@fabrika/control-contract 0.5.1 → 0.5.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@fabrika/control-contract",
3
- "version": "0.5.1",
3
+ "version": "0.5.3",
4
4
  "type": "module",
5
5
  "repository": {
6
6
  "type": "git",
@@ -25,8 +25,8 @@
25
25
  },
26
26
  "dependencies": {
27
27
  "zod": "^3.25.76",
28
- "@fabrika/auth-core": "0.5.1",
29
- "@fabrika/app": "0.5.1",
30
- "@fabrika/provider-contract": "0.5.1"
28
+ "@fabrika/auth-core": "0.5.3",
29
+ "@fabrika/app": "0.5.3",
30
+ "@fabrika/provider-contract": "0.5.3"
31
31
  }
32
32
  }
package/src/index.ts CHANGED
@@ -210,6 +210,8 @@ export interface AppEnvDto {
210
210
  env: string
211
211
  domain: string | null
212
212
  publicOrigin: string | null
213
+ /** The exact origins whose pages may call this environment's cross-origin endpoints (ADR-0022); empty lists none. */
214
+ crossOrigins: string[]
213
215
  triggerRef: string | null
214
216
  /** An MCP authoring target (ADR-0049): users with `source.workspace.*` grants may edit and deploy it. */
215
217
  authoring: boolean
@@ -240,6 +242,8 @@ export interface DeviationSubjectDto {
240
242
  export interface PutAppEnvRequest {
241
243
  domain?: string | null
242
244
  publicOrigin?: string | null
245
+ /** Replaces the stored list; omitted keeps it, and an empty list clears it. */
246
+ crossOrigins?: string[]
243
247
  triggerRef?: string | null
244
248
  /** Omitted keeps the stored value. Only a Zerops environment of an app with a GitHub connection qualifies. */
245
249
  authoring?: boolean
@@ -419,6 +423,8 @@ export interface RegisterAppRequest extends AppOptionalFields {
419
423
  env: string
420
424
  domain?: string | null
421
425
  publicOrigin?: string | null
426
+ /** The environment's cross-origin list (ADR-0022); omitted lists none. */
427
+ crossOrigins?: string[]
422
428
  triggerRef?: string | null
423
429
  namespaceId?: string | null
424
430
  target: ProviderEnvelopeDto
package/src/rpc.ts CHANGED
@@ -165,6 +165,7 @@ export interface ControlRpcContract {
165
165
  secrets: {
166
166
  list: RpcProcedure<AppIdInput, ListResponse<AppSecretDto>>
167
167
  put: RpcProcedure<PutAppSecretInput, AppSecretDto>
168
+ /** Removes the value where it is stored (vault or provider), then the row; a failed value delete keeps the row. */
168
169
  delete: RpcProcedure<AppNamedValueInput, OkResponse>
169
170
  }
170
171
  variables: {
@@ -176,6 +177,7 @@ export interface ControlRpcContract {
176
177
  vault: {
177
178
  set: RpcProcedure<SecretValueInput, SecretValueResponse>
178
179
  rotate: RpcProcedure<SecretValueInput, OkResponse>
180
+ /** The same operation as `apps.secrets.delete`. */
179
181
  delete: RpcProcedure<AppNamedValueInput, OkResponse>
180
182
  }
181
183
  namespaces: {