better-supabase 0.10.0 → 0.11.0

package/dist/react-router/index.js

@@ -1,10 +1,10 @@
-import { o as problemResponse } from "../problem-pIiL3WbE.js";
-import { c as extendServer, o as withFlush, s as createServer } from "../adapter-rmWaLNe3.js";
-import { o as settle, t as defaultExpose } from "../respond-Dpx48ATq.js";
-import { i as requireCaller, o as runAction } from "../kit-gqwkVhGU.js";
+import { o as problemResponse } from "../problem-JRCohp1j.js";
+import { c as extendServer, o as withFlush, s as createServer } from "../adapter-B2WRsRIg.js";
+import { o as settle, t as defaultExpose } from "../respond-Bhp3G__q.js";
+import { i as requireCaller, o as runAction } from "../kit-LTbHrWWD.js";
 import { n as bufferInPlace, t as around } from "../shared-BmMcMoW9.js";
-import { i as localsOf, n as actionInput, r as frameworkEntry } from "../framework-Cfm0IspZ.js";
-import { r as refusalResponse } from "../refusal-Ch-u9dVd.js";
+import { i as localsOf, n as actionInput, r as frameworkEntry } from "../framework-Ch8bMmQY.js";
+import { r as refusalResponse } from "../refusal-CFpfmjcS.js";
 //#region src/bridges/react-router.ts
 /**
 * Runs an entry array as React Router server middleware. The contributions

package/dist/{read-set-PWiJfv6S.js → read-set-DeesfeL_.js}

@@ -1,5 +1,5 @@
-import { n as dbError } from "./errors-8i6tSICm.js";
-import { i as tableMeta, t as builderFor } from "./build-6jmaPAgx.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
+import { i as tableMeta, t as builderFor } from "./build-C-D_vn0U.js";
 import { n as touchedTables } from "./tables-Cb-3_VWc.js";
 //#region src/core/spec.ts
 const READ_METHODS = [

package/dist/realtime/index.d.ts

@@ -1,8 +1,8 @@
-import { n as AccessPolicySql, r as AccessTopicPolicy } from "../types-BO8lVTun.js";
+import { n as AccessPolicySql, r as AccessTopicPolicy } from "../types-BrpW5ixT.js";
 import { t as RealtimeStatus } from "../realtime-status-DcsO00Gw.js";
-import { J as TemplateValues, q as TemplateParams } from "../storage-api-B4Ib2Zpo.js";
-import { A as TriggerTopic, C as TopicSubscription, D as TriggerLookup, E as TopicTriggerValue, F as FanOutResult, I as TopicFanOutOptions, M as defineTopic, N as rowChange, O as TriggerOptions, P as rowKeys, S as TopicSubscribeOptions, T as TopicTriggerOptions, _ as TopicMessage, a as PresenceOutput, b as TopicPermission, c as RealtimeClient, d as SubscribeOptions, f as Subscription, g as TopicHandlers, h as TopicEvent, i as PresenceOptions, j as TriggerValue, k as TriggerPayloadMode, l as RowChange, m as Topic, n as PresenceInput, o as PresenceSchema, p as SubscriptionStatus, r as PresenceMember, s as PresenceSubscription, t as EventSchemas, u as RowKeys, v as TopicOptions, w as TopicTriggerLookup, x as TopicSqlOptions, y as TopicPayload } from "../topic-Dgs-eSYQ.js";
-import { a as watchTopic, i as topicPort, n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-D-rpUg5n.js";
-import { n as subjectReaders, t as SubjectReadersOptions } from "../subject-readers-81xiWh4M.js";
-import { a as LiveSource, c as liveQuery, i as LiveQueryOptions, l as liveTopic, n as LiveCountOptions, o as LiveSubscription, r as LiveCountSeed, s as liveCount, t as CountRunner } from "../index-DcijDfh1.js";
+import { D as TemplateParams, O as TemplateValues } from "../bucket-BBSNDFNH.js";
+import { A as TriggerTopic, C as TopicSubscription, D as TriggerLookup, E as TopicTriggerValue, F as FanOutResult, I as TopicFanOutOptions, M as defineTopic, N as rowChange, O as TriggerOptions, P as rowKeys, S as TopicSubscribeOptions, T as TopicTriggerOptions, _ as TopicMessage, a as PresenceOutput, b as TopicPermission, c as RealtimeClient, d as SubscribeOptions, f as Subscription, g as TopicHandlers, h as TopicEvent, i as PresenceOptions, j as TriggerValue, k as TriggerPayloadMode, l as RowChange, m as Topic, n as PresenceInput, o as PresenceSchema, p as SubscriptionStatus, r as PresenceMember, s as PresenceSubscription, t as EventSchemas, u as RowKeys, v as TopicOptions, w as TopicTriggerLookup, x as TopicSqlOptions, y as TopicPayload } from "../topic-1WTkDnPd.js";
+import { a as watchTopic, i as topicPort, n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-DWHy63ZJ.js";
+import { n as subjectReaders, t as SubjectReadersOptions } from "../subject-readers-BNQzBDN9.js";
+import { a as LiveSource, c as liveQuery, i as LiveQueryOptions, l as liveTopic, n as LiveCountOptions, o as LiveSubscription, r as LiveCountSeed, s as liveCount, t as CountRunner } from "../index-qCG78-Rf.js";
 export { type AccessPolicySql, type AccessTopicPolicy, type CountRunner, type EventSchemas, type FanOutResult, type LiveCountOptions, type LiveCountSeed, type LiveQueryOptions, type LiveSource, type LiveSubscription, type PresenceInput, type PresenceMember, type PresenceOptions, type PresenceOutput, type PresenceSchema, type PresenceSubscription, type RealtimeClient, type RealtimeStatus, type RowChange, type RowKeys, type SubjectReadersOptions, type SubscribeOptions, type Subscription, type SubscriptionStatus, type TemplateParams, type TemplateValues, type Topic, type TopicEvent, type TopicFanOutOptions, type TopicHandle, type TopicHandlers, type TopicMessage, type TopicOptions, type TopicPayload, type TopicPermission, type TopicPort, type TopicSqlOptions, type TopicSubscribeOptions, type TopicSubscription, type TopicTriggerLookup, type TopicTriggerOptions, type TopicTriggerValue, type TopicWatch, type TriggerLookup, type TriggerOptions, type TriggerPayloadMode, type TriggerTopic, type TriggerValue, defineTopic, liveCount, liveQuery, liveTopic, rowChange, rowKeys, subjectReaders, topicPort, watchTopic };

package/dist/realtime/index.js

@@ -1,5 +1,5 @@
 import { n as liveQuery, r as liveTopic, t as liveCount } from "../live-DwDreq1n.js";
-import { t as subjectReaders } from "../subject-readers-DDyPTIOr.js";
+import { t as subjectReaders } from "../subject-readers-BpwUFJtp.js";
 import { n as watchTopic, t as topicPort } from "../watch-topic-miuymrli.js";
-import { n as rowChange, r as rowKeys, t as defineTopic } from "../topic-DB-1YTMj.js";
+import { n as rowChange, r as rowKeys, t as defineTopic } from "../topic-mee21pux.js";
 export { defineTopic, liveCount, liveQuery, liveTopic, rowChange, rowKeys, subjectReaders, topicPort, watchTopic };

package/dist/{refusal-Ch-u9dVd.js → refusal-CFpfmjcS.js}

@@ -1,7 +1,7 @@
-import { r as dbErrorOf } from "./errors-8i6tSICm.js";
-import { o as problemResponse } from "./problem-pIiL3WbE.js";
-import { t as defaultExpose } from "./respond-Dpx48ATq.js";
-import { i as requireCaller } from "./kit-gqwkVhGU.js";
+import { r as dbErrorOf } from "./errors-BV1SKTVs.js";
+import { o as problemResponse } from "./problem-JRCohp1j.js";
+import { t as defaultExpose } from "./respond-Bhp3G__q.js";
+import { i as requireCaller } from "./kit-LTbHrWWD.js";
 //#region src/server/refusal.ts
 function isAalRefusal(error) {
 	return error.kind === "forbidden" && "required" in error && error.required === "aal2";

package/dist/{refusal-Bdr1k47u.d.ts → refusal-CufncwaN.d.ts}

@@ -1,5 +1,5 @@
 import { t as AnyAuthorizer } from "./authorizer-eiOjo-3l.js";
-import { s as BlockRequireOptions } from "./kit-BlcEFQql.js";
+import { s as BlockRequireOptions } from "./kit-BeZX2pR_.js";
 //#region src/server/refusal.d.ts
 /** Where refused callers go instead of a Problem Details response. */
 interface RefusalRedirects {

package/dist/{resolve-7atr-wWr.d.ts → resolve-Bqb8TMTt.d.ts}

@@ -1,8 +1,8 @@
 /// <reference lib="esnext.temporal" />
-import { b as DbError } from "./result-Cj3yWhjH.js";
-import { n as AuthOutageEvent, u as RefreshEvent } from "./events-CtAHxPal.js";
+import { b as DbError } from "./result-BREt7qOh.js";
+import { n as AuthOutageEvent, u as RefreshEvent } from "./events-P3raDX2E.js";
 import { n as Logger } from "./logger-DWVYUmwi.js";
-import { t as StandardSchemaV1 } from "./standard-C3_AAF3g.js";
+import { t as StandardSchemaV1 } from "./standard-BcUQuUgu.js";
 import { t as BetterSupabaseEnv } from "./index-CxmVzT-3.js";
 import { CookieOptions } from "@supabase/ssr";
 import { JWTClaims, SupabaseEnv, UserClaims } from "@supabase/server";

package/dist/{resolve-CAR9oaKW.js → resolve-f8QNuYI3.js}

@@ -1,7 +1,7 @@
-import { n as dbError } from "./errors-8i6tSICm.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
 import { t as consoleLogger } from "./logger-glM28NVN.js";
-import { n as decodeJwtPayload, r as fromBase64, t as base64ToText } from "./base64-BmeCBgGo.js";
-import { a as invalidActorError, n as actorOf } from "./actor-KHDOKGb1.js";
+import { n as decodeJwtPayload, r as fromBase64, t as base64ToText } from "./base64-D4aqdnDR.js";
+import { a as invalidActorError, n as actorOf } from "./actor-CAL8mMih.js";
 import { DEFAULT_COOKIE_OPTIONS, createChunks, isChunkLike, parseCookieHeader, serializeCookieHeader, stringFromBase64URL, stringToBase64URL } from "@supabase/ssr";
 import { extractCredentials, verifyCredentials } from "@supabase/server/core";
 //#region src/auth/session.ts
@@ -241,7 +241,8 @@ function clearSessionCookies(request, response, options) {
 }
 //#endregion
 //#region src/auth/hs256.ts
-const encoder = /* @__PURE__ */ new TextEncoder();
+let encoderInstance;
+const encoder = { encode: (text) => (encoderInstance ??= new TextEncoder()).encode(text) };
 /** The most HMAC keys kept at once; the oldest goes first. */
 const KEYS_SIZE = 64;
 const keys = /* @__PURE__ */ new Map();

package/dist/{resource-CHGOmg1O.js → resource-Bdkqi8jo.js}

@@ -1,10 +1,10 @@
-import { n as dbError, o as isDbError } from "./errors-8i6tSICm.js";
-import { a as ok, r as err, s as toDbError } from "./result-COkvI9t5.js";
+import { n as dbError, o as isDbError } from "./errors-BV1SKTVs.js";
+import { a as ok, r as err, s as toDbError } from "./result-DIeYscA3.js";
 import { n as isRecord } from "./guards-6F2bCtQR.js";
-import { n as validate } from "./standard-DZmwmIhV.js";
-import { a as methodNotAllowed } from "./problem-pIiL3WbE.js";
-import { a as respond, i as isResult } from "./respond-Dpx48ATq.js";
-import { n as checkPermission, t as checkEach } from "./authorizer-dVVN05Un.js";
+import { n as validate } from "./standard-B1BigegP.js";
+import { a as methodNotAllowed } from "./problem-JRCohp1j.js";
+import { a as respond, i as isResult } from "./respond-Bhp3G__q.js";
+import { n as checkPermission, t as checkEach } from "./authorizer-B3yyCVUF.js";
 import { n as planResource, t as matchAction } from "./resource-DO4gbVi5.js";
 //#region src/server/resource-execute.ts
 async function settled(value) {

package/dist/{resource-DxcgtHq6.d.ts → resource-DYEtc-KN.d.ts}

@@ -1,4 +1,4 @@
-import { B as TableMeta } from "./types-BO8lVTun.js";
+import { V as TableMeta } from "./types-BrpW5ixT.js";
 import { D as ResourceOperation, O as SecurityRequirement, i as JsonObject } from "./model-lUafmeBQ.js";
 //#region src/spec/schemas.d.ts
 /** A Standard Schema, or anything else that might carry `~standard`. */

package/dist/{resource-execute-C45ICrN9.d.ts → resource-execute-ruP2L1op.d.ts}

@@ -1,5 +1,5 @@
-import { n as ResourceActionSpec } from "./resource-DxcgtHq6.js";
-import { i as ResourceContext, n as Parsed, r as ResourceAction, t as ActionArgs } from "./resource-types-CC59gMHE.js";
+import { n as ResourceActionSpec } from "./resource-DYEtc-KN.js";
+import { i as ResourceContext, n as Parsed, r as ResourceAction, t as ActionArgs } from "./resource-types-CGr0BbL-.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/server/resource-execute.d.ts
 /** Defines an action and types its handler's `data` and `query` from the schemas. */

package/dist/{resource-types-CC59gMHE.d.ts → resource-types-CGr0BbL-.d.ts}

@@ -1,10 +1,10 @@
-import { E as ValidationIssue, f as Result } from "./result-Cj3yWhjH.js";
-import { B as TableMeta, M as Row, W as Update, a as AnyModels, x as Insert, z as TableKey } from "./types-BO8lVTun.js";
-import { m as RequestContext } from "./plugin-D5OIaP93.js";
+import { D as ValidationIssue, f as Result } from "./result-BREt7qOh.js";
+import { B as TableKey, G as Update, N as Row, S as Insert, V as TableMeta, a as AnyModels } from "./types-BrpW5ixT.js";
+import { m as RequestContext } from "./plugin-D-95Q0w0.js";
 import { D as ResourceOperation } from "./model-lUafmeBQ.js";
-import { a as ResourcePlan, i as ResourcePagination, n as ResourceActionSpec, r as ResourceDescription } from "./resource-DxcgtHq6.js";
-import { Lt as SelectArg } from "./define-DXTC706J.js";
-import { a as RespondOptions } from "./respond-Cdg5ibH5.js";
+import { a as ResourcePlan, i as ResourcePagination, n as ResourceActionSpec, r as ResourceDescription } from "./resource-DYEtc-KN.js";
+import { Lt as SelectArg } from "./define-M_r1d2AT.js";
+import { a as RespondOptions } from "./respond-CEBC6KUX.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/server/resource-types.d.ts
 /** What a resource needs from `defineListQuery`. */

package/dist/{resources-B71O7EVQ.d.ts → resources-BiQpsM6O.d.ts}

@@ -1,5 +1,5 @@
-import { a as AnyModels, z as TableKey } from "./types-BO8lVTun.js";
-import { l as ResourceRouteOptions } from "./resource-types-CC59gMHE.js";
+import { B as TableKey, a as AnyModels } from "./types-BrpW5ixT.js";
+import { l as ResourceRouteOptions } from "./resource-types-CGr0BbL-.js";
 //#region src/server/resources.d.ts
 /** Resources by table name; `true` serves a table with the defaults. */
 type ResourceMap<M extends AnyModels, Ref = string, DbT = unknown> = { readonly [T in TableKey<M>]?: ResourceRouteOptions<M, T, Ref, DbT> | true; };

package/dist/{resources-B7htXQeg.js → resources-Ck7itNeX.js}

@@ -1,6 +1,6 @@
-import { n as dbError } from "./errors-8i6tSICm.js";
-import { o as problemResponse } from "./problem-pIiL3WbE.js";
-import { n as actionFits, t as defineResource } from "./resource-CHGOmg1O.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
+import { o as problemResponse } from "./problem-JRCohp1j.js";
+import { n as actionFits, t as defineResource } from "./resource-Bdkqi8jo.js";
 //#region src/server/resources.ts
 function split(path) {
 	return path.split("/").filter((segment) => segment !== "");

package/dist/{respond-Dpx48ATq.js → respond-Bhp3G__q.js}

@@ -1,8 +1,8 @@
-import { n as dbError, o as isDbError, r as dbErrorOf } from "./errors-8i6tSICm.js";
-import { s as toDbError } from "./result-COkvI9t5.js";
-import { o as problemResponse } from "./problem-pIiL3WbE.js";
-import { i as delegationOf, n as actorOf } from "./actor-KHDOKGb1.js";
-import { a as checkAal, t as isAnonymousUser } from "./view-DZ63nqwt.js";
+import { n as dbError, o as isDbError, r as dbErrorOf } from "./errors-BV1SKTVs.js";
+import { s as toDbError } from "./result-DIeYscA3.js";
+import { o as problemResponse } from "./problem-JRCohp1j.js";
+import { i as delegationOf, n as actorOf } from "./actor-CAL8mMih.js";
+import { a as checkAal, t as isAnonymousUser } from "./view-CYX1wsgp.js";
 import { n as jsonResponse } from "./json-CEnpTHlZ.js";
 //#region src/server/respond.ts
 /**

package/dist/{respond-Cdg5ibH5.d.ts → respond-CEBC6KUX.d.ts}

@@ -1,6 +1,6 @@
-import { b as DbError } from "./result-Cj3yWhjH.js";
-import { r as AuthState } from "./resolve-7atr-wWr.js";
-import { t as Aal } from "./mfa-DtflCXEt.js";
+import { b as DbError } from "./result-BREt7qOh.js";
+import { r as AuthState } from "./resolve-Bqb8TMTt.js";
+import { t as Aal } from "./mfa-YzkRjNad.js";
 //#region src/server/refresh.d.ts
 /** A router or browser prefetch, by its request headers. */
 declare function isPrefetch(request: Request): boolean;

package/dist/{result-Cj3yWhjH.d.ts → result-BREt7qOh.d.ts}

@@ -135,6 +135,20 @@ declare const isCheck: <C extends string = string>(error: unknown, constraint?:
 declare const isForeignKey: <C extends string = string>(error: unknown, constraint?: NoInfer<C>) => error is DbErrorOf<"foreign_key"> & {
   readonly constraint: C;
 };
+/** Handlers for `matchDbError`: one per error kind, plus `codes` for SQLSTATE codes. */
+type DbErrorMatchers = { readonly [K in DbErrorKind]?: (error: DbErrorOf<K>) => unknown; } & {
+  /**
+   * Handlers by SQLSTATE or PostgREST code (`23505`, `PGRST116`). They run
+   * before the handler for the error's kind.
+   */
+  readonly codes?: Readonly<Record<string, (error: DbError) => unknown>>;
+};
+/**
+ * Builds the factory `.orThrow()` takes from handlers per error kind and per
+ * SQLSTATE code. A handler that returns `undefined`, and an error no handler
+ * matches, throw a `DbException`.
+ */
+declare function matchDbError(matchers: DbErrorMatchers): (error: DbError) => unknown;
 /** Raw error shape shared by PostgREST responses and `pg` errors. */
 interface RawDbError {
   readonly message?: string;
@@ -295,4 +309,4 @@ declare function defineBetterResultErrors<const M extends DbErrorClasses, F exte
 declare function fromBetterResult<T>(result: BetterResultValue<T, unknown>, mapError?: (error: unknown) => DbError): Result<T>;
 declare function toDbError(cause: unknown): DbError;
 //#endregion
-export { isDbError as A, DbErrorOf as C, dbError as D, ValidationIssue as E, mapDbError as M, statusOf as N, isCheck as O, DbErrorKinds as S, RawDbError as T, ok as _, BetterResultOk as a, DbError as b, DbErrorClasses as c, Ok as d, Result as f, fromBetterResult as g, err as h, BetterResultErrors as i, isForeignKey as j, isConflict as k, Err as l, defineBetterResultErrors as m, BetterResultApi as n, BetterResultValue as o, ThrowMapper as p, BetterResultErr as r, DbErrorClass as s, AsyncResult as t, MappedDbError as u, toBetterResult as v, ErrorMapper as w, DbErrorKind as x, toDbError as y };
+export { isConflict as A, DbErrorMatchers as C, ValidationIssue as D, RawDbError as E, statusOf as F, isForeignKey as M, mapDbError as N, dbError as O, matchDbError as P, DbErrorKinds as S, ErrorMapper as T, ok as _, BetterResultOk as a, DbError as b, DbErrorClasses as c, Ok as d, Result as f, fromBetterResult as g, err as h, BetterResultErrors as i, isDbError as j, isCheck as k, Err as l, defineBetterResultErrors as m, BetterResultApi as n, BetterResultValue as o, ThrowMapper as p, BetterResultErr as r, DbErrorClass as s, AsyncResult as t, MappedDbError as u, toBetterResult as v, DbErrorOf as w, DbErrorKind as x, toDbError as y };

package/dist/{result-COkvI9t5.js → result-DIeYscA3.js}

@@ -1,5 +1,5 @@
 import { t as DbException } from "./db-exception-CnWcYPxL.js";
-import { c as mapDbError, n as dbError, o as isDbError, r as dbErrorOf } from "./errors-8i6tSICm.js";
+import { c as mapDbError, n as dbError, o as isDbError, r as dbErrorOf } from "./errors-BV1SKTVs.js";
 //#region src/core/result.ts
 const throwMappers = /* @__PURE__ */ new WeakMap();
 function inherit(from, next) {

package/dist/{rrule-zBh3CA1r.js → rrule-Cw4x4Pf_.js}

@@ -1,4 +1,4 @@
-import { t as temporal } from "./temporal-required-DqRzr7i0.js";
+import { t as temporal } from "./temporal-required-nfZ87U-0.js";
 //#region src/blocks/reminders/rrule.ts
 /**
 * Expands an RFC 5545 recurrence rule on `Temporal.ZonedDateTime`, so a

package/dist/{rules-4of_Fq-6.js → rules-BiQgmZ_U.js}

@@ -1,9 +1,9 @@
-import { n as dbError } from "./errors-8i6tSICm.js";
-import { a as ok, r as err, t as AsyncResult } from "./result-COkvI9t5.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
+import { a as ok, r as err, t as AsyncResult } from "./result-DIeYscA3.js";
 import { n as isRecord } from "./guards-6F2bCtQR.js";
 import { t as FILTER_OPERATORS } from "./filter-query-B3lhckKX.js";
-import { C as optionalText, D as recordOf, I as textOf, R as toInstant, f as errorText, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "./block-helpers-BfVCR5Fc.js";
-import { r as withBlockHooks } from "./block-hooks-ByKlh8Qy.js";
+import { C as optionalText, D as recordOf, I as textOf, R as toInstant, f as errorText, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "./block-helpers-DkVZNDrj.js";
+import { r as withBlockHooks } from "./block-hooks-C22vuIUd.js";
 import { t as evaluateFilterQuery } from "./filter-evaluate-C0ULNfS7.js";
 import { _ as ruleFilterFieldInfo } from "./client-BGnJ5WJi.js";
 //#region src/blocks/rules/rules.ts

package/dist/{sales-lines-CymdiwYd.js → sales-lines-CQ1iC6QM.js}

@@ -1,6 +1,6 @@
-import { C as optionalText, D as recordOf, I as textOf } from "./block-helpers-BfVCR5Fc.js";
-import { i as moneyOf, t as amountText } from "./money-codec-DCGgzO26.js";
-import { i as refOf, n as compact } from "./sales-shared-DjCuN8xG.js";
+import { C as optionalText, D as recordOf, I as textOf } from "./block-helpers-DkVZNDrj.js";
+import { i as moneyOf, t as amountText } from "./money-codec-C21MWw50.js";
+import { i as refOf, n as compact } from "./sales-shared-CDSytDEn.js";
 //#region src/blocks/sales-lines.ts
 /** A line a document function returned, in the document's `currency`. */
 function lineOf(value, currency) {

package/dist/{sales-shared-DjCuN8xG.js → sales-shared-CDSytDEn.js}

@@ -1,5 +1,5 @@
-import { t as temporal } from "./temporal-required-DqRzr7i0.js";
-import { C as optionalText } from "./block-helpers-BfVCR5Fc.js";
+import { t as temporal } from "./temporal-required-nfZ87U-0.js";
+import { C as optionalText } from "./block-helpers-DkVZNDrj.js";
 //#region src/blocks/sales-shared.ts
 /** Drops `undefined` properties, which `exactOptionalPropertyTypes` refuses. */
 function compact(value) {

package/dist/{search-LbjCylX5.js → search-ZP13UTT4.js}

@@ -1,6 +1,6 @@
-import { t as AsyncResult } from "./result-COkvI9t5.js";
-import { I as textOf, S as optionalInstant, j as run, k as recordsOf, o as blockCall, y as nullableText } from "./block-helpers-BfVCR5Fc.js";
-import { r as withBlockHooks } from "./block-hooks-ByKlh8Qy.js";
+import { t as AsyncResult } from "./result-DIeYscA3.js";
+import { I as textOf, S as optionalInstant, j as run, k as recordsOf, o as blockCall, y as nullableText } from "./block-helpers-DkVZNDrj.js";
+import { r as withBlockHooks } from "./block-hooks-C22vuIUd.js";
 //#region src/blocks/search/search.ts
 const vectorArg = (values) => run(() => Promise.resolve().then(() => vectorText(values)));
 const vectorText = (values) => {

package/dist/server/index.d.ts

@@ -1,31 +1,31 @@
-import { b as DbError, f as Result } from "../result-Cj3yWhjH.js";
-import { a as AnyModels, i as AnyFunctions, z as TableKey } from "../types-BO8lVTun.js";
-import { lt as SupportEventData, wt as Events } from "../events-CtAHxPal.js";
-import { m as RequestContext } from "../plugin-D5OIaP93.js";
-import { E as writeSession, S as readSession, a as ResolveAuthOptions, c as resolveAuth, d as CookieRecord, g as StoredSession, i as InvalidReason, l as AUTH_CACHE_HEADERS, n as AuthResolver, o as ResolvedState, p as CookieWrite, r as AuthState, s as clientIp, t as AuthResolution, u as CookieOptions, w as sessionCookieName } from "../resolve-7atr-wWr.js";
-import { n as SqlClient } from "../executor-DzJQVTE2.js";
+import { b as DbError, f as Result } from "../result-BREt7qOh.js";
+import { B as TableKey, a as AnyModels, i as AnyFunctions } from "../types-BrpW5ixT.js";
+import { lt as SupportEventData, wt as Events } from "../events-P3raDX2E.js";
+import { m as RequestContext } from "../plugin-D-95Q0w0.js";
+import { E as writeSession, S as readSession, a as ResolveAuthOptions, c as resolveAuth, d as CookieRecord, g as StoredSession, i as InvalidReason, l as AUTH_CACHE_HEADERS, n as AuthResolver, o as ResolvedState, p as CookieWrite, r as AuthState, s as clientIp, t as AuthResolution, u as CookieOptions, w as sessionCookieName } from "../resolve-Bqb8TMTt.js";
+import { n as SqlClient } from "../executor-D1hECPGG.js";
 import { a as SessionActor, c as agentClaims, i as IDENTITY_SCOPES, l as delegationOf, n as ActorOutcome, o as SessionDelegation, r as AgentActOptions, s as actorOf, t as ActClaim } from "../actor-BAhb-d1S.js";
-import { c as fromProblem, d as toProblem, i as ProblemDetails, l as isProblem, n as PROBLEM_CONTENT_TYPE, o as ProblemOptions, r as PROBLEM_TYPE_BASE, s as ProblemResponseOptions, u as problemResponse } from "../problem-CEjyhV5T.js";
+import { c as fromProblem, d as toProblem, i as ProblemDetails, l as isProblem, n as PROBLEM_CONTENT_TYPE, o as ProblemOptions, r as PROBLEM_TYPE_BASE, s as ProblemResponseOptions, u as problemResponse } from "../problem-DCDIQiTA.js";
 import { a as AuthorizationSubject, c as defineAuthorizer, i as AuthorizationResource, n as AuthorizationOutcome, o as Authorizer, r as AuthorizationRequest, s as PermissionRef, t as AnyAuthorizer } from "../authorizer-eiOjo-3l.js";
-import { i as ResourcePagination } from "../resource-DxcgtHq6.js";
-import { t as StorageApi } from "../storage-api-B4Ib2Zpo.js";
-import { Wt as DbStats, _ as Db, t as BetterSupabase } from "../define-DXTC706J.js";
+import { i as ResourcePagination } from "../resource-DYEtc-KN.js";
+import { j as StorageApi } from "../bucket-BBSNDFNH.js";
+import { Wt as DbStats, _ as Db, t as BetterSupabase } from "../define-M_r1d2AT.js";
 import { n as Impersonator, r as impersonatorOf, t as ImpersonationOptions } from "../impersonation-D5chOkrO.js";
-import { _ as SupportAuthorize, a as AutomationHooks, b as TicketSubject, c as ChatActionHook, d as IdentityRef, f as IdentityTarget, g as SubscriberPolicy, h as SubscriberEvent, i as AuthorizationHooks, l as DelegationPermissions, m as Subscriber, n as Approver, o as AutomationRef, p as PrincipalByIdentity, r as ApproverOf, s as ChatAction, t as ApprovalRequestRef, u as DelegationRef, v as SupportAuthorizeInput, x as defineAuthorizationHooks, y as SupportDecision } from "../authorization-hooks-Do5djkpz.js";
-import { A as SupportApprovalQuery, B as sqlSupportStore, C as supportSessions, D as supportCookie, E as clearSupportCookie, F as SupportRequest, G as LiteDriver, H as RequestIdOptions, I as SupportRequestInput, J as deleteAccount, K as DeleteAccountOptions, L as SupportSession, M as SupportCallerClaims, N as SupportEndedBy, O as supportCookieValue, P as SupportListFilter, R as SupportSessionStore, S as SupportStartRequest, T as SupportCookieOptions, U as PRIMARY_COOKIE, V as supportClaims, W as ReplicaState, _ as SupportApi, a as ServerDbOptions, b as SupportPolicy, c as TENANT_HEADER, d as SuspendAccountOptions, f as SuspendAccountResult, g as ActiveSupport, h as suspendAccount, i as ServerContext, j as SupportApprover, k as SqlSupportStoreOptions, l as EndSessionsResult, m as lastSignIns, n as ContextOptions, o as ServerKeys, p as endSessions, q as DeleteAccountResult, r as ForContextOptions, s as ServerOptions, t as BetterServer, u as LastSignIn, v as SupportExpireRouteOptions, w as SUPPORT_COOKIE, x as SupportSessions, y as SupportOptions, z as SupportStartInput } from "../server-types-fXwJoFjt.js";
-import { a as checkAal, i as amrOf, n as AmrEntry, r as aalOf, t as Aal } from "../mfa-DtflCXEt.js";
-import { n as toSession, t as AuthSession } from "../view-SuASaomx.js";
-import { a as serverCore, i as ServerCore, n as SessionEntryConfig, r as withSession, t as AuthOutageHook } from "../session-Djo5t4KQ.js";
-import { a as RespondOptions, c as isResult, d as RefreshPolicy, f as isPrefetch, h as shouldRefresh, i as MiddlewareOptions, l as respond, m as shouldCheckSession, n as AuthKind, o as Settled, p as refreshFor, r as GuardOptions, s as guard, u as settle } from "../respond-Cdg5ibH5.js";
-import { a as GuardEntryConfig, i as withBetterSupabase, n as BetterSupabaseContributions, o as withGuard, r as BetterSupabaseEntry, t as BetterSupabaseConfig } from "../composite-DMMA_Whg.js";
-import { a as AuthorizedContext, i as AuthorizeOptions, l as hasRole, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions, u as rolesAt } from "../kit-BlcEFQql.js";
-import { n as subjectReaders, t as SubjectReadersOptions } from "../subject-readers-81xiWh4M.js";
+import { _ as SupportAuthorize, a as AutomationHooks, b as TicketSubject, c as ChatActionHook, d as IdentityRef, f as IdentityTarget, g as SubscriberPolicy, h as SubscriberEvent, i as AuthorizationHooks, l as DelegationPermissions, m as Subscriber, n as Approver, o as AutomationRef, p as PrincipalByIdentity, r as ApproverOf, s as ChatAction, t as ApprovalRequestRef, u as DelegationRef, v as SupportAuthorizeInput, x as defineAuthorizationHooks, y as SupportDecision } from "../authorization-hooks-mLi894KH.js";
+import { A as supportCookieValue, B as SupportSessionStore, C as SupportSessions, D as SupportCookieOptions, E as SUPPORT_COOKIE, F as SupportEndedBy, G as PRIMARY_COOKIE, H as sqlSupportStore, I as SupportListFilter, J as DeleteAccountOptions, K as ReplicaState, L as SupportRequest, M as SupportApprovalQuery, N as SupportApprover, O as clearSupportCookie, P as SupportCallerClaims, R as SupportRequestInput, S as SupportPolicy, T as supportSessions, U as supportClaims, V as SupportStartInput, W as RequestIdOptions, X as deleteAccount, Y as DeleteAccountResult, _ as suspendAccount, a as ServerContext, b as SupportExpireRouteOptions, c as ServerOptions, d as EndSessionsResult, f as LastSignIn, g as lastSignIns, h as endSessions, i as ForContextOptions, j as SqlSupportStoreOptions, k as supportCookie, m as SuspendAccountResult, n as BetterServer, o as ServerDbOptions, p as SuspendAccountOptions, q as LiteDriver, r as ContextOptions, s as ServerKeys, t as AdminDb, u as TENANT_HEADER, v as ActiveSupport, w as SupportStartRequest, x as SupportOptions, y as SupportApi, z as SupportSession } from "../server-types-BKN_R4Ws.js";
+import { a as checkAal, i as amrOf, n as AmrEntry, r as aalOf, t as Aal } from "../mfa-YzkRjNad.js";
+import { n as toSession, t as AuthSession } from "../view-Bf7e07rQ.js";
+import { a as serverCore, i as ServerCore, n as SessionEntryConfig, r as withSession, t as AuthOutageHook } from "../session-CwpfitmI.js";
+import { a as RespondOptions, c as isResult, d as RefreshPolicy, f as isPrefetch, h as shouldRefresh, i as MiddlewareOptions, l as respond, m as shouldCheckSession, n as AuthKind, o as Settled, p as refreshFor, r as GuardOptions, s as guard, u as settle } from "../respond-CEBC6KUX.js";
+import { a as GuardEntryConfig, i as withBetterSupabase, n as BetterSupabaseContributions, o as withGuard, r as BetterSupabaseEntry, t as BetterSupabaseConfig } from "../composite-B1Mmo4TU.js";
+import { a as AuthorizedContext, i as AuthorizeOptions, l as hasRole, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions, u as rolesAt } from "../kit-BeZX2pR_.js";
+import { n as subjectReaders, t as SubjectReadersOptions } from "../subject-readers-BNQzBDN9.js";
 import { i as toCsv, n as csvColumns, t as CsvOptions } from "../csv-D3eKxV1T.js";
 import { i as JwsAlgorithm, n as Jwks, r as JwksOfOptions } from "../jws-35a8VhFV.js";
-import { a as ResourceHandler, c as ResourceList, l as ResourceRouteOptions, s as ResourceInput } from "../resource-types-CC59gMHE.js";
-import { i as tagFor, n as cacheTagsOf, r as tagCache, t as TagOptions } from "../tags-7NHyD1P8.js";
-import { n as supportOf, t as SupportView } from "../support-view-CznLe4jq.js";
-import { a as sessionStatus, c as RefreshOutcome, i as clearSessionCookies, l as refreshSession, n as SessionStatus, o as authContext, r as SessionStatusOptions, t as ClearSessionCookiesOptions } from "../ended-EcTtzzQJ.js";
+import { a as ResourceHandler, c as ResourceList, l as ResourceRouteOptions, s as ResourceInput } from "../resource-types-CGr0BbL-.js";
+import { i as tagFor, n as cacheTagsOf, r as tagCache, t as TagOptions } from "../tags-AUpl4Ob9.js";
+import { n as supportOf, t as SupportView } from "../support-view-IRnDLuGN.js";
+import { a as sessionStatus, c as RefreshOutcome, i as clearSessionCookies, l as refreshSession, n as SessionStatus, o as authContext, r as SessionStatusOptions, t as ClearSessionCookiesOptions } from "../ended-DQmwYosO.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { Middleware, SingleKeyEntry } from "@supabase/middleware";
 import { AuthMode, JWTClaims, UserClaims } from "@supabase/server";
@@ -61,7 +61,7 @@ export declare function extendServer<R extends object>(server: object, extra: Om
  * Server-side entry point for APIs, jobs, MCP servers and framework
  * adapters. Holds the secrets; `betterSupabase` stays isomorphic.
  */
-export declare function createServer<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options?: ServerOptions): BetterServer<M, F, E, C, P>;
+export declare function createServer<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P, B>, options?: ServerOptions): BetterServer<M, F, E, C, P, B>;
 //#endregion
 //#region src/server/adapter.d.ts
 interface HandleOptions extends MiddlewareOptions {
@@ -105,7 +105,7 @@ export declare function unexpectedResponse(cause: unknown, options: {
  *   handle(server, request, (c) => c.db.notes.findMany(), { waitUntil: (p) => ctx.waitUntil(p) }) }
  * ```
  */
-export declare function handle<M extends AnyModels, F extends AnyFunctions, E, C, P>(server: BetterServer<M, F, E, C, P>, request: Request, run: (ctx: ServerContext<M, F, E, C, P>) => unknown, options?: HandleOptions): Promise<Response>;
+export declare function handle<M extends AnyModels, F extends AnyFunctions, E, C, P, B>(server: BetterServer<M, F, E, C, P, B>, request: Request, run: (ctx: ServerContext<M, F, E, C, P, B>) => unknown, options?: HandleOptions): Promise<Response>;
 /**
  * Verifies a bare access token (an MCP transport's, a WebSocket's) without
  * cookies or a refresh. An empty token resolves to `anon`.
@@ -393,4 +393,4 @@ export declare function withDbStats(options?: {
   };
 }, () => DbStats>;
 //#endregion
-export { AUTH_CACHE_HEADERS, type Aal, type AccessTokenResolverOptions, type AccessTokenRevocation, type AccountEventType, type ActClaim, type ActionResult, type ActiveSupport, type ActorOutcome, type AgentActOptions, type AmrEntry, type AnyAuthorizer, type ApprovalRequestRef, type Approver, type ApproverOf, type AuthKind, type AuthOutageHook, type AuthResolution, type AuthResolver, type AuthSession, type AuthState, type AuthorizationHooks, type AuthorizationOutcome, type AuthorizationRequest, type AuthorizationResource, type AuthorizationSubject, type AuthorizeOptions, type AuthorizedContext, type Authorizer, type AutomationHooks, type AutomationRef, type BetterServer, type BetterSupabaseConfig, type BetterSupabaseContributions, type BetterSupabaseEntry, type BlockActionOptions, type BlockRequireOptions, type ChatAction, type ChatActionHook, type ClearSessionCookiesOptions, type ContextOptions, type CookieOptions, type CookieRecord, type CookieWrite, type CsvOptions, type CsvResponseOptions, type DelegationPermissions, type DelegationRef, type DeleteAccountOptions, type DeleteAccountResult, type EndSessionsResult, type ForContextOptions, type GuardEntryConfig, type GuardOptions, type HandleOptions, IDENTITY_SCOPES, type IdentityRef, type IdentityTarget, type ImpersonationOptions, type Impersonator, type InvalidReason, type LastSignIn, type LiteDriver, type MiddlewareOptions, PRIMARY_COOKIE, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type PermissionRef, type PrincipalByIdentity, type ProblemDetails, type ProblemOptions, type ProblemResponseOptions, type RateLimitPolicy, type RateLimitState, type RefreshOutcome, type RefreshPolicy, type ReplicaState, type RequestIdOptions, type ResolveAuthOptions, type ResolvedState, type ResourceHandler, type ResourceInput, type ResourceList, type ResourcePagination, type ResourceRouteOptions, type RespondOptions, SUPPORT_COOKIE, type ServerContext, type ServerCore, type ServerDbOptions, type ServerOptions, type ServerTiming, type SessionActor, type SessionDelegation, type SessionEntryConfig, type SessionLookup, type SessionStatus, type SessionStatusOptions, type Settled, type SqlSupportStoreOptions, type StoredSession, type SubjectReadersOptions, type Subscriber, type SubscriberEvent, type SubscriberPolicy, type SupabaseAuthContext, type SupportApi, type SupportApprovalQuery, type SupportApprover, type SupportAuthorize, type SupportAuthorizeInput, type SupportCallerClaims, type SupportCookieOptions, type SupportDecision, type SupportEndedBy, type SupportExpireRouteOptions, type SupportListFilter, type SupportOptions, type SupportPolicy, type SupportRequest, type SupportRequestInput, type SupportSession, type SupportSessionStore, type SupportSessions, type SupportSessionsEvents, type SupportStartInput, type SupportStartRequest, type SupportStorageOptions, type SupportView, type SuspendAccountOptions, type SuspendAccountResult, TENANT_HEADER, type TagOptions, type TicketSubject, aalOf, actorOf, agentClaims, amrOf, authContext, cacheTagsOf, checkAal, clearSessionCookies, clearSupportCookie, clientIp, csvColumns, defineAuthorizationHooks, defineAuthorizer, delegationOf, deleteAccount, endSessions, fromProblem, guard, hasRole, impersonatorOf, isPrefetch, isProblem, isResult, lastSignIns, problemResponse, readSession, refreshFor, refreshSession, resolveAuth, respond, rolesAt, serverCore, sessionCookieName, sessionStatus, settle, shouldCheckSession, shouldRefresh, sqlSupportStore, subjectReaders, supportClaims, supportCookie, supportCookieValue, supportOf, supportSessions, suspendAccount, tagCache, tagFor, toCsv, toProblem, toSession, withBetterSupabase, withGuard, withSession, writeSession };
+export { AUTH_CACHE_HEADERS, type Aal, type AccessTokenResolverOptions, type AccessTokenRevocation, type AccountEventType, type ActClaim, type ActionResult, type ActiveSupport, type ActorOutcome, type AdminDb, type AgentActOptions, type AmrEntry, type AnyAuthorizer, type ApprovalRequestRef, type Approver, type ApproverOf, type AuthKind, type AuthOutageHook, type AuthResolution, type AuthResolver, type AuthSession, type AuthState, type AuthorizationHooks, type AuthorizationOutcome, type AuthorizationRequest, type AuthorizationResource, type AuthorizationSubject, type AuthorizeOptions, type AuthorizedContext, type Authorizer, type AutomationHooks, type AutomationRef, type BetterServer, type BetterSupabaseConfig, type BetterSupabaseContributions, type BetterSupabaseEntry, type BlockActionOptions, type BlockRequireOptions, type ChatAction, type ChatActionHook, type ClearSessionCookiesOptions, type ContextOptions, type CookieOptions, type CookieRecord, type CookieWrite, type CsvOptions, type CsvResponseOptions, type DelegationPermissions, type DelegationRef, type DeleteAccountOptions, type DeleteAccountResult, type EndSessionsResult, type ForContextOptions, type GuardEntryConfig, type GuardOptions, type HandleOptions, IDENTITY_SCOPES, type IdentityRef, type IdentityTarget, type ImpersonationOptions, type Impersonator, type InvalidReason, type LastSignIn, type LiteDriver, type MiddlewareOptions, PRIMARY_COOKIE, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type PermissionRef, type PrincipalByIdentity, type ProblemDetails, type ProblemOptions, type ProblemResponseOptions, type RateLimitPolicy, type RateLimitState, type RefreshOutcome, type RefreshPolicy, type ReplicaState, type RequestIdOptions, type ResolveAuthOptions, type ResolvedState, type ResourceHandler, type ResourceInput, type ResourceList, type ResourcePagination, type ResourceRouteOptions, type RespondOptions, SUPPORT_COOKIE, type ServerContext, type ServerCore, type ServerDbOptions, type ServerOptions, type ServerTiming, type SessionActor, type SessionDelegation, type SessionEntryConfig, type SessionLookup, type SessionStatus, type SessionStatusOptions, type Settled, type SqlSupportStoreOptions, type StoredSession, type SubjectReadersOptions, type Subscriber, type SubscriberEvent, type SubscriberPolicy, type SupabaseAuthContext, type SupportApi, type SupportApprovalQuery, type SupportApprover, type SupportAuthorize, type SupportAuthorizeInput, type SupportCallerClaims, type SupportCookieOptions, type SupportDecision, type SupportEndedBy, type SupportExpireRouteOptions, type SupportListFilter, type SupportOptions, type SupportPolicy, type SupportRequest, type SupportRequestInput, type SupportSession, type SupportSessionStore, type SupportSessions, type SupportSessionsEvents, type SupportStartInput, type SupportStartRequest, type SupportStorageOptions, type SupportView, type SuspendAccountOptions, type SuspendAccountResult, TENANT_HEADER, type TagOptions, type TicketSubject, aalOf, actorOf, agentClaims, amrOf, authContext, cacheTagsOf, checkAal, clearSessionCookies, clearSupportCookie, clientIp, csvColumns, defineAuthorizationHooks, defineAuthorizer, delegationOf, deleteAccount, endSessions, fromProblem, guard, hasRole, impersonatorOf, isPrefetch, isProblem, isResult, lastSignIns, problemResponse, readSession, refreshFor, refreshSession, resolveAuth, respond, rolesAt, serverCore, sessionCookieName, sessionStatus, settle, shouldCheckSession, shouldRefresh, sqlSupportStore, subjectReaders, supportClaims, supportCookie, supportCookieValue, supportOf, supportSessions, suspendAccount, tagCache, tagFor, toCsv, toProblem, toSession, withBetterSupabase, withGuard, withSession, writeSession };

package/dist/server/index.js

@@ -1,31 +1,31 @@
-import { n as dbError } from "../errors-8i6tSICm.js";
-import { a as ok, r as err } from "../result-COkvI9t5.js";
+import { n as dbError } from "../errors-BV1SKTVs.js";
 import { n as isRecord } from "../guards-6F2bCtQR.js";
-import { t as base64ToText } from "../base64-BmeCBgGo.js";
-import { c as toProblem, i as isProblem, n as PROBLEM_TYPE_BASE, o as problemResponse, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "../problem-pIiL3WbE.js";
-import { i as delegationOf, n as actorOf, r as agentClaims, t as IDENTITY_SCOPES } from "../actor-KHDOKGb1.js";
-import { i as userContext, r as impersonatorOf } from "../impersonation-CDeCzZP6.js";
+import { t as base64ToText } from "../base64-D4aqdnDR.js";
+import { c as toProblem, i as isProblem, n as PROBLEM_TYPE_BASE, o as problemResponse, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "../problem-JRCohp1j.js";
+import { i as delegationOf, n as actorOf, r as agentClaims, t as IDENTITY_SCOPES } from "../actor-CAL8mMih.js";
+import { i as userContext, r as impersonatorOf } from "../impersonation-DxU6yHJV.js";
 import { t as supportOf } from "../support-view-g4YLBeqX.js";
 import { r as toCsv, t as csvColumns } from "../csv-CVfXqaAu.js";
-import { A as suspendAccount, C as shouldRefresh, D as SERVER_EVENT_SOURCE, E as defineAuthorizationHooks, O as endSessions, S as shouldCheckSession, T as serverCore, a as unexpectedResponse, b as isPrefetch, c as extendServer, d as clearSupportCookie, f as supportCookie, h as TENANT_HEADER, i as resolveToken, j as deleteAccount, k as lastSignIns, l as supportStorage, m as supportCookieValue, n as flushEvents, o as withFlush, r as handle, s as createServer, u as SUPPORT_COOKIE, x as refreshFor, y as withSession } from "../adapter-rmWaLNe3.js";
+import { A as suspendAccount, C as shouldRefresh, D as SERVER_EVENT_SOURCE, E as defineAuthorizationHooks, O as endSessions, S as shouldCheckSession, T as serverCore, a as unexpectedResponse, b as isPrefetch, c as extendServer, d as clearSupportCookie, f as supportCookie, h as TENANT_HEADER, i as resolveToken, j as deleteAccount, k as lastSignIns, l as supportStorage, m as supportCookieValue, n as flushEvents, o as withFlush, r as handle, s as createServer, u as SUPPORT_COOKIE, x as refreshFor, y as withSession } from "../adapter-B2WRsRIg.js";
 import { n as PRIMARY_COOKIE } from "../replicas-BvIL4_jL.js";
-import { t as authContext } from "../context-BDDgjoxz.js";
-import { _ as writeSession, a as clearSessionCookies, h as sessionCookieName, i as refreshSession, o as sessionStatus, p as readSession, r as resolveAuth, s as AUTH_CACHE_HEADERS, t as clientIp } from "../resolve-CAR9oaKW.js";
-import { a as checkAal, i as amrOf, n as toSession, r as aalOf } from "../view-DZ63nqwt.js";
-import { a as respond, i as isResult, o as settle, r as guard } from "../respond-Dpx48ATq.js";
-import { n as sqlSupportStore, r as supportClaims, t as supportSessions } from "../support-BsqhV6jP.js";
+import { t as authContext } from "../context-BiwgsycK.js";
+import { _ as writeSession, a as clearSessionCookies, h as sessionCookieName, i as refreshSession, o as sessionStatus, p as readSession, r as resolveAuth, s as AUTH_CACHE_HEADERS, t as clientIp } from "../resolve-f8QNuYI3.js";
+import { a as checkAal, i as amrOf, n as toSession, r as aalOf } from "../view-CYX1wsgp.js";
+import { a as respond, i as isResult, o as settle, r as guard } from "../respond-Bhp3G__q.js";
+import { n as sqlSupportStore, r as supportClaims, t as supportSessions } from "../support-BAhTqI7y.js";
 import { n as event, t as defineEvents } from "../event-map-Dy2vKHai.js";
-import { t as subjectReaders } from "../subject-readers-DDyPTIOr.js";
-import { t as postgresExecutor } from "../executor-aKUo_Xyb.js";
+import { t as subjectReaders } from "../subject-readers-BpwUFJtp.js";
+import { t as postgresExecutor } from "../executor-CxGQiQN_.js";
 import { n as jwtClaimsOf, r as userClaimsOf, t as authModeOf } from "../claims-0KZVT804.js";
-import { n as withGuard, t as withBetterSupabase } from "../composite-CPV0thLs.js";
-import { a as jwksOf, c as verifyCompact, t as JwsError } from "../jws-milwSg7E.js";
+import { n as withGuard, t as withBetterSupabase } from "../composite-BFatHqOU.js";
+import { c as verifyCompact, t as JwsError } from "../jws-CwBB5QAT.js";
+import { t as jwksSource } from "../jwks-cache-C4rA69hD.js";
 import { i as rateLimitPolicyHeader, n as periodSeconds, r as rateLimitHeader, t as isRateLimitPolicyName } from "../ratelimit-headers-Bsxx0Tj2.js";
-import { r as defineAuthorizer } from "../authorizer-dVVN05Un.js";
-import { t as defineResource } from "../resource-CHGOmg1O.js";
+import { r as defineAuthorizer } from "../authorizer-B3yyCVUF.js";
+import { t as defineResource } from "../resource-Bdkqi8jo.js";
 import { i as withServerTiming, n as parseDbStats, r as withDbStats, t as DB_CALLS_HEADER } from "../timing-BMCWgpdZ.js";
 import { n as tagCache, r as tagFor, t as cacheTagsOf } from "../tags-B99_U9Pp.js";
-import { a as rolesAt, r as hasRole } from "../kit-gqwkVhGU.js";
+import { a as rolesAt, r as hasRole } from "../kit-LTbHrWWD.js";
 import { defineMiddleware } from "@supabase/middleware";
 //#region src/server/csv.ts
 function disposition(filename) {
@@ -136,51 +136,6 @@ function withBlock(key, create) {
 	})();
 }
 //#endregion
-//#region src/core/jwks-cache.ts
-/** The most bytes read from a JWKS response. */
-const MAX_JWKS_BYTES = 262144;
-/**
-* A cached key set. A URL is fetched on first use and again after
-* `cacheSeconds`; a refresh for an unknown `kid` refetches at most once per
-* `refetchSeconds`, so a stream of forged `kid`s can't hammer the issuer.
-* Concurrent callers share one fetch.
-*/
-function jwksSource(input, options = {}) {
-	const parse = (value) => jwksOf(value, options.rsa === void 0 ? {} : { rsa: options.rsa });
-	if (!(input instanceof URL) && typeof input !== "function") {
-		const keys = parse(input);
-		return () => Promise.resolve(ok(keys));
-	}
-	const now = options.now ?? Date.now;
-	const cacheMs = (options.cacheSeconds ?? 300) * 1e3;
-	const refetchMs = (options.refetchSeconds ?? 30) * 1e3;
-	let cached;
-	let pending;
-	const load = async () => {
-		if (typeof input === "function") return ok(parse(await input()));
-		const response = await (options.fetch ?? fetch)(input, { headers: { accept: "application/jwk-set+json, application/json" } });
-		if (!response.ok) return err(dbError("network", `The JWKS answered ${response.status}`, { code: "JWKS_FETCH_FAILED" }));
-		const text = await response.text();
-		if (text.length > MAX_JWKS_BYTES) return err(dbError("network", "The JWKS response is too large", { code: "JWKS_FETCH_FAILED" }));
-		return ok(parse(JSON.parse(text)));
-	};
-	return async (refresh) => {
-		const age = cached ? now() - cached.at : Number.POSITIVE_INFINITY;
-		if (cached && age < (refresh ? refetchMs : cacheMs)) return ok(cached.keys);
-		pending ??= load().catch((cause) => err(dbError("network", `The JWKS could not be loaded: ${cause instanceof Error ? cause.message : String(cause)}`, { code: "JWKS_FETCH_FAILED" }))).then((result) => {
-			if (result.ok) cached = {
-				keys: result.data,
-				at: now()
-			};
-			return result;
-		}).finally(() => {
-			pending = void 0;
-		});
-		const result = await pending;
-		return !result.ok && cached ? ok(cached.keys) : result;
-	};
-}
-//#endregion
 //#region src/auth/access-token.ts
 const RESERVED = /* @__PURE__ */ new Set([
 	"iss",