@getstrata/bootstrap 0.2.53 → 0.2.55

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @getstrata/bootstrap changelog
 
+## 0.2.55
+
+- HttpKernel and route builders read `isViewsEnabled` / `isSpaEnabled` from `@getstrata/core/runtime/frontendMode` instead of WorkHub `src/config/frontend`.
+
+## 0.2.54
+
+- `HttpKernel.wrapSigned()` applies `createValidateSignatureMiddleware` so HTMX routes can require a valid signed URL.
+
 ## 0.2.53
 
 - `registerDefaultJobs()` also registers `audit.export` (`ExportAuditLogsJob`).

package/dist/bootstrap/httpKernel.d.ts

@@ -20,6 +20,7 @@ declare class HttpKernel {
     wrapAbility(ability: string, handler: RouteHandler): RouteHandler;
     wrapPolicy(resource: string, action: keyof Policy, handler: RouteHandler): RouteHandler;
     wrapLogin(handler: RouteHandler): RouteHandler;
+    wrapSigned(handler: RouteHandler): RouteHandler;
     wrapRegister(handler: RouteHandler): RouteHandler;
     private wrapThrottle;
 }

package/dist/entries/buildModuleRoutes.js

@@ -25,30 +25,14 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
 import { createTenantMiddleware } from "@getstrata/core/tenant/tenantMiddleware";
 import { createTracingMiddleware } from "@getstrata/core/tracing/tracingMiddleware";
 
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
 // ../../src/config/rateLimit.ts
 var LOCAL_LOGIN_RATE_LIMIT = {
   maxAttempts: 100,
@@ -240,6 +224,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }

package/dist/entries/buildWebModuleRoutes.js

@@ -28,30 +28,14 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
 import { createTenantMiddleware } from "@getstrata/core/tenant/tenantMiddleware";
 import { createTracingMiddleware } from "@getstrata/core/tracing/tracingMiddleware";
 
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
 // ../../src/config/rateLimit.ts
 var LOCAL_LOGIN_RATE_LIMIT = {
   maxAttempts: 100,
@@ -243,6 +227,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }

package/dist/entries/context.js

@@ -177,14 +177,28 @@ var appConfig = {
   apiPrefix: process.env.API_PREFIX ?? "/api/v1"
 };
 
-// ../../src/config/queue.ts
-import { DEFAULT_QUEUE_DRIVER as DEFAULT_QUEUE_DRIVER2 } from "@getstrata/bootstrap/config";
+// ../../src/core/queue/queueConfig.ts
+function resolveQueueConfig() {
+  const driver = process.env.QUEUE_DRIVER;
+  const maxAttempts = Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3");
+  const backoffMs = Number(process.env.QUEUE_BACKOFF_MS ?? "1000");
+  return {
+    driver: driver === "redis" || driver === "async" || driver === "sync" ? driver : "sync",
+    maxAttempts: Number.isFinite(maxAttempts) && maxAttempts > 0 ? maxAttempts : 3,
+    backoffMs: Number.isFinite(backoffMs) && backoffMs >= 0 ? backoffMs : 1000
+  };
+}
 var queueConfig = {
-  driver: process.env.QUEUE_DRIVER === "redis" || process.env.QUEUE_DRIVER === "async" || process.env.QUEUE_DRIVER === "sync" ? process.env.QUEUE_DRIVER : DEFAULT_QUEUE_DRIVER2,
-  maxAttempts: Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3"),
-  backoffMs: Number(process.env.QUEUE_BACKOFF_MS ?? "1000")
+  get driver() {
+    return resolveQueueConfig().driver;
+  },
+  get maxAttempts() {
+    return resolveQueueConfig().maxAttempts;
+  },
+  get backoffMs() {
+    return resolveQueueConfig().backoffMs;
+  }
 };
-
 // ../../src/bootstrap/env.ts
 import { defineEnvSchema } from "@getstrata/core/config/envSchema";
 var appEnvSchema = defineEnvSchema({
@@ -462,6 +476,7 @@ var storage_default = storageProvider;
 
 // ../../src/bootstrap/providers/view.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import {
   configureWebErrorView,
   DEFAULT_VIEWS_DIRECTORY,
@@ -469,26 +484,6 @@ import {
   errorTemplateName,
   resolveWebLayoutData
 } from "@getstrata/core/view";
-
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
-// ../../src/bootstrap/providers/view.ts
 var CORE_VIEW_TOKEN = "core.view";
 var VIEW_DIRECTORY_CONFIG_KEY = "view.directory";
 var viewProvider = {

package/dist/entries/createRoutes.js

@@ -4,6 +4,7 @@ var __jsonParse = (a) => JSON.parse(a);
 // ../../src/bootstrap/createRoutes.ts
 import { applyMiddlewareToRoutes as applyMiddlewareToRoutes3 } from "@getstrata/core/http/middleware";
 import { jsonResponse as jsonResponse4 } from "@getstrata/core/http/response";
+import { isSpaEnabled as isSpaEnabled2, isViewsEnabled as isViewsEnabled3 } from "@getstrata/core/runtime/frontendMode";
 import { notFoundHtmlResponse as notFoundHtmlResponse2 } from "@getstrata/core/view";
 
 // ../../index.html
@@ -39,24 +40,6 @@ function isFeatureEnabled(feature) {
   return readFeatureFlags()[feature];
 }
 
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
 // ../../src/bootstrap/buildModuleRoutes.ts
 import { conditionalJsonResponse } from "@getstrata/core/http/conditionalResponse";
 import { applyMiddlewareToRoutes } from "@getstrata/core/http/middleware";
@@ -81,8 +64,10 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
 import { createTenantMiddleware } from "@getstrata/core/tenant/tenantMiddleware";
 import { createTracingMiddleware } from "@getstrata/core/tracing/tracingMiddleware";
@@ -278,6 +263,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
@@ -472,6 +460,7 @@ function buildModuleRoutes(dependencies, options = {}) {
 // ../../src/bootstrap/createSpaRoutes.ts
 import { join as join2 } from "path";
 import { jsonResponse } from "@getstrata/core/http/response";
+import { isSpaEnabled } from "@getstrata/core/runtime/frontendMode";
 var SPA_DIST_DIRECTORY = join2(process.cwd(), "frontend/dist");
 var SPA_INDEX_FILE = join2(SPA_DIST_DIRECTORY, "index.html");
 function createSpaRoutes(_dependencies) {
@@ -508,6 +497,7 @@ function mergeSpaRoutes(dependencies, routes) {
 
 // ../../src/bootstrap/createWebRoutes.ts
 import { join as join3 } from "path";
+import { isViewsEnabled as isViewsEnabled2 } from "@getstrata/core/runtime/frontendMode";
 import { notFoundHtmlResponse } from "@getstrata/core/view";
 
 // ../../src/bootstrap/buildWebModuleRoutes.ts
@@ -559,7 +549,7 @@ function createWebRoutes(dependencies) {
   return wrappedRoutes;
 }
 function mergeWebRoutes(dependencies, routes) {
-  if (!isViewsEnabled()) {
+  if (!isViewsEnabled2()) {
     return routes;
   }
   return {
@@ -751,7 +741,7 @@ function assertScimIfMatch(request, etagSource) {
 }
 
 // ../../src/modules/scim/service.ts
-import { hashPassword as hashPassword2 } from "@getstrata/core/auth/password";
+import { hashPassword as hashPassword3 } from "@getstrata/core/auth/password";
 import { resolveService } from "@getstrata/core/contracts/di";
 import { NotFoundError as NotFoundError4 } from "@getstrata/core/errors/http";
 import { currentTenantId as currentTenantId4 } from "@getstrata/core/tenant/tenantContext";
@@ -1013,7 +1003,7 @@ var apiTokenTable = defineTable2({
 });
 
 // ../../src/modules/user/authService.ts
-import { verifyPassword } from "@getstrata/core/auth/password";
+import { hashPassword, verifyPassword } from "@getstrata/core/auth/password";
 import { protectMfaSecret, revealMfaSecret } from "@getstrata/core/crypto/mfaSecret";
 import { UnauthorizedError, ValidationError } from "@getstrata/core/errors/http";
 import { logSecurityEvent } from "@getstrata/core/security/securityEvents";
@@ -1076,7 +1066,7 @@ var oauthIdentityTable = defineTable4({
 });
 
 // ../../src/modules/user/passwordResetService.ts
-import { hashPassword } from "@getstrata/core/auth/password";
+import { hashPassword as hashPassword2 } from "@getstrata/core/auth/password";
 import { hashApiToken } from "@getstrata/core/auth/tokenHash";
 import { repositoryConnection as db2 } from "@getstrata/core/database/repositoryConnection";
 import { ValidationError as ValidationError2 } from "@getstrata/core/errors/http";
@@ -1189,7 +1179,7 @@ class ScimService {
     if (!email) {
       throw new Error("SCIM userName or email is required.");
     }
-    const passwordHash = await hashPassword2(crypto.randomUUID());
+    const passwordHash = await hashPassword3(crypto.randomUUID());
     const user = await this.users.create({
       name: payload.name?.formatted ?? email.split("@")[0] ?? "SCIM User",
       email,
@@ -1432,7 +1422,7 @@ function createRoutes(dependencies) {
     ...healthRoutes,
     ...metricsRoutes,
     ...scimRoutes,
-    ...isViewsEnabled() || isSpaEnabled() ? {} : { "/": strata_default },
+    ...isViewsEnabled3() || isSpaEnabled2() ? {} : { "/": strata_default },
     ...wrappedModuleRoutes,
     [`${appConfig.apiPrefix}/*`]: async () => {
       registerRoute2("GET", `${appConfig.apiPrefix}/*`, ["global", "api"]);
@@ -1440,10 +1430,10 @@ function createRoutes(dependencies) {
     },
     "/*": async () => {
       registerRoute2("GET", "/*", []);
-      if (isViewsEnabled()) {
+      if (isViewsEnabled3()) {
         return notFoundHtmlResponse2();
       }
-      if (isSpaEnabled()) {
+      if (isSpaEnabled2()) {
         return jsonResponse4({ error: "Not Found" }, { status: 404 });
       }
       return jsonResponse4({ error: "Not Found" }, { status: 404 });

package/dist/entries/createSpaRoutes.js

@@ -4,26 +4,7 @@ var __jsonParse = (a) => JSON.parse(a);
 // ../../src/bootstrap/createSpaRoutes.ts
 import { join } from "path";
 import { jsonResponse } from "@getstrata/core/http/response";
-
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
-// ../../src/bootstrap/createSpaRoutes.ts
+import { isSpaEnabled } from "@getstrata/core/runtime/frontendMode";
 var SPA_DIST_DIRECTORY = join(process.cwd(), "frontend/dist");
 var SPA_INDEX_FILE = join(SPA_DIST_DIRECTORY, "index.html");
 function createSpaRoutes(_dependencies) {

package/dist/entries/createWebRoutes.js

@@ -3,26 +3,9 @@ var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/createWebRoutes.ts
 import { join as join2 } from "path";
+import { isViewsEnabled as isViewsEnabled2 } from "@getstrata/core/runtime/frontendMode";
 import { notFoundHtmlResponse } from "@getstrata/core/view";
 
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
 // ../../src/bootstrap/buildWebModuleRoutes.ts
 import { applyMiddlewareToRoutes as applyMiddlewareToRoutes2 } from "@getstrata/core/http/middleware";
 
@@ -50,8 +33,10 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
 import { createTenantMiddleware } from "@getstrata/core/tenant/tenantMiddleware";
 import { createTracingMiddleware } from "@getstrata/core/tracing/tracingMiddleware";
@@ -247,6 +232,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
@@ -486,7 +474,7 @@ function createWebRoutes(dependencies) {
   return wrappedRoutes;
 }
 function mergeWebRoutes(dependencies, routes) {
-  if (!isViewsEnabled()) {
+  if (!isViewsEnabled2()) {
     return routes;
   }
   return {

package/dist/entries/dependencies.js

@@ -177,14 +177,28 @@ var appConfig = {
   apiPrefix: process.env.API_PREFIX ?? "/api/v1"
 };
 
-// ../../src/config/queue.ts
-import { DEFAULT_QUEUE_DRIVER as DEFAULT_QUEUE_DRIVER2 } from "@getstrata/bootstrap/config";
+// ../../src/core/queue/queueConfig.ts
+function resolveQueueConfig() {
+  const driver = process.env.QUEUE_DRIVER;
+  const maxAttempts = Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3");
+  const backoffMs = Number(process.env.QUEUE_BACKOFF_MS ?? "1000");
+  return {
+    driver: driver === "redis" || driver === "async" || driver === "sync" ? driver : "sync",
+    maxAttempts: Number.isFinite(maxAttempts) && maxAttempts > 0 ? maxAttempts : 3,
+    backoffMs: Number.isFinite(backoffMs) && backoffMs >= 0 ? backoffMs : 1000
+  };
+}
 var queueConfig = {
-  driver: process.env.QUEUE_DRIVER === "redis" || process.env.QUEUE_DRIVER === "async" || process.env.QUEUE_DRIVER === "sync" ? process.env.QUEUE_DRIVER : DEFAULT_QUEUE_DRIVER2,
-  maxAttempts: Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3"),
-  backoffMs: Number(process.env.QUEUE_BACKOFF_MS ?? "1000")
+  get driver() {
+    return resolveQueueConfig().driver;
+  },
+  get maxAttempts() {
+    return resolveQueueConfig().maxAttempts;
+  },
+  get backoffMs() {
+    return resolveQueueConfig().backoffMs;
+  }
 };
-
 // ../../src/bootstrap/env.ts
 import { defineEnvSchema } from "@getstrata/core/config/envSchema";
 var appEnvSchema = defineEnvSchema({
@@ -462,6 +476,7 @@ var storage_default = storageProvider;
 
 // ../../src/bootstrap/providers/view.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import {
   configureWebErrorView,
   DEFAULT_VIEWS_DIRECTORY,
@@ -469,26 +484,6 @@ import {
   errorTemplateName,
   resolveWebLayoutData
 } from "@getstrata/core/view";
-
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
-// ../../src/bootstrap/providers/view.ts
 var CORE_VIEW_TOKEN = "core.view";
 var VIEW_DIRECTORY_CONFIG_KEY = "view.directory";
 var viewProvider = {

package/dist/entries/httpKernel.js

@@ -21,30 +21,14 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
 import { createTenantMiddleware } from "@getstrata/core/tenant/tenantMiddleware";
 import { createTracingMiddleware } from "@getstrata/core/tracing/tracingMiddleware";
 
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
 // ../../src/config/rateLimit.ts
 var LOCAL_LOGIN_RATE_LIMIT = {
   maxAttempts: 100,
@@ -236,6 +220,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }

package/dist/entries/providers/view.js

@@ -3,6 +3,7 @@ var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/providers/view.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import {
   configureWebErrorView,
   DEFAULT_VIEWS_DIRECTORY,
@@ -10,26 +11,6 @@ import {
   errorTemplateName,
   resolveWebLayoutData
 } from "@getstrata/core/view";
-
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
-// ../../src/bootstrap/providers/view.ts
 var CORE_VIEW_TOKEN = "core.view";
 var VIEW_DIRECTORY_CONFIG_KEY = "view.directory";
 var viewProvider = {

package/dist/entries/providers.js

@@ -88,14 +88,28 @@ var appConfig = {
   apiPrefix: process.env.API_PREFIX ?? "/api/v1"
 };
 
-// ../../src/config/queue.ts
-import { DEFAULT_QUEUE_DRIVER as DEFAULT_QUEUE_DRIVER2 } from "@getstrata/bootstrap/config";
+// ../../src/core/queue/queueConfig.ts
+function resolveQueueConfig() {
+  const driver = process.env.QUEUE_DRIVER;
+  const maxAttempts = Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3");
+  const backoffMs = Number(process.env.QUEUE_BACKOFF_MS ?? "1000");
+  return {
+    driver: driver === "redis" || driver === "async" || driver === "sync" ? driver : "sync",
+    maxAttempts: Number.isFinite(maxAttempts) && maxAttempts > 0 ? maxAttempts : 3,
+    backoffMs: Number.isFinite(backoffMs) && backoffMs >= 0 ? backoffMs : 1000
+  };
+}
 var queueConfig = {
-  driver: process.env.QUEUE_DRIVER === "redis" || process.env.QUEUE_DRIVER === "async" || process.env.QUEUE_DRIVER === "sync" ? process.env.QUEUE_DRIVER : DEFAULT_QUEUE_DRIVER2,
-  maxAttempts: Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3"),
-  backoffMs: Number(process.env.QUEUE_BACKOFF_MS ?? "1000")
+  get driver() {
+    return resolveQueueConfig().driver;
+  },
+  get maxAttempts() {
+    return resolveQueueConfig().maxAttempts;
+  },
+  get backoffMs() {
+    return resolveQueueConfig().backoffMs;
+  }
 };
-
 // ../../src/bootstrap/env.ts
 import { defineEnvSchema } from "@getstrata/core/config/envSchema";
 var appEnvSchema = defineEnvSchema({
@@ -452,6 +466,7 @@ var storage_default = storageProvider;
 
 // ../../src/bootstrap/providers/view.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import {
   configureWebErrorView,
   DEFAULT_VIEWS_DIRECTORY,
@@ -459,26 +474,6 @@ import {
   errorTemplateName,
   resolveWebLayoutData
 } from "@getstrata/core/view";
-
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
-// ../../src/bootstrap/providers/view.ts
 var CORE_VIEW_TOKEN = "core.view";
 var VIEW_DIRECTORY_CONFIG_KEY = "view.directory";
 var viewProvider = {

package/dist/entries/web/routing.js

@@ -30,30 +30,14 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
 import { createTenantMiddleware } from "@getstrata/core/tenant/tenantMiddleware";
 import { createTracingMiddleware } from "@getstrata/core/tracing/tracingMiddleware";
 
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-function isSpaEnabled() {
-  return readFrontendMode() === "spa-react";
-}
-
 // ../../src/config/rateLimit.ts
 var LOCAL_LOGIN_RATE_LIMIT = {
   maxAttempts: 100,
@@ -245,6 +229,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }

package/dist/index.js

@@ -38,27 +38,14 @@ import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebA
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
 import { createSecurityHeadersMiddleware } from "@getstrata/core/http/securityHeadersMiddleware";
+import { createValidateSignatureMiddleware } from "@getstrata/core/http/signedUrl";
 import { createThrottleMiddleware } from "@getstrata/core/http/throttleMiddleware";
 import { createRequestLoggingMiddleware } from "@getstrata/core/logging/requestLoggingMiddleware";
+import { isViewsEnabled } from "@getstrata/core/runtime/frontendMode";
 import { isPublicReadsEnabled } from "@getstrata/core/security/publicReads";
 import { createTenantMiddleware } from "@getstrata/core/tenant/tenantMiddleware";
 import { createTracingMiddleware } from "@getstrata/core/tracing/tracingMiddleware";
 
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-
 // ../../src/config/rateLimit.ts
 var LOCAL_LOGIN_RATE_LIMIT = {
   maxAttempts: 100,
@@ -249,6 +236,9 @@ class HttpKernel {
   wrapLogin(handler) {
     return this.wrapThrottle("login", resolveLoginRateLimit(), handler);
   }
+  wrapSigned(handler) {
+    return withMiddleware(createValidateSignatureMiddleware())(handler);
+  }
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
@@ -538,13 +528,28 @@ var appConfig = {
   apiPrefix: process.env.API_PREFIX ?? "/api/v1"
 };
 
-// ../../src/config/queue.ts
+// ../../src/core/queue/queueConfig.ts
+function resolveQueueConfig() {
+  const driver = process.env.QUEUE_DRIVER;
+  const maxAttempts = Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3");
+  const backoffMs = Number(process.env.QUEUE_BACKOFF_MS ?? "1000");
+  return {
+    driver: driver === "redis" || driver === "async" || driver === "sync" ? driver : "sync",
+    maxAttempts: Number.isFinite(maxAttempts) && maxAttempts > 0 ? maxAttempts : 3,
+    backoffMs: Number.isFinite(backoffMs) && backoffMs >= 0 ? backoffMs : 1000
+  };
+}
 var queueConfig = {
-  driver: process.env.QUEUE_DRIVER === "redis" || process.env.QUEUE_DRIVER === "async" || process.env.QUEUE_DRIVER === "sync" ? process.env.QUEUE_DRIVER : DEFAULT_QUEUE_DRIVER,
-  maxAttempts: Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3"),
-  backoffMs: Number(process.env.QUEUE_BACKOFF_MS ?? "1000")
+  get driver() {
+    return resolveQueueConfig().driver;
+  },
+  get maxAttempts() {
+    return resolveQueueConfig().maxAttempts;
+  },
+  get backoffMs() {
+    return resolveQueueConfig().backoffMs;
+  }
 };
-
 // ../../src/bootstrap/env.ts
 import { defineEnvSchema } from "@getstrata/core/config/envSchema";
 var appEnvSchema = defineEnvSchema({
@@ -808,6 +813,7 @@ var storage_default = storageProvider;
 
 // ../../src/bootstrap/providers/view.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
+import { isViewsEnabled as isViewsEnabled2 } from "@getstrata/core/runtime/frontendMode";
 import {
   configureWebErrorView,
   DEFAULT_VIEWS_DIRECTORY,
@@ -820,7 +826,7 @@ var VIEW_DIRECTORY_CONFIG_KEY = "view.directory";
 var viewProvider = {
   name: "view",
   register({ container, config }) {
-    if (!isViewsEnabled()) {
+    if (!isViewsEnabled2()) {
       return;
     }
     const viewsDirectory = process.env.VIEW_DIRECTORY?.trim() || DEFAULT_VIEWS_DIRECTORY;
@@ -884,6 +890,7 @@ function createAppContext() {
 }
 // ../../src/bootstrap/createWebRoutes.ts
 import { join as join3 } from "path";
+import { isViewsEnabled as isViewsEnabled3 } from "@getstrata/core/runtime/frontendMode";
 import { notFoundHtmlResponse } from "@getstrata/core/view";
 function registerRoute(method, path, middleware) {
   routeRegistry.register({ method, path, middleware });
@@ -910,7 +917,7 @@ function createWebRoutes(dependencies) {
   return wrappedRoutes;
 }
 function mergeWebRoutes(dependencies, routes) {
-  if (!isViewsEnabled()) {
+  if (!isViewsEnabled3()) {
     return routes;
   }
   return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/bootstrap",
-  "version": "0.2.53",
+  "version": "0.2.55",
   "description": "Strata application bootstrap — HttpKernel, DI, web session helpers",
   "type": "module",
   "license": "MIT",
@@ -173,14 +173,14 @@
     "build:bundle": "bun build index.ts --outdir dist --target bun --external bun --external eta --external @getstrata/core",
     "build:types": "tsc -p tsconfig.types.json && bun ../../scripts/prune-bootstrap-dist-types.ts",
     "prepublishOnly": "bun run build",
-    "build:subpaths": "bun build entries/applicationRegistry.ts entries/buildModuleRoutes.ts entries/buildWebModuleRoutes.ts entries/cache/modelCacheTags.ts entries/config.ts entries/context.ts entries/contracts.ts entries/createWebRoutes.ts entries/createRoutes.ts entries/createSpaRoutes.ts entries/dependencies.ts entries/discoverModules.ts entries/health.ts entries/http/securedRouteModelBinding.ts entries/httpKernel.ts entries/listeners/invalidateCacheOnModelWrite.ts entries/membershipService.ts entries/metricsRoutes.ts entries/queue/defaultJobs.ts entries/providers.ts entries/providers/view.ts entries/routeRegistry.ts entries/schedule.ts entries/secretsGuard.ts entries/web/forms.ts entries/web/routing.ts entries/web/server.ts entries/web/session.ts entries/web/slug.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/bootstrap --external @getstrata/bootstrap/applicationRegistry --external @getstrata/bootstrap/buildModuleRoutes --external @getstrata/bootstrap/buildWebModuleRoutes --external @getstrata/bootstrap/cache/modelCacheTags --external @getstrata/bootstrap/config --external @getstrata/bootstrap/context --external @getstrata/bootstrap/contracts --external @getstrata/bootstrap/createWebRoutes --external @getstrata/bootstrap/createRoutes --external @getstrata/bootstrap/createSpaRoutes --external @getstrata/bootstrap/dependencies --external @getstrata/bootstrap/discoverModules --external @getstrata/bootstrap/health --external @getstrata/bootstrap/http/securedRouteModelBinding --external @getstrata/bootstrap/httpKernel --external @getstrata/bootstrap/listeners/invalidateCacheOnModelWrite --external @getstrata/bootstrap/membershipService --external @getstrata/bootstrap/metricsRoutes --external @getstrata/bootstrap/queue/defaultJobs --external @getstrata/bootstrap/providers --external @getstrata/bootstrap/providers/view --external @getstrata/bootstrap/routeRegistry --external @getstrata/bootstrap/schedule --external @getstrata/bootstrap/secretsGuard --external @getstrata/bootstrap/web/forms --external @getstrata/bootstrap/web/routing --external @getstrata/bootstrap/web/server --external @getstrata/bootstrap/web/session --external @getstrata/bootstrap/web/slug --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/signedUrl --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/exportAuditLogsJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/mail/sanitizeMailHtml --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
+    "build:subpaths": "bun build entries/applicationRegistry.ts entries/buildModuleRoutes.ts entries/buildWebModuleRoutes.ts entries/cache/modelCacheTags.ts entries/config.ts entries/context.ts entries/contracts.ts entries/createWebRoutes.ts entries/createRoutes.ts entries/createSpaRoutes.ts entries/dependencies.ts entries/discoverModules.ts entries/health.ts entries/http/securedRouteModelBinding.ts entries/httpKernel.ts entries/listeners/invalidateCacheOnModelWrite.ts entries/membershipService.ts entries/metricsRoutes.ts entries/queue/defaultJobs.ts entries/providers.ts entries/providers/view.ts entries/routeRegistry.ts entries/schedule.ts entries/secretsGuard.ts entries/web/forms.ts entries/web/routing.ts entries/web/server.ts entries/web/session.ts entries/web/slug.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/bootstrap --external @getstrata/bootstrap/applicationRegistry --external @getstrata/bootstrap/buildModuleRoutes --external @getstrata/bootstrap/buildWebModuleRoutes --external @getstrata/bootstrap/cache/modelCacheTags --external @getstrata/bootstrap/config --external @getstrata/bootstrap/context --external @getstrata/bootstrap/contracts --external @getstrata/bootstrap/createWebRoutes --external @getstrata/bootstrap/createRoutes --external @getstrata/bootstrap/createSpaRoutes --external @getstrata/bootstrap/dependencies --external @getstrata/bootstrap/discoverModules --external @getstrata/bootstrap/health --external @getstrata/bootstrap/http/securedRouteModelBinding --external @getstrata/bootstrap/httpKernel --external @getstrata/bootstrap/listeners/invalidateCacheOnModelWrite --external @getstrata/bootstrap/membershipService --external @getstrata/bootstrap/metricsRoutes --external @getstrata/bootstrap/queue/defaultJobs --external @getstrata/bootstrap/providers --external @getstrata/bootstrap/providers/view --external @getstrata/bootstrap/routeRegistry --external @getstrata/bootstrap/schedule --external @getstrata/bootstrap/secretsGuard --external @getstrata/bootstrap/web/forms --external @getstrata/bootstrap/web/routing --external @getstrata/bootstrap/web/server --external @getstrata/bootstrap/web/session --external @getstrata/bootstrap/web/slug --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/signedUrl --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/exportAuditLogsJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/mail/sanitizeMailHtml --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/appKeyPrefix --external @getstrata/core/runtime/frontendMode --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
     "build:shims": "true"
   },
   "publishConfig": {
     "access": "public"
   },
   "peerDependencies": {
-    "@getstrata/core": "^0.5.62",
+    "@getstrata/core": "^0.5.68",
     "typescript": "^5.9.0"
   }
 }