@getstrata/core 2.2.37 → 2.2.39

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @getstrata/core changelog
 
+## 2.2.39
+
+Fix published HTTP metrics registry identity: share root/subpath Prometheus state and preserve registry, class and bucket exports. Keep generated middleware/exporter observations consistent and extend installed Postgres/SQLite/MySQL HTTP regressions; no app bridge, schema change or collector-policy change.
+
+## 2.2.38
+
+Qualify packed OIDC and SAML callbacks across Postgres, SQLite and MySQL. Fix explicitly non-migrating local bootstrap provisioning, dialect-safe transactional SAML replay, verified bearer ACS recipient binding, and independent SAML Response Destination validation through a maintained parser. Fix owned listener/client address mismatches with typed generated native options and optional CLI HOST, retaining default production binding. Preserve existing generated auth, production guards, compiler/runtime assertions and coverage gates; live provider and deployment qualification remain separate.
+
 ## 2.2.37
 
 Fix MySQL repository entity-returning mutations with transaction-pinned readback, persisted keys/defaults, honest null and deletion outcomes, complete model event payloads and injected connection ownership. Preserve native Postgres/SQLite RETURNING and conditional affected-row metadata. Close owned generated OpenAPI and failed-job command applications on success and failure before exit; retain both command and cleanup errors. Add mandatory packaged MySQL production column-tenancy CLI and HTTP auth/SCIM acceptance with an owned DML-only account, unchanged route/spec/SDK contracts, native ORM regressions and cleanup tests. Records dogfood issues #232 and #233 without application SQL workarounds.

package/dist/core/auth/saml/samlServiceProvider.d.ts

@@ -10,6 +10,27 @@ interface SamlServiceProviderOptions {
     wantAuthnResponseSigned?: boolean;
     disableRequestedAuthnContext?: boolean;
 }
+interface VerifiedSamlAssertion {
+    Assertion?: {
+        $?: {
+            ID?: string;
+        };
+        Subject?: Array<{
+            SubjectConfirmation?: Array<{
+                $?: {
+                    Method?: string;
+                };
+                SubjectConfirmationData?: Array<{
+                    $?: {
+                        Recipient?: string;
+                        NotBefore?: string;
+                        NotOnOrAfter?: string;
+                    };
+                }>;
+            }>;
+        }>;
+    };
+}
 interface NodeSamlProfile {
     ID?: string;
     nameID?: string;
@@ -17,13 +38,8 @@ interface NodeSamlProfile {
     name?: string;
     issuer?: string;
     sessionIndex?: string | string[];
-    getAssertion?: () => {
-        Assertion?: {
-            $?: {
-                ID?: string;
-            };
-        };
-    };
+    getAssertion?: () => VerifiedSamlAssertion;
+    getSamlResponseXml?: () => string;
     [key: string]: unknown;
 }
 type NodeSamlClient = {