@stacksjs/defaults 0.74.31 → 0.74.32

package/ai/skills/stacks-auto-imports/SKILL.md

@@ -66,7 +66,7 @@ globalThis.toggleDark = toggleDark
 - **Custom Functions**: From `resources/functions/` (counter, dark mode, GPX, geo utilities)
 
 ### Server Auto-Imports (100+)
-- **All ORM Models**: User, Post, Author, Product, Order, Payment, Customer, etc. (98 models)
+- **All ORM Models**: User, Post, Author, Product, Order, Payment, Customer, etc. (100 models)
 - **Request Models**: UserRequest, PostRequest, OrderRequest, etc.
 - **Actions**: Action types and helpers
 - **Schema**: validation schema builder

package/ai/skills/stacks-orm/SKILL.md

@@ -11,7 +11,7 @@ allowed-tools: Read Edit Write Bash Grep Glob
 ## Key Paths
 - Core ORM package: `storage/framework/core/orm/src/`
 - ORM implementation: `storage/framework/orm/`
-- Model definitions: `storage/framework/defaults/app/Models/` (98 models)
+- Model definitions: `storage/framework/defaults/app/Models/` (100 models)
 - Application models: `app/Models/`
 - Default model templates: `storage/framework/defaults/app/Models/`
 - ORM type globals: `storage/framework/types/orm-globals.d.ts`

package/app/Actions/Auth/CreateReferralCodeAction.ts

@@ -0,0 +1,13 @@
+import { Action } from '@stacksjs/actions'
+import { createReferralCode } from '@stacksjs/auth'
+import { response } from '@stacksjs/router'
+
+export default new Action({
+  name: 'CreateReferralCodeAction',
+  method: 'POST',
+  async handle(request: RequestInstance) {
+    const user = await request.user()
+    if (!user?.id) return response.error('Unauthenticated', 401)
+    return response.json({ code: await createReferralCode(Number(user.id)) })
+  },
+})

package/app/Actions/Auth/ReferralSummaryAction.ts

@@ -0,0 +1,13 @@
+import { Action } from '@stacksjs/actions'
+import { referralSummary } from '@stacksjs/auth'
+import { response } from '@stacksjs/router'
+
+export default new Action({
+  name: 'ReferralSummaryAction',
+  method: 'GET',
+  async handle(request: RequestInstance) {
+    const user = await request.user()
+    if (!user?.id) return response.error('Unauthenticated', 401)
+    return response.json(await referralSummary(Number(user.id)))
+  },
+})

package/app/Actions/Auth/RegisterAction.ts

@@ -30,7 +30,8 @@ export default new Action({
     const password = request.get('password')
     const name = request.get('name')
 
-    const result = await register({ email, password, name })
+    const referralCode = request.get('referralCode')
+    const result = await register({ email, password, name, referralCode: typeof referralCode === 'string' ? referralCode : undefined })
 
     if (result) {
       const user = await Auth.getUserFromToken(result.token)

package/app/Middleware/Can.ts

@@ -3,6 +3,8 @@ import { authenticatedUser } from '@stacksjs/auth/middleware'
 import { HttpError } from '@stacksjs/error-handling'
 import { Middleware, resolveRouteModel, setRouteModelFallback } from '@stacksjs/router'
 
+let ormModule: typeof import('@stacksjs/orm') | undefined
+
 /**
  * Convention binding: parameter `site` resolves through the `Site` model
  * (stacksjs/stacks#2231).
@@ -24,7 +26,7 @@ setRouteModelFallback(async (value, { param }) => {
   // touched: lowercasing the rest would turn `blogPost` into `Blogpost`.
   const modelName = param.charAt(0).toUpperCase() + param.slice(1)
 
-  const orm = await import('@stacksjs/orm') as Record<string, any>
+  const orm = (ormModule ??= await import('@stacksjs/orm')) as Record<string, any>
   const model = orm[modelName]
 
   // No model of that name — decline, so the raw string passes through exactly

package/app/Middleware/Permission.ts

@@ -2,6 +2,8 @@ import { authenticatedUser } from '@stacksjs/auth/middleware'
 import { HttpError } from '@stacksjs/error-handling'
 import { Middleware } from '@stacksjs/router'
 
+let rbacModule: typeof import('@stacksjs/auth/rbac') | undefined
+
 /**
  * Permission Middleware
  *
@@ -32,7 +34,7 @@ export default new Middleware({
       throw new HttpError(401, 'Unauthenticated.')
     }
 
-    const { hasAnyPermission } = await import('@stacksjs/auth/rbac')
+    const { hasAnyPermission } = rbacModule ??= await import('@stacksjs/auth/rbac')
 
     const hasRequired = await hasAnyPermission(user, requiredPermissions)
 

package/app/Middleware/Role.ts

@@ -2,6 +2,8 @@ import { authenticatedUser } from '@stacksjs/auth/middleware'
 import { HttpError } from '@stacksjs/error-handling'
 import { Middleware } from '@stacksjs/router'
 
+let rbacModule: typeof import('@stacksjs/auth/rbac') | undefined
+
 /**
  * Role Middleware
  *
@@ -32,7 +34,7 @@ export default new Middleware({
     }
 
     // Dynamically import to avoid circular dependency
-    const { hasAnyRole } = await import('@stacksjs/auth/rbac')
+    const { hasAnyRole } = rbacModule ??= await import('@stacksjs/auth/rbac')
 
     const hasRequired = await hasAnyRole(user, requiredRoles)
 

package/app/Models/Referral.ts

@@ -0,0 +1,16 @@
+import { defineModel } from '@stacksjs/orm'
+import { schema } from '@stacksjs/validation'
+
+export default defineModel({
+  name: 'Referral',
+  table: 'referrals',
+  traits: { useTimestamps: true },
+  indexes: [{ name: 'referrals_referrer_status', columns: ['referrer_id', 'status'] }],
+  attributes: {
+    referrerId: { required: true, validation: { rule: schema.number().integer().min(1) } },
+    referredUserId: { required: true, unique: true, validation: { rule: schema.number().integer().min(1) } },
+    code: { required: true, validation: { rule: schema.string().max(24) } },
+    status: { required: true, default: 'registered', validation: { rule: schema.enum(['registered', 'qualified']) } },
+    qualifiedAt: { nullable: true, validation: { rule: schema.date() } },
+  },
+} as const)

package/app/Models/ReferralCode.ts

@@ -0,0 +1,12 @@
+import { defineModel } from '@stacksjs/orm'
+import { schema } from '@stacksjs/validation'
+
+export default defineModel({
+  name: 'ReferralCode',
+  table: 'referral_codes',
+  traits: { useTimestamps: true },
+  attributes: {
+    userId: { required: true, unique: true, validation: { rule: schema.number().integer().min(1) } },
+    code: { required: true, unique: true, validation: { rule: schema.string().max(24) } },
+  },
+} as const)

package/ide/vscode/package.json

@@ -2,7 +2,7 @@
   "publisher": "Stacks",
   "name": "vscode-stacks",
   "displayName": "Stacks",
-  "version": "0.74.31",
+  "version": "0.74.32",
   "description": "A modern Stacks development environment.",
   "license": "MIT",
   "funding": "https://github.com/sponsors/chrisbbreuer",

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/defaults",
   "type": "module",
   "sideEffects": false,
-  "version": "0.74.31",
+  "version": "0.74.32",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/stacksjs/stacks.git",
@@ -55,7 +55,7 @@
   "dependencies": {
     "@iconify-json/f7": "^1.2.2",
     "@iconify-json/hugeicons": "^1.2.27",
-    "@stacksjs/mobile": "^0.74.31",
+    "@stacksjs/mobile": "^0.74.32",
     "@stacksjs/sanitizer": "^0.2.113",
     "ts-qr-codes": "^0.1.8"
   }

package/routes/auth.ts

@@ -74,6 +74,8 @@ route.group({ prefix: '/auth' }, () => {
 })
 
 route.group({ middleware: 'auth' }, () => {
+  route.get('/referrals', 'Actions/Auth/ReferralSummaryAction').rateLimit(60, 'minute')
+  route.post('/referrals/code', 'Actions/Auth/CreateReferralCodeAction').rateLimit(10, 'minute')
   route.get('/me', 'Actions/Auth/AuthUserAction')
   route.post('/logout', 'Actions/Auth/LogoutAction')
   // Sign out everywhere: revoke every access/refresh token AND destroy