@insforge/sdk 1.4.3 → 1.4.4

package/dist/{client-B6eZHolm.d.mts → client-BZyLCjO1.d.mts}

@@ -1,5 +1,5 @@
 import { A as AuthSession, I as InsForgeConfig, e as AuthRefreshResponse, d as InsForgeError } from './types-MKmYAYeg.mjs';
-import { UserSchema, CreateUserRequest, CreateUserResponse, CreateSessionRequest, CreateSessionResponse, OAuthProvidersSchema, RefreshSessionResponse, GetProfileResponse, SendVerificationEmailRequest, VerifyEmailRequest, VerifyEmailResponse, SendResetPasswordEmailRequest, ExchangeResetPasswordTokenRequest, ExchangeResetPasswordTokenResponse, ResetPasswordResponse, GetPublicAuthConfigResponse, StorageFileSchema, ListObjectsResponseSchema, ChatCompletionRequest, ImageGenerationRequest, EmbeddingsRequest, SubscribeResponse, SocketMessage, SendRawEmailRequest, SendEmailResponse, StripeEnvironment, CreateCheckoutSessionBody, CreateCheckoutSessionResponse, CreateCustomerPortalSessionBody, CreateCustomerPortalSessionResponse, RazorpayEnvironment, CreateRazorpayOrderBody, CreateRazorpayOrderResponse, VerifyRazorpayOrderBody, VerifyRazorpayOrderResponse, CreateRazorpaySubscriptionBody, CreateRazorpaySubscriptionResponse, VerifyRazorpaySubscriptionBody, VerifyRazorpaySubscriptionResponse, CancelRazorpaySubscriptionBodyInput, CancelRazorpaySubscriptionResponse, PauseRazorpaySubscriptionResponse, ResumeRazorpaySubscriptionResponse } from '@insforge/shared-schemas';
+import { UserSchema, CreateUserRequest, CreateUserResponse, CreateSessionRequest, CreateSessionResponse, OAuthProvidersSchema, RefreshSessionResponse, GetProfileResponse, SendVerificationEmailRequest, VerifyEmailRequest, VerifyEmailResponse, SendResetPasswordEmailRequest, ExchangeResetPasswordTokenRequest, ExchangeResetPasswordTokenResponse, ResetPasswordResponse, GetPublicAuthConfigResponse, StorageFileSchema, ListObjectsResponseSchema, ChatCompletionRequest, ImageGenerationRequest, EmbeddingsRequest, SubscribeResponse, SocketMessage, PresenceMember, SendRawEmailRequest, SendEmailResponse, StripeEnvironment, CreateCheckoutSessionBody, CreateCheckoutSessionResponse, CreateCustomerPortalSessionBody, CreateCustomerPortalSessionResponse, RazorpayEnvironment, CreateRazorpayOrderBody, CreateRazorpayOrderResponse, VerifyRazorpayOrderBody, VerifyRazorpayOrderResponse, CreateRazorpaySubscriptionBody, CreateRazorpaySubscriptionResponse, VerifyRazorpaySubscriptionBody, VerifyRazorpaySubscriptionResponse, CancelRazorpaySubscriptionBodyInput, CancelRazorpaySubscriptionResponse, PauseRazorpaySubscriptionResponse, ResumeRazorpaySubscriptionResponse } from '@insforge/shared-schemas';
 import * as _supabase_postgrest_js from '@supabase/postgrest-js';
 import { PostgrestClient } from '@supabase/postgrest-js';
 
@@ -73,15 +73,22 @@ declare class Logger {
  * Memory-only token storage.
  */
 
+declare const AuthChangeEvent: {
+    readonly SIGNED_IN: "signedIn";
+    readonly SIGNED_OUT: "signedOut";
+    readonly TOKEN_REFRESHED: "tokenRefreshed";
+};
+type AuthChangeEvent = (typeof AuthChangeEvent)[keyof typeof AuthChangeEvent];
+type AuthStateChangeCallback = (event: AuthChangeEvent) => void;
 declare class TokenManager {
     private accessToken;
     private user;
-    onTokenChange: (() => void) | null;
+    private authStateChangeCallbacks;
     constructor();
     /**
      * Save session in memory
      */
-    saveSession(session: AuthSession): void;
+    saveSession(session: AuthSession, event?: AuthChangeEvent): void;
     /**
      * Get current session
      */
@@ -93,7 +100,7 @@ declare class TokenManager {
     /**
      * Set access token
      */
-    setAccessToken(token: string): void;
+    setAccessToken(token: string, event?: AuthChangeEvent): void;
     /**
      * Get user
      */
@@ -106,6 +113,8 @@ declare class TokenManager {
      * Clear in-memory session
      */
     clearSession(): void;
+    onAuthStateChange(callback: AuthStateChangeCallback): () => void;
+    private notifyAuthStateChange;
 }
 
 type JsonRequestBody = Record<string, unknown> | unknown[] | null;
@@ -194,6 +203,8 @@ declare class HttpClient {
     /** Returns the current default headers including the authorization header if set. */
     getHeaders(): Record<string, string>;
     refreshAccessToken(): Promise<AuthRefreshResponse>;
+    /** Returns a token safe to use for a new connection handshake. */
+    getValidAccessToken(leewaySeconds?: number): Promise<string | null>;
     private refreshAndSaveSession;
     private clearAuthSession;
 }
@@ -222,6 +233,8 @@ declare class Auth {
     private authCallbackHandled;
     constructor(http: HttpClient, tokenManager: TokenManager, options?: AuthOptions);
     private isServerMode;
+    /** Subscribe to SDK authentication state changes. */
+    onAuthStateChange(callback: AuthStateChangeCallback): () => void;
     /**
      * Save session from API response
      * Handles token storage, CSRF token, and HTTP auth header
@@ -794,135 +807,42 @@ declare class Functions {
 type ConnectionState = 'disconnected' | 'connecting' | 'connected';
 type EventCallback<T = unknown> = (payload: T) => void;
 /**
- * Realtime module for subscribing to channels and handling real-time events
- *
- * @example
- * ```typescript
- * const { realtime } = client;
- *
- * // Connect to the realtime server
- * await realtime.connect();
- *
- * // Subscribe to a channel
- * const response = await realtime.subscribe('orders:123');
- * if (!response.ok) {
- *   console.error('Failed to subscribe:', response.error);
- * }
- *
- * // Listen for specific events
- * realtime.on('order_updated', (payload) => {
- *   console.log('Order updated:', payload);
- * });
- *
- * // Listen for connection events
- * realtime.on('connect', () => console.log('Connected!'));
- * realtime.on('connect_error', (err) => console.error('Connection failed:', err));
- * realtime.on('disconnect', (reason) => console.log('Disconnected:', reason));
- * realtime.on('error', (error) => console.error('Realtime error:', error));
- *
- * // Publish a message to a channel
- * await realtime.publish('orders:123', 'status_changed', { status: 'shipped' });
- *
- * // Unsubscribe and disconnect when done
- * realtime.unsubscribe('orders:123');
- * realtime.disconnect();
- * ```
+ * Socket.IO realtime client. Authentication is evaluated for every handshake,
+ * while an established socket remains authenticated until it disconnects.
  */
 declare class Realtime {
     private baseUrl;
     private tokenManager;
+    private anonKey?;
+    private getValidAccessToken;
     private socket;
     private connectPromise;
-    private subscribedChannels;
+    private connectionAttempt;
+    private nextConnectionAttemptId;
+    private subscriptions;
     private eventListeners;
-    private anonKey?;
-    constructor(baseUrl: string, tokenManager: TokenManager, anonKey?: string);
+    constructor(baseUrl: string, tokenManager: TokenManager, anonKey?: string | undefined, getValidAccessToken?: () => Promise<string | null>);
     private notifyListeners;
-    /**
-     * Connect to the realtime server
-     * @returns Promise that resolves when connected
-     */
+    private getHandshakeToken;
     connect(): Promise<void>;
-    /**
-     * Disconnect from the realtime server
-     */
     disconnect(): void;
-    /**
-     * Handle token changes (e.g., after auth refresh)
-     * Updates socket auth so reconnects use the new token
-     * If connected, triggers reconnect to apply new token immediately
-     */
-    private onTokenChange;
-    /**
-     * Check if connected to the realtime server
-     */
+    private reconnectForAuthChange;
+    private handleDisconnect;
+    private resubscribeChannels;
+    private requestSubscription;
+    private settleSubscription;
+    private applyPresenceEvent;
     get isConnected(): boolean;
-    /**
-     * Get the current connection state
-     */
     get connectionState(): ConnectionState;
-    /**
-     * Get the socket ID (if connected)
-     */
     get socketId(): string | undefined;
-    /**
-     * Subscribe to a channel
-     *
-     * Automatically connects if not already connected.
-     *
-     * @param channel - Channel name (e.g., 'orders:123', 'broadcast')
-     * @returns Promise with the subscription response
-     */
     subscribe(channel: string): Promise<SubscribeResponse>;
-    /**
-     * Unsubscribe from a channel (fire-and-forget)
-     *
-     * @param channel - Channel name to unsubscribe from
-     */
     unsubscribe(channel: string): void;
-    /**
-     * Publish a message to a channel
-     *
-     * @param channel - Channel name
-     * @param event - Event name
-     * @param payload - Message payload
-     */
     publish<T = unknown>(channel: string, event: string, payload: T): Promise<void>;
-    /**
-     * Listen for events
-     *
-     * Reserved event names:
-     * - 'connect' - Fired when connected to the server
-     * - 'connect_error' - Fired when connection fails (payload: Error)
-     * - 'disconnect' - Fired when disconnected (payload: reason string)
-     * - 'error' - Fired when a realtime error occurs (payload: RealtimeErrorPayload)
-     *
-     * All other events receive a `SocketMessage` payload with metadata.
-     *
-     * @param event - Event name to listen for
-     * @param callback - Callback function when event is received
-     */
     on<T = SocketMessage>(event: string, callback: EventCallback<T>): void;
-    /**
-     * Remove a listener for a specific event
-     *
-     * @param event - Event name
-     * @param callback - The callback function to remove
-     */
     off<T = SocketMessage>(event: string, callback: EventCallback<T>): void;
-    /**
-     * Listen for an event only once, then automatically remove the listener
-     *
-     * @param event - Event name to listen for
-     * @param callback - Callback function when event is received
-     */
     once<T = SocketMessage>(event: string, callback: EventCallback<T>): void;
-    /**
-     * Get all currently subscribed channels
-     *
-     * @returns Array of channel names
-     */
     getSubscribedChannels(): string[];
+    getPresenceState(channel: string): PresenceMember[];
 }
 
 /**
@@ -1030,6 +950,7 @@ declare class Payments {
     constructor(http: HttpClient);
 }
 
+type AccessTokenChangeEvent = typeof AuthChangeEvent.SIGNED_IN | typeof AuthChangeEvent.TOKEN_REFRESHED;
 /**
  * Main InsForge SDK Client
  *
@@ -1099,27 +1020,30 @@ declare class InsForgeClient {
     /**
      * Set the access token used by every SDK surface. Updates both the HTTP
      * client (database / storage / functions / AI / emails) and the realtime
-     * token manager (which fires `onTokenChange` to reconnect the WebSocket
-     * with the new bearer). Pass `null` to clear.
+     * token manager. Pass `null` to sign out. By default a token replacement is
+     * treated as a sign-in boundary and reconnects realtime. Pass
+     * `AuthChangeEvent.TOKEN_REFRESHED` for a same-identity refresh to preserve a live socket; the
+     * refreshed token is then used at the next handshake.
      *
      * Use this when an external auth provider (Better Auth, Clerk, Auth0,
      * WorkOS, Kinde, Stytch, …) issues the JWT and you need to keep the
      * long-lived InsForge client in sync. Without this, you'd have to call
      * `client.getHttpClient().setAuthToken(token)` AND reach into the private
-     * `client.realtime.tokenManager.setAccessToken(token)` separately —
-     * forgetting the second one silently breaks realtime auth.
+     * realtime token manager separately.
      *
      * @example
      * ```typescript
+     * import { AuthChangeEvent } from '@insforge/sdk';
+     *
      * // Refresh a third-party-issued JWT periodically
      * const { token } = await fetch('/api/insforge-token').then((r) => r.json());
-     * client.setAccessToken(token);
+     * client.setAccessToken(token, AuthChangeEvent.TOKEN_REFRESHED);
      *
      * // Sign-out
      * client.setAccessToken(null);
      * ```
      */
-    setAccessToken(token: string | null): void;
+    setAccessToken(token: string | null, event?: AccessTokenChangeEvent): void;
 }
 
-export { Auth as A, type ConnectionState as C, Database as D, Emails as E, Functions as F, HttpClient as H, InsForgeClient as I, Logger as L, Payments as P, Realtime as R, Storage as S, TokenManager as T, StorageBucket as a, type StorageResponse as b, AI as c, type FunctionInvokeOptions as d, type PaymentsResponse as e, type EventCallback as f };
+export { type AccessTokenChangeEvent as A, type ConnectionState as C, Database as D, Emails as E, Functions as F, HttpClient as H, InsForgeClient as I, Logger as L, Payments as P, Realtime as R, Storage as S, Auth as a, StorageBucket as b, type StorageResponse as c, AI as d, type FunctionInvokeOptions as e, type PaymentsResponse as f, type EventCallback as g, AuthChangeEvent as h, type AuthStateChangeCallback as i };

package/dist/{client-DUmOm_3W.d.ts → client-Dh7GOydb.d.ts}

@@ -1,5 +1,5 @@
 import { A as AuthSession, I as InsForgeConfig, e as AuthRefreshResponse, d as InsForgeError } from './types-MKmYAYeg.js';
-import { UserSchema, CreateUserRequest, CreateUserResponse, CreateSessionRequest, CreateSessionResponse, OAuthProvidersSchema, RefreshSessionResponse, GetProfileResponse, SendVerificationEmailRequest, VerifyEmailRequest, VerifyEmailResponse, SendResetPasswordEmailRequest, ExchangeResetPasswordTokenRequest, ExchangeResetPasswordTokenResponse, ResetPasswordResponse, GetPublicAuthConfigResponse, StorageFileSchema, ListObjectsResponseSchema, ChatCompletionRequest, ImageGenerationRequest, EmbeddingsRequest, SubscribeResponse, SocketMessage, SendRawEmailRequest, SendEmailResponse, StripeEnvironment, CreateCheckoutSessionBody, CreateCheckoutSessionResponse, CreateCustomerPortalSessionBody, CreateCustomerPortalSessionResponse, RazorpayEnvironment, CreateRazorpayOrderBody, CreateRazorpayOrderResponse, VerifyRazorpayOrderBody, VerifyRazorpayOrderResponse, CreateRazorpaySubscriptionBody, CreateRazorpaySubscriptionResponse, VerifyRazorpaySubscriptionBody, VerifyRazorpaySubscriptionResponse, CancelRazorpaySubscriptionBodyInput, CancelRazorpaySubscriptionResponse, PauseRazorpaySubscriptionResponse, ResumeRazorpaySubscriptionResponse } from '@insforge/shared-schemas';
+import { UserSchema, CreateUserRequest, CreateUserResponse, CreateSessionRequest, CreateSessionResponse, OAuthProvidersSchema, RefreshSessionResponse, GetProfileResponse, SendVerificationEmailRequest, VerifyEmailRequest, VerifyEmailResponse, SendResetPasswordEmailRequest, ExchangeResetPasswordTokenRequest, ExchangeResetPasswordTokenResponse, ResetPasswordResponse, GetPublicAuthConfigResponse, StorageFileSchema, ListObjectsResponseSchema, ChatCompletionRequest, ImageGenerationRequest, EmbeddingsRequest, SubscribeResponse, SocketMessage, PresenceMember, SendRawEmailRequest, SendEmailResponse, StripeEnvironment, CreateCheckoutSessionBody, CreateCheckoutSessionResponse, CreateCustomerPortalSessionBody, CreateCustomerPortalSessionResponse, RazorpayEnvironment, CreateRazorpayOrderBody, CreateRazorpayOrderResponse, VerifyRazorpayOrderBody, VerifyRazorpayOrderResponse, CreateRazorpaySubscriptionBody, CreateRazorpaySubscriptionResponse, VerifyRazorpaySubscriptionBody, VerifyRazorpaySubscriptionResponse, CancelRazorpaySubscriptionBodyInput, CancelRazorpaySubscriptionResponse, PauseRazorpaySubscriptionResponse, ResumeRazorpaySubscriptionResponse } from '@insforge/shared-schemas';
 import * as _supabase_postgrest_js from '@supabase/postgrest-js';
 import { PostgrestClient } from '@supabase/postgrest-js';
 
@@ -73,15 +73,22 @@ declare class Logger {
  * Memory-only token storage.
  */
 
+declare const AuthChangeEvent: {
+    readonly SIGNED_IN: "signedIn";
+    readonly SIGNED_OUT: "signedOut";
+    readonly TOKEN_REFRESHED: "tokenRefreshed";
+};
+type AuthChangeEvent = (typeof AuthChangeEvent)[keyof typeof AuthChangeEvent];
+type AuthStateChangeCallback = (event: AuthChangeEvent) => void;
 declare class TokenManager {
     private accessToken;
     private user;
-    onTokenChange: (() => void) | null;
+    private authStateChangeCallbacks;
     constructor();
     /**
      * Save session in memory
      */
-    saveSession(session: AuthSession): void;
+    saveSession(session: AuthSession, event?: AuthChangeEvent): void;
     /**
      * Get current session
      */
@@ -93,7 +100,7 @@ declare class TokenManager {
     /**
      * Set access token
      */
-    setAccessToken(token: string): void;
+    setAccessToken(token: string, event?: AuthChangeEvent): void;
     /**
      * Get user
      */
@@ -106,6 +113,8 @@ declare class TokenManager {
      * Clear in-memory session
      */
     clearSession(): void;
+    onAuthStateChange(callback: AuthStateChangeCallback): () => void;
+    private notifyAuthStateChange;
 }
 
 type JsonRequestBody = Record<string, unknown> | unknown[] | null;
@@ -194,6 +203,8 @@ declare class HttpClient {
     /** Returns the current default headers including the authorization header if set. */
     getHeaders(): Record<string, string>;
     refreshAccessToken(): Promise<AuthRefreshResponse>;
+    /** Returns a token safe to use for a new connection handshake. */
+    getValidAccessToken(leewaySeconds?: number): Promise<string | null>;
     private refreshAndSaveSession;
     private clearAuthSession;
 }
@@ -222,6 +233,8 @@ declare class Auth {
     private authCallbackHandled;
     constructor(http: HttpClient, tokenManager: TokenManager, options?: AuthOptions);
     private isServerMode;
+    /** Subscribe to SDK authentication state changes. */
+    onAuthStateChange(callback: AuthStateChangeCallback): () => void;
     /**
      * Save session from API response
      * Handles token storage, CSRF token, and HTTP auth header
@@ -794,135 +807,42 @@ declare class Functions {
 type ConnectionState = 'disconnected' | 'connecting' | 'connected';
 type EventCallback<T = unknown> = (payload: T) => void;
 /**
- * Realtime module for subscribing to channels and handling real-time events
- *
- * @example
- * ```typescript
- * const { realtime } = client;
- *
- * // Connect to the realtime server
- * await realtime.connect();
- *
- * // Subscribe to a channel
- * const response = await realtime.subscribe('orders:123');
- * if (!response.ok) {
- *   console.error('Failed to subscribe:', response.error);
- * }
- *
- * // Listen for specific events
- * realtime.on('order_updated', (payload) => {
- *   console.log('Order updated:', payload);
- * });
- *
- * // Listen for connection events
- * realtime.on('connect', () => console.log('Connected!'));
- * realtime.on('connect_error', (err) => console.error('Connection failed:', err));
- * realtime.on('disconnect', (reason) => console.log('Disconnected:', reason));
- * realtime.on('error', (error) => console.error('Realtime error:', error));
- *
- * // Publish a message to a channel
- * await realtime.publish('orders:123', 'status_changed', { status: 'shipped' });
- *
- * // Unsubscribe and disconnect when done
- * realtime.unsubscribe('orders:123');
- * realtime.disconnect();
- * ```
+ * Socket.IO realtime client. Authentication is evaluated for every handshake,
+ * while an established socket remains authenticated until it disconnects.
  */
 declare class Realtime {
     private baseUrl;
     private tokenManager;
+    private anonKey?;
+    private getValidAccessToken;
     private socket;
     private connectPromise;
-    private subscribedChannels;
+    private connectionAttempt;
+    private nextConnectionAttemptId;
+    private subscriptions;
     private eventListeners;
-    private anonKey?;
-    constructor(baseUrl: string, tokenManager: TokenManager, anonKey?: string);
+    constructor(baseUrl: string, tokenManager: TokenManager, anonKey?: string | undefined, getValidAccessToken?: () => Promise<string | null>);
     private notifyListeners;
-    /**
-     * Connect to the realtime server
-     * @returns Promise that resolves when connected
-     */
+    private getHandshakeToken;
     connect(): Promise<void>;
-    /**
-     * Disconnect from the realtime server
-     */
     disconnect(): void;
-    /**
-     * Handle token changes (e.g., after auth refresh)
-     * Updates socket auth so reconnects use the new token
-     * If connected, triggers reconnect to apply new token immediately
-     */
-    private onTokenChange;
-    /**
-     * Check if connected to the realtime server
-     */
+    private reconnectForAuthChange;
+    private handleDisconnect;
+    private resubscribeChannels;
+    private requestSubscription;
+    private settleSubscription;
+    private applyPresenceEvent;
     get isConnected(): boolean;
-    /**
-     * Get the current connection state
-     */
     get connectionState(): ConnectionState;
-    /**
-     * Get the socket ID (if connected)
-     */
     get socketId(): string | undefined;
-    /**
-     * Subscribe to a channel
-     *
-     * Automatically connects if not already connected.
-     *
-     * @param channel - Channel name (e.g., 'orders:123', 'broadcast')
-     * @returns Promise with the subscription response
-     */
     subscribe(channel: string): Promise<SubscribeResponse>;
-    /**
-     * Unsubscribe from a channel (fire-and-forget)
-     *
-     * @param channel - Channel name to unsubscribe from
-     */
     unsubscribe(channel: string): void;
-    /**
-     * Publish a message to a channel
-     *
-     * @param channel - Channel name
-     * @param event - Event name
-     * @param payload - Message payload
-     */
     publish<T = unknown>(channel: string, event: string, payload: T): Promise<void>;
-    /**
-     * Listen for events
-     *
-     * Reserved event names:
-     * - 'connect' - Fired when connected to the server
-     * - 'connect_error' - Fired when connection fails (payload: Error)
-     * - 'disconnect' - Fired when disconnected (payload: reason string)
-     * - 'error' - Fired when a realtime error occurs (payload: RealtimeErrorPayload)
-     *
-     * All other events receive a `SocketMessage` payload with metadata.
-     *
-     * @param event - Event name to listen for
-     * @param callback - Callback function when event is received
-     */
     on<T = SocketMessage>(event: string, callback: EventCallback<T>): void;
-    /**
-     * Remove a listener for a specific event
-     *
-     * @param event - Event name
-     * @param callback - The callback function to remove
-     */
     off<T = SocketMessage>(event: string, callback: EventCallback<T>): void;
-    /**
-     * Listen for an event only once, then automatically remove the listener
-     *
-     * @param event - Event name to listen for
-     * @param callback - Callback function when event is received
-     */
     once<T = SocketMessage>(event: string, callback: EventCallback<T>): void;
-    /**
-     * Get all currently subscribed channels
-     *
-     * @returns Array of channel names
-     */
     getSubscribedChannels(): string[];
+    getPresenceState(channel: string): PresenceMember[];
 }
 
 /**
@@ -1030,6 +950,7 @@ declare class Payments {
     constructor(http: HttpClient);
 }
 
+type AccessTokenChangeEvent = typeof AuthChangeEvent.SIGNED_IN | typeof AuthChangeEvent.TOKEN_REFRESHED;
 /**
  * Main InsForge SDK Client
  *
@@ -1099,27 +1020,30 @@ declare class InsForgeClient {
     /**
      * Set the access token used by every SDK surface. Updates both the HTTP
      * client (database / storage / functions / AI / emails) and the realtime
-     * token manager (which fires `onTokenChange` to reconnect the WebSocket
-     * with the new bearer). Pass `null` to clear.
+     * token manager. Pass `null` to sign out. By default a token replacement is
+     * treated as a sign-in boundary and reconnects realtime. Pass
+     * `AuthChangeEvent.TOKEN_REFRESHED` for a same-identity refresh to preserve a live socket; the
+     * refreshed token is then used at the next handshake.
      *
      * Use this when an external auth provider (Better Auth, Clerk, Auth0,
      * WorkOS, Kinde, Stytch, …) issues the JWT and you need to keep the
      * long-lived InsForge client in sync. Without this, you'd have to call
      * `client.getHttpClient().setAuthToken(token)` AND reach into the private
-     * `client.realtime.tokenManager.setAccessToken(token)` separately —
-     * forgetting the second one silently breaks realtime auth.
+     * realtime token manager separately.
      *
      * @example
      * ```typescript
+     * import { AuthChangeEvent } from '@insforge/sdk';
+     *
      * // Refresh a third-party-issued JWT periodically
      * const { token } = await fetch('/api/insforge-token').then((r) => r.json());
-     * client.setAccessToken(token);
+     * client.setAccessToken(token, AuthChangeEvent.TOKEN_REFRESHED);
      *
      * // Sign-out
      * client.setAccessToken(null);
      * ```
      */
-    setAccessToken(token: string | null): void;
+    setAccessToken(token: string | null, event?: AccessTokenChangeEvent): void;
 }
 
-export { Auth as A, type ConnectionState as C, Database as D, Emails as E, Functions as F, HttpClient as H, InsForgeClient as I, Logger as L, Payments as P, Realtime as R, Storage as S, TokenManager as T, StorageBucket as a, type StorageResponse as b, AI as c, type FunctionInvokeOptions as d, type PaymentsResponse as e, type EventCallback as f };
+export { type AccessTokenChangeEvent as A, type ConnectionState as C, Database as D, Emails as E, Functions as F, HttpClient as H, InsForgeClient as I, Logger as L, Payments as P, Realtime as R, Storage as S, Auth as a, StorageBucket as b, type StorageResponse as c, AI as d, type FunctionInvokeOptions as e, type PaymentsResponse as f, type EventCallback as g, AuthChangeEvent as h, type AuthStateChangeCallback as i };

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { I as InsForgeClient } from './client-B6eZHolm.mjs';
-export { c as AI, A as Auth, C as ConnectionState, D as Database, E as Emails, f as EventCallback, d as FunctionInvokeOptions, F as Functions, H as HttpClient, L as Logger, P as Payments, e as PaymentsResponse, R as Realtime, S as Storage, a as StorageBucket, b as StorageResponse, T as TokenManager } from './client-B6eZHolm.mjs';
+import { I as InsForgeClient } from './client-BZyLCjO1.mjs';
+export { d as AI, A as AccessTokenChangeEvent, a as Auth, h as AuthChangeEvent, i as AuthStateChangeCallback, C as ConnectionState, D as Database, E as Emails, g as EventCallback, e as FunctionInvokeOptions, F as Functions, H as HttpClient, L as Logger, P as Payments, f as PaymentsResponse, R as Realtime, S as Storage, b as StorageBucket, c as StorageResponse } from './client-BZyLCjO1.mjs';
 import { I as InsForgeConfig, a as InsForgeAdminConfig } from './types-MKmYAYeg.mjs';
 export { b as ApiError, A as AuthSession, d as InsForgeError, c as InsForgeErrorCode } from './types-MKmYAYeg.mjs';
 export { AuthErrorResponse, CreateSessionRequest, CreateUserRequest, RealtimeErrorPayload, SendRawEmailRequest as SendEmailOptions, SendEmailResponse, SocketMessage, SubscribeResponse, UserSchema } from '@insforge/shared-schemas';

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { I as InsForgeClient } from './client-DUmOm_3W.js';
-export { c as AI, A as Auth, C as ConnectionState, D as Database, E as Emails, f as EventCallback, d as FunctionInvokeOptions, F as Functions, H as HttpClient, L as Logger, P as Payments, e as PaymentsResponse, R as Realtime, S as Storage, a as StorageBucket, b as StorageResponse, T as TokenManager } from './client-DUmOm_3W.js';
+import { I as InsForgeClient } from './client-Dh7GOydb.js';
+export { d as AI, A as AccessTokenChangeEvent, a as Auth, h as AuthChangeEvent, i as AuthStateChangeCallback, C as ConnectionState, D as Database, E as Emails, g as EventCallback, e as FunctionInvokeOptions, F as Functions, H as HttpClient, L as Logger, P as Payments, f as PaymentsResponse, R as Realtime, S as Storage, b as StorageBucket, c as StorageResponse } from './client-Dh7GOydb.js';
 import { I as InsForgeConfig, a as InsForgeAdminConfig } from './types-MKmYAYeg.js';
 export { b as ApiError, A as AuthSession, d as InsForgeError, c as InsForgeErrorCode } from './types-MKmYAYeg.js';
 export { AuthErrorResponse, CreateSessionRequest, CreateUserRequest, RealtimeErrorPayload, SendRawEmailRequest as SendEmailOptions, SendEmailResponse, SocketMessage, SubscribeResponse, UserSchema } from '@insforge/shared-schemas';