@hachej/boring-core 0.1.70 → 0.1.72

package/dist/front/index.d.ts

@@ -1,6 +1,6 @@
 import * as react from 'react';
 import { Component, ReactNode, ErrorInfo } from 'react';
-import { R as RuntimeConfig, g as CapabilitiesResponse, d as WorkspaceMember, U as User, c as Workspace, M as MemberRole, S as SessionState } from '../types-DVgeIw1d.js';
+import { R as RuntimeConfig, a as CapabilitiesResponse, W as WorkspaceMember, U as User, b as Workspace, M as MemberRole, S as SessionState } from '../types-DDnayJjI.js';
 export { b as CompanyAdminLabels, c as CompanyAdminProvider, d as CompanyAdminProviderProps, e as CompanyAdminStatus, f as CoreFront, C as CoreFrontAuthPagesOverride, a as CoreFrontCompanyAdminOptions, g as CoreFrontProps, L as LoadCompanyAdminStatus, R as RenderCompanyAdminContent, u as useCompanyAdminStatus } from '../CoreFront-DB1OfNJU.js';
 import * as _tanstack_react_query from '@tanstack/react-query';
 import * as better_auth_react from 'better-auth/react';

package/dist/{authHook-BUSGTx_o.d.ts → loadConfig-C3iHuZNw.d.ts}

@@ -1,18 +1,9 @@
-import { C as CoreConfig, R as RuntimeConfig } from './types-DVgeIw1d.js';
 import { FastifyPluginAsync } from 'fastify';
 import { Auth } from 'better-auth';
-import { W as WorkspaceStore, D as Database } from './connection-D9s7Td0I.js';
+import { C as CoreConfig, R as RuntimeConfig } from './types-DDnayJjI.js';
+import { W as WorkspaceStore, D as Database } from './types-Dm11Zm56.js';
 import { T as TelemetrySink } from './telemetry-DR18MeI0.js';
 
-interface LoadConfigOptions {
-    tomlPath?: string;
-    env?: Record<string, string | undefined>;
-    allowMissingSecrets?: boolean;
-}
-declare function loadConfig(options?: LoadConfigOptions): Promise<CoreConfig>;
-declare function validateConfig(raw: unknown): CoreConfig;
-declare function buildRuntimeConfigPayload(config: CoreConfig): RuntimeConfig;
-
 declare function validatePasswordStrength(password: string): {
     valid: boolean;
     message?: string;
@@ -38,4 +29,13 @@ declare module 'fastify' {
 }
 declare const authHook: FastifyPluginAsync<AuthHookOptions>;
 
+interface LoadConfigOptions {
+    tomlPath?: string;
+    env?: Record<string, string | undefined>;
+    allowMissingSecrets?: boolean;
+}
+declare function loadConfig(options?: LoadConfigOptions): Promise<CoreConfig>;
+declare function validateConfig(raw: unknown): CoreConfig;
+declare function buildRuntimeConfigPayload(config: CoreConfig): RuntimeConfig;
+
 export { type AuthHookOptions as A, type BetterAuthInstance as B, type CreateAuthOptions as C, type LoadConfigOptions as L, authHook as a, buildRuntimeConfigPayload as b, createAuth as c, validatePasswordStrength as d, loadConfig as l, validateConfig as v };

package/dist/server/db/index.d.ts

@@ -1,7 +1,7 @@
-import { U as UserStore, W as WorkspaceStore } from '../../connection-D9s7Td0I.js';
-export { D as Database, d as createDatabase } from '../../connection-D9s7Td0I.js';
-export { F as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, a as ModelBudgetExceededError, P as PostgresMeteringStore, b as PostgresModelBudgetStore, R as RecordUsageInput, c as RecordUsageResult, d as ReservationFinalStatus, e as ReserveInput, f as ReserveResult, g as RunMigrationsOptions, r as runMigrations } from '../../PostgresModelBudgetStore-CFbEEdQL.js';
-import { U as User, c as Workspace, E as ERROR_CODES, M as MemberRole, d as WorkspaceMember, e as WorkspaceInvite, f as WorkspaceRuntime, W as WorkspaceRuntimeResourceSelector, a as WorkspaceRuntimeResource, b as WorkspaceRuntimeResourceInput } from '../../types-DVgeIw1d.js';
+import { U as UserStore, W as WorkspaceStore } from '../../types-Dm11Zm56.js';
+export { D as Database, c as createDatabase } from '../../types-Dm11Zm56.js';
+export { B as BudgetReservationAdmission, a as BudgetReservationAdmissionInput, b as BudgetReservationScope, F as FinishBudgetReservationInput, c as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, d as ModelBudgetExceededError, P as PostgresBudgetReservationStore, e as PostgresMeteringStore, f as PostgresModelBudgetStore, R as RecordUsageInput, g as RecordUsageResult, h as ReservationFinalStatus, i as ReserveBudgetInput, j as ReserveBudgetResult, k as ReserveInput, l as ReserveResult, m as RunMigrationsOptions, U as UserBudgetExceededError, r as runMigrations } from '../../PostgresModelBudgetStore-DWwh7ElQ.js';
+import { U as User, b as Workspace, E as ERROR_CODES, M as MemberRole, W as WorkspaceMember, c as WorkspaceInvite, d as WorkspaceRuntime, e as WorkspaceRuntimeResourceSelector, f as WorkspaceRuntimeResource, g as WorkspaceRuntimeResourceInput } from '../../types-DDnayJjI.js';
 import { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
 import 'postgres';
 

package/dist/server/db/index.js

@@ -3,13 +3,15 @@ import {
   LocalUserStore,
   LocalWorkspaceStore,
   ModelBudgetExceededError,
+  PostgresBudgetReservationStore,
   PostgresMeteringStore,
   PostgresModelBudgetStore,
   PostgresUserStore,
   PostgresWorkspaceStore,
+  UserBudgetExceededError,
   createDatabase,
   runMigrations
-} from "../../chunk-EFM5IWTK.js";
+} from "../../chunk-JBEKMYST.js";
 import "../../chunk-QZGYKLXB.js";
 import "../../chunk-MLKGABMK.js";
 export {
@@ -17,10 +19,12 @@ export {
   LocalUserStore,
   LocalWorkspaceStore,
   ModelBudgetExceededError,
+  PostgresBudgetReservationStore,
   PostgresMeteringStore,
   PostgresModelBudgetStore,
   PostgresUserStore,
   PostgresWorkspaceStore,
+  UserBudgetExceededError,
   createDatabase,
   runMigrations
 };

package/dist/server/index.d.ts

@@ -1,21 +1,69 @@
-import { L as LoadConfigOptions } from '../authHook-BUSGTx_o.js';
-export { A as AuthHookOptions, B as BetterAuthInstance, C as CreateAuthOptions, a as authHook, b as buildRuntimeConfigPayload, c as createAuth, l as loadConfig, v as validateConfig, d as validatePasswordStrength } from '../authHook-BUSGTx_o.js';
+import { L as LoadConfigOptions } from '../loadConfig-C3iHuZNw.js';
+export { A as AuthHookOptions, B as BetterAuthInstance, C as CreateAuthOptions, a as authHook, b as buildRuntimeConfigPayload, c as createAuth, l as loadConfig, v as validateConfig, d as validatePasswordStrength } from '../loadConfig-C3iHuZNw.js';
 import { z } from 'zod';
-import { C as CoreConfig, M as MemberRole, W as WorkspaceRuntimeResourceSelector, a as WorkspaceRuntimeResource, b as WorkspaceRuntimeResourceInput } from '../types-DVgeIw1d.js';
+import { C as CoreConfig, M as MemberRole, e as WorkspaceRuntimeResourceSelector, f as WorkspaceRuntimeResource, g as WorkspaceRuntimeResourceInput } from '../types-DDnayJjI.js';
 import * as fastify from 'fastify';
-import { FastifyInstance, FastifyPluginAsync, preHandlerHookHandler, FastifyRequest, FastifyReply } from 'fastify';
+import { preHandlerHookHandler, FastifyInstance, FastifyPluginAsync, FastifyRequest, FastifyReply } from 'fastify';
 import * as http from 'http';
 import { IncomingMessage } from 'node:http';
-import { C as CreateCoreAppOptions, D as Database, U as UserStore, W as WorkspaceStore, a as WorkspaceProvisioner } from '../connection-D9s7Td0I.js';
-export { A as AuthProvider, b as CapabilitiesContributor, P as ProvisionContext, c as ProvisionResult, d as createDatabase } from '../connection-D9s7Td0I.js';
+import { W as WorkspaceStore, C as CreateCoreAppOptions, D as Database, U as UserStore, a as WorkspaceProvisioner } from '../types-Dm11Zm56.js';
+export { A as AuthProvider, b as CapabilitiesContributor, P as ProvisionContext, d as ProvisionResult, c as createDatabase } from '../types-Dm11Zm56.js';
 import postgres from 'postgres';
-import { P as PostgresMeteringStore, C as CreditLedgerEntry } from '../PostgresModelBudgetStore-CFbEEdQL.js';
-export { F as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, a as ModelBudgetExceededError, b as PostgresModelBudgetStore, R as RecordUsageInput, c as RecordUsageResult, d as ReservationFinalStatus, e as ReserveInput, f as ReserveResult, r as runMigrations } from '../PostgresModelBudgetStore-CFbEEdQL.js';
+import { e as PostgresMeteringStore, C as CreditLedgerEntry } from '../PostgresModelBudgetStore-DWwh7ElQ.js';
+export { B as BudgetReservationAdmission, a as BudgetReservationAdmissionInput, b as BudgetReservationScope, F as FinishBudgetReservationInput, c as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, d as ModelBudgetExceededError, P as PostgresBudgetReservationStore, f as PostgresModelBudgetStore, R as RecordUsageInput, g as RecordUsageResult, h as ReservationFinalStatus, i as ReserveBudgetInput, j as ReserveBudgetResult, k as ReserveInput, l as ReserveResult, U as UserBudgetExceededError, r as runMigrations } from '../PostgresModelBudgetStore-DWwh7ElQ.js';
 import { T as TelemetrySink } from '../telemetry-DR18MeI0.js';
 import { AgentMeteringSink } from '@hachej/boring-agent/server';
 import 'better-auth';
 import 'drizzle-orm/postgres-js';
 
+interface RenderedEmail {
+    to: string;
+    subject: string;
+    html: string;
+    text: string;
+}
+interface MailTransport {
+    send(email: RenderedEmail): Promise<{
+        id: string;
+    }>;
+}
+declare class MailDeliveryError extends Error {
+    readonly statusCode?: number;
+    constructor(message: string, statusCode?: number);
+}
+type Env = 'production' | 'development' | 'test';
+declare function createMailTransport(url: string, from: string, env?: Env): MailTransport;
+
+interface PostSignupUser {
+    id: string;
+    email: string;
+    name: string;
+    [key: string]: unknown;
+}
+interface PostSignupHookDeps {
+    config: CoreConfig;
+    workspaceStore: WorkspaceStore;
+    transport: MailTransport | null;
+    logger?: {
+        warn: (obj: Record<string, unknown>, msg: string) => void;
+    };
+}
+declare function createPostSignupHook(deps: PostSignupHookDeps): (user: PostSignupUser & Record<string, unknown>, rawCtx: unknown) => Promise<void>;
+
+declare function requireWorkspaceMember(minimumRole?: MemberRole): preHandlerHookHandler;
+
+declare function createCoreApp(config: CoreConfig, options?: CreateCoreAppOptions): Promise<FastifyInstance<http.Server<typeof IncomingMessage, typeof http.ServerResponse>, IncomingMessage, http.ServerResponse<IncomingMessage>, fastify.FastifyBaseLogger, fastify.FastifyTypeProviderDefault>>;
+
+interface RoutesOptions {
+    sql?: postgres.Sql;
+    db?: Database;
+    userStore: UserStore;
+    workspaceStore?: WorkspaceStore;
+}
+declare const registerRoutes: FastifyPluginAsync<RoutesOptions>;
+
+declare function withUserSettingsWriteLock<T>(userId: string, appId: string, fn: () => Promise<T>): Promise<T>;
+
 declare const coreConfigSchema: z.ZodObject<{
     appId: z.ZodString;
     appName: z.ZodString;
@@ -275,36 +323,6 @@ declare const coreConfigSchema: z.ZodObject<{
 
 declare function safeRedirect(url: string, config: CoreConfig): string;
 
-declare function createCoreApp(config: CoreConfig, options?: CreateCoreAppOptions): Promise<FastifyInstance<http.Server<typeof IncomingMessage, typeof http.ServerResponse>, IncomingMessage, http.ServerResponse<IncomingMessage>, fastify.FastifyBaseLogger, fastify.FastifyTypeProviderDefault>>;
-
-interface RoutesOptions {
-    sql?: postgres.Sql;
-    db?: Database;
-    userStore: UserStore;
-    workspaceStore?: WorkspaceStore;
-}
-declare const registerRoutes: FastifyPluginAsync<RoutesOptions>;
-
-declare function withUserSettingsWriteLock<T>(userId: string, appId: string, fn: () => Promise<T>): Promise<T>;
-
-interface RenderedEmail {
-    to: string;
-    subject: string;
-    html: string;
-    text: string;
-}
-interface MailTransport {
-    send(email: RenderedEmail): Promise<{
-        id: string;
-    }>;
-}
-declare class MailDeliveryError extends Error {
-    readonly statusCode?: number;
-    constructor(message: string, statusCode?: number);
-}
-type Env = 'production' | 'development' | 'test';
-declare function createMailTransport(url: string, from: string, env?: Env): MailTransport;
-
 interface VerifyEmailData {
     to: string;
     verifyUrl: string;
@@ -349,24 +367,6 @@ interface RunCoreMigrationsFromEnvOptions {
 }
 declare function runCoreMigrationsFromEnv(options?: RunCoreMigrationsFromEnvOptions): Promise<void>;
 
-interface PostSignupUser {
-    id: string;
-    email: string;
-    name: string;
-    [key: string]: unknown;
-}
-interface PostSignupHookDeps {
-    config: CoreConfig;
-    workspaceStore: WorkspaceStore;
-    transport: MailTransport | null;
-    logger?: {
-        warn: (obj: Record<string, unknown>, msg: string) => void;
-    };
-}
-declare function createPostSignupHook(deps: PostSignupHookDeps): (user: PostSignupUser & Record<string, unknown>, rawCtx: unknown) => Promise<void>;
-
-declare function requireWorkspaceMember(minimumRole?: MemberRole): preHandlerHookHandler;
-
 declare const registerWorkspaceRoutes: FastifyPluginAsync;
 
 declare const registerMemberRoutes: FastifyPluginAsync;

package/dist/server/index.js

@@ -25,15 +25,17 @@ import {
   validateConfig,
   validatePasswordStrength,
   withUserSettingsWriteLock
-} from "../chunk-CIRY3ZLU.js";
+} from "../chunk-DSENO5O4.js";
 import {
   InsufficientCreditError,
   ModelBudgetExceededError,
+  PostgresBudgetReservationStore,
   PostgresMeteringStore,
   PostgresModelBudgetStore,
+  UserBudgetExceededError,
   createDatabase,
   runMigrations
-} from "../chunk-EFM5IWTK.js";
+} from "../chunk-JBEKMYST.js";
 import {
   noopTelemetry,
   safeCapture
@@ -1598,9 +1600,11 @@ export {
   InsufficientCreditError,
   MailDeliveryError,
   ModelBudgetExceededError,
+  PostgresBudgetReservationStore,
   PostgresMeteringStore,
   PostgresModelBudgetStore,
   SIGNUP_GRANT_REASON,
+  UserBudgetExceededError,
   WorkspaceRuntimeSandboxHandleStore,
   authHook,
   buildCheckoutRequestBody,

package/dist/shared/index.d.ts

@@ -1,5 +1,5 @@
-import { U as User, C as CoreConfig, R as RuntimeConfig } from '../types-DVgeIw1d.js';
-export { g as CapabilitiesResponse, h as ConfigFetchError, i as ConfigValidationError, j as CoreCapabilities, E as ERROR_CODES, k as ErrorCode, H as HttpError, J as JsonValue, M as MemberRole, l as RateLimitEndpointOverride, m as SessionPayload, S as SessionState, c as Workspace, e as WorkspaceInvite, d as WorkspaceMember, f as WorkspaceRuntime } from '../types-DVgeIw1d.js';
+import { U as User, C as CoreConfig, R as RuntimeConfig } from '../types-DDnayJjI.js';
+export { a as CapabilitiesResponse, h as ConfigFetchError, i as ConfigValidationError, j as CoreCapabilities, E as ERROR_CODES, k as ErrorCode, H as HttpError, J as JsonValue, M as MemberRole, l as RateLimitEndpointOverride, m as SessionPayload, S as SessionState, b as Workspace, c as WorkspaceInvite, W as WorkspaceMember, d as WorkspaceRuntime } from '../types-DDnayJjI.js';
 export { a as TelemetryEvent, T as TelemetrySink, n as noopTelemetry, s as safeCapture } from '../telemetry-DR18MeI0.js';
 
 declare function isCoreEmailVerificationEnabled(config: Pick<CoreConfig, 'auth'>): boolean;

package/dist/{types-DVgeIw1d.d.ts → types-DDnayJjI.d.ts}

@@ -277,4 +277,4 @@ type CapabilitiesResponse = {
     [contributorName: string]: JsonValue | CoreCapabilities | undefined;
 };
 
-export { type CoreConfig as C, ERROR_CODES as E, HttpError as H, type JsonValue as J, type MemberRole as M, type RuntimeConfig as R, type SessionState as S, type User as U, type WorkspaceRuntimeResourceSelector as W, type WorkspaceRuntimeResource as a, type WorkspaceRuntimeResourceInput as b, type Workspace as c, type WorkspaceMember as d, type WorkspaceInvite as e, type WorkspaceRuntime as f, type CapabilitiesResponse as g, ConfigFetchError as h, ConfigValidationError as i, type CoreCapabilities as j, type ErrorCode as k, type RateLimitEndpointOverride as l, type SessionPayload as m };
+export { type CoreConfig as C, ERROR_CODES as E, HttpError as H, type JsonValue as J, type MemberRole as M, type RuntimeConfig as R, type SessionState as S, type User as U, type WorkspaceMember as W, type CapabilitiesResponse as a, type Workspace as b, type WorkspaceInvite as c, type WorkspaceRuntime as d, type WorkspaceRuntimeResourceSelector as e, type WorkspaceRuntimeResource as f, type WorkspaceRuntimeResourceInput as g, ConfigFetchError as h, ConfigValidationError as i, type CoreCapabilities as j, type ErrorCode as k, type RateLimitEndpointOverride as l, type SessionPayload as m };

package/dist/{connection-D9s7Td0I.d.ts → types-Dm11Zm56.d.ts}

@@ -1,6 +1,12 @@
-import { C as CoreConfig, c as Workspace, E as ERROR_CODES, M as MemberRole, d as WorkspaceMember, U as User, e as WorkspaceInvite, f as WorkspaceRuntime, W as WorkspaceRuntimeResourceSelector, a as WorkspaceRuntimeResource, b as WorkspaceRuntimeResourceInput, g as CapabilitiesResponse } from './types-DVgeIw1d.js';
 import { drizzle } from 'drizzle-orm/postgres-js';
 import postgres from 'postgres';
+import { C as CoreConfig, b as Workspace, E as ERROR_CODES, M as MemberRole, W as WorkspaceMember, U as User, c as WorkspaceInvite, d as WorkspaceRuntime, e as WorkspaceRuntimeResourceSelector, f as WorkspaceRuntimeResource, g as WorkspaceRuntimeResourceInput, a as CapabilitiesResponse } from './types-DDnayJjI.js';
+
+type Database = ReturnType<typeof drizzle>;
+declare function createDatabase(config: CoreConfig): {
+    db: Database;
+    sql: postgres.Sql;
+};
 
 interface WorkspaceProvisioner {
     provision(ctx: ProvisionContext): Promise<ProvisionResult>;
@@ -156,10 +162,4 @@ declare module 'fastify' {
     }
 }
 
-type Database = ReturnType<typeof drizzle>;
-declare function createDatabase(config: CoreConfig): {
-    db: Database;
-    sql: postgres.Sql;
-};
-
-export { type AuthProvider as A, type CreateCoreAppOptions as C, type Database as D, type ProvisionContext as P, type UserStore as U, type WorkspaceStore as W, type WorkspaceProvisioner as a, type CapabilitiesContributor as b, type ProvisionResult as c, createDatabase as d };
+export { type AuthProvider as A, type CreateCoreAppOptions as C, type Database as D, type ProvisionContext as P, type UserStore as U, type WorkspaceStore as W, type WorkspaceProvisioner as a, type CapabilitiesContributor as b, createDatabase as c, type ProvisionResult as d };

package/drizzle/0017_user_budget_reservations.sql

@@ -0,0 +1,15 @@
+ALTER TABLE "boring_model_budget_reservations" RENAME TO "boring_budget_reservations";--> statement-breakpoint
+ALTER TABLE "boring_budget_reservations" RENAME CONSTRAINT "boring_model_budget_reservations_amount_check" TO "boring_budget_reservations_amount_check";--> statement-breakpoint
+ALTER TABLE "boring_budget_reservations" RENAME CONSTRAINT "boring_model_budget_reservations_status_check" TO "boring_budget_reservations_status_check";--> statement-breakpoint
+ALTER TABLE "boring_budget_reservations" ADD COLUMN "scope" text DEFAULT 'model' NOT NULL;--> statement-breakpoint
+ALTER TABLE "boring_budget_reservations" ALTER COLUMN "provider" DROP NOT NULL;--> statement-breakpoint
+ALTER TABLE "boring_budget_reservations" ALTER COLUMN "model" DROP NOT NULL;--> statement-breakpoint
+ALTER TABLE "boring_budget_reservations" ADD CONSTRAINT "boring_budget_reservations_scope_check" CHECK ("scope" IN ('model', 'user'));--> statement-breakpoint
+ALTER TABLE "boring_budget_reservations" ADD CONSTRAINT "boring_budget_reservations_scope_shape_check" CHECK (("scope" = 'model' AND "provider" IS NOT NULL AND length(btrim("provider")) > 0 AND "model" IS NOT NULL AND length(btrim("model")) > 0) OR ("scope" = 'user' AND "provider" IS NULL AND "model" IS NULL));--> statement-breakpoint
+DROP INDEX IF EXISTS "boring_model_budget_reservations_active_user_run_idx";--> statement-breakpoint
+DROP INDEX IF EXISTS "boring_model_budget_reservations_budget_idx";--> statement-breakpoint
+DROP INDEX IF EXISTS "boring_model_budget_reservations_stale_idx";--> statement-breakpoint
+CREATE UNIQUE INDEX "boring_budget_reservations_active_user_run_idx" ON "boring_budget_reservations" USING btree ("scope","user_id","run_id") WHERE "boring_budget_reservations"."status" = 'active';--> statement-breakpoint
+CREATE INDEX "boring_budget_reservations_budget_idx" ON "boring_budget_reservations" USING btree ("scope","user_id","provider","model","period","status");--> statement-breakpoint
+CREATE INDEX "boring_budget_reservations_user_budget_idx" ON "boring_budget_reservations" USING btree ("scope","user_id","period","status");--> statement-breakpoint
+CREATE INDEX "boring_budget_reservations_stale_idx" ON "boring_budget_reservations" USING btree ("status","expires_at");

package/drizzle/meta/_journal.json

@@ -120,6 +120,13 @@
       "when": 1783123200000,
       "tag": "0016_workspace_managed_by",
       "breakpoints": true
+    },
+    {
+      "idx": 17,
+      "version": "7",
+      "when": 1783497600000,
+      "tag": "0017_user_budget_reservations",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-core",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "type": "module",
   "license": "MIT",
   "description": "Foundation package for boring-ui-v2 apps: DB, auth, config, HTTP app factory, and frontend app shell.",
@@ -55,7 +55,7 @@
   "dependencies": {
     "@fastify/cors": "^11.0.0",
     "@fastify/helmet": "^13.0.1",
-    "@fastify/rate-limit": "^11.0.0",
+    "@fastify/rate-limit": "^11.1.0",
     "@hookform/resolvers": "^5.4.0",
     "@react-email/components": "^1.0.12",
     "@react-email/render": "^2.0.9",
@@ -63,14 +63,14 @@
     "@zxcvbn-ts/core": "^4.1.2",
     "@zxcvbn-ts/language-common": "^4.1.2",
     "@zxcvbn-ts/language-en": "^4.1.1",
-    "better-auth": "^1.6.22",
+    "better-auth": "^1.6.23",
     "close-with-grace": "^2.2.0",
     "drizzle-orm": "^0.45.2",
     "fastify": "^5.9.0",
     "fastify-plugin": "^6.0.0",
     "isomorphic-dompurify": "^3.18.0",
     "lucide-react": "^1.21.0",
-    "nodemailer": "^9.0.1",
+    "nodemailer": "^9.0.3",
     "pino": "^10.3.1",
     "postgres": "^3.4.9",
     "posthog-node": "^5.38.5",
@@ -79,9 +79,9 @@
     "react-router-dom": "^7.18.0",
     "smol-toml": "^1.7.0",
     "zod": "^3.25.76",
-    "@hachej/boring-agent": "0.1.70",
-    "@hachej/boring-workspace": "0.1.70",
-    "@hachej/boring-ui-kit": "0.1.70"
+    "@hachej/boring-agent": "0.1.72",
+    "@hachej/boring-ui-kit": "0.1.72",
+    "@hachej/boring-workspace": "0.1.72"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",