better-supabase 0.16.0 → 0.17.0

package/dist/cli/index.js

@@ -1,12 +1,12 @@
 import { a as list, r as defineCliCommand } from "./command-CQ61x6gN.js";
-import { i as run, n as createCli, r as help, t as commandNames } from "./run-MRET30vh.js";
-import { t as VERSION } from "./version-B2Dr6VmJ.js";
+import { i as run, n as createCli, r as help, t as commandNames } from "./run-D48ZEU58.js";
+import { t as VERSION } from "./version-T507a49w.js";
 import { n as CliError, t as CLI_ERRORS_URL } from "./errors-BTe6A15O.js";
-import { a as serializeSnapshot, i as parseSnapshot, l as introspect, t as loadSnapshot } from "./snapshot-uTUlEzY2.js";
-import { a as emitBlockConfig, l as buildModel, o as GENERATED_HEADER, r as renderFiles, s as emitModule } from "./render-5y5a1QZr.js";
-import { a as toCatalog, n as managementSource, r as pgSource } from "./source-D2gJHKwC.js";
-import { s as loadConfig } from "./config-9t5ec_N7.js";
-import { n as runGen } from "./run-Bs4OKdDI.js";
+import { a as serializeSnapshot, i as parseSnapshot, l as introspect, t as loadSnapshot } from "./snapshot-C6vh_n3t.js";
+import { a as emitBlockConfig, l as buildModel, o as GENERATED_HEADER, r as renderFiles, s as emitModule } from "./render-ChIwdIOJ.js";
+import { a as toCatalog, n as managementSource, r as pgSource } from "./source-BZbEK5if.js";
+import { s as loadConfig } from "./config-2rwFHbwj.js";
+import { n as runGen } from "./run-CLSHSVYo.js";
 //#region src/cli/introspect/from-catalog.ts
 /**
 * Builds a snapshot from catalog records: the inverse of `toCatalog`. Tests and

package/dist/cli/{init-CHj9ad4S.js → init-DrQlf9RL.js}

@@ -2,14 +2,14 @@ import { a as list, p as commandMeta, r as defineCliCommand } from "./command-CQ
 import { i as plain } from "./style-Bm2X5JrN.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { r as readIfExists } from "./io-DH1kcmmP.js";
-import { l as TYPEGEN_VERSION } from "./cache-AznIssjI.js";
-import { a as findConfig, s as loadConfig } from "./config-9t5ec_N7.js";
-import { r as contentMapperFiles } from "./content-mapper-DCrz6OIv.js";
+import { l as TYPEGEN_VERSION } from "./cache-oU0yHKf0.js";
+import { a as findConfig, s as loadConfig } from "./config-2rwFHbwj.js";
+import { r as contentMapperFiles } from "./content-mapper-DLbXilBz.js";
 import { i as changeLines, n as PLAN_ARGS, r as applyPlan, u as planResult } from "./files-CX71yBm8.js";
-import { C as promptConventions, S as hasConventionFlags, _ as templatePlan, b as conventionFlags, c as AUTHZ_NOTE, d as chooseIntegrations, f as integrationFiles, g as templateContextFor, h as parseIntegrations, i as blocksWiringPath, l as createUrlParam, m as packagesFor, o as writeDesign, p as overwrite, r as blockConfigImport, s as readPresetInput, u as CANCELLED, v as CONVENTION_ARGS, w as withConventions, x as defaultConventions, y as CONVENTION_COMPLETIONS } from "./add-D7TkPdco.js";
-import { a as wiringFiles, c as baseFiles, f as needsLib, i as wiringChecklist, m as suggestedIntegrations, n as latestMigrationVersion, o as wiringFor, p as resolveIntegrations, r as configInstances, s as TEMPLATES } from "./migration-safety-BnnXPAro.js";
+import { C as promptConventions, S as hasConventionFlags, _ as templatePlan, b as conventionFlags, c as AUTHZ_NOTE, d as chooseIntegrations, f as integrationFiles, g as templateContextFor, h as parseIntegrations, i as blocksWiringPath, l as createUrlParam, m as packagesFor, o as writeDesign, p as overwrite, r as blockConfigImport, s as readPresetInput, u as CANCELLED, v as CONVENTION_ARGS, w as withConventions, x as defaultConventions, y as CONVENTION_COMPLETIONS } from "./add-DMcrsWjC.js";
+import { a as wiringFiles, c as baseFiles, f as needsLib, i as wiringChecklist, m as suggestedIntegrations, n as latestMigrationVersion, o as wiringFor, p as resolveIntegrations, r as configInstances, s as TEMPLATES } from "./migration-safety-NtB3dsRU.js";
 import { n as installCommand, t as detectProject } from "./detect-D9JaAX20.js";
-import { s as enablePgDelta, t as syncModules } from "./sync-CZMRB3aU.js";
+import { s as enablePgDelta, t as syncModules } from "./sync-CHGMZCJ5.js";
 import { existsSync } from "node:fs";
 import { join, posix, resolve } from "node:path";
 import { glob, readFile } from "node:fs/promises";

package/dist/cli/{live-DGdLR41j.js → live-BvWGM4c3.js}

@@ -1,6 +1,6 @@
 import { r as errorText } from "./errors-BTe6A15O.js";
-import "./source-D2gJHKwC.js";
-import { l as tableObject, n as exposed, s as qualified, t as catalogOf } from "./shared-BLqbvY2x.js";
+import "./source-BZbEK5if.js";
+import { l as tableObject, n as exposed, s as qualified, t as catalogOf } from "./shared-D0XBFSlz.js";
 //#region src/cli/doctor/reserved-roles.ts
 /**
 * Supautils' `reserved_roles` on Supabase. Nobody but a superuser may alter,

package/dist/cli/{mcp-BZno503V.js → mcp-BrOnGB15.js}

@@ -1,6 +1,6 @@
 import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
-import { a as envelope, i as run } from "./run-MRET30vh.js";
-import { t as VERSION } from "./version-B2Dr6VmJ.js";
+import { a as envelope, i as run } from "./run-D48ZEU58.js";
+import { t as VERSION } from "./version-T507a49w.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { n as consentToken } from "./agent-CbuPvI2x.js";
 import { C as optional, D as record, N as unknown, a as array, d as is, j as string$1, k as safeParse, o as boolean, t as PROCESS_ENV, x as object } from "./env-DMgjB_4y.js";

package/dist/cli/{metadata-BfgHMe4q.js → metadata-BNSdPuKp.js}

@@ -1,8 +1,8 @@
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { i as readStdin } from "./io-DH1kcmmP.js";
-import { m as parseMetadataDocument, u as MetadataRejectedError } from "./snapshot-uTUlEzY2.js";
-import { c as metaPaths, n as render } from "./render-5y5a1QZr.js";
-import { i as generationNotices, n as runGen, o as fromMetadata, r as UNFORMATTED, t as refuseRowConditionedBuckets } from "./run-Bs4OKdDI.js";
+import { m as parseMetadataDocument, u as MetadataRejectedError } from "./snapshot-C6vh_n3t.js";
+import { c as metaPaths, n as render } from "./render-ChIwdIOJ.js";
+import { i as generationNotices, n as runGen, o as fromMetadata, r as UNFORMATTED, t as refuseRowConditionedBuckets } from "./run-CLSHSVYo.js";
 import { basename, join, relative, resolve, sep } from "node:path";
 import { readFile } from "node:fs/promises";
 import { jsonSchema, standardSchema, valibot, zod } from "better-supabase/config";

package/dist/cli/{migration-safety-BnnXPAro.js → migration-safety-NtB3dsRU.js}

@@ -1,5 +1,5 @@
-import { f as INTEGRATIONS } from "./config-9t5ec_N7.js";
-import { c as splitStatements } from "./shared-BLqbvY2x.js";
+import { f as INTEGRATIONS } from "./config-2rwFHbwj.js";
+import { c as splitStatements } from "./shared-D0XBFSlz.js";
 import { dirname, join, posix } from "node:path";
 import { readdir } from "node:fs/promises";
 import { INTEGRATION_INFO, groupEntries } from "better-supabase/config";

package/dist/cli/{module-migration-O_IxewFs.js → module-migration-mKhX88V_.js}

@@ -2,7 +2,7 @@ import { n as CliError } from "./errors-BTe6A15O.js";
 import { d as readSupabaseToml, p as sqlWorkflow } from "./supabase-toml-CncmQbO0.js";
 import { t as importFresh } from "./fresh-import-DzgsGHkX.js";
 import { i as changeLines, r as applyPlan } from "./files-CX71yBm8.js";
-import { a as sqlPlan, i as schemasDirOf, n as migrationsDir, r as moduleLayoutFor } from "./sql-layout-lUWenjJw.js";
+import { a as sqlPlan, i as schemasDirOf, n as migrationsDir, r as moduleLayoutFor } from "./sql-layout-26LSoifK.js";
 import { resolve } from "node:path";
 import { readFile, readdir } from "node:fs/promises";
 import { MODULE_ID_TYPES, compileReadSets, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, renderBlocks, resolveBlocks, scopeProblems, templateFunctions } from "better-supabase/sql";

package/dist/cli/{print-DosQIFSy.js → print-Dh8iuPK3.js}

@@ -1,5 +1,5 @@
 import { n as CliError } from "./errors-BTe6A15O.js";
-import { g as layout, o as migrationModules, r as latestMigration, u as writesMigrations } from "./module-migration-O_IxewFs.js";
+import { g as layout, o as migrationModules, r as latestMigration, u as writesMigrations } from "./module-migration-mKhX88V_.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 import { SQL_MODULES, contractSignature, customContracts, moduleBody, moduleFilePaths } from "better-supabase/sql";

package/dist/cli/{remove-DK2G_KHm.js → remove-DfFXVBRr.js}

@@ -2,15 +2,15 @@ import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { r as readIfExists, t as display } from "./io-DH1kcmmP.js";
-import { _ as layoutFor } from "./module-migration-O_IxewFs.js";
+import { _ as layoutFor } from "./module-migration-mKhX88V_.js";
 import { i as changeLines, n as PLAN_ARGS, r as applyPlan, t as HAND_EDITED, u as planResult } from "./files-CX71yBm8.js";
-import { a as sqlPlan } from "./sql-layout-lUWenjJw.js";
-import { g as templateContextFor, i as blocksWiringPath, n as blockClients } from "./add-D7TkPdco.js";
+import { a as sqlPlan } from "./sql-layout-26LSoifK.js";
+import { g as templateContextFor, i as blocksWiringPath, n as blockClients } from "./add-DMcrsWjC.js";
 import { t as detectProject } from "./detect-D9JaAX20.js";
 import { _ as wiringBlocks, a as configObject, c as mask, i as closingIndex, l as properties } from "./config-edit-CrWfk8s3.js";
-import { n as guardedRemoval } from "./sync-CZMRB3aU.js";
+import { n as guardedRemoval } from "./sync-CHGMZCJ5.js";
 import { t as SQL_ARGS } from "./args-UEwg0l-N.js";
-import { t as blockNames } from "./blocks-xk-SE8gS.js";
+import { t as blockNames } from "./blocks-DSgTifw0.js";
 import { i as tidyInline, t as cutRange } from "./config-group-C8tjut39.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";

package/dist/cli/{render-5y5a1QZr.js → render-ChIwdIOJ.js}

@@ -1,10 +1,10 @@
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { n as importPath } from "./io-DH1kcmmP.js";
-import { i as cachedTypesModule, n as cachedDatabaseTypes, s as typesModuleKey } from "./cache-AznIssjI.js";
+import { i as cachedTypesModule, n as cachedDatabaseTypes, s as typesModuleKey } from "./cache-oU0yHKf0.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
-import { f as generateDatabaseTypes, h as restrictSchemas, p as oxfmtInstalled, v as tsTypeOf } from "./snapshot-uTUlEzY2.js";
+import { f as generateDatabaseTypes, h as restrictSchemas, p as oxfmtInstalled, v as tsTypeOf } from "./snapshot-C6vh_n3t.js";
 import { t as isRecord$1 } from "./guards-CUlDNYZs.js";
-import { a as toCatalog } from "./source-D2gJHKwC.js";
+import { a as toCatalog } from "./source-BZbEK5if.js";
 import { basename, dirname, isAbsolute, join, posix, relative, resolve } from "node:path";
 import { entityNames } from "better-supabase/blocks";
 import { DEFAULT_CLAIMS, blockEntities, blockEntityRenames, blockSubjectTypes, tenantClaimPaths, tenantNameOf } from "better-supabase/config";
@@ -1627,7 +1627,7 @@ function schemaExtensions(config) {
 		return [{
 			export: manifest.extension,
 			subpath: `blocks/${manifest.name}`,
-			args: manifest.name === "memberships" ? tenantArgs : ""
+			args: manifest.name === "memberships" ? tenantArgs : STAMPED.has(manifest.name) ? stampArgs(name, config.blocks?.[name]?.options?.["stamp"]) : ""
 		}];
 	});
 	if (tenant !== void 0 && !extensions.some((entry) => entry.subpath === "blocks/memberships")) extensions.push({
@@ -1637,6 +1637,12 @@ function schemaExtensions(config) {
 	});
 	return extensions;
 }
+const STAMPED = /* @__PURE__ */ new Set(["created-by", "updated-at"]);
+function stampArgs(name, stamp) {
+	if (stamp === void 0 || stamp === "client") return "";
+	if (stamp === "trigger") return "{ stamp: \"trigger\" }";
+	throw new TypeError(`blocks.${name}.options.stamp must be "client" or "trigger", got ${JSON.stringify(stamp)}`);
+}
 /** The installed blocks with their final names, for `GeneratorModel.blocks`. */
 function generatorBlocks(config) {
 	return Object.entries(blockConfigEntries(config)).filter(([, entry]) => entry.block === void 0).map(([name, entry]) => {

package/dist/cli/{run-Bs4OKdDI.js → run-CLSHSVYo.js}

@@ -1,14 +1,14 @@
 import { r as errorText } from "./errors-BTe6A15O.js";
 import { a as sameText, t as display } from "./io-DH1kcmmP.js";
-import { c as writeAtomic, o as storeTypesModule, s as typesModuleKey, t as CACHE_DIR } from "./cache-AznIssjI.js";
+import { c as writeAtomic, o as storeTypesModule, s as typesModuleKey, t as CACHE_DIR } from "./cache-oU0yHKf0.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
-import { _ as stabilizeMetadata, b as typegenVersionNotice, p as oxfmtInstalled, t as loadSnapshot, y as typegenVersion } from "./snapshot-uTUlEzY2.js";
-import { n as render } from "./render-5y5a1QZr.js";
-import { C as entitlementsMode, E as unsafeKey, S as entitlementRequirements, T as providerLabel, b as accessProviderMode, c as sameModuleMigration, l as writeLatestMigration, n as READ_SETS_SUFFIX, r as latestMigration, u as writesMigrations, w as moduleKeyProblems, x as accessRequirements, y as compiledReadSets } from "./module-migration-O_IxewFs.js";
-import { s as schemaStampPath } from "./content-mapper-DCrz6OIv.js";
+import { _ as stabilizeMetadata, b as typegenVersionNotice, p as oxfmtInstalled, t as loadSnapshot, y as typegenVersion } from "./snapshot-C6vh_n3t.js";
+import { n as render } from "./render-ChIwdIOJ.js";
+import { C as entitlementsMode, E as unsafeKey, S as entitlementRequirements, T as providerLabel, b as accessProviderMode, c as sameModuleMigration, l as writeLatestMigration, n as READ_SETS_SUFFIX, r as latestMigration, u as writesMigrations, w as moduleKeyProblems, x as accessRequirements, y as compiledReadSets } from "./module-migration-mKhX88V_.js";
+import { s as schemaStampPath } from "./content-mapper-DLbXilBz.js";
 import { a as changedFiles, d as fileDiff, i as changeLines, r as applyPlan, s as hasConflicts } from "./files-CX71yBm8.js";
-import { n as migrationsDir, o as writtenByBlocks } from "./sql-layout-lUWenjJw.js";
-import { l as tableObject, n as exposed, o as policyObject, s as qualified, t as catalogOf } from "./shared-BLqbvY2x.js";
+import { n as migrationsDir, o as writtenByBlocks } from "./sql-layout-26LSoifK.js";
+import { l as tableObject, n as exposed, o as policyObject, s as qualified, t as catalogOf } from "./shared-D0XBFSlz.js";
 import { existsSync } from "node:fs";
 import { dirname, isAbsolute, relative, resolve, sep } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/cli/{run-MRET30vh.js → run-D48ZEU58.js}

@@ -1,6 +1,6 @@
 import { c as COMMANDS, d as GROUPS, f as RESERVED_NAMES, h as runCommand, i as joinRepeated, m as parseArgs$2, o as listArgs, s as runsWithInvalidConfig, t as GLOBAL_ARGS, u as DOCS_ORIGIN } from "./command-CQ61x6gN.js";
 import { n as highlight, r as painter } from "./style-Bm2X5JrN.js";
-import { t as VERSION } from "./version-B2Dr6VmJ.js";
+import { t as VERSION } from "./version-T507a49w.js";
 import { n as CliError, o as toCliError } from "./errors-BTe6A15O.js";
 import { a as missingInputNext, o as resolveAgent, t as checkConsent } from "./agent-CbuPvI2x.js";
 import { a as globalFlags, c as resolveCommand, i as commandTree, n as closestName, o as isVariadic, r as commandArgs, t as checkArgs } from "./parse-B9Iv_-Pf.js";
@@ -16,35 +16,35 @@ import { resolve } from "node:path";
 * loads on demand, so `--version` and `--help` import no command.
 */
 const LOADERS = [
-	["init", () => import("./init-CHj9ad4S.js").then((m) => m.initCommand)],
-	["add", () => import("./add-Bfb_ISrO.js").then((m) => m.addCommand)],
-	["remove", () => import("./remove-DK2G_KHm.js").then((m) => m.removeCommand)],
-	["upgrade", () => import("./upgrade-fVsJniXm.js").then((m) => m.upgradeCommand)],
-	["gen", () => import("./gen-CFkYUnWq.js").then((m) => m.genCommand)],
-	["doctor", () => import("./doctor-DkOSLPEQ.js").then((m) => m.doctorCommand)],
-	["db query", () => import("./db-DrBI_HNv.js").then((m) => m.dbQueryCommand)],
-	["db diff", () => import("./db-DrBI_HNv.js").then((m) => m.dbDiffCommand)],
-	["db seed", () => import("./seed-D6XijwbR.js").then((m) => m.seedCommand)],
-	["db backfill", () => import("./backfill-DIz5DnlQ.js").then((m) => m.dbBackfillCommand)],
+	["init", () => import("./init-DrQlf9RL.js").then((m) => m.initCommand)],
+	["add", () => import("./add-z-3pXI6C.js").then((m) => m.addCommand)],
+	["remove", () => import("./remove-DfFXVBRr.js").then((m) => m.removeCommand)],
+	["upgrade", () => import("./upgrade-GB9rqUGT.js").then((m) => m.upgradeCommand)],
+	["gen", () => import("./gen-CeG6lbka.js").then((m) => m.genCommand)],
+	["doctor", () => import("./doctor-CKt5Yyl4.js").then((m) => m.doctorCommand)],
+	["db query", () => import("./db-Bwrr3GHM.js").then((m) => m.dbQueryCommand)],
+	["db diff", () => import("./db-Bwrr3GHM.js").then((m) => m.dbDiffCommand)],
+	["db seed", () => import("./seed-CUxW5Dks.js").then((m) => m.seedCommand)],
+	["db backfill", () => import("./backfill-DxBB62Zr.js").then((m) => m.dbBackfillCommand)],
 	["dev env", () => import("./env-CAU1nknN.js").then((m) => m.envCommand)],
 	["dev run", () => import("./run-BXx6D1aR.js").then((m) => m.runCommand)],
 	["dev keys", () => import("./keys-DGEpMbeB.js").then((m) => m.keysCommand)],
 	["dev stack ls", () => import("./stack-CWEHdO0b.js").then((m) => m.stackLsCommand)],
 	["dev stack prune", () => import("./stack-CWEHdO0b.js").then((m) => m.stackPruneCommand)],
-	["blocks list", () => import("./blocks-Bp5RPoft.js").then((m) => m.blocksListCommand)],
-	["blocks view", () => import("./blocks-Bp5RPoft.js").then((m) => m.blocksViewCommand)],
-	["blocks search", () => import("./blocks-Bp5RPoft.js").then((m) => m.blocksSearchCommand)],
-	["spec emit", () => import("./spec-DUjOtciN.js").then((m) => m.specEmitCommand)],
-	["spec validate", () => import("./spec-DUjOtciN.js").then((m) => m.specValidateCommand)],
-	["mcp", () => import("./mcp-BZno503V.js").then((m) => m.mcpCommand)],
+	["blocks list", () => import("./blocks-rxOS-Mzz.js").then((m) => m.blocksListCommand)],
+	["blocks view", () => import("./blocks-rxOS-Mzz.js").then((m) => m.blocksViewCommand)],
+	["blocks search", () => import("./blocks-rxOS-Mzz.js").then((m) => m.blocksSearchCommand)],
+	["spec emit", () => import("./spec-C-dhdKwa.js").then((m) => m.specEmitCommand)],
+	["spec validate", () => import("./spec-C-dhdKwa.js").then((m) => m.specValidateCommand)],
+	["mcp", () => import("./mcp-BrOnGB15.js").then((m) => m.mcpCommand)],
 	["skills list", () => import("./skills-toUan_OV.js").then((m) => m.skillsListCommand)],
 	["skills install", () => import("./skills-toUan_OV.js").then((m) => m.skillsInstallCommand)],
-	["codemod 0.4", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.4"))],
-	["codemod 0.5", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.5"))],
-	["codemod 0.6", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.6"))],
-	["codemod 0.9", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.9"))],
-	["codemod 0.11", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.11"))],
-	["codemod 0.15", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.15"))],
+	["codemod 0.4", () => import("./codemod-Dsrv_3gQ.js").then((m) => m.codemodCommand("0.4"))],
+	["codemod 0.5", () => import("./codemod-Dsrv_3gQ.js").then((m) => m.codemodCommand("0.5"))],
+	["codemod 0.6", () => import("./codemod-Dsrv_3gQ.js").then((m) => m.codemodCommand("0.6"))],
+	["codemod 0.9", () => import("./codemod-Dsrv_3gQ.js").then((m) => m.codemodCommand("0.9"))],
+	["codemod 0.11", () => import("./codemod-Dsrv_3gQ.js").then((m) => m.codemodCommand("0.11"))],
+	["codemod 0.15", () => import("./codemod-Dsrv_3gQ.js").then((m) => m.codemodCommand("0.15"))],
 	["completion", () => import("./completion-BwI0_Ap5.js").then((m) => m.completionCommand)],
 	["config", () => import("./config-CPux9Wa7.js").then((m) => m.configCommand)]
 ];
@@ -594,7 +594,7 @@ function cliFromTree(init, extra = {}) {
 		try {
 			const [loaded, { defaultConfig, discoverConfig, loadConfig }, { configEnvironment, isCi, parseEnv }] = await Promise.all([
 				node.load(),
-				import("./config-CBqkQjjN.js"),
+				import("./config-C6XylzKz.js"),
 				import("./env-C-Bl6Awn.js")
 			]);
 			command = loaded;

package/dist/cli/{seed-Cz8PcXeT.js → seed-CG-pA-5N.js}

@@ -1,11 +1,11 @@
 import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
 import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CbuPvI2x.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { l as stdinDatabaseUrl, n as databaseUrl, o as importExport } from "./config-9t5ec_N7.js";
+import { l as stdinDatabaseUrl, n as databaseUrl, o as importExport } from "./config-2rwFHbwj.js";
 import { m as supabaseDir } from "./supabase-toml-CncmQbO0.js";
 import { t as connect } from "./db-CQCLx7cx.js";
 import { c as insideRoot, i as changeLines, n as PLAN_ARGS, r as applyPlan, s as hasConflicts, u as planResult } from "./files-CX71yBm8.js";
-import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-IpJRJO5t.js";
+import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-MTLYpifA.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/cli/seed-CUxW5Dks.js

@@ -0,0 +1 @@
+export { n as seedCommand } from "./seed-CG-pA-5N.js";

package/dist/cli/{shared-BLqbvY2x.js → shared-D0XBFSlz.js}

@@ -1,4 +1,4 @@
-import { a as toCatalog } from "./source-D2gJHKwC.js";
+import { a as toCatalog } from "./source-BZbEK5if.js";
 import { h as tomlGet, p as sqlWorkflow, r as detectWorkflow } from "./supabase-toml-CncmQbO0.js";
 //#region src/cli/doctor/shared.ts
 const catalogs = /* @__PURE__ */ new WeakMap();

package/dist/cli/{snapshot-uTUlEzY2.js → snapshot-C6vh_n3t.js}

@@ -1,8 +1,8 @@
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
-import { d as readExtras, l as TYPEGEN_VERSION, r as cachedIntrospect } from "./cache-AznIssjI.js";
+import { d as readExtras, l as TYPEGEN_VERSION, r as cachedIntrospect } from "./cache-oU0yHKf0.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
-import { n as managementSource, r as pgSource } from "./source-D2gJHKwC.js";
-import { n as databaseUrl, u as accessToken } from "./config-9t5ec_N7.js";
+import { n as managementSource, r as pgSource } from "./source-BZbEK5if.js";
+import { n as databaseUrl, u as accessToken } from "./config-2rwFHbwj.js";
 import { d as readSupabaseToml, f as schemaPaths, h as tomlGet, u as pgFunctionHooks } from "./supabase-toml-CncmQbO0.js";
 import { t as connect } from "./db-CQCLx7cx.js";
 import { existsSync } from "node:fs";

package/dist/cli/{source-D2gJHKwC.js → source-BZbEK5if.js}

@@ -1,4 +1,4 @@
-import { t as VERSION } from "./version-B2Dr6VmJ.js";
+import { t as VERSION } from "./version-T507a49w.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { r as redactUrl } from "./redact-KGAk2Ul9.js";
 import { n as HTTP_CHANNEL } from "./trace-VbdO6bcN.js";

package/dist/cli/{source-args-IpJRJO5t.js → source-args-MTLYpifA.js}

@@ -1,5 +1,5 @@
 import { n as CliError } from "./errors-BTe6A15O.js";
-import { l as stdinDatabaseUrl } from "./config-9t5ec_N7.js";
+import { l as stdinDatabaseUrl } from "./config-2rwFHbwj.js";
 //#region src/cli/commands/source-args.ts
 /**
 * The connection string from stdin, for commands that connect but read no

package/dist/cli/{spec-Cm2einTO.js → spec-B4LhpI6t.js}

@@ -1,9 +1,9 @@
 import { n as __require, t as __commonJSMin } from "./rolldown-runtime-kJ_i4yPo.js";
 import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
-import { t as VERSION } from "./version-B2Dr6VmJ.js";
+import { t as VERSION } from "./version-T507a49w.js";
 import { i as failedResult, n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { c as writeAtomic, t as CACHE_DIR } from "./cache-AznIssjI.js";
+import { c as writeAtomic, t as CACHE_DIR } from "./cache-oU0yHKf0.js";
 import { t as isRecord } from "./guards-CUlDNYZs.js";
 import { t as importFresh } from "./fresh-import-DzgsGHkX.js";
 import { a as changedFiles, i as changeLines, r as applyPlan } from "./files-CX71yBm8.js";

package/dist/cli/{spec-DUjOtciN.js → spec-C-dhdKwa.js}

@@ -1 +1 @@
-export { n as specEmitCommand, i as specValidateCommand } from "./spec-Cm2einTO.js";
+export { n as specEmitCommand, i as specValidateCommand } from "./spec-B4LhpI6t.js";

package/dist/cli/{sql-layout-lUWenjJw.js → sql-layout-26LSoifK.js}

@@ -1,5 +1,5 @@
-import { d as TypegenMissingError, i as parseSnapshot } from "./snapshot-uTUlEzY2.js";
-import { a as toCatalog } from "./source-D2gJHKwC.js";
+import { d as TypegenMissingError, i as parseSnapshot } from "./snapshot-C6vh_n3t.js";
+import { a as toCatalog } from "./source-BZbEK5if.js";
 import { d as readSupabaseToml, f as schemaPaths, n as declarativeSchemasDir, p as sqlWorkflow } from "./supabase-toml-CncmQbO0.js";
 import { existsSync } from "node:fs";
 import { dirname, join, relative, resolve, sep } from "node:path";

package/dist/cli/{sync-CZMRB3aU.js → sync-CHGMZCJ5.js}

@@ -1,9 +1,9 @@
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { _ as layoutFor, c as sameModuleMigration, d as DATA_NEXT, l as writeLatestMigration, m as writeExtensionsMigration, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations } from "./module-migration-O_IxewFs.js";
+import { _ as layoutFor, c as sameModuleMigration, d as DATA_NEXT, l as writeLatestMigration, m as writeExtensionsMigration, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations } from "./module-migration-mKhX88V_.js";
 import { d as readSupabaseToml, f as schemaPaths, h as tomlGet, i as diffEngine, l as migrationCommand, o as findSupabaseRoot, p as sqlWorkflow, t as PGDELTA_TABLE } from "./supabase-toml-CncmQbO0.js";
 import { d as fileDiff, i as changeLines, l as keepHandEdit, o as handEditedError, r as applyPlan, t as HAND_EDITED, u as planResult } from "./files-CX71yBm8.js";
-import { a as sqlPlan, n as migrationsDir } from "./sql-layout-lUWenjJw.js";
+import { a as sqlPlan, n as migrationsDir } from "./sql-layout-26LSoifK.js";
 import { t as loadTopics } from "./topics-BpdnYmWb.js";
 import { t as orphanedBlockFiles } from "./orphans-BAboqyVM.js";
 import { dirname, join, resolve } from "node:path";

package/dist/cli/{upgrade-BFEIMC7U.js → upgrade-C0dVsqNX.js}

@@ -1,8 +1,8 @@
 import { t as display } from "./io-DH1kcmmP.js";
-import { _ as layoutFor, a as migrationInstances, c as sameModuleMigration, o as migrationModules, p as migrationStamp, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations } from "./module-migration-O_IxewFs.js";
+import { _ as layoutFor, a as migrationInstances, c as sameModuleMigration, o as migrationModules, p as migrationStamp, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations } from "./module-migration-mKhX88V_.js";
 import { d as fileDiff, i as changeLines, r as applyPlan } from "./files-CX71yBm8.js";
-import { a as sqlPlan, n as migrationsDir } from "./sql-layout-lUWenjJw.js";
-import { a as write, o as topicPolicyFile, r as nextStep } from "./sync-CZMRB3aU.js";
+import { a as sqlPlan, n as migrationsDir } from "./sql-layout-26LSoifK.js";
+import { a as write, o as topicPolicyFile, r as nextStep } from "./sync-CHGMZCJ5.js";
 import { a as legacyPrefixSql, i as legacyPrefixNames, r as legacyBlocksTableSql } from "./legacy-prefix-DkTA3Rhx.js";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/cli/{upgrade-fVsJniXm.js → upgrade-GB9rqUGT.js}

@@ -1,8 +1,8 @@
 import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
-import { t as syncModules } from "./sync-CZMRB3aU.js";
+import { t as syncModules } from "./sync-CHGMZCJ5.js";
 import { t as SQL_ARGS } from "./args-UEwg0l-N.js";
-import { t as upgrade } from "./upgrade-BFEIMC7U.js";
+import { t as upgrade } from "./upgrade-C0dVsqNX.js";
 //#region src/cli/commands/upgrade.ts
 const UPGRADE_ARGS = {
 	check: {

package/dist/cli/{version-B2Dr6VmJ.js → version-T507a49w.js}

@@ -1,4 +1,4 @@
 //#region src/cli/version.ts
-const VERSION = "0.16.0";
+const VERSION = "0.17.0";
 //#endregion
 export { VERSION as t };

package/dist/client/index.d.ts

@@ -1,8 +1,8 @@
 import { a as DataSync, c as LocalTablesOption, i as DataEntry, l as liveEngine, n as DataEngine, o as DataSyncState, r as DataEngineOptions, s as LiveEngineOptions, t as DataChanges, u as memoryEngine } from "../data-engine-BWoz9lED.js";
-import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-BAxoPKZx.js";
-import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../ports-mObLgH1z.js";
-import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../bind-JGCPGUJh.js";
-import { a as defineController, i as ControllerState, n as Controller, o as whileSignedIn, r as ControllerParts, t as AuthPort } from "../controller-BW-5Opig.js";
+import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-tnfOTa3-.js";
+import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../ports-DnpAuTvB.js";
+import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../bind-C801IaK-.js";
+import { a as defineController, i as ControllerState, n as Controller, o as whileSignedIn, r as ControllerParts, t as AuthPort } from "../controller-CJUXhshv.js";
 import { n as FunctionContract } from "../function-contract-DxFNOmsm.js";
-import { a as webDeepLinks, c as webPorts, d as FunctionContracts, f as FunctionsHost, h as functions, i as WebPushTokenOptions, l as webPushToken, m as TypedFunctions, n as createClient, o as webFilePicker, p as InvokeOptions, r as PushRegistrationLike, s as webKeyboard, t as ClientOptions, u as webStorage } from "../index-DZKCc2WM.js";
+import { a as webDeepLinks, c as webPorts, d as FunctionContracts, f as FunctionsHost, h as functions, i as WebPushTokenOptions, l as webPushToken, m as TypedFunctions, n as createClient, o as webFilePicker, p as InvokeOptions, r as PushRegistrationLike, s as webKeyboard, t as ClientOptions, u as webStorage } from "../index-DUxXdQN_.js";
 export { type AuthPort, type AuthSnapshot, type AuthUser, type BetterClient, type BindClientOptions, type ClientAuth, ClientOptions, type ClientPorts, type Controller, type ControllerParts, type ControllerState, type DataChanges, type DataEngine, type DataEngineOptions, type DataEntry, type DataSync, type DataSyncState, type DeepLinkPort, type FilePickerPort, type FunctionContract, type FunctionContracts, type FunctionsHost, type InvokeOptions, type KeyboardPort, type LiveEngineOptions, type LocalTablesOption, type PickFilesOptions, type PickedFile, type PushRegistrationLike, type PushTokenPort, type Shortcut, type StoragePort, type TopicHandle, type TopicPort, type TopicWatch, type TypedFunctions, type UploadDestination, type UploadPort, type WebPushTokenOptions, bindClient, createClient, defineController, functions, liveEngine, memoryEngine, memoryStorage, storageUpload, webDeepLinks, webFilePicker, webKeyboard, webPorts, webPushToken, webStorage, whileSignedIn };

package/dist/client/native/index.d.ts

@@ -1,9 +1,9 @@
 import { t as AsyncResult } from "../../result-DZeA5KS6.js";
 import { T as UploadOptions, w as UploadBody } from "../../bucket-vc-QRrva.js";
-import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../../watch-topic-BAxoPKZx.js";
-import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../../ports-mObLgH1z.js";
-import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../../bind-JGCPGUJh.js";
-import { n as ExpoPushTokenOptions, r as expoPushToken, t as ExpoNotificationsLike } from "../../push-token-BSSvsWXZ.js";
+import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../../watch-topic-tnfOTa3-.js";
+import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../../ports-DnpAuTvB.js";
+import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../../bind-C801IaK-.js";
+import { n as ExpoPushTokenOptions, r as expoPushToken, t as ExpoNotificationsLike } from "../../push-token-C_mFkYfq.js";
 import { a as OAuthSignInOptions, c as linkParams, i as OAuthClient, l as signInWithOAuthBrowser, n as AuthLinkClient, o as WebBrowserLike, r as AuthLinkResult, s as handleAuthDeepLink, t as AuthFailure } from "../../auth-link-B4NL84XU.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 //#region src/client/native/auto-refresh.d.ts

package/dist/{composite-CfYyU3vs.d.ts → composite-B7f1MMgr.d.ts}

@@ -1,9 +1,9 @@
 import { O as AnyFunctions, k as AnyModels } from "./types-DFdg_4yN.js";
 import { r as AuthState } from "./resolve-CXX6DHv3.js";
-import { t as BetterSupabase, v as Db } from "./define-C5AcEkEJ.js";
-import { a as ServerContext, b as ReplicaState, c as ServerOptions, n as BetterServer } from "./server-types-CK8mUIUT.js";
+import { t as BetterSupabase, v as Db } from "./define-Cgru0_kF.js";
+import { a as ServerContext, b as ReplicaState, c as ServerOptions, n as BetterServer } from "./server-types-gR4Q1aM0.js";
 import { t as ActiveSupport } from "./support-B4ZBVxt3.js";
-import { n as SessionEntryConfig } from "./session-DWmFv3vB.js";
+import { n as SessionEntryConfig } from "./session-C1OuXbtN.js";
 import { r as GuardOptions } from "./respond-Dn1_YhC1.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { Entry, SingleKeyEntry } from "@supabase/middleware";

package/dist/config/index.d.ts

@@ -1,6 +1,6 @@
 import { M as Casing } from "../types-DFdg_4yN.js";
-import { C as EntityConfig, S as EntitiesConfig, a as AuthorizationProvider, b as DEFAULT_ACTIVE_TENANT, c as AuthorizationScope, d as AccessBlockConfig, f as ActiveTenantSource, g as BlockMode, i as AuthorizationPermission, k as tenantNameOf, l as AuthorizationTokenHook, m as BlockConfig, n as AuthorizationMembership, o as AuthorizationRequirement, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, u as providerApiProblem, v as BlockScope, x as DisabledRow, y as BlocksConfig } from "../authorization-HZdJCaVm.js";
-import { $ as blockEntrySource, $n as APP_COLUMN_ACCESS, $r as RpcTypeReference, $t as ResolvedExtensions, A as ValibotGeneratorOptions, Ai as SkillsConfig, An as ExposePrivilege, Ar as CatalogIndex, At as GeneratedFile, B as jsonSchema, Br as ForeignKeyAction, Bt as GeneratorInputSchema, Ci as GenConfig, Cn as TopicTriggerPayloadValueConfig, Cr as CatalogColumn, D as ZodFlavor, Di as MigrationSafetyConfig, Dn as VectorSearchConfig, Dr as CatalogFunction, Dt as resolveJsonSchema, Ei as KeysConfig, En as VectorDistance, Er as CatalogForeignKey, F as nuqs, Fi as SKILLS_AGENTS, Fr as ExtrasDomain, Ft as GeneratorEntitySchemas, G as tenantClaimPaths, Gr as PostgresColumn, Gt as JsonSchemaSource, H as ClaimPaths, Hr as SnapshotBucket, Ht as GeneratorModel, I as FactoriesGeneratorOptions, Ir as ExtrasFunction, It as GeneratorField, J as blockEntityRenames, Jn as CONFIG_DEFAULTS, Jr as RpcFunction, Jt as SourceConfig, K as BlockEntity, Kr as PostgresFunction, Kt as JsonTypeConfig, L as factories, Lr as ExtrasHook, Lt as GeneratorFunction, M as StandardSchemaGeneratorOptions, Mi as INTEGRATION_INFO, Mn as Privilege, Mr as CatalogTable, Mt as GeneratorBlock, N as standardSchema, Ni as INTEGRATION_NAMES, Nn as ResolvedExpose, Nr as CatalogTrigger, Nt as GeneratorBlockEntity, O as ZodGeneratorOptions, Oi as OpenApiConfig, On as ColumnPrivilege, Or as CatalogFunctionArg, Ot as ClaimsConfig, P as NuqsGeneratorOptions, Pi as IntegrationInfo, Pr as CatalogUnique, Pt as GeneratorColumn, Q as RENAMED_CONFIG_KEYS, Qr as RpcReturnColumn, Qt as ResolvedConfig, R as JsonSchemaGeneratorOptions, Rr as ExtrasHookFunction, Rt as GeneratorFunctionArg, Si as EnvFileConfig, Sn as TopicTriggerLookupConfig, Sr as CatalogCheck, Ti as IntegrationName, Tn as TopicTriggerValueConfig, Tr as CatalogEnum, U as DEFAULT_CLAIMS, Ur as SnapshotExtras, Ut as GeneratorNoun, V as JsonSchemaTarget, Vr as Snapshot, Vt as GeneratorJsonSchema, W as claimPaths, Wr as GeneratorMetadata, Wt as GeneratorTable, X as CONFIG_GROUPS, Xr as RpcFunctionOverload, Xt as DataHooksFramework, Y as blockSubjectTypes, Yr as RpcFunctionArg, Yt as TableConfig, Z as RENAMED_BLOCK_KEYS, Zr as RpcFunctionReturns, Zt as FlatConfig, _n as ResolvedSqlConfig, _r as AppTableEvents, an as BlockInput, ar as AppColumnAccess, at as defineConfig, bn as SqlWorkflow, br as AppTablesConfig, cn as EnvironmentConfig, cr as AppColumnType, ct as BlockTableReference, dn as SqlInput, dr as AppReference, dt as RoleNames, en as ApiConfig, er as APP_COLUMN_FORMATS, et as flattenConfig, fn as ToolingConfig, fr as AppReferenceTarget, ft as TypedReference, gn as RealtimeConfig, gr as AppTableEventKind, hn as BucketConfig, hr as AppTableConfig, in as BetterSupabaseConfig, ir as APP_TABLE_EVENT_KINDS, it as CONFIG_SCHEMA_URL, j as valibot, ji as GEN_TASKS, jn as ExposeRole, jr as CatalogPolicy, jt as Generator, k as zod, ki as SkillsAgent, kn as ExposeConfig, kr as CatalogGrant, kt as CodecsConfig, ln as GenGroupConfig, lr as AppLookupConfig, lt as BucketName, mn as EntitlementsConfig, mr as AppRollupConfig, mt as ExpandedConfig, nn as AppTablesInput, nr as APP_ON_DELETE_ACTIONS, nt as groupEntries, on as BlocksInput, or as AppColumnConfig, ot as resolveConfig, pn as EntitlementPlansSource, pr as AppRollupAggregate, q as blockEntities, qr as PostgresFunctionArg, qt as RelationsConfig, rn as AuthConfig, rr as APP_ROLLUP_AGGREGATES, rt as hasFlatTables, sn as DatabaseConfig, sr as AppColumnFormat, st as AppTableNames, tn as AppTableInput, tr as APP_COLUMN_TYPES, tt as groupConfig, un as OrganizationConfig, ur as AppOnDeleteAction, ut as ConfigReferences, vn as SeedConfig, vr as AppTableSubject, wi as GenTask, wn as TopicTriggerTopicConfig, wr as CatalogColumnGrant, xi as DoctorConfig, xn as TopicTriggerConfig, xr as Catalog, yn as SqlConfig, yr as AppTableVersions, z as buildJsonSchema, zr as ExtrasTable, zt as GeneratorInput } from "../context-8kb8m5uO.js";
+import { A as tenantNameOf, C as EntityConfig, D as OwnTablePolicies, S as EntitiesConfig, a as AuthorizationProvider, b as DEFAULT_ACTIVE_TENANT, c as AuthorizationScope, d as AccessBlockConfig, f as ActiveTenantSource, g as BlockMode, i as AuthorizationPermission, l as AuthorizationTokenHook, m as BlockConfig, n as AuthorizationMembership, o as AuthorizationRequirement, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, u as providerApiProblem, v as BlockScope, x as DisabledRow, y as BlocksConfig } from "../authorization-CNsvnwle.js";
+import { $ as blockEntrySource, $n as APP_COLUMN_ACCESS, $r as RpcTypeReference, $t as ResolvedExtensions, A as ValibotGeneratorOptions, Ai as SkillsConfig, An as ExposePrivilege, Ar as CatalogIndex, At as GeneratedFile, B as jsonSchema, Br as ForeignKeyAction, Bt as GeneratorInputSchema, Ci as GenConfig, Cn as TopicTriggerPayloadValueConfig, Cr as CatalogColumn, D as ZodFlavor, Di as MigrationSafetyConfig, Dn as VectorSearchConfig, Dr as CatalogFunction, Dt as resolveJsonSchema, Ei as KeysConfig, En as VectorDistance, Er as CatalogForeignKey, F as nuqs, Fi as SKILLS_AGENTS, Fr as ExtrasDomain, Ft as GeneratorEntitySchemas, G as tenantClaimPaths, Gr as PostgresColumn, Gt as JsonSchemaSource, H as ClaimPaths, Hr as SnapshotBucket, Ht as GeneratorModel, I as FactoriesGeneratorOptions, Ir as ExtrasFunction, It as GeneratorField, J as blockEntityRenames, Jn as CONFIG_DEFAULTS, Jr as RpcFunction, Jt as SourceConfig, K as BlockEntity, Kr as PostgresFunction, Kt as JsonTypeConfig, L as factories, Lr as ExtrasHook, Lt as GeneratorFunction, M as StandardSchemaGeneratorOptions, Mi as INTEGRATION_INFO, Mn as Privilege, Mr as CatalogTable, Mt as GeneratorBlock, N as standardSchema, Ni as INTEGRATION_NAMES, Nn as ResolvedExpose, Nr as CatalogTrigger, Nt as GeneratorBlockEntity, O as ZodGeneratorOptions, Oi as OpenApiConfig, On as ColumnPrivilege, Or as CatalogFunctionArg, Ot as ClaimsConfig, P as NuqsGeneratorOptions, Pi as IntegrationInfo, Pr as CatalogUnique, Pt as GeneratorColumn, Q as RENAMED_CONFIG_KEYS, Qr as RpcReturnColumn, Qt as ResolvedConfig, R as JsonSchemaGeneratorOptions, Rr as ExtrasHookFunction, Rt as GeneratorFunctionArg, Si as EnvFileConfig, Sn as TopicTriggerLookupConfig, Sr as CatalogCheck, Ti as IntegrationName, Tn as TopicTriggerValueConfig, Tr as CatalogEnum, U as DEFAULT_CLAIMS, Ur as SnapshotExtras, Ut as GeneratorNoun, V as JsonSchemaTarget, Vr as Snapshot, Vt as GeneratorJsonSchema, W as claimPaths, Wr as GeneratorMetadata, Wt as GeneratorTable, X as CONFIG_GROUPS, Xr as RpcFunctionOverload, Xt as DataHooksFramework, Y as blockSubjectTypes, Yr as RpcFunctionArg, Yt as TableConfig, Z as RENAMED_BLOCK_KEYS, Zr as RpcFunctionReturns, Zt as FlatConfig, _n as ResolvedSqlConfig, _r as AppTableEvents, an as BlockInput, ar as AppColumnAccess, at as defineConfig, bn as SqlWorkflow, br as AppTablesConfig, cn as EnvironmentConfig, cr as AppColumnType, ct as BlockTableReference, dn as SqlInput, dr as AppReference, dt as RoleNames, en as ApiConfig, er as APP_COLUMN_FORMATS, et as flattenConfig, fn as ToolingConfig, fr as AppReferenceTarget, ft as TypedReference, gn as RealtimeConfig, gr as AppTableEventKind, hn as BucketConfig, hr as AppTableConfig, in as BetterSupabaseConfig, ir as APP_TABLE_EVENT_KINDS, it as CONFIG_SCHEMA_URL, j as valibot, ji as GEN_TASKS, jn as ExposeRole, jr as CatalogPolicy, jt as Generator, k as zod, ki as SkillsAgent, kn as ExposeConfig, kr as CatalogGrant, kt as CodecsConfig, ln as GenGroupConfig, lr as AppLookupConfig, lt as BucketName, mn as EntitlementsConfig, mr as AppRollupConfig, mt as ExpandedConfig, nn as AppTablesInput, nr as APP_ON_DELETE_ACTIONS, nt as groupEntries, on as BlocksInput, or as AppColumnConfig, ot as resolveConfig, pn as EntitlementPlansSource, pr as AppRollupAggregate, q as blockEntities, qr as PostgresFunctionArg, qt as RelationsConfig, rn as AuthConfig, rr as APP_ROLLUP_AGGREGATES, rt as hasFlatTables, sn as DatabaseConfig, sr as AppColumnFormat, st as AppTableNames, tn as AppTableInput, tr as APP_COLUMN_TYPES, tt as groupConfig, un as OrganizationConfig, ur as AppOnDeleteAction, ut as ConfigReferences, vn as SeedConfig, vr as AppTableSubject, wi as GenTask, wn as TopicTriggerTopicConfig, wr as CatalogColumnGrant, xi as DoctorConfig, xn as TopicTriggerConfig, xr as Catalog, yn as SqlConfig, yr as AppTableVersions, z as buildJsonSchema, zr as ExtrasTable, zt as GeneratorInput } from "../context-CKCgjEDF.js";
 import { n as SubjectsConfig, t as SubjectConfig } from "../subjects-DvmQeF_F.js";
 import { a as FieldFormat, o as FieldFormatInput, r as FIELD_FORMATS } from "../field-formats-CAFNkKSN.js";
-export { APP_COLUMN_ACCESS, APP_COLUMN_FORMATS, APP_COLUMN_TYPES, APP_ON_DELETE_ACTIONS, APP_ROLLUP_AGGREGATES, APP_TABLE_EVENT_KINDS, type AccessBlockConfig, type ActiveTenantSource, type AnyBlocksConfig, type ApiConfig, type AppColumnAccess, type AppColumnConfig, type AppColumnFormat, type AppColumnType, type AppLookupConfig, type AppOnDeleteAction, type AppReference, type AppReferenceTarget, type AppRollupAggregate, type AppRollupConfig, type AppTableConfig, type AppTableEventKind, type AppTableEvents, type AppTableInput, type AppTableNames, type AppTableSubject, type AppTableVersions, type AppTablesConfig, type AppTablesInput, type AuthConfig, type AuthorizationFunctions, type AuthorizationMembership, type AuthorizationOperation, type AuthorizationPermission, type AuthorizationProvider, type AuthorizationRequirement, type AuthorizationRoleSource, type AuthorizationScope, type AuthorizationTokenHook, type BetterSupabaseConfig, type BlockConfig, type BlockEntity, type BlockInput, type BlockMode, type BlockScope, type BlockTableReference, type BlocksConfig, type BlocksInput, type BucketConfig, type BucketName, CONFIG_DEFAULTS, CONFIG_GROUPS, CONFIG_SCHEMA_URL, type Casing, type Catalog, type CatalogCheck, type CatalogColumn, type CatalogColumnGrant, type CatalogEnum, type CatalogForeignKey, type CatalogFunction, type CatalogFunctionArg, type CatalogGrant, type CatalogIndex, type CatalogPolicy, type CatalogTable, type CatalogTrigger, type CatalogUnique, type ClaimPaths, type ClaimsConfig, type CodecsConfig, type ColumnPrivilege, type ConfigReferences, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, type DataHooksFramework, type DatabaseConfig, type DisabledRow, type DoctorConfig, type EntitiesConfig, type EntitlementPlansSource, type EntitlementsConfig, type EntityConfig, type EnvFileConfig, type EnvironmentConfig, type ExpandedConfig, type ExposeConfig, type ExposePrivilege, type ExposeRole, type ExtrasDomain, type ExtrasFunction, type ExtrasHook, type ExtrasHookFunction, type ExtrasTable, FIELD_FORMATS, type FactoriesGeneratorOptions, type FieldFormat, type FieldFormatInput, type FlatConfig, type ForeignKeyAction, GEN_TASKS, type GenConfig, type GenGroupConfig, type GenTask, type GeneratedFile, type Generator, type GeneratorBlock, type GeneratorBlockEntity, type GeneratorColumn, type GeneratorEntitySchemas, type GeneratorField, type GeneratorFunction, type GeneratorFunctionArg, type GeneratorInput, type GeneratorInputSchema, type GeneratorJsonSchema, type GeneratorMetadata, type GeneratorModel, type GeneratorNoun, type GeneratorTable, INTEGRATION_INFO, INTEGRATION_NAMES, type IntegrationInfo, type IntegrationName, type JsonSchemaGeneratorOptions, type JsonSchemaSource, type JsonSchemaTarget, type JsonTypeConfig, type KeysConfig, type MigrationSafetyConfig, type NuqsGeneratorOptions, type OpenApiConfig, type OrganizationConfig, type PostgresColumn, type PostgresFunction, type PostgresFunctionArg, type Privilege, RENAMED_BLOCK_KEYS, RENAMED_CONFIG_KEYS, type RealtimeConfig, type RelationsConfig, type ResolvedConfig, type ResolvedExpose, type ResolvedExtensions, type ResolvedSqlConfig, type RoleNames, type RpcFunction, type RpcFunctionArg, type RpcFunctionOverload, type RpcFunctionReturns, type RpcReturnColumn, type RpcTypeReference, SKILLS_AGENTS, type SeedConfig, type SkillsAgent, type SkillsConfig, type Snapshot, type SnapshotBucket, type SnapshotExtras, type SourceConfig, type SqlConfig, type SqlInput, type SqlWorkflow, type StandardSchemaGeneratorOptions, type SubjectConfig, type SubjectsConfig, type TableConfig, type ToolingConfig, type TopicTriggerConfig, type TopicTriggerLookupConfig, type TopicTriggerPayloadValueConfig, type TopicTriggerTopicConfig, type TopicTriggerValueConfig, type TypedReference, type ValibotGeneratorOptions, type VectorDistance, type VectorSearchConfig, type ZodFlavor, type ZodGeneratorOptions, blockEntities, blockEntityRenames, blockEntrySource, blockSubjectTypes, buildJsonSchema, claimPaths, defineConfig, factories, flattenConfig, groupConfig, groupEntries, hasFlatTables, jsonSchema, nuqs, providerApiProblem, resolveConfig, resolveJsonSchema, standardSchema, tenantClaimPaths, tenantNameOf, valibot, zod };
+export { APP_COLUMN_ACCESS, APP_COLUMN_FORMATS, APP_COLUMN_TYPES, APP_ON_DELETE_ACTIONS, APP_ROLLUP_AGGREGATES, APP_TABLE_EVENT_KINDS, type AccessBlockConfig, type ActiveTenantSource, type AnyBlocksConfig, type ApiConfig, type AppColumnAccess, type AppColumnConfig, type AppColumnFormat, type AppColumnType, type AppLookupConfig, type AppOnDeleteAction, type AppReference, type AppReferenceTarget, type AppRollupAggregate, type AppRollupConfig, type AppTableConfig, type AppTableEventKind, type AppTableEvents, type AppTableInput, type AppTableNames, type AppTableSubject, type AppTableVersions, type AppTablesConfig, type AppTablesInput, type AuthConfig, type AuthorizationFunctions, type AuthorizationMembership, type AuthorizationOperation, type AuthorizationPermission, type AuthorizationProvider, type AuthorizationRequirement, type AuthorizationRoleSource, type AuthorizationScope, type AuthorizationTokenHook, type BetterSupabaseConfig, type BlockConfig, type BlockEntity, type BlockInput, type BlockMode, type BlockScope, type BlockTableReference, type BlocksConfig, type BlocksInput, type BucketConfig, type BucketName, CONFIG_DEFAULTS, CONFIG_GROUPS, CONFIG_SCHEMA_URL, type Casing, type Catalog, type CatalogCheck, type CatalogColumn, type CatalogColumnGrant, type CatalogEnum, type CatalogForeignKey, type CatalogFunction, type CatalogFunctionArg, type CatalogGrant, type CatalogIndex, type CatalogPolicy, type CatalogTable, type CatalogTrigger, type CatalogUnique, type ClaimPaths, type ClaimsConfig, type CodecsConfig, type ColumnPrivilege, type ConfigReferences, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, type DataHooksFramework, type DatabaseConfig, type DisabledRow, type DoctorConfig, type EntitiesConfig, type EntitlementPlansSource, type EntitlementsConfig, type EntityConfig, type EnvFileConfig, type EnvironmentConfig, type ExpandedConfig, type ExposeConfig, type ExposePrivilege, type ExposeRole, type ExtrasDomain, type ExtrasFunction, type ExtrasHook, type ExtrasHookFunction, type ExtrasTable, FIELD_FORMATS, type FactoriesGeneratorOptions, type FieldFormat, type FieldFormatInput, type FlatConfig, type ForeignKeyAction, GEN_TASKS, type GenConfig, type GenGroupConfig, type GenTask, type GeneratedFile, type Generator, type GeneratorBlock, type GeneratorBlockEntity, type GeneratorColumn, type GeneratorEntitySchemas, type GeneratorField, type GeneratorFunction, type GeneratorFunctionArg, type GeneratorInput, type GeneratorInputSchema, type GeneratorJsonSchema, type GeneratorMetadata, type GeneratorModel, type GeneratorNoun, type GeneratorTable, INTEGRATION_INFO, INTEGRATION_NAMES, type IntegrationInfo, type IntegrationName, type JsonSchemaGeneratorOptions, type JsonSchemaSource, type JsonSchemaTarget, type JsonTypeConfig, type KeysConfig, type MigrationSafetyConfig, type NuqsGeneratorOptions, type OpenApiConfig, type OrganizationConfig, type OwnTablePolicies, type PostgresColumn, type PostgresFunction, type PostgresFunctionArg, type Privilege, RENAMED_BLOCK_KEYS, RENAMED_CONFIG_KEYS, type RealtimeConfig, type RelationsConfig, type ResolvedConfig, type ResolvedExpose, type ResolvedExtensions, type ResolvedSqlConfig, type RoleNames, type RpcFunction, type RpcFunctionArg, type RpcFunctionOverload, type RpcFunctionReturns, type RpcReturnColumn, type RpcTypeReference, SKILLS_AGENTS, type SeedConfig, type SkillsAgent, type SkillsConfig, type Snapshot, type SnapshotBucket, type SnapshotExtras, type SourceConfig, type SqlConfig, type SqlInput, type SqlWorkflow, type StandardSchemaGeneratorOptions, type SubjectConfig, type SubjectsConfig, type TableConfig, type ToolingConfig, type TopicTriggerConfig, type TopicTriggerLookupConfig, type TopicTriggerPayloadValueConfig, type TopicTriggerTopicConfig, type TopicTriggerValueConfig, type TypedReference, type ValibotGeneratorOptions, type VectorDistance, type VectorSearchConfig, type ZodFlavor, type ZodGeneratorOptions, blockEntities, blockEntityRenames, blockEntrySource, blockSubjectTypes, buildJsonSchema, claimPaths, defineConfig, factories, flattenConfig, groupConfig, groupEntries, hasFlatTables, jsonSchema, nuqs, providerApiProblem, resolveConfig, resolveJsonSchema, standardSchema, tenantClaimPaths, tenantNameOf, valibot, zod };

package/dist/config/index.js

@@ -1,8 +1,8 @@
-import { o as resolveJsonSchema, s as CONFIG_DEFAULTS } from "../instances-BHjCZoF8.js";
-import { A as flattenConfig, D as RENAMED_BLOCK_KEYS, E as CONFIG_GROUPS, F as INTEGRATION_INFO, I as INTEGRATION_NAMES, L as SKILLS_AGENTS, M as groupEntries, N as hasFlatTables, O as RENAMED_CONFIG_KEYS, P as GEN_TASKS, j as groupConfig, k as blockEntrySource } from "../config-CcehOvbz.js";
+import { o as resolveJsonSchema, s as CONFIG_DEFAULTS } from "../instances-QOzIz9-q.js";
+import { A as flattenConfig, D as RENAMED_BLOCK_KEYS, E as CONFIG_GROUPS, F as INTEGRATION_INFO, I as INTEGRATION_NAMES, L as SKILLS_AGENTS, M as groupEntries, N as hasFlatTables, O as RENAMED_CONFIG_KEYS, P as GEN_TASKS, j as groupConfig, k as blockEntrySource } from "../config-CIBc79_8.js";
 import { a as tenantClaimPaths, r as claimPaths, t as DEFAULT_CLAIMS } from "../claims-Bp9My7XP.js";
-import { C as APP_ON_DELETE_ACTIONS, O as DEFAULT_ACTIVE_TENANT, S as APP_COLUMN_TYPES, T as APP_TABLE_EVENT_KINDS, b as APP_COLUMN_ACCESS, j as tenantNameOf, w as APP_ROLLUP_AGGREGATES, x as APP_COLUMN_FORMATS } from "../app-tables-D29Rahtg.js";
+import { C as APP_ON_DELETE_ACTIONS, O as DEFAULT_ACTIVE_TENANT, S as APP_COLUMN_TYPES, T as APP_TABLE_EVENT_KINDS, b as APP_COLUMN_ACCESS, j as tenantNameOf, w as APP_ROLLUP_AGGREGATES, x as APP_COLUMN_FORMATS } from "../app-tables-Q0TYfeih.js";
 import { r as FIELD_FORMATS } from "../field-formats-C6QKA3UR.js";
-import { a as factories, c as resolveConfig, d as blockSubjectTypes, f as providerApiProblem, i as nuqs, l as blockEntities, n as valibot, o as CONFIG_SCHEMA_URL, r as standardSchema, s as defineConfig, t as zod, u as blockEntityRenames } from "../config-DWGgUQCh.js";
+import { a as factories, c as resolveConfig, d as blockSubjectTypes, f as providerApiProblem, i as nuqs, l as blockEntities, n as valibot, o as CONFIG_SCHEMA_URL, r as standardSchema, s as defineConfig, t as zod, u as blockEntityRenames } from "../config-BVNNJwGC.js";
 import { n as jsonSchema, t as buildJsonSchema } from "../json-schema-Ca6gYbEP.js";
 export { APP_COLUMN_ACCESS, APP_COLUMN_FORMATS, APP_COLUMN_TYPES, APP_ON_DELETE_ACTIONS, APP_ROLLUP_AGGREGATES, APP_TABLE_EVENT_KINDS, CONFIG_DEFAULTS, CONFIG_GROUPS, CONFIG_SCHEMA_URL, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, FIELD_FORMATS, GEN_TASKS, INTEGRATION_INFO, INTEGRATION_NAMES, RENAMED_BLOCK_KEYS, RENAMED_CONFIG_KEYS, SKILLS_AGENTS, blockEntities, blockEntityRenames, blockEntrySource, blockSubjectTypes, buildJsonSchema, claimPaths, defineConfig, factories, flattenConfig, groupConfig, groupEntries, hasFlatTables, jsonSchema, nuqs, providerApiProblem, resolveConfig, resolveJsonSchema, standardSchema, tenantClaimPaths, tenantNameOf, valibot, zod };

package/dist/{config-DWGgUQCh.js → config-BVNNJwGC.js}

@@ -1,8 +1,8 @@
-import { a as resolveNames, i as resolveInstances, s as CONFIG_DEFAULTS, t as blocksByName } from "./instances-BHjCZoF8.js";
-import { A as flattenConfig, n as expandFlatPreset, r as expandPreset } from "./config-CcehOvbz.js";
+import { a as resolveNames, i as resolveInstances, s as CONFIG_DEFAULTS, t as blocksByName } from "./instances-QOzIz9-q.js";
+import { A as flattenConfig, n as expandFlatPreset, r as expandPreset } from "./config-CIBc79_8.js";
 import { t as DEFAULT_CLAIMS } from "./claims-Bp9My7XP.js";
 import { o as tenantNames } from "./entity-naming-Dtyq5sKE.js";
-import { A as resolveBlock, E as PRESET_CATALOG, d as appTablesOf, f as withAppTableSubjects, j as tenantNameOf } from "./app-tables-D29Rahtg.js";
+import { A as resolveBlock, E as PRESET_CATALOG, d as appTablesOf, f as withAppTableSubjects, j as tenantNameOf } from "./app-tables-Q0TYfeih.js";
 import { C as variantsFor, S as variantTitle, _ as schemaName, a as extraSchemas, b as tableEntries, c as resultType, d as fieldSpec, f as fieldsFor, g as rowType, h as propertyKey, i as extraKinds, l as HEADER, m as parseImport, o as fieldMetaLines, p as optionalLine, s as objectType, u as fieldDocs, v as siblingPath, x as temporalGuardImport, y as tableDocs } from "./json-schema-Ca6gYbEP.js";
 //#region src/config/authorization.ts
 /**
@@ -215,7 +215,7 @@ function blocksOf(blocks, sql = {}, provider) {
 		config: withSqlDefaults(instance.config, sql)
 	}]));
 	const blockNames = [...new Set(Object.values(instances).map((instance) => instance.block))];
-	const resolved = Array.isArray(blocks) && sql.schema === void 0 && sql.api === void 0 ? {} : blocksByName(instances);
+	const resolved = Array.isArray(blocks) && sql.schema === void 0 && sql.api === void 0 && sql.ownTablePolicies === void 0 ? {} : blocksByName(instances);
 	if (!provider || !blockNames.includes("permissions") || resolved.permissions?.model !== void 0) return {
 		blocks: resolved,
 		blockNames,
@@ -238,11 +238,12 @@ function blocksOf(blocks, sql = {}, provider) {
 * block's `api: false` keeps it out of the API schema.
 */
 function withSqlDefaults(block, sql) {
-	const { schema, api } = sql;
+	const { schema, api, ownTablePolicies } = sql;
 	return {
 		...block,
 		...schema === void 0 || block.schema !== void 0 ? {} : { schema },
-		...api === void 0 || block.api !== void 0 ? {} : { api }
+		...api === void 0 || block.api !== void 0 ? {} : { api },
+		...ownTablePolicies === void 0 || block.ownTablePolicies !== void 0 ? {} : { ownTablePolicies }
 	};
 }
 const CONFIG_SCHEMA_URL = "https://unpkg.com/better-supabase/schemas/config-v1.json";

package/dist/{config-CcehOvbz.js → config-CIBc79_8.js}

@@ -1,5 +1,5 @@
 import { t as DEFAULT_TENANT } from "./entity-naming-Dtyq5sKE.js";
-import { E as PRESET_CATALOG, k as asBlocksConfig } from "./app-tables-D29Rahtg.js";
+import { E as PRESET_CATALOG, k as asBlocksConfig } from "./app-tables-Q0TYfeih.js";
 //#region src/config/names.ts
 /** The steps `better-supabase gen` runs, in the order it runs them. */
 const GEN_TASKS = [

package/dist/{context-8kb8m5uO.d.ts → context-CKCgjEDF.d.ts}

@@ -1,7 +1,7 @@
 /// <reference lib="esnext.temporal" />
 import { M as Casing, P as ClaimsMeta, T as AccessBucketPolicy, _t as BucketLifecycle, j as BucketPolicyName, ot as SchemaMeta } from "./types-DFdg_4yN.js";
-import { D as ResolvedBlock, E as NamedInstance, F as BlockNameRegistry, P as TablesOf, T as InstanceOn, _ as BlockName, a as AuthorizationProvider, d as AccessBlockConfig, g as BlockMode, h as BlockConfigOf, m as BlockConfig, n as AuthorizationMembership, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, v as BlockScope, w as InstanceKeys, x as DisabledRow, y as BlocksConfig } from "./authorization-HZdJCaVm.js";
-import { Mn as EntityNames, Nn as EntityNoun, Pn as EntityRename, R as PortName, Ut as ActionDescriptor, Xt as BlockSchedule, Zt as DefaultAutomation, _ as BlockProvider, g as BlockEnvKey, i as BlockCategory, y as BlockWorker } from "./define-block-C1RHXz7L.js";
+import { D as OwnTablePolicies, E as NamedInstance, F as TablesOf, I as BlockNameRegistry, O as ResolvedBlock, T as InstanceOn, _ as BlockName, a as AuthorizationProvider, d as AccessBlockConfig, g as BlockMode, h as BlockConfigOf, m as BlockConfig, n as AuthorizationMembership, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, v as BlockScope, w as InstanceKeys, x as DisabledRow, y as BlocksConfig } from "./authorization-CNsvnwle.js";
+import { Mn as EntityNames, Nn as EntityNoun, Pn as EntityRename, R as PortName, Ut as ActionDescriptor, Xt as BlockSchedule, Zt as DefaultAutomation, _ as BlockProvider, g as BlockEnvKey, i as BlockCategory, y as BlockWorker } from "./define-block-Xxw8Hroe.js";
 import { a as ScalarKind, i as FieldSpec } from "./table-schema-BlF6k62Q.js";
 import { n as SubjectsConfig } from "./subjects-DvmQeF_F.js";
 import { i as FIELD_FORMAT_NAMES, s as FieldFormatName } from "./field-formats-CAFNkKSN.js";
@@ -1493,6 +1493,13 @@ interface SqlConfig {
    * every signed-in user reads and writes).
    */
   readonly scope?: BlockScope;
+  /**
+   * Whose policies govern the app's tables a block runs over, unless
+   * `blocks.<name>.ownTablePolicies` sets its own: `block` (the default) or
+   * `app`, which keeps every `bsb_` policy, permissive or restrictive, off
+   * them.
+   */
+  readonly ownTablePolicies?: OwnTablePolicies;
 }
 /** `sql` with defaults applied. */
 interface ResolvedSqlConfig {