@pikku/cli 0.12.123 → 0.12.125

package/surface.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.12.123",
+  "version": "0.12.125",
   "entryPoints": [
     {
       "id": "app",
@@ -2080,6 +2080,23 @@
               "examples": [
                 "export const auditMiddleware = pikkuMiddlewareFactory(\n  (action: string) =>\n    async ({ logger }, _data, next) => {\n      const start = Date.now()\n      const result = await next()\n      logger.info({ event: 'audit', action, ms: Date.now() - start })\n      return result\n    }\n)"
               ]
+            },
+            {
+              "name": "requireOrigin",
+              "kind": "function",
+              "origin": {
+                "via": "core",
+                "subpath": "./middleware"
+              },
+              "summary": "Rejects a request with a 403 unless its `Origin` is this app's own or explicitly allowed.",
+              "docs": "Rejects a request with a 403 unless its `Origin` is this app's own or explicitly allowed.\n\nThis is not what `cors()` does. CORS sets response headers and is enforced by the\nbrowser, so a non-browser client ignores them and the request still runs; this rejects\nbefore the function body. It stops another site's page from posting to an unauthed\nroute — it is not flood control, because `Origin` is trusted from nobody but a browser.\nA missing `Origin` is rejected too: a real browser sets one on a cross-origin-capable POST.",
+              "signature": "CorePikkuMiddlewareFactory<{ origins?: string[] | ((services: CoreSingletonServices) => string[] | Promise<string[]>); }, CoreSingletonServices<{ logLevel?: LogLevel; secrets?: { requireAllowedHosts?: boolean; }; workflow?: WorkflowServiceConfig; webhook?: WebhookServiceConfig; postgres?: PostgresConfig; }>, CoreUserSession>",
+              "members": [
+                {
+                  "line": "origins?: string[] | ((services: CoreSingletonServices) => string[] | Promise<string[]>)",
+                  "doc": "Extra allowed origins beyond the request's own host, or a resolver for them."
+                }
+              ]
             }
           ]
         },
@@ -2172,7 +2189,8 @@
                   "line": "getMissing: () => Promise<CredentialStatus[]>"
                 },
                 {
-                  "line": "getSecret: { <K>(key: K): Promise<SecretResult<CredentialsMap[K]>>; <T>(key: string): Promise<SecretValue<T>>; }"
+                  "line": "getSecret: { <K>(key: K): Promise<SecretResult<CredentialsMap[K]>>; <T>(key: string): Promise<SecretValue<T>>; }",
+                  "doc": "Throws if the secret is not found, unless `defineSecret` declared it `optional` — then absence resolves `undefined`. Unwrap the result with `.reveal()`."
                 },
                 {
                   "line": "getSecrets: <T extends Record<string, unknown> = Record<string, unknown>>(keys: (keyof T & string)[]) => Promise<Partial<SecretValues<T>>>",
@@ -2266,7 +2284,8 @@
                   "line": "getAllStatus: () => Promise<VariableStatus[]>"
                 },
                 {
-                  "line": "getMissing: () => Promise<VariableStatus[]>"
+                  "line": "getMissing: () => Promise<VariableStatus[]>",
+                  "doc": "What a deployment still has to be told. A variable that defaults is not on this list — it has a value, just not one anybody has to supply."
                 },
                 {
                   "line": "getVariables: <T extends Record<string, unknown> = Record<string, unknown>>(names: (keyof T & string)[]) => Promise<Partial<T>> | Partial<T>",
@@ -2275,6 +2294,10 @@
                 {
                   "line": "has: (name: string) => Promise<boolean> | boolean"
                 },
+                {
+                  "line": "resolveDefault: any",
+                  "doc": "The value the declaration answers with when the host set nothing, or `undefined` when it does not answer for itself."
+                },
                 {
                   "line": "set: (name: string, value: unknown) => Promise<void> | void"
                 },
@@ -2283,6 +2306,10 @@
                 },
                 {
                   "line": "variablesMeta: any"
+                },
+                {
+                  "line": "withDefaults: any",
+                  "doc": "Kept synchronous when the defaults resolve synchronously, so a caller that did not await `getVariables` before does not have to start."
                 }
               ]
             },
@@ -8177,6 +8204,23 @@
               "examples": [
                 "export const auditMiddleware = pikkuMiddlewareFactory(\n  (action: string) =>\n    async ({ logger }, _data, next) => {\n      const start = Date.now()\n      const result = await next()\n      logger.info({ event: 'audit', action, ms: Date.now() - start })\n      return result\n    }\n)"
               ]
+            },
+            {
+              "name": "requireOrigin",
+              "kind": "function",
+              "origin": {
+                "via": "core",
+                "subpath": "./middleware"
+              },
+              "summary": "Rejects a request with a 403 unless its `Origin` is this app's own or explicitly allowed.",
+              "docs": "Rejects a request with a 403 unless its `Origin` is this app's own or explicitly allowed.\n\nThis is not what `cors()` does. CORS sets response headers and is enforced by the\nbrowser, so a non-browser client ignores them and the request still runs; this rejects\nbefore the function body. It stops another site's page from posting to an unauthed\nroute — it is not flood control, because `Origin` is trusted from nobody but a browser.\nA missing `Origin` is rejected too: a real browser sets one on a cross-origin-capable POST.",
+              "signature": "CorePikkuMiddlewareFactory<{ origins?: string[] | ((services: CoreSingletonServices) => string[] | Promise<string[]>); }, CoreSingletonServices<{ logLevel?: LogLevel; secrets?: { requireAllowedHosts?: boolean; }; workflow?: WorkflowServiceConfig; webhook?: WebhookServiceConfig; postgres?: PostgresConfig; }>, CoreUserSession>",
+              "members": [
+                {
+                  "line": "origins?: string[] | ((services: CoreSingletonServices) => string[] | Promise<string[]>)",
+                  "doc": "Extra allowed origins beyond the request's own host, or a resolver for them."
+                }
+              ]
             }
           ]
         },
@@ -8482,6 +8526,23 @@
               "examples": [
                 "export const auditMiddleware = pikkuMiddlewareFactory(\n  (action: string) =>\n    async ({ logger }, _data, next) => {\n      const start = Date.now()\n      const result = await next()\n      logger.info({ event: 'audit', action, ms: Date.now() - start })\n      return result\n    }\n)"
               ]
+            },
+            {
+              "name": "requireOrigin",
+              "kind": "function",
+              "origin": {
+                "via": "core",
+                "subpath": "./middleware"
+              },
+              "summary": "Rejects a request with a 403 unless its `Origin` is this app's own or explicitly allowed.",
+              "docs": "Rejects a request with a 403 unless its `Origin` is this app's own or explicitly allowed.\n\nThis is not what `cors()` does. CORS sets response headers and is enforced by the\nbrowser, so a non-browser client ignores them and the request still runs; this rejects\nbefore the function body. It stops another site's page from posting to an unauthed\nroute — it is not flood control, because `Origin` is trusted from nobody but a browser.\nA missing `Origin` is rejected too: a real browser sets one on a cross-origin-capable POST.",
+              "signature": "CorePikkuMiddlewareFactory<{ origins?: string[] | ((services: CoreSingletonServices) => string[] | Promise<string[]>); }, CoreSingletonServices<{ logLevel?: LogLevel; secrets?: { requireAllowedHosts?: boolean; }; workflow?: WorkflowServiceConfig; webhook?: WebhookServiceConfig; postgres?: PostgresConfig; }>, CoreUserSession>",
+              "members": [
+                {
+                  "line": "origins?: string[] | ((services: CoreSingletonServices) => string[] | Promise<string[]>)",
+                  "doc": "Extra allowed origins beyond the request's own host, or a resolver for them."
+                }
+              ]
             }
           ]
         },
@@ -8574,7 +8635,8 @@
                   "line": "getMissing: () => Promise<CredentialStatus[]>"
                 },
                 {
-                  "line": "getSecret: { <K>(key: K): Promise<SecretResult<CredentialsMap[K]>>; <T>(key: string): Promise<SecretValue<T>>; }"
+                  "line": "getSecret: { <K>(key: K): Promise<SecretResult<CredentialsMap[K]>>; <T>(key: string): Promise<SecretValue<T>>; }",
+                  "doc": "Throws if the secret is not found, unless `defineSecret` declared it `optional` — then absence resolves `undefined`. Unwrap the result with `.reveal()`."
                 },
                 {
                   "line": "getSecrets: <T extends Record<string, unknown> = Record<string, unknown>>(keys: (keyof T & string)[]) => Promise<Partial<SecretValues<T>>>",
@@ -8685,7 +8747,8 @@
                   "line": "getMissing: () => Promise<CredentialStatus[]>"
                 },
                 {
-                  "line": "getSecret: { <K>(key: K): Promise<SecretResult<CredentialsMap[K]>>; <T>(key: string): Promise<SecretValue<T>>; }"
+                  "line": "getSecret: { <K>(key: K): Promise<SecretResult<CredentialsMap[K]>>; <T>(key: string): Promise<SecretValue<T>>; }",
+                  "doc": "Throws if the secret is not found, unless `defineSecret` declared it `optional` — then absence resolves `undefined`. Unwrap the result with `.reveal()`."
                 },
                 {
                   "line": "getSecrets: <T extends Record<string, unknown> = Record<string, unknown>>(keys: (keyof T & string)[]) => Promise<Partial<SecretValues<T>>>",
@@ -8779,7 +8842,8 @@
                   "line": "getAllStatus: () => Promise<VariableStatus[]>"
                 },
                 {
-                  "line": "getMissing: () => Promise<VariableStatus[]>"
+                  "line": "getMissing: () => Promise<VariableStatus[]>",
+                  "doc": "What a deployment still has to be told. A variable that defaults is not on this list — it has a value, just not one anybody has to supply."
                 },
                 {
                   "line": "getVariables: <T extends Record<string, unknown> = Record<string, unknown>>(names: (keyof T & string)[]) => Promise<Partial<T>> | Partial<T>",
@@ -8788,6 +8852,10 @@
                 {
                   "line": "has: (name: string) => Promise<boolean> | boolean"
                 },
+                {
+                  "line": "resolveDefault: any",
+                  "doc": "The value the declaration answers with when the host set nothing, or `undefined` when it does not answer for itself."
+                },
                 {
                   "line": "set: (name: string, value: unknown) => Promise<void> | void"
                 },
@@ -8796,6 +8864,10 @@
                 },
                 {
                   "line": "variablesMeta: any"
+                },
+                {
+                  "line": "withDefaults: any",
+                  "doc": "Kept synchronous when the defaults resolve synchronously, so a caller that did not await `getVariables` before does not have to start."
                 }
               ]
             },
@@ -8885,7 +8957,8 @@
                   "line": "getAllStatus: () => Promise<VariableStatus[]>"
                 },
                 {
-                  "line": "getMissing: () => Promise<VariableStatus[]>"
+                  "line": "getMissing: () => Promise<VariableStatus[]>",
+                  "doc": "What a deployment still has to be told. A variable that defaults is not on this list — it has a value, just not one anybody has to supply."
                 },
                 {
                   "line": "getVariables: <T extends Record<string, unknown> = Record<string, unknown>>(names: (keyof T & string)[]) => Promise<Partial<T>> | Partial<T>",
@@ -8894,6 +8967,10 @@
                 {
                   "line": "has: (name: string) => Promise<boolean> | boolean"
                 },
+                {
+                  "line": "resolveDefault: any",
+                  "doc": "The value the declaration answers with when the host set nothing, or `undefined` when it does not answer for itself."
+                },
                 {
                   "line": "set: (name: string, value: unknown) => Promise<void> | void"
                 },
@@ -8902,6 +8979,10 @@
                 },
                 {
                   "line": "variablesMeta: any"
+                },
+                {
+                  "line": "withDefaults: any",
+                  "doc": "Kept synchronous when the defaults resolve synchronously, so a caller that did not await `getVariables` before does not have to start."
                 }
               ]
             },

package/console-app/assets/architecture-TIHT7OUA-B-7dd9iF.js

@@ -1 +0,0 @@
-import"./chunk-KEIR6QF5-BICK3FdT.js";import{M as e}from"./mermaid-parser.core-3dL4TN1f.js";export{e as createArchitectureServices};

package/console-app/assets/channel-eaKvL3e5.js

@@ -1 +0,0 @@
-import{at as e,ot as t}from"./chunk-I66GZJ75-Hl61byF7.js";var n=(n,r)=>t.lang.round(e.parse(n)[r]);export{n as t};

package/console-app/assets/chunk-XXDRQBXY-CJZ5XPXr.js

@@ -1 +0,0 @@
-import{p as e}from"./index-BP1o9ux1.js";import{n as t}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./src-BJFofs4v.js";var n=t((t,n)=>{let r;return n===`sandbox`&&(r=e(`#i`+t)),e(n===`sandbox`?r.nodes()[0].contentDocument.body:`body`).select(`[id="${t}"]`)},`getDiagramElement`);export{n as t};

package/console-app/assets/classDiagram-JCYQIIEL-CSV3IvA1.js

@@ -1 +0,0 @@
-import{n as e}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./src-BJFofs4v.js";import"./chunk-I66GZJ75-Hl61byF7.js";import"./chunk-NSK5VX7P-D7NmS_w1.js";import"./chunk-4I5QYGJK-Di1FL5uh.js";import"./chunk-WRU74C26-CHP8CDJx.js";import"./chunk-7BUUIJ7U-Bb538aSH.js";import"./chunk-UBXNYLIW-DKYUw71c.js";import"./chunk-2GRJ4B5K-B09NFK9f.js";import"./chunk-XXDRQBXY-CJZ5XPXr.js";import"./chunk-KBJHAD2P-9mRl0jD6.js";import"./chunk-W5SLKNZC-B2fxVl1I.js";import"./chunk-QR6OTTB3-KdKTpLyy.js";import"./chunk-7Z6QIM7H-DfzYcuKW.js";import{i as t,n,r,t as i}from"./chunk-GF5L2VYU-CA5m-Xs7.js";import"./mermaid.core-DaXl8RjK.js";var a={parser:n,get db(){return new i},renderer:r,styles:t,init:e(e=>{e.class||={},e.class.arrowMarkerAbsolute=e.arrowMarkerAbsolute},`init`)};export{a as diagram};

package/console-app/assets/classDiagram-v2-OCEON4UE-CSV3IvA1.js

@@ -1 +0,0 @@
-import{n as e}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./src-BJFofs4v.js";import"./chunk-I66GZJ75-Hl61byF7.js";import"./chunk-NSK5VX7P-D7NmS_w1.js";import"./chunk-4I5QYGJK-Di1FL5uh.js";import"./chunk-WRU74C26-CHP8CDJx.js";import"./chunk-7BUUIJ7U-Bb538aSH.js";import"./chunk-UBXNYLIW-DKYUw71c.js";import"./chunk-2GRJ4B5K-B09NFK9f.js";import"./chunk-XXDRQBXY-CJZ5XPXr.js";import"./chunk-KBJHAD2P-9mRl0jD6.js";import"./chunk-W5SLKNZC-B2fxVl1I.js";import"./chunk-QR6OTTB3-KdKTpLyy.js";import"./chunk-7Z6QIM7H-DfzYcuKW.js";import{i as t,n,r,t as i}from"./chunk-GF5L2VYU-CA5m-Xs7.js";import"./mermaid.core-DaXl8RjK.js";var a={parser:n,get db(){return new i},renderer:r,styles:t,init:e(e=>{e.class||={},e.class.arrowMarkerAbsolute=e.arrowMarkerAbsolute},`init`)};export{a as diagram};

package/console-app/assets/eventmodeling-45OFAUF4-TV8Whj2Z.js

@@ -1 +0,0 @@
-import"./chunk-KEIR6QF5-BICK3FdT.js";import{O as e}from"./mermaid-parser.core-3dL4TN1f.js";export{e as createEventModelingServices};

package/console-app/assets/flowDiagram-UKHOOZJN-C0682uBh.js

@@ -1 +0,0 @@
-import"./src-BJFofs4v.js";import"./chunk-I66GZJ75-Hl61byF7.js";import"./chunk-NSK5VX7P-D7NmS_w1.js";import"./chunk-4I5QYGJK-Di1FL5uh.js";import"./chunk-WRU74C26-CHP8CDJx.js";import"./chunk-7BUUIJ7U-Bb538aSH.js";import"./chunk-UBXNYLIW-DKYUw71c.js";import"./chunk-2GRJ4B5K-B09NFK9f.js";import"./chunk-XXDRQBXY-CJZ5XPXr.js";import"./chunk-KBJHAD2P-9mRl0jD6.js";import"./chunk-W5SLKNZC-B2fxVl1I.js";import"./chunk-QR6OTTB3-KdKTpLyy.js";import"./chunk-7Z6QIM7H-DfzYcuKW.js";import{n as e}from"./chunk-JQJVKLGR-CgLeeXhv.js";import"./mermaid.core-DaXl8RjK.js";export{e as diagram};

package/console-app/assets/railroad-abnf-AHOZXSZD-BbrGgpop.js

@@ -1 +0,0 @@
-import"./chunk-KEIR6QF5-BICK3FdT.js";import{m as e}from"./mermaid-parser.core-3dL4TN1f.js";export{e as createRailroadAbnfServices};

package/console-app/assets/railroad-ebnf-EBAXGLYW-BMxBKnfa.js

@@ -1 +0,0 @@
-import"./chunk-KEIR6QF5-BICK3FdT.js";import{f as e}from"./mermaid-parser.core-3dL4TN1f.js";export{e as createRailroadEbnfServices};

package/console-app/assets/railroad-peg-LSFZ7HO6-i24YvrZ1.js

@@ -1 +0,0 @@
-import"./chunk-KEIR6QF5-BICK3FdT.js";import{u as e}from"./mermaid-parser.core-3dL4TN1f.js";export{e as createRailroadPegServices};

package/console-app/assets/stateDiagram-v2-UEYNNEHI-Ds7kyy87.js

@@ -1 +0,0 @@
-import{n as e}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./src-BJFofs4v.js";import"./chunk-I66GZJ75-Hl61byF7.js";import"./chunk-NSK5VX7P-D7NmS_w1.js";import"./chunk-4I5QYGJK-Di1FL5uh.js";import"./chunk-WRU74C26-CHP8CDJx.js";import"./chunk-7BUUIJ7U-Bb538aSH.js";import"./chunk-UBXNYLIW-DKYUw71c.js";import"./chunk-2GRJ4B5K-B09NFK9f.js";import"./chunk-XXDRQBXY-CJZ5XPXr.js";import"./chunk-KBJHAD2P-9mRl0jD6.js";import"./chunk-W5SLKNZC-B2fxVl1I.js";import"./chunk-QR6OTTB3-KdKTpLyy.js";import"./chunk-7Z6QIM7H-DfzYcuKW.js";import{i as t,n,r,t as i}from"./chunk-5RXB4S5H-BkFSNR63.js";import"./mermaid.core-DaXl8RjK.js";var a={parser:n,get db(){return new i(2)},renderer:r,styles:t,init:e(e=>{e.state||={},e.state.arrowMarkerAbsolute=e.arrowMarkerAbsolute},`init`)};export{a as diagram};

package/console-app/assets/swimlanesDiagram-ULZ7WXOC-BAuvqF_W.js

@@ -1,8 +0,0 @@
-import{n as e}from"./chunk-Y2CYZVJY-DsF7k-Jl.js";import"./src-BJFofs4v.js";import"./chunk-I66GZJ75-Hl61byF7.js";import"./chunk-NSK5VX7P-D7NmS_w1.js";import"./chunk-4I5QYGJK-Di1FL5uh.js";import"./chunk-WRU74C26-CHP8CDJx.js";import"./chunk-7BUUIJ7U-Bb538aSH.js";import"./chunk-UBXNYLIW-DKYUw71c.js";import"./chunk-2GRJ4B5K-B09NFK9f.js";import"./chunk-XXDRQBXY-CJZ5XPXr.js";import"./chunk-KBJHAD2P-9mRl0jD6.js";import"./chunk-W5SLKNZC-B2fxVl1I.js";import"./chunk-QR6OTTB3-KdKTpLyy.js";import"./chunk-7Z6QIM7H-DfzYcuKW.js";import{r as t,t as n}from"./chunk-JQJVKLGR-CgLeeXhv.js";import"./mermaid.core-DaXl8RjK.js";var r=n({defaultLayout:`swimlane`,styles:e(e=>`${t(e)}
-  .swimlane.cluster rect {
-    stroke: ${e.clusterBorder} !important;
-  }
-  [data-look="neo"].cluster rect {
-    filter: none;
-  }
-`,`getStyles`)});export{r as diagram};