@aurabase/core 0.5.3 → 0.6.0

package/dist/index.d.cts

@@ -715,6 +715,51 @@ interface CdcPayload {
     record: Record<string, unknown>;
     old_record: Record<string, unknown> | null;
     _truncated?: boolean;
+    [key: string]: unknown;
+}
+/** Base commune des métadonnées pour un événement CDC PostgreSQL */
+interface RealtimePostgresChangesBasePayload {
+    schema: string;
+    table: string;
+    commit_timestamp: string;
+    errors?: string[];
+    id: string;
+    topic: string;
+    timestamp: string;
+    payload: CdcPayload | Record<string, unknown>;
+    event: 'insert' | 'update' | 'delete';
+}
+/** Payload enrichi pour un événement CDC PostgreSQL d'insertion */
+interface RealtimePostgresInsertPayload<T = Record<string, unknown>> extends RealtimePostgresChangesBasePayload {
+    eventType: 'INSERT';
+    event: 'insert';
+    new: T;
+    old: null;
+}
+/** Payload enrichi pour un événement CDC PostgreSQL de mise à jour */
+interface RealtimePostgresUpdatePayload<T = Record<string, unknown>> extends RealtimePostgresChangesBasePayload {
+    eventType: 'UPDATE';
+    event: 'update';
+    new: T;
+    old: Partial<T>;
+}
+/** Payload enrichi pour un événement CDC PostgreSQL de suppression */
+interface RealtimePostgresDeletePayload<T = Record<string, unknown>> extends RealtimePostgresChangesBasePayload {
+    eventType: 'DELETE';
+    event: 'delete';
+    new: null;
+    old: Partial<T> | null;
+}
+/** Union discriminée par eventType pour les événements CDC PostgreSQL */
+type RealtimePostgresChangesPayload<T = Record<string, unknown>> = RealtimePostgresInsertPayload<T> | RealtimePostgresUpdatePayload<T> | RealtimePostgresDeletePayload<T>;
+/** Événement broadcast reçu avec payload typé */
+interface RealtimeBroadcastEvent<T = Record<string, unknown>> {
+    event: string;
+    payload: T;
+    id?: string;
+    topic?: string;
+    timestamp?: string;
+    allowed_sub_ids?: string[];
 }
 /** Status de subscription */
 type RealtimeSubscribeStatus = 'SUBSCRIBED' | 'CLOSED' | 'CHANNEL_ERROR' | 'TIMED_OUT';
@@ -832,7 +877,12 @@ interface ChannelConfig {
     };
     /** Configuration présence directe */
     presence?: {
-        /** Clé de présence — permet de regrouper plusieurs onglets/devices du même user */
+        /**
+         * @deprecated La présence distribuée est indexée de manière autoritaire par le serveur
+         * à l'aide de l'identité vérifiée (`user_id` extrait du JWT) et de l'identifiant de connexion WebSocket
+         * (`client_id` dans NATS KV). Une clé libre côté client n'est pas utilisée pour partitionner le cluster
+         * afin d'empêcher les collisions d'état et les risques d'usurpation d'identité.
+         */
         key?: string;
     };
     /** Configuration compatible Supabase sous `config` */
@@ -842,6 +892,9 @@ interface ChannelConfig {
             self?: boolean;
         };
         presence?: {
+            /**
+             * @deprecated Voir `ChannelConfig.presence.key`. L'identité de présence est sécurisée par `user_id`/`client_id`.
+             */
             key?: string;
         };
         private?: boolean;
@@ -940,6 +993,19 @@ interface SemanticSearchResult {
     metadata: Record<string, unknown>;
     similarity: number;
 }
+/** Limites d'exécution d'une fonction (`PATCH /v1/functions/{project}/{name}`). */
+interface FunctionPermissions {
+    /** Domaines autorisés en sortie. Stocké mais non appliqué par le runtime actuel. */
+    allow_net: string[];
+    /** 16 à 1024, défaut 128. */
+    memory_mb: number;
+    /** 1 à 300, défaut 30 — durée maximale (wall-clock). */
+    timeout_secs: number;
+}
+/**
+ * Définition d'une fonction. Contient le code source et les variables d'environnement :
+ * `list()` et `get()` exigent donc une clé `service_role` (usage serveur uniquement).
+ */
 interface FunctionDef {
     id: string;
     project_id: string;
@@ -947,7 +1013,8 @@ interface FunctionDef {
     runtime: string;
     code: string;
     code_hash: string;
-    env_vars: Record<string, unknown>;
+    env_vars: Record<string, string>;
+    permissions: FunctionPermissions;
     is_active: boolean;
     created_at: string;
     updated_at: string;
@@ -1182,16 +1249,160 @@ interface NotificationStats {
         dead_lettered: number;
     }>;
 }
+type NotificationChannel = 'email' | 'sms' | 'push' | 'webhook';
+type NotificationStatus = 'queued' | 'processing' | 'sent' | 'failed' | 'delivered' | 'expired' | 'dead_lettered';
+type NotificationStatsWindow = '1h' | '24h' | '7d' | '30d';
+type NotificationAttemptStatus = 'processing' | 'sent' | 'failed' | 'retry_scheduled' | 'dead_lettered';
+type SettingsSource = 'project' | 'environment' | 'none';
+interface SmtpPublicSettings {
+    configured: boolean;
+    source: SettingsSource;
+    host?: string | null;
+    port?: number | null;
+    user?: string | null;
+    password_set: boolean;
+    from_email?: string | null;
+    from_name?: string | null;
+    tls: boolean;
+}
+interface TwilioPublicSettings {
+    configured: boolean;
+    source: SettingsSource;
+    account_sid_prefix?: string | null;
+    auth_token_set: boolean;
+    from_number?: string | null;
+    status_callback_url?: string | null;
+}
+interface FcmPublicSettings {
+    configured: boolean;
+    source: SettingsSource;
+    project_id?: string | null;
+    service_account_json_set: boolean;
+    legacy_server_key_present: boolean;
+    api: string;
+}
+interface ApnsPublicSettings {
+    configured: boolean;
+    source: SettingsSource;
+    key_id?: string | null;
+    team_id?: string | null;
+    private_key_set: boolean;
+    bundle_id?: string | null;
+    production: boolean;
+}
+interface WebhookPublicSettings {
+    configured: boolean;
+    source: SettingsSource;
+    max_retries: number;
+    retry_delay_ms: number;
+    timeout_secs: number;
+    secret_set: boolean;
+    signature_tolerance_secs: number;
+}
+interface QuotaPublicSettings {
+    source: SettingsSource;
+    project_rate_limit_per_minute: number;
+    channel_rate_limit_per_minute: number;
+    batch_max_size: number;
+}
+interface SmtpSettingsPatch {
+    host?: string | null;
+    port?: number | null;
+    user?: string | null;
+    password?: string | null;
+    from_email?: string | null;
+    from_name?: string | null;
+    tls?: boolean | null;
+}
+interface TwilioSettingsPatch {
+    account_sid?: string | null;
+    auth_token?: string | null;
+    from_number?: string | null;
+}
+interface FcmSettingsPatch {
+    project_id?: string | null;
+    service_account_json?: string | null;
+}
+interface ApnsSettingsPatch {
+    key_id?: string | null;
+    team_id?: string | null;
+    private_key_b64?: string | null;
+    bundle_id?: string | null;
+    production?: boolean | null;
+}
+interface WebhookSettingsPatch {
+    max_retries?: number | null;
+    retry_delay_ms?: number | null;
+    timeout_secs?: number | null;
+    secret?: string | null;
+}
+interface QuotaSettingsPatch {
+    project_rate_limit_per_minute?: number | null;
+    channel_rate_limit_per_minute?: number | null;
+    batch_max_size?: number | null;
+}
+interface NotificationSettingsPatch {
+    smtp?: SmtpSettingsPatch | null;
+    twilio?: TwilioSettingsPatch | null;
+    fcm?: FcmSettingsPatch | null;
+    apns?: ApnsSettingsPatch | null;
+    webhook?: WebhookSettingsPatch | null;
+    quotas?: QuotaSettingsPatch | null;
+}
 interface NotificationSettings {
     project_id: string;
-    smtp?: Record<string, unknown>;
-    twilio?: Record<string, unknown>;
-    fcm?: Record<string, unknown>;
-    apns?: Record<string, unknown>;
-    webhook?: Record<string, unknown>;
-    quotas?: Record<string, unknown>;
+    smtp?: SmtpPublicSettings | Record<string, unknown>;
+    twilio?: TwilioPublicSettings | Record<string, unknown>;
+    fcm?: FcmPublicSettings | Record<string, unknown>;
+    apns?: ApnsPublicSettings | Record<string, unknown>;
+    webhook?: WebhookPublicSettings | Record<string, unknown>;
+    quotas?: QuotaPublicSettings | Record<string, unknown>;
     updated_at?: string | null;
 }
+type NotificationSettingsPublic = NotificationSettings;
+interface CreateNotificationRuleRequest {
+    name: string;
+    trigger_type: string;
+    condition?: Record<string, unknown>;
+    template_id?: string | null;
+    channel: NotificationChannel;
+    recipient_expr: string;
+    delay_seconds?: number;
+}
+interface UpdateNotificationRuleRequest {
+    name?: string;
+    enabled?: boolean;
+    trigger_type?: string;
+    condition?: Record<string, unknown>;
+    template_id?: string | null;
+    channel?: NotificationChannel;
+    recipient_expr?: string;
+    delay_seconds?: number;
+}
+interface SendNotificationOptions {
+    channel: NotificationChannel;
+    recipient: string;
+    body?: string;
+    subject?: string;
+    templateId?: string;
+    template_id?: string;
+    variables?: Record<string, unknown>;
+    metadata?: Record<string, unknown>;
+    idempotencyKey?: string;
+    idempotency_key?: string;
+}
+interface SendNotificationItem {
+    channel: NotificationChannel;
+    recipient: string;
+    body?: string;
+    subject?: string;
+    templateId?: string;
+    template_id?: string;
+    variables?: Record<string, unknown>;
+    metadata?: Record<string, unknown>;
+    idempotencyKey?: string;
+    idempotency_key?: string;
+}
 interface NotificationRule {
     id: string;
     project_id: string;
@@ -1199,7 +1410,7 @@ interface NotificationRule {
     trigger_type: string;
     condition: Record<string, unknown>;
     template_id?: string | null;
-    channel: 'email' | 'sms' | 'push' | 'webhook';
+    channel: NotificationChannel;
     recipient_expr: string;
     enabled: boolean;
     delay_seconds: number;
@@ -1554,6 +1765,10 @@ interface GetClaimsResult {
         kid?: string;
         typ?: string;
     };
+    sub?: string;
+    email?: string | null;
+    role?: string;
+    [key: string]: unknown;
 }
 
 type AuthChangeCallback = (token: string | null, user: User | null) => void;
@@ -1625,6 +1840,8 @@ interface AuraClientLike {
      */
     readonly baseUrl: string;
     readonly apiKey: string | null;
+    /** Identifiant optionnel du projet résolu ou configuré sur le client */
+    readonly projectId?: string;
     readonly fetchFn: typeof globalThis.fetch;
     readonly authStore: BaseAuthStore;
     /** Consommé uniquement par le service realtime (refresh proactif du token). */
@@ -1818,4 +2035,4 @@ declare class LocalAuthStore extends BaseAuthStore {
     private _removeStorage;
 }
 
-export { AUTH_SETTINGS_WRITABLE_FIELDS, type AdminCreateUserRequest, type AdminSessionInfo, type AdminUpdateUserRequest, type AdminUser, type AuditLogEntry, type AuraClientLike, type AuraClientOptions, AuraError, type AuraErrorCode, type AuraFailure, type AuraNoContent, type AuraObservabilityEvent, type AuraResponse, type AuraSuccess, type AuthChangePayload, type AuthEvent, type AuthSettings, type AuthSettingsUpdate, BaseAuthStore, BaseService, type BatchSendItemResult, type BatchSendResponse, type BroadcastAckMessage, type BroadcastFilter, type BroadcastPayload, type BroadcastSendStatus, type CdcPayload, type ChannelConfig, type ChatMessage, type ChatResponse, type CountMode, type CreatePgFunctionRequest, type CreatePgTriggerRequest, type CronJob, DEFAULT_MAX_RETRIES, DEFAULT_REQUEST_TIMEOUT_MS, type EmailTemplateUpdate, type EmbedRequest, type EmbedResponse, type FetchInit, type FileEntry, type FilterOp, type FunctionDef, type GenerateLinkResult, type GenerateLinkType, type GetClaimsResult, type IdentityInfo, type ImageTransform, type Job, type JwtClaims, LocalAuthStore, type LoginResponse, type MagicLinkRequest, type Meta, type MfaChallenge, type MfaEnrollResponse, type MfaVerifyRequest, type Notification, type NotificationAttempt, type NotificationChannelStats, type NotificationDeadLetter, type NotificationEvent, type NotificationProviderLog, type NotificationQueueStats, type NotificationRule, type NotificationSettings, type NotificationStats, type NotificationTemplate, type NotificationTemplatePreview, type OAuthProviderSetting, type OAuthSignInOptions, type ObjectMeta, type PasswordResetRequest, type PgExecutableRole, type PgFunctionInfo, type PgTriggerInfo, type PostgresChangesFilter, type PresenceFilter, type PresenceInfo, type PresenceState, type QueryFilter, type QueryOptions, RETRYABLE_METHODS, RETRYABLE_STATUS, type RagIngestRequest, type RagIngestResponse, type RagRequest, type RagResponse, type RealtimeEvent, type RealtimeListenType, type RealtimeSubscribeStatus, type SchemaColumn, type SchemaEnum, type SchemaFunction, type SchemaFunctionArg, type SchemaIndex, type SchemaTable, type SemanticSearchResult, type SendNotificationRequest, type SerializeCookieOptions, type ServerErrorMsg, type ServerEventMsg, type ServerMessage, type ServerPongMsg, type ServerPresenceStateMsg, type ServerSubscribedMsg, type ServerTokenRefreshedMsg, type Session, type SessionInfo, type SignInRequest, type SignUpRequest, type StorageBucket, type SubscribeCallback, type TokenPair, type UpdateUserRequest, type UploadResult, type User, type UserStats, abortableSleep, clientScope, computeBackoff, emitAuraEvent, fetchWithAuth, isAbortError, isAuraError, isRetryableMethod, isRetryableStatus, isTokenExpired, parseCookieHeader, parseRetryAfter, refreshOnce, serializeBody, serializeCookieHeader };
+export { AUTH_SETTINGS_WRITABLE_FIELDS, type AdminCreateUserRequest, type AdminSessionInfo, type AdminUpdateUserRequest, type AdminUser, type ApnsPublicSettings, type ApnsSettingsPatch, type AuditLogEntry, type AuraClientLike, type AuraClientOptions, AuraError, type AuraErrorCode, type AuraFailure, type AuraNoContent, type AuraObservabilityEvent, type AuraResponse, type AuraSuccess, type AuthChangePayload, type AuthEvent, type AuthSettings, type AuthSettingsUpdate, BaseAuthStore, BaseService, type BatchSendItemResult, type BatchSendResponse, type BroadcastAckMessage, type BroadcastFilter, type BroadcastPayload, type BroadcastSendStatus, type CdcPayload, type ChannelConfig, type ChatMessage, type ChatResponse, type CountMode, type CreateNotificationRuleRequest, type CreatePgFunctionRequest, type CreatePgTriggerRequest, type CronJob, DEFAULT_MAX_RETRIES, DEFAULT_REQUEST_TIMEOUT_MS, type EmailTemplateUpdate, type EmbedRequest, type EmbedResponse, type FcmPublicSettings, type FcmSettingsPatch, type FetchInit, type FileEntry, type FilterOp, type FunctionDef, type FunctionPermissions, type GenerateLinkResult, type GenerateLinkType, type GetClaimsResult, type IdentityInfo, type ImageTransform, type Job, type JwtClaims, LocalAuthStore, type LoginResponse, type MagicLinkRequest, type Meta, type MfaChallenge, type MfaEnrollResponse, type MfaVerifyRequest, type Notification, type NotificationAttempt, type NotificationAttemptStatus, type NotificationChannel, type NotificationChannelStats, type NotificationDeadLetter, type NotificationEvent, type NotificationProviderLog, type NotificationQueueStats, type NotificationRule, type NotificationSettings, type NotificationSettingsPatch, type NotificationSettingsPublic, type NotificationStats, type NotificationStatsWindow, type NotificationStatus, type NotificationTemplate, type NotificationTemplatePreview, type OAuthProviderSetting, type OAuthSignInOptions, type ObjectMeta, type PasswordResetRequest, type PgExecutableRole, type PgFunctionInfo, type PgTriggerInfo, type PostgresChangesFilter, type PresenceFilter, type PresenceInfo, type PresenceState, type QueryFilter, type QueryOptions, type QuotaPublicSettings, type QuotaSettingsPatch, RETRYABLE_METHODS, RETRYABLE_STATUS, type RagIngestRequest, type RagIngestResponse, type RagRequest, type RagResponse, type RealtimeBroadcastEvent, type RealtimeEvent, type RealtimeListenType, type RealtimePostgresChangesBasePayload, type RealtimePostgresChangesPayload, type RealtimePostgresDeletePayload, type RealtimePostgresInsertPayload, type RealtimePostgresUpdatePayload, type RealtimeSubscribeStatus, type SchemaColumn, type SchemaEnum, type SchemaFunction, type SchemaFunctionArg, type SchemaIndex, type SchemaTable, type SemanticSearchResult, type SendNotificationItem, type SendNotificationOptions, type SendNotificationRequest, type SerializeCookieOptions, type ServerErrorMsg, type ServerEventMsg, type ServerMessage, type ServerPongMsg, type ServerPresenceStateMsg, type ServerSubscribedMsg, type ServerTokenRefreshedMsg, type Session, type SessionInfo, type SettingsSource, type SignInRequest, type SignUpRequest, type SmtpPublicSettings, type SmtpSettingsPatch, type StorageBucket, type SubscribeCallback, type TokenPair, type TwilioPublicSettings, type TwilioSettingsPatch, type UpdateNotificationRuleRequest, type UpdateUserRequest, type UploadResult, type User, type UserStats, type WebhookPublicSettings, type WebhookSettingsPatch, abortableSleep, clientScope, computeBackoff, emitAuraEvent, fetchWithAuth, isAbortError, isAuraError, isRetryableMethod, isRetryableStatus, isTokenExpired, parseCookieHeader, parseRetryAfter, refreshOnce, serializeBody, serializeCookieHeader };

package/dist/index.d.ts

@@ -715,6 +715,51 @@ interface CdcPayload {
     record: Record<string, unknown>;
     old_record: Record<string, unknown> | null;
     _truncated?: boolean;
+    [key: string]: unknown;
+}
+/** Base commune des métadonnées pour un événement CDC PostgreSQL */
+interface RealtimePostgresChangesBasePayload {
+    schema: string;
+    table: string;
+    commit_timestamp: string;
+    errors?: string[];
+    id: string;
+    topic: string;
+    timestamp: string;
+    payload: CdcPayload | Record<string, unknown>;
+    event: 'insert' | 'update' | 'delete';
+}
+/** Payload enrichi pour un événement CDC PostgreSQL d'insertion */
+interface RealtimePostgresInsertPayload<T = Record<string, unknown>> extends RealtimePostgresChangesBasePayload {
+    eventType: 'INSERT';
+    event: 'insert';
+    new: T;
+    old: null;
+}
+/** Payload enrichi pour un événement CDC PostgreSQL de mise à jour */
+interface RealtimePostgresUpdatePayload<T = Record<string, unknown>> extends RealtimePostgresChangesBasePayload {
+    eventType: 'UPDATE';
+    event: 'update';
+    new: T;
+    old: Partial<T>;
+}
+/** Payload enrichi pour un événement CDC PostgreSQL de suppression */
+interface RealtimePostgresDeletePayload<T = Record<string, unknown>> extends RealtimePostgresChangesBasePayload {
+    eventType: 'DELETE';
+    event: 'delete';
+    new: null;
+    old: Partial<T> | null;
+}
+/** Union discriminée par eventType pour les événements CDC PostgreSQL */
+type RealtimePostgresChangesPayload<T = Record<string, unknown>> = RealtimePostgresInsertPayload<T> | RealtimePostgresUpdatePayload<T> | RealtimePostgresDeletePayload<T>;
+/** Événement broadcast reçu avec payload typé */
+interface RealtimeBroadcastEvent<T = Record<string, unknown>> {
+    event: string;
+    payload: T;
+    id?: string;
+    topic?: string;
+    timestamp?: string;
+    allowed_sub_ids?: string[];
 }
 /** Status de subscription */
 type RealtimeSubscribeStatus = 'SUBSCRIBED' | 'CLOSED' | 'CHANNEL_ERROR' | 'TIMED_OUT';
@@ -832,7 +877,12 @@ interface ChannelConfig {
     };
     /** Configuration présence directe */
     presence?: {
-        /** Clé de présence — permet de regrouper plusieurs onglets/devices du même user */
+        /**
+         * @deprecated La présence distribuée est indexée de manière autoritaire par le serveur
+         * à l'aide de l'identité vérifiée (`user_id` extrait du JWT) et de l'identifiant de connexion WebSocket
+         * (`client_id` dans NATS KV). Une clé libre côté client n'est pas utilisée pour partitionner le cluster
+         * afin d'empêcher les collisions d'état et les risques d'usurpation d'identité.
+         */
         key?: string;
     };
     /** Configuration compatible Supabase sous `config` */
@@ -842,6 +892,9 @@ interface ChannelConfig {
             self?: boolean;
         };
         presence?: {
+            /**
+             * @deprecated Voir `ChannelConfig.presence.key`. L'identité de présence est sécurisée par `user_id`/`client_id`.
+             */
             key?: string;
         };
         private?: boolean;
@@ -940,6 +993,19 @@ interface SemanticSearchResult {
     metadata: Record<string, unknown>;
     similarity: number;
 }
+/** Limites d'exécution d'une fonction (`PATCH /v1/functions/{project}/{name}`). */
+interface FunctionPermissions {
+    /** Domaines autorisés en sortie. Stocké mais non appliqué par le runtime actuel. */
+    allow_net: string[];
+    /** 16 à 1024, défaut 128. */
+    memory_mb: number;
+    /** 1 à 300, défaut 30 — durée maximale (wall-clock). */
+    timeout_secs: number;
+}
+/**
+ * Définition d'une fonction. Contient le code source et les variables d'environnement :
+ * `list()` et `get()` exigent donc une clé `service_role` (usage serveur uniquement).
+ */
 interface FunctionDef {
     id: string;
     project_id: string;
@@ -947,7 +1013,8 @@ interface FunctionDef {
     runtime: string;
     code: string;
     code_hash: string;
-    env_vars: Record<string, unknown>;
+    env_vars: Record<string, string>;
+    permissions: FunctionPermissions;
     is_active: boolean;
     created_at: string;
     updated_at: string;
@@ -1182,16 +1249,160 @@ interface NotificationStats {
         dead_lettered: number;
     }>;
 }
+type NotificationChannel = 'email' | 'sms' | 'push' | 'webhook';
+type NotificationStatus = 'queued' | 'processing' | 'sent' | 'failed' | 'delivered' | 'expired' | 'dead_lettered';
+type NotificationStatsWindow = '1h' | '24h' | '7d' | '30d';
+type NotificationAttemptStatus = 'processing' | 'sent' | 'failed' | 'retry_scheduled' | 'dead_lettered';
+type SettingsSource = 'project' | 'environment' | 'none';
+interface SmtpPublicSettings {
+    configured: boolean;
+    source: SettingsSource;
+    host?: string | null;
+    port?: number | null;
+    user?: string | null;
+    password_set: boolean;
+    from_email?: string | null;
+    from_name?: string | null;
+    tls: boolean;
+}
+interface TwilioPublicSettings {
+    configured: boolean;
+    source: SettingsSource;
+    account_sid_prefix?: string | null;
+    auth_token_set: boolean;
+    from_number?: string | null;
+    status_callback_url?: string | null;
+}
+interface FcmPublicSettings {
+    configured: boolean;
+    source: SettingsSource;
+    project_id?: string | null;
+    service_account_json_set: boolean;
+    legacy_server_key_present: boolean;
+    api: string;
+}
+interface ApnsPublicSettings {
+    configured: boolean;
+    source: SettingsSource;
+    key_id?: string | null;
+    team_id?: string | null;
+    private_key_set: boolean;
+    bundle_id?: string | null;
+    production: boolean;
+}
+interface WebhookPublicSettings {
+    configured: boolean;
+    source: SettingsSource;
+    max_retries: number;
+    retry_delay_ms: number;
+    timeout_secs: number;
+    secret_set: boolean;
+    signature_tolerance_secs: number;
+}
+interface QuotaPublicSettings {
+    source: SettingsSource;
+    project_rate_limit_per_minute: number;
+    channel_rate_limit_per_minute: number;
+    batch_max_size: number;
+}
+interface SmtpSettingsPatch {
+    host?: string | null;
+    port?: number | null;
+    user?: string | null;
+    password?: string | null;
+    from_email?: string | null;
+    from_name?: string | null;
+    tls?: boolean | null;
+}
+interface TwilioSettingsPatch {
+    account_sid?: string | null;
+    auth_token?: string | null;
+    from_number?: string | null;
+}
+interface FcmSettingsPatch {
+    project_id?: string | null;
+    service_account_json?: string | null;
+}
+interface ApnsSettingsPatch {
+    key_id?: string | null;
+    team_id?: string | null;
+    private_key_b64?: string | null;
+    bundle_id?: string | null;
+    production?: boolean | null;
+}
+interface WebhookSettingsPatch {
+    max_retries?: number | null;
+    retry_delay_ms?: number | null;
+    timeout_secs?: number | null;
+    secret?: string | null;
+}
+interface QuotaSettingsPatch {
+    project_rate_limit_per_minute?: number | null;
+    channel_rate_limit_per_minute?: number | null;
+    batch_max_size?: number | null;
+}
+interface NotificationSettingsPatch {
+    smtp?: SmtpSettingsPatch | null;
+    twilio?: TwilioSettingsPatch | null;
+    fcm?: FcmSettingsPatch | null;
+    apns?: ApnsSettingsPatch | null;
+    webhook?: WebhookSettingsPatch | null;
+    quotas?: QuotaSettingsPatch | null;
+}
 interface NotificationSettings {
     project_id: string;
-    smtp?: Record<string, unknown>;
-    twilio?: Record<string, unknown>;
-    fcm?: Record<string, unknown>;
-    apns?: Record<string, unknown>;
-    webhook?: Record<string, unknown>;
-    quotas?: Record<string, unknown>;
+    smtp?: SmtpPublicSettings | Record<string, unknown>;
+    twilio?: TwilioPublicSettings | Record<string, unknown>;
+    fcm?: FcmPublicSettings | Record<string, unknown>;
+    apns?: ApnsPublicSettings | Record<string, unknown>;
+    webhook?: WebhookPublicSettings | Record<string, unknown>;
+    quotas?: QuotaPublicSettings | Record<string, unknown>;
     updated_at?: string | null;
 }
+type NotificationSettingsPublic = NotificationSettings;
+interface CreateNotificationRuleRequest {
+    name: string;
+    trigger_type: string;
+    condition?: Record<string, unknown>;
+    template_id?: string | null;
+    channel: NotificationChannel;
+    recipient_expr: string;
+    delay_seconds?: number;
+}
+interface UpdateNotificationRuleRequest {
+    name?: string;
+    enabled?: boolean;
+    trigger_type?: string;
+    condition?: Record<string, unknown>;
+    template_id?: string | null;
+    channel?: NotificationChannel;
+    recipient_expr?: string;
+    delay_seconds?: number;
+}
+interface SendNotificationOptions {
+    channel: NotificationChannel;
+    recipient: string;
+    body?: string;
+    subject?: string;
+    templateId?: string;
+    template_id?: string;
+    variables?: Record<string, unknown>;
+    metadata?: Record<string, unknown>;
+    idempotencyKey?: string;
+    idempotency_key?: string;
+}
+interface SendNotificationItem {
+    channel: NotificationChannel;
+    recipient: string;
+    body?: string;
+    subject?: string;
+    templateId?: string;
+    template_id?: string;
+    variables?: Record<string, unknown>;
+    metadata?: Record<string, unknown>;
+    idempotencyKey?: string;
+    idempotency_key?: string;
+}
 interface NotificationRule {
     id: string;
     project_id: string;
@@ -1199,7 +1410,7 @@ interface NotificationRule {
     trigger_type: string;
     condition: Record<string, unknown>;
     template_id?: string | null;
-    channel: 'email' | 'sms' | 'push' | 'webhook';
+    channel: NotificationChannel;
     recipient_expr: string;
     enabled: boolean;
     delay_seconds: number;
@@ -1554,6 +1765,10 @@ interface GetClaimsResult {
         kid?: string;
         typ?: string;
     };
+    sub?: string;
+    email?: string | null;
+    role?: string;
+    [key: string]: unknown;
 }
 
 type AuthChangeCallback = (token: string | null, user: User | null) => void;
@@ -1625,6 +1840,8 @@ interface AuraClientLike {
      */
     readonly baseUrl: string;
     readonly apiKey: string | null;
+    /** Identifiant optionnel du projet résolu ou configuré sur le client */
+    readonly projectId?: string;
     readonly fetchFn: typeof globalThis.fetch;
     readonly authStore: BaseAuthStore;
     /** Consommé uniquement par le service realtime (refresh proactif du token). */
@@ -1818,4 +2035,4 @@ declare class LocalAuthStore extends BaseAuthStore {
     private _removeStorage;
 }
 
-export { AUTH_SETTINGS_WRITABLE_FIELDS, type AdminCreateUserRequest, type AdminSessionInfo, type AdminUpdateUserRequest, type AdminUser, type AuditLogEntry, type AuraClientLike, type AuraClientOptions, AuraError, type AuraErrorCode, type AuraFailure, type AuraNoContent, type AuraObservabilityEvent, type AuraResponse, type AuraSuccess, type AuthChangePayload, type AuthEvent, type AuthSettings, type AuthSettingsUpdate, BaseAuthStore, BaseService, type BatchSendItemResult, type BatchSendResponse, type BroadcastAckMessage, type BroadcastFilter, type BroadcastPayload, type BroadcastSendStatus, type CdcPayload, type ChannelConfig, type ChatMessage, type ChatResponse, type CountMode, type CreatePgFunctionRequest, type CreatePgTriggerRequest, type CronJob, DEFAULT_MAX_RETRIES, DEFAULT_REQUEST_TIMEOUT_MS, type EmailTemplateUpdate, type EmbedRequest, type EmbedResponse, type FetchInit, type FileEntry, type FilterOp, type FunctionDef, type GenerateLinkResult, type GenerateLinkType, type GetClaimsResult, type IdentityInfo, type ImageTransform, type Job, type JwtClaims, LocalAuthStore, type LoginResponse, type MagicLinkRequest, type Meta, type MfaChallenge, type MfaEnrollResponse, type MfaVerifyRequest, type Notification, type NotificationAttempt, type NotificationChannelStats, type NotificationDeadLetter, type NotificationEvent, type NotificationProviderLog, type NotificationQueueStats, type NotificationRule, type NotificationSettings, type NotificationStats, type NotificationTemplate, type NotificationTemplatePreview, type OAuthProviderSetting, type OAuthSignInOptions, type ObjectMeta, type PasswordResetRequest, type PgExecutableRole, type PgFunctionInfo, type PgTriggerInfo, type PostgresChangesFilter, type PresenceFilter, type PresenceInfo, type PresenceState, type QueryFilter, type QueryOptions, RETRYABLE_METHODS, RETRYABLE_STATUS, type RagIngestRequest, type RagIngestResponse, type RagRequest, type RagResponse, type RealtimeEvent, type RealtimeListenType, type RealtimeSubscribeStatus, type SchemaColumn, type SchemaEnum, type SchemaFunction, type SchemaFunctionArg, type SchemaIndex, type SchemaTable, type SemanticSearchResult, type SendNotificationRequest, type SerializeCookieOptions, type ServerErrorMsg, type ServerEventMsg, type ServerMessage, type ServerPongMsg, type ServerPresenceStateMsg, type ServerSubscribedMsg, type ServerTokenRefreshedMsg, type Session, type SessionInfo, type SignInRequest, type SignUpRequest, type StorageBucket, type SubscribeCallback, type TokenPair, type UpdateUserRequest, type UploadResult, type User, type UserStats, abortableSleep, clientScope, computeBackoff, emitAuraEvent, fetchWithAuth, isAbortError, isAuraError, isRetryableMethod, isRetryableStatus, isTokenExpired, parseCookieHeader, parseRetryAfter, refreshOnce, serializeBody, serializeCookieHeader };
+export { AUTH_SETTINGS_WRITABLE_FIELDS, type AdminCreateUserRequest, type AdminSessionInfo, type AdminUpdateUserRequest, type AdminUser, type ApnsPublicSettings, type ApnsSettingsPatch, type AuditLogEntry, type AuraClientLike, type AuraClientOptions, AuraError, type AuraErrorCode, type AuraFailure, type AuraNoContent, type AuraObservabilityEvent, type AuraResponse, type AuraSuccess, type AuthChangePayload, type AuthEvent, type AuthSettings, type AuthSettingsUpdate, BaseAuthStore, BaseService, type BatchSendItemResult, type BatchSendResponse, type BroadcastAckMessage, type BroadcastFilter, type BroadcastPayload, type BroadcastSendStatus, type CdcPayload, type ChannelConfig, type ChatMessage, type ChatResponse, type CountMode, type CreateNotificationRuleRequest, type CreatePgFunctionRequest, type CreatePgTriggerRequest, type CronJob, DEFAULT_MAX_RETRIES, DEFAULT_REQUEST_TIMEOUT_MS, type EmailTemplateUpdate, type EmbedRequest, type EmbedResponse, type FcmPublicSettings, type FcmSettingsPatch, type FetchInit, type FileEntry, type FilterOp, type FunctionDef, type FunctionPermissions, type GenerateLinkResult, type GenerateLinkType, type GetClaimsResult, type IdentityInfo, type ImageTransform, type Job, type JwtClaims, LocalAuthStore, type LoginResponse, type MagicLinkRequest, type Meta, type MfaChallenge, type MfaEnrollResponse, type MfaVerifyRequest, type Notification, type NotificationAttempt, type NotificationAttemptStatus, type NotificationChannel, type NotificationChannelStats, type NotificationDeadLetter, type NotificationEvent, type NotificationProviderLog, type NotificationQueueStats, type NotificationRule, type NotificationSettings, type NotificationSettingsPatch, type NotificationSettingsPublic, type NotificationStats, type NotificationStatsWindow, type NotificationStatus, type NotificationTemplate, type NotificationTemplatePreview, type OAuthProviderSetting, type OAuthSignInOptions, type ObjectMeta, type PasswordResetRequest, type PgExecutableRole, type PgFunctionInfo, type PgTriggerInfo, type PostgresChangesFilter, type PresenceFilter, type PresenceInfo, type PresenceState, type QueryFilter, type QueryOptions, type QuotaPublicSettings, type QuotaSettingsPatch, RETRYABLE_METHODS, RETRYABLE_STATUS, type RagIngestRequest, type RagIngestResponse, type RagRequest, type RagResponse, type RealtimeBroadcastEvent, type RealtimeEvent, type RealtimeListenType, type RealtimePostgresChangesBasePayload, type RealtimePostgresChangesPayload, type RealtimePostgresDeletePayload, type RealtimePostgresInsertPayload, type RealtimePostgresUpdatePayload, type RealtimeSubscribeStatus, type SchemaColumn, type SchemaEnum, type SchemaFunction, type SchemaFunctionArg, type SchemaIndex, type SchemaTable, type SemanticSearchResult, type SendNotificationItem, type SendNotificationOptions, type SendNotificationRequest, type SerializeCookieOptions, type ServerErrorMsg, type ServerEventMsg, type ServerMessage, type ServerPongMsg, type ServerPresenceStateMsg, type ServerSubscribedMsg, type ServerTokenRefreshedMsg, type Session, type SessionInfo, type SettingsSource, type SignInRequest, type SignUpRequest, type SmtpPublicSettings, type SmtpSettingsPatch, type StorageBucket, type SubscribeCallback, type TokenPair, type TwilioPublicSettings, type TwilioSettingsPatch, type UpdateNotificationRuleRequest, type UpdateUserRequest, type UploadResult, type User, type UserStats, type WebhookPublicSettings, type WebhookSettingsPatch, abortableSleep, clientScope, computeBackoff, emitAuraEvent, fetchWithAuth, isAbortError, isAuraError, isRetryableMethod, isRetryableStatus, isTokenExpired, parseCookieHeader, parseRetryAfter, refreshOnce, serializeBody, serializeCookieHeader };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aurabase/core",
-  "version": "0.5.3",
+  "version": "0.6.0",
   "description": "Cœur du SDK Aurabase : fetch résilient, erreurs, stores auth, types de réponse (infrastructure interne)",
   "type": "module",
   "main": "dist/index.cjs",