@aurabase/core 0.7.3 → 0.7.5

package/dist/index.cjs

@@ -563,16 +563,69 @@ function unwrapEnvelope(body) {
   }
   return body;
 }
+function quoteUnsafeIntsInJson(raw) {
+  let out = "";
+  let i = 0;
+  const n = raw.length;
+  while (i < n) {
+    const ch = raw[i];
+    if (ch === '"') {
+      const start = i++;
+      while (i < n) {
+        const c = raw[i];
+        if (c === "\\") {
+          i += 2;
+          continue;
+        }
+        if (c === '"') {
+          i++;
+          break;
+        }
+        i++;
+      }
+      out += raw.slice(start, i);
+      continue;
+    }
+    if (ch === "-" || ch >= "0" && ch <= "9") {
+      const prev = out.trimEnd().slice(-1);
+      const isValueStart = prev === "" || prev === ":" || prev === "[" || prev === ",";
+      const start = i;
+      if (ch === "-") i++;
+      const digitStart = i;
+      while (i < n && raw[i] >= "0" && raw[i] <= "9") i++;
+      const isFloatOrExp = i < n && (raw[i] === "." || raw[i] === "e" || raw[i] === "E");
+      if (isFloatOrExp) {
+        while (i < n && /[0-9eE+\-.]/.test(raw[i])) i++;
+        out += raw.slice(start, i);
+        continue;
+      }
+      const token = raw.slice(start, i);
+      const digits = raw.slice(digitStart, i);
+      if (isValueStart && digits.length >= 16) {
+        const num = Number(token);
+        if (!Number.isSafeInteger(num)) {
+          out += `"${token}"`;
+          continue;
+        }
+      }
+      out += token;
+      continue;
+    }
+    out += ch;
+    i++;
+  }
+  return out;
+}
 function parseJsonBody(raw, parseBigIntAsString) {
   if (parseBigIntAsString) {
-    const safe = raw.replace(/([:\[,]\s*)(-?\d{16,})(?=\s*[,}\]])/g, '$1"$2"');
-    return JSON.parse(safe);
+    return JSON.parse(quoteUnsafeIntsInJson(raw));
   }
   return JSON.parse(raw);
 }
 function parseContentRangeTotal(headerVal) {
   return parseContentRangeDetails(headerVal).total;
 }
+var SERVER_MAX_ROWS = 1e3;
 function parseContentRangeDetails(headerVal) {
   if (!headerVal) return { total: void 0, hasMore: void 0 };
   const parts = headerVal.split("/");
@@ -592,7 +645,7 @@ function parseContentRangeDetails(headerVal) {
       if (!Number.isNaN(start) && !Number.isNaN(end)) {
         if (total !== void 0) {
           hasMore = end + 1 < total;
-        } else if (end - start + 1 >= 1e3) {
+        } else if (end - start + 1 >= SERVER_MAX_ROWS) {
           hasMore = true;
         }
       }
@@ -839,12 +892,14 @@ async function fetchWithAuth(url, init, client) {
     await maybeRefresh(client);
   }
   const method = (init.method ?? "GET").toUpperCase();
-  const retryEnabled = !init.skipRetry && (client.retryConfig?.enabled ?? true) && isRetryableMethod(method);
+  const retryAllowed = !init.skipRetry && (client.retryConfig?.enabled ?? true);
+  const retryEnabled = retryAllowed && isRetryableMethod(method);
   const maxRetries = client.retryConfig?.maxRetries ?? DEFAULT_MAX_RETRIES;
   const store = client.authStore;
   const isFormData = typeof FormData !== "undefined" && init.body instanceof FormData;
+  const isBinary = typeof Blob !== "undefined" && init.body instanceof Blob || typeof ArrayBuffer !== "undefined" && init.body instanceof ArrayBuffer || typeof Uint8Array !== "undefined" && init.body instanceof Uint8Array;
   const timeoutMs = client.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
-  const applyTimeout = timeoutMs > 0 && init.signal === void 0 && !isFormData;
+  const applyTimeout = timeoutMs > 0 && init.signal === void 0 && !isFormData && !isBinary;
   const bodyTimeoutMs = init.signal === void 0 ? timeoutMs : 0;
   let attempt = 0;
   for (; ; ) {
@@ -852,12 +907,13 @@ async function fetchWithAuth(url, init, client) {
     if (client.apiKey) {
       headers["apikey"] = client.apiKey;
     }
+    const isServiceRole = client.apiKey?.startsWith("aura_sk_") ?? false;
     if (init.authToken) {
       headers["Authorization"] = `Bearer ${init.authToken}`;
-    } else if (store.token) {
+    } else if (store.token && !isServiceRole) {
       headers["Authorization"] = `Bearer ${store.token}`;
     }
-    if (!isFormData && init.body !== void 0) {
+    if (!isFormData && !isBinary && init.body !== void 0) {
       headers["Content-Type"] = headers["Content-Type"] ?? "application/json";
     }
     if (attempt > 0) {
@@ -884,7 +940,15 @@ async function fetchWithAuth(url, init, client) {
       signal: attemptSignal
     };
     if (init.body !== void 0) {
-      requestInit.body = isFormData ? init.body : serializeBody(init.body);
+      if (isFormData) {
+        requestInit.body = init.body;
+      } else if (isBinary) {
+        requestInit.body = init.body;
+      } else if (typeof init.body === "string") {
+        requestInit.body = init.body;
+      } else {
+        requestInit.body = serializeBody(init.body);
+      }
     }
     let res;
     try {
@@ -912,7 +976,7 @@ async function fetchWithAuth(url, init, client) {
       };
     }
     clearTimeoutTimer();
-    if (retryEnabled && attempt < maxRetries && isRetryableStatus(res.status)) {
+    if ((retryEnabled || retryAllowed && res.status === 429) && attempt < maxRetries && isRetryableStatus(res.status)) {
       const delay = Math.min(
         parseRetryAfter(res.headers.get("Retry-After")) ?? computeBackoff(attempt),
         RETRY_AFTER_CAP_MS
@@ -1009,7 +1073,29 @@ async function fetchWithAuth(url, init, client) {
     const cr = res.headers.get("content-range") ?? res.headers.get("Content-Range");
     const crDetails = parseContentRangeDetails(cr);
     const totalFromCr = crDetails.total;
-    const hasMore = crDetails.hasMore;
+    let hasMore = crDetails.hasMore;
+    if (hasMore && Array.isArray(unwrapped)) {
+      let requestedLimit;
+      try {
+        const parsedUrl = new URL(url, "http://localhost");
+        const limitParam = parsedUrl.searchParams.get("limit");
+        if (limitParam !== null) {
+          const n = parseInt(limitParam, 10);
+          if (!Number.isNaN(n) && n >= 0) requestedLimit = n;
+        }
+      } catch {
+      }
+      const preferHdr = String(
+        init.headers?.["Prefer"] ?? init.headers?.["prefer"] ?? ""
+      );
+      const isPlanned = preferHdr.includes("count=planned");
+      const effectiveLimit = Math.min(requestedLimit ?? SERVER_MAX_ROWS, SERVER_MAX_ROWS);
+      if (requestedLimit !== void 0 && unwrapped.length < effectiveLimit) {
+        hasMore = false;
+      } else if (isPlanned && unwrapped.length < effectiveLimit) {
+        hasMore = false;
+      }
+    }
     const rawMeta = body !== null && typeof body === "object" && "meta" in body ? body.meta : void 0;
     const meta = rawMeta !== void 0 ? { ...rawMeta, ...hasMore !== void 0 ? { has_more: hasMore } : {} } : totalFromCr !== void 0 || hasMore !== void 0 ? {
       ...totalFromCr !== void 0 ? { total: totalFromCr } : {},
@@ -1019,7 +1105,7 @@ async function fetchWithAuth(url, init, client) {
     const isDev = Boolean(client.debug) || typeof globalThis !== "undefined" && globalThis.process?.env?.NODE_ENV === "development";
     if (hasMore && isDev) {
       console.warn(
-        "[Aurabase] Query result reached pagination limit of 1,000 rows. Use .range() to paginate further results."
+        `[Aurabase] Query result was capped at ${SERVER_MAX_ROWS} rows by the server (meta.has_more = true): more rows match. Paginate with .range(from, to), .offset(n) or a keyset filter (.gt("id", lastId).order("id")).`
       );
     }
     if (unwrapped === null) {
@@ -1206,6 +1292,7 @@ var LocalAuthStore = class extends BaseAuthStore {
 
 exports.AUTH_SETTINGS_WRITABLE_FIELDS = AUTH_SETTINGS_WRITABLE_FIELDS;
 exports.AuraError = AuraError;
+exports.AurabaseError = AuraError;
 exports.BaseAuthStore = BaseAuthStore;
 exports.BaseService = BaseService;
 exports.DEFAULT_MAX_RETRIES = DEFAULT_MAX_RETRIES;

package/dist/index.d.cts

@@ -426,7 +426,7 @@ interface QueryFilter {
     op: string;
     value: unknown;
 }
-type CountMode = 'exact' | 'estimated';
+type CountMode = 'exact' | 'planned' | 'estimated';
 interface QueryOptions {
     select?: string[];
     filters?: QueryFilter[];
@@ -442,21 +442,35 @@ interface SchemaColumn {
     nullable: boolean;
     unique: boolean;
     default_val?: string | null;
+    is_generated?: boolean;
+    is_identity?: boolean;
+    identity_generation?: string | null;
     references?: {
         table: string;
         column: string;
         constraint_name?: string | null;
+        on_delete?: string | null;
     } | null;
 }
 interface SchemaIndex {
     name: string;
     columns: string[];
     unique: boolean;
+    method?: string | null;
+    where_clause?: string | null;
+    definition?: string | null;
+}
+interface SchemaCheckConstraint {
+    name: string;
+    expression: string;
 }
 interface SchemaTable {
     name: string;
     columns: SchemaColumn[];
     primary_key?: string;
+    primary_key_columns?: string[];
+    unique_constraints?: string[][];
+    check_constraints?: SchemaCheckConstraint[];
     indexes: SchemaIndex[];
     rls_enabled: boolean;
     realtime_enabled: boolean;
@@ -633,6 +647,14 @@ interface ImageTransform {
     resize?: 'cover' | 'contain' | 'fill';
     quality?: number;
     format?: 'origin' | 'jpeg' | 'png' | 'webp' | 'gif';
+    rotate?: 90 | 180 | 270;
+    flip_h?: boolean;
+    flip_v?: boolean;
+}
+interface UploadProgressEvent {
+    loaded: number;
+    total?: number;
+    percentage?: number;
 }
 interface StorageBucket {
     id: string;
@@ -2138,4 +2160,4 @@ declare class LocalAuthStore extends BaseAuthStore {
     private _removeStorage;
 }
 
-export { AUTH_SETTINGS_WRITABLE_FIELDS, type AdminCreateUserRequest, type AdminSessionInfo, type AdminUpdateUserRequest, type AdminUser, type ApnsPublicSettings, type ApnsSettingsPatch, type AuditLogEntry, type AuraClientLike, type AuraClientOptions, AuraError, type AuraErrorCode, type AuraFailure, type AuraNoContent, type AuraObservabilityEvent, type AuraResponse, type AuraSuccess, type AuthChangePayload, type AuthEvent, type AuthSettings, type AuthSettingsUpdate, BaseAuthStore, BaseService, type BatchSendItemResult, type BatchSendResponse, type BroadcastAckMessage, type BroadcastFilter, type BroadcastPayload, type BroadcastSendStatus, type CdcPayload, type ChannelConfig, type ChatMessage, type ChatResponse, type CookieOptions, type CountMode, type CreateNotificationRuleRequest, type CreatePgFunctionRequest, type CreatePgTriggerRequest, type CronJob, DEFAULT_MAX_RETRIES, DEFAULT_REQUEST_TIMEOUT_MS, type EmailTemplateUpdate, type EmbedRequest, type EmbedResponse, type FcmPublicSettings, type FcmSettingsPatch, type FetchInit, type FileEntry, type FilterOp, type FunctionDef, type FunctionPermissions, type GenerateLinkResult, type GenerateLinkType, type GetClaimsResult, type IdentityInfo, type ImageTransform, type Job, type JwtClaims, LocalAuthStore, type LoginResponse, type MagicLinkRequest, type Meta, type MfaChallenge, type MfaEnrollResponse, type MfaFactorType, type MfaVerifyRequest, type Notification, type NotificationAttempt, type NotificationAttemptStatus, type NotificationChannel, type NotificationChannelStats, type NotificationDeadLetter, type NotificationEvent, type NotificationProviderLog, type NotificationQueueStats, type NotificationRule, type NotificationSettings, type NotificationSettingsPatch, type NotificationSettingsPublic, type NotificationStats, type NotificationStatsWindow, type NotificationStatus, type NotificationTemplate, type NotificationTemplatePreview, type OAuthProviderSetting, type OAuthSignInObjectOptions, type OAuthSignInOptions, type ObjectMeta, type PasskeyInfo, type PasskeyRegisterResult, type PasswordResetRequest, type PgExecutableRole, type PgFunctionInfo, type PgTriggerInfo, type PostgresChangesFilter, type PresenceFilter, type PresenceInfo, type PresenceState, type QueryFilter, type QueryOptions, type QuotaPublicSettings, type QuotaSettingsPatch, RETRYABLE_METHODS, RETRYABLE_STATUS, type RagIngestRequest, type RagIngestResponse, type RagRequest, type RagResponse, type RealtimeBroadcastEvent, type RealtimeEvent, type RealtimeListenType, type RealtimePostgresChangesBasePayload, type RealtimePostgresChangesPayload, type RealtimePostgresDeletePayload, type RealtimePostgresInsertPayload, type RealtimePostgresUpdatePayload, type RealtimeSubscribeStatus, type SchemaColumn, type SchemaEnum, type SchemaFunction, type SchemaFunctionArg, type SchemaIndex, type SchemaTable, type SemanticSearchResult, type SendNotificationItem, type SendNotificationOptions, type SendNotificationRequest, type SerializeCookieOptions, type ServerChannelRecoveredMsg, type ServerErrorMsg, type ServerEventMsg, type ServerMessage, type ServerPongMsg, type ServerPresenceStateMsg, type ServerSubscribedMsg, type ServerTokenRefreshedMsg, type Session, type SessionInfo, type SettingsSource, type SignInRequest, type SignUpRequest, type SmtpPublicSettings, type SmtpSettingsPatch, type StorageBucket, type StoredAuth, type SubscribeCallback, type TokenPair, type TwilioPublicSettings, type TwilioSettingsPatch, type UpdateNotificationRuleRequest, type UpdateUserRequest, type UploadResult, type User, type UserStats, type WebhookPublicSettings, type WebhookSettingsPatch, abortableSleep, clientScope, computeBackoff, emitAuraEvent, fetchWithAuth, isAbortError, isAuraError, isRetryableMethod, isRetryableStatus, isTokenExpired, parseCookieHeader, parseRetryAfter, refreshOnce, serializeBody, serializeCookieHeader };
+export { AUTH_SETTINGS_WRITABLE_FIELDS, type AdminCreateUserRequest, type AdminSessionInfo, type AdminUpdateUserRequest, type AdminUser, type ApnsPublicSettings, type ApnsSettingsPatch, type AuditLogEntry, type AuraClientLike, type AuraClientOptions, AuraError, type AuraErrorCode, type AuraFailure, type AuraNoContent, type AuraObservabilityEvent, type AuraResponse, type AuraSuccess, AuraError as AurabaseError, type AuthChangePayload, type AuthEvent, type AuthSettings, type AuthSettingsUpdate, BaseAuthStore, BaseService, type BatchSendItemResult, type BatchSendResponse, type BroadcastAckMessage, type BroadcastFilter, type BroadcastPayload, type BroadcastSendStatus, type CdcPayload, type ChannelConfig, type ChatMessage, type ChatResponse, type CookieOptions, type CountMode, type CreateNotificationRuleRequest, type CreatePgFunctionRequest, type CreatePgTriggerRequest, type CronJob, DEFAULT_MAX_RETRIES, DEFAULT_REQUEST_TIMEOUT_MS, type EmailTemplateUpdate, type EmbedRequest, type EmbedResponse, type FcmPublicSettings, type FcmSettingsPatch, type FetchInit, type FileEntry, type FilterOp, type FunctionDef, type FunctionPermissions, type GenerateLinkResult, type GenerateLinkType, type GetClaimsResult, type IdentityInfo, type ImageTransform, type Job, type JwtClaims, LocalAuthStore, type LoginResponse, type MagicLinkRequest, type Meta, type MfaChallenge, type MfaEnrollResponse, type MfaFactorType, type MfaVerifyRequest, type Notification, type NotificationAttempt, type NotificationAttemptStatus, type NotificationChannel, type NotificationChannelStats, type NotificationDeadLetter, type NotificationEvent, type NotificationProviderLog, type NotificationQueueStats, type NotificationRule, type NotificationSettings, type NotificationSettingsPatch, type NotificationSettingsPublic, type NotificationStats, type NotificationStatsWindow, type NotificationStatus, type NotificationTemplate, type NotificationTemplatePreview, type OAuthProviderSetting, type OAuthSignInObjectOptions, type OAuthSignInOptions, type ObjectMeta, type PasskeyInfo, type PasskeyRegisterResult, type PasswordResetRequest, type PgExecutableRole, type PgFunctionInfo, type PgTriggerInfo, type PostgresChangesFilter, type PresenceFilter, type PresenceInfo, type PresenceState, type QueryFilter, type QueryOptions, type QuotaPublicSettings, type QuotaSettingsPatch, RETRYABLE_METHODS, RETRYABLE_STATUS, type RagIngestRequest, type RagIngestResponse, type RagRequest, type RagResponse, type RealtimeBroadcastEvent, type RealtimeEvent, type RealtimeListenType, type RealtimePostgresChangesBasePayload, type RealtimePostgresChangesPayload, type RealtimePostgresDeletePayload, type RealtimePostgresInsertPayload, type RealtimePostgresUpdatePayload, type RealtimeSubscribeStatus, type SchemaCheckConstraint, type SchemaColumn, type SchemaEnum, type SchemaFunction, type SchemaFunctionArg, type SchemaIndex, type SchemaTable, type SemanticSearchResult, type SendNotificationItem, type SendNotificationOptions, type SendNotificationRequest, type SerializeCookieOptions, type ServerChannelRecoveredMsg, type ServerErrorMsg, type ServerEventMsg, type ServerMessage, type ServerPongMsg, type ServerPresenceStateMsg, type ServerSubscribedMsg, type ServerTokenRefreshedMsg, type Session, type SessionInfo, type SettingsSource, type SignInRequest, type SignUpRequest, type SmtpPublicSettings, type SmtpSettingsPatch, type StorageBucket, type StoredAuth, type SubscribeCallback, type TokenPair, type TwilioPublicSettings, type TwilioSettingsPatch, type UpdateNotificationRuleRequest, type UpdateUserRequest, type UploadProgressEvent, type UploadResult, type User, type UserStats, type WebhookPublicSettings, type WebhookSettingsPatch, abortableSleep, clientScope, computeBackoff, emitAuraEvent, fetchWithAuth, isAbortError, isAuraError, isRetryableMethod, isRetryableStatus, isTokenExpired, parseCookieHeader, parseRetryAfter, refreshOnce, serializeBody, serializeCookieHeader };

package/dist/index.d.ts

@@ -426,7 +426,7 @@ interface QueryFilter {
     op: string;
     value: unknown;
 }
-type CountMode = 'exact' | 'estimated';
+type CountMode = 'exact' | 'planned' | 'estimated';
 interface QueryOptions {
     select?: string[];
     filters?: QueryFilter[];
@@ -442,21 +442,35 @@ interface SchemaColumn {
     nullable: boolean;
     unique: boolean;
     default_val?: string | null;
+    is_generated?: boolean;
+    is_identity?: boolean;
+    identity_generation?: string | null;
     references?: {
         table: string;
         column: string;
         constraint_name?: string | null;
+        on_delete?: string | null;
     } | null;
 }
 interface SchemaIndex {
     name: string;
     columns: string[];
     unique: boolean;
+    method?: string | null;
+    where_clause?: string | null;
+    definition?: string | null;
+}
+interface SchemaCheckConstraint {
+    name: string;
+    expression: string;
 }
 interface SchemaTable {
     name: string;
     columns: SchemaColumn[];
     primary_key?: string;
+    primary_key_columns?: string[];
+    unique_constraints?: string[][];
+    check_constraints?: SchemaCheckConstraint[];
     indexes: SchemaIndex[];
     rls_enabled: boolean;
     realtime_enabled: boolean;
@@ -633,6 +647,14 @@ interface ImageTransform {
     resize?: 'cover' | 'contain' | 'fill';
     quality?: number;
     format?: 'origin' | 'jpeg' | 'png' | 'webp' | 'gif';
+    rotate?: 90 | 180 | 270;
+    flip_h?: boolean;
+    flip_v?: boolean;
+}
+interface UploadProgressEvent {
+    loaded: number;
+    total?: number;
+    percentage?: number;
 }
 interface StorageBucket {
     id: string;
@@ -2138,4 +2160,4 @@ declare class LocalAuthStore extends BaseAuthStore {
     private _removeStorage;
 }
 
-export { AUTH_SETTINGS_WRITABLE_FIELDS, type AdminCreateUserRequest, type AdminSessionInfo, type AdminUpdateUserRequest, type AdminUser, type ApnsPublicSettings, type ApnsSettingsPatch, type AuditLogEntry, type AuraClientLike, type AuraClientOptions, AuraError, type AuraErrorCode, type AuraFailure, type AuraNoContent, type AuraObservabilityEvent, type AuraResponse, type AuraSuccess, type AuthChangePayload, type AuthEvent, type AuthSettings, type AuthSettingsUpdate, BaseAuthStore, BaseService, type BatchSendItemResult, type BatchSendResponse, type BroadcastAckMessage, type BroadcastFilter, type BroadcastPayload, type BroadcastSendStatus, type CdcPayload, type ChannelConfig, type ChatMessage, type ChatResponse, type CookieOptions, type CountMode, type CreateNotificationRuleRequest, type CreatePgFunctionRequest, type CreatePgTriggerRequest, type CronJob, DEFAULT_MAX_RETRIES, DEFAULT_REQUEST_TIMEOUT_MS, type EmailTemplateUpdate, type EmbedRequest, type EmbedResponse, type FcmPublicSettings, type FcmSettingsPatch, type FetchInit, type FileEntry, type FilterOp, type FunctionDef, type FunctionPermissions, type GenerateLinkResult, type GenerateLinkType, type GetClaimsResult, type IdentityInfo, type ImageTransform, type Job, type JwtClaims, LocalAuthStore, type LoginResponse, type MagicLinkRequest, type Meta, type MfaChallenge, type MfaEnrollResponse, type MfaFactorType, type MfaVerifyRequest, type Notification, type NotificationAttempt, type NotificationAttemptStatus, type NotificationChannel, type NotificationChannelStats, type NotificationDeadLetter, type NotificationEvent, type NotificationProviderLog, type NotificationQueueStats, type NotificationRule, type NotificationSettings, type NotificationSettingsPatch, type NotificationSettingsPublic, type NotificationStats, type NotificationStatsWindow, type NotificationStatus, type NotificationTemplate, type NotificationTemplatePreview, type OAuthProviderSetting, type OAuthSignInObjectOptions, type OAuthSignInOptions, type ObjectMeta, type PasskeyInfo, type PasskeyRegisterResult, type PasswordResetRequest, type PgExecutableRole, type PgFunctionInfo, type PgTriggerInfo, type PostgresChangesFilter, type PresenceFilter, type PresenceInfo, type PresenceState, type QueryFilter, type QueryOptions, type QuotaPublicSettings, type QuotaSettingsPatch, RETRYABLE_METHODS, RETRYABLE_STATUS, type RagIngestRequest, type RagIngestResponse, type RagRequest, type RagResponse, type RealtimeBroadcastEvent, type RealtimeEvent, type RealtimeListenType, type RealtimePostgresChangesBasePayload, type RealtimePostgresChangesPayload, type RealtimePostgresDeletePayload, type RealtimePostgresInsertPayload, type RealtimePostgresUpdatePayload, type RealtimeSubscribeStatus, type SchemaColumn, type SchemaEnum, type SchemaFunction, type SchemaFunctionArg, type SchemaIndex, type SchemaTable, type SemanticSearchResult, type SendNotificationItem, type SendNotificationOptions, type SendNotificationRequest, type SerializeCookieOptions, type ServerChannelRecoveredMsg, type ServerErrorMsg, type ServerEventMsg, type ServerMessage, type ServerPongMsg, type ServerPresenceStateMsg, type ServerSubscribedMsg, type ServerTokenRefreshedMsg, type Session, type SessionInfo, type SettingsSource, type SignInRequest, type SignUpRequest, type SmtpPublicSettings, type SmtpSettingsPatch, type StorageBucket, type StoredAuth, type SubscribeCallback, type TokenPair, type TwilioPublicSettings, type TwilioSettingsPatch, type UpdateNotificationRuleRequest, type UpdateUserRequest, type UploadResult, type User, type UserStats, type WebhookPublicSettings, type WebhookSettingsPatch, abortableSleep, clientScope, computeBackoff, emitAuraEvent, fetchWithAuth, isAbortError, isAuraError, isRetryableMethod, isRetryableStatus, isTokenExpired, parseCookieHeader, parseRetryAfter, refreshOnce, serializeBody, serializeCookieHeader };
+export { AUTH_SETTINGS_WRITABLE_FIELDS, type AdminCreateUserRequest, type AdminSessionInfo, type AdminUpdateUserRequest, type AdminUser, type ApnsPublicSettings, type ApnsSettingsPatch, type AuditLogEntry, type AuraClientLike, type AuraClientOptions, AuraError, type AuraErrorCode, type AuraFailure, type AuraNoContent, type AuraObservabilityEvent, type AuraResponse, type AuraSuccess, AuraError as AurabaseError, type AuthChangePayload, type AuthEvent, type AuthSettings, type AuthSettingsUpdate, BaseAuthStore, BaseService, type BatchSendItemResult, type BatchSendResponse, type BroadcastAckMessage, type BroadcastFilter, type BroadcastPayload, type BroadcastSendStatus, type CdcPayload, type ChannelConfig, type ChatMessage, type ChatResponse, type CookieOptions, type CountMode, type CreateNotificationRuleRequest, type CreatePgFunctionRequest, type CreatePgTriggerRequest, type CronJob, DEFAULT_MAX_RETRIES, DEFAULT_REQUEST_TIMEOUT_MS, type EmailTemplateUpdate, type EmbedRequest, type EmbedResponse, type FcmPublicSettings, type FcmSettingsPatch, type FetchInit, type FileEntry, type FilterOp, type FunctionDef, type FunctionPermissions, type GenerateLinkResult, type GenerateLinkType, type GetClaimsResult, type IdentityInfo, type ImageTransform, type Job, type JwtClaims, LocalAuthStore, type LoginResponse, type MagicLinkRequest, type Meta, type MfaChallenge, type MfaEnrollResponse, type MfaFactorType, type MfaVerifyRequest, type Notification, type NotificationAttempt, type NotificationAttemptStatus, type NotificationChannel, type NotificationChannelStats, type NotificationDeadLetter, type NotificationEvent, type NotificationProviderLog, type NotificationQueueStats, type NotificationRule, type NotificationSettings, type NotificationSettingsPatch, type NotificationSettingsPublic, type NotificationStats, type NotificationStatsWindow, type NotificationStatus, type NotificationTemplate, type NotificationTemplatePreview, type OAuthProviderSetting, type OAuthSignInObjectOptions, type OAuthSignInOptions, type ObjectMeta, type PasskeyInfo, type PasskeyRegisterResult, type PasswordResetRequest, type PgExecutableRole, type PgFunctionInfo, type PgTriggerInfo, type PostgresChangesFilter, type PresenceFilter, type PresenceInfo, type PresenceState, type QueryFilter, type QueryOptions, type QuotaPublicSettings, type QuotaSettingsPatch, RETRYABLE_METHODS, RETRYABLE_STATUS, type RagIngestRequest, type RagIngestResponse, type RagRequest, type RagResponse, type RealtimeBroadcastEvent, type RealtimeEvent, type RealtimeListenType, type RealtimePostgresChangesBasePayload, type RealtimePostgresChangesPayload, type RealtimePostgresDeletePayload, type RealtimePostgresInsertPayload, type RealtimePostgresUpdatePayload, type RealtimeSubscribeStatus, type SchemaCheckConstraint, type SchemaColumn, type SchemaEnum, type SchemaFunction, type SchemaFunctionArg, type SchemaIndex, type SchemaTable, type SemanticSearchResult, type SendNotificationItem, type SendNotificationOptions, type SendNotificationRequest, type SerializeCookieOptions, type ServerChannelRecoveredMsg, type ServerErrorMsg, type ServerEventMsg, type ServerMessage, type ServerPongMsg, type ServerPresenceStateMsg, type ServerSubscribedMsg, type ServerTokenRefreshedMsg, type Session, type SessionInfo, type SettingsSource, type SignInRequest, type SignUpRequest, type SmtpPublicSettings, type SmtpSettingsPatch, type StorageBucket, type StoredAuth, type SubscribeCallback, type TokenPair, type TwilioPublicSettings, type TwilioSettingsPatch, type UpdateNotificationRuleRequest, type UpdateUserRequest, type UploadProgressEvent, type UploadResult, type User, type UserStats, type WebhookPublicSettings, type WebhookSettingsPatch, abortableSleep, clientScope, computeBackoff, emitAuraEvent, fetchWithAuth, isAbortError, isAuraError, isRetryableMethod, isRetryableStatus, isTokenExpired, parseCookieHeader, parseRetryAfter, refreshOnce, serializeBody, serializeCookieHeader };

package/dist/index.js

@@ -561,16 +561,69 @@ function unwrapEnvelope(body) {
   }
   return body;
 }
+function quoteUnsafeIntsInJson(raw) {
+  let out = "";
+  let i = 0;
+  const n = raw.length;
+  while (i < n) {
+    const ch = raw[i];
+    if (ch === '"') {
+      const start = i++;
+      while (i < n) {
+        const c = raw[i];
+        if (c === "\\") {
+          i += 2;
+          continue;
+        }
+        if (c === '"') {
+          i++;
+          break;
+        }
+        i++;
+      }
+      out += raw.slice(start, i);
+      continue;
+    }
+    if (ch === "-" || ch >= "0" && ch <= "9") {
+      const prev = out.trimEnd().slice(-1);
+      const isValueStart = prev === "" || prev === ":" || prev === "[" || prev === ",";
+      const start = i;
+      if (ch === "-") i++;
+      const digitStart = i;
+      while (i < n && raw[i] >= "0" && raw[i] <= "9") i++;
+      const isFloatOrExp = i < n && (raw[i] === "." || raw[i] === "e" || raw[i] === "E");
+      if (isFloatOrExp) {
+        while (i < n && /[0-9eE+\-.]/.test(raw[i])) i++;
+        out += raw.slice(start, i);
+        continue;
+      }
+      const token = raw.slice(start, i);
+      const digits = raw.slice(digitStart, i);
+      if (isValueStart && digits.length >= 16) {
+        const num = Number(token);
+        if (!Number.isSafeInteger(num)) {
+          out += `"${token}"`;
+          continue;
+        }
+      }
+      out += token;
+      continue;
+    }
+    out += ch;
+    i++;
+  }
+  return out;
+}
 function parseJsonBody(raw, parseBigIntAsString) {
   if (parseBigIntAsString) {
-    const safe = raw.replace(/([:\[,]\s*)(-?\d{16,})(?=\s*[,}\]])/g, '$1"$2"');
-    return JSON.parse(safe);
+    return JSON.parse(quoteUnsafeIntsInJson(raw));
   }
   return JSON.parse(raw);
 }
 function parseContentRangeTotal(headerVal) {
   return parseContentRangeDetails(headerVal).total;
 }
+var SERVER_MAX_ROWS = 1e3;
 function parseContentRangeDetails(headerVal) {
   if (!headerVal) return { total: void 0, hasMore: void 0 };
   const parts = headerVal.split("/");
@@ -590,7 +643,7 @@ function parseContentRangeDetails(headerVal) {
       if (!Number.isNaN(start) && !Number.isNaN(end)) {
         if (total !== void 0) {
           hasMore = end + 1 < total;
-        } else if (end - start + 1 >= 1e3) {
+        } else if (end - start + 1 >= SERVER_MAX_ROWS) {
           hasMore = true;
         }
       }
@@ -837,12 +890,14 @@ async function fetchWithAuth(url, init, client) {
     await maybeRefresh(client);
   }
   const method = (init.method ?? "GET").toUpperCase();
-  const retryEnabled = !init.skipRetry && (client.retryConfig?.enabled ?? true) && isRetryableMethod(method);
+  const retryAllowed = !init.skipRetry && (client.retryConfig?.enabled ?? true);
+  const retryEnabled = retryAllowed && isRetryableMethod(method);
   const maxRetries = client.retryConfig?.maxRetries ?? DEFAULT_MAX_RETRIES;
   const store = client.authStore;
   const isFormData = typeof FormData !== "undefined" && init.body instanceof FormData;
+  const isBinary = typeof Blob !== "undefined" && init.body instanceof Blob || typeof ArrayBuffer !== "undefined" && init.body instanceof ArrayBuffer || typeof Uint8Array !== "undefined" && init.body instanceof Uint8Array;
   const timeoutMs = client.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
-  const applyTimeout = timeoutMs > 0 && init.signal === void 0 && !isFormData;
+  const applyTimeout = timeoutMs > 0 && init.signal === void 0 && !isFormData && !isBinary;
   const bodyTimeoutMs = init.signal === void 0 ? timeoutMs : 0;
   let attempt = 0;
   for (; ; ) {
@@ -850,12 +905,13 @@ async function fetchWithAuth(url, init, client) {
     if (client.apiKey) {
       headers["apikey"] = client.apiKey;
     }
+    const isServiceRole = client.apiKey?.startsWith("aura_sk_") ?? false;
     if (init.authToken) {
       headers["Authorization"] = `Bearer ${init.authToken}`;
-    } else if (store.token) {
+    } else if (store.token && !isServiceRole) {
       headers["Authorization"] = `Bearer ${store.token}`;
     }
-    if (!isFormData && init.body !== void 0) {
+    if (!isFormData && !isBinary && init.body !== void 0) {
       headers["Content-Type"] = headers["Content-Type"] ?? "application/json";
     }
     if (attempt > 0) {
@@ -882,7 +938,15 @@ async function fetchWithAuth(url, init, client) {
       signal: attemptSignal
     };
     if (init.body !== void 0) {
-      requestInit.body = isFormData ? init.body : serializeBody(init.body);
+      if (isFormData) {
+        requestInit.body = init.body;
+      } else if (isBinary) {
+        requestInit.body = init.body;
+      } else if (typeof init.body === "string") {
+        requestInit.body = init.body;
+      } else {
+        requestInit.body = serializeBody(init.body);
+      }
     }
     let res;
     try {
@@ -910,7 +974,7 @@ async function fetchWithAuth(url, init, client) {
       };
     }
     clearTimeoutTimer();
-    if (retryEnabled && attempt < maxRetries && isRetryableStatus(res.status)) {
+    if ((retryEnabled || retryAllowed && res.status === 429) && attempt < maxRetries && isRetryableStatus(res.status)) {
       const delay = Math.min(
         parseRetryAfter(res.headers.get("Retry-After")) ?? computeBackoff(attempt),
         RETRY_AFTER_CAP_MS
@@ -1007,7 +1071,29 @@ async function fetchWithAuth(url, init, client) {
     const cr = res.headers.get("content-range") ?? res.headers.get("Content-Range");
     const crDetails = parseContentRangeDetails(cr);
     const totalFromCr = crDetails.total;
-    const hasMore = crDetails.hasMore;
+    let hasMore = crDetails.hasMore;
+    if (hasMore && Array.isArray(unwrapped)) {
+      let requestedLimit;
+      try {
+        const parsedUrl = new URL(url, "http://localhost");
+        const limitParam = parsedUrl.searchParams.get("limit");
+        if (limitParam !== null) {
+          const n = parseInt(limitParam, 10);
+          if (!Number.isNaN(n) && n >= 0) requestedLimit = n;
+        }
+      } catch {
+      }
+      const preferHdr = String(
+        init.headers?.["Prefer"] ?? init.headers?.["prefer"] ?? ""
+      );
+      const isPlanned = preferHdr.includes("count=planned");
+      const effectiveLimit = Math.min(requestedLimit ?? SERVER_MAX_ROWS, SERVER_MAX_ROWS);
+      if (requestedLimit !== void 0 && unwrapped.length < effectiveLimit) {
+        hasMore = false;
+      } else if (isPlanned && unwrapped.length < effectiveLimit) {
+        hasMore = false;
+      }
+    }
     const rawMeta = body !== null && typeof body === "object" && "meta" in body ? body.meta : void 0;
     const meta = rawMeta !== void 0 ? { ...rawMeta, ...hasMore !== void 0 ? { has_more: hasMore } : {} } : totalFromCr !== void 0 || hasMore !== void 0 ? {
       ...totalFromCr !== void 0 ? { total: totalFromCr } : {},
@@ -1017,7 +1103,7 @@ async function fetchWithAuth(url, init, client) {
     const isDev = Boolean(client.debug) || typeof globalThis !== "undefined" && globalThis.process?.env?.NODE_ENV === "development";
     if (hasMore && isDev) {
       console.warn(
-        "[Aurabase] Query result reached pagination limit of 1,000 rows. Use .range() to paginate further results."
+        `[Aurabase] Query result was capped at ${SERVER_MAX_ROWS} rows by the server (meta.has_more = true): more rows match. Paginate with .range(from, to), .offset(n) or a keyset filter (.gt("id", lastId).order("id")).`
       );
     }
     if (unwrapped === null) {
@@ -1202,4 +1288,4 @@ var LocalAuthStore = class extends BaseAuthStore {
   }
 };
 
-export { AUTH_SETTINGS_WRITABLE_FIELDS, AuraError, BaseAuthStore, BaseService, DEFAULT_MAX_RETRIES, DEFAULT_REQUEST_TIMEOUT_MS, LocalAuthStore, RETRYABLE_METHODS, RETRYABLE_STATUS, abortableSleep, clientScope, computeBackoff, emitAuraEvent, fetchWithAuth, isAbortError, isAuraError, isRetryableMethod, isRetryableStatus, isTokenExpired, parseCookieHeader, parseRetryAfter, refreshOnce, serializeBody, serializeCookieHeader };
+export { AUTH_SETTINGS_WRITABLE_FIELDS, AuraError, AuraError as AurabaseError, BaseAuthStore, BaseService, DEFAULT_MAX_RETRIES, DEFAULT_REQUEST_TIMEOUT_MS, LocalAuthStore, RETRYABLE_METHODS, RETRYABLE_STATUS, abortableSleep, clientScope, computeBackoff, emitAuraEvent, fetchWithAuth, isAbortError, isAuraError, isRetryableMethod, isRetryableStatus, isTokenExpired, parseCookieHeader, parseRetryAfter, refreshOnce, serializeBody, serializeCookieHeader };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aurabase/core",
-  "version": "0.7.3",
+  "version": "0.7.5",
   "description": "Cœur du SDK Aurabase : fetch résilient, erreurs, stores auth, types de réponse (infrastructure interne)",
   "type": "module",
   "main": "dist/index.cjs",
@@ -48,7 +48,7 @@
     "@types/node": "20.14.15",
     "tsup": "^8.0.0",
     "typescript": "^5.5.0",
-    "vitest": "^4.1.6"
+    "vitest": "^4.1.12"
   },
   "scripts": {
     "build": "tsup",