@motherbase/client 1.4.0 → 1.5.0

package/dist/storage.js

@@ -1,391 +0,0 @@
-import { toError } from './http.js';
-import { HTTP_ROUTES, contractPath } from '@motherbase/contracts';
-/** Bucket administration lives one level up from an object route. */
-const BUCKET_ROUTE = `${HTTP_ROUTES.files}/bucket`;
-/**
- * Supabase-compatible storage bucket handle over the authenticated
- * `/api/files` endpoints.
- *
- * Objects are addressed by path: `upload('123/pic.png')` then
- * `download('123/pic.png')`. The server-issued file id still works everywhere a
- * path does, because that is what every caller written before path addressing
- * has stored.
- */
-const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-export class StorageBucket {
-    constructor(http, baseUrl, bucket, 
-    /** Used only by `uploadToSignedUrl`, which PUTs straight to object storage. */
-    fetchImpl) {
-        this.http = http;
-        this.baseUrl = baseUrl;
-        this.bucket = bucket;
-        this.fetchImpl = fetchImpl;
-    }
-    /**
-     * Route for one object. A bare uuid is treated as a file id (the pre-path
-     * addressing form, which existing callers have stored); anything else is a
-     * key inside this bucket.
-     */
-    objectPath(pathOrId, kind) {
-        if (UUID.test(pathOrId)) {
-            if (kind === 'object-info') {
-                throw new Error('info() addresses objects by path. Pass the key you uploaded under, not a file id.');
-            }
-            return contractPath.file(pathOrId, kind === 'object-url' ? 'url' : 'raw');
-        }
-        const key = pathOrId.split('/').map(encodeURIComponent).join('/');
-        return `${HTTP_ROUTES.files}/${kind}/${encodeURIComponent(this.bucket)}/${key}`;
-    }
-    async upload(path, file, options = {}) {
-        try {
-            const form = new FormData();
-            if (typeof Blob !== 'undefined' && file instanceof Blob) {
-                // `contentType` used to be documented as a hint and then dropped on the
-                // floor: the server reads the mime type off the multipart part, so the
-                // only way to honour it is to retype the blob. `slice()` with a type is
-                // the retyping that does not copy the bytes, which matters at upload
-                // sizes.
-                const body = options.contentType ? file.slice(0, file.size, options.contentType) : file;
-                form.append('file', body, path);
-            }
-            else {
-                form.append('file', file);
-            }
-            if (options.visibility)
-                form.append('visibility', options.visibility);
-            form.append('bucket', this.bucket);
-            form.append('path', path);
-            if (options.upsert)
-                form.append('upsert', 'true');
-            const created = await this.http.request(`${HTTP_ROUTES.files}/`, { method: 'POST', form });
-            return {
-                data: {
-                    path,
-                    id: created.file.id,
-                    fullPath: `${this.bucket}/${path}`,
-                },
-                error: null,
-            };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    /**
-     * Upload several objects, a few at a time, reporting progress per file.
-     *
-     * Uploading a folder is the common case and `Promise.all` is the common
-     * mistake: a hundred parallel multipart posts saturate the connection, and
-     * the server rate limiter answers 429 to the tail of them. Four at a time
-     * finishes sooner in practice and fails less.
-     *
-     * One failing file does not cancel the rest. The result reports every entry
-     * in the order it was given, each with its own error or `null`, so the caller
-     * can retry exactly what failed.
-     *
-     * ponytail: progress is per file, not per byte. Byte-level progress needs
-     * XMLHttpRequest, which does not exist outside a browser; if a progress bar
-     * has to move within one large file, that is the upgrade path.
-     */
-    async uploadMany(files, options = {}) {
-        const total = files.length;
-        const concurrency = Math.max(1, Math.min(options.concurrency ?? 4, total || 1));
-        const results = new Array(total);
-        let next = 0;
-        let completed = 0;
-        // A shared cursor rather than fixed slices: one slow file would otherwise
-        // hold up its whole slice while other workers sit idle.
-        const worker = async () => {
-            for (;;) {
-                const index = next++;
-                if (index >= total)
-                    return;
-                const entry = files[index];
-                const { data, error } = await this.upload(entry.path, entry.file, entry.options);
-                results[index] = { path: entry.path, data: data ?? null, error: error?.message ?? null };
-                completed += 1;
-                options.onProgress?.({ completed, total, path: entry.path, error: error?.message ?? null });
-            }
-        };
-        await Promise.all(Array.from({ length: concurrency }, worker));
-        return { data: results, error: null };
-    }
-    async download(path) {
-        try {
-            const res = await this.http.requestRaw(this.objectPath(path, 'object'));
-            return { data: await res.blob(), error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    async remove(paths) {
-        try {
-            const removed = await Promise.all(paths.map(p => this.http.request(UUID.test(p)
-                ? contractPath.file(p)
-                : `${HTTP_ROUTES.files}/object/${encodeURIComponent(this.bucket)}/${p
-                    .split('/')
-                    .map(encodeURIComponent)
-                    .join('/')}`, { method: 'DELETE' })));
-            return { data: removed, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    /** Objects under a prefix, in the Supabase response shape. */
-    async list(prefix = '', options = {}) {
-        try {
-            const query = new URLSearchParams();
-            if (prefix)
-                query.set('prefix', prefix);
-            if (options.limit !== undefined)
-                query.set('limit', String(options.limit));
-            if (options.offset !== undefined)
-                query.set('offset', String(options.offset));
-            if (options.search)
-                query.set('search', options.search);
-            if (options.sortBy?.column)
-                query.set('sortColumn', options.sortBy.column);
-            if (options.sortBy?.order)
-                query.set('sortOrder', options.sortBy.order);
-            const suffix = query.toString() ? `?${query}` : '';
-            const res = await this.http.request(`${HTTP_ROUTES.files}/list/${encodeURIComponent(this.bucket)}${suffix}`);
-            return { data: res.objects, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    /** Synchronous public URL (Supabase parity). Serves through the public bucket endpoint. */
-    getPublicUrl(path) {
-        const base = this.baseUrl.replace(/\/$/, '');
-        return {
-            data: {
-                publicUrl: `${base}/api/storage/${encodeURIComponent(this.bucket)}/files/${encodeURIComponent(path)}`,
-            },
-        };
-    }
-    /**
-     * A download URL for the object, valid for `expiresIn` seconds (default 3600,
-     * maximum 7 days: the AWS SigV4 ceiling; anything outside that is a `400`).
-     *
-     * `expiresAt` reports when the URL actually stops working, and is `null` when
-     * nothing expires: a public object's URL is permanent, and a private object on
-     * the `local` storage driver resolves to the authenticated streaming endpoint,
-     * which is bound to the session rather than to a clock and so cannot be handed
-     * to a third party at all. Check it rather than assuming `expiresIn` applied,
-     * that assumption is exactly what this used to get wrong, silently.
-     */
-    async createSignedUrl(path, expiresIn) {
-        try {
-            const query = expiresIn === undefined ? '' : `?expiresIn=${encodeURIComponent(expiresIn)}`;
-            const res = await this.http.request(`${this.objectPath(path, 'object-url')}${query}`);
-            return { data: { signedUrl: res.url, expiresAt: res.expiresAt ?? null }, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    /**
-     * Sign several objects in one call.
-     *
-     * There is no batch endpoint behind this: it signs each key and reports per
-     * entry, exactly as supabase-js does, so one missing object yields one entry
-     * with an `error` rather than failing the whole batch.
-     */
-    async createSignedUrls(paths, expiresIn) {
-        const results = await Promise.all(paths.map(async (path) => {
-            const { data, error } = await this.createSignedUrl(path, expiresIn);
-            return { path, signedUrl: data?.signedUrl ?? null, error: error?.message ?? null };
-        }));
-        return { data: results, error: null };
-    }
-    /**
-     * Replace the object at `path`. In supabase-js `update` is `upload` with
-     * upsert forced on, and the same is true here.
-     */
-    async update(path, file, options = {}) {
-        return this.upload(path, file, { ...options, upsert: true });
-    }
-    /** Copy an object to another key in this bucket. */
-    async copy(from, to, options = {}) {
-        return this.transfer('copy', from, to, options);
-    }
-    /** Move an object to another key in this bucket (copy, then delete the source). */
-    async move(from, to, options = {}) {
-        return this.transfer('move', from, to, options);
-    }
-    async transfer(action, from, to, options) {
-        try {
-            const res = await this.http.request(`${HTTP_ROUTES.files}/${action}`, { method: 'POST', body: { bucket: this.bucket, from, to, upsert: options.upsert === true } });
-            return { data: { path: res.fullPath ?? `${this.bucket}/${to}` }, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    /** One object's metadata, without downloading it. */
-    async info(path) {
-        try {
-            const res = await this.http.request(this.objectPath(path, 'object-info'));
-            return { data: res, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    /**
-     * Whether an object exists and this caller can read it.
-     *
-     * A 404 is the answer `false`, not a failure. Anything else (a 403, a network
-     * error) is reported as an error rather than as "no": treating an
-     * authorization failure as absence is how a UI ends up offering to create
-     * something that is already there.
-     */
-    async exists(path) {
-        const { data, error } = await this.info(path);
-        if (data)
-            return { data: true, error: null };
-        if (error?.status === 404)
-            return { data: false, error: null };
-        return { data: null, error: error ?? { message: 'Unknown storage error' } };
-    }
-    /**
-     * Mint a URL the browser can PUT the bytes to directly, skipping this server.
-     *
-     * Unlike supabase-js this needs the file's `size` and content type up front:
-     * the upload is reserved against the bucket quota and the signature is bound
-     * to that exact length, which is what stops a signed URL from becoming an
-     * unbounded write. Pair it with `uploadToSignedUrl`.
-     *
-     * Requires the S3 driver; the local driver has no presigned uploads.
-     */
-    async createSignedUploadUrl(path, options) {
-        try {
-            const res = await this.http.request(`${HTTP_ROUTES.files}/presign`, {
-                method: 'POST',
-                body: {
-                    bucket: this.bucket,
-                    path,
-                    size: options.size,
-                    mime: options.contentType,
-                    visibility: options.visibility,
-                },
-            });
-            // supabase-js's `token` is opaque to the caller and is handed straight
-            // back to uploadToSignedUrl, so it carries what finalisation needs.
-            const token = JSON.stringify({ url: res.uploadUrl, id: res.file.id });
-            return { data: { signedUrl: res.uploadUrl, token, path }, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    /**
-     * Upload to a URL from `createSignedUploadUrl`: PUT the bytes to storage,
-     * then tell the server the object landed. The finalise step is what makes the
-     * row readable, so a PUT that succeeds and a finalise that fails leaves the
-     * reservation to expire rather than a half-visible object.
-     */
-    async uploadToSignedUrl(path, token, file, options = {}) {
-        let parsed;
-        try {
-            parsed = JSON.parse(token);
-        }
-        catch {
-            return { data: null, error: { message: 'Invalid upload token. Use the token from createSignedUploadUrl().' } };
-        }
-        if (!parsed.url || !parsed.id) {
-            return { data: null, error: { message: 'Invalid upload token. Use the token from createSignedUploadUrl().' } };
-        }
-        try {
-            const put = await this.fetchImpl(parsed.url, {
-                method: 'PUT',
-                body: file,
-                headers: { 'Content-Type': options.contentType ?? file.type ?? 'application/octet-stream' },
-            });
-            if (!put.ok) {
-                return { data: null, error: { message: `Upload failed with status ${put.status}`, status: put.status } };
-            }
-            await this.http.request(`${contractPath.file(parsed.id)}/finalize`, { method: 'POST' });
-            return { data: { path, id: parsed.id, fullPath: `${this.bucket}/${path}` }, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-}
-/** Supabase-compatible storage client: `client.storage.from(bucket)`. */
-export class StorageClient {
-    constructor(http, baseUrl, fetchImpl) {
-        this.http = http;
-        this.baseUrl = baseUrl;
-        this.fetchImpl = fetchImpl;
-    }
-    from(bucket) {
-        return new StorageBucket(this.http, this.baseUrl, bucket, this.fetchImpl);
-    }
-    /**
-     * Bucket administration, supabase-js shaped.
-     *
-     * Every method here needs a SECRET project API key, which is the same rule
-     * Supabase applies (bucket administration is a service-role operation). With
-     * a publishable key they resolve with a 401 error, so keep them in server
-     * code and setup scripts, never in a browser bundle.
-     */
-    async listBuckets() {
-        try {
-            const res = await this.http.request(BUCKET_ROUTE);
-            return { data: res.buckets, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    async getBucket(id) {
-        return this.bucketCall(`${BUCKET_ROUTE}/${encodeURIComponent(id)}`);
-    }
-    async createBucket(id, options = {}) {
-        return this.bucketCall(BUCKET_ROUTE, 'POST', { id, name: options.name, public: options.public === true });
-    }
-    async updateBucket(id, options) {
-        return this.bucketCall(`${BUCKET_ROUTE}/${encodeURIComponent(id)}`, 'PUT', options);
-    }
-    /** Delete every object in the bucket, keeping the bucket itself. */
-    async emptyBucket(id) {
-        try {
-            const res = await this.http.request(`${BUCKET_ROUTE}/${encodeURIComponent(id)}/empty`, { method: 'POST' });
-            return { data: res, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    /**
-     * Delete the bucket. A bucket that still holds objects is a `409` unless
-     * `force` is set, which queues a background deletion of its contents: an
-     * accidental `deleteBucket` must not be able to destroy a project's files in
-     * one unqualified call.
-     */
-    async deleteBucket(id, options = {}) {
-        try {
-            const query = options.force ? '?force=true' : '';
-            const res = await this.http.request(`${BUCKET_ROUTE}/${encodeURIComponent(id)}${query}`, { method: 'DELETE' });
-            return { data: res, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-    async bucketCall(path, method = 'GET', body) {
-        try {
-            const res = await this.http.request(path, { method, body });
-            return { data: res, error: null };
-        }
-        catch (err) {
-            return { data: null, error: toError(err) };
-        }
-    }
-}
-//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAsClE,qEAAqE;AACrE,MAAM,YAAY,GAAG,GAAG,WAAW,CAAC,KAAK,SAAS,CAAC;AAwBnD;;;;;;;;GAQG;AACH,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAE/E,MAAM,OAAO,aAAa;IACxB,YACmB,IAAgB,EAChB,OAAe,EACf,MAAc;IAC/B,+EAA+E;IAC9D,SAAuB;QAJvB,SAAI,GAAJ,IAAI,CAAY;QAChB,YAAO,GAAP,OAAO,CAAQ;QACf,WAAM,GAAN,MAAM,CAAQ;QAEd,cAAS,GAAT,SAAS,CAAc;IACvC,CAAC;IAEJ;;;;OAIG;IACK,UAAU,CAAC,QAAgB,EAAE,IAA6C;QAChF,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxB,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;YACvG,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClE,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,MAAM,CACV,IAAY,EACZ,IAAiB,EACjB,UAAyB,EAAE;QAE3B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;gBACxD,wEAAwE;gBACxE,uEAAuE;gBACvE,wEAAwE;gBACxE,qEAAqE;gBACrE,SAAS;gBACT,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAuB,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,OAAO,CAAC,UAAU;gBAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1B,IAAI,OAAO,CAAC,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAwB,GAAG,WAAW,CAAC,KAAK,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClH,OAAO;gBACL,IAAI,EAAE;oBACJ,IAAI;oBACJ,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;oBACnB,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE;iBACnC;gBACD,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,UAAU,CACd,KAA0E,EAC1E,UAKI,EAAE;QAEN,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,IAAI,KAAK,CAAoE,KAAK,CAAC,CAAC;QACpG,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,0EAA0E;QAC1E,wDAAwD;QACxD,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;YACvC,SAAS,CAAC;gBACR,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;gBACrB,IAAI,KAAK,IAAI,KAAK;oBAAE,OAAO;gBAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC3B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACjF,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;gBACzF,SAAS,IAAI,CAAC,CAAC;gBACf,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YACxE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAe;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACZ,IAAI,CAAC,IAAI,CAAC,OAAO,CACf,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACV,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtB,CAAC,CAAC,GAAG,WAAW,CAAC,KAAK,WAAW,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;qBAChE,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,kBAAkB,CAAC;qBACvB,IAAI,CAAC,GAAG,CAAC,EAAE,EAClB,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CACF,CACF,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,UAAuB,EAAE;QAC/C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACxC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9E,IAAI,OAAO,CAAC,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3E,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAEnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACjC,GAAG,WAAW,CAAC,KAAK,SAAS,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CACxE,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,2FAA2F;IAC3F,YAAY,CAAC,IAAY;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE;gBACJ,SAAS,EAAE,GAAG,IAAI,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,EAAE;aACtG;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,eAAe,CACnB,IAAY,EACZ,SAAkB;QAElB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACjC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,GAAG,KAAK,EAAE,CACjD,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAe,EACf,SAAkB;QAElB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACrB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACpE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;QACrF,CAAC,CAAC,CACH,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,IAAiB,EAAE,UAAyB,EAAE;QACvE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,EAAU,EAAE,UAAgC,EAAE;QACrE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,EAAU,EAAE,UAAgC,EAAE;QACrE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,MAAuB,EACvB,IAAY,EACZ,EAAU,EACV,OAA6B;QAE7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACjC,GAAG,WAAW,CAAC,KAAK,IAAI,MAAM,EAAE,EAChC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,EAAE,CAC7F,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAa,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;YACtF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,EAAE,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,CAAC;IAC9E,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,qBAAqB,CACzB,IAAY,EACZ,OAA4E;QAE5E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACjC,GAAG,WAAW,CAAC,KAAK,UAAU,EAC9B;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE;oBACJ,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,IAAI;oBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,OAAO,CAAC,WAAW;oBACzB,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B;aACF,CACF,CAAC;YACF,uEAAuE;YACvE,oEAAoE;YACpE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CACrB,IAAY,EACZ,KAAa,EACb,IAAU,EACV,UAAoC,EAAE;QAEtC,IAAI,MAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAkC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,mEAAmE,EAAE,EAAE,CAAC;QACjH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAC9B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,mEAAmE,EAAE,EAAE,CAAC;QACjH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC3C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,IAAI,0BAA0B,EAAE;aAC5F,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,6BAA6B,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3G,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACxF,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,OAAO,aAAa;IACxB,YACmB,IAAgB,EAChB,OAAe,EACf,SAAuB;QAFvB,SAAI,GAAJ,IAAI,CAAY;QAChB,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAc;IACvC,CAAC;IAEJ,IAAI,CAAC,MAAc;QACjB,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA4B,YAAY,CAAC,CAAC;YAC7E,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,YAAY,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,UAA+C,EAAE;QAC9E,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,OAA4C;QACzE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,YAAY,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACtF,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACjC,GAAG,YAAY,IAAI,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EACjD,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,UAA+B,EAAE;QAC9D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACjC,GAAG,YAAY,IAAI,kBAAkB,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,EACnD,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,MAAM,GAAG,KAAK,EAAE,IAAc;QACnE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAa,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;CACF"}

package/dist/testing.d.ts

@@ -1,38 +0,0 @@
-/**
- * Test-only client: run a query as a specific user, or as nobody.
- *
- * A row level security policy is a claim about who can see what, and the only
- * honest way to check it is to issue the same query as several callers and
- * compare the results. Without this, doing that in a test means creating users
- * and signing in as each of them through the real auth flow, which is slow
- * enough that most policies end up untested and wrong.
- *
- * ```ts
- * const asAlice = createTestClient(url, secretKey, { as: alice.id })
- * const asBob   = createTestClient(url, secretKey, { as: bob.id })
- * const asAnon  = createTestClient(url, secretKey, { as: 'anon' })
- *
- * expect((await asAlice.from('notes').select('*')).data).toHaveLength(1)
- * expect((await asBob.from('notes').select('*')).data).toHaveLength(0)
- * ```
- *
- * This is a server-side tool. It needs the project's SECRET key, which bypasses
- * RLS and must never reach a browser, so importing this module from application
- * code is a mistake even though nothing here can stop you. The server refuses
- * the impersonation header outright when the key is anything else, so the worst
- * case is a failed request rather than a privilege escalation.
- */
-import { MotherbaseClient } from './index.js';
-import type { ClientOptions } from './types.js';
-import type { GenericDatabase, GenericSchema, DefaultSchemaName, SchemaOf } from './database.js';
-/** The header the server reads. Exported so a raw fetch can do the same thing. */
-export declare const IMPERSONATE_HEADER = "x-motherbase-impersonate";
-export interface TestClientOptions extends ClientOptions {
-    /**
-     * Who to run as: a user id, `'anon'` for a signed-out visitor, or
-     * `'service_role'` to keep the secret key's own bypass-everything identity.
-     */
-    as: string;
-}
-export declare function createTestClient<Database = GenericDatabase, SchemaName = DefaultSchemaName<Database>, Schema extends GenericSchema = SchemaOf<Database, SchemaName>>(url: string, secretKey: string, options: TestClientOptions): MotherbaseClient<Database, SchemaName, Schema>;
-//# sourceMappingURL=testing.d.ts.map

package/dist/testing.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAgB,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEjG,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AAE7D,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,GAAG,eAAe,EAC1B,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,EACxC,MAAM,SAAS,aAAa,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,EAE7D,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,GACzB,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAuBhD"}

package/dist/testing.js

@@ -1,50 +0,0 @@
-/**
- * Test-only client: run a query as a specific user, or as nobody.
- *
- * A row level security policy is a claim about who can see what, and the only
- * honest way to check it is to issue the same query as several callers and
- * compare the results. Without this, doing that in a test means creating users
- * and signing in as each of them through the real auth flow, which is slow
- * enough that most policies end up untested and wrong.
- *
- * ```ts
- * const asAlice = createTestClient(url, secretKey, { as: alice.id })
- * const asBob   = createTestClient(url, secretKey, { as: bob.id })
- * const asAnon  = createTestClient(url, secretKey, { as: 'anon' })
- *
- * expect((await asAlice.from('notes').select('*')).data).toHaveLength(1)
- * expect((await asBob.from('notes').select('*')).data).toHaveLength(0)
- * ```
- *
- * This is a server-side tool. It needs the project's SECRET key, which bypasses
- * RLS and must never reach a browser, so importing this module from application
- * code is a mistake even though nothing here can stop you. The server refuses
- * the impersonation header outright when the key is anything else, so the worst
- * case is a failed request rather than a privilege escalation.
- */
-import { createClient } from './index.js';
-import { memoryStorage } from './session.js';
-/** The header the server reads. Exported so a raw fetch can do the same thing. */
-export const IMPERSONATE_HEADER = 'x-motherbase-impersonate';
-export function createTestClient(url, secretKey, options) {
-    if (!secretKey?.startsWith('mb_secret_')) {
-        // Fail here rather than at the first query: a test that ran as the wrong
-        // caller and passed is the failure this whole module exists to prevent.
-        throw new Error('createTestClient needs the project secret key (mb_secret_…). A publishable key cannot impersonate, '
-            + 'and the server refuses the header with a 403.');
-    }
-    const { as, ...rest } = options;
-    return createClient(url, secretKey, {
-        // A fresh in-memory session per client, so two clients in one test file
-        // cannot share (or clobber) each other's stored session.
-        storage: memoryStorage(),
-        ...rest,
-        headers: {
-            ...rest.headers,
-            // `service_role` is the absence of impersonation: the secret key already
-            // is service_role, so sending a header would only add a lookup.
-            ...(as === 'service_role' ? {} : { [IMPERSONATE_HEADER]: as }),
-        },
-    });
-}
-//# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,YAAY,EAAoB,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAI7C,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAU7D,MAAM,UAAU,gBAAgB,CAK9B,GAAW,EACX,SAAiB,EACjB,OAA0B;IAE1B,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACzC,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,IAAI,KAAK,CACb,qGAAqG;cACjG,+CAA+C,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAChC,OAAO,YAAY,CAA+B,GAAG,EAAE,SAAS,EAAE;QAChE,wEAAwE;QACxE,yDAAyD;QACzD,OAAO,EAAE,aAAa,EAAE;QACxB,GAAG,IAAI;QACP,OAAO,EAAE;YACP,GAAG,IAAI,CAAC,OAAO;YACf,yEAAyE;YACzE,gEAAgE;YAChE,GAAG,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC;SAC/D;KACF,CAAC,CAAC;AACL,CAAC"}