@owlmeans/server-iam 0.1.18-rc.23 → 0.1.18-rc.25

package/README.md

@@ -20,15 +20,19 @@ bun add @owlmeans/server-iam@^0.1.18-rc.20
 ```typescript
 import { appendIam, makeIamGate } from '@owlmeans/server-iam'
 import { IAM_GATE } from '@owlmeans/server-iam'
-import { entrypoint, guard, route } from '@owlmeans/server-app'
-import { gate } from '@owlmeans/entrypoint'
+import { contract, protocol, typed } from '@owlmeans/entrypoint'
+import { route } from '@owlmeans/route'
 import { DEFAULT_GUARD } from '@owlmeans/auth-common'
 
 // Wire IAM into a server context
 appendIam(context)
 
-// Gate an entrypoint with a permission check
-entrypoint(route('users', '/users'), guard(DEFAULT_GUARD, gate(IAM_GATE, ['manage-users@{entity}'])))
+// Gate a protocol with a permission check
+protocol(
+  route('users', '/users'),
+  contract(typed<User[]>()),
+  { guards: DEFAULT_GUARD, gate: { alias: IAM_GATE, params: ['manage-users@{entity}'] } },
+)
 ```
 
 Requires `@owlmeans/oidc` OIDC shared config and a running IAM provider configured via `@owlmeans/server-oidc-rp`.
@@ -41,7 +45,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.14
+npx @owlmeans/agent-skills@^0.1.18-rc.16
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/server-iam",
-  "version": "0.1.18-rc.23",
-  "generatedAt": "2026-09-10T23:12:07.506Z",
+  "version": "0.1.18-rc.25",
+  "generatedAt": "2026-09-12T12:32:46.369Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/server-iam/SKILL.md

@@ -8,7 +8,7 @@ metadata:
 
 # Using `@owlmeans/server-iam`
 
-**Install:** `"@owlmeans/server-iam": "^0.1.18-rc.23"` in `dependencies`
+**Install:** `"@owlmeans/server-iam": "^0.1.18-rc.25"` in `dependencies`
 
 Boilerplate-less server-side consumer of the OwlMeans IAM. One call wires the OIDC RP stack and the
 IAM gate; the consumer never knows which IAM backend (Keycloak or integrated) is active.
@@ -85,7 +85,7 @@ simply skipped rather than the whole audit being lost.
 
 ```ts
 // module declaration
-gate(OIDC_GATE, ['department--modify@depId'])
+{ gate: { alias: OIDC_GATE, params: ['department--modify@depId'] } }
 
 // or imperative
 await ctx.service<GateService>(OIDC_GATE).assert(req, res, ['article--modify'])

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/server-iam",
-  "version": "0.1.18-rc.23",
+  "version": "0.1.18-rc.25",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -22,13 +22,13 @@
     }
   },
   "dependencies": {
-    "@owlmeans/auth": "^0.1.18-rc.11",
-    "@owlmeans/context": "^0.1.18-rc.10",
-    "@owlmeans/entrypoint": "^0.1.18-rc.13",
-    "@owlmeans/iam": "^0.1.18-rc.18",
-    "@owlmeans/oidc": "^0.1.18-rc.15",
-    "@owlmeans/server-context": "^0.1.18-rc.14",
-    "@owlmeans/server-oidc-rp": "^0.1.18-rc.20"
+    "@owlmeans/auth": "^0.1.18-rc.13",
+    "@owlmeans/context": "^0.1.18-rc.12",
+    "@owlmeans/entrypoint": "^0.1.18-rc.15",
+    "@owlmeans/iam": "^0.1.18-rc.20",
+    "@owlmeans/oidc": "^0.1.18-rc.25",
+    "@owlmeans/server-context": "^0.1.18-rc.16",
+    "@owlmeans/server-oidc-rp": "^0.1.18-rc.22"
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",