ras-stack 0.39.5 → 0.40.0

package/examples/full-stack/src/routeTree.gen.ts

@@ -0,0 +1,230 @@
+/* eslint-disable */
+
+// @ts-nocheck
+
+// noinspection JSUnusedGlobalSymbols
+
+// This file was automatically generated by TanStack Router.
+// You should NOT make any changes in this file as it will be overwritten.
+// Additionally, you should also exclude this file from your linter and/or formatter to prevent it from being checked or modified.
+
+import { Route as rootRouteImport } from './routes/__root'
+import { Route as IndexRouteImport } from './routes/index'
+import { Route as ApiHealthRouteImport } from './routes/api/health'
+import { Route as ApiLiveRouteImport } from './routes/api/live'
+import { Route as ApiReadyRouteImport } from './routes/api/ready'
+import { Route as ApiUploadsRouteImport } from './routes/api/uploads'
+import { Route as ApiAuthSplatRouteImport } from './routes/api/auth.$'
+import { Route as ApiCentrifugoConnectRouteImport } from './routes/api/centrifugo.connect'
+import { Route as ApiUploadsIdRouteImport } from './routes/api/uploads.$id'
+
+const IndexRoute = IndexRouteImport.update({
+  id: '/',
+  path: '/',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiHealthRoute = ApiHealthRouteImport.update({
+  id: '/api/health',
+  path: '/api/health',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiLiveRoute = ApiLiveRouteImport.update({
+  id: '/api/live',
+  path: '/api/live',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiReadyRoute = ApiReadyRouteImport.update({
+  id: '/api/ready',
+  path: '/api/ready',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiUploadsRoute = ApiUploadsRouteImport.update({
+  id: '/api/uploads',
+  path: '/api/uploads',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiAuthSplatRoute = ApiAuthSplatRouteImport.update({
+  id: '/api/auth/$',
+  path: '/api/auth/$',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiCentrifugoConnectRoute = ApiCentrifugoConnectRouteImport.update({
+  id: '/api/centrifugo/connect',
+  path: '/api/centrifugo/connect',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const ApiUploadsIdRoute = ApiUploadsIdRouteImport.update({
+  id: '/$id',
+  path: '/$id',
+  getParentRoute: () => ApiUploadsRoute,
+} as any)
+
+export interface FileRoutesByFullPath {
+  '/': typeof IndexRoute
+  '/api/health': typeof ApiHealthRoute
+  '/api/live': typeof ApiLiveRoute
+  '/api/ready': typeof ApiReadyRoute
+  '/api/uploads': typeof ApiUploadsRouteWithChildren
+  '/api/auth/$': typeof ApiAuthSplatRoute
+  '/api/centrifugo/connect': typeof ApiCentrifugoConnectRoute
+  '/api/uploads/$id': typeof ApiUploadsIdRoute
+}
+export interface FileRoutesByTo {
+  '/': typeof IndexRoute
+  '/api/health': typeof ApiHealthRoute
+  '/api/live': typeof ApiLiveRoute
+  '/api/ready': typeof ApiReadyRoute
+  '/api/uploads': typeof ApiUploadsRouteWithChildren
+  '/api/auth/$': typeof ApiAuthSplatRoute
+  '/api/centrifugo/connect': typeof ApiCentrifugoConnectRoute
+  '/api/uploads/$id': typeof ApiUploadsIdRoute
+}
+export interface FileRoutesById {
+  __root__: typeof rootRouteImport
+  '/': typeof IndexRoute
+  '/api/health': typeof ApiHealthRoute
+  '/api/live': typeof ApiLiveRoute
+  '/api/ready': typeof ApiReadyRoute
+  '/api/uploads': typeof ApiUploadsRouteWithChildren
+  '/api/auth/$': typeof ApiAuthSplatRoute
+  '/api/centrifugo/connect': typeof ApiCentrifugoConnectRoute
+  '/api/uploads/$id': typeof ApiUploadsIdRoute
+}
+export interface FileRouteTypes {
+  fileRoutesByFullPath: FileRoutesByFullPath
+  fullPaths:
+    | '/'
+    | '/api/health'
+    | '/api/live'
+    | '/api/ready'
+    | '/api/uploads'
+    | '/api/auth/$'
+    | '/api/centrifugo/connect'
+    | '/api/uploads/$id'
+  fileRoutesByTo: FileRoutesByTo
+  to:
+    | '/'
+    | '/api/health'
+    | '/api/live'
+    | '/api/ready'
+    | '/api/uploads'
+    | '/api/auth/$'
+    | '/api/centrifugo/connect'
+    | '/api/uploads/$id'
+  id:
+    | '__root__'
+    | '/'
+    | '/api/health'
+    | '/api/live'
+    | '/api/ready'
+    | '/api/uploads'
+    | '/api/auth/$'
+    | '/api/centrifugo/connect'
+    | '/api/uploads/$id'
+  fileRoutesById: FileRoutesById
+}
+export interface RootRouteChildren {
+  IndexRoute: typeof IndexRoute
+  ApiHealthRoute: typeof ApiHealthRoute
+  ApiLiveRoute: typeof ApiLiveRoute
+  ApiReadyRoute: typeof ApiReadyRoute
+  ApiUploadsRoute: typeof ApiUploadsRouteWithChildren
+  ApiAuthSplatRoute: typeof ApiAuthSplatRoute
+  ApiCentrifugoConnectRoute: typeof ApiCentrifugoConnectRoute
+}
+
+declare module '@tanstack/react-router' {
+  interface FileRoutesByPath {
+    '/': {
+      id: '/'
+      path: '/'
+      fullPath: '/'
+      preLoaderRoute: typeof IndexRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/health': {
+      id: '/api/health'
+      path: '/api/health'
+      fullPath: '/api/health'
+      preLoaderRoute: typeof ApiHealthRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/live': {
+      id: '/api/live'
+      path: '/api/live'
+      fullPath: '/api/live'
+      preLoaderRoute: typeof ApiLiveRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/ready': {
+      id: '/api/ready'
+      path: '/api/ready'
+      fullPath: '/api/ready'
+      preLoaderRoute: typeof ApiReadyRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/uploads': {
+      id: '/api/uploads'
+      path: '/api/uploads'
+      fullPath: '/api/uploads'
+      preLoaderRoute: typeof ApiUploadsRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/auth/$': {
+      id: '/api/auth/$'
+      path: '/api/auth/$'
+      fullPath: '/api/auth/$'
+      preLoaderRoute: typeof ApiAuthSplatRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/centrifugo/connect': {
+      id: '/api/centrifugo/connect'
+      path: '/api/centrifugo/connect'
+      fullPath: '/api/centrifugo/connect'
+      preLoaderRoute: typeof ApiCentrifugoConnectRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/api/uploads/$id': {
+      id: '/api/uploads/$id'
+      path: '/$id'
+      fullPath: '/api/uploads/$id'
+      preLoaderRoute: typeof ApiUploadsIdRouteImport
+      parentRoute: typeof ApiUploadsRoute
+    }
+  }
+}
+
+interface ApiUploadsRouteChildren {
+  ApiUploadsIdRoute: typeof ApiUploadsIdRoute
+}
+
+const ApiUploadsRouteChildren: ApiUploadsRouteChildren = {
+  ApiUploadsIdRoute: ApiUploadsIdRoute,
+}
+
+const ApiUploadsRouteWithChildren = ApiUploadsRoute._addFileChildren(
+  ApiUploadsRouteChildren,
+)
+
+const rootRouteChildren: RootRouteChildren = {
+  IndexRoute: IndexRoute,
+  ApiHealthRoute: ApiHealthRoute,
+  ApiLiveRoute: ApiLiveRoute,
+  ApiReadyRoute: ApiReadyRoute,
+  ApiUploadsRoute: ApiUploadsRouteWithChildren,
+  ApiAuthSplatRoute: ApiAuthSplatRoute,
+  ApiCentrifugoConnectRoute: ApiCentrifugoConnectRoute,
+}
+export const routeTree = rootRouteImport
+  ._addFileChildren(rootRouteChildren)
+  ._addFileTypes<FileRouteTypes>()
+
+import type { getRouter } from './router.tsx'
+import type { startInstance } from './start.ts'
+declare module '@tanstack/react-start' {
+  interface Register {
+    ssr: true
+    router: Awaited<ReturnType<typeof getRouter>>
+    config: Awaited<ReturnType<typeof startInstance.getOptions>>
+  }
+}

package/examples/full-stack/src/router.tsx

@@ -0,0 +1,17 @@
+import { createRouter } from '@tanstack/react-router'
+import { setupRouterSsrQueryIntegration } from '@tanstack/react-router-ssr-query'
+import { createQueryClient } from './client/queryClient'
+import { routeTree } from './routeTree.gen'
+
+export function getRouter() {
+  const queryClient = createQueryClient()
+  const router = createRouter({ routeTree, context: { queryClient }, defaultPreload: 'intent' })
+  setupRouterSsrQueryIntegration({ router, queryClient })
+  return router
+}
+
+declare module '@tanstack/react-router' {
+  interface Register {
+    router: ReturnType<typeof getRouter>
+  }
+}

package/examples/full-stack/src/routes/__root.tsx

@@ -0,0 +1,38 @@
+import type { QueryClient } from '@tanstack/react-query'
+import { HeadContent, Outlet, Scripts, createRootRouteWithContext } from '@tanstack/react-router'
+import { postHogEnvironment } from 'ras-stack/posthog'
+import { PostHogIntegration } from 'ras-stack/posthog/react'
+import styles from '../styles.css?url'
+
+const posthog = postHogEnvironment({
+  projectToken: import.meta.env.VITE_POSTHOG_PROJECT_TOKEN,
+  host: import.meta.env.VITE_POSTHOG_HOST,
+})
+
+export const Route = createRootRouteWithContext<{ queryClient: QueryClient }>()({
+  head: () => ({
+    meta: [
+      { charSet: 'utf-8' },
+      { name: 'viewport', content: 'width=device-width, initial-scale=1' },
+      { title: 'ras-stack full-stack example' },
+    ],
+    links: [{ rel: 'stylesheet', href: styles }],
+  }),
+  component: Root,
+})
+
+function Root() {
+  return (
+    <html lang="en">
+      <head>
+        <HeadContent />
+      </head>
+      <body>
+        <PostHogIntegration environment={posthog}>
+          <Outlet />
+        </PostHogIntegration>
+        <Scripts />
+      </body>
+    </html>
+  )
+}

package/examples/full-stack/src/routes/api/auth.$.ts

@@ -0,0 +1,8 @@
+import { createFileRoute } from '@tanstack/react-router'
+import { app } from '../../server/app'
+
+const handler = ({ request }: { request: Request }) => app().auth.handler(request)
+
+export const Route = createFileRoute('/api/auth/$')({
+  server: { handlers: { GET: handler, POST: handler } },
+})

package/examples/full-stack/src/routes/api/centrifugo.connect.ts

@@ -0,0 +1,29 @@
+import { createFileRoute } from '@tanstack/react-router'
+import crypto from 'node:crypto'
+import { requireTanStackMutationOrigin } from 'ras-stack/tanstack/server'
+import { currentUser } from '../../server/session'
+
+export const Route = createFileRoute('/api/centrifugo/connect')({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        if (!proxySecret(request)) return Response.json({ disconnect: { code: 4501, reason: 'unauthorized' } })
+        try {
+          requireTanStackMutationOrigin({ configured: [process.env.APP_URL], trustForwardedHeaders: true }, request)
+        } catch {
+          return Response.json({ disconnect: { code: 4501, reason: 'unauthorized' } })
+        }
+        const user = await currentUser(request)
+        return user
+          ? Response.json({ result: { user: user.id, info: { name: user.name } } })
+          : Response.json({ disconnect: { code: 4501, reason: 'unauthorized' } })
+      },
+    },
+  },
+})
+
+function proxySecret(request: Request) {
+  const expected = Buffer.from(process.env.CENTRIFUGO_PROXY_SECRET ?? '')
+  const received = Buffer.from(request.headers.get('x-proxy-secret') ?? '')
+  return expected.length > 0 && expected.length === received.length && crypto.timingSafeEqual(expected, received)
+}

package/examples/full-stack/src/routes/api/health.ts

@@ -0,0 +1,6 @@
+import { createFileRoute } from '@tanstack/react-router'
+import { readinessHandler } from './ready'
+
+export const Route = createFileRoute('/api/health')({
+  server: { handlers: { GET: readinessHandler } },
+})

package/examples/full-stack/src/routes/api/live.ts

@@ -0,0 +1,5 @@
+import { createFileRoute } from '@tanstack/react-router'
+
+export const Route = createFileRoute('/api/live')({
+  server: { handlers: { GET: () => Response.json({ status: 'ok' }, { headers: { 'Cache-Control': 'no-store' } }) } },
+})

package/examples/full-stack/src/routes/api/ready.ts

@@ -0,0 +1,30 @@
+import { createFileRoute } from '@tanstack/react-router'
+import { sql } from 'drizzle-orm'
+import { infrastructureFailure } from 'ras-stack/server'
+import { tanStackHealthHandler } from 'ras-stack/tanstack/server'
+import { app } from '../../server/app'
+import { outboxStatus } from '../../server/outbox'
+
+export const readinessHandler = tanStackHealthHandler(
+  async () => {
+    try {
+      app().database.get(sql`SELECT 1`)
+      const status = outboxStatus(app().database)
+      if (status.failed > 0) throw new Error(`Realtime outbox has ${status.failed} dead-lettered item(s)`)
+      await app().email?.verify()
+    } catch (error) {
+      console.error({ event: 'example_readiness_failed', error })
+      throw error
+    }
+  },
+  {
+    failure: (error) =>
+      infrastructureFailure(error, { code: 'dependency_unavailable', message: 'required dependency unavailable', retryable: true }),
+  },
+)
+
+export const Route = createFileRoute('/api/ready')({
+  server: {
+    handlers: { GET: readinessHandler },
+  },
+})

package/examples/full-stack/src/routes/api/uploads.$id.ts

@@ -0,0 +1,40 @@
+import { createFileRoute } from '@tanstack/react-router'
+import { requireTanStackMutationOrigin } from 'ras-stack/tanstack/server'
+import { app } from '../../server/app'
+import { limitAuthenticatedRequest } from '../../server/rate-limit'
+import { requireCurrentUser } from '../../server/session'
+
+export const Route = createFileRoute('/api/uploads/$id')({
+  server: {
+    handlers: {
+      HEAD: async ({ request, params }) => {
+        const user = await requireCurrentUser(request)
+        const upload = app().uploadStore.getOwned(params.id, user.id)
+        return upload ? new Response(null, { headers: headers(upload.offset, upload.length) }) : new Response(null, { status: 404 })
+      },
+      PATCH: async ({ request, params }) => {
+        requireTanStackMutationOrigin(
+          { configured: [app().environment.appUrl], trustForwardedHeaders: app().environment.trustProxy },
+          request,
+        )
+        const user = await requireCurrentUser(request)
+        await limitAuthenticatedRequest(request, 'upload-chunk', user.id, { window: 60, max: 120 })
+        const declaredLength = Number(request.headers.get('content-length'))
+        if (!Number.isSafeInteger(declaredLength) || declaredLength < 1 || declaredLength > app().environment.uploadMaxBytes) {
+          return new Response('Invalid content length', { status: 400 })
+        }
+        const chunk = new Uint8Array(await request.arrayBuffer())
+        if (chunk.length !== declaredLength) return new Response('Content length mismatch', { status: 400 })
+        const upload = await app().uploadStore.append(params.id, user.id, Number(request.headers.get('upload-offset')), chunk)
+        return new Response(null, { status: 204, headers: headers(upload.offset, upload.length) })
+      },
+    },
+  },
+})
+
+const headers = (offset: number, length: number) => ({
+  'Cache-Control': 'no-store',
+  'Tus-Resumable': '1.0.0',
+  'Upload-Length': String(length),
+  'Upload-Offset': String(offset),
+})

package/examples/full-stack/src/routes/api/uploads.ts

@@ -0,0 +1,25 @@
+import { createFileRoute } from '@tanstack/react-router'
+import { requireTanStackMutationOrigin } from 'ras-stack/tanstack/server'
+import { app } from '../../server/app'
+import { limitAuthenticatedRequest } from '../../server/rate-limit'
+import { requireCurrentUser } from '../../server/session'
+
+export const Route = createFileRoute('/api/uploads')({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        requireTanStackMutationOrigin(
+          { configured: [app().environment.appUrl], trustForwardedHeaders: app().environment.trustProxy },
+          request,
+        )
+        const user = await requireCurrentUser(request)
+        await limitAuthenticatedRequest(request, 'upload-create', user.id, { window: 60, max: 10 })
+        const id = app().uploadStore.create(user.id, Number(request.headers.get('upload-length')), request.headers.get('upload-metadata'))
+        return new Response(null, {
+          status: 201,
+          headers: { Location: `/api/uploads/${id}`, 'Tus-Resumable': '1.0.0', 'Cache-Control': 'no-store' },
+        })
+      },
+    },
+  },
+})

package/examples/full-stack/src/routes/index.tsx

@@ -0,0 +1,187 @@
+import { useMutation, useQueryClient, useSuspenseQuery } from '@tanstack/react-query'
+import { createFileRoute } from '@tanstack/react-router'
+import { useAuthAction } from 'ras-stack/auth/react'
+import { useState } from 'react'
+import { authClient } from '../client/auth'
+import { snapshotQuery } from '../client/queries'
+import { queryErrorMessage } from '../client/queryClient'
+import { useRealtime } from '../client/useRealtime'
+import { addMessage } from '../server/fns'
+
+export const Route = createFileRoute('/')({
+  loader: ({ context }) => context.queryClient.ensureQueryData(snapshotQuery()),
+  component: Home,
+})
+
+function Home() {
+  const { data } = useSuspenseQuery(snapshotQuery())
+  const queryClient = useQueryClient()
+  useRealtime(Boolean(data.user) && data.realtimeEnabled)
+  return (
+    <main>
+      <h1>ras-stack full-stack example</h1>
+      <p className="status">Better Auth, Drizzle migrations, durable uploads, transactional realtime, SMTP, and production lifecycle</p>
+      {data.user ? (
+        <Messages
+          name={data.user.name}
+          signOut={async () => {
+            await authClient.signOut()
+            await queryClient.invalidateQueries()
+          }}
+        />
+      ) : (
+        <Authentication emailConfigured={data.emailConfigured} />
+      )}
+      <MessageList />
+    </main>
+  )
+}
+
+function Authentication({ emailConfigured }: { emailConfigured: boolean }) {
+  const [mode, setMode] = useState<'sign-up' | 'sign-in'>('sign-up')
+  const [notice, setNotice] = useState('')
+  const queryClient = useQueryClient()
+  const action = useAuthAction()
+  return (
+    <form
+      onSubmit={async (event) => {
+        event.preventDefault()
+        setNotice('')
+        const form = new FormData(event.currentTarget)
+        const name = formText(form, 'name')
+        const email = formText(form, 'email')
+        const password = formText(form, 'password')
+        const result = await action.run(async () => {
+          const response =
+            mode === 'sign-up'
+              ? await authClient.signUp.email({ name, email, password })
+              : await authClient.signIn.email({ email, password })
+          return response.error ? { error: { message: response.error.message } } : { data: response.data }
+        })
+        if (!result.error) {
+          if (mode === 'sign-up' && emailConfigured) setNotice('Check your email to verify your account.')
+          await queryClient.invalidateQueries()
+        }
+      }}
+    >
+      <h2>{mode === 'sign-up' ? 'Create account' : 'Sign in'}</h2>
+      {mode === 'sign-up' && (
+        <label>
+          Name
+          <input aria-label="Name" autoComplete="name" name="name" />
+        </label>
+      )}
+      <label>
+        Email
+        <input aria-label="Email" autoComplete="email" name="email" type="email" />
+      </label>
+      <label>
+        Password
+        <input
+          aria-label="Password"
+          autoComplete={mode === 'sign-up' ? 'new-password' : 'current-password'}
+          name="password"
+          type="password"
+        />
+      </label>
+      <button disabled={action.busy}>{mode === 'sign-up' ? 'Create account' : 'Sign in'}</button>
+      <button type="button" onClick={() => setMode(mode === 'sign-up' ? 'sign-in' : 'sign-up')}>
+        {mode === 'sign-up' ? 'Use an existing account' : 'Create a new account'}
+      </button>
+      {emailConfigured && (
+        <button
+          type="button"
+          onClick={async (event) => {
+            const form = event.currentTarget.form
+            if (!form) return
+            const email = formText(new FormData(form), 'email')
+            await authClient.requestPasswordReset({ email, redirectTo: '/' })
+            setNotice('If that account exists, a reset link has been sent.')
+          }}
+        >
+          Reset password
+        </button>
+      )}
+      {notice && <p className="status">{notice}</p>}
+      {action.error && <p className="error">{action.error}</p>}
+    </form>
+  )
+}
+
+function formText(form: FormData, name: string) {
+  const value = form.get(name)
+  return typeof value === 'string' ? value : ''
+}
+
+function Messages({ name, signOut }: { name: string; signOut: () => Promise<void> }) {
+  const [body, setBody] = useState('')
+  const queryClient = useQueryClient()
+  const mutation = useMutation({
+    mutationFn: () => addMessage({ data: { body } }),
+    onSuccess: async () => {
+      setBody('')
+      await queryClient.invalidateQueries({ queryKey: snapshotQuery().queryKey })
+    },
+  })
+  return (
+    <section>
+      <h2>Hello, {name}</h2>
+      <button onClick={() => void signOut()}>Sign out</button>
+      <form
+        onSubmit={(event) => {
+          event.preventDefault()
+          mutation.mutate()
+        }}
+      >
+        <label>
+          Message
+          <input aria-label="Message" value={body} onChange={(event) => setBody(event.target.value)} />
+        </label>
+        <button disabled={mutation.isPending}>Add message</button>
+        {mutation.error && <p className="error">{queryErrorMessage(mutation.error)}</p>}
+      </form>
+      <Upload />
+    </section>
+  )
+}
+
+function Upload() {
+  const [status, setStatus] = useState('No upload yet.')
+  return (
+    <label>
+      Upload a text file
+      <input
+        aria-label="Upload"
+        type="file"
+        accept="text/plain"
+        onChange={async (event) => {
+          const file = event.target.files?.[0]
+          if (!file) return
+          const { uploadWithTus } = await import('ras-stack/uploads')
+          const result = await uploadWithTus(
+            { endpoint: '/api/uploads', file, metadata: { filename: file.name, filetype: file.type } },
+            false,
+          )
+          setStatus(`Uploaded to ${result.uploadUrl}`)
+        }}
+      />
+      <span className="status">{status}</span>
+    </label>
+  )
+}
+
+function MessageList() {
+  const { data } = useSuspenseQuery(snapshotQuery())
+  return (
+    <section>
+      <h2>Messages</h2>
+      <ul>
+        {data.messages.map((message) => (
+          <li key={message.id}>
+            <strong>{message.author}:</strong> {message.body}
+          </li>
+        ))}
+      </ul>
+    </section>
+  )
+}

package/examples/full-stack/src/server/app.test.ts

@@ -0,0 +1,24 @@
+import { expect, it, vi } from 'vitest'
+import { app, closeApp } from './app'
+
+it('closes every resource once and reports aggregate shutdown failure', async () => {
+  const failure = new Error('outbox failed')
+  const uploadClose = vi.fn().mockResolvedValue(undefined)
+  const publisherClose = vi.fn().mockResolvedValue(undefined)
+  const telemetryShutdown = vi.fn().mockResolvedValue(undefined)
+  const databaseClose = vi.fn()
+  const resources = {
+    outbox: { close: vi.fn().mockRejectedValue(failure) },
+    uploadStore: { close: uploadClose },
+    publisher: { close: publisherClose },
+    telemetry: { shutdown: telemetryShutdown },
+    database: { $client: { close: databaseClose } },
+  } as unknown as ReturnType<typeof app>
+  const closing = closeApp(resources)
+  expect(closeApp(resources)).toBe(closing)
+  await expect(closing).rejects.toMatchObject({ errors: [failure] })
+  expect(uploadClose).toHaveBeenCalledOnce()
+  expect(publisherClose).toHaveBeenCalledOnce()
+  expect(telemetryShutdown).toHaveBeenCalledOnce()
+  expect(databaseClose).toHaveBeenCalledOnce()
+})