@synap-core/sdk 1.4.0 → 1.5.1

package/dist/testing.js

@@ -1,7 +1,9 @@
 import {
+  CLOUD_STATE_RE,
+  LOOPBACK_HOSTS,
   pkceChallenge,
   randomToken
-} from "./chunk-J7XHAAFJ.js";
+} from "./chunk-UK2U6SMA.js";
 
 // src/testing/fixtures.ts
 var MOCK_FORM = {
@@ -42,6 +44,26 @@ var MOCK_SHARE = {
   },
   publishedOn: "2026-09-27"
 };
+var MOCK_HTML_SHARE = {
+  resourceType: "entity",
+  title: "Estimate for Northwind",
+  properties: { total: "4 800 \u20AC", validUntil: "2026-11-30" },
+  body: {
+    format: "html",
+    content: [
+      "<!doctype html>",
+      '<html lang="en"><head><meta charset="utf-8"><title>Estimate</title>',
+      "<style>body{font-family:Georgia,serif;max-width:40rem;margin:2rem auto;line-height:1.5}td{padding:.25rem .75rem}</style>",
+      "</head><body>",
+      "<h1>Estimate for Northwind</h1>",
+      "<table><tr><td>Discovery workshop</td><td>1 200 \u20AC</td></tr><tr><td>Build</td><td>3 600 \u20AC</td></tr></table>",
+      "<p><strong>Total: 4 800 \u20AC</strong></p>",
+      "<script>document.body.textContent = 'scripts never run in a sandboxed frame'</script>",
+      "</body></html>"
+    ].join("")
+  },
+  publishedOn: "2026-10-22"
+};
 function publicId(prefix, n) {
   return `p_${prefix}${String(n).padStart(16 - prefix.length, "0")}`;
 }
@@ -98,6 +120,20 @@ var MOCK_SITE = {
   }
 };
 
+// src/testing/roles.ts
+function desugarSeedRoles(row, at) {
+  if (!Array.isArray(row.seedRoles)) return row;
+  const { seedRoles, ...rest } = row;
+  const facets = Array.isArray(row.facets) ? row.facets : [];
+  const shorthand = seedRoles.filter((r) => typeof r?.profileSlug === "string" && typeof r.workspaceId === "string").map((r, i) => ({ facetId: `seedrole_${String(row.id)}_${i}`, slug: r.profileSlug, workspaceId: r.workspaceId }));
+  for (const r of shorthand) {
+    if (facets.some((f) => f?.slug === r.slug && f.workspaceId === r.workspaceId)) {
+      throw new TypeError(`${at} ("${String(row.id)}"): the role "${r.slug}" in ${r.workspaceId} is in both facets and seedRoles; keep it in facets only`);
+    }
+  }
+  return { ...rest, facets: [...facets, ...shorthand] };
+}
+
 // src/testing/auth-server.ts
 var MOCK_AUTH_ISSUER = "https://pod.mock-synap.test";
 var MOCK_GRANT = [
@@ -130,7 +166,43 @@ function createMockAuthServer(options = {}) {
   const requests = [];
   const writes = [];
   const proposals = [];
-  const entities = [...options.entities ?? []];
+  const seed = options.seed ?? {};
+  const entities = [...seed.entities ?? [], ...options.entities ?? []].map(
+    (e, i) => desugarSeedRoles(e, `entities[${i}]`)
+  );
+  const sessions = [...seed.sessions ?? []];
+  const documents = [...seed.documents ?? []];
+  const relations = [...seed.relations ?? []];
+  const templateOf = new Map((seed.spaces ?? []).filter((sp) => sp.templateSlug).map((sp) => [sp.id, sp.templateSlug]));
+  const approvals = [];
+  const seededAt = new Date(now()).toISOString();
+  const rolesOf = (e) => Array.isArray(e.facets) ? e.facets.filter((f) => typeof f?.slug === "string") : [];
+  function readableEntity(e, spaces, only) {
+    if (typeof e.workspaceId === "string" && spaces.has(e.workspaceId) && (!only || e.workspaceId === only)) return true;
+    return facetsOf(e, spaces, only ?? void 0).some((f) => e.workspaceId == null || !f.sharedRole);
+  }
+  const facetsOf = (e, spaces, lens) => rolesOf(e).filter((f) => typeof f.workspaceId === "string" && spaces.has(f.workspaceId) && (lens === void 0 || f.workspaceId === lens));
+  const facetRow = (f) => ({ facetId: f.facetId, slug: f.slug, properties: f.properties ?? {}, status: f.status ?? null });
+  const entityWire = (e) => {
+    const { facets: _facets, facetSlugs: _facetSlugs, ...wire } = e;
+    return wire;
+  };
+  const readSpaces = (scope) => new Set(grant.filter((g) => /^entity\.(.+\.)?read$/.test(g.permission) && scope.includes(g.permission)).map((g) => g.workspaceId));
+  for (const p of seed.proposals ?? []) {
+    proposals.push({
+      proposalType: "create",
+      targetType: "entity",
+      targetId: null,
+      status: "pending",
+      workspaceId: null,
+      createdAt: seededAt,
+      correlationId: null,
+      sessionId: null,
+      agentUserId: null,
+      ...p
+    });
+  }
+  const writeMode = options.writeMode ?? (options.actsAs === "person" ? "applied" : "proposed");
   const graceMs = (options.refreshGraceSec ?? 30) * 1e3;
   const app = options.app === void 0 ? MOCK_APP : options.app;
   let proposalSeq = 0;
@@ -172,9 +244,11 @@ function createMockAuthServer(options = {}) {
       // As the pod: what the key has left, never an assumed hour.
       expires_in: Math.max(0, Math.floor((row.expiresAt - now()) / 1e3)),
       scope: scope.join(" "),
-      synap_grant: grant.filter((g) => scope.includes(g.permission)),
+      // Each grant row names its space's template when it came from one.
+      synap_grant: grant.filter((g) => scope.includes(g.permission)).map((g) => g.templateSlug || !templateOf.has(g.workspaceId) ? g : { ...g, templateSlug: templateOf.get(g.workspaceId) }),
       synap_user: user,
-      ...app ? { synap_app: app } : {}
+      ...app ? { synap_app: app } : {},
+      ...options.actsAs ? { synap_acts_as: options.actsAs } : {}
     };
     if (pair) {
       body.refresh_token = pair.refreshToken;
@@ -237,6 +311,160 @@ function createMockAuthServer(options = {}) {
     }
     return oauthError("unsupported_grant_type", "Unsupported grant_type");
   }
+  const sessionRow = (s) => ({
+    workspaceId: null,
+    projectId: null,
+    userId: user.id,
+    correlationId: null,
+    title: null,
+    goal: "",
+    status: "active",
+    templateId: null,
+    expectedOutputs: [],
+    channelId: null,
+    progress: null,
+    currentStage: null,
+    agentIds: [],
+    closedAt: null,
+    verificationReport: null,
+    metadata: {},
+    startedAt: seededAt,
+    createdAt: seededAt,
+    updatedAt: seededAt,
+    kind: "work",
+    triage: { pending: false, acceptedAt: null, acceptedBy: null },
+    ...s
+  });
+  function readSeeded(path, query, scope) {
+    const spaces = readSpaces(scope);
+    const conn = /^\/entities\/([^/]+)\/connections$/.exec(path);
+    if (conn) {
+      const id = decodeURIComponent(conn[1]);
+      const ws = query.get("workspaceId") ?? void 0;
+      const limit = Math.min(Math.max(Number(query.get("limit") ?? 50) || 50, 1), 200);
+      const inLens = (e) => !ws || e.workspaceId === ws || e.workspaceId == null;
+      const connections = [];
+      const graph = relations.filter((r) => r.sourceEntityId === id || r.targetEntityId === id).sort((a, b) => String(b.createdAt ?? "").localeCompare(String(a.createdAt ?? ""))).slice(0, limit);
+      for (const r of graph) {
+        const outgoing = r.sourceEntityId === id;
+        const otherId = outgoing ? r.targetEntityId : r.sourceEntityId;
+        const other = entities.find((e) => e.id === otherId);
+        if (!other || !inLens(other) || !readableEntity(other, spaces)) continue;
+        connections.push({
+          entityId: otherId,
+          // relations.ts: the raw row plus its role slugs under the read's facet lens (a 1.5.0 seed's own facetSlugs otherwise).
+          entity: {
+            ...entityWire(other),
+            type: other.profileSlug ?? other.type ?? null,
+            facetSlugs: rolesOf(other).length > 0 ? facetsOf(other, spaces, ws).map((f) => f.slug) : other.facetSlugs ?? []
+          },
+          label: r.type,
+          direction: outgoing ? "outgoing" : "incoming",
+          source: "graph",
+          relationId: r.id,
+          relationType: r.type,
+          createdAt: r.createdAt ?? null
+        });
+      }
+      for (const s of sessions.filter((x) => x.subjectEntityId === id).slice(0, limit)) {
+        const row = sessionRow(s);
+        connections.push({
+          entityId: s.id,
+          entity: null,
+          label: row.title || row.goal,
+          direction: "incoming",
+          source: "focus_session",
+          focusSessionId: s.id,
+          focusSessionGoal: row.goal,
+          focusSessionStatus: row.status,
+          focusSessionWorkspaceId: row.workspaceId,
+          createdAt: row.createdAt
+        });
+      }
+      const n = (source) => connections.filter((c) => c.source === source).length;
+      return json(200, {
+        connections,
+        counts: { total: connections.length, graph: n("graph"), structural: n("property"), threads: n("thread"), contextChannels: n("context_channel"), focusSessions: n("focus_session") }
+      });
+    }
+    const entity = /^\/entities\/([^/]+)$/.exec(path);
+    if (entity) {
+      const found = entities.find((e) => e.id === decodeURIComponent(entity[1]));
+      return found && readableEntity(found, spaces) ? json(200, entityWire(found)) : new Response(null, { status: 404 });
+    }
+    const roles = /^\/entities\/([^/]+)\/facets$/.exec(path);
+    if (roles) {
+      const found = entities.find((e) => e.id === decodeURIComponent(roles[1]));
+      if (!found || !readableEntity(found, spaces)) return new Response(null, { status: 404 });
+      return json(200, {
+        facets: facetsOf(found, spaces).map((f) => ({
+          facet: {
+            id: f.facetId,
+            entityId: found.id,
+            profileId: `profile_${f.slug}`,
+            userId: found.userId ?? user.id,
+            // A stamped facet answers its space; a shared role's facet is stored pod-wide.
+            workspaceId: f.sharedRole ? null : f.workspaceId,
+            contextEntityId: null,
+            status: f.status ?? null,
+            statusCategory: null,
+            properties: f.properties ?? {},
+            metadata: {},
+            createdByKind: null,
+            createdByUserId: null,
+            agentUserId: null,
+            sourceProposalId: null,
+            correlationId: null,
+            createdAt: seededAt,
+            updatedAt: seededAt,
+            deletedAt: null
+          },
+          profile: { id: `profile_${f.slug}`, slug: f.slug, profileKind: "role" },
+          effectiveProperties: []
+        }))
+      });
+    }
+    const doc = /^\/documents\/([^/]+)$/.exec(path);
+    if (doc) {
+      const format = query.get("format") ?? "raw";
+      if (format !== "raw" && format !== "readable") return json(400, { error: "format must be raw or readable" });
+      const d = documents.find((x) => x.id === decodeURIComponent(doc[1]));
+      if (!d) return json(404, { error: "Document not found" });
+      return json(200, {
+        document: {
+          id: d.id,
+          title: d.title,
+          type: d.type ?? "markdown",
+          language: d.language ?? null,
+          workspaceId: d.workspaceId ?? null,
+          format,
+          content: d.content,
+          revision: d.revision ?? 1,
+          version: d.version ?? 1,
+          sections: [],
+          diagnostics: [],
+          updatedAt: d.updatedAt ?? seededAt,
+          createdAt: d.createdAt ?? seededAt
+        }
+      });
+    }
+    if (path === "/focus-sessions") {
+      const ws = query.get("workspaceId");
+      const project = query.get("projectId");
+      if (!ws && !project) return json(400, { error: "workspaceId or projectId is required" });
+      const status = query.get("status") ?? "all";
+      const lens = query.get("lens") ?? "all";
+      const kind = query.get("kind") ?? "all";
+      const subject = query.get("subjectEntityId");
+      const limit = Math.min(Math.max(Number(query.get("limit") ?? 20) || 20, 1), 50);
+      const rows = sessions.map(sessionRow).filter((r) => (!ws || r.workspaceId === ws) && (!project || r.projectId === project)).filter((r) => status === "all" || r.status === status).filter((r) => {
+        const pending = r.triage?.pending === true;
+        return lens === "triage" ? pending : lens === "default" ? !pending : true;
+      }).filter((r) => kind === "all" || r.kind === kind).filter((r) => !subject || r.subjectEntityId === subject).sort((a, b) => String(b.startedAt).localeCompare(String(a.startedAt)));
+      return json(200, rows.slice(0, limit));
+    }
+    return null;
+  }
   function hub(method, path, query, headers, body) {
     const failure2 = options.failures?.[path];
     if (failure2 === "unreachable") return "reject";
@@ -260,12 +488,27 @@ function createMockAuthServer(options = {}) {
     }
     if (method === "GET" && path === "/users/me") return json(200, user);
     if (method === "GET" && path === "/entities") {
-      const ws = query.get("workspaceId");
+      const ws = query.get("workspaceId") || void 0;
       const kind = query.get("profileSlug");
+      const role = query.get("facetSlug");
+      const podWide = query.get("includePodWide") !== "false";
+      const withFacets = query.get("includeFacets") === "true";
       const offset = Number(query.get("offset") ?? 0) || 0;
       const limit = Number(query.get("limit") ?? 50) || 50;
-      const rows = entities.filter((e) => (!ws || e.workspaceId === ws) && (!kind || e.profileSlug === kind));
-      return json(200, rows.slice(offset, offset + limit));
+      const spaces = readSpaces(row.scope);
+      const rows = entities.filter((e) => {
+        if (!readableEntity(e, spaces, ws)) return false;
+        if (ws && !podWide && e.workspaceId !== ws && !facetsOf(e, spaces, ws).some((f) => !f.sharedRole)) return false;
+        const slugs = facetsOf(e, spaces, ws).map((f) => f.slug);
+        return (!kind || e.profileSlug === kind || slugs.includes(kind)) && (!role || slugs.includes(role));
+      });
+      return json(
+        200,
+        rows.slice(offset, offset + limit).map((e) => {
+          const facets = withFacets ? facetsOf(e, spaces, ws).map(facetRow) : [];
+          return facets.length > 0 ? { ...entityWire(e), facetSlugs: facets.map((f) => f.slug), facets } : entityWire(e);
+        })
+      );
     }
     if (method === "GET" && path === "/proposals") {
       const readable = new Set(grant.filter((g) => g.permission === "proposal.read" && row.scope.includes(g.permission)).map((g) => g.workspaceId));
@@ -273,15 +516,41 @@ function createMockAuthServer(options = {}) {
       const ws = query.get("workspaceId");
       const limit = Math.min(Math.max(Number(query.get("limit") ?? 50) || 50, 1), 200);
       const offset = Number(query.get("offset") ?? 0) || 0;
-      const rows = proposals.filter((p) => p.workspaceId !== null && readable.has(p.workspaceId)).filter((p) => (status === "all" || p.status === status) && (!ws || p.workspaceId === ws)).reverse();
+      const idsRaw = query.getAll("proposalIds");
+      const ids = idsRaw.length > 0 ? new Set(idsRaw.flatMap((v) => v.split(",").map((x) => x.trim()).filter(Boolean))) : null;
+      const rows = proposals.filter((p) => p.workspaceId !== null && readable.has(p.workspaceId)).filter((p) => (status === "all" || p.status === status) && (!ws || p.workspaceId === ws)).filter((p) => !ids || ids.has(p.id)).reverse();
       const page = rows.slice(offset, offset + limit);
       return json(200, { proposals: page, limit, offset, total: rows.length, hasMore: offset + page.length < rows.length });
     }
+    if (method === "GET") {
+      const read = readSeeded(path, query, row.scope);
+      if (read) return read;
+    }
+    const approve = method === "POST" ? /^\/proposals\/([^/]+)\/approve$/.exec(path) : null;
+    if (approve) {
+      if (options.actsAs !== "person") {
+        return json(403, { error: "An agent credential cannot approve proposals \u2014 approve is human review. Approve from a human session." });
+      }
+      const p = proposals.find((x) => x.id === decodeURIComponent(approve[1]));
+      if (!p) return json(404, { error: "Proposal not found" });
+      if (!grant.some((g) => g.permission === "proposal.approve" && row.scope.includes(g.permission) && g.workspaceId === p.workspaceId)) {
+        return json(403, { error: "You may not approve changes here" });
+      }
+      if (p.status !== "pending") return json(409, { error: `The proposal is ${p.status}, not pending` });
+      p.status = "approved";
+      approvals.push(p.id);
+      return json(200, { success: true, proposalId: p.id, proposal: { ...p } });
+    }
+    const patched = method === "PATCH" ? /^\/entities\/([^/]+)$/.exec(path) : null;
+    if (patched) {
+      const target = entities.find((e) => e.id === decodeURIComponent(patched[1]));
+      if (target && target.workspaceId == null) return json(403, { error: "grant does not allow" });
+    }
     if (method !== "GET") {
       writes.push({ method, path, body });
       const fields = body && typeof body === "object" ? body : {};
       const workspaceId = typeof fields.workspaceId === "string" ? fields.workspaceId : null;
-      if ((options.writeMode ?? "proposed") === "proposed") {
+      if (writeMode === "proposed") {
         const proposalId = `prop_mock_${++proposalSeq}`;
         proposals.push({
           id: proposalId,
@@ -356,6 +625,7 @@ function createMockAuthServer(options = {}) {
     requests,
     writes,
     proposals,
+    approvals,
     settleProposal(id, status) {
       const p = proposals.find((x) => x.id === id);
       if (p) p.status = status;
@@ -414,6 +684,9 @@ function createMockAuthServer(options = {}) {
       for (const row of access.values()) row.revoked = true;
       for (const row of refreshTokens.values()) row.revoked = true;
     },
+    revokeAccessKeys() {
+      for (const row of access.values()) row.revoked = true;
+    },
     liveRefreshTokens() {
       return [...refreshTokens].filter(([, r]) => !r.used && !r.revoked).map(([t]) => t);
     },
@@ -424,10 +697,66 @@ function createMockAuthServer(options = {}) {
   };
 }
 
+// src/testing/seed.ts
+var KEYS = ["entities", "sessions", "documents", "relations", "proposals", "spaces"];
+var REQUIRED = {
+  entities: ["id"],
+  sessions: ["id"],
+  documents: ["id", "title", "content"],
+  relations: ["id", "sourceEntityId", "targetEntityId", "type"],
+  proposals: ["id"],
+  spaces: ["id", "name"]
+};
+function parseMockPodSeed(input) {
+  const value = typeof input === "string" ? JSON.parse(input) : input;
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new TypeError("seed: expected an object");
+  const obj = value;
+  for (const key of Object.keys(obj)) {
+    if (!KEYS.includes(key)) throw new TypeError(`seed.${key}: unknown collection (expected ${KEYS.join(", ")})`);
+  }
+  for (const key of KEYS) {
+    const rows = obj[key];
+    if (rows === void 0) continue;
+    if (!Array.isArray(rows)) throw new TypeError(`seed.${key}: expected an array`);
+    rows.forEach((row, i) => {
+      if (!row || typeof row !== "object" || Array.isArray(row)) throw new TypeError(`seed.${key}[${i}]: expected an object`);
+      for (const field of REQUIRED[key]) {
+        if (typeof row[field] !== "string") throw new TypeError(`seed.${key}[${i}].${field}: expected a string`);
+      }
+      if (key === "entities") checkFacets(row.facets, `seed.entities[${i}].facets`);
+    });
+  }
+  obj.entities?.forEach((row, i) => {
+    const roles = row.seedRoles;
+    if (roles === void 0) return;
+    if (!Array.isArray(roles)) throw new TypeError(`seed.entities[${i}].seedRoles: expected an array`);
+    roles.forEach((r, j) => {
+      for (const field of ["profileSlug", "workspaceId"]) {
+        if (!r || typeof r !== "object" || typeof r[field] !== "string") {
+          throw new TypeError(`seed.entities[${i}].seedRoles[${j}].${field}: expected a string`);
+        }
+      }
+    });
+  });
+  const out = JSON.parse(JSON.stringify(obj));
+  if (out.entities) out.entities = out.entities.map((row, i) => desugarSeedRoles(row, `seed.entities[${i}]`));
+  return out;
+}
+function checkFacets(facets, at) {
+  if (facets === void 0) return;
+  if (!Array.isArray(facets)) throw new TypeError(`${at}: expected an array`);
+  facets.forEach((f, j) => {
+    if (!f || typeof f !== "object" || Array.isArray(f)) throw new TypeError(`${at}[${j}]: expected an object`);
+    for (const field of ["facetId", "slug", "workspaceId"]) {
+      if (typeof f[field] !== "string") throw new TypeError(`${at}[${j}].${field}: expected a string`);
+    }
+    const shared = f.sharedRole;
+    if (shared !== void 0 && typeof shared !== "boolean") throw new TypeError(`${at}[${j}].sharedRole: expected a boolean`);
+  });
+}
+
 // src/testing/cloud.ts
 var MOCK_CLOUD_URL = "https://cp.mock-synap.test";
-var STATE_RE = /^[A-Za-z0-9._~-]{16,256}$/;
-var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
 function createMockCloud(options = {}) {
   const base = (options.url ?? MOCK_CLOUD_URL).replace(/\/+$/, "");
   const requests = [];
@@ -454,7 +783,7 @@ function createMockCloud(options = {}) {
     const clientId = url.searchParams.get("client_id");
     const state = url.searchParams.get("state");
     if (!clientId || !cimdUrlAccepted(clientId)) throw new Error("Chooser refused: client_id must be an https CIMD URL");
-    if (!state || !STATE_RE.test(state)) throw new Error("Chooser refused: state is missing or malformed");
+    if (!state || !CLOUD_STATE_RE.test(state)) throw new Error("Chooser refused: state is missing or malformed");
     if (clientId !== metadata.client_id) throw new Error("Chooser refused: the client metadata is not this client_id's");
     return new URL(metadata.initiate_login_uri);
   }
@@ -472,7 +801,7 @@ function createMockCloud(options = {}) {
 
 // src/testing/index.ts
 var MOCK_POD_URL = "https://mock.synap.invalid";
-var MOCK_TOKENS = { form: "demo-form", share: "demo", site: "demo-site" };
+var MOCK_TOKENS = { form: "demo-form", share: "demo", htmlShare: "demo-html", site: "demo-site" };
 var MOCK_RETRY_AFTER_SEC = 30;
 var MOCK_FAILURE_TOKENS = {
   /** 429 with no `Retry-After` (what the pod's public doors send today). */
@@ -652,7 +981,7 @@ function invalidKeys(form, body) {
 }
 function createMockPod(options = {}) {
   const forms = options.forms ?? { [MOCK_TOKENS.form]: MOCK_FORM };
-  const shares = options.shares ?? { [MOCK_TOKENS.share]: MOCK_SHARE };
+  const shares = options.shares ?? { [MOCK_TOKENS.share]: MOCK_SHARE, [MOCK_TOKENS.htmlShare]: MOCK_HTML_SHARE };
   const sites = options.sites ?? { [MOCK_TOKENS.site]: MOCK_SITE };
   const requests = [];
   const submissions = [];
@@ -724,6 +1053,7 @@ export {
   MOCK_FAILURE_TOKENS,
   MOCK_FORM,
   MOCK_GRANT,
+  MOCK_HTML_SHARE,
   MOCK_POD_URL,
   MOCK_RETRY_AFTER_SEC,
   MOCK_SHARE,
@@ -732,6 +1062,7 @@ export {
   MOCK_USER,
   createMockAuthServer,
   createMockCloud,
-  createMockPod
+  createMockPod,
+  parseMockPodSeed
 };
 //# sourceMappingURL=testing.js.map