@north-light/sdk 0.3.519 → 0.3.521

package/dist/init-command.js

@@ -57,6 +57,7 @@ const packageJson = () => `${JSON.stringify({
     allowScripts: { esbuild: false },
 }, null, 2)}\n`;
 const ENV_TEXT = `CROUTER_ISSUER=${DEFAULT_ISSUER}\nAPP_ORIGIN=${DEFAULT_ORIGIN}\nCROUTER_CLIENT_ID=\nCROUTER_KEY_FILE=${KEY_FILE}\n`;
+const PROVIDER_REGISTRY = `@northlight-providers:registry=${DEFAULT_ISSUER}/npm/`;
 const exists = (path) => stat(path).then(() => true, () => false);
 /** Writes `text` to a file that must not exist yet. */
 async function createFile(path, text, mode = 0o644) {
@@ -88,6 +89,23 @@ async function ensureLocalIgnored(root) {
     await appendFile(path, `${current === '' || current.endsWith('\n') ? '' : '\n'}local/\n`);
     return 'added';
 }
+/** Creates the project registry config or adds its scope line without changing existing settings. */
+async function ensureProviderRegistry(root) {
+    const path = join(root, '.npmrc');
+    const current = await readFile(path, 'utf8').catch((error) => {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    });
+    if (current === undefined) {
+        await createFile(path, `${PROVIDER_REGISTRY}\n`);
+        return 'created';
+    }
+    if (current.split(/\r?\n/).some((line) => /^\s*@northlight-providers:registry\s*=/.test(line)))
+        return 'present';
+    await appendFile(path, `${current === '' || current.endsWith('\n') ? '' : '\n'}${PROVIDER_REGISTRY}\n`);
+    return 'added';
+}
 /** Runs `npm i --save-exact @north-light/sdk@<this version>` in `cwd` (no shell). */
 function installSdk(cwd) {
     const result = spawnSync('npm', ['i', '--save-exact', `@north-light/sdk@${SDK_VERSION}`], { cwd, stdio: ['ignore', 2, 2] });
@@ -185,6 +203,7 @@ export async function runInit(argv, options = {}) {
     }
     // Before the key exists, so a key is never on disk in a directory git would pick up. A new app's scaffold already wrote it.
     const ignored = existingProject ? await ensureLocalIgnored(root) : 'present';
+    const registry = await ensureProviderRegistry(root);
     let publicJwk;
     if (!(await exists(keyPath)))
         publicJwk = JSON.stringify((await createKeyFile(keyPath)).publicJwk);
@@ -197,6 +216,7 @@ export async function runInit(argv, options = {}) {
         existingProject ? `Added @north-light/sdk@${SDK_VERSION}, a signing key and the \`northlight\` skill to ${shown(root)}.` : `Created a Northlight app in ${shown(root)}:`,
         ...(existingProject ? [] : ['  package.json  server.ts  .gitignore  local/app.env', '']),
         ...(ignored === 'present' ? [] : [`${ignored === 'created' ? 'Created' : 'Updated'} ${shown(join(root, '.gitignore'))} so git ignores local/.`]),
+        `${registry === 'created' ? 'Created' : registry === 'added' ? 'Updated' : 'Kept'} ${shown(join(root, '.npmrc'))}${registry === 'present' ? ' with its existing @northlight-providers registry setting.' : ` with ${PROVIDER_REGISTRY}.`}`,
         `Private key: ${shown(keyPath)} (mode 0600, ignored by git). Never paste or commit it.`,
         'Skill:',
         ...skillPaths.map((path) => `  ${globalSkill ? path : shown(path)}`),

package/dist/skill/northlight/SKILL.md

@@ -2,7 +2,7 @@
 name: northlight
 description: "Use when building, debugging or shipping an app that signs people in with Northlight, starts runs on their Northlight runtime, or calls Northlight providers (sms, search, integrations, context, device) with @north-light/sdk."
 metadata:
-  sdk-version: "0.3.519"
+  sdk-version: "0.3.521"
 ---
 
 # Building a Northlight app
@@ -11,7 +11,7 @@ An app on Northlight signs people in with their Northlight account, then starts
 
 ## First: check this skill matches the SDK
 
-This skill is for SDK version `0.3.519`. If the project has `node_modules/@north-light/sdk/package.json`, compare its `version` with that number. If they differ, run `npx @north-light/sdk skill` in the project, then read the rewritten `.agents/skills/northlight/SKILL.md` (or `.claude/skills/northlight/SKILL.md`) instead of this copy. That command needs no account and no crtr. A project that has no SDK yet starts with `npx @north-light/sdk@latest init <dir>`.
+This skill is for SDK version `0.3.521`. If the project has `node_modules/@north-light/sdk/package.json`, compare its `version` with that number. If they differ, run `npx @north-light/sdk skill` in the project, then read the rewritten `.agents/skills/northlight/SKILL.md` (or `.claude/skills/northlight/SKILL.md`) instead of this copy. That command needs no account and no crtr. A project that has no SDK yet starts with `npx @north-light/sdk@latest init <dir>`.
 
 ## Where things run
 

package/dist/version.d.ts

@@ -1,5 +1,5 @@
 /** This SDK's release version. Informational only: compatibility is the contract level, not this number. */
-export declare const SDK_VERSION = "0.3.519";
+export declare const SDK_VERSION = "0.3.521";
 /** The release sent in `Crouter-Minimum-Runtime-Version` on every request. It is frozen, so a runtime from before the
  *  contract level existed (which only knows this header) refuses this SDK, while every later runtime accepts it. */
 export declare const LEGACY_FLOOR = "0.3.423";

package/dist/version.js

@@ -1,6 +1,6 @@
 // SDK_VERSION is written by scripts/release-version.mjs on every release; do not edit by hand.
 /** This SDK's release version. Informational only: compatibility is the contract level, not this number. */
-export const SDK_VERSION = '0.3.519';
+export const SDK_VERSION = '0.3.521';
 // LEGACY_FLOOR is written once by `scripts/contract.mjs release`, at the first release that carries the contract level
 // (the `0.0.0` placeholder is replaced there and never again); do not edit by hand.
 /** The release sent in `Crouter-Minimum-Runtime-Version` on every request. It is frozen, so a runtime from before the

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@north-light/sdk",
-  "version": "0.3.519",
-  "crouterContract": "1.24",
+  "version": "0.3.521",
+  "crouterContract": "1.25",
   "description": "Typed Node and browser client for running crouter agents through the crtrd /v1 API.",
   "type": "module",
   "main": "./dist/index.js",
@@ -44,8 +44,8 @@
     "prepublishOnly": "node -e \"if (process.env.npm_config_tag !== 'next') { console.error('@north-light/sdk publishes only with --tag next; scripts/promote-sdk.mjs is the only mover of latest.'); process.exit(1); }\""
   },
   "dependencies": {
-    "@north-light/api": "0.3.519",
-    "@north-light/identity": "0.3.519",
+    "@north-light/api": "0.3.521",
+    "@north-light/identity": "0.3.521",
     "jose": "^6.2.1"
   },
   "peerDependencies": {