@fuzdev/fuz_app 0.72.0 → 0.73.0

package/dist/testing/rpc_round_trip.d.ts

@@ -47,7 +47,10 @@ export interface RpcRoundTripTestOptions {
  *
  * Error responses (from missing DB state, etc.) are expected and validated
  * as well-formed JSON-RPC errors. Successful responses are validated against
- * `action.spec.output`.
+ * `action.spec.output`. A `method not found` (-32601) error is the one
+ * exception — it means the backend is missing a method the local surface
+ * advertises, so the round-trip fails loud (`assert_method_implemented`)
+ * rather than accepting it as a valid error envelope.
  */
 export declare const describe_rpc_round_trip_tests: (options: RpcRoundTripTestOptions) => void;
 //# sourceMappingURL=rpc_round_trip.d.ts.map

package/dist/testing/rpc_round_trip.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rpc_round_trip.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/rpc_round_trip.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAwB7B,OAAO,KAAK,EAAC,cAAc,EAAsB,MAAM,oBAAoB,CAAC;AAE5E,OAAO,EAMN,KAAK,uBAAuB,EAC5B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAC,SAAS,EAAc,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAE9D,mDAAmD;AACnD,MAAM,WAAW,uBAAuB;IACvC,kEAAkE;IAClE,UAAU,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B,uCAAuC;IACvC,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;;OAKG;IACH,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC;;;;;OAKG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC,qDAAqD;IACrD,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,6EAA6E;IAC7E,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AA6BD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,6BAA6B,GAAI,SAAS,uBAAuB,KAAG,IAkHhF,CAAC"}
+{"version":3,"file":"rpc_round_trip.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/rpc_round_trip.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAyB7B,OAAO,KAAK,EAAC,cAAc,EAAsB,MAAM,oBAAoB,CAAC;AAE5E,OAAO,EAMN,KAAK,uBAAuB,EAC5B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAC,SAAS,EAAc,MAAM,0BAA0B,CAAC;AACrE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAE9D,mDAAmD;AACnD,MAAM,WAAW,uBAAuB;IACvC,kEAAkE;IAClE,UAAU,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B,uCAAuC;IACvC,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;;;OAKG;IACH,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC;;;;;OAKG;IACH,aAAa,EAAE,uBAAuB,CAAC;IACvC,qDAAqD;IACrD,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,6EAA6E;IAC7E,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAoDD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,6BAA6B,GAAI,SAAS,uBAAuB,KAAG,IAoHhF,CAAC"}

package/dist/testing/rpc_round_trip.js

@@ -15,8 +15,9 @@ import './assert_dev_env.js';
  *
  * @module
  */
-import { describe, test, beforeAll } from 'vitest';
+import { describe, test, beforeAll, assert } from 'vitest';
 import { ROLE_ADMIN } from '../auth/role_schema.js';
+import { JSONRPC_METHOD_NOT_FOUND, JsonrpcErrorResponse } from '../http/jsonrpc.js';
 import { generate_valid_body } from './schema_generators.js';
 import { is_public_auth } from '../http/auth_shape.js';
 import { create_rpc_post_init, create_rpc_get_url, assert_jsonrpc_error_response, assert_jsonrpc_success_response, resolve_rpc_endpoints_for_setup, } from './rpc_helpers.js';
@@ -41,6 +42,26 @@ const pick_rpc_auth_headers = (method, keeper, authed_account, admin_account) =>
     }
     return authed_account.create_session_headers();
 };
+/**
+ * Guard against silent parity gaps: a method enumerated from the local action
+ * surface that the remote backend answers with `method not found` (-32601)
+ * means the backend is missing an implementation the local surface advertises.
+ * That is a well-formed JSON-RPC error, so the round-trip's
+ * `assert_jsonrpc_error_response` branch would otherwise accept it as a pass —
+ * masking missing methods across coequal backends. Fail loud instead, before
+ * the generic error-envelope acceptance runs.
+ *
+ * Only `JSONRPC_METHOD_NOT_FOUND` trips this — every other well-formed error
+ * (validation, `not_found` from missing DB state, auth denials) stays a valid
+ * round-trip outcome.
+ */
+const assert_method_implemented = (method, body) => {
+    const parsed = JsonrpcErrorResponse.safeParse(body);
+    if (parsed.success && parsed.data.error.code === JSONRPC_METHOD_NOT_FOUND) {
+        assert.fail(`method '${method}' is registered on the local surface but the backend` +
+            ` returned method-not-found — backend is missing this method (parity gap)`);
+    }
+};
 /**
  * Run schema-driven round-trip validation for RPC endpoints.
  *
@@ -53,7 +74,10 @@ const pick_rpc_auth_headers = (method, keeper, authed_account, admin_account) =>
  *
  * Error responses (from missing DB state, etc.) are expected and validated
  * as well-formed JSON-RPC errors. Successful responses are validated against
- * `action.spec.output`.
+ * `action.spec.output`. A `method not found` (-32601) error is the one
+ * exception — it means the backend is missing a method the local surface
+ * advertises, so the round-trip fails loud (`assert_method_implemented`)
+ * rather than accepting it as a valid error envelope.
  */
 export const describe_rpc_round_trip_tests = (options) => {
     const skip_set = new Set(options.skip_methods);
@@ -103,6 +127,7 @@ export const describe_rpc_round_trip_tests = (options) => {
                             assert_jsonrpc_success_response(body, action.spec.output);
                         }
                         else {
+                            assert_method_implemented(action.spec.method, body);
                             assert_jsonrpc_error_response(body);
                         }
                     }
@@ -135,6 +160,7 @@ export const describe_rpc_round_trip_tests = (options) => {
                             assert_jsonrpc_success_response(body, action.spec.output);
                         }
                         else {
+                            assert_method_implemented(action.spec.method, body);
                             assert_jsonrpc_error_response(body);
                         }
                     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.72.0",
+  "version": "0.73.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",
@@ -48,6 +48,12 @@
     "@hono/node-ws": {
       "optional": true
     },
+    "@node-rs/argon2": {
+      "optional": true
+    },
+    "hono": {
+      "optional": true
+    },
     "pg": {
       "optional": true
     },