alepha 0.15.3 → 0.15.5

package/src/api/jobs/services/JobAudits.spec.ts

@@ -0,0 +1,89 @@
+import { Alepha } from "alepha";
+import { AlephaApiAudits, AuditService } from "alepha/api/audits";
+import { AlephaOrm } from "alepha/orm";
+import { describe, test } from "vitest";
+import { JobAudits } from "./JobAudits.ts";
+
+describe("JobAudits", () => {
+  test("should log trigger event", async ({ expect }) => {
+    const alepha = Alepha.create().with(AlephaOrm).with(AlephaApiAudits);
+
+    const jobAudits = alepha.inject(JobAudits);
+    const auditService = alepha.inject(AuditService);
+    await alepha.start();
+
+    // Log a trigger event
+    await jobAudits.logTrigger("my-test-job");
+
+    // Verify audit was recorded
+    const audits = await auditService.find({ type: "job", action: "trigger" });
+
+    expect(audits.content).toHaveLength(1);
+    expect(audits.content[0].type).toBe("job");
+    expect(audits.content[0].action).toBe("trigger");
+    expect(audits.content[0].resourceType).toBe("job");
+    expect(audits.content[0].resourceId).toBe("my-test-job");
+    expect(audits.content[0].description).toBe(
+      "Manually triggered job: my-test-job",
+    );
+  });
+
+  test("should log pause event", async ({ expect }) => {
+    const alepha = Alepha.create().with(AlephaOrm).with(AlephaApiAudits);
+
+    const jobAudits = alepha.inject(JobAudits);
+    const auditService = alepha.inject(AuditService);
+    await alepha.start();
+
+    await jobAudits.logPause("daily-cleanup");
+
+    const audits = await auditService.find({ type: "job", action: "pause" });
+
+    expect(audits.content).toHaveLength(1);
+    expect(audits.content[0].resourceId).toBe("daily-cleanup");
+    expect(audits.content[0].description).toBe("Paused job: daily-cleanup");
+  });
+
+  test("should log schedule change with cron metadata", async ({ expect }) => {
+    const alepha = Alepha.create().with(AlephaOrm).with(AlephaApiAudits);
+
+    const jobAudits = alepha.inject(JobAudits);
+    const auditService = alepha.inject(AuditService);
+    await alepha.start();
+
+    await jobAudits.logScheduleChange("backup-job", {
+      oldCron: "0 0 * * *",
+      newCron: "0 3 * * *",
+    });
+
+    const audits = await auditService.find({
+      type: "job",
+      action: "schedule_change",
+    });
+
+    expect(audits.content).toHaveLength(1);
+    expect(audits.content[0].resourceId).toBe("backup-job");
+    expect(audits.content[0].metadata).toEqual({
+      oldCron: "0 0 * * *",
+      newCron: "0 3 * * *",
+    });
+  });
+
+  test("should register job audit type", async ({ expect }) => {
+    const alepha = Alepha.create().with(AlephaOrm).with(AlephaApiAudits);
+
+    alepha.inject(JobAudits);
+    const auditService = alepha.inject(AuditService);
+    await alepha.start();
+
+    const types = auditService.getRegisteredTypes();
+    const jobType = types.find((t) => t.type === "job");
+
+    expect(jobType).toBeDefined();
+    expect(jobType?.actions).toContain("trigger");
+    expect(jobType?.actions).toContain("pause");
+    expect(jobType?.actions).toContain("resume");
+    expect(jobType?.actions).toContain("cancel");
+    expect(jobType?.actions).toContain("schedule_change");
+  });
+});

package/src/api/jobs/services/JobAudits.ts

@@ -0,0 +1,101 @@
+import { $audit, type AuditLogOptions } from "alepha/api/audits";
+
+/**
+ * Job-specific audit service.
+ *
+ * Provides type-safe audit logging for job-related events.
+ * This service is lazy-loaded when the audits feature is enabled.
+ *
+ * @example
+ * ```ts
+ * const jobAudits = alepha.inject(JobAudits);
+ * await jobAudits.logTrigger("my-job", { description: "Manually triggered" });
+ * ```
+ */
+export class JobAudits {
+  protected readonly audit = $audit({
+    type: "job",
+    description: "Background job execution events",
+    actions: ["trigger", "pause", "resume", "cancel", "schedule_change"],
+  });
+
+  /**
+   * Log a manual job trigger event.
+   */
+  public async logTrigger(
+    jobName: string,
+    options: Omit<AuditLogOptions, "resourceType" | "resourceId"> = {},
+  ) {
+    await this.audit.log("trigger", {
+      ...options,
+      resourceType: "job",
+      resourceId: jobName,
+      description: options.description ?? `Manually triggered job: ${jobName}`,
+    });
+  }
+
+  /**
+   * Log a job pause event.
+   */
+  public async logPause(
+    jobName: string,
+    options: Omit<AuditLogOptions, "resourceType" | "resourceId"> = {},
+  ) {
+    await this.audit.log("pause", {
+      ...options,
+      resourceType: "job",
+      resourceId: jobName,
+      description: options.description ?? `Paused job: ${jobName}`,
+    });
+  }
+
+  /**
+   * Log a job resume event.
+   */
+  public async logResume(
+    jobName: string,
+    options: Omit<AuditLogOptions, "resourceType" | "resourceId"> = {},
+  ) {
+    await this.audit.log("resume", {
+      ...options,
+      resourceType: "job",
+      resourceId: jobName,
+      description: options.description ?? `Resumed job: ${jobName}`,
+    });
+  }
+
+  /**
+   * Log a job cancellation event.
+   */
+  public async logCancel(
+    jobName: string,
+    options: Omit<AuditLogOptions, "resourceType" | "resourceId"> = {},
+  ) {
+    await this.audit.log("cancel", {
+      ...options,
+      resourceType: "job",
+      resourceId: jobName,
+      description: options.description ?? `Cancelled job: ${jobName}`,
+    });
+  }
+
+  /**
+   * Log a job schedule change event.
+   */
+  public async logScheduleChange(
+    jobName: string,
+    options: Omit<AuditLogOptions, "resourceType" | "resourceId"> & {
+      oldCron?: string;
+      newCron?: string;
+    } = {},
+  ) {
+    const { oldCron, newCron, ...rest } = options;
+    await this.audit.log("schedule_change", {
+      ...rest,
+      resourceType: "job",
+      resourceId: jobName,
+      description: rest.description ?? `Changed schedule for job: ${jobName}`,
+      metadata: { oldCron, newCron, ...rest.metadata },
+    });
+  }
+}

package/src/api/keys/index.ts

@@ -16,9 +16,9 @@ export * from "./schemas/revokeApiKeyResponseSchema.ts";
 export * from "./services/ApiKeyService.ts";
 
 /**
- * | type | quality | stability |
- * |------|---------|--------------|
- * | backend | good | experimental |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.11.0 | node, bun, workerd|
  *
  * API key management module for programmatic access.
  *

package/src/api/notifications/controllers/AdminNotificationController.ts

@@ -15,6 +15,7 @@ export class AdminNotificationController {
   public readonly findNotifications = $action({
     path: this.url,
     group: this.group,
+    secure: true,
     description: "Find notifications with pagination and filtering",
     schema: {
       query: notificationQuerySchema,

package/src/api/notifications/index.ts

@@ -25,9 +25,9 @@ export * from "./services/NotificationService.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.10.0 | node, bun, workerd|
  *
  * User notification management.
  *

package/src/api/parameters/controllers/AdminConfigController.ts

@@ -41,6 +41,7 @@ export class AdminConfigController {
    */
   getConfigTree = $action({
     group: this.group,
+    secure: true,
     description:
       "Get tree structure of all configuration names for navigation.",
     path: "/configs/tree",
@@ -58,6 +59,7 @@ export class AdminConfigController {
    */
   listConfigNames = $action({
     group: this.group,
+    secure: true,
     description: "List all unique configuration names.",
     path: "/configs",
     method: "GET",
@@ -75,6 +77,7 @@ export class AdminConfigController {
    */
   getByStatus = $action({
     group: this.group,
+    secure: true,
     description: "Get all configurations with a specific status.",
     path: "/configs/status/:status",
     method: "GET",
@@ -95,6 +98,7 @@ export class AdminConfigController {
    */
   getHistory = $action({
     group: this.group,
+    secure: true,
     description: "Get all versions of a specific configuration.",
     path: "/configs/:name/history",
     method: "GET",
@@ -115,6 +119,7 @@ export class AdminConfigController {
    */
   getCurrent = $action({
     group: this.group,
+    secure: true,
     description: "Get current and next scheduled values for a configuration.",
     path: "/configs/:name",
     method: "GET",
@@ -139,6 +144,7 @@ export class AdminConfigController {
    */
   getVersion = $action({
     group: this.group,
+    secure: true,
     description: "Get a specific version of a configuration.",
     path: "/configs/:name/versions/:version",
     method: "GET",
@@ -157,6 +163,7 @@ export class AdminConfigController {
    */
   createVersion = $action({
     group: this.group,
+    secure: true,
     description:
       "Create a new version of a configuration (immediate or scheduled).",
     path: "/configs/:name",
@@ -184,6 +191,7 @@ export class AdminConfigController {
    */
   rollback = $action({
     group: this.group,
+    secure: true,
     description:
       "Rollback a configuration to a previous version (creates new version with old content).",
     path: "/configs/:name/rollback",
@@ -207,6 +215,7 @@ export class AdminConfigController {
    */
   activateNow = $action({
     group: this.group,
+    secure: true,
     description: "Activate a future/next configuration version immediately.",
     path: "/configs/:name/activate",
     method: "POST",
@@ -248,6 +257,7 @@ export class AdminConfigController {
    */
   checkScheduled = $action({
     group: this.group,
+    secure: true,
     description:
       "Manually trigger activation check for all scheduled configurations.",
     path: "/configs/activate-scheduled",

package/src/api/parameters/index.ts

@@ -1,5 +1,6 @@
 import { $module } from "alepha";
 import { AdminConfigController } from "./controllers/AdminConfigController.ts";
+import { $config } from "./primitives/$config.ts";
 import { ConfigActivationScheduler } from "./schedulers/ConfigActivationScheduler.ts";
 import { ConfigStore } from "./services/ConfigStore.ts";
 
@@ -19,9 +20,9 @@ export * from "./services/ConfigStore.ts";
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | standard | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.9.0 | node, bun, workerd|
  *
  * Application configuration management.
  *
@@ -35,5 +36,6 @@ export * from "./services/ConfigStore.ts";
  */
 export const AlephaApiParameters = $module({
   name: "alepha.api.parameters",
+  primitives: [$config],
   services: [ConfigStore, AdminConfigController, ConfigActivationScheduler],
 });

package/src/api/users/__tests__/ApiKeys-integration.spec.ts

@@ -33,7 +33,7 @@ const setup = async () => {
   // Create a realm with API keys enabled
   class TestApp {
     realm = $realm({
-      apiKeys: true,
+      features: { apiKeys: true },
     });
 
     // A protected action to test API key authentication (any authenticated user)

package/src/api/users/__tests__/ApiKeys.spec.ts

@@ -20,7 +20,7 @@ const setup = async () => {
   // Create a realm with API keys enabled
   class TestApp {
     realm = $realm({
-      apiKeys: true,
+      features: { apiKeys: true },
     });
   }
 

package/src/api/users/__tests__/EmailVerification.spec.ts

@@ -5,7 +5,13 @@ import { AlephaEmail, MemoryEmailProvider } from "alepha/email";
 import { AlephaSecurity } from "alepha/security";
 import { BadRequestError } from "alepha/server";
 import { describe, it } from "vitest";
-import { AlephaApiUsers, UserController, UserService } from "../index.ts";
+import {
+  AlephaApiUsers,
+  RealmProvider,
+  UserController,
+  UserNotifications,
+  UserService,
+} from "../index.ts";
 
 const setup = async () => {
   const alepha = Alepha.create({
@@ -16,9 +22,18 @@ const setup = async () => {
   alepha.with(AlephaEmail);
   alepha.with(AlephaApiVerification);
   alepha.with(AlephaApiUsers);
+  alepha.with(UserNotifications);
 
   await alepha.start();
 
+  // Enable notifications for the default realm
+  const realmProvider = alepha.inject(RealmProvider);
+  realmProvider.register("default", {
+    features: {
+      notifications: true,
+    },
+  });
+
   const emailProvider = alepha.inject(MemoryEmailProvider);
   emailProvider.records = [];
 

package/src/api/users/__tests__/PasswordReset.spec.ts

@@ -8,8 +8,10 @@ import { describe, it } from "vitest";
 import {
   AlephaApiUsers,
   CredentialService,
+  RealmProvider,
   SessionService,
   UserController,
+  UserNotifications,
 } from "../index.ts";
 
 const setup = async () => {
@@ -21,9 +23,18 @@ const setup = async () => {
   alepha.with(AlephaEmail);
   alepha.with(AlephaApiVerification);
   alepha.with(AlephaApiUsers);
+  alepha.with(UserNotifications);
 
   await alepha.start();
 
+  // Enable notifications for the default realm
+  const realmProvider = alepha.inject(RealmProvider);
+  realmProvider.register("default", {
+    features: {
+      notifications: true,
+    },
+  });
+
   const emailProvider = alepha.inject(MemoryEmailProvider);
   emailProvider.records = [];
 

package/src/api/users/atoms/realmAuthSettingsAtom.ts

@@ -62,6 +62,14 @@ export const realmAuthSettingsAtom = $atom({
     resetPasswordAllowed: t.boolean({
       description: "Enable forgot password functionality",
     }),
+    adminEmails: t.array(t.email(), {
+      description:
+        "List of email addresses that are automatically promoted to admin role on login",
+    }),
+    adminUsernames: t.array(t.text(), {
+      description:
+        "List of usernames that are automatically promoted to admin role on login",
+    }),
     passwordPolicy: t.object({
       minLength: t.integer({
         description: "Minimum password length",
@@ -97,6 +105,8 @@ export const realmAuthSettingsAtom = $atom({
     resetPasswordAllowed: false,
     firstNameLastNameEnabled: false,
     firstNameLastNameRequired: false,
+    adminEmails: [],
+    adminUsernames: [],
     // TODO: not implemented yet
     passwordPolicy: {
       minLength: 8,

package/src/api/users/controllers/AdminIdentityController.ts

@@ -15,6 +15,7 @@ export class AdminIdentityController {
   public readonly findIdentities = $action({
     path: this.url,
     group: this.group,
+    secure: true,
     description: "Find identities with pagination and filtering",
     schema: {
       query: t.extend(identityQuerySchema, {
@@ -34,6 +35,7 @@ export class AdminIdentityController {
   public readonly getIdentity = $action({
     path: `${this.url}/:id`,
     group: this.group,
+    secure: true,
     description: "Get an identity by ID",
     schema: {
       params: t.object({
@@ -55,6 +57,7 @@ export class AdminIdentityController {
     method: "DELETE",
     path: `${this.url}/:id`,
     group: this.group,
+    secure: true,
     description: "Delete an identity",
     schema: {
       params: t.object({

package/src/api/users/controllers/AdminSessionController.ts

@@ -15,6 +15,7 @@ export class AdminSessionController {
   public readonly findSessions = $action({
     path: this.url,
     group: this.group,
+    secure: true,
     description: "Find sessions with pagination and filtering",
     schema: {
       query: t.extend(sessionQuerySchema, {
@@ -34,6 +35,7 @@ export class AdminSessionController {
   public readonly getSession = $action({
     path: `${this.url}/:id`,
     group: this.group,
+    secure: true,
     description: "Get a session by ID",
     schema: {
       params: t.object({
@@ -55,6 +57,7 @@ export class AdminSessionController {
     method: "DELETE",
     path: `${this.url}/:id`,
     group: this.group,
+    secure: true,
     description: "Delete a session",
     schema: {
       params: t.object({

package/src/api/users/controllers/AdminUserController.ts

@@ -17,6 +17,7 @@ export class AdminUserController {
   public readonly findUsers = $action({
     path: this.url,
     group: this.group,
+    secure: true,
     description: "Find users with pagination and filtering",
     schema: {
       query: t.extend(userQuerySchema, {
@@ -36,6 +37,7 @@ export class AdminUserController {
   public readonly getUser = $action({
     path: `${this.url}/:id`,
     group: this.group,
+    secure: true,
     description: "Get a user by ID",
     schema: {
       params: t.object({
@@ -57,6 +59,7 @@ export class AdminUserController {
     method: "POST",
     path: this.url,
     group: this.group,
+    secure: true,
     description: "Create a new user",
     schema: {
       query: t.object({
@@ -76,6 +79,7 @@ export class AdminUserController {
     method: "PATCH",
     path: `${this.url}/:id`,
     group: this.group,
+    secure: true,
     description: "Update a user",
     schema: {
       params: t.object({
@@ -98,6 +102,7 @@ export class AdminUserController {
     method: "DELETE",
     path: `${this.url}/:id`,
     group: this.group,
+    secure: true,
     description: "Delete a user",
     schema: {
       params: t.object({

package/src/api/users/index.ts

@@ -1,6 +1,4 @@
 import { $module } from "alepha";
-import { AlephaApiNotifications } from "alepha/api/notifications";
-import { AlephaApiVerification } from "alepha/api/verifications";
 import { AlephaEmail } from "alepha/email";
 import { AlephaServerCompress } from "alepha/server/compress";
 import { AlephaServerHelmet } from "alepha/server/helmet";
@@ -9,7 +7,6 @@ import { AdminSessionController } from "./controllers/AdminSessionController.ts"
 import { AdminUserController } from "./controllers/AdminUserController.ts";
 import { RealmController } from "./controllers/RealmController.ts";
 import { UserController } from "./controllers/UserController.ts";
-import { UserNotifications } from "./notifications/UserNotifications.ts";
 import { RealmProvider } from "./providers/RealmProvider.ts";
 import { CredentialService } from "./services/CredentialService.ts";
 import { IdentityService } from "./services/IdentityService.ts";
@@ -52,14 +49,19 @@ export * from "./services/IdentityService.ts";
 export * from "./services/RegistrationService.ts";
 export * from "./services/SessionCrudService.ts";
 export * from "./services/SessionService.ts";
+export * from "./services/UserAudits.ts";
+export * from "./services/UserFiles.ts";
+export * from "./services/UserJobs.ts";
+export * from "./services/UserNotifications.ts";
+export * from "./services/UserParameters.ts";
 export * from "./services/UserService.ts";
 
 // ---------------------------------------------------------------------------------------------------------------------
 
 /**
- * | type | quality | stability |
- * |------|---------|-----------|
- * | backend | epic | stable |
+ * | Stability | Since | Runtime |
+ * |-----------|-------|---------|
+ * | 3 - stable | 0.5.0 | node, bun, workerd|
  *
  * Complete user management with multi-realm support for multi-tenant applications.
  *
@@ -78,8 +80,6 @@ export * from "./services/UserService.ts";
 export const AlephaApiUsers = $module({
   name: "alepha.api.users",
   services: [
-    AlephaApiVerification,
-    AlephaApiNotifications,
     AlephaServerHelmet,
     AlephaServerCompress,
     AlephaEmail,
@@ -95,6 +95,5 @@ export const AlephaApiUsers = $module({
     AdminSessionController,
     AdminIdentityController,
     RealmController,
-    UserNotifications,
   ],
 });