@relyio/sdk 0.19.0 → 0.21.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @relyio/sdk
 
+## 0.21.0
+
+### Minor Changes
+
+- 62b2960: **A Function's route verifies a signed webhook.** `route.public.signature: { scheme, secret, header? }` names the scheme — `'stripe'` (`Stripe-Signature`, its signed time within five minutes), `'github'` (`X-Hub-Signature-256`) or `'hmac-sha256'` (the hex HMAC-SHA256 of the body, bare or as `sha256=<hex>`, in the `header` it names) — and the Secret holding the signing secret. RelyIO verifies the signature over the body's exact bytes before the Function runs, so the Function never holds the signing secret; a missing, forged or stale signature is refused `403` and runs and bills nothing. `relyio deploy` refuses a signature naming a Secret the Function does not declare, a scheme RelyIO does not verify, or an `hmac-sha256` signature naming no header.
+
+## 0.20.0
+
+### Minor Changes
+
+- d0114a0: **`relyio.functions` calls are typed.** `relyio generate-types` reads your `relyio/functions/` and its `schema.ts` registers each Function's input and output Fields, so `relyio.functions.checkout({ cartId })` takes and answers what `checkout` declares: a misnamed, missing or mistyped input field, or a Function your project does not declare, is a type error. A project with no Function files stays as it was, its calls untyped. `relyio ci check` compares committed types against the repository's own Functions too.
+
+### Patch Changes
+
+- fd31efe: **`validateFile` accepts a wildcard MIME pattern.** A schema's `allowedMimeTypes: ['image/*']` no longer refuses `image/png` client-side; matching is case-insensitive, ignores `;` parameters and takes `*/*`, as the server's presign does.
+
 ## 0.19.0
 
 ### Minor Changes

package/dist/automations/index.cjs

@@ -2,7 +2,7 @@
 
 var chunkDBYMG6MQ_cjs = require('../chunk-DBYMG6MQ.cjs');
 var chunk5F3YYPLZ_cjs = require('../chunk-5F3YYPLZ.cjs');
-require('../chunk-NN45CSPZ.cjs');
+require('../chunk-UO2QRYKV.cjs');
 require('../chunk-L6DXCKVQ.cjs');