@drawnagency/primitives 0.1.64 → 0.1.65

package/dist/auth/errors.d.ts

@@ -5,4 +5,16 @@
 export declare class LastOwnerError extends Error {
     constructor(message?: string);
 }
+/**
+ * Thrown when an authenticated operation cannot proceed because the underlying
+ * Supabase session is missing, expired, or its refresh token is stale/used.
+ * This is distinct from a never-authenticated request: the caller passed the
+ * middleware gate (e.g. via a still-valid app session cookie) but the Supabase
+ * session needed for the operation is dead. API routes should translate this to
+ * HTTP 401 so the UI prompts the user to request a fresh link, rather than
+ * surfacing an opaque 500.
+ */
+export declare class SessionExpiredError extends Error {
+    constructor(message?: string);
+}
 //# sourceMappingURL=errors.d.ts.map

package/dist/auth/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,SAAiC;CAIrD"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/auth/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,SAAiC;CAIrD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,SAAyD;CAI7E"}

package/dist/auth/index.d.ts

@@ -3,5 +3,5 @@ export type { UiCapabilities } from "./capabilities";
 export { deriveUiCapabilities } from "./capabilities";
 export { requireSessionSecret, isSameOriginRequest, safeNextPath } from "./security";
 export { signSessionToken, verifySessionToken, signAudienceToken, verifyAudienceToken, setSessionCookie, SESSION_COOKIE, AUDIENCE_COOKIE, SESSION_MAX_AGE_SECONDS, AUDIENCE_MAX_AGE_SECONDS } from "./cookies";
-export { LastOwnerError } from "./errors";
+export { LastOwnerError, SessionExpiredError } from "./errors";
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,SAAS,CAAC;AAEjB,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC/M,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,GACZ,MAAM,SAAS,CAAC;AAEjB,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC/M,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC"}

package/dist/auth/index.js

@@ -4,13 +4,14 @@ import {
   LastOwnerError,
   SESSION_COOKIE,
   SESSION_MAX_AGE_SECONDS,
+  SessionExpiredError,
   deriveUiCapabilities,
   setSessionCookie,
   signAudienceToken,
   signSessionToken,
   verifyAudienceToken,
   verifySessionToken
-} from "../chunk-UNWNT52N.js";
+} from "../chunk-EM5DFHDZ.js";
 import {
   isSameOriginRequest,
   requireSessionSecret,
@@ -24,6 +25,7 @@ export {
   LastOwnerError,
   SESSION_COOKIE,
   SESSION_MAX_AGE_SECONDS,
+  SessionExpiredError,
   deriveUiCapabilities,
   isSameOriginRequest,
   requireSessionSecret,

package/dist/{chunk-UNWNT52N.js → chunk-EM5DFHDZ.js}

@@ -74,6 +74,12 @@ var LastOwnerError = class extends Error {
     this.name = "LastOwnerError";
   }
 };
+var SessionExpiredError = class extends Error {
+  constructor(message = "Your session has expired. Please request a new link.") {
+    super(message);
+    this.name = "SessionExpiredError";
+  }
+};
 
 export {
   deriveUiCapabilities,
@@ -86,5 +92,6 @@ export {
   signAudienceToken,
   verifyAudienceToken,
   setSessionCookie,
-  LastOwnerError
+  LastOwnerError,
+  SessionExpiredError
 };

package/dist/index.js

@@ -20,13 +20,14 @@ import {
   LastOwnerError,
   SESSION_COOKIE,
   SESSION_MAX_AGE_SECONDS,
+  SessionExpiredError,
   deriveUiCapabilities,
   setSessionCookie,
   signAudienceToken,
   signSessionToken,
   verifyAudienceToken,
   verifySessionToken
-} from "./chunk-UNWNT52N.js";
+} from "./chunk-EM5DFHDZ.js";
 import {
   AudienceColorSchema,
   AudienceNameSchema,
@@ -157,6 +158,7 @@ export {
   SESSION_COOKIE,
   SESSION_MAX_AGE_SECONDS,
   SectionMetaSchema,
+  SessionExpiredError,
   SessionSchema,
   SingleMediaReferenceSchema,
   SiteConfigSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drawnagency/primitives",
-  "version": "0.1.64",
+  "version": "0.1.65",
   "type": "module",
   "exports": {
     "./package.json": "./package.json",

package/src/auth/errors.ts

@@ -8,3 +8,19 @@ export class LastOwnerError extends Error {
     this.name = "LastOwnerError";
   }
 }
+
+/**
+ * Thrown when an authenticated operation cannot proceed because the underlying
+ * Supabase session is missing, expired, or its refresh token is stale/used.
+ * This is distinct from a never-authenticated request: the caller passed the
+ * middleware gate (e.g. via a still-valid app session cookie) but the Supabase
+ * session needed for the operation is dead. API routes should translate this to
+ * HTTP 401 so the UI prompts the user to request a fresh link, rather than
+ * surfacing an opaque 500.
+ */
+export class SessionExpiredError extends Error {
+  constructor(message = "Your session has expired. Please request a new link.") {
+    super(message);
+    this.name = "SessionExpiredError";
+  }
+}

package/src/auth/index.ts

@@ -17,4 +17,4 @@ export { deriveUiCapabilities } from "./capabilities";
 
 export { requireSessionSecret, isSameOriginRequest, safeNextPath } from "./security";
 export { signSessionToken, verifySessionToken, signAudienceToken, verifyAudienceToken, setSessionCookie, SESSION_COOKIE, AUDIENCE_COOKIE, SESSION_MAX_AGE_SECONDS, AUDIENCE_MAX_AGE_SECONDS } from "./cookies";
-export { LastOwnerError } from "./errors";
+export { LastOwnerError, SessionExpiredError } from "./errors";