better-supabase 0.15.0 → 0.16.0

package/dist/sql/index.d.ts

@@ -1,5 +1,5 @@
 import { A as BLOCK_OPTION_SCHEMAS, O as resolveBlock, j as BlockOptionsRegistry } from "../authorization-HZdJCaVm.js";
-import { C as blockSqlVersion, Jn as DeclaredForeignKey, S as BlockSqlUpgrade, Xn as AuditedTable, Yn as sameTenantLayout, Zn as auditRegistrations, _ as BlockSqlDeprecation, a as BlockSqlContext, b as BlockSqlLayout, c as BlockSqlIdType, d as MODULE_ID_TYPES, f as contractSignature, g as BlockSqlAccessProvider, h as BlockSql, i as BlockSqlAudit, l as BlockSqlNames, m as moduleIdType, n as AuditCategory, o as BlockSqlContractFunction, p as isBlockSqlIdType, r as BlockSqlAction, s as BlockSqlEmit, t as AUDIT_CATEGORIES, u as BlockSqlTableSpec, v as BlockSqlEntitlementsProvider, w as notNullCheckName, x as BlockSqlTestFile, y as BlockSqlFile } from "../context-CEuTKrkz.js";
-import { a as appTableEventTypes } from "../app-tables-CF2DD-Mu.js";
-import { $ as moduleFileVersion, A as DataExportPlan, B as appTablesFiles, C as rlsTables, D as expiredFlagsQuery, E as tenantsQuery, F as AdoptedTable, G as BlockSqlExtension, H as instanceFunctions, I as adoptedColumnProblems, J as moduleHidingColumns, K as BlockSqlPermissionKey, L as adoptedTables, M as dataExportPlan, N as excludedColumns, O as sameTenantColumn, P as resolveExposeColumns, Q as isModuleDataFile, R as APP_TABLES_MARKER, S as policyGrants, T as TenantQuery, U as SQL_MODULES, V as DEFAULT_ROLES, W as resolveBlocks, X as moduleSchemaExtensions, Y as modulePermissionKeys, Z as blockFileState, _ as PolicyGrant, _t as moduleTopics, a as hasColumnAccess, at as entityRenamePlan, b as declaredUpdatedAtTriggers, c as compileReadSets, ct as formerBlockName, d as migrationOptionUses, dt as InstalledBlock, et as sameBlockFile, f as moduleLayout, ft as moduleDeprecations, g as templateFunctions, gt as moduleBody, h as scopeProblems, ht as customContracts, i as scopePolicyName, it as EntityRenameStep, j as SECRET_COLUMNS, k as sameTenantTrigger, l as sharedRolesProblems, lt as renamedBlock, m as resolveProviderSql, mt as BlockSqlTopic, n as widenedCommands, nt as moduleFilePaths, o as CompiledReadSet, ot as BLOCK_RENAMES, p as SCOPE_ID_TYPES, pt as upgradePlan, q as moduleEventTriggers, r as TENANT_SCOPE_POLICY, rt as EntityRenamePlan, s as compileReadSet, st as currentBlockName, t as declaredPolicies, tt as moduleDataDir, u as MigrationOptionUse, ut as BlockSqlUpgradePlan, v as declaredTableColumns, vt as renderBlocks, w as subjectColumns, x as extensionSchema, y as declaredTables, z as APP_TABLES_MODULE } from "../index-CguFm716.js";
-export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, type AdoptedTable, type AuditCategory, type AuditedTable, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, type BlockOptionsRegistry, type BlockSql, type BlockSqlAccessProvider, type BlockSqlAction, type BlockSqlAudit, type BlockSqlContext, type BlockSqlContractFunction, type BlockSqlDeprecation, type BlockSqlEmit, type BlockSqlEntitlementsProvider, type BlockSqlExtension, type BlockSqlFile, type BlockSqlIdType, type BlockSqlLayout, type BlockSqlNames, type BlockSqlPermissionKey, type BlockSqlTableSpec, type BlockSqlTestFile, type BlockSqlTopic, type BlockSqlUpgrade, type BlockSqlUpgradePlan, type CompiledReadSet, DEFAULT_ROLES, type DataExportPlan, type DeclaredForeignKey, type EntityRenamePlan, type EntityRenameStep, type InstalledBlock, MODULE_ID_TYPES, type MigrationOptionUse, type PolicyGrant, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, type TenantQuery, adoptedColumnProblems, adoptedTables, appTableEventTypes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };
+import { C as OwnView, Qn as auditRegistrations, S as BlockSqlUpgrade, T as notNullCheckName, Xn as sameTenantLayout, Yn as DeclaredForeignKey, Zn as AuditedTable, _ as BlockSqlDeprecation, a as BlockSqlContext, b as BlockSqlLayout, c as BlockSqlIdType, d as MODULE_ID_TYPES, f as contractSignature, g as BlockSqlAccessProvider, h as BlockSql, i as BlockSqlAudit, l as BlockSqlNames, m as moduleIdType, n as AuditCategory, o as BlockSqlContractFunction, p as isBlockSqlIdType, r as BlockSqlAction, s as BlockSqlEmit, t as AUDIT_CATEGORIES, u as BlockSqlTableSpec, v as BlockSqlEntitlementsProvider, w as blockSqlVersion, x as BlockSqlTestFile, y as BlockSqlFile } from "../context-8kb8m5uO.js";
+import { a as appTableEventTypes } from "../app-tables-yMQ4ubyY.js";
+import { $ as modulePermissionKeys, A as sameTenantColumn, B as adoptedTables, C as extensionSchema, D as TenantQuery, E as subjectColumns, F as excludedColumns, G as DEFAULT_ROLES, H as APP_TABLES_MARKER, I as resolveExposeColumns, J as resolveBlocks, K as instanceFunctions, L as AdoptedTable, M as DataExportPlan, N as SECRET_COLUMNS, O as tenantsQuery, P as dataExportPlan, Q as moduleHidingColumns, R as AdoptedView, S as declaredViews, St as renderBlocks, T as rlsTables, U as APP_TABLES_MODULE, V as adoptedViews, W as appTablesFiles, X as BlockSqlPermissionKey, Y as BlockSqlExtension, Z as moduleEventTriggers, _ as DeclaredView, _t as upgradePlan, a as hasColumnAccess, at as moduleDataDir, b as declaredTables, bt as moduleBody, c as compileReadSets, ct as EntityRenameStep, d as migrationOptionUses, dt as currentBlockName, et as moduleSchemaExtensions, f as moduleLayout, ft as formerBlockName, g as templateFunctions, gt as moduleDeprecations, h as scopeProblems, ht as InstalledBlock, i as scopePolicyName, it as sameBlockFile, j as sameTenantTrigger, k as expiredFlagsQuery, l as sharedRolesProblems, lt as entityRenamePlan, m as resolveProviderSql, mt as BlockSqlUpgradePlan, n as widenedCommands, nt as isModuleDataFile, o as CompiledReadSet, ot as moduleFilePaths, p as SCOPE_ID_TYPES, pt as renamedBlock, q as SQL_MODULES, r as TENANT_SCOPE_POLICY, rt as moduleFileVersion, s as compileReadSet, st as EntityRenamePlan, t as declaredPolicies, tt as blockFileState, u as MigrationOptionUse, ut as BLOCK_RENAMES, v as PolicyGrant, vt as BlockSqlTopic, w as policyGrants, x as declaredUpdatedAtTriggers, xt as moduleTopics, y as declaredTableColumns, yt as customContracts, z as adoptedColumnProblems } from "../index-Cc4mIQS8.js";
+export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, type AdoptedTable, type AdoptedView, type AuditCategory, type AuditedTable, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, type BlockOptionsRegistry, type BlockSql, type BlockSqlAccessProvider, type BlockSqlAction, type BlockSqlAudit, type BlockSqlContext, type BlockSqlContractFunction, type BlockSqlDeprecation, type BlockSqlEmit, type BlockSqlEntitlementsProvider, type BlockSqlExtension, type BlockSqlFile, type BlockSqlIdType, type BlockSqlLayout, type BlockSqlNames, type BlockSqlPermissionKey, type BlockSqlTableSpec, type BlockSqlTestFile, type BlockSqlTopic, type BlockSqlUpgrade, type BlockSqlUpgradePlan, type CompiledReadSet, DEFAULT_ROLES, type DataExportPlan, type DeclaredForeignKey, type DeclaredView, type EntityRenamePlan, type EntityRenameStep, type InstalledBlock, MODULE_ID_TYPES, type MigrationOptionUse, type OwnView, type PolicyGrant, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, type TenantQuery, adoptedColumnProblems, adoptedTables, adoptedViews, appTableEventTypes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };

package/dist/sql/index.js

@@ -1,5 +1,5 @@
 import { A as resolveBlock, l as appTableEventTypes, v as hasColumnAccess } from "../app-tables-D29Rahtg.js";
 import { c as templateFunctions, o as resolveProviderSql, s as scopeProblems, t as SCOPE_ID_TYPES } from "../access-sql-B-MkVARa.js";
 import { Y as notNullCheckName, a as DEFAULT_ROLES } from "../workflow-sdk-Bw6_u0ar.js";
-import { $ as isBlockSqlIdType, A as sameBlockFile, B as SECRET_COLUMNS, C as APP_TABLES_MODULE, D as blockFileState, E as blockSqlVersion, F as SQL_MODULES, G as migrationOptionUses, H as subjectColumns, I as resolveBlocks, J as formerBlockName, K as BLOCK_RENAMES, L as TENANT_SCOPE_POLICY, M as moduleHidingColumns, N as modulePermissionKeys, O as isModuleDataFile, P as moduleSchemaExtensions, Q as contractSignature, R as excludedColumns, S as APP_TABLES_MARKER, T as scopePolicyName, U as sameTenantColumn, V as dataExportPlan, W as sameTenantTrigger, X as AUDIT_CATEGORIES, Y as renamedBlock, Z as MODULE_ID_TYPES, _ as upgradePlan, a as tenantsQuery, at as extensionSchema, b as moduleDataDir, c as adoptedColumnProblems, ct as auditRegistrations, d as entityRenamePlan, et as moduleIdType, f as customContracts, g as moduleDeprecations, h as renderBlocks, i as moduleLayout, it as declaredUpdatedAtTriggers, j as moduleEventTriggers, k as moduleFileVersion, l as adoptedTables, m as moduleTopics, n as compileReadSets, nt as declaredTableColumns, o as expiredFlagsQuery, ot as policyGrants, p as moduleBody, q as currentBlockName, r as sharedRolesProblems, rt as declaredTables, s as sameTenantLayout, st as rlsTables, t as compileReadSet, tt as BLOCK_OPTION_SCHEMAS, u as instanceFunctions, v as declaredPolicies, w as appTablesFiles, x as moduleFilePaths, y as widenedCommands, z as resolveExposeColumns } from "../sql-ClHIdgKS.js";
-export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, DEFAULT_ROLES, MODULE_ID_TYPES, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, adoptedColumnProblems, adoptedTables, appTableEventTypes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };
+import { $ as contractSignature, A as moduleFileVersion, B as resolveExposeColumns, C as APP_TABLES_MARKER, D as blockSqlVersion, E as scopePolicyName, F as moduleSchemaExtensions, G as sameTenantTrigger, H as dataExportPlan, I as SQL_MODULES, J as currentBlockName, K as migrationOptionUses, L as resolveBlocks, M as moduleEventTriggers, N as moduleHidingColumns, O as blockFileState, P as modulePermissionKeys, Q as MODULE_ID_TYPES, R as TENANT_SCOPE_POLICY, S as moduleFilePaths, T as appTablesFiles, U as subjectColumns, V as SECRET_COLUMNS, W as sameTenantColumn, X as renamedBlock, Y as formerBlockName, Z as AUDIT_CATEGORIES, _ as moduleDeprecations, a as tenantsQuery, at as declaredUpdatedAtTriggers, b as widenedCommands, c as adoptedColumnProblems, ct as policyGrants, d as instanceFunctions, et as isBlockSqlIdType, f as entityRenamePlan, g as renderBlocks, h as moduleTopics, i as moduleLayout, it as declaredTables, j as sameBlockFile, k as isModuleDataFile, l as adoptedTables, lt as rlsTables, m as moduleBody, n as compileReadSets, nt as BLOCK_OPTION_SCHEMAS, o as expiredFlagsQuery, ot as declaredViews, p as customContracts, q as BLOCK_RENAMES, r as sharedRolesProblems, rt as declaredTableColumns, s as sameTenantLayout, st as extensionSchema, t as compileReadSet, tt as moduleIdType, u as adoptedViews, ut as auditRegistrations, v as upgradePlan, w as APP_TABLES_MODULE, x as moduleDataDir, y as declaredPolicies, z as excludedColumns } from "../sql-Dl3Alk43.js";
+export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, DEFAULT_ROLES, MODULE_ID_TYPES, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, adoptedColumnProblems, adoptedTables, adoptedViews, appTableEventTypes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };

package/dist/{sql-ClHIdgKS.js → sql-Dl3Alk43.js}

@@ -774,6 +774,108 @@ function declaredTables(files, schemas) {
 	}
 	return [...found];
 }
+const VIEW = /* @__PURE__ */ new RegExp(String.raw`\bcreate\s+(?:or\s+replace\s+)?(?:(?:temp|temporary|recursive)\s+)?(materialized\s+)?view\s+(?:if\s+not\s+exists\s+)?(${TABLE_NAME$4})\s*(\()?`, "gi");
+const DROP_VIEW = /* @__PURE__ */ new RegExp(String.raw`\bdrop\s+(?:materialized\s+)?view\s+(?:if\s+exists\s+)?(${TABLE_NAME$4}(?:\s*,\s*${TABLE_NAME$4})*)`, "gi");
+const INSTEAD_OF_TRIGGER = /* @__PURE__ */ new RegExp(String.raw`\bcreate\s+(?:or\s+replace\s+)?trigger\s+${NAME$9}\s+instead\s+of\b[^;]*?\bon\s+(${TABLE_NAME$4})`, "gi");
+/**
+* What keeps Postgres from writing through a view to its table: a view that has
+* one of these is not auto-updatable.
+*/
+const NOT_UPDATABLE = /\b(?:(?:distinct|group\s+by|having|limit|offset|fetch\s+first|union|intersect|except|join|window)\b|over\s*\(|(?:count|sum|avg|min|max|array_agg|string_agg|jsonb_agg|json_agg|bool_and|bool_or)\s*\()/i;
+/** The word that ends a view's select list, at the top level. */
+const SELECT_END$1 = /\bfrom\b/i;
+const ALIAS = /* @__PURE__ */ new RegExp(String.raw`\bas\s+(${NAME$9})\s*$`, "i");
+const BARE_COLUMN = /* @__PURE__ */ new RegExp(String.raw`^(?:${NAME$9}\s*\.\s*)*(${NAME$9})$`);
+/**
+* The view's columns from its select list: each item's alias, or the column it
+* names. `undefined` when an item is `*` or has no name to read.
+*/
+function selectColumns(body) {
+	const select = /^\s*(?:\(\s*)?select\s+/i.exec(body);
+	if (select === null) return;
+	let rest = body.slice(select[0].length);
+	const distinct = /^distinct\s+on\s*\(/i.exec(rest);
+	if (distinct === null) rest = rest.replace(/^(?:distinct|all)\b/i, "");
+	else {
+		const close = closingParen(rest, distinct[0].length - 1);
+		if (close === -1) return;
+		rest = rest.slice(close + 1);
+	}
+	const end = topLevelIndex(rest, SELECT_END$1);
+	const items = splitTopLevel(end === -1 ? rest : rest.slice(0, end));
+	const columns = [];
+	for (const item of items) {
+		const alias = ALIAS.exec(item)?.[1] ?? BARE_COLUMN.exec(item.trim())?.[1];
+		if (alias === void 0 || item.trim().endsWith("*")) return;
+		columns.push(unquote$4(alias));
+	}
+	return columns;
+}
+/** The first match of `pattern` outside parentheses and quotes, or -1. */
+function topLevelIndex(text, pattern) {
+	let depth = 0;
+	let quote;
+	for (let i = 0; i < text.length; i += 1) {
+		const char = text[i];
+		if (quote) {
+			if (char === quote) quote = void 0;
+		} else if (char === "'" || char === "\"") quote = char;
+		else if (char === "(") depth += 1;
+		else if (char === ")") depth -= 1;
+		else if (depth === 0 && /\w/.test(char) && !/\w/.test(text[i - 1] ?? "") && pattern.exec(text.slice(i))?.index === 0) return i;
+	}
+	return -1;
+}
+/**
+* The views and materialized views `files` create, as `schema.view`, with their
+* columns and whether they are auto-updatable. A later `drop view` removes one.
+* Only views in `schemas` are kept.
+*/
+function declaredViews(files, schemas) {
+	const found = /* @__PURE__ */ new Map();
+	const insteadOf = /* @__PURE__ */ new Set();
+	for (const file of files) {
+		const text = withoutComments$1(file.text);
+		for (const match of text.matchAll(INSTEAD_OF_TRIGGER)) insteadOf.add(qualified$8(match[1]));
+		inOrder([[...text.matchAll(VIEW)].map((match) => ({
+			index: match.index,
+			apply: () => {
+				const view = qualified$8(match[2]);
+				if (!schemas.includes(view.slice(0, view.indexOf(".")))) return;
+				let at = match.index + match[0].length;
+				let listed;
+				if (match[3] !== void 0) {
+					const close = closingParen(text, at - 1);
+					if (close === -1) return;
+					listed = splitTopLevel(text.slice(at, close)).map((column) => unquote$4(column.trim()));
+					at = close + 1;
+				}
+				const as = /\bas\b/i.exec(text.slice(at));
+				if (as === null) return;
+				const start = at + as.index + as[0].length;
+				const end = text.indexOf(";", start);
+				const body = text.slice(start, end === -1 ? text.length : end);
+				found.set(view, {
+					columns: listed ?? selectColumns(body),
+					updatable: match[1] === void 0 && !NOT_UPDATABLE.test(body)
+				});
+			}
+		})), [...text.matchAll(DROP_VIEW)].map((match) => ({
+			index: match.index,
+			apply: () => {
+				for (const view of droppedTables(match[1])) found.delete(view);
+			}
+		}))]);
+	}
+	for (const view of insteadOf) {
+		const entry = found.get(view);
+		if (entry !== void 0) found.set(view, {
+			...entry,
+			updatable: true
+		});
+	}
+	return found;
+}
 const RLS_TOGGLE = /* @__PURE__ */ new RegExp(String.raw`\balter\s+table\s+(?:if\s+exists\s+)?(?:only\s+)?(${NAME$9}(?:\s*\.\s*${NAME$9})?)\s+(enable|disable)\s+row\s+level\s+security\b`, "gi");
 /**
 * The tables in `schemas` that `files` leave with row level security on: `alter
@@ -983,6 +1085,7 @@ function declaredUpdatedAtTriggers(files, schemas) {
 }
 //#endregion
 //#region src/sql/over-app-tables.ts
+const TABLE_NAME$3 = String.raw`${NAME$9}(?:\s*\.\s*${NAME$9})?`;
 /** Comments replaced by spaces, so offsets into `text` stay the same. */
 function maskComments(text) {
 	return text.replaceAll(/--[^\n]*/g, (comment) => " ".repeat(comment.length)).replaceAll(/\/\*[\s\S]*?\*\//g, (comment) => comment.replaceAll(/[^\n]/g, " "));
@@ -1068,7 +1171,6 @@ function withoutUnmappedTables(sql, instance) {
 	if (use !== null) throw new TypeError(`Module "${instance}" needs table "${use[1]}", which blocks.${instance}.tables maps to null`);
 	return out;
 }
-const TABLE_NAME$3 = String.raw`${NAME$9}(?:\s*\.\s*${NAME$9})?`;
 const ALTER_CONSTRAINT = /* @__PURE__ */ new RegExp(String.raw`^[ \t]*alter\s+table\s+(?:only\s+)?(${TABLE_NAME$3})\s+(?:add\s+constraint|drop\s+constraint|validate\s+constraint|alter\s+column)\b[^;]*;[ \t]*\n?`, "gim");
 const REVOKE = /* @__PURE__ */ new RegExp(String.raw`^[ \t]*revoke\s[^;]*?\son\s+(?:table\s+)?(${TABLE_NAME$3})\s+from\b[^;]*;[ \t]*\n?`, "gim");
 const ENSURE_CHECK = /^do \$\$\nbegin\n {2}if coalesce\(obj_description\(\(\n\s+select c\.oid from pg_catalog\.pg_constraint c\n\s+where c\.conrelid = '([^']+)'::regclass[\s\S]*?\n\$\$;\n?/gm;
@@ -1082,6 +1184,42 @@ function withoutAppTableEdits(sql, appTables) {
 	const drop = (statement, table) => appTables.has(qualified$8(table)) ? "" : statement;
 	return sql.replaceAll(ALTER_CONSTRAINT, drop).replaceAll(REVOKE, drop).replaceAll(ENSURE_CHECK, drop);
 }
+/**
+* The relation a DDL statement builds or changes: its table, index, grant,
+* policy, trigger or comment target.
+*/
+const DDL_TARGETS = [
+	new RegExp(String.raw`^\s*create\s+(?:unlogged\s+)?table\s+(?:if\s+not\s+exists\s+)?(${TABLE_NAME$3})`, "i"),
+	new RegExp(String.raw`^\s*alter\s+table\s+(?:if\s+exists\s+)?(?:only\s+)?(${TABLE_NAME$3})`, "i"),
+	new RegExp(String.raw`^\s*create\s+(?:unique\s+)?index\s+(?:concurrently\s+)?(?:if\s+not\s+exists\s+)?(?:${NAME$9}\s+)?on\s+(?:only\s+)?(${TABLE_NAME$3})`, "i"),
+	new RegExp(String.raw`^\s*(?:grant|revoke)\s[^;]*?\bon\s+(?:table\s+)?(${TABLE_NAME$3})\s+(?:to|from)\b`, "i"),
+	new RegExp(String.raw`^\s*(?:create|alter|drop)\s+policy\s+(?:if\s+exists\s+)?${NAME$9}\s+on\s+(${TABLE_NAME$3})`, "i"),
+	new RegExp(String.raw`^\s*create\s+(?:or\s+replace\s+)?(?:constraint\s+)?trigger\s+${NAME$9}\s[^;]*?\bon\s+(${TABLE_NAME$3})`, "i"),
+	new RegExp(String.raw`^\s*drop\s+trigger\s+(?:if\s+exists\s+)?${NAME$9}\s+on\s+(${TABLE_NAME$3})`, "i"),
+	new RegExp(String.raw`^\s*comment\s+on\s+table\s+(${TABLE_NAME$3})`, "i"),
+	new RegExp(String.raw`^\s*comment\s+on\s+column\s+(${TABLE_NAME$3})\s*\.\s*${NAME$9}`, "i")
+];
+/**
+* `sql` without the statements that build or change the app's views in `views`
+* (as `schema.view`): their `create table`, columns, constraints, indexes, row
+* level security, grants, revokes, policies, triggers and comments. The
+* functions that read the views stay.
+*/
+function overAppViews(sql, views) {
+	if (views.size === 0) return sql;
+	const said = /* @__PURE__ */ new Set();
+	return statementSpans(sql).map(([from, to]) => {
+		const statement = sql.slice(from, to);
+		const masked = maskComments(statement);
+		const target = DDL_TARGETS.map((pattern) => pattern.exec(masked)?.[1]).find((match) => match !== void 0);
+		const view = target === void 0 ? void 0 : qualified$8(target);
+		if (view === void 0 || !views.has(view)) return statement;
+		const lead = /^\s*/.exec(statement)[0];
+		if (said.has(view)) return "";
+		said.add(view);
+		return `${lead}-- ${view} is the app's view: this block writes only the functions that read it.`;
+	}).join("");
+}
 const COLUMN_NAME$1 = /^("(?:[^"]|"")+"|[a-z_][\w$]*)/i;
 const TABLE_CONSTRAINT$1 = /^(constraint|check|unique|primary|foreign|exclude|like)\b/i;
 function unquote$3(name) {
@@ -1157,8 +1295,13 @@ function appOwnedTables(input) {
 function tableOwnership(input, column, requiredColumn) {
 	const appOwned = appOwnedTables(input);
 	const overApp = appOwned.length > 0;
+	const views = input.source.ownViews ?? {};
 	return {
 		appOwned,
+		appViews: appOwned.filter((logical) => {
+			const parts = input.tableName(logical);
+			return Object.hasOwn(views, `${parts.schema}.${parts.name}`);
+		}),
 		owns: (logical) => {
 			input.tableName(logical);
 			return input.config.mode !== "custom" && !appOwned.includes(logical);
@@ -2255,6 +2398,83 @@ function guestOr(sql, checks) {
 	return live.length === 0 ? sql : `(${sql}) or ${live.join(" or ")}`;
 }
 //#endregion
+//#region src/sql/view-columns.ts
+const cache = /* @__PURE__ */ new WeakMap();
+/**
+* The columns of the app's views that a block reads. A view can't take the
+* columns a block would add to a table, so each optional column (`optional` in
+* the table's spec) a view lacks counts as mapped to `null`, unless the config
+* maps it; any other column a view lacks is in `missing`. Views whose columns
+* aren't known are left alone.
+*/
+function viewColumns(layout, modules, namesOf) {
+	const views = layout.ownViews;
+	if (modules === void 0 || views === void 0 || Object.keys(views).length === 0) return {
+		modules,
+		missing: []
+	};
+	const known = cache.get(layout)?.get(modules);
+	if (known !== void 0) return known;
+	const out = { ...modules };
+	const missing = [];
+	for (const [block, config] of Object.entries(modules)) {
+		const names = namesOf(block);
+		if (config === void 0 || names === void 0 || !Object.values(names.tables).some((spec) => spec.app !== void 0)) continue;
+		const ctx = createModuleContext(block, namesOf, {
+			modules,
+			...layout.ownTables ? { ownTables: layout.ownTables } : {},
+			ownViews: views
+		});
+		const configured = config.columns ?? {};
+		const columns = {};
+		for (const logical of ctx.appViews) {
+			const parts = ctx.tableName(logical);
+			const view = `${parts.schema}.${parts.name}`;
+			const has = layout.ownColumns?.[view];
+			const spec = names.tables[logical];
+			if (has === void 0 || spec.app === void 0) continue;
+			const unused = new Set(spec.app.unused?.(ctx));
+			for (const column of Object.keys(spec.columns)) {
+				if (unused.has(column) || !ctx.has(logical, column)) continue;
+				const physical = ctx.colName(logical, column);
+				if (has.includes(physical)) continue;
+				if (spec.optional?.includes(column) === true && configured[logical]?.[column] === void 0) columns[logical] = {
+					...columns[logical],
+					[column]: null
+				};
+				else missing.push({
+					block,
+					view,
+					column: physical
+				});
+			}
+		}
+		if (Object.keys(columns).length > 0) out[block] = {
+			...config,
+			columns: Object.fromEntries([.../* @__PURE__ */ new Set([...Object.keys(configured), ...Object.keys(columns)])].map((logical) => [logical, {
+				...configured[logical],
+				...columns[logical]
+			}]))
+		};
+	}
+	const result = {
+		modules: Object.keys(out).some((block) => out[block] !== modules[block]) ? out : modules,
+		missing
+	};
+	const byModules = cache.get(layout) ?? /* @__PURE__ */ new WeakMap();
+	byModules.set(modules, result);
+	cache.set(layout, byModules);
+	return result;
+}
+/**
+* Throws when a view of the app's at a block table's name lacks a column the
+* block needs, naming the view and the column.
+*/
+function assertViewColumns(missing) {
+	if (missing[0] === void 0) return;
+	throw new TypeError([...missing.map((each) => `blocks.${each.block} reads ${each.view}.${each.column}, which the view doesn't have.`), "Add the column to the view, or map it in blocks.<name>.columns to one the view has."].join("\n"));
+}
+//#endregion
 //#region src/sql/module-context.ts
 let bound;
 /**
@@ -2282,6 +2502,7 @@ function moduleContext(name, layout = {}, installed, instance) {
 		...layout.subjects ? { subjects: layout.subjects } : {},
 		...layout.appTables ? { appTables: Object.keys(layout.appTables) } : {},
 		...layout.ownTables ? { ownTables: layout.ownTables } : {},
+		...layout.ownViews ? { ownViews: layout.ownViews } : {},
 		...installed ? { installed } : {},
 		...layout.instances ? { instances: layout.instances } : {},
 		...instance === void 0 || instance === name ? {} : { instance },
@@ -2311,7 +2532,14 @@ function moduleContext(name, layout = {}, installed, instance) {
 * a roles table, gets the same `roleThrough`, unless the config sets one.
 */
 function withProviderDefaults(layout) {
-	return withProviderRoles(layout, withProviderSuspension(layout));
+	return viewColumnsOf(layout).modules;
+}
+/**
+* The provider defaults, then the optional columns the app's views lack mapped
+* to `null`, with the required columns they lack.
+*/
+function viewColumnsOf(layout) {
+	return viewColumns(layout, withProviderRoles(layout, withProviderSuspension(layout)), (module) => registry().modules[module]?.names);
 }
 /**
 * `blocks.permissions.disabled` from the provider's `suspension` under the
@@ -3057,7 +3285,7 @@ function tenantSql(ctx, layout) {
   )` : `  select has_organization_role.organization in (
     select ${ctx.fn("member_organization_ids")}(has_organization_role.roles)
   )`;
-	const memberRoleFilter = members.idsFor === void 0 ? "" : ` and m.${tenant} in (select p.id from ${members.idsFor("organization_member_role.member")} as p(id))`;
+	const memberRoleFilter = `${active}${members.idsFor === void 0 ? "" : ` and m.${tenant} in (select p.id from ${members.idsFor("organization_member_role.member")} as p(id))`}`;
 	const claimJson = ctx.text("claimFormat", "array") === "map" ? `coalesce(jsonb_object_agg(m.${tenant}::text, ${role}), '{}'::jsonb)` : `coalesce(jsonb_agg(jsonb_build_object(
       'scope', ${sqlString(ctx.claims.scope)},
       'id', m.${tenant},
@@ -7359,6 +7587,7 @@ const MAX_IDENTIFIER = 63;
 function lockModuleTable(ctx, logical, options = {}) {
 	const table = ctx.table(logical);
 	if (!ctx.appOwned.includes(logical)) return lockTable(table, options);
+	if (ctx.appViews.includes(logical)) return "";
 	return `alter table ${table} enable row level security;
 ${options.read ? `grant select on ${table} to authenticated;\n` : ""}grant all on ${table} to service_role;`;
 }
@@ -7377,7 +7606,7 @@ function asText(ctx, logical, expr) {
 * `where` clause.
 */
 function appUniqueIndex(ctx, logical, columns, where) {
-	if (!ctx.appOwned.includes(logical)) return "";
+	if (!ctx.appOwned.includes(logical) || ctx.appViews.includes(logical)) return "";
 	const physical = columns.map((column) => ctx.colName(logical, column));
 	const name = `${ctx.tableName(logical).name}_${physical.join("_")}_key`;
 	return `\ncreate unique index if not exists ${sqlIdent(name.slice(0, MAX_IDENTIFIER))} on ${ctx.table(logical)} (${physical.map((column) => sqlIdent(column)).join(", ")})${where === void 0 ? "" : ` where ${where}`};`;
@@ -68034,6 +68263,8 @@ $$;
 -- False when the token is narrower than the permission: a permission cap
 -- (bsb_permission_cap) without the key, or a delegated token whose scopes
 -- don't map to it. True for every other token, the service role included.
+-- 0.14 named the cap bs_permission_cap; 0.15 still reads it when the new
+-- claim is missing, so a cap from an older runAs keeps narrowing.
 create or replace function better_supabase.cap_allows(permission text)
 returns boolean
 language sql
@@ -68043,9 +68274,9 @@ set search_path = ''
 as $$
   select case
     when jwt is null then true
-    when jsonb_typeof(jwt -> 'bsb_permission_cap') = 'array'
+    when jsonb_typeof(cap) = 'array'
       and not exists (
-        select 1 from jsonb_array_elements_text(jwt -> 'bsb_permission_cap') c(key)
+        select 1 from jsonb_array_elements_text(cap) c(key)
         where better_supabase.permission_matches(c.key, cap_allows.permission)
       ) then false
     when coalesce(jwt ->> 'client_id', '') = ''
@@ -68065,6 +68296,9 @@ as $$
     )
   end
   from (select auth.jwt() as jwt) as token
+  cross join lateral (
+    select coalesce(jwt -> 'bsb_permission_cap', jwt -> 'bs_permission_cap') as cap
+  ) as capped
 $$;`;
 }
 //#endregion
@@ -94675,6 +94909,133 @@ $$;
 revoke execute on function better_supabase.check_rate_limit(text, text, integer, interval) from public, anon, authenticated;
 grant execute on function better_supabase.check_rate_limit(text, text, integer, interval) to service_role;
 
+-- Counts one hit against several limits at once: hits is a JSON array of
+-- { scope, key, max_requests?, period? }, each with its own scope and key.
+-- The counters are locked in a fixed order and the hit counts only when every
+-- limit allows it, so a refused call leaves every counter as it was. Returns
+-- { allowed, blocked, retry_after, results }: blocked is the index of the first
+-- limit over its maximum, retry_after the longest wait of the refusing
+-- limits, and results one { allowed, remaining, retry_after } per hit.
+create or replace function better_supabase.check_rate_limits(hits jsonb)
+returns jsonb
+language plpgsql
+security definer
+set search_path = ''
+as $$
+declare
+  total integer;
+  scopes text[] := '{}';
+  keys text[] := '{}';
+  maxes integer[] := '{}';
+  periods interval[] := '{}';
+  used integer[] := '{}';
+  starts timestamptz[] := '{}';
+  hit jsonb;
+  rule better_supabase.rate_limit_rules;
+  counter better_supabase.rate_limits;
+  limit_max integer;
+  limit_period interval;
+  current_hits integer;
+  first_blocked integer;
+  longest integer := 0;
+  passed boolean;
+  results jsonb := '[]'::jsonb;
+begin
+  if jsonb_typeof(hits) is distinct from 'array' or jsonb_array_length(hits) = 0 then
+    raise exception 'check_rate_limits needs a non-empty array of hits'
+      using errcode = '22023', hint = 'RATE_LIMIT_HITS';
+  end if;
+  total := jsonb_array_length(hits);
+  for i in 1 .. total loop
+    hit := hits -> (i - 1);
+    if coalesce(hit ->> 'scope', '') = '' or (hit ->> 'key') is null then
+      raise exception 'Hit % of check_rate_limits needs a scope and a key', i - 1
+        using errcode = '22023', hint = 'RATE_LIMIT_HITS';
+    end if;
+    select * into rule from better_supabase.rate_limit_rules r where r.scope = hit ->> 'scope';
+    limit_max := coalesce((hit ->> 'max_requests')::integer, rule.max_requests);
+    limit_period := coalesce((hit ->> 'period')::interval, rule.period);
+    if limit_max is null or limit_period is null then
+      raise exception 'No rate limit for %: call set_rate_limit or pass max_requests and period', hit ->> 'scope'
+        using errcode = '22023', hint = 'RATE_LIMIT_UNKNOWN';
+    end if;
+    if limit_max < 1 or limit_period <= interval '0' then
+      raise exception 'The rate limit for % needs a positive max_requests and period', hit ->> 'scope'
+        using errcode = '22023', hint = 'RATE_LIMIT_HITS';
+    end if;
+    for j in 1 .. i - 1 loop
+      if scopes[j] = hit ->> 'scope' and keys[j] = hit ->> 'key' then
+        raise exception 'Hits % and % of check_rate_limits count the same scope % and key; give each limit its own scope', j - 1, i - 1, hit ->> 'scope'
+          using errcode = '22023', hint = 'RATE_LIMIT_HITS';
+      end if;
+    end loop;
+    scopes := scopes || (hit ->> 'scope');
+    keys := keys || (hit ->> 'key');
+    maxes := maxes || limit_max;
+    periods := periods || limit_period;
+  end loop;
+
+  insert into better_supabase.rate_limits as l (scope, key, window_start, hits, period)
+  select u.scope, u.key, now(), 0, u.period
+  from unnest(scopes, keys, periods) as u(scope, key, period)
+  order by u.scope, u.key
+  on conflict on constraint rate_limits_pkey do nothing;
+
+  perform 1
+  from better_supabase.rate_limits l
+  join unnest(scopes, keys) as u(scope, key) on l.scope = u.scope and l.key = u.key
+  order by l.scope, l.key
+  for update of l;
+
+  for i in 1 .. total loop
+    select * into counter from better_supabase.rate_limits l
+    where l.scope = scopes[i] and l.key = keys[i];
+    if counter.window_start + periods[i] <= now() then
+      used := used || 0;
+      starts := starts || now();
+    else
+      used := used || counter.hits;
+      starts := starts || counter.window_start;
+    end if;
+    if used[i] + 1 > maxes[i] then
+      longest := greatest(longest, greatest(1, ceil(extract(epoch from starts[i] + periods[i] - now()))::integer));
+      first_blocked := coalesce(first_blocked, i - 1);
+    end if;
+  end loop;
+
+  passed := first_blocked is null;
+
+  if passed then
+    for i in 1 .. total loop
+      update better_supabase.rate_limits l set
+        window_start = starts[i],
+        hits = used[i] + 1,
+        period = periods[i]
+      where l.scope = scopes[i] and l.key = keys[i];
+    end loop;
+  end if;
+
+  for i in 1 .. total loop
+    current_hits := used[i] + case when passed then 1 else 0 end;
+    results := results || jsonb_build_array(jsonb_build_object(
+      'allowed', used[i] + 1 <= maxes[i],
+      'remaining', greatest(maxes[i] - current_hits, 0),
+      'retry_after', case when used[i] + 1 <= maxes[i] then 0
+        else greatest(1, ceil(extract(epoch from starts[i] + periods[i] - now()))::integer) end
+    ));
+  end loop;
+
+  return jsonb_build_object(
+    'allowed', passed,
+    'blocked', first_blocked,
+    'retry_after', longest,
+    'results', results
+  );
+end
+$$;
+revoke execute on function better_supabase.check_rate_limits(jsonb) from public, anon, authenticated;
+grant execute on function better_supabase.check_rate_limits(jsonb) to service_role;
+
 -- Deletes up to batch counters whose window has ended: the period the
 -- counter was last hit with, else its rule's, else a day (counters from
 -- before the period column). Every caller keeps a row until then, so
@@ -123684,7 +124045,7 @@ function applyTenantScope(sql, ctx) {
 	const targets = [];
 	for (const [logical, spec] of Object.entries(ctx.names.tables)) {
 		const tenant = spec.lifecycle?.tenant;
-		if (tenant === void 0 || !ctx.hasTable(logical) || !ctx.has(logical, tenant)) continue;
+		if (tenant === void 0 || ctx.appViews.includes(logical) || !ctx.hasTable(logical) || !ctx.has(logical, tenant)) continue;
 		const name = ctx.tableName(logical);
 		const key = tableKey(`${name.schema}.${name.name}`);
 		const own = policies.filter((policy) => policy.target === key && !policy.restrictive && policy.authenticated);
@@ -125880,6 +126241,7 @@ function upgradePlan(installed, layout = {}, modules = SQL_MODULES) {
 			...entry.module === block ? {} : { instance: entry.module },
 			installed: names,
 			...layout.ownTables ? { ownTables: layout.ownTables } : {},
+			...layout.ownViews ? { ownViews: layout.ownViews } : {},
 			...providerIdType(layout),
 			...providerGuests(layout)
 		});
@@ -125928,6 +126290,7 @@ function moduleSql(module, ctx, layout) {
 function moduleBody(name, layout = {}) {
 	checkModules(layout.modules);
 	checkMigrationOptions(layout.modules, layout.ownTables);
+	assertViewColumns(viewColumnsOf(layout).missing);
 	const modules = resolveBlocks([name], layout);
 	const module = modules.find((entry) => entry.name === name);
 	const ctx = moduleContext(name, layout, modules.map((entry) => entry.name));
@@ -125939,11 +126302,11 @@ function moduleBody(name, layout = {}) {
 */
 function overApp(sql, ctx, layout) {
 	const appTables = appTableSet(ctx);
-	return withoutUnmappedColumns(withoutUnmappedTables(blockNamesOnAppTables(withoutAppTableEdits(overAppTables(sql, appTables, layout.ownColumns), appTables), appTables, layout.ownUpdatedAtTriggers), ctx.instance), ctx.instance);
+	return withoutUnmappedColumns(withoutUnmappedTables(blockNamesOnAppTables(withoutAppTableEdits(overAppTables(overAppViews(sql, appTableSet(ctx, ctx.appViews)), appTables, layout.ownColumns), appTables), appTables, layout.ownUpdatedAtTriggers), ctx.instance), ctx.instance);
 }
 /** The app's tables a module runs over, as `schema.table`. */
-function appTableSet(ctx) {
-	return new Set(ctx.manages ? ctx.appOwned.map((table) => {
+function appTableSet(ctx, tables = ctx.appOwned) {
+	return new Set(ctx.manages ? tables.map((table) => {
 		const parts = ctx.tableName(table);
 		return `${parts.schema}.${parts.name}`;
 	}) : []);
@@ -125989,6 +126352,7 @@ on conflict (name) do update
 function renderBlocks(names, layout = {}) {
 	checkModules(layout.modules);
 	checkMigrationOptions(layout.modules, layout.ownTables);
+	assertViewColumns(viewColumnsOf(layout).missing);
 	const modules = resolveBlocks(names, layout);
 	checkTenantName(modules, layout);
 	const installed = modules.map((module) => module.name);
@@ -126553,11 +126917,12 @@ function contextOf(name, layout) {
 * `ownTables` lists it or `blocks.<name>.on` names it, with the columns their
 * SQL names: mapped to `null` and unused optional columns are left out.
 */
-function adoptedTables(modules, ownTables) {
+function adoptedTables(modules, ownTables, views = {}) {
 	const tables = [];
 	const layout = {
 		modules,
-		...ownTables === void 0 ? {} : { ownTables }
+		...ownTables === void 0 ? {} : { ownTables },
+		...views
 	};
 	const contexts = Object.keys(modules).flatMap((name) => {
 		const mode = modules[name]?.mode ?? "managed";
@@ -126635,6 +127000,30 @@ function enumColumnProblems(modules, files, schemas, ownTables) {
 function enumColumnProblem(table, logical, column, type) {
 	return `blocks.${table.module} writes text into ${table.schema}.${table.table}.${column} (${table.logical}.${logical}), which is the enum ${type}. Postgres does not cast text to an enum, so the module's functions fail. Change the column to text with a check constraint on its values.`;
 }
+/** The block tables in `modules` that run over the app's views. */
+function adoptedViews(modules, ownTables, views) {
+	const layout = {
+		modules,
+		ownTables,
+		...views
+	};
+	return Object.keys(modules).flatMap((name) => {
+		const spec = SQL_MODULES[name]?.names?.tables;
+		const ctx = spec === void 0 ? void 0 : contextOf(name, layout);
+		if (spec === void 0 || ctx === void 0) return [];
+		return ctx.appViews.map((logical) => {
+			const { schema, name: table } = ctx.tableName(logical);
+			const view = `${schema}.${table}`;
+			return {
+				module: name,
+				logical,
+				view,
+				updatable: views.ownViews[view]?.updatable === true,
+				writes: spec[logical]?.app?.writes !== false
+			};
+		});
+	});
+}
 //#endregion
 //#region src/sql/foreign-keys.ts
 const TABLE_NAME = String.raw`${NAME$9}(?:\s*\.\s*${NAME$9})?`;
@@ -126993,4 +127382,4 @@ async function compileReadSets(sets) {
 	return Promise.all(names.map((name) => compileReadSet(byName.get(name))));
 }
 //#endregion
-export { isBlockSqlIdType as $, sameBlockFile as A, SECRET_COLUMNS as B, APP_TABLES_MODULE as C, blockFileState as D, blockSqlVersion as E, SQL_MODULES as F, migrationOptionUses as G, subjectColumns$1 as H, resolveBlocks as I, formerBlockName as J, BLOCK_RENAMES as K, TENANT_SCOPE_POLICY as L, moduleHidingColumns as M, modulePermissionKeys as N, isModuleDataFile as O, moduleSchemaExtensions as P, contractSignature as Q, excludedColumns as R, APP_TABLES_MARKER as S, scopePolicyName as T, sameTenantColumn as U, dataExportPlan as V, sameTenantTrigger as W, AUDIT_CATEGORIES as X, renamedBlock as Y, MODULE_ID_TYPES as Z, upgradePlan as _, tenantsQuery as a, extensionSchema as at, moduleDataDir as b, adoptedColumnProblems as c, auditRegistrations as ct, entityRenamePlan as d, moduleIdType as et, customContracts as f, moduleDeprecations as g, renderBlocks as h, moduleLayout as i, declaredUpdatedAtTriggers as it, moduleEventTriggers as j, moduleFileVersion as k, adoptedTables as l, moduleTopics as m, compileReadSets as n, declaredTableColumns as nt, expiredFlagsQuery as o, policyGrants as ot, moduleBody as p, currentBlockName as q, sharedRolesProblems as r, declaredTables as rt, sameTenantLayout as s, rlsTables as st, compileReadSet as t, BLOCK_OPTION_SCHEMAS as tt, instanceFunctions as u, declaredPolicies as v, appTablesFiles as w, moduleFilePaths as x, widenedCommands as y, resolveExposeColumns as z };
+export { contractSignature as $, moduleFileVersion as A, resolveExposeColumns as B, APP_TABLES_MARKER as C, blockSqlVersion as D, scopePolicyName as E, moduleSchemaExtensions as F, sameTenantTrigger as G, dataExportPlan as H, SQL_MODULES as I, currentBlockName as J, migrationOptionUses as K, resolveBlocks as L, moduleEventTriggers as M, moduleHidingColumns as N, blockFileState as O, modulePermissionKeys as P, MODULE_ID_TYPES as Q, TENANT_SCOPE_POLICY as R, moduleFilePaths as S, appTablesFiles as T, subjectColumns$1 as U, SECRET_COLUMNS as V, sameTenantColumn as W, renamedBlock as X, formerBlockName as Y, AUDIT_CATEGORIES as Z, moduleDeprecations as _, tenantsQuery as a, declaredUpdatedAtTriggers as at, widenedCommands as b, adoptedColumnProblems as c, policyGrants as ct, instanceFunctions as d, isBlockSqlIdType as et, entityRenamePlan as f, renderBlocks as g, moduleTopics as h, moduleLayout as i, declaredTables as it, sameBlockFile as j, isModuleDataFile as k, adoptedTables as l, rlsTables as lt, moduleBody as m, compileReadSets as n, BLOCK_OPTION_SCHEMAS as nt, expiredFlagsQuery as o, declaredViews as ot, customContracts as p, BLOCK_RENAMES as q, sharedRolesProblems as r, declaredTableColumns as rt, sameTenantLayout as s, extensionSchema as st, compileReadSet as t, moduleIdType as tt, adoptedViews as u, auditRegistrations as ut, upgradePlan as v, APP_TABLES_MODULE as w, moduleDataDir as x, declaredPolicies as y, excludedColumns as z };

package/dist/sqlite/index.d.ts

@@ -1,6 +1,6 @@
 import { Bt as Executor } from "../types-DFdg_4yN.js";
 import { c as LocalTablesOption, n as DataEngine, s as LiveEngineOptions } from "../data-engine-BWoz9lED.js";
-import { i as fromSqliteError, n as SqliteDatabaseLike, o as CheckSqliteOptions, r as SqliteExecutorOptions, s as checkSqlite, t as SqliteContextLike } from "../executor-CVIn6JHa.js";
+import { i as fromSqliteError, n as SqliteDatabaseLike, o as CheckSqliteOptions, r as SqliteExecutorOptions, s as checkSqlite, t as SqliteContextLike } from "../executor-BcNWcD-4.js";
 //#region src/sqlite/engine.d.ts
 /** A SQLite database that may report which tables changed. */
 interface ChangingSqliteDatabase extends SqliteDatabaseLike {

package/dist/ssr/index.d.ts

@@ -1,6 +1,6 @@
 import { C as readSession, D as writeSession, E as sessionEncoding, S as pruneSessionChunks, T as sessionCookieName, _ as StoredSession, a as ResolveAuthOptions, b as clearSessionAtScopes, d as CookieOptions, f as CookieRecord, g as SessionEncoding, h as DEFAULT_SESSION_ENCODING, l as resolveAuth, m as CookieWrite, n as AuthResolver, p as CookieScope, r as AuthState, t as AuthResolution, u as AUTH_CACHE_HEADERS, v as WriteSessionOptions, w as serializeCookie, x as parseCookies, y as applyCookieWrites } from "../resolve-CXX6DHv3.js";
 import { n as toSession, t as AuthSession } from "../view-DyFdMCqg.js";
-import { r as MembershipClaim } from "../entitlements-CJpYQXeE.js";
+import { r as MembershipClaim } from "../entitlements-sO977DO-.js";
 import { n as RefreshOutcome, r as refreshSession, t as RefreshOptions } from "../refresh-DT_ICaK-.js";
 import { a as sessionStatus, i as clearSessionCookies, n as SessionStatus, o as authContext, r as SessionStatusOptions, t as ClearSessionCookiesOptions } from "../ended-gUsMZVNg.js";
 export { AUTH_CACHE_HEADERS, type AuthResolution, type AuthResolver, type AuthSession, type AuthState, type ClearSessionCookiesOptions, type CookieOptions, type CookieRecord, type CookieScope, type CookieWrite, DEFAULT_SESSION_ENCODING, type MembershipClaim, type RefreshOptions, type RefreshOutcome, type ResolveAuthOptions, type SessionEncoding, type SessionStatus, type SessionStatusOptions, type StoredSession, type WriteSessionOptions, applyCookieWrites, authContext, clearSessionAtScopes, clearSessionCookies, parseCookies, pruneSessionChunks, readSession, refreshSession, resolveAuth, serializeCookie, sessionCookieName, sessionEncoding, sessionStatus, toSession, writeSession };