v0.2.1 — prod-readiness guardrails

huhn511 released this 05 Jun 19:57

· 19 commits to main since this release

7e12738

Fixes the two production-readiness gaps from v0.2.0 — both now fail legibly instead of cryptically.

Fixes

codespaces against a non-local bridge (MC-16) — a non-loopback BRIDGE_URL now prints a one-line stderr warning that dev-auth (X-Mind-Dev-WebId) isn't honoured in production, instead of a bare 401/403. Stderr-only, so --json stdout stays clean.
id create against a gated issuer (MC-17) — a non-local issuer failure now points at mind id import / local-CSS-first, instead of a raw error.

Shared isLocalIssuer / isLocalBridge predicate + unit tests (15/15 pass).

Known open

MC-15 — codespaces still needs real Solid-OIDC to authenticate against a production bridge; tracked as needs-design. Pod I/O, issues, and identity work fully against prod.

🤖 Generated with Claude Code

Assets 2