@fuzdev/fuz_app 0.141.0 → 0.143.0

package/dist/testing/cross_backend/ws_action_rate_limit.js

@@ -23,7 +23,9 @@ import '../assert_dev_env.js';
  *   'ip'`, public) with malformed params, from one `X-Forwarded-For` address
  *   over anonymous HTTP and over a WS whose upgrade carried the same header:
  *   the call past the cap is refused on both, while a second address keeps its
- *   own budget on both.
+ *   own budget on both. Over HTTP, IPv6 addresses bucket by their `/64`:
+ *   another address in the same `/64` is refused once one has spent the
+ *   budget, while one in the next `/64` keeps its own.
  * - **account axis at the dispatchers** — `cell_create` (`rate_limit:
  *   'account'`, on both spines' RPC and WS mounts) with malformed params: the
  *   call past the cap answers `429` over HTTP and `rate_limited` over WS, calls
@@ -84,6 +86,13 @@ const IP_LIMITED_BAD_PARAMS = { nonce: 'not_a_number' };
  */
 const XFF_IP_EXHAUSTED = '198.51.100.1';
 const XFF_IP_FRESH = '198.51.100.2';
+/**
+ * RFC 3849 documentation addresses: two in one `/64` — the second differs past
+ * bit 64 only — and one in the next `/64`. Distinct from `login_security.ts`'s.
+ */
+const XFF_V6_EXHAUSTED = '2001:db8:e3a:1::1';
+const XFF_V6_SAME_64 = '2001:db8:e3a:1:8000::2';
+const XFF_V6_OTHER_64 = '2001:db8:e3a:2::1';
 /** Generous per-response wait — the cases assert the server's answer, not a timeout. */
 const RESPONSE_TIMEOUT_MS = 5000;
 const outcome_from_frame = (status, frame) => ({
@@ -254,5 +263,16 @@ export const describe_ws_action_rate_limit_cross_tests = (options) => {
                 await ws_fresh.close();
             }
         });
+        test('an IP-limited action buckets IPv6 clients by /64', async () => {
+            const fixture = await setup_test();
+            const call = (forwarded_for) => call_http(fixture, IP_LIMITED_METHOD, IP_LIMITED_BAD_PARAMS, {
+                'x-forwarded-for': forwarded_for
+            });
+            for (let i = 1; i <= max_attempts; i++) {
+                assert_charged_not_limited(await call(XFF_V6_EXHAUSTED), `call ${i} from ${XFF_V6_EXHAUSTED}`);
+            }
+            assert_rate_limited(await call(XFF_V6_SAME_64), `a call from ${XFF_V6_SAME_64}, same /64`);
+            assert_charged_not_limited(await call(XFF_V6_OTHER_64), `a call from ${XFF_V6_OTHER_64}, the next /64`);
+        });
     });
 };

package/dist/testing/schema_introspect.js

@@ -105,7 +105,7 @@ export const SchemaSnapshot = z.object({
  * to the schema snapshot — is a gated fact, not a latent interop break.
  */
 export const MigrationTrackerEntry = z.object({
-    /** Migration namespace (e.g. `fuz_cell`, `fuz_cell_history`). */
+    /** Migration namespace (e.g. `fuz_auth`, `fuz_cell`). */
     namespace: z.string(),
     /** Migration name within the namespace (e.g. `full_cell_schema`). */
     name: z.string(),

package/dist/testing/schema_parity.d.ts

@@ -175,9 +175,10 @@ export declare const format_migration_tracker_diffs: (diffs: ReadonlyArray<Migra
  * re-bootstrapping). This catches what `assert_schema_snapshots_equal` is blind
  * to by design: the snapshot excludes the tracker, so a migration-name or
  * partitioning divergence that yields an identical *schema* (e.g. `cell_v0` vs
- * `full_cell_schema`, or `cell_history` bundled vs isolated) passes schema
- * parity but breaks the runner's positional name-prefix check at boot
- * (`name-divergence-at-N`). The error names the impls and lists every diff.
+ * `full_cell_schema`, or a table bundled into one namespace vs isolated in its
+ * own) passes schema parity but breaks the runner's positional name-prefix
+ * check at boot (`name-divergence-at-N`). The error names the impls and lists
+ * every diff.
  */
 export declare const assert_migration_trackers_equal: (a: MigrationTracker, b: MigrationTracker, labels?: SchemaDiffLabels) => void;
 //# sourceMappingURL=schema_parity.d.ts.map

package/dist/testing/schema_parity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema_parity.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/schema_parity.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,KAAK,EACX,cAAc,EAEd,gBAAgB,EAChB,cAAc,EAGd,MAAM,wBAAwB,CAAC;AAEhC,6EAA6E;AAC7E,MAAM,MAAM,UAAU,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrF;IACA,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACvB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,cAAc,CAAC;IACrC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;CACnB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACtB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC3B,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,QAAQ,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC3F;IACA,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxF;IACA,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACjC,CAAC;AAEL;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,GAAI,GAAG,cAAc,EAAE,GAAG,cAAc,KAAG,KAAK,CAAC,UAAU,CAiD5F,CAAC;AAqHF,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAC/B,OAAO,aAAa,CAAC,UAAU,CAAC,EAChC,SAAQ,gBAAqB,KAC3B,MAoEF,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,6BAA6B,GACzC,GAAG,cAAc,EACjB,GAAG,cAAc,EACjB,SAAQ,gBAAqB,KAC3B,IAUF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAC7B;IACA,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACrB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAIL;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GACnC,GAAG,gBAAgB,EACnB,GAAG,gBAAgB,KACjB,KAAK,CAAC,oBAAoB,CAwC5B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,GAC1C,OAAO,aAAa,CAAC,oBAAoB,CAAC,EAC1C,SAAQ,gBAAqB,KAC3B,MAyBF,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,+BAA+B,GAC3C,GAAG,gBAAgB,EACnB,GAAG,gBAAgB,EACnB,SAAQ,gBAAqB,KAC3B,IAUF,CAAC"}
+{"version":3,"file":"schema_parity.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/schema_parity.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,KAAK,EACX,cAAc,EAEd,gBAAgB,EAChB,cAAc,EAGd,MAAM,wBAAwB,CAAC;AAEhC,6EAA6E;AAC7E,MAAM,MAAM,UAAU,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrF;IACA,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACvB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,cAAc,CAAC;IACrC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;CACnB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACtB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC3B,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,QAAQ,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC3F;IACA,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxF;IACA,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAClC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACjC,CAAC;AAEL;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,GAAI,GAAG,cAAc,EAAE,GAAG,cAAc,KAAG,KAAK,CAAC,UAAU,CAiD5F,CAAC;AAqHF,qEAAqE;AACrE,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAC/B,OAAO,aAAa,CAAC,UAAU,CAAC,EAChC,SAAQ,gBAAqB,KAC3B,MAoEF,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,6BAA6B,GACzC,GAAG,cAAc,EACjB,GAAG,cAAc,EACjB,SAAQ,gBAAqB,KAC3B,IAUF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAC7B;IACA,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACrB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAIL;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GACnC,GAAG,gBAAgB,EACnB,GAAG,gBAAgB,KACjB,KAAK,CAAC,oBAAoB,CAwC5B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,GAC1C,OAAO,aAAa,CAAC,oBAAoB,CAAC,EAC1C,SAAQ,gBAAqB,KAC3B,MAyBF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,+BAA+B,GAC3C,GAAG,gBAAgB,EACnB,GAAG,gBAAgB,EACnB,SAAQ,gBAAqB,KAC3B,IAUF,CAAC"}

package/dist/testing/schema_parity.js

@@ -304,9 +304,10 @@ export const format_migration_tracker_diffs = (diffs, labels = {}) => {
  * re-bootstrapping). This catches what `assert_schema_snapshots_equal` is blind
  * to by design: the snapshot excludes the tracker, so a migration-name or
  * partitioning divergence that yields an identical *schema* (e.g. `cell_v0` vs
- * `full_cell_schema`, or `cell_history` bundled vs isolated) passes schema
- * parity but breaks the runner's positional name-prefix check at boot
- * (`name-divergence-at-N`). The error names the impls and lists every diff.
+ * `full_cell_schema`, or a table bundled into one namespace vs isolated in its
+ * own) passes schema parity but breaks the runner's positional name-prefix
+ * check at boot (`name-divergence-at-N`). The error names the impls and lists
+ * every diff.
  */
 export const assert_migration_trackers_equal = (a, b, labels = {}) => {
     const diffs = diff_migration_trackers(a, b);

package/dist/testing/schema_ready_fixture.d.ts

@@ -35,10 +35,8 @@ export interface SyncExpectedSchemaFixtureResult {
  * ```
  *
  * When `update` writes the fixture it emits raw `JSON.stringify` (one array
- * element per line); Prettier collapses short arrays inline, so run `gro format`
- * after `UPDATE_SCHEMA_READY=1` before committing or the format check will flag
- * the regenerated file. (The content is identical either way — the regen test
- * compares values, not formatting.)
+ * element per line). `gro format` leaves JSON untouched and the regen test compares values, not
+ * formatting, so the layout is cosmetic.
  *
  * @returns the live column map and the committed map (post-write when `update`)
  */

package/dist/testing/schema_ready_fixture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema_ready_fixture.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/schema_ready_fixture.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAmB7B,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAElF,kDAAkD;AAClD,MAAM,WAAW,gCAAgC;IAChD,+EAA+E;IAC/E,EAAE,EAAE,EAAE,CAAC;IACP,gFAAgF;IAChF,WAAW,EAAE,GAAG,GAAG,MAAM,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,+BAA+B;IAC/C,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,mEAAmE;IACnE,SAAS,EAAE,cAAc,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,4BAA4B,GACxC,SAAS,gCAAgC,KACvC,OAAO,CAAC,+BAA+B,CAQzC,CAAC"}
+{"version":3,"file":"schema_ready_fixture.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/schema_ready_fixture.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAmB7B,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAElF,kDAAkD;AAClD,MAAM,WAAW,gCAAgC;IAChD,+EAA+E;IAC/E,EAAE,EAAE,EAAE,CAAC;IACP,gFAAgF;IAChF,WAAW,EAAE,GAAG,GAAG,MAAM,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,+BAA+B;IAC/C,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,mEAAmE;IACnE,SAAS,EAAE,cAAc,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,4BAA4B,GACxC,SAAS,gCAAgC,KACvC,OAAO,CAAC,+BAA+B,CAQzC,CAAC"}

package/dist/testing/schema_ready_fixture.js

@@ -30,10 +30,8 @@ import { query_public_columns } from '../db/schema_ready.js';
  * ```
  *
  * When `update` writes the fixture it emits raw `JSON.stringify` (one array
- * element per line); Prettier collapses short arrays inline, so run `gro format`
- * after `UPDATE_SCHEMA_READY=1` before committing or the format check will flag
- * the regenerated file. (The content is identical either way — the regen test
- * compares values, not formatting.)
+ * element per line). `gro format` leaves JSON untouched and the regen test compares values, not
+ * formatting, so the layout is cosmetic.
  *
  * @returns the live column map and the committed map (post-write when `update`)
  */

package/dist/ui/auth_state.svelte.d.ts

@@ -32,6 +32,16 @@
  * @module
  */
 import { type ActorSummaryJson, type RoleGrantSummaryJson, type SessionAccount } from '../auth/account_schema.js';
+/**
+ * The message a `429` shows, from its `retry_after` (seconds).
+ *
+ * A short wait reads as one — the spines answer `retry_after: 1` when the cap
+ * is held only by attempts still in flight — rather than rounding up to a
+ * minute; a missing value reads as a minute.
+ *
+ * @param retry_after - the response's `retry_after`, when it carried one
+ */
+export declare const format_rate_limit_message: (retry_after: unknown) => string;
 /**
  * Svelte context for `AuthState`.
  * Use `auth_state_context.set(state)` in the provider and `auth_state_context.get()` to access.

package/dist/ui/auth_state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/auth_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAMH,OAAO,EACN,KAAK,gBAAgB,EAErB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,MAAM,2BAA2B,CAAC;AAGnC;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;CAA8B,CAAC;AAE9D,qBAAa,SAAS;IACrB,SAAS,UAAqB;IAC9B,QAAQ,UAAqB;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAoB;IAC/C,OAAO,EAAE,cAAc,GAAG,IAAI,CAAoB;IAClD,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAoB;IAClD,WAAW,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAkB;IAC1D;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAEtD;IACF;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAExC;IACF,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAA+C;IAEzE,gEAAgE;IAChE,eAAe,UAAqB;IAEpC;;;;;;OAMG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAItC;;;;;;;;OAQG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA6BpC;;;;;;;OAOG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CjE;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiCpF;;;;;;;OAOG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA8ClF;;;;;OAKG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CAe7B"}
+{"version":3,"file":"auth_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/auth_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAMH,OAAO,EACN,KAAK,gBAAgB,EAErB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,MAAM,2BAA2B,CAAC;AAGnC;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,GAAI,aAAa,OAAO,KAAG,MAShE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;CAA8B,CAAC;AAE9D,qBAAa,SAAS;IACrB,SAAS,UAAqB;IAC9B,QAAQ,UAAqB;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAoB;IAC/C,OAAO,EAAE,cAAc,GAAG,IAAI,CAAoB;IAClD,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAoB;IAClD,WAAW,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAkB;IAC1D;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAEtD;IACF;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAExC;IACF,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAA+C;IAEzE,gEAAgE;IAChE,eAAe,UAAqB;IAEpC;;;;;;OAMG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAItC;;;;;;;;OAQG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA6BpC;;;;;;;OAOG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAuCjE;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiCpF;;;;;;;OAOG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA2ClF;;;;;OAKG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CAe7B"}

package/dist/ui/auth_state.svelte.js

@@ -36,6 +36,26 @@ import { create_context } from '@fuzdev/fuz_ui/context_helpers.ts';
 import { ui_fetch } from './ui_fetch.js';
 import { is_role_grant_active } from '../auth/account_schema.js';
 import { ROLE_ADMIN } from '../auth/role_schema.js';
+/**
+ * The message a `429` shows, from its `retry_after` (seconds).
+ *
+ * A short wait reads as one — the spines answer `retry_after: 1` when the cap
+ * is held only by attempts still in flight — rather than rounding up to a
+ * minute; a missing value reads as a minute.
+ *
+ * @param retry_after - the response's `retry_after`, when it carried one
+ */
+export const format_rate_limit_message = (retry_after) => {
+    const seconds = typeof retry_after === 'number' && retry_after > 0 ? retry_after : 60;
+    if (seconds <= 5)
+        return 'Too many attempts. Try again in a moment.';
+    if (seconds < 60) {
+        const whole = Math.ceil(seconds);
+        return `Too many attempts. Try again in ${whole} second${whole === 1 ? '' : 's'}.`;
+    }
+    const minutes = Math.ceil(seconds / 60);
+    return `Too many attempts. Try again in ${minutes} minute${minutes === 1 ? '' : 's'}.`;
+};
 /**
  * Svelte context for `AuthState`.
  * Use `auth_state_context.set(state)` in the provider and `auth_state_context.get()` to access.
@@ -145,8 +165,7 @@ export class AuthState {
             if (response.status === 429) {
                 try {
                     const data = await response.json();
-                    const minutes = Math.ceil((data.retry_after ?? 60) / 60);
-                    this.verify_error = `Too many attempts. Try again in ${minutes} minute${minutes === 1 ? '' : 's'}.`;
+                    this.verify_error = format_rate_limit_message(data.retry_after);
                 }
                 catch {
                     this.verify_error = 'Too many attempts. Try again later.';
@@ -234,8 +253,7 @@ export class AuthState {
             if (response.status === 429) {
                 try {
                     const data = await response.json();
-                    const minutes = Math.ceil((data.retry_after ?? 60) / 60);
-                    this.verify_error = `Too many attempts. Try again in ${minutes} minute${minutes === 1 ? '' : 's'}.`;
+                    this.verify_error = format_rate_limit_message(data.retry_after);
                 }
                 catch {
                     this.verify_error = 'Too many attempts. Try again later.';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.141.0",
+  "version": "0.143.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",

package/dist/db/cell_history_ddl.d.ts

@@ -1,38 +0,0 @@
-/**
- * Cell history PG schema (schema only).
- *
- * Lightweight references to cell state snapshots. Heavy data (serialized
- * cell bytes) lives in the fact store; `fact_hash` points there. The
- * snapshot lifecycle (when to serialize, hash, store, and record) is
- * deferred to a future iteration — this only stages the table so
- * downstream code can target a stable schema. The table ships
- * present-but-unwritten.
- *
- * `fact_hash` is intentionally **not** a foreign key to `fact(hash)` —
- * snapshots may be evicted by GC policy while history rows remain as audit
- * traces, and federation may target facts on another instance.
- *
- * Depends on `CELL_MIGRATION_NS` (FK on `cell.id`).
- *
- * @module
- */
-import type { Migration, MigrationNamespace } from './migrate.js';
-/** `cell_history` table — append-only log of cell snapshot references. */
-export declare const CELL_HISTORY_SCHEMA = "\nCREATE TABLE IF NOT EXISTS cell_history (\n\tid BIGSERIAL PRIMARY KEY,\n\tcell_id UUID NOT NULL REFERENCES cell(id) ON DELETE CASCADE,\n\tfact_hash TEXT NOT NULL,\n\taction_id UUID,\n\tcreated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\n)";
-/**
- * Cell-history indexes.
- *
- * - `idx_cell_history_cell`: per-cell timeline reads (newest first).
- * - `idx_cell_history_fact`: fact → cells reverse lookup for GC liveness
- *   and provenance queries.
- */
-export declare const CELL_HISTORY_INDEXES: Array<string>;
-/** Tables created by `CELL_HISTORY_MIGRATION_NS`, in drop order. */
-export declare const CELL_HISTORY_DROP_TABLES: readonly ["cell_history"];
-/** Cell-history migrations. */
-export declare const CELL_HISTORY_MIGRATIONS: Array<Migration>;
-/** Namespace identifier for cell-history migrations. */
-export declare const CELL_HISTORY_MIGRATION_NAMESPACE = "fuz_cell_history";
-/** Migration namespace consumed by `run_migrations`. */
-export declare const CELL_HISTORY_MIGRATION_NS: MigrationNamespace;
-//# sourceMappingURL=cell_history_ddl.d.ts.map

package/dist/db/cell_history_ddl.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cell_history_ddl.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/cell_history_ddl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElE,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,gPAO9B,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAK9C,CAAC;AAEF,oEAAoE;AACpE,eAAO,MAAM,wBAAwB,2BAA4B,CAAC;AAElE,+BAA+B;AAC/B,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,SAAS,CAUpD,CAAC;AAEF,wDAAwD;AACxD,eAAO,MAAM,gCAAgC,qBAAqB,CAAC;AAEnE,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,EAAE,kBAGvC,CAAC"}

package/dist/db/cell_history_ddl.js

@@ -1,61 +0,0 @@
-/**
- * Cell history PG schema (schema only).
- *
- * Lightweight references to cell state snapshots. Heavy data (serialized
- * cell bytes) lives in the fact store; `fact_hash` points there. The
- * snapshot lifecycle (when to serialize, hash, store, and record) is
- * deferred to a future iteration — this only stages the table so
- * downstream code can target a stable schema. The table ships
- * present-but-unwritten.
- *
- * `fact_hash` is intentionally **not** a foreign key to `fact(hash)` —
- * snapshots may be evicted by GC policy while history rows remain as audit
- * traces, and federation may target facts on another instance.
- *
- * Depends on `CELL_MIGRATION_NS` (FK on `cell.id`).
- *
- * @module
- */
-/** `cell_history` table — append-only log of cell snapshot references. */
-export const CELL_HISTORY_SCHEMA = `
-CREATE TABLE IF NOT EXISTS cell_history (
-	id BIGSERIAL PRIMARY KEY,
-	cell_id UUID NOT NULL REFERENCES cell(id) ON DELETE CASCADE,
-	fact_hash TEXT NOT NULL,
-	action_id UUID,
-	created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
-)`;
-/**
- * Cell-history indexes.
- *
- * - `idx_cell_history_cell`: per-cell timeline reads (newest first).
- * - `idx_cell_history_fact`: fact → cells reverse lookup for GC liveness
- *   and provenance queries.
- */
-export const CELL_HISTORY_INDEXES = [
-    `CREATE INDEX IF NOT EXISTS idx_cell_history_cell
-		ON cell_history(cell_id, created_at DESC)`,
-    `CREATE INDEX IF NOT EXISTS idx_cell_history_fact
-		ON cell_history(fact_hash)`
-];
-/** Tables created by `CELL_HISTORY_MIGRATION_NS`, in drop order. */
-export const CELL_HISTORY_DROP_TABLES = ['cell_history'];
-/** Cell-history migrations. */
-export const CELL_HISTORY_MIGRATIONS = [
-    {
-        name: 'full_cell_history_schema',
-        up: async (db) => {
-            await db.query(CELL_HISTORY_SCHEMA);
-            for (const sql of CELL_HISTORY_INDEXES) {
-                await db.query(sql);
-            }
-        }
-    }
-];
-/** Namespace identifier for cell-history migrations. */
-export const CELL_HISTORY_MIGRATION_NAMESPACE = 'fuz_cell_history';
-/** Migration namespace consumed by `run_migrations`. */
-export const CELL_HISTORY_MIGRATION_NS = {
-    namespace: CELL_HISTORY_MIGRATION_NAMESPACE,
-    migrations: CELL_HISTORY_MIGRATIONS
-};