@r8s/supabase 0.2.0 → 0.3.0

package/dist/index.d.ts

@@ -0,0 +1,131 @@
+export interface SupabaseProps {
+    /** Resource name — base for every derived resource (defaults to 'supabase') */
+    name?: string;
+    /** Kubernetes namespace (defaults to 'default') */
+    namespace?: string;
+    /** Public hostname for the REST API root — PostgREST (required) */
+    host: string;
+    /** Replicas per service (defaults to 1; PostgREST/GoTrue scale horizontally) */
+    replicas?: number;
+    /** Postgres cluster storage size for the Database core (defaults to '10Gi') */
+    storage?: string;
+    /**
+     * Render the Storage API service (defaults to true). Set false to run a
+     * minimal auth + REST-only Supabase. The S3 objectStorage prop is always
+     * required so a bucket is declared for the platform.
+     */
+    storageApi?: boolean;
+    /**
+     * S3-compatible object storage for the Storage API (RustFS in the platform).
+     * Reference a bucket whose credentials live in a Secret provisioned by
+     * the secrets backend (keys: accessKey, secretKey) — never plaintext.
+     */
+    objectStorage: {
+        /** S3 endpoint URL, e.g. https://s3.internal.example.com */
+        endpoint: string;
+        /** Bucket for uploads and stored files */
+        bucket: string;
+        /** Name of the Secret holding accessKey / secretKey */
+        credentialsSecret: string;
+    };
+    /**
+     * S3 region reported to the Storage API (GLOBAL_S3_REGION, defaults to
+     * 'us-east-1'). For S3-compatible stores like RustFS any consistent
+     * region works — keep it aligned with the provider's default.
+     */
+    region?: string;
+    /**
+     * Name of an existing Secret holding the Supabase JWT bundle with keys
+     * `jwtSecret`, `anonKey`, `serviceRoleKey` and `referrerURLs`. Required
+     * unless a secrets backend (openbao/vault) is configured on the
+     * surrounding Platform — the backend then provisions the bundle at
+     * path `<path>/<name>/jwt`. Plaintext JWT secrets are not supported.
+     */
+    jwtSecretsName?: string;
+    /**
+     * Additional redirect URLs GoTrue may send users to after signup,
+     * magic-link or OAuth flows (GOTRUE_URI_ALLOW_LIST). The site URL is
+     * always allowed; pass a list (joined with ',') or a pre-joined string.
+     */
+    uriAllowList?: string | string[];
+    /** Requested resources — applied to every service in the suite */
+    resources?: {
+        requests?: {
+            cpu?: string;
+            memory?: string;
+        };
+        limits?: {
+            cpu?: string;
+            memory?: string;
+        };
+    };
+    /** TLS configuration (defaults to letsencrypt-prod cluster issuer) */
+    tls?: {
+        secretName: string;
+        clusterIssuer: string;
+    };
+}
+/**
+ * Supabase — open-source Firebase alternative: auth, REST, realtime and
+ * storage on Postgres. This is the Supabase backend platform, NOT Apache
+ * Superset (which ships in the separate r8s/superset package).
+ *
+ * @title Supabase
+ * @category Backend Platforms
+ *
+ * Composes:
+ * - CNPG Postgres cluster (the Supabase database core) bootstrapped with
+ *   the Supabase roles (anon, authenticated, service_role, authenticator),
+ *   extensions (pgcrypto, pgjwt) and schemas (auth, storage, realtime)
+ * - GoTrue auth service (`${name}-gotrue`, port 9999)
+ * - PostgREST REST API (`${name}-postgrest`, port 3000)
+ * - Realtime websockets service (`${name}-realtime`, port 4000)
+ * - Storage API on S3/RustFS (`${name}-storage-api`, port 5000)
+ * - ImgProxy image transform service (`${name}-imgproxy`, port 8080)
+ * - Endpoints on one host: `/rest/v1` (PostgREST), `/auth/v1` (GoTrue),
+ *   `/realtime/v1` (Realtime, with WebSocket-friendly nginx annotations)
+ *   and `/storage/v1` (Storage API), plus the REST root at `/`
+ * - JWT bundle (jwtSecret, anonKey, serviceRoleKey, referrerURLs)
+ *   provisioned through the Platform secrets backend (openbao / vault),
+ *   or referenced from an existing Secret
+ *
+ * Wrap the component in `<Platform secrets={{ backend: 'openbao' }}>` and
+ * the `${name}-jwt` bundle is provisioned for you. Without a backend you
+ * must point `jwtSecretsName` at a pre-created Secret.
+ *
+ * @example
+ * import { Platform } from '@r8s/recipes'
+ * import { Supabase } from '@r8s/supabase'
+ *
+ * export default (
+ *   <Platform secrets={{ backend: 'openbao', mount: 'kv', path: 'apps' }}>
+ *     <Supabase
+ *       name="backend"
+ *       host="backend.example.com"
+ *       objectStorage={{
+ *         endpoint: 'https://s3.internal.example.com',
+ *         bucket: 'backend-uploads',
+ *         credentialsSecret: 'backend-object-store-credentials',
+ *       }}
+ *     />
+ *   </Platform>
+ * )
+ *
+ * @example
+ * // Reference a pre-created JWT bundle instead of provisioning one
+ * import { Supabase } from '@r8s/supabase'
+ *
+ * export default (
+ *   <Supabase
+ *     host="backend.example.com"
+ *     jwtSecretsName="backend-jwt"
+ *     objectStorage={{
+ *       endpoint: 'https://s3.internal.example.com',
+ *       bucket: 'backend-uploads',
+ *       credentialsSecret: 'backend-object-store-credentials',
+ *     }}
+ *   />
+ * )
+ */
+export declare function Supabase(props: SupabaseProps): import("@r8s/core").r8sElement;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAA;IACZ,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,aAAa,EAAE;QACb,4DAA4D;QAC5D,QAAQ,EAAE,MAAM,CAAA;QAChB,0CAA0C;QAC1C,MAAM,EAAE,MAAM,CAAA;QACd,uDAAuD;QACvD,iBAAiB,EAAE,MAAM,CAAA;KAC1B,CAAA;IACD;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAChC,kEAAkE;IAClE,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5C,MAAM,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAC3C,CAAA;IACD,sEAAsE;IACtE,GAAG,CAAC,EAAE;QACJ,UAAU,EAAE,MAAM,CAAA;QAClB,aAAa,EAAE,MAAM,CAAA;KACtB,CAAA;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,kCAsU5C"}

package/dist/index.js

@@ -0,0 +1,259 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Supabase = Supabase;
+const jsx_runtime_1 = require("@r8s/core/jsx-runtime");
+const core_1 = require("@r8s/core");
+const defaults_1 = require("@r8s/core/defaults");
+const recipes_1 = require("@r8s/recipes");
+/**
+ * Supabase — open-source Firebase alternative: auth, REST, realtime and
+ * storage on Postgres. This is the Supabase backend platform, NOT Apache
+ * Superset (which ships in the separate r8s/superset package).
+ *
+ * @title Supabase
+ * @category Backend Platforms
+ *
+ * Composes:
+ * - CNPG Postgres cluster (the Supabase database core) bootstrapped with
+ *   the Supabase roles (anon, authenticated, service_role, authenticator),
+ *   extensions (pgcrypto, pgjwt) and schemas (auth, storage, realtime)
+ * - GoTrue auth service (`${name}-gotrue`, port 9999)
+ * - PostgREST REST API (`${name}-postgrest`, port 3000)
+ * - Realtime websockets service (`${name}-realtime`, port 4000)
+ * - Storage API on S3/RustFS (`${name}-storage-api`, port 5000)
+ * - ImgProxy image transform service (`${name}-imgproxy`, port 8080)
+ * - Endpoints on one host: `/rest/v1` (PostgREST), `/auth/v1` (GoTrue),
+ *   `/realtime/v1` (Realtime, with WebSocket-friendly nginx annotations)
+ *   and `/storage/v1` (Storage API), plus the REST root at `/`
+ * - JWT bundle (jwtSecret, anonKey, serviceRoleKey, referrerURLs)
+ *   provisioned through the Platform secrets backend (openbao / vault),
+ *   or referenced from an existing Secret
+ *
+ * Wrap the component in `<Platform secrets={{ backend: 'openbao' }}>` and
+ * the `${name}-jwt` bundle is provisioned for you. Without a backend you
+ * must point `jwtSecretsName` at a pre-created Secret.
+ *
+ * @example
+ * import { Platform } from '@r8s/recipes'
+ * import { Supabase } from '@r8s/supabase'
+ *
+ * export default (
+ *   <Platform secrets={{ backend: 'openbao', mount: 'kv', path: 'apps' }}>
+ *     <Supabase
+ *       name="backend"
+ *       host="backend.example.com"
+ *       objectStorage={{
+ *         endpoint: 'https://s3.internal.example.com',
+ *         bucket: 'backend-uploads',
+ *         credentialsSecret: 'backend-object-store-credentials',
+ *       }}
+ *     />
+ *   </Platform>
+ * )
+ *
+ * @example
+ * // Reference a pre-created JWT bundle instead of provisioning one
+ * import { Supabase } from '@r8s/supabase'
+ *
+ * export default (
+ *   <Supabase
+ *     host="backend.example.com"
+ *     jwtSecretsName="backend-jwt"
+ *     objectStorage={{
+ *       endpoint: 'https://s3.internal.example.com',
+ *       bucket: 'backend-uploads',
+ *       credentialsSecret: 'backend-object-store-credentials',
+ *     }}
+ *   />
+ * )
+ */
+function Supabase(props) {
+    const { name = 'supabase', namespace = 'default', host, replicas = 1, storage = '10Gi', storageApi = true, region = 'us-east-1', objectStorage, jwtSecretsName, uriAllowList, resources = {
+        requests: { memory: '512Mi', cpu: '250m' },
+        limits: { memory: '2Gi', cpu: '1000m' },
+    }, tls = { secretName: `${name}-tls`, clusterIssuer: 'letsencrypt-prod' }, } = props;
+    const secretProvider = (0, core_1.useContext)(defaults_1.SecretContext);
+    const resources_ = [];
+    const dbHost = `${name}-rw`;
+    const dbCredentialsName = `${name}-db-credentials`;
+    const jwtBundleName = jwtSecretsName ?? `${name}-jwt`;
+    // Static parts only — the password arrives via $(PGPASSWORD), which every
+    // service declares through secretKeyRef (WebService resolves secrets
+    // before plain env, so Kubernetes dependent expansion sees it).
+    const dbUri = `postgresql://${name}:$(PGPASSWORD)@${dbHost}:5432/${name}`;
+    // --- Bootstrap SQL ---------------------------------------------------------
+    // Minimal Supabase bootstrap applied once by CNPG after initdb
+    // (bootstrap.initdb.postInitApplicationSQL). Every statement is
+    // idempotent where the SQL grammar allows it.
+    const postInitSQL = [
+        'CREATE EXTENSION IF NOT EXISTS pgcrypto;',
+        'CREATE EXTENSION IF NOT EXISTS pgjwt;',
+        'CREATE ROLE anon NOLOGIN;',
+        'CREATE ROLE authenticated NOLOGIN;',
+        'CREATE ROLE service_role NOLOGIN;',
+        'CREATE ROLE authenticator NOLOGIN;',
+        'GRANT USAGE ON SCHEMA public TO anon, authenticated, service_role;',
+        'CREATE SCHEMA IF NOT EXISTS auth;',
+        'CREATE SCHEMA IF NOT EXISTS storage;',
+        'CREATE SCHEMA IF NOT EXISTS realtime;',
+        'GRANT USAGE ON SCHEMA auth TO anon, authenticated, service_role;',
+        'GRANT USAGE ON SCHEMA storage TO anon, authenticated, service_role;',
+        'GRANT USAGE ON SCHEMA realtime TO anon, authenticated, service_role;',
+        'GRANT anon TO authenticator;',
+        'GRANT authenticated TO authenticator;',
+        'GRANT service_role TO authenticator;',
+    ];
+    // --- JWT bundle provisioning ----------------------------------------------
+    // GoTrue, PostgREST and Storage API all verify Supabase JWTs. The bundle
+    // (jwtSecret, anonKey, serviceRoleKey, referrerURLs) must never be
+    // rendered as plaintext: with a secrets backend it is provisioned through
+    // the backend (keys live at <path>/<name>/jwt); otherwise reference a
+    // pre-created Secret.
+    if (!jwtSecretsName) {
+        if (!secretProvider ||
+            (secretProvider.backend !== 'vault' && secretProvider.backend !== 'openbao')) {
+            throw new Error(`Supabase "${name}" requires a JWT secret bundle (keys: jwtSecret, anonKey, serviceRoleKey, referrerURLs).\n` +
+                `\n` +
+                `GoTrue, PostgREST and Storage API verify Supabase JWTs — the bundle ` +
+                `must not be rendered as plaintext.\n` +
+                `\n` +
+                `Fix: configure a secrets backend on the Platform holding the bundle ` +
+                `at path <mount-path>/${name}/jwt:\n` +
+                `  <Platform secrets={{ backend: 'openbao', mount: 'kv', path: 'apps' }}>\n` +
+                `    <Supabase name="${name}" host="${host}" objectStorage={{ endpoint: '...', bucket: '...', credentialsSecret: '...' }} />\n` +
+                `  </Platform>\n` +
+                `\n` +
+                `Or reference a pre-created Secret (keys: jwtSecret, anonKey, serviceRoleKey, referrerURLs):\n` +
+                `  <Supabase name="${name}" host="${host}" jwtSecretsName="${name}-jwt" />`);
+        }
+        const spec = {
+            ...(secretProvider.backend === 'vault'
+                ? { vaultAuthRef: secretProvider.authRef }
+                : { openbaoAuthRef: secretProvider.authRef }),
+            mount: secretProvider.mount,
+            type: 'kv-v2',
+            path: `${secretProvider.path ?? name}/${name}/jwt`,
+            destination: { create: true, name: jwtBundleName },
+        };
+        resources_.push(secretProvider.backend === 'vault'
+            ? (0, core_1.jsx)('VaultStaticSecret', {
+                apiVersion: 'secrets.hashicorp.com/v1beta1',
+                kind: 'VaultStaticSecret',
+                metadata: { name: `${name}-jwt`, namespace },
+                spec,
+            })
+            : (0, core_1.jsx)('OpenBaoStaticSecret', {
+                apiVersion: 'secrets.openbao.org/v1beta1',
+                kind: 'OpenBaoStaticSecret',
+                metadata: { name: `${name}-jwt`, namespace },
+                spec,
+            }));
+    }
+    // --- Database (CNPG) — the Postgres core -----------------------------------
+    // Wraps every Postgres-backed service so credentials stay consistent with
+    // the r8s Database recipe (CNPG dedicated cluster provisions the secret).
+    resources_.push((0, core_1.jsx)(recipes_1.Database, {
+        backup: false,
+        name,
+        namespace,
+        storage,
+        postInitSQL,
+        children: ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)(recipes_1.WebService, { name: `${name}-gotrue`, namespace: namespace, image: "supabase/gotrue:v2", port: 9999, replicas: replicas, resources: resources, probes: {
+                        liveness: { path: '/health', initialDelaySeconds: 15 },
+                        readiness: { path: '/health', initialDelaySeconds: 15 },
+                    }, env: {
+                        GOTRUE_API_HOST: '0.0.0.0',
+                        GOTRUE_API_PORT: '9999',
+                        GOTRUE_SITE_URL: `https://${host}`,
+                        API_EXTERNAL_URL: `https://${host}`,
+                        GOTRUE_DB_DRIVER: 'postgres',
+                        GOTRUE_DB_DATABASE_URL: dbUri,
+                        GOTRUE_JWT_ISSUER: `https://${host}/auth/v1`,
+                        GOTRUE_JWT_ADMIN_ROLES: 'service_role',
+                        GOTRUE_JWT_AUD: 'authenticated',
+                        GOTRUE_JWT_DEFAULT_GROUP_NAME: 'authenticated',
+                        GOTRUE_JWT_EXP: '3600',
+                        ...(uriAllowList && {
+                            GOTRUE_URI_ALLOW_LIST: Array.isArray(uriAllowList)
+                                ? uriAllowList.join(',')
+                                : uriAllowList,
+                        }),
+                    }, secrets: {
+                        PGPASSWORD: { secret: dbCredentialsName, key: 'password' },
+                        GOTRUE_JWT_SECRET: { secret: jwtBundleName, key: 'jwtSecret' },
+                    } }), (0, jsx_runtime_1.jsx)(recipes_1.WebService, { name: `${name}-postgrest`, namespace: namespace, image: "postgrest/postgrest:v12", port: 3000, replicas: replicas, resources: resources, probes: {
+                        liveness: { path: '/' },
+                        readiness: { path: '/' },
+                    }, env: {
+                        PGRST_SERVER_PORT: '3000',
+                        PGRST_DB_URI: dbUri,
+                        PGRST_DB_SCHEMAS: 'public,storage,graphql_public',
+                        PGRST_DB_ANON_ROLE: 'anon',
+                        PGRST_DB_USE_LEGACY_GUCS: 'false',
+                    }, secrets: {
+                        PGPASSWORD: { secret: dbCredentialsName, key: 'password' },
+                        PGRST_JWT_SECRET: { secret: jwtBundleName, key: 'jwtSecret' },
+                    } }), (0, jsx_runtime_1.jsx)(recipes_1.WebService, { name: `${name}-realtime`, namespace: namespace, image: "supabase/realtime:v2", port: 4000, replicas: replicas, resources: resources, probes: {
+                        liveness: { path: '/health' },
+                        readiness: { path: '/health' },
+                    }, env: {
+                        PORT: '4000',
+                        DB_HOST: dbHost,
+                        DB_PORT: '5432',
+                        DB_USER: name,
+                        DB_NAME: name,
+                        DB_ENC_KEY: 'supabaserealtime',
+                        SECURE_CHANNELS: 'true',
+                    }, secrets: {
+                        DB_PASSWORD: { secret: dbCredentialsName, key: 'password' },
+                        API_JWT_SECRET: { secret: jwtBundleName, key: 'jwtSecret' },
+                    } }), storageApi && ((0, jsx_runtime_1.jsx)(recipes_1.WebService, { name: `${name}-storage-api`, namespace: namespace, image: "supabase/storage-api:v0", port: 5000, replicas: replicas, resources: resources, probes: {
+                        liveness: { path: '/status' },
+                        readiness: { path: '/status' },
+                    }, env: {
+                        PORT: '5000',
+                        DATABASE_URL: dbUri,
+                        STORAGE_BACKEND: 's3',
+                        GLOBAL_S3_BUCKET: objectStorage.bucket,
+                        GLOBAL_S3_ENDPOINT: objectStorage.endpoint,
+                        GLOBAL_S3_REGION: region,
+                        GLOBAL_S3_FORCE_PATH_STYLE: 'true',
+                        IMGPROXY_URL: `http://${name}-imgproxy:8080`,
+                        FILE_SIZE_LIMIT: '50GiB',
+                    }, secrets: {
+                        PGPASSWORD: { secret: dbCredentialsName, key: 'password' },
+                        PGRST_JWT_SECRET: { secret: jwtBundleName, key: 'jwtSecret' },
+                        ANON_KEY: { secret: jwtBundleName, key: 'anonKey' },
+                        SERVICE_KEY: { secret: jwtBundleName, key: 'serviceRoleKey' },
+                        GLOBAL_S3_ACCESS_KEY: {
+                            secret: objectStorage.credentialsSecret,
+                            key: 'accessKey',
+                        },
+                        GLOBAL_S3_SECRET_KEY: {
+                            secret: objectStorage.credentialsSecret,
+                            key: 'secretKey',
+                        },
+                    } }))] })),
+    }));
+    // --- ImgProxy — image transforms for the Storage API ------------------------
+    // Stateful-free image resizer; no database or secrets needed.
+    resources_.push((0, jsx_runtime_1.jsx)(recipes_1.WebService, { name: `${name}-imgproxy`, namespace: namespace, image: "darthsim/imgproxy:v3", port: 8080, replicas: replicas, resources: resources, probes: {
+            liveness: { path: '/health' },
+            readiness: { path: '/health' },
+        }, env: {
+            IMGPROXY_ALLOW_ORIGIN: '*',
+            IMGPROXY_ENABLE_WEBP_DETECTION: 'true',
+            IMGPROXY_MAX_SRC_RESOLUTION: '50',
+        } }));
+    // --- Endpoints — one host, path-based routes --------------------------------
+    // The REST root (PostgREST) serves `/`; GoTrue, Realtime and Storage API
+    // are exposed as Prefix routes on the same host so clients use a single
+    // origin (`/auth/v1`, `/rest/v1`, `/realtime/v1`, `/storage/v1`).
+    resources_.push((0, jsx_runtime_1.jsx)(recipes_1.Endpoint, { name: `${name}-endpoint`, namespace: namespace, host: host, serviceName: `${name}-postgrest`, servicePort: 3000, tls: tls }), (0, jsx_runtime_1.jsx)(recipes_1.Endpoint, { name: `${name}-auth-endpoint`, namespace: namespace, host: host, path: "/auth/v1", serviceName: `${name}-gotrue`, servicePort: 9999, tls: tls }), (0, jsx_runtime_1.jsx)(recipes_1.Endpoint, { name: `${name}-rest-endpoint`, namespace: namespace, host: host, path: "/rest/v1", serviceName: `${name}-postgrest`, servicePort: 3000, tls: tls }), (0, jsx_runtime_1.jsx)(recipes_1.Endpoint, { name: `${name}-realtime-endpoint`, namespace: namespace, host: host, path: "/realtime/v1", serviceName: `${name}-realtime`, servicePort: 4000, tls: tls, annotations: {
+            'nginx.ingress.kubernetes.io/proxy-buffering': 'off',
+            'nginx.ingress.kubernetes.io/proxy-read-timeout': '3600',
+            'nginx.ingress.kubernetes.io/proxy-send-timeout': '3600',
+        } }), storageApi && ((0, jsx_runtime_1.jsx)(recipes_1.Endpoint, { name: `${name}-storage-endpoint`, namespace: namespace, host: host, path: "/storage/v1", serviceName: `${name}-storage-api`, servicePort: 5000, tls: tls })));
+    return (0, core_1.jsx)(core_1.Fragment, { children: resources_ });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.tsx"],"names":[],"mappings":";;AAgIA,4BAsUC;;AAtcD,oCAAqD;AACrD,iDAAkD;AAClD,0CAA6D;AAgE7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,SAAgB,QAAQ,CAAC,KAAoB;IAC3C,MAAM,EACJ,IAAI,GAAG,UAAU,EACjB,SAAS,GAAG,SAAS,EACrB,IAAI,EACJ,QAAQ,GAAG,CAAC,EACZ,OAAO,GAAG,MAAM,EAChB,UAAU,GAAG,IAAI,EACjB,MAAM,GAAG,WAAW,EACpB,aAAa,EACb,cAAc,EACd,YAAY,EACZ,SAAS,GAAG;QACV,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE;QAC1C,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;KACxC,EACD,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,IAAI,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,GACvE,GAAG,KAAK,CAAA;IAET,MAAM,cAAc,GAAG,IAAA,iBAAU,EAAC,wBAAa,CAAC,CAAA;IAChD,MAAM,UAAU,GAA6B,EAAE,CAAA;IAE/C,MAAM,MAAM,GAAG,GAAG,IAAI,KAAK,CAAA;IAC3B,MAAM,iBAAiB,GAAG,GAAG,IAAI,iBAAiB,CAAA;IAClD,MAAM,aAAa,GAAG,cAAc,IAAI,GAAG,IAAI,MAAM,CAAA;IACrD,0EAA0E;IAC1E,qEAAqE;IACrE,gEAAgE;IAChE,MAAM,KAAK,GAAG,gBAAgB,IAAI,kBAAkB,MAAM,SAAS,IAAI,EAAE,CAAA;IAEzE,8EAA8E;IAC9E,+DAA+D;IAC/D,gEAAgE;IAChE,8CAA8C;IAC9C,MAAM,WAAW,GAAG;QAClB,0CAA0C;QAC1C,uCAAuC;QACvC,2BAA2B;QAC3B,oCAAoC;QACpC,mCAAmC;QACnC,oCAAoC;QACpC,oEAAoE;QACpE,mCAAmC;QACnC,sCAAsC;QACtC,uCAAuC;QACvC,kEAAkE;QAClE,qEAAqE;QACrE,sEAAsE;QACtE,8BAA8B;QAC9B,uCAAuC;QACvC,sCAAsC;KACvC,CAAA;IAED,6EAA6E;IAC7E,yEAAyE;IACzE,mEAAmE;IACnE,0EAA0E;IAC1E,sEAAsE;IACtE,sBAAsB;IACtB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,IACE,CAAC,cAAc;YACf,CAAC,cAAc,CAAC,OAAO,KAAK,OAAO,IAAI,cAAc,CAAC,OAAO,KAAK,SAAS,CAAC,EAC5E,CAAC;YACD,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,4FAA4F;gBAC3G,IAAI;gBACJ,sEAAsE;gBACtE,sCAAsC;gBACtC,IAAI;gBACJ,sEAAsE;gBACtE,wBAAwB,IAAI,SAAS;gBACrC,4EAA4E;gBAC5E,uBAAuB,IAAI,WAAW,IAAI,qFAAqF;gBAC/H,iBAAiB;gBACjB,IAAI;gBACJ,+FAA+F;gBAC/F,qBAAqB,IAAI,WAAW,IAAI,qBAAqB,IAAI,UAAU,CAC9E,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG;YACX,GAAG,CAAC,cAAc,CAAC,OAAO,KAAK,OAAO;gBACpC,CAAC,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,OAAO,EAAE;gBAC1C,CAAC,CAAC,EAAE,cAAc,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;YAC/C,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,IAAI,EAAE,OAAgB;YACtB,IAAI,EAAE,GAAG,cAAc,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM;YAClD,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE;SACnD,CAAA;QACD,UAAU,CAAC,IAAI,CACb,cAAc,CAAC,OAAO,KAAK,OAAO;YAChC,CAAC,CAAC,IAAA,UAAG,EAAC,mBAAmB,EAAE;gBACvB,UAAU,EAAE,+BAA+B;gBAC3C,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,SAAS,EAAE;gBAC5C,IAAI;aACL,CAAC;YACJ,CAAC,CAAC,IAAA,UAAG,EAAC,qBAAqB,EAAE;gBACzB,UAAU,EAAE,6BAA6B;gBACzC,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,SAAS,EAAE;gBAC5C,IAAI;aACL,CAAC,CACP,CAAA;IACH,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,0EAA0E;IAC1E,UAAU,CAAC,IAAI,CACb,IAAA,UAAG,EAAC,kBAAQ,EAAE;QACZ,MAAM,EAAE,KAAK;QACb,IAAI;QACJ,SAAS;QACT,OAAO;QACP,WAAW;QACX,QAAQ,EAAE,CACR,6DACE,uBAAC,oBAAU,IACT,IAAI,EAAE,GAAG,IAAI,SAAS,EACtB,SAAS,EAAE,SAAS,EACpB,KAAK,EAAC,oBAAoB,EAC1B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE;wBACN,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,EAAE;wBACtD,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,EAAE;qBACxD,EACD,GAAG,EAAE;wBACH,eAAe,EAAE,SAAS;wBAC1B,eAAe,EAAE,MAAM;wBACvB,eAAe,EAAE,WAAW,IAAI,EAAE;wBAClC,gBAAgB,EAAE,WAAW,IAAI,EAAE;wBACnC,gBAAgB,EAAE,UAAU;wBAC5B,sBAAsB,EAAE,KAAK;wBAC7B,iBAAiB,EAAE,WAAW,IAAI,UAAU;wBAC5C,sBAAsB,EAAE,cAAc;wBACtC,cAAc,EAAE,eAAe;wBAC/B,6BAA6B,EAAE,eAAe;wBAC9C,cAAc,EAAE,MAAM;wBACtB,GAAG,CAAC,YAAY,IAAI;4BAClB,qBAAqB,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;gCAChD,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;gCACxB,CAAC,CAAC,YAAY;yBACjB,CAAC;qBACH,EACD,OAAO,EAAE;wBACP,UAAU,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE;wBAC1D,iBAAiB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE;qBAC/D,GACD,EACF,uBAAC,oBAAU,IACT,IAAI,EAAE,GAAG,IAAI,YAAY,EACzB,SAAS,EAAE,SAAS,EACpB,KAAK,EAAC,yBAAyB,EAC/B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE;wBACN,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;wBACvB,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;qBACzB,EACD,GAAG,EAAE;wBACH,iBAAiB,EAAE,MAAM;wBACzB,YAAY,EAAE,KAAK;wBACnB,gBAAgB,EAAE,+BAA+B;wBACjD,kBAAkB,EAAE,MAAM;wBAC1B,wBAAwB,EAAE,OAAO;qBAClC,EACD,OAAO,EAAE;wBACP,UAAU,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE;wBAC1D,gBAAgB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE;qBAC9D,GACD,EACF,uBAAC,oBAAU,IACT,IAAI,EAAE,GAAG,IAAI,WAAW,EACxB,SAAS,EAAE,SAAS,EACpB,KAAK,EAAC,sBAAsB,EAC5B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE;wBACN,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;qBAC/B,EACD,GAAG,EAAE;wBACH,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,MAAM;wBACf,OAAO,EAAE,MAAM;wBACf,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,IAAI;wBACb,UAAU,EAAE,kBAAkB;wBAC9B,eAAe,EAAE,MAAM;qBACxB,EACD,OAAO,EAAE;wBACP,WAAW,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE;wBAC3D,cAAc,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE;qBAC5D,GACD,EACD,UAAU,IAAI,CACb,uBAAC,oBAAU,IACT,IAAI,EAAE,GAAG,IAAI,cAAc,EAC3B,SAAS,EAAE,SAAS,EACpB,KAAK,EAAC,yBAAyB,EAC/B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE;wBACN,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;qBAC/B,EACD,GAAG,EAAE;wBACH,IAAI,EAAE,MAAM;wBACZ,YAAY,EAAE,KAAK;wBACnB,eAAe,EAAE,IAAI;wBACrB,gBAAgB,EAAE,aAAa,CAAC,MAAM;wBACtC,kBAAkB,EAAE,aAAa,CAAC,QAAQ;wBAC1C,gBAAgB,EAAE,MAAM;wBACxB,0BAA0B,EAAE,MAAM;wBAClC,YAAY,EAAE,UAAU,IAAI,gBAAgB;wBAC5C,eAAe,EAAE,OAAO;qBACzB,EACD,OAAO,EAAE;wBACP,UAAU,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE;wBAC1D,gBAAgB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE;wBAC7D,QAAQ,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,SAAS,EAAE;wBACnD,WAAW,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,gBAAgB,EAAE;wBAC7D,oBAAoB,EAAE;4BACpB,MAAM,EAAE,aAAa,CAAC,iBAAiB;4BACvC,GAAG,EAAE,WAAW;yBACjB;wBACD,oBAAoB,EAAE;4BACpB,MAAM,EAAE,aAAa,CAAC,iBAAiB;4BACvC,GAAG,EAAE,WAAW;yBACjB;qBACF,GACD,CACH,IACA,CACJ;KACF,CAAC,CACH,CAAA;IAED,+EAA+E;IAC/E,8DAA8D;IAC9D,UAAU,CAAC,IAAI,CACb,uBAAC,oBAAU,IACT,IAAI,EAAE,GAAG,IAAI,WAAW,EACxB,SAAS,EAAE,SAAS,EACpB,KAAK,EAAC,sBAAsB,EAC5B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE;YACN,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/B,EACD,GAAG,EAAE;YACH,qBAAqB,EAAE,GAAG;YAC1B,8BAA8B,EAAE,MAAM;YACtC,2BAA2B,EAAE,IAAI;SAClC,GACD,CACH,CAAA;IAED,+EAA+E;IAC/E,yEAAyE;IACzE,wEAAwE;IACxE,kEAAkE;IAClE,UAAU,CAAC,IAAI,CACb,uBAAC,kBAAQ,IACP,IAAI,EAAE,GAAG,IAAI,WAAW,EACxB,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,GAAG,IAAI,YAAY,EAChC,WAAW,EAAE,IAAI,EACjB,GAAG,EAAE,GAAG,GACR,EACF,uBAAC,kBAAQ,IACP,IAAI,EAAE,GAAG,IAAI,gBAAgB,EAC7B,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,IAAI,EACV,IAAI,EAAC,UAAU,EACf,WAAW,EAAE,GAAG,IAAI,SAAS,EAC7B,WAAW,EAAE,IAAI,EACjB,GAAG,EAAE,GAAG,GACR,EACF,uBAAC,kBAAQ,IACP,IAAI,EAAE,GAAG,IAAI,gBAAgB,EAC7B,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,IAAI,EACV,IAAI,EAAC,UAAU,EACf,WAAW,EAAE,GAAG,IAAI,YAAY,EAChC,WAAW,EAAE,IAAI,EACjB,GAAG,EAAE,GAAG,GACR,EACF,uBAAC,kBAAQ,IACP,IAAI,EAAE,GAAG,IAAI,oBAAoB,EACjC,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,IAAI,EACV,IAAI,EAAC,cAAc,EACnB,WAAW,EAAE,GAAG,IAAI,WAAW,EAC/B,WAAW,EAAE,IAAI,EACjB,GAAG,EAAE,GAAG,EACR,WAAW,EAAE;YACX,6CAA6C,EAAE,KAAK;YACpD,gDAAgD,EAAE,MAAM;YACxD,gDAAgD,EAAE,MAAM;SACzD,GACD,EACF,UAAU,IAAI,CACZ,uBAAC,kBAAQ,IACP,IAAI,EAAE,GAAG,IAAI,mBAAmB,EAChC,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,IAAI,EACV,IAAI,EAAC,aAAa,EAClB,WAAW,EAAE,GAAG,IAAI,cAAc,EAClC,WAAW,EAAE,IAAI,EACjB,GAAG,EAAE,GAAG,GACR,CACH,CACF,CAAA;IAED,OAAO,IAAA,UAAG,EAAC,eAAQ,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAA;AAChD,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@r8s/supabase",
-  "version": "0.2.0",
-  "description": "Supabase backend platform — Postgres core with GoTrue auth, PostgREST, Realtime, Storage API (S3/RustFS) and ImgProxy. This is Supabase, NOT Apache Superset.",
+  "version": "0.3.0",
+  "description": "Supabase backend platform \u2014 Postgres core with GoTrue auth, PostgREST, Realtime, Storage API (S3/RustFS) and ImgProxy. This is Supabase, NOT Apache Superset.",
   "license": "MIT",
   "author": "Berget AI AB",
   "homepage": "https://r8s.berget.ai",
@@ -30,13 +30,16 @@
   },
   "category": "Data & Analytics",
   "dependencies": {
-    "@r8s/core": "^0.2.0",
-    "@r8s/crds": "^0.2.0",
-    "@r8s/k8s-types": "^0.2.0",
-    "@r8s/recipes": "^0.2.0"
+    "@r8s/core": "^0.3.0",
+    "@r8s/crds": "^0.3.0",
+    "@r8s/k8s-types": "^0.3.0",
+    "@r8s/recipes": "^0.3.0"
   },
   "devDependencies": {
     "typescript": "^5.3.0",
     "vitest": "^1.0.0"
-  }
+  },
+  "files": [
+    "dist"
+  ]
 }