@sasjs/api 0.12.0 → 0.14.0

package/build/browser.js

@@ -1,4 +1,4 @@
-/* @sasjs/api 0.12.0 - the SASjs Server API, for a service worker. https://github.com/sasjs/api */
+/* @sasjs/api 0.14.0 - the SASjs Server API, for a service worker. https://github.com/sasjs/api */
 "use strict";
 var SASjsApi = (() => {
   var __defProp = Object.defineProperty;
@@ -28,6 +28,7 @@ var SASjsApi = (() => {
     CODE_CORPUS: () => CODE_CORPUS,
     DEFAULT_GRANTABLE_ROUTES: () => DEFAULT_GRANTABLE_ROUTES,
     DEFAULT_IDENTITY: () => DEFAULT_IDENTITY,
+    DEFAULT_SESSIONS: () => DEFAULT_SESSIONS,
     DEPLOY_CORPUS: () => DEPLOY_CORPUS,
     DEPLOY_LIMITS: () => DEPLOY_LIMITS,
     DEPLOY_PAYLOAD_BYTES: () => DEPLOY_PAYLOAD_BYTES,
@@ -36,8 +37,10 @@ var SASjsApi = (() => {
     HANDLED_ROUTES: () => HANDLED_ROUTES,
     IDENTITY_CORPUS: () => IDENTITY_CORPUS,
     IDENTITY_FORMAT: () => IDENTITY_FORMAT,
+    MemoryAppStreamRegistry: () => MemoryAppStreamRegistry,
     MemoryDriveStore: () => MemoryDriveStore,
     MemoryIdentityStore: () => MemoryIdentityStore,
+    MemorySessionHost: () => MemorySessionHost,
     OVERLAY: () => OVERLAY,
     PROVIDER_MANAGED: () => PROVIDER_MANAGED,
     RECORD_CORPUS: () => RECORD_CORPUS,
@@ -51,6 +54,7 @@ var SASjsApi = (() => {
     createDriveService: () => createDriveService,
     createIdentityService: () => createIdentityService,
     createRecordService: () => createRecordService,
+    createSessionService: () => createSessionService,
     decodeBase64: () => decodeBase64,
     deployTree: () => deployTree,
     dirname: () => dirname,
@@ -68,7 +72,8 @@ var SASjsApi = (() => {
     runCase: () => runCase,
     sanitiseDisplayName: () => sanitiseDisplayName,
     servicesFor: () => servicesFor,
-    topLevelRouteFor: () => topLevelRouteFor
+    topLevelRouteFor: () => topLevelRouteFor,
+    unpublishAppStream: () => unpublishAppStream
   });
 
   // src/types.ts
@@ -1007,7 +1012,7 @@ var SASjsApi = (() => {
         },
         {
           status: 404,
-          description: "No such app stream entry"
+          description: "No app is published at that folder"
         }
       ]
     },
@@ -2514,7 +2519,6 @@ var SASjsApi = (() => {
   var HOST_CONFIG = "The body is the host's own configuration - ports, run times and providers - which a mock states for itself and this package cannot know.";
   var HOST_OWNED = "The host owns this report: it describes the host's own process and files, which a browser build has no equivalent of.";
   var WEB_BUNDLE = "The host serves its own web bundle; there is no API decision here for this package to answer.";
-  var ARCHIVE = "Expanding the uploaded archive is the host's transport work - multer and a zip library on the server, `DecompressionStream` in a worker - and the host hands this package the tree it produces, which is the same tree `POST /SASjsApi/drive/deploy` takes.";
   var success = { status: "success" };
   var user = {
     uid: "",
@@ -2642,10 +2646,7 @@ var SASjsApi = (() => {
         500: { status: "failure", message: "Deployment failed!" }
       }
     },
-    "POST /SASjsApi/drive/deploy/upload": {
-      implemented: false,
-      reason: ARCHIVE
-    },
+    "POST /SASjsApi/drive/deploy/upload": { implemented: true },
     // `404` is a pair - the registry name and the appLoc it was published from -
     // that matches no entry, and the drive's content is deliberately left alone.
     "DELETE /SASjsApi/drive/deploy": { implemented: true },
@@ -2812,7 +2813,7 @@ var SASjsApi = (() => {
       throw new ApiError(400, '"streamServiceName" is required');
     if (!body.appLoc) throw new ApiError(400, '"appLoc" is required');
     if (!await registry.unpublish(body.appLoc))
-      throw new ApiError(404, "No such app stream entry.");
+      throw new ApiError(404, "No app is published at that folder.");
     return { status: "success" };
   };
   var MemoryAppStreamRegistry = class {
@@ -2966,6 +2967,11 @@ var SASjsApi = (() => {
             String(request.body?.newPath || "")
           )
         };
+      // The archive is the host's transport - multer and a zip library on a
+      // server, `DecompressionStream` in a worker - and it hands this the same tree
+      // `POST /deploy` takes. The deploy cap is measured on that tree, after
+      // expansion, which is why the two share this path rather than reading bytes.
+      case "POST /SASjsApi/drive/deploy/upload":
       case "POST /SASjsApi/drive/deploy": {
         await drive.deploy(String(body.appLoc ?? ""), body.fileTree);
         return { status: 200, body: DEPLOY_SUCCESS };
@@ -3234,6 +3240,7 @@ var SASjsApi = (() => {
     }
   };
   var HANDLED_ROUTES = [
+    "POST /SASjsApi/drive/deploy/upload",
     "DELETE /SASjsApi/drive/deploy",
     "GET /SASjsApi/session/{sessionId}",
     "GET /SASjsApi/session/{sessionId}/log",
@@ -4958,6 +4965,11 @@ var SASjsApi = (() => {
 
   // src/corpus/deploy.ts
   var SUBJECT = { userId: "user-admin", clientId: "web_app" };
+  var manyMembers2 = (count) => Array.from({ length: count }, (_, at) => ({
+    name: `file-${at}.txt`,
+    type: "file",
+    code: ""
+  }));
   var DEPLOY_CORPUS = [
     {
       id: "deploy-unpublish",
@@ -5001,7 +5013,90 @@ var SASjsApi = (() => {
         subject: SUBJECT,
         body: { streamServiceName: "myApp", appLoc: "/Public/not-an-app" }
       },
-      expect: { status: 404, error: "No such app stream entry." }
+      expect: { status: 404, error: "No app is published at that folder." }
+    },
+    // ------------------------------------------- the uploaded-archive route
+    // The archive is expanded by the host, so what arrives here is the same tree
+    // `POST /deploy` takes - which is why every answer below matches its twin.
+    {
+      id: "upload-tree",
+      route: "POST /SASjsApi/drive/deploy/upload",
+      description: "writes the tree an uploaded archive expanded to",
+      request: {
+        subject: SUBJECT,
+        body: {
+          appLoc: "/Public/apps/uploaded",
+          fileTree: {
+            members: [
+              { name: "index.html", type: "file", code: "PGgxPkhlbGxvPC9oMT4=" }
+            ]
+          }
+        }
+      },
+      expect: {
+        status: 200,
+        body: {
+          status: "success",
+          message: "Files deployed successfully to @sasjs/server."
+        }
+      }
+    },
+    {
+      id: "upload-refused-by-shape",
+      route: "POST /SASjsApi/drive/deploy/upload",
+      description: "refuses an expansion that is not a tree",
+      request: {
+        subject: SUBJECT,
+        body: { appLoc: "/Public/apps/bad", fileTree: { members: 1 } }
+      },
+      expect: {
+        status: 400,
+        body: {
+          status: "failure",
+          message: "Provided not supported data format."
+        },
+        error: "Provided not supported data format."
+      }
+    },
+    {
+      id: "upload-refused-by-entry-count",
+      route: "POST /SASjsApi/drive/deploy/upload",
+      description: "applies the deploy cap to the expanded tree, not the bytes",
+      request: {
+        subject: SUBJECT,
+        body: {
+          appLoc: "/Public/apps/many",
+          fileTree: { members: manyMembers2(10001) }
+        }
+      },
+      expect: {
+        status: 413,
+        body: {
+          status: "failure",
+          message: "The file tree exceeds the deploy limit: 10001 entries (maximum 10000)."
+        },
+        error: "The file tree exceeds the deploy limit: 10001 entries (maximum 10000)."
+      }
+    },
+    {
+      id: "upload-refused-by-store",
+      route: "POST /SASjsApi/drive/deploy/upload",
+      description: "answers the routes 500 when the drive refuses the write",
+      unwritable: true,
+      request: {
+        subject: SUBJECT,
+        body: {
+          appLoc: "/Public/apps/demo",
+          fileTree: {
+            members: [{ name: "run", type: "service", code: "%put hi;" }]
+          }
+        }
+      },
+      expect: {
+        status: 500,
+        body: { status: "failure", message: "Deployment failed!" },
+        error: "Deployment failed!"
+      }
     }
   ];
 
@@ -5146,6 +5241,112 @@ var SASjsApi = (() => {
     }
   ];
 
+  // src/session/service.ts
+  var createSessionService = (store, host) => {
+    const notFound2 = (id) => `Session with ID '${id}' was not found.`;
+    const visible = async (caller, id) => {
+      if (!caller) throw new ApiError(401, "Unauthorized");
+      const reader = await store.userById(
+        caller.userId
+      );
+      if (!reader || !reader.isActive) throw new ApiError(401, "Unauthorized");
+      const session = await host.session(id);
+      if (!session) throw new ApiError(404, notFound2(id));
+      const owner = session.owner;
+      if (owner !== reader.uid && owner !== reader.username && !reader.isAdmin)
+        throw new ApiError(404, notFound2(id));
+      return session;
+    };
+    return {
+      async summary(caller, id) {
+        const session = await visible(caller, id);
+        return session.summary;
+      },
+      async state(caller, id) {
+        await visible(caller, id);
+        const state = await host.state(id);
+        if (!state) throw new ApiError(404, notFound2(id));
+        return state;
+      },
+      async log(caller, id) {
+        await visible(caller, id);
+        const log = await host.log(id);
+        if (log === void 0) throw new ApiError(404, notFound2(id));
+        return log;
+      },
+      async output(caller, id) {
+        await visible(caller, id);
+        const output = await host.output(id);
+        if (output === void 0) throw new ApiError(404, notFound2(id));
+        return output;
+      }
+    };
+  };
+
+  // src/session/memory-host.ts
+  var DEFAULT_SESSIONS = {
+    "sess-admin": {
+      owner: "user-admin",
+      summary: {
+        sessionId: "sess-admin",
+        state: "completed",
+        pid: 4242,
+        creationTimeStamp: "2026-11-07T09:00:00.000Z",
+        deathTimeStamp: "2026-11-07T09:00:04.000Z",
+        expiresAfterMins: 60
+      }
+    },
+    "sess-restricted": {
+      owner: "user-restricted",
+      summary: {
+        sessionId: "sess-restricted",
+        state: "running",
+        pid: 4243,
+        creationTimeStamp: "2026-11-07T09:05:00.000Z"
+      }
+    },
+    "sess-silent": {
+      owner: "user-admin",
+      summary: {
+        sessionId: "sess-silent",
+        state: "running",
+        pid: 4244,
+        creationTimeStamp: "2026-11-07T09:10:00.000Z"
+      }
+    }
+  };
+  var STATES = {
+    "sess-admin": { state: "completed", pid: 4242, lineCount: 12 },
+    "sess-restricted": { state: "running", pid: 4243, lineCount: 3 }
+  };
+  var LOGS = {
+    "sess-admin": "NOTE: session started\nNOTE: session completed\n",
+    "sess-restricted": "NOTE: session started\n",
+    "sess-silent": ""
+  };
+  var OUTPUTS = {
+    "sess-admin": "<html><body>42</body></html>",
+    "sess-restricted": "",
+    "sess-silent": ""
+  };
+  var MemorySessionHost = class {
+    constructor(sessions = DEFAULT_SESSIONS) {
+      this.sessions = sessions;
+    }
+    async session(id) {
+      return this.sessions[id];
+    }
+    async state(id) {
+      return STATES[id];
+    }
+    async log(id) {
+      return LOGS[id];
+    }
+    async output(id) {
+      return OUTPUTS[id];
+    }
+  };
+
   // src/corpus/records.ts
   var SIGNED_IN_TOKENS = [
     {
@@ -6362,112 +6563,6 @@ var SASjsApi = (() => {
     }
   ];
 
-  // src/session/service.ts
-  var createSessionService = (store, host) => {
-    const notFound2 = (id) => `Session with ID '${id}' was not found.`;
-    const visible = async (caller, id) => {
-      if (!caller) throw new ApiError(401, "Unauthorized");
-      const reader = await store.userById(
-        caller.userId
-      );
-      if (!reader || !reader.isActive) throw new ApiError(401, "Unauthorized");
-      const session = await host.session(id);
-      if (!session) throw new ApiError(404, notFound2(id));
-      const owner = session.owner;
-      if (owner !== reader.uid && owner !== reader.username && !reader.isAdmin)
-        throw new ApiError(404, notFound2(id));
-      return session;
-    };
-    return {
-      async summary(caller, id) {
-        const session = await visible(caller, id);
-        return session.summary;
-      },
-      async state(caller, id) {
-        await visible(caller, id);
-        const state = await host.state(id);
-        if (!state) throw new ApiError(404, notFound2(id));
-        return state;
-      },
-      async log(caller, id) {
-        await visible(caller, id);
-        const log = await host.log(id);
-        if (log === void 0) throw new ApiError(404, notFound2(id));
-        return log;
-      },
-      async output(caller, id) {
-        await visible(caller, id);
-        const output = await host.output(id);
-        if (output === void 0) throw new ApiError(404, notFound2(id));
-        return output;
-      }
-    };
-  };
-
-  // src/session/memory-host.ts
-  var DEFAULT_SESSIONS = {
-    "sess-admin": {
-      owner: "user-admin",
-      summary: {
-        sessionId: "sess-admin",
-        state: "completed",
-        pid: 4242,
-        creationTimeStamp: "2026-11-07T09:00:00.000Z",
-        deathTimeStamp: "2026-11-07T09:00:04.000Z",
-        expiresAfterMins: 60
-      }
-    },
-    "sess-restricted": {
-      owner: "user-restricted",
-      summary: {
-        sessionId: "sess-restricted",
-        state: "running",
-        pid: 4243,
-        creationTimeStamp: "2026-11-07T09:05:00.000Z"
-      }
-    },
-    "sess-silent": {
-      owner: "user-admin",
-      summary: {
-        sessionId: "sess-silent",
-        state: "running",
-        pid: 4244,
-        creationTimeStamp: "2026-11-07T09:10:00.000Z"
-      }
-    }
-  };
-  var STATES = {
-    "sess-admin": { state: "completed", pid: 4242, lineCount: 12 },
-    "sess-restricted": { state: "running", pid: 4243, lineCount: 3 }
-  };
-  var LOGS = {
-    "sess-admin": "NOTE: session started\nNOTE: session completed\n",
-    "sess-restricted": "NOTE: session started\n",
-    "sess-silent": ""
-  };
-  var OUTPUTS = {
-    "sess-admin": "<html><body>42</body></html>",
-    "sess-restricted": "",
-    "sess-silent": ""
-  };
-  var MemorySessionHost = class {
-    constructor(sessions = DEFAULT_SESSIONS) {
-      this.sessions = sessions;
-    }
-    async session(id) {
-      return this.sessions[id];
-    }
-    async state(id) {
-      return STATES[id];
-    }
-    async log(id) {
-      return LOGS[id];
-    }
-    async output(id) {
-      return OUTPUTS[id];
-    }
-  };
-
   // src/corpus/runner.ts
   var servicesFor = (testCase) => {
     const identity = new MemoryIdentityStore(

package/build/cjs/corpus/deploy.js

@@ -2,6 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEPLOY_CORPUS = void 0;
 const SUBJECT = { userId: 'user-admin', clientId: 'web_app' };
+/** A tree of `count` file members, for the deploy cap. */
+const manyMembers = (count) => Array.from({ length: count }, (_, at) => ({
+    name: `file-${at}.txt`,
+    type: 'file',
+    code: ''
+}));
 exports.DEPLOY_CORPUS = [
     {
         id: 'deploy-unpublish',
@@ -45,6 +51,89 @@ exports.DEPLOY_CORPUS = [
             subject: SUBJECT,
             body: { streamServiceName: 'myApp', appLoc: '/Public/not-an-app' }
         },
-        expect: { status: 404, error: 'No such app stream entry.' }
+        expect: { status: 404, error: 'No app is published at that folder.' }
+    },
+    // ------------------------------------------- the uploaded-archive route
+    // The archive is expanded by the host, so what arrives here is the same tree
+    // `POST /deploy` takes - which is why every answer below matches its twin.
+    {
+        id: 'upload-tree',
+        route: 'POST /SASjsApi/drive/deploy/upload',
+        description: 'writes the tree an uploaded archive expanded to',
+        request: {
+            subject: SUBJECT,
+            body: {
+                appLoc: '/Public/apps/uploaded',
+                fileTree: {
+                    members: [
+                        { name: 'index.html', type: 'file', code: 'PGgxPkhlbGxvPC9oMT4=' }
+                    ]
+                }
+            }
+        },
+        expect: {
+            status: 200,
+            body: {
+                status: 'success',
+                message: 'Files deployed successfully to @sasjs/server.'
+            }
+        }
+    },
+    {
+        id: 'upload-refused-by-shape',
+        route: 'POST /SASjsApi/drive/deploy/upload',
+        description: 'refuses an expansion that is not a tree',
+        request: {
+            subject: SUBJECT,
+            body: { appLoc: '/Public/apps/bad', fileTree: { members: 1 } }
+        },
+        expect: {
+            status: 400,
+            body: {
+                status: 'failure',
+                message: 'Provided not supported data format.'
+            },
+            error: 'Provided not supported data format.'
+        }
+    },
+    {
+        id: 'upload-refused-by-entry-count',
+        route: 'POST /SASjsApi/drive/deploy/upload',
+        description: 'applies the deploy cap to the expanded tree, not the bytes',
+        request: {
+            subject: SUBJECT,
+            body: {
+                appLoc: '/Public/apps/many',
+                fileTree: { members: manyMembers(10001) }
+            }
+        },
+        expect: {
+            status: 413,
+            body: {
+                status: 'failure',
+                message: 'The file tree exceeds the deploy limit: 10001 entries (maximum 10000).'
+            },
+            error: 'The file tree exceeds the deploy limit: 10001 entries (maximum 10000).'
+        }
+    },
+    {
+        id: 'upload-refused-by-store',
+        route: 'POST /SASjsApi/drive/deploy/upload',
+        description: 'answers the routes 500 when the drive refuses the write',
+        unwritable: true,
+        request: {
+            subject: SUBJECT,
+            body: {
+                appLoc: '/Public/apps/demo',
+                fileTree: {
+                    members: [{ name: 'run', type: 'service', code: '%put hi;' }]
+                }
+            }
+        },
+        expect: {
+            status: 500,
+            body: { status: 'failure', message: 'Deployment failed!' },
+            error: 'Deployment failed!'
+        }
     }
 ];

package/build/cjs/drive/registry.js

@@ -19,7 +19,7 @@ const unpublishAppStream = async (registry, body) => {
     if (!body.appLoc)
         throw new types_js_1.ApiError(400, '"appLoc" is required');
     if (!(await registry.unpublish(body.appLoc)))
-        throw new types_js_1.ApiError(404, 'No such app stream entry.');
+        throw new types_js_1.ApiError(404, 'No app is published at that folder.');
     return { status: 'success' };
 };
 exports.unpublishAppStream = unpublishAppStream;

package/build/cjs/host/dispatch.js

@@ -170,6 +170,11 @@ const dispatch = async (services, routeId, request = {}) => {
                 status: 200,
                 body: await drive.rename(String(request.body?.oldPath || ''), String(request.body?.newPath || ''))
             };
+        // The archive is the host's transport - multer and a zip library on a
+        // server, `DecompressionStream` in a worker - and it hands this the same tree
+        // `POST /deploy` takes. The deploy cap is measured on that tree, after
+        // expansion, which is why the two share this path rather than reading bytes.
+        case 'POST /SASjsApi/drive/deploy/upload':
         case 'POST /SASjsApi/drive/deploy': {
             // `streamWebFolder` is the host's: publishing an app stream is not a drive
             // operation, and a host that has no app stream ignores it.
@@ -396,6 +401,7 @@ const dispatch = async (services, routeId, request = {}) => {
 exports.dispatch = dispatch;
 /** Whether a route is one `dispatch` can answer today. */
 exports.HANDLED_ROUTES = [
+    'POST /SASjsApi/drive/deploy/upload',
     'DELETE /SASjsApi/drive/deploy',
     'GET /SASjsApi/session/{sessionId}',
     'GET /SASjsApi/session/{sessionId}/log',

package/build/cjs/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.servicesFor = exports.runCase = exports.PROVIDER_MANAGED = exports.ADMIN_SIGNED_IN = exports.RECORD_CORPUS = exports.SESSION_CORPUS = exports.DEPLOY_CORPUS = exports.IDENTITY_CORPUS = exports.DRIVE_CORPUS = exports.parseIdentity = exports.IDENTITY_FORMAT = exports.DEFAULT_IDENTITY = exports.MemoryIdentityStore = exports.CODE_CORPUS = exports.sanitiseDisplayName = exports.createRecordService = exports.createIdentityService = exports.HANDLED_ROUTES = exports.dispatch = exports.TAG_CAPABILITIES = exports.OVERLAY = exports.findRoute = exports.routeById = exports.ROUTES = exports.MemoryDriveStore = exports.measureDeployTree = exports.isDeployTree = exports.deployTree = exports.decodeBase64 = exports.checkDeployTree = exports.DEPLOY_SUCCESS = exports.DEPLOY_PAYLOAD_BYTES = exports.DEPLOY_LIMITS = exports.createDriveService = exports.isRoot = exports.basename = exports.dirname = exports.hasBlockedExtension = exports.normaliseDrivePath = void 0;
+exports.servicesFor = exports.runCase = exports.PROVIDER_MANAGED = exports.ADMIN_SIGNED_IN = exports.RECORD_CORPUS = exports.unpublishAppStream = exports.MemoryAppStreamRegistry = exports.MemorySessionHost = exports.DEFAULT_SESSIONS = exports.createSessionService = exports.SESSION_CORPUS = exports.DEPLOY_CORPUS = exports.IDENTITY_CORPUS = exports.DRIVE_CORPUS = exports.parseIdentity = exports.IDENTITY_FORMAT = exports.DEFAULT_IDENTITY = exports.MemoryIdentityStore = exports.CODE_CORPUS = exports.sanitiseDisplayName = exports.createRecordService = exports.createIdentityService = exports.HANDLED_ROUTES = exports.dispatch = exports.TAG_CAPABILITIES = exports.OVERLAY = exports.findRoute = exports.routeById = exports.ROUTES = exports.MemoryDriveStore = exports.measureDeployTree = exports.isDeployTree = exports.deployTree = exports.decodeBase64 = exports.checkDeployTree = exports.DEPLOY_SUCCESS = exports.DEPLOY_PAYLOAD_BYTES = exports.DEPLOY_LIMITS = exports.createDriveService = exports.isRoot = exports.basename = exports.dirname = exports.hasBlockedExtension = exports.normaliseDrivePath = void 0;
 /**
  * `@sasjs/api` - the SASjs Server API described once.
  *
@@ -83,6 +83,14 @@ var deploy_js_2 = require("./corpus/deploy.js");
 Object.defineProperty(exports, "DEPLOY_CORPUS", { enumerable: true, get: function () { return deploy_js_2.DEPLOY_CORPUS; } });
 var session_js_1 = require("./corpus/session.js");
 Object.defineProperty(exports, "SESSION_CORPUS", { enumerable: true, get: function () { return session_js_1.SESSION_CORPUS; } });
+var service_js_3 = require("./session/service.js");
+Object.defineProperty(exports, "createSessionService", { enumerable: true, get: function () { return service_js_3.createSessionService; } });
+var memory_host_js_1 = require("./session/memory-host.js");
+Object.defineProperty(exports, "DEFAULT_SESSIONS", { enumerable: true, get: function () { return memory_host_js_1.DEFAULT_SESSIONS; } });
+Object.defineProperty(exports, "MemorySessionHost", { enumerable: true, get: function () { return memory_host_js_1.MemorySessionHost; } });
+var registry_js_1 = require("./drive/registry.js");
+Object.defineProperty(exports, "MemoryAppStreamRegistry", { enumerable: true, get: function () { return registry_js_1.MemoryAppStreamRegistry; } });
+Object.defineProperty(exports, "unpublishAppStream", { enumerable: true, get: function () { return registry_js_1.unpublishAppStream; } });
 var records_js_2 = require("./corpus/records.js");
 Object.defineProperty(exports, "RECORD_CORPUS", { enumerable: true, get: function () { return records_js_2.RECORD_CORPUS; } });
 Object.defineProperty(exports, "ADMIN_SIGNED_IN", { enumerable: true, get: function () { return records_js_2.ADMIN_SIGNED_IN; } });

package/build/cjs/routes/generated.js

@@ -460,7 +460,7 @@ exports.GENERATED_ROUTES = [
             },
             {
                 status: 404,
-                description: 'No such app stream entry'
+                description: 'No app is published at that folder'
             }
         ]
     },

package/build/cjs/routes/overlay.js

@@ -30,7 +30,6 @@ const RUNTIME = 'Starting a program needs a runtime port, which this package doe
 const HOST_CONFIG = "The body is the host's own configuration - ports, run times and providers - which a mock states for itself and this package cannot know.";
 const HOST_OWNED = "The host owns this report: it describes the host's own process and files, which a browser build has no equivalent of.";
 const WEB_BUNDLE = 'The host serves its own web bundle; there is no API decision here for this package to answer.';
-const ARCHIVE = "Expanding the uploaded archive is the host's transport work - multer and a zip library on the server, `DecompressionStream` in a worker - and the host hands this package the tree it produces, which is the same tree `POST /SASjsApi/drive/deploy` takes.";
 const success = { status: 'success' };
 const user = {
     uid: '',
@@ -158,10 +157,7 @@ exports.OVERLAY = {
             500: { status: 'failure', message: 'Deployment failed!' }
         }
     },
-    'POST /SASjsApi/drive/deploy/upload': {
-        implemented: false,
-        reason: ARCHIVE
-    },
+    'POST /SASjsApi/drive/deploy/upload': { implemented: true },
     // `404` is a pair - the registry name and the appLoc it was published from -
     // that matches no entry, and the drive's content is deliberately left alone.
     'DELETE /SASjsApi/drive/deploy': { implemented: true },

package/build/esm/corpus/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../../src/corpus/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAI5C,eAAO,MAAM,aAAa,EAAE,UAAU,EA6CrC,CAAA"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../../src/corpus/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAW5C,eAAO,MAAM,aAAa,EAAE,UAAU,EAmIrC,CAAA"}

package/build/esm/corpus/deploy.js

@@ -1,4 +1,10 @@
 const SUBJECT = { userId: 'user-admin', clientId: 'web_app' };
+/** A tree of `count` file members, for the deploy cap. */
+const manyMembers = (count) => Array.from({ length: count }, (_, at) => ({
+    name: `file-${at}.txt`,
+    type: 'file',
+    code: ''
+}));
 export const DEPLOY_CORPUS = [
     {
         id: 'deploy-unpublish',
@@ -42,6 +48,89 @@ export const DEPLOY_CORPUS = [
             subject: SUBJECT,
             body: { streamServiceName: 'myApp', appLoc: '/Public/not-an-app' }
         },
-        expect: { status: 404, error: 'No such app stream entry.' }
+        expect: { status: 404, error: 'No app is published at that folder.' }
+    },
+    // ------------------------------------------- the uploaded-archive route
+    // The archive is expanded by the host, so what arrives here is the same tree
+    // `POST /deploy` takes - which is why every answer below matches its twin.
+    {
+        id: 'upload-tree',
+        route: 'POST /SASjsApi/drive/deploy/upload',
+        description: 'writes the tree an uploaded archive expanded to',
+        request: {
+            subject: SUBJECT,
+            body: {
+                appLoc: '/Public/apps/uploaded',
+                fileTree: {
+                    members: [
+                        { name: 'index.html', type: 'file', code: 'PGgxPkhlbGxvPC9oMT4=' }
+                    ]
+                }
+            }
+        },
+        expect: {
+            status: 200,
+            body: {
+                status: 'success',
+                message: 'Files deployed successfully to @sasjs/server.'
+            }
+        }
+    },
+    {
+        id: 'upload-refused-by-shape',
+        route: 'POST /SASjsApi/drive/deploy/upload',
+        description: 'refuses an expansion that is not a tree',
+        request: {
+            subject: SUBJECT,
+            body: { appLoc: '/Public/apps/bad', fileTree: { members: 1 } }
+        },
+        expect: {
+            status: 400,
+            body: {
+                status: 'failure',
+                message: 'Provided not supported data format.'
+            },
+            error: 'Provided not supported data format.'
+        }
+    },
+    {
+        id: 'upload-refused-by-entry-count',
+        route: 'POST /SASjsApi/drive/deploy/upload',
+        description: 'applies the deploy cap to the expanded tree, not the bytes',
+        request: {
+            subject: SUBJECT,
+            body: {
+                appLoc: '/Public/apps/many',
+                fileTree: { members: manyMembers(10001) }
+            }
+        },
+        expect: {
+            status: 413,
+            body: {
+                status: 'failure',
+                message: 'The file tree exceeds the deploy limit: 10001 entries (maximum 10000).'
+            },
+            error: 'The file tree exceeds the deploy limit: 10001 entries (maximum 10000).'
+        }
+    },
+    {
+        id: 'upload-refused-by-store',
+        route: 'POST /SASjsApi/drive/deploy/upload',
+        description: 'answers the routes 500 when the drive refuses the write',
+        unwritable: true,
+        request: {
+            subject: SUBJECT,
+            body: {
+                appLoc: '/Public/apps/demo',
+                fileTree: {
+                    members: [{ name: 'run', type: 'service', code: '%put hi;' }]
+                }
+            }
+        },
+        expect: {
+            status: 500,
+            body: { status: 'failure', message: 'Deployment failed!' },
+            error: 'Deployment failed!'
+        }
     }
 ];

package/build/esm/drive/registry.js

@@ -16,7 +16,7 @@ export const unpublishAppStream = async (registry, body) => {
     if (!body.appLoc)
         throw new ApiError(400, '"appLoc" is required');
     if (!(await registry.unpublish(body.appLoc)))
-        throw new ApiError(404, 'No such app stream entry.');
+        throw new ApiError(404, 'No app is published at that folder.');
     return { status: 'success' };
 };
 /**

package/build/esm/host/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/host/dispatch.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAOnD,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,oFAAoF;IACpF,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAA;KAAE,CAAA;IACtD;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,mBAAmB;IACnB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;CAC/B;AAED,MAAM,WAAW,QAAQ;IACvB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,KAAK,EAAE,YAAY,CAAA;IACnB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,yFAAyF;IACzF,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB;;;OAGG;IACH,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB;;;OAGG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B;AA2CD,eAAO,MAAM,QAAQ,GACnB,UAAU,QAAQ,EAClB,SAAS,MAAM,EACf,UAAS,UAAe,KACvB,OAAO,CAAC,WAAW,CAycrB,CAAA;AAED,0DAA0D;AAC1D,eAAO,MAAM,cAAc,EAAE,MAAM,EAiDlC,CAAA"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/host/dispatch.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAOnD,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,oFAAoF;IACpF,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAA;KAAE,CAAA;IACtD;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,mBAAmB;IACnB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;CAC/B;AAED,MAAM,WAAW,QAAQ;IACvB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,KAAK,EAAE,YAAY,CAAA;IACnB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B,yFAAyF;IACzF,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB;;;OAGG;IACH,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB;;;OAGG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B;AA2CD,eAAO,MAAM,QAAQ,GACnB,UAAU,QAAQ,EAClB,SAAS,MAAM,EACf,UAAS,UAAe,KACvB,OAAO,CAAC,WAAW,CA8crB,CAAA;AAED,0DAA0D;AAC1D,eAAO,MAAM,cAAc,EAAE,MAAM,EAkDlC,CAAA"}

package/build/esm/host/dispatch.js

@@ -167,6 +167,11 @@ export const dispatch = async (services, routeId, request = {}) => {
                 status: 200,
                 body: await drive.rename(String(request.body?.oldPath || ''), String(request.body?.newPath || ''))
             };
+        // The archive is the host's transport - multer and a zip library on a
+        // server, `DecompressionStream` in a worker - and it hands this the same tree
+        // `POST /deploy` takes. The deploy cap is measured on that tree, after
+        // expansion, which is why the two share this path rather than reading bytes.
+        case 'POST /SASjsApi/drive/deploy/upload':
         case 'POST /SASjsApi/drive/deploy': {
             // `streamWebFolder` is the host's: publishing an app stream is not a drive
             // operation, and a host that has no app stream ignores it.
@@ -392,6 +397,7 @@ export const dispatch = async (services, routeId, request = {}) => {
 };
 /** Whether a route is one `dispatch` can answer today. */
 export const HANDLED_ROUTES = [
+    'POST /SASjsApi/drive/deploy/upload',
     'DELETE /SASjsApi/drive/deploy',
     'GET /SASjsApi/session/{sessionId}',
     'GET /SASjsApi/session/{sessionId}/log',

package/build/esm/index.d.ts

@@ -40,6 +40,11 @@ export { DRIVE_CORPUS } from './corpus/drive.js';
 export { IDENTITY_CORPUS } from './corpus/identity.js';
 export { DEPLOY_CORPUS } from './corpus/deploy.js';
 export { SESSION_CORPUS } from './corpus/session.js';
+export { createSessionService } from './session/service.js';
+export type { HostSession, SessionHost, SessionService, SessionStateResponse, SessionSummary } from './session/service.js';
+export { DEFAULT_SESSIONS, MemorySessionHost } from './session/memory-host.js';
+export { MemoryAppStreamRegistry, unpublishAppStream } from './drive/registry.js';
+export type { AppStreamRegistry, UnpublishBody } from './drive/registry.js';
 export { RECORD_CORPUS, ADMIN_SIGNED_IN, PROVIDER_MANAGED } from './corpus/records.js';
 export type { CorpusCase } from './corpus/drive.js';
 export { runCase, servicesFor } from './corpus/runner.js';

package/build/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,OAAO,EACP,QAAQ,EACR,MAAM,EACP,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,iBAAiB,EAClB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,UAAU,EACX,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACV,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAChE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAG7D,cAAc,2BAA2B,CAAA;AACzC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,YAAY,EACb,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,eAAe,EACf,WAAW,EACX,aAAa,EACd,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,aAAa,EACd,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,QAAQ,EACR,aAAa,EACb,OAAO,EACP,OAAO,EACP,SAAS,EACT,UAAU,EACX,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EACL,aAAa,EACb,eAAe,EACf,gBAAgB,EACjB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACzD,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,OAAO,EACP,QAAQ,EACR,MAAM,EACP,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,iBAAiB,EAClB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,UAAU,EACX,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,SAAS,EACT,SAAS,EACV,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAChE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAG7D,cAAc,2BAA2B,CAAA;AACzC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,YAAY,EACb,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,eAAe,EACf,WAAW,EACX,aAAa,EACd,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,aAAa,EACd,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,QAAQ,EACR,aAAa,EACb,OAAO,EACP,OAAO,EACP,SAAS,EACT,UAAU,EACX,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,YAAY,EACV,WAAW,EACX,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,cAAc,EACf,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC9E,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAC3E,OAAO,EACL,aAAa,EACb,eAAe,EACf,gBAAgB,EACjB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACzD,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA"}

package/build/esm/index.js

@@ -32,5 +32,8 @@ export { DRIVE_CORPUS } from './corpus/drive.js';
 export { IDENTITY_CORPUS } from './corpus/identity.js';
 export { DEPLOY_CORPUS } from './corpus/deploy.js';
 export { SESSION_CORPUS } from './corpus/session.js';
+export { createSessionService } from './session/service.js';
+export { DEFAULT_SESSIONS, MemorySessionHost } from './session/memory-host.js';
+export { MemoryAppStreamRegistry, unpublishAppStream } from './drive/registry.js';
 export { RECORD_CORPUS, ADMIN_SIGNED_IN, PROVIDER_MANAGED } from './corpus/records.js';
 export { runCase, servicesFor } from './corpus/runner.js';

package/build/esm/routes/generated.js

@@ -457,7 +457,7 @@ export const GENERATED_ROUTES = [
             },
             {
                 status: 404,
-                description: 'No such app stream entry'
+                description: 'No app is published at that folder'
             }
         ]
     },

package/build/esm/routes/overlay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"overlay.d.ts","sourceRoot":"","sources":["../../../src/routes/overlay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGzD,yDAAyD;AACzD,UAAU,aAAa;IACrB,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;IAC3B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,aAAa,GACtC,CAAC;IAAE,WAAW,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,WAAW,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElE,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAczD,CAAA;AAqCD,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CA6MhD,CAAA;AAED,wEAAwE;AACxE,eAAO,MAAM,OAAO,EAAE,UAAU,EAA8C,CAAA"}
+{"version":3,"file":"overlay.d.ts","sourceRoot":"","sources":["../../../src/routes/overlay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGzD,yDAAyD;AACzD,UAAU,aAAa;IACrB,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;IAC3B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,aAAa,GACtC,CAAC;IAAE,WAAW,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,WAAW,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElE,kFAAkF;AAClF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAczD,CAAA;AAkCD,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CA0MhD,CAAA;AAED,wEAAwE;AACxE,eAAO,MAAM,OAAO,EAAE,UAAU,EAA8C,CAAA"}

package/build/esm/routes/overlay.js

@@ -27,7 +27,6 @@ const RUNTIME = 'Starting a program needs a runtime port, which this package doe
 const HOST_CONFIG = "The body is the host's own configuration - ports, run times and providers - which a mock states for itself and this package cannot know.";
 const HOST_OWNED = "The host owns this report: it describes the host's own process and files, which a browser build has no equivalent of.";
 const WEB_BUNDLE = 'The host serves its own web bundle; there is no API decision here for this package to answer.';
-const ARCHIVE = "Expanding the uploaded archive is the host's transport work - multer and a zip library on the server, `DecompressionStream` in a worker - and the host hands this package the tree it produces, which is the same tree `POST /SASjsApi/drive/deploy` takes.";
 const success = { status: 'success' };
 const user = {
     uid: '',
@@ -155,10 +154,7 @@ export const OVERLAY = {
             500: { status: 'failure', message: 'Deployment failed!' }
         }
     },
-    'POST /SASjsApi/drive/deploy/upload': {
-        implemented: false,
-        reason: ARCHIVE
-    },
+    'POST /SASjsApi/drive/deploy/upload': { implemented: true },
     // `404` is a pair - the registry name and the appLoc it was published from -
     // that matches no entry, and the drive's content is deliberately left alone.
     'DELETE /SASjsApi/drive/deploy': { implemented: true },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sasjs/api",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "description": "The SASjs Server API, described once - a generated route table, the services behind it, and the conformance corpus both hosts run",
   "license": "MIT",
   "author": "SASjs",