@ankhorage/contracts 0.0.4 → 0.1.2

package/CHANGELOG.md

@@ -0,0 +1,41 @@
+# @ankhorage/contracts
+
+## 0.1.2
+
+### Patch Changes
+
+- fc2928d: update publish config to 'public' access
+
+## 0.1.1
+
+### Patch Changes
+
+- 7075528: add repository metadata
+
+## 0.1.0
+
+### Minor Changes
+
+- 07b8da7: Add shared auth and database adapter contracts.
+
+### Patch Changes
+
+- 5c800d8: add missing script
+
+## 0.0.4
+
+### Patch Changes
+
+- Refresh the README copy so the published package overview and usage example stay aligned with the current messaging.
+
+## 0.0.3
+
+### Patch Changes
+
+- 908b4de: Export `APP_CATEGORIES` and `AppCategory` so template packages can consume the shared category contract instead of redefining it.
+
+## 0.0.2
+
+### Patch Changes
+
+- 2c2e771: Migrate to @ankhorage/devtools for shared ESLint and Prettier configuration.

package/README.md

@@ -1,20 +1,63 @@
 # contracts
 
-Shared type definitions for applications.
+Shared public contracts for Ankhorage packages and standalone provider packages.
 
 ## 🎯 What you get
+
 - Strongly typed app structures
-- Clear contracts between systems
+- Serializable schemas for app manifests and UI definitions
+- Provider-neutral runtime contracts for auth and database adapters
+- Clear contracts between systems without depending on framework internals
 
 ## ✨ Features
-- Serializable schemas
-- App manifests
-- UI definitions
+
+- Serializable app, action, theme, infra, and auth config contracts
+- UI and navigation definitions
+- Auth adapter contracts using `signIn`, `signUp`, and `signOut` naming
+- Database adapter contracts for provider-neutral CRUD-style access
+- Dedicated subpath exports for focused imports
 
 ## 📦 Usage
+
 ```ts
-import { AppManifest } from '@ankhorage/contracts'
+import type { AppManifest } from '@ankhorage/contracts';
+import type { AuthAdapter } from '@ankhorage/contracts/auth';
+import type { DbAdapter } from '@ankhorage/contracts/db';
+```
+
+Provider packages can implement the shared contracts without importing runtime,
+CLI, ZORA, Expo Router, or app-generation logic.
+
+```ts
+import type { AuthAdapter } from '@ankhorage/contracts/auth';
+
+export function createSupabaseAuthAdapter(): AuthAdapter {
+  return {
+    async signIn(input) {
+      return {
+        ok: true,
+        data: {
+          accessToken: `token:${input.identifier.value}`,
+          user: { id: 'user-1', email: input.identifier.value },
+        },
+      };
+    },
+    async signUp(input) {
+      return { ok: true, data: { id: 'user-1', email: input.identifier.value } };
+    },
+    async signOut() {
+      return { ok: true };
+    },
+    async getSession() {
+      return { ok: true, data: null };
+    },
+  };
+}
 ```
 
 ## 🧠 Why this exists
-Separates data contracts from implementation.
+
+Contracts separates shared data and runtime contracts from implementation details.
+Standalone packages such as Supabase, Clerk, or database providers can depend on
+these contracts while staying independent from Ankhorage app generation,
+runtime, CLI, and UI packages.

package/dist/auth.d.ts

@@ -0,0 +1,78 @@
+export type AuthIdentifierKind = 'email' | 'phone' | 'username';
+export interface AuthIdentifier {
+    kind: AuthIdentifierKind;
+    value: string;
+}
+export interface AuthUser {
+    id: string;
+    email?: string;
+    phone?: string;
+    username?: string;
+    displayName?: string;
+    avatarUrl?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface AuthSession {
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt?: number;
+    tokenType?: string;
+    user: AuthUser;
+}
+export interface AuthAdapterError {
+    code: string;
+    message: string;
+    cause?: unknown;
+}
+export type AuthResult<TData = void> = {
+    ok: true;
+    data?: TData;
+} | {
+    ok: false;
+    error: AuthAdapterError;
+};
+export interface SignInInput {
+    identifier: AuthIdentifier;
+    password?: string;
+    otp?: string;
+    redirectTo?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface SignUpInput {
+    identifier: AuthIdentifier;
+    password?: string;
+    profile?: Record<string, unknown>;
+    redirectTo?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface SignOutInput {
+    allDevices?: boolean;
+}
+export interface PasswordResetInput {
+    identifier: AuthIdentifier;
+    redirectTo?: string;
+}
+export interface VerifyOtpInput {
+    identifier: AuthIdentifier;
+    token: string;
+    redirectTo?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface AuthAdapterCapabilities {
+    signInIdentifiers: AuthIdentifierKind[];
+    supportsSignUp: boolean;
+    supportsPasswordReset: boolean;
+    supportsOtp: boolean;
+    supportsSessionRefresh: boolean;
+}
+export interface AuthAdapter {
+    readonly capabilities?: AuthAdapterCapabilities;
+    signIn(input: SignInInput): Promise<AuthResult<AuthSession>>;
+    signUp(input: SignUpInput): Promise<AuthResult<AuthSession | AuthUser>>;
+    signOut(input?: SignOutInput): Promise<AuthResult>;
+    getSession(): Promise<AuthResult<AuthSession | null>>;
+    refreshSession?(): Promise<AuthResult<AuthSession | null>>;
+    requestPasswordReset?(input: PasswordResetInput): Promise<AuthResult>;
+    verifyOtp?(input: VerifyOtpInput): Promise<AuthResult<AuthSession>>;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;AAEhE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,UAAU,CAAC,KAAK,GAAG,IAAI,IAC/B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,CAAC,EAAE,KAAK,CAAC;CACd,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,gBAAgB,CAAC;CACzB,CAAC;AAEN,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,cAAc,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,uBAAuB;IACtC,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;IACxC,cAAc,EAAE,OAAO,CAAC;IACxB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC;IACrB,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAEhD,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEnD,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IACtD,cAAc,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IAE3D,oBAAoB,CAAC,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtE,SAAS,CAAC,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;CACrE"}

package/dist/auth.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"","sourcesContent":["export type AuthIdentifierKind = 'email' | 'phone' | 'username';\n\nexport interface AuthIdentifier {\n  kind: AuthIdentifierKind;\n  value: string;\n}\n\nexport interface AuthUser {\n  id: string;\n  email?: string;\n  phone?: string;\n  username?: string;\n  displayName?: string;\n  avatarUrl?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface AuthSession {\n  accessToken: string;\n  refreshToken?: string;\n  expiresAt?: number;\n  tokenType?: string;\n  user: AuthUser;\n}\n\nexport interface AuthAdapterError {\n  code: string;\n  message: string;\n  cause?: unknown;\n}\n\nexport type AuthResult<TData = void> =\n  | {\n      ok: true;\n      data?: TData;\n    }\n  | {\n      ok: false;\n      error: AuthAdapterError;\n    };\n\nexport interface SignInInput {\n  identifier: AuthIdentifier;\n  password?: string;\n  otp?: string;\n  redirectTo?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface SignUpInput {\n  identifier: AuthIdentifier;\n  password?: string;\n  profile?: Record<string, unknown>;\n  redirectTo?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface SignOutInput {\n  allDevices?: boolean;\n}\n\nexport interface PasswordResetInput {\n  identifier: AuthIdentifier;\n  redirectTo?: string;\n}\n\nexport interface VerifyOtpInput {\n  identifier: AuthIdentifier;\n  token: string;\n  redirectTo?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface AuthAdapterCapabilities {\n  signInIdentifiers: AuthIdentifierKind[];\n  supportsSignUp: boolean;\n  supportsPasswordReset: boolean;\n  supportsOtp: boolean;\n  supportsSessionRefresh: boolean;\n}\n\nexport interface AuthAdapter {\n  readonly capabilities?: AuthAdapterCapabilities;\n\n  signIn(input: SignInInput): Promise<AuthResult<AuthSession>>;\n  signUp(input: SignUpInput): Promise<AuthResult<AuthSession | AuthUser>>;\n  signOut(input?: SignOutInput): Promise<AuthResult>;\n\n  getSession(): Promise<AuthResult<AuthSession | null>>;\n  refreshSession?(): Promise<AuthResult<AuthSession | null>>;\n\n  requestPasswordReset?(input: PasswordResetInput): Promise<AuthResult>;\n  verifyOtp?(input: VerifyOtpInput): Promise<AuthResult<AuthSession>>;\n}\n"]}

package/dist/db.d.ts

@@ -0,0 +1,68 @@
+export type DbRecord = Record<string, unknown>;
+export type DbSortDirection = 'asc' | 'desc';
+export interface DbAdapterError {
+    code: string;
+    message: string;
+    cause?: unknown;
+}
+export type DbResult<TData = void> = {
+    ok: true;
+    data?: TData;
+} | {
+    ok: false;
+    error: DbAdapterError;
+};
+export interface DbSort {
+    field: string;
+    direction?: DbSortDirection;
+}
+export interface DbPage {
+    limit?: number;
+    offset?: number;
+}
+export type DbFilterOperator = 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'in' | 'contains' | 'startsWith' | 'endsWith';
+export interface DbFilter {
+    field: string;
+    operator: DbFilterOperator;
+    value: unknown;
+}
+export interface DbSelectInput {
+    table: string;
+    columns?: string[];
+    filters?: DbFilter[];
+    sort?: DbSort[];
+    page?: DbPage;
+}
+export interface DbFindByIdInput {
+    table: string;
+    id: string | number;
+    columns?: string[];
+}
+export interface DbInsertInput<TRecord extends object = DbRecord> {
+    table: string;
+    values: TRecord | TRecord[];
+}
+export interface DbUpdateInput<TRecord extends object = DbRecord> {
+    table: string;
+    values: Partial<TRecord>;
+    filters: DbFilter[];
+}
+export interface DbDeleteInput {
+    table: string;
+    filters: DbFilter[];
+}
+export interface DbAdapterCapabilities {
+    supportsTransactions: boolean;
+    supportsReturning: boolean;
+    supportsRealtime: boolean;
+}
+export interface DbAdapter {
+    readonly capabilities?: DbAdapterCapabilities;
+    select<TRecord extends object = DbRecord>(input: DbSelectInput): Promise<DbResult<TRecord[]>>;
+    findById<TRecord extends object = DbRecord>(input: DbFindByIdInput): Promise<DbResult<TRecord | null>>;
+    insert<TRecord extends object = DbRecord>(input: DbInsertInput<TRecord>): Promise<DbResult<TRecord[]>>;
+    update<TRecord extends object = DbRecord>(input: DbUpdateInput<TRecord>): Promise<DbResult<TRecord[]>>;
+    delete<TRecord extends object = DbRecord>(input: DbDeleteInput): Promise<DbResult<TRecord[]>>;
+    transaction?<TResult>(run: (adapter: DbAdapter) => Promise<TResult>): Promise<DbResult<TResult>>;
+}
+//# sourceMappingURL=db.d.ts.map

package/dist/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC/C,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,QAAQ,CAAC,KAAK,GAAG,IAAI,IAC7B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,CAAC,EAAE,KAAK,CAAC;CACd,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC;AAEN,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GACxB,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,UAAU,GACV,YAAY,GACZ,UAAU,CAAC;AAEf,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,aAAa,CAAC,OAAO,SAAS,MAAM,GAAG,QAAQ;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,GAAG,OAAO,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa,CAAC,OAAO,SAAS,MAAM,GAAG,QAAQ;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,EAAE,QAAQ,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,QAAQ,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IAE9C,MAAM,CAAC,OAAO,SAAS,MAAM,GAAG,QAAQ,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9F,QAAQ,CAAC,OAAO,SAAS,MAAM,GAAG,QAAQ,EACxC,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,OAAO,SAAS,MAAM,GAAG,QAAQ,EACtC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,GAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,OAAO,SAAS,MAAM,GAAG,QAAQ,EACtC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,GAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,OAAO,SAAS,MAAM,GAAG,QAAQ,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAE9F,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;CAClG"}

package/dist/db.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=db.js.map

package/dist/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"","sourcesContent":["export type DbRecord = Record<string, unknown>;\nexport type DbSortDirection = 'asc' | 'desc';\n\nexport interface DbAdapterError {\n  code: string;\n  message: string;\n  cause?: unknown;\n}\n\nexport type DbResult<TData = void> =\n  | {\n      ok: true;\n      data?: TData;\n    }\n  | {\n      ok: false;\n      error: DbAdapterError;\n    };\n\nexport interface DbSort {\n  field: string;\n  direction?: DbSortDirection;\n}\n\nexport interface DbPage {\n  limit?: number;\n  offset?: number;\n}\n\nexport type DbFilterOperator =\n  | 'eq'\n  | 'neq'\n  | 'gt'\n  | 'gte'\n  | 'lt'\n  | 'lte'\n  | 'in'\n  | 'contains'\n  | 'startsWith'\n  | 'endsWith';\n\nexport interface DbFilter {\n  field: string;\n  operator: DbFilterOperator;\n  value: unknown;\n}\n\nexport interface DbSelectInput {\n  table: string;\n  columns?: string[];\n  filters?: DbFilter[];\n  sort?: DbSort[];\n  page?: DbPage;\n}\n\nexport interface DbFindByIdInput {\n  table: string;\n  id: string | number;\n  columns?: string[];\n}\n\nexport interface DbInsertInput<TRecord extends object = DbRecord> {\n  table: string;\n  values: TRecord | TRecord[];\n}\n\nexport interface DbUpdateInput<TRecord extends object = DbRecord> {\n  table: string;\n  values: Partial<TRecord>;\n  filters: DbFilter[];\n}\n\nexport interface DbDeleteInput {\n  table: string;\n  filters: DbFilter[];\n}\n\nexport interface DbAdapterCapabilities {\n  supportsTransactions: boolean;\n  supportsReturning: boolean;\n  supportsRealtime: boolean;\n}\n\nexport interface DbAdapter {\n  readonly capabilities?: DbAdapterCapabilities;\n\n  select<TRecord extends object = DbRecord>(input: DbSelectInput): Promise<DbResult<TRecord[]>>;\n  findById<TRecord extends object = DbRecord>(\n    input: DbFindByIdInput,\n  ): Promise<DbResult<TRecord | null>>;\n  insert<TRecord extends object = DbRecord>(\n    input: DbInsertInput<TRecord>,\n  ): Promise<DbResult<TRecord[]>>;\n  update<TRecord extends object = DbRecord>(\n    input: DbUpdateInput<TRecord>,\n  ): Promise<DbResult<TRecord[]>>;\n  delete<TRecord extends object = DbRecord>(input: DbDeleteInput): Promise<DbResult<TRecord[]>>;\n\n  transaction?<TResult>(run: (adapter: DbAdapter) => Promise<TResult>): Promise<DbResult<TResult>>;\n}\n"]}

package/dist/index.d.ts

@@ -1,2 +1,4 @@
+export * from './auth';
+export * from './db';
 export * from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,MAAM,CAAC;AACrB,cAAc,SAAS,CAAC"}

package/dist/index.js

@@ -1,2 +1,4 @@
+export * from './auth';
+export * from './db';
 export * from './types';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,MAAM,CAAC;AACrB,cAAc,SAAS,CAAC","sourcesContent":["export * from './auth';\nexport * from './db';\nexport * from './types';\n"]}

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAyFA,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAGpE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,eAAe;IACf,uBAAuB;IACvB,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,eAAe;IACf,YAAY;IACZ,OAAO;IACP,iBAAiB;IACjB,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,SAAS;IACT,aAAa;IACb,mBAAmB;IACnB,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,mBAAmB;IACnB,kBAAkB;IAClB,QAAQ;IACR,iBAAiB;IACjB,SAAS;CACD,CAAC;AAGX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,UAAU,CAAU,CAAC;AAIxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,UAAU,CAAU,CAAC;AAIxD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,MAAM,CAAU,CAAC;AAGvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAG/D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,CAAU,CAAC;AAGrD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAG3D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC;AAGrE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAAU,CAAU,CAAC;AAIpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAG9E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,GAAG,sBAAsB;IACzB,UAAU;IACV,WAAW;IACX,UAAU;IACV,aAAa;IACb,WAAW;CACH,CAAC;AAIX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,YAAY,EAAE,qBAAqB,CAAU,CAAC;AAGnF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,GAAG,sBAAsB;IACzB,WAAW;IACX,UAAU;IACV,aAAa;IACb,WAAW;CACH,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAyFA,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAGpE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,eAAe;IACf,uBAAuB;IACvB,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,eAAe;IACf,YAAY;IACZ,OAAO;IACP,iBAAiB;IACjB,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,SAAS;IACT,aAAa;IACb,mBAAmB;IACnB,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,mBAAmB;IACnB,kBAAkB;IAClB,QAAQ;IACR,iBAAiB;IACjB,SAAS;CACD,CAAC;AAGX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,UAAU,CAAU,CAAC;AAIxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,UAAU,CAAU,CAAC;AAIxD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,MAAM,CAAU,CAAC;AAGvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAG/D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,CAAU,CAAC;AAGrD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAG3D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC;AAGrE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAAU,CAAU,CAAC;AAIpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAG9E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,GAAG,sBAAsB;IACzB,UAAU;IACV,WAAW;IACX,UAAU;IACV,aAAa;IACb,WAAW;CACH,CAAC;AAIX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,YAAY,EAAE,qBAAqB,CAAU,CAAC;AAGnF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,GAAG,sBAAsB;IACzB,WAAW;IACX,UAAU;IACV,aAAa;IACb,WAAW;CACH,CAAC","sourcesContent":["export type ColorHarmony =\n  | 'monochromatic'\n  | 'analogous'\n  | 'complementary'\n  | 'triadic'\n  | 'tetradic'\n  | 'splitComplementary';\n\nexport type SystemTone = 'neutral' | 'pastel' | 'earth' | 'jewel' | 'fluorescent';\n\nexport interface ThemeModeConfig {\n  primaryColor: string;\n  harmony: ColorHarmony;\n  systemTone: SystemTone;\n}\n\nexport interface ThemeConfig {\n  id: string;\n  name: string;\n  light: ThemeModeConfig;\n  dark: ThemeModeConfig;\n}\n\nexport type ActionType =\n  | 'navigate'\n  | 'alert'\n  | 'console'\n  | 'toggleDarkMode'\n  | 'setLanguage'\n  | 'search'\n  | 'filter';\n\nexport interface NavigateAction {\n  type: 'navigate';\n  payload: {\n    route: string;\n    params?: Record<string, number | string>;\n  };\n}\n\nexport interface AlertAction {\n  type: 'alert';\n  payload?: {\n    message?: string;\n  };\n}\n\nexport interface ConsoleAction {\n  type: 'console';\n  payload?: Record<string, unknown>;\n}\n\nexport interface ToggleDarkModeAction {\n  type: 'toggleDarkMode';\n  payload?: never;\n}\n\nexport interface SetLanguageAction {\n  type: 'setLanguage';\n  payload: {\n    locale: string;\n  };\n}\n\nexport interface SearchAction {\n  type: 'search';\n  payload: {\n    query: string;\n    scope?: string;\n  };\n}\n\nexport interface FilterAction {\n  type: 'filter';\n  payload: {\n    filterKey: string;\n    filterValue: string;\n  };\n}\n\nexport type Action =\n  | AlertAction\n  | ConsoleAction\n  | FilterAction\n  | NavigateAction\n  | SearchAction\n  | SetLanguageAction\n  | ToggleDarkModeAction;\n\nexport const NAVIGATOR_TYPES = ['stack', 'tabs', 'drawer'] as const;\nexport type NavigatorType = (typeof NAVIGATOR_TYPES)[number];\n\nexport const APP_CATEGORIES = [\n  'books_reading',\n  'business_productivity',\n  'developer_tools',\n  'education_learning',\n  'entertainment_media',\n  'finance_money',\n  'food_drink',\n  'games',\n  'graphics_design',\n  'health_fitness',\n  'kids_family',\n  'lifestyle',\n  'medical',\n  'music_audio',\n  'navigation_travel',\n  'news_magazines',\n  'photo_video',\n  'reference',\n  'shopping_commerce',\n  'social_community',\n  'sports',\n  'utilities_tools',\n  'weather',\n] as const;\nexport type AppCategory = (typeof APP_CATEGORIES)[number];\n\nexport const DEPLOYMENT_TARGETS = ['minikube'] as const;\nexport type KnownDeploymentTarget = (typeof DEPLOYMENT_TARGETS)[number];\nexport type DeploymentTarget = KnownDeploymentTarget | (string & {});\n\nexport const DATABASE_PROVIDERS = ['supabase'] as const;\nexport type KnownDatabaseProvider = (typeof DATABASE_PROVIDERS)[number];\nexport type DatabaseProvider = KnownDatabaseProvider | (string & {});\n\nexport const DATABASE_TIERS = ['dev', 'prod'] as const;\nexport type DatabaseTier = (typeof DATABASE_TIERS)[number];\n\nexport const STORAGE_PROVIDERS = ['auto', 's3', 'r2'] as const;\nexport type StorageProvider = (typeof STORAGE_PROVIDERS)[number];\n\nexport const AUTHZ_KINDS = ['RBAC', 'ABAC'] as const;\nexport type AuthzKind = (typeof AUTHZ_KINDS)[number];\n\nexport const AUTHZ_ENGINES = ['cerbos', 'native'] as const;\nexport type AuthzEngine = (typeof AUTHZ_ENGINES)[number];\n\nexport const AUTH_SCOPES = ['global', 'none', 'integrated'] as const;\nexport type AuthScope = (typeof AUTH_SCOPES)[number];\n\nexport const AUTH_PROVIDERS = ['supabase'] as const;\nexport type KnownAuthProvider = (typeof AUTH_PROVIDERS)[number];\nexport type AuthProvider = KnownAuthProvider | (string & {});\n\nexport const AUTH_LOGIN_IDENTIFIERS = ['email', 'username', 'phone'] as const;\nexport type AuthLoginIdentifier = (typeof AUTH_LOGIN_IDENTIFIERS)[number];\n\nexport const AUTH_REGISTRATION_FIELDS = [\n  ...AUTH_LOGIN_IDENTIFIERS,\n  'password',\n  'firstName',\n  'lastName',\n  'displayName',\n  'avatarUrl',\n] as const;\nexport type KnownAuthRegistrationField = (typeof AUTH_REGISTRATION_FIELDS)[number];\nexport type AuthRegistrationField = KnownAuthRegistrationField | (string & {});\n\nexport const AUTH_SIGNUP_POLICIES = ['autoSignIn', 'requireVerification'] as const;\nexport type AuthSignupPolicy = (typeof AUTH_SIGNUP_POLICIES)[number];\n\nexport const AUTH_PROFILE_FIELDS = [\n  ...AUTH_LOGIN_IDENTIFIERS,\n  'firstName',\n  'lastName',\n  'displayName',\n  'avatarUrl',\n] as const;\nexport type KnownAuthProfileField = (typeof AUTH_PROFILE_FIELDS)[number];\nexport type AuthProfileField = KnownAuthProfileField | (string & {});\n\nexport interface IconSpec {\n  name: string;\n  provider?: string;\n  size?: number | string;\n  color?: string;\n}\n\nexport interface UiNode {\n  id: string;\n  type: string;\n  alias?: string;\n  props?: Record<string, unknown>;\n  children?: UiNode[];\n  style?: Record<string, number | string>;\n}\n\nexport interface ScreenSpec {\n  id: string;\n  name: string;\n  title?: string;\n  description?: string;\n  root: UiNode;\n}\n\nexport interface NavigatorSpec {\n  type: NavigatorType;\n  initialRouteName?: string;\n  routes: RouteDefinition[];\n  options?: Record<string, unknown>;\n}\n\nexport interface RouteDefinition {\n  name: string;\n  path?: string;\n  label?: string;\n  icon?: IconSpec;\n  hideInTabBar?: boolean;\n  guards?: string[];\n  screenId?: string;\n  navigator?: NavigatorSpec;\n}\n\nexport interface DeploymentSpec {\n  target: DeploymentTarget;\n  monitoring: boolean;\n}\n\nexport interface DatabaseSpec {\n  provider: DatabaseProvider;\n  tier: DatabaseTier;\n}\n\nexport interface StorageSpec {\n  provider: StorageProvider;\n  buckets: string[];\n}\n\nexport interface AuthzSpec {\n  kind: AuthzKind;\n  engine: AuthzEngine;\n}\n\nexport interface AuthLoginSpec {\n  identifiers: AuthLoginIdentifier[];\n}\n\nexport interface AuthRegistrationSpec {\n  requiredFields: AuthRegistrationField[];\n  optionalFields?: AuthRegistrationField[];\n  signupPolicy?: AuthSignupPolicy;\n}\n\nexport interface AuthProfileSpec {\n  fields: AuthProfileField[];\n}\n\nexport interface AuthSpec {\n  scope: AuthScope;\n  provider: AuthProvider;\n  authorization: AuthzSpec;\n  login?: AuthLoginSpec;\n  registration?: AuthRegistrationSpec;\n  profile?: AuthProfileSpec;\n}\n\nexport interface NetworkingSpec {\n  domain?: string;\n  cdn: boolean;\n}\n\nexport interface InfraManifest {\n  deployment?: DeploymentSpec;\n  auth?: AuthSpec;\n  database?: DatabaseSpec;\n  storage?: StorageSpec;\n  networking?: NetworkingSpec;\n  plugins: string[];\n  pluginsConfig?: Record<string, unknown>;\n}\n\nexport interface AppManifest {\n  metadata: {\n    name: string;\n    slug: string;\n    version: string;\n    themeId: string;\n    created?: string;\n    updated?: string;\n  };\n  themes: ThemeConfig[];\n  activeThemeId: string;\n  activeThemeMode?: 'dark' | 'light';\n  infra: InfraManifest;\n  navigator: NavigatorSpec;\n  screens: Record<string, ScreenSpec>;\n  settings: {\n    apiBaseUrl?: string;\n    localization: {\n      defaultLocale: string;\n      locales: string[];\n    };\n    authFlow: {\n      loginRoute: string;\n      unauthorizedRoute: string;\n      postLoginRoute: string;\n    };\n  };\n}\n"]}

package/package.json

@@ -1,37 +1,60 @@
 {
   "name": "@ankhorage/contracts",
-  "type": "module",
-  "version": "0.0.4",
-  "description": "Serializable app, action, and theme config contracts for Ankhorage.",
+  "version": "0.1.2",
   "main": "./dist/index.js",
-  "sideEffects": false,
-  "types": "./dist/index.d.ts",
-  "files": [
-    "dist"
-  ],
+  "devDependencies": {
+    "@ankhorage/devtools": "^1.0.0",
+    "@changesets/cli": "^2.30.0",
+    "@types/bun": "^1.3.13",
+    "@types/node": "^25.2.3",
+    "typescript": "^5.9.3"
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
+    },
+    "./auth": {
+      "types": "./dist/auth.d.ts",
+      "default": "./dist/auth.js"
+    },
+    "./db": {
+      "types": "./dist/db.d.ts",
+      "default": "./dist/db.js"
     }
   },
+  "description": "Serializable app, action, and theme config contracts for Ankhorage.",
+  "files": [
+    "dist",
+    "src",
+    "package.json",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "packageManager": "bun@1.3.13",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ankhorage/contracts"
+  },
+  "homepage": "https://github.com/ankhorage/contracts#readme",
+  "bugs": {
+    "url": "https://github.com/ankhorage/contracts/issues"
+  },
   "scripts": {
     "build": "rm -rf dist tsconfig.tsbuildinfo && bun x tsc -p tsconfig.json",
     "lint": "eslint . --max-warnings=0",
     "lint:fix": "eslint . --fix --max-warnings=0",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
-    "test": "bun test src"
+    "test": "bun test src",
+    "version-packages": "changeset version"
   },
-  "devDependencies": {
-    "@ankhorage/devtools": "^1.0.0",
-    "@changesets/cli": "^2.30.0",
-    "@types/bun": "^1.3.11",
-    "@types/node": "^25.2.3",
-    "typescript": "^5.9.3"
+  "sideEffects": false,
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
   },
-  "packageManager": "bun@1.3.11",
-  "dependencies": {
-    "bun": "^1.3.11"
-  }
+  "license": "MIT"
 }

package/src/auth.ts

@@ -0,0 +1,94 @@
+export type AuthIdentifierKind = 'email' | 'phone' | 'username';
+
+export interface AuthIdentifier {
+  kind: AuthIdentifierKind;
+  value: string;
+}
+
+export interface AuthUser {
+  id: string;
+  email?: string;
+  phone?: string;
+  username?: string;
+  displayName?: string;
+  avatarUrl?: string;
+  metadata?: Record<string, unknown>;
+}
+
+export interface AuthSession {
+  accessToken: string;
+  refreshToken?: string;
+  expiresAt?: number;
+  tokenType?: string;
+  user: AuthUser;
+}
+
+export interface AuthAdapterError {
+  code: string;
+  message: string;
+  cause?: unknown;
+}
+
+export type AuthResult<TData = void> =
+  | {
+      ok: true;
+      data?: TData;
+    }
+  | {
+      ok: false;
+      error: AuthAdapterError;
+    };
+
+export interface SignInInput {
+  identifier: AuthIdentifier;
+  password?: string;
+  otp?: string;
+  redirectTo?: string;
+  metadata?: Record<string, unknown>;
+}
+
+export interface SignUpInput {
+  identifier: AuthIdentifier;
+  password?: string;
+  profile?: Record<string, unknown>;
+  redirectTo?: string;
+  metadata?: Record<string, unknown>;
+}
+
+export interface SignOutInput {
+  allDevices?: boolean;
+}
+
+export interface PasswordResetInput {
+  identifier: AuthIdentifier;
+  redirectTo?: string;
+}
+
+export interface VerifyOtpInput {
+  identifier: AuthIdentifier;
+  token: string;
+  redirectTo?: string;
+  metadata?: Record<string, unknown>;
+}
+
+export interface AuthAdapterCapabilities {
+  signInIdentifiers: AuthIdentifierKind[];
+  supportsSignUp: boolean;
+  supportsPasswordReset: boolean;
+  supportsOtp: boolean;
+  supportsSessionRefresh: boolean;
+}
+
+export interface AuthAdapter {
+  readonly capabilities?: AuthAdapterCapabilities;
+
+  signIn(input: SignInInput): Promise<AuthResult<AuthSession>>;
+  signUp(input: SignUpInput): Promise<AuthResult<AuthSession | AuthUser>>;
+  signOut(input?: SignOutInput): Promise<AuthResult>;
+
+  getSession(): Promise<AuthResult<AuthSession | null>>;
+  refreshSession?(): Promise<AuthResult<AuthSession | null>>;
+
+  requestPasswordReset?(input: PasswordResetInput): Promise<AuthResult>;
+  verifyOtp?(input: VerifyOtpInput): Promise<AuthResult<AuthSession>>;
+}

package/src/contracts.test.ts

@@ -0,0 +1,147 @@
+import { describe, expect, it } from 'bun:test';
+
+import {
+  APP_CATEGORIES,
+  type AppCategory,
+  AUTH_PROVIDERS,
+  type AuthAdapter,
+  type DbAdapter,
+  DEPLOYMENT_TARGETS,
+  NAVIGATOR_TYPES,
+  type SignInInput,
+  type ThemeConfig,
+} from './index';
+
+describe('contracts', () => {
+  it('exports stable platform constants', () => {
+    expect(NAVIGATOR_TYPES).toEqual(['stack', 'tabs', 'drawer']);
+    expect(APP_CATEGORIES).toEqual([
+      'books_reading',
+      'business_productivity',
+      'developer_tools',
+      'education_learning',
+      'entertainment_media',
+      'finance_money',
+      'food_drink',
+      'games',
+      'graphics_design',
+      'health_fitness',
+      'kids_family',
+      'lifestyle',
+      'medical',
+      'music_audio',
+      'navigation_travel',
+      'news_magazines',
+      'photo_video',
+      'reference',
+      'shopping_commerce',
+      'social_community',
+      'sports',
+      'utilities_tools',
+      'weather',
+    ]);
+    expect(DEPLOYMENT_TARGETS).toEqual(['minikube']);
+    expect(AUTH_PROVIDERS).toEqual(['supabase']);
+  });
+
+  it('exports the app category union for template packages', () => {
+    const category: AppCategory = 'developer_tools';
+    expect(category).toBe('developer_tools');
+  });
+
+  it('accepts the current serialized theme config shape', () => {
+    const theme: ThemeConfig = {
+      id: 'theme-default',
+      name: 'Default',
+      light: {
+        primaryColor: '#3366ff',
+        harmony: 'analogous',
+        systemTone: 'neutral',
+      },
+      dark: {
+        primaryColor: '#3366ff',
+        harmony: 'analogous',
+        systemTone: 'neutral',
+      },
+    };
+
+    expect(theme.light.primaryColor).toBe('#3366ff');
+    expect(theme.dark.systemTone).toBe('neutral');
+  });
+
+  it('accepts provider-neutral auth and db adapter implementations', async () => {
+    const authAdapter: AuthAdapter = {
+      capabilities: {
+        signInIdentifiers: ['email'],
+        supportsSignUp: true,
+        supportsPasswordReset: true,
+        supportsOtp: false,
+        supportsSessionRefresh: true,
+      },
+      async signIn(input: SignInInput) {
+        await new Promise((resolve) => setTimeout(resolve, 1));
+        return {
+          ok: true,
+          data: {
+            accessToken: `token:${input.identifier.value}`,
+            user: {
+              id: 'user-1',
+              email: input.identifier.value,
+            },
+          },
+        };
+      },
+      async signUp(input) {
+        await new Promise((resolve) => setTimeout(resolve, 1));
+        return {
+          ok: true,
+          data: {
+            id: 'user-1',
+            email: input.identifier.value,
+          },
+        };
+      },
+      async signOut() {
+        await new Promise((resolve) => setTimeout(resolve, 1));
+        return { ok: true };
+      },
+      async getSession() {
+        await new Promise((resolve) => setTimeout(resolve, 1));
+        return { ok: true, data: null };
+      },
+    };
+
+    const dbAdapter: DbAdapter = {
+      async select() {
+        await new Promise((resolve) => setTimeout(resolve, 1));
+        return { ok: true, data: [{ id: 'row-1' }] };
+      },
+      async findById() {
+        await new Promise((resolve) => setTimeout(resolve, 1));
+        return { ok: true, data: { id: 'row-1' } };
+      },
+      async insert(input) {
+        const values = Array.isArray(input.values) ? input.values : [input.values];
+        await new Promise((resolve) => setTimeout(resolve, 1));
+        return { ok: true, data: values };
+      },
+      async update(input) {
+        await new Promise((resolve) => setTimeout(resolve, 1));
+        return { ok: true, data: [input.values] };
+      },
+      async delete() {
+        await new Promise((resolve) => setTimeout(resolve, 1));
+        return { ok: true, data: [] };
+      },
+    } as DbAdapter;
+
+    const signInResult = await authAdapter.signIn({
+      identifier: { kind: 'email', value: 'hello@example.com' },
+      password: 'secret',
+    });
+    const selectResult = await dbAdapter.select({ table: 'profiles' });
+
+    expect(signInResult.ok).toBe(true);
+    expect(selectResult.ok).toBe(true);
+  });
+});

package/src/db.ts

@@ -0,0 +1,100 @@
+export type DbRecord = Record<string, unknown>;
+export type DbSortDirection = 'asc' | 'desc';
+
+export interface DbAdapterError {
+  code: string;
+  message: string;
+  cause?: unknown;
+}
+
+export type DbResult<TData = void> =
+  | {
+      ok: true;
+      data?: TData;
+    }
+  | {
+      ok: false;
+      error: DbAdapterError;
+    };
+
+export interface DbSort {
+  field: string;
+  direction?: DbSortDirection;
+}
+
+export interface DbPage {
+  limit?: number;
+  offset?: number;
+}
+
+export type DbFilterOperator =
+  | 'eq'
+  | 'neq'
+  | 'gt'
+  | 'gte'
+  | 'lt'
+  | 'lte'
+  | 'in'
+  | 'contains'
+  | 'startsWith'
+  | 'endsWith';
+
+export interface DbFilter {
+  field: string;
+  operator: DbFilterOperator;
+  value: unknown;
+}
+
+export interface DbSelectInput {
+  table: string;
+  columns?: string[];
+  filters?: DbFilter[];
+  sort?: DbSort[];
+  page?: DbPage;
+}
+
+export interface DbFindByIdInput {
+  table: string;
+  id: string | number;
+  columns?: string[];
+}
+
+export interface DbInsertInput<TRecord extends object = DbRecord> {
+  table: string;
+  values: TRecord | TRecord[];
+}
+
+export interface DbUpdateInput<TRecord extends object = DbRecord> {
+  table: string;
+  values: Partial<TRecord>;
+  filters: DbFilter[];
+}
+
+export interface DbDeleteInput {
+  table: string;
+  filters: DbFilter[];
+}
+
+export interface DbAdapterCapabilities {
+  supportsTransactions: boolean;
+  supportsReturning: boolean;
+  supportsRealtime: boolean;
+}
+
+export interface DbAdapter {
+  readonly capabilities?: DbAdapterCapabilities;
+
+  select<TRecord extends object = DbRecord>(input: DbSelectInput): Promise<DbResult<TRecord[]>>;
+  findById<TRecord extends object = DbRecord>(
+    input: DbFindByIdInput,
+  ): Promise<DbResult<TRecord | null>>;
+  insert<TRecord extends object = DbRecord>(
+    input: DbInsertInput<TRecord>,
+  ): Promise<DbResult<TRecord[]>>;
+  update<TRecord extends object = DbRecord>(
+    input: DbUpdateInput<TRecord>,
+  ): Promise<DbResult<TRecord[]>>;
+  delete<TRecord extends object = DbRecord>(input: DbDeleteInput): Promise<DbResult<TRecord[]>>;
+
+  transaction?<TResult>(run: (adapter: DbAdapter) => Promise<TResult>): Promise<DbResult<TResult>>;
+}

package/src/index.ts

@@ -0,0 +1,3 @@
+export * from './auth';
+export * from './db';
+export * from './types';

package/src/types.ts

@@ -0,0 +1,301 @@
+export type ColorHarmony =
+  | 'monochromatic'
+  | 'analogous'
+  | 'complementary'
+  | 'triadic'
+  | 'tetradic'
+  | 'splitComplementary';
+
+export type SystemTone = 'neutral' | 'pastel' | 'earth' | 'jewel' | 'fluorescent';
+
+export interface ThemeModeConfig {
+  primaryColor: string;
+  harmony: ColorHarmony;
+  systemTone: SystemTone;
+}
+
+export interface ThemeConfig {
+  id: string;
+  name: string;
+  light: ThemeModeConfig;
+  dark: ThemeModeConfig;
+}
+
+export type ActionType =
+  | 'navigate'
+  | 'alert'
+  | 'console'
+  | 'toggleDarkMode'
+  | 'setLanguage'
+  | 'search'
+  | 'filter';
+
+export interface NavigateAction {
+  type: 'navigate';
+  payload: {
+    route: string;
+    params?: Record<string, number | string>;
+  };
+}
+
+export interface AlertAction {
+  type: 'alert';
+  payload?: {
+    message?: string;
+  };
+}
+
+export interface ConsoleAction {
+  type: 'console';
+  payload?: Record<string, unknown>;
+}
+
+export interface ToggleDarkModeAction {
+  type: 'toggleDarkMode';
+  payload?: never;
+}
+
+export interface SetLanguageAction {
+  type: 'setLanguage';
+  payload: {
+    locale: string;
+  };
+}
+
+export interface SearchAction {
+  type: 'search';
+  payload: {
+    query: string;
+    scope?: string;
+  };
+}
+
+export interface FilterAction {
+  type: 'filter';
+  payload: {
+    filterKey: string;
+    filterValue: string;
+  };
+}
+
+export type Action =
+  | AlertAction
+  | ConsoleAction
+  | FilterAction
+  | NavigateAction
+  | SearchAction
+  | SetLanguageAction
+  | ToggleDarkModeAction;
+
+export const NAVIGATOR_TYPES = ['stack', 'tabs', 'drawer'] as const;
+export type NavigatorType = (typeof NAVIGATOR_TYPES)[number];
+
+export const APP_CATEGORIES = [
+  'books_reading',
+  'business_productivity',
+  'developer_tools',
+  'education_learning',
+  'entertainment_media',
+  'finance_money',
+  'food_drink',
+  'games',
+  'graphics_design',
+  'health_fitness',
+  'kids_family',
+  'lifestyle',
+  'medical',
+  'music_audio',
+  'navigation_travel',
+  'news_magazines',
+  'photo_video',
+  'reference',
+  'shopping_commerce',
+  'social_community',
+  'sports',
+  'utilities_tools',
+  'weather',
+] as const;
+export type AppCategory = (typeof APP_CATEGORIES)[number];
+
+export const DEPLOYMENT_TARGETS = ['minikube'] as const;
+export type KnownDeploymentTarget = (typeof DEPLOYMENT_TARGETS)[number];
+export type DeploymentTarget = KnownDeploymentTarget | (string & {});
+
+export const DATABASE_PROVIDERS = ['supabase'] as const;
+export type KnownDatabaseProvider = (typeof DATABASE_PROVIDERS)[number];
+export type DatabaseProvider = KnownDatabaseProvider | (string & {});
+
+export const DATABASE_TIERS = ['dev', 'prod'] as const;
+export type DatabaseTier = (typeof DATABASE_TIERS)[number];
+
+export const STORAGE_PROVIDERS = ['auto', 's3', 'r2'] as const;
+export type StorageProvider = (typeof STORAGE_PROVIDERS)[number];
+
+export const AUTHZ_KINDS = ['RBAC', 'ABAC'] as const;
+export type AuthzKind = (typeof AUTHZ_KINDS)[number];
+
+export const AUTHZ_ENGINES = ['cerbos', 'native'] as const;
+export type AuthzEngine = (typeof AUTHZ_ENGINES)[number];
+
+export const AUTH_SCOPES = ['global', 'none', 'integrated'] as const;
+export type AuthScope = (typeof AUTH_SCOPES)[number];
+
+export const AUTH_PROVIDERS = ['supabase'] as const;
+export type KnownAuthProvider = (typeof AUTH_PROVIDERS)[number];
+export type AuthProvider = KnownAuthProvider | (string & {});
+
+export const AUTH_LOGIN_IDENTIFIERS = ['email', 'username', 'phone'] as const;
+export type AuthLoginIdentifier = (typeof AUTH_LOGIN_IDENTIFIERS)[number];
+
+export const AUTH_REGISTRATION_FIELDS = [
+  ...AUTH_LOGIN_IDENTIFIERS,
+  'password',
+  'firstName',
+  'lastName',
+  'displayName',
+  'avatarUrl',
+] as const;
+export type KnownAuthRegistrationField = (typeof AUTH_REGISTRATION_FIELDS)[number];
+export type AuthRegistrationField = KnownAuthRegistrationField | (string & {});
+
+export const AUTH_SIGNUP_POLICIES = ['autoSignIn', 'requireVerification'] as const;
+export type AuthSignupPolicy = (typeof AUTH_SIGNUP_POLICIES)[number];
+
+export const AUTH_PROFILE_FIELDS = [
+  ...AUTH_LOGIN_IDENTIFIERS,
+  'firstName',
+  'lastName',
+  'displayName',
+  'avatarUrl',
+] as const;
+export type KnownAuthProfileField = (typeof AUTH_PROFILE_FIELDS)[number];
+export type AuthProfileField = KnownAuthProfileField | (string & {});
+
+export interface IconSpec {
+  name: string;
+  provider?: string;
+  size?: number | string;
+  color?: string;
+}
+
+export interface UiNode {
+  id: string;
+  type: string;
+  alias?: string;
+  props?: Record<string, unknown>;
+  children?: UiNode[];
+  style?: Record<string, number | string>;
+}
+
+export interface ScreenSpec {
+  id: string;
+  name: string;
+  title?: string;
+  description?: string;
+  root: UiNode;
+}
+
+export interface NavigatorSpec {
+  type: NavigatorType;
+  initialRouteName?: string;
+  routes: RouteDefinition[];
+  options?: Record<string, unknown>;
+}
+
+export interface RouteDefinition {
+  name: string;
+  path?: string;
+  label?: string;
+  icon?: IconSpec;
+  hideInTabBar?: boolean;
+  guards?: string[];
+  screenId?: string;
+  navigator?: NavigatorSpec;
+}
+
+export interface DeploymentSpec {
+  target: DeploymentTarget;
+  monitoring: boolean;
+}
+
+export interface DatabaseSpec {
+  provider: DatabaseProvider;
+  tier: DatabaseTier;
+}
+
+export interface StorageSpec {
+  provider: StorageProvider;
+  buckets: string[];
+}
+
+export interface AuthzSpec {
+  kind: AuthzKind;
+  engine: AuthzEngine;
+}
+
+export interface AuthLoginSpec {
+  identifiers: AuthLoginIdentifier[];
+}
+
+export interface AuthRegistrationSpec {
+  requiredFields: AuthRegistrationField[];
+  optionalFields?: AuthRegistrationField[];
+  signupPolicy?: AuthSignupPolicy;
+}
+
+export interface AuthProfileSpec {
+  fields: AuthProfileField[];
+}
+
+export interface AuthSpec {
+  scope: AuthScope;
+  provider: AuthProvider;
+  authorization: AuthzSpec;
+  login?: AuthLoginSpec;
+  registration?: AuthRegistrationSpec;
+  profile?: AuthProfileSpec;
+}
+
+export interface NetworkingSpec {
+  domain?: string;
+  cdn: boolean;
+}
+
+export interface InfraManifest {
+  deployment?: DeploymentSpec;
+  auth?: AuthSpec;
+  database?: DatabaseSpec;
+  storage?: StorageSpec;
+  networking?: NetworkingSpec;
+  plugins: string[];
+  pluginsConfig?: Record<string, unknown>;
+}
+
+export interface AppManifest {
+  metadata: {
+    name: string;
+    slug: string;
+    version: string;
+    themeId: string;
+    created?: string;
+    updated?: string;
+  };
+  themes: ThemeConfig[];
+  activeThemeId: string;
+  activeThemeMode?: 'dark' | 'light';
+  infra: InfraManifest;
+  navigator: NavigatorSpec;
+  screens: Record<string, ScreenSpec>;
+  settings: {
+    apiBaseUrl?: string;
+    localization: {
+      defaultLocale: string;
+      locales: string[];
+    };
+    authFlow: {
+      loginRoute: string;
+      unauthorizedRoute: string;
+      postLoginRoute: string;
+    };
+  };
+}