@getstrata/bootstrap 0.2.51 → 0.2.53

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @getstrata/bootstrap changelog
 
+## 0.2.53
+
+- `registerDefaultJobs()` also registers `audit.export` (`ExportAuditLogsJob`).
+- In-process `audit-export` schedule runs that job instead of calling `exportPendingAuditLogs()` inline.
+
+## 0.2.52
+
+- View provider registers `configureWebErrorView` so `errors/*.eta` render through the app Eta layout. `EtaViewEngine` receives `Request` from the layout-data resolver.
+- `createWebServer` unknown routes and null handlers return styled HTML 404s and run inside request ALS so `configureWebLayoutData` can read the session cookie.
+- `wrapSecuredRouteModelByKey` is documented as the wrong default for public HTML show pages; a missing model is a styled 404 and HTML/composite GET ETags stay off.
+
 ## 0.2.51
 
 - `createCookieSessionAuthManager` returns `CookieSessionAuthManager` (`signIn`, `signOut`, `signInRedirect`, `signOutRedirect`). Controllers no longer need a local cookie helper.

package/dist/bootstrap/web/routing.d.ts

@@ -9,10 +9,16 @@ export declare function routeParams(request: Request): Record<string, string>;
  * Mutates the request in place so instanceof Request and Bun internals stay valid.
  */
 export declare function toRouteRequest<TParams extends Record<string, string>>(request: Request): RouteRequest<TParams>;
-/** Laravel-style secured route-model binding for string keys (slugs, UUIDs). */
+/**
+ * Laravel-style secured route-model binding for string keys (slugs, UUIDs).
+ * Public HTML show pages should look up the model in the controller instead.
+ * If this wrapper is still used on HTML, a missing model becomes a styled 404
+ * and GET ETags are skipped for HTML / composite objects unless `etag: true`.
+ */
 export declare function wrapSecuredRouteModelByKey<TParams extends Record<string, string>, TModel, TParam extends keyof TParams & string>(param: TParam, resolver: (key: string, request: RouteRequest<TParams>) => Promise<TModel>, authorization: {
     resource: string;
     action: "view" | "create" | "update" | "delete";
+    etag?: boolean;
 }, handler: (request: RouteRequest<TParams>, model: TModel) => Response | Promise<Response>): RouteHandler;
 /** Web group (CSRF + flash + HTML errors) plus login throttle. Do not wrap with wrapWeb again. */
 export declare function wrapWebLogin(kernel: HttpKernel, handler: RouteHandler, onThrottled: (request: Request) => Response | Promise<Response>): RouteHandler;

package/dist/entries/context.js

@@ -170,7 +170,7 @@ import { validateEnv } from "@getstrata/core/config/envSchema";
 
 // ../../src/config/app.ts
 var appConfig = {
-  name: "WorkHub",
+  name: process.env.APP_NAME?.trim() || "WorkHub",
   env: process.env.APP_ENV ?? "local",
   debug: (process.env.APP_DEBUG ?? "true") !== "false",
   url: process.env.APP_URL ?? "http://localhost:3000",
@@ -424,6 +424,7 @@ import {
 
 // ../../src/bootstrap/queue/defaultJobs.ts
 import { DispatchWebhookJob } from "@getstrata/core/jobs/dispatchWebhookJob";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { InvalidateCacheTagsJob as InvalidateCacheTagsJob2 } from "@getstrata/core/jobs/invalidateCacheTagsJob";
 import { jobRegistry } from "@getstrata/core/queue/jobRegistry";
 import { resolveApplicationCache as resolveApplicationCache2 } from "@getstrata/core/runtime/applicationRegistry";
@@ -432,6 +433,7 @@ function registerDefaultJobs() {
     return new InvalidateCacheTagsJob2(resolveApplicationCache2());
   });
   jobRegistry.register("webhook.dispatch", () => new DispatchWebhookJob);
+  jobRegistry.register("audit.export", () => new ExportAuditLogsJob);
 }
 
 // ../../src/bootstrap/providers/queue.ts
@@ -460,7 +462,13 @@ var storage_default = storageProvider;
 
 // ../../src/bootstrap/providers/view.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
-import { DEFAULT_VIEWS_DIRECTORY, EtaViewEngine, resolveWebLayoutData } from "@getstrata/core/view";
+import {
+  configureWebErrorView,
+  DEFAULT_VIEWS_DIRECTORY,
+  EtaViewEngine,
+  errorTemplateName,
+  resolveWebLayoutData
+} from "@getstrata/core/view";
 
 // ../../src/config/frontend.ts
 function readFrontendMode() {
@@ -491,7 +499,15 @@ var viewProvider = {
     }
     const viewsDirectory = process.env.VIEW_DIRECTORY?.trim() || DEFAULT_VIEWS_DIRECTORY;
     config.set(VIEW_DIRECTORY_CONFIG_KEY, viewsDirectory);
-    container.set(CORE_VIEW_TOKEN, new EtaViewEngine(viewsDirectory, () => resolveWebLayoutData(container, currentRequestMeta().request)));
+    const engine = new EtaViewEngine(viewsDirectory, (request) => resolveWebLayoutData(container, request ?? currentRequestMeta().request));
+    container.set(CORE_VIEW_TOKEN, engine);
+    configureWebErrorView({
+      render: async (input) => engine.render(errorTemplateName(input.status), {
+        title: input.title,
+        message: input.message,
+        errors: input.errors
+      })
+    });
   }
 };
 

package/dist/entries/createRoutes.js

@@ -4,14 +4,14 @@ var __jsonParse = (a) => JSON.parse(a);
 // ../../src/bootstrap/createRoutes.ts
 import { applyMiddlewareToRoutes as applyMiddlewareToRoutes3 } from "@getstrata/core/http/middleware";
 import { jsonResponse as jsonResponse4 } from "@getstrata/core/http/response";
-import { htmlResponse as htmlResponse2 } from "@getstrata/core/view";
+import { notFoundHtmlResponse as notFoundHtmlResponse2 } from "@getstrata/core/view";
 
 // ../../index.html
 var strata_default = __jsonParse("{\"index\":\"_.._/_.._/index.html\",\"files\":[{\"input\":\"../../index.html\",\"path\":\"./index-sfreg6q3.js\",\"loader\":\"js\",\"isEntry\":true,\"headers\":{\"etag\":\"Oc_YLpCmV6M\",\"content-type\":\"text/javascript;charset=utf-8\"}},{\"input\":\"../../index.html\",\"path\":\"_.._/_.._/index.html\",\"loader\":\"html\",\"isEntry\":true,\"headers\":{\"etag\":\"rWY90LWIcx8\",\"content-type\":\"text/html;charset=utf-8\"}}]}");
 
 // ../../src/config/app.ts
 var appConfig = {
-  name: "WorkHub",
+  name: process.env.APP_NAME?.trim() || "WorkHub",
   env: process.env.APP_ENV ?? "local",
   debug: (process.env.APP_DEBUG ?? "true") !== "false",
   url: process.env.APP_URL ?? "http://localhost:3000",
@@ -508,7 +508,7 @@ function mergeSpaRoutes(dependencies, routes) {
 
 // ../../src/bootstrap/createWebRoutes.ts
 import { join as join3 } from "path";
-import { htmlResponse } from "@getstrata/core/view";
+import { notFoundHtmlResponse } from "@getstrata/core/view";
 
 // ../../src/bootstrap/buildWebModuleRoutes.ts
 import { applyMiddlewareToRoutes as applyMiddlewareToRoutes2 } from "@getstrata/core/http/middleware";
@@ -551,7 +551,7 @@ function createWebRoutes(dependencies) {
     const relativePath = pathname.replace(/^\//, "");
     const file = Bun.file(join3(process.cwd(), "public", relativePath));
     if (!await file.exists()) {
-      return htmlResponse("Not Found", { status: 404 });
+      return notFoundHtmlResponse();
     }
     return new Response(file);
   };
@@ -751,7 +751,7 @@ function assertScimIfMatch(request, etagSource) {
 }
 
 // ../../src/modules/scim/service.ts
-import { hashPassword } from "@getstrata/core/auth/password";
+import { hashPassword as hashPassword2 } from "@getstrata/core/auth/password";
 import { resolveService } from "@getstrata/core/contracts/di";
 import { NotFoundError as NotFoundError4 } from "@getstrata/core/errors/http";
 import { currentTenantId as currentTenantId4 } from "@getstrata/core/tenant/tenantContext";
@@ -1014,11 +1014,11 @@ var apiTokenTable = defineTable2({
 
 // ../../src/modules/user/authService.ts
 import { verifyPassword } from "@getstrata/core/auth/password";
-import { revealMfaSecret } from "@getstrata/core/crypto/mfaSecret";
-import { UnauthorizedError } from "@getstrata/core/errors/http";
+import { protectMfaSecret, revealMfaSecret } from "@getstrata/core/crypto/mfaSecret";
+import { UnauthorizedError, ValidationError } from "@getstrata/core/errors/http";
 import { logSecurityEvent } from "@getstrata/core/security/securityEvents";
 import { resolveDefaultTokenExpiryDays } from "@getstrata/core/security/tokenExpiry";
-import { verifyTotp } from "@getstrata/core/security/totp";
+import { buildOtpauthUrl, generateTotpSecret, verifyTotp } from "@getstrata/core/security/totp";
 import { currentTenantId as currentTenantId2 } from "@getstrata/core/tenant/tenantContext";
 
 // ../../src/core/auth/abilityCatalog.ts
@@ -1075,6 +1075,19 @@ var oauthIdentityTable = defineTable4({
   columns: ["id", "user_id", "provider", "provider_user_id", "email", "created_at"]
 });
 
+// ../../src/modules/user/passwordResetService.ts
+import { hashPassword } from "@getstrata/core/auth/password";
+import { hashApiToken } from "@getstrata/core/auth/tokenHash";
+import { repositoryConnection as db2 } from "@getstrata/core/database/repositoryConnection";
+import { ValidationError as ValidationError2 } from "@getstrata/core/errors/http";
+import { absoluteTemporarySignedUrl } from "@getstrata/core/http/signedUrl";
+import { mailer } from "@getstrata/core/mail/mailer";
+import { sendMarkdownMail } from "@getstrata/core/mail/markdownMailable";
+import { logSecurityEvent as logSecurityEvent2 } from "@getstrata/core/security/securityEvents";
+import { timingSafeCompareString } from "@getstrata/core/security/timingSafeCompare";
+var RESET_TTL_SECONDS = 60 * 60;
+var VERIFY_TTL_SECONDS = 60 * 60 * 24;
+
 // ../../src/modules/user/repository.ts
 import {
   emailLookupForQuery,
@@ -1108,7 +1121,7 @@ var userTable = defineTable5({
 });
 
 // ../../src/modules/user/tokenService.ts
-import { hashApiToken } from "@getstrata/core/auth/tokenHash";
+import { hashApiToken as hashApiToken2 } from "@getstrata/core/auth/tokenHash";
 import { ForbiddenError, NotFoundError as NotFoundError3 } from "@getstrata/core/errors/http";
 import { resolveDefaultTokenExpiryDays as resolveDefaultTokenExpiryDays2 } from "@getstrata/core/security/tokenExpiry";
 
@@ -1176,7 +1189,7 @@ class ScimService {
     if (!email) {
       throw new Error("SCIM userName or email is required.");
     }
-    const passwordHash = await hashPassword(crypto.randomUUID());
+    const passwordHash = await hashPassword2(crypto.randomUUID());
     const user = await this.users.create({
       name: payload.name?.formatted ?? email.split("@")[0] ?? "SCIM User",
       email,
@@ -1428,7 +1441,7 @@ function createRoutes(dependencies) {
     "/*": async () => {
       registerRoute2("GET", "/*", []);
       if (isViewsEnabled()) {
-        return htmlResponse2("Not Found", { status: 404 });
+        return notFoundHtmlResponse2();
       }
       if (isSpaEnabled()) {
         return jsonResponse4({ error: "Not Found" }, { status: 404 });

package/dist/entries/createWebRoutes.js

@@ -3,7 +3,7 @@ var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/createWebRoutes.ts
 import { join as join2 } from "path";
-import { htmlResponse } from "@getstrata/core/view";
+import { notFoundHtmlResponse } from "@getstrata/core/view";
 
 // ../../src/config/frontend.ts
 function readFrontendMode() {
@@ -478,7 +478,7 @@ function createWebRoutes(dependencies) {
     const relativePath = pathname.replace(/^\//, "");
     const file = Bun.file(join2(process.cwd(), "public", relativePath));
     if (!await file.exists()) {
-      return htmlResponse("Not Found", { status: 404 });
+      return notFoundHtmlResponse();
     }
     return new Response(file);
   };

package/dist/entries/dependencies.js

@@ -170,7 +170,7 @@ import { validateEnv } from "@getstrata/core/config/envSchema";
 
 // ../../src/config/app.ts
 var appConfig = {
-  name: "WorkHub",
+  name: process.env.APP_NAME?.trim() || "WorkHub",
   env: process.env.APP_ENV ?? "local",
   debug: (process.env.APP_DEBUG ?? "true") !== "false",
   url: process.env.APP_URL ?? "http://localhost:3000",
@@ -424,6 +424,7 @@ import {
 
 // ../../src/bootstrap/queue/defaultJobs.ts
 import { DispatchWebhookJob } from "@getstrata/core/jobs/dispatchWebhookJob";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { InvalidateCacheTagsJob as InvalidateCacheTagsJob2 } from "@getstrata/core/jobs/invalidateCacheTagsJob";
 import { jobRegistry } from "@getstrata/core/queue/jobRegistry";
 import { resolveApplicationCache as resolveApplicationCache2 } from "@getstrata/core/runtime/applicationRegistry";
@@ -432,6 +433,7 @@ function registerDefaultJobs() {
     return new InvalidateCacheTagsJob2(resolveApplicationCache2());
   });
   jobRegistry.register("webhook.dispatch", () => new DispatchWebhookJob);
+  jobRegistry.register("audit.export", () => new ExportAuditLogsJob);
 }
 
 // ../../src/bootstrap/providers/queue.ts
@@ -460,7 +462,13 @@ var storage_default = storageProvider;
 
 // ../../src/bootstrap/providers/view.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
-import { DEFAULT_VIEWS_DIRECTORY, EtaViewEngine, resolveWebLayoutData } from "@getstrata/core/view";
+import {
+  configureWebErrorView,
+  DEFAULT_VIEWS_DIRECTORY,
+  EtaViewEngine,
+  errorTemplateName,
+  resolveWebLayoutData
+} from "@getstrata/core/view";
 
 // ../../src/config/frontend.ts
 function readFrontendMode() {
@@ -491,7 +499,15 @@ var viewProvider = {
     }
     const viewsDirectory = process.env.VIEW_DIRECTORY?.trim() || DEFAULT_VIEWS_DIRECTORY;
     config.set(VIEW_DIRECTORY_CONFIG_KEY, viewsDirectory);
-    container.set(CORE_VIEW_TOKEN, new EtaViewEngine(viewsDirectory, () => resolveWebLayoutData(container, currentRequestMeta().request)));
+    const engine = new EtaViewEngine(viewsDirectory, (request) => resolveWebLayoutData(container, request ?? currentRequestMeta().request));
+    container.set(CORE_VIEW_TOKEN, engine);
+    configureWebErrorView({
+      render: async (input) => engine.render(errorTemplateName(input.status), {
+        title: input.title,
+        message: input.message,
+        errors: input.errors
+      })
+    });
   }
 };
 

package/dist/entries/providers/view.js

@@ -3,7 +3,13 @@ var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/providers/view.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
-import { DEFAULT_VIEWS_DIRECTORY, EtaViewEngine, resolveWebLayoutData } from "@getstrata/core/view";
+import {
+  configureWebErrorView,
+  DEFAULT_VIEWS_DIRECTORY,
+  EtaViewEngine,
+  errorTemplateName,
+  resolveWebLayoutData
+} from "@getstrata/core/view";
 
 // ../../src/config/frontend.ts
 function readFrontendMode() {
@@ -34,7 +40,15 @@ var viewProvider = {
     }
     const viewsDirectory = process.env.VIEW_DIRECTORY?.trim() || DEFAULT_VIEWS_DIRECTORY;
     config.set(VIEW_DIRECTORY_CONFIG_KEY, viewsDirectory);
-    container.set(CORE_VIEW_TOKEN, new EtaViewEngine(viewsDirectory, () => resolveWebLayoutData(container, currentRequestMeta().request)));
+    const engine = new EtaViewEngine(viewsDirectory, (request) => resolveWebLayoutData(container, request ?? currentRequestMeta().request));
+    container.set(CORE_VIEW_TOKEN, engine);
+    configureWebErrorView({
+      render: async (input) => engine.render(errorTemplateName(input.status), {
+        title: input.title,
+        message: input.message,
+        errors: input.errors
+      })
+    });
   }
 };
 export {

package/dist/entries/providers.js

@@ -81,7 +81,7 @@ import { validateEnv } from "@getstrata/core/config/envSchema";
 
 // ../../src/config/app.ts
 var appConfig = {
-  name: "WorkHub",
+  name: process.env.APP_NAME?.trim() || "WorkHub",
   env: process.env.APP_ENV ?? "local",
   debug: (process.env.APP_DEBUG ?? "true") !== "false",
   url: process.env.APP_URL ?? "http://localhost:3000",
@@ -414,6 +414,7 @@ import {
 
 // ../../src/bootstrap/queue/defaultJobs.ts
 import { DispatchWebhookJob } from "@getstrata/core/jobs/dispatchWebhookJob";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { InvalidateCacheTagsJob as InvalidateCacheTagsJob2 } from "@getstrata/core/jobs/invalidateCacheTagsJob";
 import { jobRegistry } from "@getstrata/core/queue/jobRegistry";
 import { resolveApplicationCache as resolveApplicationCache2 } from "@getstrata/core/runtime/applicationRegistry";
@@ -422,6 +423,7 @@ function registerDefaultJobs() {
     return new InvalidateCacheTagsJob2(resolveApplicationCache2());
   });
   jobRegistry.register("webhook.dispatch", () => new DispatchWebhookJob);
+  jobRegistry.register("audit.export", () => new ExportAuditLogsJob);
 }
 
 // ../../src/bootstrap/providers/queue.ts
@@ -450,7 +452,13 @@ var storage_default = storageProvider;
 
 // ../../src/bootstrap/providers/view.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
-import { DEFAULT_VIEWS_DIRECTORY, EtaViewEngine, resolveWebLayoutData } from "@getstrata/core/view";
+import {
+  configureWebErrorView,
+  DEFAULT_VIEWS_DIRECTORY,
+  EtaViewEngine,
+  errorTemplateName,
+  resolveWebLayoutData
+} from "@getstrata/core/view";
 
 // ../../src/config/frontend.ts
 function readFrontendMode() {
@@ -481,7 +489,15 @@ var viewProvider = {
     }
     const viewsDirectory = process.env.VIEW_DIRECTORY?.trim() || DEFAULT_VIEWS_DIRECTORY;
     config.set(VIEW_DIRECTORY_CONFIG_KEY, viewsDirectory);
-    container.set(CORE_VIEW_TOKEN, new EtaViewEngine(viewsDirectory, () => resolveWebLayoutData(container, currentRequestMeta().request)));
+    const engine = new EtaViewEngine(viewsDirectory, (request) => resolveWebLayoutData(container, request ?? currentRequestMeta().request));
+    container.set(CORE_VIEW_TOKEN, engine);
+    configureWebErrorView({
+      render: async (input) => engine.render(errorTemplateName(input.status), {
+        title: input.title,
+        message: input.message,
+        errors: input.errors
+      })
+    });
   }
 };
 

package/dist/entries/queue/defaultJobs.js

@@ -3,6 +3,7 @@ var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/queue/defaultJobs.ts
 import { DispatchWebhookJob } from "@getstrata/core/jobs/dispatchWebhookJob";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { InvalidateCacheTagsJob } from "@getstrata/core/jobs/invalidateCacheTagsJob";
 import { jobRegistry } from "@getstrata/core/queue/jobRegistry";
 import { resolveApplicationCache } from "@getstrata/core/runtime/applicationRegistry";
@@ -11,6 +12,7 @@ function registerDefaultJobs() {
     return new InvalidateCacheTagsJob(resolveApplicationCache());
   });
   jobRegistry.register("webhook.dispatch", () => new DispatchWebhookJob);
+  jobRegistry.register("audit.export", () => new ExportAuditLogsJob);
 }
 export {
   registerDefaultJobs

package/dist/entries/schedule.js

@@ -2,7 +2,7 @@
 var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/schedule.ts
-import { exportPendingAuditLogs } from "@getstrata/core/audit/exportAuditLogs";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { appLogger } from "@getstrata/core/logging/logger";
 import { appSchedule } from "@getstrata/core/scheduler/schedule";
 
@@ -36,10 +36,7 @@ appSchedule.command("* * * * *", "audit-export", async () => {
     return;
   }
   try {
-    const exported = await exportPendingAuditLogs();
-    if (exported > 0) {
-      appLogger.info(`Exported ${exported} audit log entries to SIEM.`);
-    }
+    await new ExportAuditLogsJob().handle({});
   } catch (error) {
     appLogger.error("Audit export failed.", { error: String(error) });
   }

package/dist/entries/web/server.js

@@ -2,10 +2,21 @@
 var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/web/server.ts
+import { currentRequestMeta, runWithRequestMeta } from "@getstrata/core/http/requestMetaContext";
+import { notFoundHtmlResponse } from "@getstrata/core/view";
+async function missingHtmlResponse() {
+  return notFoundHtmlResponse();
+}
 function wrapRouteHandler(handler) {
   return async (request) => {
-    const response = await handler(request);
-    return response ?? new Response("Not Found", { status: 404 });
+    return await runWithRequestMeta({
+      ...currentRequestMeta(),
+      request,
+      userAgent: request.headers.get("user-agent")
+    }, async () => {
+      const response = await handler(request);
+      return response ?? await missingHtmlResponse();
+    });
   };
 }
 function convertAppRoutesToBunRoutes(routes) {
@@ -37,19 +48,25 @@ function createWebServer(options) {
     port: options.port,
     ...bunRoutes ? { routes: bunRoutes } : {},
     async fetch(request) {
-      await options.onRequest?.(request);
-      const url = new URL(request.url);
-      if (url.pathname.startsWith("/assets/")) {
-        const file = Bun.file(`${publicDir}${url.pathname}`);
-        if (await file.exists()) {
-          return new Response(file);
+      return await runWithRequestMeta({
+        ...currentRequestMeta(),
+        request,
+        userAgent: request.headers.get("user-agent")
+      }, async () => {
+        await options.onRequest?.(request);
+        const url = new URL(request.url);
+        if (url.pathname.startsWith("/assets/")) {
+          const file = Bun.file(`${publicDir}${url.pathname}`);
+          if (await file.exists()) {
+            return new Response(file);
+          }
         }
-      }
-      if (options.handle) {
-        const response = await options.handle(request);
-        return response ?? new Response("Not Found", { status: 404 });
-      }
-      return new Response("Not Found", { status: 404 });
+        if (options.handle) {
+          const response = await options.handle(request);
+          return response ?? await missingHtmlResponse();
+        }
+        return await missingHtmlResponse();
+      });
     }
   });
 }

package/dist/index.js

@@ -531,7 +531,7 @@ import { validateEnv } from "@getstrata/core/config/envSchema";
 
 // ../../src/config/app.ts
 var appConfig = {
-  name: "WorkHub",
+  name: process.env.APP_NAME?.trim() || "WorkHub",
   env: process.env.APP_ENV ?? "local",
   debug: (process.env.APP_DEBUG ?? "true") !== "false",
   url: process.env.APP_URL ?? "http://localhost:3000",
@@ -770,6 +770,7 @@ import {
 
 // ../../src/bootstrap/queue/defaultJobs.ts
 import { DispatchWebhookJob } from "@getstrata/core/jobs/dispatchWebhookJob";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { InvalidateCacheTagsJob as InvalidateCacheTagsJob2 } from "@getstrata/core/jobs/invalidateCacheTagsJob";
 import { jobRegistry } from "@getstrata/core/queue/jobRegistry";
 import { resolveApplicationCache as resolveApplicationCache2 } from "@getstrata/core/runtime/applicationRegistry";
@@ -778,6 +779,7 @@ function registerDefaultJobs() {
     return new InvalidateCacheTagsJob2(resolveApplicationCache2());
   });
   jobRegistry.register("webhook.dispatch", () => new DispatchWebhookJob);
+  jobRegistry.register("audit.export", () => new ExportAuditLogsJob);
 }
 
 // ../../src/bootstrap/providers/queue.ts
@@ -806,7 +808,13 @@ var storage_default = storageProvider;
 
 // ../../src/bootstrap/providers/view.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
-import { DEFAULT_VIEWS_DIRECTORY, EtaViewEngine, resolveWebLayoutData } from "@getstrata/core/view";
+import {
+  configureWebErrorView,
+  DEFAULT_VIEWS_DIRECTORY,
+  EtaViewEngine,
+  errorTemplateName,
+  resolveWebLayoutData
+} from "@getstrata/core/view";
 var CORE_VIEW_TOKEN = "core.view";
 var VIEW_DIRECTORY_CONFIG_KEY = "view.directory";
 var viewProvider = {
@@ -817,7 +825,15 @@ var viewProvider = {
     }
     const viewsDirectory = process.env.VIEW_DIRECTORY?.trim() || DEFAULT_VIEWS_DIRECTORY;
     config.set(VIEW_DIRECTORY_CONFIG_KEY, viewsDirectory);
-    container.set(CORE_VIEW_TOKEN, new EtaViewEngine(viewsDirectory, () => resolveWebLayoutData(container, currentRequestMeta().request)));
+    const engine = new EtaViewEngine(viewsDirectory, (request) => resolveWebLayoutData(container, request ?? currentRequestMeta().request));
+    container.set(CORE_VIEW_TOKEN, engine);
+    configureWebErrorView({
+      render: async (input) => engine.render(errorTemplateName(input.status), {
+        title: input.title,
+        message: input.message,
+        errors: input.errors
+      })
+    });
   }
 };
 
@@ -868,7 +884,7 @@ function createAppContext() {
 }
 // ../../src/bootstrap/createWebRoutes.ts
 import { join as join3 } from "path";
-import { htmlResponse } from "@getstrata/core/view";
+import { notFoundHtmlResponse } from "@getstrata/core/view";
 function registerRoute(method, path, middleware) {
   routeRegistry.register({ method, path, middleware });
 }
@@ -886,7 +902,7 @@ function createWebRoutes(dependencies) {
     const relativePath = pathname.replace(/^\//, "");
     const file = Bun.file(join3(process.cwd(), "public", relativePath));
     if (!await file.exists()) {
-      return htmlResponse("Not Found", { status: 404 });
+      return notFoundHtmlResponse();
     }
     return new Response(file);
   };
@@ -1201,10 +1217,21 @@ function createRouteKernel(dependencies) {
   return createHttpKernel(dependencies);
 }
 // ../../src/bootstrap/web/server.ts
+import { currentRequestMeta as currentRequestMeta2, runWithRequestMeta } from "@getstrata/core/http/requestMetaContext";
+import { notFoundHtmlResponse as notFoundHtmlResponse2 } from "@getstrata/core/view";
+async function missingHtmlResponse() {
+  return notFoundHtmlResponse2();
+}
 function wrapRouteHandler(handler) {
   return async (request) => {
-    const response = await handler(request);
-    return response ?? new Response("Not Found", { status: 404 });
+    return await runWithRequestMeta({
+      ...currentRequestMeta2(),
+      request,
+      userAgent: request.headers.get("user-agent")
+    }, async () => {
+      const response = await handler(request);
+      return response ?? await missingHtmlResponse();
+    });
   };
 }
 function convertAppRoutesToBunRoutes(routes) {
@@ -1236,19 +1263,25 @@ function createWebServer(options) {
     port: options.port,
     ...bunRoutes ? { routes: bunRoutes } : {},
     async fetch(request) {
-      await options.onRequest?.(request);
-      const url = new URL(request.url);
-      if (url.pathname.startsWith("/assets/")) {
-        const file = Bun.file(`${publicDir}${url.pathname}`);
-        if (await file.exists()) {
-          return new Response(file);
+      return await runWithRequestMeta({
+        ...currentRequestMeta2(),
+        request,
+        userAgent: request.headers.get("user-agent")
+      }, async () => {
+        await options.onRequest?.(request);
+        const url = new URL(request.url);
+        if (url.pathname.startsWith("/assets/")) {
+          const file = Bun.file(`${publicDir}${url.pathname}`);
+          if (await file.exists()) {
+            return new Response(file);
+          }
         }
-      }
-      if (options.handle) {
-        const response = await options.handle(request);
-        return response ?? new Response("Not Found", { status: 404 });
-      }
-      return new Response("Not Found", { status: 404 });
+        if (options.handle) {
+          const response = await options.handle(request);
+          return response ?? await missingHtmlResponse();
+        }
+        return await missingHtmlResponse();
+      });
     }
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/bootstrap",
-  "version": "0.2.51",
+  "version": "0.2.53",
   "description": "Strata application bootstrap — HttpKernel, DI, web session helpers",
   "type": "module",
   "license": "MIT",
@@ -173,14 +173,14 @@
     "build:bundle": "bun build index.ts --outdir dist --target bun --external bun --external eta --external @getstrata/core",
     "build:types": "tsc -p tsconfig.types.json && bun ../../scripts/prune-bootstrap-dist-types.ts",
     "prepublishOnly": "bun run build",
-    "build:subpaths": "bun build entries/applicationRegistry.ts entries/buildModuleRoutes.ts entries/buildWebModuleRoutes.ts entries/cache/modelCacheTags.ts entries/config.ts entries/context.ts entries/contracts.ts entries/createWebRoutes.ts entries/createRoutes.ts entries/createSpaRoutes.ts entries/dependencies.ts entries/discoverModules.ts entries/health.ts entries/http/securedRouteModelBinding.ts entries/httpKernel.ts entries/listeners/invalidateCacheOnModelWrite.ts entries/membershipService.ts entries/metricsRoutes.ts entries/queue/defaultJobs.ts entries/providers.ts entries/providers/view.ts entries/routeRegistry.ts entries/schedule.ts entries/secretsGuard.ts entries/web/forms.ts entries/web/routing.ts entries/web/server.ts entries/web/session.ts entries/web/slug.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/bootstrap --external @getstrata/bootstrap/applicationRegistry --external @getstrata/bootstrap/buildModuleRoutes --external @getstrata/bootstrap/buildWebModuleRoutes --external @getstrata/bootstrap/cache/modelCacheTags --external @getstrata/bootstrap/config --external @getstrata/bootstrap/context --external @getstrata/bootstrap/contracts --external @getstrata/bootstrap/createWebRoutes --external @getstrata/bootstrap/createRoutes --external @getstrata/bootstrap/createSpaRoutes --external @getstrata/bootstrap/dependencies --external @getstrata/bootstrap/discoverModules --external @getstrata/bootstrap/health --external @getstrata/bootstrap/http/securedRouteModelBinding --external @getstrata/bootstrap/httpKernel --external @getstrata/bootstrap/listeners/invalidateCacheOnModelWrite --external @getstrata/bootstrap/membershipService --external @getstrata/bootstrap/metricsRoutes --external @getstrata/bootstrap/queue/defaultJobs --external @getstrata/bootstrap/providers --external @getstrata/bootstrap/providers/view --external @getstrata/bootstrap/routeRegistry --external @getstrata/bootstrap/schedule --external @getstrata/bootstrap/secretsGuard --external @getstrata/bootstrap/web/forms --external @getstrata/bootstrap/web/routing --external @getstrata/bootstrap/web/server --external @getstrata/bootstrap/web/session --external @getstrata/bootstrap/web/slug --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
+    "build:subpaths": "bun build entries/applicationRegistry.ts entries/buildModuleRoutes.ts entries/buildWebModuleRoutes.ts entries/cache/modelCacheTags.ts entries/config.ts entries/context.ts entries/contracts.ts entries/createWebRoutes.ts entries/createRoutes.ts entries/createSpaRoutes.ts entries/dependencies.ts entries/discoverModules.ts entries/health.ts entries/http/securedRouteModelBinding.ts entries/httpKernel.ts entries/listeners/invalidateCacheOnModelWrite.ts entries/membershipService.ts entries/metricsRoutes.ts entries/queue/defaultJobs.ts entries/providers.ts entries/providers/view.ts entries/routeRegistry.ts entries/schedule.ts entries/secretsGuard.ts entries/web/forms.ts entries/web/routing.ts entries/web/server.ts entries/web/session.ts entries/web/slug.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/bootstrap --external @getstrata/bootstrap/applicationRegistry --external @getstrata/bootstrap/buildModuleRoutes --external @getstrata/bootstrap/buildWebModuleRoutes --external @getstrata/bootstrap/cache/modelCacheTags --external @getstrata/bootstrap/config --external @getstrata/bootstrap/context --external @getstrata/bootstrap/contracts --external @getstrata/bootstrap/createWebRoutes --external @getstrata/bootstrap/createRoutes --external @getstrata/bootstrap/createSpaRoutes --external @getstrata/bootstrap/dependencies --external @getstrata/bootstrap/discoverModules --external @getstrata/bootstrap/health --external @getstrata/bootstrap/http/securedRouteModelBinding --external @getstrata/bootstrap/httpKernel --external @getstrata/bootstrap/listeners/invalidateCacheOnModelWrite --external @getstrata/bootstrap/membershipService --external @getstrata/bootstrap/metricsRoutes --external @getstrata/bootstrap/queue/defaultJobs --external @getstrata/bootstrap/providers --external @getstrata/bootstrap/providers/view --external @getstrata/bootstrap/routeRegistry --external @getstrata/bootstrap/schedule --external @getstrata/bootstrap/secretsGuard --external @getstrata/bootstrap/web/forms --external @getstrata/bootstrap/web/routing --external @getstrata/bootstrap/web/server --external @getstrata/bootstrap/web/session --external @getstrata/bootstrap/web/slug --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/signedUrl --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/exportAuditLogsJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/mail/sanitizeMailHtml --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
     "build:shims": "true"
   },
   "publishConfig": {
     "access": "public"
   },
   "peerDependencies": {
-    "@getstrata/core": "^0.5.60",
+    "@getstrata/core": "^0.5.62",
     "typescript": "^5.9.0"
   }
 }