Adopt common-auth 0.43.0: shared sidebar package, enrollment name and vault connection swap through common-auth
Merged
AN
20h ago+212+212+012345678901234567890123456789-127-127-012345678901234567890123456789
Adopt common-auth 0.43.0: shared sidebar package, enrollment name and vault connection swap through common-auth. Worker delivery rebased onto main; see the commit messages.
Summary by cubic
Adopts @cortexkit/common-auth 0.43.0 and the new shared @cortexkit/opencode-sidebar package. Delegates enrollment display names and vault client replacement to common-auth, and changes how 401s are handled across a relay swap.
Behavior changes
- A single custody now handles relay replacement; the old client is closed only after the new one answers a roster read.
- Pre-swap receipts' 401s are reported through the replacement client; the same-version retry exception is removed, so only a strict newer record version retries.
- Enrollment display names flow through common-auth, which handles retrying on older vaults that reject the field.