better-supabase 0.12.0 → 0.14.0

package/dist/plugin-Ar5546xh.d.ts

@@ -0,0 +1,202 @@
+/// <reference lib="esnext.temporal" />
+import { T as ErrorMapper } from "./result-C6jDfedy.js";
+import { N as AnyModels, _ as MutationOp, g as MutationKind, h as MutationIntent, ht as TableMeta, lt as SchemaMeta, pt as TableFlags, r as Executor, v as Operation } from "./executor-CPyrQdjh.js";
+//#region src/core/plugin.d.ts
+/** Who is making the request. */
+interface Actor {
+  readonly id: string;
+  readonly kind: "user" | "service" | "anon";
+  readonly role?: string;
+  readonly email?: string;
+  /** The admin acting as this user (the `act` claim's `sub`). */
+  readonly impersonator?: string;
+}
+/**
+ * Per-connection context. Server adapters fill it from the verified JWT;
+ * plugins read it (`tenant()` reads `tenant`, `actor()` reads `actor`).
+ */
+interface RequestContext {
+  readonly actor?: Actor;
+  readonly tenant?: string;
+  readonly claims?: Readonly<Record<string, unknown>>;
+  readonly [key: string]: unknown;
+}
+/** Plugin-specific per-call options (`withDeleted`, `hard`, ...). */
+type CallOptions = Readonly<Record<string, unknown>>;
+interface HookArgs {
+  readonly table: TableMeta;
+  readonly schema: SchemaMeta;
+  readonly context: RequestContext;
+  readonly options: CallOptions;
+  readonly now: () => Temporal.Instant;
+  /**
+   * The caller's `signal`, when it passed one. Hooks that do I/O should honor
+   * it.
+   */
+  readonly signal?: AbortSignal;
+}
+interface MutationEvent {
+  readonly table: TableMeta;
+  /** The statement that ran. */
+  readonly kind: MutationKind;
+  /**
+   * What the caller asked for; differs from `kind` when a plugin rewrote the
+   * mutation.
+   */
+  readonly intent?: MutationIntent;
+  /**
+   * App-cased rows returned by the mutation. A copy: changing it never changes
+   * the result.
+   */
+  readonly rows: readonly Readonly<Record<string, unknown>>[];
+  /**
+   * App-cased primary keys of the changed rows, when they are known: from the
+   * returned rows, or from a `where` on the primary key when nothing is
+   * returned (soft deletes, `returning: false`).
+   */
+  readonly keys?: readonly Readonly<Record<string, unknown>>[];
+  /**
+   * The tenant of the write: `context.tenant`, which `tenant()` fills from the
+   * claims.
+   */
+  readonly tenant?: string;
+  readonly context: RequestContext;
+}
+/** Runtime handle passed to `Plugin.repository`. */
+interface RepositoryApi {
+  readonly table: TableMeta;
+  readonly base: Readonly<Record<string, (...args: never[]) => unknown>>;
+}
+/**
+ * Type-level repository extension, applied per table. Implement it as an
+ * interface that reads `this['M']` and `this['T']`:
+ *
+ * ```ts
+ * interface RestoreExtension extends RepositoryExtension {
+ *   readonly methods: HasFlag<
+ *     this["M"],
+ *     this["T"],
+ *     "softDelete"
+ *   > extends true
+ *     ? { restore(id: string): AsyncResult<unknown> }
+ *     : unknown;
+ * }
+ * ```
+ */
+interface RepositoryExtension {
+  readonly M: AnyModels;
+  readonly T: string;
+  readonly methods: unknown;
+  readonly findArgs: unknown;
+  readonly deleteArgs: unknown;
+}
+/**
+ * Applies the extensions in `E` to table `T`. `E` is a tuple of extensions (as
+ * built by `use()`) or a single extension. Each is applied on its own because
+ * indexing an intersection of `this`-typed interfaces overflows TS < 7.
+ */
+/** Default extension of plugins that add no repository types. */
+interface NoExtension extends RepositoryExtension {
+  readonly "~none": true;
+}
+type ApplyExtension<E, M extends AnyModels, T extends keyof M, K extends "methods" | "findArgs" | "deleteArgs"> = E extends readonly [infer Head, ...infer Rest] ? ApplyOne<Head, M, T, K> & ApplyExtension<Rest, M, T, K> : ApplyOne<E, M, T, K>;
+type ApplyOne<E, M extends AnyModels, T extends keyof M, K extends "methods" | "findArgs" | "deleteArgs"> = E extends RepositoryExtension ? (E & {
+  readonly M: M;
+  readonly T: T;
+})[K] : unknown;
+/** True when table `T` has the flag set by codegen. */
+type HasFlag<M, T, F extends string> = M extends AnyModels ? T extends keyof M ? M[T]["Flags"] extends { readonly [K in F]: unknown; } ? true : false : false : false;
+/** A parameter a plugin adds to the operations of a table in the API spec. */
+interface DescribeParameter {
+  readonly name: string;
+  readonly in: "query" | "header" | "cookie";
+  readonly required?: boolean;
+  readonly description?: string;
+  /** JSON Schema 2020-12. */
+  readonly schema: Readonly<Record<string, unknown>>;
+}
+/**
+ * What `Plugin.describe` can change in the API model `defineApi` builds. Every
+ * method ignores tables and columns the API does not serve.
+ */
+interface PluginDescribeApi {
+  readonly schema: SchemaMeta;
+  /** Prefix of generated `x-` fields, e.g. `x-better-supabase-`. */
+  readonly extensionPrefix: string;
+  /** The served tables, with the names of their operations and actions. */
+  readonly resources: readonly {
+    readonly table: TableMeta;
+    readonly operations: readonly string[];
+  }[];
+  /** Adds a parameter to the table's operations, or to the named ones. */
+  addParameter(table: string, parameter: DescribeParameter, operations?: readonly string[]): void;
+  /**
+   * Marks a column `readOnly` in the table's schemas and drops it from the
+   * required fields of request bodies. `description` is used when the column
+   * has none.
+   */
+  markReadOnly(table: string, column: string, description?: string): void;
+  /** Deep-merges JSON Schema fields into the column's schemas. */
+  describeColumn(table: string, column: string, patch: Readonly<Record<string, unknown>>): void;
+}
+declare const PLUGIN_API_VERSION = 1;
+/** Plugin API v1. Every hook is optional. Hooks run in `use()` order. */
+interface Plugin<Name extends string = string, Ext extends RepositoryExtension = NoExtension> {
+  readonly apiVersion: 1;
+  readonly name: Name;
+  /**
+   * Hook order: `first`, then `pre`, then unmarked plugins, then `post`;
+   * plugins at the same level keep `use()` order. `first` is for plugins that
+   * check the query as the caller wrote it, before a `pre` plugin rewrites it
+   * (`rules()`). Validation is `post` so it sees columns other plugins fill.
+   */
+  readonly enforce?: "first" | "pre" | "post";
+  /**
+   * The table flags whose tables this plugin's `transformQuery` filters
+   * (`tenant()` declares `['tenant']`). Read sets warn when they read such a
+   * table, because their generated SQL function runs without the plugin. `[]`
+   * means the plugin only inspects queries. A plugin with `transformQuery` that
+   * leaves this out is assumed to filter every table.
+   */
+  readonly scopes?: readonly (keyof TableFlags)[];
+  /**
+   * `context`: derive values from the connection's context once per `connect()`
+   * and `$with()`, so `db.$context` carries them (`tenant()` adds the tenant it
+   * resolved). Runs in hook order on the context the caller passed. A throw is
+   * logged and leaves the context unchanged.
+   */
+  readonly context?: (context: RequestContext, args: {
+    readonly schema: SchemaMeta;
+  }) => RequestContext;
+  /** `ir`: rewrite an operation before it runs (filters, defaults). */
+  readonly transformQuery?: (op: Operation, args: HookArgs) => Operation;
+  /** `mutation`: rewrite a mutation or reject it by throwing a `DbException`. */
+  readonly beforeMutation?: (op: MutationOp, args: HookArgs) => MutationOp | Promise<MutationOp>;
+  /** `mutation`: observe a finished mutation. Cannot change the result. */
+  readonly afterMutation?: (event: MutationEvent) => void | Promise<void>;
+  /** `execute`: wrap the executor for tracing, caching or retries. */
+  readonly wrapExecutor?: (executor: Executor) => Executor;
+  /** `errors`: map custom SQLSTATE or hint codes to `DbError`s. */
+  readonly mapError?: ErrorMapper;
+  /** `repository`: add methods to the repositories of matching tables. */
+  readonly repository?: (api: RepositoryApi) => Readonly<Record<string, (...args: never[]) => unknown>> | undefined;
+  /**
+   * `spec`: describe what the plugin does to the served tables in the API model
+   * (`defineApi`, `createOpenApi`): parameters it reads, columns it manages. A
+   * throw is reported as `plugin-describe-failed`.
+   */
+  readonly describe?: (api: PluginDescribeApi) => void;
+  /** Phantom carrying the repository extension type. */
+  readonly "~ext"?: Ext;
+}
+type AnyPlugin = Plugin<string, any>;
+/** The plugin's repository extension; `unknown` for plugins that add none. */
+type ExtensionOf<P> = P extends Plugin<string, infer E> ? E extends NoExtension ? unknown : E : never;
+/** `E` with extension `X` appended, as a tuple. */
+type WithExtension<E, X> = unknown extends X ? E : E extends readonly unknown[] ? readonly [...E, X] : unknown extends E ? readonly [X] : readonly [E, X];
+/** Identity helper that fixes `apiVersion` and infers the plugin types. */
+declare function definePlugin<const Name extends string, Ext extends RepositoryExtension = NoExtension>(plugin: Omit<Plugin<Name, Ext>, "apiVersion"> & {
+  readonly apiVersion?: 1;
+}): Plugin<Name, Ext>;
+//#endregion
+export { ExtensionOf as a, MutationEvent as c, Plugin as d, RepositoryApi as f, definePlugin as g, WithExtension as h, CallOptions as i, NoExtension as l, RequestContext as m, AnyPlugin as n, HasFlag as o, RepositoryExtension as p, ApplyExtension as r, HookArgs as s, Actor as t, PLUGIN_API_VERSION as u };

package/dist/plugin-D9bYbYli.js

@@ -0,0 +1,45 @@
+//#region src/core/plugin.ts
+const PLUGIN_API_VERSION = 1;
+const RANK = {
+	first: 0,
+	pre: 1,
+	normal: 2,
+	post: 3
+};
+function rankOf(plugin) {
+	return RANK[plugin.enforce ?? "normal"];
+}
+/**
+* Plugins in hook order: `first`, `pre`, unmarked, then `post`, each level in
+* `use()` order.
+*/
+function orderPlugins(plugins) {
+	return plugins.map((plugin, index) => ({
+		plugin,
+		index
+	})).toSorted((a, b) => rankOf(a.plugin) - rankOf(b.plugin) || a.index - b.index).map(({ plugin }) => plugin);
+}
+/** Identity helper that fixes `apiVersion` and infers the plugin types. */
+function definePlugin(plugin) {
+	return {
+		...plugin,
+		apiVersion: 1
+	};
+}
+/**
+* A symbol key, so JSON, claims and spread request data can't set it, while
+* `$with` copies it to the derived context.
+*/
+const ALL_TENANTS = Symbol("better-supabase.allTenants");
+/** `context`, marked so `tenant()` and tenant buckets skip their tenant scope. */
+function allTenantsContext(context) {
+	return {
+		...context,
+		[ALL_TENANTS]: true
+	};
+}
+function spansAllTenants(context) {
+	return Object.hasOwn(context, ALL_TENANTS);
+}
+//#endregion
+export { spansAllTenants as a, orderPlugins as i, allTenantsContext as n, definePlugin as r, PLUGIN_API_VERSION as t };

package/dist/plugins/actor/index.d.ts

@@ -1,16 +1,19 @@
-import { d as Plugin, m as RequestContext } from "../../plugin-D-95Q0w0.js";
+import { d as Plugin, m as RequestContext } from "../../plugin-Ar5546xh.js";
 //#region src/plugins/actor/index.d.ts
 export interface ActorOptions {
-  /** Custom actor id resolution. Defaults to `context.actor.id` for users and services. */
+  /**
+   * Custom actor id resolution. Defaults to `context.actor.id` for users and
+   * services.
+   */
   readonly resolve?: (context: RequestContext) => string | undefined;
 }
 /**
  * Stamps the columns generated as `Flags.actor`: `createdBy` on insert and
  * `updatedBy` on insert and update. Soft deletes are updates, so they record
- * who deleted the row. `impersonatedBy` gets `context.actor.impersonator` on
- * an impersonated insert or update and is left alone otherwise, so a user's
- * own update keeps the stamp, like the SQL modules' `track_actor`. Without an
- * actor (anonymous requests) nothing is set.
+ * who deleted the row. `impersonatedBy` gets `context.actor.impersonator` on an
+ * impersonated insert or update and is left alone otherwise, so a user's own
+ * update keeps the stamp, like the SQL modules' `track_actor`. Without an actor
+ * (anonymous requests) nothing is set.
  */
 export declare function actor(options?: ActorOptions): Plugin<"actor">;
 //#endregion

package/dist/plugins/actor/index.js

@@ -1,5 +1,5 @@
-import { r as definePlugin } from "../../plugin-tfXW1-qO.js";
-import { a as insertsOnly, c as withDefault, i as guardManaged, t as dbName } from "../../shared-D5Djh43x.js";
+import { r as definePlugin } from "../../plugin-D9bYbYli.js";
+import { a as insertsOnly, c as withDefault, i as guardManaged, t as dbName } from "../../shared-LmlfYPv4.js";
 //#region src/plugins/actor/index.ts
 function defaultActor(context) {
 	const actor = context.actor;
@@ -8,10 +8,10 @@ function defaultActor(context) {
 /**
 * Stamps the columns generated as `Flags.actor`: `createdBy` on insert and
 * `updatedBy` on insert and update. Soft deletes are updates, so they record
-* who deleted the row. `impersonatedBy` gets `context.actor.impersonator` on
-* an impersonated insert or update and is left alone otherwise, so a user's
-* own update keeps the stamp, like the SQL modules' `track_actor`. Without an
-* actor (anonymous requests) nothing is set.
+* who deleted the row. `impersonatedBy` gets `context.actor.impersonator` on an
+* impersonated insert or update and is left alone otherwise, so a user's own
+* update keeps the stamp, like the SQL modules' `track_actor`. Without an actor
+* (anonymous requests) nothing is set.
 */
 function actor(options = {}) {
 	const resolve = options.resolve ?? defaultActor;

package/dist/plugins/rules/index.d.ts

@@ -1,5 +1,5 @@
-import { v as Operation } from "../../executor-BnMC0lj3.js";
-import { d as Plugin, p as RepositoryExtension } from "../../plugin-D-95Q0w0.js";
+import { v as Operation } from "../../executor-CPyrQdjh.js";
+import { d as Plugin, p as RepositoryExtension } from "../../plugin-Ar5546xh.js";
 //#region src/plugins/rules/index.d.ts
 export type RuleLevel = "off" | "warn" | "error";
 /** A level, or a level with the rule's option: `['error', 500]`. */
@@ -27,28 +27,28 @@ export interface RuleSet {
   /** A service-role connection used where `window` and `document` exist. */
   readonly noAdminInBrowser?: RuleSetting;
   /**
-   * Reads of columns listed in `config.sensitive` without `sensitive: true`
-   * on the call.
+   * Reads of columns listed in `config.sensitive` without `sensitive: true` on
+   * the call.
    */
   readonly noSensitiveSelect?: RuleSetting;
   /**
    * Delete operations without `where`. The repository refuses `deleteMany`
-   * without `where` on its own, so this catches deletes built by plugins;
-   * the lint rule of the same name flags the call in the editor.
+   * without `where` on its own, so this catches deletes built by plugins; the
+   * lint rule of the same name flags the call in the editor.
    */
   readonly noDeleteManyWithoutWhere?: RuleSetting;
   /**
-   * `updateMany` and `deleteMany` without `maxAffected`, or with one above
-   * the given maximum (default 1000). With a bound, a `where` that matches
-   * more rows than intended fails with `max_affected` and writes nothing.
-   * Updates and deletes by key are exempt.
+   * `updateMany` and `deleteMany` without `maxAffected`, or with one above the
+   * given maximum (default 1000). With a bound, a `where` that matches more
+   * rows than intended fails with `max_affected` and writes nothing. Updates
+   * and deletes by key are exempt.
    */
   readonly requireMaxAffected?: RuleSetting<number>;
   /**
    * Storage objects written to `*_url` text columns: a column listed in
-   * `storagePaths`, or a value that is a Storage URL or matches a bucket's
-   * path template. Signed URLs expire and public URLs pin the project host,
-   * so store the path in a `*_path` column and build URLs when rendering.
+   * `storagePaths`, or a value that is a Storage URL or matches a bucket's path
+   * template. Signed URLs expire and public URLs pin the project host, so store
+   * the path in a `*_path` column and build URLs when rendering.
    */
   readonly storagePathColumns?: RuleSetting;
 }
@@ -63,8 +63,8 @@ export interface RuleViolation {
 export interface RulesOptions {
   readonly rules?: RuleSet;
   /**
-   * Called for every violation. Defaults to `console.warn` for warnings.
-   * Errors fail the call with `invalid_request` after reporting.
+   * Called for every violation. Defaults to `console.warn` for warnings. Errors
+   * fail the call with `invalid_request` after reporting.
    */
   readonly report?: (violation: RuleViolation) => void;
 }

package/dist/plugins/rules/index.js

@@ -1,9 +1,9 @@
-import { t as DbException } from "../../db-exception-CnWcYPxL.js";
-import { n as dbError } from "../../errors-BV1SKTVs.js";
+import { t as DbException } from "../../db-exception-Lngc1W49.js";
+import { n as dbError } from "../../errors-03ysrOt4.js";
 import { t as lookupOf } from "../../lookup-BaP5bI27.js";
-import { r as definePlugin } from "../../plugin-tfXW1-qO.js";
+import { r as definePlugin } from "../../plugin-D9bYbYli.js";
 import { t as simplify } from "../../simplify-DDO0j0LI.js";
-import { o as tenantFrom, s as tenantPathsFor } from "../../claims-PqzCxaTD.js";
+import { o as tenantFrom, s as tenantPathsFor } from "../../claims-Bp9My7XP.js";
 //#region src/plugins/rules/index.ts
 /** Catches data-exposure and correctness mistakes; everything else off. */
 function safe() {
@@ -88,7 +88,10 @@ const TEXT_TYPES = /* @__PURE__ */ new Set([
 ]);
 const STORAGE_URL = /\/storage\/v1\/(?:object|render\/image)\/(?:public|sign|authenticated)\//;
 const templatesBySchema = /* @__PURE__ */ new WeakMap();
-/** Bucket templates specific enough to identify a path: some literal text besides `/`. */
+/**
+* Bucket templates specific enough to identify a path: some literal text
+* besides `/`.
+*/
 function bucketTemplates(schema) {
 	let templates = templatesBySchema.get(schema);
 	if (!templates) {
@@ -121,7 +124,10 @@ function storedObjectColumn(op, schema) {
 	}
 }
 const primaryColumnsByTable = /* @__PURE__ */ new WeakMap();
-/** `true` when `where` holds `pk = value` for every primary key column: one row at most. */
+/**
+* `true` when `where` holds `pk = value` for every primary key column: one row
+* at most.
+*/
 function pinsPrimaryKey(table, where) {
 	if (!where || table.primaryKey.length === 0) return false;
 	let columns = primaryColumnsByTable.get(table);
@@ -131,7 +137,7 @@ function pinsPrimaryKey(table, where) {
 	}
 	const pinned = /* @__PURE__ */ new Set();
 	const visit = (condition) => {
-		if (condition.kind === "and") condition.items.forEach(visit);
+		if (condition.kind === "and") for (const item of condition.items) visit(item);
 		else if (condition.kind === "column" && condition.op === "eq" && condition.path === void 0) pinned.add(condition.column);
 	};
 	visit(where);

package/dist/plugins/soft-delete/index.d.ts

@@ -1,6 +1,6 @@
-import { t as AsyncResult } from "../../result-BREt7qOh.js";
-import { D as PrimaryKeyValue } from "../../types-BrpW5ixT.js";
-import { d as Plugin, o as HasFlag, p as RepositoryExtension } from "../../plugin-D-95Q0w0.js";
+import { t as AsyncResult } from "../../result-C6jDfedy.js";
+import { tt as PrimaryKeyValue } from "../../executor-CPyrQdjh.js";
+import { d as Plugin, o as HasFlag, p as RepositoryExtension } from "../../plugin-Ar5546xh.js";
 //#region src/plugins/soft-delete/index.d.ts
 export interface SoftDeleteFindArgs {
   /** Include soft-deleted rows of the queried table. */
@@ -26,14 +26,14 @@ export interface SoftDeleteExtension extends RepositoryExtension {
 /**
  * Soft delete for tables generated with `Flags.softDelete`:
  *
- * - reads, updates and deletes skip deleted rows, including inside includes
- *   and relation filters (`withDeleted` / `onlyDeleted` change the root table);
+ * - Reads, updates and deletes skip deleted rows, including inside includes and
+ *   relation filters (`withDeleted` / `onlyDeleted` change the root table);
  * - `delete` sets the column instead (`{ hard: true }` really deletes);
  * - `restore(key)` clears it.
  *
  * Deletes become updates without `RETURNING`, so a SELECT policy that hides
- * deleted rows does not make them fail. `deleteMany({ returning: true })`
- * keeps `RETURNING`, which needs a SELECT policy that still shows the row.
+ * deleted rows does not make them fail. `deleteMany({ returning: true })` keeps
+ * `RETURNING`, which needs a SELECT policy that still shows the row.
  */
 export declare function softDelete(): Plugin<"softDelete", SoftDeleteExtension>;
 //#endregion

package/dist/plugins/soft-delete/index.js

@@ -1,8 +1,8 @@
 import { t as and } from "../../types-R6syp1el.js";
-import { a as ok, t as AsyncResult } from "../../result-DIeYscA3.js";
-import { r as definePlugin } from "../../plugin-tfXW1-qO.js";
+import { a as ok, t as AsyncResult } from "../../result-B3m7xtRY.js";
+import { r as definePlugin } from "../../plugin-D9bYbYli.js";
 import { n as scopeOperation } from "../../scope-DgWjuXUw.js";
-import { a as insertsOnly, c as withDefault, i as guardManaged, o as isNotNull, s as isNull, t as dbName } from "../../shared-D5Djh43x.js";
+import { a as insertsOnly, c as withDefault, i as guardManaged, o as isNotNull, s as isNull, t as dbName } from "../../shared-LmlfYPv4.js";
 //#region src/plugins/soft-delete/index.ts
 function deletedColumn(table) {
 	return dbName(table, table.flags.softDelete);
@@ -14,14 +14,14 @@ function scopeFor(table) {
 /**
 * Soft delete for tables generated with `Flags.softDelete`:
 *
-* - reads, updates and deletes skip deleted rows, including inside includes
-*   and relation filters (`withDeleted` / `onlyDeleted` change the root table);
+* - Reads, updates and deletes skip deleted rows, including inside includes and
+*   relation filters (`withDeleted` / `onlyDeleted` change the root table);
 * - `delete` sets the column instead (`{ hard: true }` really deletes);
 * - `restore(key)` clears it.
 *
 * Deletes become updates without `RETURNING`, so a SELECT policy that hides
-* deleted rows does not make them fail. `deleteMany({ returning: true })`
-* keeps `RETURNING`, which needs a SELECT policy that still shows the row.
+* deleted rows does not make them fail. `deleteMany({ returning: true })` keeps
+* `RETURNING`, which needs a SELECT policy that still shows the row.
 */
 function softDelete() {
 	return definePlugin({

package/dist/plugins/tenant/index.d.ts

@@ -1,5 +1,5 @@
-import { F as SchemaMeta } from "../../types-BrpW5ixT.js";
-import { d as Plugin, m as RequestContext, o as HasFlag, p as RepositoryExtension } from "../../plugin-D-95Q0w0.js";
+import { lt as SchemaMeta } from "../../executor-CPyrQdjh.js";
+import { d as Plugin, m as RequestContext, o as HasFlag, p as RepositoryExtension } from "../../plugin-Ar5546xh.js";
 //#region src/plugins/tenant/index.d.ts
 /**
  * Dotted paths to the string claims of `C` (up to three levels), e.g.
@@ -7,7 +7,10 @@ import { d as Plugin, m as RequestContext, o as HasFlag, p as RepositoryExtensio
  */
 export type ClaimPath<C> = unknown extends C ? string : StringPaths<C, [1, 2, 3]>;
 type StringPaths<T, Depth extends readonly unknown[]> = T extends object ? T extends readonly unknown[] ? never : { [K in keyof T & string]-?: (NonNullable<T[K]> extends string ? K : never) | (Depth extends readonly [unknown, ...infer Rest] ? `${K}.${StringPaths<NonNullable<T[K]>, Rest>}` : never); }[keyof T & string] : never;
-/** `C` is the claims type (`betterSupabase.claims(schema)`'s output); it types `claim`. */
+/**
+ * `C` is the claims type (`betterSupabase.claims(schema)`'s output); it types
+ * `claim`.
+ */
 export interface TenantOptions<C = unknown> {
   /**
    * JWT claim path(s) holding the tenant id when `context.tenant` is not set.
@@ -19,8 +22,8 @@ export interface TenantOptions<C = unknown> {
   /** Custom resolution, e.g. from a header validated against memberships. */
   readonly resolve?: (context: RequestContext) => string | undefined;
   /**
-   * What happens on a tenant table without a tenant in the context:
-   * `error` (default) fails with `forbidden`; `skip` leaves it to RLS.
+   * What happens on a tenant table without a tenant in the context: `error`
+   * (default) fails with `forbidden`; `skip` leaves it to RLS.
    */
   readonly onMissing?: "error" | "skip";
   /**
@@ -30,7 +33,10 @@ export interface TenantOptions<C = unknown> {
   readonly header?: string;
 }
 export interface TenantFindArgs {
-  /** Skip the tenant filter for this call (admin tooling, jobs). RLS still applies. */
+  /**
+   * Skip the tenant filter for this call (admin tooling, jobs). RLS still
+   * applies.
+   */
   readonly allTenants?: boolean;
 }
 export interface TenantExtension extends RepositoryExtension {
@@ -44,11 +50,10 @@ export interface TenantExtension extends RepositoryExtension {
  */
 export declare function resolveTenant<C = unknown>(context: RequestContext, options?: TenantOptions<C>, schema?: Pick<SchemaMeta, "claims">): string | undefined;
 /**
- * Multi-tenancy for tables generated with `Flags.tenant`. Scopes reads,
- * updates and deletes to the request's tenant (nested includes and relation
- * filters too), fills the tenant column on insert and rejects writes that
- * would move rows to another tenant. It complements RLS; it does not replace
- * it.
+ * Multi-tenancy for tables generated with `Flags.tenant`. Scopes reads, updates
+ * and deletes to the request's tenant (nested includes and relation filters
+ * too), fills the tenant column on insert and rejects writes that would move
+ * rows to another tenant. It complements RLS; it does not replace it.
  */
 export declare function tenant<C = unknown>(options?: TenantOptions<C>): Plugin<"tenant", TenantExtension>;
 //#endregion

package/dist/plugins/tenant/index.js

@@ -1,9 +1,9 @@
-import { t as DbException } from "../../db-exception-CnWcYPxL.js";
-import { n as dbError } from "../../errors-BV1SKTVs.js";
-import { a as spansAllTenants, r as definePlugin } from "../../plugin-tfXW1-qO.js";
+import { t as DbException } from "../../db-exception-Lngc1W49.js";
+import { n as dbError } from "../../errors-03ysrOt4.js";
+import { a as spansAllTenants, r as definePlugin } from "../../plugin-D9bYbYli.js";
 import { n as scopeOperation } from "../../scope-DgWjuXUw.js";
-import { o as tenantFrom, s as tenantPathsFor } from "../../claims-PqzCxaTD.js";
-import { a as insertsOnly, n as equals, r as forbidden, t as dbName } from "../../shared-D5Djh43x.js";
+import { o as tenantFrom, s as tenantPathsFor } from "../../claims-Bp9My7XP.js";
+import { a as insertsOnly, n as equals, r as forbidden, t as dbName } from "../../shared-LmlfYPv4.js";
 //#region src/plugins/tenant/index.ts
 /**
 * The tenant for a request: `context.tenant`, then the configured claim.
@@ -23,11 +23,10 @@ function tenantColumn(table) {
 	return dbName(table, table.flags.tenant);
 }
 /**
-* Multi-tenancy for tables generated with `Flags.tenant`. Scopes reads,
-* updates and deletes to the request's tenant (nested includes and relation
-* filters too), fills the tenant column on insert and rejects writes that
-* would move rows to another tenant. It complements RLS; it does not replace
-* it.
+* Multi-tenancy for tables generated with `Flags.tenant`. Scopes reads, updates
+* and deletes to the request's tenant (nested includes and relation filters
+* too), fills the tenant column on insert and rejects writes that would move
+* rows to another tenant. It complements RLS; it does not replace it.
 */
 function tenant(options = {}) {
 	const onMissing = options.onMissing ?? "error";

package/dist/plugins/timestamps/index.d.ts

@@ -1,11 +1,11 @@
-import { d as Plugin } from "../../plugin-D-95Q0w0.js";
+import { d as Plugin } from "../../plugin-Ar5546xh.js";
 //#region src/plugins/timestamps/index.d.ts
 /**
  * Stamps the columns generated as `Flags.timestamps`: `createdAt` on insert,
  * `updatedAt` on insert and update. A call that sets either column fails with
  * `invalid_request` unless it passes `{ override: true }`, which keeps the
- * caller's values. Pair it with
- * the `updated-at` SQL module trigger to cover writes that bypass the app.
+ * caller's values. Pair it with the `updated-at` SQL module trigger to cover
+ * writes that bypass the app.
  */
 export declare function timestamps(): Plugin<"timestamps">;
 //#endregion

package/dist/plugins/timestamps/index.js

@@ -1,12 +1,12 @@
-import { r as definePlugin } from "../../plugin-tfXW1-qO.js";
-import { a as insertsOnly, c as withDefault, i as guardManaged, t as dbName } from "../../shared-D5Djh43x.js";
+import { r as definePlugin } from "../../plugin-D9bYbYli.js";
+import { a as insertsOnly, c as withDefault, i as guardManaged, t as dbName } from "../../shared-LmlfYPv4.js";
 //#region src/plugins/timestamps/index.ts
 /**
 * Stamps the columns generated as `Flags.timestamps`: `createdAt` on insert,
 * `updatedAt` on insert and update. A call that sets either column fails with
 * `invalid_request` unless it passes `{ override: true }`, which keeps the
-* caller's values. Pair it with
-* the `updated-at` SQL module trigger to cover writes that bypass the app.
+* caller's values. Pair it with the `updated-at` SQL module trigger to cover
+* writes that bypass the app.
 */
 function timestamps() {
 	return definePlugin({

package/dist/plugins/validation/index.d.ts

@@ -1,5 +1,5 @@
-import { d as Plugin } from "../../plugin-D-95Q0w0.js";
-import { t as StandardSchemaV1 } from "../../standard-BcUQuUgu.js";
+import { t as StandardSchemaV1 } from "../../standard-DbQsD2xZ.js";
+import { d as Plugin } from "../../plugin-Ar5546xh.js";
 //#region src/plugins/validation/index.d.ts
 export interface TableValidators {
   /** Validates inserts and upserts, with app-cased keys. */
@@ -9,8 +9,8 @@ export interface TableValidators {
 }
 export interface ValidationOptions {
   /**
-   * Validators per table key. The `validators` export of a generated
-   * `zod()` or `valibot()` module fits as is.
+   * Validators per table key. The `validators` export of a generated `zod()` or
+   * `valibot()` module fits as is.
    */
   readonly schemas: Readonly<Record<string, TableValidators>>;
 }

package/dist/plugins/validation/index.js

@@ -1,8 +1,8 @@
-import { t as DbException } from "../../db-exception-CnWcYPxL.js";
-import { n as dbError } from "../../errors-BV1SKTVs.js";
-import { i as encodeValue, r as decodeValue } from "../../wire-BCJxCtHS.js";
-import { r as definePlugin } from "../../plugin-tfXW1-qO.js";
-import { n as validate } from "../../standard-B1BigegP.js";
+import { t as DbException } from "../../db-exception-Lngc1W49.js";
+import { n as dbError } from "../../errors-03ysrOt4.js";
+import { i as encodeValue, r as decodeValue } from "../../wire-Bizdxvp-.js";
+import { r as definePlugin } from "../../plugin-D9bYbYli.js";
+import { n as validate } from "../../standard-DtkpFGkS.js";
 import { n as toDb, t as toApp } from "../../casing-DdFWEtqr.js";
 //#region src/plugins/validation/index.ts
 /**