@cross-deck/node - npm Package Compare versions

Comparing version 1.12.1 to 1.13.0

CHANGELOG.md

@@ -9,2 +9,6 @@ # Changelog
 
+## [1.13.0] — 2026-07-26
+
+- **Crossdeck Trust — the gate now carries the browser's human-proof token.** `GateInput` gains an optional `token`: pass the attestation minted by the Crossdeck Trust panel in the browser (`Crossdeck.trust.panel(...)` / `<CrossdeckTrust>` in `@cross-deck/web`) and `gate()` forwards it as `challengeToken` to `/v1/trust/gate`, completing the SDK-native round trip. A real browser carries one; a server-to-server bot has none — that absence is scored, and in strict mode (`requireHumanProof`) a tokenless + suspicious attempt is the confident block. Optional and fail-open: omitting it never blocks on its own, and `gate()` remains fail-open by contract (a glitch returns `{ action: "allow", degraded: true }`, never a throw or a false block).
+
 ## [1.12.1] — 2026-07-23
@@ -11,0 +15,0 @@

dist/auto-events/index.d.mts

@@ -1,2 +0,2 @@
-import { x as CrossdeckServer } from '../crossdeck-server-CuTGwrwx.mjs';
+import { x as CrossdeckServer } from '../crossdeck-server-CjnIok-o.mjs';
 import 'node:events';
@@ -3,0 +3,0 @@

dist/auto-events/index.d.ts

@@ -1,2 +0,2 @@
-import { x as CrossdeckServer } from '../crossdeck-server-CuTGwrwx.js';
+import { x as CrossdeckServer } from '../crossdeck-server-CjnIok-o.js';
 import 'node:events';
@@ -3,0 +3,0 @@

dist/index.d.mts

@@ -1,2 +0,2 @@
-export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as BlockVerdict, d as Breadcrumb, e as BreadcrumbCategory, f as BreadcrumbLevel, C as CROSSDECK_API_VERSION, g as CapturedError, h as Contract, i as ContractAppliesTo, j as ContractFailureInput, k as ContractPillar, l as ContractStatus, m as ContractTestRef, n as CrossdeckAuthenticationError, o as CrossdeckConfigurationError, p as CrossdeckContracts, q as CrossdeckError, r as CrossdeckErrorPayload, s as CrossdeckErrorType, t as CrossdeckInternalError, u as CrossdeckNetworkError, v as CrossdeckPermissionError, w as CrossdeckRateLimitError, x as CrossdeckServer, y as CrossdeckServerOptions, z as CrossdeckValidationError, D as DEFAULT_BASE_URL, E as DEFAULT_TIMEOUT_MS, F as Diagnostics, G as EntitlementCacheOptions, H as EntitlementMutationResult, I as EntitlementStore, J as EntitlementsListResponse, K as EntitlementsListener, L as Environment, M as ErrorCaptureConfig, N as ErrorLevel, O as EventProperties, P as ForgetResult, Q as GateInput, R as GateVerdict, S as GrantDuration, T as GrantEntitlementInput, U as GroupMembership, V as HeartbeatResponse, W as HttpRequestInfo, X as HttpResponseInfo, Y as HttpRetriesConfig, Z as IdentifyOptions, _ as IdentityHints, $ as IngestOptions, a0 as IngestResponse, a1 as OwnerStatusInput, a2 as PublicEntitlement, a3 as PurchaseResult, a4 as RequestOptions, a5 as ResolveInput, a6 as ResolveResult, a7 as RevokeEntitlementInput, a8 as RuntimeHost, a9 as RuntimeInfo, aa as ServerEvent, ab as StackFrame, ac as StoredEntitlements, ad as SyncPurchaseInput, ae as makeCrossdeckError } from './crossdeck-server-CuTGwrwx.mjs';
+export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as BlockVerdict, d as Breadcrumb, e as BreadcrumbCategory, f as BreadcrumbLevel, C as CROSSDECK_API_VERSION, g as CapturedError, h as Contract, i as ContractAppliesTo, j as ContractFailureInput, k as ContractPillar, l as ContractStatus, m as ContractTestRef, n as CrossdeckAuthenticationError, o as CrossdeckConfigurationError, p as CrossdeckContracts, q as CrossdeckError, r as CrossdeckErrorPayload, s as CrossdeckErrorType, t as CrossdeckInternalError, u as CrossdeckNetworkError, v as CrossdeckPermissionError, w as CrossdeckRateLimitError, x as CrossdeckServer, y as CrossdeckServerOptions, z as CrossdeckValidationError, D as DEFAULT_BASE_URL, E as DEFAULT_TIMEOUT_MS, F as Diagnostics, G as EntitlementCacheOptions, H as EntitlementMutationResult, I as EntitlementStore, J as EntitlementsListResponse, K as EntitlementsListener, L as Environment, M as ErrorCaptureConfig, N as ErrorLevel, O as EventProperties, P as ForgetResult, Q as GateInput, R as GateVerdict, S as GrantDuration, T as GrantEntitlementInput, U as GroupMembership, V as HeartbeatResponse, W as HttpRequestInfo, X as HttpResponseInfo, Y as HttpRetriesConfig, Z as IdentifyOptions, _ as IdentityHints, $ as IngestOptions, a0 as IngestResponse, a1 as OwnerStatusInput, a2 as PublicEntitlement, a3 as PurchaseResult, a4 as RequestOptions, a5 as ResolveInput, a6 as ResolveResult, a7 as RevokeEntitlementInput, a8 as RuntimeHost, a9 as RuntimeInfo, aa as ServerEvent, ab as StackFrame, ac as StoredEntitlements, ad as SyncPurchaseInput, ae as makeCrossdeckError } from './crossdeck-server-CjnIok-o.mjs';
 import 'node:events';
@@ -20,3 +20,3 @@
  */
-declare const SDK_VERSION = "1.12.1";
+declare const SDK_VERSION = "1.13.0";
 declare const SDK_NAME = "@cross-deck/node";
@@ -23,0 +23,0 @@

dist/index.d.ts

@@ -1,2 +0,2 @@
-export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as BlockVerdict, d as Breadcrumb, e as BreadcrumbCategory, f as BreadcrumbLevel, C as CROSSDECK_API_VERSION, g as CapturedError, h as Contract, i as ContractAppliesTo, j as ContractFailureInput, k as ContractPillar, l as ContractStatus, m as ContractTestRef, n as CrossdeckAuthenticationError, o as CrossdeckConfigurationError, p as CrossdeckContracts, q as CrossdeckError, r as CrossdeckErrorPayload, s as CrossdeckErrorType, t as CrossdeckInternalError, u as CrossdeckNetworkError, v as CrossdeckPermissionError, w as CrossdeckRateLimitError, x as CrossdeckServer, y as CrossdeckServerOptions, z as CrossdeckValidationError, D as DEFAULT_BASE_URL, E as DEFAULT_TIMEOUT_MS, F as Diagnostics, G as EntitlementCacheOptions, H as EntitlementMutationResult, I as EntitlementStore, J as EntitlementsListResponse, K as EntitlementsListener, L as Environment, M as ErrorCaptureConfig, N as ErrorLevel, O as EventProperties, P as ForgetResult, Q as GateInput, R as GateVerdict, S as GrantDuration, T as GrantEntitlementInput, U as GroupMembership, V as HeartbeatResponse, W as HttpRequestInfo, X as HttpResponseInfo, Y as HttpRetriesConfig, Z as IdentifyOptions, _ as IdentityHints, $ as IngestOptions, a0 as IngestResponse, a1 as OwnerStatusInput, a2 as PublicEntitlement, a3 as PurchaseResult, a4 as RequestOptions, a5 as ResolveInput, a6 as ResolveResult, a7 as RevokeEntitlementInput, a8 as RuntimeHost, a9 as RuntimeInfo, aa as ServerEvent, ab as StackFrame, ac as StoredEntitlements, ad as SyncPurchaseInput, ae as makeCrossdeckError } from './crossdeck-server-CuTGwrwx.js';
+export { A as AliasIdentityInput, a as AliasResult, b as AuditDecision, c as AuditEntry, B as BlockVerdict, d as Breadcrumb, e as BreadcrumbCategory, f as BreadcrumbLevel, C as CROSSDECK_API_VERSION, g as CapturedError, h as Contract, i as ContractAppliesTo, j as ContractFailureInput, k as ContractPillar, l as ContractStatus, m as ContractTestRef, n as CrossdeckAuthenticationError, o as CrossdeckConfigurationError, p as CrossdeckContracts, q as CrossdeckError, r as CrossdeckErrorPayload, s as CrossdeckErrorType, t as CrossdeckInternalError, u as CrossdeckNetworkError, v as CrossdeckPermissionError, w as CrossdeckRateLimitError, x as CrossdeckServer, y as CrossdeckServerOptions, z as CrossdeckValidationError, D as DEFAULT_BASE_URL, E as DEFAULT_TIMEOUT_MS, F as Diagnostics, G as EntitlementCacheOptions, H as EntitlementMutationResult, I as EntitlementStore, J as EntitlementsListResponse, K as EntitlementsListener, L as Environment, M as ErrorCaptureConfig, N as ErrorLevel, O as EventProperties, P as ForgetResult, Q as GateInput, R as GateVerdict, S as GrantDuration, T as GrantEntitlementInput, U as GroupMembership, V as HeartbeatResponse, W as HttpRequestInfo, X as HttpResponseInfo, Y as HttpRetriesConfig, Z as IdentifyOptions, _ as IdentityHints, $ as IngestOptions, a0 as IngestResponse, a1 as OwnerStatusInput, a2 as PublicEntitlement, a3 as PurchaseResult, a4 as RequestOptions, a5 as ResolveInput, a6 as ResolveResult, a7 as RevokeEntitlementInput, a8 as RuntimeHost, a9 as RuntimeInfo, aa as ServerEvent, ab as StackFrame, ac as StoredEntitlements, ad as SyncPurchaseInput, ae as makeCrossdeckError } from './crossdeck-server-CjnIok-o.js';
 import 'node:events';
@@ -20,3 +20,3 @@
  */
-declare const SDK_VERSION = "1.12.1";
+declare const SDK_VERSION = "1.13.0";
 declare const SDK_NAME = "@cross-deck/node";
@@ -23,0 +23,0 @@

package.json

 {
   "name": "@cross-deck/node",
-  "version": "1.12.1",
+  "version": "1.13.0",
   "description": "Crossdeck server SDK for Node.js — verified subscriptions, entitlements, server-side error capture, and product telemetry in one client.",
@@ -5,0 +5,0 @@ "license": "MIT",

New alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

1716425

0.19%

Lines of code

14505

0.12%

No dependency changes