better-supabase 0.15.1 → 0.17.0

package/dist/sql/index.d.ts

@@ -1,5 +1,5 @@
-import { A as BLOCK_OPTION_SCHEMAS, O as resolveBlock, j as BlockOptionsRegistry } from "../authorization-HZdJCaVm.js";
-import { C as OwnView, Qn as auditRegistrations, S as BlockSqlUpgrade, T as notNullCheckName, Xn as sameTenantLayout, Yn as DeclaredForeignKey, Zn as AuditedTable, _ as BlockSqlDeprecation, a as BlockSqlContext, b as BlockSqlLayout, c as BlockSqlIdType, d as MODULE_ID_TYPES, f as contractSignature, g as BlockSqlAccessProvider, h as BlockSql, i as BlockSqlAudit, l as BlockSqlNames, m as moduleIdType, n as AuditCategory, o as BlockSqlContractFunction, p as isBlockSqlIdType, r as BlockSqlAction, s as BlockSqlEmit, t as AUDIT_CATEGORIES, u as BlockSqlTableSpec, v as BlockSqlEntitlementsProvider, w as blockSqlVersion, x as BlockSqlTestFile, y as BlockSqlFile } from "../context-TGX2eDS5.js";
-import { a as appTableEventTypes } from "../app-tables-CbCFSXLG.js";
-import { $ as modulePermissionKeys, A as sameTenantColumn, B as adoptedTables, C as extensionSchema, D as TenantQuery, E as subjectColumns, F as excludedColumns, G as DEFAULT_ROLES, H as APP_TABLES_MARKER, I as resolveExposeColumns, J as resolveBlocks, K as instanceFunctions, L as AdoptedTable, M as DataExportPlan, N as SECRET_COLUMNS, O as tenantsQuery, P as dataExportPlan, Q as moduleHidingColumns, R as AdoptedView, S as declaredViews, St as renderBlocks, T as rlsTables, U as APP_TABLES_MODULE, V as adoptedViews, W as appTablesFiles, X as BlockSqlPermissionKey, Y as BlockSqlExtension, Z as moduleEventTriggers, _ as DeclaredView, _t as upgradePlan, a as hasColumnAccess, at as moduleDataDir, b as declaredTables, bt as moduleBody, c as compileReadSets, ct as EntityRenameStep, d as migrationOptionUses, dt as currentBlockName, et as moduleSchemaExtensions, f as moduleLayout, ft as formerBlockName, g as templateFunctions, gt as moduleDeprecations, h as scopeProblems, ht as InstalledBlock, i as scopePolicyName, it as sameBlockFile, j as sameTenantTrigger, k as expiredFlagsQuery, l as sharedRolesProblems, lt as entityRenamePlan, m as resolveProviderSql, mt as BlockSqlUpgradePlan, n as widenedCommands, nt as isModuleDataFile, o as CompiledReadSet, ot as moduleFilePaths, p as SCOPE_ID_TYPES, pt as renamedBlock, q as SQL_MODULES, r as TENANT_SCOPE_POLICY, rt as moduleFileVersion, s as compileReadSet, st as EntityRenamePlan, t as declaredPolicies, tt as blockFileState, u as MigrationOptionUse, ut as BLOCK_RENAMES, v as PolicyGrant, vt as BlockSqlTopic, w as policyGrants, x as declaredUpdatedAtTriggers, xt as moduleTopics, y as declaredTableColumns, yt as customContracts, z as adoptedColumnProblems } from "../index-BfK6olKm.js";
-export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, type AdoptedTable, type AdoptedView, type AuditCategory, type AuditedTable, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, type BlockOptionsRegistry, type BlockSql, type BlockSqlAccessProvider, type BlockSqlAction, type BlockSqlAudit, type BlockSqlContext, type BlockSqlContractFunction, type BlockSqlDeprecation, type BlockSqlEmit, type BlockSqlEntitlementsProvider, type BlockSqlExtension, type BlockSqlFile, type BlockSqlIdType, type BlockSqlLayout, type BlockSqlNames, type BlockSqlPermissionKey, type BlockSqlTableSpec, type BlockSqlTestFile, type BlockSqlTopic, type BlockSqlUpgrade, type BlockSqlUpgradePlan, type CompiledReadSet, DEFAULT_ROLES, type DataExportPlan, type DeclaredForeignKey, type DeclaredView, type EntityRenamePlan, type EntityRenameStep, type InstalledBlock, MODULE_ID_TYPES, type MigrationOptionUse, type OwnView, type PolicyGrant, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, type TenantQuery, adoptedColumnProblems, adoptedTables, adoptedViews, appTableEventTypes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };
+import { M as BlockOptionsRegistry, j as BLOCK_OPTION_SCHEMAS, k as resolveBlock } from "../authorization-CNsvnwle.js";
+import { C as OwnView, Qn as auditRegistrations, S as BlockSqlUpgrade, T as notNullCheckName, Xn as sameTenantLayout, Yn as DeclaredForeignKey, Zn as AuditedTable, _ as BlockSqlDeprecation, a as BlockSqlContext, b as BlockSqlLayout, c as BlockSqlIdType, d as MODULE_ID_TYPES, f as contractSignature, g as BlockSqlAccessProvider, h as BlockSql, i as BlockSqlAudit, l as BlockSqlNames, m as moduleIdType, n as AuditCategory, o as BlockSqlContractFunction, p as isBlockSqlIdType, r as BlockSqlAction, s as BlockSqlEmit, t as AUDIT_CATEGORIES, u as BlockSqlTableSpec, v as BlockSqlEntitlementsProvider, w as blockSqlVersion, x as BlockSqlTestFile, y as BlockSqlFile } from "../context-CKCgjEDF.js";
+import { a as appTableEventTypes } from "../app-tables-dS02piE7.js";
+import { $ as moduleHidingColumns, A as expiredFlagsQuery, B as adoptedColumnProblems, C as declaredViews, Ct as renderBlocks, D as subjectColumns, E as rlsTables, F as dataExportPlan, G as appTablesFiles, H as adoptedViews, I as excludedColumns, J as SQL_MODULES, K as DEFAULT_ROLES, L as resolveExposeColumns, M as sameTenantTrigger, N as DataExportPlan, O as TenantQuery, P as SECRET_COLUMNS, Q as moduleEventTriggers, R as AdoptedTable, S as declaredUpdatedAtTriggers, St as moduleTopics, T as policyGrants, U as APP_TABLES_MARKER, V as adoptedTables, W as APP_TABLES_MODULE, X as BlockSqlExtension, Y as resolveBlocks, Z as BlockSqlPermissionKey, _ as templateFunctions, _t as moduleDeprecations, a as scopePolicyName, at as sameBlockFile, b as declaredTableColumns, bt as customContracts, c as compileReadSet, ct as EntityRenamePlan, d as MigrationOptionUse, dt as BLOCK_RENAMES, et as modulePermissionKeys, f as migrationOptionUses, ft as currentBlockName, g as scopeProblems, gt as InstalledBlock, h as resolveProviderSql, ht as BlockSqlUpgradePlan, i as TENANT_SCOPE_POLICY, it as moduleFileVersion, j as sameTenantColumn, k as tenantsQuery, l as compileReadSets, lt as EntityRenameStep, m as SCOPE_ID_TYPES, mt as renamedBlock, n as declaredPolicies, nt as blockFileState, o as hasColumnAccess, ot as moduleDataDir, p as moduleLayout, pt as formerBlockName, q as instanceFunctions, r as widenedCommands, rt as isModuleDataFile, s as CompiledReadSet, st as moduleFilePaths, t as appTablePolicyNotes, tt as moduleSchemaExtensions, u as sharedRolesProblems, ut as entityRenamePlan, v as DeclaredView, vt as upgradePlan, w as extensionSchema, x as declaredTables, xt as moduleBody, y as PolicyGrant, yt as BlockSqlTopic, z as AdoptedView } from "../index-Dbb7BQdi.js";
+export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, type AdoptedTable, type AdoptedView, type AuditCategory, type AuditedTable, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, type BlockOptionsRegistry, type BlockSql, type BlockSqlAccessProvider, type BlockSqlAction, type BlockSqlAudit, type BlockSqlContext, type BlockSqlContractFunction, type BlockSqlDeprecation, type BlockSqlEmit, type BlockSqlEntitlementsProvider, type BlockSqlExtension, type BlockSqlFile, type BlockSqlIdType, type BlockSqlLayout, type BlockSqlNames, type BlockSqlPermissionKey, type BlockSqlTableSpec, type BlockSqlTestFile, type BlockSqlTopic, type BlockSqlUpgrade, type BlockSqlUpgradePlan, type CompiledReadSet, DEFAULT_ROLES, type DataExportPlan, type DeclaredForeignKey, type DeclaredView, type EntityRenamePlan, type EntityRenameStep, type InstalledBlock, MODULE_ID_TYPES, type MigrationOptionUse, type OwnView, type PolicyGrant, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, type TenantQuery, adoptedColumnProblems, adoptedTables, adoptedViews, appTableEventTypes, appTablePolicyNotes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };

package/dist/sql/index.js

@@ -1,5 +1,5 @@
-import { A as resolveBlock, l as appTableEventTypes, v as hasColumnAccess } from "../app-tables-D29Rahtg.js";
+import { A as resolveBlock, l as appTableEventTypes, v as hasColumnAccess } from "../app-tables-Q0TYfeih.js";
 import { c as templateFunctions, o as resolveProviderSql, s as scopeProblems, t as SCOPE_ID_TYPES } from "../access-sql-B-MkVARa.js";
 import { Y as notNullCheckName, a as DEFAULT_ROLES } from "../workflow-sdk-Bw6_u0ar.js";
-import { $ as contractSignature, A as moduleFileVersion, B as resolveExposeColumns, C as APP_TABLES_MARKER, D as blockSqlVersion, E as scopePolicyName, F as moduleSchemaExtensions, G as sameTenantTrigger, H as dataExportPlan, I as SQL_MODULES, J as currentBlockName, K as migrationOptionUses, L as resolveBlocks, M as moduleEventTriggers, N as moduleHidingColumns, O as blockFileState, P as modulePermissionKeys, Q as MODULE_ID_TYPES, R as TENANT_SCOPE_POLICY, S as moduleFilePaths, T as appTablesFiles, U as subjectColumns, V as SECRET_COLUMNS, W as sameTenantColumn, X as renamedBlock, Y as formerBlockName, Z as AUDIT_CATEGORIES, _ as moduleDeprecations, a as tenantsQuery, at as declaredUpdatedAtTriggers, b as widenedCommands, c as adoptedColumnProblems, ct as policyGrants, d as instanceFunctions, et as isBlockSqlIdType, f as entityRenamePlan, g as renderBlocks, h as moduleTopics, i as moduleLayout, it as declaredTables, j as sameBlockFile, k as isModuleDataFile, l as adoptedTables, lt as rlsTables, m as moduleBody, n as compileReadSets, nt as BLOCK_OPTION_SCHEMAS, o as expiredFlagsQuery, ot as declaredViews, p as customContracts, q as BLOCK_RENAMES, r as sharedRolesProblems, rt as declaredTableColumns, s as sameTenantLayout, st as extensionSchema, t as compileReadSet, tt as moduleIdType, u as adoptedViews, ut as auditRegistrations, v as upgradePlan, w as APP_TABLES_MODULE, x as moduleDataDir, y as declaredPolicies, z as excludedColumns } from "../sql-OLVW4t08.js";
-export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, DEFAULT_ROLES, MODULE_ID_TYPES, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, adoptedColumnProblems, adoptedTables, adoptedViews, appTableEventTypes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };
+import { $ as MODULE_ID_TYPES, A as isModuleDataFile, B as excludedColumns, C as moduleFilePaths, D as scopePolicyName, E as appTablesFiles, F as modulePermissionKeys, G as sameTenantColumn, H as SECRET_COLUMNS, I as moduleSchemaExtensions, J as BLOCK_RENAMES, K as sameTenantTrigger, L as SQL_MODULES, M as sameBlockFile, N as moduleEventTriggers, O as blockSqlVersion, P as moduleHidingColumns, Q as AUDIT_CATEGORIES, R as resolveBlocks, S as moduleDataDir, T as APP_TABLES_MODULE, U as dataExportPlan, V as resolveExposeColumns, W as subjectColumns, X as formerBlockName, Y as currentBlockName, Z as renamedBlock, _ as moduleDeprecations, a as tenantsQuery, at as declaredTables, b as declaredPolicies, c as adoptedColumnProblems, ct as extensionSchema, d as instanceFunctions, dt as auditRegistrations, et as contractSignature, f as entityRenamePlan, g as renderBlocks, h as moduleTopics, i as moduleLayout, it as declaredTableColumns, j as moduleFileVersion, k as blockFileState, l as adoptedTables, lt as policyGrants, m as moduleBody, n as compileReadSets, nt as moduleIdType, o as expiredFlagsQuery, ot as declaredUpdatedAtTriggers, p as customContracts, q as migrationOptionUses, r as sharedRolesProblems, rt as BLOCK_OPTION_SCHEMAS, s as sameTenantLayout, st as declaredViews, t as compileReadSet, tt as isBlockSqlIdType, u as adoptedViews, ut as rlsTables, v as upgradePlan, w as APP_TABLES_MARKER, x as widenedCommands, y as appTablePolicyNotes, z as TENANT_SCOPE_POLICY } from "../sql-ClTmzHs8.js";
+export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, DEFAULT_ROLES, MODULE_ID_TYPES, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, adoptedColumnProblems, adoptedTables, adoptedViews, appTableEventTypes, appTablePolicyNotes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };

package/dist/{sql-OLVW4t08.js → sql-ClTmzHs8.js}

@@ -3,10 +3,10 @@ import { d as temporalText } from "./temporal-DLZlWbOi.js";
 import { r as NEGATIVE, t as FILTER_OPERATORS } from "./filter-query-DMoKo82_.js";
 import { a as ok } from "./result-ntFBW2p2.js";
 import { a as hasPlaceholder, l as splitPlaceholders, s as placeholderOf } from "./read-set-BnKnofIj.js";
-import { a as resolveNames, n as instancePrefix, o as resolveJsonSchema, r as isRenamedInstance, s as CONFIG_DEFAULTS } from "./instances-BHjCZoF8.js";
+import { a as resolveNames, n as instancePrefix, o as resolveJsonSchema, r as isRenamedInstance, s as CONFIG_DEFAULTS } from "./instances-QOzIz9-q.js";
 import { t as DEFAULT_CLAIMS } from "./claims-Bp9My7XP.js";
 import { o as tenantNames, r as composeNames } from "./entity-naming-Dtyq5sKE.js";
-import { A as resolveBlock, D as BLOCK_SCOPES, _ as encryptedColumns, c as appTableEventKinds, g as columnsWithAccess, h as hasComputed, j as tenantNameOf, r as APP_RANK_COLUMN, t as APP_DELETED_AT_COLUMN, u as appTableVersions, v as hasColumnAccess, y as hiddenColumns } from "./app-tables-D29Rahtg.js";
+import { A as resolveBlock, D as BLOCK_SCOPES, _ as encryptedColumns, c as appTableEventKinds, g as columnsWithAccess, h as hasComputed, j as tenantNameOf, r as APP_RANK_COLUMN, t as APP_DELETED_AT_COLUMN, u as appTableVersions, v as hasColumnAccess, y as hiddenColumns } from "./app-tables-Q0TYfeih.js";
 import { a as RATING_BOUNDS, n as CUSTOM_FIELD_TYPES, r as FIELD_FORMATS, t as CUSTOM_FIELD_FORM_TYPES } from "./field-formats-C6QKA3UR.js";
 import { a as sqlString, i as sqlIdent } from "./template-Drgg3v2J.js";
 import { i as fillTemplate, l as templatePlaceholders } from "./access-sql-B-MkVARa.js";
@@ -41,7 +41,7 @@ import { t as contactsSqlOptions } from "./options-BlncUmIc.js";
 import { t as contentSqlOptions } from "./options-1GgseJq5.js";
 import { t as contractsSqlOptions } from "./options-E7KcmHQv.js";
 import { t as coursesSqlOptions } from "./options-63AKQNv0.js";
-import { t as createdBySqlOptions } from "./options-B2swWnJW.js";
+import { t as createdBySqlOptions } from "./options-CCUaRLgd.js";
 import { t as customFieldsSqlOptions } from "./options-BjtrC7o6.js";
 import { t as dataLifecycleSqlOptions } from "./options-C239TLRF.js";
 import { t as dealsSqlOptions } from "./options-DTDxFT6J.js";
@@ -114,7 +114,7 @@ import { t as teamsSqlOptions } from "./options-C6rEL6U5.js";
 import { t as templatesSqlOptions } from "./options-Fz6xqu-b.js";
 import { t as timeTrackingSqlOptions } from "./options-BbnPv6p7.js";
 import { t as trashSqlOptions } from "./options-DWbA9buW.js";
-import { t as updatedAtSqlOptions } from "./options-C-dQHH5-.js";
+import { t as updatedAtSqlOptions } from "./options-tSsUF0-7.js";
 import { t as usageSqlOptions } from "./options-B9q8CROT.js";
 import { t as vercelMarketplaceSqlOptions } from "./options-RKYdmIdV.js";
 import { t as versionsSqlOptions } from "./options-BQIYfx9F.js";
@@ -41629,7 +41629,8 @@ const ACTOR = {
 		options: [
 			"createdBy",
 			"updatedBy",
-			"impersonatedBy"
+			"impersonatedBy",
+			"stamp"
 		]
 	},
 	build: () => `${SCHEMA$5}
@@ -54742,6 +54743,11 @@ function providerEntitlementMembers(provider) {
 * column and key come from the module's own (possibly renamed) names.
 */
 function customerSource(ctx, layout) {
+	const source = resolvedCustomerSource(ctx, layout);
+	if (source === void 0) throw new TypeError("The entitlements module needs auth.entitlements.customer: the table.column with each tenant's Stripe customer id. With the managed billing or organizations module it defaults to that module's customer column.");
+	return source;
+}
+function resolvedCustomerSource(ctx, layout) {
 	const configured = layout.entitlements;
 	if (configured?.table !== void 0 && configured.column !== void 0) return {
 		table: configured.table,
@@ -54769,7 +54775,14 @@ function customerSource(ctx, layout) {
 			deferred: true
 		};
 	}
-	throw new TypeError("The entitlements module needs auth.entitlements.customer: the table.column with each tenant's Stripe customer id. With the managed billing or organizations module it defaults to that module's customer column.");
+}
+function readsOrganizationCustomer(ctx, layout) {
+	if (!ctx.installed("entitlements") || (layout.entitlements?.source ?? "stripe-sync") !== "stripe-sync") return false;
+	const source = resolvedCustomerSource(ctx.of("entitlements"), layout);
+	if (source === void 0) return false;
+	const organizations = ctx.tableName("organizations");
+	const [schema, table] = splitTable$1(source.table);
+	return source.column === "stripe_customer_id" && schema === organizations.schema && table === organizations.name;
 }
 function entitlementsSource(source, layout) {
 	const provider = layout.entitlementsProvider;
@@ -69465,7 +69478,9 @@ function platformTableSql(ctx) {
 	if (!p || !ctx.manages) return "";
 	const c = (logical) => p.col(logical);
 	const add = (logical, type) => p.has(logical) ? `alter table ${p.table} add column if not exists ${c(logical)} ${type};\n` : "";
-	const where = openFilter(p, p.table).replaceAll(`${p.table}.`, "");
+	const where = `${openFilter(p, p.table)}${p.only(p.table)}`.replaceAll(`${p.table}.`, "");
+	const openEmailIndex = sharesTable(ctx) ? `drop index if exists ${sqlIdent(ctx.tableName("invitations").schema)}.platform_invitations_open_email_idx;
+create unique index if not exists invitations_platform_open_email_idx` : "create unique index if not exists platform_invitations_open_email_idx";
 	return `
 -- Invitations to a platform role (the catalog model's platform assignments).
 create table if not exists ${p.table} (
@@ -69477,7 +69492,7 @@ create table if not exists ${p.table} (
   ${c("acceptedAt")} timestamptz
 );
 ${add("invitedBy", "uuid references auth.users (id) on delete set null")}${add("createdAt", "timestamptz not null default now()")}${add("acceptedBy", "uuid references auth.users (id) on delete set null")}${add("declinedAt", "timestamptz")}${add("revokedAt", "timestamptz")}
-create unique index if not exists platform_invitations_open_email_idx
+${openEmailIndex}
   on ${p.table} (lower(${c("email")})) where ${where};
 ${p.has("updatedAt") ? `${updatedAt(p.table, c("updatedAt"))}\n` : ""}${p.has("invitedBy") ? `create index if not exists platform_invitations_invited_by_idx on ${p.table} (${c("invitedBy")});\n` : ""}${p.has("acceptedBy") ? `create index if not exists platform_invitations_accepted_by_idx on ${p.table} (${c("acceptedBy")});\n` : ""}
 alter table ${p.table} enable row level security;
@@ -87076,7 +87091,7 @@ function idColumn(ctx, column) {
 		default: return ctx.idType;
 	}
 }
-function table$2(ctx, n) {
+function table$2(ctx, n, layout) {
 	if (!ctx.manages) return `
 -- Adopted: ${n.organization} belongs to the app (blocks.organizations.tables.organizations).
 `;
@@ -87090,7 +87105,7 @@ create table if not exists ${n.organization} (
   ${idColumn(ctx, n.id)},
   ${c("name")} text not null check (length(btrim(${c("name")})) > 0)${optional("slug", `${slugType} not null`)}${optional("createdBy", "uuid references auth.users (id) on delete set null")}${optional("createdAt", "timestamptz not null default now()")}${optional("disabledAt", "timestamptz")}${optional("deletedAt", "timestamptz")}
 );${addExtraColumns(n.organization, organizationExtraColumns(ctx))}
-${slugIndex}${ctx.has("organizations", "createdBy") ? `create index if not exists ${ctx.naming.rename("organizations_created_by_idx")} on ${n.organization} (${c("createdBy")});\n` : ""}${ctx.has("organizations", "updatedAt") ? `${updatedAt(n.organization, c("updatedAt"))}\n` : ""}${ctx.installed("entitlements") ? `-- The Stripe customer the entitlements module reads (config.entitlements.customer).
+${slugIndex}${ctx.has("organizations", "createdBy") ? `create index if not exists ${ctx.naming.rename("organizations_created_by_idx")} on ${n.organization} (${c("createdBy")});\n` : ""}${ctx.has("organizations", "updatedAt") ? `${updatedAt(n.organization, c("updatedAt"))}\n` : ""}${readsOrganizationCustomer(ctx, layout) ? `-- The Stripe customer the entitlements module reads (config.entitlements.customer).
 alter table ${n.organization} add column if not exists ${ORGANIZATION_CUSTOMER_COLUMN} text unique;
 ` : ""}alter table ${n.organization} enable row level security;
 ${revokeTable(n.organization)}
@@ -87684,12 +87699,12 @@ const functionsOf$1 = (ctx, id) => [
 	...ctx.installed("invitations") ? [["list_organization_invitations", id]] : [],
 	...membershipDisabledAt(ctx) === void 0 ? [] : [["suspend_member", `${id}, uuid`], ["resume_member", `${id}, uuid`]]
 ];
-function organizationsSql(ctx) {
+function organizationsSql(ctx, layout) {
 	const n = namesOf$2(ctx);
 	const grants = functionsOf$1(ctx, ctx.idType).map(([name, args]) => `revoke execute on function ${ctx.fn(name)}(${args}) from public, anon;
 grant execute on function ${ctx.fn(name)}(${args}) to authenticated, service_role;`).join("\n");
 	return `${schemaPreamble(ctx)}
-${table$2(ctx, n)}${tenantKeys(ctx, n)}${slugCheck(ctx, n)}${create(ctx, n)}${organizationDeletion(ctx, n, {
+${table$2(ctx, n, layout)}${tenantKeys(ctx, n)}${slugCheck(ctx, n)}${create(ctx, n)}${organizationDeletion(ctx, n, {
 		platformOverride: platformOverride(ctx, "deletePlatform"),
 		event
 	})}${guards(ctx, n)}${members(ctx, n)}${memberSuspension(ctx, n, {
@@ -94909,6 +94924,133 @@ $$;
 revoke execute on function better_supabase.check_rate_limit(text, text, integer, interval) from public, anon, authenticated;
 grant execute on function better_supabase.check_rate_limit(text, text, integer, interval) to service_role;
 
+-- Counts one hit against several limits at once: hits is a JSON array of
+-- { scope, key, max_requests?, period? }, each with its own scope and key.
+-- The counters are locked in a fixed order and the hit counts only when every
+-- limit allows it, so a refused call leaves every counter as it was. Returns
+-- { allowed, blocked, retry_after, results }: blocked is the index of the first
+-- limit over its maximum, retry_after the longest wait of the refusing
+-- limits, and results one { allowed, remaining, retry_after } per hit.
+create or replace function better_supabase.check_rate_limits(hits jsonb)
+returns jsonb
+language plpgsql
+security definer
+set search_path = ''
+as $$
+declare
+  total integer;
+  scopes text[] := '{}';
+  keys text[] := '{}';
+  maxes integer[] := '{}';
+  periods interval[] := '{}';
+  used integer[] := '{}';
+  starts timestamptz[] := '{}';
+  hit jsonb;
+  rule better_supabase.rate_limit_rules;
+  counter better_supabase.rate_limits;
+  limit_max integer;
+  limit_period interval;
+  current_hits integer;
+  first_blocked integer;
+  longest integer := 0;
+  passed boolean;
+  results jsonb := '[]'::jsonb;
+begin
+  if jsonb_typeof(hits) is distinct from 'array' or jsonb_array_length(hits) = 0 then
+    raise exception 'check_rate_limits needs a non-empty array of hits'
+      using errcode = '22023', hint = 'RATE_LIMIT_HITS';
+  end if;
+  total := jsonb_array_length(hits);
+  for i in 1 .. total loop
+    hit := hits -> (i - 1);
+    if coalesce(hit ->> 'scope', '') = '' or (hit ->> 'key') is null then
+      raise exception 'Hit % of check_rate_limits needs a scope and a key', i - 1
+        using errcode = '22023', hint = 'RATE_LIMIT_HITS';
+    end if;
+    select * into rule from better_supabase.rate_limit_rules r where r.scope = hit ->> 'scope';
+    limit_max := coalesce((hit ->> 'max_requests')::integer, rule.max_requests);
+    limit_period := coalesce((hit ->> 'period')::interval, rule.period);
+    if limit_max is null or limit_period is null then
+      raise exception 'No rate limit for %: call set_rate_limit or pass max_requests and period', hit ->> 'scope'
+        using errcode = '22023', hint = 'RATE_LIMIT_UNKNOWN';
+    end if;
+    if limit_max < 1 or limit_period <= interval '0' then
+      raise exception 'The rate limit for % needs a positive max_requests and period', hit ->> 'scope'
+        using errcode = '22023', hint = 'RATE_LIMIT_HITS';
+    end if;
+    for j in 1 .. i - 1 loop
+      if scopes[j] = hit ->> 'scope' and keys[j] = hit ->> 'key' then
+        raise exception 'Hits % and % of check_rate_limits count the same scope % and key; give each limit its own scope', j - 1, i - 1, hit ->> 'scope'
+          using errcode = '22023', hint = 'RATE_LIMIT_HITS';
+      end if;
+    end loop;
+    scopes := scopes || (hit ->> 'scope');
+    keys := keys || (hit ->> 'key');
+    maxes := maxes || limit_max;
+    periods := periods || limit_period;
+  end loop;
+
+  insert into better_supabase.rate_limits as l (scope, key, window_start, hits, period)
+  select u.scope, u.key, now(), 0, u.period
+  from unnest(scopes, keys, periods) as u(scope, key, period)
+  order by u.scope, u.key
+  on conflict on constraint rate_limits_pkey do nothing;
+
+  perform 1
+  from better_supabase.rate_limits l
+  join unnest(scopes, keys) as u(scope, key) on l.scope = u.scope and l.key = u.key
+  order by l.scope, l.key
+  for update of l;
+
+  for i in 1 .. total loop
+    select * into counter from better_supabase.rate_limits l
+    where l.scope = scopes[i] and l.key = keys[i];
+    if counter.window_start + periods[i] <= now() then
+      used := used || 0;
+      starts := starts || now();
+    else
+      used := used || counter.hits;
+      starts := starts || counter.window_start;
+    end if;
+    if used[i] + 1 > maxes[i] then
+      longest := greatest(longest, greatest(1, ceil(extract(epoch from starts[i] + periods[i] - now()))::integer));
+      first_blocked := coalesce(first_blocked, i - 1);
+    end if;
+  end loop;
+
+  passed := first_blocked is null;
+
+  if passed then
+    for i in 1 .. total loop
+      update better_supabase.rate_limits l set
+        window_start = starts[i],
+        hits = used[i] + 1,
+        period = periods[i]
+      where l.scope = scopes[i] and l.key = keys[i];
+    end loop;
+  end if;
+
+  for i in 1 .. total loop
+    current_hits := used[i] + case when passed then 1 else 0 end;
+    results := results || jsonb_build_array(jsonb_build_object(
+      'allowed', used[i] + 1 <= maxes[i],
+      'remaining', greatest(maxes[i] - current_hits, 0),
+      'retry_after', case when used[i] + 1 <= maxes[i] then 0
+        else greatest(1, ceil(extract(epoch from starts[i] + periods[i] - now()))::integer) end
+    ));
+  end loop;
+
+  return jsonb_build_object(
+    'allowed', passed,
+    'blocked', first_blocked,
+    'retry_after', longest,
+    'results', results
+  );
+end
+$$;
+revoke execute on function better_supabase.check_rate_limits(jsonb) from public, anon, authenticated;
+grant execute on function better_supabase.check_rate_limits(jsonb) to service_role;
+
 -- Deletes up to batch counters whose window has ended: the period the
 -- counter was last hit with, else its rule's, else a day (counters from
 -- before the period column). Every caller keeps a row until then, so
@@ -114520,7 +114662,11 @@ const UPDATED_AT = {
 	target: "schema",
 	names: {
 		tables: {},
-		options: ["createdAt", "updatedAt"]
+		options: [
+			"createdAt",
+			"updatedAt",
+			"stamp"
+		]
 	},
 	build: () => `${SCHEMA$5}
 
@@ -125961,16 +126107,7 @@ function parsePolicy(statement) {
 }
 const BLOCK_PREFIX = "bsb_";
 const POLICY_EDIT = new RegExp(String.raw`^\s*(?:alter\s+policy|comment\s+on\s+policy)\s+(${NAME$9})\s+on\s+(${NAME$9}(?:\s*\.\s*${NAME$9})?)`, "i");
-/**
-* `sql` without the block's permissive `bsb_` policies that the app's own
-* policies on the same table already cover for every command they grant (the
-* comparison BS347 makes), so Postgres doesn't OR two policies that admit the
-* same rows. A block policy that is wider stays, and BS347 reports it. The
-* `drop policy if exists` before it stays too, so an earlier install's copy
-* goes.
-*/
-function withoutCoveredPolicies(sql, ownPolicies = {}) {
-	if (Object.keys(ownPolicies).length === 0) return sql;
+function withoutBlockPolicies(sql, skip, restrictive = false) {
 	const masked = maskComments(sql);
 	const skipped = /* @__PURE__ */ new Set();
 	const statements = statementSpans(sql).map(([from, to]) => ({
@@ -125979,20 +126116,51 @@ function withoutCoveredPolicies(sql, ownPolicies = {}) {
 	}));
 	const kept = statements.map(({ text, masked: statement }) => {
 		const parsed = parsePolicy(statement);
-		if (parsed === void 0 || !parsed.policy.name.startsWith(BLOCK_PREFIX) || !parsed.policy.permissive) return text;
-		const apps = (ownPolicies[parsed.table] ?? []).filter((policy) => !policy.name.startsWith(BLOCK_PREFIX));
-		const covering = COMMANDS.filter((command) => coversCommand(parsed.policy, command)).map((command) => coveringPolicy(parsed.policy, apps, command));
-		if (covering.length === 0 || covering.includes(void 0)) return text;
+		if (parsed === void 0 || !parsed.policy.name.startsWith(BLOCK_PREFIX) || !(parsed.policy.permissive || restrictive)) return text;
+		const comment = skip(parsed);
+		if (comment === void 0) return text;
 		skipped.add(`${parsed.table}\u0000${parsed.policy.name}`);
-		const names = [...new Set(covering.map((policy) => policy.name))].join(" and ");
 		const start = statement.search(/\S/);
-		return `${text.slice(0, start === -1 ? 0 : start).trimEnd()}\n-- ${parsed.table}: the app's policy ${names} already allows what ${parsed.policy.name} would, so the block adds none.`;
+		return `${text.slice(0, start === -1 ? 0 : start).trimEnd()}\n-- ${parsed.table}: ${comment}`;
 	});
 	return statements.map(({ masked: statement }, index) => {
 		const edit = POLICY_EDIT.exec(statement);
 		return edit !== null && skipped.has(`${qualified$8(edit[2])}\u0000${unquote$4(edit[1])}`) ? "" : kept[index];
 	}).join("");
 }
+/**
+* `sql` without the block's permissive `bsb_` policies that the app's own
+* policies on the same table already cover for every command they grant (the
+* comparison BS347 makes), so Postgres doesn't OR two policies that admit the
+* same rows. A block policy that is wider stays, and BS347 reports it. The
+* `drop policy if exists` before it stays too, so an earlier install's copy
+* goes.
+*/
+function withoutCoveredPolicies(sql, ownPolicies = {}) {
+	if (Object.keys(ownPolicies).length === 0) return sql;
+	return withoutBlockPolicies(sql, ({ table, policy }) => {
+		const apps = (ownPolicies[table] ?? []).filter((own) => !own.name.startsWith(BLOCK_PREFIX));
+		const covering = COMMANDS.filter((command) => coversCommand(policy, command)).map((command) => coveringPolicy(policy, apps, command));
+		if (covering.length === 0 || covering.includes(void 0)) return;
+		return `the app's policy ${[...new Set(covering.map((own) => own.name))].join(" and ")} already allows what ${policy.name} would, so the block adds none.`;
+	});
+}
+const APP_POLICIES_NOTE = `the app's policies govern this table (ownTablePolicies "app"), so the block adds no`;
+const APP_POLICIES = new RegExp(String.raw`^-- (\S+): ${APP_POLICIES_NOTE.replaceAll(/[()]/g, String.raw`\$&`)} (\S+) for ([a-z, ]+)\.$`, "gm");
+function appTablePolicyNotes(sql) {
+	return [...sql.matchAll(APP_POLICIES)].map(([, table = "", policy = "", commands = ""]) => ({
+		table,
+		policy,
+		commands: COMMANDS.filter((command) => commands.split(", ").includes(command))
+	}));
+}
+function withoutAppTablePolicies(sql, tables) {
+	if (tables.size === 0) return sql;
+	return withoutBlockPolicies(sql, ({ table, policy }) => {
+		if (!tables.has(table)) return;
+		return policy.permissive ? `${APP_POLICIES_NOTE} ${policy.name} for ${COMMANDS.filter((command) => coversCommand(policy, command)).join(", ")}.` : `${APP_POLICIES_NOTE} restrictive ${policy.name}.`;
+	}, true);
+}
 const DROP_POLICY = new RegExp(String.raw`^\s*drop\s+policy\s+(?:if\s+exists\s+)?(${NAME$9})\s+on\s+(${NAME$9}(?:\s*\.\s*${NAME$9})?)`, "i");
 /**
 * The policies `sources` leave on each `schema.table` in `schemas`, in order: a
@@ -126175,7 +126343,7 @@ function moduleBody(name, layout = {}) {
 */
 function overApp(sql, ctx, layout) {
 	const appTables = appTableSet(ctx);
-	return withoutUnmappedColumns(withoutUnmappedTables(blockNamesOnAppTables(withoutAppTableEdits(overAppTables(overAppViews(sql, appTableSet(ctx, ctx.appViews)), appTables, layout.ownColumns), appTables), appTables, layout.ownUpdatedAtTriggers), ctx.instance), ctx.instance);
+	return withoutAppTablePolicies(withoutUnmappedColumns(withoutUnmappedTables(blockNamesOnAppTables(withoutAppTableEdits(overAppTables(overAppViews(sql, appTableSet(ctx, ctx.appViews)), appTables, layout.ownColumns), appTables), appTables, layout.ownUpdatedAtTriggers), ctx.instance), ctx.instance), ctx.config.ownTablePolicies === "app" ? appTables : /* @__PURE__ */ new Set());
 }
 /** The app's tables a module runs over, as `schema.table`. */
 function appTableSet(ctx, tables = ctx.appOwned) {
@@ -127255,4 +127423,4 @@ async function compileReadSets(sets) {
 	return Promise.all(names.map((name) => compileReadSet(byName.get(name))));
 }
 //#endregion
-export { contractSignature as $, moduleFileVersion as A, resolveExposeColumns as B, APP_TABLES_MARKER as C, blockSqlVersion as D, scopePolicyName as E, moduleSchemaExtensions as F, sameTenantTrigger as G, dataExportPlan as H, SQL_MODULES as I, currentBlockName as J, migrationOptionUses as K, resolveBlocks as L, moduleEventTriggers as M, moduleHidingColumns as N, blockFileState as O, modulePermissionKeys as P, MODULE_ID_TYPES as Q, TENANT_SCOPE_POLICY as R, moduleFilePaths as S, appTablesFiles as T, subjectColumns$1 as U, SECRET_COLUMNS as V, sameTenantColumn as W, renamedBlock as X, formerBlockName as Y, AUDIT_CATEGORIES as Z, moduleDeprecations as _, tenantsQuery as a, declaredUpdatedAtTriggers as at, widenedCommands as b, adoptedColumnProblems as c, policyGrants as ct, instanceFunctions as d, isBlockSqlIdType as et, entityRenamePlan as f, renderBlocks as g, moduleTopics as h, moduleLayout as i, declaredTables as it, sameBlockFile as j, isModuleDataFile as k, adoptedTables as l, rlsTables as lt, moduleBody as m, compileReadSets as n, BLOCK_OPTION_SCHEMAS as nt, expiredFlagsQuery as o, declaredViews as ot, customContracts as p, BLOCK_RENAMES as q, sharedRolesProblems as r, declaredTableColumns as rt, sameTenantLayout as s, extensionSchema as st, compileReadSet as t, moduleIdType as tt, adoptedViews as u, auditRegistrations as ut, upgradePlan as v, APP_TABLES_MODULE as w, moduleDataDir as x, declaredPolicies as y, excludedColumns as z };
+export { MODULE_ID_TYPES as $, isModuleDataFile as A, excludedColumns as B, moduleFilePaths as C, scopePolicyName as D, appTablesFiles as E, modulePermissionKeys as F, sameTenantColumn as G, SECRET_COLUMNS as H, moduleSchemaExtensions as I, BLOCK_RENAMES as J, sameTenantTrigger as K, SQL_MODULES as L, sameBlockFile as M, moduleEventTriggers as N, blockSqlVersion as O, moduleHidingColumns as P, AUDIT_CATEGORIES as Q, resolveBlocks as R, moduleDataDir as S, APP_TABLES_MODULE as T, dataExportPlan as U, resolveExposeColumns as V, subjectColumns$1 as W, formerBlockName as X, currentBlockName as Y, renamedBlock as Z, moduleDeprecations as _, tenantsQuery as a, declaredTables as at, declaredPolicies as b, adoptedColumnProblems as c, extensionSchema as ct, instanceFunctions as d, auditRegistrations as dt, contractSignature as et, entityRenamePlan as f, renderBlocks as g, moduleTopics as h, moduleLayout as i, declaredTableColumns as it, moduleFileVersion as j, blockFileState as k, adoptedTables as l, policyGrants as lt, moduleBody as m, compileReadSets as n, moduleIdType as nt, expiredFlagsQuery as o, declaredUpdatedAtTriggers as ot, customContracts as p, migrationOptionUses as q, sharedRolesProblems as r, BLOCK_OPTION_SCHEMAS as rt, sameTenantLayout as s, declaredViews as st, compileReadSet as t, isBlockSqlIdType as tt, adoptedViews as u, rlsTables as ut, upgradePlan as v, APP_TABLES_MARKER as w, widenedCommands as x, appTablePolicyNotes as y, TENANT_SCOPE_POLICY as z };

package/dist/sqlite/index.d.ts

@@ -1,6 +1,6 @@
 import { Bt as Executor } from "../types-DFdg_4yN.js";
 import { c as LocalTablesOption, n as DataEngine, s as LiveEngineOptions } from "../data-engine-BWoz9lED.js";
-import { i as fromSqliteError, n as SqliteDatabaseLike, o as CheckSqliteOptions, r as SqliteExecutorOptions, s as checkSqlite, t as SqliteContextLike } from "../executor-CVIn6JHa.js";
+import { i as fromSqliteError, n as SqliteDatabaseLike, o as CheckSqliteOptions, r as SqliteExecutorOptions, s as checkSqlite, t as SqliteContextLike } from "../executor-BWFfz0ik.js";
 //#region src/sqlite/engine.d.ts
 /** A SQLite database that may report which tables changed. */
 interface ChangingSqliteDatabase extends SqliteDatabaseLike {

package/dist/ssr/index.d.ts

@@ -1,6 +1,6 @@
 import { C as readSession, D as writeSession, E as sessionEncoding, S as pruneSessionChunks, T as sessionCookieName, _ as StoredSession, a as ResolveAuthOptions, b as clearSessionAtScopes, d as CookieOptions, f as CookieRecord, g as SessionEncoding, h as DEFAULT_SESSION_ENCODING, l as resolveAuth, m as CookieWrite, n as AuthResolver, p as CookieScope, r as AuthState, t as AuthResolution, u as AUTH_CACHE_HEADERS, v as WriteSessionOptions, w as serializeCookie, x as parseCookies, y as applyCookieWrites } from "../resolve-CXX6DHv3.js";
 import { n as toSession, t as AuthSession } from "../view-DyFdMCqg.js";
-import { r as MembershipClaim } from "../entitlements-BnhDBxLW.js";
+import { r as MembershipClaim } from "../entitlements-B0jmjNLD.js";
 import { n as RefreshOutcome, r as refreshSession, t as RefreshOptions } from "../refresh-DT_ICaK-.js";
 import { a as sessionStatus, i as clearSessionCookies, n as SessionStatus, o as authContext, r as SessionStatusOptions, t as ClearSessionCookiesOptions } from "../ended-gUsMZVNg.js";
 export { AUTH_CACHE_HEADERS, type AuthResolution, type AuthResolver, type AuthSession, type AuthState, type ClearSessionCookiesOptions, type CookieOptions, type CookieRecord, type CookieScope, type CookieWrite, DEFAULT_SESSION_ENCODING, type MembershipClaim, type RefreshOptions, type RefreshOutcome, type ResolveAuthOptions, type SessionEncoding, type SessionStatus, type SessionStatusOptions, type StoredSession, type WriteSessionOptions, applyCookieWrites, authContext, clearSessionAtScopes, clearSessionCookies, parseCookies, pruneSessionChunks, readSession, refreshSession, resolveAuth, serializeCookie, sessionCookieName, sessionEncoding, sessionStatus, toSession, writeSession };

package/dist/storage/index.d.ts

@@ -1,4 +1,4 @@
 import { E as AccessPolicySql, T as AccessBucketPolicy, _t as BucketLifecycle, bt as VersioningStatus, vt as BucketLifecycleRule, yt as ObjectVersion } from "../types-DFdg_4yN.js";
-import { $ as TemplateValues, A as StorageBucketApi, B as StorageListV2Result, C as UploadOptions, D as TTL, E as parseSize, F as StorageFetchParameters, G as StorageSearchV2Options, H as StorageRemoveEntry, I as StorageFileOptions, J as StorageUrlOptions, K as StorageSignedUrlEntry, L as StorageListEntry, M as StorageDestinationOptions, N as StorageDownloadOptions, O as TtlPreset, P as StorageFailure, Q as TemplateParams, R as StorageListV2Folder, S as UploadBody, T as defineBucket, U as StorageResponse, V as StorageObjectInfo, W as StorageSearchOptions, X as StoragePath, Y as PathIn, Z as AppliedBucket, _ as StoredObject, a as BucketConnectOptions, b as TransferOptions, c as DownloadOptions, d as PathValues, f as PurgeCacheOptions, g as StorageAdminClient, h as Reservation, i as BucketConfig, j as StorageClient, k as StorageApi, l as ImageTransform, m as ReplaceResult, n as Bucket, o as BucketDrift, p as ReplaceOptions, q as StorageTransform, r as BucketClient, s as BucketPolicy, t as ActualBucket, u as ObjectTarget, v as SweepOptions, w as UrlOptions, x as TransformOptions, y as SweepResult, z as StorageListV2Object } from "../bucket-CiNi8sIw.js";
-import { A as StoredRef, C as AnyBucket, D as Buckets, E as BucketWithId, F as storageImageUrl, I as fromStorageError, M as StorageImageOptions, N as StorageImageSize, O as ConnectedRef, P as storageImageSrcSet, S as organizationLogoBucket, T as BucketMap, _ as IMAGE_TYPES, a as VectorHit, b as OrganizationLogoBucketOptions, c as VectorMetadata, d as defineVectorBucket, f as AnalyticsBucket, g as AvatarBucketOptions, h as defineAnalyticsBucket, i as VectorDistance, j as defineBuckets, k as ResolvedRef, l as VectorQueryOptions, m as AnalyticsCatalog, n as VectorBucketClient, o as VectorIndexClient, p as AnalyticsBucketClient, r as VectorBucketConfig, s as VectorIndexConfig, t as VectorBucket, u as VectorRecord, v as ImageBucketOptions, w as BucketIdOf, x as avatarBucket, y as ImageVariant } from "../index-Do2ChN_y.js";
-export { type AccessBucketPolicy, type AccessPolicySql, type ActualBucket, type AnalyticsBucket, type AnalyticsBucketClient, type AnalyticsCatalog, type AnyBucket, type AppliedBucket, type AvatarBucketOptions, type Bucket, type BucketClient, type BucketConfig, type BucketConnectOptions, type BucketDrift, type BucketIdOf, type BucketLifecycle, type BucketLifecycleRule, type BucketMap, type BucketPolicy, type BucketWithId, type Buckets, type ConnectedRef, type DownloadOptions, IMAGE_TYPES, type ImageBucketOptions, type ImageTransform, type ImageVariant, type ObjectTarget, type ObjectVersion, type OrganizationLogoBucketOptions, type PathIn, type PathValues, type PurgeCacheOptions, type ReplaceOptions, type ReplaceResult, type Reservation, type ResolvedRef, type StorageAdminClient, type StorageApi, type StorageBucketApi, type StorageClient, type StorageDestinationOptions, type StorageDownloadOptions, type StorageFailure, type StorageFetchParameters, type StorageFileOptions, type StorageImageOptions, type StorageImageSize, type StorageListEntry, type StorageListV2Folder, type StorageListV2Object, type StorageListV2Result, type StorageObjectInfo, type StoragePath, type StorageRemoveEntry, type StorageResponse, type StorageSearchOptions, type StorageSearchV2Options, type StorageSignedUrlEntry, type StorageTransform, type StorageUrlOptions, type StoredObject, type StoredRef, type SweepOptions, type SweepResult, TTL, type TemplateParams, type TemplateValues, type TransferOptions, type TransformOptions, type TtlPreset, type UploadBody, type UploadOptions, type UrlOptions, type VectorBucket, type VectorBucketClient, type VectorBucketConfig, type VectorDistance, type VectorHit, type VectorIndexClient, type VectorIndexConfig, type VectorMetadata, type VectorQueryOptions, type VectorRecord, type VersioningStatus, avatarBucket, defineAnalyticsBucket, defineBucket, defineBuckets, defineVectorBucket, fromStorageError, organizationLogoBucket, parseSize, storageImageSrcSet, storageImageUrl };
+import { $ as AppliedBucket, A as TtlPreset, B as StorageListV2Folder, C as TransformOptions, D as defineBucket, E as UrlOptions, F as StorageDownloadOptions, G as StorageResponse, H as StorageListV2Result, I as StorageFailure, J as StorageSignedUrlEntry, K as StorageSearchOptions, L as StorageFetchParameters, M as StorageBucketApi, N as StorageClient, O as parseSize, P as StorageDestinationOptions, Q as StoragePath, R as StorageFileOptions, S as TransferOptions, T as UploadOptions, U as StorageObjectInfo, V as StorageListV2Object, W as StorageRemoveEntry, X as StorageUrlOptions, Y as StorageTransform, Z as PathIn, _ as ResumableReservation, a as BucketConnectOptions, b as SweepOptions, c as DownloadOptions, d as PathValues, et as TemplateParams, f as PurgeCacheOptions, g as ReserveResumableOptions, h as Reservation, i as BucketConfig, j as StorageApi, k as TTL, l as ImageTransform, m as ReplaceResult, n as Bucket, o as BucketDrift, p as ReplaceOptions, q as StorageSearchV2Options, r as BucketClient, s as BucketPolicy, t as ActualBucket, tt as TemplateValues, u as ObjectTarget, v as StorageAdminClient, w as UploadBody, x as SweepResult, y as StoredObject, z as StorageListEntry } from "../bucket-vc-QRrva.js";
+import { A as ConnectedRef, C as avatarBucket, D as BucketMap, E as BucketIdOf, F as StorageImageSize, I as storageImageSrcSet, L as storageImageUrl, M as StoredRef, N as defineBuckets, O as BucketWithId, P as StorageImageOptions, R as fromStorageError, S as OrganizationLogoBucketOptions, T as AnyBucket, _ as defineAnalyticsBucket, a as VectorBucketConfig, b as ImageBucketOptions, c as VectorIndexClient, d as VectorQueryOptions, f as VectorRecord, g as AnalyticsCatalog, h as AnalyticsBucketClient, i as VectorBucketClient, j as ResolvedRef, k as Buckets, l as VectorIndexConfig, m as AnalyticsBucket, n as resumableEndpoint, o as VectorDistance, p as defineVectorBucket, r as VectorBucket, s as VectorHit, t as ResumableEndpointOptions, u as VectorMetadata, v as AvatarBucketOptions, w as organizationLogoBucket, x as ImageVariant, y as IMAGE_TYPES } from "../index-CQhPHHDF.js";
+export { type AccessBucketPolicy, type AccessPolicySql, type ActualBucket, type AnalyticsBucket, type AnalyticsBucketClient, type AnalyticsCatalog, type AnyBucket, type AppliedBucket, type AvatarBucketOptions, type Bucket, type BucketClient, type BucketConfig, type BucketConnectOptions, type BucketDrift, type BucketIdOf, type BucketLifecycle, type BucketLifecycleRule, type BucketMap, type BucketPolicy, type BucketWithId, type Buckets, type ConnectedRef, type DownloadOptions, IMAGE_TYPES, type ImageBucketOptions, type ImageTransform, type ImageVariant, type ObjectTarget, type ObjectVersion, type OrganizationLogoBucketOptions, type PathIn, type PathValues, type PurgeCacheOptions, type ReplaceOptions, type ReplaceResult, type Reservation, type ReserveResumableOptions, type ResolvedRef, type ResumableEndpointOptions, type ResumableReservation, type StorageAdminClient, type StorageApi, type StorageBucketApi, type StorageClient, type StorageDestinationOptions, type StorageDownloadOptions, type StorageFailure, type StorageFetchParameters, type StorageFileOptions, type StorageImageOptions, type StorageImageSize, type StorageListEntry, type StorageListV2Folder, type StorageListV2Object, type StorageListV2Result, type StorageObjectInfo, type StoragePath, type StorageRemoveEntry, type StorageResponse, type StorageSearchOptions, type StorageSearchV2Options, type StorageSignedUrlEntry, type StorageTransform, type StorageUrlOptions, type StoredObject, type StoredRef, type SweepOptions, type SweepResult, TTL, type TemplateParams, type TemplateValues, type TransferOptions, type TransformOptions, type TtlPreset, type UploadBody, type UploadOptions, type UrlOptions, type VectorBucket, type VectorBucketClient, type VectorBucketConfig, type VectorDistance, type VectorHit, type VectorIndexClient, type VectorIndexConfig, type VectorMetadata, type VectorQueryOptions, type VectorRecord, type VersioningStatus, avatarBucket, defineAnalyticsBucket, defineBucket, defineBuckets, defineVectorBucket, fromStorageError, organizationLogoBucket, parseSize, resumableEndpoint, storageImageSrcSet, storageImageUrl };

package/dist/storage/index.js

@@ -4,6 +4,7 @@ import { c as optionalTemporal, n as isInstant } from "../temporal-DLZlWbOi.js";
 import { n as temporalMissing } from "../temporal-required-Dy0GGD8E.js";
 import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../result-ntFBW2p2.js";
 import { a as spansAllTenants } from "../plugin-AKwwe2gF.js";
+import { n as decodeJwtPayload } from "../base64-B9Wlsdj7.js";
 import { a as tenantClaimPaths, o as tenantFrom, s as tenantPathsFor } from "../claims-Bp9My7XP.js";
 import { a as sqlString, i as sqlIdent, n as parseTemplate, r as slug, t as claimSql } from "../template-Drgg3v2J.js";
 import { r as accessCheck } from "../access-sql-B-MkVARa.js";
@@ -281,6 +282,38 @@ function parseFailure(status, text) {
 	};
 }
 //#endregion
+//#region src/storage/resumable.ts
+/** Storage signs upload tokens for two hours. */
+const UPLOAD_TOKEN_SECONDS = 7200;
+const HOSTED = /^(?<ref>[a-z0-9-]+)\.supabase\.co$/i;
+const SIGNED_UPLOAD = "/object/upload/sign/";
+const STORAGE_PATH = "/storage/v1";
+/**
+* The TUS endpoint for a signed resumable upload,
+* `<storage>/upload/resumable/sign`. `url` is the project URL (`SUPABASE_URL`),
+* the Storage URL (`.../storage/v1`) or a signed upload URL from
+* `createSignedUploadUrl`.
+*/
+function resumableEndpoint(url, options = {}) {
+	const parsed = new URL(url);
+	const path = parsed.pathname;
+	const storage = path.indexOf(STORAGE_PATH);
+	const signed = path.indexOf(SIGNED_UPLOAD);
+	const base = storage === -1 ? signed === -1 ? `${path.replace(/\/+$/, "")}${STORAGE_PATH}` : path.slice(0, signed) : path.slice(0, storage + 11);
+	const hosted = HOSTED.exec(parsed.hostname);
+	if ((options.direct ?? true) && hosted?.groups?.["ref"] !== void 0) parsed.hostname = `${hosted.groups["ref"]}.storage.supabase.co`;
+	parsed.pathname = `${base}/upload/resumable/sign`;
+	parsed.search = "";
+	parsed.hash = "";
+	return parsed.toString();
+}
+/** When a signed upload token expires: its `exp`, else two hours from `now`. */
+function uploadTokenExpiry(token, now) {
+	const exp = decodeJwtPayload(token)?.["exp"];
+	const seconds = typeof exp === "number" && Number.isFinite(exp) ? exp : Math.floor(now / 1e3) + UPLOAD_TOKEN_SECONDS;
+	return (/* @__PURE__ */ new Date(seconds * 1e3)).toISOString();
+}
+//#endregion
 //#region src/storage/storage-api.ts
 /** The `StorageApi` of a client, or the client itself. */
 function storageApiOf(client) {
@@ -673,6 +706,26 @@ function connectBucket(bucket, client, resolveTarget, connectOptions, guard) {
 				signedUrl: data.signedUrl
 			}));
 		}),
+		reserveResumable: (target, options) => AsyncResult.from(async () => {
+			const path = resolve(target);
+			const upsert = options?.upsert ?? false;
+			return run(() => api().createSignedUploadUrl(path, upsert ? { upsert } : void 0)).map((data) => ({
+				path: data.path,
+				token: data.token,
+				signedUrl: data.signedUrl,
+				bucket: bucket.id,
+				tusEndpoint: resumableEndpoint(data.signedUrl, options?.direct === void 0 ? {} : { direct: options.direct }),
+				expiresAt: uploadTokenExpiry(data.token, options?.now?.() ?? Date.now()),
+				headers: {
+					"x-signature": data.token,
+					"x-upsert": upsert ? "true" : "false"
+				},
+				metadata: {
+					bucketName: bucket.id,
+					objectName: data.path
+				}
+			}));
+		}),
 		uploadReserved: (reservation, body, options) => AsyncResult.from(async () => {
 			options?.signal?.throwIfAborted();
 			const path = resolve(reservation.path);
@@ -1412,4 +1465,4 @@ function connectVectorBucket(config, client) {
 	};
 }
 //#endregion
-export { IMAGE_TYPES, TTL, avatarBucket, defineAnalyticsBucket, defineBucket, defineBuckets, defineVectorBucket, fromStorageError, organizationLogoBucket, parseSize, storageImageSrcSet, storageImageUrl };
+export { IMAGE_TYPES, TTL, avatarBucket, defineAnalyticsBucket, defineBucket, defineBuckets, defineVectorBucket, fromStorageError, organizationLogoBucket, parseSize, resumableEndpoint, storageImageSrcSet, storageImageUrl };