@stacksjs/types 0.70.293 → 0.70.295

package/dist/database.d.ts

@@ -99,6 +99,9 @@ export declare interface DatabaseOptions {
   }
   migrations: string
   migrationLocks: string
+  models?: {
+    includeFrameworkDefaults?: boolean
+  }
   reads?: ReadPolicyOptions
   safety?: {
     confirmMigrate?: boolean

package/dist/model.d.ts

@@ -156,7 +156,7 @@ export declare interface Relations {
 }
 export declare interface ApiSettings {
   uri: string
-  middleware: string[]
+  middleware: ApiMiddleware
   routes:
     | {
       [key in ApiRoutes]: Action
@@ -306,6 +306,25 @@ export type ApiRoutes = 'index' | 'show' | 'store' | 'update' | 'destroy';
 export type SocialProviders = 'google' | 'github' | 'apple' | 'twitter' | 'facebook';
 declare type LogAttribute = string;
 export type SocialOptions = SocialProviders[];
+/**
+ * Middleware for the auto-generated REST routes.
+ *
+ * Omit it and both reads and writes get `auth` — an undeclared read route is
+ * how a customer list leaks (stacksjs/stacks#2224). A flat list applies to
+ * both sides; the split form states them separately, which is the only way to
+ * express the common "public catalog, authenticated writes" shape:
+ *
+ * ```ts
+ * middleware: ['auth']                        // both sides
+ * middleware: []                              // both sides public (warns at boot)
+ * middleware: { read: [], write: ['auth'] }   // public reads, guarded writes
+ * ```
+ *
+ * An omitted side of the split form falls back to `auth`, not to public.
+ */
+export type ApiMiddleware = | string
+  | string[]
+  | { read?: string | string[], write?: string | string[] }
 declare type ApiOptions = DeepPartial<ApiSettings>;
 /**
  * The attribute VALUES of one model row, as handed to a computed getter or

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stacksjs/types",
   "type": "module",
-  "version": "0.70.293",
+  "version": "0.70.295",
   "description": "The Stacks framework types.",
   "author": "Chris Breuer",
   "contributors": [
@@ -71,7 +71,7 @@
     }
   },
   "devDependencies": {
-    "@stacksjs/validation": "0.70.293",
+    "@stacksjs/validation": "0.70.295",
     "better-dx": "^0.2.17",
     "meilisearch": "^0.59.0"
   },