better-supabase 0.12.0 → 0.14.0

package/dist/blocks/guests/index.d.ts

@@ -0,0 +1,200 @@
+/// <reference lib="esnext.temporal" />
+import { T as ErrorMapper, t as AsyncResult } from "../../result-C6jDfedy.js";
+import { dt as SubjectRef } from "../../executor-CPyrQdjh.js";
+import { Ct as Events } from "../../events-DbLjvxDX.js";
+import { n as Logger } from "../../logger-DWVYUmwi.js";
+import { a as BlockTenantOptions, r as BlockTemporalOptions } from "../../block-helpers-BaugZlJV.js";
+import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-d53POsem.js";
+import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-CmjPKqQ_.js";
+import { Gt as SectionWrite, Lt as Section, Wt as SectionRowInput, c as BlockOf, rn as EntitySchema } from "../../define-block-COpcS6aT.js";
+import { t as GuestAction } from "../../guest-actions-1T1DeS5Y.js";
+//#region src/blocks/guests/guests.d.ts
+interface GuestsOptions extends BlockTemporalOptions, BlockTenantOptions {
+  readonly transport: BlockTransport;
+  /**
+   * The module schema, or its API schema: `defineBlocks` passes it from
+   * `blocks.generated.ts`.
+   */
+  readonly schema?: string;
+  /** `withBlockHooks` hooks around the client's methods. */
+  readonly hooks?: NoInfer<BlockHooks<Guests>>;
+  /** Receives the errors `after` hooks throw. Default: `console`. */
+  readonly logger?: Logger;
+  readonly mappers?: readonly ErrorMapper[];
+}
+type GuestStatus = "invited" | "active" | "revoked";
+/** Someone outside the organization, invited by email. Never a member. */
+interface Guest {
+  readonly id: string;
+  readonly organizationId: string;
+  readonly email: string;
+  readonly name?: string;
+  /** Set once the guest accepts. */
+  readonly userId?: string;
+  /**
+   * The party the guest acts for, such as a customer company: they see its
+   * invoices and bookings.
+   */
+  readonly party?: SubjectRef;
+  readonly status: GuestStatus;
+  readonly invitedBy?: string;
+  readonly expiresAt?: Temporal.Instant;
+  readonly acceptedAt?: Temporal.Instant;
+  readonly revokedAt?: Temporal.Instant;
+  readonly createdAt: Temporal.Instant;
+  readonly updatedAt: Temporal.Instant;
+}
+/** A guest with the one-time token for the invite link. */
+interface GuestInvite extends Guest {
+  /**
+   * Send it in the invite link; `accept` takes it. Missing when the guest had
+   * already accepted, so no new token was issued.
+   */
+  readonly token?: string;
+}
+/** One record a guest reaches. */
+interface GuestGrant {
+  readonly id: string;
+  readonly organizationId: string;
+  readonly guestId: string;
+  readonly subject: SubjectRef;
+  /** Always holds `read`. */
+  readonly actions: readonly GuestAction[];
+  readonly grantedBy?: string;
+  readonly expiresAt?: Temporal.Instant;
+  readonly createdAt: Temporal.Instant;
+  readonly updatedAt: Temporal.Instant;
+}
+/** A grant on a record, with its guest, for the record's sharing panel. */
+interface RecordGuestGrant extends GuestGrant {
+  readonly guest: Guest;
+}
+/** One organization the caller is a guest of, with their live grants. */
+interface GuestMembership extends Guest {
+  readonly grants: readonly GuestGrant[];
+}
+interface GuestInviteInput {
+  readonly email: string;
+  readonly name?: string;
+  /** The customer company or person the guest acts for. */
+  readonly party?: SubjectRef;
+  /** When the invite stops working. */
+  readonly expiresAt?: Temporal.Instant;
+}
+interface GuestGrantInput {
+  /** Default `["read"]`; `read` is always added. */
+  readonly actions?: readonly GuestAction[];
+  readonly expiresAt?: Temporal.Instant;
+}
+interface GuestListOptions {
+  readonly status?: GuestStatus;
+  /** Pages back from a guest's `createdAt`. */
+  readonly before?: Temporal.Instant;
+  readonly pageSize?: number;
+}
+interface Guests {
+  /**
+   * Invites an email to the block's tenant. Needs `guests.manage`. Inviting the
+   * email again issues a new token, or restores a revoked guest.
+   */
+  invite(input: GuestInviteInput): AsyncResult<GuestInvite>;
+  /**
+   * The signed-in user accepts an invite. Their confirmed email must match the
+   * invite's.
+   */
+  accept(token: string): AsyncResult<Guest>;
+  /** Needs `guests.manage`. Their grants stop counting. */
+  revoke(guestId: string): AsyncResult<Guest>;
+  /** The tenant's guests, newest first. Needs `guests.read`. */
+  list(options?: GuestListOptions): AsyncResult<readonly Guest[]>;
+  /**
+   * Lets a guest reach one record. Needs `guests.manage`; the record must be in
+   * the guest's organization.
+   */
+  grant(guestId: string, subject: SubjectRef, input?: GuestGrantInput): AsyncResult<GuestGrant>;
+  /** `false` when the grant is gone or the caller can't manage it. */
+  revokeGrant(grantId: string): AsyncResult<boolean>;
+  /** The guests who reach a record. The record decides the tenant. */
+  grants(subject: SubjectRef): AsyncResult<readonly RecordGuestGrant[]>;
+  /** What the caller reaches as a guest, for a portal's home page. */
+  mine(): AsyncResult<readonly GuestMembership[]>;
+  /** Whether the caller reaches a record as a guest for an action. */
+  can(subject: SubjectRef, action?: GuestAction): AsyncResult<boolean>;
+}
+/** The `guests` SQL module as typed calls. */
+export declare function createGuests(options: GuestsOptions): Guests;
+//#endregion
+//#region src/blocks/guests/events.d.ts
+/** `guest.invited`. */
+interface GuestInvitedEventData {
+  readonly organizationId: string;
+  /** The guest. */
+  readonly id: string;
+  readonly email: string;
+  /** The party the guest acts for, such as a customer company, when set. */
+  readonly partyType: string | null;
+  readonly partyId: string | null;
+}
+/** `guest.accepted`. */
+interface GuestAcceptedEventData {
+  readonly organizationId: string;
+  readonly id: string;
+  /** The user who accepted the invite. */
+  readonly userId: string;
+}
+/** `guest.revoked`. */
+interface GuestRevokedEventData {
+  readonly organizationId: string;
+  readonly id: string;
+}
+/** `guest_grant.created` and `guest_grant.revoked`. */
+interface GuestGrantEventData {
+  readonly organizationId: string;
+  /** The grant. */
+  readonly id: string;
+  readonly guestId: string;
+  readonly subjectType: string;
+  readonly subjectId: string;
+  /** `read`, `comment` and `upload`, in that order. */
+  readonly actions: readonly string[];
+}
+/** The events of the `guests` block: type to data. */
+type GuestsEvents = {
+  readonly "guest.invited": GuestInvitedEventData;
+  readonly "guest.accepted": GuestAcceptedEventData;
+  readonly "guest.revoked": GuestRevokedEventData;
+  readonly "guest_grant.created": GuestGrantEventData;
+  readonly "guest_grant.revoked": GuestGrantEventData;
+};
+/** The `guests` block's event types, for its manifest and `onBlockEvent`. */
+export declare const guestsEvents: Events<GuestsEvents>;
+//#endregion
+//#region src/blocks/guests/schemas.d.ts
+/** What `invite` takes, with the bounds the SQL checks. */
+export declare const guestInviteSchema: EntitySchema<GuestInviteInput>;
+/** What `grant` takes after the guest and the record. */
+export declare const guestGrantSchema: EntitySchema<GuestGrantInput>;
+/** What the section's `grant` write takes. */
+interface GuestSectionGrantInput extends GuestGrantInput {
+  readonly guestId: string;
+}
+export declare const guestSectionGrantSchema: EntitySchema<GuestSectionGrantInput>;
+//#endregion
+//#region src/blocks/guests/section.d.ts
+/** The writes of the guests section. */
+type GuestsWrites = {
+  /** Lets a guest reach the record. */
+  readonly grant: SectionWrite<Guests, GuestSectionGrantInput, GuestGrant>;
+  /** Takes one guest's access to the record away. */
+  readonly revoke: SectionWrite<Guests, SectionRowInput, boolean>;
+};
+/** The guests who reach a record: a sharing panel. */
+export declare const guestsSection: Section<Guests, readonly RecordGuestGrant[], undefined, never, GuestsWrites>;
+//#endregion
+//#region src/blocks/guests/manifest.d.ts
+/** The `guests` block's manifest (ADR 0029). */
+export declare const guestsBlock: BlockOf<"guests", typeof createGuests, GuestsEvents, Record<never, never>, never, {
+  readonly guests: typeof guestsSection;
+}>;
+//#endregion
+export { type BlockHooks, type BlockTransport, type BlockTransportMiddleware, type Guest, type GuestAcceptedEventData, type GuestAction, type GuestGrant, type GuestGrantEventData, type GuestGrantInput, type GuestInvite, type GuestInviteInput, type GuestInvitedEventData, type GuestListOptions, type GuestMembership, type GuestRevokedEventData, type GuestSectionGrantInput, type GuestStatus, type Guests, type GuestsEvents, type GuestsOptions, type GuestsWrites, type RecordGuestGrant, type RpcClient, dbTransport, extendBlock, rpcTransport, sqlTransport, withBlockHooks, wrapTransport };

package/dist/blocks/guests/index.js

@@ -0,0 +1,224 @@
+import { t as GUEST_ACTIONS } from "../../guest-actions-B7zdhfnh.js";
+import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, F as stringsOf, H as rpcTransport, I as textOf, S as optionalInstant, U as sqlTransport, d as enumOrThrow, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-CiKtrb6g.js";
+import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BymdcD0V.js";
+import { n as entitySchema } from "../../entity-schema-BXXC1NnT.js";
+import { r as sectionRowInput, t as defineSection } from "../../sections-DjxYmpu-.js";
+import { n as event, t as defineEvents } from "../../event-map-CtPFhcOp.js";
+import { n as defineBlock } from "../../define-block-Dze77QTw.js";
+import { t as requireTenant } from "../../block-tenant-C1sNV8_4.js";
+//#region src/blocks/guests/guests.ts
+const STATUSES = [
+	"invited",
+	"active",
+	"revoked"
+];
+function optional(key, value) {
+	return value === void 0 ? {} : { [key]: value };
+}
+function partyOf(row) {
+	const type = optionalText(row["partyType"]);
+	const id = optionalText(row["partyId"]);
+	return type === void 0 || id === void 0 ? void 0 : {
+		type,
+		id
+	};
+}
+function guestOf(value, fn) {
+	const row = recordOf(value, fn);
+	return {
+		id: textOf(row["id"]),
+		organizationId: textOf(row["organizationId"]),
+		email: textOf(row["email"]),
+		status: enumOrThrow(row["status"], STATUSES, "guest status"),
+		createdAt: requiredInstant(row["createdAt"], "createdAt"),
+		updatedAt: requiredInstant(row["updatedAt"], "updatedAt"),
+		...optional("name", optionalText(row["name"])),
+		...optional("userId", optionalText(row["userId"])),
+		...optional("party", partyOf(row)),
+		...optional("invitedBy", optionalText(row["invitedBy"])),
+		...optional("expiresAt", optionalInstant(row["expiresAt"])),
+		...optional("acceptedAt", optionalInstant(row["acceptedAt"])),
+		...optional("revokedAt", optionalInstant(row["revokedAt"]))
+	};
+}
+function grantOf(value, fn) {
+	const row = recordOf(value, fn);
+	return {
+		id: textOf(row["id"]),
+		organizationId: textOf(row["organizationId"]),
+		guestId: textOf(row["guestId"]),
+		subject: {
+			type: textOf(row["subjectType"]),
+			id: textOf(row["subjectId"])
+		},
+		actions: stringsOf(row["actions"]).map((action) => enumOrThrow(action, GUEST_ACTIONS, "guest action")),
+		createdAt: requiredInstant(row["createdAt"], "createdAt"),
+		updatedAt: requiredInstant(row["updatedAt"], "updatedAt"),
+		...optional("grantedBy", optionalText(row["grantedBy"])),
+		...optional("expiresAt", optionalInstant(row["expiresAt"]))
+	};
+}
+/** The `guests` SQL module as typed calls. */
+function createGuests(options) {
+	applyTemporal(options);
+	const call = blockCall(options.transport, options.schema, options.mappers);
+	const tenant = () => requireTenant(options.tenant);
+	return withBlockHooks({
+		invite: (input) => tenant().andThen((organizationId) => call("invite_guest", {
+			tenant: organizationId,
+			email: input.email,
+			name: input.name ?? null,
+			party_type: input.party?.type ?? null,
+			party_id: input.party?.id ?? null,
+			expires_at: instantArg(input.expiresAt)
+		}, (value) => {
+			const token = optionalText(recordOf(value, "invite_guest")["token"]);
+			return {
+				...guestOf(value, "invite_guest"),
+				...optional("token", token)
+			};
+		})),
+		accept: (token) => call("accept_guest_invite", { token }, (value) => guestOf(value, "accept_guest_invite")),
+		revoke: (guestId) => call("revoke_guest", { guest_id: guestId }, (value) => guestOf(value, "revoke_guest")),
+		list: (list = {}) => tenant().andThen((organizationId) => call("list_guests", {
+			tenant: organizationId,
+			status: list.status ?? null,
+			before: instantArg(list.before),
+			page_size: list.pageSize ?? null
+		}, (value) => recordsOf(value, "list_guests").map((row) => guestOf(row, "list_guests")))),
+		grant: (guestId, subject, input = {}) => call("grant_guest_access", {
+			guest_id: guestId,
+			subject_type: subject.type,
+			subject_id: subject.id,
+			actions: input.actions ?? ["read"],
+			expires_at: instantArg(input.expiresAt)
+		}, (value) => grantOf(value, "grant_guest_access")),
+		revokeGrant: (grantId) => call("revoke_guest_access", { grant_id: grantId }, (value) => value === true),
+		grants: (subject) => call("list_guest_grants", {
+			subject_type: subject.type,
+			subject_id: subject.id
+		}, (value) => recordsOf(value, "list_guest_grants").map((row) => ({
+			...grantOf(row, "list_guest_grants"),
+			guest: guestOf(row["guest"], "list_guest_grants")
+		}))),
+		mine: () => call("my_guest_access", {}, (value) => recordsOf(value, "my_guest_access").map((row) => ({
+			...guestOf(row, "my_guest_access"),
+			grants: recordsOf(row["grants"], "my_guest_access").map((grant) => grantOf(grant, "my_guest_access"))
+		}))),
+		can: (subject, action = "read") => call("guest_can", {
+			subject_type: subject.type,
+			subject_id: subject.id,
+			action
+		}, (value) => value === true)
+	}, options.hooks, {
+		block: "guests",
+		...options.logger ? { logger: options.logger } : {}
+	});
+}
+//#endregion
+//#region src/blocks/guests/events.ts
+/** The `guests` block's event types, for its manifest and `onBlockEvent`. */
+const guestsEvents = defineEvents({
+	"guest.invited": event(),
+	"guest.accepted": event(),
+	"guest.revoked": event(),
+	"guest_grant.created": event(),
+	"guest_grant.revoked": event()
+});
+//#endregion
+//#region src/blocks/guests/schemas.ts
+/** What `invite` takes, with the bounds the SQL checks. */
+const guestInviteSchema = entitySchema({
+	title: "GuestInviteInput",
+	fields: {
+		email: {
+			kind: "string",
+			minLength: 3,
+			maxLength: 320
+		},
+		name: {
+			kind: "string",
+			optional: true,
+			minLength: 1,
+			maxLength: 200
+		},
+		party: {
+			kind: "json",
+			optional: true,
+			description: "The record the guest acts for: `{ type, id }`."
+		},
+		expiresAt: {
+			kind: "instant",
+			optional: true
+		}
+	}
+});
+const ACTIONS = {
+	kind: "enum",
+	values: GUEST_ACTIONS,
+	optional: true,
+	array: true,
+	description: "`read` is always added."
+};
+/** What `grant` takes after the guest and the record. */
+const guestGrantSchema = entitySchema({
+	title: "GuestGrantInput",
+	fields: {
+		actions: ACTIONS,
+		expiresAt: {
+			kind: "instant",
+			optional: true
+		}
+	}
+});
+const guestSectionGrantSchema = entitySchema({
+	title: "GuestSectionGrantInput",
+	fields: {
+		guestId: { kind: "uuid" },
+		actions: ACTIONS,
+		expiresAt: {
+			kind: "instant",
+			optional: true
+		}
+	}
+});
+//#endregion
+//#region src/blocks/guests/section.ts
+/** The guests who reach a record: a sharing panel. */
+const guestsSection = defineSection({
+	permissions: {
+		read: "read",
+		write: "manage"
+	},
+	module: "guests",
+	load: (client, subject) => client.grants(subject),
+	events: ["guest_grant.*", "guest.revoked"],
+	writes: {
+		grant: {
+			input: guestSectionGrantSchema,
+			run: (client, subject, { guestId, ...input }) => client.grant(guestId, subject, input)
+		},
+		revoke: {
+			input: sectionRowInput,
+			run: (client, _subject, { id }) => client.revokeGrant(id)
+		}
+	}
+});
+//#endregion
+//#region src/blocks/guests/manifest.ts
+/** The `guests` block's manifest (ADR 0029). */
+const guestsBlock = defineBlock({
+	name: "guests",
+	sql: ["guests"],
+	options: {},
+	events: guestsEvents,
+	schemas: {
+		guest: { input: guestInviteSchema },
+		guest_grant: { input: guestGrantSchema }
+	},
+	create: createGuests,
+	sections: { guests: guestsSection },
+	category: "collaboration"
+});
+//#endregion
+export { createGuests, dbTransport, extendBlock, guestGrantSchema, guestInviteSchema, guestSectionGrantSchema, guestsBlock, guestsEvents, guestsSection, rpcTransport, sqlTransport, withBlockHooks, wrapTransport };

package/dist/blocks/hiring/index.d.ts

@@ -1,14 +1,14 @@
 /// <reference lib="esnext.temporal" />
-import { T as ErrorMapper, t as AsyncResult } from "../../result-BREt7qOh.js";
-import { wt as Events } from "../../events-P3raDX2E.js";
-import { f as ApplicationEventData, y as JobEventData } from "../../index-BpyBH5O2.js";
+import { T as ErrorMapper, t as AsyncResult } from "../../result-C6jDfedy.js";
+import { t as StandardSchemaV1 } from "../../standard-DbQsD2xZ.js";
+import { r as FieldsOf } from "../../block-fields-3w4MZr8U.js";
+import { Ct as Events } from "../../events-DbLjvxDX.js";
+import { m as JobEventData, t as ApplicationEventData } from "../../block-events-records-BGVyoz57.js";
 import { n as Logger } from "../../logger-DWVYUmwi.js";
-import { t as StandardSchemaV1 } from "../../standard-BcUQuUgu.js";
-import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DezJPPA0.js";
-import { r as BlockTemporalOptions } from "../../block-helpers-CjcQM1yA.js";
-import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-DcPJHztl.js";
-import { r as FieldsOf } from "../../block-fields-DnaDbgZS.js";
-import { s as BlockOf } from "../../define-block-BHxLHLys.js";
+import { r as BlockTemporalOptions } from "../../block-helpers-BaugZlJV.js";
+import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-d53POsem.js";
+import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-CmjPKqQ_.js";
+import { c as BlockOf } from "../../define-block-COpcS6aT.js";
 //#region src/blocks/hiring/hiring.d.ts
 type JobStatus = "draft" | "open" | "closed";
 type ApplicationState = "active" | "hired" | "rejected" | "withdrawn";
@@ -117,8 +117,8 @@ interface HiringOptions<S extends StandardSchemaV1 | undefined = undefined> exte
   readonly schema?: string;
   /**
    * A Standard Schema for the jobs' extra columns
-   * (`blocks.hiring.options.extraColumns`), keyed by column name. It types
-   * and parses `fields` on `saveJob` and validates the ones it writes.
+   * (`blocks.hiring.options.extraColumns`), keyed by column name. It types and
+   * parses `fields` on `saveJob` and validates the ones it writes.
    */
   readonly fields?: S;
   readonly hooks?: NoInfer<BlockHooks<Hiring<FieldsOf<S>>>>;
@@ -127,8 +127,8 @@ interface HiringOptions<S extends StandardSchemaV1 | undefined = undefined> exte
 }
 /**
  * The hiring block: jobs and applications on a pipeline per job, with
- * scorecards and interviews. Act on `application.hired` to create the
- * employee in your app.
+ * scorecards and interviews. Act on `application.hired` to create the employee
+ * in your app.
  */
 export declare function createHiring<S extends StandardSchemaV1 | undefined = undefined>(options: HiringOptions<S>): Hiring<FieldsOf<S>>;
 //#endregion

package/dist/blocks/hiring/index.js

@@ -1,13 +1,12 @@
-import { t as AsyncResult } from "../../result-DIeYscA3.js";
+import { t as AsyncResult } from "../../result-B3m7xtRY.js";
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
 import { t as hiringSqlOptions } from "../../options-D2Gd6VfS.js";
-import { n as event, t as defineEvents } from "../../event-map-Dy2vKHai.js";
-import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-J7ZepTq2.js";
-import { A as requiredInstant, C as optionalText, D as recordOf, I as textOf, S as optionalInstant, d as enumOrThrow, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-DkVZNDrj.js";
-import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-C22vuIUd.js";
-import { n as blockFields } from "../../block-fields-Bv1hV855.js";
-import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
-import { i as refOf, n as compact } from "../../sales-shared-CDSytDEn.js";
+import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, H as rpcTransport, I as textOf, S as optionalInstant, U as sqlTransport, d as enumOrThrow, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-CiKtrb6g.js";
+import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BymdcD0V.js";
+import { n as event, t as defineEvents } from "../../event-map-CtPFhcOp.js";
+import { n as blockFields } from "../../block-fields-DBSJSeaO.js";
+import { n as defineBlock } from "../../define-block-Dze77QTw.js";
+import { i as refOf, n as compact } from "../../sales-shared-C_u68eq2.js";
 //#region src/blocks/hiring/hiring.ts
 const JOB_STATUSES = [
 	"draft",
@@ -87,8 +86,8 @@ function interviewOf(value) {
 }
 /**
 * The hiring block: jobs and applications on a pipeline per job, with
-* scorecards and interviews. Act on `application.hired` to create the
-* employee in your app.
+* scorecards and interviews. Act on `application.hired` to create the employee
+* in your app.
 */
 function createHiring(options) {
 	applyTemporal(options);

package/dist/blocks/identities/index.d.ts

@@ -1,11 +1,11 @@
 /// <reference lib="esnext.temporal" />
-import { T as ErrorMapper, t as AsyncResult } from "../../result-BREt7qOh.js";
+import { T as ErrorMapper, t as AsyncResult } from "../../result-C6jDfedy.js";
 import { n as Logger } from "../../logger-DWVYUmwi.js";
-import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DezJPPA0.js";
-import { r as BlockTemporalOptions } from "../../block-helpers-CjcQM1yA.js";
-import { n as BlockHooks } from "../../block-hooks-DcPJHztl.js";
-import { d as IdentityRef, f as IdentityTarget, p as PrincipalByIdentity } from "../../authorization-hooks-WDQMKIsc.js";
-import { s as BlockOf } from "../../define-block-BHxLHLys.js";
+import { r as BlockTemporalOptions } from "../../block-helpers-BaugZlJV.js";
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-d53POsem.js";
+import { n as BlockHooks } from "../../block-hooks-CmjPKqQ_.js";
+import { c as BlockOf } from "../../define-block-COpcS6aT.js";
+import { d as IdentityRef, f as IdentityTarget, p as PrincipalByIdentity } from "../../authorization-hooks-dLmUO_PZ.js";
 //#region src/blocks/identities/identities.d.ts
 interface IdentitiesOptions extends BlockTemporalOptions {
   /**
@@ -14,7 +14,10 @@ interface IdentitiesOptions extends BlockTemporalOptions {
    * `backfillVerifiedEmails`.
    */
   readonly transport: BlockTransport;
-  /** The module schema, or its API schema: `defineBlocks` passes it from `blocks.generated.ts`. Default `better_supabase`. */
+  /**
+   * The module schema, or its API schema: `defineBlocks` passes it from
+   * `blocks.generated.ts`. Default `better_supabase`.
+   */
   readonly schema?: string;
   readonly mappers?: readonly ErrorMapper[];
   /** `withBlockHooks` hooks around the methods (ADR 0015). */
@@ -45,35 +48,50 @@ interface LinkedIdentity {
 }
 /** The `identities` SQL module as typed calls. */
 interface Identities {
-  /** Signed-in user: issues a one-time code for the bot or the mail side to redeem. */
+  /**
+   * Signed-in user: issues a one-time code for the bot or the mail side to
+   * redeem.
+   */
   readonly beginLink: (kind: IdentityRef["kind"], provider?: string) => AsyncResult<LinkCode>;
   /**
-   * Service role: binds `identity` to the user who issued `code`. Pass only
-   * an identity the platform authenticated, such as the author of a signed
-   * Slack event or a DKIM-verified sender.
+   * Service role: binds `identity` to the user who issued `code`. Pass only an
+   * identity the platform authenticated, such as the author of a signed Slack
+   * event or a DKIM-verified sender.
    */
   readonly redeemLink: (code: string, identity: IdentityRef) => AsyncResult<RedeemedLink>;
   /** Service role: the user or contact `identity` is linked to, or `null`. */
   readonly resolve: (identity: IdentityRef) => AsyncResult<IdentityTarget | null>;
   /** The caller's identities, oldest first. */
   readonly list: () => AsyncResult<readonly LinkedIdentity[]>;
-  /** Removes one of the caller's identities; `false` when the caller has none with `id`. */
+  /**
+   * Removes one of the caller's identities; `false` when the caller has none
+   * with `id`.
+   */
   readonly unlink: (id: string) => AsyncResult<boolean>;
-  /** Service role: email identities for users confirmed before the module was installed. */
+  /**
+   * Service role: email identities for users confirmed before the module was
+   * installed.
+   */
   readonly backfillVerifiedEmails: () => AsyncResult<number>;
 }
 export declare function createIdentities(options: IdentitiesOptions): Identities;
 /**
- * A `PrincipalByIdentity` over the `identities` table, for
- * `createServer(bs, { authorization: { identities: { principalByIdentity } } })`
- * or a chat helper's `principalByIdentity` option. `transport` runs as the
- * service role. A database error rejects, so the caller retries instead of
- * treating a linked author as anonymous.
+ * A `PrincipalByIdentity` over the `identities` table, for `createServer(bs, {
+ * authorization: { identities: { principalByIdentity } } })` or a chat helper's
+ * `principalByIdentity` option. `transport` runs as the service role. A
+ * database error rejects, so the caller retries instead of treating a linked
+ * author as anonymous.
  */
 export declare function identityResolver(transport: BlockTransport, options?: Omit<IdentitiesOptions, "transport">): PrincipalByIdentity;
-/** `createIdentities({ transport }).beginLink(kind, provider)`, as the signed-in user. */
+/**
+ * `createIdentities({ transport }).beginLink(kind, provider)`, as the signed-in
+ * user.
+ */
 export declare function beginLink(transport: BlockTransport, kind: IdentityRef["kind"], provider?: string): AsyncResult<LinkCode>;
-/** `createIdentities({ transport }).redeemLink(code, identity)`, as the service role. */
+/**
+ * `createIdentities({ transport }).redeemLink(code, identity)`, as the service
+ * role.
+ */
 export declare function redeemLink(transport: BlockTransport, code: string, identity: IdentityRef): AsyncResult<RedeemedLink>;
 //#endregion
 //#region src/blocks/identities/manifest.d.ts

package/dist/blocks/identities/index.js

@@ -1,9 +1,8 @@
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
 import { t as identitiesSqlOptions } from "../../options-CXFz0xxS.js";
-import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-J7ZepTq2.js";
-import { A as requiredInstant, D as recordOf, I as textOf, d as enumOrThrow, k as recordsOf, n as applyTemporal, o as blockCall, y as nullableText } from "../../block-helpers-DkVZNDrj.js";
-import { r as withBlockHooks } from "../../block-hooks-C22vuIUd.js";
-import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
+import { A as requiredInstant, B as dbTransport, D as recordOf, H as rpcTransport, I as textOf, U as sqlTransport, d as enumOrThrow, k as recordsOf, n as applyTemporal, o as blockCall, y as nullableText } from "../../block-helpers-CiKtrb6g.js";
+import { r as withBlockHooks } from "../../block-hooks-BymdcD0V.js";
+import { n as defineBlock } from "../../define-block-Dze77QTw.js";
 //#region src/blocks/identities/identities.ts
 const KINDS = ["email", "chat"];
 const SOURCES = ["link", "verified_email"];
@@ -68,11 +67,11 @@ function createIdentities(options) {
 	});
 }
 /**
-* A `PrincipalByIdentity` over the `identities` table, for
-* `createServer(bs, { authorization: { identities: { principalByIdentity } } })`
-* or a chat helper's `principalByIdentity` option. `transport` runs as the
-* service role. A database error rejects, so the caller retries instead of
-* treating a linked author as anonymous.
+* A `PrincipalByIdentity` over the `identities` table, for `createServer(bs, {
+* authorization: { identities: { principalByIdentity } } })` or a chat helper's
+* `principalByIdentity` option. `transport` runs as the service role. A
+* database error rejects, so the caller retries instead of treating a linked
+* author as anonymous.
 */
 function identityResolver(transport, options = {}) {
 	const identities = createIdentities({
@@ -81,11 +80,17 @@ function identityResolver(transport, options = {}) {
 	});
 	return (identity) => identities.resolve(identity).orThrow();
 }
-/** `createIdentities({ transport }).beginLink(kind, provider)`, as the signed-in user. */
+/**
+* `createIdentities({ transport }).beginLink(kind, provider)`, as the signed-in
+* user.
+*/
 function beginLink(transport, kind, provider) {
 	return createIdentities({ transport }).beginLink(kind, provider);
 }
-/** `createIdentities({ transport }).redeemLink(code, identity)`, as the service role. */
+/**
+* `createIdentities({ transport }).redeemLink(code, identity)`, as the service
+* role.
+*/
 function redeemLink(transport, code, identity) {
 	return createIdentities({ transport }).redeemLink(code, identity);
 }