@stacksjs/defaults 0.72.98 → 0.72.99

package/app/Actions/Dashboard/Commerce/CommerceDeliveryAction.ts

@@ -24,7 +24,7 @@ export default new Action({
         allRoutes,
         allZones,
         allDrivers,
-        (config as any).commerce?.currency,
+        config.commerce?.currency,
       )
     }
     catch (error) {

package/app/Actions/Dashboard/Commerce/CommerceOrdersAction.ts

@@ -50,7 +50,7 @@ export default new Action({
           .sort((left, right) => left.label.localeCompare(right.label)),
         statuses: [...new Set([...defaultStatuses, ...records.map(record => record.status)])],
         orderTypes: [...new Set([...defaultTypes, ...records.map(record => record.orderType)])],
-        defaultCurrency: commerceCurrency((config as any).commerce?.currency, 'Commerce configuration'),
+        defaultCurrency: commerceCurrency(config.commerce?.currency, 'Commerce configuration'),
       }
     }
     catch (error) {

package/app/Actions/Dashboard/Commerce/CommercePosAction.ts

@@ -53,7 +53,7 @@ export default new Action({
           .filter(isCommercePosCustomerActive)
           .map(normalizeCommercePosCustomer),
         taxRate: selectCommercePosTaxRate(taxRates),
-        defaultCurrency: normalizeCommerceCurrency((config as any).commerce?.currency),
+        defaultCurrency: normalizeCommerceCurrency(config.commerce?.currency),
         paymentMethods: [{ id: 'cash', label: 'Cash' }],
         summary: {
           products: records.length,

package/app/Actions/Dashboard/Commerce/CommercePosCheckoutAction.ts

@@ -285,7 +285,7 @@ export default new Action({
       return dashboardOperationalError(error, 'Sale totals could not be calculated.', 'CommercePosCheckoutAction')
     }
 
-    const currency = normalizeCommerceCurrency((config as any).commerce?.currency)
+    const currency = normalizeCommerceCurrency(config.commerce?.currency)
     const transactionId = randomUUIDv7()
     const referenceNumber = `POS-${transactionId.slice(0, 12).toUpperCase()}`
     let result

package/app/Actions/Dashboard/Commerce/CommerceProductDetailAction.ts

@@ -58,7 +58,7 @@ export default new Action({
         reviews: summarizeProductReviews(reviews),
         categories: categoryOptions,
         manufacturers: manufacturerOptions,
-        defaultCurrency: normalizeCommerceCurrency((config as any).commerce?.currency),
+        defaultCurrency: normalizeCommerceCurrency(config.commerce?.currency),
       }
     }
     catch (error) {

package/app/Actions/Dashboard/Commerce/CommerceProductsAction.ts

@@ -52,7 +52,7 @@ export default new Action({
         summary: summarizeCommerceProducts(records),
         categories: categoryOptions,
         manufacturers: manufacturerOptions,
-        defaultCurrency: normalizeCommerceCurrency((config as any).commerce?.currency),
+        defaultCurrency: normalizeCommerceCurrency(config.commerce?.currency),
       }
     }
     catch (error) {

package/app/Actions/Dashboard/Content/content-input.ts

@@ -54,12 +54,12 @@ export function slugify(value: string): string {
  * query builder's types want a table union rather than a `string`.
  */
 export async function findRow(table: string, id: number, database: typeof db = db): Promise<unknown> {
-  return await (database as any).selectFrom(table).selectAll().where('id', '=', id).executeTakeFirst()
+  return await database.selectFrom(table).selectAll().where('id', '=', id).executeTakeFirst()
 }
 
 /** Whether a row with this id exists — the 404 check every write shares. */
 export async function rowExists(table: string, id: number, database: typeof db = db): Promise<boolean> {
-  const row = await (database as any).selectFrom(table).select(['id']).where('id', '=', id).executeTakeFirst()
+  const row = await database.selectFrom(table).select(['id']).where('id', '=', id).executeTakeFirst()
 
   return Boolean(row)
 }

package/app/Actions/Dashboard/Content/post-input.ts

@@ -116,7 +116,7 @@ async function replacePostPivot(
   relatedIds: number[],
   now: string,
 ): Promise<void> {
-  await (database as any)
+  await database
     .deleteFrom(table)
     .where(ownerKey, '=', postId)
     .where(typeKey, '=', 'posts')
@@ -125,7 +125,7 @@ async function replacePostPivot(
   if (relatedIds.length === 0)
     return
 
-  await (database as any)
+  await database
     .insertInto(table)
     .values(relatedIds.map(relatedId => ({
       [foreignKey]: relatedId,
@@ -146,12 +146,12 @@ export async function syncPostRelations(database: typeof db, postId: number, pay
 
 /** Removes both post pivot sets on the caller's database or transaction. */
 export async function detachPostRelations(database: typeof db, postId: number): Promise<void> {
-  await (database as any)
+  await database
     .deleteFrom('categorizable_models')
     .where('categorizable_id', '=', postId)
     .where('categorizable_type', '=', 'posts')
     .execute()
-  await (database as any)
+  await database
     .deleteFrom('taggable_models')
     .where('taggable_id', '=', postId)
     .where('taggable_type', '=', 'posts')

package/app/Actions/Dashboard/Email/inbox-request.ts

@@ -5,7 +5,7 @@ import { response } from '@stacksjs/router'
 import { defaultMailbox } from './mail-preference'
 
 function configuredMailDomain(): string {
-  const email = (config as any)?.email || {}
+  const email = config?.email || {}
   const fromAddress = String(email.from?.address || '').trim()
   const fromDomain = fromAddress.includes('@') ? fromAddress.split('@').at(-1) : ''
   return String(email.domain || fromDomain || 'stacksjs.com').trim().toLowerCase()

package/app/Actions/Dashboard/Email/mail-preference.ts

@@ -26,7 +26,7 @@ export interface MailPreferenceInput {
 }
 
 export function defaultMailbox(): string {
-  const email = (config as any)?.email || {}
+  const email = config?.email || {}
   const domain = String(email.domain || 'stacksjs.com')
   const configured = Array.isArray(email.mailboxes) ? email.mailboxes[0] : undefined
   const mailbox = typeof configured === 'string' ? configured : configured?.email

package/app/Actions/Dashboard/Marketing/CampaignIndexAction.ts

@@ -55,7 +55,7 @@ export default new Action({
         sendRows,
         openedRows,
         clickedRows,
-        String((config as any).commerce?.currency || 'USD').toUpperCase(),
+        String(config.commerce?.currency || 'USD').toUpperCase(),
       )
     }
     catch (error) {

package/app/Actions/Dashboard/Marketing/CampaignStoreAction.ts

@@ -15,7 +15,7 @@ export default new Action({
   async handle(request: RequestInstance) {
     const data = campaignWriteData(
       await request.all(),
-      String((config as any).commerce?.currency || 'USD').toUpperCase(),
+      String(config.commerce?.currency || 'USD').toUpperCase(),
     )
     const validationError = validateCampaignWriteData(data)
     if (validationError)

package/app/Actions/Dashboard/Marketing/CampaignUpdateAction.ts

@@ -18,7 +18,7 @@ export default new Action({
       return response.json({ message: 'A valid campaign id is required.' }, 400)
     const data = campaignWriteData(
       await request.all(),
-      String((config as any).commerce?.currency || 'USD').toUpperCase(),
+      String(config.commerce?.currency || 'USD').toUpperCase(),
     )
     const validationError = validateCampaignWriteData(data)
     if (validationError)

package/app/Actions/Dashboard/Teams/TeamInvitationDestroyAction.ts

@@ -25,7 +25,7 @@ export default new Action({
 
     let invitation
     try {
-      invitation = await (db as any)
+      invitation = await db
         .selectFrom('team_invitations')
         .where('id', '=', invitationId)
         .where('team_id', '=', teamId)
@@ -41,7 +41,7 @@ export default new Action({
       return response.json({ message: 'Only pending invitations can be revoked.' }, 409)
 
     try {
-      const result = await (db as any)
+      const result = await db
         .updateTable('team_invitations')
         .set({
           status: 'revoked',

package/app/Actions/Dashboard/Teams/TeamInvitationResendAction.ts

@@ -28,7 +28,7 @@ export default new Action({
 
     let invitation
     try {
-      invitation = await (db as any)
+      invitation = await db
         .selectFrom('team_invitations')
         .innerJoin('teams', 'teams.id', '=', 'team_invitations.team_id')
         .where('team_invitations.id', '=', invitationId)
@@ -55,7 +55,7 @@ export default new Action({
     const tokenHash = hashInvitationToken(token)
     const expiresAt = invitationExpiresAt()
     try {
-      const result = await (db as any)
+      const result = await db
         .updateTable('team_invitations')
         .set({
           token_hash: tokenHash,

package/app/Actions/Dashboard/Teams/TeamInviteAction.ts

@@ -69,7 +69,7 @@ export default new Action({
             .where('email', '=', email)
             .select(['id'])
             .executeTakeFirst(),
-          (trx as any)
+          trx
             .selectFrom('team_invitations')
             .where('team_id', '=', teamId)
             .where('email', '=', email)
@@ -78,7 +78,7 @@ export default new Action({
             .executeTakeFirst(),
         ])
         if (existingUser) {
-          const membership = await (trx as any)
+          const membership = await trx
             .selectFrom('team_members')
             .where('team_id', '=', teamId)
             .where('user_id', '=', Number(existingUser.id))
@@ -92,7 +92,7 @@ export default new Action({
           return response.json({ message: 'A pending invitation already exists. Resend or revoke it from the invitation list.' }, 409)
         }
         if (pending) {
-          const expired = await (trx as any)
+          const expired = await trx
             .updateTable('team_invitations')
             .set({ status: 'expired', pending_key: null, updated_at: sqlTimestamp() })
             .where('id', '=', Number(pending.id))
@@ -103,7 +103,7 @@ export default new Action({
             throw new TeamStateConflictError('The pending invitation changed before it could be replaced.')
         }
 
-        await (trx as any)
+        await trx
           .insertInto('team_invitations')
           .values({
             team_id: teamId,
@@ -119,7 +119,7 @@ export default new Action({
           })
           .execute()
 
-        const invitation = await (trx as any)
+        const invitation = await trx
           .selectFrom('team_invitations')
           .where('token_hash', '=', tokenHash)
           .select(['id'])

package/app/Actions/Dashboard/Teams/TeamMemberDestroyAction.ts

@@ -22,7 +22,7 @@ export default new Action({
     try {
       result = await db.transaction(async (rawTrx) => {
         const trx = rawTrx as unknown as typeof db
-        const member = await (trx as any)
+        const member = await trx
           .selectFrom('team_members')
           .where('id', '=', memberId)
           .where('team_id', '=', teamId)
@@ -33,7 +33,7 @@ export default new Action({
         if (member.role === 'owner')
           return response.json({ message: 'Transfer team ownership before removing the owner.' }, 409)
 
-        const deleted = await (trx as any)
+        const deleted = await trx
           .deleteFrom('team_members')
           .where('id', '=', memberId)
           .where('team_id', '=', teamId)

package/app/Actions/Dashboard/Teams/TeamMemberUpdateAction.ts

@@ -27,7 +27,7 @@ export default new Action({
     try {
       return await db.transaction(async (rawTrx) => {
         const trx = rawTrx as unknown as typeof db
-        const member = await (trx as any)
+        const member = await trx
           .selectFrom('team_members')
           .where('id', '=', memberId)
           .where('team_id', '=', teamId)
@@ -45,7 +45,7 @@ export default new Action({
         if (!['active', 'suspended'].includes(status))
           return response.json({ message: 'Choose a valid member status.' }, 422)
 
-        const updated = await (trx as any)
+        const updated = await trx
           .updateTable('team_members')
           .set({ role, status, updated_at: sqlTimestamp() })
           .where('id', '=', memberId)

package/app/Actions/Dashboard/Teams/TeamPeopleIndexAction.ts

@@ -32,7 +32,7 @@ export default new Action({
 
     try {
       const [members, invitations] = await Promise.all([
-        (db as any)
+        db
           .selectFrom('team_members')
           .innerJoin('users', 'users.id', '=', 'team_members.user_id')
           .where('team_members.team_id', '=', teamId)
@@ -47,7 +47,7 @@ export default new Action({
           ])
           .orderBy('users.name', 'asc')
           .execute(),
-        (db as any)
+        db
           .selectFrom('team_invitations')
           .where('team_id', '=', teamId)
           .where('status', '=', 'pending')

package/app/Actions/Dashboard/Teams/team-invitation-delivery.ts

@@ -45,7 +45,7 @@ export async function deliverTeamInvitation(input: DeliveryInput): Promise<void>
   }
 
   try {
-    const result = await (db as any)
+    const result = await db
       .updateTable('team_invitations')
       .set({
         delivery_status: 'sent',
@@ -66,7 +66,7 @@ export async function deliverTeamInvitation(input: DeliveryInput): Promise<void>
 }
 
 export async function markTeamInvitationDeliveryFailed(id: number, tokenHash: string, error: string): Promise<void> {
-  await (db as any)
+  await db
     .updateTable('team_invitations')
     .set({
       delivery_status: 'failed',

package/app/Events.ts

@@ -1,4 +1,4 @@
-import type { Events } from '@stacksjs/types'
+import { defineEvents } from '@stacksjs/events'
 
 /**
  * **Events Configuration**
@@ -6,9 +6,14 @@ import type { Events } from '@stacksjs/types'
  * This configuration defines all of your events. Because Stacks is fully-typed, you may
  * hover any of the options below and the definitions will be provided. In case you
  * have any questions, feel free to reach out via Discord or GitHub Discussions.
+ *
+ * Both halves of every entry are checked. The key must be an event that exists -
+ * declare your own on `AppEvents` in `@stacksjs/events` - and each listener must
+ * name a file under `app/Listeners/` or `app/Actions/`, or one of the framework
+ * defaults behind them.
  */
-export default {
-  // eventName: ['Listener1', 'Listener2'] -> listeners default to ./app/actions/*
+export default defineEvents({
+  // eventName: ['Listener1', 'Listener2'] -> listeners resolve from ./app/Listeners/*, then ./app/Actions/*
   'user:registered': ['SendWelcomeEmail'],
   'user:created': ['NotifyUser'],
-} satisfies Events
+})

package/app/Gates.ts

@@ -1,4 +1,5 @@
 import type { UserModel } from '@stacksjs/orm'
+import { defineGates } from '@stacksjs/auth'
 
 /**
  * Authorization Gates Configuration
@@ -7,101 +8,98 @@ import type { UserModel } from '@stacksjs/orm'
  * Gates provide a simple way to authorize actions, while policies
  * organize authorization logic around particular models.
  *
- * @see https://stacksjs.org/docs/security/authorization
- */
-
-/**
- * Gate definitions
+ * Registered at boot by `initializeAuthorization()`, which every entry point
+ * comes through - HTTP, `buddy seed`, a scheduled job, a console command.
  *
- * Simple ability checks that don't require a model.
- *
- * @example
- * // In your code:
- * import { Gate } from '@stacksjs/auth'
- *
- * if (await Gate.allows('edit-settings', user)) {
- *   // User can edit settings
- * }
+ * @see https://stacksjs.org/docs/security/authorization
  */
-export const gates = {
+export default defineGates({
   /**
-   * Check if user can access admin area
+   * Gate definitions
+   *
+   * Simple ability checks that don't require a model. The names below are what
+   * `Gate.allows('...')` offers as completions.
+   *
+   * @example
+   * import { Gate } from '@stacksjs/auth'
+   *
+   * if (await Gate.allows('edit-settings', user)) {
+   *   // User can edit settings
+   * }
    */
-  'access-admin': (user: UserModel | null) => {
-    return user?.email?.endsWith('@stacksjs.org') ?? false
+  gates: {
+    /** Check if user can access admin area */
+    'access-admin': (user: UserModel | null) => {
+      return user?.email?.endsWith('@stacksjs.org') ?? false
+    },
+
+    /** Check if user can edit application settings */
+    'edit-settings': (user: UserModel | null) => {
+      // Add your logic here
+      return user !== null
+    },
+
+    /** Check if user can view dashboard */
+    'view-dashboard': (user: UserModel | null) => {
+      return user !== null
+    },
+
+    // Add more gates here...
+    // 'ability-name': (user, ...args) => boolean,
   },
 
   /**
-   * Check if user can edit application settings
+   * Policy mappings
+   *
+   * Map model names to their policy classes. Policy files live in
+   * `app/Policies/`, or in the framework defaults behind it. Both halves are
+   * checked: the key names a model that exists, the value a policy that does.
+   *
+   * A policy whose file is named `<Model>Policy.ts` is picked up by convention
+   * and does not need an entry here. An entry WINS over the convention, which
+   * is the point of writing one.
+   *
+   * @example
+   * // Simple mapping (uses PostPolicy for the Post model)
+   * Post: 'PostPolicy',
+   *
+   * // Or with config:
+   * Post: {
+   *   policy: 'PostPolicy',
+   *   model: 'Post',
+   * },
    */
-  'edit-settings': (user: UserModel | null) => {
-    // Add your logic here
-    return user !== null
+  policies: {
+    // Post: 'PostPolicy',
+    // User: 'UserPolicy',
+    // Comment: 'CommentPolicy',
   },
 
   /**
-   * Check if user can view dashboard
+   * Before callbacks
+   *
+   * Run before any gate/policy check. Return true to allow,
+   * false to deny, or null to continue to the actual check.
    */
-  'view-dashboard': (user: UserModel | null) => {
-    return user !== null
-  },
-
-  // Add more gates here...
-  // 'ability-name': (user, ...args) => boolean,
-}
+  before: [
+    // Example: Super admin bypass
+    // (user) => {
+    //   if (user?.role === 'super-admin')
+    //     return true // Allow everything for super admins
+    //   return null // Continue to normal checks
+    // },
+  ],
 
-/**
- * Policy mappings
- *
- * Map model names to their policy classes.
- * Policy files should be in app/Policies/ directory.
- *
- * @example
- * // Simple mapping (uses PostPolicy for Post model)
- * 'Post': 'PostPolicy',
- *
- * // Or with config:
- * 'Post': {
- *   policy: 'PostPolicy',
- *   model: Post,
- * },
- */
-export const policies: Record<string, string | { policy: string, model?: string }> = {
-  // 'Post': 'PostPolicy',
-  // 'User': 'UserPolicy',
-  // 'Comment': 'CommentPolicy',
-}
-
-/**
- * Before callbacks
- *
- * Run before any gate/policy check. Return true to allow,
- * false to deny, or null to continue to the actual check.
- *
- * @example
- * // Super admins bypass all checks
- * (user) => user?.role === 'super-admin' ? true : null
- */
-export const before: Array<(user: UserModel | null, ability: string, args: any[]) => boolean | null | Promise<boolean | null>> = [
-  // Example: Super admin bypass
-  // (user, ability) => {
-  //   if (user?.role === 'super-admin') {
-  //     return true // Allow everything for super admins
-  //   }
-  //   return null // Continue to normal checks
-  // },
-]
-
-/**
- * After callbacks
- *
- * Run after gate/policy checks. Can override the result.
- */
-export const after: Array<(user: UserModel | null, ability: string, result: boolean, args: any[]) => boolean | void | Promise<boolean | void>> = [
-  // Example: Log all authorization checks
-  // (user, ability, result) => {
-  //   console.log(`User ${user?.id} ${result ? 'allowed' : 'denied'} for ${ability}`)
-  // },
-]
-
-export default { gates, policies, before, after }
+  /**
+   * After callbacks
+   *
+   * Run after gate/policy checks. Returning a boolean overrides the result;
+   * returning nothing keeps it.
+   */
+  after: [
+    // Example: Log all authorization checks
+    // (user, ability, result) => {
+    //   console.log(`User ${user?.id} ${result ? 'allowed' : 'denied'} for ${ability}`)
+    // },
+  ],
+})

package/app/Listener.ts

@@ -1,84 +1,37 @@
-import type { StacksEvents, WildcardHandler } from '@stacksjs/events'
-import { handleError } from '@stacksjs/error-handling'
-import { emitter } from '@stacksjs/events'
+import { registerAppListeners } from '@stacksjs/events'
 import { path as p } from '@stacksjs/path'
-import events from './Events'
 
-// Cache resolved action modules to avoid repeated dynamic imports
-const actionCache = new Map<string, { handle: (event: any) => Promise<any> | any }>()
-
-// Deduplicate in-flight imports to prevent concurrent import races
-const pendingImports = new Map<string, Promise<{ handle: (event: any) => Promise<any> | any } | null>>()
-
-// Pre-compute which event types have listeners for O(1) lookup
-const eventTypes = new Set(Object.keys(events))
-
-export async function handleEvents() {
-  emitter.on('*', listenEvents as WildcardHandler<StacksEvents>)
-}
-
-function listenEvents(type: keyof typeof events, event: any) {
-  // Fast path: skip events with no registered listeners
-  if (!eventTypes.has(type as string))
-    return
-
-  const eventListeners = events[type]
-  if (!eventListeners || eventListeners.length === 0)
-    return
-
-  // Fire-and-forget with error handling — mitt doesn't await wildcard handlers
-  processListeners(type as string, eventListeners, event)
-}
-
-async function resolveAction(listener: string): Promise<{ handle: (event: any) => Promise<any> | any } | null> {
-  // Check cache first
-  const cached = actionCache.get(listener)
-  if (cached) return cached
-
-  // Check if an import is already in-flight
-  let pending = pendingImports.get(listener)
-  if (pending) return pending
-
-  // Start the import and cache the promise to deduplicate concurrent calls
-  pending = (async () => {
-    try {
-      const imported = await import(p.appPath(`Actions/${listener}.ts`))
-      const actionModule = imported.default
-      if (actionModule && typeof actionModule.handle === 'function') {
-        actionCache.set(listener, actionModule)
-        return actionModule
-      }
-      handleError(`Action "${listener}" does not export a handle method`)
-      return null
-    }
-    catch (error) {
-      handleError(`Failed to import action "${listener}"`, error)
-      return null
-    }
-    finally {
-      pendingImports.delete(listener)
-    }
-  })()
-
-  pendingImports.set(listener, pending)
-  return pending
-}
-
-async function processListeners(type: string, listeners: string[], event: any) {
-  for (const listener of listeners) {
-    try {
-      if (typeof listener === 'function') {
-        await (listener as any)(event)
-        continue
-      }
-
-      const action = await resolveAction(listener)
-      if (action) {
-        await action.handle(event)
-      }
-    }
-    catch (error) {
-      handleError(`Failed to execute listener "${listener}" for event "${type}"`, error)
-    }
-  }
+/**
+ * **Event Listener Bootstrap**
+ *
+ * Registers every listener the application declares: the `app/Events.ts` map of
+ * event name to listener names, and any module under `app/Listeners/` that
+ * declares its own `listensTo`.
+ *
+ * This file used to carry its own implementation of the first half - a wildcard
+ * handler that read the map on every dispatch and imported the named action out
+ * of `app/Actions/`. It was a second implementation of what
+ * `registerAppListeners` already does, and having two was worse than having the
+ * wrong one:
+ *
+ *   - In dev they both ran. `injectGlobalAutoImports()` calls
+ *     `registerAppListeners()` and the dev API entrypoint then called
+ *     `handleEvents()`, so every listener named in the map fired TWICE per
+ *     event - two welcome emails, two rows, and no error anywhere to say so.
+ *   - The copy resolved names against `app/Actions/` alone, so a listener under
+ *     `app/Listeners/` and any of the framework's default actions were
+ *     unreachable from the map.
+ *   - It matched events by exact name only, dropping the glob subscriptions
+ *     (`user:*`) the emitter supports.
+ *
+ * Delegating keeps this file as the app's hook into boot - override it to
+ * register listeners of your own - with one implementation behind it, whose
+ * registry also makes the call idempotent across a dev-server reload.
+ */
+export async function handleEvents(): Promise<number> {
+  // Anchored to the project root rather than left to `process.cwd()`. A buddy
+  // command, a test runner or a worker started from a subdirectory would
+  // otherwise look for `app/Events.ts` beside wherever it happened to be
+  // launched, find nothing, and register no listeners without saying so.
+  return registerAppListeners({ base: p.projectPath() })
 }