ras-stack 0.14.0 → 0.15.0

package/README.md

@@ -100,6 +100,19 @@ Applications still own their auth clients, authorization, file-route declaration
 
 Only enable `trustForwardedHeaders` behind a proxy that replaces incoming forwarded headers. Otherwise a client could choose the origin used by the check.
 
+Browser auth flows can share failure classification and pending/error state without sharing forms or navigation:
+
+```tsx
+import { classifySignInFailure } from 'ras-stack/auth/client'
+import { useAuthAction } from 'ras-stack/auth/react'
+
+const signIn = useAuthAction({ failureMessage: (failure) => messageFor(classifySignInFailure(failure)) })
+const result = await signIn.run(() => authClient.signIn.email({ email, password }))
+if (!result.error) await navigateAfterSignIn()
+```
+
+Applications retain field models, validation, password-reset disclosure policy, two-factor transitions, telemetry, copy, and success navigation.
+
 ## Database lifecycle
 
 The SQLite entrypoint owns the native client lifecycle, standard safety PRAGMAs, and optional Drizzle migrations while returning the upstream typed database:

package/dist/auth/client.d.ts

@@ -0,0 +1,8 @@
+export type AuthFailure = {
+    status?: number;
+    code?: string;
+    message?: string;
+} | null | undefined;
+export type SignInFailureReason = 'invalid_credentials' | 'rate_limited' | 'error';
+export declare function classifySignInFailure(failure: unknown): SignInFailureReason;
+export declare function authFailureMessage(failure: unknown, fallback: string): string;

package/dist/auth/client.js

@@ -0,0 +1,17 @@
+export function classifySignInFailure(failure) {
+    if (!failure || typeof failure !== 'object')
+        return 'error';
+    const status = 'status' in failure ? failure.status : undefined;
+    const code = 'code' in failure ? failure.code : undefined;
+    if (status === 429)
+        return 'rate_limited';
+    if (status === 401 || code === 'INVALID_EMAIL_OR_PASSWORD')
+        return 'invalid_credentials';
+    return 'error';
+}
+export function authFailureMessage(failure, fallback) {
+    if (!failure || typeof failure !== 'object' || !('message' in failure))
+        return fallback;
+    return typeof failure.message === 'string' && failure.message.trim() ? failure.message : fallback;
+}
+//# sourceMappingURL=client.js.map

package/dist/auth/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/auth/client.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAA;IAC3D,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IACzD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAA;IACzC,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,2BAA2B;QAAE,OAAO,qBAAqB,CAAA;IACxF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,QAAgB;IACnE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAA;IACvF,OAAO,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAA;AACnG,CAAC","sourcesContent":["export type AuthFailure = { status?: number; code?: string; message?: string } | null | undefined\nexport type SignInFailureReason = 'invalid_credentials' | 'rate_limited' | 'error'\n\nexport function classifySignInFailure(failure: unknown): SignInFailureReason {\n  if (!failure || typeof failure !== 'object') return 'error'\n  const status = 'status' in failure ? failure.status : undefined\n  const code = 'code' in failure ? failure.code : undefined\n  if (status === 429) return 'rate_limited'\n  if (status === 401 || code === 'INVALID_EMAIL_OR_PASSWORD') return 'invalid_credentials'\n  return 'error'\n}\n\nexport function authFailureMessage(failure: unknown, fallback: string) {\n  if (!failure || typeof failure !== 'object' || !('message' in failure)) return fallback\n  return typeof failure.message === 'string' && failure.message.trim() ? failure.message : fallback\n}\n"]}

package/dist/auth/react.d.ts

@@ -0,0 +1,18 @@
+export type AuthActionResult<T, TFailure = unknown> = {
+    data?: T;
+    error?: TFailure | null;
+};
+export type AuthActionState = {
+    busy: boolean;
+    error?: string;
+};
+export declare function useAuthAction(options?: {
+    failureMessage?: (failure: unknown) => string;
+}): {
+    busy: boolean;
+    error?: string;
+    clearError: () => void;
+    run: <T, TFailure>(work: () => Promise<AuthActionResult<T, TFailure>>) => Promise<AuthActionResult<T, TFailure> | {
+        error: unknown;
+    }>;
+};

package/dist/auth/react.js

@@ -0,0 +1,34 @@
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { authFailureMessage } from './client.js';
+const defaultFailureMessage = (failure) => authFailureMessage(failure, 'That did not work. Try again.');
+export function useAuthAction(options = {}) {
+    const failureMessage = options.failureMessage ?? defaultFailureMessage;
+    const [state, setState] = useState({ busy: false });
+    const active = useRef(true);
+    const invocation = useRef(0);
+    useEffect(() => {
+        active.current = true;
+        return () => {
+            active.current = false;
+        };
+    }, []);
+    const clearError = useCallback(() => setState((current) => ({ busy: current.busy })), []);
+    const run = useCallback(async (work) => {
+        const current = ++invocation.current;
+        setState({ busy: true });
+        try {
+            const result = await work();
+            if (active.current && current === invocation.current) {
+                setState(result.error ? { busy: false, error: failureMessage(result.error) } : { busy: false });
+            }
+            return result;
+        }
+        catch (error) {
+            if (active.current && current === invocation.current)
+                setState({ busy: false, error: failureMessage(error) });
+            return { error };
+        }
+    }, [failureMessage]);
+    return { ...state, clearError, run };
+}
+//# sourceMappingURL=react.js.map

package/dist/auth/react.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.js","sourceRoot":"","sources":["../../src/auth/react.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAKhD,MAAM,qBAAqB,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAA;AAEhH,MAAM,UAAU,aAAa,CAAC,OAAO,GAAsD,EAAE;IAC3F,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,qBAAqB,CAAA;IACtE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5B,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;QACrB,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,OAAO,GAAG,KAAK,CAAA;QACxB,CAAC,CAAA;IACH,CAAC,EAAE,EAAE,CAAC,CAAA;IACN,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACzF,MAAM,GAAG,GAAG,WAAW,CACrB,KAAK,EAAe,IAAkD,EAAE,EAAE;QACxE,MAAM,OAAO,GAAG,EAAE,UAAU,CAAC,OAAO,CAAA;QACpC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAA;YAC3B,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;gBACrD,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACjG,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,KAAK,UAAU,CAAC,OAAO;gBAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC7G,OAAO,EAAE,KAAK,EAAoC,CAAA;QACpD,CAAC;IACH,CAAC,EACD,CAAC,cAAc,CAAC,CACjB,CAAA;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;AACtC,CAAC","sourcesContent":["import { useCallback, useEffect, useRef, useState } from 'react'\nimport { authFailureMessage } from './client.js'\n\nexport type AuthActionResult<T, TFailure = unknown> = { data?: T; error?: TFailure | null }\nexport type AuthActionState = { busy: boolean; error?: string }\n\nconst defaultFailureMessage = (failure: unknown) => authFailureMessage(failure, 'That did not work. Try again.')\n\nexport function useAuthAction(options: { failureMessage?: (failure: unknown) => string } = {}) {\n  const failureMessage = options.failureMessage ?? defaultFailureMessage\n  const [state, setState] = useState<AuthActionState>({ busy: false })\n  const active = useRef(true)\n  const invocation = useRef(0)\n  useEffect(() => {\n    active.current = true\n    return () => {\n      active.current = false\n    }\n  }, [])\n  const clearError = useCallback(() => setState((current) => ({ busy: current.busy })), [])\n  const run = useCallback(\n    async <T, TFailure>(work: () => Promise<AuthActionResult<T, TFailure>>) => {\n      const current = ++invocation.current\n      setState({ busy: true })\n      try {\n        const result = await work()\n        if (active.current && current === invocation.current) {\n          setState(result.error ? { busy: false, error: failureMessage(result.error) } : { busy: false })\n        }\n        return result\n      } catch (error) {\n        if (active.current && current === invocation.current) setState({ busy: false, error: failureMessage(error) })\n        return { error } satisfies AuthActionResult<never>\n      }\n    },\n    [failureMessage],\n  )\n  return { ...state, clearError, run }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ras-stack",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Composable full-stack primitives shared across Richard Solomou's applications.",
   "keywords": [
     "authentication",
@@ -30,6 +30,14 @@
       "types": "./dist/auth/index.d.ts",
       "default": "./dist/auth/index.js"
     },
+    "./auth/client": {
+      "types": "./dist/auth/client.d.ts",
+      "default": "./dist/auth/client.js"
+    },
+    "./auth/react": {
+      "types": "./dist/auth/react.d.ts",
+      "default": "./dist/auth/react.js"
+    },
     "./email": {
       "types": "./dist/email/index.d.ts",
       "default": "./dist/email/index.js"