lazypock 0.9.0 → 0.10.0

package/dist/index.cjs

@@ -61,8 +61,10 @@ var HttpClient = class {
   /**
    * @param baseUrl The API base URL (e.g. `http://localhost:4000/api`). Trailing slash stripped.
    * @param authStore The auth store providing the token for Authorization headers.
+   * @param connectionId Optional per-client connection id, sent as the
+   * `X-Connection-Id` header on every request (realtime origin-exclusion).
    */
-  constructor(baseUrl, authStore) {
+  constructor(baseUrl, authStore, connectionId) {
     /**
      * Abort controllers for in-flight requests, keyed by their cancellation key
      * (default `METHOD path`). A new request with the same key aborts the
@@ -80,6 +82,7 @@ var HttpClient = class {
     this.enableAutoCancellation = true;
     this.baseUrl = baseUrl.replace(/\/+$/, "");
     this.authStore = authStore;
+    this.connectionId = connectionId;
     this.defaultFetch = globalThis.fetch.bind(globalThis);
   }
   async refreshAuth() {
@@ -232,6 +235,9 @@ var HttpClient = class {
     if (this.authStore.token) {
       headers["Authorization"] = "Bearer " + this.authStore.token;
     }
+    if (this.connectionId && !headers["X-Connection-Id"] && !headers["x-connection-id"]) {
+      headers["X-Connection-Id"] = this.connectionId;
+    }
     const init = {
       method,
       headers,
@@ -947,6 +953,16 @@ var RealtimeService = class {
   get lastToken() {
     return this.token;
   }
+  /**
+   * Set the per-client connection id (browser tab / device). The SDK
+   * appends it as the `connectionId` socket query param at connect time
+   * (unless the URL already carries one), matching the `X-Connection-Id`
+   * header the HTTP client sends — together they let the server exclude
+   * the originating connection from its own realtime broadcasts.
+   */
+  setConnectionId(id) {
+    this.connectionId = id;
+  }
   /**
    * Set the socket URL. Useful before subscribing so the SDK can
    * auto-connect on the first {@link subscribe}.
@@ -1068,6 +1084,9 @@ var RealtimeService = class {
     if (token) {
       url += (url.includes("?") ? "&" : "?") + "token=" + encodeURIComponent(token);
     }
+    if (this.connectionId && !url.includes("connectionId=")) {
+      url += (url.includes("?") ? "&" : "?") + "connectionId=" + encodeURIComponent(this.connectionId);
+    }
     this.ws = new WebSocket(url);
     this.ws.onopen = () => {
       this.reconnectAttempt = 0;
@@ -1614,26 +1633,27 @@ export function createClient(options: LazypockClientOptions): TypedClient {
 }
 
 export class TypedClient extends LazypockClient {
-  // K extends keyof LazypockCollections (rather than a generic string with a
-  // conditional return) so the IDE suggests collection names and unknown names
-  // are rejected at compile time:
-  //   client.collection("posts")  // suggested + typed
-  //   client.collection("nope")   // TS error
+  // The constraint is "keyof LazypockCollections | (string & {})" rather than a
+  // bare generic string or a strict keyof:
+  //   - the keyof LazypockCollections member is what makes the IDE suggest
+  //     collection names, and known literals resolve to the typed service:
+  //       client.collection("posts")  // suggested + typed
+  //   - the string & {} member keeps unknown/dynamic names compiling \u2014 they
+  //     resolve to the untyped service, so a studio that manages
+  //     user-created collections can still call collection(someString).
   //
-  // create()/update() take the collection's *CreateData \u2014 the read model
-  // omits password/hidden fields, but the write model carries them.
-  // T extends string (rather than keyof LazypockCollections) with a conditional
-  // return type, so the IDE suggests collection names AND unknown/dynamic names
-  // still resolve to the untyped service \u2014 a studio that manages
-  // user-created collections must be able to call collection(someString).
+  // The (string & {}) intersection keeps the union from collapsing to plain
+  // string (which would silently kill the suggestions).
   //
   // create()/update() take the collection's *CreateData \u2014 the read model
   // omits password/hidden fields, but the write model carries them.
-  override collection<T extends string>(name: T): T extends keyof LazypockCollections
-    ? CollectionService<LazypockCollections[T], LazypockCreateData[T]>
+  override collection<K extends keyof LazypockCollections | (string & {})>(
+    name: K,
+  ): K extends keyof LazypockCollections
+    ? CollectionService<LazypockCollections[K], LazypockCreateData[K]>
     : CollectionService<unknown> {
-    return super.collection(name) as T extends keyof LazypockCollections
-      ? CollectionService<LazypockCollections[T], LazypockCreateData[T]>
+    return super.collection(name) as K extends keyof LazypockCollections
+      ? CollectionService<LazypockCollections[K], LazypockCreateData[K]>
       : CollectionService<unknown>;
   }
 }
@@ -1675,6 +1695,15 @@ function createDataMemberLines(f) {
 }
 
 // src/lazypock.ts
+function createConnectionId() {
+  try {
+    if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
+      return crypto.randomUUID();
+    }
+  } catch {
+  }
+  return "conn-" + Math.random().toString(36).slice(2) + Date.now().toString(36);
+}
 var LazypockClient = class {
   /**
    * Create a new Lazypock client.
@@ -1685,11 +1714,13 @@ var LazypockClient = class {
     const baseUrl = options.baseUrl.replace(/\/+$/, "");
     this.authStore = options.authStore ?? new AuthStore(options.storage ?? memoryStorage);
     this.authReady = options.authStore ? Promise.resolve() : this.authStore.init();
-    this.http = new HttpClient(baseUrl, this.authStore);
+    const connectionId = createConnectionId();
+    this.http = new HttpClient(baseUrl, this.authStore, connectionId);
     this.realtime = options.realtime ?? new RealtimeService();
     if (!options.realtime) {
       this.realtime.setUrl(wsUrlFromBaseUrl(baseUrl));
     }
+    this.realtime.setConnectionId(connectionId);
     this.realtime.setTokenProvider(() => this.authStore.token);
     this.authStore.onChange(() => this.realtime.refresh());
     this.authReady.then(() => this.realtime.refresh());