@owlmeans/api 0.1.18-rc.46 → 0.1.18-rc.47

package/README.md

@@ -12,7 +12,7 @@ HTTP API client service for OwlMeans client contexts — carries entrypoint call
 ## Installation
 
 ```bash
-bun add @owlmeans/api@^0.1.18-rc.46
+bun add @owlmeans/api@^0.1.18-rc.47
 ```
 
 ## Usage
@@ -73,7 +73,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.48
+npx @owlmeans/agent-skills@^0.1.18-rc.49
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/api",
-  "version": "0.1.18-rc.46",
-  "generatedAt": "2026-10-05T08:32:19.139Z",
+  "version": "0.1.18-rc.47",
+  "generatedAt": "2026-10-05T21:03:06.419Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/api/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/api
 
 **Layer:** Core
-**Install:** `"@owlmeans/api": "^0.1.18-rc.46"` in `dependencies`
+**Install:** `"@owlmeans/api": "^0.1.18-rc.47"` in `dependencies`
 
 ## Key Exports
 
@@ -18,16 +18,17 @@ user-invocable: false
 | `appendApiClient(ctx, alias?)` | Register it and make it the context's default `webService` when none is set |
 | `ApiClient` | Service interface — a single `handler(req, reply)` |
 | `ApiError`, `ApiClientError`, `ServerCrashedError`, `ServerAuthError`, `ApiStatusError` | Typed transport errors; an `ApiClientError` carries the answered `status` and the server's `incidentId` |
-| `httpStatusOf`, `incidentIdOf`, `isAccessDenied`, `isIncidentBody`, `parseClientMarker`, `API_CLIENT_MARKER`, `API_STATUS_MARKER` | Read a failure's HTTP status, incident id and IAM denial marker (also the `./status` subpath) |
+| `apiStatusHelper` (`httpStatusOf`, `incidentIdOf`, `isAccessDenied`, `isIncidentBody`), `parseClientMarker`, `API_CLIENT_MARKER`, `API_STATUS_MARKER` | Read a failure's HTTP status, incident id and IAM denial marker (also the `./status` subpath) |
 | Constants | Status codes (`OK`, `CREATED`, `ACCEPTED`, `FINISHED`, `UNAUTHORIZED_ERROR`, `FORBIDDEN_ERROR`, `SERVER_ERROR`), `INCIDENT_ID_HEADER` (`X-Incident-ID`), `DEFAULT_ALIAS` (`web-client`) |
 
-Subpath `./status` — `httpStatusOf`, `incidentIdOf`, `isIncidentBody`, `parseClientMarker`, the
-markers and `INCIDENT_ID_HEADER`, importing only `@owlmeans/error`: a browser package reads a
-status without pulling axios in.
+Subpath `./status` — `apiStatusHelper` (`httpStatusOf`, `incidentIdOf`, `isAccessDenied`,
+`isIncidentBody`), `parseClientMarker`, the markers and `INCIDENT_ID_HEADER`, importing only
+`@owlmeans/error`: a browser package reads a status without pulling axios in.
 
-`isAccessDenied(error)` requires the server's `X-OwlMeans-Denial: access-denied` marker and a 403.
-Do not classify all 403 responses as IAM denials: entitlement and other refusals use that status
-too. The API client stamps the marker on its rejection even under production error exposure.
+`apiStatusHelper.isAccessDenied(error)` requires the server's `X-OwlMeans-Denial: access-denied`
+marker and a 403. Do not classify all 403 responses as IAM denials: entitlement and other refusals
+use that status too. The API client stamps the marker on its rejection even under production error
+exposure.
 
 ## How a call is carried
 
@@ -94,15 +95,15 @@ browser reads that header cross-origin only when the server exposes it, the body
 | Production — a bare incident UUID; also proxy HTML, framework JSON, anything else | `ServerCrashedError` `api:client:crashed:<id>` (500) · `ServerAuthError` `api:client:auth:<id>` (401) · `ApiClientError` `api:client:forbidden[:<id>]` (403) · `ApiStatusError` `api:client:status:<n>[:<id>]` (every other status) |
 
 An `@owlmeans/server-api` boundary in production exposure sends ONLY the incident id, so a typed
-refusal's class never reaches the browser — its status does. Read it with `httpStatusOf(e)`: the
-stamped `responseStatus`, else an `ApiClientError`'s parsed `status`, else a class's declared
-`httpStatus` (a 4xx; a 5xx only with `allowServerErrorStatus`, exactly what the server answers),
-else an `api:client:*` marker in the message or type; `null` when nothing states one. A consumer
-that acts on a refusal checks the class/marker AND the status (`consentRefusalOf(e) ||
-httpStatusOf(e) === 428`). Markers without an id stay as they were (`api:client:crashed:error`,
-`api:client:forbidden`). The status and id are rebuilt from the marker in `finalizeUnmarshal()`,
-so they survive a marshal. No class of this family declares a static `httpStatus`: a server that
-rethrows one still answers 500.
+refusal's class never reaches the browser — its status does. Read it with
+`apiStatusHelper.httpStatusOf(e)`: the stamped `responseStatus`, else an `ApiClientError`'s parsed
+`status`, else a class's declared `httpStatus` (a 4xx; a 5xx only with `allowServerErrorStatus`,
+exactly what the server answers), else an `api:client:*` marker in the message or type; `null` when
+nothing states one. A consumer that acts on a refusal checks the class/marker AND the status
+(`consentRefusalOf(e) || apiStatusHelper.httpStatusOf(e) === 428`). Markers without an id stay as
+they were (`api:client:crashed:error`, `api:client:forbidden`). The status and id are rebuilt from
+the marker in `finalizeUnmarshal()`, so they survive a marshal. No class of this family declares a
+static `httpStatus`: a server that rethrows one still answers 500.
 
 **A failure with no answer at all is a different family.** Suppressing status errors does not wrap
 the call: an expired `timeout` (`ECONNABORTED`), an aborted `signal` (`CanceledError` /
@@ -114,8 +115,9 @@ An `auth-token-refresh` response header is consumed here: when the context has a
 rotated token is handed to it, which is what keeps a long session alive without the caller doing
 anything.
 
-Building a URL without making the call is a different question — that is `entrypointUrl` from
-`@owlmeans/client-entrypoint/utils`, or `ep.url(req, { absolute })`.
+Building a URL without making the call is a different question — that is
+`apiCallOf(ref).entrypointUrl(req, opts)` from `@owlmeans/client-entrypoint/utils`, or
+`ep.url(req, { absolute })`.
 
 ## Usage
 
@@ -132,7 +134,7 @@ transport keeps it.
 ## Depends On
 
 - `@owlmeans/context` — service registration
-- `@owlmeans/entrypoint` — the entrypoint being addressed, `@owlmeans/client-route` — `extractParams`
+- `@owlmeans/entrypoint` — the entrypoint being addressed, `@owlmeans/client-route` — `clientRouteHelper.extractParams`
 - `@owlmeans/config` — `makeSecurityHelper`, `@owlmeans/client-config` — the config shape
 - `@owlmeans/auth-common` — the token-refresh header and the auth service it updates
 - `@owlmeans/error`, `@owlmeans/route`

package/build/index.d.ts

@@ -2,7 +2,7 @@ export * from './errors.js';
 export * from './consts.js';
 export * from './service.js';
 export type * from './types.js';
-export { httpStatusOf, incidentIdOf, isIncidentBody, parseClientMarker, API_CLIENT_MARKER, API_STATUS_MARKER, } from './status/index.js';
-export type { ClientMarker } from './status/index.js';
+export { httpStatusOf, apiStatusHelper, createApiStatusHelper, parseClientMarker, API_CLIENT_MARKER, API_STATUS_MARKER, } from './status/index.js';
+export type { ClientMarker, ApiStatusHelper } from './status/index.js';
 export type { ResponseStatusCarrier } from './status/types.js';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,mBAAmB,YAAY,CAAA;AAC/B,OAAO,EACL,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,GACpG,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,YAAY,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,mBAAmB,YAAY,CAAA;AAC/B,OAAO,EACL,YAAY,EAAE,eAAe,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,GAC9G,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACtE,YAAY,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA"}

package/build/index.js

@@ -1,5 +1,5 @@
 export * from './errors.js';
 export * from './consts.js';
 export * from './service.js';
-export { httpStatusOf, incidentIdOf, isIncidentBody, parseClientMarker, API_CLIENT_MARKER, API_STATUS_MARKER, } from './status/index.js';
+export { httpStatusOf, apiStatusHelper, createApiStatusHelper, parseClientMarker, API_CLIENT_MARKER, API_STATUS_MARKER, } from './status/index.js';
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAE5B,OAAO,EACL,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,GACpG,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAE5B,OAAO,EACL,YAAY,EAAE,eAAe,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,GAC9G,MAAM,mBAAmB,CAAA"}

package/build/service.js

@@ -1,11 +1,11 @@
 import { assertContext, createService } from '@owlmeans/context';
-import { extractParams } from '@owlmeans/client-route';
+import { clientRouteHelper } from '@owlmeans/client-route';
 import axios from 'axios';
 import { DEFAULT_ALIAS, UNAUTHORIZED_ERROR } from './consts.js';
-import { processResponse } from './utils/handler.js';
+import { responseUtils } from './utils/response.js';
 import { makeSecurityHelper } from '@owlmeans/config';
 import { AUTH_HEADER, DEF_AUTH_SRV, TOKEN_UPDATE } from '@owlmeans/auth-common';
-import { bodyHelper } from './utils/body.js';
+import { bodyUtils } from './utils/body.js';
 /** Whether a request carried an authentication header of its own. */
 const presented = (headers) => headers != null && Object.entries(headers).some(([key, value]) => key.toLowerCase() === AUTH_HEADER && value != null && value !== '');
 export const createApiService = (alias = DEFAULT_ALIAS) => {
@@ -19,7 +19,7 @@ export const createApiService = (alias = DEFAULT_ALIAS) => {
             const module = context.entrypoint(request.alias);
             const route = module.route.route;
             let path = module.path();
-            const params = extractParams(path);
+            const params = clientRouteHelper.extractParams(path);
             path = params.reduce((path, param) => {
                 if (request.params[param] == null) {
                     throw new SyntaxError(`No value for param ${param}`);
@@ -32,7 +32,7 @@ export const createApiService = (alias = DEFAULT_ALIAS) => {
             const url = helper.makeUrl(module.address(), path, { host: request.host, base: request.base, forceUnsecure: request.unsecure });
             // A scalar JSON body (a string, a number, a boolean) is serialized here, so the server parses
             // back the value the caller sent; objects and arrays are left to axios.
-            const body = bodyHelper.requestBodyOf(request.body, request.headers, route.method, module.filter?.body);
+            const body = bodyUtils.requestBodyOf(request.body, request.headers, route.method, module.filter?.body);
             const transformer = body.verbatim ? data => data : undefined;
             const requestHeaders = body.contentType != null
                 ? { ...request.headers, 'content-type': body.contentType }
@@ -74,7 +74,7 @@ export const createApiService = (alias = DEFAULT_ALIAS) => {
                  */
                 await context.service(DEF_AUTH_SRV).update(undefined);
             }
-            processResponse(response, reply);
+            responseUtils.processResponse(response, reply);
             return [reply.error ?? reply.value, reply.outcome];
         }
     }, service => async () => {

package/build/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAEtD,OAAO,KAAuB,MAAM,OAAO,CAAA;AAG3C,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAoB,MAAM,uBAAuB,CAAA;AAEjG,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5C,qEAAqE;AACrE,MAAM,SAAS,GAAG,CAAC,OAAiC,EAAW,EAAE,CAC/D,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7C,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,WAAW,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CACrF,CAAA;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,GAAW,aAAa,EAAa,EAAE;IAC3E,MAAM,QAAQ,GAAG,eAAe,KAAK,EAAE,CAAA;IACvC,MAAM,MAAM,GAAc,aAAa,CAAY,KAAK,EAAE;QACxD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC9B,OAAM;YACR,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAkB,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YACpE,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAmB,OAAO,CAAC,KAAK,CAAC,CAAA;YAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAA;YAChC,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;YACxB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;YAClC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAEnC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAY,CAAC,IAAI,IAAI,EAAE,CAAC;oBACzC,MAAM,IAAI,WAAW,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAA;gBACtD,CAAC;gBACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAY,CAAC,EAAE,CAAC,CAAA;YACrE,CAAC,EAAE,IAAI,CAAC,CAAA;YAER,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;YAE1C,4FAA4F;YAC5F,8FAA8F;YAC9F,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CACxB,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EACtB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,CAC5E,CAAA;YAED,8FAA8F;YAC9F,wEAAwE;YACxE,MAAM,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACvG,MAAM,WAAW,GAAwC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;YACjG,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI;gBAC7C,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE;gBAC1D,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;YAEnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;gBACnC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACzB,MAAM,EAAE,OAAO,CAAC,KAAK;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,cAAc;gBACvB,gBAAgB,EAAE,WAAW;gBAC7B,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;gBAC1B,4EAA4E;gBAC5E,uEAAuE;gBACvE,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,6EAA6E;gBAC7E,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAA;YAEF,8EAA8E;YAC9E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAuB,CAAA;YAChD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAc,YAAY,CAAC,CAAA;gBACvD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAW,CAAA;gBAClD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YACzE,CAAC;iBAAM,IACL,QAAQ,CAAC,MAAM,KAAK,kBAAkB;mBACnC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;mBAC1B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EACnC,CAAC;gBACD;;;;;;;;;;;mBAWG;gBACH,MAAM,OAAO,CAAC,OAAO,CAAc,YAAY,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACpE,CAAC;YAED,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAEhC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAQ,CAAA;QAC3D,CAAC;KACF,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;QACvB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAyC,GAAM,EAAE,KAAK,GAAW,aAAa,EAAK,EAAE;IAClH,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAEvC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAE5B,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,UAAU,GAAG,KAAK,CAAA;IAC5B,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE1D,OAAO,KAAuB,MAAM,OAAO,CAAA;AAG3C,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAoB,MAAM,uBAAuB,CAAA;AAEjG,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,qEAAqE;AACrE,MAAM,SAAS,GAAG,CAAC,OAAiC,EAAW,EAAE,CAC/D,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7C,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,WAAW,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CACrF,CAAA;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,GAAW,aAAa,EAAa,EAAE;IAC3E,MAAM,QAAQ,GAAG,eAAe,KAAK,EAAE,CAAA;IACvC,MAAM,MAAM,GAAc,aAAa,CAAY,KAAK,EAAE;QACxD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC9B,OAAM;YACR,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAkB,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YACpE,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAmB,OAAO,CAAC,KAAK,CAAC,CAAA;YAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAA;YAChC,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;YACxB,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;YACpD,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAEnC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAY,CAAC,IAAI,IAAI,EAAE,CAAC;oBACzC,MAAM,IAAI,WAAW,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAA;gBACtD,CAAC;gBACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAY,CAAC,EAAE,CAAC,CAAA;YACrE,CAAC,EAAE,IAAI,CAAC,CAAA;YAER,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;YAE1C,4FAA4F;YAC5F,8FAA8F;YAC9F,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CACxB,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EACtB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,CAC5E,CAAA;YAED,8FAA8F;YAC9F,wEAAwE;YACxE,MAAM,IAAI,GAAG,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACtG,MAAM,WAAW,GAAwC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;YACjG,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI;gBAC7C,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE;gBAC1D,CAAC,CAAC,OAAO,CAAC,OAAO,CAAA;YAEnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;gBACnC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACzB,MAAM,EAAE,OAAO,CAAC,KAAK;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,cAAc;gBACvB,gBAAgB,EAAE,WAAW;gBAC7B,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;gBAC1B,4EAA4E;gBAC5E,uEAAuE;gBACvE,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,6EAA6E;gBAC7E,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAA;YAEF,8EAA8E;YAC9E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAuB,CAAA;YAChD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAc,YAAY,CAAC,CAAA;gBACvD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAW,CAAA;gBAClD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YACzE,CAAC;iBAAM,IACL,QAAQ,CAAC,MAAM,KAAK,kBAAkB;mBACnC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;mBAC1B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EACnC,CAAC;gBACD;;;;;;;;;;;mBAWG;gBACH,MAAM,OAAO,CAAC,OAAO,CAAc,YAAY,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YACpE,CAAC;YAED,aAAa,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAE9C,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAQ,CAAA;QAC3D,CAAC;KACF,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;QACvB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAyC,GAAM,EAAE,KAAK,GAAW,aAAa,EAAK,EAAE;IAClH,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAEvC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAE5B,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,UAAU,GAAG,KAAK,CAAA;IAC5B,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/build/status/helper.d.ts

@@ -0,0 +1,4 @@
+import type { ApiStatusHelper } from './types.js';
+export declare const createApiStatusHelper: () => ApiStatusHelper;
+export declare const apiStatusHelper: ApiStatusHelper;
+//# sourceMappingURL=helper.d.ts.map

package/build/status/helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../../src/status/helper.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAuC,MAAM,YAAY,CAAA;AAEtF,eAAO,MAAM,qBAAqB,QAAO,eAqDxC,CAAA;AAED,eAAO,MAAM,eAAe,iBAA0B,CAAA"}

package/build/status/helper.js

@@ -0,0 +1,49 @@
+import { ResilientError } from '@owlmeans/error';
+import { ApiClientError } from '../errors.js';
+import { parseClientMarker } from './marker.js';
+import { ACCESS_DENIED_KIND } from '../consts.js';
+import { UUID } from './consts.local.js';
+export const createApiStatusHelper = () => {
+    const isAccessDenied = (error) => httpStatusOf(error) === 403
+        && typeof error === 'object' && error != null
+        && error.denialKind === ACCESS_DENIED_KIND;
+    const httpStatus = (value) => typeof value === 'number' && Number.isInteger(value) && value >= 100 && value <= 599 ? value : null;
+    /** The first `api:client:*` marker in an error's `message`, else in its `type`. */
+    const markerOf = (error) => {
+        const { message, type } = error;
+        return (typeof message === 'string' ? parseClientMarker(message) : null)
+            ?? (typeof type === 'string' ? parseClientMarker(type) : null);
+    };
+    const httpStatusOf = (error) => {
+        if (error == null || typeof error !== 'object') {
+            return null;
+        }
+        const stamped = httpStatus(error.responseStatus);
+        if (stamped != null) {
+            return stamped;
+        }
+        if (error instanceof ApiClientError && httpStatus(error.status) != null) {
+            return error.status;
+        }
+        const declaration = error.constructor;
+        const declared = httpStatus(declaration?.httpStatus);
+        if (declared != null && (declared < 500 || declaration?.allowServerErrorStatus === true)) {
+            return declared;
+        }
+        return markerOf(error)?.status ?? null;
+    };
+    const incidentIdOf = (error) => {
+        if (error == null || typeof error !== 'object') {
+            return null;
+        }
+        const own = error.incidentId;
+        if (typeof own === 'string' && own !== '') {
+            return own;
+        }
+        return markerOf(error)?.incidentId ?? null;
+    };
+    const isIncidentBody = (data) => typeof data === 'string' && !data.includes(ResilientError.separator) && UUID.test(data.trim());
+    return { isAccessDenied, httpStatusOf, incidentIdOf, isIncidentBody };
+};
+export const apiStatusHelper = createApiStatusHelper();
+//# sourceMappingURL=helper.js.map

package/build/status/helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helper.js","sourceRoot":"","sources":["../../src/status/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAGxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAoB,EAAE;IACzD,MAAM,cAAc,GAAG,CAAC,KAAc,EAAW,EAAE,CACjD,YAAY,CAAC,KAAK,CAAC,KAAK,GAAG;WACxB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,IAAI;WACzC,KAA+B,CAAC,UAAU,KAAK,kBAAkB,CAAA;IAEvE,MAAM,UAAU,GAAG,CAAC,KAAc,EAAiB,EAAE,CACnD,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IAErG,mFAAmF;IACnF,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAuB,EAAE;QACtD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAA8C,CAAA;QAExE,OAAO,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;eACnE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAClE,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,CAAC,KAAc,EAAiB,EAAE;QACrD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAE,KAA+B,CAAC,cAAc,CAAC,CAAA;QAC3E,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,IAAI,KAAK,YAAY,cAAc,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACxE,OAAO,KAAK,CAAC,MAAO,CAAA;QACtB,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAqF,CAAA;QAC/G,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;QACpD,IAAI,QAAQ,IAAI,IAAI,IAAI,CAAC,QAAQ,GAAG,GAAG,IAAI,WAAW,EAAE,sBAAsB,KAAK,IAAI,CAAC,EAAE,CAAC;YACzF,OAAO,QAAQ,CAAA;QACjB,CAAC;QAED,OAAO,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,IAAI,CAAA;IACxC,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,CAAC,KAAc,EAAiB,EAAE;QACrD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,GAAG,GAAI,KAAkC,CAAC,UAAU,CAAA;QAC1D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YAC1C,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,OAAO,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,IAAI,IAAI,CAAA;IAC5C,CAAC,CAAA;IAED,MAAM,cAAc,GAAG,CAAC,IAAa,EAAkB,EAAE,CACvD,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAEhG,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,CAAA;AACvE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,EAAE,CAAA"}

package/build/status/index.d.ts

@@ -2,27 +2,8 @@ export { INCIDENT_ID_HEADER } from '../consts.js';
 export { DENIAL_KIND_HEADER, ACCESS_DENIED_KIND } from '../consts.js';
 export { parseClientMarker } from './marker.js';
 export { API_CLIENT_MARKER, API_STATUS_MARKER } from './consts.js';
-export type { ClientMarker } from './types.js';
-/** True only for a server-labelled auth/IAM refusal, never an unrelated 403. */
-export declare const isAccessDenied: (error: unknown) => boolean;
-/**
- * The HTTP status an error answers to, or `null` when nothing states one.
- *
- * Read in order: the status the API client stamped on the error it rebuilt from a response
- * (`responseStatus`); the status an `ApiClientError` parsed from its marker; the `httpStatus` its
- * class declares — a 4xx always, a 5xx only with `allowServerErrorStatus`, exactly what an
- * `@owlmeans/server-api` boundary answers with; finally an `api:client:*` marker in the message or
- * the type of anything else. This is what lets a browser recognise a refusal from its status
- * alone when a production body carries nothing but an incident id.
- */
+export type { ClientMarker, ResponseStatusCarrier, ApiStatusHelper } from './types.js';
+export { apiStatusHelper, createApiStatusHelper } from './helper.js';
+/** @deprecated compat:factory-refactor — use `apiStatusHelper.httpStatusOf(…)` */
 export declare const httpStatusOf: (error: unknown) => number | null;
-/** The server's incident id carried by an error — its own field, else its marker — or `null`. */
-export declare const incidentIdOf: (error: unknown) => string | null;
-/**
- * Whether a response body is a production incident body — the bare incident UUID an
- * `@owlmeans/server-api` boundary sends instead of the marshaled error. A development body
- * carries the `ResilientError` separator and is never one.
- */
-export declare const isIncidentBody: (data: unknown) => data is string;
-export type { ResponseStatusCarrier } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/build/status/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/status/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAIrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAClE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,gFAAgF;AAChF,eAAO,MAAM,cAAc,UAAW,OAAO,KAAG,OAGuB,CAAA;AAavE;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,UAAW,OAAO,KAAG,MAAM,GAAG,IAkBtD,CAAA;AAED,iGAAiG;AACjG,eAAO,MAAM,YAAY,UAAW,OAAO,KAAG,MAAM,GAAG,IAUtD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,SAAU,OAAO,KAAG,IAAI,IAAI,MACyC,CAAA;AAEhG,YAAY,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/status/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAClE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACtF,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAEpE,kFAAkF;AAClF,eAAO,MAAM,YAAY,UAAW,OAAO,KAAG,MAAM,GAAG,IAA2C,CAAA"}

package/build/status/index.js

@@ -1,66 +1,9 @@
-import { ResilientError } from '@owlmeans/error';
-import { ApiClientError } from '../errors.js';
-import { parseClientMarker } from './marker.js';
+import { apiStatusHelper } from './helper.js';
 export { INCIDENT_ID_HEADER } from '../consts.js';
 export { DENIAL_KIND_HEADER, ACCESS_DENIED_KIND } from '../consts.js';
-import { ACCESS_DENIED_KIND } from '../consts.js';
-import { UUID } from './consts.local.js';
 export { parseClientMarker } from './marker.js';
 export { API_CLIENT_MARKER, API_STATUS_MARKER } from './consts.js';
-/** True only for a server-labelled auth/IAM refusal, never an unrelated 403. */
-export const isAccessDenied = (error) => httpStatusOf(error) === 403
-    && typeof error === 'object' && error != null
-    && error.denialKind === ACCESS_DENIED_KIND;
-const httpStatus = (value) => typeof value === 'number' && Number.isInteger(value) && value >= 100 && value <= 599 ? value : null;
-/** The first `api:client:*` marker in an error's `message`, else in its `type`. */
-const markerOf = (error) => {
-    const { message, type } = error;
-    return (typeof message === 'string' ? parseClientMarker(message) : null)
-        ?? (typeof type === 'string' ? parseClientMarker(type) : null);
-};
-/**
- * The HTTP status an error answers to, or `null` when nothing states one.
- *
- * Read in order: the status the API client stamped on the error it rebuilt from a response
- * (`responseStatus`); the status an `ApiClientError` parsed from its marker; the `httpStatus` its
- * class declares — a 4xx always, a 5xx only with `allowServerErrorStatus`, exactly what an
- * `@owlmeans/server-api` boundary answers with; finally an `api:client:*` marker in the message or
- * the type of anything else. This is what lets a browser recognise a refusal from its status
- * alone when a production body carries nothing but an incident id.
- */
-export const httpStatusOf = (error) => {
-    if (error == null || typeof error !== 'object') {
-        return null;
-    }
-    const stamped = httpStatus(error.responseStatus);
-    if (stamped != null) {
-        return stamped;
-    }
-    if (error instanceof ApiClientError && httpStatus(error.status) != null) {
-        return error.status;
-    }
-    const declaration = error.constructor;
-    const declared = httpStatus(declaration?.httpStatus);
-    if (declared != null && (declared < 500 || declaration?.allowServerErrorStatus === true)) {
-        return declared;
-    }
-    return markerOf(error)?.status ?? null;
-};
-/** The server's incident id carried by an error — its own field, else its marker — or `null`. */
-export const incidentIdOf = (error) => {
-    if (error == null || typeof error !== 'object') {
-        return null;
-    }
-    const own = error.incidentId;
-    if (typeof own === 'string' && own !== '') {
-        return own;
-    }
-    return markerOf(error)?.incidentId ?? null;
-};
-/**
- * Whether a response body is a production incident body — the bare incident UUID an
- * `@owlmeans/server-api` boundary sends instead of the marshaled error. A development body
- * carries the `ResilientError` separator and is never one.
- */
-export const isIncidentBody = (data) => typeof data === 'string' && !data.includes(ResilientError.separator) && UUID.test(data.trim());
+export { apiStatusHelper, createApiStatusHelper } from './helper.js';
+/** @deprecated compat:factory-refactor — use `apiStatusHelper.httpStatusOf(…)` */
+export const httpStatusOf = (error) => apiStatusHelper.httpStatusOf(error);
 //# sourceMappingURL=index.js.map

package/build/status/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/status/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAE/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAExC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAGlE,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAc,EAAW,EAAE,CACxD,YAAY,CAAC,KAAK,CAAC,KAAK,GAAG;OACxB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,IAAI;OACzC,KAA+B,CAAC,UAAU,KAAK,kBAAkB,CAAA;AAEvE,MAAM,UAAU,GAAG,CAAC,KAAc,EAAiB,EAAE,CACnD,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AAErG,mFAAmF;AACnF,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,EAAE;IACjC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAA8C,CAAA;IAExE,OAAO,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;WACnE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAClE,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAiB,EAAE;IAC5D,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAE,KAA+B,CAAC,cAAc,CAAC,CAAA;IAC3E,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,IAAI,KAAK,YAAY,cAAc,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC,MAAO,CAAA;IACtB,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAqF,CAAA;IAC/G,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;IACpD,IAAI,QAAQ,IAAI,IAAI,IAAI,CAAC,QAAQ,GAAG,GAAG,IAAI,WAAW,EAAE,sBAAsB,KAAK,IAAI,CAAC,EAAE,CAAC;QACzF,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,IAAI,CAAA;AACxC,CAAC,CAAA;AAED,iGAAiG;AACjG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAiB,EAAE;IAC5D,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,GAAG,GAAI,KAAkC,CAAC,UAAU,CAAA;IAC1D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QAC1C,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,IAAI,IAAI,CAAA;AAC5C,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAa,EAAkB,EAAE,CAC9D,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/status/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAElE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAEpE,kFAAkF;AAClF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAiB,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA"}

package/build/status/types.d.ts

@@ -8,4 +8,28 @@ export interface ClientMarker {
     status?: number;
     incidentId?: string;
 }
+/** Reads the HTTP status, the incident id and the denial kind a failed call carries. */
+export interface ApiStatusHelper {
+    /** True only for a server-labelled auth/IAM refusal, never an unrelated 403. */
+    isAccessDenied: (error: unknown) => boolean;
+    /**
+     * The HTTP status an error answers to, or `null` when nothing states one.
+     *
+     * Read in order: the status the API client stamped on the error it rebuilt from a response
+     * (`responseStatus`); the status an `ApiClientError` parsed from its marker; the `httpStatus` its
+     * class declares — a 4xx always, a 5xx only with `allowServerErrorStatus`, exactly what an
+     * `@owlmeans/server-api` boundary answers with; finally an `api:client:*` marker in the message or
+     * the type of anything else. This is what lets a browser recognise a refusal from its status
+     * alone when a production body carries nothing but an incident id.
+     */
+    httpStatusOf: (error: unknown) => number | null;
+    /** The server's incident id carried by an error — its own field, else its marker — or `null`. */
+    incidentIdOf: (error: unknown) => string | null;
+    /**
+     * Whether a response body is a production incident body — the bare incident UUID an
+     * `@owlmeans/server-api` boundary sends instead of the marshaled error. A development body
+     * carries the `ResilientError` separator and is never one.
+     */
+    isIncidentBody: (data: unknown) => data is string;
+}
 //# sourceMappingURL=types.d.ts.map

package/build/status/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/status/types.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,WAAW,qBAAqB;IACpC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,4CAA4C;AAC5C,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/status/types.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,WAAW,qBAAqB;IACpC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,4CAA4C;AAC5C,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,gFAAgF;IAChF,cAAc,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAA;IAC3C;;;;;;;;;OASG;IACH,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,CAAA;IAC/C,iGAAiG;IACjG,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,CAAA;IAC/C;;;;OAIG;IACH,cAAc,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,IAAI,MAAM,CAAA;CAClD"}

package/build/utils/body/types.d.ts

@@ -0,0 +1,36 @@
+import type { RouteMethod } from '@owlmeans/route';
+export interface RequestBody {
+    /** What axios is handed as `data`. */
+    data: unknown;
+    /** A `content-type` the request lacked and must carry. */
+    contentType?: string;
+    /** `data` is final text — axios must not transform it again. */
+    verbatim: boolean;
+}
+/** How a request's body travels: its content type and the text a scalar body becomes. */
+export interface BodyUtils {
+    /** The request's own `content-type`, whatever case its key is written in. */
+    contentTypeOf: (headers?: Record<string, unknown>) => string | undefined;
+    /** `application/json` or a `+json` suffix type, with or without parameters. */
+    isJsonContentType: (type?: string) => boolean;
+    /**
+     * The JSON text a scalar body travels as, so the server parses it back to the same value.
+     *
+     * A number or a boolean is `JSON.stringify`'d. A string is a value unless it is already JSON text:
+     * one that does not parse is quoted; one that parses is sent as it is (the caller serialized it
+     * itself) — except under a body schema of `type: 'string'`, where only a JSON string literal
+     * counts as serialized and `123`, `true` or `{…}` are the text the caller means.
+     */
+    jsonScalarBody: (body: string | number | boolean, schema?: object) => string;
+    /**
+     * What a request's body becomes on the wire.
+     *
+     * - A `x-www-form-urlencoded` request: the body through `qs`.
+     * - A string, number or boolean under a JSON `content-type` — the caller's, or `application/json`
+     *   supplied for a `POST` that names none — becomes JSON text ({@link BodyUtils.jsonScalarBody}).
+     * - Anything else — objects, arrays, a scalar under another content type — goes to axios as it is,
+     *   which serializes an object or an array as JSON.
+     */
+    requestBodyOf: (body: unknown, headers: Record<string, unknown> | undefined, method?: RouteMethod, schema?: object) => RequestBody;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/utils/body/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/utils/body/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAElD,MAAM,WAAW,WAAW;IAC1B,sCAAsC;IACtC,IAAI,EAAE,OAAO,CAAA;IACb,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gEAAgE;IAChE,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,yFAAyF;AACzF,MAAM,WAAW,SAAS;IACxB,6EAA6E;IAC7E,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,GAAG,SAAS,CAAA;IACxE,+EAA+E;IAC/E,iBAAiB,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAA;IAC7C;;;;;;;OAOG;IACH,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,CAAA;IAC5E;;;;;;;;OAQG;IACH,aAAa,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,WAAW,CAAA;CACnI"}

package/build/utils/{types.js.map → body/types.js.map}

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/utils/types.ts"],"names":[],"mappings":""}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/utils/body/types.ts"],"names":[],"mappings":""}

package/build/utils/body.d.ts

@@ -1,39 +1,4 @@
-import { RouteMethod } from '@owlmeans/route';
-import type { RequestBody } from './types.js';
-/** The request's own `content-type`, whatever case its key is written in. */
-declare const contentTypeOf: (headers?: Record<string, unknown>) => string | undefined;
-/** `application/json` or a `+json` suffix type, with or without parameters. */
-declare const isJsonContentType: (type?: string) => boolean;
-/**
- * The JSON text a scalar body travels as, so the server parses it back to the same value.
- *
- * A number or a boolean is `JSON.stringify`'d. A string is a value unless it is already JSON text:
- * one that does not parse is quoted; one that parses is sent as it is (the caller serialized it
- * itself) — except under a body schema of `type: 'string'`, where only a JSON string literal
- * counts as serialized and `123`, `true` or `{…}` are the text the caller means.
- */
-declare const jsonScalarBody: (body: string | number | boolean, schema?: object) => string;
-/**
- * What a request's body becomes on the wire.
- *
- * - A `x-www-form-urlencoded` request: the body through `qs`.
- * - A string, number or boolean under a JSON `content-type` — the caller's, or `application/json`
- *   supplied for a `POST` that names none — becomes JSON text ({@link jsonScalarBody}).
- * - Anything else — objects, arrays, a scalar under another content type — goes to axios as it is,
- *   which serializes an object or an array as JSON.
- */
-declare const requestBodyOf: (body: unknown, headers: Record<string, unknown> | undefined, method?: RouteMethod, schema?: object) => RequestBody;
-export declare const createBodyHelper: () => {
-    contentTypeOf: typeof contentTypeOf;
-    isJsonContentType: typeof isJsonContentType;
-    jsonScalarBody: typeof jsonScalarBody;
-    requestBodyOf: typeof requestBodyOf;
-};
-export declare const bodyHelper: {
-    contentTypeOf: typeof contentTypeOf;
-    isJsonContentType: typeof isJsonContentType;
-    jsonScalarBody: typeof jsonScalarBody;
-    requestBodyOf: typeof requestBodyOf;
-};
-export {};
+import type { BodyUtils } from './body/types.js';
+export declare const createBodyUtils: () => BodyUtils;
+export declare const bodyUtils: BodyUtils;
 //# sourceMappingURL=body.d.ts.map

package/build/utils/body.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../src/utils/body.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAG7C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,6EAA6E;AAC7E,QAAA,MAAM,aAAa,aAAc,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,GAAG,SAMnE,CAAA;AAED,+EAA+E;AAC/E,QAAA,MAAM,iBAAiB,UAAW,MAAM,KAAG,OACsC,CAAA;AAoBjF;;;;;;;GAOG;AACH,QAAA,MAAM,cAAc,SAAU,MAAM,GAAG,MAAM,GAAG,OAAO,WAAW,MAAM,KAAG,MAQ1E,CAAA;AAED;;;;;;;;GAQG;AACH,QAAA,MAAM,aAAa,SACX,OAAO,WAAW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,WAAW,WAAW,WAAW,MAAM,KACjG,WAgBF,CAAA;AAED,eAAO,MAAM,gBAAgB;;;;;CAA8E,CAAA;AAE3G,eAAO,MAAM,UAAU;;;;;CAAqB,CAAA"}
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../src/utils/body.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,iBAAiB,CAAA;AAE7D,eAAO,MAAM,eAAe,QAAO,SA6DlC,CAAA;AAED,eAAO,MAAM,SAAS,WAAoB,CAAA"}