smoonb 1.0.9 → 1.0.11

package/CHANGELOG.md

@@ -4,6 +4,26 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.0.11] - 2026-10-10
+
+### Changed
+
+- Recommend retaining destination Realtime capacity limits by default: the interactive prompt now uses `(S/n)` in Portuguese and `(Y/n)` in English. Values are still displayed before confirmation; declining, non-interactive execution and strict security checks retain their existing behavior.
+
+## [1.0.10] - 2026-10-10
+
+### Fixed
+
+- When a Realtime PATCH succeeds but capacity limits remain different, show the backup and destination values and offer an explicit choice to retain the destination limits. Record accepted differences instead of failing with field names only or claiming an identical restore.
+- Retry readback without repeating PATCH, then re-read all selected Realtime settings after consent. Security switches, connection pools, invalid values, API failures and concurrent configuration changes remain failures.
+- Record refused quota differences in the failure report; allow a retry selecting only Realtime without repeating Database, Auth or Storage. Non-interactive runs never silently accept differences.
+- Preserve SMTP verification limits in combined reports and show completion with notes when any selected component has accepted differences or unverified secrets.
+- Replace obsolete manual-configuration messages in the English and Portuguese Auth/Realtime summaries.
+
+### Tests
+
+- Cover legacy and API snapshots, delayed readback, consent and rejection, non-interactive execution, strict security validation, concurrent changes, secret-safe errors, partial reports and Realtime-only retries.
+
 ## [1.0.9] - 2026-10-10
 
 ### Fixed

package/README.md

@@ -26,7 +26,7 @@ smoonb performs a complete backup of all components of your Supabase project:
 - ✅ **Edge Functions** (download automático do servidor)
 - ✅ **Auth Settings** (configurações de autenticação via Management API)
 - ✅ **Storage Buckets** (backup completo: metadados, configurações e todos os arquivos via Management API + Supabase Client, cria ZIP no padrão do Dashboard)
-- ✅ **Realtime Settings** (7 parâmetros capturados interativamente)
+- ✅ **Realtime Settings** (current settings captured through the Management API)
 - ✅ **Supabase .temp** (arquivos temporários do Supabase CLI)
 - ✅ **Migrations** (todas as migrations do projeto via `supabase migration fetch`)
 
@@ -217,7 +217,7 @@ npx smoonb backup --skip-supabase-version-check
    - ⚡ Edge Functions (explanation about link reset and download)
    - 📦 Storage (explanation about full backup: file download + ZIP in Dashboard format)
    - 🔐 Auth Settings (explanation about configurations)
-   - 🔄 Realtime Settings (explanation about interactive capture of 7 parameters)
+   - 🔄 Realtime Settings (current configuration captured through the API)
    - 🗑️ Cleanup options (functions, .temp, migrations after backup)
 8. **Configuration summary** - Shows everything that will be done
 9. **Final confirmation** - Confirms before starting
@@ -226,7 +226,7 @@ npx smoonb backup --skip-supabase-version-check
    - 📊 2/10 - Separate Database SQL (schema, data, roles)
    - 🔧 3/10 - Database Extensions and Settings Backup
    - 🔐 4/10 - Auth Settings Backup (if selected)
-   - 🔄 5/10 - Realtime Settings Backup (if selected) - 7 parameters captured interactively
+   - 🔄 5/10 - Realtime Settings Backup (if selected) - fresh API snapshot
    - 📦 6/10 - Storage Backup (if selected) - Full file download + ZIP in Dashboard format
    - 👥 7/10 - Custom Roles Backup
    - ⚡ 8/10 - Edge Functions Backup (if selected)
@@ -319,6 +319,10 @@ If a 1.0.8 restore stopped at `Configuration verification failed: smtp_pass` and
 
 Legacy Realtime captures may be stale: restoration reproduces the recorded values and date, not the source project's current settings. New backups capture Realtime directly through the API. Legacy function backups without the JWT flag default to requiring JWT; new backups preserve that flag.
 
+Since 1.0.10, if Supabase does not apply numeric Realtime capacity limits, smoonb shows **backup value vs current destination value** and asks whether to retain the destination values. Starting with 1.0.11, the recommended default is **yes — `(Y/n)`**. After acceptance, it re-reads the configuration and records `completed_with_accepted_differences` with exact values, without claiming an identical restore. Security switches, service activation and connection pools still require a match. The tool does not change your plan or spend cap.
+
+If an earlier restore ended only with `Configuration verification failed: max_presence_events_per_second, max_payload_size_in_kb`, consult its report and run `npx smoonb@1.0.11 restore` selecting **only Realtime Settings**. Do not repeat completed components. If you agree with the displayed limits, answer **yes** to the new prompt. Refusal leaves the step pending and records the differences; changes already applied are not undone.
+
 Reports are saved after each stage, including failures. External services cannot share the database transaction: earlier stages remain completed if a later stage fails. Do not reload the database into a populated destination. Resolve the reported stage and select only pending components, or use another empty project.
 
 Unsupported internal data (such as encrypted Vault secrets without key migration) and destination plan/version incompatibilities stop the operation. Verified status covers the selected components; validate login, email delivery and business workflows before production use.
@@ -472,7 +476,7 @@ restore/
 #### Auth, Realtime
 - **Management API**: Uses Personal Access Token
 - **JSON Export**: Configurations exported as JSON
-- **Realtime Settings**: Interactive capture of 7 parameters:
+- **Realtime Settings**: Fresh API capture, including:
   1. Enable Realtime service
   2. Allow public access
   3. Database connection pool size
@@ -480,25 +484,25 @@ restore/
   5. Max events per second
   6. Max presence events per second
   7. Max payload size in KB
-- **Manual for some**: Some settings need to be applied manually for security
+- **SMTP password**: Not exportable; requested with hidden input during restore.
 
 ### Restore Strategy
 
 #### Database
 - **Format Support**:
-  - `.backup.gz` - Automatically decompresses via Docker
+  - `.backup.gz` - Reads compressed content without modifying the archive
   - `.backup` - Restores directly via `psql` (Docker)
-- **Clean Restore**: Can overwrite existing data (with confirmation)
+- **Empty Destination**: Requires an empty destination for the database; skip this component when retrying later stages that failed.
 
 #### Edge Functions
-- **Clean Deploy**: Cleans `supabase/functions` before deploy
-- **Link Reset**: Ensures correct link with target project
+- **Isolated Deploy**: Uses a temporary workspace, preserving local `supabase/functions` files
+- **Explicit Destination**: Passes the target project reference to the CLI
 - **Automatic Deploy**: Uses `supabase functions deploy`
 
 #### Other Components
 - **Database Settings**: Restores via SQL
 - **Storage**: Restores buckets and files from ZIP (if available) or displays information for manual configuration
-- **Auth/Realtime**: Displays information for manual configuration in Dashboard
+- **Auth/Realtime**: Applies and checks configurations through the API; reports SMTP verification limits and any explicitly accepted Realtime capacity differences.
 
 ### Cross-Platform
 

package/README.pt-BR.md

@@ -26,7 +26,7 @@ O smoonb faz backup completo de todos os componentes do seu projeto Supabase:
 - ✅ **Edge Functions** (download automático do servidor)
 - ✅ **Auth Settings** (configurações de autenticação via Management API)
 - ✅ **Storage Buckets** (backup completo: metadados, configurações e todos os arquivos via Management API + Supabase Client, cria ZIP no padrão do Dashboard)
-- ✅ **Realtime Settings** (7 parâmetros capturados interativamente)
+- ✅ **Realtime Settings** (configurações atuais capturadas pela Management API)
 - ✅ **Supabase .temp** (arquivos temporários do Supabase CLI)
 - ✅ **Migrations** (todas as migrations do projeto via `supabase migration fetch`)
 
@@ -319,6 +319,10 @@ Se uma restauração 1.0.8 parou em `Configuration verification failed: smtp_pas
 
 A captura antiga de Realtime pode conter valores desatualizados: a restauração reproduz os valores e a data registrados, não o estado atual do projeto original. Novos backups capturam Realtime diretamente pela API. Em backups antigos sem o sinalizador de JWT de Functions, o padrão seguro é exigir JWT; os novos backups guardam esse sinalizador.
 
+Desde a versão 1.0.10, se o Supabase não aplicar limites numéricos de Realtime, o smoonb mostra **valor do backup × valor atual do destino** e pergunta se você aceita manter os valores do destino. A partir da versão 1.0.11, o padrão recomendado é **sim — `(S/n)`**. Ao aceitar, ele relê as configurações e registra `completed_with_accepted_differences`, com os valores exatos, sem afirmar que o destino é idêntico ao backup. Configurações de segurança, ativação do serviço e pools de conexão continuam exigindo correspondência. A ferramenta não altera seu plano nem o limite de gastos.
+
+Se uma restauração anterior terminou apenas com `Configuration verification failed: max_presence_events_per_second, max_payload_size_in_kb`, consulte o relatório anterior e execute `npx smoonb@1.0.11 restore` selecionando **somente Realtime Settings**. Não repita componentes já concluídos. Se concordar com os limites mostrados, responda **sim** à nova pergunta. Recusar mantém a etapa pendente e registra as diferenças; alterações já aplicadas não são desfeitas.
+
 O relatório é salvo durante cada etapa, inclusive em falhas. Serviços externos não participam da transação do banco: se uma etapa posterior falhar, as anteriores permanecem registradas como concluídas. Não repita a carga do banco em um destino já preenchido. Resolva a etapa indicada e selecione apenas os componentes pendentes, ou use outro projeto vazio.
 
 Dados internos não suportados (por exemplo, Vault com segredos criptografados sem migração da chave) e configurações incompatíveis com o plano/versão do destino interrompem o processo. O status verificado cobre os componentes selecionados; ainda é necessário validar login, envio de e-mail e fluxos de negócio antes de usar o destino em produção.
@@ -472,7 +476,7 @@ restore/
 #### Auth, Realtime
 - **Management API**: Usa Personal Access Token
 - **JSON Export**: Configurações exportadas como JSON
-- **Realtime Settings**: Captura interativa de 7 parâmetros:
+- **Realtime Settings**: Captura atual pela API, incluindo:
   1. Habilitar serviço Realtime
   2. Permitir acesso público
   3. Tamanho do pool de conexões do database
@@ -480,25 +484,25 @@ restore/
   5. Máximo de eventos por segundo
   6. Máximo de eventos de presença por segundo
   7. Tamanho máximo do payload em KB
-- **Manual para alguns**: Alguns settings precisam ser aplicados manualmente por segurança
+- **Senha SMTP**: Não exportável; solicitada em campo oculto durante a restauração.
 
 ### Estratégia de Restauração
 
 #### Database
 - **Suporte a Formatos**:
-  - `.backup.gz` - Descompacta automaticamente via Docker
+  - `.backup.gz` - Lê o conteúdo compactado sem alterar o arquivo original
   - `.backup` - Restaura diretamente via `psql` (Docker)
-- **Restauração Limpa**: Pode sobrescrever dados existentes (com confirmação)
+- **Destino Vazio**: Exige destino vazio para restaurar o banco; desmarque esse componente ao repetir etapas posteriores que falharam.
 
 #### Edge Functions
-- **Deploy Limpo**: Limpa `supabase/functions` antes do deploy
-- **Reset de Link**: Garante link correto com projeto destino
+- **Deploy Isolado**: Usa uma pasta temporária, preservando os arquivos locais de `supabase/functions`
+- **Destino Explícito**: Passa a referência do projeto de destino ao CLI
 - **Deploy Automático**: Usa `supabase functions deploy`
 
 #### Outros Componentes
 - **Database Settings**: Restaura via SQL
 - **Storage**: Restaura buckets e arquivos do ZIP (se disponível) ou exibe informações para configuração manual
-- **Auth/Realtime**: Exibe informações para configuração manual no Dashboard
+- **Auth/Realtime**: Aplica e confere as configurações pela API; registra os limites da verificação SMTP e diferenças de capacidade do Realtime aceitas explicitamente.
 
 ### Multiplataforma
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "smoonb",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "description": "Complete Supabase backup and migration tool. https://www.smoonb.com/#price",
   "preferGlobal": false,
   "preventGlobalInstall": true,

package/src/commands/restore/index.js

@@ -174,7 +174,10 @@ module.exports = async (options = {}) => {
     const restoreResults = await runRestore({ selectedBackup, components, targetProject, processDir, postgresMajor:parsedMajor, remapUrls });
 
     // Exibir resumo final
-    ui.success(`\n🎉 ${getT('restore.index.restoreComplete')}`);
+    if (Object.values(restoreResults).some(result => !result.verified))
+      ui.warn(`\n${getT('restore.index.restoreCompleteWithNotes')}`);
+    else
+      ui.success(`\n🎉 ${getT('restore.index.restoreComplete')}`);
     ui.link(`🎯 ${getT('restore.index.targetProjectFinal', { projectId: targetProject.targetProjectId || getT('restore.index.notConfigured') })}`);
 
     if (restoreResults.database) {
@@ -211,7 +214,10 @@ module.exports = async (options = {}) => {
     }
 
     if (restoreResults.realtimeSettings) {
-      ui.success(`🔄 ${getT('restore.index.realtimeSettingsRestored')}`);
+      if (restoreResults.realtimeSettings.verified)
+        ui.success(`🔄 ${getT('restore.index.realtimeSettingsRestored')}`);
+      else
+        ui.warn(getT('restore.realtime.accepted'));
     }
 
     sendTelemetry({

package/src/commands/restore/management.js

@@ -1,5 +1,15 @@
 const { isMasked } = require('../../utils/auth-secrets');
 
+class ConfigurationVerificationError extends Error {
+  constructor(fields, updatedFields) {
+    super(`Configuration verification failed: ${fields.join(', ')}`);
+    this.name = 'ConfigurationVerificationError';
+    // Field names only: Auth readback may contain credentials.
+    this.fields = [...fields];
+    this.updatedFields = [...updatedFields];
+  }
+}
+
 async function management(
   target,
   endpoint,
@@ -80,9 +90,7 @@ async function applyConfig(
     (k) => JSON.stringify(desired[k]) !== JSON.stringify(after[k]),
   );
   if (differences.length)
-    throw new Error(
-      `Configuration verification failed: ${differences.join(', ')}`,
-    );
+    throw new ConfigurationVerificationError(differences, Object.keys(patch));
   return {
     success: true,
     verified: secretFields.length === 0,
@@ -93,4 +101,4 @@ async function applyConfig(
     fields_updated: Object.keys(patch),
   };
 }
-module.exports = { management, applyConfig };
+module.exports = { management, applyConfig, ConfigurationVerificationError };

package/src/commands/restore/runner.js

@@ -4,6 +4,10 @@ const { t } = require('../../i18n');
 const { buildRestore, readDump } = require('./dump');
 const { storagePlan } = require('./steps/06-storage');
 const { prepareAuth } = require('./auth');
+const {
+  RealtimeRestoreError,
+  capacityLimits,
+} = require('./steps/08-realtime-settings');
 const steps = {
   database: require('./steps/03-database'),
   edgeFunctions: require('./steps/04-edge-functions'),
@@ -110,21 +114,45 @@ async function runRestore(
         result?.email_delivery_verified === false &&
         result?.write_only_fields_accepted?.length === 1 &&
         result.write_only_fields_accepted[0] === 'smtp_pass';
-      if (!result?.success || (!result?.verified && !acceptedSmtp))
+      const acceptedLimits =
+        name === 'realtimeSettings' &&
+        result?.effective_configuration_verified === true &&
+        result?.destination_limits_accepted === true &&
+        Array.isArray(result?.accepted_differences) &&
+        result.accepted_differences.length > 0 &&
+        result.accepted_differences.every(
+          (d) =>
+            capacityLimits.has(d.field) &&
+            Number.isInteger(d.backup_value) &&
+            d.backup_value > 0 &&
+            Number.isInteger(d.destination_value) &&
+            d.destination_value > 0,
+        );
+      if (
+        !result?.success ||
+        (!result?.verified && !acceptedSmtp && !acceptedLimits)
+      )
         throw new Error(`Component ${name} did not pass verification`);
       report.results[name] = {
         ...result,
         status: result.verified
           ? 'verified'
-          : 'applied_with_unverified_secrets',
+          : acceptedLimits
+            ? 'completed_with_accepted_differences'
+            : 'applied_with_unverified_secrets',
       };
       save();
       if (acceptedSmtp)
         console.log((global.smoonbI18n?.t || t)('restore.smtp.accepted'));
     }
-    report.status = Object.values(report.results).every((r) => r.verified)
-      ? 'verified'
-      : 'applied_with_unverified_secrets';
+    const results = Object.values(report.results);
+    report.status = results.some(
+      (r) => r.status === 'completed_with_accepted_differences',
+    )
+      ? 'completed_with_accepted_differences'
+      : results.every((r) => r.verified)
+        ? 'verified'
+        : 'applied_with_unverified_secrets';
     report.completed_at = new Date().toISOString();
     save();
     return report.results;
@@ -132,6 +160,8 @@ async function runRestore(
     report.status = 'failed';
     report.failed_component = current;
     report.results[current] = { success: false, status: 'failed' };
+    if (current === 'realtimeSettings' && error instanceof RealtimeRestoreError)
+      report.results[current].unapplied_limits = error.differences;
     report.completed_at = new Date().toISOString();
     save();
     throw error;

package/src/commands/restore/steps/08-realtime-settings.js

@@ -1,6 +1,12 @@
 const fs = require('fs');
 const path = require('path');
-const { applyConfig } = require('../management');
+const {
+  applyConfig,
+  management,
+  ConfigurationVerificationError,
+} = require('../management');
+const { confirm } = require('../../../utils/prompt');
+const { t } = require('../../../i18n');
 const allowed = [
   'private_only',
   'connection_pool',
@@ -15,7 +21,35 @@ const allowed = [
   'suspend',
   'presence_enabled',
 ];
-module.exports = async ({ backupPath, targetProject }) => {
+// Only capacity limits can be explicitly retained. Security, service switches
+// and database connection pools must still match the backup exactly.
+const capacityLimits = new Set([
+  'max_concurrent_users',
+  'max_events_per_second',
+  'max_bytes_per_second',
+  'max_channels_per_client',
+  'max_joins_per_second',
+  'max_presence_events_per_second',
+  'max_payload_size_in_kb',
+]);
+class RealtimeRestoreError extends Error {
+  constructor(message, differences = []) {
+    super(message);
+    this.name = 'RealtimeRestoreError';
+    this.differences = differences;
+  }
+}
+module.exports = async (
+  { backupPath, targetProject },
+  {
+    request = management,
+    confirmLimits = confirm,
+    interactive = Boolean(process.stdin.isTTY),
+    wait = (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+    log = console.log,
+  } = {},
+) => {
+  const getT = global.smoonbI18n?.t || t;
   const backup = JSON.parse(
     fs.readFileSync(path.join(backupPath, 'realtime-settings.json'), 'utf8'),
   );
@@ -44,18 +78,117 @@ module.exports = async ({ backupPath, targetProject }) => {
         ];
       }),
     );
-    console.log(
-      `Realtime: restoring the recorded snapshot (${backup.realtime_settings.captured_at || 'date unavailable'}).`,
+    log(
+      getT('restore.realtime.snapshot', {
+        date:
+          backup.realtime_settings.captured_at ||
+          getT('restore.realtime.unknownDate'),
+      }),
     );
   }
-  const result = await applyConfig(
-    targetProject,
-    'config/realtime',
-    desired,
-    allowed,
-  );
-  return {
-    ...result,
-    captured_at: backup.captured_at || backup.realtime_settings?.captured_at,
-  };
+  const capturedAt =
+    backup.captured_at || backup.realtime_settings?.captured_at;
+  const mismatches = (state) =>
+    Object.keys(desired).filter(
+      (key) => JSON.stringify(desired[key]) !== JSON.stringify(state[key]),
+    );
+  try {
+    const result = await applyConfig(
+      targetProject,
+      'config/realtime',
+      desired,
+      allowed,
+      request,
+    );
+    return { ...result, captured_at: capturedAt };
+  } catch (error) {
+    if (!(error instanceof ConfigurationVerificationError)) throw error;
+    // A successful PATCH may take time to become visible. Never repeat PATCH
+    // just to poll: changing Realtime settings can disconnect clients.
+    let actual;
+    let fields;
+    for (const delay of [1000, 2000]) {
+      await wait(delay);
+      actual = await request(targetProject, 'config/realtime');
+      fields = mismatches(actual);
+      if (!fields.length)
+        return {
+          success: true,
+          verified: true,
+          configuration_readback_verified: true,
+          fields_verified: Object.keys(desired).length,
+          fields_updated: error.updatedFields,
+          captured_at: capturedAt,
+        };
+    }
+    const canRetain = fields.every(
+      (key) =>
+        capacityLimits.has(key) &&
+        Number.isInteger(desired[key]) &&
+        desired[key] > 0 &&
+        Number.isInteger(actual[key]) &&
+        actual[key] > 0,
+    );
+    if (!canRetain)
+      throw new RealtimeRestoreError(
+        getT('restore.realtime.strictMismatch', { fields: fields.join(', ') }),
+      );
+    const differences = fields.map((field) => ({
+      field,
+      backup_value: desired[field],
+      destination_value: actual[field],
+    }));
+    log(getT('restore.realtime.limitsNotApplied'));
+    for (const difference of differences)
+      log(
+        getT('restore.realtime.difference', {
+          field: getT(`restore.realtime.fields.${difference.field}`),
+          backup: difference.backup_value,
+          destination: difference.destination_value,
+        }),
+      );
+    log(getT('restore.realtime.limitsExplanation'));
+    if (
+      !interactive ||
+      (await confirmLimits(getT('restore.realtime.acceptLimits'), true)) !==
+        true
+    )
+      throw new RealtimeRestoreError(
+        getT('restore.realtime.notAccepted'),
+        differences,
+      );
+    // The user approved these exact numeric differences. A fresh read must
+    // still match both the approved limits and every other backed-up field.
+    const accepted = {
+      ...desired,
+      ...Object.fromEntries(
+        differences.map((d) => [d.field, d.destination_value]),
+      ),
+    };
+    const final = await request(targetProject, 'config/realtime');
+    if (
+      Object.keys(accepted).some(
+        (key) => JSON.stringify(accepted[key]) !== JSON.stringify(final[key]),
+      )
+    )
+      throw new RealtimeRestoreError(
+        getT('restore.realtime.changed'),
+        differences,
+      );
+    log(getT('restore.realtime.accepted'));
+    return {
+      success: true,
+      verified: false,
+      effective_configuration_verified: true,
+      destination_limits_accepted: true,
+      accepted_differences: differences,
+      fields_verified: Object.keys(desired).length - differences.length,
+      fields_updated: error.updatedFields.filter(
+        (key) => !fields.includes(key),
+      ),
+      captured_at: capturedAt,
+    };
+  }
 };
+module.exports.RealtimeRestoreError = RealtimeRestoreError;
+module.exports.capacityLimits = capacityLimits;

package/src/i18n/locales/en.json

@@ -24,6 +24,24 @@
   "restore.smtp.required": "Enter the real provider password, not the protected value in auth-settings.json. Use Ctrl+C to cancel before restoring any components.",
   "restore.smtp.interactiveRequired": "Restoring Auth requires the SMTP password. Run in an interactive terminal to enter it securely before any components are restored.",
   "restore.smtp.accepted": "⚠️ Auth: settings checked; SMTP password accepted by the API. Supabase does not allow password readback verification. Test an authentication email before using the project.",
+  "restore.realtime.snapshot": "Realtime: using the snapshot recorded at {date}.",
+  "restore.realtime.unknownDate": "unknown date",
+  "restore.realtime.limitsNotApplied": "⚠️ Supabase did not apply these Realtime limits from the backup:",
+  "restore.realtime.difference": "   - {field}: backup = {backup}; destination = {destination}.",
+  "restore.realtime.limitsExplanation": "Limits may depend on the plan and organization billing restrictions; this response does not identify the cause. You can keep the current destination values. This choice will be recorded as accepted differences, without claiming an identical copy of the backup. No plan or spend cap will be changed.",
+  "restore.realtime.acceptLimits": "Keep these destination limits and complete Realtime with the differences above recorded?",
+  "restore.realtime.notAccepted": "Realtime remains pending: the backup limits were not applied and the destination values were not accepted. Changes already applied were not undone. Consult report.json and select only Realtime Settings in an interactive terminal to retry this step.",
+  "restore.realtime.changed": "Realtime configuration changed during confirmation. The step remains pending; consult report.json and select only Realtime Settings to retry.",
+  "restore.realtime.strictMismatch": "Realtime did not confirm these settings: {fields}. This difference cannot be accepted as a capacity adjustment. The step remains pending; consult report.json and select only Realtime Settings to retry.",
+  "restore.realtime.accepted": "⚠️ Realtime completed with destination limits accepted by you. Differences from the backup are recorded in report.json; the other Realtime settings from the backup were checked.",
+  "restore.realtime.fields.max_concurrent_users": "Concurrent clients",
+  "restore.realtime.fields.max_events_per_second": "Events per second",
+  "restore.realtime.fields.max_bytes_per_second": "Bytes per second",
+  "restore.realtime.fields.max_channels_per_client": "Channels per client",
+  "restore.realtime.fields.max_joins_per_second": "Channel joins per second",
+  "restore.realtime.fields.max_presence_events_per_second": "Presence events per second",
+  "restore.realtime.fields.max_payload_size_in_kb": "Maximum message size (KB)",
+  "restore.index.restoreCompleteWithNotes": "Selected components restored with notes. Review the accepted differences and pending verification below.",
 
   "error.generic": "Something went wrong.",
   "error.pathNotFound": "Path not found: {path}",
@@ -576,7 +594,7 @@
 
   "restore.steps.components.auth.title": "Auth Settings:",
   "restore.steps.components.auth.description1": "Auth settings will be applied through the API and verified on the destination.",
-  "restore.steps.components.auth.description2": "Includes SMTP and redirects recorded in the backup.",
+  "restore.steps.components.auth.description2": "Includes redirects and SMTP settings; the real provider password will be requested when needed.",
   "restore.steps.components.auth.include": "Do you want to restore Auth",
 
   "restore.steps.components.storage.title": "Storage:",
@@ -595,7 +613,7 @@
 
   "restore.steps.components.realtime.title": "Realtime Settings:",
   "restore.steps.components.realtime.description1": "Realtime settings from the backup will be applied and verified through the API.",
-  "restore.steps.components.realtime.description2": "Legacy captures reproduce the values recorded on their capture date.",
+  "restore.steps.components.realtime.description2": "Uses the recorded snapshot; limits that are not applied will be shown for your decision.",
   "restore.steps.components.realtime.include": "Do you want to restore Realtime",
   "restore.steps.components.database.include": "Do you want to restore Database",
 
@@ -752,21 +770,21 @@
   "restore.index.targetProjectFinal": "Target project: {projectId}",
   "restore.index.databaseRestored": "Database: Restored successfully via Docker",
   "restore.index.edgeFunctionsRestored": "Edge Functions: {success}/{total} functions restored",
-  "restore.index.authSettingsRestored": "Auth Settings: Settings displayed for manual configuration",
+  "restore.index.authSettingsRestored": "Auth Settings: Settings applied and checked through the API",
   "restore.index.storageRestored": "Storage: {buckets} bucket(s) restored, {files} file(s) uploaded",
   "restore.index.storageMetadataOnly": "Storage: {buckets} bucket(s) found - metadata only (.storage.zip file not found)",
   "restore.index.databaseSettingsRestored": "Database Settings: Extensions and settings restored via SQL",
-  "restore.index.realtimeSettingsRestored": "Realtime Settings: Settings displayed for manual configuration",
+  "restore.index.realtimeSettingsRestored": "Realtime Settings: Settings applied and checked through the API",
   "restore.index.error": "Error during restoration: {message}",
 
   "restore.utils.componentsTitle": "Components that will be restored:",
   "restore.utils.database": "Database (psql -f via Docker)",
   "restore.utils.edgeFunctions": "Edge Functions: {count} function(s)",
-  "restore.utils.authSettings": "Auth Settings: Display URL and values for manual configuration",
+  "restore.utils.authSettings": "Auth Settings: Apply and check through the API; SMTP password requested when needed",
   "restore.utils.storageBuckets": "Storage Buckets: Automatic restoration of buckets and files via API",
   "restore.utils.storageMetadataOnly": "Storage Buckets: Display information (metadata only - .storage.zip file not found)",
   "restore.utils.databaseSettings": "Database Extensions and Settings: Restore via SQL",
-  "restore.utils.realtimeSettings": "Realtime Settings: Display URL and values for manual configuration",
+  "restore.utils.realtimeSettings": "Realtime Settings: Apply and check through the API; limit differences require your choice",
   "restore.utils.summaryTitle": "Restoration Summary:",
   "restore.utils.summarySeparator": "═══════════════════════════════════════════════════════════════════════════════",
   "restore.utils.backup": "Backup: {name}",

package/src/i18n/locales/pt-BR.json

@@ -24,6 +24,24 @@
   "restore.smtp.required": "Informe a senha real do provedor, não o valor protegido de auth-settings.json. Use Ctrl+C para cancelar antes de restaurar os componentes.",
   "restore.smtp.interactiveRequired": "A restauração de Auth precisa da senha SMTP. Execute em um terminal interativo para informá-la de forma oculta antes de restaurar os componentes.",
   "restore.smtp.accepted": "⚠️ Auth: configurações conferidas; senha SMTP aceita pela API. O Supabase não permite conferir a senha por leitura. Teste o envio de e-mail de autenticação antes de usar o projeto.",
+  "restore.realtime.snapshot": "Realtime: usando a captura registrada em {date}.",
+  "restore.realtime.unknownDate": "data não informada",
+  "restore.realtime.limitsNotApplied": "⚠️ O Supabase não aplicou estes limites de Realtime do backup:",
+  "restore.realtime.difference": "   - {field}: backup = {backup}; destino = {destination}.",
+  "restore.realtime.limitsExplanation": "Limites podem depender do plano e das restrições de cobrança da organização; esta resposta não informa a causa. Você pode manter os valores atuais do destino. Essa escolha será registrada no relatório como diferença aceita, sem declarar uma cópia idêntica do backup. Nenhum plano ou limite de gastos será alterado.",
+  "restore.realtime.acceptLimits": "Manter esses limites do destino e concluir Realtime com as diferenças acima registradas?",
+  "restore.realtime.notAccepted": "Realtime permanece pendente: os limites do backup não foram aplicados e os valores do destino não foram aceitos. Alterações já aplicadas não foram desfeitas. Consulte report.json e, para tentar esta etapa novamente, selecione somente Realtime Settings em um terminal interativo.",
+  "restore.realtime.changed": "A configuração Realtime mudou durante a confirmação. A etapa permanece pendente; consulte report.json e tente novamente selecionando somente Realtime Settings.",
+  "restore.realtime.strictMismatch": "Realtime não confirmou estas configurações: {fields}. Essa diferença não pode ser aceita como ajuste de limites. A etapa permanece pendente; consulte report.json e tente novamente selecionando somente Realtime Settings.",
+  "restore.realtime.accepted": "⚠️ Realtime concluído com os limites do destino aceitos por você. As diferenças do backup estão registradas em report.json; as demais configurações de Realtime do backup foram conferidas.",
+  "restore.realtime.fields.max_concurrent_users": "Clientes simultâneos",
+  "restore.realtime.fields.max_events_per_second": "Eventos por segundo",
+  "restore.realtime.fields.max_bytes_per_second": "Bytes por segundo",
+  "restore.realtime.fields.max_channels_per_client": "Canais por cliente",
+  "restore.realtime.fields.max_joins_per_second": "Entradas em canais por segundo",
+  "restore.realtime.fields.max_presence_events_per_second": "Eventos de presença por segundo",
+  "restore.realtime.fields.max_payload_size_in_kb": "Tamanho máximo da mensagem (KB)",
+  "restore.index.restoreCompleteWithNotes": "Restauração dos componentes selecionados concluída com observações. Confira abaixo as diferenças aceitas e verificações pendentes.",
 
   "error.generic": "Algo inesperado aconteceu.",
   "error.pathNotFound": "Caminho não encontrado: {path}",
@@ -575,7 +593,7 @@
 
   "restore.steps.components.auth.title": "Auth Settings:",
   "restore.steps.components.auth.description1": "As configurações de Auth serão aplicadas pela API e verificadas no destino.",
-  "restore.steps.components.auth.description2": "Inclui SMTP e redirecionamentos registrados no backup.",
+  "restore.steps.components.auth.description2": "Inclui redirecionamentos e configurações SMTP; a senha real do provedor será solicitada quando necessária.",
   "restore.steps.components.auth.include": "Deseja restaurar Auth",
 
   "restore.steps.components.storage.title": "Storage:",
@@ -594,7 +612,7 @@
 
   "restore.steps.components.realtime.title": "Realtime Settings:",
   "restore.steps.components.realtime.description1": "As configurações de Realtime do backup serão aplicadas e verificadas pela API.",
-  "restore.steps.components.realtime.description2": "Capturas antigas reproduzem os valores registrados naquela data.",
+  "restore.steps.components.realtime.description2": "Usa os valores registrados na captura; limites não aplicados serão mostrados para sua decisão.",
   "restore.steps.components.realtime.include": "Deseja restaurar Realtime",
   "restore.steps.components.database.include": "Deseja restaurar Database",
 
@@ -751,21 +769,21 @@
   "restore.index.targetProjectFinal": "Projeto destino: {projectId}",
   "restore.index.databaseRestored": "Database: Restaurada com sucesso via Docker",
   "restore.index.edgeFunctionsRestored": "Edge Functions: {success}/{total} functions restauradas",
-  "restore.index.authSettingsRestored": "Auth Settings: Configurações exibidas para configuração manual",
+  "restore.index.authSettingsRestored": "Auth Settings: Configurações aplicadas e conferidas pela API",
   "restore.index.storageRestored": "Storage: {buckets} bucket(s) restaurado(s), {files} arquivo(s) enviado(s)",
   "restore.index.storageMetadataOnly": "Storage: {buckets} bucket(s) encontrado(s) - apenas metadados (arquivo .storage.zip não encontrado)",
   "restore.index.databaseSettingsRestored": "Database Settings: Extensões e configurações restauradas via SQL",
-  "restore.index.realtimeSettingsRestored": "Realtime Settings: Configurações exibidas para configuração manual",
+  "restore.index.realtimeSettingsRestored": "Realtime Settings: Configurações aplicadas e conferidas pela API",
   "restore.index.error": "Erro na restauração: {message}",
 
   "restore.utils.componentsTitle": "Componentes que serão restaurados:",
   "restore.utils.database": "Database (psql -f via Docker)",
   "restore.utils.edgeFunctions": "Edge Functions: {count} function(s)",
-  "restore.utils.authSettings": "Auth Settings: Exibir URL e valores para configuração manual",
+  "restore.utils.authSettings": "Auth Settings: Aplicar pela API e conferir as configurações; senha SMTP solicitada quando necessária",
   "restore.utils.storageBuckets": "Storage Buckets: Restauração automática de buckets e arquivos via API",
   "restore.utils.storageMetadataOnly": "Storage Buckets: Exibir informações (apenas metadados - arquivo .storage.zip não encontrado)",
   "restore.utils.databaseSettings": "Database Extensions and Settings: Restaurar via SQL",
-  "restore.utils.realtimeSettings": "Realtime Settings: Exibir URL e valores para configuração manual",
+  "restore.utils.realtimeSettings": "Realtime Settings: Aplicar pela API e conferir; diferenças nos limites exigem sua escolha",
   "restore.utils.summaryTitle": "Resumo da Restauração:",
   "restore.utils.summarySeparator": "═══════════════════════════════════════════════════════════════════════════════",
   "restore.utils.backup": "Backup: {name}",