@owlmeans/entrypoint 0.1.18-rc.6 → 0.1.18-rc.7

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/entrypoint",
-  "version": "0.1.18-rc.6",
-  "generatedAt": "2026-08-18T14:48:00.550Z",
+  "version": "0.1.18-rc.7",
+  "generatedAt": "2026-08-24T21:14:00.139Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/entrypoint/SKILL.md

@@ -8,16 +8,16 @@ user-invocable: false
 # @owlmeans/entrypoint
 
 **Layer:** Core
-**Install:** `"@owlmeans/entrypoint": "^0.1.18-rc.6"` in `dependencies`
+**Install:** `"@owlmeans/entrypoint": "^0.1.18-rc.7"` in `dependencies`
 
 ## Key Exports
 
 | Export | Description |
 |--------|-------------|
-| `entrypoint(...builders)` | Compose an entrypoint declaration from builders |
-| `guard(alias, ...gates)` | Attach a security guard |
-| `gate(alias, scopes[])` | Define an auth gate (used inside a guard) |
-| `filter(...validators)` | Attach request validators |
+| `entrypoint(route, opts?)` | Declare an entrypoint on a route |
+| `guard(alias, opts?)` | Require a guard; returns options, so it wraps rather than takes them |
+| `gate(alias, params, opts?)` | Require a gate; passed as the `opts` of `guard(...)` |
+| `filter(filter, opts?)` | Attach request validators |
 | `body(Schema)` | AJV body validator |
 | `params(Schema)` | URL params validator |
 | `query(Schema)` | Query string validator |
@@ -25,6 +25,20 @@ user-invocable: false
 | `EntrypointOutcome` | Enum: Ok, Accepted, Created, Finished |
 | Constants | Built-in entrypoint aliases |
 
+`guard`, `gate` and `filter` are **options-object combinators, not variadic composers**. Each
+returns a `CommonEntrypointOptions` and takes the next one as its final argument, so they nest:
+
+```typescript
+entrypoint(
+  route(app.api.item.remove, '/:id', { parent: app.api.item, method: RouteMethod.DELETE }),
+  guard(DEFAULT_GUARD, gate(OIDC_GATE, ['item--delete@id']))
+)
+```
+
+Guards and gates are **inherited by child entrypoints** and enforced by the framework before a
+handler runs — a handler that re-checks them is duplicating an enforced rule, and is wrong even
+when it agrees.
+
 ## Subpath Exports
 
 - `./utils` — entrypoint construction helpers (`isEntrypoint`, `CreateEntrypointSignature`)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/entrypoint",
-  "version": "0.1.18-rc.6",
+  "version": "0.1.18-rc.7",
   "license": "MIT",
   "type": "module",
   "scripts": {