honertia 0.1.2 → 0.1.4

package/dist/auth.d.ts

@@ -4,7 +4,7 @@
  * Re-exports all authentication and authorization functionality.
  * Import from 'honertia/auth' for auth-related functionality.
  */
-export { RequireAuthLayer, RequireGuestLayer, isAuthenticated, currentUser, requireAuth, requireGuest, shareAuth, shareAuthMiddleware, effectAuthRoutes, loadUser, type AuthRoutesConfig, } from './effect/auth.js';
+export { RequireAuthLayer, RequireGuestLayer, isAuthenticated, currentUser, requireAuth, requireGuest, shareAuth, shareAuthMiddleware, effectAuthRoutes, betterAuthFormAction, betterAuthLogoutAction, loadUser, type AuthRoutesConfig, type AuthActionEffect, type BetterAuthFormActionConfig, type BetterAuthLogoutConfig, type BetterAuthActionResult, } from './effect/auth.js';
 export { AuthService, AuthUserService, type AuthUser, } from './effect/services.js';
 export { UnauthorizedError, ForbiddenError, } from './effect/errors.js';
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,gBAAgB,EAChB,QAAQ,EACR,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,WAAW,EACX,eAAe,EACf,KAAK,QAAQ,GACd,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EACL,iBAAiB,EACjB,cAAc,GACf,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,QAAQ,EACR,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,WAAW,EACX,eAAe,EACf,KAAK,QAAQ,GACd,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EACL,iBAAiB,EACjB,cAAc,GACf,MAAM,oBAAoB,CAAA"}

package/dist/auth.js

@@ -4,7 +4,7 @@
  * Re-exports all authentication and authorization functionality.
  * Import from 'honertia/auth' for auth-related functionality.
  */
-export { RequireAuthLayer, RequireGuestLayer, isAuthenticated, currentUser, requireAuth, requireGuest, shareAuth, shareAuthMiddleware, effectAuthRoutes, loadUser, } from './effect/auth.js';
+export { RequireAuthLayer, RequireGuestLayer, isAuthenticated, currentUser, requireAuth, requireGuest, shareAuth, shareAuthMiddleware, effectAuthRoutes, betterAuthFormAction, betterAuthLogoutAction, loadUser, } from './effect/auth.js';
 // Re-export auth-related services
 export { AuthService, AuthUserService, } from './effect/services.js';
 // Re-export auth-related errors

package/dist/effect/action.d.ts

@@ -1,107 +1,67 @@
 /**
- * Effect Action Factories
+ * Effect Action Composables
  *
- * Pure function factories for creating Effect-based request handlers.
+ * Composable helpers for building Effect-based request handlers.
+ * Actions are fully opt-in - yield* only what you need.
  */
-import { Effect, Schema as S } from 'effect';
-import { DatabaseService, AuthUserService, RequestService, type AuthUser } from './services.js';
-import { ValidationError, UnauthorizedError } from './errors.js';
-import { Redirect } from './errors.js';
+import { Effect } from 'effect';
+import { DatabaseService, type AuthUser } from './services.js';
+import { UnauthorizedError, ForbiddenError, Redirect } from './errors.js';
 /**
- * Create an Effect action with schema validation.
+ * Semantic wrapper for Effect actions.
+ *
+ * This is a minimal wrapper that marks an Effect as an action.
+ * All capabilities are opt-in via yield* inside your handler.
  *
  * @example
- * const createProject = effectAction(
- *   S.Struct({ name: requiredString }),
- *   (input) => Effect.gen(function* () {
+ * const createProject = action(
+ *   Effect.gen(function* () {
+ *     // Opt-in to authorization
+ *     const auth = yield* authorize()
+ *
+ *     // Opt-in to validation
+ *     const input = yield* validateRequest(S.Struct({ name: requiredString }))
+ *
+ *     // Opt-in to database
  *     const db = yield* DatabaseService
- *     yield* Effect.tryPromise(() => db.insert(projects).values(input))
- *     return new Redirect({ url: '/projects', status: 303 })
- *   })
- * )
- */
-export declare function effectAction<A, I, R, E>(schema: S.Schema<A, I>, handler: (input: A) => Effect.Effect<Response | Redirect, E, R>, options?: {
-    errorComponent?: string;
-    messages?: Record<string, string>;
-    attributes?: Record<string, string>;
-}): Effect.Effect<Response | Redirect, E | ValidationError, R | RequestService>;
-/**
- * Create an Effect action that requires authentication and database access.
  *
- * @example
- * const createProject = dbAction(
- *   S.Struct({ name: requiredString }),
- *   (input, { db, user }) => Effect.gen(function* () {
  *     yield* Effect.tryPromise(() =>
- *       db.insert(projects).values({ ...input, userId: user.user.id })
+ *       db.insert(projects).values({ ...input, userId: auth.user.id })
  *     )
  *     return new Redirect({ url: '/projects', status: 303 })
  *   })
  * )
  */
-export declare function dbAction<A, I, E>(schema: S.Schema<A, I>, handler: (input: A, deps: {
-    db: unknown;
-    user: AuthUser;
-}) => Effect.Effect<Response | Redirect, E, never>, options?: {
-    errorComponent?: string;
-    messages?: Record<string, string>;
-    attributes?: Record<string, string>;
-}): Effect.Effect<Response | Redirect, E | ValidationError | UnauthorizedError, RequestService | DatabaseService | AuthUserService>;
+export declare function action<R, E>(handler: Effect.Effect<Response | Redirect, E, R>): Effect.Effect<Response | Redirect, E, R>;
 /**
- * Create an Effect action that requires authentication.
+ * Authorization helper - opt-in to auth check.
  *
- * @example
- * const showDashboard = authAction(() => Effect.gen(function* () {
- *   const user = yield* AuthUserService
- *   const honertia = yield* HonertiaService
- *   return yield* Effect.tryPromise(() => honertia.render('Dashboard', { user: user.user }))
- * }))
- */
-export declare function authAction<R, E>(handler: (user: AuthUser) => Effect.Effect<Response | Redirect, E, R>): Effect.Effect<Response | Redirect, E | UnauthorizedError, R | AuthUserService>;
-/**
- * Create a simple Effect action without validation.
+ * Returns the authenticated user if authorized.
+ * Fails with UnauthorizedError if no user is present.
+ * Fails with ForbiddenError if the check returns false.
+ * The check function is optional - if not provided, just requires authentication.
  *
  * @example
- * const listProjects = simpleAction(() => Effect.gen(function* () {
- *   const db = yield* DatabaseService
- *   const user = yield* AuthUserService
- *   const projects = yield* Effect.tryPromise(() => db.query.projects.findMany())
- *   const honertia = yield* HonertiaService
- *   return yield* Effect.tryPromise(() => honertia.render('Projects', { projects }))
- * }))
+ * // Just require authentication
+ * const auth = yield* authorize()
+ *
+ * // Require specific role (if your user type has a role field)
+ * const auth = yield* authorize((a) => a.user.role === 'admin')
+ *
+ * // Require resource ownership
+ * const auth = yield* authorize((a) => a.user.id === project.userId)
  */
-export declare function simpleAction<R, E>(handler: () => Effect.Effect<Response | Redirect, E, R>): Effect.Effect<Response | Redirect, E, R>;
+export declare function authorize(check?: (user: AuthUser) => boolean): Effect.Effect<AuthUser, UnauthorizedError | ForbiddenError, never>;
 /**
- * Inject additional data into the validated input.
+ * Run multiple database operations in a transaction.
+ * Automatically rolls back on any failure.
  *
  * @example
- * const createProject = effectAction(
- *   S.Struct({ name: requiredString }),
- *   (input) => pipe(
- *     injectUser(input),
- *     Effect.flatMap(({ name, userId }) =>
- *       Effect.tryPromise(() => db.insert(projects).values({ name, userId }))
- *     )
- *   )
- * )
- */
-export declare function injectUser<T extends Record<string, unknown>>(input: T): Effect.Effect<T & {
-    userId: string;
-}, UnauthorizedError, AuthUserService>;
-/**
- * Run a database operation wrapped in Effect.
- */
-export declare function dbOperation<T>(operation: (db: unknown) => Promise<T>): Effect.Effect<T, Error, DatabaseService>;
-/**
- * Prepare validation data by transforming it before validation.
- */
-export declare function prepareData<T extends Record<string, unknown>>(transform: (data: Record<string, unknown>) => T | Promise<T>): Effect.Effect<T, never, RequestService>;
-/**
- * Create an action with custom data preparation.
+ * yield* dbTransaction(async (tx) => {
+ *   await tx.insert(users).values({ name: 'Alice' })
+ *   await tx.update(accounts).set({ balance: 100 }).where(eq(accounts.userId, id))
+ *   return { success: true }
+ * })
  */
-export declare function preparedAction<A, I, R, E>(schema: S.Schema<A, I>, prepare: (data: Record<string, unknown>) => Record<string, unknown> | Promise<Record<string, unknown>>, handler: (input: A) => Effect.Effect<Response | Redirect, E, R>, options?: {
-    errorComponent?: string;
-    messages?: Record<string, string>;
-    attributes?: Record<string, string>;
-}): Effect.Effect<Response | Redirect, E | ValidationError, R | RequestService>;
+export declare function dbTransaction<T>(operations: (tx: unknown) => Promise<T>): Effect.Effect<T, Error, DatabaseService>;
 //# sourceMappingURL=action.d.ts.map

package/dist/effect/action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../src/effect/action.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,MAAM,QAAQ,CAAA;AAC5C,OAAO,EACL,eAAe,EACf,eAAe,EAEf,cAAc,EAEd,KAAK,QAAQ,EACd,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAEhE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEtC;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EACrC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EACtB,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAC/D,OAAO,CAAC,EAAE;IACR,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACpC,GACA,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,GAAG,cAAc,CAAC,CAS7E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EACtB,OAAO,EAAE,CACP,KAAK,EAAE,CAAC,EACR,IAAI,EAAE;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,KAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,KAAK,CAAC,EACjD,OAAO,CAAC,EAAE;IACR,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACpC,GACA,MAAM,CAAC,MAAM,CACd,QAAQ,GAAG,QAAQ,EACnB,CAAC,GAAG,eAAe,GAAG,iBAAiB,EACvC,cAAc,GAAG,eAAe,GAAG,eAAe,CACnD,CAWA;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,CAAC,EAC7B,OAAO,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,GACpE,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,GAAG,eAAe,CAAC,CAKhF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,CAAC,EAC/B,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,GACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAE1C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC1D,KAAK,EAAE,CAAC,GACP,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAK3E;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAC3B,SAAS,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GACrC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,CAQ1C;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAQzC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EACvC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EACtB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACtG,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAC/D,OAAO,CAAC,EAAE;IACR,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACpC,GACA,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,GAAG,cAAc,CAAC,CAc7E"}
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../src/effect/action.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AACvC,OAAO,EACL,eAAe,EAEf,KAAK,QAAQ,EACd,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,CAAC,EACzB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,GAChD,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAE1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,SAAS,CACvB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,GAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,cAAc,EAAE,KAAK,CAAC,CAoBpE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,UAAU,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GACtC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,CAQ1C"}

package/dist/effect/action.js

@@ -1,150 +1,91 @@
 /**
- * Effect Action Factories
+ * Effect Action Composables
  *
- * Pure function factories for creating Effect-based request handlers.
+ * Composable helpers for building Effect-based request handlers.
+ * Actions are fully opt-in - yield* only what you need.
  */
-import { Effect } from 'effect';
+import { Effect, Option } from 'effect';
 import { DatabaseService, AuthUserService, } from './services.js';
-import { validateRequest, getValidationData, validate } from './validation.js';
+import { UnauthorizedError, ForbiddenError } from './errors.js';
 /**
- * Create an Effect action with schema validation.
+ * Semantic wrapper for Effect actions.
+ *
+ * This is a minimal wrapper that marks an Effect as an action.
+ * All capabilities are opt-in via yield* inside your handler.
  *
  * @example
- * const createProject = effectAction(
- *   S.Struct({ name: requiredString }),
- *   (input) => Effect.gen(function* () {
+ * const createProject = action(
+ *   Effect.gen(function* () {
+ *     // Opt-in to authorization
+ *     const auth = yield* authorize()
+ *
+ *     // Opt-in to validation
+ *     const input = yield* validateRequest(S.Struct({ name: requiredString }))
+ *
+ *     // Opt-in to database
  *     const db = yield* DatabaseService
- *     yield* Effect.tryPromise(() => db.insert(projects).values(input))
- *     return new Redirect({ url: '/projects', status: 303 })
- *   })
- * )
- */
-export function effectAction(schema, handler, options) {
-    return Effect.gen(function* () {
-        const input = yield* validateRequest(schema, {
-            errorComponent: options?.errorComponent,
-            messages: options?.messages,
-            attributes: options?.attributes,
-        });
-        return yield* handler(input);
-    });
-}
-/**
- * Create an Effect action that requires authentication and database access.
  *
- * @example
- * const createProject = dbAction(
- *   S.Struct({ name: requiredString }),
- *   (input, { db, user }) => Effect.gen(function* () {
  *     yield* Effect.tryPromise(() =>
- *       db.insert(projects).values({ ...input, userId: user.user.id })
+ *       db.insert(projects).values({ ...input, userId: auth.user.id })
  *     )
  *     return new Redirect({ url: '/projects', status: 303 })
  *   })
  * )
  */
-export function dbAction(schema, handler, options) {
-    return Effect.gen(function* () {
-        const db = yield* DatabaseService;
-        const user = yield* AuthUserService;
-        const input = yield* validateRequest(schema, {
-            errorComponent: options?.errorComponent,
-            messages: options?.messages,
-            attributes: options?.attributes,
-        });
-        return yield* handler(input, { db, user });
-    });
+export function action(handler) {
+    return handler;
 }
 /**
- * Create an Effect action that requires authentication.
+ * Authorization helper - opt-in to auth check.
  *
- * @example
- * const showDashboard = authAction(() => Effect.gen(function* () {
- *   const user = yield* AuthUserService
- *   const honertia = yield* HonertiaService
- *   return yield* Effect.tryPromise(() => honertia.render('Dashboard', { user: user.user }))
- * }))
- */
-export function authAction(handler) {
-    return Effect.gen(function* () {
-        const user = yield* AuthUserService;
-        return yield* handler(user);
-    });
-}
-/**
- * Create a simple Effect action without validation.
+ * Returns the authenticated user if authorized.
+ * Fails with UnauthorizedError if no user is present.
+ * Fails with ForbiddenError if the check returns false.
+ * The check function is optional - if not provided, just requires authentication.
  *
  * @example
- * const listProjects = simpleAction(() => Effect.gen(function* () {
- *   const db = yield* DatabaseService
- *   const user = yield* AuthUserService
- *   const projects = yield* Effect.tryPromise(() => db.query.projects.findMany())
- *   const honertia = yield* HonertiaService
- *   return yield* Effect.tryPromise(() => honertia.render('Projects', { projects }))
- * }))
- */
-export function simpleAction(handler) {
-    return handler();
-}
-/**
- * Inject additional data into the validated input.
+ * // Just require authentication
+ * const auth = yield* authorize()
  *
- * @example
- * const createProject = effectAction(
- *   S.Struct({ name: requiredString }),
- *   (input) => pipe(
- *     injectUser(input),
- *     Effect.flatMap(({ name, userId }) =>
- *       Effect.tryPromise(() => db.insert(projects).values({ name, userId }))
- *     )
- *   )
- * )
+ * // Require specific role (if your user type has a role field)
+ * const auth = yield* authorize((a) => a.user.role === 'admin')
+ *
+ * // Require resource ownership
+ * const auth = yield* authorize((a) => a.user.id === project.userId)
  */
-export function injectUser(input) {
+export function authorize(check) {
     return Effect.gen(function* () {
-        const authUser = yield* AuthUserService;
-        return { ...input, userId: authUser.user.id };
+        const maybeUser = yield* Effect.serviceOption(AuthUserService);
+        if (Option.isNone(maybeUser)) {
+            return yield* Effect.fail(new UnauthorizedError({
+                message: 'Authentication required',
+                redirectTo: '/login',
+            }));
+        }
+        const user = maybeUser.value;
+        if (check && !check(user)) {
+            return yield* Effect.fail(new ForbiddenError({ message: 'Not authorized' }));
+        }
+        return user;
     });
 }
 /**
- * Run a database operation wrapped in Effect.
+ * Run multiple database operations in a transaction.
+ * Automatically rolls back on any failure.
+ *
+ * @example
+ * yield* dbTransaction(async (tx) => {
+ *   await tx.insert(users).values({ name: 'Alice' })
+ *   await tx.update(accounts).set({ balance: 100 }).where(eq(accounts.userId, id))
+ *   return { success: true }
+ * })
  */
-export function dbOperation(operation) {
+export function dbTransaction(operations) {
     return Effect.gen(function* () {
         const db = yield* DatabaseService;
         return yield* Effect.tryPromise({
-            try: () => operation(db),
+            try: () => db.transaction(operations),
             catch: (error) => error instanceof Error ? error : new Error(String(error)),
         });
     });
 }
-/**
- * Prepare validation data by transforming it before validation.
- */
-export function prepareData(transform) {
-    return Effect.gen(function* () {
-        const data = yield* getValidationData;
-        return yield* Effect.tryPromise({
-            try: () => Promise.resolve(transform(data)),
-            catch: () => new Error('Transform failed'),
-        }).pipe(Effect.catchAll(() => Effect.succeed(data)));
-    });
-}
-/**
- * Create an action with custom data preparation.
- */
-export function preparedAction(schema, prepare, handler, options) {
-    return Effect.gen(function* () {
-        const rawData = yield* getValidationData;
-        const preparedData = yield* Effect.tryPromise({
-            try: () => Promise.resolve(prepare(rawData)),
-            catch: () => new Error('Prepare failed'),
-        }).pipe(Effect.catchAll(() => Effect.succeed(rawData)));
-        const input = yield* validate(schema, {
-            errorComponent: options?.errorComponent,
-            messages: options?.messages,
-            attributes: options?.attributes,
-        })(preparedData);
-        return yield* handler(input);
-    });
-}

package/dist/effect/auth.d.ts

@@ -3,10 +3,11 @@
  *
  * Authentication and authorization via Effect Layers.
  */
-import { Effect, Layer } from 'effect';
+import { Effect, Layer, Schema as S } from 'effect';
 import type { Hono, MiddlewareHandler, Env } from 'hono';
-import { AuthUserService, HonertiaService, type AuthUser } from './services.js';
-import { UnauthorizedError } from './errors.js';
+import { AuthUserService, AuthService, HonertiaService, RequestService, type AuthUser } from './services.js';
+import { UnauthorizedError, ValidationError } from './errors.js';
+import { type EffectHandler } from './routing.js';
 /**
  * Layer that requires an authenticated user.
  * Fails with UnauthorizedError if no user is present.
@@ -51,6 +52,11 @@ export declare const shareAuth: Effect.Effect<void, never, HonertiaService>;
  * Middleware version of shareAuth for use with app.use().
  */
 export declare function shareAuthMiddleware<E extends Env>(): MiddlewareHandler<E>;
+/**
+ * An auth action effect that returns a Response.
+ * Used for loginAction, registerAction, logoutAction, and guestActions.
+ */
+export type AuthActionEffect<R = never, E extends Error = Error> = EffectHandler<R, E>;
 /**
  * Configuration for auth routes.
  */
@@ -60,6 +66,9 @@ export interface AuthRoutesConfig<E extends Env> {
     logoutPath?: string;
     apiPath?: string;
     logoutRedirect?: string;
+    /**
+     * Redirect path for authenticated users hitting login/register pages.
+     */
     loginRedirect?: string;
     loginComponent?: string;
     registerComponent?: string;
@@ -72,6 +81,37 @@ export interface AuthRoutesConfig<E extends Env> {
         origin: string | string[] | ((origin: string) => string | undefined | null);
         credentials?: boolean;
     };
+    /**
+     * POST handler for login form submission.
+     * Automatically wrapped with RequireGuestLayer.
+     * Use betterAuthFormAction to create this.
+     */
+    loginAction?: AuthActionEffect;
+    /**
+     * POST handler for registration form submission.
+     * Automatically wrapped with RequireGuestLayer.
+     * Use betterAuthFormAction to create this.
+     */
+    registerAction?: AuthActionEffect;
+    /**
+     * POST handler for logout.
+     * If not provided, uses a default handler that calls auth.api.signOut.
+     * Use betterAuthLogoutAction to create this.
+     */
+    logoutAction?: AuthActionEffect;
+    /**
+     * Additional guest-only POST routes for extended auth flows.
+     * Keys are paths (e.g., '/forgot-password'), values are Effect handlers.
+     * All routes are wrapped with RequireGuestLayer.
+     *
+     * @example
+     * guestActions: {
+     *   '/forgot-password': forgotPasswordAction,
+     *   '/reset-password': resetPasswordAction,
+     *   '/login/2fa': verify2FAAction,
+     * }
+     */
+    guestActions?: Record<string, AuthActionEffect>;
 }
 /**
  * Register standard auth routes.
@@ -80,6 +120,8 @@ export interface AuthRoutesConfig<E extends Env> {
  * effectAuthRoutes(app, {
  *   loginComponent: 'Auth/Login',
  *   registerComponent: 'Auth/Register',
+ *   loginAction: loginUser,
+ *   registerAction: registerUser,
  * })
  */
 export declare function effectAuthRoutes<E extends Env>(app: Hono<E>, config?: AuthRoutesConfig<E>): void;
@@ -91,4 +133,38 @@ export declare function loadUser<E extends Env>(config?: {
     userKey?: string;
     sessionCookie?: string;
 }): MiddlewareHandler<E>;
+/**
+ * Result types from better-auth calls that expose headers.
+ */
+export type BetterAuthActionResult = Response | Headers | {
+    headers?: Headers | HeadersInit;
+};
+/**
+ * Config for better-auth form actions (login/register).
+ */
+export interface BetterAuthFormActionConfig<A, I, AuthClient = unknown> {
+    schema: S.Schema<A, I>;
+    errorComponent: string;
+    call: (auth: AuthClient, input: A, request: Request) => Promise<BetterAuthActionResult>;
+    errorMapper?: (error: unknown) => Record<string, string>;
+    redirectTo?: string | ((input: A, result: BetterAuthActionResult) => string);
+}
+/**
+ * Create a better-auth form action with Honertia-friendly responses.
+ *
+ * Copies Set-Cookie headers from better-auth and redirects with 303.
+ * Maps errors into ValidationError so the standard error handler can render.
+ */
+export declare function betterAuthFormAction<A, I, AuthClient = unknown>(config: BetterAuthFormActionConfig<A, I, AuthClient>): Effect.Effect<Response, ValidationError, RequestService | AuthService>;
+/**
+ * Config for better-auth logout actions.
+ */
+export interface BetterAuthLogoutConfig {
+    redirectTo?: string;
+    cookieNames?: string[];
+}
+/**
+ * Create a better-auth logout action that clears cookies and redirects.
+ */
+export declare function betterAuthLogoutAction(config?: BetterAuthLogoutConfig): Effect.Effect<Response, never, RequestService | AuthService>;
 //# sourceMappingURL=auth.d.ts.map

package/dist/effect/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/effect/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAU,MAAM,QAAQ,CAAA;AAC9C,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AACxD,OAAO,EAAE,eAAe,EAAe,eAAe,EAAkB,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC5G,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAI/C;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,wDAiB5B,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,8CAe7B,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CACM,CAAA;AAEvE;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAGlE,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,WAAW,GACtB,mBAAqB,KACpB,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAQhD,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,YAAY,GACvB,mBAAgB,KACf,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAQ5C,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,CAK9D,CAAA;AAEJ;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,GAAG,KAAK,iBAAiB,CAAC,CAAC,CAAC,CASzE;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB,CAAC,CAAC,SAAS,GAAG;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;OAGG;IACH,IAAI,CAAC,EAAE;QACL,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAA;QAC3E,WAAW,CAAC,EAAE,OAAO,CAAA;KACtB,CAAA;CACF;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,GAAG,EAC5C,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EACZ,MAAM,GAAE,gBAAgB,CAAC,CAAC,CAAM,GAC/B,IAAI,CAoGN;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,CAAC,SAAS,GAAG,EACpC,MAAM,GAAE;IACN,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;CAClB,GACL,iBAAiB,CAAC,CAAC,CAAC,CAwBtB"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/effect/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAU,MAAM,IAAI,CAAC,EAAE,MAAM,QAAQ,CAAA;AAC3D,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC5G,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,cAAc,CAAA;AAI/D;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,wDAiB5B,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,8CAe7B,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CACM,CAAA;AAEvE;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAGlE,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,WAAW,GACtB,mBAAqB,KACpB,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAQhD,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,YAAY,GACvB,mBAAgB,KACf,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAQ5C,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,CAK9D,CAAA;AAEJ;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,GAAG,KAAK,iBAAiB,CAAC,CAAC,CAAC,CASzE;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,SAAS,KAAK,GAAG,KAAK,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAEtF;;GAEG;AACH,MAAM,WAAW,gBAAgB,CAAC,CAAC,SAAS,GAAG;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;OAGG;IACH,IAAI,CAAC,EAAE;QACL,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAA;QAC3E,WAAW,CAAC,EAAE,OAAO,CAAA;KACtB,CAAA;IACD;;;;OAIG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAA;IAC9B;;;;OAIG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAA;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAC/B;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;CAChD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,GAAG,EAC5C,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EACZ,MAAM,GAAE,gBAAgB,CAAC,CAAC,CAAM,GAC/B,IAAI,CA+HN;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,CAAC,SAAS,GAAG,EACpC,MAAM,GAAE;IACN,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;CAClB,GACL,iBAAiB,CAAC,CAAC,CAAC,CAwBtB;AAED;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAC9B,QAAQ,GACR,OAAO,GACP;IAAE,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,CAAA;CAAE,CAAA;AAEvC;;GAEG;AACH,MAAM,WAAW,0BAA0B,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO;IACpE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAA;IACvF,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACxD,UAAU,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,sBAAsB,KAAK,MAAM,CAAC,CAAA;CAC7E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,EAC7D,MAAM,EAAE,0BAA0B,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,GACnD,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,EAAE,cAAc,GAAG,WAAW,CAAC,CAiCxE;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACvB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,GAAE,sBAA2B,GAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,cAAc,GAAG,WAAW,CAAC,CAiC9D"}