@ragable/sdk 0.6.8 → 0.6.10

package/dist/index.d.mts

@@ -76,11 +76,10 @@ type ColumnValue<D extends RagableDatabase, T extends RagableTableNames<D>, C ex
  * or the browser throws **Illegal invocation**. Use this for defaults and for `options.fetch`.
  */
 declare function bindFetch(custom?: typeof fetch): typeof fetch;
-/** Default hosted API (`…/api`) when `baseUrl` is omitted (browser + server clients). */
+/** Hosted Ragable HTTP API base (`…/api`) — used by all SDK clients (not configurable). */
 declare const DEFAULT_RAGABLE_API_BASE = "https://ragable-341305259977.asia-southeast1.run.app/api";
 interface RagableClientOptions {
     apiKey: string;
-    baseUrl?: string;
     fetch?: typeof fetch;
     headers?: HeadersInit;
 }
@@ -581,7 +580,6 @@ interface AuthOptions {
     debug?: boolean;
 }
 interface RagableAuthConfig {
-    baseUrl: string;
     authGroupId: string;
     fetch?: typeof fetch;
     headers?: HeadersInit;
@@ -766,17 +764,27 @@ declare class Transport {
 }
 declare function parseTransportResponse<T>(response: Response): Promise<T>;
 
-declare function normalizeBrowserApiBase(baseUrl?: string): string;
+/** Canonical browser/server API base (`…/api`, no trailing slash). */
+declare function normalizeBrowserApiBase(): string;
 type BrowserDataAuthMode = "user" | "publicAnon" | "admin";
+/**
+ * Resolves how database requests are authorized. If `dataAuth` is omitted and a
+ * static browser SQL key is configured (`dataStaticKey` / `getDataStaticKey`),
+ * defaults to **`publicAnon`** so read-only public apps work without sign-in.
+ * Use explicit **`dataAuth: "user"`** when you need JWT sessions; use **`"admin"`**
+ * when the static key is a data-admin key (writes) — do not rely on inference for admin keys.
+ */
+declare function effectiveDataAuth(options: RagableBrowserClientOptions): BrowserDataAuthMode;
 interface RagableBrowserClientOptions {
     organizationId: string;
     authGroupId?: string;
     databaseInstanceId?: string;
+    /** When omitted, inferred from static keys — see {@link effectiveDataAuth}. */
     dataAuth?: BrowserDataAuthMode;
+    /** Public anon or data-admin key from the dashboard (Browser SQL API keys). */
     dataStaticKey?: string;
     getDataStaticKey?: () => string | null | Promise<string | null>;
     getAccessToken?: () => string | null | Promise<string | null>;
-    baseUrl?: string;
     fetch?: typeof fetch;
     headers?: HeadersInit;
     auth?: AuthOptions;
@@ -1003,9 +1011,8 @@ declare class Ragable {
     };
     constructor(options: RagableClientOptions);
 }
-declare function createClient<Database extends RagableDatabase = DefaultRagableDatabase, AuthUser extends Record<string, unknown> = Record<string, unknown>>(url: string, options: Omit<RagableBrowserClientOptions, "baseUrl">): RagableBrowser<Database, AuthUser>;
 declare function createClient(options: RagableClientOptions): Ragable;
 declare function createClient<Database extends RagableDatabase = DefaultRagableDatabase, AuthUser extends Record<string, unknown> = Record<string, unknown>>(options: RagableBrowserClientOptions): RagableBrowser<Database, AuthUser>;
 declare function createRagableServerClient(options: RagableClientOptions): Ragable;
 
-export { type AgentChatMessage, type AgentChatParams, type AgentChatResult, type AgentPublicChatParams, type AgentStreamEvent, type AgentSummary, AgentsClient, AuthBroadcastChannel, type AuthBroadcastMessage, type AuthChangeEvent, type AuthOptions, type AuthSession, type BrowserAuthSession, type BrowserAuthTokens, type BrowserDataAuthMode, type BrowserSqlExecParams, type BrowserSqlExecResult, type BrowserSqlQueryParams, type BrowserSqlQueryResult, type ColumnName, type ColumnValue, CookieStorageAdapter, DEFAULT_RAGABLE_API_BASE, type DefaultRagableDatabase, type FormatContextOptions, type HttpMethod, type Json, LocalStorageAdapter, MemoryStorageAdapter, type PostgRESTFetch, type PostgRESTFetchParams, PostgrestDeleteReturningBuilder, PostgrestDeleteRootBuilder, PostgrestInsertReturningBuilder, PostgrestInsertRootBuilder, PostgrestInsertSdkErrorReturning, PostgrestInsertSdkErrorRoot, type PostgrestResult, PostgrestSelectBuilder, PostgrestTableApi, PostgrestUpdateReturningBuilder, PostgrestUpdateRootBuilder, type PostgrestUpsertOptions, PostgrestUpsertReturningBuilder, PostgrestUpsertRootBuilder, type RagClientForPipeline, type RagPipeline, type RagPipelineOptions, Ragable, RagableAbortError, RagableAuth, type RagableAuthConfig, RagableBrowser, RagableBrowserAgentsClient, RagableBrowserAuthClient, type RagableBrowserClientOptions, RagableBrowserDatabaseClient, type RagableClientOptions, type RagableDatabase, RagableError, RagableNetworkError, RagableRequestClient, RagableSdkError, type RagableTableDefinition, type RagableTableNames, RagableTimeoutError, type RequestOptions, type RetrieveParams, type RetryOptions, type RunQuery, type SessionStorage, SessionStorageAdapter, type ShiftAddDocumentParams, ShiftClient, type ShiftCreateIndexParams, type ShiftEntry, type ShiftIndex, type ShiftIngestResponse, type ShiftListEntriesParams, type ShiftListEntriesResponse, type ShiftSearchParams, type ShiftSearchResult, type ShiftUpdateIndexParams, type ShiftUploadFileParams, type ShiftUploadableFile, type SseJsonEvent, type SupabaseCompatSession, type TableInsertRow, type TableRow, type TableUpdatePatch, type Tables, type TablesInsert, type TablesUpdate, Transport, type TransportOptions, type TransportRequest, asPostgrestResponse, bindFetch, createBrowserClient, createClient, createRagPipeline, createRagableBrowserClient, createRagableServerClient, detectStorage, extractErrorMessage, formatPostgrestError, formatRetrievalContext, formatSdkError, generateIdempotencyKey, normalizeBrowserApiBase, parseSseDataLine, parseTransportResponse, readSseStream };
+export { type AgentChatMessage, type AgentChatParams, type AgentChatResult, type AgentPublicChatParams, type AgentStreamEvent, type AgentSummary, AgentsClient, AuthBroadcastChannel, type AuthBroadcastMessage, type AuthChangeEvent, type AuthOptions, type AuthSession, type BrowserAuthSession, type BrowserAuthTokens, type BrowserDataAuthMode, type BrowserSqlExecParams, type BrowserSqlExecResult, type BrowserSqlQueryParams, type BrowserSqlQueryResult, type ColumnName, type ColumnValue, CookieStorageAdapter, DEFAULT_RAGABLE_API_BASE, type DefaultRagableDatabase, type FormatContextOptions, type HttpMethod, type Json, LocalStorageAdapter, MemoryStorageAdapter, type PostgRESTFetch, type PostgRESTFetchParams, PostgrestDeleteReturningBuilder, PostgrestDeleteRootBuilder, PostgrestInsertReturningBuilder, PostgrestInsertRootBuilder, PostgrestInsertSdkErrorReturning, PostgrestInsertSdkErrorRoot, type PostgrestResult, PostgrestSelectBuilder, PostgrestTableApi, PostgrestUpdateReturningBuilder, PostgrestUpdateRootBuilder, type PostgrestUpsertOptions, PostgrestUpsertReturningBuilder, PostgrestUpsertRootBuilder, type RagClientForPipeline, type RagPipeline, type RagPipelineOptions, Ragable, RagableAbortError, RagableAuth, type RagableAuthConfig, RagableBrowser, RagableBrowserAgentsClient, RagableBrowserAuthClient, type RagableBrowserClientOptions, RagableBrowserDatabaseClient, type RagableClientOptions, type RagableDatabase, RagableError, RagableNetworkError, RagableRequestClient, RagableSdkError, type RagableTableDefinition, type RagableTableNames, RagableTimeoutError, type RequestOptions, type RetrieveParams, type RetryOptions, type RunQuery, type SessionStorage, SessionStorageAdapter, type ShiftAddDocumentParams, ShiftClient, type ShiftCreateIndexParams, type ShiftEntry, type ShiftIndex, type ShiftIngestResponse, type ShiftListEntriesParams, type ShiftListEntriesResponse, type ShiftSearchParams, type ShiftSearchResult, type ShiftUpdateIndexParams, type ShiftUploadFileParams, type ShiftUploadableFile, type SseJsonEvent, type SupabaseCompatSession, type TableInsertRow, type TableRow, type TableUpdatePatch, type Tables, type TablesInsert, type TablesUpdate, Transport, type TransportOptions, type TransportRequest, asPostgrestResponse, bindFetch, createBrowserClient, createClient, createRagPipeline, createRagableBrowserClient, createRagableServerClient, detectStorage, effectiveDataAuth, extractErrorMessage, formatPostgrestError, formatRetrievalContext, formatSdkError, generateIdempotencyKey, normalizeBrowserApiBase, parseSseDataLine, parseTransportResponse, readSseStream };

package/dist/index.d.ts

@@ -76,11 +76,10 @@ type ColumnValue<D extends RagableDatabase, T extends RagableTableNames<D>, C ex
  * or the browser throws **Illegal invocation**. Use this for defaults and for `options.fetch`.
  */
 declare function bindFetch(custom?: typeof fetch): typeof fetch;
-/** Default hosted API (`…/api`) when `baseUrl` is omitted (browser + server clients). */
+/** Hosted Ragable HTTP API base (`…/api`) — used by all SDK clients (not configurable). */
 declare const DEFAULT_RAGABLE_API_BASE = "https://ragable-341305259977.asia-southeast1.run.app/api";
 interface RagableClientOptions {
     apiKey: string;
-    baseUrl?: string;
     fetch?: typeof fetch;
     headers?: HeadersInit;
 }
@@ -581,7 +580,6 @@ interface AuthOptions {
     debug?: boolean;
 }
 interface RagableAuthConfig {
-    baseUrl: string;
     authGroupId: string;
     fetch?: typeof fetch;
     headers?: HeadersInit;
@@ -766,17 +764,27 @@ declare class Transport {
 }
 declare function parseTransportResponse<T>(response: Response): Promise<T>;
 
-declare function normalizeBrowserApiBase(baseUrl?: string): string;
+/** Canonical browser/server API base (`…/api`, no trailing slash). */
+declare function normalizeBrowserApiBase(): string;
 type BrowserDataAuthMode = "user" | "publicAnon" | "admin";
+/**
+ * Resolves how database requests are authorized. If `dataAuth` is omitted and a
+ * static browser SQL key is configured (`dataStaticKey` / `getDataStaticKey`),
+ * defaults to **`publicAnon`** so read-only public apps work without sign-in.
+ * Use explicit **`dataAuth: "user"`** when you need JWT sessions; use **`"admin"`**
+ * when the static key is a data-admin key (writes) — do not rely on inference for admin keys.
+ */
+declare function effectiveDataAuth(options: RagableBrowserClientOptions): BrowserDataAuthMode;
 interface RagableBrowserClientOptions {
     organizationId: string;
     authGroupId?: string;
     databaseInstanceId?: string;
+    /** When omitted, inferred from static keys — see {@link effectiveDataAuth}. */
     dataAuth?: BrowserDataAuthMode;
+    /** Public anon or data-admin key from the dashboard (Browser SQL API keys). */
     dataStaticKey?: string;
     getDataStaticKey?: () => string | null | Promise<string | null>;
     getAccessToken?: () => string | null | Promise<string | null>;
-    baseUrl?: string;
     fetch?: typeof fetch;
     headers?: HeadersInit;
     auth?: AuthOptions;
@@ -1003,9 +1011,8 @@ declare class Ragable {
     };
     constructor(options: RagableClientOptions);
 }
-declare function createClient<Database extends RagableDatabase = DefaultRagableDatabase, AuthUser extends Record<string, unknown> = Record<string, unknown>>(url: string, options: Omit<RagableBrowserClientOptions, "baseUrl">): RagableBrowser<Database, AuthUser>;
 declare function createClient(options: RagableClientOptions): Ragable;
 declare function createClient<Database extends RagableDatabase = DefaultRagableDatabase, AuthUser extends Record<string, unknown> = Record<string, unknown>>(options: RagableBrowserClientOptions): RagableBrowser<Database, AuthUser>;
 declare function createRagableServerClient(options: RagableClientOptions): Ragable;
 
-export { type AgentChatMessage, type AgentChatParams, type AgentChatResult, type AgentPublicChatParams, type AgentStreamEvent, type AgentSummary, AgentsClient, AuthBroadcastChannel, type AuthBroadcastMessage, type AuthChangeEvent, type AuthOptions, type AuthSession, type BrowserAuthSession, type BrowserAuthTokens, type BrowserDataAuthMode, type BrowserSqlExecParams, type BrowserSqlExecResult, type BrowserSqlQueryParams, type BrowserSqlQueryResult, type ColumnName, type ColumnValue, CookieStorageAdapter, DEFAULT_RAGABLE_API_BASE, type DefaultRagableDatabase, type FormatContextOptions, type HttpMethod, type Json, LocalStorageAdapter, MemoryStorageAdapter, type PostgRESTFetch, type PostgRESTFetchParams, PostgrestDeleteReturningBuilder, PostgrestDeleteRootBuilder, PostgrestInsertReturningBuilder, PostgrestInsertRootBuilder, PostgrestInsertSdkErrorReturning, PostgrestInsertSdkErrorRoot, type PostgrestResult, PostgrestSelectBuilder, PostgrestTableApi, PostgrestUpdateReturningBuilder, PostgrestUpdateRootBuilder, type PostgrestUpsertOptions, PostgrestUpsertReturningBuilder, PostgrestUpsertRootBuilder, type RagClientForPipeline, type RagPipeline, type RagPipelineOptions, Ragable, RagableAbortError, RagableAuth, type RagableAuthConfig, RagableBrowser, RagableBrowserAgentsClient, RagableBrowserAuthClient, type RagableBrowserClientOptions, RagableBrowserDatabaseClient, type RagableClientOptions, type RagableDatabase, RagableError, RagableNetworkError, RagableRequestClient, RagableSdkError, type RagableTableDefinition, type RagableTableNames, RagableTimeoutError, type RequestOptions, type RetrieveParams, type RetryOptions, type RunQuery, type SessionStorage, SessionStorageAdapter, type ShiftAddDocumentParams, ShiftClient, type ShiftCreateIndexParams, type ShiftEntry, type ShiftIndex, type ShiftIngestResponse, type ShiftListEntriesParams, type ShiftListEntriesResponse, type ShiftSearchParams, type ShiftSearchResult, type ShiftUpdateIndexParams, type ShiftUploadFileParams, type ShiftUploadableFile, type SseJsonEvent, type SupabaseCompatSession, type TableInsertRow, type TableRow, type TableUpdatePatch, type Tables, type TablesInsert, type TablesUpdate, Transport, type TransportOptions, type TransportRequest, asPostgrestResponse, bindFetch, createBrowserClient, createClient, createRagPipeline, createRagableBrowserClient, createRagableServerClient, detectStorage, extractErrorMessage, formatPostgrestError, formatRetrievalContext, formatSdkError, generateIdempotencyKey, normalizeBrowserApiBase, parseSseDataLine, parseTransportResponse, readSseStream };
+export { type AgentChatMessage, type AgentChatParams, type AgentChatResult, type AgentPublicChatParams, type AgentStreamEvent, type AgentSummary, AgentsClient, AuthBroadcastChannel, type AuthBroadcastMessage, type AuthChangeEvent, type AuthOptions, type AuthSession, type BrowserAuthSession, type BrowserAuthTokens, type BrowserDataAuthMode, type BrowserSqlExecParams, type BrowserSqlExecResult, type BrowserSqlQueryParams, type BrowserSqlQueryResult, type ColumnName, type ColumnValue, CookieStorageAdapter, DEFAULT_RAGABLE_API_BASE, type DefaultRagableDatabase, type FormatContextOptions, type HttpMethod, type Json, LocalStorageAdapter, MemoryStorageAdapter, type PostgRESTFetch, type PostgRESTFetchParams, PostgrestDeleteReturningBuilder, PostgrestDeleteRootBuilder, PostgrestInsertReturningBuilder, PostgrestInsertRootBuilder, PostgrestInsertSdkErrorReturning, PostgrestInsertSdkErrorRoot, type PostgrestResult, PostgrestSelectBuilder, PostgrestTableApi, PostgrestUpdateReturningBuilder, PostgrestUpdateRootBuilder, type PostgrestUpsertOptions, PostgrestUpsertReturningBuilder, PostgrestUpsertRootBuilder, type RagClientForPipeline, type RagPipeline, type RagPipelineOptions, Ragable, RagableAbortError, RagableAuth, type RagableAuthConfig, RagableBrowser, RagableBrowserAgentsClient, RagableBrowserAuthClient, type RagableBrowserClientOptions, RagableBrowserDatabaseClient, type RagableClientOptions, type RagableDatabase, RagableError, RagableNetworkError, RagableRequestClient, RagableSdkError, type RagableTableDefinition, type RagableTableNames, RagableTimeoutError, type RequestOptions, type RetrieveParams, type RetryOptions, type RunQuery, type SessionStorage, SessionStorageAdapter, type ShiftAddDocumentParams, ShiftClient, type ShiftCreateIndexParams, type ShiftEntry, type ShiftIndex, type ShiftIngestResponse, type ShiftListEntriesParams, type ShiftListEntriesResponse, type ShiftSearchParams, type ShiftSearchResult, type ShiftUpdateIndexParams, type ShiftUploadFileParams, type ShiftUploadableFile, type SseJsonEvent, type SupabaseCompatSession, type TableInsertRow, type TableRow, type TableUpdatePatch, type Tables, type TablesInsert, type TablesUpdate, Transport, type TransportOptions, type TransportRequest, asPostgrestResponse, bindFetch, createBrowserClient, createClient, createRagPipeline, createRagableBrowserClient, createRagableServerClient, detectStorage, effectiveDataAuth, extractErrorMessage, formatPostgrestError, formatRetrievalContext, formatSdkError, generateIdempotencyKey, normalizeBrowserApiBase, parseSseDataLine, parseTransportResponse, readSseStream };

package/dist/index.js

@@ -63,6 +63,7 @@ __export(index_exports, {
   createRagableBrowserClient: () => createRagableBrowserClient,
   createRagableServerClient: () => createRagableServerClient,
   detectStorage: () => detectStorage,
+  effectiveDataAuth: () => effectiveDataAuth,
   extractErrorMessage: () => extractErrorMessage,
   formatPostgrestError: () => formatPostgrestError,
   formatRetrievalContext: () => formatRetrievalContext,
@@ -211,7 +212,7 @@ var RagableRequestClient = class {
     __publicField(this, "fetchImpl");
     __publicField(this, "defaultHeaders");
     this.apiKey = options.apiKey;
-    this.baseUrl = options.baseUrl ?? DEFAULT_RAGABLE_API_BASE;
+    this.baseUrl = DEFAULT_RAGABLE_API_BASE.replace(/\/+$/, "");
     this.fetchImpl = bindFetch(options.fetch);
     this.defaultHeaders = options.headers;
   }
@@ -1762,7 +1763,7 @@ var RagableAuth = class {
     __publicField(this, "broadcast", null);
     __publicField(this, "visibilityHandler", null);
     __publicField(this, "initialized", false);
-    this.baseUrl = config.baseUrl;
+    this.baseUrl = DEFAULT_RAGABLE_API_BASE.replace(/\/+$/, "");
     this.authGroupId = config.authGroupId;
     this.fetchImpl = bindFetch(config.fetch);
     this.defaultHeaders = config.headers;
@@ -2115,9 +2116,14 @@ function decodeJwtExpiry(jwt) {
 }
 
 // src/browser.ts
-function normalizeBrowserApiBase(baseUrl) {
-  const trimmed = (baseUrl ?? DEFAULT_RAGABLE_API_BASE).trim().replace(/\/+$/, "");
-  return trimmed.endsWith("/api") ? trimmed : `${trimmed}/api`;
+function normalizeBrowserApiBase() {
+  return DEFAULT_RAGABLE_API_BASE.replace(/\/+$/, "");
+}
+function effectiveDataAuth(options) {
+  if (options.dataAuth) return options.dataAuth;
+  const hasStatic = Boolean(options.dataStaticKey?.trim()) || typeof options.getDataStaticKey === "function";
+  if (hasStatic) return "publicAnon";
+  return "user";
 }
 function requireAuthGroupId(options) {
   const id = options.authGroupId?.trim();
@@ -2147,7 +2153,7 @@ async function requireAccessToken(options, ragableAuth) {
   );
 }
 async function resolveDatabaseAuthBearer(options, ragableAuth) {
-  const mode = options.dataAuth ?? "user";
+  const mode = effectiveDataAuth(options);
   if (mode === "user") {
     return requireAccessToken(options, ragableAuth);
   }
@@ -2283,9 +2289,9 @@ var RagableBrowserDatabaseClient = class {
         }
         const gid = requireAuthGroupId(opts);
         const token = await resolveDatabaseAuthBearer(opts, ragableAuth);
-        const baseUrl = normalizeBrowserApiBase(opts.baseUrl);
+        const apiBase = normalizeBrowserApiBase();
         const qs = params.searchParams.toString();
-        const url = `${baseUrl}/auth-groups/${gid}/data/rest/${params.table}${qs ? `?${qs}` : ""}`;
+        const url = `${apiBase}/auth-groups/${gid}/data/rest/${params.table}${qs ? `?${qs}` : ""}`;
         const headers = new Headers(opts.headers);
         headers.set("Authorization", `Bearer ${token}`);
         headers.set("X-Database-Instance-Id", params.databaseInstanceId);
@@ -2331,7 +2337,7 @@ var RagableBrowserDatabaseClient = class {
         const headers = this.baseHeaders();
         headers.set("Authorization", `Bearer ${token}`);
         headers.set("Content-Type", "application/json");
-        const readOnly = (this.options.dataAuth ?? "user") === "publicAnon" ? true : params.readOnly !== false;
+        const readOnly = effectiveDataAuth(this.options) === "publicAnon" ? true : params.readOnly !== false;
         const response = await this.fetchImpl(
           this.toUrl(`/auth-groups/${gid}/data/query`),
           {
@@ -2362,7 +2368,7 @@ var RagableBrowserDatabaseClient = class {
     this._transport = transport;
   }
   toUrl(path) {
-    return `${normalizeBrowserApiBase(this.options.baseUrl)}${path.startsWith("/") ? path : `/${path}`}`;
+    return `${normalizeBrowserApiBase()}${path.startsWith("/") ? path : `/${path}`}`;
   }
   baseHeaders() {
     return new Headers(this.options.headers);
@@ -2375,7 +2381,7 @@ var RagableBrowserAgentsClient = class {
     this.fetchImpl = bindFetch(options.fetch);
   }
   toUrl(path) {
-    return `${normalizeBrowserApiBase(this.options.baseUrl)}${path.startsWith("/") ? path : `/${path}`}`;
+    return `${normalizeBrowserApiBase()}${path.startsWith("/") ? path : `/${path}`}`;
   }
   async *chatStream(agentId, params) {
     const orgId = this.options.organizationId;
@@ -2425,19 +2431,19 @@ var RagableBrowser = class {
     });
     if (options.authGroupId) {
       this._ragableAuth = new RagableAuth({
-        baseUrl: normalizeBrowserApiBase(options.baseUrl),
         authGroupId: options.authGroupId,
         fetch: options.fetch,
         headers: options.headers,
         auth: options.auth
       });
       this.transport.setRefreshHandler(async () => {
+        if (effectiveDataAuth(options) !== "user") return null;
         const session = await this._ragableAuth.singleFlightRefresh(
           this._ragableAuth.getCurrentSession()?.refresh_token ?? ""
         );
         return session?.access_token ?? null;
       });
-      if (!options.getAccessToken) {
+      if (!options.getAccessToken && effectiveDataAuth(options) === "user") {
         this._ragableAuth.initialize().catch(() => {
         });
       }
@@ -2520,31 +2526,18 @@ var Ragable = class {
 function isServerClientOptions(o) {
   return typeof o === "object" && o !== null && "apiKey" in o && typeof o.apiKey === "string" && o.apiKey.length > 0;
 }
-function createClient(urlOrOptions, browserOptions) {
-  if (typeof urlOrOptions === "string") {
-    if (!browserOptions) {
-      throw new Error(
-        "createClient(url, options) requires options with at least organizationId"
-      );
-    }
-    const raw = urlOrOptions.trim().replace(/\/+$/, "");
-    const baseUrl = raw.endsWith("/api") ? raw : `${raw}/api`;
-    return createBrowserClient({
-      ...browserOptions,
-      baseUrl: normalizeBrowserApiBase(baseUrl)
-    });
-  }
-  if (isServerClientOptions(urlOrOptions)) {
-    if (typeof urlOrOptions === "object" && urlOrOptions !== null && "organizationId" in urlOrOptions && typeof urlOrOptions.organizationId === "string") {
+function createClient(options) {
+  if (isServerClientOptions(options)) {
+    if (typeof options === "object" && options !== null && "organizationId" in options && typeof options.organizationId === "string") {
       console.warn(
-        "[@ragable/sdk] createClient: `apiKey` is set, so the server client is returned. It has no `database` or `auth` \u2014 only `agents` and `shift`. For `database.from()` / `auth.*`, use the browser client without `apiKey` (e.g. createClient(ragableUrl, { organizationId, authGroupId, databaseInstanceId, ... }))."
+        "[@ragable/sdk] createClient: `apiKey` is set, so the server client is returned. It has no `database` or `auth` \u2014 only `agents` and `shift`. For `database.from()` / `auth.*`, use the browser client without `apiKey` (e.g. createClient({ organizationId, authGroupId, databaseInstanceId, ... }))."
       );
     }
-    return new Ragable(urlOrOptions);
+    return new Ragable(options);
   }
-  if (typeof urlOrOptions === "object" && urlOrOptions !== null && "organizationId" in urlOrOptions && typeof urlOrOptions.organizationId === "string") {
+  if (typeof options === "object" && options !== null && "organizationId" in options && typeof options.organizationId === "string") {
     return createBrowserClient(
-      urlOrOptions
+      options
     );
   }
   throw new Error(
@@ -2597,6 +2590,7 @@ function createRagableServerClient(options) {
   createRagableBrowserClient,
   createRagableServerClient,
   detectStorage,
+  effectiveDataAuth,
   extractErrorMessage,
   formatPostgrestError,
   formatRetrievalContext,