caspian-utils 0.0.27 → 0.0.29

package/dist/docs/fetch-data.md

@@ -12,10 +12,10 @@ related:
     - /docs/database
     - /docs/file-uploads
     - /docs/cache
-    - /docs/routing
-    - /docs/pulsepoint
-    - /docs/pulsepoint-runtime-map
-    - /docs/project-structure
+    - /docs/routing
+    - /docs/pulsepoint
+    - /docs/pulsepoint-runtime-map
+    - /docs/project-structure
     - /docs/index
 ---
 
@@ -140,11 +140,11 @@ Validate incoming form and mutation payloads before persisting them. See [valida
 
 If an RPC action needs transient request-scoped success or error state beyond its direct return payload, read [state.md](./state.md) and verify the current wire-request lifecycle before depending on persistence across navigations or full-page reloads.
 
-Important:
-
-- `pp.rpc()` posts to the current route RPC bridge.
-- Older docs may refer to `pp.fetchFunction()`. In this repo's current runtime, the supported helper is `pp.rpc()`.
-- Use [pulsepoint-runtime-map.md](./pulsepoint-runtime-map.md) when debugging browser-side RPC options such as streaming, upload progress, abort behavior, redirects, or SPA interaction.
+Important:
+
+- `pp.rpc()` posts to the current route RPC bridge.
+- Older docs may refer to `pp.fetchFunction()`. In this repo's current runtime, the supported helper is `pp.rpc()`.
+- Use [pulsepoint-runtime-map.md](./pulsepoint-runtime-map.md) when debugging browser-side RPC options such as streaming, upload progress, abort behavior, redirects, or SPA interaction.
 
 ## Streaming Responses
 
@@ -276,6 +276,8 @@ Use [auth.md](./auth.md) when the action should also participate in centralized
 
 According to the upstream Caspian RPC docs, actions are private by default until decorated with `@rpc()`, and the framework includes CSRF protection plus origin validation for exposed actions.
 
+For reverse-proxy deployments, RPC origin validation can also resolve the public app origin from `APP_BASE_URL`, `PUBLIC_BASE_URL`, or `SITE_URL`, and otherwise falls back to forwarded host and protocol headers when they are present.
+
 ## Serialization Rules
 
 For RPC responses, Caspian can automatically serialize common Python return types such as:

package/dist/docs/installation.md

@@ -34,7 +34,7 @@ The scaffolded Caspian baseline is:
 Install the supported runtimes before creating a project.
 
 - Node.js with `npm` and `npx` available
-- Python `v3.11.0` or newer
+- Python `v3.14.0` or newer
 
 You can verify your environment with:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "caspian-utils",
-  "version": "0.0.27",
+  "version": "0.0.29",
   "description": "Caspian tooling",
   "main": "index.js",
   "scripts": {