cxtms 1.9.265 → 1.9.267

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cxtms",
-  "version": "1.9.265",
+  "version": "1.9.267",
   "description": "Schema validation package for CXTMS YAML modules",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/schemas/components/index.json

@@ -82,6 +82,7 @@
     "avatar": { "$ref": "avatar.json" },
     "infoLine": { "$ref": "infoLine.json" },
     "progressBar": { "$ref": "progressBar.json" },
-    "planner": { "$ref": "planner.json" }
+    "planner": { "$ref": "planner.json" },
+    "passkeys": { "$ref": "passkeys.json" }
   }
 }

package/schemas/components/passkeys.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Passkeys Component",
+  "description": "WebAuthn passkey credential manager for the authenticated user",
+  "type": "object",
+  "properties": {
+    "component": {
+      "type": "string",
+      "const": "passkeys"
+    },
+    "name": {
+      "type": "string",
+      "description": "Component name identifier"
+    },
+    "props": {
+      "type": "object",
+      "description": "Standard component properties; passkeys has no type-specific properties",
+      "additionalProperties": true
+    },
+    "children": {
+      "$ref": "../schemas.json#/definitions/componentChildren"
+    }
+  },
+  "required": ["component"],
+  "additionalProperties": false
+}

package/schemas/schema.graphql

@@ -168,7 +168,7 @@ type ApplicationUserRolesCollectionSegment {
 
 type AttachmentGqlDto {
   getParentOrder: order @cost(weight: "10")
-  getPresignedUri(expiresInDays: Int!, uriType: String!): String
+  getPresignedUri(expiresInDays: Int!, uriType: String!, download: Boolean = false): String
     @cost(weight: "10")
   attachmentId: Int!
   attachmentGuid: UUID

package/skills/cxtms-developer/ref-entity-shared.md

@@ -101,7 +101,7 @@ File attachments. `parentType`/`parentId` is the primary parent; an attachment c
 
 - `isImage`, `isPdf` — computed from extension
 - `presignedFileUri`, `presignedPreviewUri`, `presignedThumbnailUri` — signed URLs
-- `getPresignedUri(expiresInDays, uriType)` — custom resolver
+- `getPresignedUri(expiresInDays, uriType, download: false)` — custom resolver; pass `download: true` to return a signed URL with an attachment disposition and preserve the original file name
 - `getParentOrder` — resolve parent Order
 - `links { entityType entityId }` — all links, including the primary one
 - Filter by link: `attachments(filter: "orderLinks.orderId:123")` — also `contactLinks.contactId`, `jobLinks.jobId`, `trackingEventLinks.trackingEventId`

package/skills/cxtms-module-builder/SKILL.md

@@ -175,7 +175,7 @@ Read the relevant category ref file when building specific component types:
 | **Data Display** | `dataGrid`, `text`, `markup`, `badge`, `avatar`, `infoLine`, `progressBar`, `icon`, `image`, `photo`, `summary`, `diff`, `viewer`, `embed` | `skills/cxtms-module-builder/ref-components-display.md` |
 | **Interactive & Nav** | `button`, `dropdown`, `menuButton`, `link`, `redirect`, `navbar`, `navbarItem`, `navbarLink`, `navDropdown` | `skills/cxtms-module-builder/ref-components-interactive.md` |
 | **Data & Collections** | `collection`, `list`, `listItem`, `datasource`, `script` | `skills/cxtms-module-builder/ref-components-data.md` |
-| **Specialized** | `calendar`, `notes`, `dashboard`, `dashboard-widget`, `widget`, `timeline`, `timeline-grid`, `planner`, `oauth2` | `skills/cxtms-module-builder/ref-components-specialized.md` |
+| **Specialized** | `calendar`, `notes`, `dashboard`, `dashboard-widget`, `widget`, `timeline`, `timeline-grid`, `planner`, `oauth2`, `passkeys` | `skills/cxtms-module-builder/ref-components-specialized.md` |
 
 ### Templates
 

package/skills/cxtms-module-builder/ref-components-specialized.md

@@ -588,6 +588,22 @@ props:
 
 ---
 
+## passkeys
+
+Web-only WebAuthn credential manager for the authenticated user. It lists registered passkeys and supports registration, rename, and deletion.
+
+The component has no type-specific props. It renders its children above the credential manager, but renders nothing—including its children—when the tenant disables `enablePasskeys` or the browser lacks WebAuthn support. Native mobile does not currently render this component.
+
+```yaml
+component: passkeys
+name: AccountPasskeys
+children:
+  - component: text
+    name: Heading
+    props:
+      text: Passkeys
+```
+
 ## oauth2
 
 OAuth2 authorization flow button. Opens popup for auth, exchanges code for token.