@webpieces/core-util 0.3.285 → 0.3.287

package/src/http/WebpiecesCoreHeaders.d.ts

@@ -1,62 +1,53 @@
-import { PlatformHeader } from './PlatformHeader';
+import { ContextKey } from '../ContextKey';
 /**
- * Core framework headers for distributed tracing and request correlation.
+ * Core framework context keys for distributed tracing and request correlation.
  *
- * These are the minimal headers needed by the WebPieces framework for:
- * - Request tracking across services
- * - Distributed tracing (REQUEST_ID -> PREVIOUS_REQUEST_ID chaining per hop)
+ * These are the minimal keys the WebPieces framework needs for:
+ * - Request tracking across services (REQUEST_ID -> PREVIOUS_REQUEST_ID chaining per hop)
  * - Request correlation
- * - Metrics and monitoring
+ * - Log correlation (each key logs under its `name`)
  *
- * Pattern inspired by Java MicroSvcHeader enum. Lives in http-api (browser-safe)
+ * Pattern inspired by Java MicroSvcHeader enum. Lives in core-util (browser-safe)
  * so BOTH the http-client (request-id chaining) and http-server can reference it.
+ *
+ * Exposed as {@link HeaderRegistry.DEFAULT_HEADERS} — a service opts into these by
+ * passing `platformHeaders=true` to `HeaderRegistry.configure(...)`.
+ *
+ * Each key's `name` is the logical/log name; `httpHeader` is the wire name.
  */
 export declare class WebpiecesCoreHeaders {
     /**
-     * Unique ID for this request.
-     * Generated by the server if not provided.
-     * Used for distributed tracing and log correlation.
+     * Unique ID for this request. Generated by the server if not provided.
+     * Transferred (propagates downstream) and logged under 'requestId'.
      */
-    static readonly REQUEST_ID: PlatformHeader;
+    static readonly REQUEST_ID: ContextKey;
     /**
-     * ID of the previous request in the call chain.
-     * When service A calls service B, B receives A's REQUEST_ID as PREVIOUS_REQUEST_ID.
-     * Used for building distributed trace trees.
+     * ID of the previous request in the call chain. When service A calls B, B
+     * receives A's REQUEST_ID as PREVIOUS_REQUEST_ID (builds the trace tree).
      */
-    static readonly PREVIOUS_REQUEST_ID: PlatformHeader;
+    static readonly PREVIOUS_REQUEST_ID: ContextKey;
     /**
-     * Correlation ID that spans multiple related requests.
-     * Typically set by the API gateway or first service in the chain.
-     * All services in the call chain use the same CORRELATION_ID.
+     * Correlation ID spanning multiple related requests. Set by the gateway or
+     * first service; all hops in the chain share it.
      */
-    static readonly CORRELATION_ID: PlatformHeader;
+    static readonly CORRELATION_ID: ContextKey;
     /**
      * Turns on test-case recording for this request (Java: x-webpieces-recording).
-     * When present, the server records the endpoint + every downstream call it
-     * makes into a fixture that can be replayed as a test.
      * Transferred so recording follows the request across service hops.
      */
-    static readonly RECORDING: PlatformHeader;
+    static readonly RECORDING: ContextKey;
     /**
-     * The bearer credential for an authenticated request. Carries BOTH a user-facing
-     * JWT (@AuthJwt, validated by the app AuthFilter) and a service-to-service Google
-     * OIDC token (@AuthOidc, validated by the framework ServiceAuthFilter) — the two
-     * modes are mutually exclusive per endpoint, so one header serves both. When a
-     * Cloud Task is delivered, Google injects the OIDC token here as `Authorization`.
-     * SECURED — masked in logs.
+     * The bearer credential for an authenticated request (user JWT or service OIDC
+     * token). Transferred and SECURED — masked in logs.
      */
-    static readonly AUTHORIZATION: PlatformHeader;
+    static readonly AUTHORIZATION: ContextKey;
     /**
-     * Shared-secret credential for internal callers that cannot mint OIDC tokens
-     * (@AuthSharedSecret, validated by ServiceAuthFilter via constant-time compare).
-     * SECURED — masked in logs.
+     * Shared-secret credential for internal callers that cannot mint OIDC tokens.
+     * Transferred and SECURED — masked in logs.
      */
-    static readonly SHARED_SECRET: PlatformHeader;
+    static readonly SHARED_SECRET: ContextKey;
     /**
-     * Get all core headers as an array.
-     * Used by WebpiecesModule to bind headers to DI container.
-     *
-     * @returns Array of all core platform headers
+     * Get all core context keys as an array (the platform DEFAULT_HEADERS set).
      */
-    static getAllHeaders(): PlatformHeader[];
+    static getAllHeaders(): ContextKey[];
 }

package/src/http/WebpiecesCoreHeaders.js

@@ -1,76 +1,56 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WebpiecesCoreHeaders = void 0;
-const PlatformHeader_1 = require("./PlatformHeader");
+const ContextKey_1 = require("../ContextKey");
 /**
- * Core framework headers for distributed tracing and request correlation.
+ * Core framework context keys for distributed tracing and request correlation.
  *
- * These are the minimal headers needed by the WebPieces framework for:
- * - Request tracking across services
- * - Distributed tracing (REQUEST_ID -> PREVIOUS_REQUEST_ID chaining per hop)
+ * These are the minimal keys the WebPieces framework needs for:
+ * - Request tracking across services (REQUEST_ID -> PREVIOUS_REQUEST_ID chaining per hop)
  * - Request correlation
- * - Metrics and monitoring
+ * - Log correlation (each key logs under its `name`)
  *
- * Pattern inspired by Java MicroSvcHeader enum. Lives in http-api (browser-safe)
+ * Pattern inspired by Java MicroSvcHeader enum. Lives in core-util (browser-safe)
  * so BOTH the http-client (request-id chaining) and http-server can reference it.
+ *
+ * Exposed as {@link HeaderRegistry.DEFAULT_HEADERS} — a service opts into these by
+ * passing `platformHeaders=true` to `HeaderRegistry.configure(...)`.
+ *
+ * Each key's `name` is the logical/log name; `httpHeader` is the wire name.
  */
 class WebpiecesCoreHeaders {
     /**
-     * Unique ID for this request.
-     * Generated by the server if not provided.
-     * Used for distributed tracing and log correlation.
+     * Unique ID for this request. Generated by the server if not provided.
+     * Transferred (propagates downstream) and logged under 'requestId'.
      */
-    static REQUEST_ID = new PlatformHeader_1.PlatformHeader('x-request-id', true, // transfer (propagate to downstream services)
-    false, // not secured (it's just an ID)
-    true, // use for metrics dimensions
-    'requestId' // MDC key (Java MicroSvcHeader parity)
-    );
+    static REQUEST_ID = new ContextKey_1.ContextKey('requestId', 'x-request-id');
     /**
-     * ID of the previous request in the call chain.
-     * When service A calls service B, B receives A's REQUEST_ID as PREVIOUS_REQUEST_ID.
-     * Used for building distributed trace trees.
+     * ID of the previous request in the call chain. When service A calls B, B
+     * receives A's REQUEST_ID as PREVIOUS_REQUEST_ID (builds the trace tree).
      */
-    static PREVIOUS_REQUEST_ID = new PlatformHeader_1.PlatformHeader('x-previous-request-id', true, false, false, 'previousId' // MDC key (Java MicroSvcHeader parity)
-    );
+    static PREVIOUS_REQUEST_ID = new ContextKey_1.ContextKey('previousId', 'x-previous-request-id');
     /**
-     * Correlation ID that spans multiple related requests.
-     * Typically set by the API gateway or first service in the chain.
-     * All services in the call chain use the same CORRELATION_ID.
+     * Correlation ID spanning multiple related requests. Set by the gateway or
+     * first service; all hops in the chain share it.
      */
-    static CORRELATION_ID = new PlatformHeader_1.PlatformHeader('x-correlation-id', true, false, true, // use for metrics dimensions
-    'correlationId' // MDC key
-    );
+    static CORRELATION_ID = new ContextKey_1.ContextKey('correlationId', 'x-correlation-id');
     /**
      * Turns on test-case recording for this request (Java: x-webpieces-recording).
-     * When present, the server records the endpoint + every downstream call it
-     * makes into a fixture that can be replayed as a test.
      * Transferred so recording follows the request across service hops.
      */
-    static RECORDING = new PlatformHeader_1.PlatformHeader('x-webpieces-recording', true, false, false);
+    static RECORDING = new ContextKey_1.ContextKey('recording', 'x-webpieces-recording');
     /**
-     * The bearer credential for an authenticated request. Carries BOTH a user-facing
-     * JWT (@AuthJwt, validated by the app AuthFilter) and a service-to-service Google
-     * OIDC token (@AuthOidc, validated by the framework ServiceAuthFilter) — the two
-     * modes are mutually exclusive per endpoint, so one header serves both. When a
-     * Cloud Task is delivered, Google injects the OIDC token here as `Authorization`.
-     * SECURED — masked in logs.
+     * The bearer credential for an authenticated request (user JWT or service OIDC
+     * token). Transferred and SECURED — masked in logs.
      */
-    static AUTHORIZATION = new PlatformHeader_1.PlatformHeader('authorization', true, // transfer into RequestContext
-    true, // SECURED - mask in logs
-    false);
+    static AUTHORIZATION = new ContextKey_1.ContextKey('authorization', 'authorization', /*isSecured*/ true);
     /**
-     * Shared-secret credential for internal callers that cannot mint OIDC tokens
-     * (@AuthSharedSecret, validated by ServiceAuthFilter via constant-time compare).
-     * SECURED — masked in logs.
+     * Shared-secret credential for internal callers that cannot mint OIDC tokens.
+     * Transferred and SECURED — masked in logs.
      */
-    static SHARED_SECRET = new PlatformHeader_1.PlatformHeader('x-webpieces-shared-secret', true, // transfer into RequestContext
-    true, // SECURED - mask in logs
-    false);
+    static SHARED_SECRET = new ContextKey_1.ContextKey('sharedSecret', 'x-webpieces-shared-secret', /*isSecured*/ true);
     /**
-     * Get all core headers as an array.
-     * Used by WebpiecesModule to bind headers to DI container.
-     *
-     * @returns Array of all core platform headers
+     * Get all core context keys as an array (the platform DEFAULT_HEADERS set).
      */
     static getAllHeaders() {
         return [

package/src/http/WebpiecesCoreHeaders.js.map

@@ -1 +1 @@
-{"version":3,"file":"WebpiecesCoreHeaders.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/http/WebpiecesCoreHeaders.ts"],"names":[],"mappings":";;;AAAA,qDAAkD;AAElD;;;;;;;;;;;GAWG;AACH,MAAa,oBAAoB;IAC7B;;;;OAIG;IACH,MAAM,CAAU,UAAU,GAAG,IAAI,+BAAc,CAC3C,cAAc,EACd,IAAI,EAAS,8CAA8C;IAC3D,KAAK,EAAQ,gCAAgC;IAC7C,IAAI,EAAS,6BAA6B;IAC1C,WAAW,CAAE,uCAAuC;KACvD,CAAC;IAEF;;;;OAIG;IACH,MAAM,CAAU,mBAAmB,GAAG,IAAI,+BAAc,CACpD,uBAAuB,EACvB,IAAI,EACJ,KAAK,EACL,KAAK,EACL,YAAY,CAAE,uCAAuC;KACxD,CAAC;IAEF;;;;OAIG;IACH,MAAM,CAAU,cAAc,GAAG,IAAI,+BAAc,CAC/C,kBAAkB,EAClB,IAAI,EACJ,KAAK,EACL,IAAI,EAAa,6BAA6B;IAC9C,eAAe,CAAE,UAAU;KAC9B,CAAC;IAEF;;;;;OAKG;IACH,MAAM,CAAU,SAAS,GAAG,IAAI,+BAAc,CAC1C,uBAAuB,EACvB,IAAI,EACJ,KAAK,EACL,KAAK,CACR,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,CAAU,aAAa,GAAG,IAAI,+BAAc,CAC9C,eAAe,EACf,IAAI,EAAI,+BAA+B;IACvC,IAAI,EAAI,yBAAyB;IACjC,KAAK,CACR,CAAC;IAEF;;;;OAIG;IACH,MAAM,CAAU,aAAa,GAAG,IAAI,+BAAc,CAC9C,2BAA2B,EAC3B,IAAI,EAAI,+BAA+B;IACvC,IAAI,EAAI,yBAAyB;IACjC,KAAK,CACR,CAAC;IAEF;;;;;OAKG;IACH,MAAM,CAAC,aAAa;QAChB,OAAO;YACH,oBAAoB,CAAC,UAAU;YAC/B,oBAAoB,CAAC,mBAAmB;YACxC,oBAAoB,CAAC,cAAc;YACnC,oBAAoB,CAAC,SAAS;YAC9B,oBAAoB,CAAC,aAAa;YAClC,oBAAoB,CAAC,aAAa;SACrC,CAAC;IACN,CAAC;;AA/FL,oDAgGC","sourcesContent":["import { PlatformHeader } from './PlatformHeader';\n\n/**\n * Core framework headers for distributed tracing and request correlation.\n *\n * These are the minimal headers needed by the WebPieces framework for:\n * - Request tracking across services\n * - Distributed tracing (REQUEST_ID -> PREVIOUS_REQUEST_ID chaining per hop)\n * - Request correlation\n * - Metrics and monitoring\n *\n * Pattern inspired by Java MicroSvcHeader enum. Lives in http-api (browser-safe)\n * so BOTH the http-client (request-id chaining) and http-server can reference it.\n */\nexport class WebpiecesCoreHeaders {\n    /**\n     * Unique ID for this request.\n     * Generated by the server if not provided.\n     * Used for distributed tracing and log correlation.\n     */\n    static readonly REQUEST_ID = new PlatformHeader(\n        'x-request-id',\n        true,        // transfer (propagate to downstream services)\n        false,       // not secured (it's just an ID)\n        true,        // use for metrics dimensions\n        'requestId'  // MDC key (Java MicroSvcHeader parity)\n    );\n\n    /**\n     * ID of the previous request in the call chain.\n     * When service A calls service B, B receives A's REQUEST_ID as PREVIOUS_REQUEST_ID.\n     * Used for building distributed trace trees.\n     */\n    static readonly PREVIOUS_REQUEST_ID = new PlatformHeader(\n        'x-previous-request-id',\n        true,\n        false,\n        false,\n        'previousId'  // MDC key (Java MicroSvcHeader parity)\n    );\n\n    /**\n     * Correlation ID that spans multiple related requests.\n     * Typically set by the API gateway or first service in the chain.\n     * All services in the call chain use the same CORRELATION_ID.\n     */\n    static readonly CORRELATION_ID = new PlatformHeader(\n        'x-correlation-id',\n        true,\n        false,\n        true,            // use for metrics dimensions\n        'correlationId'  // MDC key\n    );\n\n    /**\n     * Turns on test-case recording for this request (Java: x-webpieces-recording).\n     * When present, the server records the endpoint + every downstream call it\n     * makes into a fixture that can be replayed as a test.\n     * Transferred so recording follows the request across service hops.\n     */\n    static readonly RECORDING = new PlatformHeader(\n        'x-webpieces-recording',\n        true,\n        false,\n        false\n    );\n\n    /**\n     * The bearer credential for an authenticated request. Carries BOTH a user-facing\n     * JWT (@AuthJwt, validated by the app AuthFilter) and a service-to-service Google\n     * OIDC token (@AuthOidc, validated by the framework ServiceAuthFilter) — the two\n     * modes are mutually exclusive per endpoint, so one header serves both. When a\n     * Cloud Task is delivered, Google injects the OIDC token here as `Authorization`.\n     * SECURED — masked in logs.\n     */\n    static readonly AUTHORIZATION = new PlatformHeader(\n        'authorization',\n        true,   // transfer into RequestContext\n        true,   // SECURED - mask in logs\n        false\n    );\n\n    /**\n     * Shared-secret credential for internal callers that cannot mint OIDC tokens\n     * (@AuthSharedSecret, validated by ServiceAuthFilter via constant-time compare).\n     * SECURED — masked in logs.\n     */\n    static readonly SHARED_SECRET = new PlatformHeader(\n        'x-webpieces-shared-secret',\n        true,   // transfer into RequestContext\n        true,   // SECURED - mask in logs\n        false\n    );\n\n    /**\n     * Get all core headers as an array.\n     * Used by WebpiecesModule to bind headers to DI container.\n     *\n     * @returns Array of all core platform headers\n     */\n    static getAllHeaders(): PlatformHeader[] {\n        return [\n            WebpiecesCoreHeaders.REQUEST_ID,\n            WebpiecesCoreHeaders.PREVIOUS_REQUEST_ID,\n            WebpiecesCoreHeaders.CORRELATION_ID,\n            WebpiecesCoreHeaders.RECORDING,\n            WebpiecesCoreHeaders.AUTHORIZATION,\n            WebpiecesCoreHeaders.SHARED_SECRET,\n        ];\n    }\n}\n"]}
+{"version":3,"file":"WebpiecesCoreHeaders.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/http/WebpiecesCoreHeaders.ts"],"names":[],"mappings":";;;AAAA,8CAA2C;AAE3C;;;;;;;;;;;;;;;GAeG;AACH,MAAa,oBAAoB;IAC7B;;;OAGG;IACH,MAAM,CAAU,UAAU,GAAG,IAAI,uBAAU,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAEzE;;;OAGG;IACH,MAAM,CAAU,mBAAmB,GAAG,IAAI,uBAAU,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;IAE5F;;;OAGG;IACH,MAAM,CAAU,cAAc,GAAG,IAAI,uBAAU,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;IAErF;;;OAGG;IACH,MAAM,CAAU,SAAS,GAAG,IAAI,uBAAU,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IAEjF;;;OAGG;IACH,MAAM,CAAU,aAAa,GAAG,IAAI,uBAAU,CAAC,eAAe,EAAE,eAAe,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;IAErG;;;OAGG;IACH,MAAM,CAAU,aAAa,GAAG,IAAI,uBAAU,CAAC,cAAc,EAAE,2BAA2B,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;IAEhH;;OAEG;IACH,MAAM,CAAC,aAAa;QAChB,OAAO;YACH,oBAAoB,CAAC,UAAU;YAC/B,oBAAoB,CAAC,mBAAmB;YACxC,oBAAoB,CAAC,cAAc;YACnC,oBAAoB,CAAC,SAAS;YAC9B,oBAAoB,CAAC,aAAa;YAClC,oBAAoB,CAAC,aAAa;SACrC,CAAC;IACN,CAAC;;AAjDL,oDAkDC","sourcesContent":["import { ContextKey } from '../ContextKey';\n\n/**\n * Core framework context keys for distributed tracing and request correlation.\n *\n * These are the minimal keys the WebPieces framework needs for:\n * - Request tracking across services (REQUEST_ID -> PREVIOUS_REQUEST_ID chaining per hop)\n * - Request correlation\n * - Log correlation (each key logs under its `name`)\n *\n * Pattern inspired by Java MicroSvcHeader enum. Lives in core-util (browser-safe)\n * so BOTH the http-client (request-id chaining) and http-server can reference it.\n *\n * Exposed as {@link HeaderRegistry.DEFAULT_HEADERS} — a service opts into these by\n * passing `platformHeaders=true` to `HeaderRegistry.configure(...)`.\n *\n * Each key's `name` is the logical/log name; `httpHeader` is the wire name.\n */\nexport class WebpiecesCoreHeaders {\n    /**\n     * Unique ID for this request. Generated by the server if not provided.\n     * Transferred (propagates downstream) and logged under 'requestId'.\n     */\n    static readonly REQUEST_ID = new ContextKey('requestId', 'x-request-id');\n\n    /**\n     * ID of the previous request in the call chain. When service A calls B, B\n     * receives A's REQUEST_ID as PREVIOUS_REQUEST_ID (builds the trace tree).\n     */\n    static readonly PREVIOUS_REQUEST_ID = new ContextKey('previousId', 'x-previous-request-id');\n\n    /**\n     * Correlation ID spanning multiple related requests. Set by the gateway or\n     * first service; all hops in the chain share it.\n     */\n    static readonly CORRELATION_ID = new ContextKey('correlationId', 'x-correlation-id');\n\n    /**\n     * Turns on test-case recording for this request (Java: x-webpieces-recording).\n     * Transferred so recording follows the request across service hops.\n     */\n    static readonly RECORDING = new ContextKey('recording', 'x-webpieces-recording');\n\n    /**\n     * The bearer credential for an authenticated request (user JWT or service OIDC\n     * token). Transferred and SECURED — masked in logs.\n     */\n    static readonly AUTHORIZATION = new ContextKey('authorization', 'authorization', /*isSecured*/ true);\n\n    /**\n     * Shared-secret credential for internal callers that cannot mint OIDC tokens.\n     * Transferred and SECURED — masked in logs.\n     */\n    static readonly SHARED_SECRET = new ContextKey('sharedSecret', 'x-webpieces-shared-secret', /*isSecured*/ true);\n\n    /**\n     * Get all core context keys as an array (the platform DEFAULT_HEADERS set).\n     */\n    static getAllHeaders(): ContextKey[] {\n        return [\n            WebpiecesCoreHeaders.REQUEST_ID,\n            WebpiecesCoreHeaders.PREVIOUS_REQUEST_ID,\n            WebpiecesCoreHeaders.CORRELATION_ID,\n            WebpiecesCoreHeaders.RECORDING,\n            WebpiecesCoreHeaders.AUTHORIZATION,\n            WebpiecesCoreHeaders.SHARED_SECRET,\n        ];\n    }\n}\n"]}

package/src/http/recorder/TestCaseRecorder.js

@@ -10,7 +10,7 @@ class RecorderKeys {
      * Key under which the active TestCaseRecorder travels in the request
      * context. Absent = not recording.
      */
-    static RECORDER = new ContextKey_1.ContextKey('webpieces-recorder');
+    static RECORDER = new ContextKey_1.ContextKey('webpieces-recorder', undefined, false, /*isLogged*/ false);
 }
 exports.RecorderKeys = RecorderKeys;
 //# sourceMappingURL=TestCaseRecorder.js.map

package/src/http/recorder/TestCaseRecorder.js.map

@@ -1 +1 @@
-{"version":3,"file":"TestCaseRecorder.js","sourceRoot":"","sources":["../../../../../../../packages/core/core-util/src/http/recorder/TestCaseRecorder.ts"],"names":[],"mappings":";;;AAAA,iDAA8C;AA6B9C;;GAEG;AACH,MAAa,YAAY;IACrB;;;OAGG;IACH,MAAM,CAAU,QAAQ,GAAG,IAAI,uBAAU,CAAC,oBAAoB,CAAC,CAAC;;AALpE,oCAMC","sourcesContent":["import { ContextKey } from '../../ContextKey';\nimport { RecordedEndpoint } from './RecordedEndpoint';\n\n/**\n * TestCaseRecorder - Records every api call made while serving one inbound\n * request (port of Java TestCaseRecorder).\n *\n * The recorder travels in the request's magic context under\n * RecorderKeys.RECORDER (Java: Context RECORDER_KEY). Downstream hooks -\n * the HTTP client proxy and recordable() in-process wrappers - check the\n * context and record into it when present.\n *\n * The contract lives in http-api (browser-safe, no Node imports) so the\n * http-client can reference it; the implementation (TestCaseRecorderImpl)\n * lives in http-server.\n */\nexport interface TestCaseRecorder {\n    /**\n     * Record one downstream api call (outbound HTTP or in-process recordable).\n     */\n    addEndpointInfo(info: RecordedEndpoint): void;\n\n    /**\n     * The most recently recorded downstream call (for hooks that fill in the\n     * response after the call completes).\n     */\n    getLastEndpointInfo(): RecordedEndpoint | undefined;\n}\n\n/**\n * Context keys for the recording subsystem.\n */\nexport class RecorderKeys {\n    /**\n     * Key under which the active TestCaseRecorder travels in the request\n     * context. Absent = not recording.\n     */\n    static readonly RECORDER = new ContextKey('webpieces-recorder');\n}\n"]}
+{"version":3,"file":"TestCaseRecorder.js","sourceRoot":"","sources":["../../../../../../../packages/core/core-util/src/http/recorder/TestCaseRecorder.ts"],"names":[],"mappings":";;;AAAA,iDAA8C;AA6B9C;;GAEG;AACH,MAAa,YAAY;IACrB;;;OAGG;IACH,MAAM,CAAU,QAAQ,GAAG,IAAI,uBAAU,CAAC,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;;AAL1G,oCAMC","sourcesContent":["import { ContextKey } from '../../ContextKey';\nimport { RecordedEndpoint } from './RecordedEndpoint';\n\n/**\n * TestCaseRecorder - Records every api call made while serving one inbound\n * request (port of Java TestCaseRecorder).\n *\n * The recorder travels in the request's magic context under\n * RecorderKeys.RECORDER (Java: Context RECORDER_KEY). Downstream hooks -\n * the HTTP client proxy and recordable() in-process wrappers - check the\n * context and record into it when present.\n *\n * The contract lives in http-api (browser-safe, no Node imports) so the\n * http-client can reference it; the implementation (TestCaseRecorderImpl)\n * lives in http-server.\n */\nexport interface TestCaseRecorder {\n    /**\n     * Record one downstream api call (outbound HTTP or in-process recordable).\n     */\n    addEndpointInfo(info: RecordedEndpoint): void;\n\n    /**\n     * The most recently recorded downstream call (for hooks that fill in the\n     * response after the call completes).\n     */\n    getLastEndpointInfo(): RecordedEndpoint | undefined;\n}\n\n/**\n * Context keys for the recording subsystem.\n */\nexport class RecorderKeys {\n    /**\n     * Key under which the active TestCaseRecorder travels in the request\n     * context. Absent = not recording.\n     */\n    static readonly RECORDER = new ContextKey('webpieces-recorder', undefined, false, /*isLogged*/ false);\n}\n"]}

package/src/index.d.ts

@@ -7,7 +7,6 @@
  * @packageDocumentation
  */
 export { toError } from './lib/errorUtils';
-export { Header } from './Header';
 export { ContextKey } from './ContextKey';
 export { DocumentDesign, isDocumentDesign, DESIGN_METADATA_KEYS } from './DocumentDesign';
 export type { Logger, LogLevel } from './logging/Logger';
@@ -20,13 +19,10 @@ export type { AuthMode, ApiKind } from './http/decorators';
 export { ValidateImplementation } from './http/validators';
 export { ProtocolError, HttpError, HttpNotFoundError, EndpointNotFoundError, HttpBadRequestError, HttpUnauthorizedError, HttpForbiddenError, HttpTimeoutError, HttpBadGatewayError, HttpGatewayTimeoutError, HttpInternalServerError, HttpVendorError, HttpUserError, ENTITY_NOT_FOUND, WRONG_LOGIN_TYPE, WRONG_LOGIN, NOT_APPROVED, EMAIL_NOT_CONFIRMED, WRONG_DOMAIN, WRONG_COMPANY, NO_REG_CODE, } from './http/errors';
 export { InstantDto, DateDto, TimeDto, DateTimeDto, InstantUtil, DateUtil, TimeUtil, DateTimeUtil, } from './http/datetime';
-export { PlatformHeader } from './http/PlatformHeader';
-export { PlatformHeadersExtension } from './http/PlatformHeadersExtension';
 export { HeaderRegistry } from './http/HeaderRegistry';
 export { WebpiecesCoreHeaders } from './http/WebpiecesCoreHeaders';
 export { HeaderMethods } from './http/HeaderMethods';
 export { ContextReader } from './http/ContextReader';
-export { HEADER_TYPES } from './http/HeaderTypes';
 export { ContextMgr } from './http/ContextMgr';
 export { RequestIdChainProcessor } from './http/RequestIdChainProcessor';
 export { LogApiCall } from './http/LogApiCall';

package/src/index.js

@@ -9,7 +9,7 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NOT_APPROVED = exports.WRONG_LOGIN = exports.WRONG_LOGIN_TYPE = exports.ENTITY_NOT_FOUND = exports.HttpUserError = exports.HttpVendorError = exports.HttpInternalServerError = exports.HttpGatewayTimeoutError = exports.HttpBadGatewayError = exports.HttpTimeoutError = exports.HttpForbiddenError = exports.HttpUnauthorizedError = exports.HttpBadRequestError = exports.EndpointNotFoundError = exports.HttpNotFoundError = exports.HttpError = exports.ProtocolError = exports.METADATA_KEYS = exports.RouteMetadata = exports.AuthMeta = exports.validateNoConflictingDecorators = exports.getQueueName = exports.assertPubSubConventions = exports.assertApiKind = exports.getApiKind = exports.assertEveryEndpointHasAuthMode = exports.getAuthMode = exports.getAuthMeta = exports.isApiPath = exports.getEndpoints = exports.getApiPath = exports.Queue = exports.PubSub = exports.Rpc = exports.AuthSharedSecret = exports.AuthOidc = exports.AuthJwt = exports.Public = exports.AuthenticationConfig = exports.Authentication = exports.Endpoint = exports.ApiPath = exports.LogManager = exports.ConsoleLoggerFactory = exports.ConsoleLogger = exports.DESIGN_METADATA_KEYS = exports.isDocumentDesign = exports.DocumentDesign = exports.ContextKey = exports.toError = void 0;
-exports.SerializedError = exports.SerializedMap = exports.RecordSerializer = exports.getDoNotRecordFields = exports.DoNotRecord = exports.RecordedTestCase = exports.RecordedError = exports.RecordedEndpoint = exports.RecorderKeys = exports.LogApiCall = exports.RequestIdChainProcessor = exports.ContextMgr = exports.HEADER_TYPES = exports.HeaderMethods = exports.WebpiecesCoreHeaders = exports.HeaderRegistry = exports.PlatformHeadersExtension = exports.PlatformHeader = exports.DateTimeUtil = exports.TimeUtil = exports.DateUtil = exports.InstantUtil = exports.NO_REG_CODE = exports.WRONG_COMPANY = exports.WRONG_DOMAIN = exports.EMAIL_NOT_CONFIRMED = void 0;
+exports.SerializedError = exports.SerializedMap = exports.RecordSerializer = exports.getDoNotRecordFields = exports.DoNotRecord = exports.RecordedTestCase = exports.RecordedError = exports.RecordedEndpoint = exports.RecorderKeys = exports.LogApiCall = exports.RequestIdChainProcessor = exports.ContextMgr = exports.HeaderMethods = exports.WebpiecesCoreHeaders = exports.HeaderRegistry = exports.DateTimeUtil = exports.TimeUtil = exports.DateUtil = exports.InstantUtil = exports.NO_REG_CODE = exports.WRONG_COMPANY = exports.WRONG_DOMAIN = exports.EMAIL_NOT_CONFIRMED = void 0;
 var errorUtils_1 = require("./lib/errorUtils");
 Object.defineProperty(exports, "toError", { enumerable: true, get: function () { return errorUtils_1.toError; } });
 var ContextKey_1 = require("./ContextKey");
@@ -91,19 +91,13 @@ Object.defineProperty(exports, "InstantUtil", { enumerable: true, get: function
 Object.defineProperty(exports, "DateUtil", { enumerable: true, get: function () { return datetime_1.DateUtil; } });
 Object.defineProperty(exports, "TimeUtil", { enumerable: true, get: function () { return datetime_1.TimeUtil; } });
 Object.defineProperty(exports, "DateTimeUtil", { enumerable: true, get: function () { return datetime_1.DateTimeUtil; } });
-// Platform Headers
-var PlatformHeader_1 = require("./http/PlatformHeader");
-Object.defineProperty(exports, "PlatformHeader", { enumerable: true, get: function () { return PlatformHeader_1.PlatformHeader; } });
-var PlatformHeadersExtension_1 = require("./http/PlatformHeadersExtension");
-Object.defineProperty(exports, "PlatformHeadersExtension", { enumerable: true, get: function () { return PlatformHeadersExtension_1.PlatformHeadersExtension; } });
+// Context keys + registry (the global magic-context header system)
 var HeaderRegistry_1 = require("./http/HeaderRegistry");
 Object.defineProperty(exports, "HeaderRegistry", { enumerable: true, get: function () { return HeaderRegistry_1.HeaderRegistry; } });
 var WebpiecesCoreHeaders_1 = require("./http/WebpiecesCoreHeaders");
 Object.defineProperty(exports, "WebpiecesCoreHeaders", { enumerable: true, get: function () { return WebpiecesCoreHeaders_1.WebpiecesCoreHeaders; } });
 var HeaderMethods_1 = require("./http/HeaderMethods");
 Object.defineProperty(exports, "HeaderMethods", { enumerable: true, get: function () { return HeaderMethods_1.HeaderMethods; } });
-var HeaderTypes_1 = require("./http/HeaderTypes");
-Object.defineProperty(exports, "HEADER_TYPES", { enumerable: true, get: function () { return HeaderTypes_1.HEADER_TYPES; } });
 // Outbound-header machinery (context reader + registry -> outbound HTTP headers).
 // Browser-safe — the server-side reader (RequestContextReader) and browser store
 // (MutableContextStore) both implement ContextReader, so this lives here rather

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/core/core-util/src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;AAEH,+CAA2C;AAAlC,qGAAA,OAAO,OAAA;AAEhB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AAEnB,+EAA+E;AAC/E,kFAAkF;AAClF,yCAAyC;AACzC,mDAA0F;AAAjF,gHAAA,cAAc,OAAA;AAAE,kHAAA,gBAAgB,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAO/D,yDAAwD;AAA/C,8GAAA,aAAa,OAAA;AACtB,uEAAsE;AAA7D,4HAAA,oBAAoB,OAAA;AAC7B,mDAAkD;AAAzC,wGAAA,UAAU,OAAA;AAEnB,8DAA8D;AAC9D,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,kEAAkE;AAElE,4BAA4B;AAC5B,gDA4B2B;AA3BvB,qGAAA,OAAO,OAAA;AACP,sGAAA,QAAQ,OAAA;AACR,4GAAA,cAAc,OAAA;AACd,kHAAA,oBAAoB,OAAA;AACpB,mEAAmE;AACnE,oGAAA,MAAM,OAAA;AACN,qGAAA,OAAO,OAAA;AACP,sGAAA,QAAQ,OAAA;AACR,8GAAA,gBAAgB,OAAA;AAChB,sDAAsD;AACtD,iGAAA,GAAG,OAAA;AACH,oGAAA,MAAM,OAAA;AACN,mGAAA,KAAK,OAAA;AACL,wGAAA,UAAU,OAAA;AACV,0GAAA,YAAY,OAAA;AACZ,uGAAA,SAAS,OAAA;AACT,yGAAA,WAAW,OAAA;AACX,yGAAA,WAAW,OAAA;AACX,4HAAA,8BAA8B,OAAA;AAC9B,wGAAA,UAAU,OAAA;AACV,2GAAA,aAAa,OAAA;AACb,qHAAA,uBAAuB,OAAA;AACvB,0GAAA,YAAY,OAAA;AACZ,6HAAA,+BAA+B,OAAA;AAC/B,sGAAA,QAAQ,OAAA;AACR,2GAAA,aAAa,OAAA;AACb,2GAAA,aAAa,OAAA;AAOjB,cAAc;AACd,wCAuBuB;AAtBnB,uGAAA,aAAa,OAAA;AACb,mGAAA,SAAS,OAAA;AACT,2GAAA,iBAAiB,OAAA;AACjB,+GAAA,qBAAqB,OAAA;AACrB,6GAAA,mBAAmB,OAAA;AACnB,+GAAA,qBAAqB,OAAA;AACrB,4GAAA,kBAAkB,OAAA;AAClB,0GAAA,gBAAgB,OAAA;AAChB,6GAAA,mBAAmB,OAAA;AACnB,iHAAA,uBAAuB,OAAA;AACvB,iHAAA,uBAAuB,OAAA;AACvB,yGAAA,eAAe,OAAA;AACf,uGAAA,aAAa,OAAA;AACb,0BAA0B;AAC1B,0GAAA,gBAAgB,OAAA;AAChB,0GAAA,gBAAgB,OAAA;AAChB,qGAAA,WAAW,OAAA;AACX,sGAAA,YAAY,OAAA;AACZ,6GAAA,mBAAmB,OAAA;AACnB,sGAAA,YAAY,OAAA;AACZ,uGAAA,aAAa,OAAA;AACb,qGAAA,WAAW,OAAA;AAGf,iEAAiE;AACjE,4CASyB;AAJrB,uGAAA,WAAW,OAAA;AACX,oGAAA,QAAQ,OAAA;AACR,oGAAA,QAAQ,OAAA;AACR,wGAAA,YAAY,OAAA;AAGhB,mBAAmB;AACnB,wDAAuD;AAA9C,gHAAA,cAAc,OAAA;AACvB,4EAA2E;AAAlE,oIAAA,wBAAwB,OAAA;AACjC,wDAAuD;AAA9C,gHAAA,cAAc,OAAA;AACvB,oEAAmE;AAA1D,4HAAA,oBAAoB,OAAA;AAC7B,sDAAqD;AAA5C,8GAAA,aAAa,OAAA;AAEtB,kDAAkD;AAAzC,2GAAA,YAAY,OAAA;AAErB,kFAAkF;AAClF,iFAAiF;AACjF,gFAAgF;AAChF,oFAAoF;AACpF,gDAA+C;AAAtC,wGAAA,UAAU,OAAA;AACnB,0EAAyE;AAAhE,kIAAA,uBAAuB,OAAA;AAEhC,kDAAkD;AAClD,gDAA+C;AAAtC,wGAAA,UAAU,OAAA;AAEnB,iFAAiF;AACjF,qEAAkF;AAAvD,gHAAA,YAAY,OAAA;AACvC,qEAAqG;AAA5F,oHAAA,gBAAgB,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,oHAAA,gBAAgB,OAAA;AAC1D,2DAAgF;AAAvE,0GAAA,WAAW,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAC1C,qEAAoG;AAA3F,oHAAA,gBAAgB,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,mHAAA,eAAe,OAAA","sourcesContent":["/**\n * @webpieces/core-util\n *\n * Utility functions for WebPieces applications.\n * This package works in both browser and Node.js environments.\n *\n * @packageDocumentation\n */\n\nexport { toError } from './lib/errorUtils';\nexport { Header } from './Header';\nexport { ContextKey } from './ContextKey';\n\n// @DocumentDesign — DI-design-root marker. Applies to ANY project kind (server\n// controllers AND library impl classes), so it lives here (browser + Node) rather\n// than in a server-only routing package.\nexport { DocumentDesign, isDocumentDesign, DESIGN_METADATA_KEYS } from './DocumentDesign';\n\n// Logging (merged from former @webpieces/wp-logging).\n// Pluggable logging interface + a browser-safe console default; apps plug in\n// bunyan/winston/pino/etc. via LogManager.setFactory(...). Browser + Node.\nexport type { Logger, LogLevel } from './logging/Logger';\nexport type { LoggerFactory } from './logging/LoggerFactory';\nexport { ConsoleLogger } from './logging/ConsoleLogger';\nexport { ConsoleLoggerFactory } from './logging/ConsoleLoggerFactory';\nexport { LogManager } from './logging/LogManager';\n\n// HTTP API contract (merged from former @webpieces/http-api).\n// Shared HTTP API definition consumed by both client and server: REST\n// decorators, the HttpError hierarchy, datetime DTOs, platform-header\n// registry/readers, ValidateImplementation, and the test-case recorder\n// contract. Pure definitions — express-free, browser + Node safe.\n\n// API definition decorators\nexport {\n    ApiPath,\n    Endpoint,\n    Authentication,\n    AuthenticationConfig,\n    // Auth mode decorators (clean service-to-service + user JWT model)\n    Public,\n    AuthJwt,\n    AuthOidc,\n    AuthSharedSecret,\n    // API kind (RPC vs PubSub/Cloud Tasks) + queue naming\n    Rpc,\n    PubSub,\n    Queue,\n    getApiPath,\n    getEndpoints,\n    isApiPath,\n    getAuthMeta,\n    getAuthMode,\n    assertEveryEndpointHasAuthMode,\n    getApiKind,\n    assertApiKind,\n    assertPubSubConventions,\n    getQueueName,\n    validateNoConflictingDecorators,\n    AuthMeta,\n    RouteMetadata,\n    METADATA_KEYS,\n} from './http/decorators';\nexport type { AuthMode, ApiKind } from './http/decorators';\n\n// Type validators\nexport { ValidateImplementation } from './http/validators';\n\n// HTTP errors\nexport {\n    ProtocolError,\n    HttpError,\n    HttpNotFoundError,\n    EndpointNotFoundError,\n    HttpBadRequestError,\n    HttpUnauthorizedError,\n    HttpForbiddenError,\n    HttpTimeoutError,\n    HttpBadGatewayError,\n    HttpGatewayTimeoutError,\n    HttpInternalServerError,\n    HttpVendorError,\n    HttpUserError,\n    // Error subtype constants\n    ENTITY_NOT_FOUND,\n    WRONG_LOGIN_TYPE,\n    WRONG_LOGIN,\n    NOT_APPROVED,\n    EMAIL_NOT_CONFIRMED,\n    WRONG_DOMAIN,\n    WRONG_COMPANY,\n    NO_REG_CODE,\n} from './http/errors';\n\n// Date/Time DTOs and Utilities (inspired by Java Time / JSR-310)\nexport {\n    InstantDto,\n    DateDto,\n    TimeDto,\n    DateTimeDto,\n    InstantUtil,\n    DateUtil,\n    TimeUtil,\n    DateTimeUtil,\n} from './http/datetime';\n\n// Platform Headers\nexport { PlatformHeader } from './http/PlatformHeader';\nexport { PlatformHeadersExtension } from './http/PlatformHeadersExtension';\nexport { HeaderRegistry } from './http/HeaderRegistry';\nexport { WebpiecesCoreHeaders } from './http/WebpiecesCoreHeaders';\nexport { HeaderMethods } from './http/HeaderMethods';\nexport { ContextReader } from './http/ContextReader';\nexport { HEADER_TYPES } from './http/HeaderTypes';\n\n// Outbound-header machinery (context reader + registry -> outbound HTTP headers).\n// Browser-safe — the server-side reader (RequestContextReader) and browser store\n// (MutableContextStore) both implement ContextReader, so this lives here rather\n// than in the Node-only @webpieces/core-context (which re-exports for back-compat).\nexport { ContextMgr } from './http/ContextMgr';\nexport { RequestIdChainProcessor } from './http/RequestIdChainProcessor';\n\n// API-call logging helper (uses LogManager above)\nexport { LogApiCall } from './http/LogApiCall';\n\n// Test-case recording contract (impl lives in http-server; hooks in http-client)\nexport { TestCaseRecorder, RecorderKeys } from './http/recorder/TestCaseRecorder';\nexport { RecordedEndpoint, RecordedError, RecordedTestCase } from './http/recorder/RecordedEndpoint';\nexport { DoNotRecord, getDoNotRecordFields } from './http/recorder/DoNotRecord';\nexport { RecordSerializer, SerializedMap, SerializedError } from './http/recorder/RecordSerializer';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/core/core-util/src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;AAEH,+CAA2C;AAAlC,qGAAA,OAAO,OAAA;AAChB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AAEnB,+EAA+E;AAC/E,kFAAkF;AAClF,yCAAyC;AACzC,mDAA0F;AAAjF,gHAAA,cAAc,OAAA;AAAE,kHAAA,gBAAgB,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAO/D,yDAAwD;AAA/C,8GAAA,aAAa,OAAA;AACtB,uEAAsE;AAA7D,4HAAA,oBAAoB,OAAA;AAC7B,mDAAkD;AAAzC,wGAAA,UAAU,OAAA;AAEnB,8DAA8D;AAC9D,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,kEAAkE;AAElE,4BAA4B;AAC5B,gDA4B2B;AA3BvB,qGAAA,OAAO,OAAA;AACP,sGAAA,QAAQ,OAAA;AACR,4GAAA,cAAc,OAAA;AACd,kHAAA,oBAAoB,OAAA;AACpB,mEAAmE;AACnE,oGAAA,MAAM,OAAA;AACN,qGAAA,OAAO,OAAA;AACP,sGAAA,QAAQ,OAAA;AACR,8GAAA,gBAAgB,OAAA;AAChB,sDAAsD;AACtD,iGAAA,GAAG,OAAA;AACH,oGAAA,MAAM,OAAA;AACN,mGAAA,KAAK,OAAA;AACL,wGAAA,UAAU,OAAA;AACV,0GAAA,YAAY,OAAA;AACZ,uGAAA,SAAS,OAAA;AACT,yGAAA,WAAW,OAAA;AACX,yGAAA,WAAW,OAAA;AACX,4HAAA,8BAA8B,OAAA;AAC9B,wGAAA,UAAU,OAAA;AACV,2GAAA,aAAa,OAAA;AACb,qHAAA,uBAAuB,OAAA;AACvB,0GAAA,YAAY,OAAA;AACZ,6HAAA,+BAA+B,OAAA;AAC/B,sGAAA,QAAQ,OAAA;AACR,2GAAA,aAAa,OAAA;AACb,2GAAA,aAAa,OAAA;AAOjB,cAAc;AACd,wCAuBuB;AAtBnB,uGAAA,aAAa,OAAA;AACb,mGAAA,SAAS,OAAA;AACT,2GAAA,iBAAiB,OAAA;AACjB,+GAAA,qBAAqB,OAAA;AACrB,6GAAA,mBAAmB,OAAA;AACnB,+GAAA,qBAAqB,OAAA;AACrB,4GAAA,kBAAkB,OAAA;AAClB,0GAAA,gBAAgB,OAAA;AAChB,6GAAA,mBAAmB,OAAA;AACnB,iHAAA,uBAAuB,OAAA;AACvB,iHAAA,uBAAuB,OAAA;AACvB,yGAAA,eAAe,OAAA;AACf,uGAAA,aAAa,OAAA;AACb,0BAA0B;AAC1B,0GAAA,gBAAgB,OAAA;AAChB,0GAAA,gBAAgB,OAAA;AAChB,qGAAA,WAAW,OAAA;AACX,sGAAA,YAAY,OAAA;AACZ,6GAAA,mBAAmB,OAAA;AACnB,sGAAA,YAAY,OAAA;AACZ,uGAAA,aAAa,OAAA;AACb,qGAAA,WAAW,OAAA;AAGf,iEAAiE;AACjE,4CASyB;AAJrB,uGAAA,WAAW,OAAA;AACX,oGAAA,QAAQ,OAAA;AACR,oGAAA,QAAQ,OAAA;AACR,wGAAA,YAAY,OAAA;AAGhB,mEAAmE;AACnE,wDAAuD;AAA9C,gHAAA,cAAc,OAAA;AACvB,oEAAmE;AAA1D,4HAAA,oBAAoB,OAAA;AAC7B,sDAAqD;AAA5C,8GAAA,aAAa,OAAA;AAGtB,kFAAkF;AAClF,iFAAiF;AACjF,gFAAgF;AAChF,oFAAoF;AACpF,gDAA+C;AAAtC,wGAAA,UAAU,OAAA;AACnB,0EAAyE;AAAhE,kIAAA,uBAAuB,OAAA;AAEhC,kDAAkD;AAClD,gDAA+C;AAAtC,wGAAA,UAAU,OAAA;AAEnB,iFAAiF;AACjF,qEAAkF;AAAvD,gHAAA,YAAY,OAAA;AACvC,qEAAqG;AAA5F,oHAAA,gBAAgB,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,oHAAA,gBAAgB,OAAA;AAC1D,2DAAgF;AAAvE,0GAAA,WAAW,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAC1C,qEAAoG;AAA3F,oHAAA,gBAAgB,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,mHAAA,eAAe,OAAA","sourcesContent":["/**\n * @webpieces/core-util\n *\n * Utility functions for WebPieces applications.\n * This package works in both browser and Node.js environments.\n *\n * @packageDocumentation\n */\n\nexport { toError } from './lib/errorUtils';\nexport { ContextKey } from './ContextKey';\n\n// @DocumentDesign — DI-design-root marker. Applies to ANY project kind (server\n// controllers AND library impl classes), so it lives here (browser + Node) rather\n// than in a server-only routing package.\nexport { DocumentDesign, isDocumentDesign, DESIGN_METADATA_KEYS } from './DocumentDesign';\n\n// Logging (merged from former @webpieces/wp-logging).\n// Pluggable logging interface + a browser-safe console default; apps plug in\n// bunyan/winston/pino/etc. via LogManager.setFactory(...). Browser + Node.\nexport type { Logger, LogLevel } from './logging/Logger';\nexport type { LoggerFactory } from './logging/LoggerFactory';\nexport { ConsoleLogger } from './logging/ConsoleLogger';\nexport { ConsoleLoggerFactory } from './logging/ConsoleLoggerFactory';\nexport { LogManager } from './logging/LogManager';\n\n// HTTP API contract (merged from former @webpieces/http-api).\n// Shared HTTP API definition consumed by both client and server: REST\n// decorators, the HttpError hierarchy, datetime DTOs, platform-header\n// registry/readers, ValidateImplementation, and the test-case recorder\n// contract. Pure definitions — express-free, browser + Node safe.\n\n// API definition decorators\nexport {\n    ApiPath,\n    Endpoint,\n    Authentication,\n    AuthenticationConfig,\n    // Auth mode decorators (clean service-to-service + user JWT model)\n    Public,\n    AuthJwt,\n    AuthOidc,\n    AuthSharedSecret,\n    // API kind (RPC vs PubSub/Cloud Tasks) + queue naming\n    Rpc,\n    PubSub,\n    Queue,\n    getApiPath,\n    getEndpoints,\n    isApiPath,\n    getAuthMeta,\n    getAuthMode,\n    assertEveryEndpointHasAuthMode,\n    getApiKind,\n    assertApiKind,\n    assertPubSubConventions,\n    getQueueName,\n    validateNoConflictingDecorators,\n    AuthMeta,\n    RouteMetadata,\n    METADATA_KEYS,\n} from './http/decorators';\nexport type { AuthMode, ApiKind } from './http/decorators';\n\n// Type validators\nexport { ValidateImplementation } from './http/validators';\n\n// HTTP errors\nexport {\n    ProtocolError,\n    HttpError,\n    HttpNotFoundError,\n    EndpointNotFoundError,\n    HttpBadRequestError,\n    HttpUnauthorizedError,\n    HttpForbiddenError,\n    HttpTimeoutError,\n    HttpBadGatewayError,\n    HttpGatewayTimeoutError,\n    HttpInternalServerError,\n    HttpVendorError,\n    HttpUserError,\n    // Error subtype constants\n    ENTITY_NOT_FOUND,\n    WRONG_LOGIN_TYPE,\n    WRONG_LOGIN,\n    NOT_APPROVED,\n    EMAIL_NOT_CONFIRMED,\n    WRONG_DOMAIN,\n    WRONG_COMPANY,\n    NO_REG_CODE,\n} from './http/errors';\n\n// Date/Time DTOs and Utilities (inspired by Java Time / JSR-310)\nexport {\n    InstantDto,\n    DateDto,\n    TimeDto,\n    DateTimeDto,\n    InstantUtil,\n    DateUtil,\n    TimeUtil,\n    DateTimeUtil,\n} from './http/datetime';\n\n// Context keys + registry (the global magic-context header system)\nexport { HeaderRegistry } from './http/HeaderRegistry';\nexport { WebpiecesCoreHeaders } from './http/WebpiecesCoreHeaders';\nexport { HeaderMethods } from './http/HeaderMethods';\nexport { ContextReader } from './http/ContextReader';\n\n// Outbound-header machinery (context reader + registry -> outbound HTTP headers).\n// Browser-safe — the server-side reader (RequestContextReader) and browser store\n// (MutableContextStore) both implement ContextReader, so this lives here rather\n// than in the Node-only @webpieces/core-context (which re-exports for back-compat).\nexport { ContextMgr } from './http/ContextMgr';\nexport { RequestIdChainProcessor } from './http/RequestIdChainProcessor';\n\n// API-call logging helper (uses LogManager above)\nexport { LogApiCall } from './http/LogApiCall';\n\n// Test-case recording contract (impl lives in http-server; hooks in http-client)\nexport { TestCaseRecorder, RecorderKeys } from './http/recorder/TestCaseRecorder';\nexport { RecordedEndpoint, RecordedError, RecordedTestCase } from './http/recorder/RecordedEndpoint';\nexport { DoNotRecord, getDoNotRecordFields } from './http/recorder/DoNotRecord';\nexport { RecordSerializer, SerializedMap, SerializedError } from './http/recorder/RecordSerializer';\n"]}

package/src/logging/LogManager.d.ts

@@ -29,6 +29,11 @@ export declare class LogManager {
      * Install the process-wide logging backend. Call once at app startup. Loggers
      * already handed out via {@link getLogger} switch to it immediately (they are
      * deferred facades), so import-time loggers are covered too.
+     *
+     * FAIL-FAST ORDERING: {@link HeaderRegistry} MUST be configured first — logging
+     * masks secured values and keys log lines off the registry's context keys, so a
+     * factory installed before the registry exists would log an incomplete/incorrect
+     * context. We log + throw rather than silently mis-log.
      */
     static setFactory(factory: LoggerFactory): void;
     /** Get a named logger (a stable deferred facade over the current backend). */

package/src/logging/LogManager.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogManager = void 0;
 const ConsoleLoggerFactory_1 = require("./ConsoleLoggerFactory");
+const HeaderRegistry_1 = require("../http/HeaderRegistry");
 /**
  * A stable per-name facade that re-resolves the currently installed factory on
  * EVERY call. This is why a module-scope `const log = LogManager.getLogger('X')`
@@ -60,8 +61,20 @@ class LogManager {
      * Install the process-wide logging backend. Call once at app startup. Loggers
      * already handed out via {@link getLogger} switch to it immediately (they are
      * deferred facades), so import-time loggers are covered too.
+     *
+     * FAIL-FAST ORDERING: {@link HeaderRegistry} MUST be configured first — logging
+     * masks secured values and keys log lines off the registry's context keys, so a
+     * factory installed before the registry exists would log an incomplete/incorrect
+     * context. We log + throw rather than silently mis-log.
      */
     static setFactory(factory) {
+        if (!HeaderRegistry_1.HeaderRegistry.isConfigured()) {
+            const msg = 'HeaderRegistry.configure(...) MUST be called before LogManager.setFactory(...) — ' +
+                'the registry defines which context keys are logged and which are masked.';
+            // Log via the current (bootstrap console) backend, then fail fast.
+            LogManager.resolveBackend('LogManager').error(msg);
+            throw new Error(msg);
+        }
         LogManager.factory = factory;
     }
     /** Get a named logger (a stable deferred facade over the current backend). */

package/src/logging/LogManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"LogManager.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/logging/LogManager.ts"],"names":[],"mappings":";;;AAEA,iEAA8D;AAE9D;;;;;;;GAOG;AACH,MAAM,cAAc;IACa;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAW;QAC7B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAW;QAC7B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;CACJ;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAa,UAAU;IACX,MAAM,CAAC,OAAO,GAAkB,IAAI,2CAAoB,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAU,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7D;;;;OAIG;IACH,MAAM,CAAC,UAAU,CAAC,OAAsB;QACpC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IACjC,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,SAAS,CAAC,IAAY;QACzB,IAAI,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;YAClC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,UAAU;QACb,OAAO,UAAU,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,yFAAyF;IACzF,MAAM,CAAC,cAAc,CAAC,IAAY;QAC9B,OAAO,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;;AA/BL,gCAgCC","sourcesContent":["import { Logger } from './Logger';\nimport { LoggerFactory } from './LoggerFactory';\nimport { ConsoleLoggerFactory } from './ConsoleLoggerFactory';\n\n/**\n * A stable per-name facade that re-resolves the currently installed factory on\n * EVERY call. This is why a module-scope `const log = LogManager.getLogger('X')`\n * captured at import time (before the app runs) still starts using the real\n * backend the instant `LogManager.setFactory(...)` installs it — and the bootstrap\n * AWAITING banner disappears. Backends cache their concrete logger per name, so\n * this indirection is a cheap Map lookup.\n */\nclass DeferredLogger implements Logger {\n    constructor(private readonly name: string) {}\n\n    trace(message: string, err?: Error): void {\n        LogManager.resolveBackend(this.name).trace(message, err);\n    }\n\n    debug(message: string, err?: Error): void {\n        LogManager.resolveBackend(this.name).debug(message, err);\n    }\n\n    info(message: string, err?: Error): void {\n        LogManager.resolveBackend(this.name).info(message, err);\n    }\n\n    warn(message: string, err?: Error): void {\n        LogManager.resolveBackend(this.name).warn(message, err);\n    }\n\n    error(message: string, err?: Error): void {\n        LogManager.resolveBackend(this.name).error(message, err);\n    }\n}\n\n/**\n * LogManager - the global, slf4j-style entry point for logging.\n *\n * Every call site in the codebase does:\n *\n * ```ts\n * const log = LogManager.getLogger('MyClass');\n * log.info('did the thing');\n * log.error('it failed', err); // err?: Error — the ONLY extra arg\n * ```\n *\n * and never knows which backend is behind it. Apps choose their backend ONCE at\n * startup by installing a {@link LoggerFactory}:\n *\n * ```ts\n * LogManager.setFactory(new BunyanLoggerFactory(...)); // node-only app\n * ```\n *\n * Until one is installed, logging goes to a bootstrap {@link ConsoleLoggerFactory}\n * that prefixes every line with an AWAITING banner (so a forgotten `setFactory` is\n * obvious). See `.webpieces/instruct-ai/webpieces.logging.md`.\n */\nexport class LogManager {\n    private static factory: LoggerFactory = new ConsoleLoggerFactory(true);\n    private static readonly deferred = new Map<string, Logger>();\n\n    /**\n     * Install the process-wide logging backend. Call once at app startup. Loggers\n     * already handed out via {@link getLogger} switch to it immediately (they are\n     * deferred facades), so import-time loggers are covered too.\n     */\n    static setFactory(factory: LoggerFactory): void {\n        LogManager.factory = factory;\n    }\n\n    /** Get a named logger (a stable deferred facade over the current backend). */\n    static getLogger(name: string): Logger {\n        let logger = LogManager.deferred.get(name);\n        if (!logger) {\n            logger = new DeferredLogger(name);\n            LogManager.deferred.set(name, logger);\n        }\n        return logger;\n    }\n\n    /** The currently installed factory (mainly for tests / diagnostics). */\n    static getFactory(): LoggerFactory {\n        return LogManager.factory;\n    }\n\n    /** Internal: resolve the concrete backend logger for a name (used by DeferredLogger). */\n    static resolveBackend(name: string): Logger {\n        return LogManager.factory.getLogger(name);\n    }\n}\n"]}
+{"version":3,"file":"LogManager.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/logging/LogManager.ts"],"names":[],"mappings":";;;AAEA,iEAA8D;AAC9D,2DAAwD;AAExD;;;;;;;GAOG;AACH,MAAM,cAAc;IACa;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAW;QAC7B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAW;QAC7B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;CACJ;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAa,UAAU;IACX,MAAM,CAAC,OAAO,GAAkB,IAAI,2CAAoB,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAU,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7D;;;;;;;;;OASG;IACH,MAAM,CAAC,UAAU,CAAC,OAAsB;QACpC,IAAI,CAAC,+BAAc,CAAC,YAAY,EAAE,EAAE,CAAC;YACjC,MAAM,GAAG,GACL,mFAAmF;gBACnF,0EAA0E,CAAC;YAC/E,mEAAmE;YACnE,UAAU,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IACjC,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,SAAS,CAAC,IAAY;QACzB,IAAI,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;YAClC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,UAAU;QACb,OAAO,UAAU,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,yFAAyF;IACzF,MAAM,CAAC,cAAc,CAAC,IAAY;QAC9B,OAAO,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;;AA5CL,gCA6CC","sourcesContent":["import { Logger } from './Logger';\nimport { LoggerFactory } from './LoggerFactory';\nimport { ConsoleLoggerFactory } from './ConsoleLoggerFactory';\nimport { HeaderRegistry } from '../http/HeaderRegistry';\n\n/**\n * A stable per-name facade that re-resolves the currently installed factory on\n * EVERY call. This is why a module-scope `const log = LogManager.getLogger('X')`\n * captured at import time (before the app runs) still starts using the real\n * backend the instant `LogManager.setFactory(...)` installs it — and the bootstrap\n * AWAITING banner disappears. Backends cache their concrete logger per name, so\n * this indirection is a cheap Map lookup.\n */\nclass DeferredLogger implements Logger {\n    constructor(private readonly name: string) {}\n\n    trace(message: string, err?: Error): void {\n        LogManager.resolveBackend(this.name).trace(message, err);\n    }\n\n    debug(message: string, err?: Error): void {\n        LogManager.resolveBackend(this.name).debug(message, err);\n    }\n\n    info(message: string, err?: Error): void {\n        LogManager.resolveBackend(this.name).info(message, err);\n    }\n\n    warn(message: string, err?: Error): void {\n        LogManager.resolveBackend(this.name).warn(message, err);\n    }\n\n    error(message: string, err?: Error): void {\n        LogManager.resolveBackend(this.name).error(message, err);\n    }\n}\n\n/**\n * LogManager - the global, slf4j-style entry point for logging.\n *\n * Every call site in the codebase does:\n *\n * ```ts\n * const log = LogManager.getLogger('MyClass');\n * log.info('did the thing');\n * log.error('it failed', err); // err?: Error — the ONLY extra arg\n * ```\n *\n * and never knows which backend is behind it. Apps choose their backend ONCE at\n * startup by installing a {@link LoggerFactory}:\n *\n * ```ts\n * LogManager.setFactory(new BunyanLoggerFactory(...)); // node-only app\n * ```\n *\n * Until one is installed, logging goes to a bootstrap {@link ConsoleLoggerFactory}\n * that prefixes every line with an AWAITING banner (so a forgotten `setFactory` is\n * obvious). See `.webpieces/instruct-ai/webpieces.logging.md`.\n */\nexport class LogManager {\n    private static factory: LoggerFactory = new ConsoleLoggerFactory(true);\n    private static readonly deferred = new Map<string, Logger>();\n\n    /**\n     * Install the process-wide logging backend. Call once at app startup. Loggers\n     * already handed out via {@link getLogger} switch to it immediately (they are\n     * deferred facades), so import-time loggers are covered too.\n     *\n     * FAIL-FAST ORDERING: {@link HeaderRegistry} MUST be configured first — logging\n     * masks secured values and keys log lines off the registry's context keys, so a\n     * factory installed before the registry exists would log an incomplete/incorrect\n     * context. We log + throw rather than silently mis-log.\n     */\n    static setFactory(factory: LoggerFactory): void {\n        if (!HeaderRegistry.isConfigured()) {\n            const msg =\n                'HeaderRegistry.configure(...) MUST be called before LogManager.setFactory(...) — ' +\n                'the registry defines which context keys are logged and which are masked.';\n            // Log via the current (bootstrap console) backend, then fail fast.\n            LogManager.resolveBackend('LogManager').error(msg);\n            throw new Error(msg);\n        }\n        LogManager.factory = factory;\n    }\n\n    /** Get a named logger (a stable deferred facade over the current backend). */\n    static getLogger(name: string): Logger {\n        let logger = LogManager.deferred.get(name);\n        if (!logger) {\n            logger = new DeferredLogger(name);\n            LogManager.deferred.set(name, logger);\n        }\n        return logger;\n    }\n\n    /** The currently installed factory (mainly for tests / diagnostics). */\n    static getFactory(): LoggerFactory {\n        return LogManager.factory;\n    }\n\n    /** Internal: resolve the concrete backend logger for a name (used by DeferredLogger). */\n    static resolveBackend(name: string): Logger {\n        return LogManager.factory.getLogger(name);\n    }\n}\n"]}

package/src/Header.d.ts

@@ -1,22 +0,0 @@
-/**
- * Header - Interface for HTTP header definitions.
- *
- * This interface is defined in core-util (lowest level package) to avoid
- * circular dependencies. core-context depends on this interface, while
- * http-api's PlatformHeader implements it.
- *
- * Dependency hierarchy:
- * - core-util (defines Header interface)
- * - core-context (uses Header interface)
- * - http-api (PlatformHeader implements Header)
- *
- * This allows RequestContext to work with headers without depending on
- * higher-level packages like http-api.
- */
-export interface Header {
-    /**
-     * Get the HTTP header name (e.g., 'x-request-id', 'Authorization').
-     * Also used as the key in RequestContext storage.
-     */
-    getHeaderName(): string;
-}

package/src/Header.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=Header.js.map

package/src/Header.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Header.js","sourceRoot":"","sources":["../../../../../packages/core/core-util/src/Header.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * Header - Interface for HTTP header definitions.\n *\n * This interface is defined in core-util (lowest level package) to avoid\n * circular dependencies. core-context depends on this interface, while\n * http-api's PlatformHeader implements it.\n *\n * Dependency hierarchy:\n * - core-util (defines Header interface)\n * - core-context (uses Header interface)\n * - http-api (PlatformHeader implements Header)\n *\n * This allows RequestContext to work with headers without depending on\n * higher-level packages like http-api.\n */\nexport interface Header {\n    /**\n     * Get the HTTP header name (e.g., 'x-request-id', 'Authorization').\n     * Also used as the key in RequestContext storage.\n     */\n    getHeaderName(): string;\n}\n"]}

package/src/http/HeaderTypes.d.ts

@@ -1,29 +0,0 @@
-/**
- * DI symbols for platform headers system.
- *
- * Uses Symbol.for() to create global symbols that work across module boundaries.
- * This is important for Inversify multiInject pattern where multiple modules
- * bind to the same symbol.
- */
-export declare const HEADER_TYPES: {
-    /**
-     * Symbol for PlatformHeadersExtension instances.
-     * Multiple modules can bind PlatformHeadersExtension instances to this symbol,
-     * and consumers can use @multiInject to collect all of them.
-     *
-     * Pattern: Extension (DI-level) vs Plugin (App-level)
-     * - Extensions contribute specific capabilities to framework (headers, converters, etc.)
-     * - Plugins provide complete features with modules + routes (Hibernate, Jackson, etc.)
-     *
-     * Usage:
-     * ```typescript
-     * // In a module
-     * const extension = new PlatformHeadersExtension([header1, header2]);
-     * bind<PlatformHeadersExtension>(HEADER_TYPES.PlatformHeadersExtension).toConstantValue(extension);
-     *
-     * // In a consumer
-     * constructor(@multiInject(HEADER_TYPES.PlatformHeadersExtension) extensions: PlatformHeadersExtension[]) {}
-     * ```
-     */
-    PlatformHeadersExtension: symbol;
-};

package/src/http/HeaderTypes.js

@@ -1,33 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HEADER_TYPES = void 0;
-/**
- * DI symbols for platform headers system.
- *
- * Uses Symbol.for() to create global symbols that work across module boundaries.
- * This is important for Inversify multiInject pattern where multiple modules
- * bind to the same symbol.
- */
-exports.HEADER_TYPES = {
-    /**
-     * Symbol for PlatformHeadersExtension instances.
-     * Multiple modules can bind PlatformHeadersExtension instances to this symbol,
-     * and consumers can use @multiInject to collect all of them.
-     *
-     * Pattern: Extension (DI-level) vs Plugin (App-level)
-     * - Extensions contribute specific capabilities to framework (headers, converters, etc.)
-     * - Plugins provide complete features with modules + routes (Hibernate, Jackson, etc.)
-     *
-     * Usage:
-     * ```typescript
-     * // In a module
-     * const extension = new PlatformHeadersExtension([header1, header2]);
-     * bind<PlatformHeadersExtension>(HEADER_TYPES.PlatformHeadersExtension).toConstantValue(extension);
-     *
-     * // In a consumer
-     * constructor(@multiInject(HEADER_TYPES.PlatformHeadersExtension) extensions: PlatformHeadersExtension[]) {}
-     * ```
-     */
-    PlatformHeadersExtension: Symbol.for('PlatformHeadersExtension'),
-};
-//# sourceMappingURL=HeaderTypes.js.map

package/src/http/HeaderTypes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"HeaderTypes.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/http/HeaderTypes.ts"],"names":[],"mappings":";;;AAAA;;;;;;GAMG;AACU,QAAA,YAAY,GAAG;IACxB;;;;;;;;;;;;;;;;;;OAkBG;IACH,wBAAwB,EAAE,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC;CACnE,CAAC","sourcesContent":["/**\n * DI symbols for platform headers system.\n *\n * Uses Symbol.for() to create global symbols that work across module boundaries.\n * This is important for Inversify multiInject pattern where multiple modules\n * bind to the same symbol.\n */\nexport const HEADER_TYPES = {\n    /**\n     * Symbol for PlatformHeadersExtension instances.\n     * Multiple modules can bind PlatformHeadersExtension instances to this symbol,\n     * and consumers can use @multiInject to collect all of them.\n     *\n     * Pattern: Extension (DI-level) vs Plugin (App-level)\n     * - Extensions contribute specific capabilities to framework (headers, converters, etc.)\n     * - Plugins provide complete features with modules + routes (Hibernate, Jackson, etc.)\n     *\n     * Usage:\n     * ```typescript\n     * // In a module\n     * const extension = new PlatformHeadersExtension([header1, header2]);\n     * bind<PlatformHeadersExtension>(HEADER_TYPES.PlatformHeadersExtension).toConstantValue(extension);\n     *\n     * // In a consumer\n     * constructor(@multiInject(HEADER_TYPES.PlatformHeadersExtension) extensions: PlatformHeadersExtension[]) {}\n     * ```\n     */\n    PlatformHeadersExtension: Symbol.for('PlatformHeadersExtension'),\n};\n"]}

package/src/http/PlatformHeader.d.ts

@@ -1,51 +0,0 @@
-import { Header } from '../Header';
-/**
- * PlatformHeader - Defines an HTTP header that can be transferred between services.
- *
- * Port of Java PlatformHeaders, simplified:
- * - No isWantLogged flag (deprecated in Java) - "wants MDC logging" is expressed
- *   by setting loggerMdcKey. Headers without one still appear in API logs
- *   (masked when isSecured); they just aren't exposed as an MDC dimension key.
- *
- * Implements Header interface from core-util to avoid circular dependencies.
- *
- * Per CLAUDE.md: "All data-only structures MUST be classes, not interfaces."
- * This is a data-only class with no business logic methods.
- */
-export declare class PlatformHeader implements Header {
-    /**
-     * The HTTP header name (e.g., 'x-request-id', 'x-tenant-id').
-     * Also used as the MDC logging key in RequestContext.
-     * Case-insensitive per HTTP spec, but stored in canonical form.
-     */
-    readonly headerName: string;
-    /**
-     * Whether this header should be transferred from HTTP request to RequestContext.
-     * If false, header is defined but not automatically transferred.
-     * Only headers with isWantTransferred=true are copied from incoming requests.
-     */
-    readonly isWantTransferred: boolean;
-    /**
-     * Whether this header contains sensitive data that should be secured/masked in logs.
-     * Examples: Authorization tokens, passwords, API keys.
-     */
-    readonly isSecured: boolean;
-    /**
-     * Whether this header should be used as a dimension for metrics/monitoring.
-     * Examples: x-tenant-id, x-request-id (for distributed tracing).
-     */
-    readonly isDimensionForMetrics: boolean;
-    /**
-     * Key used when exposing this header to the logger's MDC / structured log
-     * dimensions. Port of Java getLoggerMDCKey(). When set, log maps key this
-     * header by it instead of headerName (e.g. 'requestId' vs 'x-request-id').
-     * Undefined = not an MDC dimension (Java: getLoggerMDCKey() == null).
-     */
-    readonly loggerMdcKey?: string;
-    constructor(headerName: string, isWantTransferred?: boolean, isSecured?: boolean, isDimensionForMetrics?: boolean, loggerMdcKey?: string);
-    /**
-     * Get the header name (implements Header interface).
-     * @returns The HTTP header name
-     */
-    getHeaderName(): string;
-}