dreamboard 0.1.24 → 0.1.26

package/dist/{chunk-H3O43F5P.js → chunk-3JGO32FA.js}

@@ -18,7 +18,7 @@ var require_tslib = __commonJS({
     var __propKey2;
     var __setFunctionName2;
     var __metadata2;
-    var __awaiter2;
+    var __awaiter3;
     var __generator2;
     var __exportStar2;
     var __values2;
@@ -156,7 +156,7 @@ var require_tslib = __commonJS({
       __metadata2 = function(metadataKey, metadataValue) {
         if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(metadataKey, metadataValue);
       };
-      __awaiter2 = function(thisArg, _arguments, P, generator) {
+      __awaiter3 = function(thisArg, _arguments, P, generator) {
         function adopt(value) {
           return value instanceof P ? value : new P(function(resolve) {
             resolve(value);
@@ -516,7 +516,7 @@ var require_tslib = __commonJS({
       exporter("__propKey", __propKey2);
       exporter("__setFunctionName", __setFunctionName2);
       exporter("__metadata", __metadata2);
-      exporter("__awaiter", __awaiter2);
+      exporter("__awaiter", __awaiter3);
       exporter("__generator", __generator2);
       exporter("__exportStar", __exportStar2);
       exporter("__createBinding", __createBinding2);
@@ -579,7 +579,7 @@ var {
   __rewriteRelativeImportExtension
 } = import_tslib.default;
 
-// ../../node_modules/.pnpm/@supabase+functions-js@2.103.0/node_modules/@supabase/functions-js/dist/module/helper.js
+// ../../node_modules/.pnpm/@supabase+functions-js@2.106.1/node_modules/@supabase/functions-js/dist/module/helper.js
 var resolveFetch = (customFetch) => {
   if (customFetch) {
     return (...args) => customFetch(...args);
@@ -587,7 +587,7 @@ var resolveFetch = (customFetch) => {
   return (...args) => fetch(...args);
 };
 
-// ../../node_modules/.pnpm/@supabase+functions-js@2.103.0/node_modules/@supabase/functions-js/dist/module/types.js
+// ../../node_modules/.pnpm/@supabase+functions-js@2.106.1/node_modules/@supabase/functions-js/dist/module/types.js
 var FunctionsError = class extends Error {
   constructor(message, name = "FunctionsError", context) {
     super(message);
@@ -636,29 +636,27 @@ var FunctionRegion;
   FunctionRegion2["UsWest2"] = "us-west-2";
 })(FunctionRegion || (FunctionRegion = {}));
 
-// ../../node_modules/.pnpm/@supabase+functions-js@2.103.0/node_modules/@supabase/functions-js/dist/module/FunctionsClient.js
+// ../../node_modules/.pnpm/@supabase+functions-js@2.106.1/node_modules/@supabase/functions-js/dist/module/FunctionsClient.js
 var FunctionsClient = class {
   /**
    * Creates a new Functions client bound to an Edge Functions URL.
    *
-   * @example
+   * @example Using supabase-js (recommended)
    * ```ts
-   * import { FunctionsClient, FunctionRegion } from '@supabase/functions-js'
+   * import { createClient } from '@supabase/supabase-js'
    *
-   * const functions = new FunctionsClient('https://xyzcompany.supabase.co/functions/v1', {
-   *   headers: { apikey: 'public-anon-key' },
-   *   region: FunctionRegion.UsEast1,
-   * })
+   * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
+   * const { data, error } = await supabase.functions.invoke('hello-world')
    * ```
    *
-   * @category Functions
+   * @category Edge Functions
    *
-   * @example Creating a Functions client
+   * @example Standalone import for bundle-sensitive environments
    * ```ts
    * import { FunctionsClient, FunctionRegion } from '@supabase/functions-js'
    *
    * const functions = new FunctionsClient('https://xyzcompany.supabase.co/functions/v1', {
-   *   headers: { apikey: 'public-anon-key' },
+   *   headers: { apikey: 'your-publishable-key' },
    *   region: FunctionRegion.UsEast1,
    * })
    * ```
@@ -673,7 +671,7 @@ var FunctionsClient = class {
    * Updates the authorization header
    * @param token - the new jwt token sent in the authorisation header
    *
-   * @category Functions
+   * @category Edge Functions
    *
    * @example Setting the authorization header
    * ```ts
@@ -694,7 +692,7 @@ var FunctionsClient = class {
    * })
    * ```
    *
-   * @category Functions
+   * @category Edge Functions
    *
    * @remarks
    * - Requires an Authorization header.
@@ -801,7 +799,7 @@ var FunctionsClient = class {
    * })
    * ```
    *
-   * @example Example 7
+   * @example Standalone client invoke
    * ```ts
    * const { data, error } = await functions.invoke('hello-world', {
    *   body: { name: 'Ada' },
@@ -905,7 +903,7 @@ var FunctionsClient = class {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+postgrest-js@2.103.0/node_modules/@supabase/postgrest-js/dist/index.mjs
+// ../../node_modules/.pnpm/@supabase+postgrest-js@2.106.1/node_modules/@supabase/postgrest-js/dist/index.mjs
 var DEFAULT_MAX_RETRIES = 3;
 var getRetryDelay = (attemptIndex) => Math.min(1e3 * 2 ** attemptIndex, 3e4);
 var RETRYABLE_STATUS_CODES = [520, 503];
@@ -972,25 +970,23 @@ var PostgrestBuilder = class {
   /**
   * Creates a builder configured for a specific PostgREST request.
   *
-  * @example
+  * @example Using supabase-js (recommended)
   * ```ts
-  * import { PostgrestQueryBuilder } from '@supabase/postgrest-js'
+  * import { createClient } from '@supabase/supabase-js'
   *
-  * const builder = new PostgrestQueryBuilder(
-  *   new URL('https://xyzcompany.supabase.co/rest/v1/users'),
-  *   { headers: new Headers({ apikey: 'public-anon-key' }) }
-  * )
+  * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
+  * const { data, error } = await supabase.from('users').select('*')
   * ```
   *
   * @category Database
   *
-  * @example Creating a Postgrest query builder
+  * @example Standalone import for bundle-sensitive environments
   * ```ts
   * import { PostgrestQueryBuilder } from '@supabase/postgrest-js'
   *
   * const builder = new PostgrestQueryBuilder(
   *   new URL('https://xyzcompany.supabase.co/rest/v1/users'),
-  *   { headers: new Headers({ apikey: 'public-anon-key' }) }
+  *   { headers: new Headers({ apikey: 'your-publishable-key' }) }
   * )
   * ```
   */
@@ -1033,6 +1029,7 @@ var PostgrestBuilder = class {
   * {@link https://docs.postgrest.org/en/stable/references/api/resource_representation.html#stripped-nulls}
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @example With `select()`
   * ```ts
@@ -1134,7 +1131,7 @@ var PostgrestBuilder = class {
           res$1 = await _fetch(_this.url.toString(), {
             method: _this.method,
             headers: requestHeaders,
-            body: JSON.stringify(_this.body),
+            body: JSON.stringify(_this.body, (_, value) => typeof value === "bigint" ? value.toString() : value),
             signal: _this.signal
           });
         } catch (fetchError) {
@@ -1305,6 +1302,7 @@ ${cause.stack}`;
   * @returns A PostgrestBuilder instance with the new type
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @example Complete Override type of successful response
   * ```ts
@@ -1360,7 +1358,7 @@ ${cause.stack}`;
   * let x: typeof data // CountryRowProperties & { status: "A" | "B" } | null
   * ```
   *
-  * @example Example 5
+  * @example Merge vs replace existing types
   * ```typescript
   * // Merge with existing types (default behavior)
   * const query = supabase
@@ -1390,6 +1388,7 @@ var PostgrestTransformBuilder = class extends PostgrestBuilder {
   * @param columns - The columns to retrieve, separated by commas
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @example With `upsert()`
   * ```ts
@@ -1454,6 +1453,7 @@ var PostgrestTransformBuilder = class extends PostgrestBuilder {
   * instead
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @example With `select()`
   * ```ts
@@ -1640,6 +1640,7 @@ var PostgrestTransformBuilder = class extends PostgrestBuilder {
   * instead
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @example With `select()`
   * ```ts
@@ -1749,6 +1750,7 @@ var PostgrestTransformBuilder = class extends PostgrestBuilder {
   * instead
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @example With `select()`
   * ```ts
@@ -1800,6 +1802,7 @@ var PostgrestTransformBuilder = class extends PostgrestBuilder {
   * @param signal - The AbortSignal to use for the fetch request
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @remarks
   * You can use this to set a timeout for the request.
@@ -1870,6 +1873,7 @@ var PostgrestTransformBuilder = class extends PostgrestBuilder {
   * returns an error.
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @example With `select()`
   * ```ts
@@ -1915,6 +1919,7 @@ var PostgrestTransformBuilder = class extends PostgrestBuilder {
   * this returns an error.
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @example With `select()`
   * ```ts
@@ -1954,6 +1959,7 @@ var PostgrestTransformBuilder = class extends PostgrestBuilder {
   * Return `data` as a string in CSV format.
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @exampleDescription Return data as CSV
   * By default, the data is returned in JSON format, but can also be returned as Comma Separated Values.
@@ -2027,6 +2033,7 @@ var PostgrestTransformBuilder = class extends PostgrestBuilder {
   * or `"json"`
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @exampleDescription Get the execution plan
   * By default, the data is returned in TEXT format, but can also be returned as JSON by using the `format` parameter.
@@ -2128,6 +2135,7 @@ var PostgrestTransformBuilder = class extends PostgrestBuilder {
   * @deprecated Use overrideTypes<yourType, { merge: false }>() method at the end of your call chain instead
   *
   * @category Database
+  * @subcategory Using modifiers
   *
   * @remarks
   * - Deprecated: use overrideTypes method instead
@@ -2187,6 +2195,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The value to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example With `select()`
   * ```ts
@@ -2230,10 +2239,14 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   /**
   * Match only rows where `column` is not equal to `value`.
   *
+  * This filter does not include rows where `column` is `NULL`. To match null
+  * values, use `.is(column, null)` instead.
+  *
   * @param column - The column to filter on
   * @param value - The value to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example With `select()`
   * ```ts
@@ -2285,6 +2298,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The value to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @exampleDescription With `select()`
   * When using [reserved words](https://www.postgresql.org/docs/current/sql-keywords-appendix.html) for column names you need
@@ -2336,6 +2350,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The value to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example With `select()`
   * ```ts
@@ -2387,6 +2402,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The value to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example With `select()`
   * ```ts
@@ -2434,6 +2450,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The value to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example With `select()`
   * ```ts
@@ -2485,6 +2502,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param pattern - The pattern to match with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example With `select()`
   * ```ts
@@ -2532,6 +2550,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param patterns - The patterns to match with
   *
   * @category Database
+  * @subcategory Using filters
   */
   likeAllOf(column, patterns) {
     this.url.searchParams.append(column, `like(all).{${patterns.join(",")}}`);
@@ -2544,6 +2563,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param patterns - The patterns to match with
   *
   * @category Database
+  * @subcategory Using filters
   */
   likeAnyOf(column, patterns) {
     this.url.searchParams.append(column, `like(any).{${patterns.join(",")}}`);
@@ -2556,6 +2576,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param pattern - The pattern to match with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example With `select()`
   * ```ts
@@ -2603,6 +2624,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param patterns - The patterns to match with
   *
   * @category Database
+  * @subcategory Using filters
   */
   ilikeAllOf(column, patterns) {
     this.url.searchParams.append(column, `ilike(all).{${patterns.join(",")}}`);
@@ -2615,6 +2637,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param patterns - The patterns to match with
   *
   * @category Database
+  * @subcategory Using filters
   */
   ilikeAnyOf(column, patterns) {
     this.url.searchParams.append(column, `ilike(any).{${patterns.join(",")}}`);
@@ -2655,6 +2678,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The value to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @exampleDescription Checking for nullness, true or false
   * Using the `eq()` filter doesn't work when filtering for `null`.
@@ -2720,6 +2744,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param values - The values array to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example With `select()`
   * ```ts
@@ -2790,6 +2815,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The jsonb, array, or range value to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example On array columns
   * ```ts
@@ -2924,6 +2950,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The jsonb, array, or range value to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example On array columns
   * ```ts
@@ -3059,6 +3086,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param range - The range to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @exampleDescription With `select()`
   * Postgres supports a number of [range
@@ -3119,6 +3147,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param range - The range to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @exampleDescription With `select()`
   * Postgres supports a number of [range
@@ -3178,6 +3207,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param range - The range to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @exampleDescription With `select()`
   * Postgres supports a number of [range
@@ -3237,6 +3267,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param range - The range to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @exampleDescription With `select()`
   * Postgres supports a number of [range
@@ -3297,6 +3328,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param range - The range to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @exampleDescription With `select()`
   * Postgres supports a number of [range
@@ -3355,6 +3387,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The array or range value to filter with
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example On array columns
   * ```ts
@@ -3454,6 +3487,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param options.type - Change how the `query` text is interpreted
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @remarks
   * - For more information, see [Postgres full text search](/docs/guides/database/full-text-search).
@@ -3563,6 +3597,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * to their filter values
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @example With `select()`
   * ```ts
@@ -3618,6 +3653,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The value to filter with, following PostgREST syntax
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @remarks
   * not() expects you to use the raw PostgREST syntax for the filter values.
@@ -3682,6 +3718,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param options.foreignTable - Deprecated, use `referencedTable` instead
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @remarks
   * or() expects you to use the raw PostgREST syntax for the filter names and values.
@@ -3835,6 +3872,7 @@ var PostgrestFilterBuilder = class extends PostgrestTransformBuilder {
   * @param value - The value to filter with, following PostgREST syntax
   *
   * @category Database
+  * @subcategory Using filters
   *
   * @remarks
   * filter() expects you to use the raw PostgREST syntax for the filter values.
@@ -3952,13 +3990,21 @@ var PostgrestQueryBuilder = class {
   * @param options.urlLengthLimit - Maximum URL length before warning
   * @param options.retry - Enable automatic retries for transient errors (default: true)
   *
-  * @example Creating a Postgrest query builder
+  * @example Using supabase-js (recommended)
+  * ```ts
+  * import { createClient } from '@supabase/supabase-js'
+  *
+  * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
+  * const { data, error } = await supabase.from('users').select('*')
+  * ```
+  *
+  * @example Standalone import for bundle-sensitive environments
   * ```ts
   * import { PostgrestQueryBuilder } from '@supabase/postgrest-js'
   *
   * const query = new PostgrestQueryBuilder(
   *   new URL('https://xyzcompany.supabase.co/rest/v1/users'),
-  *   { headers: { apikey: 'public-anon-key' }, retry: true }
+  *   { headers: { apikey: 'your-publishable-key' }, retry: true }
   * )
   * ```
   */
@@ -5504,15 +5550,12 @@ var PostgrestClient = class PostgrestClient2 {
   *   When enabled, idempotent requests (GET, HEAD, OPTIONS) that fail with network
   *   errors or HTTP 503/520 responses will be automatically retried up to 3 times
   *   with exponential backoff (1s, 2s, 4s). Defaults to `true`.
-  * @example
+  * @example Using supabase-js (recommended)
   * ```ts
-  * import { PostgrestClient } from '@supabase/postgrest-js'
+  * import { createClient } from '@supabase/supabase-js'
   *
-  * const postgrest = new PostgrestClient('https://xyzcompany.supabase.co/rest/v1', {
-  *   headers: { apikey: 'public-anon-key' },
-  *   schema: 'public',
-  *   timeout: 30000, // 30 second timeout
-  * })
+  * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
+  * const { data, error } = await supabase.from('profiles').select('*')
   * ```
   *
   * @category Database
@@ -5521,25 +5564,14 @@ var PostgrestClient = class PostgrestClient2 {
   * - A `timeout` option (in milliseconds) can be set to automatically abort requests that take too long.
   * - A `urlLengthLimit` option (default: 8000) can be set to control when URL length warnings are included in error messages for aborted requests.
   *
-  * @example Creating a Postgrest client
-  * ```ts
-  * import { PostgrestClient } from '@supabase/postgrest-js'
-  *
-  * const postgrest = new PostgrestClient('https://xyzcompany.supabase.co/rest/v1', {
-  *   headers: { apikey: 'public-anon-key' },
-  *   schema: 'public',
-  * })
-  * ```
-  *
-  * @example With timeout
+  * @example Standalone import for bundle-sensitive environments
   * ```ts
   * import { PostgrestClient } from '@supabase/postgrest-js'
   *
   * const postgrest = new PostgrestClient('https://xyzcompany.supabase.co/rest/v1', {
-  *   headers: { apikey: 'public-anon-key' },
+  *   headers: { apikey: 'your-publishable-key' },
   *   schema: 'public',
   *   timeout: 30000, // 30 second timeout
-  *   retry: false, // Disable automatic retries
   * })
   * ```
   */
@@ -5808,7 +5840,7 @@ var PostgrestClient = class PostgrestClient2 {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/lib/websocket-factory.js
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/lib/websocket-factory.js
 var WebSocketFactory = class {
   /**
    * Static-only utility – prevent instantiation.
@@ -5818,22 +5850,24 @@ var WebSocketFactory = class {
   static detectEnvironment() {
     var _a;
     if (typeof WebSocket !== "undefined") {
-      return { type: "native", constructor: WebSocket };
+      return { type: "native", wsConstructor: WebSocket };
     }
-    if (typeof globalThis !== "undefined" && typeof globalThis.WebSocket !== "undefined") {
-      return { type: "native", constructor: globalThis.WebSocket };
+    const gt = globalThis;
+    if (typeof globalThis !== "undefined" && typeof gt.WebSocket !== "undefined") {
+      return { type: "native", wsConstructor: gt.WebSocket };
     }
-    if (typeof global !== "undefined" && typeof global.WebSocket !== "undefined") {
-      return { type: "native", constructor: global.WebSocket };
+    const gl = typeof global !== "undefined" ? global : void 0;
+    if (gl && typeof gl.WebSocket !== "undefined") {
+      return { type: "native", wsConstructor: gl.WebSocket };
     }
-    if (typeof globalThis !== "undefined" && typeof globalThis.WebSocketPair !== "undefined" && typeof globalThis.WebSocket === "undefined") {
+    if (typeof globalThis !== "undefined" && typeof gt.WebSocketPair !== "undefined" && typeof globalThis.WebSocket === "undefined") {
       return {
         type: "cloudflare",
         error: "Cloudflare Workers detected. WebSocket clients are not supported in Cloudflare Workers.",
         workaround: "Use Cloudflare Workers WebSocket API for server-side WebSocket handling, or deploy to a different runtime."
       };
     }
-    if (typeof globalThis !== "undefined" && globalThis.EdgeRuntime || typeof navigator !== "undefined" && ((_a = navigator.userAgent) === null || _a === void 0 ? void 0 : _a.includes("Vercel-Edge"))) {
+    if (typeof globalThis !== "undefined" && gt.EdgeRuntime || typeof navigator !== "undefined" && ((_a = navigator.userAgent) === null || _a === void 0 ? void 0 : _a.includes("Vercel-Edge"))) {
       return {
         type: "unsupported",
         error: "Edge runtime detected (Vercel Edge/Netlify Edge). WebSockets are not supported in edge functions.",
@@ -5848,7 +5882,7 @@ var WebSocketFactory = class {
         const nodeVersion = parseInt(versionString.replace(/^v/, "").split(".")[0]);
         if (nodeVersion >= 22) {
           if (typeof globalThis.WebSocket !== "undefined") {
-            return { type: "native", constructor: globalThis.WebSocket };
+            return { type: "native", wsConstructor: globalThis.WebSocket };
           }
           return {
             type: "unsupported",
@@ -5886,8 +5920,8 @@ var WebSocketFactory = class {
    */
   static getWebSocketConstructor() {
     const env = this.detectEnvironment();
-    if (env.constructor) {
-      return env.constructor;
+    if (env.wsConstructor) {
+      return env.wsConstructor;
     }
     let errorMessage = env.error || "WebSocket not supported in this environment.";
     if (env.workaround) {
@@ -5921,10 +5955,10 @@ Suggested solution: ${env.workaround}`;
 };
 var websocket_factory_default = WebSocketFactory;
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/lib/version.js
-var version = "2.103.0";
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/lib/version.js
+var version = "2.106.1";
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/lib/constants.js
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/lib/constants.js
 var DEFAULT_VERSION = `realtime-js/${version}`;
 var VSN_1_0_0 = "1.0.0";
 var VSN_2_0_0 = "2.0.0";
@@ -5953,7 +5987,7 @@ var CONNECTION_STATE = {
   closed: "closed"
 };
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/lib/serializer.js
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/lib/serializer.js
 var Serializer = class {
   constructor(allowedMetadataKeys) {
     this.HEADER_LENGTH = 1;
@@ -6093,7 +6127,7 @@ var Serializer = class {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/lib/transformers.js
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/lib/transformers.js
 var PostgresTypes;
 (function(PostgresTypes2) {
   PostgresTypes2["abstime"] = "abstime";
@@ -6256,7 +6290,7 @@ var httpEndpointURL = (socketUrl) => {
   return wsUrl.href;
 };
 
-// ../../node_modules/.pnpm/@supabase+phoenix@0.4.0/node_modules/@supabase/phoenix/priv/static/phoenix.mjs
+// ../../node_modules/.pnpm/@supabase+phoenix@0.4.2/node_modules/@supabase/phoenix/priv/static/phoenix.mjs
 var closure = (value) => {
   if (typeof value === "function") {
     return (
@@ -7380,7 +7414,12 @@ var Socket = class {
     this.primaryPassedHealthCheck = false;
     this.longPollFallbackMs = opts.longPollFallbackMs;
     this.fallbackTimer = null;
-    this.sessionStore = opts.sessionStorage || global2 && global2.sessionStorage;
+    let envSessionStorage = null;
+    try {
+      envSessionStorage = global2 && global2.sessionStorage;
+    } catch {
+    }
+    this.sessionStore = opts.sessionStorage || envSessionStorage;
     this.establishedConnections = 0;
     this.defaultEncoder = serializer_default.encode.bind(serializer_default);
     this.defaultDecoder = serializer_default.decode.bind(serializer_default);
@@ -7760,7 +7799,7 @@ var Socket = class {
       } catch (e) {
         this.log("error", "error in heartbeat callback", e);
       }
-      this.triggerChanError();
+      this.triggerChanError(new Error("heartbeat timeout"));
       this.closeWasClean = false;
       this.teardown(() => this.reconnectTimer.scheduleTimeout(), WS_CLOSE_NORMAL, "heartbeat timeout");
     }
@@ -7825,7 +7864,7 @@ var Socket = class {
     if (this.conn) this.conn.onclose = () => {
     };
     if (this.hasLogger()) this.log("transport", "close", event);
-    this.triggerChanError();
+    this.triggerChanError(event);
     this.clearHeartbeats();
     if (!this.closeWasClean) {
       this.reconnectTimer.scheduleTimeout();
@@ -7837,21 +7876,22 @@ var Socket = class {
    * @param {Event} error
    */
   onConnError(error) {
-    if (this.hasLogger()) this.log("transport", error);
+    if (this.hasLogger()) this.log("transport", "error", error);
     let transportBefore = this.transport;
     let establishedBefore = this.establishedConnections;
     this.triggerStateCallbacks("error", error, transportBefore, establishedBefore);
     if (transportBefore === this.transport || establishedBefore > 0) {
-      this.triggerChanError();
+      this.triggerChanError(error);
     }
   }
   /**
    * @private
+   * @param {unknown} [reason] underlying close/error event forwarded to channel error listeners
    */
-  triggerChanError() {
+  triggerChanError(reason) {
     this.channels.forEach((channel) => {
       if (!(channel.isErrored() || channel.isLeaving() || channel.isClosed())) {
-        channel.trigger(CHANNEL_EVENTS2.error);
+        channel.trigger(CHANNEL_EVENTS2.error, reason);
       }
     });
   }
@@ -8025,7 +8065,7 @@ var Socket = class {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/phoenix/presenceAdapter.js
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/phoenix/presenceAdapter.js
 var PresenceAdapter = class _PresenceAdapter {
   constructor(channel, opts) {
     const phoenixOptions = phoenixPresenceOptions(opts);
@@ -8115,7 +8155,7 @@ function parseCurrentPresences(currentPresences) {
   return (currentPresences === null || currentPresences === void 0 ? void 0 : currentPresences.metas) ? transformState(currentPresences) : [];
 }
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/RealtimePresence.js
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/RealtimePresence.js
 var REALTIME_PRESENCE_LISTEN_EVENTS;
 (function(REALTIME_PRESENCE_LISTEN_EVENTS2) {
   REALTIME_PRESENCE_LISTEN_EVENTS2["SYNC"] = "sync";
@@ -8149,7 +8189,26 @@ var RealtimePresence = class {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/phoenix/channelAdapter.js
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/lib/normalizeChannelError.js
+function normalizeChannelError(reason) {
+  if (reason instanceof Error) {
+    return reason;
+  }
+  if (typeof reason === "string") {
+    return new Error(reason);
+  }
+  if (reason && typeof reason === "object") {
+    const obj = reason;
+    if (typeof obj.code === "number") {
+      const detail = typeof obj.reason === "string" && obj.reason ? ` (${obj.reason})` : "";
+      return new Error(`socket closed: ${obj.code}${detail}`, { cause: reason });
+    }
+    return new Error("channel error: transport failure", { cause: reason });
+  }
+  return new Error("channel error: connection lost");
+}
+
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/phoenix/channelAdapter.js
 var ChannelAdapter = class {
   constructor(socket, topic, params) {
     const phoenixParams = phoenixChannelParams(params);
@@ -8197,7 +8256,7 @@ var ChannelAdapter = class {
     try {
       push = this.channel.push(event, payload, timeout);
     } catch (error) {
-      throw `tried to push '${event}' to '${this.channel.topic}' before joining. Use channel.subscribe() before pushing events`;
+      throw new Error(`tried to push '${event}' to '${this.channel.topic}' before joining. Use channel.subscribe() before pushing events`);
     }
     if (this.channel.pushBuffer.length > MAX_PUSH_BUFFER_SIZE) {
       const removedPush = this.channel.pushBuffer.shift();
@@ -8248,7 +8307,7 @@ function phoenixChannelParams(options) {
   };
 }
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/RealtimeChannel.js
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/RealtimeChannel.js
 var REALTIME_POSTGRES_CHANGES_LISTEN_EVENT;
 (function(REALTIME_POSTGRES_CHANGES_LISTEN_EVENT2) {
   REALTIME_POSTGRES_CHANGES_LISTEN_EVENT2["ALL"] = "*";
@@ -8298,12 +8357,23 @@ var RealtimeChannel = class _RealtimeChannel {
    *
    * @category Realtime
    *
-   * @example Example for a public channel
+   * @example Using supabase-js (recommended)
+   * ```ts
+   * import { createClient } from '@supabase/supabase-js'
+   *
+   * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
+   * const channel = supabase.channel('room1')
+   * channel
+   *   .on('broadcast', { event: 'cursor-pos' }, (payload) => console.log(payload))
+   *   .subscribe()
+   * ```
+   *
+   * @example Standalone import for bundle-sensitive environments
    * ```ts
    * import RealtimeClient from '@supabase/realtime-js'
    *
    * const client = new RealtimeClient('https://xyzcompany.supabase.co/realtime/v1', {
-   *   params: { apikey: 'public-anon-key' },
+   *   params: { apikey: 'your-publishable-key' },
    * })
    * const channel = new RealtimeChannel('realtime:public:messages', { config: {} }, client)
    * ```
@@ -8329,7 +8399,7 @@ var RealtimeChannel = class _RealtimeChannel {
     this.broadcastEndpointURL = httpEndpointURL(this.socket.socketAdapter.endPointURL());
     this.private = this.params.config.private || false;
     if (!this.private && ((_b = (_a = this.params.config) === null || _a === void 0 ? void 0 : _a.broadcast) === null || _b === void 0 ? void 0 : _b.replay)) {
-      throw `tried to use replay on public channel '${this.topic}'. It must be a private channel.`;
+      throw new Error(`tried to use replay on public channel '${this.topic}'. It must be a private channel.`);
     }
   }
   /**
@@ -8356,7 +8426,7 @@ var RealtimeChannel = class _RealtimeChannel {
         accessTokenPayload.access_token = this.socket.accessTokenValue;
       }
       this._onError((reason) => {
-        callback === null || callback === void 0 ? void 0 : callback(REALTIME_SUBSCRIBE_STATES.CHANNEL_ERROR, reason);
+        callback === null || callback === void 0 ? void 0 : callback(REALTIME_SUBSCRIBE_STATES.CHANNEL_ERROR, normalizeChannelError(reason));
       });
       this._onClose(() => callback === null || callback === void 0 ? void 0 : callback(REALTIME_SUBSCRIBE_STATES.CLOSED));
       this.updateJoinPayload(Object.assign({ config }, accessTokenPayload));
@@ -8372,7 +8442,8 @@ var RealtimeChannel = class _RealtimeChannel {
         this._updatePostgresBindings(postgres_changes2, callback);
       }).receive("error", (error) => {
         this.state = CHANNEL_STATES.errored;
-        callback === null || callback === void 0 ? void 0 : callback(REALTIME_SUBSCRIBE_STATES.CHANNEL_ERROR, new Error(JSON.stringify(Object.values(error).join(", ") || "error")));
+        const message = Object.values(error).join(", ") || "error";
+        callback === null || callback === void 0 ? void 0 : callback(REALTIME_SUBSCRIBE_STATES.CHANNEL_ERROR, new Error(message, { cause: error }));
       }).receive("timeout", () => {
         callback === null || callback === void 0 ? void 0 : callback(REALTIME_SUBSCRIBE_STATES.TIMED_OUT);
       });
@@ -8621,7 +8692,7 @@ var RealtimeChannel = class _RealtimeChannel {
   async httpSend(event, payload, opts = {}) {
     var _a;
     if (payload === void 0 || payload === null) {
-      return Promise.reject("Payload is required for httpSend()");
+      return Promise.reject(new Error("Payload is required for httpSend()"));
     }
     const headers = {
       apikey: this.socket.apiKey ? this.socket.apiKey : "",
@@ -8670,6 +8741,8 @@ var RealtimeChannel = class _RealtimeChannel {
    * @remarks
    * - When using REST you don't need to subscribe to the channel
    * - REST calls are only available from 2.37.0 onwards
+   * - If you create a channel only to send a REST broadcast, remove it from
+   *   the client when the send completes
    *
    * @example Send a message via websocket
    * ```js
@@ -8693,9 +8766,13 @@ var RealtimeChannel = class _RealtimeChannel {
    *
    * @example Send a message via REST
    * ```js
-   * supabase
-   *   .channel('room1')
-   *   .httpSend('cursor-pos', { x: Math.random(), y: Math.random() })
+   * const channel = supabase.channel('room1')
+   *
+   * try {
+   *   await channel.httpSend('cursor-pos', { x: Math.random(), y: Math.random() })
+   * } finally {
+   *   await supabase.removeChannel(channel)
+   * }
    * ```
    */
   async send(args, opts = {}) {
@@ -8729,7 +8806,7 @@ var RealtimeChannel = class _RealtimeChannel {
         await ((_b = response.body) === null || _b === void 0 ? void 0 : _b.cancel());
         return response.ok ? "ok" : "error";
       } catch (error) {
-        if (error.name === "AbortError") {
+        if (error instanceof Error && error.name === "AbortError") {
           return "timed out";
         } else {
           return "error";
@@ -8911,7 +8988,7 @@ var RealtimeChannel = class _RealtimeChannel {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/phoenix/socketAdapter.js
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/phoenix/socketAdapter.js
 var SocketAdapter = class {
   constructor(endPoint, options) {
     this.socket = new Socket(endPoint, options);
@@ -9020,7 +9097,7 @@ var SocketAdapter = class {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+realtime-js@2.103.0/node_modules/@supabase/realtime-js/dist/module/RealtimeClient.js
+// ../../node_modules/.pnpm/@supabase+realtime-js@2.106.1/node_modules/@supabase/realtime-js/dist/module/RealtimeClient.js
 var CONNECTION_TIMEOUTS = {
   HEARTBEAT_INTERVAL: 25e3,
   RECONNECT_DELAY: 10,
@@ -9028,6 +9105,39 @@ var CONNECTION_TIMEOUTS = {
 };
 var RECONNECT_INTERVALS = [1e3, 2e3, 5e3, 1e4];
 var DEFAULT_RECONNECT_FALLBACK = 1e4;
+function createMemorySessionStorage() {
+  const store = /* @__PURE__ */ new Map();
+  return {
+    get length() {
+      return store.size;
+    },
+    clear() {
+      store.clear();
+    },
+    getItem(key) {
+      return store.has(key) ? store.get(key) : null;
+    },
+    key(index) {
+      var _a;
+      return (_a = Array.from(store.keys())[index]) !== null && _a !== void 0 ? _a : null;
+    },
+    removeItem(key) {
+      store.delete(key);
+    },
+    setItem(key, value) {
+      store.set(key, String(value));
+    }
+  };
+}
+function resolveSessionStorage() {
+  try {
+    if (typeof globalThis !== "undefined" && globalThis.sessionStorage) {
+      return globalThis.sessionStorage;
+    }
+  } catch (_a) {
+  }
+  return createMemorySessionStorage();
+}
 var WORKER_SCRIPT = `
   addEventListener("message", (e) => {
     if (e.data.event === "start") {
@@ -9105,12 +9215,23 @@ var RealtimeClient = class {
    *
    * @category Realtime
    *
-   * @example Example for a public channel
+   * @example Using supabase-js (recommended)
+   * ```ts
+   * import { createClient } from '@supabase/supabase-js'
+   *
+   * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
+   * const channel = supabase.channel('room1')
+   * channel
+   *   .on('broadcast', { event: 'cursor-pos' }, (payload) => console.log(payload))
+   *   .subscribe()
+   * ```
+   *
+   * @example Standalone import for bundle-sensitive environments
    * ```ts
    * import RealtimeClient from '@supabase/realtime-js'
    *
    * const client = new RealtimeClient('https://xyzcompany.supabase.co/realtime/v1', {
-   *   params: { apikey: 'public-anon-key' },
+   *   params: { apikey: 'your-publishable-key' },
    * })
    * client.connect()
    * ```
@@ -9130,6 +9251,8 @@ var RealtimeClient = class {
     this._authPromise = null;
     this._workerHeartbeatTimer = void 0;
     this._pendingWorkerHeartbeatRef = null;
+    this._pendingDisconnectTimer = null;
+    this._disconnectOnEmptyChannelsAfterMs = 0;
     this._resolveFetch = (customFetch) => {
       if (customFetch) {
         return (...args) => customFetch(...args);
@@ -9200,6 +9323,7 @@ Option 2: Install and provide the "ws" package:
    * @category Realtime
    */
   async disconnect(code, reason) {
+    this._cancelPendingDisconnect();
     if (this.isDisconnecting()) {
       return "ok";
     }
@@ -9227,9 +9351,6 @@ Option 2: Install and provide the "ws" package:
     if (status === "ok") {
       channel.teardown();
     }
-    if (this.channels.length === 0) {
-      this.disconnect();
-    }
     return status;
   }
   /**
@@ -9244,7 +9365,7 @@ Option 2: Install and provide the "ws" package:
       return result2;
     });
     const result = await Promise.all(promises);
-    this.disconnect();
+    await this.disconnect();
     return result;
   }
   /**
@@ -9303,6 +9424,7 @@ Option 2: Install and provide the "ws" package:
     const exists = this.getChannels().find((c) => c.topic === realtimeTopic);
     if (!exists) {
       const chan = new RealtimeChannel(`realtime:${topic}`, params, this);
+      this._cancelPendingDisconnect();
       this.channels.push(chan);
       return chan;
     } else {
@@ -9391,6 +9513,35 @@ Option 2: Install and provide the "ws" package:
    */
   _remove(channel) {
     this.channels = this.channels.filter((c) => c.topic !== channel.topic);
+    if (this.channels.length === 0) {
+      this.log("transport", "no channels remaining, scheduling disconnect");
+      this._schedulePendingDisconnect();
+    }
+  }
+  /** @internal */
+  _schedulePendingDisconnect() {
+    this._cancelPendingDisconnect();
+    if (this._disconnectOnEmptyChannelsAfterMs === 0) {
+      this.log("transport", "disconnecting immediately - no channels");
+      this.disconnect();
+      return;
+    }
+    this._pendingDisconnectTimer = setTimeout(() => {
+      this._pendingDisconnectTimer = null;
+      if (this.channels.length === 0) {
+        this.log("transport", "deferred disconnect fired - no channels, disconnecting");
+        this.disconnect();
+      }
+    }, this._disconnectOnEmptyChannelsAfterMs);
+    this.log("transport", `deferred disconnect scheduled in ${this._disconnectOnEmptyChannelsAfterMs}ms`);
+  }
+  /** @internal */
+  _cancelPendingDisconnect() {
+    if (this._pendingDisconnectTimer !== null) {
+      this.log("transport", "pending disconnect cancelled - channel activity detected");
+      clearTimeout(this._pendingDisconnectTimer);
+      this._pendingDisconnectTimer = null;
+    }
   }
   /**
    * Perform the actual auth operation
@@ -9541,22 +9692,24 @@ Option 2: Install and provide the "ws" package:
    * @internal
    */
   _initializeOptions(options) {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
     this.worker = (_a = options === null || options === void 0 ? void 0 : options.worker) !== null && _a !== void 0 ? _a : false;
     this.accessToken = (_b = options === null || options === void 0 ? void 0 : options.accessToken) !== null && _b !== void 0 ? _b : null;
     const result = {};
     result.timeout = (_c = options === null || options === void 0 ? void 0 : options.timeout) !== null && _c !== void 0 ? _c : DEFAULT_TIMEOUT;
     result.heartbeatIntervalMs = (_d = options === null || options === void 0 ? void 0 : options.heartbeatIntervalMs) !== null && _d !== void 0 ? _d : CONNECTION_TIMEOUTS.HEARTBEAT_INTERVAL;
-    result.transport = (_e = options === null || options === void 0 ? void 0 : options.transport) !== null && _e !== void 0 ? _e : websocket_factory_default.getWebSocketConstructor();
+    this._disconnectOnEmptyChannelsAfterMs = (_e = options === null || options === void 0 ? void 0 : options.disconnectOnEmptyChannelsAfterMs) !== null && _e !== void 0 ? _e : 2 * ((_f = options === null || options === void 0 ? void 0 : options.heartbeatIntervalMs) !== null && _f !== void 0 ? _f : CONNECTION_TIMEOUTS.HEARTBEAT_INTERVAL);
+    result.transport = (_g = options === null || options === void 0 ? void 0 : options.transport) !== null && _g !== void 0 ? _g : websocket_factory_default.getWebSocketConstructor();
     result.params = options === null || options === void 0 ? void 0 : options.params;
     result.logger = options === null || options === void 0 ? void 0 : options.logger;
     result.heartbeatCallback = this._wrapHeartbeatCallback(options === null || options === void 0 ? void 0 : options.heartbeatCallback);
-    result.reconnectAfterMs = (_f = options === null || options === void 0 ? void 0 : options.reconnectAfterMs) !== null && _f !== void 0 ? _f : ((tries) => {
+    result.sessionStorage = (_h = options === null || options === void 0 ? void 0 : options.sessionStorage) !== null && _h !== void 0 ? _h : resolveSessionStorage();
+    result.reconnectAfterMs = (_j = options === null || options === void 0 ? void 0 : options.reconnectAfterMs) !== null && _j !== void 0 ? _j : ((tries) => {
       return RECONNECT_INTERVALS[tries - 1] || DEFAULT_RECONNECT_FALLBACK;
     });
     let defaultEncode;
     let defaultDecode;
-    const vsn = (_g = options === null || options === void 0 ? void 0 : options.vsn) !== null && _g !== void 0 ? _g : DEFAULT_VSN;
+    const vsn = (_k = options === null || options === void 0 ? void 0 : options.vsn) !== null && _k !== void 0 ? _k : DEFAULT_VSN;
     switch (vsn) {
       case VSN_1_0_0:
         defaultEncode = (payload, callback) => {
@@ -9574,8 +9727,8 @@ Option 2: Install and provide the "ws" package:
         throw new Error(`Unsupported serializer version: ${result.vsn}`);
     }
     result.vsn = vsn;
-    result.encode = (_h = options === null || options === void 0 ? void 0 : options.encode) !== null && _h !== void 0 ? _h : defaultEncode;
-    result.decode = (_j = options === null || options === void 0 ? void 0 : options.decode) !== null && _j !== void 0 ? _j : defaultDecode;
+    result.encode = (_l = options === null || options === void 0 ? void 0 : options.encode) !== null && _l !== void 0 ? _l : defaultEncode;
+    result.decode = (_m = options === null || options === void 0 ? void 0 : options.decode) !== null && _m !== void 0 ? _m : defaultDecode;
     result.beforeReconnect = this._reconnectAuth.bind(this);
     if ((options === null || options === void 0 ? void 0 : options.logLevel) || (options === null || options === void 0 ? void 0 : options.log_level)) {
       this.logLevel = options.logLevel || options.log_level;
@@ -10132,7 +10285,58 @@ var IcebergRestCatalog = class {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+storage-js@2.103.0/node_modules/@supabase/storage-js/dist/index.mjs
+// ../../node_modules/.pnpm/@supabase+storage-js@2.106.1/node_modules/@supabase/storage-js/dist/index.mjs
+function _typeof2(o) {
+  "@babel/helpers - typeof";
+  return _typeof2 = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(o$1) {
+    return typeof o$1;
+  } : function(o$1) {
+    return o$1 && "function" == typeof Symbol && o$1.constructor === Symbol && o$1 !== Symbol.prototype ? "symbol" : typeof o$1;
+  }, _typeof2(o);
+}
+function toPrimitive2(t, r) {
+  if ("object" != _typeof2(t) || !t) return t;
+  var e = t[Symbol.toPrimitive];
+  if (void 0 !== e) {
+    var i = e.call(t, r || "default");
+    if ("object" != _typeof2(i)) return i;
+    throw new TypeError("@@toPrimitive must return a primitive value.");
+  }
+  return ("string" === r ? String : Number)(t);
+}
+function toPropertyKey2(t) {
+  var i = toPrimitive2(t, "string");
+  return "symbol" == _typeof2(i) ? i : i + "";
+}
+function _defineProperty2(e, r, t) {
+  return (r = toPropertyKey2(r)) in e ? Object.defineProperty(e, r, {
+    value: t,
+    enumerable: true,
+    configurable: true,
+    writable: true
+  }) : e[r] = t, e;
+}
+function ownKeys2(e, r) {
+  var t = Object.keys(e);
+  if (Object.getOwnPropertySymbols) {
+    var o = Object.getOwnPropertySymbols(e);
+    r && (o = o.filter(function(r$1) {
+      return Object.getOwnPropertyDescriptor(e, r$1).enumerable;
+    })), t.push.apply(t, o);
+  }
+  return t;
+}
+function _objectSpread22(e) {
+  for (var r = 1; r < arguments.length; r++) {
+    var t = null != arguments[r] ? arguments[r] : {};
+    r % 2 ? ownKeys2(Object(t), true).forEach(function(r$1) {
+      _defineProperty2(e, r$1, t[r$1]);
+    }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys2(Object(t)).forEach(function(r$1) {
+      Object.defineProperty(e, r$1, Object.getOwnPropertyDescriptor(t, r$1));
+    });
+  }
+  return e;
+}
 var StorageError = class extends Error {
   constructor(message, namespace = "storage", status, statusCode) {
     super(message);
@@ -10142,6 +10346,14 @@ var StorageError = class extends Error {
     this.status = status;
     this.statusCode = statusCode;
   }
+  toJSON() {
+    return {
+      name: this.name,
+      message: this.message,
+      status: this.status,
+      statusCode: this.statusCode
+    };
+  }
 };
 function isStorageError(error) {
   return typeof error === "object" && error !== null && "__isStorageError" in error;
@@ -10154,12 +10366,7 @@ var StorageApiError = class extends StorageError {
     this.statusCode = statusCode;
   }
   toJSON() {
-    return {
-      name: this.name,
-      message: this.message,
-      status: this.status,
-      statusCode: this.statusCode
-    };
+    return _objectSpread22({}, super.toJSON());
   }
 };
 var StorageUnknownError = class extends StorageError {
@@ -10169,6 +10376,18 @@ var StorageUnknownError = class extends StorageError {
     this.originalError = originalError;
   }
 };
+function setHeader(headers, name, value) {
+  const result = _objectSpread22({}, headers);
+  const nameLower = name.toLowerCase();
+  for (const key of Object.keys(result)) if (key.toLowerCase() === nameLower) delete result[key];
+  result[nameLower] = value;
+  return result;
+}
+function normalizeHeaders(headers) {
+  const result = {};
+  for (const [key, value] of Object.entries(headers)) result[key.toLowerCase()] = value;
+  return result;
+}
 var resolveFetch2 = (customFetch) => {
   if (customFetch) return (...args) => customFetch(...args);
   return (...args) => fetch(...args);
@@ -10195,65 +10414,24 @@ var isValidBucketName = (bucketName) => {
   if (bucketName.includes("/") || bucketName.includes("\\")) return false;
   return /^[\w!.\*'() &$@=;:+,?-]+$/.test(bucketName);
 };
-function _typeof2(o) {
-  "@babel/helpers - typeof";
-  return _typeof2 = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(o$1) {
-    return typeof o$1;
-  } : function(o$1) {
-    return o$1 && "function" == typeof Symbol && o$1.constructor === Symbol && o$1 !== Symbol.prototype ? "symbol" : typeof o$1;
-  }, _typeof2(o);
-}
-function toPrimitive2(t, r) {
-  if ("object" != _typeof2(t) || !t) return t;
-  var e = t[Symbol.toPrimitive];
-  if (void 0 !== e) {
-    var i = e.call(t, r || "default");
-    if ("object" != _typeof2(i)) return i;
-    throw new TypeError("@@toPrimitive must return a primitive value.");
-  }
-  return ("string" === r ? String : Number)(t);
-}
-function toPropertyKey2(t) {
-  var i = toPrimitive2(t, "string");
-  return "symbol" == _typeof2(i) ? i : i + "";
-}
-function _defineProperty2(e, r, t) {
-  return (r = toPropertyKey2(r)) in e ? Object.defineProperty(e, r, {
-    value: t,
-    enumerable: true,
-    configurable: true,
-    writable: true
-  }) : e[r] = t, e;
-}
-function ownKeys2(e, r) {
-  var t = Object.keys(e);
-  if (Object.getOwnPropertySymbols) {
-    var o = Object.getOwnPropertySymbols(e);
-    r && (o = o.filter(function(r$1) {
-      return Object.getOwnPropertyDescriptor(e, r$1).enumerable;
-    })), t.push.apply(t, o);
-  }
-  return t;
-}
-function _objectSpread22(e) {
-  for (var r = 1; r < arguments.length; r++) {
-    var t = null != arguments[r] ? arguments[r] : {};
-    r % 2 ? ownKeys2(Object(t), true).forEach(function(r$1) {
-      _defineProperty2(e, r$1, t[r$1]);
-    }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys2(Object(t)).forEach(function(r$1) {
-      Object.defineProperty(e, r$1, Object.getOwnPropertyDescriptor(t, r$1));
-    });
-  }
-  return e;
-}
 var _getErrorMessage = (err) => {
-  var _err$error;
-  return err.msg || err.message || err.error_description || (typeof err.error === "string" ? err.error : (_err$error = err.error) === null || _err$error === void 0 ? void 0 : _err$error.message) || JSON.stringify(err);
+  if (typeof err === "object" && err !== null) {
+    const e = err;
+    if (typeof e.msg === "string") return e.msg;
+    if (typeof e.message === "string") return e.message;
+    if (typeof e.error_description === "string") return e.error_description;
+    if (typeof e.error === "string") return e.error;
+    if (typeof e.error === "object" && e.error !== null) {
+      const nested = e.error;
+      if (typeof nested.message === "string") return nested.message;
+    }
+  }
+  return JSON.stringify(err);
 };
 var handleError = async (error, reject, options, namespace) => {
-  if (error !== null && typeof error === "object" && typeof error.json === "function") {
+  if (error !== null && typeof error === "object" && "json" in error && typeof error.json === "function") {
     const responseError = error;
-    let status = parseInt(responseError.status, 10);
+    let status = parseInt(String(responseError.status), 10);
     if (!Number.isFinite(status)) status = 500;
     responseError.json().then((err) => {
       const statusCode = (err === null || err === void 0 ? void 0 : err.statusCode) || (err === null || err === void 0 ? void 0 : err.code) || status + "";
@@ -10275,18 +10453,12 @@ var _getRequestParams = (method, options, parameters, body) => {
     const headers = (options === null || options === void 0 ? void 0 : options.headers) || {};
     let contentType;
     for (const [key, value] of Object.entries(headers)) if (key.toLowerCase() === "content-type") contentType = value;
-    params.headers = setRequestHeader(headers, "Content-Type", (_contentType = contentType) !== null && _contentType !== void 0 ? _contentType : "application/json");
+    params.headers = setHeader(headers, "Content-Type", (_contentType = contentType) !== null && _contentType !== void 0 ? _contentType : "application/json");
     params.body = JSON.stringify(body);
   } else params.body = body;
   if (options === null || options === void 0 ? void 0 : options.duplex) params.duplex = options.duplex;
   return _objectSpread22(_objectSpread22({}, params), parameters);
 };
-function setRequestHeader(headers, name, value) {
-  const nextHeaders = _objectSpread22({}, headers);
-  for (const key of Object.keys(nextHeaders)) if (key.toLowerCase() === name.toLowerCase()) delete nextHeaders[key];
-  nextHeaders[name] = value;
-  return nextHeaders;
-}
 async function _handleRequest(fetcher, method, url, options, parameters, body, namespace) {
   return new Promise((resolve, reject) => {
     fetcher(url, _getRequestParams(method, options, parameters, body)).then((result) => {
@@ -10334,7 +10506,7 @@ var BaseApiClient = class {
   constructor(url, headers = {}, fetch$1, namespace = "storage") {
     this.shouldThrowOnError = false;
     this.url = url;
-    this.headers = Object.fromEntries(Object.entries(headers).map(([k, v]) => [k.toLowerCase(), v]));
+    this.headers = normalizeHeaders(headers);
     this.fetch = resolveFetch2(fetch$1);
     this.namespace = namespace;
   }
@@ -10357,7 +10529,7 @@ var BaseApiClient = class {
   * @returns this - For method chaining
   */
   setHeader(name, value) {
-    this.headers = _objectSpread22(_objectSpread22({}, this.headers), {}, { [name.toLowerCase()]: value });
+    this.headers = setHeader(this.headers, name, value);
     return this;
   }
   /**
@@ -10402,13 +10574,27 @@ var BaseApiClient = class {
     }
   }
 };
+var _Symbol$toStringTag$1;
+_Symbol$toStringTag$1 = Symbol.toStringTag;
 var StreamDownloadBuilder = class {
   constructor(downloadFn, shouldThrowOnError) {
     this.downloadFn = downloadFn;
     this.shouldThrowOnError = shouldThrowOnError;
+    this[_Symbol$toStringTag$1] = "StreamDownloadBuilder";
+    this.promise = null;
   }
   then(onfulfilled, onrejected) {
-    return this.execute().then(onfulfilled, onrejected);
+    return this.getPromise().then(onfulfilled, onrejected);
+  }
+  catch(onrejected) {
+    return this.getPromise().catch(onrejected);
+  }
+  finally(onfinally) {
+    return this.getPromise().finally(onfinally);
+  }
+  getPromise() {
+    if (!this.promise) this.promise = this.execute();
+    return this.promise;
   }
   async execute() {
     var _this = this;
@@ -10517,7 +10703,7 @@ var StorageFileApi = class extends BaseApiClient {
         if (metadata) headers["x-metadata"] = _this.toBase64(_this.encodeMetadata(metadata));
         if ((typeof ReadableStream !== "undefined" && body instanceof ReadableStream || body && typeof body === "object" && "pipe" in body && typeof body.pipe === "function") && !options.duplex) options.duplex = "half";
       }
-      if (fileOptions === null || fileOptions === void 0 ? void 0 : fileOptions.headers) headers = _objectSpread22(_objectSpread22({}, headers), fileOptions.headers);
+      if (fileOptions === null || fileOptions === void 0 ? void 0 : fileOptions.headers) for (const [key, value] of Object.entries(fileOptions.headers)) headers = setHeader(headers, key, value);
       const cleanPath = _this._removeEmptyFolders(path);
       const _path = _this._getFinalPath(cleanPath);
       const data = await (method == "PUT" ? put : post)(_this.fetch, `${_this.url}/object/${_path}`, body, _objectSpread22({ headers }, (options === null || options === void 0 ? void 0 : options.duplex) ? { duplex: options.duplex } : {}));
@@ -10531,7 +10717,8 @@ var StorageFileApi = class extends BaseApiClient {
   /**
   * Uploads a file to an existing bucket.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param path The file path, including the file name. Should be of the format `folder/subfolder/filename.png`. The bucket must already exist before attempting to upload.
   * @param fileBody The body of the file to be stored in the bucket.
   * @param fileOptions Optional file upload options including cacheControl, contentType, upsert, and metadata.
@@ -10585,7 +10772,8 @@ var StorageFileApi = class extends BaseApiClient {
   /**
   * Upload a file with a token generated from `createSignedUploadUrl`.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param path The file path, including the file name. Should be of the format `folder/subfolder/filename.png`. The bucket must already exist before attempting to upload.
   * @param token The token generated from `createSignedUploadUrl`
   * @param fileBody The body of the file to be stored in the bucket.
@@ -10628,22 +10816,28 @@ var StorageFileApi = class extends BaseApiClient {
     return _this3.handleOperation(async () => {
       let body;
       const options = _objectSpread22(_objectSpread22({}, DEFAULT_FILE_OPTIONS), fileOptions);
-      const headers = _objectSpread22(_objectSpread22({}, _this3.headers), { "x-upsert": String(options.upsert) });
+      let headers = _objectSpread22(_objectSpread22({}, _this3.headers), { "x-upsert": String(options.upsert) });
+      const metadata = options.metadata;
       if (typeof Blob !== "undefined" && fileBody instanceof Blob) {
         body = new FormData();
         body.append("cacheControl", options.cacheControl);
+        if (metadata) body.append("metadata", _this3.encodeMetadata(metadata));
         body.append("", fileBody);
       } else if (typeof FormData !== "undefined" && fileBody instanceof FormData) {
         body = fileBody;
-        body.append("cacheControl", options.cacheControl);
+        if (!body.has("cacheControl")) body.append("cacheControl", options.cacheControl);
+        if (metadata && !body.has("metadata")) body.append("metadata", _this3.encodeMetadata(metadata));
       } else {
         body = fileBody;
         headers["cache-control"] = `max-age=${options.cacheControl}`;
         headers["content-type"] = options.contentType;
+        if (metadata) headers["x-metadata"] = _this3.toBase64(_this3.encodeMetadata(metadata));
+        if ((typeof ReadableStream !== "undefined" && body instanceof ReadableStream || body && typeof body === "object" && "pipe" in body && typeof body.pipe === "function") && !options.duplex) options.duplex = "half";
       }
+      if (fileOptions === null || fileOptions === void 0 ? void 0 : fileOptions.headers) for (const [key, value] of Object.entries(fileOptions.headers)) headers = setHeader(headers, key, value);
       return {
         path: cleanPath,
-        fullPath: (await put(_this3.fetch, url.toString(), body, { headers })).Key
+        fullPath: (await put(_this3.fetch, url.toString(), body, _objectSpread22({ headers }, (options === null || options === void 0 ? void 0 : options.duplex) ? { duplex: options.duplex } : {}))).Key
       };
     });
   }
@@ -10652,7 +10846,8 @@ var StorageFileApi = class extends BaseApiClient {
   * Signed upload URLs can be used to upload files to the bucket without further authentication.
   * They are valid for 2 hours.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param path The file path, including the current file name. For example `folder/image.png`.
   * @param options.upsert If set to true, allows the file to be overwritten if it already exists.
   * @returns Promise with response containing signed upload URL, token, and path or error
@@ -10703,10 +10898,14 @@ var StorageFileApi = class extends BaseApiClient {
   /**
   * Replaces an existing file at the specified path with a new one.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param path The relative file path. Should be of the format `folder/subfolder/filename.png`. The bucket must already exist before attempting to update.
   * @param fileBody The body of the file to be stored in the bucket.
-  * @param fileOptions Optional file upload options including cacheControl, contentType, upsert, and metadata.
+  * @param fileOptions Optional file upload options including cacheControl, contentType, and metadata.
+  * **Note:** The `upsert` option has no effect here. `update()` always replaces the
+  * file at the given path, so the `x-upsert` header is not sent. To control upsert
+  * behavior, use `upload()` instead.
   * @returns Promise with response containing file path, id, and fullPath or error
   *
   * @example Update file
@@ -10716,8 +10915,7 @@ var StorageFileApi = class extends BaseApiClient {
   *   .storage
   *   .from('avatars')
   *   .update('public/avatar1.png', avatarFile, {
-  *     cacheControl: '3600',
-  *     upsert: true
+  *     cacheControl: '3600'
   *   })
   * ```
   *
@@ -10748,6 +10946,7 @@ var StorageFileApi = class extends BaseApiClient {
   * - RLS policy permissions required:
   *   - `buckets` table permissions: none
   *   - `objects` table permissions: `update` and `select`
+  * - `update()` always replaces the file at the given path regardless of the `upsert` option.
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   * - For React Native, using either `Blob`, `File` or `FormData` does not work as intended. Update file using `ArrayBuffer` from base64 file data instead, see example below.
   */
@@ -10757,7 +10956,8 @@ var StorageFileApi = class extends BaseApiClient {
   /**
   * Moves an existing file to a new path in the same bucket.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param fromPath The original file path, including the current file name. For example `folder/image.png`.
   * @param toPath The new file path, including the new file name. For example `folder/image-new.png`.
   * @param options The destination options.
@@ -10801,7 +11001,8 @@ var StorageFileApi = class extends BaseApiClient {
   /**
   * Copies an existing file to a new path in the same bucket.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param fromPath The original file path, including the current file name. For example `folder/image.png`.
   * @param toPath The new file path, including the new file name. For example `folder/image-copy.png`.
   * @param options The destination options.
@@ -10845,7 +11046,8 @@ var StorageFileApi = class extends BaseApiClient {
   /**
   * Creates a signed URL. Use a signed URL to share a file for a fixed amount of time.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param path The file path, including the current file name. For example `folder/image.png`.
   * @param expiresIn The number of seconds until the signed URL expires. For example, `60` for a URL which is valid for one minute.
   * @param options.download triggers the file as a download if set to true. Set this parameter as the name of the file if you want to trigger the download with a different filename.
@@ -10910,14 +11112,14 @@ var StorageFileApi = class extends BaseApiClient {
       if (options === null || options === void 0 ? void 0 : options.download) query.set("download", options.download === true ? "" : options.download);
       if ((options === null || options === void 0 ? void 0 : options.cacheNonce) != null) query.set("cacheNonce", String(options.cacheNonce));
       const queryString = query.toString();
-      const returnedPath = hasTransform && data.signedURL.includes("/object/sign/") ? data.signedURL.replace("/object/sign/", "/render/image/sign/") : data.signedURL;
-      return { signedUrl: encodeURI(`${_this8.url}${returnedPath}${queryString ? `&${queryString}` : ""}`) };
+      return { signedUrl: encodeURI(`${_this8.url}${data.signedURL}${queryString ? `&${queryString}` : ""}`) };
     });
   }
   /**
   * Creates multiple signed URLs. Use a signed URL to share a file for a fixed amount of time.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param paths The file paths to be downloaded, including the current file names. For example `['folder/image.png', 'folder2/image2.png']`.
   * @param expiresIn The number of seconds until the signed URLs expire. For example, `60` for URLs which are valid for one minute.
   * @param options.download triggers the file as a download if set to true. Set this parameter as the name of the file if you want to trigger the download with a different filename.
@@ -10976,7 +11178,8 @@ var StorageFileApi = class extends BaseApiClient {
   /**
   * Downloads a file from a private bucket. For public buckets, make a request to the URL returned from `getPublicUrl` instead.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param path The full path and file name of the file to be downloaded. For example `folder/image.png`.
   * @param options.transform Transform the asset before serving it to the client.
   * @param options.cacheNonce Append a cache nonce parameter to the URL to invalidate the cache.
@@ -11039,7 +11242,7 @@ var StorageFileApi = class extends BaseApiClient {
   * - Refer to the [Storage guide](/docs/guides/storage/security/access-control) on how access control works
   */
   download(path, options, parameters) {
-    const renderPath = typeof (options === null || options === void 0 ? void 0 : options.transform) !== "undefined" ? "render/image/authenticated" : "object";
+    const renderPath = typeof (options === null || options === void 0 ? void 0 : options.transform) === "object" && options.transform !== null && Object.keys(options.transform).length > 0 ? "render/image/authenticated" : "object";
     const query = new URLSearchParams();
     if (options === null || options === void 0 ? void 0 : options.transform) this.applyTransformOptsToQuery(query, options.transform);
     if ((options === null || options === void 0 ? void 0 : options.cacheNonce) != null) query.set("cacheNonce", String(options.cacheNonce));
@@ -11057,7 +11260,8 @@ var StorageFileApi = class extends BaseApiClient {
   * Returns detailed file metadata including size, content type, and timestamps.
   * Note: The API returns `last_modified` field, not `updated_at`.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param path The file path, including the file name. For example `folder/image.png`.
   * @returns Promise with response containing file metadata or error
   *
@@ -11084,7 +11288,8 @@ var StorageFileApi = class extends BaseApiClient {
   /**
   * Checks the existence of a file.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param path The file path, including the file name. For example `folder/image.png`.
   * @returns Promise with response containing boolean indicating file existence or error
   *
@@ -11122,7 +11327,8 @@ var StorageFileApi = class extends BaseApiClient {
   * A simple convenience function to get the URL for an asset in a public bucket. If you do not want to use this function, you can construct the public URL by concatenating the bucket URL with the path to the asset.
   * This function does not verify if the bucket is public. If a public URL is created for a bucket which is not public, you will not be able to download the asset.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param path The path and name of the file to generate the public URL for. For example `folder/image.png`.
   * @param options.download Triggers the file as a download if set to true. Set this parameter as the name of the file if you want to trigger the download with a different filename.
   * @param options.transform Transform the asset before serving it to the client.
@@ -11183,7 +11389,7 @@ var StorageFileApi = class extends BaseApiClient {
     if (options === null || options === void 0 ? void 0 : options.transform) this.applyTransformOptsToQuery(query, options.transform);
     if ((options === null || options === void 0 ? void 0 : options.cacheNonce) != null) query.set("cacheNonce", String(options.cacheNonce));
     const queryString = query.toString();
-    const renderPath = typeof (options === null || options === void 0 ? void 0 : options.transform) !== "undefined" ? "render/image" : "object";
+    const renderPath = typeof (options === null || options === void 0 ? void 0 : options.transform) === "object" && options.transform !== null && Object.keys(options.transform).length > 0 ? "render/image" : "object";
     return { data: { publicUrl: encodeURI(`${this.url}/${renderPath}/public/${_path}`) + (queryString ? `?${queryString}` : "") } };
   }
   /**
@@ -11192,7 +11398,8 @@ var StorageFileApi = class extends BaseApiClient {
   * Returns an array of FileObject entries for the deleted files. Note that deprecated
   * fields like `bucket_id` may or may not be present in the response - do not rely on them.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param paths An array of files to delete, including the path and file name. For example [`'folder/image.png'`].
   * @returns Promise with response containing array of deleted file objects or error
   *
@@ -11241,7 +11448,8 @@ var StorageFileApi = class extends BaseApiClient {
   * Additionally, deprecated fields like `bucket_id`, `owner`, and `buckets` are NOT returned
   * by this method.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param path The folder path.
   * @param options Search options including limit (defaults to 100), offset, sortBy, and search
   * @param parameters Optional fetch parameters including signal for cancellation
@@ -11330,7 +11538,8 @@ var StorageFileApi = class extends BaseApiClient {
   *
   * @experimental this method signature might change in the future
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param options Search options including prefix, cursor for pagination, limit, with_delimiter
   * @param parameters Optional fetch parameters including signal for cancellation
   * @returns Promise with response containing folders/objects arrays with pagination info or error
@@ -11397,7 +11606,7 @@ var StorageFileApi = class extends BaseApiClient {
     return query;
   }
 };
-var version2 = "2.103.0";
+var version2 = "2.106.1";
 var DEFAULT_HEADERS = { "X-Client-Info": `storage-js/${version2}` };
 var StorageBucketApi = class extends BaseApiClient {
   constructor(url, headers = {}, fetch$1, opts) {
@@ -11412,7 +11621,8 @@ var StorageBucketApi = class extends BaseApiClient {
   /**
   * Retrieves the details of all Storage buckets within an existing project.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param options Query parameters for listing buckets
   * @param options.limit Maximum number of buckets to return
   * @param options.offset Number of buckets to skip
@@ -11457,7 +11667,8 @@ var StorageBucketApi = class extends BaseApiClient {
   /**
   * Retrieves the details of an existing Storage bucket.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param id The unique identifier of the bucket you would like to retrieve.
   * @returns Promise with response containing bucket details or error
   *
@@ -11502,7 +11713,8 @@ var StorageBucketApi = class extends BaseApiClient {
   /**
   * Creates a new Storage bucket
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param id A unique identifier for the bucket you are creating.
   * @param options.public The visibility of the bucket. Public buckets don't require an authorization token to download objects, but still require a valid token for all other operations. By default, buckets are private.
   * @param options.fileSizeLimit specifies the max file size in bytes that can be uploaded to this bucket.
@@ -11558,7 +11770,8 @@ var StorageBucketApi = class extends BaseApiClient {
   /**
   * Updates a Storage bucket
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param id A unique identifier for the bucket you are updating.
   * @param options.public The visibility of the bucket. Public buckets don't require an authorization token to download objects, but still require a valid token for all other operations.
   * @param options.fileSizeLimit specifies the max file size in bytes that can be uploaded to this bucket.
@@ -11611,7 +11824,8 @@ var StorageBucketApi = class extends BaseApiClient {
   /**
   * Removes all objects inside a single bucket.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param id The unique identifier of the bucket you would like to empty.
   * @returns Promise with success message or error
   *
@@ -11648,7 +11862,8 @@ var StorageBucketApi = class extends BaseApiClient {
   * Deletes an existing bucket. A bucket can't be deleted with existing objects inside it.
   * You must first `empty()` the bucket.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
   * @param id The unique identifier of the bucket you would like to delete.
   * @returns Promise with success message or error
   *
@@ -11701,13 +11916,24 @@ var StorageAnalyticsClient = class extends BaseApiClient {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Analytics Buckets
+  * @category Storage
+  * @subcategory Analytics Buckets
   * @param url - The base URL for the storage API
   * @param headers - HTTP headers to include in requests
   * @param fetch - Optional custom fetch implementation
   *
-  * @example Creating a StorageAnalyticsClient instance
+  * @example Using supabase-js (recommended)
+  * ```typescript
+  * import { createClient } from '@supabase/supabase-js'
+  *
+  * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
+  * const { data, error } = await supabase.storage.analytics.listBuckets()
+  * ```
+  *
+  * @example Standalone import for bundle-sensitive environments
   * ```typescript
+  * import { StorageAnalyticsClient } from '@supabase/storage-js'
+  *
   * const client = new StorageAnalyticsClient(url, headers)
   * ```
   */
@@ -11724,7 +11950,8 @@ var StorageAnalyticsClient = class extends BaseApiClient {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Analytics Buckets
+  * @category Storage
+  * @subcategory Analytics Buckets
   * @param name A unique name for the bucket you are creating
   * @returns Promise with response containing newly created analytics bucket or error
   *
@@ -11768,7 +11995,8 @@ var StorageAnalyticsClient = class extends BaseApiClient {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Analytics Buckets
+  * @category Storage
+  * @subcategory Analytics Buckets
   * @param options Query parameters for listing buckets
   * @param options.limit Maximum number of buckets to return
   * @param options.offset Number of buckets to skip
@@ -11833,7 +12061,8 @@ var StorageAnalyticsClient = class extends BaseApiClient {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Analytics Buckets
+  * @category Storage
+  * @subcategory Analytics Buckets
   * @param bucketName The unique identifier of the bucket you would like to delete
   * @returns Promise with response containing success message or error
   *
@@ -11874,7 +12103,8 @@ var StorageAnalyticsClient = class extends BaseApiClient {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Analytics Buckets
+  * @category Storage
+  * @subcategory Analytics Buckets
   * @param bucketName - The name of the analytics bucket (warehouse) to connect to
   * @returns The wrapped Iceberg catalog client
   * @throws {StorageError} If the bucket name is invalid
@@ -12157,13 +12387,24 @@ var StorageVectorsClient = class extends VectorBucketApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param url - Base URL of the Storage Vectors REST API.
   * @param options.headers - Optional headers (for example `Authorization`) applied to every request.
   * @param options.fetch - Optional custom `fetch` implementation for non-browser runtimes.
   *
-  * @example Creating a StorageVectorsClient instance
+  * @example Using supabase-js (recommended)
+  * ```typescript
+  * import { createClient } from '@supabase/supabase-js'
+  *
+  * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
+  * const bucket = supabase.storage.vectors.from('embeddings-prod')
+  * ```
+  *
+  * @example Standalone import for bundle-sensitive environments
   * ```typescript
+  * import { StorageVectorsClient } from '@supabase/storage-js'
+  *
   * const client = new StorageVectorsClient(url, options)
   * ```
   */
@@ -12179,7 +12420,8 @@ var StorageVectorsClient = class extends VectorBucketApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param vectorBucketName - Name of the vector bucket
   * @returns Bucket-scoped client with index and vector operations
   *
@@ -12200,7 +12442,8 @@ var StorageVectorsClient = class extends VectorBucketApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param vectorBucketName - Unique name for the vector bucket
   * @returns Promise with empty response on success or error
   *
@@ -12224,7 +12467,8 @@ var StorageVectorsClient = class extends VectorBucketApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param vectorBucketName - Name of the vector bucket
   * @returns Promise with bucket metadata or error
   *
@@ -12250,7 +12494,8 @@ var StorageVectorsClient = class extends VectorBucketApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param options - Optional filters (prefix, maxResults, nextToken)
   * @returns Promise with list of buckets or error
   *
@@ -12279,7 +12524,8 @@ var StorageVectorsClient = class extends VectorBucketApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param vectorBucketName - Name of the vector bucket to delete
   * @returns Promise with empty response on success or error
   *
@@ -12304,7 +12550,8 @@ var VectorBucketScope = class extends VectorIndexApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @example Creating a vector bucket scope
   * ```typescript
   * const bucket = supabase.storage.vectors.from('embeddings-prod')
@@ -12323,7 +12570,8 @@ var VectorBucketScope = class extends VectorIndexApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param options - Index configuration (vectorBucketName is automatically set)
   * @returns Promise with empty response on success or error
   *
@@ -12354,7 +12602,8 @@ var VectorBucketScope = class extends VectorIndexApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param options - Listing options (vectorBucketName is automatically set)
   * @returns Promise with response containing indexes array and pagination token or error
   *
@@ -12377,7 +12626,8 @@ var VectorBucketScope = class extends VectorIndexApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param indexName - Name of the index to retrieve
   * @returns Promise with index metadata or error
   *
@@ -12401,7 +12651,8 @@ var VectorBucketScope = class extends VectorIndexApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param indexName - Name of the index to delete
   * @returns Promise with empty response on success or error
   *
@@ -12424,7 +12675,8 @@ var VectorBucketScope = class extends VectorIndexApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param indexName - Name of the index
   * @returns Index-scoped client with vector data operations
   *
@@ -12459,7 +12711,8 @@ var VectorIndexScope = class extends VectorDataApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @example Creating a vector index scope
   * ```typescript
   * const index = supabase.storage.vectors.from('embeddings-prod').index('documents-openai')
@@ -12479,7 +12732,8 @@ var VectorIndexScope = class extends VectorDataApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param options - Vector insertion options (bucket and index names automatically set)
   * @returns Promise with empty response on success or error
   *
@@ -12513,7 +12767,8 @@ var VectorIndexScope = class extends VectorDataApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param options - Vector retrieval options (bucket and index names automatically set)
   * @returns Promise with response containing vectors array or error
   *
@@ -12542,7 +12797,8 @@ var VectorIndexScope = class extends VectorDataApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param options - Listing options (bucket and index names automatically set)
   * @returns Promise with response containing vectors array and pagination token or error
   *
@@ -12571,7 +12827,8 @@ var VectorIndexScope = class extends VectorDataApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param options - Query options (bucket and index names automatically set)
   * @returns Promise with response containing matches array of similar vectors ordered by distance or error
   *
@@ -12603,7 +12860,8 @@ var VectorIndexScope = class extends VectorDataApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
   * @param options - Deletion options (bucket and index names automatically set)
   * @returns Promise with empty response on success or error
   *
@@ -12627,13 +12885,23 @@ var StorageClient = class extends StorageBucketApi {
   /**
   * Creates a client for Storage buckets, files, analytics, and vectors.
   *
-  * @category File Buckets
-  * @example Creating a Storage client
+  * @category Storage
+  * @subcategory File Buckets
+  *
+  * @example Using supabase-js (recommended)
+  * ```ts
+  * import { createClient } from '@supabase/supabase-js'
+  *
+  * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
+  * const avatars = supabase.storage.from('avatars')
+  * ```
+  *
+  * @example Standalone import for bundle-sensitive environments
   * ```ts
   * import { StorageClient } from '@supabase/storage-js'
   *
   * const storage = new StorageClient('https://xyzcompany.supabase.co/storage/v1', {
-  *   apikey: 'public-anon-key',
+  *   apikey: 'your-publishable-key',
   * })
   * const avatars = storage.from('avatars')
   * ```
@@ -12644,7 +12912,9 @@ var StorageClient = class extends StorageBucketApi {
   /**
   * Perform file operation in a bucket.
   *
-  * @category File Buckets
+  * @category Storage
+  * @subcategory File Buckets
+  *
   * @param id The bucket id to operate on.
   *
   * @example Accessing a bucket
@@ -12663,7 +12933,9 @@ var StorageClient = class extends StorageBucketApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Vector Buckets
+  * @category Storage
+  * @subcategory Vector Buckets
+  *
   * @returns A StorageVectorsClient instance configured with the current storage settings.
   */
   get vectors() {
@@ -12680,7 +12952,9 @@ var StorageClient = class extends StorageBucketApi {
   *
   * **Public alpha:** This API is part of a public alpha release and may not be available to your account type.
   *
-  * @category Analytics Buckets
+  * @category Storage
+  * @subcategory Analytics Buckets
+  *
   * @returns A StorageAnalyticsClient instance configured with the current storage settings.
   */
   get analytics() {
@@ -12688,10 +12962,10 @@ var StorageClient = class extends StorageBucketApi {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/version.js
-var version3 = "2.103.0";
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/version.js
+var version3 = "2.106.1";
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/constants.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/constants.js
 var AUTO_REFRESH_TICK_DURATION_MS = 30 * 1e3;
 var AUTO_REFRESH_TICK_THRESHOLD = 3;
 var EXPIRY_MARGIN_MS = AUTO_REFRESH_TICK_THRESHOLD * AUTO_REFRESH_TICK_DURATION_MS;
@@ -12708,7 +12982,7 @@ var API_VERSIONS = {
 var BASE64URL_REGEX = /^([a-z0-9_-]{4})*($|[a-z0-9_-]{3}$|[a-z0-9_-]{2}$)$/i;
 var JWKS_TTL = 10 * 60 * 1e3;
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/errors.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/errors.js
 var AuthError = class extends Error {
   constructor(message, status, code) {
     super(message);
@@ -12717,8 +12991,16 @@ var AuthError = class extends Error {
     this.status = status;
     this.code = code;
   }
-};
-function isAuthError(error) {
+  toJSON() {
+    return {
+      name: this.name,
+      message: this.message,
+      status: this.status,
+      code: this.code
+    };
+  }
+};
+function isAuthError(error) {
   return typeof error === "object" && error !== null && "__isAuthError" in error;
 }
 var AuthApiError = class extends AuthError {
@@ -12771,12 +13053,7 @@ var AuthImplicitGrantRedirectError = class extends CustomAuthError {
     this.details = details;
   }
   toJSON() {
-    return {
-      name: this.name,
-      message: this.message,
-      status: this.status,
-      details: this.details
-    };
+    return Object.assign(Object.assign({}, super.toJSON()), { details: this.details });
   }
 };
 function isAuthImplicitGrantRedirectError(error) {
@@ -12789,12 +13066,7 @@ var AuthPKCEGrantCodeExchangeError = class extends CustomAuthError {
     this.details = details;
   }
   toJSON() {
-    return {
-      name: this.name,
-      message: this.message,
-      status: this.status,
-      details: this.details
-    };
+    return Object.assign(Object.assign({}, super.toJSON()), { details: this.details });
   }
 };
 var AuthPKCECodeVerifierMissingError = class extends CustomAuthError {
@@ -12818,6 +13090,9 @@ var AuthWeakPasswordError = class extends CustomAuthError {
     super(message, "AuthWeakPasswordError", status, "weak_password");
     this.reasons = reasons;
   }
+  toJSON() {
+    return Object.assign(Object.assign({}, super.toJSON()), { reasons: this.reasons });
+  }
 };
 function isAuthWeakPasswordError(error) {
   return isAuthError(error) && error.name === "AuthWeakPasswordError";
@@ -12828,7 +13103,7 @@ var AuthInvalidJwtError = class extends CustomAuthError {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/base64url.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/base64url.js
 var TO_BASE64URL = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".split("");
 var IGNORE_BASE64URL = " 	\n\r=".split("");
 var FROM_BASE64URL = (() => {
@@ -12990,7 +13265,7 @@ function bytesToBase64URL(bytes) {
   return result.join("");
 }
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/helpers.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/helpers.js
 function expiresAt(expiresIn) {
   const timeNow = Math.round(Date.now() / 1e3);
   return timeNow + expiresIn;
@@ -13038,7 +13313,7 @@ function parseParametersFromURL(href) {
       hashSearchParams.forEach((value, key) => {
         result[key] = value;
       });
-    } catch (e) {
+    } catch (_e) {
     }
   }
   url.searchParams.forEach((value, key) => {
@@ -13066,7 +13341,7 @@ var getItemAsync = async (storage, key) => {
   try {
     return JSON.parse(value);
   } catch (_a) {
-    return value;
+    return null;
   }
 };
 var removeItemAsync = async (storage, key) => {
@@ -13170,7 +13445,7 @@ async function getCodeChallengeAndMethod(storage, storageKey, isPasswordRecovery
   const codeVerifier = generatePKCEVerifier();
   let storedCodeVerifier = codeVerifier;
   if (isPasswordRecovery) {
-    storedCodeVerifier += "/PASSWORD_RECOVERY";
+    storedCodeVerifier += "/recovery";
   }
   await setItemAsync(storage, `${storageKey}-code-verifier`, storedCodeVerifier);
   const codeChallenge = await generatePKCEChallenge(codeVerifier);
@@ -13189,7 +13464,7 @@ function parseResponseAPIVersion(response) {
   try {
     const date = /* @__PURE__ */ new Date(`${apiVersion}T00:00:00.0Z`);
     return date;
-  } catch (e) {
+  } catch (_e) {
     return null;
   }
 }
@@ -13225,6 +13500,11 @@ function validateUUID(str) {
     throw new Error("@supabase/auth-js: Expected parameter to be UUID but is not");
   }
 }
+function assertPasskeyExperimentalEnabled(experimental) {
+  if (!experimental.passkey) {
+    throw new Error("@supabase/auth-js: the passkey API is experimental and disabled by default. Enable it by passing `auth: { experimental: { passkey: true } }` to createClient (or to the GoTrueClient constructor).");
+  }
+}
 function userNotAvailableProxy() {
   const proxyTarget = {};
   return new Proxy(proxyTarget, {
@@ -13272,9 +13552,22 @@ function deepClone(obj) {
   return JSON.parse(JSON.stringify(obj));
 }
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/fetch.js
-var _getErrorMessage2 = (err) => err.msg || err.message || err.error_description || err.error || JSON.stringify(err);
-var NETWORK_ERROR_CODES = [502, 503, 504];
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/fetch.js
+var _getErrorMessage2 = (err) => {
+  if (typeof err === "object" && err !== null) {
+    const e = err;
+    if (typeof e.msg === "string")
+      return e.msg;
+    if (typeof e.message === "string")
+      return e.message;
+    if (typeof e.error_description === "string")
+      return e.error_description;
+    if (typeof e.error === "string")
+      return e.error;
+  }
+  return JSON.stringify(err);
+};
+var NETWORK_ERROR_CODES = [502, 503, 504, 520, 521, 522, 523, 524, 530];
 async function handleError2(error) {
   var _a;
   if (!looksLikeFetchResponse(error)) {
@@ -13366,7 +13659,7 @@ function _sessionResponse(data) {
       session.expires_at = expiresAt(data.expires_in);
     }
   }
-  const user = (_a = data.user) !== null && _a !== void 0 ? _a : data;
+  const user = (_a = data.user) !== null && _a !== void 0 ? _a : null;
   return { data: { session, user }, error: null };
 }
 function _sessionResponsePassword(data) {
@@ -13406,31 +13699,46 @@ function _noResolveJsonResponse(data) {
   return data;
 }
 function hasSession(data) {
-  return data.access_token && data.refresh_token && data.expires_in;
+  return !!data.access_token && !!data.refresh_token && !!data.expires_in;
 }
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/types.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/types.js
 var SIGN_OUT_SCOPES = ["global", "local", "others"];
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/GoTrueAdminApi.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/GoTrueAdminApi.js
 var GoTrueAdminApi = class {
+  _encodePathSegment(segment) {
+    if (segment === "." || segment === "..") {
+      throw new AuthError("Invalid path segment");
+    }
+    return encodeURIComponent(segment);
+  }
   /**
    * Creates an admin API client that can be used to manage users and OAuth clients.
    *
-   * @example
+   * @example Using supabase-js (recommended)
+   * ```ts
+   * import { createClient } from '@supabase/supabase-js'
+   *
+   * const supabase = createClient('https://xyzcompany.supabase.co', 'your-secret-key')
+   * const { data, error } = await supabase.auth.admin.listUsers()
+   * ```
+   *
+   * @example Standalone import for bundle-sensitive environments
    * ```ts
    * import { GoTrueAdminApi } from '@supabase/auth-js'
    *
    * const admin = new GoTrueAdminApi({
    *   url: 'https://xyzcompany.supabase.co/auth/v1',
-   *   headers: { Authorization: `Bearer ${process.env.SUPABASE_SERVICE_ROLE_KEY}` },
+   *   headers: { Authorization: `Bearer ${process.env.SUPABASE_SECRET_KEY}` },
    * })
    * ```
    */
-  constructor({ url = "", headers = {}, fetch: fetch2 }) {
+  constructor({ url = "", headers = {}, fetch: fetch2, experimental }) {
     this.url = url;
     this.headers = headers;
     this.fetch = resolveFetch3(fetch2);
+    this.experimental = experimental !== null && experimental !== void 0 ? experimental : {};
     this.mfa = {
       listFactors: this._listFactors.bind(this),
       deleteFactor: this._deleteFactor.bind(this)
@@ -13450,6 +13758,10 @@ var GoTrueAdminApi = class {
       updateProvider: this._updateCustomProvider.bind(this),
       deleteProvider: this._deleteCustomProvider.bind(this)
     };
+    this.passkey = {
+      listPasskeys: this._adminListPasskeys.bind(this),
+      deletePasskey: this._adminDeletePasskey.bind(this)
+    };
   }
   /**
    * Removes a logged-in session.
@@ -13457,6 +13769,7 @@ var GoTrueAdminApi = class {
    * @param scope The logout sope.
    *
    * @category Auth
+   * @subcategory Auth Admin
    */
   async signOut(jwt, scope = SIGN_OUT_SCOPES[0]) {
     if (SIGN_OUT_SCOPES.indexOf(scope) < 0) {
@@ -13482,6 +13795,7 @@ var GoTrueAdminApi = class {
    * @param options Additional options to be included when inviting.
    *
    * @category Auth
+   * @subcategory Auth Admin
    *
    * @remarks
    * - Sends an invite link to the user's email address.
@@ -13562,6 +13876,7 @@ var GoTrueAdminApi = class {
    * @param options.redirectTo The redirect url which should be appended to the generated link
    *
    * @category Auth
+   * @subcategory Auth Admin
    *
    * @remarks
    * - The following types can be passed into `generateLink()`: `signup`, `magiclink`, `invite`, `recovery`, `email_change_current`, `email_change_new`, `phone_change`.
@@ -13703,6 +14018,7 @@ var GoTrueAdminApi = class {
    * This function should only be called on a server. Never expose your `service_role` key in the browser.
    *
    * @category Auth
+   * @subcategory Auth Admin
    *
    * @remarks
    * - To confirm the user's email address or phone number, set `email_confirm` or `phone_confirm` to true. Both arguments default to false.
@@ -13798,6 +14114,7 @@ var GoTrueAdminApi = class {
    * @param params An object which supports `page` and `perPage` as numbers, to alter the paginated results.
    *
    * @category Auth
+   * @subcategory Auth Admin
    *
    * @remarks
    * - Defaults to return 50 users per page.
@@ -13857,6 +14174,7 @@ var GoTrueAdminApi = class {
    * This function should only be called on a server. Never expose your `service_role` key in the browser.
    *
    * @category Auth
+   * @subcategory Auth Admin
    *
    * @remarks
    * - Fetches the user object from the database based on the user's id.
@@ -13957,6 +14275,7 @@ var GoTrueAdminApi = class {
    * @see {@link GoTrueClient.updateUser} for client-side user updates (triggers listeners automatically)
    *
    * @category Auth
+   * @subcategory Auth Admin
    *
    * @example Updates a user's email
    * ```js
@@ -14092,6 +14411,7 @@ var GoTrueAdminApi = class {
    * This function should only be called on a server. Never expose your `service_role` key in the browser.
    *
    * @category Auth
+   * @subcategory Auth Admin
    *
    * @remarks
    * - The `deleteUser()` method requires the user's ID, which maps to the `auth.users.id` column.
@@ -14232,7 +14552,8 @@ var GoTrueAdminApi = class {
    */
   async _getOAuthClient(clientId) {
     try {
-      return await _request(this.fetch, "GET", `${this.url}/admin/oauth/clients/${clientId}`, {
+      const encodedClientId = this._encodePathSegment(clientId);
+      return await _request(this.fetch, "GET", `${this.url}/admin/oauth/clients/${encodedClientId}`, {
         headers: this.headers,
         xform: (client) => {
           return { data: client, error: null };
@@ -14253,7 +14574,8 @@ var GoTrueAdminApi = class {
    */
   async _updateOAuthClient(clientId, params) {
     try {
-      return await _request(this.fetch, "PUT", `${this.url}/admin/oauth/clients/${clientId}`, {
+      const encodedClientId = this._encodePathSegment(clientId);
+      return await _request(this.fetch, "PUT", `${this.url}/admin/oauth/clients/${encodedClientId}`, {
         body: params,
         headers: this.headers,
         xform: (client) => {
@@ -14275,7 +14597,8 @@ var GoTrueAdminApi = class {
    */
   async _deleteOAuthClient(clientId) {
     try {
-      await _request(this.fetch, "DELETE", `${this.url}/admin/oauth/clients/${clientId}`, {
+      const encodedClientId = this._encodePathSegment(clientId);
+      await _request(this.fetch, "DELETE", `${this.url}/admin/oauth/clients/${encodedClientId}`, {
         headers: this.headers,
         noResolveJson: true
       });
@@ -14295,7 +14618,8 @@ var GoTrueAdminApi = class {
    */
   async _regenerateOAuthClientSecret(clientId) {
     try {
-      return await _request(this.fetch, "POST", `${this.url}/admin/oauth/clients/${clientId}/regenerate_secret`, {
+      const encodedClientId = this._encodePathSegment(clientId);
+      return await _request(this.fetch, "POST", `${this.url}/admin/oauth/clients/${encodedClientId}/regenerate_secret`, {
         headers: this.headers,
         xform: (client) => {
           return { data: client, error: null };
@@ -14368,7 +14692,8 @@ var GoTrueAdminApi = class {
    */
   async _getCustomProvider(identifier) {
     try {
-      return await _request(this.fetch, "GET", `${this.url}/admin/custom-providers/${identifier}`, {
+      const encodedIdentifier = this._encodePathSegment(identifier);
+      return await _request(this.fetch, "GET", `${this.url}/admin/custom-providers/${encodedIdentifier}`, {
         headers: this.headers,
         xform: (provider) => {
           return { data: provider, error: null };
@@ -14393,7 +14718,8 @@ var GoTrueAdminApi = class {
    */
   async _updateCustomProvider(identifier, params) {
     try {
-      return await _request(this.fetch, "PUT", `${this.url}/admin/custom-providers/${identifier}`, {
+      const encodedIdentifier = this._encodePathSegment(identifier);
+      return await _request(this.fetch, "PUT", `${this.url}/admin/custom-providers/${encodedIdentifier}`, {
         body: params,
         headers: this.headers,
         xform: (provider) => {
@@ -14414,7 +14740,8 @@ var GoTrueAdminApi = class {
    */
   async _deleteCustomProvider(identifier) {
     try {
-      await _request(this.fetch, "DELETE", `${this.url}/admin/custom-providers/${identifier}`, {
+      const encodedIdentifier = this._encodePathSegment(identifier);
+      await _request(this.fetch, "DELETE", `${this.url}/admin/custom-providers/${encodedIdentifier}`, {
         headers: this.headers,
         noResolveJson: true
       });
@@ -14426,9 +14753,49 @@ var GoTrueAdminApi = class {
       throw error;
     }
   }
+  /**
+   * Lists all passkeys for a user.
+   *
+   * This function should only be called on a server. Never expose your secret key in the browser.
+   *
+   * Requires `auth.experimental.passkey: true`.
+   */
+  async _adminListPasskeys(params) {
+    assertPasskeyExperimentalEnabled(this.experimental);
+    validateUUID(params.userId);
+    try {
+      return await _request(this.fetch, "GET", `${this.url}/admin/users/${params.userId}/passkeys`, { headers: this.headers, xform: (data) => ({ data, error: null }) });
+    } catch (error) {
+      if (isAuthError(error)) {
+        return { data: null, error };
+      }
+      throw error;
+    }
+  }
+  /**
+   * Deletes a user's passkey.
+   *
+   * This function should only be called on a server. Never expose your secret key in the browser.
+   *
+   * Requires `auth.experimental.passkey: true`.
+   */
+  async _adminDeletePasskey(params) {
+    assertPasskeyExperimentalEnabled(this.experimental);
+    validateUUID(params.userId);
+    validateUUID(params.passkeyId);
+    try {
+      await _request(this.fetch, "DELETE", `${this.url}/admin/users/${params.userId}/passkeys/${params.passkeyId}`, { headers: this.headers, noResolveJson: true });
+      return { data: null, error: null };
+    } catch (error) {
+      if (isAuthError(error)) {
+        return { data: null, error };
+      }
+      throw error;
+    }
+  }
 };
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/local-storage.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/local-storage.js
 function memoryLocalStorageAdapter(store = {}) {
   return {
     getItem: (key) => {
@@ -14443,7 +14810,7 @@ function memoryLocalStorageAdapter(store = {}) {
   };
 }
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/locks.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/locks.js
 var internals = {
   /**
    * @experimental
@@ -14520,7 +14887,7 @@ async function navigatorLock(name, acquireTimeout, fn) {
     if (acquireTimeout > 0) {
       clearTimeout(acquireTimeoutTimer);
     }
-    if ((e === null || e === void 0 ? void 0 : e.name) === "AbortError" && acquireTimeout > 0) {
+    if (e !== null && typeof e === "object" && "name" in e && e.name === "AbortError" && acquireTimeout > 0) {
       if (abortController.signal.aborted) {
         if (internals.debug) {
           console.log("@supabase/gotrue-js: navigatorLock: acquire timeout, recovering by stealing lock", name);
@@ -14585,7 +14952,7 @@ async function processLock(name, acquireTimeout, fn) {
       if (timeoutId !== null) {
         clearTimeout(timeoutId);
       }
-      if (e && e.isAcquireTimeout) {
+      if (e instanceof LockAcquireTimeoutError) {
         throw e;
       }
     }
@@ -14595,7 +14962,7 @@ async function processLock(name, acquireTimeout, fn) {
     try {
       return await currentOperation;
     } catch (e) {
-      if (e && e.isAcquireTimeout) {
+      if (e instanceof LockAcquireTimeoutError) {
         try {
           await previousOperation;
         } catch (prevError) {
@@ -14608,7 +14975,7 @@ async function processLock(name, acquireTimeout, fn) {
   return await currentOperation;
 }
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/polyfills.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/polyfills.js
 function polyfillGlobalThis() {
   if (typeof globalThis === "object")
     return;
@@ -14628,7 +14995,7 @@ function polyfillGlobalThis() {
   }
 }
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/web3/ethereum.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/web3/ethereum.js
 function getAddress(address) {
   if (!/^0x[a-fA-F0-9]{40}$/.test(address)) {
     throw new Error(`@supabase/auth-js: Address "${address}" is invalid.`);
@@ -14696,7 +15063,7 @@ Request ID: ${requestId}`;
 ${suffix}`;
 }
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/webauthn.errors.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/webauthn.errors.js
 var WebAuthnError = class extends Error {
   constructor({ message, code, cause, name }) {
     var _a;
@@ -14705,6 +15072,13 @@ var WebAuthnError = class extends Error {
     this.name = (_a = name !== null && name !== void 0 ? name : cause instanceof Error ? cause.name : void 0) !== null && _a !== void 0 ? _a : "Unknown Error";
     this.code = code;
   }
+  toJSON() {
+    return {
+      name: this.name,
+      message: this.message,
+      code: this.code
+    };
+  }
 };
 var WebAuthnUnknownError = class extends WebAuthnError {
   constructor(message, originalError) {
@@ -14864,7 +15238,7 @@ function identifyAuthenticationError({ error, options }) {
   });
 }
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/lib/webauthn.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/lib/webauthn.js
 var WebAuthnAbortService = class {
   /**
    * Create an abort signal for a new WebAuthn operation.
@@ -15387,7 +15761,7 @@ var WebAuthnApi = class {
   }
 };
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/GoTrueClient.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/GoTrueClient.js
 polyfillGlobalThis();
 var DEFAULT_OPTIONS = {
   url: GOTRUE_URL,
@@ -15402,7 +15776,8 @@ var DEFAULT_OPTIONS = {
   throwOnError: false,
   lockAcquireTimeout: 5e3,
   // 5 seconds
-  skipAutoInitialize: false
+  skipAutoInitialize: false,
+  experimental: {}
 };
 async function lockNoOp(name, acquireTimeout, fn) {
   return await fn();
@@ -15429,19 +15804,27 @@ var GoTrueClient = class _GoTrueClient {
   /**
    * Create a new client for use in the browser.
    *
-   * @example
+   * @example Using supabase-js (recommended)
+   * ```ts
+   * import { createClient } from '@supabase/supabase-js'
+   *
+   * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
+   * const { data, error } = await supabase.auth.getUser()
+   * ```
+   *
+   * @example Standalone import for bundle-sensitive environments
    * ```ts
    * import { GoTrueClient } from '@supabase/auth-js'
    *
    * const auth = new GoTrueClient({
    *   url: 'https://xyzcompany.supabase.co/auth/v1',
-   *   headers: { apikey: 'public-anon-key' },
+   *   headers: { apikey: 'your-publishable-key' },
    *   storageKey: 'supabase-auth',
    * })
    * ```
    */
   constructor(options) {
-    var _a, _b, _c;
+    var _a, _b, _c, _d;
     this.userStorage = null;
     this.memoryStorage = null;
     this.stateChangeEmitters = /* @__PURE__ */ new Map();
@@ -15474,10 +15857,12 @@ var GoTrueClient = class _GoTrueClient {
     }
     this.persistSession = settings.persistSession;
     this.autoRefreshToken = settings.autoRefreshToken;
+    this.experimental = (_b = settings.experimental) !== null && _b !== void 0 ? _b : {};
     this.admin = new GoTrueAdminApi({
       url: settings.url,
       headers: settings.headers,
-      fetch: settings.fetch
+      fetch: settings.fetch,
+      experimental: this.experimental
     });
     this.url = settings.url;
     this.headers = settings.headers;
@@ -15490,7 +15875,7 @@ var GoTrueClient = class _GoTrueClient {
     this.lockAcquireTimeout = settings.lockAcquireTimeout;
     if (settings.lock) {
       this.lock = settings.lock;
-    } else if (this.persistSession && isBrowser() && ((_b = globalThis === null || globalThis === void 0 ? void 0 : globalThis.navigator) === null || _b === void 0 ? void 0 : _b.locks)) {
+    } else if (this.persistSession && isBrowser() && ((_c = globalThis === null || globalThis === void 0 ? void 0 : globalThis.navigator) === null || _c === void 0 ? void 0 : _c.locks)) {
       this.lock = navigatorLock;
     } else {
       this.lock = lockNoOp;
@@ -15516,6 +15901,15 @@ var GoTrueClient = class _GoTrueClient {
       listGrants: this._listOAuthGrants.bind(this),
       revokeGrant: this._revokeOAuthGrant.bind(this)
     };
+    this.passkey = {
+      startRegistration: this._startPasskeyRegistration.bind(this),
+      verifyRegistration: this._verifyPasskeyRegistration.bind(this),
+      startAuthentication: this._startPasskeyAuthentication.bind(this),
+      verifyAuthentication: this._verifyPasskeyAuthentication.bind(this),
+      list: this._listPasskeys.bind(this),
+      update: this._updatePasskey.bind(this),
+      delete: this._deletePasskey.bind(this)
+    };
     if (this.persistSession) {
       if (settings.storage) {
         this.storage = settings.storage;
@@ -15540,7 +15934,7 @@ var GoTrueClient = class _GoTrueClient {
       } catch (e) {
         console.error("Failed to create a new BroadcastChannel, multi-tab state changes will not be available", e);
       }
-      (_c = this.broadcastChannel) === null || _c === void 0 ? void 0 : _c.addEventListener("message", async (event) => {
+      (_d = this.broadcastChannel) === null || _d === void 0 ? void 0 : _d.addEventListener("message", async (event) => {
         this._debug("received broadcast notification from other tab or client", event);
         try {
           await this._notifyAllSubscribers(event.data.event, event.data.session, false);
@@ -16527,7 +16921,7 @@ var GoTrueClient = class _GoTrueClient {
     }
   }
   async signInWithEthereum(credentials) {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l;
+    var _a, _b, _c, _d, _f, _g, _h, _j, _k, _l, _m;
     let message;
     let signature;
     if ("message" in credentials) {
@@ -16576,11 +16970,11 @@ var GoTrueClient = class _GoTrueClient {
         version: "1",
         chainId,
         nonce: (_c = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _c === void 0 ? void 0 : _c.nonce,
-        issuedAt: (_e = (_d = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _d === void 0 ? void 0 : _d.issuedAt) !== null && _e !== void 0 ? _e : /* @__PURE__ */ new Date(),
-        expirationTime: (_f = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _f === void 0 ? void 0 : _f.expirationTime,
-        notBefore: (_g = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _g === void 0 ? void 0 : _g.notBefore,
-        requestId: (_h = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _h === void 0 ? void 0 : _h.requestId,
-        resources: (_j = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _j === void 0 ? void 0 : _j.resources
+        issuedAt: (_f = (_d = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _d === void 0 ? void 0 : _d.issuedAt) !== null && _f !== void 0 ? _f : /* @__PURE__ */ new Date(),
+        expirationTime: (_g = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _g === void 0 ? void 0 : _g.expirationTime,
+        notBefore: (_h = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _h === void 0 ? void 0 : _h.notBefore,
+        requestId: (_j = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _j === void 0 ? void 0 : _j.requestId,
+        resources: (_k = options === null || options === void 0 ? void 0 : options.signInWithEthereum) === null || _k === void 0 ? void 0 : _k.resources
       };
       message = createSiweMessage(siweMessage);
       signature = await resolvedWallet.request({
@@ -16595,7 +16989,7 @@ var GoTrueClient = class _GoTrueClient {
           chain: "ethereum",
           message,
           signature
-        }, ((_k = credentials.options) === null || _k === void 0 ? void 0 : _k.captchaToken) ? { gotrue_meta_security: { captcha_token: (_l = credentials.options) === null || _l === void 0 ? void 0 : _l.captchaToken } } : null),
+        }, ((_l = credentials.options) === null || _l === void 0 ? void 0 : _l.captchaToken) ? { gotrue_meta_security: { captcha_token: (_m = credentials.options) === null || _m === void 0 ? void 0 : _m.captchaToken } } : null),
         xform: _sessionResponse
       });
       if (error) {
@@ -16618,7 +17012,7 @@ var GoTrueClient = class _GoTrueClient {
     }
   }
   async signInWithSolana(credentials) {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
+    var _a, _b, _c, _d, _f, _g, _h, _j, _k, _l, _m, _o;
     let message;
     let signature;
     if ("message" in credentials) {
@@ -16676,11 +17070,11 @@ var GoTrueClient = class _GoTrueClient {
           `URI: ${url.href}`,
           `Issued At: ${(_c = (_b = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _b === void 0 ? void 0 : _b.issuedAt) !== null && _c !== void 0 ? _c : (/* @__PURE__ */ new Date()).toISOString()}`,
           ...((_d = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _d === void 0 ? void 0 : _d.notBefore) ? [`Not Before: ${options.signInWithSolana.notBefore}`] : [],
-          ...((_e = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _e === void 0 ? void 0 : _e.expirationTime) ? [`Expiration Time: ${options.signInWithSolana.expirationTime}`] : [],
-          ...((_f = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _f === void 0 ? void 0 : _f.chainId) ? [`Chain ID: ${options.signInWithSolana.chainId}`] : [],
-          ...((_g = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _g === void 0 ? void 0 : _g.nonce) ? [`Nonce: ${options.signInWithSolana.nonce}`] : [],
-          ...((_h = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _h === void 0 ? void 0 : _h.requestId) ? [`Request ID: ${options.signInWithSolana.requestId}`] : [],
-          ...((_k = (_j = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _j === void 0 ? void 0 : _j.resources) === null || _k === void 0 ? void 0 : _k.length) ? [
+          ...((_f = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _f === void 0 ? void 0 : _f.expirationTime) ? [`Expiration Time: ${options.signInWithSolana.expirationTime}`] : [],
+          ...((_g = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _g === void 0 ? void 0 : _g.chainId) ? [`Chain ID: ${options.signInWithSolana.chainId}`] : [],
+          ...((_h = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _h === void 0 ? void 0 : _h.nonce) ? [`Nonce: ${options.signInWithSolana.nonce}`] : [],
+          ...((_j = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _j === void 0 ? void 0 : _j.requestId) ? [`Request ID: ${options.signInWithSolana.requestId}`] : [],
+          ...((_l = (_k = options === null || options === void 0 ? void 0 : options.signInWithSolana) === null || _k === void 0 ? void 0 : _k.resources) === null || _l === void 0 ? void 0 : _l.length) ? [
             "Resources",
             ...options.signInWithSolana.resources.map((resource) => `- ${resource}`)
           ] : []
@@ -16695,7 +17089,7 @@ var GoTrueClient = class _GoTrueClient {
     try {
       const { data, error } = await _request(this.fetch, "POST", `${this.url}/token?grant_type=web3`, {
         headers: this.headers,
-        body: Object.assign({ chain: "solana", message, signature: bytesToBase64URL(signature) }, ((_l = credentials.options) === null || _l === void 0 ? void 0 : _l.captchaToken) ? { gotrue_meta_security: { captcha_token: (_m = credentials.options) === null || _m === void 0 ? void 0 : _m.captchaToken } } : null),
+        body: Object.assign({ chain: "solana", message, signature: bytesToBase64URL(signature) }, ((_m = credentials.options) === null || _m === void 0 ? void 0 : _m.captchaToken) ? { gotrue_meta_security: { captcha_token: (_o = credentials.options) === null || _o === void 0 ? void 0 : _o.captchaToken } } : null),
         xform: _sessionResponse
       });
       if (error) {
@@ -16745,7 +17139,7 @@ var GoTrueClient = class _GoTrueClient {
       }
       if (data.session) {
         await this._saveSession(data.session);
-        await this._notifyAllSubscribers("SIGNED_IN", data.session);
+        await this._notifyAllSubscribers(redirectType === "recovery" ? "PASSWORD_RECOVERY" : "SIGNED_IN", data.session);
       }
       return this._returnResult({ data: Object.assign(Object.assign({}, data), { redirectType: redirectType !== null && redirectType !== void 0 ? redirectType : null }), error });
     } catch (error) {
@@ -16945,7 +17339,7 @@ var GoTrueClient = class _GoTrueClient {
    * ```
    */
   async signInWithOtp(credentials) {
-    var _a, _b, _c, _d, _e;
+    var _a, _b, _c, _d, _f;
     try {
       if ("email" in credentials) {
         const { email, options } = credentials;
@@ -16978,7 +17372,7 @@ var GoTrueClient = class _GoTrueClient {
             data: (_c = options === null || options === void 0 ? void 0 : options.data) !== null && _c !== void 0 ? _c : {},
             create_user: (_d = options === null || options === void 0 ? void 0 : options.shouldCreateUser) !== null && _d !== void 0 ? _d : true,
             gotrue_meta_security: { captcha_token: options === null || options === void 0 ? void 0 : options.captchaToken },
-            channel: (_e = options === null || options === void 0 ? void 0 : options.channel) !== null && _e !== void 0 ? _e : "sms"
+            channel: (_f = options === null || options === void 0 ? void 0 : options.channel) !== null && _f !== void 0 ? _f : "sms"
           }
         });
         return this._returnResult({
@@ -17222,7 +17616,7 @@ var GoTrueClient = class _GoTrueClient {
    * ```
    */
   async signInWithSSO(params) {
-    var _a, _b, _c, _d, _e;
+    var _a, _b, _c, _d, _f;
     try {
       let codeChallenge = null;
       let codeChallengeMethod = null;
@@ -17235,7 +17629,7 @@ var GoTrueClient = class _GoTrueClient {
         headers: this.headers,
         xform: _ssoResponse
       });
-      if (((_d = result.data) === null || _d === void 0 ? void 0 : _d.url) && isBrowser() && !((_e = params.options) === null || _e === void 0 ? void 0 : _e.skipBrowserRedirect)) {
+      if (((_d = result.data) === null || _d === void 0 ? void 0 : _d.url) && isBrowser() && !((_f = params.options) === null || _f === void 0 ? void 0 : _f.skipBrowserRedirect)) {
         window.location.assign(result.data.url);
       }
       return this._returnResult(result);
@@ -17501,7 +17895,7 @@ var GoTrueClient = class _GoTrueClient {
         this.pendingInLock.push((async () => {
           try {
             await result;
-          } catch (e) {
+          } catch (_e) {
           }
         })());
         return result;
@@ -18228,6 +18622,7 @@ var GoTrueClient = class _GoTrueClient {
    * Gets the session data from a URL string
    */
   async _getSessionFromURL(params, callbackUrlType) {
+    var _a;
     try {
       if (!isBrowser())
         throw new AuthImplicitGrantRedirectError("No browser detected.");
@@ -18260,7 +18655,10 @@ var GoTrueClient = class _GoTrueClient {
         const url = new URL(window.location.href);
         url.searchParams.delete("code");
         window.history.replaceState(window.history.state, "", url.toString());
-        return { data: { session: data2.session, redirectType: null }, error: null };
+        return {
+          data: { session: data2.session, redirectType: (_a = data2.redirectType) !== null && _a !== void 0 ? _a : null },
+          error: null
+        };
       }
       const { provider_token, provider_refresh_token, access_token, refresh_token, expires_in, expires_at, token_type } = params;
       if (!access_token || !expires_in || !refresh_token || !token_type) {
@@ -18333,24 +18731,35 @@ var GoTrueClient = class _GoTrueClient {
    *
    * If using `others` scope, no `SIGNED_OUT` event is fired!
    *
+   * **Warning:** the default `scope` is `'global'`. This signs the user out of
+   * **every device they are currently signed in on**, not just the current
+   * tab/session. If you only want to sign the user out of the current session
+   * (the behavior most other auth libraries default to), pass
+   * `{ scope: 'local' }` explicitly.
+   *
    * @category Auth
    *
    * @remarks
    * - In order to use the `signOut()` method, the user needs to be signed in first.
-   * - By default, `signOut()` uses the global scope, which signs out all other sessions that the user is logged into as well. Customize this behavior by passing a scope parameter.
+   * - By default, `signOut()` uses the **global** scope, which signs out the user
+   *   on every device they are signed in on (not just the current one). Pass
+   *   `{ scope: 'local' }` to only sign out the current session. This is
+   *   usually what apps want on a "Sign out" button, especially when users
+   *   sign in from multiple devices and do not expect signing out of one to
+   *   terminate the others.
    * - Since Supabase Auth uses JWTs for authentication, the access token JWT will be valid until it's expired. When the user signs out, Supabase revokes the refresh token and deletes the JWT from the client-side. This does not revoke the JWT and it will still be valid until it expires.
    *
-   * @example Sign out (all sessions)
+   * @example Sign out of every device (global – default)
    * ```js
    * const { error } = await supabase.auth.signOut()
    * ```
    *
-   * @example Sign out (current session)
+   * @example Sign out only the current session (recommended for most apps)
    * ```js
    * const { error } = await supabase.auth.signOut({ scope: 'local' })
    * ```
    *
-   * @example Sign out (other sessions)
+   * @example Sign out of all other sessions, keep the current one
    * ```js
    * const { error } = await supabase.auth.signOut({ scope: 'others' })
    * ```
@@ -18800,7 +19209,7 @@ var GoTrueClient = class _GoTrueClient {
     var _a;
     try {
       const { data, error } = await this._useSession(async (result) => {
-        var _a2, _b, _c, _d, _e;
+        var _a2, _b, _c, _d, _f;
         const { data: data2, error: error2 } = result;
         if (error2)
           throw error2;
@@ -18812,7 +19221,7 @@ var GoTrueClient = class _GoTrueClient {
         });
         return await _request(this.fetch, "GET", url, {
           headers: this.headers,
-          jwt: (_e = (_d = data2.session) === null || _d === void 0 ? void 0 : _d.access_token) !== null && _e !== void 0 ? _e : void 0
+          jwt: (_f = (_d = data2.session) === null || _d === void 0 ? void 0 : _d.access_token) !== null && _f !== void 0 ? _f : void 0
         });
       });
       if (error)
@@ -19319,7 +19728,7 @@ var GoTrueClient = class _GoTrueClient {
         }
       });
     } catch (e) {
-      if (e.isAcquireTimeout || e instanceof LockAcquireTimeoutError) {
+      if (e instanceof LockAcquireTimeoutError) {
         this._debug("auto refresh token tick lock not available");
       } else {
         throw e;
@@ -19928,20 +20337,334 @@ var GoTrueClient = class _GoTrueClient {
       throw error;
     }
   }
+  // --- Passkey Methods ---
+  /**
+   * Sign in with a passkey. Handles the full WebAuthn ceremony:
+   * 1. Fetches authentication challenge from server
+   * 2. Prompts user via navigator.credentials.get()
+   * 3. Verifies credential with server and creates session
+   *
+   * Requires `auth.experimental.passkey: true`.
+   *
+   * @category Auth
+   */
+  async signInWithPasskey(credentials) {
+    var _a, _b, _c;
+    assertPasskeyExperimentalEnabled(this.experimental);
+    try {
+      if (!browserSupportsWebAuthn()) {
+        return this._returnResult({
+          data: null,
+          error: new AuthUnknownError("Browser does not support WebAuthn", null)
+        });
+      }
+      const { data: options, error: optionsError } = await this._startPasskeyAuthentication({
+        options: { captchaToken: (_a = credentials === null || credentials === void 0 ? void 0 : credentials.options) === null || _a === void 0 ? void 0 : _a.captchaToken }
+      });
+      if (optionsError || !options) {
+        return this._returnResult({ data: null, error: optionsError });
+      }
+      const publicKeyOptions = deserializeCredentialRequestOptions(options.options);
+      const signal = (_c = (_b = credentials === null || credentials === void 0 ? void 0 : credentials.options) === null || _b === void 0 ? void 0 : _b.signal) !== null && _c !== void 0 ? _c : webAuthnAbortService.createNewAbortSignal();
+      const { data: credential, error: credentialError } = await getCredential({
+        publicKey: publicKeyOptions,
+        signal
+      });
+      if (credentialError || !credential) {
+        return this._returnResult({
+          data: null,
+          error: credentialError !== null && credentialError !== void 0 ? credentialError : new AuthUnknownError("WebAuthn ceremony failed", null)
+        });
+      }
+      const serialized = serializeCredentialRequestResponse(credential);
+      return this._verifyPasskeyAuthentication({
+        challengeId: options.challenge_id,
+        credential: serialized
+      });
+    } catch (error) {
+      if (isAuthError(error)) {
+        return this._returnResult({ data: null, error });
+      }
+      throw error;
+    }
+  }
+  /**
+   * Register a passkey for the current authenticated user. Handles the full WebAuthn ceremony:
+   * 1. Fetches registration challenge from server
+   * 2. Prompts user via navigator.credentials.create()
+   * 3. Verifies credential with server
+   *
+   * Requires an active session. Requires `auth.experimental.passkey: true`.
+   *
+   * @category Auth
+   */
+  async registerPasskey(credentials) {
+    var _a, _b;
+    assertPasskeyExperimentalEnabled(this.experimental);
+    try {
+      if (!browserSupportsWebAuthn()) {
+        return this._returnResult({
+          data: null,
+          error: new AuthUnknownError("Browser does not support WebAuthn", null)
+        });
+      }
+      const { data: options, error: optionsError } = await this._startPasskeyRegistration();
+      if (optionsError || !options) {
+        return this._returnResult({ data: null, error: optionsError });
+      }
+      const publicKeyOptions = deserializeCredentialCreationOptions(options.options);
+      const signal = (_b = (_a = credentials === null || credentials === void 0 ? void 0 : credentials.options) === null || _a === void 0 ? void 0 : _a.signal) !== null && _b !== void 0 ? _b : webAuthnAbortService.createNewAbortSignal();
+      const { data: credential, error: credentialError } = await createCredential({
+        publicKey: publicKeyOptions,
+        signal
+      });
+      if (credentialError || !credential) {
+        return this._returnResult({
+          data: null,
+          error: credentialError !== null && credentialError !== void 0 ? credentialError : new AuthUnknownError("WebAuthn ceremony failed", null)
+        });
+      }
+      const serialized = serializeCredentialCreationResponse(credential);
+      return this._verifyPasskeyRegistration({
+        challengeId: options.challenge_id,
+        credential: serialized
+      });
+    } catch (error) {
+      if (isAuthError(error)) {
+        return this._returnResult({ data: null, error });
+      }
+      throw error;
+    }
+  }
+  /**
+   * Start passkey registration for the current authenticated user.
+   * Returns WebAuthn credential creation options to pass to navigator.credentials.create().
+   */
+  async _startPasskeyRegistration() {
+    assertPasskeyExperimentalEnabled(this.experimental);
+    try {
+      return await this._useSession(async (result) => {
+        const { data: { session }, error: sessionError } = result;
+        if (sessionError) {
+          return this._returnResult({ data: null, error: sessionError });
+        }
+        if (!session) {
+          return this._returnResult({ data: null, error: new AuthSessionMissingError() });
+        }
+        const { data, error } = await _request(this.fetch, "POST", `${this.url}/passkeys/registration/options`, {
+          headers: this.headers,
+          jwt: session.access_token,
+          body: {}
+        });
+        if (error) {
+          return this._returnResult({ data: null, error });
+        }
+        return this._returnResult({ data, error: null });
+      });
+    } catch (error) {
+      if (isAuthError(error)) {
+        return this._returnResult({ data: null, error });
+      }
+      throw error;
+    }
+  }
+  /**
+   * Verify passkey registration with the credential response.
+   * The credentialResponse should be the serialized output of navigator.credentials.create().
+   */
+  async _verifyPasskeyRegistration(params) {
+    assertPasskeyExperimentalEnabled(this.experimental);
+    try {
+      return await this._useSession(async (result) => {
+        const { data: { session }, error: sessionError } = result;
+        if (sessionError) {
+          return this._returnResult({ data: null, error: sessionError });
+        }
+        if (!session) {
+          return this._returnResult({ data: null, error: new AuthSessionMissingError() });
+        }
+        const { data, error } = await _request(this.fetch, "POST", `${this.url}/passkeys/registration/verify`, {
+          headers: this.headers,
+          jwt: session.access_token,
+          body: {
+            challenge_id: params.challengeId,
+            credential: params.credential
+          }
+        });
+        if (error) {
+          return this._returnResult({ data: null, error });
+        }
+        return this._returnResult({ data, error: null });
+      });
+    } catch (error) {
+      if (isAuthError(error)) {
+        return this._returnResult({ data: null, error });
+      }
+      throw error;
+    }
+  }
+  /**
+   * Start passkey authentication.
+   * Returns WebAuthn credential request options to pass to navigator.credentials.get().
+   */
+  async _startPasskeyAuthentication(params) {
+    var _a;
+    assertPasskeyExperimentalEnabled(this.experimental);
+    try {
+      const { data, error } = await _request(this.fetch, "POST", `${this.url}/passkeys/authentication/options`, {
+        headers: this.headers,
+        body: {
+          gotrue_meta_security: { captcha_token: (_a = params === null || params === void 0 ? void 0 : params.options) === null || _a === void 0 ? void 0 : _a.captchaToken }
+        }
+      });
+      if (error) {
+        return this._returnResult({ data: null, error });
+      }
+      return this._returnResult({ data, error: null });
+    } catch (error) {
+      if (isAuthError(error)) {
+        return this._returnResult({ data: null, error });
+      }
+      throw error;
+    }
+  }
+  /**
+   * Verify passkey authentication and create a session.
+   * The credential should be the serialized output of navigator.credentials.get().
+   */
+  async _verifyPasskeyAuthentication(params) {
+    assertPasskeyExperimentalEnabled(this.experimental);
+    try {
+      const { data, error } = await _request(this.fetch, "POST", `${this.url}/passkeys/authentication/verify`, {
+        headers: this.headers,
+        body: {
+          challenge_id: params.challengeId,
+          credential: params.credential
+        },
+        xform: _sessionResponse
+      });
+      if (error) {
+        return this._returnResult({ data: null, error });
+      }
+      if (data.session) {
+        await this._saveSession(data.session);
+        await this._notifyAllSubscribers("SIGNED_IN", data.session);
+      }
+      return this._returnResult({ data, error: null });
+    } catch (error) {
+      if (isAuthError(error)) {
+        return this._returnResult({ data: null, error });
+      }
+      throw error;
+    }
+  }
+  /**
+   * List all passkeys for the current user.
+   */
+  async _listPasskeys() {
+    assertPasskeyExperimentalEnabled(this.experimental);
+    try {
+      return await this._useSession(async (result) => {
+        const { data: { session }, error: sessionError } = result;
+        if (sessionError) {
+          return this._returnResult({ data: null, error: sessionError });
+        }
+        if (!session) {
+          return this._returnResult({ data: null, error: new AuthSessionMissingError() });
+        }
+        const { data, error } = await _request(this.fetch, "GET", `${this.url}/passkeys`, {
+          headers: this.headers,
+          jwt: session.access_token,
+          xform: (data2) => ({ data: data2, error: null })
+        });
+        if (error) {
+          return this._returnResult({ data: null, error });
+        }
+        return this._returnResult({ data, error: null });
+      });
+    } catch (error) {
+      if (isAuthError(error)) {
+        return this._returnResult({ data: null, error });
+      }
+      throw error;
+    }
+  }
+  /**
+   * Update a passkey.
+   */
+  async _updatePasskey(params) {
+    assertPasskeyExperimentalEnabled(this.experimental);
+    try {
+      return await this._useSession(async (result) => {
+        const { data: { session }, error: sessionError } = result;
+        if (sessionError) {
+          return this._returnResult({ data: null, error: sessionError });
+        }
+        if (!session) {
+          return this._returnResult({ data: null, error: new AuthSessionMissingError() });
+        }
+        const { data, error } = await _request(this.fetch, "PATCH", `${this.url}/passkeys/${params.passkeyId}`, {
+          headers: this.headers,
+          jwt: session.access_token,
+          body: { friendly_name: params.friendlyName }
+        });
+        if (error) {
+          return this._returnResult({ data: null, error });
+        }
+        return this._returnResult({ data, error: null });
+      });
+    } catch (error) {
+      if (isAuthError(error)) {
+        return this._returnResult({ data: null, error });
+      }
+      throw error;
+    }
+  }
+  /**
+   * Delete a passkey.
+   */
+  async _deletePasskey(params) {
+    assertPasskeyExperimentalEnabled(this.experimental);
+    try {
+      return await this._useSession(async (result) => {
+        const { data: { session }, error: sessionError } = result;
+        if (sessionError) {
+          return this._returnResult({ data: null, error: sessionError });
+        }
+        if (!session) {
+          return this._returnResult({ data: null, error: new AuthSessionMissingError() });
+        }
+        const { error } = await _request(this.fetch, "DELETE", `${this.url}/passkeys/${params.passkeyId}`, {
+          headers: this.headers,
+          jwt: session.access_token,
+          noResolveJson: true
+        });
+        if (error) {
+          return this._returnResult({ data: null, error });
+        }
+        return this._returnResult({ data: null, error: null });
+      });
+    } catch (error) {
+      if (isAuthError(error)) {
+        return this._returnResult({ data: null, error });
+      }
+      throw error;
+    }
+  }
 };
 GoTrueClient.nextInstanceID = {};
 var GoTrueClient_default = GoTrueClient;
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/AuthAdminApi.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/AuthAdminApi.js
 var AuthAdminApi = GoTrueAdminApi;
 var AuthAdminApi_default = AuthAdminApi;
 
-// ../../node_modules/.pnpm/@supabase+auth-js@2.103.0/node_modules/@supabase/auth-js/dist/module/AuthClient.js
+// ../../node_modules/.pnpm/@supabase+auth-js@2.106.1/node_modules/@supabase/auth-js/dist/module/AuthClient.js
 var AuthClient = GoTrueClient_default;
 var AuthClient_default = AuthClient;
 
-// ../../node_modules/.pnpm/@supabase+supabase-js@2.103.0/node_modules/@supabase/supabase-js/dist/index.mjs
-var version4 = "2.103.0";
+// ../../node_modules/.pnpm/@supabase+supabase-js@2.106.1/node_modules/@supabase/supabase-js/dist/index.mjs
+var version4 = "2.106.1";
 var JS_ENV = "";
 if (typeof Deno !== "undefined") JS_ENV = "deno";
 else if (typeof document !== "undefined") JS_ENV = "web";
@@ -19957,6 +20680,127 @@ var DEFAULT_AUTH_OPTIONS = {
   flowType: "implicit"
 };
 var DEFAULT_REALTIME_OPTIONS = {};
+var DEFAULT_TRACE_PROPAGATION_OPTIONS = {
+  enabled: false,
+  respectSamplingDecision: true
+};
+function __awaiter2(thisArg, _arguments, P, generator) {
+  function adopt(value) {
+    return value instanceof P ? value : new P(function(resolve) {
+      resolve(value);
+    });
+  }
+  return new (P || (P = Promise))(function(resolve, reject) {
+    function fulfilled(value) {
+      try {
+        step(generator.next(value));
+      } catch (e) {
+        reject(e);
+      }
+    }
+    function rejected(value) {
+      try {
+        step(generator["throw"](value));
+      } catch (e) {
+        reject(e);
+      }
+    }
+    function step(result) {
+      result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
+    }
+    step((generator = generator.apply(thisArg, _arguments || [])).next());
+  });
+}
+var otelModulePromise = null;
+var OTEL_PKG = "@opentelemetry/api";
+function loadOtel() {
+  if (otelModulePromise === null) otelModulePromise = import(
+    /* webpackIgnore: true */
+    /* turbopackIgnore: true */
+    /* @vite-ignore */
+    OTEL_PKG
+  ).catch(() => null);
+  return otelModulePromise;
+}
+function extractTraceContext() {
+  return __awaiter2(this, void 0, void 0, function* () {
+    try {
+      const otel = yield loadOtel();
+      if (!otel || !otel.propagation || !otel.context) return null;
+      const carrier = {};
+      otel.propagation.inject(otel.context.active(), carrier);
+      const traceparent = carrier["traceparent"];
+      if (!traceparent) return null;
+      return {
+        traceparent,
+        tracestate: carrier["tracestate"],
+        baggage: carrier["baggage"]
+      };
+    } catch (_a) {
+      return null;
+    }
+  });
+}
+function parseTraceParent(traceparent) {
+  if (!traceparent || typeof traceparent !== "string") return null;
+  const parts = traceparent.split("-");
+  if (parts.length !== 4) return null;
+  const [version$1, traceId, parentId, traceFlags] = parts;
+  if (version$1.length !== 2 || traceId.length !== 32 || parentId.length !== 16 || traceFlags.length !== 2) return null;
+  const hexRegex = /^[0-9a-f]+$/i;
+  if (!hexRegex.test(version$1) || !hexRegex.test(traceId) || !hexRegex.test(parentId) || !hexRegex.test(traceFlags)) return null;
+  if (traceId === "00000000000000000000000000000000" || parentId === "0000000000000000") return null;
+  return {
+    version: version$1,
+    traceId,
+    parentId,
+    traceFlags,
+    isSampled: (parseInt(traceFlags, 16) & 1) === 1
+  };
+}
+function shouldPropagateToTarget(targetUrl, targets) {
+  if (!targetUrl || !targets || targets.length === 0) return false;
+  let url;
+  if (targetUrl instanceof URL) url = targetUrl;
+  else try {
+    url = new URL(targetUrl);
+  } catch (error) {
+    return false;
+  }
+  for (const target of targets) try {
+    if (typeof target === "string") {
+      if (matchStringTarget(url.hostname, target)) return true;
+    } else if (target instanceof RegExp) {
+      if (target.test(url.hostname)) return true;
+    } else if (typeof target === "function") {
+      if (target(url)) return true;
+    }
+  } catch (error) {
+    continue;
+  }
+  return false;
+}
+function matchStringTarget(hostname, target) {
+  if (target === hostname) return true;
+  if (target.startsWith("*.")) {
+    const domain = target.slice(2);
+    if (hostname.endsWith(domain)) {
+      if (hostname === domain || hostname.endsWith("." + domain)) return true;
+    }
+  }
+  return false;
+}
+function getDefaultPropagationTargets(supabaseUrl) {
+  const targets = [];
+  try {
+    const url = new URL(supabaseUrl);
+    targets.push(url.hostname);
+  } catch (error) {
+  }
+  targets.push("*.supabase.co", "*.supabase.in");
+  targets.push("localhost", "127.0.0.1", "[::1]");
+  return targets;
+}
 function _typeof3(o) {
   "@babel/helpers - typeof";
   return _typeof3 = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function(o$1) {
@@ -20015,31 +20859,61 @@ var resolveFetch4 = (customFetch) => {
 var resolveHeadersConstructor = () => {
   return Headers;
 };
-var fetchWithAuth = (supabaseKey, getAccessToken, customFetch) => {
+var fetchWithAuth = (supabaseKey, supabaseUrl, getAccessToken, customFetch, tracePropagationOptions) => {
   const fetch$1 = resolveFetch4(customFetch);
   const HeadersConstructor = resolveHeadersConstructor();
+  const traceEnabled = (tracePropagationOptions === null || tracePropagationOptions === void 0 ? void 0 : tracePropagationOptions.enabled) === true;
+  const respectSampling = (tracePropagationOptions === null || tracePropagationOptions === void 0 ? void 0 : tracePropagationOptions.respectSamplingDecision) !== false;
+  const traceTargets = traceEnabled ? getDefaultPropagationTargets(supabaseUrl) : null;
   return async (input, init) => {
     var _await$getAccessToken;
     const accessToken = (_await$getAccessToken = await getAccessToken()) !== null && _await$getAccessToken !== void 0 ? _await$getAccessToken : supabaseKey;
     let headers = new HeadersConstructor(init === null || init === void 0 ? void 0 : init.headers);
     if (!headers.has("apikey")) headers.set("apikey", supabaseKey);
     if (!headers.has("Authorization")) headers.set("Authorization", `Bearer ${accessToken}`);
+    if (traceTargets) {
+      const traceHeaders = await getTraceHeaders(input, traceTargets, respectSampling);
+      if (traceHeaders) {
+        if (traceHeaders.traceparent && !headers.has("traceparent")) headers.set("traceparent", traceHeaders.traceparent);
+        if (traceHeaders.tracestate && !headers.has("tracestate")) headers.set("tracestate", traceHeaders.tracestate);
+        if (traceHeaders.baggage && !headers.has("baggage")) headers.set("baggage", traceHeaders.baggage);
+      }
+    }
     return fetch$1(input, _objectSpread23(_objectSpread23({}, init), {}, { headers }));
   };
 };
+async function getTraceHeaders(input, targets, respectSampling) {
+  if (!shouldPropagateToTarget(typeof input === "string" ? input : input instanceof URL ? input : input.url, targets)) return null;
+  const traceContext = await extractTraceContext();
+  if (!traceContext || !traceContext.traceparent) return null;
+  if (respectSampling) {
+    const parsed = parseTraceParent(traceContext.traceparent);
+    if (parsed && !parsed.isSampled) return null;
+  }
+  return traceContext;
+}
+function normalizeTracePropagation(value) {
+  return typeof value === "boolean" ? { enabled: value } : value;
+}
 function ensureTrailingSlash(url) {
   return url.endsWith("/") ? url : url + "/";
 }
 function applySettingDefaults(options, defaults) {
-  var _DEFAULT_GLOBAL_OPTIO, _globalOptions$header;
+  var _DEFAULT_GLOBAL_OPTIO, _globalOptions$header, _ref, _tracePropagationOpti, _ref2, _tracePropagationOpti2;
   const { db: dbOptions, auth: authOptions, realtime: realtimeOptions, global: globalOptions } = options;
   const { db: DEFAULT_DB_OPTIONS$1, auth: DEFAULT_AUTH_OPTIONS$1, realtime: DEFAULT_REALTIME_OPTIONS$1, global: DEFAULT_GLOBAL_OPTIONS$1 } = defaults;
+  const tracePropagationOptions = normalizeTracePropagation(options.tracePropagation);
+  const DEFAULT_TRACE_PROPAGATION_OPTIONS$1 = normalizeTracePropagation(defaults.tracePropagation);
   const result = {
     db: _objectSpread23(_objectSpread23({}, DEFAULT_DB_OPTIONS$1), dbOptions),
     auth: _objectSpread23(_objectSpread23({}, DEFAULT_AUTH_OPTIONS$1), authOptions),
     realtime: _objectSpread23(_objectSpread23({}, DEFAULT_REALTIME_OPTIONS$1), realtimeOptions),
     storage: {},
     global: _objectSpread23(_objectSpread23(_objectSpread23({}, DEFAULT_GLOBAL_OPTIONS$1), globalOptions), {}, { headers: _objectSpread23(_objectSpread23({}, (_DEFAULT_GLOBAL_OPTIO = DEFAULT_GLOBAL_OPTIONS$1 === null || DEFAULT_GLOBAL_OPTIONS$1 === void 0 ? void 0 : DEFAULT_GLOBAL_OPTIONS$1.headers) !== null && _DEFAULT_GLOBAL_OPTIO !== void 0 ? _DEFAULT_GLOBAL_OPTIO : {}), (_globalOptions$header = globalOptions === null || globalOptions === void 0 ? void 0 : globalOptions.headers) !== null && _globalOptions$header !== void 0 ? _globalOptions$header : {}) }),
+    tracePropagation: {
+      enabled: (_ref = (_tracePropagationOpti = tracePropagationOptions === null || tracePropagationOptions === void 0 ? void 0 : tracePropagationOptions.enabled) !== null && _tracePropagationOpti !== void 0 ? _tracePropagationOpti : DEFAULT_TRACE_PROPAGATION_OPTIONS$1 === null || DEFAULT_TRACE_PROPAGATION_OPTIONS$1 === void 0 ? void 0 : DEFAULT_TRACE_PROPAGATION_OPTIONS$1.enabled) !== null && _ref !== void 0 ? _ref : false,
+      respectSamplingDecision: (_ref2 = (_tracePropagationOpti2 = tracePropagationOptions === null || tracePropagationOptions === void 0 ? void 0 : tracePropagationOptions.respectSamplingDecision) !== null && _tracePropagationOpti2 !== void 0 ? _tracePropagationOpti2 : DEFAULT_TRACE_PROPAGATION_OPTIONS$1 === null || DEFAULT_TRACE_PROPAGATION_OPTIONS$1 === void 0 ? void 0 : DEFAULT_TRACE_PROPAGATION_OPTIONS$1.respectSamplingDecision) !== null && _ref2 !== void 0 ? _ref2 : true
+    },
     accessToken: async () => ""
   };
   if (options.accessToken) result.accessToken = options.accessToken;
@@ -20083,7 +20957,7 @@ var SupabaseClient = class {
   * import { createClient } from '@supabase/supabase-js'
   *
   * // Create a single supabase client for interacting with your database
-  * const supabase = createClient('https://xyzcompany.supabase.co', 'publishable-or-anon-key')
+  * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
   * ```
   *
   * @example With a custom domain
@@ -20091,7 +20965,7 @@ var SupabaseClient = class {
   * import { createClient } from '@supabase/supabase-js'
   *
   * // Use a custom domain as the supabase URL
-  * const supabase = createClient('https://my-custom-domain.com', 'publishable-or-anon-key')
+  * const supabase = createClient('https://my-custom-domain.com', 'your-publishable-key')
   * ```
   *
   * @example With additional parameters
@@ -20111,7 +20985,7 @@ var SupabaseClient = class {
   *     headers: { 'x-my-custom-header': 'my-app-name' },
   *   },
   * }
-  * const supabase = createClient("https://xyzcompany.supabase.co", "publishable-or-anon-key", options)
+  * const supabase = createClient("https://xyzcompany.supabase.co", "your-publishable-key", options)
   * ```
   *
   * @exampleDescription With custom schemas
@@ -20124,7 +20998,7 @@ var SupabaseClient = class {
   * ```js
   * import { createClient } from '@supabase/supabase-js'
   *
-  * const supabase = createClient('https://xyzcompany.supabase.co', 'publishable-or-anon-key', {
+  * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key', {
   *   // Provide a custom schema. Defaults to "public".
   *   db: { schema: 'other_schema' }
   * })
@@ -20139,7 +21013,7 @@ var SupabaseClient = class {
   * ```js
   * import { createClient } from '@supabase/supabase-js'
   *
-  * const supabase = createClient('https://xyzcompany.supabase.co', 'publishable-or-anon-key', {
+  * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key', {
   *   global: { fetch: fetch.bind(globalThis) }
   * })
   * ```
@@ -20153,7 +21027,7 @@ var SupabaseClient = class {
   * import { createClient } from '@supabase/supabase-js'
   * import AsyncStorage from "@react-native-async-storage/async-storage";
   *
-  * const supabase = createClient("https://xyzcompany.supabase.co", "publishable-or-anon-key", {
+  * const supabase = createClient("https://xyzcompany.supabase.co", "your-publishable-key", {
   *   auth: {
   *     storage: AsyncStorage,
   *     autoRefreshToken: true,
@@ -20230,7 +21104,7 @@ var SupabaseClient = class {
   *   }
   * }
   *
-  * const supabase = createClient("https://xyzcompany.supabase.co", "publishable-or-anon-key", {
+  * const supabase = createClient("https://xyzcompany.supabase.co", "your-publishable-key", {
   *   auth: {
   *     storage: new LargeSecureStore(),
   *     autoRefreshToken: true,
@@ -20244,7 +21118,7 @@ var SupabaseClient = class {
   * ```ts
   * import { createClient } from '@supabase/supabase-js'
   *
-  * const supabase = createClient('https://xyzcompany.supabase.co', 'public-anon-key')
+  * const supabase = createClient('https://xyzcompany.supabase.co', 'your-publishable-key')
   *
   * const { data } = await supabase.from('profiles').select('*')
   * ```
@@ -20265,9 +21139,11 @@ var SupabaseClient = class {
       db: DEFAULT_DB_OPTIONS,
       realtime: DEFAULT_REALTIME_OPTIONS,
       auth: _objectSpread23(_objectSpread23({}, DEFAULT_AUTH_OPTIONS), {}, { storageKey: defaultStorageKey }),
-      global: DEFAULT_GLOBAL_OPTIONS
+      global: DEFAULT_GLOBAL_OPTIONS,
+      tracePropagation: DEFAULT_TRACE_PROPAGATION_OPTIONS
     };
     const settings = applySettingDefaults(options !== null && options !== void 0 ? options : {}, DEFAULTS);
+    this.settings = settings;
     this.storageKey = (_settings$auth$storag = settings.auth.storageKey) !== null && _settings$auth$storag !== void 0 ? _settings$auth$storag : "";
     this.headers = (_settings$global$head = settings.global.headers) !== null && _settings$global$head !== void 0 ? _settings$global$head : {};
     if (!settings.accessToken) {
@@ -20279,10 +21155,11 @@ var SupabaseClient = class {
         throw new Error(`@supabase/supabase-js: Supabase Client is configured with the accessToken option, accessing supabase.auth.${String(prop)} is not possible`);
       } });
     }
-    this.fetch = fetchWithAuth(supabaseKey, this._getAccessToken.bind(this), settings.global.fetch);
+    this.fetch = fetchWithAuth(supabaseKey, supabaseUrl, this._getAccessToken.bind(this), settings.global.fetch, settings.tracePropagation);
     this.realtime = this._initRealtimeClient(_objectSpread23({
       headers: this.headers,
-      accessToken: this._getAccessToken.bind(this)
+      accessToken: this._getAccessToken.bind(this),
+      fetch: this.fetch
     }, settings.realtime));
     if (this.accessToken) Promise.resolve(this.accessToken()).then((token) => this.realtime.setAuth(token)).catch((e) => console.warn("Failed to set initial Realtime auth token:", e));
     this.rest = new PostgrestClient(new URL("rest/v1", baseUrl).href, {
@@ -20358,6 +21235,7 @@ var SupabaseClient = class {
   * @param {string} name - The name of the Realtime channel.
   * @param {Object} opts - The options to pass to the Realtime channel.
   *
+  * @category Realtime
   */
   channel(name, opts = { config: {} }) {
     return this.realtime.channel(name, opts);
@@ -20365,7 +21243,7 @@ var SupabaseClient = class {
   /**
   * Returns all Realtime channels.
   *
-  * @category Initializing
+  * @category Realtime
   *
   * @example Get all channels
   * ```js
@@ -20381,7 +21259,7 @@ var SupabaseClient = class {
   * @param {RealtimeChannel} channel - The name of the Realtime channel.
   *
   *
-  * @category Initializing
+  * @category Realtime
   *
   * @remarks
   * - Removing a channel is a great way to maintain the performance of your project's Realtime service as well as your database if you're listening to Postgres changes. Supabase will automatically handle cleanup 30 seconds after a client is disconnected, but unused channels may cause degradation as more clients are simultaneously subscribed.
@@ -20397,7 +21275,7 @@ var SupabaseClient = class {
   /**
   * Unsubscribes and removes all Realtime channels from Realtime client.
   *
-  * @category Initializing
+  * @category Realtime
   *
   * @remarks
   * - Removing channels is a great way to maintain the performance of your project's Realtime service as well as your database if you're listening to Postgres changes. Supabase will automatically handle cleanup 30 seconds after a client is disconnected, but unused channels may cause degradation as more clients are simultaneously subscribed.
@@ -20417,7 +21295,7 @@ var SupabaseClient = class {
     const { data } = await _this.auth.getSession();
     return (_data$session$access_ = (_data$session = data.session) === null || _data$session === void 0 ? void 0 : _data$session.access_token) !== null && _data$session$access_ !== void 0 ? _data$session$access_ : _this.supabaseKey;
   }
-  _initSupabaseAuthClient({ autoRefreshToken, persistSession, detectSessionInUrl, storage, userStorage, storageKey, flowType, lock, debug, throwOnError }, headers, fetch$1) {
+  _initSupabaseAuthClient({ autoRefreshToken, persistSession, detectSessionInUrl, storage, userStorage, storageKey, flowType, lock, debug, throwOnError, experimental, lockAcquireTimeout, skipAutoInitialize }, headers, fetch$1) {
     const authHeaders = {
       Authorization: `Bearer ${this.supabaseKey}`,
       apikey: `${this.supabaseKey}`
@@ -20435,7 +21313,10 @@ var SupabaseClient = class {
       lock,
       debug,
       throwOnError,
+      experimental,
       fetch: fetch$1,
+      lockAcquireTimeout,
+      skipAutoInitialize,
       hasCustomAuthorizationHeader: Object.keys(this.headers).some((key) => key.toLowerCase() === "authorization")
     });
   }
@@ -20522,4 +21403,4 @@ export {
   SupabaseClient,
   createClient
 };
-//# sourceMappingURL=chunk-H3O43F5P.js.map
+//# sourceMappingURL=chunk-3JGO32FA.js.map