better-supabase 0.15.0 → 0.16.0

package/dist/cli/{render-ucJmUyuM.js → render-5y5a1QZr.js}

@@ -1,10 +1,10 @@
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { n as importPath } from "./io-DH1kcmmP.js";
-import { i as cachedTypesModule, n as cachedDatabaseTypes, s as typesModuleKey } from "./cache-CXgR_Ahi.js";
+import { i as cachedTypesModule, n as cachedDatabaseTypes, s as typesModuleKey } from "./cache-AznIssjI.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
-import { f as generateDatabaseTypes, h as restrictSchemas, p as oxfmtInstalled, v as tsTypeOf } from "./snapshot-C8MVPyO8.js";
+import { f as generateDatabaseTypes, h as restrictSchemas, p as oxfmtInstalled, v as tsTypeOf } from "./snapshot-uTUlEzY2.js";
 import { t as isRecord$1 } from "./guards-CUlDNYZs.js";
-import { a as toCatalog } from "./source-DANaJJVc.js";
+import { a as toCatalog } from "./source-D2gJHKwC.js";
 import { basename, dirname, isAbsolute, join, posix, relative, resolve } from "node:path";
 import { entityNames } from "better-supabase/blocks";
 import { DEFAULT_CLAIMS, blockEntities, blockEntityRenames, blockSubjectTypes, tenantClaimPaths, tenantNameOf } from "better-supabase/config";

package/dist/cli/{run-CvYVAztY.js → run-Bs4OKdDI.js}

@@ -1,13 +1,14 @@
 import { r as errorText } from "./errors-BTe6A15O.js";
 import { a as sameText, t as display } from "./io-DH1kcmmP.js";
-import { c as writeAtomic, o as storeTypesModule, s as typesModuleKey, t as CACHE_DIR } from "./cache-CXgR_Ahi.js";
+import { c as writeAtomic, o as storeTypesModule, s as typesModuleKey, t as CACHE_DIR } from "./cache-AznIssjI.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
-import { _ as stabilizeMetadata, b as typegenVersionNotice, p as oxfmtInstalled, t as loadSnapshot, y as typegenVersion } from "./snapshot-C8MVPyO8.js";
-import { n as render } from "./render-ucJmUyuM.js";
-import { A as providerLabel, D as entitlementRequirements, E as accessRequirements, O as entitlementsMode, T as accessProviderMode, c as sameModuleMigration, j as unsafeKey, k as moduleKeyProblems, l as writeLatestMigration, n as READ_SETS_SUFFIX, r as latestMigration, u as writesMigrations, w as writtenByBlocks, x as migrationsDir, y as compiledReadSets } from "./module-migration-aPCckev6.js";
-import { s as schemaStampPath } from "./content-mapper-DNs7lTu7.js";
+import { _ as stabilizeMetadata, b as typegenVersionNotice, p as oxfmtInstalled, t as loadSnapshot, y as typegenVersion } from "./snapshot-uTUlEzY2.js";
+import { n as render } from "./render-5y5a1QZr.js";
+import { C as entitlementsMode, E as unsafeKey, S as entitlementRequirements, T as providerLabel, b as accessProviderMode, c as sameModuleMigration, l as writeLatestMigration, n as READ_SETS_SUFFIX, r as latestMigration, u as writesMigrations, w as moduleKeyProblems, x as accessRequirements, y as compiledReadSets } from "./module-migration-O_IxewFs.js";
+import { s as schemaStampPath } from "./content-mapper-DCrz6OIv.js";
 import { a as changedFiles, d as fileDiff, i as changeLines, r as applyPlan, s as hasConflicts } from "./files-CX71yBm8.js";
-import { l as tableObject, n as exposed, o as policyObject, s as qualified, t as catalogOf } from "./shared-LZroULBe.js";
+import { n as migrationsDir, o as writtenByBlocks } from "./sql-layout-lUWenjJw.js";
+import { l as tableObject, n as exposed, o as policyObject, s as qualified, t as catalogOf } from "./shared-BLqbvY2x.js";
 import { existsSync } from "node:fs";
 import { dirname, isAbsolute, relative, resolve, sep } from "node:path";
 import { readFile } from "node:fs/promises";
@@ -121,6 +122,18 @@ function appTablesOf(context) {
 	const created = new Set(declaredTables((context.sqlFiles ?? []).filter(writtenByBlocks), context.config.schemas));
 	return Object.fromEntries(catalogOf(context).tables.filter((table) => context.config.schemas.includes(table.schema) && !created.has(qualified(table))).map((table) => [qualified(table), "database"]));
 }
+/**
+* The views among the app's tables, and the columns of each, for the layout a
+* block reads them with.
+*/
+function appViewsOf(context) {
+	const own = appTablesOf(context);
+	const views = catalogOf(context).tables.filter((table) => table.kind === "view" && Object.hasOwn(own, qualified(table)));
+	return {
+		ownViews: Object.fromEntries(views.map((view) => [qualified(view), { updatable: view.insertable && view.updatable }])),
+		ownColumns: Object.fromEntries(views.map((view) => [qualified(view), view.columns.map((column) => column.name)]))
+	};
+}
 //#endregion
 //#region src/cli/doctor/block-policies.ts
 /** The prefix the render pass gives block policies on the app's tables. */
@@ -1424,4 +1437,4 @@ async function runGen(options) {
 	};
 }
 //#endregion
-export { splinterTables as S, withoutStrings as _, METADATA_GAPS_TEXT as a, appTablesOf as b, accessModule as c, RLS_RULES as d, appliesTo as f, policyHelpers as g, functionObject as h, generationNotices as i, entitlementsModule as l, functionBody as m, runGen as n, fromMetadata as o, escape as p, UNFORMATTED as r, AUTHORIZATION_RULES as s, refuseRowConditionedBuckets as t, COMMANDS as u, BLOCK_PREFIX as v, advisorRule as x, blockTargets as y };
+export { splinterTables as C, advisorRule as S, withoutStrings as _, METADATA_GAPS_TEXT as a, appTablesOf as b, accessModule as c, RLS_RULES as d, appliesTo as f, policyHelpers as g, functionObject as h, generationNotices as i, entitlementsModule as l, functionBody as m, runGen as n, fromMetadata as o, escape as p, UNFORMATTED as r, AUTHORIZATION_RULES as s, refuseRowConditionedBuckets as t, COMMANDS as u, BLOCK_PREFIX as v, appViewsOf as x, blockTargets as y };

package/dist/cli/{run-DYhLBcFW.js → run-MRET30vh.js}

@@ -1,6 +1,6 @@
 import { c as COMMANDS, d as GROUPS, f as RESERVED_NAMES, h as runCommand, i as joinRepeated, m as parseArgs$2, o as listArgs, s as runsWithInvalidConfig, t as GLOBAL_ARGS, u as DOCS_ORIGIN } from "./command-CQ61x6gN.js";
 import { n as highlight, r as painter } from "./style-Bm2X5JrN.js";
-import { t as VERSION } from "./version-Du4CgONY.js";
+import { t as VERSION } from "./version-B2Dr6VmJ.js";
 import { n as CliError, o as toCliError } from "./errors-BTe6A15O.js";
 import { a as missingInputNext, o as resolveAgent, t as checkConsent } from "./agent-CbuPvI2x.js";
 import { a as globalFlags, c as resolveCommand, i as commandTree, n as closestName, o as isVariadic, r as commandArgs, t as checkArgs } from "./parse-B9Iv_-Pf.js";
@@ -16,35 +16,35 @@ import { resolve } from "node:path";
 * loads on demand, so `--version` and `--help` import no command.
 */
 const LOADERS = [
-	["init", () => import("./init-D-aDv9r5.js").then((m) => m.initCommand)],
-	["add", () => import("./add-DWjlVwvP.js").then((m) => m.addCommand)],
-	["remove", () => import("./remove-B46Dmd2M.js").then((m) => m.removeCommand)],
-	["upgrade", () => import("./upgrade-Dw3TMQzn.js").then((m) => m.upgradeCommand)],
-	["gen", () => import("./gen-MtijJQ9r.js").then((m) => m.genCommand)],
-	["doctor", () => import("./doctor-DDrEM6S1.js").then((m) => m.doctorCommand)],
+	["init", () => import("./init-CHj9ad4S.js").then((m) => m.initCommand)],
+	["add", () => import("./add-Bfb_ISrO.js").then((m) => m.addCommand)],
+	["remove", () => import("./remove-DK2G_KHm.js").then((m) => m.removeCommand)],
+	["upgrade", () => import("./upgrade-fVsJniXm.js").then((m) => m.upgradeCommand)],
+	["gen", () => import("./gen-CFkYUnWq.js").then((m) => m.genCommand)],
+	["doctor", () => import("./doctor-DkOSLPEQ.js").then((m) => m.doctorCommand)],
 	["db query", () => import("./db-DrBI_HNv.js").then((m) => m.dbQueryCommand)],
 	["db diff", () => import("./db-DrBI_HNv.js").then((m) => m.dbDiffCommand)],
 	["db seed", () => import("./seed-D6XijwbR.js").then((m) => m.seedCommand)],
-	["db backfill", () => import("./backfill-nxPbcsns.js").then((m) => m.dbBackfillCommand)],
+	["db backfill", () => import("./backfill-DIz5DnlQ.js").then((m) => m.dbBackfillCommand)],
 	["dev env", () => import("./env-CAU1nknN.js").then((m) => m.envCommand)],
 	["dev run", () => import("./run-BXx6D1aR.js").then((m) => m.runCommand)],
 	["dev keys", () => import("./keys-DGEpMbeB.js").then((m) => m.keysCommand)],
 	["dev stack ls", () => import("./stack-CWEHdO0b.js").then((m) => m.stackLsCommand)],
 	["dev stack prune", () => import("./stack-CWEHdO0b.js").then((m) => m.stackPruneCommand)],
-	["blocks list", () => import("./blocks-Cr4HGePW.js").then((m) => m.blocksListCommand)],
-	["blocks view", () => import("./blocks-Cr4HGePW.js").then((m) => m.blocksViewCommand)],
-	["blocks search", () => import("./blocks-Cr4HGePW.js").then((m) => m.blocksSearchCommand)],
-	["spec emit", () => import("./spec-g8_G5K7o.js").then((m) => m.specEmitCommand)],
-	["spec validate", () => import("./spec-g8_G5K7o.js").then((m) => m.specValidateCommand)],
-	["mcp", () => import("./mcp-BAPyaQ62.js").then((m) => m.mcpCommand)],
+	["blocks list", () => import("./blocks-Bp5RPoft.js").then((m) => m.blocksListCommand)],
+	["blocks view", () => import("./blocks-Bp5RPoft.js").then((m) => m.blocksViewCommand)],
+	["blocks search", () => import("./blocks-Bp5RPoft.js").then((m) => m.blocksSearchCommand)],
+	["spec emit", () => import("./spec-DUjOtciN.js").then((m) => m.specEmitCommand)],
+	["spec validate", () => import("./spec-DUjOtciN.js").then((m) => m.specValidateCommand)],
+	["mcp", () => import("./mcp-BZno503V.js").then((m) => m.mcpCommand)],
 	["skills list", () => import("./skills-toUan_OV.js").then((m) => m.skillsListCommand)],
 	["skills install", () => import("./skills-toUan_OV.js").then((m) => m.skillsInstallCommand)],
-	["codemod 0.4", () => import("./codemod-DSN7iAdg.js").then((m) => m.codemodCommand("0.4"))],
-	["codemod 0.5", () => import("./codemod-DSN7iAdg.js").then((m) => m.codemodCommand("0.5"))],
-	["codemod 0.6", () => import("./codemod-DSN7iAdg.js").then((m) => m.codemodCommand("0.6"))],
-	["codemod 0.9", () => import("./codemod-DSN7iAdg.js").then((m) => m.codemodCommand("0.9"))],
-	["codemod 0.11", () => import("./codemod-DSN7iAdg.js").then((m) => m.codemodCommand("0.11"))],
-	["codemod 0.15", () => import("./codemod-DSN7iAdg.js").then((m) => m.codemodCommand("0.15"))],
+	["codemod 0.4", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.4"))],
+	["codemod 0.5", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.5"))],
+	["codemod 0.6", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.6"))],
+	["codemod 0.9", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.9"))],
+	["codemod 0.11", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.11"))],
+	["codemod 0.15", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.15"))],
 	["completion", () => import("./completion-BwI0_Ap5.js").then((m) => m.completionCommand)],
 	["config", () => import("./config-CPux9Wa7.js").then((m) => m.configCommand)]
 ];

package/dist/cli/{shared-LZroULBe.js → shared-BLqbvY2x.js}

@@ -1,4 +1,4 @@
-import { a as toCatalog } from "./source-DANaJJVc.js";
+import { a as toCatalog } from "./source-D2gJHKwC.js";
 import { h as tomlGet, p as sqlWorkflow, r as detectWorkflow } from "./supabase-toml-CncmQbO0.js";
 //#region src/cli/doctor/shared.ts
 const catalogs = /* @__PURE__ */ new WeakMap();

package/dist/cli/{snapshot-C8MVPyO8.js → snapshot-uTUlEzY2.js}

@@ -1,7 +1,7 @@
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
-import { d as readExtras, l as TYPEGEN_VERSION, r as cachedIntrospect } from "./cache-CXgR_Ahi.js";
+import { d as readExtras, l as TYPEGEN_VERSION, r as cachedIntrospect } from "./cache-AznIssjI.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
-import { n as managementSource, r as pgSource } from "./source-DANaJJVc.js";
+import { n as managementSource, r as pgSource } from "./source-D2gJHKwC.js";
 import { n as databaseUrl, u as accessToken } from "./config-9t5ec_N7.js";
 import { d as readSupabaseToml, f as schemaPaths, h as tomlGet, u as pgFunctionHooks } from "./supabase-toml-CncmQbO0.js";
 import { t as connect } from "./db-CQCLx7cx.js";

package/dist/cli/{source-DANaJJVc.js → source-D2gJHKwC.js}

@@ -1,4 +1,4 @@
-import { t as VERSION } from "./version-Du4CgONY.js";
+import { t as VERSION } from "./version-B2Dr6VmJ.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { r as redactUrl } from "./redact-KGAk2Ul9.js";
 import { n as HTTP_CHANNEL } from "./trace-VbdO6bcN.js";

package/dist/cli/{spec-DGVNMSSB.js → spec-Cm2einTO.js}

@@ -1,9 +1,9 @@
 import { n as __require, t as __commonJSMin } from "./rolldown-runtime-kJ_i4yPo.js";
 import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
-import { t as VERSION } from "./version-Du4CgONY.js";
+import { t as VERSION } from "./version-B2Dr6VmJ.js";
 import { i as failedResult, n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { c as writeAtomic, t as CACHE_DIR } from "./cache-CXgR_Ahi.js";
+import { c as writeAtomic, t as CACHE_DIR } from "./cache-AznIssjI.js";
 import { t as isRecord } from "./guards-CUlDNYZs.js";
 import { t as importFresh } from "./fresh-import-DzgsGHkX.js";
 import { a as changedFiles, i as changeLines, r as applyPlan } from "./files-CX71yBm8.js";

package/dist/cli/{spec-g8_G5K7o.js → spec-DUjOtciN.js}

@@ -1 +1 @@
-export { n as specEmitCommand, i as specValidateCommand } from "./spec-DGVNMSSB.js";
+export { n as specEmitCommand, i as specValidateCommand } from "./spec-Cm2einTO.js";

package/dist/cli/sql-layout-lUWenjJw.js

@@ -0,0 +1,247 @@
+import { d as TypegenMissingError, i as parseSnapshot } from "./snapshot-uTUlEzY2.js";
+import { a as toCatalog } from "./source-D2gJHKwC.js";
+import { d as readSupabaseToml, f as schemaPaths, n as declarativeSchemasDir, p as sqlWorkflow } from "./supabase-toml-CncmQbO0.js";
+import { existsSync } from "node:fs";
+import { dirname, join, relative, resolve, sep } from "node:path";
+import { readFile, readdir } from "node:fs/promises";
+import { adoptedColumnProblems, auditRegistrations, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, extensionSchema, moduleLayout, policyGrants, resolveBlocks, resolveExposeColumns, rlsTables, sameTenantLayout } from "better-supabase/sql";
+//#region src/cli/sql-layout.ts
+/** The folder the module data files sit next to, for the project's workflow. */
+async function schemasDirOf(config) {
+	const toml = await readSupabaseToml(config.root);
+	return declarativeSchemasDir(toml, sqlWorkflow(config, toml));
+}
+/** The declarative schema files, then the migrations oldest first. */
+async function schemaTexts(config) {
+	const toml = await readSupabaseToml(config.root);
+	const migrations = resolve(config.root, migrationsDir(config));
+	const paths = [...(await schemaPaths(config.root, toml, sqlWorkflow(config, toml))).files, ...existsSync(migrations) ? (await readdir(migrations)).filter((name) => name.endsWith(".sql")).toSorted().map((name) => join(migrations, name)) : []];
+	return Promise.all(paths.map(async (path) => ({
+		path,
+		text: await readFile(resolve(config.root, path), "utf-8")
+	})));
+}
+async function declarativeTexts(config) {
+	const toml = await readSupabaseToml(config.root);
+	const { files } = await schemaPaths(config.root, toml, sqlWorkflow(config, toml));
+	if (files.length === 0) return schemaTexts(config);
+	return Promise.all(files.map(async (path) => ({
+		path,
+		text: await readFile(resolve(config.root, path), "utf-8")
+	})));
+}
+/**
+* The `better_supabase.audit(...)` calls in the declarative schemas, then the
+* migrations oldest first, so a later call or `unaudit` wins.
+*/
+async function auditedTables(config) {
+	return auditRegistrations(await schemaTexts(config));
+}
+/**
+* The layout `upgrade` and doctor render the module files with, so both see the
+* same grants, session policies, audit triggers and vector schema.
+*/
+async function moduleLayoutFor(config, input) {
+	const resolved = new Set(resolveBlocks(input.names, input.entitlementsProvider ? { entitlementsProvider: input.entitlementsProvider } : {}).map((module) => module.name));
+	const own = await ownLayout(config);
+	const adopted = adoptedColumnProblems(config.blocks, await declarativeTexts(config), config.schemas, own.ownTables);
+	if (adopted.length > 0) throw new TypeError(adopted.join("\n"));
+	const fromPolicies = resolved.has("grants") && config.blocks["grants"]?.options?.["fromPolicies"] === true;
+	const sessionPolicies = resolved.has("sessions") && config.blocks["sessions"]?.options?.["policies"] === true;
+	const sameTenant = config.blocks["memberships"]?.options?.["sameTenant"];
+	const autoSameTenant = resolved.has("memberships") && typeof sameTenant === "object" && sameTenant !== null && "auto" in sameTenant && sameTenant.auto === true;
+	const base = moduleLayout(config, input.testsDir, input.readSets ?? [], input.entitlementsProvider, input.accessProvider, input.permissionCatalog);
+	const grants = base.grants === void 0 ? void 0 : resolveExposeColumns(base.grants, await declarativeTexts(config), config.schemas);
+	return {
+		...base,
+		...grants === void 0 ? {} : { grants },
+		schemasDir: await schemasDirOf(config),
+		...resolved.has("audit") ? { auditedTables: await auditedTables(config) } : {},
+		...resolved.has("vector-search") ? vectorSchemaOf(await schemaTexts(config)) : {},
+		...fromPolicies ? { policyGrants: policyGrants(await declarativeTexts(config), config.schemas) } : {},
+		...fromPolicies ? { rlsTables: rlsTables(await declarativeTexts(config), config.schemas) } : {},
+		...autoSameTenant ? sameTenantLayout(await declarativeTexts(config), config.schemas) : {},
+		...fromPolicies || sessionPolicies ? { declaredTables: declaredTables(await declarativeTexts(config), config.schemas) } : {},
+		...own
+	};
+}
+/**
+* `ownTables`, `ownViews`, `ownColumns`, `ownUpdatedAtTriggers` and
+* `ownPolicies`: the database's tables and views, then the app's files.
+*/
+async function ownLayout(config) {
+	const database = await databaseTables(config);
+	const own = (await declarativeTexts(config)).filter((source) => !writtenByBlocks(source));
+	const columns = Object.fromEntries([...declaredTableColumns(own, config.schemas)].map(([table, names]) => [table, [...names]]));
+	const views = ownDeclaredViews(own, config.schemas);
+	return {
+		ownTables: {
+			...database.tables,
+			...ownDeclaredTables(own, config.schemas),
+			...views.tables
+		},
+		ownViews: {
+			...database.views,
+			...views.views
+		},
+		ownColumns: {
+			...database.columns,
+			...columns,
+			...views.columns
+		},
+		ownUpdatedAtTriggers: {
+			...database.updatedAtTriggers,
+			...declaredUpdatedAtTriggers(own, config.schemas)
+		},
+		ownPolicies: {
+			...database.policies,
+			...declaredPolicies(own, config.schemas)
+		}
+	};
+}
+/** A trigger function named like one that keeps `updated_at` current. */
+const UPDATED_AT_FUNCTION = /updated_at|moddatetime|touch/i;
+const BLOCK_MARKER = /^-- @(?:bsb-block|bsb-tables|bs-module|bs-app-tables)\b/m;
+const BLOCK_MIGRATION = /_better_supabase_[a-z_]+\.sql$/;
+/**
+* The `schema.table`s that the files better-supabase wrote create, among
+* `sources`; a table an app table entry enriches is not one of them.
+*/
+function blockDeclaredTables(sources, schemas) {
+	return new Set(declaredTables(sources.filter(writtenByBlocks), schemas));
+}
+/** A file better-supabase wrote: a block file or a module migration. */
+function writtenByBlocks(source) {
+	return BLOCK_MARKER.test(source.text) || BLOCK_MIGRATION.test(source.path);
+}
+/**
+* The tables in the saved snapshot (`source.snapshot`) that no block file or
+* module migration created, mapped to `database`. Without a snapshot, the app's
+* schema files and migrations stand in for it.
+*/
+async function databaseTables(config) {
+	const none = {
+		tables: {},
+		views: {},
+		columns: {},
+		updatedAtTriggers: {},
+		policies: {}
+	};
+	const path = config.source.snapshot;
+	if (path === void 0 || !existsSync(resolve(config.root, path))) return none;
+	let snapshot;
+	try {
+		snapshot = await parseSnapshot(JSON.parse(await readFile(resolve(config.root, path), "utf-8")), path);
+	} catch (cause) {
+		if (cause instanceof TypegenMissingError) return none;
+		throw cause;
+	}
+	const created = blockDeclaredTables(await schemaTexts(config), config.schemas);
+	const tables = {};
+	const views = {};
+	const columns = {};
+	const updatedAtTriggers = {};
+	const policies = {};
+	for (const table of toCatalog(snapshot).tables) {
+		const name = `${table.schema}.${table.name}`;
+		if (config.schemas.includes(table.schema) && !created.has(name)) {
+			tables[name] = "database";
+			columns[name] = table.columns.map((column) => column.name);
+			if (table.kind === "view") views[name] = { updatable: table.insertable && table.updatable };
+			const kept = table.triggers.find((trigger) => !trigger.name.startsWith("bsb_") && trigger.events.includes("update") && UPDATED_AT_FUNCTION.test(trigger.function));
+			if (kept !== void 0) updatedAtTriggers[name] = kept.name;
+			policies[name] = table.policies.filter((policy) => !policy.name.startsWith("bsb_"));
+		}
+	}
+	return {
+		tables,
+		views,
+		columns,
+		updatedAtTriggers,
+		policies
+	};
+}
+/**
+* `schema.table` to the app's own schema file that creates it: every
+* declarative file, or migration, that better-supabase didn't write.
+*/
+function ownDeclaredTables(sources, schemas) {
+	const ownTables = {};
+	for (const source of sources) for (const table of declaredTables([source], schemas)) ownTables[table] ??= source.path;
+	return ownTables;
+}
+/**
+* The views and materialized views the app's own files create, as `ownTables`
+* entries, with their columns where the files name them.
+*/
+function ownDeclaredViews(sources, schemas) {
+	const tables = {};
+	const views = {};
+	const columns = {};
+	for (const source of sources) for (const [view, declared] of declaredViews([source], schemas)) {
+		tables[view] ??= source.path;
+		views[view] = { updatable: declared.updatable };
+		if (declared.columns !== void 0) columns[view] = declared.columns;
+	}
+	return {
+		tables,
+		views,
+		columns
+	};
+}
+function vectorSchemaOf(sources) {
+	const schema = extensionSchema(sources, "vector");
+	return schema === void 0 ? {} : { vectorSchema: schema };
+}
+/**
+* The folder that holds both the project root and `sql.dir`: the root, or an
+* ancestor when `sql.dir` points at a shared stack. The `sql` commands write
+* SQL files only inside it.
+*/
+function sqlRoot(config) {
+	const dir = resolve(config.root, config.sql.dir);
+	let stop = resolve(config.root);
+	while (dir !== stop && !dir.startsWith(stop + sep) && dirname(stop) !== stop) stop = dirname(stop);
+	return stop;
+}
+/**
+* A plan for files under the project root or `sql.dir`, with paths relative to
+* the project root.
+*/
+function sqlPlan(config, plan) {
+	return {
+		...plan,
+		root: sqlRoot(config),
+		base: config.root,
+		files: plan.files.map((file) => ({
+			...file,
+			path: resolve(config.root, file.path)
+		})),
+		...plan.remove ? { remove: plan.remove.map((entry) => {
+			const path = resolve(config.root, typeof entry === "string" ? entry : entry.path);
+			return typeof entry === "string" ? path : {
+				...entry,
+				path
+			};
+		}) } : {}
+	};
+}
+/**
+* The migrations folder next to the `config.toml` found walking up from
+* `sql.dir`, relative to the root; `supabase/migrations` without one. The walk
+* stops where `sql.dir` and the root meet, so a `sql.dir` outside the project
+* (a shared stack in a monorepo) finds that stack's folder.
+*/
+function migrationsDir(config) {
+	const root = resolve(config.root);
+	let dir = resolve(root, config.sql.dir);
+	const stop = sqlRoot(config);
+	for (;;) {
+		if (existsSync(join(dir, "config.toml"))) return relative(root, join(dir, "migrations")).replaceAll("\\", "/");
+		if (dir === stop || dirname(dir) === dir) break;
+		dir = dirname(dir);
+	}
+	return "supabase/migrations";
+}
+//#endregion
+export { sqlPlan as a, schemasDirOf as i, migrationsDir as n, writtenByBlocks as o, moduleLayoutFor as r, blockDeclaredTables as t };

package/dist/cli/{sync-btj01bcM.js → sync-CZMRB3aU.js}

@@ -1,8 +1,9 @@
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { C as sqlPlan, _ as layoutFor, c as sameModuleMigration, d as DATA_NEXT, l as writeLatestMigration, m as writeExtensionsMigration, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations, x as migrationsDir } from "./module-migration-aPCckev6.js";
+import { _ as layoutFor, c as sameModuleMigration, d as DATA_NEXT, l as writeLatestMigration, m as writeExtensionsMigration, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations } from "./module-migration-O_IxewFs.js";
 import { d as readSupabaseToml, f as schemaPaths, h as tomlGet, i as diffEngine, l as migrationCommand, o as findSupabaseRoot, p as sqlWorkflow, t as PGDELTA_TABLE } from "./supabase-toml-CncmQbO0.js";
 import { d as fileDiff, i as changeLines, l as keepHandEdit, o as handEditedError, r as applyPlan, t as HAND_EDITED, u as planResult } from "./files-CX71yBm8.js";
+import { a as sqlPlan, n as migrationsDir } from "./sql-layout-lUWenjJw.js";
 import { t as loadTopics } from "./topics-BpdnYmWb.js";
 import { t as orphanedBlockFiles } from "./orphans-BAboqyVM.js";
 import { dirname, join, resolve } from "node:path";

package/dist/cli/{upgrade-B596d4t8.js → upgrade-BFEIMC7U.js}

@@ -1,145 +1,12 @@
 import { t as display } from "./io-DH1kcmmP.js";
-import { C as sqlPlan, _ as layoutFor, a as migrationInstances, c as sameModuleMigration, o as migrationModules, p as migrationStamp, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations, x as migrationsDir } from "./module-migration-aPCckev6.js";
+import { _ as layoutFor, a as migrationInstances, c as sameModuleMigration, o as migrationModules, p as migrationStamp, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations } from "./module-migration-O_IxewFs.js";
 import { d as fileDiff, i as changeLines, r as applyPlan } from "./files-CX71yBm8.js";
-import { a as write, o as topicPolicyFile, r as nextStep } from "./sync-btj01bcM.js";
+import { a as sqlPlan, n as migrationsDir } from "./sql-layout-lUWenjJw.js";
+import { a as write, o as topicPolicyFile, r as nextStep } from "./sync-CZMRB3aU.js";
+import { a as legacyPrefixSql, i as legacyPrefixNames, r as legacyBlocksTableSql } from "./legacy-prefix-DkTA3Rhx.js";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";
 import { BLOCK_RENAMES, SQL_MODULES, currentBlockName, entityRenamePlan, formerBlockName, moduleFileVersion, moduleTopics, renderBlocks, sameBlockFile, upgradePlan } from "better-supabase/sql";
-//#region src/cli/sql/legacy-prefix.ts
-/**
-* Prefixes of the names the library builds outside the module files (realtime
-* broadcast triggers, tenant checks, state transitions, JSON Schema checks).
-*/
-const LEGACY_PREFIXES = [
-	"bs_broadcast_",
-	"bs_same_tenant_",
-	"bs_transition_",
-	"bs_json_"
-];
-const LEGACY_NAME = /\bbs_[a-z0-9_]+/g;
-/** The `bs_` object names in installed module SQL, before 0.15 renamed them. */
-function legacyPrefixNames(text) {
-	return [...new Set(text.match(LEGACY_NAME))].toSorted();
-}
-const array = (values) => `array[${values.map((value) => `'${value.replaceAll("'", "''")}'`).join(", ")}]::text[]`;
-/**
-* Renames the installed `bs_` triggers, policies, constraints, indexes and
-* functions to `bsb_`, so the module files' `drop ... if exists bsb_x` replace
-* them instead of adding a second copy. Only the names in `names` and the
-* runtime prefixes are renamed, and only while the new name is free, so the
-* step can run again.
-*/
-function legacyPrefixSql(names) {
-	return `do $bsb_rename$
-declare
-  v_names constant text[] := ${array(names)};
-  v_prefixes constant text[] := ${array(LEGACY_PREFIXES)};
-  r record;
-begin
-  for r in
-    select t.tgname as name, t.tgrelid::regclass::text as rel
-    from pg_trigger t
-    where not t.tgisinternal
-      and (t.tgname = any (v_names) or exists (select 1 from unnest(v_prefixes) x where starts_with(t.tgname, x)))
-      and not exists (select 1 from pg_trigger u where u.tgrelid = t.tgrelid and u.tgname = 'bsb_' || substr(t.tgname, 4))
-  loop
-    begin
-      execute format('alter trigger %I on %s rename to %I', r.name, r.rel, 'bsb_' || substr(r.name, 4));
-    exception when insufficient_privilege then
-      raise warning 'better-supabase: rename % to bsb_% by hand; the migration role does not own it', r.name, substr(r.name, 4);
-    end;
-  end loop;
-
-  for r in
-    select p.polname as name, p.polrelid::regclass::text as rel
-    from pg_policy p
-    where (p.polname = any (v_names) or exists (select 1 from unnest(v_prefixes) x where starts_with(p.polname, x)))
-      and not exists (select 1 from pg_policy q where q.polrelid = p.polrelid and q.polname = 'bsb_' || substr(p.polname, 4))
-  loop
-    begin
-      execute format('alter policy %I on %s rename to %I', r.name, r.rel, 'bsb_' || substr(r.name, 4));
-    exception when insufficient_privilege then
-      raise warning 'better-supabase: rename % to bsb_% by hand; the migration role does not own it', r.name, substr(r.name, 4);
-    end;
-  end loop;
-
-  for r in
-    select c.conname as name, c.conrelid::regclass::text as rel
-    from pg_constraint c
-    where c.conrelid <> 0
-      and (c.conname = any (v_names) or exists (select 1 from unnest(v_prefixes) x where starts_with(c.conname, x)))
-      and not exists (select 1 from pg_constraint d where d.conrelid = c.conrelid and d.conname = 'bsb_' || substr(c.conname, 4))
-  loop
-    begin
-      execute format('alter table %s rename constraint %I to %I', r.rel, r.name, 'bsb_' || substr(r.name, 4));
-    exception when insufficient_privilege then
-      raise warning 'better-supabase: rename % to bsb_% by hand; the migration role does not own it', r.name, substr(r.name, 4);
-    end;
-  end loop;
-
-  for r in
-    select n.nspname as schema, i.relname as name
-    from pg_class i
-    join pg_namespace n on n.oid = i.relnamespace
-    where i.relkind in ('i', 'I')
-      and (i.relname = any (v_names) or exists (select 1 from unnest(v_prefixes) x where starts_with(i.relname, x)))
-      and not exists (select 1 from pg_constraint c where c.conindid = i.oid)
-      and to_regclass(format('%I.%I', n.nspname, 'bsb_' || substr(i.relname, 4))) is null
-  loop
-    begin
-      execute format('alter index %I.%I rename to %I', r.schema, r.name, 'bsb_' || substr(r.name, 4));
-    exception when insufficient_privilege then
-      raise warning 'better-supabase: rename % to bsb_% by hand; the migration role does not own it', r.name, substr(r.name, 4);
-    end;
-  end loop;
-
-  for r in
-    select f.oid::regprocedure::text as fn, f.proname as name
-    from pg_proc f
-    join pg_namespace n on n.oid = f.pronamespace
-    where n.nspname not in ('pg_catalog', 'information_schema')
-      and (f.proname = any (v_names) or exists (select 1 from unnest(v_prefixes) x where starts_with(f.proname, x)))
-      and not exists (
-        select 1 from pg_proc g
-        where g.pronamespace = f.pronamespace and g.proname = 'bsb_' || substr(f.proname, 4)
-          and g.proargtypes = f.proargtypes
-      )
-  loop
-    begin
-      execute format('alter function %s rename to %I', r.fn, 'bsb_' || substr(r.name, 4));
-    exception when insufficient_privilege then
-      raise warning 'better-supabase: rename % to bsb_% by hand; the migration role does not own it', r.name, substr(r.name, 4);
-    end;
-  end loop;
-end
-$bsb_rename$;`;
-}
-/**
-* Creates `better_supabase.blocks` and copies the rows of the 0.14
-* `better_supabase.modules` table into it, so the schema diff that drops the
-* old table loses no installed versions.
-*/
-const legacyBlocksTableSql = `create schema if not exists better_supabase;
-create table if not exists better_supabase.blocks (
-  name text primary key,
-  version integer not null,
-  mode text not null,
-  installed_at timestamptz not null default now(),
-  updated_at timestamptz not null default now()
-);
-alter table better_supabase.blocks enable row level security;
-revoke all on better_supabase.blocks from anon, authenticated;
-grant select on better_supabase.blocks to service_role;
-do $bsb_blocks$
-begin
-  if to_regclass('better_supabase.modules') is not null then
-    insert into better_supabase.blocks (name, version, mode, installed_at, updated_at)
-    select name, version, mode, installed_at, updated_at from better_supabase.modules
-    on conflict (name) do nothing;
-  end if;
-end
-$bsb_blocks$;`;
-//#endregion
 //#region src/cli/sql/renamed-blocks.ts
 /** Block names match `[a-z0-9-]+`, so quoting needs no escaping. */
 const literal = (name) => `'${name}'`;

package/dist/cli/{upgrade-Dw3TMQzn.js → upgrade-fVsJniXm.js}

@@ -1,8 +1,8 @@
 import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
-import { t as syncModules } from "./sync-btj01bcM.js";
+import { t as syncModules } from "./sync-CZMRB3aU.js";
 import { t as SQL_ARGS } from "./args-UEwg0l-N.js";
-import { t as upgrade } from "./upgrade-B596d4t8.js";
+import { t as upgrade } from "./upgrade-BFEIMC7U.js";
 //#region src/cli/commands/upgrade.ts
 const UPGRADE_ARGS = {
 	check: {

package/dist/cli/{version-Du4CgONY.js → version-B2Dr6VmJ.js}

@@ -1,4 +1,4 @@
 //#region src/cli/version.ts
-const VERSION = "0.15.0";
+const VERSION = "0.16.0";
 //#endregion
 export { VERSION as t };

package/dist/client/index.d.ts

@@ -1,8 +1,8 @@
 import { a as DataSync, c as LocalTablesOption, i as DataEntry, l as liveEngine, n as DataEngine, o as DataSyncState, r as DataEngineOptions, s as LiveEngineOptions, t as DataChanges, u as memoryEngine } from "../data-engine-BWoz9lED.js";
-import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-BcGfvZOE.js";
-import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../ports-sx226JUL.js";
-import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../bind-CrMBwrPN.js";
-import { a as defineController, i as ControllerState, n as Controller, o as whileSignedIn, r as ControllerParts, t as AuthPort } from "../controller-BrP0gn47.js";
+import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-BAxoPKZx.js";
+import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../ports-mObLgH1z.js";
+import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../bind-JGCPGUJh.js";
+import { a as defineController, i as ControllerState, n as Controller, o as whileSignedIn, r as ControllerParts, t as AuthPort } from "../controller-BW-5Opig.js";
 import { n as FunctionContract } from "../function-contract-DxFNOmsm.js";
-import { a as webDeepLinks, c as webPorts, d as FunctionContracts, f as FunctionsHost, h as functions, i as WebPushTokenOptions, l as webPushToken, m as TypedFunctions, n as createClient, o as webFilePicker, p as InvokeOptions, r as PushRegistrationLike, s as webKeyboard, t as ClientOptions, u as webStorage } from "../index-BUuVq1co.js";
+import { a as webDeepLinks, c as webPorts, d as FunctionContracts, f as FunctionsHost, h as functions, i as WebPushTokenOptions, l as webPushToken, m as TypedFunctions, n as createClient, o as webFilePicker, p as InvokeOptions, r as PushRegistrationLike, s as webKeyboard, t as ClientOptions, u as webStorage } from "../index-DZKCc2WM.js";
 export { type AuthPort, type AuthSnapshot, type AuthUser, type BetterClient, type BindClientOptions, type ClientAuth, ClientOptions, type ClientPorts, type Controller, type ControllerParts, type ControllerState, type DataChanges, type DataEngine, type DataEngineOptions, type DataEntry, type DataSync, type DataSyncState, type DeepLinkPort, type FilePickerPort, type FunctionContract, type FunctionContracts, type FunctionsHost, type InvokeOptions, type KeyboardPort, type LiveEngineOptions, type LocalTablesOption, type PickFilesOptions, type PickedFile, type PushRegistrationLike, type PushTokenPort, type Shortcut, type StoragePort, type TopicHandle, type TopicPort, type TopicWatch, type TypedFunctions, type UploadDestination, type UploadPort, type WebPushTokenOptions, bindClient, createClient, defineController, functions, liveEngine, memoryEngine, memoryStorage, storageUpload, webDeepLinks, webFilePicker, webKeyboard, webPorts, webPushToken, webStorage, whileSignedIn };

package/dist/client/index.js

@@ -2,7 +2,7 @@ import { n as dbError } from "../errors-BVFgt8BZ.js";
 import { a as ok, r as err, t as AsyncResult } from "../result-ntFBW2p2.js";
 import { i as isProblem, r as fromProblem } from "../problem-Bf0cJ7tk.js";
 import { EnvValidationError, parseEnv } from "../env/index.js";
-import { n as storageUpload, r as bindClient, t as memoryStorage } from "../ports-DOhtuw3c.js";
+import { n as storageUpload, r as bindClient, t as memoryStorage } from "../ports-CaVRXjxq.js";
 import { a as memoryEngine, n as liveEngine } from "../data-engine-D1BkmBoR.js";
 import { n as whileSignedIn, t as defineController } from "../controller-BEliOBOv.js";
 import { createBrowserClient } from "@supabase/ssr";