better-supabase 0.14.0 → 0.15.1

package/dist/blocks/mfa/index.d.ts

@@ -1,7 +1,149 @@
-import { r as Block } from "../../define-block-COpcS6aT.js";
-import { a as MfaControllerOptions, c as MfaSnapshot, d as StepUpController, f as StepUpControllerOptions, g as needsStepUp, h as createStepUpController, i as MfaController, l as RawMfaFactor, m as createMfaController, n as MfaApi, o as MfaEnrollment, p as StepUpSnapshot, r as MfaAssurance, s as MfaFactor, t as MfaActions, u as StepUpActions } from "../../client-jgDU7Roj.js";
+import { b as DbError, f as Result } from "../../result-DZeA5KS6.js";
+import { t as Aal } from "../../mfa-oIOYTpvc.js";
+import { r as Block } from "../../define-block-DvvcM54N.js";
+import { n as Controller, t as AuthPort } from "../../controller-DyPPMFSw.js";
+import { t as AuthReply } from "../../auth-reply-Dj124sbX.js";
+//#region src/blocks/mfa/client.d.ts
+/** A factor as `auth.mfa.listFactors()` returns it. */
+interface RawMfaFactor {
+  readonly id: string;
+  readonly friendly_name?: string;
+  readonly factor_type: string;
+  readonly status: string;
+}
+/** The part of `supabase.auth.mfa` the MFA controllers call. */
+interface MfaApi {
+  listFactors(): PromiseLike<AuthReply<{
+    readonly all: readonly RawMfaFactor[];
+  }>>;
+  enroll(params: {
+    factorType: "totp";
+    friendlyName?: string;
+    issuer?: string;
+  }): PromiseLike<AuthReply<{
+    readonly id: string;
+    readonly totp: {
+      readonly qr_code: string;
+      readonly secret: string;
+      readonly uri: string;
+    };
+  }>>;
+  challengeAndVerify(params: {
+    factorId: string;
+    code: string;
+  }): PromiseLike<AuthReply<unknown>>;
+  unenroll(params: {
+    factorId: string;
+  }): PromiseLike<AuthReply<unknown>>;
+  getAuthenticatorAssuranceLevel(): PromiseLike<AuthReply<{
+    readonly currentLevel: string | null;
+    readonly nextLevel: string | null;
+  }>>;
+}
+interface MfaFactor {
+  readonly id: string;
+  readonly name: string | undefined;
+  /** `totp`, `phone` or `webauthn`. */
+  readonly type: string;
+  /** False for an enrolment the user hasn't confirmed with a code yet. */
+  readonly verified: boolean;
+}
+/** A TOTP factor waiting for its first code. */
+interface MfaEnrollment {
+  readonly factorId: string;
+  /** An SVG data URL of the QR code for authenticator apps. */
+  readonly qrCode: string;
+  /** The secret, for typing into an authenticator by hand. */
+  readonly secret: string;
+  readonly uri: string;
+}
+interface MfaAssurance {
+  /** The session's level; `undefined` until the first load. */
+  readonly level: Aal | undefined;
+  /**
+   * `aal2` when the user has a verified factor, so a challenge can raise the
+   * session.
+   */
+  readonly nextLevel: Aal | undefined;
+}
+/** Whether `error` is the `INSUFFICIENT_AAL` refusal that asks for a step-up. */
+export declare function needsStepUp(error: DbError | undefined): boolean;
+interface MfaControllerOptions {
+  /** `supabase.auth.mfa` of the browser client. */
+  readonly mfa: MfaApi;
+  readonly auth: AuthPort;
+  /** The issuer authenticator apps show; default: the Auth Site URL's host. */
+  readonly issuer?: string;
+}
+interface MfaSnapshot extends MfaAssurance {
+  /** Every factor, verified or not; `undefined` until the first load. */
+  readonly factors: readonly MfaFactor[] | undefined;
+  /** The TOTP factor `enroll` made, until `verify` or `cancel`. */
+  readonly enrollment: MfaEnrollment | undefined;
+  /** Whether an enrol, verify or unenrol call is in flight. */
+  readonly pending: boolean;
+  readonly error: DbError | undefined;
+}
+interface MfaActions {
+  /** Enrols a TOTP factor and keeps its QR code in `enrollment`. */
+  readonly enroll: (input?: {
+    readonly name?: string;
+  }) => Promise<Result<MfaEnrollment>>;
+  /**
+   * Confirms `enrollment` with a code from the app; the session is `aal2` after
+   * it.
+   */
+  readonly verify: (code: string) => Promise<Result<MfaAssurance>>;
+  /** Removes the unconfirmed factor of `enrollment`. */
+  readonly cancel: () => Promise<void>;
+  /** Removes a factor; removing a verified one needs an `aal2` session. */
+  readonly unenroll: (factorId: string) => Promise<Result<boolean>>;
+  /** Forgets `error`. */
+  readonly dismiss: () => void;
+  readonly refresh: () => Promise<void>;
+}
+type MfaController = Controller<MfaSnapshot, MfaActions>;
+/**
+ * A user's MFA factors for a security settings page: `enroll` shows a QR code,
+ * `verify` confirms it with the first code, and `unenroll` removes a factor.
+ * The assurance level is read again after each change.
+ */
+export declare function createMfaController(options: MfaControllerOptions): MfaController;
+interface StepUpControllerOptions {
+  /** `supabase.auth.mfa` of the browser client. */
+  readonly mfa: MfaApi;
+  readonly auth: AuthPort;
+}
+interface StepUpSnapshot extends MfaAssurance {
+  /**
+   * The verified factors a code can come from; `undefined` until the first
+   * load.
+   */
+  readonly factors: readonly MfaFactor[] | undefined;
+  /** Whether the session is `aal2`. */
+  readonly satisfied: boolean;
+  readonly verifying: boolean;
+  readonly error: DbError | undefined;
+}
+interface StepUpActions {
+  /**
+   * Challenges a verified factor (the first one by default) with `code`, then
+   * reads the session's level again.
+   */
+  readonly verify: (code: string, factorId?: string) => Promise<Result<MfaAssurance>>;
+  readonly dismiss: () => void;
+  readonly refresh: () => Promise<void>;
+}
+type StepUpController = Controller<StepUpSnapshot, StepUpActions>;
+/**
+ * Raises the session to `aal2` before a call that `checkAal` guards: show it
+ * when an error passes `needsStepUp`, then retry the call once `satisfied` is
+ * true.
+ */
+export declare function createStepUpController(options: StepUpControllerOptions): StepUpController;
+//#endregion
 //#region src/blocks/mfa/manifest.d.ts
 /** The `mfa` block's manifest (ADR 0029). */
 export declare const mfaBlock: Block<"mfa">;
 //#endregion
-export { type MfaActions, type MfaApi, type MfaAssurance, type MfaController, type MfaControllerOptions, type MfaEnrollment, type MfaFactor, type MfaSnapshot, type RawMfaFactor, type StepUpActions, type StepUpController, type StepUpControllerOptions, type StepUpSnapshot, createMfaController, createStepUpController, needsStepUp };
+export type { MfaActions, MfaApi, MfaAssurance, MfaController, MfaControllerOptions, MfaEnrollment, MfaFactor, MfaSnapshot, RawMfaFactor, StepUpActions, StepUpController, StepUpControllerOptions, StepUpSnapshot };

package/dist/blocks/mfa/index.js

@@ -1,5 +1,214 @@
-import { n as defineBlock } from "../../define-block-Dze77QTw.js";
-import { n as createStepUpController, r as needsStepUp, t as createMfaController } from "../../client-DmjG9PHH.js";
+import { n as dbError } from "../../errors-BVFgt8BZ.js";
+import { a as ok, r as err } from "../../result-ntFBW2p2.js";
+import { n as whileSignedIn, t as defineController } from "../../controller-BEliOBOv.js";
+import { n as defineBlock } from "../../define-block-BGqOO8B3.js";
+import { t as authResult } from "../../auth-reply-tlXB2FQ9.js";
+//#region src/blocks/mfa/client.ts
+const toAal = (level) => level === "aal2" ? "aal2" : level === "aal1" ? "aal1" : void 0;
+const toFactor = (raw) => ({
+	id: raw.id,
+	name: raw.friendly_name === "" ? void 0 : raw.friendly_name,
+	type: raw.factor_type,
+	verified: raw.status === "verified"
+});
+async function readAssurance(mfa) {
+	const result = await authResult(() => mfa.getAuthenticatorAssuranceLevel());
+	return result.ok ? ok({
+		level: toAal(result.data.currentLevel),
+		nextLevel: toAal(result.data.nextLevel)
+	}) : result;
+}
+async function readFactors(mfa) {
+	const result = await authResult(() => mfa.listFactors());
+	return result.ok ? ok(result.data.all.map(toFactor)) : result;
+}
+/** Whether `error` is the `INSUFFICIENT_AAL` refusal that asks for a step-up. */
+function needsStepUp(error) {
+	return error?.kind === "forbidden" && error.code === "INSUFFICIENT_AAL";
+}
+/**
+* A user's MFA factors for a security settings page: `enroll` shows a QR code,
+* `verify` confirms it with the first code, and `unenroll` removes a factor.
+* The assurance level is read again after each change.
+*/
+function createMfaController(options) {
+	const { mfa } = options;
+	return defineController({
+		factors: void 0,
+		level: void 0,
+		nextLevel: void 0,
+		enrollment: void 0,
+		pending: false,
+		error: void 0
+	}, (state) => {
+		let ticket = 0;
+		const refresh = async () => {
+			ticket += 1;
+			const request = ticket;
+			const [factors, assurance] = await Promise.all([readFactors(mfa), readAssurance(mfa)]);
+			if (request !== ticket) return;
+			if (!factors.ok) {
+				state.set({ error: factors.error });
+				return;
+			}
+			if (!assurance.ok) {
+				state.set({ error: assurance.error });
+				return;
+			}
+			state.set({
+				factors: factors.data,
+				...assurance.data
+			});
+		};
+		const settle = async (result) => {
+			state.set(result.ok ? { pending: false } : {
+				pending: false,
+				error: result.error
+			});
+			if (result.ok) await refresh();
+			return result;
+		};
+		return {
+			actions: {
+				refresh,
+				dismiss: () => {
+					state.set({ error: void 0 });
+				},
+				enroll: async (input) => {
+					state.set({
+						pending: true,
+						error: void 0
+					});
+					const result = await authResult(() => mfa.enroll({
+						factorType: "totp",
+						...input?.name === void 0 ? {} : { friendlyName: input.name },
+						...options.issuer === void 0 ? {} : { issuer: options.issuer }
+					}));
+					const enrolled = result.ok ? ok({
+						factorId: result.data.id,
+						qrCode: result.data.totp.qr_code,
+						secret: result.data.totp.secret,
+						uri: result.data.totp.uri
+					}) : result;
+					if (enrolled.ok) state.set({ enrollment: enrolled.data });
+					return settle(enrolled);
+				},
+				verify: async (code) => {
+					const enrollment = state.get().enrollment;
+					if (enrollment === void 0) return err(dbError("invalid_input", "Enrol a factor before verifying it"));
+					state.set({
+						pending: true,
+						error: void 0
+					});
+					const verified = await authResult(() => mfa.challengeAndVerify({
+						factorId: enrollment.factorId,
+						code
+					}));
+					if (!verified.ok) return settle(err(verified.error));
+					state.set({ enrollment: void 0 });
+					return settle(await readAssurance(mfa));
+				},
+				cancel: async () => {
+					const enrollment = state.get().enrollment;
+					if (enrollment === void 0) return;
+					state.set({
+						enrollment: void 0,
+						pending: true
+					});
+					await settle(await authResult(() => mfa.unenroll({ factorId: enrollment.factorId })));
+				},
+				unenroll: async (factorId) => {
+					state.set({
+						pending: true,
+						error: void 0
+					});
+					const result = await authResult(() => mfa.unenroll({ factorId }));
+					return settle(result.ok ? ok(true) : result);
+				}
+			},
+			start: () => whileSignedIn(options.auth, () => {
+				refresh();
+			})
+		};
+	});
+}
+/**
+* Raises the session to `aal2` before a call that `checkAal` guards: show it
+* when an error passes `needsStepUp`, then retry the call once `satisfied` is
+* true.
+*/
+function createStepUpController(options) {
+	const { mfa } = options;
+	return defineController({
+		factors: void 0,
+		level: void 0,
+		nextLevel: void 0,
+		satisfied: false,
+		verifying: false,
+		error: void 0
+	}, (state) => {
+		let ticket = 0;
+		const assured = (assurance) => ({
+			...assurance,
+			satisfied: assurance.level === "aal2"
+		});
+		const refresh = async () => {
+			ticket += 1;
+			const request = ticket;
+			const [factors, assurance] = await Promise.all([readFactors(mfa), readAssurance(mfa)]);
+			if (request !== ticket) return;
+			if (!factors.ok) {
+				state.set({ error: factors.error });
+				return;
+			}
+			if (!assurance.ok) {
+				state.set({ error: assurance.error });
+				return;
+			}
+			state.set({
+				factors: factors.data.filter((factor) => factor.verified),
+				...assured(assurance.data)
+			});
+		};
+		return {
+			actions: {
+				refresh,
+				dismiss: () => {
+					state.set({ error: void 0 });
+				},
+				verify: async (code, factorId) => {
+					const id = factorId ?? state.get().factors?.[0]?.id;
+					if (id === void 0) {
+						const missing = dbError("invalid_input", "No verified factor to challenge");
+						state.set({ error: missing });
+						return err(missing);
+					}
+					state.set({
+						verifying: true,
+						error: void 0
+					});
+					const verified = await authResult(() => mfa.challengeAndVerify({
+						factorId: id,
+						code
+					}));
+					const result = verified.ok ? await readAssurance(mfa) : verified;
+					state.set(result.ok ? {
+						verifying: false,
+						...assured(result.data)
+					} : {
+						verifying: false,
+						error: result.error
+					});
+					return result;
+				}
+			},
+			start: () => whileSignedIn(options.auth, () => {
+				refresh();
+			})
+		};
+	});
+}
+//#endregion
 //#region src/blocks/mfa/manifest.ts
 /** The `mfa` block's manifest (ADR 0029). */
 const mfaBlock = defineBlock({

package/dist/blocks/moderation/index.d.ts

@@ -1,13 +1,13 @@
 /// <reference lib="esnext.temporal" />
-import { T as ErrorMapper, t as AsyncResult } from "../../result-C6jDfedy.js";
-import { dt as SubjectRef } from "../../executor-CPyrQdjh.js";
-import { Ct as Events } from "../../events-DbLjvxDX.js";
+import { T as ErrorMapper, t as AsyncResult } from "../../result-DZeA5KS6.js";
+import { $ as RecordRef } from "../../types-DFdg_4yN.js";
+import { Ct as Events } from "../../events-vcqenSYU.js";
 import { n as Logger } from "../../logger-DWVYUmwi.js";
-import { a as BlockTenantOptions, r as BlockTemporalOptions } from "../../block-helpers-BaugZlJV.js";
-import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-d53POsem.js";
-import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-CmjPKqQ_.js";
+import { a as BlockTenantOptions, r as BlockTemporalOptions } from "../../block-helpers-CRpAHrp_.js";
+import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
+import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-DZN2w69m.js";
 import { t as ModerationSqlOptions } from "../../options-DlohRAYd.js";
-import { Lt as Section, c as BlockOf } from "../../define-block-COpcS6aT.js";
+import { c as BlockOf, rn as RecordBinding } from "../../define-block-DvvcM54N.js";
 //#region src/blocks/moderation/moderation.d.ts
 interface ModerationOptions extends BlockTemporalOptions, BlockTenantOptions {
   readonly transport: BlockTransport;
@@ -39,7 +39,7 @@ declare const REPORT_STATUSES: readonly ["open", "resolved", "dismissed"];
 interface ModerationItem {
   readonly id: string;
   readonly organizationId: string;
-  readonly subject: SubjectRef;
+  readonly subject: RecordRef;
   readonly authorId?: string;
   readonly status: ModerationStatus;
   readonly openReports: number;
@@ -111,7 +111,7 @@ interface Moderation {
    * returns that report. `autoHidden` is true when this report reached the
    * auto-hide threshold.
    */
-  report(subject: SubjectRef, report: {
+  report(subject: RecordRef, report: {
     readonly reason: string;
     readonly note?: string;
   }): AsyncResult<ModerationReport & {
@@ -123,7 +123,7 @@ interface Moderation {
    * A subject's item with its reports and log, or `null` when nothing moderated
    * it.
    */
-  item(subject: SubjectRef): AsyncResult<ModerationItemDetail | null>;
+  item(subject: RecordRef): AsyncResult<ModerationItemDetail | null>;
   /** Decides on an item. `ban` needs the ban permission as well. */
   decide(itemId: string, decision: ModerationDecision, options?: {
     readonly reason?: string;
@@ -192,14 +192,12 @@ type ModerationEvents = {
 /** The `moderation` block's event types, for its manifest and `onBlockEvent`. */
 export declare const moderationEvents: Events<ModerationEvents>;
 //#endregion
-//#region src/blocks/moderation/section.d.ts
+//#region src/blocks/moderation/record-binding.d.ts
 /** A record's moderation: its status, reports and log, for moderators. */
-export declare const moderationSection: Section<Moderation, ModerationItemDetail | null>;
+export declare const moderationBinding: RecordBinding<Moderation, ModerationItemDetail | null>;
 //#endregion
 //#region src/blocks/moderation/manifest.d.ts
 /** The `moderation` block's manifest (ADR 0029). */
-export declare const moderationBlock: BlockOf<"moderation", typeof createModeration, ModerationEvents, Record<never, never>, never, {
-  readonly moderation: typeof moderationSection;
-}>;
+export declare const moderationBlock: BlockOf<"moderation", typeof createModeration, ModerationEvents, Record<never, never>, never, typeof moderationBinding>;
 //#endregion
 export { type BlockHooks, type BlockTransport, type BlockTransportMiddleware, type Moderation, type ModerationAction, type ModerationActionKind, type ModerationBan, type ModerationBanEventData, type ModerationDecision, type ModerationDecisionEventData, type ModerationEvents, type ModerationItem, type ModerationItemDetail, type ModerationOptions, type ModerationQueueFilter, type ModerationReport, type ModerationReportEventData, type ModerationSqlOptions, type ModerationStatus, type RpcClient, dbTransport, extendBlock, rpcTransport, sqlTransport, withBlockHooks, wrapTransport };

package/dist/blocks/moderation/index.js

@@ -1,11 +1,11 @@
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
 import { t as moderationSqlOptions } from "../../options-Bpl-WFPk.js";
-import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, H as rpcTransport, I as textOf, S as optionalInstant, U as sqlTransport, d as enumOrThrow, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-CiKtrb6g.js";
-import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BymdcD0V.js";
-import { t as defineSection } from "../../sections-DjxYmpu-.js";
+import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, H as rpcTransport, I as textOf, S as optionalInstant, U as sqlTransport, d as enumOrThrow, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
+import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
+import { t as defineRecordBinding } from "../../record-bindings-DkBJpC5A.js";
 import { n as event, t as defineEvents } from "../../event-map-CtPFhcOp.js";
-import { n as defineBlock } from "../../define-block-Dze77QTw.js";
-import { t as requireTenant } from "../../block-tenant-C1sNV8_4.js";
+import { n as defineBlock } from "../../define-block-BGqOO8B3.js";
+import { t as requireOrganization } from "../../block-tenant-DHp7subc.js";
 //#region src/blocks/moderation/moderation.ts
 const STATUSES = [
 	"pending",
@@ -103,7 +103,7 @@ function statusesOf(value) {
 function createModeration(options) {
 	applyTemporal(options);
 	const call = blockCall(options.transport, options.schema, options.mappers);
-	const tenant = () => requireTenant(options.tenant);
+	const tenant = () => requireOrganization(options.tenant);
 	return withBlockHooks({
 		report: (subject, report) => tenant().andThen((organizationId) => call("report_content", {
 			tenant: organizationId,
@@ -172,9 +172,9 @@ const moderationEvents = defineEvents({
 	"moderation_ban.lifted": event()
 });
 //#endregion
-//#region src/blocks/moderation/section.ts
+//#region src/blocks/moderation/record-binding.ts
 /** A record's moderation: its status, reports and log, for moderators. */
-const moderationSection = defineSection({
+const moderationBinding = defineRecordBinding({
 	permissions: {
 		read: "read",
 		write: "manage"
@@ -192,8 +192,8 @@ const moderationBlock = defineBlock({
 	options: { moderation: moderationSqlOptions },
 	events: moderationEvents,
 	create: createModeration,
-	sections: { moderation: moderationSection },
+	record: moderationBinding,
 	category: "collaboration"
 });
 //#endregion
-export { createModeration, dbTransport, extendBlock, moderationBlock, moderationEvents, moderationSection, rpcTransport, sqlTransport, withBlockHooks, wrapTransport };
+export { createModeration, dbTransport, extendBlock, moderationBinding, moderationBlock, moderationEvents, rpcTransport, sqlTransport, withBlockHooks, wrapTransport };

package/dist/blocks/notifications/index.d.ts

@@ -1,20 +1,22 @@
 /// <reference lib="esnext.temporal" />
-import { T as ErrorMapper, f as Result, t as AsyncResult } from "../../result-C6jDfedy.js";
-import { i as RowFields, r as FieldsOf } from "../../block-fields-3w4MZr8U.js";
-import { Ct as Events, J as NotificationEventData, o as EventHub, q as NotificationDeliveryEventData, st as SubjectEventData } from "../../events-DbLjvxDX.js";
-import { m as RequestContext } from "../../plugin-Ar5546xh.js";
-import { i as CursorPageOptions, r as BlockTemporalOptions } from "../../block-helpers-BaugZlJV.js";
-import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-d53POsem.js";
-import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-CmjPKqQ_.js";
-import { t as BlockProblemOptions } from "../../problem-DpHB7tWl.js";
-import { i as EventSink, t as CloudEvent } from "../../cloud-event-SPyXMdcd.js";
-import { c as BlockOf } from "../../define-block-COpcS6aT.js";
-import { g as SubscriberPolicy, i as AuthorizationHooks } from "../../authorization-hooks-dLmUO_PZ.js";
-import { n as VerifyOptions } from "../../signatures-zbu6KTNQ.js";
+import { T as ErrorMapper, f as Result, t as AsyncResult } from "../../result-DZeA5KS6.js";
+import { i as RowFields, r as FieldsOf } from "../../block-fields-BE7pInWZ.js";
+import { Ft as RequestContext } from "../../types-DFdg_4yN.js";
+import { Ct as Events, J as NotificationEventData, o as EventHub, q as NotificationDeliveryEventData, st as SubjectEventData } from "../../events-vcqenSYU.js";
+import { i as CursorPageOptions, r as BlockTemporalOptions } from "../../block-helpers-CRpAHrp_.js";
+import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
+import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-DZN2w69m.js";
+import { t as BlockProblemOptions } from "../../problem-DNwN8iGz.js";
+import { c as BlockOf } from "../../define-block-DvvcM54N.js";
+import { i as EventSink, t as CloudEvent } from "../../cloud-event-CzZTJkXv.js";
+import { g as SubscriberPolicy, i as AuthorizationHooks } from "../../authorization-hooks-D_pwXlBs.js";
+import { p as SubscriptionStatus } from "../../topic-DNFEFGKI.js";
+import { n as TopicPort } from "../../watch-topic-Bo9S2R4P.js";
+import { n as Controller, t as AuthPort } from "../../controller-DyPPMFSw.js";
+import { n as VerifyOptions } from "../../signatures-Dkx9OE8j.js";
 import { a as NotificationSubject, i as NotificationItem, n as NotificationMessage, o as RenderedText, r as NotificationSendResult, t as NotificationChannel } from "../../channel-BjvGO39m.js";
 import { a as DeliveryTransport, c as UnsubscribeTarget, i as DeliverySendOptions, l as mailHeaders, n as DeliveryMessages, o as EmailMessage, r as DeliveryReceipt, s as MailCategory, t as DeliveryChannel } from "../../delivery-n6lZGuGx.js";
 import { n as EmailChannelOptions, r as emailChannel, t as ComposedEmail } from "../../email-tt2QqiSc.js";
-import { a as NotificationsControllerOptions, c as unreadCount, i as NotificationsController, n as NotificationSource, o as NotificationsSnapshot, r as NotificationsActions, s as createNotificationsController, t as NotificationFeedOptions } from "../../client-DT6Tvudr.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/blocks/notifications/api-types.d.ts
 /** Notification type to the Standard Schema of its `data`. */
@@ -328,7 +330,7 @@ interface NotificationsOptions<K extends NotificationTypes, H = undefined, S ext
    * recipient it leaves out is skipped, and a throw retries the deliveries
    * later. Defaults to `server.authorization.delivery.audience`; with
    * `server.authorization` but no such policy, to `subjectReaders(transport)`,
-   * so a notification about a `config.subjects` record only reaches recipients
+   * so a notification about a `config.records` record only reaches recipients
    * who may read it. In-app recipients are decided in SQL (`holdersOf`,
    * membership).
    */
@@ -623,6 +625,56 @@ interface WatchedOutboxEvent {
  */
 export declare function watcherHandler<K extends NotificationTypes>(notifications: Pick<Notifications<K>, "sink">, options: WatcherSinkOptions<K>): (events: readonly WatchedOutboxEvent[]) => Promise<void>;
 //#endregion
+//#region src/blocks/notifications/client.d.ts
+/**
+ * Loads one list of items, e.g. a server action that calls
+ * `notifications.list()`.
+ */
+type NotificationSource<T> = () => Promise<readonly T[]>;
+interface NotificationFeedOptions<T> {
+  /**
+   * The private topic the `notifications` module broadcasts to:
+   * `fillTopic(blockConfig.notifications.options.topic, { userId })` with the
+   * template from `blocks.generated.ts`. `null` loads once without realtime.
+   */
+  readonly topic: string | null;
+  /** The notifications, newest first. */
+  readonly load: NotificationSource<T>;
+  /** More items merged in, such as running jobs or pending approvals. */
+  readonly sources?: readonly NotificationSource<T>[];
+  /** Orders the merged list. Defaults to the order the sources return. */
+  readonly sort?: (a: T, b: T) => number;
+  /** The badge number. Defaults to the items without a `readAt`. */
+  readonly count?: (items: readonly T[]) => number;
+  /** Runs for each broadcast, e.g. to show a toast for `notification_created`. */
+  readonly onMessage?: (event: string, payload: unknown) => void;
+}
+interface NotificationsControllerOptions<T> extends NotificationFeedOptions<T> {
+  readonly auth: AuthPort;
+  readonly ports: {
+    readonly topic: TopicPort;
+  };
+}
+interface NotificationsSnapshot<T> {
+  /** `undefined` until the first load. */
+  readonly items: readonly T[] | undefined;
+  readonly count: number;
+  readonly status: SubscriptionStatus;
+  readonly error: unknown;
+}
+interface NotificationsActions {
+  /** Loads again, e.g. after marking items read. */
+  readonly refresh: () => Promise<void>;
+}
+type NotificationsController<T> = Controller<NotificationsSnapshot<T>, NotificationsActions>;
+/** The default badge number: the items whose `readAt` is `null`. */
+export declare const unreadCount: (items: readonly unknown[]) => number;
+/**
+ * The signed-in user's notifications, kept current: loads them, then loads
+ * again after each broadcast on `topic` and after the channel rejoins.
+ */
+export declare function createNotificationsController<T>(options: NotificationsControllerOptions<T>): NotificationsController<T>;
+//#endregion
 //#region src/blocks/notifications/events.d.ts
 /** The events of the `notifications` block: type to data. */
 type NotificationsEvents = {
@@ -642,4 +694,4 @@ export declare const notificationsEvents: Events<NotificationsEvents>;
 /** The `notifications` block's manifest (ADR 0029). */
 export declare const notificationsBlock: BlockOf<"notifications", typeof createNotifications, NotificationsEvents, Record<never, never>, "notifier">;
 //#endregion
-export { type AvatarUrls, type BlockHooks, type BlockTransport, type BlockTransportMiddleware, type ComposedEmail, type DeliverOptions, type DeliverResult, type DeliveryChannel, type DeliveryEvent, type DeliveryEventInput, type DeliveryEventKind, type DeliveryMessages, type DeliveryReceipt, type DeliverySendOptions, type DeliveryTransport, type EmailChannelOptions, type EmailMessage, type ListOptions, type MailCategory, type NotificationActor, type NotificationChannel, type NotificationCounts, type NotificationFeedOptions, type NotificationItem, type NotificationMessage, type NotificationOf, type NotificationPage, type NotificationPreference, type NotificationSendResult, type NotificationSinkOptions, type NotificationSource, type NotificationSubject, type NotificationSubscription, type NotificationSuppression, type NotificationTypes, type NotificationUpdate, type Notifications, type NotificationsActions, type NotificationsController, type NotificationsControllerOptions, type NotificationsEvents, type NotificationsOptions, type NotificationsSnapshot, type PageOptions, type RecordedDeliveryEvent, type Rendered, type RenderedText, type ResendTransportOptions, type ResendWebhookOptions, type RpcClient, type SendInput, type SentNotification, type SinkNotification, type SubjectDelivery, type SubscriptionLevel, type SuppressInput, type SuppressionReason, type SuppressionWriter, type UnsubscribeTarget, type WatchedEventData, type WatchedOutboxEvent, type WatcherRule, type WatcherSinkOptions, createNotificationsController, dbTransport, emailChannel, extendBlock, mailHeaders, rpcTransport, sqlTransport, unreadCount, withBlockHooks, wrapTransport };
+export { type AvatarUrls, type BlockHooks, type BlockTransport, type BlockTransportMiddleware, type ComposedEmail, type DeliverOptions, type DeliverResult, type DeliveryChannel, type DeliveryEvent, type DeliveryEventInput, type DeliveryEventKind, type DeliveryMessages, type DeliveryReceipt, type DeliverySendOptions, type DeliveryTransport, type EmailChannelOptions, type EmailMessage, type ListOptions, type MailCategory, type NotificationActor, type NotificationChannel, type NotificationCounts, type NotificationFeedOptions, type NotificationItem, type NotificationMessage, type NotificationOf, type NotificationPage, type NotificationPreference, type NotificationSendResult, type NotificationSinkOptions, type NotificationSource, type NotificationSubject, type NotificationSubscription, type NotificationSuppression, type NotificationTypes, type NotificationUpdate, type Notifications, type NotificationsActions, type NotificationsController, type NotificationsControllerOptions, type NotificationsEvents, type NotificationsOptions, type NotificationsSnapshot, type PageOptions, type RecordedDeliveryEvent, type Rendered, type RenderedText, type ResendTransportOptions, type ResendWebhookOptions, type RpcClient, type SendInput, type SentNotification, type SinkNotification, type SubjectDelivery, type SubscriptionLevel, type SuppressInput, type SuppressionReason, type SuppressionWriter, type UnsubscribeTarget, type WatchedEventData, type WatchedOutboxEvent, type WatcherRule, type WatcherSinkOptions, dbTransport, emailChannel, extendBlock, mailHeaders, rpcTransport, sqlTransport, withBlockHooks, wrapTransport };