@webpieces/core-util 0.4.759 → 0.4.761

package/src/index.d.ts

@@ -17,7 +17,9 @@ export { ConsoleLogger } from './logging/ConsoleLogger';
 export { ConsoleLoggerFactory } from './logging/ConsoleLoggerFactory';
 export { LogManager } from './logging/LogManager';
 export { LogChunker, LogChunkerImpl, LogChunkInfo, MAX_GCP_LOG_BYTES, GCP_LOG_BUDGET_BYTES, } from './logging/LogChunker';
-export { ApiPath, Endpoint, Public, AuthJwt, rolesRequired, MISSING_AUTH_DECORATOR_FIX, AuthOidc, AuthSharedSecret, AuthWebhook, AuthApiKey, AuthLocalOnly, MaskLog, getApiPath, getEndpoints, getEndpointOptions, getEndpointKind, getEndpointKinds, getMaskSpec, isFormPost, isRawBody, isApiPath, getAuthMeta, getAuthMode, assertEveryEndpointHasAuthMode, assertEveryExternalEndpointDeclaresCaller, assertEveryWebhookEndpointRetainsRawBody, validateNoConflictingDecorators, METADATA_KEYS, } from './http/decorators';
+export { ApiPath, Endpoint, WpAuthPublic, WpAuthJwt, rolesRequired, MISSING_AUTH_DECORATOR_FIX, WpAuthOidc, WpAuthSharedSecret, WpAuthWebhook, WpAuthApiKey, WpAuthLocalOnly, MaskLog, getApiPath, getEndpoints, getEndpointOptions, getEndpointKind, getEndpointKinds, getMaskSpec, isFormPost, isRawBody, isApiPath, getAuthMeta, getAuthMode, assertEveryEndpointHasAuthMode, assertEveryExternalEndpointDeclaresCaller, assertEveryWebhookEndpointRetainsRawBody, validateNoConflictingDecorators, METADATA_KEYS, } from './http/decorators';
+export { WpInternal, WpIpcEndpoint, isInternalApi, getIpcApiId, getIpcEndpoints, getIpcEndpointKind, getIpcMaskSpec, assertInternalApi, assertNotInternalApi, IPC_METADATA_KEYS, } from './ipc/IpcDecorators';
+export type { IpcApiType, IpcEndpointKind, IpcEndpointOptions } from './ipc/IpcDecorators';
 export { RouteMetadata } from './http/RouteMetadata';
 export type { EndpointKind, EndpointOptions, ExternalEndpointOptions } from './http/decorators';
 export { AuthMeta } from './http/auth-mode';

package/src/index.js

@@ -8,9 +8,9 @@
  * @packageDocumentation
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertApiKind = exports.getApiKind = exports.ENDPOINT_KINDS_BY_API_KIND = exports.Queue = exports.PubSub = exports.Rpc = exports.AuthMeta = exports.RouteMetadata = exports.METADATA_KEYS = exports.validateNoConflictingDecorators = exports.assertEveryWebhookEndpointRetainsRawBody = exports.assertEveryExternalEndpointDeclaresCaller = exports.assertEveryEndpointHasAuthMode = exports.getAuthMode = exports.getAuthMeta = exports.isApiPath = exports.isRawBody = exports.isFormPost = exports.getMaskSpec = exports.getEndpointKinds = exports.getEndpointKind = exports.getEndpointOptions = exports.getEndpoints = exports.getApiPath = exports.MaskLog = exports.AuthLocalOnly = exports.AuthApiKey = exports.AuthWebhook = exports.AuthSharedSecret = exports.AuthOidc = exports.MISSING_AUTH_DECORATOR_FIX = exports.rolesRequired = exports.AuthJwt = exports.Public = exports.Endpoint = exports.ApiPath = exports.GCP_LOG_BUDGET_BYTES = exports.MAX_GCP_LOG_BYTES = exports.LogChunkInfo = exports.LogChunkerImpl = exports.LogChunker = exports.LogManager = exports.ConsoleLoggerFactory = exports.ConsoleLogger = exports.DESIGN_METADATA_KEYS = exports.isDocumentDesign = exports.DocumentDesign = exports.ContextTuple = exports.ContextKey = exports.toError = void 0;
-exports.KeyedFailureClassifier = exports.HttpResponseDto = exports.HttpResponseStatus = exports.HttpHeader = exports.RuntimeLocality = exports.ServiceInfo = exports.TimeoutError = exports.CallContext = exports.CallDeadline = exports.CallRegistry = exports.ClientRegistry = exports.HeaderRegistry = exports.DateTimeUtil = exports.TimeUtil = exports.DateUtil = exports.InstantUtil = exports.NetworkRejectClassifier = exports.NO_REG_CODE = exports.WRONG_COMPANY = exports.WRONG_DOMAIN = exports.EMAIL_NOT_CONFIRMED = exports.NOT_APPROVED = exports.WRONG_LOGIN = exports.WRONG_LOGIN_TYPE = exports.ENTITY_NOT_FOUND = exports.OfflineError = exports.HttpUserError = exports.HttpVendorError = exports.HttpTooManyRequestsError = exports.HttpInternalServerError = exports.HttpGatewayTimeoutError = exports.HttpServiceUnavailableError = exports.HttpBadGatewayError = exports.HttpTimeoutError = exports.HttpForbiddenError = exports.HttpUnauthorizedError = exports.HttpBadRequestError = exports.EndpointNotFoundError = exports.HttpNotFoundError = exports.HttpError = exports.ProtocolError = exports.SECRETS = exports.Secrets = exports.getEndpointCaller = exports.isExternalSystemKind = exports.ExternalCaller = exports.DEFAULT_CALLER_KIND = exports.EXTERNAL_SYSTEM_KINDS = exports.getQueueName = exports.assertPubSubConventions = void 0;
-exports.HttpErrorStatus = exports.ApiErrorPayload = exports.ApiErrorCodec = exports.VendorError = exports.UnauthorizedError = exports.BadRequestError = exports.UserError = exports.RequestTimeoutError = exports.ForbiddenError = exports.TooManyRequestsError = exports.InternalError = exports.GatewayTimeoutError = exports.ServiceUnavailableError = exports.BadGatewayError = exports.NotFoundError = exports.ApiError = exports.FilterChain = exports.Filter = exports.SerializedError = exports.SerializedMap = exports.RecordSerializer = exports.getDoNotRecordFields = exports.DoNotRecord = exports.RecordedTestCase = exports.RecordedError = exports.RecordedEndpoint = exports.RecorderKeys = exports.ApiMethodInfo = exports.LOG_API_CALL_LOGGER_NAME = exports.ApiCallLogNameImpl = exports.ApiCallLogName = exports.ApiCallInfo = exports.MaskSpec = exports.LogApiCallImpl = exports.ContextMgr = exports.DestinationTrust = exports.WebpiecesCoreHeaders = exports.templateDeriver = exports.WEBPIECES_DEFAULT_FAILURE_CLASSIFIER = exports.WebpiecesDefaultFailureClassifier = void 0;
+exports.assertInternalApi = exports.getIpcMaskSpec = exports.getIpcEndpointKind = exports.getIpcEndpoints = exports.getIpcApiId = exports.isInternalApi = exports.WpIpcEndpoint = exports.WpInternal = exports.METADATA_KEYS = exports.validateNoConflictingDecorators = exports.assertEveryWebhookEndpointRetainsRawBody = exports.assertEveryExternalEndpointDeclaresCaller = exports.assertEveryEndpointHasAuthMode = exports.getAuthMode = exports.getAuthMeta = exports.isApiPath = exports.isRawBody = exports.isFormPost = exports.getMaskSpec = exports.getEndpointKinds = exports.getEndpointKind = exports.getEndpointOptions = exports.getEndpoints = exports.getApiPath = exports.MaskLog = exports.WpAuthLocalOnly = exports.WpAuthApiKey = exports.WpAuthWebhook = exports.WpAuthSharedSecret = exports.WpAuthOidc = exports.MISSING_AUTH_DECORATOR_FIX = exports.rolesRequired = exports.WpAuthJwt = exports.WpAuthPublic = exports.Endpoint = exports.ApiPath = exports.GCP_LOG_BUDGET_BYTES = exports.MAX_GCP_LOG_BYTES = exports.LogChunkInfo = exports.LogChunkerImpl = exports.LogChunker = exports.LogManager = exports.ConsoleLoggerFactory = exports.ConsoleLogger = exports.DESIGN_METADATA_KEYS = exports.isDocumentDesign = exports.DocumentDesign = exports.ContextTuple = exports.ContextKey = exports.toError = void 0;
+exports.ClientRegistry = exports.HeaderRegistry = exports.DateTimeUtil = exports.TimeUtil = exports.DateUtil = exports.InstantUtil = exports.NetworkRejectClassifier = exports.NO_REG_CODE = exports.WRONG_COMPANY = exports.WRONG_DOMAIN = exports.EMAIL_NOT_CONFIRMED = exports.NOT_APPROVED = exports.WRONG_LOGIN = exports.WRONG_LOGIN_TYPE = exports.ENTITY_NOT_FOUND = exports.OfflineError = exports.HttpUserError = exports.HttpVendorError = exports.HttpTooManyRequestsError = exports.HttpInternalServerError = exports.HttpGatewayTimeoutError = exports.HttpServiceUnavailableError = exports.HttpBadGatewayError = exports.HttpTimeoutError = exports.HttpForbiddenError = exports.HttpUnauthorizedError = exports.HttpBadRequestError = exports.EndpointNotFoundError = exports.HttpNotFoundError = exports.HttpError = exports.ProtocolError = exports.SECRETS = exports.Secrets = exports.getEndpointCaller = exports.isExternalSystemKind = exports.ExternalCaller = exports.DEFAULT_CALLER_KIND = exports.EXTERNAL_SYSTEM_KINDS = exports.getQueueName = exports.assertPubSubConventions = exports.assertApiKind = exports.getApiKind = exports.ENDPOINT_KINDS_BY_API_KIND = exports.Queue = exports.PubSub = exports.Rpc = exports.AuthMeta = exports.RouteMetadata = exports.IPC_METADATA_KEYS = exports.assertNotInternalApi = void 0;
+exports.HttpErrorStatus = exports.ApiErrorPayload = exports.ApiErrorCodec = exports.VendorError = exports.UnauthorizedError = exports.BadRequestError = exports.UserError = exports.RequestTimeoutError = exports.ForbiddenError = exports.TooManyRequestsError = exports.InternalError = exports.GatewayTimeoutError = exports.ServiceUnavailableError = exports.BadGatewayError = exports.NotFoundError = exports.ApiError = exports.FilterChain = exports.Filter = exports.SerializedError = exports.SerializedMap = exports.RecordSerializer = exports.getDoNotRecordFields = exports.DoNotRecord = exports.RecordedTestCase = exports.RecordedError = exports.RecordedEndpoint = exports.RecorderKeys = exports.ApiMethodInfo = exports.LOG_API_CALL_LOGGER_NAME = exports.ApiCallLogNameImpl = exports.ApiCallLogName = exports.ApiCallInfo = exports.MaskSpec = exports.LogApiCallImpl = exports.ContextMgr = exports.DestinationTrust = exports.WebpiecesCoreHeaders = exports.templateDeriver = exports.WEBPIECES_DEFAULT_FAILURE_CLASSIFIER = exports.WebpiecesDefaultFailureClassifier = exports.KeyedFailureClassifier = exports.HttpResponseDto = exports.HttpResponseStatus = exports.HttpHeader = exports.RuntimeLocality = exports.ServiceInfo = exports.TimeoutError = exports.CallContext = exports.CallDeadline = exports.CallRegistry = void 0;
 var errorUtils_1 = require("./lib/errorUtils");
 Object.defineProperty(exports, "toError", { enumerable: true, get: function () { return errorUtils_1.toError; } });
 var ContextKey_1 = require("./ContextKey");
@@ -46,15 +46,15 @@ var decorators_1 = require("./http/decorators");
 Object.defineProperty(exports, "ApiPath", { enumerable: true, get: function () { return decorators_1.ApiPath; } });
 Object.defineProperty(exports, "Endpoint", { enumerable: true, get: function () { return decorators_1.Endpoint; } });
 // Auth mode decorators (clean service-to-service + user JWT model)
-Object.defineProperty(exports, "Public", { enumerable: true, get: function () { return decorators_1.Public; } });
-Object.defineProperty(exports, "AuthJwt", { enumerable: true, get: function () { return decorators_1.AuthJwt; } });
+Object.defineProperty(exports, "WpAuthPublic", { enumerable: true, get: function () { return decorators_1.WpAuthPublic; } });
+Object.defineProperty(exports, "WpAuthJwt", { enumerable: true, get: function () { return decorators_1.WpAuthJwt; } });
 Object.defineProperty(exports, "rolesRequired", { enumerable: true, get: function () { return decorators_1.rolesRequired; } });
 Object.defineProperty(exports, "MISSING_AUTH_DECORATOR_FIX", { enumerable: true, get: function () { return decorators_1.MISSING_AUTH_DECORATOR_FIX; } });
-Object.defineProperty(exports, "AuthOidc", { enumerable: true, get: function () { return decorators_1.AuthOidc; } });
-Object.defineProperty(exports, "AuthSharedSecret", { enumerable: true, get: function () { return decorators_1.AuthSharedSecret; } });
-Object.defineProperty(exports, "AuthWebhook", { enumerable: true, get: function () { return decorators_1.AuthWebhook; } });
-Object.defineProperty(exports, "AuthApiKey", { enumerable: true, get: function () { return decorators_1.AuthApiKey; } });
-Object.defineProperty(exports, "AuthLocalOnly", { enumerable: true, get: function () { return decorators_1.AuthLocalOnly; } });
+Object.defineProperty(exports, "WpAuthOidc", { enumerable: true, get: function () { return decorators_1.WpAuthOidc; } });
+Object.defineProperty(exports, "WpAuthSharedSecret", { enumerable: true, get: function () { return decorators_1.WpAuthSharedSecret; } });
+Object.defineProperty(exports, "WpAuthWebhook", { enumerable: true, get: function () { return decorators_1.WpAuthWebhook; } });
+Object.defineProperty(exports, "WpAuthApiKey", { enumerable: true, get: function () { return decorators_1.WpAuthApiKey; } });
+Object.defineProperty(exports, "WpAuthLocalOnly", { enumerable: true, get: function () { return decorators_1.WpAuthLocalOnly; } });
 Object.defineProperty(exports, "MaskLog", { enumerable: true, get: function () { return decorators_1.MaskLog; } });
 Object.defineProperty(exports, "getApiPath", { enumerable: true, get: function () { return decorators_1.getApiPath; } });
 Object.defineProperty(exports, "getEndpoints", { enumerable: true, get: function () { return decorators_1.getEndpoints; } });
@@ -72,6 +72,17 @@ Object.defineProperty(exports, "assertEveryExternalEndpointDeclaresCaller", { en
 Object.defineProperty(exports, "assertEveryWebhookEndpointRetainsRawBody", { enumerable: true, get: function () { return decorators_1.assertEveryWebhookEndpointRetainsRawBody; } });
 Object.defineProperty(exports, "validateNoConflictingDecorators", { enumerable: true, get: function () { return decorators_1.validateNoConflictingDecorators; } });
 Object.defineProperty(exports, "METADATA_KEYS", { enumerable: true, get: function () { return decorators_1.METADATA_KEYS; } });
+var IpcDecorators_1 = require("./ipc/IpcDecorators");
+Object.defineProperty(exports, "WpInternal", { enumerable: true, get: function () { return IpcDecorators_1.WpInternal; } });
+Object.defineProperty(exports, "WpIpcEndpoint", { enumerable: true, get: function () { return IpcDecorators_1.WpIpcEndpoint; } });
+Object.defineProperty(exports, "isInternalApi", { enumerable: true, get: function () { return IpcDecorators_1.isInternalApi; } });
+Object.defineProperty(exports, "getIpcApiId", { enumerable: true, get: function () { return IpcDecorators_1.getIpcApiId; } });
+Object.defineProperty(exports, "getIpcEndpoints", { enumerable: true, get: function () { return IpcDecorators_1.getIpcEndpoints; } });
+Object.defineProperty(exports, "getIpcEndpointKind", { enumerable: true, get: function () { return IpcDecorators_1.getIpcEndpointKind; } });
+Object.defineProperty(exports, "getIpcMaskSpec", { enumerable: true, get: function () { return IpcDecorators_1.getIpcMaskSpec; } });
+Object.defineProperty(exports, "assertInternalApi", { enumerable: true, get: function () { return IpcDecorators_1.assertInternalApi; } });
+Object.defineProperty(exports, "assertNotInternalApi", { enumerable: true, get: function () { return IpcDecorators_1.assertNotInternalApi; } });
+Object.defineProperty(exports, "IPC_METADATA_KEYS", { enumerable: true, get: function () { return IpcDecorators_1.IPC_METADATA_KEYS; } });
 // The runtime representation of ONE route (split out of decorators.ts for file size only).
 var RouteMetadata_1 = require("./http/RouteMetadata");
 Object.defineProperty(exports, "RouteMetadata", { enumerable: true, get: function () { return RouteMetadata_1.RouteMetadata; } });
@@ -97,7 +108,7 @@ Object.defineProperty(exports, "DEFAULT_CALLER_KIND", { enumerable: true, get: f
 Object.defineProperty(exports, "ExternalCaller", { enumerable: true, get: function () { return external_caller_1.ExternalCaller; } });
 Object.defineProperty(exports, "isExternalSystemKind", { enumerable: true, get: function () { return external_caller_1.isExternalSystemKind; } });
 Object.defineProperty(exports, "getEndpointCaller", { enumerable: true, get: function () { return external_caller_1.getEndpointCaller; } });
-// Client-side shared-secret store (the value THIS service sends per @AuthSharedSecret key).
+// Client-side shared-secret store (the value THIS service sends per @WpAuthSharedSecret key).
 var Secrets_1 = require("./http/Secrets");
 Object.defineProperty(exports, "Secrets", { enumerable: true, get: function () { return Secrets_1.Secrets; } });
 Object.defineProperty(exports, "SECRETS", { enumerable: true, get: function () { return Secrets_1.SECRETS; } });
@@ -154,7 +165,7 @@ Object.defineProperty(exports, "TimeoutError", { enumerable: true, get: function
 var ServiceInfo_1 = require("./http/ServiceInfo");
 Object.defineProperty(exports, "ServiceInfo", { enumerable: true, get: function () { return ServiceInfo_1.ServiceInfo; } });
 // "Where am I running" — declared once at startup (setupRuntime, from RuntimeSetupOptions.locality).
-// The ONE input to @AuthLocalOnly enforcement. Undeclared reads as DEPLOYED (fail safe).
+// The ONE input to @WpAuthLocalOnly enforcement. Undeclared reads as DEPLOYED (fail safe).
 var RuntimeLocality_1 = require("./http/RuntimeLocality");
 Object.defineProperty(exports, "RuntimeLocality", { enumerable: true, get: function () { return RuntimeLocality_1.RuntimeLocality; } });
 // The ENTIRE HTTP response as pure data — the ONE form both transports (express, fetch) are

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/core/core-util/src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;AAEH,+CAA2C;AAAlC,qGAAA,OAAO,OAAA;AAChB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AAOnB,+CAA8C;AAArC,4GAAA,YAAY,OAAA;AAErB,+EAA+E;AAC/E,kFAAkF;AAClF,yCAAyC;AACzC,mDAA0F;AAAjF,gHAAA,cAAc,OAAA;AAAE,kHAAA,gBAAgB,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAO/D,yDAAwD;AAA/C,8GAAA,aAAa,OAAA;AACtB,uEAAsE;AAA7D,4HAAA,oBAAoB,OAAA;AAC7B,mDAAkD;AAAzC,wGAAA,UAAU,OAAA;AACnB,mDAM8B;AAL1B,wGAAA,UAAU,OAAA;AACV,4GAAA,cAAc,OAAA;AACd,0GAAA,YAAY,OAAA;AACZ,+GAAA,iBAAiB,OAAA;AACjB,kHAAA,oBAAoB,OAAA;AAGxB,8DAA8D;AAC9D,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,kEAAkE;AAElE,4BAA4B;AAC5B,gDA8B2B;AA7BvB,qGAAA,OAAO,OAAA;AACP,sGAAA,QAAQ,OAAA;AACR,mEAAmE;AACnE,oGAAA,MAAM,OAAA;AACN,qGAAA,OAAO,OAAA;AACP,2GAAA,aAAa,OAAA;AACb,wHAAA,0BAA0B,OAAA;AAC1B,sGAAA,QAAQ,OAAA;AACR,8GAAA,gBAAgB,OAAA;AAChB,yGAAA,WAAW,OAAA;AACX,wGAAA,UAAU,OAAA;AACV,2GAAA,aAAa,OAAA;AACb,qGAAA,OAAO,OAAA;AACP,wGAAA,UAAU,OAAA;AACV,0GAAA,YAAY,OAAA;AACZ,gHAAA,kBAAkB,OAAA;AAClB,6GAAA,eAAe,OAAA;AACf,8GAAA,gBAAgB,OAAA;AAChB,yGAAA,WAAW,OAAA;AACX,wGAAA,UAAU,OAAA;AACV,uGAAA,SAAS,OAAA;AACT,uGAAA,SAAS,OAAA;AACT,yGAAA,WAAW,OAAA;AACX,yGAAA,WAAW,OAAA;AACX,4HAAA,8BAA8B,OAAA;AAC9B,uIAAA,yCAAyC,OAAA;AACzC,sIAAA,wCAAwC,OAAA;AACxC,6HAAA,+BAA+B,OAAA;AAC/B,2GAAA,aAAa,OAAA;AAEjB,2FAA2F;AAC3F,sDAAqD;AAA5C,8GAAA,aAAa,OAAA;AAEtB,+FAA+F;AAC/F,8CAA4C;AAAnC,qGAAA,QAAQ,OAAA;AAQjB,sGAAsG;AACtG,yFAAyF;AACzF,4CASyB;AARrB,+FAAA,GAAG,OAAA;AACH,kGAAA,MAAM,OAAA;AACN,iGAAA,KAAK,OAAA;AACL,sHAAA,0BAA0B,OAAA;AAC1B,sGAAA,UAAU,OAAA;AACV,yGAAA,aAAa,OAAA;AACb,mHAAA,uBAAuB,OAAA;AACvB,wGAAA,YAAY,OAAA;AAGhB,mGAAmG;AACnG,mCAAmC;AACnC,0DAMgC;AAL5B,wHAAA,qBAAqB,OAAA;AACrB,sHAAA,mBAAmB,OAAA;AACnB,iHAAA,cAAc,OAAA;AACd,uHAAA,oBAAoB,OAAA;AACpB,oHAAA,iBAAiB,OAAA;AAGrB,4FAA4F;AAC5F,0CAAkD;AAAzC,kGAAA,OAAO,OAAA;AAAE,kGAAA,OAAO,OAAA;AAKzB,uDAAuD;AACvD,wCA0BuB;AAzBnB,uGAAA,aAAa,OAAA;AACb,mGAAA,SAAS,OAAA;AACT,2GAAA,iBAAiB,OAAA;AACjB,+GAAA,qBAAqB,OAAA;AACrB,6GAAA,mBAAmB,OAAA;AACnB,+GAAA,qBAAqB,OAAA;AACrB,4GAAA,kBAAkB,OAAA;AAClB,0GAAA,gBAAgB,OAAA;AAChB,6GAAA,mBAAmB,OAAA;AACnB,qHAAA,2BAA2B,OAAA;AAC3B,iHAAA,uBAAuB,OAAA;AACvB,iHAAA,uBAAuB,OAAA;AACvB,kHAAA,wBAAwB,OAAA;AACxB,yGAAA,eAAe,OAAA;AACf,uGAAA,aAAa,OAAA;AACb,sGAAA,YAAY,OAAA;AACZ,0BAA0B;AAC1B,0GAAA,gBAAgB,OAAA;AAChB,0GAAA,gBAAgB,OAAA;AAChB,qGAAA,WAAW,OAAA;AACX,sGAAA,YAAY,OAAA;AACZ,6GAAA,mBAAmB,OAAA;AACnB,sGAAA,YAAY,OAAA;AACZ,uGAAA,aAAa,OAAA;AACb,qGAAA,WAAW,OAAA;AAGf,sDAA+D;AAAtD,wHAAA,uBAAuB,OAAA;AAEhC,iEAAiE;AACjE,4CASyB;AAJrB,uGAAA,WAAW,OAAA;AACX,oGAAA,QAAQ,OAAA;AACR,oGAAA,QAAQ,OAAA;AACR,wGAAA,YAAY,OAAA;AAGhB,mEAAmE;AACnE,wDAAuD;AAA9C,gHAAA,cAAc,OAAA;AACvB,wDAAuD;AAA9C,gHAAA,cAAc,OAAA;AACvB,oDAAmD;AAA1C,4GAAA,YAAY,OAAA;AACrB,oDAAmD;AAA1C,4GAAA,YAAY,OAAA;AACrB,oDAAkD;AAAzC,2GAAA,WAAW,OAAA;AAEpB,oDAAmD;AAA1C,4GAAA,YAAY,OAAA;AAGrB,iFAAiF;AACjF,8EAA8E;AAC9E,kDAAiD;AAAxC,0GAAA,WAAW,OAAA;AACpB,qGAAqG;AACrG,yFAAyF;AACzF,0DAAyD;AAAhD,kHAAA,eAAe,OAAA;AAExB,4FAA4F;AAC5F,0FAA0F;AAC1F,0DAAyF;AAAhF,6GAAA,UAAU,OAAA;AAAE,qHAAA,kBAAkB,OAAA;AAAE,kHAAA,eAAe,OAAA;AAOxD,8DAAkE;AAAzD,2HAAA,sBAAsB,OAAA;AAC/B,8FAGkD;AAF9C,sJAAA,iCAAiC,OAAA;AACjC,yJAAA,oCAAoC,OAAA;AAExC,0DAAyD;AAAhD,kHAAA,eAAe,OAAA;AACxB,oEAAmE;AAA1D,4HAAA,oBAAoB,OAAA;AAG7B,qGAAqG;AACrG,mFAAmF;AACnF,4DAA2D;AAAlD,oHAAA,gBAAgB,OAAA;AAEzB,iGAAiG;AACjG,gGAAgG;AAChG,kEAAkE;AAClE,gDAA+C;AAAtC,wGAAA,UAAU,OAAA;AAEnB,kGAAkG;AAClG,oGAAoG;AACpG,2EAA2E;AAC3E,gDAAmD;AAA1C,4GAAA,cAAc,OAAA;AAEvB,iGAAiG;AACjG,uGAAuG;AACvG,oDAA+C;AAAtC,wGAAA,QAAQ,OAAA;AAGjB,yFAAyF;AACzF,kFAAkF;AAClF,gGAAgG;AAChG,kDAAiD;AAAxC,0GAAA,WAAW,OAAA;AAEpB,oGAAoG;AACpG,wDAI+B;AAH3B,gHAAA,cAAc,OAAA;AACd,oHAAA,kBAAkB,OAAA;AAClB,0HAAA,wBAAwB,OAAA;AAE5B,sDAAqD;AAA5C,8GAAA,aAAa,OAAA;AAItB,iFAAiF;AACjF,qEAAkF;AAAvD,gHAAA,YAAY,OAAA;AACvC,qEAI0C;AAHtC,oHAAA,gBAAgB,OAAA;AAChB,iHAAA,aAAa,OAAA;AACb,oHAAA,gBAAgB,OAAA;AAEpB,2DAAgF;AAAvE,0GAAA,WAAW,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAC1C,qEAAoG;AAA3F,oHAAA,gBAAgB,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,mHAAA,eAAe,OAAA;AAEzD,gGAAgG;AAChG,2EAA2E;AAC3E,+FAA+F;AAC/F,kGAAkG;AAClG,wFAAwF;AACxF,2CAA0C;AAAjC,gGAAA,MAAM,OAAA;AAEf,qDAAoD;AAA3C,0GAAA,WAAW,OAAA;AAEpB,mCAgBkB;AAfd,kGAAA,QAAQ,OAAA;AACR,uGAAA,aAAa,OAAA;AACb,yGAAA,eAAe,OAAA;AACf,iHAAA,uBAAuB,OAAA;AACvB,6GAAA,mBAAmB,OAAA;AACnB,uGAAA,aAAa,OAAA;AACb,8GAAA,oBAAoB,OAAA;AACpB,wGAAA,cAAc,OAAA;AACd,6GAAA,mBAAmB,OAAA;AACnB,mGAAA,SAAS,OAAA;AACT,yGAAA,eAAe,OAAA;AACf,2GAAA,iBAAiB,OAAA;AACjB,qGAAA,WAAW,OAAA;AACX,uGAAA,aAAa,OAAA;AACb,yGAAA,eAAe,OAAA;AAEnB,0DAAyD;AAAhD,kHAAA,eAAe,OAAA","sourcesContent":["/**\n * @webpieces/core-util\n *\n * Utility functions for WebPieces applications.\n * This package works in both browser and Node.js environments.\n *\n * @packageDocumentation\n */\n\nexport { toError } from './lib/errorUtils';\nexport { ContextKey } from './ContextKey';\nexport type {\n    AnyContextKey,\n    AnyTrustedContextKey,\n    AnyUntrustedContextKey,\n    Trust,\n} from './ContextKey';\nexport { ContextTuple } from './ContextTuple';\n\n// @DocumentDesign — DI-design-root marker. Applies to ANY project kind (server\n// controllers AND library impl classes), so it lives here (browser + Node) rather\n// than in a server-only routing package.\nexport { DocumentDesign, isDocumentDesign, DESIGN_METADATA_KEYS } from './DocumentDesign';\n\n// Logging (merged from former @webpieces/wp-logging).\n// Pluggable logging interface + a browser-safe console default; apps plug in\n// bunyan/winston/pino/etc. via LogManager.setFactory(...). Browser + Node.\nexport type { Logger, LogLevel } from './logging/Logger';\nexport type { LoggerFactory } from './logging/LoggerFactory';\nexport { ConsoleLogger } from './logging/ConsoleLogger';\nexport { ConsoleLoggerFactory } from './logging/ConsoleLoggerFactory';\nexport { LogManager } from './logging/LogManager';\nexport {\n    LogChunker,\n    LogChunkerImpl,\n    LogChunkInfo,\n    MAX_GCP_LOG_BYTES,\n    GCP_LOG_BUDGET_BYTES,\n} from './logging/LogChunker';\n\n// HTTP API contract (merged from former @webpieces/http-api).\n// Shared HTTP API definition consumed by both client and server: REST\n// decorators, the HttpError hierarchy, datetime DTOs, platform-header\n// registry/readers, ValidateImplementation, and the test-case recorder\n// contract. Pure definitions — express-free, browser + Node safe.\n\n// API definition decorators\nexport {\n    ApiPath,\n    Endpoint,\n    // Auth mode decorators (clean service-to-service + user JWT model)\n    Public,\n    AuthJwt,\n    rolesRequired,\n    MISSING_AUTH_DECORATOR_FIX,\n    AuthOidc,\n    AuthSharedSecret,\n    AuthWebhook,\n    AuthApiKey,\n    AuthLocalOnly,\n    MaskLog,\n    getApiPath,\n    getEndpoints,\n    getEndpointOptions,\n    getEndpointKind,\n    getEndpointKinds,\n    getMaskSpec,\n    isFormPost,\n    isRawBody,\n    isApiPath,\n    getAuthMeta,\n    getAuthMode,\n    assertEveryEndpointHasAuthMode,\n    assertEveryExternalEndpointDeclaresCaller,\n    assertEveryWebhookEndpointRetainsRawBody,\n    validateNoConflictingDecorators,\n    METADATA_KEYS,\n} from './http/decorators';\n// The runtime representation of ONE route (split out of decorators.ts for file size only).\nexport { RouteMetadata } from './http/RouteMetadata';\nexport type { EndpointKind, EndpointOptions, ExternalEndpointOptions } from './http/decorators';\n// The TYPE layer of the auth surface — likewise split out of decorators.ts for file size only.\nexport { AuthMeta } from './http/auth-mode';\nexport type {\n    AuthMode,\n    ApiKeyCredential,\n    ApiKeyCredentials,\n    JwtRoles,\n    JwtRequirement,\n} from './http/auth-mode';\n// API kind (RPC vs PubSub/Cloud Tasks) + queue naming. Split out of decorators.ts for file size only;\n// one-way dependency api-kind -> decorators, and the barrel keeps the surface identical.\nexport {\n    Rpc,\n    PubSub,\n    Queue,\n    ENDPOINT_KINDS_BY_API_KIND,\n    getApiKind,\n    assertApiKind,\n    assertPubSubConventions,\n    getQueueName,\n} from './http/api-kind';\nexport type { ApiKind } from './http/api-kind';\n// WHO calls an `external` endpoint — the caller declaration @Endpoint(..., 'external', {calledBy})\n// requires, and the reader for it.\nexport {\n    EXTERNAL_SYSTEM_KINDS,\n    DEFAULT_CALLER_KIND,\n    ExternalCaller,\n    isExternalSystemKind,\n    getEndpointCaller,\n} from './http/external-caller';\nexport type { ExternalSystemKind } from './http/external-caller';\n// Client-side shared-secret store (the value THIS service sends per @AuthSharedSecret key).\nexport { Secrets, SECRETS } from './http/Secrets';\n\n// Type validators\nexport { ValidateImplementation } from './http/validators';\n\n// HTTP wire DTO, legacy aliases and subtype constants.\nexport {\n    ProtocolError,\n    HttpError,\n    HttpNotFoundError,\n    EndpointNotFoundError,\n    HttpBadRequestError,\n    HttpUnauthorizedError,\n    HttpForbiddenError,\n    HttpTimeoutError,\n    HttpBadGatewayError,\n    HttpServiceUnavailableError,\n    HttpGatewayTimeoutError,\n    HttpInternalServerError,\n    HttpTooManyRequestsError,\n    HttpVendorError,\n    HttpUserError,\n    OfflineError,\n    // Error subtype constants\n    ENTITY_NOT_FOUND,\n    WRONG_LOGIN_TYPE,\n    WRONG_LOGIN,\n    NOT_APPROVED,\n    EMAIL_NOT_CONFIRMED,\n    WRONG_DOMAIN,\n    WRONG_COMPANY,\n    NO_REG_CODE,\n} from './http/errors';\n\nexport { NetworkRejectClassifier } from './http/networkReject';\n\n// Date/Time DTOs and Utilities (inspired by Java Time / JSR-310)\nexport {\n    InstantDto,\n    DateDto,\n    TimeDto,\n    DateTimeDto,\n    InstantUtil,\n    DateUtil,\n    TimeUtil,\n    DateTimeUtil,\n} from './http/datetime';\n\n// Context keys + registry (the global magic-context header system)\nexport { HeaderRegistry } from './http/HeaderRegistry';\nexport { ClientRegistry } from './http/ClientRegistry';\nexport { CallRegistry } from './http/CallRegistry';\nexport { CallDeadline } from './http/CallDeadline';\nexport { CallContext } from './http/CallStrategy';\nexport type { Attempt, CallStrategy } from './http/CallStrategy';\nexport { TimeoutError } from './http/TimeoutError';\nexport type { ServiceUrlDeriver } from './http/ClientRegistry';\n\n// \"What service am I\" — set once at startup, read by the logging backends and by\n// RequestContextHeaders (to stamp requestIdSource on ids this service mints).\nexport { ServiceInfo } from './http/ServiceInfo';\n// \"Where am I running\" — declared once at startup (setupRuntime, from RuntimeSetupOptions.locality).\n// The ONE input to @AuthLocalOnly enforcement. Undeclared reads as DEPLOYED (fail safe).\nexport { RuntimeLocality } from './http/RuntimeLocality';\nexport type { Locality } from './http/RuntimeLocality';\n// The ENTIRE HTTP response as pure data — the ONE form both transports (express, fetch) are\n// normalised into, so an ErrorTranslators implementation is written once and serves both.\nexport { HttpHeader, HttpResponseStatus, HttpResponseDto } from './http/HttpResponseDto';\n// Pluggable, bidirectional error translation (app exception <-> the WHOLE response). Set on\n// ClientRegistry at startup; consulted before the built-in webpieces mapping on BOTH sides.\nexport type { ErrorTranslators } from './http/ErrorTranslators';\n// Pluggable per-client failure classification (is a thrown API-call error a real failure or an\n// expected non-failure?). Registered on ClientRegistry at startup; consulted by LogApiCall.\nexport type { FailureClassifier } from './http/FailureClassifier';\nexport { KeyedFailureClassifier } from './http/FailureClassifier';\nexport {\n    WebpiecesDefaultFailureClassifier,\n    WEBPIECES_DEFAULT_FAILURE_CLASSIFIER,\n} from './http/WebpiecesDefaultFailureClassifier';\nexport { templateDeriver } from './http/templateDeriver';\nexport { WebpiecesCoreHeaders } from './http/WebpiecesCoreHeaders';\nexport { ContextReader } from './http/ContextReader';\n\n// The OUTBOUND half of the trust model: whether a TRUSTED context key may ride to the endpoint being\n// called. Built ONLY from the destination endpoint's AuthMode — see the class doc.\nexport { DestinationTrust } from './http/DestinationTrust';\n\n// BROWSER-ONLY outbound-header propagation (app-held store + registry -> outbound HTTP headers).\n// Only @webpieces/http-client-browser may name it; the server reads RequestContext directly via\n// RequestContextHeaders in the Node-only @webpieces/core-context.\nexport { ContextMgr } from './http/ContextMgr';\n\n// API-call logging helper (uses LogManager above). NOT a singleton: construct one per environment\n// with that environment's ApiCallContext — `new LogApiCallImpl(new RequestContextApiCallContext())`\n// on node, `new LogApiCallImpl(new BrowserApiCallContext())` in a browser.\nexport { LogApiCallImpl } from './http/LogApiCall';\n\n// Opt-in field masking for the LogApiCall log path — declare per-api sensitive fields so secrets\n// (OAuth refresh tokens, id-token JWTs) are masked in the logs while the real value stays on the wire.\nexport { MaskSpec } from './http/LogFieldMask';\nexport type { MaskMode } from './http/LogFieldMask';\n\n// The structured `api` tag + the context-writer seam LogApiCall stamps through. The Node\n// RequestContext-backed impl lives in @webpieces/core-context, the browser one in\n// @webpieces/http-client-browser; each is CONSTRUCTED by its package, never installed globally.\nexport { ApiCallInfo } from './http/ApiCallInfo';\nexport type { ApiType, ApiResult } from './http/ApiCallInfo';\n// Console-render bridge: turns LogApiCall's [LogApiCall] bracket into [API.{side}.{phase}] locally.\nexport {\n    ApiCallLogName,\n    ApiCallLogNameImpl,\n    LOG_API_CALL_LOGGER_NAME,\n} from './http/ApiCallLogName';\nexport { ApiMethodInfo } from './http/ApiMethodInfo';\nexport type { ApiSide } from './http/ApiMethodInfo';\nexport type { ApiCallContext } from './http/ApiCallContext';\n\n// Test-case recording contract (impl lives in http-server; hooks in http-client)\nexport { TestCaseRecorder, RecorderKeys } from './http/recorder/TestCaseRecorder';\nexport {\n    RecordedEndpoint,\n    RecordedError,\n    RecordedTestCase,\n} from './http/recorder/RecordedEndpoint';\nexport { DoNotRecord, getDoNotRecordFields } from './http/recorder/DoNotRecord';\nexport { RecordSerializer, SerializedMap, SerializedError } from './http/recorder/RecordSerializer';\n\n// ---------------------------------------------------------------------------------------------\n// Filter-chain primitives, shared by BOTH chains: the inbound server chain\n// (`Filter<MethodMeta, WpResponse<unknown>>`, @webpieces/http-routing) and the outbound client\n// chain (`Filter<ClientRequest, Response>`, @webpieces/http-client-core). Declared once, here, in\n// the package both depend on — see the class doc for why a second pair would be a shim.\nexport { Filter } from './filters/Filter';\nexport type { Service } from './filters/Filter';\nexport { FilterChain } from './filters/FilterChain';\n\nexport {\n    ApiError,\n    NotFoundError,\n    BadGatewayError,\n    ServiceUnavailableError,\n    GatewayTimeoutError,\n    InternalError,\n    TooManyRequestsError,\n    ForbiddenError,\n    RequestTimeoutError,\n    UserError,\n    BadRequestError,\n    UnauthorizedError,\n    VendorError,\n    ApiErrorCodec,\n    ApiErrorPayload,\n} from './errors';\nexport { HttpErrorStatus } from './http/HttpErrorStatus';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/core/core-util/src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;AAEH,+CAA2C;AAAlC,qGAAA,OAAO,OAAA;AAChB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AAOnB,+CAA8C;AAArC,4GAAA,YAAY,OAAA;AAErB,+EAA+E;AAC/E,kFAAkF;AAClF,yCAAyC;AACzC,mDAA0F;AAAjF,gHAAA,cAAc,OAAA;AAAE,kHAAA,gBAAgB,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAO/D,yDAAwD;AAA/C,8GAAA,aAAa,OAAA;AACtB,uEAAsE;AAA7D,4HAAA,oBAAoB,OAAA;AAC7B,mDAAkD;AAAzC,wGAAA,UAAU,OAAA;AACnB,mDAM8B;AAL1B,wGAAA,UAAU,OAAA;AACV,4GAAA,cAAc,OAAA;AACd,0GAAA,YAAY,OAAA;AACZ,+GAAA,iBAAiB,OAAA;AACjB,kHAAA,oBAAoB,OAAA;AAGxB,8DAA8D;AAC9D,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,kEAAkE;AAElE,4BAA4B;AAC5B,gDA8B2B;AA7BvB,qGAAA,OAAO,OAAA;AACP,sGAAA,QAAQ,OAAA;AACR,mEAAmE;AACnE,0GAAA,YAAY,OAAA;AACZ,uGAAA,SAAS,OAAA;AACT,2GAAA,aAAa,OAAA;AACb,wHAAA,0BAA0B,OAAA;AAC1B,wGAAA,UAAU,OAAA;AACV,gHAAA,kBAAkB,OAAA;AAClB,2GAAA,aAAa,OAAA;AACb,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,qGAAA,OAAO,OAAA;AACP,wGAAA,UAAU,OAAA;AACV,0GAAA,YAAY,OAAA;AACZ,gHAAA,kBAAkB,OAAA;AAClB,6GAAA,eAAe,OAAA;AACf,8GAAA,gBAAgB,OAAA;AAChB,yGAAA,WAAW,OAAA;AACX,wGAAA,UAAU,OAAA;AACV,uGAAA,SAAS,OAAA;AACT,uGAAA,SAAS,OAAA;AACT,yGAAA,WAAW,OAAA;AACX,yGAAA,WAAW,OAAA;AACX,4HAAA,8BAA8B,OAAA;AAC9B,uIAAA,yCAAyC,OAAA;AACzC,sIAAA,wCAAwC,OAAA;AACxC,6HAAA,+BAA+B,OAAA;AAC/B,2GAAA,aAAa,OAAA;AAEjB,qDAW6B;AAVzB,2GAAA,UAAU,OAAA;AACV,8GAAA,aAAa,OAAA;AACb,8GAAA,aAAa,OAAA;AACb,4GAAA,WAAW,OAAA;AACX,gHAAA,eAAe,OAAA;AACf,mHAAA,kBAAkB,OAAA;AAClB,+GAAA,cAAc,OAAA;AACd,kHAAA,iBAAiB,OAAA;AACjB,qHAAA,oBAAoB,OAAA;AACpB,kHAAA,iBAAiB,OAAA;AAGrB,2FAA2F;AAC3F,sDAAqD;AAA5C,8GAAA,aAAa,OAAA;AAEtB,+FAA+F;AAC/F,8CAA4C;AAAnC,qGAAA,QAAQ,OAAA;AAQjB,sGAAsG;AACtG,yFAAyF;AACzF,4CASyB;AARrB,+FAAA,GAAG,OAAA;AACH,kGAAA,MAAM,OAAA;AACN,iGAAA,KAAK,OAAA;AACL,sHAAA,0BAA0B,OAAA;AAC1B,sGAAA,UAAU,OAAA;AACV,yGAAA,aAAa,OAAA;AACb,mHAAA,uBAAuB,OAAA;AACvB,wGAAA,YAAY,OAAA;AAGhB,mGAAmG;AACnG,mCAAmC;AACnC,0DAMgC;AAL5B,wHAAA,qBAAqB,OAAA;AACrB,sHAAA,mBAAmB,OAAA;AACnB,iHAAA,cAAc,OAAA;AACd,uHAAA,oBAAoB,OAAA;AACpB,oHAAA,iBAAiB,OAAA;AAGrB,8FAA8F;AAC9F,0CAAkD;AAAzC,kGAAA,OAAO,OAAA;AAAE,kGAAA,OAAO,OAAA;AAKzB,uDAAuD;AACvD,wCA0BuB;AAzBnB,uGAAA,aAAa,OAAA;AACb,mGAAA,SAAS,OAAA;AACT,2GAAA,iBAAiB,OAAA;AACjB,+GAAA,qBAAqB,OAAA;AACrB,6GAAA,mBAAmB,OAAA;AACnB,+GAAA,qBAAqB,OAAA;AACrB,4GAAA,kBAAkB,OAAA;AAClB,0GAAA,gBAAgB,OAAA;AAChB,6GAAA,mBAAmB,OAAA;AACnB,qHAAA,2BAA2B,OAAA;AAC3B,iHAAA,uBAAuB,OAAA;AACvB,iHAAA,uBAAuB,OAAA;AACvB,kHAAA,wBAAwB,OAAA;AACxB,yGAAA,eAAe,OAAA;AACf,uGAAA,aAAa,OAAA;AACb,sGAAA,YAAY,OAAA;AACZ,0BAA0B;AAC1B,0GAAA,gBAAgB,OAAA;AAChB,0GAAA,gBAAgB,OAAA;AAChB,qGAAA,WAAW,OAAA;AACX,sGAAA,YAAY,OAAA;AACZ,6GAAA,mBAAmB,OAAA;AACnB,sGAAA,YAAY,OAAA;AACZ,uGAAA,aAAa,OAAA;AACb,qGAAA,WAAW,OAAA;AAGf,sDAA+D;AAAtD,wHAAA,uBAAuB,OAAA;AAEhC,iEAAiE;AACjE,4CASyB;AAJrB,uGAAA,WAAW,OAAA;AACX,oGAAA,QAAQ,OAAA;AACR,oGAAA,QAAQ,OAAA;AACR,wGAAA,YAAY,OAAA;AAGhB,mEAAmE;AACnE,wDAAuD;AAA9C,gHAAA,cAAc,OAAA;AACvB,wDAAuD;AAA9C,gHAAA,cAAc,OAAA;AACvB,oDAAmD;AAA1C,4GAAA,YAAY,OAAA;AACrB,oDAAmD;AAA1C,4GAAA,YAAY,OAAA;AACrB,oDAAkD;AAAzC,2GAAA,WAAW,OAAA;AAEpB,oDAAmD;AAA1C,4GAAA,YAAY,OAAA;AAGrB,iFAAiF;AACjF,8EAA8E;AAC9E,kDAAiD;AAAxC,0GAAA,WAAW,OAAA;AACpB,qGAAqG;AACrG,2FAA2F;AAC3F,0DAAyD;AAAhD,kHAAA,eAAe,OAAA;AAExB,4FAA4F;AAC5F,0FAA0F;AAC1F,0DAAyF;AAAhF,6GAAA,UAAU,OAAA;AAAE,qHAAA,kBAAkB,OAAA;AAAE,kHAAA,eAAe,OAAA;AAOxD,8DAAkE;AAAzD,2HAAA,sBAAsB,OAAA;AAC/B,8FAGkD;AAF9C,sJAAA,iCAAiC,OAAA;AACjC,yJAAA,oCAAoC,OAAA;AAExC,0DAAyD;AAAhD,kHAAA,eAAe,OAAA;AACxB,oEAAmE;AAA1D,4HAAA,oBAAoB,OAAA;AAG7B,qGAAqG;AACrG,mFAAmF;AACnF,4DAA2D;AAAlD,oHAAA,gBAAgB,OAAA;AAEzB,iGAAiG;AACjG,gGAAgG;AAChG,kEAAkE;AAClE,gDAA+C;AAAtC,wGAAA,UAAU,OAAA;AAEnB,kGAAkG;AAClG,oGAAoG;AACpG,2EAA2E;AAC3E,gDAAmD;AAA1C,4GAAA,cAAc,OAAA;AAEvB,iGAAiG;AACjG,uGAAuG;AACvG,oDAA+C;AAAtC,wGAAA,QAAQ,OAAA;AAGjB,yFAAyF;AACzF,kFAAkF;AAClF,gGAAgG;AAChG,kDAAiD;AAAxC,0GAAA,WAAW,OAAA;AAEpB,oGAAoG;AACpG,wDAI+B;AAH3B,gHAAA,cAAc,OAAA;AACd,oHAAA,kBAAkB,OAAA;AAClB,0HAAA,wBAAwB,OAAA;AAE5B,sDAAqD;AAA5C,8GAAA,aAAa,OAAA;AAItB,iFAAiF;AACjF,qEAAkF;AAAvD,gHAAA,YAAY,OAAA;AACvC,qEAI0C;AAHtC,oHAAA,gBAAgB,OAAA;AAChB,iHAAA,aAAa,OAAA;AACb,oHAAA,gBAAgB,OAAA;AAEpB,2DAAgF;AAAvE,0GAAA,WAAW,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAC1C,qEAAoG;AAA3F,oHAAA,gBAAgB,OAAA;AAAE,iHAAA,aAAa,OAAA;AAAE,mHAAA,eAAe,OAAA;AAEzD,gGAAgG;AAChG,2EAA2E;AAC3E,+FAA+F;AAC/F,kGAAkG;AAClG,wFAAwF;AACxF,2CAA0C;AAAjC,gGAAA,MAAM,OAAA;AAEf,qDAAoD;AAA3C,0GAAA,WAAW,OAAA;AAEpB,mCAgBkB;AAfd,kGAAA,QAAQ,OAAA;AACR,uGAAA,aAAa,OAAA;AACb,yGAAA,eAAe,OAAA;AACf,iHAAA,uBAAuB,OAAA;AACvB,6GAAA,mBAAmB,OAAA;AACnB,uGAAA,aAAa,OAAA;AACb,8GAAA,oBAAoB,OAAA;AACpB,wGAAA,cAAc,OAAA;AACd,6GAAA,mBAAmB,OAAA;AACnB,mGAAA,SAAS,OAAA;AACT,yGAAA,eAAe,OAAA;AACf,2GAAA,iBAAiB,OAAA;AACjB,qGAAA,WAAW,OAAA;AACX,uGAAA,aAAa,OAAA;AACb,yGAAA,eAAe,OAAA;AAEnB,0DAAyD;AAAhD,kHAAA,eAAe,OAAA","sourcesContent":["/**\n * @webpieces/core-util\n *\n * Utility functions for WebPieces applications.\n * This package works in both browser and Node.js environments.\n *\n * @packageDocumentation\n */\n\nexport { toError } from './lib/errorUtils';\nexport { ContextKey } from './ContextKey';\nexport type {\n    AnyContextKey,\n    AnyTrustedContextKey,\n    AnyUntrustedContextKey,\n    Trust,\n} from './ContextKey';\nexport { ContextTuple } from './ContextTuple';\n\n// @DocumentDesign — DI-design-root marker. Applies to ANY project kind (server\n// controllers AND library impl classes), so it lives here (browser + Node) rather\n// than in a server-only routing package.\nexport { DocumentDesign, isDocumentDesign, DESIGN_METADATA_KEYS } from './DocumentDesign';\n\n// Logging (merged from former @webpieces/wp-logging).\n// Pluggable logging interface + a browser-safe console default; apps plug in\n// bunyan/winston/pino/etc. via LogManager.setFactory(...). Browser + Node.\nexport type { Logger, LogLevel } from './logging/Logger';\nexport type { LoggerFactory } from './logging/LoggerFactory';\nexport { ConsoleLogger } from './logging/ConsoleLogger';\nexport { ConsoleLoggerFactory } from './logging/ConsoleLoggerFactory';\nexport { LogManager } from './logging/LogManager';\nexport {\n    LogChunker,\n    LogChunkerImpl,\n    LogChunkInfo,\n    MAX_GCP_LOG_BYTES,\n    GCP_LOG_BUDGET_BYTES,\n} from './logging/LogChunker';\n\n// HTTP API contract (merged from former @webpieces/http-api).\n// Shared HTTP API definition consumed by both client and server: REST\n// decorators, the HttpError hierarchy, datetime DTOs, platform-header\n// registry/readers, ValidateImplementation, and the test-case recorder\n// contract. Pure definitions — express-free, browser + Node safe.\n\n// API definition decorators\nexport {\n    ApiPath,\n    Endpoint,\n    // Auth mode decorators (clean service-to-service + user JWT model)\n    WpAuthPublic,\n    WpAuthJwt,\n    rolesRequired,\n    MISSING_AUTH_DECORATOR_FIX,\n    WpAuthOidc,\n    WpAuthSharedSecret,\n    WpAuthWebhook,\n    WpAuthApiKey,\n    WpAuthLocalOnly,\n    MaskLog,\n    getApiPath,\n    getEndpoints,\n    getEndpointOptions,\n    getEndpointKind,\n    getEndpointKinds,\n    getMaskSpec,\n    isFormPost,\n    isRawBody,\n    isApiPath,\n    getAuthMeta,\n    getAuthMode,\n    assertEveryEndpointHasAuthMode,\n    assertEveryExternalEndpointDeclaresCaller,\n    assertEveryWebhookEndpointRetainsRawBody,\n    validateNoConflictingDecorators,\n    METADATA_KEYS,\n} from './http/decorators';\nexport {\n    WpInternal,\n    WpIpcEndpoint,\n    isInternalApi,\n    getIpcApiId,\n    getIpcEndpoints,\n    getIpcEndpointKind,\n    getIpcMaskSpec,\n    assertInternalApi,\n    assertNotInternalApi,\n    IPC_METADATA_KEYS,\n} from './ipc/IpcDecorators';\nexport type { IpcApiType, IpcEndpointKind, IpcEndpointOptions } from './ipc/IpcDecorators';\n// The runtime representation of ONE route (split out of decorators.ts for file size only).\nexport { RouteMetadata } from './http/RouteMetadata';\nexport type { EndpointKind, EndpointOptions, ExternalEndpointOptions } from './http/decorators';\n// The TYPE layer of the auth surface — likewise split out of decorators.ts for file size only.\nexport { AuthMeta } from './http/auth-mode';\nexport type {\n    AuthMode,\n    ApiKeyCredential,\n    ApiKeyCredentials,\n    JwtRoles,\n    JwtRequirement,\n} from './http/auth-mode';\n// API kind (RPC vs PubSub/Cloud Tasks) + queue naming. Split out of decorators.ts for file size only;\n// one-way dependency api-kind -> decorators, and the barrel keeps the surface identical.\nexport {\n    Rpc,\n    PubSub,\n    Queue,\n    ENDPOINT_KINDS_BY_API_KIND,\n    getApiKind,\n    assertApiKind,\n    assertPubSubConventions,\n    getQueueName,\n} from './http/api-kind';\nexport type { ApiKind } from './http/api-kind';\n// WHO calls an `external` endpoint — the caller declaration @Endpoint(..., 'external', {calledBy})\n// requires, and the reader for it.\nexport {\n    EXTERNAL_SYSTEM_KINDS,\n    DEFAULT_CALLER_KIND,\n    ExternalCaller,\n    isExternalSystemKind,\n    getEndpointCaller,\n} from './http/external-caller';\nexport type { ExternalSystemKind } from './http/external-caller';\n// Client-side shared-secret store (the value THIS service sends per @WpAuthSharedSecret key).\nexport { Secrets, SECRETS } from './http/Secrets';\n\n// Type validators\nexport { ValidateImplementation } from './http/validators';\n\n// HTTP wire DTO, legacy aliases and subtype constants.\nexport {\n    ProtocolError,\n    HttpError,\n    HttpNotFoundError,\n    EndpointNotFoundError,\n    HttpBadRequestError,\n    HttpUnauthorizedError,\n    HttpForbiddenError,\n    HttpTimeoutError,\n    HttpBadGatewayError,\n    HttpServiceUnavailableError,\n    HttpGatewayTimeoutError,\n    HttpInternalServerError,\n    HttpTooManyRequestsError,\n    HttpVendorError,\n    HttpUserError,\n    OfflineError,\n    // Error subtype constants\n    ENTITY_NOT_FOUND,\n    WRONG_LOGIN_TYPE,\n    WRONG_LOGIN,\n    NOT_APPROVED,\n    EMAIL_NOT_CONFIRMED,\n    WRONG_DOMAIN,\n    WRONG_COMPANY,\n    NO_REG_CODE,\n} from './http/errors';\n\nexport { NetworkRejectClassifier } from './http/networkReject';\n\n// Date/Time DTOs and Utilities (inspired by Java Time / JSR-310)\nexport {\n    InstantDto,\n    DateDto,\n    TimeDto,\n    DateTimeDto,\n    InstantUtil,\n    DateUtil,\n    TimeUtil,\n    DateTimeUtil,\n} from './http/datetime';\n\n// Context keys + registry (the global magic-context header system)\nexport { HeaderRegistry } from './http/HeaderRegistry';\nexport { ClientRegistry } from './http/ClientRegistry';\nexport { CallRegistry } from './http/CallRegistry';\nexport { CallDeadline } from './http/CallDeadline';\nexport { CallContext } from './http/CallStrategy';\nexport type { Attempt, CallStrategy } from './http/CallStrategy';\nexport { TimeoutError } from './http/TimeoutError';\nexport type { ServiceUrlDeriver } from './http/ClientRegistry';\n\n// \"What service am I\" — set once at startup, read by the logging backends and by\n// RequestContextHeaders (to stamp requestIdSource on ids this service mints).\nexport { ServiceInfo } from './http/ServiceInfo';\n// \"Where am I running\" — declared once at startup (setupRuntime, from RuntimeSetupOptions.locality).\n// The ONE input to @WpAuthLocalOnly enforcement. Undeclared reads as DEPLOYED (fail safe).\nexport { RuntimeLocality } from './http/RuntimeLocality';\nexport type { Locality } from './http/RuntimeLocality';\n// The ENTIRE HTTP response as pure data — the ONE form both transports (express, fetch) are\n// normalised into, so an ErrorTranslators implementation is written once and serves both.\nexport { HttpHeader, HttpResponseStatus, HttpResponseDto } from './http/HttpResponseDto';\n// Pluggable, bidirectional error translation (app exception <-> the WHOLE response). Set on\n// ClientRegistry at startup; consulted before the built-in webpieces mapping on BOTH sides.\nexport type { ErrorTranslators } from './http/ErrorTranslators';\n// Pluggable per-client failure classification (is a thrown API-call error a real failure or an\n// expected non-failure?). Registered on ClientRegistry at startup; consulted by LogApiCall.\nexport type { FailureClassifier } from './http/FailureClassifier';\nexport { KeyedFailureClassifier } from './http/FailureClassifier';\nexport {\n    WebpiecesDefaultFailureClassifier,\n    WEBPIECES_DEFAULT_FAILURE_CLASSIFIER,\n} from './http/WebpiecesDefaultFailureClassifier';\nexport { templateDeriver } from './http/templateDeriver';\nexport { WebpiecesCoreHeaders } from './http/WebpiecesCoreHeaders';\nexport { ContextReader } from './http/ContextReader';\n\n// The OUTBOUND half of the trust model: whether a TRUSTED context key may ride to the endpoint being\n// called. Built ONLY from the destination endpoint's AuthMode — see the class doc.\nexport { DestinationTrust } from './http/DestinationTrust';\n\n// BROWSER-ONLY outbound-header propagation (app-held store + registry -> outbound HTTP headers).\n// Only @webpieces/http-client-browser may name it; the server reads RequestContext directly via\n// RequestContextHeaders in the Node-only @webpieces/core-context.\nexport { ContextMgr } from './http/ContextMgr';\n\n// API-call logging helper (uses LogManager above). NOT a singleton: construct one per environment\n// with that environment's ApiCallContext — `new LogApiCallImpl(new RequestContextApiCallContext())`\n// on node, `new LogApiCallImpl(new BrowserApiCallContext())` in a browser.\nexport { LogApiCallImpl } from './http/LogApiCall';\n\n// Opt-in field masking for the LogApiCall log path — declare per-api sensitive fields so secrets\n// (OAuth refresh tokens, id-token JWTs) are masked in the logs while the real value stays on the wire.\nexport { MaskSpec } from './http/LogFieldMask';\nexport type { MaskMode } from './http/LogFieldMask';\n\n// The structured `api` tag + the context-writer seam LogApiCall stamps through. The Node\n// RequestContext-backed impl lives in @webpieces/core-context, the browser one in\n// @webpieces/http-client-browser; each is CONSTRUCTED by its package, never installed globally.\nexport { ApiCallInfo } from './http/ApiCallInfo';\nexport type { ApiType, ApiResult } from './http/ApiCallInfo';\n// Console-render bridge: turns LogApiCall's [LogApiCall] bracket into [API.{side}.{phase}] locally.\nexport {\n    ApiCallLogName,\n    ApiCallLogNameImpl,\n    LOG_API_CALL_LOGGER_NAME,\n} from './http/ApiCallLogName';\nexport { ApiMethodInfo } from './http/ApiMethodInfo';\nexport type { ApiSide } from './http/ApiMethodInfo';\nexport type { ApiCallContext } from './http/ApiCallContext';\n\n// Test-case recording contract (impl lives in http-server; hooks in http-client)\nexport { TestCaseRecorder, RecorderKeys } from './http/recorder/TestCaseRecorder';\nexport {\n    RecordedEndpoint,\n    RecordedError,\n    RecordedTestCase,\n} from './http/recorder/RecordedEndpoint';\nexport { DoNotRecord, getDoNotRecordFields } from './http/recorder/DoNotRecord';\nexport { RecordSerializer, SerializedMap, SerializedError } from './http/recorder/RecordSerializer';\n\n// ---------------------------------------------------------------------------------------------\n// Filter-chain primitives, shared by BOTH chains: the inbound server chain\n// (`Filter<MethodMeta, WpResponse<unknown>>`, @webpieces/http-routing) and the outbound client\n// chain (`Filter<ClientRequest, Response>`, @webpieces/http-client-core). Declared once, here, in\n// the package both depend on — see the class doc for why a second pair would be a shim.\nexport { Filter } from './filters/Filter';\nexport type { Service } from './filters/Filter';\nexport { FilterChain } from './filters/FilterChain';\n\nexport {\n    ApiError,\n    NotFoundError,\n    BadGatewayError,\n    ServiceUnavailableError,\n    GatewayTimeoutError,\n    InternalError,\n    TooManyRequestsError,\n    ForbiddenError,\n    RequestTimeoutError,\n    UserError,\n    BadRequestError,\n    UnauthorizedError,\n    VendorError,\n    ApiErrorCodec,\n    ApiErrorPayload,\n} from './errors';\nexport { HttpErrorStatus } from './http/HttpErrorStatus';\n"]}

package/src/ipc/IpcDecorators.d.ts

@@ -0,0 +1,23 @@
+import 'reflect-metadata';
+import { MaskSpec } from '../http/LogFieldMask';
+export type IpcEndpointKind = 'request' | 'notification';
+export interface IpcEndpointOptions {
+    kind?: IpcEndpointKind;
+}
+export type IpcApiType<T> = abstract new (...args: never[]) => T;
+export declare const IPC_METADATA_KEYS: {
+    readonly API_ID: "webpieces:ipc-api-id";
+    readonly ENDPOINTS: "webpieces:ipc-endpoints";
+    readonly KINDS: "webpieces:ipc-kinds";
+};
+/** Marks a contract as IPC-only. HTTP routers and clients must reject it. */
+export declare function WpInternal(apiId: string): ClassDecorator;
+/** Declares the stable wire method ID for one method on an IPC-only contract. */
+export declare function WpIpcEndpoint(methodId: string, options?: IpcEndpointOptions): MethodDecorator;
+export declare function isInternalApi(apiClass: Function): boolean;
+export declare function getIpcApiId(apiClass: Function): string | undefined;
+export declare function getIpcEndpoints(apiClass: Function): Readonly<Record<string, string>>;
+export declare function getIpcEndpointKind(apiClass: Function, methodName: string): IpcEndpointKind;
+export declare function getIpcMaskSpec(apiClass: Function, methodName: string): MaskSpec | undefined;
+export declare function assertInternalApi(apiClass: Function): string;
+export declare function assertNotInternalApi(apiClass: Function, transport: string): void;

package/src/ipc/IpcDecorators.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IPC_METADATA_KEYS = void 0;
+exports.WpInternal = WpInternal;
+exports.WpIpcEndpoint = WpIpcEndpoint;
+exports.isInternalApi = isInternalApi;
+exports.getIpcApiId = getIpcApiId;
+exports.getIpcEndpoints = getIpcEndpoints;
+exports.getIpcEndpointKind = getIpcEndpointKind;
+exports.getIpcMaskSpec = getIpcMaskSpec;
+exports.assertInternalApi = assertInternalApi;
+exports.assertNotInternalApi = assertNotInternalApi;
+require("reflect-metadata");
+const errors_1 = require("../errors");
+const decorators_1 = require("../http/decorators");
+const IpcIdentity_1 = require("./IpcIdentity");
+exports.IPC_METADATA_KEYS = {
+    API_ID: 'webpieces:ipc-api-id',
+    ENDPOINTS: 'webpieces:ipc-endpoints',
+    KINDS: 'webpieces:ipc-kinds',
+};
+/** Marks a contract as IPC-only. HTTP routers and clients must reject it. */
+// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper
+function WpInternal(apiId) {
+    IpcIdentity_1.IpcIdentity.assert(apiId, 'API');
+    return (target) => {
+        const className = target.name || 'Unknown';
+        if (Reflect.hasMetadata(decorators_1.METADATA_KEYS.API_PATH, target) ||
+            Reflect.hasMetadata(decorators_1.METADATA_KEYS.ENDPOINTS, target)) {
+            throw new errors_1.InternalError(`Internal API ${className} cannot use @ApiPath or @Endpoint.`);
+        }
+        const authMethods = Reflect.getMetadata(decorators_1.METADATA_KEYS.AUTH_METHODS, target) || [];
+        if (authMethods.length > 0 || Reflect.hasMetadata(decorators_1.METADATA_KEYS.AUTH_META, target)) {
+            throw new errors_1.InternalError(`Internal API ${className} cannot use HTTP authorization decorators.`);
+        }
+        Reflect.defineMetadata(exports.IPC_METADATA_KEYS.API_ID, apiId, target);
+    };
+}
+/** Declares the stable wire method ID for one method on an IPC-only contract. */
+// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper
+function WpIpcEndpoint(methodId, options = {}) {
+    IpcIdentity_1.IpcIdentity.assert(methodId, 'method');
+    const kind = options.kind ?? 'request';
+    if (kind !== 'request' && kind !== 'notification')
+        throw new errors_1.BadRequestError('Invalid IPC endpoint kind');
+    return (target, propertyKey) => {
+        const apiClass = target.constructor;
+        const key = propertyKey;
+        if (['then', 'constructor', '__proto__'].includes(key)) {
+            throw new errors_1.BadRequestError(`Invalid IPC method name: ${key}`);
+        }
+        const endpoints = Reflect.getMetadata(exports.IPC_METADATA_KEYS.ENDPOINTS, apiClass) || {};
+        if (Object.values(endpoints).includes(methodId)) {
+            throw new errors_1.BadRequestError(`Duplicate IPC method identity: ${methodId}`);
+        }
+        endpoints[key] = methodId;
+        Reflect.defineMetadata(exports.IPC_METADATA_KEYS.ENDPOINTS, endpoints, apiClass);
+        const kinds = Reflect.getMetadata(exports.IPC_METADATA_KEYS.KINDS, apiClass) || {};
+        kinds[key] = kind;
+        Reflect.defineMetadata(exports.IPC_METADATA_KEYS.KINDS, kinds, apiClass);
+    };
+}
+// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper
+function isInternalApi(apiClass) {
+    return Reflect.hasMetadata(exports.IPC_METADATA_KEYS.API_ID, apiClass);
+}
+// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper
+function getIpcApiId(apiClass) {
+    return Reflect.getMetadata(exports.IPC_METADATA_KEYS.API_ID, apiClass);
+}
+// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper
+function getIpcEndpoints(apiClass) {
+    return Reflect.getMetadata(exports.IPC_METADATA_KEYS.ENDPOINTS, apiClass) || {};
+}
+// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper
+function getIpcEndpointKind(apiClass, methodName) {
+    const kinds = Reflect.getMetadata(exports.IPC_METADATA_KEYS.KINDS, apiClass) || {};
+    return kinds[methodName] ?? 'request';
+}
+// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper
+function getIpcMaskSpec(apiClass, methodName) {
+    return (0, decorators_1.getMaskSpec)(apiClass, methodName);
+}
+// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper
+function assertInternalApi(apiClass) {
+    const apiId = getIpcApiId(apiClass);
+    if (!apiId)
+        throw new errors_1.InternalError(`Class ${apiClass.name || 'Unknown'} must be decorated with @WpInternal(apiId).`);
+    if (Reflect.hasMetadata(decorators_1.METADATA_KEYS.API_PATH, apiClass) ||
+        Reflect.hasMetadata(decorators_1.METADATA_KEYS.ENDPOINTS, apiClass)) {
+        throw new errors_1.InternalError(`Internal API ${apiClass.name || 'Unknown'} cannot use @ApiPath or @Endpoint.`);
+    }
+    if (Object.keys(getIpcEndpoints(apiClass)).length === 0) {
+        throw new errors_1.InternalError(`Internal API ${apiClass.name || 'Unknown'} must declare at least one @WpIpcEndpoint.`);
+    }
+    return apiId;
+}
+// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper
+function assertNotInternalApi(apiClass, transport) {
+    if (isInternalApi(apiClass)) {
+        throw new errors_1.InternalError(`${transport} cannot use @WpInternal API ${apiClass.name || 'Unknown'}; use the IPC factories.`);
+    }
+}
+//# sourceMappingURL=IpcDecorators.js.map

package/src/ipc/IpcDecorators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IpcDecorators.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/ipc/IpcDecorators.ts"],"names":[],"mappings":";;;AAoBA,gCAkBC;AAID,sCAuBC;AAGD,sCAEC;AAGD,kCAEC;AAGD,0CAEC;AAGD,gDAIC;AAGD,wCAEC;AAGD,8CAoBC;AAGD,oDAMC;AA5HD,4BAA0B;AAC1B,sCAA2D;AAC3D,mDAAgE;AAEhE,+CAA4C;AAQ/B,QAAA,iBAAiB,GAAG;IAC7B,MAAM,EAAE,sBAAsB;IAC9B,SAAS,EAAE,yBAAyB;IACpC,KAAK,EAAE,qBAAqB;CACtB,CAAC;AAEX,6EAA6E;AAC7E,uGAAuG;AACvG,SAAgB,UAAU,CAAC,KAAa;IACpC,yBAAW,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,CAAC,MAAgB,EAAE,EAAE;QACxB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;QAC3C,IACI,OAAO,CAAC,WAAW,CAAC,0BAAa,CAAC,QAAQ,EAAE,MAAM,CAAC;YACnD,OAAO,CAAC,WAAW,CAAC,0BAAa,CAAC,SAAS,EAAE,MAAM,CAAC,EACtD,CAAC;YACC,MAAM,IAAI,sBAAa,CAAC,gBAAgB,SAAS,oCAAoC,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,WAAW,GAAa,OAAO,CAAC,WAAW,CAAC,0BAAa,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,0BAAa,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,sBAAa,CACnB,gBAAgB,SAAS,4CAA4C,CACxE,CAAC;QACN,CAAC;QACD,OAAO,CAAC,cAAc,CAAC,yBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC,CAAC;AACN,CAAC;AAED,iFAAiF;AACjF,uGAAuG;AACvG,SAAgB,aAAa,CAAC,QAAgB,EAAE,UAA8B,EAAE;IAC5E,yBAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;IACvC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,cAAc;QAC7C,MAAM,IAAI,wBAAe,CAAC,2BAA2B,CAAC,CAAC;IAC3D,OAAO,CAAC,MAAc,EAAE,WAA4B,EAAE,EAAE;QACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC;QACpC,MAAM,GAAG,GAAG,WAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,wBAAe,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,SAAS,GACX,OAAO,CAAC,WAAW,CAAC,yBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrE,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,wBAAe,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;QAC1B,OAAO,CAAC,cAAc,CAAC,yBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACzE,MAAM,KAAK,GACP,OAAO,CAAC,WAAW,CAAC,yBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjE,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAClB,OAAO,CAAC,cAAc,CAAC,yBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrE,CAAC,CAAC;AACN,CAAC;AAED,uGAAuG;AACvG,SAAgB,aAAa,CAAC,QAAkB;IAC5C,OAAO,OAAO,CAAC,WAAW,CAAC,yBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED,uGAAuG;AACvG,SAAgB,WAAW,CAAC,QAAkB;IAC1C,OAAO,OAAO,CAAC,WAAW,CAAC,yBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED,uGAAuG;AACvG,SAAgB,eAAe,CAAC,QAAkB;IAC9C,OAAO,OAAO,CAAC,WAAW,CAAC,yBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED,uGAAuG;AACvG,SAAgB,kBAAkB,CAAC,QAAkB,EAAE,UAAkB;IACrE,MAAM,KAAK,GACP,OAAO,CAAC,WAAW,CAAC,yBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjE,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;AAC1C,CAAC;AAED,uGAAuG;AACvG,SAAgB,cAAc,CAAC,QAAkB,EAAE,UAAkB;IACjE,OAAO,IAAA,wBAAW,EAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC;AAED,uGAAuG;AACvG,SAAgB,iBAAiB,CAAC,QAAkB;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QACN,MAAM,IAAI,sBAAa,CACnB,SAAS,QAAQ,CAAC,IAAI,IAAI,SAAS,6CAA6C,CACnF,CAAC;IACN,IACI,OAAO,CAAC,WAAW,CAAC,0BAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACrD,OAAO,CAAC,WAAW,CAAC,0BAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,EACxD,CAAC;QACC,MAAM,IAAI,sBAAa,CACnB,gBAAgB,QAAQ,CAAC,IAAI,IAAI,SAAS,oCAAoC,CACjF,CAAC;IACN,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,sBAAa,CACnB,gBAAgB,QAAQ,CAAC,IAAI,IAAI,SAAS,4CAA4C,CACzF,CAAC;IACN,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,uGAAuG;AACvG,SAAgB,oBAAoB,CAAC,QAAkB,EAAE,SAAiB;IACtE,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,sBAAa,CACnB,GAAG,SAAS,+BAA+B,QAAQ,CAAC,IAAI,IAAI,SAAS,0BAA0B,CAClG,CAAC;IACN,CAAC;AACL,CAAC","sourcesContent":["import 'reflect-metadata';\nimport { BadRequestError, InternalError } from '../errors';\nimport { getMaskSpec, METADATA_KEYS } from '../http/decorators';\nimport { MaskSpec } from '../http/LogFieldMask';\nimport { IpcIdentity } from './IpcIdentity';\n\nexport type IpcEndpointKind = 'request' | 'notification';\nexport interface IpcEndpointOptions {\n    kind?: IpcEndpointKind;\n}\nexport type IpcApiType<T> = abstract new (...args: never[]) => T;\n\nexport const IPC_METADATA_KEYS = {\n    API_ID: 'webpieces:ipc-api-id',\n    ENDPOINTS: 'webpieces:ipc-endpoints',\n    KINDS: 'webpieces:ipc-kinds',\n} as const;\n\n/** Marks a contract as IPC-only. HTTP routers and clients must reject it. */\n// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper\nexport function WpInternal(apiId: string): ClassDecorator {\n    IpcIdentity.assert(apiId, 'API');\n    return (target: Function) => {\n        const className = target.name || 'Unknown';\n        if (\n            Reflect.hasMetadata(METADATA_KEYS.API_PATH, target) ||\n            Reflect.hasMetadata(METADATA_KEYS.ENDPOINTS, target)\n        ) {\n            throw new InternalError(`Internal API ${className} cannot use @ApiPath or @Endpoint.`);\n        }\n        const authMethods: string[] = Reflect.getMetadata(METADATA_KEYS.AUTH_METHODS, target) || [];\n        if (authMethods.length > 0 || Reflect.hasMetadata(METADATA_KEYS.AUTH_META, target)) {\n            throw new InternalError(\n                `Internal API ${className} cannot use HTTP authorization decorators.`,\n            );\n        }\n        Reflect.defineMetadata(IPC_METADATA_KEYS.API_ID, apiId, target);\n    };\n}\n\n/** Declares the stable wire method ID for one method on an IPC-only contract. */\n// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper\nexport function WpIpcEndpoint(methodId: string, options: IpcEndpointOptions = {}): MethodDecorator {\n    IpcIdentity.assert(methodId, 'method');\n    const kind = options.kind ?? 'request';\n    if (kind !== 'request' && kind !== 'notification')\n        throw new BadRequestError('Invalid IPC endpoint kind');\n    return (target: object, propertyKey: string | symbol) => {\n        const apiClass = target.constructor;\n        const key = propertyKey as string;\n        if (['then', 'constructor', '__proto__'].includes(key)) {\n            throw new BadRequestError(`Invalid IPC method name: ${key}`);\n        }\n        const endpoints: Record<string, string> =\n            Reflect.getMetadata(IPC_METADATA_KEYS.ENDPOINTS, apiClass) || {};\n        if (Object.values(endpoints).includes(methodId)) {\n            throw new BadRequestError(`Duplicate IPC method identity: ${methodId}`);\n        }\n        endpoints[key] = methodId;\n        Reflect.defineMetadata(IPC_METADATA_KEYS.ENDPOINTS, endpoints, apiClass);\n        const kinds: Record<string, IpcEndpointKind> =\n            Reflect.getMetadata(IPC_METADATA_KEYS.KINDS, apiClass) || {};\n        kinds[key] = kind;\n        Reflect.defineMetadata(IPC_METADATA_KEYS.KINDS, kinds, apiClass);\n    };\n}\n\n// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper\nexport function isInternalApi(apiClass: Function): boolean {\n    return Reflect.hasMetadata(IPC_METADATA_KEYS.API_ID, apiClass);\n}\n\n// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper\nexport function getIpcApiId(apiClass: Function): string | undefined {\n    return Reflect.getMetadata(IPC_METADATA_KEYS.API_ID, apiClass);\n}\n\n// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper\nexport function getIpcEndpoints(apiClass: Function): Readonly<Record<string, string>> {\n    return Reflect.getMetadata(IPC_METADATA_KEYS.ENDPOINTS, apiClass) || {};\n}\n\n// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper\nexport function getIpcEndpointKind(apiClass: Function, methodName: string): IpcEndpointKind {\n    const kinds: Record<string, IpcEndpointKind> =\n        Reflect.getMetadata(IPC_METADATA_KEYS.KINDS, apiClass) || {};\n    return kinds[methodName] ?? 'request';\n}\n\n// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper\nexport function getIpcMaskSpec(apiClass: Function, methodName: string): MaskSpec | undefined {\n    return getMaskSpec(apiClass, methodName);\n}\n\n// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper\nexport function assertInternalApi(apiClass: Function): string {\n    const apiId = getIpcApiId(apiClass);\n    if (!apiId)\n        throw new InternalError(\n            `Class ${apiClass.name || 'Unknown'} must be decorated with @WpInternal(apiId).`,\n        );\n    if (\n        Reflect.hasMetadata(METADATA_KEYS.API_PATH, apiClass) ||\n        Reflect.hasMetadata(METADATA_KEYS.ENDPOINTS, apiClass)\n    ) {\n        throw new InternalError(\n            `Internal API ${apiClass.name || 'Unknown'} cannot use @ApiPath or @Endpoint.`,\n        );\n    }\n    if (Object.keys(getIpcEndpoints(apiClass)).length === 0) {\n        throw new InternalError(\n            `Internal API ${apiClass.name || 'Unknown'} must declare at least one @WpIpcEndpoint.`,\n        );\n    }\n    return apiId;\n}\n\n// webpieces-disable no-function-outside-class -- IPC decorator or immutable reflection metadata helper\nexport function assertNotInternalApi(apiClass: Function, transport: string): void {\n    if (isInternalApi(apiClass)) {\n        throw new InternalError(\n            `${transport} cannot use @WpInternal API ${apiClass.name || 'Unknown'}; use the IPC factories.`,\n        );\n    }\n}\n"]}

package/src/ipc/IpcIdentity.d.ts

@@ -0,0 +1,3 @@
+export declare class IpcIdentity {
+    static assert(value: unknown, label: string): asserts value is string;
+}

package/src/ipc/IpcIdentity.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IpcIdentity = void 0;
+const errors_1 = require("../errors");
+class IpcIdentity {
+    // webpieces-disable no-function-outside-class -- portable stateless IPC primitive; no platform DI container exists on this boundary; webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation
+    static assert(value, label) {
+        if (typeof value !== 'string' || !/^[a-zA-Z0-9][a-zA-Z0-9_.:-]{0,127}$/.test(value)) {
+            throw new errors_1.BadRequestError(`Invalid IPC ${label} identity`);
+        }
+    }
+}
+exports.IpcIdentity = IpcIdentity;
+//# sourceMappingURL=IpcIdentity.js.map

package/src/ipc/IpcIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IpcIdentity.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/ipc/IpcIdentity.ts"],"names":[],"mappings":";;;AAAA,sCAA4C;AAE5C,MAAa,WAAW;IACpB,6QAA6Q;IAC7Q,MAAM,CAAC,MAAM,CAAC,KAAc,EAAE,KAAa;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,wBAAe,CAAC,eAAe,KAAK,WAAW,CAAC,CAAC;QAC/D,CAAC;IACL,CAAC;CACJ;AAPD,kCAOC","sourcesContent":["import { BadRequestError } from '../errors';\n\nexport class IpcIdentity {\n    // webpieces-disable no-function-outside-class -- portable stateless IPC primitive; no platform DI container exists on this boundary; webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n    static assert(value: unknown, label: string): asserts value is string {\n        if (typeof value !== 'string' || !/^[a-zA-Z0-9][a-zA-Z0-9_.:-]{0,127}$/.test(value)) {\n            throw new BadRequestError(`Invalid IPC ${label} identity`);\n        }\n    }\n}\n"]}

package/src/ipc/IpcProtocol.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IpcProtocol = exports.IpcFailure = exports.IpcSuccess = exports.IpcRequest = exports.IpcCallContext = void 0;
 const errors_1 = require("../errors");
-const IpcContract_1 = require("./IpcContract");
+const IpcIdentity_1 = require("./IpcIdentity");
 class IpcCallContext {
     txId;
     callId;
@@ -11,10 +11,10 @@ class IpcCallContext {
         this.txId = txId;
         this.callId = callId;
         this.parentCallId = parentCallId;
-        IpcContract_1.IpcIdentity.assert(txId, 'transaction');
-        IpcContract_1.IpcIdentity.assert(callId, 'call');
+        IpcIdentity_1.IpcIdentity.assert(txId, 'transaction');
+        IpcIdentity_1.IpcIdentity.assert(callId, 'call');
         if (parentCallId !== undefined)
-            IpcContract_1.IpcIdentity.assert(parentCallId, 'parent call');
+            IpcIdentity_1.IpcIdentity.assert(parentCallId, 'parent call');
     }
 }
 exports.IpcCallContext = IpcCallContext;
@@ -77,8 +77,8 @@ class IpcProtocol {
         const context = new IpcCallContext(raw['txId'], raw['callId'], raw['parentCallId']);
         switch (value['type']) {
             case 'request':
-                IpcContract_1.IpcIdentity.assert(value['apiId'], 'API');
-                IpcContract_1.IpcIdentity.assert(value['methodId'], 'method');
+                IpcIdentity_1.IpcIdentity.assert(value['apiId'], 'API');
+                IpcIdentity_1.IpcIdentity.assert(value['methodId'], 'method');
                 if (!Object.prototype.hasOwnProperty.call(value, 'body'))
                     throw new errors_1.InternalError('Missing IPC request body');
                 return new IpcRequest(value['apiId'], value['methodId'], context, value['body']);

package/src/ipc/IpcProtocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"IpcProtocol.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/ipc/IpcProtocol.ts"],"names":[],"mappings":";;;AAAA,sCAA2D;AAC3D,+CAA4C;AAE5C,MAAa,cAAc;IAEV;IACA;IACA;IAHb,YACa,IAAY,EACZ,MAAc,EACd,YAAqB;QAFrB,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;QACd,iBAAY,GAAZ,YAAY,CAAS;QAE9B,yBAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACxC,yBAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,YAAY,KAAK,SAAS;YAAE,yBAAW,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IACpF,CAAC;CACJ;AAVD,wCAUC;AAED,MAAa,UAAU;IAIN;IACA;IACA;IAEA;IAPJ,OAAO,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,SAAS,CAAC;IAC1B,YACa,KAAa,EACb,QAAgB,EAChB,OAAuB;IAChC,0IAA0I;IACjI,IAAa;QAJb,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAgB;QAEvB,SAAI,GAAJ,IAAI,CAAS;IACvB,CAAC;CACP;AAVD,gCAUC;AACD,MAAa,UAAU;IAIN;IAEA;IALJ,OAAO,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,SAAS,CAAC;IAC1B,YACa,OAAuB;IAChC,0IAA0I;IACjI,IAAa;QAFb,YAAO,GAAP,OAAO,CAAgB;QAEvB,SAAI,GAAJ,IAAI,CAAS;IACvB,CAAC;CACP;AARD,gCAQC;AACD,MAAa,UAAU;IAIN;IACA;IAJJ,OAAO,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,SAAS,CAAC;IAC1B,YACa,OAAuB,EACvB,KAAsB;QADtB,YAAO,GAAP,OAAO,CAAgB;QACvB,UAAK,GAAL,KAAK,CAAiB;IAChC,CAAC;CACP;AAPD,gCAOC;AAID,MAAa,WAAW;IACpB,6QAA6Q;IAC7Q,MAAM,CAAC,MAAM,CAAC,KAAc;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,sBAAa,CAAC,wBAAwB,CAAC,CAAC;QACtD,CAAC;QACD,0IAA0I;QAC1I,OAAO,KAAgC,CAAC;IAC5C,CAAC;IAED,oIAAoI;IACpI,MAAM,CAAC,KAAK,CAAC,IAAY;QACrB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,sBAAa,CAAC,kCAAkC,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,cAAc,CAC9B,GAAG,CAAC,MAAM,CAAW,EACrB,GAAG,CAAC,QAAQ,CAAW,EACvB,GAAG,CAAC,cAAc,CAAuB,CAC5C,CAAC;QACF,QAAQ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACpB,KAAK,SAAS;gBACV,yBAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC1C,yBAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;oBACpD,MAAM,IAAI,sBAAa,CAAC,0BAA0B,CAAC,CAAC;gBACxD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACrF,KAAK,SAAS;gBACV,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;oBACpD,MAAM,IAAI,sBAAa,CAAC,0BAA0B,CAAC,CAAC;gBACxD,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,KAAK,SAAS;gBACV,OAAO,IAAI,UAAU,CACjB,OAAO;gBACP,0IAA0I;gBAC1I,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAA+B,CACnE,CAAC;YACN;gBACI,MAAM,IAAI,sBAAa,CAAC,mCAAmC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;IAED,oIAAoI;IACpI,MAAM,CAAC,WAAW,CAAC,CAAiB,EAAE,CAAiB;QACnD,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,CAAC;IAC3F,CAAC;CACJ;AA9CD,kCA8CC","sourcesContent":["import { ApiErrorPayload, InternalError } from '../errors';\nimport { IpcIdentity } from './IpcContract';\n\nexport class IpcCallContext {\n    constructor(\n        readonly txId: string,\n        readonly callId: string,\n        readonly parentCallId?: string,\n    ) {\n        IpcIdentity.assert(txId, 'transaction');\n        IpcIdentity.assert(callId, 'call');\n        if (parentCallId !== undefined) IpcIdentity.assert(parentCallId, 'parent call');\n    }\n}\n\nexport class IpcRequest {\n    readonly version = 1;\n    readonly type = 'request';\n    constructor(\n        readonly apiId: string,\n        readonly methodId: string,\n        readonly context: IpcCallContext,\n        // webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n        readonly body: unknown,\n    ) {}\n}\nexport class IpcSuccess {\n    readonly version = 1;\n    readonly type = 'success';\n    constructor(\n        readonly context: IpcCallContext,\n        // webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n        readonly body: unknown,\n    ) {}\n}\nexport class IpcFailure {\n    readonly version = 1;\n    readonly type = 'failure';\n    constructor(\n        readonly context: IpcCallContext,\n        readonly error: ApiErrorPayload,\n    ) {}\n}\nexport type IpcReply = IpcSuccess | IpcFailure;\nexport type IpcMessage = IpcRequest | IpcReply;\n\nexport class IpcProtocol {\n    // webpieces-disable no-function-outside-class -- portable stateless IPC primitive; no platform DI container exists on this boundary; webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n    static record(value: unknown): Record<string, unknown> {\n        if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n            throw new InternalError('Malformed IPC envelope');\n        }\n        // webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n        return value as Record<string, unknown>;\n    }\n\n    // webpieces-disable no-function-outside-class -- portable stateless IPC primitive; no platform DI container exists on this boundary\n    static parse(json: string): IpcMessage {\n        const value = IpcProtocol.record(JSON.parse(json));\n        if (value['version'] !== 1) throw new InternalError('Unsupported IPC protocol version');\n        const raw = IpcProtocol.record(value['context']);\n        const context = new IpcCallContext(\n            raw['txId'] as string,\n            raw['callId'] as string,\n            raw['parentCallId'] as string | undefined,\n        );\n        switch (value['type']) {\n            case 'request':\n                IpcIdentity.assert(value['apiId'], 'API');\n                IpcIdentity.assert(value['methodId'], 'method');\n                if (!Object.prototype.hasOwnProperty.call(value, 'body'))\n                    throw new InternalError('Missing IPC request body');\n                return new IpcRequest(value['apiId'], value['methodId'], context, value['body']);\n            case 'success':\n                if (!Object.prototype.hasOwnProperty.call(value, 'body'))\n                    throw new InternalError('Missing IPC success body');\n                return new IpcSuccess(context, value['body']);\n            case 'failure':\n                return new IpcFailure(\n                    context,\n                    // webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n                    IpcProtocol.record(value['error']) as unknown as ApiErrorPayload,\n                );\n            default:\n                throw new InternalError('Invalid IPC message discriminator');\n        }\n    }\n\n    // webpieces-disable no-function-outside-class -- portable stateless IPC primitive; no platform DI container exists on this boundary\n    static sameContext(a: IpcCallContext, b: IpcCallContext): boolean {\n        return a.callId === b.callId && a.txId === b.txId && a.parentCallId === b.parentCallId;\n    }\n}\n"]}
+{"version":3,"file":"IpcProtocol.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/ipc/IpcProtocol.ts"],"names":[],"mappings":";;;AAAA,sCAA2D;AAC3D,+CAA4C;AAE5C,MAAa,cAAc;IAEV;IACA;IACA;IAHb,YACa,IAAY,EACZ,MAAc,EACd,YAAqB;QAFrB,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;QACd,iBAAY,GAAZ,YAAY,CAAS;QAE9B,yBAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACxC,yBAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,IAAI,YAAY,KAAK,SAAS;YAAE,yBAAW,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IACpF,CAAC;CACJ;AAVD,wCAUC;AAED,MAAa,UAAU;IAIN;IACA;IACA;IAEA;IAPJ,OAAO,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,SAAS,CAAC;IAC1B,YACa,KAAa,EACb,QAAgB,EAChB,OAAuB;IAChC,0IAA0I;IACjI,IAAa;QAJb,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAgB;QAEvB,SAAI,GAAJ,IAAI,CAAS;IACvB,CAAC;CACP;AAVD,gCAUC;AACD,MAAa,UAAU;IAIN;IAEA;IALJ,OAAO,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,SAAS,CAAC;IAC1B,YACa,OAAuB;IAChC,0IAA0I;IACjI,IAAa;QAFb,YAAO,GAAP,OAAO,CAAgB;QAEvB,SAAI,GAAJ,IAAI,CAAS;IACvB,CAAC;CACP;AARD,gCAQC;AACD,MAAa,UAAU;IAIN;IACA;IAJJ,OAAO,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,SAAS,CAAC;IAC1B,YACa,OAAuB,EACvB,KAAsB;QADtB,YAAO,GAAP,OAAO,CAAgB;QACvB,UAAK,GAAL,KAAK,CAAiB;IAChC,CAAC;CACP;AAPD,gCAOC;AAID,MAAa,WAAW;IACpB,6QAA6Q;IAC7Q,MAAM,CAAC,MAAM,CAAC,KAAc;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,sBAAa,CAAC,wBAAwB,CAAC,CAAC;QACtD,CAAC;QACD,0IAA0I;QAC1I,OAAO,KAAgC,CAAC;IAC5C,CAAC;IAED,oIAAoI;IACpI,MAAM,CAAC,KAAK,CAAC,IAAY;QACrB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,sBAAa,CAAC,kCAAkC,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,cAAc,CAC9B,GAAG,CAAC,MAAM,CAAW,EACrB,GAAG,CAAC,QAAQ,CAAW,EACvB,GAAG,CAAC,cAAc,CAAuB,CAC5C,CAAC;QACF,QAAQ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACpB,KAAK,SAAS;gBACV,yBAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC1C,yBAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;oBACpD,MAAM,IAAI,sBAAa,CAAC,0BAA0B,CAAC,CAAC;gBACxD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACrF,KAAK,SAAS;gBACV,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;oBACpD,MAAM,IAAI,sBAAa,CAAC,0BAA0B,CAAC,CAAC;gBACxD,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,KAAK,SAAS;gBACV,OAAO,IAAI,UAAU,CACjB,OAAO;gBACP,0IAA0I;gBAC1I,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAA+B,CACnE,CAAC;YACN;gBACI,MAAM,IAAI,sBAAa,CAAC,mCAAmC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;IAED,oIAAoI;IACpI,MAAM,CAAC,WAAW,CAAC,CAAiB,EAAE,CAAiB;QACnD,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,CAAC;IAC3F,CAAC;CACJ;AA9CD,kCA8CC","sourcesContent":["import { ApiErrorPayload, InternalError } from '../errors';\nimport { IpcIdentity } from './IpcIdentity';\n\nexport class IpcCallContext {\n    constructor(\n        readonly txId: string,\n        readonly callId: string,\n        readonly parentCallId?: string,\n    ) {\n        IpcIdentity.assert(txId, 'transaction');\n        IpcIdentity.assert(callId, 'call');\n        if (parentCallId !== undefined) IpcIdentity.assert(parentCallId, 'parent call');\n    }\n}\n\nexport class IpcRequest {\n    readonly version = 1;\n    readonly type = 'request';\n    constructor(\n        readonly apiId: string,\n        readonly methodId: string,\n        readonly context: IpcCallContext,\n        // webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n        readonly body: unknown,\n    ) {}\n}\nexport class IpcSuccess {\n    readonly version = 1;\n    readonly type = 'success';\n    constructor(\n        readonly context: IpcCallContext,\n        // webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n        readonly body: unknown,\n    ) {}\n}\nexport class IpcFailure {\n    readonly version = 1;\n    readonly type = 'failure';\n    constructor(\n        readonly context: IpcCallContext,\n        readonly error: ApiErrorPayload,\n    ) {}\n}\nexport type IpcReply = IpcSuccess | IpcFailure;\nexport type IpcMessage = IpcRequest | IpcReply;\n\nexport class IpcProtocol {\n    // webpieces-disable no-function-outside-class -- portable stateless IPC primitive; no platform DI container exists on this boundary; webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n    static record(value: unknown): Record<string, unknown> {\n        if (typeof value !== 'object' || value === null || Array.isArray(value)) {\n            throw new InternalError('Malformed IPC envelope');\n        }\n        // webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n        return value as Record<string, unknown>;\n    }\n\n    // webpieces-disable no-function-outside-class -- portable stateless IPC primitive; no platform DI container exists on this boundary\n    static parse(json: string): IpcMessage {\n        const value = IpcProtocol.record(JSON.parse(json));\n        if (value['version'] !== 1) throw new InternalError('Unsupported IPC protocol version');\n        const raw = IpcProtocol.record(value['context']);\n        const context = new IpcCallContext(\n            raw['txId'] as string,\n            raw['callId'] as string,\n            raw['parentCallId'] as string | undefined,\n        );\n        switch (value['type']) {\n            case 'request':\n                IpcIdentity.assert(value['apiId'], 'API');\n                IpcIdentity.assert(value['methodId'], 'method');\n                if (!Object.prototype.hasOwnProperty.call(value, 'body'))\n                    throw new InternalError('Missing IPC request body');\n                return new IpcRequest(value['apiId'], value['methodId'], context, value['body']);\n            case 'success':\n                if (!Object.prototype.hasOwnProperty.call(value, 'body'))\n                    throw new InternalError('Missing IPC success body');\n                return new IpcSuccess(context, value['body']);\n            case 'failure':\n                return new IpcFailure(\n                    context,\n                    // webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation\n                    IpcProtocol.record(value['error']) as unknown as ApiErrorPayload,\n                );\n            default:\n                throw new InternalError('Invalid IPC message discriminator');\n        }\n    }\n\n    // webpieces-disable no-function-outside-class -- portable stateless IPC primitive; no platform DI container exists on this boundary\n    static sameContext(a: IpcCallContext, b: IpcCallContext): boolean {\n        return a.callId === b.callId && a.txId === b.txId && a.parentCallId === b.parentCallId;\n    }\n}\n"]}

package/src/ipc/index.d.ts

@@ -1,5 +1,6 @@
-export { IpcContract, IpcMethod, IpcVoidSchema } from './IpcContract';
-export type { IpcSchema, IpcMethods, IpcApiType } from './IpcContract';
+export { IpcIdentity } from './IpcIdentity';
+export { WpInternal, WpIpcEndpoint, isInternalApi, getIpcApiId, getIpcEndpoints, getIpcEndpointKind, getIpcMaskSpec, assertInternalApi, assertNotInternalApi, IPC_METADATA_KEYS, } from './IpcDecorators';
+export type { IpcApiType, IpcEndpointKind, IpcEndpointOptions } from './IpcDecorators';
 export { IpcCallContext, IpcRequest, IpcSuccess, IpcFailure, IpcProtocol } from './IpcProtocol';
 export type { IpcReply, IpcMessage } from './IpcProtocol';
 export { IpcConnection, IpcConnectionOptions, IpcTransportError, IpcErrors } from './IpcConnection';
@@ -7,6 +8,7 @@ export type { IpcTransport, IpcScheduler, IpcErrorOwner } from './IpcConnection'
 export { IpcCallLogger } from './IpcLogging';
 export type { IpcLogging } from './IpcLogging';
 export { MaskSpec } from '../http/LogFieldMask';
+export { MaskLog } from '../http/decorators';
 export { ApiMethodInfo } from '../http/ApiMethodInfo';
 export { LogApiCallImpl } from '../http/LogApiCall';
 export type { ApiCallContext } from '../http/ApiCallContext';

package/src/ipc/index.js

@@ -1,10 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.toError = exports.TimeoutError = exports.LogApiCallImpl = exports.ApiMethodInfo = exports.MaskSpec = exports.IpcCallLogger = exports.IpcErrors = exports.IpcTransportError = exports.IpcConnectionOptions = exports.IpcConnection = exports.IpcProtocol = exports.IpcFailure = exports.IpcSuccess = exports.IpcRequest = exports.IpcCallContext = exports.IpcVoidSchema = exports.IpcMethod = exports.IpcContract = void 0;
-var IpcContract_1 = require("./IpcContract");
-Object.defineProperty(exports, "IpcContract", { enumerable: true, get: function () { return IpcContract_1.IpcContract; } });
-Object.defineProperty(exports, "IpcMethod", { enumerable: true, get: function () { return IpcContract_1.IpcMethod; } });
-Object.defineProperty(exports, "IpcVoidSchema", { enumerable: true, get: function () { return IpcContract_1.IpcVoidSchema; } });
+exports.toError = exports.TimeoutError = exports.LogApiCallImpl = exports.ApiMethodInfo = exports.MaskLog = exports.MaskSpec = exports.IpcCallLogger = exports.IpcErrors = exports.IpcTransportError = exports.IpcConnectionOptions = exports.IpcConnection = exports.IpcProtocol = exports.IpcFailure = exports.IpcSuccess = exports.IpcRequest = exports.IpcCallContext = exports.IPC_METADATA_KEYS = exports.assertNotInternalApi = exports.assertInternalApi = exports.getIpcMaskSpec = exports.getIpcEndpointKind = exports.getIpcEndpoints = exports.getIpcApiId = exports.isInternalApi = exports.WpIpcEndpoint = exports.WpInternal = exports.IpcIdentity = void 0;
+var IpcIdentity_1 = require("./IpcIdentity");
+Object.defineProperty(exports, "IpcIdentity", { enumerable: true, get: function () { return IpcIdentity_1.IpcIdentity; } });
+var IpcDecorators_1 = require("./IpcDecorators");
+Object.defineProperty(exports, "WpInternal", { enumerable: true, get: function () { return IpcDecorators_1.WpInternal; } });
+Object.defineProperty(exports, "WpIpcEndpoint", { enumerable: true, get: function () { return IpcDecorators_1.WpIpcEndpoint; } });
+Object.defineProperty(exports, "isInternalApi", { enumerable: true, get: function () { return IpcDecorators_1.isInternalApi; } });
+Object.defineProperty(exports, "getIpcApiId", { enumerable: true, get: function () { return IpcDecorators_1.getIpcApiId; } });
+Object.defineProperty(exports, "getIpcEndpoints", { enumerable: true, get: function () { return IpcDecorators_1.getIpcEndpoints; } });
+Object.defineProperty(exports, "getIpcEndpointKind", { enumerable: true, get: function () { return IpcDecorators_1.getIpcEndpointKind; } });
+Object.defineProperty(exports, "getIpcMaskSpec", { enumerable: true, get: function () { return IpcDecorators_1.getIpcMaskSpec; } });
+Object.defineProperty(exports, "assertInternalApi", { enumerable: true, get: function () { return IpcDecorators_1.assertInternalApi; } });
+Object.defineProperty(exports, "assertNotInternalApi", { enumerable: true, get: function () { return IpcDecorators_1.assertNotInternalApi; } });
+Object.defineProperty(exports, "IPC_METADATA_KEYS", { enumerable: true, get: function () { return IpcDecorators_1.IPC_METADATA_KEYS; } });
 var IpcProtocol_1 = require("./IpcProtocol");
 Object.defineProperty(exports, "IpcCallContext", { enumerable: true, get: function () { return IpcProtocol_1.IpcCallContext; } });
 Object.defineProperty(exports, "IpcRequest", { enumerable: true, get: function () { return IpcProtocol_1.IpcRequest; } });
@@ -20,6 +29,8 @@ var IpcLogging_1 = require("./IpcLogging");
 Object.defineProperty(exports, "IpcCallLogger", { enumerable: true, get: function () { return IpcLogging_1.IpcCallLogger; } });
 var LogFieldMask_1 = require("../http/LogFieldMask");
 Object.defineProperty(exports, "MaskSpec", { enumerable: true, get: function () { return LogFieldMask_1.MaskSpec; } });
+var decorators_1 = require("../http/decorators");
+Object.defineProperty(exports, "MaskLog", { enumerable: true, get: function () { return decorators_1.MaskLog; } });
 var ApiMethodInfo_1 = require("../http/ApiMethodInfo");
 Object.defineProperty(exports, "ApiMethodInfo", { enumerable: true, get: function () { return ApiMethodInfo_1.ApiMethodInfo; } });
 var LogApiCall_1 = require("../http/LogApiCall");

package/src/ipc/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/ipc/index.ts"],"names":[],"mappings":";;;AAAA,6CAAsE;AAA7D,0GAAA,WAAW,OAAA;AAAE,wGAAA,SAAS,OAAA;AAAE,4GAAA,aAAa,OAAA;AAE9C,6CAAgG;AAAvF,6GAAA,cAAc,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,0GAAA,WAAW,OAAA;AAExE,iDAAoG;AAA3F,8GAAA,aAAa,OAAA;AAAE,qHAAA,oBAAoB,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AAAE,0GAAA,SAAS,OAAA;AAE1E,2CAA6C;AAApC,2GAAA,aAAa,OAAA;AAEtB,qDAAgD;AAAvC,wGAAA,QAAQ,OAAA;AACjB,uDAAsD;AAA7C,8GAAA,aAAa,OAAA;AACtB,iDAAoD;AAA3C,4GAAA,cAAc,OAAA;AAEvB,qDAAoD;AAA3C,4GAAA,YAAY,OAAA;AAErB,gDAA4C;AAAnC,qGAAA,OAAO,OAAA","sourcesContent":["export { IpcContract, IpcMethod, IpcVoidSchema } from './IpcContract';\nexport type { IpcSchema, IpcMethods, IpcApiType } from './IpcContract';\nexport { IpcCallContext, IpcRequest, IpcSuccess, IpcFailure, IpcProtocol } from './IpcProtocol';\nexport type { IpcReply, IpcMessage } from './IpcProtocol';\nexport { IpcConnection, IpcConnectionOptions, IpcTransportError, IpcErrors } from './IpcConnection';\nexport type { IpcTransport, IpcScheduler, IpcErrorOwner } from './IpcConnection';\nexport { IpcCallLogger } from './IpcLogging';\nexport type { IpcLogging } from './IpcLogging';\nexport { MaskSpec } from '../http/LogFieldMask';\nexport { ApiMethodInfo } from '../http/ApiMethodInfo';\nexport { LogApiCallImpl } from '../http/LogApiCall';\nexport type { ApiCallContext } from '../http/ApiCallContext';\nexport { TimeoutError } from '../http/TimeoutError';\n\nexport { toError } from '../lib/errorUtils';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/ipc/index.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAAnC,0GAAA,WAAW,OAAA;AACpB,iDAWyB;AAVrB,2GAAA,UAAU,OAAA;AACV,8GAAA,aAAa,OAAA;AACb,8GAAA,aAAa,OAAA;AACb,4GAAA,WAAW,OAAA;AACX,gHAAA,eAAe,OAAA;AACf,mHAAA,kBAAkB,OAAA;AAClB,+GAAA,cAAc,OAAA;AACd,kHAAA,iBAAiB,OAAA;AACjB,qHAAA,oBAAoB,OAAA;AACpB,kHAAA,iBAAiB,OAAA;AAGrB,6CAAgG;AAAvF,6GAAA,cAAc,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,0GAAA,WAAW,OAAA;AAExE,iDAAoG;AAA3F,8GAAA,aAAa,OAAA;AAAE,qHAAA,oBAAoB,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AAAE,0GAAA,SAAS,OAAA;AAE1E,2CAA6C;AAApC,2GAAA,aAAa,OAAA;AAEtB,qDAAgD;AAAvC,wGAAA,QAAQ,OAAA;AACjB,iDAA6C;AAApC,qGAAA,OAAO,OAAA;AAChB,uDAAsD;AAA7C,8GAAA,aAAa,OAAA;AACtB,iDAAoD;AAA3C,4GAAA,cAAc,OAAA;AAEvB,qDAAoD;AAA3C,4GAAA,YAAY,OAAA;AAErB,gDAA4C;AAAnC,qGAAA,OAAO,OAAA","sourcesContent":["export { IpcIdentity } from './IpcIdentity';\nexport {\n    WpInternal,\n    WpIpcEndpoint,\n    isInternalApi,\n    getIpcApiId,\n    getIpcEndpoints,\n    getIpcEndpointKind,\n    getIpcMaskSpec,\n    assertInternalApi,\n    assertNotInternalApi,\n    IPC_METADATA_KEYS,\n} from './IpcDecorators';\nexport type { IpcApiType, IpcEndpointKind, IpcEndpointOptions } from './IpcDecorators';\nexport { IpcCallContext, IpcRequest, IpcSuccess, IpcFailure, IpcProtocol } from './IpcProtocol';\nexport type { IpcReply, IpcMessage } from './IpcProtocol';\nexport { IpcConnection, IpcConnectionOptions, IpcTransportError, IpcErrors } from './IpcConnection';\nexport type { IpcTransport, IpcScheduler, IpcErrorOwner } from './IpcConnection';\nexport { IpcCallLogger } from './IpcLogging';\nexport type { IpcLogging } from './IpcLogging';\nexport { MaskSpec } from '../http/LogFieldMask';\nexport { MaskLog } from '../http/decorators';\nexport { ApiMethodInfo } from '../http/ApiMethodInfo';\nexport { LogApiCallImpl } from '../http/LogApiCall';\nexport type { ApiCallContext } from '../http/ApiCallContext';\nexport { TimeoutError } from '../http/TimeoutError';\n\nexport { toError } from '../lib/errorUtils';\n"]}

package/src/http/AuthApiKeyCompileAssertions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthApiKeyCompileAssertions.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/http/AuthApiKeyCompileAssertions.ts"],"names":[],"mappings":";;;AACA,6CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAa,2BAA2B;IACpC,4FAA4F;IAC5F,UAAU;QACN,MAAM,IAAI,GAAa;YACnB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,mBAAmB;YAC3B,WAAW,EAAE;gBACT,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,qCAAqC,EAAE;gBACvF,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,EAAE;aAC9C;SACJ,CAAC;QACF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,uEAAuE;IACvE,gBAAgB;QACZ,MAAM,UAAU,GAAqB,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;QACtG,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,8FAA8F;IAC9F,mBAAmB;QACf,OAAO,IAAA,uBAAU,EAAC,mBAAmB,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,4FAA4F;IAC5F,QAAQ;QACJ,+FAA+F;QAC/F,MAAM,QAAQ,GAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAClG,KAAK,QAAQ,CAAC;QACd,gGAAgG;QAChG,MAAM,aAAa,GAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAChF,KAAK,aAAa,CAAC;QACnB,6FAA6F;QAC7F,MAAM,KAAK,GAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACzF,KAAK,KAAK,CAAC;QACX,wFAAwF;QACxF,MAAM,UAAU,GAAa,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC/F,KAAK,UAAU,CAAC;QAChB,0FAA0F;QAC1F,MAAM,cAAc,GAAqB,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC7E,KAAK,cAAc,CAAC;QACpB,0FAA0F;QAC1F,MAAM,gBAAgB,GAAqB,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QAC5D,KAAK,gBAAgB,CAAC;QACtB,8FAA8F;QAC9F,MAAM,eAAe,GAAqB,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC3E,KAAK,eAAe,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,qBAAqB;QACjB,sFAAsF;QACtF,MAAM,MAAM,GAAG,IAAA,uBAAU,EAAC,mBAAmB,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,2BAA2B,CAAC,IAAc;QACtC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,QAAQ;gBACT,OAAO,QAAQ,CAAC;YACpB,KAAK,KAAK;gBACN,OAAO,KAAK,CAAC;YACjB,KAAK,MAAM;gBACP,OAAO,MAAM,CAAC;YAClB,KAAK,eAAe;gBAChB,OAAO,eAAe,CAAC;YAC3B,KAAK,SAAS;gBACV,OAAO,SAAS,CAAC;YACrB,KAAK,QAAQ;gBACT,OAAO,QAAQ,CAAC;YACpB,KAAK,YAAY;gBACb,OAAO,YAAY,CAAC;QAC5B,CAAC;IACL,CAAC;CACJ;AApFD,kEAoFC","sourcesContent":["import { ApiKeyCredential, AuthMode } from './auth-mode';\nimport { AuthApiKey } from './decorators';\n\n/**\n * COMPILE-TIME assertions for the `apikey` member of the {@link AuthMode} union and for the\n * {@link AuthApiKey} signature. Each `@ts-expect-error` below FAILS THE BUILD (TS2578, \"unused\n * '@ts-expect-error' directive\") if the line it guards ever starts compiling.\n *\n * WHY THIS IS NOT A `.spec.ts` FILE — same reason as its sibling `AuthJwtCompileAssertions.ts`:\n * tsconfig.lib.json EXCLUDES specs and vitest strips types with esbuild, so a `@ts-expect-error` in a\n * spec is inert and the suite passes whether or not the guarded line really errors.\n *\n * WHAT IT PINS.\n *\n * 1. The union member is `{ kind: 'apikey'; regime: string; credentials: [...] }` and nothing looser.\n *    `regime` is the lookup key selecting WHICH key regime a route belongs to, so a mode with no\n *    regime — or spelled `api-key`, which is what a reader guesses from the decorator — must not\n *    type-check its way into a switch that would then silently miss it.\n * 2. `credentials` is NON-EMPTY. A regime that names no credential generates a published document\n *    with no security block, which is precisely the silent failure the argument exists to remove, so\n *    `[]` is a compile error rather than a runtime throw (shim shape #4).\n * 3. {@link ApiKeyCredential} makes the two OpenAPI schemes MUTUALLY exclusive: a header credential\n *    must carry its header name, and a bearer credential must NOT — its location IS `Authorization`,\n *    so a `name` beside it would be a lie a generator has to guess about.\n * 4. The ONE-ARGUMENT `@AuthApiKey('regime')` form is GONE. It could declare a key regime while\n *    saying nothing about where the credential rides, which is the whole defect; per the\n *    no-backwards-compatibility rule there is no overload and no optional second parameter left\n *    behind, and this directive is what proves it.\n *\n * The EXHAUSTIVENESS half needs no directive: `apiKeyIsCoveredExhaustively` below returns on every\n * branch with no `default`, so dropping the `apikey` case makes tsc fail with TS7030 (not all code\n * paths return a value). That is the same property `AuthFilter.verifiesCaller` and\n * `DestinationTrust.forAuthMode` rely on, asserted here where it cannot be edited away by accident.\n */\nexport class AuthApiKeyCompileAssertions {\n    /** The one legitimate spelling must keep compiling; asserted by the ABSENCE of an error. */\n    legitimate(): AuthMode {\n        const mode: AuthMode = {\n            kind: 'apikey',\n            regime: 'onetablet-partner',\n            credentials: [\n                { in: 'header', name: 'x-api-key', description: 'The key issued to your integration.' },\n                { in: 'header', name: 'x-organization-id' },\n            ],\n        };\n        return mode;\n    }\n\n    /** The bearer branch, likewise asserted by the ABSENCE of an error. */\n    legitimateBearer(): ApiKeyCredential {\n        const credential: ApiKeyCredential = { in: 'bearer', description: 'Send the key as a bearer token.' };\n        return credential;\n    }\n\n    /** The decorator's TWO-argument form is the only one; asserted by the ABSENCE of an error. */\n    legitimateDecorator(): ClassDecorator & MethodDecorator {\n        return AuthApiKey('onetablet-partner', [{ in: 'header', name: 'x-api-key' }]);\n    }\n\n    /** Every one of these must be UNWRITABLE. A directive going unused here fails the build. */\n    rejected(): void {\n        // @ts-expect-error `regime` is REQUIRED — it selects which key regime, so it cannot be omitted\n        const noRegime: AuthMode = { kind: 'apikey', credentials: [{ in: 'header', name: 'x-api-key' }] };\n        void noRegime;\n        // @ts-expect-error `credentials` is REQUIRED — a regime that declares no location is the defect\n        const noCredentials: AuthMode = { kind: 'apikey', regime: 'onetablet-partner' };\n        void noCredentials;\n        // @ts-expect-error EMPTY is not a widening — it would emit a document with no security block\n        const empty: AuthMode = { kind: 'apikey', regime: 'onetablet-partner', credentials: [] };\n        void empty;\n        // @ts-expect-error the discriminant is 'apikey'; 'api-key' is not a member of the union\n        const misspelled: AuthMode = { kind: 'api-key', regime: 'onetablet-partner', credentials: [] };\n        void misspelled;\n        // @ts-expect-error bearer's location IS `Authorization`; a header name beside it is a lie\n        const bearerWithName: ApiKeyCredential = { in: 'bearer', name: 'x-api-key' };\n        void bearerWithName;\n        // @ts-expect-error a header credential with no header name cannot become a securityScheme\n        const headerWithNoName: ApiKeyCredential = { in: 'header' };\n        void headerWithNoName;\n        // @ts-expect-error 'query' is not reachable — the framework declares only these two locations\n        const unknownLocation: ApiKeyCredential = { in: 'query', name: 'api_key' };\n        void unknownLocation;\n    }\n\n    /**\n     * The DELETED one-argument form. `@AuthApiKey('onetablet-partner')` used to compile and is now a\n     * compile error naming the missing `credentials` argument — the delivery mechanism for the\n     * migration, and the reason no `@deprecated` overload survives.\n     */\n    oneArgumentFormIsGone(): void {\n        // @ts-expect-error the one-argument form is DELETED; pass the credential list as well\n        const legacy = AuthApiKey('onetablet-partner');\n        void legacy;\n    }\n\n    /**\n     * Exhaustiveness, stated as code: NO `default`, a return on every branch. Deleting the `apikey`\n     * case turns this into TS7030 — the compile error that forces a DECISION about a new mode's trust\n     * posture rather than letting it land on one by accident.\n     */\n    apiKeyIsCoveredExhaustively(mode: AuthMode): string {\n        switch (mode.kind) {\n            case 'public':\n                return 'public';\n            case 'jwt':\n                return 'jwt';\n            case 'oidc':\n                return 'oidc';\n            case 'shared-secret':\n                return 'shared-secret';\n            case 'webhook':\n                return 'webhook';\n            case 'apikey':\n                return 'apikey';\n            case 'local-only':\n                return 'local-only';\n        }\n    }\n}\n"]}

package/src/http/AuthJwtCompileAssertions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuthJwtCompileAssertions.js","sourceRoot":"","sources":["../../../../../../packages/core/core-util/src/http/AuthJwtCompileAssertions.ts"],"names":[],"mappings":";;;AAAA,6CAAuC;AAEvC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAa,wBAAwB;IACjC,uGAAuG;IACvG,UAAU;QACN,KAAK,IAAA,oBAAO,EAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,KAAK,IAAA,oBAAO,EAAC,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7C,KAAK,IAAA,oBAAO,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,KAAK,IAAA,oBAAO,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,KAAK,IAAA,oBAAO,EAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,4FAA4F;IAC5F,QAAQ;QACJ,4EAA4E;QAC5E,KAAK,IAAA,oBAAO,EAAC,EAAE,CAAC,CAAC;QACjB,sFAAsF;QACtF,KAAK,IAAA,oBAAO,EAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5B,uEAAuE;QACvE,KAAK,IAAA,oBAAO,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1D,uFAAuF;QACvF,KAAK,IAAA,oBAAO,EAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,sFAAsF;QACtF,KAAK,IAAA,oBAAO,EAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,4FAA4F;QAC5F,KAAK,IAAA,oBAAO,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;CACJ;AAzBD,4DAyBC","sourcesContent":["import { AuthJwt } from './decorators';\n\n/**\n * COMPILE-TIME assertions for `JwtRoles` — the guarantee that every broken role decision is a compile\n * error rather than a silent over-permissioning. Each `@ts-expect-error` below FAILS THE BUILD (TS2578,\n * \"unused '@ts-expect-error' directive\") if the line it guards ever starts compiling. Verified by\n * deliberately making a guarded line valid and watching `tsc -p tsconfig.lib.json` go red.\n *\n * WHY THIS IS NOT A `.spec.ts` FILE. It was, and it proved nothing: tsconfig.lib.json EXCLUDES spec\n * files, and vitest transpiles with esbuild, which strips types without checking them. So a\n * `@ts-expect-error` in a spec is inert — the suite passes whether or not the guarded line really\n * errors. Verified the hard way: with one guarded line deliberately made VALID, both `vitest run` and\n * `nx run core-util:ci` stayed green. A type-level guarantee must be asserted in a file the\n * type-checker actually compiles, which is any non-spec file under `src/`.\n *\n * WHY IT CALLS THE FACTORIES INSTEAD OF USING DECORATOR SYNTAX. A decorator factory is a plain\n * function, so a direct call type-checks the argument identically — and the first cut of this file,\n * which used `@ApiPath` + `@Endpoint` on an abstract class, made the architecture scanner classify\n * core-util as exporting an API contract and demand a `role:api-lib` tag. A test fixture must not\n * change what the repo believes about its own architecture.\n *\n * The counterpart RUNTIME behaviour (that `allRolesAllowed: true` reads back as `[]` through\n * `rolesRequired`) is asserted in `__tests__/pubsub-and-auth-decorators.spec.ts`, where runtime\n * assertions belong.\n */\nexport class AuthJwtCompileAssertions {\n    /** The two legitimate spellings must keep compiling; this half is asserted by the ABSENCE of error. */\n    legitimate(): void {\n        void AuthJwt({ roles: ['admin'] });\n        void AuthJwt({ roles: ['admin', 'editor'] });\n        void AuthJwt({ allRolesAllowed: true });\n        void AuthJwt({ allRolesAllowed: true, inOrg: true });\n        void AuthJwt({ roles: ['admin'], tenantScoped: true });\n    }\n\n    /** Every one of these must be UNWRITABLE. A directive going unused here fails the build. */\n    rejected(): void {\n        // @ts-expect-error pick a branch — {} may not mean \"any authenticated user\"\n        void AuthJwt({});\n        // @ts-expect-error roles needs AT LEAST ONE entry; [] was the old silent widest grant\n        void AuthJwt({ roles: [] });\n        // @ts-expect-error contradictory: wide AND role-gated at the same time\n        void AuthJwt({ allRolesAllowed: true, roles: ['admin'] });\n        // @ts-expect-error allRolesAllowed:false is a redundant SECOND spelling of role-gating\n        void AuthJwt({ roles: ['admin'], allRolesAllowed: false });\n        // @ts-expect-error `false` is never how you say \"wide\" — the other branch is for that\n        void AuthJwt({ allRolesAllowed: false });\n        // @ts-expect-error app-defined fields alone authorize nothing; a role decision is mandatory\n        void AuthJwt({ inOrg: true });\n    }\n}\n"]}

package/src/ipc/IpcCompileAssertions.d.ts

@@ -1,4 +0,0 @@
-/** These assertions compile in package builds, unlike transpiled-only spec files. Never invoked. */
-export declare class IpcCompileAssertions {
-    static assertExhaustiveMetadata(): void;
-}

package/src/ipc/IpcCompileAssertions.js

@@ -1,39 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IpcCompileAssertions = void 0;
-const IpcContract_1 = require("./IpcContract");
-const LogFieldMask_1 = require("../http/LogFieldMask");
-class Request {
-    id;
-    constructor(id) {
-        this.id = id;
-    }
-}
-class Schema {
-    // webpieces-disable no-any-unknown -- untrusted IPC data is schema-validated; generic dispatch cannot assume a DTO type before validation
-    parse(value) {
-        if (!(value instanceof Request))
-            throw new Error('Expected Request');
-        return value;
-    }
-}
-class Api {
-}
-class Incomplete {
-    first = new IpcContract_1.IpcMethod('first', new Schema(), new Schema(), new LogFieldMask_1.MaskSpec({}));
-}
-class MultipleApi {
-}
-/** These assertions compile in package builds, unlike transpiled-only spec files. Never invoked. */
-class IpcCompileAssertions {
-    // webpieces-disable no-function-outside-class -- portable stateless IPC primitive; no platform DI container exists on this boundary
-    static assertExhaustiveMetadata() {
-        // @ts-expect-error every API member needs explicit runtime metadata
-        new IpcContract_1.IpcContract('incomplete', Api, new Incomplete());
-        // @ts-expect-error multi-argument API methods are not IPC DTO contracts
-        const multiple = new Incomplete();
-        void multiple;
-    }
-}
-exports.IpcCompileAssertions = IpcCompileAssertions;
-//# sourceMappingURL=IpcCompileAssertions.js.map