omc-core 0.4.53 → 0.4.54

package/dist/cloudpivot-auth.js

@@ -183,7 +183,16 @@ export function cloudPivotTenantHeaders(engineCode) {
     const code = engineCode?.trim();
     return code ? { "x-lowcode-enginecode": code } : {};
 }
-export async function resolveCloudPivotAuthoritativeOrigin(baseUrl, signal, fetchImpl = fetch, tenantHeaders = {}) {
+/**
+ * Fetch and decode the public system config WITHOUT requiring a pcServerUrl.
+ *
+ * AI-Platform deployments answer a valid `systemVersion` while `pcServerUrl`
+ * is `null`. Version evidence and login need only this payload, so reading it
+ * must not be coupled to authoritative-origin resolution (live 2026-10-17:
+ * the resolver threw, the caller swallowed it, version became undefined and
+ * every write failed closed with version-family-evidence-missing).
+ */
+export async function fetchCloudPivotSystemConfig(baseUrl, signal, fetchImpl = fetch, tenantHeaders = {}) {
     const response = await fetchImpl(new URL("/api/public/system/config", baseUrl), { signal, headers: { Accept: "application/json", ...tenantHeaders } });
     if (!response.ok)
         throw new CloudPivotAuthenticationError(`CloudPivot returned HTTP ${response.status} for /api/public/system/config.`);
@@ -201,6 +210,16 @@ export async function resolveCloudPivotAuthoritativeOrigin(baseUrl, signal, fetc
     const system = envelopeData(body);
     if (!isRecord(system))
         throw new CloudPivotAuthenticationError("CloudPivot returned an unsupported /api/public/system/config payload.");
+    return system;
+}
+/**
+ * Resolve the authoritative origin from the public system config. Deliberately
+ * strict: an invalid/absent `pcServerUrl` still fails loudly so a misconfigured
+ * deployment is never silently downgraded. Callers that only need version
+ * evidence or login must use `fetchCloudPivotSystemConfig` instead.
+ */
+export async function resolveCloudPivotAuthoritativeOrigin(baseUrl, signal, fetchImpl = fetch, tenantHeaders = {}) {
+    const system = await fetchCloudPivotSystemConfig(baseUrl, signal, fetchImpl, tenantHeaders);
     const pcServerUrl = optionalString(system, ["pcServerUrl"]);
     if (!pcServerUrl || !URL.canParse(pcServerUrl))
         throw new CloudPivotAuthenticationError("CloudPivot public system config is missing a valid pcServerUrl.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omc-core",
-  "version": "0.4.53",
+  "version": "0.4.54",
   "description": "Shared OMC capability kernel: capability contracts, governance, and decoders. Zero DSH dependencies.",
   "type": "module",
   "files": [