Meta Vens
79ea0007d3
OAuth callback: mode and provider role decide what a completion mints ...
The start gate only refused early. The callback ignored the signed state's
mode, so a Joystick connect for StreamPixels redeemed into a viewer_access
session. callbackMint(profile, provider, mode) now decides at the callback:
identity providers keep a viewer session (Bifrost discord connect unchanged);
a connect for a managed-connection-only provider stores custody and mints a
claim with no facts, no capabilities and no refresh token (the refresh route
would recompute viewer_access from the account); anything else is refused.
StreamPixels' redeem reads only account, provider, mode, connection and
claimSet.identities, so it accepts the capability-free claim unchanged.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-19 13:23:53 +02:00
Postgres store: return created_at and updated_at as ISO strings too
2026-10-19 11:18:12 +02:00
Add Eve access plugin and private auth plane
2026-08-22 00:44:57 +02:00
Close the three one-line holes Soul left as follow-ups
2026-09-08 15:08:38 +02:00
OAuth callback: mode and provider role decide what a completion mints
2026-10-19 13:23:53 +02:00
OAuth callback: mode and provider role decide what a completion mints
2026-10-19 13:23:53 +02:00
OAuth callback: mode and provider role decide what a completion mints
2026-10-19 13:23:53 +02:00
Relayed provider errors are printable, bounded and inert in the page
2026-09-30 15:49:30 +02:00
Make app capability rules data instead of code
2026-09-06 23:58:58 +02:00
OAuth callback: mode and provider role decide what a completion mints
2026-10-19 13:23:53 +02:00
Signing key path: absolute only, and no error carries the path
2026-09-30 14:40:07 +02:00
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
readSecretInput: never print the path, refuse relative paths and blank secrets
2026-09-30 13:50:53 +02:00
Add read-only Heimdall Eve witness advertisement
2026-06-03 03:21:31 +01:00
Expose provider health public identity
2026-08-22 02:35:20 +02:00
Normalize Heimdall claim fact vocabulary
2026-04-26 14:58:58 +01:00
Publish runtime presence in the contract Odin admits
2026-09-07 22:19:51 +02:00
Follow CultLib's package rename and select workspaces by path
2026-09-07 22:26:24 +02:00
Publish runtime presence in the contract Odin admits
2026-09-07 22:19:51 +02:00
Refresh: one attempt per identity per process; waiters share its outcome
2026-10-19 12:34:39 +02:00
Token set check: drop the array clause the access_token check already decides
2026-10-19 12:44:20 +02:00
Follow CultLib's package rename and select workspaces by path
2026-09-07 22:26:24 +02:00
Audit events never carry a completion code
2026-09-30 18:56:35 +02:00
Add Eve access plugin and private auth plane
2026-08-22 00:44:57 +02:00
Retract the CultLib divergence claim; read each .cc with the right client
2026-09-06 19:11:19 +02:00
Follow CultLib's package rename and select workspaces by path
2026-09-07 22:26:24 +02:00
Add Joystick as a confidential, rotating managed-connection provider
2026-10-19 11:13:40 +02:00
Publish runtime presence in the contract Odin admits
2026-09-07 22:19:51 +02:00
Signing key path: absolute only, and no error carries the path
2026-09-30 14:40:07 +02:00
Register apps at runtime instead of at build time
2026-09-07 00:11:41 +02:00
Honour the Idunn process write lease, and stop claiming active while warming
2026-09-06 02:25:38 +02:00
Register apps at runtime instead of at build time
2026-09-07 00:11:41 +02:00
79ea0007d3