create-windy 0.3.19 → 0.4.1

package/template/apps/server/src/scheduler/service.ts

@@ -1,7 +1,7 @@
 import { randomUUIDv7 } from "bun";
 import type { SchedulerOperationsSnapshot } from "@southwind-ai/shared";
 import { runGuardedBackgroundTask } from "../background/task-guard.js";
-import type { RequestGuardContext } from "../guards.js";
+import type { RequestActor, RequestGuardContext } from "../guards.js";
 import type { LegacyDurableAdapter } from "../jobs/legacy-adapter.js";
 import type { createServerRuntime } from "../runtime.js";
 import type { SchedulerRepository } from "./repository.js";
@@ -41,6 +41,9 @@ export class SchedulerService {
     private readonly runtime: ServerRuntime,
     private readonly clock: SchedulerClock = systemClock,
     private readonly durable?: LegacyDurableAdapter,
+    private readonly resolveActor?: (
+      actorId: string,
+    ) => Promise<RequestActor | undefined>,
   ) {
     this.recorder = new SchedulerExecutionRecorder(repository, runtime, clock);
     validateTaskDefinitions(definitions);
@@ -196,13 +199,14 @@ export class SchedulerService {
       await this.executeScheduled(run, false);
       return;
     }
-    await this.execute(
-      run,
-      definition,
-      manualResumeContext(run, definition),
-      false,
-      false,
+    const actor = await this.resolveActor?.(run.requestedBy);
+    const context = await this.runtime.createGuardContextForActor(
+      new Request(
+        `http://scheduler.local/tasks/${encodeURIComponent(run.taskKey)}/resume`,
+      ),
+      actor ?? deniedResumeActor(run.requestedBy),
     );
+    await this.execute(run, definition, context, true, false);
   }
 
   private async executeScheduled(run: ScheduledTaskRun, useDurable = true) {
@@ -262,7 +266,7 @@ export class SchedulerService {
           finishedAt: this.clock.now(),
           error: guarded.reason,
         });
-        this.recorder.denied(context, blocked, guarded.reason);
+        this.recorder.denied(context, blocked, definition, guarded.reason);
         return blocked;
       }
       return this.recorder.success(run, definition, context, guarded.value);
@@ -321,19 +325,12 @@ export class SchedulerService {
   }
 }
 
-function manualResumeContext(
-  run: ScheduledTaskRun,
-  definition: ScheduledTaskDefinition,
-): RequestGuardContext {
+function deniedResumeActor(actorId: string): RequestActor {
   return {
-    requestId: randomUUIDv7(),
-    actor: {
-      id: run.requestedBy,
-      type: "user",
-      name: run.requestedBy,
-      roleCodes: [],
-      permissionKeys: [definition.permissionKey],
-    },
-    startedAt: new Date().toISOString(),
+    id: actorId,
+    type: "user",
+    name: actorId,
+    roleCodes: [],
+    permissionKeys: [],
   };
 }

package/template/apps/server/src/scheduler/types.ts

@@ -1,4 +1,7 @@
-import type { FeatureFlagDefinition } from "@southwind-ai/shared";
+import type {
+  AuditActionType,
+  FeatureFlagDefinition,
+} from "@southwind-ai/shared";
 
 export interface SchedulerClock {
   now(): Date;
@@ -20,6 +23,7 @@ export interface ScheduledTaskDefinition {
   maxAttempts: number;
   retryDelaySeconds: number;
   permissionKey: string;
+  auditAction: AuditActionType;
   feature: FeatureFlagDefinition;
   handler: ScheduledTaskHandler;
   isIdleResult?: (value: Record<string, unknown> | void) => boolean;

package/template/apps/server/src/settings/drizzle-watermark-repository.integration.test.ts

@@ -42,6 +42,8 @@ describePostgres("PostgreSQL watermark policy repository", () => {
         density: "high",
         contentFields: ["username", "phone"],
         customContent: "内部资料",
+        opacityPercent: 16,
+        fontSize: 20,
       },
       "user_settings",
     );
@@ -56,6 +58,8 @@ describePostgres("PostgreSQL watermark policy repository", () => {
       density: "high",
       contentFields: ["username", "phone"],
       customContent: "内部资料",
+      opacityPercent: 16,
+      fontSize: 20,
     });
   });
 });

package/template/apps/server/src/settings/drizzle-watermark-repository.ts

@@ -30,6 +30,7 @@ export class DrizzleWatermarkPolicyRepository implements WatermarkPolicyReposito
       .values({
         id: PLATFORM_WATERMARK_ID,
         ...policy,
+        businessPagesEnabled: policy.enabled,
         createdBy: actorId,
         updatedBy: actorId,
       })
@@ -37,10 +38,12 @@ export class DrizzleWatermarkPolicyRepository implements WatermarkPolicyReposito
         target: platformWatermarkPolicies.id,
         set: {
           enabled: policy.enabled,
-          businessPagesEnabled: policy.businessPagesEnabled,
+          businessPagesEnabled: policy.enabled,
           density: policy.density,
           contentFields: policy.contentFields,
           customContent: policy.customContent,
+          opacityPercent: policy.opacityPercent,
+          fontSize: policy.fontSize,
           updatedAt: new Date(),
           updatedBy: actorId,
         },
@@ -57,12 +60,17 @@ function toPolicy(row: {
   density: PlatformWatermarkPolicy["density"];
   contentFields: PlatformWatermarkPolicy["contentFields"];
   customContent: string;
+  opacityPercent: number;
+  fontSize: number;
 }): PlatformWatermarkPolicy {
+  const enabled = row.enabled && row.businessPagesEnabled;
   return {
-    enabled: row.enabled,
-    businessPagesEnabled: row.businessPagesEnabled,
+    enabled,
+    businessPagesEnabled: enabled,
     density: row.density,
     contentFields: row.contentFields,
     customContent: row.customContent,
+    opacityPercent: row.opacityPercent,
+    fontSize: row.fontSize,
   };
 }

package/template/apps/server/src/settings/watermark-routes.test.ts

@@ -47,6 +47,8 @@ describe("平台水印策略路由", () => {
       density: "medium",
       contentFields: ["username", "displayName"],
       customContent: "",
+      opacityPercent: 8,
+      fontSize: 14,
     });
   });
 
@@ -58,6 +60,8 @@ describe("平台水印策略路由", () => {
       density: "high",
       contentFields: ["username", "phone", "custom"],
       customContent: "内部资料",
+      opacityPercent: 16,
+      fontSize: 20,
     };
 
     const updated = (await fixture.app.invoke(
@@ -83,7 +87,13 @@ describe("平台水印策略路由", () => {
           action: "config.update",
           target: { type: "platform-watermark", id: "platform" },
           metadata: expect.objectContaining({
-            changedFields: ["density", "contentFields", "customContent"],
+            changedFields: [
+              "density",
+              "contentFields",
+              "customContent",
+              "opacityPercent",
+              "fontSize",
+            ],
           }),
         }),
       ]),
@@ -104,6 +114,8 @@ describe("平台水印策略路由", () => {
       density: "low",
       contentFields: ["username"],
       customContent: "",
+      opacityPercent: 8,
+      fontSize: 14,
     })) as Response;
 
     expect(readable.enabled).toBe(true);
@@ -139,6 +151,8 @@ describe("平台水印策略路由", () => {
       density: "medium",
       contentFields: ["username"],
       customContent: "x".repeat(81),
+      opacityPercent: 8,
+      fontSize: 14,
     })) as Response;
 
     expect(response.status).toBe(400);
@@ -148,9 +162,48 @@ describe("平台水印策略路由", () => {
       density: "medium",
       contentFields: ["username", "displayName"],
       customContent: "",
+      opacityPercent: 8,
+      fontSize: 14,
     });
     expect(fixture.runtime.auditSink.list()).toHaveLength(0);
   });
+
+  test("旧业务范围状态会折叠到唯一开关", async () => {
+    const fixture = await createFixture(settingsActor(true));
+
+    const updated = (await update(fixture, {
+      enabled: true,
+      businessPagesEnabled: false,
+      density: "medium",
+      contentFields: ["email", "displayName"],
+      customContent: "",
+      opacityPercent: 8,
+      fontSize: 14,
+    })) as PlatformWatermarkPolicy;
+
+    expect(updated.enabled).toBe(true);
+    expect(updated.businessPagesEnabled).toBe(true);
+    expect(updated.contentFields).toEqual(["email", "displayName"]);
+  });
+
+  test("不透明度和字体大小超出范围时拒绝保存", async () => {
+    const fixture = await createFixture(settingsActor(true));
+
+    const response = (await update(fixture, {
+      enabled: true,
+      businessPagesEnabled: true,
+      density: "medium",
+      contentFields: ["username"],
+      customContent: "",
+      opacityPercent: 31,
+      fontSize: 14,
+    })) as Response;
+
+    expect(response.status).toBe(400);
+    await expect(response.json()).resolves.toMatchObject({
+      error: "INVALID_WATERMARK_POLICY",
+    });
+  });
 });
 
 async function update(

package/template/apps/server/src/settings/watermark-routes.ts

@@ -6,6 +6,8 @@ import type {
 import {
   WATERMARK_CONTENT_FIELDS,
   WATERMARK_DENSITIES,
+  WATERMARK_FONT_SIZE_RANGE,
+  WATERMARK_OPACITY_RANGE,
 } from "@southwind-ai/shared";
 import { evaluateRouteGuards, findFeature } from "../route-guards.js";
 import type { createServerRuntime } from "../runtime.js";
@@ -137,6 +139,28 @@ function parseWatermarkPolicy(body: unknown): WatermarkParseResult {
   if (customContent.length > 80) {
     return { ok: false, message: "自定义内容不能超过 80 个字符" };
   }
+  if (
+    typeof source.opacityPercent !== "number" ||
+    !Number.isInteger(source.opacityPercent) ||
+    source.opacityPercent < WATERMARK_OPACITY_RANGE.min ||
+    source.opacityPercent > WATERMARK_OPACITY_RANGE.max
+  ) {
+    return {
+      ok: false,
+      message: `水印不透明度必须是 ${WATERMARK_OPACITY_RANGE.min}% 到 ${WATERMARK_OPACITY_RANGE.max}% 的整数`,
+    };
+  }
+  if (
+    typeof source.fontSize !== "number" ||
+    !Number.isInteger(source.fontSize) ||
+    source.fontSize < WATERMARK_FONT_SIZE_RANGE.min ||
+    source.fontSize > WATERMARK_FONT_SIZE_RANGE.max
+  ) {
+    return {
+      ok: false,
+      message: `水印字体大小必须是 ${WATERMARK_FONT_SIZE_RANGE.min}px 到 ${WATERMARK_FONT_SIZE_RANGE.max}px 的整数`,
+    };
+  }
   const contentFields = [
     ...new Set(
       source.contentFields as PlatformWatermarkPolicy["contentFields"],
@@ -146,10 +170,12 @@ function parseWatermarkPolicy(body: unknown): WatermarkParseResult {
     ok: true,
     value: {
       enabled: source.enabled,
-      businessPagesEnabled: source.businessPagesEnabled,
+      businessPagesEnabled: source.enabled,
       density: source.density as PlatformWatermarkPolicy["density"],
       contentFields,
       customContent,
+      opacityPercent: source.opacityPercent,
+      fontSize: source.fontSize,
     },
   };
 }
@@ -164,6 +190,8 @@ function changedFields(
     "density",
     "contentFields",
     "customContent",
+    "opacityPercent",
+    "fontSize",
   ].filter(
     (field) =>
       JSON.stringify(before[field as keyof PlatformWatermarkPolicy]) !==

package/template/apps/server/src/startup-composition-validation.test.ts

@@ -0,0 +1,35 @@
+import { describe, expect, test } from "bun:test";
+import { validateCompositionBeforeStartup } from "./startup-composition-validation.js";
+
+describe("完整 Server Composition 启动前门禁", () => {
+  test("正常启动先执行无数据库验证子进程", () => {
+    let databaseUrlSeen = "not-called";
+    validateCompositionBeforeStartup(
+      ["bun", "src/index.ts"],
+      (_command, _args, options) => {
+        databaseUrlSeen = options.env.DATABASE_URL ?? "";
+        return { status: 0 };
+      },
+    );
+
+    expect(databaseUrlSeen).toBe("");
+  });
+
+  test("验证子进程自身不递归，并把失败传回启动进程", () => {
+    let calls = 0;
+    validateCompositionBeforeStartup(
+      ["bun", "src/index.ts", "--validate-module-composition"],
+      () => {
+        calls += 1;
+        return { status: 0 };
+      },
+    );
+    expect(calls).toBe(0);
+
+    expect(() =>
+      validateCompositionBeforeStartup(["bun", "src/index.ts"], () => ({
+        status: 1,
+      })),
+    ).toThrow("启动前校验失败");
+  });
+});

package/template/apps/server/src/startup-composition-validation.ts

@@ -0,0 +1,54 @@
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+
+const VALIDATION_ARGUMENT = "--validate-module-composition";
+const validatorPath = fileURLToPath(
+  new URL("../scripts/validate-module-composition.ts", import.meta.url),
+);
+const serverRoot = fileURLToPath(new URL("..", import.meta.url));
+
+interface ValidationProcessResult {
+  readonly status: number | null;
+  readonly error?: Error;
+}
+
+type SpawnValidationProcess = (
+  command: string,
+  args: readonly string[],
+  options: {
+    readonly cwd: string;
+    readonly env: NodeJS.ProcessEnv;
+    readonly stdio: "inherit";
+  },
+) => ValidationProcessResult;
+
+/**
+ * 正常启动先用无数据库子进程走一遍与 build 相同的完整路由/任务/Provider 门禁。
+ */
+export function validateCompositionBeforeStartup(
+  argv: readonly string[] = process.argv,
+  spawn: SpawnValidationProcess = spawnValidationProcess,
+): void {
+  if (argv.includes(VALIDATION_ARGUMENT)) return;
+  const env = { ...process.env };
+  delete env.DATABASE_URL;
+  const result = spawn(process.execPath, [validatorPath], {
+    cwd: serverRoot,
+    env,
+    stdio: "inherit",
+  });
+  if (result.error) throw result.error;
+  if (result.status !== 0) {
+    throw new Error(
+      `Server 完整 Module Composition 启动前校验失败（exit ${result.status ?? "unknown"}）`,
+    );
+  }
+}
+
+function spawnValidationProcess(
+  command: string,
+  args: readonly string[],
+  options: Parameters<SpawnValidationProcess>[2],
+): ValidationProcessResult {
+  return spawnSync(command, [...args], options);
+}

package/template/apps/server/src/startup-preflight.test.ts

@@ -0,0 +1,36 @@
+import { describe, expect, test } from "bun:test";
+import { runPreflightBeforeRecovery } from "./startup-preflight.js";
+
+describe("Server 启动前门禁顺序", () => {
+  test("先完成无持久化 preflight，再恢复审计队列", async () => {
+    const calls: string[] = [];
+    const result = await runPreflightBeforeRecovery(
+      () => {
+        calls.push("prepare");
+        return Promise.resolve("ready");
+      },
+      () => {
+        calls.push("recover");
+        return Promise.resolve();
+      },
+    );
+
+    expect(result).toBe("ready");
+    expect(calls).toEqual(["prepare", "recover"]);
+  });
+
+  test("preflight 失败时不触发恢复写入", async () => {
+    let recovered = false;
+    await expect(
+      runPreflightBeforeRecovery(
+        () => Promise.reject(new Error("invalid composition")),
+        () => {
+          recovered = true;
+          return Promise.resolve();
+        },
+      ),
+    ).rejects.toThrow("invalid composition");
+
+    expect(recovered).toBe(false);
+  });
+});

package/template/apps/server/src/startup-preflight.ts

@@ -0,0 +1,37 @@
+import type { ModuleUploadPolicy } from "@southwind-ai/server-sdk";
+import { prepareInstalledServerModules } from "./module-preflight.js";
+import { createPlatformBootstrap } from "./platform-bootstrap.js";
+// @windy-module system.storage begin
+import { createPlatformUploadPolicies } from "./storage/runtime.js";
+// @windy-module system.storage end
+
+/**
+ * 在恢复审计队列、执行迁移或写入目录前，完成项目装配、Host 与 attachment 门禁。
+ */
+export async function createPreparedPlatformBootstrap() {
+  const bootstrap = createPlatformBootstrap();
+  const baseUploadPolicies: ModuleUploadPolicy[] = [
+    // @windy-module system.storage begin
+    ...createPlatformUploadPolicies(bootstrap.platformConfig),
+    // @windy-module system.storage end
+  ];
+  const recoverAuditQueue = () =>
+    // @windy-module system.audit begin
+    bootstrap.persistence?.auditWriter.recover() ??
+    // @windy-module system.audit end
+    Promise.resolve();
+  const preparedModules = await runPreflightBeforeRecovery(
+    () => prepareInstalledServerModules(baseUploadPolicies),
+    recoverAuditQueue,
+  );
+  return { ...bootstrap, preparedModules };
+}
+
+export async function runPreflightBeforeRecovery<T>(
+  prepare: () => Promise<T>,
+  recover: () => Promise<void>,
+): Promise<T> {
+  const prepared = await prepare();
+  await recover();
+  return prepared;
+}

package/template/apps/server/src/system/audit-routes.test.ts

@@ -6,12 +6,14 @@ import { registerSystemRoutes } from "./routes.js";
 import { createSystemRepositories } from "./seed.js";
 
 async function auditFixture() {
+  const snapshot = createFoundationSnapshot();
   const runtime = createServerRuntime({ WINDY_DEV_ADMIN_TOKEN: "token_1" });
   const app = new FakeRouteApp();
   registerSystemRoutes(
     app,
-    createSystemRepositories(createFoundationSnapshot()),
+    createSystemRepositories(snapshot),
     runtime,
+    snapshot.features,
   );
   const guardContext = await runtime.createGuardContext(
     new Request("http://localhost/api/system/audit-logs", {
@@ -54,10 +56,12 @@ describe("audit routes", () => {
       },
     );
     const app = new FakeRouteApp();
+    const snapshot = createFoundationSnapshot();
     registerSystemRoutes(
       app,
-      createSystemRepositories(createFoundationSnapshot()),
+      createSystemRepositories(snapshot),
       runtime,
+      snapshot.features,
     );
     const guardContext = await runtime.createGuardContext(
       new Request("http://localhost/api/system/audit-logs", {
@@ -108,10 +112,12 @@ describe("audit routes", () => {
       },
     );
     const app = new FakeRouteApp();
+    const snapshot = createFoundationSnapshot();
     registerSystemRoutes(
       app,
-      createSystemRepositories(createFoundationSnapshot()),
+      createSystemRepositories(snapshot),
       runtime,
+      snapshot.features,
     );
     const guardContext = await runtime.createGuardContext(
       new Request("http://localhost/api/system/audit-logs", {

package/template/apps/server/src/system/department-routes.test.ts

@@ -1,14 +1,16 @@
 import { describe, expect, test } from "bun:test";
 import { createFoundationSnapshot } from "../foundation.js";
-import { createServerRuntime } from "../runtime.js";
 import { FakeRouteApp } from "./route-test-app.js";
+import { createRouteTestRuntime } from "./route-test-runtime.js";
 import { registerSystemRoutes } from "./routes.js";
 import { createSystemRepositories } from "./seed.js";
 
 async function fixture() {
   const snapshot = createFoundationSnapshot();
   const repositories = createSystemRepositories(snapshot);
-  const runtime = createServerRuntime({ WINDY_DEV_ADMIN_TOKEN: "token_1" });
+  const runtime = createRouteTestRuntime(snapshot, {
+    WINDY_DEV_ADMIN_TOKEN: "token_1",
+  });
   const app = new FakeRouteApp();
   registerSystemRoutes(app, repositories, runtime, snapshot.features);
   const guardContext = await runtime.createGuardContext(
@@ -27,7 +29,7 @@ async function fixture() {
 describe("部门组织路由", () => {
   test("部门处置缺少权限时经过统一 Guard 拒绝", async () => {
     const snapshot = createFoundationSnapshot();
-    const runtime = createServerRuntime();
+    const runtime = createRouteTestRuntime(snapshot);
     const app = new FakeRouteApp();
     registerSystemRoutes(
       app,

package/template/apps/server/src/system/feature-routes.test.ts

@@ -1,7 +1,7 @@
 import { describe, expect, test } from "bun:test";
 import { createFoundationSnapshot } from "../foundation.js";
-import { createServerRuntime } from "../runtime.js";
 import { FakeRouteApp } from "./route-test-app.js";
+import { createRouteTestRuntime } from "./route-test-runtime.js";
 import { registerSystemRoutes } from "./routes.js";
 import { createSystemRepositories } from "./seed.js";
 
@@ -10,7 +10,8 @@ describe("feature routes", () => {
     const snapshot = createFoundationSnapshot();
     const repositories = createSystemRepositories(snapshot);
     await repositories.features.syncManifest(snapshot.features);
-    const runtime = createServerRuntime(
+    const runtime = createRouteTestRuntime(
+      snapshot,
       { WINDY_DEV_ADMIN_TOKEN: "token_1" },
       { featureResolver: repositories.features },
     );
@@ -46,7 +47,7 @@ describe("feature routes", () => {
     });
     expect(denied.status).toBe(403);
     await expect(denied.json()).resolves.toMatchObject({
-      reason: "feature-disabled",
+      reason: "dependency-missing",
     });
     expect(app.handlers.has("POST /system/features")).toBe(false);
     expect(app.handlers.has("POST /system/features/import")).toBe(false);

package/template/apps/server/src/system/interface-catalog.test.ts

@@ -15,7 +15,8 @@ describe("系统接口权限目录", () => {
       ),
     ).toMatchObject({
       permissionKey: "system.user.manage",
-      featureKey: "system.rbac",
+      featureKey: "system.user",
+      auditAction: "crud.create",
       guardOrder: ["license", "feature", "permission"],
       source: "module-manifest",
     });
@@ -52,11 +53,12 @@ describe("系统接口权限目录", () => {
       ),
     ).toMatchObject({
       permissionKey: "system.feature.manage",
-      guardOrder: ["license", "permission"],
+      featureKey: "system.feature",
+      guardOrder: ["license", "feature", "permission"],
     });
     expect(
       interfaces.find((item) => item.path === "/api/foundation"),
-    ).toMatchObject({ anonymous: true });
+    ).toMatchObject({ anonymous: true, auditAction: undefined });
     // @windy-module system.bulk-data begin
     expect(
       interfaces.find(

package/template/apps/server/src/system/interface-catalog.ts

@@ -1,5 +1,6 @@
 import type { ModuleManifest } from "@southwind-ai/modules";
 import type {
+  AuditActionType,
   EntitlementKey,
   HttpMethod,
   LicenseVersionKey,
@@ -19,6 +20,7 @@ export interface SystemInterfacePermissionDetail {
   permissionKey: string;
   anonymous: boolean;
   featureKey?: string;
+  auditAction?: AuditActionType;
   allowedLicenseVersions?: readonly LicenseVersionKey[];
   entitlementKey?: EntitlementKey;
   guardOrder: readonly GuardStep[];
@@ -56,6 +58,7 @@ export function collectSystemInterfacePermissions(
         permissionKey: binding.permissionKey,
         anonymous: binding.anonymous === true,
         featureKey: feature?.key,
+        auditAction: binding.auditAction,
         allowedLicenseVersions: feature?.allowedLicenseVersions,
         entitlementKey: feature?.requiredEntitlement,
         guardOrder: resolveGuardOrder(feature),

package/template/apps/server/src/system/menu-routes.test.ts

@@ -1,7 +1,7 @@
 import { describe, expect, test } from "bun:test";
 import { createFoundationSnapshot } from "../foundation.js";
-import { createServerRuntime } from "../runtime.js";
 import { FakeRouteApp } from "./route-test-app.js";
+import { createRouteTestRuntime } from "./route-test-runtime.js";
 import { registerSystemRoutes } from "./routes.js";
 import { createSystemRepositories } from "./seed.js";
 
@@ -9,7 +9,9 @@ describe("菜单结构批量路由", () => {
   test("完整草稿通过 system.menu.manage Guard 后一次保存并写审计", async () => {
     const snapshot = createFoundationSnapshot();
     const repositories = createSystemRepositories(snapshot);
-    const runtime = createServerRuntime({ WINDY_DEV_ADMIN_TOKEN: "token_1" });
+    const runtime = createRouteTestRuntime(snapshot, {
+      WINDY_DEV_ADMIN_TOKEN: "token_1",
+    });
     const app = new FakeRouteApp();
     registerSystemRoutes(app, repositories, runtime, snapshot.features);
     const guardContext = await runtime.createGuardContext(
@@ -49,7 +51,7 @@ describe("菜单结构批量路由", () => {
   test("缺少管理权限时拒绝保存菜单草稿", async () => {
     const snapshot = createFoundationSnapshot();
     const repositories = createSystemRepositories(snapshot);
-    const runtime = createServerRuntime();
+    const runtime = createRouteTestRuntime(snapshot);
     const app = new FakeRouteApp();
     registerSystemRoutes(app, repositories, runtime, snapshot.features);
     const guardContext = await runtime.createGuardContext(