@fuzdev/fuz_app 0.69.0 → 0.70.0

package/dist/testing/CLAUDE.md

@@ -219,15 +219,16 @@ test-only by construction.
 - `assert_schema_snapshots_equal(a, b, labels?)` — throws on drift with a fully-formatted diff message.
 - `SchemaDiff` — tagged-union per drift kind: `schema_version_only_in`, `schema_version_sequence_differs`, `table_only_in`, `column_only_in`, `column_field_differs`, `index_only_in`, `index_definition_differs`, `constraint_only_in`, `constraint_differs`, `sequence_only_in`, `sequence_data_type_differs`.
 
-**Cross-impl gate pattern** — consumers running two backends against a
-shared schema (zzz's `--backend=both`, fuz_app's cross-backend suite)
-bootstrap each impl against an isolated DB, snapshot, then compare:
+**Cross-impl gate pattern** — a dual-impl consumer running two backends
+(a TS Hono server and a Rust spine server) against a shared schema, plus
+fuz_app's own cross-backend suite, bootstrap each impl against an isolated
+DB, snapshot, then compare:
 
 ```ts
-await drop_recreate_db('zzz_test');
+await drop_recreate_db('app_test');
 await spawn_backend(deno_config);
 const snapshot_deno = await query_schema_snapshot(db);
-await drop_recreate_db('zzz_test');
+await drop_recreate_db('app_test');
 await spawn_backend(rust_config);
 const snapshot_rust = await query_schema_snapshot(db);
 assert_schema_snapshots_equal(snapshot_deno, snapshot_rust, {a: 'deno', b: 'rust'});
@@ -789,8 +790,8 @@ points:
 The standard test suites take a unified
 `{setup_test, surface_source, capabilities}` shape so the same suite bodies
 run against an in-process Hono harness today and against a spawned backend
-over real HTTP — either the Rust spine (`zzz_server`, `fuz_forge_server`, or
-the non-domain `testing_spine_stub`) or a **TS** spine binary built on the
+over real HTTP — either the Rust spine (`zzz_server`, another consumer's
+spine server, or the non-domain `testing_spine_stub`) or a **TS** spine binary built on the
 test-server core below (fuz_app's own domain-free `testing_spine_server`, run
 on Node + Deno + Bun). In-process is the fast feedback path; cross-process is the
 source of truth for wire-shape conformance.
@@ -1094,7 +1095,11 @@ in-process legs (plain `gro test`) are `src/test/auth/cell_crud_parity.db.test.t
   same bootstrap-equivalent step (the only path for roles like
   `ROLE_KEEPER` whose `grant_paths` is bootstrap-only), refreshes
   `DaemonTokenState.keeper_account_id` to the new row, then fires the
-  consumer-supplied `reset_state` callback for domain-state reset. Auth
+  consumer-supplied `reset_state(db)` callback for domain-state reset —
+  passed the **transactional** `Db` the auth wipe ran on, so DB-domain
+  consumers (e.g. fuz_forge truncating its cell / fact / file tables) reset
+  on the same connection rather than a separately-pooled one that would
+  deadlock against this open transaction under PGlite. Auth
   gates on `credential_types: ['daemon_token']` — effectively keeper-only
   without forcing the `actor: 'required'` ⟺ `acting?: ActingActor`
   biconditional. No free-form runtime grant action exists — see the

package/dist/testing/cross_backend/create_cross_backend_global_setup.d.ts

@@ -0,0 +1,57 @@
+import '../assert_dev_env.js';
+/**
+ * Generic vitest `globalSetup` factory for cross-backend integration suites.
+ *
+ * Pairs with `make_cross_backend_project`: each cross-backend vitest project
+ * sets its own `test.name`, and this factory derives the backend name from
+ * that project name (vitest 4 passes the `TestProject` to globalSetup), picks
+ * the matching `BackendConfig`, spawns + bootstraps it via `bootstrap_backend`,
+ * and `provide`s a serializable handle that `*.cross.test.ts` files
+ * `inject` and rebuild with `reconstruct_bootstrapped_handle`.
+ *
+ * A consumer's `global_setup.ts` collapses to:
+ *
+ * ```ts
+ * import {create_cross_backend_global_setup} from
+ *   '@fuzdev/fuz_app/testing/cross_backend/create_cross_backend_global_setup.js';
+ * import {deno_backend_config, rust_backend_config} from './my_backend_config.js';
+ * import './cross_test_types.js'; // augments inject('backend_handle')
+ *
+ * export default create_cross_backend_global_setup({
+ *   configs: {deno: deno_backend_config, rust: rust_backend_config},
+ * });
+ * ```
+ *
+ * vitest 4's `provide` hard-rejects non-serializable values, so the live
+ * `child` / `teardown` / `keeper_transport` are stripped via
+ * `serialize_bootstrapped_handle`; the teardown closure stays in the
+ * globalSetup process and is returned for vitest to fire after the suite.
+ *
+ * @module
+ */
+import type { TestProject } from 'vitest/node';
+import type { BackendConfig } from './backend_config.js';
+export interface CrossBackendGlobalSetupOptions {
+    /**
+     * Map of derived backend name → `BackendConfig` factory. The derived
+     * name (see `derive_name`) selects the factory; unknown names throw with
+     * the full supported list so a misnamed project surfaces clearly.
+     */
+    readonly configs: Readonly<Record<string, () => BackendConfig>>;
+    /**
+     * Derive the backend name from the vitest project name. Default strips
+     * `cross_backend_(ts_)?`.
+     */
+    readonly derive_name?: (project_name: string) => string;
+    /**
+     * Key passed to `project.provide` (and read by `inject` in test files).
+     * Default `'backend_handle'`. Augment vitest's `ProvidedContext` for it.
+     */
+    readonly provide_key?: string;
+}
+/**
+ * Build a vitest `globalSetup` default export. Returns the
+ * `(project) => teardown` function vitest 4 expects.
+ */
+export declare const create_cross_backend_global_setup: ({ configs, derive_name, provide_key, }: CrossBackendGlobalSetupOptions) => ((project: TestProject) => Promise<() => Promise<void>>);
+//# sourceMappingURL=create_cross_backend_global_setup.d.ts.map

package/dist/testing/cross_backend/create_cross_backend_global_setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create_cross_backend_global_setup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/create_cross_backend_global_setup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAE7C,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAYvD,MAAM,WAAW,8BAA8B;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,aAAa,CAAC,CAAC,CAAC;IAChE;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;IACxD;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;GAGG;AACH,eAAO,MAAM,iCAAiC,GAAI,wCAI/C,8BAA8B,KAAG,CAAC,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAqB1F,CAAC"}

package/dist/testing/cross_backend/create_cross_backend_global_setup.js

@@ -0,0 +1,31 @@
+import '../assert_dev_env.js';
+import { bootstrap_backend } from './bootstrap_backend.js';
+import { serialize_bootstrapped_handle } from './setup.js';
+/**
+ * Default project-name → backend-name reduction: strips the
+ * `cross_backend_` prefix plus an optional `ts_` discriminator (the TS
+ * canonical backends carry it to distinguish JS runtimes). So
+ * `cross_backend_ts_deno` → `deno` and `cross_backend_rust` → `rust`.
+ */
+const DEFAULT_PROJECT_NAME_PREFIX = /^cross_backend_(?:ts_)?/;
+/**
+ * Build a vitest `globalSetup` default export. Returns the
+ * `(project) => teardown` function vitest 4 expects.
+ */
+export const create_cross_backend_global_setup = ({ configs, derive_name = (project_name) => project_name.replace(DEFAULT_PROJECT_NAME_PREFIX, ''), provide_key = 'backend_handle', }) => {
+    return async (project) => {
+        const name = derive_name(project.name);
+        const factory = configs[name];
+        if (!factory) {
+            throw new Error(`Could not derive backend config from vitest project '${project.name}' ` +
+                `(derived name '${name}') — expected one of: ${Object.keys(configs).join(', ')}`);
+        }
+        const bootstrapped = await bootstrap_backend(factory());
+        // vitest's `provide` is keyed on the consumer-augmented `ProvidedContext`;
+        // the generic key is a plain string, so cast past the keyof constraint.
+        project.provide(provide_key, serialize_bootstrapped_handle(bootstrapped));
+        return async () => {
+            await bootstrapped.teardown();
+        };
+    };
+};

package/dist/testing/cross_backend/default_backend_configs.d.ts

@@ -70,6 +70,14 @@ export interface MakeDefaultTsBackendConfigOptions {
      * override.
      */
     readonly port_env_var?: string;
+    /**
+     * Session cookie name the binary's `create_session_config` uses.
+     * Defaults to `'fuz_session'`. Must match the consumer's session config
+     * — the harness threads the `_testing_reset`-returned keeper cookie into
+     * its jar under this name, so a mismatch surfaces as 401s on the
+     * `create_account` path (e.g. fuz_forge uses `'fuz_forge_session'`).
+     */
+    readonly cookie_name?: string;
 }
 /**
  * Shared builder for TS-family backends (Deno + Node). Owns the common
@@ -111,6 +119,11 @@ export interface MakeDefaultRustBackendConfigOptions {
      * (e.g. `'info,zzz_server=info,testing_zzz_server=info'`).
      */
     readonly rust_log?: string;
+    /**
+     * Session cookie name the binary uses. Defaults to `'fuz_session'`.
+     * Must match the consumer's session config (see the TS builder's note).
+     */
+    readonly cookie_name?: string;
 }
 /**
  * Shared builder for Rust-family backends. Owns the common env baseline

package/dist/testing/cross_backend/default_backend_configs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default_backend_configs.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/default_backend_configs.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAC,sBAAsB,EAAE,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAC/E,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAA2B,KAAK,gBAAgB,EAAC,MAAM,+BAA+B,CAAC;AAQ9F;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,mBASpC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAE,mBAStC,CAAC;AAeH,MAAM,WAAW,iCAAiC;IACjD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,oDAAoD;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,6CAA6C;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,GAC1C,MAAM,iCAAiC,KACrC,aAmCF,CAAC;AAEF,MAAM,WAAW,mCAAmC;IACnD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,GAC5C,MAAM,mCAAmC,KACvC,aA2CF,CAAC"}
+{"version":3,"file":"default_backend_configs.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/default_backend_configs.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAC,sBAAsB,EAAE,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAC/E,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAA2B,KAAK,gBAAgB,EAAC,MAAM,+BAA+B,CAAC;AAQ9F;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,mBASpC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAE,mBAStC,CAAC;AAeH,MAAM,WAAW,iCAAiC;IACjD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,oDAAoD;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,6CAA6C;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,GAC1C,MAAM,iCAAiC,KACrC,aAoCF,CAAC;AAEF,MAAM,WAAW,mCAAmC;IACnD,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,GAC5C,MAAM,mCAAmC,KACvC,aA4CF,CAAC"}

package/dist/testing/cross_backend/default_backend_configs.js

@@ -49,7 +49,7 @@ const build_default_bootstrap = (paths, overrides) => ({
  * genuinely differs.
  */
 export const make_default_ts_backend_config = (opts) => {
-    const { name, port, start_command, database_url = 'memory://', extra_env, capabilities = ts_default_capabilities, paths = build_test_backend_paths(name), bootstrap_overrides, port_env_var = 'PORT', } = opts;
+    const { name, port, start_command, database_url = 'memory://', extra_env, capabilities = ts_default_capabilities, paths = build_test_backend_paths(name), bootstrap_overrides, port_env_var = 'PORT', cookie_name = 'fuz_session', } = opts;
     return {
         name,
         start_command,
@@ -58,7 +58,7 @@ export const make_default_ts_backend_config = (opts) => {
         ws_path: '/api/ws',
         health_path: '/health',
         bootstrap_path: '/api/account/bootstrap',
-        cookie_name: 'fuz_session',
+        cookie_name,
         startup_timeout_ms: 30_000,
         env: {
             NODE_ENV: 'development',
@@ -81,7 +81,7 @@ export const make_default_ts_backend_config = (opts) => {
  * the 120s startup window for cargo's first-run build cost.
  */
 export const make_default_rust_backend_config = (opts) => {
-    const { name, port, start_command, database_url, extra_env, capabilities = rust_default_capabilities, paths = build_test_backend_paths(name), bootstrap_overrides, port_env_var = 'PORT', rust_log = 'info', } = opts;
+    const { name, port, start_command, database_url, extra_env, capabilities = rust_default_capabilities, paths = build_test_backend_paths(name), bootstrap_overrides, port_env_var = 'PORT', rust_log = 'info', cookie_name = 'fuz_session', } = opts;
     return {
         name,
         start_command,
@@ -90,7 +90,7 @@ export const make_default_rust_backend_config = (opts) => {
         ws_path: '/api/ws',
         health_path: '/health',
         bootstrap_path: '/api/account/bootstrap',
-        cookie_name: 'fuz_session',
+        cookie_name,
         startup_timeout_ms: 120_000,
         env: {
             RUST_LOG: rust_log,

package/dist/testing/cross_backend/make_cross_backend_project.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Generic vitest project factory for cross-backend integration suites.
+ *
+ * One vitest project per spawned backend; each runs the consumer's shared
+ * `*.cross.test.ts` files against its own bootstrapped binary. The paired
+ * `create_cross_backend_global_setup` (in `global_setup.ts`) reads the
+ * project's `name` to pick which `BackendConfig` to spawn, so the project
+ * name is the single source of truth for backend selection.
+ *
+ * Consumers compose these into their `vite.config.ts`:
+ *
+ * ```ts
+ * const cross_backend_projects = process.env.FUZ_TEST_CROSS_BACKEND
+ *   ? [
+ *       make_cross_backend_project({name: 'cross_backend_ts_deno', global_setup: GLOBAL_SETUP}),
+ *       make_cross_backend_project({name: 'cross_backend_rust', global_setup: GLOBAL_SETUP}),
+ *     ]
+ *   : [];
+ * ```
+ *
+ * where `GLOBAL_SETUP = './src/test/cross_backend/global_setup.ts'`.
+ *
+ * This module is intentionally dependency-free and `assert_dev_env`-free:
+ * it runs at vite **config** time (including production builds, where the
+ * consumer gates the projects behind an env flag), so it must not pull in
+ * the DEV-only test runtime.
+ *
+ * @module
+ */
+export interface CrossBackendProjectOptions {
+    /**
+     * vitest project name. `create_cross_backend_global_setup` derives the
+     * backend name from it (by default stripping a `cross_backend_(ts_)?`
+     * prefix), so name projects `cross_backend_<backend>` (e.g.
+     * `cross_backend_rust`, `cross_backend_ts_deno`).
+     */
+    readonly name: string;
+    /**
+     * Path to the consumer's vitest `globalSetup` module, relative to the
+     * consumer repo root (e.g. `'./src/test/cross_backend/global_setup.ts'`).
+     * That module is expected to export a `create_cross_backend_global_setup`
+     * result as its default.
+     */
+    readonly global_setup: string;
+    /** Test-file globs. Default: `['src/test/cross_backend/*.cross.test.ts']`. */
+    readonly include?: ReadonlyArray<string>;
+    /** Globs to exclude from `include` (e.g. a backend-specific variant file). Default: `[]`. */
+    readonly exclude?: ReadonlyArray<string>;
+    /** vitest `sequence.groupOrder`. Default: `3` (runs after unit + db). */
+    readonly group_order?: number;
+}
+/**
+ * Build a single cross-backend vitest project config. Spread the results
+ * into `test.projects` in the consumer's `vite.config.ts`. `isolate: false`
+ * + `fileParallelism: false` because a project shares one spawned backend
+ * across its files.
+ */
+export declare const make_cross_backend_project: ({ name, global_setup, include, exclude, group_order, }: CrossBackendProjectOptions) => {
+    extends: true;
+    test: {
+        name: string;
+        include: Array<string>;
+        exclude: Array<string>;
+        globalSetup: Array<string>;
+        isolate: false;
+        fileParallelism: false;
+        sequence: {
+            groupOrder: number;
+        };
+    };
+};
+//# sourceMappingURL=make_cross_backend_project.d.ts.map

package/dist/testing/cross_backend/make_cross_backend_project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"make_cross_backend_project.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/make_cross_backend_project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAQH,MAAM,WAAW,0BAA0B;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,yEAAyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,GAAI,wDAMxC,0BAA0B,KAAG;IAC/B,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,EAAE,KAAK,CAAC;QACf,eAAe,EAAE,KAAK,CAAC;QACvB,QAAQ,EAAE;YAAC,UAAU,EAAE,MAAM,CAAA;SAAC,CAAC;KAC/B,CAAC;CAYD,CAAC"}

package/dist/testing/cross_backend/make_cross_backend_project.js

@@ -0,0 +1,51 @@
+/**
+ * Generic vitest project factory for cross-backend integration suites.
+ *
+ * One vitest project per spawned backend; each runs the consumer's shared
+ * `*.cross.test.ts` files against its own bootstrapped binary. The paired
+ * `create_cross_backend_global_setup` (in `global_setup.ts`) reads the
+ * project's `name` to pick which `BackendConfig` to spawn, so the project
+ * name is the single source of truth for backend selection.
+ *
+ * Consumers compose these into their `vite.config.ts`:
+ *
+ * ```ts
+ * const cross_backend_projects = process.env.FUZ_TEST_CROSS_BACKEND
+ *   ? [
+ *       make_cross_backend_project({name: 'cross_backend_ts_deno', global_setup: GLOBAL_SETUP}),
+ *       make_cross_backend_project({name: 'cross_backend_rust', global_setup: GLOBAL_SETUP}),
+ *     ]
+ *   : [];
+ * ```
+ *
+ * where `GLOBAL_SETUP = './src/test/cross_backend/global_setup.ts'`.
+ *
+ * This module is intentionally dependency-free and `assert_dev_env`-free:
+ * it runs at vite **config** time (including production builds, where the
+ * consumer gates the projects behind an env flag), so it must not pull in
+ * the DEV-only test runtime.
+ *
+ * @module
+ */
+/** Default test-file globs — the convention is `src/test/cross_backend/*.cross.test.ts`. */
+const DEFAULT_INCLUDE = ['src/test/cross_backend/*.cross.test.ts'];
+/** vitest `sequence.groupOrder` for cross-backend projects — after unit (1) + db (2). */
+const DEFAULT_GROUP_ORDER = 3;
+/**
+ * Build a single cross-backend vitest project config. Spread the results
+ * into `test.projects` in the consumer's `vite.config.ts`. `isolate: false`
+ * + `fileParallelism: false` because a project shares one spawned backend
+ * across its files.
+ */
+export const make_cross_backend_project = ({ name, global_setup, include = DEFAULT_INCLUDE, exclude = [], group_order = DEFAULT_GROUP_ORDER, }) => ({
+    extends: true,
+    test: {
+        name,
+        include: [...include],
+        exclude: [...exclude],
+        globalSetup: [global_setup],
+        isolate: false,
+        fileParallelism: false,
+        sequence: { groupOrder: group_order },
+    },
+});

package/dist/testing/cross_backend/standard.d.ts

@@ -86,6 +86,14 @@ export interface StandardCrossProcessTestOptions {
      * `0` to skip the assertion entirely.
      */
     error_coverage_min?: number;
+    /**
+     * Forwarded to `describe_round_trip_validation` as `skip_routes`
+     * (`'METHOD /path'` keys). For consumer REST routes whose responses
+     * aren't JSON-with-an-output-schema and so can't be round-tripped — e.g.
+     * fuz_forge's git smart-HTTP routes (`git-upload-pack` / `git-receive-pack`
+     * / `info/refs`) which stream git protocol bytes.
+     */
+    round_trip_skip_routes?: Array<string>;
 }
 /**
  * Run the cross-process standard test bundle — integration, admin (when

package/dist/testing/cross_backend/standard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"standard.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/standard.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,uBAAuB,CAAC;AAM1D,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,WAAW,+BAA+B;IAC/C,2CAA2C;IAC3C,UAAU,EAAE,SAAS,CAAC;IACtB;;;OAGG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B,uCAAuC;IACvC,YAAY,EAAE,mBAAmB,CAAC;IAClC,uFAAuF;IACvF,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC;;;;;OAKG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,eAAO,MAAM,qCAAqC,GACjD,SAAS,+BAA+B,KACtC,IAqCF,CAAC"}
+{"version":3,"file":"standard.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/standard.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,uBAAuB,CAAC;AAM1D,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,WAAW,+BAA+B;IAC/C,2CAA2C;IAC3C,UAAU,EAAE,SAAS,CAAC;IACtB;;;OAGG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B,uCAAuC;IACvC,YAAY,EAAE,mBAAmB,CAAC;IAClC,uFAAuF;IACvF,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC;;;;;OAKG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACvC;AAED;;;;GAIG;AACH,eAAO,MAAM,qCAAqC,GACjD,SAAS,+BAA+B,KACtC,IAsCF,CAAC"}

package/dist/testing/cross_backend/standard.js

@@ -22,6 +22,7 @@ export const describe_standard_cross_process_tests = (options) => {
         setup_test: options.setup_test,
         surface_source: options.surface_source,
         capabilities: options.capabilities,
+        skip_routes: options.round_trip_skip_routes,
     });
     describe_rpc_round_trip_tests({
         setup_test: options.setup_test,

package/dist/testing/cross_backend/testing_reset_actions.d.ts

@@ -62,6 +62,7 @@ import { type RpcAction } from '../../actions/action_rpc.js';
 import type { AppDeps } from '../../auth/deps.js';
 import type { SessionOptions } from '../../auth/session_cookie.js';
 import type { DaemonTokenState } from '../../auth/daemon_token.js';
+import type { Db } from '../../db/db.js';
 /**
  * The `_testing_reset` action spec.
  *
@@ -229,15 +230,18 @@ export interface CreateTestingActionsOptions {
      */
     readonly daemon_token_state: DaemonTokenState;
     /**
-     * Consumer-supplied callback invoked after the auth-table reset.
-     * `testing_zzz_server` clears workspace registry + terminals + the
-     * scoped FS scratch dir here; `testing_spine_stub` has no domain
-     * layer and passes a no-op (or omits the option). Runs inside the
-     * same RPC dispatch as the auth-table writes, so a throw surfaces
-     * to the caller as a JSON-RPC error and the per-test fixture
-     * short-circuits.
+     * Consumer-supplied callback invoked after the auth-table reset, passed
+     * the same transactional `Db` the auth wipes ran on. DB-domain consumers
+     * (e.g. fuz_forge truncating its cell / fact / file tables) MUST use this
+     * `db` rather than a separately-pooled connection — under PGlite's single
+     * connection a second connection deadlocks against this still-open
+     * transaction. `testing_zzz_server` clears in-memory workspace registry +
+     * terminals + scoped-FS scratch (ignores `db`); `testing_spine_stub` has
+     * no domain layer and omits the option. Runs inside the same RPC dispatch
+     * as the auth-table writes, so a throw surfaces to the caller as a
+     * JSON-RPC error and the per-test fixture short-circuits.
      */
-    readonly reset_state?: () => Promise<void> | void;
+    readonly reset_state?: (db: Db) => Promise<void> | void;
 }
 /**
  * Build the testing RPC actions for a test binary's registry.

package/dist/testing/cross_backend/testing_reset_actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing_reset_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/testing_reset_actions.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,OAAO,EAAa,KAAK,SAAS,EAAC,MAAM,6BAA6B,CAAC;AAEvE,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,4BAA4B,CAAC;AAiBjE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwBQ,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;CAWA,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;CAeC,CAAC;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,QAAO,SACiB,CAAC;AAEzE,4CAA4C;AAC5C,MAAM,WAAW,2BAA2B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;IAC9C;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAClD;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,OAAO,EACb,SAAS,2BAA2B,KAClC,KAAK,CAAC,SAAS,CAuGjB,CAAC;AAEF,0FAA0F;AAC1F,eAAO,MAAM,0BAA0B,UAAmC,CAAC"}
+{"version":3,"file":"testing_reset_actions.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/testing_reset_actions.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,OAAO,EAAa,KAAK,SAAS,EAAC,MAAM,6BAA6B,CAAC;AAEvE,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,gBAAgB,CAAC;AAiBvC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwBQ,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;CAWA,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;CAeC,CAAC;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,QAAO,SACiB,CAAC;AAEzE,4CAA4C;AAC5C,MAAM,WAAW,2BAA2B;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;IAC9C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACxD;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,GAClC,MAAM,OAAO,EACb,SAAS,2BAA2B,KAClC,KAAK,CAAC,SAAS,CA0GjB,CAAC;AAEF,0FAA0F;AAC1F,eAAO,MAAM,0BAA0B,UAAmC,CAAC"}

package/dist/testing/cross_backend/testing_reset_actions.js

@@ -279,9 +279,12 @@ export const create_testing_actions = (deps, options) => {
             //    of stale-id-then-refresh on the next call.
             daemon_token_state.keeper_account_id = keeper.account.id;
             // 7. Fire domain-state reset (zzz workspaces/terminals/scratch,
-            //    or no-op for spine_stub).
+            //    fuz_forge cell/fact/file truncation, or no-op for spine_stub).
+            //    Pass the transactional `ctx.db` so DB-domain truncation runs
+            //    on the same connection — a separate pool connection deadlocks
+            //    against this open transaction under PGlite.
             if (reset_state)
-                await reset_state();
+                await reset_state(ctx.db);
             return { ...keeper, extra_accounts: extras };
         }),
         rpc_action(testing_mint_session_action_spec, async (input, ctx) => {

package/dist/testing/integration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/integration.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAsB7B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAM9D,OAAO,EAKN,KAAK,uBAAuB,EAC5B,MAAM,kBAAkB,CAAC;AAiB1B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAC,KAAK,mBAAmB,EAAC,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,0BAA0B,CAAC;AAGxD;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC9C;;;;OAIG;IACH,UAAU,EAAE,SAAS,CAAC;IACtB;;;;;;;;;OASG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B,kEAAkE;IAClE,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;OAIG;IACH,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC;;;;;;;;;;;;OAYG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,mCAAmC,GAC/C,SAAS,8BAA8B,KACrC,IAyzCF,CAAC"}
+{"version":3,"file":"integration.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/integration.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAsB7B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAM9D,OAAO,EAKN,KAAK,uBAAuB,EAC5B,MAAM,kBAAkB,CAAC;AAiB1B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAC,KAAK,mBAAmB,EAAC,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,0BAA0B,CAAC;AAGxD;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC9C;;;;OAIG;IACH,UAAU,EAAE,SAAS,CAAC;IACtB;;;;;;;;;OASG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B,kEAAkE;IAClE,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;OAIG;IACH,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC;;;;;;;;;;;;OAYG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,mCAAmC,GAC/C,SAAS,8BAA8B,KACrC,IA60CF,CAAC"}

package/dist/testing/integration.js

@@ -605,13 +605,30 @@ export const describe_standard_integration_tests = (options) => {
             test('non-admin cannot access admin routes', async () => {
                 const fixture = await options.setup_test();
                 // admin routes are optional in the base suite — admin-specific coverage
-                // lives in describe_standard_admin_integration_tests
-                const admin_route = route_specs.find((s) => s.auth.roles?.includes('admin') ?? false);
+                // lives in describe_standard_admin_integration_tests.
+                //
+                // Pick an admin REST route where a clean role-denial 403 is
+                // reachable: account-grain (`actor: 'none'`, so the authorization
+                // phase doesn't first demand an acting actor → `actor_required`)
+                // and input/param/query-free (so input validation doesn't 400
+                // first, per the 401 → 400 → 403 phase order). Admin surfaces are
+                // RPC-first now; a consumer may expose no such REST route (fuz_app
+                // itself, zzz) — then this REST-era check is a no-op and RPC denial
+                // is covered by `describe_rpc_attack_surface_tests`.
+                const admin_route = route_specs.find((s) => (s.auth.roles?.includes('admin') ?? false) &&
+                    s.auth.actor === 'none' &&
+                    !s.input &&
+                    !s.params &&
+                    !s.query);
                 if (!admin_route)
                     return;
+                // Probe with a freshly-created account — it holds no admin role
+                // (the keeper fixture behind `create_session_headers` does, so it
+                // would pass the gate).
+                const non_admin = await fixture.create_account({ username: 'non_admin_admin_probe' });
                 const res = await fixture.transport(admin_route.path, {
                     method: admin_route.method,
-                    headers: fixture.create_session_headers(),
+                    headers: { cookie: `${cookie_name}=${non_admin.session_cookie}` },
                 });
                 assert.strictEqual(res.status, 403);
                 const body = await res.json();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.69.0",
+  "version": "0.70.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",