better-supabase 0.13.0 → 0.14.0

package/dist/comments-CB8pFSV1.js

@@ -0,0 +1,142 @@
+import { n as dbError } from "./errors-03ysrOt4.js";
+import { t as AsyncResult } from "./result-B3m7xtRY.js";
+import { n as isRecord } from "./guards-6F2bCtQR.js";
+import { A as requiredInstant, C as optionalText, D as recordOf, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall, w as pageOf } from "./block-helpers-CiKtrb6g.js";
+import { r as withBlockHooks } from "./block-hooks-BymdcD0V.js";
+import { n as blockFields } from "./block-fields-DBSJSeaO.js";
+import { i as subjectRefOf, t as bySubjectType } from "./block-subjects-Dzq5Xn_0.js";
+import { t as requireTenant } from "./block-tenant-C1sNV8_4.js";
+import { n as editOf, r as messageOf } from "./rows-Bb0EPupt.js";
+import { n as parseMentions } from "./mentions-ByYnRNIG.js";
+//#region src/blocks/comments/comments.ts
+/**
+* The user ids mentioned in a body written as `@[Ada](user:<user id>)` or
+* `@[Ada](<user id>)`, the markup mention inputs produce, in order and without
+* repeats.
+*/
+function mentionsIn(body) {
+	return parseMentions(body).users;
+}
+/** A row of `list_comments` or `create_comment`. */
+function commentOf(value) {
+	const row = recordOf(value, "comment");
+	return {
+		...messageOf(row),
+		subject: subjectRefOf(row["subject_type"], row["subject_id"]),
+		taskId: optionalText(row["task_id"])
+	};
+}
+const notFound = () => dbError("not_found", "No comment you can read has this id", { hint: "COMMENT_NOT_FOUND" });
+/** Comments over the messaging core, as the caller. */
+function createComments(options) {
+	applyTemporal(options);
+	const call = blockCall(options.transport, options.schema, options.mappers);
+	const fields = blockFields(options.fields, "comment fields");
+	const tenant = () => requireTenant(options.tenant);
+	const mentionsOf = (body, rich) => options.mentionsOf ? options.mentionsOf({
+		body,
+		document: rich
+	}) : mentionsIn(body);
+	const get = (id) => call("get_comment", { message: id }, (value) => value === null || value === void 0 ? void 0 : commentOf(value)).andThen((comment) => comment === void 0 ? AsyncResult.err(notFound()) : fields.row(comment));
+	const conversation = (subject, open = {}) => tenant().andThen((organizationId) => open.open === true ? call("open_conversation", {
+		tenant: organizationId,
+		kind: "subject",
+		attrs: {
+			subjectType: subject.type,
+			subjectId: subject.id
+		},
+		members: []
+	}, (value) => optionalText(recordOf(value, "conversation")["id"])) : call("comment_conversation", {
+		tenant: organizationId,
+		subject_type: subject.type,
+		subject_id: subject.id
+	}, optionalText));
+	return withBlockHooks({
+		create: (subject, comment) => tenant().andThen((organizationId) => fields.args(comment.fields).andThen((checked) => call("create_comment", {
+			tenant: organizationId,
+			subject_type: subject.type,
+			subject_id: subject.id,
+			body: comment.body,
+			attrs: {
+				mentions: [...comment.mentionIds ?? mentionsOf(comment.body, comment.document)],
+				...comment.parentId === void 0 ? {} : { parentId: comment.parentId },
+				...comment.document === void 0 ? {} : { document: comment.document },
+				...comment.anchor === void 0 ? {} : { anchor: comment.anchor },
+				...checked === void 0 ? {} : { fields: checked }
+			},
+			attachments: [...comment.attachmentIds ?? []]
+		}, commentOf).andThen(fields.row))),
+		get,
+		edit: (id, edit) => fields.args(edit.fields).andThen((checked) => call("edit_message", {
+			message: id,
+			body: edit.body,
+			attrs: {
+				mentions: [...edit.mentionIds ?? mentionsOf(edit.body, edit.document)],
+				...edit.document === void 0 ? {} : { document: edit.document },
+				...checked === void 0 ? {} : { fields: checked }
+			}
+		}, () => void 0)).andThen(() => get(id)),
+		remove: (id) => call("delete_message", { message: id }, (value) => value === true),
+		resolve: (id, resolved = true) => call("resolve_message", {
+			message: id,
+			resolved
+		}, () => void 0).andThen(() => get(id)),
+		pin: (id, pinned = true) => call("pin_message", {
+			message: id,
+			pinned
+		}, () => void 0).andThen(() => get(id)),
+		edits: (id) => call("list_message_edits", { message: id }, (value) => recordsOf(value, "list_message_edits").map(editOf)),
+		assign: (id, assignment = {}) => call("assign_comment", {
+			message: id,
+			assignee: assignment.assigneeId ?? null,
+			attrs: {
+				...assignment.attrs,
+				...assignment.title === void 0 ? {} : { title: assignment.title },
+				...assignment.body === void 0 ? {} : { body: assignment.body }
+			}
+		}, (value) => {
+			const task = optionalText(value);
+			if (task === void 0) throw new TypeError("assign_comment returned no work item id");
+			return task;
+		}),
+		list: (subject, list = {}) => tenant().andThen((organizationId) => call("list_comments", {
+			tenant: organizationId,
+			subject_type: subject.type,
+			subject_id: subject.id,
+			after: instantArg(pageOf(list).cursor),
+			max_rows: list.limit,
+			skip: list.offset,
+			after_id: list.cursorId
+		}, (value) => recordsOf(value, "list_comments").map(commentOf)).andThen(fields.rows)),
+		anchoredTo: (attachmentId, list = {}) => call("list_file_comments", {
+			attachment: attachmentId,
+			max_rows: list.limit
+		}, (value) => recordsOf(value, "list_file_comments").map(commentOf)).andThen(fields.rows),
+		counts: (subjects) => tenant().andThen((organizationId) => bySubjectType(subjects, (type, ids) => call("comment_counts", {
+			tenant: organizationId,
+			subject_type: type,
+			subject_ids: ids
+		}, (value) => {
+			const found = isRecord(value) ? value : {};
+			return Object.fromEntries(ids.map((id) => [id, Number(found[id] ?? 0)]));
+		}))),
+		copy: (from, to) => tenant().andThen((organizationId) => call("copy_comments", {
+			tenant: organizationId,
+			from_type: from.type,
+			from_id: from.id,
+			to_type: to.type,
+			to_id: to.id
+		}, (value) => Number(value ?? 0))),
+		conversation,
+		markRead: (subject, read = {}) => conversation(subject).andThen((id) => id === void 0 ? AsyncResult.ok(void 0) : call("mark_read", {
+			conversation: id,
+			thread: null,
+			read_at: instantArg(read.readAt) ?? null
+		}, (value) => requiredInstant(value, "readAt")))
+	}, options.hooks, {
+		block: "comments",
+		...options.logger ? { logger: options.logger } : {}
+	});
+}
+//#endregion
+export { mentionsIn as n, createComments as t };

package/dist/commerce/index.d.ts

@@ -1,7 +1,8 @@
-import { f as Result } from "../result-mijqfoJN.js";
-import { n as StripeSource } from "../stripe-BSEwKCni.js";
+import { f as Result } from "../result-C6jDfedy.js";
+import { n as StripeSource } from "../stripe-X22LjuH-.js";
 import { S as toDecimal, _ as negateMoney, a as allocateMoney, b as subtractMoney, c as formatMoney, d as isRate, f as minorUnits, g as multiplyMoney, h as moneyToJson, i as addMoney, l as isCurrency, m as moneyFromJson, n as Money, o as applyRate, p as money, r as MoneyJson, s as compareMoney, t as CurrencyMismatchError, u as isMoney, v as parseMoney, x as sumMoney, y as roundHalfEven } from "../money-BNRdJQzA.js";
-import { C as PaymentProvider, D as RefundStatus, E as RefundInput, O as invalidPaymentAmount, S as PaymentEventType, T as Refund, _ as taxProviderOf, a as TaxCart, b as PaymentCallOptions, c as TaxLine, d as TaxRates, f as TaxReverseInput, g as reversalOf, h as invalidTaxCart, i as TaxCallOptions, k as paymentProviderOf, l as TaxProvider, m as fixedRates, n as SHIPPING_LINE, o as TaxCartLine, p as TaxTransaction, r as TaxAddress, s as TaxCommitInput, t as FixedRatesOptions, u as TaxQuote, v as CreatePaymentInput, w as PaymentStatus, x as PaymentEvent, y as Payment } from "../tax-BHSCb5Rw.js";
+import { a as PaymentEventType, c as Refund, d as invalidPaymentAmount, f as paymentProviderOf, i as PaymentEvent, l as RefundInput, n as Payment, o as PaymentProvider, r as PaymentCallOptions, s as PaymentStatus, t as CreatePaymentInput, u as RefundStatus } from "../payments-CBzQIjoX.js";
+import { _ as taxProviderOf, a as TaxCart, c as TaxLine, d as TaxRates, f as TaxReverseInput, g as reversalOf, h as invalidTaxCart, i as TaxCallOptions, l as TaxProvider, m as fixedRates, n as SHIPPING_LINE, o as TaxCartLine, p as TaxTransaction, r as TaxAddress, s as TaxCommitInput, t as FixedRatesOptions, u as TaxQuote } from "../tax-CIIxd8Zf.js";
 //#region src/commerce/iso4217.d.ts
 /**
  * Minor units per ISO 4217 currency code, from ISO 4217 List One as published

package/dist/commerce/index.js

@@ -1,13 +1,13 @@
-import { n as dbError } from "../errors-D7u24ZJH.js";
+import { n as dbError } from "../errors-03ysrOt4.js";
 import { c as optionalTemporal } from "../temporal-DLZlWbOi.js";
-import { t as temporal } from "../temporal-required-Dt4mcPsi.js";
-import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../result-DIT_qp4G.js";
+import { t as temporal } from "../temporal-required-B8qQHYbI.js";
+import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../result-B3m7xtRY.js";
 import { t as ISO_4217_MINOR_UNITS } from "../iso4217-B-durg_y.js";
-import { s as verifyStripeWebhook } from "../verify-BCmBaHlN.js";
+import { s as verifyStripeWebhook } from "../verify-27w0I5C9.js";
 import { _ as roundHalfEven, a as compareMoney, b as toDecimal, c as isMoney, d as money, f as moneyFromJson, g as parseMoney, h as negateMoney, i as applyRate, l as isRate, m as multiplyMoney, n as addMoney, o as formatMoney, p as moneyToJson, r as allocateMoney, s as isCurrency, t as CurrencyMismatchError, u as minorUnits, v as subtractMoney, y as sumMoney } from "../money-BZl985O-.js";
-import { n as paymentProviderOf, t as invalidPaymentAmount } from "../payments-6uuergov.js";
+import { n as paymentProviderOf, t as invalidPaymentAmount } from "../payments-BtScsgPS.js";
 import { t as lazyStripe } from "../stripe-BJUfp5jM.js";
-import { a as taxProviderOf, i as reversalOf, n as fixedRates, r as invalidTaxCart, t as SHIPPING_LINE } from "../tax-keSd-q_1.js";
+import { a as taxProviderOf, i as reversalOf, n as fixedRates, r as invalidTaxCart, t as SHIPPING_LINE } from "../tax-DmOMjrYc.js";
 //#region src/commerce/stripe-shared.ts
 /**
 * Stripe's decimals where they differ from ISO 4217

package/dist/compiler-BCyHFI6n.d.ts

@@ -0,0 +1,14 @@
+import { v as Operation } from "./executor-CPyrQdjh.js";
+import { a as PostgrestPlan } from "./postgrest-DHLlN2nS.js";
+//#region src/core/compiler.d.ts
+/**
+ * Turns an IR operation into something a backend runs. An `Executor` for a new
+ * backend usually pairs with a `Compiler` for it.
+ */
+interface Compiler<TTarget> {
+  readonly target: string;
+  compile(op: Operation): TTarget;
+}
+declare const postgrestCompiler: Compiler<PostgrestPlan>;
+//#endregion
+export { postgrestCompiler as n, Compiler as t };

package/dist/compose--4D1FoPN.js

@@ -0,0 +1,53 @@
+import { n as dbError } from "./errors-03ysrOt4.js";
+import { t as AsyncResult } from "./result-B3m7xtRY.js";
+import { n as credentialRefInTenant, t as credentialProviderOf } from "./provider-EJ0-5GwJ.js";
+//#region src/credentials/compose.ts
+const NO_CAPABILITIES = {
+	userSubjects: false,
+	authorization: false,
+	revoke: false,
+	inbound: false
+};
+const unsupported = (provider, what) => dbError("unsupported", `The credential provider "${provider}" ${what}`, { hint: "CREDENTIAL_UNSUPPORTED" });
+/**
+* One provider over several: each call goes to the provider whose `name` is the
+* ref's `provider`. A ref no provider handles fails with `invalid_input`
+* (`CREDENTIAL_PROVIDER_UNKNOWN`), and an optional method the chosen provider
+* lacks with `unsupported`.
+*/
+function credentialRouter(providers, options = {}) {
+	const byName = /* @__PURE__ */ new Map();
+	for (const provider of providers) {
+		if (byName.has(provider.name)) throw new TypeError(`credentialRouter got two providers named "${provider.name}"`);
+		byName.set(provider.name, credentialProviderOf(provider));
+	}
+	const unknown = (ref) => dbError("invalid_input", `No credential provider named "${ref.provider}" is configured`, { hint: "CREDENTIAL_PROVIDER_UNKNOWN" });
+	const route = (ref, then) => {
+		const provider = byName.get(ref.provider);
+		return provider === void 0 ? AsyncResult.err(unknown(ref)) : then(provider);
+	};
+	return {
+		apiVersion: 1,
+		name: options.name ?? "router",
+		getToken: (ref, tokenOptions) => route(ref, (provider) => provider.getToken(ref, tokenOptions)),
+		capabilities: (ref) => byName.get(ref.provider)?.capabilities(ref) ?? NO_CAPABILITIES,
+		startAuthorization: (ref, startOptions) => route(ref, (provider) => provider.startAuthorization === void 0 ? AsyncResult.err(unsupported(provider.name, "doesn't authorize accounts")) : provider.startAuthorization(ref, startOptions)),
+		completeAuthorization: (ref, completeOptions) => route(ref, (provider) => provider.completeAuthorization === void 0 ? AsyncResult.err(unsupported(provider.name, "doesn't authorize accounts")) : provider.completeAuthorization(ref, completeOptions)),
+		revoke: (ref, revokeOptions) => route(ref, (provider) => provider.revoke(ref, revokeOptions)),
+		verifyInbound: (request, ref) => route(ref, (provider) => provider.verifyInbound === void 0 ? AsyncResult.err(unsupported(provider.name, "doesn't verify inbound requests")) : provider.verifyInbound(request, ref)),
+		set: (ref, value, setOptions) => route(ref, (provider) => provider.set === void 0 ? AsyncResult.err(unsupported(provider.name, "can't store secrets")) : provider.set(ref, value, setOptions))
+	};
+}
+/**
+* Revokes the credential a ref names when a provider is configured and can
+* revoke it. Resolves `false` without a provider, for a provider without
+* revocation, or for a ref outside `options.tenant`.
+*/
+function revokeIfConfigured(provider, ref, options) {
+	if (provider === void 0) return AsyncResult.ok(false);
+	if ("tenant" in options && !credentialRefInTenant(ref, options.tenant)) return AsyncResult.ok(false);
+	if (!provider.capabilities(ref).revoke) return AsyncResult.ok(false);
+	return provider.revoke(ref, { subject: options.subject });
+}
+//#endregion
+export { revokeIfConfigured as n, credentialRouter as t };

package/dist/composite-Dv6o2BSw.js

@@ -0,0 +1,130 @@
+import { o as problemResponse } from "./problem-BWElIgIb.js";
+import { T as serverCore, _ as withSupport, g as withTenant, s as createServer, w as withServerContext, y as withSession } from "./adapter-BCFAg58A.js";
+import { s as withPrimaryPin } from "./replicas-BvIL4_jL.js";
+import { r as guard, t as defaultExpose } from "./respond-z_yfyitp.js";
+import { a as withAuthMode, i as withAuth, o as withJwtClaims, s as withUserClaims } from "./claims-T8TWZ53E.js";
+import { defineComposite, defineMiddleware } from "@supabase/middleware";
+//#region src/server/entries/db.ts
+/**
+* Entry contributing `ctx.db`: repositories over PostgREST as the caller (RLS
+* applies), from `ctx.bs`. Reads go to the read replica when one is
+* configured.
+*/
+function withDb() {
+	return defineMiddleware({
+		key: "db",
+		run: () => (_request, ctx) => Promise.resolve({ db: ctx.bs.db })
+	})();
+}
+//#endregion
+//#region src/server/entries/guard.ts
+/**
+* Entry that answers callers `allow`, `aal` or `scopes` refuse with a 401 or
+* 403 Problem Details response, before the handler runs. It contributes
+* `ctx.guard`, the options the caller passed.
+*/
+function withGuard(config = {}) {
+	const { expose = defaultExpose(), ...options } = config;
+	return defineMiddleware({
+		key: "guard",
+		run: () => (request, ctx) => {
+			const denied = guard(ctx.auth, options.allow, options.aal, options.scopes);
+			return Promise.resolve(denied ? problemResponse(denied, {
+				instance: new URL(request.url).pathname,
+				expose
+			}) : { guard: options });
+		}
+	})();
+}
+//#endregion
+//#region src/server/entries/replica.ts
+/**
+* Entry contributing `ctx.replica`, where `ctx.db` reads go when a read URL is
+* configured (`undefined` without one). On the way out it sets the
+* `bs-primary-until` cookie after a write, so the caller's next reads see it.
+*/
+function withReplica(core) {
+	return defineMiddleware({
+		key: "replica",
+		run: () => async function* run(_request, ctx) {
+			const { replica } = ctx.bs;
+			const response = yield { replica };
+			return withPrimaryPin(response, ctx.bs.replica, core.pinMs);
+		}
+	})();
+}
+//#endregion
+//#region src/server/entries/sql.ts
+/**
+* Entry contributing `ctx.sql`: repositories over direct Postgres as the
+* caller, with RLS, from `createServer`'s `postgres`, else `undefined`.
+* `withPostgresClient` reads `jwtClaims`, so it runs after this entry and can't
+* back `ctx.sql`; importing the SQL compiler here would also ship it to every
+* app without Postgres.
+*/
+function withSql() {
+	return defineMiddleware({
+		key: "sql",
+		run: () => (_request, ctx) => Promise.resolve({ sql: ctx.bs.sql })
+	})();
+}
+//#endregion
+//#region src/server/composite.ts
+/**
+* The single-key entries `withBetterSupabase` bundles, outermost first. The
+* framework factories run these directly, so their terminal sees `auth`.
+*/
+function betterSupabaseParts(core, config = {}) {
+	const { refresh, cookies, waitUntil, encode, cookieScopes, checkSession, ...guardConfig } = config;
+	return [
+		withSession(core, {
+			...refresh === void 0 ? {} : { refresh },
+			...cookies === void 0 ? {} : { cookies },
+			...waitUntil === void 0 ? {} : { waitUntil },
+			...encode === void 0 ? {} : { encode },
+			...cookieScopes === void 0 ? {} : { cookieScopes },
+			...checkSession === void 0 ? {} : { checkSession }
+		}),
+		withTenant(core),
+		withSupport(core),
+		withServerContext(core),
+		withAuth(),
+		withGuard(guardConfig),
+		withJwtClaims(),
+		withUserClaims(),
+		withAuthMode(),
+		withDb(),
+		withSql(),
+		withReplica(core)
+	];
+}
+function isDefinition(source) {
+	return "connect" in source && typeof source.connect === "function";
+}
+function withBetterSupabase(source, config = {}) {
+	const server = isDefinition(source) ? createServer(source, config) : source;
+	const core = serverCore(server);
+	const { refresh, cookies, waitUntil, encode, cookieScopes, checkSession, allow, aal, scopes, expose } = config;
+	const parts = betterSupabaseParts(core, {
+		...refresh === void 0 ? {} : { refresh },
+		...cookies === void 0 ? {} : { cookies },
+		...waitUntil === void 0 ? {} : { waitUntil },
+		...encode === void 0 ? {} : { encode },
+		...cookieScopes === void 0 ? {} : { cookieScopes },
+		...checkSession === void 0 ? {} : { checkSession },
+		...allow === void 0 ? {} : { allow },
+		...aal === void 0 ? {} : { aal },
+		...scopes === void 0 ? {} : { scopes },
+		...expose === void 0 ? {} : { expose }
+	});
+	return defineComposite({
+		build: () => parts,
+		internal: [
+			"session",
+			"auth",
+			"guard"
+		]
+	})();
+}
+//#endregion
+export { withGuard as n, withBetterSupabase as t };

package/dist/composite-KllwFim2.d.ts

@@ -0,0 +1,82 @@
+import { M as AnyFunctions, N as AnyModels } from "./executor-CPyrQdjh.js";
+import { r as AuthState } from "./resolve-CzUKTIMq.js";
+import { o as Db, t as BetterSupabase } from "./define-Dw7pRO4h.js";
+import { K as ReplicaState, a as ServerContext, c as ServerOptions, n as BetterServer, v as ActiveSupport } from "./server-types-BOs-eFpo.js";
+import { n as SessionEntryConfig } from "./session-BgsOPGZs.js";
+import { r as GuardOptions } from "./respond-CZYibxUx.js";
+import { SupabaseClient } from "@supabase/supabase-js";
+import { Entry, SingleKeyEntry } from "@supabase/middleware";
+import { AuthMode, JWTClaims, UserClaims } from "@supabase/server";
+//#region src/server/entries/guard.d.ts
+interface GuardEntryConfig extends GuardOptions {
+  /**
+   * Include error messages in problem responses. Defaults to `NODE_ENV ===
+   * 'development'`.
+   */
+  readonly expose?: boolean;
+}
+/**
+ * Entry that answers callers `allow`, `aal` or `scopes` refuse with a 401 or
+ * 403 Problem Details response, before the handler runs. It contributes
+ * `ctx.guard`, the options the caller passed.
+ */
+declare function withGuard<C, P>(config?: GuardEntryConfig): SingleKeyEntry<"guard", {
+  readonly auth: AuthState<C, P>;
+}, GuardOptions>;
+//#endregion
+//#region src/server/composite.d.ts
+/** What `withBetterSupabase` takes besides the definition or server. */
+interface BetterSupabaseConfig extends SessionEntryConfig, GuardEntryConfig {}
+/** The keys `withBetterSupabase` puts on `ctx`. */
+interface BetterSupabaseContributions<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> {
+  /**
+   * The full request context: `auth`, `supabase`, `stats()`, `apply()` and the
+   * rest.
+   */
+  bs: ServerContext<M, F, E, C, P, B>;
+  /** The verified token's payload, or `null`; the key `withSupabase` uses. */
+  jwtClaims: (JWTClaims & C) | null;
+  userClaims: UserClaims | null;
+  authMode: AuthMode;
+  /** Repositories over PostgREST as the caller. */
+  db: Db<M, F, E, SupabaseClient, B>;
+  /**
+   * Repositories over direct Postgres as the caller, when Postgres is
+   * configured or upstream.
+   */
+  sql: Db<M, F, E, undefined, B> | undefined;
+  tenant: string | undefined;
+  support: ActiveSupport | undefined;
+  replica: ReplicaState | undefined;
+}
+/**
+ * The entry `withBetterSupabase` returns, for `pipeline` and the framework
+ * bridges.
+ */
+type BetterSupabaseEntry<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> = Entry<BetterSupabaseContributions<M, F, E, C, P, B>>;
+/**
+ * The whole better-supabase server as one `@supabase/middleware` entry: it
+ * verifies the caller (bearer token or session cookie), refuses callers the
+ * guard rejects with Problem Details, and contributes `ctx.db`, `ctx.sql`,
+ * `ctx.bs` and the `withSupabase` keys (`jwtClaims`, `userClaims`, `authMode`),
+ * so `withPostgresClient` and `withOpenFeature` compose after it. Refreshed
+ * cookies and `bs-primary-until` go out on the response.
+ *
+ * ```ts
+ * export default {
+ *   fetch: pipeline(
+ *     [withBetterSupabase(betterSupabase)],
+ *     async (req, ctx) =>
+ *       Response.json(await ctx.db.notes.findMany().orThrow()),
+ *   ),
+ * };
+ * ```
+ *
+ * Pass a server from `createServer` to share its clients and JWKS cache with
+ * the rest of the app; pass the definition to build one with `config`'s server
+ * options.
+ */
+declare function withBetterSupabase<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P, B>, config?: BetterSupabaseConfig & ServerOptions): BetterSupabaseEntry<M, F, E, C, P, B>;
+declare function withBetterSupabase<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown>(server: BetterServer<M, F, E, C, P, B>, config?: BetterSupabaseConfig): BetterSupabaseEntry<M, F, E, C, P, B>;
+//#endregion
+export { GuardEntryConfig as a, withBetterSupabase as i, BetterSupabaseContributions as n, withGuard as o, BetterSupabaseEntry as r, BetterSupabaseConfig as t };

package/dist/config/index.d.ts

@@ -1,7 +1,7 @@
-import { c as Casing } from "../types-DmshMaXz.js";
-import { _ as BlocksConfig, a as AuthorizationProvider, c as AuthorizationScope, d as AccessBlockConfig, f as ActiveTenantSource, g as BlockScope, h as BlockMode, i as AuthorizationPermission, l as AuthorizationTokenHook, m as BlockConfig, n as AuthorizationMembership, o as AuthorizationRequirement, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, u as providerApiProblem, v as DEFAULT_ACTIVE_TENANT, x as SqlNaming, y as DisabledRow } from "../authorization-CB69cvnA.js";
-import { n as SubjectsConfig, t as SubjectConfig } from "../subjects-DQ2SU4cA.js";
-import { a as FieldFormat, o as FieldFormatInput, r as FIELD_FORMATS } from "../field-formats-BX2FqLle.js";
-import { $t as SnapshotExtras, A as TopicTriggerConfig, An as AppRollupConfig, At as SkillsAgent, B as ExposeRole, Bt as CatalogGrant, C as EntitlementsConfig, Cn as AppColumnFormat, Ct as GenTask, D as SeedConfig, Dn as AppReference, Dt as OpenApiConfig, E as ResolvedSqlConfig, En as AppOnDeleteAction, Et as MigrationSafetyConfig, F as VectorDistance, Fn as AppTableVersions, Ft as CatalogColumnGrant, Gt as CatalogUnique, H as ResolvedExpose, Ht as CatalogPolicy, I as VectorSearchConfig, In as AppTablesConfig, It as CatalogEnum, Jt as ExtrasHookFunction, Kt as ExtrasFunction, L as ColumnPrivilege, Lt as CatalogForeignKey, M as TopicTriggerPayloadValueConfig, Mn as AppTableEventKind, Mt as Catalog, N as TopicTriggerTopicConfig, Nn as AppTableEvents, Nt as CatalogCheck, O as SqlConfig, On as AppReferenceTarget, Ot as ScaffoldApiConfig, P as TopicTriggerValueConfig, Pn as AppTableSubject, Pt as CatalogColumn, Qt as SnapshotBucket, R as ExposeConfig, Rt as CatalogFunction, S as EntitlementPlansSource, Sn as AppColumnConfig, St as GenConfig, T as RealtimeConfig, Tn as AppLookupConfig, Tt as KeysConfig, Ut as CatalogTable, V as Privilege, Vt as CatalogIndex, Wt as CatalogTrigger, Xt as ForeignKeyAction, Yt as ExtrasTable, Zt as Snapshot, _ as TenantConfig, _n as APP_COLUMN_TYPES, a as Generator, an as RpcFunctionArg, b as EnvironmentConfig, bn as APP_TABLE_EVENT_KINDS, bt as DoctorConfig, c as GeneratorModel, cn as RpcReturnColumn, d as JsonTypeConfig, dn as INTEGRATION_INFO, en as GeneratorMetadata, f as PluginFlagsConfig, fn as INTEGRATION_NAMES, g as TableConfig, gn as APP_COLUMN_FORMATS, h as SourceConfig, hn as APP_COLUMN_ACCESS, i as GeneratedFile, in as RpcFunction, j as TopicTriggerLookupConfig, jn as AppTableConfig, jt as SkillsConfig, k as SqlWorkflow, kn as AppRollupAggregate, kt as ScaffoldConfig, l as GeneratorTable, ln as RpcTypeReference, m as SoftDeleteConfig, mn as SKILLS_AGENTS, n as ClaimsConfig, nn as PostgresFunction, o as GeneratorColumn, on as RpcFunctionOverload, p as RelationsConfig, pn as IntegrationInfo, qt as ExtrasHook, r as CodecsConfig, rn as PostgresFunctionArg, s as GeneratorInput, sn as RpcFunctionReturns, t as ActorConfig, tn as PostgresColumn, u as JsonSchemaSource, un as GEN_TASKS, v as TimestampsConfig, vn as APP_ON_DELETE_ACTIONS, w as BucketConfig, wn as AppColumnType, wt as IntegrationName, x as ResolvedConfig, xn as AppColumnAccess, xt as EnvFileConfig, y as BetterSupabaseConfig, yn as APP_ROLLUP_AGGREGATES, z as ExposePrivilege, zt as CatalogFunctionArg } from "../codegen-DGtOsqz9.js";
-import { _ as defineConfig, a as valibot, b as CONFIG_DEFAULTS, c as JsonSchemaGeneratorOptions, d as JsonSchemaTarget, f as ClaimPaths, g as CONFIG_SCHEMA_URL, h as tenantClaimPaths, i as ValibotGeneratorOptions, l as buildJsonSchema, m as claimPaths, n as ZodGeneratorOptions, o as StandardSchemaGeneratorOptions, p as DEFAULT_CLAIMS, r as zod, s as standardSchema, t as ZodFlavor, u as jsonSchema, v as resolveConfig, y as resolveJsonSchema } from "../index-B5XcM3VY.js";
-export { APP_COLUMN_ACCESS, APP_COLUMN_FORMATS, APP_COLUMN_TYPES, APP_ON_DELETE_ACTIONS, APP_ROLLUP_AGGREGATES, APP_TABLE_EVENT_KINDS, type AccessBlockConfig, type ActiveTenantSource, type ActorConfig, type AnyBlocksConfig, type AppColumnAccess, type AppColumnConfig, type AppColumnFormat, type AppColumnType, type AppLookupConfig, type AppOnDeleteAction, type AppReference, type AppReferenceTarget, type AppRollupAggregate, type AppRollupConfig, type AppTableConfig, type AppTableEventKind, type AppTableEvents, type AppTableSubject, type AppTableVersions, type AppTablesConfig, type AuthorizationFunctions, type AuthorizationMembership, type AuthorizationOperation, type AuthorizationPermission, type AuthorizationProvider, type AuthorizationRequirement, type AuthorizationRoleSource, type AuthorizationScope, type AuthorizationTokenHook, type BetterSupabaseConfig, type BlockConfig, type BlockMode, type BlockScope, type BlocksConfig, type BucketConfig, CONFIG_DEFAULTS, CONFIG_SCHEMA_URL, type Casing, type Catalog, type CatalogCheck, type CatalogColumn, type CatalogColumnGrant, type CatalogEnum, type CatalogForeignKey, type CatalogFunction, type CatalogFunctionArg, type CatalogGrant, type CatalogIndex, type CatalogPolicy, type CatalogTable, type CatalogTrigger, type CatalogUnique, type ClaimPaths, type ClaimsConfig, type CodecsConfig, type ColumnPrivilege, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, type DisabledRow, type DoctorConfig, type EntitlementPlansSource, type EntitlementsConfig, type EnvFileConfig, type EnvironmentConfig, type ExposeConfig, type ExposePrivilege, type ExposeRole, type ExtrasFunction, type ExtrasHook, type ExtrasHookFunction, type ExtrasTable, FIELD_FORMATS, type FieldFormat, type FieldFormatInput, type ForeignKeyAction, GEN_TASKS, type GenConfig, type GenTask, type GeneratedFile, type Generator, type GeneratorColumn, type GeneratorInput, type GeneratorMetadata, type GeneratorModel, type GeneratorTable, INTEGRATION_INFO, INTEGRATION_NAMES, type IntegrationInfo, type IntegrationName, type JsonSchemaGeneratorOptions, type JsonSchemaSource, type JsonSchemaTarget, type JsonTypeConfig, type KeysConfig, type MigrationSafetyConfig, type OpenApiConfig, type PluginFlagsConfig, type PostgresColumn, type PostgresFunction, type PostgresFunctionArg, type Privilege, type RealtimeConfig, type RelationsConfig, type ResolvedConfig, type ResolvedExpose, type ResolvedSqlConfig, type RpcFunction, type RpcFunctionArg, type RpcFunctionOverload, type RpcFunctionReturns, type RpcReturnColumn, type RpcTypeReference, SKILLS_AGENTS, type ScaffoldApiConfig, type ScaffoldConfig, type SeedConfig, type SkillsAgent, type SkillsConfig, type Snapshot, type SnapshotBucket, type SnapshotExtras, type SoftDeleteConfig, type SourceConfig, type SqlConfig, type SqlNaming, type SqlWorkflow, type StandardSchemaGeneratorOptions, type SubjectConfig, type SubjectsConfig, type TableConfig, type TenantConfig, type TimestampsConfig, type TopicTriggerConfig, type TopicTriggerLookupConfig, type TopicTriggerPayloadValueConfig, type TopicTriggerTopicConfig, type TopicTriggerValueConfig, type ValibotGeneratorOptions, type VectorDistance, type VectorSearchConfig, type ZodFlavor, type ZodGeneratorOptions, buildJsonSchema, claimPaths, defineConfig, jsonSchema, providerApiProblem, resolveConfig, resolveJsonSchema, standardSchema, tenantClaimPaths, valibot, zod };
+import { I as Casing } from "../executor-CPyrQdjh.js";
+import { _ as BlocksConfig, a as AuthorizationProvider, b as EntitiesConfig, c as AuthorizationScope, d as AccessBlockConfig, f as ActiveTenantSource, g as BlockScope, h as BlockMode, i as AuthorizationPermission, l as AuthorizationTokenHook, m as BlockConfig, n as AuthorizationMembership, o as AuthorizationRequirement, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, u as providerApiProblem, v as DEFAULT_ACTIVE_TENANT, w as tenantNameOf, x as EntityConfig, y as DisabledRow } from "../authorization-BuT26_sR.js";
+import { n as SubjectsConfig, t as SubjectConfig } from "../subjects-B6p4oAZJ.js";
+import { a as FieldFormat, o as FieldFormatInput, r as FIELD_FORMATS } from "../field-formats-DbjaDXoZ.js";
+import { A as ConfigReferences, C as blockSubjectTypes, D as AppTableNames, E as resolveConfig, M as TypedReference, N as resolveJsonSchema, O as BlockTableReference, P as CONFIG_DEFAULTS, S as blockEntityRenames, T as defineConfig, _ as DEFAULT_CLAIMS, a as valibot, b as BlockEntity, c as NuqsGeneratorOptions, d as factories, f as JsonSchemaGeneratorOptions, g as ClaimPaths, h as JsonSchemaTarget, i as ValibotGeneratorOptions, j as RoleNames, k as BucketName, l as nuqs, m as jsonSchema, n as ZodGeneratorOptions, o as StandardSchemaGeneratorOptions, p as buildJsonSchema, r as zod, s as standardSchema, t as ZodFlavor, u as FactoriesGeneratorOptions, v as claimPaths, w as CONFIG_SCHEMA_URL, x as blockEntities, y as tenantClaimPaths } from "../index-DK-YTWLd.js";
+import { $ as ResolvedSqlConfig, $n as RpcFunction, A as GeneratorFunctionArg, An as CatalogEnum, At as AppTableVersions, B as RelationsConfig, Bn as ExtrasDomain, C as Generator, Cn as ScaffoldConfig, Ct as AppReferenceTarget, D as GeneratorEntitySchemas, Dn as CatalogCheck, Dt as AppTableEventKind, E as GeneratorColumn, En as Catalog, Et as AppTableConfig, F as GeneratorNoun, Fn as CatalogIndex, Ft as ExposeRole, G as TimestampsConfig, Gn as ForeignKeyAction, H as SourceConfig, Hn as ExtrasHook, I as GeneratorTable, In as CatalogPolicy, It as Privilege, J as ResolvedConfig, Jn as SnapshotExtras, K as BetterSupabaseConfig, Kn as Snapshot, L as JsonSchemaSource, Ln as CatalogTable, Lt as ResolvedExpose, M as GeneratorInputSchema, Mn as CatalogFunction, Mt as ColumnPrivilege, N as GeneratorJsonSchema, Nn as CatalogFunctionArg, Nt as ExposeConfig, O as GeneratorField, On as CatalogColumn, Ot as AppTableEvents, P as GeneratorModel, Pn as CatalogGrant, Pt as ExposePrivilege, Q as RealtimeConfig, Qn as PostgresFunctionArg, R as JsonTypeConfig, Rn as CatalogTrigger, S as GeneratedFile, Sn as ScaffoldApiConfig, St as AppReference, T as GeneratorBlockEntity, Tn as SkillsConfig, Tt as AppRollupConfig, U as TableConfig, Un as ExtrasHookFunction, V as SoftDeleteConfig, Vn as ExtrasFunction, W as TenantConfig, Wn as ExtrasTable, X as EntitlementsConfig, Xn as PostgresColumn, Y as EntitlementPlansSource, Yn as GeneratorMetadata, Z as BucketConfig, Zn as PostgresFunction, _n as GenTask, _t as AppColumnConfig, ar as GEN_TASKS, at as TopicTriggerPayloadValueConfig, b as ClaimsConfig, bn as MigrationSafetyConfig, bt as AppLookupConfig, cr as IntegrationInfo, ct as VectorDistance, dt as APP_COLUMN_FORMATS, er as RpcFunctionArg, et as SeedConfig, ft as APP_COLUMN_TYPES, gn as GenConfig, gt as AppColumnAccess, hn as EnvFileConfig, ht as APP_TABLE_EVENT_KINDS, ir as RpcTypeReference, it as TopicTriggerLookupConfig, j as GeneratorInput, jn as CatalogForeignKey, jt as AppTablesConfig, k as GeneratorFunction, kn as CatalogColumnGrant, kt as AppTableSubject, lr as SKILLS_AGENTS, lt as VectorSearchConfig, mn as DoctorConfig, mt as APP_ROLLUP_AGGREGATES, n as ExpandedConfig, nr as RpcFunctionReturns, nt as SqlWorkflow, or as INTEGRATION_INFO, ot as TopicTriggerTopicConfig, pt as APP_ON_DELETE_ACTIONS, q as EnvironmentConfig, qn as SnapshotBucket, rr as RpcReturnColumn, rt as TopicTriggerConfig, sr as INTEGRATION_NAMES, st as TopicTriggerValueConfig, tr as RpcFunctionOverload, tt as SqlConfig, ut as APP_COLUMN_ACCESS, vn as IntegrationName, vt as AppColumnFormat, w as GeneratorBlock, wn as SkillsAgent, wt as AppRollupAggregate, x as CodecsConfig, xn as OpenApiConfig, xt as AppOnDeleteAction, y as ActorConfig, yn as KeysConfig, yt as AppColumnType, z as PluginFlagsConfig, zn as CatalogUnique } from "../config-BuOz_O-y.js";
+export { APP_COLUMN_ACCESS, APP_COLUMN_FORMATS, APP_COLUMN_TYPES, APP_ON_DELETE_ACTIONS, APP_ROLLUP_AGGREGATES, APP_TABLE_EVENT_KINDS, type AccessBlockConfig, type ActiveTenantSource, type ActorConfig, type AnyBlocksConfig, type AppColumnAccess, type AppColumnConfig, type AppColumnFormat, type AppColumnType, type AppLookupConfig, type AppOnDeleteAction, type AppReference, type AppReferenceTarget, type AppRollupAggregate, type AppRollupConfig, type AppTableConfig, type AppTableEventKind, type AppTableEvents, type AppTableNames, type AppTableSubject, type AppTableVersions, type AppTablesConfig, type AuthorizationFunctions, type AuthorizationMembership, type AuthorizationOperation, type AuthorizationPermission, type AuthorizationProvider, type AuthorizationRequirement, type AuthorizationRoleSource, type AuthorizationScope, type AuthorizationTokenHook, type BetterSupabaseConfig, type BlockConfig, type BlockEntity, type BlockMode, type BlockScope, type BlockTableReference, type BlocksConfig, type BucketConfig, type BucketName, CONFIG_DEFAULTS, CONFIG_SCHEMA_URL, type Casing, type Catalog, type CatalogCheck, type CatalogColumn, type CatalogColumnGrant, type CatalogEnum, type CatalogForeignKey, type CatalogFunction, type CatalogFunctionArg, type CatalogGrant, type CatalogIndex, type CatalogPolicy, type CatalogTable, type CatalogTrigger, type CatalogUnique, type ClaimPaths, type ClaimsConfig, type CodecsConfig, type ColumnPrivilege, type ConfigReferences, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, type DisabledRow, type DoctorConfig, type EntitiesConfig, type EntitlementPlansSource, type EntitlementsConfig, type EntityConfig, type EnvFileConfig, type EnvironmentConfig, type ExpandedConfig, type ExposeConfig, type ExposePrivilege, type ExposeRole, type ExtrasDomain, type ExtrasFunction, type ExtrasHook, type ExtrasHookFunction, type ExtrasTable, FIELD_FORMATS, type FactoriesGeneratorOptions, type FieldFormat, type FieldFormatInput, type ForeignKeyAction, GEN_TASKS, type GenConfig, type GenTask, type GeneratedFile, type Generator, type GeneratorBlock, type GeneratorBlockEntity, type GeneratorColumn, type GeneratorEntitySchemas, type GeneratorField, type GeneratorFunction, type GeneratorFunctionArg, type GeneratorInput, type GeneratorInputSchema, type GeneratorJsonSchema, type GeneratorMetadata, type GeneratorModel, type GeneratorNoun, type GeneratorTable, INTEGRATION_INFO, INTEGRATION_NAMES, type IntegrationInfo, type IntegrationName, type JsonSchemaGeneratorOptions, type JsonSchemaSource, type JsonSchemaTarget, type JsonTypeConfig, type KeysConfig, type MigrationSafetyConfig, type NuqsGeneratorOptions, type OpenApiConfig, type PluginFlagsConfig, type PostgresColumn, type PostgresFunction, type PostgresFunctionArg, type Privilege, type RealtimeConfig, type RelationsConfig, type ResolvedConfig, type ResolvedExpose, type ResolvedSqlConfig, type RoleNames, type RpcFunction, type RpcFunctionArg, type RpcFunctionOverload, type RpcFunctionReturns, type RpcReturnColumn, type RpcTypeReference, SKILLS_AGENTS, type ScaffoldApiConfig, type ScaffoldConfig, type SeedConfig, type SkillsAgent, type SkillsConfig, type Snapshot, type SnapshotBucket, type SnapshotExtras, type SoftDeleteConfig, type SourceConfig, type SqlConfig, type SqlWorkflow, type StandardSchemaGeneratorOptions, type SubjectConfig, type SubjectsConfig, type TableConfig, type TenantConfig, type TimestampsConfig, type TopicTriggerConfig, type TopicTriggerLookupConfig, type TopicTriggerPayloadValueConfig, type TopicTriggerTopicConfig, type TopicTriggerValueConfig, type TypedReference, type ValibotGeneratorOptions, type VectorDistance, type VectorSearchConfig, type ZodFlavor, type ZodGeneratorOptions, blockEntities, blockEntityRenames, blockSubjectTypes, buildJsonSchema, claimPaths, defineConfig, factories, jsonSchema, nuqs, providerApiProblem, resolveConfig, resolveJsonSchema, standardSchema, tenantClaimPaths, tenantNameOf, valibot, zod };

package/dist/config/index.js

@@ -1,8 +1,8 @@
-import { a as CONFIG_DEFAULTS, i as resolveJsonSchema, n as DEFAULT_ACTIVE_TENANT } from "../blocks-CR3vCYhj.js";
-import { A as GEN_TASKS, M as INTEGRATION_NAMES, N as SKILLS_AGENTS, j as INTEGRATION_INFO } from "../config-V6HMvce5.js";
+import { n as resolveJsonSchema, r as CONFIG_DEFAULTS } from "../resolved-names-Dr7brlLL.js";
+import { A as GEN_TASKS, M as INTEGRATION_NAMES, N as SKILLS_AGENTS, j as INTEGRATION_INFO } from "../config-Dh4D8lBa.js";
 import { a as tenantClaimPaths, r as claimPaths, t as DEFAULT_CLAIMS } from "../claims-Bp9My7XP.js";
+import { A as tenantNameOf, C as APP_ON_DELETE_ACTIONS, D as DEFAULT_ACTIVE_TENANT, S as APP_COLUMN_TYPES, T as APP_TABLE_EVENT_KINDS, b as APP_COLUMN_ACCESS, w as APP_ROLLUP_AGGREGATES, x as APP_COLUMN_FORMATS } from "../app-tables-C5aoI5rZ.js";
 import { r as FIELD_FORMATS } from "../field-formats-C6QKA3UR.js";
-import { C as APP_TABLE_EVENT_KINDS, S as APP_ROLLUP_AGGREGATES, b as APP_COLUMN_TYPES, v as APP_COLUMN_ACCESS, x as APP_ON_DELETE_ACTIONS, y as APP_COLUMN_FORMATS } from "../app-tables-0YZ9IskE.js";
-import { a as defineConfig, i as CONFIG_SCHEMA_URL, n as valibot, o as resolveConfig, r as standardSchema, s as providerApiProblem, t as zod } from "../config-xUf0dj0t.js";
-import { n as jsonSchema, t as buildJsonSchema } from "../json-schema-Bu4YCRbZ.js";
-export { APP_COLUMN_ACCESS, APP_COLUMN_FORMATS, APP_COLUMN_TYPES, APP_ON_DELETE_ACTIONS, APP_ROLLUP_AGGREGATES, APP_TABLE_EVENT_KINDS, CONFIG_DEFAULTS, CONFIG_SCHEMA_URL, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, FIELD_FORMATS, GEN_TASKS, INTEGRATION_INFO, INTEGRATION_NAMES, SKILLS_AGENTS, buildJsonSchema, claimPaths, defineConfig, jsonSchema, providerApiProblem, resolveConfig, resolveJsonSchema, standardSchema, tenantClaimPaths, valibot, zod };
+import { a as factories, c as resolveConfig, d as blockSubjectTypes, f as providerApiProblem, i as nuqs, l as blockEntities, n as valibot, o as CONFIG_SCHEMA_URL, r as standardSchema, s as defineConfig, t as zod, u as blockEntityRenames } from "../config-Dn0cC3bM.js";
+import { n as jsonSchema, t as buildJsonSchema } from "../json-schema-DWDTfD8J.js";
+export { APP_COLUMN_ACCESS, APP_COLUMN_FORMATS, APP_COLUMN_TYPES, APP_ON_DELETE_ACTIONS, APP_ROLLUP_AGGREGATES, APP_TABLE_EVENT_KINDS, CONFIG_DEFAULTS, CONFIG_SCHEMA_URL, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, FIELD_FORMATS, GEN_TASKS, INTEGRATION_INFO, INTEGRATION_NAMES, SKILLS_AGENTS, blockEntities, blockEntityRenames, blockSubjectTypes, buildJsonSchema, claimPaths, defineConfig, factories, jsonSchema, nuqs, providerApiProblem, resolveConfig, resolveJsonSchema, standardSchema, tenantClaimPaths, tenantNameOf, valibot, zod };