ras-stack 2.0.2 → 3.0.1

package/README.md

@@ -18,10 +18,11 @@ A helper belongs here when it removes a repeated decision or failure mode withou
 
 ## What you get 📦
 
-It ships in four forms:
+It ships as independently versioned packages and deployment tooling:
 
 - **TypeScript modules** under narrow import paths such as `ras-stack/database/sqlite`, `ras-stack/realtime/react`, and `ras-stack/tanstack/server`.
-- **Command-line tools** for generated policy, production assets, preview status, and a local Centrifugo container.
+- **Configuration presets** in the dependency-free `ras-stack-config` package for TypeScript and Oxlint.
+- **Command-line tools** for changeset validation, production assets, preview status, and a local Centrifugo container.
 - **GitHub Actions and reusable workflows** for toolchain setup, checks, browser tests, previews, and Changesets releases.
 - **A separate OCI image** containing verified Caddy and Centrifugo binaries for production images.
 
@@ -31,13 +32,13 @@ An application can use one surface without adopting the others. The npm package
 
 | Layer               | Supported technology                        | What `ras-stack` centralizes                                                                          |
 | ------------------- | ------------------------------------------- | ----------------------------------------------------------------------------------------------------- |
-| Runtime and tooling | Node, ESM TypeScript, pnpm, Just, Oxlint    | Compiler/linter bases, setup actions, and version synchronization                                     |
-| Web application     | TanStack Start, React, TanStack Query       | Request binding, mutation-origin checks, canonical hosts, health handlers, and Query defaults         |
+| Runtime and tooling | Node, ESM TypeScript, pnpm, Just, Oxlint    | Setup actions and version synchronization                                                             |
+| Web application     | TanStack Start, React                       | Request binding, mutation-origin checks, canonical hosts, health handlers                             |
 | Authentication      | Better Auth                                 | Secure option builders, origins, secrets, redirects, failure classification, and React action state   |
 | Data                | Drizzle, `better-sqlite3`, Postgres.js      | Connection lifecycle, safety defaults, migrations, target selection, and conformance checks           |
 | Realtime            | Centrifuge, Centrifugo, Caddy               | Publishing, tokens, browser/React lifecycle, presence, proxy configuration, binaries, and supervision |
-| Email and uploads   | Nodemailer, `tus-js-client`                 | SMTP configuration/delivery, auth callbacks, and promise-based resumable uploads                      |
-| Observability       | PostHog JS, React, Node, and OpenTelemetry  | Analytics, replay, errors, logs, metrics, tracing, correlation, proxying, shutdown, and coverage      |
+| Email and uploads   | Nodemailer 9/10, `tus-js-client`            | SMTP configuration/delivery, auth callbacks, and promise-based resumable uploads                      |
+| Observability       | PostHog JS, React, Node, and OpenTelemetry  | Analytics, replay, errors, logs, metrics, tracing, correlation, proxying, and shutdown                |
 | Delivery            | GitHub Actions, Changesets, Dokploy, Docker | Checks, releases, preview lifecycle/status, production assets, and runtime binaries                   |
 
 Applications still configure every upstream library directly. This table describes what is tested together, not a replacement API.
@@ -48,46 +49,18 @@ Applications still configure every upstream library directly. This table describ
 
 The application keeps schemas, migrations, repositories, routes, authorization, templates, upload rules, realtime payloads, storage, deployment topology, and UI. There is no shared application factory or giant configuration object.
 
-The [`examples/full-stack`](https://github.com/richardsolomou/ras-stack/tree/main/examples/full-stack) workspace shows the boundaries together and tests them through `workspace:*`. It is the repository's integration contract and the canonical source for the generated starter; once generated, the application owns its copied code and normal semver dependency.
+The [`examples/full-stack`](https://github.com/richardsolomou/ras-stack/tree/main/examples/full-stack) workspace shows the boundaries together and tests them through `workspace:*`. It is the repository's integration fixture; applications own their integration code and dependency versions.
 
-## Pick what you need 🧩
+## Installation
 
-`ras-stack` requires Node 24.
+`ras-stack` requires Node 24. Install the runtime package for application helpers and the configuration package for compiler/linter presets:
 
 ```sh
 pnpm add ras-stack
+pnpm add -D ras-stack-config
 ```
 
-Nodemailer, Centrifuge, `better-sqlite3`, Drizzle, Postgres.js, and `tus-js-client` are optional peer dependencies. Install them only when using their integrations:
-
-```sh
-pnpm add nodemailer
-pnpm add centrifuge
-pnpm add tus-js-client
-pnpm add better-auth @better-auth/drizzle-adapter better-sqlite3 drizzle-orm
-pnpm add postgres drizzle-orm
-```
-
-Start with the narrowest public entrypoint that owns the repeated mechanic:
-
-| Need                                                      | Entrypoint or command                                                            | The application still owns                                     |
-| --------------------------------------------------------- | -------------------------------------------------------------------------------- | -------------------------------------------------------------- |
-| Authentication defaults and browser action state          | `ras-stack/auth`, `ras-stack/auth/client`, `ras-stack/auth/react`                | Better Auth configuration, forms, policy, and navigation       |
-| RPC, mutation-origin, health, and canonical-host handling | `ras-stack/server`, `ras-stack/tanstack/server`, `ras-stack/tanstack/middleware` | Routes, authorization, logging, and health work                |
-| SQLite or PostgreSQL lifecycle                            | `ras-stack/database/*`                                                           | Schemas, migrations, repositories, and transactions            |
-| Realtime publication and browser lifecycle                | `ras-stack/realtime/*`                                                           | Channels, tickets, payloads, presence models, and invalidation |
-| Email, uploads, and production assets                     | `ras-stack/email`, `ras-stack/uploads`, `ras assets`                             | Templates, metadata, quotas, storage, and asset contents       |
-| Production or development realtime runtime                | `ras-stack/runtime`, `ras realtime`                                              | Images, ports, secrets, volumes, and distributed policy        |
-| Compiler, lint, CI, release, and preview mechanics        | `ras-stack/config/*`, `actions/*`, `.github/workflows/*`, `ras-stack/preview/*`  | Triggers, permissions, services, deployment, and verification  |
-| Generated repository policy files                         | `ras policy`                                                                     | Which policies apply and every declared override               |
-
-To start from the production reference instead of assembling entrypoints individually:
-
-```sh
-pnpm create ras-app my-app
-```
-
-The `create-ras-app` command delegates to the same scaffold implementation available through `pnpm dlx ras-stack create my-app`. The scaffold includes Better Auth, checked-in migrations, durable uploads, SMTP flows, a transactional realtime outbox, production health/lifecycle behavior, and its tests. It remains ordinary application code rather than a second framework API.
+Import helpers from their narrow entrypoints and install the upstream peer libraries required by the integrations you use. Configuration-only repositories need just `ras-stack-config`.
 
 ## Dokploy previews 🚀
 
@@ -101,13 +74,13 @@ Applications supply only their package, application prefix, port, environment te
 
 ## Guides 📚
 
-| Guide                                                                                                                  | What it covers                                                                                                                          |
-| ---------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- |
-| [Application primitives](https://github.com/richardsolomou/ras-stack/blob/main/docs/application-primitives.md)         | Authentication, request security, databases, realtime clients, email, uploads, and stateful development resources                       |
-| [Repository tooling](https://github.com/richardsolomou/ras-stack/blob/main/docs/repository-tooling.md)                 | TypeScript and Oxlint configuration, generated policy, GitHub Actions, previews, releases, and production runtime composition           |
-| [PostHog integration](https://github.com/richardsolomou/ras-stack/blob/main/docs/posthog.md)                           | Browser/server setup, identity and session correlation, ingest proxying, shutdown, coverage declarations, and source-map responsibility |
-| [Full-stack example](https://github.com/richardsolomou/ras-stack/blob/main/docs/full-stack-example.md)                 | The `workspace:*` integration contract, local development, production container, and two-browser journey                                |
-| [Production operations](https://github.com/richardsolomou/ras-stack/blob/main/docs/production-reference-operations.md) | Migration, backup/restore, rollback, configuration, proxy, shutdown, and supply-chain boundaries                                        |
+| Guide                                                                                                                  | What it covers                                                                                                                    |
+| ---------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- |
+| [Application primitives](https://github.com/richardsolomou/ras-stack/blob/main/docs/application-primitives.md)         | Authentication, request security, databases, realtime clients, email, uploads, and stateful development resources                 |
+| [Repository tooling](https://github.com/richardsolomou/ras-stack/blob/main/docs/repository-tooling.md)                 | TypeScript and Oxlint configuration, changeset validation, GitHub Actions, previews, releases, and production runtime composition |
+| [PostHog integration](https://github.com/richardsolomou/ras-stack/blob/main/docs/posthog.md)                           | Browser/server setup, identity and session correlation, ingest proxying, shutdown and source-map responsibility                   |
+| [Full-stack example](https://github.com/richardsolomou/ras-stack/blob/main/docs/full-stack-example.md)                 | The `workspace:*` integration contract, local development, production container, and two-browser journey                          |
+| [Production operations](https://github.com/richardsolomou/ras-stack/blob/main/docs/production-reference-operations.md) | Migration, backup/restore, rollback, configuration, proxy, shutdown, and supply-chain boundaries                                  |
 
 ## Development 🛠️
 

package/dist/changesets/cli.d.ts

@@ -0,0 +1 @@
+export declare function runChangesetsCli(arguments_: string[]): Promise<void>;

package/dist/changesets/cli.js

@@ -0,0 +1,14 @@
+import { checkChangesets } from './index.js';
+export async function runChangesetsCli(arguments_) {
+    if (arguments_.length !== 1 || arguments_[0] !== 'check') {
+        console.error('usage: ras changesets check');
+        process.exitCode = 2;
+        return;
+    }
+    const errors = await checkChangesets(process.cwd());
+    for (const message of errors)
+        console.error(message);
+    if (errors.length > 0)
+        process.exitCode = 1;
+}
+//# sourceMappingURL=cli.js.map

package/dist/changesets/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/changesets/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAoB;IACzD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACzD,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAC5C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACnD,KAAK,MAAM,OAAO,IAAI,MAAM;QAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AAC7C,CAAC","sourcesContent":["import { checkChangesets } from './index.js'\n\nexport async function runChangesetsCli(arguments_: string[]): Promise<void> {\n  if (arguments_.length !== 1 || arguments_[0] !== 'check') {\n    console.error('usage: ras changesets check')\n    process.exitCode = 2\n    return\n  }\n  const errors = await checkChangesets(process.cwd())\n  for (const message of errors) console.error(message)\n  if (errors.length > 0) process.exitCode = 1\n}\n"]}

package/dist/{policy/changesets.js → changesets/index.js}

@@ -34,4 +34,4 @@ export async function checkChangesets(root) {
     }
     return errors;
 }
-//# sourceMappingURL=changesets.js.map
+//# sourceMappingURL=index.js.map

package/dist/changesets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/changesets/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QAC3F,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACtC,MAAM,KAAK,CAAA;IACb,CAAC,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1E,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,cAAc,IAAI,EAAE,CAAA;QACjC,iFAAiF;QACjF,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;QACzD,IAAI,QAAQ,CAAA;QACZ,IAAI,CAAC;YACH,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAA;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAA;YACtD,SAAQ;QACV,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["import { parseChangesetFile } from '@changesets/parse'\nimport { getPackages } from '@manypkg/get-packages'\nimport { readdir, readFile } from 'node:fs/promises'\nimport { join } from 'node:path'\n\nexport async function checkChangesets(root: string): Promise<string[]> {\n  const files = await readdir(join(root, '.changeset')).catch((error: NodeJS.ErrnoException) => {\n    if (error.code === 'ENOENT') return []\n    throw error\n  })\n  const changesets = files.filter((file) => file.endsWith('.md') && file !== 'README.md').toSorted()\n  if (changesets.length === 0) return []\n  const { packages } = await getPackages(root)\n  const names = new Set(packages.map(({ packageJson }) => packageJson.name))\n  const errors: string[] = []\n  for (const file of changesets) {\n    const path = `.changeset/${file}`\n    // Read serially so a large changeset directory does not open every file at once.\n    // oxlint-disable-next-line no-await-in-loop\n    const contents = await readFile(join(root, path), 'utf8')\n    let releases\n    try {\n      releases = parseChangesetFile(contents).releases\n    } catch {\n      errors.push(`${path}: missing or invalid frontmatter`)\n      continue\n    }\n    for (const { name } of releases) {\n      if (!names.has(name)) errors.push(`${path}: unknown package ${JSON.stringify(name)}`)\n    }\n  }\n  return errors\n}\n"]}

package/dist/cli.d.ts

@@ -1,15 +1,11 @@
 #!/usr/bin/env node
 import { runAssetsCli } from './build/cli.js';
-import { runCreateCli } from './create/index.js';
-import { runInitCli } from './policy/init-cli.js';
-import { runPolicyCli } from './policy/cli.js';
+import { runChangesetsCli } from './changesets/cli.js';
 import { runPreviewCli } from './preview/cli.js';
 import { runRealtimeCli } from './runtime/dev-cli.js';
 declare const commands: {
     readonly assets: typeof runAssetsCli;
-    readonly create: typeof runCreateCli;
-    readonly init: typeof runInitCli;
-    readonly policy: typeof runPolicyCli;
+    readonly changesets: typeof runChangesetsCli;
     readonly preview: typeof runPreviewCli;
     readonly realtime: typeof runRealtimeCli;
 };

package/dist/cli.js

@@ -1,15 +1,11 @@
 #!/usr/bin/env node
 import { runAssetsCli } from './build/cli.js';
-import { runCreateCli } from './create/index.js';
-import { runInitCli } from './policy/init-cli.js';
-import { runPolicyCli } from './policy/cli.js';
+import { runChangesetsCli } from './changesets/cli.js';
 import { runPreviewCli } from './preview/cli.js';
 import { runRealtimeCli } from './runtime/dev-cli.js';
 const commands = {
     assets: runAssetsCli,
-    create: runCreateCli,
-    init: runInitCli,
-    policy: runPolicyCli,
+    changesets: runChangesetsCli,
     preview: runPreviewCli,
     realtime: runRealtimeCli,
 };
@@ -22,7 +18,7 @@ export function parseRasCommand(arguments_) {
 export async function runRasCli(arguments_) {
     const parsed = parseRasCommand(arguments_);
     if (!parsed) {
-        console.error('usage: ras <assets|create|init|policy|preview|realtime> [arguments]');
+        console.error('usage: ras <assets|changesets|preview|realtime> [arguments]');
         process.exitCode = 2;
         return;
     }

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,QAAQ,GAAG;IACf,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,cAAc;CAChB,CAAA;AAIV,MAAM,UAAU,eAAe,CAAC,UAAoB;IAClD,MAAM,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,GAAG,UAAU,CAAA;IAC9C,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACpE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,OAAqB,EAAE,CAAA;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAoB;IAClD,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAA;QACpF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IACD,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;AAClD,CAAC;AAED,IAAI,OAAO,IAAI,CAAC,IAAI;IAAE,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA","sourcesContent":["#!/usr/bin/env node\nimport { runAssetsCli } from './build/cli.js'\nimport { runCreateCli } from './create/index.js'\nimport { runInitCli } from './policy/init-cli.js'\nimport { runPolicyCli } from './policy/cli.js'\nimport { runPreviewCli } from './preview/cli.js'\nimport { runRealtimeCli } from './runtime/dev-cli.js'\n\nconst commands = {\n  assets: runAssetsCli,\n  create: runCreateCli,\n  init: runInitCli,\n  policy: runPolicyCli,\n  preview: runPreviewCli,\n  realtime: runRealtimeCli,\n} as const\n\nexport type RasCommand = keyof typeof commands\n\nexport function parseRasCommand(arguments_: string[]): { arguments: string[]; command: RasCommand } | undefined {\n  const [command, ...argumentsRest] = arguments_\n  if (!(command && Object.hasOwn(commands, command))) return undefined\n  return { arguments: argumentsRest, command: command as RasCommand }\n}\n\nexport async function runRasCli(arguments_: string[]): Promise<void> {\n  const parsed = parseRasCommand(arguments_)\n  if (!parsed) {\n    console.error('usage: ras <assets|create|init|policy|preview|realtime> [arguments]')\n    process.exitCode = 2\n    return\n  }\n  await commands[parsed.command](parsed.arguments)\n}\n\nif (import.meta.main) await runRasCli(process.argv.slice(2))\n"]}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,QAAQ,GAAG;IACf,MAAM,EAAE,YAAY;IACpB,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,cAAc;CAChB,CAAA;AAIV,MAAM,UAAU,eAAe,CAAC,UAAoB;IAClD,MAAM,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,GAAG,UAAU,CAAA;IAC9C,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACpE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,OAAqB,EAAE,CAAA;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAoB;IAClD,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IACD,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;AAClD,CAAC;AAED,IAAI,OAAO,IAAI,CAAC,IAAI;IAAE,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA","sourcesContent":["#!/usr/bin/env node\nimport { runAssetsCli } from './build/cli.js'\nimport { runChangesetsCli } from './changesets/cli.js'\nimport { runPreviewCli } from './preview/cli.js'\nimport { runRealtimeCli } from './runtime/dev-cli.js'\n\nconst commands = {\n  assets: runAssetsCli,\n  changesets: runChangesetsCli,\n  preview: runPreviewCli,\n  realtime: runRealtimeCli,\n} as const\n\nexport type RasCommand = keyof typeof commands\n\nexport function parseRasCommand(arguments_: string[]): { arguments: string[]; command: RasCommand } | undefined {\n  const [command, ...argumentsRest] = arguments_\n  if (!(command && Object.hasOwn(commands, command))) return undefined\n  return { arguments: argumentsRest, command: command as RasCommand }\n}\n\nexport async function runRasCli(arguments_: string[]): Promise<void> {\n  const parsed = parseRasCommand(arguments_)\n  if (!parsed) {\n    console.error('usage: ras <assets|changesets|preview|realtime> [arguments]')\n    process.exitCode = 2\n    return\n  }\n  await commands[parsed.command](parsed.arguments)\n}\n\nif (import.meta.main) await runRasCli(process.argv.slice(2))\n"]}

package/dist/email/index.d.ts

@@ -1,4 +1,3 @@
-import nodemailer from 'nodemailer';
 export type EmailMessage = {
     to: string;
     subject: string;
@@ -46,7 +45,7 @@ export declare function createAuthEmailHandler<User extends {
 }>(delivery: EmailDelivery, message: AuthEmailMessageFactory<User>): (input: AuthEmailInput<User>, request?: Request) => Promise<void>;
 export declare function smtpConfigFromEnvironment(environment?: NodeJS.ProcessEnv, keys?: SmtpEnvironmentOptions): SmtpConfig | undefined;
 export declare function createSmtpDelivery(config: SmtpConfig): EmailDelivery;
-export declare function createSmtpTransport(config: SmtpConfig): nodemailer.Transporter<import("nodemailer/lib/smtp-transport/index.js").SentMessageInfo, import("nodemailer/lib/smtp-transport/index.js").Options>;
+export declare function createSmtpTransport(config: SmtpConfig): import("nodemailer").Mail<import("nodemailer").SMTPSentMessageInfo, import("nodemailer").SMTPTransportOptions>;
 export type StandardAuthEmailOptions = {
     productName: string;
 };

package/dist/email/index.js

@@ -1,4 +1,4 @@
-import nodemailer from 'nodemailer';
+import { createTransport } from 'nodemailer';
 export function createAuthEmailHandler(delivery, message) {
     return async (input, request) => delivery.send(await message(input, request));
 }
@@ -37,7 +37,7 @@ export function createSmtpDelivery(config) {
     };
 }
 export function createSmtpTransport(config) {
-    return nodemailer.createTransport({
+    return createTransport({
         host: config.host,
         port: config.port,
         secure: config.secure,

package/dist/email/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/email/index.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,YAAY,CAAA;AAsCnC,MAAM,UAAU,sBAAsB,CACpC,QAAuB,EACvB,OAAsC;IAEtC,OAAO,KAAK,EAAE,KAA2B,EAAE,OAAiB,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;AAC/G,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,WAAW,GAAsB,OAAO,CAAC,GAAG,EAC5C,IAAI,GAA2B,EAAE;IAEjC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,CAAA;IAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,6BAA6B,CAAC,CAAA;IACpF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,YAAY,6BAA6B,CAAC,CAAA;IAErF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAA;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAA;IAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,2BAA2B,CAAC,CAAA;IAEhH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAA;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAA;IACpD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAA;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACzC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,QAAQ,WAAW,8BAA8B,CAAC,CAAA;IAErH,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM;QAClF,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAkB;IACnD,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC7C,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QACpG,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;KAC7D,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAkB;IACpD,OAAO,UAAU,CAAC,eAAe,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAC,CAAA;AACJ,CAAC;AAID,MAAM,UAAU,kBAAkB,CAChC,QAAuB,EACvB,OAAiC;IAEjC,MAAM,MAAM,GAAG,gCAAgC,CAAA;IAC/C,MAAM,OAAO,GACX,CAAC,OAAe,EAAE,KAAa,EAAiC,EAAE,CAClE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,IAAI,CAAC,KAAK;QACd,OAAO;QACP,IAAI,EAAE,GAAG,OAAO,qBAAqB,GAAG,OAAO,MAAM,EAAE;QACvD,IAAI,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,yCAAyC,UAAU,CAAC,GAAG,CAAC,KAAK,KAAK,cAAc,MAAM,MAAM;KAC5H,CAAC,CAAA;IACJ,OAAO;QACL,iBAAiB,EAAE,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,OAAO,CAAC,WAAW,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC5H,qBAAqB,EAAE,sBAAsB,CAC3C,QAAQ,EACR,OAAO,CAAC,eAAe,OAAO,CAAC,WAAW,gBAAgB,EAAE,sBAAsB,CAAC,CACpF;KACF,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AACjH,CAAC","sourcesContent":["import nodemailer from 'nodemailer'\n\nexport type EmailMessage = { to: string; subject: string; text: string; html?: string }\n\nexport type SmtpConfig = {\n  from: string\n  host: string\n  port: number\n  secure: boolean\n  user?: string\n  password?: string\n}\n\nexport type SmtpEnvironmentOptions = {\n  host?: string\n  port?: string\n  secure?: string\n  user?: string\n  password?: string\n  from?: string\n}\n\nexport type EmailDelivery = {\n  send(message: EmailMessage): Promise<void>\n  verify(): Promise<void>\n}\n\nexport type AuthEmailInput<User extends { email: string } = { email: string }> = {\n  user: User\n  url: string\n  token: string\n}\n\nexport type AuthEmailMessageFactory<User extends { email: string } = { email: string }> = (\n  input: AuthEmailInput<User>,\n  request?: Request,\n) => EmailMessage | Promise<EmailMessage>\n\nexport function createAuthEmailHandler<User extends { email: string } = { email: string }>(\n  delivery: EmailDelivery,\n  message: AuthEmailMessageFactory<User>,\n) {\n  return async (input: AuthEmailInput<User>, request?: Request) => delivery.send(await message(input, request))\n}\n\nexport function smtpConfigFromEnvironment(\n  environment: NodeJS.ProcessEnv = process.env,\n  keys: SmtpEnvironmentOptions = {},\n): SmtpConfig | undefined {\n  const host = environment[keys.host ?? 'SMTP_HOST']?.trim()\n  const from = environment[keys.from ?? 'EMAIL_FROM']?.trim()\n  if (!host && !from) return undefined\n  if (!host) throw new Error(`${keys.host ?? 'SMTP_HOST'} is required for SMTP email`)\n  if (!from) throw new Error(`${keys.from ?? 'EMAIL_FROM'} is required for SMTP email`)\n\n  const portKey = keys.port ?? 'SMTP_PORT'\n  const port = Number(environment[portKey] ?? 587)\n  if (!Number.isInteger(port) || port < 1 || port > 65_535) throw new Error(`${portKey} must be a valid TCP port`)\n\n  const userKey = keys.user ?? 'SMTP_USER'\n  const passwordKey = keys.password ?? 'SMTP_PASSWORD'\n  const user = environment[userKey]?.trim()\n  const password = environment[passwordKey]\n  if (Boolean(user) !== Boolean(password)) throw new Error(`${userKey} and ${passwordKey} must be configured together`)\n\n  return {\n    from,\n    host,\n    port,\n    secure: environment[keys.secure ?? 'SMTP_SECURE']?.trim().toLowerCase() === 'true',\n    ...(user && password ? { user, password } : {}),\n  }\n}\n\nexport function createSmtpDelivery(config: SmtpConfig): EmailDelivery {\n  const transport = createSmtpTransport(config)\n  return {\n    send: async (message) => transport.sendMail({ from: config.from, ...message }).then(() => undefined),\n    verify: async () => transport.verify().then(() => undefined),\n  }\n}\n\nexport function createSmtpTransport(config: SmtpConfig) {\n  return nodemailer.createTransport({\n    host: config.host,\n    port: config.port,\n    secure: config.secure,\n    auth: config.user ? { user: config.user, pass: config.password } : undefined,\n  })\n}\n\nexport type StandardAuthEmailOptions = { productName: string }\n\nexport function standardAuthEmails<User extends { email: string } = { email: string }>(\n  delivery: EmailDelivery,\n  options: StandardAuthEmailOptions,\n) {\n  const expiry = 'This link expires in one hour.'\n  const message =\n    (subject: string, label: string): AuthEmailMessageFactory<User> =>\n    ({ user, url }) => ({\n      to: user.email,\n      subject,\n      text: `${subject} using this link: ${url}\\n\\n${expiry}`,\n      html: `<p>${escapeHtml(subject)} using the link below.</p><p><a href=\"${escapeHtml(url)}\">${label}</a></p><p>${expiry}</p>`,\n    })\n  return {\n    sendResetPassword: createAuthEmailHandler(delivery, message(`Reset your ${options.productName} password`, 'Reset password')),\n    sendVerificationEmail: createAuthEmailHandler(\n      delivery,\n      message(`Verify your ${options.productName} email address`, 'Verify email address'),\n    ),\n  }\n}\n\nfunction escapeHtml(value: string) {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('\"', '&quot;')\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/email/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAsC5C,MAAM,UAAU,sBAAsB,CACpC,QAAuB,EACvB,OAAsC;IAEtC,OAAO,KAAK,EAAE,KAA2B,EAAE,OAAiB,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;AAC/G,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,WAAW,GAAsB,OAAO,CAAC,GAAG,EAC5C,IAAI,GAA2B,EAAE;IAEjC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,CAAA;IAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,6BAA6B,CAAC,CAAA;IACpF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,YAAY,6BAA6B,CAAC,CAAA;IAErF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAA;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAA;IAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,2BAA2B,CAAC,CAAA;IAEhH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAA;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAA;IACpD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAA;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IACzC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,QAAQ,WAAW,8BAA8B,CAAC,CAAA;IAErH,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM;QAClF,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAkB;IACnD,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC7C,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QACpG,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;KAC7D,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAkB;IACpD,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;KAC7E,CAAC,CAAA;AACJ,CAAC;AAID,MAAM,UAAU,kBAAkB,CAChC,QAAuB,EACvB,OAAiC;IAEjC,MAAM,MAAM,GAAG,gCAAgC,CAAA;IAC/C,MAAM,OAAO,GACX,CAAC,OAAe,EAAE,KAAa,EAAiC,EAAE,CAClE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,IAAI,CAAC,KAAK;QACd,OAAO;QACP,IAAI,EAAE,GAAG,OAAO,qBAAqB,GAAG,OAAO,MAAM,EAAE;QACvD,IAAI,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,yCAAyC,UAAU,CAAC,GAAG,CAAC,KAAK,KAAK,cAAc,MAAM,MAAM;KAC5H,CAAC,CAAA;IACJ,OAAO;QACL,iBAAiB,EAAE,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,OAAO,CAAC,WAAW,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC5H,qBAAqB,EAAE,sBAAsB,CAC3C,QAAQ,EACR,OAAO,CAAC,eAAe,OAAO,CAAC,WAAW,gBAAgB,EAAE,sBAAsB,CAAC,CACpF;KACF,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AACjH,CAAC","sourcesContent":["import { createTransport } from 'nodemailer'\n\nexport type EmailMessage = { to: string; subject: string; text: string; html?: string }\n\nexport type SmtpConfig = {\n  from: string\n  host: string\n  port: number\n  secure: boolean\n  user?: string\n  password?: string\n}\n\nexport type SmtpEnvironmentOptions = {\n  host?: string\n  port?: string\n  secure?: string\n  user?: string\n  password?: string\n  from?: string\n}\n\nexport type EmailDelivery = {\n  send(message: EmailMessage): Promise<void>\n  verify(): Promise<void>\n}\n\nexport type AuthEmailInput<User extends { email: string } = { email: string }> = {\n  user: User\n  url: string\n  token: string\n}\n\nexport type AuthEmailMessageFactory<User extends { email: string } = { email: string }> = (\n  input: AuthEmailInput<User>,\n  request?: Request,\n) => EmailMessage | Promise<EmailMessage>\n\nexport function createAuthEmailHandler<User extends { email: string } = { email: string }>(\n  delivery: EmailDelivery,\n  message: AuthEmailMessageFactory<User>,\n) {\n  return async (input: AuthEmailInput<User>, request?: Request) => delivery.send(await message(input, request))\n}\n\nexport function smtpConfigFromEnvironment(\n  environment: NodeJS.ProcessEnv = process.env,\n  keys: SmtpEnvironmentOptions = {},\n): SmtpConfig | undefined {\n  const host = environment[keys.host ?? 'SMTP_HOST']?.trim()\n  const from = environment[keys.from ?? 'EMAIL_FROM']?.trim()\n  if (!host && !from) return undefined\n  if (!host) throw new Error(`${keys.host ?? 'SMTP_HOST'} is required for SMTP email`)\n  if (!from) throw new Error(`${keys.from ?? 'EMAIL_FROM'} is required for SMTP email`)\n\n  const portKey = keys.port ?? 'SMTP_PORT'\n  const port = Number(environment[portKey] ?? 587)\n  if (!Number.isInteger(port) || port < 1 || port > 65_535) throw new Error(`${portKey} must be a valid TCP port`)\n\n  const userKey = keys.user ?? 'SMTP_USER'\n  const passwordKey = keys.password ?? 'SMTP_PASSWORD'\n  const user = environment[userKey]?.trim()\n  const password = environment[passwordKey]\n  if (Boolean(user) !== Boolean(password)) throw new Error(`${userKey} and ${passwordKey} must be configured together`)\n\n  return {\n    from,\n    host,\n    port,\n    secure: environment[keys.secure ?? 'SMTP_SECURE']?.trim().toLowerCase() === 'true',\n    ...(user && password ? { user, password } : {}),\n  }\n}\n\nexport function createSmtpDelivery(config: SmtpConfig): EmailDelivery {\n  const transport = createSmtpTransport(config)\n  return {\n    send: async (message) => transport.sendMail({ from: config.from, ...message }).then(() => undefined),\n    verify: async () => transport.verify().then(() => undefined),\n  }\n}\n\nexport function createSmtpTransport(config: SmtpConfig) {\n  return createTransport({\n    host: config.host,\n    port: config.port,\n    secure: config.secure,\n    auth: config.user ? { user: config.user, pass: config.password } : undefined,\n  })\n}\n\nexport type StandardAuthEmailOptions = { productName: string }\n\nexport function standardAuthEmails<User extends { email: string } = { email: string }>(\n  delivery: EmailDelivery,\n  options: StandardAuthEmailOptions,\n) {\n  const expiry = 'This link expires in one hour.'\n  const message =\n    (subject: string, label: string): AuthEmailMessageFactory<User> =>\n    ({ user, url }) => ({\n      to: user.email,\n      subject,\n      text: `${subject} using this link: ${url}\\n\\n${expiry}`,\n      html: `<p>${escapeHtml(subject)} using the link below.</p><p><a href=\"${escapeHtml(url)}\">${label}</a></p><p>${expiry}</p>`,\n    })\n  return {\n    sendResetPassword: createAuthEmailHandler(delivery, message(`Reset your ${options.productName} password`, 'Reset password')),\n    sendVerificationEmail: createAuthEmailHandler(\n      delivery,\n      message(`Verify your ${options.productName} email address`, 'Verify email address'),\n    ),\n  }\n}\n\nfunction escapeHtml(value: string) {\n  return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('\"', '&quot;')\n}\n"]}

package/dist/posthog/index.d.ts

@@ -1,6 +1,4 @@
 export { postHogEnvironment, postHogHttpUrl } from './config.js';
 export type { PostHogBrowserService, PostHogEnvironment } from './config.js';
-export { definePostHogCoverage } from './coverage.js';
-export type { PostHogCoverage, PostHogCoverageDecision } from './coverage.js';
 export { POSTHOG_DISTINCT_ID_HEADER, POSTHOG_SESSION_ID_HEADER, postHogRequestContext } from './request.js';
 export type { PostHogRequestContext, PostHogRequestContextOptions } from './request.js';

package/dist/posthog/index.js

@@ -1,4 +1,3 @@
 export { postHogEnvironment, postHogHttpUrl } from './config.js';
-export { definePostHogCoverage } from './coverage.js';
 export { POSTHOG_DISTINCT_ID_HEADER, POSTHOG_SESSION_ID_HEADER, postHogRequestContext } from './request.js';
 //# sourceMappingURL=index.js.map

package/dist/posthog/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/posthog/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEhE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAErD,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA","sourcesContent":["export { postHogEnvironment, postHogHttpUrl } from './config.js'\nexport type { PostHogBrowserService, PostHogEnvironment } from './config.js'\nexport { definePostHogCoverage } from './coverage.js'\nexport type { PostHogCoverage, PostHogCoverageDecision } from './coverage.js'\nexport { POSTHOG_DISTINCT_ID_HEADER, POSTHOG_SESSION_ID_HEADER, postHogRequestContext } from './request.js'\nexport type { PostHogRequestContext, PostHogRequestContextOptions } from './request.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/posthog/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEhE,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA","sourcesContent":["export { postHogEnvironment, postHogHttpUrl } from './config.js'\nexport type { PostHogBrowserService, PostHogEnvironment } from './config.js'\nexport { POSTHOG_DISTINCT_ID_HEADER, POSTHOG_SESSION_ID_HEADER, postHogRequestContext } from './request.js'\nexport type { PostHogRequestContext, PostHogRequestContextOptions } from './request.js'\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ras-stack",
-  "version": "2.0.2",
+  "version": "3.0.1",
   "description": "Composable full-stack primitives shared across Richard Solomou's applications.",
   "keywords": [
     "authentication",
@@ -21,8 +21,7 @@
     "ras": "./dist/cli.js"
   },
   "files": [
-    "dist",
-    "config"
+    "dist"
   ],
   "type": "module",
   "sideEffects": false,
@@ -63,14 +62,6 @@
       "types": "./dist/conformance/index.d.ts",
       "default": "./dist/conformance/index.js"
     },
-    "./create": {
-      "types": "./dist/create/index.d.ts",
-      "default": "./dist/create/index.js"
-    },
-    "./policy": {
-      "types": "./dist/policy/index.d.ts",
-      "default": "./dist/policy/index.js"
-    },
     "./posthog": {
       "types": "./dist/posthog/index.d.ts",
       "default": "./dist/posthog/index.js"
@@ -119,10 +110,6 @@
       "types": "./dist/runtime/index.d.ts",
       "default": "./dist/runtime/index.js"
     },
-    "./tanstack/query": {
-      "types": "./dist/tanstack/query.d.ts",
-      "default": "./dist/tanstack/query.js"
-    },
     "./tanstack/middleware": {
       "types": "./dist/tanstack/middleware.d.ts",
       "default": "./dist/tanstack/middleware.js"
@@ -135,27 +122,17 @@
       "types": "./dist/uploads/index.d.ts",
       "default": "./dist/uploads/index.js"
     },
-    "./config/oxlint": "./config/oxlint.json",
-    "./config/oxlint/application": "./config/oxlint/application.json",
-    "./config/oxlint/tanstack": "./config/oxlint/tanstack.json",
-    "./config/typescript/base": "./config/typescript/base.json",
-    "./config/typescript/browser": "./config/typescript/browser.json",
-    "./config/typescript/bundler": "./config/typescript/bundler.json",
-    "./config/typescript/library": "./config/typescript/library.json",
-    "./config/typescript/node-bundler": "./config/typescript/node-bundler.json",
-    "./config/typescript/tanstack": "./config/typescript/tanstack.json",
-    "./config/oxlint/domain": "./config/oxlint/domain.json",
-    "./config/oxlint/layers": "./config/oxlint/layers.json"
+    "./changesets": {
+      "types": "./dist/changesets/index.d.ts",
+      "default": "./dist/changesets/index.js"
+    }
   },
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
     "@changesets/parse": "1.0.0",
-    "@inquirer/confirm": "^6.1.1",
-    "@inquirer/select": "^5.2.1",
-    "@manypkg/get-packages": "3.1.0",
-    "yaml": "^2.8.2"
+    "@manypkg/get-packages": "3.1.0"
   },
   "devDependencies": {
     "@opentelemetry/api-logs": "^0.221.0",
@@ -163,7 +140,6 @@
     "@opentelemetry/resources": "^2.10.0",
     "@opentelemetry/sdk-logs": "^0.221.0",
     "@posthog/react": "1.10.6",
-    "@tanstack/react-query": "^5.101.4",
     "@tanstack/react-start": "^1.168.32",
     "@types/better-sqlite3": "9.6.0",
     "@types/node": "^26.2.0",
@@ -174,7 +150,7 @@
     "better-sqlite3": "12.11.1",
     "centrifuge": "5.7.1",
     "drizzle-orm": "0.45.2",
-    "nodemailer": "^9.0.3",
+    "nodemailer": "^10.0.11",
     "oxfmt": "^0.63.0",
     "oxlint": "^1.74.0",
     "oxlint-tsgolint": "^7.0.2001",
@@ -186,7 +162,9 @@
     "tus-js-client": "^4.3.1",
     "typescript": "^7.0.2",
     "vite": "8.2.1",
-    "vitest": "^4.1.10"
+    "vitest": "^4.1.10",
+    "yaml": "^2.8.2",
+    "ras-stack-config": "1.0.0"
   },
   "peerDependencies": {
     "@opentelemetry/api-logs": "^0.221.0",
@@ -194,12 +172,11 @@
     "@opentelemetry/resources": "^2.10.0",
     "@opentelemetry/sdk-logs": "^0.221.0",
     "@posthog/react": ">=1.1 <2",
-    "@tanstack/react-query": ">=5.62.8 <6",
     "@tanstack/react-start": ">=1.168.10 <2",
     "better-sqlite3": ">=12 <14",
     "centrifuge": ">=5 <6",
     "drizzle-orm": ">=0.45 <1",
-    "nodemailer": ">=9 <10",
+    "nodemailer": ">=9 <11",
     "postgres": ">=3.4 <4",
     "posthog-js": ">=1.430.3 <2",
     "posthog-node": ">=5.52 <6",
@@ -222,9 +199,6 @@
     "@posthog/react": {
       "optional": true
     },
-    "@tanstack/react-query": {
-      "optional": true
-    },
     "@tanstack/react-start": {
       "optional": true
     },
@@ -260,8 +234,7 @@
     "node": ">=24 <25"
   },
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.build.json && node scripts/copyStarter.mjs",
-    "config:check": "tsc -p test/config-consumer/tsconfig.json && tsc -p test/config-consumer/tsconfig-bundler.json && tsc -p test/config-consumer/tsconfig-node-bundler.json && tsc -p test/config-consumer/tsconfig-library.json && oxlint --config config/oxlint/application.json --print-config > /dev/null && oxlint --config config/oxlint/tanstack.json --print-config > /dev/null",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
     "typecheck": "tsc --noEmit",
     "lint": "oxlint --type-aware --deny-warnings .",
     "format": "oxfmt --write .",
@@ -270,6 +243,6 @@
     "package:check": "node scripts/checkPackedPackage.mjs",
     "peer:floor": "node scripts/checkPeerFloor.mjs",
     "runtime:pin": "node scripts/checkRuntimePin.mjs",
-    "check": "pnpm format:check && pnpm lint && pnpm config:check && pnpm typecheck && pnpm test && pnpm build && pnpm package:check"
+    "check": "pnpm format:check && pnpm lint && pnpm typecheck && pnpm test && pnpm build && pnpm package:check"
   }
 }

package/config/oxlint/application.json

@@ -1,16 +0,0 @@
-{
-  "extends": ["../oxlint.json"],
-  "rules": {
-    "no-console": "off",
-    "no-await-in-loop": "off",
-    "no-underscore-dangle": "off",
-    "unicorn/require-post-message-target-origin": "off",
-    "vitest/require-to-throw-message": "off",
-    "vitest/no-conditional-expect": "off",
-    "unicorn/no-array-sort": "off",
-    "oxc/no-map-spread": "off",
-    "unicorn/consistent-function-scoping": "off",
-    "unicorn/prefer-add-event-listener": "off",
-    "typescript/no-unnecessary-type-parameters": "off"
-  }
-}

package/config/oxlint/domain.json

@@ -1,29 +0,0 @@
-{
-  "overrides": [
-    {
-      "files": ["src/core/**", "src/geometry/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:node:|(?:assert|async_hooks|buffer|child_process|cluster|console|constants|crypto|dgram|diagnostics_channel|dns|domain|events|fs|http|http2|https|inspector|module|net|os|path|perf_hooks|process|punycode|querystring|readline|repl|stream|string_decoder|sys|timers|tls|trace_events|tty|url|util|v8|vm|wasi|worker_threads|zlib)(?:/|$))",
-                "message": "Domain modules must not import Node builtins."
-              },
-              {
-                "regex": "^(@tanstack/|react(?:/|-|$)|@testing-library/|drizzle-orm(?:/|$)|postgres(?:/|$)|iovalkey(?:/|$)|ioredis(?:/|$)|@electric-sql/|better-auth(?:/|$)|cheerio(?:/|$)|html-to-text(?:/|$)|centrifuge(?:/|$)|posthog-(?:js|node)(?:/|$))",
-                "message": "Domain modules must not import framework or persistence dependencies."
-              },
-              {
-                "regex": "^(?:(?:\\.\\.?/)+|@/)(?:adapters|client|components|db|lib|routes|server)/",
-                "message": "Domain modules must not import application layers."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    }
-  ]
-}

package/config/oxlint/layers.json

@@ -1,116 +0,0 @@
-{
-  "overrides": [
-    {
-      "files": ["src/routes/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:\\./[^.]|(?:\\.\\./)+routes/|@/routes/)",
-                "message": "Route modules must not import sibling route modules."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    },
-    {
-      "files": ["src/server/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:(?:\\.\\.?/)+|@/)(?:client|routes)/",
-                "message": "Server modules must not import client or route modules."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    },
-    {
-      "files": ["src/client/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "group": [
-                  "**/adapters/**",
-                  "**/db/**",
-                  "**/routes/**",
-                  "**/server/**",
-                  "!**/server/functions",
-                  "!**/server/functions.*",
-                  "!**/server/functions/**",
-                  "!**/server/fns",
-                  "!**/server/fns.*"
-                ],
-                "message": "Client modules may import server functions, but not server implementations."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    },
-    {
-      "files": ["src/contracts/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:(?:\\.\\.?/)+|@/)(?:adapters|client|components|db|lib|routes|server)/",
-                "message": "Shared contracts must not import application layers."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    },
-    {
-      "files": ["src/adapters/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:(?:\\.\\.?/)+|@/)(?:client|db|routes|server)/",
-                "message": "Adapters must not import application layers."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    },
-    {
-      "files": ["src/db/**"],
-      "rules": {
-        "no-restricted-imports": [
-          "error",
-          {
-            "patterns": [
-              {
-                "regex": "^(?:(?:\\.\\.?/)+|@/)(?:adapters|client|routes|server)/",
-                "message": "Database modules must not import application layers."
-              }
-            ]
-          }
-        ]
-      },
-      "excludeFiles": ["**/*.test.*", "**/*.spec.*"]
-    }
-  ]
-}

package/config/oxlint/tanstack.json

@@ -1,4 +0,0 @@
-{
-  "extends": ["../oxlint.json"],
-  "ignorePatterns": ["src/routeTree.gen.ts", ".output/**", "node_modules/**"]
-}