@wssto2/vue-core 0.15.1 → 0.15.2

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.15.2 — 2026-10-20
+
+A hand-built `Idempotency-Key` header is now a lint error.
+
+### New
+- **eslint:** `vueCoreConfig` reports a hand-built `Idempotency-Key` header (`no-raw-idempotency-header`, a `no-restricted-syntax` entry): a `headers: { "Idempotency-Key": … }` object property in any casing, and `headers.set(...)` / `.append(...)` with that name. Use the request option `{ idempotencyKey }`, which is also re-sent on the renew-and-retry after a 401. `src/client` is excluded. An application that sets its own `no-restricted-syntax` replaces it and should spread `RAW_IDEMPOTENCY_HEADER_SELECTORS` (exported from `@wssto2/vue-core/eslint`).
+
 ## 0.15.1 — 2026-10-20
 
 A dialog opened from a dialog could paint behind it.

package/bin/templates/feature-crud/api.ts.tpl

@@ -17,7 +17,7 @@ export const __FEATURE_API_CLIENT__ = (http: HttpClient) => ({
 
   /** A 422 lands on the form's fields (`form.submit`). */
   async create(payload: __FEATURE_FORM_TYPE__, idempotencyKey: string): Promise<__FEATURE_ENTITY__> {
-    return (await http.request(__FEATURE_ROUTE_TABLE__.create, payload, { headers: { "Idempotency-Key": idempotencyKey } })).data;
+    return (await http.request(__FEATURE_ROUTE_TABLE__.create, payload, { idempotencyKey })).data;
   },
 });
 

package/dist/eslint/index.d.ts

@@ -6,6 +6,11 @@ import type { Linter } from "eslint";
  */
 export declare const TYPED_RULES: readonly string[];
 export declare const TYPED_RULE_SET: ReadonlySet<string>;
+/** Rule `no-raw-idempotency-header`, as `no-restricted-syntax` selectors: the key goes through `RequestOptions.idempotencyKey`. */
+export declare const RAW_IDEMPOTENCY_HEADER_SELECTORS: readonly {
+    selector: string;
+    message: string;
+}[];
 export interface VueCoreConfigOptions {
     /**
      * Turn on the type-aware rules (`TYPED_RULES`, at `warn`: the ratchet counts them). Type-aware linting is slow, so it is

package/dist/eslint/index.js

@@ -2,8 +2,8 @@ import l from "@eslint/js";
 import u from "eslint-plugin-vue";
 import r from "globals";
 import t from "typescript-eslint";
-import a from "vue-eslint-parser";
-const o = [
+import c from "vue-eslint-parser";
+const i = [
   "@typescript-eslint/await-thenable",
   "@typescript-eslint/no-base-to-string",
   "@typescript-eslint/no-floating-promises",
@@ -21,11 +21,17 @@ const o = [
   "@typescript-eslint/restrict-plus-operands",
   "@typescript-eslint/restrict-template-expressions",
   "@typescript-eslint/unbound-method"
-], y = new Set(o);
-function b({ typed: e = !1, tsconfigRootDir: n, ignores: i = [], rules: p = {} } = {}) {
+], b = new Set(i), o = "/^idempotency-key$/i", f = [
+  `Property[key.name='headers'] > ObjectExpression > Property[key.value=${o}]`,
+  `CallExpression[callee.property.name=/^(set|append)$/][arguments.0.value=${o}]`
+].map((e) => ({
+  selector: e,
+  message: "Do not build the Idempotency-Key header by hand: pass the request option { idempotencyKey } (it is also re-sent on the renew-and-retry after a 401)."
+}));
+function h({ typed: e = !1, tsconfigRootDir: n, ignores: p = [], rules: a = {} } = {}) {
   if (e && !n) throw new Error("vueCoreConfig: typed linting needs tsconfigRootDir (usually import.meta.dirname)");
   return [
-    { ignores: ["dist/**", "node_modules/**", "coverage/**", "**/*.d.ts", ...i] },
+    { ignores: ["dist/**", "node_modules/**", "coverage/**", "**/*.d.ts", ...p] },
     l.configs.recommended,
     ...t.configs.recommended,
     ...u.configs["flat/recommended"],
@@ -36,7 +42,7 @@ function b({ typed: e = !1, tsconfigRootDir: n, ignores: i = [], rules: p = {} }
     {
       files: ["**/*.vue"],
       languageOptions: {
-        parser: a,
+        parser: c,
         parserOptions: { parser: t.parser, sourceType: "module", extraFileExtensions: [".vue"] }
       }
     },
@@ -48,7 +54,7 @@ function b({ typed: e = !1, tsconfigRootDir: n, ignores: i = [], rules: p = {} }
       rules: {
         // TypeScript reports undefined references itself, and no-undef cannot see ambient global types.
         "no-undef": "off",
-        ...e ? Object.fromEntries(o.map((s) => [s, "warn"])) : {},
+        ...e ? Object.fromEntries(i.map((s) => [s, "warn"])) : {},
         // Superseded by @typescript-eslint/no-unused-vars below; the core rule mis-fires on type-only constructs.
         "no-unused-vars": "off",
         "no-useless-assignment": "error",
@@ -73,15 +79,18 @@ function b({ typed: e = !1, tsconfigRootDir: n, ignores: i = [], rules: p = {} }
           "error",
           { argsIgnorePattern: "^_", varsIgnorePattern: "^_", caughtErrorsIgnorePattern: "^_", destructuredArrayIgnorePattern: "^_" }
         ],
-        ...p
+        ...a
       }
     },
+    // The client implementation sets the header itself; applications must use the request option.
+    { files: ["**/*.{ts,vue}"], ignores: ["src/client/**"], rules: { "no-restricted-syntax": ["error", ...f] } },
     // Test files (named *.test.ts or in a tests/ folder) define stub components inline, several per file, with untyped prop lists on purpose.
     { files: ["**/*.test.ts", "tests/**/*.{ts,vue}"], languageOptions: { globals: r.vitest }, rules: { "vue/require-prop-types": "off", "vue/one-component-per-file": "off" } }
   ];
 }
 export {
-  o as TYPED_RULES,
-  y as TYPED_RULE_SET,
-  b as vueCoreConfig
+  f as RAW_IDEMPOTENCY_HEADER_SELECTORS,
+  i as TYPED_RULES,
+  b as TYPED_RULE_SET,
+  h as vueCoreConfig
 };

package/dist/index.d.ts

@@ -1,2 +1,2 @@
 /** The version of @wssto2/vue-core (kept equal to package.json by index.test.ts). */
-export declare const version = "0.15.1";
+export declare const version = "0.15.2";

package/dist/index.js

@@ -1,4 +1,4 @@
-const o = "0.15.1";
+const o = "0.15.2";
 export {
   o as version
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wssto2/vue-core",
-  "version": "0.15.1",
+  "version": "0.15.2",
   "goCore": "v1.19.0",
   "description": "Shared Vue 3 library for go-core applications: app shell, list / record / form pages and their controls.",
   "keywords": [