@plumbus/core 0.1.0

package/dist/testing/governance.d.ts

@@ -0,0 +1,38 @@
+import type { GovernanceResult, GovernanceRule, SystemInventory } from '../governance/rule-engine.js';
+import type { GovernanceSeverity } from '../types/enums.js';
+import type { GovernanceOverride } from '../types/governance.js';
+/**
+ * Assert that specific governance rules fired in a result.
+ * Checks that each expected rule ID is present in the signals.
+ */
+export declare function assertGovernanceSignals(result: GovernanceResult, expectedRuleIds: string[]): void;
+/**
+ * Assert that specific governance rules did NOT fire.
+ */
+export declare function assertNoGovernanceSignal(result: GovernanceResult, unexpectedRuleIds: string[]): void;
+/**
+ * Assert that only signals of a given max severity are present.
+ * e.g., assertMaxSeverity(result, "warning") ensures no "high" severity signals.
+ */
+export declare function assertMaxSeverity(result: GovernanceResult, maxSeverity: GovernanceSeverity): void;
+/**
+ * Assert that specific overrides were applied in a governance result.
+ */
+export declare function assertOverridesApplied(result: GovernanceResult, expectedRuleIds: string[]): void;
+/**
+ * Assert that a system inventory is compliant with a policy profile.
+ * "Compliant" means compatibility score >= threshold (default: 100%).
+ */
+export declare function assertPolicyCompliance(inventory: SystemInventory, profileName: string, overrides?: GovernanceOverride[], threshold?: number): void;
+/**
+ * Assert that a system inventory FAILS a policy profile (for testing negative cases).
+ */
+export declare function assertPolicyNonCompliance(inventory: SystemInventory, profileName: string, overrides?: GovernanceOverride[]): void;
+/**
+ * Evaluate governance rules against an inventory and return the result.
+ * Convenience wrapper that creates an engine, registers rules, and evaluates.
+ */
+export declare function evaluateGovernance(rules: GovernanceRule[], inventory: SystemInventory, overrides?: GovernanceOverride[]): GovernanceResult;
+/** Create an empty SystemInventory, optionally overriding specific collections */
+export declare function emptyInventory(overrides?: Partial<SystemInventory>): SystemInventory;
+//# sourceMappingURL=governance.d.ts.map

package/dist/testing/governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.d.ts","sourceRoot":"","sources":["../../src/testing/governance.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EAChB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAIjE;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI,CAUjG;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,gBAAgB,EACxB,iBAAiB,EAAE,MAAM,EAAE,GAC1B,IAAI,CAUN;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,GAAG,IAAI,CAUjG;AAID;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI,CAUhG;AAID;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,eAAe,EAC1B,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,kBAAkB,EAAO,EACpC,SAAS,SAAM,GACd,IAAI,CAYN;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,eAAe,EAC1B,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,kBAAkB,EAAO,GACnC,IAAI,CAKN;AAID;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,cAAc,EAAE,EACvB,SAAS,EAAE,eAAe,EAC1B,SAAS,GAAE,kBAAkB,EAAO,GACnC,gBAAgB,CAIlB;AAID,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CASpF"}

package/dist/testing/governance.js

@@ -0,0 +1,104 @@
+// ── Governance Test Helpers ──
+// Assertions for governance rules, policy compliance, overrides, and signals.
+import { evaluatePolicyProfile } from '../governance/policies.js';
+import { createGovernanceRuleEngine } from '../governance/rule-engine.js';
+// ── Signal Assertions ──
+/**
+ * Assert that specific governance rules fired in a result.
+ * Checks that each expected rule ID is present in the signals.
+ */
+export function assertGovernanceSignals(result, expectedRuleIds) {
+    const signalRules = result.signals.map((s) => s.rule);
+    for (const expected of expectedRuleIds) {
+        if (!signalRules.includes(expected)) {
+            throw new Error(`Expected governance rule "${expected}" to fire but it did not.\n` +
+                `  Fired rules: [${signalRules.join(', ')}]`);
+        }
+    }
+}
+/**
+ * Assert that specific governance rules did NOT fire.
+ */
+export function assertNoGovernanceSignal(result, unexpectedRuleIds) {
+    const signalRules = result.signals.map((s) => s.rule);
+    for (const unexpected of unexpectedRuleIds) {
+        if (signalRules.includes(unexpected)) {
+            throw new Error(`Expected governance rule "${unexpected}" NOT to fire but it did.\n` +
+                `  Signal: ${result.signals.find((s) => s.rule === unexpected)?.description}`);
+        }
+    }
+}
+/**
+ * Assert that only signals of a given max severity are present.
+ * e.g., assertMaxSeverity(result, "warning") ensures no "high" severity signals.
+ */
+export function assertMaxSeverity(result, maxSeverity) {
+    const severityOrder = { info: 0, warning: 1, high: 2 };
+    const maxLevel = severityOrder[maxSeverity] ?? 0;
+    const violations = result.effective.filter((s) => (severityOrder[s.severity] ?? 0) > maxLevel);
+    if (violations.length > 0) {
+        throw new Error(`Expected no signals above "${maxSeverity}" severity but found:\n` +
+            violations.map((v) => `  - [${v.severity}] ${v.rule}: ${v.description}`).join('\n'));
+    }
+}
+// ── Override Assertions ──
+/**
+ * Assert that specific overrides were applied in a governance result.
+ */
+export function assertOverridesApplied(result, expectedRuleIds) {
+    const appliedRules = result.overrideApplied.map((o) => o.rule);
+    for (const expected of expectedRuleIds) {
+        if (!appliedRules.includes(expected)) {
+            throw new Error(`Expected override for rule "${expected}" to be applied but it was not.\n` +
+                `  Applied overrides: [${appliedRules.join(', ')}]`);
+        }
+    }
+}
+// ── Policy Compliance Assertions ──
+/**
+ * Assert that a system inventory is compliant with a policy profile.
+ * "Compliant" means compatibility score >= threshold (default: 100%).
+ */
+export function assertPolicyCompliance(inventory, profileName, overrides = [], threshold = 100) {
+    const report = evaluatePolicyProfile(profileName, inventory, overrides);
+    if (report.score < threshold) {
+        const failures = report.results
+            .filter((r) => r.status === 'fail')
+            .map((r) => `  - [${r.severity}] ${r.rule}: ${r.description ?? ''}`)
+            .join('\n');
+        throw new Error(`Policy "${profileName}" compliance: ${report.score}% (threshold: ${threshold}%)\n` +
+            `Failed rules:\n${failures}`);
+    }
+}
+/**
+ * Assert that a system inventory FAILS a policy profile (for testing negative cases).
+ */
+export function assertPolicyNonCompliance(inventory, profileName, overrides = []) {
+    const report = evaluatePolicyProfile(profileName, inventory, overrides);
+    if (report.score >= 100) {
+        throw new Error(`Expected policy "${profileName}" to FAIL but it passed with ${report.score}%`);
+    }
+}
+// ── Quick Governance Check ──
+/**
+ * Evaluate governance rules against an inventory and return the result.
+ * Convenience wrapper that creates an engine, registers rules, and evaluates.
+ */
+export function evaluateGovernance(rules, inventory, overrides = []) {
+    const engine = createGovernanceRuleEngine();
+    engine.registerMany(rules);
+    return engine.evaluate(inventory, overrides);
+}
+// ── Empty Inventory Builder ──
+/** Create an empty SystemInventory, optionally overriding specific collections */
+export function emptyInventory(overrides) {
+    return {
+        capabilities: [],
+        entities: [],
+        flows: [],
+        events: [],
+        prompts: [],
+        ...overrides,
+    };
+}
+//# sourceMappingURL=governance.js.map

package/dist/testing/governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.js","sourceRoot":"","sources":["../../src/testing/governance.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,8EAA8E;AAE9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAMlE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAI1E,0BAA0B;AAE1B;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAwB,EAAE,eAAyB;IACzF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtD,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,6BAA6B,QAAQ,6BAA6B;gBAChE,mBAAmB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAwB,EACxB,iBAA2B;IAE3B,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtD,KAAK,MAAM,UAAU,IAAI,iBAAiB,EAAE,CAAC;QAC3C,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,6BAA6B,UAAU,6BAA6B;gBAClE,aAAa,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,WAAW,EAAE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAwB,EAAE,WAA+B;IACzF,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC/F,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,8BAA8B,WAAW,yBAAyB;YAChE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4BAA4B;AAE5B;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB,EAAE,eAAyB;IACxF,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,+BAA+B,QAAQ,mCAAmC;gBACxE,yBAAyB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,qCAAqC;AAErC;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAA0B,EAC1B,WAAmB,EACnB,YAAkC,EAAE,EACpC,SAAS,GAAG,GAAG;IAEf,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;aACnE,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CACb,WAAW,WAAW,iBAAiB,MAAM,CAAC,KAAK,iBAAiB,SAAS,MAAM;YACjF,kBAAkB,QAAQ,EAAE,CAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAA0B,EAC1B,WAAmB,EACnB,YAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,oBAAoB,WAAW,gCAAgC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,+BAA+B;AAE/B;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAuB,EACvB,SAA0B,EAC1B,YAAkC,EAAE;IAEpC,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;IAC5C,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,gCAAgC;AAEhC,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,SAAoC;IACjE,OAAO;QACL,YAAY,EAAE,EAAE;QAChB,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,EAAE;QACX,GAAG,SAAS;KACb,CAAC;AACJ,CAAC"}

package/dist/testing/index.d.ts

@@ -0,0 +1,18 @@
+export type { Browser, BrowserContext, Page } from 'playwright';
+export { chromium, firefox, webkit } from 'playwright';
+export { afterAll, afterEach, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest';
+export type { AIResponse, MockAuditService, MockEventService, MockFlowService, MockLoggerService, TestAuthOptions, TestContextOptions, } from './context.js';
+export { createInMemoryRepository, createTestAuth, createTestContext, createTestData, fixedTime, mockAI, mockAudit, mockEvents, mockFlows, mockLogger, } from './context.js';
+export type { FieldValidationError } from './field-validation.js';
+export { buildEntityFieldMap, validateRecord } from './field-validation.js';
+export type { E2EServerContext, E2EServerOptions } from './e2e.js';
+export { createE2EServer, createTestBearerHeader } from './e2e.js';
+export { assertGovernanceSignals, assertMaxSeverity, assertNoGovernanceSignal, assertOverridesApplied, assertPolicyCompliance, assertPolicyNonCompliance, emptyInventory, evaluateGovernance, } from './governance.js';
+export type { RunCapabilityOptions } from './run-capability.js';
+export { runCapability } from './run-capability.js';
+export type { E2EActionDescriptor, E2EPageDescriptor, E2EQueryDescriptor, } from './scaffolding.js';
+export { generateCapabilityTest, generateE2ETest, generateFlowTest, generateGovernanceTest, generateSecurityTest, } from './scaffolding.js';
+export { adminAuth, assertAccessAllowed, assertAccessDenied, assertCapabilityAllowed, assertCapabilityDenied, assertPlumbusError, assertTenantIsolation, assertValidationError, serviceAccountAuth, unauthenticated, } from './security.js';
+export type { FlowSimulationResult, SimulateFlowOptions, } from './simulate-flow.js';
+export { simulateFlow } from './simulate-flow.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAOA,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAGhE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAIvD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9F,YAAY,EACV,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,SAAS,EACT,MAAM,EACN,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5E,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAGnE,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/testing/index.js

@@ -0,0 +1,29 @@
+// ── Testing Module ──
+// Test utilities for Plumbus applications: mock context factory, capability runner,
+// flow simulator, security assertion helpers, governance test helpers, and scaffolding.
+// Use createTestContext() for a fully-mocked ExecutionContext.
+//
+// Key exports: createTestContext, runCapability, simulateFlow, assertAccessDenied
+// ── Playwright Re-export ──
+// Consumer apps get playwright through the framework — no separate install needed.
+export { chromium, firefox, webkit } from 'playwright';
+// ── Vitest Re-export ──
+// Consumer apps get vitest through the framework — no separate install needed.
+// Test files: import { describe, it, expect } from "@plumbus/core/testing";
+export { afterAll, afterEach, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest';
+// ── Context & Mock Factories ──
+export { createInMemoryRepository, createTestAuth, createTestContext, createTestData, fixedTime, mockAI, mockAudit, mockEvents, mockFlows, mockLogger, } from './context.js';
+export { buildEntityFieldMap, validateRecord } from './field-validation.js';
+// ── E2E / Browser Test Utilities ──
+export { createE2EServer, createTestBearerHeader } from './e2e.js';
+// ── Governance Test Helpers ──
+export { assertGovernanceSignals, assertMaxSeverity, assertNoGovernanceSignal, assertOverridesApplied, assertPolicyCompliance, assertPolicyNonCompliance, emptyInventory, evaluateGovernance, } from './governance.js';
+// ── Capability Test Runner ──
+export { runCapability } from './run-capability.js';
+// ── Test Scaffolding Generator ──
+export { generateCapabilityTest, generateE2ETest, generateFlowTest, generateGovernanceTest, generateSecurityTest, } from './scaffolding.js';
+// ── Security Test Helpers ──
+export { adminAuth, assertAccessAllowed, assertAccessDenied, assertCapabilityAllowed, assertCapabilityDenied, assertPlumbusError, assertTenantIsolation, assertValidationError, serviceAccountAuth, unauthenticated, } from './security.js';
+// ── Flow Simulator ──
+export { simulateFlow } from './simulate-flow.js';
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA,uBAAuB;AACvB,oFAAoF;AACpF,wFAAwF;AACxF,+DAA+D;AAC/D,EAAE;AACF,kFAAkF;AAGlF,6BAA6B;AAC7B,mFAAmF;AACnF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACvD,yBAAyB;AACzB,+EAA+E;AAC/E,4EAA4E;AAC5E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAU9F,iCAAiC;AACjC,OAAO,EACL,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,SAAS,EACT,MAAM,EACN,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,GACX,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5E,qCAAqC;AACrC,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAEnE,gCAAgC;AAChC,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,+BAA+B;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMpD,mCAAmC;AACnC,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,8BAA8B;AAC9B,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,GAChB,MAAM,eAAe,CAAC;AAKvB,uBAAuB;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/testing/run-capability.d.ts

@@ -0,0 +1,20 @@
+import type { z } from 'zod';
+import { type CapabilityResult } from '../execution/capability-executor.js';
+import type { CapabilityContract } from '../types/capability.js';
+import type { ExecutionContext } from '../types/context.js';
+import { type TestContextOptions } from './context.js';
+export interface RunCapabilityOptions extends TestContextOptions {
+    /** Provide a pre-built context instead of building one from options */
+    ctx?: ExecutionContext;
+}
+/**
+ * Execute a capability in a test environment.
+ *
+ * Usage:
+ * ```ts
+ * const result = await runCapability(myCapability, { id: "123" });
+ * if (result.success) expect(result.data).toEqual(...);
+ * ```
+ */
+export declare function runCapability<TInput extends z.ZodTypeAny, TOutput extends z.ZodTypeAny>(capability: CapabilityContract<TInput, TOutput>, input: unknown, options?: RunCapabilityOptions): Promise<CapabilityResult<z.infer<TOutput>>>;
+//# sourceMappingURL=run-capability.d.ts.map

package/dist/testing/run-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-capability.d.ts","sourceRoot":"","sources":["../../src/testing/run-capability.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE1E,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,uEAAuE;IACvE,GAAG,CAAC,EAAE,gBAAgB,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,MAAM,SAAS,CAAC,CAAC,UAAU,EAAE,OAAO,SAAS,CAAC,CAAC,UAAU,EAC3F,UAAU,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/C,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAG7C"}

package/dist/testing/run-capability.js

@@ -0,0 +1,19 @@
+// ── Capability Test Runner ──
+// Execute a capability in an isolated test environment without requiring
+// a real server, auth middleware, or database.
+import { executeCapability } from '../execution/capability-executor.js';
+import { createTestContext } from './context.js';
+/**
+ * Execute a capability in a test environment.
+ *
+ * Usage:
+ * ```ts
+ * const result = await runCapability(myCapability, { id: "123" });
+ * if (result.success) expect(result.data).toEqual(...);
+ * ```
+ */
+export async function runCapability(capability, input, options) {
+    const ctx = options?.ctx ?? createTestContext(options);
+    return executeCapability(capability, ctx, input);
+}
+//# sourceMappingURL=run-capability.js.map

package/dist/testing/run-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-capability.js","sourceRoot":"","sources":["../../src/testing/run-capability.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,yEAAyE;AACzE,+CAA+C;AAG/C,OAAO,EAAE,iBAAiB,EAAyB,MAAM,qCAAqC,CAAC;AAG/F,OAAO,EAAE,iBAAiB,EAA2B,MAAM,cAAc,CAAC;AAO1E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAA+C,EAC/C,KAAc,EACd,OAA8B;IAE9B,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO,iBAAiB,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AACnD,CAAC"}

package/dist/testing/scaffolding.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Generate a capability test file using the testing framework.
+ */
+export declare function generateCapabilityTest(name: string, _domain: string, _kind?: string): string;
+/**
+ * Generate a flow test file using the testing framework.
+ */
+export declare function generateFlowTest(name: string, _domain: string): string;
+/**
+ * Generate a security test file for a capability.
+ */
+export declare function generateSecurityTest(name: string, _domain: string): string;
+/**
+ * Generate a governance test file for a resource inventory.
+ */
+export declare function generateGovernanceTest(domain: string): string;
+export interface E2EPageDescriptor {
+    /** Route path, e.g. "/project" */
+    route: string;
+    /** Display name for the page */
+    pageName: string;
+    /** Action panels on this page — each has a title and field names */
+    actions: E2EActionDescriptor[];
+    /** Query panels that auto-fetch on load */
+    queries?: E2EQueryDescriptor[];
+}
+export interface E2EActionDescriptor {
+    /** Panel title as it appears in the UI */
+    title: string;
+    /** Submit button label */
+    submitLabel: string;
+    /** Field names in this panel's form */
+    fields: string[];
+}
+export interface E2EQueryDescriptor {
+    /** Panel title as it appears in the UI */
+    title: string;
+}
+/**
+ * Generate an E2E browser test file for a page in a Plumbus Next.js app.
+ *
+ * Uses vitest as the test runner with Playwright for browser automation.
+ * Both come from the framework — no additional packages needed.
+ */
+export declare function generateE2ETest(page: E2EPageDescriptor): string;
+//# sourceMappingURL=scaffolding.d.ts.map

package/dist/testing/scaffolding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffolding.d.ts","sourceRoot":"","sources":["../../src/testing/scaffolding.ts"],"names":[],"mappings":"AAMA;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAAiB,GACvB,MAAM,CAwDR;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAwCtE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAwC1E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAwC7D;AAID,MAAM,WAAW,iBAAiB;IAChC,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,2CAA2C;IAC3C,OAAO,CAAC,EAAE,kBAAkB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAuE/D"}

package/dist/testing/scaffolding.js

@@ -0,0 +1,266 @@
+// ── Test Scaffolding Generator ──
+// Generates test files for capabilities, flows, entities, and events
+// that use the @plumbus/core/testing utilities.
+import { toCamelCase, toPascalCase } from '../cli/utils.js';
+/**
+ * Generate a capability test file using the testing framework.
+ */
+export function generateCapabilityTest(name, _domain, _kind = 'action') {
+    const pascal = toPascalCase(name);
+    const camel = toCamelCase(name);
+    return `import { describe, it, expect } from "vitest";
+import { z } from "zod";
+import {
+  runCapability,
+  createTestContext,
+  createTestAuth,
+  mockAI,
+} from "@plumbus/core/testing";
+import { ${camel} } from "../capability.js";
+
+describe("${pascal}", () => {
+  it("executes successfully with valid input", async () => {
+    const result = await runCapability(${camel}, {
+      // TODO: provide valid input
+    });
+    expect(result.success).toBe(true);
+  });
+
+  it("rejects invalid input", async () => {
+    const result = await runCapability(${camel}, {
+      // TODO: provide invalid input
+    });
+    expect(result.success).toBe(false);
+    if (!result.success) {
+      expect(result.error.code).toBe("validation");
+    }
+  });
+
+  it("denies access to unauthorized users", async () => {
+    const result = await runCapability(${camel}, {
+      // TODO: provide valid input
+    }, {
+      auth: { roles: [] },
+    });
+    expect(result.success).toBe(false);
+    if (!result.success) {
+      expect(result.error.code).toBe("forbidden");
+    }
+  });
+
+  it("allows access for authorized roles", async () => {
+    const result = await runCapability(${camel}, {
+      // TODO: provide valid input
+    }, {
+      auth: { roles: ["admin"] },
+    });
+    // Should not get a forbidden error
+    if (!result.success) {
+      expect(result.error.code).not.toBe("forbidden");
+    }
+  });
+});
+`;
+}
+/**
+ * Generate a flow test file using the testing framework.
+ */
+export function generateFlowTest(name, _domain) {
+    const pascal = toPascalCase(name);
+    const camel = toCamelCase(name);
+    return `import { describe, it, expect } from "vitest";
+import { simulateFlow } from "@plumbus/core/testing";
+import { ${camel}Flow } from "../flow.js";
+
+describe("${pascal} Flow", () => {
+  it("completes all steps successfully", async () => {
+    const result = await simulateFlow(${camel}Flow, {
+      // TODO: provide valid flow input
+    });
+    expect(result.status).toBe("completed");
+    expect(result.history.length).toBeGreaterThan(0);
+  });
+
+  it("tracks step execution history", async () => {
+    const result = await simulateFlow(${camel}Flow, {
+      // TODO: provide valid flow input
+    });
+    for (const entry of result.history) {
+      expect(entry.step).toBeDefined();
+      expect(entry.status).toBeDefined();
+    }
+  });
+
+  it("handles capability step failure", async () => {
+    const result = await simulateFlow(${camel}Flow, {
+      // TODO: provide valid flow input
+    }, {
+      capabilityResults: {
+        // TODO: map step name → failure result
+        // "processOrder": { success: false, error: "processing failed" },
+      },
+    });
+    expect(result.status).toBe("failed");
+    expect(result.error).toBeDefined();
+  });
+});
+`;
+}
+/**
+ * Generate a security test file for a capability.
+ */
+export function generateSecurityTest(name, _domain) {
+    const pascal = toPascalCase(name);
+    const camel = toCamelCase(name);
+    return `import { describe, it, expect } from "vitest";
+import {
+  assertCapabilityDenied,
+  assertCapabilityAllowed,
+  assertTenantIsolation,
+  unauthenticated,
+  adminAuth,
+} from "@plumbus/core/testing";
+import { ${camel} } from "../capability.js";
+
+describe("${pascal} Security", () => {
+  const validInput = {
+    // TODO: provide valid input
+  };
+
+  it("denies unauthenticated access", async () => {
+    await assertCapabilityDenied(${camel}, validInput, {
+      auth: { roles: [], userId: undefined },
+    });
+  });
+
+  it("allows admin access", async () => {
+    await assertCapabilityAllowed(${camel}, validInput, {
+      auth: { roles: ["admin"], tenantId: "tenant-1" },
+    });
+  });
+
+  it("enforces tenant isolation", async () => {
+    const { sameTenantResult, crossTenantResult } = await assertTenantIsolation(
+      ${camel}, validInput, "tenant-1",
+    );
+    // Verify same-tenant access pattern
+    expect(sameTenantResult).toBeDefined();
+    expect(crossTenantResult).toBeDefined();
+  });
+});
+`;
+}
+/**
+ * Generate a governance test file for a resource inventory.
+ */
+export function generateGovernanceTest(domain) {
+    const pascal = toPascalCase(domain);
+    return `import { describe, it, expect } from "vitest";
+import {
+  evaluateGovernance,
+  emptyInventory,
+  assertGovernanceSignals,
+  assertNoGovernanceSignal,
+  assertPolicyCompliance,
+} from "@plumbus/core/testing";
+import {
+  securityRules,
+  privacyRules,
+  architectureRules,
+} from "@plumbus/core";
+
+describe("${pascal} Governance", () => {
+  // TODO: Import your capabilities, entities, etc.
+  const inventory = emptyInventory({
+    capabilities: [],
+    entities: [],
+  });
+
+  it("passes security rules", () => {
+    const result = evaluateGovernance(securityRules, inventory);
+    assertNoGovernanceSignal(result, [
+      "security.capability-missing-access-policy",
+    ]);
+  });
+
+  it("passes privacy rules", () => {
+    const result = evaluateGovernance(privacyRules, inventory);
+    expect(result.effective.filter(s => s.severity === "high")).toHaveLength(0);
+  });
+
+  it("complies with internal security baseline", () => {
+    assertPolicyCompliance(inventory, "internal_security_baseline");
+  });
+});
+`;
+}
+/**
+ * Generate an E2E browser test file for a page in a Plumbus Next.js app.
+ *
+ * Uses vitest as the test runner with Playwright for browser automation.
+ * Both come from the framework — no additional packages needed.
+ */
+export function generateE2ETest(page) {
+    const actionTests = page.actions
+        .map((action) => {
+        const fieldFills = action.fields
+            .map((f) => `      const ${f}Field = panel.locator(\`label:has-text("${f}") + input, [name="${f}"]\`).first();\n      if (await ${f}Field.count()) await ${f}Field.fill("test-value");`)
+            .join('\n');
+        return `
+    it("submits ${action.title}", async () => {
+      const panel = page.locator("section.panel", { has: page.getByRole("heading", { name: ${JSON.stringify(action.title)} }) });
+      await expect(panel.count()).resolves.toBeGreaterThan(0);
+
+${fieldFills}
+
+      await panel.getByRole("button", { name: ${JSON.stringify(action.submitLabel)} }).click();
+
+      // Wait for the request to complete
+      await page.waitForTimeout(2000);
+
+      // Assert no error card appeared
+      const errorCount = await panel.locator(".error-card").count();
+      expect(errorCount).toBe(0);
+    });`;
+    })
+        .join('\n');
+    const queryTests = (page.queries ?? [])
+        .map((q) => `
+    it("loads ${q.title} query panel", async () => {
+      const panel = page.locator("article", { has: page.getByRole("heading", { name: ${JSON.stringify(q.title)} }) });
+      await expect(panel.count()).resolves.toBeGreaterThan(0);
+    });`)
+        .join('\n');
+    const routeEscaped = page.route.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    return `import { describe, it, expect, beforeAll, afterAll } from "vitest";
+import { chromium, type Browser, type Page } from "@plumbus/core/testing";
+
+const BASE_URL = process.env.E2E_BASE_URL ?? "http://localhost:3001";
+
+describe("${page.pageName} page", () => {
+  let browser: Browser;
+  let page: Page;
+
+  beforeAll(async () => {
+    browser = await chromium.launch();
+    page = await browser.newPage();
+    await page.goto(BASE_URL + ${JSON.stringify(page.route)});
+    await page.waitForLoadState("networkidle");
+  }, 30_000);
+
+  afterAll(async () => {
+    await page?.close();
+    await browser?.close();
+  });
+
+  it("renders the page", async () => {
+    expect(page.url()).toMatch(/${routeEscaped}/);
+    const main = await page.locator("main").count();
+    expect(main).toBeGreaterThan(0);
+  });
+${actionTests}
+${queryTests}
+});
+`;
+}
+//# sourceMappingURL=scaffolding.js.map

package/dist/testing/scaffolding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffolding.js","sourceRoot":"","sources":["../../src/testing/scaffolding.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,qEAAqE;AACrE,gDAAgD;AAEhD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,OAAe,EACf,QAAgB,QAAQ;IAExB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO;;;;;;;;WAQE,KAAK;;YAEJ,MAAM;;yCAEuB,KAAK;;;;;;;yCAOL,KAAK;;;;;;;;;;yCAUL,KAAK;;;;;;;;;;;;yCAYL,KAAK;;;;;;;;;;;CAW7C,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO;;WAEE,KAAK;;YAEJ,MAAM;;wCAEsB,KAAK;;;;;;;;wCAQL,KAAK;;;;;;;;;;wCAUL,KAAK;;;;;;;;;;;;CAY5C,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAe;IAChE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO;;;;;;;;WAQE,KAAK;;YAEJ,MAAM;;;;;;mCAMiB,KAAK;;;;;;oCAMJ,KAAK;;;;;;;QAOjC,KAAK;;;;;;;CAOZ,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO;;;;;;;;;;;;;;YAcG,MAAM;;;;;;;;;;;;;;;;;;;;;;;CAuBjB,CAAC;AACF,CAAC;AA6BD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO;SAC7B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACd,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM;aAC7B,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,eAAe,CAAC,2CAA2C,CAAC,sBAAsB,CAAC,mCAAmC,CAAC,wBAAwB,CAAC,2BAA2B,CAC9K;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,OAAO;kBACK,MAAM,CAAC,KAAK;6FAC+D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;;;EAGvH,UAAU;;gDAEoC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC;;;;;;;;QAQ1E,CAAC;IACL,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;SACpC,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CAAC;gBACG,CAAC,CAAC,KAAK;uFACgE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;;QAEtG,CACH;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAEvE,OAAO;;;;;YAKG,IAAI,CAAC,QAAQ;;;;;;;iCAOQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;kCAUzB,YAAY;;;;EAI5C,WAAW;EACX,UAAU;;CAEX,CAAC;AACF,CAAC"}

package/dist/testing/security.d.ts

@@ -0,0 +1,42 @@
+import type { z } from 'zod';
+import type { CapabilityResult } from '../execution/capability-executor.js';
+import type { CapabilityContract } from '../types/capability.js';
+import type { AccessPolicy, AuthContext } from '../types/security.js';
+import { type TestContextOptions } from './context.js';
+export interface AccessTestResult {
+    allowed: boolean;
+    reason?: string;
+}
+/** Assert that a given auth context IS allowed by an access policy */
+export declare function assertAccessAllowed(policy: AccessPolicy | undefined, auth: AuthContext): void;
+/** Assert that a given auth context IS denied by an access policy */
+export declare function assertAccessDenied(policy: AccessPolicy | undefined, auth: AuthContext): void;
+/**
+ * Assert a capability denies access for a given auth context.
+ * Executes the capability pipeline and asserts a "forbidden" error.
+ */
+export declare function assertCapabilityDenied<TInput extends z.ZodTypeAny, TOutput extends z.ZodTypeAny>(capability: CapabilityContract<TInput, TOutput>, input: unknown, options?: TestContextOptions): Promise<CapabilityResult<z.infer<TOutput>>>;
+/**
+ * Assert a capability allows access for a given auth context.
+ * Executes the capability pipeline and asserts success.
+ */
+export declare function assertCapabilityAllowed<TInput extends z.ZodTypeAny, TOutput extends z.ZodTypeAny>(capability: CapabilityContract<TInput, TOutput>, input: unknown, options?: TestContextOptions): Promise<CapabilityResult<z.infer<TOutput>>>;
+/**
+ * Assert that a tenant-scoped capability denies access to users from a different tenant.
+ * Runs the capability twice: once with matching tenant (should succeed), once with mismatched tenant (should deny).
+ */
+export declare function assertTenantIsolation<TInput extends z.ZodTypeAny, TOutput extends z.ZodTypeAny>(capability: CapabilityContract<TInput, TOutput>, input: unknown, tenantId: string, options?: TestContextOptions): Promise<{
+    sameTenantResult: CapabilityResult;
+    crossTenantResult: CapabilityResult;
+}>;
+/** Assert a capability result is a validation error */
+export declare function assertValidationError(result: CapabilityResult): void;
+/** Assert a capability result is a specific error code */
+export declare function assertPlumbusError(result: CapabilityResult, expectedCode: string): void;
+/** Create an unauthenticated auth context (no roles, no tenant) */
+export declare function unauthenticated(): AuthContext;
+/** Create an admin auth context */
+export declare function adminAuth(tenantId?: string): AuthContext;
+/** Create a service account auth context */
+export declare function serviceAccountAuth(accountId: string): AuthContext;
+//# sourceMappingURL=security.d.ts.map

package/dist/testing/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/testing/security.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAkB,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAKvE,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAS7F;AAED,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAQ5F;AAID;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,SAAS,CAAC,CAAC,UAAU,EAC3B,OAAO,SAAS,CAAC,CAAC,UAAU,EAE5B,UAAU,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/C,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAW7C;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,SAAS,CAAC,CAAC,UAAU,EAC3B,OAAO,SAAS,CAAC,CAAC,UAAU,EAE5B,UAAU,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/C,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAQ7C;AAID;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,SAAS,CAAC,CAAC,UAAU,EAC3B,OAAO,SAAS,CAAC,CAAC,UAAU,EAE5B,UAAU,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/C,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC;IAAE,gBAAgB,EAAE,gBAAgB,CAAC;IAAC,iBAAiB,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAYtF;AAID,uDAAuD;AACvD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CASpE;AAED,0DAA0D;AAC1D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CASvF;AAID,mEAAmE;AACnE,wBAAgB,eAAe,IAAI,WAAW,CAE7C;AAED,mCAAmC;AACnC,wBAAgB,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,WAAW,CAExD;AAED,4CAA4C;AAC5C,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAMjE"}