@prabhask5/stellar-engine 1.0.3

package/dist/supabase/auth.js

@@ -0,0 +1,298 @@
+import { supabase } from './client';
+import { cacheOfflineCredentials, clearOfflineCredentials, updateOfflineCredentialsPassword, updateOfflineCredentialsProfile } from '../auth/offlineCredentials';
+import { clearOfflineSession } from '../auth/offlineSession';
+import { debugWarn, debugError } from '../debug';
+import { getEngineConfig } from '../config';
+import { syncStatusStore } from '../stores/sync';
+import { authState } from '../stores/authState';
+/**
+ * Get the email confirmation redirect URL
+ * Points to /confirm page which handles the token verification
+ */
+function getConfirmRedirectUrl() {
+    if (typeof window !== 'undefined') {
+        const path = getEngineConfig().auth?.confirmRedirectPath || '/confirm';
+        return `${window.location.origin}${path}`;
+    }
+    // Fallback for SSR (shouldn't be called, but just in case)
+    return '/confirm';
+}
+export async function signIn(email, password) {
+    const { data, error } = await supabase.auth.signInWithPassword({
+        email,
+        password
+    });
+    // Cache credentials for offline use on successful login
+    if (!error && data.session && data.user) {
+        try {
+            await cacheOfflineCredentials(email, password, data.user, data.session);
+        }
+        catch (e) {
+            // Don't fail login if credential caching fails
+            debugError('[Auth] Failed to cache offline credentials:', e);
+        }
+    }
+    return {
+        user: data.user,
+        session: data.session,
+        error: error?.message || null
+    };
+}
+export async function signUp(email, password, profileData) {
+    const config = getEngineConfig();
+    const metadata = config.auth?.profileToMetadata
+        ? config.auth.profileToMetadata(profileData)
+        : profileData;
+    const { data, error } = await supabase.auth.signUp({
+        email,
+        password,
+        options: {
+            emailRedirectTo: getConfirmRedirectUrl(),
+            data: metadata
+        }
+    });
+    return {
+        user: data.user,
+        session: data.session,
+        error: error?.message || null
+    };
+}
+export async function signOut(options) {
+    // 1. Stop sync engine (import dynamically to avoid circular deps)
+    try {
+        const { stopSyncEngine, clearLocalCache, clearPendingSyncQueue } = await import('../engine');
+        await stopSyncEngine();
+        if (!options?.preserveLocalData) {
+            // 2. Clear pending sync queue
+            await clearPendingSyncQueue();
+            // 3. Clear local cache
+            await clearLocalCache();
+        }
+    }
+    catch (e) {
+        debugError('[Auth] Failed to stop engine/clear data:', e);
+    }
+    // 4. Clear offline session
+    try {
+        await clearOfflineSession();
+    }
+    catch (e) {
+        debugError('[Auth] Failed to clear offline session:', e);
+    }
+    // 5. Clear offline credentials (only if online, for offline re-login preservation)
+    try {
+        if (!options?.preserveOfflineCredentials) {
+            const isOnline = typeof navigator !== 'undefined' && navigator.onLine;
+            if (isOnline) {
+                await clearOfflineCredentials();
+            }
+        }
+    }
+    catch (e) {
+        debugError('[Auth] Failed to clear offline credentials:', e);
+    }
+    // 6. Supabase auth signOut
+    const { error } = await supabase.auth.signOut();
+    // 7. Clear sb-* localStorage keys
+    try {
+        if (typeof localStorage !== 'undefined') {
+            const keys = Object.keys(localStorage).filter((k) => k.startsWith('sb-'));
+            keys.forEach((k) => localStorage.removeItem(k));
+        }
+    }
+    catch {
+        // Ignore storage errors
+    }
+    // 8. Reset sync status store
+    syncStatusStore.reset();
+    // 9. Reset auth state store
+    authState.reset();
+    return { error: error?.message || null };
+}
+/**
+ * Get current Supabase session
+ * When offline, returns the cached session from localStorage even if expired
+ * (the caller should handle offline mode appropriately)
+ */
+export async function getSession() {
+    const isOffline = typeof navigator !== 'undefined' && !navigator.onLine;
+    try {
+        const { data, error } = await supabase.auth.getSession();
+        if (error) {
+            debugError('[Auth] getSession error:', error.message);
+            // If offline and we got an error, don't clear session - it might just be a network issue
+            if (isOffline) {
+                debugWarn('[Auth] Offline - keeping session despite error');
+                // Try to get session from localStorage directly
+                return getSessionFromStorage();
+            }
+            // If session retrieval fails online, it might be corrupted - try to sign out to clear it
+            if (error.message?.includes('hash') || error.message?.includes('undefined')) {
+                debugWarn('[Auth] Detected corrupted session, attempting to clear');
+                await supabase.auth.signOut();
+            }
+            return null;
+        }
+        return data.session;
+    }
+    catch (e) {
+        debugError('[Auth] Unexpected error getting session:', e);
+        // If offline, don't clear anything - try to get from storage
+        if (isOffline) {
+            debugWarn('[Auth] Offline - attempting to get session from storage');
+            return getSessionFromStorage();
+        }
+        // Attempt to clear any corrupted state when online
+        try {
+            await supabase.auth.signOut();
+        }
+        catch {
+            // Ignore signOut errors
+        }
+        return null;
+    }
+}
+/**
+ * Get session directly from localStorage (for offline scenarios)
+ * This bypasses Supabase's token refresh logic
+ */
+function getSessionFromStorage() {
+    try {
+        // Supabase stores session in localStorage with key pattern: sb-{project-ref}-auth-token
+        const keys = Object.keys(localStorage);
+        const sessionKey = keys.find((k) => k.includes('-auth-token'));
+        if (!sessionKey)
+            return null;
+        const stored = localStorage.getItem(sessionKey);
+        if (!stored)
+            return null;
+        const parsed = JSON.parse(stored);
+        if (parsed?.currentSession) {
+            return parsed.currentSession;
+        }
+        // Newer Supabase versions use different structure
+        if (parsed?.session) {
+            return parsed.session;
+        }
+        return null;
+    }
+    catch (e) {
+        debugError('[Auth] Failed to get session from storage:', e);
+        return null;
+    }
+}
+/**
+ * Check if a session's access token is expired
+ */
+export function isSessionExpired(session) {
+    if (!session)
+        return true;
+    // expires_at is in seconds
+    const expiresAt = session.expires_at;
+    if (!expiresAt)
+        return true;
+    return Date.now() / 1000 > expiresAt;
+}
+export function getUserProfile(user) {
+    const config = getEngineConfig();
+    if (config.auth?.profileExtractor && user) {
+        return config.auth.profileExtractor(user.user_metadata || {});
+    }
+    return user?.user_metadata || {};
+}
+/**
+ * Update user profile
+ * Also updates cached offline credentials
+ */
+export async function updateProfile(profile) {
+    const config = getEngineConfig();
+    const metadata = config.auth?.profileToMetadata
+        ? config.auth.profileToMetadata(profile)
+        : profile;
+    const { error } = await supabase.auth.updateUser({
+        data: metadata
+    });
+    if (!error) {
+        // Update offline cache
+        try {
+            await updateOfflineCredentialsProfile(profile);
+        }
+        catch (e) {
+            debugError('[Auth] Failed to update offline profile:', e);
+        }
+    }
+    return { error: error?.message || null };
+}
+/**
+ * Change user password
+ * Verifies current password first, then updates
+ * Also updates cached offline credentials
+ */
+export async function changePassword(currentPassword, newPassword) {
+    // Get current user email from session
+    const { data: { session } } = await supabase.auth.getSession();
+    const user = session?.user;
+    if (!user?.email) {
+        return { error: 'No authenticated user found' };
+    }
+    // Verify current password by attempting to sign in
+    const { error: verifyError } = await supabase.auth.signInWithPassword({
+        email: user.email,
+        password: currentPassword
+    });
+    if (verifyError) {
+        return { error: 'Current password is incorrect' };
+    }
+    // Update password
+    const { error } = await supabase.auth.updateUser({
+        password: newPassword
+    });
+    if (!error) {
+        // Update offline cache with new password
+        try {
+            await updateOfflineCredentialsPassword(newPassword);
+        }
+        catch (e) {
+            debugError('[Auth] Failed to update offline password:', e);
+        }
+    }
+    return { error: error?.message || null };
+}
+/**
+ * Resend confirmation email for signup
+ * Should be rate-limited on the client side (30 second cooldown)
+ */
+export async function resendConfirmationEmail(email) {
+    const { error } = await supabase.auth.resend({
+        type: 'signup',
+        email,
+        options: {
+            emailRedirectTo: getConfirmRedirectUrl()
+        }
+    });
+    return { error: error?.message || null };
+}
+/**
+ * Verify OTP token (for email confirmation).
+ * Absorbs confirm page's direct Supabase call.
+ */
+export async function verifyOtp(tokenHash, type) {
+    const { error } = await supabase.auth.verifyOtp({
+        token_hash: tokenHash,
+        type
+    });
+    return { error: error?.message || null };
+}
+/**
+ * Get a valid (non-expired) session, or null.
+ * Merges getSession() + isSessionExpired() into a single call.
+ */
+export async function getValidSession() {
+    const session = await getSession();
+    if (!session)
+        return null;
+    if (isSessionExpired(session))
+        return null;
+    return session;
+}
+//# sourceMappingURL=auth.js.map

package/dist/supabase/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/supabase/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,gCAAgC,EAChC,+BAA+B,EAChC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD;;;GAGG;AACH,SAAS,qBAAqB;IAC5B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC,IAAI,EAAE,mBAAmB,IAAI,UAAU,CAAC;QACvE,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,2DAA2D;IAC3D,OAAO,UAAU,CAAC;AACpB,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAa,EAAE,QAAgB;IAC1D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAC7D,KAAK;QACL,QAAQ;KACT,CAAC,CAAC;IAEH,wDAAwD;IACxD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,+CAA+C;YAC/C,UAAU,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,KAAa,EACb,QAAgB,EAChB,WAAoC;IAEpC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,iBAAiB;QAC7C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC;QAC5C,CAAC,CAAC,WAAW,CAAC;IAEhB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QACjD,KAAK;QACL,QAAQ;QACR,OAAO,EAAE;YACP,eAAe,EAAE,qBAAqB,EAAE;YACxC,IAAI,EAAE,QAAQ;SACf;KACF,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAG7B;IACC,kEAAkE;IAClE,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAE7F,MAAM,cAAc,EAAE,CAAC;QAEvB,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;YAChC,8BAA8B;YAC9B,MAAM,qBAAqB,EAAE,CAAC;YAE9B,uBAAuB;YACvB,MAAM,eAAe,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,UAAU,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,2BAA2B;IAC3B,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,UAAU,CAAC,yCAAyC,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,mFAAmF;IACnF,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,0BAA0B,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,OAAO,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,MAAM,CAAC;YACtE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,uBAAuB,EAAE,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,UAAU,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,2BAA2B;IAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAEhD,kCAAkC;IAClC,IAAI,CAAC;QACH,IAAI,OAAO,YAAY,KAAK,WAAW,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IAED,6BAA6B;IAC7B,eAAe,CAAC,KAAK,EAAE,CAAC;IAExB,4BAA4B;IAC5B,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,SAAS,GAAG,OAAO,SAAS,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAExE,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAEzD,IAAI,KAAK,EAAE,CAAC;YACV,UAAU,CAAC,0BAA0B,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAEtD,yFAAyF;YACzF,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,CAAC,gDAAgD,CAAC,CAAC;gBAC5D,gDAAgD;gBAChD,OAAO,qBAAqB,EAAE,CAAC;YACjC,CAAC;YAED,yFAAyF;YACzF,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5E,SAAS,CAAC,wDAAwD,CAAC,CAAC;gBACpE,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,UAAU,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;QAE1D,6DAA6D;QAC7D,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,yDAAyD,CAAC,CAAC;YACrE,OAAO,qBAAqB,EAAE,CAAC;QACjC,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB;IAC5B,IAAI,CAAC;QACH,wFAAwF;QACxF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,MAAM,EAAE,cAAc,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,cAAyB,CAAC;QAC1C,CAAC;QACD,kDAAkD;QAClD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,OAAkB,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,UAAU,CAAC,4CAA4C,EAAE,CAAC,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAuB;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,2BAA2B;IAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IACrC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,IAAI,EAAE,gBAAgB,IAAI,IAAI,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,EAAE,aAAa,IAAI,EAAE,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgC;IAEhC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,iBAAiB;QAC7C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;QACxC,CAAC,CAAC,OAAO,CAAC;IAEZ,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/C,IAAI,EAAE,QAAQ;KACf,CAAC,CAAC;IAEH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,uBAAuB;QACvB,IAAI,CAAC;YACH,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,UAAU,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,eAAuB,EACvB,WAAmB;IAEnB,sCAAsC;IACtC,MAAM,EACJ,IAAI,EAAE,EAAE,OAAO,EAAE,EAClB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAClD,CAAC;IAED,mDAAmD;IACnD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACpE,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,eAAe;KAC1B,CAAC,CAAC;IAEH,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IACpD,CAAC;IAED,kBAAkB;IAClB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/C,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,yCAAyC;QACzC,IAAI,CAAC;YACH,MAAM,gCAAgC,CAAC,WAAW,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,UAAU,CAAC,2CAA2C,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAAa;IACzD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC3C,IAAI,EAAE,QAAQ;QACd,KAAK;QACL,OAAO,EAAE;YACP,eAAe,EAAE,qBAAqB,EAAE;SACzC;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAiB,EACjB,IAAwB;IAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9C,UAAU,EAAE,SAAS;QACrB,IAAI;KACL,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,gBAAgB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/supabase/client.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Supabase Client - Lazy Initialization via Proxy
+ *
+ * Uses runtime config instead of build-time $env/static/public.
+ * The Proxy pattern preserves the exact same API surface.
+ */
+import { type SupabaseClient } from '@supabase/supabase-js';
+export declare function _setClientPrefix(prefix: string): void;
+/**
+ * Proxy-based lazy singleton.
+ * Delegates all property access to the real SupabaseClient,
+ * which is created on first access using getConfig().
+ */
+export declare const supabase: SupabaseClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/supabase/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/supabase/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAM1E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,QAE9C;AA4ID;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,cASrB,CAAC"}

package/dist/supabase/client.js

@@ -0,0 +1,149 @@
+/**
+ * Supabase Client - Lazy Initialization via Proxy
+ *
+ * Uses runtime config instead of build-time $env/static/public.
+ * The Proxy pattern preserves the exact same API surface.
+ */
+import { createClient } from '@supabase/supabase-js';
+import { getConfig } from '../runtime/runtimeConfig';
+import { debugLog, debugWarn, debugError } from '../debug';
+let _prefix = 'stellar';
+export function _setClientPrefix(prefix) {
+    _prefix = prefix;
+}
+// Clear corrupted Supabase auth data from localStorage if it exists
+// This prevents "can't access property 'hash'" errors during initialization
+function clearCorruptedAuthData() {
+    if (typeof localStorage === 'undefined')
+        return;
+    try {
+        // Supabase stores auth data with keys starting with 'sb-'
+        const keysToCheck = Object.keys(localStorage).filter((key) => key.startsWith('sb-'));
+        for (const key of keysToCheck) {
+            const value = localStorage.getItem(key);
+            if (value) {
+                try {
+                    const parsed = JSON.parse(value);
+                    // Validate the parsed data has expected structure
+                    if (parsed && typeof parsed === 'object') {
+                        // Check for signs of corruption
+                        const hasCorruptedSession = 
+                        // currentSession exists but missing required fields
+                        (parsed.currentSession && typeof parsed.currentSession !== 'object') ||
+                            // access_token exists but is not a string
+                            (parsed.access_token !== undefined && typeof parsed.access_token !== 'string') ||
+                            // expires_at exists but is not a number
+                            (parsed.expires_at !== undefined && typeof parsed.expires_at !== 'number');
+                        if (hasCorruptedSession) {
+                            debugWarn('[Auth] Clearing corrupted session data:', key);
+                            localStorage.removeItem(key);
+                        }
+                    }
+                }
+                catch {
+                    // JSON parse failed - data is corrupted
+                    debugWarn('[Auth] Clearing malformed session data:', key);
+                    localStorage.removeItem(key);
+                }
+            }
+        }
+    }
+    catch (e) {
+        debugError('[Auth] Error checking localStorage:', e);
+    }
+}
+// Add global handler for unhandled Supabase auth errors
+if (typeof window !== 'undefined') {
+    window.addEventListener('unhandledrejection', (event) => {
+        const reason = event.reason;
+        // Check if this is a Supabase auth error
+        if (reason && typeof reason === 'object' && 'message' in reason) {
+            const message = String(reason.message || '');
+            if (message.includes('hash') || message.includes("can't access property")) {
+                debugWarn('[Auth] Caught unhandled auth error, clearing storage');
+                event.preventDefault(); // Prevent the error from showing in console
+                // Clear Supabase storage
+                try {
+                    const keys = Object.keys(localStorage).filter((k) => k.startsWith('sb-'));
+                    keys.forEach((k) => localStorage.removeItem(k));
+                    // Reload the page to get a fresh state
+                    window.location.reload();
+                }
+                catch {
+                    // Ignore storage errors
+                }
+            }
+        }
+    });
+}
+// Run cleanup before creating client
+clearCorruptedAuthData();
+// Detect if running as iOS PWA (standalone mode)
+const isIOSPWA = typeof window !== 'undefined' &&
+    // @ts-expect-error - navigator.standalone is iOS-specific
+    (window.navigator.standalone === true || window.matchMedia('(display-mode: standalone)').matches);
+if (isIOSPWA) {
+    debugLog('[Auth] Running as iOS PWA - using enhanced auth persistence');
+}
+// Lazy singleton: actual client is created on first access
+let realClient = null;
+function getOrCreateClient() {
+    if (realClient)
+        return realClient;
+    const config = getConfig();
+    const url = config?.supabaseUrl || 'https://placeholder.supabase.co';
+    const key = config?.supabaseAnonKey || 'placeholder';
+    if (!config) {
+        debugWarn('Supabase config not loaded yet. Call initConfig() before using supabase client.');
+    }
+    realClient = createClient(url, key, {
+        auth: {
+            // Use localStorage for persistence (default, but explicit for clarity)
+            persistSession: true,
+            // Auto-refresh tokens before they expire
+            autoRefreshToken: true,
+            // Detect session from URL (for OAuth redirects)
+            detectSessionInUrl: true,
+            // Storage key prefix
+            storageKey: `${_prefix}-auth`,
+            // Flow type - PKCE is more secure and works better with PWAs
+            flowType: 'pkce'
+        },
+        global: {
+            // Add custom headers to help debug PWA issues
+            headers: {
+                'x-client-info': isIOSPWA ? `${_prefix}-ios-pwa` : `${_prefix}-web`
+            }
+        }
+    });
+    // Set up auth state change listener to log auth events (helps debug PWA issues)
+    if (typeof window !== 'undefined') {
+        realClient.auth.onAuthStateChange((event, session) => {
+            debugLog(`[Auth] State change: ${event}`, session ? `User: ${session.user?.id}` : 'No session');
+            // If session is lost unexpectedly, this helps identify the issue
+            if (event === 'SIGNED_OUT' && isIOSPWA) {
+                debugWarn('[Auth] Signed out on iOS PWA - session may have been evicted');
+            }
+            if (event === 'TOKEN_REFRESHED') {
+                debugLog('[Auth] Token refreshed successfully');
+            }
+        });
+    }
+    return realClient;
+}
+/**
+ * Proxy-based lazy singleton.
+ * Delegates all property access to the real SupabaseClient,
+ * which is created on first access using getConfig().
+ */
+export const supabase = new Proxy({}, {
+    get(_target, prop, receiver) {
+        const client = getOrCreateClient();
+        const value = Reflect.get(client, prop, receiver);
+        if (typeof value === 'function') {
+            return value.bind(client);
+        }
+        return value;
+    }
+});
+//# sourceMappingURL=client.js.map

package/dist/supabase/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/supabase/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAuB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAE3D,IAAI,OAAO,GAAG,SAAS,CAAC;AAExB,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,GAAG,MAAM,CAAC;AACnB,CAAC;AAED,oEAAoE;AACpE,4EAA4E;AAC5E,SAAS,sBAAsB;IAC7B,IAAI,OAAO,YAAY,KAAK,WAAW;QAAE,OAAO;IAEhD,IAAI,CAAC;QACH,0DAA0D;QAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAErF,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACjC,kDAAkD;oBAClD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;wBACzC,gCAAgC;wBAChC,MAAM,mBAAmB;wBACvB,oDAAoD;wBACpD,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC;4BACpE,0CAA0C;4BAC1C,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC;4BAC9E,wCAAwC;4BACxC,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC;wBAE7E,IAAI,mBAAmB,EAAE,CAAC;4BACxB,SAAS,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;4BAC1D,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;wBAC/B,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,wCAAwC;oBACxC,SAAS,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;oBAC1D,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,UAAU,CAAC,qCAAqC,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;IAClC,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,yCAAyC;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBAC1E,SAAS,CAAC,sDAAsD,CAAC,CAAC;gBAClE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,4CAA4C;gBACpE,yBAAyB;gBACzB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC1E,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChD,uCAAuC;oBACvC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,qCAAqC;AACrC,sBAAsB,EAAE,CAAC;AAEzB,iDAAiD;AACjD,MAAM,QAAQ,GACZ,OAAO,MAAM,KAAK,WAAW;IAC7B,0DAA0D;IAC1D,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,CAAC;AAEpG,IAAI,QAAQ,EAAE,CAAC;IACb,QAAQ,CAAC,6DAA6D,CAAC,CAAC;AAC1E,CAAC;AAED,2DAA2D;AAC3D,IAAI,UAAU,GAA0B,IAAI,CAAC;AAE7C,SAAS,iBAAiB;IACxB,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,EAAE,WAAW,IAAI,iCAAiC,CAAC;IACrE,MAAM,GAAG,GAAG,MAAM,EAAE,eAAe,IAAI,aAAa,CAAC;IAErD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,SAAS,CACP,iFAAiF,CAClF,CAAC;IACJ,CAAC;IAED,UAAU,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE;QAClC,IAAI,EAAE;YACJ,uEAAuE;YACvE,cAAc,EAAE,IAAI;YACpB,yCAAyC;YACzC,gBAAgB,EAAE,IAAI;YACtB,gDAAgD;YAChD,kBAAkB,EAAE,IAAI;YACxB,qBAAqB;YACrB,UAAU,EAAE,GAAG,OAAO,OAAO;YAC7B,6DAA6D;YAC7D,QAAQ,EAAE,MAAM;SACjB;QACD,MAAM,EAAE;YACN,8CAA8C;YAC9C,OAAO,EAAE;gBACP,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM;aACpE;SACF;KACF,CAAC,CAAC;IAEH,gFAAgF;IAChF,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACnD,QAAQ,CACN,wBAAwB,KAAK,EAAE,EAC/B,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CACrD,CAAC;YAEF,iEAAiE;YACjE,IAAI,KAAK,KAAK,YAAY,IAAI,QAAQ,EAAE,CAAC;gBACvC,SAAS,CAAC,8DAA8D,CAAC,CAAC;YAC5E,CAAC;YAED,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;gBAChC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAmB,IAAI,KAAK,CAAC,EAAoB,EAAE;IACtE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ;QACzB,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC,CAAC"}

package/dist/supabase/validate.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Supabase Credential Validation
+ *
+ * Tests connectivity to a Supabase project using provided credentials.
+ * Used during setup flows to verify user-inputted URL and anon key.
+ */
+export declare function validateSupabaseCredentials(url: string, anonKey: string): Promise<{
+    valid: boolean;
+    error?: string;
+}>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/supabase/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/supabase/validate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+B7C"}

package/dist/supabase/validate.js

@@ -0,0 +1,38 @@
+/**
+ * Supabase Credential Validation
+ *
+ * Tests connectivity to a Supabase project using provided credentials.
+ * Used during setup flows to verify user-inputted URL and anon key.
+ */
+import { createClient } from '@supabase/supabase-js';
+export async function validateSupabaseCredentials(url, anonKey) {
+    try {
+        new URL(url);
+    }
+    catch {
+        return { valid: false, error: 'Invalid Supabase URL format' };
+    }
+    try {
+        const tempClient = createClient(url, anonKey);
+        // Test REST API reachability by attempting a simple query
+        const { error } = await tempClient.from('focus_sessions').select('id').limit(1);
+        if (error) {
+            // Bad credentials
+            if (error.message?.includes('Invalid API key') || error.code === 'PGRST301') {
+                return { valid: false, error: 'Invalid Supabase credentials. Check your URL and Anon Key.' };
+            }
+            // Table doesn't exist but API is reachable — credentials work, schema not set up yet
+            if (error.message?.includes('relation') && error.message?.includes('does not exist')) {
+                return { valid: true };
+            }
+            // Any other error
+            return { valid: false, error: `Supabase responded with an error: ${error.message}` };
+        }
+        return { valid: true };
+    }
+    catch (e) {
+        const message = e instanceof Error ? e.message : 'Unknown error';
+        return { valid: false, error: `Could not connect to Supabase: ${message}` };
+    }
+}
+//# sourceMappingURL=validate.js.map

package/dist/supabase/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/supabase/validate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAW,EACX,OAAe;IAEf,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE9C,0DAA0D;QAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEhF,IAAI,KAAK,EAAE,CAAC;YACV,kBAAkB;YAClB,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC5E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAC;YAC/F,CAAC;YACD,qFAAqF;YACrF,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACrF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YACD,kBAAkB;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACvF,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,OAAO,EAAE,EAAE,CAAC;IAC9E,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Intent-Based Sync Operation Types
+ *
+ * These types enable preserving operation intent (e.g., "increment by 1")
+ * rather than just final state (e.g., "current_value: 50").
+ *
+ * Benefits:
+ * - Rapid increments are coalesced locally (50 +1s -> single +50) reducing sync traffic
+ * - Pending operations are protected during conflict resolution
+ *
+ * Note: True numeric merge across devices (e.g., +50 + +30 = +80) is not implemented.
+ * Operations are converted to final values before pushing to Supabase, so conflicts
+ * use last-write-wins. Full numeric merge would require an operation inbox system.
+ */
+/**
+ * Operation types that preserve intent:
+ * - 'increment': Add delta to numeric field (e.g., current_value += 1)
+ * - 'set': Set field to value (works for any type)
+ * - 'create': Create new entity
+ * - 'delete': Soft delete entity
+ */
+export type OperationType = 'increment' | 'set' | 'create' | 'delete';
+/**
+ * Intent-based sync operation item.
+ *
+ * Key design:
+ * - Uses `operationType` to specify the operation intent
+ * - Has optional `field` for field-level operations
+ * - `value` is the delta (for increment) or new value (for set/create)
+ *
+ * For create operations, value contains the full entity payload.
+ * For increment operations, value contains the delta to add.
+ * For set operations, value contains the new field value(s).
+ * For delete operations, value is not used.
+ */
+export interface SyncOperationItem {
+    id?: number;
+    table: string;
+    entityId: string;
+    operationType: OperationType;
+    field?: string;
+    value?: unknown;
+    timestamp: string;
+    retries: number;
+}
+export interface OfflineCredentials {
+    id: string;
+    userId: string;
+    email: string;
+    password: string;
+    profile: Record<string, unknown>;
+    cachedAt: string;
+}
+export interface OfflineSession {
+    id: string;
+    userId: string;
+    offlineToken: string;
+    createdAt: string;
+}
+/**
+ * Conflict history entry (stored in IndexedDB)
+ * Records field-level conflict resolutions for review and potential undo
+ */
+export interface ConflictHistoryEntry {
+    id?: number;
+    entityId: string;
+    entityType: string;
+    field: string;
+    localValue: unknown;
+    remoteValue: unknown;
+    resolvedValue: unknown;
+    winner: 'local' | 'remote' | 'merged';
+    strategy: string;
+    timestamp: string;
+}
+export type SyncStatus = 'idle' | 'syncing' | 'error' | 'offline';
+export type AuthMode = 'supabase' | 'offline' | 'none';
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEtE;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,aAAa,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CAGnB;AAMD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAElE,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC"}

package/dist/types.js

@@ -0,0 +1,16 @@
+/**
+ * Intent-Based Sync Operation Types
+ *
+ * These types enable preserving operation intent (e.g., "increment by 1")
+ * rather than just final state (e.g., "current_value: 50").
+ *
+ * Benefits:
+ * - Rapid increments are coalesced locally (50 +1s -> single +50) reducing sync traffic
+ * - Pending operations are protected during conflict resolution
+ *
+ * Note: True numeric merge across devices (e.g., +50 + +30 = +80) is not implemented.
+ * Operations are converted to final values before pushing to Supabase, so conflicts
+ * use last-write-wins. Full numeric merge would require an operation inbox system.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}