better-supabase 0.16.0 → 0.18.0

package/dist/cli/{run-BXx6D1aR.js → run-DmOTMa44.js}

@@ -1,9 +1,9 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { t as PROCESS_ENV } from "./env-DMgjB_4y.js";
 import { n as spawnInherited } from "./exec--Q1ZEWUW.js";
 import { i as staleVariables } from "./stack-env-6hS-WEmh.js";
-import { i as readStackEnv } from "./env-BBl5L8Bf.js";
+import { i as readStackEnv } from "./env-BCgVZkcb.js";
 //#region src/cli/commands/run.ts
 const ARGS = {
 	prefix: {

package/dist/cli/{run-Bs4OKdDI.js → run-jeplMBOK.js}

@@ -1,17 +1,19 @@
 import { r as errorText } from "./errors-BTe6A15O.js";
 import { a as sameText, t as display } from "./io-DH1kcmmP.js";
-import { c as writeAtomic, o as storeTypesModule, s as typesModuleKey, t as CACHE_DIR } from "./cache-AznIssjI.js";
+import { c as writeAtomic, o as storeTypesModule, s as typesModuleKey, t as CACHE_DIR } from "./cache-DE2IH1-C.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
-import { _ as stabilizeMetadata, b as typegenVersionNotice, p as oxfmtInstalled, t as loadSnapshot, y as typegenVersion } from "./snapshot-uTUlEzY2.js";
-import { n as render } from "./render-5y5a1QZr.js";
-import { C as entitlementsMode, E as unsafeKey, S as entitlementRequirements, T as providerLabel, b as accessProviderMode, c as sameModuleMigration, l as writeLatestMigration, n as READ_SETS_SUFFIX, r as latestMigration, u as writesMigrations, w as moduleKeyProblems, x as accessRequirements, y as compiledReadSets } from "./module-migration-O_IxewFs.js";
-import { s as schemaStampPath } from "./content-mapper-DCrz6OIv.js";
+import { _ as stabilizeMetadata, b as typegenVersionNotice, p as oxfmtInstalled, t as loadSnapshot, y as typegenVersion } from "./snapshot-BXmU3IXN.js";
+import { n as render } from "./render-BJF9ytUi.js";
+import { _ as unsafeKey, d as accessProviderMode, f as accessRequirements, g as providerLabel, h as moduleKeyProblems, m as entitlementsMode, p as entitlementRequirements, u as compiledReadSets } from "./migrations-BoIyGczt.js";
+import { s as schemaStampPath } from "./content-mapper-CaygHH_k.js";
 import { a as changedFiles, d as fileDiff, i as changeLines, r as applyPlan, s as hasConflicts } from "./files-CX71yBm8.js";
-import { n as migrationsDir, o as writtenByBlocks } from "./sql-layout-lUWenjJw.js";
-import { l as tableObject, n as exposed, o as policyObject, s as qualified, t as catalogOf } from "./shared-BLqbvY2x.js";
+import { n as migrationsDir, o as writtenByBlocks } from "./sql-layout-D8QrNvt4.js";
+import { l as tableObject, n as exposed, o as policyObject, s as qualified, t as catalogOf } from "./shared-B38Chjgd.js";
+import { c as sameModuleMigration, l as writeLatestMigration, n as READ_SETS_SUFFIX, r as latestMigration, u as writesMigrations } from "./module-migration-DXvo0EqU.js";
 import { existsSync } from "node:fs";
 import { dirname, isAbsolute, relative, resolve, sep } from "node:path";
 import { readFile } from "node:fs/promises";
+import { DEFAULT_ACTIVE_TENANT } from "better-supabase/config";
 import { SQL_MODULES, adoptedTables, declaredTables, moduleHidingColumns, moduleLayout, modulePermissionKeys, renderBlocks, resolveBlocks, sameBlockFile } from "better-supabase/sql";
 //#region src/cli/doctor/advisor-rules.ts
 /**
@@ -654,6 +656,11 @@ const TEMPLATE_EFFECT = {
 	isPlatformFor: "their checks of another user's platform permissions (platform_can) answer false or are skipped",
 	canAssignFor: "better_supabase.can_assign_as is not written and the inviter's right to assign the role is not checked again when the invitation is accepted"
 };
+function activeTenantLabel(source) {
+	if (source === "claim") return "the app_metadata claim";
+	if (source === "resolver") return "the request (the tenant resolver)";
+	return `the profile column ${source.profileColumn}`;
+}
 /** The optional templates installed modules call that the provider doesn't set. */
 function missingTemplates(context, provider) {
 	const installed = new Set(context.config.blockNames);
@@ -935,7 +942,7 @@ const AUTHORIZATION_RULES = [
 		code: "BS409",
 		severity: "warning",
 		title: "The authorization provider and the better-supabase config disagree",
-		description: "The provider's hook writes the active tenant to `tokenHook.tenantClaim`, and its tenant scope is `tenantScope`. Doctor warns when `auth.organization.claim` names another claim (the tenant plugin, guards and RLS would read a claim the hook never writes), notes when `auth.claims.scope` is neither `tenant` nor the provider's tenant scope, notes when the provider sets `suspension` or `roleSources` but `blocks.permissions.model` is not `provider` (only that model reads them), and reports the `problems` the provider found while it was built.",
+		description: "The provider's hook writes the active tenant to `tokenHook.tenantClaim`, and its tenant scope is `tenantScope`. Doctor warns when `auth.organization.claim` names another claim (the tenant plugin, guards and RLS would read a claim the hook never writes), notes when `auth.claims.scope` is neither `tenant` nor the provider's tenant scope, warns when the provider's `tokenHook.activeOrganizationFrom` differs from `blocks.permissions.activeTenant` (where `switch_organization` writes the active organization), notes when the provider sets `suspension` or `roleSources` but `blocks.permissions.model` is not `provider` (only that model reads them), and reports the `problems` the provider found while it was built.",
 		check: (context) => {
 			const provider = context.config.authorization;
 			if (!provider) return [];
@@ -949,6 +956,12 @@ const AUTHORIZATION_RULES = [
 				message: `The hook of ${label} writes the active tenant to "${tenantClaim}", but auth.organization.claim is "${context.config.claims.tenant}". Set auth.organization.claim to "${tenantClaim}", or change the provider's tenant claim.`,
 				target: "claims.tenant"
 			});
+			const readsFrom = provider.tokenHook?.activeOrganizationFrom;
+			const writesTo = context.config.blocks.permissions?.activeTenant ?? DEFAULT_ACTIVE_TENANT;
+			if (readsFrom !== void 0 && activeTenantLabel(readsFrom) !== activeTenantLabel(writesTo)) findings.push({
+				message: `The hook of ${label} reads the active organization from ${activeTenantLabel(readsFrom)}, but switch_organization writes it to ${activeTenantLabel(writesTo)} (blocks.permissions.activeTenant), so switching never changes the token. Set blocks.permissions.activeTenant to match the provider.`,
+				target: "blocks.permissions.activeTenant"
+			});
 			const scope = context.config.claims.scope;
 			if (scope !== "tenant" && scope !== provider.tenantScope) findings.push({
 				severity: "info",
@@ -969,7 +982,7 @@ const AUTHORIZATION_RULES = [
 		code: "BS411",
 		severity: "error",
 		title: "The provider access model can't use the authorization provider",
-		description: "With `blocks.permissions.model: 'provider'`, the `access` module fills the provider's `idsWith` template for tenant checks and `isPlatform` for platform checks, at its tenant scope. Doctor reports a config without `authorization`, a tenant scope or id type the module can't render, a function those templates call that `authorization.requires` doesn't list, doesn't let `authenticated` execute or the database lacks, and every module permission key (from `modulePermissionKeys`) the provider doesn't mark `sqlComplete: true`, since its functions are trusted with role and scope only. It warns when neither `blocks.permissions.functions.canAssign` nor the provider's `canAssign` is set, because only the service role then assigns roles, and when an installed module calls a template the provider doesn't set (`idsWithFor` and `isPlatformFor` to check another user, `canAssignFor` to recheck an inviter).",
+		description: "With `blocks.permissions.model: 'provider'`, the `access` module fills the provider's `idsWith` template for tenant checks and `isPlatform` for platform checks, at its tenant scope. Doctor reports a config without `authorization`, a tenant scope or id type the module can't render, a function those templates call that `authorization.requires` doesn't list, doesn't let `authenticated` execute or the database lacks, and every module permission key (from `modulePermissionKeys`) the provider doesn't mark `sqlComplete: true`, since its functions are trusted with role and scope only. It warns when neither `blocks.permissions.functions.canAssign` nor the provider's `canAssign` is set, because only the service role then assigns roles, and when an installed module calls a template the provider doesn't set (`idsWithFor` and `isPlatformFor` to check another user, `canAssignFor` to recheck an inviter). It also warns when `blocks.memberships.options.roles.many` is on and none of the provider's `memberships` names a `rolesTable`, since the provider then sees one role per member.",
 		check: (context) => {
 			const mode = accessModule(context);
 			if (mode.kind === "off") return [];
@@ -992,6 +1005,12 @@ const AUTHORIZATION_RULES = [
 				message: `Neither blocks.permissions.functions.canAssign nor ${providerLabel(provider)} sets canAssign, so under the provider model only the service role assigns roles: the memberships guard refuses every membership a member adds or changes. Use a provider that sets authorization.functions.canAssign, or set blocks.permissions.functions.canAssign.`,
 				target: "blocks.permissions.functions.canAssign"
 			});
+			const roles = context.config.blocks["memberships"]?.options?.["roles"];
+			if (typeof roles === "object" && roles !== null && "many" in roles && roles.many === true && (provider.memberships ?? []).length > 0 && !(provider.memberships ?? []).some((membership) => membership.rolesTable !== void 0)) findings.push({
+				severity: "warning",
+				message: `blocks.memberships.options.roles.many keeps several roles per member in better_supabase.membership_roles, but ${providerLabel(provider)} reads one role per membership: none of its authorization.memberships sets rolesTable. A member's extra roles then grant nothing through the provider. Use a provider that reads the role set, or turn roles.many off.`,
+				target: "blocks.memberships.options.roles"
+			});
 			findings.push(...missingTemplates(context, provider));
 			return findings;
 		}
@@ -1140,7 +1159,7 @@ function templateCalls(template) {
 	return [...withoutStrings(template).matchAll(TEMPLATE_CALL)].map((match) => `${match[1]}.${match[2]}`.replaceAll("\"", "").toLowerCase());
 }
 const CONTRACT_CALL = /\bbetter_supabase"?\s*\.\s*"?(can|tenant_ids_with)"?\s*\(/gi;
-const ROLE_HELPER_CALL = /\bbetter_supabase"?\s*\.\s*"?(member_organization_ids|has_organization_role|organization_member_role)"?\s*\(/gi;
+const ROLE_HELPER_CALL = /\bbetter_supabase"?\s*\.\s*"?(member_organization_ids|has_organization_role|organization_member_roles?)"?\s*\(/gi;
 /** The tenant role helpers `text` calls, outside string literals. */
 function roleHelperCalls(text) {
 	const names = /* @__PURE__ */ new Set();

package/dist/cli/{run-MRET30vh.js → run-x9ZY4Tm0.js}

@@ -1,10 +1,10 @@
-import { c as COMMANDS, d as GROUPS, f as RESERVED_NAMES, h as runCommand, i as joinRepeated, m as parseArgs$2, o as listArgs, s as runsWithInvalidConfig, t as GLOBAL_ARGS, u as DOCS_ORIGIN } from "./command-CQ61x6gN.js";
+import { c as COMMANDS, d as GROUPS, f as RESERVED_NAMES, h as runCommand, i as joinRepeated, m as parseArgs$2, o as listArgs, s as runsWithInvalidConfig, t as GLOBAL_ARGS, u as DOCS_ORIGIN } from "./command-BWEEXmtz.js";
 import { n as highlight, r as painter } from "./style-Bm2X5JrN.js";
-import { t as VERSION } from "./version-B2Dr6VmJ.js";
+import { t as VERSION } from "./version-TgFM8sOd.js";
 import { n as CliError, o as toCliError } from "./errors-BTe6A15O.js";
 import { a as missingInputNext, o as resolveAgent, t as checkConsent } from "./agent-CbuPvI2x.js";
-import { a as globalFlags, c as resolveCommand, i as commandTree, n as closestName, o as isVariadic, r as commandArgs, t as checkArgs } from "./parse-B9Iv_-Pf.js";
-import { n as movedCommand, r as movedFlag } from "./moved-CsfDQcyk.js";
+import { a as globalFlags, c as resolveCommand, i as commandTree, n as closestName, o as isVariadic, r as commandArgs, t as checkArgs } from "./parse-B079x40m.js";
+import { n as movedCommand, r as movedFlag } from "./moved-DVwgE8lV.js";
 import { n as HTTP_CHANNEL, t as EXEC_CHANNEL } from "./trace-VbdO6bcN.js";
 import { stripVTControlCharacters } from "node:util";
 import { subscribe, unsubscribe } from "node:diagnostics_channel";
@@ -16,37 +16,38 @@ import { resolve } from "node:path";
 * loads on demand, so `--version` and `--help` import no command.
 */
 const LOADERS = [
-	["init", () => import("./init-CHj9ad4S.js").then((m) => m.initCommand)],
-	["add", () => import("./add-Bfb_ISrO.js").then((m) => m.addCommand)],
-	["remove", () => import("./remove-DK2G_KHm.js").then((m) => m.removeCommand)],
-	["upgrade", () => import("./upgrade-fVsJniXm.js").then((m) => m.upgradeCommand)],
-	["gen", () => import("./gen-CFkYUnWq.js").then((m) => m.genCommand)],
-	["doctor", () => import("./doctor-DkOSLPEQ.js").then((m) => m.doctorCommand)],
-	["db query", () => import("./db-DrBI_HNv.js").then((m) => m.dbQueryCommand)],
-	["db diff", () => import("./db-DrBI_HNv.js").then((m) => m.dbDiffCommand)],
-	["db seed", () => import("./seed-D6XijwbR.js").then((m) => m.seedCommand)],
-	["db backfill", () => import("./backfill-DIz5DnlQ.js").then((m) => m.dbBackfillCommand)],
-	["dev env", () => import("./env-CAU1nknN.js").then((m) => m.envCommand)],
-	["dev run", () => import("./run-BXx6D1aR.js").then((m) => m.runCommand)],
-	["dev keys", () => import("./keys-DGEpMbeB.js").then((m) => m.keysCommand)],
-	["dev stack ls", () => import("./stack-CWEHdO0b.js").then((m) => m.stackLsCommand)],
-	["dev stack prune", () => import("./stack-CWEHdO0b.js").then((m) => m.stackPruneCommand)],
-	["blocks list", () => import("./blocks-Bp5RPoft.js").then((m) => m.blocksListCommand)],
-	["blocks view", () => import("./blocks-Bp5RPoft.js").then((m) => m.blocksViewCommand)],
-	["blocks search", () => import("./blocks-Bp5RPoft.js").then((m) => m.blocksSearchCommand)],
-	["spec emit", () => import("./spec-DUjOtciN.js").then((m) => m.specEmitCommand)],
-	["spec validate", () => import("./spec-DUjOtciN.js").then((m) => m.specValidateCommand)],
-	["mcp", () => import("./mcp-BZno503V.js").then((m) => m.mcpCommand)],
-	["skills list", () => import("./skills-toUan_OV.js").then((m) => m.skillsListCommand)],
-	["skills install", () => import("./skills-toUan_OV.js").then((m) => m.skillsInstallCommand)],
-	["codemod 0.4", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.4"))],
-	["codemod 0.5", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.5"))],
-	["codemod 0.6", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.6"))],
-	["codemod 0.9", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.9"))],
-	["codemod 0.11", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.11"))],
-	["codemod 0.15", () => import("./codemod-Aewxza6i.js").then((m) => m.codemodCommand("0.15"))],
-	["completion", () => import("./completion-BwI0_Ap5.js").then((m) => m.completionCommand)],
-	["config", () => import("./config-CPux9Wa7.js").then((m) => m.configCommand)]
+	["init", () => import("./init-ch-HWJyp.js").then((m) => m.initCommand)],
+	["add", () => import("./add-BQPJnapO.js").then((m) => m.addCommand)],
+	["remove", () => import("./remove-D89s99ha.js").then((m) => m.removeCommand)],
+	["upgrade", () => import("./upgrade-CluxP3JJ.js").then((m) => m.upgradeCommand)],
+	["gen", () => import("./gen-D7gMEwvg.js").then((m) => m.genCommand)],
+	["doctor", () => import("./doctor-D_nrsd9E.js").then((m) => m.doctorCommand)],
+	["db query", () => import("./db-DYU5hUcd.js").then((m) => m.dbQueryCommand)],
+	["db diff", () => import("./db-DYU5hUcd.js").then((m) => m.dbDiffCommand)],
+	["db seed", () => import("./seed-EPO6AvLG.js").then((m) => m.seedCommand)],
+	["db backfill", () => import("./backfill-BwkyNhlC.js").then((m) => m.dbBackfillCommand)],
+	["dev env", () => import("./env-xhwXk5Ri.js").then((m) => m.envCommand)],
+	["dev run", () => import("./run-DmOTMa44.js").then((m) => m.runCommand)],
+	["dev keys", () => import("./keys-CbaL0lnw.js").then((m) => m.keysCommand)],
+	["dev stack ls", () => import("./stack-DgASZP0K.js").then((m) => m.stackLsCommand)],
+	["dev stack prune", () => import("./stack-DgASZP0K.js").then((m) => m.stackPruneCommand)],
+	["blocks list", () => import("./blocks-CBqENu3C.js").then((m) => m.blocksListCommand)],
+	["blocks view", () => import("./blocks-CBqENu3C.js").then((m) => m.blocksViewCommand)],
+	["blocks search", () => import("./blocks-CBqENu3C.js").then((m) => m.blocksSearchCommand)],
+	["powersync streams", () => import("./powersync-DXVsKkAu.js").then((m) => m.powersyncStreamsCommand)],
+	["spec emit", () => import("./spec-DzD5wMVF.js").then((m) => m.specEmitCommand)],
+	["spec validate", () => import("./spec-DzD5wMVF.js").then((m) => m.specValidateCommand)],
+	["mcp", () => import("./mcp-P9RP2SJ3.js").then((m) => m.mcpCommand)],
+	["skills list", () => import("./skills-FXAVPLzp.js").then((m) => m.skillsListCommand)],
+	["skills install", () => import("./skills-FXAVPLzp.js").then((m) => m.skillsInstallCommand)],
+	["codemod 0.4", () => import("./codemod-OHKhVV-v.js").then((m) => m.codemodCommand("0.4"))],
+	["codemod 0.5", () => import("./codemod-OHKhVV-v.js").then((m) => m.codemodCommand("0.5"))],
+	["codemod 0.6", () => import("./codemod-OHKhVV-v.js").then((m) => m.codemodCommand("0.6"))],
+	["codemod 0.9", () => import("./codemod-OHKhVV-v.js").then((m) => m.codemodCommand("0.9"))],
+	["codemod 0.11", () => import("./codemod-OHKhVV-v.js").then((m) => m.codemodCommand("0.11"))],
+	["codemod 0.15", () => import("./codemod-OHKhVV-v.js").then((m) => m.codemodCommand("0.15"))],
+	["completion", () => import("./completion-BfnKI4QZ.js").then((m) => m.completionCommand)],
+	["config", () => import("./config-WKDixoGK.js").then((m) => m.configCommand)]
 ];
 /** The built-in commands, for `createCli`. */
 function builtinCommands() {
@@ -465,7 +466,7 @@ function cliFromTree(init, extra = {}) {
 		};
 		if (argv[0] === "__complete") {
 			const words = argv[1] === "--" ? argv.slice(2) : argv.slice(1);
-			const lines = await import("./completion-Dlu5AdUW.js").then(async ({ complete, completionLines }) => completionLines(await complete(tree, words))).catch(() => "");
+			const lines = await import("./completion-8EDK21xj.js").then(async ({ complete, completionLines }) => completionLines(await complete(tree, words))).catch(() => "");
 			if (lines !== "") out(lines);
 			return {
 				code: 0,
@@ -594,7 +595,7 @@ function cliFromTree(init, extra = {}) {
 		try {
 			const [loaded, { defaultConfig, discoverConfig, loadConfig }, { configEnvironment, isCi, parseEnv }] = await Promise.all([
 				node.load(),
-				import("./config-CBqkQjjN.js"),
+				import("./config-BlfVh0IP.js"),
 				import("./env-C-Bl6Awn.js")
 			]);
 			command = loaded;

package/dist/cli/{seed-Cz8PcXeT.js → seed-D9mt8bnW.js}

@@ -1,11 +1,11 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CbuPvI2x.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { l as stdinDatabaseUrl, n as databaseUrl, o as importExport } from "./config-9t5ec_N7.js";
+import { l as stdinDatabaseUrl, n as databaseUrl, o as importExport } from "./config-BJSqMi04.js";
 import { m as supabaseDir } from "./supabase-toml-CncmQbO0.js";
 import { t as connect } from "./db-CQCLx7cx.js";
 import { c as insideRoot, i as changeLines, n as PLAN_ARGS, r as applyPlan, s as hasConflicts, u as planResult } from "./files-CX71yBm8.js";
-import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-IpJRJO5t.js";
+import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-DlckPVje.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/cli/seed-EPO6AvLG.js

@@ -0,0 +1 @@
+export { n as seedCommand } from "./seed-D9mt8bnW.js";

package/dist/cli/{shared-BLqbvY2x.js → shared-B38Chjgd.js}

@@ -1,4 +1,4 @@
-import { a as toCatalog } from "./source-D2gJHKwC.js";
+import { a as toCatalog } from "./source-irttnsEb.js";
 import { h as tomlGet, p as sqlWorkflow, r as detectWorkflow } from "./supabase-toml-CncmQbO0.js";
 //#region src/cli/doctor/shared.ts
 const catalogs = /* @__PURE__ */ new WeakMap();

package/dist/cli/{skills-toUan_OV.js → skills-FXAVPLzp.js}

@@ -1,4 +1,4 @@
-import { a as list, p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { a as list, p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
 import { n as PLAN_ARGS, r as applyPlan, u as planResult } from "./files-CX71yBm8.js";

package/dist/cli/{snapshot-uTUlEzY2.js → snapshot-BXmU3IXN.js}

@@ -1,8 +1,8 @@
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
-import { d as readExtras, l as TYPEGEN_VERSION, r as cachedIntrospect } from "./cache-AznIssjI.js";
+import { d as readExtras, l as TYPEGEN_VERSION, r as cachedIntrospect } from "./cache-DE2IH1-C.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
-import { n as managementSource, r as pgSource } from "./source-D2gJHKwC.js";
-import { n as databaseUrl, u as accessToken } from "./config-9t5ec_N7.js";
+import { n as managementSource, r as pgSource } from "./source-irttnsEb.js";
+import { n as databaseUrl, u as accessToken } from "./config-BJSqMi04.js";
 import { d as readSupabaseToml, f as schemaPaths, h as tomlGet, u as pgFunctionHooks } from "./supabase-toml-CncmQbO0.js";
 import { t as connect } from "./db-CQCLx7cx.js";
 import { existsSync } from "node:fs";

package/dist/cli/{source-args-IpJRJO5t.js → source-args-DlckPVje.js}

@@ -1,5 +1,5 @@
 import { n as CliError } from "./errors-BTe6A15O.js";
-import { l as stdinDatabaseUrl } from "./config-9t5ec_N7.js";
+import { l as stdinDatabaseUrl } from "./config-BJSqMi04.js";
 //#region src/cli/commands/source-args.ts
 /**
 * The connection string from stdin, for commands that connect but read no

package/dist/cli/{source-D2gJHKwC.js → source-irttnsEb.js}

@@ -1,4 +1,4 @@
-import { t as VERSION } from "./version-B2Dr6VmJ.js";
+import { t as VERSION } from "./version-TgFM8sOd.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { r as redactUrl } from "./redact-KGAk2Ul9.js";
 import { n as HTTP_CHANNEL } from "./trace-VbdO6bcN.js";

package/dist/cli/{spec-Cm2einTO.js → spec-CDxfokey.js}

@@ -1,9 +1,9 @@
 import { n as __require, t as __commonJSMin } from "./rolldown-runtime-kJ_i4yPo.js";
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
-import { t as VERSION } from "./version-B2Dr6VmJ.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
+import { t as VERSION } from "./version-TgFM8sOd.js";
 import { i as failedResult, n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { c as writeAtomic, t as CACHE_DIR } from "./cache-AznIssjI.js";
+import { c as writeAtomic, t as CACHE_DIR } from "./cache-DE2IH1-C.js";
 import { t as isRecord } from "./guards-CUlDNYZs.js";
 import { t as importFresh } from "./fresh-import-DzgsGHkX.js";
 import { a as changedFiles, i as changeLines, r as applyPlan } from "./files-CX71yBm8.js";

package/dist/cli/{spec-DUjOtciN.js → spec-DzD5wMVF.js}

@@ -1 +1 @@
-export { n as specEmitCommand, i as specValidateCommand } from "./spec-Cm2einTO.js";
+export { n as specEmitCommand, i as specValidateCommand } from "./spec-CDxfokey.js";

package/dist/cli/{sql-layout-lUWenjJw.js → sql-layout-D8QrNvt4.js}

@@ -1,5 +1,5 @@
-import { d as TypegenMissingError, i as parseSnapshot } from "./snapshot-uTUlEzY2.js";
-import { a as toCatalog } from "./source-D2gJHKwC.js";
+import { d as TypegenMissingError, i as parseSnapshot } from "./snapshot-BXmU3IXN.js";
+import { a as toCatalog } from "./source-irttnsEb.js";
 import { d as readSupabaseToml, f as schemaPaths, n as declarativeSchemasDir, p as sqlWorkflow } from "./supabase-toml-CncmQbO0.js";
 import { existsSync } from "node:fs";
 import { dirname, join, relative, resolve, sep } from "node:path";

package/dist/cli/{stack-CWEHdO0b.js → stack-DgASZP0K.js}

@@ -1,4 +1,4 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { r as supabaseCli } from "./exec--Q1ZEWUW.js";
 import { a as readSharedMemory, i as reportStacks, n as listStacks, r as prunePlan, t as branchName } from "./stacks-BYlQ96WS.js";
 //#region src/cli/commands/stack.ts

package/dist/cli/{sync-CZMRB3aU.js → sync-s1iKFIos.js}

@@ -1,9 +1,10 @@
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { _ as layoutFor, c as sameModuleMigration, d as DATA_NEXT, l as writeLatestMigration, m as writeExtensionsMigration, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations } from "./module-migration-O_IxewFs.js";
+import { a as writeExtensionsMigration, c as layoutFor, t as DATA_NEXT } from "./migrations-BoIyGczt.js";
 import { d as readSupabaseToml, f as schemaPaths, h as tomlGet, i as diffEngine, l as migrationCommand, o as findSupabaseRoot, p as sqlWorkflow, t as PGDELTA_TABLE } from "./supabase-toml-CncmQbO0.js";
 import { d as fileDiff, i as changeLines, l as keepHandEdit, o as handEditedError, r as applyPlan, t as HAND_EDITED, u as planResult } from "./files-CX71yBm8.js";
-import { a as sqlPlan, n as migrationsDir } from "./sql-layout-lUWenjJw.js";
+import { a as sqlPlan, n as migrationsDir } from "./sql-layout-D8QrNvt4.js";
+import { c as sameModuleMigration, l as writeLatestMigration, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations } from "./module-migration-DXvo0EqU.js";
 import { t as loadTopics } from "./topics-BpdnYmWb.js";
 import { t as orphanedBlockFiles } from "./orphans-BAboqyVM.js";
 import { dirname, join, resolve } from "node:path";

package/dist/cli/{upgrade-BFEIMC7U.js → upgrade-B4FPlK-_.js}

@@ -1,8 +1,9 @@
 import { t as display } from "./io-DH1kcmmP.js";
-import { _ as layoutFor, a as migrationInstances, c as sameModuleMigration, o as migrationModules, p as migrationStamp, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations } from "./module-migration-O_IxewFs.js";
+import { c as layoutFor, r as migrationStamp } from "./migrations-BoIyGczt.js";
 import { d as fileDiff, i as changeLines, r as applyPlan } from "./files-CX71yBm8.js";
-import { a as sqlPlan, n as migrationsDir } from "./sql-layout-lUWenjJw.js";
-import { a as write, o as topicPolicyFile, r as nextStep } from "./sync-CZMRB3aU.js";
+import { a as sqlPlan, n as migrationsDir } from "./sql-layout-D8QrNvt4.js";
+import { a as migrationInstances, c as sameModuleMigration, o as migrationModules, r as latestMigration, s as renderModuleMigration, t as MODULES_SUFFIX, u as writesMigrations } from "./module-migration-DXvo0EqU.js";
+import { a as write, o as topicPolicyFile, r as nextStep } from "./sync-s1iKFIos.js";
 import { a as legacyPrefixSql, i as legacyPrefixNames, r as legacyBlocksTableSql } from "./legacy-prefix-DkTA3Rhx.js";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/cli/{upgrade-fVsJniXm.js → upgrade-CluxP3JJ.js}

@@ -1,8 +1,8 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
-import { t as syncModules } from "./sync-CZMRB3aU.js";
+import { t as syncModules } from "./sync-s1iKFIos.js";
 import { t as SQL_ARGS } from "./args-UEwg0l-N.js";
-import { t as upgrade } from "./upgrade-BFEIMC7U.js";
+import { t as upgrade } from "./upgrade-B4FPlK-_.js";
 //#region src/cli/commands/upgrade.ts
 const UPGRADE_ARGS = {
 	check: {

package/dist/cli/{version-B2Dr6VmJ.js → version-TgFM8sOd.js}

@@ -1,4 +1,4 @@
 //#region src/cli/version.ts
-const VERSION = "0.16.0";
+const VERSION = "0.18.0";
 //#endregion
 export { VERSION as t };

package/dist/client/index.d.ts

@@ -1,8 +1,8 @@
 import { a as DataSync, c as LocalTablesOption, i as DataEntry, l as liveEngine, n as DataEngine, o as DataSyncState, r as DataEngineOptions, s as LiveEngineOptions, t as DataChanges, u as memoryEngine } from "../data-engine-BWoz9lED.js";
-import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-BAxoPKZx.js";
-import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../ports-mObLgH1z.js";
-import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../bind-JGCPGUJh.js";
-import { a as defineController, i as ControllerState, n as Controller, o as whileSignedIn, r as ControllerParts, t as AuthPort } from "../controller-BW-5Opig.js";
+import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-UGSEWAqR.js";
+import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../ports-g0H1Kzwr.js";
+import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../bind-pu5TLrla.js";
+import { a as defineController, i as ControllerState, n as Controller, o as whileSignedIn, r as ControllerParts, t as AuthPort } from "../controller-BR7CZ1R9.js";
 import { n as FunctionContract } from "../function-contract-DxFNOmsm.js";
-import { a as webDeepLinks, c as webPorts, d as FunctionContracts, f as FunctionsHost, h as functions, i as WebPushTokenOptions, l as webPushToken, m as TypedFunctions, n as createClient, o as webFilePicker, p as InvokeOptions, r as PushRegistrationLike, s as webKeyboard, t as ClientOptions, u as webStorage } from "../index-DZKCc2WM.js";
+import { a as webDeepLinks, c as webPorts, d as FunctionContracts, f as FunctionsHost, h as functions, i as WebPushTokenOptions, l as webPushToken, m as TypedFunctions, n as createClient, o as webFilePicker, p as InvokeOptions, r as PushRegistrationLike, s as webKeyboard, t as ClientOptions, u as webStorage } from "../index-C6ruLtyx.js";
 export { type AuthPort, type AuthSnapshot, type AuthUser, type BetterClient, type BindClientOptions, type ClientAuth, ClientOptions, type ClientPorts, type Controller, type ControllerParts, type ControllerState, type DataChanges, type DataEngine, type DataEngineOptions, type DataEntry, type DataSync, type DataSyncState, type DeepLinkPort, type FilePickerPort, type FunctionContract, type FunctionContracts, type FunctionsHost, type InvokeOptions, type KeyboardPort, type LiveEngineOptions, type LocalTablesOption, type PickFilesOptions, type PickedFile, type PushRegistrationLike, type PushTokenPort, type Shortcut, type StoragePort, type TopicHandle, type TopicPort, type TopicWatch, type TypedFunctions, type UploadDestination, type UploadPort, type WebPushTokenOptions, bindClient, createClient, defineController, functions, liveEngine, memoryEngine, memoryStorage, storageUpload, webDeepLinks, webFilePicker, webKeyboard, webPorts, webPushToken, webStorage, whileSignedIn };

package/dist/client/native/index.d.ts

@@ -1,9 +1,9 @@
 import { t as AsyncResult } from "../../result-DZeA5KS6.js";
 import { T as UploadOptions, w as UploadBody } from "../../bucket-vc-QRrva.js";
-import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../../watch-topic-BAxoPKZx.js";
-import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../../ports-mObLgH1z.js";
-import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../../bind-JGCPGUJh.js";
-import { n as ExpoPushTokenOptions, r as expoPushToken, t as ExpoNotificationsLike } from "../../push-token-BSSvsWXZ.js";
+import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../../watch-topic-UGSEWAqR.js";
+import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../../ports-g0H1Kzwr.js";
+import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../../bind-pu5TLrla.js";
+import { n as ExpoPushTokenOptions, r as expoPushToken, t as ExpoNotificationsLike } from "../../push-token-Cl2EihRc.js";
 import { a as OAuthSignInOptions, c as linkParams, i as OAuthClient, l as signInWithOAuthBrowser, n as AuthLinkClient, o as WebBrowserLike, r as AuthLinkResult, s as handleAuthDeepLink, t as AuthFailure } from "../../auth-link-B4NL84XU.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 //#region src/client/native/auto-refresh.d.ts

package/dist/{composite-CfYyU3vs.d.ts → composite-C-8A8qzi.d.ts}

@@ -1,10 +1,10 @@
 import { O as AnyFunctions, k as AnyModels } from "./types-DFdg_4yN.js";
 import { r as AuthState } from "./resolve-CXX6DHv3.js";
-import { t as BetterSupabase, v as Db } from "./define-C5AcEkEJ.js";
-import { a as ServerContext, b as ReplicaState, c as ServerOptions, n as BetterServer } from "./server-types-CK8mUIUT.js";
+import { t as BetterSupabase, v as Db } from "./define-Cgru0_kF.js";
+import { a as ServerContext, b as ReplicaState, c as ServerOptions, n as BetterServer } from "./server-types-gR4Q1aM0.js";
 import { t as ActiveSupport } from "./support-B4ZBVxt3.js";
-import { n as SessionEntryConfig } from "./session-DWmFv3vB.js";
-import { r as GuardOptions } from "./respond-Dn1_YhC1.js";
+import { n as SessionEntryConfig } from "./session-Fcft5A39.js";
+import { r as GuardOptions } from "./respond-oZeJ342J.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { Entry, SingleKeyEntry } from "@supabase/middleware";
 import { AuthMode, JWTClaims, UserClaims } from "@supabase/server";

package/dist/{composite-B3TIjId4.js → composite-D24L5RIY.js}

@@ -1,7 +1,7 @@
 import { o as problemResponse } from "./problem-Bf0cJ7tk.js";
-import { T as serverCore, _ as withSupport, g as withTenant, s as createServer, w as withServerContext, y as withSession } from "./adapter-Dyks1lX1.js";
+import { T as serverCore, _ as withSupport, g as withTenant, s as createServer, w as withServerContext, y as withSession } from "./adapter-CfuBICuG.js";
 import { s as withPrimaryPin } from "./replicas-Dyoh3CEg.js";
-import { r as guard, t as defaultExpose } from "./respond-C3CcOZlA.js";
+import { i as guard, n as defaultExpose } from "./respond-3RKp6VgU.js";
 import { a as withAuthMode, i as withAuth, o as withJwtClaims, s as withUserClaims } from "./claims-DTy6R6my.js";
 import { defineComposite, defineMiddleware } from "@supabase/middleware";
 //#region src/server/entries/db.ts

package/dist/config/index.d.ts

@@ -1,6 +1,6 @@
 import { M as Casing } from "../types-DFdg_4yN.js";
-import { C as EntityConfig, S as EntitiesConfig, a as AuthorizationProvider, b as DEFAULT_ACTIVE_TENANT, c as AuthorizationScope, d as AccessBlockConfig, f as ActiveTenantSource, g as BlockMode, i as AuthorizationPermission, k as tenantNameOf, l as AuthorizationTokenHook, m as BlockConfig, n as AuthorizationMembership, o as AuthorizationRequirement, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, u as providerApiProblem, v as BlockScope, x as DisabledRow, y as BlocksConfig } from "../authorization-HZdJCaVm.js";
-import { $ as blockEntrySource, $n as APP_COLUMN_ACCESS, $r as RpcTypeReference, $t as ResolvedExtensions, A as ValibotGeneratorOptions, Ai as SkillsConfig, An as ExposePrivilege, Ar as CatalogIndex, At as GeneratedFile, B as jsonSchema, Br as ForeignKeyAction, Bt as GeneratorInputSchema, Ci as GenConfig, Cn as TopicTriggerPayloadValueConfig, Cr as CatalogColumn, D as ZodFlavor, Di as MigrationSafetyConfig, Dn as VectorSearchConfig, Dr as CatalogFunction, Dt as resolveJsonSchema, Ei as KeysConfig, En as VectorDistance, Er as CatalogForeignKey, F as nuqs, Fi as SKILLS_AGENTS, Fr as ExtrasDomain, Ft as GeneratorEntitySchemas, G as tenantClaimPaths, Gr as PostgresColumn, Gt as JsonSchemaSource, H as ClaimPaths, Hr as SnapshotBucket, Ht as GeneratorModel, I as FactoriesGeneratorOptions, Ir as ExtrasFunction, It as GeneratorField, J as blockEntityRenames, Jn as CONFIG_DEFAULTS, Jr as RpcFunction, Jt as SourceConfig, K as BlockEntity, Kr as PostgresFunction, Kt as JsonTypeConfig, L as factories, Lr as ExtrasHook, Lt as GeneratorFunction, M as StandardSchemaGeneratorOptions, Mi as INTEGRATION_INFO, Mn as Privilege, Mr as CatalogTable, Mt as GeneratorBlock, N as standardSchema, Ni as INTEGRATION_NAMES, Nn as ResolvedExpose, Nr as CatalogTrigger, Nt as GeneratorBlockEntity, O as ZodGeneratorOptions, Oi as OpenApiConfig, On as ColumnPrivilege, Or as CatalogFunctionArg, Ot as ClaimsConfig, P as NuqsGeneratorOptions, Pi as IntegrationInfo, Pr as CatalogUnique, Pt as GeneratorColumn, Q as RENAMED_CONFIG_KEYS, Qr as RpcReturnColumn, Qt as ResolvedConfig, R as JsonSchemaGeneratorOptions, Rr as ExtrasHookFunction, Rt as GeneratorFunctionArg, Si as EnvFileConfig, Sn as TopicTriggerLookupConfig, Sr as CatalogCheck, Ti as IntegrationName, Tn as TopicTriggerValueConfig, Tr as CatalogEnum, U as DEFAULT_CLAIMS, Ur as SnapshotExtras, Ut as GeneratorNoun, V as JsonSchemaTarget, Vr as Snapshot, Vt as GeneratorJsonSchema, W as claimPaths, Wr as GeneratorMetadata, Wt as GeneratorTable, X as CONFIG_GROUPS, Xr as RpcFunctionOverload, Xt as DataHooksFramework, Y as blockSubjectTypes, Yr as RpcFunctionArg, Yt as TableConfig, Z as RENAMED_BLOCK_KEYS, Zr as RpcFunctionReturns, Zt as FlatConfig, _n as ResolvedSqlConfig, _r as AppTableEvents, an as BlockInput, ar as AppColumnAccess, at as defineConfig, bn as SqlWorkflow, br as AppTablesConfig, cn as EnvironmentConfig, cr as AppColumnType, ct as BlockTableReference, dn as SqlInput, dr as AppReference, dt as RoleNames, en as ApiConfig, er as APP_COLUMN_FORMATS, et as flattenConfig, fn as ToolingConfig, fr as AppReferenceTarget, ft as TypedReference, gn as RealtimeConfig, gr as AppTableEventKind, hn as BucketConfig, hr as AppTableConfig, in as BetterSupabaseConfig, ir as APP_TABLE_EVENT_KINDS, it as CONFIG_SCHEMA_URL, j as valibot, ji as GEN_TASKS, jn as ExposeRole, jr as CatalogPolicy, jt as Generator, k as zod, ki as SkillsAgent, kn as ExposeConfig, kr as CatalogGrant, kt as CodecsConfig, ln as GenGroupConfig, lr as AppLookupConfig, lt as BucketName, mn as EntitlementsConfig, mr as AppRollupConfig, mt as ExpandedConfig, nn as AppTablesInput, nr as APP_ON_DELETE_ACTIONS, nt as groupEntries, on as BlocksInput, or as AppColumnConfig, ot as resolveConfig, pn as EntitlementPlansSource, pr as AppRollupAggregate, q as blockEntities, qr as PostgresFunctionArg, qt as RelationsConfig, rn as AuthConfig, rr as APP_ROLLUP_AGGREGATES, rt as hasFlatTables, sn as DatabaseConfig, sr as AppColumnFormat, st as AppTableNames, tn as AppTableInput, tr as APP_COLUMN_TYPES, tt as groupConfig, un as OrganizationConfig, ur as AppOnDeleteAction, ut as ConfigReferences, vn as SeedConfig, vr as AppTableSubject, wi as GenTask, wn as TopicTriggerTopicConfig, wr as CatalogColumnGrant, xi as DoctorConfig, xn as TopicTriggerConfig, xr as Catalog, yn as SqlConfig, yr as AppTableVersions, z as buildJsonSchema, zr as ExtrasTable, zt as GeneratorInput } from "../context-8kb8m5uO.js";
+import { A as tenantNameOf, C as EntityConfig, D as OwnTablePolicies, S as EntitiesConfig, a as AuthorizationProvider, b as DEFAULT_ACTIVE_TENANT, c as AuthorizationScope, d as AccessBlockConfig, f as ActiveTenantSource, g as BlockMode, i as AuthorizationPermission, l as AuthorizationTokenHook, m as BlockConfig, n as AuthorizationMembership, o as AuthorizationRequirement, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, u as providerApiProblem, v as BlockScope, x as DisabledRow, y as BlocksConfig } from "../authorization-IiE__z2m.js";
+import { $ as blockEntrySource, $n as APP_COLUMN_ACCESS, $r as RpcTypeReference, $t as ResolvedExtensions, A as ValibotGeneratorOptions, Ai as SkillsAgent, An as ExposePrivilege, Ar as CatalogIndex, At as GeneratedFile, B as jsonSchema, Br as ForeignKeyAction, Bt as GeneratorInputSchema, Ci as GenConfig, Cn as TopicTriggerPayloadValueConfig, Cr as CatalogColumn, D as ZodFlavor, Di as MigrationSafetyConfig, Dn as VectorSearchConfig, Dr as CatalogFunction, Dt as resolveJsonSchema, Ei as KeysConfig, En as VectorDistance, Er as CatalogForeignKey, F as nuqs, Fi as IntegrationInfo, Fr as ExtrasDomain, Ft as GeneratorEntitySchemas, G as tenantClaimPaths, Gr as PostgresColumn, Gt as JsonSchemaSource, H as ClaimPaths, Hr as SnapshotBucket, Ht as GeneratorModel, I as FactoriesGeneratorOptions, Ii as SKILLS_AGENTS, Ir as ExtrasFunction, It as GeneratorField, J as blockEntityRenames, Jn as CONFIG_DEFAULTS, Jr as RpcFunction, Jt as SourceConfig, K as BlockEntity, Kr as PostgresFunction, Kt as JsonTypeConfig, L as factories, Lr as ExtrasHook, Lt as GeneratorFunction, M as StandardSchemaGeneratorOptions, Mi as GEN_TASKS, Mn as Privilege, Mr as CatalogTable, Mt as GeneratorBlock, N as standardSchema, Ni as INTEGRATION_INFO, Nn as ResolvedExpose, Nr as CatalogTrigger, Nt as GeneratorBlockEntity, O as ZodGeneratorOptions, Oi as OpenApiConfig, On as ColumnPrivilege, Or as CatalogFunctionArg, Ot as ClaimsConfig, P as NuqsGeneratorOptions, Pi as INTEGRATION_NAMES, Pr as CatalogUnique, Pt as GeneratorColumn, Q as RENAMED_CONFIG_KEYS, Qr as RpcReturnColumn, Qt as ResolvedConfig, R as JsonSchemaGeneratorOptions, Rr as ExtrasHookFunction, Rt as GeneratorFunctionArg, Si as EnvFileConfig, Sn as TopicTriggerLookupConfig, Sr as CatalogCheck, Ti as IntegrationName, Tn as TopicTriggerValueConfig, Tr as CatalogEnum, U as DEFAULT_CLAIMS, Ur as SnapshotExtras, Ut as GeneratorNoun, V as JsonSchemaTarget, Vr as Snapshot, Vt as GeneratorJsonSchema, W as claimPaths, Wr as GeneratorMetadata, Wt as GeneratorTable, X as CONFIG_GROUPS, Xr as RpcFunctionOverload, Xt as DataHooksFramework, Y as blockSubjectTypes, Yr as RpcFunctionArg, Yt as TableConfig, Z as RENAMED_BLOCK_KEYS, Zr as RpcFunctionReturns, Zt as FlatConfig, _n as ResolvedSqlConfig, _r as AppTableEvents, an as BlockInput, ar as AppColumnAccess, at as defineConfig, bn as SqlWorkflow, br as AppTablesConfig, cn as EnvironmentConfig, cr as AppColumnType, ct as BlockTableReference, dn as SqlInput, dr as AppReference, dt as RoleNames, en as ApiConfig, er as APP_COLUMN_FORMATS, et as flattenConfig, fn as ToolingConfig, fr as AppReferenceTarget, ft as TypedReference, gn as RealtimeConfig, gr as AppTableEventKind, hn as BucketConfig, hr as AppTableConfig, in as BetterSupabaseConfig, ir as APP_TABLE_EVENT_KINDS, it as CONFIG_SCHEMA_URL, j as valibot, ji as SkillsConfig, jn as ExposeRole, jr as CatalogPolicy, jt as Generator, k as zod, ki as PowerSyncGenConfig, kn as ExposeConfig, kr as CatalogGrant, kt as CodecsConfig, ln as GenGroupConfig, lr as AppLookupConfig, lt as BucketName, mn as EntitlementsConfig, mr as AppRollupConfig, mt as ExpandedConfig, nn as AppTablesInput, nr as APP_ON_DELETE_ACTIONS, nt as groupEntries, on as BlocksInput, or as AppColumnConfig, ot as resolveConfig, pn as EntitlementPlansSource, pr as AppRollupAggregate, q as blockEntities, qr as PostgresFunctionArg, qt as RelationsConfig, rn as AuthConfig, rr as APP_ROLLUP_AGGREGATES, rt as hasFlatTables, sn as DatabaseConfig, sr as AppColumnFormat, st as AppTableNames, tn as AppTableInput, tr as APP_COLUMN_TYPES, tt as groupConfig, un as OrganizationConfig, ur as AppOnDeleteAction, ut as ConfigReferences, vn as SeedConfig, vr as AppTableSubject, wi as GenTask, wn as TopicTriggerTopicConfig, wr as CatalogColumnGrant, xi as DoctorConfig, xn as TopicTriggerConfig, xr as Catalog, yn as SqlConfig, yr as AppTableVersions, z as buildJsonSchema, zr as ExtrasTable, zt as GeneratorInput } from "../context-D24k1Cpc.js";
 import { n as SubjectsConfig, t as SubjectConfig } from "../subjects-DvmQeF_F.js";
 import { a as FieldFormat, o as FieldFormatInput, r as FIELD_FORMATS } from "../field-formats-CAFNkKSN.js";
-export { APP_COLUMN_ACCESS, APP_COLUMN_FORMATS, APP_COLUMN_TYPES, APP_ON_DELETE_ACTIONS, APP_ROLLUP_AGGREGATES, APP_TABLE_EVENT_KINDS, type AccessBlockConfig, type ActiveTenantSource, type AnyBlocksConfig, type ApiConfig, type AppColumnAccess, type AppColumnConfig, type AppColumnFormat, type AppColumnType, type AppLookupConfig, type AppOnDeleteAction, type AppReference, type AppReferenceTarget, type AppRollupAggregate, type AppRollupConfig, type AppTableConfig, type AppTableEventKind, type AppTableEvents, type AppTableInput, type AppTableNames, type AppTableSubject, type AppTableVersions, type AppTablesConfig, type AppTablesInput, type AuthConfig, type AuthorizationFunctions, type AuthorizationMembership, type AuthorizationOperation, type AuthorizationPermission, type AuthorizationProvider, type AuthorizationRequirement, type AuthorizationRoleSource, type AuthorizationScope, type AuthorizationTokenHook, type BetterSupabaseConfig, type BlockConfig, type BlockEntity, type BlockInput, type BlockMode, type BlockScope, type BlockTableReference, type BlocksConfig, type BlocksInput, type BucketConfig, type BucketName, CONFIG_DEFAULTS, CONFIG_GROUPS, CONFIG_SCHEMA_URL, type Casing, type Catalog, type CatalogCheck, type CatalogColumn, type CatalogColumnGrant, type CatalogEnum, type CatalogForeignKey, type CatalogFunction, type CatalogFunctionArg, type CatalogGrant, type CatalogIndex, type CatalogPolicy, type CatalogTable, type CatalogTrigger, type CatalogUnique, type ClaimPaths, type ClaimsConfig, type CodecsConfig, type ColumnPrivilege, type ConfigReferences, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, type DataHooksFramework, type DatabaseConfig, type DisabledRow, type DoctorConfig, type EntitiesConfig, type EntitlementPlansSource, type EntitlementsConfig, type EntityConfig, type EnvFileConfig, type EnvironmentConfig, type ExpandedConfig, type ExposeConfig, type ExposePrivilege, type ExposeRole, type ExtrasDomain, type ExtrasFunction, type ExtrasHook, type ExtrasHookFunction, type ExtrasTable, FIELD_FORMATS, type FactoriesGeneratorOptions, type FieldFormat, type FieldFormatInput, type FlatConfig, type ForeignKeyAction, GEN_TASKS, type GenConfig, type GenGroupConfig, type GenTask, type GeneratedFile, type Generator, type GeneratorBlock, type GeneratorBlockEntity, type GeneratorColumn, type GeneratorEntitySchemas, type GeneratorField, type GeneratorFunction, type GeneratorFunctionArg, type GeneratorInput, type GeneratorInputSchema, type GeneratorJsonSchema, type GeneratorMetadata, type GeneratorModel, type GeneratorNoun, type GeneratorTable, INTEGRATION_INFO, INTEGRATION_NAMES, type IntegrationInfo, type IntegrationName, type JsonSchemaGeneratorOptions, type JsonSchemaSource, type JsonSchemaTarget, type JsonTypeConfig, type KeysConfig, type MigrationSafetyConfig, type NuqsGeneratorOptions, type OpenApiConfig, type OrganizationConfig, type PostgresColumn, type PostgresFunction, type PostgresFunctionArg, type Privilege, RENAMED_BLOCK_KEYS, RENAMED_CONFIG_KEYS, type RealtimeConfig, type RelationsConfig, type ResolvedConfig, type ResolvedExpose, type ResolvedExtensions, type ResolvedSqlConfig, type RoleNames, type RpcFunction, type RpcFunctionArg, type RpcFunctionOverload, type RpcFunctionReturns, type RpcReturnColumn, type RpcTypeReference, SKILLS_AGENTS, type SeedConfig, type SkillsAgent, type SkillsConfig, type Snapshot, type SnapshotBucket, type SnapshotExtras, type SourceConfig, type SqlConfig, type SqlInput, type SqlWorkflow, type StandardSchemaGeneratorOptions, type SubjectConfig, type SubjectsConfig, type TableConfig, type ToolingConfig, type TopicTriggerConfig, type TopicTriggerLookupConfig, type TopicTriggerPayloadValueConfig, type TopicTriggerTopicConfig, type TopicTriggerValueConfig, type TypedReference, type ValibotGeneratorOptions, type VectorDistance, type VectorSearchConfig, type ZodFlavor, type ZodGeneratorOptions, blockEntities, blockEntityRenames, blockEntrySource, blockSubjectTypes, buildJsonSchema, claimPaths, defineConfig, factories, flattenConfig, groupConfig, groupEntries, hasFlatTables, jsonSchema, nuqs, providerApiProblem, resolveConfig, resolveJsonSchema, standardSchema, tenantClaimPaths, tenantNameOf, valibot, zod };
+export { APP_COLUMN_ACCESS, APP_COLUMN_FORMATS, APP_COLUMN_TYPES, APP_ON_DELETE_ACTIONS, APP_ROLLUP_AGGREGATES, APP_TABLE_EVENT_KINDS, type AccessBlockConfig, type ActiveTenantSource, type AnyBlocksConfig, type ApiConfig, type AppColumnAccess, type AppColumnConfig, type AppColumnFormat, type AppColumnType, type AppLookupConfig, type AppOnDeleteAction, type AppReference, type AppReferenceTarget, type AppRollupAggregate, type AppRollupConfig, type AppTableConfig, type AppTableEventKind, type AppTableEvents, type AppTableInput, type AppTableNames, type AppTableSubject, type AppTableVersions, type AppTablesConfig, type AppTablesInput, type AuthConfig, type AuthorizationFunctions, type AuthorizationMembership, type AuthorizationOperation, type AuthorizationPermission, type AuthorizationProvider, type AuthorizationRequirement, type AuthorizationRoleSource, type AuthorizationScope, type AuthorizationTokenHook, type BetterSupabaseConfig, type BlockConfig, type BlockEntity, type BlockInput, type BlockMode, type BlockScope, type BlockTableReference, type BlocksConfig, type BlocksInput, type BucketConfig, type BucketName, CONFIG_DEFAULTS, CONFIG_GROUPS, CONFIG_SCHEMA_URL, type Casing, type Catalog, type CatalogCheck, type CatalogColumn, type CatalogColumnGrant, type CatalogEnum, type CatalogForeignKey, type CatalogFunction, type CatalogFunctionArg, type CatalogGrant, type CatalogIndex, type CatalogPolicy, type CatalogTable, type CatalogTrigger, type CatalogUnique, type ClaimPaths, type ClaimsConfig, type CodecsConfig, type ColumnPrivilege, type ConfigReferences, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, type DataHooksFramework, type DatabaseConfig, type DisabledRow, type DoctorConfig, type EntitiesConfig, type EntitlementPlansSource, type EntitlementsConfig, type EntityConfig, type EnvFileConfig, type EnvironmentConfig, type ExpandedConfig, type ExposeConfig, type ExposePrivilege, type ExposeRole, type ExtrasDomain, type ExtrasFunction, type ExtrasHook, type ExtrasHookFunction, type ExtrasTable, FIELD_FORMATS, type FactoriesGeneratorOptions, type FieldFormat, type FieldFormatInput, type FlatConfig, type ForeignKeyAction, GEN_TASKS, type GenConfig, type GenGroupConfig, type GenTask, type GeneratedFile, type Generator, type GeneratorBlock, type GeneratorBlockEntity, type GeneratorColumn, type GeneratorEntitySchemas, type GeneratorField, type GeneratorFunction, type GeneratorFunctionArg, type GeneratorInput, type GeneratorInputSchema, type GeneratorJsonSchema, type GeneratorMetadata, type GeneratorModel, type GeneratorNoun, type GeneratorTable, INTEGRATION_INFO, INTEGRATION_NAMES, type IntegrationInfo, type IntegrationName, type JsonSchemaGeneratorOptions, type JsonSchemaSource, type JsonSchemaTarget, type JsonTypeConfig, type KeysConfig, type MigrationSafetyConfig, type NuqsGeneratorOptions, type OpenApiConfig, type OrganizationConfig, type OwnTablePolicies, type PostgresColumn, type PostgresFunction, type PostgresFunctionArg, type PowerSyncGenConfig, type Privilege, RENAMED_BLOCK_KEYS, RENAMED_CONFIG_KEYS, type RealtimeConfig, type RelationsConfig, type ResolvedConfig, type ResolvedExpose, type ResolvedExtensions, type ResolvedSqlConfig, type RoleNames, type RpcFunction, type RpcFunctionArg, type RpcFunctionOverload, type RpcFunctionReturns, type RpcReturnColumn, type RpcTypeReference, SKILLS_AGENTS, type SeedConfig, type SkillsAgent, type SkillsConfig, type Snapshot, type SnapshotBucket, type SnapshotExtras, type SourceConfig, type SqlConfig, type SqlInput, type SqlWorkflow, type StandardSchemaGeneratorOptions, type SubjectConfig, type SubjectsConfig, type TableConfig, type ToolingConfig, type TopicTriggerConfig, type TopicTriggerLookupConfig, type TopicTriggerPayloadValueConfig, type TopicTriggerTopicConfig, type TopicTriggerValueConfig, type TypedReference, type ValibotGeneratorOptions, type VectorDistance, type VectorSearchConfig, type ZodFlavor, type ZodGeneratorOptions, blockEntities, blockEntityRenames, blockEntrySource, blockSubjectTypes, buildJsonSchema, claimPaths, defineConfig, factories, flattenConfig, groupConfig, groupEntries, hasFlatTables, jsonSchema, nuqs, providerApiProblem, resolveConfig, resolveJsonSchema, standardSchema, tenantClaimPaths, tenantNameOf, valibot, zod };

package/dist/config/index.js

@@ -1,8 +1,8 @@
-import { o as resolveJsonSchema, s as CONFIG_DEFAULTS } from "../instances-BHjCZoF8.js";
-import { A as flattenConfig, D as RENAMED_BLOCK_KEYS, E as CONFIG_GROUPS, F as INTEGRATION_INFO, I as INTEGRATION_NAMES, L as SKILLS_AGENTS, M as groupEntries, N as hasFlatTables, O as RENAMED_CONFIG_KEYS, P as GEN_TASKS, j as groupConfig, k as blockEntrySource } from "../config-CcehOvbz.js";
+import { o as resolveJsonSchema, s as CONFIG_DEFAULTS } from "../instances-DDt7NdVl.js";
+import { A as flattenConfig, D as RENAMED_BLOCK_KEYS, E as CONFIG_GROUPS, F as INTEGRATION_INFO, I as INTEGRATION_NAMES, L as SKILLS_AGENTS, M as groupEntries, N as hasFlatTables, O as RENAMED_CONFIG_KEYS, P as GEN_TASKS, j as groupConfig, k as blockEntrySource } from "../config-CD2OGfCG.js";
 import { a as tenantClaimPaths, r as claimPaths, t as DEFAULT_CLAIMS } from "../claims-Bp9My7XP.js";
-import { C as APP_ON_DELETE_ACTIONS, O as DEFAULT_ACTIVE_TENANT, S as APP_COLUMN_TYPES, T as APP_TABLE_EVENT_KINDS, b as APP_COLUMN_ACCESS, j as tenantNameOf, w as APP_ROLLUP_AGGREGATES, x as APP_COLUMN_FORMATS } from "../app-tables-D29Rahtg.js";
+import { C as APP_ON_DELETE_ACTIONS, O as DEFAULT_ACTIVE_TENANT, S as APP_COLUMN_TYPES, T as APP_TABLE_EVENT_KINDS, b as APP_COLUMN_ACCESS, j as tenantNameOf, w as APP_ROLLUP_AGGREGATES, x as APP_COLUMN_FORMATS } from "../app-tables-DyswUg6J.js";
 import { r as FIELD_FORMATS } from "../field-formats-C6QKA3UR.js";
-import { a as factories, c as resolveConfig, d as blockSubjectTypes, f as providerApiProblem, i as nuqs, l as blockEntities, n as valibot, o as CONFIG_SCHEMA_URL, r as standardSchema, s as defineConfig, t as zod, u as blockEntityRenames } from "../config-DWGgUQCh.js";
+import { a as factories, c as resolveConfig, d as blockSubjectTypes, f as providerApiProblem, i as nuqs, l as blockEntities, n as valibot, o as CONFIG_SCHEMA_URL, r as standardSchema, s as defineConfig, t as zod, u as blockEntityRenames } from "../config-mbVyJwSc.js";
 import { n as jsonSchema, t as buildJsonSchema } from "../json-schema-Ca6gYbEP.js";
 export { APP_COLUMN_ACCESS, APP_COLUMN_FORMATS, APP_COLUMN_TYPES, APP_ON_DELETE_ACTIONS, APP_ROLLUP_AGGREGATES, APP_TABLE_EVENT_KINDS, CONFIG_DEFAULTS, CONFIG_GROUPS, CONFIG_SCHEMA_URL, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, FIELD_FORMATS, GEN_TASKS, INTEGRATION_INFO, INTEGRATION_NAMES, RENAMED_BLOCK_KEYS, RENAMED_CONFIG_KEYS, SKILLS_AGENTS, blockEntities, blockEntityRenames, blockEntrySource, blockSubjectTypes, buildJsonSchema, claimPaths, defineConfig, factories, flattenConfig, groupConfig, groupEntries, hasFlatTables, jsonSchema, nuqs, providerApiProblem, resolveConfig, resolveJsonSchema, standardSchema, tenantClaimPaths, tenantNameOf, valibot, zod };

package/dist/{config-CcehOvbz.js → config-CD2OGfCG.js}

@@ -1,10 +1,11 @@
 import { t as DEFAULT_TENANT } from "./entity-naming-Dtyq5sKE.js";
-import { E as PRESET_CATALOG, k as asBlocksConfig } from "./app-tables-D29Rahtg.js";
+import { E as PRESET_CATALOG, k as asBlocksConfig } from "./app-tables-DyswUg6J.js";
 //#region src/config/names.ts
 /** The steps `better-supabase gen` runs, in the order it runs them. */
 const GEN_TASKS = [
 	"types",
 	"sql",
+	"powersync",
 	"spec",
 	"seed",
 	"env"

package/dist/{config-DWGgUQCh.js → config-mbVyJwSc.js}

@@ -1,8 +1,8 @@
-import { a as resolveNames, i as resolveInstances, s as CONFIG_DEFAULTS, t as blocksByName } from "./instances-BHjCZoF8.js";
-import { A as flattenConfig, n as expandFlatPreset, r as expandPreset } from "./config-CcehOvbz.js";
+import { a as resolveNames, i as resolveInstances, s as CONFIG_DEFAULTS, t as blocksByName } from "./instances-DDt7NdVl.js";
+import { A as flattenConfig, n as expandFlatPreset, r as expandPreset } from "./config-CD2OGfCG.js";
 import { t as DEFAULT_CLAIMS } from "./claims-Bp9My7XP.js";
 import { o as tenantNames } from "./entity-naming-Dtyq5sKE.js";
-import { A as resolveBlock, E as PRESET_CATALOG, d as appTablesOf, f as withAppTableSubjects, j as tenantNameOf } from "./app-tables-D29Rahtg.js";
+import { A as resolveBlock, E as PRESET_CATALOG, d as appTablesOf, f as withAppTableSubjects, j as tenantNameOf } from "./app-tables-DyswUg6J.js";
 import { C as variantsFor, S as variantTitle, _ as schemaName, a as extraSchemas, b as tableEntries, c as resultType, d as fieldSpec, f as fieldsFor, g as rowType, h as propertyKey, i as extraKinds, l as HEADER, m as parseImport, o as fieldMetaLines, p as optionalLine, s as objectType, u as fieldDocs, v as siblingPath, x as temporalGuardImport, y as tableDocs } from "./json-schema-Ca6gYbEP.js";
 //#region src/config/authorization.ts
 /**
@@ -215,7 +215,7 @@ function blocksOf(blocks, sql = {}, provider) {
 		config: withSqlDefaults(instance.config, sql)
 	}]));
 	const blockNames = [...new Set(Object.values(instances).map((instance) => instance.block))];
-	const resolved = Array.isArray(blocks) && sql.schema === void 0 && sql.api === void 0 ? {} : blocksByName(instances);
+	const resolved = Array.isArray(blocks) && sql.schema === void 0 && sql.api === void 0 && sql.ownTablePolicies === void 0 ? {} : blocksByName(instances);
 	if (!provider || !blockNames.includes("permissions") || resolved.permissions?.model !== void 0) return {
 		blocks: resolved,
 		blockNames,
@@ -238,11 +238,12 @@ function blocksOf(blocks, sql = {}, provider) {
 * block's `api: false` keeps it out of the API schema.
 */
 function withSqlDefaults(block, sql) {
-	const { schema, api } = sql;
+	const { schema, api, ownTablePolicies } = sql;
 	return {
 		...block,
 		...schema === void 0 || block.schema !== void 0 ? {} : { schema },
-		...api === void 0 || block.api !== void 0 ? {} : { api }
+		...api === void 0 || block.api !== void 0 ? {} : { api },
+		...ownTablePolicies === void 0 || block.ownTablePolicies !== void 0 ? {} : { ownTablePolicies }
 	};
 }
 const CONFIG_SCHEMA_URL = "https://unpkg.com/better-supabase/schemas/config-v1.json";