tempest-express-sdk 0.20.1 → 0.22.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { z, toDict } from './chunk-XGKAZZR2.js';
-export { PasswordUtils, VERSION, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, corsSettingsShape, databaseSettingsShape, loadSettings, serverSettingsShape, toDict, z } from './chunk-XGKAZZR2.js';
+import { z, looseBoolean, toDict } from './chunk-7Q5NBMSP.js';
+export { PasswordUtils, VERSION, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, centsField, corsSettingsShape, databaseSettingsShape, looseBoolean as envBoolean, hexColorField, latitudeField, loadSettings, longitudeField, looseBoolean, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, percentField, portField, positiveFloatField, positiveIntField, priceField, ratingField, ratioField, serverSettingsShape, slugField, toDict, z } from './chunk-7Q5NBMSP.js';
 import { AsyncLocalStorage } from 'async_hooks';
 import { Model, column, sql, BaseRepository, RecordNotFound, detectDialect, NodeSqliteDriver, AsyncEngine } from 'tempest-db-js';
 export { AsyncEngine, AsyncResult, AsyncSession, BaseRepository, Column, DeleteBuilder, InsertBuilder, Model, NoResultError, NodeSqliteDriver, PostgresDialect, RecordNotFound, SelectBuilder, SqliteDialect, SyncEngine, SyncSession, UpdateBuilder, and, belongsTo, column, columnsOf, createEngine, createSyncEngine, del, detectDialect, getDialect, hasMany, insert, join, loadRelations, not, or, parseDatabaseUrl, select, sql, update } from 'tempest-db-js';
@@ -286,7 +286,9 @@ var paginationFilterSchema = z.object({
   page: z.coerce.number().int().min(1).default(1).openapi({ description: "The page number to retrieve (1-indexed)." }),
   pageSize: z.coerce.number().int().min(1).default(20).openapi({ description: "The number of items per page." }),
   orderBy: z.string().optional().openapi({ description: "Column to order by; defaults to repository default." }),
-  ascending: z.coerce.boolean().default(true).openapi({ description: "Whether to order results ascending." })
+  ascending: looseBoolean(true).openapi({
+    description: "Whether to order results ascending."
+  })
 });
 var PAGINATION_KEYS = ["page", "pageSize", "orderBy", "ascending"];
 function getConditions(filter, options = {}) {
@@ -316,7 +318,9 @@ var cursorPaginationFilterSchema = z.object({
   cursor: z.string().optional().openapi({ description: "Opaque cursor; omit for the first page." }),
   limit: z.coerce.number().int().min(1).max(500).default(20).openapi({ description: "Maximum number of items to return." }),
   orderBy: z.string().default("createdAt").openapi({ description: "Column to sort by." }),
-  ascending: z.coerce.boolean().default(false).openapi({ description: "Whether to sort ascending (default newest first)." })
+  ascending: looseBoolean(false).openapi({
+    description: "Whether to sort ascending (default newest first)."
+  })
 });
 function cursorPaginationSchema(item) {
   return z.object({
@@ -343,29 +347,6 @@ function decodeCursor(cursor) {
   return parsed;
 }
 
-// src/schemas/fields.ts
-var positiveIntField = z.number().int().positive();
-var nonNegativeIntField = z.number().int().min(0);
-var centsField = z.number().int().min(0);
-var portField = z.number().int().min(1).max(65535);
-var ratingField = z.number().int().min(0).max(5);
-var positiveFloatField = z.number().positive();
-var nonNegativeFloatField = z.number().min(0);
-var percentField = z.number().min(0).max(100);
-var ratioField = z.number().min(0).max(1);
-var latitudeField = z.number().min(-90).max(90);
-var longitudeField = z.number().min(-180).max(180);
-var nonEmptyStrField = z.string().transform((value) => value.trim()).pipe(z.string().min(1));
-var slugField = z.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, {
-  message: "Must be a lowercase hyphen-separated slug."
-});
-var hexColorField = z.string().regex(/^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/, {
-  message: "Must be a #rgb or #rrggbb hex color."
-});
-var priceField = z.string().regex(/^\d+(?:\.\d{1,2})?$/, {
-  message: 'Must be a decimal money string, e.g. "19.90".'
-});
-
 // src/schemas/sync.ts
 var syncFilterSchema = z.object({
   since: z.coerce.date().optional().openapi({
@@ -375,7 +356,9 @@ var syncFilterSchema = z.object({
     description: "Opaque cursor from the previous page; omit for the first."
   }),
   limit: z.coerce.number().int().min(1).max(1e3).default(100).openapi({ description: "Maximum number of items to return." }),
-  includeDeleted: z.coerce.boolean().default(false).openapi({ description: "Whether soft-deleted rows are included in the delta." })
+  includeDeleted: looseBoolean(false).openapi({
+    description: "Whether soft-deleted rows are included in the delta."
+  })
 });
 function syncPaginationSchema(item) {
   return z.object({
@@ -425,15 +408,9 @@ var logEntrySchema = z.object({
   stack: z.string().nullable().optional().openapi({
     description: "Formatted stack trace, when the record carries an error."
   })
-}).passthrough();
+}).loose();
 
 // src/settings/mixins.ts
-function envBoolean(defaultValue) {
-  return z.union([z.boolean(), z.string()]).default(defaultValue).transform((value) => {
-    if (typeof value === "boolean") return value;
-    return ["true", "1", "yes", "on"].includes(value.trim().toLowerCase());
-  });
-}
 function envList(defaultValue = "") {
   return z.string().default(defaultValue).transform(
     (value) => value.split(",").map((entry) => entry.trim()).filter((entry) => entry.length > 0)
@@ -441,7 +418,7 @@ function envList(defaultValue = "") {
 }
 var logSettingsShape = {
   LOG_LEVEL: z.enum(["DEBUG", "INFO", "WARNING", "ERROR"]).default("INFO"),
-  LOG_JSON: envBoolean(true),
+  LOG_JSON: looseBoolean(true),
   LOG_DIR: z.string().default("logs")
 };
 var redisSettingsShape = {
@@ -467,8 +444,8 @@ var emailSettingsShape = {
   SMTP_USERNAME: z.string().optional(),
   SMTP_PASSWORD: z.string().optional(),
   SMTP_FROM_ADDR: z.string().default("noreply@example.com"),
-  SMTP_USE_TLS: envBoolean(true),
-  SMTP_USE_SSL: envBoolean(false),
+  SMTP_USE_TLS: looseBoolean(true),
+  SMTP_USE_SSL: looseBoolean(false),
   SMTP_TIMEOUT_SECONDS: z.coerce.number().min(0).default(30)
 };
 var uploadSettingsShape = {
@@ -481,7 +458,7 @@ var minioSettingsShape = {
   MINIO_ENDPOINT: z.string().default("localhost:9000"),
   MINIO_ACCESS_KEY: z.string().default("minioadmin"),
   MINIO_SECRET_KEY: z.string().default("minioadmin"),
-  MINIO_SECURE: envBoolean(false),
+  MINIO_SECURE: looseBoolean(false),
   MINIO_REGION: z.string().default("us-east-1"),
   MINIO_DEFAULT_BUCKET: z.string().default("uploads"),
   MINIO_PUBLIC_ENDPOINT: z.string().optional(),
@@ -497,14 +474,14 @@ var webPushSettingsShape = {
 };
 var sessionSettingsShape = {
   SESSION_TTL_SECONDS: z.coerce.number().int().min(1).default(86400),
-  SESSION_SLIDING: envBoolean(true),
+  SESSION_SLIDING: looseBoolean(true),
   SESSION_COOKIE_NAME: z.string().default("tempest_session"),
   SESSION_COOKIE_DOMAIN: z.string().optional(),
   SESSION_COOKIE_PATH: z.string().default("/"),
-  SESSION_COOKIE_SECURE: envBoolean(true),
-  SESSION_COOKIE_HTTPONLY: envBoolean(true),
+  SESSION_COOKIE_SECURE: looseBoolean(true),
+  SESSION_COOKIE_HTTPONLY: looseBoolean(true),
   SESSION_COOKIE_SAMESITE: z.enum(["lax", "strict", "none"]).default("lax"),
-  SESSION_ROTATE_ON_LOGIN: envBoolean(true)
+  SESSION_ROTATE_ON_LOGIN: looseBoolean(true)
 };
 var webSocketSettingsShape = {
   WS_HEARTBEAT_SECONDS: z.coerce.number().int().min(1).default(30),
@@ -513,22 +490,22 @@ var webSocketSettingsShape = {
   WS_MAX_MESSAGE_BYTES: z.coerce.number().int().min(1).default(64 * 1024)
 };
 var authSettingsShape = {
-  AUTH_AUTO_ACTIVATE: envBoolean(false),
-  AUTH_RETURN_TOKEN_IN_RESPONSE: envBoolean(false),
+  AUTH_AUTO_ACTIVATE: looseBoolean(false),
+  AUTH_RETURN_TOKEN_IN_RESPONSE: looseBoolean(false),
   AUTH_ACTIVATION_TTL_SECONDS: z.coerce.number().int().min(1).default(86400 * 7),
   AUTH_PASSWORD_RESET_TTL_SECONDS: z.coerce.number().int().min(1).default(3600),
   AUTH_ACTIVATION_URL_TEMPLATE: z.string().default("http://localhost:3000/activate?token={token}"),
   AUTH_PASSWORD_RESET_URL_TEMPLATE: z.string().default("http://localhost:3000/reset-password?token={token}"),
   AUTH_PASSWORD_MIN_LENGTH: z.coerce.number().int().min(1).default(12),
-  AUTH_PASSWORD_REQUIRE_COMPLEXITY: envBoolean(false),
+  AUTH_PASSWORD_REQUIRE_COMPLEXITY: looseBoolean(false),
   AUTH_DEFAULT_LOCALE: z.string().default("pt-BR"),
-  AUTH_MFA_ENABLED: envBoolean(false),
+  AUTH_MFA_ENABLED: looseBoolean(false),
   AUTH_MFA_ISSUER: z.string().default("Tempest"),
   AUTH_MFA_RECOVERY_CODES_COUNT: z.coerce.number().int().min(0).default(10),
   AUTH_MFA_TOKEN_TTL_SECONDS: z.coerce.number().int().min(1).default(300),
   AUTH_MFA_VERIFY_WINDOW: z.coerce.number().int().min(0).default(1),
   AUTH_TOKEN_DELIVERY: z.enum(["bearer", "cookie", "both"]).default("bearer"),
-  AUTH_COOKIE_SECURE: envBoolean(true),
+  AUTH_COOKIE_SECURE: looseBoolean(true),
   AUTH_COOKIE_SAMESITE: z.enum(["lax", "strict", "none"]).default("lax"),
   AUTH_COOKIE_DOMAIN: z.string().optional(),
   AUTH_ACCESS_COOKIE_NAME: z.string().default("access_token"),
@@ -8789,14 +8766,14 @@ var webPushKeysSchema = z.object({
   auth: z.string().openapi({ description: "Client auth secret (base64url)." })
 }).openapi("WebPushKeys");
 var webPushSubscriptionSchema = z.object({
-  endpoint: z.string().url().openapi({ description: "Push service endpoint URL." }),
+  endpoint: z.url().openapi({ description: "Push service endpoint URL." }),
   keys: webPushKeysSchema
 }).openapi("WebPushSubscription");
 var webPushPayloadSchema = z.object({
   title: z.string().openapi({ description: "Notification title." }),
   body: z.string().optional().openapi({ description: "Notification body." }),
   url: z.string().optional().openapi({ description: "URL opened on click." }),
-  data: z.record(z.unknown()).optional().openapi({ description: "Extra data." })
+  data: z.record(z.string(), z.unknown()).optional().openapi({ description: "Extra data." })
 }).openapi("WebPushPayload");
 
 // src/webpush/dispatcher.ts
@@ -9446,12 +9423,12 @@ function makeAdminRouter(site, options = {}) {
 
 // src/auth/schemas.ts
 var signupSchema = z.object({
-  email: z.string().email().openapi({ description: "Login identifier (email)." }),
+  email: z.email().openapi({ description: "Login identifier (email)." }),
   password: z.string().min(1).openapi({ description: "Plaintext password (hashed server-side)." }),
   name: z.string().max(120).optional().openapi({ description: "Optional display name." })
 }).openapi("Signup");
 var loginSchema = z.object({
-  email: z.string().email().openapi({ description: "Login identifier (email)." }),
+  email: z.email().openapi({ description: "Login identifier (email)." }),
   password: z.string().min(1).openapi({ description: "Plaintext password." })
 }).openapi("Login");
 var refreshSchema = z.object({
@@ -9465,7 +9442,7 @@ var tokenPairSchema = z.object({
 }).openapi("TokenPair");
 var userPublicSchema = z.object({
   id: z.string().openapi({ description: "User id." }),
-  email: z.string().email().openapi({ description: "User email." }),
+  email: z.email().openapi({ description: "User email." }),
   name: z.string().nullable().openapi({ description: "Display name, or null." }),
   isActive: z.boolean().openapi({ description: "Whether the account is active." }),
   roles: z.array(z.string()).openapi({ description: "Assigned role names." })
@@ -9484,7 +9461,7 @@ var mfaChallengeSchema = z.object({
   code: z.string().min(1).openapi({ description: "Authenticator code." })
 }).openapi("MfaChallenge");
 var activationSchema = z.object({ token: z.string().min(1).openapi({ description: "Activation token." }) }).openapi("Activation");
-var passwordResetRequestSchema = z.object({ email: z.string().email().openapi({ description: "Account email." }) }).openapi("PasswordResetRequest");
+var passwordResetRequestSchema = z.object({ email: z.email().openapi({ description: "Account email." }) }).openapi("PasswordResetRequest");
 var passwordResetConfirmSchema = z.object({
   token: z.string().min(1).openapi({ description: "Reset token." }),
   password: z.string().min(1).openapi({ description: "New plaintext password." })
@@ -11224,6 +11201,6 @@ async function withTestDatabase(models, fn) {
   }
 }
 
-export { ActivationService, AdminSite, AppException, AttemptThrottle, AuditAction, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_LOCALE, EmailProvider, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, HTTPClient, HTTP_500_LOG_FILE, HTTP_500_MARKER, HttpMetrics, IDEMPOTENCY_HEADER, InvalidTokenException, JSONLogger, JWTUtils, LEVEL_LOG_FILES, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MessagingHub, MetricsUtils, MfaService, NotFoundException, OAuthError, OIDCProvider, OutboxRelay, OutboxStatus, PHONE_BR_PATTERN, PasswordResetService, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisIdempotencyStore, RedisRateLimitStore, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, S3UploadStorage, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TenantScopedRepository, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, UserTokenPurpose, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WebhookSignatureVerifier, WhatsAppProvider, activationSchema, addLogSink, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildPaginationLinkHeader, cached2 as cached, centsField, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, cursorPaginationFilterSchema, cursorPaginationSchema, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, envBoolean, envList, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, hexColorField, idempotencyMiddleware, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, latitudeField, listStates, logEntrySchema, logSettingsShape, loginSchema, longitudeField, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, percentField, phoneBrField, portField, positiveFloatField, positiveIntField, priceField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, ratingField, ratioField, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveDownloadPath, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, slugField, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
+export { ActivationService, AdminSite, AppException, AttemptThrottle, AuditAction, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_LOCALE, EmailProvider, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, HTTPClient, HTTP_500_LOG_FILE, HTTP_500_MARKER, HttpMetrics, IDEMPOTENCY_HEADER, InvalidTokenException, JSONLogger, JWTUtils, LEVEL_LOG_FILES, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MessagingHub, MetricsUtils, MfaService, NotFoundException, OAuthError, OIDCProvider, OutboxRelay, OutboxStatus, PHONE_BR_PATTERN, PasswordResetService, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisIdempotencyStore, RedisRateLimitStore, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, S3UploadStorage, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TenantScopedRepository, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, UserTokenPurpose, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WebhookSignatureVerifier, WhatsAppProvider, activationSchema, addLogSink, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildPaginationLinkHeader, cached2 as cached, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, cursorPaginationFilterSchema, cursorPaginationSchema, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, envList, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, idempotencyMiddleware, inboundMessageSchema, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, listStates, logEntrySchema, logSettingsShape, loginSchema, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveDownloadPath, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map