@fuzdev/fuz_app 0.143.0 → 0.145.0

package/dist/testing/cross_backend/fact_serving.js

@@ -26,7 +26,10 @@ import '../assert_dev_env.js';
  *
  * Facts are seeded **embedded** via `_testing_put_fact` (the cross-process
  * driver has no DB handle); the referencing cell via the `cell_create` RPC
- * (`extract_refs` lifts the `blake3:` hash in `data` into `cell.refs`). Gated
+ * (the hash, a whole string value in `data`, is derived into `cell.refs`). A
+ * non-admin owner's cell may reference only a fact it holds, so a fact a
+ * non-admin references is put with that owner as its `holder` (the keeper is
+ * a global admin, whom ref admission doesn't gate). Gated
  * on `capabilities.fact_serving`; runs under every `cross_backend_*` project —
  * the TS spine binary and the Rust `testing_spine_stub` both mount the serve
  * routes + the seeder.
@@ -52,6 +55,21 @@ const NIL_UUID = '00000000-0000-0000-0000-000000000000';
  * fails here rather than silently downstream.
  */
 const TestingPutFactOutput = z.strictObject({ hash: FactHashSchema });
+/**
+ * Seed an embedded fact over the daemon channel via `_testing_put_fact`;
+ * returns its `blake3:` hash. A `holder` is recorded in `fact_holder` (a
+ * deduplicated put included), as a real upload records its uploader.
+ *
+ * @param fixture - the test fixture (its daemon token drives the backdoor)
+ * @param rpc_path - the backend's RPC path
+ * @param input - the content, optional content type, and optional holder
+ * @returns the fact hash
+ */
+export const cross_put_fact = async (fixture, rpc_path, input) => expect_output(await cross_rpc_call(
+// Origin-free transport — the daemon-token middleware discards the
+// credential when an `Origin` / `Referer` is present (browser
+// context), and cross-process `fixture.transport` auto-adds `Origin`.
+fixture.fresh_transport({ origin: null }), rpc_path, '_testing_put_fact', input, fixture.create_daemon_token_headers()), TestingPutFactOutput).hash;
 /** GET a fact over a cross-process `FetchTransport`; returns `{status, content_type, text}`. */
 const fact_get = async (transport, path, headers) => {
     const res = await transport(path, { method: 'GET', headers });
@@ -64,12 +82,8 @@ const fact_get = async (transport, path, headers) => {
 export const describe_fact_serving_cross_tests = (options) => {
     const { setup_test, setup_test_multi_actor, capabilities } = options;
     const rpc_path = options.rpc_path ?? SPINE_RPC_PATH;
-    /** Seed an embedded fact over the daemon channel; returns its `blake3:` hash. */
-    const put_fact = async (fixture, content, content_type) => expect_output(await cross_rpc_call(
-    // Origin-free transport — the daemon-token middleware discards the
-    // credential when an `Origin` / `Referer` is present (browser
-    // context), and cross-process `fixture.transport` auto-adds `Origin`.
-    fixture.fresh_transport({ origin: null }), rpc_path, '_testing_put_fact', content_type === undefined ? { content } : { content, content_type }, fixture.create_daemon_token_headers()), TestingPutFactOutput).hash;
+    /** Seed an embedded system-put fact; returns its `blake3:` hash. */
+    const put_fact = (fixture, content, content_type) => cross_put_fact(fixture, rpc_path, content_type === undefined ? { content } : { content, content_type });
     /**
      * Create a cell referencing `hash` (`extract_refs` lifts it into `cell.refs`).
      * Pass `acting` when the caller's account holds more than one actor —
@@ -96,8 +110,16 @@ export const describe_fact_serving_cross_tests = (options) => {
             const fixture = await setup_test();
             const a = await fixture.create_account({ username: 'fact_owner_a' });
             const b = await fixture.create_account({ username: 'fact_owner_b' });
-            // One fact, identical bytes from both owners — deduped to a single row.
-            const hash = await put_fact(fixture, 'shared-deduped-bytes');
+            // One fact, identical bytes put by both owners — deduped to a single
+            // row, each owner a holder.
+            const hash = await cross_put_fact(fixture, rpc_path, {
+                content: 'shared-deduped-bytes',
+                holder: a.actor.id
+            });
+            assert.strictEqual(await cross_put_fact(fixture, rpc_path, {
+                content: 'shared-deduped-bytes',
+                holder: b.actor.id
+            }), hash);
             const t = fixture.fresh_transport();
             const a_cell = await create_cell_with_ref(t, a.create_session_headers(), hash, 'private');
             const b_cell = await create_cell_with_ref(t, b.create_session_headers(), hash, 'public');

package/dist/testing/cross_backend/testing_reset_actions.d.ts

@@ -261,8 +261,11 @@ export declare const create_testing_drain_effects_action: (audit: AuditEmitter)
  * cross-process fact-serving suite, which drives over real HTTP and has no
  * `PgFactStore` to call. Hashes the UTF-8 `content` (blake3, via
  * `fact_hash_bytes` — the same hash the Rust `_testing_put_fact` computes),
- * inserts the row idempotently, and returns `{hash}`. The referencing cell is
- * seeded separately via the `cell_create` RPC. Embedded-only is enough for the
+ * inserts the row idempotently, and returns `{hash}`. `holder` names the actor
+ * the put is on behalf of — recorded in `fact_holder` (deduplicated puts
+ * included), as a real upload records its uploader, so the suites can drive
+ * cell ref admission; absent, the put is a system put with no holder. The
+ * referencing cell is seeded separately via the `cell_create` RPC. Embedded-only is enough for the
  * authz assertions (cell-scoped admit, cross-owner-no-leak, 404-mask, bare-hash
  * admin-only); external / X-Accel parity stays covered by the forge's own gate.
  *
@@ -283,6 +286,7 @@ export declare const testing_put_fact_action_spec: {
     readonly input: z.ZodObject<{
         content: z.ZodString;
         content_type: z.ZodOptional<z.ZodString>;
+        holder: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>;
     readonly output: z.ZodObject<{
         hash: z.ZodString & z.ZodType<import("@fuzdev/fuz_util/hash_schemas.js").FactHash, string, z.core.$ZodTypeInternals<import("@fuzdev/fuz_util/hash_schemas.js").FactHash, string>>;

package/dist/testing/cross_backend/testing_reset_actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing_reset_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/testing_reset_actions.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAc,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAMzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAsBzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCQ,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;CAWA,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;CAwBC,CAAC;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC,GAAI,OAAO,YAAY,KAAG,SAIvE,CAAC;AAEJ;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;CAeK,CAAC;AAE/C,kFAAkF;AAClF,eAAO,MAAM,iCAAiC,mBAAmB,CAAC;AAElE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,QAAmB,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAE9D,8FAA8F;AAC9F,eAAO,MAAM,iCAAiC,kBAAkB,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;CAwBN,CAAC;AAE/C;;;;;GAKG;AACH,eAAO,MAAM,yCAAyC,QAAO,SAmB1D,CAAC;AAEJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWF,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,qCAAqC,QAAO,SAGvD,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;CAYJ,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,uCAAuC,QAAO,SAGzD,CAAC;AAEH,0FAA0F;AAC1F,eAAO,MAAM,6CAA6C,IAAI,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,6CAA6C,KAAK,CAAC;AAShE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,6CAA6C;;;;;;;;;;;;;;;;;;;;CA2BZ,CAAC;AAE/C,2FAA2F;AAC3F,eAAO,MAAM,+CAA+C,QAAO,SAYhE,CAAC;AAEJ;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAaF,CAAC;AAkB/C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qCAAqC,GACjD,SAAS,aAAa,CAAC,SAAS,CAAC,KAC/B,SAMF,CAAC;AAEF,4CAA4C;AAC5C,MAAM,WAAW,2BAA2B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;IAC9C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACxD;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,OAAO,EACb,SAAS,2BAA2B,KAClC,KAAK,CAAC,SAAS,CA6IjB,CAAC"}
+{"version":3,"file":"testing_reset_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/testing_reset_actions.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAc,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAOzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAsBzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCQ,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;CAWA,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;CAwBC,CAAC;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,mCAAmC,GAAI,OAAO,YAAY,KAAG,SAIvE,CAAC;AAEJ;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;CAgBK,CAAC;AAE/C,kFAAkF;AAClF,eAAO,MAAM,iCAAiC,mBAAmB,CAAC;AAElE;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,QAAmB,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAE9D,8FAA8F;AAC9F,eAAO,MAAM,iCAAiC,kBAAkB,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;CAwBN,CAAC;AAE/C;;;;;GAKG;AACH,eAAO,MAAM,yCAAyC,QAAO,SAmB1D,CAAC;AAEJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWF,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,qCAAqC,QAAO,SAGvD,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qCAAqC;;;;;;;;;;;;;;;;;;;;CAYJ,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,uCAAuC,QAAO,SAGzD,CAAC;AAEH,0FAA0F;AAC1F,eAAO,MAAM,6CAA6C,IAAI,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,6CAA6C,KAAK,CAAC;AAShE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,6CAA6C;;;;;;;;;;;;;;;;;;;;CA2BZ,CAAC;AAE/C,2FAA2F;AAC3F,eAAO,MAAM,+CAA+C,QAAO,SAYhE,CAAC;AAEJ;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAaF,CAAC;AAkB/C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qCAAqC,GACjD,SAAS,aAAa,CAAC,SAAS,CAAC,KAC/B,SAMF,CAAC;AAEF,4CAA4C;AAC5C,MAAM,WAAW,2BAA2B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD;;;;;;OAMG;IACH,QAAQ,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;IAC9C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACxD;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,OAAO,EACb,SAAS,2BAA2B,KAClC,KAAK,CAAC,SAAS,CAkJjB,CAAC"}

package/dist/testing/cross_backend/testing_reset_actions.js

@@ -83,6 +83,7 @@ import { jsonrpc_errors } from '../../http/jsonrpc_errors.js';
 import { emit_after_commit } from '../../http/pending_effects.js';
 import { protocol_action_specs } from '../../actions/protocol.js';
 import { query_put_fact } from '../../db/fact_queries.js';
+import { query_put_fact_holder } from '../../db/fact_holder_queries.js';
 import { ROLE_ADMIN, ROLE_KEEPER } from '../../auth/role_schema.js';
 import { query_schema_snapshot, SchemaSnapshot, query_migration_tracker, MigrationTracker } from '../schema_introspect.js';
 import { ActionManifest, build_action_manifest } from './action_manifest.js';
@@ -262,8 +263,11 @@ export const create_testing_drain_effects_action = (audit) => rpc_action(testing
  * cross-process fact-serving suite, which drives over real HTTP and has no
  * `PgFactStore` to call. Hashes the UTF-8 `content` (blake3, via
  * `fact_hash_bytes` — the same hash the Rust `_testing_put_fact` computes),
- * inserts the row idempotently, and returns `{hash}`. The referencing cell is
- * seeded separately via the `cell_create` RPC. Embedded-only is enough for the
+ * inserts the row idempotently, and returns `{hash}`. `holder` names the actor
+ * the put is on behalf of — recorded in `fact_holder` (deduplicated puts
+ * included), as a real upload records its uploader, so the suites can drive
+ * cell ref admission; absent, the put is a system put with no holder. The
+ * referencing cell is seeded separately via the `cell_create` RPC. Embedded-only is enough for the
  * authz assertions (cell-scoped admit, cross-owner-no-leak, 404-mask, bare-hash
  * admin-only); external / X-Accel parity stays covered by the forge's own gate.
  *
@@ -279,7 +283,8 @@ export const testing_put_fact_action_spec = {
     side_effects: true,
     input: z.strictObject({
         content: z.string(),
-        content_type: z.string().optional()
+        content_type: z.string().optional(),
+        holder: Uuid.optional()
     }),
     output: z.strictObject({ hash: FactHashSchema }),
     async: true,
@@ -719,6 +724,11 @@ export const create_testing_actions = (deps, options) => {
                 content_type: input.content_type ?? null,
                 size: bytes.length
             });
+            // the holder row, on a dedup hit too (`PgFactStore`'s put records it the
+            // same way); an unknown actor fails the FK
+            if (input.holder !== undefined) {
+                await query_put_fact_holder({ db: ctx.db }, input.holder, hash);
+            }
             return { hash };
         }),
         create_testing_drain_effects_action(deps.audit),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.143.0",
+  "version": "0.145.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",
@@ -36,7 +36,7 @@
     "@fuzdev/fuz_css": ">=0.70.0",
     "@fuzdev/fuz_schema": "^0.5.0",
     "@fuzdev/fuz_util": ">=0.77.0",
-    "@fuzdev/pglet-wasm": ">=0.1.1",
+    "@fuzdev/pglet-wasm": ">=0.1.2",
     "@hono/bun": ">=1",
     "@hono/deno": ">=1",
     "@hono/node-server": ">=1",
@@ -98,7 +98,7 @@
     "@fuzdev/fuz_util": "^0.77.0",
     "@fuzdev/gro": "^0.220.0",
     "@fuzdev/mdz": "^0.6.0",
-    "@fuzdev/pglet-wasm": "^0.1.1",
+    "@fuzdev/pglet-wasm": "^0.1.2",
     "@hono/bun": "^1.0.1",
     "@hono/deno": "^1.0.3",
     "@hono/node-server": "^1.19.14",