@sponson/sim 0.4.0 → 0.5.0

package/dist/routes/digitalocean.js

@@ -0,0 +1,158 @@
+/**
+ * Simulated DigitalOcean App Platform: apps built from an app spec, each create and update starting a deployment.
+ *
+ * Assumptions about the real API this fake encodes, checked against the official OpenAPI document
+ * (https://github.com/digitalocean/openapi, `specification/resources/apps`) and the docs unless marked unverified.
+ * The critical ones are pinned in scenarios/contract.test.ts (`assumption DO…`).
+ *   DO1. The API is `https://api.digitalocean.com`, authenticated as `Authorization: Bearer <token>` (scopes
+ *        app:create/read/update/delete); doctl reads the token from `DIGITALOCEAN_ACCESS_TOKEN`. (verified:
+ *        https://docs.digitalocean.com/reference/api/digitalocean/, doctl README)
+ *   DO2. `POST /v2/apps` with `{ spec }` creates an app and answers `{ app: { id, spec, pending_deployment, … } }`;
+ *        `GET /v2/apps/{id}` answers `{ app }` (404 when gone); `GET /v2/apps?page=&per_page=` lists
+ *        `{ apps, links: { pages: { next } }, meta }`, with no name filter. (verified: apps_create.yml, apps_get.yml,
+ *        apps_list.yml)
+ *   DO3. An app's `spec.name` is unique in the account (`^[a-z][a-z0-9-]{0,30}[a-z0-9]$`); the status of a
+ *        duplicate create is not documented (unverified: the sim answers 409). (verified: app_spec.yml)
+ *   DO4. `PUT /v2/apps/{id}` with `{ spec }` replaces the whole spec and starts a deployment. (verified:
+ *        apps_update.yml; "starts a deployment" inferred from `pending_deployment` being set for UpdateApp)
+ *   DO5. `pending_deployment` names the deployment a create or update started; `GET
+ *        /v2/apps/{app_id}/deployments/{deployment_id}` answers `{ deployment: { id, phase } }`, the phase one of
+ *        PENDING_BUILD, BUILDING, PENDING_DEPLOY, DEPLOYING, ACTIVE, SUPERSEDED, ERROR, CANCELED. (verified:
+ *        app.yml, apps_get_deployment.yml, apps_deployment_response.yml, apps_deployment_phase.yml)
+ *   DO6. The platform adds defaults to the spec it stores (a region, instance counts); it keeps every field the
+ *        client sent, lists in the order sent. (unverified: the sim adds `region` and `instance_count`)
+ *   DO7. A `type: SECRET` variable's value is encrypted on first submission and read back as `EV[…]`.
+ *        (verified: app_variable_definition.yml, "encrypted on first submission"; the read-back form unverified)
+ *   DO8. `DELETE /v2/apps/{id}` deletes the app and its deployments (200 `{ id }`; 404 when gone). (verified:
+ *        apps_delete.yml)
+ */
+import { Reply, route, router } from "../provider.js";
+/** The simulated App Platform API, registered in `PROVIDERS` (packages/sim/src/state.ts) and served under `/digitalocean`. */
+export const digitaloceanSim = {
+    env: { token: "DIGITALOCEAN_ACCESS_TOKEN", url: "DIGITALOCEAN_API_URL", testToken: "tok_digitalocean" },
+    defaultSeed: { apps: [] },
+    reset(core, seed) {
+        const apps = (seed?.apps ?? []).map((spec) => ({ id: core.nextId("app_"), spec: stored(core, spec), liveUrl: `https://${String(spec.name)}.ondigitalocean.app`, deployments: {}, pending: null, createdBy: "sim" }));
+        return { apps, deployPolls: seed?.deployPolls ?? 1, failDeployments: seed?.failDeployments ?? false };
+    },
+    /**
+     * `app.<name>`: "delete"; `app.<name>.env.<KEY>`: a new value for that app-level variable — what a human in the
+     * control panel would do.
+     */
+    drift(_core, state, { key, rest, value, only }) {
+        if (only !== undefined || !rest.startsWith("app."))
+            return false;
+        const [name, kind, envKey] = rest.slice("app.".length).split(".");
+        const app = state.apps.find((a) => a.spec.name === name);
+        if (!app)
+            throw new Error(`drift ${key}: no app ${String(name)}`);
+        if (kind === undefined && value === "delete")
+            state.apps = state.apps.filter((a) => a !== app);
+        else if (kind === "env" && envKey) {
+            const env = (app.spec.envs ?? []).find((e) => e.key === envKey);
+            if (!env)
+                throw new Error(`drift ${key}: no variable ${envKey}`);
+            env.value = value;
+        }
+        else
+            throw new Error(`drift ${key}: use app.<name> = delete, or app.<name>.env.<KEY> = <value>`);
+        return true;
+    },
+    routes(core, state, req) {
+        return routes(core, state, req);
+    },
+};
+/** The spec as stored: defaults added (DO6), SECRET values encrypted (DO7). */
+function stored(core, spec) {
+    const s = structuredClone(spec);
+    s.region ??= "nyc";
+    for (const svc of s.services ?? [])
+        svc.instance_count ??= 1;
+    const encrypt = (envs) => {
+        for (const e of envs ?? [])
+            if (e.type === "SECRET" && typeof e.value === "string" && !e.value.startsWith("EV["))
+                e.value = `EV[1:${core.nextId("")}:sim]`;
+    };
+    encrypt(s.envs);
+    for (const svc of s.services ?? [])
+        encrypt(svc.envs);
+    return s;
+}
+function deploy(core, state, app) {
+    const id = core.nextId("dep_");
+    app.deployments[id] = { phase: "PENDING_BUILD", polls: state.deployPolls };
+    app.pending = id;
+}
+function publicApp(a) {
+    return { id: a.id, spec: a.spec, ...(a.liveUrl ? { live_url: a.liveUrl } : {}), ...(a.pending ? { pending_deployment: { id: a.pending } } : {}) };
+}
+const NAME = /^[a-z][a-z0-9-]{0,30}[a-z0-9]$/;
+const notFound = () => new Reply(404, { id: "not_found", message: "The resource you were accessing could not be found." });
+function specOf(body) {
+    const spec = body?.spec;
+    if (typeof spec !== "object" || spec === null || Array.isArray(spec) || typeof spec.name !== "string" || !NAME.test(spec.name)) {
+        return new Reply(422, { id: "unprocessable_entity", message: "spec.name is invalid" });
+    }
+    return spec;
+}
+const routes = router([
+    route("GET", "/v2/apps", ({ state, url }) => {
+        const per = Math.max(1, Number(url.searchParams.get("per_page") ?? 20));
+        const page = Math.max(1, Number(url.searchParams.get("page") ?? 1));
+        const slice = state.apps.slice((page - 1) * per, page * per);
+        const next = page * per < state.apps.length ? { next: `https://api.digitalocean.com/v2/apps?page=${page + 1}&per_page=${per}` } : {};
+        return new Reply(200, { apps: slice.map(publicApp), links: { pages: next }, meta: { total: state.apps.length } });
+    }),
+    route("POST", "/v2/apps", ({ core, state, body }) => {
+        const spec = specOf(body);
+        if (spec instanceof Reply)
+            return spec;
+        if (state.apps.some((a) => a.spec.name === spec.name))
+            return new Reply(409, { id: "conflict", message: "an app with this name already exists" });
+        const app = { id: core.nextId("app_"), spec: stored(core, spec), liveUrl: null, deployments: {}, pending: null, createdBy: "api" };
+        deploy(core, state, app);
+        state.apps.push(app);
+        return new Reply(200, { app: publicApp(app) });
+    }),
+    route("GET", "/v2/apps/:id", ({ state, params }) => {
+        const app = state.apps.find((a) => a.id === params.id);
+        return app ? new Reply(200, { app: publicApp(app) }) : notFound();
+    }),
+    route("PUT", "/v2/apps/:id", ({ core, state, params, body }) => {
+        const app = state.apps.find((a) => a.id === params.id);
+        if (!app)
+            return notFound();
+        const spec = specOf(body);
+        if (spec instanceof Reply)
+            return spec;
+        app.spec = stored(core, spec);
+        deploy(core, state, app);
+        return new Reply(200, { app: publicApp(app) });
+    }),
+    route("GET", "/v2/apps/:id/deployments/:deployment", ({ state, params }) => {
+        const app = state.apps.find((a) => a.id === params.id);
+        const d = app?.deployments[params.deployment];
+        if (!app || !d)
+            return notFound();
+        if (d.polls > 0) {
+            d.polls--;
+            d.phase = "BUILDING";
+        }
+        else if (d.phase !== "ACTIVE" && d.phase !== "ERROR") {
+            d.phase = state.failDeployments ? "ERROR" : "ACTIVE";
+            if (d.phase === "ACTIVE") {
+                app.liveUrl = `https://${String(app.spec.name)}-${app.id.slice(4)}.ondigitalocean.app`;
+                app.pending = null;
+            }
+        }
+        return new Reply(200, { deployment: { id: params.deployment, phase: d.phase } });
+    }),
+    route("DELETE", "/v2/apps/:id", ({ state, params }) => {
+        const app = state.apps.find((a) => a.id === params.id);
+        if (!app)
+            return notFound();
+        state.apps = state.apps.filter((a) => a !== app);
+        return new Reply(200, { id: app.id });
+    }),
+], notFound);
+//# sourceMappingURL=digitalocean.js.map

package/dist/routes/digitalocean.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digitalocean.js","sourceRoot":"","sources":["../../src/routes/digitalocean.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAkD,MAAM,gBAAgB,CAAC;AA6BtG,8HAA8H;AAC9H,MAAM,CAAC,MAAM,eAAe,GAAqD;IAC/E,GAAG,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,GAAG,EAAE,sBAAsB,EAAE,SAAS,EAAE,kBAAkB,EAAE;IACvG,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAEzB,KAAK,CAAC,IAAI,EAAE,IAAI;QACd,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAc,EAAE,CAAC,CAAC,CAAC;QAC9N,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,IAAI,KAAK,EAAE,CAAC;IACxG,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,YAAY,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;aAC1F,IAAI,IAAI,KAAK,KAAK,IAAI,MAAM,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,CAAE,GAAG,CAAC,IAAI,CAAC,IAAmD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;YAChH,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,iBAAiB,MAAM,EAAE,CAAC,CAAC;YACjE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QACpB,CAAC;;YAAM,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,8DAA8D,CAAC,CAAC;QACnG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG;QACrB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,SAAS,MAAM,CAAC,IAAa,EAAE,IAA6B;IAC1D,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC;IACnB,KAAK,MAAM,GAAG,IAAK,CAAC,CAAC,QAAuD,IAAI,EAAE;QAAE,GAAG,CAAC,cAAc,KAAK,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,CAAC,IAAa,EAAE,EAAE;QAChC,KAAK,MAAM,CAAC,IAAK,IAAmD,IAAI,EAAE;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,CAAC,CAAC,KAAK,GAAG,QAAQ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC;IAC7M,CAAC,CAAC;IACF,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAK,CAAC,CAAC,QAAuD,IAAI,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,IAAa,EAAE,KAAwB,EAAE,GAAoB;IAC3E,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IAC3E,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,CAAkB;IACnC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACpJ,CAAC;AAED,MAAM,IAAI,GAAG,gCAAgC,CAAC;AAC9C,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC,CAAC;AAE3H,SAAS,MAAM,CAAC,IAAa;IAC3B,MAAM,IAAI,GAAI,IAAkC,EAAE,IAAI,CAAC;IACvD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAQ,IAA2B,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAE,IAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7K,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,sBAAsB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED,MAAM,MAAM,GAAG,MAAM,CACnB;IACE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,6CAA6C,IAAI,GAAG,CAAC,aAAa,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrI,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpH,CAAC,CAAC;IAEF,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,YAAY,KAAK;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAClJ,MAAM,GAAG,GAAoB,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACpJ,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpE,CAAC,CAAC;IAEF,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QAC7D,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,YAAY,KAAK;YAAE,OAAO,IAAI,CAAC;QACvC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,CAAC,KAAK,EAAE,sCAAsC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACzE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAAE,OAAO,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YAChB,CAAC,CAAC,KAAK,EAAE,CAAC;YACV,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC;QACvB,CAAC;aAAM,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YACvD,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrD,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzB,GAAG,CAAC,OAAO,GAAG,WAAW,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC;gBACvF,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC;IAEF,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QACjD,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC;CACH,EACD,QAAQ,CACT,CAAC"}

package/dist/routes/fly.d.ts

@@ -0,0 +1,22 @@
+import { type ProviderSim } from "../provider.js";
+/** One secret as stored: the value (never answered), its digest and when it was set. */
+export interface FlySecret {
+    value: string;
+    digest: string;
+    createdAt: string;
+}
+/** Simulated Fly.io state: apps by name, with their secrets and release counter. */
+export interface FlyState {
+    apps: Record<string, {
+        secrets: Record<string, FlySecret>;
+        releases: number;
+    }>;
+}
+/** Initial Fly.io state: apps by name, with secret values. */
+export interface FlySeed {
+    apps?: Record<string, {
+        secrets?: Record<string, string>;
+    }>;
+}
+/** Simulated Fly.io GraphQL API; see the assumptions at the top of this file. */
+export declare const flySim: ProviderSim<FlyState, FlySeed>;

package/dist/routes/fly.js

@@ -0,0 +1,113 @@
+/**
+ * Simulated Fly.io GraphQL API (`POST https://api.fly.io/graphql`), the subset that sets an app's secrets: enough
+ * to test the generic `http` adapter's GraphQL requests against Fly's real operation shapes.
+ *
+ * Assumptions (docs/api-verification.md, "Railway and Fly.io through the generic adapter"):
+ *   F1. `Authorization: Bearer <token>`, or `FlyV1 <macaroon>` for the tokens `fly tokens create` prints (sent as
+ *       they are). Verified: superfly/fly-go tokens/tokens.go.
+ *   F2. `app(name: String!) { secrets { name digest createdAt } }` lists an app's secrets; values are never
+ *       returned. Verified: fly-go resource_secrets.go and schema.graphql.
+ *   F3. `setSecrets(input: SetSecretsInput!)` (appId: the app name, secrets: [{ key, value }], replaceAll?) and
+ *       `unsetSecrets(input: UnsetSecretsInput!)` (appId, keys) answer `{ app, release }`; each makes a new
+ *       release. Verified: fly-go schema.graphql. Unsetting a key that is not set is not an error here: unverified.
+ *   F4. Failures are HTTP 200 with `errors[]`; an unknown app is "Could not find App". Unverified wording.
+ */
+import { createHash } from "node:crypto";
+import { graphqlData, graphqlError, graphqlOperation, isMutation } from "../graphql.js";
+import { Reply, route, router } from "../provider.js";
+/** Simulated Fly.io GraphQL API; see the assumptions at the top of this file. */
+export const flySim = {
+    env: { token: "FLY_API_TOKEN", url: "FLY_API_URL", testToken: "tok_fly" },
+    defaultSeed: { apps: { "demo-pr-42": {} } },
+    reset(_core, seed) {
+        const apps = {};
+        for (const [name, a] of Object.entries(seed?.apps ?? {})) {
+            apps[name] = { secrets: Object.fromEntries(Object.entries(a.secrets ?? {}).map(([k, v]) => [k, secret(v)])), releases: 0 };
+        }
+        return { apps };
+    },
+    /** `secrets.<app>.<NAME>`: a new value, or "delete". */
+    drift(_core, state, { key, rest, value, only }) {
+        if (only !== undefined)
+            return false;
+        const [kind, app, name] = rest.split(".");
+        if (kind !== "secrets" || !app || !name)
+            return false;
+        const a = state.apps[app];
+        if (!a)
+            throw new Error(`drift ${key}: no app ${app}`);
+        if (value === "delete")
+            delete a.secrets[name];
+        else
+            a.secrets[name] = secret(value);
+        return true;
+    },
+    authorized(headers) {
+        return /^(Bearer|FlyV1)\s+\S+/.test(headers.authorization ?? "");
+    },
+    isWrite(req) {
+        return isMutation(req.body);
+    },
+    routes(core, state, req) {
+        return routes(core, state, req);
+    },
+};
+function secret(value) {
+    return { value, digest: createHash("sha256").update(value).digest("hex").slice(0, 16), createdAt: "2026-10-11T00:00:00Z" };
+}
+function input(v) {
+    return typeof v.input === "object" && v.input !== null ? v.input : {};
+}
+function appOf(state, name) {
+    const app = typeof name === "string" ? state.apps[name] : undefined;
+    return app ?? graphqlError("Could not find App", "NOT_FOUND");
+}
+function release(app, name, field) {
+    app.releases += 1;
+    return graphqlData({ [field]: { app: { name }, release: { id: `rel_${app.releases}`, version: app.releases } } });
+}
+const RESOLVERS = {
+    app(state, v) {
+        const name = v.appName ?? v.name;
+        const app = appOf(state, name);
+        if (app instanceof Reply)
+            return app;
+        return graphqlData({ app: { name, secrets: Object.entries(app.secrets).map(([n, s]) => ({ name: n, digest: s.digest, createdAt: s.createdAt })) } });
+    },
+    setSecrets(state, v) {
+        const i = input(v);
+        const app = appOf(state, i.appId);
+        if (app instanceof Reply)
+            return app;
+        const list = Array.isArray(i.secrets) ? i.secrets : [];
+        if (list.length === 0 || !list.every((s) => typeof s.key === "string" && typeof s.value === "string"))
+            return graphqlError("secrets must be a non-empty list of { key, value }", "BAD_USER_INPUT");
+        if (i.replaceAll === true)
+            app.secrets = {};
+        for (const s of list)
+            app.secrets[s.key] = secret(s.value);
+        return release(app, i.appId, "setSecrets");
+    },
+    unsetSecrets(state, v) {
+        const i = input(v);
+        const app = appOf(state, i.appId);
+        if (app instanceof Reply)
+            return app;
+        const keys = Array.isArray(i.keys) ? i.keys.filter((k) => typeof k === "string") : [];
+        if (keys.length === 0)
+            return graphqlError("keys must be a non-empty list", "BAD_USER_INPUT");
+        for (const k of keys)
+            delete app.secrets[k];
+        return release(app, i.appId, "unsetSecrets");
+    },
+};
+const routes = router([
+    route("POST", "/", ({ state, body }) => {
+        const op = graphqlOperation(body);
+        if (op instanceof Reply)
+            return op;
+        const resolve = RESOLVERS[op.root];
+        return resolve ? resolve(state, op.variables) : graphqlError(`Cannot query field "${op.root}" on type "${op.kind === "mutation" ? "Mutations" : "Queries"}"`, "GRAPHQL_VALIDATION_FAILED");
+    }),
+], () => new Reply(404, { error: "not found" }));
+//# sourceMappingURL=fly.js.map

package/dist/routes/fly.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fly.js","sourceRoot":"","sources":["../../src/routes/fly.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAoB,MAAM,gBAAgB,CAAC;AAmBxE,iFAAiF;AACjF,MAAM,CAAC,MAAM,MAAM,GAAmC;IACpD,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IACzE,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE;IAE3C,KAAK,CAAC,KAAK,EAAE,IAAI;QACf,MAAM,IAAI,GAAqB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC7H,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAC5C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACtD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,YAAY,GAAG,EAAE,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;;YAC1C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,OAAO;QAChB,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,GAAG;QACT,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG;QACrB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;CACF,CAAC;AAEF,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC;AAC7H,CAAC;AAED,SAAS,KAAK,CAAC,CAA0B;IACvC,OAAO,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrG,CAAC;AAED,SAAS,KAAK,CAAC,KAAe,EAAE,IAAa;IAC3C,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,OAAO,GAAG,IAAI,YAAY,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,OAAO,CAAC,GAA6B,EAAE,IAAY,EAAE,KAAa;IACzE,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;IAClB,OAAO,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AACpH,CAAC;AAED,MAAM,SAAS,GAAmF;IAChG,GAAG,CAAC,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,YAAY,KAAK;YAAE,OAAO,GAAG,CAAC;QACrC,OAAO,WAAW,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,UAAU,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,GAAG,YAAY,KAAK;YAAE,OAAO,GAAG,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,OAA0C,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;YAAE,OAAO,YAAY,CAAC,oDAAoD,EAAE,gBAAgB,CAAC,CAAC;QACnM,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;YAAE,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAa,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAe,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IACD,YAAY,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,GAAG,YAAY,KAAK;YAAE,OAAO,GAAG,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC,+BAA+B,EAAE,gBAAgB,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAe,EAAE,cAAc,CAAC,CAAC;IACzD,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,GAAG,MAAM,CACnB;IACE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,EAAE,YAAY,KAAK;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,uBAAuB,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,2BAA2B,CAAC,CAAC;IAC7L,CAAC,CAAC;CACH,EACD,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAC7C,CAAC"}

package/dist/routes/launchdarkly.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Simulated LaunchDarkly: feature flags per project, with each environment's individual targets (a context key of a
+ * context kind served one variation).
+ *
+ * Assumptions about the real API that this fake encodes, each marked with how far it is checked. "Verified" means
+ * against LaunchDarkly's published REST API reference (fetched 2026-10-11): the API overview
+ * https://launchdarkly.com/docs/api, "Get feature flag" https://launchdarkly.com/docs/api/feature-flags/get-feature-flag
+ * and "Update feature flag" https://launchdarkly.com/docs/api/feature-flags/patch-feature-flag; see
+ * docs/api-verification.md:
+ *   LD1. The access token is the whole `Authorization` value, with no `Bearer` prefix (verified: "The value of the
+ *        `Authorization` header must be your access token"). The base URL is https://app.launchdarkly.com/api/v2
+ *        (verified from the OpenAPI document's location; federal and EU instances use other hosts). The sim
+ *        refuses a `Bearer` header with 401.
+ *   LD2. `GET /flags/{projectKey}/{featureFlagKey}?env=<key>` answers the flag with `variations[]` (`_id`, `value`,
+ *        optional `name`) and `environments.<key>` restricted to that environment (verified). An unknown project or
+ *        flag is 404 (verified: "Invalid resource identifier"). An environment the project lacks is absent from
+ *        `environments` (unverified: whether LaunchDarkly answers 404 or an empty map instead; the adapter
+ *        reports either as not found).
+ *   LD3. An environment's individual targets are `targets[]` (context kind `user`) and `contextTargets[]` (every
+ *        other kind), items `{ contextKind, values, variation }` where `variation` is an index into `variations`
+ *        (verified). `contextTargets` also lists, for each variation with user targets, a placeholder
+ *        `{ contextKind: "user", values: [] }` (unverified, observed behaviour reported by SDK users; the adapter
+ *        reads both arrays and ignores empty entries, so it does not depend on it).
+ *   LD4. `PATCH /flags/{projectKey}/{featureFlagKey}` with `Content-Type: application/json;
+ *        domain-model=launchdarkly.semanticpatch` and `{ environmentKey, instructions, comment? }` applies the
+ *        instructions; without that media type the body is read as a JSON patch and a semantic patch is 400
+ *        (verified). It answers 200 with the whole flag (verified). Instructions are all or nothing: one invalid
+ *        instruction and nothing changes (verified).
+ *   LD5. `addTargets { contextKind, values, variationId }` (`contextKind` defaults to `user`) is refused (400)
+ *        when it would make a context key targeted by two variations (verified that it is an error; the status
+ *        is unverified). Adding a key already targeted by the same variation changes nothing and succeeds
+ *        (unverified: the docs say only that a semantic patch updates the flag "only where needed"; pinned by the
+ *        contract suite). `removeTargets` with the same fields does nothing for a key not targeted (verified).
+ *   LD6. An environment that requires approvals answers 405 to a flag change (verified); a concurrent change
+ *        answers 409, to be retried (verified). The error body is `{ code, message }` (verified).
+ *   LD7. The PATCH takes effect at once: the next GET shows it (unverified; pinned by the contract suite).
+ */
+import { type CreatedBy, type ProviderSim } from "../provider.js";
+/** The media type of a semantic patch (LD4). */
+export declare const LAUNCHDARKLY_SEMANTIC_PATCH = "application/json; domain-model=launchdarkly.semanticpatch";
+/** One variation of a flag. */
+export interface LaunchdarklyVariation {
+    _id: string;
+    value: unknown;
+    name?: string;
+}
+/** One individual target: a context key of a kind, served the variation at `variation` (an index). */
+export interface LaunchdarklyTarget {
+    contextKind: string;
+    key: string;
+    variation: number;
+    createdBy: CreatedBy;
+}
+/** A flag's configuration in one environment, as far as the sim models it. */
+export interface LaunchdarklyFlagEnv {
+    on: boolean;
+    version: number;
+    targets: LaunchdarklyTarget[];
+}
+/** One feature flag. */
+export interface LaunchdarklyFlag {
+    key: string;
+    variations: LaunchdarklyVariation[];
+    version: number;
+    environments: Record<string, LaunchdarklyFlagEnv>;
+}
+/** One project: its environments (and which need approvals) and its flags. */
+export interface LaunchdarklyProject {
+    environments: string[];
+    approvals: string[];
+    flags: Record<string, LaunchdarklyFlag>;
+}
+/** The simulated LaunchDarkly's state: projects by key. */
+export interface LaunchdarklyState {
+    projects: Record<string, LaunchdarklyProject>;
+}
+/** What a scenario or test seeds the simulated LaunchDarkly with (`seed: { launchdarkly: … }`). */
+export interface LaunchdarklySeed {
+    projects: Record<string, {
+        environments?: string[];
+        /** Environments whose flag changes need an approval request (LD6). */
+        approvals?: string[];
+        flags?: Record<string, {
+            variations?: Array<{
+                value: unknown;
+                name?: string;
+            }>;
+            /** Environment key → targets that exist already (made "by a human", so unmanaged). */
+            targets?: Record<string, Array<{
+                contextKind?: string;
+                key: string;
+                variation: number;
+            }>>;
+        }>;
+    }>;
+}
+/** The simulated LaunchDarkly API, registered in `PROVIDERS` (packages/sim/src/state.ts) and served under `/launchdarkly`. */
+export declare const launchdarklySim: ProviderSim<LaunchdarklyState, LaunchdarklySeed>;

package/dist/routes/launchdarkly.js

@@ -0,0 +1,213 @@
+/**
+ * Simulated LaunchDarkly: feature flags per project, with each environment's individual targets (a context key of a
+ * context kind served one variation).
+ *
+ * Assumptions about the real API that this fake encodes, each marked with how far it is checked. "Verified" means
+ * against LaunchDarkly's published REST API reference (fetched 2026-10-11): the API overview
+ * https://launchdarkly.com/docs/api, "Get feature flag" https://launchdarkly.com/docs/api/feature-flags/get-feature-flag
+ * and "Update feature flag" https://launchdarkly.com/docs/api/feature-flags/patch-feature-flag; see
+ * docs/api-verification.md:
+ *   LD1. The access token is the whole `Authorization` value, with no `Bearer` prefix (verified: "The value of the
+ *        `Authorization` header must be your access token"). The base URL is https://app.launchdarkly.com/api/v2
+ *        (verified from the OpenAPI document's location; federal and EU instances use other hosts). The sim
+ *        refuses a `Bearer` header with 401.
+ *   LD2. `GET /flags/{projectKey}/{featureFlagKey}?env=<key>` answers the flag with `variations[]` (`_id`, `value`,
+ *        optional `name`) and `environments.<key>` restricted to that environment (verified). An unknown project or
+ *        flag is 404 (verified: "Invalid resource identifier"). An environment the project lacks is absent from
+ *        `environments` (unverified: whether LaunchDarkly answers 404 or an empty map instead; the adapter
+ *        reports either as not found).
+ *   LD3. An environment's individual targets are `targets[]` (context kind `user`) and `contextTargets[]` (every
+ *        other kind), items `{ contextKind, values, variation }` where `variation` is an index into `variations`
+ *        (verified). `contextTargets` also lists, for each variation with user targets, a placeholder
+ *        `{ contextKind: "user", values: [] }` (unverified, observed behaviour reported by SDK users; the adapter
+ *        reads both arrays and ignores empty entries, so it does not depend on it).
+ *   LD4. `PATCH /flags/{projectKey}/{featureFlagKey}` with `Content-Type: application/json;
+ *        domain-model=launchdarkly.semanticpatch` and `{ environmentKey, instructions, comment? }` applies the
+ *        instructions; without that media type the body is read as a JSON patch and a semantic patch is 400
+ *        (verified). It answers 200 with the whole flag (verified). Instructions are all or nothing: one invalid
+ *        instruction and nothing changes (verified).
+ *   LD5. `addTargets { contextKind, values, variationId }` (`contextKind` defaults to `user`) is refused (400)
+ *        when it would make a context key targeted by two variations (verified that it is an error; the status
+ *        is unverified). Adding a key already targeted by the same variation changes nothing and succeeds
+ *        (unverified: the docs say only that a semantic patch updates the flag "only where needed"; pinned by the
+ *        contract suite). `removeTargets` with the same fields does nothing for a key not targeted (verified).
+ *   LD6. An environment that requires approvals answers 405 to a flag change (verified); a concurrent change
+ *        answers 409, to be retried (verified). The error body is `{ code, message }` (verified).
+ *   LD7. The PATCH takes effect at once: the next GET shows it (unverified; pinned by the contract suite).
+ */
+import { Reply, route, router } from "../provider.js";
+/** The media type of a semantic patch (LD4). */
+export const LAUNCHDARKLY_SEMANTIC_PATCH = "application/json; domain-model=launchdarkly.semanticpatch";
+const BOOLEAN = [
+    { value: true, name: "on" },
+    { value: false, name: "off" },
+];
+/** The simulated LaunchDarkly API, registered in `PROVIDERS` (packages/sim/src/state.ts) and served under `/launchdarkly`. */
+export const launchdarklySim = {
+    env: { token: "LAUNCHDARKLY_ACCESS_TOKEN", url: "LAUNCHDARKLY_API_URL", testToken: "api-sim-launchdarkly" },
+    // LD1: the token alone in Authorization; a `Bearer` header is refused, so an adapter that sends one fails its tests.
+    authorized: (headers) => /^\S+$/.test(headers.authorization ?? "") && !/^Bearer$/i.test(headers.authorization ?? ""),
+    defaultSeed: { projects: { demo: { environments: ["preview", "production"], flags: { "new-checkout": {} } } } },
+    reset(core, seed) {
+        const projects = {};
+        for (const [key, p] of Object.entries(seed?.projects ?? {})) {
+            const environments = p.environments ?? ["preview", "production"];
+            const flags = {};
+            for (const [flagKey, f] of Object.entries(p.flags ?? {}))
+                flags[flagKey] = flag(core, flagKey, environments, f);
+            projects[key] = { environments, approvals: p.approvals ?? [], flags };
+        }
+        return { projects };
+    },
+    /**
+     * `target.<flag>/<environment>/<contextKind>/<key>` (or `launchdarkly:<project>.target.…`): "delete", or a
+     * variation name or index to move the target to — what a human in the LaunchDarkly console would do.
+     */
+    drift(_core, state, { key, rest, value, only }) {
+        if (!rest.startsWith("target."))
+            return false;
+        const [flagKey, envKey, kind, ...target] = rest.slice("target.".length).split("/");
+        const contextKey = target.join("/");
+        let hit = false;
+        for (const [id, p] of Object.entries(state.projects)) {
+            if (only !== undefined && id !== only)
+                continue;
+            const f = p.flags[flagKey ?? ""];
+            const env = f?.environments[envKey ?? ""];
+            const t = env?.targets.find((x) => x.contextKind === kind && x.key === contextKey);
+            if (!f || !env || !t)
+                continue;
+            hit = true;
+            if (value === "delete")
+                env.targets = env.targets.filter((x) => x !== t);
+            else
+                t.variation = variationIndex(f, value, key);
+            env.version++;
+        }
+        if (!hit)
+            throw new Error(`drift ${key}: no such target`);
+        return true;
+    },
+    routes(core, state, req) {
+        return routes(core, state, req);
+    },
+};
+function variationIndex(f, value, key) {
+    const byName = f.variations.findIndex((v) => v.name === value);
+    if (byName >= 0)
+        return byName;
+    if (/^\d+$/.test(value) && Number(value) < f.variations.length)
+        return Number(value);
+    throw new Error(`drift ${key}: flag ${f.key} has no variation ${value}`);
+}
+/** The API, one route per method and path, under `/api/v2` (part of the base URL). */
+const routes = router([
+    route("GET", "/flags/:project/:flag", ({ state, params, url }) => {
+        const f = state.projects[params.project]?.flags[params.flag];
+        if (!f)
+            return ldError(404, "not_found", "Unknown resource");
+        return new Reply(200, publicFlag(f, url.searchParams.get("env")));
+    }),
+    route("PATCH", "/flags/:project/:flag", ({ state, params, body, headers }) => {
+        if (!(headers["content-type"] ?? "").replace(/\s+/g, "").includes("domain-model=launchdarkly.semanticpatch")) {
+            return ldError(400, "invalid_request", "Invalid JSON patch: expected an array of operations");
+        }
+        const p = state.projects[params.project];
+        const f = p?.flags[params.flag];
+        if (!p || !f)
+            return ldError(404, "not_found", "Unknown resource");
+        const b = (body ?? {});
+        if (typeof b.environmentKey !== "string" || !f.environments[b.environmentKey])
+            return ldError(400, "invalid_request", "environmentKey is required and must name an environment");
+        if (!Array.isArray(b.instructions) || b.instructions.length === 0)
+            return ldError(400, "invalid_request", "instructions are required");
+        if (p.approvals.includes(b.environmentKey))
+            return ldError(405, "method_not_allowed", "This environment requires approval for changes to flags");
+        const env = f.environments[b.environmentKey];
+        // All or nothing (LD4): work on a copy, keep it only if every instruction was valid.
+        const next = env.targets.map((t) => ({ ...t }));
+        for (const ins of b.instructions) {
+            const problem = applyInstruction(f, next, ins);
+            if (problem)
+                return ldError(400, "invalid_request", problem);
+        }
+        if (JSON.stringify(next) !== JSON.stringify(env.targets)) {
+            env.targets = next;
+            env.version++;
+            f.version++;
+        }
+        return new Reply(200, publicFlag(f, null));
+    }),
+], () => ldError(404, "not_found", "Unknown resource"));
+/** One `addTargets` / `removeTargets` instruction against `targets`; a message when it is invalid. */
+function applyInstruction(f, targets, ins) {
+    const i = parseInstruction(f, ins);
+    if (typeof i === "string")
+        return i;
+    const { contextKind, variation } = i;
+    for (const key of i.values) {
+        const at = targets.findIndex((t) => t.contextKind === contextKind && t.key === key);
+        if (i.kind === "removeTargets") {
+            if (at >= 0 && targets[at].variation === variation)
+                targets.splice(at, 1);
+            continue;
+        }
+        if (at >= 0 && targets[at].variation !== variation)
+            return `${contextKind} ${key} is already targeted by another variation`;
+        if (at < 0)
+            targets.push({ contextKind, key, variation, createdBy: "api" });
+    }
+    return null;
+}
+/** One instruction, validated; a message when it is not one the sim implements or is malformed. */
+function parseInstruction(f, ins) {
+    const i = (ins ?? {});
+    if (i.kind !== "addTargets" && i.kind !== "removeTargets")
+        return `unsupported instruction kind ${String(i.kind)}`;
+    const variation = f.variations.findIndex((v) => v._id === i.variationId);
+    if (variation < 0)
+        return `unknown variationId ${String(i.variationId)}`;
+    if (!Array.isArray(i.values) || i.values.some((v) => typeof v !== "string"))
+        return "values must be a list of context keys";
+    const contextKind = typeof i.contextKind === "string" && i.contextKind !== "" ? i.contextKind : "user";
+    return { kind: i.kind, contextKind, values: i.values, variation };
+}
+/** The flag representation (LD2, LD3), restricted to one environment when `env` names one. */
+function publicFlag(f, env) {
+    const environments = {};
+    for (const [key, e] of Object.entries(f.environments)) {
+        if (env !== null && key !== env)
+            continue;
+        const user = groups(e.targets.filter((t) => t.contextKind === "user"));
+        const other = groups(e.targets.filter((t) => t.contextKind !== "user"));
+        const placeholders = user.map((g) => ({ contextKind: "user", values: [], variation: g.variation }));
+        environments[key] = { on: e.on, version: e.version, _environmentName: key, targets: user, contextTargets: [...other, ...placeholders] };
+    }
+    return { key: f.key, _version: f.version, variations: f.variations, environments };
+}
+/** Targets grouped the way LaunchDarkly lists them: one entry per (kind, variation). */
+function groups(targets) {
+    const out = [];
+    for (const t of targets) {
+        const g = out.find((x) => x.contextKind === t.contextKind && x.variation === t.variation);
+        if (g)
+            g.values.push(t.key);
+        else
+            out.push({ contextKind: t.contextKind, values: [t.key], variation: t.variation });
+    }
+    return out;
+}
+function flag(core, key, environments, seed) {
+    const variations = (seed.variations ?? BOOLEAN).map((v) => ({ _id: core.nextId("var_"), value: v.value, ...(v.name !== undefined ? { name: v.name } : {}) }));
+    const envs = {};
+    for (const e of environments) {
+        const targets = (seed.targets?.[e] ?? []).map((t) => ({ contextKind: t.contextKind ?? "user", key: t.key, variation: t.variation, createdBy: "sim" }));
+        envs[e] = { on: true, version: 1, targets };
+    }
+    return { key, variations, version: 1, environments: envs };
+}
+/** LaunchDarkly's error body (LD6). */
+function ldError(status, code, message) {
+    return new Reply(status, { code, message });
+}
+//# sourceMappingURL=launchdarkly.js.map