ClintchizandClaude Opus 5
ce68803471
Critical: - router: fail loudly (WRN-SERVICE-COLLISION) when two app/services files scan to the same service name, instead of silently letting directory-walk order pick a winner. Important: - server.ts: wrap a throwing input schema so its raw message cannot escape invoke(); returns RPC_INVALID and logs server-side instead. - client.ts: race timeoutMs against transport.call so a stalled transport cannot hang the caller; rejects with a ServiceError(RPC_TRANSPORT). - client.ts: the proxy returns undefined for undeclared properties (incl. then/catch/finally) instead of a function that throws, closing the await-client thenable trap. - gateway.ts / rpc-dispatch.ts: import RPC_PATH_PREFIX / RPC_INTERNAL_HEADER from @wrnexus/rpc instead of hardcoding local copies. - gateway.test.ts: cover the RPC-prefix edge block and internal-header stripping across casing variants. - http.test.ts / client.test.ts: cover anonymous-call header omission, the internal marker, the retryable-status sweep, network/malformed/HTML failures, AbortSignal propagation, the timeout path, and timer cleanup. Minor: - transport.ts: Object.hasOwn for handler lookup; note the entry-only abort check. - client.ts: wrap a missing/invalid WRNEXUS_RPC_SECRET as a ServiceError (RPC_IDENTITY) instead of a bare Error. - rpc/package.json: drop the unused @wrnexus/authz dependency. - server.ts: implement() now throws at construction time if a declared procedure has no own handler. Verified: reverting the service-collision check and the client timeout race each make their new test fail, then restore green. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@wrnexus/rpc
Define a service contract in a shared workspace package, then import that same contract from the caller and callee.
import {
defineService,
implement,
inProcessTransport,
procedure,
serviceClient,
} from "@wrnexus/rpc";
import { v } from "@wrnexus/validation";
const greeter = defineService({
name: "greeter",
procedures: {
greet: procedure
.input(v.object({ name: v.string() }))
.output<{ message: string }>()
.build(),
},
});
const service = implement(
greeter,
{ greet: async ({ name }) => ({ message: `Hello, ${name}` }) },
{ selfApp: "greeter" },
);
const client = serviceClient(greeter, {
app: "greeter",
transport: inProcessTransport({
"greeter/greet": (input, identity) => service.invoke("greet", input, identity),
}),
});
await client.greet({ name: "Ada" });
Service files default-export implement(...) from app/services. The development server mounts them under the private /__wrnexus/rpc prefix.
Pass { as: ctx } to serviceClient to propagate the subject. The signed token contains only subject and tenant identifiers; permissions are always checked by the callee. Set WRNEXUS_RPC_SECRET in every app, use at least 32 characters, and never reuse the session secret.
Calls time out by default. Retrying is intentionally deferred; when introduced, only procedures marked .idempotent() may be retried.