@substrat-run/contract-tests 0.139.0 → 0.140.0

package/dist/scope-host-suite.js

@@ -1,6 +1,6 @@
 import { describe, it, expect, beforeAll, afterAll } from 'vitest';
 import { connectorCalls, connectorTestFetch, resetConnectorCalls } from './connector-fixture.js';
-import { connectionId, dataSubjectId, domainEvent, errorCodeOf, moduleId, SCOPE_GATE_REASONS, eventId, instant, moduleManifest, orgId, AUTO_ADMISSION_NOTE, permissionKey, platformActorId, platformRequestId, principalId, scopeId, tenantId, SCOPE_QUERY_ROW_MAX, KERNEL_AUTHORED_EVENT_TYPES, SWEEP_RUNS_KIND, SCOPE_TABLE_PAGE_MAX, } from '@substrat-run/contracts';
+import { connectionId, dataSubjectId, domainEvent, errorCodeOf, moduleId, SCOPE_GATE_REASONS, eventId, instant, moduleManifest, orgId, AUTO_ADMISSION_NOTE, permissionKey, platformActorId, platformRequestId, principalId, scopeId, tenantId, SCOPE_QUERY_ROW_MAX, KERNEL_AUTHORED_EVENT_TYPES, EMAIL_SENT, PLATFORM_REQUEST_ENTITY_TYPE, SEND_EMAIL_KIND, SWEEP_RUNS_KIND, SCOPE_TABLE_PAGE_MAX, } from '@substrat-run/contracts';
 import { INERT_SCOPE_REASON, isSearchIndexTable, platformIntentFailureMessage, REDACTED_DELIVERY_NOTE, REDACTED_FAILURE_NOTE, REDACTED_INTENT_MARKER, runPlatformSweep, startPlatformSweeper, createUlid, ulid, } from '@substrat-run/kernel';
 import { billedMod, contractTestBareOps, contractTestInitialModules, gateModManifest, lateMod, TEST_LIFECYCLE, testModManifest, victimModManifest, } from './modules.js';
 /**
@@ -273,6 +273,45 @@ export function scopeHostContractSuite(adapterName, makeFixture, opts = {}) {
             expect(settled.status).toBe('done');
             expect(JSON.parse(settled.result)).toEqual({ scopeId: 'NEWSITE' });
         });
+        it('a settle carrying an outcome event writes it once, as the kernel, with the settle (#2102)', async () => {
+            const stub = await host.getScope(alice, t1, s1);
+            const mail = { to: 'ada@example.com', subject: 'Hej', html: '<p>Hej</p>', text: 'Hej' };
+            const id = await stub.invoke('platform/request', { kind: SEND_EMAIL_KIND, payload: mail });
+            const mine = () => stub
+                .invoke('platform/outcome-events')
+                .then((rows) => rows.filter((r) => JSON.parse(r.payload).request === id));
+            const event = (request) => ({
+                type: EMAIL_SENT,
+                entity: { entityType: PLATFORM_REQUEST_ENTITY_TYPE, entityId: id },
+                payload: {
+                    request: platformRequestId.parse(request),
+                    about: null,
+                    sender: 'platform',
+                    messageId: 'msg-1',
+                    attempts: 1,
+                    code: null,
+                    status: null,
+                },
+            });
+            // Refused before anything is written: an event on a `pending` settle, or one naming
+            // another request. The row stays exactly as it was.
+            await expect(host.settlePlatformRequest(t1, s1, platformRequestId.parse(id), { status: 'pending', event: event(id) })).rejects.toThrow();
+            await expect(host.settlePlatformRequest(t1, s1, platformRequestId.parse(id), { status: 'done', event: event(ulid()) })).rejects.toThrow();
+            expect((await host.listPlatformRequests(t1, s1)).find((r) => r.id === id)?.attempts).toBe(0);
+            expect(await mine()).toEqual([]);
+            await host.settlePlatformRequest(t1, s1, platformRequestId.parse(id), { status: 'done', event: event(id) });
+            const written = await mine();
+            expect(written).toHaveLength(1);
+            expect(written[0].type).toBe(EMAIL_SENT);
+            expect(JSON.parse(written[0].actor)).toEqual({ system: '@substrat-run/kernel' });
+            expect([written[0].entity_type, written[0].entity_id]).toEqual([PLATFORM_REQUEST_ENTITY_TYPE, id]);
+            expect(JSON.parse(written[0].payload)).toMatchObject({ request: id, messageId: 'msg-1', sender: 'platform' });
+            // A repeated settle finds the row terminal: it moves nothing, so it writes nothing.
+            await host.settlePlatformRequest(t1, s1, platformRequestId.parse(id), { status: 'failed', event: event(id) });
+            expect(await mine()).toHaveLength(1);
+            const row = (await stub.invoke('platform/read-requests')).find((r) => r.id === id);
+            expect(row.status).toBe('done');
+        });
         it('a transient failure keeps the intent pending and preserves a two-phase result (retry)', async () => {
             const stub = await host.getScope(alice, t1, s1);
             const id = await stub.invoke('platform/request', { kind: 'provision-sibling', payload: {} });
@@ -4400,6 +4439,20 @@ export function scopeHostContractSuite(adapterName, makeFixture, opts = {}) {
                 expect(rotated?.after).toMatchObject({ id: row.id, rotatedBy: officeAdmin });
                 expect(JSON.stringify(log)).not.toContain('tok-relay-rotated');
             });
+            it('a rotation sets the expiry, keeps it when omitted, and clears it with null (#2100)', async () => {
+                const [row] = await host.admin.listConnections(staff, { tenantId: t1, vertical: 'callout' });
+                const expiry = async () => (await host.admin.listConnections(staff, { tenantId: t1, vertical: 'callout' })).find((c) => c.id === row.id)
+                    .expiresAt;
+                const at = '2027-10-07T12:00:00.000Z';
+                await host.admin.updateConnectionSecret(staff, row.id, { accessToken: 'tok-dated' }, at);
+                expect(await expiry()).toBe(at);
+                await host.admin.updateConnectionSecret(staff, row.id, { accessToken: 'tok-kept' });
+                expect(await expiry()).toBe(at);
+                // The credential that had an end was replaced by one that has none (a certificate → a
+                // client secret): the old end must not stay on the connection, reading as this one's.
+                await host.admin.updateConnectionSecret(staff, row.id, { accessToken: 'tok-undated' }, null);
+                expect(await expiry()).toBeNull();
+            });
             it('records health, and a success clears a prior error', async () => {
                 const [row] = await host.admin.listConnections(staff, {
                     tenantId: t1,