@open-mercato/shared 0.7.1-develop.7150.1.c1941e0c22 → 0.7.1-develop.7152.1.a69e92f9c9

package/dist/lib/email/send.js

@@ -1,10 +1,13 @@
-import { Resend } from "resend";
 import React from "react";
 import { appendFile, mkdir } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { tmpdir } from "node:os";
 import { parseBooleanWithDefault } from "../boolean.js";
-import { resolveDefaultEmailFromAddress } from "./config.js";
+import {
+  isEmailDeliveryDisabled,
+  resolveDefaultEmailFromAddress
+} from "./config.js";
+import { getRegisteredEmailTransport } from "./transport.js";
 const DEFAULT_TEST_EMAIL_CAPTURE_PATH = join(tmpdir(), "open-mercato-email-capture.jsonl");
 function resolveTestEmailCapturePath() {
   return process.env.OM_TEST_EMAIL_CAPTURE_PATH?.trim() || DEFAULT_TEST_EMAIL_CAPTURE_PATH;
@@ -56,30 +59,30 @@ async function captureEmailForTests(options) {
   await appendFile(capturePath, `${JSON.stringify(record)}
 `, "utf8");
 }
-async function sendEmail({ to, subject, react, from, replyTo, attachments }) {
-  const emailDisabled = parseBooleanWithDefault(process.env.OM_DISABLE_EMAIL_DELIVERY, false) || parseBooleanWithDefault(process.env.OM_TEST_MODE, false);
-  await captureEmailForTests({ to, subject, react, from, replyTo, attachments });
-  if (emailDisabled) return;
-  const apiKey = process.env.RESEND_API_KEY;
-  if (!apiKey) throw new Error("RESEND_API_KEY is not set");
-  const resend = new Resend(apiKey);
-  const fromAddr = from || resolveDefaultEmailFromAddress();
+async function sendEmail(options) {
+  await captureEmailForTests(options);
+  if (isEmailDeliveryDisabled()) return;
+  const fromAddr = options.from || resolveDefaultEmailFromAddress();
   if (!fromAddr) {
     throw new Error("EMAIL_FROM_NOT_CONFIGURED: set NOTIFICATIONS_EMAIL_FROM, EMAIL_FROM, or ADMIN_EMAIL");
   }
-  const payload = {
-    to,
-    subject,
-    from: fromAddr,
-    react,
-    ...replyTo ? { reply_to: replyTo } : {},
-    ...attachments?.length ? { attachments } : {}
-  };
-  const result = await resend.emails.send(payload);
-  const errorMessage = typeof result?.error === "string" ? result.error : typeof result?.error?.message === "string" ? result.error.message : null;
-  if (errorMessage) {
-    throw new Error(`RESEND_SEND_FAILED: ${errorMessage}`);
+  const transport = getRegisteredEmailTransport();
+  if (!transport) {
+    throw new Error("EMAIL_TRANSPORT_NOT_CONFIGURED: enable an outbound email provider module");
   }
+  await transport.send({
+    to: options.to,
+    subject: options.subject,
+    react: options.react,
+    html: options.html,
+    text: options.text,
+    from: fromAddr,
+    fromIsInstanceDefault: !options.from,
+    replyTo: options.replyTo,
+    attachments: options.attachments,
+    tenantId: options.tenantId,
+    organizationId: options.organizationId
+  });
 }
 export {
   sendEmail

package/dist/lib/email/send.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/email/send.ts"],
-  "sourcesContent": ["import { Resend } from 'resend'\nimport React from 'react'\nimport { appendFile, mkdir } from 'node:fs/promises'\nimport { dirname, join } from 'node:path'\nimport { tmpdir } from 'node:os'\nimport { parseBooleanWithDefault } from '../boolean'\nimport { resolveDefaultEmailFromAddress } from './config'\n\nexport type SendEmailOptions = {\n  to: string\n  subject: string\n  react: React.ReactElement\n  from?: string\n  replyTo?: string\n  attachments?: Array<{\n    filename: string\n    content: string\n    contentType?: string\n  }>\n}\n\ntype CapturedEmail = {\n  to: string\n  subject: string\n  from: string | null\n  replyTo: string | null\n  links: string[]\n  text: string\n  capturedAt: string\n}\n\ntype ReactElementProps = {\n  href?: unknown\n  children?: unknown\n}\n\nconst DEFAULT_TEST_EMAIL_CAPTURE_PATH = join(tmpdir(), 'open-mercato-email-capture.jsonl')\n\nfunction resolveTestEmailCapturePath(): string {\n  return process.env.OM_TEST_EMAIL_CAPTURE_PATH?.trim() || DEFAULT_TEST_EMAIL_CAPTURE_PATH\n}\n\nfunction readElementProps(node: React.ReactElement): ReactElementProps {\n  return node.props as ReactElementProps\n}\n\nfunction collectEmailLinks(node: unknown, links: string[] = []): string[] {\n  if (node == null || typeof node === 'boolean') return links\n  if (Array.isArray(node)) {\n    for (const child of node) collectEmailLinks(child, links)\n    return links\n  }\n  if (React.isValidElement(node)) {\n    const props = readElementProps(node)\n    if (typeof props.href === 'string' && props.href.length > 0) links.push(props.href)\n    collectEmailLinks(props.children, links)\n  }\n  return links\n}\n\nfunction collectEmailText(node: unknown, parts: string[] = []): string[] {\n  if (node == null || typeof node === 'boolean') return parts\n  if (typeof node === 'string' || typeof node === 'number') {\n    parts.push(String(node))\n    return parts\n  }\n  if (Array.isArray(node)) {\n    for (const child of node) collectEmailText(child, parts)\n    return parts\n  }\n  if (React.isValidElement(node)) {\n    collectEmailText(readElementProps(node).children, parts)\n  }\n  return parts\n}\n\nasync function captureEmailForTests(options: SendEmailOptions): Promise<void> {\n  if (!parseBooleanWithDefault(process.env.OM_TEST_MODE, false)) return\n\n  const capturePath = resolveTestEmailCapturePath()\n  const record: CapturedEmail = {\n    to: options.to,\n    subject: options.subject,\n    from: options.from ?? resolveDefaultEmailFromAddress() ?? null,\n    replyTo: options.replyTo ?? null,\n    links: collectEmailLinks(options.react),\n    text: collectEmailText(options.react).join(' ').replace(/\\s+/g, ' ').trim(),\n    capturedAt: new Date().toISOString(),\n  }\n\n  await mkdir(dirname(capturePath), { recursive: true })\n  await appendFile(capturePath, `${JSON.stringify(record)}\\n`, 'utf8')\n}\n\nexport async function sendEmail({ to, subject, react, from, replyTo, attachments }: SendEmailOptions) {\n  const emailDisabled =\n    parseBooleanWithDefault(process.env.OM_DISABLE_EMAIL_DELIVERY, false) ||\n    parseBooleanWithDefault(process.env.OM_TEST_MODE, false)\n\n  await captureEmailForTests({ to, subject, react, from, replyTo, attachments })\n\n  if (emailDisabled) return\n\n  const apiKey = process.env.RESEND_API_KEY\n  if (!apiKey) throw new Error('RESEND_API_KEY is not set')\n  const resend = new Resend(apiKey)\n  const fromAddr = from || resolveDefaultEmailFromAddress()\n  if (!fromAddr) {\n    throw new Error('EMAIL_FROM_NOT_CONFIGURED: set NOTIFICATIONS_EMAIL_FROM, EMAIL_FROM, or ADMIN_EMAIL')\n  }\n  const payload = {\n    to,\n    subject,\n    from: fromAddr,\n    react,\n    ...(replyTo ? { reply_to: replyTo } : {}),\n    ...(attachments?.length ? { attachments } : {}),\n  }\n  const result = await resend.emails.send(payload)\n  const errorMessage =\n    typeof (result as any)?.error === 'string'\n      ? (result as any).error\n      : typeof (result as any)?.error?.message === 'string'\n        ? (result as any).error.message\n        : null\n  if (errorMessage) {\n    throw new Error(`RESEND_SEND_FAILED: ${errorMessage}`)\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,cAAc;AACvB,OAAO,WAAW;AAClB,SAAS,YAAY,aAAa;AAClC,SAAS,SAAS,YAAY;AAC9B,SAAS,cAAc;AACvB,SAAS,+BAA+B;AACxC,SAAS,sCAAsC;AA8B/C,MAAM,kCAAkC,KAAK,OAAO,GAAG,kCAAkC;AAEzF,SAAS,8BAAsC;AAC7C,SAAO,QAAQ,IAAI,4BAA4B,KAAK,KAAK;AAC3D;AAEA,SAAS,iBAAiB,MAA6C;AACrE,SAAO,KAAK;AACd;AAEA,SAAS,kBAAkB,MAAe,QAAkB,CAAC,GAAa;AACxE,MAAI,QAAQ,QAAQ,OAAO,SAAS,UAAW,QAAO;AACtD,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,eAAW,SAAS,KAAM,mBAAkB,OAAO,KAAK;AACxD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,eAAe,IAAI,GAAG;AAC9B,UAAM,QAAQ,iBAAiB,IAAI;AACnC,QAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,EAAG,OAAM,KAAK,MAAM,IAAI;AAClF,sBAAkB,MAAM,UAAU,KAAK;AAAA,EACzC;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,MAAe,QAAkB,CAAC,GAAa;AACvE,MAAI,QAAQ,QAAQ,OAAO,SAAS,UAAW,QAAO;AACtD,MAAI,OAAO,SAAS,YAAY,OAAO,SAAS,UAAU;AACxD,UAAM,KAAK,OAAO,IAAI,CAAC;AACvB,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,eAAW,SAAS,KAAM,kBAAiB,OAAO,KAAK;AACvD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,eAAe,IAAI,GAAG;AAC9B,qBAAiB,iBAAiB,IAAI,EAAE,UAAU,KAAK;AAAA,EACzD;AACA,SAAO;AACT;AAEA,eAAe,qBAAqB,SAA0C;AAC5E,MAAI,CAAC,wBAAwB,QAAQ,IAAI,cAAc,KAAK,EAAG;AAE/D,QAAM,cAAc,4BAA4B;AAChD,QAAM,SAAwB;AAAA,IAC5B,IAAI,QAAQ;AAAA,IACZ,SAAS,QAAQ;AAAA,IACjB,MAAM,QAAQ,QAAQ,+BAA+B,KAAK;AAAA,IAC1D,SAAS,QAAQ,WAAW;AAAA,IAC5B,OAAO,kBAAkB,QAAQ,KAAK;AAAA,IACtC,MAAM,iBAAiB,QAAQ,KAAK,EAAE,KAAK,GAAG,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAK;AAAA,IAC1E,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,EACrC;AAEA,QAAM,MAAM,QAAQ,WAAW,GAAG,EAAE,WAAW,KAAK,CAAC;AACrD,QAAM,WAAW,aAAa,GAAG,KAAK,UAAU,MAAM,CAAC;AAAA,GAAM,MAAM;AACrE;AAEA,eAAsB,UAAU,EAAE,IAAI,SAAS,OAAO,MAAM,SAAS,YAAY,GAAqB;AACpG,QAAM,gBACJ,wBAAwB,QAAQ,IAAI,2BAA2B,KAAK,KACpE,wBAAwB,QAAQ,IAAI,cAAc,KAAK;AAEzD,QAAM,qBAAqB,EAAE,IAAI,SAAS,OAAO,MAAM,SAAS,YAAY,CAAC;AAE7E,MAAI,cAAe;AAEnB,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,QAAM,SAAS,IAAI,OAAO,MAAM;AAChC,QAAM,WAAW,QAAQ,+BAA+B;AACxD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,qFAAqF;AAAA,EACvG;AACA,QAAM,UAAU;AAAA,IACd;AAAA,IACA;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,GAAI,UAAU,EAAE,UAAU,QAAQ,IAAI,CAAC;AAAA,IACvC,GAAI,aAAa,SAAS,EAAE,YAAY,IAAI,CAAC;AAAA,EAC/C;AACA,QAAM,SAAS,MAAM,OAAO,OAAO,KAAK,OAAO;AAC/C,QAAM,eACJ,OAAQ,QAAgB,UAAU,WAC7B,OAAe,QAChB,OAAQ,QAAgB,OAAO,YAAY,WACxC,OAAe,MAAM,UACtB;AACR,MAAI,cAAc;AAChB,UAAM,IAAI,MAAM,uBAAuB,YAAY,EAAE;AAAA,EACvD;AACF;",
+  "sourcesContent": ["import React from 'react'\nimport { appendFile, mkdir } from 'node:fs/promises'\nimport { dirname, join } from 'node:path'\nimport { tmpdir } from 'node:os'\nimport { parseBooleanWithDefault } from '../boolean'\nimport {\n  isEmailDeliveryDisabled,\n  resolveDefaultEmailFromAddress,\n} from './config'\nimport { getRegisteredEmailTransport } from './transport'\n\nexport type EmailAttachment = {\n  filename: string\n  content: string\n  contentType?: string\n}\n\nexport type SendEmailOptions = {\n  to: string\n  subject: string\n  react?: React.ReactElement\n  html?: string\n  text?: string\n  from?: string\n  replyTo?: string\n  attachments?: EmailAttachment[]\n  tenantId?: string\n  organizationId?: string | null\n}\n\nexport type ResolvedEmailPayload = {\n  to: string\n  subject: string\n  react?: React.ReactElement\n  html?: string\n  text?: string\n  from: string\n  /**\n   * True when `from` was filled in from the instance-wide environment defaults rather than chosen by\n   * the caller. Transports use this to decide whether a tenant's own configured sender may take\n   * precedence: `from` is never empty by the time it reaches a transport, so without this flag a\n   * per-tenant sender is unreachable. Absent means \"caller chose it\" for older transports.\n   */\n  fromIsInstanceDefault?: boolean\n  replyTo?: string\n  attachments?: EmailAttachment[]\n  tenantId?: string\n  organizationId?: string | null\n}\n\ntype CapturedEmail = {\n  to: string\n  subject: string\n  from: string | null\n  replyTo: string | null\n  links: string[]\n  text: string\n  capturedAt: string\n}\n\ntype ReactElementProps = {\n  href?: unknown\n  children?: unknown\n}\n\nconst DEFAULT_TEST_EMAIL_CAPTURE_PATH = join(tmpdir(), 'open-mercato-email-capture.jsonl')\n\nfunction resolveTestEmailCapturePath(): string {\n  return process.env.OM_TEST_EMAIL_CAPTURE_PATH?.trim() || DEFAULT_TEST_EMAIL_CAPTURE_PATH\n}\n\nfunction readElementProps(node: React.ReactElement): ReactElementProps {\n  return node.props as ReactElementProps\n}\n\nfunction collectEmailLinks(node: unknown, links: string[] = []): string[] {\n  if (node == null || typeof node === 'boolean') return links\n  if (Array.isArray(node)) {\n    for (const child of node) collectEmailLinks(child, links)\n    return links\n  }\n  if (React.isValidElement(node)) {\n    const props = readElementProps(node)\n    if (typeof props.href === 'string' && props.href.length > 0) links.push(props.href)\n    collectEmailLinks(props.children, links)\n  }\n  return links\n}\n\nfunction collectEmailText(node: unknown, parts: string[] = []): string[] {\n  if (node == null || typeof node === 'boolean') return parts\n  if (typeof node === 'string' || typeof node === 'number') {\n    parts.push(String(node))\n    return parts\n  }\n  if (Array.isArray(node)) {\n    for (const child of node) collectEmailText(child, parts)\n    return parts\n  }\n  if (React.isValidElement(node)) {\n    collectEmailText(readElementProps(node).children, parts)\n  }\n  return parts\n}\n\nasync function captureEmailForTests(options: SendEmailOptions): Promise<void> {\n  if (!parseBooleanWithDefault(process.env.OM_TEST_MODE, false)) return\n\n  const capturePath = resolveTestEmailCapturePath()\n  const record: CapturedEmail = {\n    to: options.to,\n    subject: options.subject,\n    from: options.from ?? resolveDefaultEmailFromAddress() ?? null,\n    replyTo: options.replyTo ?? null,\n    links: collectEmailLinks(options.react),\n    text: collectEmailText(options.react).join(' ').replace(/\\s+/g, ' ').trim(),\n    capturedAt: new Date().toISOString(),\n  }\n\n  await mkdir(dirname(capturePath), { recursive: true })\n  await appendFile(capturePath, `${JSON.stringify(record)}\\n`, 'utf8')\n}\n\nexport async function sendEmail(options: SendEmailOptions): Promise<void> {\n  await captureEmailForTests(options)\n  if (isEmailDeliveryDisabled()) return\n\n  const fromAddr = options.from || resolveDefaultEmailFromAddress()\n  if (!fromAddr) {\n    throw new Error('EMAIL_FROM_NOT_CONFIGURED: set NOTIFICATIONS_EMAIL_FROM, EMAIL_FROM, or ADMIN_EMAIL')\n  }\n\n  const transport = getRegisteredEmailTransport()\n  if (!transport) {\n    throw new Error('EMAIL_TRANSPORT_NOT_CONFIGURED: enable an outbound email provider module')\n  }\n\n  await transport.send({\n    to: options.to,\n    subject: options.subject,\n    react: options.react,\n    html: options.html,\n    text: options.text,\n    from: fromAddr,\n    fromIsInstanceDefault: !options.from,\n    replyTo: options.replyTo,\n    attachments: options.attachments,\n    tenantId: options.tenantId,\n    organizationId: options.organizationId,\n  })\n}\n"],
+  "mappings": "AAAA,OAAO,WAAW;AAClB,SAAS,YAAY,aAAa;AAClC,SAAS,SAAS,YAAY;AAC9B,SAAS,cAAc;AACvB,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,mCAAmC;AAwD5C,MAAM,kCAAkC,KAAK,OAAO,GAAG,kCAAkC;AAEzF,SAAS,8BAAsC;AAC7C,SAAO,QAAQ,IAAI,4BAA4B,KAAK,KAAK;AAC3D;AAEA,SAAS,iBAAiB,MAA6C;AACrE,SAAO,KAAK;AACd;AAEA,SAAS,kBAAkB,MAAe,QAAkB,CAAC,GAAa;AACxE,MAAI,QAAQ,QAAQ,OAAO,SAAS,UAAW,QAAO;AACtD,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,eAAW,SAAS,KAAM,mBAAkB,OAAO,KAAK;AACxD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,eAAe,IAAI,GAAG;AAC9B,UAAM,QAAQ,iBAAiB,IAAI;AACnC,QAAI,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,SAAS,EAAG,OAAM,KAAK,MAAM,IAAI;AAClF,sBAAkB,MAAM,UAAU,KAAK;AAAA,EACzC;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,MAAe,QAAkB,CAAC,GAAa;AACvE,MAAI,QAAQ,QAAQ,OAAO,SAAS,UAAW,QAAO;AACtD,MAAI,OAAO,SAAS,YAAY,OAAO,SAAS,UAAU;AACxD,UAAM,KAAK,OAAO,IAAI,CAAC;AACvB,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,eAAW,SAAS,KAAM,kBAAiB,OAAO,KAAK;AACvD,WAAO;AAAA,EACT;AACA,MAAI,MAAM,eAAe,IAAI,GAAG;AAC9B,qBAAiB,iBAAiB,IAAI,EAAE,UAAU,KAAK;AAAA,EACzD;AACA,SAAO;AACT;AAEA,eAAe,qBAAqB,SAA0C;AAC5E,MAAI,CAAC,wBAAwB,QAAQ,IAAI,cAAc,KAAK,EAAG;AAE/D,QAAM,cAAc,4BAA4B;AAChD,QAAM,SAAwB;AAAA,IAC5B,IAAI,QAAQ;AAAA,IACZ,SAAS,QAAQ;AAAA,IACjB,MAAM,QAAQ,QAAQ,+BAA+B,KAAK;AAAA,IAC1D,SAAS,QAAQ,WAAW;AAAA,IAC5B,OAAO,kBAAkB,QAAQ,KAAK;AAAA,IACtC,MAAM,iBAAiB,QAAQ,KAAK,EAAE,KAAK,GAAG,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAK;AAAA,IAC1E,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,EACrC;AAEA,QAAM,MAAM,QAAQ,WAAW,GAAG,EAAE,WAAW,KAAK,CAAC;AACrD,QAAM,WAAW,aAAa,GAAG,KAAK,UAAU,MAAM,CAAC;AAAA,GAAM,MAAM;AACrE;AAEA,eAAsB,UAAU,SAA0C;AACxE,QAAM,qBAAqB,OAAO;AAClC,MAAI,wBAAwB,EAAG;AAE/B,QAAM,WAAW,QAAQ,QAAQ,+BAA+B;AAChE,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,qFAAqF;AAAA,EACvG;AAEA,QAAM,YAAY,4BAA4B;AAC9C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AAEA,QAAM,UAAU,KAAK;AAAA,IACnB,IAAI,QAAQ;AAAA,IACZ,SAAS,QAAQ;AAAA,IACjB,OAAO,QAAQ;AAAA,IACf,MAAM,QAAQ;AAAA,IACd,MAAM,QAAQ;AAAA,IACd,MAAM;AAAA,IACN,uBAAuB,CAAC,QAAQ;AAAA,IAChC,SAAS,QAAQ;AAAA,IACjB,aAAa,QAAQ;AAAA,IACrB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,EAC1B,CAAC;AACH;",
   "names": []
 }

package/dist/lib/email/transport.js

@@ -0,0 +1,19 @@
+const EMAIL_TRANSPORT_REGISTRY = /* @__PURE__ */ Symbol.for("open-mercato.email.transport");
+function emailTransportRoot() {
+  return globalThis;
+}
+function registerEmailTransport(transport) {
+  emailTransportRoot()[EMAIL_TRANSPORT_REGISTRY] = transport;
+}
+function getRegisteredEmailTransport() {
+  return emailTransportRoot()[EMAIL_TRANSPORT_REGISTRY] ?? null;
+}
+function clearRegisteredEmailTransportForTests() {
+  emailTransportRoot()[EMAIL_TRANSPORT_REGISTRY] = null;
+}
+export {
+  clearRegisteredEmailTransportForTests,
+  getRegisteredEmailTransport,
+  registerEmailTransport
+};
+//# sourceMappingURL=transport.js.map

package/dist/lib/email/transport.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/email/transport.ts"],
+  "sourcesContent": ["import type { ResolvedEmailPayload } from './send'\n\nexport type EmailTransport = {\n  id: string\n  send: (payload: ResolvedEmailPayload) => Promise<void>\n  isConfigured?: () => boolean\n}\n\nconst EMAIL_TRANSPORT_REGISTRY = Symbol.for('open-mercato.email.transport')\n\ntype EmailTransportRegistryGlobal = typeof globalThis & {\n  [EMAIL_TRANSPORT_REGISTRY]?: EmailTransport | null\n}\n\nfunction emailTransportRoot(): EmailTransportRegistryGlobal {\n  return globalThis as EmailTransportRegistryGlobal\n}\n\nexport function registerEmailTransport(transport: EmailTransport): void {\n  emailTransportRoot()[EMAIL_TRANSPORT_REGISTRY] = transport\n}\n\nexport function getRegisteredEmailTransport(): EmailTransport | null {\n  return emailTransportRoot()[EMAIL_TRANSPORT_REGISTRY] ?? null\n}\n\nexport function clearRegisteredEmailTransportForTests(): void {\n  emailTransportRoot()[EMAIL_TRANSPORT_REGISTRY] = null\n}\n"],
+  "mappings": "AAQA,MAAM,2BAA2B,uBAAO,IAAI,8BAA8B;AAM1E,SAAS,qBAAmD;AAC1D,SAAO;AACT;AAEO,SAAS,uBAAuB,WAAiC;AACtE,qBAAmB,EAAE,wBAAwB,IAAI;AACnD;AAEO,SAAS,8BAAqD;AACnE,SAAO,mBAAmB,EAAE,wBAAwB,KAAK;AAC3D;AAEO,SAAS,wCAA8C;AAC5D,qBAAmB,EAAE,wBAAwB,IAAI;AACnD;",
+  "names": []
+}

package/dist/lib/version.js

@@ -1,4 +1,4 @@
-const APP_VERSION = "0.7.1-develop.7150.1.c1941e0c22";
+const APP_VERSION = "0.7.1-develop.7152.1.a69e92f9c9";
 const appVersion = APP_VERSION;
 export {
   APP_VERSION,

package/dist/lib/version.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/version.ts"],
-  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.7.1-develop.7150.1.c1941e0c22';\nexport const appVersion = APP_VERSION;\n"],
+  "sourcesContent": ["// Build-time generated version\nexport const APP_VERSION = '0.7.1-develop.7152.1.a69e92f9c9';\nexport const appVersion = APP_VERSION;\n"],
   "mappings": "AACO,MAAM,cAAc;AACpB,MAAM,aAAa;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/shared",
-  "version": "0.7.1-develop.7150.1.c1941e0c22",
+  "version": "0.7.1-develop.7152.1.a69e92f9c9",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -113,7 +113,7 @@
     "@mikro-orm/core": "^7.1.8",
     "@mikro-orm/decorators": "^7.1.8",
     "@mikro-orm/postgresql": "^7.1.8",
-    "@open-mercato/cache": "0.7.1-develop.7150.1.c1941e0c22",
+    "@open-mercato/cache": "0.7.1-develop.7152.1.a69e92f9c9",
     "@types/html-to-text": "^9.0.4",
     "@types/sanitize-html": "^2.16.1",
     "dotenv": "^17.4.2",

package/src/lib/dev-runtime/__tests__/routes.test.ts

@@ -0,0 +1,473 @@
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+
+import {
+  createDevRuntimeActionsRoute,
+  createDevRuntimeLogsRoute,
+  createDevRuntimeDiagnosticsRoute,
+  createDevRuntimeStatusRoute,
+} from '../routes'
+import { readDevRuntimeStatus, resolveDevRuntimeServerConfig, type DevRuntimeServerConfig } from '../server'
+import { DEV_RUNTIME_TOKEN_HEADER, type RuntimeStatus } from '../types'
+
+const TOKEN = 'dev-runtime-token-fixture'
+
+function createStatus(overrides: Partial<RuntimeStatus> = {}): RuntimeStatus {
+  return {
+    schemaVersion: 1,
+    generation: 1,
+    health: 'degraded',
+    ready: true,
+    failed: false,
+    updatedAt: '2026-08-18T10:00:00.000Z',
+    upstream: { configuredPort: 3000, publicUrl: 'http://localhost:3000' },
+    incidents: [],
+    legacy: { failureLines: [] },
+    ...overrides,
+  }
+}
+
+function createTempDir(): string {
+  return fs.mkdtempSync(path.join(os.tmpdir(), 'om-dev-runtime-routes-'))
+}
+
+function createConfig(directory: string, overrides: Partial<DevRuntimeServerConfig> = {}): DevRuntimeServerConfig {
+  return {
+    enabled: true,
+    bannerEnabled: true,
+    token: TOKEN,
+    statusFilePath: path.join(directory, 'status.json'),
+    diagnosticsFilePath: path.join(directory, 'diagnostics.ndjson'),
+    actionsFilePath: path.join(directory, 'actions.ndjson'),
+    logsFilePath: path.join(directory, 'logs.json'),
+    ...overrides,
+  }
+}
+
+function writeStatusFile(config: DevRuntimeServerConfig, status: RuntimeStatus, token = TOKEN): void {
+  fs.writeFileSync(config.statusFilePath!, JSON.stringify({ token, pid: process.pid, status }), 'utf8')
+}
+
+function statusRequest(headers: Record<string, string> = { [DEV_RUNTIME_TOKEN_HEADER]: TOKEN }): Request {
+  return new Request('http://localhost:3000/api/dev-runtime/status', { headers })
+}
+
+function diagnosticsRequest(body: unknown, headers: Record<string, string> = {}): Request {
+  return new Request('http://localhost:3000/api/dev-runtime/diagnostics', {
+    method: 'POST',
+    headers: {
+      'content-type': 'application/json',
+      [DEV_RUNTIME_TOKEN_HEADER]: TOKEN,
+      ...headers,
+    },
+    body: typeof body === 'string' ? body : JSON.stringify(body),
+  })
+}
+
+describe('resolveDevRuntimeServerConfig', () => {
+  const baseEnv = {
+    NODE_ENV: 'development',
+    OM_DEV_RUNTIME_DIAGNOSTICS: '1',
+    OM_DEV_RUNTIME_TOKEN: TOKEN,
+    OM_DEV_RUNTIME_STATUS_FILE: '/tmp/status.json',
+    OM_DEV_RUNTIME_DIAGNOSTICS_FILE: '/tmp/diagnostics.ndjson',
+  } as NodeJS.ProcessEnv
+
+  it('enables diagnostics only for a supervised development process', () => {
+    expect(resolveDevRuntimeServerConfig(baseEnv).enabled).toBe(true)
+  })
+
+  // `mercato dev` runs the Next.js dev server with NODE_ENV=production
+  // (buildServerProcessEnvironment), so NODE_ENV cannot be the production guard
+  // — the supervisor handshake is.
+  it('stays enabled under NODE_ENV=production while the supervisor handshake is present', () => {
+    expect(resolveDevRuntimeServerConfig({ ...baseEnv, NODE_ENV: 'production' }).enabled).toBe(true)
+  })
+
+  it('stays disabled for a deployed server that has no supervisor handshake', () => {
+    // What a real `mercato server` process looks like: no token, no state files.
+    expect(resolveDevRuntimeServerConfig({
+      NODE_ENV: 'production',
+      OM_DEV_RUNTIME_DIAGNOSTICS: '1',
+    } as NodeJS.ProcessEnv).enabled).toBe(false)
+  })
+
+  it('stays disabled without an explicit flag', () => {
+    const { OM_DEV_RUNTIME_DIAGNOSTICS: _flag, ...withoutFlag } = baseEnv
+    expect(resolveDevRuntimeServerConfig(withoutFlag).enabled).toBe(false)
+  })
+
+  it('stays disabled when the supervisor did not supply a token or paths', () => {
+    expect(resolveDevRuntimeServerConfig({ ...baseEnv, OM_DEV_RUNTIME_TOKEN: '' }).enabled).toBe(false)
+    expect(resolveDevRuntimeServerConfig({ ...baseEnv, OM_DEV_RUNTIME_STATUS_FILE: '' }).enabled).toBe(false)
+    expect(resolveDevRuntimeServerConfig({ ...baseEnv, OM_DEV_RUNTIME_DIAGNOSTICS_FILE: '' }).enabled).toBe(false)
+  })
+
+  it('honours the banner opt-out independently', () => {
+    expect(resolveDevRuntimeServerConfig({ ...baseEnv, OM_DEV_RUNTIME_BANNER: '0' })).toMatchObject({
+      enabled: true,
+      bannerEnabled: false,
+    })
+  })
+})
+
+describe('readDevRuntimeStatus', () => {
+  let directory: string
+
+  beforeEach(() => { directory = createTempDir() })
+  afterEach(() => { fs.rmSync(directory, { recursive: true, force: true }) })
+
+  it('returns the supervisor status', () => {
+    const config = createConfig(directory)
+    writeStatusFile(config, createStatus())
+    expect(readDevRuntimeStatus(config)?.health).toBe('degraded')
+  })
+
+  it('rejects a status file written by a different run', () => {
+    const config = createConfig(directory)
+    writeStatusFile(config, createStatus(), 'a-stale-token-of-len')
+    expect(readDevRuntimeStatus(config)).toBeNull()
+  })
+
+  it('returns null for a missing or malformed file', () => {
+    const config = createConfig(directory)
+    expect(readDevRuntimeStatus(config)).toBeNull()
+    fs.writeFileSync(config.statusFilePath!, 'not json', 'utf8')
+    expect(readDevRuntimeStatus(config)).toBeNull()
+    fs.writeFileSync(config.statusFilePath!, JSON.stringify({ token: TOKEN, status: { nope: true } }), 'utf8')
+    expect(readDevRuntimeStatus(config)).toBeNull()
+  })
+})
+
+describe('createDevRuntimeStatusRoute', () => {
+  let directory: string
+
+  beforeEach(() => { directory = createTempDir() })
+  afterEach(() => { fs.rmSync(directory, { recursive: true, force: true }) })
+
+  it('serves the supervisor status for a valid token', async () => {
+    const config = createConfig(directory)
+    writeStatusFile(config, createStatus())
+    const GET = createDevRuntimeStatusRoute({ resolveConfig: () => config })
+
+    const response = await GET(statusRequest())
+    expect(response.status).toBe(200)
+    expect(response.headers.get('cache-control')).toBe('no-store')
+    await expect(response.json()).resolves.toMatchObject({ health: 'degraded', generation: 1 })
+  })
+
+  it('returns 404 when diagnostics are disabled', async () => {
+    const GET = createDevRuntimeStatusRoute({ resolveConfig: () => createConfig(directory, { enabled: false }) })
+    const response = await GET(statusRequest())
+    expect(response.status).toBe(404)
+  })
+
+  it('returns 403 for a missing or wrong token', async () => {
+    const config = createConfig(directory)
+    writeStatusFile(config, createStatus())
+    const GET = createDevRuntimeStatusRoute({ resolveConfig: () => config })
+
+    await expect(GET(statusRequest({})).then((r) => r.status)).resolves.toBe(403)
+    await expect(
+      GET(statusRequest({ [DEV_RUNTIME_TOKEN_HEADER]: 'wrong-token-value-xx' })).then((r) => r.status),
+    ).resolves.toBe(403)
+  })
+
+  it('rejects a cross-origin request', async () => {
+    const config = createConfig(directory)
+    writeStatusFile(config, createStatus())
+    const GET = createDevRuntimeStatusRoute({ resolveConfig: () => config })
+
+    const response = await GET(statusRequest({
+      [DEV_RUNTIME_TOKEN_HEADER]: TOKEN,
+      origin: 'http://evil.example',
+    }))
+    expect(response.status).toBe(403)
+  })
+
+  it('returns 404 while the supervisor state is unavailable', async () => {
+    const GET = createDevRuntimeStatusRoute({ resolveConfig: () => createConfig(directory) })
+    const response = await GET(statusRequest())
+    expect(response.status).toBe(404)
+  })
+})
+
+describe('createDevRuntimeDiagnosticsRoute', () => {
+  let directory: string
+  let config: DevRuntimeServerConfig
+
+  beforeEach(() => {
+    directory = createTempDir()
+    config = createConfig(directory)
+  })
+  afterEach(() => { fs.rmSync(directory, { recursive: true, force: true }) })
+
+  function readSink(): Array<Record<string, unknown>> {
+    if (!fs.existsSync(config.diagnosticsFilePath!)) return []
+    return fs.readFileSync(config.diagnosticsFilePath!, 'utf8')
+      .split('\n')
+      .filter(Boolean)
+      .map((line) => JSON.parse(line) as Record<string, unknown>)
+  }
+
+  it('accepts a valid report and appends it to the local sink', async () => {
+    const POST = createDevRuntimeDiagnosticsRoute({ resolveConfig: () => config })
+    const response = await POST(diagnosticsRequest({
+      kind: 'global-error',
+      message: 'TypeError: x is not a function',
+      digest: 'abc123',
+      path: '/backend/example',
+    }))
+
+    expect(response.status).toBe(202)
+    await expect(response.json()).resolves.toMatchObject({ accepted: true })
+    expect(readSink()).toEqual([expect.objectContaining({
+      kind: 'global-error',
+      message: 'TypeError: x is not a function',
+      path: '/backend/example',
+    })])
+  })
+
+  it('returns 404 when diagnostics are disabled', async () => {
+    const POST = createDevRuntimeDiagnosticsRoute({ resolveConfig: () => createConfig(directory, { enabled: false }) })
+    const response = await POST(diagnosticsRequest({ kind: 'global-error', message: 'boom' }))
+    expect(response.status).toBe(404)
+    expect(readSink()).toEqual([])
+  })
+
+  it('returns 403 for a missing token', async () => {
+    const POST = createDevRuntimeDiagnosticsRoute({ resolveConfig: () => config })
+    const request = new Request('http://localhost:3000/api/dev-runtime/diagnostics', {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ kind: 'global-error', message: 'boom' }),
+    })
+    expect((await POST(request)).status).toBe(403)
+    expect(readSink()).toEqual([])
+  })
+
+  it('rejects a non-JSON content type', async () => {
+    const POST = createDevRuntimeDiagnosticsRoute({ resolveConfig: () => config })
+    const request = new Request('http://localhost:3000/api/dev-runtime/diagnostics', {
+      method: 'POST',
+      headers: { 'content-type': 'text/plain', [DEV_RUNTIME_TOKEN_HEADER]: TOKEN },
+      body: 'boom',
+    })
+    expect((await POST(request)).status).toBe(400)
+  })
+
+  it('rejects an invalid schema', async () => {
+    const POST = createDevRuntimeDiagnosticsRoute({ resolveConfig: () => config })
+    expect((await POST(diagnosticsRequest({ kind: 'shell-exec', message: 'boom' }))).status).toBe(400)
+    expect((await POST(diagnosticsRequest({ kind: 'global-error' }))).status).toBe(400)
+    expect((await POST(diagnosticsRequest({ kind: 'global-error', message: 'x', digest: 'a b' }))).status).toBe(400)
+    expect((await POST(diagnosticsRequest('{not json'))).status).toBe(400)
+    expect(readSink()).toEqual([])
+  })
+
+  it('rejects an oversized body before parsing it', async () => {
+    const POST = createDevRuntimeDiagnosticsRoute({ resolveConfig: () => config })
+    const response = await POST(diagnosticsRequest({ kind: 'global-error', message: 'x'.repeat(20_000) }))
+    expect(response.status).toBe(400)
+    await expect(response.json()).resolves.toMatchObject({ error: { code: 'report_too_large' } })
+  })
+
+  it('redacts secrets before writing to the sink', async () => {
+    const POST = createDevRuntimeDiagnosticsRoute({ resolveConfig: () => config })
+    await POST(diagnosticsRequest({
+      kind: 'window-error',
+      message: 'failed for postgres://admin:hunter2@localhost:5432/app',
+      stack: 'cookie: om_session=super-secret',
+    }))
+
+    const written = JSON.stringify(readSink())
+    expect(written).not.toContain('hunter2')
+    expect(written).not.toContain('super-secret')
+    expect(written).toContain('postgres://***')
+  })
+
+  it('rate limits a looping reporter', async () => {
+    const POST = createDevRuntimeDiagnosticsRoute({ resolveConfig: () => config })
+    const statuses: number[] = []
+    for (let index = 0; index < 35; index += 1) {
+      statuses.push((await POST(diagnosticsRequest({ kind: 'global-error', message: `boom ${index}` }))).status)
+    }
+    expect(statuses.filter((status) => status === 202)).toHaveLength(30)
+    expect(statuses.filter((status) => status === 429)).toHaveLength(5)
+  })
+
+  it('reports a collector failure instead of throwing', async () => {
+    const POST = createDevRuntimeDiagnosticsRoute({
+      resolveConfig: () => createConfig(directory, {
+        diagnosticsFilePath: path.join(directory, 'missing-directory', 'diagnostics.ndjson'),
+      }),
+    })
+    const response = await POST(diagnosticsRequest({ kind: 'global-error', message: 'boom' }))
+    expect(response.status).toBe(503)
+  })
+})
+
+describe('createDevRuntimeActionsRoute', () => {
+  let directory: string
+  let config: DevRuntimeServerConfig
+
+  beforeEach(() => {
+    directory = createTempDir()
+    config = createConfig(directory)
+  })
+  afterEach(() => { fs.rmSync(directory, { recursive: true, force: true }) })
+
+  function actionRequest(action: string, headers: Record<string, string> = { [DEV_RUNTIME_TOKEN_HEADER]: TOKEN }): [Request, { params: Promise<{ action: string }> }] {
+    return [
+      new Request(`http://localhost:3000/api/dev-runtime/actions/${action}`, { method: 'POST', headers }),
+      { params: Promise.resolve({ action }) },
+    ]
+  }
+
+  function readQueue(): Array<Record<string, unknown>> {
+    if (!fs.existsSync(config.actionsFilePath!)) return []
+    return fs.readFileSync(config.actionsFilePath!, 'utf8')
+      .split('\n').filter(Boolean)
+      .map((line) => JSON.parse(line) as Record<string, unknown>)
+  }
+
+  it('queues an allowlisted action with the current generation', async () => {
+    writeStatusFile(config, createStatus({ generation: 7 }))
+    const POST = createDevRuntimeActionsRoute({ resolveConfig: () => config })
+
+    const response = await POST(...actionRequest('migrate'))
+    expect(response.status).toBe(202)
+    await expect(response.json()).resolves.toMatchObject({ accepted: true, generation: 7 })
+    expect(readQueue()).toEqual([expect.objectContaining({ action: 'migrate', generation: 7 })])
+  })
+
+  it('rejects an action outside the allowlist without queueing anything', async () => {
+    writeStatusFile(config, createStatus())
+    const POST = createDevRuntimeActionsRoute({ resolveConfig: () => config })
+
+    const response = await POST(...actionRequest('rm-rf'))
+    expect(response.status).toBe(400)
+    await expect(response.json()).resolves.toMatchObject({ error: { code: 'unknown_action' } })
+    expect(readQueue()).toEqual([])
+  })
+
+  it('returns 403 for a missing or wrong token', async () => {
+    writeStatusFile(config, createStatus())
+    const POST = createDevRuntimeActionsRoute({ resolveConfig: () => config })
+
+    expect((await POST(...actionRequest('restart', {}))).status).toBe(403)
+    expect((await POST(...actionRequest('restart', { [DEV_RUNTIME_TOKEN_HEADER]: 'wrong-token-value-xx' }))).status).toBe(403)
+    expect(readQueue()).toEqual([])
+  })
+
+  it('rejects a cross-origin request', async () => {
+    writeStatusFile(config, createStatus())
+    const POST = createDevRuntimeActionsRoute({ resolveConfig: () => config })
+    const response = await POST(...actionRequest('restart', {
+      [DEV_RUNTIME_TOKEN_HEADER]: TOKEN,
+      origin: 'http://evil.example',
+    }))
+    expect(response.status).toBe(403)
+  })
+
+  it('returns 404 when diagnostics are disabled', async () => {
+    const POST = createDevRuntimeActionsRoute({ resolveConfig: () => createConfig(directory, { enabled: false }) })
+    expect((await POST(...actionRequest('restart'))).status).toBe(404)
+  })
+
+  it('reports a conflict while another action is running', async () => {
+    writeStatusFile(config, createStatus({
+      recovery: { action: 'generate', startedAt: '2026-08-18T10:00:00.000Z', busy: true },
+    }))
+    const POST = createDevRuntimeActionsRoute({ resolveConfig: () => config })
+
+    const response = await POST(...actionRequest('migrate'))
+    expect(response.status).toBe(409)
+    await expect(response.json()).resolves.toMatchObject({ error: { code: 'action_busy' } })
+    expect(readQueue()).toEqual([])
+  })
+
+  it('reports 503 when the supervisor state is unavailable', async () => {
+    const POST = createDevRuntimeActionsRoute({ resolveConfig: () => config })
+    expect((await POST(...actionRequest('restart'))).status).toBe(503)
+  })
+
+  it('reports 503 when the supervisor exposed no action channel', async () => {
+    const withoutChannel = createConfig(directory, { actionsFilePath: null })
+    writeStatusFile(withoutChannel, createStatus())
+    const POST = createDevRuntimeActionsRoute({ resolveConfig: () => withoutChannel })
+    expect((await POST(...actionRequest('restart'))).status).toBe(503)
+  })
+})
+
+describe('createDevRuntimeLogsRoute', () => {
+  let directory: string
+  let config: DevRuntimeServerConfig
+
+  beforeEach(() => {
+    directory = createTempDir()
+    config = createConfig(directory)
+  })
+  afterEach(() => { fs.rmSync(directory, { recursive: true, force: true }) })
+
+  function writeLogs(lines: Array<Record<string, unknown>>, token = TOKEN): void {
+    fs.writeFileSync(config.logsFilePath!, JSON.stringify({ token, generation: 1, lines }), 'utf8')
+  }
+
+  function logsRequest(cursor?: number, headers: Record<string, string> = { [DEV_RUNTIME_TOKEN_HEADER]: TOKEN }): Request {
+    const suffix = cursor === undefined ? '' : `?cursor=${cursor}`
+    return new Request(`http://localhost:3000/api/dev-runtime/logs${suffix}`, { headers })
+  }
+
+  const LINES = [
+    { seq: 1, at: '2026-08-18T10:00:01.000Z', generation: 1, source: 'log', text: 'first' },
+    { seq: 2, at: '2026-08-18T10:00:02.000Z', generation: 1, source: 'log', text: 'second' },
+  ]
+
+  it('serves the bounded log tail', async () => {
+    writeLogs(LINES)
+    const GET = createDevRuntimeLogsRoute({ resolveConfig: () => config })
+    const response = await GET(logsRequest())
+    expect(response.status).toBe(200)
+    await expect(response.json()).resolves.toMatchObject({ generation: 1, nextCursor: 2 })
+  })
+
+  it('honours the cursor so the view can poll incrementally', async () => {
+    writeLogs(LINES)
+    const GET = createDevRuntimeLogsRoute({ resolveConfig: () => config })
+    const body = await (await GET(logsRequest(1))).json()
+    expect(body.lines).toEqual([expect.objectContaining({ seq: 2, text: 'second' })])
+  })
+
+  it('restarts the snapshot on a malformed cursor instead of failing', async () => {
+    writeLogs(LINES)
+    const GET = createDevRuntimeLogsRoute({ resolveConfig: () => config })
+    const response = await GET(new Request('http://localhost:3000/api/dev-runtime/logs?cursor=nope', {
+      headers: { [DEV_RUNTIME_TOKEN_HEADER]: TOKEN },
+    }))
+    expect(response.status).toBe(200)
+    await expect(response.json()).resolves.toMatchObject({ nextCursor: 2 })
+  })
+
+  it('rejects a missing token, a wrong origin and a disabled runtime', async () => {
+    writeLogs(LINES)
+    const GET = createDevRuntimeLogsRoute({ resolveConfig: () => config })
+    expect((await GET(logsRequest(0, {}))).status).toBe(403)
+    expect((await GET(logsRequest(0, { [DEV_RUNTIME_TOKEN_HEADER]: TOKEN, origin: 'http://evil.example' }))).status).toBe(403)
+
+    const disabled = createDevRuntimeLogsRoute({ resolveConfig: () => createConfig(directory, { enabled: false }) })
+    expect((await disabled(logsRequest())).status).toBe(404)
+  })
+
+  it('rejects a log file written by a different run', async () => {
+    writeLogs(LINES, 'a-stale-token-of-len')
+    const GET = createDevRuntimeLogsRoute({ resolveConfig: () => config })
+    expect((await GET(logsRequest())).status).toBe(404)
+  })
+
+  it('returns 404 when the supervisor published no logs', async () => {
+    const GET = createDevRuntimeLogsRoute({ resolveConfig: () => config })
+    expect((await GET(logsRequest())).status).toBe(404)
+  })
+})