release: 0.17.0 — session families and sign-out-everywhere

[mong-x]

Version bump + changelog for the merged CEL-1721/CEL-1722 work (#20, #21). Publishes @cellarnode/auth 0.17.0 via the publish workflow on merge. Unblocks consumer wiring (producer/elabel productFamily stores, sign-out-everywhere UI).

---

Summary by cubic

Prepares the 0.17.0 release of @cellarnode/auth: bumps the version in package.json and package-lock.json and adds the changelog for the merged session-family and sign-out-everywhere work (CEL-1721, CEL-1722). Publishing on merge so consumers can wire up producer/elabel product-family stores and the sign-out-everywhere UI.

Release contents

• createAuthStore accepts productFamily; producer and elabel tabs on the same origin rotate independent refresh cookies and stay signed in concurrently. Family-less stores keep the legacy wire shape.
• signOutEverywhere() calls POST /auth/sessions/revoke-all and clears local credentials, including on 401.
• Adds pinning tests for serialized/forced refresh so a late response can't resurrect a logged-out session or overwrite a newer token.

^{Written for commit d918b86. Summary will update on new commits.}

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 6f3ae011-5b20-4524-95b2-1426b1dcbf23

📥 Commits

Reviewing files that changed from the base of the PR and between 3b7496c and d918b86.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (2)

• CHANGELOG.md
• package.json

---

📝 Summary

Summary by CodeRabbit

• New Features
  • Added support for producer- and e-label-specific session families, including family-scoped refresh cookies.
  • Added getProductFamily() to identify the configured product family.
  • Added signOutEverywhere() to revoke all active sessions at once.
  • Existing family-less sessions continue using the legacy behavior.
• Chores
  • Updated the package version to 0.17.0.

Walkthrough

The release adds a 0.17.0 changelog entry and updates the package version from 0.16.0 to 0.17.0. The changelog documents session-family support, global sign-out, and refresh behavior tests.

Changes

Release metadata

Layer / File(s)	Summary
Versioned release notes and package version CHANGELOG.md, package.json	The changelog documents the 0.17.0 authentication changes and refresh tests. package.json sets the package version to 0.17.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch mjnong/release-0-17-0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the version line
New session notes are neatly aligned
Refreshes march in a careful queue
Global sign-out joins the view
The release burrow shines anew}

_{Comment @coderabbitai help to get the list of available commands.}