@cotal-ai/auth 0.18.0 → 0.19.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/dist/drain-repair.d.ts +1 -1
  2. package/dist/drain-repair.js +1 -1
  3. package/package.json +3 -3
package/dist/drain-repair.d.ts CHANGED
@@ -17,7 +17,7 @@ import type { ApplyCommit, CancelEffectsRoute, ReconcilePoolRoute } from "./admi
17
17
  * post-frontier applier write would be an OBSERVABLE overwrite/DEL — unlike the reconciler/canceller
18
18
  * epw/epf appends, which land past the interval and are excluded by the interval reader.
19
19
  *
20
- * NAMED RESIDUAL (SPEC 13.9, cs-rev-sec-ruled ACCEPTED, seed-dominated): the fence is a POINT-IN-TIME
20
+ * NAMED RESIDUAL (SPEC 13.9, ruled ACCEPTED in security review, seed-dominated): the fence is a POINT-IN-TIME
21
21
  * scan, not a deny-new, so a holder of a still-unexpired repair JWT+seed could open a FRESH connection
22
22
  * AFTER the verify — the reconnect vector the `noReconnect` mint removes for the plane's OWN
23
23
  * connections, but not for an exfiltrated bearer. It is confined by the exact ONE-coordinate grant
package/dist/drain-repair.js CHANGED
@@ -67,7 +67,7 @@ function opActor(prefix, opId) {
67
67
  * post-frontier applier write would be an OBSERVABLE overwrite/DEL — unlike the reconciler/canceller
68
68
  * epw/epf appends, which land past the interval and are excluded by the interval reader.
69
69
  *
70
- * NAMED RESIDUAL (SPEC 13.9, cs-rev-sec-ruled ACCEPTED, seed-dominated): the fence is a POINT-IN-TIME
70
+ * NAMED RESIDUAL (SPEC 13.9, ruled ACCEPTED in security review, seed-dominated): the fence is a POINT-IN-TIME
71
71
  * scan, not a deny-new, so a holder of a still-unexpired repair JWT+seed could open a FRESH connection
72
72
  * AFTER the verify — the reconnect vector the `noReconnect` mint removes for the plane's OWN
73
73
  * connections, but not for an exfiltrated bearer. It is confined by the exact ONE-coordinate grant
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@cotal-ai/auth",
3
3
  "description": "Cotal per-user auth bridge: opaque owner-token derivation and strict user-token validation for the NATS auth-callout cutover (Plane 1 ↔ Plane 2).",
4
- "version": "0.18.0",
4
+ "version": "0.19.0",
5
5
  "license": "Apache-2.0",
6
6
  "repository": {
7
7
  "type": "git",
@@ -24,8 +24,8 @@
24
24
  "jose": "^6.2.3",
25
25
  "@nats-io/jetstream": "^3.4.0",
26
26
  "@nats-io/kv": "^3.4.0",
27
- "@cotal-ai/core": "0.18.0",
28
- "@cotal-ai/workspace": "0.18.0"
27
+ "@cotal-ai/core": "0.19.0",
28
+ "@cotal-ai/workspace": "0.19.0"
29
29
  },
30
30
  "devDependencies": {
31
31
  "better-auth": "^1.6.23"