@fuzdev/fuz_app 0.95.0 → 0.97.0

package/dist/testing/cross_backend/setup.js

@@ -82,6 +82,15 @@ export const reconstruct_bootstrapped_handle = (serialized) => ({
         base_url: serialized.config.base_url,
         initial_cookies: serialized.keeper_cookies,
     }),
+    // Same cookie jar but Origin-free so the daemon-token middleware doesn't
+    // discard the credential as browser-context — used by the `_testing_*`
+    // daemon-token calls (`_testing_reset` / `_testing_schema_snapshot` /
+    // `_testing_action_manifest` / `_testing_mint_session`).
+    keeper_daemon_transport: create_fetch_transport({
+        base_url: serialized.config.base_url,
+        initial_cookies: serialized.keeper_cookies,
+        origin: null,
+    }),
 });
 /**
  * Structural subset of `SignupOutput` the runner cares about. Looser
@@ -163,7 +172,7 @@ const rpc_via_transport = async (transport, rpc_path, method, params, backend_na
  * the snapshot shapes match by design.
  */
 export const capture_schema_snapshot = async (handle, options = {}) => {
-    const raw = await rpc_via_transport(handle.keeper_transport, handle.config.rpc_path, '_testing_schema_snapshot', { exclude_tables: [...(options.exclude_tables ?? [])] }, handle.config.name, { [DAEMON_TOKEN_HEADER]: handle.daemon_token });
+    const raw = await rpc_via_transport(handle.keeper_daemon_transport, handle.config.rpc_path, '_testing_schema_snapshot', { exclude_tables: [...(options.exclude_tables ?? [])] }, handle.config.name, { [DAEMON_TOKEN_HEADER]: handle.daemon_token });
     // TODO: cast, not parse — `SchemaSnapshot.parse(raw)` would validate the wire
     // against the schema (the `capture_action_manifest` twin parses + uses a
     // strict object); parsing here may surface a latent schema-model gap to
@@ -181,7 +190,7 @@ export const capture_schema_snapshot = async (handle, options = {}) => {
  * `fuz_testing` mirror); the normalized shapes match by design.
  */
 export const capture_action_manifest = async (handle) => {
-    const raw = await rpc_via_transport(handle.keeper_transport, handle.config.rpc_path, '_testing_action_manifest', {}, handle.config.name, { [DAEMON_TOKEN_HEADER]: handle.daemon_token });
+    const raw = await rpc_via_transport(handle.keeper_daemon_transport, handle.config.rpc_path, '_testing_action_manifest', {}, handle.config.name, { [DAEMON_TOKEN_HEADER]: handle.daemon_token });
     return ActionManifest.parse(raw);
 };
 /**
@@ -215,7 +224,7 @@ const TestingResetResponseShape = z.object({
  * can close over them.
  */
 const fire_testing_reset = async (handle, options) => {
-    const raw = await rpc_via_transport(handle.keeper_transport, handle.config.rpc_path, '_testing_reset', {
+    const raw = await rpc_via_transport(handle.keeper_daemon_transport, handle.config.rpc_path, '_testing_reset', {
         extra_keeper_roles: options.extra_keeper_roles ?? [],
         extra_accounts: (options.extra_accounts ?? []).map((spec) => ({
             username: spec.username,
@@ -387,6 +396,17 @@ const create_keeper_transport = (handle, cookie_name, session_cookie) => create_
     base_url: handle.config.base_url,
     initial_cookies: [`${cookie_name}=${session_cookie}`],
 });
+/**
+ * Origin-free twin of `create_keeper_transport` — same fresh keeper cookie
+ * jar but `origin: null` so the daemon-token middleware doesn't discard the
+ * credential as browser-context. Used for the per-test `_testing_*`
+ * daemon-token calls (the rebuilt handle's `keeper_daemon_transport`).
+ */
+const create_keeper_daemon_transport = (handle, cookie_name, session_cookie) => create_fetch_transport({
+    base_url: handle.config.base_url,
+    initial_cookies: [`${cookie_name}=${session_cookie}`],
+    origin: null,
+});
 /**
  * Build a `SetupTest` against a spawned + bootstrapped backend.
  *
@@ -428,9 +448,14 @@ export const default_cross_process_setup = (handle, options) => {
         // `session_cookie` for any keeper-acting calls this test makes
         // (e.g. `fixture.create_account()`'s `invite_create` step).
         const keeper_transport = create_keeper_transport(handle, cookie_name, keeper.session_cookie);
+        // Origin-free twin for the per-test daemon-token calls — the original
+        // `handle.keeper_daemon_transport` carries the wiped `globalSetup` keeper
+        // cookie, so rebuild it against the freshly re-seeded keeper.
+        const keeper_daemon_transport = create_keeper_daemon_transport(handle, cookie_name, keeper.session_cookie);
         const refreshed_handle = {
             ...handle,
             keeper_transport,
+            keeper_daemon_transport,
             keeper_account: keeper.account,
             keeper_actor: keeper.actor,
             keeper_cookies: [`${cookie_name}=${keeper.session_cookie}`],
@@ -508,7 +533,7 @@ export const default_cross_process_setup = (handle, options) => {
             // so `_testing_mint_session` mints the backdated row + signs the
             // cookie server-side over the keeper's daemon-token channel.
             mint_expired_session: async () => {
-                const raw = await rpc_via_transport(refreshed_handle.keeper_transport, handle.config.rpc_path, '_testing_mint_session', { account_id: keeper.account.id, expires_in_seconds: EXPIRED_SESSION_OFFSET_SECONDS }, handle.config.name, { [DAEMON_TOKEN_HEADER]: handle.daemon_token });
+                const raw = await rpc_via_transport(refreshed_handle.keeper_daemon_transport, handle.config.rpc_path, '_testing_mint_session', { account_id: keeper.account.id, expires_in_seconds: EXPIRED_SESSION_OFFSET_SECONDS }, handle.config.name, { [DAEMON_TOKEN_HEADER]: handle.daemon_token });
                 const parsed = MintSessionResponseShape.safeParse(raw);
                 if (!parsed.success) {
                     throw new Error(`_testing_mint_session(${handle.config.name}) returned unexpected result: ` +

package/dist/testing/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/db.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AA8B7B,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,aAAa,CAAC;AAKpC;;GAEG;AACH,eAAO,MAAM,KAAK,SAA4B,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,GAAU,IAAI,EAAE,KAAG,OAAO,CAAC,IAAI,CAGvD,CAAC;AAMF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,GAAI,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,KAAG,SAkB7E,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,iBAAiB,GAC7B,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,EACtC,WAAW,MAAM,KACf,SA2DF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,UAQhC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC,UAAyC,CAAC;AAEvF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,GAAU,IAAI,EAAE,KAAG,OAAO,CAAC,IAAI,CAG3D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,kBAAkB,GAC9B,WAAW,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,EACvC,iBAAiB,KAAK,CAAC,MAAM,CAAC,KAC5B,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,KAAK,IAAI,CAwBzD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,GAAI,WAAW,KAAK,CAAC,SAAS,CAAC,KAAG,IAMnE,CAAC"}
+{"version":3,"file":"db.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/db.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AA8B7B,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,aAAa,CAAC;AAKpC;;GAEG;AACH,eAAO,MAAM,KAAK,SAA4B,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,GAAU,IAAI,EAAE,KAAG,OAAO,CAAC,IAAI,CAGvD,CAAC;AAMF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,GAAI,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,KAAG,SAkB7E,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,iBAAiB,GAC7B,aAAa,CAAC,EAAE,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,EACtC,WAAW,MAAM,KACf,SAgEF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,UAQhC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC,UAAyC,CAAC;AAEvF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,GAAU,IAAI,EAAE,KAAG,OAAO,CAAC,IAAI,CAG3D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,kBAAkB,GAC9B,WAAW,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,EACvC,iBAAiB,KAAK,CAAC,MAAM,CAAC,KAC5B,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,KAAK,IAAI,CAwBzD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,GAAI,WAAW,KAAK,CAAC,SAAS,CAAC,KAAG,IAMnE,CAAC"}

package/dist/testing/db.js

@@ -26,7 +26,7 @@ import { describe, beforeAll, beforeEach, afterAll } from 'vitest';
 import { to_error_message } from '@fuzdev/fuz_util/error.ts';
 import { create_pglite_db } from '../db/db_pglite.js';
 import { assert_valid_sql_identifier } from '../db/sql_identifier.js';
-import { create_pg_db } from '../db/db_pg.js';
+import { create_pg_db, register_pg_type_parsers } from '../db/db_pg.js';
 /**
  * CI detection — `CI=true` is set automatically by GitHub Actions, GitLab CI, etc.
  */
@@ -121,6 +121,11 @@ export const create_pg_factory = (init_schema, test_url) => {
                 pool_ref = null;
             }
             const { Pool } = await import('pg');
+            // Mirror production's int8→number coercion (`create_db`) so the
+            // test pg pool reads `BIGSERIAL` columns (e.g. `audit_log.seq`)
+            // as numbers like PGlite does — without this the pg leg of a
+            // `.db.test.ts` sees `seq` as a string and wire-schema parses fail.
+            await register_pg_type_parsers();
             const pool = new Pool({ connectionString: test_url });
             pool_ref = pool;
             const { db } = create_pg_db(pool);

package/dist/testing/middleware.js

@@ -13,7 +13,7 @@ import { Hono } from 'hono';
 import { Logger } from '@fuzdev/fuz_util/log.ts';
 import { create_bearer_auth_middleware } from '../auth/bearer_auth.js';
 import { query_validate_api_token } from '../auth/api_token_queries.js';
-import { query_account_by_id, query_actor_by_id, query_actors_by_account, } from '../auth/account_queries.js';
+import { query_account_by_id, query_actor_by_id, query_active_actors_by_account, } from '../auth/account_queries.js';
 import { query_role_grant_find_active_for_actor } from '../auth/role_grant_queries.js';
 import { create_proxy_middleware } from '../http/proxy.js';
 import { get_client_ip } from '../http/client_ip.js';
@@ -29,7 +29,7 @@ vi.mock('../auth/api_token_queries.js', () => ({
 vi.mock('../auth/account_queries.js', () => ({
     query_account_by_id: vi.fn(),
     query_actor_by_id: vi.fn(),
-    query_actors_by_account: vi.fn(),
+    query_active_actors_by_account: vi.fn(),
 }));
 vi.mock('../auth/role_grant_queries.js', () => ({
     query_role_grant_find_active_for_actor: vi.fn(),
@@ -52,7 +52,7 @@ export const create_bearer_auth_mocks = (tc) => {
     const mock_validate = vi.mocked(query_validate_api_token);
     const mock_find_by_id = vi.mocked(query_account_by_id);
     const mock_find_actor_by_id = vi.mocked(query_actor_by_id);
-    const mock_find_actors_by_account = vi.mocked(query_actors_by_account);
+    const mock_find_actors_by_account = vi.mocked(query_active_actors_by_account);
     const mock_find_active_for_actor = vi.mocked(query_role_grant_find_active_for_actor);
     mock_validate
         .mockReset()
@@ -211,7 +211,7 @@ export const create_test_middleware_stack_app = (options) => {
     const mock_validate = vi.mocked(query_validate_api_token);
     const mock_find_by_id = vi.mocked(query_account_by_id);
     const mock_find_actor_by_id = vi.mocked(query_actor_by_id);
-    const mock_find_actors_by_account = vi.mocked(query_actors_by_account);
+    const mock_find_actors_by_account = vi.mocked(query_active_actors_by_account);
     const mock_find_active_for_actor = vi.mocked(query_role_grant_find_active_for_actor);
     mock_validate.mockReset().mockImplementation(() => Promise.resolve(undefined));
     mock_find_by_id.mockReset().mockImplementation(() => Promise.resolve(undefined));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.95.0",
+  "version": "0.97.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",
@@ -23,6 +23,10 @@
     "deploy": "gro deploy"
   },
   "type": "module",
+  "imports": {
+    "#lib/*": "./src/lib/*",
+    "#routes/*": "./src/routes/*"
+  },
   "engines": {
     "node": ">=24.14"
   },
@@ -79,7 +83,7 @@
     "@hono/node-server": "^1.19.14",
     "@hono/node-ws": "^1.3.1",
     "@node-rs/argon2": "^2.0.2",
-    "@ryanatkn/eslint-config": "^0.12.1",
+    "@ryanatkn/eslint-config": "^0.12.2",
     "@sveltejs/acorn-typescript": "^1.0.9",
     "@sveltejs/adapter-static": "^3.0.10",
     "@sveltejs/kit": "^2.63.0",