better-supabase 0.12.0 → 0.14.0

package/dist/create/index.js

@@ -1,8 +1,8 @@
-import { c as PRESET_CATALOG, h as encodePreset, i as presetOf, s as resolvePreset } from "../config-DHhQmmuD.js";
-import { a as appDefaultError, c as appReservedColumns, o as appIdentifierError, p as isAppDefault, s as appNameLengthError, x as APP_ON_DELETE_ACTIONS } from "../app-tables-BRjMcWhW.js";
-import { o as resolveConfig } from "../config-NQmw_wsk.js";
-import { _ as parseDesign, a as DesignTooLongError, h as encodeDesign, l as designConfig, m as designOf, n as diffDesigns } from "../preset-Cf0T9GRt.js";
-import { E as SQL_MODULES, i as moduleLayout, m as renderModules } from "../sql-CT1Jnwp8.js";
+import { c as PRESET_CATALOG, i as presetOf, s as resolvePreset, v as encodePreset } from "../config-Dh4D8lBa.js";
+import { C as APP_ON_DELETE_ACTIONS, a as appIdentifierError, m as isAppDefault, o as appNameLengthError, p as appDefaultError, s as appReservedColumns } from "../app-tables-C5aoI5rZ.js";
+import { c as resolveConfig } from "../config-Dn0cC3bM.js";
+import { _ as encodeDesign, a as DesignParseError, b as parseDesign, h as designOf, n as diffDesigns, o as DesignTooLongError, u as designConfig, y as jsonPointer } from "../preset-DzcQ5CQM.js";
+import { O as SQL_MODULES, i as moduleLayout, m as renderModules } from "../sql-rQDL6PIL.js";
 //#region src/create/column-keys.ts
 /** The most options a select takes, and the longest option. */
 const MAX_OPTIONS = 100;
@@ -42,6 +42,13 @@ const CONTROL = /\p{Cc}/u;
 function lockedWithoutDefault(column) {
 	return column.access !== void 0 && column.nullable === false && column.default === void 0 && column.identity !== true;
 }
+/**
+* Whether a column can be encrypted: not a `text[]`, and no unique key,
+* reference or identity, which only work on the stored value.
+*/
+function encryptable(column) {
+	return column.type !== "text[]" && column.unique !== true && column.references === void 0 && column.identity !== true;
+}
 /** Whether `min` and `max` apply to a `type` column, as a value or a length. */
 function takesBounds(type) {
 	return type === "text" || NUMBER_TYPES.has(type);
@@ -55,11 +62,11 @@ function fitsBound(type, value) {
 }
 /**
 * A column without the keys its type can't take: a format of another type,
-* options outside text and text[], bounds that don't apply, an identity
-* outside integer and bigint, and a default an identity or the type refuses.
+* options outside text and text[], bounds that don't apply, an identity outside
+* integer and bigint, and a default an identity or the type refuses.
 */
 function fitted(column) {
-	const { format, options, min, max, identity, default: fallback, nullable, ...rest } = column;
+	const { format, options, min, max, identity, default: fallback, nullable, encrypted, ...rest } = column;
 	const { type } = column;
 	const counted = identity === true && (type === "integer" || type === "bigint");
 	const next = { ...rest };
@@ -70,6 +77,7 @@ function fitted(column) {
 	if (fitsBound(type, min)) next.min = min;
 	if (fitsBound(type, max)) next.max = max;
 	if (counted) next.identity = true;
+	if (encrypted === true && encryptable(next)) next.encrypted = true;
 	return next;
 }
 /** Why `option` can't join a select's `options`, or `undefined` when it can. */
@@ -80,7 +88,10 @@ function optionError(options, option) {
 	if (options.includes(option)) return `${option} is already an option.`;
 	if (options.length >= MAX_OPTIONS) return `A select takes at most ${MAX_OPTIONS} options.`;
 }
-/** Why `value` can't be a bound of `column`, or `undefined` when it can (an empty value clears it). */
+/**
+* Why `value` can't be a bound of `column`, or `undefined` when it can (an
+* empty value clears it).
+*/
 function boundError(column, side, value) {
 	const trimmed = value.trim();
 	if (trimmed === "") return;
@@ -99,7 +110,10 @@ function withBounds(column, bounds) {
 	if (bounds.max !== void 0) next.max = bounds.max;
 	return next;
 }
-/** What the canvas shows for a column that is more than its type, such as an email or a select. */
+/**
+* What the canvas shows for a column that is more than its type, such as an
+* email or a select.
+*/
 function columnLabel(column) {
 	if (column.identity === true) return "autonumber";
 	if (column.options !== void 0) return column.type === "text[]" ? "multi-select" : "select";
@@ -107,6 +121,109 @@ function columnLabel(column) {
 	return column.format === void 0 ? void 0 : FORMAT_LABELS[column.format];
 }
 //#endregion
+//#region src/create/design-scope.ts
+const AUTH_USERS$1 = "auth.users";
+/**
+* The column that scopes an app table's rows, or `null` for `scope: "none"` and
+* unscoped presets.
+*/
+function scopeColumnOf(table, preset) {
+	const scope = table.scope ?? "inherit";
+	if (scope === "none") return null;
+	if (scope === "inherit" && preset.scope === "tenant") return {
+		name: `${preset.tenantName}_id`,
+		type: preset.idType,
+		nullable: false,
+		default: null,
+		unique: false
+	};
+	if (scope === "user" || preset.scope === "user") return {
+		name: "user_id",
+		type: "uuid",
+		nullable: false,
+		default: "auth.uid()",
+		unique: false
+	};
+	return null;
+}
+//#endregion
+//#region src/create/design-subject.ts
+/**
+* The columns `subject` adds: `rank` for manual order and `deleted_at` for
+* trash.
+*/
+function subjectColumns(subject) {
+	const columns = [];
+	if (subject?.rank !== void 0) columns.push({
+		name: "rank",
+		type: "text",
+		nullable: false,
+		default: "'V'",
+		unique: false
+	});
+	if (subject?.softDelete === true) columns.push({
+		name: "deleted_at",
+		type: "timestamptz",
+		nullable: true,
+		default: null,
+		unique: false
+	});
+	return columns;
+}
+/** The subject with the columns it names renamed or dropped by `edit`. */
+function subjectColumnsEdited(subject, edit) {
+	const { title, search, rank, versions, ...rest } = subject;
+	const next = { ...rest };
+	const [nextTitle] = title === void 0 ? [] : edit([title]);
+	if (nextTitle !== void 0) next.title = nextTitle;
+	if (search !== void 0) {
+		const nextSearch = {};
+		const [searchTitle] = search.title === void 0 ? [] : edit([search.title]);
+		const body = edit(search.body ?? []);
+		if (searchTitle !== void 0) nextSearch.title = searchTitle;
+		if (body.length > 0) nextSearch.body = body;
+		next.search = nextSearch;
+	}
+	if (versions === true) next.versions = true;
+	else if (versions !== void 0) {
+		const { columns, ...options } = versions;
+		const kept = columns === void 0 ? void 0 : edit(columns);
+		next.versions = kept === void 0 || kept.length === 0 ? options : {
+			...options,
+			columns: kept
+		};
+	}
+	if (rank === true) next.rank = true;
+	else if (rank !== void 0) {
+		const [group] = rank.group === void 0 ? [] : edit([rank.group]);
+		next.rank = group === void 0 ? true : { group };
+	}
+	return next;
+}
+const SUBJECT_TYPE = /^[a-z][a-z0-9_]*$/u;
+/**
+* Why `type` can't be the subject type of the app table `table`, or `undefined`
+* when it can.
+*/
+function subjectTypeError(design, table, type) {
+	if (!SUBJECT_TYPE.test(type)) return "Use lowercase letters, digits and underscores, starting with a letter.";
+	const owner = Object.entries(design.appTables ?? {}).find(([name, each]) => name !== table && each.subject?.type === type)?.[0];
+	return owner === void 0 ? void 0 : `${owner} already has the subject type ${type}.`;
+}
+/**
+* App table events with `edit` applied to the payload columns, dropping an
+* empty list.
+*/
+function eventsColumnsEdited(events, edit) {
+	if (events === true) return true;
+	const { include, ...rest } = events;
+	const kept = include === void 0 ? [] : edit(include);
+	return kept.length === 0 ? rest : {
+		...rest,
+		include: kept
+	};
+}
+//#endregion
 //#region src/create/design-computed.ts
 /** The aggregates a rollup takes (`APP_ROLLUP_AGGREGATES`). */
 const ROLLUP_AGGREGATES = [
@@ -134,7 +251,10 @@ function isRollupAggregate(value) {
 function readableColumns(table) {
 	return [...Object.entries(table.columns ?? {}).map(([name, column]) => [name, column.type]), ...table.timestamps === false ? [] : [["created_at", "timestamptz"], ["updated_at", "timestamptz"]]];
 }
-/** The columns `aggregate` can read: numbers for sum and avg, ordered types for min and max, none for count. */
+/**
+* The columns `aggregate` can read: numbers for sum and avg, ordered types for
+* min and max, none for count.
+*/
 function rollupColumns(child, aggregate) {
 	if (aggregate === "count") return [];
 	const fits = aggregate === "sum" || aggregate === "avg" ? NUMBERS : ORDERED;
@@ -144,14 +264,20 @@ function rollupColumns(child, aggregate) {
 function filterColumns(child) {
 	return Object.entries(child.columns ?? {}).flatMap(([name, column]) => column.type === "text" && column.options !== void 0 ? [[name, column.options]] : []);
 }
-/** Each app table column that references `parent`, as `{ table, via }`: what a rollup on `parent` can aggregate. */
+/**
+* Each app table column that references `parent`, as `{ table, via }`: what a
+* rollup on `parent` can aggregate.
+*/
 function rollupSources(tables, parent) {
 	return Object.entries(tables).flatMap(([table, config]) => Object.entries(config.columns ?? {}).filter(([, column]) => column.references !== void 0 && column.references.block === void 0 && column.references.table === parent).map(([via]) => ({
 		table,
 		via
 	})));
 }
-/** Each column of `name` that references another app table, with that table: what a lookup can follow. */
+/**
+* Each column of `name` that references another app table, with that table:
+* what a lookup can follow.
+*/
 function lookupSources(tables, name) {
 	return Object.entries(tables[name]?.columns ?? {}).flatMap(([via, column]) => column.references !== void 0 && column.references.block === void 0 && Object.hasOwn(tables, column.references.table) ? [{
 		via,
@@ -183,7 +309,10 @@ function withComputed(table, rollups, lookups) {
 	if (lookups !== void 0 && Object.keys(lookups).length > 0) next.lookups = lookups;
 	return next;
 }
-/** `table` with a rollup or lookup set under `name`, replacing `previous` in its place. */
+/**
+* `table` with a rollup or lookup set under `name`, replacing `previous` in its
+* place.
+*/
 function tableWithComputed(table, name, computed, previous) {
 	const placed = (record, value) => {
 		const entries = Object.entries(record ?? {});
@@ -198,9 +327,9 @@ function tableWithoutComputed(table, name) {
 }
 /**
 * The tables with every rollup and lookup that no longer fits dropped: one
-* whose table, link or column was deleted or retyped, or whose name a
-* column now uses. `sql sync` would refuse them, and the design code would
-* not encode.
+* whose table, link or column was deleted or retyped, or whose name a column
+* now uses. `sql sync` would refuse them, and the design code would not
+* encode.
 */
 function prunedComputed(tables) {
 	return Object.fromEntries(Object.entries(tables).map(([name, table]) => {
@@ -219,7 +348,10 @@ function computedTableRenamed(tables, from, to) {
 		} : rollup]))
 	}]));
 }
-/** The rollup fitted to a new source or aggregate: a column the aggregate can read, and a filter the child still has. */
+/**
+* The rollup fitted to a new source or aggregate: a column the aggregate can
+* read, and a filter the child still has.
+*/
 function fittedRollup(tables, rollup) {
 	const child = tables[rollup.table] ?? {};
 	const columns = rollupColumns(child, rollup.aggregate);
@@ -249,8 +381,8 @@ function rollupRenamed(rollup, swap) {
 }
 /**
 * Every rollup and lookup that reads `table.from`, reading `table.to`. The
-* tables already have the column renamed, so a lookup finds its target
-* through the renamed link.
+* tables already have the column renamed, so a lookup finds its target through
+* the renamed link.
 */
 function computedColumnRenamed(tables, table, from, to) {
 	const swap = (column) => column === from ? to : column;
@@ -289,74 +421,6 @@ function computedRows(table) {
 	})];
 }
 //#endregion
-//#region src/create/design-subject.ts
-/** The columns `subject` adds: `rank` for manual order and `deleted_at` for trash. */
-function subjectColumns(subject) {
-	const columns = [];
-	if (subject?.rank !== void 0) columns.push({
-		name: "rank",
-		type: "text",
-		nullable: false,
-		default: "'V'",
-		unique: false
-	});
-	if (subject?.softDelete === true) columns.push({
-		name: "deleted_at",
-		type: "timestamptz",
-		nullable: true,
-		default: null,
-		unique: false
-	});
-	return columns;
-}
-/** The subject with the columns it names renamed or dropped by `edit`. */
-function subjectColumnsEdited(subject, edit) {
-	const { title, search, rank, versions, ...rest } = subject;
-	const next = { ...rest };
-	const [nextTitle] = title === void 0 ? [] : edit([title]);
-	if (nextTitle !== void 0) next.title = nextTitle;
-	if (search !== void 0) {
-		const nextSearch = {};
-		const [searchTitle] = search.title === void 0 ? [] : edit([search.title]);
-		const body = edit(search.body ?? []);
-		if (searchTitle !== void 0) nextSearch.title = searchTitle;
-		if (body.length > 0) nextSearch.body = body;
-		next.search = nextSearch;
-	}
-	if (versions === true) next.versions = true;
-	else if (versions !== void 0) {
-		const { columns, ...options } = versions;
-		const kept = columns === void 0 ? void 0 : edit(columns);
-		next.versions = kept === void 0 || kept.length === 0 ? options : {
-			...options,
-			columns: kept
-		};
-	}
-	if (rank === true) next.rank = true;
-	else if (rank !== void 0) {
-		const [group] = rank.group === void 0 ? [] : edit([rank.group]);
-		next.rank = group === void 0 ? true : { group };
-	}
-	return next;
-}
-const SUBJECT_TYPE = /^[a-z][a-z0-9_]*$/u;
-/** Why `type` can't be the subject type of the app table `table`, or `undefined` when it can. */
-function subjectTypeError(design, table, type) {
-	if (!SUBJECT_TYPE.test(type)) return "Use lowercase letters, digits and underscores, starting with a letter.";
-	const owner = Object.entries(design.appTables ?? {}).find(([name, each]) => name !== table && each.subject?.type === type)?.[0];
-	return owner === void 0 ? void 0 : `${owner} already has the subject type ${type}.`;
-}
-/** App table events with `edit` applied to the payload columns, dropping an empty list. */
-function eventsColumnsEdited(events, edit) {
-	if (events === true) return true;
-	const { include, ...rest } = events;
-	const kept = include === void 0 ? [] : edit(include);
-	return kept.length === 0 ? rest : {
-		...rest,
-		include: kept
-	};
-}
-//#endregion
 //#region src/create/design.ts
 const EMPTY_DESIGN = {};
 /** The schema app tables go in. */
@@ -378,26 +442,6 @@ function isAppTable(table) {
 function isEmptyDesign(design) {
 	return Object.keys(design.appTables ?? {}).length === 0 && Object.keys(design.extraColumns ?? {}).length === 0 && Object.keys(design.positions ?? {}).length === 0;
 }
-/** The column that scopes an app table's rows, or `null` for `scope: "none"` and unscoped presets. */
-function scopeColumnOf(table, preset) {
-	const scope = table.scope ?? "inherit";
-	if (scope === "none") return null;
-	if (scope === "inherit" && preset.scope === "tenant") return {
-		name: `${preset.tenantName}_id`,
-		type: preset.idType,
-		nullable: false,
-		default: null,
-		unique: false
-	};
-	if (scope === "user" || preset.scope === "user") return {
-		name: "user_id",
-		type: "uuid",
-		nullable: false,
-		default: "auth.uid()",
-		unique: false
-	};
-	return null;
-}
 /** Why `name` can't name an app table or column, by the library's rules. */
 function identifierError(name) {
 	return appIdentifierError(name);
@@ -421,8 +465,8 @@ function columnError(table, name, preset) {
 	if (appReservedColumns(preset.tenantName).includes(name)) return `${name} is a column every app table can get from its scope. Choose another name.`;
 }
 /**
-* Why `value` can't be the default of `column` (its type, options and
-* bounds), or `undefined` when it can or is empty.
+* Why `value` can't be the default of `column` (its type, options and bounds),
+* or `undefined` when it can or is empty.
 */
 function defaultError(column, value) {
 	const trimmed = value.trim();
@@ -473,8 +517,8 @@ function addTable(design, name, table = {}, position) {
 	});
 }
 /**
-* Removes an app table, every app table column that references it (and
-* those columns from key sets), and the rollups and lookups that read it.
+* Removes an app table, every app table column that references it (and those
+* columns from key sets), and the rollups and lookups that read it.
 */
 function deleteTable(design, name) {
 	const rest = omitKey(design.appTables, name);
@@ -534,8 +578,8 @@ function updateTable(design, name, patch) {
 	});
 }
 /**
-* Sets an app table's id type and retypes the app table columns that
-* reference it, since a key has the type of the id it points at.
+* Sets an app table's id type and retypes the app table columns that reference
+* it, since a key has the type of the id it points at.
 */
 function setTableId(design, name, id) {
 	const next = updateTable(design, name, { id: id === "uuid" ? void 0 : id });
@@ -544,7 +588,10 @@ function setTableId(design, name, id) {
 		columns: Object.fromEntries(Object.entries(table.columns ?? {}).map(([column, config]) => [column, config.references?.block === void 0 && config.references?.table === name ? retyped(config, id) : config]))
 	}])));
 }
-/** A table's composite key sets with `edit` applied to each, dropping empty sets and an empty list. */
+/**
+* A table's composite key sets with `edit` applied to each, dropping empty sets
+* and an empty list.
+*/
 function withKeySets(table, edit) {
 	const { unique, indexes, ...rest } = table;
 	const sets = (list) => {
@@ -604,7 +651,10 @@ function deleteColumn(design, table, name) {
 		}, (columns) => columns.filter((column) => column !== name))
 	});
 }
-/** Sets an extra column on a block table (`blocks.<module>.options.extraColumns`). */
+/**
+* Sets an extra column on a block table
+* (`blocks.<module>.options.extraColumns`).
+*/
 function setExtraColumn(design, module, name, type) {
 	return {
 		...design,
@@ -682,8 +732,10 @@ function singular(name) {
 	for (const [ending, replacement] of SINGULAR_ENDINGS) if (ending.test(name)) return name.replace(ending, replacement);
 	return name;
 }
-const AUTH_USERS$1 = "auth.users";
-/** The column types a foreign key can point at, from the target's primary key type. */
+/**
+* The column types a foreign key can point at, from the target's primary key
+* type.
+*/
 function referenceType(type) {
 	const normal = type.toLowerCase();
 	switch (normal) {
@@ -700,12 +752,11 @@ function referenceType(type) {
 	}
 }
 /**
-* Adds a foreign key column from an app table to `target`. Only app tables
-* get new columns. A self reference gets `parent_id`, and a second
-* reference to the same table gets a role name (`owner_id`, `<target>_2_id`)
-* the user can rename. A target without a single-column primary key, and
-* the tenant table the scope column already references, are refused with a
-* message.
+* Adds a foreign key column from an app table to `target`. Only app tables get
+* new columns. A self reference gets `parent_id`, and a second reference to the
+* same table gets a role name (`owner_id`, `<target>_2_id`) the user can
+* rename. A target without a single-column primary key, and the tenant table
+* the scope column already references, are refused with a message.
 */
 function connect(design, data, preset, connection) {
 	const source = data.tables.find((table) => table.id === connection.source);
@@ -740,9 +791,9 @@ function referenceColumn(table, base, roles, preset) {
 	].find((candidate) => columnError(table, candidate, preset) === void 0);
 }
 /**
-* Adds a key to `targetId` on the app table `name` in the design, which can
-* be a table the schema doesn't have yet: `<target>_id`, `parent_id` for a
-* self reference, or a free role name when that column is taken.
+* Adds a key to `targetId` on the app table `name` in the design, which can be
+* a table the schema doesn't have yet: `<target>_id`, `parent_id` for a self
+* reference, or a free role name when that column is taken.
 */
 function referenceFrom(design, data, preset, name, targetId) {
 	const table = design.appTables?.[name];
@@ -750,8 +801,8 @@ function referenceFrom(design, data, preset, name, targetId) {
 		ok: false,
 		error: `${name} is not in the design.`
 	};
-	const target = targetId === AUTH_USERS$1 ? void 0 : data.tables.find((each) => each.id === targetId);
-	if (targetId !== AUTH_USERS$1 && target === void 0) return {
+	const target = targetId === "auth.users" ? void 0 : data.tables.find((each) => each.id === targetId);
+	if (targetId !== "auth.users" && target === void 0) return {
 		ok: false,
 		error: "That table is not in the schema."
 	};
@@ -786,91 +837,6 @@ function referenceFrom(design, data, preset, name, targetId) {
 		})
 	};
 }
-/**
-* What would stop `sql sync` from writing the design: a table name a block
-* already uses, a reference to a table the preset no longer installs, a
-* set-null delete on a required column, a composite key on a column the
-* table doesn't have, and extra columns for a block that is gone or no
-* longer takes them.
-*/
-function designIssues(design, data, preset) {
-	const issues = [];
-	const names = new Set(data.tables.filter((table) => !isAppTable(table)).map((table) => table.name));
-	const logical = new Set(Object.values(data.blockTables).map((each) => `${each.block}.${each.table}`));
-	const modules = new Set(data.tables.filter((table) => data.extraColumns.includes(table.id)).map((table) => table.module));
-	const subjectTypes = /* @__PURE__ */ new Map();
-	for (const [name, table] of Object.entries(design.appTables ?? {})) {
-		const type = table.subject?.type;
-		if (type !== void 0 && !subjectTypes.has(type)) subjectTypes.set(type, name);
-	}
-	for (const [name, table] of Object.entries(design.appTables ?? {})) {
-		const invalid = identifierError(name);
-		if (invalid !== void 0) issues.push({
-			table: name,
-			message: `The name ${name} is invalid. ${invalid}`
-		});
-		if (names.has(name)) issues.push({
-			table: name,
-			message: `A block already creates a ${name} table. Rename this one.`
-		});
-		const long = appNameLengthError(name, table);
-		if (long !== void 0) issues.push({
-			table: name,
-			message: `${long}.`
-		});
-		const type = table.subject?.type;
-		if (type !== void 0 && subjectTypes.get(type) !== name) issues.push({
-			table: name,
-			message: `${subjectTypes.get(type)} already has the subject type ${type}. Choose another.`
-		});
-		for (const [column, config] of Object.entries(table.columns ?? {})) {
-			const fallback = config.default === void 0 ? void 0 : defaultError(config, config.default);
-			if (fallback !== void 0) issues.push({
-				table: name,
-				message: `${name}.${column}: ${fallback}`
-			});
-			if (lockedWithoutDefault(config)) issues.push({
-				table: name,
-				message: `${name}.${column} is required, and signed-in users can't write it, so give it a default.`
-			});
-		}
-		for (const column of subjectColumns(table.subject)) if (Object.hasOwn(table.columns ?? {}, column.name)) issues.push({
-			table: name,
-			message: `${name}.${column.name} clashes with the column its record features add. Rename it.`
-		});
-		const known = /* @__PURE__ */ new Set([
-			"id",
-			...Object.keys(table.columns ?? {}),
-			...table.timestamps === false ? [] : ["created_at", "updated_at"]
-		]);
-		const scope = scopeColumnOf(table, preset);
-		if (scope !== null) known.add(scope.name);
-		for (const [key, sets] of [["unique key", table.unique], ["index", table.indexes]]) for (const columns of sets ?? []) {
-			const gone = columns.filter((column) => !known.has(column));
-			if (gone.length > 0) issues.push({
-				table: name,
-				message: `The ${key} on ${columns.join(", ")} names ${gone.join(", ")}, which ${name} doesn't have.`
-			});
-		}
-		for (const [column, config] of Object.entries(table.columns ?? {})) {
-			const reference = config.references;
-			if (reference === void 0) continue;
-			if (reference.block === void 0 ? reference.table !== AUTH_USERS$1 && design.appTables?.[reference.table] === void 0 : !logical.has(`${reference.block}.${reference.table}`)) issues.push({
-				table: name,
-				message: `${name}.${column} references ${reference.block === void 0 ? reference.table : `${reference.block}.${reference.table}`}, which the preset does not install.`
-			});
-			if (reference.onDelete === "set null" && config.nullable === false) issues.push({
-				table: name,
-				message: `${name}.${column} is required, so deleting the row it references can't set it to null.`
-			});
-		}
-	}
-	for (const block of Object.keys(design.extraColumns ?? {})) if (!modules.has(block)) issues.push({
-		table: block,
-		message: `The extra columns for ${block} have no table: the block is not installed or takes no extra columns.`
-	});
-	return issues;
-}
 function appColumn(name, column) {
 	const label = columnLabel(column);
 	const schemaColumn = {
@@ -891,9 +857,12 @@ const TIMESTAMP = {
 	default: "now()",
 	unique: false
 };
-/** The id of the table a reference points at, or `undefined` when it is not in the schema. */
+/**
+* The id of the table a reference points at, or `undefined` when it is not in
+* the schema.
+*/
 function referencedId(reference, data) {
-	if (reference.block === void 0) return reference.table === AUTH_USERS$1 ? AUTH_USERS$1 : appTableId(reference.table);
+	if (reference.block === void 0) return reference.table === "auth.users" ? AUTH_USERS$1 : appTableId(reference.table);
 	return Object.entries(data.blockTables).find(([, each]) => each.block === reference.block && each.table === reference.table)?.[0];
 }
 function foreignKey(column, to, onDelete = "no action") {
@@ -963,8 +932,8 @@ function extraColumnsOf(design, table, data) {
 	return data.extraColumns.includes(table.id) ? design.extraColumns?.[table.module] ?? {} : {};
 }
 /**
-* The schema with the design applied: app tables added, extra columns
-* appended to the block tables that accept them.
+* The schema with the design applied: app tables added, extra columns appended
+* to the block tables that accept them.
 */
 function withDesign(data, design, preset) {
 	const tables = data.tables.map((table) => {
@@ -993,12 +962,129 @@ function withDesign(data, design, preset) {
 	};
 }
 //#endregion
+//#region src/create/design-issues.ts
+/**
+* What would stop `sql sync` from writing the design: a table name a block
+* already uses, a reference to a table the preset no longer installs, a
+* set-null delete on a required column, a composite key on a column the table
+* doesn't have, and extra columns for a block that is gone or no longer takes
+* them.
+*/
+function designIssues(design, data, preset) {
+	const issues = [];
+	const names = new Set(data.tables.filter((table) => !isAppTable(table)).map((table) => table.name));
+	const logical = new Set(Object.values(data.blockTables).map((each) => `${each.block}.${each.table}`));
+	const modules = new Set(data.tables.filter((table) => data.extraColumns.includes(table.id)).map((table) => table.module));
+	const subjectTypes = /* @__PURE__ */ new Map();
+	for (const [name, table] of Object.entries(design.appTables ?? {})) {
+		const type = table.subject?.type;
+		if (type !== void 0 && !subjectTypes.has(type)) subjectTypes.set(type, name);
+	}
+	for (const [name, table] of Object.entries(design.appTables ?? {})) {
+		const invalid = identifierError(name);
+		if (invalid !== void 0) issues.push({
+			code: "invalid_name",
+			path: jsonPointer("appTables", name),
+			table: name,
+			message: `The name ${name} is invalid. ${invalid}`
+		});
+		if (names.has(name)) issues.push({
+			code: "table_name_taken",
+			path: jsonPointer("appTables", name),
+			table: name,
+			message: `A block already creates a ${name} table. Rename this one.`
+		});
+		const long = appNameLengthError(name, table);
+		if (long !== void 0) issues.push({
+			code: "name_too_long",
+			path: jsonPointer("appTables", name),
+			table: name,
+			message: `${long}.`
+		});
+		const type = table.subject?.type;
+		if (type !== void 0 && subjectTypes.get(type) !== name) issues.push({
+			code: "subject_type_taken",
+			path: jsonPointer("appTables", name, "subject", "type"),
+			table: name,
+			message: `${subjectTypes.get(type)} already has the subject type ${type}. Choose another.`
+		});
+		for (const [column, config] of Object.entries(table.columns ?? {})) {
+			const fallback = config.default === void 0 ? void 0 : defaultError(config, config.default);
+			if (fallback !== void 0) issues.push({
+				code: "invalid_default",
+				path: jsonPointer("appTables", name, "columns", column, "default"),
+				table: name,
+				message: `${name}.${column}: ${fallback}`
+			});
+			if (lockedWithoutDefault(config)) issues.push({
+				code: "default_required",
+				path: jsonPointer("appTables", name, "columns", column),
+				table: name,
+				message: `${name}.${column} is required, and signed-in users can't write it, so give it a default.`
+			});
+		}
+		for (const column of subjectColumns(table.subject)) if (Object.hasOwn(table.columns ?? {}, column.name)) issues.push({
+			code: "column_clash",
+			path: jsonPointer("appTables", name, "columns", column.name),
+			table: name,
+			message: `${name}.${column.name} clashes with the column its record features add. Rename it.`
+		});
+		const known = /* @__PURE__ */ new Set([
+			"id",
+			...Object.keys(table.columns ?? {}),
+			...table.timestamps === false ? [] : ["created_at", "updated_at"]
+		]);
+		const scope = scopeColumnOf(table, preset);
+		if (scope !== null) known.add(scope.name);
+		for (const [key, field, sets] of [[
+			"unique key",
+			"unique",
+			table.unique
+		], [
+			"index",
+			"indexes",
+			table.indexes
+		]]) for (const [index, columns] of (sets ?? []).entries()) {
+			const gone = columns.filter((column) => !known.has(column));
+			if (gone.length > 0) issues.push({
+				code: "unknown_column",
+				path: jsonPointer("appTables", name, field, index),
+				table: name,
+				message: `The ${key} on ${columns.join(", ")} names ${gone.join(", ")}, which ${name} doesn't have.`
+			});
+		}
+		for (const [column, config] of Object.entries(table.columns ?? {})) {
+			const reference = config.references;
+			if (reference === void 0) continue;
+			if (reference.block === void 0 ? reference.table !== "auth.users" && design.appTables?.[reference.table] === void 0 : !logical.has(`${reference.block}.${reference.table}`)) issues.push({
+				code: "missing_reference",
+				path: jsonPointer("appTables", name, "columns", column, "references"),
+				table: name,
+				message: `${name}.${column} references ${reference.block === void 0 ? reference.table : `${reference.block}.${reference.table}`}, which the preset does not install.`
+			});
+			if (reference.onDelete === "set null" && config.nullable === false) issues.push({
+				code: "set_null_required",
+				path: jsonPointer("appTables", name, "columns", column, "references", "onDelete"),
+				table: name,
+				message: `${name}.${column} is required, so deleting the row it references can't set it to null.`
+			});
+		}
+	}
+	for (const block of Object.keys(design.extraColumns ?? {})) if (!modules.has(block)) issues.push({
+		code: "block_not_installed",
+		path: jsonPointer("extraColumns", block),
+		table: block,
+		message: `The extra columns for ${block} have no table: the block is not installed or takes no extra columns.`
+	});
+	return issues;
+}
+//#endregion
 //#region src/create/preview-provider.ts
 /**
-* A stand-in for the app's authorization provider, so `/create` can render
-* the SQL and the diagram for `access: "provider"`. Its templates call
-* functions in a `provider` schema that no real project has: the preview
-* says so next to the output.
+* A stand-in for the app's authorization provider, so `/create` can render the
+* SQL and the diagram for `access: "provider"`. Its templates call functions in
+* a `provider` schema that no real project has: the preview says so next to the
+* output.
 */
 function previewAccessProvider(preset) {
 	return {
@@ -1017,9 +1103,8 @@ function previewAccessProvider(preset) {
 }
 /**
 * The files `sql sync` writes for a config with only this preset and its
-* `/create` design (app tables and extra columns). With
-* `access: "provider"` the access functions come from
-* `previewAccessProvider`.
+* `/create` design (app tables and extra columns). With `access: "provider"`
+* the access functions come from `previewAccessProvider`.
 */
 function previewFiles(code, design = {}) {
 	const preset = presetOf(code);
@@ -1034,12 +1119,15 @@ function previewFiles(code, design = {}) {
 //#endregion
 //#region src/create/schema-meta.ts
 const AUTH_USERS = "auth.users";
-/** The tenant name the module defaults use, which a preset's tenant name replaces. */
+/**
+* The tenant name the module defaults use, which a preset's tenant name
+* replaces.
+*/
 const DEFAULT_TENANT = "organization";
 /**
-* Finds the parsed table for a module's logical table by its default name,
-* or by that name with the tenant renamed (`organizations` is `workspaces`
-* for the `workspace` tenant).
+* Finds the parsed table for a module's logical table by its default name, or
+* by that name with the tenant renamed (`organizations` is `workspaces` for the
+* `workspace` tenant).
 */
 function indexTables(tables, tenantName) {
 	const byName = new Map(tables.map((table) => [`${table.module}:${table.name}`, table]));
@@ -1067,9 +1155,9 @@ function tenantTable(tables) {
 	return best;
 }
 /**
-* The physical column a logical lifecycle column maps to. A tenant name
-* renames `organization_id`, so a default name the table lacks falls back to
-* the table's tenant column.
+* The physical column a logical lifecycle column maps to. A tenant name renames
+* `organization_id`, so a default name the table lacks falls back to the
+* table's tenant column.
 */
 function physicalColumn(table, name, tenant) {
 	if (name === void 0) return;
@@ -1080,8 +1168,8 @@ function hasForeignKey(table, column) {
 	return table.foreignKeys.some((key) => key.columns.length === 1 && key.columns[0] === column);
 }
 /**
-* The soft references in the tables: lifecycle tenant and user columns
-* without a foreign key, and `regclass` columns, which name any table.
+* The soft references in the tables: lifecycle tenant and user columns without
+* a foreign key, and `regclass` columns, which name any table.
 */
 function softReferences(tables, tenantName = DEFAULT_TENANT) {
 	const lookup = indexTables(tables, tenantName);
@@ -1143,7 +1231,10 @@ function extraColumnTables(tables, lookup) {
 		return table === void 0 ? [] : [table.id];
 	});
 }
-/** The tables plus the soft references, manifests and extra-column tables the canvas draws. */
+/**
+* The tables plus the soft references, manifests and extra-column tables the
+* canvas draws.
+*/
 function schemaData(tables, tenantName = DEFAULT_TENANT) {
 	const lookup = indexTables(tables, tenantName);
 	return {
@@ -1157,7 +1248,10 @@ function schemaData(tables, tenantName = DEFAULT_TENANT) {
 }
 //#endregion
 //#region src/create/schema.ts
-/** The columns a diagram shows before a table is expanded: keys, tenant and soft references. */
+/**
+* The columns a diagram shows before a table is expanded: keys, tenant and soft
+* references.
+*/
 function keyColumnsOf(table, softColumns = /* @__PURE__ */ new Set()) {
 	const keys = /* @__PURE__ */ new Set([
 		...table.primaryKey,
@@ -1167,13 +1261,16 @@ function keyColumnsOf(table, softColumns = /* @__PURE__ */ new Set()) {
 	]);
 	return table.columns.filter((column) => keys.has(column.name));
 }
-/** The column the tenant blocks key rows by, from the preset's tenant name; `null` without tenants. */
+/**
+* The column the tenant blocks key rows by, from the preset's tenant name;
+* `null` without tenants.
+*/
 function tenantColumnOf(preset) {
 	return preset.scope === "tenant" ? `${preset.tenantName}_id` : null;
 }
 /**
-* Every module's file creates this table to record the installed modules.
-* It holds no app data, so the diagram leaves it out.
+* Every module's file creates this table to record the installed modules. It
+* holds no app data, so the diagram leaves it out.
 */
 const BOOKKEEPING_TABLES = /* @__PURE__ */ new Set(["better_supabase.modules"]);
 const IDENT = String.raw`(?:"(?:[^"]|"")+"|[A-Za-z_][A-Za-z0-9_$]*)`;
@@ -1205,8 +1302,8 @@ function identList(list) {
 }
 /**
 * The SQL with comments removed and the inside of every single-quoted string
-* blanked, so a `create table` inside a string or a comment is not read and
-* the offsets still match the original text.
+* blanked, so a `create table` inside a string or a comment is not read and the
+* offsets still match the original text.
 */
 function codeOnly(sql) {
 	let out = "";
@@ -1238,7 +1335,10 @@ function codeOnly(sql) {
 	}
 	return out;
 }
-/** The text between the `(` at `open` and its matching `)`, or undefined when it never closes. */
+/**
+* The text between the `(` at `open` and its matching `)`, or undefined when it
+* never closes.
+*/
 function balanced(text, open) {
 	let depth = 0;
 	for (let index = open; index < text.length; index += 1) if (text[index] === "(") depth += 1;
@@ -1247,7 +1347,10 @@ function balanced(text, open) {
 		if (depth === 0) return text.slice(open + 1, index);
 	}
 }
-/** The comma-separated elements of `text` at depth 0, with `original` sliced at the same offsets. */
+/**
+* The comma-separated elements of `text` at depth 0, with `original` sliced at
+* the same offsets.
+*/
 function splitTopLevel(text, original = text) {
 	const parts = [];
 	let depth = 0;
@@ -1339,8 +1442,8 @@ function addColumn(draft, definition, original = definition) {
 	});
 }
 /**
-* Adds a table constraint (`primary key (...)`, `foreign key (...)
-* references ...`). Returns false when the element is not a constraint.
+* Adds a table constraint (`primary key (...)`, `foreign key (...) references
+* ...`). Returns false when the element is not a constraint.
 */
 function addConstraint(draft, element) {
 	const body = element.replace(CONSTRAINT_NAME, "");
@@ -1380,10 +1483,10 @@ function finish(draft, tenantColumn) {
 	};
 }
 /**
-* The tables in rendered module SQL: every `create table`, plus the columns
-* and foreign keys later `alter table ... add` statements give them. A
-* `create table` it can't read throws with the file and line, so a new SQL
-* shape fails the tests instead of dropping a table from the diagram.
+* The tables in rendered module SQL: every `create table`, plus the columns and
+* foreign keys later `alter table ... add` statements give them. A `create
+* table` it can't read throws with the file and line, so a new SQL shape fails
+* the tests instead of dropping a table from the diagram.
 */
 function parseSchema(files, options = {}) {
 	const drafts = /* @__PURE__ */ new Map();
@@ -1429,8 +1532,8 @@ function parseSchema(files, options = {}) {
 	return [...drafts.entries()].filter(([id]) => !BOOKKEEPING_TABLES.has(id)).map(([, draft]) => finish(draft, tenantColumn));
 }
 /**
-* The statements that shape one table, as written: its `create table` and
-* the `alter table` statements after it. Empty when no file creates it.
+* The statements that shape one table, as written: its `create table` and the
+* `alter table` statements after it. Empty when no file creates it.
 */
 function tableStatements(files, id) {
 	const statements = [];
@@ -1453,7 +1556,10 @@ function tableStatements(files, id) {
 	}
 	return statements;
 }
-/** The foreign keys between tables, one per pair, with the targets outside the schema named by id. */
+/**
+* The foreign keys between tables, one per pair, with the targets outside the
+* schema named by id.
+*/
 function schemaRelations(tables) {
 	const seen = /* @__PURE__ */ new Set();
 	return tables.flatMap((table) => table.foreignKeys.flatMap((key) => {
@@ -1470,18 +1576,35 @@ function schemaRelations(tables) {
 //#endregion
 //#region src/create/check.ts
 const messageOf = (error) => error instanceof Error ? error.message : String(error);
+/** The issue for a design that failed to parse, with its code and path. */
+function parseIssue(error) {
+	const { code, path } = error instanceof DesignParseError ? error : {
+		code: "invalid_design",
+		path: ""
+	};
+	return {
+		code,
+		path,
+		table: tableAt(path),
+		message: messageOf(error)
+	};
+}
+/** The app table or block module a design path is in, or `design`. */
+function tableAt(path) {
+	const [, key, name] = path.split("/");
+	return (key === "appTables" || key === "extraColumns") && name !== void 0 ? name.replaceAll("~1", "/").replaceAll("~0", "~") : "design";
+}
 async function designFrom(input) {
 	if (typeof input !== "string") return parseDesign(input);
 	const design = await designOf(input);
-	if (design === void 0) throw new TypeError(`design: "${input.slice(0, 40)}" is neither a design code nor a /create URL with &design=`);
+	if (design === void 0) throw new DesignParseError("invalid_code", "", `design: "${input.slice(0, 40)}" is neither a design code nor a /create URL with &design=`);
 	return design;
 }
 /**
-* Checks a design against a preset with every rule the canvas and
-* `sql sync` apply, so a server, an MCP tool and the canvas share one
-* answer. `input` is a design object, a design code or a `/create` URL with
-* `&design=`. It never throws for a bad design or preset: each problem is
-* an issue.
+* Checks a design against a preset with every rule the canvas and `sql sync`
+* apply, so a server, an MCP tool and the canvas share one answer. `input` is a
+* design object, a design code or a `/create` URL with `&design=`. It never
+* throws for a bad design or preset: each problem is an issue.
 */
 async function checkDesign(input, preset) {
 	let design;
@@ -1490,10 +1613,7 @@ async function checkDesign(input, preset) {
 	} catch (error) {
 		return {
 			ok: false,
-			issues: [{
-				table: "design",
-				message: messageOf(error)
-			}]
+			issues: [parseIssue(error)]
 		};
 	}
 	let resolvedPreset;
@@ -1503,6 +1623,8 @@ async function checkDesign(input, preset) {
 		return {
 			ok: false,
 			issues: [{
+				code: "invalid_preset",
+				path: "",
 				table: "preset",
 				message: messageOf(error)
 			}]
@@ -1512,6 +1634,8 @@ async function checkDesign(input, preset) {
 	if (resolved.conflicts.length > 0) return {
 		ok: false,
 		issues: resolved.conflicts.map((conflict) => ({
+			code: "preset_conflict",
+			path: "",
 			table: "preset",
 			message: `${conflict.block ?? conflict.field ?? "preset"}: ${conflict.reason}`
 		}))
@@ -1521,10 +1645,7 @@ async function checkDesign(input, preset) {
 	} catch (error) {
 		return {
 			ok: false,
-			issues: [{
-				table: "design",
-				message: messageOf(error)
-			}]
+			issues: [parseIssue(error)]
 		};
 	}
 	const data = schemaData(parseSchema(previewFiles(encodePreset(resolvedPreset)), { tenantColumn: tenantColumnOf(resolvedPreset) }), resolvedPreset.tenantName);
@@ -1537,20 +1658,19 @@ async function checkDesign(input, preset) {
 		return {
 			ok: true,
 			design,
+			fitsUrl: true,
 			code: await encodeDesign(design)
 		};
 	} catch (error) {
 		if (error instanceof DesignTooLongError) return {
 			ok: true,
 			design,
+			fitsUrl: false,
 			code: null
 		};
 		return {
 			ok: false,
-			issues: [{
-				table: "design",
-				message: messageOf(error)
-			}]
+			issues: [parseIssue(error)]
 		};
 	}
 }
@@ -1789,7 +1909,10 @@ const PLAIN = {
 function kindById(id) {
 	return BY_ID.get(id);
 }
-/** The kind a column's identity, reference or options make it, before its format and type. */
+/**
+* The kind a column's identity, reference or options make it, before its format
+* and type.
+*/
 function structuralKind(column) {
 	if (column.identity === true) return "autonumber";
 	if (column.references !== void 0) return column.references.block === void 0 && column.references.table === USERS$1 ? "person" : "reference";
@@ -1829,10 +1952,10 @@ function moneyColumns(name) {
 	};
 }
 /**
-* Sets an app table column to `kind`. Currency keeps money as two columns:
-* the column becomes `<name>_minor` (unless the name is taken) and a
-* `<name>_currency` text column of 3 characters joins it. Returns the
-* column's name after the change.
+* Sets an app table column to `kind`. Currency keeps money as two columns: the
+* column becomes `<name>_minor` (unless the name is taken) and a
+* `<name>_currency` text column of 3 characters joins it. Returns the column's
+* name after the change.
 */
 function setColumnKind(design, table, name, kind) {
 	const columns = design.appTables?.[table]?.columns ?? {};
@@ -1872,29 +1995,38 @@ function setColumnKind(design, table, name, kind) {
 /** The name the deploy gives its migration in `supabase_migrations`. */
 const MIGRATION_NAME = "better_supabase_blocks";
 /**
-* Why this preset can't be deployed, or `undefined` when it can. With
-* `access: "provider"` the preview renders a stand-in provider whose
-* functions no real project has.
+* Why this preset can't be deployed, or `undefined` when it can. With `access:
+* "provider"` the preview renders a stand-in provider whose functions no real
+* project has.
 */
 function deployBlocker(preset) {
 	return preset.access === "provider" ? "Bring your own authorization provider: its SQL comes from the provider, so deploy it with the CLI." : void 0;
 }
+/** A new deploy id: a random UUID. */
+function newDeployId() {
+	return crypto.randomUUID();
+}
+const DEPLOY_ID = /^[\w-]{1,64}$/u;
 /**
 * The SQL of one migration for the rendered files: every schema file, then
-* every data file, each in render order, which is the order `sql sync` and
-* `sql data` apply them. pgTAP tests stay out.
+* every data file, each in render order, which is the order `sql sync` and `sql
+* data` apply them. pgTAP tests stay out. Throws a `TypeError` when `id` holds
+* anything but letters, digits, `_` and `-`.
 */
-function deployQuery(files) {
+function deployQuery(files, options = {}) {
+	const { id } = options;
+	if (id !== void 0 && !DEPLOY_ID.test(id)) throw new TypeError("A deploy id holds 1 to 64 letters, digits, '_' or '-'.");
 	const schema = files.filter((file) => file.path.includes("/schemas/"));
 	const data = files.filter((file) => file.path.includes("/better-supabase-data/"));
-	return [...schema, ...data].map((file) => `-- ${file.path}\n${file.contents.trim()}\n`).join("\n");
+	const body = [...schema, ...data].map((file) => `-- ${file.path}\n${file.contents.trim()}\n`).join("\n");
+	return id === void 0 ? body : `-- better-supabase deploy ${id}\n\n${body}`;
 }
 /** A database password for a new project: 32 base64url characters. */
 function generatePassword() {
 	const bytes = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(24));
 	let binary = "";
 	for (const byte of bytes) binary += String.fromCodePoint(byte);
-	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/[=]+$/u, "");
 }
 /** The project name the dialog suggests: the preset's name, or `my-app`. */
 function suggestedProjectName(named) {
@@ -1925,11 +2057,11 @@ function record(history, previous, next) {
 	};
 }
 /**
-* An undo history. `drag` updates the value without a step while the
-* pointer moves; `commitDrag` records the whole drag as one step. `amend`
-* replaces the value in the current step, so a follow-up such as placing a
-* dropped block stays part of the step that added it. `reset` replaces the
-* value and clears the history, as loading a link does.
+* An undo history. `drag` updates the value without a step while the pointer
+* moves; `commitDrag` records the whole drag as one step. `amend` replaces the
+* value in the current step, so a follow-up such as placing a dropped block
+* stays part of the step that added it. `reset` replaces the value and clears
+* the history, as loading a link does.
 */
 function undoHistory(current, action) {
 	switch (action.type) {
@@ -1969,10 +2101,14 @@ function undoHistory(current, action) {
 //#endregion
 //#region src/create/sample-rows.ts
 const SAMPLE_ROW_COUNT = 8;
-/** The columns of `table` a `viewer` can't select: `access: "server"` ones for a member. */
+/**
+* The columns of `table` a `viewer` can't select: `access: "server"` and
+* encrypted ones for a member, who reads an encrypted column through
+* `<table>_reveal` instead.
+*/
 function hiddenColumns(table, viewer) {
 	if (viewer === "server") return [];
-	return Object.entries(table?.columns ?? {}).filter(([, column]) => column.access === "server").map(([key]) => key);
+	return Object.entries(table?.columns ?? {}).filter(([, column]) => column.access === "server" || column.encrypted === true).map(([key]) => key);
 }
 const USERS = "auth.users";
 const PEOPLE = [
@@ -2007,12 +2143,18 @@ const TITLE_COLUMNS = [
 function capitalized(value) {
 	return `${value.charAt(0).toUpperCase()}${value.slice(1)}`.replaceAll("_", " ");
 }
-/** The column a table's rows are named by: its subject title, then a likely name column. */
+/**
+* The column a table's rows are named by: its subject title, then a likely name
+* column.
+*/
 function titleColumnOf(table) {
 	const text = new Set(Object.entries(table.columns ?? {}).filter(([, column]) => column.type === "text" && column.format === void 0).map(([key]) => key));
 	return table.subject?.title ?? TITLE_COLUMNS.find((key) => text.has(key));
 }
-/** The name of row `index` of `table`, so a reference shows the row it points at. */
+/**
+* The name of row `index` of `table`, so a reference shows the row it points
+* at.
+*/
 function rowTitle(table, index) {
 	return `${capitalized(singular(table))} ${String(index + 1)}`;
 }
@@ -2098,12 +2240,12 @@ function sampleRows(design, name, count = 8, viewer = "server") {
 /** The module whose file holds the app's own tables. */
 const APP_TABLES_MODULE = "app-tables";
 /**
-* The migration that takes a project deployed from `base` to `next`, for
-* added tables and added columns only. The rendered app-table SQL is
-* idempotent (`create table if not exists`, `add column if not exists`,
-* `drop policy if exists`), so the migration is the re-rendered file.
-* Anything else, such as a rename, a retype, a changed default or a change
-* outside `appTables`, is refused so a deploy never guesses.
+* The migration that takes a project deployed from `base` to `next`, for added
+* tables and added columns only. The rendered app-table SQL is idempotent
+* (`create table if not exists`, `add column if not exists`, `drop policy if
+* exists`), so the migration is the re-rendered file. Anything else, such as a
+* rename, a retype, a changed default or a change outside `appTables`, is
+* refused so a deploy never guesses.
 */
 function migrationBetween(code, base, next) {
 	const changes = diffDesigns(base, next);
@@ -2133,4 +2275,4 @@ function migrationBetween(code, base, next) {
 	};
 }
 //#endregion
-export { APP_MODULE, COLUMN_KINDS, EMPTY_DESIGN, HISTORY_LIMIT, KIND_GROUPS, MIGRATION_NAME, APP_ON_DELETE_ACTIONS as ON_DELETE_ACTIONS, ROLLUP_AGGREGATES, SAMPLE_ROW_COUNT, addTable, appTableId, boundError, checkDesign, columnError, columnLabel, computedColumnRenamed, computedRows, computedTableRenamed, connect, dashboardUrl, defaultError, deleteColumn, deleteExtraColumn, deleteTable, deployBlocker, deployQuery, designIssues, duplicateTable, editTable, eventsColumnsEdited, filterColumns, fitted, fittedRollup, freeTableName, generatePassword, hiddenColumns, identifierError, initialHistory, isAppTable, isEmptyDesign, isRollupAggregate, keyColumnsOf, kindById, kindOf, lockedWithoutDefault, lookupSources, migrationBetween, moveTables, optionError, parseSchema, previewAccessProvider, previewFiles, prunedComputed, readableColumns, referenceFrom, renameColumn, renameTable, rollupColumns, rollupSources, sampleRows, schemaData, schemaRelations, setColumn, setColumnKind, setExtraColumn, setTableId, singular, subjectColumns, subjectColumnsEdited, subjectTypeError, suggestedProjectName, tableStatements, tableWithComputed, tableWithoutComputed, takesBounds, tenantColumnOf, tidy, undoHistory, updateTable, userConnection, withBounds, withDesign, withKind };
+export { APP_MODULE, COLUMN_KINDS, EMPTY_DESIGN, HISTORY_LIMIT, KIND_GROUPS, MIGRATION_NAME, APP_ON_DELETE_ACTIONS as ON_DELETE_ACTIONS, ROLLUP_AGGREGATES, SAMPLE_ROW_COUNT, addTable, appTableId, boundError, checkDesign, columnError, columnLabel, computedColumnRenamed, computedRows, computedTableRenamed, connect, dashboardUrl, defaultError, deleteColumn, deleteExtraColumn, deleteTable, deployBlocker, deployQuery, designIssues, duplicateTable, editTable, encryptable, eventsColumnsEdited, filterColumns, fitted, fittedRollup, freeTableName, generatePassword, hiddenColumns, identifierError, initialHistory, isAppTable, isEmptyDesign, isRollupAggregate, keyColumnsOf, kindById, kindOf, lockedWithoutDefault, lookupSources, migrationBetween, moveTables, newDeployId, optionError, parseSchema, previewAccessProvider, previewFiles, prunedComputed, readableColumns, referenceFrom, renameColumn, renameTable, rollupColumns, rollupSources, sampleRows, schemaData, schemaRelations, setColumn, setColumnKind, setExtraColumn, setTableId, singular, subjectColumns, subjectColumnsEdited, subjectTypeError, suggestedProjectName, tableStatements, tableWithComputed, tableWithoutComputed, takesBounds, tenantColumnOf, tidy, undoHistory, updateTable, userConnection, withBounds, withDesign, withKind };