@stacksjs/defaults 0.72.6 → 0.72.7

package/app/Actions/Auth/GenerateAuthenticationAction.ts

@@ -3,6 +3,7 @@ import { Action } from '@stacksjs/actions'
 import {
   generateAuthenticationOptions,
   getUserPasskeys,
+  passkeyDescriptors,
   storeWebAuthnChallenge,
 } from '@stacksjs/auth'
 import { config } from '@stacksjs/config'
@@ -31,13 +32,12 @@ export default new Action({
     const appUrl = config.app?.url || 'localhost'
     const rpID = new URL(appUrl.startsWith('http') ? appUrl : `https://${appUrl}`).hostname
 
-    const options: PublicKeyCredentialRequestOptionsJSON = await generateAuthenticationOptions({
+    const options = await generateAuthenticationOptions({
       rpID,
-      allowCredentials: userPasskeys.map(passkey => ({
-        id: passkey.id,
-        transports: ['internal'],
-      })),
-    })
+      // The JSON-vs-ArrayBuffer boundary lives in `passkeyDescriptors`; the
+      // narrowing goes away when ts-auth b59ad36 ships.
+      allowCredentials: passkeyDescriptors(userPasskeys) as unknown as Parameters<typeof generateAuthenticationOptions>[0]['allowCredentials'],
+    }) as unknown as PublicKeyCredentialRequestOptionsJSON
 
     // Persist the challenge server-side so `VerifyAuthenticationAction`
     // can consume it from the DB instead of trusting `body.challenge`.

package/app/Actions/Auth/GenerateRegistrationAction.ts

@@ -1,5 +1,5 @@
 import { Action } from '@stacksjs/actions'
-import { generateRegistrationOptions, getUserPasskeys, storeWebAuthnChallenge } from '@stacksjs/auth'
+import { generateRegistrationOptions, getUserPasskeys, passkeyDescriptors, storeWebAuthnChallenge } from '@stacksjs/auth'
 import { config } from '@stacksjs/config'
 
 export default new Action({
@@ -30,12 +30,17 @@ export default new Action({
     const options = await generateRegistrationOptions({
       rpName,
       rpID,
+      // The WebAuthn user handle. It was omitted entirely, and the generator
+      // does `new TextEncoder().encode(options.userID)` - so every passkey was
+      // registered against the handle "undefined", the same one for every
+      // user. `storePasskey` records the email as `webauthn_user_id`, so the
+      // email is the handle the two halves have to agree on.
+      userID: userEmail,
       userName: userEmail,
       attestationType: 'none',
-      excludeCredentials: userPasskeys.map(passkey => ({
-        id: passkey.id,
-        transports: ['internal'],
-      })),
+      // See `passkeyDescriptors` for the JSON-vs-ArrayBuffer boundary; the
+      // narrowing goes away when ts-auth b59ad36 ships.
+      excludeCredentials: passkeyDescriptors(userPasskeys) as unknown as Parameters<typeof generateRegistrationOptions>[0]['excludeCredentials'],
       authenticatorSelection: {
         residentKey: 'preferred',
         userVerification: 'preferred',

package/app/Actions/Auth/RegisterAction.ts

@@ -40,11 +40,14 @@ export default new Action({
       // — listener errors are caught by the wildcard handler so a flaky
       // welcome email doesn't fail registration. The `to` alias matches
       // the contract SendWelcomeEmail expects.
+      // `to` is what SendWelcomeEmail addresses the mail to, so it has to be
+      // a string; the registering address is the honest fallback if the
+      // freshly-created user could not be read back.
       dispatch('user:registered', {
         id: user?.id,
-        email: user?.email,
+        email: user?.email ?? email,
         name: user?.name,
-        to: user?.email,
+        to: user?.email ?? email,
       })
 
       // Same OAuth2-compatible payload LoginAction returns, so a client can

package/app/Actions/Auth/VerifyAuthenticationAction.ts

@@ -48,9 +48,11 @@ export default new Action({
     }
     const publicKey = new Uint8Array(Object.values(jsonParse)).buffer
 
-    // Convert challenge string to Uint8Array. The challenge is stored
-    // as base64url (the same form generateAuthenticationOptions emits).
-    const challengeBytes = Uint8Array.from(atob(expectedChallenge), c => c.charCodeAt(0))
+    // `consumeWebAuthnChallenge` already returns the bytes it stored. This
+    // used to run them through `atob()`, which stringifies a Uint8Array to
+    // "12,34,56..." before decoding it - so the challenge never matched and
+    // passkey authentication could not succeed.
+    const challengeBytes = expectedChallenge
 
     // Derive origin and rpID from app config instead of hardcoding localhost
     const appUrl = config.app?.url || 'http://localhost:3333'

package/app/Actions/Auth/VerifyRegistrationAction.ts

@@ -40,12 +40,16 @@ export default new Action({
     const expectedRPID = new URL(expectedOrigin).hostname
 
     try {
-      const verification = await verifyRegistrationResponse({
-        response: body.attResp,
+      // Positional, as the function is declared. Passing one options object
+      // meant `credential.response` was undefined, the read threw, the catch
+      // swallowed it and every registration came back `verified: false` -
+      // passkey registration could never succeed through this action.
+      const verification = await verifyRegistrationResponse(
+        body.attResp,
         expectedChallenge,
         expectedOrigin,
         expectedRPID,
-      })
+      )
 
       await setCurrentRegistrationOptions(user, verification)
 

package/app/Actions/Billable/CheckoutAction.ts

@@ -1,3 +1,4 @@
+import type { UserModel } from '@stacksjs/orm'
 import { Action } from '@stacksjs/actions'
 import { manageCheckout } from '@stacksjs/payments'
 import { response } from '@stacksjs/router'
@@ -18,7 +19,19 @@ export default new Action({
       cancel_url: 'https://localhost:3000/cancel',
     }
 
-    const session = await manageCheckout.create(user, params)
+    // Checkout needs the billable trait, which the default User model leaves
+    // OFF ("not every app bills through the User model"). Without it the
+    // methods manageCheckout calls - hasStripeId() and friends - are not on
+    // the record at all, so say which switch is missing instead of failing
+    // deeper in with "user.hasStripeId is not a function".
+    if (typeof (user as unknown as Partial<UserModel>).hasStripeId !== 'function') {
+      return response.json(
+        { message: 'Billing is not enabled. Set `traits.billable` on the User model to use checkout.' },
+        503,
+      )
+    }
+
+    const session = await manageCheckout.create(user as unknown as UserModel, params)
 
     return response.json({ url: session.url })
   },

package/app/Actions/Cms/AuthorDestroyAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Delete an author',
   method: 'DELETE',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
     const author = await Author.find(Number(id))
 
     if (!author) {

package/app/Actions/Cms/AuthorShowAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Fetch a single author by ID',
   method: 'GET',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
     const result = await Author.find(Number(id))
 
     if (!result) {

package/app/Actions/Cms/AuthorUpdateAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Update an existing author',
   method: 'PATCH',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
     const author = await Author.find(Number(id))
 
     if (!author) {

package/app/Actions/Cms/CategorizableDestroyAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Category Destroy ORM Action',
   method: 'DELETE',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     await categorizable.destroy(id)
 

package/app/Actions/Cms/CategorizableShowAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Category Show ORM Action',
   method: 'GET',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     const model = await categorizable.fetchById(id)
 

package/app/Actions/Cms/CategorizableUpdateAction.ts

@@ -1,4 +1,3 @@
-import type { CategorizableRequestType } from '@stacksjs/types'
 import { Action } from '@stacksjs/actions'
 import { categorizable } from '@stacksjs/cms'
 import { response } from '@stacksjs/router'
@@ -24,14 +23,14 @@ export default new Action({
       },
     })
 
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     const data = {
       name: request.get('name'),
       description: request.get('description'),
     }
 
-    const model = await categorizable.update(id, data)
+    const model = await categorizable.update({ id, ...data })
 
     return response.json(model)
   },

package/app/Actions/Cms/CommentDestroyAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Comment Destroy ORM Action',
   method: 'DELETE',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     await comments.destroy(id)
 

package/app/Actions/Cms/CommentShowAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Comment Show ORM Action',
   method: 'GET',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     const model = await comments.fetchCommentById(id)
 

package/app/Actions/Cms/CommentUpdateAction.ts

@@ -22,7 +22,7 @@ export default new Action({
         },
       },
     })
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     const data = {
       title: request.get('title'),

package/app/Actions/Cms/PageDestroyAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Page Destroy ORM Action',
   method: 'DELETE',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     await pages.destroy(id)
 

package/app/Actions/Cms/PageStoreAction.ts

@@ -1,6 +1,7 @@
 import { Action } from '@stacksjs/actions'
-import { authors, pages } from '@stacksjs/cms'
+import { pages } from '@stacksjs/cms'
 import { response } from '@stacksjs/router'
+import { requireSite } from '@stacksjs/sites'
 
 export default new Action({
   name: 'Page Store',
@@ -10,21 +11,20 @@ export default new Action({
   async handle(request) {
     await request.validate()
 
-    const author = await authors.findOrCreate({
-      name: 'Current User',
-      email: 'current@user.com',
-    })
+    // A page belongs to a site, and the site comes from the resolved request
+    // context rather than from the body: letting a caller name the site would
+    // let them write into somebody else's website.
+    const site = requireSite()
 
-    const data = {
-      author_id: author.id,
+    const model = await pages.store({
+      site_id: site.id,
       title: request.get('title'),
+      slug: request.get('slug'),
       template: request.get('template'),
-      content: request.get('content'),
-      views: 0,
-      published_at: Date.now(),
-    }
-
-    const model = await pages.store(data)
+      meta_description: request.get('meta_description'),
+      status: request.get('status') ?? 'draft',
+      blocks: request.get('blocks'),
+    } as Parameters<typeof pages.store>[0])
 
     return response.json(model)
   },

package/app/Actions/Cms/PageUpdateAction.ts

@@ -1,6 +1,5 @@
 import { Action } from '@stacksjs/actions'
 import { pages } from '@stacksjs/cms'
-import { formatDate } from '@stacksjs/orm'
 import { response } from '@stacksjs/router'
 
 export default new Action({
@@ -11,16 +10,20 @@ export default new Action({
   async handle(request) {
     await request.validate()
 
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
-    const data = {
-      title: request.get('title'),
-      template: request.get('template'),
-      content: request.get('content'),
-      updated_at: formatDate(new Date()),
+    // Only what the request actually sent. Spreading every field would write
+    // `undefined` over a title the caller never mentioned, and a slug or
+    // blocks value that is present goes through the document path in
+    // `pages.update`, which re-derives the path and snapshots a revision.
+    const data: Record<string, unknown> = {}
+    for (const field of ['title', 'slug', 'template', 'meta_description', 'status', 'blocks'] as const) {
+      const value = request.get(field)
+      if (value !== undefined && value !== null)
+        data[field] = value
     }
 
-    const model = await pages.update(id, data)
+    const model = await pages.update(id, data as Parameters<typeof pages.update>[1])
 
     return response.json(model)
   },

package/app/Actions/Cms/PostDestroyAction.ts

@@ -8,7 +8,7 @@ export default new Action({
   description: 'Post Destroy ORM Action',
   method: 'DELETE',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     await posts.destroy(id)
 

package/app/Actions/Cms/PostShowAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Post Show ORM Action',
   method: 'GET',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     const model = await posts.fetchById(id)
 

package/app/Actions/Cms/PostUpdateAction.ts

@@ -14,7 +14,7 @@ export default new Action({
   async handle(request) {
     await request.validate()
 
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     const data = {
       title: request.get('title'),

package/app/Actions/Cms/TaggableDestroyAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Tag Destroy ORM Action',
   method: 'DELETE',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     const model = await tags.destroy(id)
 

package/app/Actions/Cms/TaggableShowAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Tag Show ORM Action',
   method: 'GET',
   async handle(request: RequestInstance) {
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
 
     const model = await tags.fetchTagById(id)
 

package/app/Actions/Cms/TaggableUpdateAction.ts

@@ -23,14 +23,14 @@ export default new Action({
       },
     })
 
-    const id = request.getParam('id')
+    const id = Number(request.getParam('id'))
     const data = {
       id,
       name: request.get('name'),
       description: request.get('description'),
     }
 
-    const model = await tags.update(id, data)
+    const model = await tags.update(data)
 
     return response.json(model)
   },

package/app/Actions/Commerce/GiftCardUpdateBalanceAction.ts

@@ -7,7 +7,7 @@ export default new Action({
   description: 'Update the balance of a gift card',
   method: 'POST',
 
-  async handle({ request }) {
+  async handle(request) {
     const { id, amount } = request.all()
 
     if (!id || !amount) {

package/app/Actions/Commerce/WaitlistProductAnalyticsAction.ts

@@ -7,8 +7,12 @@ export default new Action({
   description: 'WaitlistProduct Analytics Action',
   method: 'GET',
   async handle(request: RequestInstance) {
-    const startDate = request.getParam<Date>('startDate')
-    const endDate = request.getParam<Date>('endDate')
+    // Params arrive as strings; `getParam` has no type parameter to change that.
+    const startDate = new Date(String(request.getParam('startDate')))
+    const endDate = new Date(String(request.getParam('endDate')))
+
+    if (Number.isNaN(startDate.getTime()) || Number.isNaN(endDate.getTime()))
+      return response.json({ message: 'startDate and endDate must be valid dates.' }, 422)
 
     const [
       countBySource,

package/app/Actions/Commerce/WaitlistProductQuantityDistributionAction.ts

@@ -7,8 +7,12 @@ export default new Action({
   description: 'WaitlistProduct Quantity Distribution Action',
   method: 'GET',
   async handle(request: RequestInstance) {
-    const startDate = request.getParam<Date>('startDate')
-    const endDate = request.getParam<Date>('endDate')
+    // Params arrive as strings; `getParam` has no type parameter to change that.
+    const startDate = new Date(String(request.getParam('startDate')))
+    const endDate = new Date(String(request.getParam('endDate')))
+
+    if (Number.isNaN(startDate.getTime()) || Number.isNaN(endDate.getTime()))
+      return response.json({ message: 'startDate and endDate must be valid dates.' }, 422)
 
     const quantityDistribution = await waitlists.products.fetchCountByAllQuantities(startDate, endDate)
 

package/app/Actions/Commerce/WaitlistProductStatusAction.ts

@@ -7,8 +7,14 @@ export default new Action({
   description: 'WaitlistProduct Status Statistics Action',
   method: 'GET',
   async handle(request: RequestInstance) {
-    const startDate = request.getParam<Date>('startDate')
-    const endDate = request.getParam<Date>('endDate')
+    // Params arrive as strings; `getParam` has no type parameter to change
+    // that, and asking for `<Date>` only made the file stop typechecking
+    // while still handing the query layer a string.
+    const startDate = new Date(String(request.getParam('startDate')))
+    const endDate = new Date(String(request.getParam('endDate')))
+
+    if (Number.isNaN(startDate.getTime()) || Number.isNaN(endDate.getTime()))
+      return response.json({ message: 'startDate and endDate must be valid dates.' }, 422)
 
     const [
       totalCount,

package/app/Actions/Commerce/WaitlistProductTimeSeriesAction.ts

@@ -7,8 +7,12 @@ export default new Action({
   description: 'WaitlistProduct Time Series Action',
   method: 'GET',
   async handle(request: RequestInstance) {
-    const startDate = request.getParam<Date>('startDate')
-    const endDate = request.getParam<Date>('endDate')
+    // Params arrive as strings; `getParam` has no type parameter to change that.
+    const startDate = new Date(String(request.getParam('startDate')))
+    const endDate = new Date(String(request.getParam('endDate')))
+
+    if (Number.isNaN(startDate.getTime()) || Number.isNaN(endDate.getTime()))
+      return response.json({ message: 'startDate and endDate must be valid dates.' }, 422)
 
     const timeSeriesData = await waitlists.products.fetchCountByDateGrouped(startDate, endDate)
 

package/app/Actions/Dashboard/Analytics/campaign-analytics.ts

@@ -115,7 +115,12 @@ export function buildCampaignAnalytics(
   }
   const channels = [...channelMap.entries()]
     .map(([key, rows]) => {
-      const [type, currency] = key.split(':')
+      // `split` gives `string | undefined` per element; the keys are built as
+      // `type:currency` a few lines up, so an empty string is the honest
+      // fallback for a malformed one rather than a crash in `titleCase`.
+      const [rawType, rawCurrency] = key.split(':')
+      const type = rawType ?? ''
+      const currency = rawCurrency ?? ''
       return {
         type,
         name: titleCase(type),

package/app/Actions/Dashboard/Analytics/request-analytics.ts

@@ -1,3 +1,4 @@
+import type { ReadableRecord } from '@stacksjs/orm'
 export type AnalyticsRange = 'day' | 'week' | 'month' | 'year'
 export type AnalyticsScope = 'all' | 'blog' | 'commerce'
 
@@ -11,9 +12,8 @@ export interface RequestAnalyticsRow {
   createdAt: string
 }
 
-export interface AnalyticsModelRecord {
-  get: (key: string) => unknown
-}
+/** The shared shape, kept under this name for the helpers below. */
+export type AnalyticsModelRecord = ReadableRecord
 
 interface TrafficBucket {
   date: string

package/app/Actions/Dashboard/Buddy/buddy-chat.ts

@@ -1,8 +1,16 @@
 import type { AIMessage, AIProvider, ConfiguredAIOptions } from '@stacksjs/ai'
 
+/**
+ * The two keys this check reads out of the environment.
+ *
+ * The index signature is what makes `process.env` assignable: `ProcessEnv`
+ * declares no named members, so a bare two-key interface shares nothing with
+ * it and TypeScript rejects the call - the one thing every caller passes.
+ */
 export interface BuddyProviderEnvironment {
   ANTHROPIC_API_KEY?: string
   OPENAI_API_KEY?: string
+  [key: string]: string | undefined
 }
 
 export function resolveBuddyProvider(config: ConfiguredAIOptions): AIProvider {

package/app/Actions/Dashboard/Ci/runner-pressure-monitor.ts

@@ -53,7 +53,8 @@ async function appendSamples(snapshot: DashboardData, nowIso: string): Promise<v
   // Insert one row per org. Cross-dialect multi-row INSERT keeps it
   // a single round-trip even for the typical 5-org fleet.
   const rows = orgs.map((org) => {
-    const r = runners[org]
+    // An org with no sample yet reads as zero pressure rather than throwing.
+    const r = runners[org] ?? { running: 0, queued: 0, cap: 0 }
     return { org, running: r.running, queued: r.queued, cap: r.cap, sampled_at: nowIso }
   })
   await db.insertInto('ci_runner_samples').values(rows as any).execute()

package/app/Actions/Dashboard/Cloud/cloud-overview.ts

@@ -420,7 +420,9 @@ function serverlessOverview(config: CloudRecord): {
       serviceDetails: DashboardCloudResourceDetail[] = [],
     ) => {
       const id = `serverless:${environmentName}:${suffix}`
-      const presentation = servicePresentation[type]
+      // `Record<string, …>` makes every lookup optional; an unknown service
+      // type gets a neutral chip rather than crashing the whole overview.
+      const presentation = servicePresentation[type] ?? { color: '#64748B', icon: 'i-hugeicons-cube' }
       services.push({
         id,
         name,

package/app/Actions/Dashboard/Commerce/CommerceDashboardAction.ts

@@ -35,15 +35,23 @@ export default new Action({
       const customerIds = [...new Set(orderRows
         .map(order => order.customerId)
         .filter(Boolean))]
-      const orderItems = orderIds.length > 0
-        ? await OrderItem.where('order_id', 'in', orderIds).get()
+
+      // The normalizers hand back identifiers as strings (a record may key on
+      // a uuid), but these columns are numeric, so they go back to numbers at
+      // the query boundary - the same conversion CommerceOrdersAction does.
+      const numericOrderIds = orderIds.map(Number).filter(Number.isSafeInteger)
+      const numericCustomerIds = customerIds.map(Number).filter(Number.isSafeInteger)
+
+      const orderItems = numericOrderIds.length > 0
+        ? await OrderItem.whereIn('order_id', numericOrderIds).get()
         : []
       const orderItemRows = orderItems.map(normalizeCommerceDashboardOrderItem)
       const productIds = [...new Set(orderItemRows.map(item => item.productId))]
+      const numericProductIds = productIds.map(Number).filter(Number.isSafeInteger)
 
       const [products, customers] = await Promise.all([
-        productIds.length > 0 ? Product.where('id', 'in', productIds).get() : [],
-        customerIds.length > 0 ? Customer.where('id', 'in', customerIds).get() : [],
+        numericProductIds.length > 0 ? Product.whereIn('id', numericProductIds).get() : [],
+        numericCustomerIds.length > 0 ? Customer.whereIn('id', numericCustomerIds).get() : [],
       ])
 
       return buildCommerceDashboard(

package/app/Actions/Dashboard/Commerce/CommerceOrdersAction.ts

@@ -28,7 +28,7 @@ export default new Action({
       const [customers, coupons, items] = await Promise.all([
         Customer.orderBy('name', 'asc').limit(500).get(),
         Coupon.orderBy('id', 'asc').limit(500).get(),
-        numericOrderIds.length > 0 ? OrderItem.where('order_id', 'in', numericOrderIds).get() : [],
+        numericOrderIds.length > 0 ? OrderItem.whereIn('order_id', numericOrderIds).get() : [],
       ])
       const customerContexts = customers.map(normalizeOrderCustomerContext)
       const customerMap = new Map(customerContexts.map(customer => [customer.id, customer.context]))

package/app/Actions/Dashboard/Commerce/CommercePosCheckoutAction.ts

@@ -103,7 +103,7 @@ async function existingReceipt(order: any) {
     receiptId(field(item, 'product_id', 'productId'), `OrderItem ${index + 1}`, 'product_id'),
   )
   const [products, payments] = await Promise.all([
-    productIds.length > 0 ? Product.where('id', 'in', productIds).get() : [],
+    productIds.length > 0 ? Product.whereIn('id', productIds).get() : [],
     Payment.where('order_id', orderId).get(),
   ])
   const names = new Map(products.map((product) => {
@@ -242,7 +242,7 @@ export default new Action({
     let taxRates
     try {
       const [productRows, categories, manufacturers, persistedTaxRates] = await Promise.all([
-        Product.where('id', 'in', productIds).get(),
+        Product.whereIn('id', productIds).get(),
         Category.orderBy('name', 'asc').limit(500).get(),
         Manufacturer.orderBy('manufacturer', 'asc').limit(500).get(),
         TaxRate.orderBy('id', 'asc').limit(500).get(),

package/app/Actions/Dashboard/Commerce/CommercePrintLogsAction.ts

@@ -93,7 +93,7 @@ export default new Action({
       const printDeviceIds = new Set(printDevices.map(device =>
         commerceIdentifier(commerceValue(device, 'id', 'uuid'), 'PrintDevice'),
       ))
-      const records = rows.map(row => normalizePrintLogRecord(row, printDeviceIds))
+      const records = rows.map((row: Record<string, unknown>) => normalizePrintLogRecord(row, printDeviceIds))
 
       return {
         records,