@fuzdev/fuz_app 0.64.0 → 0.66.0

package/dist/actions/action_codegen.d.ts

@@ -457,7 +457,7 @@ export interface SpecSource {
  * @example
  * ```ts
  * const sources = [
- *   {ns: 'tx_specs', module: './action_specs.js', specs: all_tx_action_specs},
+ *   {ns: 'tx_specs', module: './action_specs.js', specs: all_zap_action_specs},
  *   {ns: 'admin_specs', module: '@fuzdev/fuz_app/auth/admin_action_specs.js', specs: all_admin_action_specs},
  * ];
  *

package/dist/actions/action_codegen.js

@@ -943,7 +943,7 @@ export type ${type_name} = {
  * @example
  * ```ts
  * const sources = [
- *   {ns: 'tx_specs', module: './action_specs.js', specs: all_tx_action_specs},
+ *   {ns: 'tx_specs', module: './action_specs.js', specs: all_zap_action_specs},
  *   {ns: 'admin_specs', module: '@fuzdev/fuz_app/auth/admin_action_specs.js', specs: all_admin_action_specs},
  * ];
  *

package/dist/actions/action_event_data.d.ts

@@ -56,7 +56,7 @@ export declare const ActionEventData: z.ZodObject<{
     response: z.ZodNullable<z.ZodUnion<readonly [z.ZodObject<{
         jsonrpc: z.ZodLiteral<"2.0">;
         id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
-        result: z.ZodObject<{}, z.core.$loose>;
+        result: z.ZodJSONSchema;
     }, z.core.$loose>, z.ZodObject<{
         jsonrpc: z.ZodLiteral<"2.0">;
         id: z.ZodNullable<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;

package/dist/actions/broadcast_api.d.ts

@@ -13,7 +13,7 @@
  * `ctx.notify` inside a handler — it's socket-scoped, not broadcast.
  *
  * Extracted from zzz's `backend_actions_api.ts` to stop the pattern from
- * drifting across zzz, zap, and undying.
+ * drifting across consumers.
  *
  * @module
  */

package/dist/actions/broadcast_api.js

@@ -13,7 +13,7 @@
  * `ctx.notify` inside a handler — it's socket-scoped, not broadcast.
  *
  * Extracted from zzz's `backend_actions_api.ts` to stop the pattern from
- * drifting across zzz, zap, and undying.
+ * drifting across consumers.
  *
  * @module
  */

package/dist/actions/cancel.d.ts

@@ -23,8 +23,8 @@
  * Wire format is snake_case `cancel` with `{request_id}`, not MCP's
  * `$/cancelRequest` with `{requestId}` — fuz_app's WS transport isn't MCP,
  * and adopting MCP's convention would leak protocol-specific framing into
- * the base transport. When MCP elicitation (Phase 5) lands, a translation
- * layer at the MCP adapter is the right seam.
+ * the base transport. If an MCP adapter is ever built, the translation
+ * layer at the adapter is the right seam.
  *
  * @module
  */

package/dist/actions/cancel.js

@@ -23,8 +23,8 @@
  * Wire format is snake_case `cancel` with `{request_id}`, not MCP's
  * `$/cancelRequest` with `{requestId}` — fuz_app's WS transport isn't MCP,
  * and adopting MCP's convention would leak protocol-specific framing into
- * the base transport. When MCP elicitation (Phase 5) lands, a translation
- * layer at the MCP adapter is the right seam.
+ * the base transport. If an MCP adapter is ever built, the translation
+ * layer at the adapter is the right seam.
  *
  * @module
  */
@@ -63,7 +63,7 @@ export const cancel_action_spec = {
  * tuple shape; the dispatcher short-circuits cancel notifications before any
  * handler lookup happens.
  */
-export const cancel_handler = () => { }; // eslint-disable-line @typescript-eslint/no-empty-function
+export const cancel_handler = () => { };
 /**
  * Protocol-action tuple — spread into the server's `actions` array (or via
  * `protocol_actions` from `actions/protocol.ts`) so the dispatcher registers the

package/dist/actions/connection_closer.d.ts

@@ -25,10 +25,7 @@
  * Mirrors `zzz_server`'s `close_sockets_for_*` calls in
  * `account.rs::logout_inner` / `_password_inner` /
  * `handlers/account.rs::handle_account_session_revoke[_all]` /
- * `_token_revoke` (landed 2026-05-16); see
- * `~/dev/grimoire/lore/fuz_app/TODO_AUTH.md` §Audit-driven WS
- * revocation: handler-side belt+suspenders for the cross-backend
- * parity record.
+ * `_token_revoke` (landed 2026-05-16).
  *
  * `BackendWebsocketTransport` satisfies this interface structurally,
  * so consumers pass their transport instance directly (same shape as

package/dist/actions/connection_closer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection_closer.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/connection_closer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAChC;;;;OAIG;IACH,yBAAyB,EAAE,CAAC,kBAAkB,EAAE,MAAM,KAAK,MAAM,CAAC;IAClE;;;OAGG;IACH,uBAAuB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1D;;;;;;OAMG;IACH,yBAAyB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;CAC1D"}
+{"version":3,"file":"connection_closer.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/connection_closer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAChC;;;;OAIG;IACH,yBAAyB,EAAE,CAAC,kBAAkB,EAAE,MAAM,KAAK,MAAM,CAAC;IAClE;;;OAGG;IACH,uBAAuB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1D;;;;;;OAMG;IACH,yBAAyB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;CAC1D"}

package/dist/actions/connection_closer.js

@@ -25,10 +25,7 @@
  * Mirrors `zzz_server`'s `close_sockets_for_*` calls in
  * `account.rs::logout_inner` / `_password_inner` /
  * `handlers/account.rs::handle_account_session_revoke[_all]` /
- * `_token_revoke` (landed 2026-05-16); see
- * `~/dev/grimoire/lore/fuz_app/TODO_AUTH.md` §Audit-driven WS
- * revocation: handler-side belt+suspenders for the cross-backend
- * parity record.
+ * `_token_revoke` (landed 2026-05-16).
  *
  * `BackendWebsocketTransport` satisfies this interface structurally,
  * so consumers pass their transport instance directly (same shape as

package/dist/actions/register_action_ws.d.ts

@@ -42,8 +42,8 @@ export declare const DEFAULT_SERVER_HEARTBEAT_TIMEOUT = 60000;
  *
  * Fires after the transport has registered the new connection (so
  * `connection_id` is valid) but before any client message can dispatch.
- * Consumers use this to bootstrap per-socket domain state — e.g. undying
- * spawns the per-account spirit unit and pushes an initial state snapshot.
+ * Consumers use this to bootstrap per-socket domain state — e.g.
+ * spawning a per-account unit and pushing an initial state snapshot.
  */
 export interface SocketOpenContext {
     /** The raw WebSocket context — exposed for edge cases; prefer `notify` for sends. */

package/dist/actions/register_ws_endpoint.d.ts

@@ -25,7 +25,7 @@ import { type RegisterActionWsOptions, type RegisterActionWsResult } from './reg
 /** Options for `register_ws_endpoint`. */
 export interface RegisterWsEndpointOptions extends RegisterActionWsOptions {
     /**
-     * Origin allowlist regexes — typically parsed from the `ALLOWED_ORIGINS`
+     * Origin allowlist regexes — typically parsed from the `FUZ_ALLOWED_ORIGINS`
      * env var via `parse_allowed_origins`. Passed straight to
      * `verify_request_source`.
      */

package/dist/actions/transports_ws_auth_guard.d.ts

@@ -74,8 +74,7 @@ export declare const create_ws_auth_guard: (transport: BackendWebsocketTransport
  * Sibling helper to `create_ws_auth_guard` — kept separate because
  * `ws_disconnect_event_types` deliberately omits `logout` (admin-initiated
  * revocations use `session_revoke`, while `logout` is the user-initiated
- * case). Three consumers (tx, undying, zzz) hand-rolled this same branch
- * before extraction.
+ * case). Multiple consumers hand-rolled this same branch before extraction.
  *
  * Compose with `create_ws_auth_guard` to handle both kinds of disconnect:
  *

package/dist/actions/transports_ws_auth_guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transports_ws_auth_guard.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/transports_ws_auth_guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,4BAA4B,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;AAE/D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAMxD,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,GAChC,WAAW,yBAAyB,EACpC,KAAK,MAAM,KACT,iBA6CF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,uBAAuB,GACnC,WAAW,yBAAyB,EACpC,KAAK,MAAM,KACT,iBAaF,CAAC"}
+{"version":3,"file":"transports_ws_auth_guard.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/transports_ws_auth_guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,4BAA4B,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;AAE/D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAMxD,CAAC;AAEH;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,GAChC,WAAW,yBAAyB,EACpC,KAAK,MAAM,KACT,iBA6CF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,uBAAuB,GACnC,WAAW,yBAAyB,EACpC,KAAK,MAAM,KACT,iBAaF,CAAC"}

package/dist/actions/transports_ws_auth_guard.js

@@ -108,8 +108,7 @@ export const create_ws_auth_guard = (transport, log) => {
  * Sibling helper to `create_ws_auth_guard` — kept separate because
  * `ws_disconnect_event_types` deliberately omits `logout` (admin-initiated
  * revocations use `session_revoke`, while `logout` is the user-initiated
- * case). Three consumers (tx, undying, zzz) hand-rolled this same branch
- * before extraction.
+ * case). Multiple consumers hand-rolled this same branch before extraction.
  *
  * Compose with `create_ws_auth_guard` to handle both kinds of disconnect:
  *