@cat-factory/app 0.262.0 → 0.263.0

package/app/components/settings/ApiTokensPanel.vue

@@ -57,6 +57,23 @@ function minterLabel(key: PublicApiKey): string | null {
     ? t('settings.apiTokens.list.createdByYou')
     : key.createdByUserId
 }
+
+/**
+ * The badge for a key bound to a person's subscription, WHOSE person named.
+ *
+ * Keys are workspace-scoped and this list is shared, so a colleague's bound key is right here in
+ * everyone's panel: a fixed "your subscription" tells every other member that a token they never
+ * minted reaches theirs, which is alarming and false. The same comparison {@link minterLabel} makes
+ * is available (a binding is always to the minter), so the honest badge names the owner, and falls
+ * back to the `usr_*` id for the same reason that function does — there is no user-name lookup here,
+ * and an id is not misleading.
+ */
+function boundLabel(key: PublicApiKey): string | null {
+  if (!key.actsAsUserId) return null
+  return key.actsAsUserId === auth.user?.id
+    ? t('settings.apiTokens.list.boundToYou')
+    : t('settings.apiTokens.list.boundToOther', { user: key.actsAsUserId })
+}
 const toast = useToast()
 const { present } = usePipelineErrorToast()
 const { confirmAction, toastDone } = useConfirmAction()
@@ -70,6 +87,35 @@ const back = useIntegrationBack(open)
 const label = ref('')
 // The scope the next minted key will carry; defaults to the safe middle of the ladder.
 const scope = ref<PublicApiScope>('write')
+// WHO the next key runs as. Two named options rather than an unchecked box, because they are two
+// different credentials with two different blast radii and neither is a mere setting on the other:
+//
+//  - `system` (the default): the token belongs to the workspace. Its runs are attributed to nobody
+//    and it can reach no personal subscription, so a leaked shared credential can never spend one
+//    person's Claude quota. This is what a CI job or a shared integration should hold.
+//  - `self`: the token belongs to the person minting it. Its runs are theirs and may unlock their
+//    personal Claude / Codex / GLM subscription, with the password sent on each such call.
+//
+// NOT gated on the interface mode, unlike an override field. This whole panel is the Integrations
+// hub's Development surface, reached only by someone already minting an API key, and `scope` next
+// to it is ungated for the same reason. Hiding it in basic mode would leave that person a key that
+// silently cannot run their own models, with nothing on screen to say why.
+type TokenIdentity = 'system' | 'self'
+const identity = ref<TokenIdentity>('system')
+// Nobody to bind on a board with no signed-in user (a dev-open deployment): the server refuses
+// such a mint outright, so the choice is withheld and every key is a system key, which is what
+// that deployment can honestly offer.
+const canBindSelf = computed(() => auth.user !== null && auth.user !== undefined)
+const identityItems = computed(() => [
+  { value: 'system' as const, label: t('settings.apiTokens.add.identitySystem') },
+  { value: 'self' as const, label: t('settings.apiTokens.add.identitySelf') },
+])
+/** The help text under the picker, so each option explains ITSELF rather than only its opposite. */
+const identityHelp = computed(() =>
+  identity.value === 'self'
+    ? t('settings.apiTokens.add.identitySelfHelp')
+    : t('settings.apiTokens.add.identitySystemHelp'),
+)
 const busy = ref(false)
 // The full raw secret from the most recent create — surfaced once, then dismissed. Never
 // re-fetchable, so it lives only in this transient ref (not the store).
@@ -97,10 +143,15 @@ async function createToken() {
   if (!trimmed) return
   busy.value = true
   try {
-    const created = await store.create(trimmed, scope.value)
+    const created = await store.create(
+      trimmed,
+      scope.value,
+      canBindSelf.value && identity.value === 'self',
+    )
     newSecret.value = created.secret
     label.value = ''
     scope.value = 'write'
+    identity.value = 'system'
     toast.add({
       title: t('settings.apiTokens.toast.created'),
       icon: 'i-lucide-check',
@@ -195,6 +246,18 @@ async function revokeToken(key: PublicApiKey) {
                 >
                   {{ scopeLabel(key.scope) }}
                 </UBadge>
+                <!-- Always shown, never mode-gated: an existing key can already carry the
+                     binding, and this is the only place its holder can see that a token they
+                     are about to hand out reaches a personal subscription. -->
+                <UBadge
+                  v-if="boundLabel(key)"
+                  color="warning"
+                  variant="subtle"
+                  size="sm"
+                  :data-testid="`api-token-bound-${key.id}`"
+                >
+                  {{ boundLabel(key) }}
+                </UBadge>
               </div>
               <div class="text-[11px] text-slate-500">
                 {{
@@ -255,6 +318,18 @@ async function revokeToken(key: PublicApiKey) {
               data-testid="api-token-scope"
             />
           </UFormField>
+          <UFormField
+            v-if="canBindSelf"
+            :label="t('settings.apiTokens.add.identity')"
+            :help="identityHelp"
+          >
+            <USelect
+              v-model="identity"
+              :items="identityItems"
+              class="w-full"
+              data-testid="api-token-identity"
+            />
+          </UFormField>
           <UButton
             :loading="busy"
             :disabled="!label.trim()"

package/app/stores/publicApiKeys.spec.ts

@@ -14,6 +14,7 @@ function key(over: Partial<PublicApiKey> = {}): PublicApiKey {
     createdByUserId: null,
     createdByKeyId: null,
     externalIdentity: null,
+    actsAsUserId: null,
     createdAt: 1,
     lastUsedAt: null,
     revokedAt: null,
@@ -94,6 +95,21 @@ describe('publicApiKeys store', () => {
     expect(store.available).toBe(true)
   })
 
+  it('mints a SYSTEM token unless the caller asks to be bound', async () => {
+    // The default decides whose subscription an unattended run may spend, so it is worth an
+    // assertion rather than a reading of the signature: a key that silently acted as its minter
+    // would put one person's Claude quota behind every integration the workspace hands a token to.
+    const body = vi.fn((_body: unknown) => Promise.resolve({ key: key(), secret: 's' }))
+    vi.stubGlobal('useApi', () => ({ createPublicApiKey: (_ws: string, b: unknown) => body(b) }))
+
+    const store = usePublicApiKeysStore()
+    await store.create('ci', 'write')
+    expect(body).toHaveBeenCalledWith({ label: 'ci', scope: 'write', actsAsSelf: false })
+
+    await store.create('mine', 'write', true)
+    expect(body).toHaveBeenCalledWith({ label: 'mine', scope: 'write', actsAsSelf: true })
+  })
+
   it('revoke drops the key from the list', async () => {
     vi.stubGlobal('useApi', () => ({
       listPublicApiKeys: () => Promise.resolve({ keys: [key({ id: 'a' }), key({ id: 'b' })] }),

package/app/stores/publicApiKeys.ts

@@ -54,10 +54,18 @@ export const usePublicApiKeysStore = defineStore('publicApiKeys', () => {
   /**
    * Mint a key with a permission `scope` (read ⊂ write ⊂ admin). Returns the created record
    * PLUS the one-time raw secret (shown once).
+   *
+   * `actsAsSelf` binds the key to the signed-in user's PERSONAL subscriptions, so a headless run
+   * it starts can unlock them with the password sent on that call. Passed through rather than
+   * defaulted here: the server writes the id off the session, so this is only ever a yes/no.
    */
-  async function create(label: string, scope: PublicApiScope): Promise<CreatedPublicApiKey> {
+  async function create(
+    label: string,
+    scope: PublicApiScope,
+    actsAsSelf = false,
+  ): Promise<CreatedPublicApiKey> {
     const ws = useWorkspaceStore()
-    const created = await api.createPublicApiKey(ws.requireId(), { label, scope })
+    const created = await api.createPublicApiKey(ws.requireId(), { label, scope, actsAsSelf })
     // Prepend: the backend lists newest-first, so the freshly minted key belongs at the
     // top — matching the order a subsequent `load()` would produce.
     keys.value = [created.key, ...keys.value]

package/i18n/locales/de.json

@@ -793,7 +793,9 @@
         "createdBy": "erstellt von {user}",
         "createdByYou": "Ihnen",
         "createdByKey": "API-Schlüssel {id}",
-        "revoke": "Token widerrufen"
+        "revoke": "Token widerrufen",
+        "boundToYou": "Ihr Abonnement",
+        "boundToOther": "Abonnement von {user}"
       },
       "add": {
         "heading": "Token erstellen",
@@ -802,7 +804,12 @@
         "labelPlaceholder": "z. B. CI-Pipeline",
         "scope": "Berechtigung",
         "scopeHelp": "Was dieses Token darf: nur Lesen, Lesen und Schreiben oder Vollzugriff (der auch das Löschen erlaubt).",
-        "create": "Token erstellen"
+        "create": "Token erstellen",
+        "identity": "Läuft als",
+        "identitySystem": "Dieser Arbeitsbereich (System-Token)",
+        "identitySelf": "Ich (persönliches Token)",
+        "identitySystemHelp": "Mit diesem Token gestartete Läufe gehören dem Arbeitsbereich und werden keiner Person zugeordnet. Es kann kein persönliches Claude-/Codex-/GLM-Abonnement nutzen: Eine Aufgabe mit einem solchen Modell wird abgelehnt, statt jemandem in Abwesenheit berechnet zu werden. Für CI und gemeinsam genutzte Integrationen.",
+        "identitySelfHelp": "Mit diesem Token gestartete Läufe gelten als Ihre und können Ihr persönliches Claude-/Codex-/GLM-Abonnement nutzen. Jeder solche Aufruf muss zusätzlich Ihr persönliches Passwort im Header X-Personal-Password senden; es wird nie gespeichert. Für Ihre eigenen Headless-Läufe."
       },
       "scopes": {
         "read": "Nur Lesen",

package/i18n/locales/en.json

@@ -3527,7 +3527,9 @@
         "createdBy": "created by {user}",
         "createdByYou": "you",
         "createdByKey": "API key {id}",
-        "revoke": "Revoke token"
+        "revoke": "Revoke token",
+        "boundToYou": "Your subscription",
+        "boundToOther": "{user}'s subscription"
       },
       "add": {
         "heading": "Create a token",
@@ -3536,7 +3538,12 @@
         "labelPlaceholder": "e.g. CI pipeline",
         "scope": "Scope",
         "scopeHelp": "What this token can do: read-only, read and write, or full access (which also allows deleting).",
-        "create": "Create token"
+        "create": "Create token",
+        "identity": "Runs as",
+        "identitySystem": "This workspace (system token)",
+        "identitySelf": "Me (personal token)",
+        "identitySystemHelp": "Runs started with this token belong to the workspace and are attributed to no person. It cannot use anyone’s personal Claude / Codex / GLM subscription, so a task pinned to one of those models is refused rather than charged to someone who is not there. Use this for CI and shared integrations.",
+        "identitySelfHelp": "Runs started with this token count as yours and can use your personal Claude / Codex / GLM subscription. Every such call must also send your personal password in the X-Personal-Password header; it is never stored. Use this to drive your own headless runs."
       },
       "scopes": {
         "read": "Read only",

package/i18n/locales/es.json

@@ -3248,7 +3248,9 @@
         "createdBy": "creado por {user}",
         "createdByYou": "ti",
         "createdByKey": "la clave de API {id}",
-        "revoke": "Revocar token"
+        "revoke": "Revocar token",
+        "boundToYou": "Tu suscripción",
+        "boundToOther": "Suscripción de {user}"
       },
       "add": {
         "heading": "Crear un token",
@@ -3257,7 +3259,12 @@
         "labelPlaceholder": "p. ej. pipeline de CI",
         "scope": "Alcance",
         "scopeHelp": "Lo que puede hacer este token: solo lectura, lectura y escritura o acceso completo (que también permite eliminar).",
-        "create": "Crear token"
+        "create": "Crear token",
+        "identity": "Se ejecuta como",
+        "identitySystem": "Este espacio de trabajo (token de sistema)",
+        "identitySelf": "Yo (token personal)",
+        "identitySystemHelp": "Las ejecuciones iniciadas con este token pertenecen al espacio de trabajo y no se atribuyen a ninguna persona. No puede usar la suscripción personal de Claude / Codex / GLM de nadie, así que una tarea fijada a uno de esos modelos se rechaza en lugar de cargarse a alguien ausente. Úsalo para CI e integraciones compartidas.",
+        "identitySelfHelp": "Las ejecuciones iniciadas con este token se te atribuyen y pueden usar tu suscripción personal de Claude / Codex / GLM. Cada llamada debe enviar además tu contraseña personal en la cabecera X-Personal-Password; nunca se almacena. Úsalo para tus propias ejecuciones headless."
       },
       "scopes": {
         "read": "Solo lectura",

package/i18n/locales/fr.json

@@ -3248,7 +3248,9 @@
         "createdBy": "créé par {user}",
         "createdByYou": "vous",
         "createdByKey": "la clé d’API {id}",
-        "revoke": "Révoquer le jeton"
+        "revoke": "Révoquer le jeton",
+        "boundToYou": "Votre abonnement",
+        "boundToOther": "Abonnement de {user}"
       },
       "add": {
         "heading": "Créer un jeton",
@@ -3257,7 +3259,12 @@
         "labelPlaceholder": "ex. pipeline CI",
         "scope": "Portée",
         "scopeHelp": "Ce que ce jeton peut faire : lecture seule, lecture et écriture, ou accès complet (qui autorise aussi la suppression).",
-        "create": "Créer le jeton"
+        "create": "Créer le jeton",
+        "identity": "S'exécute en tant que",
+        "identitySystem": "Cet espace de travail (jeton système)",
+        "identitySelf": "Moi (jeton personnel)",
+        "identitySystemHelp": "Les exécutions lancées avec ce jeton appartiennent à l'espace de travail et ne sont attribuées à personne. Il ne peut utiliser l'abonnement personnel Claude / Codex / GLM de qui que ce soit : une tâche fixée sur un tel modèle est refusée plutôt que facturée à quelqu'un d'absent. À utiliser pour la CI et les intégrations partagées.",
+        "identitySelfHelp": "Les exécutions lancées avec ce jeton vous sont attribuées et peuvent utiliser votre abonnement personnel Claude / Codex / GLM. Chaque appel doit aussi envoyer votre mot de passe personnel dans l'en-tête X-Personal-Password ; il n'est jamais conservé. À utiliser pour vos propres exécutions headless."
       },
       "scopes": {
         "read": "Lecture seule",

package/i18n/locales/he.json

@@ -3390,7 +3390,9 @@
         "createdBy": "נוצר על ידי {user}",
         "createdByYou": "אתה",
         "createdByKey": "מפתח API {id}",
-        "revoke": "בטל אסימון"
+        "revoke": "בטל אסימון",
+        "boundToYou": "המנוי שלך",
+        "boundToOther": "המנוי של {user}"
       },
       "add": {
         "heading": "צור אסימון",
@@ -3399,7 +3401,12 @@
         "labelPlaceholder": "לדוגמה, צינור CI",
         "scope": "היקף הרשאות",
         "scopeHelp": "מה האסימון הזה יכול לעשות: קריאה בלבד, קריאה וכתיבה, או גישה מלאה (שמאפשרת גם מחיקה).",
-        "create": "צור אסימון"
+        "create": "צור אסימון",
+        "identity": "פועל בשם",
+        "identitySystem": "סביבת העבודה הזו (אסימון מערכת)",
+        "identitySelf": "אני (אסימון אישי)",
+        "identitySystemHelp": "הרצות שמתחילות עם האסימון הזה שייכות לסביבת העבודה ואינן משויכות לאף אדם. הוא אינו יכול להשתמש במנוי האישי של אף אחד ל-Claude / Codex / GLM, ולכן משימה שמוצמדת למודל כזה תידחה במקום להיזקף לחובת מי שאינו נוכח. השתמשו בו ל-CI ולאינטגרציות משותפות.",
+        "identitySelfHelp": "הרצות שמתחילות עם האסימון הזה נחשבות שלך ויכולות להשתמש במנוי האישי שלך ל-Claude / Codex / GLM. כל קריאה כזו חייבת לשלוח גם את הסיסמה האישית שלך בכותרת X-Personal-Password; היא לעולם אינה נשמרת. השתמשו בו להרצות headless משלכם."
       },
       "scopes": {
         "read": "קריאה בלבד",

package/i18n/locales/it.json

@@ -793,7 +793,9 @@
         "createdBy": "creato da {user}",
         "createdByYou": "te",
         "createdByKey": "la chiave API {id}",
-        "revoke": "Revoca token"
+        "revoke": "Revoca token",
+        "boundToYou": "Il tuo abbonamento",
+        "boundToOther": "Abbonamento di {user}"
       },
       "add": {
         "heading": "Crea un token",
@@ -802,7 +804,12 @@
         "labelPlaceholder": "es. pipeline CI",
         "scope": "Ambito",
         "scopeHelp": "Cosa può fare questo token: sola lettura, lettura e scrittura o accesso completo (che consente anche l'eliminazione).",
-        "create": "Crea token"
+        "create": "Crea token",
+        "identity": "Viene eseguito come",
+        "identitySystem": "Questo spazio di lavoro (token di sistema)",
+        "identitySelf": "Io (token personale)",
+        "identitySystemHelp": "Le esecuzioni avviate con questo token appartengono allo spazio di lavoro e non sono attribuite a nessuna persona. Non può usare l'abbonamento personale Claude / Codex / GLM di nessuno: un'attività fissata su uno di quei modelli viene rifiutata anziché addebitata a chi non c'è. Usalo per la CI e le integrazioni condivise.",
+        "identitySelfHelp": "Le esecuzioni avviate con questo token sono attribuite a te e possono usare il tuo abbonamento personale Claude / Codex / GLM. Ogni chiamata deve inviare anche la tua password personale nell'intestazione X-Personal-Password; non viene mai memorizzata. Usalo per le tue esecuzioni headless."
       },
       "scopes": {
         "read": "Sola lettura",

package/i18n/locales/ja.json

@@ -3390,7 +3390,9 @@
         "createdBy": "作成者: {user}",
         "createdByYou": "あなた",
         "createdByKey": "APIキー {id}",
-        "revoke": "トークンを取り消す"
+        "revoke": "トークンを取り消す",
+        "boundToYou": "あなたのサブスクリプション",
+        "boundToOther": "{user} のサブスクリプション"
       },
       "add": {
         "heading": "トークンを作成",
@@ -3399,7 +3401,12 @@
         "labelPlaceholder": "例: CI パイプライン",
         "scope": "権限範囲",
         "scopeHelp": "このトークンでできること: 読み取り専用、読み取りと書き込み、またはフルアクセス（削除も可能）。",
-        "create": "トークンを作成"
+        "create": "トークンを作成",
+        "identity": "実行者",
+        "identitySystem": "このワークスペース（システムトークン）",
+        "identitySelf": "自分（個人トークン）",
+        "identitySystemHelp": "このトークンで開始した実行はワークスペースに属し、個人には紐づきません。誰の個人 Claude / Codex / GLM サブスクリプションも利用できないため、それらのモデルを指定したタスクは、不在の相手に課金される代わりに拒否されます。CI や共有連携にはこちらを使ってください。",
+        "identitySelfHelp": "このトークンで開始した実行はあなたのものとして扱われ、あなたの個人 Claude / Codex / GLM サブスクリプションを利用できます。その際は毎回のリクエストで X-Personal-Password ヘッダーに個人パスワードを送る必要があります。パスワードは保存されません。自分のヘッドレス実行にはこちらを使ってください。"
       },
       "scopes": {
         "read": "読み取り専用",

package/i18n/locales/pl.json

@@ -3248,7 +3248,9 @@
         "createdBy": "utworzone przez {user}",
         "createdByYou": "Ciebie",
         "createdByKey": "klucz API {id}",
-        "revoke": "Unieważnij token"
+        "revoke": "Unieważnij token",
+        "boundToYou": "Twoja subskrypcja",
+        "boundToOther": "Subskrypcja użytkownika {user}"
       },
       "add": {
         "heading": "Utwórz token",
@@ -3257,7 +3259,12 @@
         "labelPlaceholder": "np. potok CI",
         "scope": "Zakres",
         "scopeHelp": "Co może ten token: tylko odczyt, odczyt i zapis lub pełny dostęp (który pozwala także na usuwanie).",
-        "create": "Utwórz token"
+        "create": "Utwórz token",
+        "identity": "Działa jako",
+        "identitySystem": "Ten obszar roboczy (token systemowy)",
+        "identitySelf": "Ja (token osobisty)",
+        "identitySystemHelp": "Uruchomienia rozpoczęte tym tokenem należą do obszaru roboczego i nie są przypisywane do żadnej osoby. Token nie może korzystać z niczyjej osobistej subskrypcji Claude / Codex / GLM, więc zadanie przypięte do takiego modelu zostanie odrzucone, zamiast obciążyć kogoś nieobecnego. Użyj go do CI i wspólnych integracji.",
+        "identitySelfHelp": "Uruchomienia rozpoczęte tym tokenem są przypisywane Tobie i mogą korzystać z Twojej osobistej subskrypcji Claude / Codex / GLM. Każde takie wywołanie musi dodatkowo przesłać Twoje hasło osobiste w nagłówku X-Personal-Password; nie jest ono nigdzie zapisywane. Użyj go do własnych uruchomień headless."
       },
       "scopes": {
         "read": "Tylko odczyt",

package/i18n/locales/tr.json

@@ -3390,7 +3390,9 @@
         "createdBy": "oluşturan: {user}",
         "createdByYou": "siz",
         "createdByKey": "{id} API anahtarı",
-        "revoke": "Belirteci iptal et"
+        "revoke": "Belirteci iptal et",
+        "boundToYou": "Aboneliğiniz",
+        "boundToOther": "{user} kullanıcısının aboneliği"
       },
       "add": {
         "heading": "Belirteç oluştur",
@@ -3399,7 +3401,12 @@
         "labelPlaceholder": "örn. CI hattı",
         "scope": "Kapsam",
         "scopeHelp": "Bu belirtecin yapabilecekleri: yalnızca okuma, okuma ve yazma ya da tam erişim (silmeye de izin verir).",
-        "create": "Belirteç oluştur"
+        "create": "Belirteç oluştur",
+        "identity": "Şu kimlikle çalışır",
+        "identitySystem": "Bu çalışma alanı (sistem belirteci)",
+        "identitySelf": "Ben (kişisel belirteç)",
+        "identitySystemHelp": "Bu belirteçle başlatılan çalıştırmalar çalışma alanına aittir ve hiçbir kişiye atfedilmez. Kimsenin kişisel Claude / Codex / GLM aboneliğini kullanamaz; bu nedenle böyle bir modele sabitlenmiş görev, orada olmayan birine fatura edilmek yerine reddedilir. CI ve paylaşılan entegrasyonlar için bunu kullanın.",
+        "identitySelfHelp": "Bu belirteçle başlatılan çalıştırmalar size ait sayılır ve kişisel Claude / Codex / GLM aboneliğinizi kullanabilir. Bu tür her çağrının ayrıca kişisel parolanızı X-Personal-Password başlığında göndermesi gerekir; parola hiçbir zaman saklanmaz. Kendi headless çalıştırmalarınız için bunu kullanın."
       },
       "scopes": {
         "read": "Yalnızca okuma",

package/i18n/locales/uk.json

@@ -3248,7 +3248,9 @@
         "createdBy": "створено {user}",
         "createdByYou": "вами",
         "createdByKey": "ключ API {id}",
-        "revoke": "Відкликати токен"
+        "revoke": "Відкликати токен",
+        "boundToYou": "Ваша підписка",
+        "boundToOther": "Підписка {user}"
       },
       "add": {
         "heading": "Створити токен",
@@ -3257,7 +3259,12 @@
         "labelPlaceholder": "напр. конвеєр CI",
         "scope": "Обсяг доступу",
         "scopeHelp": "Що може цей токен: лише читання, читання та запис або повний доступ (який також дозволяє видалення).",
-        "create": "Створити токен"
+        "create": "Створити токен",
+        "identity": "Виконується як",
+        "identitySystem": "Цей робочий простір (системний токен)",
+        "identitySelf": "Я (особистий токен)",
+        "identitySystemHelp": "Запуски, розпочаті цим токеном, належать робочому простору й не приписуються жодній особі. Він не може використовувати чиюсь особисту підписку Claude / Codex / GLM, тож завдання, закріплене за такою моделлю, буде відхилено, а не оплачено коштом відсутньої людини. Використовуйте його для CI та спільних інтеграцій.",
+        "identitySelfHelp": "Запуски, розпочаті цим токеном, вважаються вашими й можуть використовувати вашу особисту підписку Claude / Codex / GLM. Кожен такий виклик має також надсилати ваш особистий пароль у заголовку X-Personal-Password; він ніколи не зберігається. Використовуйте його для власних headless-запусків."
       },
       "scopes": {
         "read": "Лише читання",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/app",
-  "version": "0.262.0",
+  "version": "0.263.0",
   "description": "Reusable Nuxt layer for the Agent Architecture Board SPA (components, stores, composables, pages). Consume it from a thin deployment app via `extends: ['@cat-factory/app']` and point it at your backend with NUXT_PUBLIC_API_BASE. See deploy/frontend for an example.",
   "repository": {
     "type": "git",
@@ -40,7 +40,7 @@
     "valibot": "^1.4.2",
     "vue": "3.5.41",
     "wretch": "^3.0.9",
-    "@cat-factory/contracts": "0.297.0"
+    "@cat-factory/contracts": "0.298.0"
   },
   "devDependencies": {
     "@toad-contracts/testing": "0.3.2",