@getstrata/core 0.5.49 → 0.5.51

package/dist/entries/http/routeModelBinding.js

@@ -1,113 +1,8 @@
 // @bun
-// ../../src/core/runtime/asyncContextStore.ts
-import { AsyncLocalStorage } from "async_hooks";
-function createAsyncContextStore(key) {
-  const symbol = Symbol.for(key);
-  const globalRecord = globalThis;
-  const existing = globalRecord[symbol];
-  if (existing) {
-    return existing;
-  }
-  const store = new AsyncLocalStorage;
-  globalRecord[symbol] = store;
-  return store;
-}
-
-// ../../src/core/auth/authContext.ts
-var authContext = createAsyncContextStore("@getstrata/authContext");
-function runWithAuthUser(user, callback) {
-  return authContext.run(user, callback);
-}
-function currentAuthUser() {
-  return authContext.getStore() ?? null;
-}
-
-// ../../src/core/errors/http.ts
-class HttpError extends Error {
-  status;
-  details;
-  constructor(status, message, details) {
-    super(message);
-    this.name = new.target.name;
-    this.status = status;
-    this.details = details;
-  }
-}
-
-class BadRequestError extends HttpError {
-  constructor(message = "Bad Request", details) {
-    super(400, message, details);
-  }
-}
-
-class NotFoundError extends HttpError {
-  constructor(message = "Not Found", details) {
-    super(404, message, details);
-  }
-}
-
-class ConflictError extends HttpError {
-  constructor(message = "Conflict", details) {
-    super(409, message, details);
-  }
-}
-
-class UnprocessableEntityError extends HttpError {
-  constructor(message = "Unprocessable Entity", details) {
-    super(422, message, details);
-  }
-}
-
-class ValidationError extends HttpError {
-  constructor(message = "Validation failed", details) {
-    super(422, message, details);
-  }
-}
-
-class ForbiddenError extends HttpError {
-  constructor(message = "Forbidden", details) {
-    super(403, message, details);
-  }
-}
-
-class UnauthorizedError extends HttpError {
-  constructor(message = "Unauthorized", details) {
-    super(401, message, details);
-  }
-}
-
-class PayloadTooLargeError extends HttpError {
-  constructor(message = "Payload Too Large", details) {
-    super(413, message, details);
-  }
-}
-
-class PreconditionFailedError extends HttpError {
-  constructor(message = "Precondition Failed", details) {
-    super(412, message, details);
-  }
-}
-
-// ../../src/core/tenant/tenantContext.ts
-var tenantContext = createAsyncContextStore("@getstrata/tenantContext");
-function runWithTenant(tenant, callback) {
-  return tenantContext.run(tenant, callback);
-}
-function currentTenant() {
-  return tenantContext.getStore() ?? null;
-}
-function rateLimitMultiplierForPlan(plan) {
-  switch (plan) {
-    case "enterprise":
-      return 4;
-    case "pro":
-      return 2;
-    default:
-      return 1;
-  }
-}
-
 // ../../src/core/http/validation.ts
+import { currentAuthUser } from "@getstrata/core/auth/authContext";
+import { BadRequestError } from "@getstrata/core/errors/http";
+import { currentTenantId } from "@getstrata/core/tenant/tenantContext";
 function getQueryParams(request) {
   if (!request) {
     return new URLSearchParams;

package/dist/entries/http/securedRouteModelBinding.js

@@ -1,186 +1,14 @@
 // @bun
-// ../../src/core/runtime/asyncContextStore.ts
-import { AsyncLocalStorage } from "async_hooks";
-function createAsyncContextStore(key) {
-  const symbol = Symbol.for(key);
-  const globalRecord = globalThis;
-  const existing = globalRecord[symbol];
-  if (existing) {
-    return existing;
-  }
-  const store = new AsyncLocalStorage;
-  globalRecord[symbol] = store;
-  return store;
-}
-
-// ../../src/core/auth/authContext.ts
-var authContext = createAsyncContextStore("@getstrata/authContext");
-function runWithAuthUser(user, callback) {
-  return authContext.run(user, callback);
-}
-function currentAuthUser() {
-  return authContext.getStore() ?? null;
-}
-
-// ../../src/core/errors/http.ts
-class HttpError extends Error {
-  status;
-  details;
-  constructor(status, message, details) {
-    super(message);
-    this.name = new.target.name;
-    this.status = status;
-    this.details = details;
-  }
-}
-
-class BadRequestError extends HttpError {
-  constructor(message = "Bad Request", details) {
-    super(400, message, details);
-  }
-}
-
-class NotFoundError extends HttpError {
-  constructor(message = "Not Found", details) {
-    super(404, message, details);
-  }
-}
-
-class ConflictError extends HttpError {
-  constructor(message = "Conflict", details) {
-    super(409, message, details);
-  }
-}
-
-class UnprocessableEntityError extends HttpError {
-  constructor(message = "Unprocessable Entity", details) {
-    super(422, message, details);
-  }
-}
-
-class ValidationError extends HttpError {
-  constructor(message = "Validation failed", details) {
-    super(422, message, details);
-  }
-}
-
-class ForbiddenError extends HttpError {
-  constructor(message = "Forbidden", details) {
-    super(403, message, details);
-  }
-}
-
-class UnauthorizedError extends HttpError {
-  constructor(message = "Unauthorized", details) {
-    super(401, message, details);
-  }
-}
-
-class PayloadTooLargeError extends HttpError {
-  constructor(message = "Payload Too Large", details) {
-    super(413, message, details);
-  }
-}
-
-class PreconditionFailedError extends HttpError {
-  constructor(message = "Precondition Failed", details) {
-    super(412, message, details);
-  }
-}
-
-// ../../src/core/contracts/di.ts
-var requiredDependencyKeys = [
-  "container",
-  "cache",
-  "storage"
-];
-function getRequiredDependency(dependencies, key) {
-  const dependency = dependencies[key];
-  if (dependency === undefined) {
-    throw new Error(`Required dependency "${key}" is not registered.`);
-  }
-  return dependency;
-}
-function assertAppDependenciesComplete(dependencies) {
-  for (const key of requiredDependencyKeys) {
-    getRequiredDependency(dependencies, key);
-  }
-}
-function resolveService(dependencies, token) {
-  return dependencies.container.resolve(token);
-}
-
-// ../../src/core/contracts/serviceTokens.ts
-var CORE_CONFIG_TOKEN = "core.config";
-var CORE_CACHE_TOKEN = "core.cache";
-var CORE_QUEUE_TOKEN = "core.queue";
-var CORE_EVENT_BUS_TOKEN = "core.eventBus";
-var CORE_POLICY_GATE_TOKEN = "core.policyGate";
-var CORE_AUTH_TOKEN = "core.auth";
-var CORE_TOKEN_SERVICE_TOKEN = "core.tokenService";
-
-// ../../src/core/logging/logger.ts
-class Logger {
-  channel;
-  constructor(channel = "app") {
-    this.channel = channel;
-  }
-  write(level, message, context = {}) {
-    const entry = {
-      level,
-      channel: this.channel,
-      message,
-      timestamp: new Date().toISOString(),
-      ...context
-    };
-    const line = JSON.stringify(entry);
-    if (level === "error") {
-      console.error(line);
-      return;
-    }
-    console.log(line);
-  }
-  debug(message, context) {
-    this.write("debug", message, context);
-  }
-  info(message, context) {
-    this.write("info", message, context);
-  }
-  warn(message, context) {
-    this.write("warn", message, context);
-  }
-  error(message, context) {
-    this.write("error", message, context);
-  }
-}
-var appLogger = new Logger("app");
+// ../../src/core/http/securedRouteModelBinding.ts
+import { currentAuthUser as currentAuthUser2 } from "@getstrata/core/auth/authContext";
+import { BadRequestError as BadRequestError2 } from "@getstrata/core/errors/http";
+import {
+  resolveApplicationAuth,
+  resolveApplicationPolicyGate
+} from "@getstrata/core/runtime/applicationRegistry";
 
-// ../../src/core/runtime/applicationRegistry.ts
-var APPLICATION_CONTEXT_KEY = Symbol.for("@getstrata/applicationContext");
-var activeContext;
-function readStoredApplicationContext() {
-  if (activeContext) {
-    return activeContext;
-  }
-  const globalContext = globalThis[APPLICATION_CONTEXT_KEY];
-  if (globalContext) {
-    activeContext = globalContext;
-  }
-  return activeContext;
-}
-function requireActiveApplicationContext() {
-  const context = readStoredApplicationContext();
-  if (!context) {
-    throw new Error("The application context has not been bootstrapped.");
-  }
-  return context;
-}
-function resolveApplicationAuth() {
-  return requireActiveApplicationContext().container.resolve(CORE_AUTH_TOKEN);
-}
-function resolveApplicationPolicyGate() {
-  return requireActiveApplicationContext().container.resolve(CORE_POLICY_GATE_TOKEN);
-}
+// ../../src/core/http/etag.ts
+import { PreconditionFailedError } from "@getstrata/core/errors/http";
 
 // ../../src/core/crypto/nonCryptographicHash.ts
 function nonCryptographicDigest(input) {
@@ -277,26 +105,10 @@ function applyConditionalGet(request, response, etag) {
   });
 }
 
-// ../../src/core/tenant/tenantContext.ts
-var tenantContext = createAsyncContextStore("@getstrata/tenantContext");
-function runWithTenant(tenant, callback) {
-  return tenantContext.run(tenant, callback);
-}
-function currentTenant() {
-  return tenantContext.getStore() ?? null;
-}
-function rateLimitMultiplierForPlan(plan) {
-  switch (plan) {
-    case "enterprise":
-      return 4;
-    case "pro":
-      return 2;
-    default:
-      return 1;
-  }
-}
-
 // ../../src/core/http/validation.ts
+import { currentAuthUser } from "@getstrata/core/auth/authContext";
+import { BadRequestError } from "@getstrata/core/errors/http";
+import { currentTenantId } from "@getstrata/core/tenant/tenantContext";
 function getQueryParams(request) {
   if (!request) {
     return new URLSearchParams;
@@ -330,7 +142,7 @@ function securedBindRouteModel(param, resolver, authorization, handler) {
     const model = await resolver(id, request);
     const gate = resolveApplicationPolicyGate();
     const auth = resolveApplicationAuth();
-    const user = currentAuthUser() ?? await auth.resolve(request);
+    const user = currentAuthUser2() ?? await auth.resolve(request);
     gate.authorize(authorization.resource, authorization.action, user, model);
     if (isEtagEnabled() && isMutatingPolicyAction(authorization.action)) {
       assertIfMatch(request, etagFromResource(model), {
@@ -348,12 +160,12 @@ function securedBindRouteModelByKey(param, resolver, authorization, handler) {
   return async (request) => {
     const key = String(request.params[param] ?? "").trim();
     if (!key) {
-      throw new BadRequestError(`Missing route parameter "${String(param)}".`);
+      throw new BadRequestError2(`Missing route parameter "${String(param)}".`);
     }
     const model = await resolver(key, request);
     const gate = resolveApplicationPolicyGate();
     const auth = resolveApplicationAuth();
-    const user = currentAuthUser() ?? await auth.resolve(request);
+    const user = currentAuthUser2() ?? await auth.resolve(request);
     gate.authorize(authorization.resource, authorization.action, user, model);
     if (isEtagEnabled() && isMutatingPolicyAction(authorization.action)) {
       assertIfMatch(request, etagFromResource(model), {

package/dist/entries/http/throttleMiddleware.js

@@ -1,50 +1,8 @@
 // @bun
 // ../../src/core/http/throttleMiddleware.ts
+import { currentAuthUser } from "@getstrata/core/auth/authContext";
+import { currentTenant, rateLimitMultiplierForPlan } from "@getstrata/core/tenant/tenantContext";
 var {RedisClient } = globalThis.Bun;
-
-// ../../src/core/runtime/asyncContextStore.ts
-import { AsyncLocalStorage } from "async_hooks";
-function createAsyncContextStore(key) {
-  const symbol = Symbol.for(key);
-  const globalRecord = globalThis;
-  const existing = globalRecord[symbol];
-  if (existing) {
-    return existing;
-  }
-  const store = new AsyncLocalStorage;
-  globalRecord[symbol] = store;
-  return store;
-}
-
-// ../../src/core/auth/authContext.ts
-var authContext = createAsyncContextStore("@getstrata/authContext");
-function runWithAuthUser(user, callback) {
-  return authContext.run(user, callback);
-}
-function currentAuthUser() {
-  return authContext.getStore() ?? null;
-}
-
-// ../../src/core/tenant/tenantContext.ts
-var tenantContext = createAsyncContextStore("@getstrata/tenantContext");
-function runWithTenant(tenant, callback) {
-  return tenantContext.run(tenant, callback);
-}
-function currentTenant() {
-  return tenantContext.getStore() ?? null;
-}
-function rateLimitMultiplierForPlan(plan) {
-  switch (plan) {
-    case "enterprise":
-      return 4;
-    case "pro":
-      return 2;
-    default:
-      return 1;
-  }
-}
-
-// ../../src/core/http/throttleMiddleware.ts
 function resolveThrottleIdentity(request) {
   const user = currentAuthUser();
   if (user?.tokenId !== undefined) {

package/dist/entries/http/webErrorResponse.js

@@ -1,4 +1,7 @@
 // @bun
+// ../../src/core/http/webErrorResponse.ts
+import { HttpError as HttpError2, UnauthorizedError as UnauthorizedError2, ValidationError } from "@getstrata/core/errors/http";
+
 // ../../src/config/frontend.ts
 function readFrontendMode() {
   const mode = (process.env.FRONTEND_MODE ?? "api").trim();
@@ -14,73 +17,13 @@ function isViewsEnabled() {
   return readFrontendMode() === "server-htmx";
 }
 
-// ../../src/core/errors/http.ts
-class HttpError extends Error {
-  status;
-  details;
-  constructor(status, message, details) {
-    super(message);
-    this.name = new.target.name;
-    this.status = status;
-    this.details = details;
-  }
-}
-
-class BadRequestError extends HttpError {
-  constructor(message = "Bad Request", details) {
-    super(400, message, details);
-  }
-}
-
-class NotFoundError extends HttpError {
-  constructor(message = "Not Found", details) {
-    super(404, message, details);
-  }
-}
-
-class ConflictError extends HttpError {
-  constructor(message = "Conflict", details) {
-    super(409, message, details);
-  }
-}
-
-class UnprocessableEntityError extends HttpError {
-  constructor(message = "Unprocessable Entity", details) {
-    super(422, message, details);
-  }
-}
-
-class ValidationError extends HttpError {
-  constructor(message = "Validation failed", details) {
-    super(422, message, details);
-  }
-}
-
-class ForbiddenError extends HttpError {
-  constructor(message = "Forbidden", details) {
-    super(403, message, details);
-  }
-}
-
-class UnauthorizedError extends HttpError {
-  constructor(message = "Unauthorized", details) {
-    super(401, message, details);
-  }
-}
-
-class PayloadTooLargeError extends HttpError {
-  constructor(message = "Payload Too Large", details) {
-    super(413, message, details);
-  }
-}
-
-class PreconditionFailedError extends HttpError {
-  constructor(message = "Precondition Failed", details) {
-    super(412, message, details);
-  }
-}
-
 // ../../src/core/database/errors.ts
+import {
+  BadRequestError,
+  ConflictError,
+  HttpError,
+  UnprocessableEntityError
+} from "@getstrata/core/errors/http";
 function isPostgresError(error) {
   return typeof error === "object" && error !== null && (("errno" in error) || ("code" in error));
 }
@@ -182,6 +125,10 @@ function htmlResponse(html, init = {}) {
 function isHtmxRequest(request) {
   return request.headers.get("HX-Request") === "true";
 }
+// ../../src/core/view/webLayoutData.ts
+import { currentAuthUser } from "@getstrata/core/auth/authContext";
+import { currentRequestMeta as currentRequestMeta2 } from "@getstrata/core/http/requestMetaContext";
+
 // ../../src/bootstrap/config.ts
 import {
   CORE_AUTH_TOKEN,
@@ -297,12 +244,6 @@ function registerDefaultDatabasePool(connection) {
   defaultPool.connection = connection;
   defaultQuery.connection = createDatabaseQueryProxy(connection);
 }
-function getDefaultDatabasePool() {
-  if (!defaultPool.connection) {
-    throw new Error("Default database pool is not registered. Call registerDefaultDatabasePool() during app bootstrap.");
-  }
-  return defaultPool.connection;
-}
 function getDefaultDatabaseQuery() {
   if (!defaultQuery.connection) {
     throw new Error("Default database query handle is not registered. Call registerDefaultDatabasePool() during app bootstrap.");
@@ -373,7 +314,7 @@ var apiTokenTable = defineTable({
 // ../../src/modules/user/authService.ts
 import { verifyPassword } from "@getstrata/core/auth/password";
 import { revealMfaSecret } from "@getstrata/core/crypto/mfaSecret";
-import { UnauthorizedError as UnauthorizedError2 } from "@getstrata/core/errors/http";
+import { UnauthorizedError } from "@getstrata/core/errors/http";
 import { logSecurityEvent } from "@getstrata/core/security/securityEvents";
 import { resolveDefaultTokenExpiryDays } from "@getstrata/core/security/tokenExpiry";
 import { verifyTotp } from "@getstrata/core/security/totp";
@@ -438,22 +379,22 @@ class AuthService {
     const user = await this.users.findByEmail(email);
     if (!user?.password_hash) {
       logSecurityEvent("auth_login_failed", { reason: "unknown_user", email });
-      throw new UnauthorizedError2("Invalid credentials.");
+      throw new UnauthorizedError("Invalid credentials.");
     }
     const valid = await verifyPassword(password, user.password_hash);
     if (!valid) {
       logSecurityEvent("auth_login_failed", { reason: "invalid_password", user_id: user.id });
-      throw new UnauthorizedError2("Invalid credentials.");
+      throw new UnauthorizedError("Invalid credentials.");
     }
     if (isFeatureEnabled("emailVerification") && !user.email_verified_at) {
       logSecurityEvent("auth_login_blocked", { reason: "email_unverified", user_id: user.id });
-      throw new UnauthorizedError2("Email address is not verified.");
+      throw new UnauthorizedError("Email address is not verified.");
     }
     if (isFeatureEnabled("mfa") && user.mfa_enabled) {
       const mfaSecret = revealMfaSecret(user.mfa_secret);
       if (!mfaSecret || !options.mfaCode || !verifyTotp(mfaSecret, options.mfaCode)) {
         logSecurityEvent("auth_login_failed", { reason: "invalid_mfa", user_id: user.id });
-        throw new UnauthorizedError2("Invalid MFA code.");
+        throw new UnauthorizedError("Invalid MFA code.");
       }
     }
     logSecurityEvent("auth_login_success", { user_id: user.id, method: "password" });
@@ -466,7 +407,7 @@ class AuthService {
   async loginWithOAuth(providerName, code) {
     const provider = this.oauthProviders.get(providerName);
     if (!provider) {
-      throw new UnauthorizedError2("Unsupported OAuth provider.");
+      throw new UnauthorizedError("Unsupported OAuth provider.");
     }
     const profile = await provider.exchangeCode(code);
     const user = await this.findOrCreateOAuthUser(providerName, profile);
@@ -480,7 +421,7 @@ class AuthService {
   buildOAuthAuthorizationUrl(providerName, state) {
     const provider = this.oauthProviders.get(providerName);
     if (!provider) {
-      throw new UnauthorizedError2("Unsupported OAuth provider.");
+      throw new UnauthorizedError("Unsupported OAuth provider.");
     }
     return provider.getAuthorizationUrl(state);
   }
@@ -523,7 +464,7 @@ var notificationTable = defineTable2({
 });
 
 // ../../src/modules/user/notificationService.ts
-import { NotFoundError as NotFoundError2 } from "@getstrata/core/errors/http";
+import { NotFoundError } from "@getstrata/core/errors/http";
 
 // ../../src/modules/user/oauthIdentityRepository.ts
 import { BaseRepository as BaseRepository3, defineTable as defineTable3 } from "@getstrata/core/database";
@@ -567,21 +508,12 @@ var userTable = defineTable4({
 
 // ../../src/modules/user/tokenService.ts
 import { hashApiToken } from "@getstrata/core/auth/tokenHash";
-import { ForbiddenError as ForbiddenError2, NotFoundError as NotFoundError3 } from "@getstrata/core/errors/http";
+import { ForbiddenError, NotFoundError as NotFoundError2 } from "@getstrata/core/errors/http";
 import { resolveDefaultTokenExpiryDays as resolveDefaultTokenExpiryDays2 } from "@getstrata/core/security/tokenExpiry";
 
 // ../../src/modules/user/provider.ts
 var tokenServiceToken = CORE_TOKEN_SERVICE_TOKEN;
 
-// ../../src/core/auth/authContext.ts
-var authContext = createAsyncContextStore("@getstrata/authContext");
-function runWithAuthUser(user, callback) {
-  return authContext.run(user, callback);
-}
-function currentAuthUser() {
-  return authContext.getStore() ?? null;
-}
-
 // ../../src/core/http/csrfToken.ts
 import { timingSafeEqual } from "crypto";
 
@@ -805,7 +737,7 @@ function withFlashClear(response) {
 // ../../src/core/view/webLayoutData.ts
 async function resolveWebLayoutData(container, request) {
   const csrfToken = request ? resolveCsrfTokenForRequest(request) : "";
-  const flash = request ? currentRequestMeta().flash ?? pullFlash(request) : null;
+  const flash = request ? currentRequestMeta2().flash ?? pullFlash(request) : null;
   const authUser = currentAuthUser();
   if (!authUser) {
     return { authUser: null, csrfToken, flash };
@@ -885,8 +817,8 @@ function webErrorResponse(error, request) {
   if (!request || !isViewsEnabled() || requestPrefersJson(request)) {
     return null;
   }
-  const mappedError = error instanceof HttpError ? error : mapDatabaseError(error);
-  if (mappedError instanceof UnauthorizedError) {
+  const mappedError = error instanceof HttpError2 ? error : mapDatabaseError(error);
+  if (mappedError instanceof UnauthorizedError2) {
     const redirectTarget = encodeURIComponent(new URL(request.url).pathname);
     return Response.redirect(`/login?redirect=${redirectTarget}`, 302);
   }