@kavo/sse 0.17.3 → 0.18.0

package/README.md

@@ -92,11 +92,11 @@ unconditional `"deleted"`-event bypass.
 
 Once `subscribableFields` is configured for an entity, it bounds every
 outgoing `item` **unconditionally** — not only when a subscriber names
-`fields` — the same way `allowlists.selectable`
+`fields` — the same way `allowed.selectable`
 bounds a REST response whether or not the caller asked for a subset. An
 optional `fields` query param (comma-separated) narrows further within
 that bound; a field outside it (or outside `subscribableFields`, when no
-`fields` param is given) gets a `400` the same way `allowlists.selectable`
+`fields` param is given) gets a `400` the same way `allowed.selectable`
 rejects an unlisted field over REST.
 
 A connection that cannot keep up with its publish rate (the writable

package/dist/sse-transport.d.ts

@@ -5,7 +5,7 @@ import type { EntityMetadata, RealtimeFieldSelector, RealtimeTransport, Resolved
  * string for one entity — the same two pieces `DefaultFilterParser` and
  * `Filter.parse` already need for REST: `metadata` for column-kind-aware
  * value coercion, `config` for the `filterable` allowlist and the
- * `query.maxFilterDepth`/`maxInValues` limits. `@kavo/sse` has no config
+ * `limits.filterDepth`/`limits.inValues` limits. `@kavo/sse` has no config
  * resolution of its own (same reason `subscribableFields` is a callback,
  * not a lookup this package performs itself), so the host app supplies
  * both — typically `service.engine.metadata`/`service.engine.config` off
@@ -36,14 +36,14 @@ export interface SseTransportOptions {
      * app already configured via `createCrud` — this package has no config
      * resolution of its own, so the caller supplies the lookup. A request
      * naming a `fields` query param outside the allowlist is rejected with
-     * `400` before the stream opens, the same way `allowlists.selectable`
+     * `400` before the stream opens, the same way `allowed.selectable`
      * rejects an unlisted field over REST. Returning `undefined` (including
      * when the callback itself is omitted) means no allowlist is configured
      * for that entity, so any requested field is accepted.
      *
      * Once configured, this allowlist is also enforced **unconditionally** on
      * every outgoing `item` for that entity — not only when a subscriber
-     * names `fields` — the same way `allowlists.selectable` bounds a REST
+     * names `fields` — the same way `allowed.selectable` bounds a REST
      * response whether or not the caller asked for a subset. A `fields`
      * query param narrows further *within* that bound; it can never widen
      * past it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kavo/sse",
-  "version": "0.17.3",
+  "version": "0.18.0",
   "description": "Kavo SSE realtime transport — implements @kavo/core's RealtimeTransport over Server-Sent Events, plain HTTP with no required peer library.",
   "license": "Apache-2.0",
   "engines": {
@@ -27,7 +27,7 @@
     "dist"
   ],
   "dependencies": {
-    "@kavo/core": "^0.17.3"
+    "@kavo/core": "^0.18.0"
   },
   "scripts": {
     "build": "tsc -b"