@resultdev/sdk 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @resultdev/sdk
 
+## 0.3.1
+
+- A missing `baseUrl` now throws `MISSING_BASE_URL` at client construction
+  instead of silently falling back to a localhost dev URL. The fallback made
+  deployed sites whose `NEXT_PUBLIC_BACKEND_URL` was undefined in the
+  browser bundle (for example when the env var is read through an imported
+  `process` module, which defeats build-time inlining) call `localhost` from
+  production pages, which surfaced as Chrome's "access other apps and
+  services on this device" permission prompt. The error's fix hint names the
+  env var and the inlining rule.
+
 ## 0.3.0
 
 Reliability release: every fix here comes from live verification against a

package/dist/{client-CJv_awPt.d.cts → client--Xjaaw1l.d.ts}

@@ -1,4 +1,4 @@
-import { e as AuthSession, U as UserSchema, a as ResultConfig, G as AuthRefreshResponse, C as ChatCompletionRequest, B as ToolCall, H as Annotation, I as ImageGenerationRequest, j as EmbeddingsRequest, J as EmbeddingObject, h as CreateUserRequest, K as CreateUserResponse, o as ResultError, g as CreateSessionRequest, L as CreateSessionResponse, l as OAuthProvidersSchema, M as RefreshSessionResponse, N as GetProfileResponse, Q as SendVerificationEmailRequest, V as VerifyEmailRequest, W as VerifyEmailResponse, X as SendResetPasswordEmailRequest, Y as ExchangeResetPasswordTokenRequest, Z as ExchangeResetPasswordTokenResponse, _ as ResetPasswordResponse, $ as GetPublicAuthConfigResponse, S as SendRawEmailRequest, q as SendEmailResponse, v as SubscribeResponse, r as SocketMessage, P as PresenceMember, u as StorageFileSchema, a0 as ListObjectsResponseSchema, i as DeleteObjectsResponse, A as Analytics, w as Support } from './types-DSVtGaIA.cjs';
+import { e as AuthSession, U as UserSchema, a as ResultConfig, G as AuthRefreshResponse, C as ChatCompletionRequest, B as ToolCall, H as Annotation, I as ImageGenerationRequest, j as EmbeddingsRequest, J as EmbeddingObject, h as CreateUserRequest, K as CreateUserResponse, o as ResultError, g as CreateSessionRequest, L as CreateSessionResponse, l as OAuthProvidersSchema, M as RefreshSessionResponse, N as GetProfileResponse, Q as SendVerificationEmailRequest, V as VerifyEmailRequest, W as VerifyEmailResponse, X as SendResetPasswordEmailRequest, Y as ExchangeResetPasswordTokenRequest, Z as ExchangeResetPasswordTokenResponse, _ as ResetPasswordResponse, $ as GetPublicAuthConfigResponse, S as SendRawEmailRequest, q as SendEmailResponse, v as SubscribeResponse, r as SocketMessage, P as PresenceMember, u as StorageFileSchema, a0 as ListObjectsResponseSchema, i as DeleteObjectsResponse, A as Analytics, w as Support } from './types-BmU3deRO.js';
 import * as _supabase_postgrest_js from '@supabase/postgrest-js';
 import { PostgrestClient } from '@supabase/postgrest-js';
 
@@ -996,7 +996,7 @@ type AccessTokenChangeEvent = typeof AuthChangeEvent.SIGNED_IN | typeof AuthChan
  * import { ResultClient } from '@resultdev/sdk';
  *
  * const client = new ResultClient({
- *   baseUrl: 'http://localhost:7130'
+ *   baseUrl: process.env.NEXT_PUBLIC_BACKEND_URL!
  * });
  *
  * // Authentication
@@ -1027,7 +1027,7 @@ type AccessTokenChangeEvent = typeof AuthChangeEvent.SIGNED_IN | typeof AuthChan
  *
  * // Enable debug logging
  * const debugClient = new ResultClient({
- *   baseUrl: 'http://localhost:7130',
+ *   baseUrl: process.env.NEXT_PUBLIC_BACKEND_URL!,
  *   debug: true
  * });
  * ```

package/dist/{client-DrsZ1qIm.d.ts → client-BrOD2EO5.d.cts}

@@ -1,4 +1,4 @@
-import { e as AuthSession, U as UserSchema, a as ResultConfig, G as AuthRefreshResponse, C as ChatCompletionRequest, B as ToolCall, H as Annotation, I as ImageGenerationRequest, j as EmbeddingsRequest, J as EmbeddingObject, h as CreateUserRequest, K as CreateUserResponse, o as ResultError, g as CreateSessionRequest, L as CreateSessionResponse, l as OAuthProvidersSchema, M as RefreshSessionResponse, N as GetProfileResponse, Q as SendVerificationEmailRequest, V as VerifyEmailRequest, W as VerifyEmailResponse, X as SendResetPasswordEmailRequest, Y as ExchangeResetPasswordTokenRequest, Z as ExchangeResetPasswordTokenResponse, _ as ResetPasswordResponse, $ as GetPublicAuthConfigResponse, S as SendRawEmailRequest, q as SendEmailResponse, v as SubscribeResponse, r as SocketMessage, P as PresenceMember, u as StorageFileSchema, a0 as ListObjectsResponseSchema, i as DeleteObjectsResponse, A as Analytics, w as Support } from './types-DSVtGaIA.js';
+import { e as AuthSession, U as UserSchema, a as ResultConfig, G as AuthRefreshResponse, C as ChatCompletionRequest, B as ToolCall, H as Annotation, I as ImageGenerationRequest, j as EmbeddingsRequest, J as EmbeddingObject, h as CreateUserRequest, K as CreateUserResponse, o as ResultError, g as CreateSessionRequest, L as CreateSessionResponse, l as OAuthProvidersSchema, M as RefreshSessionResponse, N as GetProfileResponse, Q as SendVerificationEmailRequest, V as VerifyEmailRequest, W as VerifyEmailResponse, X as SendResetPasswordEmailRequest, Y as ExchangeResetPasswordTokenRequest, Z as ExchangeResetPasswordTokenResponse, _ as ResetPasswordResponse, $ as GetPublicAuthConfigResponse, S as SendRawEmailRequest, q as SendEmailResponse, v as SubscribeResponse, r as SocketMessage, P as PresenceMember, u as StorageFileSchema, a0 as ListObjectsResponseSchema, i as DeleteObjectsResponse, A as Analytics, w as Support } from './types-BmU3deRO.cjs';
 import * as _supabase_postgrest_js from '@supabase/postgrest-js';
 import { PostgrestClient } from '@supabase/postgrest-js';
 
@@ -996,7 +996,7 @@ type AccessTokenChangeEvent = typeof AuthChangeEvent.SIGNED_IN | typeof AuthChan
  * import { ResultClient } from '@resultdev/sdk';
  *
  * const client = new ResultClient({
- *   baseUrl: 'http://localhost:7130'
+ *   baseUrl: process.env.NEXT_PUBLIC_BACKEND_URL!
  * });
  *
  * // Authentication
@@ -1027,7 +1027,7 @@ type AccessTokenChangeEvent = typeof AuthChangeEvent.SIGNED_IN | typeof AuthChan
  *
  * // Enable debug logging
  * const debugClient = new ResultClient({
- *   baseUrl: 'http://localhost:7130',
+ *   baseUrl: process.env.NEXT_PUBLIC_BACKEND_URL!,
  *   debug: true
  * });
  * ```

package/dist/index.cjs

@@ -503,7 +503,15 @@ var HttpClient = class {
    */
   constructor(config, tokenManager, logger) {
     this.config = config;
-    this.baseUrl = config.baseUrl || "http://localhost:7130";
+    if (!config.baseUrl) {
+      throw new ResultError(
+        "createClient needs a baseUrl, but it was undefined at runtime.",
+        0,
+        "MISSING_BASE_URL",
+        "Pass the NEXT_PUBLIC_BACKEND_URL value from .env.local. In browser code, write process.env.NEXT_PUBLIC_BACKEND_URL as a literal expression (never through an imported process module) so the bundler inlines it, and set it as a deployments build variable before deploying."
+      );
+    }
+    this.baseUrl = config.baseUrl;
     this.fetch = config.fetch || (globalThis.fetch ? globalThis.fetch.bind(globalThis) : void 0);
     this.anonKey = config.anonKey;
     this.defaultHeaders = {

package/dist/index.d.cts

@@ -1,7 +1,7 @@
-import { R as ResultClient } from './client-CJv_awPt.cjs';
-export { A as AI, a as AccessTokenChangeEvent, b as Auth, c as AuthChangeEvent, d as AuthStateChangeCallback, C as ChatCompletion, e as ChatCompletionChoice, f as ChatCompletionChunk, g as ChatCompletionUsage, h as ConnectionState, D as Database, E as Emails, i as EmbeddingsResult, j as EventCallback, F as FunctionInvokeOptions, k as Functions, H as HttpClient, I as ImageGenerationResult, L as Logger, l as Realtime, S as Storage, m as StorageBucket, n as StorageResponse } from './client-CJv_awPt.cjs';
-import { R as ResultAdminConfig, a as ResultConfig } from './types-DSVtGaIA.cjs';
-export { A as Analytics, b as AnalyticsOptions, c as ApiError, d as AuthErrorResponse, e as AuthSession, C as ChatCompletionRequest, f as ChatMessageSchema, g as CreateSessionRequest, h as CreateUserRequest, D as DeleteObjectResult, i as DeleteObjectsResponse, E as ERROR_CODES, j as EmbeddingsRequest, k as ErrorCode, I as ImageGenerationRequest, O as OAUTH_PROVIDERS, l as OAuthProvidersSchema, P as PresenceMember, m as ProfileSchema, n as RealtimeErrorPayload, o as ResultError, p as ResultErrorCode, S as SendEmailOptions, q as SendEmailResponse, r as SocketMessage, s as StartThreadOptions, t as StartedThread, u as StorageFileSchema, v as SubscribeResponse, w as Support, x as SupportMessage, y as SupportOptions, z as SupportThread, T as Tool, B as ToolCall, F as ToolChoice, U as UserSchema } from './types-DSVtGaIA.cjs';
+import { R as ResultClient } from './client-BrOD2EO5.cjs';
+export { A as AI, a as AccessTokenChangeEvent, b as Auth, c as AuthChangeEvent, d as AuthStateChangeCallback, C as ChatCompletion, e as ChatCompletionChoice, f as ChatCompletionChunk, g as ChatCompletionUsage, h as ConnectionState, D as Database, E as Emails, i as EmbeddingsResult, j as EventCallback, F as FunctionInvokeOptions, k as Functions, H as HttpClient, I as ImageGenerationResult, L as Logger, l as Realtime, S as Storage, m as StorageBucket, n as StorageResponse } from './client-BrOD2EO5.cjs';
+import { R as ResultAdminConfig, a as ResultConfig } from './types-BmU3deRO.cjs';
+export { A as Analytics, b as AnalyticsOptions, c as ApiError, d as AuthErrorResponse, e as AuthSession, C as ChatCompletionRequest, f as ChatMessageSchema, g as CreateSessionRequest, h as CreateUserRequest, D as DeleteObjectResult, i as DeleteObjectsResponse, E as ERROR_CODES, j as EmbeddingsRequest, k as ErrorCode, I as ImageGenerationRequest, O as OAUTH_PROVIDERS, l as OAuthProvidersSchema, P as PresenceMember, m as ProfileSchema, n as RealtimeErrorPayload, o as ResultError, p as ResultErrorCode, S as SendEmailOptions, q as SendEmailResponse, r as SocketMessage, s as StartThreadOptions, t as StartedThread, u as StorageFileSchema, v as SubscribeResponse, w as Support, x as SupportMessage, y as SupportOptions, z as SupportThread, T as Tool, B as ToolCall, F as ToolChoice, U as UserSchema } from './types-BmU3deRO.cjs';
 import '@supabase/postgrest-js';
 
 /**

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { R as ResultClient } from './client-DrsZ1qIm.js';
-export { A as AI, a as AccessTokenChangeEvent, b as Auth, c as AuthChangeEvent, d as AuthStateChangeCallback, C as ChatCompletion, e as ChatCompletionChoice, f as ChatCompletionChunk, g as ChatCompletionUsage, h as ConnectionState, D as Database, E as Emails, i as EmbeddingsResult, j as EventCallback, F as FunctionInvokeOptions, k as Functions, H as HttpClient, I as ImageGenerationResult, L as Logger, l as Realtime, S as Storage, m as StorageBucket, n as StorageResponse } from './client-DrsZ1qIm.js';
-import { R as ResultAdminConfig, a as ResultConfig } from './types-DSVtGaIA.js';
-export { A as Analytics, b as AnalyticsOptions, c as ApiError, d as AuthErrorResponse, e as AuthSession, C as ChatCompletionRequest, f as ChatMessageSchema, g as CreateSessionRequest, h as CreateUserRequest, D as DeleteObjectResult, i as DeleteObjectsResponse, E as ERROR_CODES, j as EmbeddingsRequest, k as ErrorCode, I as ImageGenerationRequest, O as OAUTH_PROVIDERS, l as OAuthProvidersSchema, P as PresenceMember, m as ProfileSchema, n as RealtimeErrorPayload, o as ResultError, p as ResultErrorCode, S as SendEmailOptions, q as SendEmailResponse, r as SocketMessage, s as StartThreadOptions, t as StartedThread, u as StorageFileSchema, v as SubscribeResponse, w as Support, x as SupportMessage, y as SupportOptions, z as SupportThread, T as Tool, B as ToolCall, F as ToolChoice, U as UserSchema } from './types-DSVtGaIA.js';
+import { R as ResultClient } from './client--Xjaaw1l.js';
+export { A as AI, a as AccessTokenChangeEvent, b as Auth, c as AuthChangeEvent, d as AuthStateChangeCallback, C as ChatCompletion, e as ChatCompletionChoice, f as ChatCompletionChunk, g as ChatCompletionUsage, h as ConnectionState, D as Database, E as Emails, i as EmbeddingsResult, j as EventCallback, F as FunctionInvokeOptions, k as Functions, H as HttpClient, I as ImageGenerationResult, L as Logger, l as Realtime, S as Storage, m as StorageBucket, n as StorageResponse } from './client--Xjaaw1l.js';
+import { R as ResultAdminConfig, a as ResultConfig } from './types-BmU3deRO.js';
+export { A as Analytics, b as AnalyticsOptions, c as ApiError, d as AuthErrorResponse, e as AuthSession, C as ChatCompletionRequest, f as ChatMessageSchema, g as CreateSessionRequest, h as CreateUserRequest, D as DeleteObjectResult, i as DeleteObjectsResponse, E as ERROR_CODES, j as EmbeddingsRequest, k as ErrorCode, I as ImageGenerationRequest, O as OAUTH_PROVIDERS, l as OAuthProvidersSchema, P as PresenceMember, m as ProfileSchema, n as RealtimeErrorPayload, o as ResultError, p as ResultErrorCode, S as SendEmailOptions, q as SendEmailResponse, r as SocketMessage, s as StartThreadOptions, t as StartedThread, u as StorageFileSchema, v as SubscribeResponse, w as Support, x as SupportMessage, y as SupportOptions, z as SupportThread, T as Tool, B as ToolCall, F as ToolChoice, U as UserSchema } from './types-BmU3deRO.js';
 import '@supabase/postgrest-js';
 
 /**

package/dist/index.js

@@ -448,7 +448,15 @@ var HttpClient = class {
    */
   constructor(config, tokenManager, logger) {
     this.config = config;
-    this.baseUrl = config.baseUrl || "http://localhost:7130";
+    if (!config.baseUrl) {
+      throw new ResultError(
+        "createClient needs a baseUrl, but it was undefined at runtime.",
+        0,
+        "MISSING_BASE_URL",
+        "Pass the NEXT_PUBLIC_BACKEND_URL value from .env.local. In browser code, write process.env.NEXT_PUBLIC_BACKEND_URL as a literal expression (never through an imported process module) so the bundler inlines it, and set it as a deployments build variable before deploying."
+      );
+    }
+    this.baseUrl = config.baseUrl;
     this.fetch = config.fetch || (globalThis.fetch ? globalThis.fetch.bind(globalThis) : void 0);
     this.anonKey = config.anonKey;
     this.defaultHeaders = {

package/dist/{middleware-BJl9JRg3.d.ts → middleware-Uh09_lFn.d.ts}

@@ -1,4 +1,4 @@
-import { a as ResultConfig, o as ResultError } from './types-DSVtGaIA.js';
+import { a as ResultConfig, o as ResultError } from './types-BmU3deRO.js';
 
 declare const DEFAULT_ACCESS_TOKEN_COOKIE = "result_access_token";
 declare const DEFAULT_REFRESH_TOKEN_COOKIE = "result_refresh_token";

package/dist/{middleware-C1Z6aMvn.d.cts → middleware-VCWoai4o.d.cts}

@@ -1,4 +1,4 @@
-import { a as ResultConfig, o as ResultError } from './types-DSVtGaIA.cjs';
+import { a as ResultConfig, o as ResultError } from './types-BmU3deRO.cjs';
 
 declare const DEFAULT_ACCESS_TOKEN_COOKIE = "result_access_token";
 declare const DEFAULT_REFRESH_TOKEN_COOKIE = "result_refresh_token";

package/dist/ssr/middleware.d.cts

@@ -1,2 +1,2 @@
-export { b as AuthCookieNames, c as AuthCookieOptions, A as AuthCookieSettings, d as CookieOptions, e as CookieReader, C as CookieStore, a as CookieWriter, D as DEFAULT_ACCESS_TOKEN_COOKIE, f as DEFAULT_REFRESH_TOKEN_COOKIE, U as UpdateSessionOptions, g as UpdateSessionResult, i as clearAuthCookies, j as getAccessTokenCookieName, k as getRefreshTokenCookieName, s as setAuthCookies, u as updateSession } from '../middleware-C1Z6aMvn.cjs';
-import '../types-DSVtGaIA.cjs';
+export { b as AuthCookieNames, c as AuthCookieOptions, A as AuthCookieSettings, d as CookieOptions, e as CookieReader, C as CookieStore, a as CookieWriter, D as DEFAULT_ACCESS_TOKEN_COOKIE, f as DEFAULT_REFRESH_TOKEN_COOKIE, U as UpdateSessionOptions, g as UpdateSessionResult, i as clearAuthCookies, j as getAccessTokenCookieName, k as getRefreshTokenCookieName, s as setAuthCookies, u as updateSession } from '../middleware-VCWoai4o.cjs';
+import '../types-BmU3deRO.cjs';

package/dist/ssr/middleware.d.ts

@@ -1,2 +1,2 @@
-export { b as AuthCookieNames, c as AuthCookieOptions, A as AuthCookieSettings, d as CookieOptions, e as CookieReader, C as CookieStore, a as CookieWriter, D as DEFAULT_ACCESS_TOKEN_COOKIE, f as DEFAULT_REFRESH_TOKEN_COOKIE, U as UpdateSessionOptions, g as UpdateSessionResult, i as clearAuthCookies, j as getAccessTokenCookieName, k as getRefreshTokenCookieName, s as setAuthCookies, u as updateSession } from '../middleware-BJl9JRg3.js';
-import '../types-DSVtGaIA.js';
+export { b as AuthCookieNames, c as AuthCookieOptions, A as AuthCookieSettings, d as CookieOptions, e as CookieReader, C as CookieStore, a as CookieWriter, D as DEFAULT_ACCESS_TOKEN_COOKIE, f as DEFAULT_REFRESH_TOKEN_COOKIE, U as UpdateSessionOptions, g as UpdateSessionResult, i as clearAuthCookies, j as getAccessTokenCookieName, k as getRefreshTokenCookieName, s as setAuthCookies, u as updateSession } from '../middleware-Uh09_lFn.js';
+import '../types-BmU3deRO.js';

package/dist/ssr.cjs

@@ -690,7 +690,15 @@ var HttpClient = class {
    */
   constructor(config, tokenManager, logger) {
     this.config = config;
-    this.baseUrl = config.baseUrl || "http://localhost:7130";
+    if (!config.baseUrl) {
+      throw new ResultError(
+        "createClient needs a baseUrl, but it was undefined at runtime.",
+        0,
+        "MISSING_BASE_URL",
+        "Pass the NEXT_PUBLIC_BACKEND_URL value from .env.local. In browser code, write process.env.NEXT_PUBLIC_BACKEND_URL as a literal expression (never through an imported process module) so the bundler inlines it, and set it as a deployments build variable before deploying."
+      );
+    }
+    this.baseUrl = config.baseUrl;
     this.fetch = config.fetch || (globalThis.fetch ? globalThis.fetch.bind(globalThis) : void 0);
     this.anonKey = config.anonKey;
     this.defaultHeaders = {

package/dist/ssr.d.cts

@@ -1,7 +1,7 @@
-import { R as ResultClient } from './client-CJv_awPt.cjs';
-import { o as ResultError, a as ResultConfig, G as AuthRefreshResponse } from './types-DSVtGaIA.cjs';
-import { A as AuthCookieSettings, C as CookieStore, a as CookieWriter } from './middleware-C1Z6aMvn.cjs';
-export { b as AuthCookieNames, c as AuthCookieOptions, d as CookieOptions, e as CookieReader, D as DEFAULT_ACCESS_TOKEN_COOKIE, f as DEFAULT_REFRESH_TOKEN_COOKIE, U as UpdateSessionOptions, g as UpdateSessionResult, h as accessTokenCookieOptions, i as clearAuthCookies, j as getAccessTokenCookieName, k as getRefreshTokenCookieName, r as refreshTokenCookieOptions, s as setAuthCookies, u as updateSession } from './middleware-C1Z6aMvn.cjs';
+import { R as ResultClient } from './client-BrOD2EO5.cjs';
+import { o as ResultError, a as ResultConfig, G as AuthRefreshResponse } from './types-BmU3deRO.cjs';
+import { A as AuthCookieSettings, C as CookieStore, a as CookieWriter } from './middleware-VCWoai4o.cjs';
+export { b as AuthCookieNames, c as AuthCookieOptions, d as CookieOptions, e as CookieReader, D as DEFAULT_ACCESS_TOKEN_COOKIE, f as DEFAULT_REFRESH_TOKEN_COOKIE, U as UpdateSessionOptions, g as UpdateSessionResult, h as accessTokenCookieOptions, i as clearAuthCookies, j as getAccessTokenCookieName, k as getRefreshTokenCookieName, r as refreshTokenCookieOptions, s as setAuthCookies, u as updateSession } from './middleware-VCWoai4o.cjs';
 import '@supabase/postgrest-js';
 
 interface CreateAuthActionsOptions extends Omit<ResultConfig, "accessToken" | "edgeFunctionToken" | "isServerMode" | "auth">, AuthCookieSettings {

package/dist/ssr.d.ts

@@ -1,7 +1,7 @@
-import { R as ResultClient } from './client-DrsZ1qIm.js';
-import { o as ResultError, a as ResultConfig, G as AuthRefreshResponse } from './types-DSVtGaIA.js';
-import { A as AuthCookieSettings, C as CookieStore, a as CookieWriter } from './middleware-BJl9JRg3.js';
-export { b as AuthCookieNames, c as AuthCookieOptions, d as CookieOptions, e as CookieReader, D as DEFAULT_ACCESS_TOKEN_COOKIE, f as DEFAULT_REFRESH_TOKEN_COOKIE, U as UpdateSessionOptions, g as UpdateSessionResult, h as accessTokenCookieOptions, i as clearAuthCookies, j as getAccessTokenCookieName, k as getRefreshTokenCookieName, r as refreshTokenCookieOptions, s as setAuthCookies, u as updateSession } from './middleware-BJl9JRg3.js';
+import { R as ResultClient } from './client--Xjaaw1l.js';
+import { o as ResultError, a as ResultConfig, G as AuthRefreshResponse } from './types-BmU3deRO.js';
+import { A as AuthCookieSettings, C as CookieStore, a as CookieWriter } from './middleware-Uh09_lFn.js';
+export { b as AuthCookieNames, c as AuthCookieOptions, d as CookieOptions, e as CookieReader, D as DEFAULT_ACCESS_TOKEN_COOKIE, f as DEFAULT_REFRESH_TOKEN_COOKIE, U as UpdateSessionOptions, g as UpdateSessionResult, h as accessTokenCookieOptions, i as clearAuthCookies, j as getAccessTokenCookieName, k as getRefreshTokenCookieName, r as refreshTokenCookieOptions, s as setAuthCookies, u as updateSession } from './middleware-Uh09_lFn.js';
 import '@supabase/postgrest-js';
 
 interface CreateAuthActionsOptions extends Omit<ResultConfig, "accessToken" | "edgeFunctionToken" | "isServerMode" | "auth">, AuthCookieSettings {

package/dist/ssr.js

@@ -641,7 +641,15 @@ var HttpClient = class {
    */
   constructor(config, tokenManager, logger) {
     this.config = config;
-    this.baseUrl = config.baseUrl || "http://localhost:7130";
+    if (!config.baseUrl) {
+      throw new ResultError(
+        "createClient needs a baseUrl, but it was undefined at runtime.",
+        0,
+        "MISSING_BASE_URL",
+        "Pass the NEXT_PUBLIC_BACKEND_URL value from .env.local. In browser code, write process.env.NEXT_PUBLIC_BACKEND_URL as a literal expression (never through an imported process module) so the bundler inlines it, and set it as a deployments build variable before deploying."
+      );
+    }
+    this.baseUrl = config.baseUrl;
     this.fetch = config.fetch || (globalThis.fetch ? globalThis.fetch.bind(globalThis) : void 0);
     this.anonKey = config.anonKey;
     this.defaultHeaders = {

package/dist/{types-DSVtGaIA.d.cts → types-BmU3deRO.d.cts}

@@ -526,8 +526,9 @@ interface SocketMessage {
 type ResultErrorCode = ErrorCode | (string & {});
 interface ResultConfig {
     /**
-     * The base URL of the Result backend API
-     * @default "http://localhost:7130"
+     * The base URL of the Result backend API (the NEXT_PUBLIC_BACKEND_URL
+     * value from .env.local). Required at runtime: constructing a client
+     * without it throws MISSING_BASE_URL.
      */
     baseUrl?: string;
     /**

package/dist/{types-DSVtGaIA.d.ts → types-BmU3deRO.d.ts}

@@ -526,8 +526,9 @@ interface SocketMessage {
 type ResultErrorCode = ErrorCode | (string & {});
 interface ResultConfig {
     /**
-     * The base URL of the Result backend API
-     * @default "http://localhost:7130"
+     * The base URL of the Result backend API (the NEXT_PUBLIC_BACKEND_URL
+     * value from .env.local). Required at runtime: constructing a client
+     * without it throws MISSING_BASE_URL.
      */
     baseUrl?: string;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@resultdev/sdk",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Result Backend SDK - authentication, database, storage, functions, realtime, AI, email, web analytics and customer support for apps built on Result.",
   "license": "UNLICENSED",
   "homepage": "https://docs.result.dev",