@newhomestar/sdk 0.8.7 → 0.8.9

package/dist/index.js

@@ -682,8 +682,10 @@ export function runHttpServer(def, opts = {}) {
             tokenSigningAlg: 'RS256',
         });
         // Apply JWKS middleware to all routes EXCEPT public paths
+        // Exact match OR prefix match (paths ending with '/' act as prefix matchers)
         app.use((req, res, next) => {
-            if (publicPaths.has(req.path)) {
+            if (publicPaths.has(req.path) ||
+                [...publicPaths].some(p => p.endsWith('/') && req.path.startsWith(p))) {
                 return next();
             }
             return jwtCheck(req, res, next);
@@ -936,7 +938,7 @@ export function runHttpServer(def, opts = {}) {
         Object.entries(def.actions).forEach(([actionName, actionDef]) => {
             const method = (actionDef.method || 'POST').toUpperCase();
             const path = actionDef.path || `/${def.name}/${actionName}`;
-            const isPublic = publicPaths.has(path) ? ' 🔓' : ' 🔐';
+            const isPublic = (publicPaths.has(path) || [...publicPaths].some(p => p.endsWith('/') && path.startsWith(p))) ? ' 🔓' : ' 🔐';
             console.log(`[nova] ${method} ${path} -> ${actionName}${isPublic}`);
         });
     });

package/dist/userCache.d.ts

@@ -10,6 +10,18 @@ export interface UserProfile {
     last_name: string | null;
     avatar_url: string | null;
     external_id: number | null;
+    /** Full app_metadata blob from Supabase auth.users.raw_app_meta_data. Future-proof pass-through. */
+    app_metadata: Record<string, unknown> | null;
+    /** User's job title (from profiles table or app_metadata). */
+    title: string | null;
+    /** Derived active/inactive status. */
+    status: 'active' | 'inactive';
+    /** Raw active flag from app_metadata (1=active, 0=inactive). */
+    active: number;
+    /** User's legacy role string (from profiles table). */
+    rolez: string | null;
+    /** Whether the user has a verified TOTP 2FA factor. */
+    has_2fa: boolean;
 }
 export interface UserCacheOptions {
     /** Auth Service base URL. Defaults to AUTH_ISSUER_BASE_URL env var. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@newhomestar/sdk",
-  "version": "0.8.7",
+  "version": "0.8.9",
   "description": "Type-safe SDK for building Nova pipelines (workers & functions)",
   "homepage": "https://github.com/newhomestar/nova-node-sdk#readme",
   "bugs": {