better-supabase 0.16.0 → 0.18.0

package/dist/{access-sql-B-MkVARa.js → access-sql-CNIgUqWf.js}

@@ -18,12 +18,14 @@ const TEMPLATE_PLACEHOLDERS = {
 	teamIdsOf: ["user"],
 	canAssign: [
 		"role",
+		"roles",
 		"tenant",
 		"scope"
 	],
 	canAssignFor: [
 		"user",
 		"role",
+		"roles",
 		"tenant",
 		"scope"
 	],

package/dist/{adapter-Dyks1lX1.js → adapter-CfuBICuG.js}

@@ -16,7 +16,7 @@ import { c as AUTH_CACHE_HEADERS, d as clearSessionAtScopes, f as parseCookies,
 import { o as requestMemo, t as bindAuthorizer } from "./authorizer-BGhXaDmo.js";
 import { t as credentialProviderOf } from "./provider-B6g7rBZX.js";
 import { c as sessionMemo, l as snapshotOf, r as authOfSnapshot } from "./view-C8Ve14ja.js";
-import { a as respond, n as defaultPrefetchJwks, r as guard, t as defaultExpose } from "./respond-C3CcOZlA.js";
+import { i as guard, n as defaultExpose, o as respond, r as defaultPrefetchJwks, t as assertCookieRefresh } from "./respond-3RKp6VgU.js";
 import { createClient } from "@supabase/supabase-js";
 import { defineMiddleware, getEnv, pipeline, seedContext } from "@supabase/middleware";
 import { PostgrestClient } from "@supabase/postgrest-js";
@@ -2255,8 +2255,10 @@ function unexpectedResponse(cause, options) {
 async function handle(server, request, run, options = {}) {
 	const expose = options.expose ?? defaultExpose();
 	const instance = options.instance ?? new URL(request.url).pathname;
+	assertCookieRefresh(options);
 	const ctx = await server.context(request, {
 		...options.context,
+		...options.cookies === void 0 ? {} : { cookies: options.cookies },
 		refresh: refreshFor(options.refresh, request) ?? false
 	});
 	const denied = guard(ctx.auth, options.allow, options.aal, options.scopes);

package/dist/{ai-schedules-BmkARmQ9.d.ts → ai-schedules-DzLh6BYI.d.ts}

@@ -8,7 +8,7 @@ import { t as BlockTransport } from "./block-transport-DWZSJrwN.js";
 import { n as BlockHooks } from "./block-hooks-DZN2w69m.js";
 import { g as JobHandler } from "./types-Czq9Xtpa.js";
 import { r as RunState } from "./run-state-BMCD_1Lt.js";
-import { I as Notifier } from "./define-block-C1RHXz7L.js";
+import { I as Notifier } from "./define-block-CJWiDWa5.js";
 //#region src/blocks/ai-schedules/ai-schedules.d.ts
 /** A task run's state, in the words ai-chat and workflow runs share. */
 type AiTaskRunStatus = Extract<RunState, "queued" | "running" | "completed" | "failed">;

package/dist/ai-sdk/agents/index.d.ts

@@ -2,8 +2,8 @@ import { a as SessionActor, c as agentClaims, r as AgentActOptions } from "../..
 import { d as KnowledgeSearchOptions, o as KnowledgeHit, r as Knowledge } from "../../knowledge-F1IhRI4Q.js";
 import { t as Agent } from "../../agents-CMIB3802.js";
 import { P as AiToolPolicy, _ as AiModerationAction, b as AiModerationStage, i as AiChat } from "../../ai-chat-BCaKsvLW.js";
-import { r as AuthorizationOperation } from "../../authorization-HZdJCaVm.js";
-import { t as OperationTable } from "../../operations-CSc_IsHO.js";
+import { r as AuthorizationOperation } from "../../authorization-IiE__z2m.js";
+import { t as OperationTable } from "../../operations-CAjMgNr9.js";
 import { i as SearchToolOptions, r as ResultsFilter } from "../../embeddings-D_RsS6ow.js";
 import { n as GatewayOptions } from "../../gateway-options-BlVCqgb8.js";
 import { LanguageModel, LanguageModelMiddleware, StopCondition, ToolLoopAgent, ToolLoopAgentSettings, ToolSet } from "ai";

package/dist/ai-sdk/memory/index.js

@@ -1,5 +1,5 @@
 import { t as DbException } from "../../db-exception-Lngc1W49.js";
-import { t as SPEC_PINS } from "../../spec-pins-C1Vm8OBl.js";
+import { t as SPEC_PINS } from "../../spec-pins-D3zDek-u.js";
 import { Output, generateText, jsonSchema, tool } from "ai";
 //#region src/ai-sdk/memory/memory.ts
 const PATH = {

package/dist/{api-hHwieEfz.d.ts → api-B6zteBya.d.ts}

@@ -1,12 +1,12 @@
 import { St as AnyPlugin, d as MutationIntent, ot as SchemaMeta } from "./types-DFdg_4yN.js";
 import { bt as EventMap } from "./events-vcqenSYU.js";
 import { o as Authorizer } from "./authorizer-B6X09otb.js";
-import { f as DbBlockSource } from "./define-C5AcEkEJ.js";
+import { f as DbBlockSource } from "./define-Cgru0_kF.js";
 import { n as CloudEventOptions } from "./cloud-event-CzZTJkXv.js";
 import { t as RealtimeStatus } from "./realtime-status-BhNkb-Ow.js";
 import { C as ModelWebhook, E as OperationSource, O as SecurityRequirement, S as ModelTag, a as JsonSchema, b as ModelServer, d as ModelInfo, f as ModelMessage, i as JsonObject, m as ModelOperation, n as DataApiOperation, p as ModelMessageTrait, r as HttpMethod, s as ModelChannel, t as ApiModel, v as ModelSecurityProfileRequirement, w as ModelWorkflow, y as ModelSecurityScheme } from "./model-hwpvole9.js";
 import { a as ResourcePlan, o as StandardLike, r as ResourceDescription, t as ErrorResponse } from "./resource-D8pzB5Qf.js";
-import { t as SPEC_PINS } from "./spec-pins-DIx95afw.js";
+import { t as SPEC_PINS } from "./spec-pins-BZkKfwY8.js";
 import { c as SpecDiagnostic, i as DocumentOf, l as VersionOf, s as RenderedOf, t as AnyDocumentFormat } from "./format-u-65igKI.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/openapi/types.d.ts

package/dist/{app-tables-D29Rahtg.js → app-tables-DyswUg6J.js}

@@ -46,6 +46,7 @@ function resolveBlock(config = {}) {
 		columns: Object.fromEntries(Object.entries(defined(config.columns)).map(([table, columns]) => [table, defined(columns)])),
 		...config.idType === void 0 ? {} : { idType: config.idType },
 		...config.scope === void 0 ? {} : { scope: config.scope },
+		ownTablePolicies: config.ownTablePolicies ?? "block",
 		functions: defined(config.functions),
 		permissions: defined(config.permissions),
 		options: config.options ?? {},
@@ -119,7 +120,11 @@ const PRESET_CATALOG = {
 				"permissions",
 				"updated-at"
 			],
-			"integrates": ["organizations", "profiles"],
+			"integrates": [
+				"organizations",
+				"profiles",
+				"teams"
+			],
 			"manifest": "organizations",
 			"scopes": ["tenant"],
 			"extraColumns": "invitations"
@@ -1149,7 +1154,7 @@ const PRESET_CATALOG = {
 			"title": "Push devices",
 			"category": "messaging",
 			"requires": [],
-			"integrates": [],
+			"integrates": ["notifications"],
 			"manifest": "push",
 			"extraColumns": "devices"
 		},
@@ -6341,6 +6346,8 @@ const PRESET_CATALOG = {
 				{ "name": "AttachmentsOptions" },
 				{ "name": "AttachmentStatus" },
 				{ "name": "AttachmentStorage" },
+				{ "name": "AttachmentSweeper" },
+				{ "name": "AttachmentSweeperOptions" },
 				{ "name": "AttachmentsWrites" },
 				{
 					"name": "AttachmentUpload",
@@ -13024,6 +13031,8 @@ const PRESET_CATALOG = {
 					"organization.member_suspended",
 					"organization.member_resumed",
 					"organization.role_changed",
+					"organization.role_added",
+					"organization.role_removed",
 					"organization.ownership_transferred",
 					"organization.switched",
 					"invitation.created",

package/dist/{app-tables-yMQ4ubyY.d.ts → app-tables-XwCviyhP.d.ts}

@@ -1,4 +1,4 @@
-import { hr as AppTableConfig } from "./context-8kb8m5uO.js";
+import { hr as AppTableConfig } from "./context-D24k1Cpc.js";
 //#region src/config/app-tables.d.ts
 /**
  * The columns every app table gets, which `columns` may not name: `id`,

package/dist/astro/index.d.ts

@@ -1,11 +1,11 @@
 import { O as AnyFunctions, k as AnyModels } from "../types-DFdg_4yN.js";
 import { l as PermissionRef, t as AnyAuthorizer } from "../authorizer-B6X09otb.js";
-import { t as BetterSupabase } from "../define-C5AcEkEJ.js";
-import { n as BetterServer } from "../server-types-CK8mUIUT.js";
+import { t as BetterSupabase } from "../define-Cgru0_kF.js";
+import { n as BetterServer } from "../server-types-gR4Q1aM0.js";
 import { P as StorageImageOptions } from "../index-CQhPHHDF.js";
-import { a as AuthorizedContext, l as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-DOwKpSkA.js";
-import { t as RefusalRedirects } from "../refusal-CSntB_x8.js";
-import { n as FrameworkOptions, r as LocalsResource, t as FrameworkLocals } from "../framework-BGdZVyPL.js";
+import { a as AuthorizedContext, l as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-CVgQCIBO.js";
+import { t as RefusalRedirects } from "../refusal-OrlI3g4H.js";
+import { n as FrameworkOptions, r as LocalsResource, t as FrameworkLocals } from "../framework-x9Y4uB1q.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/astro/index.d.ts
 /**

package/dist/astro/index.js

@@ -1,10 +1,10 @@
 import { i as storageImageUrl } from "../image-url-_d7xYsXK.js";
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-Dyks1lX1.js";
-import { t as defaultExpose } from "../respond-C3CcOZlA.js";
-import { i as requireCaller, o as runAction } from "../kit-5l-o8RxL.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-CfuBICuG.js";
+import { n as defaultExpose } from "../respond-3RKp6VgU.js";
+import { i as requireCaller, o as runAction } from "../kit-DhlB-vv_.js";
 import { t as around } from "../shared-Bf-I13Ht.js";
-import { i as localsOf, r as frameworkEntry } from "../framework-BozTXRzt.js";
-import { r as refusalResponse } from "../refusal-ByBZcm0V.js";
+import { i as localsOf, r as frameworkEntry } from "../framework-CNhTg0th.js";
+import { r as refusalResponse } from "../refusal-D48CMqpQ.js";
 //#region src/astro/index.ts
 function runtimeEnv(locals) {
 	const runtime = "runtime" in locals ? locals.runtime : void 0;

package/dist/{attachments-aJYgdYtB.js → attachments-M-Dy79Ry.js}

@@ -124,7 +124,7 @@ function createAttachments(options) {
 	const find = (id) => call("get_attachment", { id }, (value) => value).andThen((value) => isRecord(value) ? typed(value) : AsyncResult.err(notFound()));
 	const confirmed = (id) => call("confirm_attachment", { id }, (value) => value).andThen(typed);
 	const confirm = (id) => claimsUploads(options.storage) ? lookup(call, id).andThen((attachment) => attachment.uploadedAt === void 0 ? claimUpload(options.storage, attachment, CLAIM_HINTS).andThen(() => confirmed(id)) : confirmed(id)) : confirmed(id);
-	const requireScan = options.requireScan ?? true;
+	const requireScan = options.requireScan ?? options.offline !== true;
 	const ttl = options.downloadTtl ?? 300;
 	const bucket = (attachment) => options.storage.from(attachment.bucket);
 	/** Why a file can't be read yet, or `undefined` once it can. */
@@ -140,6 +140,13 @@ function createAttachments(options) {
 		return ok(target.getPublicUrl(attachment.path, url).data.publicUrl);
 	};
 	const listVersions = (id) => call("list_attachment_versions", { id }, (value) => recordsOf(value, "list_attachment_versions").map(attachmentVersionOf));
+	const removeRowFirst = (id) => find(id).andThen((attachment) => listVersions(id).map((earlier) => ({
+		attachment,
+		earlier
+	}))).andThen(({ attachment, earlier }) => call("delete_attachment", { id }, (value) => value === true).andThen(async (deleted) => {
+		if (deleted) await stored(bucket(attachment).remove([attachment.path, ...earlier.map((version) => version.path)]));
+		return ok(deleted);
+	}));
 	const versionOf = (id, version) => listVersions(id).andThen((earlier) => {
 		const found = earlier.find((each) => each.version === version);
 		return Promise.resolve(found === void 0 ? err(dbError("not_found", "The file has no version with this number", { hint: "ATTACHMENT_VERSION_NOT_FOUND" })) : ok(found));
@@ -255,7 +262,7 @@ function createAttachments(options) {
 				file
 			}));
 		}),
-		remove: (id) => find(id).andThen((attachment) => listVersions(id).andThen((earlier) => stored(bucket(attachment).remove([attachment.path, ...earlier.map((version) => version.path)])))).andThen(() => call("delete_attachment", { id }, (value) => value === true))
+		remove: (id) => options.offline === true ? removeRowFirst(id) : find(id).andThen((attachment) => listVersions(id).andThen((earlier) => stored(bucket(attachment).remove([attachment.path, ...earlier.map((version) => version.path)])))).andThen(() => call("delete_attachment", { id }, (value) => value === true))
 	}, options.hooks, {
 		block: "attachments",
 		...options.logger ? { logger: options.logger } : {}