@getstrata/bootstrap 0.2.60 → 0.2.62

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @getstrata/bootstrap changelog
 
+## 0.2.62
+
+- `HttpKernel.wrapWebPasswordConfirm()` is Laravel `password.confirm` for HTML routes. Peer `@getstrata/core` `^0.5.75`.
+
+## 0.2.61
+
+- `HttpKernel.wrapVerified()` / `wrapWebVerified()` / `wrapWebAuthenticatedAllowUnverified()`. When `FEATURE_EMAIL_VERIFICATION=true`, `wrapWebAuthenticated` and `wrapWebAbility` require a verified email. Peer `@getstrata/core` `^0.5.74`.
+
 ## 0.2.60
 
 - Peer `@getstrata/core` `^0.5.73` for public OpenAPI email verification resend.

package/dist/bootstrap/httpKernel.d.ts

@@ -14,9 +14,16 @@ declare class HttpKernel {
     wrapWebGuest(handler: RouteHandler, home?: string): RouteHandler;
     wrapWebPublicRead(handler: RouteHandler): RouteHandler;
     wrapWebAuthenticated(handler: RouteHandler): RouteHandler;
+    /** Signed-in HTML without Laravel `verified` (logout, verification notice). */
+    wrapWebAuthenticatedAllowUnverified(handler: RouteHandler): RouteHandler;
+    wrapWebVerified(handler: RouteHandler): RouteHandler;
+    /** Laravel `password.confirm` — requires a fresh signed confirmation cookie. */
+    wrapWebPasswordConfirm(handler: RouteHandler): RouteHandler;
     wrapWebAbility(ability: string, handler: RouteHandler): RouteHandler;
     wrapWebGlobalAdmin(handler: RouteHandler): RouteHandler;
     wrapAuthenticated(handler: RouteHandler): RouteHandler;
+    /** Laravel `verified` for JSON/API routes. No-op when `FEATURE_EMAIL_VERIFICATION` is off. */
+    wrapVerified(handler: RouteHandler): RouteHandler;
     wrapPublicRead(handler: RouteHandler): RouteHandler;
     wrapGlobalAdmin(handler: RouteHandler): RouteHandler;
     wrapAbility(ability: string, handler: RouteHandler): RouteHandler;
@@ -24,6 +31,8 @@ declare class HttpKernel {
     wrapLogin(handler: RouteHandler): RouteHandler;
     wrapSigned(handler: RouteHandler): RouteHandler;
     wrapRegister(handler: RouteHandler): RouteHandler;
+    private wrapWebAuth;
+    private verifiedMiddleware;
     private wrapThrottle;
 }
 declare function createHttpKernel(dependencies: AppDependencies): HttpKernel;

package/dist/entries/buildModuleRoutes.js

@@ -6,6 +6,10 @@ import { conditionalJsonResponse } from "@getstrata/core/http/conditionalRespons
 import { applyMiddlewareToRoutes } from "@getstrata/core/http/middleware";
 
 // ../../src/bootstrap/httpKernel.ts
+import {
+  hasVerifiedEmail,
+  isEmailVerificationRequired
+} from "@getstrata/core/auth/emailVerification";
 import { createMembershipMiddleware } from "@getstrata/core/auth/membershipMiddleware";
 import { resolveAbilityChecker } from "@getstrata/core/contracts/serviceTokens";
 import { createAuthMiddleware } from "@getstrata/core/http/authMiddleware";
@@ -21,6 +25,8 @@ import { requestIdMiddleware } from "@getstrata/core/http/middleware";
 import { createRequireAbilityMiddleware } from "@getstrata/core/http/requireAbilityMiddleware";
 import { createRequireAuthMiddleware } from "@getstrata/core/http/requireAuthMiddleware";
 import { createRequireGlobalAdminMiddleware } from "@getstrata/core/http/requireGlobalAdminMiddleware";
+import { createRequirePasswordConfirmMiddleware } from "@getstrata/core/http/requirePasswordConfirmMiddleware";
+import { createRequireVerifiedMiddleware } from "@getstrata/core/http/requireVerifiedMiddleware";
 import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebAuthMiddleware";
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
@@ -180,6 +186,9 @@ class HttpKernel {
     return this.wrapWeb(async (request) => {
       const user = await auth.resolve(request);
       if (user) {
+        if (isEmailVerificationRequired() && !hasVerifiedEmail(user)) {
+          return Response.redirect("/email/verify", 302);
+        }
         return Response.redirect(home, 302);
       }
       return handler(request);
@@ -192,24 +201,46 @@ class HttpKernel {
     return this.wrapWebAuthenticated(handler);
   }
   wrapWebAuthenticated(handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    return this.wrapWeb(withMiddleware(createRequireWebAuthMiddleware(auth))(handler));
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebAuthenticatedAllowUnverified(handler) {
+    return this.wrapWebAuth(handler, { verified: false });
+  }
+  wrapWebVerified(handler) {
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebPasswordConfirm(handler) {
+    return this.wrapWebAuth(withMiddleware(createRequirePasswordConfirmMiddleware())(handler), {
+      verified: true
+    });
   }
   wrapWebAbility(ability, handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     const abilityChecker = resolveAbilityChecker(this.dependencies.container);
     const requireAbility = createRequireAbilityMiddleware(abilityChecker);
-    const middleware = [createRequireWebAuthMiddleware(auth), requireAbility(ability)];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      requireAbility(ability)
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapWebGlobalAdmin(handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const middleware = [createRequireWebAuthMiddleware(auth), createRequireGlobalAdminMiddleware()];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      createRequireGlobalAdminMiddleware()
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapAuthenticated(handler) {
     return this.wrap("authenticated", handler);
   }
+  wrapVerified(handler) {
+    const middleware = [...this.group("authenticated"), ...this.verifiedMiddleware()];
+    return withMiddleware(...middleware)(handler);
+  }
   wrapPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return handler;
@@ -240,6 +271,18 @@ class HttpKernel {
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
+  wrapWebAuth(handler, options) {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...options.verified ? this.verifiedMiddleware() : []
+    ];
+    return this.wrapWeb(withMiddleware(...middleware)(handler));
+  }
+  verifiedMiddleware() {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return [createRequireVerifiedMiddleware(auth)];
+  }
   wrapThrottle(scope, rateLimit, handler) {
     const middleware = [];
     const memoryKeyPrefix = scope === "login" ? "login-throttle:" : "register-throttle:";

package/dist/entries/buildWebModuleRoutes.js

@@ -9,6 +9,10 @@ import { conditionalJsonResponse } from "@getstrata/core/http/conditionalRespons
 import { applyMiddlewareToRoutes } from "@getstrata/core/http/middleware";
 
 // ../../src/bootstrap/httpKernel.ts
+import {
+  hasVerifiedEmail,
+  isEmailVerificationRequired
+} from "@getstrata/core/auth/emailVerification";
 import { createMembershipMiddleware } from "@getstrata/core/auth/membershipMiddleware";
 import { resolveAbilityChecker } from "@getstrata/core/contracts/serviceTokens";
 import { createAuthMiddleware } from "@getstrata/core/http/authMiddleware";
@@ -24,6 +28,8 @@ import { requestIdMiddleware } from "@getstrata/core/http/middleware";
 import { createRequireAbilityMiddleware } from "@getstrata/core/http/requireAbilityMiddleware";
 import { createRequireAuthMiddleware } from "@getstrata/core/http/requireAuthMiddleware";
 import { createRequireGlobalAdminMiddleware } from "@getstrata/core/http/requireGlobalAdminMiddleware";
+import { createRequirePasswordConfirmMiddleware } from "@getstrata/core/http/requirePasswordConfirmMiddleware";
+import { createRequireVerifiedMiddleware } from "@getstrata/core/http/requireVerifiedMiddleware";
 import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebAuthMiddleware";
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
@@ -183,6 +189,9 @@ class HttpKernel {
     return this.wrapWeb(async (request) => {
       const user = await auth.resolve(request);
       if (user) {
+        if (isEmailVerificationRequired() && !hasVerifiedEmail(user)) {
+          return Response.redirect("/email/verify", 302);
+        }
         return Response.redirect(home, 302);
       }
       return handler(request);
@@ -195,24 +204,46 @@ class HttpKernel {
     return this.wrapWebAuthenticated(handler);
   }
   wrapWebAuthenticated(handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    return this.wrapWeb(withMiddleware(createRequireWebAuthMiddleware(auth))(handler));
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebAuthenticatedAllowUnverified(handler) {
+    return this.wrapWebAuth(handler, { verified: false });
+  }
+  wrapWebVerified(handler) {
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebPasswordConfirm(handler) {
+    return this.wrapWebAuth(withMiddleware(createRequirePasswordConfirmMiddleware())(handler), {
+      verified: true
+    });
   }
   wrapWebAbility(ability, handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     const abilityChecker = resolveAbilityChecker(this.dependencies.container);
     const requireAbility = createRequireAbilityMiddleware(abilityChecker);
-    const middleware = [createRequireWebAuthMiddleware(auth), requireAbility(ability)];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      requireAbility(ability)
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapWebGlobalAdmin(handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const middleware = [createRequireWebAuthMiddleware(auth), createRequireGlobalAdminMiddleware()];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      createRequireGlobalAdminMiddleware()
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapAuthenticated(handler) {
     return this.wrap("authenticated", handler);
   }
+  wrapVerified(handler) {
+    const middleware = [...this.group("authenticated"), ...this.verifiedMiddleware()];
+    return withMiddleware(...middleware)(handler);
+  }
   wrapPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return handler;
@@ -243,6 +274,18 @@ class HttpKernel {
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
+  wrapWebAuth(handler, options) {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...options.verified ? this.verifiedMiddleware() : []
+    ];
+    return this.wrapWeb(withMiddleware(...middleware)(handler));
+  }
+  verifiedMiddleware() {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return [createRequireVerifiedMiddleware(auth)];
+  }
   wrapThrottle(scope, rateLimit, handler) {
     const middleware = [];
     const memoryKeyPrefix = scope === "login" ? "login-throttle:" : "register-throttle:";

package/dist/entries/createRoutes.js

@@ -46,6 +46,10 @@ import { conditionalJsonResponse } from "@getstrata/core/http/conditionalRespons
 import { applyMiddlewareToRoutes } from "@getstrata/core/http/middleware";
 
 // ../../src/bootstrap/httpKernel.ts
+import {
+  hasVerifiedEmail,
+  isEmailVerificationRequired
+} from "@getstrata/core/auth/emailVerification";
 import { createMembershipMiddleware } from "@getstrata/core/auth/membershipMiddleware";
 import { resolveAbilityChecker } from "@getstrata/core/contracts/serviceTokens";
 import { createAuthMiddleware } from "@getstrata/core/http/authMiddleware";
@@ -61,6 +65,8 @@ import { requestIdMiddleware } from "@getstrata/core/http/middleware";
 import { createRequireAbilityMiddleware } from "@getstrata/core/http/requireAbilityMiddleware";
 import { createRequireAuthMiddleware } from "@getstrata/core/http/requireAuthMiddleware";
 import { createRequireGlobalAdminMiddleware } from "@getstrata/core/http/requireGlobalAdminMiddleware";
+import { createRequirePasswordConfirmMiddleware } from "@getstrata/core/http/requirePasswordConfirmMiddleware";
+import { createRequireVerifiedMiddleware } from "@getstrata/core/http/requireVerifiedMiddleware";
 import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebAuthMiddleware";
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
@@ -220,6 +226,9 @@ class HttpKernel {
     return this.wrapWeb(async (request) => {
       const user = await auth.resolve(request);
       if (user) {
+        if (isEmailVerificationRequired() && !hasVerifiedEmail(user)) {
+          return Response.redirect("/email/verify", 302);
+        }
         return Response.redirect(home, 302);
       }
       return handler(request);
@@ -232,24 +241,46 @@ class HttpKernel {
     return this.wrapWebAuthenticated(handler);
   }
   wrapWebAuthenticated(handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    return this.wrapWeb(withMiddleware(createRequireWebAuthMiddleware(auth))(handler));
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebAuthenticatedAllowUnverified(handler) {
+    return this.wrapWebAuth(handler, { verified: false });
+  }
+  wrapWebVerified(handler) {
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebPasswordConfirm(handler) {
+    return this.wrapWebAuth(withMiddleware(createRequirePasswordConfirmMiddleware())(handler), {
+      verified: true
+    });
   }
   wrapWebAbility(ability, handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     const abilityChecker = resolveAbilityChecker(this.dependencies.container);
     const requireAbility = createRequireAbilityMiddleware(abilityChecker);
-    const middleware = [createRequireWebAuthMiddleware(auth), requireAbility(ability)];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      requireAbility(ability)
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapWebGlobalAdmin(handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const middleware = [createRequireWebAuthMiddleware(auth), createRequireGlobalAdminMiddleware()];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      createRequireGlobalAdminMiddleware()
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapAuthenticated(handler) {
     return this.wrap("authenticated", handler);
   }
+  wrapVerified(handler) {
+    const middleware = [...this.group("authenticated"), ...this.verifiedMiddleware()];
+    return withMiddleware(...middleware)(handler);
+  }
   wrapPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return handler;
@@ -280,6 +311,18 @@ class HttpKernel {
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
+  wrapWebAuth(handler, options) {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...options.verified ? this.verifiedMiddleware() : []
+    ];
+    return this.wrapWeb(withMiddleware(...middleware)(handler));
+  }
+  verifiedMiddleware() {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return [createRequireVerifiedMiddleware(auth)];
+  }
   wrapThrottle(scope, rateLimit, handler) {
     const middleware = [];
     const memoryKeyPrefix = scope === "login" ? "login-throttle:" : "register-throttle:";

package/dist/entries/createWebRoutes.js

@@ -14,6 +14,10 @@ import { conditionalJsonResponse } from "@getstrata/core/http/conditionalRespons
 import { applyMiddlewareToRoutes } from "@getstrata/core/http/middleware";
 
 // ../../src/bootstrap/httpKernel.ts
+import {
+  hasVerifiedEmail,
+  isEmailVerificationRequired
+} from "@getstrata/core/auth/emailVerification";
 import { createMembershipMiddleware } from "@getstrata/core/auth/membershipMiddleware";
 import { resolveAbilityChecker } from "@getstrata/core/contracts/serviceTokens";
 import { createAuthMiddleware } from "@getstrata/core/http/authMiddleware";
@@ -29,6 +33,8 @@ import { requestIdMiddleware } from "@getstrata/core/http/middleware";
 import { createRequireAbilityMiddleware } from "@getstrata/core/http/requireAbilityMiddleware";
 import { createRequireAuthMiddleware } from "@getstrata/core/http/requireAuthMiddleware";
 import { createRequireGlobalAdminMiddleware } from "@getstrata/core/http/requireGlobalAdminMiddleware";
+import { createRequirePasswordConfirmMiddleware } from "@getstrata/core/http/requirePasswordConfirmMiddleware";
+import { createRequireVerifiedMiddleware } from "@getstrata/core/http/requireVerifiedMiddleware";
 import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebAuthMiddleware";
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
@@ -188,6 +194,9 @@ class HttpKernel {
     return this.wrapWeb(async (request) => {
       const user = await auth.resolve(request);
       if (user) {
+        if (isEmailVerificationRequired() && !hasVerifiedEmail(user)) {
+          return Response.redirect("/email/verify", 302);
+        }
         return Response.redirect(home, 302);
       }
       return handler(request);
@@ -200,24 +209,46 @@ class HttpKernel {
     return this.wrapWebAuthenticated(handler);
   }
   wrapWebAuthenticated(handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    return this.wrapWeb(withMiddleware(createRequireWebAuthMiddleware(auth))(handler));
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebAuthenticatedAllowUnverified(handler) {
+    return this.wrapWebAuth(handler, { verified: false });
+  }
+  wrapWebVerified(handler) {
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebPasswordConfirm(handler) {
+    return this.wrapWebAuth(withMiddleware(createRequirePasswordConfirmMiddleware())(handler), {
+      verified: true
+    });
   }
   wrapWebAbility(ability, handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     const abilityChecker = resolveAbilityChecker(this.dependencies.container);
     const requireAbility = createRequireAbilityMiddleware(abilityChecker);
-    const middleware = [createRequireWebAuthMiddleware(auth), requireAbility(ability)];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      requireAbility(ability)
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapWebGlobalAdmin(handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const middleware = [createRequireWebAuthMiddleware(auth), createRequireGlobalAdminMiddleware()];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      createRequireGlobalAdminMiddleware()
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapAuthenticated(handler) {
     return this.wrap("authenticated", handler);
   }
+  wrapVerified(handler) {
+    const middleware = [...this.group("authenticated"), ...this.verifiedMiddleware()];
+    return withMiddleware(...middleware)(handler);
+  }
   wrapPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return handler;
@@ -248,6 +279,18 @@ class HttpKernel {
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
+  wrapWebAuth(handler, options) {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...options.verified ? this.verifiedMiddleware() : []
+    ];
+    return this.wrapWeb(withMiddleware(...middleware)(handler));
+  }
+  verifiedMiddleware() {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return [createRequireVerifiedMiddleware(auth)];
+  }
   wrapThrottle(scope, rateLimit, handler) {
     const middleware = [];
     const memoryKeyPrefix = scope === "login" ? "login-throttle:" : "register-throttle:";

package/dist/entries/httpKernel.js

@@ -2,6 +2,10 @@
 var __jsonParse = (a) => JSON.parse(a);
 
 // ../../src/bootstrap/httpKernel.ts
+import {
+  hasVerifiedEmail,
+  isEmailVerificationRequired
+} from "@getstrata/core/auth/emailVerification";
 import { createMembershipMiddleware } from "@getstrata/core/auth/membershipMiddleware";
 import { resolveAbilityChecker } from "@getstrata/core/contracts/serviceTokens";
 import { createAuthMiddleware } from "@getstrata/core/http/authMiddleware";
@@ -17,6 +21,8 @@ import { requestIdMiddleware } from "@getstrata/core/http/middleware";
 import { createRequireAbilityMiddleware } from "@getstrata/core/http/requireAbilityMiddleware";
 import { createRequireAuthMiddleware } from "@getstrata/core/http/requireAuthMiddleware";
 import { createRequireGlobalAdminMiddleware } from "@getstrata/core/http/requireGlobalAdminMiddleware";
+import { createRequirePasswordConfirmMiddleware } from "@getstrata/core/http/requirePasswordConfirmMiddleware";
+import { createRequireVerifiedMiddleware } from "@getstrata/core/http/requireVerifiedMiddleware";
 import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebAuthMiddleware";
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
@@ -176,6 +182,9 @@ class HttpKernel {
     return this.wrapWeb(async (request) => {
       const user = await auth.resolve(request);
       if (user) {
+        if (isEmailVerificationRequired() && !hasVerifiedEmail(user)) {
+          return Response.redirect("/email/verify", 302);
+        }
         return Response.redirect(home, 302);
       }
       return handler(request);
@@ -188,24 +197,46 @@ class HttpKernel {
     return this.wrapWebAuthenticated(handler);
   }
   wrapWebAuthenticated(handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    return this.wrapWeb(withMiddleware(createRequireWebAuthMiddleware(auth))(handler));
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebAuthenticatedAllowUnverified(handler) {
+    return this.wrapWebAuth(handler, { verified: false });
+  }
+  wrapWebVerified(handler) {
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebPasswordConfirm(handler) {
+    return this.wrapWebAuth(withMiddleware(createRequirePasswordConfirmMiddleware())(handler), {
+      verified: true
+    });
   }
   wrapWebAbility(ability, handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     const abilityChecker = resolveAbilityChecker(this.dependencies.container);
     const requireAbility = createRequireAbilityMiddleware(abilityChecker);
-    const middleware = [createRequireWebAuthMiddleware(auth), requireAbility(ability)];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      requireAbility(ability)
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapWebGlobalAdmin(handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const middleware = [createRequireWebAuthMiddleware(auth), createRequireGlobalAdminMiddleware()];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      createRequireGlobalAdminMiddleware()
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapAuthenticated(handler) {
     return this.wrap("authenticated", handler);
   }
+  wrapVerified(handler) {
+    const middleware = [...this.group("authenticated"), ...this.verifiedMiddleware()];
+    return withMiddleware(...middleware)(handler);
+  }
   wrapPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return handler;
@@ -236,6 +267,18 @@ class HttpKernel {
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
+  wrapWebAuth(handler, options) {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...options.verified ? this.verifiedMiddleware() : []
+    ];
+    return this.wrapWeb(withMiddleware(...middleware)(handler));
+  }
+  verifiedMiddleware() {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return [createRequireVerifiedMiddleware(auth)];
+  }
   wrapThrottle(scope, rateLimit, handler) {
     const middleware = [];
     const memoryKeyPrefix = scope === "login" ? "login-throttle:" : "register-throttle:";

package/dist/entries/web/routing.js

@@ -11,6 +11,10 @@ import {
 } from "@getstrata/core/http/securedRouteModelBinding";
 
 // ../../src/bootstrap/httpKernel.ts
+import {
+  hasVerifiedEmail,
+  isEmailVerificationRequired
+} from "@getstrata/core/auth/emailVerification";
 import { createMembershipMiddleware } from "@getstrata/core/auth/membershipMiddleware";
 import { resolveAbilityChecker } from "@getstrata/core/contracts/serviceTokens";
 import { createAuthMiddleware } from "@getstrata/core/http/authMiddleware";
@@ -26,6 +30,8 @@ import { requestIdMiddleware } from "@getstrata/core/http/middleware";
 import { createRequireAbilityMiddleware } from "@getstrata/core/http/requireAbilityMiddleware";
 import { createRequireAuthMiddleware } from "@getstrata/core/http/requireAuthMiddleware";
 import { createRequireGlobalAdminMiddleware } from "@getstrata/core/http/requireGlobalAdminMiddleware";
+import { createRequirePasswordConfirmMiddleware } from "@getstrata/core/http/requirePasswordConfirmMiddleware";
+import { createRequireVerifiedMiddleware } from "@getstrata/core/http/requireVerifiedMiddleware";
 import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebAuthMiddleware";
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
@@ -185,6 +191,9 @@ class HttpKernel {
     return this.wrapWeb(async (request) => {
       const user = await auth.resolve(request);
       if (user) {
+        if (isEmailVerificationRequired() && !hasVerifiedEmail(user)) {
+          return Response.redirect("/email/verify", 302);
+        }
         return Response.redirect(home, 302);
       }
       return handler(request);
@@ -197,24 +206,46 @@ class HttpKernel {
     return this.wrapWebAuthenticated(handler);
   }
   wrapWebAuthenticated(handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    return this.wrapWeb(withMiddleware(createRequireWebAuthMiddleware(auth))(handler));
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebAuthenticatedAllowUnverified(handler) {
+    return this.wrapWebAuth(handler, { verified: false });
+  }
+  wrapWebVerified(handler) {
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebPasswordConfirm(handler) {
+    return this.wrapWebAuth(withMiddleware(createRequirePasswordConfirmMiddleware())(handler), {
+      verified: true
+    });
   }
   wrapWebAbility(ability, handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     const abilityChecker = resolveAbilityChecker(this.dependencies.container);
     const requireAbility = createRequireAbilityMiddleware(abilityChecker);
-    const middleware = [createRequireWebAuthMiddleware(auth), requireAbility(ability)];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      requireAbility(ability)
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapWebGlobalAdmin(handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const middleware = [createRequireWebAuthMiddleware(auth), createRequireGlobalAdminMiddleware()];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      createRequireGlobalAdminMiddleware()
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapAuthenticated(handler) {
     return this.wrap("authenticated", handler);
   }
+  wrapVerified(handler) {
+    const middleware = [...this.group("authenticated"), ...this.verifiedMiddleware()];
+    return withMiddleware(...middleware)(handler);
+  }
   wrapPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return handler;
@@ -245,6 +276,18 @@ class HttpKernel {
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
+  wrapWebAuth(handler, options) {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...options.verified ? this.verifiedMiddleware() : []
+    ];
+    return this.wrapWeb(withMiddleware(...middleware)(handler));
+  }
+  verifiedMiddleware() {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return [createRequireVerifiedMiddleware(auth)];
+  }
   wrapThrottle(scope, rateLimit, handler) {
     const middleware = [];
     const memoryKeyPrefix = scope === "login" ? "login-throttle:" : "register-throttle:";

package/dist/index.js

@@ -19,6 +19,10 @@ import { conditionalJsonResponse } from "@getstrata/core/http/conditionalRespons
 import { applyMiddlewareToRoutes } from "@getstrata/core/http/middleware";
 
 // ../../src/bootstrap/httpKernel.ts
+import {
+  hasVerifiedEmail,
+  isEmailVerificationRequired
+} from "@getstrata/core/auth/emailVerification";
 import { createMembershipMiddleware } from "@getstrata/core/auth/membershipMiddleware";
 import { resolveAbilityChecker } from "@getstrata/core/contracts/serviceTokens";
 import { createAuthMiddleware } from "@getstrata/core/http/authMiddleware";
@@ -34,6 +38,8 @@ import { requestIdMiddleware } from "@getstrata/core/http/middleware";
 import { createRequireAbilityMiddleware } from "@getstrata/core/http/requireAbilityMiddleware";
 import { createRequireAuthMiddleware } from "@getstrata/core/http/requireAuthMiddleware";
 import { createRequireGlobalAdminMiddleware } from "@getstrata/core/http/requireGlobalAdminMiddleware";
+import { createRequirePasswordConfirmMiddleware } from "@getstrata/core/http/requirePasswordConfirmMiddleware";
+import { createRequireVerifiedMiddleware } from "@getstrata/core/http/requireVerifiedMiddleware";
 import { createRequireWebAuthMiddleware } from "@getstrata/core/http/requireWebAuthMiddleware";
 import { withErrorHandling } from "@getstrata/core/http/response";
 import { withMiddleware } from "@getstrata/core/http/routeMiddleware";
@@ -192,6 +198,9 @@ class HttpKernel {
     return this.wrapWeb(async (request) => {
       const user = await auth.resolve(request);
       if (user) {
+        if (isEmailVerificationRequired() && !hasVerifiedEmail(user)) {
+          return Response.redirect("/email/verify", 302);
+        }
         return Response.redirect(home, 302);
       }
       return handler(request);
@@ -204,24 +213,46 @@ class HttpKernel {
     return this.wrapWebAuthenticated(handler);
   }
   wrapWebAuthenticated(handler) {
-    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    return this.wrapWeb(withMiddleware(createRequireWebAuthMiddleware(auth))(handler));
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebAuthenticatedAllowUnverified(handler) {
+    return this.wrapWebAuth(handler, { verified: false });
+  }
+  wrapWebVerified(handler) {
+    return this.wrapWebAuth(handler, { verified: true });
+  }
+  wrapWebPasswordConfirm(handler) {
+    return this.wrapWebAuth(withMiddleware(createRequirePasswordConfirmMiddleware())(handler), {
+      verified: true
+    });
   }
   wrapWebAbility(ability, handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
     const abilityChecker = resolveAbilityChecker(this.dependencies.container);
     const requireAbility = createRequireAbilityMiddleware(abilityChecker);
-    const middleware = [createRequireWebAuthMiddleware(auth), requireAbility(ability)];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      requireAbility(ability)
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapWebGlobalAdmin(handler) {
     const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
-    const middleware = [createRequireWebAuthMiddleware(auth), createRequireGlobalAdminMiddleware()];
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...this.verifiedMiddleware(),
+      createRequireGlobalAdminMiddleware()
+    ];
     return this.wrapWeb(withMiddleware(...middleware)(handler));
   }
   wrapAuthenticated(handler) {
     return this.wrap("authenticated", handler);
   }
+  wrapVerified(handler) {
+    const middleware = [...this.group("authenticated"), ...this.verifiedMiddleware()];
+    return withMiddleware(...middleware)(handler);
+  }
   wrapPublicRead(handler) {
     if (isPublicReadsEnabled()) {
       return handler;
@@ -252,6 +283,18 @@ class HttpKernel {
   wrapRegister(handler) {
     return this.wrapThrottle("register", resolveRegisterRateLimit(), handler);
   }
+  wrapWebAuth(handler, options) {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    const middleware = [
+      createRequireWebAuthMiddleware(auth),
+      ...options.verified ? this.verifiedMiddleware() : []
+    ];
+    return this.wrapWeb(withMiddleware(...middleware)(handler));
+  }
+  verifiedMiddleware() {
+    const auth = this.dependencies.container.resolve(CORE_AUTH_TOKEN);
+    return [createRequireVerifiedMiddleware(auth)];
+  }
   wrapThrottle(scope, rateLimit, handler) {
     const middleware = [];
     const memoryKeyPrefix = scope === "login" ? "login-throttle:" : "register-throttle:";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/bootstrap",
-  "version": "0.2.60",
+  "version": "0.2.62",
   "description": "Strata application bootstrap — HttpKernel, DI, web session helpers",
   "type": "module",
   "license": "MIT",
@@ -173,14 +173,14 @@
     "build:bundle": "bun build index.ts --outdir dist --target bun --external bun --external eta --external @getstrata/core",
     "build:types": "tsc -p tsconfig.types.json && bun ../../scripts/prune-bootstrap-dist-types.ts",
     "prepublishOnly": "bun run build",
-    "build:subpaths": "bun build entries/applicationRegistry.ts entries/buildModuleRoutes.ts entries/buildWebModuleRoutes.ts entries/cache/modelCacheTags.ts entries/config.ts entries/context.ts entries/contracts.ts entries/createWebRoutes.ts entries/createRoutes.ts entries/createSpaRoutes.ts entries/dependencies.ts entries/discoverModules.ts entries/health.ts entries/http/securedRouteModelBinding.ts entries/httpKernel.ts entries/listeners/invalidateCacheOnModelWrite.ts entries/membershipService.ts entries/metricsRoutes.ts entries/queue/defaultJobs.ts entries/providers.ts entries/providers/view.ts entries/routeRegistry.ts entries/schedule.ts entries/secretsGuard.ts entries/web/forms.ts entries/web/routing.ts entries/web/server.ts entries/web/session.ts entries/web/slug.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/bootstrap --external @getstrata/bootstrap/applicationRegistry --external @getstrata/bootstrap/buildModuleRoutes --external @getstrata/bootstrap/buildWebModuleRoutes --external @getstrata/bootstrap/cache/modelCacheTags --external @getstrata/bootstrap/config --external @getstrata/bootstrap/context --external @getstrata/bootstrap/contracts --external @getstrata/bootstrap/createWebRoutes --external @getstrata/bootstrap/createRoutes --external @getstrata/bootstrap/createSpaRoutes --external @getstrata/bootstrap/dependencies --external @getstrata/bootstrap/discoverModules --external @getstrata/bootstrap/health --external @getstrata/bootstrap/http/securedRouteModelBinding --external @getstrata/bootstrap/httpKernel --external @getstrata/bootstrap/listeners/invalidateCacheOnModelWrite --external @getstrata/bootstrap/membershipService --external @getstrata/bootstrap/metricsRoutes --external @getstrata/bootstrap/queue/defaultJobs --external @getstrata/bootstrap/providers --external @getstrata/bootstrap/providers/view --external @getstrata/bootstrap/routeRegistry --external @getstrata/bootstrap/schedule --external @getstrata/bootstrap/secretsGuard --external @getstrata/bootstrap/web/forms --external @getstrata/bootstrap/web/routing --external @getstrata/bootstrap/web/server --external @getstrata/bootstrap/web/session --external @getstrata/bootstrap/web/slug --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/signedUrl --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/exportAuditLogsJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/mail/sanitizeMailHtml --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/appKeyPrefix --external @getstrata/core/runtime/frontendMode --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
+    "build:subpaths": "bun build entries/applicationRegistry.ts entries/buildModuleRoutes.ts entries/buildWebModuleRoutes.ts entries/cache/modelCacheTags.ts entries/config.ts entries/context.ts entries/contracts.ts entries/createWebRoutes.ts entries/createRoutes.ts entries/createSpaRoutes.ts entries/dependencies.ts entries/discoverModules.ts entries/health.ts entries/http/securedRouteModelBinding.ts entries/httpKernel.ts entries/listeners/invalidateCacheOnModelWrite.ts entries/membershipService.ts entries/metricsRoutes.ts entries/queue/defaultJobs.ts entries/providers.ts entries/providers/view.ts entries/routeRegistry.ts entries/schedule.ts entries/secretsGuard.ts entries/web/forms.ts entries/web/routing.ts entries/web/server.ts entries/web/session.ts entries/web/slug.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/bootstrap --external @getstrata/bootstrap/applicationRegistry --external @getstrata/bootstrap/buildModuleRoutes --external @getstrata/bootstrap/buildWebModuleRoutes --external @getstrata/bootstrap/cache/modelCacheTags --external @getstrata/bootstrap/config --external @getstrata/bootstrap/context --external @getstrata/bootstrap/contracts --external @getstrata/bootstrap/createWebRoutes --external @getstrata/bootstrap/createRoutes --external @getstrata/bootstrap/createSpaRoutes --external @getstrata/bootstrap/dependencies --external @getstrata/bootstrap/discoverModules --external @getstrata/bootstrap/health --external @getstrata/bootstrap/http/securedRouteModelBinding --external @getstrata/bootstrap/httpKernel --external @getstrata/bootstrap/listeners/invalidateCacheOnModelWrite --external @getstrata/bootstrap/membershipService --external @getstrata/bootstrap/metricsRoutes --external @getstrata/bootstrap/queue/defaultJobs --external @getstrata/bootstrap/providers --external @getstrata/bootstrap/providers/view --external @getstrata/bootstrap/routeRegistry --external @getstrata/bootstrap/schedule --external @getstrata/bootstrap/secretsGuard --external @getstrata/bootstrap/web/forms --external @getstrata/bootstrap/web/routing --external @getstrata/bootstrap/web/server --external @getstrata/bootstrap/web/session --external @getstrata/bootstrap/web/slug --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/emailVerification --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/passwordConfirmCookie --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/requireVerifiedMiddleware --external @getstrata/core/http/requirePasswordConfirmMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/signedUrl --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/exportAuditLogsJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/mail/sanitizeMailHtml --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/appKeyPrefix --external @getstrata/core/runtime/frontendMode --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
     "build:shims": "true"
   },
   "publishConfig": {
     "access": "public"
   },
   "peerDependencies": {
-    "@getstrata/core": "^0.5.73",
+    "@getstrata/core": "^0.5.75",
     "typescript": "^5.9.0"
   }
 }