@camstack/system 1.2.454 → 1.2.456

package/dist/builtins/local-auth/auth-schema.d.ts

@@ -12,7 +12,7 @@
 *   - scoped_tokens
 *   - oauth_sessions
 *   - login_sessions, login_session_cutoffs (`login-session-manager.ts`)
-*   - admin_tokens (`admin-token-manager.ts`), auth_audit (`auth-audit-log.ts`)
+*   - admin_tokens (`legacy-token-tables.ts`, read by nothing since D895), auth_audit (`auth-audit-log.ts`)
 *
 * Schema migration: when the backend receives `declareCollection` for
 * a name that already exists with a legacy `(id, data)` KV shape, the
@@ -44,12 +44,9 @@ export declare const USERS_COLLECTION = "users";
 export declare const API_KEYS_COLLECTION = "api_keys";
 /**
 * @durable class=config owner=local-auth
-*   write="an operator or the CLI mints a scoped token; `validate` fires
-*     `updateLastUsed` on every accepted call"
-*   retention="`revoke` deletes one. The daily sweep `reapExpired` drops rows past
-*     `expiresAt` — a NULL expiry is a deliberate never-expires token and BETWEEN
-*     never matches it. `cleanupOrphans` drops tokens owned by the legacy 'system'
-*     id or by a user that no longer exists."
+*   write="none since D895 — the pre-D892 scoped-token rows are kept on disk,
+*     read by nothing (a scoped token is a `credential-tokens` row)"
+*   retention="the operator drops the table by hand"
 */
 export declare const SCOPED_TOKENS_COLLECTION = "scoped_tokens";
 /**

package/dist/builtins/local-auth/local-auth.addon.d.ts

@@ -4,17 +4,16 @@ export declare class LocalAuthAddon extends BaseAddon {
 	private authManager;
 	private userManager;
 	private apiKeyManager;
-	private scopedTokenManager;
 	private oauthSessionManager;
 	private reapTimer;
 	private totpManager;
 	private externalIdentities;
 	private signingKeyKeeper;
 	private loginSessions;
-	private adminTokens;
 	private auditLog;
 	private deviceCredentials;
 	private deviceCa;
+	private preferences;
 	constructor();
 	protected onInitialize(): Promise<ProviderRegistration[]>;
 	private readDeviceCertificateSettings;
@@ -35,13 +34,13 @@ export declare class LocalAuthAddon extends BaseAddon {
 	*/
 	private endAllAccess;
 	/**
-	* Drop auth rows that are dead but were never removed: scoped tokens past
-	* their expiry, and OAuth sessions revoked longer ago than
-	* {@link OAUTH_REVOKED_RETENTION_MS}.
+	* Drop auth rows that are dead but were never removed: OAuth sessions
+	* revoked longer ago than {@link OAUTH_REVOKED_RETENTION_MS}, dead login
+	* sessions, old audit rows, dead device credentials. (Tokens are the hub's
+	* `credential-tokens` rows, reaped there.)
 	*
-	* Neither row could authorise anything — `validate` rejects an expired
-	* token, and every consumer treats a missing session exactly like a revoked
-	* one. So this is hygiene, and it is best-effort: a failed sweep is logged
+	* No such row could authorise anything — every consumer treats a missing
+	* session exactly like a revoked one. So this is hygiene, and it is best-effort: a failed sweep is logged
 	* and the next tick tries again. It must never be able to fail boot.
 	*/
 	private reapAuthRows;