@m6d/cortex-cli 1.5.0 → 1.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@m6d/cortex-cli",
3
- "version": "1.5.0",
3
+ "version": "1.6.0",
4
4
  "description": "Scaffold and operate Cortex servers",
5
5
  "license": "MIT",
6
6
  "type": "module",
@@ -28,7 +28,7 @@
28
28
  },
29
29
  "devDependencies": {
30
30
  "@cortex/contracts": "workspace:*",
31
- "@types/bun": "latest",
31
+ "@types/bun": "1.3.14",
32
32
  "typescript": "~5.9.3"
33
33
  },
34
34
  "publishConfig": {
@@ -130,6 +130,22 @@ export const serviceCardSchema = z.object({
130
130
 
131
131
  export const runtimeAgentConfigSchema = z.object({
132
132
  agentId: agentSlugSchema,
133
+ /**
134
+ * End-user JWT verification for this agent, managed by the agent's owner.
135
+ * Tokens must be asymmetrically signed (the JWKS URI serves the public
136
+ * keys) with a matching `iss` claim. Absent = the server's own auth
137
+ * default applies.
138
+ */
139
+ auth: z
140
+ .object({
141
+ jwksUri: z.url(),
142
+ issuer: z.string().trim().min(1).max(2048),
143
+ // Optional: when set, the token's `aud` must contain it. Guards
144
+ // against a token minted for another audience under the same
145
+ // issuer being replayed here.
146
+ audience: z.string().trim().min(1).max(2048).optional(),
147
+ })
148
+ .optional(),
133
149
  systemPrompt: z.string(),
134
150
  promptVariables: z.array(z.enum(PROMPT_VARIABLES)),
135
151
  defaultLocale: localeSchema,