kiosk-server 0.5.20 → 0.6.28

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3655d8b33b8d61b64e0dc63c2eb98caae19e0499ff066254a53f714b8ab784e1
-  data.tar.gz: eaf33535317cb84f6c5ce47bbed0703dc32c36185a13d57571e319018ea95572
+  metadata.gz: 500b9a8093341b3f2a2c97aa33207bac718a05270ab079ce05b9b6546336164c
+  data.tar.gz: 11301b3066105605dad72413895eb2962dd37410dd675f0701ddcb9e0481b87d
 SHA512:
-  metadata.gz: 619d6506b120a88c8cb121ce7fc510384336321e1c7e05f29030a659b813fb421ab944a55f22bd6bad05251a87f5fab15302ce4abe802f6a9de798ed129d1076
-  data.tar.gz: c71595941f76cbc20653004c4435110af1e307fb1c37886e97dadf3328dd934e1ee64fb0be65286d2c9067c7f2e89a99930312c174a1ecf7483e43638d6dd133
+  metadata.gz: 5aa88f5ca10a288eb2335b09ab67cdc1cc6e98d9a8d64fd455a37e5984409cb6e5b4ee2146fd3f69f49046ba3fb79a5db4bc86e79ae9c66ca68f2f42842791ad
+  data.tar.gz: 489454b379ef7d3a872c0d0fb6f80b846aed54f4571a1dc84ac7ec36e0e0d00cc03d67842957830232db3d3e18b672bd2e7ae32e6e9c2e3aff2949e5a4aff00e

data/CHANGELOG.md

@@ -12,6 +12,202 @@ already written is edited.
 
 ## [Unreleased]
 
+## [0.6.28] — 2026-10-26
+
+- 2026-10-26: Version 0.6.28, the tree cut that matches skill 0.6.28.
+
+## [0.6.27] — 2026-10-26
+
+- 2026-10-26: Version 0.6.27, the tree cut that matches skill 0.6.27.
+## [0.6.26] — 2026-10-26
+
+- 2026-10-26: Version 0.6.26, the tree cut that matches skill 0.6.26.
+- 2026-10-26: The spending cap is the most one `pay` may charge. `spending_cap_window_days` and the running total are removed; the manage page shows all the spend of an assistant.
+- 2026-10-26: The PoW gate and the auth toll raise their ConfigurationError when kiosk-reputation or kiosk-pow-equihash is not required and only its version file is loaded.
+
+## [0.6.25] — 2026-10-26
+
+- 2026-10-26: Version 0.6.25, the tree cut that matches skill 0.6.25.
+- 2026-10-26: The README names the two gems and `registration_pow_count` of the toll, the real KYC variables, every root discovery document and a matching route example.
+- 2026-10-26: The manage-assistants and link-approval pages are whole documents with a title, in the engine layout `layouts/kiosk/server/application`.
+- 2026-10-26: The manage-assistants page shows money amounts and a cap of 0 as «no payments allowed»; its `spending_cap` field takes an amount in the cap currency.
+
+## [0.6.24] — 2026-10-26
+
+- 2026-10-26: Version 0.6.24, the tree cut that matches skill 0.6.24.
+- 2026-10-26: `validate_requests` holds the KYC callback body to the published `callback` object: a wrong-typed member is a 400 naming it.
+- 2026-10-26: The `101` answer at `<endpoint>/events` carries the three version headers, as every answer under the mount does.
+- 2026-10-26: A subscription whose reach is withdrawn leaves the connection, so a later `subscribe` with its identifier gets `reject_subscription`.
+
+## [0.6.23] — 2026-10-26
+
+- 2026-10-26: Version 0.6.23, the tree cut that matches skill 0.6.23.
+
+## [0.6.22] — 2026-10-26
+
+- 2026-10-26: Version 0.6.22, the tree cut that matches skill 0.6.22.
+
+## [0.6.21] — 2026-10-26
+
+- 2026-10-26: Version 0.6.21, the tree cut that matches skill 0.6.21.
+
+## [0.6.20] — 2026-10-26
+
+- 2026-10-26: Version 0.6.20, the tree cut that matches skill 0.6.20.
+
+## [0.6.19] — 2026-10-26
+
+- 2026-10-26: Version 0.6.19, the tree cut that matches skill 0.6.19.
+
+## [0.6.18] — 2026-10-25
+
+- 2026-10-25: Version 0.6.18, the tree cut that matches skill 0.6.18.
+
+## [0.6.17] — 2026-10-25
+
+- 2026-10-25: Version 0.6.17, the tree cut that matches skill 0.6.17.
+- 2026-10-25: The event stream sends the replay of every subscription the upgrade URL declares in one ascending id order, and live events in the order the pubsub gives them.
+
+## [0.6.16] — 2026-10-25
+
+- 2026-10-25: Version 0.6.16, the tree cut that matches skill 0.6.16.
+- Kiosk's tables are `kiosk_*` tables in the schema `c.schema` names, `public` by default. `kiosk:install` writes them as plain Rails migrations.
+- `kiosk:install` creates no SQL functions and no `agent_tokens` or `agent_mappings` table, and takes no `--guc-namespace`.
+
+## [0.6.15] — 2026-10-25
+
+- 2026-10-25: Version 0.6.15, the tree cut that matches skill 0.6.15.
+
+- 2026-10-25: The generated initializer shows `skill_sha256` and the command that makes it. An operator does not set `skill_url`: each release gives the skill of its version.
+
+## [0.6.14] — 2026-10-25
+
+- 2026-10-25: Version 0.6.14, the tree cut that matches skill 0.6.14.
+
+## [0.6.13] — 2026-10-25
+
+- 2026-10-25: Version 0.6.13, the tree cut that matches skill 0.6.13.
+
+- 2026-10-25: The `invalid_client` 401 of the token and device-authorization endpoints names `Kiosk-Client-Assertion`; the 401 of the engine pages names `Kiosk-Session`.
+
+## [0.6.12] — 2026-10-24
+
+- 2026-10-24: Version 0.6.12, the tree cut that matches skill 0.6.12.
+
+- 2026-10-24: The KYC checks read the issuer, key and audience of `c.kyc_provider`; `kyc_issuer`, `kyc_public_key` and `kyc_audience` are removed.
+- 2026-10-24: `WrongDoor` is removed: the browser pages refuse a POST without the form's CSRF token alike, JSON or not.
+- 2026-10-24: The payment receipt's `network_confirmation_id` is `not reported by the payment provider` when the PSP adapter answers none.
+
+## [0.6.11] — 2026-10-24
+
+- 2026-10-24: Version 0.6.11, the tree cut that matches skill 0.6.11.
+
+- 2026-10-24: A binding records `agents.bound_at`. The manage-assistants page shows it as the time linked, the spend only with a `payment_provider`, and the cap only with a `spending_cap`.
+
+## [0.6.10] — 2026-10-23
+
+- 2026-10-23: Version 0.6.10, the tree cut that matches skill 0.6.10.
+
+## [0.6.9] — 2026-10-23
+
+- 2026-10-23: Version 0.6.9, the tree cut that matches skill 0.6.9.
+
+## [0.6.8] — 2026-10-22
+
+- 2026-10-22: The first binding merges the assistant account into the human's account: the recent spend counts its settlements and visits, also after an unlink. New table `assistant_accounts`.
+- 2026-10-22: Version 0.6.8, the tree cut that matches skill 0.6.8.
+
+## [0.6.7] — 2026-10-22
+
+- 2026-10-22: Version 0.6.7, the tree cut that matches skill 0.6.7.
+
+## [0.6.6] — 2026-10-22
+
+- 2026-10-22: The gate counts the tolled calls of each account in `tolled_calls`; the assistants of one account share the count. A binding adds the previous account's count.
+- 2026-10-22: The recent spend also counts what an assistant of the account paid before a binding moved it there.
+- 2026-10-22: `kiosk:install` writes `tolled_calls` and no `agents.calls_since_proof`. An installed origin moves the count with a migration of its own.
+- 2026-10-22: Version 0.6.6, the tree cut that matches skill 0.6.6.
+
+## [0.6.5] — 2026-10-22
+
+- 2026-10-22: Version 0.6.5, the tree cut that matches skill 0.6.5.
+- 2026-10-22: A 401 from `/auth/claim`, `/auth/rotate`, `/auth/link` or `/auth/unlink` names its challenge, `Kiosk-Client-Assertion` or `Kiosk-Session`. The engine pages have no inline style.
+
+## [0.6.4] — 2026-10-22
+
+- 2026-10-22: Version 0.6.4, the tree cut that matches skill 0.6.4.
+- 2026-10-22: The OAuth metadata lists the one scope `default`; a requested `scope` is ignored. A 401 names the protected-resource metadata, and every discovery document answers CORS.
+- 2026-10-22: The wrong-door hint names `auth.registration_url` and `auth.token_url` of kiosk.json.
+
+## [0.6.3] — 2026-10-22
+
+- 2026-10-22: Version 0.6.3, the tree cut that matches skill 0.6.3.
+- 2026-10-22: The gate counts each assistant's tolled calls in `agents.calls_since_proof`; a paid proof sets it to zero. A paid proof no longer buys the rest of the access token.
+- 2026-10-22: `kiosk:install` writes `agents.calls_since_proof`. An installed origin adds it with a migration of its own.
+
+## [0.6.2] — 2026-10-22
+
+- 2026-10-22: Version 0.6.2, the tree cut that matches skill 0.6.2.
+- 2026-10-22: `/auth.md` names the skill as "Skill for AI assistants". The OpenAPI tag of `schema` and `pay` is `reserved`, and refusal messages say "Kiosk HTTP API".
+
+## [0.6.1] — 2026-10-22
+
+- 2026-10-22: Version 0.6.1, the tree cut that matches skill 0.6.1.
+- 2026-10-22: The OAuth metadata documents carry `scopes_supported: []`, because an AI assistant requests no scope. `/auth.md` writes each Discover URL bare, so a scanner reads it.
+- 2026-10-21: A DPoP proof or client assertion whose `alg` is not the algorithm of its key is refused with a message that names that algorithm.
+
+## [0.6.0] — 2026-10-21
+
+- 2026-10-21: The engine signs tokens, checkouts and receipts EdDSA with an Ed25519 `c.signing_key`; an RSA key is refused.
+- 2026-10-21: Assistant keys are Ed25519 (EdDSA). `c.assistant_algorithms = %w[EdDSA ES256]` also accepts P-256 keys; RSA keys are refused.
+- 2026-10-21: A checkout carries a random 128-bit `jti`, because an EdDSA signature is the same for the same claims.
+- 2026-10-21: `c.kyc_public_key` is an Ed25519 key, and an attestation is an EdDSA JWS.
+- 2026-10-21: Version 0.6.0, the tree cut that matches skill 0.6.0.
+
+## [0.5.27] — 2026-10-21
+
+- 2026-10-21: Registration is RFC 7591 at `POST <endpoint>/oauth/register`; the token endpoint is core and gives tokens for a client assertion (RFC 7523) and a DPoP proof.
+- 2026-10-21: Device authorization, the link-code claim and the key rotation authenticate with a client assertion; the claim answers 204, the rotation the client information.
+- 2026-10-21: Removed `GET /auth/challenge`, `POST /auth/register`, `/auth/login` and `/auth/revoke`, the challenge store, its two settings and the `kiosk.auth_challenges` table.
+- 2026-10-21: agents.txt and agents.json name `oauth2`; the RFC 8414 metadata is always served, with registration and `private_key_jwt`.
+- 2026-10-21: `AssistantKey::ALGORITHMS` is the one list of signing algorithms that client assertions, DPoP proofs and the metadata read.
+- 2026-10-21: Version 0.5.27, the tree cut that matches skill 0.5.27.
+
+## [0.5.26] — 2026-10-21
+
+- 2026-10-21: Serves RFC 9728 protected resource metadata at `/.well-known/oauth-protected-resource`, and the ARD manifest also at `/.well-known/ai-catalog.json` with `specVersion`.
+- 2026-10-21: Version 0.5.26, the tree cut that matches skill 0.5.26.
+
+## [0.5.25] — 2026-10-21
+
+- 2026-10-21: Version 0.5.25, the tree cut that matches skill 0.5.25.
+
+## [0.5.24] — 2026-10-21
+
+- 2026-10-21: A settled `pay` answers the AP2 v0.2 `checkout_receipt` and `payment_receipt`, JWTs signed PS256 with `c.signing_key`, each naming its mandate.
+- 2026-10-21: `kiosk.settlements` gains `network_confirmation_id`, so a repeat of a settled pair answers the same payment receipt claims.
+- 2026-10-21: Version 0.5.24, the tree cut that matches skill 0.5.24.
+
+## [0.5.23] — 2026-10-21
+
+- 2026-10-21: Every access token carries `cnf.jkt`, and `IdentityResolution` refuses a call without a DPoP proof by that key (`Errors::AccessTokenRefused`, `WWW-Authenticate: DPoP`).
+- 2026-10-21: `POST <endpoint>/auth/rotate` (`AgentRotation`) puts a new key on an agent and revokes its earlier tokens.
+- 2026-10-21: `c.previous_signing_key` is published in the JWKS and accepted for tokens and checkouts; `c.signing_keys` lists both.
+- 2026-10-21: The payment-setup `402` names `Kiosk-Payment-Setup` in `WWW-Authenticate`. The device grant answers `token_type: "DPoP"`.
+- 2026-10-21: Version 0.5.23, the tree cut that matches skill 0.5.23.
+
+## [0.5.22] — 2026-10-21
+
+- 2026-10-21: `pay` verifies a closed AP2 v0.2 checkout mandate and payment mandate, each an SD-JWT, against a checkout this origin signed PS256.
+- 2026-10-21: `Kiosk::Payable#checkout` signs the `checkout_jwt` an action answers; `c.checkout_price_checker` replaces `c.cart_price_checker`.
+- 2026-10-21: The mandate tables are `checkout_mandates`, `payment_mandates` and `settlements`, with one live pair per checkout. The JWK names no `alg`.
+- 2026-10-21: Version 0.5.22, the tree cut that matches skill 0.5.22.
+
+## [0.5.21] — 2026-10-21
+
+- agents.txt and agents.json name `x-kiosk-pop` and claim no AP2, required payment or required identity. `/.well-known/agent-configuration` is not served.
+- New: `/.well-known/oauth-authorization-server` (RFC 8414), `/.well-known/agent-skills/index.json` and `/.well-known/ard.json`.
+- The api-catalog links the descriptions from the endpoint and carries `rel="api-catalog"`; `Kiosk::SkillLink` adds that link to a page.
 - `Kiosk.clock_gap_note(name, zone, caller_zone)` answers one sentence on how far a place's clock is from the caller's now, else `nil`.
 
 ## [0.5.20] — 2026-10-20