@zitadel/testing 0.0.0

package/dist/playwright.d.mts

@@ -0,0 +1,124 @@
+import { a as Identity, d as SeedUserInput, f as SeedUsersTemplate, i as ConnectedZitadel, l as MintedSession, n as applyAppEnvTemplate, o as InstanceHandle, p as SeededUser, r as nextAppEnv, t as AppEnvTemplate, u as SeedSessionInput } from "./app-env-D3W0GYhA.mjs";
+import { SetupPreset, SetupUseCase } from "@zitadel/config/defaults";
+import * as _$_playwright_test0 from "@playwright/test";
+import { Page, PlaywrightTestConfig, expect } from "@playwright/test";
+
+//#region src/orchestration.d.ts
+interface SupervisorConfig {
+  /** Fixed port: the config process must know the health URL up front. */
+  port: number;
+  appOrigins?: string[];
+  serverBinary?: string;
+  /** Appended to the missing-binary error, e.g. how to build it. */
+  serverBinaryHint?: string;
+  dir?: string;
+  keep?: boolean;
+  projectName?: string;
+  preset?: SetupPreset;
+  useCase?: SetupUseCase;
+  timeoutMs?: number;
+}
+//#endregion
+//#region src/playwright-config.d.ts
+type WebServerEntry = Extract<NonNullable<PlaywrightTestConfig["webServer"]>, readonly unknown[]>[number];
+interface WithZitadelOptions {
+  /**
+   * The Playwright config's directory (`import.meta.dirname`). Anchors the
+   * default handshake location and the working directory of the generated
+   * webServer entries.
+   */
+  configDir: string;
+  /**
+   * Fixed TCP port for the instance. Required (unlike `startLocalZitadel`,
+   * which defaults to a free port) because Playwright's readiness URL must be
+   * known while the config is evaluated, before anything boots.
+   */
+  port: number;
+  /**
+   * Origin the browser will use for the app under test. Registered as the
+   * project's preview origin (the backend's origin check rejects forwarded
+   * requests from unregistered origins) and the base of `app.readyPath`.
+   */
+  appOrigin: string;
+  /** Boot/bootstrap options forwarded to the instance supervisor. */
+  zitadel?: {
+    /** Absolute path to the server binary. */serverBinary?: string; /** Appended to the missing-binary error, e.g. "run `moon run server:build` first." */
+    serverBinaryHint?: string;
+    projectName?: string;
+    preset?: SupervisorConfig["preset"];
+    useCase?: SupervisorConfig["useCase"]; /** Absolute state directory; defaults to a fresh temp dir removed on stop. */
+    dir?: string; /** Keep the owned temp dir after stop (debugging). */
+    keep?: boolean; /** webServer readiness timeout for the boot; cold boot dominates it. */
+    bootTimeoutMs?: number;
+  };
+  /** The app dev server to run against the instance. */
+  app: {
+    /** Spawn argv (no shell), e.g. ["corepack", "pnpm", "--filter", "my-app", "dev"]. */command: string[]; /** Working directory for the app command. */
+    cwd: string; /** Path on `appOrigin` Playwright polls for readiness, e.g. "/login". */
+    readyPath: string;
+    /**
+     * Env vars the app needs, as a template mapping env names to
+     * InstanceHandle fields — see `nextAppEnv` for the `@zitadel/sdk-next`
+     * shape. A template (not a callback) because it crosses into the app
+     * runner process.
+     */
+    env: AppEnvTemplate;
+    readyTimeoutMs?: number; /** How long SIGTERM gets before the app is killed on teardown. */
+    gracefulShutdownMs?: number;
+  };
+  /** Absolute path; defaults to `<configDir>/.zitadel-testing/handshake.json`. */
+  handshakePath?: string;
+}
+/**
+ * Generate the Playwright `webServer` entries that boot an ephemeral seeded
+ * Zitadel and run the app against it, replacing the per-suite wrapper
+ * scripts. Spread the result into `defineConfig`:
+ *
+ * ```ts
+ * export default defineConfig({
+ *   ...withZitadel({ configDir: import.meta.dirname, port: 8092, ... }),
+ *   testDir: "./src-real",
+ * });
+ * ```
+ *
+ * Also points ZITADEL_TESTING_HANDSHAKE at the handshake file so the
+ * `@zitadel/testing/playwright` fixtures resolve the instance — Playwright
+ * workers re-evaluate the config, which re-applies this for every process
+ * that needs it. The returned value is plain data; append your own entries
+ * to `webServer` if the suite needs additional servers.
+ */
+declare function withZitadel(options: WithZitadelOptions, /** Test seam: alternative executable resolution. */resolveEntry?: (name: "supervisor" | "app-runner") => string): {
+  webServer: WebServerEntry[];
+};
+//#endregion
+//#region src/playwright.d.ts
+interface AuthenticatedPage {
+  /** A page in its own context, already carrying the session cookie. */
+  page: Page;
+  user: SeededUser;
+  session: MintedSession;
+}
+interface ZitadelTestFixtures {
+  /** Per-test seeding; each call mints unique data on the shared instance. */
+  seed: {
+    user(input?: SeedUserInput): Promise<SeededUser>;
+    users(count: number, template?: SeedUsersTemplate): Promise<SeededUser[]>; /** Unused email+password for registration flows — creates nothing. */
+    identity(): Identity; /** Seeded user + headless real-flow login; password flows only. */
+    session(input?: SeedSessionInput): Promise<MintedSession>;
+  };
+  /**
+   * Start the test authenticated: a fresh user, a real session minted through
+   * the flow API, and the cookie injected into a dedicated browser context —
+   * the default `page` stays signed out for login-flow tests. Requires
+   * `use.baseURL` (every withZitadel consumer sets it).
+   */
+  authenticatedPage: AuthenticatedPage;
+}
+interface ZitadelWorkerFixtures {
+  /** Connection to the suite's instance, resolved once per worker. */
+  zitadel: ConnectedZitadel;
+}
+declare const test: _$_playwright_test0.TestType<_$_playwright_test0.PlaywrightTestArgs & _$_playwright_test0.PlaywrightTestOptions & ZitadelTestFixtures, _$_playwright_test0.PlaywrightWorkerArgs & _$_playwright_test0.PlaywrightWorkerOptions & ZitadelWorkerFixtures>;
+//#endregion
+export { type AppEnvTemplate, AuthenticatedPage, type ConnectedZitadel, type Identity, type InstanceHandle, type MintedSession, type SeedSessionInput, type SeedUserInput, type SeedUsersTemplate, type SeededUser, type WithZitadelOptions, ZitadelTestFixtures, ZitadelWorkerFixtures, applyAppEnvTemplate, expect, nextAppEnv, test, withZitadel };
+//# sourceMappingURL=playwright.d.mts.map

package/dist/playwright.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright.d.mts","names":[],"sources":["../src/orchestration.ts","../src/playwright-config.ts","../src/playwright.ts"],"mappings":";;;;;;UAeiB,gBAAA;EAMf;EAJA,IAAA;EACA,UAAA;EACA,YAAA;EAMA;EAJA,gBAAA;EACA,GAAA;EACA,IAAA;EACA,WAAA;EACA,MAAA,GAAS,WAAA;EACT,OAAA,GAAU,YAAA;EACV,SAAA;AAAA;;;KCZG,cAAA,GAAiB,OAAA,CACpB,WAAA,CAAY,oBAAA;AAAA,UAIG,kBAAA;;ADLjB;;;;ECWE,SAAA;EDRA;;;;;ECcA,IAAA;EDPA;;;;;ECaA,SAAA;EDXS;ECaT,OAAA;8CAEE,YAAA,WA3BC;IA6BD,gBAAA;IACA,WAAA;IACA,MAAA,GAAS,gBAAA;IACT,OAAA,GAAU,gBAAA,aAhCQ;IAkClB,GAAA,WAlCyB;IAoCzB,IAAA,YAnCF;IAqCE,aAAA;EAAA;EArC8B;EAwChC,GAAA;IApCiC,qFAsC/B,OAAA,YAZS;IAcT,GAAA,UASK;IAPL,SAAA;IAOmB;;;;;;IAAnB,GAAA,EAAK,cAAA;IACL,cAAA,WAxBA;IA0BA,kBAAA;EAAA;EAzBU;EA4BZ,aAAA;AAAA;;;;;;;;;;;;;AAqBF;;;;;;iBAAgB,WAAA,CACd,OAAA,EAAS,kBAAA,sDAET,YAAA,IAAe,IAAA;EACZ,SAAA,EAAW,cAAA;AAAA;;;UCtFC,iBAAA;;EAEf,IAAA,EAAM,IAAA;EACN,IAAA,EAAM,UAAA;EACN,OAAA,EAAS,aAAA;AAAA;AAAA,UAGM,mBAAA;EFKO;EEHtB,IAAA;IACE,IAAA,CAAK,KAAA,GAAQ,aAAA,GAAgB,OAAA,CAAQ,UAAA;IACrC,KAAA,CAAM,KAAA,UAAe,QAAA,GAAW,iBAAA,GAAoB,OAAA,CAAQ,UAAA,KFJ9D;IEME,QAAA,IAAY,QAAA,EFJd;IEME,OAAA,CAAQ,KAAA,GAAQ,gBAAA,GAAmB,OAAA,CAAQ,aAAA;EAAA;EFJpC;;;;;;EEYT,iBAAA,EAAmB,iBAAA;AAAA;AAAA,UAGJ,qBAAA;EDzBZ;EC2BH,OAAA,EAAS,gBAAA;AAAA;AAAA,cAGE,IAAA,EAAI,mBAAA,CAAA,QAAA,CA0Cf,mBAAA,CA1Ce,kBAAA,GAAA,mBAAA,CAAA,qBAAA,GAAA,mBAAA,EAAA,mBAAA,CAAA,oBAAA,GAAA,mBAAA,CAAA,uBAAA,GAAA,qBAAA"}

package/dist/playwright.mjs

@@ -0,0 +1,146 @@
+import { a as nextAppEnv, i as applyAppEnvTemplate, t as readHandshakeSync } from "./handshake-BPtWruO8.mjs";
+import { t as connectZitadel } from "./src-DkG0V4A6.mjs";
+import { n as HANDSHAKE_ENV, r as SUPERVISOR_CONFIG_ENV, t as APP_RUNNER_CONFIG_ENV } from "./orchestration-C640_1Lg.mjs";
+import { extname, isAbsolute, join } from "node:path";
+import { existsSync } from "node:fs";
+import { expect, test as test$1 } from "@playwright/test";
+import { fileURLToPath } from "node:url";
+//#region src/playwright-config.ts
+/**
+* Generate the Playwright `webServer` entries that boot an ephemeral seeded
+* Zitadel and run the app against it, replacing the per-suite wrapper
+* scripts. Spread the result into `defineConfig`:
+*
+* ```ts
+* export default defineConfig({
+*   ...withZitadel({ configDir: import.meta.dirname, port: 8092, ... }),
+*   testDir: "./src-real",
+* });
+* ```
+*
+* Also points ZITADEL_TESTING_HANDSHAKE at the handshake file so the
+* `@zitadel/testing/playwright` fixtures resolve the instance — Playwright
+* workers re-evaluate the config, which re-applies this for every process
+* that needs it. The returned value is plain data; append your own entries
+* to `webServer` if the suite needs additional servers.
+*/
+function withZitadel(options, resolveEntry = entryPoint) {
+	const { configDir, port, appOrigin, app } = options;
+	if (!isAbsolute(configDir)) throw new Error(`withZitadel: configDir must be absolute, got "${configDir}"`);
+	if (!Number.isInteger(port) || port <= 0) throw new Error(`withZitadel: port must be a positive integer, got ${port}`);
+	const origin = URL.canParse(appOrigin) ? new URL(appOrigin) : void 0;
+	if (!origin || origin.protocol !== "http:" && origin.protocol !== "https:" || origin.pathname !== "/" || origin.search !== "" || origin.hash !== "") throw new Error(`withZitadel: appOrigin must be an origin like "http://localhost:3002", got "${appOrigin}"`);
+	if (!app.readyPath.startsWith("/")) throw new Error(`withZitadel: app.readyPath must start with "/", got "${app.readyPath}"`);
+	if (app.command.length === 0) throw new Error("withZitadel: app.command must not be empty");
+	if (!isAbsolute(app.cwd)) throw new Error(`withZitadel: app.cwd must be absolute, got "${app.cwd}"`);
+	for (const [label, value] of [
+		["zitadel.serverBinary", options.zitadel?.serverBinary],
+		["zitadel.dir", options.zitadel?.dir],
+		["handshakePath", options.handshakePath]
+	]) if (value !== void 0 && !isAbsolute(value)) throw new Error(`withZitadel: ${label} must be an absolute path, got "${value}"`);
+	const handshakePath = options.handshakePath ?? join(configDir, ".zitadel-testing", "handshake.json");
+	process.env[HANDSHAKE_ENV] = handshakePath;
+	const supervisorConfig = {
+		port,
+		appOrigins: [appOrigin],
+		serverBinary: options.zitadel?.serverBinary,
+		serverBinaryHint: options.zitadel?.serverBinaryHint,
+		dir: options.zitadel?.dir,
+		keep: options.zitadel?.keep,
+		projectName: options.zitadel?.projectName,
+		preset: options.zitadel?.preset,
+		useCase: options.zitadel?.useCase
+	};
+	const appRunnerConfig = {
+		command: app.command,
+		cwd: app.cwd,
+		env: app.env,
+		handshakeTimeoutMs: app.readyTimeoutMs ?? 18e4
+	};
+	return { webServer: [{
+		command: `node ${JSON.stringify(resolveEntry("supervisor"))}`,
+		url: `http://localhost:${port}/healthz`,
+		reuseExistingServer: false,
+		cwd: configDir,
+		stdout: "pipe",
+		stderr: "pipe",
+		timeout: options.zitadel?.bootTimeoutMs ?? 12e4,
+		env: {
+			[HANDSHAKE_ENV]: handshakePath,
+			[SUPERVISOR_CONFIG_ENV]: JSON.stringify(supervisorConfig)
+		},
+		gracefulShutdown: {
+			signal: "SIGTERM",
+			timeout: 3e4
+		}
+	}, {
+		command: `node ${JSON.stringify(resolveEntry("app-runner"))}`,
+		url: new URL(app.readyPath, appOrigin).toString(),
+		reuseExistingServer: false,
+		cwd: configDir,
+		stdout: "pipe",
+		stderr: "pipe",
+		timeout: app.readyTimeoutMs ?? 18e4,
+		env: {
+			[HANDSHAKE_ENV]: handshakePath,
+			[APP_RUNNER_CONFIG_ENV]: JSON.stringify(appRunnerConfig)
+		},
+		gracefulShutdown: {
+			signal: "SIGTERM",
+			timeout: app.gracefulShutdownMs ?? 15e3
+		}
+	}] };
+}
+/**
+* Resolve a sibling dist entry in the same module format this file was loaded
+* as (dist/supervisor.mjs next to dist/playwright.mjs, .cjs next to .cjs), so
+* the spawned process needs no package-manager bin plumbing.
+*/
+function entryPoint(name) {
+	const self = fileURLToPath(import.meta.url);
+	const ext = extname(self);
+	if (ext !== ".mjs" && ext !== ".cjs") throw new Error(`withZitadel: expected to run from the built package (got ${self}); build @zitadel/testing first (in-repo: \`moon run testing:build\`).`);
+	const path = fileURLToPath(new URL(`./${name}${ext}`, import.meta.url));
+	if (!existsSync(path)) throw new Error(`withZitadel: missing ${path}; rebuild @zitadel/testing (in-repo: \`moon run testing:build\`).`);
+	return path;
+}
+//#endregion
+//#region src/playwright.ts
+const test = test$1.extend({
+	zitadel: [async ({}, use) => {
+		const handshakePath = process.env.ZITADEL_TESTING_HANDSHAKE;
+		if (!handshakePath) throw new Error("ZITADEL_TESTING_HANDSHAKE is not set. Point it at the handshake file written by the script that boots the instance (see @zitadel/testing docs).");
+		await use(connectZitadel(readHandshakeSync(handshakePath)));
+	}, { scope: "worker" }],
+	seed: async ({ zitadel, baseURL }, use) => {
+		await use({
+			user: (input) => zitadel.seedUser(input),
+			users: (count, template) => zitadel.seedUsers(count, template),
+			identity: () => zitadel.identity(),
+			session: (input) => zitadel.seedSession({
+				origin: baseURL,
+				...input
+			})
+		});
+	},
+	authenticatedPage: async ({ browser, zitadel, baseURL }, use) => {
+		if (!baseURL) throw new Error("authenticatedPage requires `use.baseURL` so the session cookie can be scoped to the app under test.");
+		const session = await zitadel.seedSession({ origin: baseURL });
+		const context = await browser.newContext({ baseURL });
+		const { path: _path, ...cookie } = session.cookie;
+		await context.addCookies([{
+			...cookie,
+			url: baseURL
+		}]);
+		await use({
+			page: await context.newPage(),
+			user: session.user,
+			session
+		});
+		await context.close();
+	}
+});
+//#endregion
+export { applyAppEnvTemplate, expect, nextAppEnv, test, withZitadel };
+
+//# sourceMappingURL=playwright.mjs.map

package/dist/playwright.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright.mjs","names":["base"],"sources":["../src/playwright-config.ts","../src/playwright.ts"],"sourcesContent":["import { existsSync } from \"node:fs\";\nimport { extname, isAbsolute, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nimport type { PlaywrightTestConfig } from \"@playwright/test\";\n\nimport type { AppEnvTemplate } from \"./app-env\";\nimport {\n  APP_RUNNER_CONFIG_ENV,\n  HANDSHAKE_ENV,\n  SUPERVISOR_CONFIG_ENV,\n  type AppRunnerConfig,\n  type SupervisorConfig,\n} from \"./orchestration\";\n\ntype WebServerEntry = Extract<\n  NonNullable<PlaywrightTestConfig[\"webServer\"]>,\n  readonly unknown[]\n>[number];\n\nexport interface WithZitadelOptions {\n  /**\n   * The Playwright config's directory (`import.meta.dirname`). Anchors the\n   * default handshake location and the working directory of the generated\n   * webServer entries.\n   */\n  configDir: string;\n  /**\n   * Fixed TCP port for the instance. Required (unlike `startLocalZitadel`,\n   * which defaults to a free port) because Playwright's readiness URL must be\n   * known while the config is evaluated, before anything boots.\n   */\n  port: number;\n  /**\n   * Origin the browser will use for the app under test. Registered as the\n   * project's preview origin (the backend's origin check rejects forwarded\n   * requests from unregistered origins) and the base of `app.readyPath`.\n   */\n  appOrigin: string;\n  /** Boot/bootstrap options forwarded to the instance supervisor. */\n  zitadel?: {\n    /** Absolute path to the server binary. */\n    serverBinary?: string;\n    /** Appended to the missing-binary error, e.g. \"run `moon run server:build` first.\" */\n    serverBinaryHint?: string;\n    projectName?: string;\n    preset?: SupervisorConfig[\"preset\"];\n    useCase?: SupervisorConfig[\"useCase\"];\n    /** Absolute state directory; defaults to a fresh temp dir removed on stop. */\n    dir?: string;\n    /** Keep the owned temp dir after stop (debugging). */\n    keep?: boolean;\n    /** webServer readiness timeout for the boot; cold boot dominates it. */\n    bootTimeoutMs?: number;\n  };\n  /** The app dev server to run against the instance. */\n  app: {\n    /** Spawn argv (no shell), e.g. [\"corepack\", \"pnpm\", \"--filter\", \"my-app\", \"dev\"]. */\n    command: string[];\n    /** Working directory for the app command. */\n    cwd: string;\n    /** Path on `appOrigin` Playwright polls for readiness, e.g. \"/login\". */\n    readyPath: string;\n    /**\n     * Env vars the app needs, as a template mapping env names to\n     * InstanceHandle fields — see `nextAppEnv` for the `@zitadel/sdk-next`\n     * shape. A template (not a callback) because it crosses into the app\n     * runner process.\n     */\n    env: AppEnvTemplate;\n    readyTimeoutMs?: number;\n    /** How long SIGTERM gets before the app is killed on teardown. */\n    gracefulShutdownMs?: number;\n  };\n  /** Absolute path; defaults to `<configDir>/.zitadel-testing/handshake.json`. */\n  handshakePath?: string;\n}\n\n/**\n * Generate the Playwright `webServer` entries that boot an ephemeral seeded\n * Zitadel and run the app against it, replacing the per-suite wrapper\n * scripts. Spread the result into `defineConfig`:\n *\n * ```ts\n * export default defineConfig({\n *   ...withZitadel({ configDir: import.meta.dirname, port: 8092, ... }),\n *   testDir: \"./src-real\",\n * });\n * ```\n *\n * Also points ZITADEL_TESTING_HANDSHAKE at the handshake file so the\n * `@zitadel/testing/playwright` fixtures resolve the instance — Playwright\n * workers re-evaluate the config, which re-applies this for every process\n * that needs it. The returned value is plain data; append your own entries\n * to `webServer` if the suite needs additional servers.\n */\nexport function withZitadel(\n  options: WithZitadelOptions,\n  /** Test seam: alternative executable resolution. */\n  resolveEntry: (name: \"supervisor\" | \"app-runner\") => string = entryPoint,\n): { webServer: WebServerEntry[] } {\n  const { configDir, port, appOrigin, app } = options;\n  if (!isAbsolute(configDir)) {\n    throw new Error(`withZitadel: configDir must be absolute, got \"${configDir}\"`);\n  }\n  if (!Number.isInteger(port) || port <= 0) {\n    throw new Error(`withZitadel: port must be a positive integer, got ${port}`);\n  }\n  const origin = URL.canParse(appOrigin) ? new URL(appOrigin) : undefined;\n  if (\n    !origin ||\n    (origin.protocol !== \"http:\" && origin.protocol !== \"https:\") ||\n    origin.pathname !== \"/\" ||\n    origin.search !== \"\" ||\n    origin.hash !== \"\"\n  ) {\n    throw new Error(\n      `withZitadel: appOrigin must be an origin like \"http://localhost:3002\", got \"${appOrigin}\"`,\n    );\n  }\n  if (!app.readyPath.startsWith(\"/\")) {\n    throw new Error(`withZitadel: app.readyPath must start with \"/\", got \"${app.readyPath}\"`);\n  }\n  if (app.command.length === 0) {\n    throw new Error(\"withZitadel: app.command must not be empty\");\n  }\n  if (!isAbsolute(app.cwd)) {\n    throw new Error(`withZitadel: app.cwd must be absolute, got \"${app.cwd}\"`);\n  }\n  // Path options are consumed by the executables, whose cwd is configDir —\n  // a relative path would silently resolve against that, not the project.\n  for (const [label, value] of [\n    [\"zitadel.serverBinary\", options.zitadel?.serverBinary],\n    [\"zitadel.dir\", options.zitadel?.dir],\n    [\"handshakePath\", options.handshakePath],\n  ] as const) {\n    if (value !== undefined && !isAbsolute(value)) {\n      throw new Error(`withZitadel: ${label} must be an absolute path, got \"${value}\"`);\n    }\n  }\n\n  const handshakePath =\n    options.handshakePath ?? join(configDir, \".zitadel-testing\", \"handshake.json\");\n  // Workers inherit the runner's env; the fixtures resolve the instance from it.\n  process.env[HANDSHAKE_ENV] = handshakePath;\n\n  const supervisorConfig: SupervisorConfig = {\n    port,\n    appOrigins: [appOrigin],\n    serverBinary: options.zitadel?.serverBinary,\n    serverBinaryHint: options.zitadel?.serverBinaryHint,\n    dir: options.zitadel?.dir,\n    keep: options.zitadel?.keep,\n    projectName: options.zitadel?.projectName,\n    preset: options.zitadel?.preset,\n    useCase: options.zitadel?.useCase,\n  };\n  const appRunnerConfig: AppRunnerConfig = {\n    command: app.command,\n    cwd: app.cwd,\n    env: app.env,\n    handshakeTimeoutMs: app.readyTimeoutMs ?? 180_000,\n  };\n\n  return {\n    webServer: [\n      {\n        command: `node ${JSON.stringify(resolveEntry(\"supervisor\"))}`,\n        url: `http://localhost:${port}/healthz`,\n        reuseExistingServer: false,\n        cwd: configDir,\n        stdout: \"pipe\",\n        stderr: \"pipe\",\n        // Cold boot (fresh data dir: migrations + health wait) dominates.\n        timeout: options.zitadel?.bootTimeoutMs ?? 120_000,\n        env: {\n          [HANDSHAKE_ENV]: handshakePath,\n          [SUPERVISOR_CONFIG_ENV]: JSON.stringify(supervisorConfig),\n        },\n        // SIGTERM first so the supervisor can stop the instance; the default\n        // hard kill would orphan the server process group.\n        gracefulShutdown: { signal: \"SIGTERM\", timeout: 30_000 },\n      },\n      {\n        command: `node ${JSON.stringify(resolveEntry(\"app-runner\"))}`,\n        url: new URL(app.readyPath, appOrigin).toString(),\n        reuseExistingServer: false,\n        cwd: configDir,\n        stdout: \"pipe\",\n        stderr: \"pipe\",\n        timeout: app.readyTimeoutMs ?? 180_000,\n        env: {\n          [HANDSHAKE_ENV]: handshakePath,\n          [APP_RUNNER_CONFIG_ENV]: JSON.stringify(appRunnerConfig),\n        },\n        gracefulShutdown: {\n          signal: \"SIGTERM\",\n          timeout: app.gracefulShutdownMs ?? 15_000,\n        },\n      },\n    ],\n  };\n}\n\n/**\n * Resolve a sibling dist entry in the same module format this file was loaded\n * as (dist/supervisor.mjs next to dist/playwright.mjs, .cjs next to .cjs), so\n * the spawned process needs no package-manager bin plumbing.\n */\nfunction entryPoint(name: \"supervisor\" | \"app-runner\"): string {\n  const self = fileURLToPath(import.meta.url);\n  const ext = extname(self);\n  if (ext !== \".mjs\" && ext !== \".cjs\") {\n    throw new Error(\n      `withZitadel: expected to run from the built package (got ${self}); ` +\n        \"build @zitadel/testing first (in-repo: `moon run testing:build`).\",\n    );\n  }\n  const path = fileURLToPath(new URL(`./${name}${ext}`, import.meta.url));\n  if (!existsSync(path)) {\n    throw new Error(\n      `withZitadel: missing ${path}; rebuild @zitadel/testing (in-repo: \\`moon run testing:build\\`).`,\n    );\n  }\n  return path;\n}\n","import { test as base, type Page } from \"@playwright/test\";\n\nimport { readHandshakeSync } from \"./handshake\";\nimport { connectZitadel } from \"./index\";\nimport type {\n  ConnectedZitadel,\n  Identity,\n  MintedSession,\n  SeededUser,\n  SeedSessionInput,\n  SeedUserInput,\n  SeedUsersTemplate,\n} from \"./types\";\n\nexport interface AuthenticatedPage {\n  /** A page in its own context, already carrying the session cookie. */\n  page: Page;\n  user: SeededUser;\n  session: MintedSession;\n}\n\nexport interface ZitadelTestFixtures {\n  /** Per-test seeding; each call mints unique data on the shared instance. */\n  seed: {\n    user(input?: SeedUserInput): Promise<SeededUser>;\n    users(count: number, template?: SeedUsersTemplate): Promise<SeededUser[]>;\n    /** Unused email+password for registration flows — creates nothing. */\n    identity(): Identity;\n    /** Seeded user + headless real-flow login; password flows only. */\n    session(input?: SeedSessionInput): Promise<MintedSession>;\n  };\n  /**\n   * Start the test authenticated: a fresh user, a real session minted through\n   * the flow API, and the cookie injected into a dedicated browser context —\n   * the default `page` stays signed out for login-flow tests. Requires\n   * `use.baseURL` (every withZitadel consumer sets it).\n   */\n  authenticatedPage: AuthenticatedPage;\n}\n\nexport interface ZitadelWorkerFixtures {\n  /** Connection to the suite's instance, resolved once per worker. */\n  zitadel: ConnectedZitadel;\n}\n\nexport const test = base.extend<ZitadelTestFixtures, ZitadelWorkerFixtures>({\n  zitadel: [\n    // Playwright derives fixture dependencies from the destructuring pattern,\n    // so the empty pattern is required here.\n    // oxlint-disable-next-line no-empty-pattern\n    async ({}, use) => {\n      const handshakePath = process.env.ZITADEL_TESTING_HANDSHAKE;\n      if (!handshakePath) {\n        throw new Error(\n          \"ZITADEL_TESTING_HANDSHAKE is not set. Point it at the handshake file \" +\n            \"written by the script that boots the instance (see @zitadel/testing docs).\",\n        );\n      }\n      await use(connectZitadel(readHandshakeSync(handshakePath)));\n    },\n    { scope: \"worker\" },\n  ],\n  seed: async ({ zitadel, baseURL }, use) => {\n    await use({\n      user: (input) => zitadel.seedUser(input),\n      users: (count, template) => zitadel.seedUsers(count, template),\n      identity: () => zitadel.identity(),\n      // The suite's baseURL is the app origin the project allowlists.\n      session: (input) => zitadel.seedSession({ origin: baseURL, ...input }),\n    });\n  },\n  authenticatedPage: async ({ browser, zitadel, baseURL }, use) => {\n    if (!baseURL) {\n      throw new Error(\n        \"authenticatedPage requires `use.baseURL` so the session cookie can be \" +\n          \"scoped to the app under test.\",\n      );\n    }\n    const session = await zitadel.seedSession({ origin: baseURL });\n    const context = await browser.newContext({ baseURL });\n    // `addCookies` takes either url or domain/path; url derives the rest.\n    const { path: _path, ...cookie } = session.cookie;\n    await context.addCookies([{ ...cookie, url: baseURL }]);\n    const page = await context.newPage();\n    await use({ page, user: session.user, session });\n    await context.close();\n  },\n});\n\nexport { expect } from \"@playwright/test\";\nexport { applyAppEnvTemplate, nextAppEnv } from \"./app-env\";\nexport type { AppEnvTemplate } from \"./app-env\";\nexport { withZitadel } from \"./playwright-config\";\nexport type { WithZitadelOptions } from \"./playwright-config\";\nexport type {\n  ConnectedZitadel,\n  Identity,\n  InstanceHandle,\n  MintedSession,\n  SeededUser,\n  SeedSessionInput,\n  SeedUserInput,\n  SeedUsersTemplate,\n} from \"./types\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAgGA,SAAgB,YACd,SAEA,eAA8D,YAC7B;CACjC,MAAM,EAAE,WAAW,MAAM,WAAW,QAAQ;AAC5C,KAAI,CAAC,WAAW,UAAU,CACxB,OAAM,IAAI,MAAM,iDAAiD,UAAU,GAAG;AAEhF,KAAI,CAAC,OAAO,UAAU,KAAK,IAAI,QAAQ,EACrC,OAAM,IAAI,MAAM,qDAAqD,OAAO;CAE9E,MAAM,SAAS,IAAI,SAAS,UAAU,GAAG,IAAI,IAAI,UAAU,GAAG,KAAA;AAC9D,KACE,CAAC,UACA,OAAO,aAAa,WAAW,OAAO,aAAa,YACpD,OAAO,aAAa,OACpB,OAAO,WAAW,MAClB,OAAO,SAAS,GAEhB,OAAM,IAAI,MACR,+EAA+E,UAAU,GAC1F;AAEH,KAAI,CAAC,IAAI,UAAU,WAAW,IAAI,CAChC,OAAM,IAAI,MAAM,wDAAwD,IAAI,UAAU,GAAG;AAE3F,KAAI,IAAI,QAAQ,WAAW,EACzB,OAAM,IAAI,MAAM,6CAA6C;AAE/D,KAAI,CAAC,WAAW,IAAI,IAAI,CACtB,OAAM,IAAI,MAAM,+CAA+C,IAAI,IAAI,GAAG;AAI5E,MAAK,MAAM,CAAC,OAAO,UAAU;EAC3B,CAAC,wBAAwB,QAAQ,SAAS,aAAa;EACvD,CAAC,eAAe,QAAQ,SAAS,IAAI;EACrC,CAAC,iBAAiB,QAAQ,cAAc;EACzC,CACC,KAAI,UAAU,KAAA,KAAa,CAAC,WAAW,MAAM,CAC3C,OAAM,IAAI,MAAM,gBAAgB,MAAM,kCAAkC,MAAM,GAAG;CAIrF,MAAM,gBACJ,QAAQ,iBAAiB,KAAK,WAAW,oBAAoB,iBAAiB;AAEhF,SAAQ,IAAI,iBAAiB;CAE7B,MAAM,mBAAqC;EACzC;EACA,YAAY,CAAC,UAAU;EACvB,cAAc,QAAQ,SAAS;EAC/B,kBAAkB,QAAQ,SAAS;EACnC,KAAK,QAAQ,SAAS;EACtB,MAAM,QAAQ,SAAS;EACvB,aAAa,QAAQ,SAAS;EAC9B,QAAQ,QAAQ,SAAS;EACzB,SAAS,QAAQ,SAAS;EAC3B;CACD,MAAM,kBAAmC;EACvC,SAAS,IAAI;EACb,KAAK,IAAI;EACT,KAAK,IAAI;EACT,oBAAoB,IAAI,kBAAkB;EAC3C;AAED,QAAO,EACL,WAAW,CACT;EACE,SAAS,QAAQ,KAAK,UAAU,aAAa,aAAa,CAAC;EAC3D,KAAK,oBAAoB,KAAK;EAC9B,qBAAqB;EACrB,KAAK;EACL,QAAQ;EACR,QAAQ;EAER,SAAS,QAAQ,SAAS,iBAAiB;EAC3C,KAAK;IACF,gBAAgB;IAChB,wBAAwB,KAAK,UAAU,iBAAiB;GAC1D;EAGD,kBAAkB;GAAE,QAAQ;GAAW,SAAS;GAAQ;EACzD,EACD;EACE,SAAS,QAAQ,KAAK,UAAU,aAAa,aAAa,CAAC;EAC3D,KAAK,IAAI,IAAI,IAAI,WAAW,UAAU,CAAC,UAAU;EACjD,qBAAqB;EACrB,KAAK;EACL,QAAQ;EACR,QAAQ;EACR,SAAS,IAAI,kBAAkB;EAC/B,KAAK;IACF,gBAAgB;IAChB,wBAAwB,KAAK,UAAU,gBAAgB;GACzD;EACD,kBAAkB;GAChB,QAAQ;GACR,SAAS,IAAI,sBAAsB;GACpC;EACF,CACF,EACF;;;;;;;AAQH,SAAS,WAAW,MAA2C;CAC7D,MAAM,OAAO,cAAc,OAAO,KAAK,IAAI;CAC3C,MAAM,MAAM,QAAQ,KAAK;AACzB,KAAI,QAAQ,UAAU,QAAQ,OAC5B,OAAM,IAAI,MACR,4DAA4D,KAAK,wEAElE;CAEH,MAAM,OAAO,cAAc,IAAI,IAAI,KAAK,OAAO,OAAO,OAAO,KAAK,IAAI,CAAC;AACvE,KAAI,CAAC,WAAW,KAAK,CACnB,OAAM,IAAI,MACR,wBAAwB,KAAK,mEAC9B;AAEH,QAAO;;;;ACnLT,MAAa,OAAOA,OAAK,OAAmD;CAC1E,SAAS,CAIP,OAAO,IAAI,QAAQ;EACjB,MAAM,gBAAgB,QAAQ,IAAI;AAClC,MAAI,CAAC,cACH,OAAM,IAAI,MACR,kJAED;AAEH,QAAM,IAAI,eAAe,kBAAkB,cAAc,CAAC,CAAC;IAE7D,EAAE,OAAO,UAAU,CACpB;CACD,MAAM,OAAO,EAAE,SAAS,WAAW,QAAQ;AACzC,QAAM,IAAI;GACR,OAAO,UAAU,QAAQ,SAAS,MAAM;GACxC,QAAQ,OAAO,aAAa,QAAQ,UAAU,OAAO,SAAS;GAC9D,gBAAgB,QAAQ,UAAU;GAElC,UAAU,UAAU,QAAQ,YAAY;IAAE,QAAQ;IAAS,GAAG;IAAO,CAAC;GACvE,CAAC;;CAEJ,mBAAmB,OAAO,EAAE,SAAS,SAAS,WAAW,QAAQ;AAC/D,MAAI,CAAC,QACH,OAAM,IAAI,MACR,sGAED;EAEH,MAAM,UAAU,MAAM,QAAQ,YAAY,EAAE,QAAQ,SAAS,CAAC;EAC9D,MAAM,UAAU,MAAM,QAAQ,WAAW,EAAE,SAAS,CAAC;EAErD,MAAM,EAAE,MAAM,OAAO,GAAG,WAAW,QAAQ;AAC3C,QAAM,QAAQ,WAAW,CAAC;GAAE,GAAG;GAAQ,KAAK;GAAS,CAAC,CAAC;AAEvD,QAAM,IAAI;GAAE,MAAA,MADO,QAAQ,SAAS;GAClB,MAAM,QAAQ;GAAM;GAAS,CAAC;AAChD,QAAM,QAAQ,OAAO;;CAExB,CAAC"}