@aurabase/aurabase-js 0.3.0

package/packages/core/node_modules/.bin/tsc

@@ -0,0 +1,22 @@
+#!/bin/sh
+basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
+
+case `uname` in
+    *CYGWIN*|*MINGW*|*MSYS*)
+        if command -v cygpath > /dev/null 2>&1; then
+            basedir=`cygpath -w "$basedir"`
+        fi
+    ;;
+esac
+
+if [ -z "$NODE_PATH" ]; then
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
+else
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
+fi
+if [ -x "$basedir/node" ]; then
+  exec "$basedir/node"  "$basedir/../typescript/bin/tsc" "$@"
+else
+  exec node  "$basedir/../typescript/bin/tsc" "$@"
+fi
+# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/packages/core/node_modules/typescript/bin/tsc

package/packages/core/node_modules/.bin/tsserver

@@ -0,0 +1,22 @@
+#!/bin/sh
+basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
+
+case `uname` in
+    *CYGWIN*|*MINGW*|*MSYS*)
+        if command -v cygpath > /dev/null 2>&1; then
+            basedir=`cygpath -w "$basedir"`
+        fi
+    ;;
+esac
+
+if [ -z "$NODE_PATH" ]; then
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
+else
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
+fi
+if [ -x "$basedir/node" ]; then
+  exec "$basedir/node"  "$basedir/../typescript/bin/tsserver" "$@"
+else
+  exec node  "$basedir/../typescript/bin/tsserver" "$@"
+fi
+# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/packages/core/node_modules/typescript/bin/tsserver

package/packages/core/node_modules/.bin/tsup

@@ -0,0 +1,22 @@
+#!/bin/sh
+basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
+
+case `uname` in
+    *CYGWIN*|*MINGW*|*MSYS*)
+        if command -v cygpath > /dev/null 2>&1; then
+            basedir=`cygpath -w "$basedir"`
+        fi
+    ;;
+esac
+
+if [ -z "$NODE_PATH" ]; then
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules/tsup/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
+else
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules/tsup/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
+fi
+if [ -x "$basedir/node" ]; then
+  exec "$basedir/node"  "$basedir/../tsup/dist/cli-default.js" "$@"
+else
+  exec node  "$basedir/../tsup/dist/cli-default.js" "$@"
+fi
+# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/packages/core/node_modules/tsup/dist/cli-default.js

package/packages/core/node_modules/.bin/tsup-node

@@ -0,0 +1,22 @@
+#!/bin/sh
+basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
+
+case `uname` in
+    *CYGWIN*|*MINGW*|*MSYS*)
+        if command -v cygpath > /dev/null 2>&1; then
+            basedir=`cygpath -w "$basedir"`
+        fi
+    ;;
+esac
+
+if [ -z "$NODE_PATH" ]; then
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules/tsup/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
+else
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules/tsup/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/tsup@8.5.1_postcss@8.5.16_typescript@5.9.3/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
+fi
+if [ -x "$basedir/node" ]; then
+  exec "$basedir/node"  "$basedir/../tsup/dist/cli-node.js" "$@"
+else
+  exec node  "$basedir/../tsup/dist/cli-node.js" "$@"
+fi
+# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/packages/core/node_modules/tsup/dist/cli-node.js

package/packages/core/node_modules/.bin/vite

@@ -0,0 +1,22 @@
+#!/bin/sh
+basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
+
+case `uname` in
+    *CYGWIN*|*MINGW*|*MSYS*)
+        if command -v cygpath > /dev/null 2>&1; then
+            basedir=`cygpath -w "$basedir"`
+        fi
+    ;;
+esac
+
+if [ -z "$NODE_PATH" ]; then
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules/vite/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
+else
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules/vite/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
+fi
+if [ -x "$basedir/node" ]; then
+  exec "$basedir/node"  "$basedir/../../../../node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules/vite/bin/vite.js" "$@"
+else
+  exec node  "$basedir/../../../../node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules/vite/bin/vite.js" "$@"
+fi
+# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7/node_modules/vite/bin/vite.js

package/packages/core/node_modules/.bin/vitest

@@ -0,0 +1,22 @@
+#!/bin/sh
+basedir=$(dirname "$(echo "$0" | sed -e 's,\\,/,g')")
+
+case `uname` in
+    *CYGWIN*|*MINGW*|*MSYS*)
+        if command -v cygpath > /dev/null 2>&1; then
+            basedir=`cygpath -w "$basedir"`
+        fi
+    ;;
+esac
+
+if [ -z "$NODE_PATH" ]; then
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vitest@4.1.9_@types+node@20.14.15_vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7_/node_modules/vitest/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vitest@4.1.9_@types+node@20.14.15_vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7_/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules"
+else
+  export NODE_PATH="/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vitest@4.1.9_@types+node@20.14.15_vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7_/node_modules/vitest/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/vitest@4.1.9_@types+node@20.14.15_vite@8.1.3_@types+node@20.14.15_esbuild@0.27.7_/node_modules:/Users/affanedaylami/aurabase/aurabase-js/node_modules/.pnpm/node_modules:$NODE_PATH"
+fi
+if [ -x "$basedir/node" ]; then
+  exec "$basedir/node"  "$basedir/../vitest/vitest.mjs" "$@"
+else
+  exec node  "$basedir/../vitest/vitest.mjs" "$@"
+fi
+# cmd-shim-target=/Users/affanedaylami/aurabase/aurabase-js/packages/core/node_modules/vitest/vitest.mjs

package/packages/core/node_modules/.vite/vitest/da39a3ee5e6b4b0d3255bfef95601890afd80709/results.json

@@ -0,0 +1 @@
+{"version":"4.1.9","results":[[":tests/auth-store.test.ts",{"duration":29.471584000000348,"failed":false}],[":tests/retry.test.ts",{"duration":187.4342919999999,"failed":false}],[":tests/serialize.test.ts",{"duration":6.90783300000021,"failed":false}],[":tests/error.test.ts",{"duration":120.81179199999951,"failed":false}],[":tests/fetch.test.ts",{"duration":966.9932919999997,"failed":false}],[":tests/refresh-hardening.test.ts",{"duration":641.2061669999998,"failed":false}],[":tests/timeout.test.ts",{"duration":815.5460000000003,"failed":false}],[":tests/observability.test.ts",{"duration":25.504042000000027,"failed":false}],[":tests/refresh-observability.test.ts",{"duration":647.6677500000001,"failed":false}],[":tests/error-code.test.ts",{"duration":421.46225000000004,"failed":false}]]}

package/packages/core/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@aurabase/core",
+  "version": "0.3.0",
+  "description": "Cœur du SDK Aurabase : fetch résilient, erreurs, stores auth, types de réponse (infrastructure interne)",
+  "type": "module",
+  "main": "dist/index.cjs",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "license": "MIT",
+  "author": "Aurabase",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/daylami555/aurabase.git",
+    "directory": "aurabase-js/packages/core"
+  },
+  "homepage": "https://github.com/daylami555/aurabase/tree/main/aurabase-js/packages/core#readme",
+  "bugs": {
+    "url": "https://github.com/daylami555/aurabase/issues"
+  },
+  "keywords": [
+    "aurabase",
+    "baas",
+    "sdk",
+    "core"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "tsup": "catalog:",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
+  }
+}

package/packages/core/src/AuraError.ts

@@ -0,0 +1,89 @@
+/**
+ * Codes d'erreur produits par le SDK (LOT 3, finding I4 : taxonomie ad hoc non
+ * typée). Union fermée de tous les codes émis SDK-side (`grep new AuraError` sur
+ * `packages/*\/src`) + les codes backend usuels rencontrés (`PGRST116`), plus
+ * `(string & {})` pour rester ouvert à tout code backend arbitraire (`error.error.code`)
+ * sans perdre l'autocomplétion sur les codes connus (pattern "LiteralUnion").
+ *
+ * Provenance des codes SDK-side :
+ *  - fetch.ts (core)   : no_session, network_error, invalid_response, refresh_discarded, timeout
+ *  - AuthService.ts    : no_session, pkce_generation_failed, no_code_verifier, missing_email,
+ *                        unverifiable_token, invalid_issuer, invalid_audience
+ *  - jwks.ts            : jwks_fetch_failed, no_matching_key, signature_invalid, token_expired,
+ *                        token_not_yet_valid, invalid_jwt, unsupported_alg
+ *  - storage/path.ts   : invalid_path
+ *  - db/QueryBuilder.ts: PGRST116 (parité PostgREST : `.single()` sur 0/plusieurs lignes)
+ */
+export type AuraErrorCode =
+  | 'no_session'
+  | 'timeout'
+  | 'network_error'
+  | 'invalid_response'
+  | 'refresh_discarded'
+  | 'unverifiable_token'
+  | 'no_code_verifier'
+  | 'pkce_generation_failed'
+  | 'missing_email'
+  | 'jwks_fetch_failed'
+  | 'signature_invalid'
+  | 'token_expired'
+  | 'token_not_yet_valid'
+  | 'invalid_jwt'
+  | 'unsupported_alg'
+  | 'no_matching_key'
+  | 'invalid_issuer'
+  | 'invalid_audience'
+  | 'invalid_path'
+  | 'PGRST116'
+  // eslint-disable-next-line @typescript-eslint/ban-types -- pattern LiteralUnion (type-fest) : garde l'autocomplétion tout en acceptant tout code backend.
+  | (string & {})
+
+/**
+ * Structured error thrown/returned by the Aurabase SDK.
+ * Mirrors the backend's `AuraError` JSON shape.
+ */
+export class AuraError extends Error {
+  readonly status: number
+  readonly code: AuraErrorCode
+  readonly details: unknown
+  /** Marqueur runtime pour `isAuraError` (détection cross-realm/cross-bundle). */
+  protected readonly __isAuraError = true
+
+  constructor(
+    status: number,
+    body?: { error?: { code?: string; message?: string }; message?: string } | null,
+  ) {
+    const message = body?.error?.message ?? body?.message ?? `HTTP ${status}`
+    super(message)
+    this.name = 'AuraError'
+    this.status = status
+    this.code = body?.error?.code ?? `http_${status}`
+    this.details = body
+    Object.setPrototypeOf(this, AuraError.prototype)
+  }
+
+  get isNotFound(): boolean {
+    return this.status === 404
+  }
+
+  get isUnauthorized(): boolean {
+    return this.status === 401
+  }
+
+  get isForbidden(): boolean {
+    return this.status === 403
+  }
+
+  get isRateLimited(): boolean {
+    return this.status === 429
+  }
+}
+
+export function isAuraError(error: unknown): error is AuraError {
+  return (
+    error instanceof AuraError ||
+    (typeof error === 'object' &&
+      error !== null &&
+      (error as Record<string, unknown>).__isAuraError === true)
+  )
+}

package/packages/core/src/BaseService.ts

@@ -0,0 +1,44 @@
+import type { AuraClientLike } from './client'
+import type { AuraResponse } from './types'
+import { fetchWithAuth, type FetchInit } from './fetch'
+
+/**
+ * Abstract base class for all service modules.
+ * Provides the shared HTTP helper and URL builder.
+ */
+export abstract class BaseService {
+  protected readonly client: AuraClientLike
+
+  constructor(client: AuraClientLike) {
+    this.client = client
+  }
+
+  /** Build a full URL for the given path. */
+  protected url(path: string): string {
+    return `${this.client.baseUrl}${path}`
+  }
+
+  /** Convenience HTTP helper that delegates to fetchWithAuth. */
+  protected request<T>(
+    method: string,
+    path: string,
+    body?: unknown,
+    options?: {
+      headers?: Record<string, string>
+      signal?: AbortSignal
+      skipAuthRefresh?: boolean
+      /** Override explicite du Bearer (LOT D) — valide un token arbitraire. */
+      authToken?: string
+    },
+  ): Promise<AuraResponse<T>> {
+    const init: FetchInit = {
+      method,
+      body,
+      headers: options?.headers,
+      signal: options?.signal,
+      skipAuthRefresh: options?.skipAuthRefresh,
+      authToken: options?.authToken,
+    }
+    return fetchWithAuth<T>(this.url(path), init, this.client)
+  }
+}

package/packages/core/src/client.ts

@@ -0,0 +1,34 @@
+import type { BaseAuthStore } from './stores/BaseAuthStore'
+import type { AuraResponse, TokenPair, AuraObservabilityEvent } from './types'
+
+/**
+ * Forme minimale du client consommée par `fetchWithAuth`, `BaseService`,
+ * le `QueryBuilder` et les services. Le `AuraClient` concret (meta-package)
+ * satisfait cette interface structurellement — ce qui casse le cycle de
+ * dépendance core → meta (les services n'importent plus la classe concrète).
+ */
+export interface AuraClientLike {
+  readonly baseUrl: string
+  readonly projectId: string
+  readonly apiKey: string | null
+  readonly fetchFn: typeof globalThis.fetch
+  readonly authStore: BaseAuthStore
+  /** Consommé uniquement par le service realtime (refresh proactif du token). */
+  readonly auth: { refreshSession(): Promise<AuraResponse<TokenPair>> }
+  /** Config du retry transitoire. Défauts appliqués si absent : enabled=true, maxRetries=3. */
+  readonly retryConfig?: { enabled: boolean; maxRetries: number }
+  /**
+   * Timeout par défaut (ms) des requêtes HTTP. Appliqué UNIQUEMENT aux requêtes
+   * JSON sans `signal` fourni (donc pas aux uploads FormData ni aux appels qui
+   * gèrent déjà leur propre annulation). `0` désactive. Défaut : 30 000 ms.
+   */
+  readonly requestTimeoutMs?: number
+  /**
+   * Hook d'observabilité (LOT 3, finding I8), optionnel — n'importe quelle implémentation
+   * structurelle de `AuraClientLike` reste compatible sans le fournir (pas de breaking
+   * change). Consommé par `fetchWithAuth`/`refreshOnce` pour émettre retry/timeout/refresh.
+   */
+  readonly onEvent?: (event: AuraObservabilityEvent) => void
+  /** Si `true`, chaque `AuraObservabilityEvent` est aussi journalisé via `console.debug`. */
+  readonly debug?: boolean
+}

package/packages/core/src/cookie-utils.ts

@@ -0,0 +1,42 @@
+/**
+ * Parse a raw Cookie header string into key-value pairs.
+ */
+export function parseCookieHeader(header: string): Record<string, string> {
+  const result: Record<string, string> = {}
+  if (!header) return result
+  for (const pair of header.split(';')) {
+    const idx = pair.indexOf('=')
+    if (idx === -1) continue
+    const key = pair.slice(0, idx).trim()
+    const value = pair.slice(idx + 1).trim()
+    if (key) result[key] = decodeURIComponent(value)
+  }
+  return result
+}
+
+export interface SerializeCookieOptions {
+  path?: string
+  domain?: string
+  maxAge?: number
+  secure?: boolean
+  sameSite?: 'Strict' | 'Lax' | 'None'
+  httpOnly?: boolean
+}
+
+/**
+ * Serialize a cookie name + value + options into a Set-Cookie header value.
+ */
+export function serializeCookieHeader(
+  name: string,
+  value: string,
+  options: SerializeCookieOptions = {},
+): string {
+  const parts = [`${name}=${encodeURIComponent(value)}`]
+  if (options.path) parts.push(`Path=${options.path}`)
+  if (options.domain) parts.push(`Domain=${options.domain}`)
+  if (options.maxAge !== undefined) parts.push(`Max-Age=${options.maxAge}`)
+  if (options.secure) parts.push('Secure')
+  if (options.sameSite) parts.push(`SameSite=${options.sameSite}`)
+  if (options.httpOnly) parts.push('HttpOnly')
+  return parts.join('; ')
+}