@north-light/identity 0.3.430 → 0.3.431

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +1 -1
  2. package/package.json +2 -2
package/README.md CHANGED
@@ -6,7 +6,7 @@
6
6
  <a href="https://www.npmjs.com/package/@north-light/identity"><img alt="npm" src="https://img.shields.io/npm/v/@north-light/identity?label=npm"></a>
7
7
  </p>
8
8
 
9
- `@north-light/identity` is the token contract shared by crouter's runtime, [`@north-light/sdk`](https://www.npmjs.com/package/@north-light/sdk) and [`@north-light/plugin`](https://www.npmjs.com/package/@north-light/plugin). It does two things: it verifies the signed JWTs that a crouter cloud directory issues (access tokens, ID tokens, outbound provider tokens and grant-sync notices) against the directory's published keys, and it parses and compares scope strings such as `crtr:llm` or `crtr:memory:read:user:work/`. It is ESM-only, depends only on [`jose`](https://github.com/panva/jose), and has no side effects on import.
9
+ `@north-light/identity` is the token contract shared by crouter's runtime, [`@north-light/sdk`](https://www.npmjs.com/package/@north-light/sdk) and [`@north-light/plugin`](https://www.npmjs.com/package/@north-light/plugin). It does two things: it verifies the signed JWTs that a Northlight directory issues (access tokens, ID tokens, outbound provider tokens and grant-sync notices) against the directory's published keys, and it parses and compares scope strings such as `crtr:llm` or `crtr:memory:read:user:work/`. It is ESM-only, depends only on [`jose`](https://github.com/panva/jose), and has no side effects on import.
10
10
 
11
11
  It is a verifier, not an identity provider. It never issues, signs or stores tokens, and it does not run a login flow; the directory does that. Most applications do not import it directly: the SDK's OAuth helpers and the plugin kit's `auth` option call it for you. Use it when you write your own provider or service that receives these tokens.
12
12
 
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@north-light/identity",
3
- "version": "0.3.430",
4
- "description": "crouter cloud access-token verification and scope rules",
3
+ "version": "0.3.431",
4
+ "description": "Northlight access-token verification and scope rules",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",
7
7
  "types": "./dist/index.d.ts",