@o3co/create-auth-provider 0.16.0 → 0.17.0-rc.1

package/templates/standalone/src/__tests__/all-modules-composition.multi.test.mts

@@ -16,20 +16,17 @@
 
 /**
  * The all-modules composition of `all-modules-composition.test.mts` on more
- * than one replica: every shared store on Redis, `deployment.mode = "multi"`,
+ * than one replica: every shared store on Redis, `core.deployment.mode = "multi"`,
  * every module the template can turn on switched on together.
  *
- * What it holds: the replica-safety declarations hold with every module on —
- * the all-Redis composition boots with nothing declaring replica-unsafe state,
- * and each store switched back to memory is refused at boot, naming the
- * module — and the Redis adapters change nothing a client can see: the same
- * routes, the same discovery document as on one replica.
+ * With every module on, the all-Redis composition boots with nothing declaring
+ * replica-unsafe state, and each store switched back to memory is refused at
+ * boot, naming the module. The Redis adapters change nothing a client can
+ * see: the same routes, the same discovery document as on one replica.
  *
  * ioredis, node-redis and connect-redis are stand-ins, as in
- * `replica-safety.test.mts`: what is under test is the composition and the
- * boot's verdict, and nothing here issues a command. The template has no
- * Redis server to run against — `packages/redis` runs its adapters against
- * one.
+ * `replica-safety.test.mts`: nothing here issues a command. `packages/redis`
+ * runs its adapters against a real server.
  */
 
 import { type Module, replicaUnsafeReason } from "@o3co/auth-provider-core";
@@ -110,7 +107,7 @@ const MULTI = { env: MULTI_ENV, shippedRefreshTokenFamilyStore: true } as const;
 
 /** What `buildModules` lists with every switch on and every shared store on Redis. */
 const ALL_ON_REDIS_MODULES = [
-	"sessionStoreModule",
+	"session-store",
 	"federation-grant-background",
 	"federation-grants",
 	"oauth",
@@ -118,18 +115,21 @@ const ALL_ON_REDIS_MODULES = [
 	"oauth-authorization",
 	"jwks",
 	"session",
-	"federation:google",
-	"standalone:google-federation-config",
-	"standalone:oidc-federation-config",
-	"federation:oidc:oidc",
-	"standalone:key-store",
+	"federation-google",
+	"google-federation-config",
+	"oidc-federation-config",
+	"federation-oidc-oidc",
+	"logging",
+	"http",
+	"key-store",
 	"test:repositories",
-	"standalone:audit-sink",
-	"standalone:redis-clients",
+	"audit-sink",
+	"standard-smtp-mail-sender",
+	"redis-clients",
 	"redis-federation-token-store",
 	"redis-federation-grant-store",
 	"redis-federation-grant-intent-store",
-	"redisSessionStores",
+	"redis-session-stores",
 	"redis-rate-limiter",
 	"redis-code-repository",
 	"redis-access-token-denylist",
@@ -141,7 +141,7 @@ const ALL_ON_REDIS_MODULES = [
 	"subject-revocation-service",
 ];
 
-describe('every module on, every shared store on Redis, deployment.mode = "multi"', () => {
+describe('every module on, every shared store on Redis, core.deployment.mode = "multi"', () => {
 	it("lists every module, none declaring replica-unsafe state, and boots", async () => {
 		const modules = composedModules(resolveConfig(MULTI_ENV), MULTI);
 		expect(modules.map((m) => m.name)).toEqual(ALL_ON_REDIS_MODULES);
@@ -166,21 +166,36 @@ describe('every module on, every shared store on Redis, deployment.mode = "multi
 		expect(discovery.body).toEqual(single.discovery);
 	});
 
+	it("boots as multi on CORE_DEPLOYMENT_MODE=multi alone", async () => {
+		expect(MULTI_ENV).toMatchObject({ CORE_DEPLOYMENT_MODE: "multi" });
+		expect(MULTI_ENV).not.toHaveProperty("DEPLOYMENT_MODE");
+		current = await compose(MULTI);
+		expect(current.handle.components.deploymentMode).toBe("multi");
+	});
+
+	it("boots as multi on DEPLOYMENT_MODE=multi beside CORE_DEPLOYMENT_MODE=multi, as the umbrella sets them", async () => {
+		current = await compose({
+			...MULTI,
+			env: { ...MULTI_ENV, DEPLOYMENT_MODE: "multi", CORE_DEPLOYMENT_MODE: "multi" },
+		});
+		expect(current.handle.components.deploymentMode).toBe("multi");
+	});
+
 	/**
 	 * Each store's switch back to memory, alone, with every module on. The
 	 * boot names the module that declared the state it would fork.
 	 */
 	const MEMORY_SWITCHES: ReadonlyArray<readonly [variable: string, module: string]> = [
-		["SESSION_STORAGE_TYPE", "sessionStoreModule"],
-		["USER_SESSION_STORES_ADAPTER", "standalone:in-memory-session-stores"],
-		["OAUTH_CODE_ADAPTER", "standalone:in-memory-code-repository"],
-		["FEDERATION_TOKEN_STORE_TYPE", "standalone:in-memory-federation-token-store"],
-		["RATE_LIMITER_ADAPTER", "core-rate-limiter-memory"],
-		["ACCESS_TOKEN_DENYLIST_ADAPTER", "core-access-token-denylist-memory"],
-		["REPLAY_SEEN_SET_ADAPTER", "core-replay-seen-set-memory"],
-		["CONSENT_STORE_ADAPTER", "core-consent-store-memory"],
-		["FEDERATION_GRANT_STORE_ADAPTER", "core-federation-grant-store-memory"],
-		["FEDERATION_GRANT_INTENT_STORE_ADAPTER", "core-federation-grant-intent-store-memory"],
+		["SESSION_STORE_STORAGE_TYPE", "session-store"],
+		["ADAPTERS_USER_SESSION_STORES", "standalone-in-memory-session-stores"],
+		["ADAPTERS_CODE_REPOSITORY", "standalone-in-memory-code-repository"],
+		["ADAPTERS_FEDERATION_TOKEN_STORE", "standalone-in-memory-federation-token-store"],
+		["ADAPTERS_RATE_LIMITER", "core-rate-limiter-memory"],
+		["ADAPTERS_ACCESS_TOKEN_DENYLIST", "core-access-token-denylist-memory"],
+		["ADAPTERS_REPLAY_SEEN_SET", "core-replay-seen-set-memory"],
+		["ADAPTERS_CONSENT_STORE", "core-consent-store-memory"],
+		["ADAPTERS_FEDERATION_GRANT_STORE", "core-federation-grant-store-memory"],
+		["ADAPTERS_FEDERATION_GRANT_INTENT_STORE", "core-federation-grant-intent-store-memory"],
 	];
 
 	it.each(MEMORY_SWITCHES)("%s=memory is refused at boot, naming %s", async (variable, module) => {
@@ -212,8 +227,8 @@ describe("the shared Redis socket can back every store the Redis package ships",
 	 * the others to the manifest with the modules that read them (the device
 	 * grant's code store, WebAuthn's challenge store), and each requires its
 	 * client from this module. One it does not provide is a boot refused with
-	 * `missing-required-component` — the #439 shape, which `modules.mts`
-	 * guards against for the device-code store by name.
+	 * `missing-required-component`, which `modules.mts` guards against for
+	 * the device-code store by name.
 	 */
 	const storeModules: Module[] = Object.entries(redisPackage).flatMap(([name, value]) => {
 		if (name.endsWith("ModuleFor") && typeof value === "function") {
@@ -226,7 +241,7 @@ describe("the shared Redis socket can back every store the Redis package ships",
 	});
 
 	it.each(storeModules.map((m) => [m.name, m] as const))(
-		"%s: its client slot is provided by standalone:redis-clients",
+		"%s: its client slot is provided by redis-clients",
 		(_name, module) => {
 			const provided = Object.keys(standaloneRedisClientsModule.provides ?? {});
 			const clients = (module.requires ?? []).filter((slot) => String(slot).endsWith("Client"));

package/templates/standalone/src/__tests__/all-modules-composition.test.mts

@@ -16,34 +16,29 @@
 
 /**
  * Every module this template can turn on, booted together on one replica
- * through the real composition — the shipped HOCON, `buildModules`, core's
- * `createApp`, mounted as `app.mts` mounts it — and held to the contracts that
- * exist only when the modules meet: one discovery document that tells the
- * truth about every grant and endpoint, every module's route answering in the
- * same app, each module's body rules surviving its neighbours in either mount
- * order, and a store outage answered 503 and logged once.
- *
- * Each package's own suite boots that package alone or against stand-ins, and
- * the defects this file exists for were invisible there: a discovery document
- * made invalid by a neighbour's contribution, a disabled grant still
- * advertised, one module's prefix parser setting another's body limit, a
- * content-type rule that held in one mount order only. See
- * `all-modules-composition.fixture.mts` for what is real and what is
- * substituted, and `all-modules-composition.multi.test.mts` for the same
- * composition on Redis under `deployment.mode = "multi"`.
+ * through the real composition (the shipped HOCON, `buildModules`, core's
+ * `createApp`, mounted as `app.mts` mounts it), and held to the contracts that
+ * exist only when the modules meet, which no package's own suite can see: one
+ * discovery document that tells the truth about every grant and endpoint,
+ * every module's route answering in the same app, each module's body rules
+ * surviving its neighbours in either mount order, and a store outage answered
+ * 503 and logged once. The fixture file says what is real and what is
+ * substituted; `all-modules-composition.multi.test.mts` boots the same
+ * composition on Redis under `core.deployment.mode = "multi"`.
  *
  * `knownDefect` marks a contract the composition breaks today; its comment
  * names the defect. In the monorepo it is `it.fails`: the fix that mends the
  * defect turns the case red, and turns it into a plain `it`. An outage case
- * pins only the part of the #685 rule that is broken, and asserts the rest
+ * pins only the part of the outage rule that is broken, and asserts the rest
  * (`describeOutages` in the fixture).
  */
 
 import { readdirSync, readFileSync } from "node:fs";
-import type { AppConfig } from "@o3co/auth-provider-core";
+import { federationsOf } from "@o3co/auth-provider-core";
 import type express from "express";
 import request from "supertest";
 import { afterAll, afterEach, beforeAll, describe, expect, it } from "vitest";
+import type { Switches } from "#/configPath.mjs";
 import {
 	ALICE,
 	AS_LISTED,
@@ -115,16 +110,22 @@ const TEMPLATE_PACKAGES: Readonly<Record<string, string>> = {
 	"@o3co/auth-provider-federation-google": "googleFederationModule",
 	"@o3co/auth-provider-federation-grants": "federationGrantsModules",
 	"@o3co/auth-provider-federation-oidc": "oidcFederationModule, one per `oidc` section",
-	"@o3co/auth-provider-foundation": "the HTTP user repository adapter (no module)",
+	"@o3co/auth-provider-foundation":
+		"the HTTP user repository adapter; foundationMfaFactorStoreModule under MFA_MODE with adapters.mfaFactorStore = store (tools/composition boots it)",
+	"@o3co/auth-provider-mfa":
+		"mfaModules (mfaTotpFactorModule, mfaRecoveryCodeFactorModule, mfaEmailFactorModule, mfaModule) and mfaResetModule, under MFA_MODE (mfa-switch.test.mts)",
 	"@o3co/auth-provider-oauth":
 		"oauthModule, oauthSessionModule, oauthAuthorizationModule, subjectRevocationServiceModule",
 	"@o3co/auth-provider-redis": "the Redis stores (all-modules-composition.multi.test.mts)",
 	"@o3co/auth-provider-session": "sessionModule, sessionStoreModuleFor",
+	"@o3co/auth-provider-standard":
+		"standardSmtpMailSenderModule; standardDevelopmentMailSenderModule in development",
 };
 
 /**
  * Workspace packages the template does not depend on, so nothing here can
- * boot them. Each is a module a deployment adds to this manifest by hand —
+ * boot them. Each but the test kit, which has no module, is a module a
+ * deployment adds to this manifest by hand —
  * `modules.mts` provides the Redis clients their stores need for that reason
  * — and `tools/composition` in the monorepo boots each beside every module
  * here, through this file's fixture.
@@ -136,7 +137,9 @@ const NOT_IN_TEMPLATE: Readonly<Record<string, string>> = {
 	"@o3co/auth-provider-federation-github": "githubFederationModule",
 	"@o3co/auth-provider-mtls": "mtlsModule",
 	"@o3co/auth-provider-oauth-token-exchange": "tokenExchangeModule",
-	"@o3co/auth-provider-webauthn": "webauthnModule",
+	"@o3co/auth-provider-test-kit": "no module: contract suites and fakes, for tests",
+	"@o3co/auth-provider-webauthn":
+		"webauthnModule, webauthnSessionSubjectModule, webauthnMfaFactorModule",
 };
 
 describe("what the all-modules composition covers", () => {
@@ -173,7 +176,7 @@ describe("what the all-modules composition covers", () => {
 
 /** What `buildModules` lists with every switch on, one replica, memory stores. */
 const ALL_ON_MODULES = [
-	"sessionStoreModule",
+	"session-store",
 	"federation-grant-background",
 	"federation-grants",
 	"oauth",
@@ -181,19 +184,22 @@ const ALL_ON_MODULES = [
 	"oauth-authorization",
 	"jwks",
 	"session",
-	"federation:google",
-	"standalone:google-federation-config",
-	"standalone:oidc-federation-config",
-	"federation:oidc:oidc",
-	"standalone:key-store",
+	"federation-google",
+	"google-federation-config",
+	"oidc-federation-config",
+	"federation-oidc-oidc",
+	"logging",
+	"http",
+	"key-store",
 	"test:repositories",
-	"standalone:audit-sink",
-	"standalone:in-memory-federation-token-store",
+	"audit-sink",
+	"standard-smtp-mail-sender",
+	"standalone-in-memory-federation-token-store",
 	"core-federation-grant-store-memory",
 	"core-federation-grant-intent-store-memory",
-	"standalone:in-memory-session-stores",
+	"standalone-in-memory-session-stores",
 	"core-rate-limiter-memory",
-	"standalone:in-memory-code-repository",
+	"standalone-in-memory-code-repository",
 	"core-access-token-denylist-memory",
 	"core-replay-seen-set-memory",
 	"core-consent-store-memory",
@@ -244,10 +250,10 @@ describe("every module the template can turn on boots together", () => {
 	});
 
 	it("hands the deployment's logger to every module that answers a request", async () => {
-		// `app.mts` fills the `logger` slot so that `LOG_LEVEL` and the JSON
+		// `app.mts` fills the `logger` slot so that `LOGGING_LEVEL` and the JSON
 		// envelope reach every module; boot hands a module only the slots its
 		// manifest names, so a route or grant module without `logger` writes
-		// its outage lines to nobody (the session grant did, answering 503).
+		// its outage lines to nobody.
 		const { modules } = await boot();
 		const answering = modules.filter(
 			(m) => contributionNames(m, "routes").length + contributionNames(m, "grants").length > 0,
@@ -325,10 +331,10 @@ describe("discovery", () => {
 	 * is gone from the document and from the app, and nothing else moves.
 	 */
 	const GRANT_SWITCHES: ReadonlyArray<readonly [grant: string, variable: string]> = [
-		["session", "OAUTH_GRANTS_SESSION_ENABLED"],
-		["authorization_code", "OAUTH_GRANTS_AUTHORIZATION_CODE_ENABLED"],
-		["refresh_token", "OAUTH_GRANTS_REFRESH_TOKEN_ENABLED"],
-		["client_credentials", "OAUTH_GRANTS_CLIENT_CREDENTIALS_ENABLED"],
+		["session", "OAUTH_SESSION_ENABLED"],
+		["authorization_code", "OAUTH_AUTHORIZATION_GRANTS_AUTHORIZATION_CODE_ENABLED"],
+		["refresh_token", "OAUTH_AUTHORIZATION_GRANTS_REFRESH_TOKEN_ENABLED"],
+		["client_credentials", "OAUTH_AUTHORIZATION_GRANTS_CLIENT_CREDENTIALS_ENABLED"],
 	];
 
 	it.each(GRANT_SWITCHES)(
@@ -336,7 +342,7 @@ describe("discovery", () => {
 		async (grant, variable) => {
 			const { app } = await boot({ env: { ...SINGLE_ENV, [variable]: "false" } });
 			const doc = (await request(app).get(DISCOVERY_PATHS[0])).body;
-			expectValidMetadata(doc);
+			expectValidMetadata(doc, { authorizationCode: grant !== "authorization_code" });
 			expect([...doc.grant_types_supported].sort()).toEqual(
 				ENABLED_GRANTS.filter((g) => g !== grant),
 			);
@@ -347,11 +353,17 @@ describe("discovery", () => {
 				.send({ grant_type: grant });
 			expect(res.status).toBe(400);
 			expect(res.body.error).toBe("unsupported_grant_type");
+			if (grant === "authorization_code") {
+				// No grant redeems a code, so none is issued: none is served.
+				expect((await request(app).get("/oauth/authorize")).status).toBe(404);
+			}
 		},
 	);
 
 	it("Client ID Metadata Documents off: the flag is gone and nothing else moves", async () => {
-		const { app } = await boot({ env: { ...SINGLE_ENV, OAUTH_CIMD_ENABLED: "false" } });
+		const { app } = await boot({
+			env: { ...SINGLE_ENV, OAUTH_CLIENT_ID_METADATA_DOCUMENTS_ENABLED: "false" },
+		});
 		const doc = (await request(app).get(DISCOVERY_PATHS[0])).body;
 		expectValidMetadata(doc);
 		expect(doc.client_id_metadata_document_supported).toBeUndefined();
@@ -367,7 +379,7 @@ describe("discovery", () => {
 		await on.handle.dispose();
 		current = undefined;
 
-		const { app } = await boot({ env: { ...SINGLE_ENV, CONSENT_STORE_ADAPTER: "none" } });
+		const { app } = await boot({ env: { ...SINGLE_ENV, ADAPTERS_CONSENT_STORE: "none" } });
 		const doc = (await request(app).get(DISCOVERY_PATHS[0])).body;
 		expectValidMetadata(doc);
 		expect(doc.client_id_metadata_document_supported).toBeUndefined();
@@ -375,27 +387,30 @@ describe("discovery", () => {
 	});
 
 	/** The grant connections dropped: they name the OIDC federation. */
-	const withoutConnections = (config: AppConfig): AppConfig =>
-		({ ...config, federationGrants: { ...config.federationGrants, connections: {} } }) as AppConfig;
+	const withoutConnections = (config: Switches): Switches =>
+		({
+			...config,
+			"federation-grants": { ...config["federation-grants"], connections: {} },
+		}) as Switches;
 
 	const FEATURE_SWITCHES: ReadonlyArray<
 		readonly [
 			feature: string,
 			variable: string,
 			path: string,
-			config: ((config: AppConfig) => AppConfig) | undefined,
+			config: ((config: Switches) => Switches) | undefined,
 		]
 	> = [
 		["federation grants", "FEDERATION_GRANTS_ENABLED", "/oauth/federation-grants", undefined],
 		[
 			"the Google federation",
-			"FEDERATIONS_GOOGLE_ENABLED",
+			"CORE_FEDERATIONS_GOOGLE_ENABLED",
 			"/session/oauth/federation/google",
 			undefined,
 		],
 		[
 			"the OIDC federation",
-			"FEDERATIONS_OIDC_ENABLED",
+			"CORE_FEDERATIONS_OIDC_ENABLED",
 			"/session/oauth/federation/oidc",
 			withoutConnections,
 		],
@@ -421,7 +436,7 @@ describe("discovery", () => {
 
 	it("the OIDC federation off while a grant connection names it is refused at boot, naming both", async () => {
 		await expect(
-			compose({ env: { ...SINGLE_ENV, FEDERATIONS_OIDC_ENABLED: "false" } }),
+			compose({ env: { ...SINGLE_ENV, CORE_FEDERATIONS_OIDC_ENABLED: "false" } }),
 		).rejects.toSatisfy((err: unknown) => {
 			const e = err as { name?: string; cause?: { message?: string } };
 			return (
@@ -554,7 +569,7 @@ describe("every module's primary route answers in the one app", () => {
 
 	// KNOWN DEFECT (the template's federation config, with the session
 	// package's redirect policy): a federation enabled the way the template
-	// README documents — its `FEDERATIONS_OIDC_*` variables — boots, and every
+	// README documents — its `CORE_FEDERATIONS_OIDC_*` variables — boots, and every
 	// login through it then ends at the callback in `500 misconfiguration`
 	// "client URL not configured", after the user has signed in upstream.
 	// `clientUrl` has no environment form (`application.conf` ships it
@@ -564,10 +579,13 @@ describe("every module's primary route answers in the one app", () => {
 	knownDefect(
 		"a federation enabled from the documented variables alone either refuses to boot or completes a login",
 		async () => {
-			const withoutLanding = (config: AppConfig): AppConfig => {
-				const federations = config.federations as Record<string, Record<string, unknown>>;
+			const withoutLanding = (config: Switches): Switches => {
+				const federations = federationsOf(config) as Record<string, Record<string, unknown>>;
 				const { clientUrl: _dropped, ...oidc } = federations.oidc ?? {};
-				return { ...config, federations: { ...federations, oidc } } as unknown as AppConfig;
+				return {
+					...config,
+					core: { ...config.core, federations: { ...federations, oidc } },
+				} as unknown as Switches;
 			};
 			let composed: Composition;
 			try {
@@ -746,9 +764,10 @@ describe.each([AS_LISTED, REVERSED] satisfies ModuleOrder[])(
 );
 
 describe("a request body the OAuth endpoints do not parse", () => {
-	// KNOWN DEFECT (packages/oauth, `createOAuthRouter` in routes.mts): the
-	// token and introspection handlers read `req.body` without checking that a
-	// parser ran. A body that is neither a form nor JSON — or none at all —
+	// KNOWN DEFECT (packages/oauth, `routes/token.mts`,
+	// `routes/introspectCaller.mts` and `routes.mts`): the token and
+	// introspection handlers read `req.body` without checking that a parser
+	// ran. A body that is neither a form nor JSON — or none at all —
 	// leaves it undefined, the handler throws, and the terminal handler answers
 	// `500 server_error` and logs `unhandled_request_error` for the client's
 	// own mistake. `/oauth/revoke` checks, and answers 400.
@@ -918,7 +937,7 @@ const OUTAGES: readonly OutageCase[] = [
 				.send({ grant_type: "session", scope: "openid" });
 		},
 		answer: { status: 503, error: "temporarily_unavailable" },
-		event: "session_grant_store_unavailable",
+		event: "session_admission_unavailable",
 	},
 	{
 		module: "oauth (consent step)",
@@ -933,7 +952,7 @@ const OUTAGES: readonly OutageCase[] = [
 		event: "authorize_consent_store_unavailable",
 		defects: {
 			"store-field":
-				"packages/oauth `routes/authorize.mts`: `authorize_consent_store_unavailable` carries `clientId` and `err` but no `store` / `step` / `site` field",
+				"packages/oauth `routes/authorizeConsent.mts`: `authorize_consent_store_unavailable` carries `clientId` and `err` but no `store` / `step` / `site` field",
 		},
 	},
 	{
@@ -949,7 +968,7 @@ const OUTAGES: readonly OutageCase[] = [
 		event: "authorize_pending_consent_store_unavailable",
 		defects: {
 			"store-field":
-				"packages/oauth `routes/authorize.mts`: `authorize_pending_consent_store_unavailable` carries `clientId` and `err` but no `store` / `step` / `site` field",
+				"packages/oauth `routes/authorizeConsent.mts`: `authorize_pending_consent_store_unavailable` carries `clientId` and `err` but no `store` / `step` / `site` field",
 		},
 	},
 	{
@@ -1006,7 +1025,7 @@ const OUTAGES: readonly OutageCase[] = [
 			outage.down = true;
 			return (await login(app)).res;
 		},
-		// Intended (#296): the login is not denied for a best-effort index write,
+		// Intended: the login is not denied for a best-effort index write,
 		// and the missed write is logged at error because a token minted from
 		// this session keeps introspecting active after a credential change —
 		// the runbook pages on it.
@@ -1034,7 +1053,7 @@ const OUTAGES: readonly OutageCase[] = [
 	{
 		module: "core (rate-limit guard)",
 		slot: "rateLimiter",
-		surface: "/oauth/token (rateLimit.failMode = closed)",
+		surface: "/oauth/token (redis-rate-limiter.failMode = closed)",
 		run: async (app, outage) => {
 			outage.down = true;
 			return tokenRequest(app, M2M).send({ grant_type: "client_credentials", scope: "api.read" });
@@ -1094,7 +1113,7 @@ const OUTAGES: readonly OutageCase[] = [
 ];
 
 describeOutages(
-	"a store or repository outage answers 503 and is logged once, at error (#685)",
+	"a store or repository outage gets the answer its case pins, and is logged once, at error",
 	OUTAGES,
 	(outage) => compose({ outage }),
 );