@aurabase/aurabase-js 0.3.0 → 0.3.1

package/packages/auth/tests/verify-otp.test.ts

@@ -1,153 +0,0 @@
-import { describe, it, expect, afterEach, vi } from 'vitest'
-import { AuthService } from '../src/AuthService'
-import { BaseAuthStore } from '@aurabase/core'
-import type { AuraClientLike, TokenPair, User, AuthEvent } from '@aurabase/core'
-
-function fakeUser(id = 'u1'): User {
-  return { id, email: 't@e.com', phone: null, role: 'authenticated', email_verified: true, is_banned: false, is_anonymous: false, mfa_enabled: false, user_metadata: {}, app_metadata: {}, created_at: '2025-01-01T00:00:00Z' }
-}
-function tokenPair(): TokenPair {
-  return { access_token: 'AT', refresh_token: 'RT', token_type: 'bearer', expires_in: 3600, user: fakeUser() }
-}
-
-afterEach(() => { vi.restoreAllMocks() })
-
-function make() {
-  const seen: Array<{ url: string; method: string; body: unknown }> = []
-  const responders: Record<string, (body: unknown) => Response> = {}
-  const client: AuraClientLike = {
-    baseUrl: 'http://x', projectId: 'p', apiKey: 'k', authStore: new BaseAuthStore(),
-    fetchFn: (async (url: string, init: RequestInit) => {
-      const u = String(url)
-      let body: unknown = undefined
-      try { body = init.body ? JSON.parse(String(init.body)) : undefined } catch { /* FormData etc. */ }
-      seen.push({ url: u, method: String(init.method), body })
-      const key = Object.keys(responders).find((k) => u.includes(k))
-      if (key) return responders[key]!(body)
-      return new Response(JSON.stringify({ data: tokenPair() }), { status: 200, headers: { 'Content-Type': 'application/json' } })
-    }) as unknown as typeof globalThis.fetch,
-    auth: null as unknown as AuraClientLike['auth'],
-  }
-  const svc = new AuthService(client, { autoRefresh: false, persistSession: false })
-  ;(client as { auth: unknown }).auth = svc
-  const events: AuthEvent[] = []
-  svc.onAuthStateChange((p) => events.push(p.event))
-  return { svc, client, seen, responders, events }
-}
-const okUser = () => new Response(JSON.stringify({ data: fakeUser() }), { status: 200, headers: { 'Content-Type': 'application/json' } })
-
-describe('auth.verifyOtp — façade unifiée', () => {
-  it('signup → POST /verify-email {token}, save session + SIGNED_IN', async () => {
-    const { svc, seen, client, events } = make()
-    const { data } = await svc.verifyOtp({ type: 'signup', token: 'TK' })
-    expect((data as TokenPair).access_token).toBe('AT')
-    const c = seen.find((s) => s.url.includes('/verify-email'))!
-    expect(c.method).toBe('POST')
-    expect(c.body).toEqual({ token: 'TK' })
-    expect(client.authStore.token).toBe('AT')
-    expect(events).toContain('SIGNED_IN')
-  })
-
-  it('magiclink → POST /magic-link/verify {token}', async () => {
-    const { svc, seen } = make()
-    await svc.verifyOtp({ type: 'magiclink', token: 'ML' })
-    const c = seen.find((s) => s.url.includes('/magic-link/verify'))!
-    expect(c.body).toEqual({ token: 'ML' })
-  })
-
-  it('email → POST /email-otp/verify {email, code}', async () => {
-    const { svc, seen } = make()
-    await svc.verifyOtp({ type: 'email', email: 'a@b.c', token: '123456' })
-    const c = seen.find((s) => s.url.includes('/email-otp/verify'))!
-    expect(c.body).toEqual({ email: 'a@b.c', code: '123456' })
-  })
-
-  it('sms → POST /sms/verify {phone, code}', async () => {
-    const { svc, seen } = make()
-    await svc.verifyOtp({ type: 'sms', phone: '+33600', token: '999' })
-    const c = seen.find((s) => s.url.includes('/sms/verify'))!
-    expect(c.body).toEqual({ phone: '+33600', code: '999' })
-  })
-
-  it('recovery → POST /reset-password {token, password}, SIGNED_IN', async () => {
-    const { svc, seen, events } = make()
-    await svc.verifyOtp({ type: 'recovery', token: 'RCV', password: 'newpass' })
-    const c = seen.find((s) => s.url.includes('/reset-password'))!
-    expect(c.body).toEqual({ token: 'RCV', password: 'newpass' })
-    expect(events).toContain('SIGNED_IN')
-  })
-
-  it('email_change → POST /user/confirm-email-change {token}, émet USER_UPDATED', async () => {
-    const { svc, seen, responders, events } = make()
-    responders['/user/confirm-email-change'] = okUser
-    const { data } = await svc.verifyOtp({ type: 'email_change', token: 'EC' })
-    expect((data as User).id).toBe('u1')
-    const c = seen.find((s) => s.url.includes('/user/confirm-email-change'))!
-    expect(c.body).toEqual({ token: 'EC' })
-    expect(events).toContain('USER_UPDATED')
-    expect(events).not.toContain('SIGNED_IN')
-  })
-
-  it('recovery sans password → missing_password SANS appel réseau', async () => {
-    const { svc, seen } = make()
-    // Cast : on simule un appelant JS qui omet le password (le type l'exige).
-    const { error } = await svc.verifyOtp({ type: 'recovery', token: 'RCV' } as unknown as { type: 'recovery'; token: string; password: string })
-    expect(error?.code).toBe('missing_password')
-    expect(seen.length).toBe(0)
-  })
-
-  it('invite → otp_type_unsupported SANS appel réseau', async () => {
-    const { svc, seen } = make()
-    const { error } = await svc.verifyOtp({ type: 'invite', token: 'X' })
-    expect(error?.code).toBe('otp_type_unsupported')
-    expect(seen.length).toBe(0)
-  })
-
-  it('phone_change → otp_type_unsupported SANS appel réseau', async () => {
-    const { svc, seen } = make()
-    const { error } = await svc.verifyOtp({ type: 'phone_change', phone: '+1', token: 'X' })
-    expect(error?.code).toBe('otp_type_unsupported')
-    expect(seen.length).toBe(0)
-  })
-})
-
-describe('auth — rétrocompat des méthodes historiques (délégation à verifyOtp)', () => {
-  it('verifyEmail(token) → POST /verify-email {token} (inchangé)', async () => {
-    const { svc, seen } = make()
-    await svc.verifyEmail('TK')
-    const c = seen.find((s) => s.url.includes('/verify-email'))!
-    expect(c.method).toBe('POST')
-    expect(c.body).toEqual({ token: 'TK' })
-  })
-  it('verifyEmailOtp(email, code) → POST /email-otp/verify {email, code}', async () => {
-    const { svc, seen } = make()
-    await svc.verifyEmailOtp('a@b.c', '111')
-    const c = seen.find((s) => s.url.includes('/email-otp/verify'))!
-    expect(c.body).toEqual({ email: 'a@b.c', code: '111' })
-  })
-  it('verifySmsOtp(phone, code) → POST /sms/verify {phone, code}', async () => {
-    const { svc, seen } = make()
-    await svc.verifySmsOtp('+33', '222')
-    const c = seen.find((s) => s.url.includes('/sms/verify'))!
-    expect(c.body).toEqual({ phone: '+33', code: '222' })
-  })
-  it('verifyMagicLink(token) → POST /magic-link/verify {token}', async () => {
-    const { svc, seen } = make()
-    await svc.verifyMagicLink('ML')
-    const c = seen.find((s) => s.url.includes('/magic-link/verify'))!
-    expect(c.body).toEqual({ token: 'ML' })
-  })
-  it('resetPassword(token, pass) → POST /reset-password {token, password}', async () => {
-    const { svc, seen } = make()
-    await svc.resetPassword('RCV', 'np')
-    const c = seen.find((s) => s.url.includes('/reset-password'))!
-    expect(c.body).toEqual({ token: 'RCV', password: 'np' })
-  })
-  it('confirmEmailChange(token) → POST /user/confirm-email-change {token}', async () => {
-    const { svc, seen, responders } = make()
-    responders['/user/confirm-email-change'] = okUser
-    await svc.confirmEmailChange('EC')
-    const c = seen.find((s) => s.url.includes('/user/confirm-email-change'))!
-    expect(c.body).toEqual({ token: 'EC' })
-  })
-})

package/packages/auth/tsconfig.json

@@ -1,5 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": { "outDir": "dist", "rootDir": "src" },
-  "include": ["src"]
-}

package/packages/auth/tsup.config.ts

@@ -1,11 +0,0 @@
-import { defineConfig } from 'tsup'
-
-export default defineConfig({
-  entry: ['src/index.ts'],
-  format: ['cjs', 'esm'],
-  dts: true,
-  splitting: false,
-  clean: true,
-  treeshake: true,
-  minify: false,
-})

package/packages/core/node_modules/.bin/esbuild

@@ -1,22 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/esbuild@0.27.7/node_modules/esbuild/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/esbuild@0.27.7/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/esbuild@0.27.7/node_modules/esbuild/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/esbuild@0.27.7/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../../../../node_modules/.pnpm/esbuild@0.27.7/node_modules/esbuild/bin/esbuild" "$@"
-else
-  exec node  "$basedir/../../../../node_modules/.pnpm/esbuild@0.27.7/node_modules/esbuild/bin/esbuild" "$@"
-fi
-# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/esbuild@0.27.7/node_modules/esbuild/bin/esbuild

package/packages/core/node_modules/.bin/tsc

@@ -1,22 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../typescript/bin/tsc" "$@"
-else
-  exec node  "$basedir/../typescript/bin/tsc" "$@"
-fi
-# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/packages/core/node_modules/typescript/bin/tsc

package/packages/core/node_modules/.bin/tsserver

@@ -1,22 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../typescript/bin/tsserver" "$@"
-else
-  exec node  "$basedir/../typescript/bin/tsserver" "$@"
-fi
-# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/packages/core/node_modules/typescript/bin/tsserver

package/packages/core/node_modules/.bin/tsup

@@ -1,22 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules/tsup/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules/tsup/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../tsup/dist/cli-default.js" "$@"
-else
-  exec node  "$basedir/../tsup/dist/cli-default.js" "$@"
-fi
-# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/packages/core/node_modules/tsup/dist/cli-default.js

package/packages/core/node_modules/.bin/tsup-node

@@ -1,22 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules/tsup/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules/tsup/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../tsup/dist/cli-node.js" "$@"
-else
-  exec node  "$basedir/../tsup/dist/cli-node.js" "$@"
-fi
-# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/packages/core/node_modules/tsup/dist/cli-node.js

package/packages/core/node_modules/.bin/vite

@@ -1,22 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules/vite/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules/vite/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../../../../node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules/vite/bin/vite.js" "$@"
-else
-  exec node  "$basedir/../../../../node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules/vite/bin/vite.js" "$@"
-fi
-# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules/vite/bin/vite.js

package/packages/core/node_modules/.bin/vitest

@@ -1,22 +0,0 @@
-#!/bin/sh
-basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
-
-case `uname` in
-    *CYGWIN*|*MINGW*|*MSYS*)
-        if command -v cygpath > /dev/null 2>&1; then
-            basedir=`cygpath -w "$basedir"`
-        fi
-    ;;
-esac
-
-if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vitest@4.1.9_@types+node@20.14.15_vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7_/node_modules/vitest/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vitest@4.1.9_@types+node@20.14.15_vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7_/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
-else
-  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vitest@4.1.9_@types+node@20.14.15_vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7_/node_modules/vitest/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vitest@4.1.9_@types+node@20.14.15_vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7_/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
-fi
-if [ -x "$basedir/node" ]; then
-  exec "$basedir/node"  "$basedir/../vitest/vitest.mjs" "$@"
-else
-  exec node  "$basedir/../vitest/vitest.mjs" "$@"
-fi
-# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/packages/core/node_modules/vitest/vitest.mjs

package/packages/core/node_modules/.vite/vitest/da39a3ee5e6b4b0d3255bfef95601890afd80709/results.json

@@ -1 +0,0 @@
-{"version":"4.1.9","results":[[":tests/auth-store.test.ts",{"duration":29.471584000000348,"failed":false}],[":tests/retry.test.ts",{"duration":187.4342919999999,"failed":false}],[":tests/serialize.test.ts",{"duration":6.90783300000021,"failed":false}],[":tests/error.test.ts",{"duration":120.81179199999951,"failed":false}],[":tests/fetch.test.ts",{"duration":966.9932919999997,"failed":false}],[":tests/refresh-hardening.test.ts",{"duration":641.2061669999998,"failed":false}],[":tests/timeout.test.ts",{"duration":815.5460000000003,"failed":false}],[":tests/observability.test.ts",{"duration":25.504042000000027,"failed":false}],[":tests/refresh-observability.test.ts",{"duration":647.6677500000001,"failed":false}],[":tests/error-code.test.ts",{"duration":421.46225000000004,"failed":false}]]}

package/packages/core/src/AuraError.ts

@@ -1,89 +0,0 @@
-/**
- * Codes d'erreur produits par le SDK (LOT 3, finding I4 : taxonomie ad hoc non
- * typée). Union fermée de tous les codes émis SDK-side (`grep new AuraError` sur
- * `packages/*\/src`) + les codes backend usuels rencontrés (`PGRST116`), plus
- * `(string & {})` pour rester ouvert à tout code backend arbitraire (`error.error.code`)
- * sans perdre l'autocomplétion sur les codes connus (pattern "LiteralUnion").
- *
- * Provenance des codes SDK-side :
- *  - fetch.ts (core)   : no_session, network_error, invalid_response, refresh_discarded, timeout
- *  - AuthService.ts    : no_session, pkce_generation_failed, no_code_verifier, missing_email,
- *                        unverifiable_token, invalid_issuer, invalid_audience
- *  - jwks.ts            : jwks_fetch_failed, no_matching_key, signature_invalid, token_expired,
- *                        token_not_yet_valid, invalid_jwt, unsupported_alg
- *  - storage/path.ts   : invalid_path
- *  - db/QueryBuilder.ts: PGRST116 (parité PostgREST : `.single()` sur 0/plusieurs lignes)
- */
-export type AuraErrorCode =
-  | 'no_session'
-  | 'timeout'
-  | 'network_error'
-  | 'invalid_response'
-  | 'refresh_discarded'
-  | 'unverifiable_token'
-  | 'no_code_verifier'
-  | 'pkce_generation_failed'
-  | 'missing_email'
-  | 'jwks_fetch_failed'
-  | 'signature_invalid'
-  | 'token_expired'
-  | 'token_not_yet_valid'
-  | 'invalid_jwt'
-  | 'unsupported_alg'
-  | 'no_matching_key'
-  | 'invalid_issuer'
-  | 'invalid_audience'
-  | 'invalid_path'
-  | 'PGRST116'
-  // eslint-disable-next-line @typescript-eslint/ban-types -- pattern LiteralUnion (type-fest) : garde l'autocomplétion tout en acceptant tout code backend.
-  | (string & {})
-
-/**
- * Structured error thrown/returned by the Aurabase SDK.
- * Mirrors the backend's `AuraError` JSON shape.
- */
-export class AuraError extends Error {
-  readonly status: number
-  readonly code: AuraErrorCode
-  readonly details: unknown
-  /** Marqueur runtime pour `isAuraError` (détection cross-realm/cross-bundle). */
-  protected readonly __isAuraError = true
-
-  constructor(
-    status: number,
-    body?: { error?: { code?: string; message?: string }; message?: string } | null,
-  ) {
-    const message = body?.error?.message ?? body?.message ?? `HTTP ${status}`
-    super(message)
-    this.name = 'AuraError'
-    this.status = status
-    this.code = body?.error?.code ?? `http_${status}`
-    this.details = body
-    Object.setPrototypeOf(this, AuraError.prototype)
-  }
-
-  get isNotFound(): boolean {
-    return this.status === 404
-  }
-
-  get isUnauthorized(): boolean {
-    return this.status === 401
-  }
-
-  get isForbidden(): boolean {
-    return this.status === 403
-  }
-
-  get isRateLimited(): boolean {
-    return this.status === 429
-  }
-}
-
-export function isAuraError(error: unknown): error is AuraError {
-  return (
-    error instanceof AuraError ||
-    (typeof error === 'object' &&
-      error !== null &&
-      (error as Record<string, unknown>).__isAuraError === true)
-  )
-}

package/packages/core/src/BaseService.ts

@@ -1,44 +0,0 @@
-import type { AuraClientLike } from './client'
-import type { AuraResponse } from './types'
-import { fetchWithAuth, type FetchInit } from './fetch'
-
-/**
- * Abstract base class for all service modules.
- * Provides the shared HTTP helper and URL builder.
- */
-export abstract class BaseService {
-  protected readonly client: AuraClientLike
-
-  constructor(client: AuraClientLike) {
-    this.client = client
-  }
-
-  /** Build a full URL for the given path. */
-  protected url(path: string): string {
-    return `${this.client.baseUrl}${path}`
-  }
-
-  /** Convenience HTTP helper that delegates to fetchWithAuth. */
-  protected request<T>(
-    method: string,
-    path: string,
-    body?: unknown,
-    options?: {
-      headers?: Record<string, string>
-      signal?: AbortSignal
-      skipAuthRefresh?: boolean
-      /** Override explicite du Bearer (LOT D) — valide un token arbitraire. */
-      authToken?: string
-    },
-  ): Promise<AuraResponse<T>> {
-    const init: FetchInit = {
-      method,
-      body,
-      headers: options?.headers,
-      signal: options?.signal,
-      skipAuthRefresh: options?.skipAuthRefresh,
-      authToken: options?.authToken,
-    }
-    return fetchWithAuth<T>(this.url(path), init, this.client)
-  }
-}

package/packages/core/src/client.ts

@@ -1,34 +0,0 @@
-import type { BaseAuthStore } from './stores/BaseAuthStore'
-import type { AuraResponse, TokenPair, AuraObservabilityEvent } from './types'
-
-/**
- * Forme minimale du client consommée par `fetchWithAuth`, `BaseService`,
- * le `QueryBuilder` et les services. Le `AuraClient` concret (meta-package)
- * satisfait cette interface structurellement — ce qui casse le cycle de
- * dépendance core → meta (les services n'importent plus la classe concrète).
- */
-export interface AuraClientLike {
-  readonly baseUrl: string
-  readonly projectId: string
-  readonly apiKey: string | null
-  readonly fetchFn: typeof globalThis.fetch
-  readonly authStore: BaseAuthStore
-  /** Consommé uniquement par le service realtime (refresh proactif du token). */
-  readonly auth: { refreshSession(): Promise<AuraResponse<TokenPair>> }
-  /** Config du retry transitoire. Défauts appliqués si absent : enabled=true, maxRetries=3. */
-  readonly retryConfig?: { enabled: boolean; maxRetries: number }
-  /**
-   * Timeout par défaut (ms) des requêtes HTTP. Appliqué UNIQUEMENT aux requêtes
-   * JSON sans `signal` fourni (donc pas aux uploads FormData ni aux appels qui
-   * gèrent déjà leur propre annulation). `0` désactive. Défaut : 30 000 ms.
-   */
-  readonly requestTimeoutMs?: number
-  /**
-   * Hook d'observabilité (LOT 3, finding I8), optionnel — n'importe quelle implémentation
-   * structurelle de `AuraClientLike` reste compatible sans le fournir (pas de breaking
-   * change). Consommé par `fetchWithAuth`/`refreshOnce` pour émettre retry/timeout/refresh.
-   */
-  readonly onEvent?: (event: AuraObservabilityEvent) => void
-  /** Si `true`, chaque `AuraObservabilityEvent` est aussi journalisé via `console.debug`. */
-  readonly debug?: boolean
-}

package/packages/core/src/cookie-utils.ts

@@ -1,42 +0,0 @@
-/**
- * Parse a raw Cookie header string into key-value pairs.
- */
-export function parseCookieHeader(header: string): Record<string, string> {
-  const result: Record<string, string> = {}
-  if (!header) return result
-  for (const pair of header.split(';')) {
-    const idx = pair.indexOf('=')
-    if (idx === -1) continue
-    const key = pair.slice(0, idx).trim()
-    const value = pair.slice(idx + 1).trim()
-    if (key) result[key] = decodeURIComponent(value)
-  }
-  return result
-}
-
-export interface SerializeCookieOptions {
-  path?: string
-  domain?: string
-  maxAge?: number
-  secure?: boolean
-  sameSite?: 'Strict' | 'Lax' | 'None'
-  httpOnly?: boolean
-}
-
-/**
- * Serialize a cookie name + value + options into a Set-Cookie header value.
- */
-export function serializeCookieHeader(
-  name: string,
-  value: string,
-  options: SerializeCookieOptions = {},
-): string {
-  const parts = [`${name}=${encodeURIComponent(value)}`]
-  if (options.path) parts.push(`Path=${options.path}`)
-  if (options.domain) parts.push(`Domain=${options.domain}`)
-  if (options.maxAge !== undefined) parts.push(`Max-Age=${options.maxAge}`)
-  if (options.secure) parts.push('Secure')
-  if (options.sameSite) parts.push(`SameSite=${options.sameSite}`)
-  if (options.httpOnly) parts.push('HttpOnly')
-  return parts.join('; ')
-}