@isomorph.ai/app-sdk 2.8.2 → 2.9.0

package/README.md

@@ -370,12 +370,37 @@ The calls go to the local App Gateway beside the runtime (`ISOMORPH_TRUSTED_GATE
 One door with nobody signed in: a sign-up form, a feedback box, an inbound lead. An action that
 exports `access = "public"` beside `expose = { description, input }` runs for a caller with no
 sign-in as `public:<app>` (`ctx.user.kind === 'public'`, no email, no groups). It may only insert
-rows: a select, update, delete, file, integration, AI call, realtime, another action or a job
+rows, or call a SQL function named `public_<name>` through `isomorph.data.rpc`: a select, update,
+delete, any other function, file, integration, AI call, realtime, another action or a job
 enqueue inside it is refused with `PUBLIC_DENIED`. A public action cannot be trusted. The page
 calls it with `isomorph.actions.invokePublic(name, input)`: a plain POST with no cookie and no
 sign-in, answering the result or an `IsomorphError` with the gateway's category. The table it
 writes says so in its row rule (`WITH CHECK (current_setting('harbour.user_id', true) = 'public:<app>')`).
 
+A page that shows one record by its link (a certificate, a ticket) reads it through one
+`public_<name>` function the app declares `SECURITY DEFINER`, taking the link's token and
+returning only what the page may show; the gateway runs it read-only. No public `SELECT` policy
+is ever written.
+
+```sql
+-- migrations/0012_public_certificate.sql
+CREATE FUNCTION public_certificate(token text) RETURNS TABLE (holder text, course text, issued_on date)
+LANGUAGE sql SECURITY DEFINER STABLE AS $$
+  SELECT holder, course, issued_on FROM certificates WHERE verify_token = token
+$$;
+```
+
+```ts
+// actions/verify-certificate.ts
+export const access = "public";
+export const expose = { description: 'Show the certificate a verification link points at', input: { type: 'object', properties: { token: { type: 'string' } }, required: ['token'] } };
+
+export default async function verifyCertificate(input: { token: string }) {
+  const [certificate] = await isomorph.data.rpc<Array<{ holder: string; course: string; issued_on: string }>>('public_certificate', { token: input.token });
+  return certificate ?? null;
+}
+```
+
 ```ts
 // actions/signup.ts
 export const access = "public";
@@ -390,7 +415,7 @@ export default async function signup(input: { email: string }) {
 await isomorph.actions.invokePublic('signup', { email });
 ```
 
-(2.6.0)
+(2.6.0; public read by link 2.9.0, data plane ADR 0114 amendment 2026-11-07)
 
 ## Calling another app as the signed-in person
 
@@ -408,6 +433,10 @@ The other app (named by its address, as `appApiUrl` takes it) lists this one in
 trusted action; name a trusted action exactly. Its action sees the person in `ctx.user` (role `member`) and this app
 in `ctx.caller = { app, environment }` (`app` is the calling app's id; `local` under `isomorph dev` and
 `isomorph check`, where `app` is the calling address). `ctx.caller` is absent on its own pages, service and MCP calls.
+
+Every action also sees `ctx.clientIp`: the caller's network address as the gateway in front of
+the app saw it, for a sign-in record or a per-address rate limit (2.9.0). Nothing the browser
+sends sets it.
 The call goes through this app's own gateway with the workload token and the person's context; a refusal is an
 `IsomorphError` with the gateway's category (`AUTH_REQUIRED`, `FORBIDDEN` when not listed, `NOT_FOUND`,
 `RATE_LIMITED`). It works only from an action a signed-in person started: a job keeps using a service credential.

package/dist/runtime.d.ts

@@ -18,6 +18,11 @@ export interface ActionContext {
     tenant: string;
     app: string;
     requestId: string;
+    /**
+     * The caller's network address as the gateway saw it (`X-Harbour-Verified-Client-IP`): for a
+     * sign-in record or a rate limit. Absent under a runtime behind an older gateway.
+     */
+    clientIp?: string;
     /**
      * Reports a step to a page that invoked the action with `onProgress`; a
      * no-op otherwise. A string or a small JSON object; after 256 steps, or a

package/dist/runtime.js

@@ -816,7 +816,8 @@ export class Runtime {
             response.write(line);
         };
         const caller = verifiedCaller(request);
-        const context = { computerView: header(request, 'X-Harbour-Computer-View') === '1', signal: controller.signal, user, tenant, app, requestId: requestId ?? '', progress, transaction: (fn) => this.transaction(name, fn), ...(caller ? { caller } : {}) };
+        const clientIp = header(request, 'X-Harbour-Verified-Client-IP');
+        const context = { computerView: header(request, 'X-Harbour-Computer-View') === '1', signal: controller.signal, user, tenant, app, requestId: requestId ?? '', ...(clientIp ? { clientIp } : {}), progress, transaction: (fn) => this.transaction(name, fn), ...(caller ? { caller } : {}) };
         const limit = caller ? APP_CALL_MAX_BODY_BYTES : MAX_BODY_BYTES;
         const raw = await readBody(request, limit);
         if (raw === undefined)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@isomorph.ai/app-sdk",
-  "version": "2.8.2",
+  "version": "2.9.0",
   "type": "module",
   "repository": {
     "type": "git",