@getstrata/core 0.5.87 → 0.5.88

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # @getstrata/core changelog
 
+## 0.5.88
+
+- Exported cookie name constants (`SESSION_COOKIE`, `CSRF_COOKIE`, `FLASH_COOKIE`, `INTENDED_URL_COOKIE`, `PASSWORD_CONFIRM_COOKIE`) are `appCookieName(...)` so they match the default prefix instead of a hardcoded `workhub_` string.
+- `@getstrata/core/jobs/dispatchWebhookJob` is a deprecated compatibility re-export of the WorkHub webhook job.
+
 ## 0.5.87
 
 - `AuthUserDirectory.hasActiveBrowserSession?(userId, issuedAt)` is optional. `SessionGuard` calls it after `session_valid_after` and rejects the HMAC cookie when it returns false so WorkHub can revoke a single browser session by deleting the `sessions` row.

package/README.md

@@ -82,7 +82,7 @@ import type { Migration } from "@getstrata/core/database/migrations/types";
 Package name: **`@getstrata/core`** (npm org [`@getstrata`](https://www.npmjs.com/org/getstrata)).
 
 1. Add `NPM_TOKEN` to GitHub repository secrets.
-2. Tag a release: `git tag v0.5.92 && git push origin v0.5.92`
+2. Tag a release: `git tag v0.5.93 && git push origin v0.5.93`
 3. [Release workflow](../../.github/workflows/release.yml) builds and runs `npm publish --access public`.
 
 Previously published as `@eyk-workhub/framework@0.1.0`, deprecated in favor of this package.

package/dist/core/auth/intendedUrlCookie.d.ts

@@ -1,4 +1,4 @@
-declare const INTENDED_URL_COOKIE = "workhub_intended";
+declare const INTENDED_URL_COOKIE: string;
 declare const DEFAULT_INTENDED_URL_TTL_SECONDS: number;
 declare function intendedUrlCookieName(): string;
 declare function intendedUrlTtlSeconds(): number;

package/dist/core/auth/passwordConfirmCookie.d.ts

@@ -1,4 +1,4 @@
-declare const PASSWORD_CONFIRM_COOKIE = "workhub_password_confirmed";
+declare const PASSWORD_CONFIRM_COOKIE: string;
 declare const DEFAULT_PASSWORD_CONFIRM_TTL_SECONDS: number;
 declare function passwordConfirmCookieName(): string;
 declare function passwordConfirmTtlSeconds(): number;

package/dist/core/auth/sessionCookie.d.ts

@@ -1,4 +1,4 @@
-declare const SESSION_COOKIE = "workhub_session";
+declare const SESSION_COOKIE: string;
 declare const SESSION_TTL_SECONDS: number;
 declare const SESSION_REMEMBER_TTL_SECONDS: number;
 interface CreateSessionCookieOptions {

package/dist/core/http/csrfToken.d.ts

@@ -1,4 +1,4 @@
-declare const CSRF_COOKIE = "workhub_csrf";
+declare const CSRF_COOKIE: string;
 declare function csrfCookieName(): string;
 declare function createCsrfTokenCookie(): {
     token: string;

package/dist/core/http/flashSession.d.ts

@@ -1,4 +1,4 @@
-declare const FLASH_COOKIE = "workhub_flash";
+declare const FLASH_COOKIE: string;
 declare function flashCookieName(): string;
 type FlashLevel = "success" | "error" | "info";
 interface FlashMessage {

package/dist/core/jobs/dispatchWebhookJob.d.ts

@@ -1 +1,2 @@
+/** @deprecated Import `DispatchWebhookJob` from the app webhook module. This path is a compatibility re-export. */
 export { DispatchWebhookJob, type DispatchWebhookPayload, default, } from "../../modules/webhook/dispatchWebhookJob";

package/dist/entries/auth/intendedUrlCookie.js

@@ -87,7 +87,7 @@ function sdkClientClassName() {
 }
 
 // ../../src/core/auth/intendedUrlCookie.ts
-var INTENDED_URL_COOKIE = "workhub_intended";
+var INTENDED_URL_COOKIE = appCookieName("intended");
 var DEFAULT_INTENDED_URL_TTL_SECONDS = 60 * 60 * 24;
 var SKIP_EXACT_PATHS = new Set([
   "/email/verify",

package/dist/entries/auth/passwordConfirmCookie.js

@@ -57,7 +57,7 @@ function sdkClientClassName() {
 }
 
 // ../../src/core/auth/passwordConfirmCookie.ts
-var PASSWORD_CONFIRM_COOKIE = "workhub_password_confirmed";
+var PASSWORD_CONFIRM_COOKIE = appCookieName("password_confirmed");
 var DEFAULT_PASSWORD_CONFIRM_TTL_SECONDS = 3 * 60 * 60;
 function passwordConfirmCookieName() {
   return process.env.PASSWORD_CONFIRM_COOKIE_NAME?.trim() || appCookieName("password_confirmed");

package/dist/entries/auth/sessionCookie.js

@@ -57,7 +57,7 @@ function sdkClientClassName() {
 }
 
 // ../../src/core/auth/sessionCookie.ts
-var SESSION_COOKIE = "workhub_session";
+var SESSION_COOKIE = appCookieName("session");
 var SESSION_TTL_SECONDS = 60 * 60 * 24 * 7;
 var SESSION_REMEMBER_TTL_SECONDS = 60 * 60 * 24 * 30;
 function sessionCookieName() {

package/dist/entries/auth/sessionGuard.js

@@ -142,7 +142,7 @@ function sdkClientClassName() {
 }
 
 // ../../src/core/auth/sessionCookie.ts
-var SESSION_COOKIE = "workhub_session";
+var SESSION_COOKIE = appCookieName("session");
 var SESSION_TTL_SECONDS = 60 * 60 * 24 * 7;
 var SESSION_REMEMBER_TTL_SECONDS = 60 * 60 * 24 * 30;
 function sessionCookieName() {

package/dist/entries/http/csrfMiddleware.js

@@ -114,7 +114,7 @@ function currentRequestMeta() {
 }
 
 // ../../src/core/http/csrfToken.ts
-var CSRF_COOKIE = "workhub_csrf";
+var CSRF_COOKIE = appCookieName("csrf");
 var CSRF_TTL_MS = 60 * 60 * 1000;
 function csrfCookieName() {
   return process.env.CSRF_COOKIE_NAME?.trim() || appCookieName("csrf");

package/dist/entries/http/csrfToken.js

@@ -111,7 +111,7 @@ function currentRequestMeta() {
 }
 
 // ../../src/core/http/csrfToken.ts
-var CSRF_COOKIE = "workhub_csrf";
+var CSRF_COOKIE = appCookieName("csrf");
 var CSRF_TTL_MS = 60 * 60 * 1000;
 function csrfCookieName() {
   return process.env.CSRF_COOKIE_NAME?.trim() || appCookieName("csrf");

package/dist/entries/http/flashMiddleware.js

@@ -57,7 +57,7 @@ function sdkClientClassName() {
 }
 
 // ../../src/core/http/flashSession.ts
-var FLASH_COOKIE = "workhub_flash";
+var FLASH_COOKIE = appCookieName("flash");
 var FLASH_TTL_MS = 60 * 1000;
 function flashCookieName() {
   return process.env.FLASH_COOKIE_NAME?.trim() || appCookieName("flash");

package/dist/entries/http/flashSession.js

@@ -57,7 +57,7 @@ function sdkClientClassName() {
 }
 
 // ../../src/core/http/flashSession.ts
-var FLASH_COOKIE = "workhub_flash";
+var FLASH_COOKIE = appCookieName("flash");
 var FLASH_TTL_MS = 60 * 1000;
 function flashCookieName() {
   return process.env.FLASH_COOKIE_NAME?.trim() || appCookieName("flash");

package/dist/entries/openapi/generator.js

@@ -71,6 +71,8 @@ var PUBLIC_ROUTE_DESCRIPTIONS = {
   "GET /users/me/invitations": "List pending team invitations for the signed-in email",
   "POST /users/me/invitations/:id/accept": "Accept a pending team invitation",
   "DELETE /users/me/invitations/:id": "Decline a pending team invitation",
+  "GET /users/me/sessions": "List active browser sessions for the signed-in user",
+  "DELETE /users/me/sessions/:id": "Revoke one browser session (HMAC cookie then fails SessionGuard)",
   "DELETE /users/me": "GDPR account erasure (anonymize user, revoke tokens)",
   "GET /organizations": "List organizations",
   "POST /organizations": "Create organization",

package/dist/entries/view.js

@@ -493,7 +493,7 @@ function currentRequestMeta3() {
 }
 
 // ../../src/core/http/csrfToken.ts
-var CSRF_COOKIE = "workhub_csrf";
+var CSRF_COOKIE = appCookieName("csrf");
 var CSRF_TTL_MS = 60 * 60 * 1000;
 function csrfCookieName() {
   return process.env.CSRF_COOKIE_NAME?.trim() || appCookieName("csrf");
@@ -576,7 +576,7 @@ function resolveCsrfTokenForRequest(request) {
 
 // ../../src/core/http/flashSession.ts
 import { createHmac, timingSafeEqual as timingSafeEqual2 } from "crypto";
-var FLASH_COOKIE = "workhub_flash";
+var FLASH_COOKIE = appCookieName("flash");
 var FLASH_TTL_MS = 60 * 1000;
 function flashCookieName() {
   return process.env.FLASH_COOKIE_NAME?.trim() || appCookieName("flash");

package/dist/index.js

@@ -4576,6 +4576,7 @@ function currentRequestMeta() {
 }
 
 // ../../src/core/http/csrfToken.ts
+var CSRF_COOKIE = appCookieName("csrf");
 var CSRF_TTL_MS = 60 * 60 * 1000;
 function csrfCookieName() {
   return process.env.CSRF_COOKIE_NAME?.trim() || appCookieName("csrf");
@@ -4707,6 +4708,7 @@ function createCsrfProtection(secret, options = {}) {
 }
 // ../../src/core/http/flashSession.ts
 import { createHmac, timingSafeEqual as timingSafeEqual3 } from "crypto";
+var FLASH_COOKIE = appCookieName("flash");
 var FLASH_TTL_MS = 60 * 1000;
 function flashCookieName() {
   return process.env.FLASH_COOKIE_NAME?.trim() || appCookieName("flash");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/core",
-  "version": "0.5.87",
+  "version": "0.5.88",
   "description": "Strata — Laravel-inspired Bun framework public API",
   "type": "module",
   "license": "MIT",