platform-types 1.10.743 → 1.10.744

package/dist/auth.d.ts

@@ -613,10 +613,9 @@ declare global {
      * no single principal to attribute the row to. Never render "no login
      * attempts" as "nobody tried".
      *
-     * `jti` is the same identifier as `CustomerSession.jti`, so a `success` row
-     * can be joined to the session it created — that is how a customer tells
-     * "this unfamiliar sign-in is the device still listed as live" from "it has
-     * since expired".
+     * No login-history row carries the refresh token id (`jti`) on any surface:
+     * a session handle is published only on the session lists
+     * (`CustomerSession.jti` / `OperatorSession.jti`), whose revoke flows use it.
      */
     interface CustomerLoginAttempt {
         outcome: LoginOutcome;
@@ -629,8 +628,10 @@ declare global {
         /** Client build string, when the caller sent one. */
         clientVersion?: string;
         /**
-         * The refresh token id this attempt minted. Present on `success` rows
-         * only, and joins to `CustomerSession.jti`.
+         * @deprecated Never sent. The row stores the refresh token id a success
+         * minted, but no login-history read publishes it; the session lists carry
+         * the handle a revoke needs. Kept so a consumer that still reads it (as a
+         * React key fallback, say) compiles — it is simply always absent.
          */
         jti?: string;
         /**

package/dist/log.d.ts

@@ -51,8 +51,16 @@ declare global {
         entry: FiscalAuditLogRow;
     }) | (AuditHistoryRowBase & {
         surface: 'loginHistory';
-        entry: Omit<CustomerLoginAttempt, 'ttl'>;
+        entry: AuditHistoryLoginEntry;
     });
+    /**
+     * A `loginHistory` history row's `entry`: the attempt WITHOUT its address, agent or token id.
+     * `GET /logs?mode=history` is IP-free for every role and lens; only the staff-only audit export
+     * file ({@link AuditExportLoginEntry}) carries `ip` and `userAgent`, and no surface carries `jti`.
+     */
+    type AuditHistoryLoginEntry = Omit<CustomerLoginAttempt, 'ttl' | 'ip' | 'userAgent' | 'jti'>;
+    /** A `loginHistory` audit export row's `entry`: the history entry plus the stored `ip` and `userAgent`. */
+    type AuditExportLoginEntry = AuditHistoryLoginEntry & Pick<CustomerLoginAttempt, 'ip' | 'userAgent'>;
     /**
      * How much of one surface this page covers. `complete` means the surface has
      * nothing older in the range; `paging` means it has more; `incomplete` means a
@@ -96,7 +104,13 @@ declare global {
         coverage: AuditHistorySourceCoverage[];
     }
     type AuditExportTier = 'hot' | 'cold' | 'cold-error-output';
-    type AuditExportRow = AuditHistoryRow & {
+    /** A history row as the export captures it; a `loginHistory` row's `entry` keeps `ip`/`userAgent`. */
+    type AuditExportRow = (Exclude<AuditHistoryRow, {
+        surface: 'loginHistory';
+    }> | (AuditHistoryRowBase & {
+        surface: 'loginHistory';
+        entry: AuditExportLoginEntry;
+    })) & {
         tier: AuditExportTier;
     };
     interface AuditExportColdCoverage {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "platform-types",
-	"version": "1.10.743",
+	"version": "1.10.744",
 	"description": "Shared wire and entity contracts for the platform.",
 	"type": "module",
 	"main": "dist/index.js",