@stacksjs/defaults 0.72.98 → 0.72.100

package/ai/skills/stacks-scheduler/SKILL.md

@@ -47,7 +47,7 @@ The `Schedule` class is the core scheduling API. The lowercase `schedule` export
 import { schedule } from '@stacksjs/scheduler'
 
 // Static factory methods — each returns UntimedSchedule
-schedule.job(name: string): UntimedSchedule      // Runs a job by name via runJob()
+schedule.job(name: JobName): UntimedSchedule     // Runs a job by name via runJob()
 schedule.action(name: string): UntimedSchedule    // Runs an action by name via runAction()
 schedule.command(cmd: string): UntimedSchedule    // Runs a shell command via runCommand()
 

package/app/Actions/Dashboard/Commerce/CommerceCustomersAction.ts

@@ -21,7 +21,7 @@ export default new Action({
       return {
         records,
         summary: summarizeCommerceCustomers(records),
-        currency: normalizeCommerceCustomerCurrency((config as any).commerce?.currency),
+        currency: normalizeCommerceCustomerCurrency(config.commerce?.currency),
       }
     }
     catch (error) {

package/app/Actions/Dashboard/Commerce/CommerceDeliveryAction.ts

@@ -24,7 +24,7 @@ export default new Action({
         allRoutes,
         allZones,
         allDrivers,
-        (config as any).commerce?.currency,
+        config.commerce?.currency,
       )
     }
     catch (error) {

package/app/Actions/Dashboard/Commerce/CommerceOrdersAction.ts

@@ -50,7 +50,7 @@ export default new Action({
           .sort((left, right) => left.label.localeCompare(right.label)),
         statuses: [...new Set([...defaultStatuses, ...records.map(record => record.status)])],
         orderTypes: [...new Set([...defaultTypes, ...records.map(record => record.orderType)])],
-        defaultCurrency: commerceCurrency((config as any).commerce?.currency, 'Commerce configuration'),
+        defaultCurrency: commerceCurrency(config.commerce?.currency, 'Commerce configuration'),
       }
     }
     catch (error) {

package/app/Actions/Dashboard/Commerce/CommercePosAction.ts

@@ -53,7 +53,7 @@ export default new Action({
           .filter(isCommercePosCustomerActive)
           .map(normalizeCommercePosCustomer),
         taxRate: selectCommercePosTaxRate(taxRates),
-        defaultCurrency: normalizeCommerceCurrency((config as any).commerce?.currency),
+        defaultCurrency: normalizeCommerceCurrency(config.commerce?.currency),
         paymentMethods: [{ id: 'cash', label: 'Cash' }],
         summary: {
           products: records.length,

package/app/Actions/Dashboard/Commerce/CommercePosCheckoutAction.ts

@@ -285,7 +285,7 @@ export default new Action({
       return dashboardOperationalError(error, 'Sale totals could not be calculated.', 'CommercePosCheckoutAction')
     }
 
-    const currency = normalizeCommerceCurrency((config as any).commerce?.currency)
+    const currency = normalizeCommerceCurrency(config.commerce?.currency)
     const transactionId = randomUUIDv7()
     const referenceNumber = `POS-${transactionId.slice(0, 12).toUpperCase()}`
     let result

package/app/Actions/Dashboard/Commerce/CommerceProductDetailAction.ts

@@ -58,7 +58,7 @@ export default new Action({
         reviews: summarizeProductReviews(reviews),
         categories: categoryOptions,
         manufacturers: manufacturerOptions,
-        defaultCurrency: normalizeCommerceCurrency((config as any).commerce?.currency),
+        defaultCurrency: normalizeCommerceCurrency(config.commerce?.currency),
       }
     }
     catch (error) {

package/app/Actions/Dashboard/Commerce/CommerceProductsAction.ts

@@ -52,7 +52,7 @@ export default new Action({
         summary: summarizeCommerceProducts(records),
         categories: categoryOptions,
         manufacturers: manufacturerOptions,
-        defaultCurrency: normalizeCommerceCurrency((config as any).commerce?.currency),
+        defaultCurrency: normalizeCommerceCurrency(config.commerce?.currency),
       }
     }
     catch (error) {

package/app/Actions/Dashboard/Content/content-input.ts

@@ -54,12 +54,12 @@ export function slugify(value: string): string {
  * query builder's types want a table union rather than a `string`.
  */
 export async function findRow(table: string, id: number, database: typeof db = db): Promise<unknown> {
-  return await (database as any).selectFrom(table).selectAll().where('id', '=', id).executeTakeFirst()
+  return await database.selectFrom(table).selectAll().where('id', '=', id).executeTakeFirst()
 }
 
 /** Whether a row with this id exists — the 404 check every write shares. */
 export async function rowExists(table: string, id: number, database: typeof db = db): Promise<boolean> {
-  const row = await (database as any).selectFrom(table).select(['id']).where('id', '=', id).executeTakeFirst()
+  const row = await database.selectFrom(table).select(['id']).where('id', '=', id).executeTakeFirst()
 
   return Boolean(row)
 }

package/app/Actions/Dashboard/Content/post-input.ts

@@ -116,7 +116,7 @@ async function replacePostPivot(
   relatedIds: number[],
   now: string,
 ): Promise<void> {
-  await (database as any)
+  await database
     .deleteFrom(table)
     .where(ownerKey, '=', postId)
     .where(typeKey, '=', 'posts')
@@ -125,7 +125,7 @@ async function replacePostPivot(
   if (relatedIds.length === 0)
     return
 
-  await (database as any)
+  await database
     .insertInto(table)
     .values(relatedIds.map(relatedId => ({
       [foreignKey]: relatedId,
@@ -146,12 +146,12 @@ export async function syncPostRelations(database: typeof db, postId: number, pay
 
 /** Removes both post pivot sets on the caller's database or transaction. */
 export async function detachPostRelations(database: typeof db, postId: number): Promise<void> {
-  await (database as any)
+  await database
     .deleteFrom('categorizable_models')
     .where('categorizable_id', '=', postId)
     .where('categorizable_type', '=', 'posts')
     .execute()
-  await (database as any)
+  await database
     .deleteFrom('taggable_models')
     .where('taggable_id', '=', postId)
     .where('taggable_type', '=', 'posts')

package/app/Actions/Dashboard/Email/inbox-request.ts

@@ -5,7 +5,7 @@ import { response } from '@stacksjs/router'
 import { defaultMailbox } from './mail-preference'
 
 function configuredMailDomain(): string {
-  const email = (config as any)?.email || {}
+  const email = config?.email || {}
   const fromAddress = String(email.from?.address || '').trim()
   const fromDomain = fromAddress.includes('@') ? fromAddress.split('@').at(-1) : ''
   return String(email.domain || fromDomain || 'stacksjs.com').trim().toLowerCase()

package/app/Actions/Dashboard/Email/mail-preference.ts

@@ -26,7 +26,7 @@ export interface MailPreferenceInput {
 }
 
 export function defaultMailbox(): string {
-  const email = (config as any)?.email || {}
+  const email = config?.email || {}
   const domain = String(email.domain || 'stacksjs.com')
   const configured = Array.isArray(email.mailboxes) ? email.mailboxes[0] : undefined
   const mailbox = typeof configured === 'string' ? configured : configured?.email

package/app/Actions/Dashboard/Marketing/CampaignIndexAction.ts

@@ -55,7 +55,7 @@ export default new Action({
         sendRows,
         openedRows,
         clickedRows,
-        String((config as any).commerce?.currency || 'USD').toUpperCase(),
+        String(config.commerce?.currency || 'USD').toUpperCase(),
       )
     }
     catch (error) {

package/app/Actions/Dashboard/Marketing/CampaignStoreAction.ts

@@ -15,7 +15,7 @@ export default new Action({
   async handle(request: RequestInstance) {
     const data = campaignWriteData(
       await request.all(),
-      String((config as any).commerce?.currency || 'USD').toUpperCase(),
+      String(config.commerce?.currency || 'USD').toUpperCase(),
     )
     const validationError = validateCampaignWriteData(data)
     if (validationError)

package/app/Actions/Dashboard/Marketing/CampaignUpdateAction.ts

@@ -18,7 +18,7 @@ export default new Action({
       return response.json({ message: 'A valid campaign id is required.' }, 400)
     const data = campaignWriteData(
       await request.all(),
-      String((config as any).commerce?.currency || 'USD').toUpperCase(),
+      String(config.commerce?.currency || 'USD').toUpperCase(),
     )
     const validationError = validateCampaignWriteData(data)
     if (validationError)

package/app/Actions/Dashboard/Teams/TeamInvitationDestroyAction.ts

@@ -25,7 +25,7 @@ export default new Action({
 
     let invitation
     try {
-      invitation = await (db as any)
+      invitation = await db
         .selectFrom('team_invitations')
         .where('id', '=', invitationId)
         .where('team_id', '=', teamId)
@@ -41,7 +41,7 @@ export default new Action({
       return response.json({ message: 'Only pending invitations can be revoked.' }, 409)
 
     try {
-      const result = await (db as any)
+      const result = await db
         .updateTable('team_invitations')
         .set({
           status: 'revoked',

package/app/Actions/Dashboard/Teams/TeamInvitationResendAction.ts

@@ -28,7 +28,7 @@ export default new Action({
 
     let invitation
     try {
-      invitation = await (db as any)
+      invitation = await db
         .selectFrom('team_invitations')
         .innerJoin('teams', 'teams.id', '=', 'team_invitations.team_id')
         .where('team_invitations.id', '=', invitationId)
@@ -55,7 +55,7 @@ export default new Action({
     const tokenHash = hashInvitationToken(token)
     const expiresAt = invitationExpiresAt()
     try {
-      const result = await (db as any)
+      const result = await db
         .updateTable('team_invitations')
         .set({
           token_hash: tokenHash,

package/app/Actions/Dashboard/Teams/TeamInviteAction.ts

@@ -69,7 +69,7 @@ export default new Action({
             .where('email', '=', email)
             .select(['id'])
             .executeTakeFirst(),
-          (trx as any)
+          trx
             .selectFrom('team_invitations')
             .where('team_id', '=', teamId)
             .where('email', '=', email)
@@ -78,7 +78,7 @@ export default new Action({
             .executeTakeFirst(),
         ])
         if (existingUser) {
-          const membership = await (trx as any)
+          const membership = await trx
             .selectFrom('team_members')
             .where('team_id', '=', teamId)
             .where('user_id', '=', Number(existingUser.id))
@@ -92,7 +92,7 @@ export default new Action({
           return response.json({ message: 'A pending invitation already exists. Resend or revoke it from the invitation list.' }, 409)
         }
         if (pending) {
-          const expired = await (trx as any)
+          const expired = await trx
             .updateTable('team_invitations')
             .set({ status: 'expired', pending_key: null, updated_at: sqlTimestamp() })
             .where('id', '=', Number(pending.id))
@@ -103,7 +103,7 @@ export default new Action({
             throw new TeamStateConflictError('The pending invitation changed before it could be replaced.')
         }
 
-        await (trx as any)
+        await trx
           .insertInto('team_invitations')
           .values({
             team_id: teamId,
@@ -119,7 +119,7 @@ export default new Action({
           })
           .execute()
 
-        const invitation = await (trx as any)
+        const invitation = await trx
           .selectFrom('team_invitations')
           .where('token_hash', '=', tokenHash)
           .select(['id'])

package/app/Actions/Dashboard/Teams/TeamMemberDestroyAction.ts

@@ -22,7 +22,7 @@ export default new Action({
     try {
       result = await db.transaction(async (rawTrx) => {
         const trx = rawTrx as unknown as typeof db
-        const member = await (trx as any)
+        const member = await trx
           .selectFrom('team_members')
           .where('id', '=', memberId)
           .where('team_id', '=', teamId)
@@ -33,7 +33,7 @@ export default new Action({
         if (member.role === 'owner')
           return response.json({ message: 'Transfer team ownership before removing the owner.' }, 409)
 
-        const deleted = await (trx as any)
+        const deleted = await trx
           .deleteFrom('team_members')
           .where('id', '=', memberId)
           .where('team_id', '=', teamId)

package/app/Actions/Dashboard/Teams/TeamMemberUpdateAction.ts

@@ -27,7 +27,7 @@ export default new Action({
     try {
       return await db.transaction(async (rawTrx) => {
         const trx = rawTrx as unknown as typeof db
-        const member = await (trx as any)
+        const member = await trx
           .selectFrom('team_members')
           .where('id', '=', memberId)
           .where('team_id', '=', teamId)
@@ -45,7 +45,7 @@ export default new Action({
         if (!['active', 'suspended'].includes(status))
           return response.json({ message: 'Choose a valid member status.' }, 422)
 
-        const updated = await (trx as any)
+        const updated = await trx
           .updateTable('team_members')
           .set({ role, status, updated_at: sqlTimestamp() })
           .where('id', '=', memberId)

package/app/Actions/Dashboard/Teams/TeamPeopleIndexAction.ts

@@ -32,7 +32,7 @@ export default new Action({
 
     try {
       const [members, invitations] = await Promise.all([
-        (db as any)
+        db
           .selectFrom('team_members')
           .innerJoin('users', 'users.id', '=', 'team_members.user_id')
           .where('team_members.team_id', '=', teamId)
@@ -47,7 +47,7 @@ export default new Action({
           ])
           .orderBy('users.name', 'asc')
           .execute(),
-        (db as any)
+        db
           .selectFrom('team_invitations')
           .where('team_id', '=', teamId)
           .where('status', '=', 'pending')

package/app/Actions/Dashboard/Teams/team-invitation-delivery.ts

@@ -45,7 +45,7 @@ export async function deliverTeamInvitation(input: DeliveryInput): Promise<void>
   }
 
   try {
-    const result = await (db as any)
+    const result = await db
       .updateTable('team_invitations')
       .set({
         delivery_status: 'sent',
@@ -66,7 +66,7 @@ export async function deliverTeamInvitation(input: DeliveryInput): Promise<void>
 }
 
 export async function markTeamInvitationDeliveryFailed(id: number, tokenHash: string, error: string): Promise<void> {
-  await (db as any)
+  await db
     .updateTable('team_invitations')
     .set({
       delivery_status: 'failed',

package/app/Events.ts

@@ -1,4 +1,4 @@
-import type { Events } from '@stacksjs/types'
+import { defineEvents } from '@stacksjs/events'
 
 /**
  * **Events Configuration**
@@ -6,9 +6,14 @@ import type { Events } from '@stacksjs/types'
  * This configuration defines all of your events. Because Stacks is fully-typed, you may
  * hover any of the options below and the definitions will be provided. In case you
  * have any questions, feel free to reach out via Discord or GitHub Discussions.
+ *
+ * Both halves of every entry are checked. The key must be an event that exists -
+ * declare your own on `AppEvents` in `@stacksjs/events` - and each listener must
+ * name a file under `app/Listeners/` or `app/Actions/`, or one of the framework
+ * defaults behind them.
  */
-export default {
-  // eventName: ['Listener1', 'Listener2'] -> listeners default to ./app/actions/*
+export default defineEvents({
+  // eventName: ['Listener1', 'Listener2'] -> listeners resolve from ./app/Listeners/*, then ./app/Actions/*
   'user:registered': ['SendWelcomeEmail'],
   'user:created': ['NotifyUser'],
-} satisfies Events
+})

package/app/Gates.ts

@@ -1,4 +1,5 @@
 import type { UserModel } from '@stacksjs/orm'
+import { defineGates } from '@stacksjs/auth'
 
 /**
  * Authorization Gates Configuration
@@ -7,101 +8,98 @@ import type { UserModel } from '@stacksjs/orm'
  * Gates provide a simple way to authorize actions, while policies
  * organize authorization logic around particular models.
  *
- * @see https://stacksjs.org/docs/security/authorization
- */
-
-/**
- * Gate definitions
+ * Registered at boot by `initializeAuthorization()`, which every entry point
+ * comes through - HTTP, `buddy seed`, a scheduled job, a console command.
  *
- * Simple ability checks that don't require a model.
- *
- * @example
- * // In your code:
- * import { Gate } from '@stacksjs/auth'
- *
- * if (await Gate.allows('edit-settings', user)) {
- *   // User can edit settings
- * }
+ * @see https://stacksjs.org/docs/security/authorization
  */
-export const gates = {
+export default defineGates({
   /**
-   * Check if user can access admin area
+   * Gate definitions
+   *
+   * Simple ability checks that don't require a model. The names below are what
+   * `Gate.allows('...')` offers as completions.
+   *
+   * @example
+   * import { Gate } from '@stacksjs/auth'
+   *
+   * if (await Gate.allows('edit-settings', user)) {
+   *   // User can edit settings
+   * }
    */
-  'access-admin': (user: UserModel | null) => {
-    return user?.email?.endsWith('@stacksjs.org') ?? false
+  gates: {
+    /** Check if user can access admin area */
+    'access-admin': (user: UserModel | null) => {
+      return user?.email?.endsWith('@stacksjs.org') ?? false
+    },
+
+    /** Check if user can edit application settings */
+    'edit-settings': (user: UserModel | null) => {
+      // Add your logic here
+      return user !== null
+    },
+
+    /** Check if user can view dashboard */
+    'view-dashboard': (user: UserModel | null) => {
+      return user !== null
+    },
+
+    // Add more gates here...
+    // 'ability-name': (user, ...args) => boolean,
   },
 
   /**
-   * Check if user can edit application settings
+   * Policy mappings
+   *
+   * Map model names to their policy classes. Policy files live in
+   * `app/Policies/`, or in the framework defaults behind it. Both halves are
+   * checked: the key names a model that exists, the value a policy that does.
+   *
+   * A policy whose file is named `<Model>Policy.ts` is picked up by convention
+   * and does not need an entry here. An entry WINS over the convention, which
+   * is the point of writing one.
+   *
+   * @example
+   * // Simple mapping (uses PostPolicy for the Post model)
+   * Post: 'PostPolicy',
+   *
+   * // Or with config:
+   * Post: {
+   *   policy: 'PostPolicy',
+   *   model: 'Post',
+   * },
    */
-  'edit-settings': (user: UserModel | null) => {
-    // Add your logic here
-    return user !== null
+  policies: {
+    // Post: 'PostPolicy',
+    // User: 'UserPolicy',
+    // Comment: 'CommentPolicy',
   },
 
   /**
-   * Check if user can view dashboard
+   * Before callbacks
+   *
+   * Run before any gate/policy check. Return true to allow,
+   * false to deny, or null to continue to the actual check.
    */
-  'view-dashboard': (user: UserModel | null) => {
-    return user !== null
-  },
-
-  // Add more gates here...
-  // 'ability-name': (user, ...args) => boolean,
-}
+  before: [
+    // Example: Super admin bypass
+    // (user) => {
+    //   if (user?.role === 'super-admin')
+    //     return true // Allow everything for super admins
+    //   return null // Continue to normal checks
+    // },
+  ],
 
-/**
- * Policy mappings
- *
- * Map model names to their policy classes.
- * Policy files should be in app/Policies/ directory.
- *
- * @example
- * // Simple mapping (uses PostPolicy for Post model)
- * 'Post': 'PostPolicy',
- *
- * // Or with config:
- * 'Post': {
- *   policy: 'PostPolicy',
- *   model: Post,
- * },
- */
-export const policies: Record<string, string | { policy: string, model?: string }> = {
-  // 'Post': 'PostPolicy',
-  // 'User': 'UserPolicy',
-  // 'Comment': 'CommentPolicy',
-}
-
-/**
- * Before callbacks
- *
- * Run before any gate/policy check. Return true to allow,
- * false to deny, or null to continue to the actual check.
- *
- * @example
- * // Super admins bypass all checks
- * (user) => user?.role === 'super-admin' ? true : null
- */
-export const before: Array<(user: UserModel | null, ability: string, args: any[]) => boolean | null | Promise<boolean | null>> = [
-  // Example: Super admin bypass
-  // (user, ability) => {
-  //   if (user?.role === 'super-admin') {
-  //     return true // Allow everything for super admins
-  //   }
-  //   return null // Continue to normal checks
-  // },
-]
-
-/**
- * After callbacks
- *
- * Run after gate/policy checks. Can override the result.
- */
-export const after: Array<(user: UserModel | null, ability: string, result: boolean, args: any[]) => boolean | void | Promise<boolean | void>> = [
-  // Example: Log all authorization checks
-  // (user, ability, result) => {
-  //   console.log(`User ${user?.id} ${result ? 'allowed' : 'denied'} for ${ability}`)
-  // },
-]
-
-export default { gates, policies, before, after }
+  /**
+   * After callbacks
+   *
+   * Run after gate/policy checks. Returning a boolean overrides the result;
+   * returning nothing keeps it.
+   */
+  after: [
+    // Example: Log all authorization checks
+    // (user, ability, result) => {
+    //   console.log(`User ${user?.id} ${result ? 'allowed' : 'denied'} for ${ability}`)
+    // },
+  ],
+})