better-supabase 0.11.0 → 0.13.0

package/dist/solid/index.js

@@ -1,5 +1,5 @@
-import { t as clearOnUserChange } from "../user-change-XzvgafU4.js";
-import { a as createActionRunner, c as liveKey, d as shownCount, f as startBroadcast, i as countSource, l as notJoined, m as startLiveQuery, n as assertInvalidateClient, o as joinPresence, p as startLiveCount, r as callerOf, s as keyed, t as NO_COUNT, u as plainCaller } from "../client-CHR8IBNG.js";
+import { t as clearOnUserChange } from "../user-change-CSR_prhd.js";
+import { a as createActionRunner, c as liveKey, d as shownCount, f as startBroadcast, i as countSource, l as notJoined, m as startLiveQuery, n as assertInvalidateClient, o as joinPresence, p as startLiveCount, r as callerOf, s as keyed, t as NO_COUNT, u as plainCaller } from "../client-YASsOslj.js";
 import { t as supportOf } from "../support-view-g4YLBeqX.js";
 import { t as fieldErrorsOf } from "../field-errors-DZVRWRkf.js";
 import { n as useContext$1, t as ClientContext } from "../context-B8_p3MXo.js";
@@ -32,14 +32,20 @@ function BetterSupabaseProvider(props) {
 		}
 	});
 }
-/** The session state for UI: `loading`, `signed-out` or `signed-in` with the user and claims. */
+/**
+* The session state for UI: `loading`, `signed-out` or `signed-in` with the
+* user and claims.
+*/
 function useAuth() {
 	return useContext$1().auth;
 }
 function useSupabase() {
 	return useContext$1().client.supabase;
 }
-/** The session passed to `<BetterSupabaseProvider session={...}>`, `undefined` while it loads. */
+/**
+* The session passed to `<BetterSupabaseProvider session={...}>`, `undefined`
+* while it loads.
+*/
 function useSession() {
 	const { session } = useContext$1();
 	if (!session) throw new Error("better-supabase: useSession() needs <BetterSupabaseProvider session={...}>");
@@ -57,7 +63,8 @@ function useSupportSession() {
 * Primitives typed for your schema.
 *
 * ```ts
-* export const { useDb, useQueries, useAuth } = createBindings<typeof bs>();
+* export const { useDb, useQueries, useAuth } =
+*   createBindings<typeof bs>();
 * ```
 */
 function createBindings() {
@@ -103,7 +110,12 @@ function supabaseFor(hook, context, client) {
 * resubscribes when the topic values or the signed-in user change.
 *
 * ```ts
-* useBroadcast(customersTopic, () => ({ organizationId: org() }), {}, { invalidate: ['customers'] });
+* useBroadcast(
+*   customersTopic,
+*   () => ({ organizationId: org() }),
+*   {},
+*   { invalidate: ["customers"] },
+* );
 * ```
 */
 function useBroadcast(topic, values, handlers, options) {
@@ -145,7 +157,9 @@ function useBroadcast(topic, values, handlers, options) {
 * spec touches whenever one of them changes. A `null` spec pauses.
 *
 * ```ts
-* useLiveQuery(() => betterSupabase.spec.customers.findMany({ where: { orgId: org() } }));
+* useLiveQuery(() =>
+*   betterSupabase.spec.customers.findMany({ where: { orgId: org() } }),
+* );
 * ```
 */
 function useLiveQuery(spec, options = {}) {
@@ -182,8 +196,10 @@ function useLiveQuery(spec, options = {}) {
 * seed; `null` pauses. The returned object's fields are reactive.
 *
 * ```tsx
-* const unread = useLiveCount(() => betterSupabase.spec.messages.count({ where: { read: false } }));
-* <span>{unread.count}</span>
+* const unread = useLiveCount(() =>
+*   betterSupabase.spec.messages.count({ where: { read: false } }),
+* );
+* <span>{unread.count}</span>;
 * ```
 */
 function useLiveCount(source, options = {}) {
@@ -240,7 +256,9 @@ const NO_MEMBERS = [];
 * `null` value pauses. The returned object's fields are reactive.
 *
 * ```ts
-* const room = usePresence(roomTopic, () => ({ roomId: id() }), { state: () => ({ name: name() }) });
+* const room = usePresence(roomTopic, () => ({ roomId: id() }), {
+*   state: () => ({ name: name() }),
+* });
 * ```
 */
 function usePresence(topic, values, options = {}) {
@@ -296,13 +314,16 @@ function usePresence(topic, values, options = {}) {
 	};
 }
 /**
-* Calls a server action (`action()` from SolidStart, or a `bs.action()`)
-* from an event handler: tracks pending inputs and the last result, and
-* calls `onSuccess` or `onError`. The returned object's fields are reactive.
+* Calls a server action (`action()` from SolidStart, or a `bs.action()`) from
+* an event handler: tracks pending inputs and the last result, and calls
+* `onSuccess` or `onError`. The returned object's fields are reactive.
 *
 * ```tsx
 * const remove = useAction(removeMember);
-* <button disabled={remove.pending} onClick={() => remove.run({ userId })} />
+* <button
+*   disabled={remove.pending}
+*   onClick={() => remove.run({ userId })}
+* />;
 * ```
 */
 function useAction(action, options = {}) {

package/dist/solid-controller-7TxGaJNy.js

@@ -0,0 +1,33 @@
+import { n as useContext$1 } from "./context-B8_p3MXo.js";
+import { n as withEnv, t as blockEnv } from "./block-env-YfPmSNa1.js";
+import { from, onCleanup, onMount } from "solid-js";
+//#region src/blocks/solid-controller.ts
+/**
+* Makes a controller once and reads it through `from`. Its work starts on mount
+* (never during server rendering), and the controller is disposed with the
+* owner.
+*/
+function useBlockController(create, options, usesEnv = true) {
+	const controller = create(withEnv(options, usesEnv ? () => blockEnv(useContext$1().client) : void 0));
+	const state = from({ subscribe: (next) => {
+		next(controller.getSnapshot());
+		let stop;
+		onMount(() => {
+			stop = controller.subscribe(() => {
+				next(controller.getSnapshot());
+			});
+			next(controller.getSnapshot());
+		});
+		return () => stop?.();
+	} }, controller.getSnapshot());
+	onCleanup(() => {
+		controller.dispose();
+	});
+	return {
+		state,
+		actions: controller.actions,
+		controller
+	};
+}
+//#endregion
+export { useBlockController as t };

package/dist/solid-controller-BnF3ovwV.d.ts

@@ -0,0 +1,11 @@
+import { n as Controller } from "./controller-lWRcKqCl.js";
+import { Accessor } from "solid-js";
+//#region src/blocks/solid-controller.d.ts
+/** A block controller in a Solid component: `state` follows the controller. */
+interface SolidController<S, A> {
+  readonly state: Accessor<S>;
+  readonly actions: A;
+  readonly controller: Controller<S, A>;
+}
+//#endregion
+export { SolidController as t };

package/dist/solid-start/index.d.ts

@@ -1,9 +1,9 @@
-import { a as AnyModels, i as AnyFunctions } from "../types-BrpW5ixT.js";
-import { t as BetterSupabase } from "../define-M_r1d2AT.js";
-import { n as BetterServer } from "../server-types-BKN_R4Ws.js";
-import { a as AuthorizedContext, c as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-BeZX2pR_.js";
-import { t as RefusalRedirects } from "../refusal-CufncwaN.js";
-import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-D6IFkuAg.js";
+import { a as AnyModels, i as AnyFunctions } from "../types-DmshMaXz.js";
+import { t as BetterSupabase } from "../define-D0LSXmUP.js";
+import { n as BetterServer } from "../server-types-D_cQ6OxZ.js";
+import { a as AuthorizedContext, l as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-LeQGMzLH.js";
+import { t as RefusalRedirects } from "../refusal-BEyNVFy7.js";
+import { n as FrameworkOptions, r as LocalsResource, t as FrameworkLocals } from "../framework-CMeAuJts.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/solid-start/index.d.ts
 /** The part of a SolidStart `FetchEvent` the integration reads and writes. */
@@ -13,15 +13,18 @@ export interface SolidFetchEvent {
     readonly headers: Headers;
   };
   readonly locals: Record<string, unknown>;
-  /** The H3 2 event; Nitro 3's Cloudflare preset puts the bindings on its request. */
+  /**
+   * The H3 2 event; Nitro 3's Cloudflare preset puts the bindings on its
+   * request.
+   */
   readonly nativeEvent?: {
     readonly req: Request;
   } | undefined;
 }
 export interface SolidStartOptions extends FrameworkOptions {
   /**
-   * `getRequestEvent` from `solid-js/web`, which `require` and `action`
-   * call inside `"use server"` functions.
+   * `getRequestEvent` from `solid-js/web`, which `require` and `action` call
+   * inside `"use server"` functions.
    */
   readonly getRequestEvent: () => SolidFetchEvent | undefined;
   /** The host's env object for `getEnv`; defaults to the Cloudflare bindings. */
@@ -34,21 +37,22 @@ export interface SolidStartMiddleware {
 }
 export interface BetterSolidStart<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> extends BetterServer<M, F, E, C, P, B> {
   /**
-   * Verifies the caller, refreshes the session cookie on navigations and
-   * form posts, and puts `db`, `bs`, `auth`, `tenant` and `session` on
+   * Verifies the caller, refreshes the session cookie on navigations and form
+   * posts, and puts `db`, `bs`, `auth`, `tenant` and `session` on
    * `event.locals`.
    *
-   * ```ts title="src/middleware.ts"
-   * export default createMiddleware(bs.middleware)
+   * ```ts
+   * // src/middleware.ts
+   * export default createMiddleware(bs.middleware);
    * ```
    */
   readonly middleware: SolidStartMiddleware;
   /** The current request's `locals`, inside a `"use server"` function. */
   readonly locals: () => FrameworkLocals<M, F, E, C, P, B>;
   /**
-   * The caller inside a `"use server"` function (a `query`, an `action`,
-   * an API route), or a thrown refusal: a redirect to `signIn` or `mfa`
-   * when configured, else Problem Details.
+   * The caller inside a `"use server"` function (a `query`, an `action`, an API
+   * route), or a thrown refusal: a redirect to `signIn` or `mfa` when
+   * configured, else Problem Details.
    *
    * ```ts
    * const notes = query(async () => {
@@ -58,12 +62,12 @@ export interface BetterSolidStart<M extends AnyModels, F extends AnyFunctions, E
    * }, "notes");
    * ```
    */
-  require<R extends boolean = false>(options?: BlockRequireOptions<C, P, R>): Promise<FrameworkLocals<M, F, E, C, P, B> & AuthorizedContext<C, P, R>>;
+  require<R extends boolean = false>(options?: BlockRequireOptions<C, P, R, unknown, LocalsResource<M, F, E, C, P, B>>): Promise<FrameworkLocals<M, F, E, C, P, B> & AuthorizedContext<C, P, R>>;
   /**
    * A server function returning an `ActionResult`, for `action()` from
    * `@solidjs/router`: `FormData` or a plain object, validated by `input`.
    */
-  action<S extends StandardSchemaV1 | undefined, T, R extends boolean = false>(options: BlockActionOptions<S, C, P, R>, fn: (input: ActionParsed<S>, ctx: FrameworkLocals<M, F, E, C, P, B> & AuthorizedContext<C, P, R>) => T): (input: unknown) => Promise<ActionResult<Unwrapped<Awaited<T>>>>;
+  action<S extends StandardSchemaV1 | undefined, T, R extends boolean = false>(options: BlockActionOptions<S, C, P, R, unknown, LocalsResource<M, F, E, C, P, B>>, fn: (input: ActionParsed<S>, ctx: FrameworkLocals<M, F, E, C, P, B> & AuthorizedContext<C, P, R>) => T): (input: unknown) => Promise<ActionResult<Unwrapped<Awaited<T>>>>;
 }
 /** SolidStart integration: middleware, guards and server function actions. */
 export declare function createSolidStart<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P, B>, options: SolidStartOptions): BetterSolidStart<M, F, E, C, P, B>;

package/dist/solid-start/index.js

@@ -1,10 +1,10 @@
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-B2WRsRIg.js";
-import { t as defaultExpose } from "../respond-Bhp3G__q.js";
-import { i as requireCaller, o as runAction } from "../kit-LTbHrWWD.js";
-import { i as nitroCloudflareEnv } from "../shared-BmMcMoW9.js";
-import { i as localsOf, r as frameworkEntry } from "../framework-Ch8bMmQY.js";
-import { r as refusalResponse } from "../refusal-CFpfmjcS.js";
-import { t as beforeRoute } from "../before-route-B98js9m_.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-D8dW6p2A.js";
+import { t as defaultExpose } from "../respond-DjEmE_DN.js";
+import { i as requireCaller, o as runAction } from "../kit-BeXTrlZn.js";
+import { i as nitroCloudflareEnv } from "../shared-Bf-I13Ht.js";
+import { i as localsOf, r as frameworkEntry } from "../framework-BpEnOfAo.js";
+import { r as refusalResponse } from "../refusal-Ce2p81VW.js";
+import { t as beforeRoute } from "../before-route-B23K2zYU.js";
 //#region src/solid-start/index.ts
 /** SolidStart integration: middleware, guards and server function actions. */
 function createSolidStart(betterSupabase, options) {
@@ -37,7 +37,7 @@ function createSolidStart(betterSupabase, options) {
 		require: async (requireOptions = {}) => {
 			const event = eventOf();
 			const scope = scopeOf(event);
-			const caller = await requireCaller(scope.bs.auth, requireOptions, scope.tenant, options.authorizer);
+			const caller = await requireCaller(scope.bs.auth, requireOptions, scope.tenant, options.authorizer, scope);
 			if ("kind" in caller) throw refusalResponse(caller, event.request, options, expose);
 			return {
 				...scope,
@@ -50,7 +50,7 @@ function createSolidStart(betterSupabase, options) {
 				return await runAction(scope.bs.auth, actionOptions, input, scope.tenant, (parsed, caller) => fn(parsed, {
 					...scope,
 					...caller
-				}), options.authorizer);
+				}), options.authorizer, scope);
 			};
 		}
 	});

package/dist/spec/index.d.ts

@@ -1,8 +1,8 @@
-import { C as ModelWebhook, D as ResourceOperation, E as OperationSource, O as SecurityRequirement, S as ModelTag, T as OAuthFlow, _ as ModelResponseOrRef, a as JsonSchema, b as ModelServer, c as ModelChannelOperation, d as ModelInfo, f as ModelMessage, g as ModelResponse, h as ModelParameter, i as JsonObject, l as ModelContent, m as ModelOperation, n as DataApiOperation, o as ModelBody, p as ModelMessageTrait, r as HttpMethod, s as ModelChannel, t as ApiModel, u as ModelExample, v as ModelSecurityProfileRequirement, w as ModelWorkflow, x as ModelStep, y as ModelSecurityScheme } from "../model-lUafmeBQ.js";
-import { a as FormatVersion, c as SpecDiagnostic, d as defineDocumentFormat, i as DocumentOf, l as VersionOf, n as DiagnosticSeverity, o as LowerContext, r as DocumentFormat, s as RenderedOf, t as AnyDocumentFormat, u as VersionStatus } from "../format-CNwSjXUU.js";
-import { a as ResourcePlan, r as ResourceDescription } from "../resource-DYEtc-KN.js";
-import { B as DEFAULT_ERRORS, C as ApiSource, D as OperationIdContext, E as EnrichHooks, F as EventsOptions, H as SecurityPreset, I as TopicInput, L as topicsFrom, O as ResourceInput, R as DataApiOptions, S as ApiOptions, T as ComponentNameContext, V as PROBLEM_SCHEMA, a as OverlayEngine, c as defineApi, i as OpenApiRenderResult, k as RouteSpec, n as DefineApiOptions, o as RenderOptions, r as OpenApiRenderOptions, s as RenderResult, t as Api, w as BuiltModel, z as CustomSecurity } from "../api-DoWK3dTw.js";
-import { t as DescribedFunction } from "../function-contract-DWqFl_QO.js";
+import { C as TopicInput, D as DEFAULT_ERRORS, E as CustomSecurity, O as PROBLEM_SCHEMA, S as EventsOptions, T as DataApiOptions, a as OverlayEngine, c as defineApi, d as BuiltModel, f as ComponentNameContext, g as RouteSpec, h as ResourceInput, i as OpenApiRenderResult, k as SecurityPreset, l as ApiOptions, m as OperationIdContext, n as DefineApiOptions, o as RenderOptions, p as EnrichHooks, r as OpenApiRenderOptions, s as RenderResult, t as Api, u as ApiSource, w as topicsFrom } from "../api-DwLhJS1j.js";
+import { C as ModelWebhook, D as ResourceOperation, E as OperationSource, O as SecurityRequirement, S as ModelTag, T as OAuthFlow, _ as ModelResponseOrRef, a as JsonSchema, b as ModelServer, c as ModelChannelOperation, d as ModelInfo, f as ModelMessage, g as ModelResponse, h as ModelParameter, i as JsonObject, l as ModelContent, m as ModelOperation, n as DataApiOperation, o as ModelBody, p as ModelMessageTrait, r as HttpMethod, s as ModelChannel, t as ApiModel, u as ModelExample, v as ModelSecurityProfileRequirement, w as ModelWorkflow, x as ModelStep, y as ModelSecurityScheme } from "../model-Btl8X9cs.js";
+import { a as FormatVersion, c as SpecDiagnostic, d as defineDocumentFormat, i as DocumentOf, l as VersionOf, n as DiagnosticSeverity, o as LowerContext, r as DocumentFormat, s as RenderedOf, t as AnyDocumentFormat, u as VersionStatus } from "../format-AYHceC2m.js";
+import { a as ResourcePlan, r as ResourceDescription } from "../resource-DxQOPkZ5.js";
+import { t as DescribedFunction } from "../function-contract-4vfi93Y5.js";
 //#region src/spec/build.d.ts
 /**
  * Builds the version-neutral API model once per metadata, plugin list and
@@ -19,9 +19,9 @@ interface FunctionRouteOptions {
   readonly tags?: readonly string[];
 }
 /**
- * The route of a `defineFunction` handler, at `/functions/v1/<name>`: its
- * input is the request body and its output the 200 response. Pass it in
- * `routes`; `basePath` goes in front of it like any other route.
+ * The route of a `defineFunction` handler, at `/functions/v1/<name>`: its input
+ * is the request body and its output the 200 response. Pass it in `routes`;
+ * `basePath` goes in front of it like any other route.
  *
  * ```ts
  * defineApi(bs, { routes: [functionRoute("send-invite", sendInvite)] });
@@ -33,8 +33,8 @@ export declare function functionRoute(name: string, fn: DescribedFunction, optio
 /** Escapes a key for a JSON Pointer (RFC 6901). */
 export declare function pointerToken(key: string): string;
 /**
- * Deep merge: objects merge key by key, anything else (arrays included)
- * is replaced by the patch. `onConflict` hears each replaced leaf whose value
+ * Deep merge: objects merge key by key, anything else (arrays included) is
+ * replaced by the patch. `onConflict` hears each replaced leaf whose value
  * differs, with its JSON Pointer. Neither input is changed.
  */
 export declare function mergeJson<T>(base: T, patch: unknown, onConflict?: (pointer: string) => void, pointer?: string): T;
@@ -43,13 +43,15 @@ export declare function mergeJson<T>(base: T, patch: unknown, onConflict?: (poin
 interface SerializeOptions {
   /** Spaces per level. Defaults to 2; 0 writes one line. */
   readonly indent?: number;
-  /** Sorts object keys by UTF-16 code unit. Off by default, so generated order stays. */
+  /**
+   * Sorts object keys by UTF-16 code unit. Off by default, so generated order
+   * stays.
+   */
   readonly sortKeys?: boolean;
 }
 /**
- * The document as JSON text: the same document always gives the same
- * bytes, ending in a newline. Throws on `NaN` and infinities, which JSON
- * cannot hold.
+ * The document as JSON text: the same document always gives the same bytes,
+ * ending in a newline. Throws on `NaN` and infinities, which JSON cannot hold.
  */
 export declare function serializeDocument(document: unknown, options?: SerializeOptions): string;
 interface SpecResponseOptions {
@@ -60,10 +62,10 @@ interface SpecResponseOptions {
   readonly indent?: number;
 }
 /**
- * A `Response` that serves a rendered document with a strong ETag (the
- * SHA-256 of the body). A matching `If-None-Match` gets `304`; `HEAD` gets
- * the headers only; other methods than `GET` and `HEAD` get `405`. The body
- * and ETag are computed once per document object.
+ * A `Response` that serves a rendered document with a strong ETag (the SHA-256
+ * of the body). A matching `If-None-Match` gets `304`; `HEAD` gets the headers
+ * only; other methods than `GET` and `HEAD` get `405`. The body and ETag are
+ * computed once per document object.
  */
 export declare function specResponse(document: object, request?: Request, options?: SpecResponseOptions): Promise<Response>;
 //#endregion
@@ -95,9 +97,15 @@ interface SpecReferenceOptions {
    * files the app hosts itself.
    */
   readonly assets?: string | SpecUiAssets;
-  /** Set on every script and style tag, for a Content Security Policy with nonces. */
+  /**
+   * Set on every script and style tag, for a Content Security Policy with
+   * nonces.
+   */
   readonly nonce?: string;
-  /** UI options: Scalar's configuration, Swagger UI's and Redoc's options, or attributes of the Elements and RapiDoc components. */
+  /**
+   * UI options: Scalar's configuration, Swagger UI's and Redoc's options, or
+   * attributes of the Elements and RapiDoc components.
+   */
   readonly config?: Readonly<Record<string, unknown>>;
 }
 /**
@@ -105,7 +113,10 @@ interface SpecReferenceOptions {
  * Swagger UI, Redoc, Stoplight Elements and RapiDoc load the same way.
  *
  * ```ts
- * const html = specReferenceHtml({ specUrl: "/api/openapi.json", ui: "redoc" });
+ * const html = specReferenceHtml({
+ *   specUrl: "/api/openapi.json",
+ *   ui: "redoc",
+ * });
  * ```
  */
 export declare function specReferenceHtml(options: SpecReferenceOptions): string;
@@ -133,7 +144,10 @@ export declare function specReferenceCsp(options: Pick<SpecReferenceOptions, "ui
  */
 export declare function specReference(options: SpecReferenceResponseOptions, request?: Request): Response;
 interface ScalarPresetOptions {
-  /** A public OAuth client Scalar's "try it" uses for the authorization code flow. */
+  /**
+   * A public OAuth client Scalar's "try it" uses for the authorization code
+   * flow.
+   */
   readonly clientId?: string;
   readonly redirectUri?: string;
   /** PKCE for the authorization code flow. Defaults to `SHA-256`. */
@@ -145,9 +159,9 @@ interface ScalarPresetOptions {
 }
 /**
  * Adds Scalar's `x-scalar-*` extensions to an OpenAPI document, so the
- * reference can sign in through the OAuth flows the document declares.
- * Returns a copy. Use it in a `transform`:
- * `transform: ({ document }) => scalarPreset(document, { clientId })`.
+ * reference can sign in through the OAuth flows the document declares. Returns
+ * a copy. Use it in a `transform`: `transform: ({ document }) =>
+ * scalarPreset(document, { clientId })`.
  */
 export declare function scalarPreset<D extends object>(document: D, options?: ScalarPresetOptions): D;
 //#endregion

package/dist/spec/index.js

@@ -1,8 +1,8 @@
-import { r as isPlainObject } from "../clone-dN9XOL1K.js";
-import { a as methodNotAllowed } from "../problem-JRCohp1j.js";
-import { t as FUNCTION_DESCRIPTOR } from "../function-contract-DmkBg19r.js";
-import { o as defineDocumentFormat, t as defineApi } from "../api-C43_FYDp.js";
-import { a as DEFAULT_ERRORS, i as topicsFrom, l as mergeJson, o as PROBLEM_SCHEMA, t as buildApiModel, u as pointerToken } from "../build-CT6SPZkI.js";
+import { r as isPlainObject } from "../clone-CkG0-hlI.js";
+import { a as methodNotAllowed } from "../problem-D0KDiYPk.js";
+import { t as FUNCTION_DESCRIPTOR } from "../function-contract-pEmsaUIf.js";
+import { o as defineDocumentFormat, t as defineApi } from "../api-CmcTYuFT.js";
+import { a as DEFAULT_ERRORS, i as topicsFrom, l as mergeJson, o as PROBLEM_SCHEMA, t as buildApiModel, u as pointerToken } from "../build-DxzJf79X.js";
 //#region src/spec/function-route.ts
 function isDescriptor(value) {
 	return typeof value === "object" && value !== null && "input" in value;
@@ -13,9 +13,9 @@ function descriptorOf(fn) {
 	return isDescriptor(descriptor) ? descriptor : void 0;
 }
 /**
-* The route of a `defineFunction` handler, at `/functions/v1/<name>`: its
-* input is the request body and its output the 200 response. Pass it in
-* `routes`; `basePath` goes in front of it like any other route.
+* The route of a `defineFunction` handler, at `/functions/v1/<name>`: its input
+* is the request body and its output the 200 response. Pass it in `routes`;
+* `basePath` goes in front of it like any other route.
 *
 * ```ts
 * defineApi(bs, { routes: [functionRoute("send-invite", sendInvite)] });
@@ -51,9 +51,8 @@ function normalize(value, sortKeys, pointer) {
 	return out;
 }
 /**
-* The document as JSON text: the same document always gives the same
-* bytes, ending in a newline. Throws on `NaN` and infinities, which JSON
-* cannot hold.
+* The document as JSON text: the same document always gives the same bytes,
+* ending in a newline. Throws on `NaN` and infinities, which JSON cannot hold.
 */
 function serializeDocument(document, options = {}) {
 	const { indent = 2, sortKeys = false } = options;
@@ -63,7 +62,7 @@ const encoded = /* @__PURE__ */ new WeakMap();
 function base64url(bytes) {
 	let binary = "";
 	for (const byte of new Uint8Array(bytes)) binary += String.fromCodePoint(byte);
-	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/[=]+$/, "");
 }
 function encode(document, indent) {
 	let byIndent = encoded.get(document);
@@ -88,10 +87,10 @@ function matches(header, etag) {
 	return header.split(",").map((tag) => tag.trim().replace(/^W\//, "")).some((tag) => tag === "*" || tag === etag);
 }
 /**
-* A `Response` that serves a rendered document with a strong ETag (the
-* SHA-256 of the body). A matching `If-None-Match` gets `304`; `HEAD` gets
-* the headers only; other methods than `GET` and `HEAD` get `405`. The body
-* and ETag are computed once per document object.
+* A `Response` that serves a rendered document with a strong ETag (the SHA-256
+* of the body). A matching `If-None-Match` gets `304`; `HEAD` gets the headers
+* only; other methods than `GET` and `HEAD` get `405`. The body and ETag are
+* computed once per document object.
 */
 async function specResponse(document, request, options = {}) {
 	const { cacheControl = "public, no-cache", contentType = "application/json", indent = 2 } = options;
@@ -222,7 +221,10 @@ const HTML_ESCAPES = {
 function escapeHtml(text) {
 	return text.replaceAll(/[&<>"']/g, (char) => HTML_ESCAPES[char] ?? char);
 }
-/** JSON safe inside an inline `<script>`: no `<\/script>`, `<!--` or line separators. */
+/**
+* JSON safe inside an inline `<script>`: no `<\/script>`, `<!--` or line
+* separators.
+*/
 function scriptJson(value) {
 	return JSON.stringify(value).replaceAll("<", "\\u003c").replaceAll(">", "\\u003e").replaceAll("&", "\\u0026").replaceAll("\u2028", "\\u2028").replaceAll("\u2029", "\\u2029");
 }
@@ -268,7 +270,10 @@ function body(ui, specUrl, config) {
 * Swagger UI, Redoc, Stoplight Elements and RapiDoc load the same way.
 *
 * ```ts
-* const html = specReferenceHtml({ specUrl: "/api/openapi.json", ui: "redoc" });
+* const html = specReferenceHtml({
+*   specUrl: "/api/openapi.json",
+*   ui: "redoc",
+* });
 * ```
 */
 function specReferenceHtml(options) {
@@ -356,9 +361,9 @@ function specReference(options, request) {
 }
 /**
 * Adds Scalar's `x-scalar-*` extensions to an OpenAPI document, so the
-* reference can sign in through the OAuth flows the document declares.
-* Returns a copy. Use it in a `transform`:
-* `transform: ({ document }) => scalarPreset(document, { clientId })`.
+* reference can sign in through the OAuth flows the document declares. Returns
+* a copy. Use it in a `transform`: `transform: ({ document }) =>
+* scalarPreset(document, { clientId })`.
 */
 function scalarPreset(document, options = {}) {
 	const copy = structuredClone(document);

package/dist/spec-pins-CZ2CL8YZ.d.ts

@@ -0,0 +1,120 @@
+//#region src/core/spec-pins.d.ts
+/**
+ * Versions of evolving specs and conventions the code follows. Moving a pin is
+ * a minor release with a changeset (see the standards docs page).
+ */
+declare const SPEC_PINS: {
+  readonly otelSemconv: "1.37.0";
+  /** OTLP/HTTP JSON that the webhooks block's `otlpLogs()` encoder writes. */
+  readonly otlp: "1.7.0";
+  readonly mcp: "2026-07-28";
+  /** The default OpenAPI version `createOpenApi` emits. */
+  readonly openapi: "3.1.2";
+  readonly openapi30: "3.0.4";
+  readonly openapi31: "3.1.2";
+  readonly openapi32: "3.2.1";
+  /** `src/oas.md` on the `v3.3-dev` branch of OAI/OpenAPI-Specification. */
+  readonly openapi33Preview: "aa2f6c0";
+  /** OAI sig-security discussion #50, as of this date. */
+  readonly securityProfiles: "sig-security#50@2026-05-05";
+  readonly overlay10: "1.0.0";
+  readonly overlay11: "1.1.0";
+  readonly overlay12: "1.2.0";
+  readonly arazzo10: "1.0.1";
+  readonly arazzo11: "1.1.0";
+  readonly asyncapi30: "3.0.0";
+  readonly asyncapi31: "3.1.0";
+  /** OpenID AuthZEN Authorization API, the vocabulary of `Authorizer`. */
+  readonly authzen: "1.0";
+  readonly cloudevents: "1.0.2";
+  readonly standardWebhooks: "1.0.0";
+  readonly sarif: "2.1.0";
+  readonly jsonSchema: "2020-12";
+  readonly postgrestAggregates: "12";
+  readonly serverTiming: "WD-20260407";
+  readonly stripeSyncEngine: "0.48.5";
+  readonly pgvector: "0.8";
+  readonly ocsf: "1.9.0";
+  readonly openfeature: "0.9.0";
+  readonly scim: "2.0";
+  readonly supabaseSdkCapabilities: "1.14.0";
+  readonly aiMessage: "1";
+  readonly aiSdkUiMessageStream: "v1";
+  readonly anthropicMemoryTool: "20250818";
+  /** RFC 5545 recurrence rules expanded by the reminders block. */
+  readonly rfc5545: "2009-09";
+  /** RFC 4180 CSV read by `parseCsv` and written by `toCsv`. */
+  readonly rfc4180: "2005-10";
+  /**
+   * ISO 4217 List One publication behind `better-supabase/commerce` minor
+   * units.
+   */
+  readonly iso4217: "2026-09-17";
+  /**
+   * RFC 6902 JSON Patch that the versions block's `createPatch` writes and
+   * `applyPatch` applies.
+   */
+  readonly rfc6902: "2013-04";
+  /**
+   * RFC 9396 `authorization_details` that delegated tokens and job envelopes
+   * carry.
+   */
+  readonly rfc9396: "2023-05";
+  /**
+   * RFC 9864 fully specified JOSE algorithms; `Ed25519` is the alg the
+   * signing-keys block can write instead of `EdDSA`.
+   */
+  readonly rfc9864: "2025-10";
+  /**
+   * RFC 8417 Security Event Tokens that the shared-signals block mints and
+   * verifies.
+   */
+  readonly rfc8417: "2018-07";
+  /**
+   * RFC 8935 push delivery of SETs: the `set` webhook format and the receiver's
+   * push endpoint.
+   */
+  readonly rfc8935: "2020-11";
+  /**
+   * RFC 8936 poll delivery of SETs that the transmitter serves and the receiver
+   * runs.
+   */
+  readonly rfc8936: "2020-11";
+  /**
+   * OpenID Shared Signals Framework: metadata, streams, status and
+   * verification.
+   */
+  readonly ssf: "1.0";
+  /** OpenID CAEP event types in `CAEP_EVENTS`. */
+  readonly caep: "1.0";
+  /** OpenID RISC event types in `RISC_EVENTS`. */
+  readonly risc: "1.0";
+  /** RFC 9068 JWT access tokens that `accessTokenResolver` verifies. */
+  readonly rfc9068: "2021-10";
+  /** RFC 7591 client registration metadata the oauth-server block stores. */
+  readonly rfc7591: "2015-07";
+  /** RFC 7636 PKCE; the oauth-server block accepts only the S256 method. */
+  readonly rfc7636: "2015-09";
+  /**
+   * RFC 8628 device authorization that the oauth-server block's device codes
+   * follow.
+   */
+  readonly rfc8628: "2019-08";
+  /**
+   * RFC 9700 OAuth security best current practice behind code reuse and
+   * redirect URI rules.
+   */
+  readonly rfc9700: "2025-01";
+  /**
+   * Draft-ietf-httpapi-ratelimit-headers revision behind `rateLimitHeader` and
+   * the Hono and oRPC `rateLimit()`.
+   */
+  readonly ratelimitHeaders: "draft-11";
+  /**
+   * The shadcn release whose registry schemas the `@better-supabase` items
+   * follow.
+   */
+  readonly shadcnRegistry: "4.21.4";
+};
+//#endregion
+export { SPEC_PINS as t };