@substrat-run/contract-tests 0.138.0 → 0.140.0

package/dist/connect-link-suite.d.ts

@@ -0,0 +1,19 @@
+import type { ScopeHostFixture } from './scope-host-suite.js';
+import type { DirectoryExec } from './findings-atomic-suite.js';
+/**
+ * A vertical's mailed connect link (connections.md §3.5.4), held by the directory.
+ *
+ * What the row is FOR is the whole list of cases: a link a bureau mails to a client company's
+ * provider administrator is spent exactly once (two racing callbacks, one connection), can be
+ * withdrawn before it is opened, lapses on its own, and belongs to one scope — another scope's
+ * id answers as an absent one. Restore is the callback's undo when the credential store
+ * fails, and must not be a way to resurrect a revocation or a lapsed link.
+ *
+ * Expiry is asserted with links minted already lapsed rather than by sleeping: the store takes
+ * the expiry it is given, and the hosted adapter has no clock a suite could move.
+ *
+ * Every move commits with its audit row or not at all. The audit failure is injected as a
+ * trigger on the directory's admin log (`exec`), the one fault both stores raise the same way.
+ */
+export declare function connectLinkContractSuite(adapterName: string, makeFixture: () => Promise<ScopeHostFixture>, exec: DirectoryExec): void;
+//# sourceMappingURL=connect-link-suite.d.ts.map

package/dist/connect-link-suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-link-suite.d.ts","sourceRoot":"","sources":["../src/connect-link-suite.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAC5C,IAAI,EAAE,aAAa,GAClB,IAAI,CAsON"}

package/dist/connect-link-suite.js

@@ -0,0 +1,215 @@
+import { describe, it, expect, beforeAll, afterAll } from 'vitest';
+import { connectLinkId, platformActorId, principalId, scopeId, tenantId, } from '@substrat-run/contracts';
+import { ulid } from '@substrat-run/kernel';
+/**
+ * A vertical's mailed connect link (connections.md §3.5.4), held by the directory.
+ *
+ * What the row is FOR is the whole list of cases: a link a bureau mails to a client company's
+ * provider administrator is spent exactly once (two racing callbacks, one connection), can be
+ * withdrawn before it is opened, lapses on its own, and belongs to one scope — another scope's
+ * id answers as an absent one. Restore is the callback's undo when the credential store
+ * fails, and must not be a way to resurrect a revocation or a lapsed link.
+ *
+ * Expiry is asserted with links minted already lapsed rather than by sleeping: the store takes
+ * the expiry it is given, and the hosted adapter has no clock a suite could move.
+ *
+ * Every move commits with its audit row or not at all. The audit failure is injected as a
+ * trigger on the directory's admin log (`exec`), the one fault both stores raise the same way.
+ */
+export function connectLinkContractSuite(adapterName, makeFixture, exec) {
+    describe(`connect links (connections.md §3.5.4): ${adapterName}`, () => {
+        let fixture;
+        let host;
+        const staff = platformActorId.parse(ulid());
+        const admin = principalId.parse(ulid());
+        const t1 = tenantId.parse(ulid());
+        const t2 = tenantId.parse(ulid());
+        const s1 = scopeId.parse(ulid());
+        const s2 = scopeId.parse(ulid()); // same tenant, another install
+        const s3 = scopeId.parse(ulid()); // another tenant
+        const vertical = 'bureau-books';
+        const week = () => new Date(Date.now() + 7 * 86_400_000).toISOString();
+        const lapsed = () => new Date(Date.now() - 60_000).toISOString();
+        beforeAll(async () => {
+            fixture = await makeFixture();
+            host = fixture.host;
+            await host.admin.createTenant(staff, { id: t1, slug: `cl-${t1.slice(-10).toLowerCase()}`, name: 'Bureau' });
+            await host.admin.createTenant(staff, { id: t2, slug: `cl-${t2.slice(-10).toLowerCase()}`, name: 'Other' });
+            await host.provisionScope(staff, { tenantId: t1, scopeId: s1, vertical });
+            await host.provisionScope(staff, { tenantId: t1, scopeId: s2, vertical });
+            await host.provisionScope(staff, { tenantId: t2, scopeId: s3, vertical });
+        });
+        afterAll(async () => {
+            await fixture.cleanup();
+        });
+        const mint = (over = {}) => host.admin.mintConnectLink(staff, {
+            tenantId: over.tenantId ?? t1,
+            scopeId: over.scopeId ?? s1,
+            vertical,
+            provider: 'fortnox',
+            createdBy: admin,
+            expiresAt: over.expiresAt ?? week(),
+            ...(over.subjectRef ? { subjectRef: over.subjectRef } : {}),
+            returnUrl: 'https://books.bureau.example/clients/42',
+        });
+        const keyOf = (l) => ({ tenantId: l.tenantId, scopeId: l.scopeId, id: l.id });
+        const consume = (l, accountRef = '123456') => host.admin.consumeConnectLink(staff, { ...keyOf(l), provider: 'fortnox', accountRef, accountLabel: 'Testbolaget AB' });
+        it('mints an outstanding row carrying who authorized it and what it is for', async () => {
+            const link = await mint({ subjectRef: 'client-42' });
+            expect(link).toMatchObject({
+                tenantId: t1,
+                scopeId: s1,
+                vertical,
+                provider: 'fortnox',
+                status: 'outstanding',
+                createdBy: admin,
+                subjectRef: 'client-42',
+                returnUrl: 'https://books.bureau.example/clients/42',
+                usedAt: null,
+                accountRef: null,
+                accountLabel: null,
+            });
+            expect(await host.admin.getConnectLink(staff, keyOf(link))).toEqual(link);
+            const listed = await host.admin.listConnectLinks(staff, { tenantId: t1, scopeId: s1, outstandingOnly: true });
+            expect(listed.map((l) => l.id)).toContain(link.id);
+        });
+        it('is spent exactly once, recording what the consent attached', async () => {
+            const link = await mint();
+            const first = await consume(link);
+            expect(first.ok).toBe(true);
+            if (first.ok) {
+                expect(first.link).toMatchObject({ status: 'used', accountRef: '123456', accountLabel: 'Testbolaget AB' });
+                expect(first.link.usedAt).not.toBeNull();
+            }
+            // A forwarded mail, a reloaded callback: the second spend answers `used`, changes nothing.
+            expect(await consume(link, '999999')).toEqual({ ok: false, reason: 'used' });
+            expect((await host.admin.getConnectLink(staff, keyOf(link)))?.accountRef).toBe('123456');
+        });
+        it('settles two racing consumes with exactly one winner', async () => {
+            const link = await mint();
+            const results = await Promise.all([consume(link, 'a'), consume(link, 'b'), consume(link, 'c')]);
+            expect(results.filter((r) => r.ok)).toHaveLength(1);
+            expect(results.filter((r) => !r.ok)).toEqual([
+                { ok: false, reason: 'used' },
+                { ok: false, reason: 'used' },
+            ]);
+        });
+        it('refuses a link that has lapsed, and lists it as nothing that still opens', async () => {
+            const link = await mint({ expiresAt: lapsed() });
+            expect(await consume(link)).toEqual({ ok: false, reason: 'expired' });
+            const open = await host.admin.listConnectLinks(staff, { tenantId: t1, scopeId: s1, outstandingOnly: true });
+            expect(open.map((l) => l.id)).not.toContain(link.id);
+            // The unfiltered list is the history, lapsed rows included.
+            const all = await host.admin.listConnectLinks(staff, { tenantId: t1, scopeId: s1 });
+            expect(all.map((l) => l.id)).toContain(link.id);
+        });
+        it('a revoked link refuses, and revoking is idempotent', async () => {
+            const link = await mint();
+            expect((await host.admin.revokeConnectLink(staff, keyOf(link)))?.status).toBe('revoked');
+            expect(await consume(link)).toEqual({ ok: false, reason: 'revoked' });
+            expect((await host.admin.revokeConnectLink(staff, keyOf(link)))?.status).toBe('revoked');
+            // A spent link has nothing left to revoke — it answers as it stands.
+            const spent = await mint();
+            await consume(spent);
+            expect((await host.admin.revokeConnectLink(staff, keyOf(spent)))?.status).toBe('used');
+        });
+        it('belongs to one scope: another scope or tenant naming its id finds nothing', async () => {
+            const link = await mint();
+            for (const key of [
+                { tenantId: t1, scopeId: s2, id: link.id },
+                { tenantId: t2, scopeId: s3, id: link.id },
+                { tenantId: t2, scopeId: s1, id: link.id },
+            ]) {
+                expect(await host.admin.getConnectLink(staff, key)).toBeUndefined();
+                expect(await host.admin.revokeConnectLink(staff, key)).toBeUndefined();
+                expect(await host.admin.consumeConnectLink(staff, { ...key, provider: 'fortnox', accountRef: 'x' })).toEqual({ ok: false, reason: 'unknown' });
+                expect(await host.admin.restoreConnectLink(staff, key)).toBe(false);
+            }
+            expect((await host.admin.listConnectLinks(staff, { tenantId: t1, scopeId: s2 })).map((l) => l.id)).not.toContain(link.id);
+            expect((await host.admin.listConnectLinks(staff, { tenantId: t2 })).map((l) => l.id)).not.toContain(link.id);
+            // A round for another provider is not this link's round either.
+            expect(await host.admin.consumeConnectLink(staff, { ...keyOf(link), provider: 'scrive', accountRef: 'x' })).toEqual({ ok: false, reason: 'unknown' });
+            // And none of the above touched it.
+            expect((await host.admin.getConnectLink(staff, keyOf(link)))?.status).toBe('outstanding');
+            expect(await host.admin.getConnectLink(staff, { tenantId: t1, scopeId: s1, id: connectLinkId.parse(ulid()) })).toBeUndefined();
+        });
+        it('restore un-spends a used link after a failed store — and only that', async () => {
+            const link = await mint();
+            expect((await consume(link)).ok).toBe(true);
+            expect(await host.admin.restoreConnectLink(staff, keyOf(link))).toBe(true);
+            expect(await host.admin.getConnectLink(staff, keyOf(link))).toMatchObject({
+                status: 'outstanding',
+                usedAt: null,
+                accountRef: null,
+                accountLabel: null,
+            });
+            // Outstanding again, so a fresh consent round can spend it.
+            expect((await consume(link)).ok).toBe(true);
+            // An outstanding link has nothing to restore; a revocation is never undone by it.
+            const outstanding = await mint();
+            expect(await host.admin.restoreConnectLink(staff, keyOf(outstanding))).toBe(false);
+            await host.admin.revokeConnectLink(staff, keyOf(outstanding));
+            expect(await host.admin.restoreConnectLink(staff, keyOf(outstanding))).toBe(false);
+            expect((await host.admin.getConnectLink(staff, keyOf(outstanding)))?.status).toBe('revoked');
+        });
+        it('lists only the ids it is given, and only those in the named tenant and scope', async () => {
+            const a = await mint();
+            const b = await mint();
+            const elsewhere = await mint({ scopeId: s2 });
+            const other = await mint({ tenantId: t2, scopeId: s3 });
+            const ids = [a.id, b.id, elsewhere.id, other.id, connectLinkId.parse(ulid())];
+            const named = await host.admin.listConnectLinks(staff, { tenantId: t1, scopeId: s1, ids });
+            expect(named.map((l) => l.id).sort()).toEqual([a.id, b.id].sort());
+            expect(await host.admin.listConnectLinks(staff, { tenantId: t1, scopeId: s1, ids: [] })).toEqual([]);
+        });
+        describe('a move commits with its audit row, or not at all', () => {
+            /** Fail the admin-log insert for `action` in this suite's tenant until `heal`. */
+            const failAudit = async (action) => {
+                await exec(host, `CREATE TRIGGER fault_connect_link_audit BEFORE INSERT ON _substrat_admin_log
+           WHEN NEW.action = '${action}' AND NEW.tenant_id = '${t1}'
+           BEGIN SELECT RAISE(ABORT, 'injected fault'); END`);
+                return () => exec(host, 'DROP TRIGGER fault_connect_link_audit');
+            };
+            const statusOf = async (l) => (await host.admin.getConnectLink(staff, keyOf(l)))?.status;
+            it('a consume whose audit row fails leaves the link outstanding, and the retry spends it', async () => {
+                const link = await mint();
+                const heal = await failAudit('consumeConnectLink');
+                await expect(consume(link)).rejects.toThrow(/injected fault/);
+                expect(await statusOf(link)).toBe('outstanding');
+                await heal();
+                expect((await consume(link)).ok).toBe(true);
+            });
+            it('a mint, revoke or restore whose audit row fails changes nothing', async () => {
+                const before = (await host.admin.listConnectLinks(staff, { tenantId: t1, scopeId: s1 })).length;
+                let heal = await failAudit('mintConnectLink');
+                await expect(mint()).rejects.toThrow(/injected fault/);
+                await heal();
+                expect(await host.admin.listConnectLinks(staff, { tenantId: t1, scopeId: s1 })).toHaveLength(before);
+                const open = await mint();
+                heal = await failAudit('revokeConnectLink');
+                await expect(host.admin.revokeConnectLink(staff, keyOf(open))).rejects.toThrow(/injected fault/);
+                await heal();
+                expect(await statusOf(open)).toBe('outstanding');
+                const spent = await mint();
+                expect((await consume(spent)).ok).toBe(true);
+                heal = await failAudit('restoreConnectLink');
+                await expect(host.admin.restoreConnectLink(staff, keyOf(spent))).rejects.toThrow(/injected fault/);
+                await heal();
+                expect(await statusOf(spent)).toBe('used');
+            });
+        });
+        it('audits mint, revoke, consume and restore — and not a revoke that changed nothing', async () => {
+            const link = await mint();
+            await host.admin.revokeConnectLink(staff, keyOf(link));
+            await host.admin.revokeConnectLink(staff, keyOf(link));
+            const spent = await mint();
+            await consume(spent);
+            await host.admin.restoreConnectLink(staff, keyOf(spent));
+            const ids = [link.id, spent.id];
+            const rows = (await host.admin.auditLog(staff, { tenantId: t1 })).filter((r) => ids.includes(r.after?.id ?? ''));
+            expect(rows.map((r) => r.action).sort()).toEqual(['consumeConnectLink', 'mintConnectLink', 'mintConnectLink', 'restoreConnectLink', 'revokeConnectLink'].sort());
+            expect(rows.every((r) => r.scopeId === s1)).toBe(true);
+        });
+    });
+}
+//# sourceMappingURL=connect-link-suite.js.map

package/dist/connect-link-suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-link-suite.js","sourceRoot":"","sources":["../src/connect-link-suite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EACL,aAAa,EACb,eAAe,EACf,WAAW,EACX,OAAO,EACP,QAAQ,GAIT,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,IAAI,EAAkB,MAAM,sBAAsB,CAAC;AAI5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAmB,EACnB,WAA4C,EAC5C,IAAmB;IAEnB,QAAQ,CAAC,0CAA0C,WAAW,EAAE,EAAE,GAAG,EAAE;QACrE,IAAI,OAAyB,CAAC;QAC9B,IAAI,IAAe,CAAC;QACpB,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,+BAA+B;QACjE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,iBAAiB;QACnD,MAAM,QAAQ,GAAG,cAAc,CAAC;QAChC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QAEjE,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YACpB,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5G,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3G,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1E,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;YAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,CAAC,IAAI,GAAwF,EAAE,EAAE,EAAE,CAC9G,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE;YAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;YAC3B,QAAQ;YACR,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE;YACnC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,SAAS,EAAE,yCAAyC;SACrD,CAAC,CAAC;QACL,MAAM,KAAK,GAAG,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3F,MAAM,OAAO,GAAG,CAAC,CAAc,EAAE,UAAU,GAAG,QAAQ,EAAE,EAAE,CACxD,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAEzH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;YACtF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;gBACzB,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE;gBACX,QAAQ;gBACR,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,aAAa;gBACrB,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,WAAW;gBACvB,SAAS,EAAE,yCAAyC;gBACpD,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9G,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAC3G,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC3C,CAAC;YACD,2FAA2F;YAC3F,MAAM,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7E,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAChG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC3C,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;gBAC7B,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;aAC9B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;YACxF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5G,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrD,4DAA4D;YAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YACpF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzF,MAAM,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACtE,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzF,qEAAqE;YACrE,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;YACzF,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;YAC1B,KAAK,MAAM,GAAG,IAAI;gBAChB,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;gBAC1C,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;gBAC1C,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;aAC3C,EAAE,CAAC;gBACF,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;gBACpE,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;gBACvE,MAAM,CACJ,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAC7F,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC5C,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAC9G,IAAI,CAAC,EAAE,CACR,CAAC;YACF,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7G,gEAAgE;YAChE,MAAM,CACJ,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CACpG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5C,oCAAoC;YACpC,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1F,MAAM,CACJ,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CACvG,CAAC,aAAa,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3E,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;gBACxE,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,4DAA4D;YAC5D,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE5C,kFAAkF;YAClF,MAAM,WAAW,GAAG,MAAM,IAAI,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnF,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YAC9D,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnF,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;YAC5F,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAChE,kFAAkF;YAClF,MAAM,SAAS,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;gBACzC,MAAM,IAAI,CACR,IAAI,EACJ;gCACsB,MAAM,0BAA0B,EAAE;4DACN,CACnD,CAAC;gBACF,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;YACnE,CAAC,CAAC;YACF,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAc,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;YAEtG,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;gBACpG,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,oBAAoB,CAAC,CAAC;gBACnD,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAC9D,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACjD,MAAM,IAAI,EAAE,CAAC;gBACb,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;gBAC/E,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBAChG,IAAI,IAAI,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,CAAC;gBAC9C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACvD,MAAM,IAAI,EAAE,CAAC;gBACb,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAErG,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;gBAC1B,IAAI,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,CAAC;gBAC5C,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACjG,MAAM,IAAI,EAAE,CAAC;gBACb,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAEjD,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;gBAC3B,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7C,IAAI,GAAG,MAAM,SAAS,CAAC,oBAAoB,CAAC,CAAC;gBAC7C,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBACnG,MAAM,IAAI,EAAE,CAAC;gBACb,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;YAChG,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACvD,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACzD,MAAM,GAAG,GAAa,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7E,GAAG,CAAC,QAAQ,CAAE,CAAC,CAAC,KAAgC,EAAE,EAAE,IAAI,EAAE,CAAC,CAC5D,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAC9C,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAC/G,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/entity-state-migration-suite.d.ts

@@ -0,0 +1,16 @@
+import { type ScopeId, type TenantId } from '@substrat-run/contracts';
+import type { ScopeHostFixture } from './scope-host-suite.js';
+type Row = Record<string, unknown>;
+/** The adapter's way past `ctx.sql` and into its migration bookkeeping. */
+export interface RawScopeAccess {
+    /** One statement on the scope's own database; a SELECT's rows. */
+    sql(tenant: TenantId, scope: ScopeId, sql: string): Promise<Row[]>;
+    /**
+     * Take `moduleId@version` out of the scope's journal AND out of whatever the host remembers of
+     * it, so the next pass runs that migration again.
+     */
+    forget(tenant: TenantId, scope: ScopeId, moduleId: string, version: string): Promise<void>;
+}
+export declare function entityStateMigrationContractSuite(adapterName: string, makeFixture: () => Promise<ScopeHostFixture>, raw: RawScopeAccess): void;
+export {};
+//# sourceMappingURL=entity-state-migration-suite.d.ts.map

package/dist/entity-state-migration-suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-state-migration-suite.d.ts","sourceRoot":"","sources":["../src/entity-state-migration-suite.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAkE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEtI,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEnC,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnE;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5F;AAKD,wBAAgB,iCAAiC,CAC/C,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAC5C,GAAG,EAAE,cAAc,GAClB,IAAI,CAyUN"}

package/dist/entity-state-migration-suite.js

@@ -0,0 +1,305 @@
+/**
+ * Contract suite for an authored migration that rebuilds a table the kernel derived onto (#2090).
+ *
+ * SQLite's create-copy-rename rebuild drops a table's triggers and indexes with it. On a table
+ * that declares archive or trash, those are the kernel's guard triggers and its partial list
+ * indexes — and the migrations that made them are journaled, so they never run again. A
+ * migration runs on the scope's own handle, so `ctx.sql`'s after-DDL check never sees it
+ * either. What this suite holds the migration pass to:
+ *
+ * - the derived objects come back, and the guard holds after them;
+ * - a migration that takes a STATE column away fails the scope closed, rolled back, with the
+ *   rows keeping their state — a column cannot be re-derived without inventing what it held;
+ * - a rebuild split over two migrations still copies its binned rows, so the guard comes back
+ *   only after the last migration of the pass;
+ * - a rebuilt searchable table gets its search triggers back and its index rebuilt, so text
+ *   rewritten or deleted afterwards — what subject erasure does — leaves the index;
+ * - an authored rebuild of a table that declares no state runs as it always did.
+ *
+ * Each case provisions a scope of its own. Most make it forget ONE rebuild and run the pass
+ * again: what a redeploy that added that rebuild to a live scope does. The rest change the
+ * schema by hand with every migration journaled — a scope stripped before the pass checked, or
+ * left with a derived object that has the right name and the wrong definition — and run
+ * `migrateScope`, which repairs with nothing pending.
+ */
+import { describe, it, expect, beforeAll, afterAll } from 'vitest';
+import { permissionKey, platformActorId, principalId, scopeId, tenantId } from '@substrat-run/contracts';
+import { ulid } from '@substrat-run/kernel';
+import { rebuildMod } from './entity-state-module.js';
+const MODULE = '@test/rebuild';
+const STATEFUL = new Set(['rbnote', 'rbcut', 'rbsplit']);
+export function entityStateMigrationContractSuite(adapterName, makeFixture, raw) {
+    describe(`an authored migration rebuilding a table the kernel derived onto (#2090): ${adapterName}`, () => {
+        let fixture;
+        let host;
+        const t = tenantId.parse(ulid());
+        const staff = platformActorId.parse(ulid());
+        const keeper = principalId.parse(ulid());
+        beforeAll(async () => {
+            fixture = await makeFixture();
+            host = fixture.host;
+            host.registerModule(rebuildMod);
+            await host.admin.createTenant(staff, { id: t, slug: `rebuild-${t.toLowerCase()}`, name: 'Rebuild' });
+            await host.admin.grantEntitlement(staff, t, 'rebuild');
+            await host.admin.defineRole(staff, t, {
+                key: 'rb-keeper',
+                permissions: ['rb:use', 'rb:archive', 'rb:trash'].map((k) => permissionKey.parse(k)),
+                source: 'vertical',
+            });
+            await host.admin.assignRole(staff, { principalId: keeper, roleKey: 'rb-keeper', node: { tenantId: t, scopeId: null } });
+        });
+        afterAll(async () => {
+            await fixture.cleanup();
+        });
+        const freshScope = async () => {
+            const s = scopeId.parse(ulid());
+            await host.provisionScope(staff, { tenantId: t, scopeId: s, vertical: 'rebuild-vertical' });
+            await host.admin.activateScope(staff, t, s);
+            return { s, stub: await host.getScope(keeper, t, s) };
+        };
+        /** A provisioned scope holding one active and one binned row of `entityType`. */
+        const scopeWith = async (entityType) => {
+            const { s, stub } = await freshScope();
+            const kept = ulid();
+            const binned = ulid();
+            await stub.invoke('rb/add', { entityType, id: kept, title: 'kept' });
+            await stub.invoke('rb/add', { entityType, id: binned, title: 'binned' });
+            if (STATEFUL.has(entityType))
+                await stub.invoke('rb/trash', { entityType, id: binned });
+            return { s, stub, kept, binned };
+        };
+        const objectsOn = async (s, table) => (await raw.sql(t, s, `SELECT name FROM sqlite_master WHERE tbl_name = '${table}' AND name LIKE '\\_substrat\\_%' ESCAPE '\\' ORDER BY name`)).map((r) => String(r['name']));
+        const columnsOf = async (s, table) => (await raw.sql(t, s, `SELECT name FROM pragma_table_info('${table}')`)).map((r) => String(r['name']));
+        /** Every kernel-prefixed object in the scope, name → its CREATE statement. */
+        const definitions = async (s) => Object.fromEntries((await raw.sql(t, s, `SELECT name, sql FROM sqlite_master WHERE name LIKE '\\_substrat\\_%' ESCAPE '\\' AND sql IS NOT NULL`))
+            .filter((r) => /^_substrat_(state|list|search)_/.test(String(r['name'])))
+            .map((r) => [String(r['name']), String(r['sql'])]));
+        /** Statements on the scope's own handle, one at a time — past `ctx.sql`, the journal untouched. */
+        const rawAll = async (s, statements) => {
+            for (const statement of statements)
+                await raw.sql(t, s, statement);
+        };
+        /** A rebuilt-by-hand table, as a migration journaled before #2090 would have left it. */
+        const rebuild = (table, select = '*') => [
+            `CREATE TABLE ${table}_new AS SELECT ${select} FROM ${table}`,
+            `DROP TABLE ${table}`,
+            `ALTER TABLE ${table}_new RENAME TO ${table}`,
+        ];
+        it('puts back the guard triggers and list indexes a rebuild dropped, and the guard holds after it', async () => {
+            const { s, stub, binned } = await scopeWith('rbnote');
+            const derived = await objectsOn(s, 'rb_notes');
+            expect(derived).toEqual([
+                '_substrat_list_test_rebuild_rbnote_title',
+                '_substrat_list_test_rebuild_rbnote_title_archived',
+                '_substrat_list_test_rebuild_rbnote_title_trashed',
+                '_substrat_state_rb_notes_born',
+                '_substrat_state_rb_notes_moved',
+            ]);
+            await raw.forget(t, s, MODULE, '0002-rebuild-notes');
+            expect(await host.migrateScope(t, s)).toMatchObject({ status: 'migrated' });
+            expect(await objectsOn(s, 'rb_notes')).toEqual(derived);
+            // The guard, past `ctx.sql`: a row moves only through a kernel verb, and is never born binned.
+            await expect(raw.sql(t, s, `UPDATE rb_notes SET _substrat_trashed_at = NULL WHERE id = '${binned}'`)).rejects.toThrow(/moves only through ctx\.archive/);
+            await expect(raw.sql(t, s, `INSERT INTO rb_notes (id, title, _substrat_archived_at) VALUES ('${ulid()}', 'x', '2026')`)).rejects.toThrow(/never inserted archived or trashed/);
+            // The rows kept their state through the rebuild, and the kernel's own move still passes.
+            expect(await stub.invoke('rb/state', { entityType: 'rbnote', id: binned })).toBe('trashed');
+            await stub.invoke('rb/restore', { entityType: 'rbnote', id: binned });
+            expect(await stub.invoke('rb/state', { entityType: 'rbnote', id: binned })).toBe('active');
+        });
+        it('fails the scope closed when a migration drops a state column — rolled back, every row keeping its state', async () => {
+            const { s, binned } = await scopeWith('rbcut');
+            const before = await objectsOn(s, 'rb_cut');
+            // Not the last of its pass, so nothing after it gets the chance to cover for it.
+            await raw.forget(t, s, MODULE, '0003-rebuild-cut');
+            await raw.forget(t, s, MODULE, '0004-rebuild-plain');
+            const outcome = await host.migrateScope(t, s);
+            expect(outcome).toMatchObject({ status: 'failed', failure: { version: `${MODULE}@0003-rebuild-cut` } });
+            expect(outcome.status === 'failed' && outcome.failure.error).toMatch(/migration @test\/rebuild@0003-rebuild-cut left 'rb_cut' without _substrat_trashed_at/);
+            expect((await host.admin.getScopeRecord(staff, t, s))?.migrationFailure?.version).toBe(`${MODULE}@0003-rebuild-cut`);
+            // Nothing is served, and a second pass fails the same way: it is the migration, not a moment.
+            await expect(host.getScope(keeper, t, s).then((stub) => stub.invoke('rb/state', { entityType: 'rbcut', id: binned }))).rejects.toThrow(/without _substrat_trashed_at/);
+            expect(await host.migrateScope(t, s)).toMatchObject({ status: 'failed' });
+            // Rolled back: the column, the binned row in it, and the guard are all where they were.
+            expect(await columnsOf(s, 'rb_cut')).toContain('_substrat_trashed_at');
+            expect(await raw.sql(t, s, `SELECT _substrat_trashed_at IS NOT NULL AS binned FROM rb_cut WHERE id = '${binned}'`)).toEqual([
+                { binned: 1 },
+            ]);
+            expect(await objectsOn(s, 'rb_cut')).toEqual(before);
+        });
+        it('lets a rebuild split over two migrations copy its binned rows, and puts the guard back after the last', async () => {
+            const { s, stub, binned } = await scopeWith('rbsplit');
+            const before = await objectsOn(s, 'rb_split');
+            // A guard put back between the two would refuse the binned row the second one copies.
+            await raw.forget(t, s, MODULE, '0005-split-aside');
+            await raw.forget(t, s, MODULE, '0006-split-copy');
+            expect(await host.migrateScope(t, s)).toMatchObject({ status: 'migrated' });
+            expect(await objectsOn(s, 'rb_split')).toEqual(before);
+            expect(await stub.invoke('rb/state', { entityType: 'rbsplit', id: binned })).toBe('trashed');
+            await expect(raw.sql(t, s, `UPDATE rb_split SET _substrat_trashed_at = NULL WHERE id = '${binned}'`)).rejects.toThrow(/moves only through ctx\.archive/);
+        });
+        it('rebuilds a searchable table’s index and its triggers, so rewritten or deleted text leaves search', async () => {
+            const { s, stub } = await freshScope();
+            const [rewritten, deleted, untouched] = [ulid(), ulid(), ulid()];
+            await stub.invoke('rb/add', { entityType: 'rbsearch', id: rewritten, title: 'alpha secret' });
+            await stub.invoke('rb/add', { entityType: 'rbsearch', id: deleted, title: 'beta private' });
+            await stub.invoke('rb/add', { entityType: 'rbsearch', id: untouched, title: 'delta plain' });
+            const before = await objectsOn(s, 'rb_search');
+            expect(before).toEqual(['ad', 'ai', 'au'].map((s) => `_substrat_search_test_rebuild_rbsearch_${s}`));
+            // The rebuild copies the rows in reverse, so every rowid the old index points at moves.
+            await raw.forget(t, s, MODULE, '0007-rebuild-search');
+            expect(await host.migrateScope(t, s)).toMatchObject({ status: 'migrated' });
+            expect(await objectsOn(s, 'rb_search')).toEqual(before);
+            expect(await stub.invoke('rb/search', { term: 'alpha' })).toEqual([rewritten]);
+            expect(await stub.invoke('rb/search', { term: 'delta' })).toEqual([untouched]);
+            // Erasure's two shapes: the text rewritten in place, and the row removed.
+            await stub.invoke('rb/retitle', { id: rewritten, title: 'gamma redacted' });
+            await stub.invoke('rb/remove', { id: deleted });
+            expect(await stub.invoke('rb/search', { term: 'secret' })).toEqual([]);
+            expect(await stub.invoke('rb/search', { term: 'private' })).toEqual([]);
+            expect(await stub.invoke('rb/search', { term: 'gamma' })).toEqual([rewritten]);
+        });
+        // -- scopes already stripped, every migration journaled (Codex r1 on #2091) -----------------
+        it('repairs a scope a journaled rebuild already stripped — with nothing pending, on the next pass', async () => {
+            const { s, stub, binned } = await scopeWith('rbnote');
+            const said = ulid();
+            await stub.invoke('rb/add', { entityType: 'rbsearch', id: said, title: 'alpha secret' });
+            const before = await definitions(s);
+            await rawAll(s, [...rebuild('rb_notes'), ...rebuild('rb_search')]);
+            expect(Object.keys(await definitions(s))).not.toContain('_substrat_state_rb_notes_born');
+            expect(await host.migrateScope(t, s)).toMatchObject({ status: 'noop' });
+            expect(await definitions(s)).toEqual(before);
+            await expect(raw.sql(t, s, `UPDATE rb_notes SET _substrat_trashed_at = NULL WHERE id = '${binned}'`)).rejects.toThrow(/moves only through ctx\.archive/);
+            await stub.invoke('rb/retitle', { id: said, title: 'gamma redacted' });
+            expect(await stub.invoke('rb/search', { term: 'secret' })).toEqual([]);
+            expect(await stub.invoke('rb/search', { term: 'gamma' })).toEqual([said]);
+        });
+        it('re-creates a derived object present by name but not as the kernel defines it', async () => {
+            const { s, stub, binned } = await scopeWith('rbnote');
+            const said = ulid();
+            await stub.invoke('rb/add', { entityType: 'rbsearch', id: said, title: 'alpha secret' });
+            const before = await definitions(s);
+            await rawAll(s, [
+                // A search update trigger that keeps nothing in step: erased text would stay found.
+                'DROP TRIGGER _substrat_search_test_rebuild_rbsearch_au',
+                'CREATE TRIGGER _substrat_search_test_rebuild_rbsearch_au AFTER UPDATE ON rb_search BEGIN SELECT 1; END',
+                // A guard that never fires.
+                'DROP TRIGGER _substrat_state_rb_notes_moved',
+                'CREATE TRIGGER _substrat_state_rb_notes_moved BEFORE UPDATE OF _substrat_trashed_at ON rb_notes WHEN 0 BEGIN SELECT 1; END',
+                // A list index on the wrong columns, and one with the wrong partial predicate.
+                'DROP INDEX _substrat_list_test_rebuild_rbnote_title',
+                'CREATE INDEX _substrat_list_test_rebuild_rbnote_title ON rb_notes (id)',
+                'DROP INDEX _substrat_list_test_rebuild_rbnote_title_archived',
+                'CREATE INDEX _substrat_list_test_rebuild_rbnote_title_archived ON rb_notes (title, id) WHERE _substrat_archived_at IS NULL',
+            ]);
+            expect(await definitions(s)).not.toEqual(before);
+            expect(await host.migrateScope(t, s)).toMatchObject({ status: 'noop' });
+            expect(await definitions(s)).toEqual(before);
+            await expect(raw.sql(t, s, `UPDATE rb_notes SET _substrat_trashed_at = NULL WHERE id = '${binned}'`)).rejects.toThrow(/moves only through ctx\.archive/);
+            await stub.invoke('rb/retitle', { id: said, title: 'gamma redacted' });
+            expect(await stub.invoke('rb/search', { term: 'secret' })).toEqual([]);
+        });
+        it('fails closed on the next pass when a journaled state column is already gone — nothing is served', async () => {
+            const { s, binned } = await scopeWith('rbcut');
+            await rawAll(s, rebuild('rb_cut', 'id, title'));
+            const outcome = await host.migrateScope(t, s);
+            expect(outcome).toMatchObject({ status: 'failed', failure: { version: `${MODULE}@state/rbcut:trash` } });
+            expect(outcome.status === 'failed' && outcome.failure.error).toMatch(/an applied migration left 'rb_cut' without _substrat_trashed_at/);
+            await expect(host.getScope(keeper, t, s).then((stub) => stub.invoke('rb/state', { entityType: 'rbcut', id: binned }))).rejects.toThrow(/without _substrat_trashed_at/);
+        });
+        it('refuses a restore whose journal owes a table a state column the dump does not carry — the load rolls back whole', async () => {
+            const { s, stub, binned } = await scopeWith('rbcut');
+            const before = await definitions(s);
+            const dump = await host.admin.exportScope(staff, t, s);
+            const malformed = {
+                ...dump,
+                tables: dump.tables.map((table) => {
+                    if (table.name !== 'rb_cut')
+                        return table;
+                    const keep = table.columns.map((c, i) => (c === '_substrat_trashed_at' ? -1 : i)).filter((i) => i >= 0);
+                    return {
+                        ...table,
+                        ddl: `CREATE TABLE rb_cut (${keep.map((i) => `${table.columns[i]} TEXT`).join(', ')})`,
+                        columns: keep.map((i) => table.columns[i]),
+                        rows: table.rows.map((row) => keep.map((i) => row[i])),
+                    };
+                }),
+            };
+            await expect(host.restoreScope(staff, t, s, malformed)).rejects.toThrow(/the restored dump left 'rb_cut' without _substrat_trashed_at/);
+            // Nothing of the load committed: the column, the binned row and the guard are all as they were.
+            expect(await columnsOf(s, 'rb_cut')).toContain('_substrat_trashed_at');
+            expect(await definitions(s)).toEqual(before);
+            expect(await stub.invoke('rb/state', { entityType: 'rbcut', id: binned })).toBe('trashed');
+            // The twin: the same dump, unaltered, restores.
+            await host.restoreScope(staff, t, s, dump);
+            expect(await stub.invoke('rb/state', { entityType: 'rbcut', id: binned })).toBe('trashed');
+        });
+        it('repairs a search-only table a module rebuilt through ctx.sql, before its operation commits (Codex r2 on #2091)', async () => {
+            const { s, stub } = await freshScope();
+            const said = ulid();
+            await stub.invoke('rb/add', { entityType: 'rbsearch', id: said, title: 'alpha secret' });
+            const before = await definitions(s);
+            // Supported runtime DDL: `rb_search` declares no state, so no text guard stands in the way.
+            await stub.invoke('rb/ddl', { statements: rebuild('rb_search') });
+            expect(await definitions(s)).toEqual(before);
+            await stub.invoke('rb/retitle', { id: said, title: 'gamma redacted' });
+            expect(await stub.invoke('rb/search', { term: 'secret' })).toEqual([]);
+            expect(await stub.invoke('rb/search', { term: 'gamma' })).toEqual([said]);
+            await stub.invoke('rb/remove', { id: said });
+            expect(await stub.invoke('rb/search', { term: 'gamma' })).toEqual([]);
+        });
+        it('repairs between the statements of ONE ctx.sql call — a rebuild, a write and a read of the index see no stale hit (Codex r3)', async () => {
+            const { s, stub } = await freshScope();
+            const said = ulid();
+            await stub.invoke('rb/add', { entityType: 'rbsearch', id: said, title: 'alpha secret' });
+            const idx = '_substrat_search_test_rebuild_rbsearch';
+            const rows = await stub.invoke('rb/batch', {
+                sql: [
+                    ...rebuild('rb_search'),
+                    `UPDATE rb_search SET title = 'gamma redacted' WHERE id = '${said}'`,
+                    `SELECT COUNT(*) AS n FROM ${idx} WHERE ${idx} MATCH 'secret'`,
+                ].join(';\n'),
+            });
+            expect(rows).toEqual([{ n: 0 }]);
+            expect(await stub.invoke('rb/search', { term: 'gamma' })).toEqual([said]);
+        });
+        it('refuses a multi-statement schema change that binds parameters, and runs none of it', async () => {
+            const { s, stub } = await freshScope();
+            const before = await definitions(s);
+            await expect(stub.invoke('rb/ddl-bound', {})).rejects.toThrow(/binds parameters runs one statement/);
+            expect(await columnsOf(s, 'rb_plain')).toEqual(['id', 'title']);
+            expect(await definitions(s)).toEqual(before);
+        });
+        it('runs runtime DDL comment-blanked: a table created with comments can later drop its last column (#2084 × #2090)', async () => {
+            const { s, stub } = await freshScope();
+            const t2 = `rt_${ulid().toLowerCase()}`;
+            await stub.invoke('rb/ddl', {
+                statements: [`CREATE TABLE ${t2} (\n  id TEXT PRIMARY KEY, -- the id\n  note TEXT -- dropped later\n)`],
+            });
+            const stored = await raw.sql(t, s, `SELECT sql FROM sqlite_master WHERE name = '${t2}'`);
+            expect(String(stored[0]['sql'])).not.toMatch(/--/);
+            // workerd's SQLite refuses this rewrite of stored DDL with line comments before the last column.
+            await stub.invoke('rb/ddl', { statements: [`ALTER TABLE ${t2} DROP COLUMN note`] });
+            expect(await columnsOf(s, t2)).toEqual(['id']);
+        });
+        it('runs no DDL over a scope that already carries everything as the kernel emits it', async () => {
+            const { s } = await scopeWith('rbnote');
+            await host.migrateScope(t, s);
+            // A re-created object is a new `sqlite_master` row: the rowids are what a DROP-and-CREATE
+            // moves. (A Durable Object refuses `pragma_schema_version`.)
+            const catalogue = async () => raw.sql(t, s, 'SELECT rowid, name FROM sqlite_master ORDER BY rowid');
+            const before = await catalogue();
+            expect(await host.migrateScope(t, s)).toMatchObject({ status: 'noop' });
+            expect(await catalogue()).toEqual(before);
+        });
+        it('twin: a rebuild of a table that declares no state runs as before, and its list index comes back too', async () => {
+            const { s, stub } = await scopeWith('rbplain');
+            const before = await objectsOn(s, 'rb_plain');
+            expect(before).toEqual(['_substrat_list_test_rebuild_rbplain_title']);
+            await raw.forget(t, s, MODULE, '0004-rebuild-plain');
+            expect(await host.migrateScope(t, s)).toMatchObject({ status: 'migrated' });
+            expect(await stub.invoke('rb/titles', { entityType: 'rbplain' })).toEqual(['binned', 'kept']);
+            expect(await objectsOn(s, 'rb_plain')).toEqual(before);
+        });
+    });
+}
+//# sourceMappingURL=entity-state-migration-suite.js.map