fix(deps): raise auth-public-client floor to ^0.5.1

.changeset/raise-auth-client-floor.md

@@ -0,0 +1,5 @@
+---
+"@tailor-platform/app-shell": patch
+---
+
+Raise the `@tailor-platform/auth-public-client` dependency floor from `^0.5.0` to `^0.5.1` so fresh installs cannot resolve the broken `0.5.0` release.

packages/core/package.json

@@ -54,7 +54,7 @@
     "@internationalized/date": "3.12.2",
     "@standard-schema/spec": "^1.1.0",
     "@tailor-platform/app-shell-vite-plugin": "workspace:*",
-    "@tailor-platform/auth-public-client": "^0.5.0",
+    "@tailor-platform/auth-public-client": "^0.5.1",
     "change-case": "^5.4.4",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",

pnpm-workspace.yaml

@@ -40,6 +40,12 @@ trustLockfile: true
 
 # Require packages to be published for at least 3 days before allowing install (default: 1 day)
 minimumReleaseAge: 4320
+# First-party Tailor packages are exempt from the maturity gate: the gate guards
+# against compromised third-party republishes, not packages we publish ourselves.
+# Note: this matches on package name (glob), so it exempts all versions, not a
+# specific one.
+minimumReleaseAgeExclude:
+  - "@tailor-platform/auth-public-client"
 
 # Deny all lifecycle scripts (postinstall, install, preinstall).
 # pnpm resolves optionalDependencies correctly so these fallback scripts are unnecessary.