@jskit-ai/auth-web 0.1.164 → 0.1.166

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/auth-web",
-  "version": "0.1.164",
+  "version": "0.1.166",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -22,10 +22,10 @@
     "./test/playwright": "./src/test/playwright.js"
   },
   "dependencies": {
-    "@jskit-ai/auth-core": "0.1.162",
-    "@jskit-ai/http-runtime": "0.1.162",
-    "@jskit-ai/kernel": "0.1.164",
-    "@jskit-ai/shell-web": "0.1.168",
+    "@jskit-ai/auth-core": "0.1.164",
+    "@jskit-ai/http-runtime": "0.1.164",
+    "@jskit-ai/kernel": "0.1.166",
+    "@jskit-ai/shell-web": "0.1.170",
     "@mdi/js": "^7.4.47"
   },
   "peerDependencies": {

package/patterns/auth-surface/PATTERN.md

@@ -31,8 +31,8 @@ and Playwright auth helper exported by `@jskit-ai/auth-web`. Use auth policies
 from `@jskit-ai/auth-core` for server authorization.
 
 For a managed preview, copy the app-owned `tools/preview-identity` executable
-and declare it in the project's Genesis Launch target with protocol
-`genesis.preview-identity.command.v1`. Declare `AUTH_DEV_BYPASS_ENABLED` as its
+and declare it in the project's Vibe64 Launch target with protocol
+`vibe64.preview-identity.command.v1`. Declare `AUTH_DEV_BYPASS_ENABLED` as its
 Enabled environment and `AUTH_DEV_BYPASS_SECRET` as its Secret environment so
 the preview host supplies fresh launch-scoped values; users do not set those
 values by hand. The executable calls the exported managed-preview identity

package/src/server/managedPreviewIdentity.js

@@ -1,7 +1,7 @@
 import { DEV_AUTH_SECRET_HEADER } from "@jskit-ai/auth-core/server/devAuth";
 import { AUTH_PATHS } from "@jskit-ai/auth-core/shared/authPaths";
 
-const MANAGED_PREVIEW_IDENTITY_PROTOCOL = "genesis.preview-identity.command.v1";
+const MANAGED_PREVIEW_IDENTITY_PROTOCOL = "vibe64.preview-identity.command.v1";
 const MANAGED_PREVIEW_IDENTITY_ENABLED_ENV = "AUTH_DEV_BYPASS_ENABLED";
 const MANAGED_PREVIEW_IDENTITY_SECRET_ENV = "AUTH_DEV_BYPASS_SECRET";
 const MAX_MESSAGE_BYTES = 64 * 1024;

package/test/managedPreviewIdentity.test.js

@@ -18,6 +18,24 @@ function jsonResponse(payload, { cookie = "", status = 200 } = {}) {
   });
 }
 
+test("managed preview identity uses only the Vibe64-owned command protocol", async () => {
+  assert.equal(MANAGED_PREVIEW_IDENTITY_PROTOCOL, "vibe64.preview-identity.command.v1");
+
+  const result = await executeManagedPreviewIdentityRequest({
+    operation: "logout",
+    protocol: "genesis.preview-identity.command.v1",
+    requestId: "retired-protocol",
+    target: { origin: "http://localhost:3000" }
+  }, {
+    env: {},
+    fetchImpl: async () => assert.fail("fetch must not run")
+  });
+
+  assert.equal(result.ok, false);
+  assert.equal(result.protocol, MANAGED_PREVIEW_IDENTITY_PROTOCOL);
+  assert.equal(result.code, "jskit_managed_preview_identity_protocol_invalid");
+});
+
 test("managed preview identity signs out before selecting an existing application user", async () => {
   const calls = [];
   const responses = [