better-supabase 0.10.0 → 0.12.0

package/dist/index.d.ts

@@ -1,18 +1,18 @@
 /// <reference lib="esnext.temporal" />
-import { n as DbException, t as escapeLike } from "./escape-like-AUEPn-C5.js";
-import { A as isDbError, C as DbErrorOf, D as dbError, E as ValidationIssue, M as mapDbError, N as statusOf, O as isCheck, S as DbErrorKinds, T as RawDbError, _ as ok, a as BetterResultOk, b as DbError, c as DbErrorClasses, d as Ok, f as Result, g as fromBetterResult, h as err, i as BetterResultErrors, j as isForeignKey, k as isConflict, l as Err, m as defineBetterResultErrors, n as BetterResultApi, o as BetterResultValue, r as BetterResultErr, s as DbErrorClass, t as AsyncResult, u as MappedDbError, v as toBetterResult, w as ErrorMapper, x as DbErrorKind, y as toDbError } from "./result-Cj3yWhjH.js";
-import { A as Relations, B as TableMeta, C as ModelTypes, D as RealtimeTableMeta, E as PrimaryKeyValue, F as Simplify, H as UniqueKeyName, I as SubjectRef, L as SubjectTypeOf, M as Row, N as Schema, O as RelationMeta, P as SchemaMeta, R as TableFlags, S as ModelFlags, T as PrimaryKeyColumn, U as UniqueWhere, V as UniqueConstraint, W as Update, _ as FunctionResult, a as AnyModels, b as FunctionsOf, c as Casing, d as Codec, f as ColumnMeta, g as FunctionMeta, h as ForeignKeyConstraint, i as AnyFunctions, j as ResultColumn, k as RelationTypes, l as CheckConstraint, m as Flags, n as AccessPolicySql, o as BucketMeta, p as DatabaseOf, r as AccessTopicPolicy, s as BucketPolicyName, t as AccessBucketPolicy, u as ClaimsMeta, v as FunctionSignature, w as ModelsOf, x as Insert, y as FunctionTypes, z as TableKey } from "./types-BO8lVTun.js";
-import { C as Selection, D as not, E as column, O as or, S as SelectOp, T as and, _ as MutationOp, a as AggregateFn, b as Quantifier, c as Condition, d as FunctionSource, f as Include, g as MutationKind, h as MutationIntent, i as RpcContext, l as CountMode, m as Measure, n as ExecuteResult, o as Aggregation, p as InsertOp, r as Executor, s as ColumnOp, t as ExecuteContext, u as DeleteOp, v as Operation, w as UpdateOp, x as SelectColumn, y as OrderTerm } from "./executor-BicyP8Nl.js";
-import { O as BlockEventType, T as BlockEvent, a as EventHandler, c as MutationNotice, d as RpcNotice, i as ErrorEvent, l as QueryEvent, n as AuthOutageEvent, o as EventHub, r as BetterSupabaseEvents, s as EventName, t as AuthEvent, u as RefreshEvent, wt as Events, xt as EventMap } from "./events-CtAHxPal.js";
-import { a as ExtensionOf, c as MutationEvent, d as Plugin, f as RepositoryApi, g as definePlugin, h as WithExtension, i as CallOptions, l as NoExtension, m as RequestContext, n as AnyPlugin, o as HasFlag, p as RepositoryExtension, r as ApplyExtension, s as HookArgs, t as Actor, u as PLUGIN_API_VERSION } from "./plugin-D5OIaP93.js";
+import { n as DbException, t as escapeLike } from "./escape-like-B339PlP-.js";
+import { A as isConflict, C as DbErrorMatchers, D as ValidationIssue, E as RawDbError, F as statusOf, M as isForeignKey, N as mapDbError, O as dbError, P as matchDbError, S as DbErrorKinds, T as ErrorMapper, _ as ok, a as BetterResultOk, b as DbError, c as DbErrorClasses, d as Ok, f as Result, g as fromBetterResult, h as err, i as BetterResultErrors, j as isDbError, k as isCheck, l as Err, m as defineBetterResultErrors, n as BetterResultApi, o as BetterResultValue, r as BetterResultErr, s as DbErrorClass, t as AsyncResult, u as MappedDbError, v as toBetterResult, w as DbErrorOf, x as DbErrorKind, y as toDbError } from "./result-BREt7qOh.js";
+import { A as RelationTypes, B as TableKey, C as ModelFlags, D as PrimaryKeyValue, E as PrimaryKeyColumn, F as SchemaMeta, G as Update, H as UniqueConstraint, I as Simplify, K as WritableColumns, L as SubjectRef, M as ResultColumn, N as Row, O as RealtimeTableMeta, P as Schema, R as SubjectTypeOf, S as Insert, T as ModelsOf, U as UniqueKeyName, V as TableMeta, W as UniqueWhere, _ as FunctionResult, a as AnyModels, b as FunctionsOf, c as Casing, d as Codec, f as ColumnMeta, g as FunctionMeta, h as ForeignKeyConstraint, i as AnyFunctions, j as Relations, k as RelationMeta, l as CheckConstraint, m as Flags, n as AccessPolicySql, o as BucketMeta, p as DatabaseOf, r as AccessTopicPolicy, s as BucketPolicyName, t as AccessBucketPolicy, u as ClaimsMeta, v as FunctionSignature, w as ModelTypes, x as GeneratedColumns, y as FunctionTypes, z as TableFlags } from "./types-BrpW5ixT.js";
+import { C as Selection, D as not, E as column, O as or, S as SelectOp, T as and, _ as MutationOp, a as AggregateFn, b as Quantifier, c as Condition, d as FunctionSource, f as Include, g as MutationKind, h as MutationIntent, i as RpcContext, l as CountMode, m as Measure, n as ExecuteResult, o as Aggregation, p as InsertOp, r as Executor, s as ColumnOp, t as ExecuteContext, u as DeleteOp, v as Operation, w as UpdateOp, x as SelectColumn, y as OrderTerm } from "./executor-BnMC0lj3.js";
+import { O as BlockEventType, T as BlockEvent, a as EventHandler, c as MutationNotice, d as RpcNotice, i as ErrorEvent, l as QueryEvent, n as AuthOutageEvent, o as EventHub, r as BetterSupabaseEvents, s as EventName, t as AuthEvent, u as RefreshEvent, wt as Events, xt as EventMap } from "./events-P3raDX2E.js";
+import { a as ExtensionOf, c as MutationEvent, d as Plugin, f as RepositoryApi, g as definePlugin, h as WithExtension, i as CallOptions, l as NoExtension, m as RequestContext, n as AnyPlugin, o as HasFlag, p as RepositoryExtension, r as ApplyExtension, s as HookArgs, t as Actor, u as PLUGIN_API_VERSION } from "./plugin-D-95Q0w0.js";
 import { i as silentLogger, n as Logger, r as consoleLogger, t as LogFields } from "./logger-DWVYUmwi.js";
-import { n as validate, t as StandardSchemaV1 } from "./standard-C3_AAF3g.js";
-import { a as ProblemFormat, c as fromProblem, d as toProblem, i as ProblemDetails, l as isProblem, n as PROBLEM_CONTENT_TYPE, o as ProblemOptions, r as PROBLEM_TYPE_BASE, s as ProblemResponseOptions, t as BlockProblemOptions, u as problemResponse } from "./problem-CEjyhV5T.js";
+import { n as validate, t as StandardSchemaV1 } from "./standard-BcUQuUgu.js";
+import { a as ProblemFormat, c as fromProblem, d as toProblem, i as ProblemDetails, l as isProblem, n as PROBLEM_CONTENT_TYPE, o as ProblemOptions, r as PROBLEM_TYPE_BASE, s as ProblemResponseOptions, t as BlockProblemOptions, u as problemResponse } from "./problem-DCDIQiTA.js";
 import { t as SPEC_PINS } from "./spec-pins-Dqpml2dZ.js";
-import { Q as StoragePath } from "./storage-api-B4Ib2Zpo.js";
-import { $ as ReadSetParams, At as NumericMeasureArg, B as UpsertArgs, Bt as WhereInput, C as ManyReturningArgs, Ct as FindOnlyArgs, D as OffsetRangeArgs, Dt as MeasureArg, E as OffsetPageArgs, Et as JsonPathOps, F as RepositoryOf, Ft as RelationMeasureArg, Gt as EMPTY_STATS, H as WriteArgs, Ht as RpcDefinition, I as Returned, It as RequestArgs, J as ReadSetAuth, K as InferReadSetParams, Kt as StatsRecorder, Lt as SelectArg, Mt as OrderByInput, Nt as Payload, Ot as MeasureKey, P as Repository, Pt as ReadArgs, Q as ReadSetParamValue, R as RpcOptions, Rt as SortDirection, S as ManyResult, St as FindManyArgs, T as OffsetPage, Tt as IncludeArgs, U as WriteManyArgs, Ut as SupabaseOptions, V as UpsertManyArgs, Vt as ConnectOptions, W as SearchArgs, Wt as DbStats, X as ReadSetParamType, Y as ReadSetOptions, Z as ReadSetParamTypes, _ as Db, _t as ColumnOrderByArg, a as explainPostgrest, at as QuerySpec, b as DeleteExt, bt as FieldFilter, c as CacheTarget, ct as TableSpecs, d as memoryCache, dt as AggregateArgs, et as ReadSetResult, f as rowKey, ft as AggregateOrderBy, g as CursorPageArgs, gt as ColumnOrderBy, h as CursorPage, ht as AggregateRow, i as PostgrestExecutorOptions, it as InferResult, j as PageOf, jt as OrderByArg, kt as MutableWhere, l as MemoryCache, lt as isQuerySpec, m as ConflictTarget, mt as AggregateResult, n as defineSupabase, nt as isReadSet, o as postgrestExecutor, ot as ReadMethod, p as rpcCacheTargets, pt as AggregateOrderByArg, q as ReadSet, qt as recordStats, r as PostgrestClientLike, rt as readSetTables, s as CacheAdapter, st as Specs, t as BetterSupabase, tt as defineReadSet, u as cacheTargetOf, ut as specTables, v as DbHelpers, vt as CountArg, wt as IncludeArg, x as FindExt, xt as FindFirstArgs, y as DeleteArgs, yt as CountArgs, z as UpdateArgs, zt as SortSpec } from "./define-DXTC706J.js";
-import { a as PostgrestPlan, n as PlanLimit, o as compilePostgrest, r as PlanOrder, t as PlanFilter } from "./postgrest-D6fEMsp4.js";
-import { n as postgrestCompiler, t as Compiler } from "./compiler-C6E3WwIi.js";
+import { Q as StoragePath } from "./bucket-BbePDVwc.js";
+import { $ as ReadSetParams, At as NumericMeasureArg, B as UpsertArgs, Bt as WhereInput, C as ManyReturningArgs, Ct as FindOnlyArgs, D as OffsetRangeArgs, Dt as MeasureArg, E as OffsetPageArgs, Et as JsonPathOps, F as RepositoryOf, Ft as RelationMeasureArg, Gt as EMPTY_STATS, H as WriteArgs, Ht as RpcDefinition, I as Returned, It as RequestArgs, J as ReadSetAuth, Jt as BucketRegistry, K as InferReadSetParams, Kt as StatsRecorder, Lt as SelectArg, Mt as OrderByInput, Nt as Payload, Ot as MeasureKey, P as Repository, Pt as ReadArgs, Q as ReadSetParamValue, R as RpcOptions, Rt as SortDirection, S as ManyResult, St as FindManyArgs, T as OffsetPage, Tt as IncludeArgs, U as WriteManyArgs, Ut as SupabaseOptions, V as UpsertManyArgs, Vt as ConnectOptions, W as SearchArgs, Wt as DbStats, X as ReadSetParamType, Y as ReadSetOptions, Yt as BucketsHelper, Z as ReadSetParamTypes, _ as Db, _t as ColumnOrderByArg, a as explainPostgrest, at as QuerySpec, b as DeleteExt, bt as FieldFilter, c as CacheTarget, ct as TableSpecs, d as memoryCache, dt as AggregateArgs, et as ReadSetResult, f as rowKey, ft as AggregateOrderBy, g as CursorPageArgs, gt as ColumnOrderBy, h as CursorPage, ht as AggregateRow, i as PostgrestExecutorOptions, it as InferResult, j as PageOf, jt as OrderByArg, kt as MutableWhere, l as MemoryCache, lt as isQuerySpec, m as ConflictTarget, mt as AggregateResult, n as defineSupabase, nt as isReadSet, o as postgrestExecutor, ot as ReadMethod, p as rpcCacheTargets, pt as AggregateOrderByArg, q as ReadSet, qt as recordStats, r as PostgrestClientLike, rt as readSetTables, s as CacheAdapter, st as Specs, t as BetterSupabase, tt as defineReadSet, u as cacheTargetOf, ut as specTables, v as DbHelpers, vt as CountArg, wt as IncludeArg, x as FindExt, xt as FindFirstArgs, y as DeleteArgs, yt as CountArgs, z as UpdateArgs, zt as SortSpec } from "./define-DYZnvAbs.js";
+import { a as PostgrestPlan, n as PlanLimit, o as compilePostgrest, r as PlanOrder, t as PlanFilter } from "./postgrest-CjnO1hbr.js";
+import { n as postgrestCompiler, t as Compiler } from "./compiler-D_Gjpw_O.js";
 import { StandardJSONSchemaV1, StandardSchemaV1 as StandardSchemaV1$1 } from "@standard-schema/spec";
 //#region src/core/table-json-schema.d.ts
 /** Validator for one scalar, independent of the target library. */
@@ -246,4 +246,4 @@ export declare function toCamel(name: string): string;
 /** `firstName` to `first_name`. */
 export declare function toSnake(name: string): string;
 //#endregion
-export { type AccessBucketPolicy, type AccessPolicySql, type AccessTopicPolicy, type Actor, type AggregateArgs, type AggregateFn, type AggregateOrderBy, type AggregateOrderByArg, type AggregateResult, type AggregateRow, type Aggregation, type AnyFunctions, type AnyModels, type AnyPlugin, type ApplyExtension, AsyncResult, type AuthEvent, type AuthOutageEvent, type BetterResultApi, type BetterResultErr, type BetterResultErrors, type BetterResultOk, type BetterResultValue, BetterSupabase, type BetterSupabaseEvents, type BlockEvent, type BlockEventType, type BlockProblemOptions, type BucketMeta, type BucketPolicyName, type CacheAdapter, type CacheTarget, type CallOptions, type Casing, type CheckConstraint, type ClaimsMeta, type Codec, type ColumnMeta, type ColumnOp, type ColumnOrderBy, type ColumnOrderByArg, type Compiler, type Condition, type ConflictTarget, type ConnectOptions, type CountArg, type CountArgs, type CountMode, type CursorPage, type CursorPageArgs, type DatabaseOf, type Db, type DbError, type DbErrorClass, type DbErrorClasses, type DbErrorKind, type DbErrorKinds, type DbErrorOf, DbException, type DbHelpers, type DbStats, type DeleteArgs, type DeleteExt, type DeleteOp, EMPTY_STATS, type EnrichDatabase, type Err, type ErrorEvent, type ErrorMapper, type ErrorMessages, type EventHandler, EventHub, type EventMap, type EventName, type Events, type ExecuteContext, type ExecuteResult, type Executor, type ExtensionOf, type FieldFilter, type FieldSpec, type FindExt, type FindFirstArgs, type FindManyArgs, type FindOnlyArgs, type Flags, type ForeignKeyConstraint, type FunctionMeta, type FunctionResult, type FunctionSignature, type FunctionSource, type FunctionTypes, type FunctionsOf, type HasFlag, type HookArgs, type Include, type IncludeArg, type IncludeArgs, type InferReadSetParams, type InferResult, type Insert, type InsertOp, type JsonPathOps, type LogFields, type Logger, type ManyResult, type ManyReturningArgs, type MappedDbError, type Measure, type MeasureArg, type MeasureKey, type MemoryCache, type ModelFlags, type ModelTypes, type ModelsOf, type MutableWhere, type MutationEvent, type MutationIntent, type MutationKind, type MutationNotice, type MutationOp, type NoExtension, type NumericMeasureArg, type OffsetPage, type OffsetPageArgs, type OffsetRangeArgs, type Ok, type Operation, type OrderByArg, type OrderByInput, type OrderTerm, PLUGIN_API_VERSION, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type PageOf, type Payload, type PlanFilter, type PlanLimit, type PlanOrder, type Plugin, type Policy, type PolicyDecision, type PostgrestClientLike, type PostgrestExecutorOptions, type PostgrestPlan, type PrimaryKeyColumn, type PrimaryKeyValue, type ProblemDetails, type ProblemFormat, type ProblemOptions, type ProblemResponseOptions, type Quantifier, type QueryEvent, type QuerySpec, type RawDbError, type ReadArgs, type ReadMethod, type ReadSet, type ReadSetAuth, type ReadSetOptions, type ReadSetParamType, type ReadSetParamTypes, type ReadSetParamValue, type ReadSetParams, type ReadSetResult, type RealtimeTableMeta, type RefreshEvent, type RelationMeasureArg, type RelationMeta, type RelationTypes, type Relations, type Repository, type RepositoryApi, type RepositoryExtension, type RepositoryOf, type RequestArgs, type RequestContext, type Result, type ResultColumn, type Returned, type Row, type RpcContext, type RpcDefinition, type RpcNotice, type RpcOptions, SPEC_PINS, type Schema, type SchemaMeta, type ScopeFor, type SearchArgs, type SelectArg, type SelectColumn, type SelectOp, type Selection, type Simplify, type SortDirection, type SortSpec, type Specs, type StandardJSONSchemaV1, type StandardSchemaV1, StatsRecorder, type StoragePath, type SubjectRef, type SubjectTypeOf, type SupabaseOptions, type TableFlags, type TableKey, type TableMeta, type TableRepositoryExtension, type TableSchema, type TableSchemaSpec, type TableSpecs, type UniqueConstraint, type UniqueKeyName, type UniqueWhere, type Update, type UpdateArgs, type UpdateOp, type UpsertArgs, type UpsertManyArgs, type ValidationIssue, type WhereInput, type WithExtension, type WriteArgs, type WriteManyArgs, and, cacheTargetOf, column, compilePostgrest, consoleLogger, dbError, defineBetterResultErrors, definePlugin, defineReadSet, defineSupabase, err, escapeLike, explainPostgrest, fromBetterResult, fromProblem, isCheck, isConflict, isDbError, isForeignKey, isProblem, isQuerySpec, isReadSet, mapDbError, memoryCache, not, ok, or, postgrestCompiler, postgrestExecutor, problemResponse, readSetTables, recordStats, rowKey, rpcCacheTargets, silentLogger, specTables, statusOf, toBetterResult, toDbError, toProblem, validate };
+export { type AccessBucketPolicy, type AccessPolicySql, type AccessTopicPolicy, type Actor, type AggregateArgs, type AggregateFn, type AggregateOrderBy, type AggregateOrderByArg, type AggregateResult, type AggregateRow, type Aggregation, type AnyFunctions, type AnyModels, type AnyPlugin, type ApplyExtension, AsyncResult, type AuthEvent, type AuthOutageEvent, type BetterResultApi, type BetterResultErr, type BetterResultErrors, type BetterResultOk, type BetterResultValue, BetterSupabase, type BetterSupabaseEvents, type BlockEvent, type BlockEventType, type BlockProblemOptions, type BucketMeta, type BucketPolicyName, type BucketRegistry, type BucketsHelper, type CacheAdapter, type CacheTarget, type CallOptions, type Casing, type CheckConstraint, type ClaimsMeta, type Codec, type ColumnMeta, type ColumnOp, type ColumnOrderBy, type ColumnOrderByArg, type Compiler, type Condition, type ConflictTarget, type ConnectOptions, type CountArg, type CountArgs, type CountMode, type CursorPage, type CursorPageArgs, type DatabaseOf, type Db, type DbError, type DbErrorClass, type DbErrorClasses, type DbErrorKind, type DbErrorKinds, type DbErrorMatchers, type DbErrorOf, DbException, type DbHelpers, type DbStats, type DeleteArgs, type DeleteExt, type DeleteOp, EMPTY_STATS, type EnrichDatabase, type Err, type ErrorEvent, type ErrorMapper, type ErrorMessages, type EventHandler, EventHub, type EventMap, type EventName, type Events, type ExecuteContext, type ExecuteResult, type Executor, type ExtensionOf, type FieldFilter, type FieldSpec, type FindExt, type FindFirstArgs, type FindManyArgs, type FindOnlyArgs, type Flags, type ForeignKeyConstraint, type FunctionMeta, type FunctionResult, type FunctionSignature, type FunctionSource, type FunctionTypes, type FunctionsOf, type GeneratedColumns, type HasFlag, type HookArgs, type Include, type IncludeArg, type IncludeArgs, type InferReadSetParams, type InferResult, type Insert, type InsertOp, type JsonPathOps, type LogFields, type Logger, type ManyResult, type ManyReturningArgs, type MappedDbError, type Measure, type MeasureArg, type MeasureKey, type MemoryCache, type ModelFlags, type ModelTypes, type ModelsOf, type MutableWhere, type MutationEvent, type MutationIntent, type MutationKind, type MutationNotice, type MutationOp, type NoExtension, type NumericMeasureArg, type OffsetPage, type OffsetPageArgs, type OffsetRangeArgs, type Ok, type Operation, type OrderByArg, type OrderByInput, type OrderTerm, PLUGIN_API_VERSION, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type PageOf, type Payload, type PlanFilter, type PlanLimit, type PlanOrder, type Plugin, type Policy, type PolicyDecision, type PostgrestClientLike, type PostgrestExecutorOptions, type PostgrestPlan, type PrimaryKeyColumn, type PrimaryKeyValue, type ProblemDetails, type ProblemFormat, type ProblemOptions, type ProblemResponseOptions, type Quantifier, type QueryEvent, type QuerySpec, type RawDbError, type ReadArgs, type ReadMethod, type ReadSet, type ReadSetAuth, type ReadSetOptions, type ReadSetParamType, type ReadSetParamTypes, type ReadSetParamValue, type ReadSetParams, type ReadSetResult, type RealtimeTableMeta, type RefreshEvent, type RelationMeasureArg, type RelationMeta, type RelationTypes, type Relations, type Repository, type RepositoryApi, type RepositoryExtension, type RepositoryOf, type RequestArgs, type RequestContext, type Result, type ResultColumn, type Returned, type Row, type RpcContext, type RpcDefinition, type RpcNotice, type RpcOptions, SPEC_PINS, type Schema, type SchemaMeta, type ScopeFor, type SearchArgs, type SelectArg, type SelectColumn, type SelectOp, type Selection, type Simplify, type SortDirection, type SortSpec, type Specs, type StandardJSONSchemaV1, type StandardSchemaV1, StatsRecorder, type StoragePath, type SubjectRef, type SubjectTypeOf, type SupabaseOptions, type TableFlags, type TableKey, type TableMeta, type TableRepositoryExtension, type TableSchema, type TableSchemaSpec, type TableSpecs, type UniqueConstraint, type UniqueKeyName, type UniqueWhere, type Update, type UpdateArgs, type UpdateOp, type UpsertArgs, type UpsertManyArgs, type ValidationIssue, type WhereInput, type WithExtension, type WritableColumns, type WriteArgs, type WriteManyArgs, and, cacheTargetOf, column, compilePostgrest, consoleLogger, dbError, defineBetterResultErrors, definePlugin, defineReadSet, defineSupabase, err, escapeLike, explainPostgrest, fromBetterResult, fromProblem, isCheck, isConflict, isDbError, isForeignKey, isProblem, isQuerySpec, isReadSet, mapDbError, matchDbError, memoryCache, not, ok, or, postgrestCompiler, postgrestExecutor, problemResponse, readSetTables, recordStats, rowKey, rpcCacheTargets, silentLogger, specTables, statusOf, toBetterResult, toDbError, toProblem, validate };

package/dist/index.js

@@ -1,21 +1,21 @@
 import { t as DbException } from "./db-exception-CnWcYPxL.js";
-import { a as isConflict, c as mapDbError, i as isCheck, l as statusOf, n as dbError, o as isDbError, s as isForeignKey } from "./errors-8i6tSICm.js";
-import { i as tableMeta, r as defineSchema } from "./build-6jmaPAgx.js";
+import { a as isConflict, c as mapDbError, i as isCheck, l as matchDbError, n as dbError, o as isDbError, s as isForeignKey, u as statusOf } from "./errors-BV1SKTVs.js";
+import { i as tableMeta, r as defineSchema } from "./build-C-D_vn0U.js";
 import { t as escapeLike } from "./escape-like-DHfx6jRr.js";
 import { i as or, n as column, r as not, t as and } from "./types-R6syp1el.js";
 import { a as isPlainTime, i as isPlainDateTime, l as provideTemporal, n as isInstant, o as isZonedDateTime, r as isPlainDate } from "./temporal-CB5Fpo5d.js";
-import { i as encodeValue } from "./wire-DEY0ajW9.js";
-import { a as ok, i as fromBetterResult, n as defineBetterResultErrors, o as toBetterResult, r as err, s as toDbError, t as AsyncResult } from "./result-COkvI9t5.js";
-import { a as decodeRows, c as rowKey, i as encodeCursor, l as rpcCacheTargets, n as defineSupabase, o as cacheTargetOf, r as decodeCursor, s as memoryCache, t as BetterSupabase } from "./define-CMcokcZz.js";
+import { i as encodeValue } from "./wire-BCJxCtHS.js";
+import { a as ok, i as fromBetterResult, n as defineBetterResultErrors, o as toBetterResult, r as err, s as toDbError, t as AsyncResult } from "./result-DIeYscA3.js";
+import { a as decodeRows, c as rowKey, i as encodeCursor, l as rpcCacheTargets, n as defineSupabase, o as cacheTargetOf, r as decodeCursor, s as memoryCache, t as BetterSupabase } from "./define-Bu1v781m.js";
 import { n as touchedTables, t as invalidationTargets } from "./tables-Cb-3_VWc.js";
 import { n as silentLogger, t as consoleLogger } from "./logger-glM28NVN.js";
 import { t as EventHub } from "./events-xbpHkcK9.js";
 import { r as definePlugin, t as PLUGIN_API_VERSION } from "./plugin-tfXW1-qO.js";
 import { t as simplify } from "./simplify-DDO0j0LI.js";
-import { a as postgrestExecutor, i as explainPostgrest, n as StatsRecorder, r as recordStats, t as EMPTY_STATS, u as compilePostgrest } from "./stats-CUhqw6Ev.js";
-import { c as readSetTables, d as isQuerySpec, f as specTables, i as defineReadSet, o as isReadSet } from "./read-set-PWiJfv6S.js";
-import { n as validate } from "./standard-DZmwmIhV.js";
-import { c as toProblem, i as isProblem, n as PROBLEM_TYPE_BASE, o as problemResponse, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "./problem-pIiL3WbE.js";
+import { a as postgrestExecutor, i as explainPostgrest, n as StatsRecorder, r as recordStats, t as EMPTY_STATS, u as compilePostgrest } from "./stats-Di5VAsYU.js";
+import { c as readSetTables, d as isQuerySpec, f as specTables, i as defineReadSet, o as isReadSet } from "./read-set-DeesfeL_.js";
+import { n as validate } from "./standard-B1BigegP.js";
+import { c as toProblem, i as isProblem, n as PROBLEM_TYPE_BASE, o as problemResponse, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "./problem-JRCohp1j.js";
 import { n as tableSchema } from "./table-schema-pQlER3jj.js";
 import { t as SPEC_PINS } from "./spec-pins-S4PymRxp.js";
 import { n as scopeOperation, r as scopeSelection, t as scopeCondition } from "./scope-DgWjuXUw.js";
@@ -80,4 +80,4 @@ function toSnake(name) {
 	return name.replaceAll(/([a-z0-9])([A-Z])/g, "$1_$2").replaceAll(/([A-Z])([A-Z][a-z])/g, "$1_$2").toLowerCase();
 }
 //#endregion
-export { AsyncResult, BetterSupabase, DbException, EMPTY_STATS, EventHub, PLUGIN_API_VERSION, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, SPEC_PINS, StatsRecorder, and, cacheTargetOf, column, compilePostgrest, consoleLogger, createErrorMessages, dbError, decodeCursor, decodeRows, defineBetterResultErrors, definePlugin, defineReadSet, defineRepository, defineSchema, defineSupabase, encodeCursor, encodeValue, err, escapeLike, explainPostgrest, fromBetterResult, fromProblem, invalidationTargets, isCheck, isConflict, isDbError, isForeignKey, isInstant, isPlainDate, isPlainDateTime, isPlainTime, isProblem, isQuerySpec, isReadSet, isZonedDateTime, mapDbError, memoryCache, not, ok, or, postgrestCompiler, postgrestExecutor, problemResponse, provideTemporal, readSetTables, recordStats, rowKey, rpcCacheTargets, scopeCondition, scopeOperation, scopeSelection, silentLogger, simplify, specTables, statusOf, tableMeta, tableSchema, toBetterResult, toCamel, toDbError, toProblem, toSnake, touchedTables, validate };
+export { AsyncResult, BetterSupabase, DbException, EMPTY_STATS, EventHub, PLUGIN_API_VERSION, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, SPEC_PINS, StatsRecorder, and, cacheTargetOf, column, compilePostgrest, consoleLogger, createErrorMessages, dbError, decodeCursor, decodeRows, defineBetterResultErrors, definePlugin, defineReadSet, defineRepository, defineSchema, defineSupabase, encodeCursor, encodeValue, err, escapeLike, explainPostgrest, fromBetterResult, fromProblem, invalidationTargets, isCheck, isConflict, isDbError, isForeignKey, isInstant, isPlainDate, isPlainDateTime, isPlainTime, isProblem, isQuerySpec, isReadSet, isZonedDateTime, mapDbError, matchDbError, memoryCache, not, ok, or, postgrestCompiler, postgrestExecutor, problemResponse, provideTemporal, readSetTables, recordStats, rowKey, rpcCacheTargets, scopeCondition, scopeOperation, scopeSelection, silentLogger, simplify, specTables, statusOf, tableMeta, tableSchema, toBetterResult, toCamel, toDbError, toProblem, toSnake, touchedTables, validate };

package/dist/jwks-cache-C4rA69hD.js

@@ -0,0 +1,49 @@
+import { n as dbError } from "./errors-BV1SKTVs.js";
+import { a as ok, r as err } from "./result-DIeYscA3.js";
+import { a as jwksOf } from "./jws-CwBB5QAT.js";
+//#region src/core/jwks-cache.ts
+/** The most bytes read from a JWKS response. */
+const MAX_JWKS_BYTES = 262144;
+/**
+* A cached key set. A URL is fetched on first use and again after
+* `cacheSeconds`; a refresh for an unknown `kid` refetches at most once per
+* `refetchSeconds`, so a stream of forged `kid`s can't hammer the issuer.
+* Concurrent callers share one fetch.
+*/
+function jwksSource(input, options = {}) {
+	const parse = (value) => jwksOf(value, options.rsa === void 0 ? {} : { rsa: options.rsa });
+	if (!(input instanceof URL) && typeof input !== "function") {
+		const keys = parse(input);
+		return () => Promise.resolve(ok(keys));
+	}
+	const now = options.now ?? Date.now;
+	const cacheMs = (options.cacheSeconds ?? 300) * 1e3;
+	const refetchMs = (options.refetchSeconds ?? 30) * 1e3;
+	let cached;
+	let pending;
+	const load = async () => {
+		if (typeof input === "function") return ok(parse(await input()));
+		const response = await (options.fetch ?? fetch)(input, { headers: { accept: "application/jwk-set+json, application/json" } });
+		if (!response.ok) return err(dbError("network", `The JWKS answered ${response.status}`, { code: "JWKS_FETCH_FAILED" }));
+		const text = await response.text();
+		if (text.length > MAX_JWKS_BYTES) return err(dbError("network", "The JWKS response is too large", { code: "JWKS_FETCH_FAILED" }));
+		return ok(parse(JSON.parse(text)));
+	};
+	return async (refresh) => {
+		const age = cached ? now() - cached.at : Number.POSITIVE_INFINITY;
+		if (cached && age < (refresh ? refetchMs : cacheMs)) return ok(cached.keys);
+		pending ??= load().catch((cause) => err(dbError("network", `The JWKS could not be loaded: ${cause instanceof Error ? cause.message : String(cause)}`, { code: "JWKS_FETCH_FAILED" }))).then((result) => {
+			if (result.ok) cached = {
+				keys: result.data,
+				at: now()
+			};
+			return result;
+		}).finally(() => {
+			pending = void 0;
+		});
+		const result = await pending;
+		return !result.ok && cached ? ok(cached.keys) : result;
+	};
+}
+//#endregion
+export { jwksSource as t };

package/dist/{jws-milwSg7E.js → jws-CwBB5QAT.js}

@@ -1,8 +1,10 @@
 import { n as isRecord } from "./guards-6F2bCtQR.js";
-import { a as toBase64Url, r as fromBase64 } from "./base64-BmeCBgGo.js";
+import { a as toBase64Url, r as fromBase64 } from "./base64-D4aqdnDR.js";
 //#region src/core/jws.ts
-const encoder = /* @__PURE__ */ new TextEncoder();
-const decoder = /* @__PURE__ */ new TextDecoder();
+let encoderInstance;
+let decoderInstance;
+const encoder = { encode: (text) => (encoderInstance ??= new TextEncoder()).encode(text) };
+const decoder = { decode: (bytes) => (decoderInstance ??= new TextDecoder()).decode(bytes) };
 const EC = {
 	name: "ECDSA",
 	namedCurve: "P-256"

package/dist/{kit-BlcEFQql.d.ts → kit-De-EVRhw.d.ts}

@@ -1,7 +1,7 @@
-import { b as DbError } from "./result-Cj3yWhjH.js";
-import { r as AuthState } from "./resolve-7atr-wWr.js";
-import { t as AuthSession } from "./view-SuASaomx.js";
-import { r as GuardOptions } from "./respond-Cdg5ibH5.js";
+import { b as DbError } from "./result-BREt7qOh.js";
+import { r as AuthState } from "./resolve-Ceft-18-.js";
+import { t as AuthSession } from "./view-KQhe6eNc.js";
+import { r as GuardOptions } from "./respond-BSL36dQp.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/server/kit.d.ts
 /** What a server action returns: plain data, safe across any serialization boundary. */

package/dist/{kit-gqwkVhGU.js → kit-LTbHrWWD.js}

@@ -1,10 +1,10 @@
-import { n as dbError } from "./errors-8i6tSICm.js";
-import { n as validate } from "./standard-DZmwmIhV.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
+import { n as validate } from "./standard-B1BigegP.js";
 import { n as claimAt } from "./claims-PqzCxaTD.js";
-import { t as authContext } from "./context-BDDgjoxz.js";
-import { n as toSession } from "./view-DZ63nqwt.js";
-import { o as settle, r as guard } from "./respond-Dpx48ATq.js";
-import { n as checkPermission } from "./authorizer-dVVN05Un.js";
+import { t as authContext } from "./context-BiwgsycK.js";
+import { n as toSession } from "./view-CYX1wsgp.js";
+import { o as settle, r as guard } from "./respond-Bhp3G__q.js";
+import { n as checkPermission } from "./authorizer-B3yyCVUF.js";
 //#region src/server/kit.ts
 /** `FormData` as a plain object; repeated keys become arrays. */
 function formDataObject(form) {

package/dist/{knowledge-BYtgA52P.d.ts → knowledge-B5zdpDD-.d.ts}

@@ -1,11 +1,11 @@
 /// <reference lib="esnext.temporal" />
-import { t as AsyncResult, w as ErrorMapper } from "./result-Cj3yWhjH.js";
+import { T as ErrorMapper, t as AsyncResult } from "./result-BREt7qOh.js";
 import { n as Logger } from "./logger-DWVYUmwi.js";
-import { t as BlockTransport } from "./block-transport-NbUJygA7.js";
-import { r as BlockTemporalOptions } from "./block-helpers-7pMBVsE6.js";
-import { n as BlockHooks } from "./block-hooks-C_WaodoA.js";
-import { f as AiFiles, o as AiFile } from "./types-DM8q3IOr.js";
-import { g as JobHandler } from "./types-P1S1cj6N.js";
+import { t as BlockTransport } from "./block-transport-DezJPPA0.js";
+import { r as BlockTemporalOptions } from "./block-helpers-CjcQM1yA.js";
+import { n as BlockHooks } from "./block-hooks-DcPJHztl.js";
+import { f as AiFiles, o as AiFile } from "./types-DOC7wnh6.js";
+import { g as JobHandler } from "./types-BEEFkNFY.js";
 //#region src/blocks/knowledge/knowledge.d.ts
 /**
  * Turns texts into vectors. `model` is stored with each document, so a

package/dist/{knowledge-CSNKLX-s.js → knowledge-BbdXOJvY.js}

@@ -1,10 +1,10 @@
 import { t as DbException } from "./db-exception-CnWcYPxL.js";
-import { n as dbError } from "./errors-8i6tSICm.js";
-import { a as ok, r as err, t as AsyncResult } from "./result-COkvI9t5.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
+import { a as ok, r as err, t as AsyncResult } from "./result-DIeYscA3.js";
 import { t as vectorLiteral } from "./search-BtoWY6n_.js";
 import { n as isRecord } from "./guards-6F2bCtQR.js";
-import { C as optionalText, D as recordOf, I as textOf, O as recordOrEmpty, f as errorText, h as instantOf, j as run, k as recordsOf, n as applyTemporal, o as blockCall, p as injectableOf } from "./block-helpers-BfVCR5Fc.js";
-import { r as withBlockHooks } from "./block-hooks-ByKlh8Qy.js";
+import { C as optionalText, D as recordOf, I as textOf, O as recordOrEmpty, f as errorText, h as instantOf, j as run, k as recordsOf, n as applyTemporal, o as blockCall, p as injectableOf } from "./block-helpers-DkVZNDrj.js";
+import { r as withBlockHooks } from "./block-hooks-C22vuIUd.js";
 //#region src/blocks/knowledge/knowledge.ts
 const SCOPES = /* @__PURE__ */ new Set([
 	"organization",

package/dist/lint/index.d.ts

@@ -42,7 +42,7 @@ export interface RuleModule {
     CallExpression(node: CallExpression): void;
   };
 }
-export type RuleId = "no-unbounded-find-many" | "no-delete-many-without-where" | "max-limit" | "require-order-by" | "unbounded-read" | "require-max-affected";
+export type RuleId = "no-unbounded-find-many" | "no-delete-many-without-where" | "max-limit" | "require-order-by" | "unbounded-read" | "require-max-affected" | "require-escape-like";
 /** The part of `supabase/snapshot.json` that `largeTables` reads. */
 export interface LintSnapshot {
   readonly extras: {

package/dist/lint/index.js

@@ -66,6 +66,42 @@ const FIND_METHODS = /* @__PURE__ */ new Set([
 	"findFirst",
 	"paginate"
 ]);
+/** Whether `node` calls `escapeLike(...)`, imported bare or through a namespace. */
+function isEscapeLike(node) {
+	if (node.type !== "CallExpression") return false;
+	const { callee } = node;
+	if (callee.type === "Identifier") return callee.name === "escapeLike";
+	return methodName(node) === "escapeLike";
+}
+/**
+* Whether a `like` or `ilike` value may carry a caller's `%` and `_`
+* unescaped: a variable, a property, or a template or `+` concatenation
+* with one that isn't wrapped in `escapeLike(...)`. Literals pass.
+*/
+function unescapedPattern(node) {
+	const part = (child) => !isEscapeLike(child) && unescapedPattern(child);
+	switch (node.type) {
+		case "Identifier":
+		case "MemberExpression": return true;
+		case "TemplateLiteral": return node.expressions.some(part);
+		case "BinaryExpression": {
+			const { operator, left, right } = node;
+			return operator === "+" && (part(left) || part(right));
+		}
+		default: return false;
+	}
+}
+/** Every `like` and `ilike` value in a `where` object, through `AND`, `OR`, `NOT` and relations. */
+function likeValues(node) {
+	if (node.type === "ArrayExpression") return node.elements.flatMap((element) => element ? likeValues(element) : []);
+	if (node.type !== "ObjectExpression") return [];
+	return node.properties.flatMap((property) => {
+		if (property.type !== "Property") return [];
+		const entry = property;
+		const name = keyName(entry);
+		return name === "like" || name === "ilike" ? [entry.value] : likeValues(entry.value);
+	});
+}
 /**
 * The tables `gen` marked as large (an estimated 10,000 rows or more), as
 * `schema.name`, for the `unbounded-read` rule's `tables` option.
@@ -183,7 +219,15 @@ const rules = {
 			minimum: 0
 		} },
 		additionalProperties: false
-	}])
+	}]),
+	"require-escape-like": rule("Escape values passed to like and ilike", "require-escape-like", { unescaped: "This like pattern takes a value whose % and _ act as wildcards. Use ieq, contains or startsWith, or wrap the value in escapeLike()." }, (context) => ({ CallExpression(node) {
+		const where = argsOf(node)?.get("where");
+		if (where === void 0) return;
+		for (const value of likeValues(where)) if (unescapedPattern(value)) context.report({
+			node: value,
+			messageId: "unescaped"
+		});
+	} }))
 };
 const plugin = {
 	meta: { name: "better-supabase" },
@@ -195,7 +239,8 @@ const plugin = {
 			"better-supabase/no-unbounded-find-many": "warn",
 			"better-supabase/max-limit": "warn",
 			"better-supabase/require-order-by": "warn",
-			"better-supabase/unbounded-read": "warn"
+			"better-supabase/unbounded-read": "warn",
+			"better-supabase/require-escape-like": "warn"
 		}
 	} }
 };

package/dist/list/index.d.ts

@@ -1,4 +1,4 @@
-import { _ as FilterRule, a as FilterDateValue, b as encodeFilterQuery, c as FilterFieldLabels, f as FilterNode, g as FilterRelativeDate, h as FilterQuery, i as FilterCombinator, l as FilterFieldType, m as FilterOperatorSpec, n as FILTER_OPERATOR_LABELS, o as FilterField, p as FilterOperatorArity, r as FilterClock, s as FilterFieldInfo, t as FILTER_OPERATORS, u as FilterGroupNode, v as ListFilterConfig, y as decodeFilterQuery } from "../filter-query-D3wOD1P_.js";
-import { _ as UNSET, a as ListExtra, c as ListParseOptions, d as ListQuery, f as ListQueryConfig, g as ParserSpec, h as OpenApiParameter, i as ListDefinition, l as ListParseResult, m as ListSearchParams, n as FacetCounts, o as ListPage, p as ListQueryInput, r as FacetInfo, s as ListPagination, t as FacetCountFields, u as ListParsers, v as defineListQuery } from "../list-query-DWJIiVz_.js";
-import { n as FilterRecordField, r as evaluateFilterQuery, t as FilterEvaluation } from "../filter-evaluate-CEm52E5s.js";
+import { _ as FilterRule, a as FilterDateValue, b as encodeFilterQuery, c as FilterFieldLabels, f as FilterNode, g as FilterRelativeDate, h as FilterQuery, i as FilterCombinator, l as FilterFieldType, m as FilterOperatorSpec, n as FILTER_OPERATOR_LABELS, o as FilterField, p as FilterOperatorArity, r as FilterClock, s as FilterFieldInfo, t as FILTER_OPERATORS, u as FilterGroupNode, v as ListFilterConfig, y as decodeFilterQuery } from "../filter-query-Bc_Qa8V_.js";
+import { _ as UNSET, a as ListExtra, c as ListParseOptions, d as ListQuery, f as ListQueryConfig, g as ParserSpec, h as OpenApiParameter, i as ListDefinition, l as ListParseResult, m as ListSearchParams, n as FacetCounts, o as ListPage, p as ListQueryInput, r as FacetInfo, s as ListPagination, t as FacetCountFields, u as ListParsers, v as defineListQuery } from "../list-query-aXr2WkGA.js";
+import { n as FilterRecordField, r as evaluateFilterQuery, t as FilterEvaluation } from "../filter-evaluate-BJcaL3o1.js";
 export { FILTER_OPERATORS, FILTER_OPERATOR_LABELS, type FacetCountFields, type FacetCounts, type FacetInfo, type FilterClock, type FilterCombinator, type FilterDateValue, type FilterEvaluation, type FilterField, type FilterFieldInfo, type FilterFieldLabels, type FilterFieldType, type FilterGroupNode, type FilterNode, type FilterOperatorArity, type FilterOperatorSpec, type FilterQuery, type FilterRecordField, type FilterRelativeDate, type FilterRule, type ListDefinition, type ListExtra, type ListFilterConfig, type ListPage, type ListPagination, type ListParseOptions, type ListParseResult, type ListParsers, type ListQuery, type ListQueryConfig, type ListQueryInput, type ListSearchParams, type OpenApiParameter, type ParserSpec, UNSET, decodeFilterQuery, defineListQuery, encodeFilterQuery, evaluateFilterQuery };

package/dist/{list-query-DWJIiVz_.d.ts → list-query-aXr2WkGA.d.ts}

@@ -1,8 +1,8 @@
-import { E as ValidationIssue, t as AsyncResult } from "./result-Cj3yWhjH.js";
-import { M as Row, a as AnyModels, i as AnyFunctions, z as TableKey } from "./types-BO8lVTun.js";
-import { l as CountMode } from "./executor-BicyP8Nl.js";
-import { Bt as WhereInput, E as OffsetPageArgs, F as RepositoryOf, Lt as SelectArg, Nt as Payload, T as OffsetPage, g as CursorPageArgs, h as CursorPage, jt as OrderByArg, t as BetterSupabase, wt as IncludeArg, x as FindExt } from "./define-DXTC706J.js";
-import { c as FilterFieldLabels, h as FilterQuery, o as FilterField, r as FilterClock, s as FilterFieldInfo, v as ListFilterConfig } from "./filter-query-D3wOD1P_.js";
+import { D as ValidationIssue, t as AsyncResult } from "./result-BREt7qOh.js";
+import { B as TableKey, N as Row, a as AnyModels, i as AnyFunctions } from "./types-BrpW5ixT.js";
+import { l as CountMode } from "./executor-BnMC0lj3.js";
+import { Bt as WhereInput, E as OffsetPageArgs, F as RepositoryOf, Lt as SelectArg, Nt as Payload, T as OffsetPage, g as CursorPageArgs, h as CursorPage, jt as OrderByArg, t as BetterSupabase, wt as IncludeArg, x as FindExt } from "./define-DYZnvAbs.js";
+import { c as FilterFieldLabels, h as FilterQuery, o as FilterField, r as FilterClock, s as FilterFieldInfo, v as ListFilterConfig } from "./filter-query-Bc_Qa8V_.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/list/list-query.d.ts
 /** Facet value meaning "not set": filters with `is null`. */

package/dist/mcp/index.d.ts

@@ -1,11 +1,11 @@
-import { a as AnyModels, i as AnyFunctions, z as TableKey } from "../types-BO8lVTun.js";
-import { t as OperationTable } from "../operations-BtuQRwTJ.js";
+import { B as TableKey, a as AnyModels, i as AnyFunctions } from "../types-BrpW5ixT.js";
+import { t as OperationTable } from "../operations-DQCWqkt3.js";
 import { D as ResourceOperation } from "../model-lUafmeBQ.js";
 import { s as PermissionRef, t as AnyAuthorizer } from "../authorizer-eiOjo-3l.js";
-import { t as BetterSupabase } from "../define-DXTC706J.js";
-import { i as ServerContext, s as ServerOptions, t as BetterServer } from "../server-types-fXwJoFjt.js";
-import { r as GuardOptions } from "../respond-Cdg5ibH5.js";
-import { l as ResourceRouteOptions } from "../resource-types-CC59gMHE.js";
+import { t as BetterSupabase } from "../define-DYZnvAbs.js";
+import { a as ServerContext, c as ServerOptions, n as BetterServer } from "../server-types-fLdep4gb.js";
+import { r as GuardOptions } from "../respond-BSL36dQp.js";
+import { l as ResourceRouteOptions } from "../resource-types-LW1i5-h3.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/mcp/json-rpc.d.ts
 /** A JSON object. */
@@ -74,11 +74,11 @@ export declare function answerMessage(message: unknown, server: ProtocolServer):
 export declare function answerLine(line: string, server: ProtocolServer): Promise<Json | undefined>;
 //#endregion
 //#region src/mcp/mcp.d.ts
-interface ToolContext<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> extends ServerContext<M, F, E, C, P> {
+interface ToolContext<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> extends ServerContext<M, F, E, C, P, B> {
   readonly request: Request;
   readonly signal: AbortSignal;
 }
-interface McpTool<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> {
+interface McpTool<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> {
   readonly info: ToolInfo;
   /**
    * The input schema in another dialect, for clients on an older protocol
@@ -93,7 +93,7 @@ interface McpTool<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P
   readonly permission?: unknown;
   /** The provider operation the tool checks, in place of `mcp.tool.<name>`. */
   readonly operation?: string;
-  run(args: never, ctx: ToolContext<M, F, E, C, P>): unknown;
+  run(args: never, ctx: ToolContext<M, F, E, C, P, B>): unknown;
 }
 /** What the `authorize` and `visible` hooks see of a tool. */
 interface ToolRef {
@@ -110,7 +110,7 @@ type ToolDecision = {
   /** OAuth scopes the call needs, sent in an `insufficient_scope` challenge. */
   readonly scopes?: readonly string[];
 };
-interface ToolDefinition<M extends AnyModels, F extends AnyFunctions, E, I, C = unknown, P = unknown, Ref = unknown> {
+interface ToolDefinition<M extends AnyModels, F extends AnyFunctions, E, I, C = unknown, P = unknown, Ref = unknown, B = unknown> {
   readonly name: string;
   readonly title?: string;
   readonly description: string;
@@ -141,7 +141,7 @@ interface ToolDefinition<M extends AnyModels, F extends AnyFunctions, E, I, C =
    * `mcp.tool.<name>` (`invoices.void`).
    */
   readonly operation?: string;
-  run(args: I, ctx: ToolContext<M, F, E, C, P>): unknown;
+  run(args: I, ctx: ToolContext<M, F, E, C, P, B>): unknown;
 }
 /** A table's tools: the REST resource options, plus `meta` per operation for `authorize` and `visible`. */
 type ToolResourceOptions<M extends AnyModels, T extends TableKey<M>, Ref = string> = ResourceRouteOptions<M, T, Ref> & {
@@ -153,7 +153,7 @@ type ToolResourceOptions<M extends AnyModels, T extends TableKey<M>, Ref = strin
   readonly meta?: { readonly [K in ResourceOperation]?: unknown; };
 };
 type ToolResources<M extends AnyModels, Ref = string> = { readonly [T in TableKey<M>]?: ToolResourceOptions<M, T, Ref> | true; };
-interface McpOptions<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Ref = string> extends ServerOptions, Omit<GuardOptions, "scopes"> {
+interface McpOptions<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Ref = string, B = unknown> extends ServerOptions, Omit<GuardOptions, "scopes"> {
   readonly name: string;
   readonly version: string;
   readonly title?: string;
@@ -161,7 +161,7 @@ interface McpOptions<M extends AnyModels, F extends AnyFunctions, E, C = unknown
   readonly instructions?: string;
   /** Tables exposed as tools: `<table>_list`, `_get`, `_create`, `_update`, `_delete`. */
   readonly resources?: ToolResources<M, Ref>;
-  readonly tools?: readonly McpTool<M, F, E, C, P>[];
+  readonly tools?: readonly McpTool<M, F, E, C, P, B>[];
   /**
    * The authorization provider's operations (`authorization.operations` in
    * the config). A tool's `mcp.tool.<name>` entry replaces its `permission`,
@@ -230,14 +230,14 @@ interface McpOptions<M extends AnyModels, F extends AnyFunctions, E, C = unknown
    * validate in the repository). A refusal is a tool error; a refusal with
    * `scopes` is a 403 `insufficient_scope` challenge naming them.
    */
-  readonly authorize?: (ctx: ToolContext<M, F, E, C, P>, tool: ToolRef, args: unknown) => ToolDecision | Promise<ToolDecision>;
+  readonly authorize?: (ctx: ToolContext<M, F, E, C, P, B>, tool: ToolRef, args: unknown) => ToolDecision | Promise<ToolDecision>;
   /**
    * Whether the caller sees a tool in `tools/list`. A hidden tool is called
    * like an unknown one. Lists are cached per token (`cacheScope: 'private'`).
    */
-  readonly visible?: (ctx: ToolContext<M, F, E, C, P>, tool: ToolRef) => boolean | Promise<boolean>;
+  readonly visible?: (ctx: ToolContext<M, F, E, C, P, B>, tool: ToolRef) => boolean | Promise<boolean>;
 }
-interface BetterMcp<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Ref = string> extends BetterServer<M, F, E, C, P> {
+interface BetterMcp<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Ref = string, B = unknown> extends BetterServer<M, F, E, C, P, B> {
   /** Everything in one handler: the MCP endpoint and `/.well-known/oauth-protected-resource`. */
   readonly fetch: (request: Request) => Promise<Response>;
   /** The Streamable HTTP endpoint (POST JSON-RPC). */
@@ -246,20 +246,20 @@ interface BetterMcp<M extends AnyModels, F extends AnyFunctions, E, C = unknown,
   metadata(request: Request): Response;
   readonly tools: readonly ToolInfo[];
   /** Adds a tool typed against this app's repositories. */
-  tool<I = Record<string, unknown>>(definition: ToolDefinition<M, F, E, I, C, P, Ref>): this;
+  tool<I = Record<string, unknown>>(definition: ToolDefinition<M, F, E, I, C, P, Ref, B>): this;
   /** Calls a tool directly, e.g. from tests or another transport. */
-  call(name: string, args: unknown, ctx: ToolContext<M, F, E, C, P>): Promise<ToolResult>;
+  call(name: string, args: unknown, ctx: ToolContext<M, F, E, C, P, B>): Promise<ToolResult>;
 }
 /** A custom tool. Pass it in `createMcp({ tools: [...] })`. */
-export declare function defineTool<M extends AnyModels, F extends AnyFunctions, E, I = Record<string, unknown>, C = unknown, P = unknown, Ref = unknown>(definition: ToolDefinition<M, F, E, I, C, P, Ref>): McpTool<M, F, E, C, P>;
+export declare function defineTool<M extends AnyModels, F extends AnyFunctions, E, I = Record<string, unknown>, C = unknown, P = unknown, Ref = unknown, B = unknown>(definition: ToolDefinition<M, F, E, I, C, P, Ref, B>): McpTool<M, F, E, C, P, B>;
 /**
  * An MCP server (Streamable HTTP, stateless) whose tools run as the caller:
  * the Bearer token from the MCP client is verified and every query goes
  * through RLS. Answers 401 with RFC 9728 metadata so clients can sign in with
  * Supabase Auth's OAuth server.
  */
-export declare function createMcp<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, A extends AnyAuthorizer | undefined = undefined>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options: McpOptions<M, F, E, C, P, PermissionRef<A>> & {
+export declare function createMcp<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, A extends AnyAuthorizer | undefined = undefined, B = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P, B>, options: McpOptions<M, F, E, C, P, PermissionRef<A>, B> & {
   readonly authorizer?: A;
-}): BetterMcp<M, F, E, C, P, PermissionRef<A>>;
+}): BetterMcp<M, F, E, C, P, PermissionRef<A>, B>;
 //#endregion
 export type { BetterMcp, GuardOptions, McpOptions, McpTool, ProtocolServer, ResourceRouteOptions, ServerDescription, ToolAnnotations, ToolContext, ToolDecision, ToolDefinition, ToolInfo, ToolRef, ToolResourceOptions, ToolResources, ToolResult };

package/dist/mcp/index.js

@@ -1,18 +1,18 @@
-import { n as dbError } from "../errors-8i6tSICm.js";
-import { a as ok } from "../result-COkvI9t5.js";
-import { t as base64ToText } from "../base64-BmeCBgGo.js";
-import { n as validate } from "../standard-DZmwmIhV.js";
-import { a as methodNotAllowed, c as toProblem, o as problemResponse } from "../problem-pIiL3WbE.js";
+import { n as dbError } from "../errors-BV1SKTVs.js";
+import { a as ok } from "../result-DIeYscA3.js";
+import { t as base64ToText } from "../base64-D4aqdnDR.js";
+import { n as validate } from "../standard-B1BigegP.js";
+import { a as methodNotAllowed, c as toProblem, o as problemResponse } from "../problem-JRCohp1j.js";
 import { t as SPEC_PINS } from "../spec-pins-S4PymRxp.js";
 import { t as buildJsonSchema, v as toDraft07 } from "../json-schema-CpYINXG8.js";
 import { r as operationPermission, t as OPERATION_PREFIXES } from "../operations-CsIfMED7.js";
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-rmWaLNe3.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-CRNH2aX_.js";
 import { n as jsonResponse, t as jsonReplacer } from "../json-CEnpTHlZ.js";
-import { o as settle, r as guard, t as defaultExpose } from "../respond-Dpx48ATq.js";
+import { o as settle, r as guard, t as defaultExpose } from "../respond-Bhp3G__q.js";
 import { t as boundedTtlCache } from "../ttl-cache-XzZ-Q2eX.js";
-import { n as checkPermission, t as checkEach } from "../authorizer-dVVN05Un.js";
-import { t as defineResource } from "../resource-CHGOmg1O.js";
-import { r as hasRole } from "../kit-gqwkVhGU.js";
+import { n as checkPermission, t as checkEach } from "../authorizer-B3yyCVUF.js";
+import { t as defineResource } from "../resource-Bdkqi8jo.js";
+import { r as hasRole } from "../kit-LTbHrWWD.js";
 import { t as withExtra } from "../extra-CGQ2_q3S.js";
 import { r as pageSchema, t as pageInputSchema } from "../resource-schemas-BJ518zFH.js";
 import { a as withCors, i as metadataPreflight, n as endpointPreflight, r as isMetadataRequest, t as discovery } from "../http-DdYadv-o.js";

package/dist/mcp/sdk/index.d.ts

@@ -1,10 +1,10 @@
-import { a as AnyModels, i as AnyFunctions } from "../../types-BO8lVTun.js";
-import { r as AuthState } from "../../resolve-7atr-wWr.js";
-import { i as CredentialRef, r as CredentialProvider } from "../../provider-CQ1SrhLa.js";
+import { a as AnyModels, i as AnyFunctions } from "../../types-BrpW5ixT.js";
+import { r as AuthState } from "../../resolve-Ceft-18-.js";
+import { i as CredentialRef, r as CredentialProvider } from "../../provider-DXgx5oSA.js";
 import { i as SupabaseMcpScope, n as SupabaseMcpModule, r as SupabaseMcpPlatformModule, t as SupabaseMcpFeature } from "../../supabase-mcp-C6tMoEjn.js";
-import { t as BetterSupabase } from "../../define-DXTC706J.js";
-import { i as ServerContext$1, s as ServerOptions, t as BetterServer } from "../../server-types-fXwJoFjt.js";
-import { r as GuardOptions, t as AllowedCaller } from "../../respond-Cdg5ibH5.js";
+import { t as BetterSupabase } from "../../define-DYZnvAbs.js";
+import { a as ServerContext$1, c as ServerOptions, n as BetterServer } from "../../server-types-fLdep4gb.js";
+import { r as GuardOptions, t as AllowedCaller } from "../../respond-BSL36dQp.js";
 import { AuthInfo, CallToolResult, Icon, InputRequiredResult, OAuthTokenVerifier, RegisteredTool, ScopeChallengeHandler, ServerContext, StandardSchemaWithJSON, ToolAnnotations } from "@modelcontextprotocol/server";
 //#region src/mcp/sdk/sdk.d.ts
 interface McpAuthOptions extends ServerOptions, Omit<GuardOptions, "scopes"> {
@@ -43,7 +43,7 @@ interface McpFetchHandler {
     readonly authInfo?: AuthInfo;
   }): Promise<Response>;
 }
-interface BetterMcpAuth<M extends AnyModels = AnyModels, F extends AnyFunctions = AnyFunctions, E = unknown, C = unknown, P = unknown> extends BetterServer<M, F, E, C, P> {
+interface BetterMcpAuth<M extends AnyModels = AnyModels, F extends AnyFunctions = AnyFunctions, E = unknown, C = unknown, P = unknown, B = unknown> extends BetterServer<M, F, E, C, P, B> {
   /** An `OAuthTokenVerifier` for the SDK's bearer helpers; it verifies the token locally. */
   readonly verifier: OAuthTokenVerifier;
   /** The RFC 9728 Protected Resource Metadata document. */
@@ -57,17 +57,17 @@ interface BetterMcpAuth<M extends AnyModels = AnyModels, F extends AnyFunctions
    */
   serve(handler: McpFetchHandler): (request: Request) => Promise<Response>;
   /** The caller's context for a tool call, from `ctx.http.authInfo`. */
-  contextOf(ctx: ServerContext): Promise<ServerContext$1<M, F, E, C, P>>;
+  contextOf(ctx: ServerContext): Promise<ServerContext$1<M, F, E, C, P, B>>;
 }
 /** What `withBetterSupabaseMcp` adds to the SDK's tool context. */
-interface BetterToolExtra<M extends AnyModels = AnyModels, F extends AnyFunctions = AnyFunctions, E = unknown, C = unknown, P = unknown> {
+interface BetterToolExtra<M extends AnyModels = AnyModels, F extends AnyFunctions = AnyFunctions, E = unknown, C = unknown, P = unknown, B = unknown> {
   /** Repositories bound to the verified caller, with RLS. */
-  readonly db: ServerContext$1<M, F, E, C, P>["db"];
+  readonly db: ServerContext$1<M, F, E, C, P, B>["db"];
   readonly auth: AuthState<C, P>;
   /** The full server context: `db`, `auth`, `supabase` and the rest. */
-  readonly bs: ServerContext$1<M, F, E, C, P>;
+  readonly bs: ServerContext$1<M, F, E, C, P, B>;
 }
-type BetterToolContext<M extends AnyModels = AnyModels, F extends AnyFunctions = AnyFunctions, E = unknown, C = unknown, P = unknown> = ServerContext & BetterToolExtra<M, F, E, C, P>;
+type BetterToolContext<M extends AnyModels = AnyModels, F extends AnyFunctions = AnyFunctions, E = unknown, C = unknown, P = unknown, B = unknown> = ServerContext & BetterToolExtra<M, F, E, C, P, B>;
 interface BetterToolConfig<InputArgs extends StandardSchemaWithJSON | undefined, OutputArgs extends StandardSchemaWithJSON | undefined> {
   readonly title?: string;
   readonly description?: string;
@@ -83,8 +83,8 @@ interface BetterToolConfig<InputArgs extends StandardSchemaWithJSON | undefined,
 type ToolReturn = CallToolResult | InputRequiredResult | Promise<CallToolResult | InputRequiredResult>;
 type BetterToolCallback<InputArgs extends StandardSchemaWithJSON | undefined, Ctx> = InputArgs extends StandardSchemaWithJSON ? (args: StandardSchemaWithJSON.InferOutput<InputArgs>, ctx: Ctx) => ToolReturn : (ctx: Ctx) => ToolReturn;
 /** An SDK server whose tool callbacks also get `db`, `auth` and `bs`. */
-type BetterMcpServer<S, M extends AnyModels = AnyModels, F extends AnyFunctions = AnyFunctions, E = unknown, C = unknown, P = unknown> = Omit<S, "registerTool"> & {
-  registerTool<OutputArgs extends StandardSchemaWithJSON | undefined = undefined, InputArgs extends StandardSchemaWithJSON | undefined = undefined>(name: string, config: BetterToolConfig<InputArgs, OutputArgs>, cb: BetterToolCallback<InputArgs, BetterToolContext<M, F, E, C, P>>): RegisteredTool;
+type BetterMcpServer<S, M extends AnyModels = AnyModels, F extends AnyFunctions = AnyFunctions, E = unknown, C = unknown, P = unknown, B = unknown> = Omit<S, "registerTool"> & {
+  registerTool<OutputArgs extends StandardSchemaWithJSON | undefined = undefined, InputArgs extends StandardSchemaWithJSON | undefined = undefined>(name: string, config: BetterToolConfig<InputArgs, OutputArgs>, cb: BetterToolCallback<InputArgs, BetterToolContext<M, F, E, C, P, B>>): RegisteredTool;
 };
 /** The structural part of `McpServer` (or a wrapper of it) that `withBetterSupabaseMcp` needs. */
 interface ToolRegistrar {
@@ -96,13 +96,13 @@ interface ToolRegistrar {
  * tokens locally, serves the RFC 9728 metadata, and binds repositories to
  * the caller. Pair it with `withBetterSupabaseMcp` and `createMcpHandler`.
  */
-export declare function createMcpAuth<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options?: McpAuthOptions): BetterMcpAuth<M, F, E, C, P>;
+export declare function createMcpAuth<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P, B>, options?: McpAuthOptions): BetterMcpAuth<M, F, E, C, P, B>;
 /**
  * Wraps `server.registerTool` so every tool callback gets `db`, `auth` and
  * `bs` for the caller on its context. Wrap after an authorization wrapper
  * so permissions are checked before the context is built.
  */
-export declare function withBetterSupabaseMcp<S extends ToolRegistrar, M extends AnyModels, F extends AnyFunctions, E, C, P>(server: S, auth: Pick<BetterMcpAuth<M, F, E, C, P>, "contextOf">): BetterMcpServer<S, M, F, E, C, P>;
+export declare function withBetterSupabaseMcp<S extends ToolRegistrar, M extends AnyModels, F extends AnyFunctions, E, C, P, B>(server: S, auth: Pick<BetterMcpAuth<M, F, E, C, P, B>, "contextOf">): BetterMcpServer<S, M, F, E, C, P>;
 //#endregion
 //#region src/mcp/sdk/supabase.d.ts
 type UserAuth<C, P> = Extract<AuthState<C, P>, {
@@ -132,6 +132,6 @@ interface SupabaseMcpLoaders {
  * `authorize`, then a server built for the request with the Management API
  * token from `credentials`. The server closes when its response ends.
  */
-export declare function supabaseMcpHandler<M extends AnyModels, F extends AnyFunctions, E, C, P>(auth: Pick<BetterMcpAuth<M, F, E, C, P>, "serve">, options: SupabaseMcpHandlerOptions<C, P>, loaders?: SupabaseMcpLoaders): (request: Request) => Promise<Response>;
+export declare function supabaseMcpHandler<M extends AnyModels, F extends AnyFunctions, E, C, P, B>(auth: Pick<BetterMcpAuth<M, F, E, C, P, B>, "serve">, options: SupabaseMcpHandlerOptions<C, P>, loaders?: SupabaseMcpLoaders): (request: Request) => Promise<Response>;
 //#endregion
 export type { AllowedCaller, BetterMcpAuth, BetterMcpServer, BetterToolCallback, BetterToolConfig, BetterToolContext, BetterToolExtra, GuardOptions, McpAuthOptions, McpFetchHandler, SupabaseMcpFeature, SupabaseMcpHandlerOptions, SupabaseMcpLoaders, SupabaseMcpModule, SupabaseMcpPlatformModule, SupabaseMcpScope, ToolRegistrar };