@jskit-ai/auth-web 0.1.161 → 0.1.162

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/auth-web",
-  "version": "0.1.161",
+  "version": "0.1.162",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -22,10 +22,10 @@
     "./test/playwright": "./src/test/playwright.js"
   },
   "dependencies": {
-    "@jskit-ai/auth-core": "0.1.159",
-    "@jskit-ai/http-runtime": "0.1.159",
-    "@jskit-ai/kernel": "0.1.161",
-    "@jskit-ai/shell-web": "0.1.165",
+    "@jskit-ai/auth-core": "0.1.160",
+    "@jskit-ai/http-runtime": "0.1.160",
+    "@jskit-ai/kernel": "0.1.162",
+    "@jskit-ai/shell-web": "0.1.166",
     "@mdi/js": "^7.4.47"
   },
   "peerDependencies": {

package/patterns/auth-surface/PATTERN.md

@@ -30,10 +30,13 @@ Use the views, auth guard, HTTP client integration, sign-out runtime, providers,
 and Playwright auth helper exported by `@jskit-ai/auth-web`. Use auth policies
 from `@jskit-ai/auth-core` for server authorization.
 
-For a Vibe64-managed preview, copy the app-owned
-`.vibe64/bin/preview-identity` executable and declare it in the project's
-Genesis Launch target. The executable calls the exported managed-preview
-identity library directly; it does not require a JSKIT CLI.
+For a managed preview, copy the app-owned `tools/preview-identity` executable
+and declare it in the project's Genesis Launch target with protocol
+`genesis.preview-identity.command.v1`. Declare `AUTH_DEV_BYPASS_ENABLED` as its
+Enabled environment and `AUTH_DEV_BYPASS_SECRET` as its Secret environment so
+the preview host supplies fresh launch-scoped values; users do not set those
+values by hand. The executable calls the exported managed-preview identity
+library directly; it does not require a JSKIT CLI.
 
 Choose local-auth storage through the installed capability provider. A
 database-backed application installs `@jskit-ai/auth-provider-local-db-core`,

package/src/server/managedPreviewIdentity.js

@@ -1,9 +1,9 @@
 import { DEV_AUTH_SECRET_HEADER } from "@jskit-ai/auth-core/server/devAuth";
 import { AUTH_PATHS } from "@jskit-ai/auth-core/shared/authPaths";
 
-const MANAGED_PREVIEW_IDENTITY_PROTOCOL = "vibe64.preview-identity.command.v1";
-const MANAGED_PREVIEW_IDENTITY_ENABLED_ENV = "VIBE64_PREVIEW_IDENTITY_ENABLED";
-const MANAGED_PREVIEW_IDENTITY_SECRET_ENV = "VIBE64_PREVIEW_IDENTITY_SECRET";
+const MANAGED_PREVIEW_IDENTITY_PROTOCOL = "genesis.preview-identity.command.v1";
+const MANAGED_PREVIEW_IDENTITY_ENABLED_ENV = "AUTH_DEV_BYPASS_ENABLED";
+const MANAGED_PREVIEW_IDENTITY_SECRET_ENV = "AUTH_DEV_BYPASS_SECRET";
 const MAX_MESSAGE_BYTES = 64 * 1024;
 
 function commandError(message, code = "jskit_managed_preview_identity_failed", details = {}) {

package/test/managedPreviewIdentity.test.js

@@ -41,8 +41,8 @@ test("managed preview identity signs out before selecting an existing applicatio
     target: { origin: "http://vibe64-launch-deadbeefcafe" }
   }, {
     env: {
-      VIBE64_PREVIEW_IDENTITY_ENABLED: "true",
-      VIBE64_PREVIEW_IDENTITY_SECRET: SECRET
+      AUTH_DEV_BYPASS_ENABLED: "true",
+      AUTH_DEV_BYPASS_SECRET: SECRET
     },
     fetchImpl: async (href, options) => {
       calls.push({ href, options });
@@ -79,8 +79,8 @@ test("managed preview identity rejects a disabled or non-local exchange", async
     target: { origin: "https://example.com" }
   }, {
     env: {
-      VIBE64_PREVIEW_IDENTITY_ENABLED: "true",
-      VIBE64_PREVIEW_IDENTITY_SECRET: SECRET
+      AUTH_DEV_BYPASS_ENABLED: "true",
+      AUTH_DEV_BYPASS_SECRET: SECRET
     },
     fetchImpl: async () => assert.fail("fetch must not run")
   });