nucleus-core-ts 0.9.176 → 0.9.178

package/dist/src/ElysiaPlugin/routes/auth/emailLinks/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Builds outbound email action links (verification, password reset, magic
+ * link, invite) so they point back to the frontend origin the request
+ * actually came from.
+ *
+ * In multi-tenant deployments a single IDP serves many subdomains
+ * (e.g. `band-a.example.com`, `band-b.example.com`). A statically
+ * configured redirect URL therefore cannot be correct for every tenant.
+ * The originating frontend declares its public origin via the
+ * `x-app-origin` header; this module resolves that and falls back to the
+ * configured URL so existing single-tenant setups keep working unchanged.
+ *
+ * Origin resolution order:
+ *   1. `x-app-origin` header (frontend explicitly declares its origin)
+ *   2. `origin` header (browser-initiated cross-origin requests)
+ *   3. `x-forwarded-host` + `x-forwarded-proto` (proxied browser host)
+ *   4. origin of the configured fallback URL
+ */
+export declare function resolveAppOrigin(request: Request, fallbackUrl?: string): string;
+/**
+ * Extracts the path portion of a configured redirect URL so the host can be
+ * swapped for the request origin while preserving the intended landing route.
+ * Accepts absolute URLs, bare paths, or returns the provided default.
+ */
+export declare function extractConfiguredPath(configuredUrl: string, defaultPath: string): string;
+export interface BuildEmailActionLinkParams {
+    request: Request;
+    configuredUrl?: string;
+    path: string;
+    query: Record<string, string>;
+}
+export declare function buildEmailActionLink(params: BuildEmailActionLinkParams): string;

package/dist/src/ElysiaPlugin/routes/auth/passwordReset/index.d.ts

@@ -3,7 +3,7 @@ import type { AuthRouteConfig, PasswordResetConfig } from '../types';
 export declare function createPasswordResetRoute(config: AuthRouteConfig, passwordResetConfig: PasswordResetConfig, storeResetToken: (userId: string, token: string, expiresAt: Date, schemaName?: string) => Promise<void>, getResetToken: (token: string, schemaName?: string) => Promise<{
     userId: string;
     expiresAt: Date;
-} | null>, deleteResetToken: (token: string, schemaName?: string) => Promise<void>, sendResetEmail?: (email: string, token: string) => Promise<void>): Elysia<"", {
+} | null>, deleteResetToken: (token: string, schemaName?: string) => Promise<void>, sendResetEmail?: (email: string, token: string, request?: Request) => Promise<void>): Elysia<"", {
     decorator: {};
     store: {};
     derive: {};

package/dist/src/ElysiaPlugin/routes/entity/types.d.ts

@@ -25,6 +25,12 @@ export interface EntityRouteConfig {
         enabled?: boolean;
         skipTables?: string[];
         skipColumns?: string[];
+        /**
+         * How claims reach this service. "embed" (default) → roles/claims are in the
+         * JWT and authorization is evaluated statelessly from the token. "resolve" →
+         * proxy to the IDP /auth/check for scope-aware checks.
+         */
+        jwtClaimsMode?: 'embed' | 'resolve';
     };
     authMode?: 'full' | 'consumer';
     idpUrl?: string;

package/dist/src/Services/Tenant/TenantRegistry.d.ts

@@ -15,6 +15,7 @@ export declare class TenantRegistry {
     private defaultTrustedSources;
     private idpUrl;
     private allowDataLoss;
+    private onTenantProvisioned;
     private tenantsBySubdomain;
     private tenantsBySchemaName;
     private tenantsById;

package/dist/src/Services/Tenant/types.d.ts

@@ -62,6 +62,13 @@ export type TenantRegistryConfig = {
     idpUrl?: string;
     /** Apply destructive DDL during tenant schema sync (database.allowDataLoss). Default: false. */
     allowDataLoss?: boolean;
+    /**
+     * Optional hook invoked after a NEW tenant schema is provisioned (tables synced).
+     * Used by the IDP to seed authorization claims + custom roles (e.g. the default
+     * "fan" role) into the fresh schema so runtime-created tenants match the
+     * boot-time per-schema seeding. Failures must be non-fatal to provisioning.
+     */
+    onTenantProvisioned?: (context: TenantSchemaContext) => Promise<void>;
 };
 export type TenantResolutionResult = {
     resolved: true;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "nucleus-core-ts",
-	"version": "0.9.176",
+	"version": "0.9.178",
 	"description": "Production-ready, enterprise-grade TypeScript framework for building multi-tenant APIs",
 	"author": "Hidayet Can Özcan <hidayetcan@gmail.com>",
 	"license": "SEE LICENSE IN LICENSE",