@byokit/connect 0.3.0 → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +6 -0
- package/README.md +8 -5
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,12 @@
|
|
|
2
2
|
|
|
3
3
|
## Unreleased
|
|
4
4
|
|
|
5
|
+
## 0.4.0 (2026-10-12)
|
|
6
|
+
|
|
7
|
+
- Dependency update: pins @byokit/secrets 0.5.1.
|
|
8
|
+
|
|
9
|
+
- FEAT: One documented house Google client route: `googleClientFile(path)` in `@byokit/connect/node` reads Google's downloaded Desktop-app JSON (mode 600) for Gmail and every other Google preset, returns `null` when it is absent, and refuses a file other users can read, a non-regular file, or another client type.
|
|
10
|
+
|
|
5
11
|
## 0.3.0 (2026-10-06)
|
|
6
12
|
|
|
7
13
|
- Add approval-gated Gmail send (`MailSender`): one plain-text message per call, sent only after the host's approval returns `true` for that exact message.
|
package/README.md
CHANGED
|
@@ -329,8 +329,11 @@ npm run check
|
|
|
329
329
|
sh scripts/test.sh 'packages/connect/test/*.test.ts'
|
|
330
330
|
```
|
|
331
331
|
|
|
332
|
-
|
|
333
|
-
|
|
334
|
-
|
|
335
|
-
|
|
336
|
-
|
|
332
|
+
`packages/connect/test/journey-connect.test.ts` drives the built package the way a
|
|
333
|
+
host app does — `connect`/`signIn`/`token`/`mcp`, the loopback listener, the house
|
|
334
|
+
Google client, `MailReader`/`MailSender` and `MailHistory`. Fake providers and a real
|
|
335
|
+
loopback callback only. It covers PKCE/state and exact-callback binding, per-person
|
|
336
|
+
isolation, refresh races and revocation, discovery/DCR/resource binding, rich MCP
|
|
337
|
+
JSON/SSE responses, the approved/denied send, owner-bound history and browser
|
|
338
|
+
bundling. No real accounts or outbound network calls are used. Live
|
|
339
|
+
provider/device sign-ins are not claimed by these tests.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@byokit/connect",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.4.0",
|
|
4
4
|
"description": "Connect a person's third-party apps with PKCE, refresh and typed remote MCP.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"type": "module",
|
|
@@ -37,6 +37,6 @@
|
|
|
37
37
|
},
|
|
38
38
|
"dependencies": {
|
|
39
39
|
"@modelcontextprotocol/sdk": "1.31.0",
|
|
40
|
-
"@byokit/secrets": "0.5.
|
|
40
|
+
"@byokit/secrets": "0.5.1"
|
|
41
41
|
}
|
|
42
42
|
}
|