@vaiftechnologies/vaif-client 0.2.0 → 0.2.1

package/dist/index.cjs

@@ -605,17 +605,19 @@ var VaifRealtime = class {
       return;
     }
     const config = this.client.getConfig();
-    const url = new URL(config.realtimeUrl);
-    url.searchParams.set("apikey", config.apiKey);
-    url.searchParams.set("project", config.projectId);
-    const token = this.client.getAccessToken();
-    if (token) {
-      url.searchParams.set("token", token);
-    }
-    this.socket = new WebSocket(url.toString());
+    this.socket = new WebSocket(config.realtimeUrl);
     this.socket.onopen = () => {
       this.client.debug("Realtime connected");
       this.reconnectAttempts = 0;
+      this.send({
+        topic: "phoenix",
+        event: "auth",
+        payload: {
+          apikey: config.apiKey,
+          project: config.projectId,
+          token: this.client.getAccessToken() ?? void 0
+        }
+      });
       if (options.heartbeat !== false) {
         this.startHeartbeat(options.heartbeatInterval ?? 3e4);
       }
@@ -2689,7 +2691,7 @@ var VaifAdmin = class {
     const response = await fetch(url, {
       ...options,
       headers,
-      credentials: "include"
+      credentials: "same-origin"
     });
     if (!response.ok) {
       const error = await response.json().catch(() => ({ message: "Request failed" }));
@@ -3803,10 +3805,16 @@ var VaifClient = class {
     } catch {
     }
   }
-  /** Log debug messages */
+  /** Log debug messages (sanitised to avoid leaking tokens) */
   debug(...args) {
     if (this.config.debug) {
-      console.log("[VAIF]", ...args);
+      const safe = args.map((arg) => {
+        if (arg instanceof Error) return arg.message;
+        if (typeof arg === "string") return arg;
+        if (typeof arg === "number" || typeof arg === "boolean") return arg;
+        return "[object]";
+      });
+      console.log("[VAIF]", ...safe);
     }
   }
 };

package/dist/index.d.cts

@@ -4179,7 +4179,7 @@ declare class VaifClient {
     request<T = unknown>(path: string, options?: RequestOptions): Promise<ApiResponse<T>>;
     /** Restore session from storage */
     private restoreSession;
-    /** Log debug messages */
+    /** Log debug messages (sanitised to avoid leaking tokens) */
     debug(...args: unknown[]): void;
 }
 

package/dist/index.d.ts

@@ -4179,7 +4179,7 @@ declare class VaifClient {
     request<T = unknown>(path: string, options?: RequestOptions): Promise<ApiResponse<T>>;
     /** Restore session from storage */
     private restoreSession;
-    /** Log debug messages */
+    /** Log debug messages (sanitised to avoid leaking tokens) */
     debug(...args: unknown[]): void;
 }
 

package/dist/index.js

@@ -547,17 +547,19 @@ var VaifRealtime = class {
       return;
     }
     const config = this.client.getConfig();
-    const url = new URL(config.realtimeUrl);
-    url.searchParams.set("apikey", config.apiKey);
-    url.searchParams.set("project", config.projectId);
-    const token = this.client.getAccessToken();
-    if (token) {
-      url.searchParams.set("token", token);
-    }
-    this.socket = new WebSocket(url.toString());
+    this.socket = new WebSocket(config.realtimeUrl);
     this.socket.onopen = () => {
       this.client.debug("Realtime connected");
       this.reconnectAttempts = 0;
+      this.send({
+        topic: "phoenix",
+        event: "auth",
+        payload: {
+          apikey: config.apiKey,
+          project: config.projectId,
+          token: this.client.getAccessToken() ?? void 0
+        }
+      });
       if (options.heartbeat !== false) {
         this.startHeartbeat(options.heartbeatInterval ?? 3e4);
       }
@@ -2631,7 +2633,7 @@ var VaifAdmin = class {
     const response = await fetch(url, {
       ...options,
       headers,
-      credentials: "include"
+      credentials: "same-origin"
     });
     if (!response.ok) {
       const error = await response.json().catch(() => ({ message: "Request failed" }));
@@ -3745,10 +3747,16 @@ var VaifClient = class {
     } catch {
     }
   }
-  /** Log debug messages */
+  /** Log debug messages (sanitised to avoid leaking tokens) */
   debug(...args) {
     if (this.config.debug) {
-      console.log("[VAIF]", ...args);
+      const safe = args.map((arg) => {
+        if (arg instanceof Error) return arg.message;
+        if (typeof arg === "string") return arg;
+        if (typeof arg === "number" || typeof arg === "boolean") return arg;
+        return "[object]";
+      });
+      console.log("[VAIF]", ...safe);
     }
   }
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vaiftechnologies/vaif-client",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "type": "module",
   "description": "Official VAIF Studio client library for JavaScript and TypeScript",
   "main": "dist/index.js",