@fuzdev/fuz_app 0.86.0 → 0.87.0

package/dist/testing/CLAUDE.md

@@ -1043,9 +1043,12 @@ stays **off** `create_spine_surface_spec`, and these dedicated suites are the
 cell validators (`describe_standard_cross_process_tests`' generic round-trip
 never sees them). Both parse every success response against the verb's Zod
 **output** schema, so a TS↔Rust envelope drift fails the suite — not just a
-payload-field drift. Call-site primitives (`rpc_call` / `error_reason` /
-`expect_output` + the shared `CellCrossTestOptions`) live in
-`cross_backend/cell_cross_helpers.ts`.
+payload-field drift. Call-site primitives (`cross_rpc_call` / `error_reason` /
+`expect_output`) live in `cross_backend/cell_cross_helpers.ts`; the shared
+options shape is `RpcPathCrossSuiteOptions` from `cross_backend/setup.ts` (the
+neutral base every RPC-dispatched imperative cross suite aliases — origin,
+body-size, actor lookup/search, account lifecycle, app settings, testing
+backdoor, cell).
 
 - **`describe_cell_crud_cross_tests`** (gates on `capabilities.cell_crud`) —
   the create → get → update → delete → list lifecycle threading the id, plus

package/dist/testing/cross_backend/account_lifecycle.d.ts

@@ -1,10 +1,10 @@
 import '../assert_dev_env.js';
-import { type CellCrossTestOptions } from './cell_cross_helpers.js';
+import type { RpcPathCrossSuiteOptions } from './setup.js';
 /**
- * Options for the account-lifecycle parity suite. Shares the shape of the
- * cell suites (`setup_test` / `capabilities` / `rpc_path`); reuses
- * `CellCrossTestOptions` rather than minting a structural duplicate.
+ * Options for the account-lifecycle parity suite. The standard
+ * RPC-dispatched cross-suite shape (`setup_test` / `capabilities` /
+ * `rpc_path`); aliases `RpcPathCrossSuiteOptions` rather than duplicating.
  */
-export type AccountLifecycleCrossTestOptions = CellCrossTestOptions;
+export type AccountLifecycleCrossTestOptions = RpcPathCrossSuiteOptions;
 export declare const describe_account_lifecycle_cross_tests: (options: AccountLifecycleCrossTestOptions) => void;
 //# sourceMappingURL=account_lifecycle.d.ts.map

package/dist/testing/cross_backend/account_lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account_lifecycle.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/account_lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAiC9B,OAAO,EAIN,KAAK,oBAAoB,EACzB,MAAM,yBAAyB,CAAC;AAGjC;;;;GAIG;AACH,MAAM,MAAM,gCAAgC,GAAG,oBAAoB,CAAC;AAEpE,eAAO,MAAM,sCAAsC,GAClD,SAAS,gCAAgC,KACvC,IA+TF,CAAC"}
+{"version":3,"file":"account_lifecycle.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/account_lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAkC9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD;;;;GAIG;AACH,MAAM,MAAM,gCAAgC,GAAG,wBAAwB,CAAC;AAExE,eAAO,MAAM,sCAAsC,GAClD,SAAS,gCAAgC,KACvC,IA+TF,CAAC"}

package/dist/testing/cross_backend/account_lifecycle.js

@@ -21,7 +21,7 @@ import { describe, assert } from 'vitest';
 import { AccountDeleteOutput, AccountUndeleteOutput, AccountPurgeOutput, AdminAccountListOutput, AuditLogListOutput, ERROR_CANNOT_DELETE_KEEPER, } from '../../auth/admin_action_specs.js';
 import { ERROR_ACCOUNT_NOT_FOUND, ERROR_AUTHENTICATION_REQUIRED } from '../../http/error_schemas.js';
 import { test_if } from './capabilities.js';
-import { cross_rpc_call, error_reason, expect_output, } from './cell_cross_helpers.js';
+import { cross_rpc_call, error_reason, expect_output } from './cell_cross_helpers.js';
 import { SPINE_RPC_PATH } from './default_spine_surface.js';
 export const describe_account_lifecycle_cross_tests = (options) => {
     const { setup_test, capabilities } = options;

package/dist/testing/cross_backend/actor_lookup.d.ts

@@ -1,10 +1,10 @@
 import '../assert_dev_env.js';
-import type { CellCrossTestOptions } from './cell_cross_helpers.js';
+import type { RpcPathCrossSuiteOptions } from './setup.js';
 /**
- * Options for the actor-lookup parity suite. Shares the shape of the cell /
- * origin suites (`setup_test` / `capabilities` / `rpc_path`); reuses
- * `CellCrossTestOptions` rather than minting a structural duplicate.
+ * Options for the actor-lookup parity suite. The standard RPC-dispatched
+ * cross-suite shape (`setup_test` / `capabilities` / `rpc_path`); aliases
+ * the shared `RpcPathCrossSuiteOptions` rather than minting a duplicate.
  */
-export type ActorLookupCrossTestOptions = CellCrossTestOptions;
+export type ActorLookupCrossTestOptions = RpcPathCrossSuiteOptions;
 export declare const describe_actor_lookup_cross_tests: (options: ActorLookupCrossTestOptions) => void;
 //# sourceMappingURL=actor_lookup.d.ts.map

package/dist/testing/cross_backend/actor_lookup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actor_lookup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/actor_lookup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAqC9B,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,yBAAyB,CAAC;AAGlE;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAS/D,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IAkDxF,CAAC"}
+{"version":3,"file":"actor_lookup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/actor_lookup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAqC9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AASnE,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IAkDxF,CAAC"}

package/dist/testing/cross_backend/actor_search.d.ts

@@ -1,6 +1,6 @@
 import '../assert_dev_env.js';
-import type { CellCrossTestOptions } from './cell_cross_helpers.js';
-/** Options for the actor-search parity suite (shares the cell/origin shape). */
-export type ActorSearchCrossTestOptions = CellCrossTestOptions;
+import type { RpcPathCrossSuiteOptions } from './setup.js';
+/** Options for the actor-search parity suite (the standard RPC-dispatched shape). */
+export type ActorSearchCrossTestOptions = RpcPathCrossSuiteOptions;
 export declare const describe_actor_search_cross_tests: (options: ActorSearchCrossTestOptions) => void;
 //# sourceMappingURL=actor_search.d.ts.map

package/dist/testing/cross_backend/actor_search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actor_search.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/actor_search.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA2C9B,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,yBAAyB,CAAC;AAGlE,gFAAgF;AAChF,MAAM,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAS/D,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IAyDxF,CAAC"}
+{"version":3,"file":"actor_search.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/actor_search.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA2C9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD,qFAAqF;AACrF,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AASnE,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IAyDxF,CAAC"}

package/dist/testing/cross_backend/app_settings.d.ts

@@ -1,6 +1,6 @@
 import '../assert_dev_env.js';
-import type { CellCrossTestOptions } from './cell_cross_helpers.js';
-/** Options for the app-settings effect suite (shares the cell/origin shape). */
-export type AppSettingsCrossTestOptions = CellCrossTestOptions;
+import type { RpcPathCrossSuiteOptions } from './setup.js';
+/** Options for the app-settings effect suite (the standard RPC-dispatched shape). */
+export type AppSettingsCrossTestOptions = RpcPathCrossSuiteOptions;
 export declare const describe_app_settings_cross_tests: (options: AppSettingsCrossTestOptions) => void;
 //# sourceMappingURL=app_settings.d.ts.map

package/dist/testing/cross_backend/app_settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app_settings.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/app_settings.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAsC9B,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,yBAAyB,CAAC;AAGlE,gFAAgF;AAChF,MAAM,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAiB/D,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IA8DxF,CAAC"}
+{"version":3,"file":"app_settings.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/app_settings.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAsC9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD,qFAAqF;AACrF,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AAiBnE,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IA8DxF,CAAC"}

package/dist/testing/cross_backend/body_size.d.ts

@@ -0,0 +1,10 @@
+import '../assert_dev_env.js';
+import type { RpcPathCrossSuiteOptions } from './setup.js';
+/**
+ * Options for the body-size parity suite — the standard RPC-dispatched
+ * cross-suite shape (`setup_test` / `capabilities` / `rpc_path`); aliases the
+ * shared `RpcPathCrossSuiteOptions` rather than minting a duplicate.
+ */
+export type BodySizeCrossTestOptions = RpcPathCrossSuiteOptions;
+export declare const describe_body_size_cross_tests: (options: BodySizeCrossTestOptions) => void;
+//# sourceMappingURL=body_size.d.ts.map

package/dist/testing/cross_backend/body_size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body_size.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/body_size.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA6D9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAmDhE,eAAO,MAAM,8BAA8B,GAAI,SAAS,wBAAwB,KAAG,IA0ClF,CAAC"}

package/dist/testing/cross_backend/body_size.js

@@ -0,0 +1,137 @@
+import '../assert_dev_env.js';
+/**
+ * Cross-backend parity suite for the request body-size limit.
+ *
+ * `create_app_server` (TS) and the Rust spine both cap the request body at a
+ * 1 MiB default (`DEFAULT_MAX_BODY_SIZE` / `fuz_http`'s
+ * `DEFAULT_BODY_LIMIT_BYTES`) and reject oversized payloads with `413` and the
+ * canonical flat REST body `{error: 'payload_too_large'}` — *before* auth,
+ * origin, or dispatch run (middleware step 4). Each impl unit-tests this in
+ * isolation, but nothing fires an oversized POST over the wire, so the
+ * cross-impl agreement on the status + body shape (and on the exact `>` cap
+ * boundary, not an off-by-one divergence) was unpinned. Three cases:
+ *
+ * - **over-limit POST (cap + 1 byte) → 413** `payload_too_large`, refused
+ *   before any handler runs (the limit fires ahead of origin verification + the
+ *   dispatcher, so an over-cap body is rejected regardless of how well-formed it
+ *   is). Exactly one byte over — both impls reject on a strict `>`, so this is
+ *   the tight upper boundary, and staying just over keeps it clear of any
+ *   larger framework-default limit that would answer with a different body.
+ * - **at-limit POST (exactly the cap) → not 413** — one byte under the
+ *   rejection threshold passes the size gate and reaches the dispatcher (the
+ *   downstream status is irrelevant; only "not size-rejected" is asserted). The
+ *   boundary sibling of the case above.
+ * - **under-limit POST (small) → 200** — a small, well-formed authenticated
+ *   `account_verify` envelope sails through to a successful handler response,
+ *   the positive control that the route works for normal traffic.
+ *
+ * **Real-socket connection hazard (cross-process only).** When the server caps
+ * the body it answers 413 and closes the connection *before* the client
+ * finishes uploading — correct HTTP, since an unread request body can't share a
+ * keep-alive socket. The client's pool can then hand that now-dead socket to
+ * the very next request (observed as `other side closed`). So every request
+ * here goes through `fetch_retrying_once`: a request that inherits the poisoned
+ * socket retries onto a fresh connection, which both keeps the suite
+ * deterministic *and* evicts the dead socket so it can't strand a later cross
+ * suite in the same process. In-process (`app.request`) has no socket, so the
+ * hazard is cross-process-only and the retry never fires there.
+ *
+ * Like origin/payload rejection, this is middleware-level flat REST — not the
+ * JSON-RPC envelope the conformance-table runner expects — so it's an
+ * imperative suite, not a `conformance_table` row. Runs both legs via the
+ * shared `{setup_test, capabilities}` protocol: the in-process leg
+ * (`auth/body_size_parity.db.test.ts`, plain `gro test`) and the cross-process
+ * leg (`cross_backend/body_size.cross.test.ts`, the TS spine binaries + Rust
+ * `testing_spine_stub` over real HTTP). The body-size limit is on every spine,
+ * so the suite is ungated.
+ *
+ * Cited property: `docs/security.md` §"Body Size Limiting".
+ *
+ * `$lib`-free by contract (relative specifiers only), like the sibling
+ * cross-backend suites.
+ *
+ * @module
+ */
+import { describe, test, assert } from 'vitest';
+import { account_verify_action_spec } from '../../auth/account_action_specs.js';
+import { ERROR_PAYLOAD_TOO_LARGE } from '../../http/error_schemas.js';
+import { SPINE_RPC_PATH } from './default_spine_surface.js';
+/**
+ * The shared 1 MiB default both impls ship (`DEFAULT_MAX_BODY_SIZE` in TS,
+ * `DEFAULT_BODY_LIMIT_BYTES` in `fuz_http`). Kept as a local cross-impl
+ * contract value rather than imported from either impl — the boundary it
+ * pins is the shared default, and a change to either is a deliberate
+ * cross-impl decision that would revisit this suite regardless.
+ */
+const BODY_LIMIT_DEFAULT_BYTES = 1024 * 1024;
+/**
+ * Build an `account_verify` JSON-RPC envelope whose serialized length is
+ * *exactly* `target_bytes`, by growing a `params.pad` string to fill. Every
+ * character is ASCII, so the string length equals the UTF-8 byte length equals
+ * the `Content-Length` the transport sends — which is what the body-size
+ * middleware measures. `account_verify` takes no params, but at/over the cap
+ * the size check fires before input validation, so the padded shape is never
+ * reached on the rejection path.
+ */
+const sized_envelope = (id, target_bytes) => {
+    const method = account_verify_action_spec.method;
+    const base = JSON.stringify({ jsonrpc: '2.0', method, id, params: { pad: '' } });
+    const pad = 'x'.repeat(Math.max(0, target_bytes - base.length));
+    return JSON.stringify({ jsonrpc: '2.0', method, id, params: { pad } });
+};
+/** A small, well-formed nullary `account_verify` body — well under the cap. */
+const small_envelope = (id) => JSON.stringify({ jsonrpc: '2.0', method: account_verify_action_spec.method, id });
+/**
+ * Issue a request, retrying once if the call *throws* (vs. returning a
+ * response). A request handed the keep-alive socket the server closed on an
+ * oversized-body rejection fails at the transport layer before any response;
+ * one retry opens a fresh connection (and drops the dead socket from the
+ * pool). Keyed on "threw at all" rather than a specific error code so it holds
+ * across the node / deno / bun cross runtimes, which surface different errors.
+ */
+const fetch_retrying_once = async (transport, path, init) => {
+    try {
+        return await transport(path, init);
+    }
+    catch {
+        return await transport(path, init);
+    }
+};
+export const describe_body_size_cross_tests = (options) => {
+    const { setup_test } = options;
+    const rpc_path = options.rpc_path ?? SPINE_RPC_PATH;
+    /** POST `body` to the RPC path as the keeper, retry-once on a dead socket. */
+    const post = (fixture, body) => fetch_retrying_once(fixture.transport, rpc_path, {
+        method: 'POST',
+        headers: { ...fixture.create_session_headers(), 'content-type': 'application/json' },
+        body,
+    });
+    describe('body-size limit parity', () => {
+        test('over-limit POST (cap + 1) → 413 payload_too_large (refused before dispatch)', async () => {
+            const fixture = await setup_test();
+            // Keeper session cookie + the transport's default allowed Origin, so
+            // neither auth nor origin is the cause — only the body size. One byte
+            // over the cap: both impls reject on a strict `>`.
+            const res = await post(fixture, sized_envelope('over-limit', BODY_LIMIT_DEFAULT_BYTES + 1));
+            assert.strictEqual(res.status, 413, 'a body one byte over the cap must be rejected with 413');
+            const body = (await res.json().catch(() => undefined));
+            assert.strictEqual(body?.error, ERROR_PAYLOAD_TOO_LARGE);
+        });
+        test('at-limit POST (exactly the cap) → not size-rejected', async () => {
+            const fixture = await setup_test();
+            // Exactly at the cap is one byte under the `>` threshold, so it clears
+            // the size gate and reaches the dispatcher. Whatever the dispatcher
+            // then returns, it must not be the 413 — that's the lower boundary.
+            const res = await post(fixture, sized_envelope('at-limit', BODY_LIMIT_DEFAULT_BYTES));
+            assert.notStrictEqual(res.status, 413, 'a body exactly at the cap must not be size-rejected');
+        });
+        test('under-limit POST (small) → 200', async () => {
+            const fixture = await setup_test();
+            // Small well-formed body: clears the cap and reaches the
+            // `account_verify` handler, the positive control that normal traffic
+            // passes (and the 413 above is size-gated, not a blanket rejection).
+            const res = await post(fixture, small_envelope('under-limit'));
+            assert.strictEqual(res.status, 200, 'an under-limit authenticated request must pass');
+        });
+    });
+};

package/dist/testing/cross_backend/body_size_smuggling.d.ts

@@ -0,0 +1,10 @@
+import '../assert_dev_env.js';
+/** Options for the smuggling probe — needs the raw URL, not a transport. */
+export interface BodySizeSmugglingCrossTestOptions {
+    /** Base URL the spawned backend is reachable at (e.g. `http://localhost:1178`). */
+    readonly base_url: string;
+    /** RPC endpoint path to target. Default `/api/rpc`. */
+    readonly rpc_path?: string;
+}
+export declare const describe_body_size_smuggling_cross_tests: (options: BodySizeSmugglingCrossTestOptions) => void;
+//# sourceMappingURL=body_size_smuggling.d.ts.map

package/dist/testing/cross_backend/body_size_smuggling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body_size_smuggling.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/body_size_smuggling.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAkD9B,4EAA4E;AAC5E,MAAM,WAAW,iCAAiC;IACjD,mFAAmF;IACnF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAqDD,eAAO,MAAM,wCAAwC,GACpD,SAAS,iCAAiC,KACxC,IA4DF,CAAC"}

package/dist/testing/cross_backend/body_size_smuggling.js

@@ -0,0 +1,138 @@
+import '../assert_dev_env.js';
+/**
+ * Cross-backend request-smuggling probe for the body-size limit's connection
+ * handling — the security sibling of `body_size.ts`.
+ *
+ * When the server caps the request body it answers `413` on the
+ * `Content-Length` header and closes the connection *without reading the
+ * oversized body*. That close is load-bearing: HTTP/1.1 forbids reusing a
+ * keep-alive connection whose request body wasn't consumed, because the unread
+ * body bytes would otherwise be parsed as the start of the next request — a
+ * classic request-smuggling vector. This suite proves the mitigation holds end
+ * to end by **pipelining**: it opens a raw TCP socket and sends, in one write,
+ * an oversized `POST` immediately followed by a second `GET` request. A correct
+ * server rejects the POST with `413` and never processes the trailing GET (the
+ * connection closes with the GET bytes unconsumed); a vulnerable one would
+ * drain past the body and answer the smuggled GET too. The assertion is
+ * therefore "**at most one** HTTP response comes back" — a *second* response is
+ * the smuggle. It's `<= 1` rather than "exactly the 413" because the impls close
+ * differently at the TCP level (node-server graceful close delivers the 413
+ * first; hyper's RST can drop the in-flight 413 before the client reads it), so
+ * demanding a cleanly-read 413 would be flaky; the 413-ness itself is pinned
+ * reliably over `fetch` by `describe_body_size_cross_tests`. A **positive
+ * control** (two pipelined requests → >= 2 responses) proves a second response
+ * *would* be seen if the trailing request were processed — without it the
+ * `<= 1` assertion would be vacuous on a server that never reuses connections,
+ * and it also proves the response counter isn't undercounting.
+ *
+ * Raw-socket by necessity (the `FetchTransport` can't pipeline two requests on
+ * one connection), so — unlike `body_size.ts` — this is **cross-process only**
+ * (no in-process leg; there is no socket in-process) and ungated (the limit is
+ * on every spine). Robust by construction: it counts responses until the
+ * socket closes or a short read timeout, so a server that closes (the expected
+ * path) and one that merely holds the connection open without smuggling both
+ * read as one response; only an actual second response fails.
+ *
+ * Cited property: `docs/security.md` §"Body Size Limiting" (connection close on
+ * oversized reject).
+ *
+ * `$lib`-free by contract (relative + `node:` specifiers only).
+ *
+ * @module
+ */
+import { connect } from 'node:net';
+import { describe, test, assert } from 'vitest';
+import { SPINE_RPC_PATH } from './default_spine_surface.js';
+/** The shared 1 MiB cap (see `body_size.ts` for why it's a local constant). */
+const BODY_LIMIT_DEFAULT_BYTES = 1024 * 1024;
+/**
+ * Open a raw TCP socket to `base_url`, write `request_bytes` once, and collect
+ * everything the server sends back until it closes the connection or
+ * `read_timeout_ms` elapses. Write errors are swallowed: the server closing
+ * mid-upload (the correct response to an oversized body) surfaces as
+ * `EPIPE`/`ECONNRESET` on our unfinished write, which is exactly the behavior
+ * under test — what matters is what we *read back*.
+ */
+const send_raw = (base_url, request_bytes, read_timeout_ms) => new Promise((resolve) => {
+    const url = new URL(base_url);
+    const port = Number(url.port) || (url.protocol === 'https:' ? 443 : 80);
+    const socket = connect({ host: url.hostname, port });
+    let received = '';
+    let settled = false;
+    const finish = () => {
+        if (settled)
+            return;
+        settled = true;
+        clearTimeout(timer);
+        socket.destroy();
+        resolve(received);
+    };
+    const timer = setTimeout(finish, read_timeout_ms);
+    socket.setEncoding('latin1');
+    socket.on('connect', () => socket.write(request_bytes));
+    socket.on('data', (chunk) => {
+        received += chunk;
+    });
+    socket.on('error', () => { }); // EPIPE/ECONNRESET on mid-write close is expected
+    socket.on('close', finish);
+});
+/**
+ * Count HTTP response status lines in a raw byte stream. Deliberately
+ * **unanchored** (no `^`/`m`): a second pipelined response is concatenated
+ * straight after the first response's body, which carries no trailing newline,
+ * so a line-anchored match would miss it — and missing a smuggled second
+ * response is a silent false negative. No response header or JSON error body
+ * contains the literal `HTTP/1.x NNN`, so an unanchored match counts exactly
+ * the status lines. The positive control below proves this counts 2 when the
+ * server genuinely returns 2.
+ */
+const count_responses = (raw) => (raw.match(/HTTP\/1\.[01] \d{3}/g) ?? []).length;
+export const describe_body_size_smuggling_cross_tests = (options) => {
+    const { base_url } = options;
+    const rpc_path = options.rpc_path ?? SPINE_RPC_PATH;
+    const host = new URL(base_url).host;
+    describe('body-size limit — request-smuggling resistance', () => {
+        // Positive control: prove the server returns >1 response on a single
+        // connection. Without this the smuggling assertion below would be
+        // vacuously green on a server that simply never reuses connections — and
+        // it also validates `count_responses` actually counts a second response.
+        test('control: two pipelined requests → ≥2 responses (connection reuse is real)', async () => {
+            const two_requests = `GET ${rpc_path} HTTP/1.1\r\nHost: ${host}\r\n\r\n` +
+                `GET ${rpc_path} HTTP/1.1\r\nHost: ${host}\r\nConnection: close\r\n\r\n`;
+            const response = await send_raw(base_url, two_requests, 2000);
+            const n = count_responses(response);
+            assert.ok(n >= 2, `expected ≥2 responses on one keep-alive connection (got ${n}); without ` +
+                `connection reuse — or with an undercounting matcher — the smuggling ` +
+                `assertion below is not a real signal. Raw head: ${response.slice(0, 120)}`);
+        });
+        test('oversized POST + pipelined GET → smuggled request not processed', async () => {
+            const oversized_len = BODY_LIMIT_DEFAULT_BYTES + 1024;
+            // One write: an over-cap POST (rejected on Content-Length, body never
+            // read) immediately followed by a GET. If the server wrongly drained
+            // the unread body it would reach + answer this GET — a smuggle.
+            const payload = `POST ${rpc_path} HTTP/1.1\r\n` +
+                `Host: ${host}\r\n` +
+                `Content-Type: application/json\r\n` +
+                `Content-Length: ${oversized_len}\r\n` +
+                `\r\n` +
+                'x'.repeat(oversized_len) +
+                `GET ${rpc_path} HTTP/1.1\r\nHost: ${host}\r\n\r\n`;
+            const response = await send_raw(base_url, payload, 2000);
+            // The security property is "the pipelined GET is not processed", i.e.
+            // **at most one** response comes back (the 413, or none if the close
+            // raced the read). A *second* response is the smuggle. We assert `<= 1`
+            // rather than "exactly the 413" because the two impls close the
+            // connection differently at the TCP level — node-server closes
+            // gracefully (the 413 is delivered first), hyper sends an RST that can
+            // drop the in-flight 413 before the client reads it — and demanding a
+            // cleanly-read 413 here would be flaky. That the oversized body is
+            // rejected *with* a 413 is pinned reliably (over `fetch`) by
+            // `describe_body_size_cross_tests`; this test owns only the no-smuggle
+            // half. The control above proves a second response *would* be seen if
+            // the GET were processed, so `<= 1` is a real signal, not a vacuous one.
+            const n = count_responses(response);
+            assert.ok(n <= 1, `expected at most one response (the GET must not be smuggled in off the ` +
+                `unread body); a second response means it was. Saw ${n}. Raw head: ${response.slice(0, 120)}`);
+        });
+    });
+};

package/dist/testing/cross_backend/cell_cross_helpers.d.ts

@@ -1,17 +1,6 @@
 import '../assert_dev_env.js';
 import type { z } from 'zod';
 import type { FetchTransport } from '../transports/fetch_transport.js';
-import type { BackendCapabilities } from './capabilities.js';
-import type { SetupTest } from './setup.js';
-/** Shared options for the cell cross-backend parity suites. */
-export interface CellCrossTestOptions {
-    /** Per-test fixture-producing function (fresh keeper + db per call). */
-    readonly setup_test: SetupTest;
-    /** Backend capability declarations — each suite gates on its own flag. */
-    readonly capabilities: BackendCapabilities;
-    /** RPC endpoint path the cell verbs are mounted on. Default `/api/rpc`. */
-    readonly rpc_path?: string;
-}
 /** Minimal JSON-RPC envelope shape the suites read off responses. */
 export interface RpcResult {
     readonly ok: boolean;

package/dist/testing/cross_backend/cell_cross_helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_cross_helpers.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/cell_cross_helpers.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAmB9B,OAAO,KAAK,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAG3B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAE1C,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACpC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qEAAqE;AACrE,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAC,CAAC;CAC5F;AAED;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GAC1B,WAAW,cAAc,EACzB,MAAM,MAAM,EACZ,QAAQ,MAAM,EACd,QAAQ,OAAO,EACf,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC7B,OAAO,CAAC,SAAS,CAMnB,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,YAAY,GAAI,GAAG,SAAS,KAAG,OAG/B,CAAC;AAEd;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,CAAC,EAAE,GAAG,SAAS,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAG,CAQrE,CAAC"}
+{"version":3,"file":"cell_cross_helpers.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/cell_cross_helpers.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAmB9B,OAAO,KAAK,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAG3B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,kCAAkC,CAAC;AAErE,qEAAqE;AACrE,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAC,CAAC;CAC5F;AAED;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GAC1B,WAAW,cAAc,EACzB,MAAM,MAAM,EACZ,QAAQ,MAAM,EACd,QAAQ,OAAO,EACf,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC7B,OAAO,CAAC,SAAS,CAMnB,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,YAAY,GAAI,GAAG,SAAS,KAAG,OAG/B,CAAC;AAEd;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,CAAC,EAAE,GAAG,SAAS,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAG,CAQrE,CAAC"}

package/dist/testing/cross_backend/cell_crud.d.ts

@@ -1,4 +1,4 @@
 import '../assert_dev_env.js';
-import { type CellCrossTestOptions } from './cell_cross_helpers.js';
-export declare const describe_cell_crud_cross_tests: (options: CellCrossTestOptions) => void;
+import type { RpcPathCrossSuiteOptions } from './setup.js';
+export declare const describe_cell_crud_cross_tests: (options: RpcPathCrossSuiteOptions) => void;
 //# sourceMappingURL=cell_crud.d.ts.map

package/dist/testing/cross_backend/cell_crud.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_crud.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/cell_crud.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAqD9B,OAAO,EAIN,KAAK,oBAAoB,EACzB,MAAM,yBAAyB,CAAC;AAGjC,eAAO,MAAM,8BAA8B,GAAI,SAAS,oBAAoB,KAAG,IAwS9E,CAAC"}
+{"version":3,"file":"cell_crud.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/cell_crud.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAsD9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD,eAAO,MAAM,8BAA8B,GAAI,SAAS,wBAAwB,KAAG,IAwSlF,CAAC"}

package/dist/testing/cross_backend/cell_crud.js

@@ -42,7 +42,7 @@ import '../assert_dev_env.js';
 import { describe, assert } from 'vitest';
 import { CellCreateOutput, CellDeleteOutput, CellGetOutput, CellListOutput, CellUpdateOutput, } from '../../auth/cell_action_specs.js';
 import { test_if } from './capabilities.js';
-import { cross_rpc_call, error_reason, expect_output, } from './cell_cross_helpers.js';
+import { cross_rpc_call, error_reason, expect_output } from './cell_cross_helpers.js';
 import { SPINE_RPC_PATH } from './default_spine_surface.js';
 export const describe_cell_crud_cross_tests = (options) => {
     const { setup_test, capabilities } = options;

package/dist/testing/cross_backend/cell_grant_role.d.ts

@@ -1,8 +1,8 @@
 import '../assert_dev_env.js';
-import { type CellCrossTestOptions } from './cell_cross_helpers.js';
+import type { RpcPathCrossSuiteOptions } from './setup.js';
 /** App role the holder is seeded with; matches the spine's registered role. */
 export declare const CELL_EDITOR_ROLE = "cell_editor";
 /** Username the fixture seeds (via `extra_accounts`) holding `CELL_EDITOR_ROLE`. */
 export declare const CELL_ROLE_HOLDER_USERNAME = "cell_role_holder";
-export declare const describe_cell_grant_role_cross_tests: (options: CellCrossTestOptions) => void;
+export declare const describe_cell_grant_role_cross_tests: (options: RpcPathCrossSuiteOptions) => void;
 //# sourceMappingURL=cell_grant_role.d.ts.map

package/dist/testing/cross_backend/cell_grant_role.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_grant_role.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/cell_grant_role.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA6C9B,OAAO,EACN,KAAK,oBAAoB,EAIzB,MAAM,yBAAyB,CAAC;AAGjC,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,gBAAyB,CAAC;AAEvD,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAK5D,eAAO,MAAM,oCAAoC,GAAI,SAAS,oBAAoB,KAAG,IAuIpF,CAAC"}
+{"version":3,"file":"cell_grant_role.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/cell_grant_role.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA8C9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,gBAAyB,CAAC;AAEvD,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAK5D,eAAO,MAAM,oCAAoC,GAAI,SAAS,wBAAwB,KAAG,IAuIxF,CAAC"}

package/dist/testing/cross_backend/cell_grant_role.js

@@ -37,7 +37,7 @@ import { describe, assert } from 'vitest';
 import { CellCreateOutput, CellGetOutput, CellUpdateOutput } from '../../auth/cell_action_specs.js';
 import { CellGrantCreateOutput, ERROR_CELL_GRANT_UNKNOWN_ROLE, } from '../../auth/cell_grant_action_specs.js';
 import { test_if } from './capabilities.js';
-import { cross_rpc_call, error_reason, expect_output, } from './cell_cross_helpers.js';
+import { cross_rpc_call, error_reason, expect_output } from './cell_cross_helpers.js';
 import { SPINE_CELL_EDITOR_ROLE, SPINE_RPC_PATH } from './default_spine_surface.js';
 /** App role the holder is seeded with; matches the spine's registered role. */
 export const CELL_EDITOR_ROLE = SPINE_CELL_EDITOR_ROLE;

package/dist/testing/cross_backend/cell_relations.d.ts

@@ -1,4 +1,4 @@
 import '../assert_dev_env.js';
-import { type CellCrossTestOptions } from './cell_cross_helpers.js';
-export declare const describe_cell_relations_cross_tests: (options: CellCrossTestOptions) => void;
+import type { RpcPathCrossSuiteOptions } from './setup.js';
+export declare const describe_cell_relations_cross_tests: (options: RpcPathCrossSuiteOptions) => void;
 //# sourceMappingURL=cell_relations.d.ts.map

package/dist/testing/cross_backend/cell_relations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cell_relations.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/cell_relations.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAoF9B,OAAO,EAIN,KAAK,oBAAoB,EACzB,MAAM,yBAAyB,CAAC;AAsFjC,eAAO,MAAM,mCAAmC,GAAI,SAAS,oBAAoB,KAAG,IAyvBnF,CAAC"}
+{"version":3,"file":"cell_relations.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/cell_relations.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAqF9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAsFzD,eAAO,MAAM,mCAAmC,GAAI,SAAS,wBAAwB,KAAG,IAyvBvF,CAAC"}

package/dist/testing/cross_backend/cell_relations.js

@@ -60,7 +60,7 @@ import { CellFieldDeleteOutput, CellFieldListOutput, CellFieldSetOutput, } from
 import { CellItemDeleteOutput, CellItemInsertOutput, CellItemListOutput, CellItemMoveOutput, } from '../../auth/cell_item_action_specs.js';
 import { CellAuditListOutput } from '../../auth/cell_audit_action_specs.js';
 import { test_if } from './capabilities.js';
-import { cross_rpc_call, error_reason, expect_output, } from './cell_cross_helpers.js';
+import { cross_rpc_call, error_reason, expect_output } from './cell_cross_helpers.js';
 import { SPINE_RPC_PATH } from './default_spine_surface.js';
 /** Create a cell over the wire and return its id (the parity gate parses the output). */
 const create_cell = async (t, rpc_path, h, params) => expect_output(await cross_rpc_call(t, rpc_path, 'cell_create', params, h), CellCreateOutput).cell

package/dist/testing/cross_backend/conformance_table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conformance_table.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/conformance_table.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAwB9B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,uBAAuB,CAAC;AAE1D,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAMjE,OAAO,EAIN,KAAK,uBAAuB,EAC5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAC,KAAK,eAAe,EAA4B,MAAM,uBAAuB,CAAC;AACtF,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAC,SAAS,EAAc,MAAM,YAAY,CAAC;AAGvD;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IAC1C,iEAAiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,sDAAsD;AACtD,MAAM,WAAW,uBAAuB;IACvC,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAC/C,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACjD,iEAAiE;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAgOD;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,GAAI,SAAS,uBAAuB,KAAG,IAgBnF,CAAC"}
+{"version":3,"file":"conformance_table.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/conformance_table.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAwB9B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,uBAAuB,CAAC;AAE1D,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAMjE,OAAO,EAIN,KAAK,uBAAuB,EAC5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAC,KAAK,eAAe,EAA4B,MAAM,uBAAuB,CAAC;AACtF,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAC,SAAS,EAAc,MAAM,YAAY,CAAC;AAGvD;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IAC1C,iEAAiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,sDAAsD;AACtD,MAAM,WAAW,uBAAuB;IACvC,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAC/C,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,4EAA4E;IAC5E,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACjD,iEAAiE;IACjE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAkOD;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,GAAI,SAAS,uBAAuB,KAAG,IAgBnF,CAAC"}

package/dist/testing/cross_backend/conformance_table.js

@@ -133,13 +133,15 @@ const run_rpc_case = async (c, transport, headers, suppress_default_origin, reso
     assert.ok(!res.ok, `${c.name}: expected error status ${c.expect.status} but got success`);
     assert.strictEqual(res.status, c.expect.status, `${c.name}: error status`);
     if (c.expect.error_reason !== undefined) {
+        // A row that *declares* a reason must carry it — present AND equal —
+        // mirroring the REST branch's unconditional `body.error` assertion. The
+        // earlier skip-if-absent form let a backend that dropped the reason pass
+        // a row declaring one, blessing a reason/forensic-parity divergence (the
+        // IDOR-mask / privilege reason is exactly the distinguishing bit). Rows
+        // whose denial genuinely has no reason (the bare `unauthenticated()` 401)
+        // simply omit `error_reason` and are pinned by `status` above.
         const reason = res.error.data?.reason;
-        // Most RPC denials carry `error.data.reason` (incl. the pre-validation
-        // 401 now); a denial that genuinely omits it falls back to the status
-        // assertion above to pin the denial class.
-        if (reason !== undefined) {
-            assert.strictEqual(reason, c.expect.error_reason, `${c.name}: error.data.reason`);
-        }
+        assert.strictEqual(reason, c.expect.error_reason, `${c.name}: error.data.reason`);
     }
     if (c.expect.fields)
         assert_fields(res.error.data, c.expect.fields, c.name);

package/dist/testing/cross_backend/fact_serving.d.ts

@@ -1,13 +1,12 @@
 import '../assert_dev_env.js';
-import { type CellCrossTestOptions } from './cell_cross_helpers.js';
-import type { SetupTest } from './setup.js';
+import type { RpcPathCrossSuiteOptions, SetupTest } from './setup.js';
 /**
  * The fact suite adds one optional knob to the shared cell options: a setup
  * variant whose keeper carries a **second actor**. Only the multi-actor case
  * needs it; the rest of the suite runs single-actor, so wiring it is opt-in.
  * Omit it and the multi-actor case silently skips.
  */
-export interface FactServingCrossTestOptions extends CellCrossTestOptions {
+export interface FactServingCrossTestOptions extends RpcPathCrossSuiteOptions {
     readonly setup_test_multi_actor?: SetupTest;
 }
 export declare const describe_fact_serving_cross_tests: (options: FactServingCrossTestOptions) => void;

package/dist/testing/cross_backend/fact_serving.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fact_serving.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/fact_serving.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AA+C9B,OAAO,EAAgC,KAAK,oBAAoB,EAAC,MAAM,yBAAyB,CAAC;AAEjG,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,WAAW,2BAA4B,SAAQ,oBAAoB;IACxE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,CAAC;CAC5C;AA8BD,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IA8NxF,CAAC"}
+{"version":3,"file":"fact_serving.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/fact_serving.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAiD9B,OAAO,KAAK,EAAC,wBAAwB,EAAE,SAAS,EAAC,MAAM,YAAY,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,WAAW,2BAA4B,SAAQ,wBAAwB;IAC5E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,CAAC;CAC5C;AA8BD,eAAO,MAAM,iCAAiC,GAAI,SAAS,2BAA2B,KAAG,IA8NxF,CAAC"}

package/dist/testing/cross_backend/origin.d.ts

@@ -1,10 +1,10 @@
 import '../assert_dev_env.js';
-import type { CellCrossTestOptions } from './cell_cross_helpers.js';
+import type { RpcPathCrossSuiteOptions } from './setup.js';
 /**
- * Options for the origin parity suite. Shares the shape of the cell /
- * account-lifecycle suites (`setup_test` / `capabilities` / `rpc_path`);
- * reuses `CellCrossTestOptions` rather than minting a structural duplicate.
+ * Options for the origin parity suite. The standard RPC-dispatched
+ * cross-suite shape (`setup_test` / `capabilities` / `rpc_path`); aliases
+ * the shared `RpcPathCrossSuiteOptions` rather than minting a duplicate.
  */
-export type OriginCrossTestOptions = CellCrossTestOptions;
+export type OriginCrossTestOptions = RpcPathCrossSuiteOptions;
 export declare const describe_origin_cross_tests: (options: OriginCrossTestOptions) => void;
 //# sourceMappingURL=origin.d.ts.map

package/dist/testing/cross_backend/origin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"origin.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/origin.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAkC9B,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,yBAAyB,CAAC;AAGlE;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAM1D,eAAO,MAAM,2BAA2B,GAAI,SAAS,sBAAsB,KAAG,IAwC7E,CAAC"}
+{"version":3,"file":"origin.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/origin.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAkC9B,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,YAAY,CAAC;AAGzD;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAM9D,eAAO,MAAM,2BAA2B,GAAI,SAAS,sBAAsB,KAAG,IAwC7E,CAAC"}

package/dist/testing/cross_backend/ready.d.ts

@@ -1,12 +1,7 @@
 import '../assert_dev_env.js';
-import { type BackendCapabilities } from './capabilities.js';
-import type { SetupTest } from './setup.js';
+import type { CrossSuiteOptions } from './setup.js';
 /** Options for the readiness-probe parity suite. */
-export interface ReadyCrossTestOptions {
-    /** Per-test fixture-producing function (fresh keeper + db per call). */
-    readonly setup_test: SetupTest;
-    /** Backend capability declarations — the suite gates on `capabilities.ready`. */
-    readonly capabilities: BackendCapabilities;
+export interface ReadyCrossTestOptions extends CrossSuiteOptions {
     /** Readiness probe path. Default `/ready`. */
     readonly ready_path?: string;
 }

package/dist/testing/cross_backend/ready.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ready.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/ready.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAiC9B,OAAO,EAAU,KAAK,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AACpE,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAE1C,oDAAoD;AACpD,MAAM,WAAW,qBAAqB;IACrC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,eAAO,MAAM,0BAA0B,GAAI,SAAS,qBAAqB,KAAG,IAuB3E,CAAC"}
+{"version":3,"file":"ready.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/ready.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAkC9B,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAElD,oDAAoD;AACpD,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC/D,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,eAAO,MAAM,0BAA0B,GAAI,SAAS,qBAAqB,KAAG,IAuB3E,CAAC"}

package/dist/testing/cross_backend/setup.d.ts

@@ -187,6 +187,34 @@ export type TestFixture = TestFixtureBase;
  * a fresh per-test bundle on each call.
  */
 export type SetupTest = () => Promise<TestFixture>;
+/**
+ * Base options shared by every imperative cross-backend parity suite
+ * (`origin` / `ready` / `body_size` / `cell_*` / `actor_*` /
+ * `account_lifecycle` / `app_settings` / `testing_backdoor` / …). The
+ * `{setup_test, capabilities}` core is identical across them; each suite
+ * extends this with its own path field (`rpc_path` for RPC-dispatched
+ * suites via `RpcPathCrossSuiteOptions`, `ready_path` for the readiness
+ * probe, etc.). Lives here in the neutral fixture-types home rather than in
+ * any one domain helper, so a non-cell suite no longer reaches into the
+ * cell helpers for its option shape.
+ */
+export interface CrossSuiteOptions {
+    /** Per-test fixture-producing function (fresh keeper + db per call). */
+    readonly setup_test: SetupTest;
+    /** Backend capability declarations — each suite gates on its own flag. */
+    readonly capabilities: BackendCapabilities;
+}
+/**
+ * `CrossSuiteOptions` plus the RPC endpoint path the suite dispatches
+ * against — the shape every JSON-RPC-driven imperative suite takes (cell
+ * verbs, origin, body-size, actor lookup/search, account lifecycle, app
+ * settings, testing backdoor). Suites alias this under a self-documenting
+ * per-suite name (e.g. `OriginCrossTestOptions = RpcPathCrossSuiteOptions`).
+ */
+export interface RpcPathCrossSuiteOptions extends CrossSuiteOptions {
+    /** RPC endpoint path the methods are mounted on. Default `/api/rpc`. */
+    readonly rpc_path?: string;
+}
 /**
  * Options for `default_in_process_setup`. Extends `CreateTestAppOptions`
  * with the same `extra_accounts` slot the cross-process variant accepts

package/dist/testing/cross_backend/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/setup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAuB9B,OAAO,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAE5C,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,0BAA0B,CAAC;AACxD,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAKjE,OAAO,EAKN,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAGN,KAAK,uBAAuB,EAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAA0B,KAAK,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AACpF,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAyB,KAAK,cAAc,EAAC,MAAM,kCAAkC,CAAC;AAC7F,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,oBAAoB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAE7C;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtC;AAED,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,OAAO,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAC,CAAC;IACjE,QAAQ,CAAC,KAAK,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5F,QAAQ,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3F;AAoCD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,QAAQ,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,EAAE;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAC,KAAK,cAAc,CAAC;IAC1F,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAC,CAAC;IACjE,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC;IACpC,8DAA8D;IAC9D,QAAQ,CAAC,sBAAsB,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5F,4DAA4D;IAC5D,QAAQ,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3F,iEAAiE;IACjE,QAAQ,CAAC,2BAA2B,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjG;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,wBAAwB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7F;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACvE;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IACjF;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,oBAAoB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GAAG,eAAe,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;AAenD;;;;;GAKG;AACH,MAAM,WAAW,qBAAsB,SAAQ,oBAAoB;IAClE;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC1D;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC9C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,wBAAwB,GACnC,SAAS,qBAAqB,KAAG,SAqEjC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,yBAA0B,SAAQ,aAAa;IAC/D,iEAAiE;IACjE,QAAQ,CAAC,gBAAgB,EAAE,cAAc,CAAC;IAC1C,2DAA2D;IAC3D,QAAQ,CAAC,cAAc,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAC,CAAC;IACxE,yDAAyD;IACzD,QAAQ,CAAC,YAAY,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC;IAC3C,wGAAwG;IACxG,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC/C;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,sCAAsC,GAAG,IAAI,CACxD,yBAAyB,EACzB,OAAO,GAAG,UAAU,CACpB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,qCAAqC;IACrD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IACrD,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;IACrE,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC,cAAc,CAAC,CAAC;IACjE,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC/C;AAED;;;GAGG;AACH,eAAO,MAAM,6BAA6B,GACzC,QAAQ,yBAAyB,KAC/B,qCAMD,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,GAC3C,YAAY,qCAAqC,KAC/C,sCAUD,CAAC;AAEH,iDAAiD;AACjD,MAAM,WAAW,wBAAwB;IACxC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC1D;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC9C;AAqFD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,GACnC,QAAQ,sCAAsC,EAC9C,UAAS;IAAC,cAAc,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CAAM,KACpD,OAAO,CAAC,cAAc,CAUxB,CAAC;AA0SF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,2BAA2B,GACvC,QAAQ,sCAAsC,EAC9C,UAAU,wBAAwB,KAChC,SAsIF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC5C,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,kBAAkB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACjD;;;OAGG;IACH,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;CAChC;AAWD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,gCAAgC,GAAI,KAAK,CAAC,CAAC,SAAS,4BAA4B,EAC5F,SAAS,CAAC,KACR;IACF,UAAU,EAAE,SAAS,CAAC;IACtB,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACtC,kBAAkB,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;CA2BjC,CAAC"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/setup.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAuB9B,OAAO,EAAC,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAE5C,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,0BAA0B,CAAC;AACxD,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAKjE,OAAO,EAKN,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAGN,KAAK,uBAAuB,EAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAA0B,KAAK,mBAAmB,EAAC,MAAM,mBAAmB,CAAC;AACpF,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAyB,KAAK,cAAc,EAAC,MAAM,kCAAkC,CAAC;AAC7F,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,oBAAoB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC;AAE7C;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtC;AAED,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,OAAO,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAC,CAAC;IACjE,QAAQ,CAAC,KAAK,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5F,QAAQ,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3F;AAoCD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,QAAQ,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,EAAE;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAC,KAAK,cAAc,CAAC;IAC1F,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAC,CAAC;IACjE,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC;IACpC,8DAA8D;IAC9D,QAAQ,CAAC,sBAAsB,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5F,4DAA4D;IAC5D,QAAQ,CAAC,qBAAqB,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3F,iEAAiE;IACjE,QAAQ,CAAC,2BAA2B,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjG;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,wBAAwB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7F;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACvE;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IACjF;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,oBAAoB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GAAG,eAAe,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;AAEnD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IACjC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IAClE,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAeD;;;;;GAKG;AACH,MAAM,WAAW,qBAAsB,SAAQ,oBAAoB;IAClE;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC1D;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC9C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,wBAAwB,GACnC,SAAS,qBAAqB,KAAG,SAqEjC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,yBAA0B,SAAQ,aAAa;IAC/D,iEAAiE;IACjE,QAAQ,CAAC,gBAAgB,EAAE,cAAc,CAAC;IAC1C,2DAA2D;IAC3D,QAAQ,CAAC,cAAc,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAC,CAAC;IACxE,yDAAyD;IACzD,QAAQ,CAAC,YAAY,EAAE;QAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC;IAC3C,wGAAwG;IACxG,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC/C;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,sCAAsC,GAAG,IAAI,CACxD,yBAAyB,EACzB,OAAO,GAAG,UAAU,CACpB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,qCAAqC;IACrD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IACrD,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;IACrE,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC,cAAc,CAAC,CAAC;IACjE,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC/C;AAED;;;GAGG;AACH,eAAO,MAAM,6BAA6B,GACzC,QAAQ,yBAAyB,KAC/B,qCAMD,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,GAC3C,YAAY,qCAAqC,KAC/C,sCAUD,CAAC;AAEH,iDAAiD;AACjD,MAAM,WAAW,wBAAwB;IACxC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpD;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC1D;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC9C;AAqFD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,GACnC,QAAQ,sCAAsC,EAC9C,UAAS;IAAC,cAAc,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;CAAM,KACpD,OAAO,CAAC,cAAc,CAUxB,CAAC;AA0SF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,2BAA2B,GACvC,QAAQ,sCAAsC,EAC9C,UAAU,wBAAwB,KAChC,SAsIF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC5C,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,kBAAkB,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;IAChE,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACjD;;;OAGG;IACH,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;CAChC;AAWD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,gCAAgC,GAAI,KAAK,CAAC,CAAC,SAAS,4BAA4B,EAC5F,SAAS,CAAC,KACR;IACF,UAAU,EAAE,SAAS,CAAC;IACtB,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACtC,kBAAkB,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;CA2BjC,CAAC"}

package/dist/testing/cross_backend/testing_backdoor.d.ts

@@ -1,6 +1,6 @@
 import '../assert_dev_env.js';
-import type { CellCrossTestOptions } from './cell_cross_helpers.js';
+import type { RpcPathCrossSuiteOptions } from './setup.js';
 /** Options for the testing-backdoor negative-credential suite. */
-export type TestingBackdoorCrossTestOptions = CellCrossTestOptions;
+export type TestingBackdoorCrossTestOptions = RpcPathCrossSuiteOptions;
 export declare const describe_testing_backdoor_cross_tests: (options: TestingBackdoorCrossTestOptions) => void;
 //# sourceMappingURL=testing_backdoor.d.ts.map

package/dist/testing/cross_backend/testing_backdoor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing_backdoor.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/testing_backdoor.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAyD9B,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,yBAAyB,CAAC;AAgElE,kEAAkE;AAClE,MAAM,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAEnE,eAAO,MAAM,qCAAqC,GACjD,SAAS,+BAA+B,KACtC,IAiCF,CAAC"}
+{"version":3,"file":"testing_backdoor.d.ts","sourceRoot":"../src/lib/","sources":["../../../src/lib/testing/cross_backend/testing_backdoor.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,CAAC;AAyD9B,OAAO,KAAK,EAAC,wBAAwB,EAAc,MAAM,YAAY,CAAC;AA+DtE,kEAAkE;AAClE,MAAM,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAEvE,eAAO,MAAM,qCAAqC,GACjD,SAAS,+BAA+B,KACtC,IAiCF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.86.0",
+  "version": "0.87.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",