better-supabase 0.16.0 → 0.18.0

package/dist/{context-8kb8m5uO.d.ts → context-D24k1Cpc.d.ts}

@@ -1,14 +1,14 @@
 /// <reference lib="esnext.temporal" />
 import { M as Casing, P as ClaimsMeta, T as AccessBucketPolicy, _t as BucketLifecycle, j as BucketPolicyName, ot as SchemaMeta } from "./types-DFdg_4yN.js";
-import { D as ResolvedBlock, E as NamedInstance, F as BlockNameRegistry, P as TablesOf, T as InstanceOn, _ as BlockName, a as AuthorizationProvider, d as AccessBlockConfig, g as BlockMode, h as BlockConfigOf, m as BlockConfig, n as AuthorizationMembership, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, v as BlockScope, w as InstanceKeys, x as DisabledRow, y as BlocksConfig } from "./authorization-HZdJCaVm.js";
-import { Mn as EntityNames, Nn as EntityNoun, Pn as EntityRename, R as PortName, Ut as ActionDescriptor, Xt as BlockSchedule, Zt as DefaultAutomation, _ as BlockProvider, g as BlockEnvKey, i as BlockCategory, y as BlockWorker } from "./define-block-C1RHXz7L.js";
+import { D as OwnTablePolicies, E as NamedInstance, I as TablesOf, L as BlockNameRegistry, O as ResolvedBlock, T as InstanceOn, _ as BlockName, a as AuthorizationProvider, d as AccessBlockConfig, g as BlockMode, h as BlockConfigOf, m as BlockConfig, n as AuthorizationMembership, p as AnyBlocksConfig, r as AuthorizationOperation, s as AuthorizationRoleSource, t as AuthorizationFunctions, v as BlockScope, w as InstanceKeys, x as DisabledRow, y as BlocksConfig } from "./authorization-IiE__z2m.js";
+import { Mn as EntityNames, Nn as EntityNoun, Pn as EntityRename, R as PortName, Ut as ActionDescriptor, Xt as BlockSchedule, Zt as DefaultAutomation, _ as BlockProvider, g as BlockEnvKey, i as BlockCategory, y as BlockWorker } from "./define-block-CJWiDWa5.js";
 import { a as ScalarKind, i as FieldSpec } from "./table-schema-BlF6k62Q.js";
 import { n as SubjectsConfig } from "./subjects-DvmQeF_F.js";
 import { i as FIELD_FORMAT_NAMES, s as FieldFormatName } from "./field-formats-CAFNkKSN.js";
 import { t as GuestAction } from "./guest-actions-1T1DeS5Y.js";
 //#region src/config/names.d.ts
 /** The steps `better-supabase gen` runs, in the order it runs them. */
-declare const GEN_TASKS: readonly ["types", "sql", "spec", "seed", "env"];
+declare const GEN_TASKS: readonly ["types", "sql", "powersync", "spec", "seed", "env"];
 /** Glue `better-supabase init` and `add` write for a framework or runtime. */
 declare const INTEGRATION_NAMES: readonly ["next", "hono", "orpc", "edge", "expo", "mcp", "client", "react"];
 /**
@@ -99,6 +99,30 @@ interface GenConfig {
    * `tsconfig.json` and `tsc --runExternalCode`. Defaults to `false`.
    */
   readonly contentMapper?: boolean;
+  /**
+   * Writes PowerSync sync streams for these block instances:
+   * `sync-streams.yaml` and `schema.ts` in `out`, and a migration that adds
+   * their tables to the `powersync` publication. Runs as the `powersync` task,
+   * and as `better-supabase powersync streams`.
+   */
+  readonly powersync?: PowerSyncGenConfig;
+}
+interface PowerSyncGenConfig {
+  /**
+   * The block instances to sync, by their key in `blocks`: instances of
+   * `notifications` and `attachments`.
+   */
+  readonly instances: readonly string[];
+  /**
+   * The folder for `sync-streams.yaml` and `schema.ts`. Defaults to
+   * `powersync`.
+   */
+  readonly out?: string;
+  /**
+   * The module `schema.ts` imports `column` and `Table` from. Defaults to
+   * `@powersync/common`.
+   */
+  readonly import?: string;
 }
 /** Glue `better-supabase init` and `add` write for a framework or runtime. */
 type IntegrationName = (typeof INTEGRATION_NAMES)[number];
@@ -1493,6 +1517,13 @@ interface SqlConfig {
    * every signed-in user reads and writes).
    */
   readonly scope?: BlockScope;
+  /**
+   * Whose policies govern the app's tables a block runs over, unless
+   * `blocks.<name>.ownTablePolicies` sets its own: `block` (the default) or
+   * `app`, which keeps every `bsb_` policy, permissive or restrictive, off
+   * them.
+   */
+  readonly ownTablePolicies?: OwnTablePolicies;
 }
 /** `sql` with defaults applied. */
 interface ResolvedSqlConfig {
@@ -3728,6 +3759,7 @@ interface BlockSqlTableSpec {
    * enum: the module writes and compares them through `ctx.cast`.
    */
   readonly typed?: readonly string[];
+  readonly yieldsToExtra?: readonly string[];
 }
 interface BlockSqlTableLifecycle {
   readonly user?: string;
@@ -4148,4 +4180,4 @@ interface ExtraColumn {
 /** The contract's argument list with `{id}` resolved, as Postgres prints it. */
 declare function contractSignature(fn: BlockSqlContractFunction, idType: string): string;
 //#endregion
-export { blockEntrySource as $, APP_COLUMN_ACCESS as $n, RpcTypeReference as $r, ResolvedExtensions as $t, ValibotGeneratorOptions as A, SkillsConfig as Ai, ExposePrivilege as An, CatalogIndex as Ar, GeneratedFile as At, jsonSchema as B, PRESETS as Bn, ForeignKeyAction as Br, GeneratorInputSchema as Bt, OwnView as C, GenConfig as Ci, TopicTriggerPayloadValueConfig as Cn, CatalogColumn as Cr, ResolvedPresetBlock as Ct, ZodFlavor as D, MigrationSafetyConfig as Di, VectorSearchConfig as Dn, CatalogFunction as Dr, resolveJsonSchema as Dt, TableGrant as E, KeysConfig as Ei, VectorDistance as En, CatalogForeignKey as Er, resolvePreset as Et, nuqs as F, SKILLS_AGENTS as Fi, presetFromSpec as Fn, ExtrasDomain as Fr, GeneratorEntitySchemas as Ft, tenantClaimPaths as G, defaultPreset as Gn, PostgresColumn as Gr, JsonSchemaSource as Gt, ClaimPaths as H, PRESET_NAMES as Hn, SnapshotBucket as Hr, GeneratorModel as Ht, FactoriesGeneratorOptions as I, presetOfSpec as In, ExtrasFunction as Ir, GeneratorField as It, blockEntityRenames as J, CONFIG_DEFAULTS as Jn, RpcFunction as Jr, SourceConfig as Jt, BlockEntity as K, isPresetName as Kn, PostgresFunction as Kr, JsonTypeConfig as Kt, factories as L, presetSpec as Ln, ExtrasHook as Lr, GeneratorFunction as Lt, StandardSchemaGeneratorOptions as M, INTEGRATION_INFO as Mi, Privilege as Mn, CatalogTable as Mr, GeneratorBlock as Mt, standardSchema as N, INTEGRATION_NAMES as Ni, ResolvedExpose as Nn, CatalogTrigger as Nr, GeneratorBlockEntity as Nt, ZodGeneratorOptions as O, OpenApiConfig as Oi, ColumnPrivilege as On, CatalogFunctionArg as Or, ClaimsConfig as Ot, NuqsGeneratorOptions as P, IntegrationInfo as Pi, PresetSpec as Pn, CatalogUnique as Pr, GeneratorColumn as Pt, RENAMED_CONFIG_KEYS as Q, auditRegistrations as Qn, RpcReturnColumn as Qr, ResolvedConfig as Qt, JsonSchemaGeneratorOptions as R, DEFAULT_PRESET_NAME as Rn, ExtrasHookFunction as Rr, GeneratorFunctionArg as Rt, BlockSqlUpgrade as S, EnvFileConfig as Si, TopicTriggerLookupConfig as Sn, CatalogCheck as Sr, ResolvedPreset as St, notNullCheckName as T, IntegrationName as Ti, TopicTriggerValueConfig as Tn, CatalogEnum as Tr, presetBlockConflict as Tt, DEFAULT_CLAIMS as U, PresetGroup as Un, SnapshotExtras as Ur, GeneratorNoun as Ut, JsonSchemaTarget as V, PRESET_GROUPS as Vn, Snapshot as Vr, GeneratorJsonSchema as Vt, claimPaths as W, PresetName as Wn, GeneratorMetadata as Wr, GeneratorTable as Wt, CONFIG_GROUPS as X, sameTenantLayout as Xn, RpcFunctionOverload as Xr, DataHooksFramework as Xt, blockSubjectTypes as Y, DeclaredForeignKey as Yn, RpcFunctionArg as Yr, TableConfig as Yt, RENAMED_BLOCK_KEYS as Z, AuditedTable as Zn, RpcFunctionReturns as Zr, FlatConfig as Zt, BlockSqlDeprecation as _, PresetValueInfo as _i, ResolvedSqlConfig as _n, AppTableEvents as _r, expandPreset as _t, BlockSqlContext as a, DEFAULT_CONVENTIONS as ai, BlockInput as an, AppColumnAccess as ar, defineConfig as at, BlockSqlLayout as b, presetValueLabel as bi, SqlWorkflow as bn, AppTablesConfig as br, PresetConflict as bt, BlockSqlIdType as c, Preset as ci, EnvironmentConfig as cn, AppColumnType as cr, BlockTableReference as ct, MODULE_ID_TYPES as d, PresetField as di, SqlInput as dn, AppReference as dr, RoleNames as dt, PresetCatalog as ei, ApiConfig as en, APP_COLUMN_FORMATS as er, flattenConfig as et, contractSignature as f, PresetFieldKey as fi, ToolingConfig as fn, AppReferenceTarget as fr, TypedReference as ft, BlockSqlAccessProvider as g, PresetScope as gi, RealtimeConfig as gn, AppTableEventKind as gr, conventionConfig as gt, BlockSql as h, PresetPlatforms as hi, BucketConfig as hn, AppTableConfig as hr, PresetInput as ht, BlockSqlAudit as i, CONVENTION_FIELDS as ii, BetterSupabaseConfig as in, APP_TABLE_EVENT_KINDS as ir, CONFIG_SCHEMA_URL as it, valibot as j, GEN_TASKS as ji, ExposeRole as jn, CatalogPolicy as jr, Generator as jt, zod as k, SkillsAgent as ki, ExposeConfig as kn, CatalogGrant as kr, CodecsConfig as kt, BlockSqlNames as l, PresetAccess as li, GenGroupConfig as ln, AppLookupConfig as lr, BucketName as lt, moduleIdType as m, PresetFramework as mi, EntitlementsConfig as mn, AppRollupConfig as mr, ExpandedConfig as mt, AuditCategory as n, PresetCatalogManifest as ni, AppTablesInput as nn, APP_ON_DELETE_ACTIONS as nr, groupEntries as nt, BlockSqlContractFunction as o, PRESET_FRAMEWORKS as oi, BlocksInput as on, AppColumnConfig as or, resolveConfig as ot, isBlockSqlIdType as p, PresetFieldValue as pi, EntitlementPlansSource as pn, AppRollupAggregate as pr, ConfigConventions as pt, blockEntities as q, namedPreset as qn, PostgresFunctionArg as qr, RelationsConfig as qt, BlockSqlAction as r, PresetGlueItem as ri, AuthConfig as rn, APP_ROLLUP_AGGREGATES as rr, hasFlatTables as rt, BlockSqlEmit as s, PRESET_TENANT_NAMES as si, DatabaseConfig as sn, AppColumnFormat as sr, AppTableNames as st, AUDIT_CATEGORIES as t, PresetCatalogBlock as ti, AppTableInput as tn, APP_COLUMN_TYPES as tr, groupConfig as tt, BlockSqlTableSpec as u, PresetConventions as ui, OrganizationConfig as un, AppOnDeleteAction as ur, ConfigReferences as ut, BlockSqlEntitlementsProvider as v, integrationsForFramework as vi, SeedConfig as vn, AppTableSubject as vr, presetConfig as vt, blockSqlVersion as w, GenTask as wi, TopicTriggerTopicConfig as wn, CatalogColumnGrant as wr, listNames as wt, BlockSqlTestFile as x, DoctorConfig as xi, TopicTriggerConfig as xn, Catalog as xr, PresetIntegration as xt, BlockSqlFile as y, presetField as yi, SqlConfig as yn, AppTableVersions as yr, presetOf as yt, buildJsonSchema as z, NamedPreset as zn, ExtrasTable as zr, GeneratorInput as zt };
+export { blockEntrySource as $, APP_COLUMN_ACCESS as $n, RpcTypeReference as $r, ResolvedExtensions as $t, ValibotGeneratorOptions as A, SkillsAgent as Ai, ExposePrivilege as An, CatalogIndex as Ar, GeneratedFile as At, jsonSchema as B, PRESETS as Bn, ForeignKeyAction as Br, GeneratorInputSchema as Bt, OwnView as C, GenConfig as Ci, TopicTriggerPayloadValueConfig as Cn, CatalogColumn as Cr, ResolvedPresetBlock as Ct, ZodFlavor as D, MigrationSafetyConfig as Di, VectorSearchConfig as Dn, CatalogFunction as Dr, resolveJsonSchema as Dt, TableGrant as E, KeysConfig as Ei, VectorDistance as En, CatalogForeignKey as Er, resolvePreset as Et, nuqs as F, IntegrationInfo as Fi, presetFromSpec as Fn, ExtrasDomain as Fr, GeneratorEntitySchemas as Ft, tenantClaimPaths as G, defaultPreset as Gn, PostgresColumn as Gr, JsonSchemaSource as Gt, ClaimPaths as H, PRESET_NAMES as Hn, SnapshotBucket as Hr, GeneratorModel as Ht, FactoriesGeneratorOptions as I, SKILLS_AGENTS as Ii, presetOfSpec as In, ExtrasFunction as Ir, GeneratorField as It, blockEntityRenames as J, CONFIG_DEFAULTS as Jn, RpcFunction as Jr, SourceConfig as Jt, BlockEntity as K, isPresetName as Kn, PostgresFunction as Kr, JsonTypeConfig as Kt, factories as L, presetSpec as Ln, ExtrasHook as Lr, GeneratorFunction as Lt, StandardSchemaGeneratorOptions as M, GEN_TASKS as Mi, Privilege as Mn, CatalogTable as Mr, GeneratorBlock as Mt, standardSchema as N, INTEGRATION_INFO as Ni, ResolvedExpose as Nn, CatalogTrigger as Nr, GeneratorBlockEntity as Nt, ZodGeneratorOptions as O, OpenApiConfig as Oi, ColumnPrivilege as On, CatalogFunctionArg as Or, ClaimsConfig as Ot, NuqsGeneratorOptions as P, INTEGRATION_NAMES as Pi, PresetSpec as Pn, CatalogUnique as Pr, GeneratorColumn as Pt, RENAMED_CONFIG_KEYS as Q, auditRegistrations as Qn, RpcReturnColumn as Qr, ResolvedConfig as Qt, JsonSchemaGeneratorOptions as R, DEFAULT_PRESET_NAME as Rn, ExtrasHookFunction as Rr, GeneratorFunctionArg as Rt, BlockSqlUpgrade as S, EnvFileConfig as Si, TopicTriggerLookupConfig as Sn, CatalogCheck as Sr, ResolvedPreset as St, notNullCheckName as T, IntegrationName as Ti, TopicTriggerValueConfig as Tn, CatalogEnum as Tr, presetBlockConflict as Tt, DEFAULT_CLAIMS as U, PresetGroup as Un, SnapshotExtras as Ur, GeneratorNoun as Ut, JsonSchemaTarget as V, PRESET_GROUPS as Vn, Snapshot as Vr, GeneratorJsonSchema as Vt, claimPaths as W, PresetName as Wn, GeneratorMetadata as Wr, GeneratorTable as Wt, CONFIG_GROUPS as X, sameTenantLayout as Xn, RpcFunctionOverload as Xr, DataHooksFramework as Xt, blockSubjectTypes as Y, DeclaredForeignKey as Yn, RpcFunctionArg as Yr, TableConfig as Yt, RENAMED_BLOCK_KEYS as Z, AuditedTable as Zn, RpcFunctionReturns as Zr, FlatConfig as Zt, BlockSqlDeprecation as _, PresetValueInfo as _i, ResolvedSqlConfig as _n, AppTableEvents as _r, expandPreset as _t, BlockSqlContext as a, DEFAULT_CONVENTIONS as ai, BlockInput as an, AppColumnAccess as ar, defineConfig as at, BlockSqlLayout as b, presetValueLabel as bi, SqlWorkflow as bn, AppTablesConfig as br, PresetConflict as bt, BlockSqlIdType as c, Preset as ci, EnvironmentConfig as cn, AppColumnType as cr, BlockTableReference as ct, MODULE_ID_TYPES as d, PresetField as di, SqlInput as dn, AppReference as dr, RoleNames as dt, PresetCatalog as ei, ApiConfig as en, APP_COLUMN_FORMATS as er, flattenConfig as et, contractSignature as f, PresetFieldKey as fi, ToolingConfig as fn, AppReferenceTarget as fr, TypedReference as ft, BlockSqlAccessProvider as g, PresetScope as gi, RealtimeConfig as gn, AppTableEventKind as gr, conventionConfig as gt, BlockSql as h, PresetPlatforms as hi, BucketConfig as hn, AppTableConfig as hr, PresetInput as ht, BlockSqlAudit as i, CONVENTION_FIELDS as ii, BetterSupabaseConfig as in, APP_TABLE_EVENT_KINDS as ir, CONFIG_SCHEMA_URL as it, valibot as j, SkillsConfig as ji, ExposeRole as jn, CatalogPolicy as jr, Generator as jt, zod as k, PowerSyncGenConfig as ki, ExposeConfig as kn, CatalogGrant as kr, CodecsConfig as kt, BlockSqlNames as l, PresetAccess as li, GenGroupConfig as ln, AppLookupConfig as lr, BucketName as lt, moduleIdType as m, PresetFramework as mi, EntitlementsConfig as mn, AppRollupConfig as mr, ExpandedConfig as mt, AuditCategory as n, PresetCatalogManifest as ni, AppTablesInput as nn, APP_ON_DELETE_ACTIONS as nr, groupEntries as nt, BlockSqlContractFunction as o, PRESET_FRAMEWORKS as oi, BlocksInput as on, AppColumnConfig as or, resolveConfig as ot, isBlockSqlIdType as p, PresetFieldValue as pi, EntitlementPlansSource as pn, AppRollupAggregate as pr, ConfigConventions as pt, blockEntities as q, namedPreset as qn, PostgresFunctionArg as qr, RelationsConfig as qt, BlockSqlAction as r, PresetGlueItem as ri, AuthConfig as rn, APP_ROLLUP_AGGREGATES as rr, hasFlatTables as rt, BlockSqlEmit as s, PRESET_TENANT_NAMES as si, DatabaseConfig as sn, AppColumnFormat as sr, AppTableNames as st, AUDIT_CATEGORIES as t, PresetCatalogBlock as ti, AppTableInput as tn, APP_COLUMN_TYPES as tr, groupConfig as tt, BlockSqlTableSpec as u, PresetConventions as ui, OrganizationConfig as un, AppOnDeleteAction as ur, ConfigReferences as ut, BlockSqlEntitlementsProvider as v, integrationsForFramework as vi, SeedConfig as vn, AppTableSubject as vr, presetConfig as vt, blockSqlVersion as w, GenTask as wi, TopicTriggerTopicConfig as wn, CatalogColumnGrant as wr, listNames as wt, BlockSqlTestFile as x, DoctorConfig as xi, TopicTriggerConfig as xn, Catalog as xr, PresetIntegration as xt, BlockSqlFile as y, presetField as yi, SqlConfig as yn, AppTableVersions as yr, presetOf as yt, buildJsonSchema as z, NamedPreset as zn, ExtrasTable as zr, GeneratorInput as zt };

package/dist/{controller-BW-5Opig.d.ts → controller-BR7CZ1R9.d.ts}

@@ -1,4 +1,4 @@
-import { a as ClientAuth } from "./bind-JGCPGUJh.js";
+import { a as ClientAuth } from "./bind-pu5TLrla.js";
 //#region src/blocks/controller.d.ts
 /**
  * A block's client state, framework-agnostic. `subscribe` and `getSnapshot`

package/dist/{conversion-3iv2r7YC.d.ts → conversion-BgtOfTaS.d.ts}

@@ -1,5 +1,5 @@
 import { f as Result } from "./result-DZeA5KS6.js";
-import { Bt as Action, Ht as ActionContext, Vt as ActionCall } from "./define-block-C1RHXz7L.js";
+import { Bt as Action, Ht as ActionContext, Vt as ActionCall } from "./define-block-CJWiDWa5.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/blocks/automations/conversion.d.ts
 /** A record a conversion reads from or creates: its subject type and id. */

package/dist/create/index.d.ts

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
-import { Pn as PresetSpec, Wn as PresetName, ar as AppColumnAccess, ci as Preset, cr as AppColumnType, g as BlockSqlAccessProvider, ht as PresetInput, nr as APP_ON_DELETE_ACTIONS, sr as AppColumnFormat, ur as AppOnDeleteAction, yr as AppTableVersions } from "../context-8kb8m5uO.js";
-import { a as DesignChange, p as DesignErrorCode, u as CreateDesign } from "../index-CENWq3zb.js";
+import { Pn as PresetSpec, Wn as PresetName, ar as AppColumnAccess, ci as Preset, cr as AppColumnType, g as BlockSqlAccessProvider, ht as PresetInput, nr as APP_ON_DELETE_ACTIONS, sr as AppColumnFormat, ur as AppOnDeleteAction, yr as AppTableVersions } from "../context-D24k1Cpc.js";
+import { a as DesignChange, p as DesignErrorCode, u as CreateDesign } from "../index-BAcQz5DS.js";
 import { a as SupabaseLint, o as SupabaseOrganization, s as SupabaseProject } from "../management-wtecfrNf.js";
 import { t as PresetMigrationFile } from "../types-DGHfTW8_.js";
 //#region src/create/design-computed.d.ts

package/dist/create/index.js

@@ -1,8 +1,8 @@
-import { a as presetOf, d as resolvePreset } from "../config-CcehOvbz.js";
-import { C as APP_ON_DELETE_ACTIONS, E as PRESET_CATALOG, a as appIdentifierError, m as isAppDefault, o as appNameLengthError, p as appDefaultError, s as appReservedColumns } from "../app-tables-D29Rahtg.js";
-import { c as resolveConfig } from "../config-DWGgUQCh.js";
-import { _ as jsonPointer, a as DesignParseError, h as encodeDesign, n as diffDesigns, o as DesignTooLongError, p as designOf, u as designConfig, v as parseDesign } from "../preset-CsHnIBJF.js";
-import { I as SQL_MODULES, g as renderBlocks, i as moduleLayout } from "../sql-Dl3Alk43.js";
+import { a as presetOf, d as resolvePreset } from "../config-CD2OGfCG.js";
+import { C as APP_ON_DELETE_ACTIONS, E as PRESET_CATALOG, a as appIdentifierError, m as isAppDefault, o as appNameLengthError, p as appDefaultError, s as appReservedColumns } from "../app-tables-DyswUg6J.js";
+import { c as resolveConfig } from "../config-mbVyJwSc.js";
+import { _ as jsonPointer, a as DesignParseError, h as encodeDesign, n as diffDesigns, o as DesignTooLongError, p as designOf, u as designConfig, v as parseDesign } from "../preset-B3CukUhu.js";
+import { R as SQL_MODULES, _ as renderBlocks, i as moduleLayout } from "../sql-fHTjZGqR.js";
 //#region src/create/column-keys.ts
 /** The most options a select takes, and the longest option. */
 const MAX_OPTIONS = 100;

package/dist/{define-C5AcEkEJ.d.ts → define-Cgru0_kF.d.ts}

@@ -723,7 +723,7 @@ interface Repository<M extends AnyModels, T extends TableKey<M>, E = unknown> {
   update(filter: RowFilter<M, T>, patch: Update<M, T>): AsyncResult<{
     count: number;
   }>;
-  update<const A extends ManyWriteArgs<M, T> & {
+  update<const A extends ManyWriteArgs<M, T> & Pick<WriteArgs<M, T>, "override"> & {
     /** Update every visible row when `where` filters nothing. */
     readonly allowAll?: boolean;
   } & FindExt<E, M, T>>(filter: RowFilter<M, T>, patch: NoInfer<Update<M, T>>, args: A): AsyncResult<ManyResult<M, T, A>>;

package/dist/{define-block-C1RHXz7L.d.ts → define-block-CJWiDWa5.d.ts}

@@ -11,9 +11,9 @@ import { r as DbTransportSource, t as BlockTransport } from "./block-transport-D
 import { a as BlockTransportMiddleware, n as BlockHooks } from "./block-hooks-DZN2w69m.js";
 import { f as AiFiles, y as UploadClaimStorage } from "./types-Dr9wZgNy.js";
 import { g as JobHandler } from "./types-Czq9Xtpa.js";
-import { t as BlockOptionsSchema } from "./options-CsGl5BLH.js";
+import { t as BlockOptionsSchema } from "./options-BTmaRzx2.js";
 import { t as Author } from "./block-authors-DzXLUiIq.js";
-import { u as BlockInstanceSurface } from "./define-C5AcEkEJ.js";
+import { u as BlockInstanceSurface } from "./define-Cgru0_kF.js";
 import { A as TtlPreset, C as TransformOptions, l as ImageTransform } from "./bucket-vc-QRrva.js";
 import { i as FieldSpec, n as TableSchema, o as TableSchemaSpec } from "./table-schema-BlF6k62Q.js";
 import { i as EventSink } from "./cloud-event-CzZTJkXv.js";
@@ -544,9 +544,15 @@ interface AttachmentsOptions<S extends StandardSchemaV1$1 | undefined = undefine
   readonly mappers?: readonly ErrorMapper[];
   /**
    * `blocks.attachments.options.requireScan`, which `defineBlocks` passes from
-   * `blocks.generated.ts`. Default `true`.
+   * `blocks.generated.ts`. Default `true`, or `false` with `offline`.
    */
   readonly requireScan?: boolean;
+  /**
+   * `blocks.attachments.options.offline`, which `defineBlocks` passes from
+   * `blocks.generated.ts`. With it, `remove` deletes the record first, which
+   * queues its files, and then the files. Default `false`.
+   */
+  readonly offline?: boolean;
   /**
    * `blocks.attachments.options.publicBuckets`, which `defineBlocks` passes
    * from `blocks.generated.ts`: the buckets `publicUrl` serves. Default none.
@@ -719,7 +725,8 @@ interface Attachments<F extends object = Record<never, never>> {
   }): Result<string>;
   /**
    * Deletes every version's file, then the record (the uploader, or
-   * `attachments.manage`).
+   * `attachments.manage`). With `offline`, the record goes first and queues the
+   * files; a file the delete misses stays queued for `sweepQueued`.
    */
   remove(id: string): AsyncResult<boolean>;
   /**

package/dist/edge/index.d.ts

@@ -2,17 +2,17 @@ import { f as Result } from "../result-DZeA5KS6.js";
 import { t as StandardSchemaV1 } from "../standard-DBV730sF.js";
 import { O as AnyFunctions, k as AnyModels } from "../types-DFdg_4yN.js";
 import { l as PermissionRef, t as AnyAuthorizer } from "../authorizer-B6X09otb.js";
-import { t as BetterSupabase } from "../define-C5AcEkEJ.js";
-import { a as ServerContext, c as ServerOptions, n as BetterServer } from "../server-types-CK8mUIUT.js";
+import { t as BetterSupabase } from "../define-Cgru0_kF.js";
+import { a as ServerContext, c as ServerOptions, n as BetterServer } from "../server-types-gR4Q1aM0.js";
 import { t as AuthSession } from "../view-DyFdMCqg.js";
-import { i as MiddlewareOptions, r as GuardOptions } from "../respond-Dn1_YhC1.js";
-import { c as ResourceLoaderContext, s as BlockRequireOptions } from "../kit-DOwKpSkA.js";
+import { i as MiddlewareOptions, r as GuardOptions } from "../respond-oZeJ342J.js";
+import { c as ResourceLoaderContext, s as BlockRequireOptions } from "../kit-CVgQCIBO.js";
 import { n as FunctionContract, t as DescribedFunction } from "../function-contract-DxFNOmsm.js";
 import { t as Validated } from "../shared-CRRfQAKG.js";
 import { n as SUPABASE_CORS_HEADERS, r as corsConfig, t as CorsOptions } from "../cors-kLq6VM06.js";
-import { i as ResourceContext, l as ResourceRouteOptions, o as ResourceHooks, r as ResourceAction, t as ActionArgs } from "../resource-types-pMeLs68X.js";
-import { t as ResourceMap } from "../resources-7iq2-5_A.js";
-import { t as defineAction } from "../resource-execute-Cpnob1Vj.js";
+import { i as ResourceContext, l as ResourceRouteOptions, o as ResourceHooks, r as ResourceAction, t as ActionArgs } from "../resource-types-8Q5Klkpa.js";
+import { t as ResourceMap } from "../resources-DxpqenZA.js";
+import { t as defineAction } from "../resource-execute-CKBtGL8-.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 //#region src/bridges/edge.d.ts
 /** The platform context Workers pass as the third `fetch` argument. */

package/dist/edge/index.js

@@ -2,15 +2,15 @@ import { n as dbError } from "../errors-BVFgt8BZ.js";
 import { a as ok, r as err } from "../result-ntFBW2p2.js";
 import { n as validate } from "../standard-BA3mLh6w.js";
 import { o as problemResponse } from "../problem-Bf0cJ7tk.js";
-import { a as unexpectedResponse, c as extendServer, o as withFlush, s as createServer } from "../adapter-Dyks1lX1.js";
-import { a as respond, o as settle, t as defaultExpose } from "../respond-C3CcOZlA.js";
-import { t as withBetterSupabase } from "../composite-B3TIjId4.js";
-import { i as defineAction } from "../resource-DV2GC2dB.js";
-import { i as requireCaller } from "../kit-5l-o8RxL.js";
+import { a as unexpectedResponse, c as extendServer, o as withFlush, s as createServer } from "../adapter-CfuBICuG.js";
+import { n as defaultExpose, o as respond, s as settle } from "../respond-3RKp6VgU.js";
+import { t as withBetterSupabase } from "../composite-D24L5RIY.js";
+import { i as defineAction } from "../resource-R3KToNze.js";
+import { i as requireCaller } from "../kit-DhlB-vv_.js";
 import { t as withExtra } from "../extra-CGQ2_q3S.js";
-import { n as resourceRouter } from "../resources-C02l_YBJ.js";
+import { n as resourceRouter } from "../resources-DqIwoQsP.js";
 import { n as corsConfig, t as SUPABASE_CORS_HEADERS } from "../cors-h_v7TPxl.js";
-import { t as EVERY_CALLER } from "../framework-BozTXRzt.js";
+import { t as EVERY_CALLER } from "../framework-CNhTg0th.js";
 import { t as FUNCTION_DESCRIPTOR } from "../function-contract-pEmsaUIf.js";
 import { bufferRequest, pipeline, seedContext } from "@supabase/middleware";
 import { withCors } from "@supabase/middleware/cors";

package/dist/elysia/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../refusal-CSntB_x8.js";
+import { n as RouteGuardOptions } from "../refusal-OrlI3g4H.js";
 import { t as Validated } from "../shared-CRRfQAKG.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 //#region src/bridges/elysia.d.ts

package/dist/elysia/index.js

@@ -1,5 +1,5 @@
 import { t as around } from "../shared-Bf-I13Ht.js";
-import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../refusal-ByBZcm0V.js";
+import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../refusal-D48CMqpQ.js";
 import { bufferRequest } from "@supabase/middleware";
 //#region src/bridges/elysia.ts
 /**

package/dist/{email-tt2QqiSc.d.ts → email-B3YxEzwC.d.ts}

@@ -1,4 +1,4 @@
-import { n as NotificationMessage, t as NotificationChannel } from "./channel-BjvGO39m.js";
+import { n as NotificationMessage, t as NotificationChannel } from "./channel-JcMd5lNP.js";
 import { a as DeliveryTransport, c as UnsubscribeTarget, s as MailCategory } from "./delivery-n6lZGuGx.js";
 //#region src/blocks/notifications/email.d.ts
 /** The mail for one delivery. */

package/dist/{entitlements-sO977DO-.d.ts → entitlements-DHcNt1aF.d.ts}

@@ -1,4 +1,4 @@
-import { t as AuthSnapshot } from "./bind-JGCPGUJh.js";
+import { t as AuthSnapshot } from "./bind-pu5TLrla.js";
 import { t as AuthSession } from "./view-DyFdMCqg.js";
 //#region src/auth/entitlements.d.ts
 /**

package/dist/{events-SqJLbb8q.js → events-DuLhzjP6.js}

@@ -11,6 +11,8 @@ const organizationsEvents = defineEvents({
 	"organization.member_suspended": event(),
 	"organization.member_resumed": event(),
 	"organization.role_changed": event(),
+	"organization.role_added": event(),
+	"organization.role_removed": event(),
 	"organization.ownership_transferred": event(),
 	"organization.switched": event(),
 	"invitation.created": event(),

package/dist/{executor-BcNWcD-4.d.ts → executor-BWFfz0ik.d.ts}

@@ -1,7 +1,7 @@
 import { E as RawDbError, b as DbError, f as Result } from "./result-DZeA5KS6.js";
 import { Bt as Executor, O as AnyFunctions, dt as TableMeta, k as AnyModels, m as Operation, ut as TableKey } from "./types-DFdg_4yN.js";
-import { pt as QuerySpec, t as BetterSupabase } from "./define-C5AcEkEJ.js";
-import { i as ListDefinition } from "./list-query-DYhgRTd5.js";
+import { pt as QuerySpec, t as BetterSupabase } from "./define-Cgru0_kF.js";
+import { i as ListDefinition } from "./list-query-DxjuIHEL.js";
 import { t as Compiler } from "./compiler-D3UmE7ao.js";
 //#region src/compile/sqlite.d.ts
 /** A value SQLite binds: booleans become `0`/`1`, objects JSON text. */

package/dist/expo/index.d.ts

@@ -1,7 +1,7 @@
 import { O as AnyFunctions, k as AnyModels } from "../types-DFdg_4yN.js";
-import { t as BetterSupabase } from "../define-C5AcEkEJ.js";
-import { a as ServerContext, c as ServerOptions, n as BetterServer, r as ContextOptions } from "../server-types-CK8mUIUT.js";
-import { i as MiddlewareOptions, r as GuardOptions } from "../respond-Dn1_YhC1.js";
+import { t as BetterSupabase } from "../define-Cgru0_kF.js";
+import { a as ServerContext, c as ServerOptions, n as BetterServer, r as ContextOptions } from "../server-types-gR4Q1aM0.js";
+import { i as MiddlewareOptions, r as GuardOptions } from "../respond-oZeJ342J.js";
 import { t as Validated } from "../shared-CRRfQAKG.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { ImmutableRequest, MiddlewareFunction } from "expo-server";

package/dist/expo/index.js

@@ -1,9 +1,9 @@
 import { t as DbException } from "../db-exception-Lngc1W49.js";
 import { c as toProblem } from "../problem-Bf0cJ7tk.js";
-import { a as unexpectedResponse, b as isPrefetch, c as extendServer, s as createServer, x as refreshFor } from "../adapter-Dyks1lX1.js";
+import { a as unexpectedResponse, b as isPrefetch, c as extendServer, s as createServer, x as refreshFor } from "../adapter-CfuBICuG.js";
 import { h as serializeCookie } from "../resolve-B0mW2m7f.js";
-import { a as respond, r as guard, t as defaultExpose } from "../respond-C3CcOZlA.js";
-import { t as withBetterSupabase } from "../composite-B3TIjId4.js";
+import { i as guard, n as defaultExpose, o as respond } from "../respond-3RKp6VgU.js";
+import { t as withBetterSupabase } from "../composite-D24L5RIY.js";
 import { r as handoffOf } from "../shared-Bf-I13Ht.js";
 import { bufferRequest, pipeline, seedContext } from "@supabase/middleware";
 import { StatusError, setResponseHeaders } from "expo-server";

package/dist/{extension-B-lajjex.js → extension-DTaHjwdc.js}

@@ -14,8 +14,8 @@ function defaultActor(context) {
 * stamp, like the block's `track_actor` trigger. Without an actor (anonymous
 * requests) nothing is set.
 */
-function createdByExtension(options = {}) {
-	const resolve = options.resolve ?? defaultActor;
+function createdByExtension(extension = {}) {
+	const resolve = extension.resolve ?? defaultActor;
 	return definePlugin({
 		name: "actor",
 		beforeMutation(op, { table, context, options }) {
@@ -29,6 +29,7 @@ function createdByExtension(options = {}) {
 				updated,
 				impersonated
 			], "actor", options);
+			if (extension.stamp === "trigger") return op;
 			const id = resolve(context);
 			if (id === void 0) return op;
 			const impersonator = context.actor?.impersonator;

package/dist/{extension-B0EjCYhO.js → extension-mGylYROs.js}

@@ -1,15 +1,7 @@
 import { r as definePlugin } from "./plugin-AKwwe2gF.js";
 import { a as insertsOnly, c as withDefault, i as guardManaged, t as dbName } from "./extension-shared-Djm8mGHD.js";
 //#region src/blocks/updated-at/extension.ts
-/**
-* The `updated-at` block's repository extension. Stamps the columns generated
-* as `Flags.timestamps`: `createdAt` on insert, `updatedAt` on insert and
-* update. A call that sets either column fails with `invalid_request` unless it
-* passes `{ override: true }`, which keeps the caller's values. The block's
-* `track_updated_at` trigger covers writes that bypass the app, and every write
-* when the runtime has no Temporal.
-*/
-function updatedAtExtension() {
+function updatedAtExtension(extension = {}) {
 	return definePlugin({
 		name: "timestamps",
 		describe(api) {
@@ -25,7 +17,7 @@ function updatedAtExtension() {
 			const created = dbName(table, flags.createdAt);
 			const updated = dbName(table, flags.updatedAt);
 			guardManaged(op, [created, updated], "timestamps", options);
-			if (op.kind === "delete") return op;
+			if (op.kind === "delete" || extension.stamp === "trigger") return op;
 			const stamp = readClock(now);
 			if (stamp === void 0) return op;
 			switch (op.kind) {

package/dist/{field-errors-Dt86dCKk.d.ts → field-errors-DucQdLl7.d.ts}

@@ -1,14 +1,14 @@
 import { b as DbError, f as Result } from "./result-DZeA5KS6.js";
 import { o as EventHub } from "./events-vcqenSYU.js";
 import { o as BlockTenant } from "./block-helpers-CRpAHrp_.js";
-import { pt as QuerySpec } from "./define-C5AcEkEJ.js";
+import { pt as QuerySpec } from "./define-Cgru0_kF.js";
 import { tt as TemplateValues } from "./bucket-vc-QRrva.js";
 import { n as DataEngine } from "./data-engine-BWoz9lED.js";
-import { Dn as GeneratedBlocks } from "./define-block-C1RHXz7L.js";
-import { _ as TopicMessage, c as RealtimeClient, d as SubscribeOptions, i as PresenceOptions, s as PresenceSubscription } from "./topic-CZXHhZye.js";
-import { t as ClientPorts } from "./ports-mObLgH1z.js";
-import { a as ClientAuth } from "./bind-JGCPGUJh.js";
-import { a as LiveSource, r as LiveCountSeed } from "./index-CTu-3fJB.js";
+import { Dn as GeneratedBlocks } from "./define-block-CJWiDWa5.js";
+import { _ as TopicMessage, c as RealtimeClient, d as SubscribeOptions, i as PresenceOptions, s as PresenceSubscription } from "./topic-nQYxoTaU.js";
+import { t as ClientPorts } from "./ports-g0H1Kzwr.js";
+import { a as ClientAuth } from "./bind-pu5TLrla.js";
+import { a as LiveSource, r as LiveCountSeed } from "./index-BH3NYExp.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { QueryClient } from "@tanstack/query-core";
 import { StandardSchemaV1 } from "@standard-schema/spec";

package/dist/{framework-BozTXRzt.js → framework-CNhTg0th.js}

@@ -1,5 +1,5 @@
 import { l as snapshotOf, n as toSession } from "./view-C8Ve14ja.js";
-import { t as withBetterSupabase } from "./composite-B3TIjId4.js";
+import { t as withBetterSupabase } from "./composite-D24L5RIY.js";
 //#region src/server/framework.ts
 /**
 * Every caller: the framework factories guard per loader, action or route

package/dist/{framework-BGdZVyPL.d.ts → framework-x9Y4uB1q.d.ts}

@@ -1,10 +1,10 @@
 import { O as AnyFunctions, k as AnyModels } from "./types-DFdg_4yN.js";
-import { O as SessionSnapshot, c as ServerOptions } from "./server-types-CK8mUIUT.js";
+import { O as SessionSnapshot, c as ServerOptions } from "./server-types-gR4Q1aM0.js";
 import { t as AuthSession } from "./view-DyFdMCqg.js";
-import { n as SessionEntryConfig } from "./session-DWmFv3vB.js";
-import { n as BetterSupabaseContributions } from "./composite-CfYyU3vs.js";
-import { c as ResourceLoaderContext } from "./kit-DOwKpSkA.js";
-import { t as RefusalRedirects } from "./refusal-CSntB_x8.js";
+import { n as SessionEntryConfig } from "./session-Fcft5A39.js";
+import { n as BetterSupabaseContributions } from "./composite-C-8A8qzi.js";
+import { c as ResourceLoaderContext } from "./kit-CVgQCIBO.js";
+import { t as RefusalRedirects } from "./refusal-OrlI3g4H.js";
 //#region src/server/framework.d.ts
 /**
  * What the framework factories (`createSvelteKit`, `createReactRouter`,

package/dist/h3/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../refusal-CSntB_x8.js";
+import { n as RouteGuardOptions } from "../refusal-OrlI3g4H.js";
 import { t as Validated } from "../shared-CRRfQAKG.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 //#region src/bridges/h3.d.ts

package/dist/h3/index.js

@@ -1,5 +1,5 @@
 import { a as toResponse, i as nitroCloudflareEnv, n as bufferInPlace, t as around } from "../shared-Bf-I13Ht.js";
-import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../refusal-ByBZcm0V.js";
+import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../refusal-D48CMqpQ.js";
 //#region src/bridges/h3.ts
 /**
 * Runs an entry array as H3 2 middleware (`app.use(...)`, Nitro and Nuxt server

package/dist/h3/v1/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../../refusal-CSntB_x8.js";
+import { n as RouteGuardOptions } from "../../refusal-OrlI3g4H.js";
 import { t as Validated } from "../../shared-CRRfQAKG.js";
 import { n as NodeRequestHead, t as NodeHeaderTarget } from "../../node-headers-BPtMP4_V.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";

package/dist/h3/v1/index.js

@@ -1,4 +1,4 @@
-import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../../refusal-ByBZcm0V.js";
+import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../../refusal-D48CMqpQ.js";
 import { t as beforeRoute } from "../../before-route-B23K2zYU.js";
 import { n as headRequest, t as applyWebHeaders } from "../../node-headers-C71zNQHe.js";
 //#region src/h3/v1/index.ts

package/dist/hono/index.d.ts

@@ -1,14 +1,14 @@
 import { O as AnyFunctions, k as AnyModels, ut as TableKey } from "../types-DFdg_4yN.js";
 import { r as AuthState } from "../resolve-CXX6DHv3.js";
 import { l as PermissionRef, t as AnyAuthorizer } from "../authorizer-B6X09otb.js";
-import { t as BetterSupabase } from "../define-C5AcEkEJ.js";
-import { O as SessionSnapshot, a as ServerContext, c as ServerOptions, l as SharedServer, n as BetterServer } from "../server-types-CK8mUIUT.js";
+import { t as BetterSupabase } from "../define-Cgru0_kF.js";
+import { O as SessionSnapshot, a as ServerContext, c as ServerOptions, l as SharedServer, n as BetterServer } from "../server-types-gR4Q1aM0.js";
 import { t as AuthSession } from "../view-DyFdMCqg.js";
-import { i as MiddlewareOptions, r as GuardOptions } from "../respond-Dn1_YhC1.js";
-import { c as ResourceLoaderContext, s as BlockRequireOptions } from "../kit-DOwKpSkA.js";
+import { i as MiddlewareOptions, r as GuardOptions } from "../respond-oZeJ342J.js";
+import { c as ResourceLoaderContext, s as BlockRequireOptions } from "../kit-CVgQCIBO.js";
 import { t as CorsOptions } from "../cors-kLq6VM06.js";
-import { i as ResourceContext, l as ResourceRouteOptions, o as ResourceHooks, r as ResourceAction, t as ActionArgs } from "../resource-types-pMeLs68X.js";
-import { t as defineAction } from "../resource-execute-Cpnob1Vj.js";
+import { i as ResourceContext, l as ResourceRouteOptions, o as ResourceHooks, r as ResourceAction, t as ActionArgs } from "../resource-types-8Q5Klkpa.js";
+import { t as defineAction } from "../resource-execute-CKBtGL8-.js";
 import { i as RouteRateLimitRule, n as RateLimitVerdict, r as RateLimiter, t as RateLimitRouteOptions } from "../rate-limit-Bztf32cl.js";
 import { AnyEntry, Contributions, ValidateEntries } from "@supabase/middleware";
 import { Context, ErrorHandler, Hono, MiddlewareHandler } from "hono";

package/dist/hono/index.js

@@ -1,12 +1,12 @@
 import { r as dbErrorOf } from "../errors-BVFgt8BZ.js";
 import { o as problemResponse } from "../problem-Bf0cJ7tk.js";
-import { a as unexpectedResponse, c as extendServer, n as flushEvents, s as createServer } from "../adapter-Dyks1lX1.js";
+import { a as unexpectedResponse, c as extendServer, n as flushEvents, s as createServer } from "../adapter-CfuBICuG.js";
 import { l as snapshotOf, n as toSession } from "../view-C8Ve14ja.js";
-import { a as respond, t as defaultExpose } from "../respond-C3CcOZlA.js";
-import { t as withBetterSupabase } from "../composite-B3TIjId4.js";
-import { i as defineAction, t as defineResource } from "../resource-DV2GC2dB.js";
-import { i as requireCaller } from "../kit-5l-o8RxL.js";
-import { t as matchResource } from "../resources-C02l_YBJ.js";
+import { n as defaultExpose, o as respond, t as assertCookieRefresh } from "../respond-3RKp6VgU.js";
+import { t as withBetterSupabase } from "../composite-D24L5RIY.js";
+import { i as defineAction, t as defineResource } from "../resource-R3KToNze.js";
+import { i as requireCaller } from "../kit-DhlB-vv_.js";
+import { t as matchResource } from "../resources-DqIwoQsP.js";
 import { r as handoffOf } from "../shared-Bf-I13Ht.js";
 import { n as corsConfig } from "../cors-h_v7TPxl.js";
 import { t as rateLimitGate } from "../rate-limit-BWKGlhTM.js";
@@ -114,6 +114,7 @@ function createHono(betterSupabase, options = {}) {
 			return app;
 		},
 		middleware(middlewareOptions = {}) {
+			assertCookieRefresh(middlewareOptions);
 			const run = honoMiddleware([withBetterSupabase(server, {
 				...middlewareOptions,
 				expose

package/dist/{index-Cc4mIQS8.d.ts → index-4WT_uRRL.d.ts}

@@ -1,7 +1,7 @@
 import { E as AccessPolicySql } from "./types-DFdg_4yN.js";
-import { p as AnyBlocksConfig, t as AuthorizationFunctions } from "./authorization-HZdJCaVm.js";
-import { tt as ReadSet } from "./define-C5AcEkEJ.js";
-import { E as TableGrant, Qt as ResolvedConfig, _ as BlockSqlDeprecation, b as BlockSqlLayout, c as BlockSqlIdType, g as BlockSqlAccessProvider, h as BlockSql, hr as AppTableConfig, jr as CatalogPolicy, o as BlockSqlContractFunction, v as BlockSqlEntitlementsProvider, y as BlockSqlFile } from "./context-8kb8m5uO.js";
+import { p as AnyBlocksConfig, t as AuthorizationFunctions } from "./authorization-IiE__z2m.js";
+import { tt as ReadSet } from "./define-Cgru0_kF.js";
+import { E as TableGrant, Qt as ResolvedConfig, _ as BlockSqlDeprecation, b as BlockSqlLayout, c as BlockSqlIdType, g as BlockSqlAccessProvider, h as BlockSql, hr as AppTableConfig, jr as CatalogPolicy, o as BlockSqlContractFunction, v as BlockSqlEntitlementsProvider, y as BlockSqlFile } from "./context-D24k1Cpc.js";
 import { t as SubjectConfig } from "./subjects-DvmQeF_F.js";
 //#region src/sql/render.d.ts
 /** A module's SQL for `layout`, without header; `undefined` in custom mode. */
@@ -244,6 +244,8 @@ interface AdoptedTable {
    */
   readonly textColumns: readonly string[];
 }
+/** Whether `module`'s functions write text into `logical.column` by default. */
+declare function moduleWritesText(module: string, logical: string, column: string): boolean;
 /**
  * Every table of the app's that the modules in `modules` use, because
  * `ownTables` lists it or `blocks.<name>.on` names it, with the columns their
@@ -399,6 +401,15 @@ declare function rlsTables(files: readonly {
 declare function declaredTableColumns(files: readonly {
   readonly text: string;
 }[], schemas: readonly string[]): ReadonlyMap<string, ReadonlySet<string>>;
+/**
+ * The declared type of each column of each `create table` in `files`, as
+ * `schema.table` to unquoted column name to type. A type is lower-cased with
+ * its spacing normalised, and a quoted part keeps its case without quotes. Only
+ * tables in `schemas` are kept.
+ */
+declare function declaredColumnTypes(files: readonly {
+  readonly text: string;
+}[], schemas: readonly string[]): ReadonlyMap<string, ReadonlyMap<string, string>>;
 /**
  * The privileges the permissive policies in `files` imply, per table and role:
  * `for all` gives the four commands, `to public` (or no `to`) counts for
@@ -534,6 +545,11 @@ type PolicyCommand = "select" | "insert" | "update" | "delete";
  * app has no policy for is the block's to grant.
  */
 declare function widenedCommands(block: CatalogPolicy, apps: readonly CatalogPolicy[]): PolicyCommand[];
+declare function appTablePolicyNotes(sql: string): {
+  readonly table: string;
+  readonly policy: string;
+  readonly commands: readonly PolicyCommand[];
+}[];
 /**
  * The policies `sources` leave on each `schema.table` in `schemas`, in order: a
  * later `drop policy` removes one, and a later `create policy` of the same name
@@ -543,4 +559,4 @@ declare function declaredPolicies(sources: readonly {
   readonly text: string;
 }[], schemas: readonly string[]): Record<string, CatalogPolicy[]>;
 //#endregion
-export { modulePermissionKeys as $, sameTenantColumn as A, adoptedTables as B, extensionSchema as C, TenantQuery as D, subjectColumns as E, excludedColumns as F, DEFAULT_ROLES as G, APP_TABLES_MARKER as H, resolveExposeColumns as I, resolveBlocks as J, instanceFunctions as K, AdoptedTable as L, DataExportPlan as M, SECRET_COLUMNS as N, tenantsQuery as O, dataExportPlan as P, moduleHidingColumns as Q, AdoptedView as R, declaredViews as S, renderBlocks as St, rlsTables as T, APP_TABLES_MODULE as U, adoptedViews as V, appTablesFiles as W, BlockSqlPermissionKey as X, BlockSqlExtension as Y, moduleEventTriggers as Z, DeclaredView as _, upgradePlan as _t, hasColumnAccess as a, moduleDataDir as at, declaredTables as b, moduleBody as bt, compileReadSets as c, EntityRenameStep as ct, migrationOptionUses as d, currentBlockName as dt, moduleSchemaExtensions as et, moduleLayout as f, formerBlockName as ft, templateFunctions as g, moduleDeprecations as gt, scopeProblems as h, InstalledBlock as ht, scopePolicyName as i, sameBlockFile as it, sameTenantTrigger as j, expiredFlagsQuery as k, sharedRolesProblems as l, entityRenamePlan as lt, resolveProviderSql as m, BlockSqlUpgradePlan as mt, widenedCommands as n, isModuleDataFile as nt, CompiledReadSet as o, moduleFilePaths as ot, SCOPE_ID_TYPES as p, renamedBlock as pt, SQL_MODULES as q, TENANT_SCOPE_POLICY as r, moduleFileVersion as rt, compileReadSet as s, EntityRenamePlan as st, declaredPolicies as t, blockFileState as tt, MigrationOptionUse as u, BLOCK_RENAMES as ut, PolicyGrant as v, BlockSqlTopic as vt, policyGrants as w, declaredUpdatedAtTriggers as x, moduleTopics as xt, declaredTableColumns as y, customContracts as yt, adoptedColumnProblems as z };
+export { BlockSqlPermissionKey as $, tenantsQuery as A, AdoptedView as B, declaredUpdatedAtTriggers as C, moduleBody as Ct, rlsTables as D, policyGrants as E, SECRET_COLUMNS as F, APP_TABLES_MARKER as G, adoptedTables as H, dataExportPlan as I, DEFAULT_ROLES as J, APP_TABLES_MODULE as K, excludedColumns as L, sameTenantColumn as M, sameTenantTrigger as N, subjectColumns as O, DataExportPlan as P, BlockSqlExtension as Q, resolveExposeColumns as R, declaredTables as S, customContracts as St, extensionSchema as T, renderBlocks as Tt, adoptedViews as U, adoptedColumnProblems as V, moduleWritesText as W, SQL_MODULES as X, instanceFunctions as Y, resolveBlocks as Z, templateFunctions as _, BlockSqlUpgradePlan as _t, scopePolicyName as a, isModuleDataFile as at, declaredColumnTypes as b, upgradePlan as bt, compileReadSet as c, moduleDataDir as ct, MigrationOptionUse as d, EntityRenameStep as dt, moduleEventTriggers as et, migrationOptionUses as f, entityRenamePlan as ft, scopeProblems as g, renamedBlock as gt, resolveProviderSql as h, formerBlockName as ht, TENANT_SCOPE_POLICY as i, blockFileState as it, expiredFlagsQuery as j, TenantQuery as k, compileReadSets as l, moduleFilePaths as lt, SCOPE_ID_TYPES as m, currentBlockName as mt, declaredPolicies as n, modulePermissionKeys as nt, hasColumnAccess as o, moduleFileVersion as ot, moduleLayout as p, BLOCK_RENAMES as pt, appTablesFiles as q, widenedCommands as r, moduleSchemaExtensions as rt, CompiledReadSet as s, sameBlockFile as st, appTablePolicyNotes as t, moduleHidingColumns as tt, sharedRolesProblems as u, EntityRenamePlan as ut, DeclaredView as v, InstalledBlock as vt, declaredViews as w, moduleTopics as wt, declaredTableColumns as x, BlockSqlTopic as xt, PolicyGrant as y, moduleDeprecations as yt, AdoptedTable as z };

package/dist/{index-CENWq3zb.d.ts → index-BAcQz5DS.d.ts}

@@ -1,4 +1,4 @@
-import { Pn as PresetSpec, St as ResolvedPreset, Wn as PresetName, br as AppTablesConfig, ci as Preset, cr as AppColumnType, ei as PresetCatalog, hr as AppTableConfig, or as AppColumnConfig, ri as PresetGlueItem, vt as presetConfig } from "./context-8kb8m5uO.js";
+import { Pn as PresetSpec, St as ResolvedPreset, Wn as PresetName, br as AppTablesConfig, ci as Preset, cr as AppColumnType, ei as PresetCatalog, hr as AppTableConfig, or as AppColumnConfig, ri as PresetGlueItem, vt as presetConfig } from "./context-D24k1Cpc.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/preset/catalog.generated.d.ts
 declare const PRESET_CATALOG: PresetCatalog;

package/dist/{index-CTu-3fJB.d.ts → index-BH3NYExp.d.ts}

@@ -1,9 +1,9 @@
 import { b as DbError, f as Result } from "./result-DZeA5KS6.js";
 import { $ as RecordRef, ot as SchemaMeta } from "./types-DFdg_4yN.js";
-import { pt as QuerySpec } from "./define-C5AcEkEJ.js";
+import { pt as QuerySpec } from "./define-Cgru0_kF.js";
 import { t as DataChanges } from "./data-engine-BWoz9lED.js";
-import { c as RealtimeClient, m as Topic, p as SubscriptionStatus } from "./topic-CZXHhZye.js";
-import { n as TopicPort } from "./watch-topic-BAxoPKZx.js";
+import { c as RealtimeClient, m as Topic, p as SubscriptionStatus } from "./topic-nQYxoTaU.js";
+import { n as TopicPort } from "./watch-topic-UGSEWAqR.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/realtime/relay.d.ts
 /** The `EventSource` the relay client reads with; the browser's fits. */

package/dist/{index-CcAmFNVi.d.ts → index-C0t-vNIt.d.ts}

@@ -3,9 +3,9 @@ import { n as DbException } from "./escape-like-PReMbEEU.js";
 import { f as Result, t as AsyncResult } from "./result-DZeA5KS6.js";
 import { $ as RecordRef, K as Insert, O as AnyFunctions, Z as PrimaryKeyValue, ht as Update, k as AnyModels, ut as TableKey } from "./types-DFdg_4yN.js";
 import { o as EventHub } from "./events-vcqenSYU.js";
-import { A as OffsetRangeArgs, Bt as Payload, C as GetKey, Dt as CountArgs, K as WriteArgs, Nt as ListArgs, O as OffsetPage, S as FindExt, St as AggregateResult, U as UpdateArgs, W as UpsertArgs, Zt as CacheAdapter, _ as CursorPageArgs, b as DeleteArgs, ft as InferResult, g as CursorPage, k as OffsetPageArgs, kt as GetArgs, pt as QuerySpec, t as BetterSupabase, v as Db, x as DeleteExt, yt as AggregateArgs, z as Returned } from "./define-C5AcEkEJ.js";
+import { A as OffsetRangeArgs, Bt as Payload, C as GetKey, Dt as CountArgs, K as WriteArgs, Nt as ListArgs, O as OffsetPage, S as FindExt, St as AggregateResult, U as UpdateArgs, W as UpsertArgs, Zt as CacheAdapter, _ as CursorPageArgs, b as DeleteArgs, ft as InferResult, g as CursorPage, k as OffsetPageArgs, kt as GetArgs, pt as QuerySpec, t as BetterSupabase, v as Db, x as DeleteExt, yt as AggregateArgs, z as Returned } from "./define-Cgru0_kF.js";
 import { n as DataEngine, r as DataEngineOptions } from "./data-engine-BWoz9lED.js";
-import { Dn as GeneratedBlocks, cn as RecordBindingResult, dn as RecordBindingWriteName, fn as RecordBindingWriteOutput, in as RecordBindingData, nn as AnyRecordBindingWrite, on as RecordBindingOptions, t as AnyBlock, tn as AnyRecordBinding, un as RecordBindingWriteInput } from "./define-block-C1RHXz7L.js";
+import { Dn as GeneratedBlocks, cn as RecordBindingResult, dn as RecordBindingWriteName, fn as RecordBindingWriteOutput, in as RecordBindingData, nn as AnyRecordBindingWrite, on as RecordBindingOptions, t as AnyBlock, tn as AnyRecordBinding, un as RecordBindingWriteInput } from "./define-block-CJWiDWa5.js";
 import { t as BetterQueryMeta } from "./invalidate-DMp4eqfF.js";
 import { DataTag, InfiniteData, QueryClient, SkipToken } from "@tanstack/query-core";
 import { StandardSchemaV1 } from "@standard-schema/spec";