ras-stack 2.0.1 → 3.0.0

package/README.md

@@ -18,10 +18,11 @@ A helper belongs here when it removes a repeated decision or failure mode withou
 
 ## What you get 📦
 
-It ships in four forms:
+It ships as independently versioned packages and deployment tooling:
 
 - **TypeScript modules** under narrow import paths such as `ras-stack/database/sqlite`, `ras-stack/realtime/react`, and `ras-stack/tanstack/server`.
-- **Command-line tools** for generated policy, production assets, preview status, and a local Centrifugo container.
+- **Configuration presets** in the dependency-free `ras-stack-config` package for TypeScript and Oxlint.
+- **Command-line tools** for changeset validation, production assets, preview status, and a local Centrifugo container.
 - **GitHub Actions and reusable workflows** for toolchain setup, checks, browser tests, previews, and Changesets releases.
 - **A separate OCI image** containing verified Caddy and Centrifugo binaries for production images.
 
@@ -48,46 +49,18 @@ Applications still configure every upstream library directly. This table describ
 
 The application keeps schemas, migrations, repositories, routes, authorization, templates, upload rules, realtime payloads, storage, deployment topology, and UI. There is no shared application factory or giant configuration object.
 
-The [`examples/full-stack`](https://github.com/richardsolomou/ras-stack/tree/main/examples/full-stack) workspace shows the boundaries together and tests them through `workspace:*`. It is the repository's integration contract and the canonical source for the generated starter; once generated, the application owns its copied code and normal semver dependency.
+The [`examples/full-stack`](https://github.com/richardsolomou/ras-stack/tree/main/examples/full-stack) workspace shows the boundaries together and tests them through `workspace:*`. It is the repository's integration fixture; applications own their integration code and dependency versions.
 
-## Pick what you need 🧩
+## Installation
 
-`ras-stack` requires Node 24.
+`ras-stack` requires Node 24. Install the runtime package for application helpers and the configuration package for compiler/linter presets:
 
 ```sh
 pnpm add ras-stack
+pnpm add -D ras-stack-config
 ```
 
-Nodemailer, Centrifuge, `better-sqlite3`, Drizzle, Postgres.js, and `tus-js-client` are optional peer dependencies. Install them only when using their integrations:
-
-```sh
-pnpm add nodemailer
-pnpm add centrifuge
-pnpm add tus-js-client
-pnpm add better-auth @better-auth/drizzle-adapter better-sqlite3 drizzle-orm
-pnpm add postgres drizzle-orm
-```
-
-Start with the narrowest public entrypoint that owns the repeated mechanic:
-
-| Need                                                      | Entrypoint or command                                                            | The application still owns                                     |
-| --------------------------------------------------------- | -------------------------------------------------------------------------------- | -------------------------------------------------------------- |
-| Authentication defaults and browser action state          | `ras-stack/auth`, `ras-stack/auth/client`, `ras-stack/auth/react`                | Better Auth configuration, forms, policy, and navigation       |
-| RPC, mutation-origin, health, and canonical-host handling | `ras-stack/server`, `ras-stack/tanstack/server`, `ras-stack/tanstack/middleware` | Routes, authorization, logging, and health work                |
-| SQLite or PostgreSQL lifecycle                            | `ras-stack/database/*`                                                           | Schemas, migrations, repositories, and transactions            |
-| Realtime publication and browser lifecycle                | `ras-stack/realtime/*`                                                           | Channels, tickets, payloads, presence models, and invalidation |
-| Email, uploads, and production assets                     | `ras-stack/email`, `ras-stack/uploads`, `ras assets`                             | Templates, metadata, quotas, storage, and asset contents       |
-| Production or development realtime runtime                | `ras-stack/runtime`, `ras realtime`                                              | Images, ports, secrets, volumes, and distributed policy        |
-| Compiler, lint, CI, release, and preview mechanics        | `ras-stack/config/*`, `actions/*`, `.github/workflows/*`, `ras-stack/preview/*`  | Triggers, permissions, services, deployment, and verification  |
-| Generated repository policy files                         | `ras policy`                                                                     | Which policies apply and every declared override               |
-
-To start from the production reference instead of assembling entrypoints individually:
-
-```sh
-pnpm create ras-app my-app
-```
-
-The `create-ras-app` command delegates to the same scaffold implementation available through `pnpm dlx ras-stack create my-app`. The scaffold includes Better Auth, checked-in migrations, durable uploads, SMTP flows, a transactional realtime outbox, production health/lifecycle behavior, and its tests. It remains ordinary application code rather than a second framework API.
+Import helpers from their narrow entrypoints and install the upstream peer libraries required by the integrations you use. Configuration-only repositories need just `ras-stack-config`.
 
 ## Dokploy previews 🚀
 
@@ -101,13 +74,13 @@ Applications supply only their package, application prefix, port, environment te
 
 ## Guides 📚
 
-| Guide                                                                                                                  | What it covers                                                                                                                          |
-| ---------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- |
-| [Application primitives](https://github.com/richardsolomou/ras-stack/blob/main/docs/application-primitives.md)         | Authentication, request security, databases, realtime clients, email, uploads, and stateful development resources                       |
-| [Repository tooling](https://github.com/richardsolomou/ras-stack/blob/main/docs/repository-tooling.md)                 | TypeScript and Oxlint configuration, generated policy, GitHub Actions, previews, releases, and production runtime composition           |
-| [PostHog integration](https://github.com/richardsolomou/ras-stack/blob/main/docs/posthog.md)                           | Browser/server setup, identity and session correlation, ingest proxying, shutdown, coverage declarations, and source-map responsibility |
-| [Full-stack example](https://github.com/richardsolomou/ras-stack/blob/main/docs/full-stack-example.md)                 | The `workspace:*` integration contract, local development, production container, and two-browser journey                                |
-| [Production operations](https://github.com/richardsolomou/ras-stack/blob/main/docs/production-reference-operations.md) | Migration, backup/restore, rollback, configuration, proxy, shutdown, and supply-chain boundaries                                        |
+| Guide                                                                                                                  | What it covers                                                                                                                    |
+| ---------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- |
+| [Application primitives](https://github.com/richardsolomou/ras-stack/blob/main/docs/application-primitives.md)         | Authentication, request security, databases, realtime clients, email, uploads, and stateful development resources                 |
+| [Repository tooling](https://github.com/richardsolomou/ras-stack/blob/main/docs/repository-tooling.md)                 | TypeScript and Oxlint configuration, changeset validation, GitHub Actions, previews, releases, and production runtime composition |
+| [PostHog integration](https://github.com/richardsolomou/ras-stack/blob/main/docs/posthog.md)                           | Browser/server setup, identity and session correlation, ingest proxying, shutdown and source-map responsibility                   |
+| [Full-stack example](https://github.com/richardsolomou/ras-stack/blob/main/docs/full-stack-example.md)                 | The `workspace:*` integration contract, local development, production container, and two-browser journey                          |
+| [Production operations](https://github.com/richardsolomou/ras-stack/blob/main/docs/production-reference-operations.md) | Migration, backup/restore, rollback, configuration, proxy, shutdown, and supply-chain boundaries                                  |
 
 ## Development 🛠️
 

package/dist/changesets/cli.d.ts

@@ -0,0 +1 @@
+export declare function runChangesetsCli(arguments_: string[]): Promise<void>;

package/dist/changesets/cli.js

@@ -0,0 +1,14 @@
+import { checkChangesets } from './index.js';
+export async function runChangesetsCli(arguments_) {
+    if (arguments_.length !== 1 || arguments_[0] !== 'check') {
+        console.error('usage: ras changesets check');
+        process.exitCode = 2;
+        return;
+    }
+    const errors = await checkChangesets(process.cwd());
+    for (const message of errors)
+        console.error(message);
+    if (errors.length > 0)
+        process.exitCode = 1;
+}
+//# sourceMappingURL=cli.js.map

package/dist/changesets/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/changesets/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAoB;IACzD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACzD,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAC5C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACnD,KAAK,MAAM,OAAO,IAAI,MAAM;QAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AAC7C,CAAC","sourcesContent":["import { checkChangesets } from './index.js'\n\nexport async function runChangesetsCli(arguments_: string[]): Promise<void> {\n  if (arguments_.length !== 1 || arguments_[0] !== 'check') {\n    console.error('usage: ras changesets check')\n    process.exitCode = 2\n    return\n  }\n  const errors = await checkChangesets(process.cwd())\n  for (const message of errors) console.error(message)\n  if (errors.length > 0) process.exitCode = 1\n}\n"]}

package/dist/{policy/changesets.js → changesets/index.js}

@@ -34,4 +34,4 @@ export async function checkChangesets(root) {
     }
     return errors;
 }
-//# sourceMappingURL=changesets.js.map
+//# sourceMappingURL=index.js.map

package/dist/changesets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/changesets/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QAC3F,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACtC,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1E,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,cAAc,IAAI,EAAE,CAAA;QACjC,iFAAiF;QACjF,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;QACzD,IAAI,QAAQ,CAAA;QACZ,IAAI,CAAC;YACH,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAA;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAA;YACtD,SAAQ;QACV,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { parseChangesetFile } from '@changesets/parse'\nimport { getPackages } from '@manypkg/get-packages'\nimport { readdir, readFile } from 'node:fs/promises'\nimport { join } from 'node:path'\n\nexport async function checkChangesets(root: string): Promise<string[]> {\n  const files = await readdir(join(root, '.changeset')).catch((error: NodeJS.ErrnoException) => {\n    if (error.code === 'ENOENT') return []\n    throw error\n  })\n  const changesets = files.filter((file) => file.endsWith('.md') && file !== 'README.md').toSorted()\n  if (changesets.length === 0) return []\n  const { packages } = await getPackages(root)\n  const names = new Set(packages.map(({ packageJson }) => packageJson.name))\n  const errors: string[] = []\n  for (const file of changesets) {\n    const path = `.changeset/${file}`\n    // Read serially so a large changeset directory does not open every file at once.\n    // oxlint-disable-next-line no-await-in-loop\n    const contents = await readFile(join(root, path), 'utf8')\n    let releases\n    try {\n      releases = parseChangesetFile(contents).releases\n    } catch {\n      errors.push(`${path}: missing or invalid frontmatter`)\n      continue\n    }\n    for (const { name } of releases) {\n      if (!names.has(name)) errors.push(`${path}: unknown package ${JSON.stringify(name)}`)\n    }\n  }\n  return errors\n}\n"]}

package/dist/cli.d.ts

@@ -1,15 +1,11 @@
 #!/usr/bin/env node
 import { runAssetsCli } from './build/cli.js';
-import { runCreateCli } from './create/index.js';
-import { runInitCli } from './policy/init-cli.js';
-import { runPolicyCli } from './policy/cli.js';
+import { runChangesetsCli } from './changesets/cli.js';
 import { runPreviewCli } from './preview/cli.js';
 import { runRealtimeCli } from './runtime/dev-cli.js';
 declare const commands: {
     readonly assets: typeof runAssetsCli;
-    readonly create: typeof runCreateCli;
-    readonly init: typeof runInitCli;
-    readonly policy: typeof runPolicyCli;
+    readonly changesets: typeof runChangesetsCli;
     readonly preview: typeof runPreviewCli;
     readonly realtime: typeof runRealtimeCli;
 };

package/dist/cli.js

@@ -1,15 +1,11 @@
 #!/usr/bin/env node
 import { runAssetsCli } from './build/cli.js';
-import { runCreateCli } from './create/index.js';
-import { runInitCli } from './policy/init-cli.js';
-import { runPolicyCli } from './policy/cli.js';
+import { runChangesetsCli } from './changesets/cli.js';
 import { runPreviewCli } from './preview/cli.js';
 import { runRealtimeCli } from './runtime/dev-cli.js';
 const commands = {
     assets: runAssetsCli,
-    create: runCreateCli,
-    init: runInitCli,
-    policy: runPolicyCli,
+    changesets: runChangesetsCli,
     preview: runPreviewCli,
     realtime: runRealtimeCli,
 };
@@ -22,7 +18,7 @@ export function parseRasCommand(arguments_) {
 export async function runRasCli(arguments_) {
     const parsed = parseRasCommand(arguments_);
     if (!parsed) {
-        console.error('usage: ras <assets|create|init|policy|preview|realtime> [arguments]');
+        console.error('usage: ras <assets|changesets|preview|realtime> [arguments]');
         process.exitCode = 2;
         return;
     }

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,QAAQ,GAAG;IACf,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,cAAc;CAChB,CAAA;AAIV,MAAM,UAAU,eAAe,CAAC,UAAoB;IAClD,MAAM,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,GAAG,UAAU,CAAA;IAC9C,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACpE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,OAAqB,EAAE,CAAA;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAoB;IAClD,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAA;QACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IACD,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;AAClD,CAAC;AAED,IAAI,OAAO,IAAI,CAAC,IAAI;IAAE,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA","sourcesContent":["#!/usr/bin/env node\nimport { runAssetsCli } from './build/cli.js'\nimport { runCreateCli } from './create/index.js'\nimport { runInitCli } from './policy/init-cli.js'\nimport { runPolicyCli } from './policy/cli.js'\nimport { runPreviewCli } from './preview/cli.js'\nimport { runRealtimeCli } from './runtime/dev-cli.js'\n\nconst commands = {\n  assets: runAssetsCli,\n  create: runCreateCli,\n  init: runInitCli,\n  policy: runPolicyCli,\n  preview: runPreviewCli,\n  realtime: runRealtimeCli,\n} as const\n\nexport type RasCommand = keyof typeof commands\n\nexport function parseRasCommand(arguments_: string[]): { arguments: string[]; command: RasCommand } | undefined {\n  const [command, ...argumentsRest] = arguments_\n  if (!(command && Object.hasOwn(commands, command))) return undefined\n  return { arguments: argumentsRest, command: command as RasCommand }\n}\n\nexport async function runRasCli(arguments_: string[]): Promise<void> {\n  const parsed = parseRasCommand(arguments_)\n  if (!parsed) {\n    console.error('usage: ras <assets|create|init|policy|preview|realtime> [arguments]')\n    process.exitCode = 2\n    return\n  }\n  await commands[parsed.command](parsed.arguments)\n}\n\nif (import.meta.main) await runRasCli(process.argv.slice(2))\n"]}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,QAAQ,GAAG;IACf,MAAM,EAAE,YAAY;IACpB,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,cAAc;CAChB,CAAA;AAIV,MAAM,UAAU,eAAe,CAAC,UAAoB;IAClD,MAAM,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,GAAG,UAAU,CAAA;IAC9C,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACpE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,OAAqB,EAAE,CAAA;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAoB;IAClD,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IACD,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;AAClD,CAAC;AAED,IAAI,OAAO,IAAI,CAAC,IAAI;IAAE,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA","sourcesContent":["#!/usr/bin/env node\nimport { runAssetsCli } from './build/cli.js'\nimport { runChangesetsCli } from './changesets/cli.js'\nimport { runPreviewCli } from './preview/cli.js'\nimport { runRealtimeCli } from './runtime/dev-cli.js'\n\nconst commands = {\n  assets: runAssetsCli,\n  changesets: runChangesetsCli,\n  preview: runPreviewCli,\n  realtime: runRealtimeCli,\n} as const\n\nexport type RasCommand = keyof typeof commands\n\nexport function parseRasCommand(arguments_: string[]): { arguments: string[]; command: RasCommand } | undefined {\n  const [command, ...argumentsRest] = arguments_\n  if (!(command && Object.hasOwn(commands, command))) return undefined\n  return { arguments: argumentsRest, command: command as RasCommand }\n}\n\nexport async function runRasCli(arguments_: string[]): Promise<void> {\n  const parsed = parseRasCommand(arguments_)\n  if (!parsed) {\n    console.error('usage: ras <assets|changesets|preview|realtime> [arguments]')\n    process.exitCode = 2\n    return\n  }\n  await commands[parsed.command](parsed.arguments)\n}\n\nif (import.meta.main) await runRasCli(process.argv.slice(2))\n"]}

package/dist/posthog/index.d.ts

@@ -1,6 +1,4 @@
 export { postHogEnvironment, postHogHttpUrl } from './config.js';
 export type { PostHogBrowserService, PostHogEnvironment } from './config.js';
-export { definePostHogCoverage } from './coverage.js';
-export type { PostHogCoverage, PostHogCoverageDecision } from './coverage.js';
 export { POSTHOG_DISTINCT_ID_HEADER, POSTHOG_SESSION_ID_HEADER, postHogRequestContext } from './request.js';
 export type { PostHogRequestContext, PostHogRequestContextOptions } from './request.js';

package/dist/posthog/index.js

@@ -1,4 +1,3 @@
 export { postHogEnvironment, postHogHttpUrl } from './config.js';
-export { definePostHogCoverage } from './coverage.js';
 export { POSTHOG_DISTINCT_ID_HEADER, POSTHOG_SESSION_ID_HEADER, postHogRequestContext } from './request.js';
 //# sourceMappingURL=index.js.map

package/dist/posthog/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/posthog/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAErD,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA","sourcesContent":["export { postHogEnvironment, postHogHttpUrl } from './config.js'\nexport type { PostHogBrowserService, PostHogEnvironment } from './config.js'\nexport { definePostHogCoverage } from './coverage.js'\nexport type { PostHogCoverage, PostHogCoverageDecision } from './coverage.js'\nexport { POSTHOG_DISTINCT_ID_HEADER, POSTHOG_SESSION_ID_HEADER, postHogRequestContext } from './request.js'\nexport type { PostHogRequestContext, PostHogRequestContextOptions } from './request.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/posthog/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEhE,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA","sourcesContent":["export { postHogEnvironment, postHogHttpUrl } from './config.js'\nexport type { PostHogBrowserService, PostHogEnvironment } from './config.js'\nexport { POSTHOG_DISTINCT_ID_HEADER, POSTHOG_SESSION_ID_HEADER, postHogRequestContext } from './request.js'\nexport type { PostHogRequestContext, PostHogRequestContextOptions } from './request.js'\n"]}

package/dist/posthog/proxy.d.ts

@@ -1,8 +1,15 @@
 import type { PostHogEnvironment } from './config.js';
+type ProxyRequest = {
+    removeHeader(name: string): void;
+};
+type ViteProxyServer = {
+    on(event: 'proxyReq', listener: (request: ProxyRequest) => void): unknown;
+};
 type ViteProxyTarget = {
     target: string;
     changeOrigin: true;
     rewrite: (path: string) => string;
+    configure: (proxy: ViteProxyServer) => void;
 };
 export declare const POSTHOG_DEFAULT_INGEST_PATH = "/t";
 export declare function postHogIngestProxy(input: Pick<PostHogEnvironment, 'host' | 'assetsHost'>, options?: {
@@ -14,7 +21,10 @@ export declare function postHogIngestProxy(input: Pick<PostHogEnvironment, 'host
     };
     nitro: {
         [x: string]: {
-            proxy: string;
+            proxy: {
+                to: string;
+                filterHeaders: ("authorization" | "cookie")[];
+            };
         };
     };
 };

package/dist/posthog/proxy.js

@@ -1,12 +1,24 @@
 import { postHogHttpUrl } from './config.js';
+/**
+ * A same-origin proxy receives the application's session cookie and any bearer token with every
+ * request. PostHog reads neither, and forwarding them would hand a credential to a third party.
+ */
+const PRIVATE_HEADERS = ['cookie', 'authorization'];
 function viteTarget(host, ingestPath) {
     const prefix = new RegExp(`^${escapeRegExp(ingestPath)}`);
     return {
         target: host,
         changeOrigin: true,
         rewrite: (path) => path.replace(prefix, ''),
+        configure: (proxy) => proxy.on('proxyReq', (request) => {
+            for (const name of PRIVATE_HEADERS)
+                request.removeHeader(name);
+        }),
     };
 }
+function nitroTarget(to) {
+    return { proxy: { to, filterHeaders: [...PRIVATE_HEADERS] } };
+}
 function escapeRegExp(value) {
     return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }
@@ -32,9 +44,9 @@ export function postHogIngestProxy(input, options = {}) {
             [`${segment}(?:/|$)`]: viteTarget(ingestionHost, path),
         },
         nitro: {
-            [`${path}/static/**`]: { proxy: `${assetsHost}/static/**` },
-            [`${path}/array/**`]: { proxy: `${assetsHost}/array/**` },
-            [`${path}/**`]: { proxy: `${ingestionHost}/**` },
+            [`${path}/static/**`]: nitroTarget(`${assetsHost}/static/**`),
+            [`${path}/array/**`]: nitroTarget(`${assetsHost}/array/**`),
+            [`${path}/**`]: nitroTarget(`${ingestionHost}/**`),
         },
     };
 }

package/dist/posthog/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/posthog/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAS5C,SAAS,UAAU,CAAC,IAAY,EAAE,UAAkB;IAClD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACzD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;KAC5C,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACrD,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAA;AAE/C,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAA;IACpH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAsD,EAAE,OAAO,GAAsB,EAAE;IACxH,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACxD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;IACjE,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,IAAI,2BAA2B,CAAC,CAAA;IAC9E,8GAA8G;IAC9G,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAA;IACxC,OAAO;QACL,IAAI;QACJ,IAAI,EAAE;YACJ,CAAC,GAAG,OAAO,SAAS,CAAC,EAAE,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC;YACnD,CAAC,GAAG,OAAO,QAAQ,CAAC,EAAE,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC;YAClD,CAAC,GAAG,OAAO,SAAS,CAAC,EAAE,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC;SACvD;QACD,KAAK,EAAE;YACL,CAAC,GAAG,IAAI,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,UAAU,YAAY,EAAE;YAC3D,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,UAAU,WAAW,EAAE;YACzD,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,aAAa,KAAK,EAAE;SACjD;KACF,CAAA;AACH,CAAC","sourcesContent":["import { postHogHttpUrl } from './config.js'\nimport type { PostHogEnvironment } from './config.js'\n\ntype ViteProxyTarget = {\n  target: string\n  changeOrigin: true\n  rewrite: (path: string) => string\n}\n\nfunction viteTarget(host: string, ingestPath: string): ViteProxyTarget {\n  const prefix = new RegExp(`^${escapeRegExp(ingestPath)}`)\n  return {\n    target: host,\n    changeOrigin: true,\n    rewrite: (path) => path.replace(prefix, ''),\n  }\n}\n\nfunction escapeRegExp(value: string) {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n}\n\n// Ad-blocker lists match the literal `/ingest` segment on any host, so the default avoids it.\nexport const POSTHOG_DEFAULT_INGEST_PATH = '/t'\n\nfunction normalizedIngestPath(path: string): string {\n  if (!path.startsWith('/') || path.endsWith('/') || path.includes('?') || path.includes('#')) {\n    throw new Error('PostHog ingest path must start with \"/\", have no trailing slash, and carry no query or fragment')\n  }\n  return path\n}\n\nexport function postHogIngestProxy(input: Pick<PostHogEnvironment, 'host' | 'assetsHost'>, options: { path?: string } = {}) {\n  const ingestionHost = postHogHttpUrl(input.host, 'host')\n  const assetsHost = postHogHttpUrl(input.assetsHost, 'assetsHost')\n  const path = normalizedIngestPath(options.path ?? POSTHOG_DEFAULT_INGEST_PATH)\n  // Vite matches string keys as bare prefixes, so a short path needs a regular expression bound to its segment.\n  const segment = `^${escapeRegExp(path)}`\n  return {\n    path,\n    vite: {\n      [`${segment}/static`]: viteTarget(assetsHost, path),\n      [`${segment}/array`]: viteTarget(assetsHost, path),\n      [`${segment}(?:/|$)`]: viteTarget(ingestionHost, path),\n    },\n    nitro: {\n      [`${path}/static/**`]: { proxy: `${assetsHost}/static/**` },\n      [`${path}/array/**`]: { proxy: `${assetsHost}/array/**` },\n      [`${path}/**`]: { proxy: `${ingestionHost}/**` },\n    },\n  }\n}\n"]}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/posthog/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAG5C;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAU,CAAA;AAY5D,SAAS,UAAU,CAAC,IAAY,EAAE,UAAkB;IAClD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;IACzD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;YAC/B,KAAK,MAAM,IAAI,IAAI,eAAe;gBAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QAChE,CAAC,CAAC;KACL,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,EAAU;IAC7B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,GAAG,eAAe,CAAC,EAAE,EAAE,CAAA;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACrD,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAA;AAE/C,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAA;IACpH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAsD,EAAE,OAAO,GAAsB,EAAE;IACxH,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACxD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;IACjE,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,IAAI,2BAA2B,CAAC,CAAA;IAC9E,8GAA8G;IAC9G,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAA;IACxC,OAAO;QACL,IAAI;QACJ,IAAI,EAAE;YACJ,CAAC,GAAG,OAAO,SAAS,CAAC,EAAE,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC;YACnD,CAAC,GAAG,OAAO,QAAQ,CAAC,EAAE,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC;YAClD,CAAC,GAAG,OAAO,SAAS,CAAC,EAAE,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC;SACvD;QACD,KAAK,EAAE;YACL,CAAC,GAAG,IAAI,YAAY,CAAC,EAAE,WAAW,CAAC,GAAG,UAAU,YAAY,CAAC;YAC7D,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,WAAW,CAAC,GAAG,UAAU,WAAW,CAAC;YAC3D,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,WAAW,CAAC,GAAG,aAAa,KAAK,CAAC;SACnD;KACF,CAAA;AACH,CAAC","sourcesContent":["import { postHogHttpUrl } from './config.js'\nimport type { PostHogEnvironment } from './config.js'\n\n/**\n * A same-origin proxy receives the application's session cookie and any bearer token with every\n * request. PostHog reads neither, and forwarding them would hand a credential to a third party.\n */\nconst PRIVATE_HEADERS = ['cookie', 'authorization'] as const\n\ntype ProxyRequest = { removeHeader(name: string): void }\ntype ViteProxyServer = { on(event: 'proxyReq', listener: (request: ProxyRequest) => void): unknown }\n\ntype ViteProxyTarget = {\n  target: string\n  changeOrigin: true\n  rewrite: (path: string) => string\n  configure: (proxy: ViteProxyServer) => void\n}\n\nfunction viteTarget(host: string, ingestPath: string): ViteProxyTarget {\n  const prefix = new RegExp(`^${escapeRegExp(ingestPath)}`)\n  return {\n    target: host,\n    changeOrigin: true,\n    rewrite: (path) => path.replace(prefix, ''),\n    configure: (proxy) =>\n      proxy.on('proxyReq', (request) => {\n        for (const name of PRIVATE_HEADERS) request.removeHeader(name)\n      }),\n  }\n}\n\nfunction nitroTarget(to: string) {\n  return { proxy: { to, filterHeaders: [...PRIVATE_HEADERS] } }\n}\n\nfunction escapeRegExp(value: string) {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n}\n\n// Ad-blocker lists match the literal `/ingest` segment on any host, so the default avoids it.\nexport const POSTHOG_DEFAULT_INGEST_PATH = '/t'\n\nfunction normalizedIngestPath(path: string): string {\n  if (!path.startsWith('/') || path.endsWith('/') || path.includes('?') || path.includes('#')) {\n    throw new Error('PostHog ingest path must start with \"/\", have no trailing slash, and carry no query or fragment')\n  }\n  return path\n}\n\nexport function postHogIngestProxy(input: Pick<PostHogEnvironment, 'host' | 'assetsHost'>, options: { path?: string } = {}) {\n  const ingestionHost = postHogHttpUrl(input.host, 'host')\n  const assetsHost = postHogHttpUrl(input.assetsHost, 'assetsHost')\n  const path = normalizedIngestPath(options.path ?? POSTHOG_DEFAULT_INGEST_PATH)\n  // Vite matches string keys as bare prefixes, so a short path needs a regular expression bound to its segment.\n  const segment = `^${escapeRegExp(path)}`\n  return {\n    path,\n    vite: {\n      [`${segment}/static`]: viteTarget(assetsHost, path),\n      [`${segment}/array`]: viteTarget(assetsHost, path),\n      [`${segment}(?:/|$)`]: viteTarget(ingestionHost, path),\n    },\n    nitro: {\n      [`${path}/static/**`]: nitroTarget(`${assetsHost}/static/**`),\n      [`${path}/array/**`]: nitroTarget(`${assetsHost}/array/**`),\n      [`${path}/**`]: nitroTarget(`${ingestionHost}/**`),\n    },\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ras-stack",
-  "version": "2.0.1",
+  "version": "3.0.0",
   "description": "Composable full-stack primitives shared across Richard Solomou's applications.",
   "keywords": [
     "authentication",
@@ -21,8 +21,7 @@
     "ras": "./dist/cli.js"
   },
   "files": [
-    "dist",
-    "config"
+    "dist"
   ],
   "type": "module",
   "sideEffects": false,
@@ -63,14 +62,6 @@
       "types": "./dist/conformance/index.d.ts",
       "default": "./dist/conformance/index.js"
     },
-    "./create": {
-      "types": "./dist/create/index.d.ts",
-      "default": "./dist/create/index.js"
-    },
-    "./policy": {
-      "types": "./dist/policy/index.d.ts",
-      "default": "./dist/policy/index.js"
-    },
     "./posthog": {
       "types": "./dist/posthog/index.d.ts",
       "default": "./dist/posthog/index.js"
@@ -119,10 +110,6 @@
       "types": "./dist/runtime/index.d.ts",
       "default": "./dist/runtime/index.js"
     },
-    "./tanstack/query": {
-      "types": "./dist/tanstack/query.d.ts",
-      "default": "./dist/tanstack/query.js"
-    },
     "./tanstack/middleware": {
       "types": "./dist/tanstack/middleware.d.ts",
       "default": "./dist/tanstack/middleware.js"
@@ -135,27 +122,17 @@
       "types": "./dist/uploads/index.d.ts",
       "default": "./dist/uploads/index.js"
     },
-    "./config/oxlint": "./config/oxlint.json",
-    "./config/oxlint/application": "./config/oxlint/application.json",
-    "./config/oxlint/tanstack": "./config/oxlint/tanstack.json",
-    "./config/typescript/base": "./config/typescript/base.json",
-    "./config/typescript/browser": "./config/typescript/browser.json",
-    "./config/typescript/bundler": "./config/typescript/bundler.json",
-    "./config/typescript/library": "./config/typescript/library.json",
-    "./config/typescript/node-bundler": "./config/typescript/node-bundler.json",
-    "./config/typescript/tanstack": "./config/typescript/tanstack.json",
-    "./config/oxlint/domain": "./config/oxlint/domain.json",
-    "./config/oxlint/layers": "./config/oxlint/layers.json"
+    "./changesets": {
+      "types": "./dist/changesets/index.d.ts",
+      "default": "./dist/changesets/index.js"
+    }
   },
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
     "@changesets/parse": "1.0.0",
-    "@inquirer/confirm": "^6.1.1",
-    "@inquirer/select": "^5.2.1",
-    "@manypkg/get-packages": "3.1.0",
-    "yaml": "^2.8.2"
+    "@manypkg/get-packages": "3.1.0"
   },
   "devDependencies": {
     "@opentelemetry/api-logs": "^0.221.0",
@@ -163,7 +140,6 @@
     "@opentelemetry/resources": "^2.10.0",
     "@opentelemetry/sdk-logs": "^0.221.0",
     "@posthog/react": "1.10.6",
-    "@tanstack/react-query": "^5.101.4",
     "@tanstack/react-start": "^1.168.32",
     "@types/better-sqlite3": "9.6.0",
     "@types/node": "^26.2.0",
@@ -186,7 +162,9 @@
     "tus-js-client": "^4.3.1",
     "typescript": "^7.0.2",
     "vite": "8.2.1",
-    "vitest": "^4.1.10"
+    "vitest": "^4.1.10",
+    "yaml": "^2.8.2",
+    "ras-stack-config": "1.0.0"
   },
   "peerDependencies": {
     "@opentelemetry/api-logs": "^0.221.0",
@@ -194,7 +172,6 @@
     "@opentelemetry/resources": "^2.10.0",
     "@opentelemetry/sdk-logs": "^0.221.0",
     "@posthog/react": ">=1.1 <2",
-    "@tanstack/react-query": ">=5.62.8 <6",
     "@tanstack/react-start": ">=1.168.10 <2",
     "better-sqlite3": ">=12 <14",
     "centrifuge": ">=5 <6",
@@ -222,9 +199,6 @@
     "@posthog/react": {
       "optional": true
     },
-    "@tanstack/react-query": {
-      "optional": true
-    },
     "@tanstack/react-start": {
       "optional": true
     },
@@ -260,8 +234,7 @@
     "node": ">=24 <25"
   },
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.build.json && node scripts/copyStarter.mjs",
-    "config:check": "tsc -p test/config-consumer/tsconfig.json && tsc -p test/config-consumer/tsconfig-bundler.json && tsc -p test/config-consumer/tsconfig-node-bundler.json && tsc -p test/config-consumer/tsconfig-library.json && oxlint --config config/oxlint/application.json --print-config > /dev/null && oxlint --config config/oxlint/tanstack.json --print-config > /dev/null",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
     "typecheck": "tsc --noEmit",
     "lint": "oxlint --type-aware --deny-warnings .",
     "format": "oxfmt --write .",
@@ -270,6 +243,6 @@
     "package:check": "node scripts/checkPackedPackage.mjs",
     "peer:floor": "node scripts/checkPeerFloor.mjs",
     "runtime:pin": "node scripts/checkRuntimePin.mjs",
-    "check": "pnpm format:check && pnpm lint && pnpm config:check && pnpm typecheck && pnpm test && pnpm build && pnpm package:check"
+    "check": "pnpm format:check && pnpm lint && pnpm typecheck && pnpm test && pnpm build && pnpm package:check"
   }
 }

package/config/oxlint/application.json

@@ -1,16 +0,0 @@
-{
-  "extends": ["../oxlint.json"],
-  "rules": {
-    "no-console": "off",
-    "no-await-in-loop": "off",
-    "no-underscore-dangle": "off",
-    "unicorn/require-post-message-target-origin": "off",
-    "vitest/require-to-throw-message": "off",
-    "vitest/no-conditional-expect": "off",
-    "unicorn/no-array-sort": "off",
-    "oxc/no-map-spread": "off",
-    "unicorn/consistent-function-scoping": "off",
-    "unicorn/prefer-add-event-listener": "off",
-    "typescript/no-unnecessary-type-parameters": "off"
-  }
-}

package/config/oxlint/domain.json

@@ -1,29 +0,0 @@
-{
-  "overrides": [
-    {
-      "files": ["src/core/**", "src/geometry/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:node:|(?:assert|async_hooks|buffer|child_process|cluster|console|constants|crypto|dgram|diagnostics_channel|dns|domain|events|fs|http|http2|https|inspector|module|net|os|path|perf_hooks|process|punycode|querystring|readline|repl|stream|string_decoder|sys|timers|tls|trace_events|tty|url|util|v8|vm|wasi|worker_threads|zlib)(?:/|$))",
-                "message": "Domain modules must not import Node builtins."
-              },
-              {
-                "regex": "^(@tanstack/|react(?:/|-|$)|@testing-library/|drizzle-orm(?:/|$)|postgres(?:/|$)|iovalkey(?:/|$)|ioredis(?:/|$)|@electric-sql/|better-auth(?:/|$)|cheerio(?:/|$)|html-to-text(?:/|$)|centrifuge(?:/|$)|posthog-(?:js|node)(?:/|$))",
-                "message": "Domain modules must not import framework or persistence dependencies."
-              },
-              {
-                "regex": "^(?:(?:\\.\\.?/)+|@/)(?:adapters|client|components|db|lib|routes|server)/",
-                "message": "Domain modules must not import application layers."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    }
-  ]
-}

package/config/oxlint/layers.json

@@ -1,116 +0,0 @@
-{
-  "overrides": [
-    {
-      "files": ["src/routes/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:\\./[^.]|(?:\\.\\./)+routes/|@/routes/)",
-                "message": "Route modules must not import sibling route modules."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    },
-    {
-      "files": ["src/server/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:(?:\\.\\.?/)+|@/)(?:client|routes)/",
-                "message": "Server modules must not import client or route modules."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    },
-    {
-      "files": ["src/client/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "group": [
-                  "**/adapters/**",
-                  "**/db/**",
-                  "**/routes/**",
-                  "**/server/**",
-                  "!**/server/functions",
-                  "!**/server/functions.*",
-                  "!**/server/functions/**",
-                  "!**/server/fns",
-                  "!**/server/fns.*"
-                ],
-                "message": "Client modules may import server functions, but not server implementations."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    },
-    {
-      "files": ["src/contracts/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:(?:\\.\\.?/)+|@/)(?:adapters|client|components|db|lib|routes|server)/",
-                "message": "Shared contracts must not import application layers."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    },
-    {
-      "files": ["src/adapters/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:(?:\\.\\.?/)+|@/)(?:client|db|routes|server)/",
-                "message": "Adapters must not import application layers."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    },
-    {
-      "files": ["src/db/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:(?:\\.\\.?/)+|@/)(?:adapters|client|routes|server)/",
-                "message": "Database modules must not import application layers."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    }
-  ]
-}

package/config/oxlint/tanstack.json

@@ -1,4 +0,0 @@
-{
-  "extends": ["../oxlint.json"],
-  "ignorePatterns": ["src/routeTree.gen.ts", ".output/**", "node_modules/**"]
-}

package/config/oxlint.json

@@ -1,19 +0,0 @@
-{
-  "plugins": ["typescript", "unicorn", "oxc", "react", "jsx-a11y", "import", "vitest"],
-  "categories": {
-    "correctness": "error",
-    "suspicious": "warn",
-    "perf": "warn"
-  },
-  "rules": {
-    "import/no-unassigned-import": "off",
-    "react/react-in-jsx-scope": "off",
-    "typescript/consistent-return": "off",
-    "typescript/no-unsafe-type-assertion": "off",
-    "unicorn/filename-case": "off",
-    "vitest/require-mock-type-parameters": "off"
-  },
-  "env": {
-    "builtin": true
-  }
-}