better-supabase 0.10.0 → 0.12.0

package/dist/server/index.d.ts

@@ -1,31 +1,31 @@
-import { b as DbError, f as Result } from "../result-Cj3yWhjH.js";
-import { a as AnyModels, i as AnyFunctions, z as TableKey } from "../types-BO8lVTun.js";
-import { lt as SupportEventData, wt as Events } from "../events-CtAHxPal.js";
-import { m as RequestContext } from "../plugin-D5OIaP93.js";
-import { E as writeSession, S as readSession, a as ResolveAuthOptions, c as resolveAuth, d as CookieRecord, g as StoredSession, i as InvalidReason, l as AUTH_CACHE_HEADERS, n as AuthResolver, o as ResolvedState, p as CookieWrite, r as AuthState, s as clientIp, t as AuthResolution, u as CookieOptions, w as sessionCookieName } from "../resolve-7atr-wWr.js";
-import { n as SqlClient } from "../executor-DzJQVTE2.js";
+import { b as DbError, f as Result } from "../result-BREt7qOh.js";
+import { B as TableKey, a as AnyModels, i as AnyFunctions } from "../types-BrpW5ixT.js";
+import { lt as SupportEventData, wt as Events } from "../events-P3raDX2E.js";
+import { m as RequestContext } from "../plugin-D-95Q0w0.js";
+import { E as writeSession, S as readSession, a as ResolveAuthOptions, c as resolveAuth, d as CookieRecord, g as StoredSession, i as InvalidReason, l as AUTH_CACHE_HEADERS, n as AuthResolver, o as ResolvedState, p as CookieWrite, r as AuthState, s as clientIp, t as AuthResolution, u as CookieOptions, w as sessionCookieName } from "../resolve-Ceft-18-.js";
+import { n as SqlClient } from "../executor-D1hECPGG.js";
 import { a as SessionActor, c as agentClaims, i as IDENTITY_SCOPES, l as delegationOf, n as ActorOutcome, o as SessionDelegation, r as AgentActOptions, s as actorOf, t as ActClaim } from "../actor-BAhb-d1S.js";
-import { c as fromProblem, d as toProblem, i as ProblemDetails, l as isProblem, n as PROBLEM_CONTENT_TYPE, o as ProblemOptions, r as PROBLEM_TYPE_BASE, s as ProblemResponseOptions, u as problemResponse } from "../problem-CEjyhV5T.js";
+import { c as fromProblem, d as toProblem, i as ProblemDetails, l as isProblem, n as PROBLEM_CONTENT_TYPE, o as ProblemOptions, r as PROBLEM_TYPE_BASE, s as ProblemResponseOptions, u as problemResponse } from "../problem-DCDIQiTA.js";
 import { a as AuthorizationSubject, c as defineAuthorizer, i as AuthorizationResource, n as AuthorizationOutcome, o as Authorizer, r as AuthorizationRequest, s as PermissionRef, t as AnyAuthorizer } from "../authorizer-eiOjo-3l.js";
-import { i as ResourcePagination } from "../resource-DxcgtHq6.js";
-import { t as StorageApi } from "../storage-api-B4Ib2Zpo.js";
-import { Wt as DbStats, _ as Db, t as BetterSupabase } from "../define-DXTC706J.js";
+import { i as ResourcePagination } from "../resource-DYEtc-KN.js";
+import { j as StorageApi } from "../bucket-BbePDVwc.js";
+import { Wt as DbStats, _ as Db, t as BetterSupabase } from "../define-DYZnvAbs.js";
 import { n as Impersonator, r as impersonatorOf, t as ImpersonationOptions } from "../impersonation-D5chOkrO.js";
-import { _ as SupportAuthorize, a as AutomationHooks, b as TicketSubject, c as ChatActionHook, d as IdentityRef, f as IdentityTarget, g as SubscriberPolicy, h as SubscriberEvent, i as AuthorizationHooks, l as DelegationPermissions, m as Subscriber, n as Approver, o as AutomationRef, p as PrincipalByIdentity, r as ApproverOf, s as ChatAction, t as ApprovalRequestRef, u as DelegationRef, v as SupportAuthorizeInput, x as defineAuthorizationHooks, y as SupportDecision } from "../authorization-hooks-Do5djkpz.js";
-import { A as SupportApprovalQuery, B as sqlSupportStore, C as supportSessions, D as supportCookie, E as clearSupportCookie, F as SupportRequest, G as LiteDriver, H as RequestIdOptions, I as SupportRequestInput, J as deleteAccount, K as DeleteAccountOptions, L as SupportSession, M as SupportCallerClaims, N as SupportEndedBy, O as supportCookieValue, P as SupportListFilter, R as SupportSessionStore, S as SupportStartRequest, T as SupportCookieOptions, U as PRIMARY_COOKIE, V as supportClaims, W as ReplicaState, _ as SupportApi, a as ServerDbOptions, b as SupportPolicy, c as TENANT_HEADER, d as SuspendAccountOptions, f as SuspendAccountResult, g as ActiveSupport, h as suspendAccount, i as ServerContext, j as SupportApprover, k as SqlSupportStoreOptions, l as EndSessionsResult, m as lastSignIns, n as ContextOptions, o as ServerKeys, p as endSessions, q as DeleteAccountResult, r as ForContextOptions, s as ServerOptions, t as BetterServer, u as LastSignIn, v as SupportExpireRouteOptions, w as SUPPORT_COOKIE, x as SupportSessions, y as SupportOptions, z as SupportStartInput } from "../server-types-fXwJoFjt.js";
-import { a as checkAal, i as amrOf, n as AmrEntry, r as aalOf, t as Aal } from "../mfa-DtflCXEt.js";
-import { n as toSession, t as AuthSession } from "../view-SuASaomx.js";
-import { a as serverCore, i as ServerCore, n as SessionEntryConfig, r as withSession, t as AuthOutageHook } from "../session-Djo5t4KQ.js";
-import { a as RespondOptions, c as isResult, d as RefreshPolicy, f as isPrefetch, h as shouldRefresh, i as MiddlewareOptions, l as respond, m as shouldCheckSession, n as AuthKind, o as Settled, p as refreshFor, r as GuardOptions, s as guard, u as settle } from "../respond-Cdg5ibH5.js";
-import { a as GuardEntryConfig, i as withBetterSupabase, n as BetterSupabaseContributions, o as withGuard, r as BetterSupabaseEntry, t as BetterSupabaseConfig } from "../composite-DMMA_Whg.js";
-import { a as AuthorizedContext, i as AuthorizeOptions, l as hasRole, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions, u as rolesAt } from "../kit-BlcEFQql.js";
-import { n as subjectReaders, t as SubjectReadersOptions } from "../subject-readers-81xiWh4M.js";
+import { _ as SupportAuthorize, a as AutomationHooks, b as TicketSubject, c as ChatActionHook, d as IdentityRef, f as IdentityTarget, g as SubscriberPolicy, h as SubscriberEvent, i as AuthorizationHooks, l as DelegationPermissions, m as Subscriber, n as Approver, o as AutomationRef, p as PrincipalByIdentity, r as ApproverOf, s as ChatAction, t as ApprovalRequestRef, u as DelegationRef, v as SupportAuthorizeInput, x as defineAuthorizationHooks, y as SupportDecision } from "../authorization-hooks-WDQMKIsc.js";
+import { A as supportCookieValue, B as SupportSessionStore, C as SupportSessions, D as SupportCookieOptions, E as SUPPORT_COOKIE, F as SupportEndedBy, G as PRIMARY_COOKIE, H as sqlSupportStore, I as SupportListFilter, J as DeleteAccountOptions, K as ReplicaState, L as SupportRequest, M as SupportApprovalQuery, N as SupportApprover, O as clearSupportCookie, P as SupportCallerClaims, R as SupportRequestInput, S as SupportPolicy, T as supportSessions, U as supportClaims, V as SupportStartInput, W as RequestIdOptions, X as deleteAccount, Y as DeleteAccountResult, _ as suspendAccount, a as ServerContext, b as SupportExpireRouteOptions, c as ServerOptions, d as EndSessionsResult, f as LastSignIn, g as lastSignIns, h as endSessions, i as ForContextOptions, j as SqlSupportStoreOptions, k as supportCookie, m as SuspendAccountResult, n as BetterServer, o as ServerDbOptions, p as SuspendAccountOptions, q as LiteDriver, r as ContextOptions, s as ServerKeys, t as AdminDb, u as TENANT_HEADER, v as ActiveSupport, w as SupportStartRequest, x as SupportOptions, y as SupportApi, z as SupportSession } from "../server-types-fLdep4gb.js";
+import { a as checkAal, i as amrOf, n as AmrEntry, r as aalOf, t as Aal } from "../mfa-YzkRjNad.js";
+import { n as toSession, t as AuthSession } from "../view-KQhe6eNc.js";
+import { a as serverCore, i as ServerCore, n as SessionEntryConfig, r as withSession, t as AuthOutageHook } from "../session-DObioXpX.js";
+import { a as RespondOptions, c as isResult, d as RefreshPolicy, f as isPrefetch, h as shouldRefresh, i as MiddlewareOptions, l as respond, m as shouldCheckSession, n as AuthKind, o as Settled, p as refreshFor, r as GuardOptions, s as guard, u as settle } from "../respond-BSL36dQp.js";
+import { a as GuardEntryConfig, i as withBetterSupabase, n as BetterSupabaseContributions, o as withGuard, r as BetterSupabaseEntry, t as BetterSupabaseConfig } from "../composite-DzvBL5nb.js";
+import { a as AuthorizedContext, i as AuthorizeOptions, l as hasRole, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions, u as rolesAt } from "../kit-De-EVRhw.js";
+import { n as subjectReaders, t as SubjectReadersOptions } from "../subject-readers-BUChuOxL.js";
 import { i as toCsv, n as csvColumns, t as CsvOptions } from "../csv-D3eKxV1T.js";
 import { i as JwsAlgorithm, n as Jwks, r as JwksOfOptions } from "../jws-35a8VhFV.js";
-import { a as ResourceHandler, c as ResourceList, l as ResourceRouteOptions, s as ResourceInput } from "../resource-types-CC59gMHE.js";
-import { i as tagFor, n as cacheTagsOf, r as tagCache, t as TagOptions } from "../tags-7NHyD1P8.js";
-import { n as supportOf, t as SupportView } from "../support-view-CznLe4jq.js";
-import { a as sessionStatus, c as RefreshOutcome, i as clearSessionCookies, l as refreshSession, n as SessionStatus, o as authContext, r as SessionStatusOptions, t as ClearSessionCookiesOptions } from "../ended-EcTtzzQJ.js";
+import { a as ResourceHandler, c as ResourceList, l as ResourceRouteOptions, s as ResourceInput } from "../resource-types-LW1i5-h3.js";
+import { i as tagFor, n as cacheTagsOf, r as tagCache, t as TagOptions } from "../tags-BrGopDVG.js";
+import { n as supportOf, t as SupportView } from "../support-view-Bj_lZ8Wr.js";
+import { a as sessionStatus, c as RefreshOutcome, i as clearSessionCookies, l as refreshSession, n as SessionStatus, o as authContext, r as SessionStatusOptions, t as ClearSessionCookiesOptions } from "../ended-De6H52nX.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { Middleware, SingleKeyEntry } from "@supabase/middleware";
 import { AuthMode, JWTClaims, UserClaims } from "@supabase/server";
@@ -61,7 +61,7 @@ export declare function extendServer<R extends object>(server: object, extra: Om
  * Server-side entry point for APIs, jobs, MCP servers and framework
  * adapters. Holds the secrets; `betterSupabase` stays isomorphic.
  */
-export declare function createServer<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options?: ServerOptions): BetterServer<M, F, E, C, P>;
+export declare function createServer<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P, B>, options?: ServerOptions): BetterServer<M, F, E, C, P, B>;
 //#endregion
 //#region src/server/adapter.d.ts
 interface HandleOptions extends MiddlewareOptions {
@@ -105,7 +105,7 @@ export declare function unexpectedResponse(cause: unknown, options: {
  *   handle(server, request, (c) => c.db.notes.findMany(), { waitUntil: (p) => ctx.waitUntil(p) }) }
  * ```
  */
-export declare function handle<M extends AnyModels, F extends AnyFunctions, E, C, P>(server: BetterServer<M, F, E, C, P>, request: Request, run: (ctx: ServerContext<M, F, E, C, P>) => unknown, options?: HandleOptions): Promise<Response>;
+export declare function handle<M extends AnyModels, F extends AnyFunctions, E, C, P, B>(server: BetterServer<M, F, E, C, P, B>, request: Request, run: (ctx: ServerContext<M, F, E, C, P, B>) => unknown, options?: HandleOptions): Promise<Response>;
 /**
  * Verifies a bare access token (an MCP transport's, a WebSocket's) without
  * cookies or a refresh. An empty token resolves to `anon`.
@@ -128,7 +128,7 @@ interface SupportStorageOptions {
   readonly admin: StorageApi;
   /** Runs as the target, such as `postgres.asUser(support.claims)`, so RLS on `storage.objects` decides. Writes need its `transaction`. */
   readonly sql: SqlClient;
-  /** Runs as the connection-string role, such as `postgres.admin`. Writes need it to make the target the owner of what they store. */
+  /** Runs as the connection-string role, such as `postgres.admin`. Writes and signed upload claims need it to make the target the owner of what they store. */
   readonly adminSql?: SqlClient;
   /** The session the writes are recorded under. Writes need it. */
   readonly session?: Pick<SupportSession, "id" | "adminId" | "targetUserId">;
@@ -155,9 +155,17 @@ interface SupportStorageOptions {
  * decide as for the target's own request. Then the service client writes,
  * the admin connection makes the target the owner of the stored object,
  * and its `user_metadata` records the session id and the admin's id. A
- * refused dry run resolves to Storage's `403`. Signed uploads resolve to a
- * `403` `SUPPORT_STORAGE_WRITES` error, and every write in a read-only
- * session to a `403` `SUPPORT_READ_ONLY` error.
+ * refused dry run resolves to Storage's `403`.
+ *
+ * `createSignedUploadUrl` runs the same dry run as `upload` before the
+ * service client signs the URL. The object a browser uploads there has no
+ * owner, so `claimSignedUpload(bucket, path)` finishes the upload: it checks again
+ * that the target may insert at the path, then makes the target the owner
+ * of an object without one and stamps the session on its `user_metadata`.
+ * An object another user owns is refused with a `403`. `uploadToSignedUrl`
+ * claims what it stores. Every write in a read-only session resolves to a
+ * `403` `SUPPORT_READ_ONLY` error, and without `adminSql`, `session` or a
+ * `sql` client with `transaction` to a `403` `SUPPORT_STORAGE_WRITES` error.
  */
 export declare function supportStorage(options: SupportStorageOptions): StorageApi;
 //#endregion
@@ -393,4 +401,4 @@ export declare function withDbStats(options?: {
   };
 }, () => DbStats>;
 //#endregion
-export { AUTH_CACHE_HEADERS, type Aal, type AccessTokenResolverOptions, type AccessTokenRevocation, type AccountEventType, type ActClaim, type ActionResult, type ActiveSupport, type ActorOutcome, type AgentActOptions, type AmrEntry, type AnyAuthorizer, type ApprovalRequestRef, type Approver, type ApproverOf, type AuthKind, type AuthOutageHook, type AuthResolution, type AuthResolver, type AuthSession, type AuthState, type AuthorizationHooks, type AuthorizationOutcome, type AuthorizationRequest, type AuthorizationResource, type AuthorizationSubject, type AuthorizeOptions, type AuthorizedContext, type Authorizer, type AutomationHooks, type AutomationRef, type BetterServer, type BetterSupabaseConfig, type BetterSupabaseContributions, type BetterSupabaseEntry, type BlockActionOptions, type BlockRequireOptions, type ChatAction, type ChatActionHook, type ClearSessionCookiesOptions, type ContextOptions, type CookieOptions, type CookieRecord, type CookieWrite, type CsvOptions, type CsvResponseOptions, type DelegationPermissions, type DelegationRef, type DeleteAccountOptions, type DeleteAccountResult, type EndSessionsResult, type ForContextOptions, type GuardEntryConfig, type GuardOptions, type HandleOptions, IDENTITY_SCOPES, type IdentityRef, type IdentityTarget, type ImpersonationOptions, type Impersonator, type InvalidReason, type LastSignIn, type LiteDriver, type MiddlewareOptions, PRIMARY_COOKIE, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type PermissionRef, type PrincipalByIdentity, type ProblemDetails, type ProblemOptions, type ProblemResponseOptions, type RateLimitPolicy, type RateLimitState, type RefreshOutcome, type RefreshPolicy, type ReplicaState, type RequestIdOptions, type ResolveAuthOptions, type ResolvedState, type ResourceHandler, type ResourceInput, type ResourceList, type ResourcePagination, type ResourceRouteOptions, type RespondOptions, SUPPORT_COOKIE, type ServerContext, type ServerCore, type ServerDbOptions, type ServerOptions, type ServerTiming, type SessionActor, type SessionDelegation, type SessionEntryConfig, type SessionLookup, type SessionStatus, type SessionStatusOptions, type Settled, type SqlSupportStoreOptions, type StoredSession, type SubjectReadersOptions, type Subscriber, type SubscriberEvent, type SubscriberPolicy, type SupabaseAuthContext, type SupportApi, type SupportApprovalQuery, type SupportApprover, type SupportAuthorize, type SupportAuthorizeInput, type SupportCallerClaims, type SupportCookieOptions, type SupportDecision, type SupportEndedBy, type SupportExpireRouteOptions, type SupportListFilter, type SupportOptions, type SupportPolicy, type SupportRequest, type SupportRequestInput, type SupportSession, type SupportSessionStore, type SupportSessions, type SupportSessionsEvents, type SupportStartInput, type SupportStartRequest, type SupportStorageOptions, type SupportView, type SuspendAccountOptions, type SuspendAccountResult, TENANT_HEADER, type TagOptions, type TicketSubject, aalOf, actorOf, agentClaims, amrOf, authContext, cacheTagsOf, checkAal, clearSessionCookies, clearSupportCookie, clientIp, csvColumns, defineAuthorizationHooks, defineAuthorizer, delegationOf, deleteAccount, endSessions, fromProblem, guard, hasRole, impersonatorOf, isPrefetch, isProblem, isResult, lastSignIns, problemResponse, readSession, refreshFor, refreshSession, resolveAuth, respond, rolesAt, serverCore, sessionCookieName, sessionStatus, settle, shouldCheckSession, shouldRefresh, sqlSupportStore, subjectReaders, supportClaims, supportCookie, supportCookieValue, supportOf, supportSessions, suspendAccount, tagCache, tagFor, toCsv, toProblem, toSession, withBetterSupabase, withGuard, withSession, writeSession };
+export { AUTH_CACHE_HEADERS, type Aal, type AccessTokenResolverOptions, type AccessTokenRevocation, type AccountEventType, type ActClaim, type ActionResult, type ActiveSupport, type ActorOutcome, type AdminDb, type AgentActOptions, type AmrEntry, type AnyAuthorizer, type ApprovalRequestRef, type Approver, type ApproverOf, type AuthKind, type AuthOutageHook, type AuthResolution, type AuthResolver, type AuthSession, type AuthState, type AuthorizationHooks, type AuthorizationOutcome, type AuthorizationRequest, type AuthorizationResource, type AuthorizationSubject, type AuthorizeOptions, type AuthorizedContext, type Authorizer, type AutomationHooks, type AutomationRef, type BetterServer, type BetterSupabaseConfig, type BetterSupabaseContributions, type BetterSupabaseEntry, type BlockActionOptions, type BlockRequireOptions, type ChatAction, type ChatActionHook, type ClearSessionCookiesOptions, type ContextOptions, type CookieOptions, type CookieRecord, type CookieWrite, type CsvOptions, type CsvResponseOptions, type DelegationPermissions, type DelegationRef, type DeleteAccountOptions, type DeleteAccountResult, type EndSessionsResult, type ForContextOptions, type GuardEntryConfig, type GuardOptions, type HandleOptions, IDENTITY_SCOPES, type IdentityRef, type IdentityTarget, type ImpersonationOptions, type Impersonator, type InvalidReason, type LastSignIn, type LiteDriver, type MiddlewareOptions, PRIMARY_COOKIE, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type PermissionRef, type PrincipalByIdentity, type ProblemDetails, type ProblemOptions, type ProblemResponseOptions, type RateLimitPolicy, type RateLimitState, type RefreshOutcome, type RefreshPolicy, type ReplicaState, type RequestIdOptions, type ResolveAuthOptions, type ResolvedState, type ResourceHandler, type ResourceInput, type ResourceList, type ResourcePagination, type ResourceRouteOptions, type RespondOptions, SUPPORT_COOKIE, type ServerContext, type ServerCore, type ServerDbOptions, type ServerOptions, type ServerTiming, type SessionActor, type SessionDelegation, type SessionEntryConfig, type SessionLookup, type SessionStatus, type SessionStatusOptions, type Settled, type SqlSupportStoreOptions, type StoredSession, type SubjectReadersOptions, type Subscriber, type SubscriberEvent, type SubscriberPolicy, type SupabaseAuthContext, type SupportApi, type SupportApprovalQuery, type SupportApprover, type SupportAuthorize, type SupportAuthorizeInput, type SupportCallerClaims, type SupportCookieOptions, type SupportDecision, type SupportEndedBy, type SupportExpireRouteOptions, type SupportListFilter, type SupportOptions, type SupportPolicy, type SupportRequest, type SupportRequestInput, type SupportSession, type SupportSessionStore, type SupportSessions, type SupportSessionsEvents, type SupportStartInput, type SupportStartRequest, type SupportStorageOptions, type SupportView, type SuspendAccountOptions, type SuspendAccountResult, TENANT_HEADER, type TagOptions, type TicketSubject, aalOf, actorOf, agentClaims, amrOf, authContext, cacheTagsOf, checkAal, clearSessionCookies, clearSupportCookie, clientIp, csvColumns, defineAuthorizationHooks, defineAuthorizer, delegationOf, deleteAccount, endSessions, fromProblem, guard, hasRole, impersonatorOf, isPrefetch, isProblem, isResult, lastSignIns, problemResponse, readSession, refreshFor, refreshSession, resolveAuth, respond, rolesAt, serverCore, sessionCookieName, sessionStatus, settle, shouldCheckSession, shouldRefresh, sqlSupportStore, subjectReaders, supportClaims, supportCookie, supportCookieValue, supportOf, supportSessions, suspendAccount, tagCache, tagFor, toCsv, toProblem, toSession, withBetterSupabase, withGuard, withSession, writeSession };

package/dist/server/index.js

@@ -1,31 +1,31 @@
-import { n as dbError } from "../errors-8i6tSICm.js";
-import { a as ok, r as err } from "../result-COkvI9t5.js";
+import { n as dbError } from "../errors-BV1SKTVs.js";
 import { n as isRecord } from "../guards-6F2bCtQR.js";
-import { t as base64ToText } from "../base64-BmeCBgGo.js";
-import { c as toProblem, i as isProblem, n as PROBLEM_TYPE_BASE, o as problemResponse, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "../problem-pIiL3WbE.js";
-import { i as delegationOf, n as actorOf, r as agentClaims, t as IDENTITY_SCOPES } from "../actor-KHDOKGb1.js";
-import { i as userContext, r as impersonatorOf } from "../impersonation-CDeCzZP6.js";
+import { t as base64ToText } from "../base64-D4aqdnDR.js";
+import { c as toProblem, i as isProblem, n as PROBLEM_TYPE_BASE, o as problemResponse, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "../problem-JRCohp1j.js";
+import { i as delegationOf, n as actorOf, r as agentClaims, t as IDENTITY_SCOPES } from "../actor-CAL8mMih.js";
+import { i as userContext, r as impersonatorOf } from "../impersonation-DxU6yHJV.js";
 import { t as supportOf } from "../support-view-g4YLBeqX.js";
 import { r as toCsv, t as csvColumns } from "../csv-CVfXqaAu.js";
-import { A as suspendAccount, C as shouldRefresh, D as SERVER_EVENT_SOURCE, E as defineAuthorizationHooks, O as endSessions, S as shouldCheckSession, T as serverCore, a as unexpectedResponse, b as isPrefetch, c as extendServer, d as clearSupportCookie, f as supportCookie, h as TENANT_HEADER, i as resolveToken, j as deleteAccount, k as lastSignIns, l as supportStorage, m as supportCookieValue, n as flushEvents, o as withFlush, r as handle, s as createServer, u as SUPPORT_COOKIE, x as refreshFor, y as withSession } from "../adapter-rmWaLNe3.js";
+import { A as suspendAccount, C as shouldRefresh, D as SERVER_EVENT_SOURCE, E as defineAuthorizationHooks, O as endSessions, S as shouldCheckSession, T as serverCore, a as unexpectedResponse, b as isPrefetch, c as extendServer, d as clearSupportCookie, f as supportCookie, h as TENANT_HEADER, i as resolveToken, j as deleteAccount, k as lastSignIns, l as supportStorage, m as supportCookieValue, n as flushEvents, o as withFlush, r as handle, s as createServer, u as SUPPORT_COOKIE, x as refreshFor, y as withSession } from "../adapter-CRNH2aX_.js";
 import { n as PRIMARY_COOKIE } from "../replicas-BvIL4_jL.js";
-import { t as authContext } from "../context-BDDgjoxz.js";
-import { _ as writeSession, a as clearSessionCookies, h as sessionCookieName, i as refreshSession, o as sessionStatus, p as readSession, r as resolveAuth, s as AUTH_CACHE_HEADERS, t as clientIp } from "../resolve-CAR9oaKW.js";
-import { a as checkAal, i as amrOf, n as toSession, r as aalOf } from "../view-DZ63nqwt.js";
-import { a as respond, i as isResult, o as settle, r as guard } from "../respond-Dpx48ATq.js";
-import { n as sqlSupportStore, r as supportClaims, t as supportSessions } from "../support-BsqhV6jP.js";
+import { t as authContext } from "../context-BiwgsycK.js";
+import { _ as writeSession, a as clearSessionCookies, h as sessionCookieName, i as refreshSession, o as sessionStatus, p as readSession, r as resolveAuth, s as AUTH_CACHE_HEADERS, t as clientIp } from "../resolve-AtncaPTU.js";
+import { a as checkAal, i as amrOf, n as toSession, r as aalOf } from "../view-CYX1wsgp.js";
+import { a as respond, i as isResult, o as settle, r as guard } from "../respond-Bhp3G__q.js";
+import { n as sqlSupportStore, r as supportClaims, t as supportSessions } from "../support-C2wPYwD7.js";
 import { n as event, t as defineEvents } from "../event-map-Dy2vKHai.js";
-import { t as subjectReaders } from "../subject-readers-DDyPTIOr.js";
-import { t as postgresExecutor } from "../executor-aKUo_Xyb.js";
+import { t as subjectReaders } from "../subject-readers-BpwUFJtp.js";
+import { t as postgresExecutor } from "../executor-CxGQiQN_.js";
 import { n as jwtClaimsOf, r as userClaimsOf, t as authModeOf } from "../claims-0KZVT804.js";
-import { n as withGuard, t as withBetterSupabase } from "../composite-CPV0thLs.js";
-import { a as jwksOf, c as verifyCompact, t as JwsError } from "../jws-milwSg7E.js";
+import { n as withGuard, t as withBetterSupabase } from "../composite-1kPAxXto.js";
+import { c as verifyCompact, t as JwsError } from "../jws-CwBB5QAT.js";
+import { t as jwksSource } from "../jwks-cache-C4rA69hD.js";
 import { i as rateLimitPolicyHeader, n as periodSeconds, r as rateLimitHeader, t as isRateLimitPolicyName } from "../ratelimit-headers-Bsxx0Tj2.js";
-import { r as defineAuthorizer } from "../authorizer-dVVN05Un.js";
-import { t as defineResource } from "../resource-CHGOmg1O.js";
+import { r as defineAuthorizer } from "../authorizer-B3yyCVUF.js";
+import { t as defineResource } from "../resource-Bdkqi8jo.js";
 import { i as withServerTiming, n as parseDbStats, r as withDbStats, t as DB_CALLS_HEADER } from "../timing-BMCWgpdZ.js";
 import { n as tagCache, r as tagFor, t as cacheTagsOf } from "../tags-B99_U9Pp.js";
-import { a as rolesAt, r as hasRole } from "../kit-gqwkVhGU.js";
+import { a as rolesAt, r as hasRole } from "../kit-LTbHrWWD.js";
 import { defineMiddleware } from "@supabase/middleware";
 //#region src/server/csv.ts
 function disposition(filename) {
@@ -136,51 +136,6 @@ function withBlock(key, create) {
 	})();
 }
 //#endregion
-//#region src/core/jwks-cache.ts
-/** The most bytes read from a JWKS response. */
-const MAX_JWKS_BYTES = 262144;
-/**
-* A cached key set. A URL is fetched on first use and again after
-* `cacheSeconds`; a refresh for an unknown `kid` refetches at most once per
-* `refetchSeconds`, so a stream of forged `kid`s can't hammer the issuer.
-* Concurrent callers share one fetch.
-*/
-function jwksSource(input, options = {}) {
-	const parse = (value) => jwksOf(value, options.rsa === void 0 ? {} : { rsa: options.rsa });
-	if (!(input instanceof URL) && typeof input !== "function") {
-		const keys = parse(input);
-		return () => Promise.resolve(ok(keys));
-	}
-	const now = options.now ?? Date.now;
-	const cacheMs = (options.cacheSeconds ?? 300) * 1e3;
-	const refetchMs = (options.refetchSeconds ?? 30) * 1e3;
-	let cached;
-	let pending;
-	const load = async () => {
-		if (typeof input === "function") return ok(parse(await input()));
-		const response = await (options.fetch ?? fetch)(input, { headers: { accept: "application/jwk-set+json, application/json" } });
-		if (!response.ok) return err(dbError("network", `The JWKS answered ${response.status}`, { code: "JWKS_FETCH_FAILED" }));
-		const text = await response.text();
-		if (text.length > MAX_JWKS_BYTES) return err(dbError("network", "The JWKS response is too large", { code: "JWKS_FETCH_FAILED" }));
-		return ok(parse(JSON.parse(text)));
-	};
-	return async (refresh) => {
-		const age = cached ? now() - cached.at : Number.POSITIVE_INFINITY;
-		if (cached && age < (refresh ? refetchMs : cacheMs)) return ok(cached.keys);
-		pending ??= load().catch((cause) => err(dbError("network", `The JWKS could not be loaded: ${cause instanceof Error ? cause.message : String(cause)}`, { code: "JWKS_FETCH_FAILED" }))).then((result) => {
-			if (result.ok) cached = {
-				keys: result.data,
-				at: now()
-			};
-			return result;
-		}).finally(() => {
-			pending = void 0;
-		});
-		const result = await pending;
-		return !result.ok && cached ? ok(cached.keys) : result;
-	};
-}
-//#endregion
 //#region src/auth/access-token.ts
 const RESERVED = /* @__PURE__ */ new Set([
 	"iss",

package/dist/{server-types-fXwJoFjt.d.ts → server-types-fLdep4gb.d.ts}

@@ -1,20 +1,20 @@
 /// <reference lib="esnext.temporal" />
-import { t as AsyncResult } from "./result-Cj3yWhjH.js";
-import { a as AnyModels, i as AnyFunctions } from "./types-BO8lVTun.js";
-import { o as EventHub } from "./events-CtAHxPal.js";
-import { m as RequestContext } from "./plugin-D5OIaP93.js";
-import { t as BetterSupabaseEnv } from "./index-CxmVzT-3.js";
-import { a as ResolveAuthOptions, p as CookieWrite, r as AuthState, t as AuthResolution } from "./resolve-7atr-wWr.js";
-import { r as CredentialProvider } from "./provider-CQ1SrhLa.js";
-import { n as SqlClient } from "./executor-DzJQVTE2.js";
-import { a as ProblemFormat } from "./problem-CEjyhV5T.js";
+import { t as AsyncResult } from "./result-BREt7qOh.js";
+import { a as AnyModels, i as AnyFunctions } from "./types-BrpW5ixT.js";
+import { o as EventHub } from "./events-P3raDX2E.js";
+import { m as RequestContext } from "./plugin-D-95Q0w0.js";
+import { o as EnvSource, t as BetterSupabaseEnv } from "./index-CxmVzT-3.js";
+import { a as ResolveAuthOptions, p as CookieWrite, r as AuthState, t as AuthResolution } from "./resolve-Ceft-18-.js";
+import { r as CredentialProvider } from "./provider-DXgx5oSA.js";
+import { n as SqlClient } from "./executor-D1hECPGG.js";
+import { a as ProblemFormat } from "./problem-DCDIQiTA.js";
 import { t as AnyAuthorizer } from "./authorizer-eiOjo-3l.js";
-import { i as EventSink } from "./cloud-event-bwsBwVNG.js";
-import { S as Bucket, t as StorageApi } from "./storage-api-B4Ib2Zpo.js";
-import { Kt as StatsRecorder, Wt as DbStats, _ as Db, t as BetterSupabase } from "./define-DXTC706J.js";
+import { i as EventSink } from "./cloud-event-DXkNoI6v.js";
+import { j as StorageApi, n as Bucket } from "./bucket-BbePDVwc.js";
+import { Kt as StatsRecorder, Wt as DbStats, _ as Db, t as BetterSupabase } from "./define-DYZnvAbs.js";
 import { t as ImpersonationOptions } from "./impersonation-D5chOkrO.js";
-import { _ as SupportAuthorize, b as TicketSubject, i as AuthorizationHooks } from "./authorization-hooks-Do5djkpz.js";
-import { s as SqlClaims, t as BetterPostgres } from "./pool-BBi4mot3.js";
+import { _ as SupportAuthorize, b as TicketSubject, i as AuthorizationHooks } from "./authorization-hooks-WDQMKIsc.js";
+import { s as SqlClaims, t as BetterPostgres } from "./pool-cM3rpOQr.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/server/delete-account.d.ts
@@ -482,10 +482,12 @@ interface ServerDbOptions {
 }
 interface ServerOptions {
   /**
-   * Defaults to the variables `getEnv` from `@supabase/middleware` reads:
-   * Workers bindings, then `process.env`, then `Deno.env`.
+   * A loaded env, or the variables to load it from (`{ SUPABASE_URL, ... }`),
+   * read without falling back to the runtime's. Defaults to the variables
+   * `getEnv` from `@supabase/middleware` reads: Workers bindings, then
+   * `process.env`, then `Deno.env`.
    */
-  readonly env?: BetterSupabaseEnv;
+  readonly env?: BetterSupabaseEnv | EnvSource;
   /** Enables `ctx.sql` and `actingAs()`. */
   readonly postgres?: BetterPostgres;
   readonly auth?: Omit<ResolveAuthOptions, "env">;
@@ -596,7 +598,7 @@ interface ForContextOptions {
 }
 /** The header `current_tenant_id()` reads over the Data API. */
 declare const TENANT_HEADER = "x-bs-tenant";
-interface ServerContext<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> {
+interface ServerContext<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> {
   readonly auth: AuthState<C, P>;
   readonly resolution: AuthResolution<C, P>;
   /**
@@ -605,9 +607,9 @@ interface ServerContext<M extends AnyModels, F extends AnyFunctions, E, C = unkn
    */
   readonly supabase: SupabaseClient;
   /** Repositories over PostgREST as the caller. */
-  readonly db: Db<M, F, E, SupabaseClient>;
+  readonly db: Db<M, F, E, SupabaseClient, B>;
   /** Repositories over direct Postgres as the caller, when `postgres` is configured. */
-  readonly sql: Db<M, F, E, undefined> | undefined;
+  readonly sql: Db<M, F, E, undefined, B> | undefined;
   /** Calls, waves, tables and time for `db` and `sql` together. */
   stats(): DbStats;
   /** Where `db` reads go, when a read URL is configured. */
@@ -659,7 +661,18 @@ interface ContextOptions {
   readonly requestId?: string;
   readonly correlationId?: string;
 }
-interface BetterServer<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> {
+/** The repositories `bs.admin()` returns: a secret-key `Db` with the Auth admin API. */
+type AdminDb<M extends AnyModels, F extends AnyFunctions, E, B = unknown> = Db<M, F, E, SupabaseClient, B> & {
+  /**
+   * `auth.admin` of the secret-key client: create, invite, list, update and
+   * delete users. Request repositories have no such handle, since their
+   * client holds no secret key.
+   */
+  readonly $authAdmin: SupabaseClient["auth"]["admin"];
+};
+/** A server built by `createServer`, `createHono` or `createNext`, handed to another adapter to share. */
+type SharedServer = Pick<BetterServer<AnyModels, AnyFunctions, unknown>, "env" | "events" | "resolve">;
+interface BetterServer<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> {
   readonly env: BetterSupabaseEnv;
   /** The definition's events; adapters pass `events.settled()` to `waitUntil`. */
   readonly events: EventHub;
@@ -672,14 +685,14 @@ interface BetterServer<M extends AnyModels, F extends AnyFunctions, E, C = unkno
    * Resolves auth and binds repositories to the caller. Refreshes an expired
    * cookie session only with `refresh: true`; send `ctx.apply(response)`.
    */
-  context(request: Request, options?: ContextOptions): Promise<ServerContext<M, F, E, C, P>>;
+  context(request: Request, options?: ContextOptions): Promise<ServerContext<M, F, E, C, P, B>>;
   /**
    * The context for a resolution from `resolve(request)`, so one resolution
    * can back several contexts without verifying the token again.
    */
-  contextFromResolution(resolution: AuthResolution<C, P>, request: Request, options?: Omit<ContextOptions, "refresh">): ServerContext<M, F, E, C, P>;
+  contextFromResolution(resolution: AuthResolution<C, P>, request: Request, options?: Omit<ContextOptions, "refresh">): ServerContext<M, F, E, C, P, B>;
   /** The context for an auth state resolved elsewhere (the proxy, a queue message). */
-  contextFor(auth: AuthState<C, P>, options?: ContextOptions): ServerContext<M, F, E, C, P>;
+  contextFor(auth: AuthState<C, P>, options?: ContextOptions): ServerContext<M, F, E, C, P, B>;
   /** A stateless supabase-js client for an auth state, optionally with extra request headers. */
   supabaseFor(auth: AuthState, headers?: Readonly<Record<string, string>>): SupabaseClient;
   /**
@@ -689,9 +702,16 @@ interface BetterServer<M extends AnyModels, F extends AnyFunctions, E, C = unkno
    */
   dbFor(auth: AuthState, context?: RequestContext, options?: {
     readonly support?: ActiveSupport;
-  }): Db<M, F, E, SupabaseClient>;
-  /** Service-role repositories. Bypasses RLS; the actor is `service`. */
-  admin(context?: RequestContext): Db<M, F, E, SupabaseClient>;
+  }): Db<M, F, E, SupabaseClient, B>;
+  /**
+   * Service-role repositories. Bypasses RLS; the actor is `service`. With
+   * `as`, every request carries the `x-bs-actor` header, so the audit log and
+   * `track_actor` columns record that user for writes the secret key makes.
+   * Only a service caller can set it; the database ignores it for anyone else.
+   */
+  admin(context?: RequestContext, options?: {
+    readonly as?: string;
+  }): AdminDb<M, F, E, B>;
   /**
    * Deletes a user: the Auth user, then their objects in `buckets`, then a
    * `mutation` notice for `auth.users`. Needs the secret key. With
@@ -711,7 +731,7 @@ interface BetterServer<M extends AnyModels, F extends AnyFunctions, E, C = unkno
    * `impersonation`, the claims carry `act: { kind: "impersonation", sub, reason }`, which
    * the `audit` and `actor` SQL modules record.
    */
-  actingAs(userId: string, claims?: Omit<SqlClaims, "sub" | "act">, impersonation?: ImpersonationOptions): Db<M, F, E, undefined>;
+  actingAs(userId: string, claims?: Omit<SqlClaims, "sub" | "act">, impersonation?: ImpersonationOptions): Db<M, F, E, undefined, B>;
   /**
    * Repositories for the user in a recorded context (`job.context`), with
    * RLS, over direct Postgres: `actingAs` with the context's tenant and
@@ -724,7 +744,7 @@ interface BetterServer<M extends AnyModels, F extends AnyFunctions, E, C = unkno
    * or delegation is malformed, or the ticket has no resolver or is
    * refused; it never falls back to the recorded actor or `admin()`.
    */
-  forContext(context: RequestContext, options?: ForContextOptions): AsyncResult<Db<M, F, E, undefined>>;
+  forContext(context: RequestContext, options?: ForContextOptions): AsyncResult<Db<M, F, E, undefined, B>>;
   /** Support sessions; every method fails without `ServerOptions.support`. */
   readonly support: SupportApi;
   /** `options.authorizer`, when the server has one. */
@@ -734,4 +754,4 @@ interface BetterServer<M extends AnyModels, F extends AnyFunctions, E, C = unkno
 }
 type ServerKeys = keyof BetterServer<AnyModels, AnyFunctions, unknown>;
 //#endregion
-export { SupportApprovalQuery as A, sqlSupportStore as B, supportSessions as C, supportCookie as D, clearSupportCookie as E, SupportRequest as F, LiteDriver as G, RequestIdOptions as H, SupportRequestInput as I, deleteAccount as J, DeleteAccountOptions as K, SupportSession as L, SupportCallerClaims as M, SupportEndedBy as N, supportCookieValue as O, SupportListFilter as P, SupportSessionStore as R, SupportStartRequest as S, SupportCookieOptions as T, PRIMARY_COOKIE as U, supportClaims as V, ReplicaState as W, SupportApi as _, ServerDbOptions as a, SupportPolicy as b, TENANT_HEADER as c, SuspendAccountOptions as d, SuspendAccountResult as f, ActiveSupport as g, suspendAccount as h, ServerContext as i, SupportApprover as j, SqlSupportStoreOptions as k, EndSessionsResult as l, lastSignIns as m, ContextOptions as n, ServerKeys as o, endSessions as p, DeleteAccountResult as q, ForContextOptions as r, ServerOptions as s, BetterServer as t, LastSignIn as u, SupportExpireRouteOptions as v, SUPPORT_COOKIE as w, SupportSessions as x, SupportOptions as y, SupportStartInput as z };
+export { supportCookieValue as A, SupportSessionStore as B, SupportSessions as C, SupportCookieOptions as D, SUPPORT_COOKIE as E, SupportEndedBy as F, PRIMARY_COOKIE as G, sqlSupportStore as H, SupportListFilter as I, DeleteAccountOptions as J, ReplicaState as K, SupportRequest as L, SupportApprovalQuery as M, SupportApprover as N, clearSupportCookie as O, SupportCallerClaims as P, SupportRequestInput as R, SupportPolicy as S, supportSessions as T, supportClaims as U, SupportStartInput as V, RequestIdOptions as W, deleteAccount as X, DeleteAccountResult as Y, suspendAccount as _, ServerContext as a, SupportExpireRouteOptions as b, ServerOptions as c, EndSessionsResult as d, LastSignIn as f, lastSignIns as g, endSessions as h, ForContextOptions as i, SqlSupportStoreOptions as j, supportCookie as k, SharedServer as l, SuspendAccountResult as m, BetterServer as n, ServerDbOptions as o, SuspendAccountOptions as p, LiteDriver as q, ContextOptions as r, ServerKeys as s, AdminDb as t, TENANT_HEADER as u, ActiveSupport as v, SupportStartRequest as w, SupportOptions as x, SupportApi as y, SupportSession as z };

package/dist/{session-Djo5t4KQ.d.ts → session-DObioXpX.d.ts}

@@ -1,8 +1,8 @@
-import { a as AnyModels, i as AnyFunctions } from "./types-BO8lVTun.js";
-import { n as AuthOutageEvent, o as EventHub } from "./events-CtAHxPal.js";
-import { f as CookieScope, h as SessionEncoding, r as AuthState, t as AuthResolution } from "./resolve-7atr-wWr.js";
-import { g as ActiveSupport, i as ServerContext, n as ContextOptions } from "./server-types-fXwJoFjt.js";
-import { d as RefreshPolicy } from "./respond-Cdg5ibH5.js";
+import { a as AnyModels, i as AnyFunctions } from "./types-BrpW5ixT.js";
+import { n as AuthOutageEvent, o as EventHub } from "./events-P3raDX2E.js";
+import { f as CookieScope, h as SessionEncoding, r as AuthState, t as AuthResolution } from "./resolve-Ceft-18-.js";
+import { a as ServerContext, r as ContextOptions, v as ActiveSupport } from "./server-types-fLdep4gb.js";
+import { d as RefreshPolicy } from "./respond-BSL36dQp.js";
 import { SingleKeyEntry } from "@supabase/middleware";
 //#region src/server/entries/core.d.ts
 /**
@@ -10,7 +10,7 @@ import { SingleKeyEntry } from "@supabase/middleware";
  * request-scoped context builder and the settings behind them. The server
  * registers it once; entries read it with `serverCore(server)`.
  */
-interface ServerCore<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> {
+interface ServerCore<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> {
   readonly events: EventHub;
   /** How long reads stay on the primary after a write. */
   readonly pinMs: number;
@@ -25,13 +25,13 @@ interface ServerCore<M extends AnyModels, F extends AnyFunctions, E, C = unknown
   /** `ServerOptions.tenant`, or `undefined` without one. */
   tenant(request: Request, auth: AuthState<C, P>): string | undefined | PromiseLike<string | undefined>;
   support(request: Request, auth: AuthState<C, P>): Promise<ActiveSupport | undefined>;
-  context(resolution: AuthResolution<C, P>, request: Request, options: ContextOptions, tenant: string | undefined): ServerContext<M, F, E, C, P>;
+  context(resolution: AuthResolution<C, P>, request: Request, options: ContextOptions, tenant: string | undefined): ServerContext<M, F, E, C, P, B>;
 }
 /** The core of a server built by `createServer` or one of the adapter factories. */
-declare function serverCore<M extends AnyModels, F extends AnyFunctions, E, C, P>(server: {
+declare function serverCore<M extends AnyModels, F extends AnyFunctions, E, C, P, B>(server: {
   readonly events: EventHub;
-  context(request: Request): Promise<ServerContext<M, F, E, C, P>>;
-}): ServerCore<M, F, E, C, P>;
+  context(request: Request): Promise<ServerContext<M, F, E, C, P, B>>;
+}): ServerCore<M, F, E, C, P, B>;
 //#endregion
 //#region src/server/entries/session.d.ts
 interface SessionEntryConfig {
@@ -90,6 +90,6 @@ type AuthOutageHook = (event: AuthOutageEvent, request: Request) => Response | u
  * cookies and the no-store headers, and hands pending event sends to
  * `waitUntil`.
  */
-declare function withSession<M extends AnyModels, F extends AnyFunctions, E, C, P>(core: ServerCore<M, F, E, C, P>, config?: SessionEntryConfig): SingleKeyEntry<"session", Record<never, never>, AuthResolution<C, P>>;
+declare function withSession<M extends AnyModels, F extends AnyFunctions, E, C, P, B>(core: ServerCore<M, F, E, C, P, B>, config?: SessionEntryConfig): SingleKeyEntry<"session", Record<never, never>, AuthResolution<C, P>>;
 //#endregion
 export { serverCore as a, ServerCore as i, SessionEntryConfig as n, withSession as r, AuthOutageHook as t };

package/dist/{settings-DxXfDUmh.js → settings-BiHDFglz.js}

@@ -1,9 +1,9 @@
-import { n as dbError } from "./errors-8i6tSICm.js";
-import { r as err, t as AsyncResult } from "./result-COkvI9t5.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
+import { r as err, t as AsyncResult } from "./result-DIeYscA3.js";
 import { n as isRecord } from "./guards-6F2bCtQR.js";
-import { n as validate } from "./standard-DZmwmIhV.js";
-import { n as applyTemporal, o as blockCall } from "./block-helpers-BfVCR5Fc.js";
-import { r as withBlockHooks } from "./block-hooks-ByKlh8Qy.js";
+import { n as validate } from "./standard-B1BigegP.js";
+import { n as applyTemporal, o as blockCall } from "./block-helpers-DkVZNDrj.js";
+import { r as withBlockHooks } from "./block-hooks-C22vuIUd.js";
 //#region src/blocks/settings/settings.ts
 /**
 * Declares the app's settings with a Standard Schema per key. Values are

package/dist/{shared-9B02lczf.js → shared-C9zvURqC.js}

@@ -1,4 +1,4 @@
-import { n as invalidRequest } from "./build-6jmaPAgx.js";
+import { n as invalidRequest } from "./build-C-D_vn0U.js";
 //#region src/compile/shared.ts
 /** A row-count or offset value that is safe to inline into SQL text. */
 function integer(value) {

package/dist/{shared-as0EG51f.js → shared-D5Djh43x.js}

@@ -1,5 +1,5 @@
 import { t as DbException } from "./db-exception-CnWcYPxL.js";
-import { n as dbError } from "./errors-8i6tSICm.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
 //#region src/plugins/shared.ts
 /** Database column name for an app column, or `undefined` if it is unknown. */
 function dbName(table, app) {

package/dist/{sign-in-D0xN6E_l.js → sign-in-z2BaBdps.js}

@@ -1,5 +1,6 @@
+import { t as hasAuthModule } from "./auth-module-DbZv2WrR.js";
 import { t as clearOnUserChange } from "./user-change-XzvgafU4.js";
-import { c as liveKey, d as shownCount, f as startBroadcast, g as specKey, h as sessionUserId, i as countSource, m as startLiveQuery, p as startLiveCount, t as NO_COUNT } from "./client-CvITjt-9.js";
+import { c as liveKey, d as shownCount, f as startBroadcast, g as specKey, h as sessionUserId, i as countSource, m as startLiveQuery, p as startLiveCount, t as NO_COUNT } from "./client-CHR8IBNG.js";
 import { t as ClientContext } from "./context-wDKxSl9x.js";
 import { useSession } from "./react/session.js";
 import { createElement, useContext, useEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
@@ -107,6 +108,10 @@ function useBroadcast(topic, values, handlers, options) {
 	]);
 	return status;
 }
+const SIGNED_OUT_CALLER = {
+	status: "signed-out",
+	userId: null
+};
 const NO_AUTH = () => () => void 0;
 /**
 * The user `useBroadcast` subscribes as: the provider's auth snapshot, or
@@ -120,6 +125,7 @@ function useBroadcastAuth(client, supabase) {
 	});
 	useEffect(() => {
 		if (client) return;
+		if (!hasAuthModule(supabase)) return;
 		const { data } = supabase.auth.onAuthStateChange((_event, session) => {
 			setPlain({
 				status: session ? "signed-in" : "signed-out",
@@ -130,10 +136,11 @@ function useBroadcastAuth(client, supabase) {
 			data.subscription.unsubscribe();
 		};
 	}, [client, supabase]);
-	return client ? {
+	if (client) return {
 		status: snapshot.status,
 		userId: snapshot.user?.id ?? null
-	} : plain;
+	};
+	return hasAuthModule(supabase) ? plain : SIGNED_OUT_CALLER;
 }
 /**
 * The spec from the render whose key last changed, so effects keep the

package/dist/{signatures-BMdJ7neI.d.ts → signatures-BXlDXV3D.d.ts}

@@ -1,5 +1,5 @@
 /// <reference lib="esnext.temporal" />
-import { f as Result } from "./result-Cj3yWhjH.js";
+import { f as Result } from "./result-BREt7qOh.js";
 //#region src/core/signatures.d.ts
 interface VerifiedWebhook<T = unknown> {
   readonly id: string;

package/dist/{signatures-C9CGYZS1.js → signatures-CeIoAelK.js}

@@ -1,9 +1,9 @@
-import { n as dbError } from "./errors-8i6tSICm.js";
+import { n as dbError } from "./errors-BV1SKTVs.js";
 import { c as optionalTemporal, s as nowInstant } from "./temporal-CB5Fpo5d.js";
-import { n as temporalMissing } from "./temporal-required-DqRzr7i0.js";
-import { a as ok, r as err } from "./result-COkvI9t5.js";
-import { i as toBase64, r as fromBase64 } from "./base64-BmeCBgGo.js";
-import { r as timingSafeEqual, t as encoder } from "./hmac-DCud0myt.js";
+import { n as temporalMissing } from "./temporal-required-nfZ87U-0.js";
+import { a as ok, r as err } from "./result-DIeYscA3.js";
+import { i as toBase64, r as fromBase64 } from "./base64-D4aqdnDR.js";
+import { r as timingSafeEqual, t as encoder } from "./hmac-BgpThYQW.js";
 //#region src/core/signatures.ts
 /** Accepts `whsec_…`, `v1,whsec_…` (Supabase Auth hooks) or raw base64. */
 function secretBytes(secret) {

package/dist/{signers-BjSgNAXP.d.ts → signers-BwKV-9S6.d.ts}

@@ -1,11 +1,11 @@
 /// <reference lib="esnext.temporal" />
-import { f as Result, t as AsyncResult, w as ErrorMapper } from "./result-Cj3yWhjH.js";
+import { T as ErrorMapper, f as Result, t as AsyncResult } from "./result-BREt7qOh.js";
 import { n as Logger } from "./logger-DWVYUmwi.js";
-import { n as SqlClient } from "./executor-DzJQVTE2.js";
-import { t as BlockTransport } from "./block-transport-NbUJygA7.js";
-import { r as BlockTemporalOptions } from "./block-helpers-7pMBVsE6.js";
-import { n as BlockHooks } from "./block-hooks-C_WaodoA.js";
-import { t as BlockProblemOptions } from "./problem-CEjyhV5T.js";
+import { n as SqlClient } from "./executor-D1hECPGG.js";
+import { t as BlockTransport } from "./block-transport-DezJPPA0.js";
+import { r as BlockTemporalOptions } from "./block-helpers-CjcQM1yA.js";
+import { n as BlockHooks } from "./block-hooks-DcPJHztl.js";
+import { t as BlockProblemOptions } from "./problem-DCDIQiTA.js";
 //#region src/blocks/webhooks/incoming-types.d.ts
 /** How a delivery proves it came from the sender. */
 type IncomingVerify = "none" | "standard-webhooks" | "hmac-sha256" | "shared-secret";