@webpieces/cloudtasks-client 0.3.312 → 0.3.313

package/README.md

@@ -10,11 +10,17 @@ where it runs through the full server filter chain.
 @PubSub() @AuthOidc() @ApiPath('/email')
 abstract class EmailApi { @Endpoint('/send') sendEmail(r: SendEmailRequest): Promise<void> {…} }
 
+// build the client once (sync); 'email-svc' is the callee's Cloud Run service name
+const emailTasks = factory.createClient(EmailApi, new TaskClientConfig('email-svc'));
+
 // producer (inside a request → RequestContext active)
 await scheduler.addToQueue(() => emailTasks.sendEmail(req), { dedupName: req.id });
 ```
 
-- `createTaskClient(Api, TaskClientConfig)` / `TaskClientCreator` — the enqueue proxy
+- `ClientCloudTasksFactory.createClient(Api, TaskClientConfig)` — builds the enqueue proxy,
+  backed by `TaskProxyClient`. The delivery URL is resolved from the service name at enqueue
+  time via `getCloudRunUrl`, which honours a `CLOUD_RUN_URL_<UPPER_SNAKE_NAME>` env override
+  for local multi-service runs and integration tests
 - `CloudTaskScheduler` — `addToQueue` / `schedule` / `cancelJob`; carries scheduling
   options out-of-band so the contract signature stays identical on both sides
 - `TaskInvoker` (abstract token) with two impls:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webpieces/cloudtasks-client",
-  "version": "0.3.312",
+  "version": "0.3.313",
   "description": "Cloud Tasks enqueue client generated from a shared @PubSub API contract (twin of http-client)",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -23,9 +23,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@webpieces/core-context": "0.3.312",
-    "@webpieces/core-util": "0.3.312",
-    "@webpieces/gcp-identity": "0.3.312",
+    "@webpieces/core-context": "0.3.313",
+    "@webpieces/core-util": "0.3.313",
+    "@webpieces/gcp-identity": "0.3.313",
     "@google-cloud/tasks": "5.5.2",
     "inversify": "7.10.4",
     "reflect-metadata": "0.2.2"

package/src/ClientCloudTasksFactory.d.ts

@@ -0,0 +1,30 @@
+import { TaskInvoker } from './TaskTypes';
+import { ApiPrototype, TaskClientConfig } from './TaskClientConfig';
+/**
+ * ClientCloudTasksFactory - builds Cloud Tasks enqueue clients from a shared @PubSub API
+ * contract. The fire-and-forget twin of http-client's ClientHttpFactory.
+ *
+ * Calling a method on the returned client ENQUEUES a task (it does not call remotely);
+ * the task is later delivered to the same endpoint's controller through the full server
+ * filter chain. A service just asks for a typed client:
+ *
+ * ```typescript
+ * const emailTasks = factory.createClient(EmailApi, new TaskClientConfig('email-svc'));
+ * await scheduler.addToQueue(() => emailTasks.sendEmail(req), { dedupName });
+ * ```
+ *
+ * The factory holds the COLLABORATORS every client shares (the bound TaskInvoker, and a
+ * context-propagating ContextMgr); {@link TaskClientConfig} holds only that one client's
+ * STATE (which Cloud Run service the task is delivered to).
+ *
+ * Unlike http-client — which Angular bundles into a browser and which therefore must stay
+ * DI-agnostic — this package is node-only, so the factory IS the inversify entry point and
+ * the ContextMgr is a fixed field: RequestContextReader is the one and only right reader.
+ */
+export declare class ClientCloudTasksFactory {
+    private readonly invoker;
+    private readonly contextMgr;
+    constructor(invoker: TaskInvoker);
+    /** Typed enqueue client for a @PubSub contract, delivered to `config.gcpCloudRunSvcName`. */
+    createClient<T extends object>(apiClass: ApiPrototype<T>, config: TaskClientConfig): T;
+}

package/src/ClientCloudTasksFactory.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClientCloudTasksFactory = void 0;
+const tslib_1 = require("tslib");
+const inversify_1 = require("inversify");
+const core_context_1 = require("@webpieces/core-context");
+const TaskTypes_1 = require("./TaskTypes");
+const TaskProxyClient_1 = require("./TaskProxyClient");
+/**
+ * Properties DI frameworks / Promise checks / serializers probe on the proxy; return
+ * undefined instead of treating them as endpoints. Mirrors http-client's ClientHttpFactory.
+ */
+const FRAMEWORK_INSPECTION_PROPERTIES = new Set([
+    'constructor', 'prototype', '__proto__', 'name', 'then', 'catch', 'finally',
+    'toJSON', 'valueOf', 'toString', 'nodeType', 'tagName', '$$typeof',
+]);
+/**
+ * ClientCloudTasksFactory - builds Cloud Tasks enqueue clients from a shared @PubSub API
+ * contract. The fire-and-forget twin of http-client's ClientHttpFactory.
+ *
+ * Calling a method on the returned client ENQUEUES a task (it does not call remotely);
+ * the task is later delivered to the same endpoint's controller through the full server
+ * filter chain. A service just asks for a typed client:
+ *
+ * ```typescript
+ * const emailTasks = factory.createClient(EmailApi, new TaskClientConfig('email-svc'));
+ * await scheduler.addToQueue(() => emailTasks.sendEmail(req), { dedupName });
+ * ```
+ *
+ * The factory holds the COLLABORATORS every client shares (the bound TaskInvoker, and a
+ * context-propagating ContextMgr); {@link TaskClientConfig} holds only that one client's
+ * STATE (which Cloud Run service the task is delivered to).
+ *
+ * Unlike http-client — which Angular bundles into a browser and which therefore must stay
+ * DI-agnostic — this package is node-only, so the factory IS the inversify entry point and
+ * the ContextMgr is a fixed field: RequestContextReader is the one and only right reader.
+ */
+let ClientCloudTasksFactory = class ClientCloudTasksFactory {
+    invoker;
+    contextMgr = new core_context_1.ContextMgr(new core_context_1.RequestContextReader());
+    constructor(invoker) {
+        this.invoker = invoker;
+    }
+    /** Typed enqueue client for a @PubSub contract, delivered to `config.gcpCloudRunSvcName`. */
+    createClient(apiClass, config) {
+        // TaskProxyClient owns @PubSub validation + plan building from the contract's
+        // decorators. It is the @DocumentDesign design root for this package.
+        const proxyClient = new TaskProxyClient_1.TaskProxyClient(apiClass, config, this.invoker, this.contextMgr);
+        return new Proxy({}, {
+            // webpieces-disable no-any-unknown -- proxy get trap returns either an endpoint method or undefined
+            get(target, prop) {
+                if (typeof prop !== 'string' || FRAMEWORK_INSPECTION_PROPERTIES.has(prop)) {
+                    return undefined;
+                }
+                if (!proxyClient.hasEndpoint(prop)) {
+                    throw new Error(`No @PubSub endpoint '${prop}' on ${apiClass.name || 'Unknown'}. ` +
+                        `Check for typos or a missing @Endpoint() decorator.`);
+                }
+                // webpieces-disable no-any-unknown -- request DTO type is erased at the proxy layer
+                return (requestDto) => proxyClient.enqueue(prop, requestDto);
+            },
+        });
+    }
+};
+exports.ClientCloudTasksFactory = ClientCloudTasksFactory;
+exports.ClientCloudTasksFactory = ClientCloudTasksFactory = tslib_1.__decorate([
+    (0, core_context_1.provideFrameworkSingleton)(),
+    (0, inversify_1.injectable)(),
+    tslib_1.__param(0, (0, inversify_1.inject)(TaskTypes_1.TaskInvoker)),
+    tslib_1.__metadata("design:paramtypes", [TaskTypes_1.TaskInvoker])
+], ClientCloudTasksFactory);
+//# sourceMappingURL=ClientCloudTasksFactory.js.map

package/src/ClientCloudTasksFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientCloudTasksFactory.js","sourceRoot":"","sources":["../../../../../packages/cloud/cloudtasks-client/src/ClientCloudTasksFactory.ts"],"names":[],"mappings":";;;;AAAA,yCAA+C;AAC/C,0DAAsG;AACtG,2CAA0C;AAC1C,uDAAoD;AAGpD;;;GAGG;AACH,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAS;IACpD,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS;IAC3E,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU;CACrE,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AAGI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAIU;IAHzB,UAAU,GAAG,IAAI,yBAAU,CAAC,IAAI,mCAAoB,EAAE,CAAC,CAAC;IAEzE,YAC0C,OAAoB;QAApB,YAAO,GAAP,OAAO,CAAa;IAC3D,CAAC;IAEJ,6FAA6F;IAC7F,YAAY,CAAmB,QAAyB,EAAE,MAAwB;QAC9E,8EAA8E;QAC9E,sEAAsE;QACtE,MAAM,WAAW,GAAG,IAAI,iCAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAEzF,OAAO,IAAI,KAAK,CAAC,EAAO,EAAE;YACtB,oGAAoG;YACpG,GAAG,CAAC,MAAS,EAAE,IAAqB;gBAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,+BAA+B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxE,OAAO,SAAS,CAAC;gBACrB,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CACX,wBAAwB,IAAI,QAAQ,QAAQ,CAAC,IAAI,IAAI,SAAS,IAAI;wBAClE,qDAAqD,CACxD,CAAC;gBACN,CAAC;gBACD,oFAAoF;gBACpF,OAAO,CAAC,UAAmB,EAAiB,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACzF,CAAC;SACJ,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AA9BY,0DAAuB;kCAAvB,uBAAuB;IAFnC,IAAA,wCAAyB,GAAE;IAC3B,IAAA,sBAAU,GAAE;IAKJ,mBAAA,IAAA,kBAAM,EAAC,uBAAW,CAAC,CAAA;6CAA2B,uBAAW;GAJrD,uBAAuB,CA8BnC","sourcesContent":["import { inject, injectable } from 'inversify';\nimport { provideFrameworkSingleton, RequestContextReader, ContextMgr } from '@webpieces/core-context';\nimport { TaskInvoker } from './TaskTypes';\nimport { TaskProxyClient } from './TaskProxyClient';\nimport { ApiPrototype, TaskClientConfig } from './TaskClientConfig';\n\n/**\n * Properties DI frameworks / Promise checks / serializers probe on the proxy; return\n * undefined instead of treating them as endpoints. Mirrors http-client's ClientHttpFactory.\n */\nconst FRAMEWORK_INSPECTION_PROPERTIES = new Set<string>([\n    'constructor', 'prototype', '__proto__', 'name', 'then', 'catch', 'finally',\n    'toJSON', 'valueOf', 'toString', 'nodeType', 'tagName', '$$typeof',\n]);\n\n/**\n * ClientCloudTasksFactory - builds Cloud Tasks enqueue clients from a shared @PubSub API\n * contract. The fire-and-forget twin of http-client's ClientHttpFactory.\n *\n * Calling a method on the returned client ENQUEUES a task (it does not call remotely);\n * the task is later delivered to the same endpoint's controller through the full server\n * filter chain. A service just asks for a typed client:\n *\n * ```typescript\n * const emailTasks = factory.createClient(EmailApi, new TaskClientConfig('email-svc'));\n * await scheduler.addToQueue(() => emailTasks.sendEmail(req), { dedupName });\n * ```\n *\n * The factory holds the COLLABORATORS every client shares (the bound TaskInvoker, and a\n * context-propagating ContextMgr); {@link TaskClientConfig} holds only that one client's\n * STATE (which Cloud Run service the task is delivered to).\n *\n * Unlike http-client — which Angular bundles into a browser and which therefore must stay\n * DI-agnostic — this package is node-only, so the factory IS the inversify entry point and\n * the ContextMgr is a fixed field: RequestContextReader is the one and only right reader.\n */\n@provideFrameworkSingleton()\n@injectable()\nexport class ClientCloudTasksFactory {\n    private readonly contextMgr = new ContextMgr(new RequestContextReader());\n\n    constructor(\n        @inject(TaskInvoker) private readonly invoker: TaskInvoker,\n    ) {}\n\n    /** Typed enqueue client for a @PubSub contract, delivered to `config.gcpCloudRunSvcName`. */\n    createClient<T extends object>(apiClass: ApiPrototype<T>, config: TaskClientConfig): T {\n        // TaskProxyClient owns @PubSub validation + plan building from the contract's\n        // decorators. It is the @DocumentDesign design root for this package.\n        const proxyClient = new TaskProxyClient(apiClass, config, this.invoker, this.contextMgr);\n\n        return new Proxy({} as T, {\n            // webpieces-disable no-any-unknown -- proxy get trap returns either an endpoint method or undefined\n            get(target: T, prop: string | symbol): unknown {\n                if (typeof prop !== 'string' || FRAMEWORK_INSPECTION_PROPERTIES.has(prop)) {\n                    return undefined;\n                }\n                if (!proxyClient.hasEndpoint(prop)) {\n                    throw new Error(\n                        `No @PubSub endpoint '${prop}' on ${apiClass.name || 'Unknown'}. ` +\n                        `Check for typos or a missing @Endpoint() decorator.`,\n                    );\n                }\n                // webpieces-disable no-any-unknown -- request DTO type is erased at the proxy layer\n                return (requestDto: unknown): Promise<void> => proxyClient.enqueue(prop, requestDto);\n            },\n        });\n    }\n}\n"]}

package/src/TaskClientConfig.d.ts

@@ -0,0 +1,20 @@
+/** Constructor whose prototype is T (the abstract @PubSub API class). */
+export type ApiPrototype<T> = Function & {
+    prototype: T;
+};
+/**
+ * Per-client STATE for a Cloud Tasks enqueue client — nothing else.
+ *
+ * Only the callee's Cloud Run service name. The base URL is derived from it at enqueue
+ * time by `getCloudRunUrl`, which honours a `CLOUD_RUN_URL_<UPPER_SNAKE_NAME>` env
+ * override (local multi-service runs, integration tests) and falls back off-GCP to
+ * `http://<svc>.localhost.invalid`. So there is no separate "fixed URL" client shape.
+ *
+ * Collaborators (TaskInvoker, ContextMgr) are NOT config: they are dependencies of
+ * {@link ClientCloudTasksFactory} and shared by every client it builds.
+ */
+export declare class TaskClientConfig {
+    /** The callee's Cloud Run service name (e.g. 'email-svc'). */
+    gcpCloudRunSvcName: string;
+    constructor(gcpCloudRunSvcName: string);
+}

package/src/TaskClientConfig.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TaskClientConfig = void 0;
+/**
+ * Per-client STATE for a Cloud Tasks enqueue client — nothing else.
+ *
+ * Only the callee's Cloud Run service name. The base URL is derived from it at enqueue
+ * time by `getCloudRunUrl`, which honours a `CLOUD_RUN_URL_<UPPER_SNAKE_NAME>` env
+ * override (local multi-service runs, integration tests) and falls back off-GCP to
+ * `http://<svc>.localhost.invalid`. So there is no separate "fixed URL" client shape.
+ *
+ * Collaborators (TaskInvoker, ContextMgr) are NOT config: they are dependencies of
+ * {@link ClientCloudTasksFactory} and shared by every client it builds.
+ */
+class TaskClientConfig {
+    /** The callee's Cloud Run service name (e.g. 'email-svc'). */
+    gcpCloudRunSvcName;
+    constructor(gcpCloudRunSvcName) {
+        this.gcpCloudRunSvcName = gcpCloudRunSvcName;
+    }
+}
+exports.TaskClientConfig = TaskClientConfig;
+//# sourceMappingURL=TaskClientConfig.js.map

package/src/TaskClientConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TaskClientConfig.js","sourceRoot":"","sources":["../../../../../packages/cloud/cloudtasks-client/src/TaskClientConfig.ts"],"names":[],"mappings":";;;AAGA;;;;;;;;;;GAUG;AACH,MAAa,gBAAgB;IACzB,8DAA8D;IAC9D,kBAAkB,CAAS;IAE3B,YAAY,kBAA0B;QAClC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;IACjD,CAAC;CACJ;AAPD,4CAOC","sourcesContent":["/** Constructor whose prototype is T (the abstract @PubSub API class). */\nexport type ApiPrototype<T> = Function & { prototype: T };\n\n/**\n * Per-client STATE for a Cloud Tasks enqueue client — nothing else.\n *\n * Only the callee's Cloud Run service name. The base URL is derived from it at enqueue\n * time by `getCloudRunUrl`, which honours a `CLOUD_RUN_URL_<UPPER_SNAKE_NAME>` env\n * override (local multi-service runs, integration tests) and falls back off-GCP to\n * `http://<svc>.localhost.invalid`. So there is no separate \"fixed URL\" client shape.\n *\n * Collaborators (TaskInvoker, ContextMgr) are NOT config: they are dependencies of\n * {@link ClientCloudTasksFactory} and shared by every client it builds.\n */\nexport class TaskClientConfig {\n    /** The callee's Cloud Run service name (e.g. 'email-svc'). */\n    gcpCloudRunSvcName: string;\n\n    constructor(gcpCloudRunSvcName: string) {\n        this.gcpCloudRunSvcName = gcpCloudRunSvcName;\n    }\n}\n"]}

package/src/TaskProxyClient.d.ts

@@ -0,0 +1,37 @@
+import { ContextMgr } from '@webpieces/core-context';
+import { TaskInvoker } from './TaskTypes';
+import { ApiPrototype, TaskClientConfig } from './TaskClientConfig';
+/**
+ * TaskProxyClient - the enqueue engine behind one @PubSub API contract's client proxy.
+ *
+ * The fire-and-forget twin of http-client's ProxyClient, and the @DocumentDesign design
+ * root for this package: its constructor params ARE the enqueue client's dependency graph.
+ * Built by {@link ClientCloudTasksFactory} (one per API contract), it owns:
+ * - @ApiPath / @PubSub convention validation + the endpoint plans from the contract's decorators
+ * - Resolving the callee's Cloud Run base URL from the service name
+ * - Context propagation onto the task headers (MINUS the caller's auth headers)
+ * - Handing a fully-built TaskRequest to the bound {@link TaskInvoker}
+ *
+ * Calling an endpoint ENQUEUES a task (it does not call remotely); the task is later
+ * delivered to the same endpoint's controller through the full server filter chain.
+ */
+export declare class TaskProxyClient {
+    private config;
+    private invoker;
+    private contextMgr;
+    private plans;
+    private apiName;
+    constructor(apiClass: ApiPrototype<object>, config: TaskClientConfig, invoker: TaskInvoker, contextMgr: ContextMgr);
+    /** Check whether the contract declares a @PubSub endpoint with this method name. */
+    hasEndpoint(methodName: string): boolean;
+    /**
+     * Enqueue one task for the named endpoint. Must run inside a CloudTaskScheduler lambda
+     * (which supplies the ScheduleInfo) within an active RequestContext, e.g.:
+     *   scheduler.addToQueue(() => taskClient.foo(req), { dedupName });
+     */
+    enqueue(methodName: string, requestDto: unknown): Promise<void>;
+    /** Endpoint name -> its resolved path / queue / auth mode, read once from the decorators. */
+    private buildPlans;
+    /** Transferred context keys (txId/requestId/tenant…) MINUS the caller's auth credentials. */
+    private buildContextHeaders;
+}

package/src/TaskProxyClient.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TaskProxyClient = void 0;
+const tslib_1 = require("tslib");
+const core_util_1 = require("@webpieces/core-util");
+const core_context_1 = require("@webpieces/core-context");
+const gcp_identity_1 = require("@webpieces/gcp-identity");
+const TaskTypes_1 = require("./TaskTypes");
+const ScheduleContext_1 = require("./ScheduleContext");
+const TaskClientConfig_1 = require("./TaskClientConfig");
+const log = core_util_1.LogManager.getLogger('TaskProxyClient');
+/**
+ * Auth headers are NEVER propagated from the caller's context onto an enqueued task:
+ * the caller's inbound user JWT / secret must not leak to an internal service, and
+ * the invoker mints fresh delivery auth (OIDC / shared-secret) per the endpoint's mode.
+ */
+const AUTH_HEADER_NAMES = new Set(['authorization', 'x-webpieces-shared-secret']);
+/** Per-endpoint routing plan resolved once from the contract's decorators. */
+class EndpointPlan {
+    path;
+    queueName;
+    authMode;
+    constructor(path, queueName, authMode) {
+        this.path = path;
+        this.queueName = queueName;
+        this.authMode = authMode;
+    }
+}
+/**
+ * TaskProxyClient - the enqueue engine behind one @PubSub API contract's client proxy.
+ *
+ * The fire-and-forget twin of http-client's ProxyClient, and the @DocumentDesign design
+ * root for this package: its constructor params ARE the enqueue client's dependency graph.
+ * Built by {@link ClientCloudTasksFactory} (one per API contract), it owns:
+ * - @ApiPath / @PubSub convention validation + the endpoint plans from the contract's decorators
+ * - Resolving the callee's Cloud Run base URL from the service name
+ * - Context propagation onto the task headers (MINUS the caller's auth headers)
+ * - Handing a fully-built TaskRequest to the bound {@link TaskInvoker}
+ *
+ * Calling an endpoint ENQUEUES a task (it does not call remotely); the task is later
+ * delivered to the same endpoint's controller through the full server filter chain.
+ */
+let TaskProxyClient = class TaskProxyClient {
+    config;
+    invoker;
+    contextMgr;
+    plans;
+    apiName;
+    constructor(apiClass, config, invoker, contextMgr) {
+        this.config = config;
+        this.invoker = invoker;
+        this.contextMgr = contextMgr;
+        if (!(0, core_util_1.isApiPath)(apiClass)) {
+            throw new Error(`Class ${apiClass.name || 'Unknown'} must be decorated with @ApiPath()`);
+        }
+        (0, core_util_1.assertPubSubConventions)(apiClass);
+        (0, core_util_1.assertEveryEndpointHasAuthMode)(apiClass);
+        this.apiName = apiClass.name || 'UnknownApi';
+        this.plans = this.buildPlans(apiClass);
+    }
+    /** Check whether the contract declares a @PubSub endpoint with this method name. */
+    hasEndpoint(methodName) {
+        return this.plans.has(methodName);
+    }
+    /**
+     * Enqueue one task for the named endpoint. Must run inside a CloudTaskScheduler lambda
+     * (which supplies the ScheduleInfo) within an active RequestContext, e.g.:
+     *   scheduler.addToQueue(() => taskClient.foo(req), { dedupName });
+     */
+    // webpieces-disable no-any-unknown -- the request DTO's type is erased at the proxy boundary
+    async enqueue(methodName, requestDto) {
+        const plan = this.plans.get(methodName);
+        if (!plan) {
+            throw new Error(`No @PubSub endpoint '${methodName}' on ${this.apiName}`);
+        }
+        const frame = (0, ScheduleContext_1.currentScheduleFrame)();
+        if (!frame) {
+            throw new Error('Cloud task enqueue must run inside a CloudTaskScheduler lambda, e.g. ' +
+                'scheduler.addToQueue(() => taskClient.method(req), { dedupName }).');
+        }
+        // Resolved lazily (not at client construction) so building a client stays synchronous.
+        // Every metadata read beneath getCloudRunUrl is memoized process-wide, so only the
+        // first enqueue in the process pays a lookup.
+        const targetUrl = await (0, gcp_identity_1.getCloudRunUrl)(this.config.gcpCloudRunSvcName);
+        const request = new TaskTypes_1.TaskRequest(targetUrl, plan.path, plan.queueName, requestDto, this.buildContextHeaders(), plan.authMode, frame.info ?? new TaskTypes_1.ScheduleInfo());
+        log.debug(`enqueue task ${plan.queueName} -> ${targetUrl}${plan.path}`);
+        frame.jobRef = await this.invoker.enqueue(request);
+    }
+    /** Endpoint name -> its resolved path / queue / auth mode, read once from the decorators. */
+    buildPlans(apiClass) {
+        const basePath = (0, core_util_1.getApiPath)(apiClass) ?? '';
+        const endpoints = (0, core_util_1.getEndpoints)(apiClass) ?? {};
+        const plans = new Map();
+        for (const methodName of Object.keys(endpoints)) {
+            const authMode = (0, core_util_1.getAuthMode)(apiClass, methodName);
+            if (!authMode) {
+                throw new Error(`Endpoint '${methodName}' on ${this.apiName} has no auth mode`);
+            }
+            const plan = new EndpointPlan(basePath + endpoints[methodName], (0, core_util_1.getQueueName)(apiClass, methodName), authMode);
+            plans.set(methodName, plan);
+        }
+        return plans;
+    }
+    /** Transferred context keys (txId/requestId/tenant…) MINUS the caller's auth credentials. */
+    buildContextHeaders() {
+        const headers = new Map();
+        for (const entry of this.contextMgr.buildOutboundHeaders().entries()) {
+            if (!AUTH_HEADER_NAMES.has(entry[0].toLowerCase())) {
+                headers.set(entry[0], entry[1]);
+            }
+        }
+        return headers;
+    }
+};
+exports.TaskProxyClient = TaskProxyClient;
+exports.TaskProxyClient = TaskProxyClient = tslib_1.__decorate([
+    (0, core_util_1.DocumentDesign)(),
+    tslib_1.__metadata("design:paramtypes", [Object, TaskClientConfig_1.TaskClientConfig,
+        TaskTypes_1.TaskInvoker,
+        core_context_1.ContextMgr])
+], TaskProxyClient);
+//# sourceMappingURL=TaskProxyClient.js.map

package/src/TaskProxyClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TaskProxyClient.js","sourceRoot":"","sources":["../../../../../packages/cloud/cloudtasks-client/src/TaskProxyClient.ts"],"names":[],"mappings":";;;;AAAA,oDAW8B;AAC9B,0DAAqD;AACrD,0DAAyD;AACzD,2CAAqE;AACrE,uDAAyD;AACzD,yDAAoE;AAEpE,MAAM,GAAG,GAAG,sBAAU,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;AAEpD;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAE1F,8EAA8E;AAC9E,MAAM,YAAY;IACd,IAAI,CAAS;IACb,SAAS,CAAS;IAClB,QAAQ,CAAW;IAEnB,YAAY,IAAY,EAAE,SAAiB,EAAE,QAAkB;QAC3D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;CACJ;AAED;;;;;;;;;;;;;GAaG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAe;IAMZ;IACA;IACA;IAPJ,KAAK,CAA4B;IACjC,OAAO,CAAS;IAExB,YACI,QAA8B,EACtB,MAAwB,EACxB,OAAoB,EACpB,UAAsB;QAFtB,WAAM,GAAN,MAAM,CAAkB;QACxB,YAAO,GAAP,OAAO,CAAa;QACpB,eAAU,GAAV,UAAU,CAAY;QAE9B,IAAI,CAAC,IAAA,qBAAS,EAAC,QAAQ,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,CAAC,IAAI,IAAI,SAAS,oCAAoC,CAAC,CAAC;QAC7F,CAAC;QACD,IAAA,mCAAuB,EAAC,QAAQ,CAAC,CAAC;QAClC,IAAA,0CAA8B,EAAC,QAAQ,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,IAAI,YAAY,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,oFAAoF;IACpF,WAAW,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,6FAA6F;IAC7F,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,UAAmB;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,sCAAoB,GAAE,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACX,uEAAuE;gBACvE,oEAAoE,CACvE,CAAC;QACN,CAAC;QAED,uFAAuF;QACvF,mFAAmF;QACnF,8CAA8C;QAC9C,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAc,EAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAEvE,MAAM,OAAO,GAAG,IAAI,uBAAW,CAC3B,SAAS,EACT,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,EACd,UAAU,EACV,IAAI,CAAC,mBAAmB,EAAE,EAC1B,IAAI,CAAC,QAAQ,EACb,KAAK,CAAC,IAAI,IAAI,IAAI,wBAAY,EAAE,CACnC,CAAC;QAEF,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,OAAO,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,6FAA6F;IACrF,UAAU,CAAC,QAA8B;QAC7C,MAAM,QAAQ,GAAG,IAAA,sBAAU,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAA,wBAAY,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;QAE9C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAA,uBAAW,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,aAAa,UAAU,QAAQ,IAAI,CAAC,OAAO,mBAAmB,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,YAAY,CACzB,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,EAChC,IAAA,wBAAY,EAAC,QAAQ,EAAE,UAAU,CAAC,EAClC,QAAQ,CACX,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,6FAA6F;IACrF,mBAAmB;QACvB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACnE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACjD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;CACJ,CAAA;AA/FY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,0BAAc,GAAE;qDAOO,mCAAgB;QACf,uBAAW;QACR,yBAAU;GARzB,eAAe,CA+F3B","sourcesContent":["import {\n    isApiPath,\n    getApiPath,\n    getEndpoints,\n    getAuthMode,\n    getQueueName,\n    assertPubSubConventions,\n    assertEveryEndpointHasAuthMode,\n    AuthMode,\n    DocumentDesign,\n    LogManager,\n} from '@webpieces/core-util';\nimport { ContextMgr } from '@webpieces/core-context';\nimport { getCloudRunUrl } from '@webpieces/gcp-identity';\nimport { TaskInvoker, TaskRequest, ScheduleInfo } from './TaskTypes';\nimport { currentScheduleFrame } from './ScheduleContext';\nimport { ApiPrototype, TaskClientConfig } from './TaskClientConfig';\n\nconst log = LogManager.getLogger('TaskProxyClient');\n\n/**\n * Auth headers are NEVER propagated from the caller's context onto an enqueued task:\n * the caller's inbound user JWT / secret must not leak to an internal service, and\n * the invoker mints fresh delivery auth (OIDC / shared-secret) per the endpoint's mode.\n */\nconst AUTH_HEADER_NAMES = new Set<string>(['authorization', 'x-webpieces-shared-secret']);\n\n/** Per-endpoint routing plan resolved once from the contract's decorators. */\nclass EndpointPlan {\n    path: string;\n    queueName: string;\n    authMode: AuthMode;\n\n    constructor(path: string, queueName: string, authMode: AuthMode) {\n        this.path = path;\n        this.queueName = queueName;\n        this.authMode = authMode;\n    }\n}\n\n/**\n * TaskProxyClient - the enqueue engine behind one @PubSub API contract's client proxy.\n *\n * The fire-and-forget twin of http-client's ProxyClient, and the @DocumentDesign design\n * root for this package: its constructor params ARE the enqueue client's dependency graph.\n * Built by {@link ClientCloudTasksFactory} (one per API contract), it owns:\n * - @ApiPath / @PubSub convention validation + the endpoint plans from the contract's decorators\n * - Resolving the callee's Cloud Run base URL from the service name\n * - Context propagation onto the task headers (MINUS the caller's auth headers)\n * - Handing a fully-built TaskRequest to the bound {@link TaskInvoker}\n *\n * Calling an endpoint ENQUEUES a task (it does not call remotely); the task is later\n * delivered to the same endpoint's controller through the full server filter chain.\n */\n@DocumentDesign()\nexport class TaskProxyClient {\n    private plans: Map<string, EndpointPlan>;\n    private apiName: string;\n\n    constructor(\n        apiClass: ApiPrototype<object>,\n        private config: TaskClientConfig,\n        private invoker: TaskInvoker,\n        private contextMgr: ContextMgr,\n    ) {\n        if (!isApiPath(apiClass)) {\n            throw new Error(`Class ${apiClass.name || 'Unknown'} must be decorated with @ApiPath()`);\n        }\n        assertPubSubConventions(apiClass);\n        assertEveryEndpointHasAuthMode(apiClass);\n\n        this.apiName = apiClass.name || 'UnknownApi';\n        this.plans = this.buildPlans(apiClass);\n    }\n\n    /** Check whether the contract declares a @PubSub endpoint with this method name. */\n    hasEndpoint(methodName: string): boolean {\n        return this.plans.has(methodName);\n    }\n\n    /**\n     * Enqueue one task for the named endpoint. Must run inside a CloudTaskScheduler lambda\n     * (which supplies the ScheduleInfo) within an active RequestContext, e.g.:\n     *   scheduler.addToQueue(() => taskClient.foo(req), { dedupName });\n     */\n    // webpieces-disable no-any-unknown -- the request DTO's type is erased at the proxy boundary\n    async enqueue(methodName: string, requestDto: unknown): Promise<void> {\n        const plan = this.plans.get(methodName);\n        if (!plan) {\n            throw new Error(`No @PubSub endpoint '${methodName}' on ${this.apiName}`);\n        }\n\n        const frame = currentScheduleFrame();\n        if (!frame) {\n            throw new Error(\n                'Cloud task enqueue must run inside a CloudTaskScheduler lambda, e.g. ' +\n                'scheduler.addToQueue(() => taskClient.method(req), { dedupName }).',\n            );\n        }\n\n        // Resolved lazily (not at client construction) so building a client stays synchronous.\n        // Every metadata read beneath getCloudRunUrl is memoized process-wide, so only the\n        // first enqueue in the process pays a lookup.\n        const targetUrl = await getCloudRunUrl(this.config.gcpCloudRunSvcName);\n\n        const request = new TaskRequest(\n            targetUrl,\n            plan.path,\n            plan.queueName,\n            requestDto,\n            this.buildContextHeaders(),\n            plan.authMode,\n            frame.info ?? new ScheduleInfo(),\n        );\n\n        log.debug(`enqueue task ${plan.queueName} -> ${targetUrl}${plan.path}`);\n        frame.jobRef = await this.invoker.enqueue(request);\n    }\n\n    /** Endpoint name -> its resolved path / queue / auth mode, read once from the decorators. */\n    private buildPlans(apiClass: ApiPrototype<object>): Map<string, EndpointPlan> {\n        const basePath = getApiPath(apiClass) ?? '';\n        const endpoints = getEndpoints(apiClass) ?? {};\n        const plans = new Map<string, EndpointPlan>();\n\n        for (const methodName of Object.keys(endpoints)) {\n            const authMode = getAuthMode(apiClass, methodName);\n            if (!authMode) {\n                throw new Error(`Endpoint '${methodName}' on ${this.apiName} has no auth mode`);\n            }\n            const plan = new EndpointPlan(\n                basePath + endpoints[methodName],\n                getQueueName(apiClass, methodName),\n                authMode,\n            );\n            plans.set(methodName, plan);\n        }\n        return plans;\n    }\n\n    /** Transferred context keys (txId/requestId/tenant…) MINUS the caller's auth credentials. */\n    private buildContextHeaders(): Map<string, string> {\n        const headers = new Map<string, string>();\n        for (const entry of this.contextMgr.buildOutboundHeaders().entries()) {\n            if (!AUTH_HEADER_NAMES.has(entry[0].toLowerCase())) {\n                headers.set(entry[0], entry[1]);\n            }\n        }\n        return headers;\n    }\n}\n"]}

package/src/index.d.ts

@@ -7,8 +7,10 @@
  * delivered to the same endpoint through the full server filter chain.
  */
 export { ScheduleInfo, JobReference, TaskRequest, TaskInvoker, } from './TaskTypes';
-export { createTaskClient, TaskClientConfig } from './TaskClientFactory';
-export { TaskClientCreator } from './TaskClientCreator';
+export { ClientCloudTasksFactory } from './ClientCloudTasksFactory';
+export { TaskProxyClient } from './TaskProxyClient';
+export { TaskClientConfig } from './TaskClientConfig';
+export type { ApiPrototype } from './TaskClientConfig';
 export { CloudTaskScheduler, ScheduleOptions } from './CloudTaskScheduler';
 export { InMemoryTaskInvoker } from './InMemoryTaskInvoker';
 export { GcpTaskInvoker } from './GcpTaskInvoker';

package/src/index.js

@@ -8,17 +8,18 @@
  * delivered to the same endpoint through the full server filter chain.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.clearScheduleFrame = exports.currentScheduleFrame = exports.setScheduleFrame = exports.ScheduleFrame = exports.GcpTaskInvoker = exports.InMemoryTaskInvoker = exports.ScheduleOptions = exports.CloudTaskScheduler = exports.TaskClientCreator = exports.TaskClientConfig = exports.createTaskClient = exports.TaskInvoker = exports.TaskRequest = exports.JobReference = exports.ScheduleInfo = void 0;
+exports.clearScheduleFrame = exports.currentScheduleFrame = exports.setScheduleFrame = exports.ScheduleFrame = exports.GcpTaskInvoker = exports.InMemoryTaskInvoker = exports.ScheduleOptions = exports.CloudTaskScheduler = exports.TaskClientConfig = exports.TaskProxyClient = exports.ClientCloudTasksFactory = exports.TaskInvoker = exports.TaskRequest = exports.JobReference = exports.ScheduleInfo = void 0;
 var TaskTypes_1 = require("./TaskTypes");
 Object.defineProperty(exports, "ScheduleInfo", { enumerable: true, get: function () { return TaskTypes_1.ScheduleInfo; } });
 Object.defineProperty(exports, "JobReference", { enumerable: true, get: function () { return TaskTypes_1.JobReference; } });
 Object.defineProperty(exports, "TaskRequest", { enumerable: true, get: function () { return TaskTypes_1.TaskRequest; } });
 Object.defineProperty(exports, "TaskInvoker", { enumerable: true, get: function () { return TaskTypes_1.TaskInvoker; } });
-var TaskClientFactory_1 = require("./TaskClientFactory");
-Object.defineProperty(exports, "createTaskClient", { enumerable: true, get: function () { return TaskClientFactory_1.createTaskClient; } });
-Object.defineProperty(exports, "TaskClientConfig", { enumerable: true, get: function () { return TaskClientFactory_1.TaskClientConfig; } });
-var TaskClientCreator_1 = require("./TaskClientCreator");
-Object.defineProperty(exports, "TaskClientCreator", { enumerable: true, get: function () { return TaskClientCreator_1.TaskClientCreator; } });
+var ClientCloudTasksFactory_1 = require("./ClientCloudTasksFactory");
+Object.defineProperty(exports, "ClientCloudTasksFactory", { enumerable: true, get: function () { return ClientCloudTasksFactory_1.ClientCloudTasksFactory; } });
+var TaskProxyClient_1 = require("./TaskProxyClient");
+Object.defineProperty(exports, "TaskProxyClient", { enumerable: true, get: function () { return TaskProxyClient_1.TaskProxyClient; } });
+var TaskClientConfig_1 = require("./TaskClientConfig");
+Object.defineProperty(exports, "TaskClientConfig", { enumerable: true, get: function () { return TaskClientConfig_1.TaskClientConfig; } });
 var CloudTaskScheduler_1 = require("./CloudTaskScheduler");
 Object.defineProperty(exports, "CloudTaskScheduler", { enumerable: true, get: function () { return CloudTaskScheduler_1.CloudTaskScheduler; } });
 Object.defineProperty(exports, "ScheduleOptions", { enumerable: true, get: function () { return CloudTaskScheduler_1.ScheduleOptions; } });

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/cloud/cloudtasks-client/src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,yCAKqB;AAJjB,yGAAA,YAAY,OAAA;AACZ,yGAAA,YAAY,OAAA;AACZ,wGAAA,WAAW,OAAA;AACX,wGAAA,WAAW,OAAA;AAEf,yDAAyE;AAAhE,qHAAA,gBAAgB,OAAA;AAAE,qHAAA,gBAAgB,OAAA;AAC3C,yDAAwD;AAA/C,sHAAA,iBAAiB,OAAA;AAC1B,2DAA2E;AAAlE,wHAAA,kBAAkB,OAAA;AAAE,qHAAA,eAAe,OAAA;AAC5C,2FAA2F;AAC3F,6DAA4D;AAAnD,0HAAA,mBAAmB,OAAA;AAC5B,mDAAkD;AAAzC,gHAAA,cAAc,OAAA;AACvB,4FAA4F;AAC5F,2FAA2F;AAC3F,qDAK2B;AAJvB,gHAAA,aAAa,OAAA;AACb,mHAAA,gBAAgB,OAAA;AAChB,uHAAA,oBAAoB,OAAA;AACpB,qHAAA,kBAAkB,OAAA","sourcesContent":["/**\n * @webpieces/cloudtasks-client\n *\n * Cloud Tasks enqueue client generated from a shared @PubSub API contract — the\n * fire-and-forget twin of @webpieces/http-client. The client and the controller\n * share ONE abstract API class; calling a method enqueues a task that is later\n * delivered to the same endpoint through the full server filter chain.\n */\n\nexport {\n    ScheduleInfo,\n    JobReference,\n    TaskRequest,\n    TaskInvoker,\n} from './TaskTypes';\nexport { createTaskClient, TaskClientConfig } from './TaskClientFactory';\nexport { TaskClientCreator } from './TaskClientCreator';\nexport { CloudTaskScheduler, ScheduleOptions } from './CloudTaskScheduler';\n// The two task transports (local HTTP-queue + remote GCP), both delivering over real HTTP.\nexport { InMemoryTaskInvoker } from './InMemoryTaskInvoker';\nexport { GcpTaskInvoker } from './GcpTaskInvoker';\n// NOTE: server-side delivery-auth is enforced by the framework AuthFilter (AuthMode-driven)\n// in @webpieces/http-routing — a client library has no server filters / routing machinery.\nexport {\n    ScheduleFrame,\n    setScheduleFrame,\n    currentScheduleFrame,\n    clearScheduleFrame,\n} from './ScheduleContext';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/cloud/cloudtasks-client/src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,yCAKqB;AAJjB,yGAAA,YAAY,OAAA;AACZ,yGAAA,YAAY,OAAA;AACZ,wGAAA,WAAW,OAAA;AACX,wGAAA,WAAW,OAAA;AAEf,qEAAoE;AAA3D,kIAAA,uBAAuB,OAAA;AAChC,qDAAoD;AAA3C,kHAAA,eAAe,OAAA;AACxB,uDAAsD;AAA7C,oHAAA,gBAAgB,OAAA;AAEzB,2DAA2E;AAAlE,wHAAA,kBAAkB,OAAA;AAAE,qHAAA,eAAe,OAAA;AAC5C,2FAA2F;AAC3F,6DAA4D;AAAnD,0HAAA,mBAAmB,OAAA;AAC5B,mDAAkD;AAAzC,gHAAA,cAAc,OAAA;AACvB,4FAA4F;AAC5F,2FAA2F;AAC3F,qDAK2B;AAJvB,gHAAA,aAAa,OAAA;AACb,mHAAA,gBAAgB,OAAA;AAChB,uHAAA,oBAAoB,OAAA;AACpB,qHAAA,kBAAkB,OAAA","sourcesContent":["/**\n * @webpieces/cloudtasks-client\n *\n * Cloud Tasks enqueue client generated from a shared @PubSub API contract — the\n * fire-and-forget twin of @webpieces/http-client. The client and the controller\n * share ONE abstract API class; calling a method enqueues a task that is later\n * delivered to the same endpoint through the full server filter chain.\n */\n\nexport {\n    ScheduleInfo,\n    JobReference,\n    TaskRequest,\n    TaskInvoker,\n} from './TaskTypes';\nexport { ClientCloudTasksFactory } from './ClientCloudTasksFactory';\nexport { TaskProxyClient } from './TaskProxyClient';\nexport { TaskClientConfig } from './TaskClientConfig';\nexport type { ApiPrototype } from './TaskClientConfig';\nexport { CloudTaskScheduler, ScheduleOptions } from './CloudTaskScheduler';\n// The two task transports (local HTTP-queue + remote GCP), both delivering over real HTTP.\nexport { InMemoryTaskInvoker } from './InMemoryTaskInvoker';\nexport { GcpTaskInvoker } from './GcpTaskInvoker';\n// NOTE: server-side delivery-auth is enforced by the framework AuthFilter (AuthMode-driven)\n// in @webpieces/http-routing — a client library has no server filters / routing machinery.\nexport {\n    ScheduleFrame,\n    setScheduleFrame,\n    currentScheduleFrame,\n    clearScheduleFrame,\n} from './ScheduleContext';\n"]}

package/src/TaskClientCreator.d.ts

@@ -1,22 +0,0 @@
-import { TaskInvoker } from './TaskTypes';
-/** Constructor whose prototype is T (the abstract @PubSub API class). */
-type ApiPrototype<T> = Function & {
-    prototype: T;
-};
-/**
- * Injectable factory for Cloud Tasks enqueue clients — the twin of http-client's
- * RpcClientCreator. Resolves the bound TaskInvoker + a context-propagating ContextMgr
- * so a service just asks for a typed client:
- *
- *   const emailTasks = creator.createClientOnService(EmailApi, 'email-svc'); // self/other svc
- */
-export declare class TaskClientCreator {
-    private readonly invoker;
-    constructor(invoker: TaskInvoker);
-    /** Enqueue client whose delivery URL is another Cloud Run service (by name). */
-    createClientOnService<T extends object>(apiClass: ApiPrototype<T>, serviceName: string): T;
-    /** Enqueue client whose delivery URL is a fixed base URL. */
-    createClientOnUrl<T extends object>(apiClass: ApiPrototype<T>, url: string): T;
-    private buildContextMgr;
-}
-export {};

package/src/TaskClientCreator.js

@@ -1,45 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TaskClientCreator = void 0;
-const tslib_1 = require("tslib");
-const inversify_1 = require("inversify");
-const core_context_1 = require("@webpieces/core-context");
-const core_util_1 = require("@webpieces/core-util");
-const gcp_identity_1 = require("@webpieces/gcp-identity");
-const TaskTypes_1 = require("./TaskTypes");
-const TaskClientFactory_1 = require("./TaskClientFactory");
-/**
- * Injectable factory for Cloud Tasks enqueue clients — the twin of http-client's
- * RpcClientCreator. Resolves the bound TaskInvoker + a context-propagating ContextMgr
- * so a service just asks for a typed client:
- *
- *   const emailTasks = creator.createClientOnService(EmailApi, 'email-svc'); // self/other svc
- */
-let TaskClientCreator = class TaskClientCreator {
-    invoker;
-    constructor(invoker) {
-        this.invoker = invoker;
-    }
-    /** Enqueue client whose delivery URL is another Cloud Run service (by name). */
-    createClientOnService(apiClass, serviceName) {
-        const config = new TaskClientFactory_1.TaskClientConfig(() => (0, gcp_identity_1.getCloudRunUrl)(serviceName), this.invoker, this.buildContextMgr());
-        return (0, TaskClientFactory_1.createTaskClient)(apiClass, config);
-    }
-    /** Enqueue client whose delivery URL is a fixed base URL. */
-    createClientOnUrl(apiClass, url) {
-        const config = new TaskClientFactory_1.TaskClientConfig(url, this.invoker, this.buildContextMgr());
-        return (0, TaskClientFactory_1.createTaskClient)(apiClass, config);
-    }
-    buildContextMgr() {
-        return new core_context_1.ContextMgr(new core_context_1.RequestContextReader());
-    }
-};
-exports.TaskClientCreator = TaskClientCreator;
-exports.TaskClientCreator = TaskClientCreator = tslib_1.__decorate([
-    (0, core_util_1.DocumentDesign)(),
-    (0, core_context_1.provideFrameworkSingleton)(),
-    (0, inversify_1.injectable)(),
-    tslib_1.__param(0, (0, inversify_1.inject)(TaskTypes_1.TaskInvoker)),
-    tslib_1.__metadata("design:paramtypes", [TaskTypes_1.TaskInvoker])
-], TaskClientCreator);
-//# sourceMappingURL=TaskClientCreator.js.map

package/src/TaskClientCreator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"TaskClientCreator.js","sourceRoot":"","sources":["../../../../../packages/cloud/cloudtasks-client/src/TaskClientCreator.ts"],"names":[],"mappings":";;;;AAAA,yCAA+C;AAC/C,0DAAsG;AACtG,oDAAsD;AACtD,0DAAyD;AACzD,2CAA0C;AAC1C,2DAAyE;AAKzE;;;;;;GAMG;AAII,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAEgB;IAD1C,YAC0C,OAAoB;QAApB,YAAO,GAAP,OAAO,CAAa;IAC3D,CAAC;IAEJ,gFAAgF;IAChF,qBAAqB,CAAmB,QAAyB,EAAE,WAAmB;QAClF,MAAM,MAAM,GAAG,IAAI,oCAAgB,CAC/B,GAAG,EAAE,CAAC,IAAA,6BAAc,EAAC,WAAW,CAAC,EACjC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,eAAe,EAAE,CACzB,CAAC;QACF,OAAO,IAAA,oCAAgB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,6DAA6D;IAC7D,iBAAiB,CAAmB,QAAyB,EAAE,GAAW;QACtE,MAAM,MAAM,GAAG,IAAI,oCAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QAC/E,OAAO,IAAA,oCAAgB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAEO,eAAe;QACnB,OAAO,IAAI,yBAAU,CAAC,IAAI,mCAAoB,EAAE,CAAC,CAAC;IACtD,CAAC;CACJ,CAAA;AAxBY,8CAAiB;4BAAjB,iBAAiB;IAH7B,IAAA,0BAAc,GAAE;IAChB,IAAA,wCAAyB,GAAE;IAC3B,IAAA,sBAAU,GAAE;IAGJ,mBAAA,IAAA,kBAAM,EAAC,uBAAW,CAAC,CAAA;6CAA2B,uBAAW;GAFrD,iBAAiB,CAwB7B","sourcesContent":["import { inject, injectable } from 'inversify';\nimport { provideFrameworkSingleton, RequestContextReader, ContextMgr } from '@webpieces/core-context';\nimport { DocumentDesign } from '@webpieces/core-util';\nimport { getCloudRunUrl } from '@webpieces/gcp-identity';\nimport { TaskInvoker } from './TaskTypes';\nimport { createTaskClient, TaskClientConfig } from './TaskClientFactory';\n\n/** Constructor whose prototype is T (the abstract @PubSub API class). */\ntype ApiPrototype<T> = Function & { prototype: T };\n\n/**\n * Injectable factory for Cloud Tasks enqueue clients — the twin of http-client's\n * RpcClientCreator. Resolves the bound TaskInvoker + a context-propagating ContextMgr\n * so a service just asks for a typed client:\n *\n *   const emailTasks = creator.createClientOnService(EmailApi, 'email-svc'); // self/other svc\n */\n@DocumentDesign()\n@provideFrameworkSingleton()\n@injectable()\nexport class TaskClientCreator {\n    constructor(\n        @inject(TaskInvoker) private readonly invoker: TaskInvoker,\n    ) {}\n\n    /** Enqueue client whose delivery URL is another Cloud Run service (by name). */\n    createClientOnService<T extends object>(apiClass: ApiPrototype<T>, serviceName: string): T {\n        const config = new TaskClientConfig(\n            () => getCloudRunUrl(serviceName),\n            this.invoker,\n            this.buildContextMgr(),\n        );\n        return createTaskClient(apiClass, config);\n    }\n\n    /** Enqueue client whose delivery URL is a fixed base URL. */\n    createClientOnUrl<T extends object>(apiClass: ApiPrototype<T>, url: string): T {\n        const config = new TaskClientConfig(url, this.invoker, this.buildContextMgr());\n        return createTaskClient(apiClass, config);\n    }\n\n    private buildContextMgr(): ContextMgr {\n        return new ContextMgr(new RequestContextReader());\n    }\n}\n"]}

package/src/TaskClientFactory.d.ts

@@ -1,27 +0,0 @@
-import { ContextMgr } from '@webpieces/core-context';
-import { TaskInvoker } from './TaskTypes';
-/** Constructor whose prototype is T (the abstract API class). */
-type ApiPrototype<T> = Function & {
-    prototype: T;
-};
-/** Configuration for an enqueue client. */
-export declare class TaskClientConfig {
-    /** Callee base URL, or an async resolver (e.g. getCloudRunUrl(serviceName)). */
-    targetUrl: string | (() => Promise<string>);
-    /** The transport that enqueues the task (GcpTaskInvoker / InMemoryTaskInvoker). */
-    invoker: TaskInvoker;
-    /** Optional context propagation (txId/requestId/tenant…) onto the task headers. */
-    contextMgr?: ContextMgr;
-    constructor(targetUrl: string | (() => Promise<string>), invoker: TaskInvoker, contextMgr?: ContextMgr);
-}
-/**
- * Create a Cloud Tasks enqueue client from a shared @PubSub API contract. Calling a
- * method ENQUEUES a task (it does not call remotely); the task is later delivered to
- * the same endpoint's controller through the full server filter chain.
- *
- * Must be called inside a CloudTaskScheduler lambda (which supplies the ScheduleInfo)
- * within an active RequestContext, e.g.:
- *   scheduler.addToQueue(() => taskClient.foo(req), { dedupName });
- */
-export declare function createTaskClient<T extends object>(apiClass: ApiPrototype<T>, config: TaskClientConfig): T;
-export {};

package/src/TaskClientFactory.js

@@ -1,124 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TaskClientConfig = void 0;
-exports.createTaskClient = createTaskClient;
-const core_util_1 = require("@webpieces/core-util");
-const core_util_2 = require("@webpieces/core-util");
-const TaskTypes_1 = require("./TaskTypes");
-const ScheduleContext_1 = require("./ScheduleContext");
-const log = core_util_2.LogManager.getLogger('TaskClientFactory');
-/**
- * Auth headers are NEVER propagated from the caller's context onto an enqueued task:
- * the caller's inbound user JWT / secret must not leak to an internal service, and
- * the invoker mints fresh delivery auth (OIDC / shared-secret) per the endpoint's mode.
- */
-const AUTH_HEADER_NAMES = new Set(['authorization', 'x-webpieces-shared-secret']);
-/**
- * Properties DI frameworks / Promise checks / serializers probe on the proxy; return
- * undefined instead of treating them as endpoints. Mirrors http-client's ClientFactory.
- */
-const FRAMEWORK_INSPECTION_PROPERTIES = new Set([
-    'constructor', 'prototype', '__proto__', 'name', 'then', 'catch', 'finally',
-    'toJSON', 'valueOf', 'toString', 'nodeType', 'tagName', '$$typeof',
-]);
-/** Configuration for an enqueue client. */
-class TaskClientConfig {
-    /** Callee base URL, or an async resolver (e.g. getCloudRunUrl(serviceName)). */
-    targetUrl;
-    /** The transport that enqueues the task (GcpTaskInvoker / InMemoryTaskInvoker). */
-    invoker;
-    /** Optional context propagation (txId/requestId/tenant…) onto the task headers. */
-    contextMgr;
-    constructor(targetUrl, invoker, contextMgr) {
-        this.targetUrl = targetUrl;
-        this.invoker = invoker;
-        this.contextMgr = contextMgr;
-    }
-}
-exports.TaskClientConfig = TaskClientConfig;
-/** Per-endpoint routing plan resolved once from the contract's decorators. */
-class EndpointPlan {
-    path;
-    queueName;
-    authMode;
-    constructor(path, queueName, authMode) {
-        this.path = path;
-        this.queueName = queueName;
-        this.authMode = authMode;
-    }
-}
-/**
- * Create a Cloud Tasks enqueue client from a shared @PubSub API contract. Calling a
- * method ENQUEUES a task (it does not call remotely); the task is later delivered to
- * the same endpoint's controller through the full server filter chain.
- *
- * Must be called inside a CloudTaskScheduler lambda (which supplies the ScheduleInfo)
- * within an active RequestContext, e.g.:
- *   scheduler.addToQueue(() => taskClient.foo(req), { dedupName });
- */
-function createTaskClient(apiClass, config) {
-    if (!(0, core_util_1.isApiPath)(apiClass)) {
-        throw new Error(`Class ${apiClass.name || 'Unknown'} must be decorated with @ApiPath()`);
-    }
-    (0, core_util_1.assertPubSubConventions)(apiClass);
-    (0, core_util_1.assertEveryEndpointHasAuthMode)(apiClass);
-    const basePath = (0, core_util_1.getApiPath)(apiClass) ?? '';
-    const endpoints = (0, core_util_1.getEndpoints)(apiClass) ?? {};
-    const plans = buildPlans(apiClass, basePath, endpoints);
-    return new Proxy({}, {
-        // webpieces-disable no-any-unknown -- proxy get trap returns either a method or undefined
-        get(_target, prop) {
-            if (typeof prop !== 'string' || FRAMEWORK_INSPECTION_PROPERTIES.has(prop)) {
-                return undefined;
-            }
-            const plan = plans.get(prop);
-            if (!plan) {
-                throw new Error(`No @PubSub endpoint '${prop}' on ${apiClass.name || 'Unknown'}. ` +
-                    `Check for typos or a missing @Endpoint() decorator.`);
-            }
-            // webpieces-disable no-any-unknown -- request DTO type is erased at the proxy layer
-            return (requestDto) => enqueue(config, plan, requestDto);
-        },
-    });
-}
-function buildPlans(apiClass, basePath, endpoints) {
-    const plans = new Map();
-    for (const methodName of Object.keys(endpoints)) {
-        const authMode = (0, core_util_1.getAuthMode)(apiClass, methodName);
-        if (!authMode) {
-            throw new Error(`Endpoint '${methodName}' on ${apiClass.name} has no auth mode`);
-        }
-        const plan = new EndpointPlan(basePath + endpoints[methodName], (0, core_util_1.getQueueName)(apiClass, methodName), authMode);
-        plans.set(methodName, plan);
-    }
-    return plans;
-}
-async function enqueue(config, plan, 
-// webpieces-disable no-any-unknown -- request DTO type is erased at the proxy layer
-requestDto) {
-    const frame = (0, ScheduleContext_1.currentScheduleFrame)();
-    if (!frame) {
-        throw new Error('Cloud task enqueue must run inside a CloudTaskScheduler lambda, e.g. ' +
-            'scheduler.addToQueue(() => taskClient.method(req), { dedupName }).');
-    }
-    const targetUrl = typeof config.targetUrl === 'string'
-        ? config.targetUrl
-        : await config.targetUrl();
-    const contextHeaders = buildContextHeaders(config.contextMgr);
-    const request = new TaskTypes_1.TaskRequest(targetUrl, plan.path, plan.queueName, requestDto, contextHeaders, plan.authMode, frame.info ?? new TaskTypes_1.ScheduleInfo());
-    log.debug(`enqueue task ${plan.queueName} -> ${targetUrl}${plan.path}`);
-    frame.jobRef = await config.invoker.enqueue(request);
-}
-function buildContextHeaders(contextMgr) {
-    const headers = new Map();
-    if (!contextMgr) {
-        return headers;
-    }
-    for (const entry of contextMgr.buildOutboundHeaders().entries()) {
-        if (!AUTH_HEADER_NAMES.has(entry[0].toLowerCase())) {
-            headers.set(entry[0], entry[1]);
-        }
-    }
-    return headers;
-}
-//# sourceMappingURL=TaskClientFactory.js.map

package/src/TaskClientFactory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"TaskClientFactory.js","sourceRoot":"","sources":["../../../../../packages/cloud/cloudtasks-client/src/TaskClientFactory.ts"],"names":[],"mappings":";;;AA8EA,4CA+BC;AA7GD,oDAS8B;AAE9B,oDAAkD;AAClD,2CAAqE;AACrE,uDAAyD;AAEzD,MAAM,GAAG,GAAG,sBAAU,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;AAKtD;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC,CAAC;AAE1F;;;GAGG;AACH,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAS;IACpD,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS;IAC3E,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU;CACrE,CAAC,CAAC;AAEH,2CAA2C;AAC3C,MAAa,gBAAgB;IACzB,gFAAgF;IAChF,SAAS,CAAmC;IAC5C,mFAAmF;IACnF,OAAO,CAAc;IACrB,mFAAmF;IACnF,UAAU,CAAc;IAExB,YACI,SAA2C,EAC3C,OAAoB,EACpB,UAAuB;QAEvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;CACJ;AAjBD,4CAiBC;AAED,8EAA8E;AAC9E,MAAM,YAAY;IACd,IAAI,CAAS;IACb,SAAS,CAAS;IAClB,QAAQ,CAAW;IAEnB,YAAY,IAAY,EAAE,SAAiB,EAAE,QAAkB;QAC3D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;CACJ;AAED;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAC5B,QAAyB,EACzB,MAAwB;IAExB,IAAI,CAAC,IAAA,qBAAS,EAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,CAAC,IAAI,IAAI,SAAS,oCAAoC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAA,mCAAuB,EAAC,QAAQ,CAAC,CAAC;IAClC,IAAA,0CAA8B,EAAC,QAAQ,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAG,IAAA,sBAAU,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAA,wBAAY,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAExD,OAAO,IAAI,KAAK,CAAC,EAAO,EAAE;QACtB,0FAA0F;QAC1F,GAAG,CAAC,OAAU,EAAE,IAAqB;YACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,+BAA+B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxE,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,MAAM,IAAI,KAAK,CACX,wBAAwB,IAAI,QAAQ,QAAQ,CAAC,IAAI,IAAI,SAAS,IAAI;oBAClE,qDAAqD,CACxD,CAAC;YACN,CAAC;YACD,oFAAoF;YACpF,OAAO,CAAC,UAAmB,EAAiB,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACrF,CAAC;KACJ,CAAC,CAAC;AACP,CAAC;AAED,SAAS,UAAU,CACf,QAAkB,EAClB,QAAgB,EAChB,SAAiC;IAEjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAA,uBAAW,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,aAAa,UAAU,QAAQ,QAAQ,CAAC,IAAI,mBAAmB,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,YAAY,CACzB,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,EAChC,IAAA,wBAAY,EAAC,QAAQ,EAAE,UAAU,CAAC,EAClC,QAAQ,CACX,CAAC;QACF,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,OAAO,CAClB,MAAwB,EACxB,IAAkB;AAClB,oFAAoF;AACpF,UAAmB;IAEnB,MAAM,KAAK,GAAG,IAAA,sCAAoB,GAAE,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACX,uEAAuE;YACvE,oEAAoE,CACvE,CAAC;IACN,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QAClD,CAAC,CAAC,MAAM,CAAC,SAAS;QAClB,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;IAE/B,MAAM,cAAc,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,IAAI,uBAAW,CAC3B,SAAS,EACT,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,EACd,UAAU,EACV,cAAc,EACd,IAAI,CAAC,QAAQ,EACb,KAAK,CAAC,IAAI,IAAI,IAAI,wBAAY,EAAE,CACnC,CAAC;IAEF,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,OAAO,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAuB;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC","sourcesContent":["import {\n    isApiPath,\n    getApiPath,\n    getEndpoints,\n    getAuthMode,\n    getQueueName,\n    assertPubSubConventions,\n    assertEveryEndpointHasAuthMode,\n    AuthMode,\n} from '@webpieces/core-util';\nimport { ContextMgr } from '@webpieces/core-context';\nimport { LogManager } from '@webpieces/core-util';\nimport { TaskInvoker, TaskRequest, ScheduleInfo } from './TaskTypes';\nimport { currentScheduleFrame } from './ScheduleContext';\n\nconst log = LogManager.getLogger('TaskClientFactory');\n\n/** Constructor whose prototype is T (the abstract API class). */\ntype ApiPrototype<T> = Function & { prototype: T };\n\n/**\n * Auth headers are NEVER propagated from the caller's context onto an enqueued task:\n * the caller's inbound user JWT / secret must not leak to an internal service, and\n * the invoker mints fresh delivery auth (OIDC / shared-secret) per the endpoint's mode.\n */\nconst AUTH_HEADER_NAMES = new Set<string>(['authorization', 'x-webpieces-shared-secret']);\n\n/**\n * Properties DI frameworks / Promise checks / serializers probe on the proxy; return\n * undefined instead of treating them as endpoints. Mirrors http-client's ClientFactory.\n */\nconst FRAMEWORK_INSPECTION_PROPERTIES = new Set<string>([\n    'constructor', 'prototype', '__proto__', 'name', 'then', 'catch', 'finally',\n    'toJSON', 'valueOf', 'toString', 'nodeType', 'tagName', '$$typeof',\n]);\n\n/** Configuration for an enqueue client. */\nexport class TaskClientConfig {\n    /** Callee base URL, or an async resolver (e.g. getCloudRunUrl(serviceName)). */\n    targetUrl: string | (() => Promise<string>);\n    /** The transport that enqueues the task (GcpTaskInvoker / InMemoryTaskInvoker). */\n    invoker: TaskInvoker;\n    /** Optional context propagation (txId/requestId/tenant…) onto the task headers. */\n    contextMgr?: ContextMgr;\n\n    constructor(\n        targetUrl: string | (() => Promise<string>),\n        invoker: TaskInvoker,\n        contextMgr?: ContextMgr,\n    ) {\n        this.targetUrl = targetUrl;\n        this.invoker = invoker;\n        this.contextMgr = contextMgr;\n    }\n}\n\n/** Per-endpoint routing plan resolved once from the contract's decorators. */\nclass EndpointPlan {\n    path: string;\n    queueName: string;\n    authMode: AuthMode;\n\n    constructor(path: string, queueName: string, authMode: AuthMode) {\n        this.path = path;\n        this.queueName = queueName;\n        this.authMode = authMode;\n    }\n}\n\n/**\n * Create a Cloud Tasks enqueue client from a shared @PubSub API contract. Calling a\n * method ENQUEUES a task (it does not call remotely); the task is later delivered to\n * the same endpoint's controller through the full server filter chain.\n *\n * Must be called inside a CloudTaskScheduler lambda (which supplies the ScheduleInfo)\n * within an active RequestContext, e.g.:\n *   scheduler.addToQueue(() => taskClient.foo(req), { dedupName });\n */\nexport function createTaskClient<T extends object>(\n    apiClass: ApiPrototype<T>,\n    config: TaskClientConfig,\n): T {\n    if (!isApiPath(apiClass)) {\n        throw new Error(`Class ${apiClass.name || 'Unknown'} must be decorated with @ApiPath()`);\n    }\n    assertPubSubConventions(apiClass);\n    assertEveryEndpointHasAuthMode(apiClass);\n\n    const basePath = getApiPath(apiClass) ?? '';\n    const endpoints = getEndpoints(apiClass) ?? {};\n    const plans = buildPlans(apiClass, basePath, endpoints);\n\n    return new Proxy({} as T, {\n        // webpieces-disable no-any-unknown -- proxy get trap returns either a method or undefined\n        get(_target: T, prop: string | symbol): unknown {\n            if (typeof prop !== 'string' || FRAMEWORK_INSPECTION_PROPERTIES.has(prop)) {\n                return undefined;\n            }\n            const plan = plans.get(prop);\n            if (!plan) {\n                throw new Error(\n                    `No @PubSub endpoint '${prop}' on ${apiClass.name || 'Unknown'}. ` +\n                    `Check for typos or a missing @Endpoint() decorator.`,\n                );\n            }\n            // webpieces-disable no-any-unknown -- request DTO type is erased at the proxy layer\n            return (requestDto: unknown): Promise<void> => enqueue(config, plan, requestDto);\n        },\n    });\n}\n\nfunction buildPlans(\n    apiClass: Function,\n    basePath: string,\n    endpoints: Record<string, string>,\n): Map<string, EndpointPlan> {\n    const plans = new Map<string, EndpointPlan>();\n    for (const methodName of Object.keys(endpoints)) {\n        const authMode = getAuthMode(apiClass, methodName);\n        if (!authMode) {\n            throw new Error(`Endpoint '${methodName}' on ${apiClass.name} has no auth mode`);\n        }\n        const plan = new EndpointPlan(\n            basePath + endpoints[methodName],\n            getQueueName(apiClass, methodName),\n            authMode,\n        );\n        plans.set(methodName, plan);\n    }\n    return plans;\n}\n\nasync function enqueue(\n    config: TaskClientConfig,\n    plan: EndpointPlan,\n    // webpieces-disable no-any-unknown -- request DTO type is erased at the proxy layer\n    requestDto: unknown,\n): Promise<void> {\n    const frame = currentScheduleFrame();\n    if (!frame) {\n        throw new Error(\n            'Cloud task enqueue must run inside a CloudTaskScheduler lambda, e.g. ' +\n            'scheduler.addToQueue(() => taskClient.method(req), { dedupName }).',\n        );\n    }\n\n    const targetUrl = typeof config.targetUrl === 'string'\n        ? config.targetUrl\n        : await config.targetUrl();\n\n    const contextHeaders = buildContextHeaders(config.contextMgr);\n\n    const request = new TaskRequest(\n        targetUrl,\n        plan.path,\n        plan.queueName,\n        requestDto,\n        contextHeaders,\n        plan.authMode,\n        frame.info ?? new ScheduleInfo(),\n    );\n\n    log.debug(`enqueue task ${plan.queueName} -> ${targetUrl}${plan.path}`);\n    frame.jobRef = await config.invoker.enqueue(request);\n}\n\nfunction buildContextHeaders(contextMgr?: ContextMgr): Map<string, string> {\n    const headers = new Map<string, string>();\n    if (!contextMgr) {\n        return headers;\n    }\n    for (const entry of contextMgr.buildOutboundHeaders().entries()) {\n        if (!AUTH_HEADER_NAMES.has(entry[0].toLowerCase())) {\n            headers.set(entry[0], entry[1]);\n        }\n    }\n    return headers;\n}\n"]}