@shivaedev/test-story 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.4.0 - 2026-10-17
+
+### Added
+
+- `domNavigate(url?: string | URL): Promise<Response>` follows document redirects, keeps cookies and loads the final HTML for DOM stories, including social sign-in through an outbound OAuth fake.
+
+### Fixed
+
+- Keep Node fetch for in-process hosts and route the DOM document's asynchronous HTTP requests through the same outbound fakes. Unrouted external hosts fail DOM stories with the hostname, even when application code catches the request error.
+- Pass the `domFetch` result explicitly to browser clients (for Better Auth, `fetchOptions.customFetchImpl`); global fetch now belongs to the host. Happy-dom remains an optional peer for the DOM environment.
+
 ## 0.3.0 - 2026-10-17
 
 ### Added

package/README.md

@@ -107,7 +107,7 @@ This is the bakery kit this package tests itself with. `emptyBakery`, `stillWait
 | Hook | Says |
 | --- | --- |
 | `name` | What the engine is called in failures, "the bakery", and the kit's genre, "Bakery Story". |
-| `outbound` | Optional. A map of exact hostnames to fake server origins for the host's Node built-in `fetch`. |
+| `outbound` | Optional. A map of exact hostnames to fake server origins for Node fetch and the DOM environment's document requests. |
 | `around(effect)` | Optional. Wraps creation, staged seeding and the body; worker Layer acquisition remains outside it. It may require the worker services and per-test Scope. |
 | `clock` | Optional. `"test"` by default, or `"live"` for HTTP and DOM stories. A story’s `options.clock` takes precedence. |
 | `create()` | A fresh engine. Every story starts from a new one. |
@@ -142,9 +142,9 @@ const app = storyKit({
 });
 ```
 
-`appDefinition` holds the application's kit hooks, and `fakeUrl` is the listening fake server's HTTP or HTTPS origin, such as `http://127.0.0.1:4321`. The map matches exact URL hostnames, across ports. It replaces the destination origin while keeping the request's path, query, method, headers and body. For example, a POST to `https://github.com/login/oauth/access_token` reaches the fake's `/login/oauth/access_token`. Other hostnames pass through the previous dispatcher unchanged.
+`appDefinition` holds the application's kit hooks, and `fakeUrl` is the listening fake server's HTTP or HTTPS origin, such as `http://127.0.0.1:4321`. The map matches exact URL hostnames, across ports. It replaces the destination origin while keeping the request's path, query, method, headers and body. For example, a POST to `https://github.com/login/oauth/access_token` reaches the fake's `/login/oauth/access_token`. In Node stories, other hostnames pass through the previous dispatcher unchanged. In the DOM environment, only loopback hosts (`localhost`, IPv4 loopback addresses and `[::1]`) may pass through without a route; every other hostname must have an `outbound` fake. A refused request fails the story and names its hostname, even when application code catches the fetch error.
 
-Routing uses the global dispatcher that Node's built-in `fetch` already uses. It is installed before `around`, creation, traits and the body, stays active during scoped cleanup, and restores the previous dispatcher after each story, including a failing story. Stories within one worker must run one at a time because that dispatcher is shared; parallelism belongs between workers or inside one story. Routing affects host-side Node fetches.
+Routing uses the global dispatcher that Node's built-in `fetch` already uses. It is installed before `around`, creation, traits and the body, stays active during scoped cleanup, and restores the previous dispatcher after each story, including a failing story. Stories within one worker must run one at a time because that dispatcher is shared; parallelism belongs between workers or inside one story. The DOM environment uses the same routing for host-side Node fetch and document requests, including redirect destinations. It refuses external hosts even when the kit omits `outbound`.
 
 ### 2. Once per feature: traits and verbs
 
@@ -303,13 +303,14 @@ export default defineConfig({
 });
 ```
 
-The environment runs happy-dom, then restores Node's global `Request`, `Response`, `Headers`, `AbortController` and `AbortSignal` for the host and client request construction. Better Auth can emit `Set-Cookie`, and the host can read incoming cookie headers. Fetch still runs through happy-dom's internal window and cookie jar. The environment translates Node `Headers` and `Request` inputs for that fetch, including requests made by Better Auth's client. Client responses remain happy-dom responses: inspect their status, headers and body methods rather than comparing them with the global Node constructors. The starter's [Vitest config](https://github.com/ShivaeDev/platform/blob/main/examples/starter/vitest.config.ts) selects this environment only for its DOM project while retaining the shared test projects. Use Vitest's standard forks or threads pool.
+The environment keeps Node's global `fetch`, `Request`, `Response`, `Headers`, `AbortController` and `AbortSignal` for the in-process host. The separate `window` keeps happy-dom's constructors and cookie jar. Its asynchronous HTTP requests use Node fetch through the same `outbound` dispatcher, including XMLHttpRequest. Synchronous document HTTP requests are refused. The starter's [Vitest config](https://github.com/ShivaeDev/platform/blob/main/examples/starter/vitest.config.ts) selects this environment only for its DOM project while retaining the shared test projects. Use Vitest's standard forks or threads pool.
 
-`domFetch(baseUrl)` from `@shivaedev/test-story/domFetch.ts` sets the current window's location to the real HTTP host and returns its bound fetch, resolving relative request strings against that URL. The window keeps and sends cookies, including HttpOnly session cookies. Keep the default `same-origin` credentials policy for this same-origin setup. Set the page origin before creating an auth client or rendering a screen; application code can use the global fetch of that same window.
+`domFetch(baseUrl)` from `@shivaedev/test-story/domFetch.ts` sets the document's location to the real HTTP host and returns a document fetch that resolves relative request strings against that URL. It translates Node `Request` and `Headers` inputs for happy-dom. Responses have happy-dom's status, headers and body methods; they are not instances of Node's global `Response`. The document keeps and sends cookies, including HttpOnly session cookies. Keep the default `same-origin` credentials policy for same-origin requests, and pass this fetch explicitly to browser clients, such as Better Auth's `fetchOptions.customFetchImpl`. The host continues to use global Node fetch without browser cookies.
 
 Call it in the kit's `create` hook after starting the host:
 
 ```ts
+import { createAuthClient } from "better-auth/react";
 import { domFetch } from "@shivaedev/test-story/domFetch.ts";
 
 const cookieApp = storyKit({
@@ -317,12 +318,14 @@ const cookieApp = storyKit({
   clock: "live",
   *create() {
     const { baseUrl } = yield* startHost();
-    return { fetch: domFetch(baseUrl) };
+    const fetch = domFetch(baseUrl);
+    const client = createAuthClient({ baseURL: baseUrl, fetchOptions: { customFetchImpl: fetch } });
+    return { client, fetch };
   },
   layer: postgres,
   name: "cookie auth",
   stages: ["account"],
-  verbs: ({ fetch }, story) => authVerbs(fetch, story.tell),
+  verbs: ({ client, fetch }, story) => authVerbs(client, fetch, story.tell),
 });
 ```
 
@@ -343,6 +346,39 @@ cookieApp.it("sign-up and sign-in keep their cookie sessions against the Postgre
 
 This story proves Better Auth cookie sessions across real loopback HTTP requests from happy-dom with an in-process PostgreSQL host. It also reads sessions through Better Auth's client and checks the fetch response's status, headers and JSON body.
 
+#### Social sign-in through an outbound provider
+
+Happy-dom's detached window records a location change without loading the next document. `domNavigate(url = window.location.href)` from `@shivaedev/test-story/domNavigate.ts` performs that load: it follows HTTP redirects through the document transport, keeps cookies for each destination, sets the final location, writes the returned HTML and returns the happy-dom response. Call it after the sign-in client has set the provider location, and before checking the returned page. An unrouted external redirect fails with its hostname.
+
+The starter's [social application kit](https://github.com/ShivaeDev/platform/blob/main/examples/starter/src/test-support/socialApp.ts) runs a fixture Better Auth host on real PostgreSQL, with a rendered sign-in button and a fake GitHub provider. Its `outbound` map routes both `github.com` and `api.github.com` to the fake's loopback origin. The fake's authorize endpoint returns the application's callback URL with the received state and a test code. The real callback exchanges that code and fetches the user against the fake, creates the account and session in PostgreSQL, and redirects to the signed-in page.
+
+```ts
+import { domNavigate } from "@shivaedev/test-story/domNavigate.ts";
+
+const socialApp = storyKit({
+  ...socialDefinition,
+  outbound: { "github.com": fakeUrl, "api.github.com": fakeUrl },
+  verbs: (engine, story) => ({
+    signInWithGitHub: () => Effect.promise(async () => {
+      story.tell("Alice clicks Sign in with GitHub");
+      await engine.screen.click();
+      await domNavigate();
+    }),
+    signedInPageIs: (email: string) => Effect.promise(async () => {
+      expect(document.querySelector("h1")?.textContent).toBe(`Signed in as ${email}`);
+      expect(await (await engine.fetch("/api/auth/get-session")).json()).toMatchObject({ user: { email } });
+    }),
+  }),
+});
+
+socialApp.it("a social sign-in returns with a cookie session", [], function* ({ signInWithGitHub, signedInPageIs }) {
+  yield* signInWithGitHub();
+  yield* signedInPageIs("alice@social.test");
+});
+```
+
+`socialDefinition` starts the host and renders the screen with a Better Auth client whose `customFetchImpl` is `domFetch(baseUrl)`. The [story](https://github.com/ShivaeDev/platform/blob/main/examples/starter/src/server/socialSessions.dom.spec.ts) also checks the authorize, token and user requests at the fake, persisted PostgreSQL rows, and an HttpOnly session cookie read through a later document request. It does not copy cookies into request headers.
+
 `domFetch` uses the current window and its cookie jar; it does not isolate multiple users. Run stories using that window serially, and let the application's cleanup end its sessions, restore the page location and close its host. Cookies follow hostnames, not listener ports, so a different loopback port alone does not isolate accounts.
 
 ### Install and limits

package/dist/server/domEnvironment.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domEnvironment.config.d.ts","sourceRoot":"","sources":["../../src/server/domEnvironment.config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEvE,QAAA,MAAM,cAAc,EAAE,WAmCrB,CAAC;eAEa,cAAc"}
+{"version":3,"file":"domEnvironment.config.d.ts","sourceRoot":"","sources":["../../src/server/domEnvironment.config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,WAAW,EAAkB,MAAM,gBAAgB,CAAC;AAElE,QAAA,MAAM,cAAc,EAAE,WA4CrB,CAAC;eAEa,cAAc"}

package/dist/server/domEnvironment.config.js

@@ -1,37 +1,47 @@
-import { builtinEnvironments } from "vitest/runtime";
+import { createRequire } from "node:module";
+import { GlobalWindow } from "happy-dom";
+import { populateGlobal } from "vitest/runtime";
 const domEnvironment = {
     name: "test-story-dom",
-    async setup(global, options) {
-        const { AbortController, AbortSignal, Headers, Request, Response } = global;
-        const environment = await builtinEnvironments["happy-dom"].setup(global, options);
-        // Vitest's setters also replace happy-dom's internal classes, which its fetch needs.
-        for (const [name, value] of Object.entries({ AbortController, AbortSignal, Headers, Request, Response })) {
+    async setup(global, { happyDOM = {} }) {
+        // Vitest loads environments outside the project's source resolution conditions.
+        const load = createRequire(import.meta.url);
+        const { documentTransport } = load("#internal/documentTransport.ts");
+        const { installOutbound } = load("#internal/routeOutbound.ts");
+        const native = Object.fromEntries(["fetch", "AbortController", "AbortSignal", "Headers", "Request", "Response"].map((name) => [name, Reflect.get(global, name)]));
+        const restoreOutbound = await installOutbound({}, true);
+        const win = new GlobalWindow({
+            ...happyDOM,
+            console: global.console,
+            settings: { ...happyDOM.settings, disableErrorCapturing: true },
+            url: happyDOM.url ?? "http://localhost:3000",
+        });
+        win.happyDOM.settings.fetch.interceptor = documentTransport(global.fetch);
+        const { keys, originals } = populateGlobal(global, win, { bindFunctions: true });
+        for (const [name, value] of Object.entries(native)) {
             Object.defineProperty(global, name, { configurable: true, value, writable: true });
         }
-        const transport = global.fetch.bind(global);
-        Object.defineProperty(global, "fetch", {
-            configurable: true,
-            value: (input, init) => {
-                if (input instanceof Request) {
-                    const request = new Request(input, init);
-                    return transport(request.url, {
-                        body: request.body,
-                        cache: request.cache,
-                        credentials: request.credentials,
-                        headers: [...request.headers],
-                        method: request.method,
-                        mode: request.mode,
-                        redirect: request.redirect,
-                        referrer: request.referrer,
-                        referrerPolicy: request.referrerPolicy,
-                        signal: request.signal,
-                    });
+        Object.defineProperty(global, "window", { configurable: true, value: win, writable: true });
+        Object.defineProperty(win.document, "defaultView", { configurable: true, get: () => win });
+        Object.defineProperty(global, Symbol.for("test-story.dom"), { configurable: true, value: true });
+        return {
+            async teardown(target) {
+                try {
+                    await win.happyDOM.abort();
+                    win.close();
+                }
+                finally {
+                    for (const key of keys) {
+                        Reflect.deleteProperty(target, key);
+                    }
+                    for (const [key, descriptor] of originals) {
+                        Object.defineProperty(target, key, descriptor);
+                    }
+                    Reflect.deleteProperty(target, Symbol.for("test-story.dom"));
+                    restoreOutbound();
                 }
-                return transport(input, init?.headers instanceof Headers ? { ...init, headers: [...init.headers] } : init);
             },
-            writable: true,
-        });
-        return environment;
+        };
     },
     viteEnvironment: "client",
 };

package/dist/server/domEnvironment.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"domEnvironment.config.js","sourceRoot":"","sources":["../../src/server/domEnvironment.config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAoB,MAAM,gBAAgB,CAAC;AAEvE,MAAM,cAAc,GAAgB;IACnC,IAAI,EAAE,gBAAgB;IACtB,KAAK,CAAC,KAAK,CAAC,MAAyB,EAAE,OAAO;QAC7C,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAC5E,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClF,qFAAqF;QACrF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC1G,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,CAAC,KAAwB,EAAE,IAAkB,EAAE,EAAE;gBACvD,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;oBAC9B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBACzC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;wBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;wBAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;wBACtC,MAAM,EAAE,OAAO,CAAC,MAAM;qBACtB,CAAC,CAAC;gBACJ,CAAC;gBACD,OAAO,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,YAAY,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5G,CAAC;YACD,QAAQ,EAAE,IAAI;SACd,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,eAAe,EAAE,QAAQ;CACzB,CAAC;AAEF,eAAe,cAAc,CAAC"}
+{"version":3,"file":"domEnvironment.config.js","sourceRoot":"","sources":["../../src/server/domEnvironment.config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAoB,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,cAAc,GAAgB;IACnC,IAAI,EAAE,gBAAgB;IACtB,KAAK,CAAC,KAAK,CAAC,MAAyB,EAAE,EAAE,QAAQ,GAAG,EAAE,EAAE;QACvD,gFAAgF;QAChF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,EAAE,iBAAiB,EAAE,GAAoD,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACtH,MAAM,EAAE,eAAe,EAAE,GAAgD,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAChC,CAAC,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAC9H,CAAC;QACF,MAAM,eAAe,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;YAC5B,GAAG,QAAQ;YACX,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,EAAE,IAAI,EAAE;YAC/D,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,uBAAuB;SAC5C,CAAC,CAAC;QACH,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,OAAO;YACN,KAAK,CAAC,QAAQ,CAAC,MAAM;gBACpB,IAAI,CAAC;oBACJ,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;oBAC3B,GAAG,CAAC,KAAK,EAAE,CAAC;gBACb,CAAC;wBAAS,CAAC;oBACV,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;wBACxB,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;oBACrC,CAAC;oBACD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,SAAS,EAAE,CAAC;wBAC3C,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;oBAChD,CAAC;oBACD,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;oBAC7D,eAAe,EAAE,CAAC;gBACnB,CAAC;YACF,CAAC;SACD,CAAC;IACH,CAAC;IACD,eAAe,EAAE,QAAQ;CACzB,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/server/domFetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domFetch.d.ts","sourceRoot":"","sources":["../../src/server/domFetch.ts"],"names":[],"mappings":"AAAA,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,UAAU,CAAC,KAAK,CAKjE"}
+{"version":3,"file":"domFetch.d.ts","sourceRoot":"","sources":["../../src/server/domFetch.ts"],"names":[],"mappings":"AAAA,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,UAAU,CAAC,KAAK,CAyBjE"}

package/dist/server/domFetch.js

@@ -2,6 +2,23 @@ export function domFetch(baseUrl) {
     const base = new URL(baseUrl);
     window.location.href = base.href;
     const transport = window.fetch.bind(window);
-    return (input, init) => transport(typeof input === "string" ? new URL(input, base).href : input, init);
+    return (input, init) => {
+        if (input instanceof Request) {
+            const request = new Request(input, init);
+            return transport(request.url, {
+                body: request.body,
+                cache: request.cache,
+                credentials: request.credentials,
+                headers: [...request.headers],
+                method: request.method,
+                mode: request.mode,
+                redirect: request.redirect,
+                referrer: request.referrer,
+                referrerPolicy: request.referrerPolicy,
+                signal: request.signal,
+            });
+        }
+        return transport(typeof input === "string" ? new URL(input, base).href : input, init?.headers instanceof Headers ? { ...init, headers: [...init.headers] } : init);
+    };
 }
 //# sourceMappingURL=domFetch.js.map

package/dist/server/domFetch.js.map

@@ -1 +1 @@
-{"version":3,"file":"domFetch.js","sourceRoot":"","sources":["../../src/server/domFetch.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,QAAQ,CAAC,OAAe;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACxG,CAAC"}
+{"version":3,"file":"domFetch.js","sourceRoot":"","sources":["../../src/server/domFetch.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,QAAQ,CAAC,OAAe;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,MAAM,EAAE,OAAO,CAAC,MAAM;aACtB,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CACf,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAC7D,IAAI,EAAE,OAAO,YAAY,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CACjF,CAAC;IACH,CAAC,CAAC;AACH,CAAC"}

package/dist/server/domNavigate.d.ts

@@ -0,0 +1,2 @@
+export declare function domNavigate(url?: string | URL): Promise<Response>;
+//# sourceMappingURL=domNavigate.d.ts.map

package/dist/server/domNavigate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domNavigate.d.ts","sourceRoot":"","sources":["../../src/server/domNavigate.ts"],"names":[],"mappings":"AAAA,wBAAsB,WAAW,CAAC,GAAG,GAAE,MAAM,GAAG,GAA0B,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQ7F"}

package/dist/server/domNavigate.js

@@ -0,0 +1,10 @@
+export async function domNavigate(url = window.location.href) {
+    const response = await window.fetch(new URL(url, window.location.href), { credentials: "include" });
+    const html = await response.clone().text();
+    window.location.href = response.url;
+    document.open();
+    document.write(html);
+    document.close();
+    return response;
+}
+//# sourceMappingURL=domNavigate.js.map

package/dist/server/domNavigate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domNavigate.js","sourceRoot":"","sources":["../../src/server/domNavigate.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAG,GAAiB,MAAM,CAAC,QAAQ,CAAC,IAAI;IACzE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,OAAO,QAAQ,CAAC;AACjB,CAAC"}

package/dist/server/internal/documentRedirect.d.ts

@@ -0,0 +1,7 @@
+import type { Request } from "happy-dom";
+import type BrowserWindow from "happy-dom/lib/window/BrowserWindow.js";
+export declare function documentRedirect(request: Request, window: BrowserWindow, target: URL, status: number, body: Buffer<ArrayBuffer> | null): {
+    body: Buffer<ArrayBuffer> | null;
+    request: Request;
+};
+//# sourceMappingURL=documentRedirect.d.ts.map

package/dist/server/internal/documentRedirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentRedirect.d.ts","sourceRoot":"","sources":["../../../src/server/internal/documentRedirect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,aAAa,MAAM,uCAAuC,CAAC;AAEvE,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI;IAcrI,IAAI;IACJ,OAAO;EASR"}

package/dist/server/internal/documentRedirect.js

@@ -0,0 +1,26 @@
+export function documentRedirect(request, window, target, status, body) {
+    const headers = new window.Headers(request.headers);
+    if (target.origin !== new URL(request.url).origin) {
+        for (const name of ["authorization", "cookie", "proxy-authorization"]) {
+            headers.delete(name);
+        }
+    }
+    const get = (status === 303 && request.method !== "HEAD") || ([301, 302].includes(status) && request.method === "POST");
+    if (get) {
+        headers.delete("content-type");
+        headers.delete("content-length");
+    }
+    const nextBody = get ? null : body;
+    return {
+        body: nextBody,
+        request: new window.Request(target.href, {
+            body: nextBody,
+            credentials: request.credentials,
+            headers,
+            method: get ? "GET" : request.method,
+            redirect: request.redirect,
+            signal: request.signal,
+        }),
+    };
+}
+//# sourceMappingURL=documentRedirect.js.map

package/dist/server/internal/documentRedirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentRedirect.js","sourceRoot":"","sources":["../../../src/server/internal/documentRedirect.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,gBAAgB,CAAC,OAAgB,EAAE,MAAqB,EAAE,MAAW,EAAE,MAAc,EAAE,IAAgC;IACtI,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC;YACvE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACxH,IAAI,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;YACxC,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO;YACP,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;SACtB,CAAC;KACF,CAAC;AACH,CAAC"}

package/dist/server/internal/documentRequest.d.ts

@@ -0,0 +1,6 @@
+import type { Request } from "happy-dom";
+export declare function documentRequest(fetch: typeof globalThis.fetch, request: Request, body: Buffer<ArrayBuffer> | null, headers: Readonly<Record<string, string>>): Promise<{
+    release: () => void;
+    response: Response;
+}>;
+//# sourceMappingURL=documentRequest.d.ts.map

package/dist/server/internal/documentRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentRequest.d.ts","sourceRoot":"","sources":["../../../src/server/internal/documentRequest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,wBAAsB,eAAe,CACpC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,EAC9B,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,EAChC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;;;GAmBzC"}

package/dist/server/internal/documentRequest.js

@@ -0,0 +1,21 @@
+export async function documentRequest(fetch, request, body, headers) {
+    const controller = new AbortController();
+    function abort() {
+        controller.abort(request.signal.reason);
+    }
+    function release() {
+        request.signal.removeEventListener("abort", abort);
+    }
+    if (request.signal.aborted) {
+        abort();
+    }
+    request.signal.addEventListener("abort", abort, { once: true });
+    try {
+        return { release, response: await fetch(request.url, { body, headers, method: request.method, redirect: "manual", signal: controller.signal }) };
+    }
+    catch (error) {
+        release();
+        throw error;
+    }
+}
+//# sourceMappingURL=documentRequest.js.map

package/dist/server/internal/documentRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentRequest.js","sourceRoot":"","sources":["../../../src/server/internal/documentRequest.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,KAA8B,EAC9B,OAAgB,EAChB,IAAgC,EAChC,OAAyC;IAEzC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,SAAS,KAAK;QACb,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,SAAS,OAAO;QACf,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5B,KAAK,EAAE,CAAC;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC;QACJ,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAClJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;QACV,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC"}

package/dist/server/internal/documentResponse.d.ts

@@ -0,0 +1,4 @@
+import type { Headers, IBrowserFrame, Request } from "happy-dom";
+export declare function documentResponseHeaders(response: Response, request: Request, frame: IBrowserFrame): Headers;
+export declare function documentResponse(response: Response, request: Request, frame: IBrowserFrame, release: () => void, redirected: boolean, headers: Headers): import("happy-dom").Response;
+//# sourceMappingURL=documentResponse.d.ts.map

package/dist/server/internal/documentResponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentResponse.d.ts","sourceRoot":"","sources":["../../../src/server/internal/documentResponse.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGjE,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,WAQjG;AAED,wBAAgB,gBAAgB,CAC/B,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,MAAM,IAAI,EACnB,UAAU,EAAE,OAAO,EACnB,OAAO,EAAE,OAAO,gCAahB"}

package/dist/server/internal/documentResponse.js

@@ -0,0 +1,42 @@
+import { Readable } from "node:stream";
+import FetchResponseHeaderUtility from "happy-dom/lib/fetch/utilities/FetchResponseHeaderUtility.js";
+export function documentResponseHeaders(response, request, frame) {
+    return FetchResponseHeaderUtility.parseResponseHeaders({
+        browserFrame: frame,
+        rawHeaders: [...response.headers]
+            .flatMap(([name, value]) => (name === "set-cookie" ? [] : [name, value]))
+            .concat(response.headers.getSetCookie().flatMap((cookie) => ["set-cookie", cookie])),
+        "requestURL": new URL(request.url),
+    });
+}
+export function documentResponse(response, request, frame, release, redirected, headers) {
+    if (response.body === null) {
+        release();
+    }
+    const result = new frame.window.Response(response.body === null ? null : Readable.toWeb(Readable.from(chunks(response.body, release))), {
+        headers,
+        status: response.status,
+        statusText: response.statusText,
+    });
+    Object.defineProperty(result, "url", { value: request.url });
+    Object.defineProperty(result, "redirected", { value: redirected });
+    return result;
+}
+async function* chunks(stream, release) {
+    const reader = stream.getReader();
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done) {
+                return;
+            }
+            yield value;
+        }
+    }
+    finally {
+        release();
+        await reader.cancel();
+        reader.releaseLock();
+    }
+}
+//# sourceMappingURL=documentResponse.js.map

package/dist/server/internal/documentResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentResponse.js","sourceRoot":"","sources":["../../../src/server/internal/documentResponse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,0BAA0B,MAAM,6DAA6D,CAAC;AAErG,MAAM,UAAU,uBAAuB,CAAC,QAAkB,EAAE,OAAgB,EAAE,KAAoB;IACjG,OAAO,0BAA0B,CAAC,oBAAoB,CAAC;QACtD,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;aAC/B,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;aACxE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;QACrF,YAAY,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;KAClC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC/B,QAAkB,EAClB,OAAgB,EAChB,KAAoB,EACpB,OAAmB,EACnB,UAAmB,EACnB,OAAgB;IAEhB,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;QACvI,OAAO;QACP,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC;AACf,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,MAAkC,EAAE,OAAmB;IAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,IAAI,CAAC;QACJ,OAAO,IAAI,EAAE,CAAC;YACb,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI,EAAE,CAAC;gBACV,OAAO;YACR,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;YAAS,CAAC;QACV,OAAO,EAAE,CAAC;QACV,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,CAAC,WAAW,EAAE,CAAC;IACtB,CAAC;AACF,CAAC"}

package/dist/server/internal/documentTransport.d.ts

@@ -0,0 +1,3 @@
+import type { IFetchInterceptor } from "happy-dom";
+export declare function documentTransport(fetch: typeof globalThis.fetch): IFetchInterceptor;
+//# sourceMappingURL=documentTransport.d.ts.map

package/dist/server/internal/documentTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentTransport.d.ts","sourceRoot":"","sources":["../../../src/server/internal/documentTransport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAOnD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,GAAG,iBAAiB,CAiCnF"}

package/dist/server/internal/documentTransport.js

@@ -0,0 +1,40 @@
+import FetchRequestHeaderUtility from "happy-dom/lib/fetch/utilities/FetchRequestHeaderUtility.js";
+import WindowBrowserContext from "happy-dom/lib/window/WindowBrowserContext.js";
+import { documentRedirect } from "#internal/documentRedirect.ts";
+import { documentRequest } from "#internal/documentRequest.ts";
+import { documentResponse, documentResponseHeaders } from "#internal/documentResponse.ts";
+export function documentTransport(fetch) {
+    return {
+        async beforeAsyncRequest({ request, window }) {
+            const frame = new WindowBrowserContext(window).getBrowserFrame();
+            if (!frame) {
+                throw new Error("test-story cannot fetch after the document has closed");
+            }
+            let current = request;
+            let body = current.body === null ? null : Buffer.from(await current.arrayBuffer());
+            for (let redirects = 0; redirects <= 20; redirects += 1) {
+                const headers = FetchRequestHeaderUtility.getRequestHeaders({ browserFrame: frame, request: current, window });
+                delete headers.Connection;
+                const { release, response } = await documentRequest(fetch, current, body, headers);
+                const responseHeaders = documentResponseHeaders(response, current, frame);
+                const location = response.headers.get("location");
+                if (![301, 302, 303, 307, 308].includes(response.status) || location === null || current.redirect === "manual") {
+                    return documentResponse(response, current, frame, release, redirects > 0, responseHeaders);
+                }
+                await response.body?.cancel();
+                release();
+                if (current.redirect === "error" || redirects === 20) {
+                    throw new Error(`test-story cannot follow redirect from ${current.url}`);
+                }
+                const next = documentRedirect(current, window, new URL(location, current.url), response.status, body);
+                current = next.request;
+                body = next.body;
+            }
+            throw new Error(`test-story reached the redirect limit for ${request.url}`);
+        },
+        beforeSyncRequest({ request }) {
+            throw new Error(`test-story refuses synchronous document requests to ${new URL(request.url).hostname}; use fetch instead`);
+        },
+    };
+}
+//# sourceMappingURL=documentTransport.js.map

package/dist/server/internal/documentTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentTransport.js","sourceRoot":"","sources":["../../../src/server/internal/documentTransport.ts"],"names":[],"mappings":"AACA,OAAO,yBAAyB,MAAM,4DAA4D,CAAC;AACnG,OAAO,oBAAoB,MAAM,8CAA8C,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAE1F,MAAM,UAAU,iBAAiB,CAAC,KAA8B;IAC/D,OAAO;QACN,KAAK,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;YAC3C,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC;YACjE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,OAAO,GAAG,OAAO,CAAC;YACtB,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACnF,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,IAAI,EAAE,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,OAAO,GAAG,yBAAyB,CAAC,iBAAiB,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC/G,OAAO,OAAO,CAAC,UAAU,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACnF,MAAM,eAAe,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC1E,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAChH,OAAO,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;gBAC5F,CAAC;gBACD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,OAAO,EAAE,CAAC;gBACV,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;oBACtD,MAAM,IAAI,KAAK,CAAC,0CAA0C,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACtG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBACvB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,iBAAiB,CAAC,EAAE,OAAO,EAAE;YAC5B,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,qBAAqB,CAAC,CAAC;QAC5H,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/server/internal/errors.d.ts

@@ -1,3 +1,4 @@
+export declare function unrouted(hostname: string): Error;
 export declare function refusal(name: string, line: string, cause: unknown): Error;
 export declare function broken(name: string, steps: number, reason: string): Error;
 export declare function unfinished(name: string, steps: number, diagnosis: string | undefined): Error;

package/dist/server/internal/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/server/internal/errors.ts"],"names":[],"mappings":"AAGA,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK,CAQzE;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAOzE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,CAO5F;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAO7C"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/server/internal/errors.ts"],"names":[],"mappings":"AAGA,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,CAOhD;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK,CAQzE;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAOzE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,CAO5F;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAO7C"}

package/dist/server/internal/errors.js

@@ -1,5 +1,8 @@
 import { describeValue } from "#internal/render.ts";
 import { explained } from "#internal/wrap.ts";
+export function unrouted(hostname) {
+    return new Error(explained(`test-story refused an outbound request to ${hostname}`, "Add this hostname to the story kit's outbound map and point it at a fake server. Only loopback requests may run without a route."));
+}
 export function refusal(name, line, cause) {
     return new Error(explained(`the trait "${line}" refused to set up the ${name}: ${describeValue(cause)}`, `a trait throws when the ${name} it asks for cannot exist. Give the test traits that fit together, or fix the trait in the ${name} story kit if this ${name} should be possible.`), { cause });
 }

package/dist/server/internal/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/server/internal/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY,EAAE,KAAc;IACjE,OAAO,IAAI,KAAK,CACf,SAAS,CACR,cAAc,IAAI,2BAA2B,IAAI,KAAK,aAAa,CAAC,KAAK,CAAC,EAAE,EAC5E,2BAA2B,IAAI,8FAA8F,IAAI,sBAAsB,IAAI,sBAAsB,CACjL,EACD,EAAE,KAAK,EAAE,CACT,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc;IACjE,OAAO,IAAI,KAAK,CACf,SAAS,CACR,OAAO,IAAI,gBAAgB,KAAK,WAAW,MAAM,EAAE,EACnD,qBAAqB,IAAI,kCAAkC,IAAI,oGAAoG,CACnK,CACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAa,EAAE,SAA6B;IACpF,OAAO,IAAI,KAAK,CACf,SAAS,CACR,OAAO,IAAI,QAAQ,KAAK,mDAAmD,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,EAAE,EAC5H,cAAc,IAAI,sHAAsH,CACxI,CACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACrC,OAAO,IAAI,KAAK,CACf,SAAS,CACR,OAAO,IAAI,4DAA4D,IAAI,EAAE,EAC7E,YAAY,IAAI,+DAA+D,IAAI,eAAe,CAClG,CACD,CAAC;AACH,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/server/internal/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACxC,OAAO,IAAI,KAAK,CACf,SAAS,CACR,6CAA6C,QAAQ,EAAE,EACvD,kIAAkI,CAClI,CACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY,EAAE,KAAc;IACjE,OAAO,IAAI,KAAK,CACf,SAAS,CACR,cAAc,IAAI,2BAA2B,IAAI,KAAK,aAAa,CAAC,KAAK,CAAC,EAAE,EAC5E,2BAA2B,IAAI,8FAA8F,IAAI,sBAAsB,IAAI,sBAAsB,CACjL,EACD,EAAE,KAAK,EAAE,CACT,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc;IACjE,OAAO,IAAI,KAAK,CACf,SAAS,CACR,OAAO,IAAI,gBAAgB,KAAK,WAAW,MAAM,EAAE,EACnD,qBAAqB,IAAI,kCAAkC,IAAI,oGAAoG,CACnK,CACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAa,EAAE,SAA6B;IACpF,OAAO,IAAI,KAAK,CACf,SAAS,CACR,OAAO,IAAI,QAAQ,KAAK,mDAAmD,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,EAAE,EAC5H,cAAc,IAAI,sHAAsH,CACxI,CACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACrC,OAAO,IAAI,KAAK,CACf,SAAS,CACR,OAAO,IAAI,4DAA4D,IAAI,EAAE,EAC7E,YAAY,IAAI,+DAA+D,IAAI,eAAe,CAClG,CACD,CAAC;AACH,CAAC"}

package/dist/server/internal/routeOutbound.d.ts

@@ -1,3 +1,4 @@
 import { Effect } from "effect";
+export declare function installOutbound(routes: Readonly<Record<string, string>>, strict?: boolean): Promise<() => void>;
 export declare function routeOutbound(routes: Readonly<Record<string, string>>): Effect.Effect<void, never, import("effect/Scope").Scope>;
 //# sourceMappingURL=routeOutbound.d.ts.map

package/dist/server/internal/routeOutbound.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routeOutbound.d.ts","sourceRoot":"","sources":["../../../src/server/internal/routeOutbound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAgDhC,wBAAgB,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,4DAKrE"}
+{"version":3,"file":"routeOutbound.d.ts","sourceRoot":"","sources":["../../../src/server/internal/routeOutbound.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAehC,wBAAsB,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,UAAQ,uBAgD7F;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,4DAKrE"}

package/dist/server/internal/routeOutbound.js

@@ -1,9 +1,12 @@
+import { isIP } from "node:net";
 import { Effect } from "effect";
+import { unrouted } from "#internal/errors.ts";
 function isDispatcher(value) {
     return typeof value === "object" && value !== null && "dispatch" in value && typeof value.dispatch === "function";
 }
-async function install(routes) {
+export async function installOutbound(routes, strict = false) {
     const origins = new Map(Object.entries(routes).map(([hostname, target]) => [hostname, new URL(target).origin]));
+    let refused;
     // A data URL initializes Node's bundled Undici without sending an HTTP request.
     await fetch("data:,");
     const slots = ["undici.globalDispatcher.1", "undici.globalDispatcher.2"].flatMap((name) => {
@@ -23,7 +26,15 @@ async function install(routes) {
         for (const { key, previous } of slots) {
             const router = {
                 dispatch(options, handler) {
-                    const target = origins.get(new URL(options.origin).hostname);
+                    const hostname = new URL(options.origin).hostname;
+                    const target = origins.get(hostname);
+                    if (strict
+                        && target === undefined
+                        && !["localhost", "[::1]"].includes(hostname)
+                        && !(isIP(hostname) === 4 && hostname.startsWith("127."))) {
+                        refused = unrouted(hostname);
+                        throw refused;
+                    }
                     return previous.dispatch(target === undefined ? options : { ...options, origin: target }, handler);
                 },
             };
@@ -34,9 +45,14 @@ async function install(routes) {
         restore();
         throw error;
     }
-    return restore;
+    return () => {
+        restore();
+        if (refused !== undefined) {
+            throw refused;
+        }
+    };
 }
 export function routeOutbound(routes) {
-    return Effect.acquireRelease(Effect.promise(() => install(routes)), (restore) => Effect.sync(restore)).pipe(Effect.asVoid);
+    return Effect.acquireRelease(Effect.promise(() => installOutbound(routes, Reflect.get(globalThis, Symbol.for("test-story.dom")) === true)), (restore) => Effect.sync(restore)).pipe(Effect.asVoid);
 }
 //# sourceMappingURL=routeOutbound.js.map

package/dist/server/internal/routeOutbound.js.map

@@ -1 +1 @@
-{"version":3,"file":"routeOutbound.js","sourceRoot":"","sources":["../../../src/server/internal/routeOutbound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAUhC,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC;AACnH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAwC;IAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChH,gFAAgF;IAChF,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACzF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAY,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6GAA6G,CAAC,CAAC;IAChI,CAAC;IACD,SAAS,OAAO;QACf,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,KAAK,EAAE,CAAC;YACvC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC;IACD,IAAI,CAAC;QACJ,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,KAAK,EAAE,CAAC;YACvC,MAAM,MAAM,GAAe;gBAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO;oBACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;oBAC7D,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;gBACpG,CAAC;aACD,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;QACV,MAAM,KAAK,CAAC;IACb,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAwC;IACrE,OAAO,MAAM,CAAC,cAAc,CAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EACrC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CACjC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACvB,CAAC"}
+{"version":3,"file":"routeOutbound.js","sourceRoot":"","sources":["../../../src/server/internal/routeOutbound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAU/C,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC;AACnH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAwC,EAAE,MAAM,GAAG,KAAK;IAC7F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChH,IAAI,OAA0B,CAAC;IAC/B,gFAAgF;IAChF,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACzF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAY,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6GAA6G,CAAC,CAAC;IAChI,CAAC;IACD,SAAS,OAAO;QACf,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,KAAK,EAAE,CAAC;YACvC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7D,CAAC;IACF,CAAC;IACD,IAAI,CAAC;QACJ,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,KAAK,EAAE,CAAC;YACvC,MAAM,MAAM,GAAe;gBAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO;oBACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;oBAClD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBACrC,IACC,MAAM;2BACH,MAAM,KAAK,SAAS;2BACpB,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;2BAC1C,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EACxD,CAAC;wBACF,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;wBAC7B,MAAM,OAAO,CAAC;oBACf,CAAC;oBACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;gBACpG,CAAC;aACD,CAAC;YACF,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;QACV,MAAM,KAAK,CAAC;IACb,CAAC;IACD,OAAO,GAAG,EAAE;QACX,OAAO,EAAE,CAAC;QACV,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC;QACf,CAAC;IACF,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAwC;IACrE,OAAO,MAAM,CAAC,cAAc,CAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAC7G,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CACjC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACvB,CAAC"}

package/dist/server/internal/storyIt.js

@@ -35,7 +35,7 @@ function declaring(definition, genre, declare) {
 }
 export function storyIt(definition) {
     const genre = genreOf(definition.name);
-    const outbound = definition.outbound;
+    const outbound = definition.outbound ?? (Reflect.get(globalThis, Symbol.for("test-story.dom")) ? {} : undefined);
     const { effectApp } = makeEffectIt({
         around: outbound === undefined
             ? definition.around

package/dist/server/internal/storyIt.js.map

@@ -1 +1 @@
-{"version":3,"file":"storyIt.js","sourceRoot":"","sources":["../../../src/server/internal/storyIt.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAc,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAkB,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAc3C,SAAS,QAAQ,CAAC,OAA+C,EAAE,IAAuB;IACzF,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;IAChC,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,OAAO,CAAC,UAA2B,EAAE,KAA4B,EAAE,IAA2B;IACtG,OAAO,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAiB,EAAE,OAAoB;QAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC;AACH,CAAC;AAED,wHAAwH;AACxH,SAAS,SAAS,CAAC,UAA2B,EAAE,KAAY,EAAE,OAAqC;IAClG,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC;YACJ,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;gBAChF,MAAM,KAAK,CAAC;YACb,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,UAA2B;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACrC,MAAM,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;QAClC,MAAM,EACL,QAAQ,KAAK,SAAS;YACrB,CAAC,CAAC,UAAU,CAAC,MAAM;YACnB,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACnB,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC/B,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;YACrD,CAAC,CAAC;QACN,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK;QACtC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;KAC9B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE;QAC7D,KAAK,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;QACpD,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;QAClD,KAAK,EAAE,CAAC,SAAkB,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvF,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;QAClD,MAAM,EAAE,CAAC,SAAkB,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;KACzF,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"storyIt.js","sourceRoot":"","sources":["../../../src/server/internal/storyIt.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAc,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAkB,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAc3C,SAAS,QAAQ,CAAC,OAA+C,EAAE,IAAuB;IACzF,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;IAChC,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,OAAO,CAAC,UAA2B,EAAE,KAA4B,EAAE,IAA2B;IACtG,OAAO,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAiB,EAAE,OAAoB;QAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC;AACH,CAAC;AAED,wHAAwH;AACxH,SAAS,SAAS,CAAC,UAA2B,EAAE,KAAY,EAAE,OAAqC;IAClG,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC;YACJ,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;gBAChF,MAAM,KAAK,CAAC;YACb,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,UAA2B;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjH,MAAM,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;QAClC,MAAM,EACL,QAAQ,KAAK,SAAS;YACrB,CAAC,CAAC,UAAU,CAAC,MAAM;YACnB,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACnB,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC/B,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;YACrD,CAAC,CAAC;QACN,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK;QACtC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;KAC9B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE;QAC7D,KAAK,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;QACpD,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;QAClD,KAAK,EAAE,CAAC,SAAkB,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvF,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;QAClD,MAAM,EAAE,CAAC,SAAkB,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;KACzF,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shivaedev/test-story",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Tests that read like stories over the real engine: a story kit per engine with its own it, traits per feature, and a failure that prints the story, where it stopped and the engine's state",
   "homepage": "https://github.com/ShivaeDev/platform/tree/main/packages/test-story#readme",
   "bugs": {
@@ -51,14 +51,21 @@
     "@types/node": "24.19.1",
     "@typescript/native": "npm:typescript@7.0.2",
     "effect": "4.0.4",
+    "happy-dom": "20.14.6",
     "typescript": "npm:@typescript/typescript6@6.0.2",
     "vitest": "5.0.3"
   },
   "peerDependencies": {
     "@effect/vitest": "4.0.4",
     "effect": "4.0.4",
+    "happy-dom": "20.14.6",
     "vitest": "5.0.3"
   },
+  "peerDependenciesMeta": {
+    "happy-dom": {
+      "optional": true
+    }
+  },
   "engines": {
     "node": ">=24"
   },

package/src/server/domEnvironment.config.ts

@@ -1,38 +1,49 @@
-import { builtinEnvironments, type Environment } from "vitest/runtime";
+import { createRequire } from "node:module";
+import { GlobalWindow } from "happy-dom";
+import { type Environment, populateGlobal } from "vitest/runtime";
 
 const domEnvironment: Environment = {
 	name: "test-story-dom",
-	async setup(global: typeof globalThis, options) {
-		const { AbortController, AbortSignal, Headers, Request, Response } = global;
-		const environment = await builtinEnvironments["happy-dom"].setup(global, options);
-		// Vitest's setters also replace happy-dom's internal classes, which its fetch needs.
-		for (const [name, value] of Object.entries({ AbortController, AbortSignal, Headers, Request, Response })) {
+	async setup(global: typeof globalThis, { happyDOM = {} }) {
+		// Vitest loads environments outside the project's source resolution conditions.
+		const load = createRequire(import.meta.url);
+		const { documentTransport }: typeof import("#internal/documentTransport.ts") = load("#internal/documentTransport.ts");
+		const { installOutbound }: typeof import("#internal/routeOutbound.ts") = load("#internal/routeOutbound.ts");
+		const native = Object.fromEntries(
+			["fetch", "AbortController", "AbortSignal", "Headers", "Request", "Response"].map((name) => [name, Reflect.get(global, name)]),
+		);
+		const restoreOutbound = await installOutbound({}, true);
+		const win = new GlobalWindow({
+			...happyDOM,
+			console: global.console,
+			settings: { ...happyDOM.settings, disableErrorCapturing: true },
+			url: happyDOM.url ?? "http://localhost:3000",
+		});
+		win.happyDOM.settings.fetch.interceptor = documentTransport(global.fetch);
+		const { keys, originals } = populateGlobal(global, win, { bindFunctions: true });
+		for (const [name, value] of Object.entries(native)) {
 			Object.defineProperty(global, name, { configurable: true, value, writable: true });
 		}
-		const transport = global.fetch.bind(global);
-		Object.defineProperty(global, "fetch", {
-			configurable: true,
-			value: (input: RequestInfo | URL, init?: RequestInit) => {
-				if (input instanceof Request) {
-					const request = new Request(input, init);
-					return transport(request.url, {
-						body: request.body,
-						cache: request.cache,
-						credentials: request.credentials,
-						headers: [...request.headers],
-						method: request.method,
-						mode: request.mode,
-						redirect: request.redirect,
-						referrer: request.referrer,
-						referrerPolicy: request.referrerPolicy,
-						signal: request.signal,
-					});
+		Object.defineProperty(global, "window", { configurable: true, value: win, writable: true });
+		Object.defineProperty(win.document, "defaultView", { configurable: true, get: () => win });
+		Object.defineProperty(global, Symbol.for("test-story.dom"), { configurable: true, value: true });
+		return {
+			async teardown(target) {
+				try {
+					await win.happyDOM.abort();
+					win.close();
+				} finally {
+					for (const key of keys) {
+						Reflect.deleteProperty(target, key);
+					}
+					for (const [key, descriptor] of originals) {
+						Object.defineProperty(target, key, descriptor);
+					}
+					Reflect.deleteProperty(target, Symbol.for("test-story.dom"));
+					restoreOutbound();
 				}
-				return transport(input, init?.headers instanceof Headers ? { ...init, headers: [...init.headers] } : init);
 			},
-			writable: true,
-		});
-		return environment;
+		};
 	},
 	viteEnvironment: "client",
 };

package/src/server/domFetch.ts

@@ -2,5 +2,25 @@ export function domFetch(baseUrl: string): typeof globalThis.fetch {
 	const base = new URL(baseUrl);
 	window.location.href = base.href;
 	const transport = window.fetch.bind(window);
-	return (input, init) => transport(typeof input === "string" ? new URL(input, base).href : input, init);
+	return (input, init) => {
+		if (input instanceof Request) {
+			const request = new Request(input, init);
+			return transport(request.url, {
+				body: request.body,
+				cache: request.cache,
+				credentials: request.credentials,
+				headers: [...request.headers],
+				method: request.method,
+				mode: request.mode,
+				redirect: request.redirect,
+				referrer: request.referrer,
+				referrerPolicy: request.referrerPolicy,
+				signal: request.signal,
+			});
+		}
+		return transport(
+			typeof input === "string" ? new URL(input, base).href : input,
+			init?.headers instanceof Headers ? { ...init, headers: [...init.headers] } : init,
+		);
+	};
 }

package/src/server/domNavigate.ts

@@ -0,0 +1,9 @@
+export async function domNavigate(url: string | URL = window.location.href): Promise<Response> {
+	const response = await window.fetch(new URL(url, window.location.href), { credentials: "include" });
+	const html = await response.clone().text();
+	window.location.href = response.url;
+	document.open();
+	document.write(html);
+	document.close();
+	return response;
+}

package/src/server/internal/documentRedirect.ts

@@ -0,0 +1,28 @@
+import type { Request } from "happy-dom";
+import type BrowserWindow from "happy-dom/lib/window/BrowserWindow.js";
+
+export function documentRedirect(request: Request, window: BrowserWindow, target: URL, status: number, body: Buffer<ArrayBuffer> | null) {
+	const headers = new window.Headers(request.headers);
+	if (target.origin !== new URL(request.url).origin) {
+		for (const name of ["authorization", "cookie", "proxy-authorization"]) {
+			headers.delete(name);
+		}
+	}
+	const get = (status === 303 && request.method !== "HEAD") || ([301, 302].includes(status) && request.method === "POST");
+	if (get) {
+		headers.delete("content-type");
+		headers.delete("content-length");
+	}
+	const nextBody = get ? null : body;
+	return {
+		body: nextBody,
+		request: new window.Request(target.href, {
+			body: nextBody,
+			credentials: request.credentials,
+			headers,
+			method: get ? "GET" : request.method,
+			redirect: request.redirect,
+			signal: request.signal,
+		}),
+	};
+}

package/src/server/internal/documentRequest.ts

@@ -0,0 +1,26 @@
+import type { Request } from "happy-dom";
+
+export async function documentRequest(
+	fetch: typeof globalThis.fetch,
+	request: Request,
+	body: Buffer<ArrayBuffer> | null,
+	headers: Readonly<Record<string, string>>,
+) {
+	const controller = new AbortController();
+	function abort() {
+		controller.abort(request.signal.reason);
+	}
+	function release() {
+		request.signal.removeEventListener("abort", abort);
+	}
+	if (request.signal.aborted) {
+		abort();
+	}
+	request.signal.addEventListener("abort", abort, { once: true });
+	try {
+		return { release, response: await fetch(request.url, { body, headers, method: request.method, redirect: "manual", signal: controller.signal }) };
+	} catch (error) {
+		release();
+		throw error;
+	}
+}

package/src/server/internal/documentResponse.ts

@@ -0,0 +1,51 @@
+import { Readable } from "node:stream";
+import type { Headers, IBrowserFrame, Request } from "happy-dom";
+import FetchResponseHeaderUtility from "happy-dom/lib/fetch/utilities/FetchResponseHeaderUtility.js";
+
+export function documentResponseHeaders(response: Response, request: Request, frame: IBrowserFrame) {
+	return FetchResponseHeaderUtility.parseResponseHeaders({
+		browserFrame: frame,
+		rawHeaders: [...response.headers]
+			.flatMap(([name, value]) => (name === "set-cookie" ? [] : [name, value]))
+			.concat(response.headers.getSetCookie().flatMap((cookie) => ["set-cookie", cookie])),
+		"requestURL": new URL(request.url),
+	});
+}
+
+export function documentResponse(
+	response: Response,
+	request: Request,
+	frame: IBrowserFrame,
+	release: () => void,
+	redirected: boolean,
+	headers: Headers,
+) {
+	if (response.body === null) {
+		release();
+	}
+	const result = new frame.window.Response(response.body === null ? null : Readable.toWeb(Readable.from(chunks(response.body, release))), {
+		headers,
+		status: response.status,
+		statusText: response.statusText,
+	});
+	Object.defineProperty(result, "url", { value: request.url });
+	Object.defineProperty(result, "redirected", { value: redirected });
+	return result;
+}
+
+async function* chunks(stream: ReadableStream<Uint8Array>, release: () => void) {
+	const reader = stream.getReader();
+	try {
+		while (true) {
+			const { done, value } = await reader.read();
+			if (done) {
+				return;
+			}
+			yield value;
+		}
+	} finally {
+		release();
+		await reader.cancel();
+		reader.releaseLock();
+	}
+}

package/src/server/internal/documentTransport.ts

@@ -0,0 +1,41 @@
+import type { IFetchInterceptor } from "happy-dom";
+import FetchRequestHeaderUtility from "happy-dom/lib/fetch/utilities/FetchRequestHeaderUtility.js";
+import WindowBrowserContext from "happy-dom/lib/window/WindowBrowserContext.js";
+import { documentRedirect } from "#internal/documentRedirect.ts";
+import { documentRequest } from "#internal/documentRequest.ts";
+import { documentResponse, documentResponseHeaders } from "#internal/documentResponse.ts";
+
+export function documentTransport(fetch: typeof globalThis.fetch): IFetchInterceptor {
+	return {
+		async beforeAsyncRequest({ request, window }) {
+			const frame = new WindowBrowserContext(window).getBrowserFrame();
+			if (!frame) {
+				throw new Error("test-story cannot fetch after the document has closed");
+			}
+			let current = request;
+			let body = current.body === null ? null : Buffer.from(await current.arrayBuffer());
+			for (let redirects = 0; redirects <= 20; redirects += 1) {
+				const headers = FetchRequestHeaderUtility.getRequestHeaders({ browserFrame: frame, request: current, window });
+				delete headers.Connection;
+				const { release, response } = await documentRequest(fetch, current, body, headers);
+				const responseHeaders = documentResponseHeaders(response, current, frame);
+				const location = response.headers.get("location");
+				if (![301, 302, 303, 307, 308].includes(response.status) || location === null || current.redirect === "manual") {
+					return documentResponse(response, current, frame, release, redirects > 0, responseHeaders);
+				}
+				await response.body?.cancel();
+				release();
+				if (current.redirect === "error" || redirects === 20) {
+					throw new Error(`test-story cannot follow redirect from ${current.url}`);
+				}
+				const next = documentRedirect(current, window, new URL(location, current.url), response.status, body);
+				current = next.request;
+				body = next.body;
+			}
+			throw new Error(`test-story reached the redirect limit for ${request.url}`);
+		},
+		beforeSyncRequest({ request }) {
+			throw new Error(`test-story refuses synchronous document requests to ${new URL(request.url).hostname}; use fetch instead`);
+		},
+	};
+}

package/src/server/internal/errors.ts

@@ -1,6 +1,15 @@
 import { describeValue } from "#internal/render.ts";
 import { explained } from "#internal/wrap.ts";
 
+export function unrouted(hostname: string): Error {
+	return new Error(
+		explained(
+			`test-story refused an outbound request to ${hostname}`,
+			"Add this hostname to the story kit's outbound map and point it at a fake server. Only loopback requests may run without a route.",
+		),
+	);
+}
+
 export function refusal(name: string, line: string, cause: unknown): Error {
 	return new Error(
 		explained(

package/src/server/internal/routeOutbound.ts

@@ -1,4 +1,6 @@
+import { isIP } from "node:net";
 import { Effect } from "effect";
+import { unrouted } from "#internal/errors.ts";
 
 interface DispatchOptions {
 	readonly origin: string | URL;
@@ -12,8 +14,9 @@ function isDispatcher(value: unknown): value is Dispatcher {
 	return typeof value === "object" && value !== null && "dispatch" in value && typeof value.dispatch === "function";
 }
 
-async function install(routes: Readonly<Record<string, string>>) {
+export async function installOutbound(routes: Readonly<Record<string, string>>, strict = false) {
 	const origins = new Map(Object.entries(routes).map(([hostname, target]) => [hostname, new URL(target).origin]));
+	let refused: Error | undefined;
 	// A data URL initializes Node's bundled Undici without sending an HTTP request.
 	await fetch("data:,");
 	const slots = ["undici.globalDispatcher.1", "undici.globalDispatcher.2"].flatMap((name) => {
@@ -33,7 +36,17 @@ async function install(routes: Readonly<Record<string, string>>) {
 		for (const { key, previous } of slots) {
 			const router: Dispatcher = {
 				dispatch(options, handler) {
-					const target = origins.get(new URL(options.origin).hostname);
+					const hostname = new URL(options.origin).hostname;
+					const target = origins.get(hostname);
+					if (
+						strict
+						&& target === undefined
+						&& !["localhost", "[::1]"].includes(hostname)
+						&& !(isIP(hostname) === 4 && hostname.startsWith("127."))
+					) {
+						refused = unrouted(hostname);
+						throw refused;
+					}
 					return previous.dispatch(target === undefined ? options : { ...options, origin: target }, handler);
 				},
 			};
@@ -43,12 +56,17 @@ async function install(routes: Readonly<Record<string, string>>) {
 		restore();
 		throw error;
 	}
-	return restore;
+	return () => {
+		restore();
+		if (refused !== undefined) {
+			throw refused;
+		}
+	};
 }
 
 export function routeOutbound(routes: Readonly<Record<string, string>>) {
 	return Effect.acquireRelease(
-		Effect.promise(() => install(routes)),
+		Effect.promise(() => installOutbound(routes, Reflect.get(globalThis, Symbol.for("test-story.dom")) === true)),
 		(restore) => Effect.sync(restore),
 	).pipe(Effect.asVoid);
 }

package/src/server/internal/storyIt.ts

@@ -53,7 +53,7 @@ function declaring(definition: LooseDefinition, genre: Genre, declare: EffectTes
 
 export function storyIt(definition: LooseDefinition): LooseIt {
 	const genre = genreOf(definition.name);
-	const outbound = definition.outbound;
+	const outbound = definition.outbound ?? (Reflect.get(globalThis, Symbol.for("test-story.dom")) ? {} : undefined);
 	const { effectApp } = makeEffectIt({
 		around:
 			outbound === undefined