test(plugins): the #15302 pin doubles hold the caller's limit bound (#15302)

`check:objectql-double-limit` named all three new stub drivers as NEW
limit-blind `find` doubles. §3's control passes `limit: 1`, so a blind double
would have answered it with the whole table. Bound applied after the filter and
by presence, the form the gate names.

Also renames the stub's unused `findOne` object parameter: vitest transpiles
without checking, so all three suites were green while `tsc --noEmit` (email,
webhooks) and `check:test-typecheck` (sharing) each reported TS6133.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XpTx2tbq3pZRYAdoGt6E6Y

Author: claude

packages/plugins/plugin-email/src/email-template-provenance.per-row.test.ts

@@ -64,9 +64,13 @@ function makeStubDriver(): any {
     async execute() { return null; }, async syncSchema() {},
     async find(o: string, ast: any) {
       d.findCalls.push({ object: o, where: ast?.where });
-      return [...store.values()].filter((r) => matches(r, ast?.where));
+      const rows = [...store.values()].filter((r) => matches(r, ast?.where));
+      // Hold the caller's bound, AFTER the filter and by PRESENCE
+      // (`check:objectql-double-limit`): §3's control passes `limit: 1`, so a
+      // limit-blind double would answer it with the whole table.
+      return typeof ast?.limit === 'number' ? rows.slice(0, ast.limit) : rows;
     },
-    async findOne(o: string, ast: any) {
+    async findOne(_o: string, ast: any) {
       for (const r of store.values()) if (matches(r, ast?.where)) return r;
       return null;
     },

packages/plugins/plugin-sharing/src/sharing-rule-provenance.per-row.test.ts

@@ -64,9 +64,13 @@ function makeStubDriver(): any {
     async execute() { return null; }, async syncSchema() {},
     async find(o: string, ast: any) {
       d.findCalls.push({ object: o, where: ast?.where });
-      return [...store.values()].filter((r) => matches(r, ast?.where));
+      const rows = [...store.values()].filter((r) => matches(r, ast?.where));
+      // Hold the caller's bound, AFTER the filter and by PRESENCE
+      // (`check:objectql-double-limit`): §3's control passes `limit: 1`, so a
+      // limit-blind double would answer it with the whole table.
+      return typeof ast?.limit === 'number' ? rows.slice(0, ast.limit) : rows;
     },
-    async findOne(o: string, ast: any) {
+    async findOne(_o: string, ast: any) {
       for (const r of store.values()) if (matches(r, ast?.where)) return r;
       return null;
     },

packages/plugins/plugin-webhooks/src/webhook-provenance.per-row.test.ts

@@ -64,9 +64,13 @@ function makeStubDriver(): any {
     async execute() { return null; }, async syncSchema() {},
     async find(o: string, ast: any) {
       d.findCalls.push({ object: o, where: ast?.where });
-      return [...store.values()].filter((r) => matches(r, ast?.where));
+      const rows = [...store.values()].filter((r) => matches(r, ast?.where));
+      // Hold the caller's bound, AFTER the filter and by PRESENCE
+      // (`check:objectql-double-limit`): §3's control passes `limit: 1`, so a
+      // limit-blind double would answer it with the whole table.
+      return typeof ast?.limit === 'number' ? rows.slice(0, ast.limit) : rows;
     },
-    async findOne(o: string, ast: any) {
+    async findOne(_o: string, ast: any) {
       for (const r of store.values()) if (matches(r, ast?.where)) return r;
       return null;
     },