v0.17.1

[0.17.1] - 2026-09-24

Added

• Scaffolding for modular scoped packages @abeta.dev/ui, @abeta.dev/india, and @abeta.dev/talent in preparation for phased migration from monolithic @abeta.dev/react-libs.
• Authored CSF 3 Storybook stories for 8 previously unrepresented components: AmountSummaryCardIndia, LoginForm, SignUpForm, ForgotPasswordForm, OtpForm, OAuthButton, OAuthButtonGroup, and AuthCard.
• Storybook SEO meta tags, OpenGraph card assets, schema.org JSON-LD structured data, robots.txt, and sitemap.xml for documentation discovery.
• Three living enterprise interactive workflow stories demonstrating vendor onboarding, compliance checkpoint verification, and multi-tenant authentication.

Changed

• Marked legacy @abeta.dev/react-libs exports as deprecated with JSDoc annotations directing consumers to scoped packages according to MIGRATION.md.
• Overhauled Storybook taxonomy into a unified 6-tier hierarchy and added interactive sandbox workbench.
• Parallelized CI validation pipeline into 3 concurrent jobs: static analysis with Storybook, test suites with performance gates, and build verification.
• Consolidated Vitest single-pass test execution with dual reporting, eliminating redundant test suite runs in CI.

Fixed

• Fixed Storybook GitHub Pages deployment silent-skip issue caused by stale cache checks.
• Fixed Tailwind v4 custom dark theme CSS variables and radius scale computation in Storybook preview.

v0.17.0

[0.17.0] - 2026-09-20

Added

• Added verifiable credential display component ProofOfWorkCertificate in @abeta.dev/react-libs (src/components/ui/data-display/proof-of-work-certificate.tsx) with cryptographic certificate IDs, issuer customization, skills tags, PDF printing, and Web Share API fallback.
• Added interactive verification runner component CheckpointRunner in @abeta.dev/react-libs (src/components/ui/feedback/checkpoint-runner.tsx) with command snippet execution, verification evidence tracking, progress calculation, and expandable hints.
• Added social engagement component ReactionBar in @abeta.dev/react-libs (src/components/ui/feedback/reaction-bar.tsx) with multi-clap applause limits, controlled bookmark toggling, clipboard share fallback, and reading progress tracking.
• Added interactive skill assessment modal DiagnosticQuiz in @abeta.dev/react-libs (src/components/ui/overlays/diagnostic-quiz.tsx) with multi-step question flow, radio accessibility, empty question guards, and automated track recommendation.
• Exported canonical local-first state hook useLocalFirstStore in @abeta.dev/react-libs (src/hooks/use-local-first-store.ts) with versioned schema migrations, cross-tab broadcast synchronization, and sanitized JSON export/import.
• Added comprehensive unit test suites (28 tests across 5 test suites) and CSF 3 Storybook stories for all promoted components.

Fixed

• Fixed jsx-a11y/label-has-associated-control in CheckpointRunner by explicitly associating label element with evidence input element.
• Fixed SSR hydration mismatch in ProofOfWorkCertificate by ensuring dates are hydrated safely post-mount.
• Fixed prototype injection hazards in DiagnosticQuiz scoring by adopting typed map data structures.
• Adjusted dist/index.js bundle size budget in scripts/check-bundle-size.mjs to accommodate new learning and verification primitives (<= 530 KB raw, <= 105 KB gzip).

v0.16.0

[0.16.0] - 2026-09-19

Added

• Added pure NPCI-compliant UPI utilities in @abeta.dev/react-libs/india: generateUpiPayUri, validateUpiId, and parseUpiPayUri with RFC 3986 parameter encoding, amount formatters, and handle validation.
• Added interactive counter standee component UpiQrCard in @abeta.dev/react-libs/india/react with dynamic QR rendering, 1-click VPA clipboard copy, offline PNG download, and open amount inputs.
• Added dual-publishing GitHub Actions workflow to publish artifacts to GitHub Packages (npm.pkg.github.com) alongside npm.
• Added comprehensive test suites and Storybook stories for UPI primitives and the UpiQrCard component.

Changed

• Externalized third-party QR generation dependencies in packaging bundle configurations.

v0.15.1

[0.15.1] - 2026-09-17

Changed

• Pinned @abeta.dev/auth@0.3.1 with repository metadata normalization and npm registry replication resilience.

v0.15.0 — Headless Cookie-Backed Auth Client, RSC Core Purity & Concurrency Hardening

What's New in v0.15.0

🆕 Headless Cookie-Backed Auth Client (@abeta.dev/auth@0.3.0)

A fully headless, framework-agnostic auth engine shipped under three clean entry points:

Entry Point	Purpose
@abeta.dev/auth/core	Server-safe headless engine — no React, no directives
@abeta.dev/auth/react	React hooks (useAuthClient, AuthClientProvider)
@abeta.dev/auth	Full bundle (components + hooks + core)

AuthClient

• Epoch-guarded session invalidation — cross-tab coordination via invalidateFromAnotherTab() with monotonic epoch comparison; stale epochs silently discarded
• Single-flight refresh mutex — concurrent getAccessToken() calls coalesce onto a single in-flight refreshPromise; no double-refresh thundering herd
• Fail-closed on reauth_required — adapter errors propagate cleanly; no silent token resurrection
• begin() lifecycle hook — caller-owned session start, safe to call from Server Actions or middleware

createAuthenticatedFetch

• Origin enforcement — rejects cross-origin requests at call-site; no accidental credential leakage
• Bearer injection — auto-attaches Authorization: Bearer <token> header
• redirect: 'error' — prevents silent redirect-based auth bypasses
• Guarded single-retry on 401 — one retry attempt per request, fail-closed thereafter

React Integration

• AuthClientProvider — caller-owned lifecycle, StrictMode-safe (no double-init side effects)
• useAuthClient — powered by useSyncExternalStore for tear-free concurrent rendering (React 18/19 compatible)

🛡️ RSC Core Purity

• @abeta.dev/auth/core ships without any 'use client' directive — safe for React Server Components and Node.js middleware
• Separate tsup configs enforce the boundary: tsup.config.ts (client bundle) vs tsup.core.config.ts (RSC-safe core)

📦 Root Package Update

• @abeta.dev/react-libs@0.15.0 pins and re-exports @abeta.dev/auth@0.3.0 contracts
• peerDependenciesMeta: react and react-dom marked optional — headless consumers (Node.js, Deno, Edge) do not need React installed

---

Performance

• P95 render time: 264.2ms (gate: 300ms) ✅
• 1,421 tests passing ✅
• Bundle size within limits ✅
• Zero type errors, zero lint warnings ✅

---

Migration

See MIGRATION.md for upgrade instructions from v0.14.x.

// Before (v0.14.x)
import { ... } from '@abeta.dev/auth';

// After (v0.15.0) — pick the right entry point
import { AuthClient } from '@abeta.dev/auth/core';        // RSC / Node.js
import { useAuthClient } from '@abeta.dev/auth/react';    // React hooks
import { LoginForm } from '@abeta.dev/auth';               // Full bundle