@flaredev/core 0.10.0 → 0.12.0

package/dist/index.d.ts

@@ -1,5 +1,6 @@
-import { F as Field, C as CreateInput, U as UpdateInput, R as Resource, S as StoredField } from './policy-DFimkxdx.js';
-export { B as BelongsToField, a as BooleanField, b as ClientResource, D as DEFAULT_FILE_MAX_BYTES, c as DateField, d as DateTimeField, E as EnumField, e as FILE_CATEGORIES, f as FieldKind, g as FieldValue, h as FileCategory, i as FileField, j as FloatField, H as HasManyField, I as IntField, J as JsonField, k as JsonOptions, M as MultiSelectField, N as NUMBER_FORMATS, l as NumberFormat, P as Policy, m as PolicyAction, n as PolicyConfig, o as PolicyError, p as PolicyOwnership, q as RESERVED_FIELD_NAMES, r as RecordOf, s as ResourceConfig, t as ResourceDefinitionError, u as STRING_FORMATS, v as StringField, w as StringFormat, T as TEXT_FORMATS, x as TagsField, y as TagsOptions, z as TextField, A as TextFormat, G as allowedActions, K as can, L as clientResource, O as columnName, Q as defaultFieldLabel, V as definePolicy, W as defineResource, X as field, Y as fileMaxBytes, Z as mimeTypesFor, _ as ownershipFilter, $ as storedFields } from './policy-DFimkxdx.js';
+export { R as Rate, b as RateLimitConfig, a as RateLimitDecision, c as RateLimitStore, d as RateLimitedAction, e as RateSyntaxError, f as fixedWindow, p as parseRate, r as rateFor, g as rateLimitKey, h as ratesIn } from './rate-limit-ClbdZioJ.js';
+import { F as Field, C as CreateInput, U as UpdateInput, R as Resource, S as StoredField } from './policy-b4FXN3ZJ.js';
+export { B as BelongsToField, f as BooleanField, g as ClientResource, D as DEFAULT_FILE_MAX_BYTES, h as DateField, i as DateTimeField, E as EnumField, j as FILE_CATEGORIES, k as FieldCondition, l as FieldKind, m as FieldValue, n as FileCategory, o as FileField, q as FloatField, H as HasManyField, I as ISSUE_CODES, r as IntField, c as IssueCode, J as JsonField, s as JsonOptions, M as MultiSelectField, N as NUMBER_FORMATS, t as NumberFormat, d as PROBLEM_CODES, b as Policy, u as PolicyAction, v as PolicyConfig, x as PolicyError, y as PolicyOwnership, e as ProblemBody, P as ProblemCode, a as ProblemIssue, z as RESERVED_FIELD_NAMES, A as RecordOf, G as ResourceConfig, K as ResourceDefinitionError, L as STRING_FORMATS, O as StringField, Q as StringFormat, T as TEXT_FORMATS, V as TagsField, W as TagsOptions, X as TextField, Y as TextFormat, Z as allowedActions, _ as can, $ as clientResource, a0 as columnName, a1 as conditionHolds, a2 as defaultFieldLabel, a3 as definePolicy, a4 as defineResource, a5 as describeCondition, a6 as field, a7 as fileMaxBytes, a8 as mimeTypesFor, a9 as ownershipFilter, p as problemResponse, aa as storedFields, w as wantsJson } from './policy-b4FXN3ZJ.js';
 import { z } from 'zod';
 
 /**
@@ -141,6 +142,19 @@ interface StorageBucket {
         truncated: boolean;
         cursor?: string;
     }>;
+    /**
+     * A URL that serves this object directly, for a provider that is already a CDN.
+     *
+     * Returning one makes `createReadUrl` hand it back instead of a signed, expiring URL
+     * through this app — which is the point of Cloudinary or UploadThing, and the reason
+     * to pay for them. It also means the file is readable by anyone who has the link, for
+     * as long as it exists: there is no token to expire and no policy consulted on the way
+     * in. Buckets that hold anything private leave this undefined, and R2 and disk do.
+     *
+     * Return `undefined` for a key this bucket cannot address publicly, and the signed
+     * path is used for it instead.
+     */
+    publicUrl?(key: string): string | undefined;
 }
 interface StorageObjectBody {
     body: ReadableStream;
@@ -187,7 +201,13 @@ declare function createStorage(options: StorageOptions): {
         key: string;
         expiresAt: Date;
     }>;
-    /** A temporary URL that serves the object. */
+    /**
+     * A temporary URL that serves the object.
+     *
+     * On a bucket that is its own CDN, this is that provider's URL and is neither
+     * temporary nor private — see {@link StorageBucket.publicUrl}. `downloadAs` still
+     * takes the signed path, because forcing a filename is this app's header to set.
+     */
     createReadUrl(read: ReadUrlOptions): Promise<string>;
     delete: (key: string) => Promise<void>;
     /** Handles `PUT <routePath>?token=` (upload) and `GET <routePath>?token=` (read). */
@@ -331,6 +351,79 @@ declare function fromMinorUnits(minor: number, currency?: string): number;
  */
 declare function hasTooManyPlaces(amount: number, currency?: string): boolean;
 
+/**
+ * Turning an enum option into a Prisma enum member name, and back.
+ *
+ * In core rather than in the CLI because three places need the same rule and they must
+ * not drift: the Prisma schema generator writes the members, the seed writer writes
+ * values through them, and the app's own Prisma store has to translate in both
+ * directions at runtime.
+ *
+ * A Prisma enum member has to be an identifier, so an option that is not one is renamed
+ * and the real value is kept with `@map`. That mapping applies to the database column,
+ * not to the client: Prisma's generated client speaks member names, so `A+` stored in
+ * Postgres arrives in JavaScript as `A_2b`. Translating at the store boundary is what
+ * keeps that out of the rest of the app — the point of the exercise is that the user
+ * sees `A+`.
+ */
+/**
+ * The identifier a Prisma enum member gets. `in-progress` can't be one, so it becomes
+ * `in_progress`, and `A+` becomes `A_2b`, each with the real value in `@map`.
+ *
+ * Anything going through the Prisma client — `createMany` in a seed, a `where` clause —
+ * has to use this name rather than the value stored in the column, so it is exported
+ * and shared rather than written twice.
+ *
+ * `-` and a space become `_` rather than `_2d` and `_20`. That is not the tidiest rule,
+ * but it is the right one: both were reachable long before the rest of the punctuation
+ * was — `-` through the field grammar, a space through a hand-written descriptor — and
+ * escaping them now would quietly rename `in_progress` in every schema already
+ * generated, breaking every `where` clause written against it.
+ *
+ * Everything else is escaped by code point, which is what stops two options flattening
+ * onto one member: `A+` and `A-` both became `A_` before this, and a Prisma schema that
+ * declares the same member twice does not generate at all. The separators can still
+ * collide with each other (`in progress` against `in-progress`), so callers check with
+ * `enumMemberCollision` rather than trusting this to be injective.
+ */
+declare function prismaEnumMember(option: string): string;
+/**
+ * The first pair of options that would end up as the same member name, if there is one.
+ *
+ * Escaping by code point rules out the collisions that come up in practice, but not all
+ * of them: `in progress` and `in-progress` both fold to `in_progress`, an option spelled
+ * literally `A_2b` collides with `A+`, and `A_` with `A-`. Rare, and worth catching
+ * anyway — the alternative is a Prisma schema that declares one member twice and fails to
+ * generate, with an error that says nothing about which two options caused it.
+ */
+declare function enumMemberCollision(options: readonly string[]): {
+    a: string;
+    b: string;
+    member: string;
+} | undefined;
+/**
+ * The two lookups a store needs to translate a resource's enum values, by field.
+ *
+ * Built once per resource rather than per row. `toMember` is used on the way in — to
+ * Prisma — and `toValue` on the way out; a field whose options are all identifiers
+ * already is left out of both, so the common case costs nothing.
+ */
+interface EnumTranslation {
+    toMember: Record<string, string>;
+    toValue: Record<string, string>;
+}
+/**
+ * Translation tables for every enum field whose options are not already identifiers.
+ *
+ * `fields` is the resource's stored fields, as `storedFields()` gives them. Taking that
+ * rather than a `Resource` keeps this usable from a store that was handed a descriptor
+ * and from the generator, which works field by field.
+ */
+declare function enumTranslations(fields: Iterable<readonly [string, {
+    kind: string;
+    options?: readonly string[];
+}]>): Record<string, EnumTranslation>;
+
 /**
  * Zod schemas derived from a descriptor at runtime. Unknown keys are rejected,
  * so clients can't set `id`, timestamps or undeclared columns (no mass assignment).
@@ -396,6 +489,29 @@ interface RelationGraph {
 declare class RelationError extends Error {
     constructor(message: string);
 }
+/**
+ * The one relation target that is not a generated resource.
+ *
+ * Better Auth owns the account table — `user` in Drizzle, `User` in Prisma — and
+ * generating a `User` resource to point at would create a second, competing user table.
+ * So `belongsTo("User")` resolves to the auth table instead, which is what makes "who
+ * reported it" a relation like any other rather than a bare string column.
+ */
+declare const AUTH_USER = "User";
+/** Whether a belongsTo target is Better Auth's account table rather than a resource. */
+declare const isAuthUserTarget: (target: string) => target is "User";
+/**
+ * What `onDelete` a relation to the auth user gets when the descriptor doesn't say.
+ *
+ * `set null` when the field is optional, which is the case worth defaulting for: a
+ * person who closes their account should not be held open by a lost-property report
+ * from two years ago, and the report itself usually wants to outlive them.
+ *
+ * `restrict` when the field is required, because there is nothing else it could be — a
+ * required column cannot be set to null, and silently deleting the record instead
+ * (`cascade`) would destroy data the user never asked to lose.
+ */
+declare const defaultAuthUserOnDelete: (required: boolean) => "restrict" | "set null";
 /**
  * Resolve belongsTo/hasMany across all resources. Throws for belongsTo targets that
  * don't exist and for hasMany declarations without a matching belongsTo on the target.
@@ -626,6 +742,6 @@ type SeedUser = (user: SeedUserInput) => Promise<CredentialUserRows["user"]>;
 type Seed = (context: SeedContext) => void | Promise<void>;
 declare function defineSeed(seed: Seed): Seed;
 
-declare const FLARE_VERSION = "0.10.0";
+declare const FLARE_VERSION = "0.12.0";
 
-export { type BelongsToRelation, type Country, CreateInput, type CredentialUserRows, DEFAULT_MONEY_EXPONENT, FLARE_VERSION, type Fake, Field, type FormValues, type FormatOptions, type HasManyRelation, type InsertMany, type MailMessage, type MailResult, type Mailer, type MailerOptions, PBKDF2_ITERATIONS, type ReadUrlOptions, RelationError, type RelationGraph, Resource, type ResourceRelations, type ResourceValidators, SNIFF_BYTES, SUBSCRIPTION_STATUSES, type Seed, type SeedContext, type SeedUser, type SeedUserInput, type Storage, type StorageBucket, type StorageOptions, StoredField, type SubscriptionLike, type SubscriptionState, type SubscriptionStatus, type Tone, type TransactionalEmail, UpdateInput, type UploadUrlOptions, camelCase, checkoutPaid, countries, countryName, createFake, createMailer, createObjectKey, createStorage, createValidators, credentialUserRows, currentPeriodEnd, defineSeed, fake, fieldSchema, fileKeyPrefix, flagEmoji, formValuesToInput, formatPhone, formatValue, fromMinorUnits, grantsAccess, hasTooManyPlaces, hashPassword, humanize, importSigningKey, initialFormValues, isColor, isCountryCode, isDomain, isLiveSubscription, isPhoneNumber, isSlug, issuesByField, kebabCase, matchesContentType, moneyExponent, normalizeDomain, optionLabel, parseMultiValue, pascalCase, pluralize, randomLetters, relationGraph, renderTransactionalEmail, shouldApplySubscription, signToken, slugify, snakeCase, sniffMatches, splitPhone, statusTone, subscriptionPriceId, subscriptionState, toE164, toMinorUnits, toSubscriptionStatus, verifyPassword, verifyToken, words };
+export { AUTH_USER, type BelongsToRelation, type Country, CreateInput, type CredentialUserRows, DEFAULT_MONEY_EXPONENT, type EnumTranslation, FLARE_VERSION, type Fake, Field, type FormValues, type FormatOptions, type HasManyRelation, type InsertMany, type MailMessage, type MailResult, type Mailer, type MailerOptions, PBKDF2_ITERATIONS, type ReadUrlOptions, RelationError, type RelationGraph, Resource, type ResourceRelations, type ResourceValidators, SNIFF_BYTES, SUBSCRIPTION_STATUSES, type Seed, type SeedContext, type SeedUser, type SeedUserInput, type Storage, type StorageBucket, type StorageObjectBody, type StorageOptions, StoredField, type SubscriptionLike, type SubscriptionState, type SubscriptionStatus, type Tone, type TransactionalEmail, UpdateInput, type UploadUrlOptions, camelCase, checkoutPaid, countries, countryName, createFake, createMailer, createObjectKey, createStorage, createValidators, credentialUserRows, currentPeriodEnd, defaultAuthUserOnDelete, defineSeed, enumMemberCollision, enumTranslations, fake, fieldSchema, fileKeyPrefix, flagEmoji, formValuesToInput, formatPhone, formatValue, fromMinorUnits, grantsAccess, hasTooManyPlaces, hashPassword, humanize, importSigningKey, initialFormValues, isAuthUserTarget, isColor, isCountryCode, isDomain, isLiveSubscription, isPhoneNumber, isSlug, issuesByField, kebabCase, matchesContentType, moneyExponent, normalizeDomain, optionLabel, parseMultiValue, pascalCase, pluralize, prismaEnumMember, randomLetters, relationGraph, renderTransactionalEmail, shouldApplySubscription, signToken, slugify, snakeCase, sniffMatches, splitPhone, statusTone, subscriptionPriceId, subscriptionState, toE164, toMinorUnits, toSubscriptionStatus, verifyPassword, verifyToken, words };

package/dist/index.js

@@ -1,10 +1,12 @@
 import {
+  AUTH_USER,
   DEFAULT_FILE_MAX_BYTES,
   DEFAULT_MONEY_EXPONENT,
   FILE_CATEGORIES,
   NUMBER_FORMATS,
   PolicyError,
   RESERVED_FIELD_NAMES,
+  RelationError,
   ResourceDefinitionError,
   STRING_FORMATS,
   TEXT_FORMATS,
@@ -13,41 +15,70 @@ import {
   can,
   clientResource,
   columnName,
+  conditionHolds,
   countries,
   countryName,
   createValidators,
+  defaultAuthUserOnDelete,
   defaultFieldLabel,
   definePolicy,
   defineResource,
+  describeCondition,
+  enumMemberCollision,
+  enumTranslations,
   field,
   fieldSchema,
   fileKeyPrefix,
   fileMaxBytes,
   flagEmoji,
+  formValuesToInput,
   formatPhone,
+  formatValue,
   fromMinorUnits,
   hasTooManyPlaces,
   humanize,
+  initialFormValues,
+  isAuthUserTarget,
   isColor,
   isCountryCode,
   isDomain,
   isPhoneNumber,
   isSlug,
+  issuesByField,
   kebabCase,
   mimeTypesFor,
   moneyExponent,
   normalizeDomain,
+  optionLabel,
   ownershipFilter,
+  parseMultiValue,
   pascalCase,
   pluralize,
+  prismaEnumMember,
+  relationGraph,
   slugify,
   snakeCase,
   splitPhone,
+  statusTone,
   storedFields,
   toE164,
   toMinorUnits,
   words
-} from "./chunk-TB53VHXY.js";
+} from "./chunk-BTVEH5AU.js";
+import {
+  ISSUE_CODES,
+  PROBLEM_CODES,
+  problemResponse,
+  wantsJson
+} from "./chunk-7NQIVWGG.js";
+import {
+  RateSyntaxError,
+  fixedWindow,
+  parseRate,
+  rateFor,
+  rateLimitKey,
+  ratesIn
+} from "./chunk-I2HSIPCF.js";
 
 // src/password.ts
 var ALGORITHM = "pbkdf2-sha256";
@@ -367,8 +398,8 @@ function replay(chunks, reader, length) {
   });
   return fixed.readable;
 }
-function error(status, message) {
-  return Response.json({ error: message }, { status });
+function error(status, message, code) {
+  return problemResponse(status, message, code);
 }
 function createStorage(options) {
   const routePath = options.routePath ?? "/api/storage";
@@ -379,36 +410,36 @@ function createStorage(options) {
   const urlFor = (token) => `${options.baseURL?.replace(/\/+$/, "") ?? ""}${routePath}?token=${token}`;
   async function handle(request) {
     const token = new URL(request.url).searchParams.get("token");
-    if (!token) return error(400, "Missing token.");
+    if (!token) return error(400, "Missing token.", PROBLEM_CODES.invalidToken);
     const payload = await verifyToken(await signingKey(), token);
     if (!payload || typeof payload.exp !== "number" || !isValidKey(payload.key)) {
-      return error(403, "Invalid token.");
+      return error(403, "Invalid token.", PROBLEM_CODES.invalidToken);
     }
-    if (payload.exp < Date.now() / 1e3) return error(403, "Token expired.");
+    if (payload.exp < Date.now() / 1e3) return error(403, "Token expired.", PROBLEM_CODES.invalidToken);
     if (request.method === "PUT") {
-      if (payload.op !== "put") return error(403, "Token does not allow uploads.");
+      if (payload.op !== "put") return error(403, "Token does not allow uploads.", PROBLEM_CODES.invalidToken);
       const contentType = request.headers.get("content-type") ?? "";
       if (!matchesContentType(contentType, payload.types)) {
-        return error(415, `Content-Type must be one of: ${payload.types.join(", ")}.`);
+        return error(415, `Content-Type must be one of: ${payload.types.join(", ")}.`, PROBLEM_CODES.unsupportedMediaType);
       }
       const length = Number(request.headers.get("content-length"));
       if (!request.headers.has("content-length") || !Number.isInteger(length) || length < 0) {
-        return error(411, "Content-Length is required.");
+        return error(411, "Content-Length is required.", PROBLEM_CODES.lengthRequired);
       }
-      if (length > payload.max) return error(413, `File exceeds the ${payload.max}-byte limit.`);
-      if (!request.body) return error(400, "Missing request body.");
+      if (length > payload.max) return error(413, `File exceeds the ${payload.max}-byte limit.`, PROBLEM_CODES.payloadTooLarge);
+      if (!request.body) return error(400, "Missing request body.", PROBLEM_CODES.badRequest);
       const { head, chunks, reader } = await readHead(request.body, SNIFF_BYTES);
       if (sniffMatches(contentType, head) === false) {
         await drain(reader);
-        return error(415, `The file's contents don't match its type (${contentType.split(";")[0].trim()}).`);
+        return error(415, `The file's contents don't match its type (${contentType.split(";")[0].trim()}).`, PROBLEM_CODES.unsupportedMediaType);
       }
       await options.bucket.put(payload.key, replay(chunks, reader, length), { httpMetadata: { contentType } });
       return Response.json({ key: payload.key }, { status: 201 });
     }
     if (request.method === "GET" || request.method === "HEAD") {
-      if (payload.op !== "get") return error(403, "Token does not allow reads.");
+      if (payload.op !== "get") return error(403, "Token does not allow reads.", PROBLEM_CODES.invalidToken);
       const object = await options.bucket.get(payload.key);
-      if (!object) return error(404, "Not found.");
+      if (!object) return error(404, "Not found.", PROBLEM_CODES.notFound);
       const headers = new Headers({
         "content-type": object.httpMetadata?.contentType ?? "application/octet-stream",
         "content-length": String(object.size),
@@ -445,9 +476,19 @@ function createStorage(options) {
       });
       return { url: urlFor(token), method: "PUT", key: upload.key, expiresAt: new Date(exp * 1e3) };
     },
-    /** A temporary URL that serves the object. */
+    /**
+     * A temporary URL that serves the object.
+     *
+     * On a bucket that is its own CDN, this is that provider's URL and is neither
+     * temporary nor private — see {@link StorageBucket.publicUrl}. `downloadAs` still
+     * takes the signed path, because forcing a filename is this app's header to set.
+     */
     async createReadUrl(read) {
       if (!isValidKey(read.key)) throw new Error(`Invalid object key: ${read.key}`);
+      if (!read.downloadAs) {
+        const direct = options.bucket.publicUrl?.(read.key);
+        if (direct) return direct;
+      }
       const payload = { op: "get", key: read.key, exp: expiry(read.expiresIn) };
       if (read.downloadAs) payload.name = read.downloadAs;
       return urlFor(await signToken(await signingKey(), payload));
@@ -508,207 +549,6 @@ function randomLetters(length = 8) {
   return Array.from(bytes, (byte) => String.fromCharCode(97 + byte % 26)).join("");
 }
 
-// src/resource/relations.ts
-var RelationError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "RelationError";
-  }
-};
-var relationNameFor = (table, key) => `${table}_${columnName(key)}`;
-function relationGraph(resources) {
-  const byName = new Map(resources.map((resource) => [resource.name, resource]));
-  const graph = { byResource: {}, pending: [] };
-  for (const resource of resources) {
-    const relations = { belongsTo: [], hasMany: [] };
-    for (const [key, def] of storedFields(resource)) {
-      if (def.kind !== "belongsTo") continue;
-      if (!byName.has(def.target)) {
-        throw new RelationError(`${resource.name}.${key} belongs to "${def.target}", but there is no ${def.target} resource.`);
-      }
-      relations.belongsTo.push({
-        key,
-        name: key.replace(/Id$/, ""),
-        target: def.target,
-        required: def.required,
-        onDelete: def.onDelete ?? "restrict",
-        relationName: relationNameFor(resource.table, key)
-      });
-    }
-    graph.byResource[resource.name] = relations;
-  }
-  for (const resource of resources) {
-    for (const [key, def] of Object.entries(resource.fields)) {
-      if (def.kind !== "hasMany") continue;
-      const target = byName.get(def.target);
-      if (!target) {
-        graph.pending.push({ resource: resource.name, key, target: def.target });
-        continue;
-      }
-      const foreignKey = def.foreignKey ?? `${camelCase(resource.name)}Id`;
-      const back = graph.byResource[target.name].belongsTo.find((relation) => relation.key === foreignKey);
-      if (!back || back.target !== resource.name) {
-        throw new RelationError(
-          `${resource.name}.${key} is hasMany(${target.name}), but ${target.name} has no ${foreignKey}: belongsTo(${resource.name}) field. Add it to ${target.name}, or set foreignKey to the field that points back.`
-        );
-      }
-      graph.byResource[resource.name].hasMany.push({ key, target: target.name, foreignKey, relationName: back.relationName });
-    }
-  }
-  for (const resource of resources) {
-    const { belongsTo, hasMany } = graph.byResource[resource.name];
-    const taken = new Set(Object.keys(resource.fields));
-    for (const { key, name } of belongsTo) {
-      if (taken.has(name)) {
-        throw new RelationError(`${resource.name}.${key} exposes relation "${name}", which collides with the ${resource.name}.${name} field. Rename one of them.`);
-      }
-      taken.add(name);
-    }
-    for (const { key } of hasMany) {
-      if (belongsTo.some((relation) => relation.name === key)) {
-        throw new RelationError(`${resource.name}.${key} collides with a belongsTo relation of the same name.`);
-      }
-    }
-  }
-  return graph;
-}
-
-// src/resource/display.ts
-var TONES = [
-  ["success", /^(paid|fulfilled|active|approved|completed?|delivered|done|published|resolved|shipped|succeeded|success|verified|won)$/],
-  ["danger", /^(banned|blocked|cancel+ed|churned|declined|error|expired|failed|lost|overdue|refunded|rejected|suspended)$/],
-  ["warning", /^(awaiting|draft|in[-_ ]?review|on[-_ ]?hold|pending|processing|review|trial|unpaid|unverified)$/]
-];
-function statusTone(value) {
-  if (typeof value !== "string") return "neutral";
-  const normalized = value.trim().toLowerCase();
-  return TONES.find(([, pattern]) => pattern.test(normalized))?.[0] ?? "neutral";
-}
-function optionLabel(def, value) {
-  if ((def.kind === "enum" || def.kind === "multiselect") && def.optionLabels?.[value]) return def.optionLabels[value];
-  const text2 = value.replace(/[_-]+/g, " ").trim();
-  return text2 ? text2[0].toUpperCase() + text2.slice(1) : value;
-}
-function formatValue(def, value, options = {}) {
-  if (value === null || value === void 0 || value === "") return "\u2014";
-  const locale = options.locale ?? "en-US";
-  switch (def.kind) {
-    case "boolean":
-      return value ? "Yes" : "No";
-    case "int":
-      return new Intl.NumberFormat(locale, { maximumFractionDigits: 0 }).format(Number(value));
-    case "float":
-      return new Intl.NumberFormat(locale, { maximumFractionDigits: 2 }).format(Number(value));
-    case "date": {
-      const date = /* @__PURE__ */ new Date(`${String(value)}T00:00:00Z`);
-      return Number.isNaN(date.getTime()) ? String(value) : new Intl.DateTimeFormat(locale, { dateStyle: "medium", timeZone: "UTC" }).format(date);
-    }
-    case "datetime":
-    case "timestamp": {
-      const date = value instanceof Date ? value : new Date(value);
-      return Number.isNaN(date.getTime()) ? String(value) : new Intl.DateTimeFormat(locale, { dateStyle: "medium", timeStyle: "short", timeZone: options.timeZone ?? "UTC" }).format(date);
-    }
-    case "enum":
-      return optionLabel(def, String(value));
-    case "multiselect":
-      return Array.isArray(value) && value.length ? value.map((item) => optionLabel(def, String(item))).join(", ") : "\u2014";
-    case "tags":
-      return Array.isArray(value) && value.length ? value.map(String).join(", ") : "\u2014";
-    case "json": {
-      if (value === null || value === void 0) return "\u2014";
-      const text2 = typeof value === "string" ? value : JSON.stringify(value);
-      return text2.length > 60 ? `${text2.slice(0, 59)}\u2026` : text2;
-    }
-    case "string":
-      if (def.format === "tel") return formatPhone(String(value));
-      if (def.format === "country") return `${flagEmoji(String(value))} ${countryName(String(value), locale.split("-")[0])}`.trim();
-      return String(value);
-    case "file":
-      return String(value).split("/").pop().replace(/^[0-9a-f-]{36}-/, "");
-    default:
-      return String(value);
-  }
-}
-
-// src/resource/form.ts
-function initialFormValues(resource, record) {
-  const values = {};
-  for (const [key, def] of storedFields(resource)) {
-    const source = record ? record[key] : "default" in def ? def.default : void 0;
-    if (def.kind === "boolean") values[key] = source === true || source === 1;
-    else if (def.kind === "multiselect" || def.kind === "tags") values[key] = JSON.stringify(Array.isArray(source) ? source : []);
-    else if (def.kind === "json") values[key] = source === null || source === void 0 ? "" : JSON.stringify(source, null, 2);
-    else if (source === null || source === void 0) values[key] = "";
-    else if (source instanceof Date) values[key] = source.toISOString();
-    else values[key] = String(source);
-  }
-  return values;
-}
-function formValuesToInput(resource, values, mode) {
-  const input = {};
-  for (const [key, def] of storedFields(resource)) {
-    const raw = values[key];
-    if (def.kind === "boolean") {
-      input[key] = raw === true;
-      continue;
-    }
-    if (def.kind === "multiselect" || def.kind === "tags") {
-      const picked = parseMultiValue(raw);
-      if (picked.length === 0 && mode === "create" && "default" in def && def.default !== void 0) continue;
-      input[key] = picked.length === 0 && !def.required ? null : picked;
-      continue;
-    }
-    if (def.kind === "json") {
-      const source = typeof raw === "string" ? raw.trim() : "";
-      if (source === "") {
-        if (mode === "create" && "default" in def && def.default !== void 0) continue;
-        if (!def.required) input[key] = null;
-        continue;
-      }
-      try {
-        input[key] = JSON.parse(source);
-      } catch {
-        input[key] = Number.NaN;
-      }
-      continue;
-    }
-    const text2 = typeof raw === "string" ? raw : "";
-    const empty = text2.trim() === "";
-    if (empty) {
-      const hasDefault = "default" in def && def.default !== void 0;
-      if (mode === "create" && hasDefault) continue;
-      if (!def.required) input[key] = null;
-      else if (def.kind === "string" || def.kind === "text") input[key] = text2;
-      continue;
-    }
-    if (def.kind === "int" || def.kind === "float") {
-      const number = Number(text2.trim());
-      input[key] = Number.isFinite(number) ? number : text2;
-      continue;
-    }
-    input[key] = text2;
-  }
-  return input;
-}
-function parseMultiValue(raw) {
-  if (typeof raw !== "string" || raw === "") return [];
-  try {
-    const parsed = JSON.parse(raw);
-    return Array.isArray(parsed) ? parsed.filter((value) => typeof value === "string") : [];
-  } catch {
-    return [];
-  }
-}
-function issuesByField(issues) {
-  const errors = {};
-  for (const issue of issues) {
-    const path = Array.isArray(issue.path) ? issue.path.map(String).join(".") : issue.path;
-    const key = path.split(".")[0] || "_form";
-    errors[key] ??= issue.message;
-  }
-  return errors;
-}
-
 // src/seed.ts
 async function credentialUserRows(input) {
   const email = input.email.trim().toLowerCase();
@@ -1052,16 +892,20 @@ function createFake(seed = 20260101) {
 var fake = createFake();
 
 // src/index.ts
-var FLARE_VERSION = "0.10.0";
+var FLARE_VERSION = "0.12.0";
 export {
+  AUTH_USER,
   DEFAULT_FILE_MAX_BYTES,
   DEFAULT_MONEY_EXPONENT,
   FILE_CATEGORIES,
   FLARE_VERSION,
+  ISSUE_CODES,
   NUMBER_FORMATS,
   PBKDF2_ITERATIONS,
+  PROBLEM_CODES,
   PolicyError,
   RESERVED_FIELD_NAMES,
+  RateSyntaxError,
   RelationError,
   ResourceDefinitionError,
   SNIFF_BYTES,
@@ -1074,6 +918,7 @@ export {
   checkoutPaid,
   clientResource,
   columnName,
+  conditionHolds,
   countries,
   countryName,
   createFake,
@@ -1083,15 +928,20 @@ export {
   createValidators,
   credentialUserRows,
   currentPeriodEnd,
+  defaultAuthUserOnDelete,
   defaultFieldLabel,
   definePolicy,
   defineResource,
   defineSeed,
+  describeCondition,
+  enumMemberCollision,
+  enumTranslations,
   fake,
   field,
   fieldSchema,
   fileKeyPrefix,
   fileMaxBytes,
+  fixedWindow,
   flagEmoji,
   formValuesToInput,
   formatPhone,
@@ -1103,6 +953,7 @@ export {
   humanize,
   importSigningKey,
   initialFormValues,
+  isAuthUserTarget,
   isColor,
   isCountryCode,
   isDomain,
@@ -1118,9 +969,15 @@ export {
   optionLabel,
   ownershipFilter,
   parseMultiValue,
+  parseRate,
   pascalCase,
   pluralize,
+  prismaEnumMember,
+  problemResponse,
   randomLetters,
+  rateFor,
+  rateLimitKey,
+  ratesIn,
   relationGraph,
   renderTransactionalEmail,
   shouldApplySubscription,
@@ -1138,5 +995,6 @@ export {
   toSubscriptionStatus,
   verifyPassword,
   verifyToken,
+  wantsJson,
   words
 };