@fuzdev/fuz_app 0.41.1 → 0.43.0

package/dist/db/status.js

@@ -6,13 +6,29 @@
  *
  * @module
  */
+const has_table_column = async (db, table_name, column_name) => {
+    const row = await db.query_one(`SELECT EXISTS (
+			SELECT 1 FROM information_schema.columns
+			WHERE table_schema = 'public'
+			  AND table_name = $1
+			  AND column_name = $2
+		) as exists`, [table_name, column_name]);
+    return row?.exists ?? false;
+};
+const has_table = async (db, table_name) => {
+    const row = await db.query_one(`SELECT EXISTS (
+			SELECT 1 FROM information_schema.tables
+			WHERE table_schema = 'public' AND table_name = $1
+		) as exists`, [table_name]);
+    return row?.exists ?? false;
+};
 /**
- * Query database status including connectivity, tables, and migration versions.
+ * Query database status including connectivity, tables, and migration state.
  *
  * Designed for CLI `db:status` commands. Does not modify the database.
  *
  * @param db - the database instance
- * @param namespaces - migration namespaces to check versions for
+ * @param namespaces - migration namespaces to check status for
  * @returns a snapshot of database status
  */
 export const query_db_status = async (db, namespaces) => {
@@ -42,34 +58,42 @@ export const query_db_status = async (db, namespaces) => {
             row_count: result ? parseInt(result.count, 10) : 0,
         });
     }
-    // check migration versions
+    // check migration state
     const migrations = [];
+    let old_tracker_shape;
     if (namespaces?.length) {
-        // check if schema_version table exists
-        const sv_exists = await db.query_one(`SELECT EXISTS (
-				SELECT 1 FROM information_schema.tables
-				WHERE table_schema = 'public' AND table_name = 'schema_version'
-			) as exists`);
-        if (sv_exists?.exists) {
+        const sv_exists = await has_table(db, 'schema_version');
+        // pre-0.42 shape carries a `version` column; new shape carries `name`
+        const old_shape = sv_exists ? await has_table_column(db, 'schema_version', 'version') : false;
+        if (old_shape)
+            old_tracker_shape = true;
+        if (sv_exists && !old_shape) {
             for (const { namespace, migrations: ns_migrations } of namespaces) {
-                const row = await db.query_one('SELECT version FROM schema_version WHERE namespace = $1', [namespace]);
-                const current_version = row?.version ?? 0;
+                const rows = await db.query(`SELECT name FROM schema_version
+					 WHERE namespace = $1
+					 ORDER BY sequence ASC`, [namespace]);
+                const applied_names = rows.map((r) => r.name);
+                const code_names = ns_migrations.map((m) => m.name);
+                // pending = the suffix of code names beyond applied.length (callers
+                // see the boot algorithm's tail without paying for verify here)
+                const pending_names = code_names.slice(applied_names.length);
                 migrations.push({
                     namespace,
-                    current_version,
-                    available_version: ns_migrations.length,
-                    up_to_date: current_version === ns_migrations.length,
+                    applied_names,
+                    pending_names,
+                    up_to_date: applied_names.length === code_names.length && pending_names.length === 0,
                 });
             }
         }
         else {
-            // no schema_version table — all namespaces are at version 0
+            // no tracker, or pre-0.42 shape — every namespace shows as "nothing applied yet"
             for (const { namespace, migrations: ns_migrations } of namespaces) {
+                const code_names = ns_migrations.map((m) => m.name);
                 migrations.push({
                     namespace,
-                    current_version: 0,
-                    available_version: ns_migrations.length,
-                    up_to_date: ns_migrations.length === 0,
+                    applied_names: [],
+                    pending_names: code_names,
+                    up_to_date: code_names.length === 0,
                 });
             }
         }
@@ -79,6 +103,7 @@ export const query_db_status = async (db, namespaces) => {
         table_count: tables.length,
         tables,
         migrations,
+        ...(old_tracker_shape ? { old_tracker_shape: true } : {}),
     };
 };
 /**
@@ -102,12 +127,23 @@ export const format_db_status = (status) => {
             lines.push(`    ${t.name.padEnd(max_name)}  ${t.row_count} rows`);
         }
     }
+    if (status.old_tracker_shape) {
+        lines.push('');
+        lines.push('  Migrations: pre-0.42 schema_version shape detected.');
+        lines.push('    Drop the table and re-run, or call `baseline()` first if preserving the schema.');
+    }
     if (status.migrations.length > 0) {
         lines.push('');
         lines.push('  Migrations:');
         for (const m of status.migrations) {
-            const marker = m.up_to_date ? 'up to date' : `${m.current_version}/${m.available_version}`;
-            lines.push(`    ${m.namespace}: v${m.current_version} (${marker})`);
+            const total = m.applied_names.length + m.pending_names.length;
+            if (m.up_to_date) {
+                lines.push(`    ${m.namespace}: up to date (${m.applied_names.length}/${total})`);
+            }
+            else {
+                const pending_list = m.pending_names.join(', ');
+                lines.push(`    ${m.namespace}: applied ${m.applied_names.length}/${total} (pending: ${pending_list})`);
+            }
         }
     }
     return lines.join('\n');

package/dist/http/schema_helpers.d.ts

@@ -18,6 +18,15 @@ import { type RateLimitKey, type RouteErrorSchemas } from './error_schemas.js';
  * but also accept other values.
  */
 export declare const is_null_schema: (schema: z.ZodType) => boolean;
+/**
+ * Check if a schema is exactly `z.void()`.
+ *
+ * RPC action specs use `z.void()` to declare a parameterless method —
+ * JSON-RPC 2.0 forbids `params: null` (params must be omitted or be a
+ * Structured value), so `z.void()` is the correct schema for "no params"
+ * and the dispatcher maps absent params to `undefined` for these specs.
+ */
+export declare const is_void_schema: (schema: z.ZodType) => boolean;
 /**
  * Check if a schema is a strict object (`z.strictObject()`).
  *

package/dist/http/schema_helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema_helpers.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/http/schema_helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAuB,KAAK,YAAY,EAAE,KAAK,iBAAiB,EAAC,MAAM,oBAAoB,CAAC;AAEnG;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,GAAI,QAAQ,CAAC,CAAC,OAAO,KAAG,OAAsC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GAAI,QAAQ,CAAC,CAAC,OAAO,KAAG,OACe,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,QAAQ,CAAC,CAAC,OAAO,KAAG,OAQrD,CAAC;AAoBF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,GAAI,SAAS,MAAM,EAAE,YAAY,MAAM,KAAG,OAQxE,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,GAC/B,MAAM;IACL,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IACpB,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC3B,EACD,oBAAoB,iBAAiB,GAAG,IAAI,KAC1C,iBAAiB,GAAG,IAUtB,CAAC"}
+{"version":3,"file":"schema_helpers.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/http/schema_helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAuB,KAAK,YAAY,EAAE,KAAK,iBAAiB,EAAC,MAAM,oBAAoB,CAAC;AAEnG;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,GAAI,QAAQ,CAAC,CAAC,OAAO,KAAG,OAAsC,CAAC;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,GAAI,QAAQ,CAAC,CAAC,OAAO,KAAG,OAAsC,CAAC;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GAAI,QAAQ,CAAC,CAAC,OAAO,KAAG,OACe,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,QAAQ,CAAC,CAAC,OAAO,KAAG,OAQrD,CAAC;AAoBF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,GAAI,SAAS,MAAM,EAAE,YAAY,MAAM,KAAG,OAQxE,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,GAC/B,MAAM;IACL,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IACpB,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC3B,EACD,oBAAoB,iBAAiB,GAAG,IAAI,KAC1C,iBAAiB,GAAG,IAUtB,CAAC"}

package/dist/http/schema_helpers.js

@@ -17,6 +17,15 @@ import { derive_error_schemas } from './error_schemas.js';
  * but also accept other values.
  */
 export const is_null_schema = (schema) => schema instanceof z.ZodNull;
+/**
+ * Check if a schema is exactly `z.void()`.
+ *
+ * RPC action specs use `z.void()` to declare a parameterless method —
+ * JSON-RPC 2.0 forbids `params: null` (params must be omitted or be a
+ * Structured value), so `z.void()` is the correct schema for "no params"
+ * and the dispatcher maps absent params to `undefined` for these specs.
+ */
+export const is_void_schema = (schema) => schema instanceof z.ZodVoid;
 /**
  * Check if a schema is a strict object (`z.strictObject()`).
  *

package/dist/server/app_backend.d.ts

@@ -70,8 +70,9 @@ export interface CreateAppBackendOptions {
     audit_log_config?: AuditLogConfig;
     /**
      * Additional migration namespaces to run after the builtin auth namespace.
-     * Each namespace's own `schema_version` row tracks progress; order is
-     * append-only so forward-only guarantees hold per-namespace.
+     * The shared `schema_version` table records one row per applied migration
+     * (`namespace`, `name`, `sequence`); order is append-only so forward-only
+     * guarantees hold per-namespace.
      *
      * The reserved `'fuz_auth'` namespace is rejected at startup. Omit for no
      * extra namespaces. This is the only place to splice consumer migrations

package/dist/server/app_backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app_backend.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/server/app_backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAE/C,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAC,cAAc,EAAE,aAAa,EAAC,MAAM,6BAA6B,CAAC;AAC/E,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,aAAa,CAAC;AACxC,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAiB,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAC,MAAM,kBAAkB,CAAC;AAI/F;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,oIAAoI;IACpI,QAAQ,CAAC,iBAAiB,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAC3D,iEAAiE;IACjE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACvC,+DAA+D;IAC/D,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACnD,2BAA2B;IAC3B,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,qBAAqB;IACrB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAChD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;CACzD;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,GAAU,SAAS,uBAAuB,KAAG,OAAO,CAAC,UAAU,CAoC7F,CAAC"}
+{"version":3,"file":"app_backend.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/server/app_backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAE/C,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAC,cAAc,EAAE,aAAa,EAAC,MAAM,6BAA6B,CAAC;AAC/E,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,aAAa,CAAC;AACxC,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAiB,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAC,MAAM,kBAAkB,CAAC;AAI/F;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,oIAAoI;IACpI,QAAQ,CAAC,iBAAiB,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAC3D,iEAAiE;IACjE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACvC,+DAA+D;IAC/D,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACnD,2BAA2B;IAC3B,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,qBAAqB;IACrB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAChD;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,cAAc,CAAC;IAClC;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;CACzD;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,GAAU,SAAS,uBAAuB,KAAG,OAAO,CAAC,UAAU,CAoC7F,CAAC"}

package/dist/testing/CLAUDE.md

@@ -81,19 +81,19 @@ Factory builders for parameterized DB tests. Consumer projects pass their
 `init_schema` callback (which calls `run_migrations(db, [AUTH_MIGRATION_NS, ...app_migrations])`);
 factories accept any migration namespace set.
 
-| Helper                                           | Role                                                                                                                                                                                                                    |
-| ------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `IS_CI`                                          | `process.env.CI === 'true'` — CI detection.                                                                                                                                                                             |
-| `DbFactory` interface                            | `{name, create, close, skip, skip_reason?}`.                                                                                                                                                                            |
-| `reset_pglite(db)`                               | `DROP SCHEMA public CASCADE` + recreate. Reuses a live PGlite instance.                                                                                                                                                 |
-| `create_pglite_factory(init_schema)`             | In-memory; no external deps; `skip: false`. See WASM caching below.                                                                                                                                                     |
-| `create_pg_factory(init_schema, test_url?)`      | PostgreSQL; `skip: true` when `test_url` is missing; drops `schema_version` before `init_schema` so migrations re-evaluate against actual tables; pool is reused + cleaned up across `create()` calls.                  |
-| `AUTH_TRUNCATE_TABLES`                           | `['invite', 'api_token', 'auth_session', 'permit', 'permit_offer', 'actor', 'account']` in FK-safe order. Excludes `audit_log` — unit DB tests don't need to truncate it.                                               |
-| `AUTH_INTEGRATION_TRUNCATE_TABLES`               | `AUTH_TRUNCATE_TABLES + ['audit_log']` — for integration suites that exercise the audit path.                                                                                                                           |
-| `AUTH_DROP_TABLES`                               | Full set from `AUTH_MIGRATIONS` in drop order; call `drop_auth_schema(db)` at the top of `init_schema` on persistent pg databases that may hold stale DDL from previous fuz_app versions.                               |
-| `drop_auth_schema(db)`                           | `DROP TABLE IF EXISTS <table> CASCADE` for every entry in `AUTH_DROP_TABLES` plus `schema_version`. Safe on fresh DBs.                                                                                                  |
-| `create_describe_db(factories, truncate_tables)` | Returns `describe_db(name, fn)` that runs `fn(get_db)` once per factory, inside a `describe` block with shared `beforeAll(create)` + `beforeEach(TRUNCATE)` + `afterAll(close)`. Skipped factories use `describe.skip`. |
-| `log_db_factory_status(factories)`               | Console summary of enabled / skipped factories.                                                                                                                                                                         |
+| Helper                                           | Role                                                                                                                                                                                                                                                                                                 |
+| ------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `IS_CI`                                          | `process.env.CI === 'true'` — CI detection.                                                                                                                                                                                                                                                          |
+| `DbFactory` interface                            | `{name, create, close, skip, skip_reason?}`.                                                                                                                                                                                                                                                         |
+| `reset_pglite(db)`                               | `DROP SCHEMA public CASCADE` + recreate. Reuses a live PGlite instance.                                                                                                                                                                                                                              |
+| `create_pglite_factory(init_schema)`             | In-memory; no external deps; `skip: false`. See WASM caching below.                                                                                                                                                                                                                                  |
+| `create_pg_factory(init_schema, test_url?)`      | PostgreSQL; `skip: true` when `test_url` is missing; drops `schema_version` before `init_schema` so migrations re-evaluate against actual tables (prevents stale tracker rows from skipping migrations when DDL changes between test sessions); pool is reused + cleaned up across `create()` calls. |
+| `AUTH_TRUNCATE_TABLES`                           | `['invite', 'api_token', 'auth_session', 'permit', 'permit_offer', 'actor', 'account']` in FK-safe order. Excludes `audit_log` — unit DB tests don't need to truncate it.                                                                                                                            |
+| `AUTH_INTEGRATION_TRUNCATE_TABLES`               | `AUTH_TRUNCATE_TABLES + ['audit_log']` — for integration suites that exercise the audit path.                                                                                                                                                                                                        |
+| `AUTH_DROP_TABLES`                               | Full set from `AUTH_MIGRATIONS` in drop order; call `drop_auth_schema(db)` at the top of `init_schema` on persistent pg databases that may hold stale DDL from previous fuz_app versions.                                                                                                            |
+| `drop_auth_schema(db)`                           | `DROP TABLE IF EXISTS <table> CASCADE` for every entry in `AUTH_DROP_TABLES` plus `schema_version`. Safe on fresh DBs.                                                                                                                                                                               |
+| `create_describe_db(factories, truncate_tables)` | Returns `describe_db(name, fn)` that runs `fn(get_db)` once per factory, inside a `describe` block with shared `beforeAll(create)` + `beforeEach(TRUNCATE)` + `afterAll(close)`. Skipped factories use `describe.skip`.                                                                              |
+| `log_db_factory_status(factories)`               | Console summary of enabled / skipped factories.                                                                                                                                                                                                                                                      |
 
 **PGlite WASM caching.** `create_pglite_factory` shares a single PGlite
 instance in a module-level ref (`module_db`) across all factories in the

package/dist/testing/admin_integration.js

@@ -163,7 +163,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: admin_account_list_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: test_app.create_session_headers(),
                 });
                 assert.ok(res.ok, `admin_account_list failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
@@ -181,7 +181,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: admin_account_list_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: test_app.create_session_headers(),
                 });
                 assert.ok(!res.ok, 'Expected admin_account_list to fail for non-admin');
@@ -205,7 +205,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: admin_session_list_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: test_app.create_session_headers(),
                 });
                 assert.ok(res.ok, `admin_session_list failed: ${res.ok ? '' : JSON.stringify(res.error)}`);
@@ -220,7 +220,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: account_verify_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: create_headers(user_two.session_cookie),
                 });
                 assert.strictEqual(before.status, 200);
@@ -240,7 +240,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: account_verify_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: create_headers(user_two.session_cookie),
                 });
                 assert.strictEqual(after.status, 401);
@@ -263,7 +263,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: account_verify_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: test_app.create_session_headers(),
                 });
                 assert.strictEqual(after.status, 401);
@@ -279,7 +279,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: account_verify_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: { authorization: `Bearer ${user_two.api_token}` },
                     suppress_default_origin: true,
                 });
@@ -300,7 +300,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: account_verify_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: { authorization: `Bearer ${user_two.api_token}` },
                     suppress_default_origin: true,
                 });
@@ -725,7 +725,7 @@ export const describe_standard_admin_integration_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: admin_account_list_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: create_headers(regular_user.session_cookie),
                 });
                 assert.ok(!res.ok, 'Expected admin_account_list to fail for non-admin');

package/dist/testing/audit_completeness.js

@@ -144,7 +144,7 @@ export const describe_audit_completeness_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: account_token_list_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: test_app.create_session_headers(),
                 });
                 assert.ok(list_res.ok, 'account_token_list should succeed');
@@ -179,7 +179,7 @@ export const describe_audit_completeness_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: account_session_list_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: test_app.create_session_headers(),
                 });
                 assert.ok(list_res.ok, 'account_session_list should succeed');
@@ -203,7 +203,7 @@ export const describe_audit_completeness_tests = (options) => {
                     app: test_app.app,
                     path: rpc_path,
                     spec: account_session_revoke_all_action_spec,
-                    params: null,
+                    params: undefined,
                     headers: test_app.create_session_headers(),
                 });
                 assert.ok(res.ok, `account_session_revoke_all failed: ${res.ok ? '' : JSON.stringify(res.error)}`);

package/dist/testing/db.d.ts

@@ -41,7 +41,7 @@ export declare const create_pglite_factory: (init_schema: (db: Db) => Promise<vo
  *
  * Skipped when `test_url` is not provided.
  * Drops `schema_version` before running `init_schema`, forcing migrations
- * to re-evaluate against the actual tables. Prevents stale version entries
+ * to re-evaluate against the actual tables. Prevents stale tracker rows
  * from skipping migrations when DDL changes between test sessions.
  *
  * For full clean-slate behavior (recommended), call `drop_auth_schema(db)`

package/dist/testing/db.js

@@ -82,7 +82,7 @@ export const create_pglite_factory = (init_schema) => ({
  *
  * Skipped when `test_url` is not provided.
  * Drops `schema_version` before running `init_schema`, forcing migrations
- * to re-evaluate against the actual tables. Prevents stale version entries
+ * to re-evaluate against the actual tables. Prevents stale tracker rows
  * from skipping migrations when DDL changes between test sessions.
  *
  * For full clean-slate behavior (recommended), call `drop_auth_schema(db)`
@@ -122,7 +122,7 @@ export const create_pg_factory = (init_schema, test_url) => {
             const { db } = create_pg_db(pool);
             try {
                 // Drop schema_version so migrations re-evaluate against the actual
-                // tables. Prevents stale version entries from skipping migrations
+                // tables. Prevents stale tracker rows from skipping migrations
                 // when DDL changes between test sessions. Migrations use
                 // IF NOT EXISTS guards, so re-running is safe.
                 await db.query('DROP TABLE IF EXISTS schema_version');