nucleus-core-ts 0.10.0 → 0.10.2

package/dist/src/Client/ApiCaller/client.d.ts

@@ -1,5 +1,36 @@
 import type { ApiResponse, EndpointAction, EndpointDefinition } from './types';
 export declare function createActionsFacade<TActions extends object>(endpoints: Record<string, unknown>, buildAction: (key: string) => TActions[keyof TActions]): TActions;
+/**
+ * What a response does to an endpoint's cached state.
+ *
+ * Extracted so it can be tested without React: the hook needs a renderer, and
+ * the defect this guards lives entirely in this transition rather than in the
+ * rendering.
+ *
+ * The rule that matters is the failure branch. This store is built once at
+ * module scope, so its per-endpoint state is global to the browser session and
+ * survives client-side navigation. Leaving `data` alone on a failure left the
+ * last SUCCESSFUL answer readable under a different id.
+ *
+ * It was invisible while a missing row answered `200 {data:null}` — that
+ * overwrote the cache and the page rendered "not found". The moment a missing
+ * or out-of-scope row began answering 404, nothing cleared the cache and a
+ * detail page rendered THE PREVIOUS ROW under the new URL. Found by auditing a
+ * customer delivery before it upgraded: its announcements and employees are
+ * location-scoped, so "outside your scope" is the ordinary case, and an
+ * employee opening an announcement they may not see was shown the last one
+ * they could.
+ */
+export declare function applyResponse(response: {
+    isSuccess?: boolean;
+    data?: unknown;
+    errors?: unknown;
+    code?: number | null;
+}, fallbackError?: unknown): {
+    data: unknown;
+    error: unknown;
+    code: number | null;
+};
 export declare function createApiHook<TEndpoints extends Record<string, EndpointDefinition>>(endpoints: TEndpoints, factory: <K extends keyof TEndpoints & string>(endpointKey: K, payload: TEndpoints[K]['_payload']) => Promise<ApiResponse<TEndpoints[K]['_success'], TEndpoints[K]['_error']>>): () => { [K in keyof TEndpoints]: EndpointAction<TEndpoints[K]["_payload"], TEndpoints[K]["_success"], TEndpoints[K]["_error"]>; };
 export type ApiHook<TEndpoints extends Record<string, EndpointDefinition>> = ReturnType<typeof createApiHook<TEndpoints>>;
 export type ApiActions<TEndpoints extends Record<string, EndpointDefinition>> = ReturnType<ApiHook<TEndpoints>>;

package/dist/src/Client/ApiCaller/server.d.ts

@@ -24,6 +24,15 @@ export declare function serverRequestId(response: {
  *
  * A response that already carries `data` is left exactly as it is; so is
  * anything that is not a plain object.
+ *
+ * `isSuccess` is destructured with `success` because it is the SAME FLAG under
+ * the API's other name (see `Server/response.ts`'s `withEnvelopeFlags`), and
+ * anything not named here falls into `rest` and is buried one level down as
+ * `data`. Left in `rest`, the server carrying both names would have turned
+ * `{success:false, message}` — which shapes to `{success, message}` and no
+ * `data` — into `{success, message, data:{isSuccess:false}}`, inventing a
+ * payload out of an envelope field. The same class of defect as the
+ * `requiresCaptcha` one the control-flag list above exists for.
  */
 export declare function normalizeResponseShape(response: unknown): unknown;
 export declare function createServerFactory<TEndpoints extends Record<string, EndpointDefinition>>(endpoints: TEndpoints, config: ServerFactoryConfig, getCookies: () => Promise<CookieStore>, getHeaders: () => Promise<HeadersStore>): <K extends keyof TEndpoints & string>(endpointKey: K, payload: TEndpoints[K]["_payload"]) => Promise<ApiResponse<TEndpoints[K]["_success"], TEndpoints[K]["_error"]>>;

package/dist/src/Client/ApiCaller/types.d.ts

@@ -565,10 +565,20 @@ export interface RevokeApiKeyPayload {
     id: string;
     reason?: string;
 }
+/**
+ * The answer to a revoke — which is NOT a delete, and now says so.
+ *
+ * `data` was `null`, which left the caller with an HTTP DELETE, a 200 and no
+ * information: the natural reading is "gone", and the next `API_KEYS_DETAIL`
+ * answers 200 with the row. The row is kept on purpose — it is the audit record
+ * (`revokedAt`, `revokedReason`, `usageCount`, `lastUsedAt`) — so the answer
+ * carries it instead, with `isActive:false` and `revokedAt` set. See the note
+ * above the handler in `Nucleus/routes/auth/apiKeys/index.ts`.
+ */
 export interface RevokeApiKeyResponse {
     isSuccess: boolean;
     message: string;
-    data: null;
+    data: ApiKeyListItem;
 }
 export declare const AUTH_ENDPOINT_CONFIGS: {
     login: {

package/dist/src/Nucleus/routes/auth/admin/revokeUserSessions.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Ending every session an account is holding, from an administrator's action.
+ *
+ * Half of every "shut this account down" button lives here, and it is the half
+ * that used to be missing. Writing `is_locked = true` refuses the NEXT login;
+ * it says nothing about the browser that is already signed in, because the
+ * request path re-reads the session row on every request and never the user's
+ * own flags. Measured on a live install: a godmin locked an account, the next
+ * login was correctly refused 403 `Account is locked`, and the account's own
+ * `/auth/me` kept answering 200 — the lock bolted the front door with the
+ * intruder still inside.
+ *
+ * The password endpoints had already learned this ("Sessions opened with the
+ * old password end with it"), which is exactly what made the gap visible: two
+ * sibling administrator actions, one of which ended the sessions and one of
+ * which did not. So the statement lives in ONE place and every caller runs the
+ * same one, rather than each growing its own half-answer.
+ *
+ * A failure is reported as zero rather than thrown: the flag has already been
+ * written by the time this runs, and turning a completed lock into a 500 would
+ * send an administrator back to press a button that already worked. The number
+ * is returned so the answer can say `signedOut: 0` instead of rounding a
+ * half-done shutdown up to success.
+ */
+type Executor = {
+    delete: (table: never) => {
+        where: (condition: never) => Promise<unknown>;
+    };
+};
+export interface RevokeUserSessionsDeps {
+    db: Executor | null | undefined;
+    /** The per-request sessions table; absent on an install that has none. */
+    sessionsTable: Record<string, unknown> | null | undefined;
+    /** Told what went wrong. Never rethrown — see above. */
+    onError?: (error: unknown) => void;
+}
+export declare function revokeUserSessions(deps: RevokeUserSessionsDeps, userIds: readonly string[]): Promise<number>;
+export {};

package/dist/src/Nucleus/routes/auth/cohort/handlers/deactivateUsers.d.ts

@@ -1,6 +1,6 @@
 import type { Logger } from 'src/Services';
 import type { CohortContext, CohortRouteConfig } from '../types';
-export declare const handleDeactivateUsers: (db: NonNullable<CohortRouteConfig["db"]>, usersTable: NonNullable<CohortRouteConfig["usersTable"]>, logger: Logger) => (ctx: CohortContext<{
+export declare const handleDeactivateUsers: (db: NonNullable<CohortRouteConfig["db"]>, usersTable: NonNullable<CohortRouteConfig["usersTable"]>, logger: Logger, sessionsTable: CohortRouteConfig["sessionsTable"]) => (ctx: CohortContext<{
     params: {
         id: string;
     };
@@ -12,6 +12,7 @@ export declare const handleDeactivateUsers: (db: NonNullable<CohortRouteConfig["
     success: boolean;
     data: {
         affected: number;
+        signedOut: number;
     };
     message?: undefined;
 }>;

package/dist/src/Nucleus/routes/auth/cohort/types.d.ts

@@ -6,6 +6,13 @@ export type CohortRouteConfig = {
     logger: Logger;
     cohortsTable: PgTable | null;
     usersTable: PgTable | null;
+    /**
+     * Needed by `deactivate-users`, which has to end the sessions of everybody it
+     * locks — otherwise the sweep bolts the door on a room full of people who are
+     * already inside. Optional: an install with no sessions table has nothing to
+     * end, and no other cohort handler reads it.
+     */
+    sessionsTable?: PgTable | null;
     rolesTable: PgTable | null;
     userRolesTable: PgTable | null;
     profilesTable: PgTable | null;

package/dist/src/Nucleus/routes/storage/helpers.d.ts

@@ -56,15 +56,31 @@ export declare function parseFormDataBody(body: unknown, config: StorageConfig):
 export declare function validateFile(file: File, config: StorageConfig): {
     valid: boolean;
     error?: string;
+    rejected?: boolean;
 };
 export declare function setStorageProvider(provider: StorageProvider | null): void;
 export declare function getStorageProvider(): StorageProvider | null;
 export declare function uploadFile(file: File, config: StorageConfig, subFolder?: string): Promise<FileUploadResult>;
 export declare function uploadFiles(files: File[], config: StorageConfig, subFolder?: string): Promise<{
     success: FileUploadResult[];
+    /**
+     * `rejected` separates "we refused your file" from "the upload broke".
+     *
+     * Both used to be one shape, and the route answered 500 to both — so a
+     * caller sending a .bin to an install that allows images was told the SERVER
+     * had failed. Measured on the preview:
+     *
+     *   POST /files  application/octet-stream
+     *   500 {"message":"File upload failed","errors":[{"error":"File type
+     *        application/octet-stream is not in allowed list"}]}
+     *
+     * A 5xx is what an error-rate alarm counts, so every user picking the wrong
+     * file type read as an outage.
+     */
     failed: {
         file: string;
         error: string;
+        rejected?: boolean;
     }[];
 }>;
 /**

package/dist/src/Server/response.d.ts

@@ -63,6 +63,73 @@ export interface ResponseSet {
 }
 /** A fresh `set` for one request. */
 export declare function createResponseSet(): ResponseSet;
+/**
+ * ONE API, TWO NAMES FOR THE SAME FLAG — carried together rather than chosen
+ * between.
+ *
+ * Measured on the booted product (the widest config: auth, sessions, api-keys,
+ * config, secrets, integrations, monitoring, backup, chat, notifications,
+ * payment, storage, tenant), 342 declared routes walked anonymous and again
+ * with a real session. Which key the answer carried:
+ *
+ *                        anonymous   signed-in
+ *   `success` only               4         252
+ *   `isSuccess` only           331          26
+ *   BOTH already                  0           9
+ *   neither (health, subs,        5          55
+ *    the validation envelope)
+ *
+ * The split is not a stray route. `auth`, `sessions`, the generic entity CRUD,
+ * chat, notifications and the shared admin refusal say `success`; `api-keys`,
+ * `nucleus/config`, `secrets`, `integrations`, `monitoring`, `auth/check` and
+ * the tenant subdomain check say `isSuccess` — and so does the refusal envelope
+ * this release standardised (`{isSuccess,message,status,errors,data}`, built in
+ * the returned-Error branch below, in `inboundGuard`, and in the tenant/CSRF/
+ * error middleware). Driven end to end, one login and one API key:
+ *
+ *   POST /auth/login        200  {data,success}
+ *   GET  /auth/me           200  {data,success}
+ *   POST /auth/api-keys     200  {data,isSuccess,message}
+ *   GET  /auth/api-keys     200  {data,isSuccess}
+ *   DELETE /auth/api-keys/x 200  {data,isSuccess,message}
+ *   GET  /auth/api-keys     401  {data,errors,isSuccess,message,status}
+ *
+ * So a client walking one flow needs two checks, and either one alone is
+ * `undefined` on half of it.
+ *
+ * WHY BOTH, rather than picking the winner. Both names have live readers, and
+ * they are in THIS package:
+ *
+ *   `success`     the shipped `fe` components — `fe/types/index.ts`,
+ *                 `LoginForm.tsx`, `PendingTab.tsx` — read `body.success`, and
+ *                 `Client/ApiCaller`'s `normalizeResponseShape` keys its whole
+ *                 `{success, …rest} -> {success, message, data}` reshaping on it
+ *   `isSuccess`   `Client/ApiCaller/types.ts`'s `ApiResponse`, and
+ *                 `Services/Authorization/Middleware`, which reads
+ *                 `{isSuccess, message, data}` off a remote IDP's `/auth/check`
+ *
+ * Renaming either one silently breaks the other's readers on a release that
+ * says nothing about it — a host app's `if (!body.success)` starts falling
+ * through on every refusal, which is the failure mode that does not throw. So
+ * neither is taken away: every product envelope now answers with BOTH, same
+ * value, and any one check a consumer already writes keeps working.
+ *
+ * There is precedent in the product for exactly this, arrived at
+ * independently: `routes/shared/adminGuard.ts`'s privileged guard already
+ * answers `{isSuccess:false, success:false, …}`, and the surface census already
+ * pins `data,isSuccess,message,success` as one of the product's envelopes.
+ *
+ * Kept as one decision in one place rather than at 350 call sites, for the same
+ * reason the returned-Error envelope below is: the sites are a moving target
+ * and the rule is not.
+ *
+ * DELIBERATELY CONSERVATIVE. Only an OWN, BOOLEAN flag is mirrored, and only
+ * when its twin is absent. An answer carrying neither — `/health`'s
+ * `{status,timestamp}`, `POST /subs/:topic`'s `{status}` — is not given one: it
+ * never claimed to be an envelope, and inventing a flag for it would make this
+ * a reshaping rather than a rename-safety net.
+ */
+export declare function withEnvelopeFlags(body: Record<string, unknown>): Record<string, unknown>;
 /**
  * Resolve a handler's return value into the response that goes on the wire.
  *

package/dist/src/Server/validate.d.ts

@@ -57,6 +57,24 @@ export declare const OPTIONAL_KIND: unique symbol;
 export declare function prepare(schema: TSchema | undefined, value: unknown, on: ValidationTarget): unknown;
 export type ValidationTarget = 'body' | 'query' | 'params';
 export interface ValidationFailure {
+    /**
+     * The success flag, under both names the API uses — see
+     * `Server/response.ts`'s `withEnvelopeFlags` for the census and for why both
+     * are carried rather than one being chosen.
+     *
+     * This body is hand-serialised in `router.ts` (Elysia pretty-printed this one
+     * body and no other, and that was measured byte for byte), so it never passes
+     * the central mirror and has to carry the flags itself. It was the last
+     * answer on the surface carrying NEITHER: 31 of the signed-in walk's answers
+     * were 422s on which `body.success` and `body.isSuccess` both read
+     * `undefined` — precisely the "a client cannot write one check" this change
+     * is about.
+     *
+     * `type: 'validation'` stays first-class and unchanged; a client that
+     * discriminates on it keeps working, it simply no longer HAS to.
+     */
+    isSuccess: false;
+    success: false;
     type: 'validation';
     on: ValidationTarget;
     property: string;

package/dist/src/types.d.ts

@@ -1783,8 +1783,29 @@ export interface NucleusConfigOptions {
     };
 }
 export type SchemaTableRegistry = Record<string, any>;
+/**
+ * The shape a consumer reads off the wire — `ListResponse`, `SingleResponse`,
+ * `MeResponse`, `LoginSuccess` and the rest of `Client/ApiCaller/types.ts` are
+ * all this type.
+ *
+ * `isSuccess` is OPTIONAL and `success` is not, and the asymmetry is the point
+ * rather than an oversight.
+ *
+ * The server carries both names for this one flag — `Server/response.ts`'s
+ * `withEnvelopeFlags` has the measurement and the argument — so the field is
+ * always there on an answer from a current build. Declaring it REQUIRED would
+ * make every hand-written literal in a consumer's tests and mocks stop
+ * compiling on upgrade, for a field they may never read; declaring it optional
+ * lets `res.isSuccess` be written without a cast and keeps `res.success` the
+ * one a caller can rely on without a narrowing check.
+ *
+ * Which to read: either. They hold the same value on every answer the product
+ * gives, and the surface walk asserts that on all 1040 of them.
+ */
 export type StandardReturn<T> = {
     success: boolean;
+    /** The same flag under the API's other name — see the note above. */
+    isSuccess?: boolean;
     message?: string;
     data?: T;
     error?: Error | string;

package/package.json

@@ -1,126 +1,126 @@
 {
-	"name": "nucleus-core-ts",
-	"version": "0.10.0",
-	"description": "Production-ready, enterprise-grade TypeScript framework for building multi-tenant APIs",
-	"author": "Hidayet Can Özcan <hidayetcan@gmail.com>",
-	"license": "SEE LICENSE IN LICENSE",
-	"keywords": [
-		"backend",
-		"framework",
-		"drizzle",
-		"typescript"
-	],
-	"files": [
-		"bin",
-		"dist",
-		"schemas",
-		"scripts",
-		"infra/templates",
-		"infra/scripts/generate-project.ts",
-		"src/system.tables.json",
-		"src/Services/SchemaTables/resolveEntities.ts",
-		"src/Services/Logger/auditTaxonomy.ts",
-		"public",
-		"LICENSE"
-	],
-	"module": "dist/index.js",
-	"type": "module",
-	"types": "dist/index.d.ts",
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		},
-		"./server": {
-			"types": "./dist/server.d.ts",
-			"import": "./dist/server.js"
-		},
-		"./client": {
-			"types": "./dist/client.d.ts",
-			"import": "./dist/client.js"
-		},
-		"./fe": {
-			"types": "./dist/fe/index.d.ts",
-			"import": "./dist/fe/index.js"
-		},
-		"./fe/auth": {
-			"types": "./dist/fe/components/AuthGuard/index.d.ts",
-			"import": "./dist/fe/components/AuthGuard/index.js"
-		},
-		"./proxy": {
-			"types": "./dist/src/Client/Proxy/index.d.ts",
-			"import": "./dist/src/Client/Proxy/index.js"
-		}
-	},
-	"scripts": {
-		"test": "bun test src scripts fe",
-		"build": "bun run scripts/build.ts",
-		"build:quick": "bun run build:js && bun run build:types",
-		"build:js": "bun build ./index.ts ./server.ts ./client.ts ./fe/index.ts ./src/Client/Proxy/index.ts --outdir=dist --target=bun --format=esm --splitting --minify --external react --external react-dom --external gsap --external @gsap/react --external h-state --external drizzle-orm --external drizzle-kit --external ioredis --external googleapis --external @dapr/dapr --external pg --external @xyflow/react --external @xyflow/system --external @azure/communication-email --external nodemailer --external @azure/identity --external stripe --external sharp",
-		"build:types": "tsc --declaration --emitDeclarationOnly --outDir dist --skipLibCheck",
-		"version:patch": "bun run scripts/version.ts patch",
-		"version:minor": "bun run scripts/version.ts minor",
-		"version:major": "bun run scripts/version.ts major",
-		"publish:npm": "bun run scripts/publish.ts",
-		"publish:dry": "bun run scripts/publish.ts --dry-run",
-		"release": "bun run version:patch && bun run publish:npm",
-		"release:minor": "bun run version:minor && bun run publish:npm",
-		"release:major": "bun run version:major && bun run publish:npm",
-		"generate:schemas": "bun run scripts/generate-types-schema.ts",
-		"lint": "biome check . --write",
-		"lint:fix": "biome check --config-path ./biome.json --write",
-		"prepublishOnly": "bun run scripts/verify-publishable.ts"
-	},
-	"bin": {
-		"nucleus-core-ts": "./bin/cli.ts",
-		"nucleus": "./bin/cli.ts",
-		"nucleus-generate": "./bin/cli.ts"
-	},
-	"devDependencies": {
-		"@biomejs/biome": "2.5.10",
-		"googleapis": "^171.4.0",
-		"@types/bun": "latest",
-		"@types/pg": "latest",
-		"@types/react": "latest",
-		"@happy-dom/global-registrator": "^20.11.2",
-		"@types/react-dom": "latest",
-		"bun-plugin-tailwind": "latest",
-		"drizzle-kit": "latest",
-		"javascript-obfuscator": "latest",
-		"lucide-react": "latest",
-		"nodemailer": "^9.0.3"
-	},
-	"peerDependencies": {
-		"typescript": "latest",
-		"@dapr/dapr": "latest",
-		"react": "latest",
-		"react-dom": "latest",
-		"pg": "latest",
-		"tailwindcss": "latest",
-		"tailwind-merge": "latest",
-		"clsx": "latest",
-		"googleapis": "*"
-	},
-	"dependencies": {
-		"@sinclair/typebox": "0.34.47",
-		"@gsap/react": "latest",
-		"@simplewebauthn/server": "^13.3.0",
-		"@xyflow/react": "latest",
-		"drizzle-orm": "latest",
-		"gsap": "latest",
-		"h-state": "latest",
-		"ioredis": "latest",
-		"reflect-metadata": "^0.2.2"
-	},
-	"optionalDependencies": {
-		"@azure/communication-email": "latest",
-		"@marsaud/smb2": "^0.18.0",
-		"sharp": "^0.33.0",
-		"stripe": "latest"
-	},
-	"peerDependenciesMeta": {
-		"googleapis": {
-			"optional": true
-		}
-	}
+  "name": "nucleus-core-ts",
+  "version": "0.10.2",
+  "description": "Production-ready, enterprise-grade TypeScript framework for building multi-tenant APIs",
+  "author": "Hidayet Can Özcan <hidayetcan@gmail.com>",
+  "license": "SEE LICENSE IN LICENSE",
+  "keywords": [
+    "backend",
+    "framework",
+    "drizzle",
+    "typescript"
+  ],
+  "files": [
+    "bin",
+    "dist",
+    "schemas",
+    "scripts",
+    "infra/templates",
+    "infra/scripts/generate-project.ts",
+    "src/system.tables.json",
+    "src/Services/SchemaTables/resolveEntities.ts",
+    "src/Services/Logger/auditTaxonomy.ts",
+    "public",
+    "LICENSE"
+  ],
+  "module": "dist/index.js",
+  "type": "module",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js"
+    },
+    "./fe": {
+      "types": "./dist/fe/index.d.ts",
+      "import": "./dist/fe/index.js"
+    },
+    "./fe/auth": {
+      "types": "./dist/fe/components/AuthGuard/index.d.ts",
+      "import": "./dist/fe/components/AuthGuard/index.js"
+    },
+    "./proxy": {
+      "types": "./dist/src/Client/Proxy/index.d.ts",
+      "import": "./dist/src/Client/Proxy/index.js"
+    }
+  },
+  "scripts": {
+    "test": "bun test src scripts fe",
+    "build": "bun run scripts/build.ts",
+    "build:quick": "bun run build:js && bun run build:types",
+    "build:js": "bun build ./index.ts ./server.ts ./client.ts ./fe/index.ts ./src/Client/Proxy/index.ts --outdir=dist --target=bun --format=esm --splitting --minify --external react --external react-dom --external gsap --external @gsap/react --external h-state --external drizzle-orm --external drizzle-kit --external ioredis --external googleapis --external @dapr/dapr --external pg --external @xyflow/react --external @xyflow/system --external @azure/communication-email --external nodemailer --external @azure/identity --external stripe --external sharp",
+    "build:types": "tsc --declaration --emitDeclarationOnly --outDir dist --skipLibCheck",
+    "version:patch": "bun run scripts/version.ts patch",
+    "version:minor": "bun run scripts/version.ts minor",
+    "version:major": "bun run scripts/version.ts major",
+    "publish:npm": "bun run scripts/publish.ts",
+    "publish:dry": "bun run scripts/publish.ts --dry-run",
+    "release": "bun run version:patch && bun run publish:npm",
+    "release:minor": "bun run version:minor && bun run publish:npm",
+    "release:major": "bun run version:major && bun run publish:npm",
+    "generate:schemas": "bun run scripts/generate-types-schema.ts",
+    "lint": "biome check . --write",
+    "lint:fix": "biome check --config-path ./biome.json --write",
+    "prepublishOnly": "bun run scripts/verify-publishable.ts"
+  },
+  "bin": {
+    "nucleus-core-ts": "./bin/cli.ts",
+    "nucleus": "./bin/cli.ts",
+    "nucleus-generate": "./bin/cli.ts"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "2.5.10",
+    "googleapis": "^171.4.0",
+    "@types/bun": "latest",
+    "@types/pg": "latest",
+    "@types/react": "latest",
+    "@happy-dom/global-registrator": "^20.11.2",
+    "@types/react-dom": "latest",
+    "bun-plugin-tailwind": "latest",
+    "drizzle-kit": "latest",
+    "javascript-obfuscator": "latest",
+    "lucide-react": "latest",
+    "nodemailer": "^9.0.3"
+  },
+  "peerDependencies": {
+    "typescript": "latest",
+    "@dapr/dapr": "latest",
+    "react": "latest",
+    "react-dom": "latest",
+    "pg": "latest",
+    "tailwindcss": "latest",
+    "tailwind-merge": "latest",
+    "clsx": "latest",
+    "googleapis": "*"
+  },
+  "dependencies": {
+    "@sinclair/typebox": "0.34.47",
+    "@gsap/react": "latest",
+    "@simplewebauthn/server": "^13.3.0",
+    "@xyflow/react": "latest",
+    "drizzle-orm": "latest",
+    "gsap": "latest",
+    "h-state": "latest",
+    "ioredis": "latest",
+    "reflect-metadata": "^0.2.2"
+  },
+  "optionalDependencies": {
+    "@azure/communication-email": "latest",
+    "@marsaud/smb2": "^0.18.0",
+    "sharp": "^0.33.0",
+    "stripe": "latest"
+  },
+  "peerDependenciesMeta": {
+    "googleapis": {
+      "optional": true
+    }
+  }
 }