nebula_token 1.0.3

Opaque rotating refresh tokens (RFC 9700 model): rotation, reuse detection, family revocation, sender binding.

Changelog

All notable changes to this project are documented in this file. The format follows Keep a Changelog and this project adheres to Semantic Versioning.

1.0.3 - 2026-08-06

No change to this package's behaviour, API or wire format. It is republished so that all ten packages carry one version, as VERSIONING.md section 2 requires.

1.0.2 - 2026-08-04

No change to this package's behaviour, API or wire format. It is republished so that all ten packages carry one version, as VERSIONING.md section 2 requires.

Fixed

• example/README.md printed a live rotated token to stdout — on the snippet pub.dev renders as the Example tab, and therefore the one adopters copy ([N-14], [N-46]). It prints the generation instead.

Changed

• The conformance runner executes the two new device_hashing cases (erratum E-1), including dh-09, whose supplementary-plane character is a surrogate pair in a Dart String.

1.0.1 - 2026-07-30

Release automation only; no change to this package's behaviour, API or wire format. Published because 1.0.0 reached only npm and PyPI before the release workflow failed, and neither permits republishing a used version number.

1.0.0 - 2026-07-30

Added

• NEBULA specification v1 (SPECIFICATION.md) and shared conformance test vectors.
• Reference implementations: TypeScript, Python, Go, Rust, Java (plain JDK bytecode, callable from any JVM language; tested from Java only), PHP, C#, Dart, Ruby, Elixir.
• Production-style SQL store templates (packages/*/examples/) and per-language agent skills (packages/<lang>/skills/nebula-token-<lang>/SKILL.md) for AI-assisted integration.
• Opaque selector/verifier tokens, rotation, reuse detection with optional grace window, family revocation, sender (device) binding, dual expiry clocks, pepper rotation via kid.