Repository navigation
baukit 0.11.1
baukit v0.11.1
One release train for the Rust crates, TypeScript packages, and templates.
Rust crates
baukit-auth
- Clarify that
Principal::from_api_tokenrequires a token verified against the
current store on every request. API-token grants stay separate from OIDC scopes;
MCP uses the grants as its effective scopes.
baukit-config
- No component-specific changes in this train.
baukit-core
- No component-specific changes in this train.
baukit-credential-vault
- No component-specific changes in this train.
baukit-data-subject
- No component-specific changes in this train.
baukit-egress
- No component-specific changes in this train.
baukit-erasure
- No component-specific changes in this train.
baukit-events
- No component-specific changes in this train.
baukit-http
- No component-specific changes in this train.
baukit-integrations
- No component-specific changes in this train.
baukit-jobs
- No component-specific changes in this train.
baukit-mcp
- Seed effective MCP scopes from verified API-token grants. Policies can only narrow
them; OIDC scopes andbaukit-auth::Principal::scopes()keep their existing behavior. - Behavior change: a product that already routes API tokens to
/mcpgrants each token the MCP
tools its stored grants match after upgrading. Before, every such token had no scopes. Check
that issued grants use MCP scope names only where tool access is intended. - Reject API-token principals in Keycloak introspection without forwarding their secrets.
Document PAT verifier wiring, subject mapping and per-request revocation checks.
baukit-openapi
- No component-specific changes in this train.
baukit-ops
- No component-specific changes in this train.
baukit-push
- No component-specific changes in this train.
baukit-ratelimit
- No component-specific changes in this train.
baukit-runtime
- No component-specific changes in this train.
baukit-suite
- No component-specific changes in this train.
baukit-sync
- No component-specific changes in this train.
baukit-telemetry
- No component-specific changes in this train.
baukit-test
- No component-specific changes in this train.
TypeScript packages
a11y-core
Patch Changes
- Release the coordinated baukit 0.11.1 train.
analytics-core
Patch Changes
- Release the coordinated baukit 0.11.1 train.
analytics-posthog-native
Patch Changes
- Release the coordinated baukit 0.11.1 train.
- Updated dependencies
- @baukit/analytics-core@0.11.1
analytics-posthog-web
Patch Changes
- Release the coordinated baukit 0.11.1 train.
- Updated dependencies
- @baukit/analytics-core@0.11.1
api-runtime
Patch Changes
- Release the coordinated baukit 0.11.1 train.
auth-native
Patch Changes
- Release the coordinated baukit 0.11.1 train.
auth-node
Patch Changes
- Release the coordinated baukit 0.11.1 train.
auth-web
Patch Changes
- Release the coordinated baukit 0.11.1 train.
data-contracts-dexie
Patch Changes
- Release the coordinated baukit 0.11.1 train.
- Updated dependencies
- @baukit/data-contracts@0.11.1
data-contracts-expo-sqlite
Patch Changes
- Release the coordinated baukit 0.11.1 train.
- Updated dependencies
- @baukit/data-contracts@0.11.1
data-contracts
Patch Changes
- Release the coordinated baukit 0.11.1 train.
events
Patch Changes
- Release the coordinated baukit 0.11.1 train.
integrations-client
Patch Changes
- Release the coordinated baukit 0.11.1 train.
localization-core
Patch Changes
- Release the coordinated baukit 0.11.1 train.
navigation
Patch Changes
- Release the coordinated baukit 0.11.1 train.
- Updated dependencies
- @baukit/a11y-core@0.11.1
- @baukit/ui-tokens@0.11.1
notifications-core
Patch Changes
- Release the coordinated baukit 0.11.1 train.
- Updated dependencies
- @baukit/localization-core@0.11.1
notifications-expo
Patch Changes
- Release the coordinated baukit 0.11.1 train.
- Updated dependencies
- @baukit/notifications-core@0.11.1
preferences-core
Patch Changes
- Release the coordinated baukit 0.11.1 train.
pwa-web
Patch Changes
- Release the coordinated baukit 0.11.1 train.
suite-client
Patch Changes
- Release the coordinated baukit 0.11.1 train.
- Updated dependencies
- @baukit/integrations-client@0.11.1
- @baukit/localization-core@0.11.1
sync-client
Patch Changes
- Release the coordinated baukit 0.11.1 train.
ui-tokens
Patch Changes
- Release the coordinated baukit 0.11.1 train.
Commits
- chore: prepare baukit v0.11.1 (
b4e0cdbf) - Merge mcp-api-token-scopes: API-token grants as effective MCP scopes (
940c23ce) - chore(deps): update tokio to 1.53.3 and ctutils to 0.4.5 (
44a2f0cb) - test(mcp): cover API tokens after the v0.11 rebase (
79899cd1) - docs(mcp): flag API-token scope seeding as a behavior change (
f7f412ab) - fix(mcp): use verified API-token grants as effective scopes (
7574a189)