@openora/core 0.4.1-canary.37 → 0.4.1-canary.39

package/dist/server/kernel/__tests__/router-utils.test.js

@@ -0,0 +1,80 @@
+import { describe, it, expect } from 'vitest';
+import { ORPCError } from '@orpc/server';
+import { getUserId, extractClientMeta } from '../router-utils.js';
+const withRequest = (extra = {}) => ({
+    request: { headers: {} },
+    ...extra,
+});
+const reasonOf = (fn) => {
+    try {
+        fn();
+    }
+    catch (err) {
+        return err.data.reason;
+    }
+    throw new Error('expected getUserId to throw');
+};
+describe('getUserId', () => {
+    it('returns the resolved caller id', () => {
+        expect(getUserId(withRequest({ auth: { userId: 'user-1' } }))).toBe('user-1');
+    });
+    it.each([
+        ['undefined', undefined],
+        ['null', null],
+        ['a primitive', 'not-a-context'],
+        ['an object without request', { auth: { userId: 'user-1' } }],
+        ['a context whose request is not an object', { request: 'GET /' }],
+    ])('rejects %s as a missing request context', (_label, context) => {
+        expect(reasonOf(() => getUserId(context))).toBe('missing_request_context');
+    });
+    it.each([
+        ['no auth at all', withRequest()],
+        ['an auth without a userId', withRequest({ auth: {} })],
+        ['an empty userId', withRequest({ auth: { userId: '' } })],
+    ])('rejects %s as unauthenticated', (_label, context) => {
+        expect(reasonOf(() => getUserId(context))).toBe('authentication_required');
+    });
+    it('throws UNAUTHORIZED rather than a bare Error', () => {
+        expect(() => getUserId(undefined)).toThrow(ORPCError);
+    });
+});
+describe('extractClientMeta', () => {
+    const meta = (headers) => extractClientMeta(headers);
+    it('reads a single x-forwarded-for entry', () => {
+        expect(meta({ 'x-forwarded-for': '203.0.113.7' }).ip).toBe('203.0.113.7');
+    });
+    it('takes the leftmost hop of a proxy chain and trims it', () => {
+        expect(meta({ 'x-forwarded-for': ' 203.0.113.7 , 10.0.0.1, 10.0.0.2' }).ip).toBe('203.0.113.7');
+    });
+    it('takes the first value when the header arrives repeated', () => {
+        expect(meta({ 'x-forwarded-for': ['203.0.113.7', '198.51.100.4'] }).ip).toBe('203.0.113.7');
+    });
+    it('falls back to x-real-ip when x-forwarded-for is absent', () => {
+        expect(meta({ 'x-real-ip': '198.51.100.4' }).ip).toBe('198.51.100.4');
+    });
+    it('falls back to x-real-ip when x-forwarded-for is empty', () => {
+        expect(meta({ 'x-forwarded-for': '', 'x-real-ip': '198.51.100.4' }).ip).toBe('198.51.100.4');
+    });
+    it('prefers x-forwarded-for over x-real-ip', () => {
+        expect(meta({ 'x-forwarded-for': '203.0.113.7', 'x-real-ip': '198.51.100.4' }).ip).toBe('203.0.113.7');
+    });
+    it('reads the first x-real-ip when that header arrives repeated', () => {
+        expect(meta({ 'x-real-ip': ['198.51.100.4', '198.51.100.9'] }).ip).toBe('198.51.100.4');
+    });
+    it('carries the user agent through', () => {
+        expect(meta({ 'user-agent': 'curl/8.4.0' }).userAgent).toBe('curl/8.4.0');
+    });
+    it('takes the first user agent when the header arrives repeated', () => {
+        expect(meta({ 'user-agent': ['curl/8.4.0', 'wget'] }).userAgent).toBe('curl/8.4.0');
+    });
+    it('returns nulls rather than undefined for an empty header bag', () => {
+        expect(meta({})).toEqual({ ip: null, userAgent: null });
+    });
+    it('returns nulls when the headers are present but undefined', () => {
+        expect(meta({ 'x-forwarded-for': undefined, 'user-agent': undefined })).toEqual({
+            ip: null,
+            userAgent: null,
+        });
+    });
+});
+//# sourceMappingURL=router-utils.test.js.map

package/dist/server/kernel/__tests__/router-utils.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router-utils.test.js","sourceRoot":"","sources":["../../../../src/server/kernel/__tests__/router-utils.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAoB,MAAM,oBAAoB,CAAC;AAEpF,MAAM,WAAW,GAAG,CAAC,QAAiC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5D,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACxB,GAAG,KAAK;CACT,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,EAAiB,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,EAAE,EAAE,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6C,CAAC,IAAI,CAAC,MAAM,CAAC;IACpE,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,WAAW,EAAE,SAAS,CAAC;QACxB,CAAC,MAAM,EAAE,IAAI,CAAC;QACd,CAAC,aAAa,EAAE,eAAe,CAAC;QAChC,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC7D,CAAC,0CAA0C,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;KACnE,CAAC,CAAC,yCAAyC,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,gBAAgB,EAAE,WAAW,EAAE,CAAC;QACjC,CAAC,0BAA0B,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;KAC3D,CAAC,CAAC,+BAA+B,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACtD,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,MAAM,IAAI,GAAG,CAAC,OAAoB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAElE,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,mCAAmC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CACrF,aAAa,CACd,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9E,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/kernel/bullmq-job-queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bullmq-job-queue.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/bullmq-job-queue.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,eAAe,EACf,SAAS,EACT,cAAc,EACd,aAAa,EAEb,kBAAkB,EACnB,MAAM,yBAAyB,CAAC;AAgBjC;;;;;;;;;;;GAWG;AACH,qBAAa,cAAe,YAAW,eAAe;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;gBAExC,QAAQ,EAAE,MAAM;IAK5B,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAgC5F,cAAc,CAAC,CAAC,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI;IAqC5D,QAAQ,CAAC,CAAC,EACR,KAAK,EAAE,SAAS,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,CAAC,EACV,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC;IAWhB,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMzD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,OAAO,CAAC,QAAQ;YAUF,UAAU;CAwBzB"}
+{"version":3,"file":"bullmq-job-queue.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/bullmq-job-queue.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,eAAe,EACf,SAAS,EACT,cAAc,EACd,aAAa,EAEb,kBAAkB,EACnB,MAAM,yBAAyB,CAAC;AAwBjC;;;;;;;;;;;GAWG;AACH,qBAAa,cAAe,YAAW,eAAe;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;gBAExC,QAAQ,EAAE,MAAM;IAK5B,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IA+B5F,cAAc,CAAC,CAAC,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI;IAqC5D,QAAQ,CAAC,CAAC,EACR,KAAK,EAAE,SAAS,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,CAAC,EACV,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC;IAWhB,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMzD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,OAAO,CAAC,QAAQ;YAUF,UAAU;CAwBzB"}

package/dist/server/kernel/bullmq-job-queue.js

@@ -1,5 +1,12 @@
 import { Queue, Worker } from 'bullmq';
 import { createLogger } from './logger.js';
+// BullMQ reserves ':' as its Redis key separator and rejects an all-digit id, so an
+// `idempotencyKey` is percent-encoded into a safe job id. The encoding is injective -
+// two distinct keys can never collapse onto one job id and silently dedupe apart.
+function toJobId(idempotencyKey) {
+    const encoded = idempotencyKey.replaceAll('%', '%25').replaceAll(':', '%3A');
+    return /^\d+$/.test(encoded) ? `key-${encoded}` : encoded;
+}
 /**
  * Durable `JOB_QUEUE` reference driver, auto-bound by `createApp` when
  * `REDIS_URL` is set - jobs survive a process restart and `cron`/`everyMs`
@@ -35,8 +42,7 @@ export class BullMqJobQueue {
             meta: { ...opts.meta, idempotencyKey: opts.idempotencyKey },
         };
         const jobOpts = {
-            // idempotencyKey -> jobId: BullMQ dedupes to one job per id.
-            jobId: opts.idempotencyKey,
+            jobId: opts.idempotencyKey ? toJobId(opts.idempotencyKey) : undefined,
             delay: opts.delayMs,
             attempts: opts.attempts,
             backoff: opts.backoff ? { type: opts.backoff.type, delay: opts.backoff.delayMs } : undefined,

package/dist/server/kernel/bullmq-job-queue.js.map

@@ -1 +1 @@
-{"version":3,"file":"bullmq-job-queue.js","sourceRoot":"","sources":["../../../src/server/kernel/bullmq-job-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAsD,MAAM,QAAQ,CAAC;AAS3F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAe3C;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,cAAc;IACR,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;IAC1C,UAAU,CAAoB;IAC9B,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC/C,OAAO,GAA0B,EAAE,CAAC;IACpC,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpD,YAAY,QAAgB;QAC1B,kFAAkF;QAClF,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAClE,CAAC;IAED,OAAO,CAAI,KAAgB,EAAE,OAAU,EAAE,OAAuB,EAAE;QAChE,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/B,mFAAmF;YACnF,qFAAqF;YACrF,uEAAuE;YACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,EACT,sHAAsH,CACvH,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAgB;YAC5B,OAAO;YACP,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;SAC5D,CAAC;QAEF,MAAM,OAAO,GAAgB;YAC3B,6DAA6D;YAC7D,KAAK,EAAE,IAAI,CAAC,cAAc;YAC1B,KAAK,EAAE,IAAI,CAAC,OAAO;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;YAC5F,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,qFAAqF;SACtF,CAAC;QAEF,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;aACxB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;aAC7B,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,cAAc,CAAI,YAAmC;QACnD,MAAM,GAAG,GAAG,YAAyB,CAAC;QACtC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;QAErC,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,SAAS,EACT,KAAK,EAAE,GAAG,EAAE,EAAE;YACZ,MAAM,GAAG,GAAwB;gBAC/B,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE;gBAChB,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC3C,OAAO,EAAE,GAAG,CAAC,YAAY,GAAG,CAAC;gBAC7B,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBACnC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;aACpB,CAAC;YACF,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,gFAAgF;QAChF,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,EAAE,CACrF,CAAC;QAEF,oFAAoF;QACpF,mFAAmF;QACnF,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC3C,IAAI,GAAG,CAAC,YAAY,GAAG,WAAW,EAAE,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,QAAQ,CACN,KAAgB,EAChB,UAAkB,EAClB,OAAU,EACV,MAAqB;QAErB,MAAM,QAAQ,GAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;aACxB,kBAAkB,CACjB,UAAU,EACV,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EACpE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAChC;aACA,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAED,UAAU,CAAC,KAAgB,EAAE,UAAkB;QAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;aACxB,kBAAkB,CAAC,UAAU,CAAC;aAC9B,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,gFAAgF;QAChF,2BAA2B;QAC3B,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAEO,QAAQ,CAAC,KAAgB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,KAAK,CAAc,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,MAAiB,EAAE,GAAqB,EAAE,KAAY;QAC7E,MAAM,GAAG,GAAwB;YAC/B,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE;YAChB,IAAI,EAAE,MAAM,CAAC,KAAK;YAClB,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;YACzB,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YACnC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;SACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EACpE,yDAAyD,CAC1D,CAAC;QACF,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAChD,4CAA4C,CAC7C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"bullmq-job-queue.js","sourceRoot":"","sources":["../../../src/server/kernel/bullmq-job-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAsD,MAAM,QAAQ,CAAC;AAS3F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAe3C,oFAAoF;AACpF,sFAAsF;AACtF,kFAAkF;AAClF,SAAS,OAAO,CAAC,cAAsB;IACrC,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,cAAc;IACR,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;IAC1C,UAAU,CAAoB;IAC9B,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC/C,OAAO,GAA0B,EAAE,CAAC;IACpC,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpD,YAAY,QAAgB;QAC1B,kFAAkF;QAClF,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAClE,CAAC;IAED,OAAO,CAAI,KAAgB,EAAE,OAAU,EAAE,OAAuB,EAAE;QAChE,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/B,mFAAmF;YACnF,qFAAqF;YACrF,uEAAuE;YACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,EACT,sHAAsH,CACvH,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAgB;YAC5B,OAAO;YACP,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;SAC5D,CAAC;QAEF,MAAM,OAAO,GAAgB;YAC3B,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,KAAK,EAAE,IAAI,CAAC,OAAO;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;YAC5F,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,qFAAqF;SACtF,CAAC;QAEF,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;aACxB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;aAC7B,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,cAAc,CAAI,YAAmC;QACnD,MAAM,GAAG,GAAG,YAAyB,CAAC;QACtC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;QAErC,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,SAAS,EACT,KAAK,EAAE,GAAG,EAAE,EAAE;YACZ,MAAM,GAAG,GAAwB;gBAC/B,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE;gBAChB,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC3C,OAAO,EAAE,GAAG,CAAC,YAAY,GAAG,CAAC;gBAC7B,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBACnC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;aACpB,CAAC;YACF,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,gFAAgF;QAChF,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,EAAE,CACrF,CAAC;QAEF,oFAAoF;QACpF,mFAAmF;QACnF,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YACjC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YACD,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC3C,IAAI,GAAG,CAAC,YAAY,GAAG,WAAW,EAAE,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,QAAQ,CACN,KAAgB,EAChB,UAAkB,EAClB,OAAU,EACV,MAAqB;QAErB,MAAM,QAAQ,GAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;aACxB,kBAAkB,CACjB,UAAU,EACV,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EACpE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAChC;aACA,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAED,UAAU,CAAC,KAAgB,EAAE,UAAkB;QAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;aACxB,kBAAkB,CAAC,UAAU,CAAC;aAC9B,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,gFAAgF;QAChF,2BAA2B;QAC3B,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAEO,QAAQ,CAAC,KAAgB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,KAAK,CAAc,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,MAAiB,EAAE,GAAqB,EAAE,KAAY;QAC7E,MAAM,GAAG,GAAwB;YAC/B,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE;YAChB,IAAI,EAAE,MAAM,CAAC,KAAK;YAClB,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;YACzB,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YACnC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;SACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EACpE,yDAAyD,CAC1D,CAAC;QACF,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAChD,4CAA4C,CAC7C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/server/runtime/__tests__/create-app.test.js

@@ -1,7 +1,6 @@
 import { describe, it, expect, afterEach } from 'vitest';
 import { MESSAGE_BROKER, JOB_QUEUE, CACHE, RATE_LIMITER } from '@openora/core/contracts';
-import { InMemoryBroker, InProcessJobQueue, InProcessCache, InProcessRateLimiter, } from '@openora/core/testing';
-import { createLogger } from '../../kernel/index.js';
+import { redisUrlForWorker } from '@openora/core/testing';
 import { createApp } from '../create-app.js';
 // A syntactically valid but unreachable DB url - fine here because nothing in this
 // suite ever runs a query: DrizzleService's pg.Pool connects lazily, and neither
@@ -12,22 +11,31 @@ describe('createApp - distributed-only durable seams (ADR-0030)', () => {
     it('throws a clear, actionable error when no durable seam is bound', async () => {
         await expect(createApp({ plugins: [], databaseUrl: DUMMY_DATABASE_URL, openapi: { enabled: false } })).rejects.toThrow(/MESSAGE_BROKER.*JOB_QUEUE.*CACHE.*RATE_LIMITER/s);
     });
-    it('boots and serves once the fakes are bound via configure', async () => {
-        const created = await createApp({
-            plugins: [],
-            databaseUrl: DUMMY_DATABASE_URL,
-            openapi: { enabled: false },
-            configure(container) {
-                container.register(MESSAGE_BROKER, () => new InMemoryBroker());
-                container.register(JOB_QUEUE, () => new InProcessJobQueue(createLogger('job-queue')));
-                container.register(CACHE, () => new InProcessCache());
-                container.register(RATE_LIMITER, () => new InProcessRateLimiter());
-            },
-        });
-        const res = await created.app.request('/health');
-        expect(res.status).toBe(200);
-        expect(await res.json()).toMatchObject({ status: 'ok' });
-        await created.close();
+    it('boots and serves once REDIS_URL auto-binds all four seams', async () => {
+        const saved = process.env['REDIS_URL'];
+        process.env['REDIS_URL'] = redisUrlForWorker();
+        try {
+            const created = await createApp({
+                plugins: [],
+                databaseUrl: DUMMY_DATABASE_URL,
+                openapi: { enabled: false },
+            });
+            for (const token of [MESSAGE_BROKER, JOB_QUEUE, CACHE, RATE_LIMITER]) {
+                expect(created.container.has(token)).toBe(true);
+            }
+            const res = await created.app.request('/health');
+            expect(res.status).toBe(200);
+            expect(await res.json()).toMatchObject({ status: 'ok' });
+            await created.close();
+        }
+        finally {
+            if (saved === undefined) {
+                delete process.env['REDIS_URL'];
+            }
+            else {
+                process.env['REDIS_URL'] = saved;
+            }
+        }
     });
 });
 describe('createApp - service name for the Redis Streams consumer group', () => {

package/dist/server/runtime/__tests__/create-app.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-app.test.js","sourceRoot":"","sources":["../../../../src/server/runtime/__tests__/create-app.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACzF,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,mFAAmF;AACnF,iFAAiF;AACjF,mFAAmF;AACnF,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,kDAAkD,CAAC;AAE9E,QAAQ,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACrE,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,CACV,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CACzF,CAAC,OAAO,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;YAC9B,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,kBAAkB;YAC/B,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YAC3B,SAAS,CAAC,SAAS;gBACjB,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;gBAC/D,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,iBAAiB,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;gBACtF,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;gBACtD,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;YACrE,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAE7F,SAAS,CAAC,GAAG,EAAE;QACb,gFAAgF;QAChF,0DAA0D;QAC1D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI;YACzB,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC;YAC1B,CAAC,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC;SAC5B,EAAE,CAAC;YACX,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,4EAA4E;QAC5E,gFAAgF;QAChF,uDAAuD;QACvD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,qBAAqB,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;QAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAEnC,MAAM,MAAM,CACV,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CACzF,CAAC,OAAO,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"create-app.test.js","sourceRoot":"","sources":["../../../../src/server/runtime/__tests__/create-app.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,mFAAmF;AACnF,iFAAiF;AACjF,mFAAmF;AACnF,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,kDAAkD,CAAC;AAE9E,QAAQ,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACrE,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,CACV,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CACzF,CAAC,OAAO,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,iBAAiB,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;gBAC9B,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,kBAAkB;gBAC/B,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;aAC5B,CAAC,CAAC;YAEH,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;gBACrE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAEzD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAE7F,SAAS,CAAC,GAAG,EAAE;QACb,gFAAgF;QAChF,0DAA0D;QAC1D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI;YACzB,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC;YAC1B,CAAC,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC;SAC5B,EAAE,CAAC;YACX,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,4EAA4E;QAC5E,gFAAgF;QAChF,uDAAuD;QACvD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,qBAAqB,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;QAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAEnC,MAAM,MAAM,CACV,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CACzF,CAAC,OAAO,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/testing/index.d.ts

@@ -1,7 +1,3 @@
-export { InMemoryBroker } from './fakes/event-bus.js';
-export { InProcessRateLimiter } from './fakes/rate-limiter.js';
-export { InProcessCache } from './fakes/cache.js';
-export { InProcessJobQueue } from './fakes/job-queue.js';
-export { InProcessRealtimeTransport } from './fakes/realtime-transport.js';
-export { SseClientAuthorizer, type SseClientAuthorizerOptions, } from './fakes/realtime-authorizer.js';
+export { InProcessRealtimeTransport, SseClientAuthorizer } from '@openora/core/server';
+export { createTestDb, createTestRedis, redisUrlForWorker, waitForConsumerGroup, type Migration, type TestDb, type TestRedis, } from './real-infra.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,GAChC,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EACL,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,SAAS,EACd,KAAK,MAAM,EACX,KAAK,SAAS,GACf,MAAM,iBAAiB,CAAC"}

package/dist/testing/index.js

@@ -1,11 +1,3 @@
-// @openora/core/testing - test-only doubles for the seams that require a durable
-// binding in production (ADR-0030). `createApp` no longer ships these on the
-// production path; `bootTestApp` (@openora/testing) and core's own unit tests bind
-// them explicitly via a `configure` callback so the suite still runs with zero infra.
-export { InMemoryBroker } from './fakes/event-bus.js';
-export { InProcessRateLimiter } from './fakes/rate-limiter.js';
-export { InProcessCache } from './fakes/cache.js';
-export { InProcessJobQueue } from './fakes/job-queue.js';
-export { InProcessRealtimeTransport } from './fakes/realtime-transport.js';
-export { SseClientAuthorizer, } from './fakes/realtime-authorizer.js';
+export { InProcessRealtimeTransport, SseClientAuthorizer } from '@openora/core/server';
+export { createTestDb, createTestRedis, redisUrlForWorker, waitForConsumerGroup, } from './real-infra.js';
 //# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,6EAA6E;AAC7E,mFAAmF;AACnF,sFAAsF;AACtF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACL,mBAAmB,GAEpB,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EACL,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,oBAAoB,GAIrB,MAAM,iBAAiB,CAAC"}

package/dist/testing/mock.d.ts

@@ -1,32 +1,44 @@
 import { type Mock } from 'vitest';
-import type { AdminCaller, DrizzleService, OssContext } from '@openora/core/server';
-import type { ClientMeta } from '@openora/core/contracts';
+import type { AdminCaller, AdminGuard, DrizzleService, EventBus, OssContext } from '@openora/core/server';
+import type { AuditWritePort, ClientMeta } from '@openora/core/contracts';
 /** Build a typed test double from a partial shape. */
 export declare const mock: <T>(partial?: object) => T;
-/** Wrap a fake `db` handle (usually a chainable Proxy) as a DrizzleService. */
-export declare const mockDb: (db: unknown) => DrizzleService;
 export declare const NO_CLIENT_META: ClientMeta;
 export declare const adminCaller: (over?: Partial<AdminCaller>) => AdminCaller;
 export declare const testContext: (over?: Partial<OssContext>) => OssContext;
-/** Read a private field off an instance without widening the class's public API. */
-export declare const readPrivate: <V = unknown>(obj: object, key: string) => V;
 type Row = Record<string, unknown>;
-export declare function makeQueryBuilder(results: {
-    select: Row[][];
-    returning: Row[][];
-}): Record<string, unknown>;
-export declare function makeDrizzle(results?: {
+/** Fake `DrizzleService` for tests asserting call order/shape rather than committed state -
+ * reach for `createTestDb` when a real unique index, lock or transaction outcome matters. */
+export declare const makeDrizzle: (results?: {
     select?: Row[][];
     returning?: Row[][];
-}): DrizzleService;
-export declare const makeEvents: () => {
+}) => DrizzleService;
+type MockedEventBus = EventBus & {
     emit: Mock;
     on: Mock;
     emitInTransaction: Mock;
 };
-export declare const makePayment: () => {
-    processDeposit: Mock;
-    processWithdrawal: Mock;
+/**
+ * EventBus double whose three methods are vitest mocks, so a test can both pass it
+ * to a service and assert on `events.emit` without a second `mock<EventBus>()` wrap.
+ */
+export declare const makeEventBus: () => MockedEventBus;
+export declare const makeAuditWriter: () => AuditWritePort & {
+    record: Mock;
 };
+/**
+ * AdminGuard double driven by permission lists rather than a hand-rolled `assert`.
+ *
+ * Pass `allow` for an allowlist (anything unlisted throws FORBIDDEN, so `allow: []`
+ * denies every guarded route) or `deny` for a denylist. Each entry is a bare
+ * resource (`'admin'`, matching any action on it) or a full `resource:action`.
+ * With neither list every check passes. An unguarded `assert(ctx)` - no resource -
+ * always passes, mirroring the real guard's plain admin check.
+ */
+export declare const makeAdminGuard: (options?: {
+    allow?: readonly string[];
+    deny?: readonly string[];
+    caller?: Partial<AdminCaller>;
+}) => AdminGuard;
 export {};
 //# sourceMappingURL=mock.d.ts.map

package/dist/testing/mock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../../src/testing/mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAM,KAAK,IAAI,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAQ1D,sDAAsD;AACtD,eAAO,MAAM,IAAI,GAAI,CAAC,EAAE,UAAS,MAAW,KAAG,CAA4B,CAAC;AAE5E,+EAA+E;AAC/E,eAAO,MAAM,MAAM,GAAI,IAAI,OAAO,KAAG,cAAuD,CAAC;AAE7F,eAAO,MAAM,cAAc,EAAE,UAA0C,CAAC;AAExE,eAAO,MAAM,WAAW,GAAI,OAAM,OAAO,CAAC,WAAW,CAAM,KAAG,WAK5D,CAAC;AAEH,eAAO,MAAM,WAAW,GAAI,OAAM,OAAO,CAAC,UAAU,CAAM,KAAG,UAI3D,CAAC;AAEH,oFAAoF;AACpF,eAAO,MAAM,WAAW,GAAI,CAAC,GAAG,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,MAAM,KAAG,CACnC,CAAC;AAElC,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAInC,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;IAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAA;CAAE,2BA6BhF;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,CAAA;CAAO,kBAQlF;AAED,eAAO,MAAM,UAAU,QAAO;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,iBAAiB,EAAE,IAAI,CAAA;CAI3E,CAAC;AAEH,eAAO,MAAM,WAAW,QAAO;IAAE,cAAc,EAAE,IAAI,CAAC;IAAC,iBAAiB,EAAE,IAAI,CAAA;CAG5E,CAAC"}
+{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../../src/testing/mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAM,KAAK,IAAI,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,QAAQ,EACR,UAAU,EACX,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAQ1E,sDAAsD;AACtD,eAAO,MAAM,IAAI,GAAI,CAAC,EAAE,UAAS,MAAW,KAAG,CAA4B,CAAC;AAE5E,eAAO,MAAM,cAAc,EAAE,UAA0C,CAAC;AAExE,eAAO,MAAM,WAAW,GAAI,OAAM,OAAO,CAAC,WAAW,CAAM,KAAG,WAK5D,CAAC;AAEH,eAAO,MAAM,WAAW,GAAI,OAAM,OAAO,CAAC,UAAU,CAAM,KAAG,UAI3D,CAAC;AAEH,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAsCnC;6FAC6F;AAC7F,eAAO,MAAM,WAAW,GAAI,UAAS;IAAE,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,CAAA;CAAO,KAOrD,cAC7B,CAAC;AAEF,KAAK,cAAc,GAAG,QAAQ,GAAG;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,iBAAiB,EAAE,IAAI,CAAA;CAAE,CAAC;AAEnF;;;GAGG;AACH,eAAO,MAAM,YAAY,QAAO,cACkD,CAAC;AAEnF,eAAO,MAAM,eAAe,QAAO,cAAc,GAAG;IAAE,MAAM,EAAE,IAAI,CAAA;CAEhE,CAAC;AAcH;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,GACzB,UAAS;IACP,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;CAC1B,KACL,UAQC,CAAC"}

package/dist/testing/mock.js

@@ -1,4 +1,5 @@
 import { vi } from 'vitest';
+import { ORPCError } from '@orpc/server';
 // The one sanctioned home for test-double type assertions. A unit test standing in
 // for a collaborator is inherently partial, so the cast lives here - documented and
 // in one place - instead of scattered `as unknown as` across every test body.
@@ -6,8 +7,6 @@ import { vi } from 'vitest';
 // funnelled through these helpers.
 /** Build a typed test double from a partial shape. */
 export const mock = (partial = {}) => partial;
-/** Wrap a fake `db` handle (usually a chainable Proxy) as a DrizzleService. */
-export const mockDb = (db) => ({ db });
 export const NO_CLIENT_META = { ip: null, userAgent: null };
 export const adminCaller = (over = {}) => ({
     userId: 'admin-1',
@@ -20,32 +19,32 @@ export const testContext = (over = {}) => ({
     clientMeta: NO_CLIENT_META,
     ...over,
 });
-/** Read a private field off an instance without widening the class's public API. */
-export const readPrivate = (obj, key) => obj[key];
-// Chainable, awaitable Drizzle double: awaiting the builder pops the next `select` queue entry,
-// `.returning()` pops the `returning` queue - a test supplies per-statement results in call order.
-export function makeQueryBuilder(results) {
+const CHAIN_METHODS = [
+    'select',
+    'from',
+    'innerJoin',
+    'leftJoin',
+    'orderBy',
+    'groupBy',
+    'limit',
+    'offset',
+    'for',
+    'insert',
+    'values',
+    'onConflictDoNothing',
+    'onConflictDoUpdate',
+    'update',
+    'set',
+    'delete',
+    'where',
+];
+/** Chainable, awaitable Drizzle double: awaiting the builder pops the next `select` queue
+ * entry, `.returning()` pops the `returning` queue - a test supplies per-statement results
+ * in call order. */
+const makeQueryBuilder = (results) => {
     const builder = {};
     const chain = () => builder;
-    for (const m of [
-        'select',
-        'from',
-        'innerJoin',
-        'leftJoin',
-        'orderBy',
-        'groupBy',
-        'limit',
-        'offset',
-        'for',
-        'insert',
-        'values',
-        'onConflictDoNothing',
-        'onConflictDoUpdate',
-        'update',
-        'set',
-        'delete',
-        'where',
-    ]) {
+    for (const m of CHAIN_METHODS) {
         builder[m] = vi.fn(chain);
     }
     builder['returning'] = vi.fn(() => Promise.resolve(results.returning.shift() ?? []));
@@ -53,23 +52,45 @@ export function makeQueryBuilder(results) {
     // oxlint-disable-next-line unicorn/no-thenable -- the builder must be awaitable to mimic Drizzle.
     builder['then'] = (resolve) => resolve(results.select.shift() ?? []);
     return builder;
-}
-export function makeDrizzle(results = {}) {
+};
+/** Fake `DrizzleService` for tests asserting call order/shape rather than committed state -
+ * reach for `createTestDb` when a real unique index, lock or transaction outcome matters. */
+export const makeDrizzle = (results = {}) => {
     const state = { select: results.select ?? [], returning: results.returning ?? [] };
     const builder = makeQueryBuilder(state);
     const db = {
         ...builder,
         transaction: vi.fn(async (fn) => fn(builder)),
     };
-    return mockDb(db);
-}
-export const makeEvents = () => ({
-    emit: vi.fn(),
-    on: vi.fn(),
-    emitInTransaction: vi.fn(),
+    return { db };
+};
+/**
+ * EventBus double whose three methods are vitest mocks, so a test can both pass it
+ * to a service and assert on `events.emit` without a second `mock<EventBus>()` wrap.
+ */
+export const makeEventBus = () => mock({ emit: vi.fn(), on: vi.fn(), emitInTransaction: vi.fn() });
+export const makeAuditWriter = () => ({
+    record: vi.fn(async () => undefined),
 });
-export const makePayment = () => ({
-    processDeposit: vi.fn().mockResolvedValue({ externalId: 'ext-1', status: 'completed' }),
-    processWithdrawal: vi.fn().mockResolvedValue({ externalId: 'ext-2', status: 'completed' }),
+const matches = (refs, resource, action) => refs.includes(resource) || refs.includes(`${resource}:${action}`);
+const isPermitted = (options, resource, action) => options.allow
+    ? matches(options.allow, resource, action)
+    : !matches(options.deny ?? [], resource, action);
+/**
+ * AdminGuard double driven by permission lists rather than a hand-rolled `assert`.
+ *
+ * Pass `allow` for an allowlist (anything unlisted throws FORBIDDEN, so `allow: []`
+ * denies every guarded route) or `deny` for a denylist. Each entry is a bare
+ * resource (`'admin'`, matching any action on it) or a full `resource:action`.
+ * With neither list every check passes. An unguarded `assert(ctx)` - no resource -
+ * always passes, mirroring the real guard's plain admin check.
+ */
+export const makeAdminGuard = (options = {}) => mock({
+    assert: vi.fn(async (_ctx, resource, action) => {
+        if (resource && action && !isPermitted(options, resource, action)) {
+            throw new ORPCError('FORBIDDEN', { message: `Missing permission: ${resource}:${action}` });
+        }
+        return adminCaller(options.caller);
+    }),
 });
 //# sourceMappingURL=mock.js.map

package/dist/testing/mock.js.map

@@ -1 +1 @@
-{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../src/testing/mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAa,MAAM,QAAQ,CAAC;AAIvC,mFAAmF;AACnF,oFAAoF;AACpF,8EAA8E;AAC9E,iFAAiF;AACjF,mCAAmC;AAEnC,sDAAsD;AACtD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAI,UAAkB,EAAE,EAAK,EAAE,CAAC,OAAuB,CAAC;AAE5E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,EAAW,EAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAA8B,CAAC;AAE7F,MAAM,CAAC,MAAM,cAAc,GAAe,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAExE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAA6B,EAAE,EAAe,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,OAAO;IACb,GAAG,cAAc;IACjB,GAAG,IAAI;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAA4B,EAAE,EAAc,EAAE,CAAC,CAAC;IAC1E,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACxB,UAAU,EAAE,cAAc;IAC1B,GAAG,IAAI;CACR,CAAC,CAAC;AAEH,oFAAoF;AACpF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAc,GAAW,EAAE,GAAW,EAAK,EAAE,CACrE,GAAyB,CAAC,GAAG,CAAC,CAAC;AAIlC,gGAAgG;AAChG,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,OAAgD;IAC/E,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI;QACd,QAAQ;QACR,MAAM;QACN,WAAW;QACX,UAAU;QACV,SAAS;QACT,SAAS;QACT,OAAO;QACP,QAAQ;QACR,KAAK;QACL,QAAQ;QACR,QAAQ;QACR,qBAAqB;QACrB,oBAAoB;QACpB,QAAQ;QACR,KAAK;QACL,QAAQ;QACR,OAAO;KACR,EAAE,CAAC;QACF,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChE,kGAAkG;IAClG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAA8B,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAqD,EAAE;IACjF,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG;QACT,GAAG,OAAO;QACV,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAsC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;KAClF,CAAC;IACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAAsD,EAAE,CAAC,CAAC;IAClF,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;IACb,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE;IACX,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAsD,EAAE,CAAC,CAAC;IACnF,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACvF,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;CAC3F,CAAC,CAAC"}
+{"version":3,"file":"mock.js","sourceRoot":"","sources":["../../src/testing/mock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAa,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAUzC,mFAAmF;AACnF,oFAAoF;AACpF,8EAA8E;AAC9E,iFAAiF;AACjF,mCAAmC;AAEnC,sDAAsD;AACtD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAI,UAAkB,EAAE,EAAK,EAAE,CAAC,OAAuB,CAAC;AAE5E,MAAM,CAAC,MAAM,cAAc,GAAe,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAExE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAA6B,EAAE,EAAe,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,OAAO;IACb,GAAG,cAAc;IACjB,GAAG,IAAI;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAA4B,EAAE,EAAc,EAAE,CAAC,CAAC;IAC1E,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACxB,UAAU,EAAE,cAAc;IAC1B,GAAG,IAAI;CACR,CAAC,CAAC;AAIH,MAAM,aAAa,GAAG;IACpB,QAAQ;IACR,MAAM;IACN,WAAW;IACX,UAAU;IACV,SAAS;IACT,SAAS;IACT,OAAO;IACP,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,qBAAqB;IACrB,oBAAoB;IACpB,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,OAAO;CACC,CAAC;AAEX;;oBAEoB;AACpB,MAAM,gBAAgB,GAAG,CAAC,OAAgD,EAAE,EAAE;IAC5E,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChE,kGAAkG;IAClG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAA8B,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5F,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF;6FAC6F;AAC7F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,UAAqD,EAAE,EAAE,EAAE;IACrF,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG;QACT,GAAG,OAAO;QACV,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAsC,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;KAClF,CAAC;IACF,OAAO,EAAE,EAAE,EAA+B,CAAC;AAC7C,CAAC,CAAC;AAIF;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAmB,EAAE,CAC/C,IAAI,CAAiB,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAEnF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAsC,EAAE,CAAC,CAAC;IACvE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,IAAuB,EAAE,QAAgB,EAAE,MAAc,EAAE,EAAE,CAC5E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC,CAAC;AAEpE,MAAM,WAAW,GAAG,CAClB,OAAgE,EAChE,QAAgB,EAChB,MAAc,EACd,EAAE,CACF,OAAO,CAAC,KAAK;IACX,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;IAC1C,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,UAII,EAAE,EACM,EAAE,CACd,IAAI,CAAa;IACf,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAa,EAAE,QAAiB,EAAE,MAAe,EAAE,EAAE;QACxE,IAAI,QAAQ,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,uBAAuB,QAAQ,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC;CACH,CAAC,CAAC"}

package/dist/testing/real-infra.d.ts

@@ -0,0 +1,47 @@
+import { createClient } from 'redis';
+import { DrizzleService } from '@openora/core/server';
+/**
+ * The Redis URL for THIS worker's logical DB, in the `redis://host:port/db` form that
+ * ioredis-based drivers (BullMQ) parse. Keeps BullMQ on the same per-worker DB as
+ * `createTestRedis`, so a `flush()` tears both down together.
+ */
+export declare function redisUrlForWorker(): string;
+/**
+ * Poll until a Redis Streams consumer group exists on `stream`. The broker creates its
+ * group lazily inside the read loop (at `$`), so a publish issued before the group
+ * exists would be missed - tests await this after subscribing, before publishing.
+ */
+export declare function waitForConsumerGroup(client: ReturnType<typeof createClient>, { stream, group, timeoutMs }: {
+    stream: string;
+    group: string;
+    timeoutMs?: number;
+}): Promise<void>;
+/** A per-module migration entrypoint (`packages/core/src/<module>/migrate.ts`). */
+export type Migration = (databaseUrl: string) => Promise<unknown>;
+export type TestDb = {
+    url: string;
+    drizzle: DrizzleService;
+    drop: () => Promise<void>;
+};
+/**
+ * Create a throwaway `test_<random>` database, apply the given per-module migrations
+ * against it, and return a `DrizzleService` bound to it. `drop()` disposes the pool
+ * and drops the database with FORCE (terminating any lingering backends).
+ *
+ * `DrizzleService` reads `DATABASE_URL` in its constructor, so this points the env at
+ * the ephemeral url just before constructing it - safe because a test file owns one db.
+ */
+export declare function createTestDb(migrations: Migration[]): Promise<TestDb>;
+export type TestRedis = {
+    client: ReturnType<typeof createClient>;
+    flush: () => Promise<void>;
+    quit: () => Promise<void>;
+};
+/**
+ * Connect a node-redis client selected to a per-worker logical DB (VITEST_POOL_ID % 16),
+ * so parallel vitest workers never collide on keys. `flush()` is a `flushDb` (safe - it
+ * only clears this worker's logical DB), for tearing down between tests. `reconnectStrategy`
+ * is off: node-redis otherwise retries a down server forever and hangs the run.
+ */
+export declare function createTestRedis(): Promise<TestRedis>;
+//# sourceMappingURL=real-infra.d.ts.map

package/dist/testing/real-infra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"real-infra.d.ts","sourceRoot":"","sources":["../../src/testing/real-infra.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAkBtD;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EACvC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAgB,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACzF,OAAO,CAAC,IAAI,CAAC,CAgBf;AAeD,mFAAmF;AACnF,MAAM,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAElE,MAAM,MAAM,MAAM,GAAG;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B3E;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,SAAS,CAAC,CAqB1D"}