better-supabase 0.3.0 → 0.5.0

package/dist/{react-DNBYNazu.js → react-C_s7kiNz.js}

@@ -1,66 +1,60 @@
-import { i as tenantClaimPaths, n as claimAt, r as claimsOf } from "./claims-CoTobNC-.js";
-import { t as invalidateTables } from "./invalidate-DbxuL2jL.js";
-import { n as liveQuery, t as liveCount } from "./live-D8rV1Ldw.js";
+import { i as tenantClaimPaths, n as claimAt, r as claimsOf } from "./claims-BAf6c7is.js";
+import { n as invalidateTables, t as clearOnUserChange } from "./user-change-CHFEUro1.js";
+import { n as liveQuery, t as liveCount } from "./live-CdJBOc4f.js";
 import { useSession } from "./react/session.js";
-import { createContext, createElement, useContext, useEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
+import { REALTIME_SUBSCRIBE_STATES } from "@supabase/supabase-js";
+import { createContext, createElement, useCallback, useContext, useEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 //#region src/react/hooks.ts
-const BrowserContext = createContext(null);
+const ClientContext = createContext(null);
 const LOADING = {
 	status: "loading",
 	user: null,
 	claims: null
 };
-/** Provides the browser client to the hooks. */
+/** Provides the better-supabase client to the hooks. */
 function BetterSupabaseProvider(props) {
-	const { browser, queryClient } = props;
-	const user = useRef(void 0);
-	useEffect(() => browser.auth.subscribe(() => {
-		const snapshot = browser.auth.current();
-		if (snapshot.status === "loading") return;
-		const id = snapshot.user?.id ?? null;
-		if (user.current !== void 0 && user.current !== id) queryClient?.removeQueries({ queryKey: ["bs"] });
-		user.current = id;
-	}), [browser, queryClient]);
+	const { client, queryClient } = props;
+	useEffect(() => queryClient ? clearOnUserChange(queryClient, client.auth) : void 0, [client, queryClient]);
 	const value = useMemo(() => ({
-		browser,
+		client,
 		queryClient
-	}), [browser, queryClient]);
-	return createElement(BrowserContext.Provider, { value }, props.children);
+	}), [client, queryClient]);
+	return createElement(ClientContext.Provider, { value }, props.children);
 }
-function useBrowserContext() {
-	const value = useContext(BrowserContext);
-	if (!value) throw new Error("better-supabase: wrap your app in <BetterSupabaseProvider browser={browser}>");
+function useClientContext() {
+	const value = useContext(ClientContext);
+	if (!value) throw new Error("better-supabase: wrap your app in <BetterSupabaseProvider client={bs}>");
 	return value;
 }
-function useBrowser() {
-	return useBrowserContext().browser;
+function useClient() {
+	return useClientContext().client;
 }
 /** The session state for UI: `loading`, `signed-out` or `signed-in` with the user and claims. */
 function useAuth() {
-	const browser = useBrowser();
-	return useSyncExternalStore(browser.auth.subscribe, browser.auth.current, () => LOADING);
+	const client = useClient();
+	return useSyncExternalStore(client.auth.subscribe, client.auth.current, () => LOADING);
 }
 function useSupabase() {
-	return useBrowser().supabase;
+	return useClient().supabase;
 }
 /**
 * Hooks typed for your schema.
 *
 * ```ts
-* export const { useDb, useQueries, useAuth } = createHooks<typeof browser>();
+* export const { useDb, useQueries, useAuth } = createHooks<typeof bs>();
 * ```
 */
 function createHooks() {
 	return {
 		useDb() {
-			const browser = useBrowser();
+			const client = useClient();
 			useAuth();
-			return browser.db;
+			return client.db;
 		},
 		useQueries() {
-			const browser = useBrowser();
+			const client = useClient();
 			useAuth();
-			return browser.queries;
+			return client.queries;
 		},
 		useSupabase,
 		useAuth,
@@ -76,7 +70,7 @@ function createHooks() {
 * ```
 */
 function useBroadcast(topic, values, handlers, options) {
-	const { browser, queryClient } = useBrowserContext();
+	const { client, queryClient } = useClientContext();
 	const auth = useAuth();
 	const [status, setStatus] = useState("closed");
 	const latest = useRef({
@@ -106,7 +100,7 @@ function useBroadcast(topic, values, handlers, options) {
 			}
 			for (const queryKey of invalidate(message)) queryClient.invalidateQueries({ queryKey });
 		};
-		const subscription = topic.subscribe(browser.supabase, matched, { "*": forward }, {
+		const subscription = topic.subscribe(client.supabase, matched, { "*": forward }, {
 			...latest.current.options?.self === void 0 ? {} : { self: latest.current.options.self },
 			onStatus: setStatus,
 			onInvalid: (message, issues) => latest.current.options?.onInvalid?.(message, issues)
@@ -116,7 +110,7 @@ function useBroadcast(topic, values, handlers, options) {
 			setStatus("closed");
 		};
 	}, [
-		browser,
+		client,
 		topic,
 		name,
 		userId,
@@ -138,23 +132,23 @@ function claimedTenant(auth, meta) {
 * resubscribes when the spec, tenant or user changes.
 *
 * ```ts
-* const spec = sb.spec.customers.findMany({ include: { notes: true } });
+* const spec = betterSupabase.spec.customers.findMany({ include: { notes: true } });
 * const { data } = useQuery(q.$spec(spec));
 * useLiveQuery(spec);
 * ```
 */
 function useLiveQuery(spec, options = {}) {
-	const { browser, queryClient } = useBrowserContext();
+	const { client, queryClient } = useClientContext();
 	const auth = useAuth();
 	const [status, setStatus] = useState("closed");
 	if (spec && !queryClient) throw new Error("better-supabase: useLiveQuery needs <BetterSupabaseProvider queryClient={...}>");
 	const key = spec ? JSON.stringify(spec) : null;
-	const tenant = options.tenant ?? claimedTenant(auth, browser.sb.meta);
+	const tenant = options.tenant ?? claimedTenant(auth, client.betterSupabase.meta);
 	const userId = auth.user?.id ?? null;
 	const debounceMs = options.debounceMs;
 	useEffect(() => {
 		if (!key || !queryClient || auth.status === "loading") return;
-		const live = liveQuery(browser.sb, browser.supabase, JSON.parse(key), {
+		const live = liveQuery(client.betterSupabase, client.supabase, JSON.parse(key), {
 			onChange: (tables) => void invalidateTables(queryClient, tables),
 			onStatus: setStatus,
 			...tenant === void 0 ? {} : { tenant },
@@ -164,7 +158,7 @@ function useLiveQuery(spec, options = {}) {
 			live.unsubscribe();
 		};
 	}, [
-		browser,
+		client,
 		queryClient,
 		key,
 		tenant,
@@ -177,15 +171,15 @@ function useLiveQuery(spec, options = {}) {
 /**
 * A count that stays current: refetches only the `count` spec (a HEAD
 * request) after each debounced change to a table it reads, and after the
-* channel rejoins. Takes a spec or a `next.liveCount()` seed; pass `null` to
+* channel rejoins. Takes a spec or a `bs.liveCount()` seed; pass `null` to
 * pause. Doesn't need a `QueryClient`.
 *
 * ```tsx
-* const { count } = useLiveCount(seed); // seed = await next.liveCount(spec)
+* const { count } = useLiveCount(seed); // seed = await bs.liveCount(spec)
 * ```
 */
 function useLiveCount(source, options = {}) {
-	const { browser } = useBrowserContext();
+	const { client } = useClientContext();
 	const auth = useAuth();
 	const seed = source && "spec" in source ? source : void 0;
 	const spec = seed ? seed.spec : source;
@@ -197,13 +191,13 @@ function useLiveCount(source, options = {}) {
 	});
 	const [status, setStatus] = useState("closed");
 	const key = spec ? JSON.stringify(spec) : null;
-	const tenant = options.tenant ?? claimedTenant(auth, browser.sb.meta);
+	const tenant = options.tenant ?? claimedTenant(auth, client.betterSupabase.meta);
 	const userId = auth.user?.id ?? null;
 	const debounceMs = options.debounceMs;
 	const hasInitial = initial !== void 0;
 	useEffect(() => {
 		if (!key || auth.status === "loading") return;
-		const live = liveCount(browser.sb, browser.supabase, browser.db, JSON.parse(key), {
+		const live = liveCount(client.betterSupabase, client.supabase, client.db, JSON.parse(key), {
 			immediate: !hasInitial,
 			onCount: (count) => {
 				setState({
@@ -227,7 +221,7 @@ function useLiveCount(source, options = {}) {
 			live.unsubscribe();
 		};
 	}, [
-		browser,
+		client,
 		key,
 		tenant,
 		userId,
@@ -243,4 +237,102 @@ function useLiveCount(source, options = {}) {
 	};
 }
 //#endregion
-export { useLiveCount as a, useBroadcast as i, createHooks as n, useLiveQuery as o, useAuth as r, useSupabase as s, BetterSupabaseProvider as t };
+//#region src/react/notifications.ts
+const unread = (items) => items.filter((item) => typeof item === "object" && item !== null && "readAt" in item && item.readAt === null).length;
+/** Joins a private topic and returns the function that leaves it. */
+function watchTopic(supabase, topic, watch) {
+	let closed = false;
+	let joined = false;
+	const channel = supabase.channel(topic, { config: { private: true } });
+	channel.on("broadcast", { event: "*" }, (message) => {
+		watch.onMessage(message.event, message["payload"]);
+	});
+	(async () => {
+		watch.onStatus("joining");
+		await supabase.realtime.setAuth();
+		if (closed) return;
+		channel.subscribe((state) => {
+			switch (state) {
+				case REALTIME_SUBSCRIBE_STATES.SUBSCRIBED:
+					if (joined) watch.onRejoin();
+					joined = true;
+					watch.onStatus("subscribed");
+					return;
+				case REALTIME_SUBSCRIBE_STATES.CLOSED:
+					watch.onStatus("closed");
+					return;
+				case REALTIME_SUBSCRIBE_STATES.CHANNEL_ERROR:
+				case REALTIME_SUBSCRIBE_STATES.TIMED_OUT:
+					watch.onStatus("error");
+					return;
+				default: throw new Error(`Unknown realtime status ${String(state)}`);
+			}
+		});
+	})();
+	return () => {
+		closed = true;
+		supabase.removeChannel(channel);
+		watch.onStatus("closed");
+	};
+}
+/**
+* The signed-in user's notifications, kept current: loads them, then loads
+* again after each broadcast on `topic` and after the channel rejoins.
+*
+* ```tsx
+* const { items, count } = useNotifications({
+*   topic: `org:${orgId}:notifications:${userId}`,
+*   load: () => listNotifications(orgId),
+* });
+* ```
+*/
+function useNotifications(options) {
+	const supabase = useSupabase();
+	const auth = useAuth();
+	const [items, setItems] = useState(void 0);
+	const [error, setError] = useState(void 0);
+	const [status, setStatus] = useState("closed");
+	const latest = useRef(options);
+	latest.current = options;
+	const userId = auth.user?.id ?? null;
+	const refresh = useCallback(async () => {
+		const current = latest.current;
+		try {
+			const merged = (await Promise.all([current.load, ...current.sources ?? []].map((source) => source()))).flat();
+			setItems(current.sort ? [...merged].sort(current.sort) : merged);
+			setError(void 0);
+		} catch (cause) {
+			setError(cause);
+		}
+	}, []);
+	const topic = options.topic;
+	useEffect(() => {
+		if (auth.status !== "signed-in") return;
+		refresh();
+		if (!topic) return;
+		return watchTopic(supabase, topic, {
+			onMessage: (event, payload) => {
+				latest.current.onMessage?.(event, payload);
+				refresh();
+			},
+			onRejoin: () => void refresh(),
+			onStatus: setStatus
+		});
+	}, [
+		supabase,
+		topic,
+		userId,
+		auth.status,
+		refresh
+	]);
+	const list = items ?? [];
+	return {
+		items,
+		count: (options.count ?? unread)(list),
+		status,
+		error,
+		refresh
+	};
+}
+//#endregion
+export { useBroadcast as a, useSupabase as c, useAuth as i, BetterSupabaseProvider as n, useLiveCount as o, createHooks as r, useLiveQuery as s, useNotifications as t };

package/dist/{read-set-D0qBcboM.js → read-set-DQFt1N_Y.js}

@@ -1,5 +1,5 @@
-import { r as IrBuilder, u as tableMeta } from "./simplify-LakqK1vH.js";
-import { n as touchedTables } from "./tables-Dhha3BXM.js";
+import { r as builderFor, s as tableMeta } from "./simplify-_0oUKqCd.js";
+import { n as touchedTables } from "./tables-Cb-3_VWc.js";
 //#region src/core/spec.ts
 const READ_METHODS = [
 	"findMany",
@@ -40,7 +40,6 @@ function specOptions(spec) {
 	const value = spec.method === "findById" ? spec.args[1] : spec.args[0];
 	return typeof value === "object" && value !== null ? value : void 0;
 }
-const builders = /* @__PURE__ */ new WeakMap();
 /**
 * App keys of every table a spec reads: its table, included relations and
 * relations used in `where`. Queries keyed by a spec go stale when any of
@@ -48,18 +47,54 @@ const builders = /* @__PURE__ */ new WeakMap();
 * spec reports the error.
 */
 function specTables(meta, spec) {
+	const table = meta.tables[spec.table];
+	const args = specOptions(spec);
+	if (table && args?.["include"] === void 0 && !touchesRelations(table, args?.["where"])) return [spec.table];
+	const key = specKey(spec);
+	let byKey = tablesByMeta.get(meta);
+	if (!byKey) {
+		byKey = /* @__PURE__ */ new Map();
+		tablesByMeta.set(meta, byKey);
+	}
+	const known = key === void 0 ? void 0 : byKey.get(key);
+	if (known) return [...known];
+	let tables;
 	try {
-		return readTables(meta, spec);
+		tables = readTables(meta, spec);
 	} catch {
-		return [spec.table];
+		tables = [spec.table];
 	}
+	if (key !== void 0) {
+		if (byKey.size >= SPEC_CACHE_SIZE) byKey.clear();
+		byKey.set(key, tables);
+	}
+	return [...tables];
 }
-function readTables(meta, spec) {
-	let builder = builders.get(meta);
-	if (!builder) {
-		builder = new IrBuilder(meta);
-		builders.set(meta, builder);
+const SPEC_CACHE_SIZE = 500;
+const tablesByMeta = /* @__PURE__ */ new WeakMap();
+/** A text key for the spec, or `undefined` when its arguments do not serialize. */
+function specKey(spec) {
+	try {
+		return JSON.stringify([
+			spec.table,
+			spec.method,
+			spec.args
+		], (_key, value) => typeof value === "bigint" ? `${value}n` : value);
+	} catch {
+		return;
+	}
+}
+function touchesRelations(table, where) {
+	if (typeof where !== "object" || where === null) return false;
+	if (Array.isArray(where)) return where.some((item) => touchesRelations(table, item));
+	for (const [key, value] of Object.entries(where)) {
+		if (key in table.relations) return true;
+		if ((key === "AND" || key === "OR" || key === "NOT") && touchesRelations(table, value)) return true;
 	}
+	return false;
+}
+function readTables(meta, spec) {
+	const builder = builderFor(meta);
 	const table = tableMeta(meta, spec.table);
 	const args = specOptions(spec);
 	const counts = spec.method === "count" || spec.method === "exists" || spec.method === "aggregate";
@@ -98,7 +133,7 @@ function sentinel(name) {
 *
 * ```ts
 * export const appChrome = defineReadSet(
-*   sb,
+*   betterSupabase,
 *   'app_chrome',
 *   { params: { userId: 'uuid' } },
 *   (s, p) => ({
@@ -111,7 +146,7 @@ function sentinel(name) {
 * `p` holds placeholders, not values: pass them straight into `where` (or
 * `in`), where the function reads them from its `p jsonb` argument.
 */
-function defineReadSet(sb, name, options, build) {
+function defineReadSet(betterSupabase, name, options, build) {
 	if (!NAME.test(name)) throw new TypeError(`better-supabase: read set name "${name}" must be snake_case and at most 60 characters`);
 	const params = options.params ?? {};
 	const placeholders = {};
@@ -120,10 +155,11 @@ function defineReadSet(sb, name, options, build) {
 		if (!TYPE.test(type)) throw new TypeError(`better-supabase: read set "${name}" parameter "${key}" has an invalid type "${type}"`);
 		placeholders[key] = type.endsWith("[]") ? [sentinel(key)] : sentinel(key);
 	}
-	const specs = build(sb.spec, placeholders);
+	const specs = build(betterSupabase.spec, placeholders);
 	const entries = Object.entries(specs);
 	if (entries.length === 0 || entries.length > MAX_ENTRIES) throw new TypeError(`better-supabase: read set "${name}" needs between 1 and ${MAX_ENTRIES} reads`);
-	for (const [key, spec] of entries) if (!isQuerySpec(spec)) throw new TypeError(`better-supabase: read set "${name}" entry "${key}" is not a spec from sb.spec`);
+	for (const [key, spec] of entries) if (!isQuerySpec(spec)) throw new TypeError(`better-supabase: read set "${name}" entry "${key}" is not a spec from betterSupabase.spec`);
+	warnUnscopedReads(betterSupabase, name, specs);
 	return {
 		kind: "read-set",
 		name,
@@ -131,9 +167,29 @@ function defineReadSet(sb, name, options, build) {
 		params,
 		roles: options.roles ?? ["authenticated"],
 		specs,
-		definition: sb
+		definition: betterSupabase
 	};
 }
+/**
+* The generated function runs the reads as compiled at `gen` time, without
+* the runtime's `transformQuery` plugins, so tenant and soft-delete filters
+* that only those plugins add never reach it.
+*/
+function warnUnscopedReads(betterSupabase, name, specs) {
+	const scoping = betterSupabase.plugins.filter((plugin) => plugin.transformQuery !== void 0 && plugin.name !== "rules").map((plugin) => plugin.name);
+	if (scoping.length === 0) return;
+	const { meta } = betterSupabase;
+	const tables = [...new Set(Object.values(specs).flatMap((spec) => specTables(meta, spec)))].filter((key) => {
+		const flags = meta.tables[key]?.flags;
+		return flags?.tenant !== void 0 || flags?.softDelete !== void 0;
+	});
+	if (tables.length === 0) return;
+	betterSupabase.events.logger.warn(`read set "${name}" reads ${tables.join(", ")}, which ${scoping.join(", ")} scope at runtime; its generated function only sees those filters when the specs spell them out (or RLS enforces them)`, {
+		readSet: name,
+		tables,
+		plugins: scoping
+	});
+}
 function isReadSet(value) {
 	return typeof value === "object" && value !== null && value.kind === "read-set" && typeof value.name === "string";
 }

package/dist/realtime/index.d.ts

@@ -1,5 +1,5 @@
-import { x as PermdockTopicPolicy } from "../types-DONv9SHN.js";
-import { t as PermdockCatalog } from "../permdock-sql-DImJULY-.js";
+import { S as PermdockTopicPolicy } from "../types-Dnf_wRDz.js";
+import { n as PermdockCatalog } from "../permdock-sql-C2Inc6Xc.js";
 import { n as TemplateValues, t as TemplateParams } from "../template-mbvlysOo.js";
-import { C as defineTopic, S as TriggerOptions, _ as TopicEvent, a as LiveSource, b as TopicOptions, c as liveQuery, d as RealtimeClient, f as RowChange, g as Topic, h as SubscriptionStatus, i as LiveQueryOptions, l as liveTopic, m as Subscription, n as LiveCountOptions, o as LiveSubscription, p as SubscribeOptions, r as LiveCountSeed, s as liveCount, t as CountRunner, u as EventSchemas, v as TopicHandlers, w as rowChange, x as TopicPayload, y as TopicMessage } from "../live-QE3UPbGm.js";
+import { C as defineTopic, S as TriggerOptions, _ as TopicEvent, a as LiveSource, b as TopicOptions, c as liveQuery, d as RealtimeClient, f as RowChange, g as Topic, h as SubscriptionStatus, i as LiveQueryOptions, l as liveTopic, m as Subscription, n as LiveCountOptions, o as LiveSubscription, p as SubscribeOptions, r as LiveCountSeed, s as liveCount, t as CountRunner, u as EventSchemas, v as TopicHandlers, w as rowChange, x as TopicPayload, y as TopicMessage } from "../live-D9W2M5aO.js";
 export { type CountRunner, type EventSchemas, type LiveCountOptions, type LiveCountSeed, type LiveQueryOptions, type LiveSource, type LiveSubscription, type PermdockCatalog, type PermdockTopicPolicy, type RealtimeClient, type RowChange, type SubscribeOptions, type Subscription, type SubscriptionStatus, type TemplateParams, type TemplateValues, type Topic, type TopicEvent, type TopicHandlers, type TopicMessage, type TopicOptions, type TopicPayload, type TriggerOptions, defineTopic, liveCount, liveQuery, liveTopic, rowChange };

package/dist/realtime/index.js

@@ -1,9 +1,10 @@
-import { n as dbError } from "../errors-Bl3rkOzo.js";
-import { i as ok, n as err, t as AsyncResult } from "../result-DWXatkd6.js";
-import { i as tenantClaimPaths } from "../claims-CoTobNC-.js";
-import { n as liveQuery, r as liveTopic, t as liveCount } from "../live-D8rV1Ldw.js";
-import { s as toApp } from "../shared-_6-uPL7E.js";
-import { a as sqlIdent, i as slug, o as sqlString, r as parseTemplate, t as permdockCheck } from "../permdock-sql-Bta_G0v-.js";
+import { n as dbError } from "../errors-DtwXa6b8.js";
+import { i as ok, n as err, t as AsyncResult } from "../result-BKiliPY7.js";
+import { i as tenantClaimPaths } from "../claims-BAf6c7is.js";
+import { n as liveQuery, r as liveTopic, t as liveCount } from "../live-CdJBOc4f.js";
+import { i as sqlString, n as slug, r as sqlIdent, t as parseTemplate } from "../template-TxrGI5jR.js";
+import { c as toApp } from "../shared-D1dRUrAg.js";
+import { n as permdockCheck } from "../permdock-sql-DgOfeixi.js";
 import { REALTIME_SUBSCRIBE_STATES } from "@supabase/supabase-js";
 //#region src/realtime/topic.ts
 const VALUE = /^[\w.@+=-]+$/;
@@ -119,8 +120,8 @@ function defineTopic(template, options = {}) {
 			}
 			return `${lines.join("\n")}\n`;
 		},
-		triggerSql(sb, table, trigger) {
-			const meta = sb.meta.tables[table];
+		triggerSql(betterSupabase, table, trigger) {
+			const meta = betterSupabase.meta.tables[table];
 			if (!meta) throw new TypeError(`defineTopic: unknown table "${table}"`);
 			const values = trigger.values;
 			const parts = template.split(/(\{[^}]+\})/).filter(Boolean).map((part) => {
@@ -236,13 +237,14 @@ function defineTopic(template, options = {}) {
 				const topic = topicOf(values);
 				const checked = await validate(schemas[event], payload);
 				if (!checked.ok) return err(dbError("validation", `Invalid payload for ${event}`, { issues: checked.issues }));
-				if (isPrivate) await client.realtime.setAuth();
+				const open = client.getChannels().some((existing) => existing.topic === `realtime:${topic}`);
+				if (isPrivate && !open) await client.realtime.setAuth();
 				const channel = client.channel(topic, { config: { private: isPrivate } });
 				try {
 					const response = await channel.httpSend(event, checked.value);
 					return response.success ? ok(void 0) : err(sendError(response.status, response.error));
 				} finally {
-					await client.removeChannel(channel);
+					if (!open) await client.removeChannel(channel);
 				}
 			});
 		}
@@ -252,8 +254,8 @@ function defineTopic(template, options = {}) {
 * Reads a `realtime.broadcast_changes` message as an app-cased row change.
 * Returns `null` for messages about other tables.
 */
-function rowChange(sb, table, message) {
-	const meta = sb.meta.tables[table];
+function rowChange(betterSupabase, table, message) {
+	const meta = betterSupabase.meta.tables[table];
 	const payload = message.payload;
 	if (!meta || !payload || payload.table !== meta.name || payload.schema && payload.schema !== meta.schema) return null;
 	const operation = payload.operation ?? message.event;

package/dist/{index-kpgopLNv.d.ts → refresh-BTrQ_ZTp.d.ts}

@@ -1,6 +1,4 @@
-import { m as StoredSession } from "./resolve-BRciX2jK.js";
-import "./view-3Po_PVlr.js";
-import "./entitlements-DvJXoI02.js";
+import { m as StoredSession } from "./resolve-C15TJq77.js";
 //#region src/auth/refresh.d.ts
 interface RefreshOptions {
   readonly url: string;
@@ -14,6 +12,11 @@ interface RefreshOptions {
     readonly secretKey: string;
   };
   readonly fetch?: typeof fetch;
+  /**
+   * Milliseconds before a refresh counts as a network failure (the session is
+   * kept). 5000 by default.
+   */
+  readonly timeoutMs?: number;
   /** Epoch milliseconds, the unit JWT `exp` and `iat` math needs. */
   readonly now?: () => number;
 }

package/dist/{resolve-BRciX2jK.d.ts → resolve-C15TJq77.d.ts}

@@ -1,8 +1,8 @@
-import { p as DbError } from "./result-c2OYgCV2.js";
-import { f as Logger, l as RefreshEvent } from "./events-Do8jXh4D.js";
-import { h as RequestContext } from "./plugin-DVRB8qNE.js";
-import { t as StandardSchemaV1 } from "./standard-eudBiRk1.js";
-import { t as BetterSupabaseEnv } from "./index-Dy6kuF0P.js";
+import { _ as DbError } from "./executor-BunPOO-k.js";
+import { E as Logger, l as RefreshEvent } from "./events-aIO7vsIk.js";
+import { g as RequestContext } from "./plugin-o144f322.js";
+import { t as StandardSchemaV1 } from "./standard-J4YgMOLm.js";
+import { t as BetterSupabaseEnv } from "./index-CLg87OBW.js";
 import { CookieOptions } from "@supabase/ssr";
 import { JWTClaims, SupabaseEnv, UserClaims } from "@supabase/server";
 //#region src/auth/session.d.ts
@@ -46,9 +46,9 @@ declare function applyCookieWrites(cookies: readonly CookieRecord[], writes: rea
 //#endregion
 //#region src/auth/resolve.d.ts
 /**
- * Who is calling. `C` is the claims type from `sb.claims(schema)`; the
+ * Who is calling. `C` is the claims type from `betterSupabase.claims(schema)`; the
  * verified payload keeps every JWT claim and adds the schema's output. `P`
- * is the `user_metadata` type from `sb.userMetadata(schema)`.
+ * is the `user_metadata` type from `betterSupabase.userMetadata(schema)`.
  */
 type AuthState<C = unknown, P = unknown> = {
   readonly kind: "user";
@@ -59,7 +59,7 @@ type AuthState<C = unknown, P = unknown> = {
   /** Seconds since epoch, from the token's `exp`. */
   readonly expiresAt: number | null;
   /**
-   * `user_metadata` parsed by `sb.userMetadata(schema)`; `undefined`
+   * `user_metadata` parsed by `betterSupabase.userMetadata(schema)`; `undefined`
    * without a schema or when the metadata fails it. Users can write this
    * data themselves: use it for display, never for access.
    */
@@ -101,8 +101,13 @@ interface ResolveAuthOptions {
   readonly env: BetterSupabaseEnv;
   /** Allow refreshing an expiring cookie session. Only where cookies can be written (proxy). */
   readonly refresh?: boolean;
-  /** Refresh when the token expires within this many seconds. Defaults to 60. */
+  /**
+   * With `refresh`, refresh when the token expires within this many seconds.
+   * Defaults to 60. Without `refresh` a token stays valid until its `exp`.
+   */
   readonly leeway?: number;
+  /** Milliseconds before a refresh counts as a network failure. Defaults to 5000. */
+  readonly refreshTimeoutMs?: number;
   /**
    * Accept `sb_secret_` keys (`apikey` header) as service callers: `true` for
    * any configured key, or the key names allowed (`['cron']`). Defaults to false.
@@ -114,15 +119,21 @@ interface ResolveAuthOptions {
     readonly name?: string;
     readonly options?: CookieOptions;
   };
+  /**
+   * Read the session cookie. Defaults to true. `false` suits endpoints only
+   * bearer clients call (MCP): a browser's cookie then can't authorize a
+   * request another site makes it send.
+   */
+  readonly cookies?: boolean;
   /** Inline JWKS instead of fetching `env.jwksUrl` (tests, air-gapped). */
   readonly jwks?: SupabaseEnv["jwks"];
   /**
-   * Validates the verified claims (`sb.claims(schema)` sets it). A failure
+   * Validates the verified claims (`betterSupabase.claims(schema)` sets it). A failure
    * resolves to `{ kind: 'invalid', reason: 'claims' }`.
    */
   readonly claims?: StandardSchemaV1;
   /**
-   * Parses `user_metadata` into `profile` (`sb.userMetadata(schema)` sets
+   * Parses `user_metadata` into `profile` (`betterSupabase.userMetadata(schema)` sets
    * it). A failure leaves `profile` undefined and warns once; the session
    * stays valid.
    */