From c2517748bd36010c63597752f8ea6eb6a8bcd627 Mon Sep 17 00:00:00 2001 From: os-elon Date: Wed, 19 Aug 2026 11:36:26 +0000 Subject: [PATCH] docs(core): name both verbatim writers of ANONYMOUS_DENY_BODY (#9849) The docstring said "Exactly one consumer writes it: `@objectstack/rest`'s `enforceAuth`". That became false when the endpoint-route 401 arm of `@objectstack/runtime`'s `mountRouteOnServer` started writing the shared constant verbatim, so the sentence now names both flat-family writers. The two-envelope table below it is unchanged and still correct: the five runtime dispatcher domains keep answering the wrapped envelope, and `mountRouteOnServer` is a distinct seam from them. Docs-only: one sentence in one docstring, no wire effect. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_019yDEhPBC3tcGkW9bkce1HM --- packages/core/src/security/anonymous-deny.ts | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/packages/core/src/security/anonymous-deny.ts b/packages/core/src/security/anonymous-deny.ts index 27ed8717ac..7e2fa1b6e0 100644 --- a/packages/core/src/security/anonymous-deny.ts +++ b/packages/core/src/security/anonymous-deny.ts @@ -44,9 +44,12 @@ export const ANONYMOUS_DENY_MESSAGE = 'Authentication is required to access this * platform's only one; see the two-envelope table below before you reuse this * shape. * - * Exactly one consumer writes it: `@objectstack/rest`'s `enforceAuth` - * (`rest-server.ts` — `res.status(ANONYMOUS_DENY_STATUS).json(ANONYMOUS_DENY_BODY)`), - * which owns the `/data/*` and `/meta` surfaces. + * Two consumers write it verbatim, both flat-family seams: `@objectstack/rest`'s + * `enforceAuth` (`rest-server.ts` — + * `res.status(ANONYMOUS_DENY_STATUS).json(ANONYMOUS_DENY_BODY)`), which owns the + * `/data/*` and `/meta` surfaces, and `@objectstack/runtime`'s + * `mountRouteOnServer` (`dispatcher-plugin.ts` — the endpoint-route 401 arm, + * #9823), which answers declared routes mounted on the HTTP server. * * ## Two live envelopes, one denial (#5632) *