@sponson/sim 0.0.0-stage → 0.5.0

package/dist/routes/supabase.js

@@ -0,0 +1,234 @@
+/**
+ * Simulated Supabase Management API (https://api.supabase.com/v1): preview branches of a project, and the project's
+ * Auth redirect allow-list.
+ *
+ * Assumptions about the real API that this fake encodes, each marked with how far it is checked. "Verified" means
+ * against Supabase's published OpenAPI document (https://api.supabase.com/api/v1-json, fetched 2026-10-11; rendered
+ * at https://supabase.com/docs/reference/api/introduction) unless another source is named; see
+ * docs/api-verification.md:
+ *   S1. POST /v1/projects/{ref}/branches takes `{ branch_name }` (required, the only required field) and answers
+ *       201 with a BranchResponse: `id` (uuid), `name` (= branch_name), `project_ref` (the branch's own project),
+ *       `parent_project_ref`, `is_default`, `persistent`, `status`, `created_at` (verified: CreateBranchBody,
+ *       BranchResponse). That `project_ref` is known in the 201 answer, before provisioning finishes, is implied by
+ *       the schema (required) but unverified.
+ *   S2. GET /v1/projects/{ref}/branches answers a bare array of BranchResponse, unpaged (verified: no page
+ *       parameters, `type: array`). That the list includes the project's own default branch (`is_default: true`,
+ *       `project_ref` = the parent) once branching is enabled is unverified; the adapter skips `is_default` either
+ *       way and never manages it.
+ *   S3. A branch is provisioned asynchronously: GET /v1/branches/{ref} answers BranchDetailResponse whose `status`
+ *       (the project status enum) is `COMING_UP` until it is ready and `ACTIVE_HEALTHY` after (verified: schema and
+ *       enum). Here this takes chaos `supabase_ready_ms` (default 0). That the detail answers 200 (not 404) while
+ *       the branch is coming up, and that `ACTIVE_HEALTHY` is the right "ready" signal, are unverified: needs a
+ *       live account. The BranchResponse `status` (CREATING_PROJECT, …) is deprecated in the spec and not used.
+ *   S4. The detail carries `db_host`, `db_port` (required), `db_user` and `db_pass` (optional in the spec,
+ *       verified). That `db_pass` is returned to a personal access token is unverified (pinned by the contract
+ *       suite). The database is `postgres` (Supabase's default database name, verified in the connection docs,
+ *       https://supabase.com/docs/guides/database/connecting-to-postgres) and the API URL is
+ *       `https://<ref>.supabase.co` (verified: https://supabase.com/docs/guides/api).
+ *   S5. Creating a branch whose name exists in the project answers 409. Unverified: the spec documents only 201,
+ *       401, 403, 429 and 500. The adapter re-reads the list after a 409, or a 400/422, before reporting it.
+ *   S6. DELETE /v1/branches/{ref} answers 200 `{ message: "ok" }` and the branch is gone from the list at once
+ *       (verified: BranchDeleteResponse; "by default, deletes immediately"). An unknown ref answers 404:
+ *       unverified (the spec documents no 404).
+ *   S7. GET /v1/projects/{ref}/config/auth answers the auth config with `uri_allow_list`, a nullable string
+ *       (verified: AuthConfigResponse, required); PATCH with `{ uri_allow_list }` alone sets that field and
+ *       leaves the others, answering the whole config (verified: UpdateAuthConfigBody has no required field).
+ *       PATCH offers no precondition (no ETag or version), verified by its absence from the spec.
+ *   S8. The allow-list is comma-separated URLs (verified: Supabase Auth's `URI_ALLOW_LIST`, "a comma separated
+ *       list of URIs", https://github.com/supabase/auth#general-config). Whitespace around commas is ignored by
+ *       Auth; whether the API stores the string verbatim (here: yes) is unverified.
+ *   S9. A preview branch is a project with its own Auth config, read and written through the same
+ *       /v1/projects/{ref}/config/auth with the branch's ref (`project_ref` is a "Project ref" in the spec,
+ *       verified; branches have "their own Supabase instance and API credentials", verified in
+ *       https://supabase.com/docs/guides/deployment/branching). That the endpoint accepts a branch's ref, and
+ *       what the branch's allow-list starts as (here: empty), are unverified.
+ */
+import { Reply, route, router } from "../provider.js";
+/** The parent project the default seed creates, a ref of 20 lowercase letters like Supabase's. */
+export const SUPABASE_DEMO_PROJECT = "demoprojectrefabcdef";
+/** The simulated Supabase Management API, registered in `PROVIDERS` (packages/sim/src/state.ts), served under `/supabase`. */
+export const supabaseSim = {
+    env: { token: "SUPABASE_ACCESS_TOKEN", url: "SUPABASE_API_URL", testToken: "tok_supabase" },
+    defaultSeed: { projects: { [SUPABASE_DEMO_PROJECT]: { uri_allow_list: "http://localhost:3000/**" } } },
+    reset(core, seed) {
+        const projects = {};
+        for (const [ref, p] of Object.entries(seed?.projects ?? {})) {
+            const project = { branches: [], auth: { site_url: p.site_url ?? "http://localhost:3000", uri_allow_list: p.uri_allow_list ?? null } };
+            projects[ref] = project;
+            // With branching enabled the project itself is listed as its default branch (assumption S2).
+            project.branches.push({ ...newSupabaseBranch(core, ref, "main", "sim"), project_ref: ref, is_default: true });
+            for (const b of p.branches ?? [])
+                project.branches.push(newSupabaseBranch(core, ref, b.name, "sim"));
+        }
+        return { projects };
+    },
+    /**
+     * `branch.<name>`: "delete" | "recreate" (same name, new ref). `redirect.<url>`: "delete" | "add" — what a human
+     * in the Supabase dashboard would do. `supabase:<ref>.` limits either to one project.
+     */
+    drift(core, state, { key, rest, value, only }) {
+        const projects = Object.entries(state.projects).filter(([ref]) => only === undefined || ref === only);
+        if (rest.startsWith("branch."))
+            return driftBranch(core, projects, key, rest.slice("branch.".length), value);
+        if (rest.startsWith("redirect."))
+            return driftRedirect(projects, key, rest.slice("redirect.".length), value);
+        return false;
+    },
+    routes(core, state, req) {
+        return routes(core, state, req);
+    },
+};
+function driftBranch(core, projects, key, name, value) {
+    if (value !== "delete" && value !== "recreate")
+        throw new Error(`drift ${key}: only "delete" and "recreate" are supported`);
+    for (const [ref, p] of projects) {
+        const hit = p.branches.filter((b) => b.name === name && !b.is_default);
+        p.branches = p.branches.filter((b) => !hit.includes(b));
+        if (value === "recreate")
+            for (const b of hit)
+                p.branches.push(newSupabaseBranch(core, ref, b.name, "sim"));
+    }
+    return true;
+}
+function driftRedirect(projects, key, url, value) {
+    if (value !== "delete" && value !== "add")
+        throw new Error(`drift ${key}: only "delete" and "add" are supported`);
+    for (const [, p] of projects) {
+        const rest = supabaseAllowList(p).filter((u) => u !== url);
+        p.auth.uri_allow_list = (value === "add" ? [...rest, url] : rest).join(",");
+    }
+    return true;
+}
+/** The allow-list's entries: comma-separated, whitespace around them ignored (assumption S8). */
+export function supabaseAllowList(p) {
+    return (p.auth.uri_allow_list ?? "")
+        .split(",")
+        .map((s) => s.trim())
+        .filter((s) => s !== "");
+}
+/** The Management API, one route per method and path. Errors are `{ message }`, as Supabase's are. */
+const routes = router([
+    route("GET", "/projects/:ref/branches", ({ state, params }) => {
+        const p = state.projects[params.ref];
+        return p ? new Reply(200, p.branches.map(publicBranch)) : notFound("project");
+    }),
+    route("POST", "/projects/:ref/branches", ({ core, state, params, body }) => {
+        const p = state.projects[params.ref];
+        if (!p)
+            return notFound("project");
+        const name = (body ?? {}).branch_name;
+        if (typeof name !== "string" || name === "")
+            return new Reply(400, { message: "branch_name must be a non-empty string" });
+        if (p.branches.some((b) => b.name === name))
+            return new Reply(409, { message: `Branch ${name} already exists` });
+        const b = newSupabaseBranch(core, params.ref, name, "api");
+        b.readyAt = Date.now() + core.chaos.supabase_ready_ms;
+        p.branches.push(b);
+        return new Reply(201, publicBranch(b));
+    }),
+    route("GET", "/branches/:ref", ({ state, params }) => {
+        const b = branchByRef(state, params.ref);
+        return b ? new Reply(200, branchDetail(b)) : notFound("branch");
+    }),
+    route("DELETE", "/branches/:ref", ({ state, params }) => {
+        const b = branchByRef(state, params.ref);
+        if (!b)
+            return notFound("branch");
+        if (b.is_default)
+            return new Reply(400, { message: "the default branch cannot be deleted" });
+        const p = state.projects[b.parent_project_ref];
+        p.branches = p.branches.filter((x) => x !== b);
+        return new Reply(200, { message: "ok" });
+    }),
+    route("GET", "/projects/:ref/config/auth", ({ state, params }) => {
+        const a = authOf(state, params.ref);
+        return a ? new Reply(200, authConfig(a)) : notFound("project");
+    }),
+    route("PATCH", "/projects/:ref/config/auth", ({ state, params, body }) => {
+        const a = authOf(state, params.ref);
+        if (!a)
+            return notFound("project");
+        const b = (body ?? {});
+        if (b.uri_allow_list !== undefined && b.uri_allow_list !== null && typeof b.uri_allow_list !== "string")
+            return new Reply(400, { message: "uri_allow_list must be a string" });
+        if (b.uri_allow_list !== undefined)
+            a.uri_allow_list = b.uri_allow_list;
+        if (typeof b.site_url === "string")
+            a.site_url = b.site_url;
+        return new Reply(200, authConfig(a));
+    }),
+], () => notFound("route"));
+/** A branch by its own project ref, in any project. */
+function branchByRef(state, ref) {
+    for (const p of Object.values(state.projects)) {
+        const b = p.branches.find((x) => x.project_ref === ref);
+        if (b)
+            return b;
+    }
+    return undefined;
+}
+/**
+ * A new (not yet added) branch of project `parent`, ready at once. Tests use it to seed "someone else's" branch.
+ * Refs are 20 lowercase letters, deterministic after a reset.
+ */
+export function newSupabaseBranch(core, parent, name, createdBy) {
+    const n = core.nextId("");
+    const ref = `br${[...n].map((d) => "abcdefghij"[Number(d)]).join("")}`.padEnd(20, "x");
+    return {
+        id: `00000000-0000-4000-8000-${n.padStart(12, "0")}`,
+        name,
+        project_ref: ref,
+        parent_project_ref: parent,
+        is_default: false,
+        readyAt: 0,
+        db_pass: `pw_${ref}`,
+        auth: { site_url: "http://localhost:3000", uri_allow_list: null },
+        created_at: new Date().toISOString(),
+        createdAt: Date.now(),
+        createdBy,
+    };
+}
+/** The connection string the adapter builds from a branch's detail (assumption S4). */
+export function supabaseConnectionString(b) {
+    return `postgresql://postgres:${b.db_pass}@db.${b.project_ref}.supabase.co:5432/postgres`;
+}
+function publicBranch(b) {
+    const ready = Date.now() >= b.readyAt;
+    return {
+        id: b.id,
+        name: b.name,
+        project_ref: b.project_ref,
+        parent_project_ref: b.parent_project_ref,
+        is_default: b.is_default,
+        persistent: b.is_default,
+        status: ready ? "FUNCTIONS_DEPLOYED" : "CREATING_PROJECT",
+        preview_project_status: ready ? "ACTIVE_HEALTHY" : "COMING_UP",
+        with_data: false,
+        created_at: b.created_at,
+        updated_at: b.created_at,
+    };
+}
+function branchDetail(b) {
+    return {
+        ref: b.project_ref,
+        postgres_version: "17.4.1",
+        postgres_engine: "17",
+        release_channel: "ga",
+        status: Date.now() >= b.readyAt ? "ACTIVE_HEALTHY" : "COMING_UP",
+        db_host: `db.${b.project_ref}.supabase.co`,
+        db_port: 5432,
+        db_user: "postgres",
+        db_pass: b.db_pass,
+    };
+}
+/** The Auth config of a project ref: a parent project's, or a preview branch's own (assumption S9). */
+function authOf(state, ref) {
+    return state.projects[ref]?.auth ?? branchByRef(state, ref)?.auth;
+}
+function authConfig(a) {
+    return { site_url: a.site_url, uri_allow_list: a.uri_allow_list, disable_signup: false, jwt_exp: 3600 };
+}
+function notFound(what) {
+    return new Reply(404, { message: `${what} not found` });
+}
+//# sourceMappingURL=supabase.js.map

package/dist/routes/supabase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.js","sourceRoot":"","sources":["../../src/routes/supabase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAkD,MAAM,gBAAgB,CAAC;AA6CtG,kGAAkG;AAClG,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAE5D,8HAA8H;AAC9H,MAAM,CAAC,MAAM,WAAW,GAA6C;IACnE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,cAAc,EAAE;IAC3F,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,EAAE,EAAE;IAEtG,KAAK,CAAC,IAAI,EAAE,IAAI;QACd,MAAM,QAAQ,GAA8B,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5D,MAAM,OAAO,GAAoB,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,uBAAuB,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI,EAAE,EAAE,CAAC;YACvJ,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;YACxB,6FAA6F;YAC7F,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9G,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE;gBAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;QACtG,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7G,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7G,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG;QACrB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,IAAa,EAAE,QAA0C,EAAE,GAAW,EAAE,IAAY,EAAE,KAAa;IACtH,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,8CAA8C,CAAC,CAAC;IAC5H,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACvE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,UAAU;YAAE,KAAK,MAAM,CAAC,IAAI,GAAG;gBAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,QAA0C,EAAE,GAAW,EAAE,GAAW,EAAE,KAAa;IACxG,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,yCAAyC,CAAC,CAAC;IAClH,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QAC3D,CAAC,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,CAAkB;IAClD,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;SACjC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,sGAAsG;AACtG,MAAM,MAAM,GAAG,MAAM,CACnB;IACE,KAAK,CAAC,KAAK,EAAE,yBAAyB,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5D,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChF,CAAC,CAAC;IAEF,KAAK,CAAC,MAAM,EAAE,yBAAyB,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACzE,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,IAAI,GAAI,CAAC,IAAI,IAAI,EAAE,CAA+B,CAAC,WAAW,CAAC;QACrE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;QAC1H,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,CAAC,CAAC;QACjH,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACtD,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACnD,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC,CAAC;IAEF,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACtD,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,UAAU;YAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAE,CAAC;QAChD,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,KAAK,CAAC,KAAK,EAAE,4BAA4B,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QAC/D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,KAAK,CAAC,OAAO,EAAE,4BAA4B,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACvE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAqD,CAAC;QAC3E,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;YAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAC/K,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS;YAAE,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAA+B,CAAC;QACzF,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC5D,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC;CACH,EACD,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CACxB,CAAC;AAEF,uDAAuD;AACvD,SAAS,WAAW,CAAC,KAAoB,EAAE,GAAW;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,MAAc,EAAE,IAAY,EAAE,SAAoB;IACjG,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACvF,OAAO;QACL,EAAE,EAAE,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;QACpD,IAAI;QACJ,WAAW,EAAE,GAAG;QAChB,kBAAkB,EAAE,MAAM;QAC1B,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,GAAG,EAAE;QACpB,IAAI,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE,cAAc,EAAE,IAAI,EAAE;QACjE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,SAAS;KACV,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,wBAAwB,CAAC,CAAiB;IACxD,OAAO,yBAAyB,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,WAAW,4BAA4B,CAAC;AAC5F,CAAC;AAED,SAAS,YAAY,CAAC,CAAiB;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC;IACtC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,kBAAkB;QACzD,sBAAsB,EAAE,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW;QAC9D,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAiB;IACrC,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,WAAW;QAClB,gBAAgB,EAAE,QAAQ;QAC1B,eAAe,EAAE,IAAI;QACrB,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW;QAChE,OAAO,EAAE,MAAM,CAAC,CAAC,WAAW,cAAc;QAC1C,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE,CAAC,CAAC,OAAO;KACnB,CAAC;AACJ,CAAC;AAED,uGAAuG;AACvG,SAAS,MAAM,CAAC,KAAoB,EAAE,GAAW;IAC/C,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC;AACpE,CAAC;AAED,SAAS,UAAU,CAAC,CAAe;IACjC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,YAAY,EAAE,CAAC,CAAC;AAC1D,CAAC"}

package/dist/routes/vercel.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Simulated Vercel: project env vars and deployments.
+ *
+ * Assumptions about the real API that this fake encodes, each marked with how far it is checked. "Verified" means
+ * against Vercel's published OpenAPI document (https://openapi.vercel.sh/, fetched 2026-10-10); see
+ * docs/api-verification.md for the per-call table. A local fake cannot prove the rest; scenarios/contract.test.ts
+ * pins the critical ones against live accounts (`pnpm test:live`):
+ *   V1. Env writes are visible to the next deployment immediately (no propagation delay). Lists are
+ *       read-your-writes here; the real list may lag a write, so adapters trust write responses instead.
+ *       Unverified: needs a live account.
+ *   V2. GET /v7/deployments?projectId=&sha= filters by commit and returns newest first. The `sha` filter is
+ *       verified (a v7 query parameter; v6 is not in the spec); items carry `readyState` (required) and `state`
+ *       (optional), and `url` may be null until the upload completes (verified). The order is unverified: the
+ *       adapter sorts by createdAt anyway.
+ *   V3. GET /v10/projects/:id/env?decrypt=true returns plaintext with `decrypted: true`; without `decrypt`,
+ *       `encrypted` values are opaque. `decrypt` (deprecated), `decrypted` and GET /v1/projects/:id/env/:id
+ *       ("Retrieve the decrypted value") are verified; whether the deprecated parameter still decrypts is
+ *       unverified, so the adapter falls back to the per-variable GET. `sensitive` values are never returned
+ *       (the GET /v1 variant without `value`), so those always diff as `update`.
+ *   V4. POST /v10/projects/:id/env?upsert=true answers 201 with `{ created, failed }` (verified: `upsert`, the
+ *       status, `created` as one object or a list, `failed[].error` with `code`, `message`, `key`/`envVarKey`).
+ *       Unverified: that `created` lists every entry written (new or updated, `createdAt === updatedAt` only for
+ *       new ones), and that an entry whose key+gitBranch exists with an overlapping but different target set
+ *       fails the whole request with 400 `ENV_CONFLICT`. Entries named in chaos `env_upsert_fail` come back under
+ *       `failed` and are not written. Without `upsert` a duplicate answers 403 (verified: documented 403 reason).
+ *   V5. POST /v13/deployments: `project` overrides `name` and a GitHub `gitSource` needs `ref` plus `repoId` (or
+ *       `org` + `repo`) — both verified, as is `forceNew`. Deployments go QUEUED → BUILDING → READY over chaos
+ *       `deploy_ms` (default 0: READY at once; the real API also passes through INITIALIZING, which the adapter
+ *       handles as in progress). Every deployment has its own URL (verified: "the unique URL of the deployment").
+ *       `deploy: cancel` cancels a branch's in-progress builds when a new one starts (unverified).
+ *   V6. Pagination (chaos `page_size`): `{ envs, pagination: { count, next, prev } }` (verified: the spec's
+ *       Pagination schema). The `?until=` page parameter is unverified for the env list, which documents no page
+ *       parameter; the adapter drops repeated records, so an API that ignores it costs one extra request.
+ *   V7. GET /v9/projects/:id carries `link`, the connected repository (`type`, `repoId`, …); verified.
+ *   V8. GET /v7/deployments accepts `target` (`production` | `preview`) and each item's `target` is `production`,
+ *       a custom environment name such as `staging`, or null for a preview; verified against the spec's
+ *       `/v7/deployments` parameters and item schema. The git integration builds previews; production builds
+ *       of a commit exist separately.
+ */
+import { type CreatedBy, type ProviderSim, type SimCore } from "../provider.js";
+/** One simulated Vercel environment variable. */
+export interface VercelEnv {
+    id: string;
+    key: string;
+    value: string;
+    target: string[];
+    type: "encrypted" | "plain";
+    gitBranch?: string;
+    createdAt: number;
+    updatedAt: number;
+    createdBy: CreatedBy;
+}
+/** Vercel's deployment states, as its API reports them. */
+export type DeploymentState = "QUEUED" | "BUILDING" | "READY" | "ERROR" | "CANCELED";
+/** One simulated deployment. */
+export interface VercelDeployment {
+    uid: string;
+    url: string;
+    state: DeploymentState;
+    createdAt: number;
+    /** While in progress: QUEUED until `buildingAt`, BUILDING until `readyAt`, then `finalState`. */
+    buildingAt?: number;
+    readyAt?: number;
+    finalState?: DeploymentState;
+    meta: {
+        githubCommitSha: string;
+        githubCommitRef?: string;
+    };
+    /** `production` for production deployments, null for previews. */
+    target: "production" | null;
+    createdBy: CreatedBy;
+}
+/** The Git repository a project is connected to (`link` in GET /v9/projects/:id); null when it has none. */
+export interface VercelLink {
+    type: "github";
+    repoId: number;
+    org: string;
+    repo: string;
+    productionBranch: string;
+}
+/** One simulated Vercel project: its variables, deployments and Git connection. */
+export interface VercelProject {
+    envs: VercelEnv[];
+    deployments: VercelDeployment[];
+    link: VercelLink | null;
+}
+/** Simulated Vercel: projects by id. */
+export interface VercelState {
+    projects: Record<string, VercelProject>;
+}
+/** Initial Vercel state. */
+export interface VercelSeed {
+    projects: Record<string, {
+        envs: Array<{
+            key: string;
+            value: string;
+            target: string;
+            gitBranch?: string;
+        }>;
+    }>;
+}
+/** Simulated Vercel (env vars, deployments); see the assumptions at the top of this file. */
+export declare const vercelSim: ProviderSim<VercelState, VercelSeed>;
+/**
+ * Every deployment gets its own URL: the first one of a sha is `<project>-<sha8>.vercel.app`, later ones
+ * (redeploys) `-2`, `-3`, … `buildMs` > 0 starts it QUEUED and makes it reach `state` over that time.
+ */
+export declare function createDeployment(core: SimCore, projectId: string, project: VercelProject, sha: string, state: DeploymentState, createdAt: number, opts?: {
+    ref?: string;
+    buildMs?: number;
+    target?: "production";
+}): VercelDeployment;
+/** Advance in-progress deployments to the state their timings say they are in now. */
+export declare function refreshDeployments(list: VercelDeployment[], now?: number): void;