nucleus-core-ts 0.9.953 → 0.9.955

package/bin/cli.ts

@@ -1,131 +1,131 @@
-#!/usr/bin/env bun
-
-/**
- * Nucleus CLI — the single front door to nucleus-core-ts.
- *
- *   nucleus init          scaffold a new project (interactive)
- *   nucleus dev …         run locally (up | down | run)
- *   nucleus add …         extend an existing project (entity | feature | oauth)
- *   nucleus validate      validate config.json against the schema
- *   nucleus doctor        check the local environment (bun, postgres, redis, …)
- *   nucleus generate      generate the Drizzle schema from config.json
- */
-
-import { spawn } from 'node:child_process'
-import { dirname, join } from 'node:path'
-import { fileURLToPath } from 'node:url'
-import { banner, c, log } from './lib/ui'
-import { doctorCommand } from './lib/commands/doctor'
-import { validateCommand } from './lib/commands/validate'
-import { initCommand } from './lib/commands/init'
-import { devCommand } from './lib/commands/dev'
-import { addCommand } from './lib/commands/add'
-
-const here = dirname(fileURLToPath(import.meta.url))
-const rootDir = join(here, '..')
-
-const argv = process.argv.slice(2)
-const firstArg = argv[0] ?? ''
-const looksLikeFile = firstArg.endsWith('.json') || firstArg.startsWith('./') || firstArg.startsWith('/')
-const command = looksLikeFile ? 'generate' : firstArg
-
-async function pkgVersion(): Promise<string> {
-  try {
-    return (JSON.parse(await Bun.file(join(rootDir, 'package.json')).text()) as { version: string }).version
-  } catch {
-    return '?'
-  }
-}
-
-function showHelp(version: string) {
-  banner(`Nucleus CLI  v${version}`, 'nucleus-core-ts — config-driven backend framework')
-  log(`
-${c.bold('Usage')}  ${c.cyan('nucleus')} ${c.dim('<command> [options]')}
-
-${c.bold('Create & evolve')}
-  ${c.cyan('init')} ${c.dim('[--preset <p>] [-o <dir>] [-y]')}       build a config + scaffold a runnable backend (zero-to-running)
-  ${c.cyan('add')} ${c.dim('entity | feature <n> | oauth <p>')}    extend this project's config in place (+ regenerate)
-  ${c.cyan('scaffold')}                               full-project scaffold (backend+frontend+k8s+pipelines) from a config.json
-  ${c.cyan('generate')} ${c.dim('<config.json> <outDir>')}           generate the Drizzle schema + relations from config
-  ${c.cyan('validate')} ${c.dim('[config.json]')}                    validate a config against the JSON-Schema + cross-field rules
-
-${c.bold('Local dev')}
-  ${c.cyan('dev')} ${c.dim('[up | down]')}                          run the app; ${c.dim('up')} starts Postgres+Redis, ${c.dim('down')} stops them
-  ${c.cyan('doctor')}                                 check the local environment can run a Nucleus project
-
-${c.bold('Maintenance')}
-  ${c.cyan('audit:purge-noise')} ${c.dim('[--execute]')}            delete historical low-signal audit_logs rows (dry-run by default)
-  ${c.cyan('help')}${c.dim(', ')}${c.cyan('--version')}                        this help / the installed version
-
-${c.dim('init = preset → runnable backend · scaffold (= new) = full project · Aliases: generate = gen, validate = check')}
-`)
-}
-
-function runScript(scriptRelPath: string, args: string[]): Promise<never> {
-  return new Promise<never>(() => {
-    const proc = spawn('bun', ['run', join(rootDir, scriptRelPath), ...args], { cwd: process.cwd(), stdio: 'inherit' })
-    proc.on('close', (code) => process.exit(code ?? 1))
-  })
-}
-
-switch (command) {
-  case 'init':
-    process.exit(await initCommand(argv.slice(1)))
-    break
-
-  case 'dev':
-    process.exit(await devCommand(argv.slice(1)))
-    break
-
-  case 'add':
-    process.exit(await addCommand(argv.slice(1)))
-    break
-
-  case 'scaffold':
-  case 'new': {
-    // Full-project scaffold (backend + frontend + k8s + pipelines) from an
-    // existing config.json. `init` is the leaner, config-building local-dev path.
-    const { scaffold } = await import(join(rootDir, 'infra', 'scripts', 'generate-project.ts'))
-    await scaffold(join(rootDir, 'infra'))
-    break
-  }
-
-  case 'generate':
-  case 'gen': {
-    const genArgs = looksLikeFile ? argv : argv.slice(1)
-    await runScript(join('scripts', 'generate-schema.ts'), genArgs)
-    break
-  }
-
-  case 'validate':
-  case 'check':
-    process.exit(await validateCommand(argv.slice(1)))
-    break
-
-  case 'doctor':
-    process.exit(await doctorCommand())
-    break
-
-  case 'audit:purge-noise':
-  case 'audit-purge-noise':
-    await runScript(join('scripts', 'audit-purge-noise.ts'), argv.slice(1))
-    break
-
-  case '--version':
-  case '-v':
-    log(await pkgVersion())
-    break
-
-  case 'help':
-  case '--help':
-  case '-h':
-  case '':
-  case undefined:
-    showHelp(await pkgVersion())
-    break
-
-  default:
-    log(`${c.red('Unknown command:')} ${command}\n`)
-    showHelp(await pkgVersion())
-    process.exit(1)
-}
+#!/usr/bin/env bun
+
+/**
+ * Nucleus CLI — the single front door to nucleus-core-ts.
+ *
+ *   nucleus init          scaffold a new project (interactive)
+ *   nucleus dev …         run locally (up | down | run)
+ *   nucleus add …         extend an existing project (entity | feature | oauth)
+ *   nucleus validate      validate config.json against the schema
+ *   nucleus doctor        check the local environment (bun, postgres, redis, …)
+ *   nucleus generate      generate the Drizzle schema from config.json
+ */
+
+import { spawn } from 'node:child_process'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { banner, c, log } from './lib/ui'
+import { doctorCommand } from './lib/commands/doctor'
+import { validateCommand } from './lib/commands/validate'
+import { initCommand } from './lib/commands/init'
+import { devCommand } from './lib/commands/dev'
+import { addCommand } from './lib/commands/add'
+
+const here = dirname(fileURLToPath(import.meta.url))
+const rootDir = join(here, '..')
+
+const argv = process.argv.slice(2)
+const firstArg = argv[0] ?? ''
+const looksLikeFile = firstArg.endsWith('.json') || firstArg.startsWith('./') || firstArg.startsWith('/')
+const command = looksLikeFile ? 'generate' : firstArg
+
+async function pkgVersion(): Promise<string> {
+  try {
+    return (JSON.parse(await Bun.file(join(rootDir, 'package.json')).text()) as { version: string }).version
+  } catch {
+    return '?'
+  }
+}
+
+function showHelp(version: string) {
+  banner(`Nucleus CLI  v${version}`, 'nucleus-core-ts — config-driven backend framework')
+  log(`
+${c.bold('Usage')}  ${c.cyan('nucleus')} ${c.dim('<command> [options]')}
+
+${c.bold('Create & evolve')}
+  ${c.cyan('init')} ${c.dim('[--preset <p>] [-o <dir>] [-y]')}       build a config + scaffold a runnable backend (zero-to-running)
+  ${c.cyan('add')} ${c.dim('entity | feature <n> | oauth <p>')}    extend this project's config in place (+ regenerate)
+  ${c.cyan('scaffold')}                               full-project scaffold (backend+frontend+k8s+pipelines) from a config.json
+  ${c.cyan('generate')} ${c.dim('<config.json> <outDir>')}           generate the Drizzle schema + relations from config
+  ${c.cyan('validate')} ${c.dim('[config.json]')}                    validate a config against the JSON-Schema + cross-field rules
+
+${c.bold('Local dev')}
+  ${c.cyan('dev')} ${c.dim('[up | down]')}                          run the app; ${c.dim('up')} starts Postgres+Redis, ${c.dim('down')} stops them
+  ${c.cyan('doctor')}                                 check the local environment can run a Nucleus project
+
+${c.bold('Maintenance')}
+  ${c.cyan('audit:purge-noise')} ${c.dim('[--execute]')}            delete historical low-signal audit_logs rows (dry-run by default)
+  ${c.cyan('help')}${c.dim(', ')}${c.cyan('--version')}                        this help / the installed version
+
+${c.dim('init = preset → runnable backend · scaffold (= new) = full project · Aliases: generate = gen, validate = check')}
+`)
+}
+
+function runScript(scriptRelPath: string, args: string[]): Promise<never> {
+  return new Promise<never>(() => {
+    const proc = spawn('bun', ['run', join(rootDir, scriptRelPath), ...args], { cwd: process.cwd(), stdio: 'inherit' })
+    proc.on('close', (code) => process.exit(code ?? 1))
+  })
+}
+
+switch (command) {
+  case 'init':
+    process.exit(await initCommand(argv.slice(1)))
+    break
+
+  case 'dev':
+    process.exit(await devCommand(argv.slice(1)))
+    break
+
+  case 'add':
+    process.exit(await addCommand(argv.slice(1)))
+    break
+
+  case 'scaffold':
+  case 'new': {
+    // Full-project scaffold (backend + frontend + k8s + pipelines) from an
+    // existing config.json. `init` is the leaner, config-building local-dev path.
+    const { scaffold } = await import(join(rootDir, 'infra', 'scripts', 'generate-project.ts'))
+    await scaffold(join(rootDir, 'infra'))
+    break
+  }
+
+  case 'generate':
+  case 'gen': {
+    const genArgs = looksLikeFile ? argv : argv.slice(1)
+    await runScript(join('scripts', 'generate-schema.ts'), genArgs)
+    break
+  }
+
+  case 'validate':
+  case 'check':
+    process.exit(await validateCommand(argv.slice(1)))
+    break
+
+  case 'doctor':
+    process.exit(await doctorCommand())
+    break
+
+  case 'audit:purge-noise':
+  case 'audit-purge-noise':
+    await runScript(join('scripts', 'audit-purge-noise.ts'), argv.slice(1))
+    break
+
+  case '--version':
+  case '-v':
+    log(await pkgVersion())
+    break
+
+  case 'help':
+  case '--help':
+  case '-h':
+  case '':
+  case undefined:
+    showHelp(await pkgVersion())
+    break
+
+  default:
+    log(`${c.red('Unknown command:')} ${command}\n`)
+    showHelp(await pkgVersion())
+    process.exit(1)
+}

package/dist/.build-ok

@@ -1 +1 @@
-0.9.953
+0.9.955

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import 'reflect-metadata';
 export * from './src/Client';
-export type { SystemAddressEntity, SystemClaimEntity, SystemFileEntity, SystemMonitoringMetricEntity, SystemPaymentCustomerEntity, SystemPaymentInvoiceEntity, SystemPaymentMethodEntity, SystemPaymentPriceEntity, SystemPaymentProductEntity, SystemPaymentSubscriptionEntity, SystemPaymentTransactionEntity, SystemPaymentWebhookLogEntity, SystemPhoneEntity, SystemProfileEntity, SystemRoleClaimEntity, SystemRoleEntity, SystemUserCohortEntity, SystemUserEntity, SystemUserRoleEntity, } from './src/Client/ApiCaller/types';
+export type { SystemAddressEntity, SystemAuditLogEntity, SystemClaimEntity, SystemFileEntity, SystemMonitoringMetricEntity, SystemPaymentCustomerEntity, SystemPaymentInvoiceEntity, SystemPaymentMethodEntity, SystemPaymentPriceEntity, SystemPaymentProductEntity, SystemPaymentSubscriptionEntity, SystemPaymentTransactionEntity, SystemPaymentWebhookLogEntity, SystemPhoneEntity, SystemProfileEntity, SystemRoleClaimEntity, SystemRoleEntity, SystemUserCohortEntity, SystemUserEntity, SystemUserRoleEntity, } from './src/Client/ApiCaller/types';
 export { NucleusElysiaPlugin } from './src/ElysiaPlugin';
 /**
  * The request-body ceiling an install's own upload settings imply.

package/dist/src/Client/ApiCaller/index.d.ts

@@ -11,5 +11,5 @@ export { createServerFactory, type ServerFactory } from './server';
  * in the app and not the one that holds the accounts.
  */
 export { SYSTEM_TABLES } from './system-tables';
-export type { AdminCreateUserPayload, AdminCreateUserResponse, AllGeneratedEndpoints, AllGeneratedEndpointsWithConfig, AllGeneratedEndpointsWithEntityTypes, ApiCallerConfig, ApiResponse, AuthEndpointDefinitions, AuthenticationConfig, AuthFeatureConfig, AuthFeatureKey, BaseErrorResponse, BulkCreateUsersPayload, BulkCreateUsersResponse, BulkEndpointKey, ChangeUserIdPayload, ChangeUserIdResponse, ChatActionResponse, ChatAttachmentDTO, ChatConversationDTO, ChatConversationListResponse, ChatConversationResponse, ChatCreateConversationPayload, ChatEndpointDefinitions, ChatMessageDTO, ChatMessageListResponse, ChatMessageResponse, ChatParticipantDTO, ChatParticipantsResponse, ChatReadResponse, ChatSendMessagePayload, CheckSubdomainPayload, CheckSubdomainResponse, ClientHookConfig, CohortBulkOpsResponse, CohortEndpointDefinitions, CohortPayload, CohortUpdatePayload, ConfigEndpointDefinitions, ConfigEnvResponse, ConfigGetResponse, ConfigOverridesClearResponse, ConfigOverridesGetResponse, ConfigRestartPayload, ConfigRestartResponse, ConfigSectionGetResponse, ConfigSectionMeta, ConfigSectionsListResponse, ConfigSectionUpdatePayload, ConfigSectionUpdateResponse, CookieStore, CreateHostnamePayload, CreateHostnameResponse, CreateRegistrationPayload, DeleteResponse, DnsInstructionDTO, DomainEndpointDefinitions, DomainHostnameDTO, DomainHostnameListResponse, DomainHostnameResponse, DomainInstructionsResponse, DomainRegistrationDTO, DomainRegistrationListResponse, DomainRegistrationResponse, DomainResolutionDTO, DomainResolveResponse, EndpointAction, EndpointActions, EndpointDefinition, EndpointMethod, EndpointState, EntityEndpointKey, EntityRecord, ExtraEndpoints, FlowDeleteResponse, FlowDetailResponse, FlowListResponse, FlowPublishResponse, FlowSavePayload, FlowSaveResponse, GeneratedAuthEndpoints, GeneratedEndpointsFromConfig, HeadersStore, HttpMethod, ImpersonatePayload, ImpersonateResponse, ImpersonateStopResponse, InferEntity, ListResponse, LiveCpuLog, LiveDaprEvent, LiveDaprEventType, LiveMemoryLog, LiveMonitoringChangeSettingsPayload, LiveMonitoringConfigs, LiveMonitoringLogLimits, LiveMonitoringLogsResponse, LiveMonitoringSettingsResponse, LiveMonitoringStreamSnapshot, LiveMonitoringStreamUpdate, LiveRequest, LiveWorkerInfo, LiveWsEvent, LiveWsEventType, LoginPayload, LoginSuccess, LoginSuccessData, MagicLinkPayload, MarketplaceBalanceDTO, MarketplaceBalanceResponse, MarketplaceEndpointDefinitions, MeResponse, MeResponseData, MeSuccessResponse, MonitoringEndpointDefinitions, MutationResponse, NotificationListResponse, NotificationSeenAllResponse, NotificationSeenResponse, NotificationUnseenCountResponse, OpenDisputePayload, PaginationMeta, PasswordChangePayload, PasswordResetConfirmPayload, PasswordResetRequestPayload, PasswordResetResponse, PasswordSetPayload, PaymentDisputeDTO, PaymentDisputeListResponse, PaymentDisputeResponse, PaymentSplitDTO, PaymentSplitListResponse, PaymentSplitResponse, PayoutRequestDTO, PayoutRequestListResponse, PayoutRequestResponse, ProvisionTenantPayload, ProvisionTenantResponse, RecordSplitPayload, RefreshSuccess, RefreshSuccessData, RegisterPayload, RegisterSuccess, RegisterSuccessData, RequestPayoutPayload, ResolvedEnvEntry, SelfSignupPayload, SelfSignupResponse, ServerFactoryConfig, SessionApprovePayload, SessionApproveResponse, SessionCurrentResponse, SessionInfo, SessionRejectPayload, SessionRejectResponse, SessionRevokeAllPayload, SessionRevokeAllResponse, SessionRevokePayload, SessionRevokeResponse, SessionStatsResponse, SessionsListResponse, SessionsPendingResponse, SettlementPolicyDTO, SettlementPolicyPayload, SettlementPolicyResponse, SingleResponse, StandardQueryParams, StandardReturn, StartOptions, SystemAddressEntity, SystemClaimEntity, SystemFileEntity, SystemMonitoringMetricEntity, SystemPhoneEntity, SystemProfileEntity, SystemRoleClaimEntity, SystemRoleEntity, SystemUserCohortEntity, SystemUserEntity, SystemUserRoleEntity, TenantDetailResponse, TenantEndpointDefinitions, TenantListItem, TenantListResponse, TenantReactivatePayload, TenantReactivateResponse, TenantSuspendPayload, TenantSuspendResponse, UserData, VerificationDecidePayload, VerificationDecideResponse, VerificationEndpointDefinitions, VerificationPendingResponse, VerificationStartPayload, VerificationStartResponse, VerificationStatusResponse, WebAuthnAuthenticationOptions, WebAuthnAuthenticationResponseJSON, WebAuthnAuthenticatorAttachment, WebAuthnAuthOptionsPayload, WebAuthnAuthOptionsResponse, WebAuthnAuthVerifyPayload, WebAuthnAuthVerifyResponse, WebAuthnCredentialSummary, WebAuthnDeviceType, WebAuthnListResponse, WebAuthnPublicKeyCredentialDescriptor, WebAuthnRegisterOptionsPayload, WebAuthnRegisterOptionsResponse, WebAuthnRegisterVerifyPayload, WebAuthnRegisterVerifyResponse, WebAuthnRegistrationOptions, WebAuthnRegistrationResponseJSON, WebAuthnRenamePayload, WebAuthnRenameResponse, WebAuthnRevokePayload, WebAuthnRevokeResponse, WebAuthnTransport, } from './types';
+export type { AdminCreateUserPayload, AdminCreateUserResponse, AlertEvent, AlertType, AllGeneratedEndpoints, AllGeneratedEndpointsWithConfig, AllGeneratedEndpointsWithEntityTypes, ApiCallerConfig, ApiResponse, ApplicationMetrics, AuditCategory, AuditSeverity, AuthEndpointDefinitions, AuthenticationConfig, AuthFeatureConfig, AuthFeatureKey, BaseErrorResponse, BulkCreateUsersPayload, BulkCreateUsersResponse, BulkEndpointKey, ChangeUserIdPayload, ChangeUserIdResponse, ChatActionResponse, ChatAttachmentDTO, ChatConversationDTO, ChatConversationListResponse, ChatConversationResponse, ChatCreateConversationPayload, ChatEndpointDefinitions, ChatMessageDTO, ChatMessageListResponse, ChatMessageResponse, ChatParticipantDTO, ChatParticipantsResponse, ChatReadResponse, ChatSendMessagePayload, CheckSubdomainPayload, CheckSubdomainResponse, ClientHookConfig, CohortBulkOpsResponse, CohortEndpointDefinitions, CohortPayload, CohortUpdatePayload, ConfigEndpointDefinitions, ConfigEnvResponse, ConfigGetResponse, ConfigOverridesClearResponse, ConfigOverridesGetResponse, ConfigRestartPayload, ConfigRestartResponse, ConfigSectionGetResponse, ConfigSectionMeta, ConfigSectionsListResponse, ConfigSectionUpdatePayload, ConfigSectionUpdateResponse, CookieStore, CreateHostnamePayload, CreateHostnameResponse, CreateRegistrationPayload, DatabaseMetrics, DeleteResponse, DnsInstructionDTO, DomainEndpointDefinitions, DomainHostnameDTO, DomainHostnameListResponse, DomainHostnameResponse, DomainInstructionsResponse, DomainRegistrationDTO, DomainRegistrationListResponse, DomainRegistrationResponse, DomainResolutionDTO, DomainResolveResponse, EndpointAction, EndpointActions, EndpointDefinition, EndpointMethod, EndpointState, EntityEndpointKey, EntityRecord, ExtraEndpoints, FlowDeleteResponse, FlowDetailResponse, FlowListResponse, FlowPublishResponse, FlowSavePayload, FlowSaveResponse, GeneratedAuthEndpoints, GeneratedEndpointsFromConfig, HeadersStore, HttpMethod, ImpersonatePayload, ImpersonateResponse, ImpersonateStopResponse, InferEntity, ListResponse, LiveCpuLog, LiveDaprEvent, LiveDaprEventType, LiveMemoryLog, LiveMonitoringChangeSettingsPayload, LiveMonitoringConfigs, LiveMonitoringLogLimits, LiveMonitoringLogsResponse, LiveMonitoringSettingsResponse, LiveMonitoringStreamSnapshot, LiveMonitoringStreamUpdate, LiveRequest, LiveWorkerInfo, LiveWsEvent, LiveWsEventType, LoginPayload, LoginSuccess, LoginSuccessData, LogLevel, MagicLinkPayload, MarketplaceBalanceDTO, MarketplaceBalanceResponse, MarketplaceEndpointDefinitions, MeResponse, MeResponseData, MeSuccessResponse, MetricPeak, MonitoringAcknowledgeResponse, MonitoringAlertsResponse, MonitoringEndpointDefinitions, MonitoringHistoryResponse, MonitoringSnapshot, MonitoringSnapshotResponse, MutationResponse, NotificationListResponse, NotificationSeenAllResponse, NotificationSeenResponse, NotificationUnseenCountResponse, OpenDisputePayload, PaginationMeta, PasswordChangePayload, PasswordResetConfirmPayload, PasswordResetRequestPayload, PasswordResetResponse, PasswordSetPayload, PaymentDisputeDTO, PaymentDisputeListResponse, PaymentDisputeResponse, PaymentSplitDTO, PaymentSplitListResponse, PaymentSplitResponse, PayoutRequestDTO, PayoutRequestListResponse, PayoutRequestResponse, ProvisionTenantPayload, ProvisionTenantResponse, RecordSplitPayload, RedisMetrics, RefreshSuccess, RefreshSuccessData, RegisterPayload, RegisterSuccess, RegisterSuccessData, RequestPayoutPayload, ResolvedEnvEntry, SelfSignupPayload, SelfSignupResponse, ServerFactoryConfig, ServerLogPage, ServerLogQuery, ServerLogRecord, ServerLogSource, ServerLogsResponse, SessionApprovePayload, SessionApproveResponse, SessionCurrentResponse, SessionInfo, SessionRejectPayload, SessionRejectResponse, SessionRevokeAllPayload, SessionRevokeAllResponse, SessionRevokePayload, SessionRevokeResponse, SessionStatsResponse, SessionsListResponse, SessionsPendingResponse, SettlementPolicyDTO, SettlementPolicyPayload, SettlementPolicyResponse, SingleResponse, StandardQueryParams, StandardReturn, StartOptions, SystemAddressEntity, SystemAuditLogEntity, SystemClaimEntity, SystemFileEntity, SystemMetrics, SystemMonitoringMetricEntity, SystemPhoneEntity, SystemProfileEntity, SystemRoleClaimEntity, SystemRoleEntity, SystemUserCohortEntity, SystemUserEntity, SystemUserRoleEntity, TenantDetailResponse, TenantEndpointDefinitions, TenantListItem, TenantListResponse, TenantReactivatePayload, TenantReactivateResponse, TenantSuspendPayload, TenantSuspendResponse, UserData, VerificationDecidePayload, VerificationDecideResponse, VerificationEndpointDefinitions, VerificationPendingResponse, VerificationStartPayload, VerificationStartResponse, VerificationStatusResponse, WebAuthnAuthenticationOptions, WebAuthnAuthenticationResponseJSON, WebAuthnAuthenticatorAttachment, WebAuthnAuthOptionsPayload, WebAuthnAuthOptionsResponse, WebAuthnAuthVerifyPayload, WebAuthnAuthVerifyResponse, WebAuthnCredentialSummary, WebAuthnDeviceType, WebAuthnListResponse, WebAuthnPublicKeyCredentialDescriptor, WebAuthnRegisterOptionsPayload, WebAuthnRegisterOptionsResponse, WebAuthnRegisterVerifyPayload, WebAuthnRegisterVerifyResponse, WebAuthnRegistrationOptions, WebAuthnRegistrationResponseJSON, WebAuthnRenamePayload, WebAuthnRenameResponse, WebAuthnRevokePayload, WebAuthnRevokeResponse, WebAuthnTransport, } from './types';
 export { AUTH_ENDPOINT_CONFIGS, AUTH_ENDPOINTS, CHAT_ENDPOINTS, COHORT_ENDPOINTS, CONFIG_ENDPOINTS, DOMAIN_ENDPOINTS, MARKETPLACE_ENDPOINTS, MONITORING_ENDPOINTS, PAYMENT_ENDPOINTS, TENANT_ENDPOINTS, VERIFICATION_ENDPOINTS, } from './types';

package/dist/src/Client/ApiCaller/types.d.ts

@@ -1,9 +1,11 @@
-import type { LiveCpuLog as _LiveCpuLog, LiveDaprEvent as _LiveDaprEvent, LiveDaprEventType as _LiveDaprEventType, LiveMemoryLog as _LiveMemoryLog, LiveMonitoringChangeSettingsPayload as _LiveMonitoringChangeSettingsPayload, LiveMonitoringConfigs as _LiveMonitoringConfigs, LiveMonitoringLogLimits as _LiveMonitoringLogLimits, LiveMonitoringLogsResponse as _LiveMonitoringLogsResponse, LiveMonitoringSettingsResponse as _LiveMonitoringSettingsResponse, LiveMonitoringStreamSnapshot as _LiveMonitoringStreamSnapshot, LiveMonitoringStreamUpdate as _LiveMonitoringStreamUpdate, LiveRequest as _LiveRequest, LiveWorkerInfo as _LiveWorkerInfo, LiveWsEvent as _LiveWsEvent, LiveWsEventType as _LiveWsEventType } from '../../Services/Monitoring/types';
+import type { AuditCategory as _AuditCategory, AuditSeverity as _AuditSeverity } from '../../Services/Logger/auditTaxonomy';
+import type { ServerLogPage as _ServerLogPage, ServerLogQuery as _ServerLogQuery, ServerLogRecord as _ServerLogRecord, ServerLogSource as _ServerLogSource } from '../../Services/Logger/ServerLogBuffer';
+import type { LogLevel as _LogLevel } from '../../Services/Logger/types';
+import type { AlertEvent as _AlertEvent, AlertType as _AlertType, ApplicationMetrics as _ApplicationMetrics, DatabaseMetrics as _DatabaseMetrics, LiveCpuLog as _LiveCpuLog, LiveDaprEvent as _LiveDaprEvent, LiveDaprEventType as _LiveDaprEventType, LiveMemoryLog as _LiveMemoryLog, LiveMonitoringChangeSettingsPayload as _LiveMonitoringChangeSettingsPayload, LiveMonitoringConfigs as _LiveMonitoringConfigs, LiveMonitoringLogLimits as _LiveMonitoringLogLimits, LiveMonitoringLogsResponse as _LiveMonitoringLogsResponse, LiveMonitoringSettingsResponse as _LiveMonitoringSettingsResponse, LiveMonitoringStreamSnapshot as _LiveMonitoringStreamSnapshot, LiveMonitoringStreamUpdate as _LiveMonitoringStreamUpdate, LiveRequest as _LiveRequest, LiveWorkerInfo as _LiveWorkerInfo, LiveWsEvent as _LiveWsEvent, LiveWsEventType as _LiveWsEventType, MetricPeak as _MetricPeak, MonitoringSnapshot as _MonitoringSnapshot, RedisMetrics as _RedisMetrics, SystemMetrics as _SystemMetrics } from '../../Services/Monitoring/types';
 import type { NucleusConfigOptions, NucleusTable, PaginationMeta, StandardQueryParams, StandardReturn } from '../../types';
 import type { HttpMethod } from '../ServerFetch/types';
 import type { SystemTables } from './system-tables';
-export type { PaginationMeta, StandardQueryParams, StandardReturn };
-export type { HttpMethod };
+export type { HttpMethod, PaginationMeta, StandardQueryParams, StandardReturn };
 export interface ApiResponse<TSuccess, TError> {
     isSuccess: boolean;
     data?: TSuccess;
@@ -2520,6 +2522,16 @@ export type SystemPaymentSubscriptionEntity = InferEntity<SystemTables, 'payment
 export type SystemPaymentInvoiceEntity = InferEntity<SystemTables, 'payment_invoices'>;
 export type SystemUserCohortEntity = InferEntity<SystemTables, 'user_cohorts'>;
 export type SystemMonitoringMetricEntity = InferEntity<SystemTables, 'monitoring_metrics'>;
+/**
+ * An audit row, for the panels that read one.
+ *
+ * Every nucleus service writes `audit_logs` — this is not the identity
+ * service's private table — so a screen that wants "who changed what on THIS
+ * service" needs the row type as much as the users screen needs
+ * {@link SystemUserEntity}. It was the one system entity missing here, which
+ * pushed each consumer into hand-writing it.
+ */
+export type SystemAuditLogEntity = InferEntity<SystemTables, 'audit_logs'>;
 export type MeResponseData = {
     user: SystemUserEntity;
     profile: SystemProfileEntity | null;
@@ -2544,6 +2556,81 @@ export type LiveMonitoringChangeSettingsPayload = _LiveMonitoringChangeSettingsP
 export type LiveMonitoringStreamSnapshot = _LiveMonitoringStreamSnapshot;
 export type LiveMonitoringStreamUpdate = _LiveMonitoringStreamUpdate;
 export type LiveMonitoringLogsResponse = _LiveMonitoringLogsResponse;
+/**
+ * The metrics half of monitoring, for the panel that draws it.
+ *
+ * The live types above describe the per-request tail; these describe what the
+ * collectors measured — and until now they existed only on the server side, so
+ * every screen that wanted to render `/monitoring/snapshot` had to hand-write
+ * its own copy of `SystemMetrics`. Two copies of a shape the server owns is two
+ * places for it to drift, and the drift is silent: the panel keeps compiling
+ * and quietly reads a field the server stopped sending.
+ */
+export type SystemMetrics = _SystemMetrics;
+export type ApplicationMetrics = _ApplicationMetrics;
+export type DatabaseMetrics = _DatabaseMetrics;
+export type RedisMetrics = _RedisMetrics;
+export type MetricPeak = _MetricPeak;
+export type MonitoringSnapshot = _MonitoringSnapshot;
+export type AlertType = _AlertType;
+export type AlertEvent = _AlertEvent;
+/** `GET {basePath}/snapshot` — `data` is null before the first collection. */
+export type MonitoringSnapshotResponse = {
+    isSuccess: boolean;
+    message: string;
+    data: MonitoringSnapshot | null;
+};
+/** `GET {basePath}/history?minutes=N` — capped server-side at `history.maxMinutes`. */
+export type MonitoringHistoryResponse = {
+    isSuccess: boolean;
+    message: string;
+    data: {
+        minutes: number;
+        count: number;
+        snapshots: MonitoringSnapshot[];
+    };
+};
+/** `GET {basePath}/alerts` — only alerts still active, acknowledged or not. */
+export type MonitoringAlertsResponse = {
+    isSuccess: boolean;
+    message: string;
+    data: {
+        count: number;
+        alerts: AlertEvent[];
+    };
+};
+/** `POST {basePath}/alerts/:alertId/acknowledge`. */
+export type MonitoringAcknowledgeResponse = {
+    isSuccess: boolean;
+    message: string;
+    data: {
+        alertId: string;
+    } | null;
+};
+/**
+ * The server's own log, as the admin panel reads it.
+ *
+ * Exported for the same reason as the metrics types above: the buffer and its
+ * query shape live in the framework, so a panel that hand-writes them is a
+ * second copy that drifts silently the day a field is added.
+ */
+export type LogLevel = _LogLevel;
+export type ServerLogSource = _ServerLogSource;
+export type ServerLogRecord = _ServerLogRecord;
+export type ServerLogQuery = _ServerLogQuery;
+export type ServerLogPage = _ServerLogPage;
+/** `GET {basePath}/server-logs` — a page, plus what is available to filter by. */
+export type ServerLogsResponse = {
+    isSuccess: boolean;
+    message: string;
+    data: ServerLogPage & {
+        scopes: string[];
+        levelCounts: Record<LogLevel, number>;
+    };
+};
+/** How `audit_logs` rows are classified, so a viewer can rank them the same way. */
+export type AuditSeverity = _AuditSeverity;
+export type AuditCategory = _AuditCategory;
 export declare const MONITORING_ENDPOINTS: {
     MONITORING_HEALTH_CHECK: {
         method: "GET";

package/dist/src/Client/Proxy/wsProxy.js

@@ -1,9 +1,9 @@
 import { deduplicatedRefresh } from './httpProxy';
 import { addQueryParam, createProxyLogger, httpToWs, matchPath, parseCookies, rewritePath } from './utils';
-/**
- * True when an access token is absent or within `skewMs` of expiring. Decodes the JWT
- * exp WITHOUT verifying (verification happens at the backend) — this only decides whether
- * to pre-emptively refresh before the WS handshake.
+/**
+ * True when an access token is absent or within `skewMs` of expiring. Decodes the JWT
+ * exp WITHOUT verifying (verification happens at the backend) — this only decides whether
+ * to pre-emptively refresh before the WS handshake.
  */ function accessTokenExpiringSoon(token, skewMs = 60000) {
     if (!token) return true;
     try {
@@ -16,20 +16,20 @@ import { addQueryParam, createProxyLogger, httpToWs, matchPath, parseCookies, re
         return true;
     }
 }
-/**
- * Keeps the proxy→backend socket alive with a PROTOCOL ping, not a data frame.
- *
- * This used to send `''`. An empty text frame is still application data, so it
- * arrived at the backend's `message` handler, where `JSON.parse('')` throws —
- * and nucleus' own PubSub route logged "Failed to parse client message" once per
- * interval per connected client. On a busy IDP that is the entire debug log, and
- * it names the proxy's own heartbeat as a misbehaving client.
- *
- * `ping()` is a control frame: it never reaches `message`, the peer answers with
- * pong automatically, and it resets the idle timer the same way. Bun's WebSocket
- * client implements it; the JSON heartbeat is the fallback for a runtime that
- * does not, because `{"type":"ping"}` is a frame the PubSub route understands and
- * replies to, rather than one it can only fail to parse.
+/**
+ * Keeps the proxy→backend socket alive with a PROTOCOL ping, not a data frame.
+ *
+ * This used to send `''`. An empty text frame is still application data, so it
+ * arrived at the backend's `message` handler, where `JSON.parse('')` throws —
+ * and nucleus' own PubSub route logged "Failed to parse client message" once per
+ * interval per connected client. On a busy IDP that is the entire debug log, and
+ * it names the proxy's own heartbeat as a misbehaving client.
+ *
+ * `ping()` is a control frame: it never reaches `message`, the peer answers with
+ * pong automatically, and it resets the idle timer the same way. Bun's WebSocket
+ * client implements it; the JSON heartbeat is the fallback for a runtime that
+ * does not, because `{"type":"ping"}` is a frame the PubSub route understands and
+ * replies to, rather than one it can only fail to parse.
  */ function pingBackend(backendWs) {
     const withPing = backendWs;
     if (typeof withPing.ping === 'function') {
@@ -51,14 +51,14 @@ export function createWsProxyHandler(config) {
         }
         return null;
     }
-    /**
-   * The backend URL, plus whether this handshake carries a credential at all.
-   *
-   * The second half is the point. This function already KNEW when it had no
-   * token — it logged "No token found" and handed back a URL anyway, and the
-   * caller upgraded the socket regardless. That silence is what turns one
-   * logged-out browser tab into a permanent reconnect storm; see the refusal in
-   * `upgrade()` for the measurements.
+    /**
+   * The backend URL, plus whether this handshake carries a credential at all.
+   *
+   * The second half is the point. This function already KNEW when it had no
+   * token — it logged "No token found" and handed back a URL anyway, and the
+   * caller upgraded the socket regardless. That silence is what turns one
+   * logged-out browser tab into a permanent reconnect storm; see the refusal in
+   * `upgrade()` for the measurements.
    */ async function buildBackendUrl(path, target, cookies, query) {
         let baseUrl = target.url.replace(/\/$/, '');
         if (baseUrl.startsWith('http')) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "nucleus-core-ts",
-	"version": "0.9.953",
+	"version": "0.9.955",
 	"description": "Production-ready, enterprise-grade TypeScript framework for building multi-tenant APIs",
 	"author": "Hidayet Can Özcan <hidayetcan@gmail.com>",
 	"license": "SEE LICENSE IN LICENSE",