better-supabase 0.14.0 → 0.15.0

package/schemas/config-v1.json

@@ -9,1302 +9,1299 @@
       "type": "string"
     },
     "preset": {
-      "type": "string",
-      "minLength": 1,
-      "description": "A named preset (minimal, saas, consumer, crm, projects, helpdesk, chat, commerce, marketplace, scheduling, people, drive, docs, invoicing, forms, property, field-service, clinic, lms, events, legal, spend, contracts, customer-success, logistics, pos, fitness, nonprofit, itsm, compliance, construction, claims, community, feedback, ai, ai-chat, ai-agents, developer-api, automation, enterprise, admin, everything), a code from app.bettersupabase.com/create, or its URL. defineConfig expands it into blocks and its conventions, and the keys you set win."
-    },
-    "source": {
-      "type": "object",
-      "properties": {
-        "dbUrl": {
-          "type": "string",
-          "description": "Postgres connection string."
-        },
-        "projectRef": {
-          "type": "string",
-          "description": "Hosted project ref, read through the Management API read-only SQL endpoint."
-        },
-        "accessToken": {
-          "type": "string",
-          "description": "Management API token for projectRef. Defaults to $SUPABASE_ACCESS_TOKEN."
-        },
-        "snapshot": {
+      "anyOf": [
+        {
           "type": "string",
-          "description": "Read a saved introspection snapshot instead of connecting."
+          "minLength": 1
         },
-        "lite": {
-          "type": "boolean",
-          "description": "Read a Supabase Lite project's schema from [db] driver in supabase/config.toml. On when that key is present; false reads the database like any other project."
-        }
-      },
-      "additionalProperties": false,
-      "description": "Where codegen reads the database from. Without any of these, $DATABASE_URL and then the local stack are used."
-    },
-    "schemas": {
-      "type": "array",
-      "items": {
-        "type": "string"
-      },
-      "description": "Postgres schemas to generate.",
-      "default": ["public"]
-    },
-    "casing": {
-      "enum": ["snake", "camel"],
-      "type": "string",
-      "default": "snake"
-    },
-    "tables": {
-      "type": "object",
-      "additionalProperties": {
-        "type": "object",
-        "properties": {
-          "casing": {
-            "enum": ["snake", "camel"],
-            "type": "string"
-          },
-          "exclude": {
-            "type": "boolean"
-          },
-          "serviceRole": {
-            "type": "boolean",
-            "description": "Only service_role reaches the table. Models are still generated; doctor (BS106) checks that anon and authenticated have no grants."
-          },
-          "relations": {
-            "type": "object",
-            "additionalProperties": {
+        {
+          "type": "object",
+          "properties": {
+            "framework": {
+              "enum": [
+                "next",
+                "vite",
+                "tanstack-start",
+                "expo",
+                "sveltekit",
+                "nuxt",
+                "hono",
+                "astro",
+                "react-router"
+              ],
               "type": "string"
-            }
-          },
-          "insertOptional": {
-            "type": "array",
-            "items": {
+            },
+            "platforms": {
+              "enum": ["web", "native", "both"],
               "type": "string"
             },
-            "description": "Database names of not-null columns an insert may leave out because the database fills them, for example from a before insert trigger."
-          }
-        },
-        "additionalProperties": false
-      }
-    },
-    "output": {
-      "type": "string",
-      "description": "Main generated module.",
-      "default": "src/lib/supabase/generated.ts"
-    },
-    "postgrestVersion": {
-      "type": "string",
-      "description": "PostgREST major version written to database.types.ts.",
-      "default": "13"
-    },
-    "generateFeatures": {
-      "type": "boolean"
-    },
-    "json": {
-      "type": "object",
-      "additionalProperties": {
-        "anyOf": [
-          {
-            "type": "object",
-            "properties": {
-              "import": {
-                "type": "string",
-                "description": "`./path.ts#TypeName`"
-              },
-              "schema": {
-                "type": "object",
-                "additionalProperties": {},
-                "description": "JSON Schema enforced by `better-supabase add jsonb-schemas` (pg_jsonschema)."
+            "casing": {
+              "enum": ["snake", "camel"],
+              "type": "string"
+            },
+            "idType": {
+              "enum": ["uuid", "text", "bigint", "integer"],
+              "type": "string"
+            },
+            "scope": {
+              "enum": ["tenant", "user", "none"],
+              "type": "string"
+            },
+            "tenantName": {
+              "enum": ["organization", "workspace", "team"],
+              "type": "string"
+            },
+            "access": {
+              "enum": ["roles", "catalog", "provider", "custom"],
+              "type": "string"
+            },
+            "api": {
+              "enum": ["none", "api"],
+              "type": "string"
+            },
+            "integrations": {
+              "type": "array",
+              "items": {
+                "enum": [
+                  "next",
+                  "hono",
+                  "orpc",
+                  "edge",
+                  "expo",
+                  "mcp",
+                  "client",
+                  "react"
+                ],
+                "type": "string"
               }
             },
-            "required": ["import"],
-            "additionalProperties": false
-          },
-          {
-            "type": "object",
-            "properties": {
-              "type": {
-                "type": "string",
-                "description": "Inline TypeScript type."
-              },
-              "schema": {
-                "type": "object",
-                "additionalProperties": {},
-                "description": "JSON Schema enforced by `better-supabase add jsonb-schemas` (pg_jsonschema)."
+            "blocks": {
+              "type": "array",
+              "items": {
+                "type": "string"
               }
             },
-            "required": ["type"],
-            "additionalProperties": false
-          }
-        ]
-      },
-      "description": "Types for jsonb columns, keyed by `table.column`."
+            "instances": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "properties": {
+                  "block": {
+                    "type": "string"
+                  },
+                  "on": {
+                    "anyOf": [
+                      {
+                        "type": "array",
+                        "items": {
+                          "type": "string"
+                        }
+                      },
+                      {
+                        "type": "object",
+                        "additionalProperties": {
+                          "type": "object",
+                          "additionalProperties": {}
+                        }
+                      }
+                    ]
+                  },
+                  "uses": {
+                    "type": "object",
+                    "additionalProperties": {
+                      "type": "string"
+                    }
+                  },
+                  "tables": {
+                    "type": "object",
+                    "additionalProperties": {
+                      "anyOf": [
+                        {
+                          "type": "string"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ]
+                    }
+                  },
+                  "names": {
+                    "type": "object",
+                    "additionalProperties": {
+                      "type": "string"
+                    }
+                  },
+                  "options": {
+                    "type": "object",
+                    "additionalProperties": {}
+                  }
+                },
+                "additionalProperties": false
+              }
+            }
+          },
+          "additionalProperties": false
+        }
+      ],
+      "description": "A named preset (minimal, saas, consumer, crm, projects, helpdesk, chat, commerce, cms, erp, pim, marketplace, scheduling, people, drive, docs, invoicing, forms, property, field-service, clinic, lms, events, legal, spend, contracts, customer-success, logistics, pos, fitness, nonprofit, itsm, compliance, construction, claims, community, feedback, ai, ai-chat, ai-agents, developer-api, automation, enterprise, admin, everything), a code from app.bettersupabase.com/create, or its URL. defineConfig expands it into blocks and its conventions, and the keys you set win."
     },
-    "codecs": {
+    "database": {
       "type": "object",
       "properties": {
-        "timestamptz": {
-          "enum": ["string", "instant", "utc"],
-          "type": "string",
-          "default": "string"
+        "source": {
+          "type": "object",
+          "properties": {
+            "dbUrl": {
+              "type": "string",
+              "description": "Postgres connection string."
+            },
+            "projectRef": {
+              "type": "string",
+              "description": "Hosted project ref, read through the Management API read-only SQL endpoint."
+            },
+            "accessToken": {
+              "type": "string",
+              "description": "Management API token for projectRef. Defaults to $SUPABASE_ACCESS_TOKEN."
+            },
+            "snapshot": {
+              "type": "string",
+              "description": "Read a saved introspection snapshot instead of connecting."
+            },
+            "lite": {
+              "type": "boolean",
+              "description": "Read a Supabase Lite project's schema from [db] driver in supabase/config.toml. On when that key is present; false reads the database like any other project."
+            }
+          },
+          "additionalProperties": false,
+          "description": "Where codegen reads the database from. Without any of these, $DATABASE_URL and then the local stack are used."
         },
-        "int8": {
-          "enum": ["number", "string", "bigint"],
-          "type": "string",
-          "default": "number"
+        "schemas": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Postgres schemas to generate.",
+          "default": ["public"]
         },
-        "numeric": {
-          "enum": ["number", "string"],
-          "type": "string",
-          "default": "number"
-        }
-      },
-      "additionalProperties": false,
-      "description": "Runtime types for timestamps, int8 and numeric columns."
-    },
-    "relations": {
-      "type": "object",
-      "properties": {
-        "nullableUnderRls": {
-          "type": "boolean",
-          "description": "Type to-one includes of tables with row level security as nullable, since a policy can hide the related row.",
-          "default": false
-        }
-      },
-      "additionalProperties": false,
-      "description": "How generated relations are typed."
-    },
-    "sensitive": {
-      "type": "array",
-      "items": {
-        "type": "string"
-      },
-      "description": "Columns guarded by the noSensitiveSelect rule (`table.column` or `schema.table.column`)."
-    },
-    "storagePaths": {
-      "type": "object",
-      "additionalProperties": {
-        "type": "string"
-      },
-      "description": "Text columns holding a storage object path (`table.column` or `schema.table.column`), mapped to a `buckets` key or bucket id. Typed as `StoragePath<'bucket-id'>`."
-    },
-    "functions": {
-      "type": "object",
-      "additionalProperties": {
-        "type": "object",
-        "properties": {
-          "notNull": {
+        "sql": {
+          "type": "object",
+          "properties": {
+            "workflow": {
+              "enum": ["pg-delta", "migra", "migrations"],
+              "type": "string",
+              "description": "How the SQL modules reach the database: pg-delta (Declarative Schemas 2.0), migra (declarative schemas 1.0) or migrations (written straight into a migration). Unset, supabase/config.toml decides, and pg-delta is the default."
+            },
+            "dir": {
+              "type": "string",
+              "default": "supabase/schemas"
+            },
+            "prefix": {
+              "type": "string",
+              "default": "900_better_supabase"
+            },
+            "testsDir": {
+              "type": "string",
+              "default": "supabase/tests"
+            },
+            "schema": {
+              "type": "string",
+              "description": "The schema of every block's functions and managed tables, unless the block sets its own.",
+              "default": "better_supabase"
+            },
+            "api": {
+              "type": "string",
+              "description": "The Data API schema every block writes its security invoker entry points to, unless the block sets its own api or false."
+            },
+            "owner": {
+              "enum": ["tenant", "user", "none"],
+              "type": "string",
+              "description": "Who a block's rows belong to, unless the block sets its own scope: tenant (the default), user (the signed-in user, no tenants) or none (one shared space every signed-in user uses).",
+              "default": "tenant"
+            }
+          },
+          "additionalProperties": false
+        },
+        "seed": {
+          "type": "object",
+          "properties": {
+            "entry": {
+              "type": "string",
+              "default": "supabase/seed.ts"
+            },
+            "output": {
+              "type": "string",
+              "default": "supabase/seeds/000_better_supabase.sql"
+            },
+            "perTenant": {
+              "type": "string",
+              "default": "supabase/seed.tenant.ts"
+            }
+          },
+          "additionalProperties": false
+        },
+        "expose": {
+          "type": "object",
+          "additionalProperties": {
             "anyOf": [
-              {
-                "const": true
-              },
               {
                 "type": "array",
                 "items": {
-                  "type": "string"
+                  "$ref": "#/$defs/privilege"
                 }
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "anon": {
+                    "type": "array",
+                    "items": {
+                      "$ref": "#/$defs/privilege"
+                    }
+                  },
+                  "authenticated": {
+                    "type": "array",
+                    "items": {
+                      "$ref": "#/$defs/privilege"
+                    }
+                  },
+                  "serviceRole": {
+                    "type": "array",
+                    "items": {
+                      "$ref": "#/$defs/privilege"
+                    }
+                  }
+                },
+                "additionalProperties": false
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "execute": {
+                    "type": "array",
+                    "items": {
+                      "enum": ["anon", "authenticated"],
+                      "type": "string"
+                    }
+                  },
+                  "serviceRole": {
+                    "type": "boolean"
+                  }
+                },
+                "required": ["execute"],
+                "additionalProperties": false
               }
-            ],
-            "description": "true for the whole result, or the returns table columns that are never null."
-          }
-        },
-        "additionalProperties": false
-      },
-      "description": "Function results gen may type as not null, keyed by function name. Results are nullable by default."
-    },
-    "expose": {
-      "type": "object",
-      "additionalProperties": {
-        "anyOf": [
-          {
-            "type": "array",
-            "items": {
-              "$ref": "#/$defs/privilege"
-            }
+            ]
           },
-          {
+          "description": "Data API grants keyed by `table` or `schema.table`: privileges for authenticated, or per role. Written by the `grants` SQL module and checked by doctor (BS106)."
+        },
+        "buckets": {
+          "type": "object",
+          "additionalProperties": {
             "type": "object",
             "properties": {
-              "anon": {
-                "type": "array",
-                "items": {
-                  "$ref": "#/$defs/privilege"
-                }
+              "id": {
+                "type": "string"
+              },
+              "public": {
+                "type": "boolean"
+              },
+              "path": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "minItems": 1
+                  }
+                ],
+                "description": "Path template, e.g. `{organizationId}/{customerId}/logo.webp`, or several for a bucket that stores objects in more than one layout. A last segment `{...rest}` matches one or more segments."
+              },
+              "policy": {
+                "anyOf": [
+                  {
+                    "enum": ["tenant", "owner", "public", "none"],
+                    "type": "string"
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "access": {
+                        "type": "object",
+                        "properties": {
+                          "read": {
+                            "type": "string"
+                          },
+                          "list": {
+                            "type": "string"
+                          },
+                          "write": {
+                            "type": "string"
+                          },
+                          "delete": {
+                            "type": "string"
+                          }
+                        },
+                        "required": ["read", "write"],
+                        "additionalProperties": false
+                      },
+                      "scope": {
+                        "type": "string",
+                        "description": "`tenant` (default) or `platform`; with `sql`, any scope name the templates take."
+                      },
+                      "segment": {
+                        "type": "integer",
+                        "minimum": 1
+                      },
+                      "sql": {
+                        "anyOf": [
+                          {
+                            "const": "provider"
+                          },
+                          {
+                            "type": "object",
+                            "properties": {
+                              "idsWith": {
+                                "type": "string"
+                              },
+                              "isPlatform": {
+                                "type": "string"
+                              }
+                            },
+                            "required": ["idsWith", "isPlatform"],
+                            "additionalProperties": false
+                          }
+                        ],
+                        "description": "SQL templates with `{permission}` and `{scope}` the policy calls instead of the access contract, or `provider` for `authorization.functions`."
+                      }
+                    },
+                    "required": ["access"],
+                    "additionalProperties": false
+                  }
+                ],
+                "description": "A generated storage policy (tenant, owner, public or none), or a policy through the access contract (tenant_ids_with, is_platform) or `sql` templates such as an authorization provider's."
               },
-              "authenticated": {
-                "type": "array",
-                "items": {
-                  "$ref": "#/$defs/privilege"
-                }
+              "fileSizeLimit": {
+                "type": "string"
               },
-              "serviceRole": {
-                "type": "array",
-                "items": {
-                  "$ref": "#/$defs/privilege"
-                }
-              }
-            },
-            "additionalProperties": false
-          },
-          {
-            "type": "object",
-            "properties": {
-              "execute": {
+              "allowedMimeTypes": {
                 "type": "array",
                 "items": {
-                  "enum": ["anon", "authenticated"],
                   "type": "string"
                 }
               },
-              "serviceRole": {
-                "type": "boolean"
+              "versioning": {
+                "type": "boolean",
+                "description": "Keep earlier object versions. bucket.apply() sets it."
+              },
+              "lifecycle": {
+                "type": "object",
+                "properties": {
+                  "rules": {
+                    "type": "array",
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "id": {
+                          "type": "string"
+                        },
+                        "status": {
+                          "enum": ["Enabled", "Disabled"],
+                          "type": "string"
+                        },
+                        "noncurrentVersionExpiration": {
+                          "type": "object",
+                          "properties": {
+                            "noncurrentDays": {
+                              "type": "integer",
+                              "minimum": 1
+                            },
+                            "newerNoncurrentVersions": {
+                              "type": "integer",
+                              "minimum": 1,
+                              "maximum": 100
+                            }
+                          },
+                          "required": ["noncurrentDays"],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": ["noncurrentVersionExpiration"],
+                      "additionalProperties": false
+                    },
+                    "minItems": 1,
+                    "maxItems": 1000
+                  }
+                },
+                "required": ["rules"],
+                "additionalProperties": false,
+                "description": "When noncurrent versions expire. Needs versioning: true."
               }
             },
-            "required": ["execute"],
+            "required": ["path"],
             "additionalProperties": false
           }
-        ]
-      },
-      "description": "Data API grants keyed by `table` or `schema.table`: privileges for authenticated, or per role. Written by the `grants` SQL module and checked by doctor (BS106)."
-    },
-    "readSets": {
-      "type": "array",
-      "items": {
-        "type": "string"
-      },
-      "description": "Modules exporting `defineReadSet` results. `gen` compiles them into the `read-sets` SQL module."
-    },
-    "generators": {
-      "type": "array",
-      "items": {
-        "type": "object"
-      },
-      "description": "Generator plugins. Only available in better-supabase.config.ts."
-    },
-    "plugins": {
-      "type": "object",
-      "properties": {
-        "timestamps": {
-          "anyOf": [
-            {
-              "type": "boolean"
-            },
-            {
-              "type": "object",
-              "additionalProperties": {}
-            }
-          ]
-        },
-        "softDelete": {
-          "anyOf": [
-            {
-              "type": "boolean"
-            },
-            {
-              "type": "object",
-              "additionalProperties": {}
-            }
-          ]
         },
-        "tenant": {
-          "anyOf": [
-            {
-              "type": "boolean"
+        "realtime": {
+          "type": "object",
+          "properties": {
+            "tables": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "description": "Tables that broadcast change signals (`table` or `schema.table`). Install with `better-supabase add realtime-tables`."
             },
-            {
-              "type": "object",
-              "additionalProperties": {}
-            }
-          ]
-        },
-        "actor": {
-          "anyOf": [
-            {
-              "type": "boolean"
+            "global": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "description": "Tables in `tables` without a tenant column, which broadcast on one topic for every signed-in user."
             },
-            {
+            "users": {
               "type": "object",
-              "additionalProperties": {}
-            }
-          ]
-        }
-      },
-      "additionalProperties": false
-    },
-    "claims": {
-      "type": "object",
-      "properties": {
-        "tenant": {
-          "type": "string",
-          "description": "Top-level claim holding the active tenant id. Defaults to `tenant_id`."
-        },
-        "scope": {
-          "type": "string",
-          "description": "`scope` of the tenant entries in the `memberships` claim. Defaults to `tenant`."
-        },
-        "features": {
-          "type": "string",
-          "description": "Claim holding plan features per tenant. Defaults to `features`."
-        },
-        "memberships": {
-          "type": "string",
-          "description": "Claim the memberships hook writes. Defaults to `memberships`."
-        }
-      },
-      "additionalProperties": false,
-      "description": "Claim names shared by the SQL modules, codegen and runtime defaults."
-    },
-    "buckets": {
-      "type": "object",
-      "additionalProperties": {
-        "type": "object",
-        "properties": {
-          "id": {
-            "type": "string"
-          },
-          "public": {
-            "type": "boolean"
-          },
-          "path": {
-            "anyOf": [
-              {
+              "additionalProperties": {
                 "type": "string"
               },
-              {
-                "type": "array",
-                "items": {
-                  "type": "string"
+              "description": "Tables in `tables` whose rows belong to one user, mapped to the user column. They broadcast on a topic per user that only that user receives."
+            },
+            "policies": {
+              "type": "object",
+              "properties": {
+                "from": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
                 },
-                "minItems": 1
-              }
-            ],
-            "description": "Path template, e.g. `{organizationId}/{customerId}/logo.webp`, or several for a bucket that stores objects in more than one layout. A last segment `{...rest}` matches one or more segments."
-          },
-          "policy": {
-            "anyOf": [
-              {
-                "enum": ["tenant", "owner", "public", "none"],
-                "type": "string"
+                "output": {
+                  "type": "string"
+                }
               },
-              {
+              "required": ["from", "output"],
+              "additionalProperties": false,
+              "description": "Writes the realtime.messages policies of the topics `from` exports (defineTopic) to `output` on `upgrade`; `upgrade --check` fails when the file is stale."
+            },
+            "triggers": {
+              "type": "array",
+              "items": {
                 "type": "object",
                 "properties": {
-                  "access": {
-                    "type": "object",
-                    "properties": {
-                      "read": {
-                        "type": "string"
-                      },
-                      "list": {
-                        "type": "string"
-                      },
-                      "write": {
-                        "type": "string"
-                      },
-                      "delete": {
-                        "type": "string"
-                      }
-                    },
-                    "required": ["read", "write"],
-                    "additionalProperties": false
+                  "topic": {
+                    "type": "string",
+                    "description": "The template of a topic `policies.from` exports."
                   },
-                  "scope": {
+                  "table": {
                     "type": "string",
-                    "description": "`tenant` (default) or `platform`; with `sql`, any scope name the templates take."
+                    "description": "`table` or `schema.table`."
+                  },
+                  "values": {
+                    "type": "object",
+                    "additionalProperties": {
+                      "$ref": "#/$defs/triggerValue"
+                    },
+                    "description": "The column or lookup per placeholder. Defaults to the placeholder in snake_case. A row whose topic comes out null is not sent to it."
                   },
-                  "segment": {
-                    "type": "integer",
-                    "minimum": 1
+                  "events": {
+                    "type": "array",
+                    "items": {
+                      "enum": ["insert", "update", "delete"],
+                      "type": "string"
+                    }
                   },
-                  "sql": {
+                  "event": {
                     "anyOf": [
                       {
-                        "const": "provider"
+                        "type": "string"
                       },
                       {
                         "type": "object",
                         "properties": {
-                          "idsWith": {
+                          "insert": {
+                            "type": "string"
+                          },
+                          "update": {
                             "type": "string"
                           },
-                          "isPlatform": {
+                          "delete": {
                             "type": "string"
                           }
                         },
-                        "required": ["idsWith", "isPlatform"],
                         "additionalProperties": false
                       }
                     ],
-                    "description": "SQL templates with `{permission}` and `{scope}` the policy calls instead of the access contract, or `provider` for `authorization.functions`."
-                  }
-                },
-                "required": ["access"],
-                "additionalProperties": false
-              }
-            ],
-            "description": "A generated storage policy (tenant, owner, public or none), or a policy through the access contract (tenant_ids_with, is_platform) or `sql` templates such as an authorization provider's."
-          },
-          "fileSizeLimit": {
-            "type": "string"
-          },
-          "allowedMimeTypes": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            }
-          },
-          "versioning": {
-            "type": "boolean",
-            "description": "Keep earlier object versions. bucket.apply() sets it."
-          },
-          "lifecycle": {
-            "type": "object",
-            "properties": {
-              "rules": {
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "id": {
-                      "type": "string"
-                    },
-                    "status": {
-                      "enum": ["Enabled", "Disabled"],
-                      "type": "string"
-                    },
-                    "noncurrentVersionExpiration": {
+                    "description": "The broadcast event name, or one per operation ({ insert, update, delete }). Defaults to the operation."
+                  },
+                  "payload": {
+                    "anyOf": [
+                      {
+                        "enum": ["keys", "row"],
+                        "type": "string"
+                      },
+                      {
+                        "type": "object",
+                        "additionalProperties": {
+                          "anyOf": [
+                            {
+                              "$ref": "#/$defs/triggerValue"
+                            },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "sql": {
+                                  "type": "string"
+                                }
+                              },
+                              "required": ["sql"],
+                              "additionalProperties": false
+                            }
+                          ]
+                        }
+                      }
+                    ],
+                    "description": "keys (default) sends the primary key and the placeholder values; row sends the whole row, which bypasses column grants. An object is the payload itself: each key is a column, a lookup, or { sql }, an expression on the row {row} (tg_op is the operation)."
+                  },
+                  "topics": {
+                    "type": "array",
+                    "items": {
                       "type": "object",
                       "properties": {
-                        "noncurrentDays": {
-                          "type": "integer",
-                          "minimum": 1
+                        "topic": {
+                          "type": "string",
+                          "description": "The template of a topic `policies.from` exports."
                         },
-                        "newerNoncurrentVersions": {
-                          "type": "integer",
-                          "minimum": 1,
-                          "maximum": 100
+                        "values": {
+                          "type": "object",
+                          "additionalProperties": {
+                            "$ref": "#/$defs/triggerValue"
+                          },
+                          "description": "The column or lookup per placeholder. Defaults to the placeholder in snake_case."
                         }
                       },
-                      "required": ["noncurrentDays"],
+                      "required": ["topic"],
                       "additionalProperties": false
-                    }
+                    },
+                    "description": "More topics the row change goes to, each with its own values."
                   },
-                  "required": ["noncurrentVersionExpiration"],
-                  "additionalProperties": false
+                  "functionSchema": {
+                    "type": "string",
+                    "description": "Schema for a generated function. Defaults to better_supabase, which the Data API does not expose."
+                  },
+                  "when": {
+                    "type": "object",
+                    "properties": {
+                      "changed": {
+                        "type": "array",
+                        "items": {
+                          "type": "string"
+                        },
+                        "minItems": 1,
+                        "description": "Columns (database names) whose change lets an UPDATE send. A trigger for updates alone compiles it into its WHEN clause."
+                      }
+                    },
+                    "required": ["changed"],
+                    "additionalProperties": false,
+                    "description": "Filters updates: with { changed: [columns] } an UPDATE sends only when one of those columns changed. Inserts and deletes always send."
+                  }
                 },
-                "minItems": 1,
-                "maxItems": 1000
-              }
-            },
-            "required": ["rules"],
-            "additionalProperties": false,
-            "description": "When noncurrent versions expire. Needs versioning: true."
-          }
-        },
-        "required": ["path"],
-        "additionalProperties": false
-      }
-    },
-    "topics": {
-      "type": "object",
-      "additionalProperties": {
-        "type": "string"
-      },
-      "description": "Realtime topic templates."
-    },
-    "realtime": {
-      "type": "object",
-      "properties": {
-        "tables": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          },
-          "description": "Tables that broadcast change signals (`table` or `schema.table`). Install with `better-supabase sql add realtime-tables`."
-        },
-        "global": {
-          "type": "array",
-          "items": {
-            "type": "string"
+                "required": ["topic", "table"],
+                "additionalProperties": false
+              },
+              "description": "Broadcast triggers `upgrade` writes to `policies.output` through the topic's trigger(), for topics `policies.from` exports. One topic with column values, a keys or row payload and one event name calls better_supabase.broadcast_topic() (the realtime-tables module); any other trigger gets a generated function."
+            }
           },
-          "description": "Tables in `tables` without a tenant column, which broadcast on one topic for every signed-in user."
+          "additionalProperties": false,
+          "description": "Live query change broadcasts."
         },
-        "users": {
+        "topics": {
           "type": "object",
           "additionalProperties": {
             "type": "string"
           },
-          "description": "Tables in `tables` whose rows belong to one user, mapped to the user column. They broadcast on a topic per user that only that user receives."
+          "description": "Realtime topic templates."
         },
-        "policies": {
+        "vectorSearch": {
           "type": "object",
-          "properties": {
-            "from": {
-              "type": "array",
-              "items": {
+          "additionalProperties": {
+            "anyOf": [
+              {
                 "type": "string"
-              }
-            },
-            "output": {
-              "type": "string"
-            }
-          },
-          "required": ["from", "output"],
-          "additionalProperties": false,
-          "description": "Writes the realtime.messages policies of the topics `from` exports (defineTopic) to `output` on `sql sync`; `sql sync --check` fails when the file is stale."
-        },
-        "triggers": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "properties": {
-              "topic": {
-                "type": "string",
-                "description": "The template of a topic `policies.from` exports."
-              },
-              "table": {
-                "type": "string",
-                "description": "`table` or `schema.table`."
               },
-              "values": {
+              {
                 "type": "object",
-                "additionalProperties": {
-                  "$ref": "#/$defs/triggerValue"
-                },
-                "description": "The column or lookup per placeholder. Defaults to the placeholder in snake_case. A row whose topic comes out null is not sent to it."
-              },
-              "events": {
-                "type": "array",
-                "items": {
-                  "enum": ["insert", "update", "delete"],
-                  "type": "string"
-                }
-              },
-              "event": {
-                "anyOf": [
-                  {
+                "properties": {
+                  "column": {
                     "type": "string"
                   },
-                  {
+                  "distance": {
+                    "enum": ["cosine", "l2", "inner_product"],
+                    "type": "string",
+                    "default": "cosine"
+                  },
+                  "type": {
+                    "enum": ["vector", "halfvec"],
+                    "type": "string",
+                    "default": "vector"
+                  },
+                  "key": {
+                    "type": "string",
+                    "description": "The primary key column db.$search({ score: true }) merges by.",
+                    "default": "id"
+                  },
+                  "hybrid": {
                     "type": "object",
                     "properties": {
-                      "insert": {
+                      "tsvector": {
                         "type": "string"
                       },
-                      "update": {
-                        "type": "string"
+                      "config": {
+                        "type": "string",
+                        "default": "simple"
                       },
-                      "delete": {
-                        "type": "string"
+                      "k": {
+                        "type": "number",
+                        "default": 60
                       }
                     },
-                    "additionalProperties": false
-                  }
-                ],
-                "description": "The broadcast event name, or one per operation ({ insert, update, delete }). Defaults to the operation."
-              },
-              "payload": {
-                "anyOf": [
-                  {
-                    "enum": ["keys", "row"],
-                    "type": "string"
+                    "required": ["tsvector"],
+                    "additionalProperties": false,
+                    "description": "Fuses a full-text ranking over a tsvector column with the vector ranking (reciprocal rank fusion)."
                   },
-                  {
-                    "type": "object",
-                    "additionalProperties": {
-                      "anyOf": [
-                        {
-                          "$ref": "#/$defs/triggerValue"
-                        },
-                        {
-                          "type": "object",
-                          "properties": {
-                            "sql": {
-                              "type": "string"
-                            }
-                          },
-                          "required": ["sql"],
-                          "additionalProperties": false
-                        }
-                      ]
-                    }
-                  }
-                ],
-                "description": "keys (default) sends the primary key and the placeholder values; row sends the whole row, which bypasses column grants. An object is the payload itself: each key is a column, a lookup, or { sql }, an expression on the row {row} (tg_op is the operation)."
-              },
-              "topics": {
-                "type": "array",
-                "items": {
-                  "type": "object",
-                  "properties": {
-                    "topic": {
-                      "type": "string",
-                      "description": "The template of a topic `policies.from` exports."
-                    },
-                    "values": {
-                      "type": "object",
-                      "additionalProperties": {
-                        "$ref": "#/$defs/triggerValue"
-                      },
-                      "description": "The column or lookup per placeholder. Defaults to the placeholder in snake_case."
-                    }
+                  "boost": {
+                    "type": "string",
+                    "description": "A SQL expression over the row t the score is multiplied by."
                   },
-                  "required": ["topic"],
-                  "additionalProperties": false
-                },
-                "description": "More topics the row change goes to, each with its own values."
-              },
-              "functionSchema": {
-                "type": "string",
-                "description": "Schema for a generated function. Defaults to better_supabase, which the Data API does not expose."
-              },
-              "when": {
-                "type": "object",
-                "properties": {
-                  "changed": {
+                  "prefilter": {
                     "type": "array",
                     "items": {
                       "type": "string"
                     },
-                    "minItems": 1,
-                    "description": "Columns (database names) whose change lets an UPDATE send. A trigger for updates alone compiles it into its WHEN clause."
+                    "description": "Columns db.$search({ filter }) narrows before ranking."
+                  },
+                  "predicate": {
+                    "type": "string",
+                    "description": "A SQL condition over the row t every candidate must meet, applied before ranking."
+                  },
+                  "boostMode": {
+                    "enum": ["multiply", "add"],
+                    "type": "string",
+                    "description": "How boost combines with the score. Defaults to multiply."
+                  },
+                  "order": {
+                    "type": "string",
+                    "description": "A SQL order by list over the row t that breaks score ties."
                   }
                 },
-                "required": ["changed"],
-                "additionalProperties": false,
-                "description": "Filters updates: with { changed: [columns] } an UPDATE sends only when one of those columns changed. Inserts and deletes always send."
+                "required": ["column"],
+                "additionalProperties": false
               }
-            },
-            "required": ["topic", "table"],
-            "additionalProperties": false
+            ],
+            "description": "The embedding column, or the column and its search options."
           },
-          "description": "Broadcast triggers `sql sync` writes to `policies.output` through the topic's trigger(), for topics `policies.from` exports. One topic with column values, a keys or row payload and one event name calls better_supabase.broadcast_topic() (the realtime-tables module); any other trigger gets a generated function."
-        }
-      },
-      "additionalProperties": false,
-      "description": "Live query change broadcasts."
-    },
-    "entitlements": {
-      "type": "object",
-      "properties": {
-        "customer": {
-          "type": "string",
-          "description": "`table.column` or `schema.table.column` holding the Stripe customer id.",
-          "default": "organizations.stripe_customer_id"
-        },
-        "key": {
-          "type": "string",
-          "description": "The tenant id column of that table.",
-          "default": "id"
-        },
-        "memberships": {
-          "enum": ["tenant", "provider"],
-          "type": "string",
-          "description": "Where has_entitlement and feature_claims read memberships: \"provider\" (the authorization provider's memberIds functions) or \"tenant\" (better_supabase.memberships). Defaults to \"provider\" when `authorization` is set."
-        },
-        "source": {
-          "anyOf": [
-            {
-              "enum": ["stripe-sync", "custom"],
-              "type": "string"
-            },
-            {
-              "type": "object",
-              "properties": {
-                "plans": {
-                  "type": "object",
-                  "properties": {
-                    "subscriptions": {
-                      "type": "object",
-                      "properties": {
-                        "table": {
-                          "type": "string"
-                        },
-                        "tenant": {
-                          "type": "string"
-                        },
-                        "plan": {
-                          "type": "string"
-                        },
-                        "status": {
-                          "type": "string"
-                        },
-                        "activeStatuses": {
-                          "type": "array",
-                          "items": {
-                            "type": "string"
-                          }
-                        }
-                      },
-                      "required": ["table", "tenant", "plan"],
-                      "additionalProperties": false
-                    },
-                    "features": {
-                      "type": "object",
-                      "properties": {
-                        "table": {
-                          "type": "string"
-                        },
-                        "plan": {
-                          "type": "string"
-                        },
-                        "feature": {
-                          "type": "string"
-                        },
-                        "included": {
-                          "type": "string"
-                        },
-                        "value": {
-                          "type": "string"
-                        }
-                      },
-                      "required": ["table", "plan", "feature"],
-                      "additionalProperties": false
-                    }
-                  },
-                  "required": ["subscriptions", "features"],
-                  "additionalProperties": false
-                }
-              },
-              "required": ["plans"],
-              "additionalProperties": false
-            }
-          ],
-          "description": "Where each tenant's entitlements come from: \"stripe-sync\" (the Stripe Sync Engine, the default), \"custom\" (your own better_supabase.tenant_entitlements), or a plan catalog in your tables."
-        },
-        "claim": {
-          "anyOf": [
-            {
-              "const": false
-            },
-            {
-              "type": "object",
-              "properties": {
-                "maxTenants": {
-                  "type": "number"
-                },
-                "keys": {
-                  "type": "object",
-                  "additionalProperties": {
-                    "type": "string"
-                  }
-                }
-              },
-              "additionalProperties": false
-            }
-          ],
-          "description": "The shape of the features claim feature_claims writes: false for {}, or maxTenants (at most that many tenants) and keys (short codes for feature keys)."
-        }
-      },
-      "additionalProperties": false,
-      "description": "Where the `entitlements` SQL module finds each tenant's entitlements: a Stripe customer, a plan catalog or your own function."
-    },
-    "authorization": {
-      "type": "object",
-      "properties": {
-        "apiVersion": {
-          "const": 1
-        },
-        "name": {
-          "type": "string"
-        },
-        "scopes": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "properties": {
-              "name": {
-                "type": "string",
-                "pattern": "^[a-z][a-z0-9_]*$"
-              },
-              "idType": {
-                "enum": ["uuid", "text", "bigint", "integer"],
-                "type": "string",
-                "description": "Required on the tenant scope."
-              },
-              "parent": {
-                "type": "string"
-              }
-            },
-            "required": ["name"],
-            "additionalProperties": false
-          }
-        },
-        "tenantScope": {
-          "type": "string",
-          "pattern": "^[a-z][a-z0-9_]*$"
-        },
-        "functions": {
-          "type": "object",
-          "properties": {
-            "idsWith": {
-              "type": "string"
-            },
-            "isPlatform": {
-              "type": "string"
-            },
-            "idsWithFor": {
-              "type": "string"
-            },
-            "isPlatformFor": {
-              "type": "string"
-            },
-            "memberIds": {
-              "type": "string"
-            },
-            "memberIdsFor": {
-              "type": "string"
+          "description": "Embedding columns keyed by `table` or `schema.table`. The `vector-search` SQL module writes `search_<table>(query, k)` for each."
+        }
+      },
+      "additionalProperties": false
+    },
+    "auth": {
+      "type": "object",
+      "properties": {
+        "organization": {
+          "type": "object",
+          "properties": {
+            "claim": {
+              "type": "string",
+              "description": "Top-level claim holding the active organization id. Defaults to `tenant_id`."
             },
-            "teamIdsOf": {
+            "column": {
               "type": "string",
-              "description": "The team ids {user} belongs to, as a set. Under the provider model team_ids_of(), saved-views and collections call it."
+              "description": "Column the tenant plugin filters and fills on tenant-scoped tables. Defaults to `tenant_id`."
             },
-            "canAssign": {
+            "onMissing": {
+              "enum": ["error", "skip"],
               "type": "string"
             },
-            "canAssignFor": {
+            "header": {
               "type": "string"
-            },
-            "permissionsFor": {
+            }
+          },
+          "additionalProperties": false,
+          "description": "How the active organization is found: the claim that holds its id and the column the tenant plugin filters by."
+        },
+        "claims": {
+          "type": "object",
+          "properties": {
+            "scope": {
               "type": "string",
-              "description": "The permission keys {user} holds in {tenant}, as a text[]."
+              "description": "`scope` of the tenant entries in the `memberships` claim. Defaults to `tenant`."
             },
-            "canApprove": {
+            "features": {
               "type": "string",
-              "description": "Whether the caller may decide the tool call {tool} waits on in {tenant}."
-            },
-            "isApprover": {
-              "type": "string"
-            },
-            "holdersOf": {
-              "type": "string"
-            },
-            "actorMayWrite": {
-              "type": "string"
-            },
-            "permitted": {
-              "type": "string"
-            },
-            "portalSubjects": {
-              "type": "string"
+              "description": "Claim holding plan features per tenant. Defaults to `features`."
             },
-            "portalParties": {
-              "type": "string"
+            "memberships": {
+              "type": "string",
+              "description": "Claim the memberships hook writes. Defaults to `memberships`."
             }
           },
-          "required": ["idsWith", "isPlatform"],
           "additionalProperties": false,
-          "description": "SQL templates with {permission}, {scope}, {user}, {tenant}, {role} and {tool}."
+          "description": "Claim names shared by the SQL modules, codegen and runtime defaults."
         },
-        "requires": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "properties": {
-              "function": {
-                "type": "string"
-              },
-              "args": {
-                "type": "string"
-              },
-              "role": {
-                "type": "string"
+        "authorization": {
+          "type": "object",
+          "properties": {
+            "apiVersion": {
+              "const": 1
+            },
+            "name": {
+              "type": "string"
+            },
+            "scopes": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "name": {
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9_]*$"
+                  },
+                  "idType": {
+                    "enum": ["uuid", "text", "bigint", "integer"],
+                    "type": "string",
+                    "description": "Required on the tenant scope."
+                  },
+                  "parent": {
+                    "type": "string"
+                  }
+                },
+                "required": ["name"],
+                "additionalProperties": false
               }
             },
-            "required": ["function", "role"],
-            "additionalProperties": false
-          }
-        },
-        "permissions": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "properties": {
-              "key": {
-                "type": "string"
-              },
-              "sqlComplete": {
-                "type": "boolean"
-              },
-              "scopes": {
-                "type": "array",
-                "items": {
+            "tenantScope": {
+              "type": "string",
+              "pattern": "^[a-z][a-z0-9_]*$"
+            },
+            "functions": {
+              "type": "object",
+              "properties": {
+                "idsWith": {
+                  "type": "string"
+                },
+                "isPlatform": {
+                  "type": "string"
+                },
+                "idsWithFor": {
+                  "type": "string"
+                },
+                "isPlatformFor": {
+                  "type": "string"
+                },
+                "memberIds": {
+                  "type": "string"
+                },
+                "memberIdsFor": {
+                  "type": "string"
+                },
+                "teamIdsOf": {
+                  "type": "string",
+                  "description": "The team ids {user} belongs to, as a set. Under the provider model team_ids_of(), saved-views and collections call it."
+                },
+                "canAssign": {
+                  "type": "string"
+                },
+                "canAssignFor": {
+                  "type": "string"
+                },
+                "permissionsFor": {
+                  "type": "string",
+                  "description": "The permission keys {user} holds in {tenant}, as a text[]."
+                },
+                "canApprove": {
+                  "type": "string",
+                  "description": "Whether the caller may decide the tool call {tool} waits on in {tenant}."
+                },
+                "isApprover": {
+                  "type": "string"
+                },
+                "holdersOf": {
+                  "type": "string"
+                },
+                "actorMayWrite": {
+                  "type": "string"
+                },
+                "permitted": {
+                  "type": "string"
+                },
+                "portalSubjects": {
+                  "type": "string"
+                },
+                "portalParties": {
                   "type": "string"
                 }
+              },
+              "required": ["idsWith", "isPlatform"],
+              "additionalProperties": false,
+              "description": "SQL templates with {permission}, {scope}, {user}, {tenant}, {role} and {tool}."
+            },
+            "requires": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "function": {
+                    "type": "string"
+                  },
+                  "args": {
+                    "type": "string"
+                  },
+                  "role": {
+                    "type": "string"
+                  }
+                },
+                "required": ["function", "role"],
+                "additionalProperties": false
               }
             },
-            "required": ["key"],
-            "additionalProperties": false
-          }
-        },
-        "operations": {
-          "type": "object",
-          "additionalProperties": {
-            "type": "object",
-            "properties": {
-              "permission": {
-                "type": "string",
-                "minLength": 1
-              },
-              "meta": {
+            "permissions": {
+              "type": "array",
+              "items": {
                 "type": "object",
                 "properties": {
-                  "risk": {
-                    "enum": ["low", "medium", "high"],
+                  "key": {
                     "type": "string"
                   },
-                  "effects": {
+                  "sqlComplete": {
+                    "type": "boolean"
+                  },
+                  "scopes": {
                     "type": "array",
                     "items": {
-                      "enum": ["read", "write", "delete", "external"],
                       "type": "string"
                     }
-                  },
-                  "title": {
-                    "type": "string"
                   }
                 },
+                "required": ["key"],
                 "additionalProperties": false
               }
             },
-            "required": ["permission"],
-            "additionalProperties": false
-          }
-        },
-        "memberships": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "properties": {
-              "table": {
-                "type": "string"
-              },
-              "userColumn": {
-                "type": "string"
-              },
-              "scope": {
-                "anyOf": [
-                  {
+            "operations": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "properties": {
+                  "permission": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "meta": {
                     "type": "object",
                     "properties": {
-                      "column": {
+                      "risk": {
+                        "enum": ["low", "medium", "high"],
+                        "type": "string"
+                      },
+                      "effects": {
+                        "type": "array",
+                        "items": {
+                          "enum": ["read", "write", "delete", "external"],
+                          "type": "string"
+                        }
+                      },
+                      "title": {
                         "type": "string"
                       }
                     },
-                    "required": ["column"],
                     "additionalProperties": false
+                  }
+                },
+                "required": ["permission"],
+                "additionalProperties": false
+              }
+            },
+            "memberships": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "table": {
+                    "type": "string"
+                  },
+                  "userColumn": {
+                    "type": "string"
+                  },
+                  "scope": {
+                    "anyOf": [
+                      {
+                        "type": "object",
+                        "properties": {
+                          "column": {
+                            "type": "string"
+                          }
+                        },
+                        "required": ["column"],
+                        "additionalProperties": false
+                      },
+                      {
+                        "type": "object",
+                        "properties": {
+                          "value": {
+                            "type": "string"
+                          }
+                        },
+                        "required": ["value"],
+                        "additionalProperties": false
+                      }
+                    ]
+                  },
+                  "idColumn": {
+                    "type": "string"
+                  }
+                },
+                "required": ["table", "userColumn", "scope", "idColumn"],
+                "additionalProperties": false
+              }
+            },
+            "suspension": {
+              "type": "object",
+              "properties": {
+                "user": {
+                  "type": "object",
+                  "properties": {
+                    "table": {
+                      "type": "string"
+                    },
+                    "id": {
+                      "type": "string"
+                    },
+                    "disabledAt": {
+                      "type": "string"
+                    },
+                    "status": {
+                      "type": "string"
+                    },
+                    "active": {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
+                    }
+                  },
+                  "required": ["table", "id"],
+                  "additionalProperties": false
+                },
+                "tenant": {
+                  "type": "object",
+                  "properties": {
+                    "table": {
+                      "type": "string"
+                    },
+                    "id": {
+                      "type": "string"
+                    },
+                    "disabledAt": {
+                      "type": "string"
+                    },
+                    "status": {
+                      "type": "string"
+                    },
+                    "active": {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
+                    }
+                  },
+                  "required": ["table", "id"],
+                  "additionalProperties": false
+                }
+              },
+              "additionalProperties": false
+            },
+            "roleSources": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "table": {
+                    "type": "string"
                   },
-                  {
+                  "role": {
                     "type": "object",
                     "properties": {
-                      "value": {
+                      "column": {
                         "type": "string"
+                      },
+                      "through": {
+                        "type": "object",
+                        "properties": {
+                          "table": {
+                            "type": "string"
+                          },
+                          "id": {
+                            "type": "string"
+                          },
+                          "column": {
+                            "type": "string"
+                          }
+                        },
+                        "required": ["table", "id", "column"],
+                        "additionalProperties": false
                       }
                     },
-                    "required": ["value"],
+                    "required": ["column", "through"],
                     "additionalProperties": false
                   }
-                ]
-              },
-              "idColumn": {
-                "type": "string"
+                },
+                "required": ["table", "role"],
+                "additionalProperties": false
               }
             },
-            "required": ["table", "userColumn", "scope", "idColumn"],
-            "additionalProperties": false
-          }
-        },
-        "suspension": {
-          "type": "object",
-          "properties": {
-            "user": {
+            "decidingColumns": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "pattern": "^[A-Za-z_][\\w$]*\\.[A-Za-z_][\\w$]*\\.[A-Za-z_][\\w$]*$",
+                "description": "`schema.table.column`."
+              }
+            },
+            "tokenHook": {
               "type": "object",
               "properties": {
-                "table": {
+                "function": {
                   "type": "string"
                 },
-                "id": {
+                "tenantClaim": {
                   "type": "string"
                 },
-                "disabledAt": {
-                  "type": "string"
-                },
-                "status": {
-                  "type": "string"
-                },
-                "active": {
+                "ownedClaims": {
                   "type": "array",
                   "items": {
                     "type": "string"
-                  }
-                }
-              },
-              "required": ["table", "id"],
-              "additionalProperties": false
-            },
-            "tenant": {
-              "type": "object",
-              "properties": {
-                "table": {
-                  "type": "string"
-                },
-                "id": {
-                  "type": "string"
-                },
-                "disabledAt": {
-                  "type": "string"
-                },
-                "status": {
-                  "type": "string"
+                  },
+                  "minItems": 1
                 },
-                "active": {
+                "registeredClaims": {
                   "type": "array",
                   "items": {
-                    "type": "string"
-                  }
-                }
-              },
-              "required": ["table", "id"],
-              "additionalProperties": false
-            }
-          },
-          "additionalProperties": false
-        },
-        "roleSources": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "properties": {
-              "table": {
-                "type": "string"
-              },
-              "role": {
-                "type": "object",
-                "properties": {
-                  "column": {
-                    "type": "string"
-                  },
-                  "through": {
                     "type": "object",
                     "properties": {
-                      "table": {
-                        "type": "string"
-                      },
-                      "id": {
+                      "name": {
                         "type": "string"
                       },
-                      "column": {
+                      "function": {
                         "type": "string"
                       }
                     },
-                    "required": ["table", "id", "column"],
+                    "required": ["name", "function"],
                     "additionalProperties": false
                   }
                 },
-                "required": ["column", "through"],
-                "additionalProperties": false
-              }
-            },
-            "required": ["table", "role"],
-            "additionalProperties": false
-          }
-        },
-        "decidingColumns": {
-          "type": "array",
-          "items": {
-            "type": "string",
-            "pattern": "^[A-Za-z_][\\w$]*\\.[A-Za-z_][\\w$]*\\.[A-Za-z_][\\w$]*$",
-            "description": "`schema.table.column`."
-          }
-        },
-        "tokenHook": {
-          "type": "object",
-          "properties": {
-            "function": {
-              "type": "string"
-            },
-            "tenantClaim": {
-              "type": "string"
-            },
-            "ownedClaims": {
-              "type": "array",
-              "items": {
-                "type": "string"
-              },
-              "minItems": 1
-            },
-            "registeredClaims": {
-              "type": "array",
-              "items": {
-                "type": "object",
-                "properties": {
-                  "name": {
-                    "type": "string"
+                "budget": {
+                  "type": "object",
+                  "properties": {
+                    "claims": {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      }
+                    },
+                    "bytes": {
+                      "type": "integer",
+                      "minimum": 1
+                    },
+                    "truncatedClaim": {
+                      "type": "string"
+                    }
                   },
-                  "function": {
-                    "type": "string"
-                  }
-                },
-                "required": ["name", "function"],
-                "additionalProperties": false
-              }
-            },
-            "budget": {
-              "type": "object",
-              "properties": {
-                "claims": {
-                  "type": "array",
-                  "items": {
-                    "type": "string"
-                  }
+                  "required": ["claims", "bytes"],
+                  "additionalProperties": false
                 },
-                "bytes": {
-                  "type": "integer",
-                  "minimum": 1
+                "markers": {
+                  "type": "object",
+                  "properties": {
+                    "hook": {
+                      "type": "string"
+                    },
+                    "grants": {
+                      "type": "string"
+                    }
+                  },
+                  "additionalProperties": false
                 },
-                "truncatedClaim": {
+                "grantsCommand": {
                   "type": "string"
                 }
               },
-              "required": ["claims", "bytes"],
+              "required": ["function", "ownedClaims"],
               "additionalProperties": false
             },
-            "markers": {
+            "delegation": {
               "type": "object",
               "properties": {
-                "hook": {
-                  "type": "string"
-                },
-                "grants": {
-                  "type": "string"
+                "scopes": {
+                  "type": "object",
+                  "additionalProperties": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    }
+                  },
+                  "description": "OAuth scope to the permission keys it grants a delegated token."
                 }
               },
               "additionalProperties": false
             },
-            "grantsCommand": {
-              "type": "string"
-            }
-          },
-          "required": ["function", "ownedClaims"],
-          "additionalProperties": false
-        },
-        "delegation": {
-          "type": "object",
-          "properties": {
-            "scopes": {
+            "approvals": {
               "type": "object",
-              "additionalProperties": {
-                "type": "array",
-                "items": {
-                  "type": "string"
+              "properties": {
+                "distinctApprover": {
+                  "type": "boolean",
+                  "description": "The user who asked for a tool call can't approve it. Default false."
                 }
               },
-              "description": "OAuth scope to the permission keys it grants a delegated token."
+              "additionalProperties": false
+            },
+            "problems": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
             }
           },
-          "additionalProperties": false
+          "required": [
+            "apiVersion",
+            "name",
+            "scopes",
+            "tenantScope",
+            "functions"
+          ],
+          "additionalProperties": false,
+          "description": "An authorization provider (apiVersion 1) the SQL modules, policies and doctor delegate to."
         },
-        "approvals": {
+        "entitlements": {
           "type": "object",
           "properties": {
-            "distinctApprover": {
-              "type": "boolean",
-              "description": "The user who asked for a tool call can't approve it. Default false."
-            }
-          },
-          "additionalProperties": false
-        },
-        "problems": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        }
-      },
-      "required": ["apiVersion", "name", "scopes", "tenantScope", "functions"],
-      "additionalProperties": false,
-      "description": "An authorization provider (apiVersion 1) the SQL modules, policies and doctor delegate to."
-    },
-    "vectorSearch": {
-      "type": "object",
-      "additionalProperties": {
-        "anyOf": [
-          {
-            "type": "string"
-          },
-          {
-            "type": "object",
-            "properties": {
-              "column": {
-                "type": "string"
-              },
-              "distance": {
-                "enum": ["cosine", "l2", "inner_product"],
-                "type": "string",
-                "default": "cosine"
-              },
-              "type": {
-                "enum": ["vector", "halfvec"],
-                "type": "string",
-                "default": "vector"
-              },
-              "key": {
-                "type": "string",
-                "description": "The primary key column db.$search({ score: true }) merges by.",
-                "default": "id"
-              },
-              "hybrid": {
-                "type": "object",
-                "properties": {
-                  "tsvector": {
-                    "type": "string"
-                  },
-                  "config": {
-                    "type": "string",
-                    "default": "simple"
+            "customer": {
+              "type": "string",
+              "description": "`table.column` or `schema.table.column` holding the Stripe customer id.",
+              "default": "organizations.stripe_customer_id"
+            },
+            "key": {
+              "type": "string",
+              "description": "The tenant id column of that table.",
+              "default": "id"
+            },
+            "memberships": {
+              "enum": ["tenant", "provider"],
+              "type": "string",
+              "description": "Where has_entitlement and feature_claims read memberships: \"provider\" (the authorization provider's memberIds functions) or \"tenant\" (better_supabase.memberships). Defaults to \"provider\" when `authorization` is set."
+            },
+            "source": {
+              "anyOf": [
+                {
+                  "enum": ["stripe-sync", "custom"],
+                  "type": "string"
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "plans": {
+                      "type": "object",
+                      "properties": {
+                        "subscriptions": {
+                          "type": "object",
+                          "properties": {
+                            "table": {
+                              "type": "string"
+                            },
+                            "tenant": {
+                              "type": "string"
+                            },
+                            "plan": {
+                              "type": "string"
+                            },
+                            "status": {
+                              "type": "string"
+                            },
+                            "activeStatuses": {
+                              "type": "array",
+                              "items": {
+                                "type": "string"
+                              }
+                            }
+                          },
+                          "required": ["table", "tenant", "plan"],
+                          "additionalProperties": false
+                        },
+                        "features": {
+                          "type": "object",
+                          "properties": {
+                            "table": {
+                              "type": "string"
+                            },
+                            "plan": {
+                              "type": "string"
+                            },
+                            "feature": {
+                              "type": "string"
+                            },
+                            "included": {
+                              "type": "string"
+                            },
+                            "value": {
+                              "type": "string"
+                            }
+                          },
+                          "required": ["table", "plan", "feature"],
+                          "additionalProperties": false
+                        }
+                      },
+                      "required": ["subscriptions", "features"],
+                      "additionalProperties": false
+                    }
                   },
-                  "k": {
-                    "type": "number",
-                    "default": 60
-                  }
-                },
-                "required": ["tsvector"],
-                "additionalProperties": false,
-                "description": "Fuses a full-text ranking over a tsvector column with the vector ranking (reciprocal rank fusion)."
-              },
-              "boost": {
-                "type": "string",
-                "description": "A SQL expression over the row t the score is multiplied by."
-              },
-              "prefilter": {
-                "type": "array",
-                "items": {
-                  "type": "string"
-                },
-                "description": "Columns db.$search({ filter }) narrows before ranking."
-              },
-              "predicate": {
-                "type": "string",
-                "description": "A SQL condition over the row t every candidate must meet, applied before ranking."
-              },
-              "boostMode": {
-                "enum": ["multiply", "add"],
-                "type": "string",
-                "description": "How boost combines with the score. Defaults to multiply."
-              },
-              "order": {
-                "type": "string",
-                "description": "A SQL order by list over the row t that breaks score ties."
-              }
+                  "required": ["plans"],
+                  "additionalProperties": false
+                }
+              ],
+              "description": "Where each tenant's entitlements come from: \"stripe-sync\" (the Stripe Sync Engine, the default), \"custom\" (your own better_supabase.tenant_entitlements), or a plan catalog in your tables."
             },
-            "required": ["column"],
-            "additionalProperties": false
-          }
-        ],
-        "description": "The embedding column, or the column and its search options."
+            "claim": {
+              "anyOf": [
+                {
+                  "const": false
+                },
+                {
+                  "type": "object",
+                  "properties": {
+                    "maxTenants": {
+                      "type": "number"
+                    },
+                    "keys": {
+                      "type": "object",
+                      "additionalProperties": {
+                        "type": "string"
+                      }
+                    }
+                  },
+                  "additionalProperties": false
+                }
+              ],
+              "description": "The shape of the features claim feature_claims writes: false for {}, or maxTenants (at most that many tenants) and keys (short codes for feature keys)."
+            }
+          },
+          "additionalProperties": false,
+          "description": "Where the `entitlements` SQL module finds each tenant's entitlements: a Stripe customer, a plan catalog or your own function."
+        }
       },
-      "description": "Embedding columns keyed by `table` or `schema.table`. The `vector-search` SQL module writes `search_<table>(query, k)` for each."
+      "additionalProperties": false
     },
-    "subjects": {
+    "records": {
       "type": "object",
       "propertyNames": {
         "type": "string",
@@ -1334,7 +1331,7 @@
                 "const": false
               }
             ],
-            "description": "The tenant column, or `false` for a subject without a tenant. Defaults to `organization_id`, or `<blocks.tenant.entities.organization>_id` when the tenant is renamed."
+            "description": "The tenant column, or `false` for a subject without a tenant. Defaults to `organization_id`, or `<blocks.memberships.entities.organization>_id` when the tenant is renamed."
           },
           "title": {
             "type": "string",
@@ -1414,7 +1411,7 @@
       },
       "description": "The app's subject types, keyed by type name: the entities blocks attach tags, comments, fields and ranks to. Subject-bound SQL modules read this registry, and the `subjects` module writes `subject_title`, `subject_url` and `can_subject` from it."
     },
-    "appTables": {
+    "tables": {
       "type": "object",
       "additionalProperties": {
         "type": "object",
@@ -1545,12 +1542,6 @@
             },
             "description": "The table's own columns, keyed by lower snake name. id, created_at, updated_at, user_id and the tenant column are reserved."
           },
-          "scope": {
-            "enum": ["inherit", "user", "none"],
-            "type": "string",
-            "description": "inherit follows sql.scope; user keeps rows per user; none lets signed-in users read and only the service role write.",
-            "default": "inherit"
-          },
           "timestamps": {
             "type": "boolean",
             "default": true
@@ -1753,29 +1744,33 @@
                 "additionalProperties": false
               }
             ]
+          },
+          "owner": {
+            "enum": ["inherit", "user", "none"],
+            "type": "string",
+            "description": "inherit follows sql.scope; user keeps rows per user; none lets signed-in users read and only the service role write.",
+            "default": "inherit"
           }
         },
         "additionalProperties": false
       },
-      "description": "Tables the app owns, keyed by name, created in public by `better-supabase sql sync` with an id, the scope column, created_at and updated_at, row level security and policies for the scope. Money is a bigint of minor units next to a text currency column. ADR 0040."
+      "description": "Tables the app owns, keyed by name, created in public by `better-supabase upgrade` with an id, the scope column, created_at and updated_at, row level security and policies for the scope. Money is a bigint of minor units next to a text currency column. ADR 0040."
     },
     "blocks": {
-      "description": "The blocks to install and keep in sync: a list of names, or an object keyed by block name whose values set the block's mode, names, permission keys and options. The foundation blocks (tenant, access, updated-at, ensure-rls, ...) are configured here too.",
+      "description": "The blocks to install and keep in sync: a list of names, or an object keyed by block name whose values set the block's mode, names, permission keys and options. The foundation blocks (tenant, access, updated-at, rls-guard, ...) are configured here too.",
       "oneOf": [
         {
           "type": "array",
           "items": {
             "enum": [
-              "access",
               "access-requests",
-              "activity",
-              "actor",
+              "activities",
               "agents",
               "ai-cache",
               "ai-chat",
               "ai-files",
-              "ai-providers",
-              "ai-tasks",
+              "ai-keys",
+              "ai-schedules",
               "announcements",
               "api-keys",
               "approvals",
@@ -1783,6 +1778,7 @@
               "assignment",
               "attachments",
               "audit",
+              "automations",
               "billable-time",
               "billing",
               "bookings",
@@ -1793,10 +1789,13 @@
               "chat-sdk-state",
               "collections",
               "comments",
+              "compliance",
               "connectors",
+              "contacts",
+              "content",
               "contracts",
-              "controls",
               "courses",
+              "created-by",
               "credentials",
               "custom-fields",
               "data-lifecycle",
@@ -1808,10 +1807,8 @@
               "drive",
               "drive-files",
               "employees",
-              "engagements",
               "enrichment",
               "enrollments",
-              "ensure-rls",
               "entitlements",
               "expenses",
               "field-encryption",
@@ -1819,18 +1816,19 @@
               "flags",
               "forecasts",
               "forms",
+              "goals",
               "grants",
               "guests",
               "hiring",
               "idempotency",
               "identities",
+              "impersonation",
               "imports",
               "inbox",
               "incidents",
               "inventory",
               "invitations",
               "invoices",
-              "jobs",
               "jsonb-schemas",
               "knowledge",
               "lead-scoring",
@@ -1838,26 +1836,28 @@
               "leave",
               "ledger",
               "mail-sync",
+              "memberships",
               "memory",
               "messaging",
               "metrics",
               "mfa",
               "moderation",
               "notifications",
-              "number-sequences",
+              "numbering",
               "oauth-server",
               "onboarding",
               "orders",
               "organizations",
               "outbox",
-              "parties",
               "passes",
+              "permissions",
               "pgtap",
               "pipelines",
               "posts",
               "profiles",
               "promotions",
               "push",
+              "queue",
               "quotes",
               "rank",
               "rate-limit",
@@ -1868,17 +1868,17 @@
               "reminders",
               "reserved-slugs",
               "reviews",
-              "rules",
+              "rls-guard",
               "saved-views",
               "scores",
               "search",
+              "security-events",
               "segments",
               "sequences",
-              "service-principals",
+              "service-accounts",
               "sessions",
               "settings",
               "share-links",
-              "shared-signals",
               "shipments",
               "signatures",
               "signing-keys",
@@ -1887,13 +1887,12 @@
               "state-machine",
               "streams",
               "subjects",
-              "support-sessions",
               "tags",
-              "targets",
+              "tasks",
               "teams",
               "templates",
-              "tenant",
               "time-tracking",
+              "timeline",
               "trash",
               "updated-at",
               "usage",
@@ -1904,28 +1903,174 @@
               "webhook-inbox",
               "webhooks-in",
               "webhooks-out",
-              "work-items",
-              "workflow-builder",
-              "workflow-sdk-world",
+              "workflow-editor",
+              "workflow-sdk",
               "workflows"
             ]
           }
         },
         {
           "type": "object",
-          "additionalProperties": false,
+          "additionalProperties": {
+            "$ref": "#/$defs/moduleConfig",
+            "type": "object",
+            "required": ["block"],
+            "properties": {
+              "block": {
+                "enum": [
+                  "access-requests",
+                  "activities",
+                  "agents",
+                  "ai-cache",
+                  "ai-chat",
+                  "ai-files",
+                  "ai-keys",
+                  "ai-schedules",
+                  "announcements",
+                  "api-keys",
+                  "approvals",
+                  "assets",
+                  "assignment",
+                  "attachments",
+                  "audit",
+                  "automations",
+                  "billable-time",
+                  "billing",
+                  "bookings",
+                  "bulk",
+                  "calendar",
+                  "catalog",
+                  "channels",
+                  "chat-sdk-state",
+                  "collections",
+                  "comments",
+                  "compliance",
+                  "connectors",
+                  "contacts",
+                  "content",
+                  "contracts",
+                  "courses",
+                  "created-by",
+                  "credentials",
+                  "custom-fields",
+                  "data-lifecycle",
+                  "deals",
+                  "dispatch",
+                  "documents",
+                  "domains",
+                  "donations",
+                  "drive",
+                  "drive-files",
+                  "employees",
+                  "enrichment",
+                  "enrollments",
+                  "entitlements",
+                  "expenses",
+                  "field-encryption",
+                  "field-history",
+                  "flags",
+                  "forecasts",
+                  "forms",
+                  "goals",
+                  "grants",
+                  "guests",
+                  "hiring",
+                  "idempotency",
+                  "identities",
+                  "impersonation",
+                  "imports",
+                  "inbox",
+                  "incidents",
+                  "inventory",
+                  "invitations",
+                  "invoices",
+                  "jsonb-schemas",
+                  "knowledge",
+                  "lead-scoring",
+                  "leases",
+                  "leave",
+                  "ledger",
+                  "mail-sync",
+                  "memberships",
+                  "memory",
+                  "messaging",
+                  "metrics",
+                  "mfa",
+                  "moderation",
+                  "notifications",
+                  "numbering",
+                  "oauth-server",
+                  "onboarding",
+                  "orders",
+                  "organizations",
+                  "outbox",
+                  "passes",
+                  "permissions",
+                  "pgtap",
+                  "pipelines",
+                  "posts",
+                  "profiles",
+                  "promotions",
+                  "push",
+                  "queue",
+                  "quotes",
+                  "rank",
+                  "rate-limit",
+                  "reactions",
+                  "read-sets",
+                  "realtime-tables",
+                  "relations",
+                  "reminders",
+                  "reserved-slugs",
+                  "reviews",
+                  "rls-guard",
+                  "saved-views",
+                  "scores",
+                  "search",
+                  "security-events",
+                  "segments",
+                  "sequences",
+                  "service-accounts",
+                  "sessions",
+                  "settings",
+                  "share-links",
+                  "shipments",
+                  "signatures",
+                  "signing-keys",
+                  "sla",
+                  "sso",
+                  "state-machine",
+                  "streams",
+                  "subjects",
+                  "tags",
+                  "tasks",
+                  "teams",
+                  "templates",
+                  "time-tracking",
+                  "timeline",
+                  "trash",
+                  "updated-at",
+                  "usage",
+                  "vector-search",
+                  "vercel-marketplace",
+                  "versions",
+                  "waitlist",
+                  "webhook-inbox",
+                  "webhooks-in",
+                  "webhooks-out",
+                  "workflow-editor",
+                  "workflow-sdk",
+                  "workflows"
+                ]
+              }
+            }
+          },
           "properties": {
-            "access": {
-              "$ref": "#/$defs/blocks/access"
-            },
             "access-requests": {
               "$ref": "#/$defs/blocks/access-requests"
             },
-            "activity": {
-              "$ref": "#/$defs/blocks/activity"
-            },
-            "actor": {
-              "$ref": "#/$defs/blocks/actor"
+            "activities": {
+              "$ref": "#/$defs/blocks/activities"
             },
             "agents": {
               "$ref": "#/$defs/blocks/agents"
@@ -1939,11 +2084,11 @@
             "ai-files": {
               "$ref": "#/$defs/blocks/ai-files"
             },
-            "ai-providers": {
-              "$ref": "#/$defs/blocks/ai-providers"
+            "ai-keys": {
+              "$ref": "#/$defs/blocks/ai-keys"
             },
-            "ai-tasks": {
-              "$ref": "#/$defs/blocks/ai-tasks"
+            "ai-schedules": {
+              "$ref": "#/$defs/blocks/ai-schedules"
             },
             "announcements": {
               "$ref": "#/$defs/blocks/announcements"
@@ -1966,6 +2111,9 @@
             "audit": {
               "$ref": "#/$defs/blocks/audit"
             },
+            "automations": {
+              "$ref": "#/$defs/blocks/automations"
+            },
             "billable-time": {
               "$ref": "#/$defs/blocks/billable-time"
             },
@@ -1996,18 +2144,27 @@
             "comments": {
               "$ref": "#/$defs/blocks/comments"
             },
+            "compliance": {
+              "$ref": "#/$defs/blocks/compliance"
+            },
             "connectors": {
               "$ref": "#/$defs/blocks/connectors"
             },
+            "contacts": {
+              "$ref": "#/$defs/blocks/contacts"
+            },
+            "content": {
+              "$ref": "#/$defs/blocks/content"
+            },
             "contracts": {
               "$ref": "#/$defs/blocks/contracts"
             },
-            "controls": {
-              "$ref": "#/$defs/blocks/controls"
-            },
             "courses": {
               "$ref": "#/$defs/blocks/courses"
             },
+            "created-by": {
+              "$ref": "#/$defs/blocks/created-by"
+            },
             "credentials": {
               "$ref": "#/$defs/blocks/credentials"
             },
@@ -2041,18 +2198,12 @@
             "employees": {
               "$ref": "#/$defs/blocks/employees"
             },
-            "engagements": {
-              "$ref": "#/$defs/blocks/engagements"
-            },
             "enrichment": {
               "$ref": "#/$defs/blocks/enrichment"
             },
             "enrollments": {
               "$ref": "#/$defs/blocks/enrollments"
             },
-            "ensure-rls": {
-              "$ref": "#/$defs/blocks/ensure-rls"
-            },
             "entitlements": {
               "$ref": "#/$defs/blocks/entitlements"
             },
@@ -2074,6 +2225,9 @@
             "forms": {
               "$ref": "#/$defs/blocks/forms"
             },
+            "goals": {
+              "$ref": "#/$defs/blocks/goals"
+            },
             "grants": {
               "$ref": "#/$defs/blocks/grants"
             },
@@ -2089,6 +2243,9 @@
             "identities": {
               "$ref": "#/$defs/blocks/identities"
             },
+            "impersonation": {
+              "$ref": "#/$defs/blocks/impersonation"
+            },
             "imports": {
               "$ref": "#/$defs/blocks/imports"
             },
@@ -2107,9 +2264,6 @@
             "invoices": {
               "$ref": "#/$defs/blocks/invoices"
             },
-            "jobs": {
-              "$ref": "#/$defs/blocks/jobs"
-            },
             "jsonb-schemas": {
               "$ref": "#/$defs/blocks/jsonb-schemas"
             },
@@ -2131,6 +2285,9 @@
             "mail-sync": {
               "$ref": "#/$defs/blocks/mail-sync"
             },
+            "memberships": {
+              "$ref": "#/$defs/blocks/memberships"
+            },
             "memory": {
               "$ref": "#/$defs/blocks/memory"
             },
@@ -2149,8 +2306,8 @@
             "notifications": {
               "$ref": "#/$defs/blocks/notifications"
             },
-            "number-sequences": {
-              "$ref": "#/$defs/blocks/number-sequences"
+            "numbering": {
+              "$ref": "#/$defs/blocks/numbering"
             },
             "oauth-server": {
               "$ref": "#/$defs/blocks/oauth-server"
@@ -2167,12 +2324,12 @@
             "outbox": {
               "$ref": "#/$defs/blocks/outbox"
             },
-            "parties": {
-              "$ref": "#/$defs/blocks/parties"
-            },
             "passes": {
               "$ref": "#/$defs/blocks/passes"
             },
+            "permissions": {
+              "$ref": "#/$defs/blocks/permissions"
+            },
             "pgtap": {
               "$ref": "#/$defs/blocks/pgtap"
             },
@@ -2191,6 +2348,9 @@
             "push": {
               "$ref": "#/$defs/blocks/push"
             },
+            "queue": {
+              "$ref": "#/$defs/blocks/queue"
+            },
             "quotes": {
               "$ref": "#/$defs/blocks/quotes"
             },
@@ -2221,8 +2381,8 @@
             "reviews": {
               "$ref": "#/$defs/blocks/reviews"
             },
-            "rules": {
-              "$ref": "#/$defs/blocks/rules"
+            "rls-guard": {
+              "$ref": "#/$defs/blocks/rls-guard"
             },
             "saved-views": {
               "$ref": "#/$defs/blocks/saved-views"
@@ -2233,14 +2393,17 @@
             "search": {
               "$ref": "#/$defs/blocks/search"
             },
+            "security-events": {
+              "$ref": "#/$defs/blocks/security-events"
+            },
             "segments": {
               "$ref": "#/$defs/blocks/segments"
             },
             "sequences": {
               "$ref": "#/$defs/blocks/sequences"
             },
-            "service-principals": {
-              "$ref": "#/$defs/blocks/service-principals"
+            "service-accounts": {
+              "$ref": "#/$defs/blocks/service-accounts"
             },
             "sessions": {
               "$ref": "#/$defs/blocks/sessions"
@@ -2251,9 +2414,6 @@
             "share-links": {
               "$ref": "#/$defs/blocks/share-links"
             },
-            "shared-signals": {
-              "$ref": "#/$defs/blocks/shared-signals"
-            },
             "shipments": {
               "$ref": "#/$defs/blocks/shipments"
             },
@@ -2278,14 +2438,11 @@
             "subjects": {
               "$ref": "#/$defs/blocks/subjects"
             },
-            "support-sessions": {
-              "$ref": "#/$defs/blocks/support-sessions"
-            },
             "tags": {
               "$ref": "#/$defs/blocks/tags"
             },
-            "targets": {
-              "$ref": "#/$defs/blocks/targets"
+            "tasks": {
+              "$ref": "#/$defs/blocks/tasks"
             },
             "teams": {
               "$ref": "#/$defs/blocks/teams"
@@ -2293,12 +2450,12 @@
             "templates": {
               "$ref": "#/$defs/blocks/templates"
             },
-            "tenant": {
-              "$ref": "#/$defs/blocks/tenant"
-            },
             "time-tracking": {
               "$ref": "#/$defs/blocks/time-tracking"
             },
+            "timeline": {
+              "$ref": "#/$defs/blocks/timeline"
+            },
             "trash": {
               "$ref": "#/$defs/blocks/trash"
             },
@@ -2329,14 +2486,11 @@
             "webhooks-out": {
               "$ref": "#/$defs/blocks/webhooks-out"
             },
-            "work-items": {
-              "$ref": "#/$defs/blocks/work-items"
-            },
-            "workflow-builder": {
-              "$ref": "#/$defs/blocks/workflow-builder"
+            "workflow-editor": {
+              "$ref": "#/$defs/blocks/workflow-editor"
             },
-            "workflow-sdk-world": {
-              "$ref": "#/$defs/blocks/workflow-sdk-world"
+            "workflow-sdk": {
+              "$ref": "#/$defs/blocks/workflow-sdk"
             },
             "workflows": {
               "$ref": "#/$defs/blocks/workflows"
@@ -2345,295 +2499,419 @@
         }
       ]
     },
-    "sql": {
+    "adapters": {
+      "type": "array",
+      "items": {
+        "enum": [
+          "next",
+          "hono",
+          "orpc",
+          "edge",
+          "expo",
+          "mcp",
+          "client",
+          "react"
+        ],
+        "type": "string"
+      },
+      "description": "The integrations init and add wrote."
+    },
+    "gen": {
       "type": "object",
       "properties": {
-        "workflow": {
-          "enum": ["pg-delta", "migra", "migrations"],
-          "type": "string",
-          "description": "How the SQL modules reach the database: pg-delta (Declarative Schemas 2.0), migra (declarative schemas 1.0) or migrations (written straight into a migration). Unset, supabase/config.toml decides, and pg-delta is the default."
-        },
-        "dir": {
-          "type": "string",
-          "default": "supabase/schemas"
-        },
-        "prefix": {
-          "type": "string",
-          "default": "900_better_supabase"
+        "tasks": {
+          "type": "array",
+          "items": {
+            "enum": ["types", "sql", "spec", "seed", "env"],
+            "type": "string"
+          },
+          "description": "The steps gen runs, in order. Without a list: types, plus sql, spec and seed when the project uses them. env runs only when listed."
         },
-        "testsDir": {
-          "type": "string",
-          "default": "supabase/tests"
+        "watchInterval": {
+          "type": "number",
+          "minimum": 1,
+          "description": "Milliseconds between checks in gen --watch and spec emit --watch."
         },
-        "schema": {
-          "type": "string",
-          "description": "The schema of every block's functions and managed tables, unless the block sets its own.",
-          "default": "better_supabase"
+        "contentMapper": {
+          "type": "boolean",
+          "description": "Serve the schema types through the TypeScript 7.1 content mapper: gen writes a slim generated.ts and schema.bsb instead of the type files.",
+          "default": false
         },
-        "api": {
+        "output": {
           "type": "string",
-          "description": "The Data API schema every block writes its security invoker entry points to, unless the block sets its own api or false."
+          "description": "Main generated module.",
+          "default": "src/lib/supabase/generated.ts"
         },
-        "scope": {
-          "enum": ["tenant", "user", "none"],
-          "type": "string",
-          "description": "Who a block's rows belong to, unless the block sets its own scope: tenant (the default), user (the signed-in user, no tenants) or none (one shared space every signed-in user uses).",
-          "default": "tenant"
-        }
-      },
-      "additionalProperties": false
-    },
-    "seed": {
-      "type": "object",
-      "properties": {
-        "entry": {
+        "casing": {
+          "enum": ["snake", "camel"],
           "type": "string",
-          "default": "supabase/seed.ts"
+          "default": "snake"
         },
-        "output": {
+        "postgrestVersion": {
           "type": "string",
-          "default": "supabase/seeds/000_better_supabase.sql"
+          "description": "PostgREST major version written to database.types.ts.",
+          "default": "13"
         },
-        "perTenant": {
-          "type": "string",
-          "default": "supabase/seed.tenant.ts"
-        }
-      },
-      "additionalProperties": false
-    },
-    "openapi": {
-      "type": "object",
-      "properties": {
-        "entry": {
-          "type": "string",
-          "default": "src/lib/openapi.ts"
+        "recordTypes": {
+          "type": "boolean"
         },
-        "output": {
-          "type": "string",
-          "default": "openapi.json"
-        }
-      },
-      "additionalProperties": false,
-      "description": "Deprecated: use specs. openapi.entry and openapi.output map onto it."
-    },
-    "specs": {
-      "type": "object",
-      "properties": {
-        "entry": {
-          "type": "string",
-          "description": "Module exporting a defineApi() result (or a function returning one) as api or default. Defaults to openapi.entry.",
-          "default": "src/lib/openapi.ts"
+        "hooks": {
+          "anyOf": [
+            {
+              "enum": ["react", "vue", "svelte", "solid"],
+              "type": "string"
+            },
+            {
+              "const": false
+            }
+          ]
         },
-        "outputs": {
-          "type": "array",
-          "items": {
+        "tables": {
+          "type": "object",
+          "additionalProperties": {
             "type": "object",
             "properties": {
-              "format": {
-                "type": "string",
-                "minLength": 1,
-                "description": "A format id: openapi, asyncapi or arazzo."
+              "casing": {
+                "enum": ["snake", "camel"],
+                "type": "string"
               },
-              "version": {
-                "type": "string",
-                "description": "Defaults to the format's default version."
+              "exclude": {
+                "type": "boolean"
               },
-              "output": {
-                "type": "string",
-                "description": "File to write, relative to the root. Defaults to the format's file name."
+              "serviceRole": {
+                "type": "boolean",
+                "description": "Only service_role reaches the table. Models are still generated; doctor (BS106) checks that anon and authenticated have no grants."
               },
-              "overlays": {
+              "relations": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string"
+                }
+              },
+              "insertOptional": {
                 "type": "array",
                 "items": {
                   "type": "string"
                 },
-                "description": "Overlay files (JSON or YAML), applied in order."
-              },
-              "serialize": {
-                "enum": ["json", "yaml"],
-                "type": "string",
-                "description": "Defaults to yaml when output ends in .yaml or .yml, otherwise json."
-              },
-              "ui": {
-                "enum": ["scalar", "swagger", "redoc", "elements", "rapidoc"],
-                "type": "string",
-                "description": "Also writes a reference page (openapi.html for openapi.json) next to OpenAPI outputs."
+                "description": "Database names of not-null columns an insert may leave out because the database fills them, for example from a before insert trigger."
               }
             },
-            "required": ["format"],
             "additionalProperties": false
           }
         },
-        "failOn": {
-          "enum": ["error", "warning", "never"],
-          "type": "string",
-          "description": "The lowest severity that fails spec emit, check and validate.",
-          "default": "error"
+        "json": {
+          "type": "object",
+          "additionalProperties": {
+            "anyOf": [
+              {
+                "type": "object",
+                "properties": {
+                  "import": {
+                    "type": "string",
+                    "description": "`./path.ts#TypeName`"
+                  },
+                  "schema": {
+                    "type": "object",
+                    "additionalProperties": {},
+                    "description": "JSON Schema enforced by `better-supabase add jsonb-schemas` (pg_jsonschema)."
+                  }
+                },
+                "required": ["import"],
+                "additionalProperties": false
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "type": {
+                    "type": "string",
+                    "description": "Inline TypeScript type."
+                  },
+                  "schema": {
+                    "type": "object",
+                    "additionalProperties": {},
+                    "description": "JSON Schema enforced by `better-supabase add jsonb-schemas` (pg_jsonschema)."
+                  }
+                },
+                "required": ["type"],
+                "additionalProperties": false
+              }
+            ]
+          },
+          "description": "Types for jsonb columns, keyed by `table.column`."
         },
-        "manifest": {
-          "type": "string",
-          "description": "Also write the diagnostics manifest (JSON) to this file, like spec --manifest."
-        }
-      },
-      "additionalProperties": false,
-      "description": "The documents better-supabase spec emit writes (OpenAPI, AsyncAPI, Arazzo)."
-    },
-    "doctor": {
-      "type": "object",
-      "properties": {
-        "ignore": {
+        "codecs": {
+          "type": "object",
+          "properties": {
+            "timestamptz": {
+              "enum": ["string", "instant", "utc"],
+              "type": "string",
+              "default": "string"
+            },
+            "int8": {
+              "enum": ["number", "string", "bigint"],
+              "type": "string",
+              "default": "number"
+            },
+            "numeric": {
+              "enum": ["number", "string"],
+              "type": "string",
+              "default": "number"
+            }
+          },
+          "additionalProperties": false,
+          "description": "Runtime types for timestamps, int8 and numeric columns."
+        },
+        "relations": {
+          "type": "object",
+          "properties": {
+            "nullableUnderRls": {
+              "type": "boolean",
+              "description": "Type to-one includes of tables with row level security as nullable, since a policy can hide the related row.",
+              "default": false
+            }
+          },
+          "additionalProperties": false,
+          "description": "How generated relations are typed."
+        },
+        "sensitive": {
           "type": "array",
           "items": {
             "type": "string"
-          }
+          },
+          "description": "Columns guarded by the noSensitiveSelect rule (`table.column` or `schema.table.column`)."
         },
-        "only": {
-          "type": "array",
-          "items": {
+        "storagePaths": {
+          "type": "object",
+          "additionalProperties": {
             "type": "string"
           },
-          "description": "Run only these checks."
-        },
-        "strict": {
-          "type": "boolean"
-        },
-        "format": {
-          "enum": ["text", "sarif", "github"],
-          "type": "string",
-          "description": "Report format. The global --json flag still picks the JSON report.",
-          "default": "text"
+          "description": "Text columns holding a storage object path (`table.column` or `schema.table.column`), mapped to a `buckets` key or bucket id. Typed as `StoragePath<'bucket-id'>`."
+        },
+        "functions": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "object",
+            "properties": {
+              "notNull": {
+                "anyOf": [
+                  {
+                    "const": true
+                  },
+                  {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    }
+                  }
+                ],
+                "description": "true for the whole result, or the returns table columns that are never null."
+              }
+            },
+            "additionalProperties": false
+          },
+          "description": "Function results gen may type as not null, keyed by function name. Results are nullable by default."
         },
-        "output": {
-          "type": "string",
-          "description": "Write the report to this file."
-        },
-        "sources": {
+        "generators": {
           "type": "array",
           "items": {
-            "type": "string"
-          }
-        },
-        "policyHelperLimit": {
-          "type": "number"
-        },
-        "claimsLimit": {
-          "type": "number"
-        },
-        "migrationSafety": {
-          "type": "object",
-          "properties": {
-            "since": {
-              "type": "string"
-            }
+            "type": "object"
           },
-          "additionalProperties": false
-        }
-      },
-      "additionalProperties": false
-    },
-    "gen": {
-      "type": "object",
-      "properties": {
-        "tasks": {
+          "description": "Generator plugins. Only available in better-supabase.config.ts."
+        },
+        "readSets": {
           "type": "array",
           "items": {
-            "enum": ["types", "sql", "spec", "seed", "scaffold", "env"],
             "type": "string"
           },
-          "description": "The steps gen runs, in order. Without a list: types, plus sql, spec, seed and scaffold when the project uses them. env runs only when listed."
-        },
-        "watchInterval": {
-          "type": "number",
-          "minimum": 1,
-          "description": "Milliseconds between checks in gen --watch and spec emit --watch."
+          "description": "Modules exporting `defineReadSet` results. `gen` compiles them into the `read-sets` SQL module."
         }
       },
       "additionalProperties": false,
       "description": "What better-supabase gen runs."
     },
-    "env": {
+    "api": {
       "type": "object",
       "properties": {
-        "output": {
-          "type": "string",
-          "default": ".env.local"
+        "openapi": {
+          "type": "object",
+          "properties": {
+            "entry": {
+              "type": "string",
+              "default": "src/lib/openapi.ts"
+            },
+            "output": {
+              "type": "string",
+              "default": "openapi.json"
+            }
+          },
+          "additionalProperties": false,
+          "description": "Deprecated: use specs. openapi.entry and openapi.output map onto it."
         },
-        "prefix": {
-          "type": "string",
-          "description": "Prefix for browser variables, such as NEXT_PUBLIC_; none for no prefix. Detected from the framework by default."
-        }
-      },
-      "additionalProperties": false,
-      "description": "The env file better-supabase env writes."
-    },
-    "scaffold": {
-      "type": "object",
-      "properties": {
-        "api": {
+        "specs": {
           "type": "object",
           "properties": {
-            "framework": {
-              "enum": ["hono", "next"],
-              "type": "string"
+            "entry": {
+              "type": "string",
+              "description": "Module exporting a defineApi() result (or a function returning one) as api or default. Defaults to openapi.entry.",
+              "default": "src/lib/openapi.ts"
             },
-            "tables": {
+            "outputs": {
               "type": "array",
               "items": {
-                "type": "string"
+                "type": "object",
+                "properties": {
+                  "format": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "A format id: openapi, asyncapi or arazzo."
+                  },
+                  "version": {
+                    "type": "string",
+                    "description": "Defaults to the format's default version."
+                  },
+                  "output": {
+                    "type": "string",
+                    "description": "File to write, relative to the root. Defaults to the format's file name."
+                  },
+                  "overlays": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    },
+                    "description": "Overlay files (JSON or YAML), applied in order."
+                  },
+                  "serialize": {
+                    "enum": ["json", "yaml"],
+                    "type": "string",
+                    "description": "Defaults to yaml when output ends in .yaml or .yml, otherwise json."
+                  },
+                  "ui": {
+                    "enum": [
+                      "scalar",
+                      "swagger",
+                      "redoc",
+                      "elements",
+                      "rapidoc"
+                    ],
+                    "type": "string",
+                    "description": "Also writes a reference page (openapi.html for openapi.json) next to OpenAPI outputs."
+                  }
+                },
+                "required": ["format"],
+                "additionalProperties": false
               }
             },
-            "name": {
+            "failOn": {
+              "enum": ["error", "warning", "never"],
               "type": "string",
-              "default": "api"
+              "description": "The lowest severity that fails spec emit, check and validate.",
+              "default": "error"
             },
-            "basePath": {
+            "manifest": {
               "type": "string",
-              "default": "/api"
+              "description": "Also write the diagnostics manifest (JSON) to this file, like spec --manifest."
             }
           },
           "additionalProperties": false,
-          "description": "What better-supabase scaffold api writes; the scaffold gen step keeps its generated file current."
+          "description": "The documents better-supabase spec emit writes (OpenAPI, AsyncAPI, Arazzo)."
         }
       },
       "additionalProperties": false
     },
-    "integrations": {
-      "type": "array",
-      "items": {
-        "enum": [
-          "next",
-          "hono",
-          "orpc",
-          "edge",
-          "expo",
-          "mcp",
-          "client",
-          "react"
-        ],
-        "type": "string"
-      },
-      "description": "The integrations init and add wrote."
-    },
-    "skills": {
+    "tooling": {
       "type": "object",
       "properties": {
-        "agents": {
-          "type": "array",
-          "items": {
-            "enum": ["cursor", "claude", "agents"],
-            "type": "string"
+        "doctor": {
+          "type": "object",
+          "properties": {
+            "ignore": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "only": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "description": "Run only these checks."
+            },
+            "strict": {
+              "type": "boolean"
+            },
+            "format": {
+              "enum": ["text", "sarif", "github"],
+              "type": "string",
+              "description": "Report format. The global --json flag still picks the JSON report.",
+              "default": "text"
+            },
+            "output": {
+              "type": "string",
+              "description": "Write the report to this file."
+            },
+            "sources": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "policyHelperLimit": {
+              "type": "number"
+            },
+            "claimsLimit": {
+              "type": "number"
+            },
+            "migrationSafety": {
+              "type": "object",
+              "properties": {
+                "since": {
+                  "type": "string"
+                }
+              },
+              "additionalProperties": false
+            }
           },
-          "description": "Agent folders skills install writes to. Defaults to the ones the project has, else agents."
-        }
-      },
-      "additionalProperties": false
-    },
-    "keys": {
-      "type": "object",
-      "properties": {
-        "output": {
-          "type": "string",
-          "description": "Signing key file better-supabase keys writes. Defaults to supabase/signing_keys.json."
+          "additionalProperties": false
+        },
+        "env": {
+          "type": "object",
+          "properties": {
+            "output": {
+              "type": "string",
+              "default": ".env.local"
+            },
+            "prefix": {
+              "type": "string",
+              "description": "Prefix for browser variables, such as NEXT_PUBLIC_; none for no prefix. Detected from the framework by default."
+            }
+          },
+          "additionalProperties": false,
+          "description": "The env file better-supabase dev env writes."
+        },
+        "keys": {
+          "type": "object",
+          "properties": {
+            "output": {
+              "type": "string",
+              "description": "Signing key file better-supabase dev keys writes. Defaults to supabase/signing_keys.json."
+            }
+          },
+          "additionalProperties": false
+        },
+        "skills": {
+          "type": "object",
+          "properties": {
+            "agents": {
+              "type": "array",
+              "items": {
+                "enum": ["cursor", "claude", "agents"],
+                "type": "string"
+              },
+              "description": "Agent folders skills install writes to. Defaults to the ones the project has, else agents."
+            }
+          },
+          "additionalProperties": false
         }
       },
       "additionalProperties": false
@@ -2664,119 +2942,32 @@
       "type": "object",
       "additionalProperties": false,
       "properties": {
-        "source": {
-          "$ref": "#/properties/source"
+        "database": {
+          "$ref": "#/properties/database"
         },
-        "schemas": {
-          "$ref": "#/properties/schemas"
+        "auth": {
+          "$ref": "#/properties/auth"
         },
-        "casing": {
-          "$ref": "#/properties/casing"
+        "records": {
+          "$ref": "#/properties/records"
         },
         "tables": {
           "$ref": "#/properties/tables"
         },
-        "output": {
-          "$ref": "#/properties/output"
-        },
-        "postgrestVersion": {
-          "$ref": "#/properties/postgrestVersion"
-        },
-        "generateFeatures": {
-          "$ref": "#/properties/generateFeatures"
-        },
-        "json": {
-          "$ref": "#/properties/json"
-        },
-        "codecs": {
-          "$ref": "#/properties/codecs"
-        },
-        "relations": {
-          "$ref": "#/properties/relations"
-        },
-        "sensitive": {
-          "$ref": "#/properties/sensitive"
-        },
-        "storagePaths": {
-          "$ref": "#/properties/storagePaths"
-        },
-        "functions": {
-          "$ref": "#/properties/functions"
-        },
-        "expose": {
-          "$ref": "#/properties/expose"
-        },
-        "readSets": {
-          "$ref": "#/properties/readSets"
-        },
-        "generators": {
-          "$ref": "#/properties/generators"
-        },
-        "plugins": {
-          "$ref": "#/properties/plugins"
-        },
-        "claims": {
-          "$ref": "#/properties/claims"
-        },
-        "buckets": {
-          "$ref": "#/properties/buckets"
-        },
-        "topics": {
-          "$ref": "#/properties/topics"
-        },
-        "realtime": {
-          "$ref": "#/properties/realtime"
-        },
-        "entitlements": {
-          "$ref": "#/properties/entitlements"
-        },
-        "authorization": {
-          "$ref": "#/properties/authorization"
-        },
-        "vectorSearch": {
-          "$ref": "#/properties/vectorSearch"
-        },
-        "subjects": {
-          "$ref": "#/properties/subjects"
-        },
-        "appTables": {
-          "$ref": "#/properties/appTables"
-        },
         "blocks": {
           "$ref": "#/properties/blocks"
         },
-        "sql": {
-          "$ref": "#/properties/sql"
-        },
-        "seed": {
-          "$ref": "#/properties/seed"
-        },
-        "openapi": {
-          "$ref": "#/properties/openapi"
-        },
-        "specs": {
-          "$ref": "#/properties/specs"
-        },
-        "doctor": {
-          "$ref": "#/properties/doctor"
+        "adapters": {
+          "$ref": "#/properties/adapters"
         },
         "gen": {
           "$ref": "#/properties/gen"
         },
-        "env": {
-          "$ref": "#/properties/env"
-        },
-        "scaffold": {
-          "$ref": "#/properties/scaffold"
-        },
-        "integrations": {
-          "$ref": "#/properties/integrations"
-        },
-        "skills": {
-          "$ref": "#/properties/skills"
+        "api": {
+          "$ref": "#/properties/api"
         },
-        "keys": {
-          "$ref": "#/properties/keys"
+        "tooling": {
+          "$ref": "#/properties/tooling"
         }
       },
       "description": "Keys an environment block overrides. Objects merge into the config; arrays and other values replace."
@@ -2784,14 +2975,34 @@
     "moduleConfig": {
       "type": "object",
       "properties": {
-        "mode": {
-          "enum": ["managed", "adopt", "custom"],
+        "block": {
           "type": "string",
-          "default": "managed"
+          "description": "The block this entry installs. Defaults to the key; any other key is a second instance of the block it names."
+        },
+        "on": {
+          "anyOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {}
+              }
+            }
+          ],
+          "description": "The record types an attachable block attaches to, as names or keyed by name with settings. Defaults to every record type."
         },
-        "schema": {
-          "type": "string",
-          "default": "better_supabase"
+        "uses": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "Dependency block to the instance it uses, needed when that dependency is installed more than once."
         },
         "tables": {
           "type": "object",
@@ -2806,6 +3017,15 @@
             ]
           }
         },
+        "ownership": {
+          "enum": ["managed", "custom"],
+          "type": "string",
+          "default": "managed"
+        },
+        "schema": {
+          "type": "string",
+          "default": "better_supabase"
+        },
         "columns": {
           "type": "object",
           "additionalProperties": {
@@ -2825,10 +3045,10 @@
         "idType": {
           "type": "string"
         },
-        "scope": {
+        "owner": {
           "enum": ["tenant", "user", "none"],
           "type": "string",
-          "description": "Who the block's rows belong to: tenant, user or none. Defaults to sql.scope, then tenant."
+          "description": "Who the block's rows belong to: tenant, user or none. Defaults to database.sql.owner, then tenant."
         },
         "functions": {
           "type": "object",
@@ -2843,7 +3063,7 @@
             "type": "string"
           }
         },
-        "entities": {
+        "names": {
           "anyOf": [
             {
               "type": "string",
@@ -2886,7 +3106,7 @@
           "type": "object",
           "additionalProperties": {}
         },
-        "hooks": {
+        "callbacks": {
           "type": "object",
           "properties": {
             "schema": {
@@ -2936,17 +3156,34 @@
       },
       "additionalProperties": false
     },
-    "accessBlock": {
+    "permissionsBlock": {
       "type": "object",
       "properties": {
-        "mode": {
-          "enum": ["managed", "adopt", "custom"],
-          "type": "string",
-          "default": "managed"
+        "block": {
+          "type": "string"
         },
-        "schema": {
-          "type": "string",
-          "default": "better_supabase"
+        "on": {
+          "anyOf": [
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            {
+              "type": "object",
+              "additionalProperties": {
+                "type": "object",
+                "additionalProperties": {}
+              }
+            }
+          ]
+        },
+        "uses": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          }
         },
         "tables": {
           "type": "object",
@@ -2961,6 +3198,15 @@
             ]
           }
         },
+        "ownership": {
+          "enum": ["managed", "custom"],
+          "type": "string",
+          "default": "managed"
+        },
+        "schema": {
+          "type": "string",
+          "default": "better_supabase"
+        },
         "columns": {
           "type": "object",
           "additionalProperties": {
@@ -2980,10 +3226,10 @@
         "idType": {
           "type": "string"
         },
-        "scope": {
+        "owner": {
           "enum": ["tenant", "user", "none"],
           "type": "string",
-          "description": "Who the block's rows belong to: tenant, user or none. Defaults to sql.scope, then tenant."
+          "description": "Who the block's rows belong to: tenant, user or none. Defaults to database.sql.owner, then tenant."
         },
         "functions": {
           "type": "object",
@@ -3018,7 +3264,7 @@
             "type": "string"
           }
         },
-        "entities": {
+        "names": {
           "anyOf": [
             {
               "type": "string",
@@ -3061,7 +3307,7 @@
           "type": "object",
           "additionalProperties": {}
         },
-        "hooks": {
+        "callbacks": {
           "type": "object",
           "properties": {
             "schema": {
@@ -3266,30 +3512,6 @@
       "description": "A column of the changed row, or a lookup: the `select` column of the `from` row (`table` or `schema.table`) whose `key` (default id) equals `via`, a column or another lookup."
     },
     "blocks": {
-      "access": {
-        "$ref": "#/$defs/accessBlock",
-        "type": "object",
-        "properties": {
-          "options": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-              "platformRoleScope": {
-                "type": "string",
-                "default": "platform"
-              },
-              "scope": {
-                "type": "string",
-                "default": "organization"
-              },
-              "tenantRoleScope": {
-                "type": "string",
-                "default": "tenant"
-              }
-            }
-          }
-        }
-      },
       "access-requests": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -3310,25 +3532,29 @@
           }
         }
       },
-      "activity": {
-        "$ref": "#/$defs/moduleConfig",
-        "type": "object",
-        "properties": {
-          "options": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {}
-          }
-        }
-      },
-      "actor": {
+      "activities": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
           "options": {
             "type": "object",
             "additionalProperties": false,
-            "properties": {}
+            "properties": {
+              "types": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "extraColumns": {},
+              "recordings": {
+                "type": "boolean",
+                "default": false
+              },
+              "bookings": {
+                "type": "boolean"
+              }
+            }
           }
         }
       },
@@ -3389,6 +3615,18 @@
                 "type": "number",
                 "default": 600
               },
+              "meterUsage": {
+                "type": "boolean",
+                "default": true
+              },
+              "inputMeter": {
+                "type": "string",
+                "default": "ai.input_tokens"
+              },
+              "outputMeter": {
+                "type": "string",
+                "default": "ai.output_tokens"
+              },
               "extraColumns": {}
             }
           }
@@ -3425,7 +3663,7 @@
           }
         }
       },
-      "ai-providers": {
+      "ai-keys": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
@@ -3441,7 +3679,7 @@
           }
         }
       },
-      "ai-tasks": {
+      "ai-schedules": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
@@ -3523,7 +3761,6 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "policies": {},
               "extraColumns": {}
             }
@@ -3583,7 +3820,6 @@
                 },
                 "default": []
               },
-              "subjects": {},
               "path": {
                 "type": "string",
                 "default": "{organization_id}/attachments/{id}"
@@ -3595,6 +3831,13 @@
                 },
                 "default": []
               },
+              "publicBuckets": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "default": []
+              },
               "extraColumns": {}
             }
           }
@@ -3680,6 +3923,44 @@
           }
         }
       },
+      "automations": {
+        "$ref": "#/$defs/moduleConfig",
+        "type": "object",
+        "properties": {
+          "options": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "maxConditions": {
+                "type": "number",
+                "default": 50
+              },
+              "maxDepth": {
+                "type": "number",
+                "default": 4
+              },
+              "maxActions": {
+                "type": "number",
+                "default": 20
+              },
+              "enable": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "default": []
+              },
+              "disable": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "default": []
+              }
+            }
+          }
+        }
+      },
       "billable-time": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -3775,7 +4056,14 @@
                 "type": "string",
                 "default": "private"
               },
-              "extraColumns": {}
+              "extraColumns": {},
+              "locales": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "default": ["en"]
+              }
             }
           }
         }
@@ -3836,6 +4124,19 @@
           }
         }
       },
+      "compliance": {
+        "$ref": "#/$defs/moduleConfig",
+        "type": "object",
+        "properties": {
+          "options": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "extraColumns": {}
+            }
+          }
+        }
+      },
       "connectors": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -3861,6 +4162,52 @@
           }
         }
       },
+      "contacts": {
+        "$ref": "#/$defs/moduleConfig",
+        "type": "object",
+        "properties": {
+          "options": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "companyLifecycles": {},
+              "personLifecycles": {},
+              "extraColumns": {}
+            }
+          }
+        }
+      },
+      "content": {
+        "$ref": "#/$defs/moduleConfig",
+        "type": "object",
+        "properties": {
+          "options": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "types": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "default": ["page", "post"]
+              },
+              "locales": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "default": ["en"]
+              },
+              "requireApproval": {
+                "type": "boolean",
+                "default": false
+              },
+              "publishPolicy": {}
+            }
+          }
+        }
+      },
       "contracts": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -3878,7 +4225,7 @@
           }
         }
       },
-      "controls": {
+      "courses": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
@@ -3891,7 +4238,7 @@
           }
         }
       },
-      "courses": {
+      "created-by": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
@@ -3899,7 +4246,18 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "extraColumns": {}
+              "createdBy": {
+                "type": "string",
+                "default": "created_by"
+              },
+              "updatedBy": {
+                "type": "string",
+                "default": "updated_by"
+              },
+              "impersonatedBy": {
+                "type": "string",
+                "default": "impersonated_by"
+              }
             }
           }
         }
@@ -4029,7 +4387,6 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "topic": {
                 "type": "string",
                 "default": "documents"
@@ -4139,32 +4496,6 @@
           }
         }
       },
-      "engagements": {
-        "$ref": "#/$defs/moduleConfig",
-        "type": "object",
-        "properties": {
-          "options": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-              "types": {
-                "type": "array",
-                "items": {
-                  "type": "string"
-                }
-              },
-              "extraColumns": {},
-              "recordings": {
-                "type": "boolean",
-                "default": false
-              },
-              "bookings": {
-                "type": "boolean"
-              }
-            }
-          }
-        }
-      },
       "enrichment": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -4185,21 +4516,10 @@
             "additionalProperties": false,
             "properties": {
               "maxSteps": {
-                "type": "number",
-                "default": 100
-              }
-            }
-          }
-        }
-      },
-      "ensure-rls": {
-        "$ref": "#/$defs/moduleConfig",
-        "type": "object",
-        "properties": {
-          "options": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {}
+                "type": "number",
+                "default": 100
+              }
+            }
           }
         }
       },
@@ -4245,9 +4565,7 @@
           "options": {
             "type": "object",
             "additionalProperties": false,
-            "properties": {
-              "subjects": {}
-            }
+            "properties": {}
           }
         }
       },
@@ -4284,7 +4602,6 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "handlers": {},
               "publicLimit": {},
               "extraColumns": {}
@@ -4292,6 +4609,19 @@
           }
         }
       },
+      "goals": {
+        "$ref": "#/$defs/moduleConfig",
+        "type": "object",
+        "properties": {
+          "options": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "extraColumns": {}
+            }
+          }
+        }
+      },
       "grants": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -4364,6 +4694,26 @@
           }
         }
       },
+      "impersonation": {
+        "$ref": "#/$defs/moduleConfig",
+        "type": "object",
+        "properties": {
+          "options": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "allowPlatformTargets": {},
+              "allowWrites": {},
+              "approval": {},
+              "approvalTtl": {},
+              "auditCategory": {},
+              "claimsHook": {},
+              "maxTtl": {},
+              "requireReason": {}
+            }
+          }
+        }
+      },
       "imports": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -4510,26 +4860,6 @@
           }
         }
       },
-      "jobs": {
-        "$ref": "#/$defs/moduleConfig",
-        "type": "object",
-        "properties": {
-          "options": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-              "backend": {
-                "type": "string",
-                "default": "pgmq"
-              },
-              "scheduler": {
-                "type": "string",
-                "default": "pg_cron"
-              }
-            }
-          }
-        }
-      },
       "jsonb-schemas": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -4564,6 +4894,10 @@
               "embedQueue": {
                 "type": "string",
                 "default": "knowledge_embed"
+              },
+              "ingestQueue": {
+                "type": "string",
+                "default": "knowledge_ingest"
               }
             }
           }
@@ -4660,6 +4994,24 @@
           }
         }
       },
+      "memberships": {
+        "$ref": "#/$defs/moduleConfig",
+        "type": "object",
+        "properties": {
+          "options": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "claimFormat": {
+                "type": "string",
+                "default": "array"
+              },
+              "roleThrough": {},
+              "sameTenant": {}
+            }
+          }
+        }
+      },
       "memory": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -4779,7 +5131,6 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "channelDefaults": {},
               "channels": {
                 "type": "array",
@@ -4824,7 +5175,7 @@
           }
         }
       },
-      "number-sequences": {
+      "numbering": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
@@ -4985,21 +5336,6 @@
           }
         }
       },
-      "parties": {
-        "$ref": "#/$defs/moduleConfig",
-        "type": "object",
-        "properties": {
-          "options": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-              "companyLifecycles": {},
-              "personLifecycles": {},
-              "extraColumns": {}
-            }
-          }
-        }
-      },
       "passes": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -5028,6 +5364,30 @@
           }
         }
       },
+      "permissions": {
+        "$ref": "#/$defs/moduleConfig",
+        "type": "object",
+        "properties": {
+          "options": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "platformRoleScope": {
+                "type": "string",
+                "default": "platform"
+              },
+              "scope": {
+                "type": "string",
+                "default": "organization"
+              },
+              "tenantRoleScope": {
+                "type": "string",
+                "default": "tenant"
+              }
+            }
+          }
+        }
+      },
       "pgtap": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -5047,7 +5407,6 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "extraColumns": {}
             }
           }
@@ -5161,6 +5520,26 @@
           }
         }
       },
+      "queue": {
+        "$ref": "#/$defs/moduleConfig",
+        "type": "object",
+        "properties": {
+          "options": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "backend": {
+                "type": "string",
+                "default": "pgmq"
+              },
+              "scheduler": {
+                "type": "string",
+                "default": "pg_cron"
+              }
+            }
+          }
+        }
+      },
       "quotes": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -5225,7 +5604,6 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "topic": {
                 "type": "string",
                 "default": "reactions"
@@ -5265,7 +5643,6 @@
             "additionalProperties": false,
             "properties": {
               "kinds": {},
-              "subjects": {},
               "extraColumns": {}
             }
           }
@@ -5323,7 +5700,6 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "scale": {
                 "type": "number",
                 "default": 5
@@ -5345,27 +5721,14 @@
           }
         }
       },
-      "rules": {
+      "rls-guard": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
           "options": {
             "type": "object",
             "additionalProperties": false,
-            "properties": {
-              "maxConditions": {
-                "type": "number",
-                "default": 50
-              },
-              "maxDepth": {
-                "type": "number",
-                "default": 4
-              },
-              "maxActions": {
-                "type": "number",
-                "default": 20
-              }
-            }
+            "properties": {}
           }
         }
       },
@@ -5422,6 +5785,22 @@
           }
         }
       },
+      "security-events": {
+        "$ref": "#/$defs/moduleConfig",
+        "type": "object",
+        "properties": {
+          "options": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "retention": {
+                "type": "string",
+                "default": "7 days"
+              }
+            }
+          }
+        }
+      },
       "segments": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -5457,7 +5836,7 @@
           }
         }
       },
-      "service-principals": {
+      "service-accounts": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
@@ -5515,28 +5894,11 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "extraColumns": {}
             }
           }
         }
       },
-      "shared-signals": {
-        "$ref": "#/$defs/moduleConfig",
-        "type": "object",
-        "properties": {
-          "options": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-              "retention": {
-                "type": "string",
-                "default": "7 days"
-              }
-            }
-          }
-        }
-      },
       "shipments": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -5558,7 +5920,6 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "extraColumns": {}
             }
           }
@@ -5589,7 +5950,6 @@
             "additionalProperties": false,
             "properties": {
               "businessHours": {},
-              "subjects": {},
               "extraColumns": {}
             }
           }
@@ -5666,26 +6026,6 @@
           }
         }
       },
-      "support-sessions": {
-        "$ref": "#/$defs/moduleConfig",
-        "type": "object",
-        "properties": {
-          "options": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-              "allowPlatformTargets": {},
-              "allowWrites": {},
-              "approval": {},
-              "approvalTtl": {},
-              "auditCategory": {},
-              "claimsHook": {},
-              "maxTtl": {},
-              "requireReason": {}
-            }
-          }
-        }
-      },
       "tags": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
@@ -5694,13 +6034,12 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "extraColumns": {}
             }
           }
         }
       },
-      "targets": {
+      "tasks": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
@@ -5708,6 +6047,14 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
+              "prefix": {
+                "type": "string",
+                "default": "TASK-"
+              },
+              "maxAssignees": {
+                "type": "number",
+                "default": 0
+              },
               "extraColumns": {}
             }
           }
@@ -5740,7 +6087,7 @@
           }
         }
       },
-      "tenant": {
+      "time-tracking": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
@@ -5748,32 +6095,24 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "claimFormat": {
+              "policy": {},
+              "timeZone": {
                 "type": "string",
-                "default": "array"
+                "default": "UTC"
               },
-              "roleThrough": {},
-              "sameTenant": {}
+              "extraColumns": {}
             }
           }
         }
       },
-      "time-tracking": {
+      "timeline": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
           "options": {
             "type": "object",
             "additionalProperties": false,
-            "properties": {
-              "subjects": {},
-              "policy": {},
-              "timeZone": {
-                "type": "string",
-                "default": "UTC"
-              },
-              "extraColumns": {}
-            }
+            "properties": {}
           }
         }
       },
@@ -5785,12 +6124,15 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "retentionDays": {
                 "type": "number",
                 "default": 30
               },
-              "extraColumns": {}
+              "extraColumns": {},
+              "deletedAt": {
+                "type": "string",
+                "default": "deleted_at"
+              }
             }
           }
         }
@@ -5802,7 +6144,16 @@
           "options": {
             "type": "object",
             "additionalProperties": false,
-            "properties": {}
+            "properties": {
+              "createdAt": {
+                "type": "string",
+                "default": "created_at"
+              },
+              "updatedAt": {
+                "type": "string",
+                "default": "updated_at"
+              }
+            }
           }
         }
       },
@@ -5864,7 +6215,6 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
-              "subjects": {},
               "keep": {
                 "type": "number",
                 "default": 50
@@ -5933,8 +6283,7 @@
               "secretStorage": {
                 "type": "string",
                 "default": "vault"
-              },
-              "subjects": {}
+              }
             }
           }
         }
@@ -5974,28 +6323,7 @@
           }
         }
       },
-      "work-items": {
-        "$ref": "#/$defs/moduleConfig",
-        "type": "object",
-        "properties": {
-          "options": {
-            "type": "object",
-            "additionalProperties": false,
-            "properties": {
-              "prefix": {
-                "type": "string",
-                "default": "TASK-"
-              },
-              "maxAssignees": {
-                "type": "number",
-                "default": 0
-              },
-              "extraColumns": {}
-            }
-          }
-        }
-      },
-      "workflow-builder": {
+      "workflow-editor": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {
@@ -6008,7 +6336,7 @@
           }
         }
       },
-      "workflow-sdk-world": {
+      "workflow-sdk": {
         "$ref": "#/$defs/moduleConfig",
         "type": "object",
         "properties": {