Version dashboard

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

seamless-auth-admin-dashboard@0.9.0

Minor Changes

• 4453037: Surface the auth API's assessment and audit features.

  • A new Coverage page at /coverage shows the authentication coverage report (No authentication coverage report for assessment and insurance responses seamless-auth-api#178). It covers users holding a phishing-resistant credential overall and by organization, a trend by month or week, the authenticator mix, the sign-in mix, and the login policy the deployment enforces. "Download CSV" saves the API's own CSV for pasting into an assessment.
  • The Security page gains an Audit Trail panel. "Verify integrity" runs the hash chain check on demand (Audit records are updatable and have no integrity protection seamless-auth-api#174) and shows the chain head to record elsewhere, or where the trail breaks. "Export events" downloads a period as NDJSON after a fresh step-up (Audit events have no retention policy and no bulk export seamless-auth-api#173).
  • The System page gains a "Phishing-resistant only" setting (No enforceable phishing-resistant-only login mode, and magic link is on by default seamless-auth-api#177). Turning it on asks for confirmation, because users without a passkey can no longer sign in. While it is on, the login method list and passkey fallback are shown as overridden. The save confirmation is now titled "Confirm sign-in changes".

  Requires @seamless-auth/types 0.27.0, an auth API that serves these routes, and a @seamless-auth/server adapter that passes them through, including its raw mode for the downloads (feat(proxy): pass audit and coverage report routes through, with raw downloads seamless-auth-server#191).

• 2804f10: - Overview's headline tiles and Security's suspicious-activity feed now follow the range selector, which finishes Date range on the data screens (export delivered) #148 ([Feature]: Dashboard metrics and security anomalies accept no time range seamless-auth-api#132). Each tile names the window it shows. Against an API that predates ranges, the tiles keep their fixed 24-hour figures and their "fixed window" labels, so a tile never claims to follow the selector while showing something else. The Sessions tile's hint now says "Currently active sessions", which is what it always counted.

  • Overview shows a warning while store review accounts are enabled. It lists the addresses, how often the fixed code was used to sign in in the last 30 days, and any wrong codes entered, and says to clear REVIEW_ACCOUNT_EMAILS once review is over (feat(otp): record review account sign-ins and surface enabled review accounts seamless-auth-api#331). It shows nothing against an API or adapter without the route.

  Requires @seamless-auth/types 0.28.0, an auth API with both changes, and a @seamless-auth/server that forwards the range and passes the review accounts route through (feat(proxy): forward ranges on internal metrics and pass review accounts through seamless-auth-server#194).

Patch Changes

• ba8bc94: Support Node 22 and newer. The engines field now requires >=22 instead of >=24 <25, and CI runs the unit test job on Node 22, 24, and the latest release (chore: support Node versions beyond 24 across the ecosystem seamless-auth-api#339).