@unifiedcommerce/core 0.4.4 → 0.4.5

package/dist/test-utils/create-plugin-test-app.js

@@ -0,0 +1,74 @@
+/**
+ * One-call plugin E2E test setup.
+ *
+ * Boots a PGlite kernel (or real PG if overridden), programmatically pushes
+ * the merged schema (core + plugin tables) via drizzle-kit/api, mounts the
+ * test actor middleware on an OpenAPIHono instance, and registers all plugin
+ * routes --- matching the production server.ts boot sequence.
+ *
+ * Usage:
+ *   import { createPluginTestApp, jsonHeaders, testAdminActor } from "@unifiedcommerce/core";
+ *   const { app } = await createPluginTestApp(myPlugin());
+ *   const res = await app.request("/api/my-route", {
+ *     method: "POST",
+ *     headers: jsonHeaders(testAdminActor),
+ *     body: JSON.stringify({ ... }),
+ *   });
+ *   expect(res.status).toBe(201);
+ */
+import { OpenAPIHono } from "@hono/zod-openapi";
+import { createRequire } from "node:module";
+import { createTestConfig } from "./create-test-config.js";
+import { createKernel } from "../runtime/kernel.js";
+import { buildSchema } from "../kernel/database/migrate.js";
+import { ensureDefaultOrg } from "../auth/org.js";
+// drizzle-kit/api uses CJS internally; createRequire provides ESM compat.
+const require = createRequire(import.meta.url);
+/**
+ * Creates a fully-wired test application for plugin E2E testing.
+ *
+ * @param plugin - The plugin under test (e.g., `appointmentPlugin()`)
+ * @param configOverrides - Optional config overrides. Pass `databaseAdapter`
+ *   to use a real PostgreSQL instance instead of PGlite.
+ */
+export async function createPluginTestApp(plugin, configOverrides = {}) {
+    // 1. Build config with plugin applied (PGlite auto-provisioned if no adapter)
+    const config = await createTestConfig({
+        plugins: [plugin],
+        ...configOverrides,
+    });
+    // 2. Boot kernel (creates core services, hook registry)
+    const kernel = createKernel(config);
+    // 3. Merge core + plugin schemas
+    const mergedSchema = buildSchema(config);
+    // 4. Programmatic schema push via drizzle-kit/api
+    //    Diffs current DB state against pgTable definitions, generates DDL, applies it.
+    //    On fresh PGlite: creates all tables. On existing DB: creates only missing tables.
+    const drizzleKit = require("drizzle-kit/api");
+    const { apply } = await drizzleKit.pushSchema(mergedSchema, kernel.database.db);
+    await apply();
+    // Ensure the default organization exists for plugin tests
+    await ensureDefaultOrg(kernel.database.db);
+    // 5. Create OpenAPIHono --- matching production server.ts
+    //    Plugin routes register via manifest.ts which calls app.openapi().
+    const app = new OpenAPIHono();
+    // 6. Test actor middleware: parse x-test-actor header -> set on context
+    app.use("*", async (c, next) => {
+        const header = c.req.header("x-test-actor");
+        if (header) {
+            try {
+                c.set("actor", JSON.parse(header));
+            }
+            catch { /* malformed JSON --- fall through without actor */ }
+        }
+        await next();
+    });
+    // 7. Register plugin routes (deferred via config.routes)
+    const routes = config.routes;
+    routes?.(app, kernel);
+    return {
+        app,
+        kernel,
+        db: kernel.database.db,
+    };
+}

package/dist/test-utils/create-repository-test-harness.d.ts

@@ -0,0 +1,8 @@
+import type { CommerceConfig } from "../config/types.js";
+import { createKernel } from "../runtime/kernel.js";
+export interface RepositoryTestHarness {
+    config: CommerceConfig;
+    kernel: ReturnType<typeof createKernel>;
+}
+export declare function createRepositoryTestHarness(overrides?: Partial<CommerceConfig>): Promise<RepositoryTestHarness>;
+//# sourceMappingURL=create-repository-test-harness.d.ts.map

package/dist/test-utils/create-repository-test-harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-repository-test-harness.d.ts","sourceRoot":"","sources":["../../src/test-utils/create-repository-test-harness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;CACzC;AAED,wBAAsB,2BAA2B,CAC/C,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GACtC,OAAO,CAAC,qBAAqB,CAAC,CAIhC"}

package/dist/test-utils/create-repository-test-harness.js

@@ -0,0 +1,7 @@
+import { createTestConfig } from "./create-test-config.js";
+import { createKernel } from "../runtime/kernel.js";
+export async function createRepositoryTestHarness(overrides = {}) {
+    const config = await createTestConfig(overrides);
+    const kernel = createKernel(config);
+    return { config, kernel };
+}

package/dist/test-utils/create-test-config.d.ts

@@ -0,0 +1,18 @@
+import type { CommerceConfig } from "../config/types.js";
+export declare function createTestConfig(overrides?: Partial<CommerceConfig>): Promise<CommerceConfig>;
+/**
+ * Creates a test config backed by PGlite (in-memory PostgreSQL).
+ *
+ * This provides production parity for tests by using real SQL execution
+ * and PostgreSQL behavior while remaining fast and self-contained.
+ *
+ * @param overrides - Optional config overrides
+ * @returns A promise resolving to an object containing:
+ *   - config: The CommerceConfig to pass to createKernel
+ *   - cleanup: Async function to reset data between tests
+ */
+export declare function createPGliteTestConfig(overrides?: Partial<CommerceConfig>): Promise<{
+    config: CommerceConfig;
+    cleanup: () => Promise<void>;
+}>;
+//# sourceMappingURL=create-test-config.d.ts.map

package/dist/test-utils/create-test-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-test-config.d.ts","sourceRoot":"","sources":["../../src/test-utils/create-test-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAgDzD,wBAAsB,gBAAgB,CACpC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GACtC,OAAO,CAAC,cAAc,CAAC,CA+GzB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GACtC,OAAO,CAAC;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAUnE"}

package/dist/test-utils/create-test-config.js

@@ -0,0 +1,172 @@
+import { defineConfig } from "../config/define-config.js";
+import { Ok } from "../kernel/result.js";
+function createInMemoryStorageAdapter() {
+    const files = new Map();
+    const baseUrl = "http://localhost:3000/test-assets";
+    return {
+        providerId: "test-memory-storage",
+        async upload(key, data, contentType) {
+            const body = data instanceof ArrayBuffer
+                ? data
+                : await new Response(data).arrayBuffer();
+            files.set(key, { data: body, contentType });
+            return Ok({
+                key,
+                url: `${baseUrl}/${key}`,
+                contentType,
+                size: body.byteLength,
+            });
+        },
+        async getUrl(key) {
+            return Ok(`${baseUrl}/${key}`);
+        },
+        async getSignedUrl(key, expiresIn) {
+            return Ok(`${baseUrl}/${key}?expiresIn=${expiresIn}`);
+        },
+        async delete(key) {
+            files.delete(key);
+            return Ok(undefined);
+        },
+        async list(prefix) {
+            return Ok(Array.from(files.entries())
+                .filter(([key]) => key.startsWith(prefix))
+                .map(([key, file]) => ({
+                key,
+                url: `${baseUrl}/${key}`,
+                contentType: file.contentType,
+                size: file.data.byteLength,
+            })));
+        },
+    };
+}
+export async function createTestConfig(overrides = {}) {
+    // Auto-provision PGlite when no databaseAdapter is provided
+    if (!overrides.databaseAdapter) {
+        const { createPGliteTestAdapter } = await import("./create-pglite-adapter.js");
+        const { adapter } = await createPGliteTestAdapter();
+        overrides = { ...overrides, databaseAdapter: adapter };
+    }
+    return defineConfig({
+        version: "0.0.1-test",
+        storeName: "Test Store",
+        database: {
+            provider: "postgresql",
+        },
+        auth: {
+            requireEmailVerification: false,
+            apiKeys: { enabled: true, defaultPermissions: ["catalog:read"] },
+            posPin: { enabled: true },
+            roles: {
+                owner: { permissions: ["*:*"] },
+                admin: { permissions: ["*:*"] },
+                staff: {
+                    permissions: [
+                        "catalog:create",
+                        "catalog:update",
+                        "catalog:delete",
+                        "catalog:read",
+                        "inventory:adjust",
+                        "orders:create",
+                        "orders:read",
+                        "orders:update",
+                        "cart:create",
+                        "cart:update",
+                        "customers:update:self",
+                    ],
+                },
+                ai_agent: {
+                    permissions: [
+                        "catalog:read",
+                        "catalog:create",
+                        "inventory:read",
+                        "inventory:adjust",
+                        "orders:read",
+                        "cart:create",
+                        "cart:update",
+                        "mcp:access",
+                    ],
+                },
+            },
+            customerPermissions: [
+                "catalog:read",
+                "cart:create",
+                "cart:read",
+                "cart:update",
+                "orders:create",
+                "orders:read:own",
+                "customers:read:self",
+                "customers:update:self",
+            ],
+        },
+        entities: {
+            product: {
+                fields: [
+                    { name: "weight", type: "number" },
+                    { name: "brand", type: "text" },
+                ],
+                variants: { enabled: true, optionTypes: ["size", "color"] },
+                fulfillment: "physical",
+            },
+            digitalDownload: {
+                fields: [{ name: "fileAssetId", type: "text" }],
+                variants: { enabled: false },
+                fulfillment: "digital-download",
+            },
+            course: {
+                fields: [{ name: "modules", type: "json" }],
+                variants: { enabled: false },
+                fulfillment: "digital-access",
+            },
+        },
+        cart: {
+            ttlMinutes: 5,
+            hooks: {},
+        },
+        checkout: {
+            hooks: {
+                beforeCreate: [],
+                afterCreate: [],
+            },
+        },
+        orders: {
+            hooks: {
+                beforeCreate: [],
+                afterCreate: [],
+                beforeStatusChange: [],
+                afterStatusChange: [],
+            },
+        },
+        inventory: {
+            hooks: {
+                afterAdjust: [],
+            },
+        },
+        email: {
+            async send() {
+                // no-op for tests
+            },
+        },
+        storage: createInMemoryStorageAdapter(),
+        ...overrides,
+    });
+}
+/**
+ * Creates a test config backed by PGlite (in-memory PostgreSQL).
+ *
+ * This provides production parity for tests by using real SQL execution
+ * and PostgreSQL behavior while remaining fast and self-contained.
+ *
+ * @param overrides - Optional config overrides
+ * @returns A promise resolving to an object containing:
+ *   - config: The CommerceConfig to pass to createKernel
+ *   - cleanup: Async function to reset data between tests
+ */
+export async function createPGliteTestConfig(overrides = {}) {
+    const { createPGliteTestAdapter } = await import("./create-pglite-adapter.js");
+    const { adapter, cleanup } = await createPGliteTestAdapter();
+    const config = await createTestConfig({
+        databaseAdapter: adapter,
+        ...overrides,
+    });
+    return { config, cleanup };
+}

package/dist/test-utils/create-test-kernel.d.ts

@@ -0,0 +1,3 @@
+import type { CommerceConfig } from "../config/types.js";
+export declare function createTestKernel(overrides?: Partial<CommerceConfig>): Promise<import("../runtime/kernel.js").Kernel>;
+//# sourceMappingURL=create-test-kernel.d.ts.map

package/dist/test-utils/create-test-kernel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-test-kernel.d.ts","sourceRoot":"","sources":["../../src/test-utils/create-test-kernel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIzD,wBAAsB,gBAAgB,CAAC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,kDAE7E"}

package/dist/test-utils/create-test-kernel.js

@@ -0,0 +1,5 @@
+import { createKernel } from "../runtime/kernel.js";
+import { createTestConfig } from "./create-test-config.js";
+export async function createTestKernel(overrides = {}) {
+    return createKernel(await createTestConfig(overrides));
+}

package/dist/test-utils/create-test-plugin-context.d.ts

@@ -0,0 +1,42 @@
+import { HookRegistry } from "../kernel/hooks/registry.js";
+import type { CommerceConfig, MCPTool } from "../config/types.js";
+interface PluginContextShape {
+    hooks: HookRegistry;
+    config: CommerceConfig;
+    services: Record<string, unknown>;
+    routes: {
+        add(method: string, path: string, handler: (...args: unknown[]) => unknown): void;
+    };
+    mcp: {
+        registerTool(tool: MCPTool): void;
+    };
+    analytics: {
+        registerModel(model: unknown): void;
+    };
+    database: {
+        registerSchema(schema: Record<string, unknown>): void;
+        query: unknown;
+        transaction<T>(fn: (tx: unknown) => Promise<T>): Promise<T>;
+    };
+    logger: {
+        info(message: string, data?: unknown): void;
+        warn(message: string, data?: unknown): void;
+        error(message: string, data?: unknown): void;
+    };
+}
+export interface TestPluginContext extends PluginContextShape {
+    registeredRoutes: Array<{
+        method: string;
+        path: string;
+        handler: (...args: unknown[]) => unknown;
+    }>;
+    registeredMCPTools: MCPTool[];
+    registeredAnalyticsModels: unknown[];
+    registeredSchemas: Array<Record<string, unknown>>;
+}
+export declare function createTestPluginContext(options?: {
+    config?: Partial<CommerceConfig>;
+    services?: Record<string, unknown>;
+}): Promise<TestPluginContext>;
+export {};
+//# sourceMappingURL=create-test-plugin-context.d.ts.map

package/dist/test-utils/create-test-plugin-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-test-plugin-context.d.ts","sourceRoot":"","sources":["../../src/test-utils/create-test-plugin-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAG3D,OAAO,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElE,UAAU,kBAAkB;IAC1B,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,EAAE;QAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9F,GAAG,EAAE;QAAE,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC;IAC3C,SAAS,EAAE;QAAE,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC;IACnD,QAAQ,EAAE;QACR,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACtD,KAAK,EAAE,OAAO,CAAC;QACf,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;KAC7D,CAAC;IACF,MAAM,EAAE;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAC;CACpJ;AAED,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D,gBAAgB,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAA;KAAE,CAAC,CAAC;IACpG,kBAAkB,EAAE,OAAO,EAAE,CAAC;IAC9B,yBAAyB,EAAE,OAAO,EAAE,CAAC;IACrC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnD;AAED,wBAAsB,uBAAuB,CAAC,OAAO,CAAC,EAAE;IACtD,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA4C7B"}

package/dist/test-utils/create-test-plugin-context.js

@@ -0,0 +1,46 @@
+import { HookRegistry } from "../kernel/hooks/registry.js";
+import { createLogger } from "../utils/logger.js";
+import { createTestConfig } from "./create-test-config.js";
+export async function createTestPluginContext(options) {
+    const hooks = new HookRegistry();
+    const config = await createTestConfig(options?.config ?? {});
+    const services = options?.services ?? {};
+    const registeredRoutes = [];
+    const registeredMCPTools = [];
+    const registeredAnalyticsModels = [];
+    const registeredSchemas = [];
+    return {
+        hooks,
+        config,
+        services,
+        routes: {
+            add(method, path, handler) {
+                registeredRoutes.push({ method: method.toUpperCase(), path, handler });
+            },
+        },
+        mcp: {
+            registerTool(tool) {
+                registeredMCPTools.push(tool);
+            },
+        },
+        analytics: {
+            registerModel(model) {
+                registeredAnalyticsModels.push(model);
+            },
+        },
+        database: {
+            registerSchema(schema) {
+                registeredSchemas.push(schema);
+            },
+            query: {},
+            async transaction(fn) {
+                return fn({});
+            },
+        },
+        logger: createLogger("test-plugin-context"),
+        registeredRoutes,
+        registeredMCPTools,
+        registeredAnalyticsModels,
+        registeredSchemas,
+    };
+}

package/dist/test-utils/rest-api-test-utils.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Integration test utilities for REST API endpoints.
+ *
+ * Provides helper functions to test Hono routes with a real kernel,
+ * PGlite database, and authentication middleware.
+ */
+import { Hono } from "hono";
+import { createKernel } from "../runtime/kernel.js";
+import type { CommerceConfig } from "../config/types.js";
+import type { Actor } from "../auth/types.js";
+import type { AuthInstance } from "../auth/setup.js";
+type ServerEnv = {
+    Variables: {
+        auth: AuthInstance;
+        actor: Actor | null;
+    };
+};
+/**
+ * Creates a test server with PGlite-backed kernel for REST API testing.
+ */
+export declare function createTestServer(overrides?: Partial<CommerceConfig>): Promise<{
+    server: Hono<ServerEnv>;
+    kernel: ReturnType<typeof createKernel>;
+    auth: AuthInstance;
+    cleanup: () => Promise<void>;
+}>;
+/**
+ * Helper to parse JSON response from Hono Response
+ */
+export declare function parseJsonResponse<T = unknown>(response: Response): Promise<T>;
+/**
+ * Common test actor with staff permissions
+ */
+export declare const testActor: Actor;
+/**
+ * Test actor with read-only permissions
+ */
+export declare const readonlyActor: Actor;
+/**
+ * Test actor with no permissions
+ */
+export declare const noPermActor: Actor;
+/**
+ * Helper to create a mock request with actor context
+ */
+export declare function createMockRequest(server: Hono<ServerEnv>, options: {
+    method: string;
+    url: string;
+    body?: unknown;
+    headers?: Record<string, string>;
+    actor?: Actor;
+}): Request;
+/**
+ * Helper to make authenticated requests to the test server
+ */
+export declare function makeRequest(server: Hono<ServerEnv>, options: {
+    method: string;
+    url: string;
+    body?: unknown;
+    headers?: Record<string, string>;
+    actor?: Actor;
+}): Promise<Response>;
+export {};
+//# sourceMappingURL=rest-api-test-utils.d.ts.map

package/dist/test-utils/rest-api-test-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-api-test-utils.d.ts","sourceRoot":"","sources":["../../src/test-utils/rest-api-test-utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAOpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,KAAK,SAAS,GAAG;IACf,SAAS,EAAE;QACT,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;KACrB,CAAC;CACH,CAAC;AAiDF;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GACtC,OAAO,CAAC;IACT,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAAC,CAqDD;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAEnF;AAED;;GAEG;AACH,eAAO,MAAM,SAAS,EAAE,KA4BvB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,KAS3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,KASzB,CAAC;AAEF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,WAwBA;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EACvB,OAAO,EAAE;IACP,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,qBAYF"}

package/dist/test-utils/rest-api-test-utils.js

@@ -0,0 +1,207 @@
+/**
+ * Integration test utilities for REST API endpoints.
+ *
+ * Provides helper functions to test Hono routes with a real kernel,
+ * PGlite database, and authentication middleware.
+ */
+import { Hono } from "hono";
+import { createKernel } from "../runtime/kernel.js";
+import { createAuth } from "../auth/setup.js";
+import { authMiddleware } from "../auth/middleware.js";
+import { createRestRoutes } from "../interfaces/rest/index.js";
+import { createPGliteTestConfig } from "./create-test-config.js";
+import { CommerceValidationError } from "../kernel/errors.js";
+import { Ok, Err } from "../kernel/result.js";
+const mockPaymentAdapter = {
+    providerId: "test-payments",
+    async createPaymentIntent(params) {
+        return Ok({
+            id: "pi_test_" + Date.now(),
+            status: "requires_capture",
+            amount: params.amount,
+            currency: params.currency,
+            clientSecret: "secret_test",
+        });
+    },
+    async capturePayment() {
+        return Ok({ id: "pi_test_" + Date.now(), status: "succeeded", amountCaptured: 1000 });
+    },
+    async refundPayment() {
+        return Ok({ id: "re_test_" + Date.now(), status: "succeeded", amountRefunded: 1000 });
+    },
+    async cancelPaymentIntent() {
+        return Ok(undefined);
+    },
+    async verifyWebhook(request) {
+        // Extract signature from headers
+        const signature = request.headers.get("stripe-signature") || request.headers.get("webhook-signature");
+        // Extract payload from request body
+        let payload;
+        try {
+            payload = await request.clone().json();
+        }
+        catch {
+            return Err(new CommerceValidationError("Webhook payload is invalid or missing"));
+        }
+        // Simulate signature verification for production-hardened testing
+        // Reject invalid signatures like "invalid_signature"
+        if (signature === "invalid_signature") {
+            return Err(new CommerceValidationError("Invalid webhook signature"));
+        }
+        // Reject requests with no required fields
+        if (!payload || !payload.type) {
+            return Err(new CommerceValidationError("Webhook payload is missing required fields"));
+        }
+        return Ok({ id: "evt_test_" + Date.now(), type: String(payload.type), data: (payload.data ?? {}) });
+    },
+};
+/**
+ * Creates a test server with PGlite-backed kernel for REST API testing.
+ */
+export async function createTestServer(overrides = {}) {
+    const { config, cleanup } = await createPGliteTestConfig({
+        payments: [mockPaymentAdapter],
+        ...overrides,
+    });
+    const kernel = createKernel(config);
+    const auth = createAuth(kernel.database, config);
+    const app = new Hono();
+    // Set auth in context (like createServer does)
+    app.use("*", async (c, next) => {
+        c.set("auth", auth);
+        await next();
+    });
+    // Test middleware: allow direct actor injection via x-test-actor header for testing
+    app.use("*", async (c, next) => {
+        const testActorHeader = c.req.header("x-test-actor");
+        if (testActorHeader) {
+            try {
+                const actor = JSON.parse(testActorHeader);
+                c.set("actor", actor);
+                await next();
+                return;
+            }
+            catch {
+                // Invalid JSON, continue to auth middleware
+            }
+        }
+        await next();
+    });
+    // Add auth middleware
+    app.use("*", authMiddleware(auth, config));
+    // Error handling middleware - catch thrown errors and convert to JSON
+    app.use("*", async (c, next) => {
+        try {
+            await next();
+        }
+        catch (error) {
+            // Import error handling utilities
+            const { mapErrorToResponse, mapErrorToStatus } = await import("../interfaces/rest/utils.js");
+            return c.json(mapErrorToResponse(error), mapErrorToStatus(error));
+        }
+    });
+    // Add REST routes
+    app.route("/api", createRestRoutes(kernel));
+    return { server: app, kernel, auth, cleanup };
+}
+/**
+ * Helper to parse JSON response from Hono Response
+ */
+export async function parseJsonResponse(response) {
+    return response.json();
+}
+/**
+ * Common test actor with staff permissions
+ */
+export const testActor = {
+    type: "user",
+    userId: "00000000-0000-0000-0000-000000000001",
+    email: "test@example.com",
+    name: "Test Staff",
+    vendorId: null,
+    organizationId: "org_default",
+    role: "staff",
+    permissions: [
+        "catalog:create",
+        "catalog:update",
+        "catalog:read",
+        "inventory:adjust",
+        "inventory:read",
+        "orders:create",
+        "orders:read",
+        "orders:update",
+        "cart:create",
+        "cart:update",
+        "cart:read",
+        "customers:update:self",
+        "webhooks:manage",
+        "pricing:manage",
+        "promotions:manage",
+        "promotions:read",
+        "audit:read",
+        "media:write",
+    ],
+};
+/**
+ * Test actor with read-only permissions
+ */
+export const readonlyActor = {
+    type: "user",
+    userId: "00000000-0000-0000-0000-000000000002",
+    email: "readonly@example.com",
+    name: "Read Only User",
+    vendorId: null,
+    organizationId: "org_default",
+    role: "customer",
+    permissions: ["catalog:read", "cart:read", "orders:read:own"],
+};
+/**
+ * Test actor with no permissions
+ */
+export const noPermActor = {
+    type: "user",
+    userId: "00000000-0000-0000-0000-000000000003",
+    email: "noperm@example.com",
+    name: "No Perm",
+    vendorId: null,
+    organizationId: "org_default",
+    role: "customer",
+    permissions: [],
+};
+/**
+ * Helper to create a mock request with actor context
+ */
+export function createMockRequest(server, options) {
+    const url = new URL(options.url, "http://localhost");
+    const headers = {
+        "content-type": "application/json",
+        ...options.headers,
+    };
+    // Add actor as header for test middleware
+    if (options.actor) {
+        headers["x-test-actor"] = JSON.stringify(options.actor);
+    }
+    // Build the request
+    const requestInit = {
+        method: options.method,
+        headers,
+    };
+    if (options.body) {
+        requestInit.body = JSON.stringify(options.body);
+    }
+    const request = new Request(url, requestInit);
+    return request;
+}
+/**
+ * Helper to make authenticated requests to the test server
+ */
+export async function makeRequest(server, options) {
+    // Create request with actor header (defaults to testActor)
+    const request = createMockRequest(server, {
+        ...options,
+        actor: options.actor ?? testActor,
+    });
+    // Route the request through Hono
+    const response = await server.fetch(request);
+    return response;
+}