@plumix/core 0.1.0

package/dist/test/playwright/index.js

@@ -0,0 +1,155 @@
+import { emptyManifest } from "../../plugin/manifest.js";
+export { actingAs } from "./acting-as.js";
+export { buildAdminPluginChunkForE2E } from "./build-admin-chunk.js";
+export { openPlaygroundDb } from "./open-playground-db.js";
+export { definePlumixE2EConfig } from "./playwright-config.js";
+/**
+ * oRPC's StandardRPCSerializer wire format — `{ json: <payload>, meta:
+ * [] }`. Use when fulfilling a `page.route` handler manually rather than
+ * via `mockRpc`. Empty meta is correct for payloads without BigInt /
+ * Date / etc. transforms.
+ */
+export function rpcOkBody(payload) {
+    // `JSON.stringify(undefined)` drops the `json` key entirely, which
+    // breaks the oRPC wire format. Coerce to null so the envelope is
+    // always well-formed.
+    return JSON.stringify({ json: payload ?? null, meta: [] });
+}
+/** As above but for an oRPC error envelope (`code`, `message`, `data`). */
+export function rpcErrorBody(error) {
+    return JSON.stringify({ json: error, meta: [] });
+}
+function rpcOk(route, body) {
+    return route.fulfill({
+        status: 200,
+        contentType: "application/json",
+        body: rpcOkBody(body),
+    });
+}
+/**
+ * Intercept `/_plumix/rpc/**` and answer matching procedure paths from
+ * the supplied handler map. Handler keys match by URL suffix
+ * (`"/auth/session"`, `"/media/list"`, etc). Unmatched paths return
+ * 404 — surface gaps loudly rather than silently empty-respond.
+ */
+export async function mockRpc(page, handlers) {
+    await page.route("**/_plumix/rpc/**", (route) => {
+        const url = route.request().url();
+        for (const [suffix, body] of Object.entries(handlers)) {
+            if (url.endsWith(suffix))
+                return rpcOk(route, body);
+        }
+        return route.fulfill({ status: 404, body: "not-mocked" });
+    });
+}
+/**
+ * Same as `mockRpc`, but pushes the parsed `json` payload of every
+ * request whose URL ends in `captureSuffix` into an array that the
+ * caller holds a reference to. Use to assert on the RPC input shape
+ * a UI interaction produces (search box → /entry/list `search`,
+ * column header click → `orderBy`, etc) without re-implementing the
+ * page.route handler in every test.
+ */
+export async function mockRpcWithCapture(page, options) {
+    const inputs = [];
+    await page.route("**/_plumix/rpc/**", (route) => {
+        const url = route.request().url();
+        if (url.endsWith(options.captureSuffix)) {
+            const body = route.request().postDataJSON();
+            inputs.push(body.json);
+            return rpcOk(route, options.captureResponse);
+        }
+        for (const [suffix, body] of Object.entries(options.handlers)) {
+            if (url.endsWith(suffix))
+                return rpcOk(route, body);
+        }
+        return route.fulfill({ status: 404, body: "not-mocked" });
+    });
+    return inputs;
+}
+export function mockSession(page, body) {
+    return mockRpc(page, { "/auth/session": body });
+}
+/**
+ * Replace the inline manifest `<script>` tag in the admin's HTML with
+ * a synthetic one. Use to register entry types, taxonomies, plugin
+ * pages, etc. that your plugin needs at admin-load time.
+ */
+export async function mockManifest(page, manifest) {
+    await page.route("**/*", async (route) => {
+        if (route.request().resourceType() !== "document") {
+            await route.fallback();
+            return;
+        }
+        const response = await route.fetch();
+        const html = await response.text();
+        // Escape every sequence the HTML parser would treat as
+        // script-tag-end inside `<script type="application/json">`:
+        // `</...` (close tags) and `<!--`/`-->` (comment boundaries).
+        const payload = JSON.stringify(manifest)
+            .replaceAll("</", "<\\/")
+            .replaceAll("<!--", "<\\!--")
+            .replaceAll("-->", "--\\>");
+        const next = html.replace(/<script id="plumix-manifest"[^>]*>[\s\S]*?<\/script>/i, `<script id="plumix-manifest" type="application/json">${payload}</script>`);
+        await route.fulfill({
+            response,
+            body: next,
+            headers: { ...response.headers(), "content-length": String(next.length) },
+        });
+    });
+}
+export { emptyManifest };
+/**
+ * Convenience for the "no user signed in" session shape — bootstrap
+ * (first-admin flow) when `needsBootstrap` is true, login screen
+ * otherwise.
+ */
+export function anonymousSession(needsBootstrap = false) {
+    return { user: null, needsBootstrap };
+}
+/**
+ * Returns a copy of `session` with extra capabilities appended to the
+ * user. Throws if `session.user` is null — adding capabilities to a
+ * logged-out session is almost certainly a test bug.
+ */
+export function withCapabilities(session, ...capabilities) {
+    if (!session.user) {
+        throw new Error("withCapabilities: cannot add capabilities to an anonymous session " +
+            "(session.user is null). Pass an authenticated session like AUTHED_ADMIN.");
+    }
+    return {
+        ...session,
+        user: {
+            ...session.user,
+            capabilities: [...session.user.capabilities, ...capabilities],
+        },
+    };
+}
+export const AUTHED_ADMIN = {
+    user: {
+        id: 1,
+        email: "admin@example.test",
+        name: "Admin",
+        avatarUrl: null,
+        role: "admin",
+        capabilities: [
+            "settings:manage",
+            "plugin:manage",
+            "entry:post:create",
+            "entry:post:delete",
+            "entry:post:edit_any",
+            "entry:post:edit_own",
+            "entry:post:publish",
+            "entry:post:read",
+            "user:create",
+            "user:delete",
+            "user:edit",
+            "user:edit_own",
+            "user:list",
+            "user:manage_tokens",
+            "user:promote",
+        ],
+    },
+    needsBootstrap: false,
+};
+//# sourceMappingURL=index.js.map

package/dist/test/playwright/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/test/playwright/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAErE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAe/D;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,OAAgB;IACxC,mEAAmE;IACnE,iEAAiE;IACjE,sBAAsB;IACtB,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,KAI5B;IACC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,KAAK,CAAC,KAAY,EAAE,IAAa;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC;QACnB,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAU,EACV,QAAyB;IAEzB,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAU,EACV,OAIC;IAED,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,YAAY,EAAwB,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAU,EACV,IAAuB;IAEvB,OAAO,OAAO,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAU,EACV,QAAwB;IAExB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,KAAK,UAAU,EAAE,CAAC;YAClD,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,uDAAuD;QACvD,4DAA4D;QAC5D,8DAA8D;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;aACrC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;aACxB,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;aAC5B,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CACvB,uDAAuD,EACvD,wDAAwD,OAAO,WAAW,CAC3E,CAAC;QACF,MAAM,KAAK,CAAC,OAAO,CAAC;YAClB,QAAQ;YACR,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;SAC1E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAc,GAAG,KAAK;IACrD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAA0B,EAC1B,GAAG,YAA+B;IAElC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,oEAAoE;YAClE,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,OAAO;QACV,IAAI,EAAE;YACJ,GAAG,OAAO,CAAC,IAAI;YACf,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,YAAY,CAAC;SAC9D;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,IAAI,EAAE;QACJ,EAAE,EAAE,CAAC;QACL,KAAK,EAAE,oBAAoB;QAC3B,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,OAAO;QACb,YAAY,EAAE;YACZ,iBAAiB;YACjB,eAAe;YACf,mBAAmB;YACnB,mBAAmB;YACnB,qBAAqB;YACrB,qBAAqB;YACrB,oBAAoB;YACpB,iBAAiB;YACjB,aAAa;YACb,aAAa;YACb,WAAW;YACX,eAAe;YACf,WAAW;YACX,oBAAoB;YACpB,cAAc;SACf;KACF;IACD,cAAc,EAAE,KAAK;CACtB,CAAC"}

package/dist/test/playwright/open-playground-db.d.ts

@@ -0,0 +1,32 @@
+import { drizzle } from "drizzle-orm/libsql";
+import * as schema from "../../db/schema/index.js";
+type PlaygroundDb = ReturnType<typeof drizzle<typeof schema>>;
+export interface OpenPlaygroundDbOptions {
+    readonly cwd?: string;
+    readonly binding?: string;
+}
+/**
+ * Open the on-disk miniflare D1 sqlite the playground worker is bound
+ * against and return a drizzle `Db` handle compatible with the existing
+ * test factories.
+ *
+ * Single-D1 playgrounds (the 0.1.0 case) work cleanly with a
+ * scan-and-pick rule. Multi-D1 lookup is forward-compat via the
+ * `binding` parameter which is currently accepted but unused — the
+ * underlying miniflare filename derivation isn't documented as stable,
+ * so binding-based resolution is deferred to a future helper-side
+ * upgrade with no API break for callers.
+ *
+ * Coordinates with a running `plumix dev` worker over the same sqlite
+ * file via SQLite WAL mode: multi-reader, single-writer with
+ * non-blocking reads. Test-side writes (e.g. seeding an admin user)
+ * during quiet windows are safe; under contention libsql surfaces
+ * `SQLITE_BUSY` rather than corrupting state.
+ *
+ * @experimental Part of the worker-driven plugin e2e helpers landing in
+ *   #251. The discovery rule may move from "scan-and-pick" to
+ *   binding-aware lookup once miniflare exposes a stable mapping.
+ */
+export declare function openPlaygroundDb(options?: OpenPlaygroundDbOptions): Promise<PlaygroundDb>;
+export {};
+//# sourceMappingURL=open-playground-db.d.ts.map

package/dist/test/playwright/open-playground-db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-playground-db.d.ts","sourceRoot":"","sources":["../../../src/test/playwright/open-playground-db.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,OAAO,KAAK,MAAM,MAAM,0BAA0B,CAAC;AAEnD,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC;AAI9D,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,YAAY,CAAC,CA6BvB"}

package/dist/test/playwright/open-playground-db.js

@@ -0,0 +1,49 @@
+import { readdir } from "node:fs/promises";
+import { join } from "node:path";
+import { createClient } from "@libsql/client";
+import { drizzle } from "drizzle-orm/libsql";
+import * as schema from "../../db/schema/index.js";
+const STATE_SUBPATH = ".wrangler/state/v3/d1/miniflare-D1DatabaseObject";
+/**
+ * Open the on-disk miniflare D1 sqlite the playground worker is bound
+ * against and return a drizzle `Db` handle compatible with the existing
+ * test factories.
+ *
+ * Single-D1 playgrounds (the 0.1.0 case) work cleanly with a
+ * scan-and-pick rule. Multi-D1 lookup is forward-compat via the
+ * `binding` parameter which is currently accepted but unused — the
+ * underlying miniflare filename derivation isn't documented as stable,
+ * so binding-based resolution is deferred to a future helper-side
+ * upgrade with no API break for callers.
+ *
+ * Coordinates with a running `plumix dev` worker over the same sqlite
+ * file via SQLite WAL mode: multi-reader, single-writer with
+ * non-blocking reads. Test-side writes (e.g. seeding an admin user)
+ * during quiet windows are safe; under contention libsql surfaces
+ * `SQLITE_BUSY` rather than corrupting state.
+ *
+ * @experimental Part of the worker-driven plugin e2e helpers landing in
+ *   #251. The discovery rule may move from "scan-and-pick" to
+ *   binding-aware lookup once miniflare exposes a stable mapping.
+ */
+export async function openPlaygroundDb(options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const stateDir = join(cwd, STATE_SUBPATH);
+    let files;
+    try {
+        files = await readdir(stateDir);
+    }
+    catch {
+        throw new Error(`openPlaygroundDb: no D1 state at ${stateDir} — run plumix dev first to create it.`);
+    }
+    const dbFiles = files.filter((f) => f.endsWith(".sqlite") && f !== "metadata.sqlite");
+    if (dbFiles[0] === undefined) {
+        throw new Error(`openPlaygroundDb: no user D1 sqlite found in ${stateDir} — did the wrangler d1 migrations apply step run? (only metadata.sqlite is present)`);
+    }
+    if (dbFiles.length > 1) {
+        throw new Error(`openPlaygroundDb: found multiple D1 sqlite files (${dbFiles.join(", ")}) — binding-based lookup is not yet supported (single-D1 playgrounds only).`);
+    }
+    const client = createClient({ url: `file:${join(stateDir, dbFiles[0])}` });
+    return drizzle(client, { schema, casing: "snake_case" });
+}
+//# sourceMappingURL=open-playground-db.js.map

package/dist/test/playwright/open-playground-db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-playground-db.js","sourceRoot":"","sources":["../../../src/test/playwright/open-playground-db.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,OAAO,KAAK,MAAM,MAAM,0BAA0B,CAAC;AAInD,MAAM,aAAa,GAAG,kDAAkD,CAAC;AAOzE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,UAAmC,EAAE;IAErC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAE1C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,uCAAuC,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,iBAAiB,CACxD,CAAC;IACF,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,gDAAgD,QAAQ,qFAAqF,CAC9I,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,qDAAqD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,6EAA6E,CACrJ,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AAC3D,CAAC"}

package/dist/test/playwright/playwright-config.d.ts

@@ -0,0 +1,84 @@
+import type { PlaywrightTestConfig } from "@playwright/test";
+export interface PlumixE2EConfigOptions {
+    /**
+     * Port the worker / preview listens on. Used to derive `baseURL`
+     * when not explicitly set, and passed through to the baked
+     * `plumix dev --port <port>` so the worker binds where playwright
+     * polls. Suites should pick distinct ports so they can run in
+     * parallel under turbo without colliding. Defaults to `5173`
+     * (vite's default) for back-compat.
+     */
+    readonly port?: number;
+    /**
+     * Explicit workerd inspector port baked into `plumix dev
+     * --inspector-port <port>`. `@cloudflare/vite-plugin` otherwise
+     * auto-allocates from 9229 upward, which collides when multiple
+     * worker-driven e2e suites boot in parallel under turbo. Suites
+     * should pick distinct ports (convention: mirror the HTTP port —
+     * 3010 ↔ 9310, 3020 ↔ 9320, …). Ignored when `playground` is unset.
+     */
+    readonly inspectorPort?: number;
+    /**
+     * Optional path to a playground workspace (relative to the playwright
+     * config file). When set, `definePlumixE2EConfig` bakes the standard
+     * worker-driven webServer setup: wipe `.wrangler/state` → apply D1
+     * migrations → run `plumix dev`. Also auto-wires `globalSetup.ts` and
+     * `storageState.json` by convention. Mutually exclusive with an
+     * explicit `webServerCommand`.
+     */
+    readonly playground?: string;
+    /** Directory passed through to playwright's `testDir`. Defaults to `'.'`. */
+    readonly testDir?: string;
+    /**
+     * Base URL the spec navigates against. Defaults to
+     * `http://localhost:<port>/_plumix/admin/`.
+     */
+    readonly baseURL?: string;
+    /**
+     * Shell command(s) run before the suite — typically build + preview.
+     * Required when `playground` is not set; rejected when it is.
+     */
+    readonly webServerCommand?: string;
+    /**
+     * Optional. When set, the webServer readiness check waits for the
+     * TCP port to open instead of polling `baseURL` for a 2xx/3xx
+     * response. Use this when the dev server starts but `/` returns
+     * 404 (e.g. a public-route example whose front page isn't wired) —
+     * waiting on the URL would otherwise time out forever.
+     */
+    readonly webServerPort?: number;
+    /**
+     * Optional shell step to run inside the baked playground command,
+     * after the D1 migrations apply and before `plumix dev` starts.
+     * Use for fixture seeds that need to live in D1 before the worker
+     * comes up (e.g. `wrangler d1 execute <db> --local --file=seed.sql`).
+     * Only meaningful when `playground` is set.
+     */
+    readonly extraSetup?: string;
+    /**
+     * When `playground` is set, the helper auto-wires the worker-driven
+     * `globalSetup.ts` + `storageState.json` convention so the admin
+     * shell is already authenticated when tests start. Pass `false`
+     * here to skip that wiring — useful for public-route specs that
+     * never need an admin session.
+     */
+    readonly seedAdminSession?: boolean;
+}
+/**
+ * Shared Playwright config for plumix e2e suites. Standardises the
+ * options every suite wants the same way (chromium-only project,
+ * fullyParallel, CI retry/worker tuning, github reporter on CI) and
+ * leaves the per-suite knobs — port, playground, testDir, base URL,
+ * the build/preview command — as parameters.
+ *
+ * When `playground` is set, the helper bakes a worker-driven webServer
+ * (wipe state → apply migrations → `plumix dev`) and wires the
+ * `globalSetup.ts` / `storageState.json` convention used by the
+ * worker-driven plugin e2e pattern. Otherwise the caller supplies
+ * `webServerCommand` directly.
+ *
+ * Used by `packages/admin/playwright.config.ts` and each
+ * `packages/plugins/<plugin>/e2e/playwright.config.ts`.
+ */
+export declare function definePlumixE2EConfig(options: PlumixE2EConfigOptions): PlaywrightTestConfig;
+//# sourceMappingURL=playwright-config.d.ts.map

package/dist/test/playwright/playwright-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright-config.d.ts","sourceRoot":"","sources":["../../../src/test/playwright/playwright-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAG7D,MAAM,WAAW,sBAAsB;IACrC;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AA2BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,sBAAsB,GAC9B,oBAAoB,CA0EtB"}

package/dist/test/playwright/playwright-config.js

@@ -0,0 +1,91 @@
+import { defineConfig, devices } from "@playwright/test";
+const ADMIN_BASE = "/_plumix/admin";
+const DEFAULT_BINDING = "DB";
+const DEFAULT_PORT = 5173;
+function bakePlaygroundCommand(playground, port, inspectorPort, extraSetup) {
+    const steps = [
+        `cd ${playground}`,
+        "rm -rf .wrangler/state",
+        "pnpm exec plumix migrate generate",
+        `pnpm exec wrangler d1 migrations apply ${DEFAULT_BINDING} --local`,
+    ];
+    if (extraSetup)
+        steps.push(extraSetup);
+    const devFlags = [`--port ${String(port)}`];
+    if (inspectorPort !== undefined) {
+        devFlags.push(`--inspector-port ${String(inspectorPort)}`);
+    }
+    steps.push(`pnpm exec plumix dev ${devFlags.join(" ")}`);
+    return steps.join(" && ");
+}
+/**
+ * Shared Playwright config for plumix e2e suites. Standardises the
+ * options every suite wants the same way (chromium-only project,
+ * fullyParallel, CI retry/worker tuning, github reporter on CI) and
+ * leaves the per-suite knobs — port, playground, testDir, base URL,
+ * the build/preview command — as parameters.
+ *
+ * When `playground` is set, the helper bakes a worker-driven webServer
+ * (wipe state → apply migrations → `plumix dev`) and wires the
+ * `globalSetup.ts` / `storageState.json` convention used by the
+ * worker-driven plugin e2e pattern. Otherwise the caller supplies
+ * `webServerCommand` directly.
+ *
+ * Used by `packages/admin/playwright.config.ts` and each
+ * `packages/plugins/<plugin>/e2e/playwright.config.ts`.
+ */
+export function definePlumixE2EConfig(options) {
+    if (options.playground !== undefined &&
+        options.webServerCommand !== undefined) {
+        throw new Error("definePlumixE2EConfig: `playground` and `webServerCommand` are mutually exclusive — pick one.");
+    }
+    if (options.playground === undefined &&
+        options.webServerCommand === undefined) {
+        throw new Error("definePlumixE2EConfig: must provide either `playground` (worker-driven) or `webServerCommand` (custom).");
+    }
+    if (options.inspectorPort !== undefined &&
+        options.webServerCommand !== undefined) {
+        throw new Error("definePlumixE2EConfig: `inspectorPort` only affects the baked `plumix dev` command and is incompatible with a custom `webServerCommand`.");
+    }
+    const port = options.port ?? DEFAULT_PORT;
+    const baseURL = options.baseURL ?? `http://localhost:${String(port)}${ADMIN_BASE}/`;
+    const isPlayground = options.playground !== undefined;
+    const seedAdmin = isPlayground && options.seedAdminSession !== false;
+    const webServerCommand = options.webServerCommand ??
+        (options.playground !== undefined
+            ? bakePlaygroundCommand(options.playground, port, options.inspectorPort, options.extraSetup)
+            : "");
+    return defineConfig({
+        testDir: options.testDir ?? ".",
+        fullyParallel: true,
+        forbidOnly: Boolean(process.env.CI),
+        retries: process.env.CI ? 2 : 0,
+        workers: process.env.CI ? 1 : undefined,
+        // On CI: write the HTML report alongside the inline GitHub annotations
+        // so the failure-artifact upload (which globs `**/playwright-report/`)
+        // has something to capture — without `["html"]` it never gets generated.
+        // `open: "never"` keeps `pnpm test:e2e` from trying to launch a browser
+        // post-run on CI.
+        reporter: process.env.CI
+            ? [["list"], ["github"], ["html", { open: "never" }]]
+            : [["list"], ["html"]],
+        ...(seedAdmin ? { globalSetup: "./globalSetup.ts" } : {}),
+        use: {
+            baseURL,
+            trace: "on-first-retry",
+            ...(seedAdmin ? { storageState: "./storageState.json" } : {}),
+        },
+        projects: [{ name: "chromium", use: { ...devices["Desktop Chrome"] } }],
+        webServer: {
+            command: webServerCommand,
+            ...(options.webServerPort !== undefined
+                ? { port: options.webServerPort }
+                : { url: baseURL }),
+            reuseExistingServer: !process.env.CI,
+            stdout: "pipe",
+            stderr: "pipe",
+            timeout: 180_000,
+        },
+    });
+}
+//# sourceMappingURL=playwright-config.js.map

package/dist/test/playwright/playwright-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright-config.js","sourceRoot":"","sources":["../../../src/test/playwright/playwright-config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAoEzD,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,SAAS,qBAAqB,CAC5B,UAAkB,EAClB,IAAY,EACZ,aAAiC,EACjC,UAA8B;IAE9B,MAAM,KAAK,GAAG;QACZ,MAAM,UAAU,EAAE;QAClB,wBAAwB;QACxB,mCAAmC;QACnC,0CAA0C,eAAe,UAAU;KACpE,CAAC;IACF,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,wBAAwB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA+B;IAE/B,IACE,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,OAAO,CAAC,gBAAgB,KAAK,SAAS,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IACD,IACE,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,OAAO,CAAC,gBAAgB,KAAK,SAAS,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IACD,IACE,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,OAAO,CAAC,gBAAgB,KAAK,SAAS,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0IAA0I,CAC3I,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC1C,MAAM,OAAO,GACX,OAAO,CAAC,OAAO,IAAI,oBAAoB,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC;IACtE,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC;IACtD,MAAM,SAAS,GAAG,YAAY,IAAI,OAAO,CAAC,gBAAgB,KAAK,KAAK,CAAC;IACrE,MAAM,gBAAgB,GACpB,OAAO,CAAC,gBAAgB;QACxB,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;YAC/B,CAAC,CAAC,qBAAqB,CACnB,OAAO,CAAC,UAAU,EAClB,IAAI,EACJ,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,UAAU,CACnB;YACH,CAAC,CAAC,EAAE,CAAC,CAAC;IAEV,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,GAAG;QAC/B,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACvC,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,kBAAkB;QAClB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE;YACtB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,EAAE;YACH,OAAO;YACP,KAAK,EAAE,gBAAgB;YACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D;QACD,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;QACvE,SAAS,EAAE;YACT,OAAO,EAAE,gBAAgB;YACzB,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE;gBACjC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACrB,mBAAmB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;SACjB;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/test/request.d.ts

@@ -0,0 +1,66 @@
+import type { LibSQLDatabase } from "drizzle-orm/libsql";
+import type * as schema from "../db/schema/index.js";
+import type { User } from "../db/schema/users.js";
+type TestDb = LibSQLDatabase<typeof schema>;
+export interface FetchOptions {
+    readonly method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
+    readonly headers?: HeadersInit;
+    readonly body?: BodyInit;
+    /**
+     * JSON body. Mutually exclusive with `body`. Sets content-type to
+     * application/json and serialises via JSON.stringify. Do NOT nest an oRPC
+     * envelope here — the RPC client (h.client) handles wire format itself.
+     */
+    readonly json?: unknown;
+    /**
+     * Impersonate a user. Creates a session, attaches the cookie to this
+     * request. Use null (the default) for anonymous requests.
+     */
+    readonly as?: User | null;
+    /**
+     * Treat the path as a /_plumix/* request and auto-add the custom CSRF
+     * header. Defaults to auto-detect based on path prefix.
+     */
+    readonly withCsrfHeader?: boolean;
+}
+export declare function buildRequest(db: TestDb, path: string, options?: FetchOptions): Promise<Request>;
+/**
+ * Wraps a Response with chainable assertion helpers. Returned from
+ * harness.fetch() — callers never construct this directly.
+ *
+ * Surface intentionally minimal: assertions land here when a test
+ * actually needs them. `deepEqual` / `partialMatch` are exported
+ * from `./match.js` for body-shape checks. Earlier this class
+ * shipped with `assertJson`, `assertJsonMatch`, `assertBodyContains`,
+ * `assertRedirect`, `assertHeader`, plus `raw` / `status` getters —
+ * nothing called them, so they were removed under the
+ * "address fallow dead-code" pass. Re-add a method when you write
+ * the first test that needs it. `assertTemplate` is intentionally
+ * kept as a NotImplemented stub for the upcoming themes phase
+ * (Phase 11+); see its JSDoc.
+ */
+export declare class TestResponse {
+    #private;
+    constructor(response: Response);
+    get headers(): Headers;
+    text(): Promise<string>;
+    json<T = unknown>(): Promise<T>;
+    assertStatus(code: number): this;
+    /**
+     * Assert a Set-Cookie header was issued for the named cookie.
+     */
+    assertCookieSet(name: string): this;
+    /**
+     * Assert the request resolved to the named template.
+     *
+     * @throws NotImplementedError
+     *
+     * The template layer is not built yet (Phase 11+ per PLAN.md). Once
+     * themes land, this will read from a request-scoped tracker populated
+     * by the template resolver. The surface is locked in now so tests
+     * written against it work verbatim later.
+     */
+    assertTemplate(_name: string): this;
+}
+export {};
+//# sourceMappingURL=request.d.ts.map

package/dist/test/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/test/request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,KAAK,KAAK,MAAM,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAIlD,KAAK,MAAM,GAAG,cAAc,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,CAAC,EACd,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IACnE,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAID,wBAAsB,YAAY,CAChC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,OAAO,CAAC,CAoClB;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,YAAY;;gBAIX,QAAQ,EAAE,QAAQ;IAY9B,IAAI,OAAO,IAAI,OAAO,CAErB;IAGK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAKvB,IAAI,CAAC,CAAC,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC;IAMrC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAShC;;OAEG;IAEH,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAQnC;;;;;;;;;OASG;IAEH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAKpC"}

package/dist/test/request.js

@@ -0,0 +1,110 @@
+import { SESSION_COOKIE_NAME } from "../auth/cookies.js";
+import { createSession } from "../auth/sessions.js";
+const ORIGIN = "https://cms.example";
+export async function buildRequest(db, path, options = {}) {
+    const url = path.startsWith("http") ? path : `${ORIGIN}${path}`;
+    const headers = new Headers(options.headers);
+    if (options.json !== undefined) {
+        if (options.body !== undefined) {
+            throw new Error("buildRequest: pass either `json` or `body`, not both");
+        }
+        if (!headers.has("content-type")) {
+            headers.set("content-type", "application/json");
+        }
+    }
+    const needsCsrf = options.withCsrfHeader ?? new URL(url).pathname.startsWith("/_plumix/");
+    if (needsCsrf && !headers.has("x-plumix-request")) {
+        headers.set("x-plumix-request", "1");
+    }
+    if (options.as) {
+        const { token } = await createSession(db, { userId: options.as.id });
+        const existing = headers.get("cookie");
+        const cookie = `${SESSION_COOKIE_NAME}=${token}`;
+        headers.set("cookie", existing ? `${existing}; ${cookie}` : cookie);
+    }
+    const init = {
+        method: options.method ?? (options.json !== undefined ? "POST" : "GET"),
+        headers,
+    };
+    if (options.json !== undefined) {
+        init.body = JSON.stringify(options.json);
+    }
+    else if (options.body !== undefined) {
+        init.body = options.body;
+    }
+    return new Request(url, init);
+}
+/**
+ * Wraps a Response with chainable assertion helpers. Returned from
+ * harness.fetch() — callers never construct this directly.
+ *
+ * Surface intentionally minimal: assertions land here when a test
+ * actually needs them. `deepEqual` / `partialMatch` are exported
+ * from `./match.js` for body-shape checks. Earlier this class
+ * shipped with `assertJson`, `assertJsonMatch`, `assertBodyContains`,
+ * `assertRedirect`, `assertHeader`, plus `raw` / `status` getters —
+ * nothing called them, so they were removed under the
+ * "address fallow dead-code" pass. Re-add a method when you write
+ * the first test that needs it. `assertTemplate` is intentionally
+ * kept as a NotImplemented stub for the upcoming themes phase
+ * (Phase 11+); see its JSDoc.
+ */
+export class TestResponse {
+    #response;
+    #bodyText;
+    constructor(response) {
+        this.#response = response;
+        this.#bodyText = response.clone().text();
+    }
+    // The five members below are consumed only from *.test.ts files;
+    // fallow's class-member analyser treats test files as terminal
+    // entry points (not usage sites), so it flags everything as unused
+    // even though the passkey-routes test suite calls them directly.
+    // Per-line suppressions document the consumer.
+    // fallow-ignore-next-line unused-class-member
+    get headers() {
+        return this.#response.headers;
+    }
+    // fallow-ignore-next-line unused-class-member
+    async text() {
+        return this.#bodyText;
+    }
+    // fallow-ignore-next-line unused-class-member
+    async json() {
+        const text = await this.#bodyText;
+        return JSON.parse(text);
+    }
+    // fallow-ignore-next-line unused-class-member
+    assertStatus(code) {
+        if (this.#response.status !== code) {
+            throw new Error(`assertStatus: expected ${code}, got ${this.#response.status}`);
+        }
+        return this;
+    }
+    /**
+     * Assert a Set-Cookie header was issued for the named cookie.
+     */
+    // fallow-ignore-next-line unused-class-member
+    assertCookieSet(name) {
+        const set = this.#response.headers.get("set-cookie");
+        if (!set?.includes(`${name}=`)) {
+            throw new Error(`assertCookieSet: no Set-Cookie for "${name}"`);
+        }
+        return this;
+    }
+    /**
+     * Assert the request resolved to the named template.
+     *
+     * @throws NotImplementedError
+     *
+     * The template layer is not built yet (Phase 11+ per PLAN.md). Once
+     * themes land, this will read from a request-scoped tracker populated
+     * by the template resolver. The surface is locked in now so tests
+     * written against it work verbatim later.
+     */
+    // fallow-ignore-next-line unused-class-member
+    assertTemplate(_name) {
+        throw new Error("assertTemplate is not yet implemented — theme / template system lands with the themes phase. API is stable; call sites written now will work once the feature ships.");
+    }
+}
+//# sourceMappingURL=request.js.map

package/dist/test/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../../src/test/request.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AA2BpD,MAAM,MAAM,GAAG,qBAAqB,CAAC;AAErC,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,IAAY,EACZ,UAAwB,EAAE;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GACb,OAAO,CAAC,cAAc,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC1E,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,GAAG,mBAAmB,IAAI,KAAK,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,IAAI,GAAgB;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACvE,OAAO;KACR,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,YAAY;IACd,SAAS,CAAW;IACpB,SAAS,CAAkB;IAEpC,YAAY,QAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,iEAAiE;IACjE,+DAA+D;IAC/D,mEAAmE;IACnE,iEAAiE;IACjE,+CAA+C;IAE/C,8CAA8C;IAC9C,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;IAChC,CAAC;IAED,8CAA8C;IAC9C,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,8CAA8C;IAC9C,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAED,8CAA8C;IAC9C,YAAY,CAAC,IAAY;QACvB,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAC/D,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,8CAA8C;IAC9C,eAAe,CAAC,IAAY;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;OASG;IACH,8CAA8C;IAC9C,cAAc,CAAC,KAAa;QAC1B,MAAM,IAAI,KAAK,CACb,sKAAsK,CACvK,CAAC;IACJ,CAAC;CACF"}