@supabase/lite 0.8.0 → 0.8.1-next.2

package/dist/static/.vite/manifest.json

@@ -1,11 +1,11 @@
 {
   "dev/vite/main.tsx": {
-    "file": "assets/main-DO_xnvTw.js",
+    "file": "assets/main-1bwWb_1q.js",
     "name": "main",
     "src": "dev/vite/main.tsx",
     "isEntry": true,
     "css": [
-      "assets/main-BITGMylP.css"
+      "assets/main-BDsRycsc.css"
     ]
   }
 }

package/dist/static/assets/{main-DO_xnvTw.js → main-1bwWb_1q.js}

@@ -28220,9 +28220,7 @@ function Studio({
             ),
             /* @__PURE__ */ jsxRuntimeExports.jsx(Button$1, { type: "dashed", className: "h-[28px] px-1.5", icon: /* @__PURE__ */ jsxRuntimeExports.jsx(Funnel, {}) })
           ] }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex flex-col grow gap-0", children: entities?.filter(
-            (entity) => entity.schema === selectedSchema || selectedSchema === "public" && entity.schema === ""
-          ).map((entity) => /* @__PURE__ */ jsxRuntimeExports.jsx(
+          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex flex-col grow gap-0", children: entities?.filter((entity) => entity.schema === selectedSchema).map((entity) => /* @__PURE__ */ jsxRuntimeExports.jsx(
             EntityListItem,
             {
               id: entityActiveId,
@@ -40342,15 +40340,82 @@ function shouldShowDeprecationWarning() {
   return parseInt(versionMatch[1], 10) <= 18;
 }
 if (shouldShowDeprecationWarning()) console.warn("⚠️  Node.js 18 and below are deprecated and will no longer be supported in future versions of @supabase/supabase-js. Please upgrade to Node.js 20 or later. For more information, visit: https://github.com/orgs/supabase/discussions/37217");
+const STRIPPED_HEADERS = ["apikey", "authorization"];
+function studioAuth(runtime) {
+  if (runtime.admin) {
+    return { mode: "admin", key: "...", fetch: keylessFetch };
+  }
+  if (runtime.publishableKey) {
+    return { mode: "restricted", key: runtime.publishableKey };
+  }
+  return {
+    mode: "unavailable",
+    reason: "Admin mode is off and no publishable key is configured, so studio has no credential it can use from the browser. Restart without --no-admin, or add auth.publishable_key (`lite generate-keys`)."
+  };
+}
+const keylessFetch = (input, init) => {
+  if (input instanceof Request) {
+    const request = new Request(input, init);
+    for (const name of STRIPPED_HEADERS) request.headers.delete(name);
+    return fetch(request);
+  }
+  const headers = new Headers(init?.headers);
+  for (const name of STRIPPED_HEADERS) headers.delete(name);
+  return fetch(input, { ...init, headers });
+};
 const StudioContext = reactExports.createContext({});
 function StudioProvider({
   children,
   baseUrl,
   anonKey
 }) {
-  const api = hc(baseUrl);
-  const client2 = createClient(baseUrl, anonKey ?? "...");
-  return /* @__PURE__ */ jsxRuntimeExports.jsx(StudioContext.Provider, { value: { api, client: client2 }, children });
+  const api = reactExports.useMemo(() => hc(baseUrl), [baseUrl]);
+  const [runtime, setRuntime] = reactExports.useState(null);
+  reactExports.useEffect(() => {
+    let cancelled = false;
+    void (async () => {
+      try {
+        const res = await fetch(`${baseUrl}/_system/info`);
+        const info = await res.json();
+        if (!cancelled) {
+          setRuntime({
+            admin: info.admin === true,
+            publishableKey: anonKey ?? info.config?.auth?.publishable_key
+          });
+        }
+      } catch {
+        if (!cancelled) setRuntime({ admin: false, publishableKey: anonKey });
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [baseUrl, anonKey]);
+  const value = reactExports.useMemo(() => {
+    if (!runtime) return null;
+    const auth = studioAuth(runtime);
+    if (auth.mode === "unavailable") return { unavailable: auth.reason };
+    const client2 = createClient(baseUrl, auth.key, {
+      ...auth.mode === "admin" ? { global: { fetch: auth.fetch } } : {},
+      // Studio shares an origin with the user's app under `lite dev`;
+      // picking their session out of localStorage would attach a user JWT
+      // and silently opt studio out of admin elevation.
+      auth: {
+        persistSession: false,
+        autoRefreshToken: false,
+        detectSessionInUrl: false
+      }
+    });
+    return { api, client: client2, restricted: auth.mode === "restricted" };
+  }, [api, baseUrl, runtime]);
+  if (!value) return null;
+  if ("unavailable" in value) {
+    return /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "mx-auto max-w-xl p-8 text-sm text-foreground-light", children: [
+      /* @__PURE__ */ jsxRuntimeExports.jsx("h1", { className: "pb-2 text-base text-foreground", children: "Studio is unavailable" }),
+      /* @__PURE__ */ jsxRuntimeExports.jsx("p", { children: value.unavailable })
+    ] });
+  }
+  return /* @__PURE__ */ jsxRuntimeExports.jsx(StudioContext.Provider, { value, children });
 }
 function useStudioContext() {
   return reactExports.useContext(StudioContext);
@@ -40358,13 +40423,24 @@ function useStudioContext() {
 async function getDbIntrospection(api) {
   return await api._system.introspect.$get().then((res) => res.json());
 }
+const DEFAULT_SCHEMA = "public";
+function normalizeIntrospection(raw) {
+  const out = { ...raw };
+  for (const [key, value] of Object.entries(raw)) {
+    if (!Array.isArray(value)) continue;
+    out[key] = value.map(
+      (item) => item && typeof item === "object" && "schema" in item && !item.schema ? { ...item, schema: DEFAULT_SCHEMA } : item
+    );
+  }
+  return out;
+}
 function useDbInfo() {
   const { api } = useStudioContext();
   const [raw, setRaw] = reactExports.useState(null);
   reactExports.useEffect(() => {
     (async () => {
       const res = await getDbIntrospection(api);
-      setRaw(res);
+      setRaw(normalizeIntrospection(res));
     })();
   }, []);
   return {
@@ -40372,7 +40448,7 @@ function useDbInfo() {
     entities: raw?.tables?.map((table, index2) => ({
       id: index2,
       name: table.name,
-      schema: table.schema ?? "public",
+      schema: table.schema,
       type: "r"
     }))
   };
@@ -40710,7 +40786,7 @@ function Impl() {
   const [selectedEntity, setSelectedEntity] = reactExports.useState(void 0);
   const [rows, setRows] = reactExports.useState([]);
   const [columns, setColumns] = reactExports.useState([]);
-  const { client: client2 } = useStudioContext();
+  const { client: client2, restricted } = useStudioContext();
   const [insertPanelOpen, setInsertPanelOpen] = reactExports.useState(false);
   const [insertLoading, setInsertLoading] = reactExports.useState(false);
   const [insertValues, setInsertValues] = reactExports.useState({});
@@ -40776,7 +40852,7 @@ function Impl() {
       window.alert("No entity selected, cannot insert row");
       return;
     }
-    const tableSchema = selectedEntity.schema ?? schema;
+    const tableSchema = selectedEntity.schema || schema;
     setInsertLoading(true);
     try {
       const { data, error } = await client2.schema(tableSchema).from(selectedEntity.name).insert(payload).select("*");
@@ -40817,9 +40893,7 @@ function Impl() {
       } else if (entity.includes(".")) {
         const [schema2, table] = entity.split(".");
         console.log("entities", entities);
-        setSelectedEntity(
-          entities?.find((e) => e.name === table && (e.schema === schema2 || e.schema === ""))
-        );
+        setSelectedEntity(entities?.find((e) => e.name === table && e.schema === schema2));
       } else if (raw.tables.some((t) => t.schema === "public")) {
         setSelectedEntity(entities?.find((e) => e.name === entity));
       }
@@ -40850,6 +40924,18 @@ function Impl() {
     Boolean
   );
   return /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
+    restricted && // Admin mode off → studio authenticates as `anon`, so RLS applies
+    // and rows/writes the policies hide will simply be missing. Say so,
+    // rather than letting it look like an empty or broken table.
+    /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "border-b border-amber-600/40 bg-amber-500/10 px-4 py-2 text-sm text-foreground-light", children: [
+      "Admin mode is off, so studio is connected with the publishable key and sees only what",
+      " ",
+      /* @__PURE__ */ jsxRuntimeExports.jsx("code", { className: "font-mono", children: "anon" }),
+      " may see under RLS. Restart without",
+      " ",
+      /* @__PURE__ */ jsxRuntimeExports.jsx("code", { className: "font-mono", children: "--no-admin" }),
+      " for full access."
+    ] }),
     /* @__PURE__ */ jsxRuntimeExports.jsx(
       SidePanel,
       {
@@ -40895,10 +40981,7 @@ function Impl() {
         onOpenInsertPanel: () => setInsertPanelOpen(true),
         onEntityClick: (entity2) => {
           setSelectedEntity(entity2);
-          const path = [
-            entity2.schema && entity2.schema.length > 0 ? entity2.schema : "public",
-            entity2.name
-          ].filter(Boolean).join(".");
+          const path = [entity2.schema, entity2.name].filter(Boolean).join(".");
           navigate2(`/${path}`);
         },
         schema,

package/dist/static/assets/{main-BITGMylP.css → main-BDsRycsc.css}

@@ -132,6 +132,8 @@
     --font-mono: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono",
       "Courier New", monospace;
     --color-red-500: oklch(63.7% .237 25.331);
+    --color-amber-500: oklch(76.9% .188 70.08);
+    --color-amber-600: oklch(66.6% .179 58.318);
     --color-amber-700: oklch(55.5% .163 48.998);
     --color-yellow-500: oklch(79.5% .184 86.047);
     --color-yellow-900: oklch(42.1% .095 57.708);
@@ -139,6 +141,7 @@
     --color-purple-500: oklch(62.7% .265 303.9);
     --spacing: .25rem;
     --container-md: 28rem;
+    --container-xl: 36rem;
     --container-2xl: 42rem;
     --container-3xl: 48rem;
     --container-4xl: 56rem;
@@ -653,6 +656,10 @@
     margin-inline: 2px;
   }
 
+  .mx-auto {
+    margin-inline: auto;
+  }
+
   .my-0\.5 {
     margin-block: calc(var(--spacing) * .5);
   }
@@ -1067,6 +1074,10 @@
     max-width: 100vw;
   }
 
+  .max-w-xl {
+    max-width: var(--container-xl);
+  }
+
   .min-w-0 {
     min-width: calc(var(--spacing) * 0);
   }
@@ -1361,6 +1372,16 @@
     border-style: dashed;
   }
 
+  .border-amber-600\/40 {
+    border-color: #dd740066;
+  }
+
+  @supports (color: color-mix(in lab, red, red)) {
+    .border-amber-600\/40 {
+      border-color: color-mix(in oklab, var(--color-amber-600) 40%, transparent);
+    }
+  }
+
   .border-border-default {
     border-color: var(--color-border-default);
   }
@@ -1419,6 +1440,16 @@
     background-color: var(--color-background-alternative);
   }
 
+  .bg-amber-500\/10 {
+    background-color: #f99c001a;
+  }
+
+  @supports (color: color-mix(in lab, red, red)) {
+    .bg-amber-500\/10 {
+      background-color: color-mix(in oklab, var(--color-amber-500) 10%, transparent);
+    }
+  }
+
   .bg-background {
     background-color: var(--color-background);
   }
@@ -1547,6 +1578,10 @@
     padding: calc(var(--spacing) * 4);
   }
 
+  .p-8 {
+    padding: calc(var(--spacing) * 8);
+  }
+
   .px-1 {
     padding-inline: calc(var(--spacing) * 1);
   }
@@ -1643,6 +1678,10 @@
     padding-right: calc(var(--spacing) * 7);
   }
 
+  .pb-2 {
+    padding-bottom: calc(var(--spacing) * 2);
+  }
+
   .pb-4 {
     padding-bottom: calc(var(--spacing) * 4);
   }