@fuzdev/fuz_app 0.86.0 → 0.88.0

package/dist/testing/stubs.js

@@ -11,7 +11,7 @@ import { Logger } from '@fuzdev/fuz_util/log.js';
 import { ApiError, RateLimitError } from '../http/error_schemas.js';
 import { Db } from '../db/db.js';
 import { prefix_route_specs } from '../http/route_spec.js';
-import { create_bootstrap_route_specs } from '../auth/bootstrap_routes.js';
+import { bootstrap_route_shape } from '../auth/bootstrap_route_schema.js';
 import { create_rpc_endpoint } from '../actions/action_rpc.js';
 import { create_app_surface_spec, } from '../http/surface.js';
 import { AUDIT_LOG_SSE_MAX_PER_SCOPE } from '../realtime/sse_auth_guard.js';
@@ -244,14 +244,12 @@ export const create_test_app_surface_spec = (options) => {
     // short-circuits to 403 ALREADY_BOOTSTRAPPED, which is what surface tests
     // assert on. Live token_path is passed through for shape symmetry only.
     const bootstrap_route_specs = options.bootstrap && options.bootstrap.mode !== 'disabled'
-        ? prefix_route_specs(options.bootstrap.route_prefix ?? '/api/account', create_bootstrap_route_specs(ctx.deps, {
-            session_options: options.session_options,
-            bootstrap_status: {
-                available: false,
-                token_path: options.bootstrap.mode === 'live' ? options.bootstrap.token_path : null,
-            },
-            ip_rate_limiter: null,
-        }))
+        ? prefix_route_specs(options.bootstrap.route_prefix ?? '/api/account', [
+            // Surface generation reads the route shape only — the live hono
+            // handler never runs here, so a stub satisfies the RouteSpec type
+            // without pulling the in-process Hono app onto cross-process consumers.
+            { ...bootstrap_route_shape, handler: stub_handler },
+        ])
         : [];
     const route_specs = [...consumer_routes, ...rpc_route_specs, ...bootstrap_route_specs];
     let middleware_specs = create_stub_api_middleware();

package/dist/testing/test_credentials.d.ts

@@ -0,0 +1,23 @@
+import './assert_dev_env.js';
+/**
+ * Shared test credential constants — deliberately hono-free.
+ *
+ * `DEFAULT_TEST_PASSWORD` is the single source of truth for the password
+ * the in-process and cross-process test fixtures bootstrap and log in with.
+ * It lives in this leaf module (rather than `app_server.ts`) so the
+ * cross-process setup helpers can import it **without** pulling in the
+ * in-process Hono test app — `app_server.ts` transitively reaches
+ * `create_app_server` (`new Hono()`), so any value import from it forces the
+ * optional `hono` peer onto Rust-only consumers whose cross-process suites
+ * never spawn the TS backend.
+ *
+ * Single-sourcing the constant keeps the in-process bootstrap, the
+ * cross-process `mint_account` signup/login, and the integration suite's
+ * hardcoded login bodies from drifting — a divergence becomes a typecheck
+ * miss rather than a runtime password mismatch.
+ *
+ * @module
+ */
+/** Default password for test-bootstrapped accounts. */
+export declare const DEFAULT_TEST_PASSWORD = "test-password-123";
+//# sourceMappingURL=test_credentials.d.ts.map

package/dist/testing/test_credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test_credentials.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/test_credentials.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAE7B;;;;;;;;;;;;;;;;;;GAkBG;AAEH,uDAAuD;AACvD,eAAO,MAAM,qBAAqB,sBAAsB,CAAC"}

package/dist/testing/test_credentials.js

@@ -0,0 +1,22 @@
+import './assert_dev_env.js';
+/**
+ * Shared test credential constants — deliberately hono-free.
+ *
+ * `DEFAULT_TEST_PASSWORD` is the single source of truth for the password
+ * the in-process and cross-process test fixtures bootstrap and log in with.
+ * It lives in this leaf module (rather than `app_server.ts`) so the
+ * cross-process setup helpers can import it **without** pulling in the
+ * in-process Hono test app — `app_server.ts` transitively reaches
+ * `create_app_server` (`new Hono()`), so any value import from it forces the
+ * optional `hono` peer onto Rust-only consumers whose cross-process suites
+ * never spawn the TS backend.
+ *
+ * Single-sourcing the constant keeps the in-process bootstrap, the
+ * cross-process `mint_account` signup/login, and the integration suite's
+ * hardcoded login bodies from drifting — a divergence becomes a typecheck
+ * miss rather than a runtime password mismatch.
+ *
+ * @module
+ */
+/** Default password for test-bootstrapped accounts. */
+export const DEFAULT_TEST_PASSWORD = 'test-password-123';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.86.0",
+  "version": "0.88.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",
@@ -70,7 +70,7 @@
     "@electric-sql/pglite": "^0.4.5",
     "@fuzdev/blake3_wasm": "^0.1.1",
     "@fuzdev/fuz_code": "^0.46.0",
-    "@fuzdev/fuz_css": "^0.63.0",
+    "@fuzdev/fuz_css": "^0.63.2",
     "@fuzdev/fuz_ui": "^0.205.0",
     "@fuzdev/fuz_util": "^0.65.1",
     "@fuzdev/gro": "^0.204.0",