From 263d9850259ee010d82ac757350565d75280101a Mon Sep 17 00:00:00 2001 From: Jurie Smit Date: Mon, 31 Aug 2026 01:20:15 +0200 Subject: [PATCH 1/2] feat(infra): add Tarmac to the mill.render audience allowlist Adds neuralliquid-tarmac-mill-s2s to mystira_oidc_render_audiences alongside the existing nexamesh-coiltrace-web entry, so Tarmac's new OpenIddict client-credentials client (companion PR in phoenixvc/mystira-workspace) can call Mill's LaTeX-render endpoints with a mill.render-scoped token. No dedicated resource audience was minted on the Mystira side, so this client's own client id is the value to allow here, matching the existing CoilTrace precedent. Co-Authored-By: Claude Sonnet 5 --- infra/env/prod/terraform.tfvars | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/env/prod/terraform.tfvars b/infra/env/prod/terraform.tfvars index 1425cdf..d5e7aac 100644 --- a/infra/env/prod/terraform.tfvars +++ b/infra/env/prod/terraform.tfvars @@ -57,7 +57,7 @@ mystira_oidc_audience = "celladore-xtox" # dedicated scope below. This does not broaden any other XtOX endpoint. mystira_oidc_delegated_audiences = "neuralliquid-convolens-web" mystira_oidc_transcription_scope = "mill.transcribe" -mystira_oidc_render_audiences = "nexamesh-coiltrace-web" +mystira_oidc_render_audiences = "nexamesh-coiltrace-web,neuralliquid-tarmac-mill-s2s" mystira_oidc_render_scope = "mill.render" api_custom_domain = "api.mill.celladoresystems.com" From 976a0fa5be030a3a7c133f50a22db3447db72d96 Mon Sep 17 00:00:00 2001 From: Jurie Smit Date: Wed, 2 Sep 2026 12:41:03 +0200 Subject: [PATCH 2/2] docs: correct stale publication-pending claim for @celladore/mill @celladore/mill@0.1.0 has been on the public npm registry since 2026-08-30; the CLI section still described publication as pending an auth/scope gate. Co-Authored-By: Claude Sonnet 5 --- README.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index e0e4d57..05114c6 100644 --- a/README.md +++ b/README.md @@ -19,9 +19,8 @@ The temporary npm identity is *@celladore/mill*. The bare *mill* package belongs to somebody else, so *npx mill* is not supported and must not be documented as a Mill command. -Registry publication is pending npm authentication and Celladore scope-control -verification. Until that gate passes, the commands below describe the approved -alpha surface but will not resolve from the public registry. +*@celladore/mill@0.1.0* is published on the public npm registry, so the commands +below resolve as documented. npx @celladore/mill init npx @celladore/mill inspect "voice notes/input.ogg"