@fuzdev/fuz_app 0.147.0 → 0.149.0

package/dist/testing/cross_backend/provided_context.d.ts

@@ -0,0 +1,28 @@
+import '../assert_dev_env.js';
+import { type ReconstructedBootstrappedBackendHandle, type SerializableBootstrappedBackendHandle } from './setup.js';
+declare module 'vitest' {
+    interface ProvidedContext {
+        /** The single-backend project's handle (`create_cross_backend_global_setup`). */
+        backend_handle: SerializableBootstrappedBackendHandle;
+        /** A dual-spawn project's first handle (`create_dual_spawn_global_setup`'s default keys). */
+        parity_handle_a: SerializableBootstrappedBackendHandle;
+        /** A dual-spawn project's second handle. */
+        parity_handle_b: SerializableBootstrappedBackendHandle;
+    }
+}
+/**
+ * The backend the project's `globalSetup` spawned, rebuilt from the provided
+ * `backend_handle`. Call at a test file's top level.
+ */
+export declare const inject_backend_handle: () => ReconstructedBootstrappedBackendHandle;
+/** The two backends a dual-spawn project's `globalSetup` spawned, under the default keys. */
+export interface InjectedParityHandles {
+    readonly a: ReconstructedBootstrappedBackendHandle;
+    readonly b: ReconstructedBootstrappedBackendHandle;
+}
+/**
+ * The two backends a dual-spawn project provides as `parity_handle_a` /
+ * `parity_handle_b`, rebuilt. Call at a test file's top level.
+ */
+export declare const inject_parity_handles: () => InjectedParityHandles;
+//# sourceMappingURL=provided_context.d.ts.map

package/dist/testing/cross_backend/provided_context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provided_context.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/provided_context.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAwB9B,OAAO,EAEN,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC1C,MAAM,YAAY,CAAC;AAEpB,OAAO,QAAQ,QAAQ,CAAC;IACvB,UAAiB,eAAe;QAC/B,iFAAiF;QACjF,cAAc,EAAE,qCAAqC,CAAC;QACtD,6FAA6F;QAC7F,eAAe,EAAE,qCAAqC,CAAC;QACvD,4CAA4C;QAC5C,eAAe,EAAE,qCAAqC,CAAC;KACvD;CACD;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,QAAO,sCACiB,CAAC;AAE3D,6FAA6F;AAC7F,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,CAAC,EAAE,sCAAsC,CAAC;IACnD,QAAQ,CAAC,CAAC,EAAE,sCAAsC,CAAC;CACnD;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,QAAO,qBAGvC,CAAC"}

package/dist/testing/cross_backend/provided_context.js

@@ -0,0 +1,35 @@
+import '../assert_dev_env.js';
+/**
+ * The vitest `ProvidedContext` keys the cross-backend global setups provide,
+ * and the helpers a `*.cross.test.ts` file reads them with.
+ *
+ * `create_cross_backend_global_setup` provides one backend's handle as
+ * `backend_handle`; `create_dual_spawn_global_setup` provides two, as
+ * `parity_handle_a` / `parity_handle_b` by default. This module augments
+ * vitest's `ProvidedContext` with those keys, so a test file that imports
+ * `inject_backend_handle` (or `inject_parity_handles`) gets the typed `inject`
+ * with no augmentation of its own. A project providing other keys — a dual
+ * spawn under its own `provide_keys`, a probe result — augments
+ * `ProvidedContext` for those in its own module, beside this one.
+ *
+ * vitest refuses a value that isn't serializable, so the handles cross as
+ * `SerializableBootstrappedBackendHandle`; the helpers rebuild a usable handle
+ * with `reconstruct_bootstrapped_handle`.
+ *
+ * @module
+ */
+import { inject } from 'vitest';
+import { reconstruct_bootstrapped_handle } from './setup.js';
+/**
+ * The backend the project's `globalSetup` spawned, rebuilt from the provided
+ * `backend_handle`. Call at a test file's top level.
+ */
+export const inject_backend_handle = () => reconstruct_bootstrapped_handle(inject('backend_handle'));
+/**
+ * The two backends a dual-spawn project provides as `parity_handle_a` /
+ * `parity_handle_b`, rebuilt. Call at a test file's top level.
+ */
+export const inject_parity_handles = () => ({
+    a: reconstruct_bootstrapped_handle(inject('parity_handle_a')),
+    b: reconstruct_bootstrapped_handle(inject('parity_handle_b'))
+});

package/dist/testing/cross_backend/query_shape.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query_shape.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/query_shape.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAwC9B,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG,uCAAuC,CAAC;AAQjF,eAAO,MAAM,gCAAgC,GAAI,SAAS,0BAA0B,KAAG,IAkJtF,CAAC"}
+{"version":3,"file":"query_shape.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/query_shape.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAwC9B,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG,uCAAuC,CAAC;AAKjF,eAAO,MAAM,gCAAgC,GAAI,SAAS,0BAA0B,KAAG,IAqJtF,CAAC"}

package/dist/testing/cross_backend/query_shape.js

@@ -19,7 +19,7 @@ import '../assert_dev_env.js';
  *   first-wins; a duplicated `method` must dispatch the first one on every
  *   backend (a last-wins reader dispatches a different method per backend on
  *   the same request).
- * - **`GET /api/facts/:hash`** (gated on `capabilities.fact_serving`) —
+ * - **`GET /api/facts/:hash`** (gated on `capabilities.fact_serving_admin_hash`) —
  *   strict query schema: unknown keys and a malformed `acting` are 400
  *   `invalid_query_params` even for an anonymous caller (query precedes the
  *   401 guard), while a duplicated `acting` takes the first occurrence.
@@ -35,9 +35,7 @@ import { describe, test, assert } from 'vitest';
 import { account_verify_action_spec } from '../../auth/account_action_specs.js';
 import { ERROR_INVALID_QUERY_PARAMS } from '../../http/error_schemas.js';
 import { test_if } from './capabilities.js';
-import { SPINE_RPC_PATH } from './spine_surface_constants.js';
-/** The status route every spine serves (bundled into the account family). */
-const STATUS_PATH = '/api/account/status';
+import { SPINE_ACCOUNT_STATUS_PATH, SPINE_RPC_PATH } from './spine_surface_constants.js';
 /** A well-formed blake3 hash that references no stored fact. */
 const MISSING_HASH = `blake3:${'a'.repeat(64)}`;
 export const describe_query_shape_cross_tests = (options) => {
@@ -51,7 +49,7 @@ export const describe_query_shape_cross_tests = (options) => {
             // persona; last-wins would fall through to `actor: null`, and a
             // derived-serde extractor would 400 before the handler ran.
             const nil = '00000000-0000-0000-0000-000000000000';
-            const res = await fixture.transport(`${STATUS_PATH}?acting=${fixture.actor.id}&acting=${nil}`, { method: 'GET', headers: fixture.create_session_headers() });
+            const res = await fixture.transport(`${SPINE_ACCOUNT_STATUS_PATH}?acting=${fixture.actor.id}&acting=${nil}`, { method: 'GET', headers: fixture.create_session_headers() });
             assert.strictEqual(res.status, 200);
             const body = (await res.json());
             assert.strictEqual(body.actor?.id, fixture.actor.id, 'first acting occurrence must win');
@@ -60,7 +58,7 @@ export const describe_query_shape_cross_tests = (options) => {
             const fixture = await setup_test();
             // The keeper has one actor: an omitted selector resolves it, while a
             // malformed one answers account-only.
-            const omitted = await fixture.transport(STATUS_PATH, {
+            const omitted = await fixture.transport(SPINE_ACCOUNT_STATUS_PATH, {
                 method: 'GET',
                 headers: fixture.create_session_headers()
             });
@@ -68,7 +66,7 @@ export const describe_query_shape_cross_tests = (options) => {
             const omitted_body = (await omitted.json());
             assert.strictEqual(omitted_body.actor?.id, fixture.actor.id);
             for (const raw of ['not-a-uuid', '', `"${fixture.actor.id}"`]) {
-                const res = await fixture.transport(`${STATUS_PATH}?acting=${encodeURIComponent(raw)}`, {
+                const res = await fixture.transport(`${SPINE_ACCOUNT_STATUS_PATH}?acting=${encodeURIComponent(raw)}`, {
                     method: 'GET',
                     headers: fixture.create_session_headers()
                 });
@@ -83,14 +81,14 @@ export const describe_query_shape_cross_tests = (options) => {
             // The status route has no query schema — an anonymous prober with a
             // junk query must hear the same 401 as a clean one (a pre-handler
             // query reject here is a backend fingerprint).
-            const dup = await anon(`${STATUS_PATH}?acting=a&acting=b`, { method: 'GET' });
+            const dup = await anon(`${SPINE_ACCOUNT_STATUS_PATH}?acting=a&acting=b`, { method: 'GET' });
             assert.strictEqual(dup.status, 401);
-            const unknown = await anon(`${STATUS_PATH}?foo=1&bar=2`, { method: 'GET' });
+            const unknown = await anon(`${SPINE_ACCOUNT_STATUS_PATH}?foo=1&bar=2`, { method: 'GET' });
             assert.strictEqual(unknown.status, 401);
         });
         test_if(capabilities.account_status, 'status: unknown query keys are ignored for an authed caller (no strict schema)', async () => {
             const fixture = await setup_test();
-            const res = await fixture.transport(`${STATUS_PATH}?foo=1`, {
+            const res = await fixture.transport(`${SPINE_ACCOUNT_STATUS_PATH}?foo=1`, {
                 method: 'GET',
                 headers: fixture.create_session_headers()
             });
@@ -107,7 +105,7 @@ export const describe_query_shape_cross_tests = (options) => {
             assert.strictEqual(body.id, 7, 'first id occurrence must win');
             assert.ok(body.result !== undefined, 'first method occurrence must dispatch');
         });
-        test_if(capabilities.fact_serving, 'bare-hash facts: unknown query key → 400 invalid_query_params, even anonymous', async () => {
+        test_if(capabilities.fact_serving_admin_hash, 'bare-hash facts: unknown query key → 400 invalid_query_params, even anonymous', async () => {
             const fixture = await setup_test();
             // Authed admin (the keeper): the strict query schema refuses the
             // unknown key before the handler can 404 the missing fact.
@@ -126,7 +124,7 @@ export const describe_query_shape_cross_tests = (options) => {
             const anon_clean = await anon(`/api/facts/${MISSING_HASH}`, { method: 'GET' });
             assert.strictEqual(anon_clean.status, 401);
         });
-        test_if(capabilities.fact_serving, 'bare-hash facts: duplicated acting takes the first occurrence; malformed acting → 400', async () => {
+        test_if(capabilities.fact_serving_admin_hash, 'bare-hash facts: duplicated acting takes the first occurrence; malformed acting → 400', async () => {
             const fixture = await setup_test();
             // First occurrence is the keeper's real actor; the second is
             // garbage. First-wins passes the query phase and reaches the

package/dist/testing/cross_backend/ready.js

@@ -13,13 +13,13 @@ import '../assert_dev_env.js';
  * `/ready` is a plain public REST route — not an RPC method, not one of the six
  * REST auth routes — and it's deliberately **off** the declared spine surface
  * (`create_spine_surface_spec`), like ws/sse/cells/fact-serving. So it needs a
- * bespoke imperative suite (à la `origin.cross.test.ts`), gated on
+ * bespoke imperative suite (à la `describe_origin_cross_tests`), gated on
  * `capabilities.ready`, rather than a `conformance_table` row or generic
  * round-trip enumeration. The drift → `503` path stays per-impl unit tests.
  *
  * Runs both legs via the shared `{setup_test, capabilities}` protocol: the
  * in-process leg (`cross_backend/ready_parity.db.test.ts`, plain `gro test`) and
- * the cross-process leg (`cross_backend/ready.cross.test.ts`, the TS spine
+ * the cross-process leg (`cross_backend/spine_suites.cross.test.ts`, the TS spine
  * binaries + Rust `testing_spine_stub` over real HTTP).
  *
  * @module

package/dist/testing/cross_backend/revocation_drivers.d.ts

@@ -1,6 +1,7 @@
 import '../assert_dev_env.js';
 import type { BackendCapabilities } from './capabilities.js';
-import type { TestAccountFixture, TestFixture } from './setup.js';
+import type { TestAccount } from '../app_server.js';
+import type { TestFixture } from './setup.js';
 /**
  * POST a JSON body to a REST route on `account`'s session, asserting `200`.
  *
@@ -9,7 +10,7 @@ import type { TestAccountFixture, TestFixture } from './setup.js';
  * @param path - the REST route path
  * @param body - the JSON request body
  */
-export declare const cross_post_as: (fixture: TestFixture, account: TestAccountFixture, path: string, body: unknown) => Promise<void>;
+export declare const cross_post_as: (fixture: TestFixture, account: TestAccount, path: string, body: unknown) => Promise<void>;
 /**
  * Revoke every API token of `account_id` over the keeper's admin session
  * (`admin_token_revoke_all`), asserting success.
@@ -45,7 +46,7 @@ export interface AccountRevocation {
      * `target` must have been created with `DEFAULT_TEST_PASSWORD`, which the
      * password-change row presents.
      */
-    readonly revoke: (fixture: TestFixture, target: TestAccountFixture) => Promise<void>;
+    readonly revoke: (fixture: TestFixture, target: TestAccount) => Promise<void>;
 }
 /** Configuration for `create_account_revocations`. */
 export interface AccountRevocationsOptions {

package/dist/testing/cross_backend/revocation_drivers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"revocation_drivers.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/revocation_drivers.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA4B9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAElE;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,GACzB,SAAS,WAAW,EACpB,SAAS,kBAAkB,EAC3B,MAAM,MAAM,EACZ,MAAM,OAAO,KACX,OAAO,CAAC,IAAI,CAOd,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,GACxC,SAAS,WAAW,EACpB,UAAU,MAAM,EAChB,YAAY,MAAM,KAChB,OAAO,CAAC,IAAI,CASd,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,GAC/B,SAAS,WAAW,EACpB,UAAU,MAAM,EAChB,YAAY,MAAM,KAChB,OAAO,CAAC,IAAI,CASd,CAAC;AAEF,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IACjC,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrF;AAED,sDAAsD;AACtD,MAAM,WAAW,yBAAyB;IACzC,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,8BAA8B;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uCAAuC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,GACtC,SAAS,yBAAyB,KAChC,aAAa,CAAC,iBAAiB,CAiCjC,CAAC"}
+{"version":3,"file":"revocation_drivers.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/revocation_drivers.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA4B9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,GACzB,SAAS,WAAW,EACpB,SAAS,WAAW,EACpB,MAAM,MAAM,EACZ,MAAM,OAAO,KACX,OAAO,CAAC,IAAI,CAOd,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,GACxC,SAAS,WAAW,EACpB,UAAU,MAAM,EAChB,YAAY,MAAM,KAChB,OAAO,CAAC,IAAI,CASd,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,GAC/B,SAAS,WAAW,EACpB,UAAU,MAAM,EAChB,YAAY,MAAM,KAChB,OAAO,CAAC,IAAI,CASd,CAAC;AAEF,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IACjC,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E;AAED,sDAAsD;AACtD,MAAM,WAAW,yBAAyB;IACzC,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,8BAA8B;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uCAAuC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,GACtC,SAAS,yBAAyB,KAChC,aAAa,CAAC,iBAAiB,CAiCjC,CAAC"}

package/dist/testing/cross_backend/revocation_drivers.js

@@ -20,7 +20,7 @@ import '../assert_dev_env.js';
 import { assert } from 'vitest';
 import { account_purge_action_spec, admin_token_revoke_all_action_spec } from '../../auth/admin_action_specs.js';
 import { DEFAULT_TEST_PASSWORD } from '../test_credentials.js';
-import { cross_rpc_call } from './cell_cross_helpers.js';
+import { cross_rpc_call } from './cross_rpc.js';
 /**
  * POST a JSON body to a REST route on `account`'s session, asserting `200`.
  *

package/dist/testing/cross_backend/role_grant_cross_helpers.d.ts

@@ -1,5 +1,6 @@
 import '../assert_dev_env.js';
-import type { TestAccountFixture, TestFixture } from './setup.js';
+import type { TestAccount } from '../app_server.js';
+import type { TestFixture } from './setup.js';
 /** Options for the role-grant fixtures. */
 export interface RoleGrantFixtureOptions {
     /** The role to offer. Default `ROLE_ADMIN`, the one builtin admin-grantable role. */
@@ -31,5 +32,5 @@ export declare const create_pending_role_grant_offer: (fixture: TestFixture, to_
  * @param options - the role and the RPC path
  * @returns the active grant's id
  */
-export declare const create_active_role_grant: (fixture: TestFixture, recipient: TestAccountFixture, options?: RoleGrantFixtureOptions) => Promise<string>;
+export declare const create_active_role_grant: (fixture: TestFixture, recipient: TestAccount, options?: RoleGrantFixtureOptions) => Promise<string>;
 //# sourceMappingURL=role_grant_cross_helpers.d.ts.map

package/dist/testing/cross_backend/role_grant_cross_helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role_grant_cross_helpers.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/role_grant_cross_helpers.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAoB9B,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAElE,2CAA2C;AAC3C,MAAM,WAAW,uBAAuB;IACvC,qFAAqF;IACrF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,+BAA+B,GAC3C,SAAS,WAAW,EACpB,eAAe,MAAM,EACrB,kBAAiB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAoC,EAC1E,UAAS,uBAA4B,KACnC,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAWxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,GACpC,SAAS,WAAW,EACpB,WAAW,kBAAkB,EAC7B,UAAS,uBAA4B,KACnC,OAAO,CAAC,MAAM,CAgBhB,CAAC"}
+{"version":3,"file":"role_grant_cross_helpers.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/role_grant_cross_helpers.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAoB9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,2CAA2C;AAC3C,MAAM,WAAW,uBAAuB;IACvC,qFAAqF;IACrF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,+BAA+B,GAC3C,SAAS,WAAW,EACpB,eAAe,MAAM,EACrB,kBAAiB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAoC,EAC1E,UAAS,uBAA4B,KACnC,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAWxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,GACpC,SAAS,WAAW,EACpB,WAAW,WAAW,EACtB,UAAS,uBAA4B,KACnC,OAAO,CAAC,MAAM,CAgBhB,CAAC"}

package/dist/testing/cross_backend/role_grant_offer_lifecycle.d.ts

@@ -0,0 +1,13 @@
+import '../assert_dev_env.js';
+import type { RpcPathCrossSuiteOptions } from './setup.js';
+/** Options for `describe_role_grant_offer_lifecycle_cross_tests`. */
+export interface RoleGrantOfferLifecycleCrossTestOptions extends RpcPathCrossSuiteOptions {
+    /**
+     * The role offered — one the backend's registry holds with the `admin`
+     * grant path. Default `SPINE_PARTICIPANT_ROLE`, the spine's own; a backend
+     * with only the builtin roles passes `ROLE_ADMIN`.
+     */
+    readonly role?: string;
+}
+export declare const describe_role_grant_offer_lifecycle_cross_tests: (options: RoleGrantOfferLifecycleCrossTestOptions) => void;
+//# sourceMappingURL=role_grant_offer_lifecycle.d.ts.map

package/dist/testing/cross_backend/role_grant_offer_lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role_grant_offer_lifecycle.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/role_grant_offer_lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAmD9B,OAAO,KAAK,EAAE,wBAAwB,EAAe,MAAM,YAAY,CAAC;AAMxE,qEAAqE;AACrE,MAAM,WAAW,uCAAwC,SAAQ,wBAAwB;IACxF;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,+CAA+C,GAC3D,SAAS,uCAAuC,KAC9C,IAyRF,CAAC"}

package/dist/testing/cross_backend/role_grant_offer_lifecycle.js

@@ -0,0 +1,203 @@
+import '../assert_dev_env.js';
+/**
+ * Cross-backend parity suite for the **role-grant-offer decline and retract
+ * refusals** — the error paths beneath the happy-path WS notification suite
+ * (`describe_role_grant_offer_notification_ws_tests`), which is the only other
+ * cross-process caller of these two verbs.
+ *
+ * What both spines must agree on, per the handlers
+ * (`auth/role_grant_offer_actions.ts` and the queries behind them):
+ *
+ * - **not yours → 404** `role_grant_offer_not_found`. Decline is scoped to the
+ *   recipient account and retract to the grantor actor, so an offer the caller
+ *   is not party to answers the same `not_found` as an id that names no offer
+ *   (`docs/security.md` §"404-over-403 is the general mask"), and the offer is
+ *   left pending. The scope check comes before the terminal check, so a
+ *   stranger learns nothing of an offer's state either.
+ * - **already decided → 400** `invalid_request` with reason
+ *   `role_grant_offer_terminal` — a decline or retract after an accept, a
+ *   second decline, a second retract, and either one after the other.
+ * - **one audit row per success, none per refusal.** A decline writes
+ *   `role_grant_offer_decline` attributed to the recipient and targeting the
+ *   grantor, a retract `role_grant_offer_retract` attributed to the grantor
+ *   and targeting the recipient, each with its event's metadata; the refusals
+ *   above write nothing. Read through `list_audit_events`, which drains first
+ *   and parses each row's metadata against its event's schema.
+ *
+ * Multi-step (each case needs an offer in a given state), so this is an
+ * imperative suite; the single-request rows — decline and retract of an id
+ * that names no offer — live in the conformance security slate. The verbs are
+ * on every spine's standard RPC surface, so the suite is ungated. The keeper
+ * is the grantor, so the fixture's keeper must hold `ROLE_ADMIN`
+ * (`extra_keeper_roles`), and it offers an admin-grantable role — the
+ * `role` option, `SPINE_PARTICIPANT_ROLE` by default; `ROLE_ADMIN` serves a
+ * backend with only the builtin roles.
+ *
+ * @module
+ */
+import { assert, describe, test } from 'vitest';
+import { rpc_call } from '../rpc_helpers.js';
+import { ERROR_ROLE_GRANT_OFFER_NOT_FOUND, ERROR_ROLE_GRANT_OFFER_TERMINAL } from '../../auth/role_grant_offer_action_specs.js';
+import { JSONRPC_INVALID_REQUEST } from '../../http/jsonrpc.js';
+import { JSONRPC_ERROR_CODES } from '../../http/jsonrpc_errors.js';
+import { assert_audit_metadata_fields, list_audit_events } from './audit_cross_helpers.js';
+import { create_pending_role_grant_offer } from './role_grant_cross_helpers.js';
+import { SPINE_PARTICIPANT_ROLE, SPINE_RPC_PATH } from './spine_surface_constants.js';
+/** A well-formed UUID that names no offer. */
+const NIL_UUID = '00000000-0000-0000-0000-000000000000';
+export const describe_role_grant_offer_lifecycle_cross_tests = (options) => {
+    const { setup_test } = options;
+    const rpc_path = options.rpc_path ?? SPINE_RPC_PATH;
+    const role = options.role ?? SPINE_PARTICIPANT_ROLE;
+    const rpc = (fixture, method, params, headers) => rpc_call({ app: fixture.fresh_transport(), path: rpc_path, method, params, headers });
+    /** A pending `role` offer from the keeper to `recipient`. */
+    const create_offer = (fixture, recipient) => create_pending_role_grant_offer(fixture, recipient.account.id, undefined, {
+        role,
+        rpc_path
+    });
+    const decline = (fixture, offer_id, headers, reason) => rpc(fixture, 'role_grant_offer_decline', reason === undefined ? { offer_id } : { offer_id, reason }, headers);
+    const retract = (fixture, offer_id, headers) => rpc(fixture, 'role_grant_offer_retract', { offer_id }, headers);
+    const accept = (fixture, offer_id, headers) => rpc(fixture, 'role_grant_offer_accept', { offer_id }, headers);
+    const assert_ok = (res, label) => {
+        assert.ok(res.ok, `${label} must succeed: ${JSON.stringify(res)}`);
+    };
+    /** The masked refusal, returned as `{status, error}` for an identity comparison. */
+    const assert_not_found = (res, label) => {
+        assert.ok(!res.ok, `${label} must be refused: ${JSON.stringify(res)}`);
+        assert.strictEqual(res.status, 404, label);
+        assert.strictEqual(res.error.code, JSONRPC_ERROR_CODES.not_found, label);
+        assert.deepStrictEqual(res.error.data, { reason: ERROR_ROLE_GRANT_OFFER_NOT_FOUND }, label);
+        return { status: res.status, error: res.error };
+    };
+    const assert_terminal = (res, label) => {
+        assert.ok(!res.ok, `${label} must be refused: ${JSON.stringify(res)}`);
+        assert.strictEqual(res.status, 400, label);
+        assert.strictEqual(res.error.code, JSONRPC_INVALID_REQUEST, label);
+        assert.deepStrictEqual(res.error.data, { reason: ERROR_ROLE_GRANT_OFFER_TERMINAL }, label);
+    };
+    /** Whether `offer_id` is still in the recipient's pending inbox. */
+    const is_pending = async (fixture, recipient, offer_id) => {
+        const listed = await rpc(fixture, 'role_grant_offer_list', {}, recipient.create_session_headers());
+        if (!listed.ok)
+            assert.fail(`role_grant_offer_list failed: ${JSON.stringify(listed)}`);
+        const { offers } = listed.result;
+        return offers.some((offer) => offer.id === offer_id);
+    };
+    describe('role_grant_offer decline + retract refusals', () => {
+        test('a decline by anyone but the recipient → 404, identical to a missing offer; the offer stays pending', async () => {
+            const fixture = await setup_test();
+            const recipient = await fixture.create_account({ username: 'lifecycle_decline_to' });
+            const stranger = await fixture.create_account({ username: 'lifecycle_decline_by' });
+            const offer = await create_offer(fixture, recipient);
+            const missing = assert_not_found(await decline(fixture, NIL_UUID, stranger.create_session_headers()), 'a decline of a missing offer');
+            const by_stranger = assert_not_found(await decline(fixture, offer.id, stranger.create_session_headers()), 'a stranger declining');
+            assert.deepStrictEqual(by_stranger, missing, 'a stranger declining a real offer must hear what a missing offer answers');
+            // the grantor is a party to the offer, but not its recipient
+            assert_not_found(await decline(fixture, offer.id, fixture.create_session_headers()), 'the grantor declining its own offer');
+            assert.ok(await is_pending(fixture, recipient, offer.id), 'the refusals leave it pending');
+            assert_ok(await decline(fixture, offer.id, recipient.create_session_headers()), 'decline');
+        });
+        test('a retract by anyone but the grantor → 404, identical to a missing offer; the offer stays pending', async () => {
+            const fixture = await setup_test();
+            const recipient = await fixture.create_account({ username: 'lifecycle_retract_to' });
+            const stranger = await fixture.create_account({ username: 'lifecycle_retract_by' });
+            const offer = await create_offer(fixture, recipient);
+            const missing = assert_not_found(await retract(fixture, NIL_UUID, stranger.create_session_headers()), 'a retract of a missing offer');
+            const by_stranger = assert_not_found(await retract(fixture, offer.id, stranger.create_session_headers()), 'a stranger retracting');
+            assert.deepStrictEqual(by_stranger, missing, 'a stranger retracting a real offer must hear what a missing offer answers');
+            assert_not_found(await retract(fixture, offer.id, recipient.create_session_headers()), 'the recipient retracting');
+            assert.ok(await is_pending(fixture, recipient, offer.id), 'the refusals leave it pending');
+            assert_ok(await retract(fixture, offer.id, fixture.create_session_headers()), 'retract');
+        });
+        test('a decline or retract after accept → 400 role_grant_offer_terminal; a stranger still gets 404', async () => {
+            const fixture = await setup_test();
+            const recipient = await fixture.create_account({ username: 'lifecycle_accepted' });
+            const stranger = await fixture.create_account({ username: 'lifecycle_after_accept' });
+            const offer = await create_offer(fixture, recipient);
+            assert_ok(await accept(fixture, offer.id, recipient.create_session_headers()), 'accept');
+            assert_terminal(await decline(fixture, offer.id, recipient.create_session_headers()), 'a decline after accept');
+            assert_terminal(await retract(fixture, offer.id, fixture.create_session_headers()), 'a retract after accept');
+            // the scope check runs before the terminal check, so a non-party
+            // learns nothing of the offer's state
+            assert_not_found(await decline(fixture, offer.id, stranger.create_session_headers()), 'a stranger declining an accepted offer');
+            assert_not_found(await retract(fixture, offer.id, stranger.create_session_headers()), 'a stranger retracting an accepted offer');
+        });
+        test('a second decline, a second retract, and either after the other → 400 role_grant_offer_terminal', async () => {
+            const fixture = await setup_test();
+            const recipient = await fixture.create_account({ username: 'lifecycle_twice' });
+            const recipient_headers = recipient.create_session_headers();
+            const grantor_headers = fixture.create_session_headers();
+            const declined = await create_offer(fixture, recipient);
+            assert_ok(await decline(fixture, declined.id, recipient_headers), 'the first decline');
+            assert_terminal(await decline(fixture, declined.id, recipient_headers), 'a second decline');
+            assert_terminal(await retract(fixture, declined.id, grantor_headers), 'a retract after decline');
+            const retracted = await create_offer(fixture, recipient);
+            assert_ok(await retract(fixture, retracted.id, grantor_headers), 'the first retract');
+            assert_terminal(await retract(fixture, retracted.id, grantor_headers), 'a second retract');
+            assert_terminal(await decline(fixture, retracted.id, recipient_headers), 'a decline after retract');
+        });
+        test('a decline and a retract each write one audit row; their refusals write none', async () => {
+            const fixture = await setup_test();
+            const recipient = await fixture.create_account({ username: 'lifecycle_audited' });
+            const stranger = await fixture.create_account({ username: 'lifecycle_unaudited' });
+            const recipient_headers = recipient.create_session_headers();
+            const grantor_headers = fixture.create_session_headers();
+            const with_reason = await create_offer(fixture, recipient);
+            assert_ok(await decline(fixture, with_reason.id, recipient_headers, 'not now'), 'decline');
+            const without_reason = await create_offer(fixture, recipient);
+            assert_ok(await decline(fixture, without_reason.id, recipient_headers), 'decline');
+            const retracted = await create_offer(fixture, recipient);
+            assert_ok(await retract(fixture, retracted.id, grantor_headers), 'retract');
+            const read = async () => ({
+                declines: await list_audit_events(fixture, { event_type: 'role_grant_offer_decline' }, rpc_path),
+                retracts: await list_audit_events(fixture, { event_type: 'role_grant_offer_retract' }, rpc_path)
+            });
+            const before = await read();
+            const decline_row = (offer_id) => {
+                const rows = before.declines.filter((e) => e.metadata?.offer_id === offer_id);
+                assert.strictEqual(rows.length, 1, `one role_grant_offer_decline row for ${offer_id}`);
+                return rows[0];
+            };
+            for (const [offer_id, reason] of [
+                [with_reason.id, 'not now'],
+                [without_reason.id, undefined]
+            ]) {
+                const row = decline_row(offer_id);
+                assert.strictEqual(row.outcome, 'success');
+                // a decline is the recipient's act, addressed to the grantor
+                assert.strictEqual(row.account_id, recipient.account.id);
+                assert.strictEqual(row.actor_id, recipient.actor.id);
+                assert.strictEqual(row.target_account_id, fixture.account.id);
+                assert.strictEqual(row.target_actor_id, fixture.actor.id);
+                // a decline without a reason records none — absent, not null
+                assert_audit_metadata_fields(fixture, row.metadata, reason === undefined
+                    ? { offer_id, role, scope_id: null }
+                    : { offer_id, role, scope_id: null, reason }, reason === undefined ? ['reason'] : []);
+            }
+            assert.strictEqual(before.retracts.length, 1, 'one role_grant_offer_retract row');
+            const retract_row = before.retracts[0];
+            assert.strictEqual(retract_row.outcome, 'success');
+            // a retract is the grantor's act, addressed to the recipient; the
+            // offer named no actor, so no target actor
+            assert.strictEqual(retract_row.account_id, fixture.account.id);
+            assert.strictEqual(retract_row.actor_id, fixture.actor.id);
+            assert.strictEqual(retract_row.target_account_id, recipient.account.id);
+            assert.strictEqual(retract_row.target_actor_id, null);
+            assert_audit_metadata_fields(fixture, retract_row.metadata, {
+                offer_id: retracted.id,
+                role,
+                scope_id: null
+            });
+            // every refusal: not a party, then already decided
+            const pending = await create_offer(fixture, recipient);
+            assert_not_found(await decline(fixture, pending.id, stranger.create_session_headers()), 'a stranger declining');
+            assert_not_found(await retract(fixture, pending.id, stranger.create_session_headers()), 'a stranger retracting');
+            assert_terminal(await decline(fixture, with_reason.id, recipient_headers), 'a re-decline');
+            assert_terminal(await retract(fixture, retracted.id, grantor_headers), 'a re-retract');
+            assert_terminal(await decline(fixture, retracted.id, recipient_headers), 'a decline after retract');
+            const after = await read();
+            assert.strictEqual(after.declines.length, before.declines.length, 'no decline row added');
+            assert.strictEqual(after.retracts.length, before.retracts.length, 'no retract row added');
+        });
+    });
+};

package/dist/testing/cross_backend/role_grant_offer_notification_ws.d.ts

@@ -1,16 +1,13 @@
 import '../assert_dev_env.js';
 import { type BackendCapabilities } from './capabilities.js';
 import type { SetupTest } from './setup.js';
+import { type WsEndpointTarget } from './ws_endpoint.js';
 /** Configuration for `describe_role_grant_offer_notification_ws_tests`. */
-export interface RoleGrantOfferNotificationWsTestOptions {
+export interface RoleGrantOfferNotificationWsTestOptions extends WsEndpointTarget {
     /** Per-test fixture producer (`default_cross_process_setup(handle, ...)`). */
     readonly setup_test: SetupTest;
     /** Backend capability flags; every case gates on `capabilities.ws`. */
     readonly capabilities: BackendCapabilities;
-    /** Base URL the backend is reachable at (e.g. `http://localhost:1178`). */
-    readonly base_url: string;
-    /** WebSocket endpoint path on the backend (e.g. `/api/ws`). */
-    readonly ws_path: string;
     /**
      * The roles `ws_path` gates its upgrade on (its `required_roles`), or
      * omitted / `[]` for an ungated endpoint. Declare them for a backend whose

package/dist/testing/cross_backend/role_grant_offer_notification_ws.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role_grant_offer_notification_ws.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/role_grant_offer_notification_ws.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA4E9B,OAAO,EAAE,KAAK,mBAAmB,EAAW,MAAM,mBAAmB,CAAC;AAKtE,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,YAAY,CAAC;AAKzD,2EAA2E;AAC3E,MAAM,WAAW,uCAAuC;IACvD,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACnD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+CAA+C,GAC3D,SAAS,uCAAuC,KAC9C,IA6VF,CAAC"}
+{"version":3,"file":"role_grant_offer_notification_ws.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/role_grant_offer_notification_ws.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAkF9B,OAAO,EAAE,KAAK,mBAAmB,EAAW,MAAM,mBAAmB,CAAC;AAKtE,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,YAAY,CAAC;AAEzD,OAAO,EAAmB,KAAK,gBAAgB,EAAyB,MAAM,kBAAkB,CAAC;AAKjG,2EAA2E;AAC3E,MAAM,WAAW,uCAAwC,SAAQ,gBAAgB;IAChF,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C;;;;;;OAMG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACnD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,+CAA+C,GAC3D,SAAS,uCAAuC,KAC9C,IAgbF,CAAC"}