@authzflow/server 0.0.0-stage → 0.1.0-alpha.8

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Accelflow Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,15 @@
-# Temporary Holding Version
+# @authzflow/server
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+MIT-licensed alpha complete-check provider maintained by Accelflow Inc. Ships ESM JavaScript and TypeScript declarations, with no runtime dependencies or Rust build required.
+
+```js
+import { createCheckProvider } from '@authzflow/server';
+```
+
+Connect existing authentication and authorization with the async `authenticate` and `authorize` callbacks. The provider creates metadata-only request-bound responses, cryptographic epochs, no-store headers and server-selected offline policy. It never replaces product ACLs or logs credentials. Default read policy is online-only; offline configuration uses minutes.
+
+See https://github.com/Accelflow/AuthzFlow/blob/main/docs-public/adapters.md and https://github.com/Accelflow/AuthzFlow/blob/main/docs-public/protocol.md for callback and wire contracts. Node 22/24 and TypeScript 5.9+ are initial targets. Native Rust servers can use the companion authzflow-server source crate with the same wire fixtures.
+
+The checked reader in @authzflow/core validates these responses before returning content. Always keep authorization on ordinary product content APIs. Reliable event streams and cursor recovery are outside this complete-check alpha.
+
+LICENSE and THIRD_PARTY_NOTICES.md are included. Security reporting: https://github.com/Accelflow/AuthzFlow/security/advisories/new .