ClintchizandClaude Opus 5
e01915823a
Brings the uncommitted body of work under version control so it cannot be
lost. Gates are green: 152 tests pass across rpc/router/dev-server,
typecheck, lint, format and check:public-api all clean.
NOT YET REVIEWED. None of Tasks 5-11 has had an independent task review, and
Task 4's second fix round was never re-reviewed either.
Known gaps against the plan, recorded here rather than discovered later:
- packages/rpc/test/{transport,server,client}.test.ts are ABSENT. The plan
required a test file for each. server.ts holds the fail-closed identity and
permission checks and currently has no direct coverage at all.
- rpc-endpoint.test.ts has 3 tests where the plan specified 9. Missing:
unknown service, non-POST, malformed body, non-rpc passthrough, and the
isInternalCaller sweep. This is the task where a reachable
/__wrnexus/rpc/* makes every permission check in the workspace bypassable.
- http.test.ts has 3 of 7; integration.test.ts 2 of 3;
services-discovery.test.ts 1 of 4.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
33 lines
762 B
JSON
33 lines
762 B
JSON
{
|
|
"name": "@wrnexus/rpc",
|
|
"version": "0.8.4",
|
|
"private": true,
|
|
"type": "module",
|
|
"main": "./src/index.ts",
|
|
"types": "./src/index.ts",
|
|
"exports": {
|
|
".": "./src/index.ts"
|
|
},
|
|
"description": "Typed request/response calls between workspace apps, carrying end-user identity.",
|
|
"files": [
|
|
"src",
|
|
"README.md"
|
|
],
|
|
"scripts": {
|
|
"test": "bun test",
|
|
"typecheck": "tsc --noEmit",
|
|
"check": "bun run typecheck && bun run test"
|
|
},
|
|
"dependencies": {
|
|
"@wrnexus/authz": "workspace:*",
|
|
"@wrnexus/core": "workspace:*",
|
|
"@wrnexus/jwt": "workspace:*",
|
|
"@wrnexus/helpers": "workspace:*",
|
|
"@wrnexus/validation": "workspace:*"
|
|
},
|
|
"devDependencies": {
|
|
"@types/bun": "^1.3.14",
|
|
"typescript": "^5.9.2"
|
|
}
|
|
}
|