@cat-factory/worker 0.167.0 → 0.168.0

package/migrations/0084_user_session_generation.sql

@@ -0,0 +1,22 @@
+-- Per-user SESSION GENERATION: the one row write that revokes every bearer a person holds.
+--
+-- Sessions are stateless HMAC-signed tokens, so before this column there was nothing to revoke:
+-- logout dropped the token client-side and a leaked (or offboarded) bearer stayed valid until it
+-- expired. That is the gap enterprise SSO cannot close on its own — the whole offboarding promise
+-- is "we disabled them in the IdP and they lost access", and re-reading the directory on sign-in
+-- only stops a NEW session being minted, never the one they already hold.
+--
+-- A GENERATION rather than a token blocklist. The token carries the generation it was minted
+-- under; verification compares that claim against this column and refuses a mismatch. Revoking
+-- every session is therefore `session_generation + 1`, one write, with nothing to enumerate and no
+-- second table to grow and prune. A blocklist would need a row per outstanding token, a retention
+-- sweep of its own, and would still be unable to answer for a token it never saw minted.
+--
+-- DEFAULT 0 so every existing row is valid without a backfill. Note that existing TOKENS are not:
+-- they carry no generation claim at all and are refused after this ships, which logs everyone out
+-- once. That is the deliberate pre-1.0 internal break (CLAUDE.md → "Internals: backwards
+-- compatibility is NOT a goal") rather than a dual-read that would leave a permanent
+-- claim-less-means-valid hole — precisely the hole an attacker would aim at.
+--
+-- Mirrors the Drizzle `users.session_generation` column on the Node facade.
+ALTER TABLE users ADD COLUMN session_generation INTEGER NOT NULL DEFAULT 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/worker",
-  "version": "0.167.0",
+  "version": "0.168.0",
   "description": "Reusable Cloudflare Worker library (Hono + D1) exposing the Agent Architecture Board core: the `createApp()` Hono factory, the default fetch/scheduled/queue handler, and the Durable Object + Workflow classes. Deployments (see deploy/backend) supply the wrangler.toml + config and re-export these.",
   "repository": {
     "type": "git",
@@ -43,22 +43,22 @@
     "pino": "^10.3.1",
     "valibot": "^1.4.2",
     "workers-ai-provider": "^4.0.0",
-    "@cat-factory/agents": "0.116.4",
-    "@cat-factory/caching": "0.16.6",
-    "@cat-factory/consensus": "0.14.41",
-    "@cat-factory/contracts": "0.259.0",
-    "@cat-factory/eks": "0.1.253",
-    "@cat-factory/gates": "0.9.21",
-    "@cat-factory/gitlab": "0.16.12",
-    "@cat-factory/kernel": "0.257.0",
-    "@cat-factory/observability-langfuse": "0.10.25",
-    "@cat-factory/observability-otel": "0.16.5",
-    "@cat-factory/orchestration": "0.226.0",
-    "@cat-factory/integrations": "0.138.3",
-    "@cat-factory/prompt-fragments": "1.0.5",
-    "@cat-factory/provider-cloudflare": "0.7.403",
-    "@cat-factory/spend": "0.15.23",
-    "@cat-factory/server": "0.237.1"
+    "@cat-factory/agents": "0.116.6",
+    "@cat-factory/caching": "0.17.0",
+    "@cat-factory/consensus": "0.14.43",
+    "@cat-factory/contracts": "0.261.0",
+    "@cat-factory/eks": "0.1.255",
+    "@cat-factory/gates": "0.9.23",
+    "@cat-factory/gitlab": "0.16.14",
+    "@cat-factory/integrations": "0.140.0",
+    "@cat-factory/kernel": "0.259.0",
+    "@cat-factory/observability-langfuse": "0.10.27",
+    "@cat-factory/observability-otel": "0.16.7",
+    "@cat-factory/orchestration": "0.228.0",
+    "@cat-factory/prompt-fragments": "1.0.7",
+    "@cat-factory/provider-cloudflare": "0.7.405",
+    "@cat-factory/server": "0.239.0",
+    "@cat-factory/spend": "0.15.25"
   },
   "devDependencies": {
     "@cloudflare/vitest-pool-workers": "^0.20.1",
@@ -66,7 +66,7 @@
     "typescript": "7.0.2",
     "vitest": "^4.1.10",
     "wrangler": "^4.118.0",
-    "@cat-factory/conformance": "0.31.17"
+    "@cat-factory/conformance": "0.31.19"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json",