@substrat-run/contract-tests 0.139.0 → 0.140.0

package/dist/entity-trash-module.js

@@ -0,0 +1,287 @@
+/**
+ * The fixture behind `entityTrashContractSuite` (#119 PR 2): the host's trash refusal, the
+ * link refusal and the purge horizon, declared the way a vertical declares them — through
+ * `defineEntities`, `defineOperations`, `operationInputsOf` and `purgeSchedulesOf` — so the
+ * suite is held against the producers a vertical actually calls, not a hand-written copy.
+ *
+ * - `tbox` — archivable and trashable, purged after `TBOX_PURGE_DAYS` by `trash/delete-box`.
+ * - `tthing` — a child of `tbox`, for `ctx.link` / `ctx.relink`.
+ * - `tkeep` — trashable with NO horizon: in the bin forever, whatever the sweep does.
+ *
+ * One operation per refusal shape: refused by default (`rename-box`), `trashed: 'admits'`
+ * (`restore-box`, `peek-box`, `link-thing`, `move-thing`), `trashed: 'purges'`
+ * (`delete-box`), and a check `resolved` in the handler (`touch-thing`) the host cannot see.
+ */
+import { z } from 'zod';
+import { defineEntities, defineOperations, manifestEntities, manifestOperations, moduleManifest, operationInputsOf, purgeSchedulesOf, } from '@substrat-run/contracts';
+import { assertAllowed, readHistory } from '@substrat-run/kernel';
+export const TRASH_MODULE_ID = '@test/trash';
+export const TBOX_PURGE_DAYS = 7;
+/** A box whose purge always fails after deleting — a crash inside the purge's transaction. */
+export const EXPLODING_BOX = 'explode';
+export const trashEntities = defineEntities({
+    tbox: {
+        table: 'trash_boxes',
+        fields: z.object({ id: z.string(), name: z.string() }),
+        archive: { permission: 'box:archive' },
+        trash: { permission: 'box:trash', purgeAfterDays: TBOX_PURGE_DAYS },
+    },
+    tthing: {
+        table: 'trash_things',
+        fields: z.object({ id: z.string(), box_id: z.string() }),
+        parents: ['tbox'],
+    },
+    tkeep: {
+        table: 'trash_keeps',
+        fields: z.object({ id: z.string() }),
+        trash: { permission: 'box:trash' },
+    },
+});
+const PERMISSIONS = ['box:read', 'box:write', 'box:archive', 'box:trash', 'box:delete'];
+const boxId = z.object({ boxId: z.string() });
+const box = (key) => ({ key, entity: 'tbox', idFrom: 'boxId' });
+const ok = z.object({ ok: z.boolean() });
+export const trashOperations = defineOperations(trashEntities, PERMISSIONS)({
+    'trash/add-box': {
+        summary: 'Add a box',
+        permission: 'box:write',
+        input: z.object({ id: z.string(), name: z.string() }),
+        output: ok,
+    },
+    'trash/add-keep': {
+        summary: 'Add a keep',
+        permission: 'box:write',
+        input: z.object({ id: z.string() }),
+        output: ok,
+    },
+    'trash/bin-many': {
+        summary: 'Add and bin many boxes in one call — the fixture for a full purge batch',
+        permission: 'box:write',
+        input: z.object({ prefix: z.string(), count: z.number().int().positive() }),
+        output: z.object({ ids: z.array(z.string()) }),
+    },
+    'trash/rename-box': {
+        summary: 'Rename a box — refused on a trashed one by the host',
+        permission: box('box:write'),
+        input: z.object({ boxId: z.string(), name: z.string() }),
+        output: ok,
+    },
+    'trash/archive-box': { summary: 'Archive a box', permission: box('box:archive'), input: boxId, output: ok },
+    'trash/trash-box': { summary: 'Bin a box', permission: box('box:trash'), input: boxId, output: ok },
+    'trash/trash-keep': {
+        summary: 'Bin a keep',
+        permission: { key: 'box:trash', entity: 'tkeep', idFrom: 'keepId' },
+        input: z.object({ keepId: z.string() }),
+        output: ok,
+    },
+    'trash/restore-box': {
+        summary: 'Restore a box from the bin',
+        permission: box('box:trash'),
+        trashed: 'admits',
+        input: boxId,
+        output: ok,
+    },
+    'trash/peek-box': {
+        summary: "A box's state, binned or not",
+        permission: box('box:read'),
+        trashed: 'admits',
+        input: boxId,
+        output: z.object({ state: z.string().nullable() }),
+    },
+    'trash/delete-box': {
+        summary: 'Delete a box and its things for good — the purge horizon runs this',
+        permission: box('box:delete'),
+        trashed: 'purges',
+        // Strict: a purge's parsed input is the id and nothing else, which registration requires.
+        input: z.strictObject({ boxId: z.string() }),
+        output: z.object({ ok: z.boolean(), boxId: z.string() }),
+        emits: { entity: 'tbox', entityIdFrom: 'boxId', type: 'trashbox.deleted', schemaVersion: 1, piiClass: 'none' },
+    },
+    'trash/other-delete': {
+        summary: 'Another operation checking the purge key — the system principal may not run it',
+        permission: box('box:delete'),
+        input: boxId,
+        output: ok,
+    },
+    'trash/link-thing': {
+        summary: 'Hang a thing off a box — admits a binned box, so ctx.link is what refuses',
+        permission: box('box:write'),
+        trashed: 'admits',
+        input: z.object({ boxId: z.string(), thingId: z.string() }),
+        output: ok,
+    },
+    'trash/move-thing': {
+        summary: 'Move a thing to another box — admits a binned box, so ctx.relink is what refuses',
+        permission: box('box:write'),
+        trashed: 'admits',
+        input: z.object({ boxId: z.string(), thingId: z.string(), fromBoxId: z.string() }),
+        output: ok,
+    },
+    'trash/touch-thing': {
+        summary: 'Touch a thing — its check is resolved, so the host cannot refuse it (the stated gap)',
+        permission: { key: 'box:write', entity: 'tbox', resolved: 'the box the thing is in' },
+        input: z.object({ thingId: z.string() }),
+        output: ok,
+    },
+    'trash/box-exists': {
+        summary: 'Whether a box row exists at all',
+        permission: 'box:read',
+        input: boxId,
+        output: z.object({ exists: z.boolean(), things: z.number() }),
+    },
+    'trash/ddl': {
+        summary: "Runtime DDL through ctx.sql — after which the kernel checks every stateful table is intact",
+        permission: 'box:write',
+        input: z.object({ table: z.string() }),
+        output: ok,
+    },
+    'trash/history': {
+        summary: "A box's event history, after it is gone too",
+        permission: 'box:read',
+        input: boxId,
+        output: z.object({ entries: z.array(z.unknown()) }),
+    },
+});
+export const trashModManifest = moduleManifest.parse({
+    id: TRASH_MODULE_ID,
+    version: '1.0.0',
+    kernelContract: '^0.0.1',
+    migrations: { journalDir: './migrations', compatibleFrom: '1.0.0' },
+    ...manifestOperations(trashOperations, {
+        permissions: {
+            'box:read': 'read boxes',
+            'box:write': 'write boxes',
+            'box:archive': 'archive a box',
+            'box:trash': 'bin a box or restore it',
+            'box:delete': 'delete a box for good',
+        },
+        consumes: [],
+    }),
+    ...manifestEntities(trashEntities, {}),
+    schedules: purgeSchedulesOf(trashOperations, trashEntities),
+    entitlementKey: 'trash',
+});
+const boxRef = (id) => ({ entityType: 'tbox', entityId: id });
+const thingRef = (id) => ({ entityType: 'tthing', entityId: id });
+const P = (key) => key;
+export const trashMod = {
+    manifest: trashModManifest,
+    migrations: [
+        {
+            version: '0001-init',
+            sql: `CREATE TABLE trash_boxes (id TEXT PRIMARY KEY, name TEXT NOT NULL);
+            CREATE TABLE trash_things (id TEXT PRIMARY KEY, box_id TEXT NOT NULL);
+            CREATE TABLE trash_keeps (id TEXT PRIMARY KEY);`,
+        },
+    ],
+    // The host derives each operation's target from these — the same declarations it parses with.
+    operationInputs: operationInputsOf(trashOperations),
+    // Every handler checks its declared key first, as a vertical's does — the host's refusal has
+    // to agree with that order, which is what the suite asserts.
+    operations: {
+        'trash/add-box': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:write')));
+            ctx.sql.exec('INSERT INTO trash_boxes (id, name) VALUES (?, ?)', [i.id, i.name]);
+            return { ok: true };
+        }),
+        'trash/add-keep': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:write')));
+            ctx.sql.exec('INSERT INTO trash_keeps (id) VALUES (?)', [i.id]);
+            return { ok: true };
+        }),
+        'trash/bin-many': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:write')));
+            const ids = [];
+            for (let n = 0; n < i.count; n++) {
+                const id = `${i.prefix}${String(n).padStart(4, '0')}`;
+                ctx.sql.exec('INSERT INTO trash_boxes (id, name) VALUES (?, ?)', [id, id]);
+                await ctx.trash(boxRef(id));
+                ids.push(id);
+            }
+            return { ids };
+        }),
+        'trash/rename-box': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:write'), boxRef(i.boxId)));
+            ctx.sql.exec('UPDATE trash_boxes SET name = ? WHERE id = ?', [i.name, i.boxId]);
+            return { ok: true };
+        }),
+        'trash/archive-box': (async (ctx, i) => {
+            await ctx.archive(boxRef(i.boxId));
+            return { ok: true };
+        }),
+        'trash/trash-box': (async (ctx, i) => {
+            await ctx.trash(boxRef(i.boxId));
+            return { ok: true };
+        }),
+        'trash/trash-keep': (async (ctx, i) => {
+            await ctx.trash({ entityType: 'tkeep', entityId: i.keepId });
+            return { ok: true };
+        }),
+        'trash/restore-box': (async (ctx, i) => {
+            await ctx.restore(boxRef(i.boxId));
+            return { ok: true };
+        }),
+        'trash/peek-box': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:read'), boxRef(i.boxId)));
+            return { state: ctx.entityState(boxRef(i.boxId)) };
+        }),
+        'trash/delete-box': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:delete'), boxRef(i.boxId)));
+            const row = ctx.sql.query('SELECT name FROM trash_boxes WHERE id = ?', [i.boxId])[0];
+            if (!row)
+                return { ok: false, boxId: i.boxId };
+            // The vertical's cascade rule, which is why the horizon runs this and not a kernel DELETE.
+            ctx.sql.exec('DELETE FROM trash_things WHERE box_id = ?', [i.boxId]);
+            ctx.sql.exec('DELETE FROM trash_boxes WHERE id = ?', [i.boxId]);
+            ctx.emit({
+                type: 'trashbox.deleted',
+                schemaVersion: 1,
+                entity: boxRef(i.boxId),
+                piiClass: 'none',
+                payload: { boxId: i.boxId },
+            });
+            if (row.name === EXPLODING_BOX)
+                throw new Error('the purge crashed after deleting — everything rolls back');
+            return { ok: true, boxId: i.boxId };
+        }),
+        'trash/other-delete': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:delete'), boxRef(i.boxId)));
+            return { ok: true };
+        }),
+        'trash/link-thing': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:write'), boxRef(i.boxId)));
+            ctx.sql.exec('INSERT OR IGNORE INTO trash_things (id, box_id) VALUES (?, ?)', [i.thingId, i.boxId]);
+            ctx.link(thingRef(i.thingId), boxRef(i.boxId));
+            return { ok: true };
+        }),
+        'trash/move-thing': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:write'), boxRef(i.boxId)));
+            ctx.relink(thingRef(i.thingId), boxRef(i.fromBoxId), boxRef(i.boxId));
+            ctx.sql.exec('UPDATE trash_things SET box_id = ? WHERE id = ?', [i.boxId, i.thingId]);
+            return { ok: true };
+        }),
+        'trash/touch-thing': (async (ctx, i) => {
+            const thing = ctx.sql.query('SELECT box_id FROM trash_things WHERE id = ?', [i.thingId])[0];
+            if (!thing)
+                throw new Error('no such thing');
+            assertAllowed(await ctx.check(P('box:write'), boxRef(thing.box_id)));
+            return { ok: true };
+        }),
+        'trash/box-exists': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:read')));
+            const exists = ctx.sql.query('SELECT 1 AS x FROM trash_boxes WHERE id = ?', [i.boxId]).length > 0;
+            const things = ctx.sql.query('SELECT 1 AS x FROM trash_things WHERE box_id = ?', [i.boxId]).length;
+            return { exists, things };
+        }),
+        'trash/ddl': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:write')));
+            ctx.sql.exec(`CREATE TABLE ${i.table} (id TEXT)`);
+            return { ok: true };
+        }),
+        'trash/history': (async (ctx, i) => {
+            assertAllowed(await ctx.check(P('box:read')));
+            return { entries: readHistory({ sql: ctx.sql }, boxRef(i.boxId)).entries };
+        }),
+    },
+};
+//# sourceMappingURL=entity-trash-module.js.map

package/dist/entity-trash-module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-trash-module.js","sourceRoot":"","sources":["../src/entity-trash-module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAkD,MAAM,sBAAsB,CAAC;AAElH,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AAEvC,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAC;IAC1C,IAAI,EAAE;QACJ,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE;QACtC,KAAK,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE;KACpE;IACD,MAAM,EAAE;QACN,KAAK,EAAE,cAAc;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACxD,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB;IACD,KAAK,EAAE;QACL,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,KAAK,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE;KACnC;CACF,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,CAAU,CAAC;AACjG,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC9C,MAAM,GAAG,GAAG,CAAC,GAAiC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAU,CAAC;AACvG,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAEzC,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC1E,eAAe,EAAE;QACf,OAAO,EAAE,WAAW;QACpB,UAAU,EAAE,WAAW;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACrD,MAAM,EAAE,EAAE;KACX;IACD,gBAAgB,EAAE;QAChB,OAAO,EAAE,YAAY;QACrB,UAAU,EAAE,WAAW;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,MAAM,EAAE,EAAE;KACX;IACD,gBAAgB,EAAE;QAChB,OAAO,EAAE,yEAAyE;QAClF,UAAU,EAAE,WAAW;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC3E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;KAC/C;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,qDAAqD;QAC9D,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC;QAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACxD,MAAM,EAAE,EAAE;KACX;IACD,mBAAmB,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;IAC3G,iBAAiB,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;IACnG,kBAAkB,EAAE;QAClB,OAAO,EAAE,YAAY;QACrB,UAAU,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE;QACnE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,EAAE;KACX;IACD,mBAAmB,EAAE;QACnB,OAAO,EAAE,4BAA4B;QACrC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC;QAC5B,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,EAAE;KACX;IACD,gBAAgB,EAAE;QAChB,OAAO,EAAE,8BAA8B;QACvC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;QAC3B,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KACnD;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,oEAAoE;QAC7E,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC;QAC7B,OAAO,EAAE,QAAQ;QACjB,0FAA0F;QAC1F,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACxD,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE;KAC/G;IACD,oBAAoB,EAAE;QACpB,OAAO,EAAE,gFAAgF;QACzF,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC;QAC7B,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,EAAE;KACX;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,2EAA2E;QACpF,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC;QAC5B,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3D,MAAM,EAAE,EAAE;KACX;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,kFAAkF;QAC3F,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC;QAC5B,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAClF,MAAM,EAAE,EAAE;KACX;IACD,mBAAmB,EAAE;QACnB,OAAO,EAAE,sFAAsF;QAC/F,UAAU,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,yBAAyB,EAAE;QACrF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,EAAE;KACX;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,iCAAiC;QAC1C,UAAU,EAAE,UAAU;QACtB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KAC9D;IACD,WAAW,EAAE;QACX,OAAO,EAAE,4FAA4F;QACrG,UAAU,EAAE,WAAW;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,EAAE;KACX;IACD,eAAe,EAAE;QACf,OAAO,EAAE,6CAA6C;QACtD,UAAU,EAAE,UAAU;QACtB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;KACpD;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC,KAAK,CAAC;IACnD,EAAE,EAAE,eAAe;IACnB,OAAO,EAAE,OAAO;IAChB,cAAc,EAAE,QAAQ;IACxB,UAAU,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE;IACnE,GAAG,kBAAkB,CAAC,eAAe,EAAE;QACrC,WAAW,EAAE;YACX,UAAU,EAAE,YAAY;YACxB,WAAW,EAAE,aAAa;YAC1B,aAAa,EAAE,eAAe;YAC9B,WAAW,EAAE,yBAAyB;YACtC,YAAY,EAAE,uBAAuB;SACtC;QACD,QAAQ,EAAE,EAAE;KACb,CAAC;IACF,GAAG,gBAAgB,CAAC,aAAa,EAAE,EAAE,CAAC;IACtC,SAAS,EAAE,gBAAgB,CAAC,eAAe,EAAE,aAAa,CAAC;IAC3D,cAAc,EAAE,OAAO;CACxB,CAAC,CAAC;AAGH,MAAM,MAAM,GAAG,CAAC,EAAU,EAAa,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AACjF,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAa,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AACrF,MAAM,CAAC,GAAG,CAAC,GAAiC,EAAE,EAAE,CAAC,GAAqD,CAAC;AAEvG,MAAM,CAAC,MAAM,QAAQ,GAAuB;IAC1C,QAAQ,EAAE,gBAAgB;IAC1B,UAAU,EAAE;QACV;YACE,OAAO,EAAE,WAAW;YACpB,GAAG,EAAE;;4DAEiD;SACvD;KACF;IACD,8FAA8F;IAC9F,eAAe,EAAE,iBAAiB,CAAC,eAAe,CAAC;IACnD,6FAA6F;IAC7F,6DAA6D;IAC7D,UAAU,EAAE;QACV,eAAe,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAA+B,EAAE,EAAE;YAC/D,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAiB,EAAE,EAAE;YAClD,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAoC,EAAE,EAAE;YACrE,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,kDAAkD,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC3E,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,CAAC;QACjB,CAAC,CAAY;QACb,kBAAkB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAkC,EAAE,EAAE;YACrE,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAChF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,mBAAmB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAoB,EAAE,EAAE;YACxD,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,iBAAiB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAoB,EAAE,EAAE;YACtD,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,kBAAkB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAqB,EAAE,EAAE;YACxD,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,mBAAmB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAoB,EAAE,EAAE;YACxD,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAoB,EAAE,EAAE;YACrD,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/D,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACrD,CAAC,CAAY;QACb,kBAAkB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAoB,EAAE,EAAE;YACvD,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAmB,2CAA2C,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvG,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YAC/C,2FAA2F;YAC3F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACrE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,kBAAkB;gBACxB,aAAa,EAAE,CAAC;gBAChB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBACvB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;aAC5B,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC5G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACtC,CAAC,CAAY;QACb,oBAAoB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAoB,EAAE,EAAE;YACzD,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,kBAAkB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAqC,EAAE,EAAE;YACxE,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,+DAA+D,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACpG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,kBAAkB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAwD,EAAE,EAAE;YAC3F,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,mBAAmB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAsB,EAAE,EAAE;YAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAqB,8CAA8C,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChH,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YAC7C,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,kBAAkB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAoB,EAAE,EAAE;YACvD,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAClG,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YACnG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC,CAAY;QACb,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAoB,EAAE,EAAE;YAChD,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAY;QACb,eAAe,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAoB,EAAE,EAAE;YACpD,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7E,CAAC,CAAY;KACd;CACF,CAAC"}

package/dist/entity-trash-suite.d.ts

@@ -0,0 +1,59 @@
+import { type ScopeId, type TenantId } from '@substrat-run/contracts';
+import type { ScopeHostFixture } from './scope-host-suite.js';
+import type { RawScopeSql } from './entity-state-suite.js';
+export declare function entityTrashContractSuite(adapterName: string, makeFixture: () => Promise<ScopeHostFixture>, raw: RawScopeSql, options?: {
+    /**
+     * Whether a whole `runPlatformSweep` is affordable on this fixture. It walks every active
+     * scope its directory holds, so on a directory SHARED by every suite in the file (the
+     * Cloudflare fixture's control plane) one pass takes minutes and starves the suites after
+     * it. The property it holds — a copy that is not primary never runs a schedule, the purge's
+     * included — is the kernel sweep's `isPrimaryScope` filter, the same code on both adapters.
+     */
+    platformSweep?: boolean;
+    /**
+     * The adapter's own door to a scope, BELOW every host API — what code holding the scope's
+     * storage binding could call (#119, Codex r2). `claimPurge` invokes as the module's system
+     * principal with every purge claim that door can carry attached, and answers the error code
+     * (or `'ok'`); `runPurgeSweep` runs one purge pass directly, outside the coordinator's sweep.
+     */
+    direct?: {
+        claimPurge(tenant: TenantId, scope: ScopeId, operation: string, input: unknown): Promise<string>;
+        runPurgeSweep(tenant: TenantId, scope: ScopeId, operation: string): Promise<{
+            purged: number;
+            skipped: number;
+            held?: string;
+        }>;
+        /**
+         * Hold (or release) the scope's lifecycle where THIS adapter's scope-side gate reads it: the
+         * directory on the pure adapter, the delivered lifecycle (#1713) in a Durable Object.
+         */
+        holdLifecycle(tenant: TenantId, scope: ScopeId, held: boolean): Promise<void>;
+        /**
+         * Record the scope's tenant where this adapter's scope-side gate reads it: the directory on the
+         * pure adapter (already there), the `provisioned_for` receipt in a Durable Object — which only a
+         * projection or a lifecycle delivery writes, so a directory-backed host's scope has none.
+         */
+        recordTenant(tenant: TenantId, scope: ScopeId): Promise<void>;
+        /**
+         * What a direct sweep naming a foreign tenant meets on a scope that has NOT recorded its tenant:
+         * `refused` where the directory is the record (the pure adapter); `admitted` in a Durable Object
+         * with no receipt — the doors' rule for an `unknown` pair, and why a directory-backed host leaves
+         * the tenant to the coordinator. Pinned, so a change to either is seen.
+         */
+        unrecordedTenant: 'refused' | 'admitted';
+        /** Classify the scope a copy where this adapter's scope-side gate reads it. */
+        markCopy(tenant: TenantId, scope: ScopeId): Promise<void>;
+        /**
+         * Where the sweep's scope id is attribution only (the Durable Object, which records no scope id
+         * of its own): run the sweep on `scope`'s object while NAMING `named`.
+         */
+        runPurgeSweepNaming?(tenant: TenantId, scope: ScopeId, named: ScopeId, operation: string): Promise<{
+            purged: number;
+            errors: {
+                entityId: string;
+                error: string;
+            }[];
+        }>;
+    };
+}): void;
+//# sourceMappingURL=entity-trash-suite.d.ts.map

package/dist/entity-trash-suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-trash-suite.d.ts","sourceRoot":"","sources":["../src/entity-trash-suite.ts"],"names":[],"mappings":"AAcA,OAAO,EAYL,KAAK,OAAO,EACZ,KAAK,QAAQ,EAEd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAW3D,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAC5C,GAAG,EAAE,WAAW,EAChB,OAAO,GAAE;IACP;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;OAKG;IACH,MAAM,CAAC,EAAE;QACP,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACjG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAChI;;;WAGG;QACH,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9E;;;;WAIG;QACH,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D;;;;;WAKG;QACH,gBAAgB,EAAE,SAAS,GAAG,UAAU,CAAC;QACzC,+EAA+E;QAC/E,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D;;;WAGG;QACH,mBAAmB,CAAC,CAClB,MAAM,EAAE,QAAQ,EAChB,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE;gBAAE,QAAQ,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAA;aAAE,EAAE,CAAA;SAAE,CAAC,CAAC;KAC/E,CAAC;CACE,GACL,IAAI,CAumBN"}