@wopr-network/platform-core 1.35.0 → 1.35.1

package/dist/email/handlebars-renderer.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/email/handlebars-renderer.test.js

@@ -0,0 +1,174 @@
+import { describe, expect, it, vi } from "vitest";
+import { HandlebarsRenderer } from "./handlebars-renderer.js";
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function makeTemplate(overrides = {}) {
+    return {
+        id: "tpl-1",
+        name: "test-template",
+        description: "A test template",
+        subject: "Hello {{name}}",
+        htmlBody: "<h1>Hello {{name}}</h1>",
+        textBody: "Hello {{name}}",
+        active: true,
+        createdAt: Date.now(),
+        updatedAt: Date.now(),
+        ...overrides,
+    };
+}
+function makeRepo(templates = {}) {
+    return {
+        getByName: vi.fn().mockImplementation((name) => Promise.resolve(templates[name] ?? null)),
+        list: vi.fn().mockResolvedValue(Object.values(templates).filter(Boolean)),
+        upsert: vi.fn().mockResolvedValue(undefined),
+    };
+}
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+describe("HandlebarsRenderer", () => {
+    it("returns null for unknown template", async () => {
+        const repo = makeRepo({});
+        const renderer = new HandlebarsRenderer(repo);
+        const result = await renderer.render("nonexistent", { name: "World" });
+        expect(result).toBeNull();
+        expect(repo.getByName).toHaveBeenCalledWith("nonexistent");
+    });
+    it("returns null for inactive template", async () => {
+        const repo = makeRepo({
+            "inactive-tpl": makeTemplate({ name: "inactive-tpl", active: false }),
+        });
+        const renderer = new HandlebarsRenderer(repo);
+        const result = await renderer.render("inactive-tpl", { name: "World" });
+        expect(result).toBeNull();
+    });
+    it("compiles Handlebars and returns subject/html/text", async () => {
+        const repo = makeRepo({
+            greeting: makeTemplate({
+                name: "greeting",
+                subject: "Hi {{name}}!",
+                htmlBody: "<p>Welcome, {{name}}!</p>",
+                textBody: "Welcome, {{name}}!",
+            }),
+        });
+        const renderer = new HandlebarsRenderer(repo);
+        const result = await renderer.render("greeting", { name: "Alice" });
+        expect(result).not.toBeNull();
+        expect(result?.subject).toBe("Hi Alice!");
+        expect(result?.html).toBe("<p>Welcome, Alice!</p>");
+        expect(result?.text).toBe("Welcome, Alice!");
+    });
+    it("injects currentYear automatically", async () => {
+        const repo = makeRepo({
+            footer: makeTemplate({
+                name: "footer",
+                subject: "Year: {{currentYear}}",
+                htmlBody: "<p>&copy; {{currentYear}}</p>",
+                textBody: "(c) {{currentYear}}",
+            }),
+        });
+        const renderer = new HandlebarsRenderer(repo);
+        const result = await renderer.render("footer", {});
+        const year = new Date().getFullYear();
+        expect(result?.subject).toBe(`Year: ${year}`);
+        expect(result?.html).toBe(`<p>&copy; ${year}</p>`);
+        expect(result?.text).toBe(`(c) ${year}`);
+    });
+    it("does not override explicit currentYear from data", async () => {
+        const repo = makeRepo({
+            footer: makeTemplate({
+                name: "footer",
+                subject: "Year: {{currentYear}}",
+                htmlBody: "<p>{{currentYear}}</p>",
+                textBody: "{{currentYear}}",
+            }),
+        });
+        const renderer = new HandlebarsRenderer(repo);
+        const result = await renderer.render("footer", { currentYear: 2099 });
+        expect(result?.subject).toBe("Year: 2099");
+    });
+    describe("helpers", () => {
+        it("eq helper returns true for equal values", async () => {
+            const repo = makeRepo({
+                cond: makeTemplate({
+                    name: "cond",
+                    subject: '{{#if (eq status "active")}}Active{{else}}Inactive{{/if}}',
+                    htmlBody: "ok",
+                    textBody: "ok",
+                }),
+            });
+            const renderer = new HandlebarsRenderer(repo);
+            const active = await renderer.render("cond", { status: "active" });
+            expect(active?.subject).toBe("Active");
+            const inactive = await renderer.render("cond", { status: "disabled" });
+            expect(inactive?.subject).toBe("Inactive");
+        });
+        it("gt helper compares numbers", async () => {
+            const repo = makeRepo({
+                gt: makeTemplate({
+                    name: "gt",
+                    subject: "{{#if (gt count 5)}}Many{{else}}Few{{/if}}",
+                    htmlBody: "ok",
+                    textBody: "ok",
+                }),
+            });
+            const renderer = new HandlebarsRenderer(repo);
+            const many = await renderer.render("gt", { count: 10 });
+            expect(many?.subject).toBe("Many");
+            const few = await renderer.render("gt", { count: 3 });
+            expect(few?.subject).toBe("Few");
+        });
+        it("formatDate helper formats timestamps", async () => {
+            const repo = makeRepo({
+                dated: makeTemplate({
+                    name: "dated",
+                    subject: "Date: {{formatDate ts}}",
+                    htmlBody: "ok",
+                    textBody: "ok",
+                }),
+            });
+            const renderer = new HandlebarsRenderer(repo);
+            // Use noon UTC to avoid timezone date-boundary shifts
+            const ts = new Date("2025-01-15T12:00:00Z").getTime();
+            const result = await renderer.render("dated", { ts });
+            // The formatted string uses en-US locale with year/month/day
+            const expected = new Date(ts).toLocaleDateString("en-US", {
+                year: "numeric",
+                month: "long",
+                day: "numeric",
+            });
+            expect(result?.subject).toBe(`Date: ${expected}`);
+        });
+        it("formatDate helper passes through non-numeric values", async () => {
+            const repo = makeRepo({
+                dated: makeTemplate({
+                    name: "dated",
+                    subject: "Date: {{formatDate ts}}",
+                    htmlBody: "ok",
+                    textBody: "ok",
+                }),
+            });
+            const renderer = new HandlebarsRenderer(repo);
+            const result = await renderer.render("dated", { ts: "not-a-number" });
+            expect(result?.subject).toBe("Date: not-a-number");
+        });
+        it("escapeHtml helper escapes special characters", async () => {
+            const repo = makeRepo({
+                esc: makeTemplate({
+                    name: "esc",
+                    subject: "Safe: {{escapeHtml input}}",
+                    htmlBody: "ok",
+                    textBody: "ok",
+                }),
+            });
+            const renderer = new HandlebarsRenderer(repo);
+            const result = await renderer.render("esc", {
+                input: '<script>alert("xss")</script>',
+            });
+            expect(result?.subject).toContain("&lt;script&gt;");
+            expect(result?.subject).toContain("&quot;xss&quot;");
+            expect(result?.subject).not.toContain("<script>");
+        });
+    });
+});

package/dist/fleet/fleet-notification-listener.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/fleet/fleet-notification-listener.test.js

@@ -0,0 +1,244 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { FleetEventEmitter } from "./fleet-event-emitter.js";
+import { initFleetNotificationListener } from "./fleet-notification-listener.js";
+vi.mock("../config/logger.js", () => ({
+    logger: {
+        info: vi.fn(),
+        error: vi.fn(),
+        warn: vi.fn(),
+        debug: vi.fn(),
+    },
+}));
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+const DEBOUNCE_MS = 100;
+function makePrefs(overrides = {}) {
+    return {
+        billing_low_balance: true,
+        billing_receipts: true,
+        billing_auto_topup: true,
+        agent_channel_disconnect: true,
+        agent_status_changes: false,
+        account_role_changes: true,
+        account_team_invites: true,
+        fleet_updates: true,
+        ...overrides,
+    };
+}
+function makePrefsRepo(prefs = makePrefs()) {
+    return {
+        get: vi.fn().mockResolvedValue(prefs),
+        update: vi.fn().mockResolvedValue(undefined),
+    };
+}
+function makeNotificationService() {
+    return {
+        notifyFleetUpdateComplete: vi.fn(),
+        notifyFleetUpdateAvailable: vi.fn(),
+        notifyLowBalance: vi.fn(),
+    };
+}
+function botUpdated(tenantId, version = "v1.2.0") {
+    return {
+        type: "bot.updated",
+        botId: `bot-${Math.random().toString(36).slice(2, 6)}`,
+        tenantId,
+        timestamp: new Date().toISOString(),
+        version,
+    };
+}
+function botUpdateFailed(tenantId, version = "v1.2.0") {
+    return {
+        type: "bot.update_failed",
+        botId: `bot-${Math.random().toString(36).slice(2, 6)}`,
+        tenantId,
+        timestamp: new Date().toISOString(),
+        version,
+    };
+}
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+describe("initFleetNotificationListener", () => {
+    let emitter;
+    beforeEach(() => {
+        vi.useFakeTimers();
+        emitter = new FleetEventEmitter();
+    });
+    afterEach(() => {
+        vi.useRealTimers();
+    });
+    it("ignores non-bot events (node events)", async () => {
+        const notificationService = makeNotificationService();
+        const preferences = makePrefsRepo();
+        initFleetNotificationListener({
+            eventEmitter: emitter,
+            notificationService,
+            preferences,
+            resolveEmail: vi.fn().mockResolvedValue("user@example.com"),
+            debounceMs: DEBOUNCE_MS,
+        });
+        emitter.emit({
+            type: "node.provisioned",
+            nodeId: "node-1",
+            timestamp: new Date().toISOString(),
+        });
+        await vi.advanceTimersByTimeAsync(DEBOUNCE_MS + 50);
+        expect(notificationService.notifyFleetUpdateComplete).not.toHaveBeenCalled();
+    });
+    it("ignores non-update bot events (bot.started, bot.stopped)", async () => {
+        const notificationService = makeNotificationService();
+        const preferences = makePrefsRepo();
+        initFleetNotificationListener({
+            eventEmitter: emitter,
+            notificationService,
+            preferences,
+            resolveEmail: vi.fn().mockResolvedValue("user@example.com"),
+            debounceMs: DEBOUNCE_MS,
+        });
+        emitter.emit({
+            type: "bot.started",
+            botId: "bot-1",
+            tenantId: "t1",
+            timestamp: new Date().toISOString(),
+        });
+        emitter.emit({
+            type: "bot.stopped",
+            botId: "bot-2",
+            tenantId: "t1",
+            timestamp: new Date().toISOString(),
+        });
+        await vi.advanceTimersByTimeAsync(DEBOUNCE_MS + 50);
+        expect(notificationService.notifyFleetUpdateComplete).not.toHaveBeenCalled();
+    });
+    it("aggregates multiple bot.updated events per tenant into one notification", async () => {
+        const notificationService = makeNotificationService();
+        const preferences = makePrefsRepo();
+        const resolveEmail = vi.fn().mockResolvedValue("owner@example.com");
+        initFleetNotificationListener({
+            eventEmitter: emitter,
+            notificationService,
+            preferences,
+            resolveEmail,
+            debounceMs: DEBOUNCE_MS,
+        });
+        // Emit 3 successful updates for the same tenant
+        emitter.emit(botUpdated("t1", "v2.0.0"));
+        emitter.emit(botUpdated("t1", "v2.0.0"));
+        emitter.emit(botUpdated("t1", "v2.0.0"));
+        // No notification yet — debounce hasn't fired
+        expect(notificationService.notifyFleetUpdateComplete).not.toHaveBeenCalled();
+        await vi.advanceTimersByTimeAsync(DEBOUNCE_MS + 50);
+        expect(notificationService.notifyFleetUpdateComplete).toHaveBeenCalledOnce();
+        expect(notificationService.notifyFleetUpdateComplete).toHaveBeenCalledWith("t1", "owner@example.com", "v2.0.0", 3, // succeeded
+        0);
+    });
+    it("sends summary with correct succeeded/failed counts after debounce", async () => {
+        const notificationService = makeNotificationService();
+        const preferences = makePrefsRepo();
+        const resolveEmail = vi.fn().mockResolvedValue("owner@example.com");
+        initFleetNotificationListener({
+            eventEmitter: emitter,
+            notificationService,
+            preferences,
+            resolveEmail,
+            debounceMs: DEBOUNCE_MS,
+        });
+        emitter.emit(botUpdated("t1", "v3.0.0"));
+        emitter.emit(botUpdated("t1", "v3.0.0"));
+        emitter.emit(botUpdateFailed("t1", "v3.0.0"));
+        await vi.advanceTimersByTimeAsync(DEBOUNCE_MS + 50);
+        expect(notificationService.notifyFleetUpdateComplete).toHaveBeenCalledWith("t1", "owner@example.com", "v3.0.0", 2, // succeeded
+        1);
+    });
+    it("updates version from subsequent events", async () => {
+        const notificationService = makeNotificationService();
+        const preferences = makePrefsRepo();
+        const resolveEmail = vi.fn().mockResolvedValue("owner@example.com");
+        initFleetNotificationListener({
+            eventEmitter: emitter,
+            notificationService,
+            preferences,
+            resolveEmail,
+            debounceMs: DEBOUNCE_MS,
+        });
+        // First event has v1.0.0, subsequent event changes to v1.1.0
+        emitter.emit(botUpdated("t1", "v1.0.0"));
+        emitter.emit(botUpdated("t1", "v1.1.0"));
+        await vi.advanceTimersByTimeAsync(DEBOUNCE_MS + 50);
+        expect(notificationService.notifyFleetUpdateComplete).toHaveBeenCalledWith("t1", "owner@example.com", "v1.1.0", // updated to latest version
+        2, 0);
+    });
+    it("checks fleet_updates preference — skips if disabled", async () => {
+        const notificationService = makeNotificationService();
+        const preferences = makePrefsRepo(makePrefs({ fleet_updates: false }));
+        const resolveEmail = vi.fn().mockResolvedValue("owner@example.com");
+        initFleetNotificationListener({
+            eventEmitter: emitter,
+            notificationService,
+            preferences,
+            resolveEmail,
+            debounceMs: DEBOUNCE_MS,
+        });
+        emitter.emit(botUpdated("t1"));
+        await vi.advanceTimersByTimeAsync(DEBOUNCE_MS + 50);
+        expect(preferences.get).toHaveBeenCalledWith("t1");
+        expect(notificationService.notifyFleetUpdateComplete).not.toHaveBeenCalled();
+    });
+    it("skips if email resolver returns null", async () => {
+        const notificationService = makeNotificationService();
+        const preferences = makePrefsRepo();
+        const resolveEmail = vi.fn().mockResolvedValue(null);
+        initFleetNotificationListener({
+            eventEmitter: emitter,
+            notificationService,
+            preferences,
+            resolveEmail,
+            debounceMs: DEBOUNCE_MS,
+        });
+        emitter.emit(botUpdated("t1"));
+        await vi.advanceTimersByTimeAsync(DEBOUNCE_MS + 50);
+        expect(resolveEmail).toHaveBeenCalledWith("t1");
+        expect(notificationService.notifyFleetUpdateComplete).not.toHaveBeenCalled();
+    });
+    it("async shutdown flushes pending notifications", async () => {
+        const notificationService = makeNotificationService();
+        const preferences = makePrefsRepo();
+        const resolveEmail = vi.fn().mockResolvedValue("owner@example.com");
+        const shutdown = initFleetNotificationListener({
+            eventEmitter: emitter,
+            notificationService,
+            preferences,
+            resolveEmail,
+            debounceMs: DEBOUNCE_MS,
+        });
+        emitter.emit(botUpdated("t1", "v5.0.0"));
+        emitter.emit(botUpdated("t2", "v5.0.0"));
+        // Don't advance timers — flush via shutdown instead
+        await shutdown();
+        // Both tenants should have been flushed
+        expect(notificationService.notifyFleetUpdateComplete).toHaveBeenCalledTimes(2);
+        const calls = vi.mocked(notificationService.notifyFleetUpdateComplete).mock.calls;
+        const tenantIds = calls.map((c) => c[0]);
+        expect(tenantIds).toContain("t1");
+        expect(tenantIds).toContain("t2");
+    });
+    it("no further events after shutdown", async () => {
+        const notificationService = makeNotificationService();
+        const preferences = makePrefsRepo();
+        const resolveEmail = vi.fn().mockResolvedValue("owner@example.com");
+        const shutdown = initFleetNotificationListener({
+            eventEmitter: emitter,
+            notificationService,
+            preferences,
+            resolveEmail,
+            debounceMs: DEBOUNCE_MS,
+        });
+        await shutdown();
+        // Events after shutdown should not trigger anything
+        emitter.emit(botUpdated("t1"));
+        await vi.advanceTimersByTimeAsync(DEBOUNCE_MS + 50);
+        expect(notificationService.notifyFleetUpdateComplete).not.toHaveBeenCalled();
+    });
+});

package/dist/fleet/init-fleet-updater.d.ts

@@ -41,7 +41,7 @@ export interface FleetUpdaterConfig {
     /** Optional fleet event emitter. When provided, bot.updated / bot.update_failed events are emitted. */
     eventEmitter?: FleetEventEmitter;
     /** Called with manual-mode tenant IDs when a new image is available but they are excluded from rollout. */
-    onManualTenantsSkipped?: (tenantIds: string[]) => void;
+    onManualTenantsSkipped?: (tenantIds: string[], imageTag: string) => void;
 }
 export interface FleetUpdaterHandle {
     poller: ImagePoller;

package/dist/fleet/init-fleet-updater.js

@@ -36,6 +36,10 @@ export function initFleetUpdater(docker, fleet, profileStore, profileRepo, confi
     const updater = new ContainerUpdater(docker, profileStore, fleet, poller);
     const snapshotManager = new VolumeSnapshotManager(docker, snapshotDir);
     const strategy = createRolloutStrategy(strategyType, strategyOptions);
+    // Captured by the onUpdateAvailable handler and read by getUpdatableProfiles.
+    // Set before each orchestrator.rollout() call so the callback receives the
+    // image tag that triggered this rollout rather than a stale "latest" placeholder.
+    let currentImageTag = "latest";
     const orchestrator = new RolloutOrchestrator({
         updater,
         snapshotManager,
@@ -53,7 +57,7 @@ export function initFleetUpdater(docker, fleet, profileStore, profileRepo, confi
             });
             if (!configRepo) {
                 if (manualPolicyIds.length > 0 && onManualTenantsSkipped) {
-                    onManualTenantsSkipped([...new Set(manualPolicyIds)]);
+                    onManualTenantsSkipped([...new Set(manualPolicyIds)], currentImageTag);
                 }
                 return nonManualPolicy;
             }
@@ -70,7 +74,7 @@ export function initFleetUpdater(docker, fleet, profileStore, profileRepo, confi
             }));
             const allManualIds = [...manualPolicyIds, ...configManualIds];
             if (allManualIds.length > 0 && onManualTenantsSkipped) {
-                onManualTenantsSkipped([...new Set(allManualIds)]);
+                onManualTenantsSkipped([...new Set(allManualIds)], currentImageTag);
             }
             return results.filter((p) => p !== null);
         },
@@ -106,11 +110,23 @@ export function initFleetUpdater(docker, fleet, profileStore, profileRepo, confi
     // Wire the detection → orchestration pipeline.
     // Any digest change triggers a fleet-wide rollout because the managed image
     // is shared across all tenants — one new digest means all bots need updating.
-    poller.onUpdateAvailable = async (_botId, _newDigest) => {
+    poller.onUpdateAvailable = async (botId, _newDigest) => {
         if (orchestrator.isRolling) {
             logger.debug("Skipping update trigger — rollout already in progress");
             return;
         }
+        // Resolve the image tag from the bot that triggered the update so that
+        // onManualTenantsSkipped receives the real version instead of "latest".
+        try {
+            const triggeringProfile = await profileStore.get(botId);
+            if (triggeringProfile) {
+                const img = triggeringProfile.image;
+                currentImageTag = img.includes(":") ? (img.split(":").pop() ?? "latest") : "latest";
+            }
+        }
+        catch {
+            // Best-effort — currentImageTag stays at previous value
+        }
         logger.info("New image digest detected — starting fleet-wide rollout");
         await orchestrator.rollout().catch((err) => {
             logger.error("Rollout failed", { err });

package/dist/fleet/init-fleet-updater.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/fleet/init-fleet-updater.test.js

@@ -0,0 +1,186 @@
+/**
+ * Tests the profile-filtering + onManualTenantsSkipped logic used inside initFleetUpdater.
+ *
+ * We can't import initFleetUpdater directly because it constructs ImagePoller,
+ * ContainerUpdater, etc. which pull in heavy dependencies that cause hangs.
+ * Instead, we replicate the getUpdatableProfiles closure from initFleetUpdater
+ * and test it in isolation via a RolloutOrchestrator with mock deps.
+ */
+import { describe, expect, it, vi } from "vitest";
+import { RolloutOrchestrator } from "./rollout-orchestrator.js";
+vi.mock("../config/logger.js", () => ({
+    logger: {
+        info: vi.fn(),
+        error: vi.fn(),
+        warn: vi.fn(),
+        debug: vi.fn(),
+    },
+}));
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function makeProfileWithFields(fields) {
+    return {
+        ...fields,
+        image: "ghcr.io/org/img:latest",
+    };
+}
+function makeProfileRepo(profiles) {
+    return {
+        list: vi.fn().mockResolvedValue(profiles),
+        get: vi
+            .fn()
+            .mockImplementation((id) => Promise.resolve(profiles.find((p) => p.id === id) ?? null)),
+        save: vi.fn().mockResolvedValue(undefined),
+        delete: vi.fn().mockResolvedValue(false),
+    };
+}
+function makeConfigRepo(configs = {}) {
+    return {
+        get: vi.fn().mockImplementation((tenantId) => {
+            const cfg = configs[tenantId];
+            return Promise.resolve(cfg ? { tenantId, ...cfg, updatedAt: Date.now() } : null);
+        }),
+        upsert: vi.fn().mockResolvedValue(undefined),
+        listAutoEnabled: vi.fn().mockResolvedValue([]),
+    };
+}
+function makeMockUpdater() {
+    return {
+        updateBot: vi.fn().mockResolvedValue({
+            botId: "",
+            success: true,
+            previousImage: "",
+            newImage: "",
+            previousDigest: null,
+            newDigest: null,
+            rolledBack: false,
+        }),
+    };
+}
+function makeMockSnapshotManager() {
+    return {
+        snapshot: vi.fn(),
+        restore: vi.fn(),
+        delete: vi.fn(),
+    };
+}
+function makeMockStrategy() {
+    return {
+        nextBatch: vi.fn().mockImplementation((remaining) => remaining),
+        pauseDuration: vi.fn().mockReturnValue(0),
+        onBotFailure: vi.fn().mockReturnValue("skip"),
+        maxRetries: vi.fn().mockReturnValue(0),
+        healthCheckTimeout: vi.fn().mockReturnValue(0),
+    };
+}
+/**
+ * Builds the same getUpdatableProfiles closure that initFleetUpdater creates,
+ * so we can test the filtering + callback logic without importing the heavy module.
+ */
+function buildGetUpdatableProfiles(profileRepo, configRepo, onManualTenantsSkipped, imageTag = "v1.2.3") {
+    return async () => {
+        const profiles = await profileRepo.list();
+        const manualPolicyIds = [];
+        const nonManualPolicy = profiles.filter((p) => {
+            if (p.updatePolicy === "manual") {
+                manualPolicyIds.push(p.tenantId);
+                return false;
+            }
+            return true;
+        });
+        if (!configRepo) {
+            if (manualPolicyIds.length > 0 && onManualTenantsSkipped) {
+                onManualTenantsSkipped([...new Set(manualPolicyIds)], imageTag);
+            }
+            return nonManualPolicy;
+        }
+        const configManualIds = [];
+        const results = await Promise.all(nonManualPolicy.map(async (p) => {
+            const tenantCfg = await configRepo.get(p.tenantId);
+            if (tenantCfg && tenantCfg.mode === "manual") {
+                configManualIds.push(p.tenantId);
+                return null;
+            }
+            return p;
+        }));
+        const allManualIds = [...manualPolicyIds, ...configManualIds];
+        if (allManualIds.length > 0 && onManualTenantsSkipped) {
+            onManualTenantsSkipped([...new Set(allManualIds)], imageTag);
+        }
+        return results.filter((p) => p !== null);
+    };
+}
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+describe("initFleetUpdater — onManualTenantsSkipped", () => {
+    it("callback fires with tenant IDs of manual-mode tenants (policy-based)", async () => {
+        const profiles = [
+            makeProfileWithFields({ id: "b1", tenantId: "t-manual", updatePolicy: "manual" }),
+            makeProfileWithFields({ id: "b2", tenantId: "t-auto", updatePolicy: "auto" }),
+        ];
+        const profileRepo = makeProfileRepo(profiles);
+        const onManualTenantsSkipped = vi.fn();
+        const orchestrator = new RolloutOrchestrator({
+            updater: makeMockUpdater(),
+            snapshotManager: makeMockSnapshotManager(),
+            strategy: makeMockStrategy(),
+            getUpdatableProfiles: buildGetUpdatableProfiles(profileRepo, undefined, onManualTenantsSkipped),
+        });
+        await orchestrator.rollout();
+        expect(onManualTenantsSkipped).toHaveBeenCalledWith(["t-manual"], "v1.2.3");
+    });
+    it("callback deduplicates tenant IDs", async () => {
+        const profiles = [
+            makeProfileWithFields({ id: "b1", tenantId: "t-dup", updatePolicy: "manual" }),
+            makeProfileWithFields({ id: "b2", tenantId: "t-dup", updatePolicy: "manual" }),
+            makeProfileWithFields({ id: "b3", tenantId: "t-auto", updatePolicy: "auto" }),
+        ];
+        const profileRepo = makeProfileRepo(profiles);
+        const onManualTenantsSkipped = vi.fn();
+        const orchestrator = new RolloutOrchestrator({
+            updater: makeMockUpdater(),
+            snapshotManager: makeMockSnapshotManager(),
+            strategy: makeMockStrategy(),
+            getUpdatableProfiles: buildGetUpdatableProfiles(profileRepo, undefined, onManualTenantsSkipped),
+        });
+        await orchestrator.rollout();
+        expect(onManualTenantsSkipped).toHaveBeenCalledWith(["t-dup"], "v1.2.3");
+    });
+    it("callback not called when no manual tenants exist", async () => {
+        const profiles = [
+            makeProfileWithFields({ id: "b1", tenantId: "t1", updatePolicy: "auto" }),
+            makeProfileWithFields({ id: "b2", tenantId: "t2", updatePolicy: "auto" }),
+        ];
+        const profileRepo = makeProfileRepo(profiles);
+        const onManualTenantsSkipped = vi.fn();
+        const orchestrator = new RolloutOrchestrator({
+            updater: makeMockUpdater(),
+            snapshotManager: makeMockSnapshotManager(),
+            strategy: makeMockStrategy(),
+            getUpdatableProfiles: buildGetUpdatableProfiles(profileRepo, undefined, onManualTenantsSkipped),
+        });
+        await orchestrator.rollout();
+        expect(onManualTenantsSkipped).not.toHaveBeenCalled();
+    });
+    it("callback fires with config-repo manual tenants when configRepo is provided", async () => {
+        const profiles = [
+            makeProfileWithFields({ id: "b1", tenantId: "t-cfg-manual", updatePolicy: "auto" }),
+            makeProfileWithFields({ id: "b2", tenantId: "t-cfg-auto", updatePolicy: "auto" }),
+        ];
+        const profileRepo = makeProfileRepo(profiles);
+        const configRepo = makeConfigRepo({
+            "t-cfg-manual": { mode: "manual", preferredHourUtc: 3 },
+        });
+        const onManualTenantsSkipped = vi.fn();
+        const orchestrator = new RolloutOrchestrator({
+            updater: makeMockUpdater(),
+            snapshotManager: makeMockSnapshotManager(),
+            strategy: makeMockStrategy(),
+            getUpdatableProfiles: buildGetUpdatableProfiles(profileRepo, configRepo, onManualTenantsSkipped),
+        });
+        await orchestrator.rollout();
+        expect(onManualTenantsSkipped).toHaveBeenCalledWith(["t-cfg-manual"], "v1.2.3");
+    });
+});

package/dist/trpc/admin-fleet-update-router.test.d.ts

@@ -0,0 +1 @@
+export {};