# Testing signals — blitz-js/blitz

> Canonical page: https://codevetter.com/unpack/blitz/testing-signals

# Testing signals — blitz-js/blitz

Scanned commit b18f81873e641934043f791fec06e22f5fe5a86e (2025-09-11). Generated by codevetter codevetter 1.15.0 on 2026-10-02.

Source inspection; upstream code and tests were not executed.

Tests and CI were inspected, not executed; no passing result is asserted. The examined suites mix Vitest unit tests, database-backed application tests, and integration tests that launch Next.js and browsers. CI describes package/app checks and dynamically selected integration projects on Linux and Windows. Coverage is uneven: some tests exercise real assertions, while an application-generator test is effectively a placeholder.
- Core toolkit package manifests define vitest run, and root test delegates to turbo run test; these commands were inspected only, not executed. — [package.json#L11-18](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/package.json#L11-L18) [packages/blitz/package.json#L9-16](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/package.json#L9-L16) [packages/blitz-auth/package.json#L9-16](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/package.json#L9-L16) [packages/blitz-rpc/package.json#L9-16](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-rpc/package.json#L9-L16)
- The inspected resolver suite checks value propagation through default, synchronous, and asynchronous Zod stages using a mocked session.$authorize. — [packages/blitz-rpc/src/server/resolvers/resolver.test.ts#L6-15](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-rpc/src/server/resolvers/resolver.test.ts#L6-L15) [packages/blitz-rpc/src/server/resolvers/resolver.test.ts#L18-60](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-rpc/src/server/resolvers/resolver.test.ts#L18-L60)
- auth-sessions.test.ts tests append cookie merging, replacement, expiration-cookie combinations, and preservation of custom cookies; its named auth flows manipulate cookie strings rather than execute getSession or storage. — [packages/blitz-auth/src/server/auth-sessions.test.ts#L26-31](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/auth-sessions.test.ts#L26-L31) [packages/blitz-auth/src/server/auth-sessions.test.ts#L47-124](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/auth-sessions.test.ts#L47-L124) [packages/blitz-auth/src/server/auth-sessions.test.ts#L189-224](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/auth-sessions.test.ts#L189-L224)
- Plugin tests assert merge and pipe behavior and reducer exports/middleware presence, including distinct request-header hooks. — [packages/blitz/tests/plugin.test.ts#L7-23](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/tests/plugin.test.ts#L7-L23) [packages/blitz/tests/plugin.test.ts#L26-43](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/tests/plugin.test.ts#L26-L43) [packages/blitz/tests/plugin.test.ts#L92-99](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/tests/plugin.test.ts#L92-L99)
- Loader utility tests assert default versus root resolver paths and include a Windows-path case. — [packages/blitz-rpc/src/server/loader/utils/loader-utils.test.ts#L4-51](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-rpc/src/server/loader/utils/loader-utils.test.ts#L4-L51)
- Forgot-password tests reset the database, mock token generation and email preview, and assert replacement token fields and a nonthrowing absent-user result. — [apps/toolkit-app/src/auth/mutations/forgotPassword.test.ts#L8-25](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/src/auth/mutations/forgotPassword.test.ts#L8-L25) [apps/toolkit-app/src/auth/mutations/forgotPassword.test.ts#L46-62](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/src/auth/mutations/forgotPassword.test.ts#L46-L62)
- Reset-password tests assert rejection for a non-existent-token input with empty passwords and for an expired token, and check successful token deletion and password verification; session.$create is mocked and this test does not assert session revocation. — [apps/toolkit-app/src/auth/mutations/resetPassword.test.ts#L11-15](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/src/auth/mutations/resetPassword.test.ts#L11-L15) [apps/toolkit-app/src/auth/mutations/resetPassword.test.ts#L55-82](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/src/auth/mutations/resetPassword.test.ts#L55-L82)
- The AppGenerator test's active 'runs' body immediately returns; Git-related expectations below it are commented out. — [packages/generator/test/generators/app-generator.test.ts#L69-94](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/generator/test/generators/app-generator.test.ts#L69-L94) [packages/generator/test/generators/app-generator.test.ts#L103-125](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/generator/test/generators/app-generator.test.ts#L103-L125)
- The App Router integration fixture checks unauthenticated client/server queries, cookie creation, RPC query results, login, and HEAD CSRF exemption, then runs its assertions in Webpack and Turbopack development modes. — [integration-tests/next-13-app-dir/test/index.test.ts#L29-88](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/integration-tests/next-13-app-dir/test/index.test.ts#L29-L88) [integration-tests/next-13-app-dir/test/index.test.ts#L91-152](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/integration-tests/next-13-app-dir/test/index.test.ts#L91-L152) [integration-tests/next-13-app-dir/test/index.test.ts#L157-188](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/integration-tests/next-13-app-dir/test/index.test.ts#L157-L188)
- Middleware integration tests verify response headers on API and RPC requests in development and built-server modes. — [integration-tests/middleware/test/index.test.ts#L19-44](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/integration-tests/middleware/test/index.test.ts#L19-L44) [integration-tests/middleware/test/index.test.ts#L47-74](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/integration-tests/middleware/test/index.test.ts#L47-L74)
- Inspected CI builds and lints, filters package/app tests, discovers integration folders, installs Playwright, and excludes next-13-app-dir steps on Windows; workflow definitions do not establish successful execution. — [.github/workflows/main.yml#L28-53](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/.github/workflows/main.yml#L28-L53) [.github/workflows/main.yml#L89-111](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/.github/workflows/main.yml#L89-L111) [.github/workflows/main.yml#L113-161](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/.github/workflows/main.yml#L113-L161)
- Test configuration needs package-level checking: toolkit-app exposes test:local rather than test and references ./test/setup.ts, while apps/web uses Jest; this bounded inspection does not establish comprehensive repository coverage. — [apps/toolkit-app/package.json#L4-12](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/package.json#L4-L12) [apps/toolkit-app/vitest.config.ts#L7-16](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/vitest.config.ts#L7-L16) [apps/web/package.json#L5-13](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/web/package.json#L5-L13)

Every claim links to its cited files at the pinned commit. Citations identify source evidence; they do not establish runtime correctness. Independent CodeVetter scan — not reviewed by upstream maintainers.

## Public product links

- [CodeVetter](https://codevetter.com/)
- [Download](https://codevetter.com/download)
- [Documentation](https://codevetter.com/docs/)
- [Source](https://github.com/Codevetter/codevetter)