tempest-express-sdk 0.2.0 → 0.3.0

package/dist/index.d.cts

@@ -3,7 +3,7 @@ export { z } from 'zod';
 import * as tempest_db_js from 'tempest-db-js';
 import { Model, ModelClass, BaseRepository, InferModel, WhereInput, InferInsert, PaginationFilter as PaginationFilter$1, PaginationResult } from 'tempest-db-js';
 export { AsyncDriver, AsyncEngine, AsyncResult, AsyncSession, BaseRepository, BelongsTo, ColType, Column, ColumnFlags, CompiledQuery, CondNode, Condition, DeleteBuilder, DeleteNode, Dialect, EngineOptions, Executable, HasMany, InferInsert, InferModel, InsertBuilder, InsertNode, Model, ModelClass, NoResultError, NodeSqliteDriver, Operator, OrderTerm, PaginationResult, ParsedDatabaseUrl, PostgresDialect, QueryNode, RecordNotFound, Relation, RelationValue, PaginationFilter as RepositoryPaginationFilter, Returning, RowOf, SelectBuilder, SelectNode, SortDirection, SqliteDialect, SyncEngine, SyncSession, UpdateBuilder, UpdateNode, WhereArg, WhereInput, WithRelations, and, belongsTo, column, columnsOf, createEngine, createSyncEngine, del, detectDialect, getDialect, hasMany, insert, join, loadRelations, not, or, parseDatabaseUrl, select, sql, update } from 'tempest-db-js';
-import { RequestHandler, Request, Response, Router, ErrorRequestHandler, Express } from 'express';
+import { Request, RequestHandler, Response as Response$1, Router, ErrorRequestHandler, Express } from 'express';
 import * as ws from 'ws';
 import { Server } from 'node:http';
 import { OpenAPIRegistry } from '@asteasolutions/zod-to-openapi';
@@ -1130,6 +1130,271 @@ declare class AttemptThrottle {
     reset(key: string): Promise<void>;
 }
 
+/**
+ * Trusted client-IP resolution, mirroring `utils.client_ip`.
+ *
+ * Reading the leftmost `X-Forwarded-For` entry is a security hole — that header
+ * is client-controlled. Resolve from a SINGLE header the edge proxy sets itself
+ * (e.g. `X-Real-IP`, `CF-Connecting-IP`), falling back to the socket peer.
+ */
+
+/** Options for {@link getClientIp}. */
+interface ClientIpOptions {
+    /**
+     * Name of the single edge-set header to trust (case-insensitive, e.g.
+     * `"x-real-ip"`). Omit to use only the transport peer.
+     */
+    trustedHeader?: string;
+}
+/**
+ * Resolve the client IP from an Express request.
+ *
+ * @param req - The inbound request.
+ * @param options - The trusted header to read, if any.
+ * @returns The resolved IP, or `"unknown"` when unavailable.
+ */
+declare function getClientIp(req: Request, options?: ClientIpOptions): string;
+
+/**
+ * TOTP (RFC 6238) helper for MFA, mirroring `utils.totp.TOTPHelper`.
+ *
+ * Implemented natively over `node:crypto` (HMAC-SHA1) — no external OTP library
+ * needed. Generates a base32 secret, builds the `otpauth://` provisioning URI
+ * (scanned as a QR code), and verifies a 6-digit code with a clock-drift window.
+ */
+/** Options for {@link TOTPHelper}. */
+interface TOTPOptions {
+    /** Label shown in the authenticator app (e.g. the product name). */
+    issuer: string;
+    /** Time step in seconds. Default 30. */
+    step?: number;
+    /** Number of digits. Default 6. */
+    digits?: number;
+}
+/** Stateless TOTP issuer + verifier. Construct one per app. */
+declare class TOTPHelper {
+    private readonly issuer;
+    private readonly step;
+    private readonly digits;
+    /**
+     * @param options - Issuer label, time step and digit count.
+     */
+    constructor(options: TOTPOptions);
+    /**
+     * Generate a fresh base32 secret (80 bits).
+     *
+     * @returns A base32-encoded TOTP secret to persist on the user row.
+     */
+    generateSecret(): string;
+    /**
+     * Build the `otpauth://` provisioning URI (render as a QR code).
+     *
+     * @param secret - The base32 secret.
+     * @param accountName - Identifier shown next to the issuer (e.g. the email).
+     * @returns The `otpauth://totp/...` URI.
+     */
+    provisioningUri(secret: string, accountName: string): string;
+    /**
+     * Verify a code against the secret for the current time window.
+     *
+     * @param secret - The base32 secret.
+     * @param code - The submitted code.
+     * @param window - Tolerance in steps (±). Default 1 (previous/current/next).
+     * @returns `true` when the code matches within the window.
+     */
+    verify(secret: string, code: string, window?: number): boolean;
+}
+
+/**
+ * Resilient HTTP client, mirroring `utils.http_client`.
+ *
+ * Wraps the native `fetch` with a retry policy (exponential backoff) and a
+ * per-host circuit breaker: after N consecutive failures the breaker opens and
+ * requests to that host fail fast with {@link CircuitOpenError} until a cooldown
+ * elapses. No external dependency.
+ */
+/** Raised when the per-host circuit breaker is open. */
+declare class CircuitOpenError extends Error {
+    readonly host: string;
+    constructor(host: string);
+}
+/** Retry configuration for {@link HTTPClient}. */
+declare class RetryPolicy {
+    readonly maxRetries: number;
+    readonly baseDelayMs: number;
+    readonly retryOn: number[];
+    /**
+     * @param maxRetries - Additional attempts after the first. Default 2.
+     * @param baseDelayMs - Base backoff in ms (doubles each attempt). Default 100.
+     * @param retryOn - HTTP status codes that trigger a retry. Default 5xx + 429.
+     */
+    constructor(maxRetries?: number, baseDelayMs?: number, retryOn?: number[]);
+    /** Backoff delay in ms before `attempt` (0-indexed). */
+    sleepFor(attempt: number): number;
+}
+/** Options for {@link HTTPClient}. */
+interface HTTPClientOptions {
+    /** Prepended to relative request paths. */
+    baseUrl?: string;
+    /** Headers merged into every request. */
+    defaultHeaders?: Record<string, string>;
+    /** Per-request timeout in ms. Default 30000. */
+    timeoutMs?: number;
+    /** Retry configuration. */
+    retryPolicy?: RetryPolicy;
+    /** Consecutive failures before the breaker opens. Default 5. */
+    breakerThreshold?: number;
+    /** Breaker cooldown in ms once open. Default 30000. */
+    breakerCooldownMs?: number;
+}
+/** A `fetch` wrapper with retries and a per-host circuit breaker. */
+declare class HTTPClient {
+    private readonly baseUrl;
+    private readonly defaultHeaders;
+    private readonly timeoutMs;
+    private readonly retryPolicy;
+    private readonly breakerThreshold;
+    private readonly breakerCooldownMs;
+    private readonly breakers;
+    /**
+     * @param options - Base URL, headers, timeout, retry and breaker settings.
+     */
+    constructor(options?: HTTPClientOptions);
+    private resolve;
+    private hostOf;
+    private breakerCheck;
+    private breakerRecord;
+    /**
+     * Perform a request with retries and breaker protection.
+     *
+     * @param method - HTTP method.
+     * @param url - Absolute URL or a path resolved against `baseUrl`.
+     * @param init - Extra `fetch` init (headers, body, …).
+     * @returns The `Response`.
+     * @throws {CircuitOpenError} When the per-host breaker is open.
+     */
+    request(method: string, url: string, init?: RequestInit): Promise<Response>;
+    private sleep;
+    /** GET request. */
+    get(url: string, init?: RequestInit): Promise<Response>;
+    /** POST request. */
+    post(url: string, init?: RequestInit): Promise<Response>;
+    /** PUT request. */
+    put(url: string, init?: RequestInit): Promise<Response>;
+    /** PATCH request. */
+    patch(url: string, init?: RequestInit): Promise<Response>;
+    /** DELETE request. */
+    delete(url: string, init?: RequestInit): Promise<Response>;
+}
+
+/**
+ * System metrics, mirroring `utils.metrics.MetricsUtils`.
+ *
+ * Reads CPU, memory and process stats from Node's built-in `node:os` /
+ * `process` — no native dependency (GPU metrics from the FastAPI SDK are out of
+ * scope here). Includes a Prometheus text-format exporter.
+ */
+/** CPU load metrics. */
+interface CPUMetrics {
+    /** Number of logical cores. */
+    cores: number;
+    /** 1-minute load average (0 on platforms without load average). */
+    load1: number;
+    /** Load average over 1 minute as a fraction of core count. */
+    loadPercent: number;
+}
+/** Memory usage metrics (bytes). */
+interface MemoryMetrics {
+    /** Total system memory. */
+    total: number;
+    /** Free system memory. */
+    free: number;
+    /** Used system memory. */
+    used: number;
+    /** Used memory as a percentage of total. */
+    usedPercent: number;
+    /** Resident set size of the current process. */
+    processRss: number;
+}
+/** A snapshot of system + process metrics. */
+interface SystemMetrics {
+    cpu: CPUMetrics;
+    memory: MemoryMetrics;
+    /** Process uptime in seconds. */
+    uptimeSeconds: number;
+}
+/** Read CPU load metrics. */
+declare function readCpu(): CPUMetrics;
+/** Read memory usage metrics. */
+declare function readMemory(): MemoryMetrics;
+/** Read a full system snapshot. */
+declare function readSystem(): SystemMetrics;
+/**
+ * Render a snapshot as Prometheus text-format metrics.
+ *
+ * @param snapshot - A snapshot (defaults to a fresh {@link readSystem}).
+ * @returns The Prometheus exposition text.
+ */
+declare function toPrometheus(snapshot?: SystemMetrics): string;
+/** Stateless system-metrics reader + Prometheus exporter. */
+declare const MetricsUtils: {
+    readonly cpu: typeof readCpu;
+    readonly memory: typeof readMemory;
+    readonly system: typeof readSystem;
+    readonly toPrometheus: typeof toPrometheus;
+};
+
+/**
+ * Transactional email, mirroring `utils.email.EmailUtils`.
+ *
+ * Wraps the optional `nodemailer` peer (lazily imported) behind a tiny
+ * `send` surface. The transport is created once from SMTP options and reused.
+ */
+/** SMTP connection + sender options. */
+interface EmailOptions {
+    /** SMTP host. */
+    host: string;
+    /** SMTP port. Default 587. */
+    port?: number;
+    /** Use TLS on connect. Default `false` (STARTTLS on 587). */
+    secure?: boolean;
+    /** SMTP auth user. */
+    user?: string;
+    /** SMTP auth password. */
+    password?: string;
+    /** Default `From` address. */
+    from: string;
+}
+/** A single email message. */
+interface EmailMessage {
+    /** Recipient(s). */
+    to: string | string[];
+    /** Subject line. */
+    subject: string;
+    /** Plain-text body. */
+    text?: string;
+    /** HTML body. */
+    html?: string;
+    /** Override the default `From`. */
+    from?: string;
+}
+/** Sends transactional email over SMTP via `nodemailer`. */
+declare class EmailUtils {
+    private readonly options;
+    private transport;
+    /**
+     * @param options - SMTP connection and default sender.
+     */
+    constructor(options: EmailOptions);
+    private ready;
+    /**
+     * Send an email message.
+     *
+     * @param message - The message (recipients, subject, body).
+     */
+    send(message: EmailMessage): Promise<void>;
+}
+
 /**
  * Cache managers, mirroring `cache.redis_manager`.
  *
@@ -1445,7 +1710,7 @@ declare class EventStream {
  * @param res - The Express response to stream into.
  * @param stream - The event stream to drain.
  */
-declare function sseResponse(req: Request, res: Response, stream: EventStream): Promise<void>;
+declare function sseResponse(req: Request, res: Response$1, stream: EventStream): Promise<void>;
 
 /**
  * In-process SSE broker, mirroring `sse.broker.SSEBroker`.
@@ -1875,6 +2140,110 @@ declare class LocalUploadStorage implements UploadStorage {
  */
 declare function buildContentDisposition(filename: string, inline?: boolean): string;
 
+/** Web Push DTOs (Zod), mirroring `webpush.schemas`. */
+
+/** The browser-provided push subscription keys. */
+declare const webPushKeysSchema: z.ZodObject<{
+    p256dh: z.ZodString;
+    auth: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    auth: string;
+    p256dh: string;
+}, {
+    auth: string;
+    p256dh: string;
+}>;
+/** A browser push subscription. */
+declare const webPushSubscriptionSchema: z.ZodObject<{
+    endpoint: z.ZodString;
+    keys: z.ZodObject<{
+        p256dh: z.ZodString;
+        auth: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        auth: string;
+        p256dh: string;
+    }, {
+        auth: string;
+        p256dh: string;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    keys: {
+        auth: string;
+        p256dh: string;
+    };
+    endpoint: string;
+}, {
+    keys: {
+        auth: string;
+        p256dh: string;
+    };
+    endpoint: string;
+}>;
+/** A push notification payload. */
+declare const webPushPayloadSchema: z.ZodObject<{
+    title: z.ZodString;
+    body: z.ZodOptional<z.ZodString>;
+    url: z.ZodOptional<z.ZodString>;
+    data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    title: string;
+    url?: string | undefined;
+    data?: Record<string, unknown> | undefined;
+    body?: string | undefined;
+}, {
+    title: string;
+    url?: string | undefined;
+    data?: Record<string, unknown> | undefined;
+    body?: string | undefined;
+}>;
+type WebPushKeys = z.infer<typeof webPushKeysSchema>;
+type WebPushSubscription = z.infer<typeof webPushSubscriptionSchema>;
+type WebPushPayload = z.infer<typeof webPushPayloadSchema>;
+
+/**
+ * Web Push (VAPID) dispatch, mirroring `webpush.dispatcher`.
+ *
+ * Wraps the optional `web-push` peer (lazily imported). A `410 Gone` / `404`
+ * from the push service means the subscription is dead — surfaced as
+ * {@link WebPushGoneError} so the caller can prune it from storage.
+ */
+
+/** A Web Push delivery failure. */
+declare class WebPushError extends Error {
+    readonly statusCode?: number | undefined;
+    constructor(message: string, statusCode?: number | undefined);
+}
+/** The subscription is expired/unsubscribed (410/404) — prune it. */
+declare class WebPushGoneError extends WebPushError {
+    constructor(statusCode: number);
+}
+/** Options for {@link WebPushDispatcher}. */
+interface WebPushDispatcherOptions {
+    /** VAPID public key. */
+    publicKey: string;
+    /** VAPID private key. */
+    privateKey: string;
+    /** VAPID subject (`mailto:` or site URL). */
+    subject: string;
+}
+/** Sends Web Push notifications with configured VAPID details. */
+declare class WebPushDispatcher {
+    private readonly options;
+    /**
+     * @param options - VAPID keys and subject.
+     */
+    constructor(options: WebPushDispatcherOptions);
+    /**
+     * Send a payload to a single subscription.
+     *
+     * @param subscription - The browser push subscription.
+     * @param payload - The notification payload.
+     * @throws {WebPushGoneError} When the subscription is expired (410/404).
+     * @throws {WebPushError} On any other delivery failure.
+     */
+    send(subscription: WebPushSubscription, payload: WebPushPayload): Promise<void>;
+}
+
 /**
  * Auth DTOs (Zod), mirroring `auth.schemas`.
  *
@@ -2467,6 +2836,6 @@ interface RunServerOptions {
 declare function runServer(app: Express, options?: RunServerOptions): Promise<Server>;
 
 /** The installed SDK version. Single source of truth for the barrel + CLI. */
-declare const VERSION = "0.2.0";
+declare const VERSION = "0.3.0";
 
-export { AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CacheManager, type CachedOptions, type CatalogData, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GenerateOpenApiOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, NotFoundException, type OpenApiDocument, type OpenApiInfo, PHONE_BR_PATTERN, type PaginationFilter, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, type RunServerOptions, SSEBroker, type SaveOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type TaskHandler, TaskManager, type TaskManagerOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeUnhandledExceptionHandler, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, verifyOpaqueToken, wsEnvelopeSchema };
+export { AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, type AuthResponse, type AuthRouterOptions, type AuthUser, type BaseAppSettings, BaseController, BaseModel, type BaseResponse, BaseService, type BrokerManager, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, type CacheManager, type CachedOptions, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CursorPaginationFilter, DEFAULT_LOCALE, type EmailMessage, type EmailOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FlagContext, ForbiddenException, type GenerateOpenApiOptions, HTTPClient, type HTTPClientOptions, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, LocalUploadStorage, type LocalUploadStorageOptions, type LogExtra, type LogLevel, type LoginInput, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, type MemoryMetrics, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, MetricsUtils, NotFoundException, type OpenApiDocument, type OpenApiInfo, PHONE_BR_PATTERN, type PaginationFilter, PasswordUtils, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, RedisCacheManager, type RedisLike, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type ResponseMapper, RetryPolicy, type RunServerOptions, SSEBroker, type SaveOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type StateBR, type SwaggerOptions, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, type UserPublic, type UserStore, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, attachWebSocketHub, authResponseSchema, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, buildContentDisposition, cached, cepField, citiesByUf, cnpjField, coerceFlag, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createdByColumn, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, encodeCursor, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, listStates, loadSettings, loginSchema, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeSessionMiddleware, makeUnhandledExceptionHandler, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, phoneBrField, refreshSchema, registerExceptionHandlers, requestIdMiddleware, requireRoles, runServer, runWithRequestContext, serverSettingsShape, sessionCookie, setRequestId, signupSchema, sseResponse, statesByRegion, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, ufField, updatedByColumn, userPublicSchema, utcnow, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSubscriptionSchema, wsEnvelopeSchema };