@zerotal/testing 1.14.3 → 1.15.0

package/CHANGELOG.md

@@ -8,6 +8,20 @@ follows the Zerotal monorepo's unified versioning.
 
 ## [Unreleased]
 
+## [1.15.0] — 2026-09-04
+
+### Fixed
+
+- **A test that stubbed `globalThis.fetch` also answered the test client's own requests.**
+  `TestApp` drives the app over a loopback server through whatever `fetch` was current, so
+  faking an outbound integration — the ordinary way to test one — made unrelated route tests
+  fail with `connection refused`, or come back holding the third-party's JSON. The failure
+  presents as "my test client cannot reach my app", which sends you looking at the server.
+
+  `TestApp` now holds the real `fetch`, captured at module load before any test can replace
+  it. An outbound stub cannot intercept an inbound request, and no passthrough is needed for
+  the test client.
+
 ## [1.11.0] — 2026-08-31
 
 ### Changed

package/api-surface.md

@@ -3,6 +3,9 @@
 <!-- AUTO-GENERATED by scripts/api-surface.ts. Do not edit by hand.
      Run `bun run api:surface` to regenerate after an intentional API change. -->
 
+> Not a guide — this is a flat, alphabetical snapshot used to detect unintended
+> API changes. For how to use these, read the [documentation](https://zerotal.dev/docs).
+
 ## .  `(./src/index.ts)`
 
 class EventFake = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zerotal/testing",
-  "version": "1.14.3",
+  "version": "1.15.0",
   "license": "MIT",
   "maturity": "stable",
   "private": false,
@@ -32,14 +32,14 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@zerotal/core": "1.14.3",
-    "@zerotal/orm": "1.14.3",
-    "@zerotal/queue": "1.14.3",
-    "@zerotal/notifications": "1.14.3"
+    "@zerotal/core": "1.15.0",
+    "@zerotal/orm": "1.15.0",
+    "@zerotal/queue": "1.15.0",
+    "@zerotal/notifications": "1.15.0"
   },
   "devDependencies": {
     "typescript": "^5.8.0",
-    "@zerotal/session": "1.14.3"
+    "@zerotal/session": "1.15.0"
   },
   "description": "Testing utilities for Zerotal — an in-process test app, HTTP helpers, and database refresh.",
   "keywords": [

package/src/TestApp.ts

@@ -5,6 +5,24 @@ import { resetTestState } from "./resetTestState.ts";
 
 type BunServer = { port: number; stop(drain?: boolean): void };
 
+/**
+ * The real `fetch`, captured at module load — before any test has had a chance
+ * to replace `globalThis.fetch`.
+ *
+ * The test client talks to the app over a real loopback server, so it used to
+ * call whatever `fetch` was current. A test that stubs `globalThis.fetch` to
+ * fake an outbound integration therefore also answered the test client's own
+ * requests: three unrelated route tests fail with `connection refused` or come
+ * back holding the third-party's JSON, and the failure reads as "my test client
+ * cannot reach my app", which sends you looking at the server.
+ *
+ * Binding it here means an outbound stub can never intercept an inbound request.
+ * A test that genuinely wants to intercept the test client has `app.app` and the
+ * router; a test that wants to stub an integration should not have to know this
+ * exists at all.
+ */
+const _fetch: typeof globalThis.fetch = globalThis.fetch.bind(globalThis);
+
 /**
  * Wrapper around a running Application that provides an HTTP test client.
  * Obtain an instance via createTestApp().
@@ -251,7 +269,7 @@ export class TestApp {
 
     if (this._errors) this._errors.lastError = undefined;
 
-    let res = await fetch(full, { ...init, headers, redirect: "manual" });
+    let res = await _fetch(full, { ...init, headers, redirect: "manual" });
 
     if (this._followRedirects) {
       let hops = 0;
@@ -267,7 +285,7 @@ export class TestApp {
           const cookiePair = setCookie.split(";")[0] ?? "";
           nextHeaders.set("Cookie", existing ? `${existing}; ${cookiePair}` : cookiePair);
         }
-        res = await fetch(nextUrl, { method: "GET", headers: nextHeaders, redirect: "manual" });
+        res = await _fetch(nextUrl, { method: "GET", headers: nextHeaders, redirect: "manual" });
         hops++;
       }
     }