@getstrata/core 0.5.67 → 0.5.69

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @getstrata/core changelog
 
+## 0.5.69
+
+- `MembershipLookup.updateMemberRole(organizationId, userId, role)` is required. The uninitialized lookup throws until `configureMembershipLookup()` is called. `MembershipService.updateMemberRole` delegates to the adapter.
+
+## 0.5.68
+
+- Published core no longer imports WorkHub `src/config`. Frontend mode, queue retries, CORS, and upload limits read env (`FRONTEND_MODE`, `QUEUE_*`, `CORS_ALLOWED_ORIGINS`, `MAX_UPLOAD_BYTES`).
+- `@getstrata/core/runtime/frontendMode` exports `readFrontendMode` / `isViewsEnabled` / `isSpaEnabled`.
+
 ## 0.5.67
 
 - OpenAPI title, server URLs, and generated SDK class name come from `APP_NAME` / `APP_URL` / `API_PREFIX` / `APP_SDK_CLASS` instead of importing WorkHub `src/config/app`.

package/README.md

@@ -82,7 +82,7 @@ import type { Migration } from "@getstrata/core/database/migrations/types";
 Package name: **`@getstrata/core`** (npm org [`@getstrata`](https://www.npmjs.com/org/getstrata)).
 
 1. Add `NPM_TOKEN` to GitHub repository secrets.
-2. Tag a release: `git tag v0.5.69 && git push origin v0.5.69`
+2. Tag a release: `git tag v0.5.70 && git push origin v0.5.70`
 3. [Release workflow](../../.github/workflows/release.yml) builds and runs `npm publish --access public`.
 
 Previously published as `@eyk-workhub/framework@0.1.0`, deprecated in favor of this package.

package/dist/core/auth/membershipService.d.ts

@@ -16,6 +16,7 @@ declare class MembershipService {
         role?: OrganizationMemberRole;
     }): Promise<import("../contracts/membership").MembershipRecord>;
     removeMember(organizationId: number, userId: number): Promise<unknown>;
+    updateMemberRole(organizationId: number, userId: number, role: OrganizationMemberRole): Promise<import("../contracts/membership").MembershipRecord>;
 }
 export type { MembershipRepositoryLike };
 export default MembershipService;

package/dist/core/contracts/membership.d.ts

@@ -16,5 +16,6 @@ interface MembershipLookup {
         role?: OrganizationMemberRole;
     }): Promise<MembershipRecord>;
     removeMember(organizationId: number, userId: number): Promise<unknown>;
+    updateMemberRole(organizationId: number, userId: number, role: OrganizationMemberRole): Promise<MembershipRecord>;
 }
 export type { MembershipLookup, MembershipRecord, OrganizationMemberRole };

package/dist/core/http/corsMiddleware.d.ts

@@ -1,3 +1,10 @@
 import type { Middleware } from "./middleware";
+interface CorsConfig {
+    allowedOrigins: string[];
+    allowedMethods: string[];
+    allowedHeaders: string[];
+    maxAgeSeconds: number;
+}
+declare function resolveCorsConfig(): CorsConfig;
 declare function createCorsMiddleware(): Middleware;
-export { createCorsMiddleware };
+export { createCorsMiddleware, resolveCorsConfig };

package/dist/{config/queue.d.ts → core/queue/queueConfig.d.ts}

@@ -3,6 +3,7 @@ interface QueueConfig {
     maxAttempts: number;
     backoffMs: number;
 }
+declare function resolveQueueConfig(): QueueConfig;
 declare const queueConfig: QueueConfig;
 export type { QueueConfig };
-export { queueConfig };
+export { queueConfig, resolveQueueConfig };

package/dist/entries/auth/membershipMiddleware.js

@@ -69,6 +69,9 @@ var uninitializedMembershipLookup = {
   },
   async removeMember() {
     throw new Error("configureMembershipLookup() must be called before mutating memberships.");
+  },
+  async updateMemberRole() {
+    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
   }
 };
 var membershipRepository = uninitializedMembershipLookup;

package/dist/entries/auth/membershipScope.js

@@ -73,6 +73,9 @@ var uninitializedMembershipLookup = {
   },
   async removeMember() {
     throw new Error("configureMembershipLookup() must be called before mutating memberships.");
+  },
+  async updateMemberRole() {
+    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
   }
 };
 var membershipRepository = uninitializedMembershipLookup;

package/dist/entries/auth/membershipService.js

@@ -72,6 +72,9 @@ var uninitializedMembershipLookup = {
   },
   async removeMember() {
     throw new Error("configureMembershipLookup() must be called before mutating memberships.");
+  },
+  async updateMemberRole() {
+    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
   }
 };
 var membershipRepository = uninitializedMembershipLookup;
@@ -157,6 +160,9 @@ class MembershipService {
   removeMember(organizationId, userId) {
     return this.members.removeMember(organizationId, userId);
   }
+  updateMemberRole(organizationId, userId, role) {
+    return this.members.updateMemberRole(organizationId, userId, role);
+  }
 }
 var membershipService_default = MembershipService;
 export {

package/dist/entries/http/corsMiddleware.js

@@ -1,22 +1,22 @@
 // @bun
-// ../../src/config/cors.ts
-var corsConfig = {
-  allowedOrigins: (process.env.CORS_ALLOWED_ORIGINS ?? "*").split(",").map((origin) => origin.trim()).filter(Boolean),
-  allowedMethods: ["GET", "POST", "PATCH", "PUT", "DELETE", "OPTIONS"],
-  allowedHeaders: [
-    "Authorization",
-    "Content-Type",
-    "X-Request-Id",
-    "X-Tenant-Id",
-    "X-Authenticated-User-Id",
-    "X-Authenticated-User-Role",
-    "If-Match",
-    "If-None-Match"
-  ],
-  maxAgeSeconds: 86400
-};
-
 // ../../src/core/http/corsMiddleware.ts
+function resolveCorsConfig() {
+  return {
+    allowedOrigins: (process.env.CORS_ALLOWED_ORIGINS ?? "*").split(",").map((origin) => origin.trim()).filter(Boolean),
+    allowedMethods: ["GET", "POST", "PATCH", "PUT", "DELETE", "OPTIONS"],
+    allowedHeaders: [
+      "Authorization",
+      "Content-Type",
+      "X-Request-Id",
+      "X-Tenant-Id",
+      "X-Authenticated-User-Id",
+      "X-Authenticated-User-Role",
+      "If-Match",
+      "If-None-Match"
+    ],
+    maxAgeSeconds: 86400
+  };
+}
 function createCorsMiddleware() {
   return async (request, next) => {
     if (request.method === "OPTIONS") {
@@ -40,6 +40,7 @@ function createCorsMiddleware() {
 function buildCorsHeaders(request) {
   const headers = new Headers;
   const origin = request.headers.get("origin");
+  const corsConfig = resolveCorsConfig();
   const allowedOrigins = corsConfig.allowedOrigins;
   const allowOrigin = allowedOrigins.includes("*") || origin && allowedOrigins.includes(origin) ? origin ?? "*" : allowedOrigins[0] ?? "*";
   headers.set("Access-Control-Allow-Origin", allowOrigin);
@@ -50,5 +51,6 @@ function buildCorsHeaders(request) {
   return headers;
 }
 export {
-  createCorsMiddleware
+  createCorsMiddleware,
+  resolveCorsConfig
 };

package/dist/entries/http/parseMultipartUpload.js

@@ -2,7 +2,7 @@
 // ../../src/core/http/parseMultipartUpload.ts
 import { BadRequestError, PayloadTooLargeError } from "@getstrata/core/errors/http";
 
-// ../../src/config/uploads.ts
+// ../../src/core/http/uploads.ts
 var DEFAULT_MAX_UPLOAD_BYTES = 5 * 1024 * 1024;
 var ALLOWED_UPLOAD_MIME_TYPES = new Set([
   "application/pdf",

package/dist/entries/http/requireAbilityMiddleware.js

@@ -3,7 +3,7 @@
 import { currentAuthUser } from "@getstrata/core/auth/authContext";
 import { ForbiddenError } from "@getstrata/core/errors/http";
 
-// ../../src/config/frontend.ts
+// ../../src/core/runtime/frontendMode.ts
 function readFrontendMode() {
   const mode = (process.env.FRONTEND_MODE ?? "api").trim();
   if (mode === "server-htmx") {
@@ -17,6 +17,9 @@ function readFrontendMode() {
 function isViewsEnabled() {
   return readFrontendMode() === "server-htmx";
 }
+function isSpaEnabled() {
+  return readFrontendMode() === "spa-react";
+}
 
 // ../../src/core/http/contentNegotiation.ts
 function requestPrefersJson(request) {

package/dist/entries/http/response.js

@@ -68,7 +68,7 @@ async function withDatabaseErrorHandling(operation) {
 // ../../src/core/http/webErrorResponse.ts
 import { HttpError as HttpError2, UnauthorizedError, ValidationError } from "@getstrata/core/errors/http";
 
-// ../../src/config/frontend.ts
+// ../../src/core/runtime/frontendMode.ts
 function readFrontendMode() {
   const mode = (process.env.FRONTEND_MODE ?? "api").trim();
   if (mode === "server-htmx") {
@@ -82,6 +82,9 @@ function readFrontendMode() {
 function isViewsEnabled() {
   return readFrontendMode() === "server-htmx";
 }
+function isSpaEnabled() {
+  return readFrontendMode() === "spa-react";
+}
 
 // ../../src/core/view/webErrorView.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";

package/dist/entries/http/webErrorResponse.js

@@ -2,21 +2,6 @@
 // ../../src/core/http/webErrorResponse.ts
 import { HttpError as HttpError2, UnauthorizedError, ValidationError } from "@getstrata/core/errors/http";
 
-// ../../src/config/frontend.ts
-function readFrontendMode() {
-  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
-  if (mode === "server-htmx") {
-    return "server-htmx";
-  }
-  if (mode === "spa-react") {
-    return "spa-react";
-  }
-  return "api";
-}
-function isViewsEnabled() {
-  return readFrontendMode() === "server-htmx";
-}
-
 // ../../src/core/database/errors.ts
 import {
   BadRequestError,
@@ -80,6 +65,24 @@ async function withDatabaseErrorHandling(operation) {
   }
 }
 
+// ../../src/core/runtime/frontendMode.ts
+function readFrontendMode() {
+  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
+  if (mode === "server-htmx") {
+    return "server-htmx";
+  }
+  if (mode === "spa-react") {
+    return "spa-react";
+  }
+  return "api";
+}
+function isViewsEnabled() {
+  return readFrontendMode() === "server-htmx";
+}
+function isSpaEnabled() {
+  return readFrontendMode() === "spa-react";
+}
+
 // ../../src/core/view/webErrorView.ts
 import { currentRequestMeta } from "@getstrata/core/http/requestMetaContext";
 

package/dist/entries/queue/createAppQueue.js

@@ -100,25 +100,27 @@ function readSharedJobRegistry() {
 }
 var jobRegistry = readSharedJobRegistry();
 
-// ../../src/bootstrap/config.ts
-import {
-  CORE_ABILITY_CHECKER_TOKEN,
-  CORE_AUTH_TOKEN,
-  CORE_AUTH_USER_DIRECTORY_TOKEN,
-  CORE_CACHE_TOKEN,
-  CORE_CONFIG_TOKEN,
-  CORE_EVENT_BUS_TOKEN,
-  CORE_POLICY_GATE_TOKEN,
-  CORE_QUEUE_TOKEN,
-  CORE_TOKEN_SERVICE_TOKEN
-} from "@getstrata/core/contracts/serviceTokens";
-var DEFAULT_QUEUE_DRIVER = "sync";
-
-// ../../src/config/queue.ts
+// ../../src/core/queue/queueConfig.ts
+function resolveQueueConfig() {
+  const driver = process.env.QUEUE_DRIVER;
+  const maxAttempts = Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3");
+  const backoffMs = Number(process.env.QUEUE_BACKOFF_MS ?? "1000");
+  return {
+    driver: driver === "redis" || driver === "async" || driver === "sync" ? driver : "sync",
+    maxAttempts: Number.isFinite(maxAttempts) && maxAttempts > 0 ? maxAttempts : 3,
+    backoffMs: Number.isFinite(backoffMs) && backoffMs >= 0 ? backoffMs : 1000
+  };
+}
 var queueConfig = {
-  driver: process.env.QUEUE_DRIVER === "redis" || process.env.QUEUE_DRIVER === "async" || process.env.QUEUE_DRIVER === "sync" ? process.env.QUEUE_DRIVER : DEFAULT_QUEUE_DRIVER,
-  maxAttempts: Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3"),
-  backoffMs: Number(process.env.QUEUE_BACKOFF_MS ?? "1000")
+  get driver() {
+    return resolveQueueConfig().driver;
+  },
+  get maxAttempts() {
+    return resolveQueueConfig().maxAttempts;
+  },
+  get backoffMs() {
+    return resolveQueueConfig().backoffMs;
+  }
 };
 
 // ../../src/core/queue/jobRunner.ts

package/dist/entries/queue/jobRunner.js

@@ -1,25 +1,4 @@
 // @bun
-// ../../src/bootstrap/config.ts
-import {
-  CORE_ABILITY_CHECKER_TOKEN,
-  CORE_AUTH_TOKEN,
-  CORE_AUTH_USER_DIRECTORY_TOKEN,
-  CORE_CACHE_TOKEN,
-  CORE_CONFIG_TOKEN,
-  CORE_EVENT_BUS_TOKEN,
-  CORE_POLICY_GATE_TOKEN,
-  CORE_QUEUE_TOKEN,
-  CORE_TOKEN_SERVICE_TOKEN
-} from "@getstrata/core/contracts/serviceTokens";
-var DEFAULT_QUEUE_DRIVER = "sync";
-
-// ../../src/config/queue.ts
-var queueConfig = {
-  driver: process.env.QUEUE_DRIVER === "redis" || process.env.QUEUE_DRIVER === "async" || process.env.QUEUE_DRIVER === "sync" ? process.env.QUEUE_DRIVER : DEFAULT_QUEUE_DRIVER,
-  maxAttempts: Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3"),
-  backoffMs: Number(process.env.QUEUE_BACKOFF_MS ?? "1000")
-};
-
 // ../../src/core/queue/jobRegistry.ts
 class JobRegistry {
   factories = new Map;
@@ -57,6 +36,29 @@ function readSharedJobRegistry() {
 }
 var jobRegistry = readSharedJobRegistry();
 
+// ../../src/core/queue/queueConfig.ts
+function resolveQueueConfig() {
+  const driver = process.env.QUEUE_DRIVER;
+  const maxAttempts = Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3");
+  const backoffMs = Number(process.env.QUEUE_BACKOFF_MS ?? "1000");
+  return {
+    driver: driver === "redis" || driver === "async" || driver === "sync" ? driver : "sync",
+    maxAttempts: Number.isFinite(maxAttempts) && maxAttempts > 0 ? maxAttempts : 3,
+    backoffMs: Number.isFinite(backoffMs) && backoffMs >= 0 ? backoffMs : 1000
+  };
+}
+var queueConfig = {
+  get driver() {
+    return resolveQueueConfig().driver;
+  },
+  get maxAttempts() {
+    return resolveQueueConfig().maxAttempts;
+  },
+  get backoffMs() {
+    return resolveQueueConfig().backoffMs;
+  }
+};
+
 // ../../src/core/queue/jobRunner.ts
 async function runQueueJob(envelope, failedJobs) {
   const job = jobRegistry.create(envelope.name);

package/dist/entries/queue/publicQueue.js

@@ -100,25 +100,27 @@ function readSharedJobRegistry() {
 }
 var jobRegistry = readSharedJobRegistry();
 
-// ../../src/bootstrap/config.ts
-import {
-  CORE_ABILITY_CHECKER_TOKEN,
-  CORE_AUTH_TOKEN,
-  CORE_AUTH_USER_DIRECTORY_TOKEN,
-  CORE_CACHE_TOKEN,
-  CORE_CONFIG_TOKEN,
-  CORE_EVENT_BUS_TOKEN,
-  CORE_POLICY_GATE_TOKEN,
-  CORE_QUEUE_TOKEN,
-  CORE_TOKEN_SERVICE_TOKEN
-} from "@getstrata/core/contracts/serviceTokens";
-var DEFAULT_QUEUE_DRIVER = "sync";
-
-// ../../src/config/queue.ts
+// ../../src/core/queue/queueConfig.ts
+function resolveQueueConfig() {
+  const driver = process.env.QUEUE_DRIVER;
+  const maxAttempts = Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3");
+  const backoffMs = Number(process.env.QUEUE_BACKOFF_MS ?? "1000");
+  return {
+    driver: driver === "redis" || driver === "async" || driver === "sync" ? driver : "sync",
+    maxAttempts: Number.isFinite(maxAttempts) && maxAttempts > 0 ? maxAttempts : 3,
+    backoffMs: Number.isFinite(backoffMs) && backoffMs >= 0 ? backoffMs : 1000
+  };
+}
 var queueConfig = {
-  driver: process.env.QUEUE_DRIVER === "redis" || process.env.QUEUE_DRIVER === "async" || process.env.QUEUE_DRIVER === "sync" ? process.env.QUEUE_DRIVER : DEFAULT_QUEUE_DRIVER,
-  maxAttempts: Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3"),
-  backoffMs: Number(process.env.QUEUE_BACKOFF_MS ?? "1000")
+  get driver() {
+    return resolveQueueConfig().driver;
+  },
+  get maxAttempts() {
+    return resolveQueueConfig().maxAttempts;
+  },
+  get backoffMs() {
+    return resolveQueueConfig().backoffMs;
+  }
 };
 
 // ../../src/core/queue/jobRunner.ts

package/dist/entries/queue/queueMetrics.js

@@ -2,27 +2,6 @@
 // ../../src/core/queue/queueMetrics.ts
 var {RedisClient: RedisClient2 } = globalThis.Bun;
 
-// ../../src/bootstrap/config.ts
-import {
-  CORE_ABILITY_CHECKER_TOKEN,
-  CORE_AUTH_TOKEN,
-  CORE_AUTH_USER_DIRECTORY_TOKEN,
-  CORE_CACHE_TOKEN,
-  CORE_CONFIG_TOKEN,
-  CORE_EVENT_BUS_TOKEN,
-  CORE_POLICY_GATE_TOKEN,
-  CORE_QUEUE_TOKEN,
-  CORE_TOKEN_SERVICE_TOKEN
-} from "@getstrata/core/contracts/serviceTokens";
-var DEFAULT_QUEUE_DRIVER = "sync";
-
-// ../../src/config/queue.ts
-var queueConfig = {
-  driver: process.env.QUEUE_DRIVER === "redis" || process.env.QUEUE_DRIVER === "async" || process.env.QUEUE_DRIVER === "sync" ? process.env.QUEUE_DRIVER : DEFAULT_QUEUE_DRIVER,
-  maxAttempts: Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3"),
-  backoffMs: Number(process.env.QUEUE_BACKOFF_MS ?? "1000")
-};
-
 // ../../src/core/queue/failedJobRepository.ts
 import { BaseRepository } from "@getstrata/core/database/baseRepository";
 
@@ -124,6 +103,29 @@ function readSharedJobRegistry() {
 }
 var jobRegistry = readSharedJobRegistry();
 
+// ../../src/core/queue/queueConfig.ts
+function resolveQueueConfig() {
+  const driver = process.env.QUEUE_DRIVER;
+  const maxAttempts = Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3");
+  const backoffMs = Number(process.env.QUEUE_BACKOFF_MS ?? "1000");
+  return {
+    driver: driver === "redis" || driver === "async" || driver === "sync" ? driver : "sync",
+    maxAttempts: Number.isFinite(maxAttempts) && maxAttempts > 0 ? maxAttempts : 3,
+    backoffMs: Number.isFinite(backoffMs) && backoffMs >= 0 ? backoffMs : 1000
+  };
+}
+var queueConfig = {
+  get driver() {
+    return resolveQueueConfig().driver;
+  },
+  get maxAttempts() {
+    return resolveQueueConfig().maxAttempts;
+  },
+  get backoffMs() {
+    return resolveQueueConfig().backoffMs;
+  }
+};
+
 // ../../src/core/queue/jobRunner.ts
 async function runQueueJob(envelope, failedJobs) {
   const job = jobRegistry.create(envelope.name);

package/dist/entries/queue/redisQueue.js

@@ -87,25 +87,27 @@ function readSharedJobRegistry() {
 }
 var jobRegistry = readSharedJobRegistry();
 
-// ../../src/bootstrap/config.ts
-import {
-  CORE_ABILITY_CHECKER_TOKEN,
-  CORE_AUTH_TOKEN,
-  CORE_AUTH_USER_DIRECTORY_TOKEN,
-  CORE_CACHE_TOKEN,
-  CORE_CONFIG_TOKEN,
-  CORE_EVENT_BUS_TOKEN,
-  CORE_POLICY_GATE_TOKEN,
-  CORE_QUEUE_TOKEN,
-  CORE_TOKEN_SERVICE_TOKEN
-} from "@getstrata/core/contracts/serviceTokens";
-var DEFAULT_QUEUE_DRIVER = "sync";
-
-// ../../src/config/queue.ts
+// ../../src/core/queue/queueConfig.ts
+function resolveQueueConfig() {
+  const driver = process.env.QUEUE_DRIVER;
+  const maxAttempts = Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3");
+  const backoffMs = Number(process.env.QUEUE_BACKOFF_MS ?? "1000");
+  return {
+    driver: driver === "redis" || driver === "async" || driver === "sync" ? driver : "sync",
+    maxAttempts: Number.isFinite(maxAttempts) && maxAttempts > 0 ? maxAttempts : 3,
+    backoffMs: Number.isFinite(backoffMs) && backoffMs >= 0 ? backoffMs : 1000
+  };
+}
 var queueConfig = {
-  driver: process.env.QUEUE_DRIVER === "redis" || process.env.QUEUE_DRIVER === "async" || process.env.QUEUE_DRIVER === "sync" ? process.env.QUEUE_DRIVER : DEFAULT_QUEUE_DRIVER,
-  maxAttempts: Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3"),
-  backoffMs: Number(process.env.QUEUE_BACKOFF_MS ?? "1000")
+  get driver() {
+    return resolveQueueConfig().driver;
+  },
+  get maxAttempts() {
+    return resolveQueueConfig().maxAttempts;
+  },
+  get backoffMs() {
+    return resolveQueueConfig().backoffMs;
+  }
 };
 
 // ../../src/core/queue/jobRunner.ts

package/dist/entries/runtime/frontendMode.js

@@ -0,0 +1,23 @@
+// @bun
+// ../../src/core/runtime/frontendMode.ts
+function readFrontendMode() {
+  const mode = (process.env.FRONTEND_MODE ?? "api").trim();
+  if (mode === "server-htmx") {
+    return "server-htmx";
+  }
+  if (mode === "spa-react") {
+    return "spa-react";
+  }
+  return "api";
+}
+function isViewsEnabled() {
+  return readFrontendMode() === "server-htmx";
+}
+function isSpaEnabled() {
+  return readFrontendMode() === "spa-react";
+}
+export {
+  isSpaEnabled,
+  isViewsEnabled,
+  readFrontendMode
+};

package/dist/entries/security/publicReads.js

@@ -1,28 +1,7 @@
 // @bun
-// ../../src/config/features.ts
-function readFeatureFlags() {
-  return {
-    webhooks: (process.env.FEATURE_WEBHOOKS ?? "true") !== "false",
-    fullTextSearch: (process.env.FEATURE_SEARCH ?? "true") !== "false",
-    auditLog: (process.env.FEATURE_AUDIT_LOG ?? "true") !== "false",
-    oauthLogin: (process.env.FEATURE_OAUTH ?? "true") !== "false",
-    samlLogin: (process.env.FEATURE_SAML ?? "false") === "true",
-    scim: (process.env.FEATURE_SCIM ?? "true") !== "false",
-    billing: (process.env.FEATURE_BILLING ?? "true") !== "false",
-    siemExport: (process.env.FEATURE_SIEM_EXPORT ?? "true") !== "false",
-    publicReads: (process.env.FEATURE_PUBLIC_READS ?? "true") !== "false",
-    emailVerification: (process.env.FEATURE_EMAIL_VERIFICATION ?? "false") === "true",
-    mfa: (process.env.FEATURE_MFA ?? "false") === "true"
-  };
-}
-var featureFlags = readFeatureFlags();
-function isFeatureEnabled(feature) {
-  return readFeatureFlags()[feature];
-}
-
 // ../../src/core/security/publicReads.ts
 function isPublicReadsEnabled() {
-  return isFeatureEnabled("publicReads");
+  return (process.env.FEATURE_PUBLIC_READS ?? "true") !== "false";
 }
 function guestCanViewResource() {
   return isPublicReadsEnabled();

package/dist/index.js

@@ -364,6 +364,9 @@ var uninitializedMembershipLookup = {
   },
   async removeMember() {
     throw new Error("configureMembershipLookup() must be called before mutating memberships.");
+  },
+  async updateMemberRole() {
+    throw new Error("configureMembershipLookup() must be called before mutating memberships.");
   }
 };
 var membershipRepository = uninitializedMembershipLookup;
@@ -688,6 +691,9 @@ class MembershipService {
   removeMember(organizationId, userId) {
     return this.members.removeMember(organizationId, userId);
   }
+  updateMemberRole(organizationId, userId, role) {
+    return this.members.updateMemberRole(organizationId, userId, role);
+  }
 }
 var membershipService_default = MembershipService;
 // ../../src/core/auth/policy.ts
@@ -4485,24 +4491,24 @@ function readRequestCookie(request, name) {
 function readBunRequestCookie(request, name) {
   return request.cookies.get(name) ?? readRequestCookie(request, name);
 }
-// ../../src/config/cors.ts
-var corsConfig = {
-  allowedOrigins: (process.env.CORS_ALLOWED_ORIGINS ?? "*").split(",").map((origin) => origin.trim()).filter(Boolean),
-  allowedMethods: ["GET", "POST", "PATCH", "PUT", "DELETE", "OPTIONS"],
-  allowedHeaders: [
-    "Authorization",
-    "Content-Type",
-    "X-Request-Id",
-    "X-Tenant-Id",
-    "X-Authenticated-User-Id",
-    "X-Authenticated-User-Role",
-    "If-Match",
-    "If-None-Match"
-  ],
-  maxAgeSeconds: 86400
-};
-
 // ../../src/core/http/corsMiddleware.ts
+function resolveCorsConfig() {
+  return {
+    allowedOrigins: (process.env.CORS_ALLOWED_ORIGINS ?? "*").split(",").map((origin) => origin.trim()).filter(Boolean),
+    allowedMethods: ["GET", "POST", "PATCH", "PUT", "DELETE", "OPTIONS"],
+    allowedHeaders: [
+      "Authorization",
+      "Content-Type",
+      "X-Request-Id",
+      "X-Tenant-Id",
+      "X-Authenticated-User-Id",
+      "X-Authenticated-User-Role",
+      "If-Match",
+      "If-None-Match"
+    ],
+    maxAgeSeconds: 86400
+  };
+}
 function createCorsMiddleware() {
   return async (request, next) => {
     if (request.method === "OPTIONS") {
@@ -4526,6 +4532,7 @@ function createCorsMiddleware() {
 function buildCorsHeaders(request) {
   const headers = new Headers;
   const origin = request.headers.get("origin");
+  const corsConfig = resolveCorsConfig();
   const allowedOrigins = corsConfig.allowedOrigins;
   const allowOrigin = allowedOrigins.includes("*") || origin && allowedOrigins.includes(origin) ? origin ?? "*" : allowedOrigins[0] ?? "*";
   headers.set("Access-Control-Allow-Origin", allowOrigin);
@@ -4950,7 +4957,7 @@ function parsePaginationQuery(request) {
 function paginatedResponse(data, meta, init = {}) {
   return Response.json({ data, meta }, init);
 }
-// ../../src/config/uploads.ts
+// ../../src/core/http/uploads.ts
 var DEFAULT_MAX_UPLOAD_BYTES = 5 * 1024 * 1024;
 var ALLOWED_UPLOAD_MIME_TYPES = new Set([
   "application/pdf",
@@ -5046,7 +5053,7 @@ function toPaginatedResourceCollection(items, meta, transformer) {
     meta
   };
 }
-// ../../src/config/frontend.ts
+// ../../src/core/runtime/frontendMode.ts
 function readFrontendMode() {
   const mode = (process.env.FRONTEND_MODE ?? "api").trim();
   if (mode === "server-htmx") {
@@ -6243,14 +6250,28 @@ function readSharedJobRegistry() {
   return registry;
 }
 var jobRegistry = readSharedJobRegistry();
-// ../../src/bootstrap/config.ts
-var DEFAULT_QUEUE_DRIVER = "sync";
 
-// ../../src/config/queue.ts
+// ../../src/core/queue/queueConfig.ts
+function resolveQueueConfig() {
+  const driver = process.env.QUEUE_DRIVER;
+  const maxAttempts = Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3");
+  const backoffMs = Number(process.env.QUEUE_BACKOFF_MS ?? "1000");
+  return {
+    driver: driver === "redis" || driver === "async" || driver === "sync" ? driver : "sync",
+    maxAttempts: Number.isFinite(maxAttempts) && maxAttempts > 0 ? maxAttempts : 3,
+    backoffMs: Number.isFinite(backoffMs) && backoffMs >= 0 ? backoffMs : 1000
+  };
+}
 var queueConfig = {
-  driver: process.env.QUEUE_DRIVER === "redis" || process.env.QUEUE_DRIVER === "async" || process.env.QUEUE_DRIVER === "sync" ? process.env.QUEUE_DRIVER : DEFAULT_QUEUE_DRIVER,
-  maxAttempts: Number(process.env.QUEUE_MAX_ATTEMPTS ?? "3"),
-  backoffMs: Number(process.env.QUEUE_BACKOFF_MS ?? "1000")
+  get driver() {
+    return resolveQueueConfig().driver;
+  },
+  get maxAttempts() {
+    return resolveQueueConfig().maxAttempts;
+  },
+  get backoffMs() {
+    return resolveQueueConfig().backoffMs;
+  }
 };
 
 // ../../src/core/queue/jobRunner.ts
@@ -6549,30 +6570,9 @@ async function runDueScheduledTasks(schedule = appSchedule, now = new Date) {
   }
   return due.length;
 }
-// ../../src/config/features.ts
-function readFeatureFlags() {
-  return {
-    webhooks: (process.env.FEATURE_WEBHOOKS ?? "true") !== "false",
-    fullTextSearch: (process.env.FEATURE_SEARCH ?? "true") !== "false",
-    auditLog: (process.env.FEATURE_AUDIT_LOG ?? "true") !== "false",
-    oauthLogin: (process.env.FEATURE_OAUTH ?? "true") !== "false",
-    samlLogin: (process.env.FEATURE_SAML ?? "false") === "true",
-    scim: (process.env.FEATURE_SCIM ?? "true") !== "false",
-    billing: (process.env.FEATURE_BILLING ?? "true") !== "false",
-    siemExport: (process.env.FEATURE_SIEM_EXPORT ?? "true") !== "false",
-    publicReads: (process.env.FEATURE_PUBLIC_READS ?? "true") !== "false",
-    emailVerification: (process.env.FEATURE_EMAIL_VERIFICATION ?? "false") === "true",
-    mfa: (process.env.FEATURE_MFA ?? "false") === "true"
-  };
-}
-var featureFlags = readFeatureFlags();
-function isFeatureEnabled(feature) {
-  return readFeatureFlags()[feature];
-}
-
 // ../../src/core/security/publicReads.ts
 function isPublicReadsEnabled() {
-  return isFeatureEnabled("publicReads");
+  return (process.env.FEATURE_PUBLIC_READS ?? "true") !== "false";
 }
 function guestCanViewResource() {
   return isPublicReadsEnabled();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/core",
-  "version": "0.5.67",
+  "version": "0.5.69",
   "description": "Strata — Laravel-inspired Bun framework public API",
   "type": "module",
   "license": "MIT",
@@ -670,6 +670,11 @@
       "import": "./dist/entries/runtime/appKeyPrefix.js",
       "default": "./dist/entries/runtime/appKeyPrefix.js"
     },
+    "./runtime/frontendMode": {
+      "types": "./dist/core/runtime/frontendMode.d.ts",
+      "import": "./dist/entries/runtime/frontendMode.js",
+      "default": "./dist/entries/runtime/frontendMode.js"
+    },
     "./runtime/applicationRegistry": {
       "types": "./dist/core/runtime/applicationRegistry.d.ts",
       "import": "./dist/entries/runtime/applicationRegistry.js",
@@ -808,7 +813,7 @@
     "build:bundle": "bun build index.ts --outdir dist --target bun --external bun --external eta",
     "build:types": "tsc -p tsconfig.types.json",
     "prepublishOnly": "bun run build && bun ../../scripts/prepare-core-package-publish.ts",
-    "build:subpaths": "bun build entries/auth/accessControl.ts entries/auth/abilityChecker.ts entries/auth/membershipMiddleware.ts entries/auth/membershipScope.ts entries/auth/membershipService.ts entries/auth/oauth/oidcProvider.ts entries/auth/oauth/providers.ts entries/auth/oauth/samlProvider.ts entries/auth/oauth/types.ts entries/auth/password.ts entries/auth/policy.ts entries/auth/scimAuthMiddleware.ts entries/auth/sessionCookie.ts entries/auth/sessionGuard.ts entries/auth/tokenHash.ts entries/audit/exportAuditLogs.ts entries/audit/siemFormatter.ts entries/admin/formatValue.ts entries/admin/registry.ts entries/admin/types.ts entries/cache/tags.ts entries/cache/createCacheStore.ts entries/cache/repository.ts entries/cache/simpleCache.ts entries/cache/simpleCacheStore.ts entries/config/envSchema.ts entries/contracts/serviceTokens.ts entries/contracts/container.ts entries/contracts/di.ts entries/crypto/fieldEncryption.ts entries/crypto/mfaSecret.ts entries/database/errors.ts entries/database/factory.ts entries/database/migrations.ts entries/database/migrations/types.ts entries/database/model.ts entries/database/query.ts entries/database/relationships.ts entries/database/repositoryQuery.ts entries/database/seeders.ts entries/database/seeders/types.ts entries/database/schema.ts entries/database/table.ts entries/database/types.ts entries/database/whereBuilder.ts entries/facades.ts entries/http/authMiddleware.ts entries/http/authorizeMiddleware.ts entries/http/bodySizeLimitMiddleware.ts entries/http/clientIp.ts entries/http/cookies.ts entries/http/contentNegotiation.ts entries/http/conditionalResponse.ts entries/http/corsMiddleware.ts entries/http/csrfMiddleware.ts entries/http/csrfProtection.ts entries/http/csrfToken.ts entries/http/etag.ts entries/http/flashSession.ts entries/http/flashMiddleware.ts entries/http/formRequest.ts entries/http/metricsMiddleware.ts entries/http/loginThrottleMiddleware.ts entries/http/memoryThrottleMiddleware.ts entries/http/pagination.ts entries/http/parseFormBody.ts entries/http/parseMultipartUpload.ts entries/http/requireAbilityMiddleware.ts entries/http/requireAuthMiddleware.ts entries/http/requireGlobalAdminMiddleware.ts entries/http/requireWebAuthMiddleware.ts entries/http/resources.ts entries/http/response.ts entries/http/route.ts entries/http/routeMiddleware.ts entries/http/routeModelBinding.ts entries/http/safeInternalPath.ts entries/http/signedUrl.ts entries/http/scimThrottleMiddleware.ts entries/http/securityHeadersMiddleware.ts entries/http/securedRouteModelBinding.ts entries/http/webErrorResponse.ts entries/http/webFormRequest.ts entries/http/throttleMiddleware.ts entries/http/validation.ts entries/jobs/dispatchWebhookJob.ts entries/jobs/exportAuditLogsJob.ts entries/jobs/invalidateCacheTagsJob.ts entries/lifecycle/gracefulShutdown.ts entries/logging/logger.ts entries/logging/requestLoggingMiddleware.ts entries/mail/mailer.ts entries/mail/markdownMail.ts entries/mail/markdownMailable.ts entries/mail/sanitizeMailHtml.ts entries/media/imageTransform.ts entries/metrics/prometheus.ts entries/openapi/generator.ts entries/openapi/registeredRoute.ts entries/openapi/validate.ts entries/pagination.ts entries/queue.ts entries/queue/createAppQueue.ts entries/queue/failedJobRepository.ts entries/queue/failedJobService.ts entries/queue/jobRunner.ts entries/queue/queueMetrics.ts entries/queue/publicQueue.ts entries/queue/redisQueue.ts entries/queue/types.ts entries/runtime/appKeyPrefix.ts entries/runtime/asyncContextStore.ts entries/scheduler/schedule.ts entries/scheduler/osCron.ts entries/security/oauthState.ts entries/security/publicReads.ts entries/security/safeFetch.ts entries/security/safeUrl.ts entries/security/scimTenantTokens.ts entries/security/stripeWebhook.ts entries/security/timingSafeCompare.ts entries/security/tokenExpiry.ts entries/security/totp.ts entries/storage/storage.ts entries/tenant/tenancyConfig.ts entries/tenant/tenantDatabaseScope.ts entries/tenant/databaseTenantContext.ts entries/terminal/runShell.ts entries/tracing/tracingMiddleware.ts entries/validation/rules.ts entries/view.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/signedUrl --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/exportAuditLogsJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/mail/sanitizeMailHtml --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/appKeyPrefix --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
+    "build:subpaths": "bun build entries/auth/accessControl.ts entries/auth/abilityChecker.ts entries/auth/membershipMiddleware.ts entries/auth/membershipScope.ts entries/auth/membershipService.ts entries/auth/oauth/oidcProvider.ts entries/auth/oauth/providers.ts entries/auth/oauth/samlProvider.ts entries/auth/oauth/types.ts entries/auth/password.ts entries/auth/policy.ts entries/auth/scimAuthMiddleware.ts entries/auth/sessionCookie.ts entries/auth/sessionGuard.ts entries/auth/tokenHash.ts entries/audit/exportAuditLogs.ts entries/audit/siemFormatter.ts entries/admin/formatValue.ts entries/admin/registry.ts entries/admin/types.ts entries/cache/tags.ts entries/cache/createCacheStore.ts entries/cache/repository.ts entries/cache/simpleCache.ts entries/cache/simpleCacheStore.ts entries/config/envSchema.ts entries/contracts/serviceTokens.ts entries/contracts/container.ts entries/contracts/di.ts entries/crypto/fieldEncryption.ts entries/crypto/mfaSecret.ts entries/database/errors.ts entries/database/factory.ts entries/database/migrations.ts entries/database/migrations/types.ts entries/database/model.ts entries/database/query.ts entries/database/relationships.ts entries/database/repositoryQuery.ts entries/database/seeders.ts entries/database/seeders/types.ts entries/database/schema.ts entries/database/table.ts entries/database/types.ts entries/database/whereBuilder.ts entries/facades.ts entries/http/authMiddleware.ts entries/http/authorizeMiddleware.ts entries/http/bodySizeLimitMiddleware.ts entries/http/clientIp.ts entries/http/cookies.ts entries/http/contentNegotiation.ts entries/http/conditionalResponse.ts entries/http/corsMiddleware.ts entries/http/csrfMiddleware.ts entries/http/csrfProtection.ts entries/http/csrfToken.ts entries/http/etag.ts entries/http/flashSession.ts entries/http/flashMiddleware.ts entries/http/formRequest.ts entries/http/metricsMiddleware.ts entries/http/loginThrottleMiddleware.ts entries/http/memoryThrottleMiddleware.ts entries/http/pagination.ts entries/http/parseFormBody.ts entries/http/parseMultipartUpload.ts entries/http/requireAbilityMiddleware.ts entries/http/requireAuthMiddleware.ts entries/http/requireGlobalAdminMiddleware.ts entries/http/requireWebAuthMiddleware.ts entries/http/resources.ts entries/http/response.ts entries/http/route.ts entries/http/routeMiddleware.ts entries/http/routeModelBinding.ts entries/http/safeInternalPath.ts entries/http/signedUrl.ts entries/http/scimThrottleMiddleware.ts entries/http/securityHeadersMiddleware.ts entries/http/securedRouteModelBinding.ts entries/http/webErrorResponse.ts entries/http/webFormRequest.ts entries/http/throttleMiddleware.ts entries/http/validation.ts entries/jobs/dispatchWebhookJob.ts entries/jobs/exportAuditLogsJob.ts entries/jobs/invalidateCacheTagsJob.ts entries/lifecycle/gracefulShutdown.ts entries/logging/logger.ts entries/logging/requestLoggingMiddleware.ts entries/mail/mailer.ts entries/mail/markdownMail.ts entries/mail/markdownMailable.ts entries/mail/sanitizeMailHtml.ts entries/media/imageTransform.ts entries/metrics/prometheus.ts entries/openapi/generator.ts entries/openapi/registeredRoute.ts entries/openapi/validate.ts entries/pagination.ts entries/queue.ts entries/queue/createAppQueue.ts entries/queue/failedJobRepository.ts entries/queue/failedJobService.ts entries/queue/jobRunner.ts entries/queue/queueMetrics.ts entries/queue/publicQueue.ts entries/queue/redisQueue.ts entries/queue/types.ts entries/runtime/appKeyPrefix.ts entries/runtime/frontendMode.ts entries/runtime/asyncContextStore.ts entries/scheduler/schedule.ts entries/scheduler/osCron.ts entries/security/oauthState.ts entries/security/publicReads.ts entries/security/safeFetch.ts entries/security/safeUrl.ts entries/security/scimTenantTokens.ts entries/security/stripeWebhook.ts entries/security/timingSafeCompare.ts entries/security/tokenExpiry.ts entries/security/totp.ts entries/storage/storage.ts entries/tenant/tenancyConfig.ts entries/tenant/tenantDatabaseScope.ts entries/tenant/databaseTenantContext.ts entries/terminal/runShell.ts entries/tracing/tracingMiddleware.ts entries/validation/rules.ts entries/view.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/signedUrl --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/exportAuditLogsJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/mail/sanitizeMailHtml --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/appKeyPrefix --external @getstrata/core/runtime/frontendMode --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
     "build:shims": "bun ../../scripts/write-core-shared-shims.ts"
   },
   "publishConfig": {

package/dist/bootstrap/config.d.ts

@@ -1,15 +0,0 @@
-declare const APP_PORT_CONFIG_KEY = "app.port";
-declare const CACHE_TTL_MS_CONFIG_KEY = "cache.ttlMs";
-declare const CACHE_MAX_ENTRIES_CONFIG_KEY = "cache.maxEntries";
-declare const CACHE_DRIVER_CONFIG_KEY = "cache.driver";
-declare const REDIS_URL_CONFIG_KEY = "cache.redisUrl";
-declare const DATABASE_URL_CONFIG_KEY = "database.url";
-export { CORE_ABILITY_CHECKER_TOKEN, CORE_AUTH_TOKEN, CORE_AUTH_USER_DIRECTORY_TOKEN, CORE_CACHE_TOKEN, CORE_CONFIG_TOKEN, CORE_EVENT_BUS_TOKEN, CORE_POLICY_GATE_TOKEN, CORE_QUEUE_TOKEN, CORE_TOKEN_SERVICE_TOKEN, } from "@getstrata/core/contracts/serviceTokens";
-declare const AUTH_DEV_HEADERS_CONFIG_KEY = "auth.allowDevHeaders";
-declare const DEFAULT_APP_PORT = 3000;
-declare const DEFAULT_CACHE_TTL_MS = 3600000;
-declare const DEFAULT_CACHE_MAX_ENTRIES = 100;
-declare const DEFAULT_CACHE_DRIVER = "array";
-declare const DEFAULT_API_TOKEN = "";
-declare const DEFAULT_QUEUE_DRIVER = "sync";
-export { APP_PORT_CONFIG_KEY, AUTH_DEV_HEADERS_CONFIG_KEY, CACHE_DRIVER_CONFIG_KEY, CACHE_MAX_ENTRIES_CONFIG_KEY, CACHE_TTL_MS_CONFIG_KEY, DATABASE_URL_CONFIG_KEY, DEFAULT_API_TOKEN, DEFAULT_APP_PORT, DEFAULT_CACHE_DRIVER, DEFAULT_CACHE_MAX_ENTRIES, DEFAULT_CACHE_TTL_MS, DEFAULT_QUEUE_DRIVER, REDIS_URL_CONFIG_KEY, };

package/dist/config/cors.d.ts

@@ -1,9 +0,0 @@
-interface CorsConfig {
-    allowedOrigins: string[];
-    allowedMethods: string[];
-    allowedHeaders: string[];
-    maxAgeSeconds: number;
-}
-declare const corsConfig: CorsConfig;
-export type { CorsConfig };
-export { corsConfig };

package/dist/config/features.d.ts

@@ -1,18 +0,0 @@
-interface FeatureFlags {
-    webhooks: boolean;
-    fullTextSearch: boolean;
-    auditLog: boolean;
-    oauthLogin: boolean;
-    samlLogin: boolean;
-    scim: boolean;
-    billing: boolean;
-    siemExport: boolean;
-    publicReads: boolean;
-    emailVerification: boolean;
-    mfa: boolean;
-}
-declare function readFeatureFlags(): FeatureFlags;
-declare const featureFlags: FeatureFlags;
-declare function isFeatureEnabled(feature: keyof FeatureFlags): boolean;
-export type { FeatureFlags };
-export { featureFlags, isFeatureEnabled, readFeatureFlags };