better-supabase 0.11.0 → 0.12.0

package/dist/cli/run-Bck-p0MI.js

@@ -0,0 +1,63 @@
+import { p as commandMeta, r as defineCliCommand } from "./command-dfdVhU_2.js";
+import { n as CliError } from "./errors-Caiz_0so.js";
+import { t as PROCESS_ENV } from "./env-C8R7Nf0a.js";
+import { r as spawnInherited } from "./stack-status-_NUgd-g5.js";
+import { i as staleVariables } from "./stack-env-_uWWNHWq.js";
+import { i as readStackEnv } from "./env-Dh5K5t2U.js";
+//#region src/cli/commands/run.ts
+const ARGS = {
+	prefix: {
+		type: "string",
+		description: "Browser variable prefix: next, vite, expo, nuxt, astro, sveltekit, a literal prefix, or \"none\". Defaults to env.prefix, then one detected from your framework",
+		valueHint: "prefix"
+	},
+	"status-file": {
+		type: "string",
+		description: "Read `supabase status -o json` output from a file",
+		valueHint: "file"
+	}
+};
+/**
+* Runs a command with the stack's variables set. They override the shell,
+* and frameworks never override a variable that is already set, so they win
+* over `.env.local` too.
+*/
+async function runWithStackEnv(config, args, { cwd, env, log, signal, spawn = spawnInherited }) {
+	const [command, ...rest] = args._ ?? [];
+	if (command === void 0) throw new CliError("usage", "Name the command to run after --, e.g. better-supabase run -- next dev.", { suggestion: "better-supabase run -- next dev" });
+	const { values } = await readStackEnv(config, args, env, signal);
+	const shell = env[PROCESS_ENV] ?? {};
+	const stale = staleVariables(shell, values);
+	for (const variable of stale) log.warn(`${variable.message} run uses the stack's value.`);
+	return {
+		code: await spawn(command, rest, {
+			cwd,
+			env: {
+				...shell,
+				...values
+			}
+		}),
+		data: {
+			command: [command, ...rest],
+			keys: Object.keys(values),
+			warnings: stale.map(({ message }) => message),
+			stale: stale.map(({ variable, shell: from, stack }) => ({
+				variable,
+				shell: from,
+				stack
+			}))
+		}
+	};
+}
+const runCommand = defineCliCommand({
+	meta: commandMeta("run"),
+	args: ARGS,
+	run: (args, { config, cwd, env, log, signal }) => runWithStackEnv(config, args, {
+		cwd,
+		env,
+		log,
+		signal
+	})
+});
+//#endregion
+export { runCommand };

package/dist/cli/{run-Bb8Nn8Ax.js → run-BhJKAanr.js}

@@ -1,11 +1,11 @@
 import { n as CliError, r as errorText } from "./errors-Caiz_0so.js";
 import { a as sameText, n as importPath, t as display } from "./io-BiPX-_J1.js";
-import { i as writeAtomic, n as cachedDatabaseTypes, t as CACHE_DIR } from "./cache-CVJmPGpd.js";
+import { i as writeAtomic, n as cachedDatabaseTypes, t as CACHE_DIR } from "./cache-DQwgb3rg.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
 import { d as typegenVersion, f as typegenVersionNotice, i as oxfmtInstalled, l as stabilizeMetadata, r as generateDatabaseTypes } from "./typegen--TfvOPLh.js";
 import { a as buildModel, i as metaPaths, l as prop, n as emitMeta, o as generatorModel, r as emitModule, t as GENERATED_HEADER, u as q } from "./emit-56LAG_Px.js";
 import { C as accessRequirements, D as providerLabel, E as moduleKeyProblems, O as unsafeKey, S as accessProviderMode, T as entitlementsMode, c as writeLatestMigration, l as writesMigrations, n as READ_SETS_SUFFIX, r as latestMigration, s as sameModuleMigration, v as migrationsDir, w as entitlementRequirements, x as compiledReadSets } from "./module-migration-CPhuiY8C.js";
-import { t as loadSnapshot } from "./snapshot-ClgWGd-b.js";
+import { t as loadSnapshot } from "./snapshot-BBKFojqM.js";
 import { a as hasConflicts, c as fileDiff, i as changedFiles, n as applyPlan, r as changeLines } from "./files-DDvAwTko.js";
 import { l as tableObject, n as exposed, o as policyObject, s as qualified, t as catalogOf } from "./shared-DKLuA1Tp.js";
 import { existsSync } from "node:fs";

package/dist/cli/{run-nX5ffQM_.js → run-DRZ10srj.js}

@@ -1,10 +1,10 @@
-import { c as COMMANDS, d as GROUPS, f as RESERVED_NAMES, h as runCommand, i as joinRepeated, m as parseArgs$2, o as listArgs, s as runsWithInvalidConfig, t as GLOBAL_ARGS, u as DOCS_ORIGIN } from "./command-DLCZeHdo.js";
+import { c as COMMANDS, d as GROUPS, f as RESERVED_NAMES, h as runCommand, i as joinRepeated, m as parseArgs$2, o as listArgs, s as runsWithInvalidConfig, t as GLOBAL_ARGS, u as DOCS_ORIGIN } from "./command-dfdVhU_2.js";
 import { n as highlight, r as painter } from "./style-2JfIPVMQ.js";
-import { t as VERSION } from "./version-CUKjFbNd.js";
+import { t as VERSION } from "./version-B7akdvDv.js";
 import { n as CliError, o as toCliError } from "./errors-Caiz_0so.js";
 import { a as missingInputNext, o as resolveAgent, t as checkConsent } from "./agent-CCrTYK3W.js";
-import { a as globalFlags, c as resolveCommand, i as commandTree, n as closestName, o as isVariadic, r as commandArgs, t as checkArgs } from "./parse-ksnw4phM.js";
-import { n as movedCommand, r as movedFlag } from "./moved-BmtFuMK3.js";
+import { a as globalFlags, c as resolveCommand, i as commandTree, n as closestName, o as isVariadic, r as commandArgs, t as checkArgs } from "./parse-QzDvMpXH.js";
+import { n as movedCommand, r as movedFlag } from "./moved-BMQu1YNY.js";
 import { n as HTTP_CHANNEL, t as EXEC_CHANNEL } from "./trace-VbdO6bcN.js";
 import { stripVTControlCharacters } from "node:util";
 import { subscribe, unsubscribe } from "node:diagnostics_channel";
@@ -16,41 +16,42 @@ import { resolve } from "node:path";
 * Each loads on demand, so `--version` and `--help` import no command.
 */
 const LOADERS = [
-	["init", () => import("./init-Cx7DDAdQ.js").then((m) => m.initCommand)],
-	["add", () => import("./add-DzRJEHzD.js").then((m) => m.addCommand)],
-	["apply", () => import("./apply-4BmTvj2A.js").then((m) => m.applyCommand)],
-	["adopt", () => import("./adopt-DDy50yz9.js").then((m) => m.adoptCommand)],
-	["preset decode", () => import("./preset-B1o6KbFp.js").then((m) => m.presetDecodeCommand)],
-	["preset info", () => import("./preset-B1o6KbFp.js").then((m) => m.presetInfoCommand)],
-	["blocks list", () => import("./blocks-bBI050w6.js").then((m) => m.blocksListCommand)],
-	["blocks view", () => import("./blocks-bBI050w6.js").then((m) => m.blocksViewCommand)],
-	["blocks search", () => import("./blocks-bBI050w6.js").then((m) => m.blocksSearchCommand)],
-	["skills list", () => import("./skills-CUx7S0bk.js").then((m) => m.skillsListCommand)],
-	["skills install", () => import("./skills-CUx7S0bk.js").then((m) => m.skillsInstallCommand)],
-	["completion", () => import("./completion-D2BObVth.js").then((m) => m.completionCommand)],
-	["env", () => import("./env-D-O91RK1.js").then((m) => m.envCommand)],
-	["keys", () => import("./keys-6ufnWeZl.js").then((m) => m.keysCommand)],
-	["gen", () => import("./gen-D2E8osBE.js").then((m) => m.genCommand)],
-	["introspect", () => import("./introspect-Ck7aa6v0.js").then((m) => m.introspectCommand)],
-	["spec emit", () => import("./spec-DjHpWZJM.js").then((m) => m.specEmitCommand)],
-	["spec validate", () => import("./spec-DjHpWZJM.js").then((m) => m.specValidateCommand)],
-	["scaffold api", () => import("./scaffold-fO-FJGoO.js").then((m) => m.scaffoldApiCommand)],
-	["scaffold screens", () => import("./scaffold-fO-FJGoO.js").then((m) => m.scaffoldScreensCommand)],
-	["seed", () => import("./seed-C_BmN498.js").then((m) => m.seedCommand)],
-	["db query", () => import("./db-BxMRcHrY.js").then((m) => m.dbQueryCommand)],
-	["doctor", () => import("./doctor-D47sFjh9.js").then((m) => m.doctorCommand)],
-	["config", () => import("./config-CC5DXgKX.js").then((m) => m.configCommand)],
-	["mcp", () => import("./mcp-BVWvEoKo.js").then((m) => m.mcpCommand)],
-	["sql list", () => import("./sql-C4ymac2h.js").then((m) => m.sqlListCommand)],
-	["sql add", () => import("./sql-C4ymac2h.js").then((m) => m.sqlAddCommand)],
-	["sql sync", () => import("./sql-C4ymac2h.js").then((m) => m.sqlSyncCommand)],
-	["sql upgrade", () => import("./sql-C4ymac2h.js").then((m) => m.sqlUpgradeCommand)],
-	["sql data", () => import("./sql-C4ymac2h.js").then((m) => m.sqlDataCommand)],
-	["sql print", () => import("./sql-C4ymac2h.js").then((m) => m.sqlPrintCommand)],
-	["codemod 0.4", () => import("./codemod-vsknM1Ue.js").then((m) => m.codemodCommand("0.4"))],
-	["codemod 0.5", () => import("./codemod-vsknM1Ue.js").then((m) => m.codemodCommand("0.5"))],
-	["codemod 0.6", () => import("./codemod-vsknM1Ue.js").then((m) => m.codemodCommand("0.6"))],
-	["codemod 0.9", () => import("./codemod-vsknM1Ue.js").then((m) => m.codemodCommand("0.9"))]
+	["init", () => import("./init-DNomoycJ.js").then((m) => m.initCommand)],
+	["add", () => import("./add-DnAyR9w_.js").then((m) => m.addCommand)],
+	["apply", () => import("./apply-CiBFOFGw.js").then((m) => m.applyCommand)],
+	["adopt", () => import("./adopt-BuS-DC7_.js").then((m) => m.adoptCommand)],
+	["preset decode", () => import("./preset-CfIs24cc.js").then((m) => m.presetDecodeCommand)],
+	["preset info", () => import("./preset-CfIs24cc.js").then((m) => m.presetInfoCommand)],
+	["blocks list", () => import("./blocks-DeLQOlUK.js").then((m) => m.blocksListCommand)],
+	["blocks view", () => import("./blocks-DeLQOlUK.js").then((m) => m.blocksViewCommand)],
+	["blocks search", () => import("./blocks-DeLQOlUK.js").then((m) => m.blocksSearchCommand)],
+	["skills list", () => import("./skills-D3zwIlGA.js").then((m) => m.skillsListCommand)],
+	["skills install", () => import("./skills-D3zwIlGA.js").then((m) => m.skillsInstallCommand)],
+	["completion", () => import("./completion-D4InNrxw.js").then((m) => m.completionCommand)],
+	["env", () => import("./env-Cmu99uKR.js").then((m) => m.envCommand)],
+	["run", () => import("./run-Bck-p0MI.js").then((m) => m.runCommand)],
+	["keys", () => import("./keys-B8dIJwwi.js").then((m) => m.keysCommand)],
+	["gen", () => import("./gen-D3sC5jDn.js").then((m) => m.genCommand)],
+	["introspect", () => import("./introspect-kYX06Q2g.js").then((m) => m.introspectCommand)],
+	["spec emit", () => import("./spec-DOgQUZwM.js").then((m) => m.specEmitCommand)],
+	["spec validate", () => import("./spec-DOgQUZwM.js").then((m) => m.specValidateCommand)],
+	["scaffold api", () => import("./scaffold-mzy3OsN5.js").then((m) => m.scaffoldApiCommand)],
+	["scaffold screens", () => import("./scaffold-mzy3OsN5.js").then((m) => m.scaffoldScreensCommand)],
+	["seed", () => import("./seed-C5q4UUIL.js").then((m) => m.seedCommand)],
+	["db query", () => import("./db-TRymMyAW.js").then((m) => m.dbQueryCommand)],
+	["doctor", () => import("./doctor-DOfy6kjt.js").then((m) => m.doctorCommand)],
+	["config", () => import("./config-DI6ielsx.js").then((m) => m.configCommand)],
+	["mcp", () => import("./mcp-DrxB2Wuw.js").then((m) => m.mcpCommand)],
+	["sql list", () => import("./sql-CL_Lbhwl.js").then((m) => m.sqlListCommand)],
+	["sql add", () => import("./sql-CL_Lbhwl.js").then((m) => m.sqlAddCommand)],
+	["sql sync", () => import("./sql-CL_Lbhwl.js").then((m) => m.sqlSyncCommand)],
+	["sql upgrade", () => import("./sql-CL_Lbhwl.js").then((m) => m.sqlUpgradeCommand)],
+	["sql data", () => import("./sql-CL_Lbhwl.js").then((m) => m.sqlDataCommand)],
+	["sql print", () => import("./sql-CL_Lbhwl.js").then((m) => m.sqlPrintCommand)],
+	["codemod 0.4", () => import("./codemod-BzAMX4el.js").then((m) => m.codemodCommand("0.4"))],
+	["codemod 0.5", () => import("./codemod-BzAMX4el.js").then((m) => m.codemodCommand("0.5"))],
+	["codemod 0.6", () => import("./codemod-BzAMX4el.js").then((m) => m.codemodCommand("0.6"))],
+	["codemod 0.9", () => import("./codemod-BzAMX4el.js").then((m) => m.codemodCommand("0.9"))]
 ];
 /** The built-in commands, for `createCli`. */
 function builtinCommands() {
@@ -88,10 +89,16 @@ const docsUrl = (path) => `${DOCS_ORIGIN}${path}`;
 /** A list option's hint ends in `,...`, unless the command already wrote it. */
 const listHint = (hint, list) => list && !hint.endsWith("...") ? `${hint},...` : hint;
 function optionName(name, definition, list) {
-	const aliases = "alias" in definition ? [definition.alias].flat().map((alias) => alias.length === 1 ? `-${alias}` : `--${alias}`) : [];
+	const aliases = "alias" in definition ? [definition.alias].flat() : [];
+	const short = aliases.filter((alias) => alias.length === 1);
+	const long = aliases.filter((alias) => alias.length > 1);
 	const hint = definition.type === "enum" && definition.options ? `<${definition.options.join("|")}>` : definition.type === "string" ? `<${listHint(definition.valueHint ?? name, list)}>` : "";
 	const flag = negated(definition) ? `no-${name}` : name;
-	return [...aliases, `--${flag}${hint ? ` ${hint}` : ""}`].join(", ");
+	return [
+		...short.map((alias) => `-${alias}`),
+		`--${flag}${hint ? ` ${hint}` : ""}`,
+		...long.map((alias) => `--${alias}`)
+	].join(", ");
 }
 /** A boolean that is on by default, so the flag a person types is `--no-<name>`. */
 const negated = (definition) => definition.type === "boolean" && definition.default === true;
@@ -116,6 +123,7 @@ function effectText(effect) {
 		switch (effect.kind) {
 			case "files": return "writes files";
 			case "database": return effect.access === "read" ? "reads the database" : "writes to the database";
+			case "process": return "runs the command you pass";
 			case "network": switch (effect.target) {
 				case "supabase-api": return "calls the Supabase Management API";
 				case "github": return "downloads from GitHub";
@@ -449,7 +457,7 @@ function cliFromTree(init, extra = {}) {
 		};
 		if (argv[0] === "__complete") {
 			const words = argv[1] === "--" ? argv.slice(2) : argv.slice(1);
-			const lines = await import("./completion-CEZ-c3ja.js").then(async ({ complete, completionLines }) => completionLines(await complete(tree, words))).catch(() => "");
+			const lines = await import("./completion-4lLjtI49.js").then(async ({ complete, completionLines }) => completionLines(await complete(tree, words))).catch(() => "");
 			if (lines !== "") out(lines);
 			return {
 				code: 0,
@@ -578,7 +586,7 @@ function cliFromTree(init, extra = {}) {
 		try {
 			const [loaded, { defaultConfig, discoverConfig, loadConfig }, { configEnvironment, isCi, parseEnv }] = await Promise.all([
 				node.load(),
-				import("./config-CynctXbc.js"),
+				import("./config-CCyweX7Y.js"),
 				import("./env-B7TWPEt0.js")
 			]);
 			command = loaded;

package/dist/cli/{scaffold-DcXr4z7M.js → scaffold-DoURlDEI.js}

@@ -1,4 +1,4 @@
-import { a as list, p as commandMeta, r as defineCliCommand } from "./command-DLCZeHdo.js";
+import { a as list, p as commandMeta, r as defineCliCommand } from "./command-dfdVhU_2.js";
 import { n as CliError } from "./errors-Caiz_0so.js";
 import { t as display } from "./io-BiPX-_J1.js";
 import { t as isRecord } from "./guards-CUlDNYZs.js";

package/dist/cli/{scaffold-fO-FJGoO.js → scaffold-mzy3OsN5.js}

@@ -1 +1 @@
-export { r as scaffoldApiCommand, i as scaffoldScreensCommand } from "./scaffold-DcXr4z7M.js";
+export { r as scaffoldApiCommand, i as scaffoldScreensCommand } from "./scaffold-DoURlDEI.js";

package/dist/cli/seed-C5q4UUIL.js

@@ -0,0 +1 @@
+export { n as seedCommand } from "./seed-CIdg6s7m.js";

package/dist/cli/{seed-BmOC6_iz.js → seed-CIdg6s7m.js}

@@ -1,11 +1,11 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-DLCZeHdo.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-dfdVhU_2.js";
 import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CCrTYK3W.js";
 import { t as display } from "./io-BiPX-_J1.js";
-import { l as stdinDatabaseUrl, n as databaseUrl, o as importExport } from "./config-C4e_RrmL.js";
+import { l as stdinDatabaseUrl, n as databaseUrl, o as importExport } from "./config-yZ55rsKZ.js";
 import { m as supabaseDir } from "./supabase-toml-BC5sNVKU.js";
 import { t as connect } from "./db-DT1bGB02.js";
 import { a as hasConflicts, n as applyPlan, o as insideRoot, r as changeLines, s as planResult, t as PLAN_ARGS } from "./files-DDvAwTko.js";
-import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-BDiUhsH8.js";
+import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-Cwo7zwvq.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/cli/{skills-CUx7S0bk.js → skills-D3zwIlGA.js}

@@ -1,4 +1,4 @@
-import { a as list, p as commandMeta, r as defineCliCommand } from "./command-DLCZeHdo.js";
+import { a as list, p as commandMeta, r as defineCliCommand } from "./command-dfdVhU_2.js";
 import { n as CliError } from "./errors-Caiz_0so.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
 import { n as applyPlan, s as planResult, t as PLAN_ARGS } from "./files-DDvAwTko.js";

package/dist/cli/{snapshot-ClgWGd-b.js → snapshot-BBKFojqM.js}

@@ -1,10 +1,10 @@
-import { t as VERSION } from "./version-CUKjFbNd.js";
+import { t as VERSION } from "./version-B7akdvDv.js";
 import { n as CliError, r as errorText } from "./errors-Caiz_0so.js";
 import { r as redactUrl } from "./redact-PjNswZOs.js";
 import { n as HTTP_CHANNEL } from "./trace-VbdO6bcN.js";
-import { o as readExtras, r as cachedIntrospect } from "./cache-CVJmPGpd.js";
+import { o as readExtras, r as cachedIntrospect } from "./cache-DQwgb3rg.js";
 import { l as stabilizeMetadata, n as TypegenMissingError, o as readGeneratorMetadata, p as validateGeneratorMetadata } from "./typegen--TfvOPLh.js";
-import { n as databaseUrl, u as accessToken } from "./config-C4e_RrmL.js";
+import { n as databaseUrl, u as accessToken } from "./config-yZ55rsKZ.js";
 import { d as readSupabaseToml, f as schemaPaths, h as tomlGet, u as pgFunctionHooks } from "./supabase-toml-BC5sNVKU.js";
 import { t as connect } from "./db-DT1bGB02.js";
 import { channel } from "node:diagnostics_channel";

package/dist/cli/{source-args-BDiUhsH8.js → source-args-Cwo7zwvq.js}

@@ -1,5 +1,5 @@
 import { n as CliError } from "./errors-Caiz_0so.js";
-import { l as stdinDatabaseUrl } from "./config-C4e_RrmL.js";
+import { l as stdinDatabaseUrl } from "./config-yZ55rsKZ.js";
 //#region src/cli/commands/source-args.ts
 /** The connection string from stdin, for commands that connect but read no schema. */
 const DB_URL_STDIN_ARG = { "db-url-stdin": {

package/dist/cli/{spec-DjHpWZJM.js → spec-DOgQUZwM.js}

@@ -1 +1 @@
-export { n as specEmitCommand, i as specValidateCommand } from "./spec-CM7iyRnE.js";
+export { n as specEmitCommand, i as specValidateCommand } from "./spec-DZeIP9ta.js";

package/dist/cli/{spec-CM7iyRnE.js → spec-DZeIP9ta.js}

@@ -1,9 +1,9 @@
 import { n as __require, t as __commonJSMin } from "./rolldown-runtime-kJ_i4yPo.js";
-import { p as commandMeta, r as defineCliCommand } from "./command-DLCZeHdo.js";
-import { t as VERSION } from "./version-CUKjFbNd.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-dfdVhU_2.js";
+import { t as VERSION } from "./version-B7akdvDv.js";
 import { i as failedResult, n as CliError, r as errorText } from "./errors-Caiz_0so.js";
 import { t as display } from "./io-BiPX-_J1.js";
-import { i as writeAtomic, t as CACHE_DIR } from "./cache-CVJmPGpd.js";
+import { i as writeAtomic, t as CACHE_DIR } from "./cache-DQwgb3rg.js";
 import { t as isRecord } from "./guards-CUlDNYZs.js";
 import { t as importFresh } from "./fresh-import-BeYf9I3x.js";
 import { i as changedFiles, n as applyPlan, r as changeLines } from "./files-DDvAwTko.js";

package/dist/cli/{sql-C4ymac2h.js → sql-CL_Lbhwl.js}

@@ -1,2 +1,2 @@
 import "./module-migration-CPhuiY8C.js";
-export { n as sqlAddCommand, r as sqlDataCommand, i as sqlListCommand, a as sqlPrintCommand, o as sqlSyncCommand, s as sqlUpgradeCommand } from "./sql-ybcjbz20.js";
+export { n as sqlAddCommand, r as sqlDataCommand, i as sqlListCommand, a as sqlPrintCommand, o as sqlSyncCommand, s as sqlUpgradeCommand } from "./sql-DLOvvnBV.js";

package/dist/cli/{sql-ybcjbz20.js → sql-DLOvvnBV.js}

@@ -1,4 +1,4 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-DLCZeHdo.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-dfdVhU_2.js";
 import { i as plain } from "./style-2JfIPVMQ.js";
 import { n as CliError } from "./errors-Caiz_0so.js";
 import { t as display } from "./io-BiPX-_J1.js";

package/dist/cli/stack-env-_uWWNHWq.js

@@ -0,0 +1,87 @@
+import { createHash } from "node:crypto";
+//#region src/cli/stack-env.ts
+/** Framework names `--prefix` accepts, with the prefix each one exposes to the browser. */
+const PREFIX_NAMES = {
+	next: "NEXT_PUBLIC_",
+	vite: "VITE_",
+	expo: "EXPO_PUBLIC_",
+	nuxt: "NUXT_PUBLIC_",
+	astro: "PUBLIC_",
+	sveltekit: "PUBLIC_",
+	none: ""
+};
+/** A `--prefix` value as a variable prefix: a framework name, `none`, or the prefix itself. */
+function prefixFromFlag(flag) {
+	return PREFIX_NAMES[flag.toLowerCase()] ?? flag;
+}
+const text = (status, ...keys) => {
+	for (const key of keys) {
+		const value = status[key];
+		if (typeof value === "string" && value.length > 0) return value;
+	}
+};
+/** The JWKS endpoint Supabase Auth serves under an API URL. */
+function jwksUrlOf(apiUrl) {
+	return `${apiUrl.replace(/\/+$/, "")}/auth/v1/.well-known/jwks.json`;
+}
+/**
+* The variables `env` writes and `run` sets, from `supabase status`. The
+* browser prefix only ever gets the URL and the publishable key; the secret
+* key, database URL and JWT secret stay server-only. `undefined` when the
+* status has no API URL or publishable key.
+*/
+function stackEnvValues(status, prefix) {
+	const url = text(status, "API_URL");
+	const publishableKey = text(status, "PUBLISHABLE_KEY", "ANON_KEY");
+	if (!url || !publishableKey) return;
+	const values = {
+		SUPABASE_URL: url,
+		SUPABASE_PUBLISHABLE_KEY: publishableKey
+	};
+	const secretKey = text(status, "SECRET_KEY", "SERVICE_ROLE_KEY");
+	if (secretKey) values["SUPABASE_SECRET_KEY"] = secretKey;
+	values["SUPABASE_JWKS_URL"] = jwksUrlOf(url);
+	const dbUrl = text(status, "DB_URL");
+	if (dbUrl) values["SUPABASE_DB_URL"] = dbUrl;
+	const jwtSecret = text(status, "JWT_SECRET");
+	if (jwtSecret) values["SUPABASE_JWT_SECRET"] = jwtSecret;
+	if (prefix.length > 0) {
+		values[`${prefix}SUPABASE_URL`] = url;
+		values[`${prefix}SUPABASE_PUBLISHABLE_KEY`] = publishableKey;
+	}
+	return values;
+}
+/**
+* A value safe to print: a URL shows its host and port (and a database URL
+* its database name), anything else a SHA-256 fingerprint. Never the value
+* itself, so keys and passwords stay out of logs.
+*/
+function redactValue(value) {
+	if (/^(?:https?|postgres(?:ql)?):\/\//i.test(value)) try {
+		const url = new URL(value);
+		const database = url.protocol.startsWith("postgres") ? url.pathname : "";
+		return `${url.host}${database === "/" ? "" : database}`;
+	} catch {}
+	return `sha256:${createHash("sha256").update(value).digest("hex").slice(0, 8)}`;
+}
+/**
+* The stack variables the shell exports with another value, such as a
+* `SUPABASE_URL` left over from another checkout's stack. Values are
+* redacted with `redactValue`.
+*/
+function staleVariables(shell, values) {
+	return Object.entries(values).flatMap(([variable, stackValue]) => {
+		const exported = shell[variable];
+		if (exported === void 0 || exported.length === 0 || exported === stackValue) return [];
+		const redactedShell = redactValue(exported);
+		const redactedStack = redactValue(stackValue);
+		return [{
+			variable,
+			shell: redactedShell,
+			stack: redactedStack,
+			message: `${variable} is exported as ${redactedShell}, but the running stack has ${redactedStack}.`
+		}];
+	});
+}
+//#endregion
+export { staleVariables as i, prefixFromFlag as n, stackEnvValues as r, PREFIX_NAMES as t };

package/dist/cli/{stack-status-Cb_D79ZR.js → stack-status-_NUgd-g5.js}

@@ -395,6 +395,46 @@ async function exec(command, args, cwd, env, options) {
 		});
 	}
 }
+const SIGNAL_NUMBERS = {
+	SIGHUP: 1,
+	SIGINT: 2,
+	SIGKILL: 9,
+	SIGTERM: 15
+};
+const FORWARDED_SIGNALS = ["SIGINT", "SIGTERM"];
+/**
+* Runs a command on the terminal (stdin, stdout and stderr inherited) and
+* resolves to its exit code, `128 + n` when signal `n` ended it. SIGINT and
+* SIGTERM sent to the CLI go on to the command, so a process manager that
+* signals only the CLI still stops it. 127 when it could not start.
+*/
+async function spawnInherited(command, args, options) {
+	const running = x(command, [...args], {
+		nodeOptions: {
+			cwd: options.cwd,
+			stdio: "inherit",
+			env: { ...options.env }
+		},
+		throwOnError: false
+	});
+	const forwards = FORWARDED_SIGNALS.map((name) => {
+		const forward = () => {
+			running.kill(name);
+		};
+		process.on(name, forward);
+		return () => process.off(name, forward);
+	});
+	try {
+		const result = await running;
+		const signal = running.process?.signalCode;
+		if (signal) return 128 + (SIGNAL_NUMBERS[signal] ?? 1);
+		return result.exitCode ?? NOT_FOUND;
+	} catch {
+		return NOT_FOUND;
+	} finally {
+		for (const off of forwards) off();
+	}
+}
 /** `node_modules/.bin/supabase` in `cwd` or a parent, when the project installs the CLI. */
 function localSupabase(cwd) {
 	const bin = join("node_modules", ".bin", process.platform === "win32" ? "supabase.cmd" : "supabase");
@@ -453,4 +493,4 @@ async function readStackStatus(root, env, options = {}) {
 	};
 }
 //#endregion
-export { readStackStatus as n, parseStackStatus as t };
+export { readStackStatus as n, spawnInherited as r, parseStackStatus as t };

package/dist/cli/{version-CUKjFbNd.js → version-B7akdvDv.js}

@@ -1,4 +1,4 @@
 //#region src/cli/version.ts
-const VERSION = "0.11.0";
+const VERSION = "0.12.0";
 //#endregion
 export { VERSION as t };

package/dist/client/index.d.ts

@@ -1,7 +1,7 @@
-import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-DWHy63ZJ.js";
-import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../ports-DCAcG26M.js";
-import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../bind-CTNKpBM6.js";
-import { a as defineController, i as ControllerState, n as Controller, o as whileSignedIn, r as ControllerParts, t as AuthPort } from "../controller-BBXX1RMw.js";
+import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-C79ZW5-R.js";
+import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../ports-BCDIbC_U.js";
+import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../bind-Bfo40o63.js";
+import { a as defineController, i as ControllerState, n as Controller, o as whileSignedIn, r as ControllerParts, t as AuthPort } from "../controller-BZhiIb-N.js";
 import { n as FunctionContract } from "../function-contract-DWqFl_QO.js";
-import { a as webDeepLinks, c as webPorts, d as FunctionContracts, f as FunctionsHost, h as functions, i as WebPushTokenOptions, l as webPushToken, m as TypedFunctions, n as createClient, o as webFilePicker, p as InvokeOptions, r as PushRegistrationLike, s as webKeyboard, t as ClientOptions, u as webStorage } from "../index-F6XTTkC9.js";
+import { a as webDeepLinks, c as webPorts, d as FunctionContracts, f as FunctionsHost, h as functions, i as WebPushTokenOptions, l as webPushToken, m as TypedFunctions, n as createClient, o as webFilePicker, p as InvokeOptions, r as PushRegistrationLike, s as webKeyboard, t as ClientOptions, u as webStorage } from "../index-CXFf-c-j.js";
 export { type AuthPort, type AuthSnapshot, type AuthUser, type BetterClient, type BindClientOptions, type ClientAuth, ClientOptions, type ClientPorts, type Controller, type ControllerParts, type ControllerState, type DeepLinkPort, type FilePickerPort, type FunctionContract, type FunctionContracts, type FunctionsHost, type InvokeOptions, type KeyboardPort, type PickFilesOptions, type PickedFile, type PushRegistrationLike, type PushTokenPort, type Shortcut, type StoragePort, type TopicHandle, type TopicPort, type TopicWatch, type TypedFunctions, type UploadDestination, type UploadPort, type WebPushTokenOptions, bindClient, createClient, defineController, functions, memoryStorage, storageUpload, webDeepLinks, webFilePicker, webKeyboard, webPorts, webPushToken, webStorage, whileSignedIn };

package/dist/client/native/index.d.ts

@@ -1,9 +1,9 @@
 import { t as AsyncResult } from "../../result-BREt7qOh.js";
-import { S as UploadOptions, x as UploadBody } from "../../bucket-BBSNDFNH.js";
-import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../../watch-topic-DWHy63ZJ.js";
-import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../../ports-DCAcG26M.js";
-import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../../bind-CTNKpBM6.js";
-import { n as ExpoPushTokenOptions, r as expoPushToken, t as ExpoNotificationsLike } from "../../push-token-D2sDxSNN.js";
+import { S as UploadOptions, x as UploadBody } from "../../bucket-BbePDVwc.js";
+import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../../watch-topic-C79ZW5-R.js";
+import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../../ports-BCDIbC_U.js";
+import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../../bind-Bfo40o63.js";
+import { n as ExpoPushTokenOptions, r as expoPushToken, t as ExpoNotificationsLike } from "../../push-token-y1Gnz5bQ.js";
 import { a as OAuthSignInOptions, c as linkParams, i as OAuthClient, l as signInWithOAuthBrowser, n as AuthLinkClient, o as WebBrowserLike, r as AuthLinkResult, s as handleAuthDeepLink, t as AuthFailure } from "../../auth-link-BjFPqwLz.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 //#region src/client/native/auto-refresh.d.ts

package/dist/{client-GdJH4XJM.d.ts → client-BAOZuBhz.d.ts}

@@ -3,7 +3,7 @@ import { b as DbError, t as AsyncResult } from "./result-BREt7qOh.js";
 import { n as Logger } from "./logger-DWVYUmwi.js";
 import { n as BlockOptions } from "./block-helpers-CjcQM1yA.js";
 import { n as BlockHooks } from "./block-hooks-DcPJHztl.js";
-import { n as Controller, t as AuthPort } from "./controller-BBXX1RMw.js";
+import { n as Controller, t as AuthPort } from "./controller-BZhiIb-N.js";
 //#region src/blocks/onboarding/onboarding.d.ts
 type ChecklistScope = "user" | "organization";
 /** One step. `events` completes it when the outbox records one of those types. */

package/dist/{client-B9_8yzct.d.ts → client-BJN0IMEp.d.ts}

@@ -1,5 +1,5 @@
-import { n as Controller, t as AuthPort } from "./controller-BBXX1RMw.js";
-import { t as EntitlementClaimOptions } from "./entitlements-DgkeStXd.js";
+import { n as Controller, t as AuthPort } from "./controller-BZhiIb-N.js";
+import { t as EntitlementClaimOptions } from "./entitlements-CtBGXb3B.js";
 //#region src/blocks/entitlements/client.d.ts
 interface FeatureGateControllerOptions {
   readonly auth: AuthPort;

package/dist/{client-QvuCfO4b.d.ts → client-BMcjLG0V.d.ts}

@@ -8,11 +8,11 @@ import { i as CursorPageOptions, r as BlockTemporalOptions } from "./block-helpe
 import { n as BlockHooks } from "./block-hooks-DcPJHztl.js";
 import { n as ExtraFields, r as FieldsOf } from "./block-fields-DnaDbgZS.js";
 import { i as EventSink, t as CloudEvent } from "./cloud-event-DXkNoI6v.js";
-import { t as BetterSupabase } from "./define-M_r1d2AT.js";
-import { p as SubscriptionStatus } from "./topic-1WTkDnPd.js";
-import { n as TopicPort } from "./watch-topic-DWHy63ZJ.js";
-import { i as ListDefinition } from "./list-query-FhFXzObg.js";
-import { n as Controller, t as AuthPort } from "./controller-BBXX1RMw.js";
+import { t as BetterSupabase } from "./define-DYZnvAbs.js";
+import { p as SubscriptionStatus } from "./topic-DAY_HOX2.js";
+import { n as TopicPort } from "./watch-topic-C79ZW5-R.js";
+import { i as ListDefinition } from "./list-query-aXr2WkGA.js";
+import { n as Controller, t as AuthPort } from "./controller-BZhiIb-N.js";
 //#region src/blocks/comments/comments.d.ts
 interface CommentsOptions<S extends StandardSchemaV1 | undefined = undefined> extends BlockTemporalOptions {
   /**

package/dist/{client-CeH7vd-g.d.ts → client-BN_fXOs7.d.ts}

@@ -1,4 +1,4 @@
-import { n as Controller } from "./controller-BBXX1RMw.js";
+import { n as Controller } from "./controller-BZhiIb-N.js";
 import { a as UndoToken } from "./undo-BsdYRox7.js";
 //#region src/blocks/undo/client.d.ts
 interface UndoEntry {

package/dist/{client-CCGSn7m5.d.ts → client-BONsuFYf.d.ts}

@@ -1,7 +1,7 @@
-import { p as SubscriptionStatus } from "./topic-1WTkDnPd.js";
-import { n as TopicPort } from "./watch-topic-DWHy63ZJ.js";
-import { l as StoragePort } from "./ports-DCAcG26M.js";
-import { n as Controller, t as AuthPort } from "./controller-BBXX1RMw.js";
+import { p as SubscriptionStatus } from "./topic-DAY_HOX2.js";
+import { n as TopicPort } from "./watch-topic-C79ZW5-R.js";
+import { l as StoragePort } from "./ports-BCDIbC_U.js";
+import { n as Controller, t as AuthPort } from "./controller-BZhiIb-N.js";
 //#region src/blocks/inbox/client.d.ts
 /** Loads one list, e.g. a server action that calls `inbox.conversations.list()`. */
 type InboxSource<T> = () => Promise<readonly T[]>;

package/dist/{client-CBQ2TV0r.d.ts → client-BPn9XhAM.d.ts}

@@ -6,7 +6,7 @@ import { n as BlockOptions } from "./block-helpers-CjcQM1yA.js";
 import { n as BlockHooks } from "./block-hooks-DcPJHztl.js";
 import { r as FieldsOf } from "./block-fields-DnaDbgZS.js";
 import { g as JobHandler } from "./types-BEEFkNFY.js";
-import { n as Controller } from "./controller-BBXX1RMw.js";
+import { n as Controller } from "./controller-BZhiIb-N.js";
 import { t as VisibleRange } from "./range-p5V4rBhZ.js";
 //#region src/blocks/bookings/bookings.d.ts
 interface BookingsOptions<S extends StandardSchemaV1 | undefined = undefined> extends BlockOptions {

package/dist/{client-ehjQ2tIT.d.ts → client-BtC-r4hE.d.ts}

@@ -1,6 +1,6 @@
-import { p as SubscriptionStatus } from "./topic-1WTkDnPd.js";
-import { n as TopicPort } from "./watch-topic-DWHy63ZJ.js";
-import { n as Controller, t as AuthPort } from "./controller-BBXX1RMw.js";
+import { p as SubscriptionStatus } from "./topic-DAY_HOX2.js";
+import { n as TopicPort } from "./watch-topic-C79ZW5-R.js";
+import { n as Controller, t as AuthPort } from "./controller-BZhiIb-N.js";
 //#region src/blocks/notifications/client.d.ts
 /** Loads one list of items, e.g. a server action that calls `notifications.list()`. */
 type NotificationSource<T> = () => Promise<readonly T[]>;

package/dist/{client-DarDYaQj.d.ts → client-BuneNd-C.d.ts}

@@ -7,7 +7,7 @@ import { t as BlockTransport } from "./block-transport-DezJPPA0.js";
 import { r as BlockTemporalOptions } from "./block-helpers-CjcQM1yA.js";
 import { n as BlockHooks } from "./block-hooks-DcPJHztl.js";
 import { i as RowFields, r as FieldsOf } from "./block-fields-DnaDbgZS.js";
-import { n as Controller, t as AuthPort } from "./controller-BBXX1RMw.js";
+import { n as Controller, t as AuthPort } from "./controller-BZhiIb-N.js";
 //#region src/sql/modules/invitations-tables.d.ts
 declare const INVITATION_ERRORS: {
   readonly INVITATION_FORBIDDEN: "42501";

package/dist/{client-B_vHBwB6.d.ts → client-CHwNV8Kz.d.ts}

@@ -7,9 +7,9 @@ import { t as BlockTransport } from "./block-transport-DezJPPA0.js";
 import { r as BlockTemporalOptions } from "./block-helpers-CjcQM1yA.js";
 import { n as BlockHooks } from "./block-hooks-DcPJHztl.js";
 import { i as EventSink, t as CloudEvent } from "./cloud-event-DXkNoI6v.js";
-import { Bt as WhereInput, t as BetterSupabase } from "./define-M_r1d2AT.js";
-import { i as ListDefinition } from "./list-query-FhFXzObg.js";
-import { n as Controller, t as AuthPort } from "./controller-BBXX1RMw.js";
+import { Bt as WhereInput, t as BetterSupabase } from "./define-DYZnvAbs.js";
+import { i as ListDefinition } from "./list-query-aXr2WkGA.js";
+import { n as Controller, t as AuthPort } from "./controller-BZhiIb-N.js";
 import { a as UndoToken } from "./undo-BsdYRox7.js";
 import { n as AuditCategory } from "./context-Cv3KlxWY.js";
 //#region src/blocks/audit/audit.d.ts

package/dist/{client-DbxvLC9Y.d.ts → client-CLQHsa-2.d.ts}

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
 import { b as DbError, f as Result } from "./result-BREt7qOh.js";
-import { n as Controller, t as AuthPort } from "./controller-BBXX1RMw.js";
+import { n as Controller, t as AuthPort } from "./controller-BZhiIb-N.js";
 import { t as AuthReply } from "./auth-reply-Dj124sbX.js";
 //#region src/blocks/sessions/client.d.ts
 /** An OAuth client as the Auth OAuth server describes it. */