@prisma-next/extension-supabase 0.14.0-dev.20 → 0.14.0-dev.21

package/dist/pack.mjs

@@ -1,4 +1,4 @@
-import { t as version } from "./package-BN7Uy42E.mjs";
+import { t as version } from "./package-DaKptsxi.mjs";
 import { blindCast } from "@prisma-next/utils/casts";
 //#region src/contract/contract.json
 var contract_default = {

package/dist/package-DaKptsxi.mjs

@@ -0,0 +1,6 @@
+//#region package.json
+var version = "0.14.0-dev.21";
+//#endregion
+export { version as t };
+
+//# sourceMappingURL=package-DaKptsxi.mjs.map

package/dist/package-DaKptsxi.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-DaKptsxi.mjs","names":[],"sources":["../package.json"],"sourcesContent":[""],"mappings":""}

package/dist/runtime.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.mts","names":[],"sources":["../src/runtime/descriptor.ts","../src/runtime/supabase.ts","../src/runtime/supabase-runtime.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;cAYa,yBAAA,EAA2B,6BAA6B;;;KC0BzD,gBAAA;AAAA,KAEP,SAAA,mBAA4B,QAAA,CAAS,UAAA,KAAe,UAAA,QAAkB,GAAA,CAAI,SAAA;AAAA,cAElE,mBAAA,SAA4B,KAAK;EAAA,SAC1B,IAAA;cACN,OAAA;AAAA;AAAA,cAKD,eAAA,SAAwB,KAAK;EAAA,SACtB,IAAA;EAAA,SACT,MAAA;cACG,MAAA;AAAA;AAAA,UAUG,WAAA,mBAA8B,QAAA,CAAS,UAAA;EAAA,SAC7C,GAAA,EAAK,EAAA,CAAG,SAAA;EAAA,SACR,GAAA,EAAK,SAAA,CAAU,SAAA;EAAA,SACf,GAAA,EAAK,SAAA;EACd,OAAA,MACE,IAAA,GAAO,gBAAA,CAAiB,GAAA,IAAO,YAAA,CAAa,GAAA;IAAA,SAAmB,IAAA,GAAO,GAAA;EAAA,GACtE,OAAA,GAAU,qBAAA,GACT,mBAAA,CAAoB,GAAA;EACvB,WAAA,IAAe,EAAA,GAAK,EAAA,EAAI,kBAAA,KAAuB,WAAA,CAAY,CAAA,IAAK,OAAA,CAAQ,CAAA;AAAA;AAAA,UAGzD,UAAA,mBAA6B,QAAA,CAAS,UAAA;EAAA,SAC5C,OAAA,EAAS,gBAAA,CAAiB,SAAA;EAAA,SAC1B,KAAA,EAAO,2BAAA,CAA4B,gBAAA;EAC5C,MAAA,CAAO,GAAA,WAAc,OAAA,CAAQ,WAAA,CAAY,SAAA;EACzC,MAAA,IAAU,WAAA,CAAY,SAAA;EACtB,aAAA,IAAiB,WAAA,CAAY,SAAA;EAC7B,KAAA,IAAS,OAAA;EAAA,CACR,MAAA,CAAO,YAAA,KAAiB,OAAA;AAAA;AAAA,UAGV,mBAAA;EAAA,SACN,UAAA,YAAsB,6BAAA,CAA8B,gBAAA;EAAA,SACpD,UAAA,YAAsB,aAAA;EAAA,SACtB,YAAA,GAAe,kBAAA;EAAA,SACf,WAAA;IAAA,SACE,uBAAA;IAAA,SACA,iBAAA;EAAA;AAAA;AAAA,UAII,sBAAA;EAAA,SACN,GAAA;EAAA,SACA,EAAA,GAAK,IAAA,GAAO,MAAM;AAAA;AAAA,KAGxB,eAAA;EAAA,SACM,SAAA;EAAA,SACA,OAAO;AAAA;AAAA,KAGb,aAAA;EAAA,SACM,OAAA;EAAA,SACA,SAAS;AAAA;AAAA,KAGR,2BAAA,mBAA8C,QAAA,CAAS,UAAA,KACjE,sBAAA,GACE,mBAAA,IACC,eAAA,GAAkB,aAAA;EAAA,SACR,QAAA,EAAU,SAAA;EAAA,SACV,YAAA;AAAA;AAAA,KAGH,+BAAA,mBAAkD,QAAA,CAAS,UAAA,KACrE,sBAAA,GACE,mBAAA,IACC,eAAA,GAAkB,aAAA;EAAA,SACR,YAAA;EAAA,SACA,QAAA;EAAA,SACA,SAAA,GAAY,SAAA;AAAA;AAAA,KAGf,eAAA,mBAAkC,QAAA,CAAS,UAAA,KACnD,2BAAA,CAA4B,SAAA,IAC5B,+BAAA,CAAgC,SAAA;AAAA,iBAwEN,QAAA,mBAA2B,QAAA,CAAS,UAAA,GAChE,OAAA,EAAS,2BAAA,CAA4B,SAAA,IACpC,OAAA,CAAQ,UAAA,CAAW,SAAA;AAAA,iBACQ,QAAA,mBAA2B,QAAA,CAAS,UAAA,GAChE,OAAA,EAAS,+BAAA,CAAgC,SAAA,IACxC,OAAA,CAAQ,UAAA,CAAW,SAAA;;;UC9LL,eAAA,SAAwB,eAAe;AAAA,UAEvC,mBAAA;EAAA,SAEN,IAAA;EAAA,SACA,MAAA,GAAS,MAAM;AAAA;;;;AFP2C;UEcpD,WAAA,SAAoB,iBAAiB;AAAA,cAEzC,mBAAA,mBACO,QAAA,CAAS,UAAA,IAAc,QAAA,CAAS,UAAA,WAC1C,mBAAA,CAAoB,SAAA;EDQlB;;;;AAAgB;ECFpB,eAAA,CAAgB,OAAA,EAAS,mBAAA,GAAsB,OAAA,CAAQ,WAAA;EDIjD;;;;ECuGZ,eAAA,MACE,IAAA,EAAM,gBAAA,CAAiB,GAAA,IAAO,YAAA,CAAa,GAAA,GAC3C,OAAA,EAAS,mBAAA,EACT,OAAA,GAAU,qBAAA,GACT,mBAAA,CAAoB,GAAA;AAAA"}
+{"version":3,"file":"runtime.d.mts","names":[],"sources":["../src/runtime/descriptor.ts","../src/runtime/supabase.ts","../src/runtime/supabase-runtime.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;cAYa,yBAAA,EAA2B,6BAA6B;;;KC0BzD,gBAAA;AAAA,KAEP,SAAA,mBAA4B,QAAA,CAAS,UAAA,KAAe,UAAA,QAAkB,GAAA,CAAI,SAAA;AAAA,cAElE,mBAAA,SAA4B,KAAK;EAAA,SAC1B,IAAA;cACN,OAAA;AAAA;AAAA,cAKD,eAAA,SAAwB,KAAK;EAAA,SACtB,IAAA;EAAA,SACT,MAAA;cACG,MAAA;AAAA;AAAA,UAUG,WAAA,mBAA8B,QAAA,CAAS,UAAA;EAAA,SAC7C,GAAA,EAAK,EAAA,CAAG,SAAA;EAAA,SACR,GAAA,EAAK,SAAA,CAAU,SAAA;EAAA,SACf,GAAA,EAAK,SAAA;EACd,OAAA,MACE,IAAA,GAAO,gBAAA,CAAiB,GAAA,IAAO,YAAA,CAAa,GAAA;IAAA,SAAmB,IAAA,GAAO,GAAA;EAAA,GACtE,OAAA,GAAU,qBAAA,GACT,mBAAA,CAAoB,GAAA;EACvB,WAAA,IAAe,EAAA,GAAK,EAAA,EAAI,kBAAA,KAAuB,WAAA,CAAY,CAAA,IAAK,OAAA,CAAQ,CAAA;AAAA;AAAA,UAGzD,UAAA,mBAA6B,QAAA,CAAS,UAAA;EAAA,SAC5C,OAAA,EAAS,gBAAA,CAAiB,SAAA;EAAA,SAC1B,KAAA,EAAO,2BAAA,CAA4B,gBAAA;EAC5C,MAAA,CAAO,GAAA,WAAc,OAAA,CAAQ,WAAA,CAAY,SAAA;EACzC,MAAA,IAAU,WAAA,CAAY,SAAA;EACtB,aAAA,IAAiB,WAAA,CAAY,SAAA;EAC7B,KAAA,IAAS,OAAA;EAAA,CACR,MAAA,CAAO,YAAA,KAAiB,OAAA;AAAA;AAAA,UAGV,mBAAA;EAAA,SACN,UAAA,YAAsB,6BAAA,CAA8B,gBAAA;EAAA,SACpD,UAAA,YAAsB,aAAA;EAAA,SACtB,YAAA,GAAe,kBAAA;EAAA,SACf,WAAA;IAAA,SACE,uBAAA;IAAA,SACA,iBAAA;EAAA;AAAA;AAAA,UAII,sBAAA;EAAA,SACN,GAAA;EAAA,SACA,EAAA,GAAK,IAAA,GAAO,MAAM;AAAA;AAAA,KAGxB,eAAA;EAAA,SACM,SAAA;EAAA,SACA,OAAO;AAAA;AAAA,KAGb,aAAA;EAAA,SACM,OAAA;EAAA,SACA,SAAS;AAAA;AAAA,KAGR,2BAAA,mBAA8C,QAAA,CAAS,UAAA,KACjE,sBAAA,GACE,mBAAA,IACC,eAAA,GAAkB,aAAA;EAAA,SACR,QAAA,EAAU,SAAA;EAAA,SACV,YAAA;AAAA;AAAA,KAGH,+BAAA,mBAAkD,QAAA,CAAS,UAAA,KACrE,sBAAA,GACE,mBAAA,IACC,eAAA,GAAkB,aAAA;EAAA,SACR,YAAA;EAAA,SACA,QAAA;EAAA,SACA,SAAA,GAAY,SAAA;AAAA;AAAA,KAGf,eAAA,mBAAkC,QAAA,CAAS,UAAA,KACnD,2BAAA,CAA4B,SAAA,IAC5B,+BAAA,CAAgC,SAAA;AAAA,iBA0EN,QAAA,mBAA2B,QAAA,CAAS,UAAA,GAChE,OAAA,EAAS,2BAAA,CAA4B,SAAA,IACpC,OAAA,CAAQ,UAAA,CAAW,SAAA;AAAA,iBACQ,QAAA,mBAA2B,QAAA,CAAS,UAAA,GAChE,OAAA,EAAS,+BAAA,CAAgC,SAAA,IACxC,OAAA,CAAQ,UAAA,CAAW,SAAA;;;UChML,eAAA,SAAwB,eAAe;AAAA,UAEvC,mBAAA;EAAA,SAEN,IAAA;EAAA,SACA,MAAA,GAAS,MAAM;AAAA;;;;AFP2C;UEcpD,WAAA,SAAoB,iBAAiB;AAAA,cAEzC,mBAAA,mBACO,QAAA,CAAS,UAAA,IAAc,QAAA,CAAS,UAAA,WAC1C,mBAAA,CAAoB,SAAA;EDQlB;;;;AAAgB;ECFpB,eAAA,CAAgB,OAAA,EAAS,mBAAA,GAAsB,OAAA,CAAQ,WAAA;EDIjD;;;;ECuGZ,eAAA,MACE,IAAA,EAAM,gBAAA,CAAiB,GAAA,IAAO,YAAA,CAAa,GAAA,GAC3C,OAAA,EAAS,mBAAA,EACT,OAAA,GAAU,qBAAA,GACT,mBAAA,CAAoB,GAAA;AAAA"}

package/dist/runtime.mjs

@@ -1,4 +1,4 @@
-import { t as version } from "./package-BN7Uy42E.mjs";
+import { t as version } from "./package-DaKptsxi.mjs";
 import { blindCast } from "@prisma-next/utils/casts";
 import postgresAdapter from "@prisma-next/adapter-postgres/runtime";
 import postgresDriver from "@prisma-next/driver-postgres/runtime";
@@ -151,8 +151,8 @@ function hasContractJson(options) {
 }
 const contractSerializer = new PostgresContractSerializer();
 function resolveContract(options) {
-	const contractInput = hasContractJson(options) ? options.contractJson : options.contract;
-	return blindCast(contractSerializer.deserializeContract(contractInput));
+	const contractJson = hasContractJson(options) ? options.contractJson : contractSerializer.serializeContract(options.contract);
+	return blindCast(contractSerializer.deserializeContract(contractJson));
 }
 function resolveKeyMaterial(options) {
 	const jwtSecret = "jwtSecret" in options ? options.jwtSecret : void 0;

package/dist/runtime.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.mjs","names":["packageJson.version"],"sources":["../src/runtime/descriptor.ts","../src/runtime/supabase-runtime.ts","../src/runtime/supabase.ts","../src/exports/runtime.ts"],"sourcesContent":["import type { SqlRuntimeExtensionDescriptor } from '@prisma-next/sql-runtime';\nimport packageJson from '../../package.json' with { type: 'json' };\n\n/**\n * Tells the runtime that the Supabase pack's runtime component is available.\n *\n * When a contract declares the Supabase pack, the runtime checks that a\n * matching descriptor has been registered. Without this, loading a Supabase\n * contract errors with \"pack runtime component missing\". The `supabase()`\n * factory registers this descriptor automatically — app code never needs to\n * reference it directly.\n */\nexport const supabaseRuntimeDescriptor: SqlRuntimeExtensionDescriptor<'postgres'> = {\n  kind: 'extension' as const,\n  id: 'supabase',\n  version: packageJson.version,\n  familyId: 'sql' as const,\n  targetId: 'postgres' as const,\n  codecs: () => [],\n  create() {\n    return {\n      familyId: 'sql' as const,\n      targetId: 'postgres' as const,\n    };\n  },\n};\n","import type { Contract } from '@prisma-next/contract/types';\nimport type { RuntimeExecuteOptions } from '@prisma-next/framework-components/runtime';\nimport { AsyncIterableResult } from '@prisma-next/framework-components/runtime';\nimport { type PostgresRuntime, PostgresRuntimeImpl } from '@prisma-next/postgres/runtime';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport type { SqlExecutionPlan, SqlQueryPlan } from '@prisma-next/sql-relational-core/plan';\nimport type {\n  PreparedStatement,\n  PreparedStatementImpl,\n  RuntimeConnection,\n  RuntimeTransaction,\n} from '@prisma-next/sql-runtime';\nimport { blindCast } from '@prisma-next/utils/casts';\n\nexport interface SupabaseRuntime extends PostgresRuntime {}\n\nexport interface SupabaseRoleBinding {\n  // TODO(TML-2501): role names move to the Supabase extension contract (roles as first-class IR) when postgres-rls lands.\n  readonly role: 'anon' | 'authenticated' | 'service_role';\n  readonly claims?: Record<string, unknown>;\n}\n\n/**\n * A connection with a Supabase role already bound via session-scoped set_config.\n * Implements `RuntimeConnection` so it plugs into ORM scope machinery and `withTransaction`.\n */\nexport interface RoleSession extends RuntimeConnection {}\n\nexport class SupabaseRuntimeImpl<\n  TContract extends Contract<SqlStorage> = Contract<SqlStorage>,\n> extends PostgresRuntimeImpl<TContract> {\n  /**\n   * Opens a raw connection and applies role + JWT claims via session-scoped set_config.\n   * On bind failure, destroys the connection before rethrowing — no leaked connections.\n   * Not on the `SupabaseRuntime` interface; consumed by the facade, not by app code.\n   */\n  async openRoleSession(binding: SupabaseRoleBinding): Promise<RoleSession> {\n    const conn = await this.acquireRawConnection();\n\n    try {\n      await conn.query('SELECT set_config($1, $2, false)', ['role', binding.role]);\n      await conn.query('SELECT set_config($1, $2, false)', [\n        'request.jwt.claims',\n        JSON.stringify(binding.claims ?? {}),\n      ]);\n    } catch (err) {\n      await conn.destroy(err).catch(() => undefined);\n      throw err;\n    }\n\n    const self = this;\n\n    const session: RoleSession = {\n      execute<Row>(\n        plan: (SqlExecutionPlan<unknown> | SqlQueryPlan<unknown>) & { readonly _row?: Row },\n        options?: RuntimeExecuteOptions,\n      ): AsyncIterableResult<Row> {\n        return self.executeAgainstQueryable<Row>(plan, conn, { ...options, scope: 'connection' });\n      },\n\n      executePrepared<Params, Row>(\n        ps: PreparedStatement<Params, Row>,\n        params: Params,\n        options?: RuntimeExecuteOptions,\n      ): AsyncIterableResult<Row> {\n        return self.executePreparedAgainstQueryable(\n          blindCast<\n            PreparedStatementImpl<Params, Row>,\n            'PreparedStatement is PreparedStatementImpl; the impl class is the only concrete form'\n          >(ps),\n          blindCast<\n            Record<string, unknown>,\n            'params are structurally Record<string, unknown> at runtime'\n          >(params),\n          conn,\n          { ...options, scope: 'connection' },\n        );\n      },\n\n      async transaction(): Promise<RuntimeTransaction> {\n        const tx = await conn.beginTransaction();\n        return {\n          async commit(): Promise<void> {\n            await tx.commit();\n          },\n          async rollback(): Promise<void> {\n            await tx.rollback();\n          },\n          execute<Row>(\n            plan: (SqlExecutionPlan<unknown> | SqlQueryPlan<unknown>) & { readonly _row?: Row },\n            options?: RuntimeExecuteOptions,\n          ): AsyncIterableResult<Row> {\n            return self.executeAgainstQueryable<Row>(plan, tx, {\n              ...options,\n              scope: 'transaction',\n            });\n          },\n          executePrepared<Params, Row>(\n            ps: PreparedStatement<Params, Row>,\n            params: Params,\n            options?: RuntimeExecuteOptions,\n          ): AsyncIterableResult<Row> {\n            return self.executePreparedAgainstQueryable(\n              blindCast<\n                PreparedStatementImpl<Params, Row>,\n                'PreparedStatement is PreparedStatementImpl; the impl class is the only concrete form'\n              >(ps),\n              blindCast<\n                Record<string, unknown>,\n                'params are structurally Record<string, unknown> at runtime'\n              >(params),\n              tx,\n              { ...options, scope: 'transaction' },\n            );\n          },\n        };\n      },\n\n      /**\n       * Resets all session-local config then releases the connection back to the pool.\n       * If RESET ALL fails, destroys the connection instead — pool-poisoning guarantee.\n       */\n      async release(): Promise<void> {\n        try {\n          await conn.query('RESET ALL');\n          await conn.release();\n        } catch (resetError) {\n          await conn.destroy(resetError).catch(() => undefined);\n        }\n      },\n\n      async destroy(reason?: unknown): Promise<void> {\n        await conn.destroy(reason);\n      },\n    };\n\n    return session;\n  }\n\n  /**\n   * Opens a role session, executes the plan, then releases after the stream drains.\n   * On mid-stream error, destroys the session instead of releasing.\n   */\n  executeWithRole<Row>(\n    plan: SqlExecutionPlan<Row> | SqlQueryPlan<Row>,\n    binding: SupabaseRoleBinding,\n    options?: RuntimeExecuteOptions,\n  ): AsyncIterableResult<Row> {\n    const self = this;\n\n    const generator = async function* (): AsyncGenerator<Row, void, unknown> {\n      const session = await self.openRoleSession(binding);\n      let errored = false;\n      try {\n        for await (const row of session.execute(plan, options)) {\n          yield row;\n        }\n      } catch (err) {\n        errored = true;\n        await session.destroy(err).catch(() => undefined);\n        throw err;\n      } finally {\n        if (!errored) {\n          await session.release();\n        }\n      }\n    };\n\n    return new AsyncIterableResult(generator());\n  }\n}\n","import postgresAdapter from '@prisma-next/adapter-postgres/runtime';\nimport type { Contract } from '@prisma-next/contract/types';\nimport postgresDriver from '@prisma-next/driver-postgres/runtime';\nimport { instantiateExecutionStack } from '@prisma-next/framework-components/execution';\nimport type {\n  AsyncIterableResult,\n  RuntimeExecuteOptions,\n} from '@prisma-next/framework-components/runtime';\nimport { sql } from '@prisma-next/sql-builder/runtime';\nimport type { Db } from '@prisma-next/sql-builder/types';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport { orm } from '@prisma-next/sql-orm-client';\nimport type { RawSqlTag } from '@prisma-next/sql-relational-core/expression';\nimport { createRawSql } from '@prisma-next/sql-relational-core/expression';\nimport type { SqlExecutionPlan, SqlQueryPlan } from '@prisma-next/sql-relational-core/plan';\nimport type {\n  ExecutionContext,\n  SqlExecutionStackWithDriver,\n  SqlMiddleware,\n  SqlRuntimeExtensionDescriptor,\n  TransactionContext,\n  VerifyMarkerOption,\n} from '@prisma-next/sql-runtime';\nimport {\n  createExecutionContext,\n  createSqlExecutionStack,\n  withTransaction,\n} from '@prisma-next/sql-runtime';\nimport postgresTarget, { PostgresContractSerializer } from '@prisma-next/target-postgres/runtime';\nimport { blindCast } from '@prisma-next/utils/casts';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport { createRemoteJWKSet, type JWTVerifyResult, jwtVerify } from 'jose';\nimport type { Client } from 'pg';\nimport { Pool } from 'pg';\nimport { supabaseRuntimeDescriptor } from './descriptor';\nimport type { SupabaseRoleBinding, SupabaseRuntime } from './supabase-runtime';\nimport { SupabaseRuntimeImpl } from './supabase-runtime';\n\nexport type SupabaseTargetId = 'postgres';\n\ntype OrmClient<TContract extends Contract<SqlStorage>> = ReturnType<typeof orm<TContract>>;\n\nexport class SupabaseConfigError extends Error {\n  override readonly name = 'SupabaseConfigError';\n  constructor(message: string) {\n    super(message);\n  }\n}\n\nexport class InvalidJwtError extends Error {\n  override readonly name = 'InvalidJwtError';\n  readonly reason: string;\n  constructor(reason: string) {\n    super(`Invalid JWT: ${reason}`);\n    this.reason = reason;\n  }\n}\n\ntype KeyMaterial =\n  | { readonly kind: 'secret'; readonly key: Uint8Array }\n  | { readonly kind: 'jwks'; readonly keyset: ReturnType<typeof createRemoteJWKSet> };\n\nexport interface RoleBoundDb<TContract extends Contract<SqlStorage>> {\n  readonly sql: Db<TContract>;\n  readonly orm: OrmClient<TContract>;\n  readonly raw: RawSqlTag;\n  execute<Row>(\n    plan: (SqlExecutionPlan<Row> | SqlQueryPlan<Row>) & { readonly _row?: Row },\n    options?: RuntimeExecuteOptions,\n  ): AsyncIterableResult<Row>;\n  transaction<R>(fn: (tx: TransactionContext) => PromiseLike<R>): Promise<R>;\n}\n\nexport interface SupabaseDb<TContract extends Contract<SqlStorage>> {\n  readonly context: ExecutionContext<TContract>;\n  readonly stack: SqlExecutionStackWithDriver<SupabaseTargetId>;\n  asUser(jwt: string): Promise<RoleBoundDb<TContract>>;\n  asAnon(): RoleBoundDb<TContract>;\n  asServiceRole(): RoleBoundDb<TContract>;\n  close(): Promise<void>;\n  [Symbol.asyncDispose](): Promise<void>;\n}\n\nexport interface SupabaseOptionsBase {\n  readonly extensions?: readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[];\n  readonly middleware?: readonly SqlMiddleware[];\n  readonly verifyMarker?: VerifyMarkerOption;\n  readonly poolOptions?: {\n    readonly connectionTimeoutMillis?: number;\n    readonly idleTimeoutMillis?: number;\n  };\n}\n\nexport interface SupabaseBindingOptions {\n  readonly url?: string;\n  readonly pg?: Pool | Client;\n}\n\ntype JwtSecretOption = {\n  readonly jwtSecret: string;\n  readonly jwksUrl?: never;\n};\n\ntype JwksUrlOption = {\n  readonly jwksUrl: string;\n  readonly jwtSecret?: never;\n};\n\nexport type SupabaseOptionsWithContract<TContract extends Contract<SqlStorage>> =\n  SupabaseBindingOptions &\n    SupabaseOptionsBase &\n    (JwtSecretOption | JwksUrlOption) & {\n      readonly contract: TContract;\n      readonly contractJson?: never;\n    };\n\nexport type SupabaseOptionsWithContractJson<TContract extends Contract<SqlStorage>> =\n  SupabaseBindingOptions &\n    SupabaseOptionsBase &\n    (JwtSecretOption | JwksUrlOption) & {\n      readonly contractJson: unknown;\n      readonly contract?: never;\n      readonly _contract?: TContract;\n    };\n\nexport type SupabaseOptions<TContract extends Contract<SqlStorage>> =\n  | SupabaseOptionsWithContract<TContract>\n  | SupabaseOptionsWithContractJson<TContract>;\n\nfunction hasContractJson<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptions<TContract>,\n): options is SupabaseOptionsWithContractJson<TContract> {\n  return 'contractJson' in options;\n}\n\nconst contractSerializer = new PostgresContractSerializer();\n\nfunction resolveContract<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptions<TContract>,\n): TContract {\n  const contractInput = hasContractJson(options) ? options.contractJson : options.contract;\n  return blindCast<\n    TContract,\n    'contractSerializer.deserializeContract returns a validated TContract'\n  >(contractSerializer.deserializeContract(contractInput));\n}\n\nfunction resolveKeyMaterial<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptions<TContract>,\n): KeyMaterial {\n  const jwtSecret = 'jwtSecret' in options ? options.jwtSecret : undefined;\n  const jwksUrl = 'jwksUrl' in options ? options.jwksUrl : undefined;\n\n  if (jwtSecret !== undefined && jwksUrl !== undefined) {\n    throw new SupabaseConfigError('Provide either jwtSecret or jwksUrl, not both');\n  }\n  if (jwtSecret === undefined && jwksUrl === undefined) {\n    throw new SupabaseConfigError('Either jwtSecret or jwksUrl is required');\n  }\n\n  if (jwtSecret !== undefined) {\n    return { kind: 'secret', key: new TextEncoder().encode(jwtSecret) };\n  }\n\n  if (jwksUrl !== undefined) {\n    return { kind: 'jwks', keyset: createRemoteJWKSet(new URL(jwksUrl)) };\n  }\n\n  throw new SupabaseConfigError('Either jwtSecret or jwksUrl is required');\n}\n\nfunction toPool<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptions<TContract>,\n): { pool: Pool; owned: boolean } | undefined {\n  if (options.pg instanceof Pool) {\n    return { pool: options.pg, owned: false };\n  }\n  if (typeof options.url === 'string') {\n    return {\n      pool: new Pool({\n        connectionString: options.url,\n        connectionTimeoutMillis: options.poolOptions?.connectionTimeoutMillis ?? 20_000,\n        idleTimeoutMillis: options.poolOptions?.idleTimeoutMillis ?? 30_000,\n      }),\n      owned: true,\n    };\n  }\n  return undefined;\n}\n\nfunction withSupabaseDescriptor(\n  extensions: readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[] | undefined,\n): readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[] {\n  const packs = extensions ?? [];\n  return packs.some((pack) => pack.id === supabaseRuntimeDescriptor.id)\n    ? packs\n    : [...packs, supabaseRuntimeDescriptor];\n}\n\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptionsWithContract<TContract>,\n): Promise<SupabaseDb<TContract>>;\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptionsWithContractJson<TContract>,\n): Promise<SupabaseDb<TContract>>;\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptions<TContract>,\n): Promise<SupabaseDb<TContract>> {\n  const keyMaterial = resolveKeyMaterial(options);\n  const contract = resolveContract(options);\n\n  const stack = createSqlExecutionStack({\n    target: postgresTarget,\n    adapter: postgresAdapter,\n    driver: postgresDriver,\n    extensionPacks: withSupabaseDescriptor(options.extensions),\n  });\n\n  const context = createExecutionContext({ contract, stack });\n  const rawCodecInferer = stack.adapter.rawCodecInferer;\n  const rawSqlTag: RawSqlTag = createRawSql(rawCodecInferer);\n\n  const poolEntry = toPool(options);\n  let closed = false;\n\n  const stackInstance = instantiateExecutionStack(stack);\n  const driverDescriptor = stack.driver;\n  if (!driverDescriptor) {\n    throw new Error('Driver descriptor missing from execution stack');\n  }\n  const driver = driverDescriptor.create({ cursor: { disabled: true } });\n\n  if (poolEntry) {\n    await driver.connect({ kind: 'pgPool', pool: poolEntry.pool });\n  }\n\n  const runtime: SupabaseRuntime & SupabaseRuntimeImpl<TContract> = new SupabaseRuntimeImpl({\n    context,\n    adapter: stackInstance.adapter,\n    driver,\n    ...ifDefined('verifyMarker', options.verifyMarker),\n    ...ifDefined('middleware', options.middleware),\n  });\n\n  async function verifyJwt(jwt: string): Promise<JWTVerifyResult> {\n    try {\n      if (keyMaterial.kind === 'secret') {\n        return await jwtVerify(jwt, keyMaterial.key);\n      }\n      return await jwtVerify(jwt, keyMaterial.keyset);\n    } catch (err) {\n      const reason = err instanceof Error ? err.message : String(err);\n      throw new InvalidJwtError(reason);\n    }\n  }\n\n  function buildRoleBoundDb(binding: SupabaseRoleBinding): RoleBoundDb<TContract> {\n    const roleSql: Db<TContract> = sql<TContract>({ context, rawCodecInferer });\n    const roleOrm: OrmClient<TContract> = orm({\n      runtime: {\n        execute(plan) {\n          return runtime.executeWithRole(plan, binding);\n        },\n        // connection() returns a role session; this is the enforcement path for ORM scope\n        // operations (mutations, includes) — every statement runs role-bound.\n        connection: () => runtime.openRoleSession(binding),\n      },\n      context,\n    });\n\n    return {\n      sql: roleSql,\n      orm: roleOrm,\n      raw: rawSqlTag,\n      execute<Row>(\n        plan: (SqlExecutionPlan<Row> | SqlQueryPlan<Row>) & { readonly _row?: Row },\n        execOptions?: RuntimeExecuteOptions,\n      ): AsyncIterableResult<Row> {\n        return runtime.executeWithRole<Row>(plan, binding, execOptions);\n      },\n      transaction<R>(fn: (tx: TransactionContext) => PromiseLike<R>): Promise<R> {\n        return withTransaction({ connection: () => runtime.openRoleSession(binding) }, fn);\n      },\n    };\n  }\n\n  async function closeDb(): Promise<void> {\n    if (closed) return;\n    closed = true;\n    await runtime.close();\n    if (poolEntry?.owned) {\n      await poolEntry.pool.end().catch(() => undefined);\n    }\n  }\n\n  return {\n    context,\n    stack,\n\n    async asUser(jwt: string): Promise<RoleBoundDb<TContract>> {\n      const { payload } = await verifyJwt(jwt);\n      const rawRole = payload['role'];\n      const roleStr = typeof rawRole === 'string' ? rawRole : 'authenticated';\n      const role: SupabaseRoleBinding['role'] =\n        roleStr === 'anon' || roleStr === 'authenticated' || roleStr === 'service_role'\n          ? roleStr\n          : 'authenticated';\n      const binding: SupabaseRoleBinding = { role, claims: payload };\n      return buildRoleBoundDb(binding);\n    },\n\n    asAnon(): RoleBoundDb<TContract> {\n      return buildRoleBoundDb({ role: 'anon', claims: {} });\n    },\n\n    asServiceRole(): RoleBoundDb<TContract> {\n      return buildRoleBoundDb({ role: 'service_role', claims: {} });\n    },\n\n    close: closeDb,\n    [Symbol.asyncDispose]: closeDb,\n  };\n}\n","import { supabaseRuntimeDescriptor } from '../runtime/descriptor';\n\nexport default supabaseRuntimeDescriptor;\n\nexport type {\n  RoleBoundDb,\n  SupabaseDb,\n  SupabaseOptions,\n  SupabaseOptionsWithContract,\n  SupabaseOptionsWithContractJson,\n  SupabaseTargetId,\n} from '../runtime/supabase';\nexport { default as supabase, InvalidJwtError, SupabaseConfigError } from '../runtime/supabase';\nexport type {\n  RoleSession,\n  SupabaseRoleBinding,\n  SupabaseRuntime,\n} from '../runtime/supabase-runtime';\nexport { SupabaseRuntimeImpl } from '../runtime/supabase-runtime';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,4BAAuE;CAClF,MAAM;CACN,IAAI;CACKA;CACT,UAAU;CACV,UAAU;CACV,cAAc,CAAC;CACf,SAAS;EACP,OAAO;GACL,UAAU;GACV,UAAU;EACZ;CACF;AACF;;;ACGA,IAAa,sBAAb,cAEU,oBAA+B;;;;;;CAMvC,MAAM,gBAAgB,SAAoD;EACxE,MAAM,OAAO,MAAM,KAAK,qBAAqB;EAE7C,IAAI;GACF,MAAM,KAAK,MAAM,oCAAoC,CAAC,QAAQ,QAAQ,IAAI,CAAC;GAC3E,MAAM,KAAK,MAAM,oCAAoC,CACnD,sBACA,KAAK,UAAU,QAAQ,UAAU,CAAC,CAAC,CACrC,CAAC;EACH,SAAS,KAAK;GACZ,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,YAAY,KAAA,CAAS;GAC7C,MAAM;EACR;EAEA,MAAM,OAAO;EAsFb,OAAO;GAnFL,QACE,MACA,SAC0B;IAC1B,OAAO,KAAK,wBAA6B,MAAM,MAAM;KAAE,GAAG;KAAS,OAAO;IAAa,CAAC;GAC1F;GAEA,gBACE,IACA,QACA,SAC0B;IAC1B,OAAO,KAAK,gCACV,UAGE,EAAE,GACJ,UAGE,MAAM,GACR,MACA;KAAE,GAAG;KAAS,OAAO;IAAa,CACpC;GACF;GAEA,MAAM,cAA2C;IAC/C,MAAM,KAAK,MAAM,KAAK,iBAAiB;IACvC,OAAO;KACL,MAAM,SAAwB;MAC5B,MAAM,GAAG,OAAO;KAClB;KACA,MAAM,WAA0B;MAC9B,MAAM,GAAG,SAAS;KACpB;KACA,QACE,MACA,SAC0B;MAC1B,OAAO,KAAK,wBAA6B,MAAM,IAAI;OACjD,GAAG;OACH,OAAO;MACT,CAAC;KACH;KACA,gBACE,IACA,QACA,SAC0B;MAC1B,OAAO,KAAK,gCACV,UAGE,EAAE,GACJ,UAGE,MAAM,GACR,IACA;OAAE,GAAG;OAAS,OAAO;MAAc,CACrC;KACF;IACF;GACF;;;;;GAMA,MAAM,UAAyB;IAC7B,IAAI;KACF,MAAM,KAAK,MAAM,WAAW;KAC5B,MAAM,KAAK,QAAQ;IACrB,SAAS,YAAY;KACnB,MAAM,KAAK,QAAQ,UAAU,CAAC,CAAC,YAAY,KAAA,CAAS;IACtD;GACF;GAEA,MAAM,QAAQ,QAAiC;IAC7C,MAAM,KAAK,QAAQ,MAAM;GAC3B;EAGW;CACf;;;;;CAMA,gBACE,MACA,SACA,SAC0B;EAC1B,MAAM,OAAO;EAEb,MAAM,YAAY,mBAAuD;GACvE,MAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;GAClD,IAAI,UAAU;GACd,IAAI;IACF,WAAW,MAAM,OAAO,QAAQ,QAAQ,MAAM,OAAO,GACnD,MAAM;GAEV,SAAS,KAAK;IACZ,UAAU;IACV,MAAM,QAAQ,QAAQ,GAAG,CAAC,CAAC,YAAY,KAAA,CAAS;IAChD,MAAM;GACR,UAAU;IACR,IAAI,CAAC,SACH,MAAM,QAAQ,QAAQ;GAE1B;EACF;EAEA,OAAO,IAAI,oBAAoB,UAAU,CAAC;CAC5C;AACF;;;AChIA,IAAa,sBAAb,cAAyC,MAAM;CAC7C,OAAyB;CACzB,YAAY,SAAiB;EAC3B,MAAM,OAAO;CACf;AACF;AAEA,IAAa,kBAAb,cAAqC,MAAM;CACzC,OAAyB;CACzB;CACA,YAAY,QAAgB;EAC1B,MAAM,gBAAgB,QAAQ;EAC9B,KAAK,SAAS;CAChB;AACF;AAyEA,SAAS,gBACP,SACuD;CACvD,OAAO,kBAAkB;AAC3B;AAEA,MAAM,qBAAqB,IAAI,2BAA2B;AAE1D,SAAS,gBACP,SACW;CACX,MAAM,gBAAgB,gBAAgB,OAAO,IAAI,QAAQ,eAAe,QAAQ;CAChF,OAAO,UAGL,mBAAmB,oBAAoB,aAAa,CAAC;AACzD;AAEA,SAAS,mBACP,SACa;CACb,MAAM,YAAY,eAAe,UAAU,QAAQ,YAAY,KAAA;CAC/D,MAAM,UAAU,aAAa,UAAU,QAAQ,UAAU,KAAA;CAEzD,IAAI,cAAc,KAAA,KAAa,YAAY,KAAA,GACzC,MAAM,IAAI,oBAAoB,+CAA+C;CAE/E,IAAI,cAAc,KAAA,KAAa,YAAY,KAAA,GACzC,MAAM,IAAI,oBAAoB,yCAAyC;CAGzE,IAAI,cAAc,KAAA,GAChB,OAAO;EAAE,MAAM;EAAU,KAAK,IAAI,YAAY,CAAC,CAAC,OAAO,SAAS;CAAE;CAGpE,IAAI,YAAY,KAAA,GACd,OAAO;EAAE,MAAM;EAAQ,QAAQ,mBAAmB,IAAI,IAAI,OAAO,CAAC;CAAE;CAGtE,MAAM,IAAI,oBAAoB,yCAAyC;AACzE;AAEA,SAAS,OACP,SAC4C;CAC5C,IAAI,QAAQ,cAAc,MACxB,OAAO;EAAE,MAAM,QAAQ;EAAI,OAAO;CAAM;CAE1C,IAAI,OAAO,QAAQ,QAAQ,UACzB,OAAO;EACL,MAAM,IAAI,KAAK;GACb,kBAAkB,QAAQ;GAC1B,yBAAyB,QAAQ,aAAa,2BAA2B;GACzE,mBAAmB,QAAQ,aAAa,qBAAqB;EAC/D,CAAC;EACD,OAAO;CACT;AAGJ;AAEA,SAAS,uBACP,YAC4D;CAC5D,MAAM,QAAQ,cAAc,CAAC;CAC7B,OAAO,MAAM,MAAM,SAAS,KAAK,OAAO,0BAA0B,EAAE,IAChE,QACA,CAAC,GAAG,OAAO,yBAAyB;AAC1C;AAQA,eAA8B,SAC5B,SACgC;CAChC,MAAM,cAAc,mBAAmB,OAAO;CAC9C,MAAM,WAAW,gBAAgB,OAAO;CAExC,MAAM,QAAQ,wBAAwB;EACpC,QAAQ;EACR,SAAS;EACT,QAAQ;EACR,gBAAgB,uBAAuB,QAAQ,UAAU;CAC3D,CAAC;CAED,MAAM,UAAU,uBAAuB;EAAE;EAAU;CAAM,CAAC;CAC1D,MAAM,kBAAkB,MAAM,QAAQ;CACtC,MAAM,YAAuB,aAAa,eAAe;CAEzD,MAAM,YAAY,OAAO,OAAO;CAChC,IAAI,SAAS;CAEb,MAAM,gBAAgB,0BAA0B,KAAK;CACrD,MAAM,mBAAmB,MAAM;CAC/B,IAAI,CAAC,kBACH,MAAM,IAAI,MAAM,gDAAgD;CAElE,MAAM,SAAS,iBAAiB,OAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE,CAAC;CAErE,IAAI,WACF,MAAM,OAAO,QAAQ;EAAE,MAAM;EAAU,MAAM,UAAU;CAAK,CAAC;CAG/D,MAAM,UAA4D,IAAI,oBAAoB;EACxF;EACA,SAAS,cAAc;EACvB;EACA,GAAG,UAAU,gBAAgB,QAAQ,YAAY;EACjD,GAAG,UAAU,cAAc,QAAQ,UAAU;CAC/C,CAAC;CAED,eAAe,UAAU,KAAuC;EAC9D,IAAI;GACF,IAAI,YAAY,SAAS,UACvB,OAAO,MAAM,UAAU,KAAK,YAAY,GAAG;GAE7C,OAAO,MAAM,UAAU,KAAK,YAAY,MAAM;EAChD,SAAS,KAAK;GAEZ,MAAM,IAAI,gBADK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAC9B;EAClC;CACF;CAEA,SAAS,iBAAiB,SAAsD;EAc9E,OAAO;GACL,KAd6B,IAAe;IAAE;IAAS;GAAgB,CAc5D;GACX,KAdoC,IAAI;IACxC,SAAS;KACP,QAAQ,MAAM;MACZ,OAAO,QAAQ,gBAAgB,MAAM,OAAO;KAC9C;KAGA,kBAAkB,QAAQ,gBAAgB,OAAO;IACnD;IACA;GACF,CAIa;GACX,KAAK;GACL,QACE,MACA,aAC0B;IAC1B,OAAO,QAAQ,gBAAqB,MAAM,SAAS,WAAW;GAChE;GACA,YAAe,IAA4D;IACzE,OAAO,gBAAgB,EAAE,kBAAkB,QAAQ,gBAAgB,OAAO,EAAE,GAAG,EAAE;GACnF;EACF;CACF;CAEA,eAAe,UAAyB;EACtC,IAAI,QAAQ;EACZ,SAAS;EACT,MAAM,QAAQ,MAAM;EACpB,IAAI,WAAW,OACb,MAAM,UAAU,KAAK,IAAI,CAAC,CAAC,YAAY,KAAA,CAAS;CAEpD;CAEA,OAAO;EACL;EACA;EAEA,MAAM,OAAO,KAA8C;GACzD,MAAM,EAAE,YAAY,MAAM,UAAU,GAAG;GACvC,MAAM,UAAU,QAAQ;GACxB,MAAM,UAAU,OAAO,YAAY,WAAW,UAAU;GAMxD,OAAO,iBAAiB;IADe,MAHrC,YAAY,UAAU,YAAY,mBAAmB,YAAY,iBAC7D,UACA;IACuC,QAAQ;GACvB,CAAC;EACjC;EAEA,SAAiC;GAC/B,OAAO,iBAAiB;IAAE,MAAM;IAAQ,QAAQ,CAAC;GAAE,CAAC;EACtD;EAEA,gBAAwC;GACtC,OAAO,iBAAiB;IAAE,MAAM;IAAgB,QAAQ,CAAC;GAAE,CAAC;EAC9D;EAEA,OAAO;GACN,OAAO,eAAe;CACzB;AACF;;;AChUA,IAAA,kBAAe"}
+{"version":3,"file":"runtime.mjs","names":["packageJson.version"],"sources":["../src/runtime/descriptor.ts","../src/runtime/supabase-runtime.ts","../src/runtime/supabase.ts","../src/exports/runtime.ts"],"sourcesContent":["import type { SqlRuntimeExtensionDescriptor } from '@prisma-next/sql-runtime';\nimport packageJson from '../../package.json' with { type: 'json' };\n\n/**\n * Tells the runtime that the Supabase pack's runtime component is available.\n *\n * When a contract declares the Supabase pack, the runtime checks that a\n * matching descriptor has been registered. Without this, loading a Supabase\n * contract errors with \"pack runtime component missing\". The `supabase()`\n * factory registers this descriptor automatically — app code never needs to\n * reference it directly.\n */\nexport const supabaseRuntimeDescriptor: SqlRuntimeExtensionDescriptor<'postgres'> = {\n  kind: 'extension' as const,\n  id: 'supabase',\n  version: packageJson.version,\n  familyId: 'sql' as const,\n  targetId: 'postgres' as const,\n  codecs: () => [],\n  create() {\n    return {\n      familyId: 'sql' as const,\n      targetId: 'postgres' as const,\n    };\n  },\n};\n","import type { Contract } from '@prisma-next/contract/types';\nimport type { RuntimeExecuteOptions } from '@prisma-next/framework-components/runtime';\nimport { AsyncIterableResult } from '@prisma-next/framework-components/runtime';\nimport { type PostgresRuntime, PostgresRuntimeImpl } from '@prisma-next/postgres/runtime';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport type { SqlExecutionPlan, SqlQueryPlan } from '@prisma-next/sql-relational-core/plan';\nimport type {\n  PreparedStatement,\n  PreparedStatementImpl,\n  RuntimeConnection,\n  RuntimeTransaction,\n} from '@prisma-next/sql-runtime';\nimport { blindCast } from '@prisma-next/utils/casts';\n\nexport interface SupabaseRuntime extends PostgresRuntime {}\n\nexport interface SupabaseRoleBinding {\n  // TODO(TML-2501): role names move to the Supabase extension contract (roles as first-class IR) when postgres-rls lands.\n  readonly role: 'anon' | 'authenticated' | 'service_role';\n  readonly claims?: Record<string, unknown>;\n}\n\n/**\n * A connection with a Supabase role already bound via session-scoped set_config.\n * Implements `RuntimeConnection` so it plugs into ORM scope machinery and `withTransaction`.\n */\nexport interface RoleSession extends RuntimeConnection {}\n\nexport class SupabaseRuntimeImpl<\n  TContract extends Contract<SqlStorage> = Contract<SqlStorage>,\n> extends PostgresRuntimeImpl<TContract> {\n  /**\n   * Opens a raw connection and applies role + JWT claims via session-scoped set_config.\n   * On bind failure, destroys the connection before rethrowing — no leaked connections.\n   * Not on the `SupabaseRuntime` interface; consumed by the facade, not by app code.\n   */\n  async openRoleSession(binding: SupabaseRoleBinding): Promise<RoleSession> {\n    const conn = await this.acquireRawConnection();\n\n    try {\n      await conn.query('SELECT set_config($1, $2, false)', ['role', binding.role]);\n      await conn.query('SELECT set_config($1, $2, false)', [\n        'request.jwt.claims',\n        JSON.stringify(binding.claims ?? {}),\n      ]);\n    } catch (err) {\n      await conn.destroy(err).catch(() => undefined);\n      throw err;\n    }\n\n    const self = this;\n\n    const session: RoleSession = {\n      execute<Row>(\n        plan: (SqlExecutionPlan<unknown> | SqlQueryPlan<unknown>) & { readonly _row?: Row },\n        options?: RuntimeExecuteOptions,\n      ): AsyncIterableResult<Row> {\n        return self.executeAgainstQueryable<Row>(plan, conn, { ...options, scope: 'connection' });\n      },\n\n      executePrepared<Params, Row>(\n        ps: PreparedStatement<Params, Row>,\n        params: Params,\n        options?: RuntimeExecuteOptions,\n      ): AsyncIterableResult<Row> {\n        return self.executePreparedAgainstQueryable(\n          blindCast<\n            PreparedStatementImpl<Params, Row>,\n            'PreparedStatement is PreparedStatementImpl; the impl class is the only concrete form'\n          >(ps),\n          blindCast<\n            Record<string, unknown>,\n            'params are structurally Record<string, unknown> at runtime'\n          >(params),\n          conn,\n          { ...options, scope: 'connection' },\n        );\n      },\n\n      async transaction(): Promise<RuntimeTransaction> {\n        const tx = await conn.beginTransaction();\n        return {\n          async commit(): Promise<void> {\n            await tx.commit();\n          },\n          async rollback(): Promise<void> {\n            await tx.rollback();\n          },\n          execute<Row>(\n            plan: (SqlExecutionPlan<unknown> | SqlQueryPlan<unknown>) & { readonly _row?: Row },\n            options?: RuntimeExecuteOptions,\n          ): AsyncIterableResult<Row> {\n            return self.executeAgainstQueryable<Row>(plan, tx, {\n              ...options,\n              scope: 'transaction',\n            });\n          },\n          executePrepared<Params, Row>(\n            ps: PreparedStatement<Params, Row>,\n            params: Params,\n            options?: RuntimeExecuteOptions,\n          ): AsyncIterableResult<Row> {\n            return self.executePreparedAgainstQueryable(\n              blindCast<\n                PreparedStatementImpl<Params, Row>,\n                'PreparedStatement is PreparedStatementImpl; the impl class is the only concrete form'\n              >(ps),\n              blindCast<\n                Record<string, unknown>,\n                'params are structurally Record<string, unknown> at runtime'\n              >(params),\n              tx,\n              { ...options, scope: 'transaction' },\n            );\n          },\n        };\n      },\n\n      /**\n       * Resets all session-local config then releases the connection back to the pool.\n       * If RESET ALL fails, destroys the connection instead — pool-poisoning guarantee.\n       */\n      async release(): Promise<void> {\n        try {\n          await conn.query('RESET ALL');\n          await conn.release();\n        } catch (resetError) {\n          await conn.destroy(resetError).catch(() => undefined);\n        }\n      },\n\n      async destroy(reason?: unknown): Promise<void> {\n        await conn.destroy(reason);\n      },\n    };\n\n    return session;\n  }\n\n  /**\n   * Opens a role session, executes the plan, then releases after the stream drains.\n   * On mid-stream error, destroys the session instead of releasing.\n   */\n  executeWithRole<Row>(\n    plan: SqlExecutionPlan<Row> | SqlQueryPlan<Row>,\n    binding: SupabaseRoleBinding,\n    options?: RuntimeExecuteOptions,\n  ): AsyncIterableResult<Row> {\n    const self = this;\n\n    const generator = async function* (): AsyncGenerator<Row, void, unknown> {\n      const session = await self.openRoleSession(binding);\n      let errored = false;\n      try {\n        for await (const row of session.execute(plan, options)) {\n          yield row;\n        }\n      } catch (err) {\n        errored = true;\n        await session.destroy(err).catch(() => undefined);\n        throw err;\n      } finally {\n        if (!errored) {\n          await session.release();\n        }\n      }\n    };\n\n    return new AsyncIterableResult(generator());\n  }\n}\n","import postgresAdapter from '@prisma-next/adapter-postgres/runtime';\nimport type { Contract } from '@prisma-next/contract/types';\nimport postgresDriver from '@prisma-next/driver-postgres/runtime';\nimport { instantiateExecutionStack } from '@prisma-next/framework-components/execution';\nimport type {\n  AsyncIterableResult,\n  RuntimeExecuteOptions,\n} from '@prisma-next/framework-components/runtime';\nimport { sql } from '@prisma-next/sql-builder/runtime';\nimport type { Db } from '@prisma-next/sql-builder/types';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport { orm } from '@prisma-next/sql-orm-client';\nimport type { RawSqlTag } from '@prisma-next/sql-relational-core/expression';\nimport { createRawSql } from '@prisma-next/sql-relational-core/expression';\nimport type { SqlExecutionPlan, SqlQueryPlan } from '@prisma-next/sql-relational-core/plan';\nimport type {\n  ExecutionContext,\n  SqlExecutionStackWithDriver,\n  SqlMiddleware,\n  SqlRuntimeExtensionDescriptor,\n  TransactionContext,\n  VerifyMarkerOption,\n} from '@prisma-next/sql-runtime';\nimport {\n  createExecutionContext,\n  createSqlExecutionStack,\n  withTransaction,\n} from '@prisma-next/sql-runtime';\nimport postgresTarget, { PostgresContractSerializer } from '@prisma-next/target-postgres/runtime';\nimport { blindCast } from '@prisma-next/utils/casts';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport { createRemoteJWKSet, type JWTVerifyResult, jwtVerify } from 'jose';\nimport type { Client } from 'pg';\nimport { Pool } from 'pg';\nimport { supabaseRuntimeDescriptor } from './descriptor';\nimport type { SupabaseRoleBinding, SupabaseRuntime } from './supabase-runtime';\nimport { SupabaseRuntimeImpl } from './supabase-runtime';\n\nexport type SupabaseTargetId = 'postgres';\n\ntype OrmClient<TContract extends Contract<SqlStorage>> = ReturnType<typeof orm<TContract>>;\n\nexport class SupabaseConfigError extends Error {\n  override readonly name = 'SupabaseConfigError';\n  constructor(message: string) {\n    super(message);\n  }\n}\n\nexport class InvalidJwtError extends Error {\n  override readonly name = 'InvalidJwtError';\n  readonly reason: string;\n  constructor(reason: string) {\n    super(`Invalid JWT: ${reason}`);\n    this.reason = reason;\n  }\n}\n\ntype KeyMaterial =\n  | { readonly kind: 'secret'; readonly key: Uint8Array }\n  | { readonly kind: 'jwks'; readonly keyset: ReturnType<typeof createRemoteJWKSet> };\n\nexport interface RoleBoundDb<TContract extends Contract<SqlStorage>> {\n  readonly sql: Db<TContract>;\n  readonly orm: OrmClient<TContract>;\n  readonly raw: RawSqlTag;\n  execute<Row>(\n    plan: (SqlExecutionPlan<Row> | SqlQueryPlan<Row>) & { readonly _row?: Row },\n    options?: RuntimeExecuteOptions,\n  ): AsyncIterableResult<Row>;\n  transaction<R>(fn: (tx: TransactionContext) => PromiseLike<R>): Promise<R>;\n}\n\nexport interface SupabaseDb<TContract extends Contract<SqlStorage>> {\n  readonly context: ExecutionContext<TContract>;\n  readonly stack: SqlExecutionStackWithDriver<SupabaseTargetId>;\n  asUser(jwt: string): Promise<RoleBoundDb<TContract>>;\n  asAnon(): RoleBoundDb<TContract>;\n  asServiceRole(): RoleBoundDb<TContract>;\n  close(): Promise<void>;\n  [Symbol.asyncDispose](): Promise<void>;\n}\n\nexport interface SupabaseOptionsBase {\n  readonly extensions?: readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[];\n  readonly middleware?: readonly SqlMiddleware[];\n  readonly verifyMarker?: VerifyMarkerOption;\n  readonly poolOptions?: {\n    readonly connectionTimeoutMillis?: number;\n    readonly idleTimeoutMillis?: number;\n  };\n}\n\nexport interface SupabaseBindingOptions {\n  readonly url?: string;\n  readonly pg?: Pool | Client;\n}\n\ntype JwtSecretOption = {\n  readonly jwtSecret: string;\n  readonly jwksUrl?: never;\n};\n\ntype JwksUrlOption = {\n  readonly jwksUrl: string;\n  readonly jwtSecret?: never;\n};\n\nexport type SupabaseOptionsWithContract<TContract extends Contract<SqlStorage>> =\n  SupabaseBindingOptions &\n    SupabaseOptionsBase &\n    (JwtSecretOption | JwksUrlOption) & {\n      readonly contract: TContract;\n      readonly contractJson?: never;\n    };\n\nexport type SupabaseOptionsWithContractJson<TContract extends Contract<SqlStorage>> =\n  SupabaseBindingOptions &\n    SupabaseOptionsBase &\n    (JwtSecretOption | JwksUrlOption) & {\n      readonly contractJson: unknown;\n      readonly contract?: never;\n      readonly _contract?: TContract;\n    };\n\nexport type SupabaseOptions<TContract extends Contract<SqlStorage>> =\n  | SupabaseOptionsWithContract<TContract>\n  | SupabaseOptionsWithContractJson<TContract>;\n\nfunction hasContractJson<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptions<TContract>,\n): options is SupabaseOptionsWithContractJson<TContract> {\n  return 'contractJson' in options;\n}\n\nconst contractSerializer = new PostgresContractSerializer();\n\nfunction resolveContract<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptions<TContract>,\n): TContract {\n  const contractJson = hasContractJson(options)\n    ? options.contractJson\n    : contractSerializer.serializeContract(options.contract);\n  return blindCast<\n    TContract,\n    'contractSerializer.deserializeContract returns a validated TContract'\n  >(contractSerializer.deserializeContract(contractJson));\n}\n\nfunction resolveKeyMaterial<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptions<TContract>,\n): KeyMaterial {\n  const jwtSecret = 'jwtSecret' in options ? options.jwtSecret : undefined;\n  const jwksUrl = 'jwksUrl' in options ? options.jwksUrl : undefined;\n\n  if (jwtSecret !== undefined && jwksUrl !== undefined) {\n    throw new SupabaseConfigError('Provide either jwtSecret or jwksUrl, not both');\n  }\n  if (jwtSecret === undefined && jwksUrl === undefined) {\n    throw new SupabaseConfigError('Either jwtSecret or jwksUrl is required');\n  }\n\n  if (jwtSecret !== undefined) {\n    return { kind: 'secret', key: new TextEncoder().encode(jwtSecret) };\n  }\n\n  if (jwksUrl !== undefined) {\n    return { kind: 'jwks', keyset: createRemoteJWKSet(new URL(jwksUrl)) };\n  }\n\n  throw new SupabaseConfigError('Either jwtSecret or jwksUrl is required');\n}\n\nfunction toPool<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptions<TContract>,\n): { pool: Pool; owned: boolean } | undefined {\n  if (options.pg instanceof Pool) {\n    return { pool: options.pg, owned: false };\n  }\n  if (typeof options.url === 'string') {\n    return {\n      pool: new Pool({\n        connectionString: options.url,\n        connectionTimeoutMillis: options.poolOptions?.connectionTimeoutMillis ?? 20_000,\n        idleTimeoutMillis: options.poolOptions?.idleTimeoutMillis ?? 30_000,\n      }),\n      owned: true,\n    };\n  }\n  return undefined;\n}\n\nfunction withSupabaseDescriptor(\n  extensions: readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[] | undefined,\n): readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[] {\n  const packs = extensions ?? [];\n  return packs.some((pack) => pack.id === supabaseRuntimeDescriptor.id)\n    ? packs\n    : [...packs, supabaseRuntimeDescriptor];\n}\n\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptionsWithContract<TContract>,\n): Promise<SupabaseDb<TContract>>;\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptionsWithContractJson<TContract>,\n): Promise<SupabaseDb<TContract>>;\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n  options: SupabaseOptions<TContract>,\n): Promise<SupabaseDb<TContract>> {\n  const keyMaterial = resolveKeyMaterial(options);\n  const contract = resolveContract(options);\n\n  const stack = createSqlExecutionStack({\n    target: postgresTarget,\n    adapter: postgresAdapter,\n    driver: postgresDriver,\n    extensionPacks: withSupabaseDescriptor(options.extensions),\n  });\n\n  const context = createExecutionContext({ contract, stack });\n  const rawCodecInferer = stack.adapter.rawCodecInferer;\n  const rawSqlTag: RawSqlTag = createRawSql(rawCodecInferer);\n\n  const poolEntry = toPool(options);\n  let closed = false;\n\n  const stackInstance = instantiateExecutionStack(stack);\n  const driverDescriptor = stack.driver;\n  if (!driverDescriptor) {\n    throw new Error('Driver descriptor missing from execution stack');\n  }\n  const driver = driverDescriptor.create({ cursor: { disabled: true } });\n\n  if (poolEntry) {\n    await driver.connect({ kind: 'pgPool', pool: poolEntry.pool });\n  }\n\n  const runtime: SupabaseRuntime & SupabaseRuntimeImpl<TContract> = new SupabaseRuntimeImpl({\n    context,\n    adapter: stackInstance.adapter,\n    driver,\n    ...ifDefined('verifyMarker', options.verifyMarker),\n    ...ifDefined('middleware', options.middleware),\n  });\n\n  async function verifyJwt(jwt: string): Promise<JWTVerifyResult> {\n    try {\n      if (keyMaterial.kind === 'secret') {\n        return await jwtVerify(jwt, keyMaterial.key);\n      }\n      return await jwtVerify(jwt, keyMaterial.keyset);\n    } catch (err) {\n      const reason = err instanceof Error ? err.message : String(err);\n      throw new InvalidJwtError(reason);\n    }\n  }\n\n  function buildRoleBoundDb(binding: SupabaseRoleBinding): RoleBoundDb<TContract> {\n    const roleSql: Db<TContract> = sql<TContract>({ context, rawCodecInferer });\n    const roleOrm: OrmClient<TContract> = orm({\n      runtime: {\n        execute(plan) {\n          return runtime.executeWithRole(plan, binding);\n        },\n        // connection() returns a role session; this is the enforcement path for ORM scope\n        // operations (mutations, includes) — every statement runs role-bound.\n        connection: () => runtime.openRoleSession(binding),\n      },\n      context,\n    });\n\n    return {\n      sql: roleSql,\n      orm: roleOrm,\n      raw: rawSqlTag,\n      execute<Row>(\n        plan: (SqlExecutionPlan<Row> | SqlQueryPlan<Row>) & { readonly _row?: Row },\n        execOptions?: RuntimeExecuteOptions,\n      ): AsyncIterableResult<Row> {\n        return runtime.executeWithRole<Row>(plan, binding, execOptions);\n      },\n      transaction<R>(fn: (tx: TransactionContext) => PromiseLike<R>): Promise<R> {\n        return withTransaction({ connection: () => runtime.openRoleSession(binding) }, fn);\n      },\n    };\n  }\n\n  async function closeDb(): Promise<void> {\n    if (closed) return;\n    closed = true;\n    await runtime.close();\n    if (poolEntry?.owned) {\n      await poolEntry.pool.end().catch(() => undefined);\n    }\n  }\n\n  return {\n    context,\n    stack,\n\n    async asUser(jwt: string): Promise<RoleBoundDb<TContract>> {\n      const { payload } = await verifyJwt(jwt);\n      const rawRole = payload['role'];\n      const roleStr = typeof rawRole === 'string' ? rawRole : 'authenticated';\n      const role: SupabaseRoleBinding['role'] =\n        roleStr === 'anon' || roleStr === 'authenticated' || roleStr === 'service_role'\n          ? roleStr\n          : 'authenticated';\n      const binding: SupabaseRoleBinding = { role, claims: payload };\n      return buildRoleBoundDb(binding);\n    },\n\n    asAnon(): RoleBoundDb<TContract> {\n      return buildRoleBoundDb({ role: 'anon', claims: {} });\n    },\n\n    asServiceRole(): RoleBoundDb<TContract> {\n      return buildRoleBoundDb({ role: 'service_role', claims: {} });\n    },\n\n    close: closeDb,\n    [Symbol.asyncDispose]: closeDb,\n  };\n}\n","import { supabaseRuntimeDescriptor } from '../runtime/descriptor';\n\nexport default supabaseRuntimeDescriptor;\n\nexport type {\n  RoleBoundDb,\n  SupabaseDb,\n  SupabaseOptions,\n  SupabaseOptionsWithContract,\n  SupabaseOptionsWithContractJson,\n  SupabaseTargetId,\n} from '../runtime/supabase';\nexport { default as supabase, InvalidJwtError, SupabaseConfigError } from '../runtime/supabase';\nexport type {\n  RoleSession,\n  SupabaseRoleBinding,\n  SupabaseRuntime,\n} from '../runtime/supabase-runtime';\nexport { SupabaseRuntimeImpl } from '../runtime/supabase-runtime';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,4BAAuE;CAClF,MAAM;CACN,IAAI;CACKA;CACT,UAAU;CACV,UAAU;CACV,cAAc,CAAC;CACf,SAAS;EACP,OAAO;GACL,UAAU;GACV,UAAU;EACZ;CACF;AACF;;;ACGA,IAAa,sBAAb,cAEU,oBAA+B;;;;;;CAMvC,MAAM,gBAAgB,SAAoD;EACxE,MAAM,OAAO,MAAM,KAAK,qBAAqB;EAE7C,IAAI;GACF,MAAM,KAAK,MAAM,oCAAoC,CAAC,QAAQ,QAAQ,IAAI,CAAC;GAC3E,MAAM,KAAK,MAAM,oCAAoC,CACnD,sBACA,KAAK,UAAU,QAAQ,UAAU,CAAC,CAAC,CACrC,CAAC;EACH,SAAS,KAAK;GACZ,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,YAAY,KAAA,CAAS;GAC7C,MAAM;EACR;EAEA,MAAM,OAAO;EAsFb,OAAO;GAnFL,QACE,MACA,SAC0B;IAC1B,OAAO,KAAK,wBAA6B,MAAM,MAAM;KAAE,GAAG;KAAS,OAAO;IAAa,CAAC;GAC1F;GAEA,gBACE,IACA,QACA,SAC0B;IAC1B,OAAO,KAAK,gCACV,UAGE,EAAE,GACJ,UAGE,MAAM,GACR,MACA;KAAE,GAAG;KAAS,OAAO;IAAa,CACpC;GACF;GAEA,MAAM,cAA2C;IAC/C,MAAM,KAAK,MAAM,KAAK,iBAAiB;IACvC,OAAO;KACL,MAAM,SAAwB;MAC5B,MAAM,GAAG,OAAO;KAClB;KACA,MAAM,WAA0B;MAC9B,MAAM,GAAG,SAAS;KACpB;KACA,QACE,MACA,SAC0B;MAC1B,OAAO,KAAK,wBAA6B,MAAM,IAAI;OACjD,GAAG;OACH,OAAO;MACT,CAAC;KACH;KACA,gBACE,IACA,QACA,SAC0B;MAC1B,OAAO,KAAK,gCACV,UAGE,EAAE,GACJ,UAGE,MAAM,GACR,IACA;OAAE,GAAG;OAAS,OAAO;MAAc,CACrC;KACF;IACF;GACF;;;;;GAMA,MAAM,UAAyB;IAC7B,IAAI;KACF,MAAM,KAAK,MAAM,WAAW;KAC5B,MAAM,KAAK,QAAQ;IACrB,SAAS,YAAY;KACnB,MAAM,KAAK,QAAQ,UAAU,CAAC,CAAC,YAAY,KAAA,CAAS;IACtD;GACF;GAEA,MAAM,QAAQ,QAAiC;IAC7C,MAAM,KAAK,QAAQ,MAAM;GAC3B;EAGW;CACf;;;;;CAMA,gBACE,MACA,SACA,SAC0B;EAC1B,MAAM,OAAO;EAEb,MAAM,YAAY,mBAAuD;GACvE,MAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;GAClD,IAAI,UAAU;GACd,IAAI;IACF,WAAW,MAAM,OAAO,QAAQ,QAAQ,MAAM,OAAO,GACnD,MAAM;GAEV,SAAS,KAAK;IACZ,UAAU;IACV,MAAM,QAAQ,QAAQ,GAAG,CAAC,CAAC,YAAY,KAAA,CAAS;IAChD,MAAM;GACR,UAAU;IACR,IAAI,CAAC,SACH,MAAM,QAAQ,QAAQ;GAE1B;EACF;EAEA,OAAO,IAAI,oBAAoB,UAAU,CAAC;CAC5C;AACF;;;AChIA,IAAa,sBAAb,cAAyC,MAAM;CAC7C,OAAyB;CACzB,YAAY,SAAiB;EAC3B,MAAM,OAAO;CACf;AACF;AAEA,IAAa,kBAAb,cAAqC,MAAM;CACzC,OAAyB;CACzB;CACA,YAAY,QAAgB;EAC1B,MAAM,gBAAgB,QAAQ;EAC9B,KAAK,SAAS;CAChB;AACF;AAyEA,SAAS,gBACP,SACuD;CACvD,OAAO,kBAAkB;AAC3B;AAEA,MAAM,qBAAqB,IAAI,2BAA2B;AAE1D,SAAS,gBACP,SACW;CACX,MAAM,eAAe,gBAAgB,OAAO,IACxC,QAAQ,eACR,mBAAmB,kBAAkB,QAAQ,QAAQ;CACzD,OAAO,UAGL,mBAAmB,oBAAoB,YAAY,CAAC;AACxD;AAEA,SAAS,mBACP,SACa;CACb,MAAM,YAAY,eAAe,UAAU,QAAQ,YAAY,KAAA;CAC/D,MAAM,UAAU,aAAa,UAAU,QAAQ,UAAU,KAAA;CAEzD,IAAI,cAAc,KAAA,KAAa,YAAY,KAAA,GACzC,MAAM,IAAI,oBAAoB,+CAA+C;CAE/E,IAAI,cAAc,KAAA,KAAa,YAAY,KAAA,GACzC,MAAM,IAAI,oBAAoB,yCAAyC;CAGzE,IAAI,cAAc,KAAA,GAChB,OAAO;EAAE,MAAM;EAAU,KAAK,IAAI,YAAY,CAAC,CAAC,OAAO,SAAS;CAAE;CAGpE,IAAI,YAAY,KAAA,GACd,OAAO;EAAE,MAAM;EAAQ,QAAQ,mBAAmB,IAAI,IAAI,OAAO,CAAC;CAAE;CAGtE,MAAM,IAAI,oBAAoB,yCAAyC;AACzE;AAEA,SAAS,OACP,SAC4C;CAC5C,IAAI,QAAQ,cAAc,MACxB,OAAO;EAAE,MAAM,QAAQ;EAAI,OAAO;CAAM;CAE1C,IAAI,OAAO,QAAQ,QAAQ,UACzB,OAAO;EACL,MAAM,IAAI,KAAK;GACb,kBAAkB,QAAQ;GAC1B,yBAAyB,QAAQ,aAAa,2BAA2B;GACzE,mBAAmB,QAAQ,aAAa,qBAAqB;EAC/D,CAAC;EACD,OAAO;CACT;AAGJ;AAEA,SAAS,uBACP,YAC4D;CAC5D,MAAM,QAAQ,cAAc,CAAC;CAC7B,OAAO,MAAM,MAAM,SAAS,KAAK,OAAO,0BAA0B,EAAE,IAChE,QACA,CAAC,GAAG,OAAO,yBAAyB;AAC1C;AAQA,eAA8B,SAC5B,SACgC;CAChC,MAAM,cAAc,mBAAmB,OAAO;CAC9C,MAAM,WAAW,gBAAgB,OAAO;CAExC,MAAM,QAAQ,wBAAwB;EACpC,QAAQ;EACR,SAAS;EACT,QAAQ;EACR,gBAAgB,uBAAuB,QAAQ,UAAU;CAC3D,CAAC;CAED,MAAM,UAAU,uBAAuB;EAAE;EAAU;CAAM,CAAC;CAC1D,MAAM,kBAAkB,MAAM,QAAQ;CACtC,MAAM,YAAuB,aAAa,eAAe;CAEzD,MAAM,YAAY,OAAO,OAAO;CAChC,IAAI,SAAS;CAEb,MAAM,gBAAgB,0BAA0B,KAAK;CACrD,MAAM,mBAAmB,MAAM;CAC/B,IAAI,CAAC,kBACH,MAAM,IAAI,MAAM,gDAAgD;CAElE,MAAM,SAAS,iBAAiB,OAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE,CAAC;CAErE,IAAI,WACF,MAAM,OAAO,QAAQ;EAAE,MAAM;EAAU,MAAM,UAAU;CAAK,CAAC;CAG/D,MAAM,UAA4D,IAAI,oBAAoB;EACxF;EACA,SAAS,cAAc;EACvB;EACA,GAAG,UAAU,gBAAgB,QAAQ,YAAY;EACjD,GAAG,UAAU,cAAc,QAAQ,UAAU;CAC/C,CAAC;CAED,eAAe,UAAU,KAAuC;EAC9D,IAAI;GACF,IAAI,YAAY,SAAS,UACvB,OAAO,MAAM,UAAU,KAAK,YAAY,GAAG;GAE7C,OAAO,MAAM,UAAU,KAAK,YAAY,MAAM;EAChD,SAAS,KAAK;GAEZ,MAAM,IAAI,gBADK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAC9B;EAClC;CACF;CAEA,SAAS,iBAAiB,SAAsD;EAc9E,OAAO;GACL,KAd6B,IAAe;IAAE;IAAS;GAAgB,CAc5D;GACX,KAdoC,IAAI;IACxC,SAAS;KACP,QAAQ,MAAM;MACZ,OAAO,QAAQ,gBAAgB,MAAM,OAAO;KAC9C;KAGA,kBAAkB,QAAQ,gBAAgB,OAAO;IACnD;IACA;GACF,CAIa;GACX,KAAK;GACL,QACE,MACA,aAC0B;IAC1B,OAAO,QAAQ,gBAAqB,MAAM,SAAS,WAAW;GAChE;GACA,YAAe,IAA4D;IACzE,OAAO,gBAAgB,EAAE,kBAAkB,QAAQ,gBAAgB,OAAO,EAAE,GAAG,EAAE;GACnF;EACF;CACF;CAEA,eAAe,UAAyB;EACtC,IAAI,QAAQ;EACZ,SAAS;EACT,MAAM,QAAQ,MAAM;EACpB,IAAI,WAAW,OACb,MAAM,UAAU,KAAK,IAAI,CAAC,CAAC,YAAY,KAAA,CAAS;CAEpD;CAEA,OAAO;EACL;EACA;EAEA,MAAM,OAAO,KAA8C;GACzD,MAAM,EAAE,YAAY,MAAM,UAAU,GAAG;GACvC,MAAM,UAAU,QAAQ;GACxB,MAAM,UAAU,OAAO,YAAY,WAAW,UAAU;GAMxD,OAAO,iBAAiB;IADe,MAHrC,YAAY,UAAU,YAAY,mBAAmB,YAAY,iBAC7D,UACA;IACuC,QAAQ;GACvB,CAAC;EACjC;EAEA,SAAiC;GAC/B,OAAO,iBAAiB;IAAE,MAAM;IAAQ,QAAQ,CAAC;GAAE,CAAC;EACtD;EAEA,gBAAwC;GACtC,OAAO,iBAAiB;IAAE,MAAM;IAAgB,QAAQ,CAAC;GAAE,CAAC;EAC9D;EAEA,OAAO;GACN,OAAO,eAAe;CACzB;AACF;;;AClUA,IAAA,kBAAe"}

package/package.json

@@ -1,47 +1,47 @@
 {
   "name": "@prisma-next/extension-supabase",
-  "version": "0.14.0-dev.20",
+  "version": "0.14.0-dev.21",
   "license": "Apache-2.0",
   "type": "module",
   "sideEffects": false,
   "dependencies": {
-    "@prisma-next/adapter-postgres": "0.14.0-dev.20",
-    "@prisma-next/contract": "0.14.0-dev.20",
-    "@prisma-next/driver-postgres": "0.14.0-dev.20",
-    "@prisma-next/postgres": "0.14.0-dev.20",
-    "@prisma-next/sql-builder": "0.14.0-dev.20",
-    "@prisma-next/sql-orm-client": "0.14.0-dev.20",
-    "@prisma-next/target-postgres": "0.14.0-dev.20",
+    "@prisma-next/adapter-postgres": "0.14.0-dev.21",
+    "@prisma-next/contract": "0.14.0-dev.21",
+    "@prisma-next/driver-postgres": "0.14.0-dev.21",
+    "@prisma-next/postgres": "0.14.0-dev.21",
+    "@prisma-next/sql-builder": "0.14.0-dev.21",
+    "@prisma-next/sql-orm-client": "0.14.0-dev.21",
+    "@prisma-next/target-postgres": "0.14.0-dev.21",
     "jose": "^6",
     "pg": "8.21.0",
-    "@prisma-next/contract-authoring": "0.14.0-dev.20",
-    "@prisma-next/family-sql": "0.14.0-dev.20",
-    "@prisma-next/framework-components": "0.14.0-dev.20",
-    "@prisma-next/migration-tools": "0.14.0-dev.20",
-    "@prisma-next/sql-contract": "0.14.0-dev.20",
-    "@prisma-next/sql-contract-ts": "0.14.0-dev.20",
-    "@prisma-next/sql-operations": "0.14.0-dev.20",
-    "@prisma-next/sql-relational-core": "0.14.0-dev.20",
-    "@prisma-next/sql-runtime": "0.14.0-dev.20",
-    "@prisma-next/sql-schema-ir": "0.14.0-dev.20",
-    "@prisma-next/utils": "0.14.0-dev.20",
+    "@prisma-next/contract-authoring": "0.14.0-dev.21",
+    "@prisma-next/family-sql": "0.14.0-dev.21",
+    "@prisma-next/framework-components": "0.14.0-dev.21",
+    "@prisma-next/migration-tools": "0.14.0-dev.21",
+    "@prisma-next/sql-contract": "0.14.0-dev.21",
+    "@prisma-next/sql-contract-ts": "0.14.0-dev.21",
+    "@prisma-next/sql-operations": "0.14.0-dev.21",
+    "@prisma-next/sql-relational-core": "0.14.0-dev.21",
+    "@prisma-next/sql-runtime": "0.14.0-dev.21",
+    "@prisma-next/sql-schema-ir": "0.14.0-dev.21",
+    "@prisma-next/utils": "0.14.0-dev.21",
     "@standard-schema/spec": "^1.1.0",
     "arktype": "^2.2.0"
   },
   "devDependencies": {
-    "@prisma-next/cli": "0.14.0-dev.20",
-    "@prisma-next/operations": "0.14.0-dev.20",
-    "@prisma-next/sql-contract-psl": "0.14.0-dev.20",
-    "@prisma-next/test-utils": "0.14.0-dev.20",
-    "@prisma-next/tsconfig": "0.14.0-dev.20",
-    "@prisma-next/tsdown": "0.14.0-dev.20",
+    "@prisma-next/cli": "0.14.0-dev.21",
+    "@prisma-next/operations": "0.14.0-dev.21",
+    "@prisma-next/sql-contract-psl": "0.14.0-dev.21",
+    "@prisma-next/test-utils": "0.14.0-dev.21",
+    "@prisma-next/tsconfig": "0.14.0-dev.21",
+    "@prisma-next/tsdown": "0.14.0-dev.21",
     "@types/pg": "8.20.0",
     "tsdown": "0.22.1",
     "typescript": "5.9.3",
     "vitest": "4.1.8"
   },
   "peerDependencies": {
-    "@prisma-next/adapter-postgres": "0.14.0-dev.20",
+    "@prisma-next/adapter-postgres": "0.14.0-dev.21",
     "typescript": ">=5.9"
   },
   "peerDependenciesMeta": {

package/src/runtime/supabase.ts

@@ -138,11 +138,13 @@ const contractSerializer = new PostgresContractSerializer();
 function resolveContract<TContract extends Contract<SqlStorage>>(
   options: SupabaseOptions<TContract>,
 ): TContract {
-  const contractInput = hasContractJson(options) ? options.contractJson : options.contract;
+  const contractJson = hasContractJson(options)
+    ? options.contractJson
+    : contractSerializer.serializeContract(options.contract);
   return blindCast<
     TContract,
     'contractSerializer.deserializeContract returns a validated TContract'
-  >(contractSerializer.deserializeContract(contractInput));
+  >(contractSerializer.deserializeContract(contractJson));
 }
 
 function resolveKeyMaterial<TContract extends Contract<SqlStorage>>(

package/dist/package-BN7Uy42E.mjs

@@ -1,6 +0,0 @@
-//#region package.json
-var version = "0.14.0-dev.20";
-//#endregion
-export { version as t };
-
-//# sourceMappingURL=package-BN7Uy42E.mjs.map

package/dist/package-BN7Uy42E.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"package-BN7Uy42E.mjs","names":[],"sources":["../package.json"],"sourcesContent":[""],"mappings":""}