baukit 0.12.0

baukit v0.12.0

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

• No component-specific changes in this train.

baukit-config

• No component-specific changes in this train.

baukit-core

• No component-specific changes in this train.

baukit-credential-vault

• No component-specific changes in this train.

baukit-data-subject

• No component-specific changes in this train.

baukit-egress

• No component-specific changes in this train.

baukit-erasure

• No component-specific changes in this train.

baukit-events

• No component-specific changes in this train.

baukit-http

• No component-specific changes in this train.

baukit-integrations

• No component-specific changes in this train.

baukit-jobs

• Fix WorkerRunner::run reusing one timestamp for every claim in a poll loop. A job enqueued during the loop could be claimed with updated_at before its created_at, which violates the outbox check. Each claim now takes a fresh time.

baukit-mcp

• No component-specific changes in this train.

baukit-openapi

• No component-specific changes in this train.

baukit-ops

• No component-specific changes in this train.

baukit-push

• No component-specific changes in this train.

baukit-ratelimit

• No component-specific changes in this train.

baukit-runtime

• No component-specific changes in this train.

baukit-suite

• Add the organization.updated and credits.changed platform events from the hub contract. Breaking: PlatformEventKind gains OrganizationUpdated and CreditsChanged, so exhaustive matches need new arms, and handlers now receive these events instead of having them recorded as unknown. The decoder checks the envelope userId against each type's natural key, which is organizationId for organization updates.
• Add HubClient and HubClientConfig for /platform/v1 calls with a cached client-credentials token. The client refreshes a token 30 seconds before expiry, or at half its lifetime when that is shorter, and retries once after a 401.
• Add the Credits port with reserve, settle, release and balance, ZeroCostCredits for standalone mode, HubCredits for the hub, CreditsError for the hub credit error codes and PlatformConfig::credits.
• Add the OrganizationDirectory port and HubOrganizations for GET /platform/v1/organizations/{id}.

baukit-sync

• No component-specific changes in this train.

baukit-telemetry

• No component-specific changes in this train.

baukit-test

• No component-specific changes in this train.

TypeScript packages

a11y-core

Minor Changes

• Release the coordinated baukit 0.12.0 train.

analytics-core

Minor Changes

• Release the coordinated baukit 0.12.0 train.

analytics-posthog-native

Minor Changes

• Release the coordinated baukit 0.12.0 train.

Patch Changes

• Updated dependencies
  • @baukit/analytics-core@0.12.0

analytics-posthog-web

Minor Changes

• Release the coordinated baukit 0.12.0 train.

Patch Changes

• Updated dependencies
  • @baukit/analytics-core@0.12.0

api-runtime

Minor Changes

• Release the coordinated baukit 0.12.0 train.

auth-native

Minor Changes

• Release the coordinated baukit 0.12.0 train.

auth-node

Minor Changes

• Release the coordinated baukit 0.12.0 train.

auth-web

Minor Changes

• Release the coordinated baukit 0.12.0 train.

data-contracts-dexie

Minor Changes

• Release the coordinated baukit 0.12.0 train.

Patch Changes

• Updated dependencies
  • @baukit/data-contracts@0.12.0

data-contracts-expo-sqlite

Minor Changes

• Release the coordinated baukit 0.12.0 train.

Patch Changes

• Updated dependencies
  • @baukit/data-contracts@0.12.0

data-contracts

Minor Changes

• Release the coordinated baukit 0.12.0 train.

events

Minor Changes

• Release the coordinated baukit 0.12.0 train.

integrations-client

Minor Changes

• Release the coordinated baukit 0.12.0 train.

localization-core

Minor Changes

• Release the coordinated baukit 0.12.0 train.

navigation

Minor Changes

• Release the coordinated baukit 0.12.0 train.

Patch Changes

• Updated dependencies
  • @baukit/a11y-core@0.12.0
  • @baukit/ui-tokens@0.12.0

notifications-core

Minor Changes

• Release the coordinated baukit 0.12.0 train.

Patch Changes

• Updated dependencies
  • @baukit/localization-core@0.12.0

notifications-expo

Minor Changes

• Release the coordinated baukit 0.12.0 train.

Patch Changes

• Updated dependencies
  • @baukit/notifications-core@0.12.0

preferences-core

Minor Changes

• Release the coordinated baukit 0.12.0 train.

pwa-web

Minor Changes

• Release the coordinated baukit 0.12.0 train.

suite-client

Minor Changes

• Release the coordinated baukit 0.12.0 train.

Patch Changes

• 5e4c629: Add platform event type and payload types, including organization.updated and credits.changed, plus credit balance, reservation and organization summary types matching the hub's /platform/v1 responses.
• Updated dependencies
  • @baukit/integrations-client@0.12.0
  • @baukit/localization-core@0.12.0

sync-client

Minor Changes

• Release the coordinated baukit 0.12.0 train.

ui-tokens

Minor Changes

• Release the coordinated baukit 0.12.0 train.

Commits

• chore: prepare baukit v0.12.0 (9628cb42)
• Merge task/bk1: platform credits and organization support (f6c04d51)
• feat(suite): add platform credits and organization support (BK1) (5e4c629e)

baukit 0.11.3

baukit v0.11.3

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

• No component-specific changes in this train.

baukit-config

• No component-specific changes in this train.

baukit-core

• No component-specific changes in this train.

baukit-credential-vault

• No component-specific changes in this train.

baukit-data-subject

• No component-specific changes in this train.

baukit-egress

• No component-specific changes in this train.

baukit-erasure

• No component-specific changes in this train.

baukit-events

• No component-specific changes in this train.

baukit-http

• No component-specific changes in this train.

baukit-integrations

• No component-specific changes in this train.

baukit-jobs

• No component-specific changes in this train.

baukit-mcp

• No component-specific changes in this train.

baukit-openapi

• No component-specific changes in this train.

baukit-ops

• No component-specific changes in this train.

baukit-push

• No component-specific changes in this train.

baukit-ratelimit

• No component-specific changes in this train.

baukit-runtime

• No component-specific changes in this train.

baukit-suite

• No component-specific changes in this train.

baukit-sync

• No component-specific changes in this train.

baukit-telemetry

• No component-specific changes in this train.

baukit-test

• No component-specific changes in this train.

TypeScript packages

a11y-core

Patch Changes

• Release the coordinated baukit 0.11.3 train.

analytics-core

Patch Changes

• Release the coordinated baukit 0.11.3 train.

analytics-posthog-native

Patch Changes

• Release the coordinated baukit 0.11.3 train.
• Updated dependencies
  • @baukit/analytics-core@0.11.3

analytics-posthog-web

Patch Changes

• Release the coordinated baukit 0.11.3 train.
• Updated dependencies
  • @baukit/analytics-core@0.11.3

api-runtime

Patch Changes

• Release the coordinated baukit 0.11.3 train.

auth-native

Patch Changes

• Release the coordinated baukit 0.11.3 train.

auth-node

Patch Changes

• Release the coordinated baukit 0.11.3 train.

auth-web

Patch Changes

• Release the coordinated baukit 0.11.3 train.

data-contracts-dexie

Patch Changes

• Release the coordinated baukit 0.11.3 train.
• Updated dependencies
  • @baukit/data-contracts@0.11.3

data-contracts-expo-sqlite

Patch Changes

• Release the coordinated baukit 0.11.3 train.
• Updated dependencies
  • @baukit/data-contracts@0.11.3

data-contracts

Patch Changes

• Release the coordinated baukit 0.11.3 train.

events

Patch Changes

• Release the coordinated baukit 0.11.3 train.

integrations-client

Patch Changes

• Release the coordinated baukit 0.11.3 train.

localization-core

Patch Changes

• Release the coordinated baukit 0.11.3 train.

navigation

• Pad the native profile menu and section picker modal by the safe-area
  insets, so the sheet clears edge-to-edge system bars on Android.
  SectionPicker accepts optional insets.
• Add NavigationTypography.activeFontFamily for selected native entries.

Patch Changes

• Release the coordinated baukit 0.11.3 train.
• Updated dependencies
  • @baukit/a11y-core@0.11.3
  • @baukit/ui-tokens@0.11.3

notifications-core

Patch Changes

• Release the coordinated baukit 0.11.3 train.
• Updated dependencies
  • @baukit/localization-core@0.11.3

notifications-expo

Patch Changes

• Release the coordinated baukit 0.11.3 train.
• Updated dependencies
  • @baukit/notifications-core@0.11.3

preferences-core

Patch Changes

• Release the coordinated baukit 0.11.3 train.

pwa-web

Patch Changes

• Release the coordinated baukit 0.11.3 train.

suite-client

Patch Changes

• Release the coordinated baukit 0.11.3 train.
• Updated dependencies
  • @baukit/integrations-client@0.11.3
  • @baukit/localization-core@0.11.3

sync-client

Patch Changes

• Release the coordinated baukit 0.11.3 train.

ui-tokens

Patch Changes

• Release the coordinated baukit 0.11.3 train.

Commits

• chore: prepare baukit v0.11.3 (279eba1e)
• Merge nav-menu-insets: native menus inside the safe area and an active font family (d5f83f1b)
• fix(navigation): keep native menus inside the safe area (7a7e972d)

baukit 0.11.2

baukit v0.11.2

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

• No component-specific changes in this train.

baukit-config

• No component-specific changes in this train.

baukit-core

• No component-specific changes in this train.

baukit-credential-vault

• No component-specific changes in this train.

baukit-data-subject

• No component-specific changes in this train.

baukit-egress

• No component-specific changes in this train.

baukit-erasure

• No component-specific changes in this train.

baukit-events

• No component-specific changes in this train.

baukit-http

• No component-specific changes in this train.

baukit-integrations

• No component-specific changes in this train.

baukit-jobs

• No component-specific changes in this train.

baukit-mcp

• No component-specific changes in this train.

baukit-openapi

• No component-specific changes in this train.

baukit-ops

• No component-specific changes in this train.

baukit-push

• No component-specific changes in this train.

baukit-ratelimit

• No component-specific changes in this train.

baukit-runtime

• No component-specific changes in this train.

baukit-suite

• No component-specific changes in this train.

baukit-sync

• No component-specific changes in this train.

baukit-telemetry

• No component-specific changes in this train.

baukit-test

• No component-specific changes in this train.

TypeScript packages

a11y-core

Patch Changes

• Release the coordinated baukit 0.11.2 train.

analytics-core

Patch Changes

• Release the coordinated baukit 0.11.2 train.

analytics-posthog-native

Patch Changes

• Release the coordinated baukit 0.11.2 train.
• Updated dependencies
  • @baukit/analytics-core@0.11.2

analytics-posthog-web

Patch Changes

• Release the coordinated baukit 0.11.2 train.
• Updated dependencies
  • @baukit/analytics-core@0.11.2

api-runtime

Patch Changes

• Release the coordinated baukit 0.11.2 train.

auth-native

Patch Changes

• Release the coordinated baukit 0.11.2 train.

auth-node

Patch Changes

• Release the coordinated baukit 0.11.2 train.

auth-web

Patch Changes

• Release the coordinated baukit 0.11.2 train.

data-contracts-dexie

Patch Changes

• Release the coordinated baukit 0.11.2 train.
• Updated dependencies
  • @baukit/data-contracts@0.11.2

data-contracts-expo-sqlite

Patch Changes

• Release the coordinated baukit 0.11.2 train.
• Updated dependencies
  • @baukit/data-contracts@0.11.2

data-contracts

Patch Changes

• Release the coordinated baukit 0.11.2 train.

events

Patch Changes

• Release the coordinated baukit 0.11.2 train.

integrations-client

Patch Changes

• Release the coordinated baukit 0.11.2 train.

localization-core

Patch Changes

• Release the coordinated baukit 0.11.2 train.

navigation

• Show the native navigation focus ring on web only for keyboard focus
  (:focus-visible), not after a pointer click.

Patch Changes

• Release the coordinated baukit 0.11.2 train.
• Updated dependencies
  • @baukit/a11y-core@0.11.2
  • @baukit/ui-tokens@0.11.2

notifications-core

Patch Changes

• Release the coordinated baukit 0.11.2 train.
• Updated dependencies
  • @baukit/localization-core@0.11.2

notifications-expo

Patch Changes

• Release the coordinated baukit 0.11.2 train.
• Updated dependencies
  • @baukit/notifications-core@0.11.2

preferences-core

Patch Changes

• Release the coordinated baukit 0.11.2 train.

pwa-web

Patch Changes

• Release the coordinated baukit 0.11.2 train.

suite-client

Patch Changes

• Release the coordinated baukit 0.11.2 train.
• Updated dependencies
  • @baukit/integrations-client@0.11.2
  • @baukit/localization-core@0.11.2

sync-client

Patch Changes

• Release the coordinated baukit 0.11.2 train.

ui-tokens

Patch Changes

• Release the coordinated baukit 0.11.2 train.

Commits

• chore: prepare baukit v0.11.2 (b56b1be2)
• Merge nav-focus-visible: keyboard-only focus ring on native web navigation (814720aa)
• fix(navigation): ring native web targets only for keyboard focus (946e9351)
• Merge tokio-1.54: support tokio 1.54 in the egress redaction test (873fbc39)
• test: read the request before fake servers reply in egress redaction test (851c9d3e)
• Merge fix-openapi-job-install: install TypeScript dependencies in the OpenAPI compatibility job (7be2ff93)
• ci: install TypeScript dependencies before script tests (eb044f2a)

baukit 0.11.1

baukit v0.11.1

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

• Clarify that Principal::from_api_token requires a token verified against the
  current store on every request. API-token grants stay separate from OIDC scopes;
  MCP uses the grants as its effective scopes.

baukit-config

• No component-specific changes in this train.

baukit-core

• No component-specific changes in this train.

baukit-credential-vault

• No component-specific changes in this train.

baukit-data-subject

• No component-specific changes in this train.

baukit-egress

• No component-specific changes in this train.

baukit-erasure

• No component-specific changes in this train.

baukit-events

• No component-specific changes in this train.

baukit-http

• No component-specific changes in this train.

baukit-integrations

• No component-specific changes in this train.

baukit-jobs

• No component-specific changes in this train.

baukit-mcp

• Seed effective MCP scopes from verified API-token grants. Policies can only narrow
  them; OIDC scopes and baukit-auth::Principal::scopes() keep their existing behavior.
• Behavior change: a product that already routes API tokens to /mcp grants each token the MCP
  tools its stored grants match after upgrading. Before, every such token had no scopes. Check
  that issued grants use MCP scope names only where tool access is intended.
• Reject API-token principals in Keycloak introspection without forwarding their secrets.
  Document PAT verifier wiring, subject mapping and per-request revocation checks.

baukit-openapi

• No component-specific changes in this train.

baukit-ops

• No component-specific changes in this train.

baukit-push

• No component-specific changes in this train.

baukit-ratelimit

• No component-specific changes in this train.

baukit-runtime

• No component-specific changes in this train.

baukit-suite

• No component-specific changes in this train.

baukit-sync

• No component-specific changes in this train.

baukit-telemetry

• No component-specific changes in this train.

baukit-test

• No component-specific changes in this train.

TypeScript packages

a11y-core

Patch Changes

• Release the coordinated baukit 0.11.1 train.

analytics-core

Patch Changes

• Release the coordinated baukit 0.11.1 train.

analytics-posthog-native

Patch Changes

• Release the coordinated baukit 0.11.1 train.
• Updated dependencies
  • @baukit/analytics-core@0.11.1

analytics-posthog-web

Patch Changes

• Release the coordinated baukit 0.11.1 train.
• Updated dependencies
  • @baukit/analytics-core@0.11.1

api-runtime

Patch Changes

• Release the coordinated baukit 0.11.1 train.

auth-native

Patch Changes

• Release the coordinated baukit 0.11.1 train.

auth-node

Patch Changes

• Release the coordinated baukit 0.11.1 train.

auth-web

Patch Changes

• Release the coordinated baukit 0.11.1 train.

data-contracts-dexie

Patch Changes

• Release the coordinated baukit 0.11.1 train.
• Updated dependencies
  • @baukit/data-contracts@0.11.1

data-contracts-expo-sqlite

Patch Changes

• Release the coordinated baukit 0.11.1 train.
• Updated dependencies
  • @baukit/data-contracts@0.11.1

data-contracts

Patch Changes

• Release the coordinated baukit 0.11.1 train.

events

Patch Changes

• Release the coordinated baukit 0.11.1 train.

integrations-client

Patch Changes

• Release the coordinated baukit 0.11.1 train.

localization-core

Patch Changes

• Release the coordinated baukit 0.11.1 train.

navigation

Patch Changes

• Release the coordinated baukit 0.11.1 train.
• Updated dependencies
  • @baukit/a11y-core@0.11.1
  • @baukit/ui-tokens@0.11.1

notifications-core

Patch Changes

• Release the coordinated baukit 0.11.1 train.
• Updated dependencies
  • @baukit/localization-core@0.11.1

notifications-expo

Patch Changes

• Release the coordinated baukit 0.11.1 train.
• Updated dependencies
  • @baukit/notifications-core@0.11.1

preferences-core

Patch Changes

• Release the coordinated baukit 0.11.1 train.

pwa-web

Patch Changes

• Release the coordinated baukit 0.11.1 train.

suite-client

Patch Changes

• Release the coordinated baukit 0.11.1 train.
• Updated dependencies
  • @baukit/integrations-client@0.11.1
  • @baukit/localization-core@0.11.1

sync-client

Patch Changes

• Release the coordinated baukit 0.11.1 train.

ui-tokens

Patch Changes

• Release the coordinated baukit 0.11.1 train.

Commits

• chore: prepare baukit v0.11.1 (b4e0cdbf)
• Merge mcp-api-token-scopes: API-token grants as effective MCP scopes (940c23ce)
• chore(deps): update tokio to 1.53.3 and ctutils to 0.4.5 (44a2f0cb)
• test(mcp): cover API tokens after the v0.11 rebase (79899cd1)
• docs(mcp): flag API-token scope seeding as a behavior change (f7f412ab)
• fix(mcp): use verified API-token grants as effective scopes (7574a189)

baukit 0.11.0

baukit v0.11.0

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

• Breaking: VerificationError and AuthRejection are now non-exhaustive.
  Both add Unavailable; AuthRejection also adds Misconfigured. Downstream
  matches need a wildcard arm. Store failures, OIDC connection and body-read
  failures, timeouts, and provider 408, 429, or 5xx responses return HTTP 503 with
  the standard unavailable envelope and Retry-After: 5. Fully received but
  invalid provider metadata or JWKS documents, other provider 4xx responses, and
  server configuration errors return HTTP 500 without Retry-After. Neither
  response sends an OAuth challenge. Invalid, revoked, unknown, and expired
  credentials still return 401.
• Add VerificationError::is_unavailable() and is_misconfigured(), plus a pure
  From<VerificationError> conversion for AuthRejection. Request handling logs
  infrastructure failures at error level with safe causes. Store errors log only
  their variant kind. HTTP error displays omit URLs and private diagnostics.
• Add MAX_API_TOKEN_NAME_LENGTH, ApiTokenService::prepare and prepare_at,
  and the sqlx-postgres helper insert_api_token. Preparation returns an opaque
  PreparedApiToken and the one-time GeneratedApiToken. The insert helper
  requires a prepared token, so callers cannot bypass validation with a raw
  ApiTokenRecord. Products can insert under their own lock in the same
  transaction as policy checks and other writes. The store validates records
  through the same prepared type and uses the same INSERT helper.

baukit-config

• No component-specific changes in this train.

baukit-core

• No component-specific changes in this train.

baukit-credential-vault

• No component-specific changes in this train.

baukit-data-subject

• Apply job migration 0004 in PostgreSQL fixtures for the store's new key columns.

baukit-egress

Added

• Add GuardedClient::execute_stream and EgressStreamResponse with status,
  headers and chunked reads. Both response modes share the guarded send path,
  request tracing, timeouts and byte limits.
• Add AllowedEndpoint, AllowedEndpointError and AddressPolicy::OnlyEndpoint
  for an exact scheme, host and effective port. The HTTP flag selects HTTP only
  when true and HTTPS only when false.
• Add AddressPolicy::PublicHttp and EgressOptions::with_redirect_responses.
  Opted-in redirects return status and headers with an empty body and are never
  followed. Defaults still require public HTTPS and reject redirects.

Fixed

• Block metadata addresses 100.100.100.200 and fd20:ce::254 under every
  policy, including IPv4-mapped and well-known NAT64 forms where applicable.
• Give timeout tests time to receive headers under concurrent workspace load,
  while keeping a short bound on reads after the streaming deadline expires.

Breaking

• AddressPolicy gains PublicHttp and OnlyEndpoint.
  DestinationRejection gains Endpoint. Both enums are now
  #[non_exhaustive]; downstream matches need a fallback arm. This requires
  a minor release during 0.x.

baukit-erasure

• Apply job migration 0004 in PostgreSQL fixtures for the store's new key columns.

baukit-events

• No component-specific changes in this train.

baukit-http

• No component-specific changes in this train.

baukit-integrations

• No component-specific changes in this train.

baukit-jobs

• Add PostgresJobStore::enqueue_deduplicated and
  enqueue_deduplicated_in_transaction to share a key only while a job is
  pending or running. Existing idempotency behavior stays unchanged.
• Add enqueue_pending_deduplicated and
  enqueue_pending_deduplicated_in_transaction for one pending follow-up while
  another job runs. Claiming clears the pending key so retries cannot collide
  with a follow-up. The two deduplication modes use independent keys.
• Breaking: add public Job::dedupe_key and Job::pending_dedupe_key fields.
  Custom stores and tests that construct Job must set them, usually to None.
  Keep Job constructible for custom JobStore implementations. Enqueue and
  claim now require migration 0004, including calls to existing methods,
  because returned jobs include both columns.
• Add migrations/0004_baukit_jobs_active_deduplication.sql and
  POSTGRES_MIGRATION_0004_SQL. Products must copy it as a new ordered
  migration before upgrading the store. Worker and authenticated
  backend templates include it as migration 0007.
• Document migration 0004 deployment order in the upgrade skill and backfill
  only the newest legacy pending row per key in the adoption example.

baukit-mcp

• Return HTTP 503 with the flat {"error":"identity_unavailable"} body and
  Retry-After: 5 for temporary identity-verification failures, including OIDC
  body-read failures and provider 408, 429, or 5xx responses. Fully received but
  invalid provider metadata or JWKS documents, other provider 4xx responses, and
  server configuration errors return HTTP 500 with
  {"error":"identity_misconfigured"} and no Retry-After. Both responses omit
  the OAuth challenge and log a safe cause at error level. Invalid credentials
  still return 401.
• Add the optional suite feature and McpServices::with_suite_links to register list_suite_links. It requires links:read, resolves the admitted product owner through SuiteOwnerResolver, reads through SuiteLinksRead, and returns credential-free link metadata in pages of 100.
• SuiteLinksTool::new and McpServices::with_suite_links require an explicit owner resolver. Unmapped identities receive an unauthenticated tool error before links are read. This changes the constructor signatures introduced in this unreleased change.

baukit-openapi

• No component-specific changes in this train.

baukit-ops

• No component-specific changes in this train.

baukit-push

Added

• Add ExpoPushSender::with_guarded_client(GuardedClient) for ticket requests
  and immediate or deferred receipt requests through baukit-egress. The
  dependency is direct and needs no feature flag. Guarded failures retain the
  guard's retry classification and omit provider response bodies.

Changed

• Keep accepted tickets as PushDeliveryStatus::Accepted when an immediate
  receipt fetch fails, on both transports. Callers can persist the ticket and
  poll later instead of sending the notification again. Deferred receipt calls
  still report failures.
• Use a manual ExpoPushSender debug formatter that omits endpoint URLs and
  credentials.
• Log failed immediate receipt fetches at debug level with retryability and no
  notification data. Mark guarded authorization headers sensitive.

baukit-ratelimit

• No component-specific changes in this train.

baukit-runtime

• No component-specific changes in this train.

baukit-suite

• Clarify that handlers overriding prepare_at must delegate prepare to it.

• Keep entitlement events retryable when a custom inbox skips preparation. Pass the receiver clock to PlatformEventHandler::prepare_at for deterministic free-cache deadlines.

• Document that erasure removes revision cursors and products must filter late events for erased subjects.

• Add per-peer hosted authorize_url overrides with config and registry validation. The full path and suite protocol query parameters are preserved.

• Breaking: PeerUrls, PeerRegistrySettings and SuiteConfig are non-exhaustive. Replace external struct literals with PeerUrls::new, PeerRegistrySettings::default and their builders, or mutate defaults. ActivePeer gains authorize_url: Option<url::Url>, parsed during registry validation. This requires a minor release.

• Add the read-only SuiteLinksRead service port, implemented by SuiteLinkService.

• Apply job migration 0004 in PostgreSQL fixtures for the store's new key columns.

• Add read-through entitlement refresh with per-subject single-flight, explicit free fallback, transactional cache erasure and batched receipt retention. Configure the hub source and event prefix, prepare pulls before receipt transactions, and keep cached ticket verification available during JWKS refresh.

• Revise the unreleased platform API: public event context constructors, PlatformEventDecoder, PlatformEventHandler::prepare, cache revision and erasure methods, a required source for hub reads, EntitlementSourceError, and detailed configuration errors from ticket_verifier.

• Add the optional platform feature with typed hub events, a signed receiver, transactional PostgreSQL receipts, entitlement caches, standalone reads and a cached Ed25519 ticket verifier.

baukit-sync

• No component-specific changes in this train.

baukit-telemetry

• No component-specific changes in this train.

baukit-test

• No component-specific changes in this train.

TypeScript packages

a11y-core

Minor Changes

• Release the coordinated baukit 0.11.0 train.

analytics-core

Minor Changes

• Release the coordinated baukit 0.11.0 train.

analytics-posthog-native

Minor Changes

• Release the coordinated baukit 0.11.0 train.

Patch Changes

• Updated dependencies
  • @baukit/analytics-core@0.11.0

analytics-posthog-web

Minor Changes

• Release the coordinated baukit 0.11.0 train.

Patch Changes

• Updated dependencies
  • @baukit/analytics-core@0.11.0

api-runtime

Minor Changes

• Release the coordinated baukit 0.11.0 train.

auth-native

Minor Changes

• Release the coordinated baukit 0.11.0 train.

auth-node

Minor Changes

• Release the coordinated baukit 0.11.0 train.

auth-web

• Add SilentTokenBroker for silent multi-product OIDC authorization with in-memory tokens, remembered failures, account binding and explicit popup login. A blocked popup preserves earlier failures, and closing a popup returns `...

baukit 0.10.32

baukit v0.10.32

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

• No component-specific changes in this train.

baukit-config

• No component-specific changes in this train.

baukit-core

• No component-specific changes in this train.

baukit-credential-vault

• No component-specific changes in this train.

baukit-data-subject

• Run the shared service conformance check against the PostgreSQL fixture
  product with erasure only and with exports, using real authentication and jobs.

• Add opt-in exports through DataSubjectExportProduct, using the existing
  acceptance, operation store and lease-aware worker.

• Store bounded JSON parts and their signed digests atomically. Reject oversized
  records with data_subject_export_record_too_large and no receipt.

• Add scope-isolated export status and download routes, seven-day default part
  retention and bounded part purge independent of operation retention.

• Add the exports migration with completed-export ownership constraints and
  exact byte and digest checks. Products manage table access through their own grants.

• Add the default server feature with PostgreSQL operations, authenticated
  erasure routes, public discovery, transactional jobs and signed results.

• Resolve lookup identifiers during acceptance and queue only internal subject
  IDs. Apply profile-erasure fences and identity retention during execution.

• Add bounded operation purge and safe terminal job-failure reconciliation.

• Wait for configured identity deletion before signing a completed receipt;
  provider failures leave the data subject operation failed without a receipt.

• Back off identity checks to 60 seconds and fail without a receipt when the
  configured wait expires, by default after 24 hours. Make discovery publicly
  cacheable for five minutes.

• Add data subject v1 contract types, request validation and normalization,
  Ed25519 DSSE receipt signing and verification, and independent receipt fixtures.

baukit-egress

• No component-specific changes in this train.

baukit-erasure

• Add ErasureService::fence_as_operator_in_transaction for authorized machine
  erasure with the same subject fence and identity retention policy.

baukit-events

• No component-specific changes in this train.

baukit-http

• No component-specific changes in this train.

baukit-integrations

• No component-specific changes in this train.

baukit-jobs

• No component-specific changes in this train.

baukit-mcp

• No component-specific changes in this train.

baukit-openapi

• No component-specific changes in this train.

baukit-ops

• No component-specific changes in this train.

baukit-push

• No component-specific changes in this train.

baukit-ratelimit

• No component-specific changes in this train.

baukit-runtime

• No component-specific changes in this train.

baukit-suite

• No component-specific changes in this train.

baukit-sync

• No component-specific changes in this train.

baukit-telemetry

• No component-specific changes in this train.

baukit-test

• Fix part responses in the controlled target for terminal exports without parts
  and unknown parts after expiry. Both return the contract's 404 instead of 409 or 410.

• Add HTTP service conformance checks behind data-subject, with router and
  base URL transports, product fixture controls, typed requirement failures and
  an assertion wrapper. Check auth, validation, replay, receipts, export parts
  and response privacy against the controlled target and deliberate faults.

• Add the data-subject feature with a controlled HTTP target for client tests,
  signed receipts, scripted outcomes and faults, export parts, key rotation and
  private in-memory request observations.

TypeScript packages

a11y-core

Patch Changes

• Release the coordinated baukit 0.10.32 train.

analytics-core

Patch Changes

• Release the coordinated baukit 0.10.32 train.

analytics-posthog-native

Patch Changes

• Release the coordinated baukit 0.10.32 train.
• Updated dependencies
  • @baukit/analytics-core@0.10.32

analytics-posthog-web

Patch Changes

• Release the coordinated baukit 0.10.32 train.
• Updated dependencies
  • @baukit/analytics-core@0.10.32

api-runtime

Patch Changes

• Release the coordinated baukit 0.10.32 train.

auth-native

Patch Changes

• Release the coordinated baukit 0.10.32 train.

auth-node

Patch Changes

• Release the coordinated baukit 0.10.32 train.

auth-web

Patch Changes

• Release the coordinated baukit 0.10.32 train.

data-contracts-dexie

Patch Changes

• Release the coordinated baukit 0.10.32 train.
• Updated dependencies
  • @baukit/data-contracts@0.10.32

data-contracts-expo-sqlite

Patch Changes

• Release the coordinated baukit 0.10.32 train.
• Updated dependencies
  • @baukit/data-contracts@0.10.32

data-contracts

Patch Changes

• Release the coordinated baukit 0.10.32 train.

events

Patch Changes

• Release the coordinated baukit 0.10.32 train.

integrations-client

Patch Changes

• Release the coordinated baukit 0.10.32 train.

localization-core

Patch Changes

• Release the coordinated baukit 0.10.32 train.

navigation

Patch Changes

• Release the coordinated baukit 0.10.32 train.
• Updated dependencies
  • @baukit/a11y-core@0.10.32
  • @baukit/ui-tokens@0.10.32

notifications-core

Patch Changes

• Release the coordinated baukit 0.10.32 train.
• Updated dependencies
  • @baukit/localization-core@0.10.32

notifications-expo

Patch Changes

• Release the coordinated baukit 0.10.32 train.
• Updated dependencies
  • @baukit/notifications-core@0.10.32

preferences-core

Patch Changes

• Release the coordinated baukit 0.10.32 train.

pwa-web

Patch Changes

• Release the coordinated baukit 0.10.32 train.

suite-client

Patch Changes

• Release the coordinated baukit 0.10.32 train.
• Updated dependencies
  • @baukit/integrations-client@0.10.32
  • @baukit/localization-core@0.10.32

sync-client

Patch Changes

• Release the coordinated baukit 0.10.32 train.

ui-tokens

Patch Changes

• Release the coordinated baukit 0.10.32 train.

Commits

• chore: prepare baukit v0.10.32 (f80739ea)
• Merge feature/data-subject: data subject contract v1 (f9da59c3)
• docs(data-subject): track T2 as done (0c029c5e)
• Merge T2 data subject conformance check (ed9ab4b8)
• feat(test): data subject service conformance check (efc2fc72)
• docs(data-subject): track D3 as done (d8f7bef8)
• Merge D3 data subject exports (5ea5fbac)
• feat(data-subject): export operations with signed, digest-checked parts (4492a062)
• docs(data-subject): track D2 as done (593cc4a5)
• Merge D2 data subject erasure server (1bf11110)
• feat(data-subject): erasure server with signed receipts and session fence (0f5e6f4e)
• docs(data-subject): track T1 as done (af5b9d6b)
• Merge T1 data subject target server (99cb2375)
• feat(test): controlled data subject target server for client tests (59fd4b66)
• docs(data-subject): track D0 and D1 (60c67593)
• Merge D1 data subject contract and receipt core (21c93ed7)
• feat(data-subject): add the v1 contract and receipt core (eea53d8a)
• docs: plan the data subject contract (0d847253)
• fix(deps): update certificate crates for RUSTSEC-2026-0381 to 0383 (26126192)
• docs: add advertising jingle and ElevenLabs generator (d531d998)

baukit 0.10.31

baukit v0.10.31

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

• Release the coordinated baukit 0.10.31 train.

baukit-config

• Release the coordinated baukit 0.10.31 train.

baukit-core

• Release the coordinated baukit 0.10.31 train.

baukit-credential-vault

• Release the coordinated baukit 0.10.31 train.

baukit-egress

• Release the coordinated baukit 0.10.31 train.

baukit-erasure

• Release the coordinated baukit 0.10.31 train.

baukit-events

• Release the coordinated baukit 0.10.31 train.

baukit-http

• Release the coordinated baukit 0.10.31 train.

baukit-integrations

• Release the coordinated baukit 0.10.31 train.

baukit-jobs

• Release the coordinated baukit 0.10.31 train.

baukit-mcp

• Release the coordinated baukit 0.10.31 train.

baukit-openapi

• Release the coordinated baukit 0.10.31 train.

baukit-ops

• Release the coordinated baukit 0.10.31 train.

baukit-push

• Release the coordinated baukit 0.10.31 train.

baukit-ratelimit

• Release the coordinated baukit 0.10.31 train.

baukit-runtime

• Release the coordinated baukit 0.10.31 train.

baukit-suite

• Release the coordinated baukit 0.10.31 train.

baukit-sync

• Release the coordinated baukit 0.10.31 train.

baukit-telemetry

• Release the coordinated baukit 0.10.31 train.

baukit-test

• Release the coordinated baukit 0.10.31 train.

TypeScript packages

a11y-core

Patch Changes

• f8c3af4: Keep the original overlay opener across StrictMode effect replays and focus ref changes so closing
  the overlay restores focus to its trigger. Capture a new opener for each separate opening.
• Release the coordinated baukit 0.10.31 train.

analytics-core

Patch Changes

• Release the coordinated baukit 0.10.31 train.

analytics-posthog-native

Patch Changes

• Release the coordinated baukit 0.10.31 train.

analytics-posthog-web

Patch Changes

• Release the coordinated baukit 0.10.31 train.

api-runtime

Patch Changes

• Release the coordinated baukit 0.10.31 train.

auth-native

Patch Changes

• Release the coordinated baukit 0.10.31 train.

auth-node

Patch Changes

• Release the coordinated baukit 0.10.31 train.

auth-web

Patch Changes

• Release the coordinated baukit 0.10.31 train.

data-contracts-dexie

Patch Changes

• Release the coordinated baukit 0.10.31 train.

data-contracts-expo-sqlite

Patch Changes

• Release the coordinated baukit 0.10.31 train.

data-contracts

Patch Changes

• Release the coordinated baukit 0.10.31 train.

events

Patch Changes

• Release the coordinated baukit 0.10.31 train.

integrations-client

Patch Changes

• Release the coordinated baukit 0.10.31 train.

localization-core

Patch Changes

• Release the coordinated baukit 0.10.31 train.

navigation

Patch Changes

• Release the coordinated baukit 0.10.31 train.

notifications-core

Patch Changes

• Release the coordinated baukit 0.10.31 train.

notifications-expo

Patch Changes

• Release the coordinated baukit 0.10.31 train.

preferences-core

Patch Changes

• Release the coordinated baukit 0.10.31 train.

pwa-web

Patch Changes

• Release the coordinated baukit 0.10.31 train.

suite-client

Patch Changes

• Release the coordinated baukit 0.10.31 train.

sync-client

Patch Changes

• Release the coordinated baukit 0.10.31 train.

ui-tokens

Patch Changes

• Release the coordinated baukit 0.10.31 train.

Commits

• chore: prepare baukit v0.10.31 (b2462339)
• fix(a11y-core): preserve overlay opener across effect replays (f8c3af43)

baukit 0.10.30

baukit v0.10.30

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

• Release the coordinated baukit 0.10.30 train.

baukit-config

• Release the coordinated baukit 0.10.30 train.

baukit-core

• Release the coordinated baukit 0.10.30 train.

baukit-credential-vault

• Release the coordinated baukit 0.10.30 train.

baukit-egress

• Release the coordinated baukit 0.10.30 train.

baukit-erasure

• Release the coordinated baukit 0.10.30 train.

baukit-events

• Release the coordinated baukit 0.10.30 train.

baukit-http

• Release the coordinated baukit 0.10.30 train.

baukit-integrations

• Release the coordinated baukit 0.10.30 train.

baukit-jobs

• Release the coordinated baukit 0.10.30 train.

baukit-mcp

• Release the coordinated baukit 0.10.30 train.

baukit-openapi

• Release the coordinated baukit 0.10.30 train.

baukit-ops

• Release the coordinated baukit 0.10.30 train.

baukit-push

• Release the coordinated baukit 0.10.30 train.

baukit-ratelimit

• Release the coordinated baukit 0.10.30 train.

baukit-runtime

• Release the coordinated baukit 0.10.30 train.

baukit-suite

• Release the coordinated baukit 0.10.30 train.

baukit-sync

• Release the coordinated baukit 0.10.30 train.

baukit-telemetry

• Release the coordinated baukit 0.10.30 train.

baukit-test

• Release the coordinated baukit 0.10.30 train.

TypeScript packages

a11y-core

Patch Changes

• 95087b9: Keep focus moved outside a closing overlay and avoid disconnected openers. Add restoreFocus and
  returnFocus callbacks to useFocusTrap and useOverlayA11y for opting out or choosing a fallback.
• Release the coordinated baukit 0.10.30 train.

analytics-core

Patch Changes

• Release the coordinated baukit 0.10.30 train.

analytics-posthog-native

Patch Changes

• Release the coordinated baukit 0.10.30 train.

analytics-posthog-web

Patch Changes

• Release the coordinated baukit 0.10.30 train.

api-runtime

Patch Changes

• Release the coordinated baukit 0.10.30 train.

auth-native

Patch Changes

• Release the coordinated baukit 0.10.30 train.

auth-node

Patch Changes

• Release the coordinated baukit 0.10.30 train.

auth-web

Patch Changes

• Release the coordinated baukit 0.10.30 train.

data-contracts-dexie

Patch Changes

• Release the coordinated baukit 0.10.30 train.

data-contracts-expo-sqlite

Patch Changes

• Release the coordinated baukit 0.10.30 train.

data-contracts

Patch Changes

• Release the coordinated baukit 0.10.30 train.

events

Patch Changes

• Release the coordinated baukit 0.10.30 train.

integrations-client

Patch Changes

• Release the coordinated baukit 0.10.30 train.

localization-core

Patch Changes

• Release the coordinated baukit 0.10.30 train.

navigation

Patch Changes

• Release the coordinated baukit 0.10.30 train.

notifications-core

Patch Changes

• Release the coordinated baukit 0.10.30 train.

notifications-expo

Patch Changes

• Release the coordinated baukit 0.10.30 train.

preferences-core

Patch Changes

• Release the coordinated baukit 0.10.30 train.

pwa-web

Patch Changes

• Release the coordinated baukit 0.10.30 train.

suite-client

Patch Changes

• Release the coordinated baukit 0.10.30 train.

sync-client

Patch Changes

• Release the coordinated baukit 0.10.30 train.

ui-tokens

Patch Changes

• Release the coordinated baukit 0.10.30 train.

Commits

• chore: prepare baukit v0.10.30 (983ffa40)
• fix(a11y-core): preserve focus moved after overlay close (95087b92)

baukit 0.10.29

baukit v0.10.29

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

• No component-specific changes in this train.

baukit-config

• No component-specific changes in this train.

baukit-core

• No component-specific changes in this train.

baukit-credential-vault

• No component-specific changes in this train.

baukit-egress

• No component-specific changes in this train.

baukit-erasure

• No component-specific changes in this train.

baukit-events

• No component-specific changes in this train.

baukit-http

• No component-specific changes in this train.

baukit-integrations

• No component-specific changes in this train.

baukit-jobs

• No component-specific changes in this train.

baukit-mcp

• No component-specific changes in this train.

baukit-openapi

• No component-specific changes in this train.

baukit-ops

• No component-specific changes in this train.

baukit-push

• No component-specific changes in this train.

baukit-ratelimit

• No component-specific changes in this train.

baukit-runtime

• No component-specific changes in this train.

baukit-suite

• No component-specific changes in this train.

baukit-sync

• No component-specific changes in this train.

baukit-telemetry

• No component-specific changes in this train.

baukit-test

• No component-specific changes in this train.

TypeScript packages

a11y-core

Patch Changes

• Release the coordinated baukit 0.10.29 train.

analytics-core

Patch Changes

• Release the coordinated baukit 0.10.29 train.

analytics-posthog-native

Patch Changes

• Release the coordinated baukit 0.10.29 train.
• Updated dependencies
  • @baukit/analytics-core@0.10.29

analytics-posthog-web

Patch Changes

• Release the coordinated baukit 0.10.29 train.
• Updated dependencies
  • @baukit/analytics-core@0.10.29

api-runtime

Patch Changes

• Release the coordinated baukit 0.10.29 train.

auth-native

Patch Changes

• Release the coordinated baukit 0.10.29 train.

auth-node

Patch Changes

• Release the coordinated baukit 0.10.29 train.

auth-web

Patch Changes

• Release the coordinated baukit 0.10.29 train.

data-contracts-dexie

Patch Changes

• Release the coordinated baukit 0.10.29 train.
• Updated dependencies
  • @baukit/data-contracts@0.10.29

data-contracts-expo-sqlite

Patch Changes

• Release the coordinated baukit 0.10.29 train.
• Updated dependencies
  • @baukit/data-contracts@0.10.29

data-contracts

• Add cleanup to profile-erased lifecycle states so consumers can distinguish
  pending cleanup, successful erasure, and cleanup failures, including when the
  erased subject is selected again.

Patch Changes

• Release the coordinated baukit 0.10.29 train.

events

Patch Changes

• Release the coordinated baukit 0.10.29 train.

integrations-client

Patch Changes

• Release the coordinated baukit 0.10.29 train.

localization-core

Patch Changes

• Release the coordinated baukit 0.10.29 train.

navigation

• Allow six main navigation items plus an optional profile. Keep long labels
  inside compact web targets with ellipsis at 320 CSS pixels.

Patch Changes

• Release the coordinated baukit 0.10.29 train.
• Updated dependencies
  • @baukit/a11y-core@0.10.29
  • @baukit/ui-tokens@0.10.29

notifications-core

Patch Changes

• Release the coordinated baukit 0.10.29 train.
• Updated dependencies
  • @baukit/localization-core@0.10.29

notifications-expo

Patch Changes

• Release the coordinated baukit 0.10.29 train.
• Updated dependencies
  • @baukit/notifications-core@0.10.29

preferences-core

Patch Changes

• Release the coordinated baukit 0.10.29 train.

pwa-web

Patch Changes

• Release the coordinated baukit 0.10.29 train.

suite-client

Patch Changes

• Release the coordinated baukit 0.10.29 train.
• Updated dependencies
  • @baukit/integrations-client@0.10.29
  • @baukit/localization-core@0.10.29

sync-client

Patch Changes

• Release the coordinated baukit 0.10.29 train.

ui-tokens

Patch Changes

• Release the coordinated baukit 0.10.29 train.

Commits

• chore: prepare baukit v0.10.29 (bc076b32)
• fix(data-contracts): report the profile erasure cleanup outcome (5730a10c)
• feat(navigation): allow six main items (694df519)

baukit 0.10.28

baukit v0.10.28

One release train for the Rust crates, TypeScript packages, and templates.

Rust crates

baukit-auth

• No component-specific changes in this train.

baukit-config

• No component-specific changes in this train.

baukit-core

• No component-specific changes in this train.

baukit-credential-vault

• No component-specific changes in this train.

baukit-egress

• No component-specific changes in this train.

baukit-erasure

• No component-specific changes in this train.

baukit-events

• No component-specific changes in this train.

baukit-http

• No component-specific changes in this train.

baukit-integrations

• No component-specific changes in this train.

baukit-jobs

• No component-specific changes in this train.

baukit-mcp

• No component-specific changes in this train.

baukit-openapi

• No component-specific changes in this train.

baukit-ops

• No component-specific changes in this train.

baukit-push

• No component-specific changes in this train.

baukit-ratelimit

• No component-specific changes in this train.

baukit-runtime

• No component-specific changes in this train.

baukit-suite

• No component-specific changes in this train.

baukit-sync

• No component-specific changes in this train.

baukit-telemetry

• No component-specific changes in this train.

baukit-test

• Enable testcontainers cleanup on SIGINT, SIGTERM, and SIGQUIT.
• Label container fixtures with their process, PID namespace, host, binary, worktree,
  and start time. Expose container_labels() for containers started directly by tests.
• Add scripts/reap-test-containers.sh to remove labelled orphan containers after SIGKILL
  or other interrupted cleanup, with a dry run and hourly systemd timer example. Require
  matching host and PID namespace labels before cleanup, and skip remote DOCKER_HOST
  endpoints.

TypeScript packages

a11y-core

Patch Changes

• Release the coordinated baukit 0.10.28 train.

analytics-core

Patch Changes

• Release the coordinated baukit 0.10.28 train.

analytics-posthog-native

Patch Changes

• Release the coordinated baukit 0.10.28 train.
• Updated dependencies
  • @baukit/analytics-core@0.10.28

analytics-posthog-web

Patch Changes

• Release the coordinated baukit 0.10.28 train.
• Updated dependencies
  • @baukit/analytics-core@0.10.28

api-runtime

Patch Changes

• Release the coordinated baukit 0.10.28 train.

auth-native

Patch Changes

• Release the coordinated baukit 0.10.28 train.

auth-node

Patch Changes

• Release the coordinated baukit 0.10.28 train.

auth-web

Patch Changes

• Release the coordinated baukit 0.10.28 train.

data-contracts-dexie

Patch Changes

• Release the coordinated baukit 0.10.28 train.
• Updated dependencies
  • @baukit/data-contracts@0.10.28

data-contracts-expo-sqlite

Patch Changes

• Release the coordinated baukit 0.10.28 train.
• Updated dependencies
  • @baukit/data-contracts@0.10.28

data-contracts

Patch Changes

• Release the coordinated baukit 0.10.28 train.

events

Patch Changes

• Release the coordinated baukit 0.10.28 train.

integrations-client

Patch Changes

• Release the coordinated baukit 0.10.28 train.

localization-core

Patch Changes

• Release the coordinated baukit 0.10.28 train.

navigation

Patch Changes

• Release the coordinated baukit 0.10.28 train.
• Updated dependencies
  • @baukit/a11y-core@0.10.28
  • @baukit/ui-tokens@0.10.28

notifications-core

Patch Changes

• Release the coordinated baukit 0.10.28 train.
• Updated dependencies
  • @baukit/localization-core@0.10.28

notifications-expo

Patch Changes

• Release the coordinated baukit 0.10.28 train.
• Updated dependencies
  • @baukit/notifications-core@0.10.28

preferences-core

Patch Changes

• Release the coordinated baukit 0.10.28 train.

pwa-web

Patch Changes

• Release the coordinated baukit 0.10.28 train.

suite-client

Patch Changes

• Release the coordinated baukit 0.10.28 train.
• Updated dependencies
  • @baukit/integrations-client@0.10.28
  • @baukit/localization-core@0.10.28

sync-client

Patch Changes

• Release the coordinated baukit 0.10.28 train.

ui-tokens

Patch Changes

• Release the coordinated baukit 0.10.28 train.

Commits

• chore: prepare baukit v0.10.28 (4efeb71c)
• fix(test): scope container cleanup to its host and namespace (33e1545d)
• fix(test): label containers and clean up on termination signals (3914d017)