@getstrata/core 0.5.48 → 0.5.50

package/README.md

@@ -44,6 +44,31 @@ Exports for admin dashboards and queue recovery:
 ```bash
 bun run build:framework
 bun run verify:framework   # build + public API tests
+bun run verify:shared-subpaths  # after build: confirm singleton shims
+```
+
+## Subpath imports
+
+`@getstrata/core` publishes **139+ subpaths** (for example `@getstrata/core/http/authMiddleware`,
+`@getstrata/core/database/migrations`). Prefer subpaths over the root import in apps, bootstrap, and tests.
+
+Some subpaths **re-export the main bundle** so singleton state stays shared (database pool binding,
+`AsyncLocalStorage` auth/tenant context, global registries, `HttpError` / `Notification` classes for
+`instanceof`). The canonical list lives in `scripts/core-shared-subpaths.ts` and is verified by
+`scripts/verify-core-shared-subpaths.ts` after each framework build.
+
+When adding a subpath that owns process-wide state or base classes used with `instanceof`, append it to
+`CORE_SHARED_SUBPATHS`, run `bun scripts/sync-package-subpaths.ts`, and rebuild. Non-shared subpath
+bundles are built with generated `--external @getstrata/core/*` flags so framework source can import
+shared modules via package self-imports (`scripts/codemod-core-self-imports.ts`).
+`scripts/verify-bundled-subpaths.ts` ensures entries like `http/webFormRequest` do not inline
+`ValidationError`.
+
+```typescript
+import { createAuthMiddleware } from "@getstrata/core/http/authMiddleware";
+import { bindDatabaseConnection } from "@getstrata/core/database/bindConnection";
+import { ValidationError } from "@getstrata/core/errors/http";
+import type { Migration } from "@getstrata/core/database/migrations/types";
 ```
 
 ## Publish to npm

package/dist/core/auth/membershipContextMiddleware.d.ts

@@ -1,3 +1,3 @@
-import type { Middleware } from "../http/middleware";
+import type { Middleware } from "@getstrata/core/http/middleware";
 declare function createMembershipContextMiddleware(): Middleware;
 export { createMembershipContextMiddleware };

package/dist/core/auth/scimAuthMiddleware.d.ts

@@ -1,3 +1,3 @@
-import type { Middleware } from "../http/middleware";
+import type { Middleware } from "@getstrata/core/http/middleware";
 declare function createScimAuthMiddleware(): Middleware;
 export { createScimAuthMiddleware };

package/dist/core/database/errors.d.ts

@@ -1,4 +1,4 @@
-import { HttpError } from "../errors/http";
+import { HttpError } from "@getstrata/core/errors/http";
 interface PostgresErrorLike {
     code?: string;
     errno?: string | number;

package/dist/core/facades/index.d.ts

@@ -2,7 +2,7 @@ declare function cache(): import("../../types/services").CacheLike;
 declare function auth(): import("../auth/guard").AuthManager;
 declare function policyGate(): import("../auth/policy").PolicyGate;
 declare function queue(): import("../queue").Queue;
-declare function events(): import("../events").EventBus;
+declare function events(): import("@getstrata/core/events").EventBus;
 declare function config<T>(key: string): T | undefined;
 declare function log(): import("../logging/logger").Logger;
 declare function mail(): import("../mail/mailer").Mailer;

package/dist/core/http/authMiddleware.d.ts

@@ -1,5 +1,5 @@
-import { type AuthUser, authContext } from "../auth/authContext";
-import type { AuthManager } from "../auth/guard";
+import { type AuthUser, authContext } from "@getstrata/core/auth/authContext";
+import type { AuthManager } from "@getstrata/core/auth/guard";
 declare function createAuthMiddleware(auth: AuthManager): (request: Request, next: () => Promise<Response>) => Promise<Response>;
 export type { AuthUser };
 export { authContext, createAuthMiddleware };

package/dist/core/http/authorizeMiddleware.d.ts

@@ -1,5 +1,5 @@
-import type { AuthManager } from "../auth/guard";
-import type { Policy, PolicyGate } from "../auth/policy";
+import type { AuthManager } from "@getstrata/core/auth/guard";
+import type { Policy, PolicyGate } from "@getstrata/core/auth/policy";
 import type { Middleware } from "./middleware";
 declare function createAuthorizeMiddleware(gate: PolicyGate, auth: AuthManager, resource: string, action: keyof Policy): Middleware;
 export { createAuthorizeMiddleware };

package/dist/core/http/index.d.ts

@@ -1,4 +1,4 @@
-export { BadRequestError, ConflictError, ForbiddenError, HttpError, NotFoundError, PayloadTooLargeError, PreconditionFailedError, UnauthorizedError, UnprocessableEntityError, ValidationError, } from "../errors/http";
+export { BadRequestError, ConflictError, ForbiddenError, HttpError, NotFoundError, PayloadTooLargeError, PreconditionFailedError, UnauthorizedError, UnprocessableEntityError, ValidationError, } from "@getstrata/core/errors/http";
 export type { PaginatedResult, PaginationMeta } from "../pagination";
 export { createAuthMiddleware } from "./authMiddleware";
 export { createAuthorizeMiddleware } from "./authorizeMiddleware";

package/dist/core/http/requireAuthMiddleware.d.ts

@@ -1,4 +1,4 @@
-import type { AuthManager } from "../auth/guard";
+import type { AuthManager } from "@getstrata/core/auth/guard";
 import type { Middleware } from "./middleware";
 declare function createRequireAuthMiddleware(auth: AuthManager): Middleware;
 export { createRequireAuthMiddleware };

package/dist/core/http/requireWebAuthMiddleware.d.ts

@@ -1,4 +1,4 @@
-import type { AuthManager } from "../auth/guard";
+import type { AuthManager } from "@getstrata/core/auth/guard";
 import type { Middleware } from "./middleware";
 declare function createRequireWebAuthMiddleware(auth: AuthManager): Middleware;
 export { createRequireWebAuthMiddleware };

package/dist/core/http/securedRouteModelBinding.d.ts

@@ -1,4 +1,4 @@
-import type { Policy } from "../auth/policy";
+import type { Policy } from "@getstrata/core/auth/policy";
 import type { RouteRequest } from "./route";
 interface RouteModelAuthorization {
     resource: string;

package/dist/core/logging/requestLoggingMiddleware.d.ts

@@ -1,3 +1,3 @@
-import type { Middleware } from "../http/middleware";
+import type { Middleware } from "@getstrata/core/http/middleware";
 declare function createRequestLoggingMiddleware(): Middleware;
 export { createRequestLoggingMiddleware };

package/dist/core/queue/failedJobRepository.d.ts

@@ -1,4 +1,4 @@
-import { BaseRepository } from "../database";
+import { BaseRepository } from "@getstrata/core/database";
 import type { FailedJobRecord } from "./types";
 declare class FailedJobRepository extends BaseRepository<FailedJobRecord, "id"> {
     constructor();

package/dist/core/queue/failedJobTable.d.ts

@@ -1,3 +1,3 @@
 import type { FailedJobRecord } from "./types";
-declare const failedJobTable: import("../database").TableDefinition<FailedJobRecord, "id">;
+declare const failedJobTable: import("@getstrata/core/database").TableDefinition<FailedJobRecord, "id">;
 export { failedJobTable };

package/dist/core/runtime/applicationRegistry.d.ts

@@ -1,8 +1,8 @@
+import type { AuthManager } from "@getstrata/core/auth/guard";
+import type { PolicyGate } from "@getstrata/core/auth/policy";
+import type { EventBus } from "@getstrata/core/events";
 import type { CacheLike } from "../../types/services";
-import type { AuthManager } from "../auth/guard";
-import type { PolicyGate } from "../auth/policy";
 import type { AppContext } from "../contracts/di";
-import type { EventBus } from "../events";
 import { type Logger } from "../logging/logger";
 import type { Queue } from "../queue";
 declare function setActiveApplicationContext(context: AppContext): void;

package/dist/core/tracing/tracingMiddleware.d.ts

@@ -1,3 +1,3 @@
-import type { Middleware } from "../http/middleware";
+import type { Middleware } from "@getstrata/core/http/middleware";
 declare function createTracingMiddleware(): Middleware;
 export { createTracingMiddleware };

package/dist/entries/audit/exportAuditLogs.js

@@ -1,4 +1,7 @@
 // @bun
+// ../../src/core/audit/exportAuditLogs.ts
+import { repositoryConnection as db2 } from "@getstrata/core/database/repositoryConnection";
+
 // ../../src/config/app.ts
 var appConfig = {
   name: "WorkHub",
@@ -8,179 +11,9 @@ var appConfig = {
   apiPrefix: process.env.API_PREFIX ?? "/api/v1"
 };
 
-// ../../src/core/database/boundConnection.ts
-var boundConnectionHolder = {
-  connection: null
-};
-function bindDatabaseConnection(connection) {
-  boundConnectionHolder.connection = connection;
-}
-function getBoundDatabaseConnection() {
-  return boundConnectionHolder.connection;
-}
-function resetBoundDatabaseConnection() {
-  boundConnectionHolder.connection = null;
-}
-
-// ../../src/core/runtime/asyncContextStore.ts
-import { AsyncLocalStorage } from "async_hooks";
-function createAsyncContextStore(key) {
-  const symbol = Symbol.for(key);
-  const globalRecord = globalThis;
-  const existing = globalRecord[symbol];
-  if (existing) {
-    return existing;
-  }
-  const store = new AsyncLocalStorage;
-  globalRecord[symbol] = store;
-  return store;
-}
-
-// ../../src/core/database/connectionContext.ts
-var activeConnection = createAsyncContextStore("@getstrata/databaseConnectionContext");
-function runWithDatabaseConnection(connection, callback) {
-  return activeConnection.run(connection, callback);
-}
-function getActiveDatabaseConnection(fallback) {
-  return activeConnection.getStore() ?? fallback;
-}
-function hasActiveDatabaseConnection() {
-  return activeConnection.getStore() !== undefined;
-}
-
-// ../../src/core/database/queryProxy.ts
-var POOL_CONNECTION_METHODS = new Set(["begin", "close", "connect"]);
-function createDatabaseQueryProxy(pool) {
-  function resolveDatabase() {
-    return getActiveDatabaseConnection(pool);
-  }
-  function resolveDatabaseForProperty(property) {
-    if (typeof property === "string" && POOL_CONNECTION_METHODS.has(property)) {
-      return pool;
-    }
-    return resolveDatabase();
-  }
-  return new Proxy(function database() {}, {
-    apply(_target, _thisArg, args) {
-      return resolveDatabase()(...args);
-    },
-    get(_target, property) {
-      const connection = resolveDatabaseForProperty(property);
-      const value = connection[property];
-      return typeof value === "function" ? value.bind(connection) : value;
-    }
-  });
-}
-
-// ../../src/core/database/defaultConnection.ts
-var defaultPool = {
-  connection: null
-};
-var defaultQuery = {
-  connection: null
-};
-function registerDefaultDatabasePool(connection) {
-  defaultPool.connection = connection;
-  defaultQuery.connection = createDatabaseQueryProxy(connection);
-}
-function getDefaultDatabasePool() {
-  if (!defaultPool.connection) {
-    throw new Error("Default database pool is not registered. Call registerDefaultDatabasePool() during app bootstrap.");
-  }
-  return defaultPool.connection;
-}
-function getDefaultDatabaseQuery() {
-  if (!defaultQuery.connection) {
-    throw new Error("Default database query handle is not registered. Call registerDefaultDatabasePool() during app bootstrap.");
-  }
-  return defaultQuery.connection;
-}
-
-// ../../src/core/database/repositoryConnection.ts
-function resolveRepositoryConnection() {
-  return getBoundDatabaseConnection() ?? getDefaultDatabaseQuery();
-}
-var repositoryConnection = new Proxy(function repositoryConnection2() {}, {
-  apply(_target, _thisArg, args) {
-    return resolveRepositoryConnection()(...args);
-  },
-  get(_target, property) {
-    const connection = resolveRepositoryConnection();
-    const value = connection[property];
-    return typeof value === "function" ? value.bind(connection) : value;
-  }
-});
-
 // ../../src/core/security/safeUrl.ts
 import { lookup as dnsLookupImpl } from "dns/promises";
-
-// ../../src/core/errors/http.ts
-class HttpError extends Error {
-  status;
-  details;
-  constructor(status, message, details) {
-    super(message);
-    this.name = new.target.name;
-    this.status = status;
-    this.details = details;
-  }
-}
-
-class BadRequestError extends HttpError {
-  constructor(message = "Bad Request", details) {
-    super(400, message, details);
-  }
-}
-
-class NotFoundError extends HttpError {
-  constructor(message = "Not Found", details) {
-    super(404, message, details);
-  }
-}
-
-class ConflictError extends HttpError {
-  constructor(message = "Conflict", details) {
-    super(409, message, details);
-  }
-}
-
-class UnprocessableEntityError extends HttpError {
-  constructor(message = "Unprocessable Entity", details) {
-    super(422, message, details);
-  }
-}
-
-class ValidationError extends HttpError {
-  constructor(message = "Validation failed", details) {
-    super(422, message, details);
-  }
-}
-
-class ForbiddenError extends HttpError {
-  constructor(message = "Forbidden", details) {
-    super(403, message, details);
-  }
-}
-
-class UnauthorizedError extends HttpError {
-  constructor(message = "Unauthorized", details) {
-    super(401, message, details);
-  }
-}
-
-class PayloadTooLargeError extends HttpError {
-  constructor(message = "Payload Too Large", details) {
-    super(413, message, details);
-  }
-}
-
-class PreconditionFailedError extends HttpError {
-  constructor(message = "Precondition Failed", details) {
-    super(412, message, details);
-  }
-}
-
-// ../../src/core/security/safeUrl.ts
+import { BadRequestError } from "@getstrata/core/errors/http";
 var dnsLookup = dnsLookupImpl;
 var BLOCKED_HOSTNAMES = new Set([
   "localhost",
@@ -310,12 +143,13 @@ async function safeFetch(input, init = {}, options = {}) {
 }
 
 // ../../src/core/tenant/databaseTenantContext.ts
+import { repositoryConnection as db } from "@getstrata/core/database/repositoryConnection";
 async function runWithMigrationBypass(callback) {
-  await repositoryConnection`SELECT set_config('app.bypass_rls', 'true', false)`;
+  await db`SELECT set_config('app.bypass_rls', 'true', false)`;
   try {
     return await callback();
   } finally {
-    await repositoryConnection`SELECT set_config('app.bypass_rls', 'false', false)`;
+    await db`SELECT set_config('app.bypass_rls', 'false', false)`;
   }
 }
 
@@ -372,7 +206,7 @@ async function exportPendingAuditLogs() {
     return 0;
   }
   return await runWithMigrationBypass(async () => {
-    const rows = await repositoryConnection`
+    const rows = await db2`
       SELECT
         id,
         user_id,
@@ -422,7 +256,7 @@ async function exportPendingAuditLogs() {
     }
     const ids = rows.map((row) => row.id);
     for (const id of ids) {
-      await repositoryConnection`UPDATE audit_log SET exported_at = NOW() WHERE id = ${id}`;
+      await db2`UPDATE audit_log SET exported_at = NOW() WHERE id = ${id}`;
     }
     return rows.length;
   });

package/dist/entries/auth/membershipMiddleware.js

@@ -73,12 +73,6 @@ function registerDefaultDatabasePool(connection) {
   defaultPool.connection = connection;
   defaultQuery.connection = createDatabaseQueryProxy(connection);
 }
-function getDefaultDatabasePool() {
-  if (!defaultPool.connection) {
-    throw new Error("Default database pool is not registered. Call registerDefaultDatabasePool() during app bootstrap.");
-  }
-  return defaultPool.connection;
-}
 function getDefaultDatabaseQuery() {
   if (!defaultQuery.connection) {
     throw new Error("Default database query handle is not registered. Call registerDefaultDatabasePool() during app bootstrap.");
@@ -179,77 +173,11 @@ class OrganizationMemberRepository {
 }
 var memberRepository_default = OrganizationMemberRepository;
 
-// ../../src/core/errors/http.ts
-class HttpError extends Error {
-  status;
-  details;
-  constructor(status, message, details) {
-    super(message);
-    this.name = new.target.name;
-    this.status = status;
-    this.details = details;
-  }
-}
-
-class BadRequestError extends HttpError {
-  constructor(message = "Bad Request", details) {
-    super(400, message, details);
-  }
-}
-
-class NotFoundError extends HttpError {
-  constructor(message = "Not Found", details) {
-    super(404, message, details);
-  }
-}
-
-class ConflictError extends HttpError {
-  constructor(message = "Conflict", details) {
-    super(409, message, details);
-  }
-}
-
-class UnprocessableEntityError extends HttpError {
-  constructor(message = "Unprocessable Entity", details) {
-    super(422, message, details);
-  }
-}
-
-class ValidationError extends HttpError {
-  constructor(message = "Validation failed", details) {
-    super(422, message, details);
-  }
-}
-
-class ForbiddenError extends HttpError {
-  constructor(message = "Forbidden", details) {
-    super(403, message, details);
-  }
-}
-
-class UnauthorizedError extends HttpError {
-  constructor(message = "Unauthorized", details) {
-    super(401, message, details);
-  }
-}
-
-class PayloadTooLargeError extends HttpError {
-  constructor(message = "Payload Too Large", details) {
-    super(413, message, details);
-  }
-}
-
-class PreconditionFailedError extends HttpError {
-  constructor(message = "Precondition Failed", details) {
-    super(412, message, details);
-  }
-}
+// ../../src/core/auth/accessControl.ts
+import { ForbiddenError } from "@getstrata/core/errors/http";
 
 // ../../src/core/auth/authContext.ts
 var authContext = createAsyncContextStore("@getstrata/authContext");
-function runWithAuthUser(user, callback) {
-  return authContext.run(user, callback);
-}
 function currentAuthUser() {
   return authContext.getStore() ?? null;
 }

package/dist/entries/auth/scimAuthMiddleware.js

@@ -1,22 +1,8 @@
 // @bun
-// ../../src/core/database/boundConnection.ts
-var boundConnectionHolder = {
-  connection: null
-};
-function bindDatabaseConnection(connection) {
-  boundConnectionHolder.connection = connection;
-}
-function getBoundDatabaseConnection() {
-  return boundConnectionHolder.connection;
-}
-function resetBoundDatabaseConnection() {
-  boundConnectionHolder.connection = null;
-}
-
-// ../../src/core/database/bindConnection.ts
-function bindDatabaseConnection2(connection) {
-  bindDatabaseConnection(connection);
-}
+// ../../src/core/auth/scimAuthMiddleware.ts
+import { bindDatabaseConnection } from "@getstrata/core/database/bindConnection";
+import { resetBoundDatabaseConnection } from "@getstrata/core/database/boundConnection";
+import { getDefaultDatabasePool as getDefaultDatabasePool2 } from "@getstrata/core/database/defaultConnection";
 
 // ../../src/core/runtime/asyncContextStore.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -44,54 +30,6 @@ function hasActiveDatabaseConnection() {
   return activeConnection.getStore() !== undefined;
 }
 
-// ../../src/core/database/queryProxy.ts
-var POOL_CONNECTION_METHODS = new Set(["begin", "close", "connect"]);
-function createDatabaseQueryProxy(pool) {
-  function resolveDatabase() {
-    return getActiveDatabaseConnection(pool);
-  }
-  function resolveDatabaseForProperty(property) {
-    if (typeof property === "string" && POOL_CONNECTION_METHODS.has(property)) {
-      return pool;
-    }
-    return resolveDatabase();
-  }
-  return new Proxy(function database() {}, {
-    apply(_target, _thisArg, args) {
-      return resolveDatabase()(...args);
-    },
-    get(_target, property) {
-      const connection = resolveDatabaseForProperty(property);
-      const value = connection[property];
-      return typeof value === "function" ? value.bind(connection) : value;
-    }
-  });
-}
-
-// ../../src/core/database/defaultConnection.ts
-var defaultPool = {
-  connection: null
-};
-var defaultQuery = {
-  connection: null
-};
-function registerDefaultDatabasePool(connection) {
-  defaultPool.connection = connection;
-  defaultQuery.connection = createDatabaseQueryProxy(connection);
-}
-function getDefaultDatabasePool() {
-  if (!defaultPool.connection) {
-    throw new Error("Default database pool is not registered. Call registerDefaultDatabasePool() during app bootstrap.");
-  }
-  return defaultPool.connection;
-}
-function getDefaultDatabaseQuery() {
-  if (!defaultQuery.connection) {
-    throw new Error("Default database query handle is not registered. Call registerDefaultDatabasePool() during app bootstrap.");
-  }
-  return defaultQuery.connection;
-}
-
 // ../../src/domain/scim.ts
 var TEST_SCIM_BEARER_TOKEN = "workhub-scim-test-token";
 
@@ -139,24 +77,10 @@ function resolveScimTenantFromToken(token) {
   return null;
 }
 
-// ../../src/core/database/repositoryConnection.ts
-function resolveRepositoryConnection() {
-  return getBoundDatabaseConnection() ?? getDefaultDatabaseQuery();
-}
-var repositoryConnection = new Proxy(function repositoryConnection2() {}, {
-  apply(_target, _thisArg, args) {
-    return resolveRepositoryConnection()(...args);
-  },
-  get(_target, property) {
-    const connection = resolveRepositoryConnection();
-    const value = connection[property];
-    return typeof value === "function" ? value.bind(connection) : value;
-  }
-});
-
 // ../../src/core/tenant/resolveTenant.ts
+import { repositoryConnection as db } from "@getstrata/core/database/repositoryConnection";
 async function resolveTenant(tenantId) {
-  const rows = await repositoryConnection`
+  const rows = await db`
     SELECT id, slug, plan, region
     FROM tenant
     WHERE id = ${tenantId}
@@ -166,6 +90,9 @@ async function resolveTenant(tenantId) {
   return row ? { id: row.id, slug: row.slug, plan: row.plan, region: row.region ?? "eu" } : null;
 }
 
+// ../../src/core/tenant/tenantDatabaseScope.ts
+import { getDefaultDatabasePool } from "@getstrata/core/database/defaultConnection";
+
 // ../../src/core/tenant/tenantContext.ts
 var tenantContext = createAsyncContextStore("@getstrata/tenantContext");
 function runWithTenant(tenant, callback) {
@@ -174,19 +101,6 @@ function runWithTenant(tenant, callback) {
 function currentTenant() {
   return tenantContext.getStore() ?? null;
 }
-function currentTenantId() {
-  return currentTenant()?.id ?? 1;
-}
-function rateLimitMultiplierForPlan(plan) {
-  switch (plan) {
-    case "enterprise":
-      return 4;
-    case "pro":
-      return 2;
-    default:
-      return 1;
-  }
-}
 
 // ../../src/core/tenant/tenantDatabaseScope.ts
 async function applyTenantContextToTransaction(transaction, tenantId) {
@@ -227,7 +141,7 @@ function createScimAuthMiddleware() {
       return jsonScimError("SCIM tenant not found.", 401);
     }
     return await runWithTenantDatabase(tenant, async () => {
-      bindDatabaseConnection2(getActiveDatabaseConnection(getDefaultDatabasePool()));
+      bindDatabaseConnection(getActiveDatabaseConnection(getDefaultDatabasePool2()));
       try {
         return await next();
       } finally {