@perceo/supabase 0.1.0

package/dist/index.js

@@ -0,0 +1,809 @@
+// src/index.ts
+import { createClient as createClient2 } from "@supabase/supabase-js";
+
+// src/client.ts
+import { createClient } from "@supabase/supabase-js";
+import { createHash, randomBytes } from "crypto";
+var PerceoDataClient = class _PerceoDataClient {
+  supabase;
+  projectId;
+  channels = /* @__PURE__ */ new Map();
+  constructor(config) {
+    if ("supabase" in config) {
+      this.supabase = config.supabase;
+      this.projectId = config.projectId ?? null;
+    } else {
+      this.supabase = createClient(config.supabaseUrl, config.supabaseKey, {
+        auth: {
+          autoRefreshToken: true,
+          persistSession: false
+        }
+      });
+      this.projectId = config.projectId ?? null;
+    }
+  }
+  /**
+   * Create a client from environment variables
+   */
+  static fromEnv(projectId) {
+    const supabaseUrl = process.env.PERCEO_SUPABASE_URL;
+    const supabaseKey = process.env.PERCEO_SUPABASE_SERVICE_ROLE_KEY || process.env.PERCEO_SUPABASE_ANON_KEY;
+    if (!supabaseUrl || !supabaseKey) {
+      throw new Error("PERCEO_SUPABASE_URL and PERCEO_SUPABASE_ANON_KEY (or SERVICE_ROLE_KEY) are required");
+    }
+    return new _PerceoDataClient({
+      supabaseUrl,
+      supabaseKey,
+      projectId
+    });
+  }
+  /**
+   * Create a client that uses a specific user session for auth.
+   * All queries made through this client will run as that user.
+   */
+  static async fromUserSession(params) {
+    const supabase = createClient(params.supabaseUrl, params.supabaseKey, {
+      auth: {
+        autoRefreshToken: true,
+        persistSession: false
+      }
+    });
+    const { error } = await supabase.auth.setSession({
+      access_token: params.accessToken,
+      refresh_token: params.refreshToken
+    });
+    if (error) {
+      throw error;
+    }
+    return new _PerceoDataClient({
+      supabase,
+      projectId: params.projectId
+    });
+  }
+  /**
+   * Get the underlying Supabase client (for advanced operations)
+   */
+  getSupabaseClient() {
+    return this.supabase;
+  }
+  /**
+   * Alias for getSupabaseClient() for backward compatibility
+   */
+  getClient() {
+    return this.supabase;
+  }
+  // ==========================================================================
+  // Project Secrets
+  // ==========================================================================
+  /**
+   * Store or update a project secret (LLM API keys, etc.)
+   * Only accessible with service role or by project admins
+   */
+  async upsertProjectSecret(projectId, keyName, value, createdBy) {
+    const { data, error } = await this.supabase.rpc("upsert_project_secret", {
+      p_project_id: projectId,
+      p_key_name: keyName,
+      p_value: value,
+      p_created_by: createdBy ?? null
+    });
+    if (error) throw error;
+    return data;
+  }
+  /**
+   * Get a project secret (service role only)
+   * This is typically called by backend services, not by end users
+   */
+  async getProjectSecret(projectId, keyName) {
+    const { data, error } = await this.supabase.rpc("get_project_secret", {
+      p_project_id: projectId,
+      p_key_name: keyName
+    });
+    if (error) {
+      if (error.message.includes("Insufficient permissions")) {
+        return null;
+      }
+      throw error;
+    }
+    return data;
+  }
+  // ==========================================================================
+  // Projects
+  // ==========================================================================
+  async getProject(id) {
+    const { data, error } = await this.supabase.from("projects").select("*").eq("id", id).single();
+    if (error) throw error;
+    return data;
+  }
+  async getProjectByName(name) {
+    const { data, error } = await this.supabase.from("projects").select("*").eq("name", name).single();
+    if (error && error.code !== "PGRST116") throw error;
+    return data;
+  }
+  async createProject(project) {
+    const { data, error } = await this.supabase.from("projects").insert(project).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async upsertProject(project) {
+    const { data, error } = await this.supabase.from("projects").upsert(project, { onConflict: "name" }).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async updateProject(projectId, updates) {
+    const { data, error } = await this.supabase.from("projects").update(updates).eq("id", projectId).select().single();
+    if (error) throw error;
+    return data;
+  }
+  /**
+   * Delete a project and all associated data (cascades to flows, steps, personas, API keys, etc.).
+   * Requires project admin/owner (enforced by RLS).
+   */
+  async deleteProject(projectId) {
+    const { error } = await this.supabase.from("projects").delete().eq("id", projectId);
+    if (error) throw error;
+  }
+  // ==========================================================================
+  // Project members (access control)
+  // ==========================================================================
+  /**
+   * Get the current user's role for a project, or null if not a member.
+   * Use with a client that has user session set (e.g. fromUserSession).
+   */
+  async getProjectMemberRole(projectId) {
+    const {
+      data: { user }
+    } = await this.supabase.auth.getUser();
+    if (!user) return null;
+    const { data, error } = await this.supabase.from("project_members").select("role").eq("project_id", projectId).eq("user_id", user.id).maybeSingle();
+    if (error) throw error;
+    return data?.role ?? null;
+  }
+  /**
+   * List members of a project. Requires project membership to view.
+   */
+  async getProjectMembers(projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { data, error } = await this.supabase.from("project_members").select("*").eq("project_id", pid).order("role").order("created_at");
+    if (error) throw error;
+    return data ?? [];
+  }
+  /**
+   * Add a user as a project member. Requires project admin or owner role.
+   */
+  async addProjectMember(projectId, userId, role) {
+    const { data, error } = await this.supabase.from("project_members").insert({ project_id: projectId, user_id: userId, role }).select().single();
+    if (error) throw error;
+    return data;
+  }
+  /**
+   * Remove a member from a project. Requires project admin or owner role.
+   */
+  async removeProjectMember(projectId, userId) {
+    const { error } = await this.supabase.from("project_members").delete().eq("project_id", projectId).eq("user_id", userId);
+    if (error) throw error;
+  }
+  // ==========================================================================
+  // Personas
+  // ==========================================================================
+  async getPersonas(projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { data, error } = await this.supabase.from("personas").select("*").eq("project_id", pid).order("name");
+    if (error) throw error;
+    return data ?? [];
+  }
+  async createPersona(persona) {
+    const { data, error } = await this.supabase.from("personas").insert(persona).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async getPersonasBySource(source, projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { data, error } = await this.supabase.from("personas").select("*").eq("project_id", pid).eq("source", source).order("name");
+    if (error) throw error;
+    return data ?? [];
+  }
+  async createUserConfiguredPersonas(personas, projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const personasWithSource = personas.map((persona) => ({
+      ...persona,
+      project_id: pid,
+      source: "user_configured"
+    }));
+    const { data, error } = await this.supabase.from("personas").insert(personasWithSource).select();
+    if (error) throw error;
+    return data ?? [];
+  }
+  async deleteAutoGeneratedPersonas(projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { error } = await this.supabase.from("personas").delete().eq("project_id", pid).eq("source", "auto_generated");
+    if (error) throw error;
+  }
+  // ==========================================================================
+  // Flows
+  // ==========================================================================
+  async getFlows(projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { data, error } = await this.supabase.from("flows").select("*").eq("project_id", pid).eq("is_active", true).order("priority", { ascending: true }).order("name");
+    if (error) throw error;
+    return data ?? [];
+  }
+  async getFlow(id) {
+    const { data, error } = await this.supabase.from("flows").select("*").eq("id", id).single();
+    if (error && error.code !== "PGRST116") throw error;
+    return data;
+  }
+  async getFlowByName(name, projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { data, error } = await this.supabase.from("flows").select("*").eq("project_id", pid).eq("name", name).single();
+    if (error && error.code !== "PGRST116") throw error;
+    return data;
+  }
+  async getFlowWithSteps(id) {
+    const { data: flow, error: flowError } = await this.supabase.from("flows").select("*").eq("id", id).single();
+    if (flowError) throw flowError;
+    if (!flow) return null;
+    const { data: steps, error: stepsError } = await this.supabase.from("steps").select("*").eq("flow_id", id).order("sequence_order");
+    if (stepsError) throw stepsError;
+    return { ...flow, steps: steps ?? [] };
+  }
+  async getFlowWithMetrics(id) {
+    const { data: flow, error: flowError } = await this.supabase.from("flows").select("*").eq("id", id).single();
+    if (flowError) throw flowError;
+    if (!flow) return null;
+    const { data: metrics, error: metricsError } = await this.supabase.from("flow_metrics").select("*").eq("flow_id", id).single();
+    if (metricsError && metricsError.code !== "PGRST116") throw metricsError;
+    return { ...flow, metrics: metrics ?? null };
+  }
+  async createFlow(flow) {
+    const { data, error } = await this.supabase.from("flows").insert(flow).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async updateFlow(id, updates) {
+    const { data, error } = await this.supabase.from("flows").update(updates).eq("id", id).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async upsertFlow(flow) {
+    const { data, error } = await this.supabase.from("flows").upsert(flow, { onConflict: "project_id,name" }).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async upsertFlows(flows) {
+    const { data, error } = await this.supabase.from("flows").upsert(flows, { onConflict: "project_id,name" }).select();
+    if (error) throw error;
+    return data ?? [];
+  }
+  /**
+   * Get flows affected by recent code changes
+   */
+  async getAffectedFlows(projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { data, error } = await this.supabase.from("flows").select("*").eq("project_id", pid).eq("is_active", true).not("affected_by_changes", "eq", "{}").order("risk_score", { ascending: false });
+    if (error) throw error;
+    return data ?? [];
+  }
+  /**
+   * Mark flows as affected by a code change
+   */
+  async markFlowsAffected(flowIds, changeId, riskScoreIncrement = 0.1) {
+    for (const flowId of flowIds) {
+      const { data: flow } = await this.supabase.from("flows").select("affected_by_changes, risk_score").eq("id", flowId).single();
+      if (flow) {
+        const currentChanges = flow.affected_by_changes ?? [];
+        const newRiskScore = Math.min(1, (flow.risk_score ?? 0) + riskScoreIncrement);
+        await this.supabase.from("flows").update({
+          affected_by_changes: [...currentChanges, changeId],
+          risk_score: newRiskScore
+        }).eq("id", flowId);
+      }
+    }
+  }
+  /**
+   * Clear affected changes from flows (e.g., after tests pass)
+   */
+  async clearAffectedFlows(flowIds) {
+    await this.supabase.from("flows").update({
+      affected_by_changes: [],
+      risk_score: 0
+    }).in("id", flowIds);
+  }
+  // ==========================================================================
+  // Steps
+  // ==========================================================================
+  async getSteps(flowId) {
+    const { data, error } = await this.supabase.from("steps").select("*").eq("flow_id", flowId).order("sequence_order");
+    if (error) throw error;
+    return data ?? [];
+  }
+  async createStep(step) {
+    const { data, error } = await this.supabase.from("steps").insert(step).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async createSteps(steps) {
+    const { data, error } = await this.supabase.from("steps").insert(steps).select();
+    if (error) throw error;
+    return data ?? [];
+  }
+  // ==========================================================================
+  // Test Runs
+  // ==========================================================================
+  async getTestRuns(flowId, limit = 20) {
+    const { data, error } = await this.supabase.from("test_runs").select("*").eq("flow_id", flowId).order("created_at", { ascending: false }).limit(limit);
+    if (error) throw error;
+    return data ?? [];
+  }
+  async getRecentTestRuns(projectId, limit = 50) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { data, error } = await this.supabase.from("test_runs").select("*").eq("project_id", pid).order("created_at", { ascending: false }).limit(limit);
+    if (error) throw error;
+    return data ?? [];
+  }
+  async createTestRun(testRun) {
+    const { data, error } = await this.supabase.from("test_runs").insert(testRun).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async updateTestRun(id, updates) {
+    const { data, error } = await this.supabase.from("test_runs").update(updates).eq("id", id).select().single();
+    if (error) throw error;
+    return data;
+  }
+  // ==========================================================================
+  // Insights
+  // ==========================================================================
+  async getInsights(projectId, status) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    let query = this.supabase.from("insights").select("*").eq("project_id", pid).order("created_at", { ascending: false });
+    if (status) {
+      query = query.eq("status", status);
+    }
+    const { data, error } = await query;
+    if (error) throw error;
+    return data ?? [];
+  }
+  async getOpenInsights(projectId) {
+    return this.getInsights(projectId, "open");
+  }
+  async createInsight(insight) {
+    const { data, error } = await this.supabase.from("insights").insert(insight).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async updateInsight(id, updates) {
+    const { data, error } = await this.supabase.from("insights").update(updates).eq("id", id).select().single();
+    if (error) throw error;
+    return data;
+  }
+  // ==========================================================================
+  // Code Changes
+  // ==========================================================================
+  async createCodeChange(change) {
+    const { data, error } = await this.supabase.from("code_changes").insert(change).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async getCodeChange(baseSha, headSha, projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { data, error } = await this.supabase.from("code_changes").select("*").eq("project_id", pid).eq("base_sha", baseSha).eq("head_sha", headSha).single();
+    if (error && error.code !== "PGRST116") throw error;
+    return data;
+  }
+  async updateCodeChangeAnalysis(id, analysis) {
+    const { data, error } = await this.supabase.from("code_changes").update({
+      ...analysis,
+      analyzed_at: (/* @__PURE__ */ new Date()).toISOString()
+    }).eq("id", id).select().single();
+    if (error) throw error;
+    return data;
+  }
+  // ==========================================================================
+  // Events (Realtime Event Bus)
+  // ==========================================================================
+  async publishEvent(event) {
+    const { data, error } = await this.supabase.from("events").insert({
+      ...event,
+      project_id: event.project_id ?? this.projectId ?? void 0
+    }).select().single();
+    if (error) throw error;
+    return data;
+  }
+  /**
+   * Publish a flow change event
+   */
+  async publishFlowsAffected(changeId, affectedFlows, source = "observer") {
+    return this.publishEvent({
+      type: "flows.affected",
+      payload: {
+        changeId,
+        flows: affectedFlows,
+        timestamp: Date.now()
+      },
+      source
+    });
+  }
+  /**
+   * Publish a test status event
+   */
+  async publishTestStatus(testRunId, flowId, status, source = "coordinator") {
+    return this.publishEvent({
+      type: `test.${status}`,
+      payload: {
+        testRunId,
+        flowId,
+        status,
+        timestamp: Date.now()
+      },
+      source
+    });
+  }
+  // ==========================================================================
+  // Predictions
+  // ==========================================================================
+  async createPrediction(prediction) {
+    const { data, error } = await this.supabase.from("predictions").insert(prediction).select().single();
+    if (error) throw error;
+    return data;
+  }
+  async getUnvalidatedPredictions(flowId) {
+    const { data, error } = await this.supabase.from("predictions").select("*").eq("flow_id", flowId).is("validated_at", null).order("created_at", { ascending: false });
+    if (error) throw error;
+    return data ?? [];
+  }
+  // ==========================================================================
+  // Flow Metrics
+  // ==========================================================================
+  async getFlowMetrics(flowId) {
+    const { data, error } = await this.supabase.from("flow_metrics").select("*").eq("flow_id", flowId).single();
+    if (error && error.code !== "PGRST116") throw error;
+    return data;
+  }
+  async upsertFlowMetrics(flowId, metrics) {
+    const { data, error } = await this.supabase.from("flow_metrics").upsert({ flow_id: flowId, ...metrics }, { onConflict: "flow_id" }).select().single();
+    if (error) throw error;
+    return data;
+  }
+  // ==========================================================================
+  // API Keys
+  // ==========================================================================
+  /**
+   * Generate a new API key for a project
+   * Returns the full key (only shown once) and the created key record
+   */
+  async createApiKey(projectId, options) {
+    const keyBytes = randomBytes(32);
+    const key = `prc_${keyBytes.toString("base64url")}`;
+    const keyPrefix = key.substring(0, 12);
+    const keyHash = createHash("sha256").update(key).digest("hex");
+    const insertData = {
+      project_id: projectId,
+      name: options.name,
+      key_hash: keyHash,
+      key_prefix: keyPrefix,
+      scopes: options.scopes,
+      created_by: options.createdBy ?? null,
+      expires_at: options.expiresAt?.toISOString() ?? null
+    };
+    const { data, error } = await this.supabase.from("project_api_keys").insert(insertData).select().single();
+    if (error) throw error;
+    return {
+      key,
+      keyRecord: data
+    };
+  }
+  /**
+   * Get all API keys for a project (metadata only, no hashes)
+   */
+  async getApiKeys(projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { data, error } = await this.supabase.from("project_api_keys").select("id, project_id, name, key_prefix, scopes, created_by, created_at, last_used_at, last_used_ip, expires_at, revoked_at, revoked_by, revocation_reason").eq("project_id", pid).order("created_at", { ascending: false });
+    if (error) throw error;
+    return data ?? [];
+  }
+  /**
+   * Get active (non-revoked, non-expired) API keys for a project
+   */
+  async getActiveApiKeys(projectId) {
+    const pid = projectId ?? this.projectId;
+    if (!pid) throw new Error("Project ID required");
+    const { data, error } = await this.supabase.from("project_api_keys").select("id, project_id, name, key_prefix, scopes, created_by, created_at, last_used_at, last_used_ip, expires_at, revoked_at, revoked_by, revocation_reason").eq("project_id", pid).is("revoked_at", null).or(`expires_at.is.null,expires_at.gt.${(/* @__PURE__ */ new Date()).toISOString()}`).order("created_at", { ascending: false });
+    if (error) throw error;
+    return data ?? [];
+  }
+  /**
+   * Validate an API key and return the project info if valid
+   */
+  async validateApiKey(key) {
+    if (!key.startsWith("prc_")) {
+      return null;
+    }
+    const keyPrefix = key.substring(0, 12);
+    const keyHash = createHash("sha256").update(key).digest("hex");
+    const { data, error } = await this.supabase.rpc("validate_api_key", {
+      p_key_prefix: keyPrefix,
+      p_key_hash: keyHash
+    });
+    if (error) throw error;
+    if (!data || data.length === 0) return null;
+    const result = data[0];
+    await this.supabase.rpc("record_api_key_usage", {
+      p_key_id: result.key_id
+    });
+    return {
+      projectId: result.project_id,
+      scopes: result.scopes,
+      keyId: result.key_id
+    };
+  }
+  /**
+   * Revoke an API key
+   */
+  async revokeApiKey(keyId, options) {
+    const { data, error } = await this.supabase.from("project_api_keys").update({
+      revoked_at: (/* @__PURE__ */ new Date()).toISOString(),
+      revoked_by: options?.revokedBy ?? null,
+      revocation_reason: options?.reason ?? null
+    }).eq("id", keyId).select().single();
+    if (error) throw error;
+    return data;
+  }
+  /**
+   * Delete an API key permanently
+   */
+  async deleteApiKey(keyId) {
+    const { error } = await this.supabase.from("project_api_keys").delete().eq("id", keyId);
+    if (error) throw error;
+  }
+  /**
+   * Check if an API key has a specific scope
+   */
+  async hasApiKeyScope(keyId, scope) {
+    const { data, error } = await this.supabase.rpc("has_api_key_scope", {
+      p_key_id: keyId,
+      p_scope: scope
+    });
+    if (error) throw error;
+    return data;
+  }
+  // ==========================================================================
+  // Realtime Subscriptions
+  // ==========================================================================
+  /**
+   * Subscribe to flow changes (via Postgres CDC)
+   */
+  subscribeToFlows(projectId, callback) {
+    const channelName = `flows-${projectId}`;
+    if (this.channels.has(channelName)) {
+      return this.channels.get(channelName);
+    }
+    const channel = this.supabase.channel(channelName).on(
+      "postgres_changes",
+      {
+        event: "*",
+        schema: "public",
+        table: "flows",
+        filter: `project_id=eq.${projectId}`
+      },
+      (payload) => {
+        callback(payload);
+      }
+    ).subscribe();
+    this.channels.set(channelName, channel);
+    return channel;
+  }
+  /**
+   * Subscribe to test run updates
+   */
+  subscribeToTestRuns(projectId, callback) {
+    const channelName = `test-runs-${projectId}`;
+    if (this.channels.has(channelName)) {
+      return this.channels.get(channelName);
+    }
+    const channel = this.supabase.channel(channelName).on(
+      "postgres_changes",
+      {
+        event: "*",
+        schema: "public",
+        table: "test_runs",
+        filter: `project_id=eq.${projectId}`
+      },
+      (payload) => {
+        callback(payload);
+      }
+    ).subscribe();
+    this.channels.set(channelName, channel);
+    return channel;
+  }
+  /**
+   * Subscribe to new insights
+   */
+  subscribeToInsights(projectId, callback) {
+    const channelName = `insights-${projectId}`;
+    if (this.channels.has(channelName)) {
+      return this.channels.get(channelName);
+    }
+    const channel = this.supabase.channel(channelName).on(
+      "postgres_changes",
+      {
+        event: "*",
+        schema: "public",
+        table: "insights",
+        filter: `project_id=eq.${projectId}`
+      },
+      (payload) => {
+        callback(payload);
+      }
+    ).subscribe();
+    this.channels.set(channelName, channel);
+    return channel;
+  }
+  /**
+   * Subscribe to events (event bus)
+   */
+  subscribeToEvents(projectId, eventTypes, callback) {
+    const channelName = `events-${projectId}-${eventTypes?.join("-") ?? "all"}`;
+    if (this.channels.has(channelName)) {
+      return this.channels.get(channelName);
+    }
+    const channel = this.supabase.channel(channelName).on(
+      "postgres_changes",
+      {
+        event: "INSERT",
+        schema: "public",
+        table: "events",
+        filter: `project_id=eq.${projectId}`
+      },
+      (payload) => {
+        const event = payload.new;
+        if (!eventTypes || eventTypes.includes(event.type)) {
+          callback(payload);
+        }
+      }
+    ).subscribe();
+    this.channels.set(channelName, channel);
+    return channel;
+  }
+  /**
+   * Broadcast ephemeral messages (not persisted)
+   */
+  broadcast(channelName, event, payload) {
+    const channel = this.supabase.channel(channelName);
+    channel.send({
+      type: "broadcast",
+      event,
+      payload
+    });
+  }
+  /**
+   * Subscribe to broadcast messages
+   */
+  subscribeToBroadcast(channelName, event, callback) {
+    const fullChannelName = `broadcast-${channelName}`;
+    if (this.channels.has(fullChannelName)) {
+      return this.channels.get(fullChannelName);
+    }
+    const channel = this.supabase.channel(fullChannelName).on("broadcast", { event }, ({ payload }) => {
+      callback(payload);
+    }).subscribe();
+    this.channels.set(fullChannelName, channel);
+    return channel;
+  }
+  /**
+   * Unsubscribe from a channel
+   */
+  async unsubscribe(channelName) {
+    const channel = this.channels.get(channelName);
+    if (channel) {
+      await channel.unsubscribe();
+      this.channels.delete(channelName);
+    }
+  }
+  /**
+   * Unsubscribe from all channels
+   */
+  async unsubscribeAll() {
+    for (const [name, channel] of this.channels) {
+      await channel.unsubscribe();
+      this.channels.delete(name);
+    }
+  }
+  /**
+   * Cleanup - call when done with the client
+   */
+  async cleanup() {
+    await this.unsubscribeAll();
+  }
+};
+
+// src/index.ts
+var DEFAULT_SUPABASE_URL = "https://lygslnolucoidnhaitdn.supabase.co";
+var DEFAULT_SUPABASE_ANON_KEY = process.env.PERCEO_SUPABASE_ANON_KEY || "sb_publishable_8Wj8bSM7drJH6mXp6NM7SQ_GcyE9pZb";
+function getSupabaseUrl() {
+  return process.env.PERCEO_SUPABASE_URL || DEFAULT_SUPABASE_URL;
+}
+function getSupabaseAnonKey() {
+  const key = process.env.PERCEO_SUPABASE_ANON_KEY || DEFAULT_SUPABASE_ANON_KEY;
+  if (!key) {
+    throw new Error(
+      "PERCEO_SUPABASE_ANON_KEY is not configured. This should be embedded in the package for Perceo Cloud users. For self-hosted, set PERCEO_SUPABASE_ANON_KEY environment variable."
+    );
+  }
+  return key;
+}
+function getSupabaseServiceRoleKey() {
+  return process.env.PERCEO_SUPABASE_SERVICE_ROLE_KEY;
+}
+function createSupabaseAuthClient() {
+  return createClient2(getSupabaseUrl(), getSupabaseAnonKey(), {
+    auth: {
+      autoRefreshToken: true,
+      persistSession: false,
+      detectSessionInUrl: false
+    }
+  });
+}
+function parseHashParams(hash) {
+  const params = {};
+  if (!hash || !hash.startsWith("#")) return params;
+  const query = hash.slice(1);
+  for (const part of query.split("&")) {
+    const [key, value] = part.split("=").map((s) => decodeURIComponent(s.replace(/\+/g, " ")));
+    if (key && value) params[key] = value;
+  }
+  return params;
+}
+async function sessionFromRedirectUrl(supabase, redirectUrl) {
+  const hash = redirectUrl.includes("#") ? redirectUrl.slice(redirectUrl.indexOf("#")) : "";
+  const params = parseHashParams(hash);
+  const access_token = params.access_token;
+  const refresh_token = params.refresh_token;
+  const expires_in = params.expires_in ? parseInt(params.expires_in, 10) : 3600;
+  if (!access_token || !refresh_token) {
+    throw new Error("Redirect URL did not contain access_token and refresh_token");
+  }
+  const { data, error } = await supabase.auth.setSession({
+    access_token,
+    refresh_token
+  });
+  if (error) throw error;
+  const session = data.session;
+  if (!session) throw new Error("No session returned");
+  const expires_at = session.expires_at ?? Math.floor(Date.now() / 1e3) + expires_in;
+  return {
+    access_token: session.access_token,
+    refresh_token: session.refresh_token ?? refresh_token,
+    expires_at,
+    supabaseUrl: getSupabaseUrl()
+  };
+}
+async function sendMagicLink(supabase, email, redirectUrl) {
+  const { error } = await supabase.auth.signInWithOtp({
+    email,
+    options: {
+      emailRedirectTo: redirectUrl
+    }
+  });
+  return { error: error ?? null };
+}
+export {
+  PerceoDataClient,
+  createSupabaseAuthClient,
+  getSupabaseAnonKey,
+  getSupabaseServiceRoleKey,
+  getSupabaseUrl,
+  sendMagicLink,
+  sessionFromRedirectUrl
+};