@aotter/mantle 0.0.11-alpha.67 → 0.0.11-alpha.69
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -448,11 +448,18 @@ The original ADR-0014 §"Auth as contract, Better Auth as default" framing stays
|
|
|
448
448
|
|
|
449
449
|
## Amendment — 2026-06-30: Hosted-auth boundary and first-party cookie fields
|
|
450
450
|
|
|
451
|
-
Mantle Platform introduces a first-party hosted-auth use case
|
|
452
|
-
|
|
453
|
-
|
|
454
|
-
|
|
455
|
-
|
|
451
|
+
Mantle Platform introduces a first-party hosted-auth use case. Platform owns
|
|
452
|
+
site-owner accounts, billing, entitlement, provider credentials, and managed
|
|
453
|
+
email, while Hosted Auth is an OAuth proxy rather than a member directory.
|
|
454
|
+
Each customer site owns its Better Auth users, linked provider accounts,
|
|
455
|
+
sessions, roles, and grants. For Hosted GitHub, the validated proxy profile's
|
|
456
|
+
`github_login` maps to the existing site-local `user.githubLogin`, so hosted
|
|
457
|
+
and self-managed GitHub reuse the same atomic first-owner bootstrap rule. The
|
|
458
|
+
conventional customer-site path uses the proxy's public OAuth client with PKCE
|
|
459
|
+
and `ADMIN_GITHUB_LOGIN`; it does not use Platform Account OIDC, a client
|
|
460
|
+
secret, or an owner email handoff. The local provider id remains `github`.
|
|
461
|
+
The wire contract remains in [Platform #35](https://github.com/aotter/mantle-platform/issues/35),
|
|
462
|
+
and the product boundary is documented in
|
|
456
463
|
[`docs/auth-hosting-model.md`](../auth-hosting-model.md).
|
|
457
464
|
|
|
458
465
|
This does not change ADR-0014's core rule: Mantle does not expose an
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aotter/mantle",
|
|
3
|
-
"version": "0.0.11-alpha.
|
|
3
|
+
"version": "0.0.11-alpha.69",
|
|
4
4
|
"description": "Umbrella entry for @aotter/mantle. Adopters install this one package and import from subpaths: /spec, /runtime, /cloudflare, /admin-ui. Sub-packages remain individually installable on npm for tooling / alt-adapter authors. The Netlify adapter ships as a private workspace stub in v0.1 — its subpath will be added when the impl lands in v0.2.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"homepage": "https://mantle.tools/",
|
|
@@ -55,10 +55,10 @@
|
|
|
55
55
|
"README.md"
|
|
56
56
|
],
|
|
57
57
|
"dependencies": {
|
|
58
|
-
"@aotter/mantle-
|
|
59
|
-
"@aotter/mantle-
|
|
60
|
-
"@aotter/mantle-
|
|
61
|
-
"@aotter/mantle-spec": "0.0.11-alpha.
|
|
58
|
+
"@aotter/mantle-admin-ui": "0.0.11-alpha.69",
|
|
59
|
+
"@aotter/mantle-runtime": "0.0.11-alpha.69",
|
|
60
|
+
"@aotter/mantle-cloudflare": "0.0.11-alpha.69",
|
|
61
|
+
"@aotter/mantle-spec": "0.0.11-alpha.69"
|
|
62
62
|
},
|
|
63
63
|
"peerDependencies": {
|
|
64
64
|
"@cloudflare/workers-oauth-provider": "^0.8.0",
|