Releases · glincker/theauth

18 Apr 02:12

github-actions

v0.4.2

fd899d2

v0.4.2 Latest

Latest

The v4 release wave, tied off.

If you are upgrading from 0.3.x, everything that shipped in 0.4.0 is here with both follow-up fixes folded in.

Fix in this patch

The ten OAuth provider factories added in 0.4.0 were missing from the top-level kavachos/auth barrel, so import { notion } from "kavachos/auth" did not resolve even though the code was there. auth/index.ts now re-exports the whole providers barrel, which also means future provider additions pick themselves up automatically.

What the full v4 wave delivered (0.4.0 + 0.4.1 + 0.4.2)

Agentic JWT claim constants

Two IETF drafts, draft-goswami-agentic-jwt-00 and draft-liu-agent-operation-authorization-01, are encoded as typed constants in the new kavachos/standards subpath. Turn on emitAgenticJwtClaims and every issued token carries agent_id, agent_type, and trust_tier. Off by default so existing deployments do not change token shape on upgrade.

Ten new OAuth providers as first-class named exports

Notion, Spotify, Discord, Slack, Twitch, Reddit, Figma, Dropbox, Zoom, Atlassian. Each ships with a typed factory, a DEFAULT_X_SCOPES constant, and a profile normaliser. You stop writing those three boilerplate files per provider.

Audit export as W3C Verifiable Credentials

exportAuditAsVC from the new kavachos/vc subpath writes your audit log out as ldp_vc or jwt_vc, individual events or a Verifiable Presentation. Useful for compliance exports that downstream auditors can verify offline without touching your database.

create-kavachos-app on npm

pnpm create kavachos-app my-app scaffolds a working Next.js App Router template.

Upgrade

pnpm add kavachos@0.4.2

No breaking changes from 0.3.x. Every new feature is behind an opt-in config flag or an additional import path.

Full diff

v0.4.1...v0.4.2

Assets 2

18 Apr 01:37

github-actions

v0.4.1

597e371

v0.4.1

Full Changelog: v0.4.0...v0.4.1

Assets 2

18 Apr 01:18

github-actions

v0.4.0

9d7e4b0

v0.4.0

What's Changed

feat(standards): agentic JWT claims behind a flag by @thegdsks in #18
feat(oauth): 10 providers promoted to first-class named exports by @thegdsks in #19
docs(migrate): first migration guide by @thegdsks in #20
docs(compare): hub and four comparison pages by @thegdsks in #21
feat(cli): create-kavachos-app scaffolder with a Next.js template by @thegdsks in #22
feat(policy): 7 copy-paste policy templates by @thegdsks in #23
feat(vc): export audit records as Verifiable Credentials by @thegdsks in #24
feat(marquee): interactive home-page demo app by @thegdsks in #25

Full Changelog: v0.3.0...v0.4.0

Contributors

thegdsks

Assets 2

17 Apr 20:50

github-actions

v0.3.0

478556a

v0.3.0

What's Changed

Add context7.json with URL and public key by @thegdsks in #7
feat(policy): unified RBAC + ABAC + ReBAC policy engine by @thegdsks in #8
feat(docs): migrate docs site from Fumadocs to Mintlify by @thegdsks in #9
fix(docs): repair sidebar icons after Fumadocs migration by @thegdsks in #10
fix(docs): rename overview pages so they stop colliding with group labels by @thegdsks in #11
fix(docs+build): 404 pages, MDX parse bombs, turbo cache poisoning by @thegdsks in #12
fix(docs): purge Fumadocs leftovers + rework the home page by @thegdsks in #13
fix(docs): angle brackets breaking MDX parse by @thegdsks in #14
fix(docs): wrap object literals in hooks prose as inline code by @thegdsks in #15
chore: disable Vercel git deployments on OSS docs repo by @thegdsks in #16
fix(docs): tighten wordmark + replace ASCII with Mermaid by @thegdsks in #17