@motherbase/client 1.5.0 → 1.5.1

package/dist/types.d.ts

@@ -0,0 +1,348 @@
+/** Shared types for the Motherbase client SDK (Supabase-js compatible surface). */
+import type { StorageRemoveContract, StorageUploadContract } from '@motherbase/contracts';
+/** The envelope non-REST API endpoints (auth, storage, edge) wrap their payload in. */
+export interface ApiEnvelope<T = unknown> {
+    status: 0 | 1;
+    message: string;
+    code?: string;
+    requestId?: string;
+    data?: T;
+    pager?: Record<string, unknown>;
+}
+/**
+ * A timestamp as it can reach the client: ISO string over HTTP, `Date` when a
+ * server-side caller passes a Better Auth row straight in.
+ */
+export type Timestamp = string | Date;
+/**
+ * The open bag of profile fields.
+ *
+ * `User` itself is closed: every field the platform sets is declared, and a
+ * typo like `user.emailVerifed` is a compile error. Project-specific columns
+ * (anything added to `user.additionalFields` on the server) cannot be known
+ * here, so they live in this bag, which is the one place with an index
+ * signature. `compat.ts` copies every non-platform field into it, so a custom
+ * `plan` column is readable as `user.user_metadata.plan`.
+ *
+ * Declare your own shape for it when you know the columns:
+ * `const meta = user.user_metadata as { plan?: string }`.
+ */
+export interface UserMetadata {
+    name?: string | null;
+    image?: string | null;
+    [key: string]: unknown;
+}
+/** Fields Better Auth itself owns on a user row. */
+export interface BetterAuthUserFields {
+    /** Display name. Better Auth's own column, mirrored into `user_metadata`. */
+    name?: string | null;
+    /** Avatar URL. Better Auth's own column, mirrored into `user_metadata`. */
+    image?: string | null;
+    /** Better Auth stores verification as a boolean, not a timestamp. */
+    emailVerified?: boolean;
+    createdAt?: Timestamp | null;
+    updatedAt?: Timestamp | null;
+    /** Set by the `phoneNumber` plugin; aliased to `phone`. */
+    phoneNumber?: string | null;
+    phoneNumberVerified?: boolean | null;
+    /** Set by the `admin` plugin. */
+    banned?: boolean | null;
+    banReason?: string | null;
+    banExpires?: Timestamp | null;
+    /** Set by the `twoFactor` plugin. */
+    twoFactorEnabled?: boolean | null;
+    /** Set by the `anonymous` plugin; aliased to `is_anonymous`. */
+    isAnonymous?: boolean | null;
+}
+/**
+ * The `additionalFields` Motherbase configures on every project's auth
+ * instance (see `apps/server/auth/instance.ts`). The first four are
+ * client-writable through `updateUser`; the rest are server-set.
+ */
+export interface MotherbaseUserFields {
+    username?: string | null;
+    firstName?: string | null;
+    lastName?: string | null;
+    imageUrl?: string | null;
+    /** `'USER'` by default on the server, `'authenticated'` after `compat.ts`. */
+    role?: string;
+    status?: string | null;
+    classicEmail?: string | null;
+    appleId?: string | null;
+    appleEmail?: string | null;
+    googleId?: string | null;
+    googleEmail?: string | null;
+}
+/**
+ * The snake_case aliases `compat.ts` adds on the way out, so code ported from
+ * supabase-js reads `user.created_at` and `user.user_metadata.full_name` on a
+ * user that came out of Better Auth.
+ *
+ * They are optional because a `User` you construct yourself (a test fixture, a
+ * value on its way *in*) has not been through `compat.ts` yet. Everything the
+ * SDK hands back has them.
+ */
+export interface SupabaseUserAliases {
+    /** Always `'authenticated'`. Present for supabase-js parity. */
+    aud?: string;
+    created_at?: string | null;
+    updated_at?: string | null;
+    /** Non-null once the email is verified. Better Auth stores a boolean, so the
+     *  value is the last-update timestamp rather than the true verification time. */
+    email_confirmed_at?: string | null;
+    confirmed_at?: string | null;
+    /** Alias of `phoneNumber`, `''` when the user has no phone. */
+    phone?: string;
+    /**
+     * Always `{}`: the client is not told which provider issued the session, and
+     * a guessed `{ provider: 'email' }` is worse than a missing one.
+     */
+    app_metadata?: Record<string, unknown>;
+    /** Profile fields (`name`, `image`, any configured additional field). */
+    user_metadata?: UserMetadata;
+    identities?: UserIdentity[];
+    is_anonymous?: boolean;
+}
+/** A linked provider, in the supabase-js `UserIdentity` shape. */
+export interface UserIdentity {
+    id: string;
+    identity_id: string;
+    user_id: string;
+    provider: string;
+    identity_data: Record<string, unknown>;
+    created_at: string | null;
+    updated_at: string | null;
+    last_sign_in_at: string | null;
+}
+/**
+ * Authenticated user as returned by the API.
+ *
+ * Closed on purpose: every field the platform can set is declared above, so
+ * reading one that does not exist is a compile error instead of a silent
+ * `undefined` at runtime. Project-specific columns go through
+ * [`UserMetadata`](#UserMetadata) (`user.user_metadata.<field>`).
+ */
+export interface User extends BetterAuthUserFields, MotherbaseUserFields, SupabaseUserAliases {
+    id: string;
+    email: string;
+}
+/**
+ * The bearer token issued by sign-up / sign-in. With Better Auth this is the
+ * session token; there is no separate refresh token (a session is valid until
+ * it expires, after which the user re-authenticates). `refreshToken` is kept
+ * optional for backwards source-compat and is unused.
+ */
+export interface Tokens {
+    accessToken: string;
+    refreshToken?: string;
+}
+/**
+ * The locally-held session: the bearer token plus the user it belongs to.
+ *
+ * The snake_case fields are supabase-js aliases, added by the session store on
+ * the way out (see `compat.ts`). `access_token` always mirrors `accessToken`;
+ * `expires_at` / `expires_in` are present only when the server dated the
+ * session, because supabase-js callers schedule refreshes off them and a
+ * fabricated expiry schedules them wrong.
+ */
+export interface Session extends Tokens {
+    user: User;
+    /** supabase-js alias of `accessToken`. */
+    access_token?: string;
+    /** supabase-js alias of `refreshToken`. Always null on Better Auth sessions. */
+    refresh_token?: string | null;
+    token_type?: 'bearer';
+    /** Unix seconds. Absent when the backend did not date the session. */
+    expires_at?: number;
+    /** Seconds until `expires_at`. Absent for the same reason. */
+    expires_in?: number;
+}
+export type FileVisibility = 'public' | 'private';
+/** Lifecycle of a stored object: `ready` unless a presigned upload is pending. */
+export type FileStatus = 'pending' | 'ready' | 'expired';
+/**
+ * A row of the storage table, as `POST /api/files/` returns it.
+ *
+ * This is the upload shape, not the `list()` shape: `list()` answers in the
+ * supabase-js `FileObject` form, which is a different set of fields under
+ * different names. Conflating the two is what the old `[key: string]: unknown`
+ * hid, and `file.filename` (a field the server never sent) type-checked.
+ */
+export interface StoredFile {
+    id: string;
+    /** Bucket slug. */
+    bucket: string;
+    /** Object key inside the bucket, including any prefix. */
+    key: string;
+    mime?: string | null;
+    size: number;
+    visibility: FileVisibility;
+    status: FileStatus;
+    /** Set for public objects and for drivers that store an absolute URL. */
+    url?: string | null;
+    ownerId?: string | null;
+    bucketId?: string | null;
+    /** Deadline of a presigned upload that has not been finalised. */
+    uploadExpiresAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * One object as `list()` returns it: the supabase-js `FileObject` shape, which
+ * is what code ported from Supabase reads (`obj.name`, `obj.metadata.size`).
+ */
+export interface FileObject {
+    /** Key relative to the bucket. */
+    name: string;
+    id: string;
+    created_at: string | null;
+    updated_at: string | null;
+    last_accessed_at: string | null;
+    metadata: {
+        size: number;
+        mimetype: string | null;
+        cacheControl: string | null;
+    };
+}
+/** Exact payload returned by `POST /api/files/`. */
+export type StorageUploadResponse = StorageUploadContract<StoredFile>;
+/** Exact payload returned by `DELETE /api/files/:id`. */
+export type StorageRemoveResponse = StorageRemoveContract;
+/** A file-ish value accepted by multipart uploads (browser File/Blob or RN asset). */
+export type UploadInput = Blob | ArrayBuffer | ArrayBufferView | {
+    uri: string;
+    name?: string;
+    type?: string;
+};
+/**
+ * The uniform result envelope every data/auth/storage call resolves to.
+ * `error` is `null` on success; `data` is `null` on failure. Never throws for
+ * expected API errors: only for programmer misuse.
+ */
+export interface MotherbaseResponse<T> {
+    data: T | null;
+    error: MotherbaseError | null;
+}
+/** Supabase-shaped error object. */
+export interface MotherbaseError {
+    message: string;
+    /** HTTP status code, when the failure came from an HTTP response. */
+    status?: number;
+    /** Backend/app error code, when present. */
+    code?: string;
+    /**
+     * Correlation id of the failed request, from the `x-request-id` response
+     * header. The same id is on the server-side log line, so quoting it in a bug
+     * report (or logging it beside your own error) is what makes an intermittent
+     * 500 findable.
+     */
+    requestId?: string;
+}
+/**
+ * Persists the session between runs. Implementations must be synchronous-or-async
+ * tolerant: every method may return a value or a promise of it.
+ */
+export interface SessionStorageAdapter {
+    get(): Session | null | Promise<Session | null>;
+    set(session: Session | null): void | Promise<void>;
+}
+/**
+ * A key/value store shaped like `window.localStorage` or React Native's
+ * `AsyncStorage`. supabase-js takes its session storage in this form, so an app
+ * being ported passes one of these; the client wraps it (see
+ * `keyValueStorage`) rather than failing at runtime on a missing `.get`.
+ */
+export interface KeyValueStorageAdapter {
+    getItem(key: string): string | null | Promise<string | null>;
+    setItem(key: string, value: string): void | Promise<void>;
+    removeItem(key: string): void | Promise<void>;
+}
+/**
+ * The supabase-js-shaped half of the options.
+ *
+ * supabase-js nests its options under `auth`, `db`, `global` and `realtime`.
+ * Ported code passes them that way, and silently dropping them is the worst
+ * possible outcome: `{ auth: { persistSession: true } }` looks like it works
+ * and the user is signed out on every reload. Both spellings are accepted; the
+ * flat (native) one wins where they collide.
+ */
+export interface SupabaseStyleOptions {
+    auth?: {
+        /** Refresh on 401 and, with `startAutoRefresh()`, on a timer. Default true. */
+        autoRefreshToken?: boolean;
+        /**
+         * `true` (the default in a browser) persists the session to localStorage
+         * when no explicit storage is given. `false` keeps it in memory.
+         */
+        persistSession?: boolean;
+        /** Read the OAuth token out of the URL on construction. Default true in a browser. */
+        detectSessionInUrl?: boolean;
+        /** Either adapter shape: supabase-js's key/value store or the native one. */
+        storage?: KeyValueStorageAdapter | SessionStorageAdapter;
+        /** Storage key. Defaults to `motherbase.session`. */
+        storageKey?: string;
+        /**
+         * `implicit` (the default) returns the session in the redirect's URL
+         * fragment. `pkce` returns `?code=` instead, exchanged automatically on
+         * load (or by `auth.exchangeCodeForSession(code)`) with the verifier this
+         * browser kept, so a leaked redirect URL is worth nothing on its own.
+         */
+        flowType?: 'implicit' | 'pkce';
+        debug?: boolean;
+    };
+    db?: {
+        /** Default schema for `from()` and `rpc()`. Only `public` is exposed today. */
+        schema?: string;
+    };
+    global?: {
+        headers?: Record<string, string>;
+        fetch?: typeof fetch;
+    };
+    realtime?: Record<string, unknown>;
+}
+export interface ClientOptions extends SupabaseStyleOptions {
+    /** Where to persist the session. Defaults to in-memory (SSR-safe). */
+    storage?: SessionStorageAdapter;
+    /** Refresh the access token automatically on a 401. Default: true. */
+    autoRefresh?: boolean;
+    /** Override the fetch implementation (for SSR or tests). */
+    fetch?: typeof fetch;
+    /** Extra headers merged into every request (e.g. a custom `apikey`). */
+    headers?: Record<string, string>;
+    /**
+     * Align the behaviours that differ from supabase-js but share its spelling.
+     *
+     * A missing method fails loudly. A method that exists and behaves differently
+     * does not, and that is what breaks a ported app in production. Differences
+     * are recorded in COMPATIBILITY.md:
+     *
+     *   - `update()` / `delete()` whose filter matches nothing answer 404 here and
+     *     an empty array in supabase-js.
+     *
+     * Writes already require `.select()` to return rows in every mode.
+     *
+     * NOT covered, on purpose: an unfiltered `delete()` stays refused with 400.
+     * Parity there means removing a guard against deleting a whole table from a
+     * typo, and no migration is worth that. Add `.neq('id', 0)`, or run it from
+     * the SQL editor.
+     */
+    compat?: 'supabase';
+    /**
+     * Inject a socket.io factory for realtime (tests / custom transports).
+     * When omitted, `socket.io-client` is imported lazily at connect time.
+     */
+    realtimeIoFactory?: (url: string, opts: Record<string, unknown>) => import('./realtime.js').SocketLike;
+}
+/**
+ * Supabase-compatible auth change events emitted by `onAuthStateChange`.
+ *
+ * `INITIAL_SESSION` is fired once per subscription, right after subscribing,
+ * with whatever session was already stored. supabase-js does the same, and an
+ * app that clears its loading flag on it hangs forever without it.
+ */
+export type AuthChangeEvent = 'INITIAL_SESSION' | 'SIGNED_IN' | 'SIGNED_OUT' | 'TOKEN_REFRESHED' | 'USER_UPDATED' | 'PASSWORD_RECOVERY' | 'MFA_CHALLENGE_VERIFIED';
+export type AuthChangeListener = (event: AuthChangeEvent, session: Session | null) => void;
+/** Internal event names used by the session store. */
+export type AuthEvent = 'signIn' | 'signOut' | 'tokenRefreshed' | 'userUpdated' | 'mfaVerified';
+export type AuthListener = (event: AuthEvent, session: Session | null) => void;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE1F,uFAAuF;AACvF,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACtC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,IAAI,CAAC;AAEtC;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,oDAAoD;AACpD,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qEAAqE;IACrE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7B,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mBAAmB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACrC,iCAAiC;IACjC,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,qCAAqC;IACrC,gBAAgB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,gEAAgE;IAChE,WAAW,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;qFACiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,yEAAyE;IACzE,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,IAAK,SAAQ,oBAAoB,EAAE,oBAAoB,EAAE,mBAAmB;IAC3F,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAQ,SAAQ,MAAM;IACrC,IAAI,EAAE,IAAI,CAAC;IACX,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,CAAC,EAAE,QAAQ,CAAC;IACtB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAC;AAElD,kFAAkF;AAClF,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAEzD;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,mBAAmB;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,cAAc,CAAC;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;CACH;AAED,oDAAoD;AACpD,MAAM,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;AAEtE,yDAAyD;AACzD,MAAM,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAE1D,sFAAsF;AACtF,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,WAAW,GAAG,eAAe,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/G;;;;GAIG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;CAC/B;AAED,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,GAAG,IAAI,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAChD,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE;QACL,+EAA+E;QAC/E,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B;;;WAGG;QACH,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,sFAAsF;QACtF,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,6EAA6E;QAC7E,OAAO,CAAC,EAAE,sBAAsB,GAAG,qBAAqB,CAAC;QACzD,qDAAqD;QACrD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,EAAE,CAAC,EAAE;QACH,+EAA+E;QAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;KACtB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,sEAAsE;IACtE,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,eAAe,EAAE,UAAU,CAAC;CACxG;AAED;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,cAAc,GACd,mBAAmB,GACnB,wBAAwB,CAAC;AAC7B,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC;AAE3F,sDAAsD;AACtD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,gBAAgB,GAAG,aAAa,GAAG,aAAa,CAAC;AAChG,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/warn.d.ts

@@ -0,0 +1,2 @@
+export declare function warnIgnoredOption(site: string, option: string, consequence: string): void;
+//# sourceMappingURL=warn.d.ts.map

package/dist/warn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"warn.d.ts","sourceRoot":"","sources":["../src/warn.ts"],"names":[],"mappings":"AAiBA,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAKzF"}

package/dist/warn.js

@@ -0,0 +1,23 @@
+import { isProduction } from './cookie.js';
+/**
+ * One warning per ignored option, in development only.
+ *
+ * An option this SDK accepts and does not act on is the worst shape of
+ * incompatibility: the call compiles, returns a success, and does something
+ * other than what the caller asked. supabase-js code passes these because they
+ * work there. Saying so once, out loud, is the difference between a five minute
+ * fix and a production incident nobody can reproduce.
+ *
+ * Deduplicated by site and option, because these sit in call paths that run per
+ * row, and silent in production, where nobody reads the console and the cost is
+ * paid on every call.
+ */
+const warned = new Set();
+export function warnIgnoredOption(site, option, consequence) {
+    const key = `${site}.${option}`;
+    if (warned.has(key) || isProduction())
+        return;
+    warned.add(key);
+    console.warn(`[motherbase] ${site}: \`${option}\` is accepted and ignored. ${consequence}`);
+}
+//# sourceMappingURL=warn.js.map

package/dist/warn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warn.js","sourceRoot":"","sources":["../src/warn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;AAEjC,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAc,EAAE,WAAmB;IACjF,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;IAChC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,EAAE;QAAE,OAAO;IAC9C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,CAAC,IAAI,CAAC,gBAAgB,IAAI,OAAO,MAAM,+BAA+B,WAAW,EAAE,CAAC,CAAC;AAC9F,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@motherbase/client",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "description": "Typed client SDK for Motherbase, the open source self-hosted backend platform.",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,7 +28,9 @@
     "README.md"
   ],
   "scripts": {
+    "prebuild": "npm run build -w @motherbase/contracts",
     "build": "tsc -p tsconfig.json",
+    "prepack": "npm run build",
     "clean": "rm -rf dist",
     "test": "vitest run --typecheck",
     "lint": "eslint ."
@@ -43,7 +45,7 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@motherbase/contracts": "^1.0.0"
+    "@motherbase/contracts": "^1.0.5"
   },
   "peerDependencies": {
     "socket.io-client": "^4.0.0"