@fuzdev/fuz_app 0.110.0 → 0.110.1

package/dist/testing/admin_integration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin_integration.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/admin_integration.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAgC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAc,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAW3E,OAAO,EAKN,KAAK,uBAAuB,EAC5B,MAAM,kBAAkB,CAAC;AAkB1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,0BAA0B,CAAC;AAEvE;;GAEG;AACH,MAAM,WAAW,mCAAmC;IACnD;;;;OAIG;IACH,UAAU,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B,uCAAuC;IACvC,YAAY,EAAE,mBAAmB,CAAC;IAClC,uFAAuF;IACvF,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,4GAA4G;IAC5G,KAAK,EAAE,gBAAgB,CAAC;IACxB;;;OAGG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAiBD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yCAAyC,GACrD,SAAS,mCAAmC,KAC1C,IA23BF,CAAC"}
+{"version":3,"file":"admin_integration.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/admin_integration.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAgC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAc,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAW3E,OAAO,EAKN,KAAK,uBAAuB,EAC5B,MAAM,kBAAkB,CAAC;AAmB1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,0BAA0B,CAAC;AAYvE;;GAEG;AACH,MAAM,WAAW,mCAAmC;IACnD;;;;OAIG;IACH,UAAU,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B,uCAAuC;IACvC,YAAY,EAAE,mBAAmB,CAAC;IAClC,uFAAuF;IACvF,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,4GAA4G;IAC5G,KAAK,EAAE,gBAAgB,CAAC;IACxB;;;OAGG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAiBD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yCAAyC,GACrD,SAAS,mCAAmC,KAC1C,IAm5BF,CAAC"}

package/dist/testing/admin_integration.js

@@ -36,6 +36,14 @@ import { rpc_call_for_spec, require_rpc_endpoint_path, resolve_rpc_endpoints_for
 import { role_grant_offer_create_action_spec, role_grant_revoke_action_spec } from '../auth/role_grant_offer_action_specs.js';
 import { admin_account_list_action_spec, ADMIN_ACCOUNT_LIST_LIMIT_MAX, admin_session_list_action_spec, admin_session_revoke_all_action_spec, admin_token_revoke_all_action_spec, audit_log_list_action_spec, audit_log_role_grant_history_action_spec } from '../auth/admin_action_specs.js';
 import { account_token_create_action_spec, account_verify_action_spec } from '../auth/account_action_specs.js';
+/**
+ * How long a failure-audit read waits for the pool-routed row to land.
+ */
+const AUDIT_FAILURE_ROW_TIMEOUT = 2000;
+/**
+ * Gap between failure-audit read attempts.
+ */
+const AUDIT_FAILURE_ROW_POLL_INTERVAL = 20;
 /**
  * Pick a role for admin-grant testing, preferring a non-admin app-defined
  * role whose `RoleSpec.grant_paths` includes `'admin'` (the
@@ -112,6 +120,43 @@ export const describe_standard_admin_integration_tests = (options) => {
          * the cross-suite contract.
          */
         const offer_and_accept = (args) => role_grant_offer_and_accept({ ...args, rpc_path });
+        /**
+         * Read `audit_log_list` for `event_type` until a failure-outcome row
+         * appears, or the deadline passes.
+         *
+         * Failure audits are **pool-routed** on both spines — the write is
+         * deliberately detached from the request transaction so the forensic row
+         * survives the rollback that discards the attempted mutation. A single
+         * read taken straight after the refusal therefore races that write. The
+         * TS spine wins the race by construction (`create_test_app` sets
+         * `await_pending_effects: true`, so the emit is awaited before the
+         * response returns) and the first attempt succeeds; the Rust spine emits
+         * from a detached task, so under load the row can land after the read —
+         * observed as a load-dependent drop of the revoke-all failure-audit
+         * cases in a busy cross-process run.
+         *
+         * The cross-backend conformance suites reach for the deterministic
+         * `_testing_drain_effects` barrier instead. That action is test-binary
+         * only, and this suite also runs against consumers' production RPC
+         * surfaces where it isn't mounted — hence a bounded poll.
+         */
+        const read_failure_audit_event = async (fixture, event_type) => {
+            const deadline = Date.now() + AUDIT_FAILURE_ROW_TIMEOUT;
+            for (;;) {
+                const audit_res = await rpc_call_for_spec({
+                    app: { request: fixture.transport },
+                    path: rpc_path,
+                    spec: audit_log_list_action_spec,
+                    params: { event_type },
+                    headers: fixture.create_session_headers()
+                });
+                assert.ok(audit_res.ok, 'audit_log_list should succeed');
+                const failure = audit_res.result.events.find((e) => e.outcome === 'failure');
+                if (failure || Date.now() >= deadline)
+                    return failure;
+                await new Promise((resolve) => setTimeout(resolve, AUDIT_FAILURE_ROW_POLL_INTERVAL));
+            }
+        };
         // --- 1. Admin account listing (RPC) ---
         describe('admin account listing', () => {
             test('admin can list all accounts', async () => {
@@ -476,15 +521,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                 // Failure audit row should be visible on the audit-log feed.
                 // `target_account_id` is null (FK prevents referencing a missing id)
                 // — the probed id is preserved under `metadata.attempted_account_id`.
-                const audit_res = await rpc_call_for_spec({
-                    app: { request: fixture.transport },
-                    path: rpc_path,
-                    spec: audit_log_list_action_spec,
-                    params: { event_type: 'session_revoke_all' },
-                    headers: fixture.create_session_headers()
-                });
-                assert.ok(audit_res.ok, 'audit_log_list should succeed');
-                const failure = audit_res.result.events.find((e) => e.outcome === 'failure');
+                const failure = await read_failure_audit_event(fixture, 'session_revoke_all');
                 assert.ok(failure, 'Expected a failure-outcome session_revoke_all audit event');
                 assert.strictEqual(failure.target_account_id, null);
                 const failure_meta = failure.metadata;
@@ -504,15 +541,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                 assert.ok(!res.ok, 'Expected 404 for missing account');
                 assert.strictEqual(res.status, 404);
                 assert.strictEqual(res.error.data.reason, 'account_not_found');
-                const audit_res = await rpc_call_for_spec({
-                    app: { request: fixture.transport },
-                    path: rpc_path,
-                    spec: audit_log_list_action_spec,
-                    params: { event_type: 'token_revoke_all' },
-                    headers: fixture.create_session_headers()
-                });
-                assert.ok(audit_res.ok, 'audit_log_list should succeed');
-                const failure = audit_res.result.events.find((e) => e.outcome === 'failure');
+                const failure = await read_failure_audit_event(fixture, 'token_revoke_all');
                 assert.ok(failure, 'Expected a failure-outcome token_revoke_all audit event');
                 assert.strictEqual(failure.target_account_id, null);
                 const failure_meta = failure.metadata;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.110.0",
+  "version": "0.110.1",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",