@pikku/core 0.12.104 → 0.12.106

package/dist/wirings/rpc/wire-addon.js

@@ -1,88 +0,0 @@
-import { pikkuState } from '../../pikku-state.js';
-import { getTagGroups } from '../../utils.js';
-export const wireAddon = (config) => {
-    pikkuState(null, 'addons', 'packages').set(config.name, {
-        package: config.package,
-        rpcEndpoint: config.rpcEndpoint,
-        auth: config.auth,
-        tags: config.tags,
-        ...(config.scopes ? { scopes: config.scopes } : {}),
-        ...(config.secretOverrides
-            ? { secretOverrides: config.secretOverrides }
-            : {}),
-        ...(config.variableOverrides
-            ? { variableOverrides: config.variableOverrides }
-            : {}),
-        ...(config.credentialOverrides
-            ? { credentialOverrides: config.credentialOverrides }
-            : {}),
-        ...(config.secretGrants ? { secretGrants: config.secretGrants } : {}),
-        ...(config.credentialGrants
-            ? { credentialGrants: config.credentialGrants }
-            : {}),
-        ...(config.globalSecrets ? { globalSecrets: config.globalSecrets } : {}),
-        ...(config.globalCredentials
-            ? { globalCredentials: config.globalCredentials }
-            : {}),
-    });
-};
-/**
- * The addon configs a running function is governed by: the named instance when
- * the caller resolved one, every instance of the package otherwise.
- *
- * knowledge: decisions/security/addon-scopes-are-resolved-where-the-function-runs.md
- */
-const governingAddonConfigs = (packageName, namespace) => {
-    if (!packageName) {
-        return [];
-    }
-    const addons = pikkuState(null, 'addons', 'packages');
-    if (!addons) {
-        return [];
-    }
-    if (namespace) {
-        const config = addons.get(namespace);
-        if (config?.package === packageName) {
-            return [config];
-        }
-    }
-    return [...addons.values()].filter((config) => config?.package === packageName);
-};
-const unionOf = (packageName, namespace, field) => {
-    const values = new Set();
-    for (const config of governingAddonConfigs(packageName, namespace)) {
-        for (const value of config[field] ?? []) {
-            values.add(value);
-        }
-    }
-    return [...values];
-};
-/**
- * knowledge: decisions/security/addon-scopes-are-resolved-where-the-function-runs.md
- */
-export const resolveAddonScopes = (packageName, namespace) => unionOf(packageName, namespace, 'scopes');
-/**
- * knowledge: decisions/security/addon-auth-and-tags-only-tighten.md
- */
-export const resolveAddonTags = (packageName, namespace) => unionOf(packageName, namespace, 'tags');
-/**
- * True when any governing instance requires a session. `auth: false` is not
- * honoured here — on a direct wiring it would weaken the wiring's own gate.
- *
- * knowledge: decisions/security/addon-auth-and-tags-only-tighten.md
- */
-export const resolveAddonAuth = (packageName, namespace) => governingAddonConfigs(packageName, namespace).some((config) => config.auth === true);
-/**
- * Addon tags name middleware the *consuming app* registered, so they resolve
- * against the root tag groups rather than the addon package's own.
- *
- * knowledge: decisions/security/addon-auth-and-tags-only-tighten.md
- */
-export const resolveAddonTagMiddleware = (packageName, namespace) => {
-    const tags = resolveAddonTags(packageName, namespace);
-    if (tags.length === 0) {
-        return [];
-    }
-    const tagGroups = pikkuState(null, 'middleware', 'tagGroup');
-    return tags.flatMap((tag) => getTagGroups(tagGroups, tag).flat());
-};

package/dist/wirings/rpc/wire-remote-addon.d.ts

@@ -1,22 +0,0 @@
-import type { CoreServices, PikkuWire } from '../../types/core.types.js';
-/** Sent as `Authorization: Bearer <token>`; a non-default header is declared by the addon. */
-export type RemoteAddonAuth = {
-    credentialId: string;
-} | {
-    secretId: string;
-} | {
-    resolve: (services: CoreServices, wire: PikkuWire) => string | Promise<string>;
-};
-export type WireRemoteAddonConfig = {
-    /** Consumer-facing namespace, e.g. `registry` → `rpc('registry:getOpenApi')` */
-    name: string;
-    /** Must be installed as a devDependency — `pikku verify` enforces this. */
-    package: string;
-    serverUrl: string | ((services: CoreServices) => string | Promise<string>);
-    /** Omit when the addon declares its remote surface public. */
-    auth?: RemoteAddonAuth;
-    /** Map a consumer-facing fn name → the remote fn name, when they differ (rare). */
-    remoteName?: (fn: string) => string;
-    tags?: string[];
-};
-export declare const wireRemoteAddon: (config: WireRemoteAddonConfig) => void;

package/dist/wirings/rpc/wire-remote-addon.js

@@ -1,11 +0,0 @@
-import { pikkuState } from '../../pikku-state.js';
-export const wireRemoteAddon = (config) => {
-    pikkuState(null, 'addons', 'packages').set(config.name, {
-        package: config.package,
-        tags: config.tags,
-        remote: true,
-        serverUrl: config.serverUrl,
-        ...(config.auth ? { remoteAuth: config.auth } : {}),
-        ...(config.remoteName ? { remoteName: config.remoteName } : {}),
-    });
-};