@selvajs/supabase-provider 0.11.0

package/dist/data/SupabaseDefinitionStore.js

@@ -0,0 +1,419 @@
+import { ProviderError, auditSoftDelete, actorFrom, NoopEventSink } from '@selvajs/platform';
+import { nextCursorFromRange, toRange } from './pagination.js';
+/**
+ * Definition metadata + version store backed by Postgres. Spec §6 versioning:
+ * `definitions` carries the parent record and the `live`/`draft` channel
+ * pointers; `definition_versions` carries the immutable per-upload rows.
+ *
+ * Deletion protection (§6) is enforced by FK constraints — `live_version_id`
+ * and `draft_version_id` are ON DELETE RESTRICT. Trying to delete a
+ * referenced version raises 23503 which `mapError` turns into a 409.
+ *
+ * `incrementSolveCount` uses a SQL function for atomic UPDATE — no
+ * read-modify-write race like the local provider has.
+ */
+export class SupabaseDefinitionStore {
+    clients;
+    events;
+    constructor(clients, events = new NoopEventSink()) {
+        this.clients = clients;
+        this.events = events;
+    }
+    // ============================================================================
+    // Definitions
+    // ============================================================================
+    async list(ctx, opts) {
+        return this.runList(ctx, undefined, opts);
+    }
+    async listByProject(ctx, projectId, opts) {
+        return this.runList(ctx, { projectId }, opts);
+    }
+    async listPublic(ctx, opts) {
+        return this.runList(ctx, { publicOnly: true, orgId: opts?.orgId }, opts);
+    }
+    async runList(ctx, filter, opts) {
+        const range = toRange(opts);
+        const direction = opts?.orderDir ?? 'desc';
+        let query = this.clients
+            .forRequest(ctx)
+            .from('definitions')
+            .select('*', { count: 'exact' })
+            .is('deleted_at', null);
+        if (filter?.projectId)
+            query = query.eq('project_id', filter.projectId);
+        if (filter?.publicOnly) {
+            query = this.clients
+                .forRequest(ctx)
+                .from('definitions')
+                .select('*, project:projects!inner(visibility, org_id)', {
+                count: 'exact'
+            })
+                .is('deleted_at', null)
+                .eq('project.visibility', 'public');
+            if (filter.orgId)
+                query = query.eq('project.org_id', filter.orgId);
+            if (filter.projectId)
+                query = query.eq('project_id', filter.projectId);
+        }
+        if (opts?.statuses?.length) {
+            query = query.in('status', opts.statuses);
+        }
+        else {
+            const excluded = [];
+            if (!opts?.includePending)
+                excluded.push('pending');
+            if (!opts?.includeArchived)
+                excluded.push('archived');
+            if (excluded.length) {
+                query = query.not('status', 'in', `(${excluded.join(',')})`);
+            }
+        }
+        query = query
+            .order(definitionOrderColumn(opts?.orderBy), { ascending: direction === 'asc' })
+            .range(range.from, range.to);
+        const { data, error, count } = await query;
+        if (error)
+            throw mapError(error);
+        const items = (data ?? []).map(rowToRecord);
+        return { items, nextCursor: nextCursorFromRange(range, items.length, count) };
+    }
+    async get(ctx, guid) {
+        const { data, error } = await this.clients
+            .forRequest(ctx)
+            .from('definitions')
+            .select('*')
+            .eq('guid', guid)
+            .is('deleted_at', null)
+            .maybeSingle();
+        if (error)
+            throw mapError(error);
+        return data ? rowToRecord(data) : null;
+    }
+    async create(ctx, record) {
+        const { error } = await this.clients
+            .forRequest(ctx)
+            .from('definitions')
+            .insert(recordToRow(record));
+        if (error)
+            throw mapError(error);
+        await this.events.emit({
+            type: 'definition.created',
+            definitionId: record.guid,
+            projectId: record.projectId,
+            actorId: actorFrom(ctx)
+        });
+    }
+    async update(ctx, guid, patch) {
+        const row = patchToRow(patch);
+        if (Object.keys(row).length === 0)
+            return;
+        if (ctx.userId)
+            row.updated_by = ctx.userId;
+        const { data, error } = await this.clients
+            .forRequest(ctx)
+            .from('definitions')
+            .update(row)
+            .eq('guid', guid)
+            .is('deleted_at', null)
+            .select('guid');
+        if (error)
+            throw mapError(error);
+        if (!data || data.length === 0)
+            throw new ProviderError(`Definition '${guid}' not found`, 404);
+    }
+    async delete(ctx, guid) {
+        // Soft-delete (matches the local provider and spec §9). A retention
+        // sweep running as service-role hard-deletes later, which cascades
+        // versions + share_links via FK.
+        const stamp = auditSoftDelete(ctx, ctx.userId);
+        const row = {
+            deleted_at: stamp.deletedAt,
+            updated_at: stamp.updatedAt
+        };
+        if (stamp.updatedBy)
+            row.updated_by = stamp.updatedBy;
+        const { error } = await this.clients
+            .forRequest(ctx)
+            .from('definitions')
+            .update(row)
+            .eq('guid', guid)
+            .is('deleted_at', null);
+        if (error)
+            throw mapError(error);
+        await this.events.emit({
+            type: 'definition.deleted',
+            definitionId: guid,
+            actorId: actorFrom(ctx)
+        });
+    }
+    async incrementSolveCount(ctx, guid) {
+        const { error } = await this.clients.forRequest(ctx).rpc('increment_run_count', { g: guid });
+        if (error)
+            throw mapError(error);
+    }
+    // ============================================================================
+    // Versions (spec §6)
+    // ============================================================================
+    async createVersion(ctx, version) {
+        const { error } = await this.clients
+            .forRequest(ctx)
+            .from('definition_versions')
+            .insert(versionToRow(version));
+        if (error)
+            throw mapError(error);
+        await this.events.emit({
+            type: 'definition_version.created',
+            versionId: version.id,
+            definitionId: version.definitionId,
+            actorId: actorFrom(ctx)
+        });
+    }
+    async listVersions(ctx, definitionId, opts) {
+        const range = toRange(opts);
+        const { data, error, count } = await this.clients
+            .forRequest(ctx)
+            .from('definition_versions')
+            .select('*', { count: 'exact' })
+            .eq('definition_guid', definitionId)
+            .order('version_number', { ascending: false })
+            .range(range.from, range.to);
+        if (error)
+            throw mapError(error);
+        const items = (data ?? []).map(rowToVersion);
+        return { items, nextCursor: nextCursorFromRange(range, items.length, count) };
+    }
+    async getVersion(ctx, versionId) {
+        const { data, error } = await this.clients
+            .forRequest(ctx)
+            .from('definition_versions')
+            .select('*')
+            .eq('id', versionId)
+            .maybeSingle();
+        if (error)
+            throw mapError(error);
+        return data ? rowToVersion(data) : null;
+    }
+    async deleteVersion(ctx, versionId) {
+        // FK enforcement at the DB layer: live_version_id / draft_version_id
+        // are ON DELETE RESTRICT. If the version is referenced by either
+        // channel, Postgres raises 23503 → mapError → ProviderError(409).
+        const { error } = await this.clients
+            .forRequest(ctx)
+            .from('definition_versions')
+            .delete()
+            .eq('id', versionId);
+        if (error)
+            throw mapError(error);
+        await this.events.emit({
+            type: 'definition_version.deleted',
+            versionId,
+            actorId: actorFrom(ctx)
+        });
+    }
+    async setLiveVersion(ctx, definitionId, versionId) {
+        await this.repointChannel(ctx, definitionId, versionId, 'live_version_id');
+        // Only `live` advancement is the published-event trigger. Draft
+        // repointing is the editor's working pointer, not a publication signal.
+        await this.events.emit({
+            type: 'definition.published',
+            definitionId,
+            versionId,
+            actorId: actorFrom(ctx)
+        });
+    }
+    async setDraftVersion(ctx, definitionId, versionId) {
+        await this.repointChannel(ctx, definitionId, versionId, 'draft_version_id');
+    }
+    async attachInitialVersion(ctx, definitionId, versionId) {
+        const client = this.clients.forRequest(ctx);
+        // Validate the version belongs to this definition before repointing —
+        // matches `repointChannel` so the bootstrap surface enforces the same
+        // invariant.
+        const { data: version, error: vError } = await client
+            .from('definition_versions')
+            .select('id, definition_guid')
+            .eq('id', versionId)
+            .maybeSingle();
+        if (vError)
+            throw mapError(vError);
+        if (!version || version.definition_guid !== definitionId) {
+            throw new ProviderError(`Version '${versionId}' not found for this definition`, 404);
+        }
+        // Single UPDATE — both channel pointers and status flip in one row
+        // write, so a mid-flight failure can't leave a half-promoted record.
+        const row = {
+            live_version_id: versionId,
+            draft_version_id: versionId,
+            status: 'draft'
+        };
+        if (ctx.userId)
+            row.updated_by = ctx.userId;
+        const { data, error } = await client
+            .from('definitions')
+            .update(row)
+            .eq('guid', definitionId)
+            .is('deleted_at', null)
+            .select('guid');
+        if (error)
+            throw mapError(error);
+        if (!data || data.length === 0) {
+            throw new ProviderError(`Definition '${definitionId}' not found`, 404);
+        }
+        // No `definition.published` event — see interface doc.
+    }
+    async repointChannel(ctx, definitionId, versionId, column) {
+        const client = this.clients.forRequest(ctx);
+        // Validate the version belongs to this definition before repointing.
+        const { data: version, error: vError } = await client
+            .from('definition_versions')
+            .select('id, definition_guid')
+            .eq('id', versionId)
+            .maybeSingle();
+        if (vError)
+            throw mapError(vError);
+        if (!version || version.definition_guid !== definitionId) {
+            throw new ProviderError(`Version '${versionId}' not found for this definition`, 404);
+        }
+        const row = { [column]: versionId };
+        if (ctx.userId)
+            row.updated_by = ctx.userId;
+        const { data, error } = await client
+            .from('definitions')
+            .update(row)
+            .eq('guid', definitionId)
+            .is('deleted_at', null)
+            .select('guid');
+        if (error)
+            throw mapError(error);
+        if (!data || data.length === 0) {
+            throw new ProviderError(`Definition '${definitionId}' not found`, 404);
+        }
+    }
+}
+function rowToRecord(row) {
+    return {
+        guid: row.guid,
+        projectId: row.project_id,
+        ownerId: row.owner_id,
+        createdBy: row.created_by ?? row.owner_id,
+        updatedBy: row.updated_by ?? row.owner_id,
+        liveVersionId: row.live_version_id,
+        draftVersionId: row.draft_version_id,
+        computeServerId: row.compute_server_id ?? undefined,
+        displayName: row.display_name,
+        description: row.description ?? undefined,
+        category: row.category ?? undefined,
+        tags: row.tags ?? undefined,
+        coverImage: row.cover_image ?? undefined,
+        status: row.status,
+        solveCount: typeof row.run_count === 'string' ? Number(row.run_count) : row.run_count,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+        deletedAt: row.deleted_at ?? null
+    };
+}
+function recordToRow(r) {
+    const row = {
+        guid: r.guid,
+        project_id: r.projectId,
+        owner_id: r.ownerId,
+        created_by: r.createdBy,
+        updated_by: r.updatedBy,
+        live_version_id: r.liveVersionId,
+        draft_version_id: r.draftVersionId,
+        compute_server_id: r.computeServerId ?? null,
+        display_name: r.displayName,
+        description: r.description ?? null,
+        category: r.category ?? null,
+        cover_image: r.coverImage ?? null,
+        status: r.status,
+        run_count: r.solveCount,
+        created_at: r.createdAt,
+        updated_at: r.updatedAt,
+        deleted_at: r.deletedAt ?? null
+    };
+    if (r.tags !== undefined)
+        row.tags = r.tags;
+    return row;
+}
+function patchToRow(patch) {
+    const row = {};
+    if (patch.displayName !== undefined)
+        row.display_name = patch.displayName;
+    if (patch.description !== undefined)
+        row.description = patch.description;
+    if (patch.category !== undefined)
+        row.category = patch.category;
+    if (patch.tags !== undefined)
+        row.tags = patch.tags;
+    if (patch.coverImage !== undefined)
+        row.cover_image = patch.coverImage;
+    if (patch.projectId !== undefined)
+        row.project_id = patch.projectId;
+    if (patch.computeServerId !== undefined)
+        row.compute_server_id = patch.computeServerId;
+    if (patch.status !== undefined)
+        row.status = patch.status;
+    if (patch.ownerId !== undefined)
+        row.owner_id = patch.ownerId;
+    return row;
+}
+function rowToVersion(row) {
+    return {
+        id: row.id,
+        definitionId: row.definition_guid,
+        versionNumber: row.version_number,
+        fileExt: row.file_ext,
+        fileKey: row.file_key,
+        originalFilename: row.original_filename ?? undefined,
+        uploadedBy: row.uploaded_by,
+        uploadedAt: row.uploaded_at,
+        changeNote: row.change_note ?? undefined
+    };
+}
+function versionToRow(v) {
+    const row = {
+        id: v.id,
+        definition_guid: v.definitionId,
+        version_number: v.versionNumber,
+        file_ext: v.fileExt,
+        file_key: v.fileKey,
+        original_filename: v.originalFilename ?? null,
+        uploaded_by: v.uploadedBy,
+        uploaded_at: v.uploadedAt
+    };
+    if (v.changeNote !== undefined)
+        row.change_note = v.changeNote;
+    return row;
+}
+function definitionOrderColumn(orderBy) {
+    switch (orderBy) {
+        case 'name':
+            return 'display_name';
+        case 'solveCount':
+            return 'run_count';
+        case 'updatedAt':
+            return 'updated_at';
+        case 'createdAt':
+        default:
+            return 'created_at';
+    }
+}
+function mapError(e) {
+    const pg = e;
+    if (pg?.code === '23505')
+        return new ProviderError(pg.message ?? 'Duplicate record', 409);
+    if (pg?.code === '23503')
+        return new ProviderError(pg.message ?? 'Foreign key violation', 409);
+    if (e instanceof Error)
+        return e;
+    if (e && typeof e === 'object') {
+        const obj = e;
+        const msg = obj.message ?? obj.details ?? obj.hint ?? 'Unknown Postgres error';
+        const err = new Error(obj.code ? `[${obj.code}] ${msg}` : msg);
+        Object.assign(err, obj);
+        return err;
+    }
+    return new Error(String(e));
+}
+//# sourceMappingURL=SupabaseDefinitionStore.js.map

package/dist/data/SupabaseDefinitionStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupabaseDefinitionStore.js","sourceRoot":"","sources":["../../src/data/SupabaseDefinitionStore.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAE7F,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE/D;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,uBAAuB;IAIjB;IAHD,MAAM,CAAa;IAEpC,YACkB,OAAqB,EACtC,SAAqB,IAAI,aAAa,EAAE;QADvB,YAAO,GAAP,OAAO,CAAc;QAGtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,+EAA+E;IAC/E,cAAc;IACd,+EAA+E;IAE/E,KAAK,CAAC,IAAI,CAAC,GAAmB,EAAE,IAA4B;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,aAAa,CAClB,GAAmB,EACnB,SAAiB,EACjB,IAA4B;QAE5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,UAAU,CACf,GAAmB,EACnB,IAAiD;QAEjD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAEO,KAAK,CAAC,OAAO,CACpB,GAAmB,EACnB,MAAgF,EAChF,IAA4B;QAE5B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,EAAE,QAAQ,IAAI,MAAM,CAAC;QAE3C,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO;aACtB,UAAU,CAAC,GAAG,CAAC;aACf,IAAI,CAAC,aAAa,CAAC;aACnB,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;aAC/B,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAEzB,IAAI,MAAM,EAAE,SAAS;YAAE,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAExE,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;YACxB,KAAK,GAAG,IAAI,CAAC,OAAO;iBAClB,UAAU,CAAC,GAAG,CAAC;iBACf,IAAI,CAAC,aAAa,CAAC;iBACnB,MAAM,CAAC,+CAA+C,EAAE;gBACxD,KAAK,EAAE,OAAO;aACd,CAAC;iBACD,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC;iBACtB,EAAE,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YACrC,IAAI,MAAM,CAAC,KAAK;gBAAE,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,MAAM,CAAC,SAAS;gBAAE,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACP,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,EAAE,cAAc;gBAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,EAAE,eAAe;gBAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACrB,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9D,CAAC;QACF,CAAC;QAED,KAAK,GAAG,KAAK;aACX,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,KAAK,KAAK,EAAE,CAAC;aAC/E,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAE9B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC;QAC3C,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAmB,EAAE,IAAY;QAC1C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO;aACxC,UAAU,CAAC,GAAG,CAAC;aACf,IAAI,CAAC,aAAa,CAAC;aACnB,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;aAChB,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC;aACtB,WAAW,EAAE,CAAC;QAChB,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,MAAwB;QACzD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO;aAClC,UAAU,CAAC,GAAG,CAAC;aACf,IAAI,CAAC,aAAa,CAAC;aACnB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9B,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,oBAAoB;YAC1B,YAAY,EAAE,MAAM,CAAC,IAAI;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC;SACvB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,IAAY,EAAE,KAA4B;QAC3E,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,GAAG,CAAC,MAAM;YAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;QAE5C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO;aACxC,UAAU,CAAC,GAAG,CAAC;aACf,IAAI,CAAC,aAAa,CAAC;aACnB,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;aAChB,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC,CAAC;QACjB,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,eAAe,IAAI,aAAa,EAAE,GAAG,CAAC,CAAC;IAChG,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,IAAY;QAC7C,oEAAoE;QACpE,mEAAmE;QACnE,iCAAiC;QACjC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,GAAG,GAA4B;YACpC,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,UAAU,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;QACF,IAAI,KAAK,CAAC,SAAS;YAAE,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QACtD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO;aAClC,UAAU,CAAC,GAAG,CAAC;aACf,IAAI,CAAC,aAAa,CAAC;aACnB,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;aAChB,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,oBAAoB;YAC1B,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC;SACvB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAmB,EAAE,IAAY;QAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7F,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,+EAA+E;IAC/E,qBAAqB;IACrB,+EAA+E;IAE/E,KAAK,CAAC,aAAa,CAAC,GAAmB,EAAE,OAA0B;QAClE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO;aAClC,UAAU,CAAC,GAAG,CAAC;aACf,IAAI,CAAC,qBAAqB,CAAC;aAC3B,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,4BAA4B;YAClC,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC;SACvB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CACjB,GAAmB,EACnB,YAAoB,EACpB,IAAkB;QAElB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO;aAC/C,UAAU,CAAC,GAAG,CAAC;aACf,IAAI,CAAC,qBAAqB,CAAC;aAC3B,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;aAC/B,EAAE,CAAC,iBAAiB,EAAE,YAAY,CAAC;aACnC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;aAC7C,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAmB,EAAE,SAAiB;QACtD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO;aACxC,UAAU,CAAC,GAAG,CAAC;aACf,IAAI,CAAC,qBAAqB,CAAC;aAC3B,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;aACnB,WAAW,EAAE,CAAC;QAChB,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAmB,EAAE,SAAiB;QACzD,qEAAqE;QACrE,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO;aAClC,UAAU,CAAC,GAAG,CAAC;aACf,IAAI,CAAC,qBAAqB,CAAC;aAC3B,MAAM,EAAE;aACR,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACtB,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,4BAA4B;YAClC,SAAS;YACT,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC;SACvB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,GAAmB,EACnB,YAAoB,EACpB,SAAiB;QAEjB,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAC3E,gEAAgE;QAChE,wEAAwE;QACxE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,sBAAsB;YAC5B,YAAY;YACZ,SAAS;YACT,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC;SACvB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CACpB,GAAmB,EACnB,YAAoB,EACpB,SAAiB;QAEjB,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,oBAAoB,CACzB,GAAmB,EACnB,YAAoB,EACpB,SAAiB;QAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5C,sEAAsE;QACtE,sEAAsE;QACtE,aAAa;QACb,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM;aACnD,IAAI,CAAC,qBAAqB,CAAC;aAC3B,MAAM,CAAC,qBAAqB,CAAC;aAC7B,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;aACnB,WAAW,EAAE,CAAC;QAChB,IAAI,MAAM;YAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,eAAe,KAAK,YAAY,EAAE,CAAC;YAC1D,MAAM,IAAI,aAAa,CAAC,YAAY,SAAS,iCAAiC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,mEAAmE;QACnE,qEAAqE;QACrE,MAAM,GAAG,GAA4B;YACpC,eAAe,EAAE,SAAS;YAC1B,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,OAAO;SACf,CAAC;QACF,IAAI,GAAG,CAAC,MAAM;YAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;QAE5C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM;aAClC,IAAI,CAAC,aAAa,CAAC;aACnB,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;aACxB,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC,CAAC;QACjB,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,aAAa,CAAC,eAAe,YAAY,aAAa,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,uDAAuD;IACxD,CAAC;IAEO,KAAK,CAAC,cAAc,CAC3B,GAAmB,EACnB,YAAoB,EACpB,SAAiB,EACjB,MAA8C;QAE9C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5C,qEAAqE;QACrE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM;aACnD,IAAI,CAAC,qBAAqB,CAAC;aAC3B,MAAM,CAAC,qBAAqB,CAAC;aAC7B,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;aACnB,WAAW,EAAE,CAAC;QAChB,IAAI,MAAM;YAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,eAAe,KAAK,YAAY,EAAE,CAAC;YAC1D,MAAM,IAAI,aAAa,CAAC,YAAY,SAAS,iCAAiC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,GAAG,GAA4B,EAAE,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;QAC7D,IAAI,GAAG,CAAC,MAAM;YAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;QAC5C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM;aAClC,IAAI,CAAC,aAAa,CAAC;aACnB,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;aACxB,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC,CAAC;QACjB,IAAI,KAAK;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,aAAa,CAAC,eAAe,YAAY,aAAa,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;IACF,CAAC;CACD;AAsCD,SAAS,WAAW,CAAC,GAAkB;IACtC,OAAO;QACN,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ;QACzC,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ;QACzC,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,eAAe,EAAE,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACnD,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACzC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;QACnC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;QAC3B,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;QACxC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS;QACrF,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;KACjC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAAmB;IACvC,MAAM,GAAG,GAA4B;QACpC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,QAAQ,EAAE,CAAC,CAAC,OAAO;QACnB,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,eAAe,EAAE,CAAC,CAAC,aAAa;QAChC,gBAAgB,EAAE,CAAC,CAAC,cAAc;QAClC,iBAAiB,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;QAC5C,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;QAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;QAC5B,WAAW,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;KAC/B,CAAC;IACF,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5C,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,KAA4B;IAC/C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC;IAC1E,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACzE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACpD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;IACvE,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;IACpE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;QAAE,GAAG,CAAC,iBAAiB,GAAG,KAAK,CAAC,eAAe,CAAC;IACvF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC1D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9D,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,GAAyB;IAC9C,OAAO;QACN,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,YAAY,EAAE,GAAG,CAAC,eAAe;QACjC,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,gBAAgB,EAAE,GAAG,CAAC,iBAAiB,IAAI,SAAS;QACpD,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;KACxC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAoB;IACzC,MAAM,GAAG,GAA4B;QACpC,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,eAAe,EAAE,CAAC,CAAC,YAAY;QAC/B,cAAc,EAAE,CAAC,CAAC,aAAa;QAC/B,QAAQ,EAAE,CAAC,CAAC,OAAO;QACnB,QAAQ,EAAE,CAAC,CAAC,OAAO;QACnB,iBAAiB,EAAE,CAAC,CAAC,gBAAgB,IAAI,IAAI;QAC7C,WAAW,EAAE,CAAC,CAAC,UAAU;QACzB,WAAW,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC;IACF,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,UAAU,CAAC;IAC/D,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAqD;IACnF,QAAQ,OAAO,EAAE,CAAC;QACjB,KAAK,MAAM;YACV,OAAO,cAAc,CAAC;QACvB,KAAK,YAAY;YAChB,OAAO,WAAW,CAAC;QACpB,KAAK,WAAW;YACf,OAAO,YAAY,CAAC;QACrB,KAAK,WAAW,CAAC;QACjB;YACC,OAAO,YAAY,CAAC;IACtB,CAAC;AACF,CAAC;AAOD,SAAS,QAAQ,CAAC,CAAU;IAC3B,MAAM,EAAE,GAAG,CAAmB,CAAC;IAC/B,IAAI,EAAE,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,aAAa,CAAC,EAAE,CAAC,OAAO,IAAI,kBAAkB,EAAE,GAAG,CAAC,CAAC;IAC1F,IAAI,EAAE,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,aAAa,CAAC,EAAE,CAAC,OAAO,IAAI,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC/F,IAAI,CAAC,YAAY,KAAK;QAAE,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,CAAyE,CAAC;QACtF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,wBAAwB,CAAC;QAC/E,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxB,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC"}

package/dist/data/SupabaseEventSink.d.ts

@@ -0,0 +1,17 @@
+import type { DomainEvent, IEventSink } from '@selvajs/platform';
+import type { ClientBundle } from './client.js';
+/**
+ * Persists every domain event to `public.audit_events`. Writes use the
+ * service-role client so RLS does not gate the audit trail — the sink runs
+ * as a system process attached to whichever store emitted the event.
+ *
+ * Per the `IEventSink` contract, `emit` MUST NOT throw. The user-facing
+ * mutation has already succeeded by the time we're here; a failed audit
+ * write is logged and swallowed so the response still completes.
+ */
+export declare class SupabaseEventSink implements IEventSink {
+    private readonly clients;
+    constructor(clients: ClientBundle);
+    emit(event: DomainEvent): Promise<void>;
+}
+//# sourceMappingURL=SupabaseEventSink.d.ts.map

package/dist/data/SupabaseEventSink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupabaseEventSink.d.ts","sourceRoot":"","sources":["../../src/data/SupabaseEventSink.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;;;;GAQG;AACH,qBAAa,iBAAkB,YAAW,UAAU;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,YAAY;IAE5C,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAc7C"}

package/dist/data/SupabaseEventSink.js

@@ -0,0 +1,31 @@
+/**
+ * Persists every domain event to `public.audit_events`. Writes use the
+ * service-role client so RLS does not gate the audit trail — the sink runs
+ * as a system process attached to whichever store emitted the event.
+ *
+ * Per the `IEventSink` contract, `emit` MUST NOT throw. The user-facing
+ * mutation has already succeeded by the time we're here; a failed audit
+ * write is logged and swallowed so the response still completes.
+ */
+export class SupabaseEventSink {
+    clients;
+    constructor(clients) {
+        this.clients = clients;
+    }
+    async emit(event) {
+        try {
+            const { error } = await this.clients.serviceClient.from('audit_events').insert({
+                type: event.type,
+                actor_id: event.actorId,
+                data: event
+            });
+            if (error) {
+                console.error('[SupabaseEventSink] insert failed:', error.message, { event });
+            }
+        }
+        catch (err) {
+            console.error('[SupabaseEventSink] unexpected error:', err, { event });
+        }
+    }
+}
+//# sourceMappingURL=SupabaseEventSink.js.map

package/dist/data/SupabaseEventSink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupabaseEventSink.js","sourceRoot":"","sources":["../../src/data/SupabaseEventSink.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAiB;IACA;IAA7B,YAA6B,OAAqB;QAArB,YAAO,GAAP,OAAO,CAAc;IAAG,CAAC;IAEtD,KAAK,CAAC,IAAI,CAAC,KAAkB;QAC5B,IAAI,CAAC;YACJ,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;gBAC9E,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,OAAO;gBACvB,IAAI,EAAE,KAAK;aACX,CAAC,CAAC;YACH,IAAI,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;IACF,CAAC;CACD"}

package/dist/data/SupabaseInviteStore.d.ts

@@ -0,0 +1,22 @@
+import type { IInviteStore, IEventSink, Invite, RequestContext, ListOptions, Page } from '@selvajs/platform';
+import type { ClientBundle } from './client.js';
+/**
+ * Invite store. `getByTokenHash` routes through a SECURITY DEFINER RPC so
+ * unauthenticated / just-signed-up callers can validate and consume the
+ * invite without RLS blocking them. The raw token is hashed at the route
+ * layer (the selva app's `invites/token.server.ts`); the store sees only the
+ * HMAC digest. Other operations (create, list, revoke) go through the normal
+ * REST API with RLS enforcing `manage_org_members`.
+ */
+export declare class SupabaseInviteStore implements IInviteStore {
+    private readonly clients;
+    private readonly events;
+    constructor(clients: ClientBundle, events?: IEventSink);
+    create(ctx: RequestContext, invite: Invite): Promise<void>;
+    getByTokenHash(ctx: RequestContext, tokenHash: string): Promise<Invite | null>;
+    listByOrg(ctx: RequestContext, orgId: string, opts?: ListOptions): Promise<Page<Invite>>;
+    markAccepted(ctx: RequestContext, id: string, userId: string): Promise<void>;
+    revoke(ctx: RequestContext, id: string): Promise<void>;
+    deleteByOrg(ctx: RequestContext, orgId: string): Promise<void>;
+}
+//# sourceMappingURL=SupabaseInviteStore.d.ts.map

package/dist/data/SupabaseInviteStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SupabaseInviteStore.d.ts","sourceRoot":"","sources":["../../src/data/SupabaseInviteStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,YAAY,EACZ,UAAU,EACV,MAAM,EACN,cAAc,EACd,WAAW,EACX,IAAI,EACJ,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD;;;;;;;GAOG;AACH,qBAAa,mBAAoB,YAAW,YAAY;IAEtD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,YAAY,EACrB,MAAM,GAAE,UAAgC;IAGpD,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe1D,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAe9E,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAcxF,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsB5E,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBtD,WAAW,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQpE"}