@substrat-run/contract-tests 0.86.0 → 0.87.0

package/dist/index.d.ts

@@ -7,6 +7,8 @@ export { listContractSuite } from './list-suite.js';
 export { scheduleContractSuite } from './schedule-suite.js';
 export { entityCheckConformanceSuite, planEntityCheckCoverage } from './entity-check-suite.js';
 export type { EntityCheckFixture, EntityCheckSuiteOptions, PlannedCheck } from './entity-check-suite.js';
+export { nodeOnlySuite } from './node-only-suite.js';
+export type { NodeOnlyOptions } from './node-only-suite.js';
 export { atomicMod, billedMod, brokenMod, connectorMod, contractTestBareOps, contractTestInitialModules, contractTestModules, permMod, scheduleMod, searchMod, searchModManifest, listMod, listModManifest, } from './modules.js';
 export { connectorCalls, connectorTestFetch, resetConnectorCalls, type ConnectorCall, } from './connector-fixture.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC/F,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACzG,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,OAAO,EACP,WAAW,EACX,SAAS,EACT,iBAAiB,EACjB,OAAO,EACP,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,aAAa,GACnB,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAC/F,YAAY,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,OAAO,EACP,WAAW,EACX,SAAS,EACT,iBAAiB,EACjB,OAAO,EACP,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,aAAa,GACnB,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -5,6 +5,7 @@ export { searchContractSuite } from './search-suite.js';
 export { listContractSuite } from './list-suite.js';
 export { scheduleContractSuite } from './schedule-suite.js';
 export { entityCheckConformanceSuite, planEntityCheckCoverage } from './entity-check-suite.js';
+export { nodeOnlySuite } from './node-only-suite.js';
 export { atomicMod, billedMod, brokenMod, connectorMod, contractTestBareOps, contractTestInitialModules, contractTestModules, permMod, scheduleMod, searchMod, searchModManifest, listMod, listModManifest, } from './modules.js';
 export { connectorCalls, connectorTestFetch, resetConnectorCalls, } from './connector-fixture.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAE/F,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,OAAO,EACP,WAAW,EACX,SAAS,EACT,iBAAiB,EACjB,OAAO,EACP,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAE/F,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,OAAO,EACP,WAAW,EACX,SAAS,EACT,iBAAiB,EACjB,OAAO,EACP,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC"}

package/dist/node-only-suite.d.ts

@@ -0,0 +1,15 @@
+export interface NodeOnlyOptions {
+    /** Absolute paths to the module source this claim covers. */
+    readonly sources: readonly string[];
+}
+/**
+ * Assert a module checks permissions only at the node.
+ *
+ * ```ts
+ * nodeOnlySuite('engine-metering', {
+ *   sources: [new URL('../src/index.ts', import.meta.url).pathname],
+ * });
+ * ```
+ */
+export declare function nodeOnlySuite(subjectName: string, options: NodeOnlyOptions): void;
+//# sourceMappingURL=node-only-suite.d.ts.map

package/dist/node-only-suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-only-suite.d.ts","sourceRoot":"","sources":["../src/node-only-suite.ts"],"names":[],"mappings":"AAyCA,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CA4BjF"}

package/dist/node-only-suite.js

@@ -0,0 +1,75 @@
+/**
+ * "This module narrows nowhere" — stated so it can stop being true loudly (#865).
+ *
+ * The conformance kit next door reads an operation's DECLARATION and drives the
+ * pair that proves the handler honours it. Seven packages in this repo have no
+ * declared operation surface for it to read: their operations are a map of
+ * handlers, and the only description of what each one checks is the handler
+ * itself. Building that surface is real work and is filed separately.
+ *
+ * Meanwhile those packages carry the failure mode #865 named — **absence reading
+ * as coverage**. Zero narrowed declarations is indistinguishable from nobody
+ * having looked, and the packages where nobody looked are exactly the ones worth
+ * looking at. So a module that genuinely checks only at the node says so here,
+ * and the statement is wired to something that can go red.
+ *
+ * ## What this actually checks, and what it cannot
+ *
+ * It reads the module's own source and asserts no two-argument `ctx.check(perm,
+ * entityRef)` appears in it. That is a weaker instrument than the conformance
+ * kit by a wide margin, and the difference is worth stating plainly rather than
+ * leaving for someone to discover:
+ *
+ *  - It proves an absence, never a behaviour. The kit generates a case that
+ *    FAILS on a wrong implementation; this one only notices a new call site.
+ *  - It is lexical. A check assembled indirectly — a helper taking the ref, a
+ *    call built across lines — is invisible to it. It is a tripwire on the
+ *    obvious path, not a proof.
+ *  - It says nothing about whether node-only is *right*. That judgement is the
+ *    prose each caller writes above it, which is the part a reviewer reads.
+ *
+ * What it does buy: the day someone narrows an operation in one of these
+ * packages, this goes red and the change has to either declare the check and
+ * wire the real kit, or rewrite the assessment. Which is the whole point — the
+ * assessment stops being a comment that was true once.
+ */
+import { describe, expect, it } from 'vitest';
+import { readFileSync } from 'node:fs';
+/** A two-argument `ctx.check(...)` — the narrowed form, spelled the usual way. */
+const NARROWED_CHECK = /\bctx\.check\(\s*[^()]*\([^()]*\)[^()]*,|\bctx\.check\(\s*[^(),]+\s*,/g;
+/**
+ * Assert a module checks permissions only at the node.
+ *
+ * ```ts
+ * nodeOnlySuite('engine-metering', {
+ *   sources: [new URL('../src/index.ts', import.meta.url).pathname],
+ * });
+ * ```
+ */
+export function nodeOnlySuite(subjectName, options) {
+    describe(`checks at the node only: ${subjectName}`, () => {
+        it('reads the source it claims to cover', () => {
+            // The zero guard, same one the conformance kit has: a suite that read
+            // nothing would pass every assertion below it.
+            expect(options.sources.length).toBeGreaterThan(0);
+            for (const path of options.sources) {
+                expect(readFileSync(path, 'utf8').length, `${path} is empty`).toBeGreaterThan(0);
+            }
+        });
+        it('has no operation narrowing a check to an entity', () => {
+            const found = [];
+            for (const path of options.sources) {
+                const lines = readFileSync(path, 'utf8').split('\n');
+                lines.forEach((line, i) => {
+                    NARROWED_CHECK.lastIndex = 0;
+                    if (NARROWED_CHECK.test(line))
+                        found.push(`${path}:${i + 1}: ${line.trim()}`);
+                });
+            }
+            expect(found, `${subjectName} is declared node-only, but these narrow to an entity. Either the ` +
+                'assessment is stale, or the new check needs a declaration and the conformance ' +
+                'kit rather than this tripwire.').toEqual([]);
+        });
+    });
+}
+//# sourceMappingURL=node-only-suite.js.map

package/dist/node-only-suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-only-suite.js","sourceRoot":"","sources":["../src/node-only-suite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,kFAAkF;AAClF,MAAM,cAAc,GAAG,wEAAwE,CAAC;AAOhG;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,OAAwB;IACzE,QAAQ,CAAC,4BAA4B,WAAW,EAAE,EAAE,GAAG,EAAE;QACvD,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,sEAAsE;YACtE,+CAA+C;YAC/C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAClD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACnC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACnF,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;oBACxB,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;oBAC7B,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAChF,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAK,EACL,GAAG,WAAW,oEAAoE;gBAChF,gFAAgF;gBAChF,gCAAgC,CACnC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/contract-tests",
-  "version": "0.86.0",
+  "version": "0.87.0",
   "description": "The suite every scope-host adapter must pass, forever (D-14)",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -23,8 +23,8 @@
   ],
   "dependencies": {
     "vitest": "^3.2.7",
-    "@substrat-run/contracts": "^0.86.0",
-    "@substrat-run/kernel": "^0.86.0"
+    "@substrat-run/contracts": "^0.87.0",
+    "@substrat-run/kernel": "^0.87.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",