@fuzdev/fuz_app 0.88.0 → 0.90.0

package/dist/testing/integration.js

@@ -24,7 +24,7 @@ import { is_public_auth } from '../http/auth_shape.js';
 import { account_verify_action_spec, account_session_list_action_spec, account_session_revoke_action_spec, account_session_revoke_all_action_spec, account_token_create_action_spec, account_token_list_action_spec, account_token_revoke_action_spec, } from '../auth/account_action_specs.js';
 import { invite_create_action_spec } from '../auth/admin_action_specs.js';
 import { LoginOutput, AccountStatusOutput } from '../auth/account_route_schema.js';
-import {} from './cross_backend/capabilities.js';
+import { test_if } from './cross_backend/capabilities.js';
 import { DEFAULT_TEST_PASSWORD } from './test_credentials.js';
 /**
  * Standard integration test suite for fuz_app auth routes.
@@ -316,15 +316,15 @@ export const describe_standard_integration_tests = (options) => {
             // fixture keeper is single-actor, so `actor` must be non-null and
             // `role_grants` populated (keeper holds keeper + admin globally).
             //
-            // `/status` is mounted at `create_app_server` time (it needs the
-            // `bootstrap_available` runtime state), not by `create_account_route_specs`
-            // and not listed in the declared surface, so we can't gate on `route_specs`.
-            // A backend that mounts only the account-route factory (e.g. a minimal
-            // in-process route set) doesn't serve it — probe at runtime and skip on
-            // 404. The full spine surfaces (in-process + cross-process) serve it, so
-            // the gate runs there. `find_auth_route` can't be used: `/status` isn't a
-            // `RestAuthRouteSuffix`.
-            test('authenticated status body strict-parses against AccountStatusOutput', async (ctx) => {
+            // `/status` is bundled into `create_account_route_specs` (relative
+            // `/status`, prefixed to `/api/account/status`), so every account
+            // surface serves it — matching the Rust `account_router`. Gated on the
+            // declared `account_status` capability rather than a runtime 404-sniff:
+            // a backend that mounts account routes declares `account_status: true`
+            // and the gate **fails loud** if `/status` is missing (no more silent
+            // skip swallowing the coverage); a backend without it skips explicitly.
+            // `find_auth_route` can't be used: `/status` isn't a `RestAuthRouteSuffix`.
+            test_if(options.capabilities.account_status, 'authenticated status body strict-parses against AccountStatusOutput', async () => {
                 const fixture = await options.setup_test();
                 const login_route = find_auth_route(route_specs, '/login', 'POST');
                 assert.ok(login_route, 'Expected POST /login route — ensure create_route_specs includes account routes');
@@ -334,12 +334,9 @@ export const describe_standard_integration_tests = (options) => {
                     method: 'GET',
                     headers: fixture.create_session_headers({ host: 'localhost' }),
                 });
-                if (res.status === 404) {
-                    // Backend doesn't mount /status (minimal route set) — nothing to gate.
-                    ctx.skip();
-                    return;
-                }
-                assert.strictEqual(res.status, 200);
+                assert.strictEqual(res.status, 200, `expected 200 from ${status_path} — capabilities.account_status is true, so the ` +
+                    `account surface must bundle GET /status. A 404 means the backend declares the ` +
+                    `capability but doesn't mount the route.`);
                 const body = await res.json();
                 // Throws on any extra/missing field across account/actor/role_grants.
                 const parsed = AccountStatusOutput.parse(body);

package/dist/testing/schema_generators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema_generators.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/schema_generators.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAE7B;;;;;;;;GAQG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AACtB,OAAO,EAKN,KAAK,YAAY,EACjB,MAAM,yBAAyB,CAAC;AAIjC;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,cAAc,CAAC,CAAC,OAAO,KAAG,MAAM,GAAG,IAkBhE,CAAC;AA+FF,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,GAAI,OAAO,YAAY,EAAE,cAAc,CAAC,CAAC,OAAO,KAAG,OAgGnF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,EAAE,gBAAgB,CAAC,CAAC,SAAS,KAAG,MAa9E,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,GAC/B,cAAc,CAAC,CAAC,OAAO,KACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SA6B5B,CAAC"}
+{"version":3,"file":"schema_generators.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/schema_generators.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAE7B;;;;;;;;GAQG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AACtB,OAAO,EAKN,KAAK,YAAY,EACjB,MAAM,yBAAyB,CAAC;AAIjC;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,cAAc,CAAC,CAAC,OAAO,KAAG,MAAM,GAAG,IAkBhE,CAAC;AAsGF,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,GAAI,OAAO,YAAY,EAAE,cAAc,CAAC,CAAC,OAAO,KAAG,OAgGnF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,EAAE,gBAAgB,CAAC,CAAC,SAAS,KAAG,MAa9E,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,GAC/B,cAAc,CAAC,CAAC,OAAO,KACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SA6B5B,CAAC"}

package/dist/testing/schema_generators.js

@@ -127,6 +127,13 @@ const generate_valid_string = (field_schema) => {
         if (slug !== null && field_schema.safeParse(slug).success)
             return slug;
     }
+    // Email-shaped refinement (the `Email` primitive: loose `local@domain.tld`).
+    // The base `x`-fill has no `@`, so an email-pattern field needs a shaped
+    // candidate — the `z.string().regex()` form exposes a `pattern`, not the
+    // `format: 'email'` the `case 'email'` switch arm keys on.
+    const as_email = 'test@example.com';
+    if (field_schema.safeParse(as_email).success)
+        return as_email;
     // Absolute path refinement (e.g. DiskfilePath)
     const with_slash = '/' + base;
     if (field_schema.safeParse(with_slash).success)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.88.0",
+  "version": "0.90.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",
@@ -69,9 +69,9 @@
   "devDependencies": {
     "@electric-sql/pglite": "^0.4.5",
     "@fuzdev/blake3_wasm": "^0.1.1",
-    "@fuzdev/fuz_code": "^0.46.0",
+    "@fuzdev/fuz_code": "^0.46.1",
     "@fuzdev/fuz_css": "^0.63.2",
-    "@fuzdev/fuz_ui": "^0.205.0",
+    "@fuzdev/fuz_ui": "^0.205.1",
     "@fuzdev/fuz_util": "^0.65.1",
     "@fuzdev/gro": "^0.204.0",
     "@fuzdev/mdz": "^0.1.0",