@fuzdev/fuz_app 0.104.0 → 0.105.0

package/dist/testing/audit_completeness.js

@@ -24,14 +24,14 @@ import './assert_dev_env.js';
  */
 import { describe, test, assert } from 'vitest';
 import { ROLE_ADMIN } from '../auth/role_schema.js';
-import { AUDIT_EVENT_TYPES, } from '../auth/audit_log_schema.js';
+import { AUDIT_EVENT_TYPES } from '../auth/audit_log_schema.js';
 import { DEFAULT_TEST_PASSWORD } from './test_credentials.js';
 import { find_auth_route } from './integration_helpers.js';
-import { rpc_call_for_spec, require_rpc_endpoint_path, resolve_rpc_endpoints_for_setup, } from './rpc_helpers.js';
+import { rpc_call_for_spec, require_rpc_endpoint_path, resolve_rpc_endpoints_for_setup } from './rpc_helpers.js';
 import { role_grant_offer_and_accept } from './role_grant_helpers.js';
-import { role_grant_offer_accept_action_spec, role_grant_offer_create_action_spec, role_grant_revoke_action_spec, } from '../auth/role_grant_offer_action_specs.js';
-import { account_delete_action_spec, account_purge_action_spec, account_undelete_action_spec, admin_session_revoke_all_action_spec, admin_token_revoke_all_action_spec, app_settings_update_action_spec, audit_log_list_action_spec, AUDIT_LOG_LIST_LIMIT_MAX, invite_create_action_spec, invite_delete_action_spec, } from '../auth/admin_action_specs.js';
-import { account_session_list_action_spec, account_session_revoke_action_spec, account_session_revoke_all_action_spec, account_token_create_action_spec, account_token_list_action_spec, account_token_revoke_action_spec, } from '../auth/account_action_specs.js';
+import { role_grant_offer_accept_action_spec, role_grant_offer_create_action_spec, role_grant_revoke_action_spec } from '../auth/role_grant_offer_action_specs.js';
+import { account_delete_action_spec, account_purge_action_spec, account_undelete_action_spec, admin_session_revoke_all_action_spec, admin_token_revoke_all_action_spec, app_settings_update_action_spec, audit_log_list_action_spec, AUDIT_LOG_LIST_LIMIT_MAX, invite_create_action_spec, invite_delete_action_spec } from '../auth/admin_action_specs.js';
+import { account_session_list_action_spec, account_session_revoke_action_spec, account_session_revoke_all_action_spec, account_token_create_action_spec, account_token_list_action_spec, account_token_revoke_action_spec } from '../auth/account_action_specs.js';
 /**
  * Mint a dedicated admin account whose sole job is to read the audit log
  * via RPC. Decoupling the *observer* from the *subject* keeps the helper
@@ -61,7 +61,7 @@ const list_audit_events = async (app, rpc_path, observer, params = {}) => {
         path: rpc_path,
         spec: audit_log_list_action_spec,
         params: { limit: AUDIT_LOG_LIST_LIMIT_MAX, ...params },
-        headers: observer.create_session_headers(),
+        headers: observer.create_session_headers()
     });
     assert.ok(res.ok, `audit_log_list failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
     return res.result.events;
@@ -85,12 +85,12 @@ const assert_event_credential_type = (events, expected, credential_type, context
 const UNAUTHENTICATED_JSON_HEADERS = {
     host: 'localhost',
     origin: 'http://localhost:5173',
-    'content-type': 'application/json',
+    'content-type': 'application/json'
 };
 /** Standard request headers for session-authenticated JSON requests. */
 const json_session_headers = (fixture, extra) => fixture.create_session_headers({
     'content-type': 'application/json',
-    ...extra,
+    ...extra
 });
 /**
  * Composable audit log completeness test suite.
@@ -125,8 +125,8 @@ export const describe_audit_completeness_tests = (options) => {
                     headers: UNAUTHENTICATED_JSON_HEADERS,
                     body: JSON.stringify({
                         username: fixture.account.username,
-                        password: DEFAULT_TEST_PASSWORD,
-                    }),
+                        password: DEFAULT_TEST_PASSWORD
+                    })
                 });
                 assert.strictEqual(res.status, 200);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -142,8 +142,8 @@ export const describe_audit_completeness_tests = (options) => {
                     headers: UNAUTHENTICATED_JSON_HEADERS,
                     body: JSON.stringify({
                         username: fixture.account.username,
-                        password: 'wrong-password',
-                    }),
+                        password: 'wrong-password'
+                    })
                 });
                 assert.strictEqual(res.status, 401);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -156,7 +156,7 @@ export const describe_audit_completeness_tests = (options) => {
                 assert.ok(logout_route, 'Expected POST /logout route');
                 const res = await fixture.transport(logout_route.path, {
                     method: 'POST',
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.strictEqual(res.status, 200);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -170,7 +170,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: account_token_create_action_spec,
                     params: { name: 'audit-test' },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(res.ok, `account_token_create failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -186,7 +186,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: account_token_list_action_spec,
                     params: undefined,
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(list_res.ok, 'account_token_list should succeed');
                 const { tokens } = list_res.result;
@@ -196,7 +196,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: account_token_revoke_action_spec,
                     params: { token_id: tokens[0].id },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(res.ok, `account_token_revoke failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -214,8 +214,8 @@ export const describe_audit_completeness_tests = (options) => {
                     headers: UNAUTHENTICATED_JSON_HEADERS,
                     body: JSON.stringify({
                         username: fixture.account.username,
-                        password: DEFAULT_TEST_PASSWORD,
-                    }),
+                        password: DEFAULT_TEST_PASSWORD
+                    })
                 });
                 // get session IDs (newest first — `account_session_list` orders DESC
                 // by `created_at`, so [0] is the just-logged-in session and [1] is
@@ -225,7 +225,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: account_session_list_action_spec,
                     params: undefined,
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(list_res.ok, 'account_session_list should succeed');
                 const { sessions } = list_res.result;
@@ -236,7 +236,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: account_session_revoke_action_spec,
                     params: { session_id: sessions[0].id },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(res.ok, `account_session_revoke failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -251,7 +251,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: account_session_revoke_all_action_spec,
                     params: undefined,
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(res.ok, `account_session_revoke_all failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -268,8 +268,8 @@ export const describe_audit_completeness_tests = (options) => {
                     headers: json_session_headers(fixture),
                     body: JSON.stringify({
                         current_password: DEFAULT_TEST_PASSWORD,
-                        new_password: 'new-password-456',
-                    }),
+                        new_password: 'new-password-456'
+                    })
                 });
                 assert.strictEqual(res.status, 200);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -288,7 +288,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: role_grant_offer_create_action_spec,
                     params: { to_account_id: target.account.id, role: ROLE_ADMIN },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(offer_res.ok, `role_grant_offer_create failed: ${offer_res.ok ? '' : JSON.stringify(offer_res.error)}`);
                 const { offer } = offer_res.result;
@@ -302,7 +302,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: role_grant_offer_accept_action_spec,
                     params: { offer_id: offer.id },
-                    headers: target.create_session_headers(),
+                    headers: target.create_session_headers()
                 });
                 assert.ok(accept_res.ok, `role_grant_offer_accept failed: ${accept_res.ok ? '' : JSON.stringify(accept_res.error)}`);
                 const events_after_accept = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -321,7 +321,7 @@ export const describe_audit_completeness_tests = (options) => {
                     rpc_path,
                     grantor: fixture,
                     recipient: target,
-                    role: ROLE_ADMIN,
+                    role: ROLE_ADMIN
                 });
                 // Revoke via RPC.
                 const revoke_res = await rpc_call_for_spec({
@@ -329,7 +329,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: role_grant_revoke_action_spec,
                     params: { actor_id: target.actor.id, role_grant_id },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(revoke_res.ok, `role_grant_revoke failed: ${revoke_res.ok ? '' : JSON.stringify(revoke_res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -351,7 +351,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: admin_session_revoke_all_action_spec,
                     params: { account_id: target.account.id },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(res.ok, `admin_session_revoke_all failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -367,7 +367,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: admin_token_revoke_all_action_spec,
                     params: { account_id: target.account.id },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(res.ok, `admin_token_revoke_all failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -384,7 +384,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: invite_create_action_spec,
                     params: { username: 'invited_user' },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(create_res.ok, `invite_create failed: ${create_res.ok ? '' : JSON.stringify(create_res.error)}`);
                 const { invite } = create_res.result;
@@ -393,7 +393,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: invite_delete_action_spec,
                     params: { invite_id: invite.id },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(delete_res.ok, `invite_delete failed: ${delete_res.ok ? '' : JSON.stringify(delete_res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -411,7 +411,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: app_settings_update_action_spec,
                     params: { open_signup: true },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(res.ok, `app_settings_update failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -429,7 +429,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: account_delete_action_spec,
                     params: { account_id: target.account.id },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(res.ok, `account_delete failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -449,7 +449,7 @@ export const describe_audit_completeness_tests = (options) => {
                     // default `origin` header — the daemon-token middleware discards the
                     // credential in a browser context (Origin/Referer present).
                     suppress_default_origin: true,
-                    headers: fixture.create_daemon_token_headers(),
+                    headers: fixture.create_daemon_token_headers()
                 });
                 assert.ok(res.ok, `account_purge failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -465,7 +465,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: account_delete_action_spec,
                     params: { account_id: target.account.id },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(del.ok, `account_delete failed: ${del.ok ? '' : JSON.stringify(del.error)}`);
                 const res = await rpc_call_for_spec({
@@ -473,7 +473,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: account_undelete_action_spec,
                     params: { account_id: target.account.id },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(res.ok, `account_undelete failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -499,7 +499,7 @@ export const describe_audit_completeness_tests = (options) => {
                     path: rpc_path,
                     spec: app_settings_update_action_spec,
                     params: { open_signup: true },
-                    headers: fixture.create_session_headers(),
+                    headers: fixture.create_session_headers()
                 });
                 assert.ok(settings_res.ok, `app_settings_update failed: ${settings_res.ok ? '' : JSON.stringify(settings_res.error)}`);
                 const res = await fixture.transport(signup_route.path, {
@@ -507,8 +507,8 @@ export const describe_audit_completeness_tests = (options) => {
                     headers: UNAUTHENTICATED_JSON_HEADERS,
                     body: JSON.stringify({
                         username: 'signup_user',
-                        password: 'signup-password-123',
-                    }),
+                        password: 'signup-password-123'
+                    })
                 });
                 assert.strictEqual(res.status, 200);
                 const events = await list_audit_events({ request: fixture.transport }, rpc_path, observer);
@@ -543,7 +543,7 @@ export const describe_audit_completeness_tests = (options) => {
                 'actor_delete',
                 'actor_purge',
                 'actor_undelete',
-                'app_settings_update',
+                'app_settings_update'
             ]);
             /** Event types excluded with justification. */
             const EXCLUDED_EVENT_TYPES = new Set([
@@ -561,7 +561,7 @@ export const describe_audit_completeness_tests = (options) => {
                 'role_grant_offer_decline',
                 'role_grant_offer_retract',
                 'role_grant_offer_expire',
-                'role_grant_offer_supersede',
+                'role_grant_offer_supersede'
             ]);
             test('all audit event types are covered or explicitly excluded', () => {
                 const all_covered = new Set([...COVERED_EVENT_TYPES, ...EXCLUDED_EVENT_TYPES]);

package/dist/testing/audit_drift_guard.d.ts

@@ -56,7 +56,9 @@ export interface RecordingAuditEmitter {
  * and the `event_type` / `outcome` / `target_*_id` / `metadata` fields
  * forward from the input envelope. Tests asserting on role-grant-shape
  * emissions read out of the same homogeneous `calls` array.
- * `notify` is a no-op; `on_event_chain` is an empty array.
+ * `notify` is a no-op; `add_listener` records into a local array that
+ * `listener_count` reports (registered listeners never fire — this emitter
+ * captures `emit` shapes, not fan-out).
  *
  * `emit` AND `emit_pool` both append to `calls` so cleanup-sweep tests
  * (which use `emit_pool` exclusively — see `auth/cleanup.ts`) can also

package/dist/testing/audit_drift_guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit_drift_guard.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/audit_drift_guard.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAU7B,OAAO,EAEN,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,0BAA0B,CAAC;AAE3D;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,yBAAyB,QAAO,IAiB5C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACX;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACrC,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,8BAA8B,GAC1C,YAAY,KAAK,CAAC,aAAa,CAAC,KAC9B,qBA0BF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,kCAAkC,GAAI,CAAC,SAAS;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAC,EACtF,SAAS;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,EACxB,YAAY,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,EACtC,gBAAgB,IAAI,CAAC,yBAAyB,EAAE,IAAI,GAAG,KAAK,GAAG,gBAAgB,CAAC,KAC9E,YAWF,CAAC"}
+{"version":3,"file":"audit_drift_guard.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/audit_drift_guard.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAU7B,OAAO,EAEN,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAiB,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,yBAAyB,QAAO,IAiB5C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACX;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACrC,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,8BAA8B,GAC1C,YAAY,KAAK,CAAC,aAAa,CAAC,KAC9B,qBA8BF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,kCAAkC,GAAI,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACxF,SAAS;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EAC1B,YAAY,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,EACtC,gBAAgB,IAAI,CAAC,yBAAyB,EAAE,IAAI,GAAG,KAAK,GAAG,gBAAgB,CAAC,KAC9E,YAWF,CAAC"}

package/dist/testing/audit_drift_guard.js

@@ -1,7 +1,7 @@
 import './assert_dev_env.js';
 import { assert, beforeEach, afterEach } from 'vitest';
-import { get_audit_metadata_validation_failures, get_audit_unknown_event_type_failures, reset_audit_metadata_validation_failures, reset_audit_unknown_event_type_failures, } from '../auth/audit_log_queries.js';
-import { create_audit_emitter, } from '../auth/audit_emitter.js';
+import { get_audit_metadata_validation_failures, get_audit_unknown_event_type_failures, reset_audit_metadata_validation_failures, reset_audit_unknown_event_type_failures } from '../auth/audit_log_queries.js';
+import { create_audit_emitter } from '../auth/audit_emitter.js';
 /**
  * Register per-test `beforeEach` + `afterEach` hooks that catch any audit
  * emission with a metadata shape that fails its `audit_metadata_schemas`
@@ -44,7 +44,9 @@ export const install_audit_drift_guard = () => {
  * and the `event_type` / `outcome` / `target_*_id` / `metadata` fields
  * forward from the input envelope. Tests asserting on role-grant-shape
  * emissions read out of the same homogeneous `calls` array.
- * `notify` is a no-op; `on_event_chain` is an empty array.
+ * `notify` is a no-op; `add_listener` records into a local array that
+ * `listener_count` reports (registered listeners never fire — this emitter
+ * captures `emit` shapes, not fan-out).
  *
  * `emit` AND `emit_pool` both append to `calls` so cleanup-sweep tests
  * (which use `emit_pool` exclusively — see `auth/cleanup.ts`) can also
@@ -65,6 +67,7 @@ export const install_audit_drift_guard = () => {
  */
 export const create_recording_audit_emitter = (calls_ref) => {
     const calls = calls_ref ?? [];
+    const listeners = [];
     const emitter = {
         emit: (_ctx, input) => {
             calls.push(input);
@@ -78,7 +81,7 @@ export const create_recording_audit_emitter = (calls_ref) => {
                 target_account_id: input.target_account_id,
                 target_actor_id: input.target_actor_id,
                 ip: ctx.client_ip,
-                metadata: input.metadata,
+                metadata: input.metadata
             });
         },
         emit_pool: (input) => {
@@ -86,7 +89,10 @@ export const create_recording_audit_emitter = (calls_ref) => {
             return Promise.resolve();
         },
         notify: () => undefined,
-        on_event_chain: [],
+        add_listener: (listener) => {
+            listeners.push(listener);
+        },
+        listener_count: () => listeners.length
     };
     return { emitter, calls };
 };
@@ -129,6 +135,6 @@ export const create_emit_ordering_audit_factory = (seq_ref, events_ref, extra_op
         emit_decorator: (inner) => (ctx, input) => {
             events_ref.push({ kind: 'emit', at: seq_ref.value++ });
             inner(ctx, input);
-        },
+        }
     });
 };

package/dist/testing/auth_apps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth_apps.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/auth_apps.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAE7B;;;;;;;GAOG;AAEH,OAAO,EAAC,IAAI,EAAC,MAAM,MAAM,CAAC;AAG1B,OAAO,EAAoB,KAAK,SAAS,EAAC,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAiB,KAAK,SAAS,EAAC,MAAM,uBAAuB,CAAC;AAErE,OAAO,EAGN,KAAK,cAAc,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAIN,KAAK,cAAc,EACnB,MAAM,oBAAoB,CAAC;AAI5B;;GAEG;AACH,eAAO,MAAM,2BAA2B,GAAI,OAAO,MAAM,KAAG,cAI1D,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,GACtC,aAAa,KAAK,CAAC,SAAS,CAAC,EAC7B,WAAW,cAAc,EACzB,kBAAkB,cAAc,KAC9B,IAuBF,CAAC;AAEF,sFAAsF;AACtF,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,IAAI,CAAC;IACb,MAAM,EAAE,IAAI,CAAC;IACb,MAAM,EAAE,IAAI,CAAC;IACb,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CAC3B;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GACjC,aAAa,KAAK,CAAC,SAAS,CAAC,EAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,KAClB,YAeF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,MAAM,YAAY,EAAE,MAAM,SAAS,KAAG,IAarE,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,MAA4C,CAAC"}
+{"version":3,"file":"auth_apps.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/auth_apps.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAE7B;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAkB,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEvE,OAAO,EAGN,KAAK,cAAc,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAIN,KAAK,cAAc,EACnB,MAAM,oBAAoB,CAAC;AAI5B;;GAEG;AACH,eAAO,MAAM,2BAA2B,GAAI,OAAO,MAAM,KAAG,cAI1D,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,GACtC,aAAa,KAAK,CAAC,SAAS,CAAC,EAC7B,WAAW,cAAc,EACzB,kBAAkB,cAAc,KAC9B,IAuBF,CAAC;AAEF,sFAAsF;AACtF,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,IAAI,CAAC;IACb,MAAM,EAAE,IAAI,CAAC;IACb,MAAM,EAAE,IAAI,CAAC;IACb,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CAC3B;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GACjC,aAAa,KAAK,CAAC,SAAS,CAAC,EAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,KAClB,YAeF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,GAAI,MAAM,YAAY,EAAE,MAAM,SAAS,KAAG,IAarE,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,MAA4C,CAAC"}

package/dist/testing/auth_apps.js

@@ -12,8 +12,8 @@ import { Logger } from '@fuzdev/fuz_util/log.ts';
 import { apply_route_specs } from '../http/route_spec.js';
 import { is_public_auth } from '../http/auth_shape.js';
 import { fuz_auth_guard_resolver } from '../auth/auth_guard_resolver.js';
-import { REQUEST_CONTEXT_KEY, create_fuz_authorization_handler, } from '../auth/request_context.js';
-import { ACCOUNT_ID_KEY, CREDENTIAL_TYPE_KEY, TEST_CONTEXT_PRESET_KEY, } from '../hono_context.js';
+import { REQUEST_CONTEXT_KEY, create_fuz_authorization_handler } from '../auth/request_context.js';
+import { ACCOUNT_ID_KEY, CREDENTIAL_TYPE_KEY, TEST_CONTEXT_PRESET_KEY } from '../hono_context.js';
 import { create_stub_db } from './stubs.js';
 import { create_test_account, create_test_actor, create_test_role_grant } from './entities.js';
 /**
@@ -22,7 +22,7 @@ import { create_test_account, create_test_actor, create_test_role_grant } from '
 export const create_test_request_context = (role) => ({
     account: create_test_account({ id: 'acc_1', username: 'testuser' }),
     actor: create_test_actor({ id: 'act_1', account_id: 'acc_1', name: 'testuser' }),
-    role_grants: role ? [create_test_role_grant({ id: 'perm_1', actor_id: 'act_1', role })] : [],
+    role_grants: role ? [create_test_role_grant({ id: 'perm_1', actor_id: 'act_1', role })] : []
 });
 /**
  * Create a Hono test app from route specs with optional auth context.
@@ -63,7 +63,7 @@ export const create_auth_test_apps = (route_specs, roles) => {
         public: create_test_app_from_specs(route_specs),
         authed: create_test_app_from_specs(route_specs, create_test_request_context()),
         keeper: create_test_app_from_specs(route_specs, create_test_request_context('keeper'), 'daemon_token'),
-        by_role,
+        by_role
     };
 };
 /**

package/dist/testing/bootstrap_success.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap_success.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/bootstrap_success.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAsB7B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,uBAAuB,CAAC;AAGrD,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,kBAAkB,CAAC;AAM9D,sDAAsD;AACtD,MAAM,WAAW,2BAA2B;IAC3C,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,0DAA0D;IAC1D,kBAAkB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,8EAA8E;IAC9E,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC;;;;;OAKG;IACH,SAAS,EAAE,oBAAoB,CAAC;IAChC,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,eAAO,MAAM,gCAAgC,GAAI,SAAS,2BAA2B,KAAG,IAyIvF,CAAC"}
+{"version":3,"file":"bootstrap_success.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/bootstrap_success.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAsB7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAMhE,sDAAsD;AACtD,MAAM,WAAW,2BAA2B;IAC3C,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,0DAA0D;IAC1D,kBAAkB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,8EAA8E;IAC9E,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC;;;;;OAKG;IACH,SAAS,EAAE,oBAAoB,CAAC;IAChC,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,eAAO,MAAM,gCAAgC,GAAI,SAAS,2BAA2B,KAAG,IAyIvF,CAAC"}

package/dist/testing/bootstrap_success.js

@@ -37,7 +37,7 @@ export const describe_bootstrap_success_tests = (options) => {
                 create_route_specs: options.create_route_specs,
                 rpc_endpoints: options.rpc_endpoints,
                 bootstrap: options.bootstrap,
-                bootstrap_token: token,
+                bootstrap_token: token
             });
             try {
                 const response = await test_app.app.request(bootstrap_path, {
@@ -46,8 +46,8 @@ export const describe_bootstrap_success_tests = (options) => {
                     body: JSON.stringify({
                         token,
                         username: TEST_USERNAME,
-                        password: TEST_PASSWORD,
-                    }),
+                        password: TEST_PASSWORD
+                    })
                 });
                 // Response shape
                 assert.strictEqual(response.status, 200);
@@ -78,7 +78,7 @@ export const describe_bootstrap_success_tests = (options) => {
                 create_route_specs: options.create_route_specs,
                 rpc_endpoints: options.rpc_endpoints,
                 bootstrap: options.bootstrap,
-                bootstrap_token: token,
+                bootstrap_token: token
             });
             try {
                 // First bootstrap succeeds
@@ -88,8 +88,8 @@ export const describe_bootstrap_success_tests = (options) => {
                     body: JSON.stringify({
                         token,
                         username: TEST_USERNAME,
-                        password: TEST_PASSWORD,
-                    }),
+                        password: TEST_PASSWORD
+                    })
                 });
                 assert.strictEqual(first.status, 200);
                 // Second attempt blocked by lock
@@ -99,8 +99,8 @@ export const describe_bootstrap_success_tests = (options) => {
                     body: JSON.stringify({
                         token,
                         username: 'another_user',
-                        password: TEST_PASSWORD,
-                    }),
+                        password: TEST_PASSWORD
+                    })
                 });
                 assert.strictEqual(second.status, 403);
                 const body = (await second.json());
@@ -116,7 +116,7 @@ export const describe_bootstrap_success_tests = (options) => {
                 create_route_specs: options.create_route_specs,
                 rpc_endpoints: options.rpc_endpoints,
                 bootstrap: options.bootstrap,
-                bootstrap_token: token,
+                bootstrap_token: token
             });
             try {
                 const response = await test_app.app.request(bootstrap_path, {
@@ -125,8 +125,8 @@ export const describe_bootstrap_success_tests = (options) => {
                     body: JSON.stringify({
                         token: 'wrong-token-value-that-does-not-match',
                         username: TEST_USERNAME,
-                        password: TEST_PASSWORD,
-                    }),
+                        password: TEST_PASSWORD
+                    })
                 });
                 assert.strictEqual(response.status, 401);
                 const body = (await response.json());

package/dist/testing/connection_closer_helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection_closer_helpers.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/connection_closer_helpers.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAI7B,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,iCAAiC,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;CACX;AAED,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,GAAI,UAAU;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,KAAG,eAkBnE,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,aAAa,GAAG,SAAS,EAC/B,QAAQ,SAAS,GAAG,OAAO,GAAG,SAAS,EACvC,IAAI,MAAM,KACR,IAIF,CAAC"}
+{"version":3,"file":"connection_closer_helpers.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/connection_closer_helpers.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAI7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;CACX;AAED,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,GAAI,UAAU;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,KAAG,eAkBrE,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,GAC7B,MAAM,aAAa,GAAG,SAAS,EAC/B,QAAQ,SAAS,GAAG,OAAO,GAAG,SAAS,EACvC,IAAI,MAAM,KACR,IAIF,CAAC"}

package/dist/testing/connection_closer_helpers.js

@@ -27,7 +27,7 @@ export const create_recording_closer = (seq_ref) => {
         close_sockets_for_account: (id) => {
             calls.push({ method: 'account', id, at: seq.value++ });
             return 1;
-        },
+        }
     };
     return { closer, calls };
 };

package/dist/testing/cross_backend/account_lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account_lifecycle.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/account_lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAkC9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD;;;;GAIG;AACH,MAAM,MAAM,gCAAgC,GAAG,wBAAwB,CAAC;AAExE,eAAO,MAAM,sCAAsC,GAClD,SAAS,gCAAgC,KACvC,IA+TF,CAAC"}
+{"version":3,"file":"account_lifecycle.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/account_lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAqC9B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAG3D;;;;GAIG;AACH,MAAM,MAAM,gCAAgC,GAAG,wBAAwB,CAAC;AAExE,eAAO,MAAM,sCAAsC,GAClD,SAAS,gCAAgC,KACvC,IA+TF,CAAC"}

package/dist/testing/cross_backend/account_lifecycle.js

@@ -18,7 +18,7 @@ import '../assert_dev_env.js';
  * @module
  */
 import { describe, assert } from 'vitest';
-import { AccountDeleteOutput, AccountUndeleteOutput, AccountPurgeOutput, AdminAccountListOutput, AuditLogListOutput, ERROR_CANNOT_DELETE_KEEPER, } from '../../auth/admin_action_specs.js';
+import { AccountDeleteOutput, AccountUndeleteOutput, AccountPurgeOutput, AdminAccountListOutput, AuditLogListOutput, ERROR_CANNOT_DELETE_KEEPER } from '../../auth/admin_action_specs.js';
 import { ERROR_ACCOUNT_NOT_FOUND, ERROR_AUTHENTICATION_REQUIRED } from '../../http/error_schemas.js';
 import { test_if } from './capabilities.js';
 import { cross_rpc_call, error_reason, expect_output } from './cell_cross_helpers.js';

package/dist/testing/cross_backend/action_manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action_manifest.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/action_manifest.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAgB,KAAK,SAAS,EAAC,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,8BAA8B,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB;IAC/B,uCAAuC;;IAEvC,iGAAiG;;IAEjG,+BAA+B;;;;;;IAE/B,6BAA6B;;;;;;IAE7B,mFAAmF;;IAEnF,iFAAiF;;kBAEhF,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,kEAAkE;AAClE,eAAO,MAAM,cAAc;;QAhB1B,uCAAuC;;QAEvC,iGAAiG;;QAEjG,+BAA+B;;;;;;QAE/B,6BAA6B;;;;;;QAE7B,mFAAmF;;QAEnF,iFAAiF;;;kBAQhF,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAM5D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,MAAM;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAC/B,KAAG,mBAOF,CAAC;AAMH;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,GACjC,OAAO,aAAa,CAAC,IAAI,CAAC,yBAAyB,EAAE,QAAQ,GAAG,MAAM,GAAG,cAAc,CAAC,CAAC,KACvF,cAED,CAAC"}
+{"version":3,"file":"action_manifest.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/action_manifest.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAE9E;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB;IAC/B,uCAAuC;;IAEvC,iGAAiG;;IAEjG,+BAA+B;;;;;;IAE/B,6BAA6B;;;;;;IAE7B,mFAAmF;;IAEnF,iFAAiF;;kBAEhF,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,kEAAkE;AAClE,eAAO,MAAM,cAAc;;QAhB1B,uCAAuC;;QAEvC,iGAAiG;;QAEjG,+BAA+B;;;;;;QAE/B,6BAA6B;;;;;;QAE7B,mFAAmF;;QAEnF,iFAAiF;;;kBAQhF,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAM5D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,MAAM;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAC/B,KAAG,mBAOF,CAAC;AAMH;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,GACjC,OAAO,aAAa,CAAC,IAAI,CAAC,yBAAyB,EAAE,QAAQ,GAAG,MAAM,GAAG,cAAc,CAAC,CAAC,KACvF,cAED,CAAC"}

package/dist/testing/cross_backend/action_manifest.js

@@ -54,11 +54,11 @@ export const ActionManifestEntry = z.strictObject({
     /** Required roles (any-of), sorted; `[]` when the action declares no role gate. */
     roles: z.array(z.string()),
     /** Permitted credential channels, sorted; `[]` when ungated (any credential). */
-    credential_types: z.array(z.string()),
+    credential_types: z.array(z.string())
 });
 /** The full action manifest — every entry, sorted by `method`. */
 export const ActionManifest = z.strictObject({
-    methods: z.array(ActionManifestEntry),
+    methods: z.array(ActionManifestEntry)
 });
 /** Sorted copy of a readonly string list (stable cross-impl ordering). */
 const sorted_strings = (xs) => [...(xs ?? [])].sort();
@@ -73,7 +73,7 @@ export const action_manifest_entry = (spec) => ({
     account: spec.auth.account,
     actor: spec.auth.actor,
     roles: sorted_strings(spec.auth.roles),
-    credential_types: sorted_strings(spec.auth.credential_types),
+    credential_types: sorted_strings(spec.auth.credential_types)
 });
 /** Deterministic byte-lexicographic method order — matches the Rust `str::cmp` the stub sorts by. */
 const compare_method = (a, b) => a.method < b.method ? -1 : a.method > b.method ? 1 : 0;
@@ -85,5 +85,5 @@ const compare_method = (a, b) => a.method < b.method ? -1 : a.method > b.method
  * `PROTOCOL_ACTION_SPECS` first) — see the module doc.
  */
 export const build_action_manifest = (specs) => ({
-    methods: specs.map(action_manifest_entry).sort(compare_method),
+    methods: specs.map(action_manifest_entry).sort(compare_method)
 });

package/dist/testing/cross_backend/action_manifest_parity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action_manifest_parity.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/action_manifest_parity.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAC,cAAc,EAAsB,MAAM,sBAAsB,CAAC;AAW9E,6EAA6E;AAC7E,MAAM,MAAM,kBAAkB,GAC3B;IAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAC,GACrF;IACA,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;CACnB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,kBAAkB,CAAC;IACnE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAML;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GACjC,GAAG,cAAc,EACjB,GAAG,cAAc,KACf,KAAK,CAAC,kBAAkB,CA+B1B,CAAC;AAEF,qEAAqE;AACrE,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,GACxC,OAAO,aAAa,CAAC,kBAAkB,CAAC,EACxC,SAAQ,wBAA6B,KACnC,MA8BF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,GACzC,GAAG,cAAc,EACjB,GAAG,cAAc,EACjB,SAAQ,wBAA6B,KACnC,IAUF,CAAC"}
+{"version":3,"file":"action_manifest_parity.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/action_manifest_parity.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAuB,MAAM,sBAAsB,CAAC;AAWhF,6EAA6E;AAC7E,MAAM,MAAM,kBAAkB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvF;IACA,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;CACnB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,kBAAkB,CAAC;IACnE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAML;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GACjC,GAAG,cAAc,EACjB,GAAG,cAAc,KACf,KAAK,CAAC,kBAAkB,CA+B1B,CAAC;AAEF,qEAAqE;AACrE,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,GACxC,OAAO,aAAa,CAAC,kBAAkB,CAAC,EACxC,SAAQ,wBAA6B,KACnC,MA8BF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,GACzC,GAAG,cAAc,EACjB,GAAG,cAAc,EACjB,SAAQ,wBAA6B,KACnC,IAUF,CAAC"}

package/dist/testing/cross_backend/actor_lookup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actor_lookup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/actor_lookup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAqC9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AASnE,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IAkDxF,CAAC"}
+{"version":3,"file":"actor_lookup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/actor_lookup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAqC9B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAG3D;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AASnE,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IAkDxF,CAAC"}

package/dist/testing/cross_backend/actor_lookup.js

@@ -46,7 +46,7 @@ export const describe_actor_lookup_cross_tests = (options) => {
             const res = await fixture.fresh_transport()(rpc_path, {
                 method: 'POST',
                 headers: { 'content-type': 'application/json' },
-                body: lookup_envelope([fixture.actor.id], 'anon-lookup'),
+                body: lookup_envelope([fixture.actor.id], 'anon-lookup')
             });
             assert.strictEqual(res.status, 401, 'unauthenticated actor_lookup must be refused');
         });
@@ -55,7 +55,7 @@ export const describe_actor_lookup_cross_tests = (options) => {
             const res = await fixture.transport(rpc_path, {
                 method: 'POST',
                 headers: { ...fixture.create_session_headers(), 'content-type': 'application/json' },
-                body: lookup_envelope([fixture.actor.id], 'keeper-lookup'),
+                body: lookup_envelope([fixture.actor.id], 'keeper-lookup')
             });
             assert.strictEqual(res.status, 200, 'authenticated actor_lookup must succeed');
             const body = (await res.json());
@@ -75,7 +75,7 @@ export const describe_actor_lookup_cross_tests = (options) => {
             const res = await fixture.transport(rpc_path, {
                 method: 'POST',
                 headers: { ...fixture.create_session_headers(), 'content-type': 'application/json' },
-                body: lookup_envelope([], 'empty-lookup'),
+                body: lookup_envelope([], 'empty-lookup')
             });
             assert.strictEqual(res.status, 400, 'empty ids must fail input validation');
         });

package/dist/testing/cross_backend/actor_search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actor_search.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/actor_search.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA2C9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD,qFAAqF;AACrF,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AASnE,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IAyDxF,CAAC"}
+{"version":3,"file":"actor_search.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/actor_search.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA2C9B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAG3D,qFAAqF;AACrF,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AASnE,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IAyDxF,CAAC"}