@arcforges/proto 1.0.0-ci.89.1 → 1.0.0-ci.92.1

package/NOTICE

@@ -1,7 +1,7 @@
 ArcForges Contracts
 Copyright 2026 ArcForges contributors
 
-@arcforges/proto 1.0.0-ci.89.1 (Apache-2.0)
+@arcforges/proto 1.0.0-ci.92.1 (Apache-2.0)
 
 Resolved runtime dependency inventory (dependencies retain their own licences):
 - @bufbuild/protobuf 2.15.0: (Apache-2.0 AND BSD-3-Clause) (pkg:npm/%40bufbuild/protobuf@2.15.0)
@@ -12,8 +12,8 @@ ArcForges source provenance notices
 
 Generated from reviewed active records. Original licence files and dependency notices remain authoritative.
 
-contract-bindings-r4
-Source: https://github.com/ArcForges/Contracts @ af7b6cca5e14a51735512d283b03d3ae9d96d170
+contract-bindings-r5
+Source: https://github.com/ArcForges/Contracts @ b6795dc55852e16bcd555751a58bd494958e3917
 Material licence: Apache-2.0
 Notice scope: packages
 Copyright 2026 ArcForges contributors.

package/README.md

@@ -10,6 +10,13 @@ Use `create(SayHelloRequestSchema, { name: "World" })`, `toBinary` and
 `fromBinary` from `@bufbuild/protobuf`. Use the exported `HelloService`
 descriptor with a compatible gRPC/gRPC-Web client transport.
 
+`decodeContract(schema, bytes, limit)` and `encodeContract` apply the registry size
+classes in `wireLimits` (4 MiB unary/helper, 256 KiB inline page, 32 KiB stream frame,
+64 MiB large projection) and the root-plus-100 nesting bound, retaining unknown fields.
+Refusals are `ContractSerializationError` values with `tooLarge`, `tooDeep` or
+`malformed`. `contractServices` lists the generated services; nothing is discovered
+at runtime.
+
 Use `parseId` and `idToWire` to preserve an explicit identifier domain, bigint for
 exact 64-bit values, and `notesDecimal`/`decimalParts` for Notes decimal boundaries.
 The generated `is<Type>` functions check the current supported mutation profile.

package/build-identity.json

@@ -3,17 +3,17 @@
   "owner": "Contracts",
   "artifact": {
     "id": "@arcforges/proto",
-    "version": "1.0.0-ci.89.1"
+    "version": "1.0.0-ci.92.1"
   },
   "build": {
-    "sourceCommit": "4b8134eaf8a4174922d6378da003ed390b85a94a",
+    "sourceCommit": "e6c4a77f3ba48d70de4bf524623985b29278c784",
     "dirty": false,
     "kind": "ci",
-    "buildId": "35730204418.1",
-    "runId": "35730204418",
+    "buildId": "35797272606.1",
+    "runId": "35797272606",
     "runAttempt": 1,
-    "pipelineRun": "https://github.com/ArcForges/Contracts/actions/runs/35730204418",
-    "sourceDateEpoch": 1790081756
+    "pipelineRun": "https://github.com/ArcForges/Contracts/actions/runs/35797272606",
+    "sourceDateEpoch": 1790119475
   },
   "axes": {
     "AppVersion": {

package/dist/index.d.ts

@@ -4,3 +4,5 @@ export * from "./gen/arcforges/hello/v1/hello_pb.js";
 export * from "./gen/arcforges/publicapi/v1/content_pb.js";
 export * from "./shapes/gen/proto.js";
 export * from "./values.js";
+export * from "./wire.js";
+export * from "./services/gen/catalog.js";

package/dist/index.js

@@ -6,3 +6,5 @@ export * from "./gen/arcforges/hello/v1/hello_pb.js";
 export * from "./gen/arcforges/publicapi/v1/content_pb.js";
 export * from "./shapes/gen/proto.js";
 export * from "./values.js";
+export * from "./wire.js";
+export * from "./services/gen/catalog.js";

package/dist/services/gen/catalog.d.ts

@@ -0,0 +1,8 @@
+/** Generated services owned by this package, in schema order; nothing is discovered at runtime. */
+export declare const contractServices: readonly [import("@bufbuild/protobuf/codegenv2").GenService<{
+    sayHello: {
+        methodKind: "unary";
+        input: typeof import("../../gen/arcforges/hello/v1/hello_pb.js").SayHelloRequestSchema;
+        output: typeof import("../../gen/arcforges/hello/v1/hello_pb.js").SayHelloResponseSchema;
+    };
+}>];

package/dist/services/gen/catalog.js

@@ -0,0 +1,6 @@
+// SPDX-License-Identifier: Apache-2.0
+// <auto-generated />
+// Generated by eng/contracts.py; do not edit.
+import { HelloService } from "../../gen/arcforges/hello/v1/hello_pb.js";
+/** Generated services owned by this package, in schema order; nothing is discovered at runtime. */
+export const contractServices = Object.freeze([HelloService]);

package/dist/wire.d.ts

@@ -0,0 +1,34 @@
+import type { DescMessage, MessageShape } from "@bufbuild/protobuf";
+/** The registry's fixed decode and encode bounds. */
+export declare const wireLimits: Readonly<{
+    readonly unaryMessage: number;
+    readonly helperMessage: number;
+    readonly inlinePage: number;
+    readonly streamFrame: number;
+    readonly largeProjection: number;
+    /** Message levels permitted below the root message. */
+    readonly nestedMessageLevels: 100;
+}>;
+/** Selected transport size classes from the wire registry. */
+export type WireLimit = Exclude<keyof typeof wireLimits, "nestedMessageLevels">;
+/** Why a bounded contract encode or decode was refused. */
+export type ContractSerializationFailure = "tooLarge" | "tooDeep" | "malformed" | "invalid";
+/** A typed refusal from a bounded contract codec; the message never carries payload content. */
+export declare class ContractSerializationError extends Error {
+    readonly failure: ContractSerializationFailure;
+    constructor(failure: ContractSerializationFailure, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * protobuf-es read options matching the C# decoder: unknown fields are retained
+ * and the root plus 100 nested message levels are admitted (protobuf-es counts the root).
+ */
+export declare const contractBinaryReadOptions: Readonly<{
+    readUnknownFields: true;
+    recursionLimit: number;
+}>;
+/** Decodes one complete message or throws a typed refusal. */
+export declare function decodeContract<Desc extends DescMessage>(schema: Desc, bytes: Uint8Array, limit: WireLimit): MessageShape<Desc>;
+/** Encodes a message only when its serialized size fits the selected class. */
+export declare function encodeContract<Desc extends DescMessage>(schema: Desc, message: MessageShape<Desc>, limit: WireLimit): Uint8Array;

package/dist/wire.js

@@ -0,0 +1,49 @@
+// SPDX-License-Identifier: Apache-2.0
+import { fromBinary, toBinary } from "@bufbuild/protobuf";
+/** The registry's fixed decode and encode bounds. */
+export const wireLimits = Object.freeze({
+    unaryMessage: 4 * 1024 * 1024,
+    helperMessage: 4 * 1024 * 1024,
+    inlinePage: 256 * 1024,
+    streamFrame: 32 * 1024,
+    largeProjection: 64 * 1024 * 1024,
+    /** Message levels permitted below the root message. */
+    nestedMessageLevels: 100,
+});
+/** A typed refusal from a bounded contract codec; the message never carries payload content. */
+export class ContractSerializationError extends Error {
+    failure;
+    constructor(failure, options) {
+        super(`Contract serialization refused: ${failure}.`, options);
+        this.name = "ContractSerializationError";
+        this.failure = failure;
+    }
+}
+/**
+ * protobuf-es read options matching the C# decoder: unknown fields are retained
+ * and the root plus 100 nested message levels are admitted (protobuf-es counts the root).
+ */
+export const contractBinaryReadOptions = Object.freeze({
+    readUnknownFields: true,
+    recursionLimit: wireLimits.nestedMessageLevels + 1,
+});
+/** Decodes one complete message or throws a typed refusal. */
+export function decodeContract(schema, bytes, limit) {
+    if (bytes.byteLength > wireLimits[limit])
+        throw new ContractSerializationError("tooLarge");
+    try {
+        return fromBinary(schema, bytes, contractBinaryReadOptions);
+    }
+    catch (error) {
+        // protobuf-es reports recursion exhaustion through its fixed depth message.
+        const deep = error instanceof Error && error.message.includes("maximum recursion depth");
+        throw new ContractSerializationError(deep ? "tooDeep" : "malformed", { cause: error });
+    }
+}
+/** Encodes a message only when its serialized size fits the selected class. */
+export function encodeContract(schema, message, limit) {
+    const bytes = toBinary(schema, message, { writeUnknownFields: true });
+    if (bytes.byteLength > wireLimits[limit])
+        throw new ContractSerializationError("tooLarge");
+    return bytes;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcforges/proto",
-  "version": "1.0.0-ci.89.1",
+  "version": "1.0.0-ci.92.1",
   "description": "ArcForges public foundation and domain protobuf messages, shape validation and exact value adapters.",
   "type": "module",
   "license": "Apache-2.0",

package/sbom.cdx.json

@@ -5,10 +5,10 @@
   "metadata": {
     "component": {
       "type": "library",
-      "bom-ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.89.1",
+      "bom-ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
       "name": "@arcforges/proto",
-      "version": "1.0.0-ci.89.1",
-      "purl": "pkg:npm/%40arcforges/proto@1.0.0-ci.89.1",
+      "version": "1.0.0-ci.92.1",
+      "purl": "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
       "licenses": [
         {
           "expression": "Apache-2.0"
@@ -36,7 +36,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.89.1",
+      "ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
       "dependsOn": [
         "pkg:npm/%40bufbuild/protobuf@2.15.0"
       ]

package/source.json

@@ -1,8 +1,8 @@
 {
   "repository": "https://github.com/ArcForges/Contracts",
-  "commit": "4b8134eaf8a4174922d6378da003ed390b85a94a",
+  "commit": "e6c4a77f3ba48d70de4bf524623985b29278c784",
   "dirty": false,
-  "version": "1.0.0-ci.89.1",
+  "version": "1.0.0-ci.92.1",
   "contractAccess": "public",
   "schemaSources": {
     "public/proto/arcforges/events/v1/events.proto": "ea0ac740c06bbb5b81724b4a7e601110424cabc4940b07e579cf97d852880f43",