@stacksjs/types 0.70.293 → 0.70.296

package/dist/auth.d.ts

@@ -1,3 +1,19 @@
+/**
+ * The browser cookie that carries a personal access token.
+ *
+ * One name, in one place. Before stacksjs/stacks#2236 there were two: the
+ * writer (`authCookie()`) defaulted to `stacks_auth` while every reader looked
+ * for `config.auth.defaultTokenName` (`auth-token`), so a cookie the framework
+ * set was never one the framework read.
+ */
+export declare interface AuthCookieConfig {
+  name?: string
+  path?: string
+  domain?: string
+  maxAge?: number
+  secure?: boolean
+  sameSite?: 'Strict' | 'Lax' | 'None'
+}
 export declare interface AuthOptions {
   enabled?: boolean
   env?: string[]
@@ -21,6 +37,7 @@ export declare interface AuthOptions {
   tokenRotation: number
   defaultAbilities: string[]
   defaultTokenName: string
+  cookie: AuthCookieConfig
   passwordReset: {
     expire: number
     throttle: number
@@ -36,6 +53,9 @@ export declare interface AuthOptions {
   registration?: {
     preventEnumeration?: boolean
   }
+  socials?: {
+    matching?: 'link' | 'create' | 'refuse'
+  }
 }
 export declare interface AuthInstance {
   guard: string

package/dist/database.d.ts

@@ -99,6 +99,9 @@ export declare interface DatabaseOptions {
   }
   migrations: string
   migrationLocks: string
+  models?: {
+    includeFrameworkDefaults?: boolean
+  }
   reads?: ReadPolicyOptions
   safety?: {
     confirmMigrate?: boolean

package/dist/model.d.ts

@@ -156,7 +156,7 @@ export declare interface Relations {
 }
 export declare interface ApiSettings {
   uri: string
-  middleware: string[]
+  middleware: ApiMiddleware
   routes:
     | {
       [key in ApiRoutes]: Action
@@ -306,6 +306,25 @@ export type ApiRoutes = 'index' | 'show' | 'store' | 'update' | 'destroy';
 export type SocialProviders = 'google' | 'github' | 'apple' | 'twitter' | 'facebook';
 declare type LogAttribute = string;
 export type SocialOptions = SocialProviders[];
+/**
+ * Middleware for the auto-generated REST routes.
+ *
+ * Omit it and both reads and writes get `auth` — an undeclared read route is
+ * how a customer list leaks (stacksjs/stacks#2224). A flat list applies to
+ * both sides; the split form states them separately, which is the only way to
+ * express the common "public catalog, authenticated writes" shape:
+ *
+ * ```ts
+ * middleware: ['auth']                        // both sides
+ * middleware: []                              // both sides public (warns at boot)
+ * middleware: { read: [], write: ['auth'] }   // public reads, guarded writes
+ * ```
+ *
+ * An omitted side of the split form falls back to `auth`, not to public.
+ */
+export type ApiMiddleware = | string
+  | string[]
+  | { read?: string | string[], write?: string | string[] }
 declare type ApiOptions = DeepPartial<ApiSettings>;
 /**
  * The attribute VALUES of one model row, as handed to a computed getter or

package/dist/server.d.ts

@@ -1,3 +1,29 @@
+/**` prefix, or a mutating verb - which made a plain `GET /health`
+ * declared on the API process unreachable, and pushed URL design around an
+ * internal deployment detail (stacksjs/stacks#2230).
+ *
+ * The route table cannot be consulted from the views process: it is registered
+ * in the API process, which is a separate process under `buddy dev` and
+ * potentially a separate host in production. So the app states it here, the way
+ * a Next app states `rewrites()`.
+ *
+ * Note that stx runs its request hook BEFORE static file serving, so a path
+ * listed here shadows a `public/` file of the same name.
+ */
+export declare interface ApiProxyOptions {
+  prefixes?: string[]
+  paths?: string[]
+  methods?: string[]
+}
+/**
+ * **Server Options** - `config/server.ts`.
+ *
+ * How the views server behaves in the split views/API topology, shared by
+ * `buddy dev` and `buddy serve`.
+ */
+export declare interface ServerConfig {
+  proxy?: ApiProxyOptions
+}
 export declare interface ServerOptions {
   type?:
     | 'frontend'

package/dist/stacks.d.ts

@@ -1,4 +1,4 @@
-import type { AiConfig, AnalyticsConfig, AppConfig, AuthConfig, BinaryConfig, CacheConfig, CloudConfig, CmsConfig, CommerceConfig, CorsConfig, DashboardConfig, DatabaseConfig, DnsConfig, DocsConfig, EmailConfig, ErrorConfig, FeatureFlagsConfig, FilesystemsConfig, GitConfig, HashingConfig, ImagesConfig, LibraryConfig, LoggingConfig, MarketingConfig, MonitoringConfig, NotificationConfig, PaymentConfig, Ports, QueueConfig, RealtimeConfig, SaasConfig, SearchEngineConfig, SecurityConfig, ServicesConfig, Team, UiConfig } from '.';
+import type { AiConfig, AnalyticsConfig, AppConfig, AuthConfig, BinaryConfig, CacheConfig, CloudConfig, CmsConfig, CommerceConfig, CorsConfig, DashboardConfig, DatabaseConfig, DnsConfig, DocsConfig, EmailConfig, ErrorConfig, FeatureFlagsConfig, FilesystemsConfig, GitConfig, HashingConfig, ImagesConfig, LibraryConfig, LoggingConfig, MarketingConfig, MonitoringConfig, NotificationConfig, PaymentConfig, Ports, QueueConfig, RealtimeConfig, SaasConfig, SearchEngineConfig, SecurityConfig, ServerConfig, ServicesConfig, Team, UiConfig } from '.';
 /**
  * **Stacks Options**
  *
@@ -39,6 +39,7 @@ export declare interface StacksOptions {
   saas: SaasConfig
   security: SecurityConfig
   searchEngine: SearchEngineConfig
+  server: ServerConfig
   services: ServicesConfig
   filesystems: FilesystemsConfig
   team: Team

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stacksjs/types",
   "type": "module",
-  "version": "0.70.293",
+  "version": "0.70.296",
   "description": "The Stacks framework types.",
   "author": "Chris Breuer",
   "contributors": [
@@ -71,7 +71,7 @@
     }
   },
   "devDependencies": {
-    "@stacksjs/validation": "0.70.293",
+    "@stacksjs/validation": "0.70.296",
     "better-dx": "^0.2.17",
     "meilisearch": "^0.59.0"
   },