@camstack/addon-auth 1.2.156 → 1.2.157

package/dist/webauthn/{_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-CUaB93Rh.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-BIwATeJB.mjs}

@@ -3,7 +3,7 @@ import "./dist-CYZr2fwk.mjs";
 var e = {
 	"@camstack/sdk": {
 		name: "@camstack/sdk",
-		version: "1.2.141",
+		version: "1.2.142",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.391",
+		version: "1.2.392",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.308",
+		version: "1.2.309",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",

package/dist/webauthn/auth-webauthn.addon.js

@@ -12118,12 +12118,9 @@ async function hubBrowserOrigin(localNetwork, logger) {
 //#endregion
 //#region src/webauthn/record-kinds.ts
 /**
-* Record kinds owned by `auth-webauthn` (records plan phase 6 / §2.8).
-*
-* Legacy tables are OPERATOR-ONLY drop after verify — never the orphan job.
+* Record kinds owned by `auth-webauthn` (records plan phase 6 / §2.8). The
+* legacy `auth-webauthn:*` collections they replaced are gone (D900).
 */
-var USER_PASSKEYS_LEGACY = "auth-webauthn:user_passkeys";
-var USER_PASSKEY_PREFS_LEGACY = "auth-webauthn:user_passkey_prefs";
 var PasskeyBodySchema = require_dist.object({
 	credentialId: require_dist.string(),
 	userId: require_dist.string(),
@@ -12166,86 +12163,10 @@ var authWebauthnRecordKinds = require_dist.defineRecordKinds({
 });
 //#endregion
 //#region src/webauthn/passkey-store.ts
-var COLLECTION = "auth-webauthn:user_passkeys";
-var PREF_COLLECTION = "auth-webauthn:user_passkey_prefs";
-var PREF_COLUMNS = [
-	{
-		name: "userId",
-		type: "TEXT",
-		primaryKey: true,
-		notNull: true
-	},
-	{
-		name: "secondFactorEnabled",
-		type: "BOOLEAN",
-		notNull: true
-	},
-	{
-		name: "updatedAt",
-		type: "INTEGER",
-		notNull: true
-	}
-];
 var StoredPreferenceSchema = require_dist.object({
 	secondFactorEnabled: require_dist.boolean(),
 	updatedAt: require_dist.number()
 });
-var COLUMNS = [
-	{
-		name: "credentialId",
-		type: "TEXT",
-		primaryKey: true,
-		notNull: true
-	},
-	{
-		name: "userId",
-		type: "TEXT",
-		notNull: true
-	},
-	{
-		name: "publicKey",
-		type: "TEXT",
-		notNull: true
-	},
-	{
-		name: "counter",
-		type: "INTEGER",
-		notNull: true
-	},
-	{
-		name: "transports",
-		type: "JSON"
-	},
-	{
-		name: "label",
-		type: "TEXT",
-		notNull: true
-	},
-	{
-		name: "createdAt",
-		type: "INTEGER",
-		notNull: true
-	},
-	{
-		name: "lastUsedAt",
-		type: "INTEGER"
-	}
-];
-async function declarePasskeySchema(store, options) {
-	const skip = new Set(options?.skipCollections ?? []);
-	if (!skip.has(COLLECTION)) await store.declareCollection.mutate({
-		collection: COLLECTION,
-		columns: COLUMNS,
-		indexes: [{
-			name: "idx_user_passkeys_user_id",
-			columns: ["userId"]
-		}]
-	});
-	if (!skip.has(PREF_COLLECTION)) await store.declareCollection.mutate({
-		collection: PREF_COLLECTION,
-		columns: PREF_COLUMNS
-	});
-}
 function parseRow(data) {
 	const credentialId = data["credentialId"];
 	const userId = data["userId"];
@@ -12291,66 +12212,34 @@ function rowToPasskey(id, body) {
 		...rest
 	});
 }
+/** The passkeys of every user, on `ctx.records` (D900: the legacy collections are gone). */
 var PasskeyStore = class {
 	passkeysKind;
 	prefsKind;
-	store;
 	constructor(deps) {
-		if ("passkeysKind" in deps) {
-			this.passkeysKind = deps.passkeysKind;
-			this.prefsKind = deps.prefsKind;
-			this.store = deps.legacyStore ?? null;
-		} else {
-			this.passkeysKind = null;
-			this.prefsKind = null;
-			this.store = deps;
-		}
+		this.passkeysKind = deps.passkeysKind;
+		this.prefsKind = deps.prefsKind;
 	}
 	async insert(pk) {
-		const kind = this.passkeysKind;
-		if (kind !== null) {
-			const parsed = authWebauthnRecordKinds.passkeys.schema.safeParse(pkToBody(pk));
-			if (!parsed.success) throw new Error(parsed.error.message);
-			await kind.put({
-				id: pk.credentialId,
-				data: parsed.data
-			});
-			return;
-		}
-		await this.store.insert.mutate({
-			collection: COLLECTION,
-			record: {
-				id: pk.credentialId,
-				data: { ...pk }
-			}
+		const parsed = authWebauthnRecordKinds.passkeys.schema.safeParse(pkToBody(pk));
+		if (!parsed.success) throw new Error(parsed.error.message);
+		await this.passkeysKind.put({
+			id: pk.credentialId,
+			data: parsed.data
 		});
 	}
 	async findByCredentialId(credentialId) {
-		const kind = this.passkeysKind;
-		if (kind !== null) {
-			const row = (await kind.query({
-				where: { credentialId },
-				limit: 1
-			})).records[0];
-			return row === void 0 ? null : rowToPasskey(row.id, row.data);
-		}
-		const results = await this.store.query.query({
-			collection: COLLECTION,
-			filter: { where: { credentialId } }
-		});
-		if (results.length === 0) return null;
-		return parseRow(results[0].data);
+		const row = (await this.passkeysKind.query({
+			where: { credentialId },
+			limit: 1
+		})).records[0];
+		return row === void 0 ? null : rowToPasskey(row.id, row.data);
 	}
 	async findByUserId(userId) {
-		const kind = this.passkeysKind;
-		if (kind !== null) return (await kind.query({
+		return (await this.passkeysKind.query({
 			where: { userId },
 			limit: 500
 		})).records.map((row) => rowToPasskey(row.id, row.data));
-		return (await this.store.query.query({
-			collection: COLLECTION,
-			filter: { where: { userId } }
-		})).map((r) => parseRow(r.data));
 	}
 	async updateCounter(credentialId, counter) {
 		const existing = await this.findByCredentialId(credentialId);
@@ -12360,45 +12249,19 @@ var PasskeyStore = class {
 			counter,
 			lastUsedAt: Date.now()
 		};
-		const kind = this.passkeysKind;
-		if (kind !== null) {
-			const parsed = authWebauthnRecordKinds.passkeys.schema.safeParse(pkToBody(next));
-			if (!parsed.success) return;
-			await kind.put({
-				id: credentialId,
-				data: parsed.data
-			});
-			return;
-		}
-		await this.store.update.mutate({
-			collection: COLLECTION,
+		const parsed = authWebauthnRecordKinds.passkeys.schema.safeParse(pkToBody(next));
+		if (!parsed.success) return;
+		await this.passkeysKind.put({
 			id: credentialId,
-			data: { ...next }
+			data: parsed.data
 		});
 	}
 	async delete(credentialId) {
-		const kind = this.passkeysKind;
-		if (kind !== null) {
-			await kind.delete(credentialId);
-			return;
-		}
-		await this.store.delete.mutate({
-			collection: COLLECTION,
-			key: credentialId
-		});
+		await this.passkeysKind.delete(credentialId);
 	}
 	async getSecondFactorPreference(userId) {
-		const prefsKind = this.prefsKind;
-		if (prefsKind !== null) {
-			const row = await prefsKind.get(userId);
-			const parsed = StoredPreferenceSchema.safeParse(row?.data);
-			return parsed.success ? parsed.data.secondFactorEnabled : false;
-		}
-		const raw = await this.store.get.query({
-			collection: PREF_COLLECTION,
-			key: userId
-		});
-		const parsed = StoredPreferenceSchema.safeParse(raw);
+		const row = await this.prefsKind.get(userId);
+		const parsed = StoredPreferenceSchema.safeParse(row?.data);
 		return parsed.success ? parsed.data.secondFactorEnabled : false;
 	}
 	async setSecondFactorPreference(userId, enabled) {
@@ -12406,20 +12269,11 @@ var PasskeyStore = class {
 			secondFactorEnabled: enabled,
 			updatedAt: Date.now()
 		};
-		const prefsKind = this.prefsKind;
-		if (prefsKind !== null) {
-			const parsed = authWebauthnRecordKinds["passkey-prefs"].schema.safeParse(value);
-			if (!parsed.success) throw new Error(parsed.error.message);
-			await prefsKind.put({
-				id: userId,
-				data: parsed.data
-			});
-			return;
-		}
-		await this.store.set.mutate({
-			collection: PREF_COLLECTION,
-			key: userId,
-			value
+		const parsed = authWebauthnRecordKinds["passkey-prefs"].schema.safeParse(value);
+		if (!parsed.success) throw new Error(parsed.error.message);
+		await this.prefsKind.put({
+			id: userId,
+			data: parsed.data
 		});
 	}
 };
@@ -12601,15 +12455,12 @@ var AuthWebauthnAddon = class extends require_dist.BaseAddon {
 		super({ ...DEFAULT_CONFIG });
 	}
 	async onInitialize() {
-		const settingsStore = this.ctx.api?.settingsStore;
 		const records = this.ctx.records;
-		if (!settingsStore || !records) throw new Error("addon-auth-webauthn: settingsStore and ctx.records required (phase 6)");
+		if (!records) throw new Error("addon-auth-webauthn: ctx.records required");
 		await records.declare(authWebauthnRecordKinds);
-		await declarePasskeySchema(settingsStore, { skipCollections: [USER_PASSKEYS_LEGACY, USER_PASSKEY_PREFS_LEGACY] });
 		this.store = new PasskeyStore({
 			passkeysKind: records.kind(authWebauthnRecordKinds.passkeys),
-			prefsKind: records.kind(authWebauthnRecordKinds["passkey-prefs"]),
-			legacyStore: settingsStore
+			prefsKind: records.kind(authWebauthnRecordKinds["passkey-prefs"])
 		});
 		const provider = {
 			beginRegistration: async ({ userId, username }) => this.beginRegistration(userId, username),

package/dist/webauthn/auth-webauthn.addon.mjs

@@ -12145,12 +12145,9 @@ async function hubBrowserOrigin(localNetwork, logger) {
 //#endregion
 //#region src/webauthn/record-kinds.ts
 /**
-* Record kinds owned by `auth-webauthn` (records plan phase 6 / §2.8).
-*
-* Legacy tables are OPERATOR-ONLY drop after verify — never the orphan job.
+* Record kinds owned by `auth-webauthn` (records plan phase 6 / §2.8). The
+* legacy `auth-webauthn:*` collections they replaced are gone (D900).
 */
-var USER_PASSKEYS_LEGACY = "auth-webauthn:user_passkeys";
-var USER_PASSKEY_PREFS_LEGACY = "auth-webauthn:user_passkey_prefs";
 var PasskeyBodySchema = object({
 	credentialId: string(),
 	userId: string(),
@@ -12193,86 +12190,10 @@ var authWebauthnRecordKinds = defineRecordKinds({
 });
 //#endregion
 //#region src/webauthn/passkey-store.ts
-var COLLECTION = "auth-webauthn:user_passkeys";
-var PREF_COLLECTION = "auth-webauthn:user_passkey_prefs";
-var PREF_COLUMNS = [
-	{
-		name: "userId",
-		type: "TEXT",
-		primaryKey: true,
-		notNull: true
-	},
-	{
-		name: "secondFactorEnabled",
-		type: "BOOLEAN",
-		notNull: true
-	},
-	{
-		name: "updatedAt",
-		type: "INTEGER",
-		notNull: true
-	}
-];
 var StoredPreferenceSchema = object({
 	secondFactorEnabled: boolean(),
 	updatedAt: number()
 });
-var COLUMNS = [
-	{
-		name: "credentialId",
-		type: "TEXT",
-		primaryKey: true,
-		notNull: true
-	},
-	{
-		name: "userId",
-		type: "TEXT",
-		notNull: true
-	},
-	{
-		name: "publicKey",
-		type: "TEXT",
-		notNull: true
-	},
-	{
-		name: "counter",
-		type: "INTEGER",
-		notNull: true
-	},
-	{
-		name: "transports",
-		type: "JSON"
-	},
-	{
-		name: "label",
-		type: "TEXT",
-		notNull: true
-	},
-	{
-		name: "createdAt",
-		type: "INTEGER",
-		notNull: true
-	},
-	{
-		name: "lastUsedAt",
-		type: "INTEGER"
-	}
-];
-async function declarePasskeySchema(store, options) {
-	const skip = new Set(options?.skipCollections ?? []);
-	if (!skip.has(COLLECTION)) await store.declareCollection.mutate({
-		collection: COLLECTION,
-		columns: COLUMNS,
-		indexes: [{
-			name: "idx_user_passkeys_user_id",
-			columns: ["userId"]
-		}]
-	});
-	if (!skip.has(PREF_COLLECTION)) await store.declareCollection.mutate({
-		collection: PREF_COLLECTION,
-		columns: PREF_COLUMNS
-	});
-}
 function parseRow(data) {
 	const credentialId = data["credentialId"];
 	const userId = data["userId"];
@@ -12318,66 +12239,34 @@ function rowToPasskey(id, body) {
 		...rest
 	});
 }
+/** The passkeys of every user, on `ctx.records` (D900: the legacy collections are gone). */
 var PasskeyStore = class {
 	passkeysKind;
 	prefsKind;
-	store;
 	constructor(deps) {
-		if ("passkeysKind" in deps) {
-			this.passkeysKind = deps.passkeysKind;
-			this.prefsKind = deps.prefsKind;
-			this.store = deps.legacyStore ?? null;
-		} else {
-			this.passkeysKind = null;
-			this.prefsKind = null;
-			this.store = deps;
-		}
+		this.passkeysKind = deps.passkeysKind;
+		this.prefsKind = deps.prefsKind;
 	}
 	async insert(pk) {
-		const kind = this.passkeysKind;
-		if (kind !== null) {
-			const parsed = authWebauthnRecordKinds.passkeys.schema.safeParse(pkToBody(pk));
-			if (!parsed.success) throw new Error(parsed.error.message);
-			await kind.put({
-				id: pk.credentialId,
-				data: parsed.data
-			});
-			return;
-		}
-		await this.store.insert.mutate({
-			collection: COLLECTION,
-			record: {
-				id: pk.credentialId,
-				data: { ...pk }
-			}
+		const parsed = authWebauthnRecordKinds.passkeys.schema.safeParse(pkToBody(pk));
+		if (!parsed.success) throw new Error(parsed.error.message);
+		await this.passkeysKind.put({
+			id: pk.credentialId,
+			data: parsed.data
 		});
 	}
 	async findByCredentialId(credentialId) {
-		const kind = this.passkeysKind;
-		if (kind !== null) {
-			const row = (await kind.query({
-				where: { credentialId },
-				limit: 1
-			})).records[0];
-			return row === void 0 ? null : rowToPasskey(row.id, row.data);
-		}
-		const results = await this.store.query.query({
-			collection: COLLECTION,
-			filter: { where: { credentialId } }
-		});
-		if (results.length === 0) return null;
-		return parseRow(results[0].data);
+		const row = (await this.passkeysKind.query({
+			where: { credentialId },
+			limit: 1
+		})).records[0];
+		return row === void 0 ? null : rowToPasskey(row.id, row.data);
 	}
 	async findByUserId(userId) {
-		const kind = this.passkeysKind;
-		if (kind !== null) return (await kind.query({
+		return (await this.passkeysKind.query({
 			where: { userId },
 			limit: 500
 		})).records.map((row) => rowToPasskey(row.id, row.data));
-		return (await this.store.query.query({
-			collection: COLLECTION,
-			filter: { where: { userId } }
-		})).map((r) => parseRow(r.data));
 	}
 	async updateCounter(credentialId, counter) {
 		const existing = await this.findByCredentialId(credentialId);
@@ -12387,45 +12276,19 @@ var PasskeyStore = class {
 			counter,
 			lastUsedAt: Date.now()
 		};
-		const kind = this.passkeysKind;
-		if (kind !== null) {
-			const parsed = authWebauthnRecordKinds.passkeys.schema.safeParse(pkToBody(next));
-			if (!parsed.success) return;
-			await kind.put({
-				id: credentialId,
-				data: parsed.data
-			});
-			return;
-		}
-		await this.store.update.mutate({
-			collection: COLLECTION,
+		const parsed = authWebauthnRecordKinds.passkeys.schema.safeParse(pkToBody(next));
+		if (!parsed.success) return;
+		await this.passkeysKind.put({
 			id: credentialId,
-			data: { ...next }
+			data: parsed.data
 		});
 	}
 	async delete(credentialId) {
-		const kind = this.passkeysKind;
-		if (kind !== null) {
-			await kind.delete(credentialId);
-			return;
-		}
-		await this.store.delete.mutate({
-			collection: COLLECTION,
-			key: credentialId
-		});
+		await this.passkeysKind.delete(credentialId);
 	}
 	async getSecondFactorPreference(userId) {
-		const prefsKind = this.prefsKind;
-		if (prefsKind !== null) {
-			const row = await prefsKind.get(userId);
-			const parsed = StoredPreferenceSchema.safeParse(row?.data);
-			return parsed.success ? parsed.data.secondFactorEnabled : false;
-		}
-		const raw = await this.store.get.query({
-			collection: PREF_COLLECTION,
-			key: userId
-		});
-		const parsed = StoredPreferenceSchema.safeParse(raw);
+		const row = await this.prefsKind.get(userId);
+		const parsed = StoredPreferenceSchema.safeParse(row?.data);
 		return parsed.success ? parsed.data.secondFactorEnabled : false;
 	}
 	async setSecondFactorPreference(userId, enabled) {
@@ -12433,20 +12296,11 @@ var PasskeyStore = class {
 			secondFactorEnabled: enabled,
 			updatedAt: Date.now()
 		};
-		const prefsKind = this.prefsKind;
-		if (prefsKind !== null) {
-			const parsed = authWebauthnRecordKinds["passkey-prefs"].schema.safeParse(value);
-			if (!parsed.success) throw new Error(parsed.error.message);
-			await prefsKind.put({
-				id: userId,
-				data: parsed.data
-			});
-			return;
-		}
-		await this.store.set.mutate({
-			collection: PREF_COLLECTION,
-			key: userId,
-			value
+		const parsed = authWebauthnRecordKinds["passkey-prefs"].schema.safeParse(value);
+		if (!parsed.success) throw new Error(parsed.error.message);
+		await this.prefsKind.put({
+			id: userId,
+			data: parsed.data
 		});
 	}
 };
@@ -12591,15 +12445,12 @@ var AuthWebauthnAddon = class extends BaseAddon {
 		super({ ...DEFAULT_CONFIG });
 	}
 	async onInitialize() {
-		const settingsStore = this.ctx.api?.settingsStore;
 		const records = this.ctx.records;
-		if (!settingsStore || !records) throw new Error("addon-auth-webauthn: settingsStore and ctx.records required (phase 6)");
+		if (!records) throw new Error("addon-auth-webauthn: ctx.records required");
 		await records.declare(authWebauthnRecordKinds);
-		await declarePasskeySchema(settingsStore, { skipCollections: [USER_PASSKEYS_LEGACY, USER_PASSKEY_PREFS_LEGACY] });
 		this.store = new PasskeyStore({
 			passkeysKind: records.kind(authWebauthnRecordKinds.passkeys),
-			prefsKind: records.kind(authWebauthnRecordKinds["passkey-prefs"]),
-			legacyStore: settingsStore
+			prefsKind: records.kind(authWebauthnRecordKinds["passkey-prefs"])
 		});
 		const provider = {
 			beginRegistration: async ({ userId, username }) => this.beginRegistration(userId, username),

package/dist/webauthn/{hostInit-Dfl1FBoz.mjs → hostInit-V-UlvjJp.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.391",
+				version: "1.2.392",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -45,7 +45,7 @@ async function r() {
 				}
 			},
 			"@camstack/sdk": {
-				version: "1.2.141",
+				version: "1.2.142",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -81,7 +81,7 @@ async function r() {
 				}
 			},
 			"@camstack/ui-library": {
-				version: "1.2.308",
+				version: "1.2.309",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/webauthn/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-CUaB93Rh.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-BIwATeJB.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-auth",
-  "version": "1.2.156",
+  "version": "1.2.157",
   "description": "Authentication bundle — OIDC and WebAuthn/passkey. Multi-entry npm package shipping 2 addons under a single bundle; each addon keeps its own id, capabilities, and runner.",
   "keywords": [
     "camstack",