@arcforges/api-client 1.0.0-ci.89.1 → 1.0.0-ci.92.1

package/NOTICE

@@ -1,10 +1,10 @@
 ArcForges Contracts
 Copyright 2026 ArcForges contributors
 
-@arcforges/api-client 1.0.0-ci.89.1 (Apache-2.0)
+@arcforges/api-client 1.0.0-ci.92.1 (Apache-2.0)
 
 Resolved runtime dependency inventory (dependencies retain their own licences):
-- @arcforges/proto 1.0.0-ci.89.1: Apache-2.0 (pkg:npm/%40arcforges/proto@1.0.0-ci.89.1)
+- @arcforges/proto 1.0.0-ci.92.1: Apache-2.0 (pkg:npm/%40arcforges/proto@1.0.0-ci.92.1)
 - @bufbuild/protobuf 2.15.0: (Apache-2.0 AND BSD-3-Clause) (pkg:npm/%40bufbuild/protobuf@2.15.0)
 - @connectrpc/connect 2.2.0: Apache-2.0 (pkg:npm/%40connectrpc/connect@2.2.0)
 - @connectrpc/connect-web 2.2.0: Apache-2.0 (pkg:npm/%40connectrpc/connect-web@2.2.0)
@@ -15,8 +15,8 @@ ArcForges source provenance notices
 
 Generated from reviewed active records. Original licence files and dependency notices remain authoritative.
 
-contract-bindings-r4
-Source: https://github.com/ArcForges/Contracts @ af7b6cca5e14a51735512d283b03d3ae9d96d170
+contract-bindings-r5
+Source: https://github.com/ArcForges/Contracts @ b6795dc55852e16bcd555751a58bd494958e3917
 Material licence: Apache-2.0
 Notice scope: packages
 Copyright 2026 ArcForges contributors.

package/README.md

@@ -12,6 +12,13 @@ const reply = await client.sayHello({ name: "World" }, { timeoutMs: 5000 });
 console.log(reply.message);
 ```
 
+`createPublicGrpcWebTransport` is the public business transport: binary gRPC-Web
+only, unknown fields retained and the shared 100-level nesting bound. It refuses
+`useBinaryFormat`, `jsonOptions` and `binaryOptions` overrides. The declared HTTP
+exception records have strict codecs such as `tryParsePartReceiptJson` and
+`serializePartReceiptJson`; they enforce the schema byte limit, UTF-8, JSON depth 32,
+duplicate-property and integer-lexeme rules before the closed schema check.
+
 The endpoint must serve gRPC-Web. Browser cross-origin access also requires
 server CORS configuration. The demo host binds to loopback for tests.
 

package/build-identity.json

@@ -3,17 +3,17 @@
   "owner": "Contracts",
   "artifact": {
     "id": "@arcforges/api-client",
-    "version": "1.0.0-ci.89.1"
+    "version": "1.0.0-ci.92.1"
   },
   "build": {
-    "sourceCommit": "4b8134eaf8a4174922d6378da003ed390b85a94a",
+    "sourceCommit": "e6c4a77f3ba48d70de4bf524623985b29278c784",
     "dirty": false,
     "kind": "ci",
-    "buildId": "35730204418.1",
-    "runId": "35730204418",
+    "buildId": "35797272606.1",
+    "runId": "35797272606",
     "runAttempt": 1,
-    "pipelineRun": "https://github.com/ArcForges/Contracts/actions/runs/35730204418",
-    "sourceDateEpoch": 1790081756
+    "pipelineRun": "https://github.com/ArcForges/Contracts/actions/runs/35797272606",
+    "sourceDateEpoch": 1790119475
   },
   "axes": {
     "AppVersion": {
@@ -64,7 +64,7 @@
           "version": "1",
           "source": {
             "path": "public/http/v1/inventory.schema.json",
-            "sha256": "fb6929548278f6e16e61491001fecae4143882efbfe732950a1584e1e2f80a5d"
+            "sha256": "2d17acc663de43ff847e522ddb16f32b1e7ec356df7db7dcafe8342d3fb014ce"
           }
         },
         {
@@ -72,7 +72,7 @@
           "version": "1",
           "source": {
             "path": "public/http/v1/schema.json",
-            "sha256": "23587b33320fcbe4a917c2839552984eb40e716c4ce317a5c218f35bedf06751"
+            "sha256": "8d4c1282c0f93452a0304e44c832179d4c6f65fa563ae53517aa324af87105ce"
           }
         }
       ]
@@ -110,10 +110,10 @@
       "values": [
         {
           "subject": "pkg:npm/%40arcforges/proto",
-          "version": "1.0.0-ci.89.1",
+          "version": "1.0.0-ci.92.1",
           "source": {
             "path": "sbom.cdx.json#components",
-            "sha256": "f8baed3a3ad5bfb9c3b996f0a47d5dbfc75f954982156af49e3bdb0f473c6a7c"
+            "sha256": "eed9ce9eb5fd29191d6c222746b88c1eb893704ba3a009478d57b93e03701f4d"
           }
         },
         {
@@ -121,7 +121,7 @@
           "version": "2.15.0",
           "source": {
             "path": "sbom.cdx.json#components",
-            "sha256": "f8baed3a3ad5bfb9c3b996f0a47d5dbfc75f954982156af49e3bdb0f473c6a7c"
+            "sha256": "eed9ce9eb5fd29191d6c222746b88c1eb893704ba3a009478d57b93e03701f4d"
           }
         },
         {
@@ -129,7 +129,7 @@
           "version": "2.2.0",
           "source": {
             "path": "sbom.cdx.json#components",
-            "sha256": "f8baed3a3ad5bfb9c3b996f0a47d5dbfc75f954982156af49e3bdb0f473c6a7c"
+            "sha256": "eed9ce9eb5fd29191d6c222746b88c1eb893704ba3a009478d57b93e03701f4d"
           }
         },
         {
@@ -137,7 +137,7 @@
           "version": "2.2.0",
           "source": {
             "path": "sbom.cdx.json#components",
-            "sha256": "f8baed3a3ad5bfb9c3b996f0a47d5dbfc75f954982156af49e3bdb0f473c6a7c"
+            "sha256": "eed9ce9eb5fd29191d6c222746b88c1eb893704ba3a009478d57b93e03701f4d"
           }
         }
       ]

package/dist/index.d.ts

@@ -1,6 +1,14 @@
+import type { Transport } from "@connectrpc/connect";
 import type { GrpcWebTransportOptions } from "@connectrpc/connect-web";
+/** Caller-owned endpoint, fetch, interceptors and timeout; the wire format is fixed. */
+export type PublicGrpcWebTransportOptions = Omit<GrpcWebTransportOptions, "useBinaryFormat" | "jsonOptions" | "binaryOptions">;
+/**
+ * Creates the public business transport: binary gRPC-Web only, unknown fields
+ * retained and the shared nesting bound. JSON selection is refused.
+ */
+export declare function createPublicGrpcWebTransport(options: PublicGrpcWebTransportOptions): Transport;
 /** Creates the example client using the caller's gRPC-Web endpoint and fetch. */
-export declare function createHelloClient(options: GrpcWebTransportOptions): import("@connectrpc/connect").Client<import("@bufbuild/protobuf/codegenv2").GenService<{
+export declare function createHelloClient(options: PublicGrpcWebTransportOptions): import("@connectrpc/connect").Client<import("@bufbuild/protobuf/codegenv2").GenService<{
     sayHello: {
         methodKind: "unary";
         input: typeof import("@arcforges/proto").SayHelloRequestSchema;

package/dist/index.js

@@ -1,9 +1,26 @@
 // SPDX-License-Identifier: Apache-2.0
-import { HelloService } from "@arcforges/proto";
+import { contractBinaryReadOptions, HelloService } from "@arcforges/proto";
 import { createClient } from "@connectrpc/connect";
 import { createGrpcWebTransport } from "@connectrpc/connect-web";
+/**
+ * Creates the public business transport: binary gRPC-Web only, unknown fields
+ * retained and the shared nesting bound. JSON selection is refused.
+ */
+export function createPublicGrpcWebTransport(options) {
+    const selected = options;
+    if (selected.useBinaryFormat !== undefined ||
+        selected.jsonOptions !== undefined ||
+        selected.binaryOptions !== undefined) {
+        throw new TypeError("Public ArcForges business calls use binary gRPC-Web with fixed codec options.");
+    }
+    return createGrpcWebTransport({
+        ...options,
+        useBinaryFormat: true,
+        binaryOptions: { ...contractBinaryReadOptions, writeUnknownFields: true },
+    });
+}
 /** Creates the example client using the caller's gRPC-Web endpoint and fetch. */
 export function createHelloClient(options) {
-    return createClient(HelloService, createGrpcWebTransport(options));
+    return createClient(HelloService, createPublicGrpcWebTransport(options));
 }
 export * from "./gen/http.js";

package/dist/shapes/gen/PackageInventory.d.ts

@@ -8,3 +8,17 @@ export interface InventoryFile {
     sha256: string;
 }
 export declare function isPackageInventory(value: unknown): value is PackageInventory;
+/** The schema's declared UTF-8 document bound in bytes. */
+export declare const packageInventoryJsonMaxBytes = 4194304;
+/** Parses one strict PackageInventory document; refusal kinds match the C# codec. */
+export declare function tryParsePackageInventoryJson(input: Uint8Array | string): {
+    ok: true;
+    value: PackageInventory;
+} | {
+    ok: false;
+    failure: "tooLarge" | "malformed" | "invalid";
+};
+/** Parses one strict PackageInventory document or throws an error carrying the refusal kind. */
+export declare function parsePackageInventoryJson(input: Uint8Array | string): PackageInventory;
+/** Writes compact UTF-8 in schema property order and refuses output the schema rejects. */
+export declare function serializePackageInventoryJson(value: PackageInventory): Uint8Array;

package/dist/shapes/gen/PackageInventory.js

@@ -1,4 +1,41 @@
 export function isPackageInventory(value) { return check0(value); }
+/** The schema's declared UTF-8 document bound in bytes. */
+export const packageInventoryJsonMaxBytes = 4194304;
+/** Parses one strict PackageInventory document; refusal kinds match the C# codec. */
+export function tryParsePackageInventoryJson(input) {
+    const parsed = strictJson(input, 4194304);
+    if (!parsed.ok)
+        return parsed;
+    return isPackageInventory(parsed.value) ? { ok: true, value: parsed.value } : { ok: false, failure: "invalid" };
+}
+/** Parses one strict PackageInventory document or throws an error carrying the refusal kind. */
+export function parsePackageInventoryJson(input) {
+    const result = tryParsePackageInventoryJson(input);
+    if (!result.ok)
+        throw Object.assign(new Error(`PackageInventory JSON refused: ${result.failure}.`), { failure: result.failure });
+    return result.value;
+}
+/** Writes compact UTF-8 in schema property order and refuses output the schema rejects. */
+export function serializePackageInventoryJson(value) {
+    const bytes = new TextEncoder().encode(JSON.stringify(orderPackageInventory(value)));
+    const result = tryParsePackageInventoryJson(bytes);
+    if (!result.ok)
+        throw Object.assign(new Error(`PackageInventory JSON refused: ${result.failure}.`), { failure: result.failure });
+    return bytes;
+}
+function orderInventoryFile(value) {
+    const out = {};
+    out["path"] = value["path"];
+    out["size"] = value["size"];
+    out["sha256"] = value["sha256"];
+    return out;
+}
+function orderPackageInventory(value) {
+    const out = {};
+    out["schemaVersion"] = value["schemaVersion"];
+    out["files"] = value["files"].map(item => orderInventoryFile(item));
+    return out;
+}
 function check0(value) {
     if (typeof value !== 'object' || value === null || Array.isArray(value))
         return false;
@@ -98,6 +135,163 @@ function check6(value) {
         return false;
     return true;
 }
+/** Strict UTF-8 JSON: no BOM, comments, trailing commas or duplicate properties; depth <= 32; integer lexemes only. */
+function strictJson(input, maxBytes) {
+    let text;
+    if (typeof input === "string") {
+        if (!validText(input))
+            return { ok: false, failure: "malformed" };
+        if (new TextEncoder().encode(input).byteLength > maxBytes)
+            return { ok: false, failure: "tooLarge" };
+        text = input;
+    }
+    else {
+        if (input.byteLength > maxBytes)
+            return { ok: false, failure: "tooLarge" };
+        try {
+            text = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(input);
+        }
+        catch {
+            return { ok: false, failure: "malformed" };
+        }
+    }
+    try {
+        return { ok: true, value: new StrictJsonReader(text).document() };
+    }
+    catch {
+        return { ok: false, failure: "malformed" };
+    }
+}
+class StrictJsonReader {
+    text;
+    index = 0;
+    constructor(text) {
+        this.text = text;
+    }
+    document() {
+        this.space();
+        const value = this.value(0);
+        this.space();
+        if (this.index !== this.text.length)
+            throw new SyntaxError("Trailing JSON content");
+        return value;
+    }
+    value(depth) {
+        switch (this.text[this.index]) {
+            case "{": return this.object(depth + 1);
+            case "[": return this.array(depth + 1);
+            case '"': return this.string();
+            case "t": return this.literal("true", true);
+            case "f": return this.literal("false", false);
+            case "n": return this.literal("null", null);
+            default: return this.number();
+        }
+    }
+    object(depth) {
+        if (depth > 32)
+            throw new SyntaxError("JSON depth exceeded");
+        this.index++;
+        const out = {};
+        const keys = new Set();
+        this.space();
+        if (this.text[this.index] === "}") {
+            this.index++;
+            return out;
+        }
+        for (;;) {
+            this.space();
+            if (this.text[this.index] !== '"')
+                throw new SyntaxError("Expected property name");
+            const key = this.string();
+            if (keys.has(key))
+                throw new SyntaxError("Duplicate JSON property");
+            keys.add(key);
+            this.space();
+            if (this.text[this.index++] !== ":")
+                throw new SyntaxError("Expected colon");
+            this.space();
+            // defineProperty keeps names such as __proto__ as ordinary own properties.
+            Object.defineProperty(out, key, { value: this.value(depth), enumerable: true, writable: true, configurable: true });
+            this.space();
+            const next = this.text[this.index++];
+            if (next === "}")
+                return out;
+            if (next !== ",")
+                throw new SyntaxError("Expected comma");
+        }
+    }
+    array(depth) {
+        if (depth > 32)
+            throw new SyntaxError("JSON depth exceeded");
+        this.index++;
+        const out = [];
+        this.space();
+        if (this.text[this.index] === "]") {
+            this.index++;
+            return out;
+        }
+        for (;;) {
+            this.space();
+            out.push(this.value(depth));
+            this.space();
+            const next = this.text[this.index++];
+            if (next === "]")
+                return out;
+            if (next !== ",")
+                throw new SyntaxError("Expected comma");
+        }
+    }
+    string() {
+        this.index++;
+        let out = "";
+        for (;;) {
+            const c = this.text[this.index++];
+            if (c === undefined)
+                throw new SyntaxError("Unterminated string");
+            if (c === '"')
+                break;
+            if (c < " ")
+                throw new SyntaxError("Unescaped control character");
+            if (c !== "\\") {
+                out += c;
+                continue;
+            }
+            const e = this.text[this.index++];
+            const simple = { '"': '"', "\\": "\\", "/": "/", b: "\b", f: "\f", n: "\n", r: "\r", t: "\t" };
+            if (e !== undefined && e in simple) {
+                out += simple[e];
+                continue;
+            }
+            if (e !== "u" || !/^[0-9a-fA-F]{4}$/.test(this.text.slice(this.index, this.index + 4)))
+                throw new SyntaxError("Invalid escape");
+            out += String.fromCharCode(parseInt(this.text.slice(this.index, this.index + 4), 16));
+            this.index += 4;
+        }
+        if (!validText(out))
+            throw new SyntaxError("Lone surrogate escape");
+        return out;
+    }
+    number() {
+        const match = /-?(?:0|[1-9][0-9]*)(\.[0-9]+)?([eE][+-]?[0-9]+)?/y;
+        match.lastIndex = this.index;
+        const found = match.exec(this.text);
+        if (found === null)
+            throw new SyntaxError("Invalid JSON value");
+        this.index = match.lastIndex;
+        // Selected schemas have no fractional numbers; fraction/exponent lexemes never satisfy an integer.
+        return found[1] !== undefined || found[2] !== undefined ? Number.NaN : Number(found[0]);
+    }
+    literal(word, value) {
+        if (this.text.slice(this.index, this.index + word.length) !== word)
+            throw new SyntaxError("Invalid JSON literal");
+        this.index += word.length;
+        return value;
+    }
+    space() {
+        while (this.text[this.index] === " " || this.text[this.index] === "\t" || this.text[this.index] === "\n" || this.text[this.index] === "\r")
+            this.index++;
+    }
+}
 function validText(value) {
     for (const scalar of value) {
         const point = scalar.codePointAt(0);

package/dist/shapes/gen/PartReceipt.d.ts

@@ -5,3 +5,17 @@ export interface PartReceipt {
     etag: string;
 }
 export declare function isPartReceipt(value: unknown): value is PartReceipt;
+/** The schema's declared UTF-8 document bound in bytes. */
+export declare const partReceiptJsonMaxBytes = 65536;
+/** Parses one strict PartReceipt document; refusal kinds match the C# codec. */
+export declare function tryParsePartReceiptJson(input: Uint8Array | string): {
+    ok: true;
+    value: PartReceipt;
+} | {
+    ok: false;
+    failure: "tooLarge" | "malformed" | "invalid";
+};
+/** Parses one strict PartReceipt document or throws an error carrying the refusal kind. */
+export declare function parsePartReceiptJson(input: Uint8Array | string): PartReceipt;
+/** Writes compact UTF-8 in schema property order and refuses output the schema rejects. */
+export declare function serializePartReceiptJson(value: PartReceipt): Uint8Array;

package/dist/shapes/gen/PartReceipt.js

@@ -1,4 +1,36 @@
 export function isPartReceipt(value) { return check0(value); }
+/** The schema's declared UTF-8 document bound in bytes. */
+export const partReceiptJsonMaxBytes = 65536;
+/** Parses one strict PartReceipt document; refusal kinds match the C# codec. */
+export function tryParsePartReceiptJson(input) {
+    const parsed = strictJson(input, 65536);
+    if (!parsed.ok)
+        return parsed;
+    return isPartReceipt(parsed.value) ? { ok: true, value: parsed.value } : { ok: false, failure: "invalid" };
+}
+/** Parses one strict PartReceipt document or throws an error carrying the refusal kind. */
+export function parsePartReceiptJson(input) {
+    const result = tryParsePartReceiptJson(input);
+    if (!result.ok)
+        throw Object.assign(new Error(`PartReceipt JSON refused: ${result.failure}.`), { failure: result.failure });
+    return result.value;
+}
+/** Writes compact UTF-8 in schema property order and refuses output the schema rejects. */
+export function serializePartReceiptJson(value) {
+    const bytes = new TextEncoder().encode(JSON.stringify(orderPartReceipt(value)));
+    const result = tryParsePartReceiptJson(bytes);
+    if (!result.ok)
+        throw Object.assign(new Error(`PartReceipt JSON refused: ${result.failure}.`), { failure: result.failure });
+    return bytes;
+}
+function orderPartReceipt(value) {
+    const out = {};
+    out["partNumber"] = value["partNumber"];
+    out["size"] = value["size"];
+    out["sha256"] = value["sha256"];
+    out["etag"] = value["etag"];
+    return out;
+}
 function check0(value) {
     if (typeof value !== 'object' || value === null || Array.isArray(value))
         return false;
@@ -66,6 +98,163 @@ function check4(value) {
         return false;
     return true;
 }
+/** Strict UTF-8 JSON: no BOM, comments, trailing commas or duplicate properties; depth <= 32; integer lexemes only. */
+function strictJson(input, maxBytes) {
+    let text;
+    if (typeof input === "string") {
+        if (!validText(input))
+            return { ok: false, failure: "malformed" };
+        if (new TextEncoder().encode(input).byteLength > maxBytes)
+            return { ok: false, failure: "tooLarge" };
+        text = input;
+    }
+    else {
+        if (input.byteLength > maxBytes)
+            return { ok: false, failure: "tooLarge" };
+        try {
+            text = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(input);
+        }
+        catch {
+            return { ok: false, failure: "malformed" };
+        }
+    }
+    try {
+        return { ok: true, value: new StrictJsonReader(text).document() };
+    }
+    catch {
+        return { ok: false, failure: "malformed" };
+    }
+}
+class StrictJsonReader {
+    text;
+    index = 0;
+    constructor(text) {
+        this.text = text;
+    }
+    document() {
+        this.space();
+        const value = this.value(0);
+        this.space();
+        if (this.index !== this.text.length)
+            throw new SyntaxError("Trailing JSON content");
+        return value;
+    }
+    value(depth) {
+        switch (this.text[this.index]) {
+            case "{": return this.object(depth + 1);
+            case "[": return this.array(depth + 1);
+            case '"': return this.string();
+            case "t": return this.literal("true", true);
+            case "f": return this.literal("false", false);
+            case "n": return this.literal("null", null);
+            default: return this.number();
+        }
+    }
+    object(depth) {
+        if (depth > 32)
+            throw new SyntaxError("JSON depth exceeded");
+        this.index++;
+        const out = {};
+        const keys = new Set();
+        this.space();
+        if (this.text[this.index] === "}") {
+            this.index++;
+            return out;
+        }
+        for (;;) {
+            this.space();
+            if (this.text[this.index] !== '"')
+                throw new SyntaxError("Expected property name");
+            const key = this.string();
+            if (keys.has(key))
+                throw new SyntaxError("Duplicate JSON property");
+            keys.add(key);
+            this.space();
+            if (this.text[this.index++] !== ":")
+                throw new SyntaxError("Expected colon");
+            this.space();
+            // defineProperty keeps names such as __proto__ as ordinary own properties.
+            Object.defineProperty(out, key, { value: this.value(depth), enumerable: true, writable: true, configurable: true });
+            this.space();
+            const next = this.text[this.index++];
+            if (next === "}")
+                return out;
+            if (next !== ",")
+                throw new SyntaxError("Expected comma");
+        }
+    }
+    array(depth) {
+        if (depth > 32)
+            throw new SyntaxError("JSON depth exceeded");
+        this.index++;
+        const out = [];
+        this.space();
+        if (this.text[this.index] === "]") {
+            this.index++;
+            return out;
+        }
+        for (;;) {
+            this.space();
+            out.push(this.value(depth));
+            this.space();
+            const next = this.text[this.index++];
+            if (next === "]")
+                return out;
+            if (next !== ",")
+                throw new SyntaxError("Expected comma");
+        }
+    }
+    string() {
+        this.index++;
+        let out = "";
+        for (;;) {
+            const c = this.text[this.index++];
+            if (c === undefined)
+                throw new SyntaxError("Unterminated string");
+            if (c === '"')
+                break;
+            if (c < " ")
+                throw new SyntaxError("Unescaped control character");
+            if (c !== "\\") {
+                out += c;
+                continue;
+            }
+            const e = this.text[this.index++];
+            const simple = { '"': '"', "\\": "\\", "/": "/", b: "\b", f: "\f", n: "\n", r: "\r", t: "\t" };
+            if (e !== undefined && e in simple) {
+                out += simple[e];
+                continue;
+            }
+            if (e !== "u" || !/^[0-9a-fA-F]{4}$/.test(this.text.slice(this.index, this.index + 4)))
+                throw new SyntaxError("Invalid escape");
+            out += String.fromCharCode(parseInt(this.text.slice(this.index, this.index + 4), 16));
+            this.index += 4;
+        }
+        if (!validText(out))
+            throw new SyntaxError("Lone surrogate escape");
+        return out;
+    }
+    number() {
+        const match = /-?(?:0|[1-9][0-9]*)(\.[0-9]+)?([eE][+-]?[0-9]+)?/y;
+        match.lastIndex = this.index;
+        const found = match.exec(this.text);
+        if (found === null)
+            throw new SyntaxError("Invalid JSON value");
+        this.index = match.lastIndex;
+        // Selected schemas have no fractional numbers; fraction/exponent lexemes never satisfy an integer.
+        return found[1] !== undefined || found[2] !== undefined ? Number.NaN : Number(found[0]);
+    }
+    literal(word, value) {
+        if (this.text.slice(this.index, this.index + word.length) !== word)
+            throw new SyntaxError("Invalid JSON literal");
+        this.index += word.length;
+        return value;
+    }
+    space() {
+        while (this.text[this.index] === " " || this.text[this.index] === "\t" || this.text[this.index] === "\n" || this.text[this.index] === "\r")
+            this.index++;
+    }
+}
 function validText(value) {
     for (const scalar of value) {
         const point = scalar.codePointAt(0);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcforges/api-client",
-  "version": "1.0.0-ci.89.1",
+  "version": "1.0.0-ci.92.1",
   "description": "ArcForges public gRPC-Web client entry point; initial Hello World example.",
   "type": "module",
   "license": "Apache-2.0",
@@ -33,7 +33,7 @@
     "source.json"
   ],
   "dependencies": {
-    "@arcforges/proto": "1.0.0-ci.89.1",
+    "@arcforges/proto": "1.0.0-ci.92.1",
     "@bufbuild/protobuf": "2.15.0",
     "@connectrpc/connect": "2.2.0",
     "@connectrpc/connect-web": "2.2.0"

package/sbom.cdx.json

@@ -5,10 +5,10 @@
   "metadata": {
     "component": {
       "type": "library",
-      "bom-ref": "pkg:npm/%40arcforges/api-client@1.0.0-ci.89.1",
+      "bom-ref": "pkg:npm/%40arcforges/api-client@1.0.0-ci.92.1",
       "name": "@arcforges/api-client",
-      "version": "1.0.0-ci.89.1",
-      "purl": "pkg:npm/%40arcforges/api-client@1.0.0-ci.89.1",
+      "version": "1.0.0-ci.92.1",
+      "purl": "pkg:npm/%40arcforges/api-client@1.0.0-ci.92.1",
       "licenses": [
         {
           "expression": "Apache-2.0"
@@ -19,10 +19,10 @@
   "components": [
     {
       "type": "library",
-      "bom-ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.89.1",
+      "bom-ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
       "name": "@arcforges/proto",
-      "version": "1.0.0-ci.89.1",
-      "purl": "pkg:npm/%40arcforges/proto@1.0.0-ci.89.1",
+      "version": "1.0.0-ci.92.1",
+      "purl": "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
       "licenses": [
         {
           "expression": "Apache-2.0"
@@ -72,7 +72,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.89.1",
+      "ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
       "dependsOn": [
         "pkg:npm/%40bufbuild/protobuf@2.15.0"
       ]
@@ -91,9 +91,9 @@
       ]
     },
     {
-      "ref": "pkg:npm/%40arcforges/api-client@1.0.0-ci.89.1",
+      "ref": "pkg:npm/%40arcforges/api-client@1.0.0-ci.92.1",
       "dependsOn": [
-        "pkg:npm/%40arcforges/proto@1.0.0-ci.89.1",
+        "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
         "pkg:npm/%40bufbuild/protobuf@2.15.0",
         "pkg:npm/%40connectrpc/connect@2.2.0",
         "pkg:npm/%40connectrpc/connect-web@2.2.0"

package/schemas/public/http/v1/inventory.schema.json

@@ -44,5 +44,6 @@
     }
   },
   "x-arcforges-rules": ["inventoryPaths", "inventoryBounds"],
+  "x-arcforges-max-bytes": 4194304,
   "x-arcforges-schema-version": "1"
 }

package/schemas/public/http/v1/schema.json

@@ -25,5 +25,6 @@
   },
   "required": ["partNumber", "size", "sha256", "etag"],
   "additionalProperties": false,
+  "x-arcforges-max-bytes": 65536,
   "x-arcforges-schema-version": "1"
 }

package/source.json

@@ -1,12 +1,12 @@
 {
   "repository": "https://github.com/ArcForges/Contracts",
-  "commit": "4b8134eaf8a4174922d6378da003ed390b85a94a",
+  "commit": "e6c4a77f3ba48d70de4bf524623985b29278c784",
   "dirty": false,
-  "version": "1.0.0-ci.89.1",
+  "version": "1.0.0-ci.92.1",
   "contractAccess": "public",
   "schemaSources": {
-    "public/http/v1/inventory.schema.json": "fb6929548278f6e16e61491001fecae4143882efbfe732950a1584e1e2f80a5d",
-    "public/http/v1/schema.json": "23587b33320fcbe4a917c2839552984eb40e716c4ce317a5c218f35bedf06751",
+    "public/http/v1/inventory.schema.json": "2d17acc663de43ff847e522ddb16f32b1e7ec356df7db7dcafe8342d3fb014ce",
+    "public/http/v1/schema.json": "8d4c1282c0f93452a0304e44c832179d4c6f65fa563ae53517aa324af87105ce",
     "public/proto/arcforges/events/v1/events.proto": "ea0ac740c06bbb5b81724b4a7e601110424cabc4940b07e579cf97d852880f43",
     "public/proto/arcforges/foundation/v1/foundation.proto": "ceda869bf2998ca4bc21c4b7504c365a4662e7f28183e6db81660592d5bcdb3f",
     "public/proto/arcforges/hello/v1/hello.proto": "92489f89d1898a3d3bbea56c72116416cd0152ae8866c98745739437020c67d9",