@antelopejs/dms 0.7.13 → 0.7.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@antelopejs/dms",
-  "version": "0.7.13",
+  "version": "0.7.14",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/AntelopeJS/dms.git"
@@ -37,7 +37,7 @@
     "@antelopejs/interface-data-api": ">=0.2.0 <1.0.0",
     "@antelopejs/interface-database": ">=0.1.8 <1.0.0",
     "@antelopejs/interface-database-decorators": ">=0.1.7 <1.0.0",
-    "@antelopejs/interface-dms": ">=0.5.8 <0.6.0",
+    "@antelopejs/interface-dms": ">=0.5.9 <0.6.0",
     "@antelopejs/interface-email": ">=0.0.5 <1.0.0",
     "@antelopejs/interface-file-storage": ">=0.1.3 <1.0.0",
     "archiver": "^7.0.1",

package/skills/dms-module/SKILL.md

@@ -86,6 +86,9 @@ An absolute link (a public file, a snippet to copy, a mail) is built on `await G
 (`@antelopejs/interface-dms/api-base-url`, the backend) or `await GetClientBaseUrl()`
 (`/client-base-url`, the dashboard), never on `Host` / `X-Forwarded-*`: a reverse proxy may not
 forward them. Both answer the DMS config (`apiBaseUrl`, `clientBaseUrl`).
+A client address (a rate limit, an anonymous visitor) comes from `await getClientIp(context)`
+(`/client-ip`), never from `X-Forwarded-For` read by hand: it follows the DMS's
+`auth.trustedProxies`, so the operator declares the proxies once.
 
 ## Navigation & access — module pages are owner-only