better-supabase 0.16.0 → 0.17.0

package/dist/{sql-Dl3Alk43.js → sql-ClTmzHs8.js}

@@ -3,10 +3,10 @@ import { d as temporalText } from "./temporal-DLZlWbOi.js";
 import { r as NEGATIVE, t as FILTER_OPERATORS } from "./filter-query-DMoKo82_.js";
 import { a as ok } from "./result-ntFBW2p2.js";
 import { a as hasPlaceholder, l as splitPlaceholders, s as placeholderOf } from "./read-set-BnKnofIj.js";
-import { a as resolveNames, n as instancePrefix, o as resolveJsonSchema, r as isRenamedInstance, s as CONFIG_DEFAULTS } from "./instances-BHjCZoF8.js";
+import { a as resolveNames, n as instancePrefix, o as resolveJsonSchema, r as isRenamedInstance, s as CONFIG_DEFAULTS } from "./instances-QOzIz9-q.js";
 import { t as DEFAULT_CLAIMS } from "./claims-Bp9My7XP.js";
 import { o as tenantNames, r as composeNames } from "./entity-naming-Dtyq5sKE.js";
-import { A as resolveBlock, D as BLOCK_SCOPES, _ as encryptedColumns, c as appTableEventKinds, g as columnsWithAccess, h as hasComputed, j as tenantNameOf, r as APP_RANK_COLUMN, t as APP_DELETED_AT_COLUMN, u as appTableVersions, v as hasColumnAccess, y as hiddenColumns } from "./app-tables-D29Rahtg.js";
+import { A as resolveBlock, D as BLOCK_SCOPES, _ as encryptedColumns, c as appTableEventKinds, g as columnsWithAccess, h as hasComputed, j as tenantNameOf, r as APP_RANK_COLUMN, t as APP_DELETED_AT_COLUMN, u as appTableVersions, v as hasColumnAccess, y as hiddenColumns } from "./app-tables-Q0TYfeih.js";
 import { a as RATING_BOUNDS, n as CUSTOM_FIELD_TYPES, r as FIELD_FORMATS, t as CUSTOM_FIELD_FORM_TYPES } from "./field-formats-C6QKA3UR.js";
 import { a as sqlString, i as sqlIdent } from "./template-Drgg3v2J.js";
 import { i as fillTemplate, l as templatePlaceholders } from "./access-sql-B-MkVARa.js";
@@ -41,7 +41,7 @@ import { t as contactsSqlOptions } from "./options-BlncUmIc.js";
 import { t as contentSqlOptions } from "./options-1GgseJq5.js";
 import { t as contractsSqlOptions } from "./options-E7KcmHQv.js";
 import { t as coursesSqlOptions } from "./options-63AKQNv0.js";
-import { t as createdBySqlOptions } from "./options-B2swWnJW.js";
+import { t as createdBySqlOptions } from "./options-CCUaRLgd.js";
 import { t as customFieldsSqlOptions } from "./options-BjtrC7o6.js";
 import { t as dataLifecycleSqlOptions } from "./options-C239TLRF.js";
 import { t as dealsSqlOptions } from "./options-DTDxFT6J.js";
@@ -114,7 +114,7 @@ import { t as teamsSqlOptions } from "./options-C6rEL6U5.js";
 import { t as templatesSqlOptions } from "./options-Fz6xqu-b.js";
 import { t as timeTrackingSqlOptions } from "./options-BbnPv6p7.js";
 import { t as trashSqlOptions } from "./options-DWbA9buW.js";
-import { t as updatedAtSqlOptions } from "./options-C-dQHH5-.js";
+import { t as updatedAtSqlOptions } from "./options-tSsUF0-7.js";
 import { t as usageSqlOptions } from "./options-B9q8CROT.js";
 import { t as vercelMarketplaceSqlOptions } from "./options-RKYdmIdV.js";
 import { t as versionsSqlOptions } from "./options-BQIYfx9F.js";
@@ -41629,7 +41629,8 @@ const ACTOR = {
 		options: [
 			"createdBy",
 			"updatedBy",
-			"impersonatedBy"
+			"impersonatedBy",
+			"stamp"
 		]
 	},
 	build: () => `${SCHEMA$5}
@@ -54742,6 +54743,11 @@ function providerEntitlementMembers(provider) {
 * column and key come from the module's own (possibly renamed) names.
 */
 function customerSource(ctx, layout) {
+	const source = resolvedCustomerSource(ctx, layout);
+	if (source === void 0) throw new TypeError("The entitlements module needs auth.entitlements.customer: the table.column with each tenant's Stripe customer id. With the managed billing or organizations module it defaults to that module's customer column.");
+	return source;
+}
+function resolvedCustomerSource(ctx, layout) {
 	const configured = layout.entitlements;
 	if (configured?.table !== void 0 && configured.column !== void 0) return {
 		table: configured.table,
@@ -54769,7 +54775,14 @@ function customerSource(ctx, layout) {
 			deferred: true
 		};
 	}
-	throw new TypeError("The entitlements module needs auth.entitlements.customer: the table.column with each tenant's Stripe customer id. With the managed billing or organizations module it defaults to that module's customer column.");
+}
+function readsOrganizationCustomer(ctx, layout) {
+	if (!ctx.installed("entitlements") || (layout.entitlements?.source ?? "stripe-sync") !== "stripe-sync") return false;
+	const source = resolvedCustomerSource(ctx.of("entitlements"), layout);
+	if (source === void 0) return false;
+	const organizations = ctx.tableName("organizations");
+	const [schema, table] = splitTable$1(source.table);
+	return source.column === "stripe_customer_id" && schema === organizations.schema && table === organizations.name;
 }
 function entitlementsSource(source, layout) {
 	const provider = layout.entitlementsProvider;
@@ -69465,7 +69478,9 @@ function platformTableSql(ctx) {
 	if (!p || !ctx.manages) return "";
 	const c = (logical) => p.col(logical);
 	const add = (logical, type) => p.has(logical) ? `alter table ${p.table} add column if not exists ${c(logical)} ${type};\n` : "";
-	const where = openFilter(p, p.table).replaceAll(`${p.table}.`, "");
+	const where = `${openFilter(p, p.table)}${p.only(p.table)}`.replaceAll(`${p.table}.`, "");
+	const openEmailIndex = sharesTable(ctx) ? `drop index if exists ${sqlIdent(ctx.tableName("invitations").schema)}.platform_invitations_open_email_idx;
+create unique index if not exists invitations_platform_open_email_idx` : "create unique index if not exists platform_invitations_open_email_idx";
 	return `
 -- Invitations to a platform role (the catalog model's platform assignments).
 create table if not exists ${p.table} (
@@ -69477,7 +69492,7 @@ create table if not exists ${p.table} (
   ${c("acceptedAt")} timestamptz
 );
 ${add("invitedBy", "uuid references auth.users (id) on delete set null")}${add("createdAt", "timestamptz not null default now()")}${add("acceptedBy", "uuid references auth.users (id) on delete set null")}${add("declinedAt", "timestamptz")}${add("revokedAt", "timestamptz")}
-create unique index if not exists platform_invitations_open_email_idx
+${openEmailIndex}
   on ${p.table} (lower(${c("email")})) where ${where};
 ${p.has("updatedAt") ? `${updatedAt(p.table, c("updatedAt"))}\n` : ""}${p.has("invitedBy") ? `create index if not exists platform_invitations_invited_by_idx on ${p.table} (${c("invitedBy")});\n` : ""}${p.has("acceptedBy") ? `create index if not exists platform_invitations_accepted_by_idx on ${p.table} (${c("acceptedBy")});\n` : ""}
 alter table ${p.table} enable row level security;
@@ -87076,7 +87091,7 @@ function idColumn(ctx, column) {
 		default: return ctx.idType;
 	}
 }
-function table$2(ctx, n) {
+function table$2(ctx, n, layout) {
 	if (!ctx.manages) return `
 -- Adopted: ${n.organization} belongs to the app (blocks.organizations.tables.organizations).
 `;
@@ -87090,7 +87105,7 @@ create table if not exists ${n.organization} (
   ${idColumn(ctx, n.id)},
   ${c("name")} text not null check (length(btrim(${c("name")})) > 0)${optional("slug", `${slugType} not null`)}${optional("createdBy", "uuid references auth.users (id) on delete set null")}${optional("createdAt", "timestamptz not null default now()")}${optional("disabledAt", "timestamptz")}${optional("deletedAt", "timestamptz")}
 );${addExtraColumns(n.organization, organizationExtraColumns(ctx))}
-${slugIndex}${ctx.has("organizations", "createdBy") ? `create index if not exists ${ctx.naming.rename("organizations_created_by_idx")} on ${n.organization} (${c("createdBy")});\n` : ""}${ctx.has("organizations", "updatedAt") ? `${updatedAt(n.organization, c("updatedAt"))}\n` : ""}${ctx.installed("entitlements") ? `-- The Stripe customer the entitlements module reads (config.entitlements.customer).
+${slugIndex}${ctx.has("organizations", "createdBy") ? `create index if not exists ${ctx.naming.rename("organizations_created_by_idx")} on ${n.organization} (${c("createdBy")});\n` : ""}${ctx.has("organizations", "updatedAt") ? `${updatedAt(n.organization, c("updatedAt"))}\n` : ""}${readsOrganizationCustomer(ctx, layout) ? `-- The Stripe customer the entitlements module reads (config.entitlements.customer).
 alter table ${n.organization} add column if not exists ${ORGANIZATION_CUSTOMER_COLUMN} text unique;
 ` : ""}alter table ${n.organization} enable row level security;
 ${revokeTable(n.organization)}
@@ -87684,12 +87699,12 @@ const functionsOf$1 = (ctx, id) => [
 	...ctx.installed("invitations") ? [["list_organization_invitations", id]] : [],
 	...membershipDisabledAt(ctx) === void 0 ? [] : [["suspend_member", `${id}, uuid`], ["resume_member", `${id}, uuid`]]
 ];
-function organizationsSql(ctx) {
+function organizationsSql(ctx, layout) {
 	const n = namesOf$2(ctx);
 	const grants = functionsOf$1(ctx, ctx.idType).map(([name, args]) => `revoke execute on function ${ctx.fn(name)}(${args}) from public, anon;
 grant execute on function ${ctx.fn(name)}(${args}) to authenticated, service_role;`).join("\n");
 	return `${schemaPreamble(ctx)}
-${table$2(ctx, n)}${tenantKeys(ctx, n)}${slugCheck(ctx, n)}${create(ctx, n)}${organizationDeletion(ctx, n, {
+${table$2(ctx, n, layout)}${tenantKeys(ctx, n)}${slugCheck(ctx, n)}${create(ctx, n)}${organizationDeletion(ctx, n, {
 		platformOverride: platformOverride(ctx, "deletePlatform"),
 		event
 	})}${guards(ctx, n)}${members(ctx, n)}${memberSuspension(ctx, n, {
@@ -114647,7 +114662,11 @@ const UPDATED_AT = {
 	target: "schema",
 	names: {
 		tables: {},
-		options: ["createdAt", "updatedAt"]
+		options: [
+			"createdAt",
+			"updatedAt",
+			"stamp"
+		]
 	},
 	build: () => `${SCHEMA$5}
 
@@ -126088,16 +126107,7 @@ function parsePolicy(statement) {
 }
 const BLOCK_PREFIX = "bsb_";
 const POLICY_EDIT = new RegExp(String.raw`^\s*(?:alter\s+policy|comment\s+on\s+policy)\s+(${NAME$9})\s+on\s+(${NAME$9}(?:\s*\.\s*${NAME$9})?)`, "i");
-/**
-* `sql` without the block's permissive `bsb_` policies that the app's own
-* policies on the same table already cover for every command they grant (the
-* comparison BS347 makes), so Postgres doesn't OR two policies that admit the
-* same rows. A block policy that is wider stays, and BS347 reports it. The
-* `drop policy if exists` before it stays too, so an earlier install's copy
-* goes.
-*/
-function withoutCoveredPolicies(sql, ownPolicies = {}) {
-	if (Object.keys(ownPolicies).length === 0) return sql;
+function withoutBlockPolicies(sql, skip, restrictive = false) {
 	const masked = maskComments(sql);
 	const skipped = /* @__PURE__ */ new Set();
 	const statements = statementSpans(sql).map(([from, to]) => ({
@@ -126106,20 +126116,51 @@ function withoutCoveredPolicies(sql, ownPolicies = {}) {
 	}));
 	const kept = statements.map(({ text, masked: statement }) => {
 		const parsed = parsePolicy(statement);
-		if (parsed === void 0 || !parsed.policy.name.startsWith(BLOCK_PREFIX) || !parsed.policy.permissive) return text;
-		const apps = (ownPolicies[parsed.table] ?? []).filter((policy) => !policy.name.startsWith(BLOCK_PREFIX));
-		const covering = COMMANDS.filter((command) => coversCommand(parsed.policy, command)).map((command) => coveringPolicy(parsed.policy, apps, command));
-		if (covering.length === 0 || covering.includes(void 0)) return text;
+		if (parsed === void 0 || !parsed.policy.name.startsWith(BLOCK_PREFIX) || !(parsed.policy.permissive || restrictive)) return text;
+		const comment = skip(parsed);
+		if (comment === void 0) return text;
 		skipped.add(`${parsed.table}\u0000${parsed.policy.name}`);
-		const names = [...new Set(covering.map((policy) => policy.name))].join(" and ");
 		const start = statement.search(/\S/);
-		return `${text.slice(0, start === -1 ? 0 : start).trimEnd()}\n-- ${parsed.table}: the app's policy ${names} already allows what ${parsed.policy.name} would, so the block adds none.`;
+		return `${text.slice(0, start === -1 ? 0 : start).trimEnd()}\n-- ${parsed.table}: ${comment}`;
 	});
 	return statements.map(({ masked: statement }, index) => {
 		const edit = POLICY_EDIT.exec(statement);
 		return edit !== null && skipped.has(`${qualified$8(edit[2])}\u0000${unquote$4(edit[1])}`) ? "" : kept[index];
 	}).join("");
 }
+/**
+* `sql` without the block's permissive `bsb_` policies that the app's own
+* policies on the same table already cover for every command they grant (the
+* comparison BS347 makes), so Postgres doesn't OR two policies that admit the
+* same rows. A block policy that is wider stays, and BS347 reports it. The
+* `drop policy if exists` before it stays too, so an earlier install's copy
+* goes.
+*/
+function withoutCoveredPolicies(sql, ownPolicies = {}) {
+	if (Object.keys(ownPolicies).length === 0) return sql;
+	return withoutBlockPolicies(sql, ({ table, policy }) => {
+		const apps = (ownPolicies[table] ?? []).filter((own) => !own.name.startsWith(BLOCK_PREFIX));
+		const covering = COMMANDS.filter((command) => coversCommand(policy, command)).map((command) => coveringPolicy(policy, apps, command));
+		if (covering.length === 0 || covering.includes(void 0)) return;
+		return `the app's policy ${[...new Set(covering.map((own) => own.name))].join(" and ")} already allows what ${policy.name} would, so the block adds none.`;
+	});
+}
+const APP_POLICIES_NOTE = `the app's policies govern this table (ownTablePolicies "app"), so the block adds no`;
+const APP_POLICIES = new RegExp(String.raw`^-- (\S+): ${APP_POLICIES_NOTE.replaceAll(/[()]/g, String.raw`\$&`)} (\S+) for ([a-z, ]+)\.$`, "gm");
+function appTablePolicyNotes(sql) {
+	return [...sql.matchAll(APP_POLICIES)].map(([, table = "", policy = "", commands = ""]) => ({
+		table,
+		policy,
+		commands: COMMANDS.filter((command) => commands.split(", ").includes(command))
+	}));
+}
+function withoutAppTablePolicies(sql, tables) {
+	if (tables.size === 0) return sql;
+	return withoutBlockPolicies(sql, ({ table, policy }) => {
+		if (!tables.has(table)) return;
+		return policy.permissive ? `${APP_POLICIES_NOTE} ${policy.name} for ${COMMANDS.filter((command) => coversCommand(policy, command)).join(", ")}.` : `${APP_POLICIES_NOTE} restrictive ${policy.name}.`;
+	}, true);
+}
 const DROP_POLICY = new RegExp(String.raw`^\s*drop\s+policy\s+(?:if\s+exists\s+)?(${NAME$9})\s+on\s+(${NAME$9}(?:\s*\.\s*${NAME$9})?)`, "i");
 /**
 * The policies `sources` leave on each `schema.table` in `schemas`, in order: a
@@ -126302,7 +126343,7 @@ function moduleBody(name, layout = {}) {
 */
 function overApp(sql, ctx, layout) {
 	const appTables = appTableSet(ctx);
-	return withoutUnmappedColumns(withoutUnmappedTables(blockNamesOnAppTables(withoutAppTableEdits(overAppTables(overAppViews(sql, appTableSet(ctx, ctx.appViews)), appTables, layout.ownColumns), appTables), appTables, layout.ownUpdatedAtTriggers), ctx.instance), ctx.instance);
+	return withoutAppTablePolicies(withoutUnmappedColumns(withoutUnmappedTables(blockNamesOnAppTables(withoutAppTableEdits(overAppTables(overAppViews(sql, appTableSet(ctx, ctx.appViews)), appTables, layout.ownColumns), appTables), appTables, layout.ownUpdatedAtTriggers), ctx.instance), ctx.instance), ctx.config.ownTablePolicies === "app" ? appTables : /* @__PURE__ */ new Set());
 }
 /** The app's tables a module runs over, as `schema.table`. */
 function appTableSet(ctx, tables = ctx.appOwned) {
@@ -127382,4 +127423,4 @@ async function compileReadSets(sets) {
 	return Promise.all(names.map((name) => compileReadSet(byName.get(name))));
 }
 //#endregion
-export { contractSignature as $, moduleFileVersion as A, resolveExposeColumns as B, APP_TABLES_MARKER as C, blockSqlVersion as D, scopePolicyName as E, moduleSchemaExtensions as F, sameTenantTrigger as G, dataExportPlan as H, SQL_MODULES as I, currentBlockName as J, migrationOptionUses as K, resolveBlocks as L, moduleEventTriggers as M, moduleHidingColumns as N, blockFileState as O, modulePermissionKeys as P, MODULE_ID_TYPES as Q, TENANT_SCOPE_POLICY as R, moduleFilePaths as S, appTablesFiles as T, subjectColumns$1 as U, SECRET_COLUMNS as V, sameTenantColumn as W, renamedBlock as X, formerBlockName as Y, AUDIT_CATEGORIES as Z, moduleDeprecations as _, tenantsQuery as a, declaredUpdatedAtTriggers as at, widenedCommands as b, adoptedColumnProblems as c, policyGrants as ct, instanceFunctions as d, isBlockSqlIdType as et, entityRenamePlan as f, renderBlocks as g, moduleTopics as h, moduleLayout as i, declaredTables as it, sameBlockFile as j, isModuleDataFile as k, adoptedTables as l, rlsTables as lt, moduleBody as m, compileReadSets as n, BLOCK_OPTION_SCHEMAS as nt, expiredFlagsQuery as o, declaredViews as ot, customContracts as p, BLOCK_RENAMES as q, sharedRolesProblems as r, declaredTableColumns as rt, sameTenantLayout as s, extensionSchema as st, compileReadSet as t, moduleIdType as tt, adoptedViews as u, auditRegistrations as ut, upgradePlan as v, APP_TABLES_MODULE as w, moduleDataDir as x, declaredPolicies as y, excludedColumns as z };
+export { MODULE_ID_TYPES as $, isModuleDataFile as A, excludedColumns as B, moduleFilePaths as C, scopePolicyName as D, appTablesFiles as E, modulePermissionKeys as F, sameTenantColumn as G, SECRET_COLUMNS as H, moduleSchemaExtensions as I, BLOCK_RENAMES as J, sameTenantTrigger as K, SQL_MODULES as L, sameBlockFile as M, moduleEventTriggers as N, blockSqlVersion as O, moduleHidingColumns as P, AUDIT_CATEGORIES as Q, resolveBlocks as R, moduleDataDir as S, APP_TABLES_MODULE as T, dataExportPlan as U, resolveExposeColumns as V, subjectColumns$1 as W, formerBlockName as X, currentBlockName as Y, renamedBlock as Z, moduleDeprecations as _, tenantsQuery as a, declaredTables as at, declaredPolicies as b, adoptedColumnProblems as c, extensionSchema as ct, instanceFunctions as d, auditRegistrations as dt, contractSignature as et, entityRenamePlan as f, renderBlocks as g, moduleTopics as h, moduleLayout as i, declaredTableColumns as it, moduleFileVersion as j, blockFileState as k, adoptedTables as l, policyGrants as lt, moduleBody as m, compileReadSets as n, moduleIdType as nt, expiredFlagsQuery as o, declaredUpdatedAtTriggers as ot, customContracts as p, migrationOptionUses as q, sharedRolesProblems as r, BLOCK_OPTION_SCHEMAS as rt, sameTenantLayout as s, declaredViews as st, compileReadSet as t, isBlockSqlIdType as tt, adoptedViews as u, rlsTables as ut, upgradePlan as v, APP_TABLES_MARKER as w, widenedCommands as x, appTablePolicyNotes as y, TENANT_SCOPE_POLICY as z };

package/dist/sqlite/index.d.ts

@@ -1,6 +1,6 @@
 import { Bt as Executor } from "../types-DFdg_4yN.js";
 import { c as LocalTablesOption, n as DataEngine, s as LiveEngineOptions } from "../data-engine-BWoz9lED.js";
-import { i as fromSqliteError, n as SqliteDatabaseLike, o as CheckSqliteOptions, r as SqliteExecutorOptions, s as checkSqlite, t as SqliteContextLike } from "../executor-BcNWcD-4.js";
+import { i as fromSqliteError, n as SqliteDatabaseLike, o as CheckSqliteOptions, r as SqliteExecutorOptions, s as checkSqlite, t as SqliteContextLike } from "../executor-BWFfz0ik.js";
 //#region src/sqlite/engine.d.ts
 /** A SQLite database that may report which tables changed. */
 interface ChangingSqliteDatabase extends SqliteDatabaseLike {

package/dist/ssr/index.d.ts

@@ -1,6 +1,6 @@
 import { C as readSession, D as writeSession, E as sessionEncoding, S as pruneSessionChunks, T as sessionCookieName, _ as StoredSession, a as ResolveAuthOptions, b as clearSessionAtScopes, d as CookieOptions, f as CookieRecord, g as SessionEncoding, h as DEFAULT_SESSION_ENCODING, l as resolveAuth, m as CookieWrite, n as AuthResolver, p as CookieScope, r as AuthState, t as AuthResolution, u as AUTH_CACHE_HEADERS, v as WriteSessionOptions, w as serializeCookie, x as parseCookies, y as applyCookieWrites } from "../resolve-CXX6DHv3.js";
 import { n as toSession, t as AuthSession } from "../view-DyFdMCqg.js";
-import { r as MembershipClaim } from "../entitlements-sO977DO-.js";
+import { r as MembershipClaim } from "../entitlements-B0jmjNLD.js";
 import { n as RefreshOutcome, r as refreshSession, t as RefreshOptions } from "../refresh-DT_ICaK-.js";
 import { a as sessionStatus, i as clearSessionCookies, n as SessionStatus, o as authContext, r as SessionStatusOptions, t as ClearSessionCookiesOptions } from "../ended-gUsMZVNg.js";
 export { AUTH_CACHE_HEADERS, type AuthResolution, type AuthResolver, type AuthSession, type AuthState, type ClearSessionCookiesOptions, type CookieOptions, type CookieRecord, type CookieScope, type CookieWrite, DEFAULT_SESSION_ENCODING, type MembershipClaim, type RefreshOptions, type RefreshOutcome, type ResolveAuthOptions, type SessionEncoding, type SessionStatus, type SessionStatusOptions, type StoredSession, type WriteSessionOptions, applyCookieWrites, authContext, clearSessionAtScopes, clearSessionCookies, parseCookies, pruneSessionChunks, readSession, refreshSession, resolveAuth, serializeCookie, sessionCookieName, sessionEncoding, sessionStatus, toSession, writeSession };

package/dist/svelte/index.d.ts

@@ -1,13 +1,13 @@
 import { b as DbError } from "../result-DZeA5KS6.js";
 import { Ct as Events, D as BlockEventPattern, T as BlockEvent, bt as EventMap, k as BlockEventsMatching } from "../events-vcqenSYU.js";
-import { pt as QuerySpec } from "../define-C5AcEkEJ.js";
+import { pt as QuerySpec } from "../define-Cgru0_kF.js";
 import { tt as TemplateValues } from "../bucket-vc-QRrva.js";
-import { g as TopicHandlers, m as Topic, p as SubscriptionStatus, r as PresenceMember, t as EventSchemas } from "../topic-CZXHhZye.js";
-import { t as AuthSnapshot } from "../bind-JGCPGUJh.js";
+import { g as TopicHandlers, m as Topic, p as SubscriptionStatus, r as PresenceMember, t as EventSchemas } from "../topic-BtLz-qTI.js";
+import { t as AuthSnapshot } from "../bind-C801IaK-.js";
 import { t as AuthSession } from "../view-DyFdMCqg.js";
-import { n as Controller } from "../controller-BW-5Opig.js";
-import { C as LiveCountSource, D as ProfileOf, E as PresenceTopic, O as UseActionOptions, S as LiveCountHookOptions, T as PresenceHookOptions, _ as ActionResultOf, a as DataRows, b as ClaimsOf, c as DataWrites, d as BlockMutationState, f as BlockQueryActions, g as ActionInputOf, h as BlockRefetchOn, i as DataRow, l as BlockEventSource, m as BlockQueryState, n as DataId, o as DataSource, p as BlockQueryOptions, r as DataListArgs, s as DataState, t as fieldErrorsOf, u as BlockMutationActions, v as ActionState, w as LiveQueryHookOptions, x as ClientLike, y as BroadcastOptions } from "../field-errors-Dt86dCKk.js";
-import { n as BlockOptions } from "../block-env-y65GF_px.js";
+import { n as Controller } from "../controller-CJUXhshv.js";
+import { C as LiveCountSource, D as ProfileOf, E as PresenceTopic, O as UseActionOptions, S as LiveCountHookOptions, T as PresenceHookOptions, _ as ActionResultOf, a as DataRows, b as ClaimsOf, c as DataWrites, d as BlockMutationState, f as BlockQueryActions, g as ActionInputOf, h as BlockRefetchOn, i as DataRow, l as BlockEventSource, m as BlockQueryState, n as DataId, o as DataSource, p as BlockQueryOptions, r as DataListArgs, s as DataState, t as fieldErrorsOf, u as BlockMutationActions, v as ActionState, w as LiveQueryHookOptions, x as ClientLike, y as BroadcastOptions } from "../field-errors-DqlebtTE.js";
+import { n as BlockOptions } from "../block-env-BeG4DiiO.js";
 import { n as BlockDataOf, r as BlockMethodName, t as BlockArgsOf } from "../block-method-CiVa2G-J.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { QueryClient } from "@tanstack/query-core";

package/dist/sveltekit/index.d.ts

@@ -1,12 +1,12 @@
 import { O as AnyFunctions, k as AnyModels } from "../types-DFdg_4yN.js";
 import { l as PermissionRef, t as AnyAuthorizer } from "../authorizer-B6X09otb.js";
-import { t as BetterSupabase } from "../define-C5AcEkEJ.js";
-import { n as BetterServer } from "../server-types-CK8mUIUT.js";
+import { t as BetterSupabase } from "../define-Cgru0_kF.js";
+import { n as BetterServer } from "../server-types-gR4Q1aM0.js";
 import { a as AuthorizedContext, c as ResourceLoaderContext, i as AuthorizeOptions, l as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-DOwKpSkA.js";
 import { t as RefusalRedirects } from "../refusal-CSntB_x8.js";
-import { n as FrameworkOptions, r as LocalsResource, t as FrameworkLocals } from "../framework-BGdZVyPL.js";
+import { n as FrameworkOptions, r as LocalsResource, t as FrameworkLocals } from "../framework-CF6zFU7a.js";
 import { t as Validated } from "../shared-CRRfQAKG.js";
-import { i as tagFor } from "../tags-qvVk79pp.js";
+import { i as tagFor } from "../tags-sM-CH9Mn.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/bridges/sveltekit.d.ts

package/dist/{tags-qvVk79pp.d.ts → tags-sM-CH9Mn.d.ts}

@@ -1,4 +1,4 @@
-import { Qt as CacheTarget, Zt as CacheAdapter } from "./define-C5AcEkEJ.js";
+import { Qt as CacheTarget, Zt as CacheAdapter } from "./define-Cgru0_kF.js";
 //#region src/core/tags.d.ts
 interface TagOptions {
   /** The tenant the read is scoped to; `"*"` is every tenant's reads. */

package/dist/tanstack-db/index.d.ts

@@ -1,5 +1,5 @@
 import { O as AnyFunctions, k as AnyModels, ut as TableKey } from "../types-DFdg_4yN.js";
-import { t as BetterSupabase, v as Db } from "../define-C5AcEkEJ.js";
+import { t as BetterSupabase, v as Db } from "../define-Cgru0_kF.js";
 import { n as DataEngine } from "../data-engine-BWoz9lED.js";
 import { t as BetterQueryMeta } from "../invalidate-DMp4eqfF.js";
 import { QueryClient, SkipToken } from "@tanstack/query-core";

package/dist/tanstack-start/index.d.ts

@@ -1,10 +1,10 @@
 import { O as AnyFunctions, k as AnyModels } from "../types-DFdg_4yN.js";
 import { l as PermissionRef, t as AnyAuthorizer } from "../authorizer-B6X09otb.js";
-import { t as BetterSupabase } from "../define-C5AcEkEJ.js";
-import { n as BetterServer } from "../server-types-CK8mUIUT.js";
+import { t as BetterSupabase } from "../define-Cgru0_kF.js";
+import { n as BetterServer } from "../server-types-gR4Q1aM0.js";
 import { a as AuthorizedContext, c as ResourceLoaderContext, i as AuthorizeOptions, l as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-DOwKpSkA.js";
 import { t as RefusalRedirects } from "../refusal-CSntB_x8.js";
-import { n as FrameworkOptions, r as LocalsResource, t as FrameworkLocals } from "../framework-BGdZVyPL.js";
+import { n as FrameworkOptions, r as LocalsResource, t as FrameworkLocals } from "../framework-CF6zFU7a.js";
 import { t as Validated } from "../shared-CRRfQAKG.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { StandardSchemaV1 } from "@standard-schema/spec";

package/dist/{tenant-DOKIJI62.d.ts → tenant-DVvjw9H-.d.ts}

@@ -1,4 +1,4 @@
-import { t as AuthSnapshot } from "./bind-JGCPGUJh.js";
+import { t as AuthSnapshot } from "./bind-C801IaK-.js";
 import { t as AuthSession } from "./view-DyFdMCqg.js";
 //#region src/auth/tenant.d.ts
 /**

package/dist/testing/index.d.ts

@@ -9,14 +9,14 @@ import { a as BlockTransportMiddleware } from "../block-hooks-DZN2w69m.js";
 import { a as SessionActor, o as SessionDelegation } from "../actor-CoveJgya.js";
 import { P as QueueProvider } from "../types-Czq9Xtpa.js";
 import { n as Embedder } from "../knowledge-F1IhRI4Q.js";
-import { a as AuthorizationProvider } from "../authorization-HZdJCaVm.js";
+import { a as AuthorizationProvider } from "../authorization-CNsvnwle.js";
 import { o as StreamStore } from "../store-CpheI-lN.js";
 import { o as Authorizer } from "../authorizer-B6X09otb.js";
-import { J as DbStats, Zt as CacheAdapter, t as BetterSupabase, v as Db } from "../define-C5AcEkEJ.js";
+import { J as DbStats, Zt as CacheAdapter, t as BetterSupabase, v as Db } from "../define-Cgru0_kF.js";
 import { Q as StoragePath } from "../bucket-vc-QRrva.js";
-import { a as ServerContext, c as ServerOptions } from "../server-types-CK8mUIUT.js";
+import { a as ServerContext, c as ServerOptions } from "../server-types-gR4Q1aM0.js";
 import { n as Impersonator } from "../impersonation-YTa9dZUv.js";
-import { tn as AnyRecordBinding } from "../define-block-C1RHXz7L.js";
+import { tn as AnyRecordBinding } from "../define-block-Xxw8Hroe.js";
 import { n as Money } from "../money-BNRdJQzA.js";
 import { i as EventSink, t as CloudEvent } from "../cloud-event-CzZTJkXv.js";
 import { i as AuthorizationHooks } from "../authorization-hooks-D_pwXlBs.js";
@@ -24,9 +24,9 @@ import { s as SqlClaims, t as BetterPostgres } from "../pool-CrtT4dg-.js";
 import { C as SupportSessionStore } from "../support-B4ZBVxt3.js";
 import { r as GuardOptions } from "../respond-Dn1_YhC1.js";
 import { l as Transcriber, s as NoteTaker, u as TranscriberInput } from "../recordings-BBSJt_YV.js";
-import { n as Controller } from "../controller-BW-5Opig.js";
-import { c as AiTaskRunner, o as AiTaskRun, r as AiTask } from "../ai-schedules-BmkARmQ9.js";
-import { Ht as GeneratorModel, Qt as ResolvedConfig, jt as Generator, zt as GeneratorInput } from "../context-8kb8m5uO.js";
+import { n as Controller } from "../controller-CJUXhshv.js";
+import { c as AiTaskRunner, o as AiTaskRun, r as AiTask } from "../ai-schedules-Dk9H3kAp.js";
+import { Ht as GeneratorModel, Qt as ResolvedConfig, jt as Generator, zt as GeneratorInput } from "../context-CKCgjEDF.js";
 import { r as WebhookInput } from "../signatures-Dkx9OE8j.js";
 import { n as Payment, o as PaymentProvider } from "../payments-BYcN34Fp.js";
 import { t as NotificationChannel } from "../channel-BjvGO39m.js";

package/dist/testing/index.js

@@ -6,7 +6,7 @@ import { t as temporal } from "../temporal-required-Dy0GGD8E.js";
 import { a as ok } from "../result-ntFBW2p2.js";
 import { t as BetterSupabase } from "../define-DlUeKHce.js";
 import { a as toBase64Url, r as fromBase64, t as base64ToText } from "../base64-B9Wlsdj7.js";
-import { c as resolveConfig } from "../config-DWGgUQCh.js";
+import { c as resolveConfig } from "../config-BVNNJwGC.js";
 import { a as isScopeName, c as templateFunctions, l as templatePlaceholders, n as TEMPLATE_PLACEHOLDERS, s as scopeProblems, u as templateProblems } from "../access-sql-B-MkVARa.js";
 import { r as TRACKING_STATUSES, t as LABEL_FORMATS } from "../statuses-zRcc2TeZ.js";
 import { i as seedLite, n as loadLite, r as migrateLite, t as LITE_INSTALL } from "../runtime-CoKxZibd.js";
@@ -27,8 +27,8 @@ import { c as isMoney, d as money, l as isRate } from "../money-BZl985O-.js";
 import { t as SHIPPING_LINE } from "../tax-BkCNWWMc.js";
 import { t as trashExtension } from "../extension-DzCc0IOd.js";
 import { t as membershipsExtension } from "../extension-DeAd_MqI.js";
-import { t as createdByExtension } from "../extension-B-lajjex.js";
-import { t as updatedAtExtension } from "../extension-B0EjCYhO.js";
+import { t as createdByExtension } from "../extension-DTaHjwdc.js";
+import { t as updatedAtExtension } from "../extension-mGylYROs.js";
 import { t as buildApiModel } from "../build-QitPVzzO.js";
 import { createClient } from "@supabase/supabase-js";
 import { existsSync } from "node:fs";

package/dist/{timeline-CvTuXYvn.d.ts → timeline-BBfKuMVL.d.ts}

@@ -1,9 +1,9 @@
 import { D as ValidationIssue, t as AsyncResult } from "./result-DZeA5KS6.js";
 import { $ as RecordRef } from "./types-DFdg_4yN.js";
 import { o as FilterField } from "./filter-query-BXLs72G9.js";
-import { cn as RecordBindingResult, hn as TimelineItem, in as RecordBindingData } from "./define-block-C1RHXz7L.js";
-import { A as BindingBlocks, F as LoadBindingsOptions, M as BindingName, N as BindingOf, P as BindingSource, V as PermissionSet, _ as RecordTypeBlocks, g as RecordType, h as RecordCan } from "./index-CcAmFNVi.js";
-import { c as ListParseOptions, m as ListSearchParams } from "./list-query-DYhgRTd5.js";
+import { cn as RecordBindingResult, hn as TimelineItem, in as RecordBindingData } from "./define-block-Xxw8Hroe.js";
+import { A as BindingBlocks, F as LoadBindingsOptions, M as BindingName, N as BindingOf, P as BindingSource, V as PermissionSet, _ as RecordTypeBlocks, g as RecordType, h as RecordCan } from "./index-B8YjrfVl.js";
+import { c as ListParseOptions, m as ListSearchParams } from "./list-query-DxjuIHEL.js";
 //#region src/records/list.d.ts
 /**
  * How a binding fills a list column: `count` is how many rows it has (the

package/dist/{topic-CZXHhZye.d.ts → topic-BtLz-qTI.d.ts}

@@ -1,7 +1,7 @@
 import { D as ValidationIssue, b as DbError, t as AsyncResult } from "./result-DZeA5KS6.js";
 import { D as AccessTopicPolicy, O as AnyFunctions, it as Row, k as AnyModels, ut as TableKey } from "./types-DFdg_4yN.js";
-import { t as AuthorizationFunctions } from "./authorization-HZdJCaVm.js";
-import { t as BetterSupabase } from "./define-C5AcEkEJ.js";
+import { t as AuthorizationFunctions } from "./authorization-CNsvnwle.js";
+import { t as BetterSupabase } from "./define-Cgru0_kF.js";
 import { et as TemplateParams, tt as TemplateValues } from "./bucket-vc-QRrva.js";
 import { g as SubscriberPolicy, h as SubscriberEvent, i as AuthorizationHooks, m as Subscriber } from "./authorization-hooks-D_pwXlBs.js";
 import { t as RealtimeStatus } from "./realtime-status-BhNkb-Ow.js";

package/dist/{verify-CjvNLY7N.d.ts → verify-DEqY__0N.d.ts}

@@ -1,7 +1,7 @@
 /// <reference lib="esnext.temporal" />
 import { f as Result } from "./result-DZeA5KS6.js";
 import { O as AnyFunctions, it as Row, k as AnyModels, ut as TableKey } from "./types-DFdg_4yN.js";
-import { t as BetterSupabase } from "./define-C5AcEkEJ.js";
+import { t as BetterSupabase } from "./define-Cgru0_kF.js";
 import { n as VerifyOptions, r as WebhookInput, t as VerifiedWebhook } from "./signatures-Dkx9OE8j.js";
 //#region src/blocks/webhooks/verify.d.ts
 /** The `Stripe-Signature` header for `body`, for tests and local replays. */

package/dist/vue/index.d.ts

@@ -1,13 +1,13 @@
 import { b as DbError } from "../result-DZeA5KS6.js";
 import { Ct as Events, D as BlockEventPattern, T as BlockEvent, bt as EventMap, k as BlockEventsMatching } from "../events-vcqenSYU.js";
-import { pt as QuerySpec } from "../define-C5AcEkEJ.js";
+import { pt as QuerySpec } from "../define-Cgru0_kF.js";
 import { tt as TemplateValues } from "../bucket-vc-QRrva.js";
-import { g as TopicHandlers, m as Topic, p as SubscriptionStatus, r as PresenceMember, t as EventSchemas } from "../topic-CZXHhZye.js";
-import { t as AuthSnapshot } from "../bind-JGCPGUJh.js";
+import { g as TopicHandlers, m as Topic, p as SubscriptionStatus, r as PresenceMember, t as EventSchemas } from "../topic-BtLz-qTI.js";
+import { t as AuthSnapshot } from "../bind-C801IaK-.js";
 import { t as AuthSession } from "../view-DyFdMCqg.js";
-import { n as Controller } from "../controller-BW-5Opig.js";
-import { C as LiveCountSource, D as ProfileOf, E as PresenceTopic, O as UseActionOptions, S as LiveCountHookOptions, T as PresenceHookOptions, _ as ActionResultOf, a as DataRows, b as ClaimsOf, c as DataWrites, d as BlockMutationState, f as BlockQueryActions, g as ActionInputOf, h as BlockRefetchOn, i as DataRow, l as BlockEventSource, m as BlockQueryState, n as DataId, o as DataSource, p as BlockQueryOptions, r as DataListArgs, s as DataState, t as fieldErrorsOf, u as BlockMutationActions, v as ActionState, w as LiveQueryHookOptions, x as ClientLike, y as BroadcastOptions } from "../field-errors-Dt86dCKk.js";
-import { n as BlockOptions } from "../block-env-y65GF_px.js";
+import { n as Controller } from "../controller-CJUXhshv.js";
+import { C as LiveCountSource, D as ProfileOf, E as PresenceTopic, O as UseActionOptions, S as LiveCountHookOptions, T as PresenceHookOptions, _ as ActionResultOf, a as DataRows, b as ClaimsOf, c as DataWrites, d as BlockMutationState, f as BlockQueryActions, g as ActionInputOf, h as BlockRefetchOn, i as DataRow, l as BlockEventSource, m as BlockQueryState, n as DataId, o as DataSource, p as BlockQueryOptions, r as DataListArgs, s as DataState, t as fieldErrorsOf, u as BlockMutationActions, v as ActionState, w as LiveQueryHookOptions, x as ClientLike, y as BroadcastOptions } from "../field-errors-DqlebtTE.js";
+import { n as BlockOptions } from "../block-env-BeG4DiiO.js";
 import { n as BlockDataOf, r as BlockMethodName, t as BlockArgsOf } from "../block-method-CiVa2G-J.js";
 import { t as SupportView } from "../support-view-BYOgwXsJ.js";
 import { SupabaseClient } from "@supabase/supabase-js";

package/dist/{watch-topic-BAxoPKZx.d.ts → watch-topic-tnfOTa3-.d.ts}

@@ -1,4 +1,4 @@
-import { c as RealtimeClient, p as SubscriptionStatus } from "./topic-CZXHhZye.js";
+import { c as RealtimeClient, p as SubscriptionStatus } from "./topic-BtLz-qTI.js";
 //#region src/realtime/watch-topic.d.ts
 interface TopicWatch {
   readonly onMessage: (event: string, payload: unknown) => void;

package/dist/yjs/index.d.ts

@@ -1,5 +1,5 @@
 import { t as AsyncResult } from "../result-DZeA5KS6.js";
-import { c as RealtimeClient, r as PresenceMember } from "../topic-CZXHhZye.js";
+import { c as RealtimeClient, r as PresenceMember } from "../topic-BtLz-qTI.js";
 import { a as DocumentSuggestion, d as OpenedDocument, l as Documents, r as DocumentRef, t as DecidedSuggestion } from "../documents-Cup1rpjF.js";
 //#region src/yjs/yjs.d.ts
 type PresenceState = Readonly<Record<string, unknown>>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-supabase",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Strongly typed Supabase: generated schema, typed repositories, plugins, auth glue, framework integrations and the better-supabase CLI.",
   "keywords": [
     "cli",

package/schemas/config-v1.json

@@ -217,6 +217,12 @@
               "type": "string",
               "description": "Who a block's rows belong to, unless the block sets its own scope: tenant (the default), user (the signed-in user, no tenants) or none (one shared space every signed-in user uses).",
               "default": "tenant"
+            },
+            "ownTablePolicies": {
+              "enum": ["block", "app"],
+              "type": "string",
+              "description": "Whose policies govern the app's tables a block runs over, unless the block sets its own ownTablePolicies: block (the default) lets a block add its bsb_ policies where none of the app's covers them, and app keeps every bsb_ policy, permissive or restrictive, off them.",
+              "default": "block"
             }
           },
           "additionalProperties": false
@@ -3050,6 +3056,11 @@
           "type": "string",
           "description": "Who the block's rows belong to: tenant, user or none. Defaults to database.sql.owner, then tenant."
         },
+        "ownTablePolicies": {
+          "enum": ["block", "app"],
+          "type": "string",
+          "description": "Whose policies govern the app's tables this block runs over: block lets it add its bsb_ policies where none of the app's covers them, app keeps every bsb_ policy, permissive or restrictive, off them. Applies to every app table of the block. Defaults to database.sql.ownTablePolicies, then block."
+        },
         "functions": {
           "type": "object",
           "additionalProperties": {
@@ -3231,6 +3242,11 @@
           "type": "string",
           "description": "Who the block's rows belong to: tenant, user or none. Defaults to database.sql.owner, then tenant."
         },
+        "ownTablePolicies": {
+          "enum": ["block", "app"],
+          "type": "string",
+          "description": "Whose policies govern the app's tables this block runs over: block lets it add its bsb_ policies where none of the app's covers them, app keeps every bsb_ policy, permissive or restrictive, off them. Applies to every app table of the block. Defaults to database.sql.ownTablePolicies, then block."
+        },
         "functions": {
           "type": "object",
           "properties": {
@@ -4257,6 +4273,9 @@
               "impersonatedBy": {
                 "type": "string",
                 "default": "impersonated_by"
+              },
+              "stamp": {
+                "default": "client"
               }
             }
           }
@@ -6152,6 +6171,9 @@
               "updatedAt": {
                 "type": "string",
                 "default": "updated_at"
+              },
+              "stamp": {
+                "default": "client"
               }
             }
           }

package/schemas/doctor-report-v1.json

@@ -136,6 +136,7 @@
               "BS347",
               "BS348",
               "BS349",
+              "BS350",
               "BS401",
               "BS402",
               "BS403",

package/dist/cli/add-Bfb_ISrO.js

@@ -1 +0,0 @@
-export { t as addCommand } from "./add-D7TkPdco.js";

package/dist/cli/seed-D6XijwbR.js

@@ -1 +0,0 @@
-export { n as seedCommand } from "./seed-Cz8PcXeT.js";