better-convex 0.6.1 → 0.6.3

package/dist/auth/index.d.ts

@@ -1,6 +1,6 @@
 import { t as GenericCtx } from "../context-utils-DSuX99Da.js";
 import { convex } from "@convex-dev/better-auth/plugins";
-import * as better_auth_adapters0 from "better-auth/adapters";
+import * as better_auth_adapters1 from "better-auth/adapters";
 import { DBAdapterDebugLogOption } from "better-auth/adapters";
 import { BetterAuthDBSchema } from "better-auth/db";
 import * as convex_server24 from "convex/server";
@@ -45,19 +45,19 @@ declare const createClient: <DataModel extends GenericDataModel, Schema extends
 }) => {
   authFunctions: AuthFunctions;
   triggers: Triggers<DataModel, Schema, TriggerCtx> | undefined;
-  adapter: (ctx: GenericCtx<DataModel>, getAuthOptions: (ctx: any) => BetterAuthOptions) => better_auth_adapters0.AdapterFactory;
+  adapter: (ctx: GenericCtx<DataModel>, getAuthOptions: (ctx: any) => BetterAuthOptions) => better_auth_adapters1.AdapterFactory;
   triggersApi: () => {
     beforeCreate: convex_server24.RegisteredMutation<"internal", {
-      model: string;
       data: any;
+      model: string;
     }, Promise<any>>;
     beforeDelete: convex_server24.RegisteredMutation<"internal", {
       model: string;
       doc: any;
     }, Promise<any>>;
     beforeUpdate: convex_server24.RegisteredMutation<"internal", {
-      model: string;
       update: any;
+      model: string;
       doc: any;
     }, Promise<any>>;
     onCreate: convex_server24.RegisteredMutation<"internal", {
@@ -150,7 +150,7 @@ declare const httpAdapter: <DataModel extends GenericDataModel, Schema extends S
   debugLogs?: DBAdapterDebugLogOption;
   schema?: Schema;
   triggers?: Triggers<DataModel, Schema>;
-}) => better_auth_adapters0.AdapterFactory;
+}) => better_auth_adapters1.AdapterFactory;
 declare const dbAdapter: <DataModel extends GenericDataModel, Schema extends SchemaDefinition<any, any>>(ctx: GenericCtx<DataModel>, getAuthOptions: (ctx: any) => BetterAuthOptions, {
   authFunctions,
   debugLogs,
@@ -161,7 +161,7 @@ declare const dbAdapter: <DataModel extends GenericDataModel, Schema extends Sch
   schema: Schema;
   debugLogs?: DBAdapterDebugLogOption;
   triggers?: Triggers<DataModel, Schema>;
-}) => better_auth_adapters0.AdapterFactory;
+}) => better_auth_adapters1.AdapterFactory;
 //#endregion
 //#region src/auth/adapter-utils.d.ts
 type AdapterPaginationOptions = PaginationOptions & {
@@ -181,8 +181,8 @@ declare const adapterWhereValidator: convex_values0.VObject<{
 }, "required", "connector" | "field" | "operator" | "value">;
 declare const adapterArgsValidator: convex_values0.VObject<{
   limit?: number | undefined;
-  offset?: number | undefined;
   select?: string[] | undefined;
+  offset?: number | undefined;
   sortBy?: {
     field: string;
     direction: "asc" | "desc";
@@ -222,7 +222,7 @@ declare const adapterArgsValidator: convex_values0.VObject<{
     operator: convex_values0.VUnion<"lt" | "lte" | "gt" | "gte" | "eq" | "in" | "not_in" | "ne" | "contains" | "starts_with" | "ends_with" | undefined, [convex_values0.VLiteral<"lt", "required">, convex_values0.VLiteral<"lte", "required">, convex_values0.VLiteral<"gt", "required">, convex_values0.VLiteral<"gte", "required">, convex_values0.VLiteral<"eq", "required">, convex_values0.VLiteral<"in", "required">, convex_values0.VLiteral<"not_in", "required">, convex_values0.VLiteral<"ne", "required">, convex_values0.VLiteral<"contains", "required">, convex_values0.VLiteral<"starts_with", "required">, convex_values0.VLiteral<"ends_with", "required">], "optional", never>;
     value: convex_values0.VUnion<string | number | boolean | string[] | number[] | null, [convex_values0.VString<string, "required">, convex_values0.VFloat64<number, "required">, convex_values0.VBoolean<boolean, "required">, convex_values0.VArray<string[], convex_values0.VString<string, "required">, "required">, convex_values0.VArray<number[], convex_values0.VFloat64<number, "required">, "required">, convex_values0.VNull<null, "required">], "required", never>;
   }, "required", "connector" | "field" | "operator" | "value">, "optional">;
-}, "required", "limit" | "model" | "offset" | "select" | "sortBy" | "where" | "sortBy.field" | "sortBy.direction">;
+}, "required", "limit" | "model" | "select" | "offset" | "sortBy" | "where" | "sortBy.field" | "sortBy.direction">;
 declare const hasUniqueFields: (betterAuthSchema: BetterAuthDBSchema, model: string, input: Record<string, any>) => boolean;
 declare const checkUniqueFields: <Schema extends SchemaDefinition<any, any>>(ctx: GenericQueryCtx<GenericDataModel>, schema: Schema, betterAuthSchema: BetterAuthDBSchema, table: string, input: Record<string, any>, doc?: Record<string, any>) => Promise<void>;
 declare const selectFields: <T extends TableNamesInDataModel<GenericDataModel>, D extends DocumentByName<GenericDataModel, T>>(doc: D | null, select?: string[]) => Promise<D | null>;
@@ -324,15 +324,15 @@ declare const createApi: <Schema extends SchemaDefinition<any, any>>(schema: Sch
     beforeCreateHandle?: string | undefined;
     onCreateHandle?: string | undefined;
     input: {
-      model: string;
       data: any;
-    } | {
       model: string;
+    } | {
       data: {
         [x: string]: unknown;
         [x: number]: unknown;
         [x: symbol]: unknown;
       };
+      model: string;
     };
   }, Promise<any>>;
   deleteMany: convex_server24.RegisteredMutation<"internal", {
@@ -383,8 +383,8 @@ declare const createApi: <Schema extends SchemaDefinition<any, any>>(schema: Sch
     };
   }, Promise<convex_server24.GenericDocument | undefined>>;
   findMany: convex_server24.RegisteredQuery<"internal", {
-    join?: any;
     limit?: number | undefined;
+    join?: any;
     offset?: number | undefined;
     sortBy?: {
       field: string;
@@ -396,7 +396,6 @@ declare const createApi: <Schema extends SchemaDefinition<any, any>>(schema: Sch
       field: string;
       value: string | number | boolean | string[] | number[] | null;
     }[] | undefined;
-    model: string;
     paginationOpts: {
       id?: number;
       endCursor?: string | null;
@@ -405,6 +404,7 @@ declare const createApi: <Schema extends SchemaDefinition<any, any>>(schema: Sch
       numItems: number;
       cursor: string | null;
     };
+    model: string;
   }, Promise<convex_server24.PaginationResult<convex_server24.GenericDocument>>>;
   findOne: convex_server24.RegisteredQuery<"internal", {
     join?: any;
@@ -430,8 +430,8 @@ declare const createApi: <Schema extends SchemaDefinition<any, any>>(schema: Sch
     };
     input: {
       where?: any[] | undefined;
-      model: string;
       update: any;
+      model: string;
     } | {
       where?: {
         connector?: "AND" | "OR" | undefined;
@@ -439,12 +439,12 @@ declare const createApi: <Schema extends SchemaDefinition<any, any>>(schema: Sch
         field: string;
         value: string | number | boolean | string[] | number[] | null;
       }[] | undefined;
-      model: string;
       update: {
         [x: string]: unknown;
         [x: number]: unknown;
         [x: symbol]: unknown;
       };
+      model: string;
     };
   }, Promise<{
     count: number;
@@ -459,8 +459,8 @@ declare const createApi: <Schema extends SchemaDefinition<any, any>>(schema: Sch
     onUpdateHandle?: string | undefined;
     input: {
       where?: any[] | undefined;
-      model: string;
       update: any;
+      model: string;
     } | {
       where?: {
         connector?: "AND" | "OR" | undefined;
@@ -468,12 +468,12 @@ declare const createApi: <Schema extends SchemaDefinition<any, any>>(schema: Sch
         field: string;
         value: string | number | boolean | string[] | number[] | null;
       }[] | undefined;
-      model: string;
       update: {
         [x: string]: unknown;
         [x: number]: unknown;
         [x: symbol]: unknown;
       };
+      model: string;
     };
   }, Promise<any>>;
   getLatestJwks: convex_server24.RegisteredAction<"internal", {}, Promise<any>>;

package/dist/auth/index.js

@@ -1,5 +1,5 @@
 import { a as partial, h as asyncMap, l as isQueryCtx, n as customCtx, r as customMutation, u as isRunMutationCtx } from "../customFunctions-C1okqCzL.js";
-import { C as stream, D as unsetToken, L as eq, S as mergedStream } from "../orm-Banm-XXb.js";
+import { C as stream, D as unsetToken, L as eq, S as mergedStream } from "../orm-CleikBIV.js";
 import { convex } from "@convex-dev/better-auth/plugins";
 import { createAdapterFactory } from "better-auth/adapters";
 import { getAuthTables } from "better-auth/db";
@@ -1098,6 +1098,29 @@ const getHeaders = async (ctx, session) => {
 	});
 };
 
+//#endregion
+//#region src/auth/error-response.ts
+const isApiErrorLike = (error) => !!error && typeof error === "object" && (error.name === "APIError" && "statusCode" in error || typeof error.statusCode === "number");
+const toResponseInit = (error) => {
+	const init = {
+		headers: new Headers(error.headers ?? {}),
+		status: typeof error.statusCode === "number" ? error.statusCode : 500
+	};
+	if (typeof error.status === "string") init.statusText = error.status;
+	return init;
+};
+const toAuthErrorResponse = (error) => {
+	if (!isApiErrorLike(error)) return null;
+	const init = toResponseInit(error);
+	const { body } = error;
+	if (body === void 0) return new Response(null, init);
+	if (typeof body === "string") {
+		if (init.headers instanceof Headers && !init.headers.has("content-type")) init.headers.set("content-type", "text/plain");
+		return new Response(body, init);
+	}
+	return Response.json(body, init);
+};
+
 //#endregion
 //#region src/auth/middleware.ts
 /**
@@ -1123,7 +1146,15 @@ function authMiddleware(getAuth, opts = {}) {
 		if (c.req.path === "/.well-known/openid-configuration") return c.redirect(`${process.env.CONVEX_SITE_URL}${basePath}/convex/.well-known/openid-configuration`);
 		if (c.req.path.startsWith(basePath)) {
 			if (opts.verbose) console.log("request headers", c.req.raw.headers);
-			const response = await getAuth(c.env).handler(c.req.raw);
+			const auth = getAuth(c.env);
+			let response;
+			try {
+				response = await auth.handler(c.req.raw);
+			} catch (error) {
+				const errorResponse = toAuthErrorResponse(error);
+				if (errorResponse) return errorResponse;
+				throw error;
+			}
 			if (opts.verbose) console.log("response headers", response.headers);
 			return response;
 		}
@@ -1395,7 +1426,15 @@ const registerRoutes = (http, getAuth, opts = {}) => {
 			console.log("options.baseURL", staticAuth.options.baseURL);
 			console.log("request headers", request.headers);
 		}
-		const response = await getAuth(ctx).handler(request);
+		const auth = getAuth(ctx);
+		let response;
+		try {
+			response = await auth.handler(request);
+		} catch (error) {
+			const errorResponse = toAuthErrorResponse(error);
+			if (errorResponse) return errorResponse;
+			throw error;
+		}
 		if (opts?.verbose) console.log("response headers", response.headers);
 		return response;
 	});

package/dist/orm/index.d.ts

@@ -530,6 +530,28 @@ declare class ConvexSystemIdBuilder<_TTableName extends string> extends ColumnBu
    */
   get convexValidator(): convex_values69.VString<string, "required">;
 }
+/**
+ * System creation time field builder (_creationTime)
+ * Always present, always non-null, always a number (milliseconds)
+ */
+type ConvexSystemCreationTimeConfig = ColumnBuilderBaseConfig<'number', 'ConvexSystemCreationTime'> & {
+  data: number;
+  driverParam: number;
+  enumValues: undefined;
+};
+declare class ConvexSystemCreationTimeBuilder extends ColumnBuilder<ConvexSystemCreationTimeConfig, {}, {
+  notNull: true;
+}> {
+  static readonly [entityKind]: string;
+  readonly [entityKind]: string;
+  constructor();
+  build(): convex_values69.VFloat64<number, "required">;
+  /**
+   * Convex validator - runtime access
+   * System fields use v.number() for _creationTime
+   */
+  get convexValidator(): convex_values69.VFloat64<number, "required">;
+}
 type ConvexSystemCreatedAtConfig = ColumnBuilderBaseConfig<'number', 'ConvexSystemCreatedAt'> & {
   data: number;
   driverParam: number;
@@ -551,9 +573,13 @@ declare class ConvexSystemCreatedAtBuilder extends ColumnBuilder<ConvexSystemCre
 type SystemFields<TName extends string> = {
   id: ColumnBuilderWithTableName<ConvexSystemIdBuilder<TName>, TName>;
 };
+type InternalSystemFields<TName extends string> = {
+  _creationTime: ColumnBuilderWithTableName<ConvexSystemCreationTimeBuilder, TName>;
+};
 type SystemFieldAliases<TName extends string, TColumns extends Record<string, unknown> = {}> = 'createdAt' extends keyof TColumns ? {} : {
   createdAt: ColumnBuilderWithTableName<ConvexSystemCreatedAtBuilder, TName>;
 };
+type SystemFieldsWithAliases<TName extends string, TColumns extends Record<string, unknown> = {}> = SystemFields<TName> & InternalSystemFields<TName> & SystemFieldAliases<TName, TColumns>;
 //#endregion
 //#region src/orm/builders/text.d.ts
 /**
@@ -926,7 +952,6 @@ declare function or(...expressions: (FilterExpression<boolean> | undefined)[]):
 declare function not(expression: FilterExpression<boolean>): UnaryExpression;
 /**
  * Array membership operator: field IN array
- * Validates array is non-empty at construction time
  *
  * @example
  * const filter = inArray(cols.status, ['active', 'pending']);
@@ -1644,7 +1669,7 @@ declare function rlsRole(name: string, config?: RlsRoleConfig): RlsRole;
 //#endregion
 //#region src/orm/rls/policies.d.ts
 type RlsPolicyToOption = 'public' | 'current_role' | 'current_user' | 'session_user' | (string & {}) | RlsRole | RlsPolicyToOption[];
-type PolicyExpression<TCtx, TTable> = FilterExpression<boolean> | ((ctx: TCtx, table: TTable) => FilterExpression<boolean>);
+type PolicyExpression<TCtx, TTable> = FilterExpression<boolean> | ((ctx: TCtx, table: TTable) => FilterExpression<boolean> | Promise<FilterExpression<boolean>>);
 interface RlsPolicyConfig<TCtx = any, TTable = ConvexTableWithColumns<any>> {
   as?: 'permissive' | 'restrictive';
   for?: 'all' | 'select' | 'insert' | 'update' | 'delete';
@@ -1684,6 +1709,7 @@ type ColumnsWithTableName<TColumns, TName extends string> = { [K in keyof TColum
     fieldName: K extends string ? K : never;
   };
 } : TColumns[K] };
+type ColumnsWithSystemFields<TColumns, TName extends string> = ColumnsWithTableName<TColumns, TName> & (TColumns extends Record<string, unknown> ? SystemFieldsWithAliases<TName, TColumns> : SystemFieldsWithAliases<TName>);
 type ConvexTableExtraConfigValue = ConvexIndexBuilder | ConvexSearchIndexBuilder | ConvexVectorIndexBuilder | ConvexForeignKeyBuilder | ConvexCheckBuilder | ConvexUniqueConstraintBuilder | ConvexDeletionBuilder | ConvexLifecycleBuilder | OrmTriggerLike | RlsPolicy;
 type ConvexTableExtraConfig = Record<string, ConvexTableExtraConfigValue>;
 type UnionToIntersection<T> = (T extends unknown ? (arg: T) => void : never) extends ((arg: infer U) => void) ? U : never;
@@ -1877,7 +1903,7 @@ type ConvexTableWithColumns<T extends TableConfig, Indexes extends GenericTableI
  *   index('by_email').on(t.email),
  * ]);
  */
-type ConvexTableFnInternal = <TName extends string, TColumns, TExtraConfig extends ConvexTableExtraConfigValue[] | ConvexTableExtraConfig | undefined = undefined>(name: TName, columns: TColumns, extraConfig?: (self: ColumnsWithTableName<TColumns, TName>) => TExtraConfig) => ConvexTableWithColumns<{
+type ConvexTableFnInternal = <TName extends string, TColumns, TExtraConfig extends ConvexTableExtraConfigValue[] | ConvexTableExtraConfig | undefined = undefined>(name: TName, columns: TColumns, extraConfig?: (self: ColumnsWithSystemFields<TColumns, TName>) => TExtraConfig) => ConvexTableWithColumns<{
   name: TName;
   columns: ColumnsWithTableName<TColumns, TName>;
 }, InferDbIndexesFromExtraConfig<TExtraConfig>, InferSearchIndexesFromExtraConfig<TExtraConfig>, InferVectorIndexesFromExtraConfig<TExtraConfig>>;

package/dist/orm/index.js

@@ -1,3 +1,3 @@
-import { $ as or, A as Brand, B as gte, D as unsetToken, E as OrmNotFoundError, F as contains, G as isNull, H as inArray, I as endsWith, J as lte, K as like, L as eq, M as TableName, N as and, O as RlsRole, P as between, Q as notInArray, R as fieldRef, T as desc, U as isFieldReference, V as ilike, W as isNotNull, X as not, Y as ne, Z as notBetween, _ as onInsert, a as getTableConfig, at as timestamp, b as rlsPolicy, c as uniqueIndex, ct as integer, d as scheduledMutationBatchFactory, dt as custom, et as startsWith, f as scheduledDeleteFactory, ft as json, g as onDelete, h as onChange, ht as bigint, i as getTableColumns, it as vector, j as Columns, k as rlsRole, l as vectorIndex, lt as id, m as deletion, mt as boolean, n as defineRelations, nt as foreignKey, o as index, ot as textEnum, p as convexTable, pt as bytes, q as lt, r as defineRelationsPart, rt as unique, s as searchIndex, st as text, t as defineSchema, tt as check, u as createOrm, ut as date, v as onUpdate, w as asc, x as extractRelationsConfig, y as RlsPolicy, z as gt } from "../orm-Banm-XXb.js";
+import { $ as or, A as Brand, B as gte, D as unsetToken, E as OrmNotFoundError, F as contains, G as isNull, H as inArray, I as endsWith, J as lte, K as like, L as eq, M as TableName, N as and, O as RlsRole, P as between, Q as notInArray, R as fieldRef, T as desc, U as isFieldReference, V as ilike, W as isNotNull, X as not, Y as ne, Z as notBetween, _ as onInsert, a as getTableConfig, at as timestamp, b as rlsPolicy, c as uniqueIndex, ct as integer, d as scheduledMutationBatchFactory, dt as custom, et as startsWith, f as scheduledDeleteFactory, ft as json, g as onDelete, h as onChange, ht as bigint, i as getTableColumns, it as vector, j as Columns, k as rlsRole, l as vectorIndex, lt as id, m as deletion, mt as boolean, n as defineRelations, nt as foreignKey, o as index, ot as textEnum, p as convexTable, pt as bytes, q as lt, r as defineRelationsPart, rt as unique, s as searchIndex, st as text, t as defineSchema, tt as check, u as createOrm, ut as date, v as onUpdate, w as asc, x as extractRelationsConfig, y as RlsPolicy, z as gt } from "../orm-CleikBIV.js";
 
 export { Brand, Columns, OrmNotFoundError, RlsPolicy, RlsRole, TableName, and, asc, between, bigint, boolean, bytes, check, contains, convexTable, createOrm, custom, date, defineRelations, defineRelationsPart, defineSchema, deletion, desc, endsWith, eq, extractRelationsConfig, fieldRef, foreignKey, getTableColumns, getTableConfig, gt, gte, id, ilike, inArray, index, integer, isFieldReference, isNotNull, isNull, json, like, lt, lte, ne, not, notBetween, notInArray, onChange, onDelete, onInsert, onUpdate, or, rlsPolicy, rlsRole, scheduledDeleteFactory, scheduledMutationBatchFactory, searchIndex, startsWith, text, textEnum, timestamp, unique, uniqueIndex, unsetToken, vector, vectorIndex };

package/dist/{orm-Banm-XXb.js → orm-CleikBIV.js}

@@ -875,13 +875,11 @@ function not(expression) {
 }
 /**
 * Array membership operator: field IN array
-* Validates array is non-empty at construction time
 *
 * @example
 * const filter = inArray(cols.status, ['active', 'pending']);
 */
 function inArray(col, values) {
-	if (!Array.isArray(values) || values.length === 0) throw new Error("inArray requires a non-empty array of values");
 	return new BinaryExpressionImpl("inArray", [fieldRef(resolveColumn(col).columnName), values]);
 }
 /**
@@ -1887,6 +1885,7 @@ function toConvexFilter(expression) {
 				case "inArray": {
 					const values = value;
 					return (q) => {
+						if (values.length === 0) return q.eq(q.field("_id"), "__better_convex_never__");
 						return values.map((v) => q.eq(q.field(fieldName), v)).reduce((acc, cond) => q.or(acc, cond));
 					};
 				}
@@ -2068,13 +2067,13 @@ function roleMatches(policy, rls) {
 	if (targetRoles === "public") return true;
 	return targetRoles.some((role) => roles.includes(role));
 }
-function resolveExpression(policy, checkType, ctx, table) {
+async function resolveExpression(policy, checkType, ctx, table) {
 	const candidate = checkType === "withCheck" ? policy.withCheck ?? policy.using : policy.using;
 	if (!candidate) return;
-	if (typeof candidate === "function") return candidate(ctx, table);
+	if (typeof candidate === "function") return await candidate(ctx, table);
 	return candidate;
 }
-function evaluatePolicySet({ table, operation, checkType, row, rls }) {
+async function evaluatePolicySet({ table, operation, checkType, row, rls }) {
 	if (!isRlsEnabled(table)) return true;
 	if (rls?.mode === "skip") return true;
 	const ctx = rls?.ctx ?? {};
@@ -2082,18 +2081,24 @@ function evaluatePolicySet({ table, operation, checkType, row, rls }) {
 	if (policies.length === 0) return false;
 	const permissive = policies.filter((policy) => (policy.as ?? "permissive") !== "restrictive");
 	if (permissive.length === 0) return false;
-	if (!permissive.some((policy) => {
-		const expression = resolveExpression(policy, checkType, ctx, table);
-		if (!expression) return true;
-		return evaluateFilter(row, expression);
-	})) return false;
-	return policies.filter((policy) => (policy.as ?? "permissive") === "restrictive").every((policy) => {
-		const expression = resolveExpression(policy, checkType, ctx, table);
-		if (!expression) return true;
-		return evaluateFilter(row, expression);
-	});
+	let permissivePasses = false;
+	for (const policy of permissive) {
+		const expression = await resolveExpression(policy, checkType, ctx, table);
+		if (!expression || evaluateFilter(row, expression)) {
+			permissivePasses = true;
+			break;
+		}
+	}
+	if (!permissivePasses) return false;
+	const restrictive = policies.filter((policy) => (policy.as ?? "permissive") === "restrictive");
+	for (const policy of restrictive) {
+		const expression = await resolveExpression(policy, checkType, ctx, table);
+		if (!expression) continue;
+		if (!evaluateFilter(row, expression)) return false;
+	}
+	return true;
 }
-function canSelectRow(options) {
+async function canSelectRow(options) {
 	return evaluatePolicySet({
 		table: options.table,
 		operation: "select",
@@ -2102,7 +2107,7 @@ function canSelectRow(options) {
 		rls: options.rls
 	});
 }
-function canInsertRow(options) {
+async function canInsertRow(options) {
 	return evaluatePolicySet({
 		table: options.table,
 		operation: "insert",
@@ -2111,7 +2116,7 @@ function canInsertRow(options) {
 		rls: options.rls
 	});
 }
-function canDeleteRow(options) {
+async function canDeleteRow(options) {
 	return evaluatePolicySet({
 		table: options.table,
 		operation: "delete",
@@ -2120,15 +2125,15 @@ function canDeleteRow(options) {
 		rls: options.rls
 	});
 }
-function evaluateUpdateDecision(options) {
-	const usingAllowed = evaluatePolicySet({
+async function evaluateUpdateDecision(options) {
+	const usingAllowed = await evaluatePolicySet({
 		table: options.table,
 		operation: "update",
 		checkType: "using",
 		row: options.existingRow,
 		rls: options.rls
 	});
-	const withCheckAllowed = evaluatePolicySet({
+	const withCheckAllowed = await evaluatePolicySet({
 		table: options.table,
 		operation: "update",
 		checkType: "withCheck",
@@ -2141,14 +2146,16 @@ function evaluateUpdateDecision(options) {
 		withCheckAllowed
 	};
 }
-function filterSelectRows(options) {
+async function filterSelectRows(options) {
 	if (!isRlsEnabled(options.table)) return options.rows;
 	if (options.rls?.mode === "skip") return options.rows;
-	return options.rows.filter((row) => canSelectRow({
+	const rows = [];
+	for (const row of options.rows) if (await canSelectRow({
 		table: options.table,
 		row,
 		rls: options.rls
-	}));
+	})) rows.push(row);
+	return rows;
 }
 
 //#endregion
@@ -2919,7 +2926,7 @@ var ConvexDeleteBuilder = class extends QueryPromise {
 		};
 		const fkBatchSize = isPaginated ? pagination.limit : batchSize;
 		for (const row of rows) {
-			if (!canDeleteRow({
+			if (!await canDeleteRow({
 				table: this.table,
 				row,
 				rls
@@ -3036,7 +3043,7 @@ var ConvexInsertBuilder = class extends QueryPromise {
 			const preparedValue = normalizeDateFieldsForWrite(this.table, applyDefaults(this.table, value));
 			const rls = getOrmContext(this.db)?.rls;
 			const tableName = getTableName(this.table);
-			if (!canInsertRow({
+			if (!await canInsertRow({
 				table: this.table,
 				row: preparedValue,
 				rls
@@ -3110,7 +3117,7 @@ var ConvexInsertBuilder = class extends QueryPromise {
 			...normalizedSet
 		};
 		const writeSet = normalizeDateFieldsForWrite(this.table, effectiveSet);
-		const updateDecision = evaluateUpdateDecision({
+		const updateDecision = await evaluateUpdateDecision({
 			table: this.table,
 			existingRow: existing,
 			updatedRow: {
@@ -4615,9 +4622,9 @@ var GelRelationalQuery = class extends QueryPromise {
 		if (this.mode === "firstOrThrow" && first === void 0) throw new OrmNotFoundError(`Could not find ${this.tableConfig.name}.`, this.tableConfig.name);
 		return first;
 	}
-	_applyRlsSelectFilter(rows, tableConfig) {
+	async _applyRlsSelectFilter(rows, tableConfig) {
 		if (!rows.length || !tableConfig) return rows;
-		return filterSelectRows({
+		return await filterSelectRows({
 			table: tableConfig.table,
 			rows,
 			rls: this.rls
@@ -5598,7 +5605,7 @@ var GelRelationalQuery = class extends QueryPromise {
 				if (id === null || id === void 0) return null;
 				return this.db.get(id);
 			})).filter((row) => !!row);
-			rows = this._applyRlsSelectFilter(rows, this.tableConfig);
+			rows = await this._applyRlsSelectFilter(rows, this.tableConfig);
 			if (orderSpecs.length > 0 && rows.length > 1) rows.sort((a, b) => this._compareByOrderSpecs(a, b, orderSpecs));
 			if (offset > 0) rows = rows.slice(offset);
 			if (typeof config.limit === "number") rows = rows.slice(0, config.limit);
@@ -5621,7 +5628,7 @@ var GelRelationalQuery = class extends QueryPromise {
 				absoluteMaxRows: pageByKey.absoluteMaxRows,
 				order: pageByKey.order
 			});
-			let rows = this._applyRlsSelectFilter(page.page, this.tableConfig);
+			let rows = await this._applyRlsSelectFilter(page.page, this.tableConfig);
 			if (whereFilter) rows = await this._applyRelationsFilterToRows(rows, this.tableConfig, whereFilter, this.edgeMetadata, 0, 3, this.config.with);
 			return {
 				page: await this._finalizeRows(rows),
@@ -5653,7 +5660,7 @@ var GelRelationalQuery = class extends QueryPromise {
 					maxScan
 				});
 				return {
-					page: await this._finalizeRows(this._applyRlsSelectFilter(paginationResult.page, this.tableConfig)),
+					page: await this._finalizeRows(await this._applyRlsSelectFilter(paginationResult.page, this.tableConfig)),
 					continueCursor: paginationResult.continueCursor,
 					isDone: paginationResult.isDone,
 					pageStatus: paginationResult.pageStatus,
@@ -5665,7 +5672,7 @@ var GelRelationalQuery = class extends QueryPromise {
 			const limit = this._resolveNonPaginatedLimit(config);
 			let rows = limit === void 0 ? await streamQuery.collect() : await streamQuery.take(offset > 0 ? offset + limit : limit);
 			if (offset > 0) rows = rows.slice(offset);
-			rows = this._applyRlsSelectFilter(rows, this.tableConfig);
+			rows = await this._applyRlsSelectFilter(rows, this.tableConfig);
 			const selectedRows = await this._finalizeRows(rows);
 			return this._returnSelectedRows(selectedRows);
 		}
@@ -5698,7 +5705,7 @@ var GelRelationalQuery = class extends QueryPromise {
 					_score: score
 				};
 			});
-			rows = this._applyRlsSelectFilter(rows, this.tableConfig);
+			rows = await this._applyRlsSelectFilter(rows, this.tableConfig);
 			const selectedRows = await this._finalizeRows(rows);
 			return this._returnSelectedRows(selectedRows);
 		}
@@ -5727,7 +5734,7 @@ var GelRelationalQuery = class extends QueryPromise {
 					numItems: config.limit
 				});
 				let pageRows = paginationResult.page;
-				pageRows = this._applyRlsSelectFilter(pageRows, this.tableConfig);
+				pageRows = await this._applyRlsSelectFilter(pageRows, this.tableConfig);
 				if (whereFilter) pageRows = await this._applyRelationsFilterToRows(pageRows, this.tableConfig, whereFilter, this.edgeMetadata, 0, 3, this.config.with);
 				return {
 					page: await this._finalizeRows(pageRows),
@@ -5740,7 +5747,7 @@ var GelRelationalQuery = class extends QueryPromise {
 			const limit = this._resolveNonPaginatedLimit(config);
 			let rows = limit === void 0 ? await searchQuery.collect() : await searchQuery.take(offset > 0 ? offset + limit : limit);
 			if (offset > 0) rows = rows.slice(offset);
-			rows = this._applyRlsSelectFilter(rows, this.tableConfig);
+			rows = await this._applyRlsSelectFilter(rows, this.tableConfig);
 			if (whereFilter) rows = await this._applyRelationsFilterToRows(rows, this.tableConfig, whereFilter, this.edgeMetadata, 0, 3, this.config.with);
 			const selectedRows = await this._finalizeRows(rows);
 			return this._returnSelectedRows(selectedRows);
@@ -5806,7 +5813,7 @@ var GelRelationalQuery = class extends QueryPromise {
 					maxScan
 				});
 				let pageRows = paginationResult.page;
-				pageRows = this._applyRlsSelectFilter(pageRows, this.tableConfig);
+				pageRows = await this._applyRlsSelectFilter(pageRows, this.tableConfig);
 				if (whereFilter) pageRows = await this._applyRelationsFilterToRows(pageRows, this.tableConfig, whereFilter, this.edgeMetadata, 0, 3, this.config.with);
 				let pageWithRelations = pageRows;
 				if (this.config.with) pageWithRelations = await this._loadRelations(pageRows, this.config.with, 0, 3, this.edgeMetadata, this.tableConfig);
@@ -5825,7 +5832,7 @@ var GelRelationalQuery = class extends QueryPromise {
 			const paginateAfterPostFetchSort = usePostFetchSort && postFetchOrders.length > 0;
 			let rows = limit === void 0 || paginateAfterPostFetchSort ? await streamQuery.collect() : await streamQuery.take(offset > 0 ? offset + limit : limit);
 			if (!paginateAfterPostFetchSort && offset > 0) rows = rows.slice(offset);
-			rows = this._applyRlsSelectFilter(rows, this.tableConfig);
+			rows = await this._applyRlsSelectFilter(rows, this.tableConfig);
 			if (whereFilter) rows = await this._applyRelationsFilterToRows(rows, this.tableConfig, whereFilter, this.edgeMetadata, 0, 3, this.config.with);
 			if (usePostFetchSort && postFetchOrders.length > 0) rows = rows.sort((a, b) => this._compareByOrderSpecs(a, b, postFetchOrders));
 			if (paginateAfterPostFetchSort) {
@@ -5857,7 +5864,7 @@ var GelRelationalQuery = class extends QueryPromise {
 			}));
 			let rows = Array.from(new Map(probeRows.flat().map((row) => [String(row._id), row])).values());
 			if (queryConfig.postFilters.length > 0) rows = rows.filter((row) => queryConfig.postFilters.every((filter) => this._evaluatePostFetchFilter(row, filter)));
-			rows = this._applyRlsSelectFilter(rows, this.tableConfig);
+			rows = await this._applyRlsSelectFilter(rows, this.tableConfig);
 			if (whereFilter) rows = await this._applyRelationsFilterToRows(rows, this.tableConfig, whereFilter, this.edgeMetadata, 0, 3, this.config.with);
 			if (usePostFetchSort && postFetchOrders.length > 0) rows = rows.sort((a, b) => this._compareByOrderSpecs(a, b, postFetchOrders));
 			const offset = config.offset ?? 0;
@@ -5894,7 +5901,7 @@ var GelRelationalQuery = class extends QueryPromise {
 					maxScan
 				});
 				let pageRows = paginationResult.page;
-				pageRows = this._applyRlsSelectFilter(pageRows, this.tableConfig);
+				pageRows = await this._applyRlsSelectFilter(pageRows, this.tableConfig);
 				if (whereFilter) pageRows = await this._applyRelationsFilterToRows(pageRows, this.tableConfig, whereFilter, this.edgeMetadata, 0, 3, this.config.with);
 				let pageWithRelations = pageRows;
 				if (this.config.with) pageWithRelations = await this._loadRelations(pageRows, this.config.with, 0, 3, this.edgeMetadata, this.tableConfig);
@@ -5928,7 +5935,7 @@ var GelRelationalQuery = class extends QueryPromise {
 					maxScan
 				});
 				let pageRows = paginationResult.page;
-				pageRows = this._applyRlsSelectFilter(pageRows, this.tableConfig);
+				pageRows = await this._applyRlsSelectFilter(pageRows, this.tableConfig);
 				if (whereFilter) pageRows = await this._applyRelationsFilterToRows(pageRows, this.tableConfig, whereFilter, this.edgeMetadata, 0, 3, this.config.with);
 				let pageWithRelations = pageRows;
 				if (this.config.with) pageWithRelations = await this._loadRelations(pageRows, this.config.with, 0, 3, this.edgeMetadata, this.tableConfig);
@@ -5962,7 +5969,7 @@ var GelRelationalQuery = class extends QueryPromise {
 				numItems: config.limit
 			});
 			let pageRows = paginationResult.page;
-			pageRows = this._applyRlsSelectFilter(pageRows, this.tableConfig);
+			pageRows = await this._applyRlsSelectFilter(pageRows, this.tableConfig);
 			if (whereFilter) pageRows = await this._applyRelationsFilterToRows(pageRows, this.tableConfig, whereFilter, this.edgeMetadata, 0, 3, this.config.with);
 			let pageWithRelations = pageRows;
 			if (this.config.with) pageWithRelations = await this._loadRelations(pageRows, this.config.with, 0, 3, this.edgeMetadata, this.tableConfig);
@@ -5988,7 +5995,7 @@ var GelRelationalQuery = class extends QueryPromise {
 		let rows = limit === void 0 || paginateAfterPostFetchSort ? await query.collect() : await query.take(offset > 0 ? offset + limit : limit);
 		if (!paginateAfterPostFetchSort && offset > 0) rows = rows.slice(offset);
 		if (queryConfig.postFilters.length > 0) rows = rows.filter((row) => queryConfig.postFilters.every((filter) => this._evaluatePostFetchFilter(row, filter)));
-		rows = this._applyRlsSelectFilter(rows, this.tableConfig);
+		rows = await this._applyRlsSelectFilter(rows, this.tableConfig);
 		if (whereFilter) rows = await this._applyRelationsFilterToRows(rows, this.tableConfig, whereFilter, this.edgeMetadata, 0, 3, this.config.with);
 		if (usePostFetchSort && postFetchOrders.length > 0) rows = rows.sort((a, b) => this._compareByOrderSpecs(a, b, postFetchOrders));
 		if (paginateAfterPostFetchSort) {
@@ -6109,6 +6116,7 @@ var GelRelationalQuery = class extends QueryPromise {
 					case "inArray": {
 						const values = normalizedValue;
 						return (q) => {
+							if (values.length === 0) return q.eq(q.field("_id"), "__better_convex_never__");
 							return values.map((v) => q.eq(q.field(fieldName), v)).reduce((acc, cond) => q.or(acc, cond));
 						};
 					}
@@ -6280,7 +6288,7 @@ var GelRelationalQuery = class extends QueryPromise {
 		const targetsByKey = /* @__PURE__ */ new Map();
 		for (const entry of fetched) targetsByKey.set(entry.key, entry.target ?? null);
 		let targets = Array.from(targetsByKey.values()).filter((value) => !!value);
-		targets = this._applyRlsSelectFilter(targets, targetTableConfig);
+		targets = await this._applyRlsSelectFilter(targets, targetTableConfig);
 		if (relationDefinition?.where) targets = targets.filter((target) => this._evaluateTableFilter(target, targetTableConfig, relationDefinition.where));
 		if (relationConfig && typeof relationConfig === "object" && "where" in relationConfig) {
 			const whereFilter = relationConfig.where;
@@ -6414,7 +6422,7 @@ var GelRelationalQuery = class extends QueryPromise {
 				return await query.collect();
 			})).flat();
 		}
-		targets = this._applyRlsSelectFilter(targets, targetTableConfig);
+		targets = await this._applyRlsSelectFilter(targets, targetTableConfig);
 		if (relationDefinition?.where) targets = targets.filter((target) => this._evaluateTableFilter(target, targetTableConfig, relationDefinition.where));
 		if (relationConfig && typeof relationConfig === "object" && "where" in relationConfig) {
 			const whereFilter = relationConfig.where;
@@ -6948,7 +6956,7 @@ var ConvexUpdateBuilder = class extends QueryPromise {
 		const rls = ormContext?.rls;
 		const foreignKeyGraph = ormContext?.foreignKeyGraph;
 		if (!foreignKeyGraph) throw new Error("Foreign key actions require orm.db(ctx) configured from createOrm({ schema, ... }).");
-		const updates = rows.map((row) => {
+		const updates = await Promise.all(rows.map(async (row) => {
 			const updatedRow = {
 				...row,
 				...effectiveSet
@@ -6956,14 +6964,14 @@ var ConvexUpdateBuilder = class extends QueryPromise {
 			return {
 				row,
 				updatedRow,
-				decision: evaluateUpdateDecision({
+				decision: await evaluateUpdateDecision({
 					table: this.table,
 					existingRow: row,
 					updatedRow,
 					rls
 				})
 			};
-		});
+		}));
 		if (updates.find(({ decision }) => decision.usingAllowed && !decision.withCheckAllowed)) throw new Error(`RLS policy violation for update on table "${tableName}"`);
 		const results = [];
 		let numAffected = 0;
@@ -8021,7 +8029,7 @@ const convexTableInternal = (name, columns, extraConfig) => {
 		configurable: true,
 		writable: false
 	});
-	applyExtraConfig(rawTable, extraConfig?.(rawTable[Columns]));
+	applyExtraConfig(rawTable, extraConfig?.(table));
 	return table;
 };
 const convexTableWithRLS = (name, columns, extraConfig) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-convex",
-  "version": "0.6.1",
+  "version": "0.6.3",
   "description": "Better Convex - React Query integration and CLI tools for Convex",
   "keywords": [
     "convex",