better-supabase 0.15.1 → 0.17.0

package/dist/blocks/versions/index.d.ts

@@ -8,7 +8,7 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { n as BlockOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
-import { Sn as EntitySchema, c as BlockOf, ln as RecordBindingWrite, mn as RecordRowInput, rn as RecordBinding } from "../../define-block-DvvcM54N.js";
+import { Sn as EntitySchema, c as BlockOf, ln as RecordBindingWrite, mn as RecordRowInput, rn as RecordBinding } from "../../define-block-Xxw8Hroe.js";
 //#region src/blocks/versions/json-patch.d.ts
 /** A JSON value, as a version's content holds it. */
 type JsonValue = null | boolean | number | string | readonly JsonValue[] | {

package/dist/blocks/waitlist/index.d.ts

@@ -7,7 +7,7 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { n as BlockOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
-import { c as BlockOf } from "../../define-block-DvvcM54N.js";
+import { c as BlockOf } from "../../define-block-Xxw8Hroe.js";
 import { n as VerifyOptions } from "../../signatures-Dkx9OE8j.js";
 //#region src/blocks/waitlist/waitlist.d.ts
 type WaitlistStatus = "waiting" | "approved" | "rejected" | "joined";

package/dist/blocks/webhooks/index.d.ts

@@ -9,11 +9,11 @@ import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport,
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
 import { t as BlockProblemOptions } from "../../problem-DNwN8iGz.js";
 import { g as JobHandler, x as QueueSchemas, y as Queue } from "../../types-Czq9Xtpa.js";
-import { c as BlockOf } from "../../define-block-DvvcM54N.js";
+import { c as BlockOf } from "../../define-block-Xxw8Hroe.js";
 import { i as EventSink, t as CloudEvent } from "../../cloud-event-CzZTJkXv.js";
 import { g as SubscriberPolicy, i as AuthorizationHooks } from "../../authorization-hooks-D_pwXlBs.js";
 import { a as verifySharedSecret, i as signWebhook, n as VerifyOptions, o as verifyWebhook, r as WebhookInput, t as VerifiedWebhook } from "../../signatures-Dkx9OE8j.js";
-import { a as DatabaseWebhookPayload, c as hookError, d as stripeInboxVerify, f as verifyStripeWebhook, i as DatabaseChange, l as isDatabaseWebhook, n as AuthHookKind, o as authHook, r as AuthHooks, s as databaseChange, t as AuthHookError, u as signStripeWebhook } from "../../verify-CMou8dWZ.js";
+import { a as DatabaseWebhookPayload, c as hookError, d as stripeInboxVerify, f as verifyStripeWebhook, i as DatabaseChange, l as isDatabaseWebhook, n as AuthHookKind, o as authHook, r as AuthHooks, s as databaseChange, t as AuthHookError, u as signStripeWebhook } from "../../verify-DEqY__0N.js";
 import { A as IncomingVerify, C as isPublicAddress, D as IncomingDelivery, E as CreatedIncomingWebhook, F as UpdateIncomingWebhookInput, I as UpdatedIncomingWebhook, M as IncomingWebhooks, N as IncomingWebhooksOptions, O as IncomingDestination, P as RotatedIncomingSecret, S as ResolveHost, T as CreateIncomingWebhookInput, _ as WebhookResponse, a as WebhookSignInput, b as AllowUrl, c as standardWebhooks, d as RotateSecretOptions, f as WebhookSecretStore, g as WebhookRequest, h as WebhookPolicyError, i as StandardWebhooksOptions, j as IncomingWebhook, k as IncomingDestinationResult, l as standardWebhooksAsymmetric, m as FetchTransportOptions, n as HmacSignerOptions, o as WebhookSigner, p as sqlSecretStore, r as RawSigner, s as hmacSigner, t as AsymmetricWebhooksOptions, u as webhookPublicKey, v as WebhookTransport, w as publicUrl, x as PublicUrlOptions, y as fetchTransport } from "../../signers-BAEzvTJ0.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/core/hmac.d.ts

package/dist/blocks/webhooks/index.js

@@ -17,7 +17,7 @@ import { n as hmacHex, r as timingSafeEqual } from "../../hmac-B3CTTlfv.js";
 import { i as signWebhook, o as verifySharedSecret, s as verifyWebhook, t as PUBLIC_KEY_PREFIX } from "../../signatures-CNcoq392.js";
 import { t as cronRoute } from "../../cron-route-UU9i5i9J.js";
 import { t as subjectReaders } from "../../subject-readers-B-pQ9Mmo.js";
-import { n as hitRateLimit, o as receiveWebhook } from "../../rate-limit-o44SYkVY.js";
+import { n as hitRateLimit, o as receiveWebhook } from "../../rate-limit-Dt9vAY4E.js";
 import { n as defineBlock } from "../../define-block-BGqOO8B3.js";
 import { a as signStripeWebhook, i as isDatabaseWebhook, n as databaseChange, o as stripeInboxVerify, r as hookError, s as verifyStripeWebhook, t as authHook } from "../../verify-ZLFUdlqE.js";
 import { toHttp } from "../../events/index.js";

package/dist/blocks/workflow-editor/index.d.ts

@@ -3,11 +3,11 @@ import { t as StandardSchemaV1 } from "../../standard-DBV730sF.js";
 import { r as FieldsOf } from "../../block-fields-BE7pInWZ.js";
 import { Ct as Events, gt as WorkflowEventData } from "../../events-vcqenSYU.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
-import { c as BlockOf } from "../../define-block-DvvcM54N.js";
+import { c as BlockOf } from "../../define-block-Xxw8Hroe.js";
 import { g as Workflows, n as WorkflowRun } from "../../workflows-B0ZPAQu0.js";
-import { p as SubscriptionStatus } from "../../topic-DNFEFGKI.js";
-import { n as TopicPort } from "../../watch-topic-Bo9S2R4P.js";
-import { n as Controller, t as AuthPort } from "../../controller-DyPPMFSw.js";
+import { p as SubscriptionStatus } from "../../topic-BtLz-qTI.js";
+import { n as TopicPort } from "../../watch-topic-tnfOTa3-.js";
+import { n as Controller, t as AuthPort } from "../../controller-CJUXhshv.js";
 import { A as WorkflowVersionOwner, B as WorkflowGraphNode, C as WorkflowGrantPrincipal, D as WorkflowTrigger, E as WorkflowStepInfo, F as WorkflowFilterCondition, G as durationMs, H as WorkflowNodeKind, I as WorkflowFilterField, J as matchesFilter, K as evaluateCondition, L as WorkflowGraph, M as GraphScope, N as WorkflowCondition, O as WorkflowTriggerKind, P as WorkflowConditionOperator, R as WorkflowGraphDiff, S as WorkflowGrantAction, T as WorkflowNodeRunStatus, U as approved, V as WorkflowNodeCondition, W as diffGraphs, X as validateGraph, Y as topologicalOrder, _ as WorkflowCredential, a as CredentialInput, b as WorkflowDefinitionScope, c as GraphCompiler, d as RunInput, f as TestRunInput, g as WorkflowBuilderHooks, h as WorkflowAlert, i as BuilderStarter, j as WorkflowVersionStatus, k as WorkflowVersion, l as NodeRunRecord, m as VersionSaveOptions, n as BuilderOptions, o as DefinitionInput, p as TriggerInput, q as filterConditionOf, r as BuilderStartCall, s as GrantInput, t as AlertInput, u as PublishOptions, v as WorkflowDefinition, w as WorkflowNodeRun, x as WorkflowEditor, y as WorkflowDefinitionGrant, z as WorkflowGraphEdge } from "../../types-DsRfiQ0v.js";
 import { a as GraphSubject, c as graphRunFields, i as GraphStepCall, l as startNodeOf, n as GraphRunFields, o as approvalToken, r as GraphRuntime, s as executeGraph, t as GraphApprovalCall } from "../../executor-Bi056Cnj.js";
 //#region src/blocks/workflow-editor/workflow-editor.d.ts

package/dist/blocks/workflows/index.d.ts

@@ -1,11 +1,11 @@
 import { b as DbError } from "../../result-DZeA5KS6.js";
 import { Ct as Events, _t as WorkflowRunEventData } from "../../events-vcqenSYU.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
-import { c as BlockOf } from "../../define-block-DvvcM54N.js";
+import { c as BlockOf } from "../../define-block-Xxw8Hroe.js";
 import { _ as WorkflowsHooks, a as WorkflowRunStatus, c as WorkflowScheduleInput, d as WorkflowStartTicket, f as WorkflowStarter, g as Workflows, h as WorkflowTickResult, i as WorkflowRunRecord, l as WorkflowStartCall, m as WorkflowTickOptions, n as WorkflowRun, o as WorkflowRunsQuery, s as WorkflowSchedule, u as WorkflowStartRequest, v as WorkflowsOptions, y as createWorkflows } from "../../workflows-B0ZPAQu0.js";
-import { p as SubscriptionStatus } from "../../topic-DNFEFGKI.js";
-import { n as TopicPort } from "../../watch-topic-Bo9S2R4P.js";
-import { n as Controller, t as AuthPort } from "../../controller-DyPPMFSw.js";
+import { p as SubscriptionStatus } from "../../topic-BtLz-qTI.js";
+import { n as TopicPort } from "../../watch-topic-tnfOTa3-.js";
+import { n as Controller, t as AuthPort } from "../../controller-CJUXhshv.js";
 //#region src/blocks/workflows/client.d.ts
 interface WorkflowRunsControllerOptions {
   readonly client: {

package/dist/{bucket-CiNi8sIw.d.ts → bucket-vc-QRrva.d.ts}

@@ -429,6 +429,39 @@ interface Reservation {
   readonly token: string;
   readonly signedUrl: string;
 }
+/**
+ * A signed upload for a TUS client such as `tus-js-client`: send every request
+ * to `tusEndpoint` with `headers` (`x-signature` carries the token, `x-upsert`
+ * the upsert choice) and `metadata` plus the file's `contentType` and
+ * `cacheControl`. The browser needs no access token. Finish it with
+ * `claimReserved`, as a plain reservation.
+ */
+interface ResumableReservation extends Reservation {
+  readonly bucket: string;
+  /** `<storage>/upload/resumable/sign`, on the direct Storage host when hosted. */
+  readonly tusEndpoint: string;
+  /** When the token expires (ISO 8601); start the upload before then. */
+  readonly expiresAt: string;
+  readonly headers: {
+    readonly "x-signature": string;
+    readonly "x-upsert": "true" | "false";
+  };
+  /** The TUS metadata Storage needs to place the object. */
+  readonly metadata: {
+    readonly bucketName: string;
+    readonly objectName: string;
+  };
+}
+interface ReserveResumableOptions {
+  readonly upsert?: boolean;
+  /**
+   * Use the direct Storage host (`<project-ref>.storage.supabase.co`) on a
+   * hosted project. Defaults to true.
+   */
+  readonly direct?: boolean;
+  /** Epoch ms, for the expiry fallback when the token carries no `exp`. */
+  readonly now?: () => number;
+}
 interface ReplaceOptions<Id extends string = string> extends UploadOptions {
   /**
    * Path the object replaces, checked like any other target before the upload.
@@ -554,6 +587,12 @@ interface BucketClient<P extends string, Id extends string = string, V extends s
   reserve(target: ObjectTarget<P, Id>, options?: {
     upsert?: boolean;
   }): AsyncResult<Reservation>;
+  /**
+   * A signed resumable (TUS) upload for a browser or another service, with the
+   * endpoint, headers and metadata the client sends. In a support session the
+   * target must be allowed to write the path, as for `reserve`.
+   */
+  reserveResumable(target: ObjectTarget<P, Id>, options?: ReserveResumableOptions): AsyncResult<ResumableReservation>;
   uploadReserved(reservation: Pick<Reservation, "path" | "token">, body: UploadBody, options?: UploadOptions): AsyncResult<{
     path: StoragePath<Id>;
   }>;
@@ -663,4 +702,4 @@ declare function parseSize(value: string | number): number;
  */
 declare function defineBucket<const P extends string, const Id extends string = string, const V extends string = never>(config: BucketConfig<P, Id, V>): Bucket<P, Id, V>;
 //#endregion
-export { TemplateValues as $, StorageBucketApi as A, StorageListV2Result as B, UploadOptions as C, TTL as D, parseSize as E, StorageFetchParameters as F, StorageSearchV2Options as G, StorageRemoveEntry as H, StorageFileOptions as I, StorageUrlOptions as J, StorageSignedUrlEntry as K, StorageListEntry as L, StorageDestinationOptions as M, StorageDownloadOptions as N, TtlPreset as O, StorageFailure as P, TemplateParams as Q, StorageListV2Folder as R, UploadBody as S, defineBucket as T, StorageResponse as U, StorageObjectInfo as V, StorageSearchOptions as W, StoragePath as X, PathIn as Y, AppliedBucket as Z, StoredObject as _, BucketConnectOptions as a, TransferOptions as b, DownloadOptions as c, PathValues as d, PurgeCacheOptions as f, StorageAdminClient as g, Reservation as h, BucketConfig as i, StorageClient as j, StorageApi as k, ImageTransform as l, ReplaceResult as m, Bucket as n, BucketDrift as o, ReplaceOptions as p, StorageTransform as q, BucketClient as r, BucketPolicy as s, ActualBucket as t, ObjectTarget as u, SweepOptions as v, UrlOptions as w, TransformOptions as x, SweepResult as y, StorageListV2Object as z };
+export { AppliedBucket as $, TtlPreset as A, StorageListV2Folder as B, TransformOptions as C, defineBucket as D, UrlOptions as E, StorageDownloadOptions as F, StorageResponse as G, StorageListV2Result as H, StorageFailure as I, StorageSignedUrlEntry as J, StorageSearchOptions as K, StorageFetchParameters as L, StorageBucketApi as M, StorageClient as N, parseSize as O, StorageDestinationOptions as P, StoragePath as Q, StorageFileOptions as R, TransferOptions as S, UploadOptions as T, StorageObjectInfo as U, StorageListV2Object as V, StorageRemoveEntry as W, StorageUrlOptions as X, StorageTransform as Y, PathIn as Z, ResumableReservation as _, BucketConnectOptions as a, SweepOptions as b, DownloadOptions as c, PathValues as d, TemplateParams as et, PurgeCacheOptions as f, ReserveResumableOptions as g, Reservation as h, BucketConfig as i, StorageApi as j, TTL as k, ImageTransform as l, ReplaceResult as m, Bucket as n, BucketDrift as o, ReplaceOptions as p, StorageSearchV2Options as q, BucketClient as r, BucketPolicy as s, ActualBucket as t, TemplateValues as tt, ObjectTarget as u, StorageAdminClient as v, UploadBody as w, SweepResult as x, StoredObject as y, StorageListEntry as z };

package/dist/cli/{add-C04vkBk9.js → add-BinNYhFD.js}

@@ -1,8 +1,8 @@
 import { n as CliError } from "./errors-BTe6A15O.js";
-import { T as providerLabel, _ as layoutFor, h as MEMBERSHIP_CLAIM_MODULES, v as providerOwnsMemberships } from "./module-migration-DOn6EmNz.js";
+import { T as providerLabel, _ as layoutFor, h as MEMBERSHIP_CLAIM_MODULES, v as providerOwnsMemberships } from "./module-migration-mKhX88V_.js";
 import { r as applyPlan } from "./files-CX71yBm8.js";
 import { n as addBlocksToJson, s as keyText, t as addBlocksToConfig } from "./config-edit-CrWfk8s3.js";
-import { a as write, i as unlistedModuleFiles, r as nextStep } from "./sync-mANmYYoL.js";
+import { a as write, i as unlistedModuleFiles, r as nextStep } from "./sync-CHGMZCJ5.js";
 import { basename, dirname } from "node:path";
 import { readFile } from "node:fs/promises";
 import { SQL_MODULES, resolveBlocks } from "better-supabase/sql";

package/dist/cli/{add-DNOL9PDu.js → add-DMcrsWjC.js}

@@ -1,22 +1,22 @@
 import { a as list, p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
-import { t as VERSION } from "./version-CyavsyGA.js";
+import { t as VERSION } from "./version-T507a49w.js";
 import { a as parseNames, n as CliError } from "./errors-BTe6A15O.js";
 import { r as readIfExists, t as display } from "./io-DH1kcmmP.js";
-import { t as loadSnapshot } from "./snapshot-Bzcigm7T.js";
+import { t as loadSnapshot } from "./snapshot-C6vh_n3t.js";
 import { t as isRecord } from "./guards-CUlDNYZs.js";
-import { a as toCatalog } from "./source-WoLdcQzN.js";
-import { f as dataMigration } from "./module-migration-DOn6EmNz.js";
-import { a as findConfig, f as INTEGRATIONS, s as loadConfig } from "./config-9t5ec_N7.js";
+import { a as toCatalog } from "./source-BZbEK5if.js";
+import { f as dataMigration } from "./module-migration-mKhX88V_.js";
+import { a as findConfig, f as INTEGRATIONS, s as loadConfig } from "./config-2rwFHbwj.js";
 import { i as changeLines, n as PLAN_ARGS, r as applyPlan, u as planResult } from "./files-CX71yBm8.js";
-import { a as wiringFiles, d as libEntry, f as needsLib, i as wiringChecklist, l as importFrom, n as latestMigrationVersion, o as wiringFor, p as resolveIntegrations, s as TEMPLATES, u as isIntegration } from "./migration-safety-BbhLu2fo.js";
+import { a as wiringFiles, d as libEntry, f as needsLib, i as wiringChecklist, l as importFrom, n as latestMigrationVersion, o as wiringFor, p as resolveIntegrations, s as TEMPLATES, u as isIntegration } from "./migration-safety-NtB3dsRU.js";
 import { n as installCommand, t as detectProject } from "./detect-D9JaAX20.js";
 import { d as setBlockInJson, f as setPathInConfig, h as setPresetInJson, m as setPresetInConfig, n as addBlocksToJson, p as setPathInJson, r as addBlocksToWiring, t as addBlocksToConfig, u as setBlockInConfig } from "./config-edit-CrWfk8s3.js";
-import { t as syncModules } from "./sync-mANmYYoL.js";
-import { t as addModules } from "./add-C04vkBk9.js";
-import { n as ident } from "./live-Lmg-hYyO.js";
-import { t as blockNames } from "./blocks-Cb7mILFU.js";
-import { i as sourceArgs, n as SOURCE_ARGS } from "./source-args-IpJRJO5t.js";
+import { t as syncModules } from "./sync-CHGMZCJ5.js";
+import { t as addModules } from "./add-BinNYhFD.js";
+import { n as ident } from "./live-BvWGM4c3.js";
+import { t as blockNames } from "./blocks-DSgTifw0.js";
+import { i as sourceArgs, n as SOURCE_ARGS } from "./source-args-MTLYpifA.js";
 import { existsSync } from "node:fs";
 import { dirname, join, posix, resolve } from "node:path";
 import { readFile } from "node:fs/promises";
@@ -405,6 +405,8 @@ function proposeAdoption(block, tables, options = {}) {
 		if (Object.keys(mapped).length > 0) entryColumns[logical] = mapped;
 	}
 	const current = options.blocks?.[block];
+	const governed = current?.ownTablePolicies === void 0 ? [...chosen.values()].filter((table) => table !== null && (table.policies ?? []).some((policy) => policy.permissive && !policy.name.startsWith("bsb_"))).map((table) => `${table.schema}.${table.name}`) : [];
+	if (governed.length > 0) warnings.push(`${governed.join(", ")} already ${governed.length === 1 ? "has" : "have"} permissive policies of your own. To keep the block's bsb_ policies off ${governed.length === 1 ? "it" : "them"}, set blocks.${block}.ownTablePolicies: "app"; otherwise the block adds a policy for each command yours don't cover, and doctor (BS347) reports one that is wider than yours.`);
 	const entry = {
 		...current,
 		tables: entryTables,

package/dist/cli/add-z-3pXI6C.js

@@ -0,0 +1 @@
+export { t as addCommand } from "./add-DMcrsWjC.js";

package/dist/cli/{backfill-VFzf-TJP.js → backfill-DxBB62Zr.js}

@@ -1,10 +1,10 @@
 import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CbuPvI2x.js";
-import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-9t5ec_N7.js";
+import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-2rwFHbwj.js";
 import { t as connect } from "./db-CQCLx7cx.js";
-import { n as ident } from "./live-Lmg-hYyO.js";
-import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-IpJRJO5t.js";
+import { n as ident } from "./live-BvWGM4c3.js";
+import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-MTLYpifA.js";
 //#region src/cli/commands/backfill.ts
 const DEFAULT_BATCH = 1e3;
 const ARGS = {

package/dist/cli/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as run } from "./run-DkB0fhc9.js";
+import { i as run } from "./run-D48ZEU58.js";
 import { t as colorEnabled } from "./style-Bm2X5JrN.js";
 import { existsSync } from "node:fs";
 import { basename } from "node:path";

package/dist/cli/{blocks-Cb7mILFU.js → blocks-DSgTifw0.js}

@@ -1,7 +1,7 @@
 import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { t as SQL_ARGS } from "./args-UEwg0l-N.js";
-import { n as listModules, t as printModule } from "./print-D_xf8PPj.js";
+import { n as listModules, t as printModule } from "./print-Dh8iuPK3.js";
 import { t as decodePresetInput } from "./preset-BwmIfFnh.js";
 import { BLOCK_CATEGORIES } from "better-supabase/blocks";
 import { PRESET_CATALOG, PRESET_NAMES, glueCommand } from "better-supabase/preset";

package/dist/cli/{blocks-Bn7WUca5.js → blocks-rxOS-Mzz.js}

@@ -1 +1 @@
-export { n as blocksListCommand, r as blocksSearchCommand, i as blocksViewCommand } from "./blocks-Cb7mILFU.js";
+export { n as blocksListCommand, r as blocksSearchCommand, i as blocksViewCommand } from "./blocks-DSgTifw0.js";

package/dist/cli/{cache-DkplpIGe.js → cache-oU0yHKf0.js}

@@ -1,4 +1,4 @@
-import { t as VERSION } from "./version-CyavsyGA.js";
+import { t as VERSION } from "./version-T507a49w.js";
 import { dirname, resolve } from "node:path";
 import { createHash } from "node:crypto";
 import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";

package/dist/cli/{codemod-BbaE5dL_.js → codemod-Dsrv_3gQ.js}

@@ -4,7 +4,7 @@ import { n as CliError } from "./errors-BTe6A15O.js";
 import { t as migrateCliCall } from "./moved-CsfDQcyk.js";
 import { t as isRecord$1 } from "./guards-CUlDNYZs.js";
 import { a as changedFiles, i as changeLines, r as applyPlan, u as planResult } from "./files-CX71yBm8.js";
-import { i as schemasDirOf, n as migrationsDir, o as writtenByBlocks } from "./sql-layout-rFP0oq1N.js";
+import { i as schemasDirOf, n as migrationsDir, o as writtenByBlocks } from "./sql-layout-26LSoifK.js";
 import { a as configObject, c as mask, f as setPathInConfig, g as skipSpace, h as setPresetInJson, i as closingIndex, l as properties, m as setPresetInConfig, o as indentAt, p as setPathInJson, t as addBlocksToConfig, v as codeRanges } from "./config-edit-CrWfk8s3.js";
 import { i as legacyPrefixNames, n as LEGACY_PREFIXES, t as LEGACY_CLAIMS } from "./legacy-prefix-DkTA3Rhx.js";
 import { a as REVIEW_0_15, c as renameSubpaths, r as PLUGIN_IMPORT_RENAMES, s as SUBPATH_RENAMES_0_15, t as BLOCK_EXPORT_RENAMES } from "./codemod-block-renames-BuSaTE_G.js";

package/dist/cli/{config-9t5ec_N7.js → config-2rwFHbwj.js}

@@ -778,6 +778,7 @@ const blockEntries = {
 		"user",
 		"none"
 	])),
+	ownTablePolicies: optional(picklist(["block", "app"])),
 	functions: optional(stringRecord),
 	permissions: optional(stringRecord),
 	names: optional(union([entityName, record(string(), union([entityName, strictObject({
@@ -1261,7 +1262,8 @@ const FLAT = {
 			"tenant",
 			"user",
 			"none"
-		]))
+		])),
+		ownTablePolicies: optional(picklist(["block", "app"]))
 	})),
 	seed: optional(strictObject({
 		entry: optional(string()),

package/dist/cli/{config-CBqkQjjN.js → config-C6XylzKz.js}

@@ -1 +1 @@
-export { t as applyEnvironment, n as databaseUrl, r as defaultConfig, i as discoverConfig, a as findConfig, o as importExport, s as loadConfig, c as readSupabasePort, l as stdinDatabaseUrl } from "./config-9t5ec_N7.js";
+export { t as applyEnvironment, n as databaseUrl, r as defaultConfig, i as discoverConfig, a as findConfig, o as importExport, s as loadConfig, c as readSupabasePort, l as stdinDatabaseUrl } from "./config-2rwFHbwj.js";

package/dist/cli/{content-mapper-Cdx6arxu.js → content-mapper-DLbXilBz.js}

@@ -1,6 +1,6 @@
 import { r as readIfExists } from "./io-DH1kcmmP.js";
-import { t as CACHE_DIR } from "./cache-DkplpIGe.js";
-import { x as installedVersion } from "./snapshot-Bzcigm7T.js";
+import { t as CACHE_DIR } from "./cache-oU0yHKf0.js";
+import { x as installedVersion } from "./snapshot-C6vh_n3t.js";
 import { t as i } from "./jsonc-D5Fu67jw.js";
 import { resolve } from "node:path";
 import { createHash } from "node:crypto";

package/dist/cli/{db-DrBI_HNv.js → db-Bwrr3GHM.js}

@@ -2,11 +2,11 @@ import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CbuPvI2x.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-9t5ec_N7.js";
+import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-2rwFHbwj.js";
 import { d as readSupabaseToml, f as schemaPaths, n as declarativeSchemasDir, p as sqlWorkflow } from "./supabase-toml-CncmQbO0.js";
 import { r as supabaseCli } from "./exec--Q1ZEWUW.js";
 import { t as connect } from "./db-CQCLx7cx.js";
-import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-IpJRJO5t.js";
+import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-MTLYpifA.js";
 import { a as migrationFiles, i as isShadowFailure, o as migrationVersion, r as inStackDiff, t as MIGRATION_HEADER } from "./in-stack-diff-DQTW53Vf.js";
 import { dirname, join, resolve } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";