@prisma-next/extension-supabase 0.14.0-dev.6 → 0.14.0-dev.60

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (23) hide show
  1. package/dist/contract-BhiJRKdN.mjs +524 -0
  2. package/dist/contract-BhiJRKdN.mjs.map +1 -0
  3. package/dist/contract.d.mts +18 -0
  4. package/dist/contract.d.mts.map +1 -1
  5. package/dist/pack.mjs +1 -413
  6. package/dist/pack.mjs.map +1 -1
  7. package/dist/runtime.d.mts +765 -5
  8. package/dist/runtime.d.mts.map +1 -1
  9. package/dist/runtime.mjs +64 -15
  10. package/dist/runtime.mjs.map +1 -1
  11. package/dist/test/utils.d.mts +10 -8
  12. package/dist/test/utils.d.mts.map +1 -1
  13. package/dist/test/utils.mjs +54 -11
  14. package/dist/test/utils.mjs.map +1 -1
  15. package/package.json +27 -26
  16. package/src/contract/contract.d.ts +172 -5
  17. package/src/contract/contract.json +126 -2
  18. package/src/contract/contract.prisma +16 -0
  19. package/src/exports/runtime.ts +3 -0
  20. package/src/runtime/ext-contract-type.ts +9 -0
  21. package/src/runtime/supabase.ts +118 -15
  22. package/dist/package-DsJwxFfN.mjs +0 -6
  23. package/dist/package-DsJwxFfN.mjs.map +0 -1
package/dist/runtime.d.mts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"runtime.d.mts","names":[],"sources":["../src/runtime/descriptor.ts","../src/runtime/supabase.ts","../src/runtime/supabase-runtime.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;cAYa,yBAAA,EAA2B,6BAA6B;;;KC0BzD,gBAAA;AAAA,KAEP,SAAA,mBAA4B,QAAA,CAAS,UAAA,KAAe,UAAA,QAAkB,GAAA,CAAI,SAAA;AAAA,cAElE,mBAAA,SAA4B,KAAK;EAAA,SAC1B,IAAA;cACN,OAAA;AAAA;AAAA,cAKD,eAAA,SAAwB,KAAK;EAAA,SACtB,IAAA;EAAA,SACT,MAAA;cACG,MAAA;AAAA;AAAA,UAUG,WAAA,mBAA8B,QAAA,CAAS,UAAA;EAAA,SAC7C,GAAA,EAAK,EAAA,CAAG,SAAA;EAAA,SACR,GAAA,EAAK,SAAA,CAAU,SAAA;EAAA,SACf,GAAA,EAAK,SAAA;EACd,OAAA,MACE,IAAA,GAAO,gBAAA,CAAiB,GAAA,IAAO,YAAA,CAAa,GAAA;IAAA,SAAmB,IAAA,GAAO,GAAA;EAAA,GACtE,OAAA,GAAU,qBAAA,GACT,mBAAA,CAAoB,GAAA;EACvB,WAAA,IAAe,EAAA,GAAK,EAAA,EAAI,kBAAA,KAAuB,WAAA,CAAY,CAAA,IAAK,OAAA,CAAQ,CAAA;AAAA;AAAA,UAGzD,UAAA,mBAA6B,QAAA,CAAS,UAAA;EAAA,SAC5C,OAAA,EAAS,gBAAA,CAAiB,SAAA;EAAA,SAC1B,KAAA,EAAO,2BAAA,CAA4B,gBAAA;EAC5C,MAAA,CAAO,GAAA,WAAc,OAAA,CAAQ,WAAA,CAAY,SAAA;EACzC,MAAA,IAAU,WAAA,CAAY,SAAA;EACtB,aAAA,IAAiB,WAAA,CAAY,SAAA;EAC7B,KAAA,IAAS,OAAA;EAAA,CACR,MAAA,CAAO,YAAA,KAAiB,OAAA;AAAA;AAAA,UAGV,mBAAA;EAAA,SACN,UAAA,YAAsB,6BAAA,CAA8B,gBAAA;EAAA,SACpD,UAAA,YAAsB,aAAA;EAAA,SACtB,YAAA,GAAe,kBAAA;EAAA,SACf,WAAA;IAAA,SACE,uBAAA;IAAA,SACA,iBAAA;EAAA;AAAA;AAAA,UAII,sBAAA;EAAA,SACN,GAAA;EAAA,SACA,EAAA,GAAK,IAAA,GAAO,MAAM;AAAA;AAAA,KAGxB,eAAA;EAAA,SACM,SAAA;EAAA,SACA,OAAO;AAAA;AAAA,KAGb,aAAA;EAAA,SACM,OAAA;EAAA,SACA,SAAS;AAAA;AAAA,KAGR,2BAAA,mBAA8C,QAAA,CAAS,UAAA,KACjE,sBAAA,GACE,mBAAA,IACC,eAAA,GAAkB,aAAA;EAAA,SACR,QAAA,EAAU,SAAA;EAAA,SACV,YAAA;AAAA;AAAA,KAGH,+BAAA,mBAAkD,QAAA,CAAS,UAAA,KACrE,sBAAA,GACE,mBAAA,IACC,eAAA,GAAkB,aAAA;EAAA,SACR,YAAA;EAAA,SACA,QAAA;EAAA,SACA,SAAA,GAAY,SAAA;AAAA;AAAA,KAGf,eAAA,mBAAkC,QAAA,CAAS,UAAA,KACnD,2BAAA,CAA4B,SAAA,IAC5B,+BAAA,CAAgC,SAAA;AAAA,iBAwEN,QAAA,mBAA2B,QAAA,CAAS,UAAA,GAChE,OAAA,EAAS,2BAAA,CAA4B,SAAA,IACpC,OAAA,CAAQ,UAAA,CAAW,SAAA;AAAA,iBACQ,QAAA,mBAA2B,QAAA,CAAS,UAAA,GAChE,OAAA,EAAS,+BAAA,CAAgC,SAAA,IACxC,OAAA,CAAQ,UAAA,CAAW,SAAA;;;UC9LL,eAAA,SAAwB,eAAe;AAAA,UAEvC,mBAAA;EAAA,SAEN,IAAA;EAAA,SACA,MAAA,GAAS,MAAM;AAAA;;;;AFP2C;UEcpD,WAAA,SAAoB,iBAAiB;AAAA,cAEzC,mBAAA,mBACO,QAAA,CAAS,UAAA,IAAc,QAAA,CAAS,UAAA,WAC1C,mBAAA,CAAoB,SAAA;EDQlB;;;;AAAgB;ECFpB,eAAA,CAAgB,OAAA,EAAS,mBAAA,GAAsB,OAAA,CAAQ,WAAA;EDIjD;;;;ECuGZ,eAAA,MACE,IAAA,EAAM,gBAAA,CAAiB,GAAA,IAAO,YAAA,CAAa,GAAA,GAC3C,OAAA,EAAS,mBAAA,EACT,OAAA,GAAU,qBAAA,GACT,mBAAA,CAAoB,GAAA;AAAA"}
1
+ {"version":3,"file":"runtime.d.mts","names":["StorageHashBase","ExecutionHashBase","ProfileHashBase","PgTypes","CodecTypes","PgAdapterQueryOps","CodecId","_Encoded","auth","AuthIdentity","id","user_id","provider","created_at","updated_at","AuthSession","aal","AuthUser","email","storage","StorageBucket","name","StorageObject","bucket_id","identities","sessions","users","public","buckets","objects","TypeMapsType","QueryOperationTypes","FieldOutputTypes","FieldInputTypes","StorageColumnTypes","StorageColumnInputTypes","Omit","ContractType","namespaces","kind","entries","table","columns","nativeType","codecId","nullable","typeRef","primaryKey","uniques","indexes","foreignKeys","typeParams","typeName","valueSet","AalLevel","values","types","Uuid","Record","Timestamptz","storageHash","StorageHash","target","targetFamily","roots","namespace","NamespaceId","model","domain","models","fields","type","relations","namespaceId","column","capabilities","postgres","distinctOn","jsonAgg","lateral","limit","orderBy","returning","sql","defaultInInsert","enums","scalarList","extensionPacks","meta","profileHash","ProfileHash","ContractWithTypeMaps","ContractBase","TypeMaps","Contract"],"sources":["../src/runtime/descriptor.ts","../src/contract/contract.d.ts","../src/runtime/ext-contract-type.ts","../src/runtime/supabase.ts","../src/runtime/supabase-runtime.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;cAYa,yBAAA,EAA2B,6BAA6B;;;KCmBzD,WAAA,GACV,eAAe;AAAA,KAEL,WAAA,GACV,eAAe;AAAA,KAEL,YAAA,GAAa,UAAO;AAAA,KAEpB,qBAAA,GAAsB,mBAAiB,CAAC,YAAA;AAAA,KAKxC,gBAAA;EAAA,SACDQ,IAAAA;IAAAA,SACEC,YAAAA;MAAAA,SACEC,EAAAA,EAAI,YAAA;MAAA,SACJC,OAAAA,EAAS,YAAA;MAAA,SACTC,QAAAA,EAAU,YAAA;MAAA,SACVC,UAAAA,EAAY,YAAA;MAAA,SACZC,UAAAA,EAAY,YAAA;IAAA;IAAA,SAEdC,WAAAA;MAAAA,SACEL,EAAAA,EAAI,YAAA;MAAA,SACJC,OAAAA,EAAS,YAAA;MAAA,SACTK,GAAAA;MAAAA,SACAH,UAAAA,EAAY,YAAA;IAAA;IAAA,SAEdI,QAAAA;MAAAA,SACEP,EAAAA,EAAI,YAAA;MAAA,SACJQ,KAAAA,EAAO,YAAA;MAAA,SACPL,UAAAA,EAAY,YAAA;MAAA,SACZC,UAAAA,EAAY,YAAA;IAAA;EAAA;EAAA,SAGhBK,OAAAA;IAAAA,SACEC,aAAAA;MAAAA,SACEV,EAAAA,EAAI,YAAA;MAAA,SACJW,IAAAA,EAAM,YAAA;MAAA,SACNR,UAAAA,EAAY,YAAA;MAAA,SACZC,UAAAA,EAAY,YAAA;IAAA;IAAA,SAEdQ,aAAAA;MAAAA,SACEZ,EAAAA,EAAI,YAAA;MAAA,SACJa,SAAAA,EAAW,YAAA;MAAA,SACXF,IAAAA,EAAM,YAAA;MAAA,SACNR,UAAAA,EAAY,YAAA;MAAA,SACZC,UAAAA,EAAY,YAAA;IAAA;EAAA;AAAA;AAAA,KAIf,eAAA;EAAA,SACDN,IAAAA;IAAAA,SACEC,YAAAA;MAAAA,SACEC,EAAAA,EAAI,YAAA;MAAA,SACJC,OAAAA,EAAS,YAAA;MAAA,SACTC,QAAAA,EAAU,YAAA;MAAA,SACVC,UAAAA,EAAY,YAAA;MAAA,SACZC,UAAAA,EAAY,YAAA;IAAA;IAAA,SAEdC,WAAAA;MAAAA,SACEL,EAAAA,EAAI,YAAA;MAAA,SACJC,OAAAA,EAAS,YAAA;MAAA,SACTK,GAAAA;MAAAA,SACAH,UAAAA,EAAY,YAAA;IAAA;IAAA,SAEdI,QAAAA;MAAAA,SACEP,EAAAA,EAAI,YAAA;MAAA,SACJQ,KAAAA,EAAO,YAAA;MAAA,SACPL,UAAAA,EAAY,YAAA;MAAA,SACZC,UAAAA,EAAY,YAAA;IAAA;EAAA;EAAA,SAGhBK,OAAAA;IAAAA,SACEC,aAAAA;MAAAA,SACEV,EAAAA,EAAI,YAAA;MAAA,SACJW,IAAAA,EAAM,YAAA;MAAA,SACNR,UAAAA,EAAY,YAAA;MAAA,SACZC,UAAAA,EAAY,YAAA;IAAA;IAAA,SAEdQ,aAAAA;MAAAA,SACEZ,EAAAA,EAAI,YAAA;MAAA,SACJa,SAAAA,EAAW,YAAA;MAAA,SACXF,IAAAA,EAAM,YAAA;MAAA,SACNR,UAAAA,EAAY,YAAA;MAAA,SACZC,UAAAA,EAAY,YAAA;IAAA;EAAA;AAAA;AAAA,KAIf,kBAAA;EAAA,SACDN,IAAAA;IAAAA,SACEgB,UAAAA;MAAAA,SACEX,UAAAA,EAAY,YAAA;MAAA,SACZH,EAAAA,EAAI,YAAA;MAAA,SACJE,QAAAA,EAAU,YAAA;MAAA,SACVE,UAAAA,EAAY,YAAA;MAAA,SACZH,OAAAA,EAAS,YAAA;IAAA;IAAA,SAEXc,QAAAA;MAAAA,SACET,GAAAA;MAAAA,SACAH,UAAAA,EAAY,YAAA;MAAA,SACZH,EAAAA,EAAI,YAAA;MAAA,SACJC,OAAAA,EAAS,YAAA;IAAA;IAAA,SAEXe,KAAAA;MAAAA,SACEb,UAAAA,EAAY,YAAA;MAAA,SACZK,KAAAA,EAAO,YAAA;MAAA,SACPR,EAAAA,EAAI,YAAA;MAAA,SACJI,UAAAA,EAAY,YAAA;IAAA;EAAA;EAAA,SAGhBa,MAAAA;EAAAA,SACAR,OAAAA;IAAAA,SACES,OAAAA;MAAAA,SACEf,UAAAA,EAAY,YAAA;MAAA,SACZH,EAAAA,EAAI,YAAA;MAAA,SACJW,IAAAA,EAAM,YAAA;MAAA,SACNP,UAAAA,EAAY,YAAA;IAAA;IAAA,SAEde,OAAAA;MAAAA,SACEN,SAAAA,EAAW,YAAA;MAAA,SACXV,UAAAA,EAAY,YAAA;MAAA,SACZH,EAAAA,EAAI,YAAA;MAAA,SACJW,IAAAA,EAAM,YAAA;MAAA,SACNP,UAAAA,EAAY,YAAA;IAAA;EAAA;AAAA;AAAA,KAIf,uBAAA;EAAA,SACDN,IAAAA;IAAAA,SACEgB,UAAAA;MAAAA,SACEX,UAAAA,EAAY,YAAA;MAAA,SACZH,EAAAA,EAAI,YAAA;MAAA,SACJE,QAAAA,EAAU,YAAA;MAAA,SACVE,UAAAA,EAAY,YAAA;MAAA,SACZH,OAAAA,EAAS,YAAA;IAAA;IAAA,SAEXc,QAAAA;MAAAA,SACET,GAAAA;MAAAA,SACAH,UAAAA,EAAY,YAAA;MAAA,SACZH,EAAAA,EAAI,YAAA;MAAA,SACJC,OAAAA,EAAS,YAAA;IAAA;IAAA,SAEXe,KAAAA;MAAAA,SACEb,UAAAA,EAAY,YAAA;MAAA,SACZK,KAAAA,EAAO,YAAA;MAAA,SACPR,EAAAA,EAAI,YAAA;MAAA,SACJI,UAAAA,EAAY,YAAA;IAAA;EAAA;EAAA,SAGhBa,MAAAA;EAAAA,SACAR,OAAAA;IAAAA,SACES,OAAAA;MAAAA,SACEf,UAAAA,EAAY,YAAA;MAAA,SACZH,EAAAA,EAAI,YAAA;MAAA,SACJW,IAAAA,EAAM,YAAA;MAAA,SACNP,UAAAA,EAAY,YAAA;IAAA;IAAA,SAEde,OAAAA;MAAAA,SACEN,SAAAA,EAAW,YAAA;MAAA,SACXV,UAAAA,EAAY,YAAA;MAAA,SACZH,EAAAA,EAAI,YAAA;MAAA,SACJW,IAAAA,EAAM,YAAA;MAAA,SACNP,UAAAA,EAAY,YAAA;IAAA;EAAA;AAAA;AAAA,KAIf,UAAA,GAAW,QAAA,CACrB,YAAA,EACA,qBAAA,EACA,gBAAA,EACA,eAAA,EACA,kBAAA,EACA,uBAAA;AAAA,KAGG,YAAA,GAAe,IAAA,CAClB,QAAA;EAAA,SACWwB,UAAAA;IAAAA,SACE9B,IAAAA;MAAAA,SACEE,EAAAA;MAAAA,SACA6B,IAAAA;MAAAA,SACAC,OAAAA;QAAAA,SACEC,KAAAA;UAAAA,SACEjB,UAAAA;YACPkB,OAAAA;cAAAA,SACWhC,EAAAA;gBAAAA,SACEiC,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;cAAAA,SAEFnC,OAAAA;gBAAAA,SACEgC,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;cAAAA,SAEFlC,QAAAA;gBAAAA,SACE+B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;cAAAA;cAAAA,SAEFhC,UAAAA;gBAAAA,SACE8B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;cAAAA,SAEFhC,UAAAA;gBAAAA,SACE6B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;YAAAA;YAGbC,UAAAA;cAAAA,SAAuBL,OAAAA;YAAAA;YACvBM,OAAAA;YACAC,OAAAA;YACAC,WAAAA;UAAAA;UAAAA,SAEOzB,QAAAA;YACPiB,OAAAA;cAAAA,SACWhC,EAAAA;gBAAAA,SACEiC,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;cAAAA,SAEFnC,OAAAA;gBAAAA,SACEgC,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;cAAAA,SAEF9B,GAAAA;gBAAAA,SACE2B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAM,UAAAA;kBAAAA,SAAuBC,QAAAA;gBAAAA;cAAAA;cAAAA,SAEzBvC,UAAAA;gBAAAA,SACE8B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;YAAAA;YAGbC,UAAAA;cAAAA,SAAuBL,OAAAA;YAAAA;YACvBM,OAAAA;YACAC,OAAAA;YACAC,WAAAA;UAAAA;UAAAA,SAEOxB,KAAAA;YACPgB,OAAAA;cAAAA,SACWhC,EAAAA;gBAAAA,SACEiC,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;cAAAA,SAEF5B,KAAAA;gBAAAA,SACEyB,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;cAAAA;cAAAA,SAEFhC,UAAAA;gBAAAA,SACE8B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;cAAAA,SAEFhC,UAAAA;gBAAAA,SACE6B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;YAAAA;YAGbC,UAAAA;cAAAA,SAAuBL,OAAAA;YAAAA;YACvBM,OAAAA;YACAC,OAAAA;YACAC,WAAAA;UAAAA;QAAAA;QAAAA,SAGKG,QAAAA;UAAAA,SACEC,QAAAA;YAAAA,SACEf,IAAAA;YAAAA,SACAgB,MAAAA;UAAAA;QAAAA;MAAAA;IAAAA;IAAAA,SAKR5B,MAAAA;MAAAA,SACEjB,EAAAA;MAAAA,SACA6B,IAAAA;MAAAA,SACAC,OAAAA;QAAAA,SAAoBC,KAAAA;MAAAA;IAAAA;IAAAA,SAEtBtB,OAAAA;MAAAA,SACET,EAAAA;MAAAA,SACA6B,IAAAA;MAAAA,SACAC,OAAAA;QAAAA,SACEC,KAAAA;UAAAA,SACEb,OAAAA;YACPc,OAAAA;cAAAA,SACWhC,EAAAA;gBAAAA,SACEiC,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;cAAAA;cAAAA,SAEFxB,IAAAA;gBAAAA,SACEsB,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;cAAAA;cAAAA,SAEFhC,UAAAA;gBAAAA,SACE8B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;cAAAA,SAEFhC,UAAAA;gBAAAA,SACE6B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;YAAAA;YAGbC,UAAAA;cAAAA,SAAuBL,OAAAA;YAAAA;YACvBM,OAAAA;YACAC,OAAAA;YACAC,WAAAA;UAAAA;UAAAA,SAEOrB,OAAAA;YACPa,OAAAA;cAAAA,SACWhC,EAAAA;gBAAAA,SACEiC,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;cAAAA,SAEFvB,SAAAA;gBAAAA,SACEoB,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;cAAAA;cAAAA,SAEFxB,IAAAA;gBAAAA,SACEsB,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;cAAAA;cAAAA,SAEFhC,UAAAA;gBAAAA,SACE8B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;cAAAA,SAEFhC,UAAAA;gBAAAA,SACE6B,UAAAA;gBAAAA,SACAC,OAAAA;gBAAAA,SACAC,QAAAA;gBAAAA,SACAC,OAAAA;cAAAA;YAAAA;YAGbC,UAAAA;cAAAA,SAAuBL,OAAAA;YAAAA;YACvBM,OAAAA;YACAC,OAAAA;YACAC,WAAAA;UAAAA;QAAAA;MAAAA;IAAAA;EAAAA;EAAAA,SAMDM,KAAAA;IAAAA,SACEC,IAAAA;MAAAA,SACElB,IAAAA;MAAAA,SACAK,OAAAA;MAAAA,SACAD,UAAAA;MAAAA,SACAQ,UAAAA,EAAY,MAAA;IAAA;IAAA,SAEdQ,WAAAA;MAAAA,SACEpB,IAAAA;MAAAA,SACAK,OAAAA;MAAAA,SACAD,UAAAA;MAAAA,SACAQ,UAAAA,EAAY,MAAA;IAAA;EAAA;EAAA,SAGhBS,WAAAA,EAAa,WAAA;AAAA;EAAA,SAIfE,MAAAA;EAAAA,SACAC,YAAAA;EAAAA,SACAC,KAAAA;IAAAA,SACEtC,KAAAA;MAAAA,SAAkBuC,SAAAA,WAAoB,WAAA;MAAA,SAAsBE,KAAAA;IAAAA;IAAAA,SAC5D3C,UAAAA;MAAAA,SACEyC,SAAAA,WAAoB,WAAA;MAAA,SACpBE,KAAAA;IAAAA;IAAAA,SAEF1C,QAAAA;MAAAA,SAAqBwC,SAAAA,WAAoB,WAAA;MAAA,SAAsBE,KAAAA;IAAAA;IAAAA,SAC/DvC,OAAAA;MAAAA,SACEqC,SAAAA,cAAuB,WAAA;MAAA,SACvBE,KAAAA;IAAAA;IAAAA,SAEFtC,OAAAA;MAAAA,SACEoC,SAAAA,cAAuB,WAAA;MAAA,SACvBE,KAAAA;IAAAA;EAAAA;EAAAA,SAGJC,MAAAA;IAAAA,SACE9B,UAAAA;MAAAA,SACE9B,IAAAA;QAAAA,SACE6D,MAAAA;UAAAA,SACE5D,YAAAA;YAAAA,SACE6D,MAAAA;cAAAA,SACE5D,EAAAA;gBAAAA,SACEmC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5CjC,OAAAA;gBAAAA,SACEkC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5ChC,QAAAA;gBAAAA,SACEiC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5C/B,UAAAA;gBAAAA,SACEgC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5C9B,UAAAA;gBAAAA,SACE+B,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;YAAAA;YAAAA,SAG9C4B,SAAAA,EAAW,MAAA;YAAA,SACXrD,OAAAA;cAAAA,SACEsB,KAAAA;cAAAA,SACAgC,WAAAA;cAAAA,SACAH,MAAAA;gBAAAA,SACE5D,EAAAA;kBAAAA,SAAegE,MAAAA;gBAAAA;gBAAAA,SACf/D,OAAAA;kBAAAA,SAAoB+D,MAAAA;gBAAAA;gBAAAA,SACpB9D,QAAAA;kBAAAA,SAAqB8D,MAAAA;gBAAAA;gBAAAA,SACrB7D,UAAAA;kBAAAA,SAAuB6D,MAAAA;gBAAAA;gBAAAA,SACvB5D,UAAAA;kBAAAA,SAAuB4D,MAAAA;gBAAAA;cAAAA;YAAAA;UAAAA;UAAAA,SAI7B3D,WAAAA;YAAAA,SACEuD,MAAAA;cAAAA,SACE5D,EAAAA;gBAAAA,SACEmC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5CjC,OAAAA;gBAAAA,SACEkC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5C5B,GAAAA;gBAAAA,SACE6B,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SACEhC,IAAAA;kBAAAA,SACAK,OAAAA;kBAAAA,SACAO,UAAAA;oBAAAA,SAAuBC,QAAAA;kBAAAA;gBAAAA;cAAAA;cAAAA,SAG3BvC,UAAAA;gBAAAA,SACEgC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;YAAAA;YAAAA,SAG9C4B,SAAAA,EAAW,MAAA;YAAA,SACXrD,OAAAA;cAAAA,SACEsB,KAAAA;cAAAA,SACAgC,WAAAA;cAAAA,SACAH,MAAAA;gBAAAA,SACE5D,EAAAA;kBAAAA,SAAegE,MAAAA;gBAAAA;gBAAAA,SACf/D,OAAAA;kBAAAA,SAAoB+D,MAAAA;gBAAAA;gBAAAA,SACpB1D,GAAAA;kBAAAA,SAAgB0D,MAAAA;gBAAAA;gBAAAA,SAChB7D,UAAAA;kBAAAA,SAAuB6D,MAAAA;gBAAAA;cAAAA;YAAAA;UAAAA;UAAAA,SAI7BzD,QAAAA;YAAAA,SACEqD,MAAAA;cAAAA,SACE5D,EAAAA;gBAAAA,SACEmC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5C1B,KAAAA;gBAAAA,SACE2B,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5C/B,UAAAA;gBAAAA,SACEgC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5C9B,UAAAA;gBAAAA,SACE+B,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;YAAAA;YAAAA,SAG9C4B,SAAAA,EAAW,MAAA;YAAA,SACXrD,OAAAA;cAAAA,SACEsB,KAAAA;cAAAA,SACAgC,WAAAA;cAAAA,SACAH,MAAAA;gBAAAA,SACE5D,EAAAA;kBAAAA,SAAegE,MAAAA;gBAAAA;gBAAAA,SACfxD,KAAAA;kBAAAA,SAAkBwD,MAAAA;gBAAAA;gBAAAA,SAClB7D,UAAAA;kBAAAA,SAAuB6D,MAAAA;gBAAAA;gBAAAA,SACvB5D,UAAAA;kBAAAA,SAAuB4D,MAAAA;gBAAAA;cAAAA;YAAAA;UAAAA;QAAAA;MAAAA;MAAAA,SAMjCvD,OAAAA;QAAAA,SACEkD,MAAAA;UAAAA,SACEjD,aAAAA;YAAAA,SACEkD,MAAAA;cAAAA,SACE5D,EAAAA;gBAAAA,SACEmC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5CvB,IAAAA;gBAAAA,SACEwB,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5C/B,UAAAA;gBAAAA,SACEgC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5C9B,UAAAA;gBAAAA,SACE+B,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;YAAAA;YAAAA,SAG9C4B,SAAAA,EAAW,MAAA;YAAA,SACXrD,OAAAA;cAAAA,SACEsB,KAAAA;cAAAA,SACAgC,WAAAA;cAAAA,SACAH,MAAAA;gBAAAA,SACE5D,EAAAA;kBAAAA,SAAegE,MAAAA;gBAAAA;gBAAAA,SACfrD,IAAAA;kBAAAA,SAAiBqD,MAAAA;gBAAAA;gBAAAA,SACjB7D,UAAAA;kBAAAA,SAAuB6D,MAAAA;gBAAAA;gBAAAA,SACvB5D,UAAAA;kBAAAA,SAAuB4D,MAAAA;gBAAAA;cAAAA;YAAAA;UAAAA;UAAAA,SAI7BpD,aAAAA;YAAAA,SACEgD,MAAAA;cAAAA,SACE5D,EAAAA;gBAAAA,SACEmC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5CrB,SAAAA;gBAAAA,SACEsB,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5CvB,IAAAA;gBAAAA,SACEwB,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5C/B,UAAAA;gBAAAA,SACEgC,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;cAAAA,SAE5C9B,UAAAA;gBAAAA,SACE+B,QAAAA;gBAAAA,SACA0B,IAAAA;kBAAAA,SAAiBhC,IAAAA;kBAAAA,SAAyBK,OAAAA;gBAAAA;cAAAA;YAAAA;YAAAA,SAG9C4B,SAAAA,EAAW,MAAA;YAAA,SACXrD,OAAAA;cAAAA,SACEsB,KAAAA;cAAAA,SACAgC,WAAAA;cAAAA,SACAH,MAAAA;gBAAAA,SACE5D,EAAAA;kBAAAA,SAAegE,MAAAA;gBAAAA;gBAAAA,SACfnD,SAAAA;kBAAAA,SAAsBmD,MAAAA;gBAAAA;gBAAAA,SACtBrD,IAAAA;kBAAAA,SAAiBqD,MAAAA;gBAAAA;gBAAAA,SACjB7D,UAAAA;kBAAAA,SAAuB6D,MAAAA;gBAAAA;gBAAAA,SACvB5D,UAAAA;kBAAAA,SAAuB4D,MAAAA;gBAAAA;cAAAA;YAAAA;UAAAA;QAAAA;MAAAA;IAAAA;EAAAA;EAAAA,SAQrCC,YAAAA;IAAAA,SACEC,QAAAA;MAAAA,SACEC,UAAAA;MAAAA,SACAC,OAAAA;MAAAA,SACAC,OAAAA;MAAAA,SACAC,KAAAA;MAAAA,SACAC,OAAAA;MAAAA,SACAC,SAAAA;IAAAA;IAAAA,SAEFC,GAAAA;MAAAA,SACEC,eAAAA;MAAAA,SACAC,KAAAA;MAAAA,SACAN,OAAAA;MAAAA,SACAG,SAAAA;MAAAA,SACAI,UAAAA;IAAAA;EAAAA;EAAAA,SAGJC,cAAAA;EAAAA,SACAC,IAAAA;EAAAA,SAEAC,WAAAA,EAAa,WAAA;AAAA;AAAA,KAGZ,UAAA,GAAW,oBAAA,CAAqB,YAAA,EAAc,UAAA;;;;;;;;;KC5nB9C,yBAAA,GAA4B,UAAQ;;;KCoCpC,gBAAA;AAAA,KAEP,SAAA,mBAA4B,QAAA,CAAS,UAAA,KAAe,UAAA,QAAkB,GAAA,CAAI,SAAA;AAAA,cAElE,mBAAA,SAA4B,KAAK;EAAA,SAC1B,IAAA;cACN,OAAA;AAAA;AAAA,cAKD,eAAA,SAAwB,KAAK;EAAA,SACtB,IAAA;EAAA,SACT,MAAA;cACG,MAAA;AAAA;AAAA,UAUG,WAAA,mBAA8B,QAAA,CAAS,UAAA;EAAA,SAC7C,GAAA,EAAK,EAAA,CAAG,SAAA;EAAA,SACR,GAAA,EAAK,SAAA,CAAU,SAAA;EAAA,SACf,GAAA,EAAK,SAAA;EACd,OAAA,MACE,IAAA,GAAO,gBAAA,CAAiB,GAAA,IAAO,YAAA,CAAa,GAAA;IAAA,SAAmB,IAAA,GAAO,GAAA;EAAA,GACtE,OAAA,GAAU,qBAAA,GACT,mBAAA,CAAoB,GAAA;EACvB,WAAA,IAAe,EAAA,GAAK,EAAA,EAAI,kBAAA,KAAuB,WAAA,CAAY,CAAA,IAAK,OAAA,CAAQ,CAAA;AAAA;AFvC1E;;;;AAAgC;AAEhC;;;;AAA8D;AAF9D,UEoDiB,kBAAA;EAAA,SACN,GAAA,EAAK,EAAA,CAAG,yBAAA;EAAA,SACR,GAAA,EAAK,SAAA,CAAU,yBAAA;EAAA,SACf,WAAA,EAAa,qBAAA,CAAsB,yBAAA;EAC5C,OAAA,MACE,IAAA,GAAO,gBAAA,CAAiB,GAAA,IAAO,YAAA,CAAa,GAAA;IAAA,SAAmB,IAAA,GAAO,GAAA;EAAA,GACtE,OAAA,GAAU,qBAAA,GACT,mBAAA,CAAoB,GAAA;AAAA;;;;;;KAQb,aAAA,mBAAgC,QAAA,CAAS,UAAA,KAAe,WAAA,CAAY,SAAA;EAAA,SACrE,QAAA,EAAU,kBAAA;AAAA;AAAA,UAGJ,UAAA,mBAA6B,QAAA,CAAS,UAAA;EAAA,SAC5C,OAAA,EAAS,gBAAA,CAAiB,SAAA;EAAA,SAC1B,KAAA,EAAO,2BAAA,CAA4B,gBAAA;EAC5C,MAAA,CAAO,GAAA,WAAc,OAAA,CAAQ,WAAA,CAAY,SAAA;EACzC,MAAA,IAAU,WAAA,CAAY,SAAA;EACtB,aAAA,IAAiB,aAAA,CAAc,SAAA;EAC/B,KAAA,IAAS,OAAA;EAAA,CACR,MAAA,CAAO,YAAA,KAAiB,OAAA;AAAA;AAAA,UAGV,mBAAA;EAAA,SACN,UAAA,YAAsB,6BAAA,CAA8B,gBAAA;EAAA,SACpD,UAAA,YAAsB,aAAA;EAAA,SACtB,YAAA,GAAe,kBAAA;EAAA,SACf,WAAA;IAAA,SACE,uBAAA;IAAA,SACA,iBAAA;EAAA;AAAA;AAAA,UAII,sBAAA;EAAA,SACN,GAAA;EAAA,SACA,EAAA,GAAK,IAAA,GAAO,MAAM;AAAA;AAAA,KAGxB,eAAA;EAAA,SACM,SAAA;EAAA,SACA,OAAO;AAAA;AAAA,KAGb,aAAA;EAAA,SACM,OAAA;EAAA,SACA,SAAS;AAAA;AAAA,KAGR,2BAAA,mBAA8C,QAAA,CAAS,UAAA,KACjE,sBAAA,GACE,mBAAA,IACC,eAAA,GAAkB,aAAA;EAAA,SACR,QAAA,EAAU,SAAA;EAAA,SACV,YAAA;AAAA;AAAA,KAGH,+BAAA,mBAAkD,QAAA,CAAS,UAAA,KACrE,sBAAA,GACE,mBAAA,IACC,eAAA,GAAkB,aAAA;EAAA,SACR,YAAA;EAAA,SACA,QAAA;EAAA,SACA,SAAA,GAAY,SAAA;AAAA;AAAA,KAGf,eAAA,mBAAkC,QAAA,CAAS,UAAA,KACnD,2BAAA,CAA4B,SAAA,IAC5B,+BAAA,CAAgC,SAAA;AAAA,iBAwFN,QAAA,mBAA2B,QAAA,CAAS,UAAA,GAChE,OAAA,EAAS,2BAAA,CAA4B,SAAA,IACpC,OAAA,CAAQ,UAAA,CAAW,SAAA;AAAA,iBACQ,QAAA,mBAA2B,QAAA,CAAS,UAAA,GAChE,OAAA,EAAS,+BAAA,CAAgC,SAAA,IACxC,OAAA,CAAQ,UAAA,CAAW,SAAA;;;UCjPL,eAAA,SAAwB,eAAe;AAAA,UAEvC,mBAAA;EAAA,SAEN,IAAA;EAAA,SACA,MAAA,GAAS,MAAM;AAAA;;AJP1B;;;UIciB,WAAA,SAAoB,iBAAiB;AAAA,cAEzC,mBAAA,mBACO,QAAA,CAAS,UAAA,IAAc,QAAA,CAAS,UAAA,WAC1C,mBAAA,CAAoB,SAAA;;;AHC9B;;;EGKQ,eAAA,CAAgB,OAAA,EAAS,mBAAA,GAAsB,OAAA,CAAQ,WAAA;EHJ9C;AAEjB;;;EG6GE,eAAA,MACE,IAAA,EAAM,gBAAA,CAAiB,GAAA,IAAO,YAAA,CAAa,GAAA,GAC3C,OAAA,EAAS,mBAAA,EACT,OAAA,GAAU,qBAAA,GACT,mBAAA,CAAoB,GAAA;AAAA"}
package/dist/runtime.mjs CHANGED
@@ -1,8 +1,9 @@
1
- import { t as version } from "./package-DsJwxFfN.mjs";
1
+ import { n as version, t as contract_default } from "./contract-BhiJRKdN.mjs";
2
2
  import { blindCast } from "@prisma-next/utils/casts";
3
3
  import postgresAdapter from "@prisma-next/adapter-postgres/runtime";
4
4
  import postgresDriver from "@prisma-next/driver-postgres/runtime";
5
5
  import { instantiateExecutionStack } from "@prisma-next/framework-components/execution";
6
+ import { PostgresRuntimeImpl, buildNamespacedNativeEnums } from "@prisma-next/postgres/runtime";
6
7
  import { sql } from "@prisma-next/sql-builder/runtime";
7
8
  import { orm } from "@prisma-next/sql-orm-client";
8
9
  import { createRawSql } from "@prisma-next/sql-relational-core/expression";
@@ -12,7 +13,6 @@ import { ifDefined } from "@prisma-next/utils/defined";
12
13
  import { createRemoteJWKSet, jwtVerify } from "jose";
13
14
  import { Pool } from "pg";
14
15
  import { AsyncIterableResult } from "@prisma-next/framework-components/runtime";
15
- import { PostgresRuntimeImpl } from "@prisma-next/postgres/runtime";
16
16
  //#region src/runtime/descriptor.ts
17
17
  /**
18
18
  * Tells the runtime that the Supabase pack's runtime component is available.
@@ -151,8 +151,8 @@ function hasContractJson(options) {
151
151
  }
152
152
  const contractSerializer = new PostgresContractSerializer();
153
153
  function resolveContract(options) {
154
- const contractInput = hasContractJson(options) ? options.contractJson : options.contract;
155
- return blindCast(contractSerializer.deserializeContract(contractInput));
154
+ const contractJson = hasContractJson(options) ? options.contractJson : contractSerializer.serializeContract(options.contract);
155
+ return blindCast(contractSerializer.deserializeContract(contractJson));
156
156
  }
157
157
  function resolveKeyMaterial(options) {
158
158
  const jwtSecret = "jwtSecret" in options ? options.jwtSecret : void 0;
@@ -187,6 +187,16 @@ function withSupabaseDescriptor(extensions) {
187
187
  const packs = extensions ?? [];
188
188
  return packs.some((pack) => pack.id === supabaseRuntimeDescriptor.id) ? packs : [...packs, supabaseRuntimeDescriptor];
189
189
  }
190
+ /**
191
+ * Deserializes the Supabase extension's own emitted contract into a runtime
192
+ * contract: namespaces hydrate into `PostgresSchema` instances (with
193
+ * `qualifyTable`), and `typeRef` columns (`Timestamptz`, `Uuid`) resolve
194
+ * through the codec registry. Exposed only via `service_role`'s `.supabase`
195
+ * secondary root — never merged into the app contract.
196
+ */
197
+ function buildExtensionContract() {
198
+ return blindCast(contractSerializer.deserializeContract(contract_default));
199
+ }
190
200
  async function supabase(options) {
191
201
  const keyMaterial = resolveKeyMaterial(options);
192
202
  const contract = resolveContract(options);
@@ -227,30 +237,69 @@ async function supabase(options) {
227
237
  throw new InvalidJwtError(err instanceof Error ? err.message : String(err));
228
238
  }
229
239
  }
230
- function buildRoleBoundDb(binding) {
240
+ function buildRoleBoundDbWithContext(binding, roleContext, roleRuntime) {
231
241
  return {
232
242
  sql: sql({
233
- context,
243
+ context: roleContext,
234
244
  rawCodecInferer
235
245
  }),
236
246
  orm: orm({
237
247
  runtime: {
238
248
  execute(plan) {
239
- return runtime.executeWithRole(plan, binding);
249
+ return roleRuntime.executeWithRole(plan, binding);
240
250
  },
241
- connection: () => runtime.openRoleSession(binding)
251
+ connection: () => roleRuntime.openRoleSession(binding)
242
252
  },
243
- context
253
+ context: roleContext
244
254
  }),
245
255
  raw: rawSqlTag,
246
256
  execute(plan, execOptions) {
247
- return runtime.executeWithRole(plan, binding, execOptions);
257
+ return roleRuntime.executeWithRole(plan, binding, execOptions);
248
258
  },
249
259
  transaction(fn) {
250
- return withTransaction({ connection: () => runtime.openRoleSession(binding) }, fn);
260
+ return withTransaction({ connection: () => roleRuntime.openRoleSession(binding) }, fn);
251
261
  }
252
262
  };
253
263
  }
264
+ function buildRoleBoundDb(binding) {
265
+ return buildRoleBoundDbWithContext(binding, context, runtime);
266
+ }
267
+ const serviceRoleBinding = {
268
+ role: "service_role",
269
+ claims: {}
270
+ };
271
+ const extContract = buildExtensionContract();
272
+ const extContext = createExecutionContext({
273
+ contract: extContract,
274
+ stack
275
+ });
276
+ const extRuntime = new SupabaseRuntimeImpl({
277
+ context: extContext,
278
+ adapter: stackInstance.adapter,
279
+ driver,
280
+ verifyMarker: false,
281
+ ...ifDefined("middleware", options.middleware)
282
+ });
283
+ const extNativeEnums = blindCast(Object.freeze(buildNamespacedNativeEnums(extContract.storage)));
284
+ const supabaseInternal = {
285
+ sql: sql({
286
+ context: extContext,
287
+ rawCodecInferer
288
+ }),
289
+ orm: orm({
290
+ runtime: {
291
+ execute(plan) {
292
+ return extRuntime.executeWithRole(plan, serviceRoleBinding);
293
+ },
294
+ connection: () => extRuntime.openRoleSession(serviceRoleBinding)
295
+ },
296
+ context: extContext
297
+ }),
298
+ nativeEnums: extNativeEnums,
299
+ execute(plan, execOptions) {
300
+ return extRuntime.executeWithRole(plan, serviceRoleBinding, execOptions);
301
+ }
302
+ };
254
303
  async function closeDb() {
255
304
  if (closed) return;
256
305
  closed = true;
@@ -276,10 +325,10 @@ async function supabase(options) {
276
325
  });
277
326
  },
278
327
  asServiceRole() {
279
- return buildRoleBoundDb({
280
- role: "service_role",
281
- claims: {}
282
- });
328
+ return {
329
+ ...buildRoleBoundDbWithContext(serviceRoleBinding, context, runtime),
330
+ supabase: supabaseInternal
331
+ };
283
332
  },
284
333
  close: closeDb,
285
334
  [Symbol.asyncDispose]: closeDb
package/dist/runtime.mjs.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"runtime.mjs","names":["packageJson.version"],"sources":["../src/runtime/descriptor.ts","../src/runtime/supabase-runtime.ts","../src/runtime/supabase.ts","../src/exports/runtime.ts"],"sourcesContent":["import type { SqlRuntimeExtensionDescriptor } from '@prisma-next/sql-runtime';\nimport packageJson from '../../package.json' with { type: 'json' };\n\n/**\n * Tells the runtime that the Supabase pack's runtime component is available.\n *\n * When a contract declares the Supabase pack, the runtime checks that a\n * matching descriptor has been registered. Without this, loading a Supabase\n * contract errors with \"pack runtime component missing\". The `supabase()`\n * factory registers this descriptor automatically — app code never needs to\n * reference it directly.\n */\nexport const supabaseRuntimeDescriptor: SqlRuntimeExtensionDescriptor<'postgres'> = {\n kind: 'extension' as const,\n id: 'supabase',\n version: packageJson.version,\n familyId: 'sql' as const,\n targetId: 'postgres' as const,\n codecs: () => [],\n create() {\n return {\n familyId: 'sql' as const,\n targetId: 'postgres' as const,\n };\n },\n};\n","import type { Contract } from '@prisma-next/contract/types';\nimport type { RuntimeExecuteOptions } from '@prisma-next/framework-components/runtime';\nimport { AsyncIterableResult } from '@prisma-next/framework-components/runtime';\nimport { type PostgresRuntime, PostgresRuntimeImpl } from '@prisma-next/postgres/runtime';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport type { SqlExecutionPlan, SqlQueryPlan } from '@prisma-next/sql-relational-core/plan';\nimport type {\n PreparedStatement,\n PreparedStatementImpl,\n RuntimeConnection,\n RuntimeTransaction,\n} from '@prisma-next/sql-runtime';\nimport { blindCast } from '@prisma-next/utils/casts';\n\nexport interface SupabaseRuntime extends PostgresRuntime {}\n\nexport interface SupabaseRoleBinding {\n // TODO(TML-2501): role names move to the Supabase extension contract (roles as first-class IR) when postgres-rls lands.\n readonly role: 'anon' | 'authenticated' | 'service_role';\n readonly claims?: Record<string, unknown>;\n}\n\n/**\n * A connection with a Supabase role already bound via session-scoped set_config.\n * Implements `RuntimeConnection` so it plugs into ORM scope machinery and `withTransaction`.\n */\nexport interface RoleSession extends RuntimeConnection {}\n\nexport class SupabaseRuntimeImpl<\n TContract extends Contract<SqlStorage> = Contract<SqlStorage>,\n> extends PostgresRuntimeImpl<TContract> {\n /**\n * Opens a raw connection and applies role + JWT claims via session-scoped set_config.\n * On bind failure, destroys the connection before rethrowing — no leaked connections.\n * Not on the `SupabaseRuntime` interface; consumed by the facade, not by app code.\n */\n async openRoleSession(binding: SupabaseRoleBinding): Promise<RoleSession> {\n const conn = await this.acquireRawConnection();\n\n try {\n await conn.query('SELECT set_config($1, $2, false)', ['role', binding.role]);\n await conn.query('SELECT set_config($1, $2, false)', [\n 'request.jwt.claims',\n JSON.stringify(binding.claims ?? {}),\n ]);\n } catch (err) {\n await conn.destroy(err).catch(() => undefined);\n throw err;\n }\n\n const self = this;\n\n const session: RoleSession = {\n execute<Row>(\n plan: (SqlExecutionPlan<unknown> | SqlQueryPlan<unknown>) & { readonly _row?: Row },\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return self.executeAgainstQueryable<Row>(plan, conn, { ...options, scope: 'connection' });\n },\n\n executePrepared<Params, Row>(\n ps: PreparedStatement<Params, Row>,\n params: Params,\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return self.executePreparedAgainstQueryable(\n blindCast<\n PreparedStatementImpl<Params, Row>,\n 'PreparedStatement is PreparedStatementImpl; the impl class is the only concrete form'\n >(ps),\n blindCast<\n Record<string, unknown>,\n 'params are structurally Record<string, unknown> at runtime'\n >(params),\n conn,\n { ...options, scope: 'connection' },\n );\n },\n\n async transaction(): Promise<RuntimeTransaction> {\n const tx = await conn.beginTransaction();\n return {\n async commit(): Promise<void> {\n await tx.commit();\n },\n async rollback(): Promise<void> {\n await tx.rollback();\n },\n execute<Row>(\n plan: (SqlExecutionPlan<unknown> | SqlQueryPlan<unknown>) & { readonly _row?: Row },\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return self.executeAgainstQueryable<Row>(plan, tx, {\n ...options,\n scope: 'transaction',\n });\n },\n executePrepared<Params, Row>(\n ps: PreparedStatement<Params, Row>,\n params: Params,\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return self.executePreparedAgainstQueryable(\n blindCast<\n PreparedStatementImpl<Params, Row>,\n 'PreparedStatement is PreparedStatementImpl; the impl class is the only concrete form'\n >(ps),\n blindCast<\n Record<string, unknown>,\n 'params are structurally Record<string, unknown> at runtime'\n >(params),\n tx,\n { ...options, scope: 'transaction' },\n );\n },\n };\n },\n\n /**\n * Resets all session-local config then releases the connection back to the pool.\n * If RESET ALL fails, destroys the connection instead — pool-poisoning guarantee.\n */\n async release(): Promise<void> {\n try {\n await conn.query('RESET ALL');\n await conn.release();\n } catch (resetError) {\n await conn.destroy(resetError).catch(() => undefined);\n }\n },\n\n async destroy(reason?: unknown): Promise<void> {\n await conn.destroy(reason);\n },\n };\n\n return session;\n }\n\n /**\n * Opens a role session, executes the plan, then releases after the stream drains.\n * On mid-stream error, destroys the session instead of releasing.\n */\n executeWithRole<Row>(\n plan: SqlExecutionPlan<Row> | SqlQueryPlan<Row>,\n binding: SupabaseRoleBinding,\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n const self = this;\n\n const generator = async function* (): AsyncGenerator<Row, void, unknown> {\n const session = await self.openRoleSession(binding);\n let errored = false;\n try {\n for await (const row of session.execute(plan, options)) {\n yield row;\n }\n } catch (err) {\n errored = true;\n await session.destroy(err).catch(() => undefined);\n throw err;\n } finally {\n if (!errored) {\n await session.release();\n }\n }\n };\n\n return new AsyncIterableResult(generator());\n }\n}\n","import postgresAdapter from '@prisma-next/adapter-postgres/runtime';\nimport type { Contract } from '@prisma-next/contract/types';\nimport postgresDriver from '@prisma-next/driver-postgres/runtime';\nimport { instantiateExecutionStack } from '@prisma-next/framework-components/execution';\nimport type {\n AsyncIterableResult,\n RuntimeExecuteOptions,\n} from '@prisma-next/framework-components/runtime';\nimport { sql } from '@prisma-next/sql-builder/runtime';\nimport type { Db } from '@prisma-next/sql-builder/types';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport { orm } from '@prisma-next/sql-orm-client';\nimport type { RawSqlTag } from '@prisma-next/sql-relational-core/expression';\nimport { createRawSql } from '@prisma-next/sql-relational-core/expression';\nimport type { SqlExecutionPlan, SqlQueryPlan } from '@prisma-next/sql-relational-core/plan';\nimport type {\n ExecutionContext,\n SqlExecutionStackWithDriver,\n SqlMiddleware,\n SqlRuntimeExtensionDescriptor,\n TransactionContext,\n VerifyMarkerOption,\n} from '@prisma-next/sql-runtime';\nimport {\n createExecutionContext,\n createSqlExecutionStack,\n withTransaction,\n} from '@prisma-next/sql-runtime';\nimport postgresTarget, { PostgresContractSerializer } from '@prisma-next/target-postgres/runtime';\nimport { blindCast } from '@prisma-next/utils/casts';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport { createRemoteJWKSet, type JWTVerifyResult, jwtVerify } from 'jose';\nimport type { Client } from 'pg';\nimport { Pool } from 'pg';\nimport { supabaseRuntimeDescriptor } from './descriptor';\nimport type { SupabaseRoleBinding, SupabaseRuntime } from './supabase-runtime';\nimport { SupabaseRuntimeImpl } from './supabase-runtime';\n\nexport type SupabaseTargetId = 'postgres';\n\ntype OrmClient<TContract extends Contract<SqlStorage>> = ReturnType<typeof orm<TContract>>;\n\nexport class SupabaseConfigError extends Error {\n override readonly name = 'SupabaseConfigError';\n constructor(message: string) {\n super(message);\n }\n}\n\nexport class InvalidJwtError extends Error {\n override readonly name = 'InvalidJwtError';\n readonly reason: string;\n constructor(reason: string) {\n super(`Invalid JWT: ${reason}`);\n this.reason = reason;\n }\n}\n\ntype KeyMaterial =\n | { readonly kind: 'secret'; readonly key: Uint8Array }\n | { readonly kind: 'jwks'; readonly keyset: ReturnType<typeof createRemoteJWKSet> };\n\nexport interface RoleBoundDb<TContract extends Contract<SqlStorage>> {\n readonly sql: Db<TContract>;\n readonly orm: OrmClient<TContract>;\n readonly raw: RawSqlTag;\n execute<Row>(\n plan: (SqlExecutionPlan<Row> | SqlQueryPlan<Row>) & { readonly _row?: Row },\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row>;\n transaction<R>(fn: (tx: TransactionContext) => PromiseLike<R>): Promise<R>;\n}\n\nexport interface SupabaseDb<TContract extends Contract<SqlStorage>> {\n readonly context: ExecutionContext<TContract>;\n readonly stack: SqlExecutionStackWithDriver<SupabaseTargetId>;\n asUser(jwt: string): Promise<RoleBoundDb<TContract>>;\n asAnon(): RoleBoundDb<TContract>;\n asServiceRole(): RoleBoundDb<TContract>;\n close(): Promise<void>;\n [Symbol.asyncDispose](): Promise<void>;\n}\n\nexport interface SupabaseOptionsBase {\n readonly extensions?: readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[];\n readonly middleware?: readonly SqlMiddleware[];\n readonly verifyMarker?: VerifyMarkerOption;\n readonly poolOptions?: {\n readonly connectionTimeoutMillis?: number;\n readonly idleTimeoutMillis?: number;\n };\n}\n\nexport interface SupabaseBindingOptions {\n readonly url?: string;\n readonly pg?: Pool | Client;\n}\n\ntype JwtSecretOption = {\n readonly jwtSecret: string;\n readonly jwksUrl?: never;\n};\n\ntype JwksUrlOption = {\n readonly jwksUrl: string;\n readonly jwtSecret?: never;\n};\n\nexport type SupabaseOptionsWithContract<TContract extends Contract<SqlStorage>> =\n SupabaseBindingOptions &\n SupabaseOptionsBase &\n (JwtSecretOption | JwksUrlOption) & {\n readonly contract: TContract;\n readonly contractJson?: never;\n };\n\nexport type SupabaseOptionsWithContractJson<TContract extends Contract<SqlStorage>> =\n SupabaseBindingOptions &\n SupabaseOptionsBase &\n (JwtSecretOption | JwksUrlOption) & {\n readonly contractJson: unknown;\n readonly contract?: never;\n readonly _contract?: TContract;\n };\n\nexport type SupabaseOptions<TContract extends Contract<SqlStorage>> =\n | SupabaseOptionsWithContract<TContract>\n | SupabaseOptionsWithContractJson<TContract>;\n\nfunction hasContractJson<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptions<TContract>,\n): options is SupabaseOptionsWithContractJson<TContract> {\n return 'contractJson' in options;\n}\n\nconst contractSerializer = new PostgresContractSerializer();\n\nfunction resolveContract<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptions<TContract>,\n): TContract {\n const contractInput = hasContractJson(options) ? options.contractJson : options.contract;\n return blindCast<\n TContract,\n 'contractSerializer.deserializeContract returns a validated TContract'\n >(contractSerializer.deserializeContract(contractInput));\n}\n\nfunction resolveKeyMaterial<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptions<TContract>,\n): KeyMaterial {\n const jwtSecret = 'jwtSecret' in options ? options.jwtSecret : undefined;\n const jwksUrl = 'jwksUrl' in options ? options.jwksUrl : undefined;\n\n if (jwtSecret !== undefined && jwksUrl !== undefined) {\n throw new SupabaseConfigError('Provide either jwtSecret or jwksUrl, not both');\n }\n if (jwtSecret === undefined && jwksUrl === undefined) {\n throw new SupabaseConfigError('Either jwtSecret or jwksUrl is required');\n }\n\n if (jwtSecret !== undefined) {\n return { kind: 'secret', key: new TextEncoder().encode(jwtSecret) };\n }\n\n if (jwksUrl !== undefined) {\n return { kind: 'jwks', keyset: createRemoteJWKSet(new URL(jwksUrl)) };\n }\n\n throw new SupabaseConfigError('Either jwtSecret or jwksUrl is required');\n}\n\nfunction toPool<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptions<TContract>,\n): { pool: Pool; owned: boolean } | undefined {\n if (options.pg instanceof Pool) {\n return { pool: options.pg, owned: false };\n }\n if (typeof options.url === 'string') {\n return {\n pool: new Pool({\n connectionString: options.url,\n connectionTimeoutMillis: options.poolOptions?.connectionTimeoutMillis ?? 20_000,\n idleTimeoutMillis: options.poolOptions?.idleTimeoutMillis ?? 30_000,\n }),\n owned: true,\n };\n }\n return undefined;\n}\n\nfunction withSupabaseDescriptor(\n extensions: readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[] | undefined,\n): readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[] {\n const packs = extensions ?? [];\n return packs.some((pack) => pack.id === supabaseRuntimeDescriptor.id)\n ? packs\n : [...packs, supabaseRuntimeDescriptor];\n}\n\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptionsWithContract<TContract>,\n): Promise<SupabaseDb<TContract>>;\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptionsWithContractJson<TContract>,\n): Promise<SupabaseDb<TContract>>;\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptions<TContract>,\n): Promise<SupabaseDb<TContract>> {\n const keyMaterial = resolveKeyMaterial(options);\n const contract = resolveContract(options);\n\n const stack = createSqlExecutionStack({\n target: postgresTarget,\n adapter: postgresAdapter,\n driver: postgresDriver,\n extensionPacks: withSupabaseDescriptor(options.extensions),\n });\n\n const context = createExecutionContext({ contract, stack });\n const rawCodecInferer = stack.adapter.rawCodecInferer;\n const rawSqlTag: RawSqlTag = createRawSql(rawCodecInferer);\n\n const poolEntry = toPool(options);\n let closed = false;\n\n const stackInstance = instantiateExecutionStack(stack);\n const driverDescriptor = stack.driver;\n if (!driverDescriptor) {\n throw new Error('Driver descriptor missing from execution stack');\n }\n const driver = driverDescriptor.create({ cursor: { disabled: true } });\n\n if (poolEntry) {\n await driver.connect({ kind: 'pgPool', pool: poolEntry.pool });\n }\n\n const runtime: SupabaseRuntime & SupabaseRuntimeImpl<TContract> = new SupabaseRuntimeImpl({\n context,\n adapter: stackInstance.adapter,\n driver,\n ...ifDefined('verifyMarker', options.verifyMarker),\n ...ifDefined('middleware', options.middleware),\n });\n\n async function verifyJwt(jwt: string): Promise<JWTVerifyResult> {\n try {\n if (keyMaterial.kind === 'secret') {\n return await jwtVerify(jwt, keyMaterial.key);\n }\n return await jwtVerify(jwt, keyMaterial.keyset);\n } catch (err) {\n const reason = err instanceof Error ? err.message : String(err);\n throw new InvalidJwtError(reason);\n }\n }\n\n function buildRoleBoundDb(binding: SupabaseRoleBinding): RoleBoundDb<TContract> {\n const roleSql: Db<TContract> = sql<TContract>({ context, rawCodecInferer });\n const roleOrm: OrmClient<TContract> = orm({\n runtime: {\n execute(plan) {\n return runtime.executeWithRole(plan, binding);\n },\n // connection() returns a role session; this is the enforcement path for ORM scope\n // operations (mutations, includes) — every statement runs role-bound.\n connection: () => runtime.openRoleSession(binding),\n },\n context,\n });\n\n return {\n sql: roleSql,\n orm: roleOrm,\n raw: rawSqlTag,\n execute<Row>(\n plan: (SqlExecutionPlan<Row> | SqlQueryPlan<Row>) & { readonly _row?: Row },\n execOptions?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return runtime.executeWithRole<Row>(plan, binding, execOptions);\n },\n transaction<R>(fn: (tx: TransactionContext) => PromiseLike<R>): Promise<R> {\n return withTransaction({ connection: () => runtime.openRoleSession(binding) }, fn);\n },\n };\n }\n\n async function closeDb(): Promise<void> {\n if (closed) return;\n closed = true;\n await runtime.close();\n if (poolEntry?.owned) {\n await poolEntry.pool.end().catch(() => undefined);\n }\n }\n\n return {\n context,\n stack,\n\n async asUser(jwt: string): Promise<RoleBoundDb<TContract>> {\n const { payload } = await verifyJwt(jwt);\n const rawRole = payload['role'];\n const roleStr = typeof rawRole === 'string' ? rawRole : 'authenticated';\n const role: SupabaseRoleBinding['role'] =\n roleStr === 'anon' || roleStr === 'authenticated' || roleStr === 'service_role'\n ? roleStr\n : 'authenticated';\n const binding: SupabaseRoleBinding = { role, claims: payload };\n return buildRoleBoundDb(binding);\n },\n\n asAnon(): RoleBoundDb<TContract> {\n return buildRoleBoundDb({ role: 'anon', claims: {} });\n },\n\n asServiceRole(): RoleBoundDb<TContract> {\n return buildRoleBoundDb({ role: 'service_role', claims: {} });\n },\n\n close: closeDb,\n [Symbol.asyncDispose]: closeDb,\n };\n}\n","import { supabaseRuntimeDescriptor } from '../runtime/descriptor';\n\nexport default supabaseRuntimeDescriptor;\n\nexport type {\n RoleBoundDb,\n SupabaseDb,\n SupabaseOptions,\n SupabaseOptionsWithContract,\n SupabaseOptionsWithContractJson,\n SupabaseTargetId,\n} from '../runtime/supabase';\nexport { default as supabase, InvalidJwtError, SupabaseConfigError } from '../runtime/supabase';\nexport type {\n RoleSession,\n SupabaseRoleBinding,\n SupabaseRuntime,\n} from '../runtime/supabase-runtime';\nexport { SupabaseRuntimeImpl } from '../runtime/supabase-runtime';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,4BAAuE;CAClF,MAAM;CACN,IAAI;CACKA;CACT,UAAU;CACV,UAAU;CACV,cAAc,CAAC;CACf,SAAS;EACP,OAAO;GACL,UAAU;GACV,UAAU;EACZ;CACF;AACF;;;ACGA,IAAa,sBAAb,cAEU,oBAA+B;;;;;;CAMvC,MAAM,gBAAgB,SAAoD;EACxE,MAAM,OAAO,MAAM,KAAK,qBAAqB;EAE7C,IAAI;GACF,MAAM,KAAK,MAAM,oCAAoC,CAAC,QAAQ,QAAQ,IAAI,CAAC;GAC3E,MAAM,KAAK,MAAM,oCAAoC,CACnD,sBACA,KAAK,UAAU,QAAQ,UAAU,CAAC,CAAC,CACrC,CAAC;EACH,SAAS,KAAK;GACZ,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,YAAY,KAAA,CAAS;GAC7C,MAAM;EACR;EAEA,MAAM,OAAO;EAsFb,OAAO;GAnFL,QACE,MACA,SAC0B;IAC1B,OAAO,KAAK,wBAA6B,MAAM,MAAM;KAAE,GAAG;KAAS,OAAO;IAAa,CAAC;GAC1F;GAEA,gBACE,IACA,QACA,SAC0B;IAC1B,OAAO,KAAK,gCACV,UAGE,EAAE,GACJ,UAGE,MAAM,GACR,MACA;KAAE,GAAG;KAAS,OAAO;IAAa,CACpC;GACF;GAEA,MAAM,cAA2C;IAC/C,MAAM,KAAK,MAAM,KAAK,iBAAiB;IACvC,OAAO;KACL,MAAM,SAAwB;MAC5B,MAAM,GAAG,OAAO;KAClB;KACA,MAAM,WAA0B;MAC9B,MAAM,GAAG,SAAS;KACpB;KACA,QACE,MACA,SAC0B;MAC1B,OAAO,KAAK,wBAA6B,MAAM,IAAI;OACjD,GAAG;OACH,OAAO;MACT,CAAC;KACH;KACA,gBACE,IACA,QACA,SAC0B;MAC1B,OAAO,KAAK,gCACV,UAGE,EAAE,GACJ,UAGE,MAAM,GACR,IACA;OAAE,GAAG;OAAS,OAAO;MAAc,CACrC;KACF;IACF;GACF;;;;;GAMA,MAAM,UAAyB;IAC7B,IAAI;KACF,MAAM,KAAK,MAAM,WAAW;KAC5B,MAAM,KAAK,QAAQ;IACrB,SAAS,YAAY;KACnB,MAAM,KAAK,QAAQ,UAAU,CAAC,CAAC,YAAY,KAAA,CAAS;IACtD;GACF;GAEA,MAAM,QAAQ,QAAiC;IAC7C,MAAM,KAAK,QAAQ,MAAM;GAC3B;EAGW;CACf;;;;;CAMA,gBACE,MACA,SACA,SAC0B;EAC1B,MAAM,OAAO;EAEb,MAAM,YAAY,mBAAuD;GACvE,MAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;GAClD,IAAI,UAAU;GACd,IAAI;IACF,WAAW,MAAM,OAAO,QAAQ,QAAQ,MAAM,OAAO,GACnD,MAAM;GAEV,SAAS,KAAK;IACZ,UAAU;IACV,MAAM,QAAQ,QAAQ,GAAG,CAAC,CAAC,YAAY,KAAA,CAAS;IAChD,MAAM;GACR,UAAU;IACR,IAAI,CAAC,SACH,MAAM,QAAQ,QAAQ;GAE1B;EACF;EAEA,OAAO,IAAI,oBAAoB,UAAU,CAAC;CAC5C;AACF;;;AChIA,IAAa,sBAAb,cAAyC,MAAM;CAC7C,OAAyB;CACzB,YAAY,SAAiB;EAC3B,MAAM,OAAO;CACf;AACF;AAEA,IAAa,kBAAb,cAAqC,MAAM;CACzC,OAAyB;CACzB;CACA,YAAY,QAAgB;EAC1B,MAAM,gBAAgB,QAAQ;EAC9B,KAAK,SAAS;CAChB;AACF;AAyEA,SAAS,gBACP,SACuD;CACvD,OAAO,kBAAkB;AAC3B;AAEA,MAAM,qBAAqB,IAAI,2BAA2B;AAE1D,SAAS,gBACP,SACW;CACX,MAAM,gBAAgB,gBAAgB,OAAO,IAAI,QAAQ,eAAe,QAAQ;CAChF,OAAO,UAGL,mBAAmB,oBAAoB,aAAa,CAAC;AACzD;AAEA,SAAS,mBACP,SACa;CACb,MAAM,YAAY,eAAe,UAAU,QAAQ,YAAY,KAAA;CAC/D,MAAM,UAAU,aAAa,UAAU,QAAQ,UAAU,KAAA;CAEzD,IAAI,cAAc,KAAA,KAAa,YAAY,KAAA,GACzC,MAAM,IAAI,oBAAoB,+CAA+C;CAE/E,IAAI,cAAc,KAAA,KAAa,YAAY,KAAA,GACzC,MAAM,IAAI,oBAAoB,yCAAyC;CAGzE,IAAI,cAAc,KAAA,GAChB,OAAO;EAAE,MAAM;EAAU,KAAK,IAAI,YAAY,CAAC,CAAC,OAAO,SAAS;CAAE;CAGpE,IAAI,YAAY,KAAA,GACd,OAAO;EAAE,MAAM;EAAQ,QAAQ,mBAAmB,IAAI,IAAI,OAAO,CAAC;CAAE;CAGtE,MAAM,IAAI,oBAAoB,yCAAyC;AACzE;AAEA,SAAS,OACP,SAC4C;CAC5C,IAAI,QAAQ,cAAc,MACxB,OAAO;EAAE,MAAM,QAAQ;EAAI,OAAO;CAAM;CAE1C,IAAI,OAAO,QAAQ,QAAQ,UACzB,OAAO;EACL,MAAM,IAAI,KAAK;GACb,kBAAkB,QAAQ;GAC1B,yBAAyB,QAAQ,aAAa,2BAA2B;GACzE,mBAAmB,QAAQ,aAAa,qBAAqB;EAC/D,CAAC;EACD,OAAO;CACT;AAGJ;AAEA,SAAS,uBACP,YAC4D;CAC5D,MAAM,QAAQ,cAAc,CAAC;CAC7B,OAAO,MAAM,MAAM,SAAS,KAAK,OAAO,0BAA0B,EAAE,IAChE,QACA,CAAC,GAAG,OAAO,yBAAyB;AAC1C;AAQA,eAA8B,SAC5B,SACgC;CAChC,MAAM,cAAc,mBAAmB,OAAO;CAC9C,MAAM,WAAW,gBAAgB,OAAO;CAExC,MAAM,QAAQ,wBAAwB;EACpC,QAAQ;EACR,SAAS;EACT,QAAQ;EACR,gBAAgB,uBAAuB,QAAQ,UAAU;CAC3D,CAAC;CAED,MAAM,UAAU,uBAAuB;EAAE;EAAU;CAAM,CAAC;CAC1D,MAAM,kBAAkB,MAAM,QAAQ;CACtC,MAAM,YAAuB,aAAa,eAAe;CAEzD,MAAM,YAAY,OAAO,OAAO;CAChC,IAAI,SAAS;CAEb,MAAM,gBAAgB,0BAA0B,KAAK;CACrD,MAAM,mBAAmB,MAAM;CAC/B,IAAI,CAAC,kBACH,MAAM,IAAI,MAAM,gDAAgD;CAElE,MAAM,SAAS,iBAAiB,OAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE,CAAC;CAErE,IAAI,WACF,MAAM,OAAO,QAAQ;EAAE,MAAM;EAAU,MAAM,UAAU;CAAK,CAAC;CAG/D,MAAM,UAA4D,IAAI,oBAAoB;EACxF;EACA,SAAS,cAAc;EACvB;EACA,GAAG,UAAU,gBAAgB,QAAQ,YAAY;EACjD,GAAG,UAAU,cAAc,QAAQ,UAAU;CAC/C,CAAC;CAED,eAAe,UAAU,KAAuC;EAC9D,IAAI;GACF,IAAI,YAAY,SAAS,UACvB,OAAO,MAAM,UAAU,KAAK,YAAY,GAAG;GAE7C,OAAO,MAAM,UAAU,KAAK,YAAY,MAAM;EAChD,SAAS,KAAK;GAEZ,MAAM,IAAI,gBADK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAC9B;EAClC;CACF;CAEA,SAAS,iBAAiB,SAAsD;EAc9E,OAAO;GACL,KAd6B,IAAe;IAAE;IAAS;GAAgB,CAc5D;GACX,KAdoC,IAAI;IACxC,SAAS;KACP,QAAQ,MAAM;MACZ,OAAO,QAAQ,gBAAgB,MAAM,OAAO;KAC9C;KAGA,kBAAkB,QAAQ,gBAAgB,OAAO;IACnD;IACA;GACF,CAIa;GACX,KAAK;GACL,QACE,MACA,aAC0B;IAC1B,OAAO,QAAQ,gBAAqB,MAAM,SAAS,WAAW;GAChE;GACA,YAAe,IAA4D;IACzE,OAAO,gBAAgB,EAAE,kBAAkB,QAAQ,gBAAgB,OAAO,EAAE,GAAG,EAAE;GACnF;EACF;CACF;CAEA,eAAe,UAAyB;EACtC,IAAI,QAAQ;EACZ,SAAS;EACT,MAAM,QAAQ,MAAM;EACpB,IAAI,WAAW,OACb,MAAM,UAAU,KAAK,IAAI,CAAC,CAAC,YAAY,KAAA,CAAS;CAEpD;CAEA,OAAO;EACL;EACA;EAEA,MAAM,OAAO,KAA8C;GACzD,MAAM,EAAE,YAAY,MAAM,UAAU,GAAG;GACvC,MAAM,UAAU,QAAQ;GACxB,MAAM,UAAU,OAAO,YAAY,WAAW,UAAU;GAMxD,OAAO,iBAAiB;IADe,MAHrC,YAAY,UAAU,YAAY,mBAAmB,YAAY,iBAC7D,UACA;IACuC,QAAQ;GACvB,CAAC;EACjC;EAEA,SAAiC;GAC/B,OAAO,iBAAiB;IAAE,MAAM;IAAQ,QAAQ,CAAC;GAAE,CAAC;EACtD;EAEA,gBAAwC;GACtC,OAAO,iBAAiB;IAAE,MAAM;IAAgB,QAAQ,CAAC;GAAE,CAAC;EAC9D;EAEA,OAAO;GACN,OAAO,eAAe;CACzB;AACF;;;AChUA,IAAA,kBAAe"}
1
+ {"version":3,"file":"runtime.mjs","names":["packageJson.version","extensionContractJson"],"sources":["../src/runtime/descriptor.ts","../src/runtime/supabase-runtime.ts","../src/runtime/supabase.ts","../src/exports/runtime.ts"],"sourcesContent":["import type { SqlRuntimeExtensionDescriptor } from '@prisma-next/sql-runtime';\nimport packageJson from '../../package.json' with { type: 'json' };\n\n/**\n * Tells the runtime that the Supabase pack's runtime component is available.\n *\n * When a contract declares the Supabase pack, the runtime checks that a\n * matching descriptor has been registered. Without this, loading a Supabase\n * contract errors with \"pack runtime component missing\". The `supabase()`\n * factory registers this descriptor automatically — app code never needs to\n * reference it directly.\n */\nexport const supabaseRuntimeDescriptor: SqlRuntimeExtensionDescriptor<'postgres'> = {\n kind: 'extension' as const,\n id: 'supabase',\n version: packageJson.version,\n familyId: 'sql' as const,\n targetId: 'postgres' as const,\n codecs: () => [],\n create() {\n return {\n familyId: 'sql' as const,\n targetId: 'postgres' as const,\n };\n },\n};\n","import type { Contract } from '@prisma-next/contract/types';\nimport type { RuntimeExecuteOptions } from '@prisma-next/framework-components/runtime';\nimport { AsyncIterableResult } from '@prisma-next/framework-components/runtime';\nimport { type PostgresRuntime, PostgresRuntimeImpl } from '@prisma-next/postgres/runtime';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport type { SqlExecutionPlan, SqlQueryPlan } from '@prisma-next/sql-relational-core/plan';\nimport type {\n PreparedStatement,\n PreparedStatementImpl,\n RuntimeConnection,\n RuntimeTransaction,\n} from '@prisma-next/sql-runtime';\nimport { blindCast } from '@prisma-next/utils/casts';\n\nexport interface SupabaseRuntime extends PostgresRuntime {}\n\nexport interface SupabaseRoleBinding {\n // TODO(TML-2501): role names move to the Supabase extension contract (roles as first-class IR) when postgres-rls lands.\n readonly role: 'anon' | 'authenticated' | 'service_role';\n readonly claims?: Record<string, unknown>;\n}\n\n/**\n * A connection with a Supabase role already bound via session-scoped set_config.\n * Implements `RuntimeConnection` so it plugs into ORM scope machinery and `withTransaction`.\n */\nexport interface RoleSession extends RuntimeConnection {}\n\nexport class SupabaseRuntimeImpl<\n TContract extends Contract<SqlStorage> = Contract<SqlStorage>,\n> extends PostgresRuntimeImpl<TContract> {\n /**\n * Opens a raw connection and applies role + JWT claims via session-scoped set_config.\n * On bind failure, destroys the connection before rethrowing — no leaked connections.\n * Not on the `SupabaseRuntime` interface; consumed by the facade, not by app code.\n */\n async openRoleSession(binding: SupabaseRoleBinding): Promise<RoleSession> {\n const conn = await this.acquireRawConnection();\n\n try {\n await conn.query('SELECT set_config($1, $2, false)', ['role', binding.role]);\n await conn.query('SELECT set_config($1, $2, false)', [\n 'request.jwt.claims',\n JSON.stringify(binding.claims ?? {}),\n ]);\n } catch (err) {\n await conn.destroy(err).catch(() => undefined);\n throw err;\n }\n\n const self = this;\n\n const session: RoleSession = {\n execute<Row>(\n plan: (SqlExecutionPlan<unknown> | SqlQueryPlan<unknown>) & { readonly _row?: Row },\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return self.executeAgainstQueryable<Row>(plan, conn, { ...options, scope: 'connection' });\n },\n\n executePrepared<Params, Row>(\n ps: PreparedStatement<Params, Row>,\n params: Params,\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return self.executePreparedAgainstQueryable(\n blindCast<\n PreparedStatementImpl<Params, Row>,\n 'PreparedStatement is PreparedStatementImpl; the impl class is the only concrete form'\n >(ps),\n blindCast<\n Record<string, unknown>,\n 'params are structurally Record<string, unknown> at runtime'\n >(params),\n conn,\n { ...options, scope: 'connection' },\n );\n },\n\n async transaction(): Promise<RuntimeTransaction> {\n const tx = await conn.beginTransaction();\n return {\n async commit(): Promise<void> {\n await tx.commit();\n },\n async rollback(): Promise<void> {\n await tx.rollback();\n },\n execute<Row>(\n plan: (SqlExecutionPlan<unknown> | SqlQueryPlan<unknown>) & { readonly _row?: Row },\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return self.executeAgainstQueryable<Row>(plan, tx, {\n ...options,\n scope: 'transaction',\n });\n },\n executePrepared<Params, Row>(\n ps: PreparedStatement<Params, Row>,\n params: Params,\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return self.executePreparedAgainstQueryable(\n blindCast<\n PreparedStatementImpl<Params, Row>,\n 'PreparedStatement is PreparedStatementImpl; the impl class is the only concrete form'\n >(ps),\n blindCast<\n Record<string, unknown>,\n 'params are structurally Record<string, unknown> at runtime'\n >(params),\n tx,\n { ...options, scope: 'transaction' },\n );\n },\n };\n },\n\n /**\n * Resets all session-local config then releases the connection back to the pool.\n * If RESET ALL fails, destroys the connection instead — pool-poisoning guarantee.\n */\n async release(): Promise<void> {\n try {\n await conn.query('RESET ALL');\n await conn.release();\n } catch (resetError) {\n await conn.destroy(resetError).catch(() => undefined);\n }\n },\n\n async destroy(reason?: unknown): Promise<void> {\n await conn.destroy(reason);\n },\n };\n\n return session;\n }\n\n /**\n * Opens a role session, executes the plan, then releases after the stream drains.\n * On mid-stream error, destroys the session instead of releasing.\n */\n executeWithRole<Row>(\n plan: SqlExecutionPlan<Row> | SqlQueryPlan<Row>,\n binding: SupabaseRoleBinding,\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n const self = this;\n\n const generator = async function* (): AsyncGenerator<Row, void, unknown> {\n const session = await self.openRoleSession(binding);\n let errored = false;\n try {\n for await (const row of session.execute(plan, options)) {\n yield row;\n }\n } catch (err) {\n errored = true;\n await session.destroy(err).catch(() => undefined);\n throw err;\n } finally {\n if (!errored) {\n await session.release();\n }\n }\n };\n\n return new AsyncIterableResult(generator());\n }\n}\n","import postgresAdapter from '@prisma-next/adapter-postgres/runtime';\nimport type { Contract } from '@prisma-next/contract/types';\nimport postgresDriver from '@prisma-next/driver-postgres/runtime';\nimport { instantiateExecutionStack } from '@prisma-next/framework-components/execution';\nimport type {\n AsyncIterableResult,\n RuntimeExecuteOptions,\n} from '@prisma-next/framework-components/runtime';\nimport {\n buildNamespacedNativeEnums,\n type NamespacedNativeEnums,\n} from '@prisma-next/postgres/runtime';\nimport { sql } from '@prisma-next/sql-builder/runtime';\nimport type { Db } from '@prisma-next/sql-builder/types';\nimport type { SqlStorage } from '@prisma-next/sql-contract/types';\nimport { orm } from '@prisma-next/sql-orm-client';\nimport type { RawSqlTag } from '@prisma-next/sql-relational-core/expression';\nimport { createRawSql } from '@prisma-next/sql-relational-core/expression';\nimport type { SqlExecutionPlan, SqlQueryPlan } from '@prisma-next/sql-relational-core/plan';\nimport type {\n ExecutionContext,\n SqlExecutionStackWithDriver,\n SqlMiddleware,\n SqlRuntimeExtensionDescriptor,\n TransactionContext,\n VerifyMarkerOption,\n} from '@prisma-next/sql-runtime';\nimport {\n createExecutionContext,\n createSqlExecutionStack,\n withTransaction,\n} from '@prisma-next/sql-runtime';\nimport postgresTarget, { PostgresContractSerializer } from '@prisma-next/target-postgres/runtime';\nimport { blindCast } from '@prisma-next/utils/casts';\nimport { ifDefined } from '@prisma-next/utils/defined';\nimport { createRemoteJWKSet, type JWTVerifyResult, jwtVerify } from 'jose';\nimport type { Client } from 'pg';\nimport { Pool } from 'pg';\nimport extensionContractJson from '../contract/contract.json' with { type: 'json' };\nimport { supabaseRuntimeDescriptor } from './descriptor';\nimport type { SupabaseExtensionContract } from './ext-contract-type';\nimport type { SupabaseRoleBinding, SupabaseRuntime } from './supabase-runtime';\nimport { SupabaseRuntimeImpl } from './supabase-runtime';\n\nexport type SupabaseTargetId = 'postgres';\n\ntype OrmClient<TContract extends Contract<SqlStorage>> = ReturnType<typeof orm<TContract>>;\n\nexport class SupabaseConfigError extends Error {\n override readonly name = 'SupabaseConfigError';\n constructor(message: string) {\n super(message);\n }\n}\n\nexport class InvalidJwtError extends Error {\n override readonly name = 'InvalidJwtError';\n readonly reason: string;\n constructor(reason: string) {\n super(`Invalid JWT: ${reason}`);\n this.reason = reason;\n }\n}\n\ntype KeyMaterial =\n | { readonly kind: 'secret'; readonly key: Uint8Array }\n | { readonly kind: 'jwks'; readonly keyset: ReturnType<typeof createRemoteJWKSet> };\n\nexport interface RoleBoundDb<TContract extends Contract<SqlStorage>> {\n readonly sql: Db<TContract>;\n readonly orm: OrmClient<TContract>;\n readonly raw: RawSqlTag;\n execute<Row>(\n plan: (SqlExecutionPlan<Row> | SqlQueryPlan<Row>) & { readonly _row?: Row },\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row>;\n transaction<R>(fn: (tx: TransactionContext) => PromiseLike<R>): Promise<R>;\n}\n\n/**\n * Query surface for the Supabase-internal contract (`auth`, `storage`). Exposed\n * as a separate secondary root — never merged into the app contract — and only\n * reachable through `service_role`, the one role with grants on those schemas\n * over a direct Postgres connection.\n *\n * Deliberately omits `transaction` (which {@link RoleBoundDb} has): the primary\n * app root and this secondary root are served by separate runtimes that do not\n * share one pinned connection, so a transaction spanning both is out of scope for v1.\n */\nexport interface SupabaseInternalDb {\n readonly sql: Db<SupabaseExtensionContract>;\n readonly orm: OrmClient<SupabaseExtensionContract>;\n readonly nativeEnums: NamespacedNativeEnums<SupabaseExtensionContract>;\n execute<Row>(\n plan: (SqlExecutionPlan<Row> | SqlQueryPlan<Row>) & { readonly _row?: Row },\n options?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row>;\n}\n\n/**\n * The `service_role` db: the app-contract role-bound surface (its `.sql` / `.orm`\n * are app-only, exactly like `asUser` / `asAnon`), plus a `.supabase` secondary\n * root for the Supabase-internal namespaces.\n */\nexport type ServiceRoleDb<TContract extends Contract<SqlStorage>> = RoleBoundDb<TContract> & {\n readonly supabase: SupabaseInternalDb;\n};\n\nexport interface SupabaseDb<TContract extends Contract<SqlStorage>> {\n readonly context: ExecutionContext<TContract>;\n readonly stack: SqlExecutionStackWithDriver<SupabaseTargetId>;\n asUser(jwt: string): Promise<RoleBoundDb<TContract>>;\n asAnon(): RoleBoundDb<TContract>;\n asServiceRole(): ServiceRoleDb<TContract>;\n close(): Promise<void>;\n [Symbol.asyncDispose](): Promise<void>;\n}\n\nexport interface SupabaseOptionsBase {\n readonly extensions?: readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[];\n readonly middleware?: readonly SqlMiddleware[];\n readonly verifyMarker?: VerifyMarkerOption;\n readonly poolOptions?: {\n readonly connectionTimeoutMillis?: number;\n readonly idleTimeoutMillis?: number;\n };\n}\n\nexport interface SupabaseBindingOptions {\n readonly url?: string;\n readonly pg?: Pool | Client;\n}\n\ntype JwtSecretOption = {\n readonly jwtSecret: string;\n readonly jwksUrl?: never;\n};\n\ntype JwksUrlOption = {\n readonly jwksUrl: string;\n readonly jwtSecret?: never;\n};\n\nexport type SupabaseOptionsWithContract<TContract extends Contract<SqlStorage>> =\n SupabaseBindingOptions &\n SupabaseOptionsBase &\n (JwtSecretOption | JwksUrlOption) & {\n readonly contract: TContract;\n readonly contractJson?: never;\n };\n\nexport type SupabaseOptionsWithContractJson<TContract extends Contract<SqlStorage>> =\n SupabaseBindingOptions &\n SupabaseOptionsBase &\n (JwtSecretOption | JwksUrlOption) & {\n readonly contractJson: unknown;\n readonly contract?: never;\n readonly _contract?: TContract;\n };\n\nexport type SupabaseOptions<TContract extends Contract<SqlStorage>> =\n | SupabaseOptionsWithContract<TContract>\n | SupabaseOptionsWithContractJson<TContract>;\n\nfunction hasContractJson<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptions<TContract>,\n): options is SupabaseOptionsWithContractJson<TContract> {\n return 'contractJson' in options;\n}\n\nconst contractSerializer = new PostgresContractSerializer();\n\nfunction resolveContract<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptions<TContract>,\n): TContract {\n const contractJson = hasContractJson(options)\n ? options.contractJson\n : contractSerializer.serializeContract(options.contract);\n return blindCast<\n TContract,\n 'contractSerializer.deserializeContract returns a validated TContract'\n >(contractSerializer.deserializeContract(contractJson));\n}\n\nfunction resolveKeyMaterial<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptions<TContract>,\n): KeyMaterial {\n const jwtSecret = 'jwtSecret' in options ? options.jwtSecret : undefined;\n const jwksUrl = 'jwksUrl' in options ? options.jwksUrl : undefined;\n\n if (jwtSecret !== undefined && jwksUrl !== undefined) {\n throw new SupabaseConfigError('Provide either jwtSecret or jwksUrl, not both');\n }\n if (jwtSecret === undefined && jwksUrl === undefined) {\n throw new SupabaseConfigError('Either jwtSecret or jwksUrl is required');\n }\n\n if (jwtSecret !== undefined) {\n return { kind: 'secret', key: new TextEncoder().encode(jwtSecret) };\n }\n\n if (jwksUrl !== undefined) {\n return { kind: 'jwks', keyset: createRemoteJWKSet(new URL(jwksUrl)) };\n }\n\n throw new SupabaseConfigError('Either jwtSecret or jwksUrl is required');\n}\n\nfunction toPool<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptions<TContract>,\n): { pool: Pool; owned: boolean } | undefined {\n if (options.pg instanceof Pool) {\n return { pool: options.pg, owned: false };\n }\n if (typeof options.url === 'string') {\n return {\n pool: new Pool({\n connectionString: options.url,\n connectionTimeoutMillis: options.poolOptions?.connectionTimeoutMillis ?? 20_000,\n idleTimeoutMillis: options.poolOptions?.idleTimeoutMillis ?? 30_000,\n }),\n owned: true,\n };\n }\n return undefined;\n}\n\nfunction withSupabaseDescriptor(\n extensions: readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[] | undefined,\n): readonly SqlRuntimeExtensionDescriptor<SupabaseTargetId>[] {\n const packs = extensions ?? [];\n return packs.some((pack) => pack.id === supabaseRuntimeDescriptor.id)\n ? packs\n : [...packs, supabaseRuntimeDescriptor];\n}\n\n/**\n * Deserializes the Supabase extension's own emitted contract into a runtime\n * contract: namespaces hydrate into `PostgresSchema` instances (with\n * `qualifyTable`), and `typeRef` columns (`Timestamptz`, `Uuid`) resolve\n * through the codec registry. Exposed only via `service_role`'s `.supabase`\n * secondary root — never merged into the app contract.\n */\nfunction buildExtensionContract(): SupabaseExtensionContract {\n return blindCast<\n SupabaseExtensionContract,\n 'deserializeContract hydrates JSON namespaces into PostgresSchema instances with qualifyTable'\n >(contractSerializer.deserializeContract(extensionContractJson));\n}\n\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptionsWithContract<TContract>,\n): Promise<SupabaseDb<TContract>>;\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptionsWithContractJson<TContract>,\n): Promise<SupabaseDb<TContract>>;\nexport default async function supabase<TContract extends Contract<SqlStorage>>(\n options: SupabaseOptions<TContract>,\n): Promise<SupabaseDb<TContract>> {\n const keyMaterial = resolveKeyMaterial(options);\n const contract = resolveContract(options);\n\n const stack = createSqlExecutionStack({\n target: postgresTarget,\n adapter: postgresAdapter,\n driver: postgresDriver,\n extensionPacks: withSupabaseDescriptor(options.extensions),\n });\n\n const context = createExecutionContext({ contract, stack });\n const rawCodecInferer = stack.adapter.rawCodecInferer;\n const rawSqlTag: RawSqlTag = createRawSql(rawCodecInferer);\n\n const poolEntry = toPool(options);\n let closed = false;\n\n const stackInstance = instantiateExecutionStack(stack);\n const driverDescriptor = stack.driver;\n if (!driverDescriptor) {\n throw new Error('Driver descriptor missing from execution stack');\n }\n const driver = driverDescriptor.create({ cursor: { disabled: true } });\n\n if (poolEntry) {\n await driver.connect({ kind: 'pgPool', pool: poolEntry.pool });\n }\n\n const runtime: SupabaseRuntime & SupabaseRuntimeImpl<TContract> = new SupabaseRuntimeImpl({\n context,\n adapter: stackInstance.adapter,\n driver,\n ...ifDefined('verifyMarker', options.verifyMarker),\n ...ifDefined('middleware', options.middleware),\n });\n\n async function verifyJwt(jwt: string): Promise<JWTVerifyResult> {\n try {\n if (keyMaterial.kind === 'secret') {\n return await jwtVerify(jwt, keyMaterial.key);\n }\n return await jwtVerify(jwt, keyMaterial.keyset);\n } catch (err) {\n const reason = err instanceof Error ? err.message : String(err);\n throw new InvalidJwtError(reason);\n }\n }\n\n function buildRoleBoundDbWithContext<C extends Contract<SqlStorage>>(\n binding: SupabaseRoleBinding,\n roleContext: ExecutionContext<C>,\n roleRuntime: SupabaseRuntime & SupabaseRuntimeImpl<C>,\n ): RoleBoundDb<C> {\n const roleSql: Db<C> = sql<C>({ context: roleContext, rawCodecInferer });\n const roleOrm: OrmClient<C> = orm({\n runtime: {\n execute(plan) {\n return roleRuntime.executeWithRole(plan, binding);\n },\n connection: () => roleRuntime.openRoleSession(binding),\n },\n context: roleContext,\n });\n\n return {\n sql: roleSql,\n orm: roleOrm,\n raw: rawSqlTag,\n execute<Row>(\n plan: (SqlExecutionPlan<Row> | SqlQueryPlan<Row>) & { readonly _row?: Row },\n execOptions?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return roleRuntime.executeWithRole<Row>(plan, binding, execOptions);\n },\n transaction<R>(fn: (tx: TransactionContext) => PromiseLike<R>): Promise<R> {\n return withTransaction({ connection: () => roleRuntime.openRoleSession(binding) }, fn);\n },\n };\n }\n\n function buildRoleBoundDb(binding: SupabaseRoleBinding): RoleBoundDb<TContract> {\n return buildRoleBoundDbWithContext(binding, context, runtime);\n }\n\n const serviceRoleBinding: SupabaseRoleBinding = { role: 'service_role', claims: {} };\n\n // The Supabase-internal contract (auth/storage) as a separate secondary root.\n // It is contract-bound: a plan built against it carries the extension's\n // storageHash, so it must run on a runtime bound to the extension contract —\n // the app runtime would reject it (PLAN.HASH_MISMATCH). This runtime shares\n // the same driver (one pool, no second connection) and disables marker\n // verification: the extension contract is external and owns no app-space\n // marker, so its hashes must not be checked against the DB marker.\n const extContract = buildExtensionContract();\n const extContext = createExecutionContext({ contract: extContract, stack });\n const extRuntime: SupabaseRuntime & SupabaseRuntimeImpl<SupabaseExtensionContract> =\n new SupabaseRuntimeImpl({\n context: extContext,\n adapter: stackInstance.adapter,\n driver,\n verifyMarker: false,\n ...ifDefined('middleware', options.middleware),\n });\n\n const extNativeEnums = blindCast<\n NamespacedNativeEnums<SupabaseExtensionContract>,\n 'buildNamespacedNativeEnums returns the namespace-keyed accessor map this contract types'\n >(Object.freeze(buildNamespacedNativeEnums(extContract.storage)));\n\n const supabaseInternal: SupabaseInternalDb = {\n sql: sql<SupabaseExtensionContract>({ context: extContext, rawCodecInferer }),\n orm: orm({\n runtime: {\n execute(plan) {\n return extRuntime.executeWithRole(plan, serviceRoleBinding);\n },\n connection: () => extRuntime.openRoleSession(serviceRoleBinding),\n },\n context: extContext,\n }),\n nativeEnums: extNativeEnums,\n execute<Row>(\n plan: (SqlExecutionPlan<Row> | SqlQueryPlan<Row>) & { readonly _row?: Row },\n execOptions?: RuntimeExecuteOptions,\n ): AsyncIterableResult<Row> {\n return extRuntime.executeWithRole<Row>(plan, serviceRoleBinding, execOptions);\n },\n };\n\n async function closeDb(): Promise<void> {\n if (closed) return;\n closed = true;\n await runtime.close();\n if (poolEntry?.owned) {\n await poolEntry.pool.end().catch(() => undefined);\n }\n }\n\n return {\n context,\n stack,\n\n async asUser(jwt: string): Promise<RoleBoundDb<TContract>> {\n const { payload } = await verifyJwt(jwt);\n const rawRole = payload['role'];\n const roleStr = typeof rawRole === 'string' ? rawRole : 'authenticated';\n const role: SupabaseRoleBinding['role'] =\n roleStr === 'anon' || roleStr === 'authenticated' || roleStr === 'service_role'\n ? roleStr\n : 'authenticated';\n const binding: SupabaseRoleBinding = { role, claims: payload };\n return buildRoleBoundDb(binding);\n },\n\n asAnon(): RoleBoundDb<TContract> {\n return buildRoleBoundDb({ role: 'anon', claims: {} });\n },\n\n asServiceRole(): ServiceRoleDb<TContract> {\n const roleBound = buildRoleBoundDbWithContext(serviceRoleBinding, context, runtime);\n return { ...roleBound, supabase: supabaseInternal };\n },\n\n close: closeDb,\n [Symbol.asyncDispose]: closeDb,\n };\n}\n","import { supabaseRuntimeDescriptor } from '../runtime/descriptor';\n\nexport default supabaseRuntimeDescriptor;\n\nexport type { SupabaseExtensionContract } from '../runtime/ext-contract-type';\nexport type {\n RoleBoundDb,\n ServiceRoleDb,\n SupabaseDb,\n SupabaseInternalDb,\n SupabaseOptions,\n SupabaseOptionsWithContract,\n SupabaseOptionsWithContractJson,\n SupabaseTargetId,\n} from '../runtime/supabase';\nexport { default as supabase, InvalidJwtError, SupabaseConfigError } from '../runtime/supabase';\nexport type {\n RoleSession,\n SupabaseRoleBinding,\n SupabaseRuntime,\n} from '../runtime/supabase-runtime';\nexport { SupabaseRuntimeImpl } from '../runtime/supabase-runtime';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,4BAAuE;CAClF,MAAM;CACN,IAAI;CACKA;CACT,UAAU;CACV,UAAU;CACV,cAAc,CAAC;CACf,SAAS;EACP,OAAO;GACL,UAAU;GACV,UAAU;EACZ;CACF;AACF;;;ACGA,IAAa,sBAAb,cAEU,oBAA+B;;;;;;CAMvC,MAAM,gBAAgB,SAAoD;EACxE,MAAM,OAAO,MAAM,KAAK,qBAAqB;EAE7C,IAAI;GACF,MAAM,KAAK,MAAM,oCAAoC,CAAC,QAAQ,QAAQ,IAAI,CAAC;GAC3E,MAAM,KAAK,MAAM,oCAAoC,CACnD,sBACA,KAAK,UAAU,QAAQ,UAAU,CAAC,CAAC,CACrC,CAAC;EACH,SAAS,KAAK;GACZ,MAAM,KAAK,QAAQ,GAAG,CAAC,CAAC,YAAY,KAAA,CAAS;GAC7C,MAAM;EACR;EAEA,MAAM,OAAO;EAsFb,OAAO;GAnFL,QACE,MACA,SAC0B;IAC1B,OAAO,KAAK,wBAA6B,MAAM,MAAM;KAAE,GAAG;KAAS,OAAO;IAAa,CAAC;GAC1F;GAEA,gBACE,IACA,QACA,SAC0B;IAC1B,OAAO,KAAK,gCACV,UAGE,EAAE,GACJ,UAGE,MAAM,GACR,MACA;KAAE,GAAG;KAAS,OAAO;IAAa,CACpC;GACF;GAEA,MAAM,cAA2C;IAC/C,MAAM,KAAK,MAAM,KAAK,iBAAiB;IACvC,OAAO;KACL,MAAM,SAAwB;MAC5B,MAAM,GAAG,OAAO;KAClB;KACA,MAAM,WAA0B;MAC9B,MAAM,GAAG,SAAS;KACpB;KACA,QACE,MACA,SAC0B;MAC1B,OAAO,KAAK,wBAA6B,MAAM,IAAI;OACjD,GAAG;OACH,OAAO;MACT,CAAC;KACH;KACA,gBACE,IACA,QACA,SAC0B;MAC1B,OAAO,KAAK,gCACV,UAGE,EAAE,GACJ,UAGE,MAAM,GACR,IACA;OAAE,GAAG;OAAS,OAAO;MAAc,CACrC;KACF;IACF;GACF;;;;;GAMA,MAAM,UAAyB;IAC7B,IAAI;KACF,MAAM,KAAK,MAAM,WAAW;KAC5B,MAAM,KAAK,QAAQ;IACrB,SAAS,YAAY;KACnB,MAAM,KAAK,QAAQ,UAAU,CAAC,CAAC,YAAY,KAAA,CAAS;IACtD;GACF;GAEA,MAAM,QAAQ,QAAiC;IAC7C,MAAM,KAAK,QAAQ,MAAM;GAC3B;EAGW;CACf;;;;;CAMA,gBACE,MACA,SACA,SAC0B;EAC1B,MAAM,OAAO;EAEb,MAAM,YAAY,mBAAuD;GACvE,MAAM,UAAU,MAAM,KAAK,gBAAgB,OAAO;GAClD,IAAI,UAAU;GACd,IAAI;IACF,WAAW,MAAM,OAAO,QAAQ,QAAQ,MAAM,OAAO,GACnD,MAAM;GAEV,SAAS,KAAK;IACZ,UAAU;IACV,MAAM,QAAQ,QAAQ,GAAG,CAAC,CAAC,YAAY,KAAA,CAAS;IAChD,MAAM;GACR,UAAU;IACR,IAAI,CAAC,SACH,MAAM,QAAQ,QAAQ;GAE1B;EACF;EAEA,OAAO,IAAI,oBAAoB,UAAU,CAAC;CAC5C;AACF;;;AC1HA,IAAa,sBAAb,cAAyC,MAAM;CAC7C,OAAyB;CACzB,YAAY,SAAiB;EAC3B,MAAM,OAAO;CACf;AACF;AAEA,IAAa,kBAAb,cAAqC,MAAM;CACzC,OAAyB;CACzB;CACA,YAAY,QAAgB;EAC1B,MAAM,gBAAgB,QAAQ;EAC9B,KAAK,SAAS;CAChB;AACF;AAsGA,SAAS,gBACP,SACuD;CACvD,OAAO,kBAAkB;AAC3B;AAEA,MAAM,qBAAqB,IAAI,2BAA2B;AAE1D,SAAS,gBACP,SACW;CACX,MAAM,eAAe,gBAAgB,OAAO,IACxC,QAAQ,eACR,mBAAmB,kBAAkB,QAAQ,QAAQ;CACzD,OAAO,UAGL,mBAAmB,oBAAoB,YAAY,CAAC;AACxD;AAEA,SAAS,mBACP,SACa;CACb,MAAM,YAAY,eAAe,UAAU,QAAQ,YAAY,KAAA;CAC/D,MAAM,UAAU,aAAa,UAAU,QAAQ,UAAU,KAAA;CAEzD,IAAI,cAAc,KAAA,KAAa,YAAY,KAAA,GACzC,MAAM,IAAI,oBAAoB,+CAA+C;CAE/E,IAAI,cAAc,KAAA,KAAa,YAAY,KAAA,GACzC,MAAM,IAAI,oBAAoB,yCAAyC;CAGzE,IAAI,cAAc,KAAA,GAChB,OAAO;EAAE,MAAM;EAAU,KAAK,IAAI,YAAY,CAAC,CAAC,OAAO,SAAS;CAAE;CAGpE,IAAI,YAAY,KAAA,GACd,OAAO;EAAE,MAAM;EAAQ,QAAQ,mBAAmB,IAAI,IAAI,OAAO,CAAC;CAAE;CAGtE,MAAM,IAAI,oBAAoB,yCAAyC;AACzE;AAEA,SAAS,OACP,SAC4C;CAC5C,IAAI,QAAQ,cAAc,MACxB,OAAO;EAAE,MAAM,QAAQ;EAAI,OAAO;CAAM;CAE1C,IAAI,OAAO,QAAQ,QAAQ,UACzB,OAAO;EACL,MAAM,IAAI,KAAK;GACb,kBAAkB,QAAQ;GAC1B,yBAAyB,QAAQ,aAAa,2BAA2B;GACzE,mBAAmB,QAAQ,aAAa,qBAAqB;EAC/D,CAAC;EACD,OAAO;CACT;AAGJ;AAEA,SAAS,uBACP,YAC4D;CAC5D,MAAM,QAAQ,cAAc,CAAC;CAC7B,OAAO,MAAM,MAAM,SAAS,KAAK,OAAO,0BAA0B,EAAE,IAChE,QACA,CAAC,GAAG,OAAO,yBAAyB;AAC1C;;;;;;;;AASA,SAAS,yBAAoD;CAC3D,OAAO,UAGL,mBAAmB,oBAAoBC,gBAAqB,CAAC;AACjE;AAQA,eAA8B,SAC5B,SACgC;CAChC,MAAM,cAAc,mBAAmB,OAAO;CAC9C,MAAM,WAAW,gBAAgB,OAAO;CAExC,MAAM,QAAQ,wBAAwB;EACpC,QAAQ;EACR,SAAS;EACT,QAAQ;EACR,gBAAgB,uBAAuB,QAAQ,UAAU;CAC3D,CAAC;CAED,MAAM,UAAU,uBAAuB;EAAE;EAAU;CAAM,CAAC;CAC1D,MAAM,kBAAkB,MAAM,QAAQ;CACtC,MAAM,YAAuB,aAAa,eAAe;CAEzD,MAAM,YAAY,OAAO,OAAO;CAChC,IAAI,SAAS;CAEb,MAAM,gBAAgB,0BAA0B,KAAK;CACrD,MAAM,mBAAmB,MAAM;CAC/B,IAAI,CAAC,kBACH,MAAM,IAAI,MAAM,gDAAgD;CAElE,MAAM,SAAS,iBAAiB,OAAO,EAAE,QAAQ,EAAE,UAAU,KAAK,EAAE,CAAC;CAErE,IAAI,WACF,MAAM,OAAO,QAAQ;EAAE,MAAM;EAAU,MAAM,UAAU;CAAK,CAAC;CAG/D,MAAM,UAA4D,IAAI,oBAAoB;EACxF;EACA,SAAS,cAAc;EACvB;EACA,GAAG,UAAU,gBAAgB,QAAQ,YAAY;EACjD,GAAG,UAAU,cAAc,QAAQ,UAAU;CAC/C,CAAC;CAED,eAAe,UAAU,KAAuC;EAC9D,IAAI;GACF,IAAI,YAAY,SAAS,UACvB,OAAO,MAAM,UAAU,KAAK,YAAY,GAAG;GAE7C,OAAO,MAAM,UAAU,KAAK,YAAY,MAAM;EAChD,SAAS,KAAK;GAEZ,MAAM,IAAI,gBADK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAC9B;EAClC;CACF;CAEA,SAAS,4BACP,SACA,aACA,aACgB;EAYhB,OAAO;GACL,KAZqB,IAAO;IAAE,SAAS;IAAa;GAAgB,CAYzD;GACX,KAZ4B,IAAI;IAChC,SAAS;KACP,QAAQ,MAAM;MACZ,OAAO,YAAY,gBAAgB,MAAM,OAAO;KAClD;KACA,kBAAkB,YAAY,gBAAgB,OAAO;IACvD;IACA,SAAS;GACX,CAIa;GACX,KAAK;GACL,QACE,MACA,aAC0B;IAC1B,OAAO,YAAY,gBAAqB,MAAM,SAAS,WAAW;GACpE;GACA,YAAe,IAA4D;IACzE,OAAO,gBAAgB,EAAE,kBAAkB,YAAY,gBAAgB,OAAO,EAAE,GAAG,EAAE;GACvF;EACF;CACF;CAEA,SAAS,iBAAiB,SAAsD;EAC9E,OAAO,4BAA4B,SAAS,SAAS,OAAO;CAC9D;CAEA,MAAM,qBAA0C;EAAE,MAAM;EAAgB,QAAQ,CAAC;CAAE;CASnF,MAAM,cAAc,uBAAuB;CAC3C,MAAM,aAAa,uBAAuB;EAAE,UAAU;EAAa;CAAM,CAAC;CAC1E,MAAM,aACJ,IAAI,oBAAoB;EACtB,SAAS;EACT,SAAS,cAAc;EACvB;EACA,cAAc;EACd,GAAG,UAAU,cAAc,QAAQ,UAAU;CAC/C,CAAC;CAEH,MAAM,iBAAiB,UAGrB,OAAO,OAAO,2BAA2B,YAAY,OAAO,CAAC,CAAC;CAEhE,MAAM,mBAAuC;EAC3C,KAAK,IAA+B;GAAE,SAAS;GAAY;EAAgB,CAAC;EAC5E,KAAK,IAAI;GACP,SAAS;IACP,QAAQ,MAAM;KACZ,OAAO,WAAW,gBAAgB,MAAM,kBAAkB;IAC5D;IACA,kBAAkB,WAAW,gBAAgB,kBAAkB;GACjE;GACA,SAAS;EACX,CAAC;EACD,aAAa;EACb,QACE,MACA,aAC0B;GAC1B,OAAO,WAAW,gBAAqB,MAAM,oBAAoB,WAAW;EAC9E;CACF;CAEA,eAAe,UAAyB;EACtC,IAAI,QAAQ;EACZ,SAAS;EACT,MAAM,QAAQ,MAAM;EACpB,IAAI,WAAW,OACb,MAAM,UAAU,KAAK,IAAI,CAAC,CAAC,YAAY,KAAA,CAAS;CAEpD;CAEA,OAAO;EACL;EACA;EAEA,MAAM,OAAO,KAA8C;GACzD,MAAM,EAAE,YAAY,MAAM,UAAU,GAAG;GACvC,MAAM,UAAU,QAAQ;GACxB,MAAM,UAAU,OAAO,YAAY,WAAW,UAAU;GAMxD,OAAO,iBAAiB;IADe,MAHrC,YAAY,UAAU,YAAY,mBAAmB,YAAY,iBAC7D,UACA;IACuC,QAAQ;GACvB,CAAC;EACjC;EAEA,SAAiC;GAC/B,OAAO,iBAAiB;IAAE,MAAM;IAAQ,QAAQ,CAAC;GAAE,CAAC;EACtD;EAEA,gBAA0C;GAExC,OAAO;IAAE,GADS,4BAA4B,oBAAoB,SAAS,OACvD;IAAG,UAAU;GAAiB;EACpD;EAEA,OAAO;GACN,OAAO,eAAe;CACzB;AACF;;;ACvaA,IAAA,kBAAe"}
package/dist/test/utils.d.mts CHANGED
@@ -2,22 +2,24 @@ import { Client } from "pg";
2
2
 
3
3
  //#region test/supabase-bootstrap.d.ts
4
4
  /**
5
- * Seeds the database with the external Supabase schemas, tables, roles, and grants.
6
- * The caller passes an already-connected `pg.Client` — this function does not
7
- * open or close connections.
5
+ * Seeds the database with the external Supabase schemas, tables, roles, and
6
+ * functions. The caller passes an already-connected `pg.Client` — this
7
+ * function does not open or close connections.
8
8
  *
9
- * Creates two schemas (`auth`, `storage`) and four tables whose columns
10
- * exactly match the `@prisma-next/extension-supabase` contract:
9
+ * Creates two schemas (`auth`, `storage`), the `auth.aal_level` native enum
10
+ * type, and five tables whose columns exactly match the
11
+ * `@prisma-next/extension-supabase` contract:
11
12
  *
12
13
  * - `auth.users` — id uuid PK, email text, created_at timestamptz, updated_at timestamptz
13
14
  * - `auth.identities` — id uuid PK, user_id uuid, provider text, created_at timestamptz, updated_at timestamptz
15
+ * - `auth.sessions` — id uuid PK, user_id uuid, aal auth.aal_level, created_at timestamptz
14
16
  * - `storage.buckets` — id text PK, name text, created_at timestamptz, updated_at timestamptz
15
17
  * - `storage.objects` — id uuid PK, bucket_id text, name text, created_at timestamptz, updated_at timestamptz
16
18
  *
17
- * Creates the three Postgres roles and grants that mirror a real Supabase database.
19
+ * Also creates the three Supabase platform roles (`anon`, `authenticated`,
20
+ * `service_role`) and the `auth.uid()` function that reads the current user's
21
+ * id from the `request.jwt.claims` GUC, matching Supabase's implementation.
18
22
  * `ALTER DEFAULT PRIVILEGES` covers tables created after the shim runs (e.g. via `dbInit`).
19
- * WAL grants are guarded by a schema-existence check — a PGlite single-connection
20
- * accommodation so role-bound sessions can interleave with the WAL drain query.
21
23
  */
22
24
  declare function bootstrapSupabaseShim(client: Client): Promise<void>;
23
25
  //#endregion
package/dist/test/utils.d.mts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"utils.d.mts","names":[],"sources":["../../test/supabase-bootstrap.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;iBAiDsB,qBAAA,CAAsB,MAAA,EAAQ,MAAA,GAAS,OAAO"}
1
+ {"version":3,"file":"utils.d.mts","names":[],"sources":["../../test/supabase-bootstrap.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;iBAmDsB,qBAAA,CAAsB,MAAA,EAAQ,MAAA,GAAS,OAAO"}
package/dist/test/utils.mjs CHANGED
@@ -1,26 +1,63 @@
1
1
  //#region test/supabase-bootstrap.ts
2
2
  /**
3
- * Seeds the database with the external Supabase schemas, tables, roles, and grants.
4
- * The caller passes an already-connected `pg.Client` — this function does not
5
- * open or close connections.
3
+ * Seeds the database with the external Supabase schemas, tables, roles, and
4
+ * functions. The caller passes an already-connected `pg.Client` — this
5
+ * function does not open or close connections.
6
6
  *
7
- * Creates two schemas (`auth`, `storage`) and four tables whose columns
8
- * exactly match the `@prisma-next/extension-supabase` contract:
7
+ * Creates two schemas (`auth`, `storage`), the `auth.aal_level` native enum
8
+ * type, and five tables whose columns exactly match the
9
+ * `@prisma-next/extension-supabase` contract:
9
10
  *
10
11
  * - `auth.users` — id uuid PK, email text, created_at timestamptz, updated_at timestamptz
11
12
  * - `auth.identities` — id uuid PK, user_id uuid, provider text, created_at timestamptz, updated_at timestamptz
13
+ * - `auth.sessions` — id uuid PK, user_id uuid, aal auth.aal_level, created_at timestamptz
12
14
  * - `storage.buckets` — id text PK, name text, created_at timestamptz, updated_at timestamptz
13
15
  * - `storage.objects` — id uuid PK, bucket_id text, name text, created_at timestamptz, updated_at timestamptz
14
16
  *
15
- * Creates the three Postgres roles and grants that mirror a real Supabase database.
17
+ * Also creates the three Supabase platform roles (`anon`, `authenticated`,
18
+ * `service_role`) and the `auth.uid()` function that reads the current user's
19
+ * id from the `request.jwt.claims` GUC, matching Supabase's implementation.
16
20
  * `ALTER DEFAULT PRIVILEGES` covers tables created after the shim runs (e.g. via `dbInit`).
17
- * WAL grants are guarded by a schema-existence check — a PGlite single-connection
18
- * accommodation so role-bound sessions can interleave with the WAL drain query.
19
21
  */
20
22
  async function bootstrapSupabaseShim(client) {
21
23
  await client.query("CREATE SCHEMA IF NOT EXISTS auth");
22
24
  await client.query("CREATE SCHEMA IF NOT EXISTS storage");
23
25
  await client.query(`
26
+ DO $$
27
+ BEGIN
28
+ IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'anon') THEN
29
+ CREATE ROLE anon NOLOGIN;
30
+ END IF;
31
+ IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'authenticated') THEN
32
+ CREATE ROLE authenticated NOLOGIN;
33
+ END IF;
34
+ IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'service_role') THEN
35
+ CREATE ROLE service_role NOLOGIN BYPASSRLS;
36
+ END IF;
37
+ END
38
+ $$
39
+ `);
40
+ await client.query(`
41
+ CREATE OR REPLACE FUNCTION auth.uid() RETURNS uuid
42
+ LANGUAGE sql STABLE
43
+ AS $$
44
+ SELECT (current_setting('request.jwt.claims', true)::jsonb ->> 'sub')::uuid
45
+ $$
46
+ `);
47
+ await client.query(`
48
+ DO $$
49
+ BEGIN
50
+ IF NOT EXISTS (
51
+ SELECT 1 FROM pg_type t
52
+ JOIN pg_namespace n ON n.oid = t.typnamespace
53
+ WHERE t.typname = 'aal_level' AND n.nspname = 'auth'
54
+ ) THEN
55
+ CREATE TYPE auth.aal_level AS ENUM ('aal1', 'aal2', 'aal3');
56
+ END IF;
57
+ END
58
+ $$
59
+ `);
60
+ await client.query(`
24
61
  CREATE TABLE IF NOT EXISTS auth.users (
25
62
  id uuid NOT NULL,
26
63
  email text NOT NULL,
@@ -38,6 +75,15 @@ async function bootstrapSupabaseShim(client) {
38
75
  updated_at timestamptz NOT NULL,
39
76
  PRIMARY KEY (id)
40
77
  )
78
+ `);
79
+ await client.query(`
80
+ CREATE TABLE IF NOT EXISTS auth.sessions (
81
+ id uuid NOT NULL,
82
+ user_id uuid NOT NULL,
83
+ aal auth.aal_level,
84
+ created_at timestamptz NOT NULL DEFAULT now(),
85
+ PRIMARY KEY (id)
86
+ )
41
87
  `);
42
88
  await client.query(`
43
89
  CREATE TABLE IF NOT EXISTS storage.buckets (
@@ -58,9 +104,6 @@ async function bootstrapSupabaseShim(client) {
58
104
  PRIMARY KEY (id)
59
105
  )
60
106
  `);
61
- await client.query("CREATE ROLE anon NOLOGIN");
62
- await client.query("CREATE ROLE authenticated NOLOGIN");
63
- await client.query("CREATE ROLE service_role NOLOGIN BYPASSRLS");
64
107
  await client.query("GRANT USAGE ON SCHEMA public TO anon, authenticated, service_role");
65
108
  await client.query("GRANT USAGE ON SCHEMA auth, storage TO anon, authenticated, service_role");
66
109
  await client.query("GRANT ALL ON ALL TABLES IN SCHEMA auth TO service_role");
package/dist/test/utils.mjs.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"utils.mjs","names":[],"sources":["../../test/supabase-bootstrap.ts"],"sourcesContent":["/**\n * Shared Supabase test fixture — seeds the external schemas, tables, roles, and grants.\n *\n * Seeds a Postgres/PGlite database with the external Supabase schemas and\n * tables that the framework verifier expects when a composed contract declares\n * `auth.*` and `storage.*` tables as `external`. Without these tables present,\n * `db init`/`db update` will fail at the verify step because the framework\n * confirms declared `external` tables exist.\n *\n * Also creates the three Postgres roles (`anon`, `authenticated`, `service_role`)\n * with grants that mirror a real Supabase database. `ALTER DEFAULT PRIVILEGES`\n * ensures tables created after the shim runs (e.g. `public.profile` via `dbInit`)\n * are automatically accessible to the roles.\n *\n * The caller owns the client lifecycle — pass any already-connected `pg.Client`\n * (e.g. one the test is sharing across setup steps, or one bound to a\n * transaction for isolation). Convenience wrapper for tests that don't already\n * have one:\n *\n * @example\n * ```ts\n * import { withClient } from '@prisma-next/test-utils';\n * import { bootstrapSupabaseShim } from '@prisma-next/extension-supabase/test/utils';\n *\n * await withClient(connectionString, async (client) => {\n * await bootstrapSupabaseShim(client);\n * });\n * ```\n */\nimport type { Client } from 'pg';\n\n/**\n * Seeds the database with the external Supabase schemas, tables, roles, and grants.\n * The caller passes an already-connected `pg.Client` — this function does not\n * open or close connections.\n *\n * Creates two schemas (`auth`, `storage`) and four tables whose columns\n * exactly match the `@prisma-next/extension-supabase` contract:\n *\n * - `auth.users` — id uuid PK, email text, created_at timestamptz, updated_at timestamptz\n * - `auth.identities` — id uuid PK, user_id uuid, provider text, created_at timestamptz, updated_at timestamptz\n * - `storage.buckets` — id text PK, name text, created_at timestamptz, updated_at timestamptz\n * - `storage.objects` — id uuid PK, bucket_id text, name text, created_at timestamptz, updated_at timestamptz\n *\n * Creates the three Postgres roles and grants that mirror a real Supabase database.\n * `ALTER DEFAULT PRIVILEGES` covers tables created after the shim runs (e.g. via `dbInit`).\n * WAL grants are guarded by a schema-existence check — a PGlite single-connection\n * accommodation so role-bound sessions can interleave with the WAL drain query.\n */\nexport async function bootstrapSupabaseShim(client: Client): Promise<void> {\n await client.query('CREATE SCHEMA IF NOT EXISTS auth');\n await client.query('CREATE SCHEMA IF NOT EXISTS storage');\n\n await client.query(`\n CREATE TABLE IF NOT EXISTS auth.users (\n id uuid NOT NULL,\n email text NOT NULL,\n created_at timestamptz NOT NULL,\n updated_at timestamptz NOT NULL,\n PRIMARY KEY (id)\n )\n `);\n\n await client.query(`\n CREATE TABLE IF NOT EXISTS auth.identities (\n id uuid NOT NULL,\n user_id uuid NOT NULL,\n provider text NOT NULL,\n created_at timestamptz NOT NULL,\n updated_at timestamptz NOT NULL,\n PRIMARY KEY (id)\n )\n `);\n\n await client.query(`\n CREATE TABLE IF NOT EXISTS storage.buckets (\n id text NOT NULL,\n name text NOT NULL,\n created_at timestamptz NOT NULL,\n updated_at timestamptz NOT NULL,\n PRIMARY KEY (id)\n )\n `);\n\n await client.query(`\n CREATE TABLE IF NOT EXISTS storage.objects (\n id uuid NOT NULL,\n bucket_id text NOT NULL,\n name text NOT NULL,\n created_at timestamptz NOT NULL,\n updated_at timestamptz NOT NULL,\n PRIMARY KEY (id)\n )\n `);\n\n // Roles + grants mirror a real Supabase database; WAL grants are a\n // PGlite-single-connection test accommodation.\n await client.query('CREATE ROLE anon NOLOGIN');\n await client.query('CREATE ROLE authenticated NOLOGIN');\n await client.query('CREATE ROLE service_role NOLOGIN BYPASSRLS');\n await client.query('GRANT USAGE ON SCHEMA public TO anon, authenticated, service_role');\n await client.query('GRANT USAGE ON SCHEMA auth, storage TO anon, authenticated, service_role');\n await client.query('GRANT ALL ON ALL TABLES IN SCHEMA auth TO service_role');\n await client.query('GRANT ALL ON ALL TABLES IN SCHEMA storage TO service_role');\n await client.query('GRANT SELECT ON ALL TABLES IN SCHEMA auth TO anon, authenticated');\n await client.query('GRANT SELECT ON ALL TABLES IN SCHEMA storage TO anon, authenticated');\n\n // Default privileges cover tables created after this shim runs (e.g. public.profile via dbInit).\n await client.query(\n 'ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO service_role',\n );\n await client.query(\n 'ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT, UPDATE ON TABLES TO authenticated',\n );\n await client.query('ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO anon');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAiDA,eAAsB,sBAAsB,QAA+B;CACzE,MAAM,OAAO,MAAM,kCAAkC;CACrD,MAAM,OAAO,MAAM,qCAAqC;CAExD,MAAM,OAAO,MAAM;;;;;;;;GAQlB;CAED,MAAM,OAAO,MAAM;;;;;;;;;GASlB;CAED,MAAM,OAAO,MAAM;;;;;;;;GAQlB;CAED,MAAM,OAAO,MAAM;;;;;;;;;GASlB;CAID,MAAM,OAAO,MAAM,0BAA0B;CAC7C,MAAM,OAAO,MAAM,mCAAmC;CACtD,MAAM,OAAO,MAAM,4CAA4C;CAC/D,MAAM,OAAO,MAAM,mEAAmE;CACtF,MAAM,OAAO,MAAM,0EAA0E;CAC7F,MAAM,OAAO,MAAM,wDAAwD;CAC3E,MAAM,OAAO,MAAM,2DAA2D;CAC9E,MAAM,OAAO,MAAM,kEAAkE;CACrF,MAAM,OAAO,MAAM,qEAAqE;CAGxF,MAAM,OAAO,MACX,+EACF;CACA,MAAM,OAAO,MACX,2FACF;CACA,MAAM,OAAO,MAAM,0EAA0E;AAC/F"}
1
+ {"version":3,"file":"utils.mjs","names":[],"sources":["../../test/supabase-bootstrap.ts"],"sourcesContent":["/**\n * Shared Supabase test fixture — seeds the external schemas, tables, roles, and functions.\n *\n * Seeds a Postgres/PGlite database with the external Supabase schemas and\n * tables that the framework verifier expects when a composed contract declares\n * `auth.*` and `storage.*` tables as `external`. Without these tables present,\n * `db init`/`db update` will fail at the verify step because the framework\n * confirms declared `external` tables exist.\n *\n * Also creates the three Postgres roles (`anon`, `authenticated`, `service_role`)\n * with grants that mirror a real Supabase database. `ALTER DEFAULT PRIVILEGES`\n * ensures tables created after the shim runs (e.g. `public.profile` via `dbInit`)\n * are automatically accessible to the roles.\n *\n * The caller owns the client lifecycle — pass any already-connected `pg.Client`\n * (e.g. one the test is sharing across setup steps, or one bound to a\n * transaction for isolation). Convenience wrapper for tests that don't already\n * have one:\n *\n * @example\n * ```ts\n * import { withClient } from '@prisma-next/test-utils';\n * import { bootstrapSupabaseShim } from '@prisma-next/extension-supabase/test/utils';\n *\n * await withClient(connectionString, async (client) => {\n * await bootstrapSupabaseShim(client);\n * });\n * ```\n */\nimport type { Client } from 'pg';\n\n/**\n * Seeds the database with the external Supabase schemas, tables, roles, and\n * functions. The caller passes an already-connected `pg.Client` — this\n * function does not open or close connections.\n *\n * Creates two schemas (`auth`, `storage`), the `auth.aal_level` native enum\n * type, and five tables whose columns exactly match the\n * `@prisma-next/extension-supabase` contract:\n *\n * - `auth.users` — id uuid PK, email text, created_at timestamptz, updated_at timestamptz\n * - `auth.identities` — id uuid PK, user_id uuid, provider text, created_at timestamptz, updated_at timestamptz\n * - `auth.sessions` — id uuid PK, user_id uuid, aal auth.aal_level, created_at timestamptz\n * - `storage.buckets` — id text PK, name text, created_at timestamptz, updated_at timestamptz\n * - `storage.objects` — id uuid PK, bucket_id text, name text, created_at timestamptz, updated_at timestamptz\n *\n * Also creates the three Supabase platform roles (`anon`, `authenticated`,\n * `service_role`) and the `auth.uid()` function that reads the current user's\n * id from the `request.jwt.claims` GUC, matching Supabase's implementation.\n * `ALTER DEFAULT PRIVILEGES` covers tables created after the shim runs (e.g. via `dbInit`).\n */\nexport async function bootstrapSupabaseShim(client: Client): Promise<void> {\n await client.query('CREATE SCHEMA IF NOT EXISTS auth');\n await client.query('CREATE SCHEMA IF NOT EXISTS storage');\n\n // Supabase platform roles — created idempotently; real Supabase provides\n // these as platform infrastructure; the shim emulates them for test DBs.\n await client.query(`\n DO $$\n BEGIN\n IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'anon') THEN\n CREATE ROLE anon NOLOGIN;\n END IF;\n IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'authenticated') THEN\n CREATE ROLE authenticated NOLOGIN;\n END IF;\n IF NOT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'service_role') THEN\n CREATE ROLE service_role NOLOGIN BYPASSRLS;\n END IF;\n END\n $$\n `);\n\n // auth.uid() — returns the current request's user id from the settable GUC\n // request.jwt.claims, matching Supabase's implementation. Returns NULL when\n // the GUC is unset (missing_ok = true).\n await client.query(`\n CREATE OR REPLACE FUNCTION auth.uid() RETURNS uuid\n LANGUAGE sql STABLE\n AS $$\n SELECT (current_setting('request.jwt.claims', true)::jsonb ->> 'sub')::uuid\n $$\n `);\n\n // auth.aal_level — a native Postgres enum type; Postgres has no `CREATE\n // TYPE IF NOT EXISTS`, so existence is checked via pg_type first, matching\n // the idempotency style used above for roles. Real Supabase ships this\n // type as platform infrastructure; the shim creates it for test DBs so the\n // externally-managed `native_enum` in the extension's contract has a type\n // to bind against (Prisma Next emits no DDL for it).\n await client.query(`\n DO $$\n BEGIN\n IF NOT EXISTS (\n SELECT 1 FROM pg_type t\n JOIN pg_namespace n ON n.oid = t.typnamespace\n WHERE t.typname = 'aal_level' AND n.nspname = 'auth'\n ) THEN\n CREATE TYPE auth.aal_level AS ENUM ('aal1', 'aal2', 'aal3');\n END IF;\n END\n $$\n `);\n\n await client.query(`\n CREATE TABLE IF NOT EXISTS auth.users (\n id uuid NOT NULL,\n email text NOT NULL,\n created_at timestamptz NOT NULL,\n updated_at timestamptz NOT NULL,\n PRIMARY KEY (id)\n )\n `);\n\n await client.query(`\n CREATE TABLE IF NOT EXISTS auth.identities (\n id uuid NOT NULL,\n user_id uuid NOT NULL,\n provider text NOT NULL,\n created_at timestamptz NOT NULL,\n updated_at timestamptz NOT NULL,\n PRIMARY KEY (id)\n )\n `);\n\n await client.query(`\n CREATE TABLE IF NOT EXISTS auth.sessions (\n id uuid NOT NULL,\n user_id uuid NOT NULL,\n aal auth.aal_level,\n created_at timestamptz NOT NULL DEFAULT now(),\n PRIMARY KEY (id)\n )\n `);\n\n await client.query(`\n CREATE TABLE IF NOT EXISTS storage.buckets (\n id text NOT NULL,\n name text NOT NULL,\n created_at timestamptz NOT NULL,\n updated_at timestamptz NOT NULL,\n PRIMARY KEY (id)\n )\n `);\n\n await client.query(`\n CREATE TABLE IF NOT EXISTS storage.objects (\n id uuid NOT NULL,\n bucket_id text NOT NULL,\n name text NOT NULL,\n created_at timestamptz NOT NULL,\n updated_at timestamptz NOT NULL,\n PRIMARY KEY (id)\n )\n `);\n\n // Grants mirror a real Supabase database.\n await client.query('GRANT USAGE ON SCHEMA public TO anon, authenticated, service_role');\n await client.query('GRANT USAGE ON SCHEMA auth, storage TO anon, authenticated, service_role');\n await client.query('GRANT ALL ON ALL TABLES IN SCHEMA auth TO service_role');\n await client.query('GRANT ALL ON ALL TABLES IN SCHEMA storage TO service_role');\n await client.query('GRANT SELECT ON ALL TABLES IN SCHEMA auth TO anon, authenticated');\n await client.query('GRANT SELECT ON ALL TABLES IN SCHEMA storage TO anon, authenticated');\n\n // Default privileges cover tables created after this shim runs (e.g. public.profile via dbInit).\n await client.query(\n 'ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO service_role',\n );\n await client.query(\n 'ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT, UPDATE ON TABLES TO authenticated',\n );\n await client.query('ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO anon');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAmDA,eAAsB,sBAAsB,QAA+B;CACzE,MAAM,OAAO,MAAM,kCAAkC;CACrD,MAAM,OAAO,MAAM,qCAAqC;CAIxD,MAAM,OAAO,MAAM;;;;;;;;;;;;;;GAclB;CAKD,MAAM,OAAO,MAAM;;;;;;GAMlB;CAQD,MAAM,OAAO,MAAM;;;;;;;;;;;;GAYlB;CAED,MAAM,OAAO,MAAM;;;;;;;;GAQlB;CAED,MAAM,OAAO,MAAM;;;;;;;;;GASlB;CAED,MAAM,OAAO,MAAM;;;;;;;;GAQlB;CAED,MAAM,OAAO,MAAM;;;;;;;;GAQlB;CAED,MAAM,OAAO,MAAM;;;;;;;;;GASlB;CAGD,MAAM,OAAO,MAAM,mEAAmE;CACtF,MAAM,OAAO,MAAM,0EAA0E;CAC7F,MAAM,OAAO,MAAM,wDAAwD;CAC3E,MAAM,OAAO,MAAM,2DAA2D;CAC9E,MAAM,OAAO,MAAM,kEAAkE;CACrF,MAAM,OAAO,MAAM,qEAAqE;CAGxF,MAAM,OAAO,MACX,+EACF;CACA,MAAM,OAAO,MACX,2FACF;CACA,MAAM,OAAO,MAAM,0EAA0E;AAC/F"}
package/package.json CHANGED
@@ -1,47 +1,48 @@
1
1
  {
2
2
  "name": "@prisma-next/extension-supabase",
3
- "version": "0.14.0-dev.6",
3
+ "version": "0.14.0-dev.60",
4
4
  "license": "Apache-2.0",
5
5
  "type": "module",
6
6
  "sideEffects": false,
7
7
  "dependencies": {
8
- "@prisma-next/adapter-postgres": "0.14.0-dev.6",
9
- "@prisma-next/contract": "0.14.0-dev.6",
10
- "@prisma-next/driver-postgres": "0.14.0-dev.6",
11
- "@prisma-next/postgres": "0.14.0-dev.6",
12
- "@prisma-next/sql-builder": "0.14.0-dev.6",
13
- "@prisma-next/sql-orm-client": "0.14.0-dev.6",
14
- "@prisma-next/target-postgres": "0.14.0-dev.6",
8
+ "@prisma-next/adapter-postgres": "0.14.0-dev.60",
9
+ "@prisma-next/contract": "0.14.0-dev.60",
10
+ "@prisma-next/driver-postgres": "0.14.0-dev.60",
11
+ "@prisma-next/postgres": "0.14.0-dev.60",
12
+ "@prisma-next/sql-builder": "0.14.0-dev.60",
13
+ "@prisma-next/sql-orm-client": "0.14.0-dev.60",
14
+ "@prisma-next/target-postgres": "0.14.0-dev.60",
15
15
  "jose": "^6",
16
16
  "pg": "8.21.0",
17
- "@prisma-next/contract-authoring": "0.14.0-dev.6",
18
- "@prisma-next/family-sql": "0.14.0-dev.6",
19
- "@prisma-next/framework-components": "0.14.0-dev.6",
20
- "@prisma-next/migration-tools": "0.14.0-dev.6",
21
- "@prisma-next/sql-contract": "0.14.0-dev.6",
22
- "@prisma-next/sql-contract-ts": "0.14.0-dev.6",
23
- "@prisma-next/sql-operations": "0.14.0-dev.6",
24
- "@prisma-next/sql-relational-core": "0.14.0-dev.6",
25
- "@prisma-next/sql-runtime": "0.14.0-dev.6",
26
- "@prisma-next/sql-schema-ir": "0.14.0-dev.6",
27
- "@prisma-next/utils": "0.14.0-dev.6",
17
+ "@prisma-next/contract-authoring": "0.14.0-dev.60",
18
+ "@prisma-next/family-sql": "0.14.0-dev.60",
19
+ "@prisma-next/framework-components": "0.14.0-dev.60",
20
+ "@prisma-next/migration-tools": "0.14.0-dev.60",
21
+ "@prisma-next/sql-contract": "0.14.0-dev.60",
22
+ "@prisma-next/sql-contract-ts": "0.14.0-dev.60",
23
+ "@prisma-next/sql-operations": "0.14.0-dev.60",
24
+ "@prisma-next/sql-relational-core": "0.14.0-dev.60",
25
+ "@prisma-next/sql-runtime": "0.14.0-dev.60",
26
+ "@prisma-next/sql-schema-ir": "0.14.0-dev.60",
27
+ "@prisma-next/utils": "0.14.0-dev.60",
28
28
  "@standard-schema/spec": "^1.1.0",
29
29
  "arktype": "^2.2.0"
30
30
  },
31
31
  "devDependencies": {
32
- "@prisma-next/cli": "0.14.0-dev.6",
33
- "@prisma-next/operations": "0.14.0-dev.6",
34
- "@prisma-next/sql-contract-psl": "0.14.0-dev.6",
35
- "@prisma-next/test-utils": "0.14.0-dev.6",
36
- "@prisma-next/tsconfig": "0.14.0-dev.6",
37
- "@prisma-next/tsdown": "0.14.0-dev.6",
32
+ "@prisma-next/cli": "0.14.0-dev.60",
33
+ "@prisma-next/operations": "0.14.0-dev.60",
34
+ "@prisma-next/psl-printer": "0.14.0-dev.60",
35
+ "@prisma-next/sql-contract-psl": "0.14.0-dev.60",
36
+ "@prisma-next/test-utils": "0.14.0-dev.60",
37
+ "@prisma-next/tsconfig": "0.14.0-dev.60",
38
+ "@prisma-next/tsdown": "0.14.0-dev.60",
38
39
  "@types/pg": "8.20.0",
39
40
  "tsdown": "0.22.1",
40
41
  "typescript": "5.9.3",
41
42
  "vitest": "4.1.8"
42
43
  },
43
44
  "peerDependencies": {
44
- "@prisma-next/adapter-postgres": "0.14.0-dev.6",
45
+ "@prisma-next/adapter-postgres": "0.14.0-dev.60",
45
46
  "typescript": ">=5.9"
46
47
  },
47
48
  "peerDependenciesMeta": {