@fuzdev/fuz_app 0.64.0 → 0.66.0

package/dist/testing/schema_parity.js

@@ -0,0 +1,233 @@
+import './assert_dev_env.js';
+/**
+ * Structural diff between two snapshots — empty array means parity holds.
+ *
+ * Order of diffs is deterministic: schema_version first, then tables in
+ * sorted order (with column/index/constraint sub-diffs grouped per table),
+ * then sequences. Consumers can rely on this for stable diff output.
+ */
+export const diff_schema_snapshots = (a, b) => {
+    const diffs = [];
+    diff_schema_version(a.schema_version, b.schema_version, diffs);
+    const all_tables = new Set([...Object.keys(a.tables), ...Object.keys(b.tables)]);
+    for (const table of [...all_tables].sort()) {
+        const ta = a.tables[table];
+        const tb = b.tables[table];
+        if (!ta) {
+            diffs.push({ kind: 'table_only_in', where: 'b', table });
+            continue;
+        }
+        if (!tb) {
+            diffs.push({ kind: 'table_only_in', where: 'a', table });
+            continue;
+        }
+        diff_table(table, ta, tb, diffs);
+    }
+    const all_sequences = new Set([...Object.keys(a.sequences), ...Object.keys(b.sequences)]);
+    for (const sequence of [...all_sequences].sort()) {
+        const sa = a.sequences[sequence];
+        const sb = b.sequences[sequence];
+        if (!sa) {
+            diffs.push({ kind: 'sequence_only_in', where: 'b', sequence });
+            continue;
+        }
+        if (!sb) {
+            diffs.push({ kind: 'sequence_only_in', where: 'a', sequence });
+            continue;
+        }
+        diff_sequence(sequence, sa, sb, diffs);
+    }
+    return diffs;
+};
+const diff_schema_version = (a, b, out) => {
+    const key = (r) => `${r.namespace}\x00${r.name}`;
+    const a_by_key = new Map(a.map((r) => [key(r), r]));
+    const b_by_key = new Map(b.map((r) => [key(r), r]));
+    const keys = new Set([...a_by_key.keys(), ...b_by_key.keys()]);
+    for (const k of [...keys].sort()) {
+        const row_a = a_by_key.get(k);
+        const row_b = b_by_key.get(k);
+        if (!row_a) {
+            out.push({ kind: 'schema_version_only_in', where: 'b', row: row_b });
+            continue;
+        }
+        if (!row_b) {
+            out.push({ kind: 'schema_version_only_in', where: 'a', row: row_a });
+            continue;
+        }
+        if (row_a.sequence !== row_b.sequence) {
+            out.push({
+                kind: 'schema_version_sequence_differs',
+                namespace: row_a.namespace,
+                name: row_a.name,
+                a: row_a.sequence,
+                b: row_b.sequence,
+            });
+        }
+    }
+};
+const COLUMN_FIELDS = [
+    'data_type',
+    'udt_name',
+    'is_nullable',
+    'column_default',
+    'is_identity',
+];
+const diff_table = (table, a, b, out) => {
+    const all_columns = new Set([...Object.keys(a.columns), ...Object.keys(b.columns)]);
+    for (const column of [...all_columns].sort()) {
+        const ca = a.columns[column];
+        const cb = b.columns[column];
+        if (!ca) {
+            out.push({ kind: 'column_only_in', where: 'b', table, column });
+            continue;
+        }
+        if (!cb) {
+            out.push({ kind: 'column_only_in', where: 'a', table, column });
+            continue;
+        }
+        for (const field of COLUMN_FIELDS) {
+            if (ca[field] !== cb[field]) {
+                out.push({
+                    kind: 'column_field_differs',
+                    table,
+                    column,
+                    field,
+                    a: ca[field],
+                    b: cb[field],
+                });
+            }
+        }
+    }
+    const a_indexes = new Map(a.indexes.map((i) => [i.name, i.definition]));
+    const b_indexes = new Map(b.indexes.map((i) => [i.name, i.definition]));
+    const all_indexes = new Set([...a_indexes.keys(), ...b_indexes.keys()]);
+    for (const index of [...all_indexes].sort()) {
+        const def_a = a_indexes.get(index);
+        const def_b = b_indexes.get(index);
+        if (def_a === undefined) {
+            out.push({ kind: 'index_only_in', where: 'b', table, index });
+            continue;
+        }
+        if (def_b === undefined) {
+            out.push({ kind: 'index_only_in', where: 'a', table, index });
+            continue;
+        }
+        if (def_a !== def_b) {
+            out.push({ kind: 'index_definition_differs', table, index, a: def_a, b: def_b });
+        }
+    }
+    const a_constraints = new Map(a.constraints.map((c) => [c.name, c]));
+    const b_constraints = new Map(b.constraints.map((c) => [c.name, c]));
+    const all_constraints = new Set([...a_constraints.keys(), ...b_constraints.keys()]);
+    for (const constraint of [...all_constraints].sort()) {
+        const ca = a_constraints.get(constraint);
+        const cb = b_constraints.get(constraint);
+        if (!ca) {
+            out.push({ kind: 'constraint_only_in', where: 'b', table, constraint });
+            continue;
+        }
+        if (!cb) {
+            out.push({ kind: 'constraint_only_in', where: 'a', table, constraint });
+            continue;
+        }
+        if (ca.type !== cb.type || ca.definition !== cb.definition) {
+            out.push({
+                kind: 'constraint_differs',
+                table,
+                constraint,
+                a: { type: ca.type, definition: ca.definition },
+                b: { type: cb.type, definition: cb.definition },
+            });
+        }
+    }
+};
+const diff_sequence = (sequence, a, b, out) => {
+    if (a.data_type !== b.data_type) {
+        out.push({
+            kind: 'sequence_data_type_differs',
+            sequence,
+            a: a.data_type,
+            b: b.data_type,
+        });
+    }
+};
+/**
+ * Render a diff list as a human-readable multi-line string. Empty diffs
+ * produce an empty string.
+ */
+export const format_schema_diffs = (diffs, labels = {}) => {
+    if (diffs.length === 0)
+        return '';
+    const label_a = labels.a ?? 'a';
+    const label_b = labels.b ?? 'b';
+    const where_label = (where) => (where === 'a' ? label_a : label_b);
+    const lines = [];
+    for (const d of diffs) {
+        switch (d.kind) {
+            case 'schema_version_only_in':
+                lines.push(`  schema_version row only in ${where_label(d.where)}: ${d.row.namespace}/${d.row.name} (sequence ${d.row.sequence})`);
+                break;
+            case 'schema_version_sequence_differs':
+                lines.push(`  schema_version sequence differs for ${d.namespace}/${d.name}: ${label_a}=${d.a}, ${label_b}=${d.b}`);
+                break;
+            case 'table_only_in':
+                lines.push(`  table ${d.table} only in ${where_label(d.where)}`);
+                break;
+            case 'column_only_in':
+                lines.push(`  ${d.table}.${d.column} only in ${where_label(d.where)}`);
+                break;
+            case 'column_field_differs':
+                lines.push(`  ${d.table}.${d.column} ${d.field} differs: ${label_a}=${JSON.stringify(d.a)}, ${label_b}=${JSON.stringify(d.b)}`);
+                break;
+            case 'index_only_in':
+                lines.push(`  index ${d.index} on ${d.table} only in ${where_label(d.where)}`);
+                break;
+            case 'index_definition_differs':
+                lines.push(`  index ${d.index} on ${d.table} differs:\n    ${label_a}: ${d.a}\n    ${label_b}: ${d.b}`);
+                break;
+            case 'constraint_only_in':
+                lines.push(`  constraint ${d.constraint} on ${d.table} only in ${where_label(d.where)}`);
+                break;
+            case 'constraint_differs':
+                lines.push(`  constraint ${d.constraint} on ${d.table} differs:\n    ${label_a}: ${d.a.type} ${d.a.definition}\n    ${label_b}: ${d.b.type} ${d.b.definition}`);
+                break;
+            case 'sequence_only_in':
+                lines.push(`  sequence ${d.sequence} only in ${where_label(d.where)}`);
+                break;
+            case 'sequence_data_type_differs':
+                lines.push(`  sequence ${d.sequence} data_type differs: ${label_a}=${d.a}, ${label_b}=${d.b}`);
+                break;
+            default:
+                // Compile-time exhaustiveness — a new SchemaDiff variant without a
+                // case here makes `d` non-never and fails type-check.
+                d;
+                break;
+        }
+    }
+    return lines.join('\n');
+};
+/**
+ * Throw if the two snapshots disagree. The error message names the impls
+ * (via `labels`) and lists every diff, so the failure is self-diagnosing.
+ *
+ * Consumers wire this after bootstrapping each impl against an isolated DB:
+ *
+ * ```ts
+ * await drop_recreate_db('zzz_test');
+ * await spawn_backend(deno_config);
+ * const snapshot_deno = await query_schema_snapshot(db, {});
+ * await drop_recreate_db('zzz_test');
+ * await spawn_backend(rust_config);
+ * const snapshot_rust = await query_schema_snapshot(db, {});
+ * assert_schema_snapshots_equal(snapshot_deno, snapshot_rust, {a: 'deno', b: 'rust'});
+ * ```
+ */
+export const assert_schema_snapshots_equal = (a, b, labels = {}) => {
+    const diffs = diff_schema_snapshots(a, b);
+    if (diffs.length === 0)
+        return;
+    const label_a = labels.a ?? 'a';
+    const label_b = labels.b ?? 'b';
+    throw new Error(`Schema parity failed: ${diffs.length} diff(s) between ${label_a} and ${label_b}\n${format_schema_diffs(diffs, labels)}`);
+};

package/dist/testing/sse_round_trip.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse_round_trip.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/sse_round_trip.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAmB7B,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAwB,KAAK,SAAS,EAAuB,MAAM,oBAAoB,CAAC;AAE/F,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAEN,KAAK,eAAe,EACpB,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAwB,KAAK,SAAS,EAAC,MAAM,SAAS,CAAC;AAE9D,OAAO,EAIN,KAAK,uBAAuB,EAC5B,MAAM,kBAAkB,CAAC;AAM1B,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAChC,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,EAAE,CAAC,GAAG,EAAE;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,WAAW,CAAA;KAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E;;;OAGG;IACH,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,8CAA8C;AAC9C,MAAM,WAAW,mBAAmB;IACnC,4CAA4C;IAC5C,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,qDAAqD;IACrD,kBAAkB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,iDAAiD;IACjD,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,qEAAqE;IACrE,YAAY,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAChD;;;;;;;;;;;;OAYG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC,8BAA8B;IAC9B,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;CAChC;AAyHD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,GAAI,SAAS,mBAAmB,KAAG,IAgIvE,CAAC"}
+{"version":3,"file":"sse_round_trip.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/sse_round_trip.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAmB7B,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAwB,KAAK,SAAS,EAAuB,MAAM,oBAAoB,CAAC;AAE/F,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAEN,KAAK,eAAe,EACpB,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAwB,KAAK,SAAS,EAAC,MAAM,SAAS,CAAC;AAE9D,OAAO,EAIN,KAAK,uBAAuB,EAC5B,MAAM,kBAAkB,CAAC;AAO1B,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAChC,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,EAAE,CAAC,GAAG,EAAE;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,WAAW,CAAA;KAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E;;;OAGG;IACH,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,8CAA8C;AAC9C,MAAM,WAAW,mBAAmB;IACnC,4CAA4C;IAC5C,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,qDAAqD;IACrD,kBAAkB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,iDAAiD;IACjD,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,qEAAqE;IACrE,YAAY,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;IAChD;;;;;;;;;;;;OAYG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC,8BAA8B;IAC9B,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;CAChC;AA+CD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,GAAI,SAAS,mBAAmB,KAAG,IAgIvE,CAAC"}

package/dist/testing/sse_round_trip.js

@@ -24,74 +24,7 @@ import { rpc_call, require_rpc_endpoint_path, resolve_rpc_endpoints_for_setup, }
 import { run_migrations } from '../db/migrate.js';
 import { auth_migration_ns } from '../auth/migrations.js';
 import { account_session_revoke_all_action_spec } from '../auth/account_action_specs.js';
-/**
- * Read one complete SSE frame (up to `\n\n`) from a stream reader.
- *
- * Returns the frame without the trailing `\n\n`. Throws on premature close.
- * Preserves any bytes past the terminator in the shared buffer for the next call.
- */
-const create_sse_frame_reader = (reader) => {
-    const decoder = new TextDecoder();
-    let buffer = '';
-    let closed = false;
-    const pump_once = async (timeout_ms) => {
-        // Race the read against a timeout — vitest will otherwise hang on a misbehaving stream.
-        const timeout = new Promise((resolve) => {
-            setTimeout(() => resolve({ done: true, value: undefined, timed_out: true }), timeout_ms);
-        });
-        const result = (await Promise.race([reader.read(), timeout]));
-        if ('timed_out' in result) {
-            throw new Error(`SSE read timed out after ${timeout_ms}ms`);
-        }
-        if (result.done) {
-            closed = true;
-            return false;
-        }
-        buffer += decoder.decode(result.value, { stream: true });
-        return true;
-    };
-    return {
-        read_frame: async (timeout_ms = 2000) => {
-            // SSE frames end with a blank line — the canonical terminator is `\n\n`.
-            while (true) {
-                const idx = buffer.indexOf('\n\n');
-                if (idx >= 0) {
-                    const frame = buffer.slice(0, idx);
-                    buffer = buffer.slice(idx + 2);
-                    return frame;
-                }
-                const cont = await pump_once(timeout_ms);
-                if (!cont)
-                    throw new Error('SSE stream ended before a frame was received');
-            }
-        },
-        wait_for_close: async (timeout_ms) => {
-            // Drain until the server closes the stream (pump_once returns false) or timeout expires.
-            const deadline = Date.now() + timeout_ms;
-            for (;;) {
-                if (closed)
-                    return true;
-                const remaining = deadline - Date.now();
-                if (remaining <= 0)
-                    return false;
-                try {
-                    await pump_once(Math.min(remaining, timeout_ms));
-                }
-                catch {
-                    return false;
-                }
-            }
-        },
-        cancel: async () => {
-            try {
-                await reader.cancel();
-            }
-            catch {
-                // already closed
-            }
-        },
-    };
-};
+import { create_sse_frame_reader } from './transports/sse_frame_reader.js';
 /**
  * Validate a decoded SSE `data:` frame as a JSON-RPC-style `{method, params}` payload.
  */

package/dist/testing/standard.d.ts

@@ -2,59 +2,90 @@ import './assert_dev_env.js';
 /**
  * Combined standard test suite helper.
  *
- * Convenience wrapper that runs both `describe_standard_integration_tests`
- * and `describe_standard_admin_integration_tests` in a single call.
- * Existing per-suite calls keep working — this is purely additive.
+ * Bundles every DB-backed suite carrying the standard option shape, each
+ * gated on its relevant config — silent-skip when the gate isn't met
+ * (same precedent as `describe_standard_admin_integration_tests` skipping
+ * when `roles` isn't provided). Consumers wire the standard surface in
+ * one call instead of seven; forgetting a suite no longer silently loses
+ * coverage.
+ *
+ * Attack surface suites stay separate — their option shape is
+ * `{build, snapshot_path, expected_public_routes, ...}` rather than
+ * `{setup_test, surface_source, capabilities}`. A peer bundler lives
+ * for that side if/when needed.
  *
  * @module
  */
 import type { SessionOptions } from '../auth/session_cookie.js';
-import type { AppServerContext, AppServerOptions } from '../server/app_server.js';
-import type { RouteSpec } from '../http/route_spec.js';
 import type { RoleSchemaResult } from '../auth/role_schema.js';
-import type { DbFactory } from './db.js';
+import type { AppServerContext, BootstrapServerOptions } from '../server/app_server.js';
+import type { RouteSpec } from '../http/route_spec.js';
 import type { RpcEndpointsSuiteOption } from './rpc_helpers.js';
+import type { BackendCapabilities } from './cross_backend/capabilities.js';
+import type { SetupTest } from './cross_backend/setup.js';
+import type { AppSurfaceSpec } from '../http/surface.js';
+import type { SuiteAppOptions } from './app_server.js';
 /**
  * Configuration for `describe_standard_tests`.
  */
 export interface StandardTestOptions {
-    /** Session config for cookie-based auth. */
-    session_options: SessionOptions<string>;
-    /** Route spec factory — same one used in production. */
-    create_route_specs: (ctx: AppServerContext) => Array<RouteSpec>;
-    /** Optional overrides for `AppServerOptions`. */
-    app_options?: Partial<Omit<AppServerOptions, 'backend' | 'session_options' | 'create_route_specs'>>;
+    /** Per-test fixture-producing function. */
+    setup_test: SetupTest;
     /**
-     * Database factories to run tests against. Default: pglite only.
+     * App surface. Constructed in TS by the consumer; same shape for
+     * in-process and cross-process tests.
      */
-    db_factories?: Array<DbFactory>;
+    surface_source: AppSurfaceSpec;
+    /** Backend capability declarations. */
+    capabilities: BackendCapabilities;
+    /** Session config — needed for cookie_name + factory-form rpc_endpoints resolution. */
+    session_options: SessionOptions<string>;
     /**
-     * Role schema result from `create_role_schema()`.
-     * When provided, admin integration tests are included.
+     * Route spec factory — same one used in production. Required by
+     * `describe_rate_limiting_tests`, which builds a fresh `TestApp` per test
+     * (bypasses the shared `setup_test` fixture) so it can pass tight
+     * per-test rate-limiter overrides.
      */
-    roles?: RoleSchemaResult;
+    create_route_specs: (ctx: AppServerContext) => Array<RouteSpec>;
     /**
      * RPC endpoint specs — required. The standard integration tests drive
      * `account_verify`, `account_session_*`, `account_token_*` through the
      * RPC surface (and admin tests, when wired, drive role_grant grant/revoke
      * through it too).
-     *
-     * Accepts either an array (eager) or a factory
-     * `(ctx: AppServerContext) => Array<RpcEndpointSpec>`. Round-tripped
-     * to both sub-suites unchanged — see their docstrings for the full
-     * factory-form contract.
      */
     rpc_endpoints: RpcEndpointsSuiteOption;
+    /**
+     * Role schema result from `create_role_schema()`.
+     * When provided, admin integration + audit completeness suites are included.
+     */
+    roles?: RoleSchemaResult;
+    /**
+     * Bootstrap config — when set to `mode: 'live'`, the bootstrap success
+     * suite runs against `create_test_app_for_bootstrap`. Other modes
+     * (`'disabled'` / `'surface_only'` / omission) silent-skip the suite.
+     */
+    bootstrap?: BootstrapServerOptions;
+    /** Optional overrides forwarded to `describe_rate_limiting_tests`. */
+    rate_limiting_app_options?: SuiteAppOptions;
     /**
      * Path prefix where admin routes are mounted.
      * Default `'/api/admin'`.
      */
     admin_prefix?: string;
+    /**
+     * Forwarded to `describe_standard_integration_tests` — overrides the
+     * default error-coverage threshold on the scoped REST surface. Set to
+     * `0` to skip the assertion entirely.
+     */
+    error_coverage_min?: number;
+    /** Override the bootstrap-success suite's synthetic token. */
+    bootstrap_token?: string;
 }
 /**
- * Run both standard integration and admin integration test suites.
- *
- * Admin tests are only included when `roles` is provided.
+ * Run the full standard test bundle — integration, admin (when `roles`
+ * provided), audit completeness (when `roles` provided), bootstrap
+ * success (when `bootstrap.mode === 'live'`), round trip, RPC round
+ * trip, data exposure, rate limiting.
  */
 export declare const describe_standard_tests: (options: StandardTestOptions) => void;
 //# sourceMappingURL=standard.d.ts.map

package/dist/testing/standard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"standard.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/standard.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAE7B;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAC,gBAAgB,EAAE,gBAAgB,EAAC,MAAM,yBAAyB,CAAC;AAChF,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,SAAS,CAAC;AAGvC,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,kBAAkB,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,4CAA4C;IAC5C,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,wDAAwD;IACxD,kBAAkB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,iDAAiD;IACjD,WAAW,CAAC,EAAE,OAAO,CACpB,IAAI,CAAC,gBAAgB,EAAE,SAAS,GAAG,iBAAiB,GAAG,oBAAoB,CAAC,CAC5E,CAAC;IACF;;OAEG;IACH,YAAY,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAChC;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;;;;;;;OAUG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,GAAI,SAAS,mBAAmB,KAAG,IAStE,CAAC"}
+{"version":3,"file":"standard.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/standard.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAC,gBAAgB,EAAE,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AACtF,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,uBAAuB,CAAC;AASrD,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,0BAA0B,CAAC;AACxD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,iBAAiB,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,2CAA2C;IAC3C,UAAU,EAAE,SAAS,CAAC;IACtB;;;OAGG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B,uCAAuC;IACvC,YAAY,EAAE,mBAAmB,CAAC;IAClC,uFAAuF;IACvF,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC;;;;;OAKG;IACH,kBAAkB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE;;;;;OAKG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;;OAIG;IACH,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,sEAAsE;IACtE,yBAAyB,CAAC,EAAE,eAAe,CAAC;IAC5C;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GAAI,SAAS,mBAAmB,KAAG,IA2DtE,CAAC"}

package/dist/testing/standard.js

@@ -1,18 +1,75 @@
 import './assert_dev_env.js';
 import { describe_standard_integration_tests } from './integration.js';
 import { describe_standard_admin_integration_tests } from './admin_integration.js';
+import { describe_round_trip_validation } from './round_trip.js';
+import { describe_data_exposure_tests } from './data_exposure.js';
+import { describe_rpc_round_trip_tests } from './rpc_round_trip.js';
+import { describe_audit_completeness_tests } from './audit_completeness.js';
+import { describe_rate_limiting_tests } from './rate_limiting.js';
+import { describe_bootstrap_success_tests } from './bootstrap_success.js';
 /**
- * Run both standard integration and admin integration test suites.
- *
- * Admin tests are only included when `roles` is provided.
+ * Run the full standard test bundle — integration, admin (when `roles`
+ * provided), audit completeness (when `roles` provided), bootstrap
+ * success (when `bootstrap.mode === 'live'`), round trip, RPC round
+ * trip, data exposure, rate limiting.
  */
 export const describe_standard_tests = (options) => {
-    describe_standard_integration_tests(options);
+    describe_standard_integration_tests({
+        setup_test: options.setup_test,
+        surface_source: options.surface_source,
+        capabilities: options.capabilities,
+        session_options: options.session_options,
+        rpc_endpoints: options.rpc_endpoints,
+        error_coverage_min: options.error_coverage_min,
+    });
+    describe_round_trip_validation({
+        setup_test: options.setup_test,
+        surface_source: options.surface_source,
+        capabilities: options.capabilities,
+    });
+    describe_rpc_round_trip_tests({
+        setup_test: options.setup_test,
+        surface_source: options.surface_source,
+        capabilities: options.capabilities,
+        session_options: options.session_options,
+        rpc_endpoints: options.rpc_endpoints,
+    });
+    describe_data_exposure_tests({
+        setup_test: options.setup_test,
+        surface_source: options.surface_source,
+        capabilities: options.capabilities,
+    });
+    describe_rate_limiting_tests({
+        session_options: options.session_options,
+        create_route_specs: options.create_route_specs,
+        rpc_endpoints: options.rpc_endpoints,
+        app_options: options.rate_limiting_app_options,
+    });
     if (options.roles) {
         describe_standard_admin_integration_tests({
-            ...options,
+            setup_test: options.setup_test,
+            surface_source: options.surface_source,
+            capabilities: options.capabilities,
+            session_options: options.session_options,
             roles: options.roles,
             rpc_endpoints: options.rpc_endpoints,
+            admin_prefix: options.admin_prefix,
+        });
+        describe_audit_completeness_tests({
+            setup_test: options.setup_test,
+            surface_source: options.surface_source,
+            capabilities: options.capabilities,
+            session_options: options.session_options,
+            rpc_endpoints: options.rpc_endpoints,
+        });
+    }
+    if (options.bootstrap?.mode === 'live') {
+        describe_bootstrap_success_tests({
+            session_options: options.session_options,
+            create_route_specs: options.create_route_specs,
+            rpc_endpoints: options.rpc_endpoints,
+            bootstrap: options.bootstrap,
+            bootstrap_token: options.bootstrap_token,
         });
     }
 };

package/dist/testing/stubs.d.ts

@@ -4,7 +4,7 @@ import type { SessionOptions } from '../auth/session_cookie.js';
 import type { MiddlewareSpec } from '../http/middleware_spec.js';
 import type { AppDeps } from '../auth/deps.js';
 import type { AuditEmitter } from '../auth/audit_emitter.js';
-import type { AppServerContext } from '../server/app_server.js';
+import type { AppServerContext, BootstrapServerOptions } from '../server/app_server.js';
 import { Db } from '../db/db.js';
 import { type RouteSpec } from '../http/route_spec.js';
 import { type AppSurfaceSpec, type RpcEndpointSpec } from '../http/surface.js';
@@ -127,13 +127,28 @@ export interface CreateTestAppSurfaceSpecOptions {
      * only, never mounts.
      */
     ws_endpoints?: ReadonlyArray<WsEndpointSpec> | ((ctx: AppServerContext) => ReadonlyArray<WsEndpointSpec>);
-    /** Transform middleware array (e.g., tx's `extend_middleware_for_tx_binary`). */
+    /** Transform middleware array (e.g., zap's `extend_middleware_for_zap_binary`). */
     transform_middleware?: (specs: Array<MiddlewareSpec>) => Array<MiddlewareSpec>;
-    /** Bootstrap route prefix (default: `'/api/account'`). */
-    bootstrap_route_prefix?: string;
+    /**
+     * Bootstrap config — symmetric with `AppServerOptions.bootstrap`. Discriminated
+     * by `mode`: `'disabled'` skips the route (same as omission), `'surface_only'`
+     * mounts the route shape, `'live'` accepts a `token_path` for production
+     * symmetry (surface assembly only uses it for shape symmetry; the value is a
+     * live-execution concern handled by `create_test_app` → `create_app_server`).
+     *
+     * Surface assembly only reads `route_prefix` (default `'/api/account'`).
+     */
+    bootstrap?: BootstrapServerOptions;
 }
 /**
- * Create an `AppSurfaceSpec` for attack surface testing.
+ * Create an `AppSurfaceSpec` for the standard testing suites.
+ *
+ * Used by both in-process and cross-process tests as the schema source —
+ * the cross-process-ness lives in the transport + per-test fixture, not
+ * here. The on-disk `*_attack_surface.json` snapshot is observability
+ * (gen-time drift detection via `assert_surface_matches_snapshot`); the
+ * suites consume the spec object this function returns, not the JSON
+ * file.
  *
  * Mirrors `create_app_server`'s route assembly: consumer routes +
  * factory-managed bootstrap routes + surface generation. If
@@ -141,7 +156,7 @@ export interface CreateTestAppSurfaceSpecOptions {
  * to stay in sync (single source of truth for all consumers).
  *
  * @param options - surface spec options
- * @returns the surface spec for snapshot and adversarial testing
+ * @returns the surface spec for the standard suites
  */
 export declare const create_test_app_surface_spec: (options: CreateTestAppSurfaceSpecOptions) => AppSurfaceSpec;
 //# sourceMappingURL=stubs.d.ts.map

package/dist/testing/stubs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stubs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/stubs.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAa7B,OAAO,KAAK,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAE3B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,4BAA4B,CAAC;AAE/D,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,0BAA0B,CAAC;AAE3D,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAC,EAAE,EAAC,MAAM,aAAa,CAAC;AAC/B,OAAO,EAAqB,KAAK,SAAS,EAAC,MAAM,uBAAuB,CAAC;AAGzE,OAAO,EAEN,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAC,SAAS,EAAkB,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAA8B,KAAK,WAAW,EAAC,MAAM,+BAA+B,CAAC;AAM5F;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,oBAAoB,GAAI,CAAC,GAAG,GAAG,EAAE,OAAO,MAAM,KAAG,CAqBtD,CAAC;AAET;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,GAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,MAAM,EAAE,YAAY,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,CAOxF,CAAC;AAET,iEAAiE;AACjE,eAAO,MAAM,IAAI,EAAE,GAAkC,CAAC;AAEtD;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,QAAO,EAI/B,CAAC;AAEJ,gDAAgD;AAChD,eAAO,MAAM,YAAY,QAAO,QAAgC,CAAC;AAEjE,2CAA2C;AAC3C,eAAO,MAAM,OAAO,GAAU,IAAI,GAAG,EAAE,MAAM,GAAG,KAAG,OAAO,CAAC,IAAI,CAAW,CAAC;AAI3E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,QAAO,YAM3C,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,QAAO,WAUxC,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,aAAa,EAAE,OAS3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,QAAO,OAStC,CAAC;AAEH,2FAA2F;AAC3F,eAAO,MAAM,0BAA0B,GAAI,UAAU;IACpD,iDAAiD;IACjD,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAC/B,KAAG,KAAK,CAAC,cAAc,CAqBvB,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,GAC1C,iBAAiB,cAAc,CAAC,MAAM,CAAC,KACrC,gBAqBF,CAAC;AAEF,kDAAkD;AAClD,MAAM,WAAW,+BAA+B;IAC/C,6DAA6D;IAC7D,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,qFAAqF;IACrF,kBAAkB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,oEAAoE;IACpE,UAAU,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IACzB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/B;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IAC7F;;;;;;;;OAQG;IACH,YAAY,CAAC,EACV,aAAa,CAAC,cAAc,CAAC,GAC7B,CAAC,CAAC,GAAG,EAAE,gBAAgB,KAAK,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9D,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/E,0DAA0D;IAC1D,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,GACxC,SAAS,+BAA+B,KACtC,cAgDF,CAAC"}
+{"version":3,"file":"stubs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/stubs.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAa7B,OAAO,KAAK,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAE3B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,4BAA4B,CAAC;AAE/D,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,0BAA0B,CAAC;AAE3D,OAAO,KAAK,EAAC,gBAAgB,EAAE,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAC,EAAE,EAAC,MAAM,aAAa,CAAC;AAC/B,OAAO,EAAqB,KAAK,SAAS,EAAC,MAAM,uBAAuB,CAAC;AAGzE,OAAO,EAEN,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAC,SAAS,EAAkB,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAA8B,KAAK,WAAW,EAAC,MAAM,+BAA+B,CAAC;AAI5F;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,oBAAoB,GAAI,CAAC,GAAG,GAAG,EAAE,OAAO,MAAM,KAAG,CAqBtD,CAAC;AAET;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,GAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,MAAM,EAAE,YAAY,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,CAOxF,CAAC;AAET,iEAAiE;AACjE,eAAO,MAAM,IAAI,EAAE,GAAkC,CAAC;AAEtD;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,QAAO,EAI/B,CAAC;AAEJ,gDAAgD;AAChD,eAAO,MAAM,YAAY,QAAO,QAAgC,CAAC;AAEjE,2CAA2C;AAC3C,eAAO,MAAM,OAAO,GAAU,IAAI,GAAG,EAAE,MAAM,GAAG,KAAG,OAAO,CAAC,IAAI,CAAW,CAAC;AAI3E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,QAAO,YAM3C,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,QAAO,WAUxC,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,aAAa,EAAE,OAS3B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,QAAO,OAStC,CAAC;AAEH,2FAA2F;AAC3F,eAAO,MAAM,0BAA0B,GAAI,UAAU;IACpD,iDAAiD;IACjD,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAC/B,KAAG,KAAK,CAAC,cAAc,CAqBvB,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,GAC1C,iBAAiB,cAAc,CAAC,MAAM,CAAC,KACrC,gBAqBF,CAAC;AAEF,kDAAkD;AAClD,MAAM,WAAW,+BAA+B;IAC/C,6DAA6D;IAC7D,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,qFAAqF;IACrF,kBAAkB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,oEAAoE;IACpE,UAAU,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;IACzB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/B;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IAC7F;;;;;;;;OAQG;IACH,YAAY,CAAC,EACV,aAAa,CAAC,cAAc,CAAC,GAC7B,CAAC,CAAC,GAAG,EAAE,gBAAgB,KAAK,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9D,mFAAmF;IACnF,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/E;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACnC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,4BAA4B,GACxC,SAAS,+BAA+B,KACtC,cAwDF,CAAC"}