@stats-forge/github-stats-forge-core 0.5.0 → 0.6.0

package/build/api/contributed-to.d.ts

@@ -4,7 +4,7 @@ import * as z from 'zod/mini';
  *
  * @returns The rendered card, or a rendered error.
  */
-export declare const contributedTo: (query: import("./params.ts").ApiQuery<z.ZodMiniObject<{
+export declare const contributedTo: ((query: import("./params.ts").ApiQuery<z.ZodMiniObject<{
     username: z.ZodMiniType<string | undefined, string | undefined, z.core.$ZodTypeInternals<string | undefined, string | undefined>>;
     locale: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<string | undefined, string | undefined>>;
     repos_count: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<number | undefined, string | undefined>>;
@@ -19,5 +19,7 @@ export declare const contributedTo: (query: import("./params.ts").ApiQuery<z.Zod
     custom_title: z.ZodMiniOptional<z.ZodMiniString<string>>;
     border_radius: z.ZodMiniType<number | undefined, string | undefined, z.core.$ZodTypeInternals<number | undefined, string | undefined>>;
     disable_animations: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<boolean | undefined, string | undefined>>;
-}, z.core.$strip>>, config: import("./index.ts").CardConfig) => Promise<import("./api-result.ts").ApiResult>;
+}, z.core.$strip>>, config: import("./index.ts").CardConfig) => Promise<import("./api-result.ts").ApiResult>) & {
+    IDENTITIES: Partial<Record<"border_radius" | "card_width" | "custom_title" | "disable_animations" | "exclude_repo" | "from" | "hide_border" | "hide_title" | "hide_years" | "include_own_repos" | "locale" | "repos_count" | "to" | "username", import("../common/config.ts").AllowlistKind>>;
+};
 //# sourceMappingURL=contributed-to.d.ts.map

package/build/api/contributed-to.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contributed-to.d.ts","sourceRoot":"","sources":["../../src/api/contributed-to.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAuC9B;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;4GAuCzB,CAAC"}
+{"version":3,"file":"contributed-to.d.ts","sourceRoot":"","sources":["../../src/api/contributed-to.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAuC9B;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;CAwCzB,CAAC"}

package/build/api/contributed-to.js

@@ -27,7 +27,7 @@ const contributedToQuery = z
  *
  * @returns The rendered card, or a rendered error.
  */
-export const contributedTo = cardHandler(contributedToQuery, async ({ username, locale, repos_count, include_own_repos, exclude_repo, from, to, hide_years, hide_title, hide_border, card_width, custom_title, border_radius, disable_animations, }, colors, config) => {
+export const contributedTo = cardHandler(contributedToQuery, { username: 'username' }, async ({ username, locale, repos_count, include_own_repos, exclude_repo, from, to, hide_years, hide_title, hide_border, card_width, custom_title, border_radius, disable_animations, }, colors, config) => {
     const data = await fetchContributedTo({ username, include_own_repos, repos_count, exclude_repo, from, to }, config);
     return renderContributedToCard(data, {
         ...colors,

package/build/api/gist.d.ts

@@ -4,12 +4,14 @@ import * as z from 'zod/mini';
  *
  * @returns The rendered card, or a rendered error.
  */
-export declare const gist: (query: import("./params.ts").ApiQuery<z.ZodMiniObject<{
+export declare const gist: ((query: import("./params.ts").ApiQuery<z.ZodMiniObject<{
     id: z.ZodMiniType<string | undefined, string | undefined, z.core.$ZodTypeInternals<string | undefined, string | undefined>>;
     locale: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<string | undefined, string | undefined>>;
     border_radius: z.ZodMiniType<number | undefined, string | undefined, z.core.$ZodTypeInternals<number | undefined, string | undefined>>;
     show_owner: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<boolean | undefined, string | undefined>>;
     browser_rendering: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<boolean | undefined, string | undefined>>;
     hide_border: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<boolean | undefined, string | undefined>>;
-}, z.core.$strip>>, config: import("./index.ts").CardConfig) => Promise<import("./api-result.ts").ApiResult>;
+}, z.core.$strip>>, config: import("./index.ts").CardConfig) => Promise<import("./api-result.ts").ApiResult>) & {
+    IDENTITIES: Partial<Record<"border_radius" | "browser_rendering" | "hide_border" | "id" | "locale" | "show_owner", import("../common/config.ts").AllowlistKind>>;
+};
 //# sourceMappingURL=gist.d.ts.map

package/build/api/gist.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gist.d.ts","sourceRoot":"","sources":["../../src/api/gist.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAkB9B;;;;GAIG;AACH,eAAO,MAAM,IAAI;;;;;;;4GAkBhB,CAAC"}
+{"version":3,"file":"gist.d.ts","sourceRoot":"","sources":["../../src/api/gist.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAkB9B;;;;GAIG;AACH,eAAO,MAAM,IAAI;;;;;;;;;CAmBhB,CAAC"}

package/build/api/gist.js

@@ -17,7 +17,7 @@ const gistQuery = z.object({
  *
  * @returns The rendered card, or a rendered error.
  */
-export const gist = cardHandler(gistQuery, async ({ id, locale, border_radius, show_owner, browser_rendering, hide_border }, colors, config) => {
+export const gist = cardHandler(gistQuery, { id: 'gist' }, async ({ id, locale, border_radius, show_owner, browser_rendering, hide_border }, colors, config) => {
     const gistData = await fetchGist({ id }, config);
     return renderGistCard(gistData, {
         ...colors,

package/build/api/handler.d.ts

@@ -1,16 +1,23 @@
 import type * as z from 'zod/mini';
 import type { ColorParams } from '../common/color.ts';
-import type { CardConfig } from '../common/config.ts';
+import type { AllowlistKind, CardConfig } from '../common/config.ts';
 import type { ApiResult } from './api-result.ts';
 import type { ApiQuery } from './params.ts';
+/** Which of an endpoint's params name an identity, and which list guards each. */
+type Identities<TSchema extends z.ZodMiniType> = Partial<Record<Extract<keyof z.output<TSchema>, string>, AllowlistKind>>;
+/** An endpoint, and the identities a pinned deployment may refuse it. */
+type CardEndpoint<TSchema extends z.ZodMiniType> = ((query: ApiQuery<TSchema>, config: CardConfig) => Promise<ApiResult>) & {
+    IDENTITIES: Identities<TSchema>;
+};
 /**
- * An endpoint: the schema it accepts, and what it draws from the parsed params.
+ * An endpoint: the schema it accepts, the identities a pinned deployment may refuse,
+ * and what it draws from the parsed params.
  *
  * Colors parse first and on their own, because a rejected color cannot be used to draw its own error card.
- * Parsing throws, fetching throws, and one `catch` turns whatever was thrown into the answer.
+ * Parsing throws, the allowlist throws, fetching throws, and one `catch` turns whatever was thrown into the answer.
  *
  * @returns The handler, taking the query the schema describes.
  */
-declare const cardHandler: <TSchema extends z.ZodMiniType>(schema: TSchema, render: (params: z.output<TSchema>, colors: ColorParams, config: CardConfig) => Promise<string>) => (query: ApiQuery<TSchema>, config: CardConfig) => Promise<ApiResult>;
+declare const cardHandler: <TSchema extends z.ZodMiniType>(schema: TSchema, identities: Identities<TSchema>, render: (params: z.output<TSchema>, colors: ColorParams, config: CardConfig) => Promise<string>) => CardEndpoint<TSchema>;
 export { cardHandler };
 //# sourceMappingURL=handler.d.ts.map

package/build/api/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/api/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,CAAC,MAAM,UAAU,CAAC;AAEnC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG5C;;;;;;;GAOG;AACH,QAAA,MAAM,WAAW,GACd,OAAO,SAAS,CAAC,CAAC,WAAW,UACpB,OAAO,UACP,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,aAEnF,QAAQ,CAAC,OAAO,CAAC,UAAU,UAAU,KAAG,OAAO,CAAC,SAAS,CAgBtE,CAAC;AAEJ,OAAO,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/api/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,CAAC,MAAM,UAAU,CAAC;AAEnC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGrE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG5C,kFAAkF;AAClF,KAAK,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,WAAW,IAAI,OAAO,CACtD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,CAChE,CAAC;AAEF,yEAAyE;AACzE,KAAK,YAAY,CAAC,OAAO,SAAS,CAAC,CAAC,WAAW,IAAI,CAAC,CAClD,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,EACxB,MAAM,EAAE,UAAU,KACf,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG;IAAE,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;CAAE,CAAC;AAE/D;;;;;;;;GAQG;AACH,QAAA,MAAM,WAAW,GAAI,OAAO,SAAS,CAAC,CAAC,WAAW,UACxC,OAAO,cACH,UAAU,CAAC,OAAO,CAAC,UACvB,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,KAC9F,YAAY,CAAC,OAAO,CA6BtB,CAAC;AAEF,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/build/api/handler.js

@@ -1,29 +1,41 @@
+import { CardError } from '../common/error.js';
 import { errorResult } from './api-result.js';
 import { parseColorParams, parseParams } from './params.js';
 /**
- * An endpoint: the schema it accepts, and what it draws from the parsed params.
+ * An endpoint: the schema it accepts, the identities a pinned deployment may refuse,
+ * and what it draws from the parsed params.
  *
  * Colors parse first and on their own, because a rejected color cannot be used to draw its own error card.
- * Parsing throws, fetching throws, and one `catch` turns whatever was thrown into the answer.
+ * Parsing throws, the allowlist throws, fetching throws, and one `catch` turns whatever was thrown into the answer.
  *
  * @returns The handler, taking the query the schema describes.
  */
-const cardHandler = (schema, render) => async (query, config) => {
-    let colors;
-    try {
-        colors = parseColorParams(query);
-    }
-    catch (error) {
-        return errorResult(error);
-    }
-    try {
-        return {
-            status: 'success',
-            content: await render(parseParams(schema, query), colors, config),
-        };
-    }
-    catch (error) {
-        return errorResult(error, colors);
-    }
+const cardHandler = (schema, identities, render) => {
+    const handler = async (query, config) => {
+        let colors;
+        try {
+            colors = parseColorParams(query);
+        }
+        catch (error) {
+            return errorResult(error);
+        }
+        try {
+            const params = parseParams(schema, query);
+            // before the render, so a refusal costs no rate-limit point; an absent identity is the
+            // fetcher's `missing_param` to report
+            for (const [param, kind] of Object.entries(identities)) {
+                const value = params[param];
+                if (typeof value === 'string' && !config.isAllowed(value, kind)) {
+                    throw CardError.notAllowed(param);
+                }
+            }
+            return { status: 'success', content: await render(params, colors, config) };
+        }
+        catch (error) {
+            return errorResult(error, colors);
+        }
+    };
+    // carried like `OPTIONS`, so `tests/allowlist.test.ts` can assert every card declares one
+    return Object.assign(handler, { IDENTITIES: identities });
 };
 export { cardHandler };

package/build/api/organization.d.ts

@@ -20,6 +20,8 @@ export declare const org: ((query: import("./params.ts").ApiQuery<z.ZodMiniObjec
     locale: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<string | undefined, string | undefined>>;
     border_radius: z.ZodMiniType<number | undefined, string | undefined, z.core.$ZodTypeInternals<number | undefined, string | undefined>>;
 }, z.core.$strip>>, config: import("./index.ts").CardConfig) => Promise<import("./api-result.ts").ApiResult>) & {
+    IDENTITIES: Partial<Record<"border_radius" | "card_width" | "custom_title" | "disable_animations" | "hide" | "hide_border" | "hide_description" | "hide_title" | "line_height" | "locale" | "number_format" | "org" | "show" | "show_icons" | "text_bold", import("../common/config.ts").AllowlistKind>>;
+} & {
     OPTIONS: {
         show: readonly ["releases", "commits", "members", "top_language", "created"];
         hide: readonly ["repos", "stars", "forks", "watchers", "open_issues", "open_prs"];

package/build/api/organization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organization.d.ts","sourceRoot":"","sources":["../../src/api/organization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAqF9B;;;GAGG;AACH,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;CAAwE,CAAC"}
+{"version":3,"file":"organization.d.ts","sourceRoot":"","sources":["../../src/api/organization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAsF9B;;;GAGG;AACH,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAAwE,CAAC"}

package/build/api/organization.js

@@ -26,7 +26,7 @@ const orgQuery = z.object({
  *
  * @returns The rendered card, or a rendered error.
  */
-const renderOrg = cardHandler(orgQuery, async ({ org, hide, show, show_icons, hide_title, hide_border, hide_description, card_width, line_height, custom_title, disable_animations, number_format, text_bold, locale, border_radius, }, colors, config) => {
+const renderOrg = cardHandler(orgQuery, { org: 'username' }, async ({ org, hide, show, show_icons, hide_title, hide_border, hide_description, card_width, line_height, custom_title, disable_animations, number_format, text_bold, locale, border_radius, }, colors, config) => {
     const organizationData = await fetchOrganization({ org }, config);
     return renderOrganizationCard(organizationData, {
         ...colors,

package/build/api/params.d.ts

@@ -1,5 +1,3 @@
-import * as z from 'zod/mini';
-import type { ColorParams } from '../common/color.ts';
 /**
  * @file The api layer is the trust boundary:
  * a query string arrives as strings, and each endpoint declares what it accepts as a schema over them.
@@ -9,6 +7,8 @@ import type { ColorParams } from '../common/color.ts';
  * `zod/mini` rather than `zod`:
  * this package ships to the browser, and the functional API tree-shakes down to the checks used below.
  */
+import * as z from 'zod/mini';
+import type { ColorParams } from '../common/color.ts';
 /** Every param arrives as a string, or not at all. */
 declare const rawParam: z.ZodMiniOptional<z.ZodMiniString<string>>;
 /**

package/build/api/params.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../src/api/params.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAE9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAQtD;;;;;;;;GAQG;AAEH,sDAAsD;AACtD,QAAA,MAAM,QAAQ,4CAAyB,CAAC;AA4CxC;;;GAGG;AACH,QAAA,MAAM,YAAY,wHAIjB,CAAC;AAEF,8DAA8D;AAC9D,QAAA,MAAM,SAAS,6GAA4C,CAAC;AAE5D;;;;;;GAMG;AACH,QAAA,MAAM,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG,SAAS,CAGtE,CAAC;AAEF;;;GAGG;AACH,QAAA,MAAM,aAAa,uHAGlB,CAAC;AAsBF,2DAA2D;AAC3D,QAAA,MAAM,SAAS,qHAAqB,CAAC;AAErC,yDAAyD;AACzD,QAAA,MAAM,OAAO,qHAAmB,CAAC;AAEjC;;;GAGG;AACH,QAAA,MAAM,aAAa;WAAqB,IAAI,GAAG,SAAS;SAAO,IAAI,GAAG,SAAS;EAG9E,CAAC;AAEF;;;GAGG;AACH,QAAA,MAAM,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG,SAAS,CAEpE,CAAC;AAEF;;;GAGG;AACH,QAAA,MAAM,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG,SAAS,CAExE,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAGnE,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,WAAW,uHAGhB,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,SAAS,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,CAAC,MAAM,CAAC,UAC9C,CAAC,KACR,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE,MAAM,GAAG,SAAS,CACqC,CAAC;AAmBhG;;;;GAIG;AACH,KAAK,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,WAAW,CAAC;AAcvF;;;;;;;;;GASG;AACH,QAAA,MAAM,WAAW,GAAI,OAAO,SAAS,CAAC,CAAC,WAAW,UACxC,OAAO,SACR,OAAO,KACb,CAAC,CAAC,MAAM,CAAC,OAAO,CAMlB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,gBAAgB,UAAW,OAAO,KAAG,WAAoD,CAAC;AAEhG,YAAY,EAAE,QAAQ,EAAE,CAAC;AAEzB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,SAAS,EACT,SAAS,EACT,aAAa,EACb,WAAW,EACX,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACR,aAAa,EACb,SAAS,EACT,OAAO,EACP,aAAa,GACd,CAAC"}
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../src/api/params.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAE9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAQtD,sDAAsD;AACtD,QAAA,MAAM,QAAQ,4CAAyB,CAAC;AA4CxC;;;GAGG;AACH,QAAA,MAAM,YAAY,wHAIjB,CAAC;AAEF,8DAA8D;AAC9D,QAAA,MAAM,SAAS,6GAA4C,CAAC;AAE5D;;;;;;GAMG;AACH,QAAA,MAAM,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG,SAAS,CAGtE,CAAC;AAEF;;;GAGG;AACH,QAAA,MAAM,aAAa,uHAGlB,CAAC;AAsBF,2DAA2D;AAC3D,QAAA,MAAM,SAAS,qHAAqB,CAAC;AAErC,yDAAyD;AACzD,QAAA,MAAM,OAAO,qHAAmB,CAAC;AAEjC;;;GAGG;AACH,QAAA,MAAM,aAAa;WAAqB,IAAI,GAAG,SAAS;SAAO,IAAI,GAAG,SAAS;EAG9E,CAAC;AAEF;;;GAGG;AACH,QAAA,MAAM,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG,SAAS,CAEpE,CAAC;AAEF;;;GAGG;AACH,QAAA,MAAM,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG,SAAS,CAExE,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAGnE,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,WAAW,uHAGhB,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,SAAS,GAAI,KAAK,CAAC,CAAC,SAAS,aAAa,CAAC,MAAM,CAAC,UAC9C,CAAC,KACR,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE,MAAM,GAAG,SAAS,CACqC,CAAC;AAmBhG;;;;GAIG;AACH,KAAK,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,WAAW,CAAC;AAcvF;;;;;;;;;GASG;AACH,QAAA,MAAM,WAAW,GAAI,OAAO,SAAS,CAAC,CAAC,WAAW,UACxC,OAAO,SACR,OAAO,KACb,CAAC,CAAC,MAAM,CAAC,OAAO,CAMlB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,gBAAgB,UAAW,OAAO,KAAG,WAAoD,CAAC;AAEhG,YAAY,EAAE,QAAQ,EAAE,CAAC;AAEzB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,SAAS,EACT,SAAS,EACT,aAAa,EACb,WAAW,EACX,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACR,aAAa,EACb,SAAS,EACT,OAAO,EACP,aAAa,GACd,CAAC"}

package/build/api/params.js

@@ -1,10 +1,3 @@
-import * as z from 'zod/mini';
-import { COLOR_PARAM_KEYS, THEME_PARAM_KEYS, isValidColorInput } from '../common/color.js';
-import { GITHUB_USERNAME_PATTERN } from '../common/constants.js';
-import { getWidestRange, parseRangeDate } from '../common/date.js';
-import { CardError } from '../common/error.js';
-import { isLocaleAvailable } from '../common/localize.js';
-import { parseArray, parseBoolean } from '../common/ops.js';
 /**
  * @file The api layer is the trust boundary:
  * a query string arrives as strings, and each endpoint declares what it accepts as a schema over them.
@@ -14,6 +7,13 @@ import { parseArray, parseBoolean } from '../common/ops.js';
  * `zod/mini` rather than `zod`:
  * this package ships to the browser, and the functional API tree-shakes down to the checks used below.
  */
+import * as z from 'zod/mini';
+import { COLOR_PARAM_KEYS, THEME_PARAM_KEYS, isValidColorInput } from '../common/color.js';
+import { GITHUB_USERNAME_PATTERN } from '../common/constants.js';
+import { getWidestRange, parseRangeDate } from '../common/date.js';
+import { CardError } from '../common/error.js';
+import { isLocaleAvailable } from '../common/localize.js';
+import { parseArray, parseBoolean } from '../common/ops.js';
 /** Every param arrives as a string, or not at all. */
 const rawParam = z.optional(z.string());
 /** Characters a repository, owner or gist id may contain. */

package/build/api/pin.d.ts

@@ -19,6 +19,8 @@ export declare const pin: ((query: import("./params.ts").ApiQuery<z.ZodMiniObjec
     border_radius: z.ZodMiniType<number | undefined, string | undefined, z.core.$ZodTypeInternals<number | undefined, string | undefined>>;
     description_lines_count: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<number | undefined, string | undefined>>;
 }, z.core.$strip>>, config: import("./index.ts").CardConfig) => Promise<import("./api-result.ts").ApiResult>) & {
+    IDENTITIES: Partial<Record<"border_radius" | "browser_rendering" | "card_width" | "description_lines_count" | "hide_border" | "line_height" | "locale" | "number_format" | "repo" | "show" | "show_icons" | "show_owner" | "text_bold" | "username", import("../common/config.ts").AllowlistKind>>;
+} & {
     OPTIONS: {
         show: readonly ["prs_authored", "prs_commented", "prs_reviewed", "issues_authored", "issues_commented"];
         number_format: readonly ["short", "long"];

package/build/api/pin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pin.d.ts","sourceRoot":"","sources":["../../src/api/pin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AA8F9B;;;GAGG;AACH,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;CAAgE,CAAC"}
+{"version":3,"file":"pin.d.ts","sourceRoot":"","sources":["../../src/api/pin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AA+F9B;;;GAGG;AACH,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;CAAgE,CAAC"}

package/build/api/pin.js

@@ -25,7 +25,7 @@ const pinQuery = z.object({
  *
  * @returns The rendered card, or a rendered error.
  */
-const renderPin = cardHandler(pinQuery, async ({ username, repo, hide_border, card_width, show_owner, browser_rendering, show, show_icons, number_format, text_bold, line_height, locale, border_radius, description_lines_count, }, colors, config) => {
+const renderPin = cardHandler(pinQuery, { username: 'username' }, async ({ username, repo, hide_border, card_width, show_owner, browser_rendering, show, show_icons, number_format, text_bold, line_height, locale, border_radius, description_lines_count, }, colors, config) => {
     const repoData = await fetchRepo({
         username,
         reponame: repo,

package/build/api/stats.d.ts

@@ -30,6 +30,8 @@ export declare const stats: ((query: import("./params.ts").ApiQuery<z.ZodMiniObj
     show: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<string[], string | undefined>>;
     contribs_include_own_repos: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<boolean | undefined, string | undefined>>;
 }, z.core.$strip>>, config: import("./index.ts").CardConfig) => Promise<import("./api-result.ts").ApiResult>) & {
+    IDENTITIES: Partial<Record<"border_radius" | "card_width" | "contribs_include_own_repos" | "custom_title" | "disable_animations" | "exclude_repo" | "from" | "hide" | "hide_border" | "hide_rank" | "hide_title" | "include_all_commits" | "line_height" | "locale" | "number_format" | "number_precision" | "owner" | "rank_icon" | "repo" | "role" | "show" | "show_icons" | "text_bold" | "to" | "username", import("../common/config.ts").AllowlistKind>>;
+} & {
     OPTIONS: {
         rank_icon: readonly ["default", "github", "percentile"];
         show: readonly ["contributions", "prs_merged", "prs_merged_percentage", "reviews", "discussions_started", "discussions_answered", "prs_authored", "prs_commented", "prs_reviewed", "issues_authored", "issues_commented", "all_time_contribs"];

package/build/api/stats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../src/api/stats.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAuJ9B;;;GAGG;AACH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAEhB,CAAC"}
+{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../src/api/stats.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAwJ9B;;;GAGG;AACH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAEhB,CAAC"}

package/build/api/stats.js

@@ -39,7 +39,7 @@ const statsQuery = z
  *
  * @returns The rendered card, or a rendered error.
  */
-const renderStats = cardHandler(statsQuery, async ({ username, repo, owner, hide, hide_title, hide_border, card_width, hide_rank, show_icons, include_all_commits, from, to, line_height, text_bold, exclude_repo, custom_title, locale, disable_animations, border_radius, number_format, role, number_precision, rank_icon, show, contribs_include_own_repos, }, colors, config) => {
+const renderStats = cardHandler(statsQuery, { username: 'username' }, async ({ username, repo, owner, hide, hide_title, hide_border, card_width, hide_rank, show_icons, include_all_commits, from, to, line_height, text_bold, exclude_repo, custom_title, locale, disable_animations, border_radius, number_format, role, number_precision, rank_icon, show, contribs_include_own_repos, }, colors, config) => {
     // A bare repo name is scoped to the user whose card this is.
     const repository = repo.map((name) => name.includes('/') ? name : `${username ?? ''}/${name}`);
     const stats = await fetchStats({

package/build/api/top-langs.d.ts

@@ -23,6 +23,8 @@ export declare const topLangs: ((query: import("./params.ts").ApiQuery<z.ZodMini
     hide_values: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<boolean | undefined, string | undefined>>;
     stats_format: z.ZodMiniType<"bytes" | "percentages" | undefined, string | undefined, z.core.$ZodTypeInternals<"bytes" | "percentages" | undefined, string | undefined>>;
 }, z.core.$strip>>, config: import("./index.ts").CardConfig) => Promise<import("./api-result.ts").ApiResult>) & {
+    IDENTITIES: Partial<Record<"border_radius" | "card_width" | "count_weight" | "custom_title" | "disable_animations" | "exclude_repo" | "hide" | "hide_border" | "hide_progress" | "hide_title" | "hide_values" | "langs_count" | "layout" | "locale" | "role" | "size_weight" | "stats_format" | "username", import("../common/config.ts").AllowlistKind>>;
+} & {
     OPTIONS: {
         layout: readonly ["compact", "normal", "donut", "donut-vertical", "pie"];
         stats_format: readonly ["percentages", "bytes"];

package/build/api/top-langs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"top-langs.d.ts","sourceRoot":"","sources":["../../src/api/top-langs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAqG9B;;;GAGG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;CAEnB,CAAC"}
+{"version":3,"file":"top-langs.d.ts","sourceRoot":"","sources":["../../src/api/top-langs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAsG9B;;;GAGG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;CAEnB,CAAC"}

package/build/api/top-langs.js

@@ -30,7 +30,7 @@ const topLangsQuery = z.object({
  *
  * @returns The rendered card, or a rendered error.
  */
-const renderTopLangs = cardHandler(topLangsQuery, async ({ username, hide, hide_title, hide_border, card_width, layout, langs_count, exclude_repo, size_weight, count_weight, custom_title, locale, border_radius, role, disable_animations, hide_progress, hide_values, stats_format, }, colors, config) => {
+const renderTopLangs = cardHandler(topLangsQuery, { username: 'username' }, async ({ username, hide, hide_title, hide_border, card_width, layout, langs_count, exclude_repo, size_weight, count_weight, custom_title, locale, border_radius, role, disable_animations, hide_progress, hide_values, stats_format, }, colors, config) => {
     const topLangs = await fetchTopLanguages({
         username,
         exclude_repo,

package/build/api/wakatime.d.ts

@@ -20,6 +20,8 @@ export declare const wakatime: ((query: import("./params.ts").ApiQuery<z.ZodMini
     display_format: z.ZodMiniType<"percent" | "time" | undefined, string | undefined, z.core.$ZodTypeInternals<"percent" | "time" | undefined, string | undefined>>;
     disable_animations: z.ZodMiniPipe<z.ZodMiniOptional<z.ZodMiniString<string>>, z.ZodMiniTransform<boolean | undefined, string | undefined>>;
 }, z.core.$strip>>, config: import("./index.ts").CardConfig) => Promise<import("./api-result.ts").ApiResult>) & {
+    IDENTITIES: Partial<Record<"api_domain" | "border_radius" | "card_width" | "custom_title" | "disable_animations" | "display_format" | "hide" | "hide_border" | "hide_progress" | "hide_title" | "langs_count" | "layout" | "line_height" | "locale" | "username", import("../common/config.ts").AllowlistKind>>;
+} & {
     OPTIONS: {
         layout: readonly ["compact", "normal"];
         display_format: readonly ["time", "percent"];

package/build/api/wakatime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wakatime.d.ts","sourceRoot":"","sources":["../../src/api/wakatime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAuF9B;;;GAGG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;CAAyE,CAAC"}
+{"version":3,"file":"wakatime.d.ts","sourceRoot":"","sources":["../../src/api/wakatime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAC;AAyF9B;;;GAGG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;CAAyE,CAAC"}

package/build/api/wakatime.js

@@ -28,7 +28,9 @@ const wakatimeQuery = z.object({
  *
  * @returns The rendered card, or a rendered error.
  */
-const renderWakatime = cardHandler(wakatimeQuery, async ({ username, hide_border, card_width, line_height, hide_title, hide_progress, custom_title, locale, layout, langs_count, hide, api_domain, border_radius, display_format, disable_animations, }, colors, config) => {
+const renderWakatime = cardHandler(wakatimeQuery, 
+// no allowlist: `username` is a WakaTime profile, not a GitHub login (see `apps/server/README.md`)
+{}, async ({ username, hide_border, card_width, line_height, hide_title, hide_progress, custom_title, locale, layout, langs_count, hide, api_domain, border_radius, display_format, disable_animations, }, colors, config) => {
     const stats = await fetchWakatimeStats({ username, api_domain }, config);
     return renderWakatimeCard(stats, {
         ...colors,

package/build/common/config.d.ts

@@ -1,5 +1,7 @@
 import type { FetchLike } from './http.ts';
 type Env = Record<string, string | undefined>;
+/** Which list guards an identity. `username` is any GitHub login, an organization's included. */
+type AllowlistKind = 'username' | 'gist';
 interface PersonalAccessToken {
     /** Env variable the token came from — the retryer logs this name, never the value. */
     name: string;
@@ -34,10 +36,14 @@ export declare class CardConfig {
     constructor(init?: CardConfigInit);
     /** @returns Config for this deployment. */
     static fromEnv(env: Env): CardConfig;
-    /** @returns Whether this deployment serves the id. */
-    isAllowed(id: string, kind: 'username' | 'gist'): boolean;
+    /**
+     * Matched case-insensitively, as a GitHub login is; an absent list serves anyone.
+     *
+     * @returns Whether this deployment serves the id.
+     */
+    isAllowed(id: string, kind: AllowlistKind): boolean;
     /** @returns A copy with `overrides` applied — how a host swaps in a user's PAT per request. */
     with(overrides: CardConfigInit): CardConfig;
 }
-export type { PersonalAccessToken, CardConfigInit };
+export type { AllowlistKind, PersonalAccessToken, CardConfigInit };
 //# sourceMappingURL=config.d.ts.map

package/build/common/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/common/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAE9C,UAAU,mBAAmB;IAC3B,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qFAAqF;AACrF,UAAU,cAAc;IACtB,IAAI,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC1C,iBAAiB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACtD,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAClD,mBAAmB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AA2BD;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAClD,oEAAoE;IACpE,QAAQ,CAAC,iBAAiB,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC9D,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC1D,QAAQ,CAAC,mBAAmB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpD,mFAAmF;IACnF,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAE1B,YAAY,IAAI,GAAE,cAAmB,EAOpC;IAED,2CAA2C;IAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAQnC;IAED,sDAAsD;IACtD,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAGxD;IAED,+FAA+F;IAC/F,IAAI,CAAC,SAAS,EAAE,cAAc,GAAG,UAAU,CAU1C;CACF;AAED,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/common/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAE9C,iGAAiG;AACjG,KAAK,aAAa,GAAG,UAAU,GAAG,MAAM,CAAC;AAEzC,UAAU,mBAAmB;IAC3B,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qFAAqF;AACrF,UAAU,cAAc;IACtB,IAAI,CAAC,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC1C,iBAAiB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IACtD,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAClD,mBAAmB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAmCD;;;;;GAKG;AACH,qBAAa,UAAU;IACrB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAClD,oEAAoE;IACpE,QAAQ,CAAC,iBAAiB,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC9D,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC1D,QAAQ,CAAC,mBAAmB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpD,mFAAmF;IACnF,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAE1B,YAAY,IAAI,GAAE,cAAmB,EAOpC;IAED,2CAA2C;IAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAQnC;IAED;;;;OAIG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAIlD;IAED,+FAA+F;IAC/F,IAAI,CAAC,SAAS,EAAE,cAAc,GAAG,UAAU,CAU1C;CACF;AAED,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,EAAE,CAAC"}

package/build/common/config.js

@@ -1,8 +1,14 @@
 import { defaultFetch } from './http.js';
 /**
- * @returns Parsed string values.
+ * @returns The comma-separated values, trimmed, or `undefined` when the variable is unset or empty.
  */
-const parseCsv = (value) => value ? value.split(',') : undefined;
+const parseCsv = (value) => {
+    const values = (value ?? '')
+        .split(',')
+        .map((entry) => entry.trim())
+        .filter((entry) => entry !== '');
+    return values.length > 0 ? values : undefined;
+};
 /**
  * @returns Page limit: `"true"` means every page, a positive number caps the pages, anything else means one.
  */
@@ -14,11 +20,14 @@ const parseFetchMultiPageStars = (value) => {
     return limit > 0 ? limit : 1;
 };
 /**
+ * An empty variable is an unset one: `docker compose` writes `PAT_2=` for a token left blank.
+ *
  * @returns Personal access tokens found in the environment.
  */
 const parsePATsFromEnv = (env) => Object.keys(env)
     .filter((key) => /PAT_\d*$/.exec(key))
-    .map((name) => ({ name, value: env[name] ?? '' }));
+    .map((name) => ({ name, value: env[name] ?? '' }))
+    .filter((pat) => pat.value !== '');
 /**
  * Deployment-wide configuration for the card renderers.
  *
@@ -48,16 +57,21 @@ export class CardConfig {
     static fromEnv(env) {
         return new CardConfig({
             pats: parsePATsFromEnv(env),
-            usernameAllowlist: parseCsv(env['WHITELIST']),
-            gistAllowlist: parseCsv(env['GIST_WHITELIST']),
+            usernameAllowlist: parseCsv(env['ALLOWLIST']),
+            gistAllowlist: parseCsv(env['GIST_ALLOWLIST']),
             excludeRepositories: parseCsv(env['EXCLUDE_REPO']) ?? [],
             fetchMultiPageStars: parseFetchMultiPageStars(env['FETCH_MULTI_PAGE_STARS']),
         });
     }
-    /** @returns Whether this deployment serves the id. */
+    /**
+     * Matched case-insensitively, as a GitHub login is; an absent list serves anyone.
+     *
+     * @returns Whether this deployment serves the id.
+     */
     isAllowed(id, kind) {
         const list = kind === 'gist' ? this.gistAllowlist : this.usernameAllowlist;
-        return list === undefined || list.includes(id);
+        const wanted = id.toLowerCase();
+        return list === undefined || list.some((allowed) => allowed.toLowerCase() === wanted);
     }
     /** @returns A copy with `overrides` applied — how a host swaps in a user's PAT per request. */
     with(overrides) {

package/build/common/error.d.ts

@@ -15,9 +15,11 @@ type ErrorCode =
 'invalid_param'
 /** The query is missing a param the endpoint cannot render without. */
  | 'missing_param'
+/** The query is well-formed, but this deployment is pinned to identities it does not name. */
+ | 'not_allowed'
 /** The user, repository or gist does not exist. */
  | 'not_found'
-/** The deployment has no usable GitHub token. */
+/** The deployment has no usable GitHub token — retryable, the fix being a token on the next start. */
  | 'no_tokens'
 /** Every token is rate limited. */
  | 'rate_limited'
@@ -55,6 +57,13 @@ declare class CardError extends Error {
      * @returns The error.
      */
     static missingParam(params: Array<string>, secondaryMessage?: string): CardError;
+    /**
+     * An identity this deployment is not configured to draw.
+     * Names neither the value nor the list: one is the caller's, the other the operator's.
+     *
+     * @returns The error.
+     */
+    static notAllowed(param: string): CardError;
     /**
      * Anything thrown that is not already a `CardError`:
      * an upstream failure, since the query itself got this far.

package/build/common/error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/common/error.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,wDAAwD;AACxD,QAAA,MAAM,eAAe,2BAA2B,CAAC;AAEjD,4BAA4B;AAC5B,KAAK,SAAS;AACZ,2EAA2E;AACzE,eAAe;AACjB,uEAAuE;GACrE,eAAe;AACjB,mDAAmD;GACjD,WAAW;AACb,iDAAiD;GAC/C,WAAW;AACb,mCAAmC;GACjC,cAAc;AAChB,2DAA2D;GACzD,UAAU,CAAC;AAef,sDAAsD;AACtD,QAAA,MAAM,wBAAwB,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAKhE,CAAC;AAEF,wDAAwD;AACxD,UAAU,aAAa;IACrB,qBAAqB;IACrB,IAAI,EAAE,SAAS,CAAC;IAChB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,sCAAsC;AACtC,cAAM,SAAU,SAAQ,KAAK;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC,YAAY,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAM/C;IAED,sEAAsE;IACtE,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;OAIG;IACH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAMtE;IAED;;;;;OAKG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAO/E;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,CAQnC;CACF;AAED,qEAAqE;AACrE,QAAA,MAAM,mBAAmB,QAEtB,CAAC;AAEJ,0DAA0D;AAC1D,QAAA,MAAM,uBAAuB,iDAAiD,CAAC;AAE/E,yEAAyE;AACzE,QAAA,MAAM,cAAc,2DAA2D,CAAC;AAEhF,kFAAkF;AAClF,QAAA,MAAM,sBAAsB,iEAAiE,CAAC;AAE9F,2EAA2E;AAC3E,QAAA,MAAM,cAAc,+DAA+D,CAAC;AAEpF,0CAA0C;AAC1C,QAAA,MAAM,cAAc,8CAA8C,CAAC;AAEnE,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,OAAO,EACL,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,uBAAuB,GACxB,CAAC"}
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/common/error.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,wDAAwD;AACxD,QAAA,MAAM,eAAe,2BAA2B,CAAC;AAKjD,4BAA4B;AAC5B,KAAK,SAAS;AACZ,2EAA2E;AACzE,eAAe;AACjB,uEAAuE;GACrE,eAAe;AACjB,8FAA8F;GAC5F,aAAa;AACf,mDAAmD;GACjD,WAAW;AACb,sGAAsG;GACpG,WAAW;AACb,mCAAmC;GACjC,cAAc;AAChB,2DAA2D;GACzD,UAAU,CAAC;AAgBf,sDAAsD;AACtD,QAAA,MAAM,wBAAwB,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAKhE,CAAC;AAEF,wDAAwD;AACxD,UAAU,aAAa;IACrB,qBAAqB;IACrB,IAAI,EAAE,SAAS,CAAC;IAChB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,sCAAsC;AACtC,cAAM,SAAU,SAAQ,KAAK;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC,YAAY,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAM/C;IAED,sEAAsE;IACtE,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;OAIG;IACH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAMtE;IAED;;;;;OAKG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAO/E;IAED;;;;;OAKG;IACH,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAM1C;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,CAQnC;CACF;AAED,qEAAqE;AACrE,QAAA,MAAM,mBAAmB,QAEtB,CAAC;AAEJ,0DAA0D;AAC1D,QAAA,MAAM,uBAAuB,iDAAiD,CAAC;AAE/E,yEAAyE;AACzE,QAAA,MAAM,cAAc,2DAA2D,CAAC;AAEhF,kFAAkF;AAClF,QAAA,MAAM,sBAAsB,iEAAiE,CAAC;AAE9F,2EAA2E;AAC3E,QAAA,MAAM,cAAc,+DAA+D,CAAC;AAEpF,0CAA0C;AAC1C,QAAA,MAAM,cAAc,8CAA8C,CAAC;AAEnE,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,OAAO,EACL,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,uBAAuB,GACxB,CAAC"}

package/build/common/error.js

@@ -1,4 +1,3 @@
-import { OWNER_AFFILIATIONS } from './constants.js';
 /**
  * @file One error type for everything a card render can fail on.
  *
@@ -8,8 +7,11 @@ import { OWNER_AFFILIATIONS } from './constants.js';
  * Anything else that escapes is wrapped as `upstream` by `from`, which is retryable —
  * so a permanent failure has to throw a `CardError` to be reported as one.
  */
+import { OWNER_AFFILIATIONS } from './constants.js';
 /** A general message to ask user to try again later. */
 const TRY_AGAIN_LATER = 'Please try again later';
+/** The second line for an identity a pinned deployment does not serve. */
+const NOT_ALLOWED = 'This deployment does not serve that account';
 /**
  * Whether repeating the request could produce a different answer.
  * A host reads this to decide between caching the failure and retrying it.
@@ -17,8 +19,9 @@ const TRY_AGAIN_LATER = 'Please try again later';
 const RETRYABLE = {
     invalid_param: false,
     missing_param: false,
+    not_allowed: false,
     not_found: false,
-    no_tokens: false,
+    no_tokens: true,
     rate_limited: true,
     upstream: true,
 };
@@ -70,6 +73,19 @@ class CardError extends Error {
             param: params[0],
         });
     }
+    /**
+     * An identity this deployment is not configured to draw.
+     * Names neither the value nor the list: one is the caller's, the other the operator's.
+     *
+     * @returns The error.
+     */
+    static notAllowed(param) {
+        return new CardError('Not allowed', {
+            code: 'not_allowed',
+            secondaryMessage: NOT_ALLOWED,
+            param,
+        });
+    }
     /**
      * Anything thrown that is not already a `CardError`:
      * an upstream failure, since the query itself got this far.

package/build/common/log.d.ts

@@ -1,5 +1,8 @@
 /**
- * Return console instance based on the environment.
+ * Where this package's diagnostics go.
+ *
+ * Dispatches to `console` at call time rather than import time,
+ * so a host or a test that replaces `console.log` is obeyed.
  */
 declare const logger: {
     log: (...args: Array<unknown>) => void;

package/build/common/log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../src/common/log.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,QAAA,MAAM,MAAM,EAAE;IACZ,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACvC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;CAI1C,CAAC;AAEF,OAAO,EAAE,MAAM,EAAE,CAAC"}
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../src/common/log.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,QAAA,MAAM,MAAM,EAAE;IACZ,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACvC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;CAQ1C,CAAC;AAEF,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/build/common/log.js

@@ -1,8 +1,15 @@
 /**
- * Return console instance based on the environment.
+ * Where this package's diagnostics go.
+ *
+ * Dispatches to `console` at call time rather than import time,
+ * so a host or a test that replaces `console.log` is obeyed.
  */
 const logger = {
-    log: console.log,
-    error: console.error,
+    log: (...args) => {
+        console.log(...args);
+    },
+    error: (...args) => {
+        console.error(...args);
+    },
 };
 export { logger };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stats-forge/github-stats-forge-core",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Dynamically generate stats for your GitHub readme",
   "keywords": [
     "card-generator",

package/src/api/contributed-to.ts

@@ -44,6 +44,7 @@ const contributedToQuery = z
  */
 export const contributedTo = cardHandler(
   contributedToQuery,
+  { username: 'username' },
   async (
     {
       username,

package/src/api/gist.ts

@@ -23,6 +23,7 @@ const gistQuery = z.object({
  */
 export const gist = cardHandler(
   gistQuery,
+  { id: 'gist' },
   async (
     { id, locale, border_radius, show_owner, browser_rendering, hide_border },
     colors,

package/src/api/handler.ts

@@ -1,27 +1,40 @@
 import type * as z from 'zod/mini';
 
 import type { ColorParams } from '../common/color.ts';
-import type { CardConfig } from '../common/config.ts';
+import type { AllowlistKind, CardConfig } from '../common/config.ts';
+import { CardError } from '../common/error.ts';
 
 import type { ApiResult } from './api-result.ts';
 import { errorResult } from './api-result.ts';
 import type { ApiQuery } from './params.ts';
 import { parseColorParams, parseParams } from './params.ts';
 
+/** Which of an endpoint's params name an identity, and which list guards each. */
+type Identities<TSchema extends z.ZodMiniType> = Partial<
+  Record<Extract<keyof z.output<TSchema>, string>, AllowlistKind>
+>;
+
+/** An endpoint, and the identities a pinned deployment may refuse it. */
+type CardEndpoint<TSchema extends z.ZodMiniType> = ((
+  query: ApiQuery<TSchema>,
+  config: CardConfig,
+) => Promise<ApiResult>) & { IDENTITIES: Identities<TSchema> };
+
 /**
- * An endpoint: the schema it accepts, and what it draws from the parsed params.
+ * An endpoint: the schema it accepts, the identities a pinned deployment may refuse,
+ * and what it draws from the parsed params.
  *
  * Colors parse first and on their own, because a rejected color cannot be used to draw its own error card.
- * Parsing throws, fetching throws, and one `catch` turns whatever was thrown into the answer.
+ * Parsing throws, the allowlist throws, fetching throws, and one `catch` turns whatever was thrown into the answer.
  *
  * @returns The handler, taking the query the schema describes.
  */
-const cardHandler =
-  <TSchema extends z.ZodMiniType>(
-    schema: TSchema,
-    render: (params: z.output<TSchema>, colors: ColorParams, config: CardConfig) => Promise<string>,
-  ) =>
-  async (query: ApiQuery<TSchema>, config: CardConfig): Promise<ApiResult> => {
+const cardHandler = <TSchema extends z.ZodMiniType>(
+  schema: TSchema,
+  identities: Identities<TSchema>,
+  render: (params: z.output<TSchema>, colors: ColorParams, config: CardConfig) => Promise<string>,
+): CardEndpoint<TSchema> => {
+  const handler = async (query: ApiQuery<TSchema>, config: CardConfig): Promise<ApiResult> => {
     let colors: ColorParams;
     try {
       colors = parseColorParams(query);
@@ -30,13 +43,25 @@ const cardHandler =
     }
 
     try {
-      return {
-        status: 'success',
-        content: await render(parseParams(schema, query), colors, config),
-      };
+      const params = parseParams(schema, query);
+
+      // before the render, so a refusal costs no rate-limit point; an absent identity is the
+      // fetcher's `missing_param` to report
+      for (const [param, kind] of Object.entries(identities) as Array<[string, AllowlistKind]>) {
+        const value: unknown = (params as Record<string, unknown>)[param];
+        if (typeof value === 'string' && !config.isAllowed(value, kind)) {
+          throw CardError.notAllowed(param);
+        }
+      }
+
+      return { status: 'success', content: await render(params, colors, config) };
     } catch (error) {
       return errorResult(error, colors);
     }
   };
 
+  // carried like `OPTIONS`, so `tests/allowlist.test.ts` can assert every card declares one
+  return Object.assign(handler, { IDENTITIES: identities });
+};
+
 export { cardHandler };

package/src/api/organization.ts

@@ -40,6 +40,7 @@ const orgQuery = z.object({
  */
 const renderOrg = cardHandler(
   orgQuery,
+  { org: 'username' },
   async (
     {
       org,

package/src/api/params.ts

@@ -1,13 +1,3 @@
-import * as z from 'zod/mini';
-
-import type { ColorParams } from '../common/color.ts';
-import { COLOR_PARAM_KEYS, THEME_PARAM_KEYS, isValidColorInput } from '../common/color.ts';
-import { GITHUB_USERNAME_PATTERN } from '../common/constants.ts';
-import { getWidestRange, parseRangeDate } from '../common/date.ts';
-import { CardError } from '../common/error.ts';
-import { isLocaleAvailable } from '../common/localize.ts';
-import { parseArray, parseBoolean } from '../common/ops.ts';
-
 /**
  * @file The api layer is the trust boundary:
  * a query string arrives as strings, and each endpoint declares what it accepts as a schema over them.
@@ -18,6 +8,16 @@ import { parseArray, parseBoolean } from '../common/ops.ts';
  * this package ships to the browser, and the functional API tree-shakes down to the checks used below.
  */
 
+import * as z from 'zod/mini';
+
+import type { ColorParams } from '../common/color.ts';
+import { COLOR_PARAM_KEYS, THEME_PARAM_KEYS, isValidColorInput } from '../common/color.ts';
+import { GITHUB_USERNAME_PATTERN } from '../common/constants.ts';
+import { getWidestRange, parseRangeDate } from '../common/date.ts';
+import { CardError } from '../common/error.ts';
+import { isLocaleAvailable } from '../common/localize.ts';
+import { parseArray, parseBoolean } from '../common/ops.ts';
+
 /** Every param arrives as a string, or not at all. */
 const rawParam = z.optional(z.string());
 

package/src/api/pin.ts

@@ -40,6 +40,7 @@ const pinQuery = z.object({
  */
 const renderPin = cardHandler(
   pinQuery,
+  { username: 'username' },
   async (
     {
       username,

package/src/api/stats.ts

@@ -58,6 +58,7 @@ const statsQuery = z
  */
 const renderStats = cardHandler(
   statsQuery,
+  { username: 'username' },
   async (
     {
       username,

package/src/api/top-langs.ts

@@ -45,6 +45,7 @@ const topLangsQuery = z.object({
  */
 const renderTopLangs = cardHandler(
   topLangsQuery,
+  { username: 'username' },
   async (
     {
       username,

package/src/api/wakatime.ts

@@ -43,6 +43,8 @@ const wakatimeQuery = z.object({
  */
 const renderWakatime = cardHandler(
   wakatimeQuery,
+  // no allowlist: `username` is a WakaTime profile, not a GitHub login (see `apps/server/README.md`)
+  {},
   async (
     {
       username,

package/src/common/config.ts

@@ -3,6 +3,9 @@ import type { FetchLike } from './http.ts';
 
 type Env = Record<string, string | undefined>;
 
+/** Which list guards an identity. `username` is any GitHub login, an organization's included. */
+type AllowlistKind = 'username' | 'gist';
+
 interface PersonalAccessToken {
   /** Env variable the token came from — the retryer logs this name, never the value. */
   name: string;
@@ -20,10 +23,15 @@ interface CardConfigInit {
 }
 
 /**
- * @returns Parsed string values.
+ * @returns The comma-separated values, trimmed, or `undefined` when the variable is unset or empty.
  */
-const parseCsv = (value: string | undefined): Array<string> | undefined =>
-  value ? value.split(',') : undefined;
+const parseCsv = (value: string | undefined): Array<string> | undefined => {
+  const values = (value ?? '')
+    .split(',')
+    .map((entry) => entry.trim())
+    .filter((entry) => entry !== '');
+  return values.length > 0 ? values : undefined;
+};
 
 /**
  * @returns Page limit: `"true"` means every page, a positive number caps the pages, anything else means one.
@@ -37,12 +45,15 @@ const parseFetchMultiPageStars = (value: string | undefined): number => {
 };
 
 /**
+ * An empty variable is an unset one: `docker compose` writes `PAT_2=` for a token left blank.
+ *
  * @returns Personal access tokens found in the environment.
  */
 const parsePATsFromEnv = (env: Env): Array<PersonalAccessToken> =>
   Object.keys(env)
     .filter((key) => /PAT_\d*$/.exec(key))
-    .map((name) => ({ name, value: env[name] ?? '' }));
+    .map((name) => ({ name, value: env[name] ?? '' }))
+    .filter((pat) => pat.value !== '');
 
 /**
  * Deployment-wide configuration for the card renderers.
@@ -75,17 +86,22 @@ export class CardConfig {
   static fromEnv(env: Env): CardConfig {
     return new CardConfig({
       pats: parsePATsFromEnv(env),
-      usernameAllowlist: parseCsv(env['WHITELIST']),
-      gistAllowlist: parseCsv(env['GIST_WHITELIST']),
+      usernameAllowlist: parseCsv(env['ALLOWLIST']),
+      gistAllowlist: parseCsv(env['GIST_ALLOWLIST']),
       excludeRepositories: parseCsv(env['EXCLUDE_REPO']) ?? [],
       fetchMultiPageStars: parseFetchMultiPageStars(env['FETCH_MULTI_PAGE_STARS']),
     });
   }
 
-  /** @returns Whether this deployment serves the id. */
-  isAllowed(id: string, kind: 'username' | 'gist'): boolean {
+  /**
+   * Matched case-insensitively, as a GitHub login is; an absent list serves anyone.
+   *
+   * @returns Whether this deployment serves the id.
+   */
+  isAllowed(id: string, kind: AllowlistKind): boolean {
     const list = kind === 'gist' ? this.gistAllowlist : this.usernameAllowlist;
-    return list === undefined || list.includes(id);
+    const wanted = id.toLowerCase();
+    return list === undefined || list.some((allowed) => allowed.toLowerCase() === wanted);
   }
 
   /** @returns A copy with `overrides` applied — how a host swaps in a user's PAT per request. */
@@ -102,4 +118,4 @@ export class CardConfig {
   }
 }
 
-export type { PersonalAccessToken, CardConfigInit };
+export type { AllowlistKind, PersonalAccessToken, CardConfigInit };

package/src/common/error.ts

@@ -1,5 +1,3 @@
-import { OWNER_AFFILIATIONS } from './constants.ts';
-
 /**
  * @file One error type for everything a card render can fail on.
  *
@@ -10,18 +8,25 @@ import { OWNER_AFFILIATIONS } from './constants.ts';
  * so a permanent failure has to throw a `CardError` to be reported as one.
  */
 
+import { OWNER_AFFILIATIONS } from './constants.ts';
+
 /** A general message to ask user to try again later. */
 const TRY_AGAIN_LATER = 'Please try again later';
 
+/** The second line for an identity a pinned deployment does not serve. */
+const NOT_ALLOWED = 'This deployment does not serve that account';
+
 /** Why a request failed. */
 type ErrorCode =
   /** The query is wrong: a param is malformed, unsafe, or not renderable. */
   | 'invalid_param'
   /** The query is missing a param the endpoint cannot render without. */
   | 'missing_param'
+  /** The query is well-formed, but this deployment is pinned to identities it does not name. */
+  | 'not_allowed'
   /** The user, repository or gist does not exist. */
   | 'not_found'
-  /** The deployment has no usable GitHub token. */
+  /** The deployment has no usable GitHub token — retryable, the fix being a token on the next start. */
   | 'no_tokens'
   /** Every token is rate limited. */
   | 'rate_limited'
@@ -35,8 +40,9 @@ type ErrorCode =
 const RETRYABLE: Record<ErrorCode, boolean> = {
   invalid_param: false,
   missing_param: false,
+  not_allowed: false,
   not_found: false,
-  no_tokens: false,
+  no_tokens: true,
   rate_limited: true,
   upstream: true,
 };
@@ -106,6 +112,20 @@ class CardError extends Error {
     });
   }
 
+  /**
+   * An identity this deployment is not configured to draw.
+   * Names neither the value nor the list: one is the caller's, the other the operator's.
+   *
+   * @returns The error.
+   */
+  static notAllowed(param: string): CardError {
+    return new CardError('Not allowed', {
+      code: 'not_allowed',
+      secondaryMessage: NOT_ALLOWED,
+      param,
+    });
+  }
+
   /**
    * Anything thrown that is not already a `CardError`:
    * an upstream failure, since the query itself got this far.

package/src/common/log.ts

@@ -1,12 +1,19 @@
 /**
- * Return console instance based on the environment.
+ * Where this package's diagnostics go.
+ *
+ * Dispatches to `console` at call time rather than import time,
+ * so a host or a test that replaces `console.log` is obeyed.
  */
 const logger: {
   log: (...args: Array<unknown>) => void;
   error: (...args: Array<unknown>) => void;
 } = {
-  log: console.log,
-  error: console.error,
+  log: (...args) => {
+    console.log(...args);
+  },
+  error: (...args) => {
+    console.error(...args);
+  },
 };
 
 export { logger };