test: move the real-Postgres suites to e2e/

The end-to-end suites and their harness move from tests/ to the root
e2e/ directory, with the database harness and HTTP stub merged into
e2e/helpers.ts, to match the repo test layout. bun run test now runs
src/ only and the new test:e2e script runs e2e/; CI runs both.

Author: TheGreatAxios

.github/workflows/ci.yml

@@ -28,6 +28,7 @@ jobs:
       - run: bun install --frozen-lockfile
       - run: bun run typecheck
       - run: bun run test
+      - run: bun run test:e2e
   node:
     runs-on: ubuntu-latest
     strategy:

CONTRIBUTING.md

@@ -22,11 +22,11 @@ Postgres. See `IMPLEMENTATION.md` for how the pieces fit together.
 ## Running the tests
 
 ```bash
-bun run typecheck && bun run test
+bun run typecheck && bun run test && bun run test:e2e
 ```
 
-- `bun run test` runs the unit suite in `src/` and the end-to-end suite in
-  `tests/`. The end-to-end tests drive the mounted routes and migrations
+- `bun run test` runs the unit suite in `src/`; `bun run test:e2e` runs the
+  end-to-end suite in `e2e/`. The end-to-end tests drive the mounted routes and migrations
   against a real pgvector Postgres: set `TEST_DATABASE_URL` to a server the
   tests can create and drop databases on (for `docker compose up -d`,
   `postgres://memory:memory-dev-password@localhost:5434/memory`). Each suite
@@ -68,3 +68,10 @@ numbered file, because a guarded `ADD CONSTRAINT` keeps the old definition.
 Contributions require agreeing to the project's CLA — see `CLA.md`. The CLA
 bot will comment on your first PR with instructions if you haven't signed
 yet.
+
+## Commit messages
+
+Commit subjects and PR titles follow [Conventional Commits](https://www.conventionalcommits.org): `feat`, `fix`, `refactor`, `test`, `docs`, `build`, `ci`, `perf`, and `chore(release): x.y.z` for releases.
+Add `!` only for public API breaks: removed or renamed exports, changed signatures, newly required params. Peer and dependency range changes are `build(deps):` with no `!`.
+Keep subjects imperative, lowercase after the colon, 72 characters or less, and free of ticket IDs.
+Every PR links its issue with a `Closes <issue id>` line in the PR body.

docs/RETENTION.md

@@ -64,7 +64,7 @@ creator (`created_by_principal_id` — the document's first version for
 independent of any share grant. A peer who can search a shared document gets
 403 on `forget`/`purge`/`retention-class` for it. See
 `src/services/retention-ownership.ts` and the ownership tests in
-`tests/grants.test.ts` / `tests/caller-resolver.test.ts`.
+`e2e/grants.test.ts` / `e2e/caller-resolver.test.ts`.
 
 **`sweepEphemeral` stays off the HTTP surface.** It is a maintenance sweep —
 "deprecate every ephemeral version past its TTL for this tenant" — not

tests/add-search.test.ts e2e/add-search.test.tstests/add-search.test.ts renamed to e2e/add-search.test.ts

@@ -12,7 +12,7 @@ import {
   seedPrincipal,
   testDatabaseUrl,
   type TestDb,
-} from "./lib/db-harness.ts";
+} from "./helpers.ts";
 
 describe.skipIf(testDatabaseUrl() === undefined)("add and search", () => {
   let db: TestDb;

tests/caller-resolver.test.ts e2e/caller-resolver.test.tstests/caller-resolver.test.ts renamed to e2e/caller-resolver.test.ts

@@ -15,7 +15,7 @@ import {
   seedPrincipal,
   testDatabaseUrl,
   type TestDb,
-} from "./lib/db-harness.ts";
+} from "./helpers.ts";
 
 // A machine caller (e.g. a workflow run) never passes the host's session
 // middleware; the host's callerResolver names its tenant and principal.

tests/context-rows.test.ts e2e/context-rows.test.tstests/context-rows.test.ts renamed to e2e/context-rows.test.ts

@@ -12,7 +12,7 @@ import {
   seedPrincipal,
   testDatabaseUrl,
   type TestDb,
-} from "./lib/db-harness.ts";
+} from "./helpers.ts";
 
 describe.skipIf(testDatabaseUrl() === undefined)("synthesized context rows", () => {
   let db: TestDb;

tests/distill-tick.test.ts e2e/distill-tick.test.tstests/distill-tick.test.ts renamed to e2e/distill-tick.test.ts

@@ -12,7 +12,7 @@ import {
   seedPrincipal,
   testDatabaseUrl,
   type TestDb,
-} from "./lib/db-harness.ts";
+} from "./helpers.ts";
 
 describe.skipIf(testDatabaseUrl() === undefined)("distill tick", () => {
   let db: TestDb;

tests/embed-client.test.ts e2e/embed-client.test.tstests/embed-client.test.ts renamed to e2e/embed-client.test.ts

@@ -6,7 +6,7 @@ import {
   embedTexts,
   probeEmbedDims,
 } from "../src/core/embed-client.ts";
-import { startHttpStub } from "./lib/http-stub.ts";
+import { startHttpStub } from "./helpers.ts";
 
 const stub = startHttpStub();
 afterAll(() => stub.stop());

tests/grants.test.ts e2e/grants.test.tstests/grants.test.ts renamed to e2e/grants.test.ts

@@ -12,7 +12,7 @@ import {
   seedPrincipal,
   testDatabaseUrl,
   type TestDb,
-} from "./lib/db-harness.ts";
+} from "./helpers.ts";
 
 describe.skipIf(testDatabaseUrl() === undefined)("grants, forget and purge", () => {
   let db: TestDb;

tests/lib/db-harness.ts e2e/helpers.tstests/lib/db-harness.ts renamed to e2e/helpers.ts

@@ -1,4 +1,4 @@
-// Real-Postgres harness for the tests/ suite. Each suite gets a fresh
+// Real-Postgres harness for the e2e/ suites. Each suite gets a fresh
 // database on the server named by TEST_DATABASE_URL (any pgvector Postgres
 // whose user can create databases, such as compose.yml's), with Interchange's control-plane tables and the memory
 // migrations applied; `close` drops it.
@@ -9,10 +9,10 @@ import { createRequireGrant, type TenantEnv } from "@intx/hub-api";
 import { Hono } from "hono";
 import postgres from "postgres";
 
-import { createMemory, type Memory } from "../../src/memory.ts";
-import type { MemoryConfig } from "../../src/mount-config.ts";
-import { runMemoryMigrations } from "../../src/migrations.ts";
-import { createMemoryRoutes } from "../../src/routes/mount.ts";
+import { createMemory, type Memory } from "../src/memory.ts";
+import type { MemoryConfig } from "../src/mount-config.ts";
+import { runMemoryMigrations } from "../src/migrations.ts";
+import { createMemoryRoutes } from "../src/routes/mount.ts";
 
 const FTS_LANGUAGE = "english";
 
@@ -49,7 +49,7 @@ export type TestDb = {
 export async function createEmptyDb(): Promise<TestDb> {
   const serverUrl = testDatabaseUrl();
   if (serverUrl === undefined) {
-    throw new Error("TEST_DATABASE_URL is required for the tests/ suite");
+    throw new Error("TEST_DATABASE_URL is required for the e2e/ suites");
   }
   const url = new URL(serverUrl);
   const database = `memory_test_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`;
@@ -205,3 +205,50 @@ export function createTestApp(opts: {
   );
   return app;
 }
+
+// A local HTTP server standing in for an embed or rerank endpoint. Each test
+// sets `reply`; every request is recorded with its path, auth header and
+// JSON body (both clients only send JSON).
+
+export type StubRequest = {
+  path: string;
+  authorization: string | null;
+  body: unknown;
+};
+
+export type HttpStub = {
+  url: string;
+  requests: StubRequest[];
+  reply: (req: StubRequest) => Response | Promise<Response>;
+  reset: () => void;
+  stop: () => void;
+};
+
+const unconfigured = () => new Response("no reply configured", { status: 500 });
+
+export function startHttpStub(): HttpStub {
+  const stub: HttpStub = {
+    url: "",
+    requests: [],
+    reply: unconfigured,
+    reset: () => {
+      stub.requests.length = 0;
+      stub.reply = unconfigured;
+    },
+    stop: () => server.stop(true),
+  };
+  const server = Bun.serve({
+    port: 0,
+    async fetch(req) {
+      const recorded: StubRequest = {
+        path: new URL(req.url).pathname,
+        authorization: req.headers.get("authorization"),
+        body: await req.json(),
+      };
+      stub.requests.push(recorded);
+      return stub.reply(recorded);
+    },
+  });
+  stub.url = server.url.href.replace(/\/$/, "");
+  return stub;
+}