@techspokes/typescript-wsdl-client 1.1.4 → 1.1.5

package/docs/releases/v1.1.5.md

@@ -0,0 +1,38 @@
+# TypeScript WSDL Client v1.1.5
+
+## Checked direct-client execution with explicit host control
+
+This patch adds an opt-in, versioned package-root binding for independently installed checked direct clients. It also advances native WSDL/XSD qualification and research diagnostics while retaining the existing generated-client and gateway defaults.
+
+## What This Improves
+
+Generated checked direct clients can import `checkedDirectRuntimeV1` from the installed package root and execute supported document/literal SOAP 1.1 requests against explicitly authorized owned IPv4-loopback services. Native schema, scalar and payload validation, source identity, and compatibility checks remain in force. Typed response values and declared SOAP faults are independently exercised through installed-client tests.
+
+Normal generated calls no longer inherit profiling work quotas, payload caps or default deadlines. Applications may deliberately select capacity limits, cancellation, deadlines and size controls according to their own operational requirements.
+
+The checked path is deliberately narrow. It does not enable arbitrary production SOAP endpoints, remote source loading, TLS/authentication/WS-Security, general XSD support or public admission of unqualified operations. The broader content-model research and mathematical decision procedures remain separate from production support claims.
+
+## Highlights
+
+- Export the versioned `checkedDirectRuntimeV1` binding from the package root for installed checked direct clients.
+- Preserve source-authorized native-plan and schema checks when constructing and invoking supported generated clients.
+- Exercise ordered scalar requests, responses and declared SOAP faults through an owned local SOAP 1.1 adapter.
+- Remove inherited profiling quotas and default execution ceilings from ordinary calls while keeping explicit caller-selected controls.
+- Improve direct-schema correspondence, original-source reconstruction, diagnostic evidence and reference conformance without changing legacy defaults.
+- Refresh the compatible dependency and generated-app pins, including security fixes for the transitive URI parser and HTTP client.
+
+## Upgrade Notes
+
+Update the package to `1.1.5` and regenerate checked clients when using the new binding. Existing client and gateway defaults remain unchanged. Do not direct the restricted checked runtime to production or third-party SOAP endpoints; unsupported grammar, source, scalar, binding and endpoint cases continue to refuse execution.
+
+## Validation
+
+- Full CI, native semantic reference, strict TypeScript, conformance and generated-consumer tests passed on the release candidate.
+- Installed package checks exercised typed local SOAP calls and refusal boundaries.
+- The production dependency audit reported no known vulnerabilities on the candidate lockfile.
+- Linux and Windows Node 24 and Node 26 checks are required on the final release pull request and merged main.
+- Release preflight validates package contents, documentation, agent skill artifacts and the candidate tag before release.
+
+## Notes
+
+Release tag: `v1.1.5`.

package/docs/roadmap/README.md

@@ -2,11 +2,11 @@
 
 Completed plan for moving `@techspokes/typescript-wsdl-client` from the `0.x` line to the stable `1.0.0` release.
 
-See the root [README.md](../../README.md) for project overview and the root [ROADMAP.md](../../ROADMAP.md) for the public roadmap summary.
+See the root [README.md](../../README.md) for project overview and the [current roadmap](../../ROADMAP.md#active-backlog) for the active backlog and delivery milestones. This document is the historical 1.0 plan; its original version-specific gates are preserved below.
 
 ## Purpose
 
-This plan turns the 1.0 roadmap into implementation slices that can be picked up independently. Each slice has its own plan document with scope, testing strategy, acceptance gates, and release implications.
+This plan organized the 1.0 roadmap into implementation slices. Each slice retains its plan document with scope, testing strategy, acceptance gates, and release implications.
 
 The plan preserves the stable 1.0 contract. Choice union mode, JSON array streaming, `xs:anyAttribute` wildcard bags, stage-specific conformance, executable unsupported diagnostics, and repeatable release gates shipped before or with `1.0.0`.
 

package/docs/supported-patterns.md

@@ -6,9 +6,15 @@ This document lists the WSDL and XSD features handled by the generator, along wi
 
 The rows below are backed by committed conformance fixtures under `test/conformance/fixtures/`. Status means the current product contract, not the full standards surface.
 
+The [S06 research handoff](content-model-s06-research-handoff.md) records separate attribute, derivation, wildcard and calendar evidence.
+Candidate interpretations and test-only prototypes do not certify production assessment or change these public capability rows.
+
 <!-- support-matrix:start -->
 | Capability ID | Status | Public contract |
 |---|---|---|
+| `declared-derivation-boundaries` | research | Legacy compilation characterizes omitted groups, appended restriction content and named recursive references; faithful resolution/composition remain internal. |
+| `content-model-boundaries` | research | Characterization records current projection limits; it does not claim faithful content-model support. |
+| `content-model-invalid-all` | research | Legacy compiler acceptance is characterized separately from independent schema rejection. |
 | `sequence-occurrence-wrappers` | supported | Wrapping sequences with nonzero maxima propagate element bounds and optionality without crossing choice or all boundaries. |
 | `weather-document-literal-soap` | supported | The canonical weather WSDL compiles through client, OpenAPI, gateway, generated-test, and app artifacts with document-literal SOAP operations. |
 | `sequence-baseline-complex` | supported | Complex type sequences support nested complex references, repeated elements, optional fields, and all-optional request wrappers. |
@@ -37,11 +43,10 @@ Wrapping sequence bounds propagate through uninterrupted sequence ancestry to el
 
 Generated clients normalize present, non-null singleton responses into arrays for repeated element properties. Real SOAP transport regressions cover singleton and multiple items, omitted optional request fields, and gateway serialization with wrapper flattening enabled and disabled. Regenerate clients to receive this runtime correction; omitted optional response properties remain absent.
 
-- Complex types with `<xs:sequence>`, `<xs:all>`, and `<xs:choice>` compositors, including recursive nesting
+- Complex types with nested `<xs:sequence>`, `<xs:all>`, and `<xs:choice>` compositors, subject to the projection limits above
 - Simple content with attributes using the `$value` pattern to preserve text content alongside attribute properties
 - Named simple type restrictions and enumerations emitted as TypeScript aliases and OpenAPI scalar schemas
 - Named `xs:union` simple types emitted as TypeScript alias unions and OpenAPI `oneOf` schemas
-- Type inheritance through `<xs:extension>` and `<xs:restriction>` on both simple and complex content
 - Nested XSD imports across multiple schema files with relative and absolute URI resolution
 - Multiple namespaces with deterministic collision resolution via PascalCase uniqueness
 - `<xs:choice>` elements modeled as parallel optional alternatives by default
@@ -49,7 +54,6 @@ Generated clients normalize present, non-null singleton responses into arrays fo
 - Optional and nillable fields using `minOccurs`, `maxOccurs`, and `nillable` attributes
 - `ArrayOf*` wrapper types with automatic unwrapping in OpenAPI and runtime bridging in gateway code
 - WSDL/XSD documentation annotations propagated into TypeScript JSDoc comments and OpenAPI descriptions
-- Circular type references detected and broken with minimal stub types
 - Multiple WSDL ports and bindings; the first SOAP binding is selected, all ports are documented in service metadata
 - SOAP 1.1 and SOAP 1.2 binding detection
 - Streamable SOAP responses, opt-in per operation via `--stream-config` (ADR-002): client exposes `AsyncIterable<RecordType>`, gateway emits NDJSON or JSON array streams with backpressure, OpenAPI advertises the record schema via `x-wsdl-tsc-stream`
@@ -98,7 +102,11 @@ The compiler scans inline policies for UsernameToken, TransportBinding, and X509
 
 ### xs:group and xs:attributeGroup
 
-Groups are inlined into the parent type during schema compilation. The group identity is not preserved as a separate named type in the output, but all elements and attributes from the group appear correctly in the containing type.
+The `declared-derivation-boundaries` fixture characterizes the legacy default: its named group elements and attribute-group uses are omitted from the containing compiled type. General group support is therefore unqualified. Internal [reference resolution](content-model-resolution.md) preserves complete group definitions and separate use-site bounds; [companion reuse](content-model-companions.md) carries their required closures. These internal results do not establish public generation support.
+
+### Extension and restriction
+
+The same executable fixture distinguishes current legacy behavior: extension appends local properties, but restriction also appends them and empty restriction retains base content. A prohibited optional attribute remains in legacy metadata. Faithful restriction, attribute composition and immutable sibling behavior are covered by internal [derivation tests](content-model-composition.md), with full legality assessment assigned to #179. Public faithful derivation support remains unqualified.
 
 ### xs:list
 
@@ -127,7 +135,7 @@ Gateway generation measures the `$ref` graph depth for each operation response.
 
 ### Circular references
 
-Recursive type references are detected during compilation and broken with a minimal stub. The generated TypeScript types are correct for non-recursive paths, but deeply recursive structures may produce simplified types at the recursion boundary.
+The S05 characterization fixture preserves named self and mutual recursive references in legacy metadata. This does not establish complete graph resolution, forbidden-cycle diagnostics or faithful runtime handling. Internal S05 resolution and companion traversal retain complete immutable declarations and terminate on recursive values; those guarantees are not yet activated in public emitters.
 
 ### First binding selection
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@techspokes/typescript-wsdl-client",
-  "version": "1.1.4",
+  "version": "1.1.5",
   "description": "Turn legacy WSDL/SOAP services into typed TypeScript clients, OpenAPI 3.1 specs, and production-ready Fastify REST gateways. Built for enterprise SOAP modernization.",
   "keywords": [
     "wsdl",
@@ -72,6 +72,7 @@
     "test:unit": "vitest run test/unit",
     "test:snap": "vitest run test/snapshot",
     "test:integration": "vitest run test/integration",
+    "test:feasibility": "vitest run test/integration/content-model-soap-feasibility.test.ts test/integration/content-model-gateway-feasibility.test.ts",
     "test:github": "vitest run test/unit test/snapshot test/integration",
     "test:conformance": "vitest run test/conformance --reporter=verbose",
     "test:conformance:contracts": "vitest run --config vitest.conformance.config.ts test/conformance/stages/contracts.stage.ts --reporter=verbose",
@@ -100,31 +101,43 @@
     "package:smoke": "node scripts/smoke-npm-package.mjs",
     "release:preflight": "node scripts/release-preflight.mjs",
     "release:publish-check": "npm run clean && npm run build && npm run typecheck && npm run skill:validate && npm run package:validate",
-    "ci": "npm run clean && npm run build && npm run typecheck && npm run typecheck:integration && npm run skill:validate && npm run package:validate && npm run docs:validate && vitest run && npm run smoke:pipeline && npm run package:smoke",
-    "ci:github": "npm run clean && npm run build && npm run typecheck && npm run typecheck:integration && npm run skill:validate && npm run package:validate && npm run docs:validate && npm run test:github && npm run smoke:pipeline",
-    "ci:github:node26": "npm run clean && npm run build && npm run typecheck && npm run typecheck:integration && npm run test:unit && vitest run test/integration/client-imports.test.ts && npm run smoke:pipeline",
-    "examples:regenerate": "tsx src/cli.ts pipeline --wsdl-source examples/minimal/weather.wsdl --client-dir examples/generated-output/client --openapi-file examples/generated-output/openapi.json --gateway-dir examples/generated-output/gateway --gateway-service-name weather --gateway-version-prefix v1 --openapi-format json"
+    "ci": "npm run check:toolchain && npm run typecheck:tooling && npm run typecheck:research && npm run typecheck:reference && npm run clean && npm run build && npm run typecheck && npm run test:reference && npm run typecheck:integration && npm run skill:validate && npm run package:validate && npm run docs:validate && vitest run && npm run smoke:pipeline && npm run package:smoke",
+    "ci:github": "npm run check:toolchain && npm run typecheck:tooling && npm run typecheck:research && npm run typecheck:reference && npm run clean && npm run build && npm run typecheck && npm run test:reference && npm run typecheck:integration && npm run skill:validate && npm run package:validate && npm run docs:validate && npm run test:github && npm run smoke:pipeline",
+    "ci:github:node26": "npm run check:toolchain && npm run typecheck:tooling && npm run typecheck:research && npm run typecheck:reference && npm run clean && npm run build && npm run typecheck && npm run test:reference && npm run typecheck:integration && npm run test:unit && vitest run test/integration/client-imports.test.ts && npm run smoke:pipeline",
+    "examples:regenerate": "tsx src/cli.ts pipeline --wsdl-source examples/minimal/weather.wsdl --client-dir examples/generated-output/client --openapi-file examples/generated-output/openapi.json --gateway-dir examples/generated-output/gateway --gateway-service-name weather --gateway-version-prefix v1 --openapi-format json",
+    "reference:setup": "tsx scripts/semantic-reference.ts --setup",
+    "test:reference": "tsx scripts/semantic-reference.ts",
+    "test:reference:full": "tsx scripts/semantic-reference.ts --full",
+    "check:toolchain": "tsx scripts/check-toolchain.ts",
+    "typecheck:tooling": "tsc -p test/tooling/tsconfig.json",
+    "typecheck:research": "tsc -p test/research/s06-au01/tsconfig.json && tsc -p test/research/re01/tsconfig.json && tsc -p test/research/s06-pw01/tsconfig.json && tsc -p test/research/dt01/tsconfig.json",
+    "typecheck:reference": "tsc -p test/conformance/reference/tsconfig.json",
+    "test:research:ports": "vitest run test/research/s06-au01 test/research/re01 test/research/s06-pw01 test/research/dt01",
+    "research:re01:measure": "tsx test/research/re01/measure.ts",
+    "research:re01:compare": "tsx test/research/re01/cli.ts",
+    "assess:inventory": "tsx scripts/readiness-inventory.ts"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@types/js-yaml": "^4.0.9",
-    "@types/node": "^26.6.4",
+    "@types/node": "^26.6.6",
     "@types/yargs": "^17.0.35",
-    "eslint": "^10.12.0",
-    "fastify": "^5.12.5",
-    "fastify-plugin": "^6.0.0",
+    "eslint": "^10.14.0",
+    "fastify": "^5.12.7",
+    "fastify-plugin": "^6.0.1",
+    "libxml2-wasm": "^0.7.2",
     "rimraf": "^6.1.3",
     "tsx": "^4.23.15",
     "typescript": "^6.0.3",
-    "typescript-eslint": "^8.71.1",
-    "vitest": "^5.0.3"
+    "typescript-eslint": "^8.72.1",
+    "vitest": "^5.0.5"
   },
   "dependencies": {
     "@apidevtools/swagger-parser": "^13.1.0",
     "fast-xml-parser": "^5.11.2",
-    "js-yaml": "^5.4.3",
+    "js-yaml": "^5.5.0",
     "saxes": "^6.0.0",
-    "soap": "^1.13.3",
+    "soap": "^1.14.0",
     "yargs": "^18.2.0"
   },
   "funding": {

package/src/generation/preambles/direct-client/typescript.preamble

@@ -0,0 +1,3 @@
+/* eslint-disable */
+// Generated internally by @techspokes/typescript-wsdl-client.
+// Do not edit manually. Regenerate through the private native-plan generator.