@fuzdev/fuz_app 0.104.0 → 0.106.0

package/dist/testing/cross_backend/conformance_case.js

@@ -66,6 +66,15 @@ import { z } from 'zod';
  *   be replayed from a browser — wire-indistinguishable from sending no
  *   credential (the `token` principal is the honored counterpart: it suppresses
  *   `Origin`, so the same token authenticates).
+ * - `scoped_token` — the keeper authenticated via a bearer api-token minted
+ *   with a **narrowed** `TokenScope` (`{kind: 'methods', methods:
+ *   [SCOPED_TOKEN_ADMITTED_METHOD]}`), non-browser context. Minted through the
+ *   production `account_token_create` path over the keeper's session, not
+ *   seeded — `_testing_reset` deliberately seeds a `full` token, and a harness
+ *   that narrowed the seed would silently re-scope every other bearer case.
+ *   The scope gate sits between the credential gate and the role gate, so this
+ *   principal is what distinguishes `token_scope_required` from the
+ *   credential-type and role denials on either side of it.
  * - `anonymous` — no credential, fresh cookie jar.
  * - `fresh_non_admin` — a freshly minted account with no roles, session
  *   credential (via the production invite → signup → login flow).
@@ -87,18 +96,30 @@ export const ConformancePrincipal = z.enum([
     'daemon_browser',
     'token',
     'bearer_browser',
+    'scoped_token',
     'anonymous',
     'fresh_non_admin',
     'role_holder',
     'wrong_role',
-    'expired_session',
+    'expired_session'
 ]);
+/**
+ * The single RPC method the `scoped_token` principal's narrowed token admits.
+ *
+ * Part of the principal's contract, so the runner (which mints the token) and
+ * the cases (which assert the denials) agree on one value. `account_verify` is
+ * the minimal `credential_types: any` read on the spine: it clears the
+ * credential gate a bearer must pass first, and holds no role gate that could
+ * shadow the scope denial — so a case naming any *other* method isolates the
+ * scope gate and nothing else.
+ */
+export const SCOPED_TOKEN_ADMITTED_METHOD = 'account_verify';
 /** The request a conformance case issues. */
 export const ConformanceCaseRequest = z.strictObject({
     method: z.string().meta({
         description: 'RPC method name (e.g. `admin_account_list`) or a REST auth-route suffix ' +
             '(e.g. `/login`). A leading `/` selects the REST branch; otherwise the ' +
-            'runner resolves the RPC action from the spec registry.',
+            'runner resolves the RPC action from the spec registry.'
     }),
     params: z
         .unknown()
@@ -108,7 +129,7 @@ export const ConformanceCaseRequest = z.strictObject({
     verb: z
         .enum(['POST', 'GET'])
         .optional()
-        .meta({ description: 'HTTP verb. Defaults to POST; use GET for `side_effects: false` reads.' }),
+        .meta({ description: 'HTTP verb. Defaults to POST; use GET for `side_effects: false` reads.' })
 });
 /** The expected response shape a conformance case asserts. */
 export const ConformanceCaseExpectation = z.strictObject({
@@ -121,14 +142,14 @@ export const ConformanceCaseExpectation = z.strictObject({
             '`http/error_schemas.ts`, never a string literal. Asserted against the RPC ' +
             '`error.data.reason` (when the denial carries one) or the REST flat-body ' +
             '`error` field. The pre-validation 401 carries `data.reason` too; a denial ' +
-            'that genuinely omits it falls back to the `status` assertion to pin the class.',
+            'that genuinely omits it falls back to the `status` assertion to pin the class.'
     }),
     fields: z
         .record(z.string(), z.unknown())
         .optional()
         .meta({
         description: 'Specific field-value assertions on the success `result` (2xx) or the error ' +
-            '`error.data` (non-2xx). Each key must deep-equal the corresponding response field.',
+            '`error.data` (non-2xx). Each key must deep-equal the corresponding response field.'
     }),
     absent_fields: z
         .array(z.string())
@@ -141,7 +162,7 @@ export const ConformanceCaseExpectation = z.strictObject({
             '(top-level, inside a list element) fails the case. Pins "this secret never ' +
             'serializes" on BOTH spines — a serialization regression would otherwise leak ' +
             'identically and silently on each. Non-vacuous only when the body is known ' +
-            'non-empty (e.g. a list that always contains the caller); note that in the case.',
+            'non-empty (e.g. a list that always contains the caller); note that in the case.'
     }),
     headers: z
         .record(z.string(), z.string().nullable())
@@ -153,7 +174,7 @@ export const ConformanceCaseExpectation = z.strictObject({
             'runner enforces an unconditional no-fingerprint invariant on EVERY response ' +
             '(`Server` / `X-Powered-By` / `WWW-Authenticate` must stay absent on both ' +
             'spines), so a case only needs `headers` to pin a header beyond that ' +
-            'always-on floor.',
+            'always-on floor.'
     }),
     equivalence_group: z
         .string()
@@ -167,8 +188,8 @@ export const ConformanceCaseExpectation = z.strictObject({
             'and holds BOTH impls to it: a prober hitting either spine cannot tell the ' +
             'members apart. A group needs >= 2 members; a member may still set `fields`. ' +
             'The negative-space twin of the positive `output`-schema parity the runner ' +
-            'already asserts.',
-    }),
+            'already asserts.'
+    })
 });
 /**
  * Marks a case as a deferred-by-design gap. The runner routes it through
@@ -181,7 +202,7 @@ export const ConformanceCaseXfail = z.strictObject({
     tracking_id: z
         .string()
         .meta({ description: 'Tracking id for the deferred gap (issue id or tracking slug).' }),
-    reason: z.string().meta({ description: 'Why this case is deferred-by-design.' }),
+    reason: z.string().meta({ description: 'Why this case is deferred-by-design.' })
 });
 /**
  * A single conformance case. `name` is the assertion; the optional
@@ -201,5 +222,5 @@ export const ConformanceCase = z.strictObject({
         .string()
         .optional()
         .meta({ description: 'Free-text note printed in the label / failure output.' }),
-    xfail: ConformanceCaseXfail.optional(),
+    xfail: ConformanceCaseXfail.optional()
 });

package/dist/testing/cross_backend/conformance_table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conformance_table.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/conformance_table.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA8B9B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,uBAAuB,CAAC;AAE1D,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAOjE,OAAO,EAKN,KAAK,uBAAuB,EAC5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAC,KAAK,eAAe,EAA4B,MAAM,uBAAuB,CAAC;AACtF,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAC,SAAS,EAAc,MAAM,YAAY,CAAC;AAGvD;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IAC1C,iEAAiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,sDAAsD;AACtD,MAAM,WAAW,uBAAuB;IACvC,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAC/C,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACjD,iEAAiE;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAuLD;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,EAAE,aAAa,CAAC,MAAM,CAIrD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,GACzC,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,MAAM,KACX,IAQF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GACnC,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,EACvC,OAAO,MAAM,KACX,IAYF,CAAC;AAuKF;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,GAAI,SAAS,uBAAuB,KAAG,IAkEnF,CAAC"}
+{"version":3,"file":"conformance_table.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/conformance_table.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA8B9B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAOnE,OAAO,EAMN,KAAK,uBAAuB,EAC5B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAEN,KAAK,eAAe,EAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,YAAY,CAAC;AAGzD;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IAC1C,iEAAiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,sDAAsD;AACtD,MAAM,WAAW,uBAAuB;IACvC,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAC/C,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACjD,iEAAiE;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAoPD;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,EAAE,aAAa,CAAC,MAAM,CAIrD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,6BAA6B,GACzC,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,MAAM,KACX,IAQF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GACnC,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,EACvC,OAAO,MAAM,KACX,IAYF,CAAC;AAwKF;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,GAAI,SAAS,uBAAuB,KAAG,IAkEnF,CAAC"}

package/dist/testing/cross_backend/conformance_table.js

@@ -26,9 +26,10 @@ import '../assert_dev_env.js';
  */
 import { assert, describe, test } from 'vitest';
 import { DAEMON_TOKEN_HEADER } from '../../auth/daemon_token.js';
-import { find_auth_route, rest_auth_route_suffixes, } from '../integration_helpers.js';
-import { find_rpc_action, headers_to_record, rpc_call, resolve_rpc_endpoints_for_setup, } from '../rpc_helpers.js';
-import {} from './conformance_case.js';
+import { find_auth_route, rest_auth_route_suffixes } from '../integration_helpers.js';
+import { find_rpc_action, headers_to_record, rpc_call, rpc_call_for_spec, resolve_rpc_endpoints_for_setup } from '../rpc_helpers.js';
+import { account_token_create_action_spec } from '../../auth/account_action_specs.js';
+import { SCOPED_TOKEN_ADMITTED_METHOD } from './conformance_case.js';
 import { xfail_until } from './xfail.js';
 /**
  * A deliberately malformed `X-Daemon-Token` value for the `invalid_daemon`
@@ -40,15 +41,56 @@ import { xfail_until } from './xfail.js';
  * invalid-token path, not the browser-context discard.
  */
 const INVALID_DAEMON_TOKEN_VALUE = 'not-a-valid-daemon-token';
+/**
+ * Mint the `scoped_token` principal's narrowed bearer token over the
+ * production `account_token_create` path.
+ *
+ * Minted rather than seeded, and minted *here* rather than in a case. The
+ * seed stays `full` because `_testing_reset`'s api token backs every other
+ * bearer principal, and a case that minted its own credential would be the
+ * setup-DSL trap the case schema exists to avoid.
+ *
+ * `account_token_create` is session-only, so this runs over the keeper's
+ * session — which also makes the mint itself a live assertion that a narrowed
+ * scope is *accepted* at the mint boundary, not merely stored.
+ */
+const mint_scoped_token = async (fixture, resolved_rpc_endpoints) => {
+    const found = find_rpc_action(resolved_rpc_endpoints, account_token_create_action_spec.method);
+    if (!found) {
+        throw new Error(`conformance: principal 'scoped_token' needs '${account_token_create_action_spec.method}' ` +
+            `on the surface to mint its narrowed token, but the method is not registered on ` +
+            `rpc_endpoints.`);
+    }
+    // Spec-bound rather than a loose `rpc_call`: `params` type-checks against
+    // `TokenCreateInput` (so dropping `scope` is a compile error, not a runtime
+    // 400 in every test at once), and `result.token` comes back typed and
+    // output-validated — no cast, no hand-rolled presence check.
+    const res = await rpc_call_for_spec({
+        app: fixture.transport,
+        path: found.path,
+        spec: account_token_create_action_spec,
+        params: {
+            name: 'conformance scoped token',
+            scope: { kind: 'methods', methods: [SCOPED_TOKEN_ADMITTED_METHOD] }
+        },
+        headers: fixture.create_session_headers()
+    });
+    if (!res.ok) {
+        throw new Error(`conformance: minting the 'scoped_token' principal failed with ${res.status}: ` +
+            JSON.stringify(res.error));
+    }
+    return res.result.token;
+};
 /**
  * Map a `ConformancePrincipal` onto the transport + headers it
  * authenticates with, reading exclusively from the per-test `TestFixture`.
  *
  * The five always-available principals resolve from fixture accessors;
  * `role_holder` / `wrong_role` read a seeded `extra_accounts` entry named
- * via `options.principals` (throws a clear setup error when unconfigured).
+ * via `options.principals` (throws a clear setup error when unconfigured);
+ * `scoped_token` mints its narrowed credential over the production path.
  */
-const resolve_principal = async (fixture, as, principals) => {
+const resolve_principal = async (fixture, as, principals, resolved_rpc_endpoints) => {
     switch (as) {
         case 'keeper':
             // Keeper carries its session cookie via `create_session_headers`
@@ -60,7 +102,7 @@ const resolve_principal = async (fixture, as, principals) => {
             return {
                 transport: fixture.fresh_transport({ origin: null }),
                 headers: fixture.create_daemon_token_headers(),
-                suppress_default_origin: true,
+                suppress_default_origin: true
             };
         case 'invalid_daemon':
             // A malformed `X-Daemon-Token` carried ALONGSIDE the keeper's session
@@ -76,9 +118,9 @@ const resolve_principal = async (fixture, as, principals) => {
             return {
                 transport: fixture.fresh_transport({ origin: null }),
                 headers: fixture.create_session_headers({
-                    [DAEMON_TOKEN_HEADER]: INVALID_DAEMON_TOKEN_VALUE,
+                    [DAEMON_TOKEN_HEADER]: INVALID_DAEMON_TOKEN_VALUE
                 }),
-                suppress_default_origin: true,
+                suppress_default_origin: true
             };
         case 'daemon_browser':
             // A VALID `X-Daemon-Token` carried in a browser context (default Origin
@@ -93,14 +135,14 @@ const resolve_principal = async (fixture, as, principals) => {
             // guard), the 403 here proves the valid token was discarded, not honored.
             return {
                 transport: fixture.transport,
-                headers: fixture.create_session_headers(fixture.create_daemon_token_headers()),
+                headers: fixture.create_session_headers(fixture.create_daemon_token_headers())
             };
         case 'token':
             // Bearer is discarded in a browser context — empty jar + no Origin.
             return {
                 transport: fixture.fresh_transport({ origin: null }),
                 headers: fixture.create_bearer_headers(),
-                suppress_default_origin: true,
+                suppress_default_origin: true
             };
         case 'bearer_browser':
             // A VALID bearer api-token in a browser context (default Origin
@@ -114,8 +156,19 @@ const resolve_principal = async (fixture, as, principals) => {
             // honored (a non-discarding leg would authenticate → 200).
             return {
                 transport: fixture.fresh_transport(),
-                headers: fixture.create_bearer_headers(),
+                headers: fixture.create_bearer_headers()
             };
+        case 'scoped_token': {
+            // A narrowed bearer, otherwise identical to `token` — empty jar + no
+            // Origin, so the credential is honored rather than browser-discarded
+            // and the scope gate is what any denial comes from.
+            const token = await mint_scoped_token(fixture, resolved_rpc_endpoints);
+            return {
+                transport: fixture.fresh_transport({ origin: null }),
+                headers: { authorization: `Bearer ${token}` },
+                suppress_default_origin: true
+            };
+        }
         case 'anonymous':
             // Fresh jar so the keeper cookie (cross-process) can't leak in.
             return { transport: fixture.fresh_transport(), headers: {} };
@@ -189,7 +242,7 @@ const assert_absent_fields = (body, absent, label) => {
 export const FINGERPRINT_HEADERS = [
     'server',
     'x-powered-by',
-    'www-authenticate',
+    'www-authenticate'
 ];
 /**
  * Assert a response carries none of the `FINGERPRINT_HEADERS`. Run on every
@@ -237,7 +290,7 @@ const is_success_status = (status) => status >= 200 && status < 300;
  */
 const run_case = async (c, options, resolved_rpc_endpoints) => {
     const fixture = await options.setup_test();
-    const { transport, headers, suppress_default_origin } = await resolve_principal(fixture, c.request.as, options.principals);
+    const { transport, headers, suppress_default_origin } = await resolve_principal(fixture, c.request.as, options.principals, resolved_rpc_endpoints);
     const normalized = c.request.method.startsWith('/')
         ? await run_rest_case(c, options, transport, headers)
         : await run_rpc_case(c, transport, headers, suppress_default_origin, resolved_rpc_endpoints);
@@ -263,7 +316,7 @@ const run_rpc_case = async (c, transport, headers, suppress_default_origin, reso
         params: c.request.params,
         headers,
         ...(c.request.verb && { verb: c.request.verb }),
-        ...(suppress_default_origin && { suppress_default_origin: true }),
+        ...(suppress_default_origin && { suppress_default_origin: true })
     });
     assert_response_headers(res.headers, c);
     if (is_success_status(c.expect.status)) {
@@ -308,7 +361,7 @@ const run_rest_case = async (c, options, transport, headers) => {
         method: verb,
         headers: { 'Content-Type': 'application/json', ...headers },
         ...(verb !== 'GET' &&
-            c.request.params !== undefined && { body: JSON.stringify(c.request.params) }),
+            c.request.params !== undefined && { body: JSON.stringify(c.request.params) })
     };
     const response = await transport(route.path, init);
     assert_response_headers(headers_to_record(response.headers), c);

package/dist/testing/cross_backend/cookie_attributes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookie_attributes.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/cookie_attributes.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA+C9B,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAE1C,6DAA6D;AAC7D,MAAM,WAAW,gCAAgC;IAChD,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAoED,eAAO,MAAM,sCAAsC,GAClD,SAAS,gCAAgC,KACvC,IAmFF,CAAC"}
+{"version":3,"file":"cookie_attributes.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/cookie_attributes.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA+C9B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,6DAA6D;AAC7D,MAAM,WAAW,gCAAgC;IAChD,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAoED,eAAO,MAAM,sCAAsC,GAClD,SAAS,gCAAgC,KACvC,IAmFF,CAAC"}

package/dist/testing/cross_backend/cookie_attributes.js

@@ -110,7 +110,7 @@ export const describe_cookie_attributes_cross_tests = (options) => {
             const res = await fixture.fresh_transport()(login_path, {
                 method: 'POST',
                 headers: { 'content-type': 'application/json' },
-                body: JSON.stringify({ username, password: DEFAULT_TEST_PASSWORD }),
+                body: JSON.stringify({ username, password: DEFAULT_TEST_PASSWORD })
             });
             assert.strictEqual(res.status, 200, 'valid credentials must log in');
             const cookie = find_session_cookie(res, cookie_name);
@@ -126,7 +126,7 @@ export const describe_cookie_attributes_cross_tests = (options) => {
             const res = await fixture.fresh_transport()(login_path, {
                 method: 'POST',
                 headers: { 'content-type': 'application/json' },
-                body: JSON.stringify({ username, password: `wrong-${DEFAULT_TEST_PASSWORD}` }),
+                body: JSON.stringify({ username, password: `wrong-${DEFAULT_TEST_PASSWORD}` })
             });
             assert.strictEqual(res.status, 401, 'wrong password must be rejected');
             assert.strictEqual(find_session_cookie(res, cookie_name), undefined, 'a failed login must not Set-Cookie a session — no credential is minted on denial');
@@ -140,13 +140,13 @@ export const describe_cookie_attributes_cross_tests = (options) => {
             const login_res = await transport(login_path, {
                 method: 'POST',
                 headers: { 'content-type': 'application/json' },
-                body: JSON.stringify({ username, password: DEFAULT_TEST_PASSWORD }),
+                body: JSON.stringify({ username, password: DEFAULT_TEST_PASSWORD })
             });
             assert.strictEqual(login_res.status, 200, 'precondition: login must succeed');
             const res = await transport(logout_path, {
                 method: 'POST',
                 headers: { 'content-type': 'application/json' },
-                body: JSON.stringify({}),
+                body: JSON.stringify({})
             });
             assert.strictEqual(res.status, 200, 'logout must succeed for an authenticated session');
             const cookie = find_session_cookie(res, cookie_name);

package/dist/testing/cross_backend/create_cross_backend_global_setup.d.ts

@@ -53,5 +53,5 @@ export interface CrossBackendGlobalSetupOptions {
  * Build a vitest `globalSetup` default export. Returns the
  * `(project) => teardown` function vitest 4 expects.
  */
-export declare const create_cross_backend_global_setup: ({ configs, derive_name, provide_key, }: CrossBackendGlobalSetupOptions) => ((project: TestProject) => Promise<() => Promise<void>>);
+export declare const create_cross_backend_global_setup: ({ configs, derive_name, provide_key }: CrossBackendGlobalSetupOptions) => ((project: TestProject) => Promise<() => Promise<void>>);
 //# sourceMappingURL=create_cross_backend_global_setup.d.ts.map

package/dist/testing/cross_backend/create_cross_backend_global_setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create_cross_backend_global_setup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/create_cross_backend_global_setup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAE7C,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAYvD,MAAM,WAAW,8BAA8B;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,aAAa,CAAC,CAAC,CAAC;IAChE;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;IACxD;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;GAGG;AACH,eAAO,MAAM,iCAAiC,GAAI,wCAI/C,8BAA8B,KAAG,CAAC,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAqB1F,CAAC"}
+{"version":3,"file":"create_cross_backend_global_setup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/create_cross_backend_global_setup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAYzD,MAAM,WAAW,8BAA8B;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,aAAa,CAAC,CAAC,CAAC;IAChE;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;IACxD;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;GAGG;AACH,eAAO,MAAM,iCAAiC,GAAI,uCAI/C,8BAA8B,KAAG,CAAC,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAqB1F,CAAC"}

package/dist/testing/cross_backend/create_cross_backend_global_setup.js

@@ -12,7 +12,7 @@ const DEFAULT_PROJECT_NAME_PREFIX = /^cross_backend_(?:ts_)?/;
  * Build a vitest `globalSetup` default export. Returns the
  * `(project) => teardown` function vitest 4 expects.
  */
-export const create_cross_backend_global_setup = ({ configs, derive_name = (project_name) => project_name.replace(DEFAULT_PROJECT_NAME_PREFIX, ''), provide_key = 'backend_handle', }) => {
+export const create_cross_backend_global_setup = ({ configs, derive_name = (project_name) => project_name.replace(DEFAULT_PROJECT_NAME_PREFIX, ''), provide_key = 'backend_handle' }) => {
     return async (project) => {
         const name = derive_name(project.name);
         const factory = configs[name];

package/dist/testing/cross_backend/create_dual_spawn_global_setup.d.ts

@@ -60,5 +60,5 @@ export interface DualSpawnGlobalSetupOptions {
 /**
  * Build a vitest `globalSetup` default export that spawns both backends.
  */
-export declare const create_dual_spawn_global_setup: ({ configs, provide_keys, }: DualSpawnGlobalSetupOptions) => ((project: TestProject) => Promise<() => Promise<void>>);
+export declare const create_dual_spawn_global_setup: ({ configs, provide_keys }: DualSpawnGlobalSetupOptions) => ((project: TestProject) => Promise<() => Promise<void>>);
 //# sourceMappingURL=create_dual_spawn_global_setup.d.ts.map

package/dist/testing/cross_backend/create_dual_spawn_global_setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create_dual_spawn_global_setup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/create_dual_spawn_global_setup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAE7C,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAIvD,MAAM,WAAW,2BAA2B;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE;QAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,aAAa,CAAC;QAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,aAAa,CAAA;KAAC,CAAC;IACrF;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC;CACjE;AAED;;GAEG;AACH,eAAO,MAAM,8BAA8B,GAAI,4BAG5C,2BAA2B,KAAG,CAAC,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAmBvF,CAAC"}
+{"version":3,"file":"create_dual_spawn_global_setup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/create_dual_spawn_global_setup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,MAAM,WAAW,2BAA2B;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,aAAa,CAAC;QAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,aAAa,CAAA;KAAE,CAAC;IACvF;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnE;AAED;;GAEG;AACH,eAAO,MAAM,8BAA8B,GAAI,2BAG5C,2BAA2B,KAAG,CAAC,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAmBvF,CAAC"}

package/dist/testing/cross_backend/create_dual_spawn_global_setup.js

@@ -4,7 +4,7 @@ import { serialize_bootstrapped_handle } from './setup.js';
 /**
  * Build a vitest `globalSetup` default export that spawns both backends.
  */
-export const create_dual_spawn_global_setup = ({ configs, provide_keys = { a: 'parity_handle_a', b: 'parity_handle_b' }, }) => {
+export const create_dual_spawn_global_setup = ({ configs, provide_keys = { a: 'parity_handle_a', b: 'parity_handle_b' } }) => {
     return async (project) => {
         const a = await bootstrap_backend(configs.a());
         // Tear `a` down if `b` fails to spawn — no orphaned child process.

package/dist/testing/cross_backend/credential_header_robustness.js

@@ -152,7 +152,7 @@ export const describe_credential_header_robustness_cross_tests = (options) => {
             // parser may close without a readable response — that's also "no smuggle".
             const malformed = [
                 { label: 'CRLF header-split', value: `${GARBAGE_TOKEN}\r\nX-Injected: 1` },
-                { label: 'bare CR', value: `${GARBAGE_TOKEN}\rX-Injected: 1` },
+                { label: 'bare CR', value: `${GARBAGE_TOKEN}\rX-Injected: 1` }
             ];
             for (const { label, value } of malformed) {
                 const req = rpc_post(host, rpc_path, [`${DAEMON_TOKEN_HEADER}: ${value}`], purge_body('ctrl-char'));

package/dist/testing/cross_backend/default_backend_configs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default_backend_configs.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/default_backend_configs.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAC,sBAAsB,EAAE,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAC/E,OAAO,KAAK,EAAC,mBAAmB,EAAE,iBAAiB,EAAC,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAA2B,KAAK,gBAAgB,EAAC,MAAM,+BAA+B,CAAC;AAQ9F;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AAE3E;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,mBA2BpC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,mBAsBtC,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,iBAInC,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,iBAIrC,CAAC;AAeH,MAAM,WAAW,iCAAiC;IACjD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,oDAAoD;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,6CAA6C;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,GAC1C,MAAM,iCAAiC,KACrC,aAoCF,CAAC;AAEF,MAAM,WAAW,mCAAmC;IACnD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,GAC5C,MAAM,mCAAmC,KACvC,aA4CF,CAAC"}
+{"version":3,"file":"default_backend_configs.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/default_backend_configs.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAA4B,KAAK,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAQhG;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AAE3E;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,mBA2BpC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,mBAsBtC,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,iBAInC,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,iBAIrC,CAAC;AAeH,MAAM,WAAW,iCAAiC;IACjD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,oDAAoD;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,6CAA6C;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,GAC1C,MAAM,iCAAiC,KACrC,aAoCF,CAAC;AAEF,MAAM,WAAW,mCAAmC;IACnD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,GAC5C,MAAM,mCAAmC,KACvC,aA4CF,CAAC"}

package/dist/testing/cross_backend/default_backend_configs.js

@@ -1,6 +1,6 @@
 import '../assert_dev_env.js';
 import { build_test_backend_paths } from './build_test_backend_paths.js';
-import { default_test_bootstrap_token, default_test_cookie_keys, default_test_keeper_password, default_test_keeper_username, } from './default_secrets.js';
+import { default_test_bootstrap_token, default_test_cookie_keys, default_test_keeper_password, default_test_keeper_username } from './default_secrets.js';
 /**
  * Env var both spine binaries read to enable their login rate limiters
  * (`'true'` on / unset off). The cross-language contract for the login-security
@@ -44,7 +44,7 @@ export const ts_default_capabilities = Object.freeze({
     // Off by default — the `cell_gated_create` test policy is a fuz_app test
     // fixture, mounted only on the spine binaries (`ts_spine_*`), not generic
     // consumers.
-    cell_gated_create: false,
+    cell_gated_create: false
 });
 /**
  * Capabilities for the Rust family. The non-gating wiring facts live in
@@ -72,7 +72,7 @@ export const rust_default_capabilities = Object.freeze({
     peer_request: true,
     // Off by default — the `testing_spine_stub` preset opts in (it mounts the
     // `TestCellGatedCreateAuthorize` policy); a generic Rust consumer doesn't.
-    cell_gated_create: false,
+    cell_gated_create: false
 });
 /**
  * Shape notes for TS-family backends — wiring facts, not gating flags.
@@ -84,7 +84,7 @@ export const rust_default_capabilities = Object.freeze({
 export const ts_default_shape_notes = Object.freeze({
     bearer_auth: true,
     trusted_proxy: false,
-    login_rate_limit: false,
+    login_rate_limit: false
 });
 /**
  * Shape notes for Rust-family backends — wiring facts, not gating flags. Adds
@@ -96,7 +96,7 @@ export const ts_default_shape_notes = Object.freeze({
 export const rust_default_shape_notes = Object.freeze({
     bearer_auth: true,
     trusted_proxy: true,
-    login_rate_limit: true,
+    login_rate_limit: true
 });
 /** Bootstrap block built from the default secrets + supplied paths. */
 const build_default_bootstrap = (paths, overrides) => ({
@@ -105,7 +105,7 @@ const build_default_bootstrap = (paths, overrides) => ({
     username: default_test_keeper_username,
     password: default_test_keeper_password,
     daemon_token_path: paths.daemon_token_path,
-    ...overrides,
+    ...overrides
 });
 /**
  * Shared builder for TS-family backends (Deno + Node). Owns the common
@@ -114,7 +114,7 @@ const build_default_bootstrap = (paths, overrides) => ({
  * genuinely differs.
  */
 export const make_default_ts_backend_config = (opts) => {
-    const { name, port, start_command, database_url = 'memory://', extra_env, capabilities = ts_default_capabilities, paths = build_test_backend_paths(name), bootstrap_overrides, port_env_var = 'PORT', cookie_name = 'fuz_session', } = opts;
+    const { name, port, start_command, database_url = 'memory://', extra_env, capabilities = ts_default_capabilities, paths = build_test_backend_paths(name), bootstrap_overrides, port_env_var = 'PORT', cookie_name = 'fuz_session' } = opts;
     return {
         name,
         start_command,
@@ -133,10 +133,10 @@ export const make_default_ts_backend_config = (opts) => {
             SECRET_FUZ_COOKIE_KEYS: default_test_cookie_keys,
             FUZ_ALLOWED_ORIGINS: 'http://localhost:*',
             FUZ_BOOTSTRAP_TOKEN_PATH: paths.bootstrap_token_path,
-            ...extra_env,
+            ...extra_env
         },
         bootstrap: build_default_bootstrap(paths, bootstrap_overrides),
-        capabilities,
+        capabilities
     };
 };
 /**
@@ -146,7 +146,7 @@ export const make_default_ts_backend_config = (opts) => {
  * the 120s startup window for cargo's first-run build cost.
  */
 export const make_default_rust_backend_config = (opts) => {
-    const { name, port, start_command, database_url, extra_env, capabilities = rust_default_capabilities, paths = build_test_backend_paths(name), bootstrap_overrides, port_env_var = 'PORT', rust_log = 'info', cookie_name = 'fuz_session', } = opts;
+    const { name, port, start_command, database_url, extra_env, capabilities = rust_default_capabilities, paths = build_test_backend_paths(name), bootstrap_overrides, port_env_var = 'PORT', rust_log = 'info', cookie_name = 'fuz_session' } = opts;
     return {
         name,
         start_command,
@@ -172,9 +172,9 @@ export const make_default_rust_backend_config = (opts) => {
             // `fuz_db::run_migrations`. The `_testing_reset` RPC action
             // (per-test reset) is orthogonal.
             FUZ_TESTING_RESET_DB_ON_STARTUP: 'true',
-            ...extra_env,
+            ...extra_env
         },
         bootstrap: build_default_bootstrap(paths, bootstrap_overrides),
-        capabilities,
+        capabilities
     };
 };

package/dist/testing/cross_backend/default_spine_surface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default_spine_surface.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/default_spine_surface.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAIpD,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,8CAA8C,CAAC;AACrF,OAAO,EAAqB,KAAK,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAEpF,OAAO,EAAwB,KAAK,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAIxF,OAAO,EAAqB,KAAK,SAAS,EAAC,MAAM,0BAA0B,CAAC;AAC5E,OAAO,KAAK,EAAC,cAAc,EAAE,eAAe,EAAC,MAAM,uBAAuB,CAAC;AAC3E,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,oCAAoC,CAAC;AAezE;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,cAAc,CAAC,MAAM,CAAwC,CAAC;AAElG;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,gBAGxB,CAAC;AAEH,+CAA+C;AAC/C,MAAM,WAAW,wBAAwB;IACxC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzD;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,mBAAmB,GAC/B,KAAK,gBAAgB,EACrB,UAAU,wBAAwB,KAChC,KAAK,CAAC,eAAe,CAQvB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,GAAI,KAAK,gBAAgB,KAAG,KAAK,CAAC,SAAS,CA+B/E,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,GAAI,MAAM,MAAM,KAAG,SAC6B,CAAC;AAE3F;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,QAAO,cAM1C,CAAC"}
+{"version":3,"file":"default_spine_surface.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/default_spine_surface.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAItD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAEtF,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAI1F,OAAO,EAAsB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAe3E;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,cAAc,CAAC,MAAM,CAAwC,CAAC;AAElG;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,gBAGxB,CAAC;AAEH,+CAA+C;AAC/C,MAAM,WAAW,wBAAwB;IACxC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzD;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,mBAAmB,GAC/B,KAAK,gBAAgB,EACrB,UAAU,wBAAwB,KAChC,KAAK,CAAC,eAAe,CAQvB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,GAAI,KAAK,gBAAgB,KAAG,KAAK,CAAC,SAAS,CA+B/E,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,GAAI,MAAM,MAAM,KAAG,SAC+B,CAAC;AAE7F;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,QAAO,cAM1C,CAAC"}

package/dist/testing/cross_backend/default_spine_surface.js

@@ -14,7 +14,7 @@ import { create_test_app_surface_spec } from '../stubs.js';
 // without dragging this module's eager in-process route handlers
 // (→ `session_middleware` → `hono/cookie`). Import only the constants this
 // module uses internally; callers that need a bare constant reach for the leaf.
-import { SPINE_CELL_EDITOR_ROLE, SPINE_EXPECTED_SCHEMA_URL, SPINE_PARTICIPANT_ROLE, SPINE_RPC_PATH, } from './spine_surface_constants.js';
+import { SPINE_CELL_EDITOR_ROLE, SPINE_EXPECTED_SCHEMA_URL, SPINE_PARTICIPANT_ROLE, SPINE_RPC_PATH } from './spine_surface_constants.js';
 /**
  * Session config — cookie name matches the binary's issued session cookie
  * (`fuz_session`) so cookie-attribute assertions + jar extraction line up.
@@ -33,7 +33,7 @@ export const spine_session_options = create_session_config('fuz_session');
  */
 export const spine_roles = create_role_schema([
     { name: SPINE_CELL_EDITOR_ROLE, grant_paths: [] },
-    { name: SPINE_PARTICIPANT_ROLE, grant_paths: [GRANT_PATH_ADMIN] },
+    { name: SPINE_PARTICIPANT_ROLE, grant_paths: [GRANT_PATH_ADMIN] }
 ]);
 /**
  * Factory-form RPC endpoints over the per-test `ctx.deps`. `create_app_server`
@@ -53,8 +53,8 @@ export const spine_roles = create_role_schema([
 export const spine_rpc_endpoints = (ctx, options) => [
     {
         path: SPINE_RPC_PATH,
-        actions: create_standard_rpc_actions({ ...ctx.deps, notification_sender: options?.notification_sender ?? null }, { roles: spine_roles }),
-    },
+        actions: create_standard_rpc_actions({ ...ctx.deps, notification_sender: options?.notification_sender ?? null }, { roles: spine_roles })
+    }
 ];
 /**
  * Account REST + signup route specs under `/api/account` (bootstrap
@@ -81,7 +81,7 @@ export const create_spine_route_specs = (ctx) => [
             ip_rate_limiter: ctx.ip_rate_limiter,
             login_account_rate_limiter: ctx.login_account_rate_limiter,
             login_fail_floor_ms: 0,
-            bootstrap_status: ctx.bootstrap_status,
+            bootstrap_status: ctx.bootstrap_status
         }),
         ...create_signup_route_specs(ctx.deps, {
             session_options: spine_session_options,
@@ -92,12 +92,12 @@ export const create_spine_route_specs = (ctx) => [
             // don't each pay the 250ms timing floor. Mirrors `login_fail_floor_ms: 0`
             // above — the floor is a production timing-oracle defense, not
             // behavior any cross test asserts.
-            signup_fail_floor_ms: 0,
-        }),
+            signup_fail_floor_ms: 0
+        })
     ]),
     ...(ctx.audit_sse
         ? prefix_route_specs('/api/admin', create_audit_log_route_specs({ stream: ctx.audit_sse }))
-        : []),
+        : [])
 ];
 /**
  * The spine's `/ready` route spec — the column-presence schema-drift deploy
@@ -123,5 +123,5 @@ export const create_spine_surface_spec = () => create_test_app_surface_spec({
     session_options: spine_session_options,
     create_route_specs: create_spine_route_specs,
     rpc_endpoints: spine_rpc_endpoints,
-    bootstrap: { mode: 'surface_only' },
+    bootstrap: { mode: 'surface_only' }
 });

package/dist/testing/cross_backend/expected_schema.json

@@ -30,6 +30,7 @@
 		"last_used_at",
 		"last_used_ip",
 		"name",
+		"scope",
 		"token_hash"
 	],
 	"app_settings": ["id", "open_signup", "updated_at", "updated_by"],

package/dist/testing/cross_backend/fact_serving.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fact_serving.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/fact_serving.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAiD9B,OAAO,KAAK,EAAC,wBAAwB,EAAE,SAAS,EAAC,MAAM,YAAY,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,WAAW,2BAA4B,SAAQ,wBAAwB;IAC5E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,CAAC;CAC5C;AA8BD,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IAiOxF,CAAC"}
+{"version":3,"file":"fact_serving.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/fact_serving.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAiD9B,OAAO,KAAK,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,WAAW,2BAA4B,SAAQ,wBAAwB;IAC5E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,CAAC;CAC5C;AA8BD,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IAiOxF,CAAC"}

package/dist/testing/cross_backend/fact_serving.js

@@ -38,7 +38,7 @@ import '../assert_dev_env.js';
  */
 import { describe, assert } from 'vitest';
 import { z } from 'zod';
-import { FactHashSchema } from '@fuzdev/fuz_util/fact_hash.ts';
+import { FactHashSchema } from '@fuzdev/fuz_util/hash_schemas.ts';
 import { CellCreateOutput } from '../../auth/cell_action_specs.js';
 import { test_if } from './capabilities.js';
 import { cross_rpc_call, expect_output } from './cell_cross_helpers.js';
@@ -61,7 +61,7 @@ const fact_get = async (transport, path, headers) => {
     return {
         status: res.status,
         content_type: res.headers.get('content-type'),
-        text: await res.text(),
+        text: await res.text()
     };
 };
 export const describe_fact_serving_cross_tests = (options) => {

package/dist/testing/cross_backend/full_spine_mount.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"full_spine_mount.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/full_spine_mount.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,6BAA6B,CAAC;AAE3D,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,8CAA8C,CAAC;AAKrF,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,oCAAoC,CAAC;AASzE,2FAA2F;AAC3F,MAAM,WAAW,qBAAqB;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzD;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B,GACxC,MAAM,OAAO,EACb,SAAS,qBAAqB,KAC5B,KAAK,CAAC,SAAS,CAoCjB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,GACpC,KAAK,gBAAgB,EACrB,SAAS,qBAAqB,KAC5B,KAAK,CAAC,eAAe,CAEvB,CAAC"}
+{"version":3,"file":"full_spine_mount.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/full_spine_mount.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAKvF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAS3E,2FAA2F;AAC3F,MAAM,WAAW,qBAAqB;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACzD;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B,GACxC,MAAM,OAAO,EACb,SAAS,qBAAqB,KAC5B,KAAK,CAAC,SAAS,CAoCjB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,GACpC,KAAK,gBAAgB,EACrB,SAAS,qBAAqB,KAC5B,KAAK,CAAC,eAAe,CAEvB,CAAC"}