@stacksjs/defaults 0.75.12 → 0.75.13

package/ide/vscode/package.json

@@ -2,7 +2,7 @@
   "publisher": "Stacks",
   "name": "vscode-stacks",
   "displayName": "Stacks",
-  "version": "0.75.12",
+  "version": "0.75.13",
   "description": "A modern Stacks development environment.",
   "license": "MIT",
   "funding": "https://github.com/sponsors/chrisbbreuer",

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/defaults",
   "type": "module",
   "sideEffects": false,
-  "version": "0.75.12",
+  "version": "0.75.13",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/stacksjs/stacks.git",
@@ -55,7 +55,7 @@
   "dependencies": {
     "@iconify-json/f7": "^1.2.2",
     "@iconify-json/hugeicons": "^1.2.27",
-    "@stacksjs/mobile": "^0.75.12",
+    "@stacksjs/mobile": "^0.75.13",
     "@stacksjs/sanitizer": "^0.2.113",
     "ts-qr-codes": "^0.1.8"
   }

package/project/storage/framework/types/authenticated-user.d.ts

@@ -0,0 +1,41 @@
+// The signed-in user's columns, derived rather than declared.
+//
+// `request.user()` resolves to `AuthenticatedUser` from `@stacksjs/types`. That
+// package cannot import the ORM (it sits underneath it), so on its own it knows
+// only `id` and `email`, and every other field is `unknown` until something
+// says otherwise. This is what says otherwise: the columns of the User model
+// the application actually runs, read off the same barrel
+// `injectGlobalAutoImports` loads at runtime. Override `app/Models/User.ts` and
+// the type follows with nothing to regenerate; add a column and `user.team_id`
+// is typed the moment the model declares it.
+//
+// When that model declares `traits: { billable: true }`, the billable instance
+// methods (`user.checkout(...)`, `user.newSubscription(...)`) come with it,
+// because every record it hydrates carries them. With the trait off, they are
+// absent, and `isBillable(user)` from `@stacksjs/orm` is how to ask.
+//
+// `id` stays as `@stacksjs/types` declares it, `number | string`, rather than
+// the model's `number`: a BIGINT key comes back from Postgres as a string.
+
+import type { BillableMethods, Def, ModelRow } from '@stacksjs/orm'
+
+/** Every model, by the name the ORM exposes it under. */
+type Models = typeof import('../auto-imports/models')
+
+/** `true` for `any`, which is what an unresolvable barrel reads as. */
+type IsAny<T> = 0 extends 1 & T ? true : false
+
+/** The application's User model, or nothing when there is none to read. */
+type AppUser = IsAny<Models> extends true ? never : Models extends { User: infer TUser } ? TUser : never
+
+/** Its columns, minus the `id` the base interface declares more honestly. */
+type AppUserColumns = [AppUser] extends [never] ? {} : Omit<ModelRow<AppUser>, 'id'>
+
+/** Its billable methods, when it declares the trait. */
+type AppUserBillable = [AppUser] extends [never]
+  ? {}
+  : Def<AppUser> extends { readonly traits: { readonly billable: true } } ? BillableMethods : {}
+
+declare module '@stacksjs/types' {
+  interface AuthenticatedUser extends AppUserColumns, AppUserBillable {}
+}

package/project/storage/framework/types/billing.ts

@@ -0,0 +1,60 @@
+export interface TransactionHistory {
+  id?: number
+  uuid?: string
+  name: string
+  description?: string
+  amount: number
+  type: string
+  provider_id?: string
+  user_id?: number
+  paymentmethod_id?: number
+  created_at: string
+  updated_at?: string
+}
+
+export interface PaymentMethod {
+  id?: number
+  uuid?: string
+  type: string
+  last_four: number
+  brand: string
+  exp_month: number
+  exp_year: number
+  is_default?: boolean
+  provider_id?: string
+  user_id?: number
+  created_at: string
+  updated_at?: string
+}
+
+export interface Product {
+  id?: number
+  uuid?: string
+  name: string
+  description?: number
+  key: number
+  unit_price?: number
+  status?: string
+  image?: string
+  provider_id?: string
+  created_at: string
+  updated_at?: string
+}
+
+export interface Subscription {
+  id?: number
+  uuid?: string
+  type: string
+  provider_id: string
+  provider_status: string
+  unit_price?: number
+  provider_type: string
+  provider_price_id?: string
+  quantity?: number
+  trial_ends_at?: string
+  ends_at?: string
+  last_used_at?: string
+  user_id?: number
+  created_at: string
+  updated_at?: string
+}

package/project/storage/framework/types/env.d.ts

@@ -0,0 +1,34 @@
+// The application's environment variables, derived rather than generated.
+//
+// `config/env.ts` declares them with `defineEnv`, and this teaches `env` about
+// them. The application used to have to write that itself, at the bottom of the
+// file it had just filled in:
+//
+//   declare module '@stacksjs/env' {
+//     interface StacksEnv extends InferEnv<typeof envSchema> {}
+//   }
+//
+// which is boilerplate that only ever has one correct spelling, and silently
+// leaves every variable untyped when it is missing. The framework can read the
+// schema itself.
+//
+// `@stacksjs/env` cannot do this from inside the package: a published `.d.ts`
+// naming `../../../config/env` resolves to nothing under `node_modules/`. So it
+// lives here, in the project, alongside the other derivations.
+
+import type { InferEnv } from '@stacksjs/env'
+
+/** The schema `config/env.ts` default-exports. */
+type EnvSchema = typeof import('../../../config/env')['default']
+
+declare module '@stacksjs/env' {
+  /**
+   * Each variable typed by its validator - `schema.number()` is a `number`,
+   * `schema.enum([...])` the union of those literals - and optional, because
+   * the process may simply not have it set. `InferEnv` drops the keys the
+   * framework already declares, so restating one cannot conflict.
+   */
+  interface StacksEnv extends InferEnv<EnvSchema> {}
+}
+
+export {}

package/project/storage/framework/types/gates.d.ts

@@ -0,0 +1,58 @@
+// Gates and policies, derived rather than listed.
+//
+// Both halves of `app/Gates.ts` name things that exist elsewhere - an ability
+// the file itself defines, and a model the ORM exposes - and both used to be
+// `string`. A mapping to a policy that is not there, or for a model that is not
+// there, registered nothing and then denied every check against it, which is
+// indistinguishable from a policy that means to say no.
+//
+// Nothing here is generated. The gates ARE the declaration, read back off the
+// file, and the models come from the same barrel `injectGlobalAutoImports`
+// loads at runtime - so neither can drift from what the application has.
+
+/** Every model, by the name the ORM exposes it under. */
+type Models = typeof import('../auto-imports/models')
+
+/** The application's own `app/Gates.ts`, as it is written. */
+type Authorization = typeof import('../../../app/Gates')['default']
+
+/**
+ * The ability names its gates define, and the arguments each one takes.
+ *
+ * Bound with `infer` rather than looked up as `Authorization['gates']` behind
+ * an `extends GatesDefinition` check. That check passes, but inside its true
+ * branch the lookup reads back through the constraint's own index signature -
+ * `Readonly<Record<string, GateCallback>>` - so `keyof` came out `string`.
+ * `AppGates` then had a string index signature, `GateName` was `string`, and
+ * nothing was constrained: `Gate.allows('definitely-not-a-real-gate', user)`
+ * typechecked, which is exactly what this file exists to prevent.
+ *
+ * `A extends { gates: infer G }` binds the real object, so the names survive.
+ * It also still degrades to nothing rather than to an error when a project has
+ * replaced `Gates.ts` with something of another shape.
+ */
+type GateNames = Authorization extends { gates: infer G }
+  ? Extract<keyof G, string>
+  : never
+
+/**
+ * Each gate mapped to the arguments it takes AFTER the user.
+ *
+ * The registry used to map every name to `true`, recording that a gate existed
+ * and nothing about how to call it, so `Gate.allows('view-dashboard', user,
+ * 'junk', 42)` passed against a gate declared `(user) => boolean`.
+ */
+type GateArgsOf = Authorization extends { gates: infer G }
+  ? {
+      [K in Extract<keyof G, string>]: G[K] extends (..._args: infer P) => unknown
+        ? (P extends [unknown, ...infer Rest] ? Rest : [])
+        : never
+    }
+  : Record<never, never>
+
+declare module '@stacksjs/auth' {
+  interface AppGates extends GateArgsOf {}
+  interface PolicyModels extends Record<keyof Models & string, true> {}
+}
+
+export {}

package/project/storage/framework/types/git.ts

@@ -0,0 +1,293 @@
+export interface GitHubCommit {
+  sha: string
+  node_id: string
+  commit: {
+    author: {
+      name: string
+      email: string
+      date: string
+    }
+    committer: {
+      name: string
+      email: string
+      date: string
+    }
+    message: string
+    tree: {
+      sha: string
+      url: string
+    }
+    url: string
+    comment_count: number
+    verification: {
+      verified: boolean
+      reason: string
+      signature: string | null
+      payload: string | null
+    }
+  }
+  url: string
+  html_url: string
+  comments_url: string
+  author: {
+    login: string
+    id: number
+    node_id: string
+    avatar_url: string
+    gravatar_id: string
+    url: string
+    html_url: string
+    followers_url: string
+    following_url: string
+    gists_url: string
+    starred_url: string
+    subscriptions_url: string
+    organizations_url: string
+    repos_url: string
+    events_url: string
+    received_events_url: string
+    type: string
+    site_admin: boolean
+  }
+  committer: {
+    login: string
+    id: number
+    node_id: string
+    avatar_url: string
+    gravatar_id: string
+    url: string
+    html_url: string
+    followers_url: string
+    following_url: string
+    gists_url: string
+    starred_url: string
+    subscriptions_url: string
+    organizations_url: string
+    repos_url: string
+    events_url: string
+    received_events_url: string
+    type: string
+    site_admin: boolean
+  }
+}
+
+export interface WorkflowRun {
+  id: number
+  name: string
+  node_id: string
+  head_branch: string
+  head_sha: string
+  path: string
+  display_title: string
+  run_number: number
+  event: string
+  status: string
+  conclusion: string
+  workflow_id: number
+  check_suite_id: number
+  check_suite_node_id: string
+  url: string
+  html_url: string
+  pull_requests: any[] // You might want to create a more detailed interface for pull requests
+  created_at: string
+  updated_at: string
+  actor: {
+    login: string
+    id: number
+    node_id: string
+    avatar_url: string
+    gravatar_id: string
+    url: string
+    html_url: string
+    followers_url: string
+    following_url: string
+    gists_url: string
+    starred_url: string
+    subscriptions_url: string
+    organizations_url: string
+    repos_url: string
+    events_url: string
+    received_events_url: string
+    type: string
+    site_admin: boolean
+  }
+  run_attempt: number
+  referenced_workflows: any[] // You might want to create a more detailed interface for workflows
+  run_started_at: string
+  triggering_actor: {
+    login: string
+    id: number
+    node_id: string
+    avatar_url: string
+    gravatar_id: string
+    url: string
+    html_url: string
+    followers_url: string
+    following_url: string
+    gists_url: string
+    starred_url: string
+    subscriptions_url: string
+    organizations_url: string
+    repos_url: string
+    events_url: string
+    received_events_url: string
+    type: string
+    site_admin: boolean
+  }
+  jobs_url: string
+  logs_url: string
+  check_suite_url: string
+  artifacts_url: string
+  cancel_url: string
+  rerun_url: string
+  previous_attempt_url: string | null
+  workflow_url: string
+  head_commit: {
+    id: string
+    tree_id: string
+    message: string
+    timestamp: string
+    author: {
+      name: string
+      email: string
+    }
+    committer: {
+      name: string
+      email: string
+    }
+  }
+  repository: {
+    id: number
+    node_id: string
+    name: string
+    full_name: string
+    private: boolean
+    owner: {
+      login: string
+      id: number
+      node_id: string
+      avatar_url: string
+      gravatar_id: string
+      url: string
+      html_url: string
+      followers_url: string
+      following_url: string
+      gists_url: string
+      starred_url: string
+      subscriptions_url: string
+      organizations_url: string
+      repos_url: string
+      events_url: string
+      received_events_url: string
+      type: string
+      site_admin: boolean
+    }
+    html_url: string
+    description: string
+    fork: boolean
+    url: string
+    forks_url: string
+    keys_url: string
+    collaborators_url: string
+    teams_url: string
+    hooks_url: string
+    issue_events_url: string
+    events_url: string
+    assignees_url: string
+    branches_url: string
+    tags_url: string
+    blobs_url: string
+    git_tags_url: string
+    git_refs_url: string
+    trees_url: string
+    statuses_url: string
+    languages_url: string
+    stargazers_url: string
+    contributors_url: string
+    subscribers_url: string
+    subscription_url: string
+    commits_url: string
+    git_commits_url: string
+    comments_url: string
+    issue_comment_url: string
+    contents_url: string
+    compare_url: string
+    merges_url: string
+    archive_url: string
+    downloads_url: string
+    issues_url: string
+    pulls_url: string
+    milestones_url: string
+    notifications_url: string
+    labels_url: string
+    releases_url: string
+    deployments_url: string
+  }
+  head_repository: {
+    id: number
+    node_id: string
+    name: string
+    full_name: string
+    private: boolean
+    owner: {
+      login: string
+      id: number
+      node_id: string
+      avatar_url: string
+      gravatar_id: string
+      url: string
+      html_url: string
+      followers_url: string
+      following_url: string
+      gists_url: string
+      starred_url: string
+      subscriptions_url: string
+      organizations_url: string
+      repos_url: string
+      events_url: string
+      received_events_url: string
+      type: string
+      site_admin: boolean
+    }
+    html_url: string
+    description: string
+    fork: boolean
+    url: string
+    forks_url: string
+    keys_url: string
+    collaborators_url: string
+    teams_url: string
+    hooks_url: string
+    issue_events_url: string
+    events_url: string
+    assignees_url: string
+    branches_url: string
+    tags_url: string
+    blobs_url: string
+    git_tags_url: string
+    git_refs_url: string
+    trees_url: string
+    statuses_url: string
+    languages_url: string
+    stargazers_url: string
+    contributors_url: string
+    subscribers_url: string
+    subscription_url: string
+    commits_url: string
+    git_commits_url: string
+    comments_url: string
+    issue_comment_url: string
+    contents_url: string
+    compare_url: string
+    merges_url: string
+    archive_url: string
+    downloads_url: string
+    issues_url: string
+    pulls_url: string
+    milestones_url: string
+    notifications_url: string
+    labels_url: string
+    releases_url: string
+    deployments_url: string
+  }
+}

package/project/storage/framework/types/model-events.d.ts

@@ -0,0 +1,60 @@
+// Model events, derived rather than listed.
+//
+// This file used to be generated: 97 models x 8 events, 817 lines, rebuilt by
+// `buddy generate:types` and stale the moment a model was added without it.
+// None of that is necessary. A mapped type with key remapping turns the models
+// barrel into the event map directly, so `User` becoming a model is the same
+// event as `'user:created'` existing - not two facts that have to be kept in
+// agreement.
+//
+// The barrel it reads is generated, but for the RUNTIME: `injectGlobalAutoImports`
+// imports it to put the models on `globalThis`. So this adds no generation step
+// of its own, and cannot drift from what the runtime actually has.
+
+import type { ModelRow } from '@stacksjs/orm'
+
+/** Every model, by the name the ORM exposes it under. */
+type Models = typeof import('../auto-imports/models')
+
+/**
+ * Fired after the write, with the row.
+ *
+ * `define-model.ts` dispatches these with `toEventPayload(model)`, which
+ * returns `{...attributes}` plus the primary key.
+ */
+type AfterEvent = 'created' | 'updated' | 'saved' | 'deleted'
+
+/**
+ * Fired before the write, with the model object; returning `false` cancels.
+ */
+type BeforeEvent = 'saving' | 'creating' | 'updating' | 'deleting'
+
+/**
+ * `'user:created'`, `'productcategory:saved'` - the model's name lowercased,
+ * matching `definition.name.toLowerCase()` in `define-model.ts`.
+ */
+type ModelAfterEvents = {
+  [K in keyof Models & string as `${Lowercase<K>}:${AfterEvent}`]: ModelRow<Models[K]>
+}
+
+type ModelBeforeEvents = {
+  [K in keyof Models & string as `${Lowercase<K>}:${BeforeEvent}`]: ModelWriteEventOf<Models[K]>
+}
+
+/**
+ * What a BEFORE event carries: the model object, not the row.
+ *
+ * `toEventPayload` reading `model?.attributes` is what establishes that the
+ * object has one. Typed as far as that goes and no further - the rest of the
+ * instance belongs to the query builder.
+ */
+interface ModelWriteEventOf<TModel> {
+  attributes: ModelRow<TModel>
+  [key: string]: unknown
+}
+
+declare module '@stacksjs/events' {
+  interface AppEvents extends ModelAfterEvents, ModelBeforeEvents {}
+}
+
+export {}

package/project/storage/framework/types/models.d.ts

@@ -0,0 +1,28 @@
+// The models, and their tables, derived rather than listed.
+//
+// `ModelNames` and `TableNames` were hand-written unions in `@stacksjs/types`:
+// 50 model names against the 97 the application had, and 62 table names with
+// two duplicates. A list maintained alongside the thing it lists only ever
+// drifts one way, and the drift is silent until somebody writes
+// `belongsTo: ['Site']` for a model that plainly exists and is told it does not.
+//
+// The barrel this reads is generated, but for the RUNTIME:
+// `injectGlobalAutoImports` imports it to put the models on `globalThis`. So
+// this adds no generation step of its own, and cannot drift from what the
+// runtime actually has.
+
+/** Every model, by the name the ORM exposes it under. */
+type Models = typeof import('../auto-imports/models')
+
+/** A model's own `table`, when it declares one as a literal. */
+type TableOf<TModel> = TModel extends { table: infer TTable extends string } ? TTable : never
+
+/** Every table the models write to. */
+type Tables = { [K in keyof Models]: TableOf<Models[K]> }[keyof Models]
+
+declare module '@stacksjs/types' {
+  interface ModelRegistry extends Record<keyof Models & string, true> {}
+  interface TableRegistry extends Record<Tables, true> {}
+}
+
+export {}

package/project/storage/framework/types/orm-globals.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Global type declarations for ORM utilities and request types.
+ *
+ * These types are available globally without imports in all Stacks application code.
+ * Model types are derived dynamically from defineModel() definitions via `as const`.
+ *
+ * @example
+ * // No imports needed — all of these are global:
+ * type PostRow = ModelRow<typeof Post>
+ * type NewPost = NewModelData<typeof Post>
+ *
+ * // Actions with model: Post get fully typed requests automatically:
+ * new Action({
+ *   model: Post,
+ *   async handle(request) {
+ *     request.get('title')   // autocompletes to Post fields, returns string
+ *     request.get('invalid') // TS error!
+ *   }
+ * })
+ */
+
+import type { UserLoggedInEvent as _UserLoggedInEvent, UserLoggedOutEvent as _UserLoggedOutEvent, UserPasswordEvent as _UserPasswordEvent, UserRegisteredEvent as _UserRegisteredEvent } from '@stacksjs/events'
+import type { NotificationChannel as _NotificationChannel } from '@stacksjs/notifications'
+import type { ModelRow as _ModelRow, NewModelData as _NewModelData, UpdateModelData as _UpdateModelData } from '@stacksjs/orm'
+import type { RequestInstance as _RequestInstance } from '@stacksjs/types'
+
+export {}
+
+declare global {
+  /**
+   * Full database row type derived from a defineModel() definition.
+   * Includes model attributes + system fields (id, uuid, timestamps) + FK columns.
+   *
+   * @example
+   * type PostRow = ModelRow<typeof Post>
+   */
+  type ModelRow<T> = _ModelRow<T>
+
+  /**
+   * Insertable data type derived from a defineModel() definition.
+   * All fields are optional for flexible creation.
+   *
+   * @example
+   * type NewPost = NewModelData<typeof Post>
+   */
+  type NewModelData<T> = _NewModelData<T>
+
+  /**
+   * Updateable data type derived from a defineModel() definition.
+   * All fields are optional for partial updates.
+   *
+   * @example
+   * type PostUpdate = UpdateModelData<typeof Post>
+   */
+  type UpdateModelData<T> = _UpdateModelData<T>
+
+  /**
+   * Model-aware request interface.
+   *
+   * When parameterized with a model type, all input methods narrow to that model's
+   * field names and types. Automatically inferred in Action handlers via `model: Post`.
+   *
+   * @example
+   * // Bare — accepts any key:
+   * function handle(_request: RequestInstance) { ... }
+   *
+   * @example
+   * // Model-aware — full narrowing:
+   * function handle(request: RequestInstance<typeof Post>) {
+   *   request.get('title') // autocompletes, typed return
+   * }
+   */
+  type RequestInstance<TModel = never> = [TModel] extends [never]
+    ? _RequestInstance
+    : _RequestInstance<_ModelRow<TModel>>
+
+  /**
+   * Auth event payloads — surfaced as globals so listener actions in
+   * `app/Actions/` can type their `handle(input)` parameter without an
+   * explicit import (matching the rest of Stacks' "no imports needed"
+   * authoring style).
+   */
+  type UserRegisteredEvent = _UserRegisteredEvent
+  type UserLoggedInEvent = _UserLoggedInEvent
+  type UserLoggedOutEvent = _UserLoggedOutEvent
+  type UserPasswordEvent = _UserPasswordEvent
+
+  /**
+   * Channel name accepted by `notify()`. Lifted to a global so listener
+   * actions can declare `const channels: NotificationChannel[] = []`
+   * without importing from `@stacksjs/notifications`.
+   */
+  type NotificationChannel = _NotificationChannel
+}

package/project/storage/framework/types/registries.d.ts

@@ -0,0 +1,133 @@
+// The name-addressed registries, derived rather than generated.
+//
+// Actions, listeners, policies, middleware and jobs are all resolved by NAME at
+// runtime - out of a route string, an `app/Events.ts` entry, an `app/Gates.ts`
+// mapping, a `.middleware(...)` call, a `job(...)` dispatch. Every one of those
+// names used to be `string` to the compiler, and the fix for that used to be
+// `storage/framework/types/actions.d.ts`: 1500 lines of hand-generated unions
+// that were correct only until somebody added a file without re-running
+// `buddy generate:types`.
+//
+// Nothing is generated for the types now. Each registry is a lazy map the
+// RESOLVER reads - `storage/framework/auto-imports/*.ts`, written by
+// `generateAutoImportFiles()` for the runtime - and the type is `keyof` over
+// the same object. A name that type-checks is a name that resolves, because
+// there is only one list.
+//
+// Every registry falls back to "any string" when its barrel is missing, so a
+// project that has not run `buddy generate` yet compiles exactly as before.
+
+/** Every action, by the path a route string names it with. */
+type Actions = typeof import('../auto-imports/actions')['actions']
+
+/** Every listener module under `app/Listeners/`, and the defaults behind it. */
+type Listeners = typeof import('../auto-imports/listeners')['listeners']
+
+/** Every policy class under `app/Policies/`, and the defaults behind it. */
+type Policies = typeof import('../auto-imports/policies')['policies']
+
+/** Every middleware class under `app/Middleware/`, and the defaults behind it. */
+type Middlewares = typeof import('../auto-imports/middleware')['middleware']
+
+/** Every email template under `resources/emails/`, and the defaults behind it. */
+type EmailTemplates = typeof import('../auto-imports/emails')['emails']
+
+/** Every job, by the name `resolveJobFile` finds it under. */
+type JobRegistry = typeof import('../auto-imports/jobs')
+type Jobs = JobRegistry
+
+/** The application's middleware alias map, and the framework's behind it. */
+type AppAliases = typeof import('../../../app/Middleware')['default']
+type DefaultAliases = typeof import('../defaults/app/Middleware')['default']
+
+type ActionName = keyof Actions & string
+type ListenerModuleName = keyof Listeners & string
+type PolicyClassName = keyof Policies & string
+type MiddlewareClassName = keyof Middlewares & string
+type JobName = keyof Jobs & string
+type EmailTemplateName = keyof EmailTemplates & string
+
+/**
+ * `'Actions/Auth/LoginAction'` → `'Auth/LoginAction'`.
+ *
+ * A generic, so the conditional distributes over the union. A conditional whose
+ * checked type is a union ALIAS rather than a naked type parameter does not
+ * distribute, and would collapse the whole set to `never`.
+ */
+type WithoutActionsPrefix<T> = T extends `Actions/${infer TRest}` ? TRest : never
+
+/**
+ * What `app/Events.ts` may name against an event: a listener module, or an
+ * action by the name `resolveListener` joins back on (no `Actions/` prefix).
+ */
+type EventListenerName = ListenerModuleName | WithoutActionsPrefix<ActionName>
+
+/**
+ * A middleware reference, in every form the resolver reads.
+ *
+ * The aliases come from the alias maps themselves - they are ordinary modules,
+ * and `defineMiddleware` keeps their literal keys - so there is nothing to
+ * generate for them either. Class names are included because they resolve:
+ * an unaliased middleware is reached by name through `toPascalCase`.
+ */
+type MiddlewareAliasName = (keyof DefaultAliases | keyof AppAliases) & string
+type MiddlewareReferenceName = MiddlewareAliasName | MiddlewareClassName
+
+/**
+ * Every named route, and the path it resolves to.
+ *
+ * The one name here that is not read off the filesystem: a route name is
+ * produced by running code, so `buddy generate:types` loads the route table and
+ * writes the answer as a runtime map. Read here the same way as the others.
+ */
+type NamedRoutes = typeof import('../auto-imports/routes')['routeNames']
+
+// Augment the public entry so declarations follow the router's own dependency instance.
+declare module '@stacksjs/router' {
+  interface RouterTypeRegistry {
+    actions: ActionName | `${string}Controller@${string}`
+    middleware: MiddlewareReferenceName | `!${MiddlewareReferenceName}`
+    routes: NamedRoutes
+  }
+
+  interface MiddlewareClasses extends Record<MiddlewareClassName, true> {}
+}
+
+declare module '@stacksjs/events' {
+  interface EventListeners extends Record<EventListenerName, true> {}
+}
+
+declare module '@stacksjs/auth' {
+  interface PolicyClasses extends Record<PolicyClassName, true> {}
+}
+
+declare module '@stacksjs/email' {
+  interface EmailTemplates extends Record<EmailTemplateName, true> {}
+}
+
+declare module '@stacksjs/queue' {
+  /*
+   * The job MODULES, not `Record<JobName, true>`.
+   *
+   * The names are the same either way - `JobName` is `keyof` this - but the
+   * value carries the `Job<Payload>` instance, so dispatching by name can be
+   * checked against the payload its handler declares. Mapped to `true`, the
+   * registry knew a job existed and nothing about how to call it, and
+   * `job('SendWelcomeEmail', { emial: … })` was accepted.
+   *
+   * Free here: the jobs auto-import is a real re-export barrel rather than a
+   * name-to-path map, so `JobName` already resolves these modules.
+   */
+  interface Jobs extends JobRegistry {}
+}
+
+declare module '@stacksjs/actions' {
+  interface RunnableActions extends Record<ActionName, true> {}
+}
+
+declare module '@stacksjs/scheduler' {
+  interface SchedulableJobs extends Record<JobName, true> {}
+  interface SchedulableActions extends Record<ActionName, true> {}
+}
+
+export {}

package/project/storage/framework/types/request-context.d.ts

@@ -0,0 +1,57 @@
+// Hand-written, unlike its neighbours — `server-auto-imports.d.ts` is
+// regenerated whenever the API starts and would lose these.
+//
+// What a `<script server>` block can reach (stacksjs/stacks#2232). tsc cannot
+// see inside a `.stx` file, but `typecheck:views` hands this file to
+// `stx typecheck` with `--lib`, so the templates are checked against it. It
+// also gives an editor something to complete against.
+//
+// `requestContext` is typed as the object the servers install
+// (`StacksRequestContext` in @stacksjs/config), not restated here. A copy of
+// its methods written out in this file drifted: it had no `site()`, so a
+// template calling `requestContext.site()` as core/sites/README.md tells it to
+// failed `typecheck:views`. The import is relative, as the paths in
+// `browser-auto-imports.d.ts` are: through `@stacksjs/config`, `stx typecheck`
+// resolved the type to `any` and passed a call to a method that does not
+// exist.
+
+export {}
+
+declare global {
+  /**
+   * The request this server script is rendering.
+   *
+   * Installed by `buddy dev` and `buddy serve` (`installRequestScope`), and
+   * read from the scope each server opens for a request, so a page, its
+   * layout and its components each read their own request while others are
+   * in flight. Outside a request, every accessor answers with its empty
+   * value rather than throwing. Only those two servers install it: in a
+   * process that started neither, `requestContext` is undefined.
+   */
+  const requestContext: import('../core/config/src/request-context').StacksRequestContext
+
+  /**
+   * Query parameters injected onto the render context by the serve path.
+   *
+   * Declared optional-shaped for a reason: this is injected by
+   * bun-plugin-stx's serve path only. A standalone render (the SSG path, or
+   * `processDirectives` called without a request) supplies nothing, and a bare
+   * `query` is a ReferenceError there rather than an empty result. Until that
+   * path injects an empty-but-shaped object, reads still need a guard:
+   *
+   *     const params = typeof query !== 'undefined' ? query : {}
+   *
+   * In a process that installed `requestContext`, `requestContext.query()`
+   * answers `{}` there instead.
+   */
+  const query: Record<string, string>
+
+  /**
+   * Cookies injected onto the render context by the serve path.
+   *
+   * Same caveat as `query`: absent in a standalone render, where a process
+   * that installed `requestContext` answers `requestContext.cookie(name)`
+   * with null.
+   */
+  const cookies: Record<string, string>
+}

package/project/storage/framework/types/reset.d.ts

@@ -0,0 +1 @@
+import '@total-typescript/ts-reset'

package/project/storage/framework/types/shims.d.ts

@@ -0,0 +1,20 @@
+/* eslint-disable */
+
+declare interface Window {
+  // extend the window
+}
+
+// Markdown files can be treated as components
+declare module '*.md' {
+  import type { DefineComponent } from '@stacksjs/stx'
+
+  const component: DefineComponent<{}, {}, any>
+  export default component
+}
+
+declare module '*.stx' {
+  import type { DefineComponent } from '@stacksjs/stx'
+
+  const component: DefineComponent<{}, {}, any>
+  export default component
+}

package/project/storage/framework/types/src/auth.ts

@@ -0,0 +1,25 @@
+export interface AuthGuard {
+  driver: 'session' | 'token'
+  provider: string
+}
+
+export interface AuthProvider {
+  driver: 'database'
+  table: string
+}
+
+export interface AuthConfig {
+  default: string
+  guards: {
+    [key: string]: AuthGuard
+  }
+  providers: {
+    [key: string]: AuthProvider
+  }
+  username: string
+  password: string
+  tokenExpiry: number
+  tokenRotation: number
+  defaultAbilities: string[]
+  defaultTokenName: string
+}

package/project/storage/framework/types/traits.d.ts

@@ -0,0 +1,230 @@
+import { Request } from '../core/router/src/request'
+
+interface ValidationRule {
+  validate: (value: unknown) => { valid: boolean, errors?: Array<{ message: string }> }
+}
+
+interface ValidationField {
+    rule: ValidationRule
+    message: Record<string, string>
+  }
+
+interface CustomAttributes {
+    [key: string]: ValidationField
+  }
+
+interface RequestDataMigrations {
+      name: string
+      timestamp: string
+    
+    }
+export interface MigrationsRequestType extends Request {
+      validate(attributes?: CustomAttributes): void
+      get: <T = string>(element: string, defaultValue?: T) => T
+      all(): RequestDataMigrations
+      name: string
+      timestamp: string
+    
+    }
+
+interface RequestDataPasswordResets {
+      email: string
+      token: string
+      created_at: string
+    
+    }
+export interface PasswordResetsRequestType extends Request {
+      validate(attributes?: CustomAttributes): void
+      get: <T = string>(element: string, defaultValue?: T) => T
+      all(): RequestDataPasswordResets
+      email: string
+      token: string
+      created_at: string
+    
+    }
+
+interface RequestDataPasskeys {
+      id: number
+      cred_public_key: string
+      user_id: number
+      webauthn_user_id: string
+      counter: number
+      credential_type: string
+      device_type: string
+      backup_eligible: boolean
+      backup_status: boolean
+      transports: string
+      created_at: string
+      updated_at: string
+      last_used_at: string
+    
+    }
+export interface PasskeysRequestType extends Request {
+      validate(attributes?: CustomAttributes): void
+      get: <T = string>(element: string, defaultValue?: T) => T
+      all(): RequestDataPasskeys
+      id: number
+      cred_public_key: string
+      user_id: number
+      webauthn_user_id: string
+      counter: number
+      credential_type: string
+      device_type: string
+      backup_eligible: boolean
+      backup_status: boolean
+      transports: string
+      created_at: string
+      updated_at: string
+      last_used_at: string
+    
+    }
+
+interface RequestDataCommentables {
+      id: number
+      title: string
+      body: string
+      status: string
+      approved_at: number | null
+      rejected_at: number | null
+      commentables_id: number
+      commentables_type: string
+      user_id: number | null
+      created_at: string
+      updated_at: string | null
+    
+    }
+export interface CommentablesRequestType extends Request {
+      validate(attributes?: CustomAttributes): void
+      get: <T = string>(element: string, defaultValue?: T) => T
+      all(): RequestDataCommentables
+      id: number
+      title: string
+      body: string
+      status: string
+      approved_at: number | null
+      rejected_at: number | null
+      commentables_id: number
+      commentables_type: string
+      user_id: number | null
+      created_at: string
+      updated_at: string | null
+    
+    }
+
+interface RequestDataCommentableUpvotes {
+      id: number
+      user_id: number
+      upvoteable_id: number
+      upvoteable_type: string
+      created_at: string
+    
+    }
+export interface CommentableUpvotesRequestType extends Request {
+      validate(attributes?: CustomAttributes): void
+      get: <T = string>(element: string, defaultValue?: T) => T
+      all(): RequestDataCommentableUpvotes
+      id: number
+      user_id: number
+      upvoteable_id: number
+      upvoteable_type: string
+      created_at: string
+    
+    }
+
+interface RequestDataCategorizable {
+      id: number
+      name: string
+      slug: string
+      description: string
+      is_active: boolean
+      categorizable_type: string
+      created_at: string
+      updated_at: string
+    
+    }
+export interface CategorizableRequestType extends Request {
+      validate(attributes?: CustomAttributes): void
+      get: <T = string>(element: string, defaultValue?: T) => T
+      all(): RequestDataCategorizable
+      id: number
+      name: string
+      slug: string
+      description: string
+      is_active: boolean
+      categorizable_type: string
+      created_at: string
+      updated_at: string
+    
+    }
+
+interface RequestDataTaggable {
+      id: number
+      name: string
+      slug: string
+      description: string
+      is_active: boolean
+      taggable_type: string
+      created_at: string
+      updated_at: string
+    
+    }
+export interface TaggableRequestType extends Request {
+      validate(attributes?: CustomAttributes): void
+      get: <T = string>(element: string, defaultValue?: T) => T
+      all(): RequestDataTaggable
+      id: number
+      name: string
+      slug: string
+      description: string
+      is_active: boolean
+      taggable_type: string
+      created_at: string
+      updated_at: string
+    
+    }
+
+interface RequestDataTaggableModels {
+      id: number
+      tag_id: number
+      taggable_id: number
+      taggable_type: string
+      created_at: string
+      updated_at: string | null
+    
+    }
+export interface TaggableModelsRequestType extends Request {
+      validate(attributes?: CustomAttributes): void
+      get: <T = string>(element: string, defaultValue?: T) => T
+      all(): RequestDataTaggableModels
+      id: number
+      tag_id: number
+      taggable_id: number
+      taggable_type: string
+      created_at: string
+      updated_at: string | null
+    
+    }
+
+interface RequestDataCategorizableModels {
+      id: number
+      category_id: number
+      categorizable_id: number
+      categorizable_type: string
+      created_at: string
+      updated_at: string | null
+    
+    }
+export interface CategorizableModelsRequestType extends Request {
+      validate(attributes?: CustomAttributes): void
+      get: <T = string>(element: string, defaultValue?: T) => T
+      all(): RequestDataCategorizableModels
+      id: number
+      category_id: number
+      categorizable_id: number
+      categorizable_type: string
+      created_at: string
+      updated_at: string | null
+    
+    }
+
+export type TraitRequest = MigrationsRequestType | PasswordResetsRequestType | PasskeysRequestType | CommentablesRequestType | CommentableUpvotesRequestType | CategorizableRequestType | TaggableRequestType | TaggableModelsRequestType | CategorizableModelsRequestType