nucleus-core-ts 0.9.960 → 0.9.962

package/dist/src/Client/ApiCaller/system-tables.d.ts

@@ -1816,7 +1816,7 @@ export declare const SYSTEM_TABLES: readonly [{
     }, {
         readonly name: "expires_at";
         readonly type: "timestamptz";
-        readonly notNull: true;
+        readonly notNull: false;
     }, {
         readonly name: "revoked_at";
         readonly type: "timestamptz";

package/dist/src/Services/Auth/relaxSessionExpiry.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Make "sessions that never expire" possible in the database, not just in code.
+ *
+ * A never-expiring session is a row with no expiry — that is what the words
+ * mean. `user_sessions.expires_at NOT NULL` refuses that row, so an install
+ * configured for it did not degrade: login returned 500 and nobody could sign
+ * in at all. The config said one thing and the schema made it impossible.
+ *
+ * This is not left to the schema push. drizzle-kit's model has carried this
+ * column as nullable for a long time while live databases carried NOT NULL, and
+ * the push reported "the database already matches the model" every boot — it
+ * does not reconcile nullability. A statement nobody generates is a statement
+ * nobody can allow.
+ *
+ * So it is asked for explicitly, and only by installs that need it:
+ *
+ *   - Runs ONLY when the configured session lifetime resolves to `never`. An
+ *     install with a normal lifetime keeps its NOT NULL, and should — the
+ *     constraint is right for them.
+ *   - Checks before it writes, so an install already relaxed does nothing and
+ *     logs nothing on every subsequent boot.
+ *   - Loosens, never tightens. It cannot lose a row or a value: every existing
+ *     session keeps the expiry it has, the column simply stops refusing absence
+ *     in future writes.
+ *   - Never takes the app down. If it cannot run — no permission, no table — it
+ *     says so and boot continues; the failure then shows up as the 500 it was
+ *     meant to prevent, which is honest, rather than as a dead process.
+ */
+type MinimalDb = {
+    execute: (query: unknown) => Promise<unknown>;
+};
+/** Only the two calls this makes, so any app logger satisfies it. */
+type MinimalLogger = {
+    info: (message: string) => void;
+    warn: (message: string) => void;
+};
+export type RelaxSessionExpiryResult = {
+    action: 'skipped';
+    reason: 'lifetime-is-bounded' | 'unsafe-identifier';
+} | {
+    action: 'already-nullable';
+} | {
+    action: 'relaxed';
+} | {
+    action: 'failed';
+    reason: string;
+};
+export declare function relaxSessionExpiryIfNever(params: {
+    db: MinimalDb;
+    sql: ((strings: TemplateStringsArray, ...values: unknown[]) => unknown) & {
+        raw: (query: string) => unknown;
+    };
+    schemaName: string;
+    tableName?: string;
+    /** Seconds, or `null` for a session that never expires. */
+    lifetimeSeconds: number | null;
+    logger?: MinimalLogger;
+}): Promise<RelaxSessionExpiryResult>;
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "nucleus-core-ts",
-	"version": "0.9.960",
+	"version": "0.9.962",
 	"description": "Production-ready, enterprise-grade TypeScript framework for building multi-tenant APIs",
 	"author": "Hidayet Can Özcan <hidayetcan@gmail.com>",
 	"license": "SEE LICENSE IN LICENSE",