@gusnips/react 0.9.24 → 0.9.26

package/dist/query.d.ts

@@ -1,37 +1,36 @@
 import type { DefaultOptions } from "@tanstack/react-query";
 /**
- * react-query defaults — the merge of three repos that each got part of this right.
+ * react-query defaults merged from three repos that each got part of this right.
  *
  * The default is three blind retries, which is wrong for an API that answers refusals
  * precisely: a 402, a 403 or a 451 says exactly the same thing three times, and a 429 we hammer
  * is a 429 we deserve. All three donors knew that much. What each knew alone:
  *
  * - one allowed **408** through, the only 4xx that a second attempt genuinely fixes;
- * - one refused to retry a 429 whose CODE says the limit is durable — a monthly quota or a
- *   spent balance clears by buying, not by waiting, so retrying burns another request against
+ * - one refused to retry a 429 whose CODE says the limit is durable. A monthly quota or a spent balance clears by buying, not by waiting, so retrying burns another request against
  *   the limiter and cannot succeed;
  * - one set **`refetchOnReconnect`**, which none of the others had, and which is the single
  *   most useful refetch there is: coming back from a tunnel is exactly when the screen is stale.
  *
  * The second migration added the fourth rule, which no donor had: **when a 429 says how long,
  * believe it.** Its limiter answers `Retry-After: 60` on a per-minute window, and the default
- * backoff retries at 1s and 2s — two more requests that cannot succeed, both charged against the
- * same limiter, and three seconds added before the screen says anything. So a stated wait is
+ * backoff retries at 1s and 2s, sending two more requests that cannot succeed, both charged against
+ * the same limiter, and three seconds added before the screen says anything. So a stated wait is
  * waited out when it is short, and is an ANSWER when it is not.
  *
  * The fifth rule came from the server half of this fleet rather than from a donor: a refusal can
  * state that waiting will never fix it at all, by sending `details.retryAfterSecs: null`. Read as
- * "did not say how long" — which is what every version before this one did — that 429 is retried
- * against a limit no amount of time moves.
+ * "did not say how long", as every version before this one did, that 429 is retried against a limit
+ * no amount of time moves.
  *
  * This is invariant 8. The rule itself lives in `@gusnips/http/retry`, so an SDK with no React
  * in it follows the same one; what is here is the binding to react-query.
  */
 export interface QueryDefaultsOptions {
     /**
-     * Error codes that mean "this limit does not clear by waiting" — a spent monthly quota, a
-     * balance that needs topping up. They usually arrive as 402 or 429; the status alone cannot
-     * tell them apart from a burst limit, which is why the caller names them.
+     * Error codes for limits that do not clear by waiting, such as a spent monthly quota or a balance
+     * that needs topping up. They usually arrive as 402 or 429; the status alone cannot tell them
+     * apart from a burst limit, which is why the caller names them.
      *
      * Only needed where the server does not say so itself. One that sends
      * `details.retryAfterSecs: null` has already made the claim and `shouldRetry` reads it, which
@@ -43,10 +42,10 @@ export interface QueryDefaultsOptions {
     /**
      * Longest stated wait still worth retrying. Default 10 seconds.
      *
-     * Only applies when the refusal named its own expiry (`Retry-After`, or `retryAfterSecs` in
-     * the body). A burst limit that clears in two seconds is worth sitting out; a monthly ceiling
-     * that clears in an hour is an answer, and holding a spinner for it helps nobody — show the
-     * wait instead, which is what `humanizeWait` is for.
+     * Only applies when the refusal named its own expiry (`Retry-After`, or `retryAfterSecs` in the
+     * body). A burst limit that clears in two seconds is worth sitting out; a monthly ceiling that
+     * clears in an hour is an answer, and holding a spinner for it helps nobody. Show the wait
+     * instead, which is what `humanizeWait` is for.
      */
     maxRetryWaitSecs?: number;
     staleTime?: number;
@@ -67,8 +66,8 @@ export interface QueryDefaultsOptions {
 export declare function shouldRetry(error: unknown, durableLimitCodes?: readonly string[], maxRetryWaitSecs?: number): boolean;
 /**
  * How long before the next attempt: the server's stated wait when there is one, an exponential
- * backoff with jitter otherwise, and never less than the backoff — a `Retry-After: 0` is a
- * server saying "immediately", which for a client that just got refused is still too soon.
+ * backoff with jitter otherwise, and never less than the backoff. A `Retry-After: 0` is a server
+ * saying "immediately", which for a client that just got refused is still too soon.
  */
 export declare function retryDelayMs(attemptIndex: number, error: unknown): number;
 export declare function queryDefaults({ durableLimitCodes, maxRetries, maxRetryWaitSecs, staleTime, gcTime, refetchOnWindowFocus, }?: QueryDefaultsOptions): DefaultOptions;
@@ -77,7 +76,7 @@ export declare function queryDefaults({ durableLimitCodes, maxRetries, maxRetryW
  * When it is ready, `refreshError` says whether the last refresh failed.
  *
  * **Never gate a screen on `isError`.** It is also true when a BACKGROUND refetch fails over data
- * already on screen — a window regaining focus, a poll, the invalidation after a save — so
+ * already on screen after a window regains focus, a poll or the invalidation after a save. So
  * `isError ? <failure panel> : <data>` throws away what the reader was looking at over one blip.
  * The adopters that had noticed each wrote `isLoadingError` beside a comment saying so; the ones
  * that had not were a boundary and a great many inline ternaries. A refresh that failed is not a

package/dist/query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../src/query.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,iBAAiB,GAAE,SAAS,MAAM,EAAO,EACzC,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAOT;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAEzE;AAYD,wBAAgB,aAAa,CAAC,EAC5B,iBAAsB,EACtB,UAAc,EACd,gBAAgB,EAChB,SAAyB,EACzB,MAAuB,EACvB,oBAA4B,GAC7B,GAAE,oBAAyB,GAAG,cAAc,CAe5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,IAChC;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,IAAI,CAAA;CAAE,CAAC;AAEnF,wBAAgB,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE;IACrC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;CAC3B,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAMlB"}
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../src/query.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,iBAAiB,GAAE,SAAS,MAAM,EAAO,EACzC,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAOT;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAEzE;AAYD,wBAAgB,aAAa,CAAC,EAC5B,iBAAsB,EACtB,UAAc,EACd,gBAAgB,EAChB,SAAyB,EACzB,MAAuB,EACvB,oBAA4B,GAC7B,GAAE,oBAAyB,GAAG,cAAc,CAe5C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,IAChC;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,IAAI,CAAA;CAAE,CAAC;AAEnF,wBAAgB,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE;IACrC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;CAC3B,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAMlB"}

package/dist/query.js

@@ -16,8 +16,8 @@ export function shouldRetry(error, durableLimitCodes = [], maxRetryWaitSecs) {
 }
 /**
  * How long before the next attempt: the server's stated wait when there is one, an exponential
- * backoff with jitter otherwise, and never less than the backoff — a `Retry-After: 0` is a
- * server saying "immediately", which for a client that just got refused is still too soon.
+ * backoff with jitter otherwise, and never less than the backoff. A `Retry-After: 0` is a server
+ * saying "immediately", which for a client that just got refused is still too soon.
  */
 export function retryDelayMs(attemptIndex, error) {
     return delayFor(attemptIndex, answerOf(error));

package/dist/query.js.map

@@ -1 +1 @@
-{"version":3,"file":"query.js","sourceRoot":"","sources":["../src/query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,IAAI,QAAQ,EAAE,WAAW,IAAI,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEzF,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AA+D1C;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,oBAAuC,EAAE,EACzC,gBAAyB;IAEzB,gGAAgG;IAChG,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAChC,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,iBAAiB;QAC/B,WAAW,EAAE,gBAAgB;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,KAAc;IAC/D,OAAO,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAC5B,iBAAiB,GAAG,EAAE,EACtB,UAAU,GAAG,CAAC,EACd,gBAAgB,EAChB,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EACzB,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EACvB,oBAAoB,GAAG,KAAK,MACJ,EAAE;IAC1B,OAAO;QACL,OAAO,EAAE;YACP,SAAS;YACT,MAAM;YACN,KAAK,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,CAC7B,YAAY,GAAG,UAAU,IAAI,WAAW,CAAC,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;YACtF,UAAU,EAAE,YAAY;YACxB,oBAAoB;YACpB,kBAAkB,EAAE,IAAI;SACzB;QACD,2FAA2F;QAC3F,yFAAyF;QACzF,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KAC5B,CAAC;AACJ,CAAC;AAkCD,MAAM,UAAU,SAAS,CAAO,KAG/B;IACC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC7E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../src/query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,IAAI,QAAQ,EAAE,WAAW,IAAI,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEzF,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AA8D1C;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,oBAAuC,EAAE,EACzC,gBAAyB;IAEzB,gGAAgG;IAChG,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAChC,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,iBAAiB;QAC/B,WAAW,EAAE,gBAAgB;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,KAAc;IAC/D,OAAO,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAC5B,iBAAiB,GAAG,EAAE,EACtB,UAAU,GAAG,CAAC,EACd,gBAAgB,EAChB,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EACzB,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EACvB,oBAAoB,GAAG,KAAK,MACJ,EAAE;IAC1B,OAAO;QACL,OAAO,EAAE;YACP,SAAS;YACT,MAAM;YACN,KAAK,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,CAC7B,YAAY,GAAG,UAAU,IAAI,WAAW,CAAC,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,CAAC;YACtF,UAAU,EAAE,YAAY;YACxB,oBAAoB;YACpB,kBAAkB,EAAE,IAAI;SACzB;QACD,2FAA2F;QAC3F,yFAAyF;QACzF,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;KAC5B,CAAC;AACJ,CAAC;AAkCD,MAAM,UAAU,SAAS,CAAO,KAG/B;IACC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC7E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACtD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC"}

package/dist/sse.d.ts

@@ -1,25 +1,25 @@
 /**
  * Server-sent events: the framing and the transport, kept apart.
  *
- * Three donors had three readers and each had half the answer. One was spec-correct about the
- * wire but welded to `TextDecoderStream`, so the React Native app — whose fetch has no body
- * reader — could not use a line of it. One was a platform-free `feed(text)` that three
- * transports shared, and it silently dropped data. One was a whole second transport with its
- * own fetch and its own 401 handling, bypassing the app's only API client.
+ * Three donors had three readers and each had half the answer. One was spec-correct about the wire
+ * but welded to `TextDecoderStream`, so the React Native app, whose fetch has no body reader, could
+ * not use a line of it. One was a platform-free `feed(text)` that three transports shared, and it
+ * silently dropped data. One was a whole second transport with its own fetch and its own 401
+ * handling, bypassing the app's only API client.
  *
  * So: {@link createSseParser} is the state machine and knows about no platform at all;
  * {@link readSseStream} is fifteen lines of `ReadableStream` on top of it. A caller on a
  * platform without body readers keeps its own fifteen lines and shares the machine underneath.
  * (providerkit reached this exact split from the other direction and for the same reason.)
  *
- * And streams ride the ordinary API client — `client.request(path, {headers: {Accept:
- * "text/event-stream"}, timeoutMs: null})`. Not `EventSource`, which cannot carry an
- * Authorization header, and not a second fetch, which would need its own copy of the refresh
- * logic and would drift from it.
+ * And streams ride the ordinary API client: `client.request(path, {headers: {Accept:
+ * "text/event-stream"}, timeoutMs: null})`. Not `EventSource`, which cannot carry an Authorization
+ * header, and not a second fetch, which would need its own copy of the refresh logic and would
+ * drift from it.
  */
 /** One frame off the wire. `data` is raw text; see {@link createSseParser} on why. */
 export interface SseFrame {
-    /** The `event:` field, or `"message"` — which is what the spec says an unnamed frame is. */
+    /** The `event:` field, or `"message"` for an unnamed frame, as the spec requires. */
     event: string;
     /** Every `data:` line in the frame, joined with newlines. Never parsed here. */
     data: string;
@@ -29,23 +29,22 @@ export interface SseFrame {
 /**
  * An incremental parser. Feed it text in whatever sizes the transport delivers.
  *
- * Frames split across reads are held until they complete, so a payload cut mid-line is never
- * lost or truncated — which is the failure this shape exists to prevent, and the one that only
- * shows up under a slow network.
+ * Frames split across reads are held until they complete, so a payload cut mid-line is never lost
+ * or truncated. That is the failure this shape exists to prevent, and the one that only shows up
+ * under a slow network.
  *
  * Three rules that are easy to get wrong, and one donor got each of them wrong:
  *
  * - **`data:` repeats.** A frame may carry several `data:` lines and they are JOINED with
- *   newlines. One donor assigned instead of appending, so a multi-line payload arrived as its
- *   last line only — no error, no warning, just a truncated message.
+ *   newlines. One donor assigned instead of appending, so a multi-line payload arrived as its last line only, with no error or warning, just a truncated message.
  * - **Strip ONE leading space after the colon**, not all whitespace. `.trim()` is the obvious
  *   thing and it corrupts any payload whose own content begins or ends with a space.
  * - **A frame with no `data:` is not dispatched.** That is what lets a server send bare
  *   `event: heartbeat` keepalives, or `:` comment lines, without waking a consumer.
  *
- * `data` is handed back as a raw string and deliberately NOT JSON-parsed. One donor parsed here
- * and its three consumers wanted three different things — one wraps non-JSON, one uses a
- * tolerant parser, one parses directly. Parsing in the parser picks a policy for all of them.
+ * `data` is handed back as a raw string and deliberately NOT JSON-parsed. One donor parsed here and
+ * its three consumers wanted three different things: one wraps non-JSON, one uses a tolerant
+ * parser, one parses directly. Parsing in the parser picks a policy for all of them.
  */
 export declare function createSseParser(onFrame: (frame: SseFrame) => void): {
     feed: (text: string) => void;
@@ -57,8 +56,8 @@ export declare function createSseParser(onFrame: (frame: SseFrame) => void): {
  * single-flight refresh, and a 402 or a 404 arriving as an `ApiError` the page can explain
  * rather than an `onerror` event with nothing in it.
  *
- * Cancels the reader on the way out however it leaves — a stream abandoned without cancelling
- * holds the connection open until the server gives up on it.
+ * Cancels the reader on the way out however it leaves. A stream abandoned without cancelling holds
+ * the connection open until the server gives up on it.
  */
 export declare function readSseStream(response: Response, onFrame: (frame: SseFrame) => void): Promise<void>;
 //# sourceMappingURL=sse.d.ts.map

package/dist/sse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,sFAAsF;AACtF,MAAM,WAAW,QAAQ;IACvB,4FAA4F;IAC5F,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,EAAE,EAAE,MAAM,GAAG,SAAS,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG;IACnE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,CAgBA;AAqBD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GACjC,OAAO,CAAC,IAAI,CAAC,CAaf"}
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,sFAAsF;AACtF,MAAM,WAAW,QAAQ;IACvB,qFAAqF;IACrF,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,EAAE,EAAE,MAAM,GAAG,SAAS,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG;IACnE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,CAgBA;AAqBD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GACjC,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/sse.js

@@ -1,42 +1,41 @@
 /**
  * Server-sent events: the framing and the transport, kept apart.
  *
- * Three donors had three readers and each had half the answer. One was spec-correct about the
- * wire but welded to `TextDecoderStream`, so the React Native app — whose fetch has no body
- * reader — could not use a line of it. One was a platform-free `feed(text)` that three
- * transports shared, and it silently dropped data. One was a whole second transport with its
- * own fetch and its own 401 handling, bypassing the app's only API client.
+ * Three donors had three readers and each had half the answer. One was spec-correct about the wire
+ * but welded to `TextDecoderStream`, so the React Native app, whose fetch has no body reader, could
+ * not use a line of it. One was a platform-free `feed(text)` that three transports shared, and it
+ * silently dropped data. One was a whole second transport with its own fetch and its own 401
+ * handling, bypassing the app's only API client.
  *
  * So: {@link createSseParser} is the state machine and knows about no platform at all;
  * {@link readSseStream} is fifteen lines of `ReadableStream` on top of it. A caller on a
  * platform without body readers keeps its own fifteen lines and shares the machine underneath.
  * (providerkit reached this exact split from the other direction and for the same reason.)
  *
- * And streams ride the ordinary API client — `client.request(path, {headers: {Accept:
- * "text/event-stream"}, timeoutMs: null})`. Not `EventSource`, which cannot carry an
- * Authorization header, and not a second fetch, which would need its own copy of the refresh
- * logic and would drift from it.
+ * And streams ride the ordinary API client: `client.request(path, {headers: {Accept:
+ * "text/event-stream"}, timeoutMs: null})`. Not `EventSource`, which cannot carry an Authorization
+ * header, and not a second fetch, which would need its own copy of the refresh logic and would
+ * drift from it.
  */
 /**
  * An incremental parser. Feed it text in whatever sizes the transport delivers.
  *
- * Frames split across reads are held until they complete, so a payload cut mid-line is never
- * lost or truncated — which is the failure this shape exists to prevent, and the one that only
- * shows up under a slow network.
+ * Frames split across reads are held until they complete, so a payload cut mid-line is never lost
+ * or truncated. That is the failure this shape exists to prevent, and the one that only shows up
+ * under a slow network.
  *
  * Three rules that are easy to get wrong, and one donor got each of them wrong:
  *
  * - **`data:` repeats.** A frame may carry several `data:` lines and they are JOINED with
- *   newlines. One donor assigned instead of appending, so a multi-line payload arrived as its
- *   last line only — no error, no warning, just a truncated message.
+ *   newlines. One donor assigned instead of appending, so a multi-line payload arrived as its last line only, with no error or warning, just a truncated message.
  * - **Strip ONE leading space after the colon**, not all whitespace. `.trim()` is the obvious
  *   thing and it corrupts any payload whose own content begins or ends with a space.
  * - **A frame with no `data:` is not dispatched.** That is what lets a server send bare
  *   `event: heartbeat` keepalives, or `:` comment lines, without waking a consumer.
  *
- * `data` is handed back as a raw string and deliberately NOT JSON-parsed. One donor parsed here
- * and its three consumers wanted three different things — one wraps non-JSON, one uses a
- * tolerant parser, one parses directly. Parsing in the parser picks a policy for all of them.
+ * `data` is handed back as a raw string and deliberately NOT JSON-parsed. One donor parsed here and
+ * its three consumers wanted three different things: one wraps non-JSON, one uses a tolerant
+ * parser, one parses directly. Parsing in the parser picks a policy for all of them.
  */
 export function createSseParser(onFrame) {
     let buffer = "";
@@ -82,8 +81,8 @@ function parseFrame(raw) {
  * single-flight refresh, and a 402 or a 404 arriving as an `ApiError` the page can explain
  * rather than an `onerror` event with nothing in it.
  *
- * Cancels the reader on the way out however it leaves — a stream abandoned without cancelling
- * holds the connection open until the server gives up on it.
+ * Cancels the reader on the way out however it leaves. A stream abandoned without cancelling holds
+ * the connection open until the server gives up on it.
  */
 export async function readSseStream(response, onFrame) {
     if (!response.body)

package/dist/sse.js.map

@@ -1 +1 @@
-{"version":3,"file":"sse.js","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAYH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAAC,OAAkC;IAGhE,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,OAAO;QACL,IAAI,CAAC,IAAY;YACf,yEAAyE;YACzE,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjC,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC/C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;gBAC/B,IAAI,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1B,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,KAAK,GAAG,SAAS,CAAC;IACtB,IAAI,EAAsB,CAAC;IAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,KAAK,KAAK,OAAO;YAAE,KAAK,GAAG,KAAK,CAAC;aAChC,IAAI,KAAK,KAAK,IAAI;YAAE,EAAE,GAAG,KAAK,CAAC;aAC/B,IAAI,KAAK,KAAK,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAkB,EAClB,OAAkC;IAElC,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO;IAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IAC9E,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAYH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe,CAAC,OAAkC;IAGhE,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,OAAO;QACL,IAAI,CAAC,IAAY;YACf,yEAAyE;YACzE,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjC,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC/C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;gBAC/B,IAAI,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC1B,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,KAAK,GAAG,SAAS,CAAC;IACtB,IAAI,EAAsB,CAAC;IAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,KAAK,KAAK,OAAO;YAAE,KAAK,GAAG,KAAK,CAAC;aAChC,IAAI,KAAK,KAAK,IAAI;YAAE,EAAE,GAAG,KAAK,CAAC;aAC/B,IAAI,KAAK,KAAK,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAkB,EAClB,OAAkC;IAElC,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO;IAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IAC9E,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/states.d.ts

@@ -4,10 +4,10 @@ import type { ReactNode } from "react";
  * somebody remembers.
  *
  * **No component ships here, on purpose.** Seven repos have an `EmptyState.tsx` and an
- * `ErrorState.tsx`, and read side by side they overlap 9–37%: one draws a tinted icon badge,
- * one a branded illustration set, one a mascot. What they genuinely share is the PROP SHAPE —
- * which is the rule itself, and the only part a package can hold without deciding how eight
- * brands look. Same reasoning as the styled Button: share behaviour, skin per product.
+ * `ErrorState.tsx`, and read side by side they overlap 9–37%: one draws a tinted icon badge, one a
+ * branded illustration set, one a mascot. What they genuinely share is the PROP SHAPE, which is the
+ * rule itself, and the only part a package can hold without deciding how eight brands look. Same
+ * reasoning as the styled Button: share behaviour, skin per product.
  *
  * Import the type, write your own component against it, and the compiler enforces the rest.
  */
@@ -20,16 +20,16 @@ import type { ReactNode } from "react";
  * `action` is optional only because some panels fill themselves once a job upstream finishes.
  */
 export interface EmptyStateProps {
-    /** What this panel is for. "No lookups yet" — not "No results". */
+    /** What this panel is for. Use "No lookups yet", not "No results". */
     title: string;
     /** What belongs here, and what it will show once it does. */
     description: ReactNode;
     /** The way forward, as a control. Usually one button. */
     action?: ReactNode;
     /**
-     * `3` inside a panel that already sits under a page heading — the default and the common
-     * case. `1` when this composer IS the page (a 404, a suspended account), which otherwise
-     * ships a document with no `h1` in it at all.
+     * Defaults to `3` for a panel that already sits under a page heading, the common case. `1` when
+     * this composer IS the page (a 404, a suspended account), which otherwise ships a document with
+     * no `h1` in it at all.
      *
      * Only one donor had this, and it is the difference between a screen reader announcing a
      * page and announcing nothing.
@@ -46,9 +46,9 @@ export interface EmptyStateProps {
  * Something did not work.
  *
  * `problem` names what failed, `cause` says why it most likely happened, `fix` says what to do
- * about it, and `action` is that fix as a control. **`fix` and `action` are both required** — a
- * required prop is the only version of "never dead-end" that a caller in a hurry cannot skip,
- * and the donor that made them required is the one whose error screens all have a way out.
+ * about it, and `action` is that fix as a control. **`fix` and `action` are both required**. A
+ * required prop is the only version of "never dead-end" that a caller in a hurry cannot skip, and
+ * the donor that made them required is the one whose error screens all have a way out.
  *
  * Not a place for a stack trace. `cause` is what a person can act on ("the site answered too
  * slowly"), with the request id, if there is one, alongside it in `reference`.
@@ -63,7 +63,7 @@ export interface ErrorStateProps {
     cause?: ReactNode;
     /** The way forward, in words. */
     fix: ReactNode;
-    /** The way forward, as a control — usually a retry button. */
+    /** The way forward as a control, usually a retry button. */
     action: ReactNode;
     /** A request id or code, for a support thread. Set in mono, never shouted. */
     reference?: ReactNode;

package/dist/states.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"states.d.ts","sourceRoot":"","sources":["../src/states.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC;;;;;;;;;;;GAWG;AAEH;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,WAAW,EAAE,SAAS,CAAC;IACvB,yDAAyD;IACzD,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,iCAAiC;IACjC,GAAG,EAAE,SAAS,CAAC;IACf,8DAA8D;IAC9D,MAAM,EAAE,SAAS,CAAC;IAClB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,gDAAgD;IAChD,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"states.d.ts","sourceRoot":"","sources":["../src/states.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC;;;;;;;;;;;GAWG;AAEH;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,WAAW,EAAE,SAAS,CAAC;IACvB,yDAAyD;IACzD,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,iCAAiC;IACjC,GAAG,EAAE,SAAS,CAAC;IACf,4DAA4D;IAC5D,MAAM,EAAE,SAAS,CAAC;IAClB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,gDAAgD;IAChD,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/supabase-session.d.ts

@@ -32,33 +32,33 @@ export interface SupabaseSessionStorage {
  * Auth FAILED rather than answered, so nothing is known about the credential it was handed:
  * either the request never landed, or GoTrue failed on its own.
  *
- * This is the question every site that ends a session has to ask — a token refresh, an API
- * door, and a callback choosing between "try again" and "that link is spent". Without it one
- * bad minute at GoTrue signs out everybody whose token happened to need refreshing, and tells
- * everybody clicking a recovery link that it has expired, which sends them to ask the service
- * that is down for a replacement.
+ * This is the question every site that ends a session has to ask: a token refresh, an API door, and
+ * a callback choosing between "try again" and "that link is spent". Without it one bad minute at
+ * GoTrue signs out everybody whose token happened to need refreshing, and tells everybody clicking
+ * a recovery link that it has expired, which sends them to ask the service that is down for a
+ * replacement.
  *
  * Both clauses carry weight, and the second is why this is a function rather than one call.
  * `isAuthRetryableFetchError` is a NAME check, and the statuses that earn that name are a list
- * auth-js owns. The list has drifted — 502, 503 and 504 at 2.91; those plus the 52x family and
- * still no 500 at 2.106; 500 through 530 at 2.108 — so code leaning on it alone is right at
- * whichever version happens to be installed, which is not the same as being right, and a fleet
- * installs several versions at once. It is also a LIST rather than a range, so it has holes at
- * every version, drift or no drift: at 2.112 nothing covers 505 through 519 or 531 up, and a
- * 507 or a 599 with a JSON body arrives as a plain `AuthApiError`. Pinning a recent SDK does not
- * make the status clause redundant.
- *
- * The same statuses with a body that is NOT JSON — a proxy's HTML page — arrive as an
- * `AuthUnknownError`, which carries no status at any status, so nothing here can tell that 507
- * from a malformed 400. It answers false for both, on purpose: reading an unreadable 4xx as an
- * outage would leave a dead session retrying forever, which is the other half of the same bug.
+ * auth-js owns. The list has drifted: 502, 503 and 504 at 2.91; those plus the 52x family and still
+ * no 500 at 2.106; 500 through 530 at 2.108. Code leaning on it alone is right at whichever version
+ * happens to be installed, which is not the same as being right, and a fleet installs several
+ * versions at once. It is also a LIST rather than a range, so it has holes at every version, drift
+ * or no drift: at 2.112 nothing covers 505 through 519 or 531 up, and a 507 or a 599 with a JSON
+ * body arrives as a plain `AuthApiError`. Pinning a recent SDK does not make the status clause
+ * redundant.
+ *
+ * The same statuses with a body that is NOT JSON, such as a proxy's HTML page, arrive as an
+ * `AuthUnknownError`, which carries no status at any status, so nothing here can tell that 507 from
+ * a malformed 400. It answers false for both, on purpose: reading an unreadable 4xx as an outage
+ * would leave a dead session retrying forever, which is the other half of the same bug.
  *
  * Read the version a tree really serves with `bun why @supabase/auth-js`, which prints one
  * heading per RESOLVED version; `node_modules` keeps copies the resolver does not serve.
  *
- * Anything that is not an auth error at all answers true: a failure from outside auth-js is not
- * a verdict on the credential either. Nothing at all answers false — `null` is what every
- * supabase-js auth call returns on success, and success is not an outage.
+ * Anything that is not an auth error at all answers true: a failure from outside auth-js is not a
+ * verdict on the credential either. Nothing at all answers false. `null` is what every supabase-js
+ * auth call returns on success, and success is not an outage.
  */
 export declare function isAuthOutage(error: unknown): boolean;
 /**
@@ -108,12 +108,12 @@ export declare function supabaseAuthStorage(supabaseUrl: string): SupabaseSessio
  * 2.116.0 and 41–51 s at 2.106.2. Nobody at a shared computer waits that long, and a page that
  * navigates away in the meantime takes the removal with it.
  *
- * It resolves once the stored session is gone. `error` is `null` when auth ended the session on
- * the server too. Otherwise it is the reason auth did not — its error, a thrown value, or the
- * deadline — and the session may still be live on the server and on other devices. `SIGNED_OUT`
- * arrives once auth-js has finished with the first call: about 100 ms later from 2.108.2 on, and
- * up to 22 s later at 2.106.2. If your screen does not reload, clear your own store when this
- * resolves instead of waiting for the event.
+ * It resolves once the stored session is gone. `error` is `null` when auth ended the session on the
+ * server too. Otherwise it is the reason auth did not: its error, a thrown value or the deadline.
+ * The session may still be live on the server and on other devices. `SIGNED_OUT` arrives once
+ * auth-js has finished with the first call: about 100 ms later from 2.108.2 on, and up to 22 s
+ * later at 2.106.2. If your screen does not reload, clear your own store when this resolves instead
+ * of waiting for the event.
  */
 export declare function signOutEvenOffline(auth: Pick<SupabaseSessionAuth, "signOut">, { storage, storageKey }: SupabaseSessionStorage): Promise<{
     error: unknown;
@@ -138,7 +138,7 @@ export declare function signOutEvenOffline(auth: Pick<SupabaseSessionAuth, "sign
  */
 export declare function createSupabaseSessionAdapter(auth: SupabaseSessionAuth, stored?: SupabaseSessionStorage): SessionAdapter;
 /**
- * Every link type a GoTrue email can carry — not only the ones this app's templates send today.
+ * Every link type a GoTrue email can carry, including ones this app's templates do not send today.
  * One donor rejected `invite` because "invites are never sent", which was true of the product and
  * false of the deployment: an operator inviting somebody from Studio sent a branded email whose
  * link then said it was invalid. A type the templates never emit costs nothing to accept: the hash
@@ -146,9 +146,9 @@ export declare function createSupabaseSessionAdapter(auth: SupabaseSessionAuth,
  *
  * Closed on purpose: auth-js's own `EmailOtpType` ends in `(string & {})`, so it cannot make a
  * destination map name every case. `Record<EmailLinkType, string>` can, and that is where an app
- * decides that `recovery` and `invite` both continue to the new-password screen — GoTrue creates
- * an invited account with NO password, so landing one "inside" signs them in once and locks them
- * out after.
+ * decides that `recovery` and `invite` both continue to the new-password screen. GoTrue creates an
+ * invited account with NO password, so landing one "inside" signs them in once and locks them out
+ * after.
  */
 export type EmailLinkType = "signup" | "invite" | "magiclink" | "recovery" | "email_change" | "email";
 /** Everything an auth callback address can carry, decided from the address alone. */
@@ -161,10 +161,10 @@ export type AuthCallback =
 }
 /**
  * A session arriving in the address: a PKCE `code`, or the implicit flow's tokens. In a browser
- * with `detectSessionInUrl` on, the client has already taken it — wait for the session, and do
- * not trade it again, which would be a second exchange racing the first. Where nothing reads
- * the address for you (React Native), `credential` is what `exchangeCodeForSession` or
- * `setSession` takes.
+ * with `detectSessionInUrl` on, the client has already taken it. Wait for the session, and do not
+ * trade it again, which would be a second exchange racing the first. Where nothing reads the
+ * address for you (React Native), `credential` is what `exchangeCodeForSession` or `setSession`
+ * takes.
  */
  | {
     kind: "session";
@@ -177,10 +177,9 @@ export type AuthCallback =
     };
 }
 /**
- * GoTrue, or the provider behind it, reported a failure in the address. `code` is GoTrue's
- * stable `error_code` (`otp_expired`, `bad_oauth_state`, …) and is what to choose words by;
- * `error_description` is left out on purpose — it is English-only and often names the wrong
- * cause.
+ * GoTrue, or the provider behind it, reported a failure in the address. `code` is GoTrue's stable
+ * `error_code` (`otp_expired`, `bad_oauth_state`, …) and is what to choose words by;
+ * `error_description` is left out because it is English-only and often names the wrong cause.
  */
  | {
     kind: "error";
@@ -194,19 +193,19 @@ export type AuthCallback =
 };
 /**
  * Reads an auth callback address. Pure, so every edge case is testable without a router or a
- * client — pass `location.search` and `location.hash`, or the two halves of a deep link.
+ * client. Pass `location.search` and `location.hash`, or the two halves of a deep link.
  *
- * GoTrue writes a failure into the FRAGMENT on every path and into the query only on some — the
- * query too after a provider round trip, the fragment alone after an implicit-flow email link —
- * so a callback reading one of the two misses a failure the other carries, and the person lands
+ * GoTrue writes a failure into the FRAGMENT on every path and into the query only on some. After a
+ * provider round trip, it writes both; after an implicit-flow email link, it writes the fragment
+ * alone. A callback reading one of the two misses a failure the other carries, and the person lands
  * on a screen that says nothing. Both are read here.
  *
- * `cancelled` is the provider refusing on its own, which for Google is the person pressing Cancel
- * — their choice, not a failure to report. It is NOT `error === "access_denied"`: GoTrue writes
- * that same value for an expired email link, a banned user and a disabled signup, each with an
- * `error_code` beside it, while a refusal relayed from the provider arrives with none. The obvious
- * test reads an expired link as a change of mind. And `error` itself is absent for a status
- * outside GoTrue's OAuth mapping — a rate-limited link arrives with `error_code` alone.
+ * `cancelled` is the provider refusing on its own, which for Google is the person pressing Cancel.
+ * That is their choice, not a failure to report. It is NOT `error === "access_denied"`: GoTrue
+ * writes that same value for an expired email link, a banned user and a disabled signup, each with
+ * an `error_code` beside it, while a refusal relayed from the provider arrives with none. The
+ * obvious test reads an expired link as a change of mind. And `error` itself is absent for a status
+ * outside GoTrue's OAuth mapping. A rate-limited link arrives with `error_code` alone.
  */
 export declare function parseAuthCallback(search: string | URLSearchParams, hash?: string): AuthCallback;
 export {};

package/dist/supabase-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"supabase-session.d.ts","sourceRoot":"","sources":["../src/supabase-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,OAAO,EAGZ,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE3E,UAAU,qBAAqB;IAC7B,IAAI,EAAE;QAAE,OAAO,EAAE;YAAE,YAAY,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAC;CACpD;AAED,8FAA8F;AAC9F,MAAM,WAAW,mBAAmB;IAClC,UAAU,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7C,cAAc,IAAI,OAAO,CAAC,qBAAqB,GAAG;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACtE,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACzD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASpD;AAaD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,sBAAsB,CAE/E;AA2BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,EAC1C,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,sBAAsB,GAC9C,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAyB7B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,mBAAmB,EACzB,MAAM,CAAC,EAAE,sBAAsB,GAC9B,cAAc,CAsBhB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa,GACvB,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,cAAc,GAAG,OAAO,CAAC;AAiB5E,qFAAqF;AACrF,MAAM,MAAM,YAAY;AACtB,0FAA0F;AACxF;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE;AAChE;;;;;;GAMG;GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CAChF;AACH;;;;;GAKG;GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE;AAClF,qFAAqF;GACnF;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAExB;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,EAAE,IAAI,SAAK,GAAG,YAAY,CA6B3F"}
+{"version":3,"file":"supabase-session.d.ts","sourceRoot":"","sources":["../src/supabase-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,OAAO,EAGZ,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE3E,UAAU,qBAAqB;IAC7B,IAAI,EAAE;QAAE,OAAO,EAAE;YAAE,YAAY,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAC;CACpD;AAED,8FAA8F;AAC9F,MAAM,WAAW,mBAAmB;IAClC,UAAU,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7C,cAAc,IAAI,OAAO,CAAC,qBAAqB,GAAG;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACtE,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACzD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASpD;AAaD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,sBAAsB,CAE/E;AA2BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,EAC1C,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,sBAAsB,GAC9C,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAyB7B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,mBAAmB,EACzB,MAAM,CAAC,EAAE,sBAAsB,GAC9B,cAAc,CAsBhB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa,GACvB,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,cAAc,GAAG,OAAO,CAAC;AAiB5E,qFAAqF;AACrF,MAAM,MAAM,YAAY;AACtB,0FAA0F;AACxF;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE;AAChE;;;;;;GAMG;GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CAChF;AACH;;;;GAIG;GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE;AAClF,qFAAqF;GACnF;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAExB;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,EAAE,IAAI,SAAK,GAAG,YAAY,CA6B3F"}