@substrat-run/contract-tests 0.162.0 → 0.163.0

package/dist/wire-nonce-suite.d.ts

@@ -0,0 +1,13 @@
+import { type ScopeId, type TenantId } from '@substrat-run/contracts';
+import type { ScopeHostFixture } from './scope-host-suite.js';
+/**
+ * The wire-signing nonce store (RFC wire-signing §4), through each host's `claimWireNonceLocal`:
+ * the claim the platform's entry makes in the scope a verified envelope names, after every other
+ * check passed. Held alike on both adapters: a nonce is spent once per scope, and the store is the
+ * scope's own and no dump's, so a copy carries none and a restore empties it. The claim's own rules
+ * (the window, the purge, the cap) are the kernel's, tested there.
+ */
+export declare function wireNonceContractSuite(adapterName: string, makeFixture: () => Promise<ScopeHostFixture & {
+    claimWireNonceLocal(tenantId: TenantId, scopeId: ScopeId, nonce: string, until: number): Promise<boolean>;
+}>): void;
+//# sourceMappingURL=wire-nonce-suite.d.ts.map

package/dist/wire-nonce-suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-nonce-suite.d.ts","sourceRoot":"","sources":["../src/wire-nonce-suite.ts"],"names":[],"mappings":"AACA,OAAO,EAAuD,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAE3H,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,OAAO,CACxB,gBAAgB,GAAG;IACjB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3G,CACF,GACA,IAAI,CAsEN"}

package/dist/wire-nonce-suite.js

@@ -0,0 +1,73 @@
+import { afterAll, beforeAll, describe, expect, it } from 'vitest';
+import { platformActorId, scopeId as scopeIdSchema, tenantId } from '@substrat-run/contracts';
+import { WIRE_NONCE_CAP, ulid } from '@substrat-run/kernel';
+/**
+ * The wire-signing nonce store (RFC wire-signing §4), through each host's `claimWireNonceLocal`:
+ * the claim the platform's entry makes in the scope a verified envelope names, after every other
+ * check passed. Held alike on both adapters: a nonce is spent once per scope, and the store is the
+ * scope's own and no dump's, so a copy carries none and a restore empties it. The claim's own rules
+ * (the window, the purge, the cap) are the kernel's, tested there.
+ */
+export function wireNonceContractSuite(adapterName, makeFixture) {
+    describe(`the wire nonce store (RFC wire-signing §4): ${adapterName}`, () => {
+        let fixture;
+        const staff = platformActorId.parse(ulid());
+        const t = tenantId.parse(ulid());
+        /** Far enough ahead that no run of this suite reaches it. */
+        const until = Math.floor(Date.now() / 1000) + 3600;
+        let n = 0;
+        /** A fresh canonical nonce: 21 base64url characters and a last one with its trailing bits zero. */
+        const nonce = () => `${(n++).toString(36).padStart(10, '0')}${ulid().slice(-11).toLowerCase()}A`;
+        /** One provisioned scope the suite shares: each test spends nonces of its own. */
+        const s = scopeIdSchema.parse(ulid());
+        beforeAll(async () => {
+            fixture = await makeFixture();
+            await fixture.host.admin.createTenant(staff, { id: t, slug: `wire-nonce-${t.slice(-8).toLowerCase()}`, name: 'Wire nonces' });
+            await fixture.host.provisionScope(staff, { tenantId: t, scopeId: s, vertical: 'wire-nonce' });
+            await fixture.host.admin.activateScope(staff, t, s);
+        });
+        afterAll(async () => fixture?.cleanup());
+        const claim = (s, value) => fixture.claimWireNonceLocal(t, s, value, until);
+        it('spends a nonce once per scope, a scope nothing has provisioned yet included', async () => {
+            // The call that provisions a scope spends its nonce there too, so no provisioned check.
+            const unprovisioned = scopeIdSchema.parse(ulid());
+            const a = nonce();
+            expect(await claim(s, a)).toBe(true);
+            expect(await claim(unprovisioned, a)).toBe(true);
+            expect(await claim(s, a)).toBe(false);
+            expect(await claim(unprovisioned, a)).toBe(false);
+        });
+        // That the dump leaves the tables out is the shared host suite's export check.
+        it('a copy and a restore start with no nonce spent', async () => {
+            const a = nonce();
+            expect(await claim(s, a)).toBe(true);
+            const dump = await fixture.host.admin.exportScope(staff, t, s);
+            // A copy of the scope starts with none spent…
+            const fork = scopeIdSchema.parse(ulid());
+            await fixture.host.importScope(staff, { tenantId: t, scopeId: fork, vertical: 'wire-nonce' }, dump);
+            expect(await claim(fork, a)).toBe(true);
+            // …and so does the scope itself once a restore has replaced its store (RFC §4: why the window is short).
+            expect(await claim(s, a)).toBe(false);
+            await fixture.host.restoreScope(staff, t, s, dump);
+            expect(await claim(s, a)).toBe(true);
+        });
+        it('a dump that does carry the nonce tables (a full count, spent nonces) loads without them', async () => {
+            const spent = nonce();
+            const dump = await fixture.host.admin.exportScope(staff, t, s);
+            dump.tables.push({
+                name: '_substrat_wire_nonce_count',
+                ddl: 'CREATE TABLE _substrat_wire_nonce_count (slot TEXT PRIMARY KEY, live INTEGER NOT NULL) WITHOUT ROWID',
+                columns: ['slot', 'live'],
+                rows: [['live', WIRE_NONCE_CAP]],
+            }, {
+                name: '_substrat_wire_nonces',
+                ddl: 'CREATE TABLE _substrat_wire_nonces (nonce TEXT PRIMARY KEY, until_s INTEGER NOT NULL) WITHOUT ROWID',
+                columns: ['nonce', 'until_s'],
+                rows: [[spent, until]],
+            });
+            await fixture.host.restoreScope(staff, t, s, dump);
+            expect(await claim(s, spent)).toBe(true);
+        });
+    });
+}
+//# sourceMappingURL=wire-nonce-suite.js.map

package/dist/wire-nonce-suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-nonce-suite.js","sourceRoot":"","sources":["../src/wire-nonce-suite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,OAAO,IAAI,aAAa,EAAE,QAAQ,EAA+B,MAAM,yBAAyB,CAAC;AAC3H,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAG5D;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,WAIC;IAED,QAAQ,CAAC,+CAA+C,WAAW,EAAE,EAAE,GAAG,EAAE;QAC1E,IAAI,OAAgD,CAAC;QACrD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,6DAA6D;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,mGAAmG;QACnG,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC;QAEjG,kFAAkF;QAClF,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAEtC,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YAC9B,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;YAC9H,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9F,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAE7F,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;YAC3F,wFAAwF;YACxF,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,+EAA+E;QAC/E,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/D,8CAA8C;YAC9C,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,CAAC;YACpG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,yGAAyG;YACzG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;YACvG,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;gBACE,IAAI,EAAE,4BAA4B;gBAClC,GAAG,EAAE,sGAAsG;gBAC3G,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;gBACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;aACjC,EACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,GAAG,EAAE,qGAAqG;gBAC1G,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;gBAC7B,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;aACvB,CACF,CAAC;YACF,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/contract-tests",
-  "version": "0.162.0",
+  "version": "0.163.0",
   "description": "The suite every scope-host adapter must pass, forever (D-14)",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -30,8 +30,8 @@
     "dist"
   ],
   "dependencies": {
-    "@substrat-run/contracts": "^0.162.0",
-    "@substrat-run/kernel": "^0.162.0"
+    "@substrat-run/contracts": "^0.163.0",
+    "@substrat-run/kernel": "^0.163.0"
   },
   "devDependencies": {
     "@types/node": "^22.20.5",