@getstrata/bootstrap 0.2.52 → 0.2.54

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @getstrata/bootstrap changelog
 
+## 0.2.54
+
+- `HttpKernel.wrapSigned()` applies `createValidateSignatureMiddleware` so HTMX routes can require a valid signed URL.
+
+## 0.2.53
+
+- `registerDefaultJobs()` also registers `audit.export` (`ExportAuditLogsJob`).
+- In-process `audit-export` schedule runs that job instead of calling `exportPendingAuditLogs()` inline.
+
 ## 0.2.52
 
 - View provider registers `configureWebErrorView` so `errors/*.eta` render through the app Eta layout. `EtaViewEngine` receives `Request` from the layout-data resolver.

package/dist/bootstrap/httpKernel.d.ts

@@ -20,6 +20,7 @@ declare class HttpKernel {
     wrapAbility(ability: string, handler: RouteHandler): RouteHandler;
     wrapPolicy(resource: string, action: keyof Policy, handler: RouteHandler): RouteHandler;
     wrapLogin(handler: RouteHandler): RouteHandler;
+    wrapSigned(handler: RouteHandler): RouteHandler;
     wrapRegister(handler: RouteHandler): RouteHandler;
     private wrapThrottle;
 }

package/dist/entries/buildModuleRoutes.js

@@ -25,6 +25,7 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
@@ -240,6 +241,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }

package/dist/entries/buildWebModuleRoutes.js

@@ -28,6 +28,7 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
@@ -243,6 +244,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }

package/dist/entries/context.js

@@ -170,7 +170,7 @@ import { validateEnv } from "@getstrata/core/config/envSchema";
 
 // ../../src/config/app.ts
 var appConfig = {
-  name: "WorkHub",
+  name: process.env.APP_NAME?.trim() || "WorkHub",
   env: process.env.APP_ENV ?? "local",
   debug: (process.env.APP_DEBUG ?? "true") !== "false",
   url: process.env.APP_URL ?? "http://localhost:3000",
@@ -424,6 +424,7 @@ import {
 
 // ../../src/bootstrap/queue/defaultJobs.ts
 import { DispatchWebhookJob } from "@getstrata/core/jobs/dispatchWebhookJob";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { InvalidateCacheTagsJob as InvalidateCacheTagsJob2 } from "@getstrata/core/jobs/invalidateCacheTagsJob";
 import { jobRegistry } from "@getstrata/core/queue/jobRegistry";
 import { resolveApplicationCache as resolveApplicationCache2 } from "@getstrata/core/runtime/applicationRegistry";
@@ -432,6 +433,7 @@ function registerDefaultJobs() {
     return new InvalidateCacheTagsJob2(resolveApplicationCache2());
   });
   jobRegistry.register("webhook.dispatch", () => new DispatchWebhookJob);
+  jobRegistry.register("audit.export", () => new ExportAuditLogsJob);
 }
 
 // ../../src/bootstrap/providers/queue.ts

package/dist/entries/createRoutes.js

@@ -11,7 +11,7 @@ var strata_default = __jsonParse("{\"index\":\"_.._/_.._/index.html\",\"files\":
 
 // ../../src/config/app.ts
 var appConfig = {
-  name: "WorkHub",
+  name: process.env.APP_NAME?.trim() || "WorkHub",
   env: process.env.APP_ENV ?? "local",
   debug: (process.env.APP_DEBUG ?? "true") !== "false",
   url: process.env.APP_URL ?? "http://localhost:3000",
@@ -81,6 +81,7 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
@@ -278,6 +279,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
@@ -751,7 +755,7 @@ function assertScimIfMatch(request, etagSource) {
 }
 
 // ../../src/modules/scim/service.ts
-import { hashPassword } from "@getstrata/core/auth/password";
+import { hashPassword as hashPassword3 } from "@getstrata/core/auth/password";
 import { resolveService } from "@getstrata/core/contracts/di";
 import { NotFoundError as NotFoundError4 } from "@getstrata/core/errors/http";
 import { currentTenantId as currentTenantId4 } from "@getstrata/core/tenant/tenantContext";
@@ -1013,12 +1017,12 @@ var apiTokenTable = defineTable2({
 });
 
 // ../../src/modules/user/authService.ts
-import { verifyPassword } from "@getstrata/core/auth/password";
-import { revealMfaSecret } from "@getstrata/core/crypto/mfaSecret";
-import { UnauthorizedError } from "@getstrata/core/errors/http";
+import { hashPassword, verifyPassword } from "@getstrata/core/auth/password";
+import { protectMfaSecret, revealMfaSecret } from "@getstrata/core/crypto/mfaSecret";
+import { UnauthorizedError, ValidationError } from "@getstrata/core/errors/http";
 import { logSecurityEvent } from "@getstrata/core/security/securityEvents";
 import { resolveDefaultTokenExpiryDays } from "@getstrata/core/security/tokenExpiry";
-import { verifyTotp } from "@getstrata/core/security/totp";
+import { buildOtpauthUrl, generateTotpSecret, verifyTotp } from "@getstrata/core/security/totp";
 import { currentTenantId as currentTenantId2 } from "@getstrata/core/tenant/tenantContext";
 
 // ../../src/core/auth/abilityCatalog.ts
@@ -1075,6 +1079,19 @@ var oauthIdentityTable = defineTable4({
   columns: ["id", "user_id", "provider", "provider_user_id", "email", "created_at"]
 });
 
+// ../../src/modules/user/passwordResetService.ts
+import { hashPassword as hashPassword2 } from "@getstrata/core/auth/password";
+import { hashApiToken } from "@getstrata/core/auth/tokenHash";
+import { repositoryConnection as db2 } from "@getstrata/core/database/repositoryConnection";
+import { ValidationError as ValidationError2 } from "@getstrata/core/errors/http";
+import { absoluteTemporarySignedUrl } from "@getstrata/core/http/signedUrl";
+import { mailer } from "@getstrata/core/mail/mailer";
+import { sendMarkdownMail } from "@getstrata/core/mail/markdownMailable";
+import { logSecurityEvent as logSecurityEvent2 } from "@getstrata/core/security/securityEvents";
+import { timingSafeCompareString } from "@getstrata/core/security/timingSafeCompare";
+var RESET_TTL_SECONDS = 60 * 60;
+var VERIFY_TTL_SECONDS = 60 * 60 * 24;
+
 // ../../src/modules/user/repository.ts
 import {
   emailLookupForQuery,
@@ -1108,7 +1125,7 @@ var userTable = defineTable5({
 });
 
 // ../../src/modules/user/tokenService.ts
-import { hashApiToken } from "@getstrata/core/auth/tokenHash";
+import { hashApiToken as hashApiToken2 } from "@getstrata/core/auth/tokenHash";
 import { ForbiddenError, NotFoundError as NotFoundError3 } from "@getstrata/core/errors/http";
 import { resolveDefaultTokenExpiryDays as resolveDefaultTokenExpiryDays2 } from "@getstrata/core/security/tokenExpiry";
 
@@ -1176,7 +1193,7 @@ class ScimService {
     if (!email) {
       throw new Error("SCIM userName or email is required.");
     }
-    const passwordHash = await hashPassword(crypto.randomUUID());
+    const passwordHash = await hashPassword3(crypto.randomUUID());
     const user = await this.users.create({
       name: payload.name?.formatted ?? email.split("@")[0] ?? "SCIM User",
       email,

package/dist/entries/createWebRoutes.js

@@ -50,6 +50,7 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
@@ -247,6 +248,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }

package/dist/entries/dependencies.js

@@ -170,7 +170,7 @@ import { validateEnv } from "@getstrata/core/config/envSchema";
 
 // ../../src/config/app.ts
 var appConfig = {
-  name: "WorkHub",
+  name: process.env.APP_NAME?.trim() || "WorkHub",
   env: process.env.APP_ENV ?? "local",
   debug: (process.env.APP_DEBUG ?? "true") !== "false",
   url: process.env.APP_URL ?? "http://localhost:3000",
@@ -424,6 +424,7 @@ import {
 
 // ../../src/bootstrap/queue/defaultJobs.ts
 import { DispatchWebhookJob } from "@getstrata/core/jobs/dispatchWebhookJob";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { InvalidateCacheTagsJob as InvalidateCacheTagsJob2 } from "@getstrata/core/jobs/invalidateCacheTagsJob";
 import { jobRegistry } from "@getstrata/core/queue/jobRegistry";
 import { resolveApplicationCache as resolveApplicationCache2 } from "@getstrata/core/runtime/applicationRegistry";
@@ -432,6 +433,7 @@ function registerDefaultJobs() {
     return new InvalidateCacheTagsJob2(resolveApplicationCache2());
   });
   jobRegistry.register("webhook.dispatch", () => new DispatchWebhookJob);
+  jobRegistry.register("audit.export", () => new ExportAuditLogsJob);
 }
 
 // ../../src/bootstrap/providers/queue.ts

package/dist/entries/httpKernel.js

@@ -21,6 +21,7 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
@@ -236,6 +237,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }

package/dist/entries/providers.js

@@ -81,7 +81,7 @@ import { validateEnv } from "@getstrata/core/config/envSchema";
 
 // ../../src/config/app.ts
 var appConfig = {
-  name: "WorkHub",
+  name: process.env.APP_NAME?.trim() || "WorkHub",
   env: process.env.APP_ENV ?? "local",
   debug: (process.env.APP_DEBUG ?? "true") !== "false",
   url: process.env.APP_URL ?? "http://localhost:3000",
@@ -414,6 +414,7 @@ import {
 
 // ../../src/bootstrap/queue/defaultJobs.ts
 import { DispatchWebhookJob } from "@getstrata/core/jobs/dispatchWebhookJob";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { InvalidateCacheTagsJob as InvalidateCacheTagsJob2 } from "@getstrata/core/jobs/invalidateCacheTagsJob";
 import { jobRegistry } from "@getstrata/core/queue/jobRegistry";
 import { resolveApplicationCache as resolveApplicationCache2 } from "@getstrata/core/runtime/applicationRegistry";
@@ -422,6 +423,7 @@ function registerDefaultJobs() {
     return new InvalidateCacheTagsJob2(resolveApplicationCache2());
   });
   jobRegistry.register("webhook.dispatch", () => new DispatchWebhookJob);
+  jobRegistry.register("audit.export", () => new ExportAuditLogsJob);
 }
 
 // ../../src/bootstrap/providers/queue.ts

package/dist/entries/queue/defaultJobs.js

@@ -3,6 +3,7 @@ var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/queue/defaultJobs.ts
 import { DispatchWebhookJob } from "@getstrata/core/jobs/dispatchWebhookJob";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { InvalidateCacheTagsJob } from "@getstrata/core/jobs/invalidateCacheTagsJob";
 import { jobRegistry } from "@getstrata/core/queue/jobRegistry";
 import { resolveApplicationCache } from "@getstrata/core/runtime/applicationRegistry";
@@ -11,6 +12,7 @@ function registerDefaultJobs() {
     return new InvalidateCacheTagsJob(resolveApplicationCache());
   });
   jobRegistry.register("webhook.dispatch", () => new DispatchWebhookJob);
+  jobRegistry.register("audit.export", () => new ExportAuditLogsJob);
 }
 export {
   registerDefaultJobs

package/dist/entries/schedule.js

@@ -2,7 +2,7 @@
 var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/schedule.ts
-import { exportPendingAuditLogs } from "@getstrata/core/audit/exportAuditLogs";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { appLogger } from "@getstrata/core/logging/logger";
 import { appSchedule } from "@getstrata/core/scheduler/schedule";
 
@@ -36,10 +36,7 @@ appSchedule.command("* * * * *", "audit-export", async () => {
     return;
   }
   try {
-    const exported = await exportPendingAuditLogs();
-    if (exported > 0) {
-      appLogger.info(`Exported ${exported} audit log entries to SIEM.`);
-    }
+    await new ExportAuditLogsJob().handle({});
   } catch (error) {
     appLogger.error("Audit export failed.", { error: String(error) });
   }

package/dist/entries/web/routing.js

@@ -30,6 +30,7 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
@@ -245,6 +246,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }

package/dist/index.js

@@ -38,6 +38,7 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
@@ -249,6 +250,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
@@ -531,7 +535,7 @@ import { validateEnv } from "@getstrata/core/config/envSchema";
 
 // ../../src/config/app.ts
 var appConfig = {
-  name: "WorkHub",
+  name: process.env.APP_NAME?.trim() || "WorkHub",
   env: process.env.APP_ENV ?? "local",
   debug: (process.env.APP_DEBUG ?? "true") !== "false",
   url: process.env.APP_URL ?? "http://localhost:3000",
@@ -770,6 +774,7 @@ import {
 
 // ../../src/bootstrap/queue/defaultJobs.ts
 import { DispatchWebhookJob } from "@getstrata/core/jobs/dispatchWebhookJob";
+import { ExportAuditLogsJob } from "@getstrata/core/jobs/exportAuditLogsJob";
 import { InvalidateCacheTagsJob as InvalidateCacheTagsJob2 } from "@getstrata/core/jobs/invalidateCacheTagsJob";
 import { jobRegistry } from "@getstrata/core/queue/jobRegistry";
 import { resolveApplicationCache as resolveApplicationCache2 } from "@getstrata/core/runtime/applicationRegistry";
@@ -778,6 +783,7 @@ function registerDefaultJobs() {
     return new InvalidateCacheTagsJob2(resolveApplicationCache2());
   });
   jobRegistry.register("webhook.dispatch", () => new DispatchWebhookJob);
+  jobRegistry.register("audit.export", () => new ExportAuditLogsJob);
 }
 
 // ../../src/bootstrap/providers/queue.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/bootstrap",
-  "version": "0.2.52",
+  "version": "0.2.54",
   "description": "Strata application bootstrap — HttpKernel, DI, web session helpers",
   "type": "module",
   "license": "MIT",
@@ -173,14 +173,14 @@
     "build:bundle": "bun build index.ts --outdir dist --target bun --external bun --external eta --external @getstrata/core",
     "build:types": "tsc -p tsconfig.types.json && bun ../../scripts/prune-bootstrap-dist-types.ts",
     "prepublishOnly": "bun run build",
-    "build:subpaths": "bun build entries/applicationRegistry.ts entries/buildModuleRoutes.ts entries/buildWebModuleRoutes.ts entries/cache/modelCacheTags.ts entries/config.ts entries/context.ts entries/contracts.ts entries/createWebRoutes.ts entries/createRoutes.ts entries/createSpaRoutes.ts entries/dependencies.ts entries/discoverModules.ts entries/health.ts entries/http/securedRouteModelBinding.ts entries/httpKernel.ts entries/listeners/invalidateCacheOnModelWrite.ts entries/membershipService.ts entries/metricsRoutes.ts entries/queue/defaultJobs.ts entries/providers.ts entries/providers/view.ts entries/routeRegistry.ts entries/schedule.ts entries/secretsGuard.ts entries/web/forms.ts entries/web/routing.ts entries/web/server.ts entries/web/session.ts entries/web/slug.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/bootstrap --external @getstrata/bootstrap/applicationRegistry --external @getstrata/bootstrap/buildModuleRoutes --external @getstrata/bootstrap/buildWebModuleRoutes --external @getstrata/bootstrap/cache/modelCacheTags --external @getstrata/bootstrap/config --external @getstrata/bootstrap/context --external @getstrata/bootstrap/contracts --external @getstrata/bootstrap/createWebRoutes --external @getstrata/bootstrap/createRoutes --external @getstrata/bootstrap/createSpaRoutes --external @getstrata/bootstrap/dependencies --external @getstrata/bootstrap/discoverModules --external @getstrata/bootstrap/health --external @getstrata/bootstrap/http/securedRouteModelBinding --external @getstrata/bootstrap/httpKernel --external @getstrata/bootstrap/listeners/invalidateCacheOnModelWrite --external @getstrata/bootstrap/membershipService --external @getstrata/bootstrap/metricsRoutes --external @getstrata/bootstrap/queue/defaultJobs --external @getstrata/bootstrap/providers --external @getstrata/bootstrap/providers/view --external @getstrata/bootstrap/routeRegistry --external @getstrata/bootstrap/schedule --external @getstrata/bootstrap/secretsGuard --external @getstrata/bootstrap/web/forms --external @getstrata/bootstrap/web/routing --external @getstrata/bootstrap/web/server --external @getstrata/bootstrap/web/session --external @getstrata/bootstrap/web/slug --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
+    "build:subpaths": "bun build entries/applicationRegistry.ts entries/buildModuleRoutes.ts entries/buildWebModuleRoutes.ts entries/cache/modelCacheTags.ts entries/config.ts entries/context.ts entries/contracts.ts entries/createWebRoutes.ts entries/createRoutes.ts entries/createSpaRoutes.ts entries/dependencies.ts entries/discoverModules.ts entries/health.ts entries/http/securedRouteModelBinding.ts entries/httpKernel.ts entries/listeners/invalidateCacheOnModelWrite.ts entries/membershipService.ts entries/metricsRoutes.ts entries/queue/defaultJobs.ts entries/providers.ts entries/providers/view.ts entries/routeRegistry.ts entries/schedule.ts entries/secretsGuard.ts entries/web/forms.ts entries/web/routing.ts entries/web/server.ts entries/web/session.ts entries/web/slug.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/bootstrap --external @getstrata/bootstrap/applicationRegistry --external @getstrata/bootstrap/buildModuleRoutes --external @getstrata/bootstrap/buildWebModuleRoutes --external @getstrata/bootstrap/cache/modelCacheTags --external @getstrata/bootstrap/config --external @getstrata/bootstrap/context --external @getstrata/bootstrap/contracts --external @getstrata/bootstrap/createWebRoutes --external @getstrata/bootstrap/createRoutes --external @getstrata/bootstrap/createSpaRoutes --external @getstrata/bootstrap/dependencies --external @getstrata/bootstrap/discoverModules --external @getstrata/bootstrap/health --external @getstrata/bootstrap/http/securedRouteModelBinding --external @getstrata/bootstrap/httpKernel --external @getstrata/bootstrap/listeners/invalidateCacheOnModelWrite --external @getstrata/bootstrap/membershipService --external @getstrata/bootstrap/metricsRoutes --external @getstrata/bootstrap/queue/defaultJobs --external @getstrata/bootstrap/providers --external @getstrata/bootstrap/providers/view --external @getstrata/bootstrap/routeRegistry --external @getstrata/bootstrap/schedule --external @getstrata/bootstrap/secretsGuard --external @getstrata/bootstrap/web/forms --external @getstrata/bootstrap/web/routing --external @getstrata/bootstrap/web/server --external @getstrata/bootstrap/web/session --external @getstrata/bootstrap/web/slug --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/signedUrl --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/exportAuditLogsJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/mail/sanitizeMailHtml --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/appKeyPrefix --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
     "build:shims": "true"
   },
   "publishConfig": {
     "access": "public"
   },
   "peerDependencies": {
-    "@getstrata/core": "^0.5.61",
+    "@getstrata/core": "^0.5.66",
     "typescript": "^5.9.0"
   }
 }