,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC;YAC1C,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,WAAW,MAAM,EAAE,EAAE,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,+FAAgG,GAAa,CAAC,OAAO,GAAG,CACzH,CAAC;IACJ,CAAC;AACH,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,UAAU,KAAK,CAAC,OAAgB,EAAE,OAAkC;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAwC,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAChC,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;IACzB,OAAO,GAAG,EAAE;QACV,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,OAAkC;IACnE,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,EAAE,CAC/B,UAAwB,OAAe,EAAE,MAAgC;QACvE,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC;IACJ,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;QACpB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;QACpB,KAAK,CAAC,QAAiC;YACrC,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/harness.d.ts

@@ -14,7 +14,7 @@
 import type { AppDefinition, ActionDefinition, CreateAppOptions } from "@nwire/forge";
 import type { z } from "zod";
 import type { ZodTypeAny } from "@nwire/messages";
-import { TelemetryProbe } from "./telemetry-probe";
+import { TelemetryProbe } from "./telemetry-probe.js";
 export interface HarnessOptions {
     /** AppDefinition to boot. */
     readonly app: AppDefinition;

package/dist/harness.js

@@ -11,7 +11,7 @@
  * Uses in-memory adapters by default. Pass `providers` to swap in real
  * stores / buses / queues for integration testing.
  */
-import { TelemetryProbe } from "./telemetry-probe";
+import { TelemetryProbe } from "./telemetry-probe.js";
 export async function harness(options) {
     const app = options.app.create(options.providers ?? {});
     const probe = new TelemetryProbe();

package/dist/harness.js.map

@@ -1 +1 @@
-{"version":3,"file":"harness.js","sourceRoot":"","sources":["../src/harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA6CnD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAuB;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,cAAc,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAc,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAElB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;QAC3B,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG;QACH,SAAS,EAAE,KAAK;QAChB,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ;YACpC,OAAO,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,uEAAuE;gBACvE,iEAAiE;gBACjE,wEAAwE;gBACxE,6DAA6D;gBAC7D,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;oBACzD,MAAM,MAAM,GAAG,YAAY,CAAC;wBAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,aAAa,EAAE,QAAQ,CAAC,aAAa;qBACtC,CAAC,CAAC;oBACH,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnD,CAAC;oBAAS,CAAC;gBACT,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE;YACtC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,EAAE,SAAS,GAAG,IAAI;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC7B,IAAI,OAAO,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,GAAG,OAAO;oBAAE,OAAO;gBACjE,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gDAAgD,SAAS,eAAe,OAAO,GAAG,CACnF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI;YACR,WAAW,EAAE,CAAC;YACd,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../src/harness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA6CnD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAuB;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,cAAc,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAc,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAElB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;QAC3B,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,GAAG;QACH,SAAS,EAAE,KAAK;QAChB,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ;YACpC,OAAO,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,uEAAuE;gBACvE,iEAAiE;gBACjE,wEAAwE;gBACxE,6DAA6D;gBAC7D,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;oBACzD,MAAM,MAAM,GAAG,YAAY,CAAC;wBAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,aAAa,EAAE,QAAQ,CAAC,aAAa;qBACtC,CAAC,CAAC;oBACH,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAc,EAAE,MAAM,CAAC,CAAC;gBACpE,CAAC;gBACD,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAc,CAAC,CAAC;YAC5D,CAAC;oBAAS,CAAC;gBACT,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE;YACtC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,EAAE,SAAS,GAAG,IAAI;YACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC7B,IAAI,OAAO,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,GAAG,OAAO;oBAAE,OAAO;gBACjE,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gDAAgD,SAAS,eAAe,OAAO,GAAG,CACnF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI;YACR,WAAW,EAAE,CAAC;YACd,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/test-kit.d.ts

@@ -15,11 +15,12 @@
  *
  * Plus existing helpers: zod fixture factory, supertest agent.
  */
-export { harness, type Harness, type HarnessOptions } from "./harness";
-export { TelemetryProbe, type TelemetryFilter } from "./telemetry-probe";
-export { dockerCompose, PRESETS as DOCKER_COMPOSE_PRESETS, type ComposeStack, type ComposePreset, } from "./docker-compose";
-export { isReachable } from "./is-reachable";
-export { feature, type BddContext } from "./bdd";
-export { factory, sequence, type Factory, type SequenceCounter } from "./zod-fixture-factory";
-export { createTestApp, bootTestApp, type BootedTestApp } from "./supertest-app-helper";
+export { harness, type Harness, type HarnessOptions } from "./harness.js";
+export { asUser, simulateRequest, checkPolicy, onLog, type UserLike, type ScopedHarness, type SimulatedRequest, type SimulatedResponse, type PolicyCheck, type LogLevel, type LogEntry, } from "./harness-extensions.js";
+export { TelemetryProbe, type TelemetryFilter } from "./telemetry-probe.js";
+export { dockerCompose, PRESETS as DOCKER_COMPOSE_PRESETS, type ComposeStack, type ComposePreset, } from "./docker-compose.js";
+export { isReachable } from "./is-reachable.js";
+export { feature, type BddContext } from "./bdd.js";
+export { factory, sequence, type Factory, type SequenceCounter } from "./zod-fixture-factory.js";
+export { createTestApp, bootTestApp, type BootedTestApp } from "./supertest-app-helper.js";
 //# sourceMappingURL=test-kit.d.ts.map

package/dist/test-kit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test-kit.d.ts","sourceRoot":"","sources":["../src/test-kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,aAAa,EACb,OAAO,IAAI,sBAAsB,EACjC,KAAK,YAAY,EACjB,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC;AAGjD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"test-kit.d.ts","sourceRoot":"","sources":["../src/test-kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,EACL,MAAM,EACN,eAAe,EACf,WAAW,EACX,KAAK,EACL,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,QAAQ,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,aAAa,EACb,OAAO,IAAI,sBAAsB,EACjC,KAAK,YAAY,EACjB,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC;AAGjD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/test-kit.js

@@ -15,12 +15,13 @@
  *
  * Plus existing helpers: zod fixture factory, supertest agent.
  */
-export { harness } from "./harness";
-export { TelemetryProbe } from "./telemetry-probe";
-export { dockerCompose, PRESETS as DOCKER_COMPOSE_PRESETS, } from "./docker-compose";
-export { isReachable } from "./is-reachable";
-export { feature } from "./bdd";
+export { harness } from "./harness.js";
+export { asUser, simulateRequest, checkPolicy, onLog, } from "./harness-extensions.js";
+export { TelemetryProbe } from "./telemetry-probe.js";
+export { dockerCompose, PRESETS as DOCKER_COMPOSE_PRESETS, } from "./docker-compose.js";
+export { isReachable } from "./is-reachable.js";
+export { feature } from "./bdd.js";
 // Pre-existing helpers
-export { factory, sequence } from "./zod-fixture-factory";
-export { createTestApp, bootTestApp } from "./supertest-app-helper";
+export { factory, sequence } from "./zod-fixture-factory.js";
+export { createTestApp, bootTestApp } from "./supertest-app-helper.js";
 //# sourceMappingURL=test-kit.js.map

package/dist/test-kit.js.map

@@ -1 +1 @@
-{"version":3,"file":"test-kit.js","sourceRoot":"","sources":["../src/test-kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAqC,MAAM,WAAW,CAAC;AACvE,OAAO,EAAE,cAAc,EAAwB,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,aAAa,EACb,OAAO,IAAI,sBAAsB,GAGlC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAmB,MAAM,OAAO,CAAC;AAEjD,uBAAuB;AACvB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAsC,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,WAAW,EAAsB,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"test-kit.js","sourceRoot":"","sources":["../src/test-kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAqC,MAAM,WAAW,CAAC;AACvE,OAAO,EACL,MAAM,EACN,eAAe,EACf,WAAW,EACX,KAAK,GAQN,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAwB,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,aAAa,EACb,OAAO,IAAI,sBAAsB,GAGlC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAmB,MAAM,OAAO,CAAC;AAEjD,uBAAuB;AACvB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAsC,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,WAAW,EAAsB,MAAM,wBAAwB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nwire/test-kit",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Shared test helpers and zod-driven fixture factories",
   "keywords": [
     "fixtures",
@@ -28,15 +28,17 @@
   "dependencies": {
     "supertest": "^7.2.2",
     "zod": "^4.0.0",
-    "@nwire/envelope": "0.8.0",
-    "@nwire/forge": "0.8.0",
-    "@nwire/messages": "0.8.0"
+    "@nwire/forge": "0.9.0",
+    "@nwire/messages": "0.8.17",
+    "@nwire/envelope": "0.8.17",
+    "@nwire/logger": "0.8.17"
   },
   "devDependencies": {
     "@types/koa": "^2.15.0",
     "@types/node": "^22.19.9",
     "@types/supertest": "^6.0.3",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "@nwire/http": "0.9.0"
   },
   "peerDependencies": {
     "@amiceli/vitest-cucumber": "^4.0.0",
@@ -51,7 +53,7 @@
     }
   },
   "scripts": {
-    "build": "tsc",
+    "build": "tsc && node ../../scripts/fix-dist-extensions.mjs dist",
     "dev": "tsc --watch",
     "typecheck": "tsc --noEmit"
   }