fix: remove public beta and alpha designations

README.md

@@ -5,8 +5,6 @@
 [![pkg.pr.new](https://pkg.pr.new/badge/supabase/server)](https://pkg.pr.new/~/supabase/server)
 [![Docs](https://img.shields.io/badge/docs-supabase.github.io-3ECF8E?logo=readthedocs&logoColor=white)](https://supabase.github.io/server/)
 
-> **v1.X — Public Beta.** First stable release under SemVer: breaking changes only ship as a major bump. The package is still early — expect ergonomic improvements and features to land frequently in minor releases. Found a rough edge? [Open an issue](https://github.com/supabase/server/issues) or [submit a PR](https://github.com/supabase/server/blob/main/CONTRIBUTING.md).
-
 > **Coming from a `0.x` release?** See [MIGRATION.md](MIGRATION.md) for the v0 → v1 rename map (`allow` → `auth`, `'public'` → `'publishable'`, `authType` → `authMode`, `claims` → `jwtClaims`, …).
 
 `@supabase/server` gives you batteries included access to the

skills/supabase-server/SKILL.md

@@ -5,8 +5,6 @@ description: Use when planning or writing server-side code that uses `@supabase/
 
 # @supabase/server
 
-> **v1.0 — Public Beta.** First stable release under SemVer: breaking changes only ship as a major bump. The package is still early — expect ergonomic improvements and features to land frequently in minor releases. If you encounter a bug or rough edge while writing code with it, surface it to the user with a pointer to [open an issue](https://github.com/supabase/server/issues).
-
 > **This is a brand new package.** There is no information available online yet — no blog posts, no Stack Overflow answers, no tutorials. Do not search the web for usage examples. Rely exclusively on the documentation files listed below and the source code in this repository.
 
 > **The config option is `auth`, not `allow`.** `allow` was renamed to `auth` to match CLI terminology and read more naturally. The legacy `allow` key still works (with a one-time `console.warn`) but is deprecated and will be removed in a future major release. **Always emit `auth` in new code** — e.g. `withSupabase({ auth: 'user' }, ...)`. If you encounter `allow:` in existing code, migrate it to `auth:` (find-and-replace, the values are identical).

src/oauth-protected-resource/index.ts

@@ -2,10 +2,6 @@
  * OAuth 2.1 Protected Resource middleware (RFC 9728) for Supabase
  * Edge Functions.
  *
- * The OAuth Protected Resource surface is alpha — the config shape, the
- * contributed context key, and the metadata route may change in a minor
- * release.
- *
  * @module
  * @packageDocumentation
  */

src/oauth-protected-resource/responses.ts

@@ -15,10 +15,6 @@ import type {
  * The metadata URL defaults to the Edge Functions derivation and throws off
  * platform; pass `resourceMetadataUrl` to override for custom setups.
  *
- * The OAuth Protected Resource surface is alpha — the config shape, the
- * contributed context key, and the metadata route may change in a minor
- * release.
- *
  * @category Middleware
  */
 export function unauthorizedResponse(
@@ -43,11 +39,6 @@ export function unauthorizedResponse(
  * URLs default to the Edge Functions derivation and throw off platform; pass
  * `resource` / `authorizationServers` to override.
  *
- *
- * The OAuth Protected Resource surface is alpha — the config shape, the
- * contributed context key, and the metadata route may change in a minor
- * release.
- *
  * @category Middleware
  */
 export function resourceMetadataResponse(

src/oauth-protected-resource/types.ts

@@ -1,10 +1,6 @@
 /**
  * Options for {@link unauthorizedResponse}.
  *
- * The OAuth Protected Resource surface is alpha — the config shape, the
- * contributed context key, and the metadata route may change in a minor
- * release.
- *
  * @category Types
  */
 export interface UnauthorizedResponseOptions {
@@ -15,10 +11,6 @@ export interface UnauthorizedResponseOptions {
 /**
  * Options for {@link resourceMetadataResponse}.
  *
- * The OAuth Protected Resource surface is alpha — the config shape, the
- * contributed context key, and the metadata route may change in a minor
- * release.
- *
  * @category Types
  */
 export interface ResourceMetadataOptions {

src/oauth-protected-resource/url.ts

@@ -12,10 +12,6 @@ import { isEdgeFunctions } from './runtime.js'
 /**
  * A configured URL: either a fixed value, or derived per request.
  *
- * The OAuth Protected Resource surface is alpha — the config shape, the
- * contributed context key, and the metadata route may change in a minor
- * release.
- *
  * @category Types
  */
 export type UrlOption = string | ((req: Request) => string)
@@ -171,10 +167,6 @@ export function defaultAuthorizationServer(req: Request): string {
  * @param supabaseUrl - The project URL, e.g. `https://<ref>.supabase.co` (the
  * same value passed to `createClient()`).
  *
- * The OAuth Protected Resource surface is alpha — the config shape, the
- * contributed context key, and the metadata route may change in a minor
- * release.
- *
  * @category Middleware
  *
  * @example

src/oauth-protected-resource/with-oauth-protected-resource.ts

@@ -14,11 +14,6 @@ import type { UrlOption } from './url.js'
 
 /**
  * Shape contributed at `ctx.oauthProtectedResource`.
- *
- * The OAuth Protected Resource surface is alpha — the config shape, the
- * contributed context key, and the metadata route may change in a minor
- * release.
- *
  */
 export interface OAuthProtectedResourceContribution {
   /** Absolute URL of this resource's OAuth Protected Resource Metadata document (RFC 9728). */
@@ -32,10 +27,6 @@ export interface OAuthProtectedResourceContribution {
  * to values derived from the request as it arrives through the Supabase Edge
  * Functions proxy, so no configuration is needed there.
  *
- * The OAuth Protected Resource surface is alpha — the config shape, the
- * contributed context key, and the metadata route may change in a minor
- * release.
- *
  * @category Types
  */
 export interface OAuthProtectedResourceConfig extends ShortCircuitConfig {
@@ -95,10 +86,6 @@ export interface OAuthProtectedResourceConfig extends ShortCircuitConfig {
  * composition is refused when the stack is built, since the gate would
  * answer discovery and preflight before this middleware runs.
  *
- * The OAuth Protected Resource surface is alpha — the config shape, the
- * contributed context key, and the metadata route may change in a minor
- * release.
- *
  * @category Middleware
  *
  * @example Supabase Edge Functions — zero config