v0.2.0: service principal tokens (verify, requireCapability guard with legacy-key compatibility and audit hook, caching client-credentials client), network.coins.transfer, coins capabilities act only for their own app_id

OP OpenVibers committed 22 Sept 2026 · tag v0.2.0 · 0 files, +0 −0

identity.service-token-claims 1.1.0 widens iss from a constant to any URI; receivers pass the issuer they expect.
compat.js treats dropping a const as widening (changing it to another value still breaks).

This commit has no diff to show.