ras-stack 0.14.0 → 0.16.0

package/README.md

@@ -100,6 +100,39 @@ Applications still own their auth clients, authorization, file-route declaration
 
 Only enable `trustForwardedHeaders` behind a proxy that replaces incoming forwarded headers. Otherwise a client could choose the origin used by the check.
 
+Infrastructure boundaries can keep approved client output separate from private causes:
+
+```ts
+import { InfrastructureError, infrastructureDiagnostic, infrastructureFailure } from 'ras-stack/server'
+
+throw new InfrastructureError('smtp_unavailable', 'email is temporarily unavailable', {
+  cause: transportError,
+  retryable: true,
+})
+
+const publicFailure = infrastructureFailure(error, {
+  code: 'internal_error',
+  message: 'something went wrong',
+  retryable: false,
+})
+logger.error(infrastructureDiagnostic(error), 'infrastructure request failed')
+```
+
+Only `InfrastructureError.publicMessage` is treated as approved for clients. Unknown failures use the caller's fallback; diagnostics are for application-owned logging and telemetry, never response serialization.
+
+Browser auth flows can share failure classification and pending/error state without sharing forms or navigation:
+
+```tsx
+import { classifySignInFailure } from 'ras-stack/auth/client'
+import { useAuthAction } from 'ras-stack/auth/react'
+
+const signIn = useAuthAction({ failureMessage: (failure) => messageFor(classifySignInFailure(failure)) })
+const result = await signIn.run(() => authClient.signIn.email({ email, password }))
+if (!result.error) await navigateAfterSignIn()
+```
+
+Applications retain field models, validation, password-reset disclosure policy, two-factor transitions, telemetry, copy, and success navigation.
+
 ## Database lifecycle
 
 The SQLite entrypoint owns the native client lifecycle, standard safety PRAGMAs, and optional Drizzle migrations while returning the upstream typed database:

package/dist/auth/client.d.ts

@@ -0,0 +1,8 @@
+export type AuthFailure = {
+    status?: number;
+    code?: string;
+    message?: string;
+} | null | undefined;
+export type SignInFailureReason = 'invalid_credentials' | 'rate_limited' | 'error';
+export declare function classifySignInFailure(failure: unknown): SignInFailureReason;
+export declare function authFailureMessage(failure: unknown, fallback: string): string;

package/dist/auth/client.js

@@ -0,0 +1,17 @@
+export function classifySignInFailure(failure) {
+    if (!failure || typeof failure !== 'object')
+        return 'error';
+    const status = 'status' in failure ? failure.status : undefined;
+    const code = 'code' in failure ? failure.code : undefined;
+    if (status === 429)
+        return 'rate_limited';
+    if (status === 401 || code === 'INVALID_EMAIL_OR_PASSWORD')
+        return 'invalid_credentials';
+    return 'error';
+}
+export function authFailureMessage(failure, fallback) {
+    if (!failure || typeof failure !== 'object' || !('message' in failure))
+        return fallback;
+    return typeof failure.message === 'string' && failure.message.trim() ? failure.message : fallback;
+}
+//# sourceMappingURL=client.js.map

package/dist/auth/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/auth/client.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAA;IAC3D,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IACzD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAA;IACzC,IAAI,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,2BAA2B;QAAE,OAAO,qBAAqB,CAAA;IACxF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,QAAgB;IACnE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAA;IACvF,OAAO,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAA;AACnG,CAAC","sourcesContent":["export type AuthFailure = { status?: number; code?: string; message?: string } | null | undefined\nexport type SignInFailureReason = 'invalid_credentials' | 'rate_limited' | 'error'\n\nexport function classifySignInFailure(failure: unknown): SignInFailureReason {\n  if (!failure || typeof failure !== 'object') return 'error'\n  const status = 'status' in failure ? failure.status : undefined\n  const code = 'code' in failure ? failure.code : undefined\n  if (status === 429) return 'rate_limited'\n  if (status === 401 || code === 'INVALID_EMAIL_OR_PASSWORD') return 'invalid_credentials'\n  return 'error'\n}\n\nexport function authFailureMessage(failure: unknown, fallback: string) {\n  if (!failure || typeof failure !== 'object' || !('message' in failure)) return fallback\n  return typeof failure.message === 'string' && failure.message.trim() ? failure.message : fallback\n}\n"]}

package/dist/auth/react.d.ts

@@ -0,0 +1,18 @@
+export type AuthActionResult<T, TFailure = unknown> = {
+    data?: T;
+    error?: TFailure | null;
+};
+export type AuthActionState = {
+    busy: boolean;
+    error?: string;
+};
+export declare function useAuthAction(options?: {
+    failureMessage?: (failure: unknown) => string;
+}): {
+    busy: boolean;
+    error?: string;
+    clearError: () => void;
+    run: <T, TFailure>(work: () => Promise<AuthActionResult<T, TFailure>>) => Promise<AuthActionResult<T, TFailure> | {
+        error: unknown;
+    }>;
+};

package/dist/auth/react.js

@@ -0,0 +1,34 @@
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { authFailureMessage } from './client.js';
+const defaultFailureMessage = (failure) => authFailureMessage(failure, 'That did not work. Try again.');
+export function useAuthAction(options = {}) {
+    const failureMessage = options.failureMessage ?? defaultFailureMessage;
+    const [state, setState] = useState({ busy: false });
+    const active = useRef(true);
+    const invocation = useRef(0);
+    useEffect(() => {
+        active.current = true;
+        return () => {
+            active.current = false;
+        };
+    }, []);
+    const clearError = useCallback(() => setState((current) => ({ busy: current.busy })), []);
+    const run = useCallback(async (work) => {
+        const current = ++invocation.current;
+        setState({ busy: true });
+        try {
+            const result = await work();
+            if (active.current && current === invocation.current) {
+                setState(result.error ? { busy: false, error: failureMessage(result.error) } : { busy: false });
+            }
+            return result;
+        }
+        catch (error) {
+            if (active.current && current === invocation.current)
+                setState({ busy: false, error: failureMessage(error) });
+            return { error };
+        }
+    }, [failureMessage]);
+    return { ...state, clearError, run };
+}
+//# sourceMappingURL=react.js.map

package/dist/auth/react.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.js","sourceRoot":"","sources":["../../src/auth/react.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAKhD,MAAM,qBAAqB,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAA;AAEhH,MAAM,UAAU,aAAa,CAAC,OAAO,GAAsD,EAAE;IAC3F,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,qBAAqB,CAAA;IACtE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5B,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;QACrB,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,OAAO,GAAG,KAAK,CAAA;QACxB,CAAC,CAAA;IACH,CAAC,EAAE,EAAE,CAAC,CAAA;IACN,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACzF,MAAM,GAAG,GAAG,WAAW,CACrB,KAAK,EAAe,IAAkD,EAAE,EAAE;QACxE,MAAM,OAAO,GAAG,EAAE,UAAU,CAAC,OAAO,CAAA;QACpC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAA;YAC3B,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;gBACrD,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACjG,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,KAAK,UAAU,CAAC,OAAO;gBAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC7G,OAAO,EAAE,KAAK,EAAoC,CAAA;QACpD,CAAC;IACH,CAAC,EACD,CAAC,cAAc,CAAC,CACjB,CAAA;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,CAAA;AACtC,CAAC","sourcesContent":["import { useCallback, useEffect, useRef, useState } from 'react'\nimport { authFailureMessage } from './client.js'\n\nexport type AuthActionResult<T, TFailure = unknown> = { data?: T; error?: TFailure | null }\nexport type AuthActionState = { busy: boolean; error?: string }\n\nconst defaultFailureMessage = (failure: unknown) => authFailureMessage(failure, 'That did not work. Try again.')\n\nexport function useAuthAction(options: { failureMessage?: (failure: unknown) => string } = {}) {\n  const failureMessage = options.failureMessage ?? defaultFailureMessage\n  const [state, setState] = useState<AuthActionState>({ busy: false })\n  const active = useRef(true)\n  const invocation = useRef(0)\n  useEffect(() => {\n    active.current = true\n    return () => {\n      active.current = false\n    }\n  }, [])\n  const clearError = useCallback(() => setState((current) => ({ busy: current.busy })), [])\n  const run = useCallback(\n    async <T, TFailure>(work: () => Promise<AuthActionResult<T, TFailure>>) => {\n      const current = ++invocation.current\n      setState({ busy: true })\n      try {\n        const result = await work()\n        if (active.current && current === invocation.current) {\n          setState(result.error ? { busy: false, error: failureMessage(result.error) } : { busy: false })\n        }\n        return result\n      } catch (error) {\n        if (active.current && current === invocation.current) setState({ busy: false, error: failureMessage(error) })\n        return { error } satisfies AuthActionResult<never>\n      }\n    },\n    [failureMessage],\n  )\n  return { ...state, clearError, run }\n}\n"]}

package/dist/server/errors.d.ts

@@ -0,0 +1,23 @@
+export type InfrastructureFailure = {
+    code: string;
+    message: string;
+    retryable: boolean;
+};
+export declare class InfrastructureError extends Error {
+    readonly code: string;
+    readonly publicMessage: string;
+    readonly retryable: boolean;
+    constructor(code: string, publicMessage: string, options?: {
+        cause?: unknown;
+        retryable?: boolean;
+    });
+}
+export declare function infrastructureFailure(error: unknown, fallback: InfrastructureFailure): InfrastructureFailure;
+export declare function safeInfrastructureError(error: unknown, fallback: InfrastructureFailure): InfrastructureError;
+export declare function infrastructureDiagnostic(error: unknown): {
+    name: string;
+    message: string;
+    code?: string | number;
+    status?: number;
+};
+export declare function errorHasCode(error: unknown, code: string | number): boolean;

package/dist/server/errors.js

@@ -0,0 +1,64 @@
+export class InfrastructureError extends Error {
+    code;
+    publicMessage;
+    retryable;
+    constructor(code, publicMessage, options = {}) {
+        super(publicMessage, options.cause === undefined ? undefined : { cause: options.cause });
+        this.name = 'InfrastructureError';
+        this.code = code;
+        this.publicMessage = publicMessage;
+        this.retryable = options.retryable ?? false;
+    }
+}
+export function infrastructureFailure(error, fallback) {
+    const known = findCause(error, (candidate) => candidate instanceof InfrastructureError);
+    return known ? { code: known.code, message: known.publicMessage, retryable: known.retryable } : fallback;
+}
+export function safeInfrastructureError(error, fallback) {
+    const failure = infrastructureFailure(error, fallback);
+    return new InfrastructureError(failure.code, failure.message, { cause: error, retryable: failure.retryable });
+}
+export function infrastructureDiagnostic(error) {
+    const found = findCause(error, (candidate) => candidate instanceof Error);
+    if (!found)
+        return { name: 'UnknownError', message: String(error) };
+    const code = findProperty(error, 'code', (value) => typeof value === 'string' || typeof value === 'number');
+    const status = findProperty(error, 'status', (value) => typeof value === 'number');
+    return {
+        name: found.name,
+        message: found.message,
+        ...(code === undefined ? {} : { code }),
+        ...(status === undefined ? {} : { status }),
+    };
+}
+export function errorHasCode(error, code) {
+    return findProperty(error, 'code', (value) => typeof value === 'string' || typeof value === 'number') === code;
+}
+function findCause(error, matches) {
+    let current = error;
+    const seen = new Set();
+    while (current && !seen.has(current)) {
+        if (matches(current))
+            return current;
+        seen.add(current);
+        current = typeof current === 'object' && 'cause' in current ? current.cause : undefined;
+    }
+    return undefined;
+}
+function findProperty(error, property, matches) {
+    let current = error;
+    const seen = new Set();
+    while (current && !seen.has(current)) {
+        seen.add(current);
+        if (typeof current !== 'object')
+            return undefined;
+        if (property in current) {
+            const value = current[property];
+            if (matches(value))
+                return value;
+        }
+        current = 'cause' in current ? current.cause : undefined;
+    }
+    return undefined;
+}
+//# sourceMappingURL=errors.js.map

package/dist/server/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/server/errors.ts"],"names":[],"mappings":"AAMA,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAAQ;IACZ,aAAa,CAAQ;IACrB,SAAS,CAAS;IAE3B,YAAY,IAAY,EAAE,aAAqB,EAAE,OAAO,GAA6C,EAAE;QACrG,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;QACxF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;QAClC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC7C,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,QAA+B;IACnF,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,SAAS,EAAoC,EAAE,CAAC,SAAS,YAAY,mBAAmB,CAAC,CAAA;IACzH,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC1G,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc,EAAE,QAA+B;IACrF,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACtD,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;AAC/G,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,SAAS,EAAsB,EAAE,CAAC,SAAS,YAAY,KAAK,CAAC,CAAA;IAC7F,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,KAAK,EAA4B,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAA;IACrI,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAA;IACnG,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,IAAqB;IAChE,OAAO,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,KAAK,EAA4B,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,KAAK,IAAI,CAAA;AAC1I,CAAC;AAED,SAAS,SAAS,CAAI,KAAc,EAAE,OAA+C;IACnF,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAA;IAC/B,OAAO,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAA;QACpC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjB,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACzF,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,YAAY,CAAI,KAAc,EAAE,QAAgB,EAAE,OAAuC;IAChG,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAA;IAC/B,OAAO,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjB,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QACjD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAgC,CAAC,CAAA;YACvD,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAA;QAClC,CAAC;QACD,OAAO,GAAG,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC","sourcesContent":["export type InfrastructureFailure = {\n  code: string\n  message: string\n  retryable: boolean\n}\n\nexport class InfrastructureError extends Error {\n  readonly code: string\n  readonly publicMessage: string\n  readonly retryable: boolean\n\n  constructor(code: string, publicMessage: string, options: { cause?: unknown; retryable?: boolean } = {}) {\n    super(publicMessage, options.cause === undefined ? undefined : { cause: options.cause })\n    this.name = 'InfrastructureError'\n    this.code = code\n    this.publicMessage = publicMessage\n    this.retryable = options.retryable ?? false\n  }\n}\n\nexport function infrastructureFailure(error: unknown, fallback: InfrastructureFailure): InfrastructureFailure {\n  const known = findCause(error, (candidate): candidate is InfrastructureError => candidate instanceof InfrastructureError)\n  return known ? { code: known.code, message: known.publicMessage, retryable: known.retryable } : fallback\n}\n\nexport function safeInfrastructureError(error: unknown, fallback: InfrastructureFailure) {\n  const failure = infrastructureFailure(error, fallback)\n  return new InfrastructureError(failure.code, failure.message, { cause: error, retryable: failure.retryable })\n}\n\nexport function infrastructureDiagnostic(error: unknown) {\n  const found = findCause(error, (candidate): candidate is Error => candidate instanceof Error)\n  if (!found) return { name: 'UnknownError', message: String(error) }\n  const code = findProperty(error, 'code', (value): value is string | number => typeof value === 'string' || typeof value === 'number')\n  const status = findProperty(error, 'status', (value): value is number => typeof value === 'number')\n  return {\n    name: found.name,\n    message: found.message,\n    ...(code === undefined ? {} : { code }),\n    ...(status === undefined ? {} : { status }),\n  }\n}\n\nexport function errorHasCode(error: unknown, code: string | number) {\n  return findProperty(error, 'code', (value): value is string | number => typeof value === 'string' || typeof value === 'number') === code\n}\n\nfunction findCause<T>(error: unknown, matches: (candidate: unknown) => candidate is T): T | undefined {\n  let current = error\n  const seen = new Set<unknown>()\n  while (current && !seen.has(current)) {\n    if (matches(current)) return current\n    seen.add(current)\n    current = typeof current === 'object' && 'cause' in current ? current.cause : undefined\n  }\n  return undefined\n}\n\nfunction findProperty<T>(error: unknown, property: string, matches: (value: unknown) => value is T): T | undefined {\n  let current = error\n  const seen = new Set<unknown>()\n  while (current && !seen.has(current)) {\n    seen.add(current)\n    if (typeof current !== 'object') return undefined\n    if (property in current) {\n      const value = current[property as keyof typeof current]\n      if (matches(value)) return value\n    }\n    current = 'cause' in current ? current.cause : undefined\n  }\n  return undefined\n}\n"]}

package/dist/server/health.d.ts

@@ -1,4 +1,7 @@
+import { type InfrastructureFailure } from './errors.js';
 export type HealthResponseOptions = {
     errorMessage?: (error: unknown) => string;
+    failure?: (error: unknown) => InfrastructureFailure;
 };
 export declare function healthResponse(check: () => Promise<void> | void, options?: HealthResponseOptions): Promise<Response>;
+export declare const databaseHealthFailure: (error: unknown) => InfrastructureFailure;

package/dist/server/health.js

@@ -1,10 +1,16 @@
+import { infrastructureFailure } from './errors.js';
 export async function healthResponse(check, options = {}) {
     try {
         await check();
         return Response.json({ ok: true });
     }
     catch (error) {
+        if (options.failure) {
+            const failure = options.failure(error);
+            return Response.json({ ok: false, error: failure.message, code: failure.code }, { status: 503 });
+        }
         return Response.json({ ok: false, error: options.errorMessage?.(error) ?? 'health check failed' }, { status: 503 });
     }
 }
+export const databaseHealthFailure = (error) => infrastructureFailure(error, { code: 'database_unavailable', message: 'database unavailable', retryable: true });
 //# sourceMappingURL=health.js.map

package/dist/server/health.js.map

@@ -1 +1 @@
-{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/server/health.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAiC,EAAE,OAAO,GAA0B,EAAE;IACzG,IAAI,CAAC;QACH,MAAM,KAAK,EAAE,CAAA;QACb,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,IAAI,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACrH,CAAC;AACH,CAAC","sourcesContent":["export type HealthResponseOptions = { errorMessage?: (error: unknown) => string }\n\nexport async function healthResponse(check: () => Promise<void> | void, options: HealthResponseOptions = {}) {\n  try {\n    await check()\n    return Response.json({ ok: true })\n  } catch (error) {\n    return Response.json({ ok: false, error: options.errorMessage?.(error) ?? 'health check failed' }, { status: 503 })\n  }\n}\n"]}
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/server/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAA8B,MAAM,aAAa,CAAA;AAO/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAiC,EAAE,OAAO,GAA0B,EAAE;IACzG,IAAI,CAAC;QACH,MAAM,KAAK,EAAE,CAAA;QACb,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAClG,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,IAAI,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACrH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAc,EAAE,EAAE,CACtD,qBAAqB,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA","sourcesContent":["import { infrastructureFailure, type InfrastructureFailure } from './errors.js'\n\nexport type HealthResponseOptions = {\n  errorMessage?: (error: unknown) => string\n  failure?: (error: unknown) => InfrastructureFailure\n}\n\nexport async function healthResponse(check: () => Promise<void> | void, options: HealthResponseOptions = {}) {\n  try {\n    await check()\n    return Response.json({ ok: true })\n  } catch (error) {\n    if (options.failure) {\n      const failure = options.failure(error)\n      return Response.json({ ok: false, error: failure.message, code: failure.code }, { status: 503 })\n    }\n    return Response.json({ ok: false, error: options.errorMessage?.(error) ?? 'health check failed' }, { status: 503 })\n  }\n}\n\nexport const databaseHealthFailure = (error: unknown) =>\n  infrastructureFailure(error, { code: 'database_unavailable', message: 'database unavailable', retryable: true })\n"]}

package/dist/server/index.d.ts

@@ -1,4 +1,5 @@
 export * from './canonical-host.js';
+export * from './errors.js';
 export * from './health.js';
 export * from './rpc.js';
 export * from './singleton.js';

package/dist/server/index.js

@@ -1,4 +1,5 @@
 export * from './canonical-host.js';
+export * from './errors.js';
 export * from './health.js';
 export * from './rpc.js';
 export * from './singleton.js';

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAA;AACnC,cAAc,aAAa,CAAA;AAC3B,cAAc,UAAU,CAAA;AACxB,cAAc,gBAAgB,CAAA","sourcesContent":["export * from './canonical-host.js'\nexport * from './health.js'\nexport * from './rpc.js'\nexport * from './singleton.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAA;AACnC,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,UAAU,CAAA;AACxB,cAAc,gBAAgB,CAAA","sourcesContent":["export * from './canonical-host.js'\nexport * from './errors.js'\nexport * from './health.js'\nexport * from './rpc.js'\nexport * from './singleton.js'\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ras-stack",
-  "version": "0.14.0",
+  "version": "0.16.0",
   "description": "Composable full-stack primitives shared across Richard Solomou's applications.",
   "keywords": [
     "authentication",
@@ -30,6 +30,14 @@
       "types": "./dist/auth/index.d.ts",
       "default": "./dist/auth/index.js"
     },
+    "./auth/client": {
+      "types": "./dist/auth/client.d.ts",
+      "default": "./dist/auth/client.js"
+    },
+    "./auth/react": {
+      "types": "./dist/auth/react.d.ts",
+      "default": "./dist/auth/react.js"
+    },
     "./email": {
       "types": "./dist/email/index.d.ts",
       "default": "./dist/email/index.js"