@getstrata/core 0.5.88 → 0.5.90

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @getstrata/core changelog
 
+## 0.5.90
+
+- **Breaking identity defaults:** `appKeyPrefix()` is `strata` and `appDisplayName()` is `Strata` when `APP_KEY_PREFIX` / `APP_NAME` are unset (were `workhub` / `WorkHub`). WorkHub pins those env vars.
+- `Schedule.command()` rejects cron strings other than `* * * * *` and `*/N * * * *` instead of silently never running them.
+- OpenAPI marks `GET /users/me/*` as bearer-authenticated.
+- OpenAPI `/users/me/current-organization` summaries no longer say Jetstream.
+
+## 0.5.89
+
+- **Breaking:** removed `@getstrata/core/jobs/dispatchWebhookJob`. Import `DispatchWebhookJob` from the app webhook module (`src/modules/webhook/dispatchWebhookJob.ts`).
+
 ## 0.5.88
 
 - Exported cookie name constants (`SESSION_COOKIE`, `CSRF_COOKIE`, `FLASH_COOKIE`, `INTENDED_URL_COOKIE`, `PASSWORD_CONFIRM_COOKIE`) are `appCookieName(...)` so they match the default prefix instead of a hardcoded `workhub_` string.

package/README.md

@@ -82,7 +82,7 @@ import type { Migration } from "@getstrata/core/database/migrations/types";
 Package name: **`@getstrata/core`** (npm org [`@getstrata`](https://www.npmjs.com/org/getstrata)).
 
 1. Add `NPM_TOKEN` to GitHub repository secrets.
-2. Tag a release: `git tag v0.5.93 && git push origin v0.5.93`
+2. Tag a release: `git tag v0.5.95 && git push origin v0.5.95`
 3. [Release workflow](../../.github/workflows/release.yml) builds and runs `npm publish --access public`.
 
 Previously published as `@eyk-workhub/framework@0.1.0`, deprecated in favor of this package.

package/dist/entries/audit/exportAuditLogs.js

@@ -4,7 +4,7 @@ import { repositoryConnection as db2 } from "@getstrata/core/database/repository
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/audit/siemFormatter.js

@@ -1,7 +1,7 @@
 // @bun
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -30,7 +30,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/auth/intendedUrlCookie.js

@@ -34,7 +34,7 @@ function loginRedirectLocation(request) {
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -63,7 +63,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/auth/oauth/providers.js

@@ -1,7 +1,7 @@
 // @bun
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -30,7 +30,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/auth/oauth/samlProvider.js

@@ -1,7 +1,7 @@
 // @bun
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -30,7 +30,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/auth/passwordConfirmCookie.js

@@ -4,7 +4,7 @@ import { createHmac, timingSafeEqual } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/auth/sessionCookie.js

@@ -4,7 +4,7 @@ import { createHmac, timingSafeEqual } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/auth/sessionGuard.js

@@ -89,7 +89,7 @@ import { createHmac, timingSafeEqual } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -118,7 +118,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/auth/tokenHash.js

@@ -4,7 +4,7 @@ import { createHash, createHmac } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/cache/createCacheStore.js

@@ -4,7 +4,7 @@ var {RedisClient } = globalThis.Bun;
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/facades.js

@@ -13,7 +13,7 @@ import {
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -42,7 +42,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/http/csrfMiddleware.js

@@ -7,7 +7,7 @@ import { timingSafeEqual } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -36,7 +36,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/http/csrfToken.js

@@ -4,7 +4,7 @@ import { timingSafeEqual } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/http/flashMiddleware.js

@@ -4,7 +4,7 @@ import { createHmac, timingSafeEqual } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/http/flashSession.js

@@ -4,7 +4,7 @@ import { createHmac, timingSafeEqual } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/http/loginThrottleMiddleware.js

@@ -4,7 +4,7 @@ var {RedisClient } = globalThis.Bun;
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/http/memoryThrottleMiddleware.js

@@ -1,7 +1,7 @@
 // @bun
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -30,7 +30,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/http/scimThrottleMiddleware.js

@@ -4,7 +4,7 @@ var {RedisClient } = globalThis.Bun;
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/http/securityHeadersMiddleware.js

@@ -9,7 +9,7 @@ import { currentRequestMeta, runWithRequestMeta } from "@getstrata/core/http/req
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -38,7 +38,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/http/signedUrl.js

@@ -6,7 +6,7 @@ import { timingSafeCompareString } from "@getstrata/core/security/timingSafeComp
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -35,7 +35,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/http/throttleMiddleware.js

@@ -6,7 +6,7 @@ var {RedisClient } = globalThis.Bun;
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -35,7 +35,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/jobs/exportAuditLogsJob.js

@@ -4,7 +4,7 @@ import { repositoryConnection as db2 } from "@getstrata/core/database/repository
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/mail/mailer.js

@@ -1,7 +1,7 @@
 // @bun
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -30,7 +30,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/openapi/generator.js

@@ -1,7 +1,7 @@
 // @bun
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -30,7 +30,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";
@@ -66,8 +66,8 @@ var PUBLIC_ROUTE_DESCRIPTIONS = {
   "POST /auth/tokens": "Create API token",
   "DELETE /auth/tokens/:id": "Revoke API token",
   "GET /users/me/export": "GDPR export of user data",
-  "GET /users/me/current-organization": "Current Jetstream organization",
-  "PUT /users/me/current-organization": "Switch current Jetstream organization",
+  "GET /users/me/current-organization": "Current organization",
+  "PUT /users/me/current-organization": "Switch current organization",
   "GET /users/me/invitations": "List pending team invitations for the signed-in email",
   "POST /users/me/invitations/:id/accept": "Accept a pending team invitation",
   "DELETE /users/me/invitations/:id": "Decline a pending team invitation",
@@ -126,7 +126,7 @@ function requiresBearerAuth(path, method) {
   if (method === "GET" && ["/organizations", "/projects", "/tasks", "/search"].some((prefix) => relative.startsWith(prefix) || path.startsWith(prefix))) {
     return false;
   }
-  return relative.startsWith("/auth/") || ["POST", "PATCH", "PUT", "DELETE"].includes(method);
+  return relative.startsWith("/auth/") || relative.startsWith("/users/me") || path.startsWith("/users/me") || ["POST", "PATCH", "PUT", "DELETE"].includes(method);
 }
 function generateOpenApiSpec(routes) {
   const paths = {};

package/dist/entries/queue/createAppQueue.js

@@ -158,7 +158,7 @@ var {RedisClient } = globalThis.Bun;
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -187,7 +187,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/queue/publicQueue.js

@@ -158,7 +158,7 @@ var {RedisClient } = globalThis.Bun;
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -187,7 +187,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/queue/queueMetrics.js

@@ -161,7 +161,7 @@ var {RedisClient } = globalThis.Bun;
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -190,7 +190,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/queue/redisQueue.js

@@ -4,7 +4,7 @@ var {RedisClient } = globalThis.Bun;
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/runtime/appKeyPrefix.js

@@ -1,7 +1,7 @@
 // @bun
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -30,7 +30,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/scheduler/schedule.js

@@ -1,8 +1,18 @@
 // @bun
 // ../../src/core/scheduler/schedule.ts
+function isSupportedScheduleExpression(expression) {
+  if (expression === "* * * * *") {
+    return true;
+  }
+  return /^(\*\/\d+)( \*){4}$/.test(expression);
+}
+
 class Schedule {
   tasks = [];
   command(expression, name, run) {
+    if (!isSupportedScheduleExpression(expression)) {
+      throw new Error(`Unsupported schedule expression "${expression}". Only "* * * * *" and "*/N * * * *" are implemented.`);
+    }
     this.tasks.push({ expression, name, run });
     return this;
   }
@@ -12,8 +22,9 @@ class Schedule {
       if (task.expression === "* * * * *") {
         return true;
       }
-      if (task.expression.startsWith("*/")) {
-        const interval = Number.parseInt(task.expression.slice(2), 10);
+      const intervalMatch = task.expression.match(/^\*\/(\d+)(?: \*){4}$/);
+      if (intervalMatch) {
+        const interval = Number.parseInt(intervalMatch[1] ?? "", 10);
         return Number.isInteger(interval) && interval > 0 && minute % interval === 0;
       }
       return false;

package/dist/entries/security/oauthState.js

@@ -4,7 +4,7 @@ import { createHmac, randomBytes, timingSafeEqual } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/security/safeFetch.js

@@ -1,7 +1,7 @@
 // @bun
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -30,7 +30,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/security/totp.js

@@ -4,7 +4,7 @@ import { createHmac, randomBytes } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/tracing/tracingMiddleware.js

@@ -4,7 +4,7 @@ import { randomBytes } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -33,7 +33,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/entries/view.js

@@ -386,7 +386,7 @@ import { timingSafeEqual } from "crypto";
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -415,7 +415,7 @@ function webhookSignatureHeader() {
   return process.env.WEBHOOK_SIGNATURE_HEADER?.trim() || `x-${appKeyPrefix()}-signature`;
 }
 function appDisplayName() {
-  return process.env.APP_NAME?.trim() || "WorkHub";
+  return process.env.APP_NAME?.trim() || "Strata";
 }
 function appEnv() {
   return process.env.APP_ENV?.trim() || "local";

package/dist/index.js

@@ -977,7 +977,7 @@ var {RedisClient } = globalThis.Bun;
 
 // ../../src/core/runtime/appKeyPrefix.ts
 function appKeyPrefix() {
-  return process.env.APP_KEY_PREFIX?.trim() || "workhub";
+  return process.env.APP_KEY_PREFIX?.trim() || "strata";
 }
 function appCookieName(kind) {
   return `${appKeyPrefix()}_${kind}`;
@@ -6557,9 +6557,19 @@ async function collectQueueMetrics() {
   };
 }
 // ../../src/core/scheduler/schedule.ts
+function isSupportedScheduleExpression(expression) {
+  if (expression === "* * * * *") {
+    return true;
+  }
+  return /^(\*\/\d+)( \*){4}$/.test(expression);
+}
+
 class Schedule {
   tasks = [];
   command(expression, name, run) {
+    if (!isSupportedScheduleExpression(expression)) {
+      throw new Error(`Unsupported schedule expression "${expression}". Only "* * * * *" and "*/N * * * *" are implemented.`);
+    }
     this.tasks.push({ expression, name, run });
     return this;
   }
@@ -6569,8 +6579,9 @@ class Schedule {
       if (task.expression === "* * * * *") {
         return true;
       }
-      if (task.expression.startsWith("*/")) {
-        const interval = Number.parseInt(task.expression.slice(2), 10);
+      const intervalMatch = task.expression.match(/^\*\/(\d+)(?: \*){4}$/);
+      if (intervalMatch) {
+        const interval = Number.parseInt(intervalMatch[1] ?? "", 10);
         return Number.isInteger(interval) && interval > 0 && minute % interval === 0;
       }
       return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getstrata/core",
-  "version": "0.5.88",
+  "version": "0.5.90",
   "description": "Strata — Laravel-inspired Bun framework public API",
   "type": "module",
   "license": "MIT",
@@ -555,11 +555,6 @@
       "import": "./dist/entries/http/validation.js",
       "default": "./dist/entries/http/validation.js"
     },
-    "./jobs/dispatchWebhookJob": {
-      "types": "./dist/core/jobs/dispatchWebhookJob.d.ts",
-      "import": "./dist/entries/jobs/dispatchWebhookJob.js",
-      "default": "./dist/entries/jobs/dispatchWebhookJob.js"
-    },
     "./jobs/exportAuditLogsJob": {
       "types": "./dist/core/jobs/exportAuditLogsJob.d.ts",
       "import": "./dist/entries/jobs/exportAuditLogsJob.js",
@@ -843,7 +838,7 @@
     "build:bundle": "bun build index.ts --outdir dist --target bun --external bun --external eta",
     "build:types": "tsc -p tsconfig.types.json",
     "prepublishOnly": "bun run build && bun ../../scripts/prepare-core-package-publish.ts",
-    "build:subpaths": "bun build entries/auth/accessControl.ts entries/auth/abilityChecker.ts entries/auth/emailVerification.ts entries/auth/membershipMiddleware.ts entries/auth/membershipScope.ts entries/auth/membershipService.ts entries/auth/oauth/oidcProvider.ts entries/auth/oauth/providers.ts entries/auth/oauth/samlProvider.ts entries/auth/oauth/types.ts entries/auth/password.ts entries/auth/intendedUrlCookie.ts entries/auth/passwordConfirmCookie.ts entries/auth/policy.ts entries/auth/scimAuthMiddleware.ts entries/auth/sessionCookie.ts entries/auth/sessionGuard.ts entries/auth/tokenHash.ts entries/audit/exportAuditLogs.ts entries/audit/siemFormatter.ts entries/admin/formatValue.ts entries/admin/registry.ts entries/admin/types.ts entries/cache/tags.ts entries/cache/createCacheStore.ts entries/cache/repository.ts entries/cache/simpleCache.ts entries/cache/simpleCacheStore.ts entries/config/envSchema.ts entries/contracts/serviceTokens.ts entries/contracts/container.ts entries/contracts/di.ts entries/crypto/fieldEncryption.ts entries/crypto/mfaSecret.ts entries/database/errors.ts entries/database/factory.ts entries/database/migrations.ts entries/database/migrations/types.ts entries/database/model.ts entries/database/query.ts entries/database/relationships.ts entries/database/repositoryQuery.ts entries/database/seeders.ts entries/database/seeders/types.ts entries/database/schema.ts entries/database/table.ts entries/database/types.ts entries/database/whereBuilder.ts entries/facades.ts entries/http/authMiddleware.ts entries/http/authorizeMiddleware.ts entries/http/bodySizeLimitMiddleware.ts entries/http/clientIp.ts entries/http/cookies.ts entries/http/contentNegotiation.ts entries/http/conditionalResponse.ts entries/http/corsMiddleware.ts entries/http/csrfMiddleware.ts entries/http/csrfProtection.ts entries/http/csrfToken.ts entries/http/etag.ts entries/http/flashSession.ts entries/http/flashMiddleware.ts entries/http/formRequest.ts entries/http/metricsMiddleware.ts entries/http/loginThrottleMiddleware.ts entries/http/memoryThrottleMiddleware.ts entries/http/pagination.ts entries/http/parseFormBody.ts entries/http/parseMultipartUpload.ts entries/http/requireAbilityMiddleware.ts entries/http/requireAuthMiddleware.ts entries/http/requireGlobalAdminMiddleware.ts entries/http/requireWebAuthMiddleware.ts entries/http/requireVerifiedMiddleware.ts entries/http/requirePasswordConfirmMiddleware.ts entries/http/resources.ts entries/http/response.ts entries/http/route.ts entries/http/routeMiddleware.ts entries/http/routeModelBinding.ts entries/http/safeInternalPath.ts entries/http/signedUrl.ts entries/http/scimThrottleMiddleware.ts entries/http/securityHeadersMiddleware.ts entries/http/securedRouteModelBinding.ts entries/http/webErrorResponse.ts entries/http/webFormRequest.ts entries/http/throttleMiddleware.ts entries/http/validation.ts entries/jobs/dispatchWebhookJob.ts entries/jobs/exportAuditLogsJob.ts entries/jobs/invalidateCacheTagsJob.ts entries/lifecycle/gracefulShutdown.ts entries/logging/logger.ts entries/logging/requestLoggingMiddleware.ts entries/mail/mailer.ts entries/mail/markdownMail.ts entries/mail/markdownMailable.ts entries/mail/sanitizeMailHtml.ts entries/media/imageTransform.ts entries/metrics/prometheus.ts entries/openapi/generator.ts entries/openapi/registeredRoute.ts entries/openapi/validate.ts entries/pagination.ts entries/queue.ts entries/queue/createAppQueue.ts entries/queue/failedJobRepository.ts entries/queue/failedJobService.ts entries/queue/jobRunner.ts entries/queue/queueMetrics.ts entries/queue/publicQueue.ts entries/queue/redisQueue.ts entries/queue/types.ts entries/runtime/appKeyPrefix.ts entries/runtime/frontendMode.ts entries/runtime/asyncContextStore.ts entries/scheduler/schedule.ts entries/scheduler/osCron.ts entries/security/oauthState.ts entries/security/publicReads.ts entries/security/recoveryCodes.ts entries/security/safeFetch.ts entries/security/safeUrl.ts entries/security/scimTenantTokens.ts entries/security/stripeWebhook.ts entries/security/timingSafeCompare.ts entries/security/tokenExpiry.ts entries/security/totp.ts entries/storage/storage.ts entries/tenant/tenancyConfig.ts entries/tenant/tenantDatabaseScope.ts entries/tenant/databaseTenantContext.ts entries/terminal/runShell.ts entries/tracing/tracingMiddleware.ts entries/validation/rules.ts entries/view.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/emailVerification --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/intendedUrlCookie --external @getstrata/core/auth/passwordConfirmCookie --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/requireVerifiedMiddleware --external @getstrata/core/http/requirePasswordConfirmMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/signedUrl --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/dispatchWebhookJob --external @getstrata/core/jobs/exportAuditLogsJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/mail/sanitizeMailHtml --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/appKeyPrefix --external @getstrata/core/runtime/frontendMode --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/recoveryCodes --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
+    "build:subpaths": "bun build entries/auth/accessControl.ts entries/auth/abilityChecker.ts entries/auth/emailVerification.ts entries/auth/membershipMiddleware.ts entries/auth/membershipScope.ts entries/auth/membershipService.ts entries/auth/oauth/oidcProvider.ts entries/auth/oauth/providers.ts entries/auth/oauth/samlProvider.ts entries/auth/oauth/types.ts entries/auth/password.ts entries/auth/intendedUrlCookie.ts entries/auth/passwordConfirmCookie.ts entries/auth/policy.ts entries/auth/scimAuthMiddleware.ts entries/auth/sessionCookie.ts entries/auth/sessionGuard.ts entries/auth/tokenHash.ts entries/audit/exportAuditLogs.ts entries/audit/siemFormatter.ts entries/admin/formatValue.ts entries/admin/registry.ts entries/admin/types.ts entries/cache/tags.ts entries/cache/createCacheStore.ts entries/cache/repository.ts entries/cache/simpleCache.ts entries/cache/simpleCacheStore.ts entries/config/envSchema.ts entries/contracts/serviceTokens.ts entries/contracts/container.ts entries/contracts/di.ts entries/crypto/fieldEncryption.ts entries/crypto/mfaSecret.ts entries/database/errors.ts entries/database/factory.ts entries/database/migrations.ts entries/database/migrations/types.ts entries/database/model.ts entries/database/query.ts entries/database/relationships.ts entries/database/repositoryQuery.ts entries/database/seeders.ts entries/database/seeders/types.ts entries/database/schema.ts entries/database/table.ts entries/database/types.ts entries/database/whereBuilder.ts entries/facades.ts entries/http/authMiddleware.ts entries/http/authorizeMiddleware.ts entries/http/bodySizeLimitMiddleware.ts entries/http/clientIp.ts entries/http/cookies.ts entries/http/contentNegotiation.ts entries/http/conditionalResponse.ts entries/http/corsMiddleware.ts entries/http/csrfMiddleware.ts entries/http/csrfProtection.ts entries/http/csrfToken.ts entries/http/etag.ts entries/http/flashSession.ts entries/http/flashMiddleware.ts entries/http/formRequest.ts entries/http/metricsMiddleware.ts entries/http/loginThrottleMiddleware.ts entries/http/memoryThrottleMiddleware.ts entries/http/pagination.ts entries/http/parseFormBody.ts entries/http/parseMultipartUpload.ts entries/http/requireAbilityMiddleware.ts entries/http/requireAuthMiddleware.ts entries/http/requireGlobalAdminMiddleware.ts entries/http/requireWebAuthMiddleware.ts entries/http/requireVerifiedMiddleware.ts entries/http/requirePasswordConfirmMiddleware.ts entries/http/resources.ts entries/http/response.ts entries/http/route.ts entries/http/routeMiddleware.ts entries/http/routeModelBinding.ts entries/http/safeInternalPath.ts entries/http/signedUrl.ts entries/http/scimThrottleMiddleware.ts entries/http/securityHeadersMiddleware.ts entries/http/securedRouteModelBinding.ts entries/http/webErrorResponse.ts entries/http/webFormRequest.ts entries/http/throttleMiddleware.ts entries/http/validation.ts entries/jobs/exportAuditLogsJob.ts entries/jobs/invalidateCacheTagsJob.ts entries/lifecycle/gracefulShutdown.ts entries/logging/logger.ts entries/logging/requestLoggingMiddleware.ts entries/mail/mailer.ts entries/mail/markdownMail.ts entries/mail/markdownMailable.ts entries/mail/sanitizeMailHtml.ts entries/media/imageTransform.ts entries/metrics/prometheus.ts entries/openapi/generator.ts entries/openapi/registeredRoute.ts entries/openapi/validate.ts entries/pagination.ts entries/queue.ts entries/queue/createAppQueue.ts entries/queue/failedJobRepository.ts entries/queue/failedJobService.ts entries/queue/jobRunner.ts entries/queue/queueMetrics.ts entries/queue/publicQueue.ts entries/queue/redisQueue.ts entries/queue/types.ts entries/runtime/appKeyPrefix.ts entries/runtime/frontendMode.ts entries/runtime/asyncContextStore.ts entries/scheduler/schedule.ts entries/scheduler/osCron.ts entries/security/oauthState.ts entries/security/publicReads.ts entries/security/recoveryCodes.ts entries/security/safeFetch.ts entries/security/safeUrl.ts entries/security/scimTenantTokens.ts entries/security/stripeWebhook.ts entries/security/timingSafeCompare.ts entries/security/tokenExpiry.ts entries/security/totp.ts entries/storage/storage.ts entries/tenant/tenancyConfig.ts entries/tenant/tenantDatabaseScope.ts entries/tenant/databaseTenantContext.ts entries/terminal/runShell.ts entries/tracing/tracingMiddleware.ts entries/validation/rules.ts entries/view.ts --outdir dist --root . --target bun --external bun --external eta --external @getstrata/core --external @getstrata/core/auth/accessControl --external @getstrata/core/auth/abilityChecker --external @getstrata/core/auth/authContext --external @getstrata/core/auth/emailVerification --external @getstrata/core/auth/guard --external @getstrata/core/auth/membershipContext --external @getstrata/core/auth/membershipMiddleware --external @getstrata/core/auth/membershipScope --external @getstrata/core/auth/membershipService --external @getstrata/core/auth/oauth/oidcProvider --external @getstrata/core/auth/oauth/providers --external @getstrata/core/auth/oauth/samlProvider --external @getstrata/core/auth/oauth/types --external @getstrata/core/auth/password --external @getstrata/core/auth/intendedUrlCookie --external @getstrata/core/auth/passwordConfirmCookie --external @getstrata/core/auth/policy --external @getstrata/core/auth/scimAuthMiddleware --external @getstrata/core/auth/sessionCookie --external @getstrata/core/auth/sessionGuard --external @getstrata/core/auth/tokenHash --external @getstrata/core/audit/exportAuditLogs --external @getstrata/core/audit/siemFormatter --external @getstrata/core/admin/formatValue --external @getstrata/core/admin/registry --external @getstrata/core/admin/types --external @getstrata/core/cache/tags --external @getstrata/core/cache/createCacheStore --external @getstrata/core/cache/repository --external @getstrata/core/cache/simpleCache --external @getstrata/core/cache/simpleCacheStore --external @getstrata/core/config/envSchema --external @getstrata/core/contracts/serviceTokens --external @getstrata/core/contracts/container --external @getstrata/core/contracts/di --external @getstrata/core/crypto/fieldEncryption --external @getstrata/core/crypto/mfaSecret --external @getstrata/core/database --external @getstrata/core/database/baseRepository --external @getstrata/core/database/bindConnection --external @getstrata/core/database/boundConnection --external @getstrata/core/database/bunSql --external @getstrata/core/database/connection --external @getstrata/core/database/defaultConnection --external @getstrata/core/database/errors --external @getstrata/core/database/factory --external @getstrata/core/database/migrations --external @getstrata/core/database/migrations/types --external @getstrata/core/database/model --external @getstrata/core/database/query --external @getstrata/core/database/relationships --external @getstrata/core/database/repositoryConnection --external @getstrata/core/database/repositoryQuery --external @getstrata/core/database/seeders --external @getstrata/core/database/seeders/types --external @getstrata/core/database/schema --external @getstrata/core/database/table --external @getstrata/core/database/transaction --external @getstrata/core/database/types --external @getstrata/core/database/whereBuilder --external @getstrata/core/errors/http --external @getstrata/core/events --external @getstrata/core/facades --external @getstrata/core/http --external @getstrata/core/http/authMiddleware --external @getstrata/core/http/authorizeMiddleware --external @getstrata/core/http/bodySizeLimitMiddleware --external @getstrata/core/http/clientIp --external @getstrata/core/http/cookies --external @getstrata/core/http/contentNegotiation --external @getstrata/core/http/contentSecurityPolicy --external @getstrata/core/http/conditionalResponse --external @getstrata/core/http/corsMiddleware --external @getstrata/core/http/csrfMiddleware --external @getstrata/core/http/csrfProtection --external @getstrata/core/http/csrfToken --external @getstrata/core/http/etag --external @getstrata/core/http/flashSession --external @getstrata/core/http/flashMiddleware --external @getstrata/core/http/formRequest --external @getstrata/core/http/middleware --external @getstrata/core/http/metricsMiddleware --external @getstrata/core/http/loginThrottleMiddleware --external @getstrata/core/http/memoryThrottleMiddleware --external @getstrata/core/http/pagination --external @getstrata/core/http/parseFormBody --external @getstrata/core/http/parseMultipartUpload --external @getstrata/core/http/requireAbilityMiddleware --external @getstrata/core/http/requireAuthMiddleware --external @getstrata/core/http/requireGlobalAdminMiddleware --external @getstrata/core/http/requireWebAuthMiddleware --external @getstrata/core/http/requireVerifiedMiddleware --external @getstrata/core/http/requirePasswordConfirmMiddleware --external @getstrata/core/http/resources --external @getstrata/core/http/response --external @getstrata/core/http/route --external @getstrata/core/http/routeMiddleware --external @getstrata/core/http/routeModelBinding --external @getstrata/core/http/safeInternalPath --external @getstrata/core/http/signedUrl --external @getstrata/core/http/scimThrottleMiddleware --external @getstrata/core/http/securityHeadersMiddleware --external @getstrata/core/http/securedRouteModelBinding --external @getstrata/core/http/requestMetaContext --external @getstrata/core/http/webErrorResponse --external @getstrata/core/http/webFormRequest --external @getstrata/core/http/throttleMiddleware --external @getstrata/core/http/validation --external @getstrata/core/jobs/exportAuditLogsJob --external @getstrata/core/jobs/invalidateCacheTagsJob --external @getstrata/core/lifecycle/gracefulShutdown --external @getstrata/core/logging/logger --external @getstrata/core/logging/requestLoggingMiddleware --external @getstrata/core/mail/mailer --external @getstrata/core/mail/markdownMail --external @getstrata/core/mail/markdownMailable --external @getstrata/core/mail/sanitizeMailHtml --external @getstrata/core/media/imageTransform --external @getstrata/core/metrics/prometheus --external @getstrata/core/notifications --external @getstrata/core/openapi/generator --external @getstrata/core/openapi/registeredRoute --external @getstrata/core/openapi/validate --external @getstrata/core/pagination --external @getstrata/core/queue --external @getstrata/core/queue/createAppQueue --external @getstrata/core/queue/failedJobRepository --external @getstrata/core/queue/failedJobService --external @getstrata/core/queue/jobRegistry --external @getstrata/core/queue/jobRunner --external @getstrata/core/queue/queueMetrics --external @getstrata/core/queue/publicQueue --external @getstrata/core/queue/redisQueue --external @getstrata/core/queue/types --external @getstrata/core/runtime/appKeyPrefix --external @getstrata/core/runtime/frontendMode --external @getstrata/core/runtime/applicationRegistry --external @getstrata/core/runtime/asyncContextStore --external @getstrata/core/scheduler/schedule --external @getstrata/core/scheduler/osCron --external @getstrata/core/security/oauthState --external @getstrata/core/security/publicReads --external @getstrata/core/security/recoveryCodes --external @getstrata/core/security/safeFetch --external @getstrata/core/security/safeUrl --external @getstrata/core/security/scimTenantTokens --external @getstrata/core/security/securityEvents --external @getstrata/core/security/stripeWebhook --external @getstrata/core/security/timingSafeCompare --external @getstrata/core/security/tokenExpiry --external @getstrata/core/security/totp --external @getstrata/core/storage/storage --external @getstrata/core/tenant/tenancyConfig --external @getstrata/core/tenant/tenantContext --external @getstrata/core/tenant/tenantDatabaseScope --external @getstrata/core/tenant/databaseTenantContext --external @getstrata/core/tenant/tenantMiddleware --external @getstrata/core/terminal/runShell --external @getstrata/core/tracing/traceContext --external @getstrata/core/tracing/tracingMiddleware --external @getstrata/core/validation/rules --external @getstrata/core/view",
     "build:shims": "bun ../../scripts/write-core-shared-shims.ts"
   },
   "publishConfig": {

package/dist/core/jobs/dispatchWebhookJob.d.ts

@@ -1,2 +0,0 @@
-/** @deprecated Import `DispatchWebhookJob` from the app webhook module. This path is a compatibility re-export. */
-export { DispatchWebhookJob, type DispatchWebhookPayload, default, } from "../../modules/webhook/dispatchWebhookJob";

package/dist/entries/jobs/dispatchWebhookJob.js

@@ -1,93 +0,0 @@
-// @bun
-// ../../src/modules/webhook/dispatchWebhookJob.ts
-import { createHmac } from "crypto";
-import { repositoryConnection as db } from "@getstrata/core/database/repositoryConnection";
-import { BadRequestError } from "@getstrata/core/errors/http";
-import { Job } from "@getstrata/core/queue";
-import { webhookSignatureHeader } from "@getstrata/core/runtime/appKeyPrefix";
-import { safeFetch } from "@getstrata/core/security/safeFetch";
-import { assertSafeOutboundUrl } from "@getstrata/core/security/safeUrl";
-import { resolveTenant } from "@getstrata/core/tenant/resolveTenant";
-import { runWithTenantDatabase } from "@getstrata/core/tenant/tenantDatabaseScope";
-
-class DispatchWebhookJob extends Job {
-  maxAttempts = 3;
-  backoffMs = 2000;
-  async handle(payload) {
-    const tenantId = Number(payload.tenantId);
-    const tenant = await resolveTenant(tenantId) ?? {
-      id: tenantId,
-      slug: "job",
-      plan: "free",
-      region: "eu"
-    };
-    const failure = await runWithTenantDatabase(tenant, async () => await this.deliver(payload));
-    if (failure) {
-      throw failure;
-    }
-  }
-  async deliver(payload) {
-    const queuedUrl = typeof payload.url === "string" ? payload.url : "";
-    const queuedSecret = typeof payload.secret === "string" ? payload.secret : "";
-    const queued = queuedUrl !== "" && queuedSecret !== "" ? { id: payload.webhookId, url: queuedUrl, secret: queuedSecret } : null;
-    const rows = queued ? [] : await db`
-          SELECT id, url, secret
-          FROM webhook
-          WHERE id = ${payload.webhookId} AND active = TRUE
-          LIMIT 1
-        `;
-    const webhook = queued ?? rows[0];
-    if (!webhook) {
-      return;
-    }
-    const body = JSON.stringify({ event: payload.event, payload: payload.payload });
-    const signature = createHmac("sha256", webhook.secret).update(body).digest("hex");
-    const allowHttp = (process.env.APP_ENV ?? "local") !== "production";
-    const signatureHeader = webhookSignatureHeader();
-    let responseStatus = null;
-    let errorMessage = null;
-    try {
-      assertSafeOutboundUrl(webhook.url, { allowHttp });
-      const response = await safeFetch(webhook.url, {
-        method: "POST",
-        headers: {
-          "content-type": "application/json",
-          [signatureHeader]: signature
-        },
-        body
-      }, { allowHttp });
-      responseStatus = response.status;
-      if (!response.ok) {
-        throw new Error(`Webhook delivery failed with status ${response.status}.`);
-      }
-    } catch (error) {
-      errorMessage = error instanceof Error ? error.message : String(error);
-      await db`
-        INSERT INTO webhook_delivery (webhook_id, event, payload, response_status, error)
-        VALUES (
-          ${webhook.id},
-          ${payload.event},
-          ${JSON.stringify(payload.payload)}::jsonb,
-          ${responseStatus},
-          ${errorMessage}
-        )
-      `;
-      if (error instanceof BadRequestError) {
-        return;
-      }
-      return error instanceof Error ? error : new Error(errorMessage);
-    }
-    await db`
-      INSERT INTO webhook_delivery (webhook_id, event, payload, response_status)
-      VALUES (
-        ${webhook.id},
-        ${payload.event},
-        ${JSON.stringify(payload.payload)}::jsonb,
-        ${responseStatus}
-      )
-    `;
-  }
-}
-export {
-  DispatchWebhookJob
-};

package/dist/modules/webhook/dispatchWebhookJob.d.ts

@@ -1,18 +0,0 @@
-import { Job } from "@getstrata/core/queue";
-interface DispatchWebhookPayload {
-    webhookId: number;
-    tenantId: number;
-    event: string;
-    payload: Record<string, unknown>;
-    url?: string;
-    secret?: string;
-}
-declare class DispatchWebhookJob extends Job<DispatchWebhookPayload> {
-    readonly maxAttempts = 3;
-    readonly backoffMs = 2000;
-    handle(payload: DispatchWebhookPayload): Promise<void>;
-    private deliver;
-}
-export { DispatchWebhookJob };
-export default DispatchWebhookJob;
-export type { DispatchWebhookPayload };