npm - @underpostnet/cyberia - Versions diffs - 3.3.73 → 3.3.77 - Mend

@underpostnet/cyberia 3.3.73 → 3.3.77

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (269) hide show

package/.env.example +17 -5
package/.github/workflows/coverall.cyberia.ci.yml +10 -0
package/.github/workflows/docker-image.cyberia-client.ci.yml +1 -1
package/.github/workflows/docker-image.cyberia-client.dev.ci.yml +1 -1
package/.github/workflows/docker-image.cyberia-server.ci.yml +1 -1
package/.github/workflows/docker-image.cyberia-server.dev.ci.yml +1 -1
package/.github/workflows/docker-image.engine-cyberia.ci.yml +1 -1
package/.github/workflows/docker-image.engine-cyberia.dev.ci.yml +1 -1
package/.github/workflows/engine-cyberia.ci.yml +1 -1
package/.github/workflows/publish.cyberia.ci.yml +44 -0
package/AGENTS.md +61 -12
package/CHANGELOG.md +159 -161
package/CLI-HELP.md +20 -13
package/Dockerfile +1 -1
package/Dockerfile.dev +1 -1
package/Dockerfile.test +2 -2
package/README.md +28 -28
package/bin/build.js +96 -21
package/bin/cyberia.js +1247 -1373
package/bin/index.js +1247 -1373
package/compose.env +17 -5
package/conf.js +7 -4
package/deploy/cyberia-client/deploy.sh +10 -11
package/deploy/cyberia-client/package.sh +0 -1
package/deploy/cyberia-client/state.sh +3 -2
package/deploy/cyberia-server/deploy.sh +10 -11
package/deploy/cyberia-server/package.sh +0 -1
package/deploy/cyberia-server/state.sh +3 -2
package/deploy/dd-cyberia/deploy.sh +5 -5
package/deploy/dd-cyberia/init.sh +15 -14
package/deploy/dd-cyberia/package.sh +0 -1
package/deploy/dd-cyberia/state.sh +2 -2
package/deploy/dd-cyberia/sync-deploy.sh +139 -75
package/deploy/lib/config.sh +29 -0
package/deploy/lib/github-actions-logging.sh +92 -76
package/deploy/lib/host.sh +28 -19
package/deploy/lib/state.sh +4 -1
package/deploy/pwa-microservices-template/deploy.sh +10 -8
package/deploy/release/deploy.sh +0 -2
package/deployment.yaml +1 -1
package/docker-compose.yml +23 -17
package/docs/coverage/cyberia/api/cyberia-instance/cyberia-fallback-capture.js.html +1591 -0
package/docs/coverage/cyberia/api/cyberia-instance/index.html +116 -0
package/docs/coverage/cyberia/api/cyberia-server-defaults/cyberia-server-defaults.js.html +4138 -0
package/docs/coverage/cyberia/api/cyberia-server-defaults/index.html +116 -0
package/docs/coverage/cyberia/api/object-layer/index.html +116 -0
package/docs/coverage/cyberia/api/object-layer/object-layer.model.js.html +1393 -0
package/docs/coverage/cyberia/base.css +362 -0
package/docs/coverage/cyberia/block-navigation.js +82 -0
package/docs/coverage/cyberia/favicon.png +0 -0
package/docs/coverage/cyberia/index.html +161 -0
package/docs/coverage/cyberia/prettify.css +101 -0
package/docs/coverage/cyberia/prettify.js +937 -0
package/docs/coverage/cyberia/projects/cyberia/atlas-sprite-sheet-generator.js.html +1315 -0
package/docs/coverage/cyberia/projects/cyberia/index.html +176 -0
package/docs/coverage/cyberia/projects/cyberia/instance-backup.js.html +715 -0
package/docs/coverage/cyberia/projects/cyberia/instance-data.js.html +2182 -0
package/docs/coverage/cyberia/projects/cyberia/shape-generator.js.html +3265 -0
package/docs/coverage/cyberia/projects/cyberia/stat-balance.js.html +328 -0
package/docs/coverage/cyberia/sort-arrow-sprite.png +0 -0
package/docs/coverage/cyberia/sorter.js +205 -0
package/hardhat/package-lock.json +2 -2
package/hardhat/package.json +1 -1
package/manifests/cronjobs/dd-cron/dd-cron-backup.yaml +1 -1
package/manifests/cronjobs/dd-cron/dd-cron-vultr.yaml +1 -1
package/manifests/deployment/dd-cyberia-development/deployment.yaml +1 -1
package/manifests/deployment/dd-default-development/deployment.yaml +2 -2
package/manifests/deployment/mongo-express/deployment.yaml +46 -27
package/manifests/deployment/mongo-express/kustomization.yaml +9 -0
package/manifests/deployment/mongo-express/mongo-express-nodeport.yaml +18 -0
package/manifests/deployment/mongo-express/service.yaml +16 -0
package/manifests/deployment/mongo-express-no-auth/disable-mongodb-auth.yaml +16 -0
package/manifests/deployment/mongo-express-no-auth/kustomization.yaml +16 -0
package/package.json +19 -17
package/scripts/test-monitor.sh +3 -3
package/src/api/atlas-sprite-sheet/atlas-sprite-sheet.controller.js +14 -9
package/src/api/atlas-sprite-sheet/atlas-sprite-sheet.model.js +36 -5
package/src/api/atlas-sprite-sheet/atlas-sprite-sheet.router.js +5 -0
package/src/api/atlas-sprite-sheet/atlas-sprite-sheet.service.js +88 -184
package/src/api/cyberia-action/cyberia-action.router.js +2 -2
package/src/api/cyberia-action/cyberia-action.service.js +3 -4
package/src/api/cyberia-audio/cyberia-audio.controller.js +6 -0
package/src/api/cyberia-audio/cyberia-audio.model.js +61 -0
package/src/api/cyberia-audio/cyberia-audio.router.js +21 -0
package/src/api/cyberia-audio/cyberia-audio.service.js +220 -0
package/src/api/cyberia-client-hints/cyberia-client-hints.controller.js +1 -3
package/src/api/cyberia-client-hints/cyberia-client-hints.model.js +10 -19
package/src/api/cyberia-client-hints/cyberia-client-hints.router.js +12 -34
package/src/api/cyberia-client-hints/cyberia-client-hints.service.js +15 -32
package/src/api/cyberia-dialogue/cyberia-dialogue.model.js +1 -1
package/src/api/cyberia-dialogue/cyberia-dialogue.router.js +1 -1
package/src/api/cyberia-entity/cyberia-entity.model.js +2 -0
package/src/api/cyberia-entity/cyberia-entity.service.js +1 -1
package/src/api/cyberia-entity-type-default/cyberia-entity-type-default.controller.js +8 -2
package/src/api/cyberia-entity-type-default/cyberia-entity-type-default.model.js +31 -20
package/src/api/cyberia-entity-type-default/cyberia-entity-type-default.router.js +16 -1
package/src/api/cyberia-entity-type-default/cyberia-entity-type-default.service.js +466 -3
package/src/api/cyberia-instance/cyberia-fallback-capture.js +87 -51
package/src/api/cyberia-instance/cyberia-fallback-world.js +21 -40
package/src/api/cyberia-instance/cyberia-instance-boot.service.js +5 -5
package/src/api/cyberia-instance/cyberia-instance-items.js +98 -0
package/src/api/cyberia-instance/cyberia-instance-map.service.js +34 -141
package/src/api/cyberia-instance/cyberia-instance.controller.js +1 -4
package/src/api/cyberia-instance/cyberia-instance.model.js +0 -14
package/src/api/cyberia-instance/cyberia-instance.router.js +3 -16
package/src/api/cyberia-instance/cyberia-instance.service.js +3 -43
package/src/api/cyberia-instance/cyberia-world-generator.js +8 -13
package/src/api/cyberia-instance-conf/cyberia-instance-conf.model.js +49 -75
package/src/api/cyberia-instance-conf/cyberia-instance-conf.service.js +74 -1
package/src/api/cyberia-map/cyberia-map.service.js +6 -2
package/src/api/cyberia-map-audio-conf/cyberia-map-audio-conf.controller.js +31 -0
package/src/api/cyberia-map-audio-conf/cyberia-map-audio-conf.model.js +56 -0
package/src/api/cyberia-map-audio-conf/cyberia-map-audio-conf.router.js +33 -0
package/src/api/cyberia-map-audio-conf/cyberia-map-audio-conf.service.js +189 -0
package/src/api/cyberia-quest/cyberia-quest.router.js +3 -3
package/src/api/cyberia-quest/cyberia-quest.service.js +3 -3
package/src/api/cyberia-quest-progress/cyberia-quest-progress.model.js +1 -1
package/src/api/cyberia-server-defaults/cyberia-server-defaults.js +403 -188
package/src/api/cyberia-skill/cyberia-skill.model.js +6 -6
package/src/api/file/file.ref.js +153 -0
package/src/api/file/file.ref.json +11 -2
package/src/api/object-layer/object-layer.model.js +47 -12
package/src/api/object-layer/object-layer.router.js +10 -3
package/src/api/object-layer/object-layer.service.js +113 -120
package/src/cli/app.js +12 -1
package/src/cli/client.js +2 -2
package/src/cli/cluster.js +80 -18
package/src/cli/deploy.js +215 -34
package/src/cli/docker-compose.js +1 -1
package/src/cli/fs-selection.js +115 -0
package/src/cli/fs.js +158 -342
package/src/cli/index.js +22 -10
package/src/cli/release.js +3 -1
package/src/cli/repository.js +35 -9
package/src/cli/run.js +80 -199
package/src/cli/test.js +4 -0
package/src/cli/wireguard.js +32 -31
package/src/client/components/core/Badge.js +0 -1
package/src/client/components/core/CssCore.js +8 -1
package/src/client/components/core/Docs.js +77 -100
package/src/client/components/core/Modal.js +77 -23
package/src/client/components/core/ToolTip.js +15 -0
package/src/client/components/cryptokoyn/AppShellCryptokoyn.js +0 -2
package/src/client/components/cyberia/ActionEngineCyberia.js +12 -36
package/src/client/components/cyberia/EntityEngineCyberia.js +492 -121
package/src/client/components/cyberia/InstanceEngineCyberia.js +129 -160
package/src/client/components/cyberia/InstanceSelectionView.js +7 -1
package/src/client/components/cyberia/MapEngineCyberia.js +175 -69
package/src/client/components/cyberia/ObjectLayerEngine.js +1011 -97
package/src/client/components/cyberia/ObjectLayerEngineModal.js +81 -155
package/src/client/components/cyberia/ObjectLayerEngineViewer.js +113 -98
package/src/client/components/cyberia/SharedDefaultsCyberia.js +215 -56
package/src/client/components/cyberia-portal/AppShellCyberiaPortal.js +0 -34
package/src/client/components/cyberia-portal/CssCyberiaPortal.js +1 -1
package/src/client/components/cyberia-portal/MainBodyCyberiaPortal.js +712 -76
package/src/client/components/cyberia-portal/RouterCyberiaPortal.js +0 -4
package/src/client/components/cyberia-portal/TranslateCyberiaPortal.js +0 -4
package/src/client/components/default/AppShellDefault.js +1 -4
package/src/client/components/itemledger/AppShellItemledger.js +0 -2
package/src/client/components/underpost/AppShellUnderpost.js +1 -1
package/src/client/public/cyberia-docs/ARCHITECTURE.md +15 -15
package/src/client/public/cyberia-docs/CYBERIA-CLI.md +280 -24
package/src/client/public/cyberia-docs/CYBERIA-CLIENT.md +51 -29
package/src/client/public/cyberia-docs/CYBERIA-SAGA.md +52 -53
package/src/client/public/cyberia-docs/CYBERIA-SERVER.md +16 -11
package/src/client/public/cyberia-docs/CYBERIA.md +28 -28
package/src/client/public/cyberia-docs/ENTITY-PROFILE.md +11 -5
package/src/client/public/cyberia-docs/ROADMAP.md +1 -1
package/src/client/public/cyberia-docs/STATS-PROGRESSION.md +217 -0
package/src/client/public/cyberia-docs/WHITE-PAPER.md +20 -12
package/src/client/services/cyberia-audio/cyberia-audio.service.js +99 -0
package/src/client/services/cyberia-entity-type-default/cyberia-entity-type-default.service.js +38 -0
package/src/client/services/cyberia-instance/cyberia-instance.management.js +5 -4
package/src/client/services/cyberia-instance/cyberia-instance.service.js +0 -40
package/src/client/services/cyberia-map/cyberia-map.management.js +5 -4
package/src/client/services/cyberia-map-audio-conf/cyberia-map-audio-conf.service.js +138 -0
package/src/client/services/object-layer/object-layer.management.js +6 -10
package/src/client/services/object-layer/object-layer.service.js +3 -1
package/src/client/ssr/views/Cyberia404.js +3 -3
package/src/client-builder/client-build-docs.js +52 -52
package/src/client-builder/client-build.js +67 -44
package/src/client-builder/client-bundle.js +347 -0
package/src/db/mongo/MongoExpress.js +187 -0
package/src/grpc/cyberia/grpc-server.js +5 -7
package/src/index.js +1 -1
package/src/projects/cyberia/atlas-sprite-sheet-generator.js +143 -146
package/src/projects/cyberia/atlas-sprite-sheet-store.js +391 -0
package/src/projects/cyberia/besu-genesis-generator.js +5 -14
package/src/projects/cyberia/boot-contract-fixtures.js +32 -0
package/src/projects/cyberia/catalog-cyberia.js +3 -2
package/src/projects/cyberia/gemini-client.js +3 -3
package/src/projects/cyberia/generate-saga.js +4 -11
package/src/projects/cyberia/hot-reload-trigger.js +17 -28
package/src/projects/cyberia/instance-backup.js +210 -0
package/src/projects/cyberia/instance-data.js +177 -257
package/src/projects/cyberia/map-preview-generator.js +32 -68
package/src/projects/cyberia/object-layer.js +152 -319
package/src/projects/cyberia/seed-audio.js +139 -0
package/src/projects/cyberia/semantic-layer-generator-skin.js +2 -8
package/src/projects/cyberia/semantic-layer-generator.js +2 -18
package/src/projects/cyberia/stat-balance.js +81 -0
package/src/projects/cyberia/stat-commands.js +23 -0
package/src/projects/cyberia/stat-contract-generator.js +101 -0
package/src/runtime/cyberia-client/Dockerfile +8 -4
package/src/runtime/cyberia-client/Dockerfile.dev +5 -2
package/src/runtime/cyberia-server/Dockerfile +9 -2
package/src/runtime/cyberia-server/Dockerfile.dev +8 -1
package/src/runtime/engine-cyberia/Dockerfile +1 -1
package/src/runtime/engine-cyberia/Dockerfile.dev +1 -1
package/src/runtime/engine-cyberia/Dockerfile.test +2 -2
package/src/runtime/engine-cyberia/compose.env +17 -5
package/src/runtime/engine-cyberia/docker-compose.yml +23 -17
package/src/server/build/coverage.js +113 -42
package/src/server/build/package.js +55 -12
package/src/server/build/testing.js +59 -9
package/src/server/network/middlewares.js +8 -2
package/src/server/network/underpost-gateway.js +113 -14
package/src/server/ops/logger.js +70 -35
package/src/server/runtime/conf.js +40 -9
package/src/server/runtime/start.js +11 -2
package/src/server/storage/data-query.js +16 -0
package/src/server/storage/downloader.js +62 -14
package/src/server/storage/zip.js +153 -0
package/test/integration/app/cyberia/atlas-sprite-sheet-store.test.js +402 -0
package/test/integration/app/cyberia/atlas-sprite-sheet.test.js +86 -0
package/test/integration/app/cyberia/cyberia-cli-plain-reads.test.js +34 -0
package/test/integration/app/cyberia/cyberia-entity-type-default.test.js +842 -0
package/test/integration/app/cyberia/cyberia-instance-conf-coerce.test.js +53 -0
package/test/integration/app/cyberia/cyberia-instance-conf-defaults.test.js +16 -22
package/test/integration/app/cyberia/cyberia-instance-items.test.js +90 -0
package/test/integration/app/cyberia/cyberia-load.test.js +6 -7
package/test/integration/app/cyberia/cyberia-map-audio-conf.test.js +256 -0
package/test/integration/app/cyberia/cyberia-stats.test.js +150 -0
package/test/integration/app/cyberia/fallback-world-capture.test.js +87 -2
package/test/integration/app/cyberia/object-layer-item-selection.test.js +56 -0
package/test/integration/app/cyberia/object-layer-natural-key.test.js +32 -0
package/test/integration/app/cyberia/seed-audio.test.js +275 -0
package/test/integration/infra/2-network/wireguard-cli.test.js +33 -9
package/test/integration/infra/2-network/wireguard-edge.test.js +58 -18
package/test/integration/infra/3-cluster/mongo-express-deploy.test.js +156 -0
package/test/integration/infra/4-ingress/api-cross-origin.test.js +79 -0
package/test/integration/infra/4-ingress/underpost-ingress.test.js +1 -1
package/test/unit/catalog.test.js +13 -2
package/test/unit/client-build-docs.test.js +97 -70
package/test/unit/client-bundle.test.js +313 -0
package/test/unit/conf-resolution.test.js +58 -7
package/test/unit/coverage-artifact.test.js +120 -29
package/test/unit/cyberia/instance-backup.test.js +183 -0
package/test/unit/cyberia/instance-data.test.js +314 -0
package/test/unit/cyberia/instance-object-layer-items.test.js +46 -0
package/test/unit/cyberia/publish-workflow.test.js +22 -0
package/test/unit/cyberia/stat-balance.test.js +69 -0
package/test/unit/deploy-legacy-gateway-sweep.test.js +63 -0
package/test/unit/deploy-log-table.test.js +76 -5
package/test/unit/downloader-integrity.test.js +98 -0
package/test/unit/file-reference-registry.test.js +141 -0
package/test/unit/fs-storage-paths.test.js +596 -0
package/test/unit/gateway-pod-fetch.test.js +95 -0
package/test/unit/letsencrypt-issuer.test.js +101 -0
package/test/unit/logger-redaction.test.js +29 -0
package/test/unit/package.test.js +70 -16
package/test/unit/prepare-host.test.js +84 -1
package/test/unit/release-bump.test.js +3 -1
package/test/unit/start-options.test.js +12 -0
package/test/unit/test-tiers.test.js +27 -0
package/test/unit/zip-archive.test.js +142 -0
package/vitest.config.js +11 -3
package/src/api/cyberia-instance/cyberia-fallback-default-items.js +0 -63
package/src/client/components/cyberia/FallbackWorldEngineCyberia.js +0 -368

package/test/unit/client-build-docs.test.js CHANGED Viewed

@@ -8,112 +8,148 @@ import { buildCoverage, buildDocs, buildSwaggerUiOptions } from '../../src/clien
 // swagger-autogen is a code generator that walks the real router files and
 // writes into ./public. The doc it is handed is what this module is responsible
-// for, so the generator itself is replaced and its arguments are asserted.
+// for, so the generator itself is replaced and its arguments are asserted; it
+// writes the document a test stages as its output, so the post-process has one.
 const generated = vi.hoisted(() => []);
-vi.mock('swagger-autogen', () => ({
-  default: (options) => async (outputFile, routes, doc) => {
-    generated.push({ options, outputFile, routes, doc });
-  },
-}));
+const staged = vi.hoisted(() => ({ swaggerJson: null }));
+vi.mock('swagger-autogen', async () => {
+  const fs = (await import('fs-extra')).default;
+  return {
+    default: (options) => async (outputFile, routes, doc) => {
+      generated.push({ options, outputFile, routes, doc });
+      if (staged.swaggerJson) fs.outputJsonSync(outputFile, staged.swaggerJson);
+    },
+  };
+});
 describe('client coverage build', () => {
   let fixturePath;
+  let cwd;
+  beforeEach(() => {
+    fixturePath = fs.mkdtempSync('/tmp/engine-coverage-');
+    // Suite reports resolve against the engine root, so the fixture stands in for it.
+    cwd = process.cwd();
+    process.chdir(fixturePath);
+  });
   afterEach(() => {
-    if (fixturePath) fs.removeSync(fixturePath);
-    fixturePath = undefined;
+    process.chdir(cwd);
+    fs.removeSync(fixturePath);
     vi.restoreAllMocks();
   });
-  it('publishes the Vitest lcov HTML report at the coverage route root', async () => {
-    fixturePath = fs.mkdtempSync('/tmp/engine-coverage-');
-    const reportPath = `${fixturePath}/coverage/lcov-report`;
+  it('publishes each declared report at its own coverage route', async () => {
+    fs.outputFileSync(`${fixturePath}/coverage/cyberia/index.html`, '<!doctype html><title>cyberia</title>');
+    fs.outputFileSync(`${fixturePath}/hardhat/coverage/html/index.html`, '<!doctype html><title>hardhat</title>');
+    fs.outputFileSync(`${fixturePath}/hardhat/coverage/html/base.css`, 'body {}');
     const docsDestination = `${fixturePath}/public/docs/`;
-    fs.outputFileSync(`${reportPath}/index.html`, '<!doctype html><title>Coverage</title>');
-    fs.outputFileSync(`${reportPath}/base.css`, 'body {}');
-    await buildCoverage({ docs: { coveragePath: fixturePath }, docsDestination });
+    await buildCoverage({
+      docs: {
+        coverage: [
+          { id: 'cyberia', suite: 'cyberia' },
+          { id: 'hardhat', path: `${fixturePath}/hardhat` },
+        ],
+      },
+      docsDestination,
+    });
-    expect(fs.existsSync(`${docsDestination}coverage/index.html`)).to.equal(true);
-    expect(fs.existsSync(`${docsDestination}coverage/base.css`)).to.equal(true);
-    expect(fs.existsSync(`${docsDestination}coverage/lcov-report`)).to.equal(false);
+    expect(fs.readFileSync(`${docsDestination}coverage/cyberia/index.html`, 'utf8')).to.include('cyberia');
+    expect(fs.readFileSync(`${docsDestination}coverage/hardhat/index.html`, 'utf8')).to.include('hardhat');
+    expect(fs.existsSync(`${docsDestination}coverage/hardhat/base.css`)).to.equal(true);
+    expect(fs.existsSync(`${docsDestination}coverage/hardhat/html`)).to.equal(false);
   });
-  it('prefers an html report directory over the lcov one', async () => {
-    fixturePath = fs.mkdtempSync('/tmp/engine-coverage-');
-    fs.outputFileSync(`${fixturePath}/coverage/html/index.html`, '<!doctype html><title>html</title>');
-    fs.outputFileSync(`${fixturePath}/coverage/lcov-report/index.html`, '<!doctype html><title>lcov</title>');
+  it('drops a previously published report the conf no longer declares', async () => {
+    fs.outputFileSync(`${fixturePath}/out/coverage/legacy/index.html`, '<!doctype html>');
+    fs.outputFileSync(`${fixturePath}/coverage/unit/index.html`, '<!doctype html><title>unit</title>');
-    await buildCoverage({ docs: { coveragePath: fixturePath }, docsDestination: `${fixturePath}/out/` });
+    await buildCoverage({
+      docs: { coverage: [{ id: 'engine', suite: 'unit' }] },
+      docsDestination: `${fixturePath}/out/`,
+    });
-    expect(fs.readFileSync(`${fixturePath}/out/coverage/index.html`, 'utf8')).to.include('html');
+    expect(fs.existsSync(`${fixturePath}/out/coverage/legacy`)).to.equal(false);
+    expect(fs.existsSync(`${fixturePath}/out/coverage/engine/index.html`)).to.equal(true);
   });
-  it('publishes a flat report directory that carries the index itself', async () => {
-    fixturePath = fs.mkdtempSync('/tmp/engine-coverage-');
-    fs.outputFileSync(`${fixturePath}/coverage/index.html`, '<!doctype html><title>flat</title>');
+  it("publishes the run a report names, never another selection's", async () => {
+    fs.outputFileSync(`${fixturePath}/coverage/unit-infra-app-cyberia/index.html`, '<!doctype html><title>all</title>');
     await buildCoverage({
-      docs: { coveragePath: fixturePath, coverageOutputDir: 'report' },
+      docs: { coverage: [{ id: 'engine', suite: 'unit,infra,app' }] },
       docsDestination: `${fixturePath}/out/`,
     });
-    expect(fs.existsSync(`${fixturePath}/out/report/index.html`)).to.equal(true);
+    const page = fs.readFileSync(`${fixturePath}/out/coverage/engine/index.html`, 'utf8');
+    expect(page).to.include('Coverage report unavailable');
+    expect(page).to.include('node bin test unit,infra,app');
   });
   it('publishes the unavailable page for a coverage directory with no HTML index', async () => {
-    fixturePath = fs.mkdtempSync('/tmp/engine-coverage-');
-    fs.outputFileSync(`${fixturePath}/coverage/lcov.info`, 'TN:\n');
+    fs.outputFileSync(`${fixturePath}/hardhat/coverage/lcov.info`, 'TN:\n');
-    await buildCoverage({ docs: { coveragePath: fixturePath }, docsDestination: `${fixturePath}/out/` });
+    await buildCoverage({
+      docs: { coverage: [{ id: 'hardhat', path: `${fixturePath}/hardhat` }] },
+      docsDestination: `${fixturePath}/out/`,
+    });
-    expect(fs.readFileSync(`${fixturePath}/out/coverage/index.html`, 'utf8')).to.include('Coverage report unavailable');
+    expect(fs.readFileSync(`${fixturePath}/out/coverage/hardhat/index.html`, 'utf8')).to.include(
+      'Coverage report unavailable',
+    );
   });
   it('publishes the report an assembled deploy artifact bundled', async () => {
-    fixturePath = fs.mkdtempSync('/tmp/engine-coverage-');
     fs.outputFileSync(
-      `${fixturePath}/${COVERAGE_BUNDLE_DIRECTORY}/index.html`,
+      `${fixturePath}/${COVERAGE_BUNDLE_DIRECTORY}/engine/index.html`,
       '<!doctype html><title>bundled</title>',
     );
-    await buildCoverage({ docs: { coveragePath: fixturePath }, docsDestination: `${fixturePath}/out/` });
+    await buildCoverage({
+      docs: { coverage: [{ id: 'engine', suite: 'unit' }] },
+      docsDestination: `${fixturePath}/out/`,
+    });
-    expect(fs.readFileSync(`${fixturePath}/out/coverage/index.html`, 'utf8')).to.include('bundled');
+    expect(fs.readFileSync(`${fixturePath}/out/coverage/engine/index.html`, 'utf8')).to.include('bundled');
   });
   it('prefers a freshly generated report over the bundled artifact', async () => {
-    fixturePath = fs.mkdtempSync('/tmp/engine-coverage-');
-    fs.outputFileSync(`${fixturePath}/coverage/lcov-report/index.html`, '<!doctype html><title>fresh</title>');
+    fs.outputFileSync(`${fixturePath}/coverage/unit/index.html`, '<!doctype html><title>fresh</title>');
     fs.outputFileSync(
-      `${fixturePath}/${COVERAGE_BUNDLE_DIRECTORY}/index.html`,
+      `${fixturePath}/${COVERAGE_BUNDLE_DIRECTORY}/engine/index.html`,
       '<!doctype html><title>bundled</title>',
     );
-    await buildCoverage({ docs: { coveragePath: fixturePath }, docsDestination: `${fixturePath}/out/` });
+    await buildCoverage({
+      docs: { coverage: [{ id: 'engine', suite: 'unit' }] },
+      docsDestination: `${fixturePath}/out/`,
+    });
-    expect(fs.readFileSync(`${fixturePath}/out/coverage/index.html`, 'utf8')).to.include('fresh');
+    expect(fs.readFileSync(`${fixturePath}/out/coverage/engine/index.html`, 'utf8')).to.include('fresh');
   });
   // Regression: the build used to shell out to `npm test` when no report was present. Inside a
   // pod that spent minutes of the build phase on a test runner, and the suite's expected
   // non-zero exits latched `container-status=error`, failing a healthy rollout.
   it('never runs a test runner to produce a missing report', async () => {
-    fixturePath = fs.mkdtempSync('/tmp/engine-coverage-');
     fs.outputJsonSync(`${fixturePath}/package.json`, {
       scripts: { coverage: 'vitest run --coverage', test: 'vitest run' },
     });
     const exec = vi.spyOn(shell, 'exec');
-    await buildCoverage({ docs: { coveragePath: fixturePath }, docsDestination: `${fixturePath}/out/` });
+    await buildCoverage({
+      docs: { coverage: [{ id: 'engine', suite: 'unit' }] },
+      docsDestination: `${fixturePath}/out/`,
+    });
     expect(exec.mock.calls.length).to.equal(0);
-    expect(fs.readFileSync(`${fixturePath}/out/coverage/index.html`, 'utf8')).to.include('Coverage report unavailable');
+    expect(fs.readFileSync(`${fixturePath}/out/coverage/engine/index.html`, 'utf8')).to.include(
+      'Coverage report unavailable',
+    );
   });
-  it('publishes nothing for a deploy that declares no coverage source', async () => {
-    fixturePath = fs.mkdtempSync('/tmp/engine-coverage-');
+  it('publishes nothing for a deploy that declares no coverage report', async () => {
     await buildCoverage({ docs: {}, docsDestination: `${fixturePath}/out/` });
     expect(fs.existsSync(`${fixturePath}/out`)).to.equal(false);
@@ -137,7 +173,7 @@ describe('docs build', () => {
       publicClientId: 'fixture',
       rootClientPath: `${fixturePath}/client`,
       packageData: PACKAGE_DATA,
-      docs: { jsJsonPath: `${fixturePath}/typedoc.json`, coveragePath: `${fixturePath}/nothing-here` },
+      docs: { jsJsonPath: `${fixturePath}/typedoc.json` },
       ...overrides,
     });
@@ -146,21 +182,16 @@ describe('docs build', () => {
     fixturePath = fs.mkdtempSync('/tmp/engine-docs-');
     publicRoot = `./public/${HOST}`;
     if (fs.existsSync(publicRoot)) throw new Error(`Refusing to write fixtures into an existing site: ${publicRoot}`);
-    vi.useFakeTimers();
+    staged.swaggerJson = null;
   });
   afterEach(() => {
-    vi.useRealTimers();
     vi.restoreAllMocks();
     fs.removeSync(fixturePath);
     fs.removeSync(publicRoot);
     fs.removeSync('.typedoc.tmp.json');
   });
-  const flushApiDocs = async () => {
-    await vi.advanceTimersByTimeAsync(1);
-  };
   it('renders the typedoc runtime config without mutating the base config on disk', async () => {
     const baseConfig = { tsconfig: './tsconfig.docs.json', name: 'Base', entryPoints: ['./src'] };
     fs.outputJsonSync(`${fixturePath}/typedoc.json`, baseConfig);
@@ -174,11 +205,9 @@ describe('docs build', () => {
     await runBuildDocs({
       docs: {
         jsJsonPath: `${fixturePath}/typedoc.json`,
-        coveragePath: `${fixturePath}/nothing-here`,
         references: [`${fixturePath}/reference-a.md`, `${fixturePath}/missing.md`],
       },
     });
-    await flushApiDocs();
     expect(tmpConfig.name).to.equal('Fixture API');
     expect(tmpConfig.out).to.equal(`./public/${HOST}/docs/engine/1.2.3/`);
@@ -198,7 +227,6 @@ describe('docs build', () => {
     });
     await runBuildDocs({ metadata: {}, docs: { jsJsonPath: `${fixturePath}/typedoc.json`, references: [] } });
-    await flushApiDocs();
     expect(tmpConfig.name).to.equal('Base');
     expect(tmpConfig).not.to.have.property('projectDocuments');
@@ -207,14 +235,12 @@ describe('docs build', () => {
   it('skips the typedoc build when the deploy declares no config', async () => {
     const exec = vi.spyOn(shell, 'exec');
     await runBuildDocs({ docs: { jsJsonPath: `${fixturePath}/absent.json` } });
-    await flushApiDocs();
     expect(exec.mock.calls.length).to.equal(0);
   });
   it('documents only the routers it has schemas for, at the deploy version', async () => {
     const exec = vi.spyOn(shell, 'exec').mockReturnValue({ code: 0, stdout: '', stderr: '' });
     await runBuildDocs();
-    await flushApiDocs();
     expect(exec.mock.calls.length).to.equal(0);
     expect(generated.length).to.equal(1);
@@ -228,7 +254,6 @@ describe('docs build', () => {
   it('falls back to a generic title and empty description without metadata', async () => {
     await runBuildDocs({ metadata: {}, docs: { jsJsonPath: `${fixturePath}/absent.json` } });
-    await flushApiDocs();
     expect(generated[0].doc.info.title).to.equal('REST API');
     expect(generated[0].doc.info.description).to.equal('');
   });
@@ -240,14 +265,12 @@ describe('docs build', () => {
     try {
       process.env.NODE_ENV = 'development';
       await runBuildDocs({ path: '/store', docs: { jsJsonPath: `${fixturePath}/absent.json` } });
-      await flushApiDocs();
       expect(generated[0].doc.servers[0].url).to.equal('http://localhost:4000/store/api');
       expect(generated[0].outputFile).to.equal(`./public/${HOST}/store/swagger-output.json`);
       generated.length = 0;
       process.env.NODE_ENV = 'production';
       await runBuildDocs({ docs: { jsJsonPath: `${fixturePath}/absent.json` } });
-      await flushApiDocs();
       expect(generated[0].doc.servers[0].url).to.equal(`https://${HOST}/api`);
     } finally {
       process.env.NODE_ENV = previousEnv;
@@ -267,7 +290,6 @@ describe('docs build', () => {
         apiBaseProxyPath: '/',
         docs: { jsJsonPath: `${fixturePath}/absent.json` },
       });
-      await flushApiDocs();
       expect(generated[0].doc.servers[0].url).to.equal('http://localhost:4017/api');
       generated.length = 0;
@@ -278,7 +300,6 @@ describe('docs build', () => {
         apiBaseProxyPath: '/store',
         docs: { jsJsonPath: `${fixturePath}/absent.json` },
       });
-      await flushApiDocs();
       expect(generated[0].doc.servers[0].url).to.equal('https://api.fixture.test/store/api');
     } finally {
       process.env.NODE_ENV = previousEnv;
@@ -292,8 +313,7 @@ describe('docs build', () => {
   // did not emit, and has to strip the OAS-2 `in: body` parameter it did.
   it('injects the request bodies into the generated document', async () => {
     const outputFile = `./public/${HOST}/swagger-output.json`;
-    await runBuildDocs({ docs: { jsJsonPath: `${fixturePath}/absent.json` } });
-    fs.outputJsonSync(outputFile, {
+    staged.swaggerJson = {
       paths: {
         '/user': {
           post: {
@@ -305,8 +325,8 @@ describe('docs build', () => {
         },
         '/user/{id}': { get: {} },
       },
-    });
-    await flushApiDocs();
+    };
+    await runBuildDocs({ docs: { jsJsonPath: `${fixturePath}/absent.json` } });
     const patched = fs.readJsonSync(outputFile);
     expect(patched.paths['/user'].post.requestBody.content['application/json'].schema.$ref).to.equal(
@@ -318,11 +338,18 @@ describe('docs build', () => {
   it('leaves the generated document alone when no operation matches', async () => {
     const outputFile = `./public/${HOST}/swagger-output.json`;
+    staged.swaggerJson = { paths: { '/health': { get: {} } } };
     await runBuildDocs({ docs: { jsJsonPath: `${fixturePath}/absent.json` } });
-    fs.outputJsonSync(outputFile, { paths: { '/health': { get: {} } } });
-    await flushApiDocs();
     expect(fs.readJsonSync(outputFile)).to.deep.equal({ paths: { '/health': { get: {} } } });
   });
+  // Regression: the spec was generated on a timer the build never awaited, so a bundle zipped
+  // right after the build shipped without it and the pod restoring it served no api-docs.
+  it('has written the spec by the time the build returns', async () => {
+    staged.swaggerJson = { paths: {} };
+    await runBuildDocs({ docs: { jsJsonPath: `${fixturePath}/absent.json` } });
+    expect(fs.existsSync(`./public/${HOST}/swagger-output.json`)).to.equal(true);
+  });
 });
 describe('swagger UI options', () => {

package/test/unit/client-bundle.test.js ADDED Viewed

@@ -0,0 +1,313 @@
+'use strict';
+/**
+ * @module client-bundle.test
+ * @description Covers the client bundle transport: the route set push and pull agree on, the
+ * uniform host filter and split option both runners parse, and the pull path that merges split
+ * parts, extracts them in-process, and installs the result under the served public directory.
+ *
+ * The shell boundary is mocked so the deterministic parts — route selection, artifact
+ * resolution, and the local zip round trip — run for real.
+ *
+ * Uses 'chai' for assertions.
+ */
+import { expect } from 'chai';
+import fs from 'fs-extra';
+import { vi } from 'vitest';
+const shellCommands = [];
+vi.mock('../../src/server/runtime/process.js', async (importOriginal) => ({
+  ...(await importOriginal()),
+  shellExec: (command) => {
+    shellCommands.push(command);
+    return '';
+  },
+}));
+const {
+  CLIENT_BUNDLE_DIRECTORY,
+  clientBundleTrackedKeys,
+  clientBundleManifestKey,
+  clientBundleArtifactPaths,
+  clientBundleEntriesFactory,
+  clientBundleHostFilter,
+  clientBundleSplitFlag,
+  clientBundleStorageFilePath,
+  pullClientBundle,
+  pushClientBundle,
+} = await import('../../src/client-builder/client-bundle.js');
+const { zipFromLocalFiles } = await import('../../src/server/storage/zip.js');
+const { program } = await import('../../src/cli/index.js');
+const CONF_SERVER = {
+  'a.com': {
+    '/': { client: 'A' },
+    '/peer': { client: 'P' },
+    '/old': { redirect: '/' },
+    '/frozen': { disabledRebuild: true },
+    '/multi': { client: 'M', replicas: ['/multi-1', '/multi-2'] },
+    '/single': { client: 'S', singleReplica: true, replicas: ['/single-1'] },
+  },
+  'b.com': { '/': { client: 'B' } },
+};
+describe('client bundle runner input', () => {
+  it('parses the comma-separated host filter both runners share', () => {
+    expect(clientBundleHostFilter(' a.com , b.com ,, ')).to.deep.equal(['a.com', 'b.com']);
+    expect(clientBundleHostFilter('')).to.deep.equal([]);
+    expect(clientBundleHostFilter(undefined)).to.deep.equal([]);
+  });
+  it('resolves the split option, defaulting an unusable value rather than failing the build', () => {
+    expect(clientBundleSplitFlag(undefined)).to.equal('--split 8');
+    expect(clientBundleSplitFlag('16')).to.equal('--split 16');
+    expect(clientBundleSplitFlag('none')).to.equal('');
+    expect(clientBundleSplitFlag('0')).to.equal('--split 8');
+    expect(clientBundleSplitFlag('abc')).to.equal('--split 8');
+  });
+  it('names one storage manifest per deployment', () => {
+    expect(clientBundleStorageFilePath('dd-test')).to.equal('engine-private/conf/dd-test/storage.bundle.json');
+  });
+});
+describe('client bundle route selection', () => {
+  let fixturePath;
+  let previousCwd;
+  beforeEach(() => {
+    previousCwd = process.cwd();
+    fixturePath = fs.mkdtempSync('/tmp/engine-client-bundle-');
+    process.chdir(fixturePath);
+    fs.mkdirSync('engine-private/conf/dd-test', { recursive: true });
+    fs.writeFileSync('engine-private/conf/dd-test/conf.server.json', JSON.stringify(CONF_SERVER), 'utf8');
+    shellCommands.length = 0;
+  });
+  afterEach(() => {
+    process.chdir(previousCwd);
+    fs.removeSync(fixturePath);
+  });
+  const buildIds = (options) => clientBundleEntriesFactory(options).map((entry) => entry.buildId);
+  it('selects every route the client build emits a bundle for, replicas included', () => {
+    expect(buildIds({ deployId: 'dd-test' })).to.deep.equal([
+      'a.com-',
+      'a.com-peer',
+      'a.com-multi',
+      'a.com-multi-1',
+      'a.com-multi-2',
+      'b.com-',
+    ]);
+  });
+  it('skips the routes the client build skips', () => {
+    const selected = buildIds({ deployId: 'dd-test' });
+    expect(selected).to.not.include('a.com-old');
+    expect(selected).to.not.include('a.com-frozen');
+    expect(selected).to.not.include('a.com-single');
+    expect(selected).to.not.include('a.com-single-1');
+  });
+  it('maps a route to its served public directory', () => {
+    const entries = clientBundleEntriesFactory({ deployId: 'dd-test', hosts: ['a.com'] });
+    const byId = Object.fromEntries(entries.map((entry) => [entry.buildId, entry.publicPath]));
+    expect(byId['a.com-']).to.equal('public/a.com');
+    expect(byId['a.com-peer']).to.equal('public/a.com/peer');
+  });
+  it('applies the host filter, and resolves nothing for an unknown host or deployment', () => {
+    expect(buildIds({ deployId: 'dd-test', hosts: ['b.com'] })).to.deep.equal(['b.com-']);
+    expect(buildIds({ deployId: 'dd-test', hosts: ['absent.com'] })).to.deep.equal([]);
+    expect(buildIds({ deployId: 'dd-absent' })).to.deep.equal([]);
+  });
+  it('resolves split parts ahead of a single zip, and nothing when neither is present', () => {
+    fs.mkdirSync(CLIENT_BUNDLE_DIRECTORY, { recursive: true });
+    for (const part of ['001', '002']) fs.writeFileSync(`${CLIENT_BUNDLE_DIRECTORY}/a.com-.zip.part${part}`, 'x');
+    fs.writeFileSync(`${CLIENT_BUNDLE_DIRECTORY}/b.com-.zip`, 'y');
+    expect(clientBundleArtifactPaths(`${CLIENT_BUNDLE_DIRECTORY}/a.com-.zip`).artifactPaths).to.have.lengthOf(2);
+    expect(clientBundleArtifactPaths(`${CLIENT_BUNDLE_DIRECTORY}/b.com-.zip`).artifactPaths).to.deep.equal([
+      `${CLIENT_BUNDLE_DIRECTORY}/b.com-.zip`,
+    ]);
+    expect(clientBundleArtifactPaths(`${CLIENT_BUNDLE_DIRECTORY}/absent-.zip`).artifactPaths).to.deep.equal([]);
+    expect(clientBundleArtifactPaths('./no-such-dir/x.zip').artifactPaths).to.deep.equal([]);
+  });
+  it('uploads every artifact of every resolved route, and reports the routes with none', () => {
+    fs.mkdirSync(CLIENT_BUNDLE_DIRECTORY, { recursive: true });
+    for (const part of ['001', '002']) fs.writeFileSync(`${CLIENT_BUNDLE_DIRECTORY}/b.com-.zip.part${part}`, 'x');
+    const result = pushClientBundle({ deployId: 'dd-test', hosts: ['b.com'], split: '4' });
+    expect(result).to.deep.equal({ pushed: 1, skipped: 0 });
+    expect(shellCommands.some((command) => command.includes('--build-zip --split 4'))).to.equal(true);
+    const uploads = shellCommands.filter((command) => command.includes(' fs '));
+    expect(uploads).to.have.lengthOf(2);
+    expect(uploads.every((command) => command.includes('--storage-id bundle') && command.includes('--force'))).to.equal(
+      true,
+    );
+    shellCommands.length = 0;
+    expect(pushClientBundle({ deployId: 'dd-test', hosts: ['a.com'] })).to.deep.equal({ pushed: 0, skipped: 5 });
+  });
+  it('shells out only to subcommands the CLI still registers', async () => {
+    // Regression: both directions called `underpost env`, a deprecated alias removed when the
+    // env and config commands were folded into the host configuration store. Nothing failed at
+    // import time, so bundle mode stayed broken until a deployment ran it.
+    fs.mkdirSync(CLIENT_BUNDLE_DIRECTORY, { recursive: true });
+    fs.writeFileSync('bundled.html', '<h1>bundled</h1>', 'utf8');
+    fs.writeFileSync(
+      `${CLIENT_BUNDLE_DIRECTORY}/b.com-.zip`,
+      await zipFromLocalFiles([{ localPath: 'bundled.html', entryName: 'index.html' }]),
+    );
+    pushClientBundle({ deployId: 'dd-test', hosts: ['b.com'] });
+    await pullClientBundle({ deployId: 'dd-test', hosts: ['b.com'] });
+    const pull = shellCommands.find((command) => command.includes(' fs ') && command.includes('--pull'));
+    expect(pull).to.include('--tracked').and.to.include('--storage-id bundle');
+    expect(pull).not.to.include('--storage-file-path');
+    const registered = program.commands.map((command) => command.name());
+    const invoked = [
+      ...new Set(
+        shellCommands
+          .map((command) => /(?:^|\s)(?:node\s+\S*bin\S*|underpost)\s+([a-z-]+)/.exec(command)?.[1])
+          .filter(Boolean),
+      ),
+    ];
+    expect(invoked).to.not.be.empty;
+    for (const subcommand of invoked) expect(registered, subcommand).to.include(subcommand);
+  });
+  it('untracks bundle parts a smaller build no longer produces', async () => {
+    const manifest = {
+      'build/b.com-.zip.part001': { bytes: 1 },
+      'build/b.com-.zip.part002': { bytes: 1 },
+      'build/b.com-.zip.part003': { bytes: 1 },
+      'build/other.com-.zip.part003': { bytes: 1 },
+    };
+    expect(clientBundleTrackedKeys(manifest, 'b.com-')).to.deep.equal([
+      'build/b.com-.zip.part001',
+      'build/b.com-.zip.part002',
+      'build/b.com-.zip.part003',
+    ]);
+    fs.mkdirSync(CLIENT_BUNDLE_DIRECTORY, { recursive: true });
+    for (const part of ['001', '002']) fs.writeFileSync(`${CLIENT_BUNDLE_DIRECTORY}/b.com-.zip.part${part}`, 'x');
+    fs.writeFileSync('engine-private/conf/dd-test/storage.bundle.json', JSON.stringify(manifest), 'utf8');
+    shellCommands.length = 0;
+    expect(fs.existsSync('build/b.com-.zip.part003')).to.equal(false);
+    expect(pushClientBundle({ deployId: 'dd-test', hosts: ['b.com'] })).to.deep.equal({ pushed: 1, skipped: 0 });
+    const removals = shellCommands.filter((command) => command.includes(' --rm'));
+    expect(removals, 'exactly the part this build did not produce').to.have.lengthOf(1);
+    expect(removals[0]).to.include(" fs --tracked --key 'build/b.com-.zip.part003'");
+    expect(removals[0]).to.include('--deploy-id dd-test --storage-id bundle --rm');
+    expect(removals[0]).to.not.include('other.com');
+    const uploads = shellCommands.filter((command) => command.includes(' fs ') && command.includes('--force'));
+    expect(uploads).to.have.lengthOf(2);
+    expect(shellCommands.indexOf(removals[0])).to.be.greaterThan(shellCommands.indexOf(uploads[1]));
+  });
+  it('merges, extracts, and installs a split bundle into the public directory', async () => {
+    fs.mkdirSync('source/nested', { recursive: true });
+    fs.writeFileSync('source/index.html', '<h1>bundle</h1>'.repeat(100), 'utf8');
+    fs.writeFileSync('source/nested/app.js', 'console.log(1);'.repeat(100), 'utf8');
+    const archive = await zipFromLocalFiles([
+      { localPath: 'source/index.html', entryName: 'index.html' },
+      { localPath: 'source/nested/app.js', entryName: 'nested/app.js' },
+    ]);
+    fs.mkdirSync(CLIENT_BUNDLE_DIRECTORY, { recursive: true });
+    const partSize = Math.ceil(archive.length / 3);
+    for (let offset = 0, index = 1; offset < archive.length; offset += partSize, index++) {
+      const name = `${CLIENT_BUNDLE_DIRECTORY}/b.com-.zip.part${String(index).padStart(3, '0')}`;
+      fs.writeFileSync(name, archive.subarray(offset, offset + partSize));
+    }
+    const result = await pullClientBundle({ deployId: 'dd-test', hosts: ['b.com'] });
+    expect(result).to.deep.equal({ pulled: 1, skipped: 0 });
+    expect(fs.readFileSync('public/b.com/nested/app.js', 'utf8')).to.equal(
+      fs.readFileSync('source/nested/app.js', 'utf8'),
+    );
+    expect(fs.existsSync(`${CLIENT_BUNDLE_DIRECTORY}/b.com-.zip`)).to.equal(false);
+    expect(fs.readdirSync(CLIENT_BUNDLE_DIRECTORY).filter((name) => name.includes('.part'))).to.deep.equal([]);
+  });
+  it('maps a pulled part back to the storage key that produced it', () => {
+    // A pull keeping the downloaded archive writes `<key>.zip`; an unwrapped part is the key.
+    expect(clientBundleManifestKey('build/a.com-.zip.part001.zip')).to.equal('build/a.com-.zip.part001');
+    expect(clientBundleManifestKey('./build/a.com-.zip.part001.zip')).to.equal('build/a.com-.zip.part001');
+    expect(clientBundleManifestKey('build/a.com-.zip.part001')).to.equal('build/a.com-.zip.part001');
+  });
+  it('refuses a bundle that reassembles to a different size than was pushed', async () => {
+    // Regression: one part's upload failed silently, so the store kept the previous build's copy.
+    // The parts merged without complaint and only the assembled archive was corrupt, 190MB later.
+    fs.writeFileSync('source.html', '<h1>bundle</h1>'.repeat(100), 'utf8');
+    const archive = await zipFromLocalFiles([{ localPath: 'source.html', entryName: 'index.html' }]);
+    fs.mkdirSync(CLIENT_BUNDLE_DIRECTORY, { recursive: true });
+    const partSize = Math.ceil(archive.length / 2);
+    const partPaths = [];
+    for (let offset = 0, index = 1; offset < archive.length; offset += partSize, index++) {
+      const name = `${CLIENT_BUNDLE_DIRECTORY}/b.com-.zip.part${String(index).padStart(3, '0')}`;
+      fs.writeFileSync(name, archive.subarray(offset, offset + partSize));
+      partPaths.push(name.replace(/^\.\//, ''));
+    }
+    // The manifest records a larger second part, as a build whose last part never replaced the
+    // previous one would.
+    fs.writeFileSync(
+      'engine-private/conf/dd-test/storage.bundle.json',
+      JSON.stringify({
+        [partPaths[0]]: { bytes: fs.statSync(partPaths[0]).size },
+        [partPaths[1]]: { bytes: fs.statSync(partPaths[1]).size + 4096 },
+      }),
+      'utf8',
+    );
+    let thrown;
+    await pullClientBundle({ deployId: 'dd-test', hosts: ['b.com'] }).catch((error) => (thrown = error));
+    expect(thrown?.message).to.match(/reassembled to \d+ bytes, expected \d+/);
+    expect(fs.existsSync('public/b.com'), 'a bundle that failed verification must not be installed').to.equal(false);
+  });
+  it('installs a bundle whose parts match the pushed sizes', async () => {
+    fs.writeFileSync('source.html', '<h1>bundle</h1>'.repeat(100), 'utf8');
+    const archive = await zipFromLocalFiles([{ localPath: 'source.html', entryName: 'index.html' }]);
+    fs.mkdirSync(CLIENT_BUNDLE_DIRECTORY, { recursive: true });
+    const partSize = Math.ceil(archive.length / 2);
+    const manifest = {};
+    for (let offset = 0, index = 1; offset < archive.length; offset += partSize, index++) {
+      const name = `${CLIENT_BUNDLE_DIRECTORY}/b.com-.zip.part${String(index).padStart(3, '0')}`;
+      fs.writeFileSync(name, archive.subarray(offset, offset + partSize));
+      manifest[name.replace(/^\.\//, '')] = { bytes: fs.statSync(name).size };
+    }
+    fs.writeFileSync('engine-private/conf/dd-test/storage.bundle.json', JSON.stringify(manifest), 'utf8');
+    expect(await pullClientBundle({ deployId: 'dd-test', hosts: ['b.com'] })).to.deep.equal({ pulled: 1, skipped: 0 });
+    expect(fs.existsSync('public/b.com/index.html')).to.equal(true);
+  });
+  it('skips a route whose bundle never arrived rather than clearing its public directory', async () => {
+    fs.mkdirSync('public/b.com', { recursive: true });
+    fs.writeFileSync('public/b.com/index.html', 'live', 'utf8');
+    const result = await pullClientBundle({ deployId: 'dd-test', hosts: ['b.com'] });
+    expect(result).to.deep.equal({ pulled: 0, skipped: 1 });
+    expect(fs.readFileSync('public/b.com/index.html', 'utf8')).to.equal('live');
+    expect(shellCommands.some((command) => command.startsWith('sudo rm -rf'))).to.equal(false);
+  });
+});