@toa.io/extensions.exposition 1.0.0-alpha.285 → 1.0.0-alpha.286

package/features/etag.feature

@@ -24,7 +24,6 @@ Feature: Optimistic concurrency control
     Then the following reply is sent:
       """
       201 Created
-      etag: "1"
 
       id: ${{ id }}
       """
@@ -74,88 +73,6 @@ Feature: Optimistic concurrency control
     Then the following reply is sent:
       """
       200 OK
-      etag: "2"
-      """
-
-  Scenario: Using etag with enumeration
-    Given the `pots` is running with the following manifest:
-      """yaml
-      exposition:
-        /:
-          io:output: true
-          GET: enumerate
-      """
-    # sorted and bounded, or the collection does not enumerate the same way twice
-    When the following request is received:
-      """
-      GET /pots/?sort=id:asc&limit=2 HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      etag: "${{ etag }}"
-      """
-    # the same representation must be asked for, the tag identifies it
-    When the following request is received:
-      """
-      GET /pots/?sort=id:asc&limit=2 HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      if-none-match: "${{ etag }}"
-      """
-    Then the following reply is sent:
-      """
-      304 Not Modified
-      etag: "${{ etag }}"
-      """
-
-  Scenario: `etag` of a reply that carries no version
-    Given the `echo` is running with the following manifest:
-      """yaml
-      exposition:
-        /:name:
-          io:output: true
-          GET: compute
-      """
-    When the following request is received:
-      """
-      GET /echo/Bob/ HTTP/1.1
-      host: nex.toa.io
-      accept: text/plain
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      etag: "2d6a12ffc0a952fbd09f8909de4e0e4b20ba2b906cd12ac22bbef4ee5bd9003e"
-
-      Hello Bob
-      """
-    When the following request is received:
-      """
-      GET /echo/Bob/ HTTP/1.1
-      host: nex.toa.io
-      accept: text/plain
-      if-none-match: "2d6a12ffc0a952fbd09f8909de4e0e4b20ba2b906cd12ac22bbef4ee5bd9003e"
-      """
-    Then the following reply is sent:
-      """
-      304 Not Modified
-      etag: "2d6a12ffc0a952fbd09f8909de4e0e4b20ba2b906cd12ac22bbef4ee5bd9003e"
-      """
-    # the tag identifies the representation, which is what `vary: accept` says
-    When the following request is received:
-      """
-      GET /echo/Bob/ HTTP/1.1
-      host: nex.toa.io
-      accept: application/yaml
-      if-none-match: "2d6a12ffc0a952fbd09f8909de4e0e4b20ba2b906cd12ac22bbef4ee5bd9003e"
-      """
-    Then the following reply is sent:
-      """
-      200 OK
-      etag: "360c52c694c418b4a793a4815e611206ab17fe04836351a65638a15d1491810b"
       """
 
   Scenario: Weak `etag`
@@ -182,7 +99,6 @@ Feature: Optimistic concurrency control
     Then the following reply is sent:
       """
       201 Created
-      etag: "1"
 
       id: ${{ id }}
       """
@@ -232,7 +148,6 @@ Feature: Optimistic concurrency control
     Then the following reply is sent:
       """
       200 OK
-      etag: "2"
       """
 
   Scenario: Hash `if-none-match` on versioned resource
@@ -258,7 +173,6 @@ Feature: Optimistic concurrency control
     Then the following reply is sent:
       """
       201 Created
-      etag: "1"
 
       id: ${{ id }}
       """

package/features/identity.bans.feature

@@ -5,9 +5,9 @@ Feature: Bans
     Given the `identity.basic` database contains:
     # developer:secret
     # user:12345
-      | _id                              | authority | username  | password                                                     | _deleted |
-      | efe3a65ebbee47ed95a73edd911ea328 | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O | null     |
-      | e8e4f9c2a68d419b861403d71fabc915 | nex       | user      | $2b$10$Frszmrmsz9iwSXzBbRRMKeDVKsNxozkrLNSsN.SnVC.KPxLtQr/bK | null     |
+      | _id                              | authority | username  | password                                                     | DELETED |
+      | efe3a65ebbee47ed95a73edd911ea328 | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O | null    |
+      | e8e4f9c2a68d419b861403d71fabc915 | nex       | user      | $2b$10$Frszmrmsz9iwSXzBbRRMKeDVKsNxozkrLNSsN.SnVC.KPxLtQr/bK | null    |
     And the `identity.bans` database is empty
 
   Scenario: Banning an Identity

package/features/identity.basic.feature

@@ -132,8 +132,8 @@ Feature: Basic authentication
               access: granted!
       """
     And the `identity.basic` database contains:
-      | _id                              | _version | authority | username  | password                                                     |
-      | efe3a65ebbee47ed95a73edd911ea328 | 1        | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
+      | _id                              | VERSION | authority | username  | password                                                     |
+      | efe3a65ebbee47ed95a73edd911ea328 | 1       | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
     When the following request is received:
       """
       PATCH /identity/basic/efe3a65ebbee47ed95a73edd911ea328/ HTTP/1.1
@@ -173,9 +173,9 @@ Feature: Basic authentication
 
   Scenario: Changing other identity's password
     Given the `identity.basic` database contains:
-      | _id                              | authority | username  | password                                                     | _version |
-      | efe3a65ebbee47ed95a73edd911ea328 | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O | 1        |
-      | 6c0be50cbfb043acafe69cc7d3895f84 | nex       | attacker  | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O | 1        |
+      | _id                              | authority | username  | password                                                     | VERSION |
+      | efe3a65ebbee47ed95a73edd911ea328 | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O | 1       |
+      | 6c0be50cbfb043acafe69cc7d3895f84 | nex       | attacker  | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O | 1       |
     When the following request is received:
       """
       PATCH /identity/basic/efe3a65ebbee47ed95a73edd911ea328/ HTTP/1.1
@@ -222,8 +222,8 @@ Feature: Basic authentication
         - ^[^A]{1,16}$  # should not contain 'A'
       """
     And the `identity.basic` database contains:
-      | _id                              | _version | authority | username  | password                                                     |
-      | efe3a65ebbee47ed95a73edd911ea328 | 1        | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
+      | _id                              | VERSION | authority | username  | password                                                     |
+      | efe3a65ebbee47ed95a73edd911ea328 | 1       | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
     When the following request is received:
       """
       PATCH /identity/basic/efe3a65ebbee47ed95a73edd911ea328/ HTTP/1.1
@@ -508,8 +508,8 @@ Feature: Basic authentication
 
   Scenario: Check if username is available
     Given the `identity.basic` database contains:
-      | _id                              | authority | username  | password                                                     | _version |
-      | efe3a65ebbee47ed95a73edd911ea328 | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O | 1        |
+      | _id                              | authority | username  | password                                                     | VERSION |
+      | efe3a65ebbee47ed95a73edd911ea328 | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O | 1       |
     When the following request is received:
       """
       GET /identity/basic/usernames/ZGV2ZWxvcGVy/ HTTP/1.1

package/features/identity.federation.feature

@@ -9,7 +9,7 @@ Feature: Identity Federation
     Given the `identity.federation` configuration:
       """yaml
       trust:
-        - iss: http://localhost:44444
+        - iss: http://localhost:31005
           aud: test
       """
     And the IDP token for User is issued
@@ -68,14 +68,14 @@ Feature: Identity Federation
       200 OK
 
       - id: ${{ User.credential }}
-        iss: http://localhost:44444
+        iss: http://localhost:31005
       """
 
   Scenario: Creating an Identity using inception
     Given the `identity.federation` configuration:
       """yaml
       trust:
-        - iss: http://localhost:44444
+        - iss: http://localhost:31005
           aud: test
       assert: false
       """
@@ -150,7 +150,7 @@ Feature: Identity Federation
       200 OK
 
       - id: ${{ Bill.credential }}
-        iss: http://localhost:44444
+        iss: http://localhost:31005
       """
     And the following request is received:
       # same credentials
@@ -171,11 +171,11 @@ Feature: Identity Federation
     Given the `identity.federation` configuration:
       """yaml
       trust:
-        - iss: http://localhost:44444
+        - iss: http://localhost:31005
           aud: test
       principal:
         authority: nex
-        iss: http://localhost:44444
+        iss: http://localhost:31005
         sub: root
       """
     And the IDP token for root is issued
@@ -218,7 +218,7 @@ Feature: Identity Federation
     Given the `identity.federation` configuration:
       """yaml
       trust:
-        - iss: http://localhost:44444
+        - iss: http://localhost:31005
           aud: test
       """
     And the `identity.basic` database is empty
@@ -260,7 +260,7 @@ Feature: Identity Federation
       201 Created
 
       id: ${{ Bob.credential }}
-      iss: http://localhost:44444
+      iss: http://localhost:31005
       """
     # the created credential is listed as is
     When the following request is received:
@@ -275,7 +275,7 @@ Feature: Identity Federation
       200 OK
 
       - id: ${{ Bob.credential }}
-        iss: http://localhost:44444
+        iss: http://localhost:31005
       """
     And the following request is received:
       """
@@ -335,7 +335,7 @@ Feature: Identity Federation
     Given the `identity.federation` configuration:
       """yaml
       trust:
-        - iss: http://localhost:44444
+        - iss: http://localhost:31005
           aud: nex
           secret: $IDP_SECRET
       """
@@ -363,7 +363,7 @@ Feature: Identity Federation
     Given the `identity.federation` configuration:
       """yaml
       trust:
-        - iss: http://localhost:44444
+        - iss: http://localhost:31005
           aud: nex
           signature:
             iss: io.toa.nex.id

package/features/identity.tokens.custom.feature

@@ -82,8 +82,8 @@ Feature: Custom tokens
       | efe3a65ebbee47ed95a73edd911ea328 | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
       | e8e4f9c2a68d419b861403d71fabc915 | nex       | user      | $2b$10$Frszmrmsz9iwSXzBbRRMKeDVKsNxozkrLNSsN.SnVC.KPxLtQr/bK |
     And the `identity.roles` database contains:
-      | _id                              | identity                         | role                      |
-      | 9c4702490ff84f2a9e1b1da2ab64bdd4 | efe3a65ebbee47ed95a73edd911ea328 | system:identity:tokens    |
+      | _id                              | identity                         | role                   |
+      | 9c4702490ff84f2a9e1b1da2ab64bdd4 | efe3a65ebbee47ed95a73edd911ea328 | system:identity:tokens |
     When the following request is received:
       """
       POST /identity/tokens/e8e4f9c2a68d419b861403d71fabc915/ HTTP/1.1
@@ -258,7 +258,7 @@ Feature: Custom tokens
       200 OK
 
       - id: ${{ kid }}
-        _created: ${{ created }}
+        CREATED: ${{ created }}
         label: One-time token
         expires: ${{ expires }}
       """
@@ -369,8 +369,8 @@ Feature: Custom tokens
 
   Scenario: Changing the password revokes custom tokens
     Given the `identity.basic` database contains:
-      | _id                              | _version | authority | username  | password                                                     |
-      | efe3a65ebbee47ed95a73edd911ea328 | 1        | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
+      | _id                              | VERSION | authority | username  | password                                                     |
+      | efe3a65ebbee47ed95a73edd911ea328 | 1       | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
     And the `identity.tokens` configuration:
       """yaml
       cache:

package/features/identity.tokens.feature

@@ -92,8 +92,8 @@ Feature: Tokens lifecycle
       refresh: 1
       """
     And the `identity.basic` database contains:
-      | _id                              | _version | authority | username  | password                                                     |
-      | efe3a65ebbee47ed95a73edd911ea328 | 1        | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
+      | _id                              | VERSION | authority | username  | password                                                     |
+      | efe3a65ebbee47ed95a73edd911ea328 | 1       | nex       | developer | $2b$10$ZRSKkgZoGnrcTNA5w5eCcu3pxDzdTduhteVYXcp56AaNcilNkwJ.O |
     When the following request is received:
       """
       GET /efe3a65ebbee47ed95a73edd911ea328/ HTTP/1.1

package/features/interruptions.feature

@@ -1,3 +1,4 @@
+@timing
 Feature: Request interruptions
 
   Scenario: Connection reset while processing a request

package/features/introspection.map.feature

@@ -20,8 +20,8 @@ Feature: Reading the introspection map
 
   Scenario: Reading the nodes
     Given the `introspection.nodes` database contains:
-      | _id                              | namespace | component | version  | _version | _deleted |
-      | 70e1a6551346c6932657cdb2526df0fa | pots      | tea       | 7bb04bba | 1        | null     |
+      | _id                              | namespace | component | version  | VERSION | DELETED |
+      | 70e1a6551346c6932657cdb2526df0fa | pots      | tea       | 7bb04bba | 1       | null    |
     When the following request is received:
       """
       GET /introspection/nodes/ HTTP/1.1
@@ -42,8 +42,8 @@ Feature: Reading the introspection map
 
   Scenario: Reading one node
     Given the `introspection.nodes` database contains:
-      | _id                              | namespace | component | version  | _version | _deleted |
-      | 70e1a6551346c6932657cdb2526df0fa | pots      | tea       | 7bb04bba | 1        | null     |
+      | _id                              | namespace | component | version  | VERSION | DELETED |
+      | 70e1a6551346c6932657cdb2526df0fa | pots      | tea       | 7bb04bba | 1       | null    |
     When the following request is received:
       """
       GET /introspection/nodes/70e1a6551346c6932657cdb2526df0fa/ HTTP/1.1

package/features/io.throttle.feature

@@ -1,3 +1,4 @@
+@timing
 Feature: Request throttling
 
   Scenario: Throttle requests to a path

package/features/map.feature

@@ -234,7 +234,7 @@ Feature: HTTP context mapping
     And the `identity.federation` configuration:
       """yaml
       trust:
-        - iss: http://localhost:44444
+        - iss: http://localhost:31005
           aud: test
       """
     And the `echo` is running with the following manifest:
@@ -269,7 +269,7 @@ Feature: HTTP context mapping
     And the `identity.federation` configuration:
       """yaml
       trust:
-        - iss: http://localhost:44444
+        - iss: http://localhost:31005
           aud: test
       assert: false
       """

package/features/octets.cloudinary.feature

@@ -1,4 +1,4 @@
-@cloudinary
+@manual @cloudinary
 Feature: Octets with Cloudinary storage
 
   Background:

package/features/octets.download.feature

@@ -1,3 +1,4 @@
+@network
 Feature: Download external resources
 
   Scenario Outline: Download from trusted location defined as <type>

package/features/require.feature

@@ -27,7 +27,6 @@ Feature: Request requirements
     Then the following reply is sent:
       """
       201 Created
-      etag: "${{ etag }}"
 
       id: ${{ id }}
       """
@@ -53,7 +52,7 @@ Feature: Request requirements
       host: nex.toa.io
       content-type: application/yaml
       accept: text/plain
-      if-match: "${{ etag }}"
+      if-match: "1"
 
       title: Bye
       """

package/features/steps/Captures.ts

@@ -5,7 +5,7 @@ const { binding } = tsflow
 
 @binding()
 export class Captures extends http.Captures {
-  public constructor () {
+  public constructor() {
     super(functions)
   }
 }

package/features/steps/Cloudinary.ts

@@ -8,6 +8,5 @@ import { Before } from '@cucumber/cucumber'
  * fresh machine; with one they run, no flag to remember.
  */
 Before({ tags: '@cloudinary' }, function () {
-  if (process.env.CLOUDINARY_ENVIRONMENT === undefined)
-    return 'skipped'
+  if (process.env.CLOUDINARY_ENVIRONMENT === undefined) return 'skipped'
 })

package/features/steps/Common.ts

@@ -9,25 +9,24 @@ const { binding, given } = tsflow
 export class Common {
   private readonly captures: Captures
 
-  public constructor (captures: Captures) {
+  public constructor(captures: Captures) {
     this.captures = captures
   }
 
   @given('after {float} second(s)')
-  public async timeout (interval: number): Promise<void> {
+  public async timeout(interval: number): Promise<void> {
     await timeout(interval * 1000)
   }
 
   @given('the process is running')
-  public async noop (): Promise<void> {
-  }
+  public async noop(): Promise<void> {}
 
   /**
    * A remote resource is whatever it is today. A scenario downloading one compares the reply
    * against what the origin actually serves, not against a literal that goes stale when it changes.
    */
   @given('the length of `{}` is captured as `{word}`')
-  public async length (url: string, name: string): Promise<void> {
+  public async length(url: string, name: string): Promise<void> {
     const response = await fetch(url)
 
     assert.equal(response.status, 200, `${url} answered ${response.status}`)

package/features/steps/Components.ts

@@ -23,18 +23,18 @@ export class Components {
   private readonly gateway: Gateway
   private compositions: Record<string, Connector> = {}
 
-  public constructor (workspace: Workspace, gateway: Gateway) {
+  public constructor(workspace: Workspace, gateway: Gateway) {
     this.workspace = workspace
     this.gateway = gateway
   }
 
   @given('the `{word}` is running')
-  public async run (name: string): Promise<void> {
+  public async run(name: string): Promise<void> {
     await this.runComponent(name)
   }
 
   @given('the `{word}` is running with the following manifest:')
-  public async patchAndRun (name: string, yaml: string): Promise<void> {
+  public async patchAndRun(name: string, yaml: string): Promise<void> {
     const manifest = parse(yaml) as object
 
     await this.runComponent(name, manifest)
@@ -42,7 +42,7 @@ export class Components {
 
   /** One composition, as the explorer hosts them. */
   @given('the introspection components are running')
-  public async runMap (): Promise<void> {
+  public async runMap(): Promise<void> {
     assert.ok(!(MAP in this.compositions), `Composition '${MAP}' is already running`)
 
     this.compositions[MAP] = await boot.composition(map())
@@ -52,8 +52,11 @@ export class Components {
 
   /** The values component, as the configuration extension ships it; the service hosts it alone. */
   @given('the configuration values are running')
-  public async runValues (): Promise<void> {
-    assert.ok(!(VALUES in this.compositions), `Composition '${VALUES}' is already running`)
+  public async runValues(): Promise<void> {
+    assert.ok(
+      !(VALUES in this.compositions),
+      `Composition '${VALUES}' is already running`
+    )
 
     await this.gateway.start()
 
@@ -64,12 +67,12 @@ export class Components {
 
   /** What the deployment would tell the values service, as the scenario needs it. */
   @given('the configuration values are deployed:')
-  public deployValues (yaml: string): void {
+  public deployValues(yaml: string): void {
     process.env.TOA_CONFIGURATION_VALUES = JSON.stringify(parse(yaml))
   }
 
   @given('the `{word}` is stopped')
-  public async stop (name: string): Promise<void> {
+  public async stop(name: string): Promise<void> {
     assert.ok(name in this.compositions, `Composition '${name}' is not running`)
 
     await this.compositions[name].disconnect()
@@ -77,15 +80,17 @@ export class Components {
   }
 
   @after()
-  public async shutdown (): Promise<void> {
-    const promises = Object.values(this.compositions).map((composition) => composition.disconnect())
+  public async shutdown(): Promise<void> {
+    const promises = Object.values(this.compositions).map((composition) =>
+      composition.disconnect()
+    )
 
     await Promise.all(promises)
 
     delete process.env.TOA_CONFIGURATION_VALUES
   }
 
-  private async runComponent (name: string, manifest?: object): Promise<void> {
+  private async runComponent(name: string, manifest?: object): Promise<void> {
     assert.ok(!(name in this.compositions), `Composition '${name}' is already running`)
 
     // the gateway first: a component announces itself when it opens, and that only
@@ -101,7 +106,7 @@ export class Components {
   }
 }
 
-function values (): string {
+function values(): string {
   const root = dirname(require.resolve('@toa.io/extensions.configuration/package.json'))
 
   return join(root, 'components', 'configuration.values')

package/features/steps/Database.ts

@@ -11,66 +11,84 @@ export class Database {
   private static client: MongoClient
 
   @given('the `{word}` database contains:')
-  public async upsert (id: string, table: DataTable): Promise<void> {
+  public async upsert(id: string, table: DataTable): Promise<void> {
     const collection = this.collection(id)
     const columns = table.raw()[0]
     const rows = table.rows()
     const documents: Document[] = []
 
     for (let r = 0; r < rows.length; r++) {
-      const document: Document = {}
+      const document = {} as Document
 
       for (let c = 0; c < columns.length; c++) {
         const str = rows[r][c]
         const int = parseInt(str)
 
-        document[columns[c]] = int.toString() === str
-          ? int
-          : str === 'null'
-            ? null
-            : str === 'true'
-              ? true
-              : str === 'false'
-                ? false
-                : str
+        document[columns[c]] =
+          int.toString() === str
+            ? int
+            : str === 'null'
+              ? null
+              : str === 'true'
+                ? true
+                : str === 'false'
+                  ? false
+                  : str
       }
 
       /*
        * A record that has never been written carries no timestamps, and the entity stamps
        * the ones it is missing as it is read — with the time it was read. The same row then
-       * enumerates differently on every request, which is a moving `etag` and a collection
-       * that is never unmodified.
+       * enumerates differently on every request, which is a `last-modified` that moves and a
+       * collection that is never unmodified.
        */
-      document._created ??= Date.now()
-      document._updated ??= document._created
+      document.CREATED ??= Date.now()
+      document.UPDATED ??= document.CREATED
 
       documents.push(document)
     }
 
-    await collection.deleteMany({})
+    /*
+     * A component the scenario has already started writes to this collection too, and it may
+     * write the very row named here — introspection records a node under the same `_id` this
+     * derives. Emptying the collection and inserting leaves a window for it to land in
+     * between, and the insert then fails on a duplicate key. Replacing each row named, and
+     * deleting only what is not, has no such window.
+     */
+    const ids = documents.map((document) => document._id)
+
+    await collection.deleteMany({ _id: { $nin: ids } })
 
     if (documents.length > 0)
-      await collection.insertMany(documents)
+      await collection.bulkWrite(
+        documents.map((document) => ({
+          replaceOne: {
+            filter: { _id: document._id },
+            replacement: document,
+            upsert: true
+          }
+        }))
+      )
   }
 
   @given('the `{word}` database is empty')
-  public async truncate (id: string): Promise<void> {
+  public async truncate(id: string): Promise<void> {
     await this.collection(id).deleteMany({})
   }
 
   @beforeAll()
-  public static async connect (): Promise<void> {
-    this.client = new MongoClient('mongodb://developer:secret@localhost:27017')
+  public static async connect(): Promise<void> {
+    this.client = new MongoClient('mongodb://developer:secret@localhost:31020')
 
     await this.client.connect()
   }
 
   @afterAll()
-  public static async disconnect (): Promise<void> {
+  public static async disconnect(): Promise<void> {
     await this.client.close()
   }
 
-  private collection (id: string): Collection {
+  private collection(id: string): Collection<Document> {
     const [name, namespace = 'default'] = id.split('.').reverse()
     const collection = `${namespace}_${name}`.toLowerCase()
 
@@ -78,4 +96,5 @@ export class Database {
   }
 }
 
-type Document = Record<string, string | number | boolean | null>
+/** Every fixture table names an `_id`, which is what a row is replaced by. */
+type Document = Record<string, string | number | boolean | null> & { _id: string }