@powerhousedao/switchboard 6.2.2-dev.80 → 6.2.2-dev.82
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.gitignore +41 -0
- package/.npmignore +2 -0
- package/.tsbuild/tsconfig.tsbuildinfo +1 -1
- package/Auth.md +22 -0
- package/CHANGELOG.md +24 -0
- package/package.json +13 -13
package/Auth.md
CHANGED
|
@@ -199,6 +199,28 @@ still admitted, with no user. Verification is otherwise identical to
|
|
|
199
199
|
`AUTH_ENABLED=true`, Renown credential check included, so an invalid token is
|
|
200
200
|
still a 401.
|
|
201
201
|
|
|
202
|
+
That last property is the hole `REQUIRE_AUTHENTICATED_CALLER` closes: it
|
|
203
|
+
turns the same resolved identity into enforcement.
|
|
204
|
+
|
|
205
|
+
```bash
|
|
206
|
+
# Admit authenticated callers, reject anonymous ones with a 401
|
|
207
|
+
export REQUIRE_AUTHENTICATED_CALLER=true
|
|
208
|
+
```
|
|
209
|
+
|
|
210
|
+
It defaults to off, so nothing changes for existing deployments. When on,
|
|
211
|
+
every GraphQL request without a resolved caller — subgraphs, the supergraph,
|
|
212
|
+
and the SSE subscription endpoint alike — is answered with a `401`
|
|
213
|
+
(`{"error": "Authentication required"}`) before any resolver runs. It is the
|
|
214
|
+
one switch that expresses "authenticated callers allowed, anonymous not":
|
|
215
|
+
under `OPEN` the policy itself answers `true` to everything, and
|
|
216
|
+
`ADMIN_ONLY` locks out every non-admin, so neither can do this on its own.
|
|
217
|
+
CORS preflights (`OPTIONS`) are still admitted, as they never carry a token.
|
|
218
|
+
|
|
219
|
+
It requires a caller to be resolvable at all, so it refuses to boot without
|
|
220
|
+
`RESOLVE_CALLER_IDENTITY=true` or `AUTH_ENABLED=true` — with identity
|
|
221
|
+
resolution off, no bearer is ever read and it would reject every caller,
|
|
222
|
+
including authenticated ones.
|
|
223
|
+
|
|
202
224
|
#### Configuration File Method
|
|
203
225
|
|
|
204
226
|
```json
|
package/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,27 @@
|
|
|
1
|
+
## 6.2.2-dev.82 (2026-09-08)
|
|
2
|
+
|
|
3
|
+
### 🩹 Fixes
|
|
4
|
+
|
|
5
|
+
- **release:** emit the pnpm 11+ scoped-registry publish flag ([1ddf2464b](https://github.com/powerhouse-inc/powerhouse/commit/1ddf2464b))
|
|
6
|
+
- **ci:** route the @jsr scope from the workspace root .npmrc ([#2968](https://github.com/powerhouse-inc/powerhouse/pull/2968))
|
|
7
|
+
- **ci:** resolve @jsr scope to npm.jsr.io in pnpm-workspace ([d5dd3a39e](https://github.com/powerhouse-inc/powerhouse/commit/d5dd3a39e))
|
|
8
|
+
|
|
9
|
+
### ❤️ Thank You
|
|
10
|
+
|
|
11
|
+
- acaldas
|
|
12
|
+
- Frank @froid1911
|
|
13
|
+
|
|
14
|
+
## 6.2.2-dev.81 (2026-09-05)
|
|
15
|
+
|
|
16
|
+
### 🚀 Features
|
|
17
|
+
|
|
18
|
+
- **reactor:** a FIXED task must cite a benchmark measured at the fix commit ([c091953ad](https://github.com/powerhouse-inc/powerhouse/commit/c091953ad))
|
|
19
|
+
|
|
20
|
+
### ❤️ Thank You
|
|
21
|
+
|
|
22
|
+
- Benjamin Jordan
|
|
23
|
+
- Claude Opus 5
|
|
24
|
+
|
|
1
25
|
## 6.2.2-dev.80 (2026-09-04)
|
|
2
26
|
|
|
3
27
|
This was a version bump only for @powerhousedao/switchboard to align it with other projects, there were no code changes.
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@powerhousedao/switchboard",
|
|
3
3
|
"type": "module",
|
|
4
|
-
"version": "6.2.2-dev.
|
|
4
|
+
"version": "6.2.2-dev.82",
|
|
5
5
|
"main": "dist/index.mjs",
|
|
6
6
|
"exports": {
|
|
7
7
|
".": {
|
|
@@ -41,7 +41,7 @@
|
|
|
41
41
|
"@openfeature/core": "1.9.1",
|
|
42
42
|
"@openfeature/env-var-provider": "0.3.1",
|
|
43
43
|
"@openfeature/server-sdk": "1.19.0",
|
|
44
|
-
"@powerhousedao/config": "6.2.2-dev.
|
|
44
|
+
"@powerhousedao/config": "6.2.2-dev.82",
|
|
45
45
|
"@opentelemetry/api": "^1.9.0",
|
|
46
46
|
"@opentelemetry/exporter-metrics-otlp-http": "^0.218.0",
|
|
47
47
|
"@opentelemetry/exporter-trace-otlp-http": "^0.218.0",
|
|
@@ -55,20 +55,20 @@
|
|
|
55
55
|
"@opentelemetry/sdk-node": "^0.218.0",
|
|
56
56
|
"@opentelemetry/sdk-trace-base": "^2.7.1",
|
|
57
57
|
"@opentelemetry/semantic-conventions": "^1.41.1",
|
|
58
|
-
"@powerhousedao/opentelemetry-instrumentation-reactor": "6.2.2-dev.
|
|
59
|
-
"@powerhousedao/reactor": "6.2.2-dev.
|
|
60
|
-
"@powerhousedao/shared": "6.2.2-dev.
|
|
61
|
-
"@powerhousedao/vetra": "6.2.2-dev.
|
|
62
|
-
"@powerhousedao/reactor-api": "6.2.2-dev.
|
|
63
|
-
"@powerhousedao/reactor-attachments": "6.2.2-dev.
|
|
64
|
-
"@powerhousedao/reactor-drive": "6.2.2-dev.
|
|
65
|
-
"@powerhousedao/reactor-group": "6.2.2-dev.
|
|
66
|
-
"@powerhousedao/pglite-fs": "6.2.2-dev.
|
|
58
|
+
"@powerhousedao/opentelemetry-instrumentation-reactor": "6.2.2-dev.82",
|
|
59
|
+
"@powerhousedao/reactor": "6.2.2-dev.82",
|
|
60
|
+
"@powerhousedao/shared": "6.2.2-dev.82",
|
|
61
|
+
"@powerhousedao/vetra": "6.2.2-dev.82",
|
|
62
|
+
"@powerhousedao/reactor-api": "6.2.2-dev.82",
|
|
63
|
+
"@powerhousedao/reactor-attachments": "6.2.2-dev.82",
|
|
64
|
+
"@powerhousedao/reactor-drive": "6.2.2-dev.82",
|
|
65
|
+
"@powerhousedao/reactor-group": "6.2.2-dev.82",
|
|
66
|
+
"@powerhousedao/pglite-fs": "6.2.2-dev.82",
|
|
67
67
|
"@pyroscope/nodejs": "^0.4.5",
|
|
68
|
-
"@renown/sdk": "6.2.2-dev.
|
|
68
|
+
"@renown/sdk": "6.2.2-dev.82",
|
|
69
69
|
"@sentry/node": "^10.53.1",
|
|
70
70
|
"@sentry/opentelemetry": "^10.53.1",
|
|
71
|
-
"document-model": "6.2.2-dev.
|
|
71
|
+
"document-model": "6.2.2-dev.82",
|
|
72
72
|
"dotenv": "^16.4.7",
|
|
73
73
|
"express": "^4.21.2",
|
|
74
74
|
"kysely": "0.28.16",
|