@connextar/house 0.1.0

package/README.md

@@ -0,0 +1,180 @@
+# @connextar/house
+
+The pieces every app we build needs and none of them should own a copy of.
+
+Thirteen codebases grew from one shared way of building, with no shared code. This
+is the dependency that stops the same fix having to be made eleven times — but
+only for the things that are genuinely the same everywhere. It is deliberately
+small, and the reason it is small is worth reading before adding to it.
+
+## What is in it, and what is not
+
+The portfolio was measured before anything was extracted. Divergence, against
+Quickie, of files that exist in six or more apps:
+
+| File | copies | divergence |
+| --- | --- | --- |
+| `error-shell.tsx` | 6/6 | **0%** |
+| `check-motion.mjs` | 3/6 | 11% |
+| `e2e-local.sh` | 6/6 | 30% |
+| `button.tsx` | 6/6 | 42% |
+| `dialog.tsx` | 5/6 | 62% |
+| `card.tsx` | 5/6 | 106% |
+| `lib/api.ts` | 6/6 | 152% |
+| `auth.ts` | 4/6 | 42–103% |
+
+Everything below about 15% is an extraction. Everything above it is a rewrite
+wearing an extraction's clothes, and pulling it in here would mean thirteen apps
+adopting a component none of them currently has. So the rule is:
+
+> **A shared package pays for itself on code that has not diverged yet.**
+> Extract what is identical, and what you are about to write for the second time.
+> Leave the rest where it is and let `bev`'s drift report keep score.
+
+That is why there is no `Button` here, and why the error shell takes its actions
+as props instead of rendering its own. Bringing a second design system into an
+app that already has one is a cost with no matching benefit.
+
+## Modules
+
+### `@connextar/house/errors`
+
+`ErrorShell` — the frame behind `error.tsx` and `not-found.tsx`. Renders plain
+elements with the house token classes (`bg-card`, `border-border`,
+`text-muted-foreground`), so it inherits the host app's look without importing a
+single thing from it. That matters here more than anywhere: it renders precisely
+when something upstream has already failed.
+
+`GlobalErrorShell` — the whole of `global-error.tsx`. This one was the most
+duplicated file in the portfolio for a structural reason: a global error boundary
+replaces the root layout, so it cannot import the app's components, which left
+eight apps each carrying sixty lines of near-identical inline CSS whose only real
+difference was five hex values. Those five are now props.
+
+```tsx
+// app/global-error.tsx
+"use client";
+import { GlobalErrorShell } from "@connextar/house/errors";
+import "@styles/globals.css";
+
+export default function GlobalError({ error, reset }: { error: Error & { digest?: string }; reset: () => void }) {
+  return (
+    <GlobalErrorShell
+      appName="Quickie"
+      brand={{ background: "#ffffff", ink: "#0f172a", muted: "#5b6b7f", line: "#e2e8f0", accent: "#0575b0" }}
+      error={error}
+      reset={reset}
+    />
+  );
+}
+```
+
+### `@connextar/house/auth`
+
+The two-factor sign-in policy. Better Auth's `twoFactor` plugin hooks
+`/sign-in/email`, `/sign-in/username` and `/sign-in/phone-number` and nothing
+else — every other sign-in route issues a session outright, second factor or not.
+On an app where magic link is a first-class sign-in method that makes two-factor
+decorative: a stolen mailbox is still enough.
+
+This module decides which routes to refuse, and why. It is here rather than in
+each app because it has to be the same everywhere and because getting it wrong is
+silent — two-factor keeps *looking* enabled while doing nothing.
+
+The lookup is injected, because only the app knows its own user table:
+
+```ts
+import { shouldBlockForTwoFactor } from "@connextar/house/auth";
+
+const blocked = await shouldBlockForTwoFactor(ctx.path, email, async (address) => {
+  const user = await prisma.user.findUnique({ where: { email: address }, select: { twoFactorEnabled: true } });
+  return user?.twoFactorEnabled === true;
+});
+```
+
+Passkey and social sign-in are deliberately still allowed. A passkey is already
+possession of a device and is phishing-resistant; a social login delegates to a
+provider enforcing its own second factor. Neither is weaker than password plus
+TOTP. A link in an inbox is.
+
+### `@connextar/house/account`
+
+The contract for "your data" and "delete my account" — types, the export notice,
+and the sole-owner refusal message. The *implementation* stays per-app, because
+an export is a walk over that app's Prisma schema. What must not be per-app is
+the shape of the answer, since that is what a person receives and a regulator
+reads.
+
+Two decisions are encoded here rather than left to be rediscovered:
+
+- **An export summarises authored work rather than including it.** A note
+  somebody wrote about a customer is the customer's personal data with an author
+  attached; shipping the contents would turn a subject access request into a way
+  for one employee to walk out with the customer book.
+- **Deletion follows the schema.** `onDelete: Cascade` is the app already saying
+  "personal, goes with them"; `onDelete: SetNull` is "business record, outlives
+  them". Invoices have to survive, and an audit trail erasable by its subject was
+  never an audit trail.
+
+App-specific sections go in `extras`, so one app's furniture does not become
+everyone's obligation.
+
+## Publishing
+
+The scope is public and the contents are a design system and two policy modules —
+nothing here is a secret. Public publishing is what keeps thirteen repositories
+across two GitHub owners able to install it with no token in any Vercel project,
+which is the failure mode that would otherwise take every deploy down at once.
+
+```bash
+npm login              # once, as an owner of the @connextar scope
+npm run verify         # format, typecheck, lint, tests, build
+npm publish            # publishConfig.access is already "public"
+```
+
+`prepublishOnly` runs `verify`, so a broken build cannot be published.
+
+## Adopting it in an app
+
+Once published:
+
+```bash
+npm install @connextar/house
+```
+
+Then replace the local copies. For Quickie the exact change is saved as a patch,
+generated from the working migration and verified against a real packed tarball:
+
+```bash
+git apply ../../Shared/cx-house/migrations/quickie-adopt-house.patch
+npm run check && npm test && npm run build
+```
+
+For the other apps the shape is the same: `global-error.tsx` becomes a call to
+`GlobalErrorShell`, `components/errors/error-shell.tsx` re-exports `ErrorShell`
+and keeps only its own `ErrorAction`, and any two-factor policy defers to
+`@connextar/house/auth`.
+
+**A note on local development.** Installing this with `npm install ../path` makes
+a symlink, and Next's Turbopack will not resolve a package whose real path is
+outside the app's project root — the build fails with `Module not found` even
+though `node` and `tsc` both resolve it fine. Use a packed tarball instead, which
+behaves exactly like a registry install:
+
+```bash
+npm pack --pack-destination /tmp        # in this repo
+npm install /tmp/connextar-house-0.1.0.tgz   # in the app
+```
+
+## Adding to it
+
+Two questions, in order:
+
+1. **Is it already identical in three or more apps?** Check `bev`'s
+   `npm run check:shared-drift`. If the copies have diverged, extracting is a
+   rewrite — say so out loud and decide whether the rewrite is worth it on its
+   own merits.
+2. **Does it need anything from the host app?** If yes, inject it as a prop or a
+   function argument. This package imports no app's Prisma client, no app's
+   design system and no app's routes, and that is what makes it droppable into
+   the next one.

package/dist/account/data-contract.d.ts

@@ -0,0 +1,105 @@
+/**
+ * What "your data" and "delete my account" mean, as a contract.
+ *
+ * The *implementation* of both is unavoidably per-app — every app has its own
+ * Prisma schema, and an export is a walk over it. What must not be per-app is
+ * the shape of the answer, because that is the bit a person receives, a
+ * regulator reads, and a second app has to stay consistent with.
+ *
+ * Two decisions are encoded here rather than left to each app to rediscover:
+ *
+ * 1. **An export summarises authored work rather than including it.** A note
+ *    somebody wrote about a customer is the customer's personal data with an
+ *    author attached. Shipping the contents would turn a subject access request
+ *    into a way for one employee to walk out with the whole customer book.
+ *    Counts, dates and the owning organisation instead — enough to know the
+ *    records exist and to ask for them specifically.
+ *
+ * 2. **Deletion follows the schema, not a hand-written list.** `onDelete:
+ *    Cascade` is the app already saying "this is personal and goes with them";
+ *    `onDelete: SetNull` is it saying "this is a business record that outlives
+ *    them". Invoices have to survive — HMRC wants six years — and an audit trail
+ *    erasable by its subject was never an audit trail. Re-deciding that in code
+ *    is how the two drift apart.
+ */
+/** Bumped when the export shape changes, so an old file stays readable. */
+export declare const ACCOUNT_EXPORT_SCHEMA_VERSION = 1;
+export declare const ACCOUNT_EXPORT_NOTICE: string;
+/** A count of something the person authored. Never the contents. */
+export interface AuthoredSummary {
+    /** Human-readable, e.g. "Customer notes". Shown verbatim in the file. */
+    type: string;
+    count: number;
+    earliest: Date | string | null;
+    latest: Date | string | null;
+}
+export interface AccountExportSignIn {
+    hasPassword: boolean;
+    /** Provider ids only. Never tokens — an export is not a credential dump. */
+    socialProviders: string[];
+    twoFactorEnabled: boolean;
+    passkeys: {
+        name: string | null;
+        deviceType: string;
+        createdAt: Date | string;
+    }[];
+}
+export interface AccountExport {
+    exportedAt: string;
+    schemaVersion: typeof ACCOUNT_EXPORT_SCHEMA_VERSION;
+    notice: string;
+    /** The user row, minus anything secret and minus the preference fields below. */
+    profile: Record<string, unknown>;
+    organisations: {
+        name: string;
+        role: string;
+        joinedAt: Date | string;
+    }[];
+    signIn: AccountExportSignIn;
+    sessions: {
+        createdAt: Date | string;
+        expiresAt: Date | string;
+        ipAddress: string | null;
+        userAgent: string | null;
+    }[];
+    preferences: Record<string, unknown>;
+    authored: AuthoredSummary[];
+    /**
+     * Sections only this app has — Quickie's saved views, a school's linked
+     * pupils. Kept as a named bag rather than widened into the contract, so that
+     * what every app owes a person stays legible and one app's furniture does not
+     * become everyone's obligation.
+     */
+    extras?: Record<string, unknown>;
+}
+export interface DeletionBlocker {
+    id: string;
+    name: string;
+    otherMembers: number;
+}
+export interface DeletionPreflight {
+    canDelete: boolean;
+    /** Organisations destroyed along with the account — the person is their only member. */
+    organisationsToDelete: {
+        id: string;
+        name: string;
+    }[];
+    /** Organisations they solely own that still have members. Each one blocks deletion. */
+    blockedBy: DeletionBlocker[];
+    /** Rows removed outright, by kind. Everything else is orphaned, not deleted. */
+    willRemove: {
+        type: string;
+        count: number;
+    }[];
+}
+/**
+ * Why a deletion was refused, in words the person can act on.
+ *
+ * Shared so that every app phrases the sole-owner case the same way. It is the
+ * one refusal people actually hit, and "you can't do that" without saying what
+ * to do instead is how a support ticket gets written.
+ */
+export declare function deletionBlockedMessage(blockers: DeletionBlocker[]): string;
+/** True when the person is about to destroy an organisation, not just leave one. */
+export declare function deletionDestroysOrganisations(preflight: DeletionPreflight): boolean;
+//# sourceMappingURL=data-contract.d.ts.map

package/dist/account/data-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-contract.d.ts","sourceRoot":"","sources":["../../src/account/data-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,eAAO,MAAM,qBAAqB,QAG+B,CAAC;AAElE,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,OAAO,CAAC;IACrB,4EAA4E;IAC5E,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,GAAG,MAAM,CAAA;KAAE,EAAE,CAAC;CACnF;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,6BAA6B,CAAC;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;KAAE,EAAE,CAAC;IACzE,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE;QACR,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;QACzB,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,EAAE,CAAC;IACJ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAID,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,wFAAwF;IACxF,qBAAqB,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACtD,uFAAuF;IACvF,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,gFAAgF;IAChF,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,MAAM,CAM1E;AAED,oFAAoF;AACpF,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAEnF"}

package/dist/account/data-contract.js

@@ -0,0 +1,46 @@
+/**
+ * What "your data" and "delete my account" mean, as a contract.
+ *
+ * The *implementation* of both is unavoidably per-app — every app has its own
+ * Prisma schema, and an export is a walk over it. What must not be per-app is
+ * the shape of the answer, because that is the bit a person receives, a
+ * regulator reads, and a second app has to stay consistent with.
+ *
+ * Two decisions are encoded here rather than left to each app to rediscover:
+ *
+ * 1. **An export summarises authored work rather than including it.** A note
+ *    somebody wrote about a customer is the customer's personal data with an
+ *    author attached. Shipping the contents would turn a subject access request
+ *    into a way for one employee to walk out with the whole customer book.
+ *    Counts, dates and the owning organisation instead — enough to know the
+ *    records exist and to ask for them specifically.
+ *
+ * 2. **Deletion follows the schema, not a hand-written list.** `onDelete:
+ *    Cascade` is the app already saying "this is personal and goes with them";
+ *    `onDelete: SetNull` is it saying "this is a business record that outlives
+ *    them". Invoices have to survive — HMRC wants six years — and an audit trail
+ *    erasable by its subject was never an audit trail. Re-deciding that in code
+ *    is how the two drift apart.
+ */
+/** Bumped when the export shape changes, so an old file stays readable. */
+export const ACCOUNT_EXPORT_SCHEMA_VERSION = 1;
+export const ACCOUNT_EXPORT_NOTICE = "This file contains the personal data we hold about you. Work you authored — notes, interactions, " +
+    "expenses — belongs to the organisation it was created in and is summarised rather than included. " +
+    "Ask an owner of that organisation for the records themselves.";
+/**
+ * Why a deletion was refused, in words the person can act on.
+ *
+ * Shared so that every app phrases the sole-owner case the same way. It is the
+ * one refusal people actually hit, and "you can't do that" without saying what
+ * to do instead is how a support ticket gets written.
+ */
+export function deletionBlockedMessage(blockers) {
+    const names = blockers.map((b) => b.name).join(", ");
+    return (`You are the only owner of ${names}. Make someone else an owner, or remove the other members, ` +
+        "before deleting your account.");
+}
+/** True when the person is about to destroy an organisation, not just leave one. */
+export function deletionDestroysOrganisations(preflight) {
+    return preflight.organisationsToDelete.length > 0;
+}
+//# sourceMappingURL=data-contract.js.map

package/dist/account/data-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-contract.js","sourceRoot":"","sources":["../../src/account/data-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,qBAAqB,GAChC,mGAAmG;IACnG,mGAAmG;IACnG,+DAA+D,CAAC;AA8DlE;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAA2B;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,CACL,6BAA6B,KAAK,6DAA6D;QAC/F,+BAA+B,CAChC,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,6BAA6B,CAAC,SAA4B;IACxE,OAAO,SAAS,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAAC;AACpD,CAAC"}

package/dist/account/index.d.ts

@@ -0,0 +1,2 @@
+export { ACCOUNT_EXPORT_NOTICE, ACCOUNT_EXPORT_SCHEMA_VERSION, deletionBlockedMessage, deletionDestroysOrganisations, type AccountExport, type AccountExportSignIn, type AuthoredSummary, type DeletionBlocker, type DeletionPreflight, } from "./data-contract";
+//# sourceMappingURL=index.d.ts.map

package/dist/account/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/account/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,6BAA6B,EAC7B,sBAAsB,EACtB,6BAA6B,EAC7B,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC"}

package/dist/account/index.js

@@ -0,0 +1,2 @@
+export { ACCOUNT_EXPORT_NOTICE, ACCOUNT_EXPORT_SCHEMA_VERSION, deletionBlockedMessage, deletionDestroysOrganisations, } from "./data-contract";
+//# sourceMappingURL=index.js.map

package/dist/account/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/account/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,6BAA6B,EAC7B,sBAAsB,EACtB,6BAA6B,GAM9B,MAAM,iBAAiB,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,2 @@
+export { TWO_FACTOR_BLOCKED_MESSAGE, TWO_FACTOR_BLOCKED_PATHS, isTwoFactorBlockedPath, shouldBlockForTwoFactor, totpSecretFromUri, type TwoFactorBlockedPath, type TwoFactorLookup, } from "./two-factor-policy";
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC"}

package/dist/auth/index.js

@@ -0,0 +1,2 @@
+export { TWO_FACTOR_BLOCKED_MESSAGE, TWO_FACTOR_BLOCKED_PATHS, isTwoFactorBlockedPath, shouldBlockForTwoFactor, totpSecretFromUri, } from "./two-factor-policy";
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,GAGlB,MAAM,qBAAqB,CAAC"}

package/dist/auth/two-factor-policy.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Which sign-in routes need the second factor enforced by hand.
+ *
+ * Better Auth's `twoFactor` plugin hooks `/sign-in/email`, `/sign-in/username`
+ * and `/sign-in/phone-number` and nothing else. Every other sign-in route issues
+ * a session outright, second factor or not. That is fine for most of them and
+ * emphatically not fine for one:
+ *
+ * - **Magic link** — a link in an inbox, and strictly weaker than the password
+ *   it stands in for. Allowing it while two-factor is on means a stolen mailbox
+ *   is still enough, which is exactly what the feature is sold as preventing.
+ *   **Refused.**
+ * - **Passkey** — already possession of a device, and phishing-resistant. At
+ *   least as strong as password + TOTP. Allowed.
+ * - **Social** — delegates to a provider that enforces its own second factor.
+ *   Allowed.
+ *
+ * This lives in the package rather than in each app because it is a security
+ * decision that has to be the same everywhere, and because getting it wrong is
+ * silent: two-factor keeps *looking* enabled while doing nothing.
+ */
+export declare const TWO_FACTOR_BLOCKED_PATHS: readonly ["/sign-in/magic-link"];
+export type TwoFactorBlockedPath = (typeof TWO_FACTOR_BLOCKED_PATHS)[number];
+export declare const TWO_FACTOR_BLOCKED_MESSAGE: string;
+export declare function isTwoFactorBlockedPath(path: string): boolean;
+/** Answers "does this address have a second factor turned on?". Supplied by the app. */
+export type TwoFactorLookup = (email: string) => Promise<boolean>;
+/**
+ * True when this sign-in attempt must be refused because it would hand out a
+ * session without the second factor.
+ *
+ * The lookup is injected rather than imported: every app has its own Prisma
+ * client and its own user table, and a package that reached for one would be
+ * useless to the next app along.
+ *
+ * Unknown addresses return false. The refusal must not become an oracle
+ * answering "does this account exist, and does it have two-factor on?" for
+ * anyone with an email address and a spare minute.
+ */
+export declare function shouldBlockForTwoFactor(path: string, email: string | undefined | null, lookup: TwoFactorLookup): Promise<boolean>;
+/**
+ * Pull the shared secret out of an `otpauth://` URI, for the "can't scan it?"
+ * manual-entry path during enrolment.
+ *
+ * Returns null rather than throwing on a malformed URI — a missing manual-entry
+ * fallback is a worse enrolment screen, not a broken one.
+ */
+export declare function totpSecretFromUri(totpUri: string): string | null;
+//# sourceMappingURL=two-factor-policy.d.ts.map

package/dist/auth/two-factor-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-policy.d.ts","sourceRoot":"","sources":["../../src/auth/two-factor-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,eAAO,MAAM,wBAAwB,kCAAmC,CAAC;AAEzE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,eAAO,MAAM,0BAA0B,QAEa,CAAC;AAErD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,wFAAwF;AACxF,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAElE;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAChC,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,OAAO,CAAC,CAGlB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIhE"}

package/dist/auth/two-factor-policy.js

@@ -0,0 +1,58 @@
+/**
+ * Which sign-in routes need the second factor enforced by hand.
+ *
+ * Better Auth's `twoFactor` plugin hooks `/sign-in/email`, `/sign-in/username`
+ * and `/sign-in/phone-number` and nothing else. Every other sign-in route issues
+ * a session outright, second factor or not. That is fine for most of them and
+ * emphatically not fine for one:
+ *
+ * - **Magic link** — a link in an inbox, and strictly weaker than the password
+ *   it stands in for. Allowing it while two-factor is on means a stolen mailbox
+ *   is still enough, which is exactly what the feature is sold as preventing.
+ *   **Refused.**
+ * - **Passkey** — already possession of a device, and phishing-resistant. At
+ *   least as strong as password + TOTP. Allowed.
+ * - **Social** — delegates to a provider that enforces its own second factor.
+ *   Allowed.
+ *
+ * This lives in the package rather than in each app because it is a security
+ * decision that has to be the same everywhere, and because getting it wrong is
+ * silent: two-factor keeps *looking* enabled while doing nothing.
+ */
+export const TWO_FACTOR_BLOCKED_PATHS = ["/sign-in/magic-link"];
+export const TWO_FACTOR_BLOCKED_MESSAGE = "This account uses two-factor authentication. Sign in with your email and password, " +
+    "then enter the code from your authenticator app.";
+export function isTwoFactorBlockedPath(path) {
+    return TWO_FACTOR_BLOCKED_PATHS.includes(path);
+}
+/**
+ * True when this sign-in attempt must be refused because it would hand out a
+ * session without the second factor.
+ *
+ * The lookup is injected rather than imported: every app has its own Prisma
+ * client and its own user table, and a package that reached for one would be
+ * useless to the next app along.
+ *
+ * Unknown addresses return false. The refusal must not become an oracle
+ * answering "does this account exist, and does it have two-factor on?" for
+ * anyone with an email address and a spare minute.
+ */
+export async function shouldBlockForTwoFactor(path, email, lookup) {
+    if (!isTwoFactorBlockedPath(path) || !email)
+        return false;
+    return lookup(email.toLowerCase());
+}
+/**
+ * Pull the shared secret out of an `otpauth://` URI, for the "can't scan it?"
+ * manual-entry path during enrolment.
+ *
+ * Returns null rather than throwing on a malformed URI — a missing manual-entry
+ * fallback is a worse enrolment screen, not a broken one.
+ */
+export function totpSecretFromUri(totpUri) {
+    const query = totpUri.split("?")[1];
+    if (!query)
+        return null;
+    return new URLSearchParams(query).get("secret");
+}
+//# sourceMappingURL=two-factor-policy.js.map

package/dist/auth/two-factor-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-policy.js","sourceRoot":"","sources":["../../src/auth/two-factor-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,qBAAqB,CAAU,CAAC;AAIzE,MAAM,CAAC,MAAM,0BAA0B,GACrC,qFAAqF;IACrF,kDAAkD,CAAC;AAErD,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAQ,wBAA8C,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAKD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAY,EACZ,KAAgC,EAChC,MAAuB;IAEvB,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAClD,CAAC"}

package/dist/errors/error-shell.d.ts

@@ -0,0 +1,40 @@
+import type { ReactNode } from "react";
+/**
+ * The frame every error and not-found screen shares.
+ *
+ * Deliberately dependency-light — no providers, no theme hook, no data fetching,
+ * and no component library. It renders plain elements with the house token
+ * classes (`bg-card`, `border-border`, `text-muted-foreground`), so it looks
+ * like the app it is dropped into without importing anything from it. That
+ * matters more here than anywhere else: this renders precisely when something
+ * upstream has already failed.
+ *
+ * Anything app-specific — where the buttons go, what they say — arrives as
+ * props. The package has no opinion about your routes.
+ */
+export declare function ErrorShell({ code, title, children, actions, digest, }: {
+    /** Short marker above the heading — "404", "Error". */
+    code: string;
+    title: string;
+    children: ReactNode;
+    actions: ReactNode;
+    /** Next's error digest. The one thing support can correlate to a server log. */
+    digest?: string;
+}): import("react").JSX.Element;
+/**
+ * Button-shaped classes for an ErrorShell action.
+ *
+ * Returned as a class string rather than a component, because the one thing
+ * this package must not do is bring a second Button into an app that already
+ * has one. Wrap your own:
+ *
+ * ```tsx
+ * <Button asChild variant="outline"><Link href="/">Home</Link></Button>
+ * ```
+ *
+ * and reach for this only where there is no Button to wrap — which is most
+ * often a `global-error.tsx`, where importing one is exactly the thing that
+ * might have broken.
+ */
+export declare function errorActionClassName(variant?: "primary" | "secondary"): string;
+//# sourceMappingURL=error-shell.d.ts.map

package/dist/errors/error-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-shell.d.ts","sourceRoot":"","sources":["../../src/errors/error-shell.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CAAC,EACzB,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,OAAO,EACP,MAAM,GACP,EAAE;IACD,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,SAAS,CAAC;IACpB,OAAO,EAAE,SAAS,CAAC;IACnB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,+BAgBA;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,SAAS,GAAG,WAAyB,GAAG,MAAM,CAS3F"}

package/dist/errors/error-shell.js

@@ -0,0 +1,41 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * The frame every error and not-found screen shares.
+ *
+ * Deliberately dependency-light — no providers, no theme hook, no data fetching,
+ * and no component library. It renders plain elements with the house token
+ * classes (`bg-card`, `border-border`, `text-muted-foreground`), so it looks
+ * like the app it is dropped into without importing anything from it. That
+ * matters more here than anywhere else: this renders precisely when something
+ * upstream has already failed.
+ *
+ * Anything app-specific — where the buttons go, what they say — arrives as
+ * props. The package has no opinion about your routes.
+ */
+export function ErrorShell({ code, title, children, actions, digest, }) {
+    return (_jsx("main", { className: "flex min-h-[70vh] items-center justify-center px-6 py-16", children: _jsxs("div", { className: "w-full max-w-lg rounded-xl border border-border bg-card p-8 shadow-sm sm:p-10", children: [_jsx("p", { className: "font-mono text-xs uppercase tracking-[0.14em] text-muted-foreground", children: code }), _jsx("h1", { className: "mt-3 text-balance text-2xl font-semibold tracking-tight sm:text-3xl", children: title }), _jsx("div", { className: "mt-4 space-y-3 text-sm leading-relaxed text-muted-foreground", children: children }), _jsx("div", { className: "mt-8 flex flex-wrap gap-3", children: actions }), digest ? (_jsxs("p", { className: "mt-8 border-t border-border pt-4 font-mono text-xs text-muted-foreground", children: ["Reference ", _jsx("span", { className: "select-all text-foreground", children: digest })] })) : null] }) }));
+}
+/**
+ * Button-shaped classes for an ErrorShell action.
+ *
+ * Returned as a class string rather than a component, because the one thing
+ * this package must not do is bring a second Button into an app that already
+ * has one. Wrap your own:
+ *
+ * ```tsx
+ * <Button asChild variant="outline"><Link href="/">Home</Link></Button>
+ * ```
+ *
+ * and reach for this only where there is no Button to wrap — which is most
+ * often a `global-error.tsx`, where importing one is exactly the thing that
+ * might have broken.
+ */
+export function errorActionClassName(variant = "secondary") {
+    const base = "inline-flex items-center justify-center rounded-lg px-5 py-2.5 text-sm font-medium transition " +
+        "focus-visible:outline focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-ring";
+    const tone = variant === "primary"
+        ? "bg-primary text-primary-foreground hover:brightness-[1.06]"
+        : "border border-border text-foreground hover:bg-accent";
+    return `${base} ${tone}`;
+}
+//# sourceMappingURL=error-shell.js.map

package/dist/errors/error-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-shell.js","sourceRoot":"","sources":["../../src/errors/error-shell.tsx"],"names":[],"mappings":";AAEA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU,CAAC,EACzB,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,OAAO,EACP,MAAM,GASP;IACC,OAAO,CACL,eAAM,SAAS,EAAC,0DAA0D,YACxE,eAAK,SAAS,EAAC,+EAA+E,aAC5F,YAAG,SAAS,EAAC,qEAAqE,YAAE,IAAI,GAAK,EAC7F,aAAI,SAAS,EAAC,qEAAqE,YAAE,KAAK,GAAM,EAChG,cAAK,SAAS,EAAC,8DAA8D,YAAE,QAAQ,GAAO,EAC9F,cAAK,SAAS,EAAC,2BAA2B,YAAE,OAAO,GAAO,EACzD,MAAM,CAAC,CAAC,CAAC,CACR,aAAG,SAAS,EAAC,0EAA0E,2BAC3E,eAAM,SAAS,EAAC,4BAA4B,YAAE,MAAM,GAAQ,IACpE,CACL,CAAC,CAAC,CAAC,IAAI,IACJ,GACD,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAmC,WAAW;IACjF,MAAM,IAAI,GACR,gGAAgG;QAChG,yGAAyG,CAAC;IAC5G,MAAM,IAAI,GACR,OAAO,KAAK,SAAS;QACnB,CAAC,CAAC,4DAA4D;QAC9D,CAAC,CAAC,sDAAsD,CAAC;IAC7D,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/errors/global-error-shell.d.ts

@@ -0,0 +1,41 @@
+/**
+ * The last boundary, as a component.
+ *
+ * A Next `global-error.tsx` replaces the root layout, so it renders its own
+ * `<html>` and `<body>` and cannot rely on providers, fonts, or anything else
+ * the layout sets up — by the time it runs, that is what failed. Which is why
+ * this uses no utility classes and no shared components: only an inline
+ * stylesheet, so the page holds up even if the app's CSS never arrives.
+ *
+ * That constraint is also what made this the single most-duplicated file in the
+ * portfolio: eight apps carrying sixty lines of near-identical inline CSS whose
+ * only real difference was five hex values. Those five are the props.
+ *
+ * The palette follows the OS theme through `prefers-color-scheme`, since there
+ * is no theme provider left to ask.
+ */
+export interface GlobalErrorBrand {
+    /** Page background in light mode. */
+    background: string;
+    /** Body text in light mode. */
+    ink: string;
+    /** Secondary text in light mode. */
+    muted: string;
+    /** Hairlines in light mode. */
+    line: string;
+    /** The one colour that says which app this is. Used for the primary button. */
+    accent: string;
+}
+export declare function GlobalErrorShell({ appName, brand, error, reset, homeHref, children, }: {
+    /** Used in the heading: "<appName> couldn't start". */
+    appName: string;
+    brand: GlobalErrorBrand;
+    error: Error & {
+        digest?: string;
+    };
+    reset: () => void;
+    homeHref?: string;
+    /** Replaces the default explanation, for an app that needs to say something else. */
+    children?: React.ReactNode;
+}): import("react").JSX.Element;
+//# sourceMappingURL=global-error-shell.d.ts.map

package/dist/errors/global-error-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-error-shell.d.ts","sourceRoot":"","sources":["../../src/errors/global-error-shell.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,gBAAgB,CAAC,EAC/B,OAAO,EACP,KAAK,EACL,KAAK,EACL,KAAK,EACL,QAAc,EACd,QAAQ,GACT,EAAE;IACD,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,KAAK,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;CAC5B,+BAmEA"}

package/dist/errors/global-error-shell.js

@@ -0,0 +1,39 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+export function GlobalErrorShell({ appName, brand, error, reset, homeHref = "/", children, }) {
+    return (_jsx("html", { lang: "en-GB", children: _jsxs("body", { children: [_jsx("style", { children: `
+          :root {
+            color-scheme: light dark;
+            --ge-bg: ${brand.background};
+            --ge-ink: ${brand.ink};
+            --ge-muted: ${brand.muted};
+            --ge-line: ${brand.line};
+            --ge-brand: ${brand.accent};
+          }
+          @media (prefers-color-scheme: dark) {
+            :root {
+              --ge-bg: #0b1220;
+              --ge-ink: #e8edf5;
+              --ge-muted: #94a3b8;
+              --ge-line: #1e293b;
+            }
+          }
+          body { margin: 0; background: var(--ge-bg); color: var(--ge-ink);
+                 font-family: ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif; }
+          .ge-wrap { min-height: 100vh; display: flex; align-items: center; justify-content: center; padding: 3rem 1.5rem; }
+          .ge-card { max-width: 34rem; }
+          .ge-eyebrow { margin: 0; font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+                        font-size: .75rem; letter-spacing: .14em; text-transform: uppercase; color: var(--ge-muted); }
+          .ge-title { margin: .75rem 0 0; font-size: 1.75rem; line-height: 1.2; font-weight: 600; }
+          .ge-body { margin: 1rem 0 0; line-height: 1.6; color: var(--ge-muted); }
+          .ge-actions { margin-top: 2rem; display: flex; gap: .75rem; flex-wrap: wrap; }
+          .ge-btn { padding: .625rem 1.25rem; border-radius: .5rem; font-size: .875rem; font-weight: 500;
+                    cursor: pointer; border: 1px solid transparent; text-decoration: none; display: inline-block; }
+          .ge-btn-primary { background: var(--ge-brand); color: #ffffff; }
+          .ge-btn-secondary { border-color: var(--ge-line); color: var(--ge-ink); background: transparent; }
+          .ge-ref { margin-top: 2rem; padding-top: 1rem; border-top: 1px solid var(--ge-line);
+                    font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: .75rem; color: var(--ge-muted); }
+          .ge-ref span { color: var(--ge-ink); user-select: all; }
+        ` }), _jsx("main", { className: "ge-wrap", children: _jsxs("div", { className: "ge-card", children: [_jsx("p", { className: "ge-eyebrow", children: "Application error" }), _jsxs("h1", { className: "ge-title", children: [appName, " couldn\u2019t start"] }), children ?? (_jsx("p", { className: "ge-body", children: "This is a fault in the app itself rather than in the page you asked for. Your data is untouched. Reloading usually clears it; if it does not, it is on us to fix, and the reference below is what finds it." })), _jsxs("div", { className: "ge-actions", children: [_jsx("button", { type: "button", className: "ge-btn ge-btn-primary", onClick: () => reset(), children: "Reload" }), _jsx("a", { href: homeHref, className: "ge-btn ge-btn-secondary", children: "Go home" })] }), error.digest ? (_jsxs("p", { className: "ge-ref", children: ["Reference ", _jsx("span", { children: error.digest })] })) : null] }) })] }) }));
+}
+//# sourceMappingURL=global-error-shell.js.map

package/dist/errors/global-error-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-error-shell.js","sourceRoot":"","sources":["../../src/errors/global-error-shell.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAgCb,MAAM,UAAU,gBAAgB,CAAC,EAC/B,OAAO,EACP,KAAK,EACL,KAAK,EACL,KAAK,EACL,QAAQ,GAAG,GAAG,EACd,QAAQ,GAUT;IACC,OAAO,CACL,eAAM,IAAI,EAAC,OAAO,YAChB,2BACE,0BAAQ;;;uBAGO,KAAK,CAAC,UAAU;wBACf,KAAK,CAAC,GAAG;0BACP,KAAK,CAAC,KAAK;yBACZ,KAAK,CAAC,IAAI;0BACT,KAAK,CAAC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;SA0B7B,GAAS,EACV,eAAM,SAAS,EAAC,SAAS,YACvB,eAAK,SAAS,EAAC,SAAS,aACtB,YAAG,SAAS,EAAC,YAAY,kCAAsB,EAC/C,cAAI,SAAS,EAAC,UAAU,aAAE,OAAO,4BAA2B,EAC3D,QAAQ,IAAI,CACX,YAAG,SAAS,EAAC,SAAS,4NAIlB,CACL,EACD,eAAK,SAAS,EAAC,YAAY,aACzB,iBAAQ,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,uBAAuB,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,uBAErE,EACT,YAAG,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAC,yBAAyB,wBAElD,IACA,EACL,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CACd,aAAG,SAAS,EAAC,QAAQ,2BACT,yBAAO,KAAK,CAAC,MAAM,GAAQ,IACnC,CACL,CAAC,CAAC,CAAC,IAAI,IACJ,GACD,IACF,GACF,CACR,CAAC;AACJ,CAAC"}

package/dist/errors/index.d.ts

@@ -0,0 +1,3 @@
+export { ErrorShell, errorActionClassName } from "./error-shell";
+export { GlobalErrorShell, type GlobalErrorBrand } from "./global-error-shell";
+//# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/errors/index.js

@@ -0,0 +1,3 @@
+export { ErrorShell, errorActionClassName } from "./error-shell";
+export { GlobalErrorShell } from "./global-error-shell";
+//# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAyB,MAAM,sBAAsB,CAAC"}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@connextar/house",
+  "version": "0.1.0",
+  "description": "The pieces every app we build needs and none of them should own a copy of.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Connextar/cx-house.git"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    "./errors": {
+      "types": "./dist/errors/index.d.ts",
+      "default": "./dist/errors/index.js"
+    },
+    "./auth": {
+      "types": "./dist/auth/index.d.ts",
+      "default": "./dist/auth/index.js"
+    },
+    "./account": {
+      "types": "./dist/account/index.d.ts",
+      "default": "./dist/account/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "format:check": "prettier --check \"src/**/*.{ts,tsx}\"",
+    "format": "prettier --write \"src/**/*.{ts,tsx}\"",
+    "lint:check": "eslint ./src",
+    "lint": "eslint ./src --fix",
+    "typecheck": "tsc --noEmit",
+    "check": "npm run format:check && npm run typecheck && npm run lint:check",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "build": "rm -rf dist && tsc --project tsconfig.build.json",
+    "verify": "npm run check && npm run test && npm run build",
+    "prepublishOnly": "npm run verify"
+  },
+  "peerDependencies": {
+    "react": "^19.0.0"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.5",
+    "@types/react": "^19.2.0",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
+    "@typescript-eslint/parser": "^8.0.0",
+    "eslint": "^9.0.0",
+    "prettier": "^3.0.0",
+    "typescript": "^5.7.0",
+    "typescript-eslint": "^8.69.0",
+    "vitest": "^4.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}