@pikku/core 0.12.114 → 0.12.115

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 0.12.115
+
+### Patch Changes
+
+- 238902c: A channel's `auth` flag now reaches its meta. The inspector already read it to mark the connect and disconnect functions sessionless, then dropped it, so nothing downstream could tell a public channel from a private one without reading the generated source.
+
+  That matters in front of the channel rather than inside it. A `wireCLI({ auth: false })` program is reachable by anyone holding its address; a router or deploy that cannot see the flag either guesses or demands a token in front of a surface it was never protecting, locking out the clients the program was opened for.
+
+  The flag is only recorded when the channel actually said. A channel that never mentioned `auth` leaves it absent rather than claiming a default it did not declare, which the runtime continues to read as requiring a session.
+
+- 2fd2b22: Telemetry middleware now records `errorStack` alongside `errorMessage`, so an observability backend has the stack of a failed invocation and not only its message.
+
 ## 0.12.114
 
 ### Patch Changes

package/dist/middleware/telemetry.js

@@ -8,12 +8,14 @@ export const telemetryOuter = pikkuMiddlewareFactory(({ environmentId, orgId } =
             const start = performance.now();
             let outcome = 'ok';
             let errorMessage;
+            let errorStack;
             try {
                 await next();
             }
             catch (e) {
                 outcome = 'error';
                 errorMessage = e instanceof Error ? e.message : String(e);
+                errorStack = e instanceof Error ? e.stack : undefined;
                 throw e;
             }
             finally {
@@ -26,6 +28,7 @@ export const telemetryOuter = pikkuMiddlewareFactory(({ environmentId, orgId } =
                     totalDuration: Math.round(performance.now() - start),
                     outcome,
                     ...(errorMessage ? { errorMessage } : {}),
+                    ...(errorStack ? { errorStack } : {}),
                     ...(wire.http
                         ? {
                             httpStatus: wire.http.response?.statusCode,
@@ -49,12 +52,14 @@ export const telemetryInner = pikkuMiddlewareFactory(({ environmentId, orgId } =
             const start = performance.now();
             let outcome = 'ok';
             let errorMessage;
+            let errorStack;
             try {
                 await next();
             }
             catch (e) {
                 outcome = 'error';
                 errorMessage = e instanceof Error ? e.message : String(e);
+                errorStack = e instanceof Error ? e.stack : undefined;
                 throw e;
             }
             finally {
@@ -68,6 +73,7 @@ export const telemetryInner = pikkuMiddlewareFactory(({ environmentId, orgId } =
                     outcome,
                     pikkuUserId: wire.pikkuUserId,
                     ...(errorMessage ? { errorMessage } : {}),
+                    ...(errorStack ? { errorStack } : {}),
                     ...(environmentId ? { environmentId } : {}),
                     ...(orgId ? { orgId } : {}),
                 });

package/dist/wirings/channel/channel.types.d.ts

@@ -37,6 +37,17 @@ export interface ChannelMeta {
     message: ChannelMessageMeta | null;
     messageWirings: Record<string, Record<string, ChannelMessageMeta>>;
     binary?: boolean | null;
+    /**
+     * Whether a connection must carry a session. Absent means the channel did not
+     * say, which the runtime treats as requiring one.
+     *
+     * Recorded so that something deploying or routing in front of this channel can
+     * tell a public surface from a private one without reading the generated
+     * source: a `wireCLI({ auth: false })` program is reachable by anyone holding
+     * the address, and a proxy that does not know that will either guess or gate
+     * traffic it was never protecting.
+     */
+    auth?: boolean;
     /** Set when the channel was wired by a gateway rather than declared directly. */
     gateway?: boolean;
     summary?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/core",
-  "version": "0.12.114",
+  "version": "0.12.115",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/pikkujs/pikku.git",