better-supabase 0.11.0 → 0.13.0

package/dist/storage/index.d.ts

@@ -1,4 +1,4 @@
-import { J as BucketLifecycleRule, X as VersioningStatus, Y as ObjectVersion, n as AccessPolicySql, q as BucketLifecycle, t as AccessBucketPolicy } from "../types-BrpW5ixT.js";
-import { A as TtlPreset, B as StorageListV2Folder, C as UrlOptions, D as TemplateParams, E as AppliedBucket, F as StorageDownloadOptions, G as StorageResponse, H as StorageListV2Result, I as StorageFailure, J as StorageSignedUrlEntry, K as StorageSearchOptions, L as StorageFetchParameters, M as StorageBucketApi, N as StorageClient, O as TemplateValues, P as StorageDestinationOptions, Q as StoragePath, R as StorageFileOptions, S as UploadOptions, T as parseSize, U as StorageObjectInfo, V as StorageListV2Object, W as StorageRemoveEntry, X as StorageUrlOptions, Y as StorageTransform, Z as PathIn, _ as SweepOptions, a as BucketConnectOptions, b as TransformOptions, c as DownloadOptions, d as PurgeCacheOptions, f as ReplaceOptions, g as StoredObject, h as StorageAdminClient, i as BucketConfig, j as StorageApi, k as TTL, l as ObjectTarget, m as Reservation, n as Bucket, o as BucketDrift, p as ReplaceResult, q as StorageSearchV2Options, r as BucketClient, s as BucketPolicy, t as ActualBucket, u as PathValues, v as SweepResult, w as defineBucket, x as UploadBody, y as TransferOptions, z as StorageListEntry } from "../bucket-BBSNDFNH.js";
-import { A as defineBuckets, C as BucketIdOf, D as ConnectedRef, E as Buckets, M as StorageImageSize, N as storageImageUrl, O as ResolvedRef, P as fromStorageError, S as AnyBucket, T as BucketWithId, _ as IMAGE_TYPES, a as VectorHit, b as avatarBucket, c as VectorMetadata, d as defineVectorBucket, f as AnalyticsBucket, g as AvatarBucketOptions, h as defineAnalyticsBucket, i as VectorDistance, j as StorageImageOptions, k as StoredRef, l as VectorQueryOptions, m as AnalyticsCatalog, n as VectorBucketClient, o as VectorIndexClient, p as AnalyticsBucketClient, r as VectorBucketConfig, s as VectorIndexConfig, t as VectorBucket, u as VectorRecord, v as ImageBucketOptions, w as BucketMap, x as organizationLogoBucket, y as OrganizationLogoBucketOptions } from "../index-DHReeV74.js";
-export { type AccessBucketPolicy, type AccessPolicySql, type ActualBucket, type AnalyticsBucket, type AnalyticsBucketClient, type AnalyticsCatalog, type AnyBucket, type AppliedBucket, type AvatarBucketOptions, type Bucket, type BucketClient, type BucketConfig, type BucketConnectOptions, type BucketDrift, type BucketIdOf, type BucketLifecycle, type BucketLifecycleRule, type BucketMap, type BucketPolicy, type BucketWithId, type Buckets, type ConnectedRef, type DownloadOptions, IMAGE_TYPES, type ImageBucketOptions, type ObjectTarget, type ObjectVersion, type OrganizationLogoBucketOptions, type PathIn, type PathValues, type PurgeCacheOptions, type ReplaceOptions, type ReplaceResult, type Reservation, type ResolvedRef, type StorageAdminClient, type StorageApi, type StorageBucketApi, type StorageClient, type StorageDestinationOptions, type StorageDownloadOptions, type StorageFailure, type StorageFetchParameters, type StorageFileOptions, type StorageImageOptions, type StorageImageSize, type StorageListEntry, type StorageListV2Folder, type StorageListV2Object, type StorageListV2Result, type StorageObjectInfo, type StoragePath, type StorageRemoveEntry, type StorageResponse, type StorageSearchOptions, type StorageSearchV2Options, type StorageSignedUrlEntry, type StorageTransform, type StorageUrlOptions, type StoredObject, type StoredRef, type SweepOptions, type SweepResult, TTL, type TemplateParams, type TemplateValues, type TransferOptions, type TransformOptions, type TtlPreset, type UploadBody, type UploadOptions, type UrlOptions, type VectorBucket, type VectorBucketClient, type VectorBucketConfig, type VectorDistance, type VectorHit, type VectorIndexClient, type VectorIndexConfig, type VectorMetadata, type VectorQueryOptions, type VectorRecord, type VersioningStatus, avatarBucket, defineAnalyticsBucket, defineBucket, defineBuckets, defineVectorBucket, fromStorageError, organizationLogoBucket, parseSize, storageImageUrl };
+import { J as BucketLifecycleRule, X as VersioningStatus, Y as ObjectVersion, n as AccessPolicySql, q as BucketLifecycle, t as AccessBucketPolicy } from "../types-DmshMaXz.js";
+import { $ as TemplateValues, A as StorageBucketApi, B as StorageListV2Result, C as UploadOptions, D as TTL, E as parseSize, F as StorageFetchParameters, G as StorageSearchV2Options, H as StorageRemoveEntry, I as StorageFileOptions, J as StorageUrlOptions, K as StorageSignedUrlEntry, L as StorageListEntry, M as StorageDestinationOptions, N as StorageDownloadOptions, O as TtlPreset, P as StorageFailure, Q as TemplateParams, R as StorageListV2Folder, S as UploadBody, T as defineBucket, U as StorageResponse, V as StorageObjectInfo, W as StorageSearchOptions, X as StoragePath, Y as PathIn, Z as AppliedBucket, _ as StoredObject, a as BucketConnectOptions, b as TransferOptions, c as DownloadOptions, d as PathValues, f as PurgeCacheOptions, g as StorageAdminClient, h as Reservation, i as BucketConfig, j as StorageClient, k as StorageApi, l as ImageTransform, m as ReplaceResult, n as Bucket, o as BucketDrift, p as ReplaceOptions, q as StorageTransform, r as BucketClient, s as BucketPolicy, t as ActualBucket, u as ObjectTarget, v as SweepOptions, w as UrlOptions, x as TransformOptions, y as SweepResult, z as StorageListV2Object } from "../bucket-DBay-ICp.js";
+import { A as StoredRef, C as AnyBucket, D as Buckets, E as BucketWithId, F as storageImageUrl, I as fromStorageError, M as StorageImageOptions, N as StorageImageSize, O as ConnectedRef, P as storageImageSrcSet, S as organizationLogoBucket, T as BucketMap, _ as IMAGE_TYPES, a as VectorHit, b as OrganizationLogoBucketOptions, c as VectorMetadata, d as defineVectorBucket, f as AnalyticsBucket, g as AvatarBucketOptions, h as defineAnalyticsBucket, i as VectorDistance, j as defineBuckets, k as ResolvedRef, l as VectorQueryOptions, m as AnalyticsCatalog, n as VectorBucketClient, o as VectorIndexClient, p as AnalyticsBucketClient, r as VectorBucketConfig, s as VectorIndexConfig, t as VectorBucket, u as VectorRecord, v as ImageBucketOptions, w as BucketIdOf, x as avatarBucket, y as ImageVariant } from "../index-CrAKHNJF.js";
+export { type AccessBucketPolicy, type AccessPolicySql, type ActualBucket, type AnalyticsBucket, type AnalyticsBucketClient, type AnalyticsCatalog, type AnyBucket, type AppliedBucket, type AvatarBucketOptions, type Bucket, type BucketClient, type BucketConfig, type BucketConnectOptions, type BucketDrift, type BucketIdOf, type BucketLifecycle, type BucketLifecycleRule, type BucketMap, type BucketPolicy, type BucketWithId, type Buckets, type ConnectedRef, type DownloadOptions, IMAGE_TYPES, type ImageBucketOptions, type ImageTransform, type ImageVariant, type ObjectTarget, type ObjectVersion, type OrganizationLogoBucketOptions, type PathIn, type PathValues, type PurgeCacheOptions, type ReplaceOptions, type ReplaceResult, type Reservation, type ResolvedRef, type StorageAdminClient, type StorageApi, type StorageBucketApi, type StorageClient, type StorageDestinationOptions, type StorageDownloadOptions, type StorageFailure, type StorageFetchParameters, type StorageFileOptions, type StorageImageOptions, type StorageImageSize, type StorageListEntry, type StorageListV2Folder, type StorageListV2Object, type StorageListV2Result, type StorageObjectInfo, type StoragePath, type StorageRemoveEntry, type StorageResponse, type StorageSearchOptions, type StorageSearchV2Options, type StorageSignedUrlEntry, type StorageTransform, type StorageUrlOptions, type StoredObject, type StoredRef, type SweepOptions, type SweepResult, TTL, type TemplateParams, type TemplateValues, type TransferOptions, type TransformOptions, type TtlPreset, type UploadBody, type UploadOptions, type UrlOptions, type VectorBucket, type VectorBucketClient, type VectorBucketConfig, type VectorDistance, type VectorHit, type VectorIndexClient, type VectorIndexConfig, type VectorMetadata, type VectorQueryOptions, type VectorRecord, type VersioningStatus, avatarBucket, defineAnalyticsBucket, defineBucket, defineBuckets, defineVectorBucket, fromStorageError, organizationLogoBucket, parseSize, storageImageSrcSet, storageImageUrl };

package/dist/storage/index.js

@@ -1,21 +1,24 @@
 import { t as DbException } from "../db-exception-CnWcYPxL.js";
-import { n as dbError } from "../errors-BV1SKTVs.js";
-import { c as optionalTemporal, n as isInstant } from "../temporal-CB5Fpo5d.js";
-import { n as temporalMissing } from "../temporal-required-nfZ87U-0.js";
-import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../result-DIeYscA3.js";
-import { a as spansAllTenants } from "../plugin-tfXW1-qO.js";
-import { a as tenantClaimPaths, o as tenantFrom, s as tenantPathsFor } from "../claims-PqzCxaTD.js";
-import { a as sqlString, i as sqlIdent, n as parseTemplate, r as slug, t as claimSql } from "../template-Dw3dTmKe.js";
-import { r as accessCheck } from "../access-sql-CTJPHjCL.js";
-import { t as fromStorageError } from "../errors-D3BR8iUk.js";
-import { n as ttlSeconds, t as TTL } from "../ttl-Hr34gRu8.js";
-import { t as storageImageUrl } from "../image-url-pIVlO6R1.js";
+import { n as dbError } from "../errors-D7u24ZJH.js";
+import { c as optionalTemporal, n as isInstant } from "../temporal-DLZlWbOi.js";
+import { n as temporalMissing } from "../temporal-required-Dt4mcPsi.js";
+import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../result-DIT_qp4G.js";
+import { a as spansAllTenants } from "../plugin-D9bYbYli.js";
+import { a as tenantClaimPaths, o as tenantFrom, s as tenantPathsFor } from "../claims-Bp9My7XP.js";
+import { a as sqlString, i as sqlIdent, n as parseTemplate, r as slug, t as claimSql } from "../template-DXsGm_R0.js";
+import { r as accessCheck } from "../access-sql-BpOdJvfj.js";
+import { t as fromStorageError } from "../errors-Cq72lONT.js";
+import { a as ttlSeconds, i as TTL, r as transformFor, t as checkVariants } from "../variants-Bat9zU8l.js";
+import { i as storageImageUrl, r as storageImageSrcSet } from "../image-url-_d7xYsXK.js";
 //#region src/storage/versioning.ts
 const MAX_DAYS = 2147483647;
 function wholeIn(value, min, max) {
 	return Number.isInteger(value) && value >= min && value <= max;
 }
-/** Checks a lifecycle policy and fills Storage's defaults; throws a `TypeError` for one Storage would refuse. */
+/**
+* Checks a lifecycle policy and fills Storage's defaults; throws a `TypeError`
+* for one Storage would refuse.
+*/
 function lifecyclePayload(id, lifecycle) {
 	const rules = lifecycle.rules;
 	if (rules.length === 0 || rules.length > 1e3) throw new TypeError(`defineBucket("${id}"): lifecycle needs 1 to 1000 rules`);
@@ -52,11 +55,14 @@ function ruleKey(rule) {
 */
 function sameLifecycle(expected, actual) {
 	const stored = typeof actual === "object" && actual !== null && "rules" in actual && Array.isArray(actual.rules) ? actual.rules : [];
-	const want = (expected?.rules ?? []).map(ruleKey).sort();
-	const have = stored.map(ruleKey).sort();
+	const want = (expected?.rules ?? []).map(ruleKey).toSorted();
+	const have = stored.map(ruleKey).toSorted();
 	return want.length === have.length && want.every((key, i) => key === have[i]);
 }
-/** Storage codes for a lifecycle that is absent or a feature the project doesn't have. */
+/**
+* Storage codes for a lifecycle that is absent or a feature the project doesn't
+* have.
+*/
 function lifecycleAbsent(error) {
 	return error.code === "NoSuchLifecycleConfiguration" || error.kind === "unsupported";
 }
@@ -78,8 +84,8 @@ function toVersion(item) {
 //#endregion
 //#region src/storage/apply.ts
 /**
-* Creates or updates a bucket through the Storage API, then sets or removes
-* its lifecycle policy. Versioning and lifecycle live behind the API, so
+* Creates or updates a bucket through the Storage API, then sets or removes its
+* lifecycle policy. Versioning and lifecycle live behind the API, so
 * `bucket.sql()` can't write them.
 */
 function applyBucket(settings, client) {
@@ -187,7 +193,10 @@ function pathLayouts(id, path, sqlString) {
 		sqlMatch: patterns.length === 1 ? patterns[0] : `(${patterns.join(" or ")})`
 	};
 }
-/** Whether matched path values hold every value of `within`; a rest value may sit under it. */
+/**
+* Whether matched path values hold every value of `within`; a rest value may
+* sit under it.
+*/
 function inScope(values, within) {
 	if (!values) return false;
 	return Object.entries(within).every(([key, expected]) => {
@@ -208,8 +217,8 @@ function sendable(body) {
 	return !(typeof ReadableStream !== "undefined" && body instanceof ReadableStream);
 }
 /**
-* PUTs `body` to a signed upload URL with upload progress events. Resolves
-* with `undefined` on success or the failure to map.
+* PUTs `body` to a signed upload URL with upload progress events. Resolves with
+* `undefined` on success or the failure to map.
 */
 function xhrUpload(Request, url, body, options) {
 	return new Promise((resolve) => {
@@ -226,31 +235,31 @@ function xhrUpload(Request, url, body, options) {
 		xhr.setRequestHeader("cache-control", `max-age=${options.cacheControl ?? "3600"}`);
 		const type = options.contentType ?? (typeof Blob !== "undefined" && body instanceof Blob && body.type ? body.type : void 0);
 		if (type) xhr.setRequestHeader("content-type", type);
-		xhr.upload.onprogress = (event) => {
+		xhr.upload.addEventListener("progress", (event) => {
 			if (event.lengthComputable && event.total > 0) options.onProgress(Math.min(1, event.loaded / event.total));
-		};
-		xhr.onload = () => {
+		});
+		xhr.addEventListener("load", () => {
 			if (xhr.status >= 200 && xhr.status < 300) {
 				options.onProgress(1);
 				done(void 0);
 				return;
 			}
 			done(parseFailure(xhr.status, xhr.responseText));
-		};
-		xhr.onerror = () => {
+		});
+		xhr.addEventListener("error", () => {
 			done({
 				message: "Upload failed",
 				statusCode: "0",
 				name: "StorageUnknownError"
 			});
-		};
-		xhr.onabort = () => {
+		});
+		xhr.addEventListener("abort", () => {
 			done({
 				message: "The upload was aborted",
 				statusCode: "0",
 				name: "AbortError"
 			});
-		};
+		});
 		options.signal?.addEventListener("abort", onAbort, { once: true });
 		xhr.send(body);
 	});
@@ -288,7 +297,7 @@ function pool(limit) {
 	let active = 0;
 	const waiting = [];
 	return async (fn) => {
-		if (active < limit) active++;
+		if (active < limit) active += 1;
 		else await new Promise((resolve) => {
 			waiting.push(resolve);
 		});
@@ -297,7 +306,7 @@ function pool(limit) {
 		} finally {
 			const next = waiting.shift();
 			if (next) next();
-			else active--;
+			else active -= 1;
 		}
 	};
 }
@@ -357,6 +366,11 @@ function connectBucket(bucket, client, resolveTarget, connectOptions, guard) {
 			return err(fromStorageError(cause, bucket.id));
 		}
 	});
+	const claim = (path) => {
+		if (!storage.claimSignedUpload) return AsyncResult.ok(path);
+		const claiming = storage.claimSignedUpload(bucket.id, path);
+		return run(() => claiming);
+	};
 	const fileOptions = (options, contentType) => ({
 		...contentType ? { contentType } : {},
 		...options?.cacheControl ? { cacheControl: options.cacheControl } : {},
@@ -364,12 +378,16 @@ function connectBucket(bucket, client, resolveTarget, connectOptions, guard) {
 		upsert: options?.upsert ?? false
 	});
 	const download = (value) => value === void 0 ? {} : { download: value };
-	const urlExtras = (options) => ({
-		...download(options?.download),
-		...options?.transform ? { transform: { ...options.transform } } : {},
-		...options?.cacheNonce ? { cacheNonce: options.cacheNonce } : {},
-		...options?.versionId ? { versionId: options.versionId } : {}
-	});
+	const transformOf = (transform) => transformFor(bucket.id, bucket.variants, transform);
+	const urlExtras = (options) => {
+		const transform = transformOf(options?.transform);
+		return {
+			...download(options?.download),
+			...transform ? { transform: { ...transform } } : {},
+			...options?.cacheNonce ? { cacheNonce: options.cacheNonce } : {},
+			...options?.versionId ? { versionId: options.versionId } : {}
+		};
+	};
 	const upload = (target, body, options) => AsyncResult.from(async () => {
 		options?.signal?.throwIfAborted();
 		const path = resolve(target);
@@ -388,6 +406,11 @@ function connectBucket(bucket, client, resolveTarget, connectOptions, guard) {
 				onProgress: options.onProgress
 			});
 			if (failure) return err(fromStorageError(failure, bucket.id));
+			const claimed = await claim(path);
+			if (!claimed.ok) {
+				evict([path]);
+				return claimed;
+			}
 			evict([path]);
 			return ok({ path });
 		}
@@ -506,7 +529,7 @@ function connectBucket(bucket, client, resolveTarget, connectOptions, guard) {
 		const key = signed ? JSON.stringify([
 			path,
 			ttl,
-			options?.transform,
+			transformOf(options?.transform),
 			options?.download,
 			options?.cacheNonce,
 			options?.versionId
@@ -585,7 +608,7 @@ function connectBucket(bucket, client, resolveTarget, connectOptions, guard) {
 				...download(options?.download),
 				...options?.cacheNonce ? { cacheNonce: options.cacheNonce } : {}
 			})).andThen((data) => {
-				const failed = data.find((entry) => entry.error != null || !entry.signedUrl);
+				const failed = data.find((entry) => entry.error !== null || !entry.signedUrl);
 				if (failed) return Promise.resolve(err(dbError("not_found", failed.error ?? `No URL for ${String(failed.path)}`, { table: bucket.id })));
 				return Promise.resolve(ok(data.map((entry) => entry.signedUrl)));
 			});
@@ -609,7 +632,7 @@ function connectBucket(bucket, client, resolveTarget, connectOptions, guard) {
 		},
 		replace: (target, body, options = {}) => AsyncResult.from(async () => {
 			const path = resolve(target);
-			const previous = options.previous == null ? null : resolve(options.previous);
+			const previous = typeof options.previous === "string" ? resolve(options.previous) : null;
 			const same = previous === path;
 			const uploaded = await upload(path, body, {
 				...options,
@@ -660,6 +683,10 @@ function connectBucket(bucket, client, resolveTarget, connectOptions, guard) {
 				return { path };
 			});
 		}),
+		claimReserved: (reservation) => AsyncResult.from(async () => {
+			const path = resolve(reservation.path);
+			return claim(path).map(() => ({ path }));
+		}),
 		sweep: (options) => AsyncResult.from(async () => {
 			const namespace = optionalTemporal();
 			if (namespace === void 0) return err(temporalMissing());
@@ -679,7 +706,7 @@ function connectBucket(bucket, client, resolveTarget, connectOptions, guard) {
 			};
 			try {
 				for await (const object of stream(bucket.prefix(scope), options.signal)) {
-					scanned++;
+					scanned += 1;
 					if (!inScope(bucket.match(object.path), scope)) continue;
 					const created = Date.parse(object.createdAt ?? object.updatedAt ?? "");
 					if (!Number.isFinite(created) || created >= cutoff) continue;
@@ -738,8 +765,8 @@ function resolveTenant(options, claim) {
 	return options.context && tenantFrom(options.context, tenantPathsFor(claim));
 }
 /**
-* The guard for a client of bucket `bucket` whose template holds the tenant
-* in `param`, or `undefined` when nothing is checked (no tenant config,
+* The guard for a client of bucket `bucket` whose template holds the tenant in
+* `param`, or `undefined` when nothing is checked (no tenant config,
 * `allTenants`, or an all-tenants context).
 */
 function tenantGuard(bucket, param, claim, match, options) {
@@ -792,8 +819,8 @@ function parseSize(value) {
 /**
 * Path segment `index` equals `value`. A first segment also bounds `name` to
 * the `value/` prefix in the "C" collation, the storage name indexes', so
-* Postgres range-scans one tenant's objects instead of the whole bucket;
-* `like` can't, because its pattern only exists at run time.
+* Postgres range-scans one tenant's objects instead of the whole bucket; `like`
+* can't, because its pattern only exists at run time.
 */
 function segmentCheck(index, value) {
 	const equal = `split_part(name, '/', ${String(index)}) = ${value}`;
@@ -815,23 +842,25 @@ function sizeLabel(bytes) {
 	return `${String(bytes)}B`;
 }
 /**
-* A typed Storage bucket: path builders from a template, limits, generated
-* SQL policies and `config.toml`, and helpers for the multi-step work apps
-* repeat (replace, signed uploads, orphan cleanup).
+* A typed Storage bucket: path builders from a template, limits, generated SQL
+* policies and `config.toml`, and helpers for the multi-step work apps repeat
+* (replace, signed uploads, orphan cleanup).
 *
 * ```ts
 * export const logos = defineBucket({
-*   id: 'customer-logos',
-*   path: '{organizationId}/{customerId}/logo/{version}.webp',
-*   policy: 'tenant',
-*   fileSizeLimit: '5MiB',
-*   allowedMimeTypes: ['image/webp'],
+*   id: "customer-logos",
+*   path: "{organizationId}/{customerId}/logo/{version}.webp",
+*   policy: "tenant",
+*   fileSizeLimit: "5MiB",
+*   allowedMimeTypes: ["image/webp"],
 * });
 * ```
 */
 function defineBucket(config) {
 	const layouts = pathLayouts(config.id, config.path, sqlString);
 	const policy = config.policy ?? "none";
+	const variants = Object.freeze({ ...config.variants });
+	checkVariants(config.id, variants);
 	const fileSizeLimit = config.fileSizeLimit === void 0 ? void 0 : parseSize(config.fileSizeLimit);
 	const allowedMimeTypes = config.allowedMimeTypes;
 	const versioning = config.versioning ?? false;
@@ -875,6 +904,7 @@ function defineBucket(config) {
 		allowedMimeTypes,
 		versioning,
 		lifecycle: config.lifecycle,
+		variants,
 		path: (values) => {
 			try {
 				return ok(layouts.build(values));
@@ -1010,7 +1040,7 @@ function defineBucket(config) {
 				actual: actual.fileSizeLimit,
 				message: `Bucket "${config.id}" file size limit differs`
 			});
-			const sorted = (list) => list ? [...list].sort().join(",") : "";
+			const sorted = (list) => list ? list.toSorted().join(",") : "";
 			if (sorted(actual.allowedMimeTypes) !== sorted(allowedMimeTypes)) issues.push({
 				field: "allowedMimeTypes",
 				expected: allowedMimeTypes,
@@ -1046,18 +1076,18 @@ function defineBucket(config) {
 //#endregion
 //#region src/storage/registry.ts
 /**
-* A registry of bucket definitions by id, for rows that store a bucket id
-* next to an object path (files, attachments, sources). An id no bucket
-* has, and a path outside the bucket's templates, are errors, never a
-* fallback bucket.
+* A registry of bucket definitions by id, for rows that store a bucket id next
+* to an object path (files, attachments, sources). An id no bucket has, and a
+* path outside the bucket's templates, are errors, never a fallback bucket.
 *
 * ```ts
 * export const buckets = defineBuckets({ files, attachments, logos });
 *
-* const ref = buckets.connectStored(supabase, {
-*   bucket: row.bucketId,
-*   path: row.path,
-* }, { context: db.$context });
+* const ref = buckets.connectStored(
+*   supabase,
+*   { bucket: row.bucketId, path: row.path },
+*   { context: db.$context },
+* );
 * if (ref.ok) await ref.data.storage.signedUrl(ref.data.path);
 * ```
 */
@@ -1113,9 +1143,46 @@ const IMAGE_TYPES = [
 ];
 const AVATAR_PATH = "{userId}/avatar-{version}.{ext}";
 const LOGO_PATH = "{organizationId}/logo-{version}.{ext}";
+/** Square center crops: 48, 96 and 256 pixels. */
+const AVATAR_VARIANTS = {
+	sm: {
+		width: 48,
+		height: 48,
+		resize: "cover"
+	},
+	md: {
+		width: 96,
+		height: 96,
+		resize: "cover"
+	},
+	lg: {
+		width: 256,
+		height: 256,
+		resize: "cover"
+	}
+};
+/** The whole logo fitted in a 64, 128 or 256 pixel square. */
+const LOGO_VARIANTS = {
+	sm: {
+		width: 64,
+		height: 64,
+		resize: "contain"
+	},
+	md: {
+		width: 128,
+		height: 128,
+		resize: "contain"
+	},
+	lg: {
+		width: 256,
+		height: 256,
+		resize: "contain"
+	}
+};
 /**
-* A bucket for profile pictures: `{userId}/avatar-{version}.{ext}`, public,
-* 2 MiB of images, written only by their owner (the `owner` policy).
+* A bucket for profile pictures: `{userId}/avatar-{version}.{ext}`, public, 2
+* MiB of images, written only by their owner (the `owner` policy). Variants
+* `sm`, `md` and `lg` are 48, 96 and 256 pixel square crops.
 */
 function avatarBucket(options = {}) {
 	return defineBucket({
@@ -1124,13 +1191,16 @@ function avatarBucket(options = {}) {
 		public: options.public ?? true,
 		fileSizeLimit: options.fileSizeLimit ?? "2MiB",
 		allowedMimeTypes: options.allowedMimeTypes ?? IMAGE_TYPES,
-		policy: options.policy ?? "owner"
+		policy: options.policy ?? "owner",
+		variants: options.variants ?? AVATAR_VARIANTS
 	});
 }
 /**
-* A bucket for organization logos: `{organizationId}/logo-{version}.{ext}`, public,
-* 2 MiB of images, written by members with the update permission through
-* the access contract (`tenant_ids_with`), so it follows the app's roles.
+* A bucket for organization logos: `{organizationId}/logo-{version}.{ext}`,
+* public, 2 MiB of images, written by members with the update permission
+* through the access contract (`tenant_ids_with`), so it follows the app's
+* roles. Variants `sm`, `md` and `lg` fit the whole logo in a 64, 128 or 256
+* pixel square.
 */
 function organizationLogoBucket(options = {}) {
 	const permission = options.permission ?? "organization.update";
@@ -1145,6 +1215,7 @@ function organizationLogoBucket(options = {}) {
 			read: permission,
 			write: permission
 		} },
+		variants: options.variants ?? LOGO_VARIANTS,
 		...tenant ? { tenant } : {}
 	});
 }
@@ -1191,14 +1262,18 @@ function chunks(items, size) {
 }
 /** Batches in flight at once for one `put`, `get` or `remove`. */
 const CHUNK_CONCURRENCY = 4;
-/** Runs `run` per item over a few lanes; stops starting items after the first error. */
+/**
+* Runs `run` per item over a few lanes; stops starting items after the first
+* error.
+*/
 async function inLanes(items, run) {
 	const out = [];
 	let next = 0;
 	let failed;
 	const lane = async () => {
 		while (!failed && next < items.length) {
-			const index = next++;
+			const index = next;
+			next += 1;
 			const result = await run(items[index]);
 			if (!result.ok) {
 				failed ??= result;
@@ -1212,8 +1287,8 @@ async function inLanes(items, run) {
 }
 const metricOf = (config) => config.distanceMetric ?? "cosine";
 /**
-* A Storage vector bucket with typed indexes. Storage keeps the vectors
-* outside Postgres; use the `vector-search` module for pgvector in a table.
+* A Storage vector bucket with typed indexes. Storage keeps the vectors outside
+* Postgres; use the `vector-search` module for pgvector in a table.
 *
 * ```ts
 * export const embeddings = defineVectorBucket({
@@ -1337,4 +1412,4 @@ function connectVectorBucket(config, client) {
 	};
 }
 //#endregion
-export { IMAGE_TYPES, TTL, avatarBucket, defineAnalyticsBucket, defineBucket, defineBuckets, defineVectorBucket, fromStorageError, organizationLogoBucket, parseSize, storageImageUrl };
+export { IMAGE_TYPES, TTL, avatarBucket, defineAnalyticsBucket, defineBucket, defineBuckets, defineVectorBucket, fromStorageError, organizationLogoBucket, parseSize, storageImageSrcSet, storageImageUrl };

package/dist/store-DKqbuNvw.d.ts

@@ -0,0 +1,83 @@
+import { t as AsyncResult } from "./result-mijqfoJN.js";
+//#region src/streams/store.d.ts
+/** How a stream is opened. */
+interface StreamOpenOptions {
+  /** The user who may read the stream and cancel it. */
+  readonly owner?: string;
+  readonly tenant?: string;
+  /**
+   * What the stream carries, such as `chat` or `workflow`. Defaults to
+   * `default`.
+   */
+  readonly kind?: string;
+  /**
+   * Seconds the stream lives, or a Postgres interval such as `"2 hours"`.
+   * Defaults to one day.
+   */
+  readonly ttl?: number | string;
+}
+interface StreamAppendResult {
+  /** The index the next chunk gets. */
+  readonly next: number;
+  /** Someone asked the writer to stop. */
+  readonly cancelled: boolean;
+}
+interface StreamStatus {
+  /** The number of chunks stored. */
+  readonly next: number;
+  readonly closed: boolean;
+  readonly cancelled: boolean;
+}
+interface StreamReadOptions {
+  /** Ends the stream early. */
+  readonly signal?: AbortSignal;
+}
+interface StreamPurgeOptions {
+  /**
+   * How long a closed stream is kept: seconds or an interval. Defaults to one
+   * day.
+   */
+  readonly olderThan?: number | string;
+}
+/**
+ * Durable, resumable output: one writer appends ordered text chunks and any
+ * number of readers read from a chunk index, live or after a reconnect. Chunks
+ * keep the index they were appended at, so a reader that counted `n` chunks
+ * resumes with `read(id, n)`.
+ */
+interface StreamStore {
+  readonly apiVersion: 1;
+  readonly name: string;
+  /** Creates the stream; `true` when it was new, `false` when it existed. */
+  open(id: string, options?: StreamOpenOptions): AsyncResult<boolean>;
+  /**
+   * Stores `chunks` at `fromIdx`, `fromIdx + 1`, ... Indexes already stored are
+   * skipped, so a retried batch is harmless. Fails with the hint
+   * `STREAM_NOT_FOUND`, `STREAM_CLOSED` or `STREAM_GAP` (`fromIdx` past the
+   * end).
+   */
+  append(id: string, fromIdx: number, chunks: readonly string[]): AsyncResult<StreamAppendResult>;
+  /**
+   * The chunks from `fromIdx` on, waiting for new ones until the stream is
+   * closed. A stream that doesn't exist (or that the caller can't read) ends at
+   * once. A read error errors the stream with the `DbError`.
+   */
+  read(id: string, fromIdx?: number, options?: StreamReadOptions): ReadableStream<string>;
+  /** The stream's state, or `undefined` when it doesn't exist. */
+  status(id: string): AsyncResult<StreamStatus | undefined>;
+  isCancelled(id: string): AsyncResult<boolean>;
+  /**
+   * Marks the stream finished; `false` when it was closed already or doesn't
+   * exist.
+   */
+  close(id: string): AsyncResult<boolean>;
+  /** Asks the writer to stop; it learns on its next append. */
+  cancel(id: string): AsyncResult<boolean>;
+  /**
+   * Deletes expired streams and closed ones past `olderThan`; resolves with the
+   * count.
+   */
+  purge(options?: StreamPurgeOptions): AsyncResult<number>;
+}
+//#endregion
+export { StreamStatus as a, StreamReadOptions as i, StreamOpenOptions as n, StreamStore as o, StreamPurgeOptions as r, StreamAppendResult as t };

package/dist/store-McN-2esd.js

@@ -0,0 +1,69 @@
+//#region src/streams/store.ts
+/**
+* A reader that fetches pages and waits for a wake-up or `pollMs` between empty
+* ones.
+*/
+function pollingRead(options) {
+	let next = options.from;
+	let woken = false;
+	let resolveWait;
+	const wake = () => {
+		woken = true;
+		resolveWait?.();
+	};
+	let unsubscribe;
+	const stop = () => {
+		unsubscribe?.();
+		unsubscribe = void 0;
+		options.signal?.removeEventListener("abort", wake);
+	};
+	const wait = () => new Promise((resolve) => {
+		if (woken || options.signal?.aborted) {
+			resolve();
+			return;
+		}
+		const timer = setTimeout(done, options.pollMs);
+		function done() {
+			clearTimeout(timer);
+			resolveWait = void 0;
+			resolve();
+		}
+		resolveWait = done;
+	});
+	return new ReadableStream({
+		start() {
+			options.signal?.addEventListener("abort", wake, { once: true });
+			unsubscribe = options.subscribe?.(wake);
+		},
+		async pull(controller) {
+			for (;;) {
+				if (options.signal?.aborted) {
+					stop();
+					controller.close();
+					return;
+				}
+				woken = false;
+				const page = await options.fetch(next);
+				if (!page.ok) {
+					stop();
+					controller.error(page.error);
+					return;
+				}
+				for (const chunk of page.data.chunks) controller.enqueue(chunk);
+				next = page.data.next;
+				if (page.data.done) {
+					stop();
+					controller.close();
+					return;
+				}
+				if (page.data.chunks.length > 0) return;
+				await wait();
+			}
+		},
+		cancel() {
+			stop();
+		}
+	});
+}
+//#endregion
+export { pollingRead as t };