@aurabase/aurabase-js 0.3.0

package/packages/aurabase/dist/index.js

@@ -0,0 +1,177 @@
+import { DEFAULT_MAX_RETRIES, BaseAuthStore, LocalAuthStore } from '@aurabase/core';
+export { AuraError, BaseAuthStore, LocalAuthStore, isAuraError } from '@aurabase/core';
+import { AuthService, AuthAdminService } from '@aurabase/auth';
+export { AuthAdminService, AuthService, isMfaChallenge } from '@aurabase/auth';
+import { DatabaseService } from '@aurabase/db';
+export { DatabaseService, QueryBuilder } from '@aurabase/db';
+import { StorageService } from '@aurabase/storage';
+export { StorageService } from '@aurabase/storage';
+import { RealtimeService } from '@aurabase/realtime';
+export { AuraChannel, RealtimeService } from '@aurabase/realtime';
+import { FunctionsService } from '@aurabase/functions';
+export { FunctionsService } from '@aurabase/functions';
+import { AiService } from '@aurabase/ai';
+export { AiService } from '@aurabase/ai';
+import { NotificationsService } from '@aurabase/notifications';
+export { NotificationsAdminService, NotificationsService } from '@aurabase/notifications';
+
+// src/AuraClient.ts
+function isBrowserContext() {
+  if (typeof window !== "undefined") return true;
+  const g = globalThis;
+  if (typeof g.DedicatedWorkerGlobalScope !== "undefined") return true;
+  if (typeof g.SharedWorkerGlobalScope !== "undefined") return true;
+  return false;
+}
+var SERVICE_ROLE_KEY_PREFIX = "aura_sk_";
+var AuraClient = class {
+  baseUrl;
+  projectId;
+  apiKey;
+  fetchFn;
+  authStore;
+  retryConfig;
+  /** Timeout par défaut (ms) des requêtes JSON sans signal. `undefined` → défaut core (30s). */
+  requestTimeoutMs;
+  /** Hook d'observabilité (LOT 3) — voir `AuraClientOptions.onEvent`. */
+  onEvent;
+  /** Journalise chaque `AuraObservabilityEvent` via `console.debug` — voir `AuraClientOptions.debug`. */
+  debug;
+  // Lazy-initialised service instances
+  _auth = null;
+  _db = null;
+  _storage = null;
+  _realtime = null;
+  _functions = null;
+  _ai = null;
+  _notifications = null;
+  _authAdmin = null;
+  _disposed = false;
+  _persistSession;
+  _autoRefresh;
+  _detectSessionInUrl;
+  constructor(baseUrl, projectId, apiKeyOrOptions, options) {
+    this.baseUrl = baseUrl.replace(/\/+$/, "");
+    this.projectId = projectId;
+    const resolvedOptions = typeof apiKeyOrOptions === "string" ? options : apiKeyOrOptions;
+    this.apiKey = typeof apiKeyOrOptions === "string" ? apiKeyOrOptions : apiKeyOrOptions?.apiKey ?? null;
+    this.fetchFn = resolvedOptions?.fetch ?? globalThis.fetch.bind(globalThis);
+    const r = resolvedOptions?.retry;
+    this.retryConfig = r === false ? { enabled: false, maxRetries: 0 } : r === void 0 || r === true ? { enabled: true, maxRetries: DEFAULT_MAX_RETRIES } : { enabled: r.enabled ?? true, maxRetries: r.maxRetries ?? DEFAULT_MAX_RETRIES };
+    this.requestTimeoutMs = resolvedOptions?.requestTimeoutMs;
+    this.onEvent = resolvedOptions?.onEvent;
+    this.debug = resolvedOptions?.debug;
+    if (!this.apiKey && typeof console !== "undefined") {
+      console.warn(
+        "[aurabase] No API key provided. Most operations require an API key (apikey header). Only public auth routes (register, login, refresh) will work without one."
+      );
+    }
+    if (this.apiKey?.startsWith(SERVICE_ROLE_KEY_PREFIX) && isBrowserContext()) {
+      const refuse = resolvedOptions?.refuseServiceRoleInBrowser ?? true;
+      const message = "[aurabase] S\xC9CURIT\xC9 : une cl\xE9 service_role (aura_sk_\u2026) est fournie \xE0 createClient() dans un contexte navigateur. Cette cl\xE9 \xE0 privil\xE8ges \xE9lev\xE9s NE DOIT JAMAIS \xEAtre expos\xE9e c\xF4t\xE9 client (elle fuiterait dans le bundle). Utilisez une cl\xE9 anon (aura_anon_\u2026) c\xF4t\xE9 client, et createAdminClient() c\xF4t\xE9 serveur pour les op\xE9rations d'administration.";
+      if (refuse) {
+        throw new Error(message);
+      } else if (typeof console !== "undefined") {
+        console.warn(message);
+      }
+    }
+    if (resolvedOptions?.auth?.storage) {
+      this.authStore = resolvedOptions.auth.storage;
+    } else if (resolvedOptions?.auth?.persistSession === false) {
+      this.authStore = new BaseAuthStore();
+    } else if (typeof localStorage !== "undefined") {
+      this.authStore = new LocalAuthStore();
+    } else {
+      this.authStore = new BaseAuthStore();
+    }
+    this.authStore.setObservabilityHook(this.onEvent, this.debug);
+    this._persistSession = resolvedOptions?.auth?.persistSession !== false;
+    this._autoRefresh = resolvedOptions?.auth?.autoRefresh ?? true;
+    this._detectSessionInUrl = resolvedOptions?.auth?.detectSessionInUrl;
+    if (this._autoRefresh && this._persistSession && typeof window !== "undefined") {
+      void this.auth;
+    }
+  }
+  /**
+   * Démonte le client : arrête le refresh proactif (ticker + visibilité + BroadcastChannel),
+   * déconnecte le realtime, vide les listeners d'auth. Idempotent. À appeler en teardown
+   * (React Strict Mode / HMR / tests).
+   */
+  dispose() {
+    if (this._disposed) return;
+    this._disposed = true;
+    this._auth?.dispose();
+    this._realtime?.disconnect();
+  }
+  // -- Lazy service getters ---------------------------------------------------
+  get auth() {
+    if (!this._auth) {
+      this._auth = new AuthService(this, {
+        autoRefresh: this._autoRefresh,
+        persistSession: this._persistSession,
+        detectSessionInUrl: this._detectSessionInUrl
+      });
+    }
+    return this._auth;
+  }
+  get authAdmin() {
+    if (isBrowserContext()) {
+      throw new Error(
+        "[aurabase] S\xC9CURIT\xC9 : authAdmin est inaccessible dans un contexte navigateur. L'API admin requiert une cl\xE9 service_role qui ne doit JAMAIS \xEAtre expos\xE9e c\xF4t\xE9 client (elle fuiterait dans le bundle). Utilisez createAdminClient() c\xF4t\xE9 serveur uniquement."
+      );
+    }
+    if (!this._authAdmin) this._authAdmin = new AuthAdminService(this);
+    return this._authAdmin;
+  }
+  get db() {
+    if (!this._db) this._db = new DatabaseService(this);
+    return this._db;
+  }
+  get storage() {
+    if (!this._storage) this._storage = new StorageService(this);
+    return this._storage;
+  }
+  get realtime() {
+    if (!this._realtime) this._realtime = new RealtimeService(this);
+    return this._realtime;
+  }
+  get functions() {
+    if (!this._functions) this._functions = new FunctionsService(this);
+    return this._functions;
+  }
+  get ai() {
+    if (!this._ai) this._ai = new AiService(this);
+    return this._ai;
+  }
+  get notifications() {
+    if (!this._notifications) this._notifications = new NotificationsService(this);
+    return this._notifications;
+  }
+  /**
+   * Shortcut: create a realtime channel with Supabase-compatible API.
+   * Equivalent to `aura.realtime.channel(name)`.
+   *
+   * @example
+   * ```ts
+   * const channel = aura.channel('room-1')
+   *   .on('postgres_changes', { event: 'INSERT', schema: 'public', table: 'messages' }, cb)
+   *   .subscribe()
+   * ```
+   */
+  channel(name, options) {
+    return this.realtime.channel(name, options);
+  }
+};
+function createClient(baseUrl, projectId, apiKeyOrOptions, options) {
+  return new AuraClient(baseUrl, projectId, apiKeyOrOptions, options);
+}
+function createAdminClient(baseUrl, projectId, serviceRoleKey, options) {
+  if (isBrowserContext()) {
+    throw new Error(
+      "[aurabase] createAdminClient() ne doit jamais \xEAtre appel\xE9 c\xF4t\xE9 navigateur : la cl\xE9 service_role serait expos\xE9e dans le bundle. \xC0 utiliser uniquement c\xF4t\xE9 serveur."
+    );
+  }
+  return new AuraClient(baseUrl, projectId, serviceRoleKey, options);
+}
+
+export { AuraClient, createAdminClient, createClient };

package/packages/aurabase/dist/ssr.cjs

@@ -0,0 +1,224 @@
+'use strict';
+
+var core = require('@aurabase/core');
+var auth = require('@aurabase/auth');
+var db = require('@aurabase/db');
+var storage = require('@aurabase/storage');
+var realtime = require('@aurabase/realtime');
+var functions = require('@aurabase/functions');
+var ai = require('@aurabase/ai');
+var notifications = require('@aurabase/notifications');
+
+// src/AuraClient.ts
+function isBrowserContext() {
+  if (typeof window !== "undefined") return true;
+  const g = globalThis;
+  if (typeof g.DedicatedWorkerGlobalScope !== "undefined") return true;
+  if (typeof g.SharedWorkerGlobalScope !== "undefined") return true;
+  return false;
+}
+var SERVICE_ROLE_KEY_PREFIX = "aura_sk_";
+var AuraClient = class {
+  baseUrl;
+  projectId;
+  apiKey;
+  fetchFn;
+  authStore;
+  retryConfig;
+  /** Timeout par défaut (ms) des requêtes JSON sans signal. `undefined` → défaut core (30s). */
+  requestTimeoutMs;
+  /** Hook d'observabilité (LOT 3) — voir `AuraClientOptions.onEvent`. */
+  onEvent;
+  /** Journalise chaque `AuraObservabilityEvent` via `console.debug` — voir `AuraClientOptions.debug`. */
+  debug;
+  // Lazy-initialised service instances
+  _auth = null;
+  _db = null;
+  _storage = null;
+  _realtime = null;
+  _functions = null;
+  _ai = null;
+  _notifications = null;
+  _authAdmin = null;
+  _disposed = false;
+  _persistSession;
+  _autoRefresh;
+  _detectSessionInUrl;
+  constructor(baseUrl, projectId, apiKeyOrOptions, options) {
+    this.baseUrl = baseUrl.replace(/\/+$/, "");
+    this.projectId = projectId;
+    const resolvedOptions = typeof apiKeyOrOptions === "string" ? options : apiKeyOrOptions;
+    this.apiKey = typeof apiKeyOrOptions === "string" ? apiKeyOrOptions : apiKeyOrOptions?.apiKey ?? null;
+    this.fetchFn = resolvedOptions?.fetch ?? globalThis.fetch.bind(globalThis);
+    const r = resolvedOptions?.retry;
+    this.retryConfig = r === false ? { enabled: false, maxRetries: 0 } : r === void 0 || r === true ? { enabled: true, maxRetries: core.DEFAULT_MAX_RETRIES } : { enabled: r.enabled ?? true, maxRetries: r.maxRetries ?? core.DEFAULT_MAX_RETRIES };
+    this.requestTimeoutMs = resolvedOptions?.requestTimeoutMs;
+    this.onEvent = resolvedOptions?.onEvent;
+    this.debug = resolvedOptions?.debug;
+    if (!this.apiKey && typeof console !== "undefined") {
+      console.warn(
+        "[aurabase] No API key provided. Most operations require an API key (apikey header). Only public auth routes (register, login, refresh) will work without one."
+      );
+    }
+    if (this.apiKey?.startsWith(SERVICE_ROLE_KEY_PREFIX) && isBrowserContext()) {
+      const refuse = resolvedOptions?.refuseServiceRoleInBrowser ?? true;
+      const message = "[aurabase] S\xC9CURIT\xC9 : une cl\xE9 service_role (aura_sk_\u2026) est fournie \xE0 createClient() dans un contexte navigateur. Cette cl\xE9 \xE0 privil\xE8ges \xE9lev\xE9s NE DOIT JAMAIS \xEAtre expos\xE9e c\xF4t\xE9 client (elle fuiterait dans le bundle). Utilisez une cl\xE9 anon (aura_anon_\u2026) c\xF4t\xE9 client, et createAdminClient() c\xF4t\xE9 serveur pour les op\xE9rations d'administration.";
+      if (refuse) {
+        throw new Error(message);
+      } else if (typeof console !== "undefined") {
+        console.warn(message);
+      }
+    }
+    if (resolvedOptions?.auth?.storage) {
+      this.authStore = resolvedOptions.auth.storage;
+    } else if (resolvedOptions?.auth?.persistSession === false) {
+      this.authStore = new core.BaseAuthStore();
+    } else if (typeof localStorage !== "undefined") {
+      this.authStore = new core.LocalAuthStore();
+    } else {
+      this.authStore = new core.BaseAuthStore();
+    }
+    this.authStore.setObservabilityHook(this.onEvent, this.debug);
+    this._persistSession = resolvedOptions?.auth?.persistSession !== false;
+    this._autoRefresh = resolvedOptions?.auth?.autoRefresh ?? true;
+    this._detectSessionInUrl = resolvedOptions?.auth?.detectSessionInUrl;
+    if (this._autoRefresh && this._persistSession && typeof window !== "undefined") {
+      void this.auth;
+    }
+  }
+  /**
+   * Démonte le client : arrête le refresh proactif (ticker + visibilité + BroadcastChannel),
+   * déconnecte le realtime, vide les listeners d'auth. Idempotent. À appeler en teardown
+   * (React Strict Mode / HMR / tests).
+   */
+  dispose() {
+    if (this._disposed) return;
+    this._disposed = true;
+    this._auth?.dispose();
+    this._realtime?.disconnect();
+  }
+  // -- Lazy service getters ---------------------------------------------------
+  get auth() {
+    if (!this._auth) {
+      this._auth = new auth.AuthService(this, {
+        autoRefresh: this._autoRefresh,
+        persistSession: this._persistSession,
+        detectSessionInUrl: this._detectSessionInUrl
+      });
+    }
+    return this._auth;
+  }
+  get authAdmin() {
+    if (isBrowserContext()) {
+      throw new Error(
+        "[aurabase] S\xC9CURIT\xC9 : authAdmin est inaccessible dans un contexte navigateur. L'API admin requiert une cl\xE9 service_role qui ne doit JAMAIS \xEAtre expos\xE9e c\xF4t\xE9 client (elle fuiterait dans le bundle). Utilisez createAdminClient() c\xF4t\xE9 serveur uniquement."
+      );
+    }
+    if (!this._authAdmin) this._authAdmin = new auth.AuthAdminService(this);
+    return this._authAdmin;
+  }
+  get db() {
+    if (!this._db) this._db = new db.DatabaseService(this);
+    return this._db;
+  }
+  get storage() {
+    if (!this._storage) this._storage = new storage.StorageService(this);
+    return this._storage;
+  }
+  get realtime() {
+    if (!this._realtime) this._realtime = new realtime.RealtimeService(this);
+    return this._realtime;
+  }
+  get functions() {
+    if (!this._functions) this._functions = new functions.FunctionsService(this);
+    return this._functions;
+  }
+  get ai() {
+    if (!this._ai) this._ai = new ai.AiService(this);
+    return this._ai;
+  }
+  get notifications() {
+    if (!this._notifications) this._notifications = new notifications.NotificationsService(this);
+    return this._notifications;
+  }
+  /**
+   * Shortcut: create a realtime channel with Supabase-compatible API.
+   * Equivalent to `aura.realtime.channel(name)`.
+   *
+   * @example
+   * ```ts
+   * const channel = aura.channel('room-1')
+   *   .on('postgres_changes', { event: 'INSERT', schema: 'public', table: 'messages' }, cb)
+   *   .subscribe()
+   * ```
+   */
+  channel(name, options) {
+    return this.realtime.channel(name, options);
+  }
+};
+var MAX_CHUNK_SIZE = 3600;
+function createServerClient(baseUrl, projectId, options) {
+  const cookieName = `aura-${projectId}-auth`;
+  const store = new core.LocalAuthStore(cookieName);
+  const idxRe = new RegExp(`^${cookieName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\.(\\d+)$`);
+  const incoming = options.cookies.getAll();
+  const numbered = incoming.filter((c) => idxRe.test(c.name)).sort((a, b) => Number(a.name.match(idxRe)[1]) - Number(b.name.match(idxRe)[1]));
+  const base = incoming.find((c) => c.name === cookieName);
+  const decodedValue = numbered.length > 0 ? numbered.map((c) => c.value).join("") : base?.value;
+  if (decodedValue) {
+    store.loadFromCookie(`${cookieName}=${encodeURIComponent(decodedValue)}`);
+  }
+  const initialNames = incoming.filter((c) => c.name === cookieName || idxRe.test(c.name)).map((c) => c.name);
+  const defaultCookieOpts = {
+    path: "/",
+    secure: baseUrl.startsWith("https://"),
+    sameSite: "Lax",
+    httpOnly: true,
+    maxAge: 60 * 60 * 24 * 30,
+    // 30 days
+    ...options.cookieOptions
+  };
+  store.onChange(() => {
+    const toSet = [];
+    const used = /* @__PURE__ */ new Set();
+    if (store.token) {
+      const cookieStr = store.exportToCookie();
+      const eqIdx = cookieStr.indexOf("=");
+      const rawEncoded = eqIdx >= 0 ? cookieStr.slice(eqIdx + 1).split(";")[0] : "";
+      const decoded = rawEncoded ? decodeURIComponent(rawEncoded) : "";
+      if (decoded.length <= MAX_CHUNK_SIZE) {
+        toSet.push({ name: cookieName, value: decoded, options: defaultCookieOpts });
+        used.add(cookieName);
+      } else {
+        let idx = 0;
+        for (let i = 0; i < decoded.length; i += MAX_CHUNK_SIZE, idx++) {
+          const name = `${cookieName}.${idx}`;
+          toSet.push({ name, value: decoded.slice(i, i + MAX_CHUNK_SIZE), options: defaultCookieOpts });
+          used.add(name);
+        }
+      }
+    }
+    const expireOpts = { ...defaultCookieOpts, maxAge: 0 };
+    for (const name of initialNames) {
+      if (!used.has(name)) toSet.push({ name, value: "", options: expireOpts });
+    }
+    if (toSet.length > 0) options.cookies.setAll(toSet);
+  });
+  return new AuraClient(baseUrl, projectId, options.apiKey, {
+    auth: { persistSession: false, storage: store }
+  });
+}
+function createBrowserClient(baseUrl, projectId, apiKey, options) {
+  return new AuraClient(baseUrl, projectId, apiKey, options);
+}
+
+Object.defineProperty(exports, "parseCookieHeader", {
+  enumerable: true,
+  get: function () { return core.parseCookieHeader; }
+});
+Object.defineProperty(exports, "serializeCookieHeader", {
+  enumerable: true,
+  get: function () { return core.serializeCookieHeader; }
+});
+exports.createBrowserClient = createBrowserClient;
+exports.createServerClient = createServerClient;

package/packages/aurabase/dist/ssr.d.cts

@@ -0,0 +1,65 @@
+import { A as AuraClient } from './AuraClient-DAtDbfPB.cjs';
+import { SerializeCookieOptions, AuraClientOptions } from '@aurabase/core';
+export { SerializeCookieOptions, parseCookieHeader, serializeCookieHeader } from '@aurabase/core';
+import '@aurabase/auth';
+import '@aurabase/db';
+import '@aurabase/storage';
+import '@aurabase/realtime';
+import '@aurabase/functions';
+import '@aurabase/ai';
+import '@aurabase/notifications';
+
+/**
+ * Server-side rendering helpers for Aurabase.
+ *
+ * @example Next.js middleware
+ * ```ts
+ * import { createServerClient } from 'aurabase/ssr'
+ *
+ * export async function middleware(request) {
+ *   let response = NextResponse.next({ request })
+ *   const client = createServerClient(URL, PROJECT_ID, {
+ *     cookies: {
+ *       getAll: () => request.cookies.getAll(),
+ *       setAll: (cookies) => {
+ *         cookies.forEach(({ name, value, options }) => {
+ *           request.cookies.set(name, value)
+ *           response.cookies.set(name, value, options)
+ *         })
+ *       },
+ *     },
+ *   })
+ *   await client.auth.getSession()
+ *   return response
+ * }
+ * ```
+ *
+ * @module
+ */
+
+interface CookieHandler {
+    /** Return all cookies from the incoming request. */
+    getAll(): Array<{
+        name: string;
+        value: string;
+    }>;
+    /** Set cookies on the outgoing response. */
+    setAll(cookies: Array<{
+        name: string;
+        value: string;
+        options: SerializeCookieOptions;
+    }>): void;
+}
+interface ServerClientOptions {
+    apiKey?: string;
+    cookies: CookieHandler;
+    cookieOptions?: SerializeCookieOptions;
+}
+declare function createServerClient<Database = any>(baseUrl: string, projectId: string, options: ServerClientOptions): AuraClient<Database>;
+/**
+ * Create an Aurabase client for browser usage.
+ * Thin wrapper around AuraClient with sensible browser defaults.
+ */
+declare function createBrowserClient<Database = any>(baseUrl: string, projectId: string, apiKey?: string, options?: AuraClientOptions): AuraClient<Database>;
+
+export { type CookieHandler, type ServerClientOptions, createBrowserClient, createServerClient };

package/packages/aurabase/dist/ssr.d.ts

@@ -0,0 +1,65 @@
+import { A as AuraClient } from './AuraClient-DAtDbfPB.js';
+import { SerializeCookieOptions, AuraClientOptions } from '@aurabase/core';
+export { SerializeCookieOptions, parseCookieHeader, serializeCookieHeader } from '@aurabase/core';
+import '@aurabase/auth';
+import '@aurabase/db';
+import '@aurabase/storage';
+import '@aurabase/realtime';
+import '@aurabase/functions';
+import '@aurabase/ai';
+import '@aurabase/notifications';
+
+/**
+ * Server-side rendering helpers for Aurabase.
+ *
+ * @example Next.js middleware
+ * ```ts
+ * import { createServerClient } from 'aurabase/ssr'
+ *
+ * export async function middleware(request) {
+ *   let response = NextResponse.next({ request })
+ *   const client = createServerClient(URL, PROJECT_ID, {
+ *     cookies: {
+ *       getAll: () => request.cookies.getAll(),
+ *       setAll: (cookies) => {
+ *         cookies.forEach(({ name, value, options }) => {
+ *           request.cookies.set(name, value)
+ *           response.cookies.set(name, value, options)
+ *         })
+ *       },
+ *     },
+ *   })
+ *   await client.auth.getSession()
+ *   return response
+ * }
+ * ```
+ *
+ * @module
+ */
+
+interface CookieHandler {
+    /** Return all cookies from the incoming request. */
+    getAll(): Array<{
+        name: string;
+        value: string;
+    }>;
+    /** Set cookies on the outgoing response. */
+    setAll(cookies: Array<{
+        name: string;
+        value: string;
+        options: SerializeCookieOptions;
+    }>): void;
+}
+interface ServerClientOptions {
+    apiKey?: string;
+    cookies: CookieHandler;
+    cookieOptions?: SerializeCookieOptions;
+}
+declare function createServerClient<Database = any>(baseUrl: string, projectId: string, options: ServerClientOptions): AuraClient<Database>;
+/**
+ * Create an Aurabase client for browser usage.
+ * Thin wrapper around AuraClient with sensible browser defaults.
+ */
+declare function createBrowserClient<Database = any>(baseUrl: string, projectId: string, apiKey?: string, options?: AuraClientOptions): AuraClient<Database>;
+
+export { type CookieHandler, type ServerClientOptions, createBrowserClient, createServerClient };