@sasjs/cli 6.27.1 → 6.27.3

package/build/commands/build/internal/mockSite/spec/sw.spec.js

@@ -90,6 +90,7 @@ var path_1 = __importDefault(require("path"));
 var api_1 = require("@sasjs/api");
 var os_1 = __importDefault(require("os"));
 var yazl_1 = __importDefault(require("yazl"));
+var utils_1 = require("@sasjs/utils");
 var mockSite_1 = require("../mockSite");
 /**
  * The other half of the parity claim: the service worker is what turns an
@@ -122,8 +123,9 @@ var lintBundle = function () {
     }
     return lintBundlePath;
 };
-var loadWorker = function (base) {
+var loadWorker = function (base, options) {
     if (base === void 0) { base = ''; }
+    if (options === void 0) { options = {}; }
     jest.resetModules();
     var handlers = {};
     var refusingWrites = false;
@@ -205,6 +207,22 @@ var loadWorker = function (base) {
                 fixture = global.__sasTranscript;
                 return [2 /*return*/, fixture ? jsonResponse(fixture) : new Response('', { status: 404 })];
             }
+            // the webout() block the build writes beside the worker, from the same
+            // @sasjs/utils generator sasjs/server uses. Absent unless a test asks for
+            // it: a site built before the block existed keeps the `_webout`-only path.
+            if (options.prelude && target.includes('webout-prelude'))
+                return [2 /*return*/, jsonResponse({
+                        sentinels: mockSite_1.WEBOUT_SENTINELS,
+                        template: (0, utils_1.getWeboutPrelude)({
+                            weboutPath: mockSite_1.WEBOUT_SENTINELS.weboutPath,
+                            headersPath: mockSite_1.WEBOUT_SENTINELS.headersPath,
+                            program: mockSite_1.WEBOUT_SENTINELS.program,
+                            debug: mockSite_1.WEBOUT_SENTINELS.debug,
+                            username: mockSite_1.WEBOUT_SENTINELS.username,
+                            userId: mockSite_1.WEBOUT_SENTINELS.userId,
+                            apiServerUrl: mockSite_1.WEBOUT_SENTINELS.apiServerUrl
+                        })
+                    })];
             return [2 /*return*/, target.includes('vfs-seed')
                     ? jsonResponse({
                         files: (_a = {},
@@ -260,7 +278,8 @@ var jsonResponse = function (body) { return ({
         return [2 /*return*/, body];
     }); }); }
 }); };
-/** A zip archive of text members, written the way a deploy upload ships one.
+/** A zip archive of members - text, or bytes for a base64 member - written the way
+ * a deploy upload ships one.
  * The first member is stored rather than deflated, so both methods the reader
  * accepts are exercised by the one case. */
 var zipOf = function (files) {
@@ -392,6 +411,164 @@ describe('service worker host', function () {
             }
         });
     }); });
+    it('runs a JS program written the way sasjs/server runs one', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var worker, response, body, _a, _b;
+        var _c;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
+                case 0:
+                    worker = loadWorker('', { prelude: true });
+                    worker.runtime.load((_c = {},
+                        _c[drivePath('services/public/run.js')] = [
+                            "const rows = [{ name: 'Alice', age: 14 }, { name: 'Bob', age: 15 }]",
+                            'console.log(`Read ${rows.length} rows`)',
+                            "webout('OPEN')",
+                            "webout('OBJ', 'adults', rows.filter((row) => row.age > 13))",
+                            "webout('CLOSE')"
+                        ].join('\n'),
+                        _c));
+                    return [4 /*yield*/, worker.dispatch('/SASjsApi/stp/execute?_program=' +
+                            encodeURIComponent("".concat(appLoc, "/services/public/run")))];
+                case 1:
+                    response = _d.sent();
+                    expect(response.status).toBe(200);
+                    _b = (_a = JSON).parse;
+                    return [4 /*yield*/, response.text()];
+                case 2:
+                    body = _b.apply(_a, [_d.sent()]);
+                    expect(body.adults).toEqual([
+                        { name: 'Alice', age: 14 },
+                        { name: 'Bob', age: 15 }
+                    ]);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('answers a Run in Studio on the recorded program, as a code run', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var worker, response, parts;
+        var _a, _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0:
+                    // Press Run in Studio posts the buffer to /code/execute with the file's own
+                    // path prepended as `%let _program` - the path is not a query parameter, as
+                    // it is for stp/execute. The recording is what answers it: without this the
+                    // demo's .sas program has a Run button (the host states `sas`) and no way to
+                    // answer it, because a browser cannot compile SAS.
+                    ;
+                    global.__sasTranscript = (_a = {},
+                        _a["".concat(appLoc, "/services/public/program.sas")] = {
+                            webout: '{"SYSSITE":"00000000"}',
+                            log: 'NOTE: recorded',
+                            print: 'The SAS System'
+                        },
+                        _a);
+                    worker = loadWorker();
+                    worker.runtime.load((_b = {},
+                        _b[drivePath('services/public/program.sas')] = 'data work.class; run;',
+                        _b));
+                    return [4 /*yield*/, worker.dispatch('/SASjsApi/code/execute', runRequest({
+                            code: "%let _program = ".concat(appLoc, "/services/public/program.sas;\ndata work.class; run;"),
+                            runTime: 'sas'
+                        }))];
+                case 1:
+                    response = _c.sent();
+                    expect(response.status).toBe(200);
+                    return [4 /*yield*/, response.text()];
+                case 2:
+                    parts = (_c.sent()).split(LOGS_SEPARATOR);
+                    expect(parts[0].trim()).toBe('{"SYSSITE":"00000000"}');
+                    expect(parts[1]).toContain('NOTE: recorded');
+                    expect(parts[2]).toContain('The SAS System');
+                    delete global.__sasTranscript;
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('answers only the line the interface writes, not one further down', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var worker, response, _a;
+        var _b, _c;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
+                case 0:
+                    // The interface puts `%let _program` first; a line further down belongs to
+                    // the program. Answered, it would hand a caller's own SAS program the session
+                    // recorded for another file - the "inventing a session" the refusal exists to
+                    // avoid, with a different file's log.
+                    ;
+                    global.__sasTranscript = (_b = {},
+                        _b["".concat(appLoc, "/services/public/program.sas")] = {
+                            webout: '{"SYSSITE":"00000000"}',
+                            log: 'NOTE: recorded',
+                            print: 'The SAS System'
+                        },
+                        _b);
+                    worker = loadWorker();
+                    worker.runtime.load((_c = {},
+                        _c[drivePath('services/public/mine.sas')] = 'data work.class; run;',
+                        _c));
+                    return [4 /*yield*/, worker.dispatch('/SASjsApi/code/execute', runRequest({
+                            code: "data _null_;\n%let _program = ".concat(appLoc, "/services/public/program.sas;\nrun;"),
+                            runTime: 'sas'
+                        }))];
+                case 1:
+                    response = _d.sent();
+                    expect(response.status).toBe(400);
+                    _a = expect;
+                    return [4 /*yield*/, response.text()];
+                case 2:
+                    _a.apply(void 0, [_d.sent()]).toContain('SAS is not available');
+                    delete global.__sasTranscript;
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('refuses SAS code that names no recorded program', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var worker, _a, _b, code, response, body, e_1_1;
+        var e_1, _c;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
+                case 0:
+                    worker = loadWorker();
+                    _d.label = 1;
+                case 1:
+                    _d.trys.push([1, 7, 8, 9]);
+                    _a = __values([
+                        'data work.class; run;',
+                        "%let _program = ".concat(appLoc, "/services/public/other.sas;\ndata work.class; run;")
+                    ]), _b = _a.next();
+                    _d.label = 2;
+                case 2:
+                    if (!!_b.done) return [3 /*break*/, 6];
+                    code = _b.value;
+                    return [4 /*yield*/, worker.dispatch('/SASjsApi/code/execute', runRequest({ code: code, runTime: 'sas' }))];
+                case 3:
+                    response = _d.sent();
+                    expect(response.status).toBe(400);
+                    return [4 /*yield*/, response.text()];
+                case 4:
+                    body = _d.sent();
+                    expect(body).toContain('SAS is not available');
+                    expect(body).not.toContain('SyntaxError');
+                    _d.label = 5;
+                case 5:
+                    _b = _a.next();
+                    return [3 /*break*/, 2];
+                case 6: return [3 /*break*/, 9];
+                case 7:
+                    e_1_1 = _d.sent();
+                    e_1 = { error: e_1_1 };
+                    return [3 /*break*/, 9];
+                case 8:
+                    try {
+                        if (_b && !_b.done && (_c = _a.return)) _c.call(_a);
+                    }
+                    finally { if (e_1) throw e_1.error; }
+                    return [7 /*endfinally*/];
+                case 9: return [2 /*return*/];
+            }
+        });
+    }); });
     it('refuses a .sas program no recording names, as it always did', function () { return __awaiter(void 0, void 0, void 0, function () {
         var worker, response, body;
         var _a;
@@ -410,7 +587,8 @@ describe('service worker host', function () {
                     return [4 /*yield*/, response.text()];
                 case 2:
                     body = _b.sent();
-                    expect(body).toContain('runTime');
+                    expect(body).toContain('SAS is not available');
+                    expect(body).toContain('recorded session');
                     expect(body).not.toContain('SyntaxError');
                     return [2 /*return*/];
             }
@@ -1546,8 +1724,8 @@ describe('service worker host', function () {
         });
     }); });
     it('publishes, lists, serves and removes an app through the package surface', function () { return __awaiter(void 0, void 0, void 0, function () {
-        var dispatch, _a, _b, path_2, listing, _c, e_1_1, _d, _e, path_3, landing, e_2_1, root, archive, form, published, app, _f, _g, path_4, listing, _h, e_3_1, _j, _k, path_5, page, _l, e_4_1, folder, _m, refused, missing, removed, _o, after, _p, gone;
-        var e_1, _q, e_2, _r, e_3, _s, e_4, _t;
+        var dispatch, _a, _b, path_2, listing, _c, e_2_1, _d, _e, path_3, landing, e_3_1, root, archive, form, published, app, _f, _g, path_4, listing, _h, e_4_1, _j, _k, path_5, page, _l, e_5_1, folder, _m, refused, missing, removed, _o, after, _p, gone;
+        var e_2, _q, e_3, _r, e_4, _s, e_5, _t;
         return __generator(this, function (_u) {
             switch (_u.label) {
                 case 0:
@@ -1574,14 +1752,14 @@ describe('service worker host', function () {
                     return [3 /*break*/, 2];
                 case 6: return [3 /*break*/, 9];
                 case 7:
-                    e_1_1 = _u.sent();
-                    e_1 = { error: e_1_1 };
+                    e_2_1 = _u.sent();
+                    e_2 = { error: e_2_1 };
                     return [3 /*break*/, 9];
                 case 8:
                     try {
                         if (_b && !_b.done && (_q = _a.return)) _q.call(_a);
                     }
-                    finally { if (e_1) throw e_1.error; }
+                    finally { if (e_2) throw e_2.error; }
                     return [7 /*endfinally*/];
                 case 9:
                     _u.trys.push([9, 14, 15, 16]);
@@ -1601,14 +1779,14 @@ describe('service worker host', function () {
                     return [3 /*break*/, 10];
                 case 13: return [3 /*break*/, 16];
                 case 14:
-                    e_2_1 = _u.sent();
-                    e_2 = { error: e_2_1 };
+                    e_3_1 = _u.sent();
+                    e_3 = { error: e_3_1 };
                     return [3 /*break*/, 16];
                 case 15:
                     try {
                         if (_e && !_e.done && (_r = _d.return)) _r.call(_d);
                     }
-                    finally { if (e_2) throw e_2.error; }
+                    finally { if (e_3) throw e_3.error; }
                     return [7 /*endfinally*/];
                 case 16: return [4 /*yield*/, dispatch('/AppStream')];
                 case 17:
@@ -1661,14 +1839,14 @@ describe('service worker host', function () {
                     return [3 /*break*/, 22];
                 case 26: return [3 /*break*/, 29];
                 case 27:
-                    e_3_1 = _u.sent();
-                    e_3 = { error: e_3_1 };
+                    e_4_1 = _u.sent();
+                    e_4 = { error: e_4_1 };
                     return [3 /*break*/, 29];
                 case 28:
                     try {
                         if (_g && !_g.done && (_s = _f.return)) _s.call(_f);
                     }
-                    finally { if (e_3) throw e_3.error; }
+                    finally { if (e_4) throw e_4.error; }
                     return [7 /*endfinally*/];
                 case 29:
                     _u.trys.push([29, 35, 36, 37]);
@@ -1695,14 +1873,14 @@ describe('service worker host', function () {
                     return [3 /*break*/, 30];
                 case 34: return [3 /*break*/, 37];
                 case 35:
-                    e_4_1 = _u.sent();
-                    e_4 = { error: e_4_1 };
+                    e_5_1 = _u.sent();
+                    e_5 = { error: e_5_1 };
                     return [3 /*break*/, 37];
                 case 36:
                     try {
                         if (_k && !_k.done && (_t = _j.return)) _t.call(_j);
                     }
-                    finally { if (e_4) throw e_4.error; }
+                    finally { if (e_5) throw e_5.error; }
                     return [7 /*endfinally*/];
                 case 37: return [4 /*yield*/, dispatch("/app/".concat(app.id))];
                 case 38:
@@ -2005,30 +2183,33 @@ describe('service worker host', function () {
                 case 0:
                     dispatch = seeded().dispatch;
                     return [4 /*yield*/, dispatch('/SASjsApi/info')
-                        // the documented body, field for field, in the values @sasjs/api's
-                        // BROWSER_INFO states: a property the document does not state, or a login
-                        // form told there are accounts when there are none, is this host describing
-                        // an API the server does not serve
+                        // the documented body, field for field: a property the document does not
+                        // state, or a login form told there are accounts when there are none, is
+                        // this host describing an API the server does not serve. `runTimes` is the
+                        // host's own, not the package's browser fixture: `sas` is what makes the
+                        // Studio offer Run on a .sas file, and the recording is how it is answered.
                     ];
                 case 1:
                     info = _f.sent();
-                    // the documented body, field for field, in the values @sasjs/api's
-                    // BROWSER_INFO states: a property the document does not state, or a login
-                    // form told there are accounts when there are none, is this host describing
-                    // an API the server does not serve
+                    // the documented body, field for field: a property the document does not
+                    // state, or a login form told there are accounts when there are none, is
+                    // this host describing an API the server does not serve. `runTimes` is the
+                    // host's own, not the package's browser fixture: `sas` is what makes the
+                    // Studio offer Run on a .sas file, and the recording is how it is answered.
                     _a = expect;
                     return [4 /*yield*/, info.json()];
                 case 2:
-                    // the documented body, field for field, in the values @sasjs/api's
-                    // BROWSER_INFO states: a property the document does not state, or a login
-                    // form told there are accounts when there are none, is this host describing
-                    // an API the server does not serve
+                    // the documented body, field for field: a property the document does not
+                    // state, or a login form told there are accounts when there are none, is
+                    // this host describing an API the server does not serve. `runTimes` is the
+                    // host's own, not the package's browser fixture: `sas` is what makes the
+                    // Studio offer Run on a .sas file, and the recording is how it is answered.
                     _a.apply(void 0, [_f.sent()]).toEqual({
                         mode: 'desktop',
                         cors: 'disable',
                         httpPort: null,
                         httpsPort: null,
-                        runTimes: ['js'],
+                        runTimes: ['js', 'sas'],
                         authProviders: [],
                         localLoginEnabled: false,
                         version: 'dev'
@@ -2641,7 +2822,7 @@ describe('service worker host', function () {
         }); });
     });
     describe('conformance corpus', function () {
-        var e_5, _a, e_6, _b;
+        var e_6, _a, e_7, _b;
         /**
          * The corpus is what "the same API" means: the cases @sasjs/api runs against
          * its own services, and against a live sasjs/server, run here against this
@@ -2650,7 +2831,7 @@ describe('service worker host', function () {
          * used to have - and it is a test rather than a review.
          */
         var httpFor = function (testCase) {
-            var e_7, _a;
+            var e_8, _a;
             var _b;
             var _c = __read(testCase.route.split(' '), 2), method = _c[0], routePath = _c[1];
             var query = new URLSearchParams();
@@ -2661,12 +2842,12 @@ describe('service worker host', function () {
                         query.set(key, String(value));
                 }
             }
-            catch (e_7_1) { e_7 = { error: e_7_1 }; }
+            catch (e_8_1) { e_8 = { error: e_8_1 }; }
             finally {
                 try {
                     if (_e && !_e.done && (_a = _d.return)) _a.call(_d);
                 }
-                finally { if (e_7) throw e_7.error; }
+                finally { if (e_8) throw e_8.error; }
             }
             var suffix = query.toString() ? "?".concat(query) : '';
             var init = { method: method };
@@ -2697,8 +2878,8 @@ describe('service worker host', function () {
          * does.
          */
         var seedDrive = function (runtime, testCase) { return __awaiter(void 0, void 0, void 0, function () {
-            var text, _a, _b, _c, file, contents, _d, _e, _f, file, contents, e_8_1;
-            var e_9, _g, e_8, _h;
+            var text, _a, _b, _c, file, contents, _d, _e, _f, file, contents, e_9_1;
+            var e_10, _g, e_9, _h;
             return __generator(this, function (_j) {
                 switch (_j.label) {
                     case 0:
@@ -2710,12 +2891,12 @@ describe('service worker host', function () {
                                     text["/sasjs/drive/files".concat(file)] = contents;
                             }
                         }
-                        catch (e_9_1) { e_9 = { error: e_9_1 }; }
+                        catch (e_10_1) { e_10 = { error: e_10_1 }; }
                         finally {
                             try {
                                 if (_b && !_b.done && (_g = _a.return)) _g.call(_a);
                             }
-                            finally { if (e_9) throw e_9.error; }
+                            finally { if (e_10) throw e_10.error; }
                         }
                         return [4 /*yield*/, runtime.load(text)];
                     case 1:
@@ -2738,14 +2919,14 @@ describe('service worker host', function () {
                         return [3 /*break*/, 3];
                     case 6: return [3 /*break*/, 9];
                     case 7:
-                        e_8_1 = _j.sent();
-                        e_8 = { error: e_8_1 };
+                        e_9_1 = _j.sent();
+                        e_9 = { error: e_9_1 };
                         return [3 /*break*/, 9];
                     case 8:
                         try {
                             if (_e && !_e.done && (_h = _d.return)) _h.call(_d);
                         }
-                        finally { if (e_8) throw e_8.error; }
+                        finally { if (e_9) throw e_9.error; }
                         return [7 /*endfinally*/];
                     case 9: return [2 /*return*/];
                 }
@@ -2856,29 +3037,13 @@ describe('service worker host', function () {
                 _loop_1(testCase);
             }
         }
-        catch (e_5_1) { e_5 = { error: e_5_1 }; }
+        catch (e_6_1) { e_6 = { error: e_6_1 }; }
         finally {
             try {
                 if (DRIVE_CORPUS_1_1 && !DRIVE_CORPUS_1_1.done && (_a = DRIVE_CORPUS_1.return)) _a.call(DRIVE_CORPUS_1);
             }
-            finally { if (e_5) throw e_5.error; }
+            finally { if (e_6) throw e_6.error; }
         }
-        /**
-         * The deploy route's JSON form and its removal, which is what `sasjs deploy`
-         * sends and what this host's transport carries unchanged.
-         *
-         * The upload route's cases hand over the expanded tree in place of the
-         * archive, which is a host's transport detail rather than an answer: this
-         * worker takes the archive and expands it, so those cases would pin the
-         * corpus's assumption instead of this host's behaviour. The zip cases above
-         * pin that route. The removal cases need an app to remove, so the index is
-         * seeded with the corpus's own - the worker starts with nothing published,
-         * which is the server's state too.
-         *
-         * The state a case leaves is checked too - `expectDrive` - because both deploy
-         * answers are `200` and the difference between replacing a folder and keeping
-         * what is there is only visible in the drive afterwards.
-         */
         /** The app a removal case names, as the corpus states it. */
         var CORPUS_APP = {
             appLoc: '/Public/myApp',
@@ -2932,10 +3097,92 @@ describe('service worker host', function () {
                 }
             });
         }); };
+        /**
+         * The archive a client uploads, built from the tree the case states.
+         *
+         * The corpus is transport-agnostic: an upload case gives the tree the archive
+         * has to expand to, and the folder in the query where the document puts it.
+         * This host takes an archive, so the harness makes one - which is the only way
+         * the mock's own expansion, and the tree it produces, gets exercised by the
+         * cases that describe it.
+         */
+        var archiveOf = function (tree) { return __awaiter(void 0, void 0, void 0, function () {
+            var files, walk;
+            return __generator(this, function (_a) {
+                files = {};
+                walk = function (members, prefix) {
+                    var e_11, _a;
+                    var _b;
+                    try {
+                        for (var _c = __values(members || []), _d = _c.next(); !_d.done; _d = _c.next()) {
+                            var member = _d.value;
+                            var at = prefix ? "".concat(prefix, "/").concat(member.name) : member.name;
+                            if (member.type === 'folder')
+                                walk(member.members, at);
+                            else
+                                files[at] =
+                                    member.encoding === 'base64'
+                                        ? new Uint8Array(Buffer.from(String(member.code), 'base64'))
+                                        : String((_b = member.code) !== null && _b !== void 0 ? _b : '');
+                        }
+                    }
+                    catch (e_11_1) { e_11 = { error: e_11_1 }; }
+                    finally {
+                        try {
+                            if (_d && !_d.done && (_a = _c.return)) _a.call(_c);
+                        }
+                        finally { if (e_11) throw e_11.error; }
+                    }
+                };
+                walk(tree === null || tree === void 0 ? void 0 : tree.members, '');
+                return [2 /*return*/, zipOf(files)];
+            });
+        }); };
+        /**
+         * The request a deploy case describes, as HTTP.
+         *
+         * The JSON and removal routes carry their fields as they are stated. The upload
+         * route's body is an archive, so the tree becomes one and the fields the case
+         * states beside it travel as form fields - a host's multipart body, with the
+         * folder also in the query where the document puts it.
+         */
+        var deployRequest = function (testCase) { return __awaiter(void 0, void 0, void 0, function () {
+            var _a, requestPath, init, body, archive, form, _b, _c, _d, field, value;
+            var e_12, _e;
+            return __generator(this, function (_f) {
+                switch (_f.label) {
+                    case 0:
+                        _a = httpFor(testCase), requestPath = _a.path, init = _a.init;
+                        if (!testCase.route.endsWith('/deploy/upload'))
+                            return [2 /*return*/, { requestPath: requestPath, init: init }];
+                        body = (testCase.request.body || {});
+                        return [4 /*yield*/, archiveOf(body.fileTree)];
+                    case 1:
+                        archive = _f.sent();
+                        form = new FormData();
+                        try {
+                            for (_b = __values(Object.entries(body)), _c = _b.next(); !_c.done; _c = _b.next()) {
+                                _d = __read(_c.value, 2), field = _d[0], value = _d[1];
+                                if (field !== 'fileTree' && value !== undefined)
+                                    form.set(field, String(value));
+                            }
+                        }
+                        catch (e_12_1) { e_12 = { error: e_12_1 }; }
+                        finally {
+                            try {
+                                if (_c && !_c.done && (_e = _b.return)) _e.call(_b);
+                            }
+                            finally { if (e_12) throw e_12.error; }
+                        }
+                        form.set('file', new Blob([new Uint8Array(archive)]), 'deploy.zip');
+                        return [2 /*return*/, { requestPath: requestPath, init: { method: 'POST', body: form } }];
+                }
+            });
+        }); };
         var _loop_2 = function (testCase) {
             it(testCase.id, function () { return __awaiter(void 0, void 0, void 0, function () {
-                var worker, _a, requestPath, init, response, listing, ids, _b, _c, path_6, file, e_10_1, _d, _e, path_7, file, e_11_1;
-                var e_10, _f, e_11, _g;
+                var worker, _a, requestPath, init, response, listing, ids, _b, _c, path_6, file, e_13_1, _d, _e, path_7, file, e_14_1;
+                var e_13, _f, e_14, _g;
                 var _h, _j, _k;
                 return __generator(this, function (_l) {
                     switch (_l.label) {
@@ -2944,102 +3191,121 @@ describe('service worker host', function () {
                             return [4 /*yield*/, seedDrive(worker.runtime, testCase)];
                         case 1:
                             _l.sent();
-                            return [4 /*yield*/, seedIndex(worker.runtime, testCase)
-                                // `unwritable` is not passed on here: the case that states it is the
-                                // upload route's, which the filter above keeps out, and the deploy route's
-                                // own `500` is covered by `deploy-refused-by-store` in the drive loop.
-                            ];
+                            return [4 /*yield*/, seedIndex(worker.runtime, testCase)];
                         case 2:
                             _l.sent();
-                            _a = httpFor(testCase), requestPath = _a.path, init = _a.init;
-                            return [4 /*yield*/, worker.dispatch(requestPath, init)];
+                            worker.refuseWrites(Boolean(testCase.unwritable));
+                            return [4 /*yield*/, deployRequest(testCase)];
                         case 3:
+                            _a = _l.sent(), requestPath = _a.requestPath, init = _a.init;
+                            return [4 /*yield*/, worker.dispatch(requestPath, init)];
+                        case 4:
                             response = _l.sent();
                             return [4 /*yield*/, assertExpectations(response, testCase)
                                 // a removal takes the app the id names, and leaves the rest published
                             ];
-                        case 4:
+                        case 5:
                             _l.sent();
-                            if (!(testCase.route === 'DELETE /SASjsApi/drive/deploy')) return [3 /*break*/, 7];
+                            if (!(testCase.route === 'DELETE /SASjsApi/drive/deploy')) return [3 /*break*/, 8];
                             return [4 /*yield*/, worker.dispatch('/app/apps.json')];
-                        case 5:
+                        case 6:
                             listing = _l.sent();
                             return [4 /*yield*/, listing.json()];
-                        case 6:
+                        case 7:
                             ids = (_l.sent()).apps.map(function (app) { return app.id; });
                             expect(ids).toContain(BYSTANDER.id);
                             if (response.status === 200)
                                 expect(ids).not.toContain((_h = testCase.request.body) === null || _h === void 0 ? void 0 : _h.id);
-                            _l.label = 7;
-                        case 7:
-                            _l.trys.push([7, 12, 13, 14]);
-                            _b = __values(((_j = testCase.expectDrive) === null || _j === void 0 ? void 0 : _j.present) || []), _c = _b.next();
                             _l.label = 8;
                         case 8:
-                            if (!!_c.done) return [3 /*break*/, 11];
+                            _l.trys.push([8, 13, 14, 15]);
+                            _b = __values(((_j = testCase.expectDrive) === null || _j === void 0 ? void 0 : _j.present) || []), _c = _b.next();
+                            _l.label = 9;
+                        case 9:
+                            if (!!_c.done) return [3 /*break*/, 12];
                             path_6 = _c.value;
                             return [4 /*yield*/, worker.dispatch('/SASjsApi/drive/file?_filePath=' + encodeURIComponent(path_6))];
-                        case 9:
+                        case 10:
                             file = _l.sent();
                             expect({ path: path_6, status: file.status }).toEqual({ path: path_6, status: 200 });
-                            _l.label = 10;
-                        case 10:
+                            _l.label = 11;
+                        case 11:
                             _c = _b.next();
-                            return [3 /*break*/, 8];
-                        case 11: return [3 /*break*/, 14];
-                        case 12:
-                            e_10_1 = _l.sent();
-                            e_10 = { error: e_10_1 };
-                            return [3 /*break*/, 14];
+                            return [3 /*break*/, 9];
+                        case 12: return [3 /*break*/, 15];
                         case 13:
+                            e_13_1 = _l.sent();
+                            e_13 = { error: e_13_1 };
+                            return [3 /*break*/, 15];
+                        case 14:
                             try {
                                 if (_c && !_c.done && (_f = _b.return)) _f.call(_b);
                             }
-                            finally { if (e_10) throw e_10.error; }
+                            finally { if (e_13) throw e_13.error; }
                             return [7 /*endfinally*/];
-                        case 14:
-                            _l.trys.push([14, 19, 20, 21]);
-                            _d = __values(((_k = testCase.expectDrive) === null || _k === void 0 ? void 0 : _k.missing) || []), _e = _d.next();
-                            _l.label = 15;
                         case 15:
-                            if (!!_e.done) return [3 /*break*/, 18];
+                            _l.trys.push([15, 20, 21, 22]);
+                            _d = __values(((_k = testCase.expectDrive) === null || _k === void 0 ? void 0 : _k.missing) || []), _e = _d.next();
+                            _l.label = 16;
+                        case 16:
+                            if (!!_e.done) return [3 /*break*/, 19];
                             path_7 = _e.value;
                             return [4 /*yield*/, worker.dispatch('/SASjsApi/drive/file?_filePath=' + encodeURIComponent(path_7))];
-                        case 16:
+                        case 17:
                             file = _l.sent();
                             expect({ path: path_7, status: file.status }).toEqual({ path: path_7, status: 404 });
-                            _l.label = 17;
-                        case 17:
+                            _l.label = 18;
+                        case 18:
                             _e = _d.next();
-                            return [3 /*break*/, 15];
-                        case 18: return [3 /*break*/, 21];
-                        case 19:
-                            e_11_1 = _l.sent();
-                            e_11 = { error: e_11_1 };
-                            return [3 /*break*/, 21];
+                            return [3 /*break*/, 16];
+                        case 19: return [3 /*break*/, 22];
                         case 20:
+                            e_14_1 = _l.sent();
+                            e_14 = { error: e_14_1 };
+                            return [3 /*break*/, 22];
+                        case 21:
                             try {
                                 if (_e && !_e.done && (_g = _d.return)) _g.call(_d);
                             }
-                            finally { if (e_11) throw e_11.error; }
+                            finally { if (e_14) throw e_14.error; }
                             return [7 /*endfinally*/];
-                        case 21: return [2 /*return*/];
+                        case 22: return [2 /*return*/];
                     }
                 });
             }); });
         };
         try {
-            for (var _c = __values(api_1.DEPLOY_CORPUS.filter(function (entry) { return entry.route !== 'POST /SASjsApi/drive/deploy/upload'; })), _d = _c.next(); !_d.done; _d = _c.next()) {
+            /**
+             * The deploy routes: the JSON form and the removal, plus the upload route
+             * through an archive this harness builds from the tree the case states.
+             *
+             * The corpus describes an upload by what the archive has to expand to, so a
+             * host that takes bytes can run the same case as one that is handed an
+             * expansion - `deployRequest` makes the archive, and what it asserts is this
+             * worker's own unzipping and tree-building rather than the corpus's
+             * assumption. The one case that cannot travel this way is the expansion that is
+             * not a tree, which the corpus marks `transport: 'expansion'`.
+             *
+             * The removal cases need an app to remove, so the index is seeded with the one
+             * the case names and a bystander that must survive it. The state a case leaves
+             * is checked too - `expectDrive` - because both deploy answers are `200` and
+             * replacing a folder only differs from keeping it in what the drive holds
+             * afterwards.
+             */
+            for (var _c = __values(api_1.DEPLOY_CORPUS.filter(
+            // a case a host that takes an archive cannot produce, which the corpus marks
+            // on the case itself rather than leaving each host to name it
+            function (entry) { return entry.transport !== 'expansion'; })), _d = _c.next(); !_d.done; _d = _c.next()) {
                 var testCase = _d.value;
                 _loop_2(testCase);
             }
         }
-        catch (e_6_1) { e_6 = { error: e_6_1 }; }
+        catch (e_7_1) { e_7 = { error: e_7_1 }; }
         finally {
             try {
                 if (_d && !_d.done && (_b = _c.return)) _b.call(_c);
             }
-            finally { if (e_6) throw e_6.error; }
+            finally { if (e_7) throw e_7.error; }
         }
     });
     /**
@@ -3051,7 +3317,7 @@ describe('service worker host', function () {
      * are the package's.
      */
     describe('identity and record conformance', function () {
-        var e_12, _a;
+        var e_15, _a;
         /**
          * Boots the worker from a fixture, the way the page does: the case's own
          * identity, and `subject: null` for no implicit caller, so a case that
@@ -3084,7 +3350,7 @@ describe('service worker host', function () {
         };
         /** The request a case describes, as HTTP: path parameters filled, token sent. */
         var httpForCase = function (testCase) {
-            var e_13, _a;
+            var e_16, _a;
             var _b = __read(testCase.route.split(' '), 2), method = _b[0], routePath = _b[1];
             var filled = routePath.replace(/\{(\w+)\}/g, function (_match, name) {
                 return encodeURIComponent(String((testCase.request.params || {})[name]));
@@ -3097,12 +3363,12 @@ describe('service worker host', function () {
                         query.set(key, String(value));
                 }
             }
-            catch (e_13_1) { e_13 = { error: e_13_1 }; }
+            catch (e_16_1) { e_16 = { error: e_16_1 }; }
             finally {
                 try {
                     if (_d && !_d.done && (_a = _c.return)) _a.call(_c);
                 }
-                finally { if (e_13) throw e_13.error; }
+                finally { if (e_16) throw e_16.error; }
             }
             var suffix = query.toString() ? "?".concat(query) : '';
             var headers = {};
@@ -3224,12 +3490,12 @@ describe('service worker host', function () {
                 _loop_3(testCase);
             }
         }
-        catch (e_12_1) { e_12 = { error: e_12_1 }; }
+        catch (e_15_1) { e_15 = { error: e_15_1 }; }
         finally {
             try {
                 if (_c && !_c.done && (_a = _b.return)) _a.call(_b);
             }
-            finally { if (e_12) throw e_12.error; }
+            finally { if (e_15) throw e_15.error; }
         }
         it('answers as the fixture administrator when no subject was chosen', function () { return __awaiter(void 0, void 0, void 0, function () {
             var worker, response, rules;