@stacksjs/defaults 0.75.30 → 0.75.32

package/ai/skills/stacks-actions/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: stacks-actions
-description: Use when working with Stacks server actions - creating actions in app/Actions/, auto-generated API actions from the useApi model trait, the 634 default framework actions (auth, dashboard, commerce, content, deployment, jobs), action request/response handling, or action registration. Covers @stacksjs/actions and storage/framework/defaults/app/Actions/.
+description: Use when working with Stacks server actions - creating actions in app/Actions/, auto-generated API actions from the useApi model trait, the 647 default framework actions (auth, dashboard, commerce, content, deployment, jobs), action request/response handling, or action registration. Covers @stacksjs/actions and storage/framework/defaults/app/Actions/.
 license: MIT
 compatibility: Bun >= 1.3.0, TypeScript
 allowed-tools: Read Edit Write Bash Grep Glob

package/ai/skills/stacks-auth/SKILL.md

@@ -395,7 +395,6 @@ await authUser.authorize('edit-post', post)  // throws if denied
     withRefreshToken: false, // fixed browser lifetime, no unused refresh token
     logoutRedirect: '/login?logged_out=1', // local path for HTML logout only
   },
-  tokenRotation: 24,       // hours
   defaultAbilities: ['*'],
   defaultTokenName: 'auth-token',
   passwordReset: { expire: 60, throttle: 60 }

package/ai/skills/stacks-config/SKILL.md

@@ -66,7 +66,7 @@ they name: `defineEvents` and `defineListener` from `@stacksjs/events`,
 | File | Type | Key Settings |
 |------|------|-------------|
 | `app.ts` | AppConfig | name, env, url, debug, key, timezone, locale |
-| `auth.ts` | AuthConfig | guards, providers, tokenExpiry(30d), tokenRotation(7d), passwordReset |
+| `auth.ts` | AuthConfig | guards, providers, token and browser-session lifetimes, passwordReset |
 | `database.ts` | DatabaseConfig | default driver, connections (sqlite/mysql/postgres/dynamodb), queryLogging |
 | `cache.ts` | CacheConfig | driver('memory'), ttl(3600), maxKeys(-1), redis config |
 | `env.ts` | EnvConfig | validation schemas for env vars |

package/ai/skills/stacks-email/SKILL.md

@@ -238,6 +238,12 @@ abstract class BaseEmailDriver {
 }
 ```
 
+### Mail DNS a deploy publishes
+
+With `server.enabled`, `buddy deploy` reconciles the mail domain's DNS through whichever configured provider holds the zone: MX, SPF, DKIM at the selector the server signs under, DMARC (`server.dmarc`), `mail.<domain>`, and the Gmail Postmaster Tools verification TXT when `server.postmaster.google` is set. Writes are surgical: only records the deploy owns are replaced, so other apex TXT (Search Console, other verifications) survive.
+
+Postmaster Tools is the only view of why Gmail files mail as spam when SPF, DKIM and DMARC all pass. Its value is issued per Google account and cannot be generated: add the domain at https://postmaster.google.com, copy the TXT value, set `server.postmaster.google`, deploy, then press Verify in Postmaster Tools. Until it is set the deploy prints where to get it; `postmaster: false` silences that.
+
 ## Application Mail Example
 
 ```typescript

package/ai/skills/stacks-types/SKILL.md

@@ -29,7 +29,7 @@ interface AuthConfig {
   username: string
   password: string
   tokenExpiry: number           // 30 days
-  tokenRotation: number         // 7 days
+  tokenRotation?: number        // deprecated; rotate explicitly
   defaultAbilities: string[]
   defaultTokenName: string
 }

package/app/Actions/Auth/GenerateAuthenticationAction.ts

@@ -1,13 +1,13 @@
 import type { PublicKeyCredentialRequestOptionsJSON } from '@stacksjs/auth'
 import { Action } from '@stacksjs/actions'
 import {
+  findAuthUserByEmail,
   generateAuthenticationOptions,
   getUserPasskeys,
   passkeyDescriptors,
   storeWebAuthnChallenge,
 } from '@stacksjs/auth'
 import { config } from '@stacksjs/config'
-import { User } from '@stacksjs/orm'
 
 export default new Action({
   name: 'PasskeyAuthenticationAction',
@@ -20,7 +20,7 @@ export default new Action({
       return Response.json({ error: 'Email is required' }, { status: 422 })
     }
 
-    const user = await User.where('email', email).first()
+    const user = await findAuthUserByEmail(email)
 
     if (!user) {
       return Response.json({ error: 'User not found' }, { status: 404 })

package/app/Actions/Auth/VerifyAuthenticationAction.ts

@@ -4,6 +4,7 @@ import {
   Auth,
   authCookieForBrowserSession,
   consumeWebAuthnChallenge,
+  findAuthUserByEmail,
   getUserPasskey,
   resolveBrowserSessionPolicy,
   updatePasskeyCounter,
@@ -11,7 +12,6 @@ import {
 } from '@stacksjs/auth'
 import { config } from '@stacksjs/config'
 import { response } from '@stacksjs/router'
-import { User } from '@stacksjs/orm'
 
 export default new Action({
   name: 'VerifyAuthenticationAction',
@@ -23,7 +23,7 @@ export default new Action({
 
     const email = request.get('email') ?? ''
 
-    const user = await User.where('email', email).first()
+    const user = await findAuthUserByEmail(email)
 
     if (!user)
       return response.notFound('User not found')

package/ide/vscode/package.json

@@ -2,7 +2,7 @@
   "publisher": "Stacks",
   "name": "vscode-stacks",
   "displayName": "Stacks",
-  "version": "0.75.30",
+  "version": "0.75.32",
   "description": "A modern Stacks development environment.",
   "license": "MIT",
   "funding": "https://github.com/sponsors/chrisbbreuer",

package/package.json

@@ -2,7 +2,7 @@
   "name": "@stacksjs/defaults",
   "type": "module",
   "sideEffects": false,
-  "version": "0.75.30",
+  "version": "0.75.32",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/stacksjs/stacks.git",
@@ -55,7 +55,7 @@
   "dependencies": {
     "@iconify-json/f7": "^1.2.2",
     "@iconify-json/hugeicons": "^1.2.27",
-    "@stacksjs/mobile": "^0.75.30",
+    "@stacksjs/mobile": "^0.75.32",
     "@stacksjs/sanitizer": "^0.2.113",
     "ts-qr-codes": "^0.1.8"
   }

package/project/storage/framework/types/src/auth.ts

@@ -19,7 +19,8 @@ export interface AuthConfig {
   username: string
   password: string
   tokenExpiry: number
-  tokenRotation: number
+  /** @deprecated Use explicit bearer rotation or a refresh-token exchange. */
+  tokenRotation?: number
   defaultAbilities: string[]
   defaultTokenName: string
 }

package/resources/components/NativeComponents.test.ts

@@ -20,6 +20,13 @@ describe('Native components', () => {
     expect(item).toContain('draggable="false"')
   })
 
+  it('centres each tab in the bar rather than against its top border', () => {
+    // stx wraps each NativeTabItem in a scope box; the box stretched while
+    // the link inside kept its own height, so icons sat on the border.
+    const bar = read('NativeTabBar')
+    expect(bar).toContain('.native-tab-bar > [data-stx-scope]:has(> .native-tab-item) { display: contents; }')
+  })
+
   it('shows the offline banner by class, so it can come back', () => {
     const banner = read('NativeNetworkBanner')
     expect(banner).not.toContain(':if="!connected()"')

package/resources/components/NativeTabBar.stx

@@ -19,6 +19,12 @@ function selectTab(): void {
 </nav>
 
 <style>
+  /* Each tab is a component, and stx wraps a component in a box of its own:
+     that box stretched to the bar's height while the link inside kept the
+     height of its icon and label, pressed against the bar's top border. The
+     box steps aside, so the link is the grid item and centres in the bar. */
+  .native-tab-bar > [data-stx-scope]:has(> .native-tab-item) { display: contents; }
+
   .native-tab-bar {
     display: grid;
     grid-auto-flow: column;