@getstrata/core 0.5.55 → 0.5.57

package/dist/entries/config/envSchema.js

@@ -30,6 +30,6 @@ function validateEnv(schema, env = process.env) {
   return resolved;
 }
 export {
-  validateEnv,
-  defineEnvSchema
+  defineEnvSchema,
+  validateEnv
 };

package/dist/entries/contracts/container.js

@@ -64,6 +64,6 @@ class ConfigStore {
   }
 }
 export {
-  ServiceContainer,
-  ConfigStore
+  ConfigStore,
+  ServiceContainer
 };

package/dist/entries/contracts/di.js

@@ -21,7 +21,7 @@ function resolveService(dependencies, token) {
   return dependencies.container.resolve(token);
 }
 export {
-  resolveService,
+  assertAppDependenciesComplete,
   getRequiredDependency,
-  assertAppDependenciesComplete
+  resolveService
 };

package/dist/entries/contracts/serviceTokens.js

@@ -8,11 +8,11 @@ var CORE_POLICY_GATE_TOKEN = "core.policyGate";
 var CORE_AUTH_TOKEN = "core.auth";
 var CORE_TOKEN_SERVICE_TOKEN = "core.tokenService";
 export {
-  CORE_TOKEN_SERVICE_TOKEN,
-  CORE_QUEUE_TOKEN,
-  CORE_POLICY_GATE_TOKEN,
-  CORE_EVENT_BUS_TOKEN,
-  CORE_CONFIG_TOKEN,
+  CORE_AUTH_TOKEN,
   CORE_CACHE_TOKEN,
-  CORE_AUTH_TOKEN
+  CORE_CONFIG_TOKEN,
+  CORE_EVENT_BUS_TOKEN,
+  CORE_POLICY_GATE_TOKEN,
+  CORE_QUEUE_TOKEN,
+  CORE_TOKEN_SERVICE_TOKEN
 };

package/dist/entries/crypto/fieldEncryption.js

@@ -81,13 +81,13 @@ function emailLookupForQuery(email) {
   return hashLookupValue(normalized, key);
 }
 export {
-  revealEmail,
-  resolveEncryptionKey,
-  protectEmail,
-  normalizeEmail,
-  isFieldEncryptionEnabled,
-  hashLookupValue,
-  encryptField,
+  decryptField,
   emailLookupForQuery,
-  decryptField
+  encryptField,
+  hashLookupValue,
+  isFieldEncryptionEnabled,
+  normalizeEmail,
+  protectEmail,
+  resolveEncryptionKey,
+  revealEmail
 };

package/dist/entries/crypto/mfaSecret.js

@@ -100,6 +100,6 @@ function revealMfaSecret(stored) {
   return decryptField(stored, key);
 }
 export {
-  revealMfaSecret,
-  protectMfaSecret
+  protectMfaSecret,
+  revealMfaSecret
 };

package/dist/entries/database/errors.js

@@ -62,7 +62,7 @@ async function withDatabaseErrorHandling(operation) {
   }
 }
 export {
-  withDatabaseErrorHandling,
+  isPostgresError,
   mapDatabaseError,
-  isPostgresError
+  withDatabaseErrorHandling
 };

package/dist/entries/database/migrations.js

@@ -115,13 +115,13 @@ async function freshDatabase(db, migrations, options = {}) {
   await runFresh();
 }
 export {
-  withMigrationLock,
-  runPendingMigrations,
-  rollbackDatabase,
-  migrateDatabase,
-  loadMigrationsFromDirectory,
-  getMigrationStatus,
-  getAppliedMigrations,
+  ensureMigrationsTable,
   freshDatabase,
-  ensureMigrationsTable
+  getAppliedMigrations,
+  getMigrationStatus,
+  loadMigrationsFromDirectory,
+  migrateDatabase,
+  rollbackDatabase,
+  runPendingMigrations,
+  withMigrationLock
 };

package/dist/entries/database/model.js

@@ -876,10 +876,10 @@ function registerModelRepository(model, repository) {
   return model;
 }
 export {
-  registerModelRepository,
-  hydrateValue,
-  filterMassAssignable,
-  dehydrateValue,
+  Model,
   applyCasts,
-  Model
+  dehydrateValue,
+  filterMassAssignable,
+  hydrateValue,
+  registerModelRepository
 };

package/dist/entries/database/query.js

@@ -413,24 +413,24 @@ function buildDeleteByIdQuery(table, id) {
   };
 }
 export {
-  resolveSoftDeleteColumn,
-  resolveQualifiedColumn,
-  quoteIdentifier,
-  qualifyColumn,
-  parseQualifiedColumn,
-  buildWhereClause,
-  buildUpdateQuery,
-  buildSoftDeleteByIdQuery,
-  buildSelectQuery,
-  buildRestoreByIdQuery,
-  buildQueryWhereClause,
-  buildProjectionQuery,
-  buildOrderByClause,
-  buildJoinClause,
-  buildInsertQuery,
-  buildGroupedCountQuery,
-  buildDeleteByIdQuery,
-  buildCountQuery,
+  assertSafeProjectionExpression,
   buildAdvancedWhereClause,
-  assertSafeProjectionExpression
+  buildCountQuery,
+  buildDeleteByIdQuery,
+  buildGroupedCountQuery,
+  buildInsertQuery,
+  buildJoinClause,
+  buildOrderByClause,
+  buildProjectionQuery,
+  buildQueryWhereClause,
+  buildRestoreByIdQuery,
+  buildSelectQuery,
+  buildSoftDeleteByIdQuery,
+  buildUpdateQuery,
+  buildWhereClause,
+  parseQualifiedColumn,
+  qualifyColumn,
+  quoteIdentifier,
+  resolveQualifiedColumn,
+  resolveSoftDeleteColumn
 };

package/dist/entries/database/relationships.js

@@ -145,18 +145,18 @@ function indexMorphToRelation(children, parentsByType, relation) {
   return result;
 }
 export {
-  morphTo,
-  morphOne,
-  morphMany,
-  indexMorphToRelation,
-  indexMorphOneRelation,
-  indexMorphManyRelation,
-  indexHasOneRelation,
-  indexHasManyRelation,
-  indexBelongsToRelation,
-  indexBelongsToManyRelation,
-  hasOne,
-  hasMany,
+  belongsTo,
   belongsToMany,
-  belongsTo
+  hasMany,
+  hasOne,
+  indexBelongsToManyRelation,
+  indexBelongsToRelation,
+  indexHasManyRelation,
+  indexHasOneRelation,
+  indexMorphManyRelation,
+  indexMorphOneRelation,
+  indexMorphToRelation,
+  morphMany,
+  morphOne,
+  morphTo
 };

package/dist/entries/database/schema.js

@@ -1037,18 +1037,18 @@ function createSchemaBuilder(db, driver) {
   });
 }
 export {
-  resolveDatabaseDriver,
-  inferReferencedTable,
-  grammarForDriver,
-  createSchemaBuilder,
-  compileBlueprint,
-  UnsupportedSchemaFeatureError,
-  SqliteGrammar,
-  SchemaBuilder,
-  Schema,
-  PostgresGrammar,
-  MySqlGrammar,
-  ForeignIdColumnDefinition,
+  Blueprint,
   ColumnDefinition,
-  Blueprint
+  ForeignIdColumnDefinition,
+  MySqlGrammar,
+  PostgresGrammar,
+  Schema,
+  SchemaBuilder,
+  SqliteGrammar,
+  UnsupportedSchemaFeatureError,
+  compileBlueprint,
+  createSchemaBuilder,
+  grammarForDriver,
+  inferReferencedTable,
+  resolveDatabaseDriver
 };

package/dist/entries/database/seeders.js

@@ -25,6 +25,6 @@ async function runSeedersFromDirectory(directory, db, options) {
   return seeders.length;
 }
 export {
-  runSeedersFromDirectory,
-  loadSeedersFromDirectory
+  loadSeedersFromDirectory,
+  runSeedersFromDirectory
 };

package/dist/entries/facades.js

@@ -366,13 +366,13 @@ function storageFacade() {
   return storage();
 }
 export {
-  storageFacade as storage,
-  queue,
-  policyGate,
-  mail,
-  log,
-  events,
-  config,
+  auth,
   cache,
-  auth
+  config,
+  events,
+  log,
+  mail,
+  policyGate,
+  queue,
+  storageFacade as storage
 };

package/dist/entries/http/authMiddleware.js

@@ -20,6 +20,6 @@ function createAuthMiddleware(auth) {
   };
 }
 export {
-  createAuthMiddleware,
-  authContext
+  authContext,
+  createAuthMiddleware
 };

package/dist/entries/http/bodySizeLimitMiddleware.js

@@ -27,6 +27,6 @@ function createBodySizeLimitMiddleware(maxBytes = resolveMaxBodyBytes()) {
   };
 }
 export {
-  resolveMaxBodyBytes,
-  createBodySizeLimitMiddleware
+  createBodySizeLimitMiddleware,
+  resolveMaxBodyBytes
 };

package/dist/entries/http/clientIp.js

@@ -0,0 +1,19 @@
+// @bun
+// ../../src/core/http/clientIp.ts
+function trustForwardedFor(env = process.env) {
+  return (env.TRUST_FORWARDED_FOR ?? "false") === "true";
+}
+function readClientIp(request, env = process.env) {
+  if (!trustForwardedFor(env)) {
+    return;
+  }
+  const forwarded = request.headers.get("x-forwarded-for")?.split(",")[0]?.trim();
+  if (forwarded) {
+    return forwarded;
+  }
+  return request.headers.get("x-real-ip")?.trim() || undefined;
+}
+export {
+  readClientIp,
+  trustForwardedFor
+};

package/dist/entries/http/cookies.js

@@ -27,6 +27,6 @@ function readBunRequestCookie(request, name) {
   return request.cookies.get(name) ?? readRequestCookie(request, name);
 }
 export {
-  readRequestCookie,
-  readBunRequestCookie
+  readBunRequestCookie,
+  readRequestCookie
 };

package/dist/entries/http/csrfMiddleware.js

@@ -78,9 +78,10 @@ function tokensMatch(left, right) {
 }
 function createCsrfTokenCookie() {
   const token = Bun.CSRF.generate(resolveCsrfSecret(), { expiresIn: CSRF_TTL_MS });
+  const secure = process.env.APP_ENV === "production" ? "; Secure" : "";
   return {
     token,
-    cookie: `${CSRF_COOKIE}=${encodeURIComponent(token)}; Path=/; SameSite=Lax; Max-Age=${Math.floor(CSRF_TTL_MS / 1000)}`
+    cookie: `${CSRF_COOKIE}=${encodeURIComponent(token)}; Path=/; SameSite=Lax; Max-Age=${Math.floor(CSRF_TTL_MS / 1000)}${secure}`
   };
 }
 function resolveCsrfToken(request) {

package/dist/entries/http/csrfProtection.js

@@ -18,6 +18,6 @@ function createCsrfProtection(secret, options = {}) {
   };
 }
 export {
-  createCsrfProtection,
-  DEFAULT_CSRF_TTL_MS
+  DEFAULT_CSRF_TTL_MS,
+  createCsrfProtection
 };

package/dist/entries/http/csrfToken.js

@@ -75,9 +75,10 @@ function tokensMatch(left, right) {
 }
 function createCsrfTokenCookie() {
   const token = Bun.CSRF.generate(resolveCsrfSecret(), { expiresIn: CSRF_TTL_MS });
+  const secure = process.env.APP_ENV === "production" ? "; Secure" : "";
   return {
     token,
-    cookie: `${CSRF_COOKIE}=${encodeURIComponent(token)}; Path=/; SameSite=Lax; Max-Age=${Math.floor(CSRF_TTL_MS / 1000)}`
+    cookie: `${CSRF_COOKIE}=${encodeURIComponent(token)}; Path=/; SameSite=Lax; Max-Age=${Math.floor(CSRF_TTL_MS / 1000)}${secure}`
   };
 }
 function resolveCsrfToken(request) {
@@ -134,11 +135,11 @@ function resolveCsrfTokenForRequest(request) {
   return resolveCsrfToken(request).token;
 }
 export {
-  verifyCsrfToken,
-  resolveCsrfTokenForRequest,
-  resolveCsrfToken,
-  readSubmittedCsrfTokenFromBody,
-  readSubmittedCsrfToken,
+  CSRF_COOKIE,
   createCsrfTokenCookie,
-  CSRF_COOKIE
+  readSubmittedCsrfToken,
+  readSubmittedCsrfTokenFromBody,
+  resolveCsrfToken,
+  resolveCsrfTokenForRequest,
+  verifyCsrfToken
 };

package/dist/entries/http/etag.js

@@ -97,13 +97,13 @@ function applyConditionalGet(request, response, etag) {
   });
 }
 export {
-  notModifiedResponse,
-  isEtagEnabled,
-  ifNoneMatchSatisfied,
-  ifMatchSatisfied,
-  etagValuesMatch,
-  etagFromResource,
-  computeEtagFromJson,
+  applyConditionalGet,
   assertIfMatch,
-  applyConditionalGet
+  computeEtagFromJson,
+  etagFromResource,
+  etagValuesMatch,
+  ifMatchSatisfied,
+  ifNoneMatchSatisfied,
+  isEtagEnabled,
+  notModifiedResponse
 };

package/dist/entries/http/flashSession.js

@@ -98,9 +98,9 @@ function withFlashClear(response) {
   });
 }
 export {
-  withFlashClear,
-  pullFlash,
-  flashResponse,
+  clearFlashCookie,
   createFlashCookie,
-  clearFlashCookie
+  flashResponse,
+  pullFlash,
+  withFlashClear
 };

package/dist/entries/http/formRequest.js

@@ -150,6 +150,6 @@ class QueryFormRequest {
   }
 }
 export {
-  QueryFormRequest,
-  FormRequest
+  FormRequest,
+  QueryFormRequest
 };

package/dist/entries/http/loginThrottleMiddleware.js

@@ -1,8 +1,25 @@
 // @bun
 // ../../src/core/http/loginThrottleMiddleware.ts
 var {RedisClient } = globalThis.Bun;
+
+// ../../src/core/http/clientIp.ts
+function trustForwardedFor(env = process.env) {
+  return (env.TRUST_FORWARDED_FOR ?? "false") === "true";
+}
+function readClientIp(request, env = process.env) {
+  if (!trustForwardedFor(env)) {
+    return;
+  }
+  const forwarded = request.headers.get("x-forwarded-for")?.split(",")[0]?.trim();
+  if (forwarded) {
+    return forwarded;
+  }
+  return request.headers.get("x-real-ip")?.trim() || undefined;
+}
+
+// ../../src/core/http/loginThrottleMiddleware.ts
 function resolveLoginIdentity(request) {
-  return request.headers.get("x-forwarded-for")?.split(",")[0]?.trim() ?? "unknown";
+  return readClientIp(request) ?? "unknown";
 }
 async function resolveLoginEmail(request) {
   const contentType = request.headers.get("content-type")?.toLowerCase() ?? "";
@@ -41,6 +58,6 @@ function createLoginThrottleMiddleware(options) {
   };
 }
 export {
-  resolveLoginIdentity,
-  createLoginThrottleMiddleware
+  createLoginThrottleMiddleware,
+  resolveLoginIdentity
 };

package/dist/entries/http/memoryThrottleMiddleware.js

@@ -1,11 +1,26 @@
 // @bun
+// ../../src/core/http/clientIp.ts
+function trustForwardedFor(env = process.env) {
+  return (env.TRUST_FORWARDED_FOR ?? "false") === "true";
+}
+function readClientIp(request, env = process.env) {
+  if (!trustForwardedFor(env)) {
+    return;
+  }
+  const forwarded = request.headers.get("x-forwarded-for")?.split(",")[0]?.trim();
+  if (forwarded) {
+    return forwarded;
+  }
+  return request.headers.get("x-real-ip")?.trim() || undefined;
+}
+
 // ../../src/core/http/memoryThrottleMiddleware.ts
 var buckets = new Map;
 function createMemoryThrottleMiddleware(options) {
   const prefix = options.keyPrefix ?? "workhub:memory-throttle:";
   return async (request, next) => {
     const path = new URL(request.url).pathname;
-    const identity = request.headers.get("x-forwarded-for")?.split(",")[0]?.trim() ?? request.headers.get("authorization")?.slice(0, 32) ?? "unknown";
+    const identity = readClientIp(request) ?? request.headers.get("authorization")?.slice(0, 32) ?? "unknown";
     const key = `${prefix}${identity}:${path}`;
     const now = Date.now();
     const existing = buckets.get(key);

package/dist/entries/http/metricsMiddleware.js

@@ -86,6 +86,6 @@ function createMetricsMiddleware() {
   };
 }
 export {
-  normalizeMetricPath,
-  createMetricsMiddleware
+  createMetricsMiddleware,
+  normalizeMetricPath
 };

package/dist/entries/http/pagination.js

@@ -174,9 +174,9 @@ function paginatedResponse(data, meta, init = {}) {
   return Response.json({ data, meta }, init);
 }
 export {
-  parsePaginationQuery,
-  paginatedResponse,
-  buildPaginationMeta,
+  DEFAULT_PER_PAGE,
   MAX_PER_PAGE,
-  DEFAULT_PER_PAGE
+  buildPaginationMeta,
+  paginatedResponse,
+  parsePaginationQuery
 };

package/dist/entries/http/parseFormBody.js

@@ -18,6 +18,6 @@ function formDataToRecord(formData) {
   return values;
 }
 export {
-  parseFormBody,
-  formDataToRecord
+  formDataToRecord,
+  parseFormBody
 };

package/dist/entries/http/parseMultipartUpload.js

@@ -76,6 +76,6 @@ async function parseMultipartUpload(request, fieldName = "file") {
   };
 }
 export {
-  sanitizeUploadFileName,
-  parseMultipartUpload
+  parseMultipartUpload,
+  sanitizeUploadFileName
 };

package/dist/entries/http/resources.js

@@ -13,7 +13,7 @@ function toPaginatedResourceCollection(items, meta, transformer) {
   };
 }
 export {
-  toResourceCollection,
+  serializeDate,
   toPaginatedResourceCollection,
-  serializeDate
+  toResourceCollection
 };