@motherbase/client 2.2.1 → 2.2.3

package/dist/storage/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/storage/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,OAAsB;IAC7C,OAAO;QACH,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,eAAe,EAAE,OAAO,CAAC,aAAa;QACtC,kBAAkB,EAAE,OAAO,CAAC,gBAAgB;KAC/C,CAAC;AACN,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,WAAW,CAAC,KAAK,SAAS,CAAC;AAE1D,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,WAAW,CAAC,SAAS,eAAe,CAAC;AAEpE,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,SAA2B;IACtD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAU,EAAE,CAAC;QAC5E,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE7F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAEtF,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,IAAiB,EAAE,WAAoB;IAC9D,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;QACtD,OAAO,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI;QAC5C,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,0BAA0B,EAAE,CAAC,CAAC;AACpH,CAAC"}

package/dist/test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=test.d.ts.map

package/dist/test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../src/test.ts"],"names":[],"mappings":""}

package/dist/test.js

@@ -0,0 +1,3 @@
+import { createClient } from "./index.js";
+const client = await createClient("");
+//# sourceMappingURL=test.js.map

package/dist/test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test.js","sourceRoot":"","sources":["../src/test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI1C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAA"}

package/dist/types.d.ts

@@ -1,224 +1,16 @@
-/** Shared types for the Motherbase client SDK (Supabase-js compatible surface). */
-import type { StorageRemoveContract, StorageUploadContract } from '@motherbase/contracts';
+/**
+ * Types shared by every module of the SDK: the result envelope and the client
+ * options. A type owned by one module lives in that module's `types.ts`.
+ */
+import type { ApiEnvelopeContract } from '@motherbase/contracts';
+import type { AuthFlowType, KeyValueStorageAdapter, SessionStorageAdapter } from './auth/types.js';
+import type { SocketLike } from './realtime/types.js';
 /** The envelope non-REST API endpoints (auth, storage, edge) wrap their payload in. */
-export interface ApiEnvelope<T = unknown> {
-    status: 0 | 1;
-    message: string;
+export interface ApiEnvelope<T = unknown> extends ApiEnvelopeContract<T> {
     code?: string;
     requestId?: string;
-    data?: T;
     pager?: Record<string, unknown>;
 }
-/**
- * A timestamp as it can reach the client: ISO string over HTTP, `Date` when a
- * server-side caller passes a Better Auth row straight in.
- */
-export type Timestamp = string | Date;
-/**
- * The open bag of profile fields.
- *
- * `User` itself is closed: every field the platform sets is declared, and a
- * typo like `user.emailVerifed` is a compile error. Project-specific columns
- * (anything added to `user.additionalFields` on the server) cannot be known
- * here, so they live in this bag, which is the one place with an index
- * signature. `compat.ts` copies every non-platform field into it, so a custom
- * `plan` column is readable as `user.user_metadata.plan`.
- *
- * Declare your own shape for it when you know the columns:
- * `const meta = user.user_metadata as { plan?: string }`.
- */
-export interface UserMetadata {
-    name?: string | null;
-    image?: string | null;
-    [key: string]: unknown;
-}
-/** Fields Better Auth itself owns on a user row. */
-export interface BetterAuthUserFields {
-    /** Display name. Better Auth's own column, mirrored into `user_metadata`. */
-    name?: string | null;
-    /** Avatar URL. Better Auth's own column, mirrored into `user_metadata`. */
-    image?: string | null;
-    /** Better Auth stores verification as a boolean, not a timestamp. */
-    emailVerified?: boolean;
-    createdAt?: Timestamp | null;
-    updatedAt?: Timestamp | null;
-    /** Set by the `phoneNumber` plugin; aliased to `phone`. */
-    phoneNumber?: string | null;
-    phoneNumberVerified?: boolean | null;
-    /** Set by the `admin` plugin. */
-    banned?: boolean | null;
-    banReason?: string | null;
-    banExpires?: Timestamp | null;
-    /** Set by the `twoFactor` plugin. */
-    twoFactorEnabled?: boolean | null;
-    /** Set by the `anonymous` plugin; aliased to `is_anonymous`. */
-    isAnonymous?: boolean | null;
-}
-/**
- * The `additionalFields` Motherbase configures on every project's auth
- * instance (see `apps/server/auth/instance.ts`). The first four are
- * client-writable through `updateUser`; the rest are server-set.
- */
-export interface MotherbaseUserFields {
-    username?: string | null;
-    firstName?: string | null;
-    lastName?: string | null;
-    imageUrl?: string | null;
-    /** `'USER'` by default on the server, `'authenticated'` after `compat.ts`. */
-    role?: string;
-    status?: string | null;
-    classicEmail?: string | null;
-    appleId?: string | null;
-    appleEmail?: string | null;
-    googleId?: string | null;
-    googleEmail?: string | null;
-}
-/**
- * The snake_case aliases `compat.ts` adds on the way out, so code ported from
- * supabase-js reads `user.created_at` and `user.user_metadata.full_name` on a
- * user that came out of Better Auth.
- *
- * They are optional because a `User` you construct yourself (a test fixture, a
- * value on its way *in*) has not been through `compat.ts` yet. Everything the
- * SDK hands back has them.
- */
-export interface SupabaseUserAliases {
-    /** Always `'authenticated'`. Present for supabase-js parity. */
-    aud?: string;
-    created_at?: string | null;
-    updated_at?: string | null;
-    /** Non-null once the email is verified. Better Auth stores a boolean, so the
-     *  value is the last-update timestamp rather than the true verification time. */
-    email_confirmed_at?: string | null;
-    confirmed_at?: string | null;
-    /** Alias of `phoneNumber`, `''` when the user has no phone. */
-    phone?: string;
-    /**
-     * Always `{}`: the client is not told which provider issued the session, and
-     * a guessed `{ provider: 'email' }` is worse than a missing one.
-     */
-    app_metadata?: Record<string, unknown>;
-    /** Profile fields (`name`, `image`, any configured additional field). */
-    user_metadata?: UserMetadata;
-    identities?: UserIdentity[];
-    is_anonymous?: boolean;
-}
-/** A linked provider, in the supabase-js `UserIdentity` shape. */
-export interface UserIdentity {
-    id: string;
-    identity_id: string;
-    user_id: string;
-    provider: string;
-    identity_data: Record<string, unknown>;
-    created_at: string | null;
-    updated_at: string | null;
-    last_sign_in_at: string | null;
-}
-/**
- * Authenticated user as returned by the API.
- *
- * Closed on purpose: every field the platform can set is declared above, so
- * reading one that does not exist is a compile error instead of a silent
- * `undefined` at runtime. Project-specific columns go through
- * [`UserMetadata`](#UserMetadata) (`user.user_metadata.<field>`).
- */
-export interface User extends BetterAuthUserFields, MotherbaseUserFields, SupabaseUserAliases {
-    id: string;
-    email: string;
-}
-/**
- * The bearer token issued by sign-up / sign-in. With Better Auth this is the
- * session token; there is no separate refresh token (a session is valid until
- * it expires, after which the user re-authenticates). `refreshToken` is kept
- * optional for backwards source-compat and is unused.
- */
-export interface Tokens {
-    accessToken: string;
-    refreshToken?: string;
-}
-/**
- * The locally-held session: the bearer token plus the user it belongs to.
- *
- * The snake_case fields are supabase-js aliases, added by the session store on
- * the way out (see `compat.ts`). `access_token` always mirrors `accessToken`;
- * `expires_at` / `expires_in` are present only when the server dated the
- * session, because supabase-js callers schedule refreshes off them and a
- * fabricated expiry schedules them wrong.
- */
-export interface Session extends Tokens {
-    user: User;
-    /** supabase-js alias of `accessToken`. */
-    access_token?: string;
-    /** supabase-js alias of `refreshToken`. Always null on Better Auth sessions. */
-    refresh_token?: string | null;
-    token_type?: 'bearer';
-    /** Unix seconds. Absent when the backend did not date the session. */
-    expires_at?: number;
-    /** Seconds until `expires_at`. Absent for the same reason. */
-    expires_in?: number;
-}
-/** Session payload returned by Better Auth after sign-in or second-factor verification. */
-export interface AuthPayload {
-    token: string;
-    user: User;
-}
-export type FileVisibility = 'public' | 'private';
-/** Lifecycle of a stored object: `ready` unless a presigned upload is pending. */
-export type FileStatus = 'pending' | 'ready' | 'expired';
-/**
- * A row of the storage table, as `POST /api/files/` returns it.
- *
- * This is the upload shape, not the `list()` shape: `list()` answers in the
- * supabase-js `FileObject` form, which is a different set of fields under
- * different names. Conflating the two is what the old `[key: string]: unknown`
- * hid, and `file.filename` (a field the server never sent) type-checked.
- */
-export interface StoredFile {
-    id: string;
-    /** Bucket slug. */
-    bucket: string;
-    /** Object key inside the bucket, including any prefix. */
-    key: string;
-    mime?: string | null;
-    size: number;
-    visibility: FileVisibility;
-    status: FileStatus;
-    /** Set for public objects and for drivers that store an absolute URL. */
-    url?: string | null;
-    ownerId?: string | null;
-    bucketId?: string | null;
-    /** Deadline of a presigned upload that has not been finalised. */
-    uploadExpiresAt?: string | null;
-    createdAt: string;
-    updatedAt: string;
-}
-/**
- * One object as `list()` returns it: the supabase-js `FileObject` shape, which
- * is what code ported from Supabase reads (`obj.name`, `obj.metadata.size`).
- */
-export interface FileObject {
-    /** Key relative to the bucket. */
-    name: string;
-    id: string;
-    created_at: string | null;
-    updated_at: string | null;
-    last_accessed_at: string | null;
-    metadata: {
-        size: number;
-        mimetype: string | null;
-        cacheControl: string | null;
-    };
-}
-/** Exact payload returned by `POST /api/files/`. */
-export type StorageUploadResponse = StorageUploadContract<StoredFile>;
-/** Exact payload returned by `DELETE /api/files/:id`. */
-export type StorageRemoveResponse = StorageRemoveContract;
-/** A file-ish value accepted by multipart uploads (browser File/Blob or RN asset). */
-export type UploadInput = Blob | ArrayBuffer | ArrayBufferView | {
-    uri: string;
-    name?: string;
-    type?: string;
-};
 /**
  * The uniform result envelope every data/auth/storage call resolves to.
  * `error` is `null` on success; `data` is `null` on failure. Never throws for
@@ -243,25 +35,6 @@ export interface MotherbaseError {
      */
     requestId?: string;
 }
-/**
- * Persists the session between runs. Implementations must be synchronous-or-async
- * tolerant: every method may return a value or a promise of it.
- */
-export interface SessionStorageAdapter {
-    get(): Session | null | Promise<Session | null>;
-    set(session: Session | null): void | Promise<void>;
-}
-/**
- * A key/value store shaped like `window.localStorage` or React Native's
- * `AsyncStorage`. supabase-js takes its session storage in this form, so an app
- * being ported passes one of these; the client wraps it (see
- * `keyValueStorage`) rather than failing at runtime on a missing `.get`.
- */
-export interface KeyValueStorageAdapter {
-    getItem(key: string): string | null | Promise<string | null>;
-    setItem(key: string, value: string): void | Promise<void>;
-    removeItem(key: string): void | Promise<void>;
-}
 /**
  * The supabase-js-shaped half of the options.
  *
@@ -292,7 +65,8 @@ export interface SupabaseStyleOptions {
          * load (or by `auth.exchangeCodeForSession(code)`) with the verifier this
          * browser kept, so a leaked redirect URL is worth nothing on its own.
          */
-        flowType?: 'implicit' | 'pkce';
+        flowType?: AuthFlowType;
+        /** Accepted for supabase-js compatibility; has no effect. */
         debug?: boolean;
     };
     db?: {
@@ -300,9 +74,12 @@ export interface SupabaseStyleOptions {
         schema?: string;
     };
     global?: {
+        /** Headers sent with every request. */
         headers?: Record<string, string>;
+        /** A `fetch` to use instead of the global one. */
         fetch?: typeof fetch;
     };
+    /** Accepted for supabase-js compatibility; has no effect. */
     realtime?: Record<string, unknown>;
 }
 export interface ClientOptions extends SupabaseStyleOptions {
@@ -336,18 +113,6 @@ export interface ClientOptions extends SupabaseStyleOptions {
      * Inject a socket.io factory for realtime (tests / custom transports).
      * When omitted, `socket.io-client` is imported lazily at connect time.
      */
-    realtimeIoFactory?: (url: string, opts: Record<string, unknown>) => import('./realtime.js').SocketLike;
+    realtimeIoFactory?: (url: string, opts: Record<string, unknown>) => SocketLike;
 }
-/**
- * Supabase-compatible auth change events emitted by `onAuthStateChange`.
- *
- * `INITIAL_SESSION` is fired once per subscription, right after subscribing,
- * with whatever session was already stored. supabase-js does the same, and an
- * app that clears its loading flag on it hangs forever without it.
- */
-export type AuthChangeEvent = 'INITIAL_SESSION' | 'SIGNED_IN' | 'SIGNED_OUT' | 'TOKEN_REFRESHED' | 'USER_UPDATED' | 'PASSWORD_RECOVERY' | 'MFA_CHALLENGE_VERIFIED';
-export type AuthChangeListener = (event: AuthChangeEvent, session: Session | null) => void;
-/** Internal event names used by the session store. */
-export type AuthEvent = 'signIn' | 'signOut' | 'tokenRefreshed' | 'userUpdated' | 'mfaVerified';
-export type AuthListener = (event: AuthEvent, session: Session | null) => void;
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE1F,uFAAuF;AACvF,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACtC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,IAAI,CAAC;AAEtC;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,oDAAoD;AACpD,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qEAAqE;IACrE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC7B,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mBAAmB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACrC,iCAAiC;IACjC,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,qCAAqC;IACrC,gBAAgB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,gEAAgE;IAChE,WAAW,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;qFACiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,yEAAyE;IACzE,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,IAAK,SAAQ,oBAAoB,EAAE,oBAAoB,EAAE,mBAAmB;IAC3F,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAQ,SAAQ,MAAM;IACrC,IAAI,EAAE,IAAI,CAAC;IACX,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,CAAC,EAAE,QAAQ,CAAC;IACtB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,2FAA2F;AAC3F,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAC;AAElD,kFAAkF;AAClF,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAEzD;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,mBAAmB;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,cAAc,CAAC;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;CACH;AAED,oDAAoD;AACpD,MAAM,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;AAEtE,yDAAyD;AACzD,MAAM,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAE1D,sFAAsF;AACtF,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,WAAW,GAAG,eAAe,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/G;;;;GAIG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;CAC/B;AAED,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,GAAG,IAAI,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAChD,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE;QACL,+EAA+E;QAC/E,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B;;;WAGG;QACH,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,sFAAsF;QACtF,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,6EAA6E;QAC7E,OAAO,CAAC,EAAE,sBAAsB,GAAG,qBAAqB,CAAC;QACzD,qDAAqD;QACrD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;QAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,EAAE,CAAC,EAAE;QACH,+EAA+E;QAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;KACtB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,sEAAsE;IACtE,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,eAAe,EAAE,UAAU,CAAC;CACxG;AAED;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,cAAc,GACd,mBAAmB,GACnB,wBAAwB,CAAC;AAC7B,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC;AAE3F,sDAAsD;AACtD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,gBAAgB,GAAG,aAAa,GAAG,aAAa,CAAC;AAChG,MAAM,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACnG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,uFAAuF;AACvF,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,mBAAmB,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;CAC/B;AAED,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE;QACL,+EAA+E;QAC/E,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B;;;WAGG;QACH,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,sFAAsF;QACtF,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B,6EAA6E;QAC7E,OAAO,CAAC,EAAE,sBAAsB,GAAG,qBAAqB,CAAC;QACzD,qDAAqD;QACrD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,YAAY,CAAC;QACxB,6DAA6D;QAC7D,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,EAAE,CAAC,EAAE;QACH,+EAA+E;QAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,uCAAuC;QACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,kDAAkD;QAClD,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;KACtB,CAAC;IACF,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,sEAAsE;IACtE,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC;CAChF"}

package/dist/utils/compat.d.ts

@@ -0,0 +1,40 @@
+/**
+ * supabase-js shape normalisation.
+ *
+ * Motherbase speaks Better Auth, which names things `accessToken`, `createdAt`
+ * and puts custom profile fields flat on the user. supabase-js hands
+ * applications `access_token`, `created_at` and `user_metadata`. Code ported
+ * from Supabase reads the second set, and reading a field that does not exist
+ * is not an error: it is `undefined`, rendered as a blank name or an infinite
+ * loading spinner, at runtime, in production.
+ *
+ * So every session and user that leaves the SDK carries BOTH spellings. The
+ * camelCase ones stay authoritative (nothing existing breaks); the snake_case
+ * ones are aliases added on the way out. Normalisation happens in exactly one
+ * place, the session store, so no call path can forget it.
+ */
+import type { Session, User } from '../auth/types.js';
+/**
+ * Add the supabase-js user aliases without dropping anything Better Auth sent.
+ *
+ * `user_metadata` collects the profile fields (`name`, `image`, and any
+ * `additionalFields` the project configured), because that is where a Supabase
+ * app looks for them. They stay flat on the user as well.
+ *
+ * `app_metadata` is deliberately `{}` rather than a guessed `{ provider:
+ * 'email' }`: the client cannot know which provider issued the session, and a
+ * wrong provider is worse than a missing one. Reading `.provider` off it yields
+ * `undefined` instead of throwing, which is the failure mode that lets an app
+ * boot.
+ */
+export declare function normalizeUser(user: User | null | undefined): User | null;
+/**
+ * Add the supabase-js session aliases.
+ *
+ * `expires_at` / `expires_in` are only emitted when the server actually told us
+ * when the session ends. Inventing a lifetime would be worse than omitting it:
+ * supabase-js callers use `expires_at` to decide when to refresh, and a made-up
+ * value schedules a refresh at the wrong time.
+ */
+export declare function normalizeSession(session: Session | null | undefined): Session | null;
+//# sourceMappingURL=compat.d.ts.map

package/dist/utils/compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat.d.ts","sourceRoot":"","sources":["../../src/utils/compat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAgB,MAAM,kBAAkB,CAAC;AAkCpE;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,CA8BxE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,GAAG,IAAI,CAepF"}

package/dist/utils/compat.js

@@ -0,0 +1,100 @@
+/** Fields Better Auth owns on the user, which are not profile metadata. */
+const RESERVED_USER_FIELDS = new Set([
+    'id',
+    'email',
+    'emailVerified',
+    'createdAt',
+    'updatedAt',
+    'role',
+    'banned',
+    'banReason',
+    'banExpires',
+    'twoFactorEnabled',
+    'isAnonymous',
+    // aliases this module itself adds, so a re-normalisation is idempotent
+    'aud',
+    'created_at',
+    'updated_at',
+    'email_confirmed_at',
+    'confirmed_at',
+    'phone',
+    'app_metadata',
+    'user_metadata',
+    'identities',
+    'is_anonymous',
+]);
+function asIso(value) {
+    if (typeof value === 'string')
+        return value;
+    if (value instanceof Date)
+        return value.toISOString();
+    return undefined;
+}
+/**
+ * Add the supabase-js user aliases without dropping anything Better Auth sent.
+ *
+ * `user_metadata` collects the profile fields (`name`, `image`, and any
+ * `additionalFields` the project configured), because that is where a Supabase
+ * app looks for them. They stay flat on the user as well.
+ *
+ * `app_metadata` is deliberately `{}` rather than a guessed `{ provider:
+ * 'email' }`: the client cannot know which provider issued the session, and a
+ * wrong provider is worse than a missing one. Reading `.provider` off it yields
+ * `undefined` instead of throwing, which is the failure mode that lets an app
+ * boot.
+ */
+export function normalizeUser(user) {
+    if (!user)
+        return null;
+    const metadata = { ...user.user_metadata };
+    for (const [key, value] of Object.entries(user)) {
+        if (!RESERVED_USER_FIELDS.has(key))
+            metadata[key] = value;
+    }
+    const createdAt = asIso(user.createdAt) ?? asIso(user.created_at);
+    const updatedAt = asIso(user.updatedAt) ?? asIso(user.updated_at);
+    // Better Auth stores email verification as a boolean, not a timestamp. The
+    // honest mapping is "verified at some point at or before the last update":
+    // apps branch on truthiness of this field, not on its exact value.
+    const emailConfirmedAt = user.emailVerified ? (updatedAt ?? createdAt ?? null) : null;
+    return {
+        ...user,
+        aud: user.aud ?? 'authenticated',
+        role: user.role ?? 'authenticated',
+        created_at: createdAt ?? null,
+        updated_at: updatedAt ?? null,
+        email_confirmed_at: emailConfirmedAt,
+        confirmed_at: emailConfirmedAt,
+        phone: user.phone ?? user.phoneNumber ?? '',
+        app_metadata: user.app_metadata ?? {},
+        user_metadata: metadata,
+        identities: user.identities ?? [],
+        // Better Auth's anonymous plugin names it `isAnonymous`.
+        is_anonymous: user.is_anonymous ?? Boolean(user.isAnonymous),
+    };
+}
+/**
+ * Add the supabase-js session aliases.
+ *
+ * `expires_at` / `expires_in` are only emitted when the server actually told us
+ * when the session ends. Inventing a lifetime would be worse than omitting it:
+ * supabase-js callers use `expires_at` to decide when to refresh, and a made-up
+ * value schedules a refresh at the wrong time.
+ */
+export function normalizeSession(session) {
+    if (!session)
+        return null;
+    const user = normalizeUser(session.user);
+    const expiresAt = typeof session.expires_at === 'number' ? session.expires_at : undefined;
+    return {
+        ...session,
+        user: user ?? session.user,
+        access_token: session.accessToken,
+        refresh_token: session.refreshToken ?? null,
+        token_type: 'bearer',
+        ...(expiresAt === undefined
+            ? {}
+            : { expires_at: expiresAt, expires_in: Math.max(0, expiresAt - Math.floor(Date.now() / 1000)) }),
+    };
+}
+//# sourceMappingURL=compat.js.map

package/dist/utils/compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat.js","sourceRoot":"","sources":["../../src/utils/compat.ts"],"names":[],"mappings":"AAiBA,2EAA2E;AAC3E,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,IAAI;IACJ,OAAO;IACP,eAAe;IACf,WAAW;IACX,WAAW;IACX,MAAM;IACN,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,kBAAkB;IAClB,aAAa;IACb,uEAAuE;IACvE,KAAK;IACL,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,cAAc;IACd,OAAO;IACP,cAAc;IACd,eAAe;IACf,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,IAA6B;IACzD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,QAAQ,GAAiB,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;IACzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAwB,EAAE,CAAC;QACvE,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5D,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClE,2EAA2E;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtF,OAAO;QACL,GAAG,IAAI;QACP,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,eAAe;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,eAAe;QAClC,UAAU,EAAE,SAAS,IAAI,IAAI;QAC7B,UAAU,EAAE,SAAS,IAAI,IAAI;QAC7B,kBAAkB,EAAE,gBAAgB;QACpC,YAAY,EAAE,gBAAgB;QAC9B,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE;QAC3C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;QACrC,aAAa,EAAE,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;QACjC,yDAAyD;QACzD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAmC;IAClE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1F,OAAO;QACL,GAAG,OAAO;QACV,IAAI,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI;QAC1B,YAAY,EAAE,OAAO,CAAC,WAAW;QACjC,aAAa,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;QAC3C,UAAU,EAAE,QAAQ;QACpB,GAAG,CAAC,SAAS,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;KACnG,CAAC;AACJ,CAAC"}

package/dist/utils/runtime.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Whether this runs in a browser page.
+ *
+ * `window` alone is not the test: React Native defines it too, with no
+ * `location` or `history`, and a fetch that sends no Origin while still
+ * replaying the session cookie from its native jar. Taking it for a browser
+ * meant no Origin on a cookie-carrying mutation (`403 Missing or null Origin`
+ * on sign-out) and a crash reading `window.location.href`. A page has a
+ * `document`; React Native, Node and Deno do not.
+ * @internal
+ */
+export declare function isBrowser(): boolean;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/utils/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/utils/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,IAAI,OAAO,CAEnC"}

package/dist/utils/runtime.js

@@ -0,0 +1,15 @@
+/**
+ * Whether this runs in a browser page.
+ *
+ * `window` alone is not the test: React Native defines it too, with no
+ * `location` or `history`, and a fetch that sends no Origin while still
+ * replaying the session cookie from its native jar. Taking it for a browser
+ * meant no Origin on a cookie-carrying mutation (`403 Missing or null Origin`
+ * on sign-out) and a crash reading `window.location.href`. A page has a
+ * `document`; React Native, Node and Deno do not.
+ * @internal
+ */
+export function isBrowser() {
+    return typeof window !== 'undefined' && typeof document !== 'undefined';
+}
+//# sourceMappingURL=runtime.js.map

package/dist/utils/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/utils/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,QAAQ,KAAK,WAAW,CAAC;AAC1E,CAAC"}

package/dist/utils/testing.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Test-only client: run a query as a specific user, or as nobody.
+ *
+ * A row level security policy is a claim about who can see what, and the only
+ * honest way to check it is to issue the same query as several callers and
+ * compare the results. Without this, doing that in a test means creating users
+ * and signing in as each of them through the real auth flow, which is slow
+ * enough that most policies end up untested and wrong.
+ *
+ * ```ts
+ * const asAlice = createTestClient(url, secretKey, { as: alice.id })
+ * const asBob   = createTestClient(url, secretKey, { as: bob.id })
+ * const asAnon  = createTestClient(url, secretKey, { as: 'anon' })
+ *
+ * expect((await asAlice.from('notes').select('*')).data).toHaveLength(1)
+ * expect((await asBob.from('notes').select('*')).data).toHaveLength(0)
+ * ```
+ *
+ * This is a server-side tool. It needs the project's SECRET key, which bypasses
+ * RLS and must never reach a browser, so importing this module from application
+ * code is a mistake even though nothing here can stop you. The server refuses
+ * the impersonation header outright when the key is anything else, so the worst
+ * case is a failed request rather than a privilege escalation.
+ */
+import { MotherbaseClient } from '../index.js';
+import type { ClientOptions } from '../types.js';
+import type { GenericDatabase, GenericSchema, DefaultSchemaName, SchemaOf } from '../database/types.js';
+/** The header the server reads. Exported so a raw fetch can do the same thing. */
+export declare const IMPERSONATE_HEADER = "x-motherbase-impersonate";
+export interface TestClientOptions extends ClientOptions {
+    /**
+     * Who to run as: a user id, `'anon'` for a signed-out visitor, or
+     * `'service_role'` to keep the secret key's own bypass-everything identity.
+     */
+    as: string;
+}
+export declare function createTestClient<Database = GenericDatabase, SchemaName = DefaultSchemaName<Database>, Schema extends GenericSchema = SchemaOf<Database, SchemaName>>(url: string, secretKey: string, options: TestClientOptions): MotherbaseClient<Database, SchemaName, Schema>;
+//# sourceMappingURL=testing.d.ts.map

package/dist/utils/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../src/utils/testing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAgB,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAExG,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,6BAA6B,CAAC;AAE7D,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,GAAG,eAAe,EAC1B,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,EACxC,MAAM,SAAS,aAAa,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,EAE7D,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iBAAiB,GACzB,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAuBhD"}

package/dist/utils/testing.js

@@ -0,0 +1,50 @@
+/**
+ * Test-only client: run a query as a specific user, or as nobody.
+ *
+ * A row level security policy is a claim about who can see what, and the only
+ * honest way to check it is to issue the same query as several callers and
+ * compare the results. Without this, doing that in a test means creating users
+ * and signing in as each of them through the real auth flow, which is slow
+ * enough that most policies end up untested and wrong.
+ *
+ * ```ts
+ * const asAlice = createTestClient(url, secretKey, { as: alice.id })
+ * const asBob   = createTestClient(url, secretKey, { as: bob.id })
+ * const asAnon  = createTestClient(url, secretKey, { as: 'anon' })
+ *
+ * expect((await asAlice.from('notes').select('*')).data).toHaveLength(1)
+ * expect((await asBob.from('notes').select('*')).data).toHaveLength(0)
+ * ```
+ *
+ * This is a server-side tool. It needs the project's SECRET key, which bypasses
+ * RLS and must never reach a browser, so importing this module from application
+ * code is a mistake even though nothing here can stop you. The server refuses
+ * the impersonation header outright when the key is anything else, so the worst
+ * case is a failed request rather than a privilege escalation.
+ */
+import { createClient } from '../index.js';
+import { memoryStorage } from '../auth/session.js';
+/** The header the server reads. Exported so a raw fetch can do the same thing. */
+export const IMPERSONATE_HEADER = 'x-motherbase-impersonate';
+export function createTestClient(url, secretKey, options) {
+    if (!secretKey?.startsWith('mb_secret_')) {
+        // Fail here rather than at the first query: a test that ran as the wrong
+        // caller and passed is the failure this whole module exists to prevent.
+        throw new Error('createTestClient needs the project secret key (mb_secret_…). A publishable key cannot impersonate, '
+            + 'and the server refuses the header with a 403.');
+    }
+    const { as, ...rest } = options;
+    return createClient(url, secretKey, {
+        // A fresh in-memory session per client, so two clients in one test file
+        // cannot share (or clobber) each other's stored session.
+        storage: memoryStorage(),
+        ...rest,
+        headers: {
+            ...rest.headers,
+            // `service_role` is the absence of impersonation: the secret key already
+            // is service_role, so sending a header would only add a lookup.
+            ...(as === 'service_role' ? {} : { [IMPERSONATE_HEADER]: as }),
+        },
+    });
+}
+//# sourceMappingURL=testing.js.map

package/dist/utils/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../../src/utils/testing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,YAAY,EAAoB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAInD,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAU7D,MAAM,UAAU,gBAAgB,CAK9B,GAAW,EACX,SAAiB,EACjB,OAA0B;IAE1B,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACzC,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,IAAI,KAAK,CACb,qGAAqG;cACjG,+CAA+C,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAChC,OAAO,YAAY,CAA+B,GAAG,EAAE,SAAS,EAAE;QAChE,wEAAwE;QACxE,yDAAyD;QACzD,OAAO,EAAE,aAAa,EAAE;QACxB,GAAG,IAAI;QACP,OAAO,EAAE;YACP,GAAG,IAAI,CAAC,OAAO;YACf,yEAAyE;YACzE,gEAAgE;YAChE,GAAG,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC;SAC/D;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/warn.d.ts

@@ -0,0 +1,2 @@
+export declare function warnIgnoredOption(site: string, option: string, consequence: string): void;
+//# sourceMappingURL=warn.d.ts.map

package/dist/utils/warn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"warn.d.ts","sourceRoot":"","sources":["../../src/utils/warn.ts"],"names":[],"mappings":"AAiBA,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAKzF"}