@pithy-sh/core 0.12.0 → 0.14.0

package/src/test-utils/connectionFixtures.ts

@@ -0,0 +1,58 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+
+import type { ControlPlaneConnection, RegisteredKey } from "../controlPlane/data/connection";
+import type { OidcTrust } from "../controlPlane/data/oidcTrust";
+
+/** The instant the connection fixtures are read at. */
+export const FIXTURE_NOW = new Date("2026-10-27T12:00:00.000Z");
+const REGISTERED = new Date("2026-10-01T00:00:00.000Z");
+
+/** A registered key, live at {@link FIXTURE_NOW} unless overridden. */
+export function fixtureKey(keyId: string, overrides: Partial<RegisteredKey> = {}): RegisteredKey {
+  return {
+    keyId,
+    publicKey: { kty: "OKP", crv: "Ed25519", x: "11qYAYKxCrfVS_7TyWQHOg7hcvPapiMlrwIaaPcHURo" },
+    validFrom: REGISTERED,
+    validUntil: null,
+    revokedAt: null,
+    ...overrides,
+  };
+}
+
+/** An OIDC trust, live at {@link FIXTURE_NOW} unless overridden. */
+export function fixtureTrust(trustId: string, overrides: Partial<OidcTrust> = {}): OidcTrust {
+  return {
+    trustId,
+    issuer: "https://token.actions.githubusercontent.com",
+    jwksUrl: "https://token.actions.githubusercontent.com/.well-known/jwks",
+    audience: "https://api.example.com",
+    claims: { repository_id: "1262274726" },
+    authorizedBy: "ada@example.com",
+    validFrom: REGISTERED,
+    revokedAt: null,
+    firstCallAt: null,
+    ...overrides,
+  };
+}
+
+/** A connection authorized by ada@example.com, holding one live key, unless overridden. */
+export function fixtureConnection(overrides: Partial<ControlPlaneConnection> = {}): ControlPlaneConnection {
+  return {
+    id: "3f2504e0-4f89-41d3-9a0c-0305e82c3301",
+    environment: "prod",
+    issuer: "https://app.pithy.sh",
+    workerUrl: "https://api.example.com",
+    basePath: "/control-plane",
+    managementOrigin: null,
+    authorizedBy: "ada@example.com",
+    actorKind: "agent",
+    purpose: "Nightly audit summarizer.",
+    scopes: ["manifest:read"],
+    keys: [fixtureKey("k1")],
+    trusts: [],
+    createdAt: REGISTERED,
+    updatedAt: REGISTERED,
+    ...overrides,
+  };
+}

package/src/test-utils/interleave.ts

@@ -0,0 +1,31 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+
+import type { Kysely, KyselyPlugin, QueryId } from "kysely";
+
+/**
+ * The same database, with `between` run after each of its first `times` reads and before the caller sees the rows: a
+ * write that lands between a read and the write made from it.
+ *
+ * `between` receives the count of reads it has followed so far, from 0. It must write through another handle, since a
+ * read it made through this one would be followed in turn.
+ */
+export function writeAfterRead<DB>(
+  db: Kysely<DB>,
+  between: (count: number) => Promise<void>,
+  times = Number.POSITIVE_INFINITY,
+): Kysely<DB> {
+  const reads = new WeakSet<QueryId>();
+  let count = 0;
+  const plugin: KyselyPlugin = {
+    transformQuery({ queryId, node }) {
+      if (node.kind === "SelectQueryNode") reads.add(queryId);
+      return node;
+    },
+    async transformResult({ queryId, result }) {
+      if (reads.has(queryId) && count < times) await between(count++);
+      return result;
+    },
+  };
+  return db.withPlugin(plugin);
+}

package/src/testWorker.ts

@@ -0,0 +1,13 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+
+// The Miniflare `main` for `*.workers.test.ts`: it exists only to register the presence room's Durable Object
+// class, so the `PRESENCE_ROOMS` test binding resolves. Its fetch is inert.
+
+export { PresenceRoom } from "./presence/durableObject";
+
+export default {
+  fetch(): Response {
+    return new Response("core test worker", { status: 200 });
+  },
+};

package/src/version.generated.ts

@@ -13,4 +13,4 @@
 export const PACKAGE_NAME = "@pithy-sh/core";
 
 /** This package's version, stamped from its own package.json at generation time. */
-export const PACKAGE_VERSION = "0.12.0";
+export const PACKAGE_VERSION = "0.14.0";