nucleus-core-ts 0.10.76 → 0.10.78

package/dist/src/Nucleus/routes/auth/cohort/types.d.ts

@@ -1,6 +1,6 @@
-import type { AppliedPasswordPolicy } from '../passwordPolicy';
 import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
 import type { Logger } from 'src/Services';
+import type { AppliedPasswordPolicy } from '../passwordPolicy';
 type PgTable = ReturnType<typeof import('drizzle-orm/pg-core').pgTable>;
 export type CohortRouteConfig = {
     db: NodePgDatabase | null;

package/dist/src/Nucleus/routes/auth/cohort/utils.d.ts

@@ -1,3 +1,4 @@
+import type { Logger } from 'src/Services/Logger';
 import type { CohortRouteConfig } from './types';
 type PgTable = ReturnType<typeof import('drizzle-orm/pg-core').pgTable>;
 type Col = ReturnType<typeof import('drizzle-orm').sql>;
@@ -28,7 +29,11 @@ export declare const col: (table: PgTable, name: string) => Col;
  * non-godmin something about an account they have no claim on. The RULE is
  * shared; the sentence is this group's.
  */
-export declare function requireGodmin(db: NonNullable<CohortRouteConfig['db']>, usersTable: NonNullable<CohortRouteConfig['usersTable']>, userId: string): Promise<boolean>;
+export declare function requireGodmin(db: NonNullable<CohortRouteConfig['db']>, usersTable: NonNullable<CohortRouteConfig['usersTable']>, userId: string, roleLookup?: {
+    request?: Request;
+    schemaTables?: Record<string, unknown>;
+    logger?: Logger;
+}): Promise<boolean>;
 type PasswordPolicy = CohortRouteConfig['passwordPolicy'];
 type PasswordValidation = {
     valid: boolean;

package/dist/src/Nucleus/routes/auth/types.d.ts

@@ -1,7 +1,7 @@
-import type { AppliedPasswordPolicy } from './passwordPolicy';
 import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
 import type { Logger, TenantRegistry } from 'src/Services';
 import type { OAuthProviderName } from 'src/Services/OAuth/types';
+import type { AppliedPasswordPolicy } from './passwordPolicy';
 export type { OAuthProviderName };
 export interface OAuthProviderConfig {
     clientId: string;

package/dist/src/Services/Verification/index.d.ts

@@ -25,6 +25,12 @@ export declare class VerificationService {
      * Returns null rather than throwing on a table this host does not have: a
      * missing fingerprint must never fail a decision that is otherwise valid.
      */
+    /**
+     * Three answers, not two: `true`, `false`, or "the engine cannot tell".
+     * `readEntityRow` folds the last into `null`, which is right for a
+     * fingerprint and wrong for a refusal.
+     */
+    private entityRowExists;
     private readEntityRow;
     /**
      * Put the chain's outcome on the row the chain is about.

package/dist/src/Services/Verification/types.d.ts

@@ -29,6 +29,12 @@ export interface VerificationConfig {
      * not care from whom" — a single-person shop, or an internal checklist.
      */
     allowSameVerifierTwiceOnStep?: boolean;
+    /**
+     * Every step of a chain must be decided by a DIFFERENT person. Off by
+     * default; a regulated install turns it on so that "three signatures" cannot
+     * be satisfied by one account holding two roles.
+     */
+    requireDistinctVerifiersAcrossChain?: boolean;
     diffTrackingEnabled?: boolean;
     endpoints?: {
         enabled?: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nucleus-core-ts",
-  "version": "0.10.76",
+  "version": "0.10.78",
   "description": "Production-ready, enterprise-grade TypeScript framework for building multi-tenant APIs",
   "author": "Hidayet Can Özcan <hidayetcan@gmail.com>",
   "license": "SEE LICENSE IN LICENSE",