@getstrata/bootstrap 0.2.57 → 0.2.59

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @getstrata/bootstrap changelog
 
+## 0.2.59
+
+- `HttpKernel.wrapWebGuest()` is Laravel `guest` / `RedirectIfAuthenticated`. Signed-in HTML users redirect to `/organizations` (override the home path). Peer `@getstrata/core` `^0.5.72`.
+
+## 0.2.58
+
+- Peer `@getstrata/core` `^0.5.71` for public OpenAPI `/auth/register`.
+
 ## 0.2.57
 
 - Peer `@getstrata/core` `^0.5.70` for optional OAuth `redirectUri`.

package/README.md

@@ -32,7 +32,7 @@ import { createHttpKernel, createAppContext, coreProviders } from "@getstrata/bo
 
 Sibling HTMX apps should bind `createCookieSessionAuthManager` from `@getstrata/bootstrap/web/session` instead of HMAC `SessionGuard`. Use `signIn` / `signOut` (or the redirect helpers) instead of calling `CookieSessionStore` from controllers. Pass `mapUser` to map roles in the app. Pass `loadSessionUser` when the default `learn_subscriber` / `is_admin` SELECT does not match your schema. WorkHub’s table is `sessions` (`0031_create_sessions`); its loader is `loadWorkhubSessionUser` (maps `users.role`, decrypts email). WorkHub web login itself stays on HMAC `SessionGuard`.
 
-`wrapWeb` applies the web group (CSRF + flash) and `withErrorHandling`, so CSRF `ForbiddenError` becomes an HTML 403 in `FRONTEND_MODE=server-htmx`. `wrapWebLogin` / `wrapWebRegister` include that web group plus throttle — do not wrap them with `wrapWeb` again.
+`wrapWeb` applies the web group (CSRF + flash) and `withErrorHandling`, so CSRF `ForbiddenError` becomes an HTML 403 in `FRONTEND_MODE=server-htmx`. `wrapWebGuest` is Laravel `guest` / `RedirectIfAuthenticated` (signed-in users go to `/organizations` by default). `wrapWebLogin` / `wrapWebRegister` include that web group plus throttle — do not wrap them with `wrapWeb` again. The throttle callback should return an HTML form at 429 (WorkHub’s `/login` and `/register` do).
 
 These subpaths remain WorkHub-oriented and are not a generic starter API: `@getstrata/bootstrap/createRoutes` (includes SCIM), `@getstrata/bootstrap/schedule`, and `@getstrata/bootstrap/createWebRoutes` (redirects `/` to `/organizations`).
 

package/dist/bootstrap/httpKernel.d.ts

@@ -10,6 +10,8 @@ declare class HttpKernel {
     wrap(groups: MiddlewareGroupName | MiddlewareGroupName[], handler: RouteHandler): RouteHandler;
     wrapApi(handler: RouteHandler): RouteHandler;
     wrapWeb(handler: RouteHandler): RouteHandler;
+    /** Laravel `guest` / `RedirectIfAuthenticated` — signed-in users go to `home`. */
+    wrapWebGuest(handler: RouteHandler, home?: string): RouteHandler;
     wrapWebPublicRead(handler: RouteHandler): RouteHandler;
     wrapWebAuthenticated(handler: RouteHandler): RouteHandler;
     wrapWebAbility(ability: string, handler: RouteHandler): RouteHandler;

package/dist/entries/buildModuleRoutes.js

@@ -175,6 +175,16 @@ class HttpKernel {
   wrapWeb(handler) {
     return withErrorHandling(this.wrap("web", handler));
   }
+  wrapWebGuest(handler, home = "/organizations") {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return this.wrapWeb(async (request) => {
+      const user = await auth.resolve(request);
+      if (user) {
+        return Response.redirect(home, 302);
+      }
+      return handler(request);
+    });
+  }
   wrapWebPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return this.wrapWeb(handler);

package/dist/entries/buildWebModuleRoutes.js

@@ -178,6 +178,16 @@ class HttpKernel {
   wrapWeb(handler) {
     return withErrorHandling(this.wrap("web", handler));
   }
+  wrapWebGuest(handler, home = "/organizations") {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return this.wrapWeb(async (request) => {
+      const user = await auth.resolve(request);
+      if (user) {
+        return Response.redirect(home, 302);
+      }
+      return handler(request);
+    });
+  }
   wrapWebPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return this.wrapWeb(handler);

package/dist/entries/createRoutes.js

@@ -32,7 +32,8 @@ function readFeatureFlags() {
     siemExport: (process.env.FEATURE_SIEM_EXPORT ?? "true") !== "false",
     publicReads: (process.env.FEATURE_PUBLIC_READS ?? "true") !== "false",
     emailVerification: (process.env.FEATURE_EMAIL_VERIFICATION ?? "false") === "true",
-    mfa: (process.env.FEATURE_MFA ?? "false") === "true"
+    mfa: (process.env.FEATURE_MFA ?? "false") === "true",
+    registration: (process.env.FEATURE_REGISTRATION ?? "true") !== "false"
   };
 }
 var featureFlags = readFeatureFlags();
@@ -214,6 +215,16 @@ class HttpKernel {
   wrapWeb(handler) {
     return withErrorHandling(this.wrap("web", handler));
   }
+  wrapWebGuest(handler, home = "/organizations") {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return this.wrapWeb(async (request) => {
+      const user = await auth.resolve(request);
+      if (user) {
+        return Response.redirect(home, 302);
+      }
+      return handler(request);
+    });
+  }
   wrapWebPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return this.wrapWeb(handler);

package/dist/entries/createWebRoutes.js

@@ -183,6 +183,16 @@ class HttpKernel {
   wrapWeb(handler) {
     return withErrorHandling(this.wrap("web", handler));
   }
+  wrapWebGuest(handler, home = "/organizations") {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return this.wrapWeb(async (request) => {
+      const user = await auth.resolve(request);
+      if (user) {
+        return Response.redirect(home, 302);
+      }
+      return handler(request);
+    });
+  }
   wrapWebPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return this.wrapWeb(handler);

package/dist/entries/httpKernel.js

@@ -171,6 +171,16 @@ class HttpKernel {
   wrapWeb(handler) {
     return withErrorHandling(this.wrap("web", handler));
   }
+  wrapWebGuest(handler, home = "/organizations") {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return this.wrapWeb(async (request) => {
+      const user = await auth.resolve(request);
+      if (user) {
+        return Response.redirect(home, 302);
+      }
+      return handler(request);
+    });
+  }
   wrapWebPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return this.wrapWeb(handler);

package/dist/entries/schedule.js

@@ -19,7 +19,8 @@ function readFeatureFlags() {
     siemExport: (process.env.FEATURE_SIEM_EXPORT ?? "true") !== "false",
     publicReads: (process.env.FEATURE_PUBLIC_READS ?? "true") !== "false",
     emailVerification: (process.env.FEATURE_EMAIL_VERIFICATION ?? "false") === "true",
-    mfa: (process.env.FEATURE_MFA ?? "false") === "true"
+    mfa: (process.env.FEATURE_MFA ?? "false") === "true",
+    registration: (process.env.FEATURE_REGISTRATION ?? "true") !== "false"
   };
 }
 var featureFlags = readFeatureFlags();

package/dist/entries/web/routing.js

@@ -180,6 +180,16 @@ class HttpKernel {
   wrapWeb(handler) {
     return withErrorHandling(this.wrap("web", handler));
   }
+  wrapWebGuest(handler, home = "/organizations") {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return this.wrapWeb(async (request) => {
+      const user = await auth.resolve(request);
+      if (user) {
+        return Response.redirect(home, 302);
+      }
+      return handler(request);
+    });
+  }
   wrapWebPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return this.wrapWeb(handler);

package/dist/index.js

@@ -187,6 +187,16 @@ class HttpKernel {
   wrapWeb(handler) {
     return withErrorHandling(this.wrap("web", handler));
   }
+  wrapWebGuest(handler, home = "/organizations") {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return this.wrapWeb(async (request) => {
+      const user = await auth.resolve(request);
+      if (user) {
+        return Response.redirect(home, 302);
+      }
+      return handler(request);
+    });
+  }
   wrapWebPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return this.wrapWeb(handler);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/bootstrap",
-  "version": "0.2.57",
+  "version": "0.2.59",
   "description": "Strata application bootstrap — HttpKernel, DI, web session helpers",
   "type": "module",
   "license": "MIT",
@@ -180,7 +180,7 @@
     "access": "public"
   },
   "peerDependencies": {
-    "@getstrata/core": "^0.5.70",
+    "@getstrata/core": "^0.5.72",
     "typescript": "^5.9.0"
   }
 }