CHANGELOG.md

Changelog

1.5.3 (2026-09-03)

Miscellaneous Chores

• release 1.5.3 (#142) (96243af)

1.5.2 (2026-09-01)

Bug Fixes

• attach error listeners to pooled pg connections (#136) (c231b95)

1.5.1 (2026-08-31)

Features

• withOAuthProtectedResource url config (#117) (11cce29)
• add withOAuthProtectedResource (#113) (3908590)
• add withRequiredClaims user-mode auth gate (#127) (05a95b6)
• errors: add self-identifying errors with hints and diagnostics (#130) (b8b086c)
• flow upstream ctx types through withSupabase nesting (#119) (f393c6e)
• middleware: ship withPostgresClient and withPostgresAdminClient (#115) (77656ba)
• validate middleware prereqs against Supabase context (#126) (1576369)
• withSupabase on the @supabase/middleware engine (#88) (2b5d4fd)

Bug Fixes

• construct supabaseAdmin lazily on first access (#124) (fbb652f)
• declare pg and keep it out of the root CJS bundle (#122) (f05307f)
• harden oauth-protected-resource header and URL edge cases (#131) (0c1a2b6)
• migrate withOAuthProtectedResource to defineMiddleware (#116) (04831ce)
• report missing JWKS as ENV_ERROR in user-mode verification (#128) (9c064c5)
• require node >=22 to match @supabase/middleware (#132) (d60afcf)

Miscellaneous Chores

• force release 1.5.1 (#133) (0eed2d8)
• rewind phantom 1.5.0 version files (#135) (b9e3874)

1.4.1 (2026-07-22)

Bug Fixes

• add Database type override to elysia adapter (#106) (8d5c781)
• add hono adapter Database type override (#100) (ca53801)
• apply Injectable programmatically so NestJS adapter loads in raw Node (#107) (9e45b42)

1.4.0 (2026-07-13)

Features

• explicit cors config shape ('default' | 'disabled' | { headers }) (#102) (297925f)

1.3.1 (2026-07-03)

Bug Fixes

• expand @module comment to restore rich JSR overview (#96) (a41aeeb)

1.3.0 (2026-07-03)

Features

• add attw type export checking to CI (#93) (e1e2b72)

Bug Fixes

• add ./peer/supabase-js to jsr.json exports (#94) (04276d0)
• test: correct sub claim in remote JWKS token fixture and wire tests into CI (#89) (744105b)

1.2.0 (2026-06-17)

Features

• add NestJS adapter (#55) (3052a6b)
• add support for HS256 JWKs (#83) (67c840d)

Bug Fixes

• docs: Replace manual context casting with Hono Env type (#77) (5ac7ccf)
• test: lint regression in hono tests (#79) (182412b)

1.1.0 (2026-05-19)

Features

• add Elysia adapter (#46) (148169e)
• env: add support for JWKS discovery endpoints (#53) (45d677a)

Bug Fixes

• auth: skip user mode when token has sb_ prefix (#67) (b193216)
• ci: update node packages (#57) (f275907)
• jsr: resolve slow-type errors in elysia and h3 adapters (#69) (7c56b13)

1.0.0 (2026-05-06)

Miscellaneous Chores

• release 1.0.0 (#50) (67de77f)

0.2.0 (2026-04-24)

⚠ BREAKING CHANGES

• when multiple auth modes are allowed, a present-but-invalid JWT is now rejected with InvalidCredentialsError instead of falling through to the next mode. Clients that previously relied on silent fallthrough (e.g., stale token + valid apikey) must now either omit the Authorization header or refresh the token.

Features

• add H3 adapter (#36) (4310142)

Bug Fixes

• reject invalid JWTs immediately instead of falling through to next auth mode (#35) (0251690)

0.1.4 (2026-04-01)

Features

• add supabaseOptions and refactor client creation to options objects (#19) (5a10099)
• exposing keyName to SupabaseContext (#22) (7f1b1a7)
• implement server-side DX primitives, wrappers, and adapters (#6) (d206e5c)
• passing down Database generic type to createClient (#16) (4053f6d)
• set initial release version (8352bda)
• standardize error response (#18) (a7ddb74)

Bug Fixes

• key name resolution for client creation (#9) (e17bd4e)
• move SKILL.md into skills/ subdirectory to align with agentskills spec (#24) (10c8780)
• release action (#29) (91580d1)
• remove provenance until repo is public (2ebbc71)
• removing core lib exports from root index (#17) (5e53e3c)
• support bare array format for SUPABASE_JWKS (#8) (6bd2e4d)

0.1.3 (2026-04-01)

Bug Fixes

• move SKILL.md into skills/ subdirectory to align with agentskills spec (#24) (10c8780)

0.1.2 (2026-04-01)

Features

• exposing keyName to SupabaseContext (#22) (7f1b1a7)

0.1.1 (2026-03-26)

Features

• add supabaseOptions and refactor client creation to options objects (#19) (5a10099)
• implement server-side DX primitives, wrappers, and adapters (#6) (d206e5c)
• passing down Database generic type to createClient (#16) (4053f6d)
• set initial release version (8352bda)
• standardize error response (#18) (a7ddb74)

Bug Fixes

• key name resolution for client creation (#9) (e17bd4e)
• remove provenance until repo is public (2ebbc71)
• removing core lib exports from root index (#17) (5e53e3c)
• support bare array format for SUPABASE_JWKS (#8) (6bd2e4d)

0.1.0 (2026-03-24)

Features

• implement server-side DX primitives, wrappers, and adapters
• support bare array format for SUPABASE_JWKS