better-supabase 0.12.0 → 0.14.0

package/dist/function-contract-vPqwt1j4.d.ts

@@ -0,0 +1,27 @@
+import { t as StandardSchemaV1 } from "./standard-DbQsD2xZ.js";
+//#region src/core/function-contract.d.ts
+/** What a typed Edge Function takes and returns, as the caller sees them. */
+interface FunctionContract<In = unknown, Out = unknown> {
+  readonly input: In;
+  readonly output: Out;
+}
+/**
+ * The key `defineFunction` stores its schemas under, so `better-supabase/spec`
+ * can read them without importing `edge`.
+ */
+declare const FUNCTION_DESCRIPTOR: unique symbol;
+/**
+ * The schemas and docs of a `defineFunction` handler, kept on the handler for
+ * spec generation.
+ */
+interface FunctionDescriptor {
+  readonly input: StandardSchemaV1;
+  readonly output?: StandardSchemaV1;
+  readonly summary?: string;
+}
+/** A handler that carries a `FunctionDescriptor`. */
+interface DescribedFunction {
+  readonly [FUNCTION_DESCRIPTOR]: FunctionDescriptor;
+}
+//#endregion
+export { FunctionContract as n, DescribedFunction as t };

package/dist/gateway-DI8dbOml.d.ts

@@ -0,0 +1,115 @@
+/// <reference lib="esnext.temporal" />
+import { b as DbError } from "./result-C6jDfedy.js";
+import { g as JobHandler } from "./types-CGUDoF5I.js";
+import { g as AiModelInput, i as AiChat } from "./ai-chat-DBxEz3o1.js";
+import { a as Usage, c as UsageEntry, h as UsageStatus } from "./usage-DBcVGqnr.js";
+import { LanguageModelUsage } from "ai";
+//#region src/ai-sdk/gateway.d.ts
+/** Token counts and the gateway's cost of one generation. */
+interface AiUsage {
+  readonly inputTokens: number;
+  readonly outputTokens: number;
+  readonly totalTokens: number;
+  readonly cachedInputTokens: number;
+  readonly reasoningTokens: number;
+  /**
+   * The gateway's generation id, for `costBackfill` when the cost isn't known
+   * yet.
+   */
+  readonly generationId: string | undefined;
+  /** The cost in millionths of a US dollar, when the gateway reported it. */
+  readonly costMicroUsd: number | undefined;
+}
+/** What `usageOf` reads: a `streamText` or `generateText` result, awaited. */
+interface UsageSource {
+  readonly totalUsage?: Partial<LanguageModelUsage> | undefined;
+  readonly usage?: Partial<LanguageModelUsage> | undefined;
+  readonly providerMetadata?: unknown;
+}
+/** The usage of a finished generation, with the gateway's cost when it has one. */
+declare function usageOf(source: UsageSource): AiUsage;
+/**
+ * The usage meters `usageEntries` writes, by default `ai.input_tokens` and
+ * `ai.output_tokens`.
+ */
+interface AiUsageMeters {
+  readonly input?: string;
+  readonly output?: string;
+  /** Micro-USD; left out unless named. */
+  readonly cost?: string;
+}
+/** The entries to pass to `usage.recordMany` for a generation. */
+declare function usageEntries(usage: AiUsage, meters?: AiUsageMeters): UsageEntry[];
+/**
+ * A 429 Problem Details response for a quota or rate limit: pass the
+ * `quota_exceeded` or `rate_limited` error a block returned, or the
+ * `UsageStatus` of a meter with nothing left. It carries `Retry-After`.
+ */
+declare function problem429(decision: DbError | UsageStatus, now?: Temporal.Instant): Response;
+/**
+ * The quota check `createAssistant` runs before a generation: the error when
+ * `meter` has nothing left for the tenant, otherwise `undefined`.
+ */
+declare function usageQuota(usage: Pick<Usage, "current">, meter: string): (organizationId: string) => Promise<DbError | undefined>;
+/** The AI Gateway calls the job handlers make (`gateway` from `ai`). */
+interface GatewayClient {
+  getGenerationInfo(params: {
+    id: string;
+  }): PromiseLike<{
+    readonly totalCost: number;
+    readonly model?: string;
+    readonly promptTokens?: number;
+    readonly completionTokens?: number;
+  }>;
+  getAvailableModels(): PromiseLike<{
+    readonly models: readonly GatewayModelEntry[];
+  }>;
+}
+/** One model of `gateway.getAvailableModels()`. */
+interface GatewayModelEntry {
+  readonly id: string;
+  readonly name: string;
+  readonly description?: string | null;
+  readonly pricing?: Readonly<Record<string, string | undefined>> | null;
+  readonly modelType?: string | null;
+}
+/** The payload of a cost backfill job. */
+interface CostBackfillPayload {
+  readonly generationId: string;
+  /** With `usage` and `meter`, the cost is also recorded on the tenant's meter. */
+  readonly organizationId?: string;
+}
+interface CostBackfillOptions {
+  /** The chat block with a service transport. */
+  readonly chats: Pick<AiChat, "runs">;
+  readonly gateway: Pick<GatewayClient, "getGenerationInfo">;
+  readonly usage?: Pick<Usage, "record">;
+  /** The micro-USD meter, such as `ai.cost`. */
+  readonly meter?: string;
+}
+/**
+ * A job handler that looks up a generation's cost in the AI Gateway and writes
+ * it to the run (`runs.setCost`). Enqueue it when `usageOf` found no cost; it
+ * throws so the queue retries while the gateway doesn't know it yet.
+ */
+declare function costBackfill(options: CostBackfillOptions): JobHandler<CostBackfillPayload>;
+interface ModelCatalogRefreshOptions {
+  /** The chat block with a service transport. */
+  readonly chats: Pick<AiChat, "models">;
+  readonly gateway: Pick<GatewayClient, "getAvailableModels">;
+  /** Keeps a model; defaults to language models. */
+  readonly filter?: (model: GatewayModelEntry) => boolean;
+  /** Plans per model id, for models only some plans may use. */
+  readonly plans?: (model: GatewayModelEntry) => readonly string[] | undefined;
+  /** Deletes catalog rows the gateway no longer lists. Defaults to false. */
+  readonly prune?: boolean;
+}
+/** The catalog row for a gateway model. */
+declare function modelInputOf(model: GatewayModelEntry, plans?: readonly string[]): AiModelInput;
+/**
+ * A job handler that copies the AI Gateway's model list into the chat block's
+ * catalog (`models.upsert`); schedule it daily.
+ */
+declare function modelCatalogRefresh(options: ModelCatalogRefreshOptions): JobHandler<unknown>;
+//#endregion
+export { GatewayClient as a, UsageSource as c, modelInputOf as d, problem429 as f, usageQuota as h, CostBackfillPayload as i, costBackfill as l, usageOf as m, AiUsageMeters as n, GatewayModelEntry as o, usageEntries as p, CostBackfillOptions as r, ModelCatalogRefreshOptions as s, AiUsage as t, modelCatalogRefresh as u };

package/dist/gateway-options-BlVCqgb8.d.ts

@@ -0,0 +1,29 @@
+import { JSONValue } from "ai";
+//#region src/ai-sdk/gateway-options.d.ts
+/** Who a generation is for, as the AI Gateway reports spend. */
+interface GatewayContext {
+  readonly userId?: string;
+  readonly organizationId?: string;
+  readonly chatId?: string;
+  /** What the generation is for, such as `chat` or `summary`. */
+  readonly feature?: string;
+  /** The app's own tags, after the tenant, chat and feature tags. */
+  readonly tags?: readonly string[];
+}
+/** The AI Gateway's own options (`providerOptions.gateway`). */
+type GatewayOptions = {
+  readonly [key: string]: JSONValue | undefined;
+};
+/**
+ * `providerOptions` for `streamText` and agents that attribute the spend in the
+ * AI Gateway: `user` is the user id, and `tags` name the tenant, the chat and
+ * the feature, then the context's own `tags`. `extra` adds gateway options such
+ * as `order` or `zeroDataRetention`; its `tags` are appended. `user` comes from
+ * `context.userId` only: an `extra.user` is dropped, so a request body or a
+ * model can't change whom the spend is attributed to.
+ */
+declare function gatewayOptions(context: GatewayContext, extra?: GatewayOptions): {
+  readonly gateway: GatewayOptions;
+};
+//#endregion
+export { GatewayOptions as n, gatewayOptions as r, GatewayContext as t };

package/dist/gateway-options-Cl74B7k6.js

@@ -0,0 +1,27 @@
+//#region src/ai-sdk/gateway-options.ts
+/**
+* `providerOptions` for `streamText` and agents that attribute the spend in the
+* AI Gateway: `user` is the user id, and `tags` name the tenant, the chat and
+* the feature, then the context's own `tags`. `extra` adds gateway options such
+* as `order` or `zeroDataRetention`; its `tags` are appended. `user` comes from
+* `context.userId` only: an `extra.user` is dropped, so a request body or a
+* model can't change whom the spend is attributed to.
+*/
+function gatewayOptions(context, extra = {}) {
+	const tags = [];
+	if (context.organizationId !== void 0) tags.push(`org:${context.organizationId}`);
+	if (context.chatId !== void 0) tags.push(`chat:${context.chatId}`);
+	if (context.feature !== void 0) tags.push(`feature:${context.feature}`);
+	if (context.tags !== void 0) tags.push(...context.tags);
+	const more = extra["tags"];
+	if (Array.isArray(more)) {
+		for (const tag of more) if (typeof tag === "string") tags.push(tag);
+	}
+	return { gateway: {
+		...Object.fromEntries(Object.entries(extra).filter(([key]) => key !== "user" && key !== "tags")),
+		...context.userId === void 0 ? {} : { user: context.userId },
+		...tags.length === 0 ? {} : { tags }
+	} };
+}
+//#endregion
+export { gatewayOptions as t };

package/dist/graph-B4eubUQG.js

@@ -0,0 +1,365 @@
+import { c as optionalTemporal } from "./temporal-DLZlWbOi.js";
+import { i as checkFilterQuery, t as FILTER_OPERATORS } from "./filter-query-D4ZSwbcJ.js";
+import { t as evaluateFilterQuery } from "./filter-evaluate-CRDXv0Dl.js";
+//#region src/blocks/workflow-builder/graph.ts
+/** Kept local: the static executor runs this file inside the workflow VM. */
+const isGraphRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const WORKFLOW_NODE_KINDS = [
+	"trigger",
+	"step",
+	"sleep",
+	"approval",
+	"condition"
+];
+const OPERATORS = [
+	"equals",
+	"notEquals",
+	"exists",
+	"truthy",
+	"greaterThan",
+	"lessThan",
+	"contains"
+];
+const DURATION = /^(\d+)(ms|s|m|h|d)$/;
+const UNIT_MS = /* @__PURE__ */ new Map([
+	["ms", 1],
+	["s", 1e3],
+	["m", 6e4],
+	["h", 36e5],
+	["d", 864e5]
+]);
+/** A sleep duration in milliseconds; `undefined` when `value` isn't one. */
+function durationMs(value) {
+	if (typeof value === "number") return Number.isFinite(value) && value > 0 ? Math.round(value) : void 0;
+	if (typeof value !== "string") return;
+	const match = DURATION.exec(value.trim());
+	if (match === null) return;
+	const factor = UNIT_MS.get(match[2] ?? "");
+	const ms = Number(match[1]) * (factor ?? 0);
+	return ms > 0 ? ms : void 0;
+}
+const CONDITION_PATH = /^(input|results|subject)(\.[^.]+)*$/;
+const FILTER_LIMITS = {
+	maxDepth: 4,
+	maxRules: 50,
+	maxValueLength: 1e4,
+	maxValues: 100
+};
+const MAX_FILTER_FIELDS = 100;
+const isFilterType = (value) => typeof value === "string" && Object.hasOwn(FILTER_OPERATORS, value);
+function filterFieldOf(value, pattern) {
+	if (!isGraphRecord(value)) return;
+	const { id, type, columnType } = value;
+	if (typeof id !== "string" || !pattern.test(id) || !isFilterType(type) || columnType !== void 0 && typeof columnType !== "string") return;
+	return {
+		id,
+		type,
+		...columnType === void 0 ? {} : { columnType }
+	};
+}
+const columnTypeOf = (field) => field.columnType ?? (field.type === "date" ? "timestamptz" : "text");
+function fieldInfoOf(field) {
+	return {
+		id: field.id,
+		type: field.type,
+		column: field.id,
+		columnMeta: {
+			db: field.id,
+			type: columnTypeOf(field),
+			nullable: true,
+			hasDefault: false
+		},
+		label: field.id,
+		operators: FILTER_OPERATORS[field.type]
+	};
+}
+/**
+* `{ filter, fields }` as a checked filter condition whose field ids match
+* `pattern`; `undefined` when it isn't one or the tree has no finished rule.
+*/
+function filterConditionOf(value, pattern = CONDITION_PATH) {
+	if (!isGraphRecord(value) || !Array.isArray(value["fields"]) || value["fields"].length > MAX_FILTER_FIELDS) return;
+	const fields = [];
+	for (const entry of value["fields"]) {
+		const field = filterFieldOf(entry, pattern);
+		if (field === void 0) return;
+		fields.push(field);
+	}
+	const issues = [];
+	const filter = checkFilterQuery(value["filter"], fields.map(fieldInfoOf), FILTER_LIMITS, issues);
+	return filter === void 0 || issues.length > 0 ? void 0 : {
+		filter,
+		fields
+	};
+}
+/**
+* Whether a filter condition holds for `record`. Relative dates resolve against
+* `Date.now()`, which the workflow runtime keeps deterministic.
+*/
+function matchesFilter(condition, record) {
+	const T = optionalTemporal();
+	return evaluateFilterQuery(condition.filter, record, condition.fields.map((field) => ({
+		id: field.id,
+		type: field.type,
+		column: field.id,
+		columnMeta: {
+			type: columnTypeOf(field),
+			nullable: true
+		}
+	})), T === void 0 ? {} : { now: T.Instant.fromEpochMilliseconds(Date.now()) }).matched;
+}
+const EVENT_PATH = /^(type|tenant|payload)(\.[^.]+)*$/;
+/**
+* Whether an event trigger's `config.when` (a `WorkflowFilterCondition` over
+* `type`, `tenant` and `payload...`) lets `event` start a run. True without a
+* `when`; false when `when` isn't a valid one.
+*/
+function triggerMatches(config, event) {
+	const when = config["when"];
+	if (when === void 0) return true;
+	const condition = filterConditionOf(when, EVENT_PATH);
+	return condition !== void 0 && matchesFilter(condition, {
+		type: event.type,
+		tenant: event.tenant ?? null,
+		payload: event.payload ?? {}
+	});
+}
+/**
+* Why an event trigger's `config.when` can't be used, or `undefined` when it
+* can.
+*/
+function triggerWhenProblem(config) {
+	const when = config["when"];
+	return when === void 0 || filterConditionOf(when, EVENT_PATH) !== void 0 ? void 0 : "config.when is a { filter, fields } filter with at least one finished rule over type, tenant or payload fields";
+}
+/** The node's condition, or `undefined` when its config isn't one. */
+function conditionOf(node) {
+	const config = node.config;
+	if (config === void 0) return;
+	if (config["filter"] !== void 0) return filterConditionOf(config);
+	const path = config["path"];
+	const op = OPERATORS.find((known) => known === config["op"]);
+	if (typeof path !== "string" || op === void 0) return;
+	if (!CONDITION_PATH.test(path)) return;
+	return {
+		path,
+		op,
+		value: config["value"]
+	};
+}
+/** Reads `path` (`input...`, `results...` or `subject...`) from the run's data. */
+function readPath(scope, path) {
+	const [root, ...rest] = path.split(".");
+	let value = root === "input" ? scope.input : root === "subject" ? scope.subject : scope.results;
+	for (const key of rest) if (Array.isArray(value)) value = value[Number(key)];
+	else if (isGraphRecord(value)) value = value[key];
+	else return;
+	return value;
+}
+/** Whether `condition` holds for the run's data. */
+function evaluateCondition(condition, scope) {
+	if ("filter" in condition) return matchesFilter(condition, scope);
+	const actual = readPath(scope, condition.path);
+	const expected = condition.value;
+	switch (condition.op) {
+		case "equals": return JSON.stringify(actual) === JSON.stringify(expected);
+		case "notEquals": return JSON.stringify(actual) !== JSON.stringify(expected);
+		case "exists": return actual !== void 0 && actual !== null;
+		case "truthy": return Boolean(actual);
+		case "greaterThan": return typeof actual === "number" && typeof expected === "number" && actual > expected;
+		case "lessThan": return typeof actual === "number" && typeof expected === "number" && actual < expected;
+		case "contains":
+			if (typeof actual === "string") return typeof expected === "string" && actual.includes(expected);
+			return Array.isArray(actual) && actual.some((item) => JSON.stringify(item) === JSON.stringify(expected));
+		default: {
+			const unknown = condition.op;
+			throw new TypeError(`workflow-builder: unknown operator "${String(unknown)}"`);
+		}
+	}
+}
+/** Whether an approval payload approves: anything but `{ approved: false }`. */
+const approved = (payload) => !(isGraphRecord(payload) && payload["approved"] === false);
+/**
+* The nodes in an order that runs every source before its targets, keeping the
+* graph's order among independent nodes; `undefined` when edges form a cycle.
+*/
+function topologicalOrder(graph) {
+	const indegree = new Map(graph.nodes.map((node) => [node.id, 0]));
+	const targets = /* @__PURE__ */ new Map();
+	for (const edge of graph.edges) {
+		if (!indegree.has(edge.source) || !indegree.has(edge.target)) continue;
+		indegree.set(edge.target, (indegree.get(edge.target) ?? 0) + 1);
+		targets.set(edge.source, [...targets.get(edge.source) ?? [], edge.target]);
+	}
+	const byId = new Map(graph.nodes.map((node) => [node.id, node]));
+	const order = [];
+	const ready = graph.nodes.filter((node) => indegree.get(node.id) === 0);
+	while (ready.length > 0) {
+		const node = ready.shift();
+		if (node === void 0) break;
+		order.push(node);
+		for (const target of targets.get(node.id) ?? []) {
+			const left = (indegree.get(target) ?? 0) - 1;
+			indegree.set(target, left);
+			const next = byId.get(target);
+			if (left === 0 && next !== void 0) ready.push(next);
+		}
+	}
+	return order.length === graph.nodes.length ? order : void 0;
+}
+/** `value` as a node, or `undefined` when its id or kind is missing. */
+function nodeOf(value) {
+	if (!isGraphRecord(value)) return;
+	const id = value["id"];
+	const kind = WORKFLOW_NODE_KINDS.find((known) => known === value["kind"]);
+	if (typeof id !== "string" || kind === void 0) return;
+	const { label, step, config, position } = value;
+	return {
+		id,
+		kind,
+		...typeof label === "string" ? { label } : {},
+		...typeof step === "string" ? { step } : {},
+		...isGraphRecord(config) ? { config } : {},
+		...isGraphRecord(position) && typeof position["x"] === "number" && typeof position["y"] === "number" ? { position: {
+			x: position["x"],
+			y: position["y"]
+		} } : {}
+	};
+}
+/** `value` as an edge, or `undefined` when its ends are missing. */
+function edgeOf(value) {
+	if (!isGraphRecord(value)) return;
+	const { id, source, target, branch } = value;
+	if (typeof source !== "string" || typeof target !== "string") return;
+	return {
+		id: typeof id === "string" ? id : `${source}->${target}`,
+		source,
+		target,
+		...branch === "true" || branch === "false" ? { branch } : {}
+	};
+}
+/**
+* Node ids reach generated source and SQL; `validate_workflow_graph` uses the
+* same pattern.
+*/
+const NODE_ID = /^[A-Za-z0-9_-]{1,100}$/;
+const BRANCHING = /* @__PURE__ */ new Set(["condition", "approval"]);
+/**
+* Problems that keep `graph` from running, as messages; empty when it can. Pass
+* the step library's names to check that every step node uses one (`publish`
+* checks it again in SQL).
+*/
+function validateGraph(graph, steps) {
+	if (!isGraphRecord(graph) || !Array.isArray(graph["nodes"]) || !Array.isArray(graph["edges"])) return ["A graph has a nodes array and an edges array"];
+	const errors = [];
+	const library = steps === void 0 ? void 0 : new Set(steps);
+	const nodes = /* @__PURE__ */ new Map();
+	let triggers = 0;
+	for (const value of graph["nodes"]) {
+		const id = isGraphRecord(value) ? value["id"] : void 0;
+		if (!isGraphRecord(value) || typeof id !== "string" || !NODE_ID.test(id)) {
+			errors.push("Every node has an id of 1 to 100 letters, digits, underscores or hyphens");
+			continue;
+		}
+		if (nodes.has(id)) errors.push(`Node ${id} appears twice`);
+		const node = nodeOf(value);
+		if (node === void 0) {
+			errors.push(`Node ${id} has an unknown kind`);
+			continue;
+		}
+		nodes.set(id, node);
+		switch (node.kind) {
+			case "trigger":
+				triggers += 1;
+				break;
+			case "step":
+				if (typeof node.step !== "string" || node.step.length === 0) errors.push(`Node ${id} names no step`);
+				else if (library !== void 0 && !library.has(node.step)) errors.push(`Node ${id} uses step ${node.step}, which is not in the step library`);
+				break;
+			case "sleep":
+				if (durationMs(node.config?.["duration"]) === void 0) errors.push(`Node ${id} has no valid duration`);
+				break;
+			case "approval": break;
+			case "condition":
+				if (conditionOf(node) === void 0) errors.push(`Node ${id} has no valid condition`);
+				break;
+			default: {
+				const unknown = node.kind;
+				errors.push(`Node ${id} has an unknown kind ${String(unknown)}`);
+			}
+		}
+	}
+	if (triggers === 0) errors.push("A graph has at least one trigger node");
+	const edgeIds = /* @__PURE__ */ new Set();
+	const edges = [];
+	for (const value of graph["edges"]) {
+		const id = isGraphRecord(value) && typeof value["id"] === "string" ? value["id"] : "?";
+		if (!isGraphRecord(value) || typeof value["source"] !== "string" || typeof value["target"] !== "string" || !nodes.has(value["source"]) || !nodes.has(value["target"])) {
+			errors.push(`Edge ${id} joins a node that does not exist`);
+			continue;
+		}
+		if (edgeIds.has(id)) errors.push(`Edge ${id} appears twice`);
+		edgeIds.add(id);
+		const source = nodes.get(value["source"]);
+		const target = nodes.get(value["target"]);
+		const branch = value["branch"];
+		if (branch !== void 0) {
+			if (branch !== "true" && branch !== "false") errors.push(`Edge ${id} has a branch other than "true" or "false"`);
+			else if (source !== void 0 && !BRANCHING.has(source.kind)) errors.push(`Edge ${id} branches from a ${source.kind} node`);
+		}
+		if (target?.kind === "trigger") errors.push(`Edge ${id} leads into the trigger node`);
+		edges.push({
+			id,
+			source: value["source"],
+			target: value["target"]
+		});
+	}
+	if (errors.length === 0 && topologicalOrder({
+		nodes: [...nodes.values()],
+		edges
+	}) === void 0) errors.push("The graph has a cycle");
+	return errors;
+}
+const nodeContent = (node) => JSON.stringify([
+	node.kind,
+	node.step,
+	node.label,
+	node.config
+]);
+const edgeKey = (edge) => `${edge.source}->${edge.target}${edge.branch === void 0 ? "" : `:${edge.branch}`}`;
+/** What changed from `before` to `after`, by node id and by edge ends. */
+function diffGraphs(before, after) {
+	const old = new Map(before.nodes.map((node) => [node.id, node]));
+	const now = new Map(after.nodes.map((node) => [node.id, node]));
+	const oldEdges = new Set(before.edges.map(edgeKey));
+	const newEdges = new Set(after.edges.map(edgeKey));
+	return {
+		nodes: {
+			added: [...now.keys()].filter((id) => !old.has(id)),
+			removed: [...old.keys()].filter((id) => !now.has(id)),
+			changed: [...now.values()].filter((node) => {
+				const previous = old.get(node.id);
+				return previous !== void 0 && nodeContent(previous) !== nodeContent(node);
+			}).map((node) => node.id)
+		},
+		edges: {
+			added: [...newEdges].filter((key) => !oldEdges.has(key)),
+			removed: [...oldEdges].filter((key) => !newEdges.has(key))
+		}
+	};
+}
+/** `value` as a graph, or an empty one when it isn't shaped like one. */
+function graphOf(value) {
+	if (!isGraphRecord(value)) return {
+		nodes: [],
+		edges: []
+	};
+	const nodes = Array.isArray(value["nodes"]) ? value["nodes"] : [];
+	const edges = Array.isArray(value["edges"]) ? value["edges"] : [];
+	return {
+		nodes: nodes.flatMap((node) => nodeOf(node) ?? []),
+		edges: edges.flatMap((edge) => edgeOf(edge) ?? [])
+	};
+}
+//#endregion
+export { evaluateCondition as a, isGraphRecord as c, triggerMatches as d, triggerWhenProblem as f, durationMs as i, matchesFilter as l, conditionOf as n, filterConditionOf as o, validateGraph as p, diffGraphs as r, graphOf as s, approved as t, topologicalOrder as u };

package/dist/guest-actions-1T1DeS5Y.d.ts

@@ -0,0 +1,5 @@
+//#region src/core/guest-actions.d.ts
+/** What a guest grant allows on a record. */
+type GuestAction = "read" | "comment" | "upload";
+//#endregion
+export { GuestAction as t };

package/dist/guest-actions-B7zdhfnh.js

@@ -0,0 +1,9 @@
+//#region src/core/guest-actions.ts
+/** Every guest action, in the order the grants store them. */
+const GUEST_ACTIONS = [
+	"read",
+	"comment",
+	"upload"
+];
+//#endregion
+export { GUEST_ACTIONS as t };

package/dist/h3/index.d.ts

@@ -1,5 +1,5 @@
-import { n as RouteGuardOptions } from "../refusal-C7geIBRl.js";
-import { t as Validated } from "../shared-DDSjEGDR.js";
+import { n as RouteGuardOptions } from "../refusal-efy5bZMd.js";
+import { t as Validated } from "../shared-CRRfQAKG.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 //#region src/bridges/h3.d.ts
 /** The part of an H3 2 event the bridge reads and writes. */
@@ -11,7 +11,10 @@ interface H3Event<Context extends object> {
       readonly env?: unknown;
     } | undefined;
   };
-  /** The status and headers a handler set with `event.res`, kept on a plain return value. */
+  /**
+   * The status and headers a handler set with `event.res`, kept on a plain
+   * return value.
+   */
   readonly res?: {
     readonly status?: number | undefined;
     readonly statusText?: string | undefined;
@@ -29,25 +32,29 @@ interface ToH3Options<Context extends object> {
 /** H3 2 middleware, typed structurally so the package does not import `h3`. */
 type H3Middleware<Context extends object> = (event: H3Event<Context>, next: () => unknown) => Promise<Response>;
 /**
- * Runs an entry array as H3 2 middleware (`app.use(...)`, Nitro and Nuxt
- * server middleware). Every contributed key lands on `event.context`, and
- * the handler's value comes back as a `Response` (JSON for plain values)
- * so response-phase entries can add headers and cookies.
+ * Runs an entry array as H3 2 middleware (`app.use(...)`, Nitro and Nuxt server
+ * middleware). Every contributed key lands on `event.context`, and the
+ * handler's value comes back as a `Response` (JSON for plain values) so
+ * response-phase entries can add headers and cookies.
  *
  * ```ts
- * app.use(toH3([withBetterSupabase(server)]))
- * app.get('/notes', (event) => event.context.db.notes.findMany().orThrow())
+ * app.use(toH3([withBetterSupabase(server)]));
+ * app.get("/notes", (event) =>
+ *   event.context.db.notes.findMany().orThrow(),
+ * );
  * ```
  */
 export declare function toH3<const Entries extends readonly AnyEntry[]>(entries: Entries & Validated<Entries>, options?: ToH3Options<Partial<Contributions<Entries>>>): H3Middleware<Partial<Contributions<Entries>>>;
 //#endregion
 //#region src/h3/guard.d.ts
 /**
- * Route middleware that refuses callers outside `options`: Problem Details,
- * or a redirect to `signIn` or `mfa`. Runs after `toH3(...)`.
+ * Route middleware that refuses callers outside `options`: Problem Details, or
+ * a redirect to `signIn` or `mfa`. Runs after `toH3(...)`.
  *
  * ```ts
- * app.get('/admin', handler, { middleware: [guard({ roles: ['admin'] })] })
+ * app.get("/admin", handler, {
+ *   middleware: [guard({ roles: ["admin"] })],
+ * });
  * ```
  */
 export declare function guard(options?: RouteGuardOptions): (event: H3Event<object>, next: () => unknown) => Promise<unknown>;