Vitris / Open source

Admin contracts.

Validated manifests, roles, permissions and shared module contracts.

Version 1.3.0 · MIT license · Node.js 24+

@tryvitris/website-admin-contracts

Source README ↗Package on npm ↗Release notes ↓

Validated installation manifests, roles, permissions and module contracts for @tryvitris/website-admin-harness. Node.js 24+. MIT licensed.

Release notes 1.3.0

· Stable

Named webmaster sign-on and linked logout

Shared admin-family release notes. This package ships as part of that release; package-specific changes are identified when supplied by the publisher.

  • Added opt-in named webmaster sign-on for one explicitly configured broker owner, with pinned installation identities and browser-bound PKCE, signed assertions and one-use authorization codes.
  • Added client-owner approval that maps the configured webmaster to an existing named local account. Each request uses that account's current approved permissions; sign-on does not create or promote accounts.
  • Linked client sessions check the original broker session on every authenticated request. Vitris logout, source-session expiry, revoked access or an unavailable broker ends linked access.
  • Kept individual sign-on revocation separate from organization reporting and billing. Disconnecting the organization revokes its named mappings and linked sessions.
  • Added optional migration 0013_webmaster_signon.sql and explicit identity, key, account-approval and recovery instructions. Existing installations retain normal login until deliberately configured.
All admin package releases →

Browse release history →