better-supabase 0.16.0 → 0.18.0

package/dist/blocks/notifications/index.js

@@ -6,7 +6,7 @@ import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../../resul
 import { n as validate } from "../../standard-BA3mLh6w.js";
 import { a as methodNotAllowed, o as problemResponse } from "../../problem-Bf0cJ7tk.js";
 import { t as MAX_BATCH } from "../../batch-limit-DKVQDz4o.js";
-import { t as notificationsSqlOptions } from "../../options-Bt0bYMLl.js";
+import { t as notificationsSqlOptions } from "../../options-CcXgWlvm.js";
 import { n as whileSignedIn, t as defineController } from "../../controller-BEliOBOv.js";
 import { B as dbTransport, C as optionalText, E as readBodyCapped, H as rpcTransport, L as toBlockError, U as sqlTransport, c as chunksOf, f as errorText, i as batchResultsOf, n as applyTemporal, o as blockCall, s as budget, v as nullableInstant, w as pageOf, y as nullableText } from "../../block-helpers-CtBdjgO4.js";
 import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
@@ -70,7 +70,72 @@ function emailChannel(options) {
 	};
 }
 //#endregion
+//#region src/blocks/notifications/delivery-batch.ts
+/**
+* The data of `notification.delivered` and `notification.failed` for one
+* delivery.
+*/
+const deliveryData = (message, channel) => {
+	const notification = message.notification;
+	return {
+		notificationId: notification.eventId,
+		organizationId: notification.tenant,
+		type: notification.type,
+		channel,
+		deliveryId: message.deliveryId,
+		subjectType: notification.subject?.type ?? "notification",
+		subjectId: notification.subject?.id ?? notification.eventId
+	};
+};
+function deliveryChannels(options) {
+	const channels = options.channels ?? [];
+	if (options.email === void 0) return channels;
+	if (channels.some((channel) => channel.name === "email")) throw new TypeError("createNotifications: `email` adds the \"email\" channel; remove the channel named \"email\" from `channels`");
+	return [...channels, emailChannel(options.email)];
+}
+/**
+* The event a delivery's audience check sees: the notification, as its
+* recipients read it.
+*/
+const subscriberEventOf = (notification) => ({
+	type: notification.type,
+	tenant: notification.tenant,
+	actorId: notification.actorId,
+	payload: notification.data,
+	subject: notification.subject ? `${notification.subject.type}/${notification.subject.id}` : null
+});
+/** Messages grouped by the recipient's locale, in claim order. */
+const byLocale = (messages) => {
+	const groups = /* @__PURE__ */ new Map();
+	for (const message of messages) {
+		const group = groups.get(message.locale) ?? [];
+		group.push(message);
+		groups.set(message.locale, group);
+	}
+	return groups;
+};
+//#endregion
 //#region src/blocks/notifications/rows.ts
+function objectOrNull(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? Object.fromEntries(Object.entries(value)) : null;
+}
+function actionsOf(value) {
+	if (!Array.isArray(value)) return [];
+	return value.flatMap((entry) => {
+		const action = objectOrNull(entry);
+		const key = action?.["key"];
+		const label = action?.["label"];
+		if (typeof key !== "string" || typeof label !== "string") return [];
+		const operation = action?.["operation"];
+		const payload = objectOrNull(action?.["payload"]);
+		return [{
+			key,
+			label,
+			...typeof operation === "string" ? { operation } : {},
+			...payload === null ? {} : { payload }
+		}];
+	});
+}
 function toItem(row) {
 	const type = nullableText(row["subject_type"]);
 	const id = nullableText(row["subject_id"]);
@@ -89,10 +154,12 @@ function toItem(row) {
 		},
 		summary: nullableText(row["summary"]),
 		actionPath: nullableText(row["action_path"]),
+		actions: actionsOf(row["actions"]),
 		priority: nullableText(row["priority"]),
 		createdAt: nullableInstant(row["created_at"]) ?? temporal().Now.instant(),
 		readAt: nullableInstant(row["read_at"]),
 		resolvedAt: nullableInstant(row["resolved_at"]),
+		resolution: objectOrNull(row["resolution"]),
 		fields: rowFields(row["fields"])
 	};
 }
@@ -198,39 +265,6 @@ const subjectDeliveryOf = (row) => ({
 		}];
 	})
 });
-/**
-* The data of `notification.delivered` and `notification.failed` for one
-* delivery.
-*/
-const deliveryData = (message, channel) => {
-	const notification = message.notification;
-	return {
-		notificationId: notification.eventId,
-		organizationId: notification.tenant,
-		type: notification.type,
-		channel,
-		deliveryId: message.deliveryId,
-		subjectType: notification.subject?.type ?? "notification",
-		subjectId: notification.subject?.id ?? notification.eventId
-	};
-};
-function deliveryChannels(options) {
-	const channels = options.channels ?? [];
-	if (options.email === void 0) return channels;
-	if (channels.some((channel) => channel.name === "email")) throw new TypeError("createNotifications: `email` adds the \"email\" channel; remove the channel named \"email\" from `channels`");
-	return [...channels, emailChannel(options.email)];
-}
-/**
-* The event a delivery's audience check sees: the notification, as its
-* recipients read it.
-*/
-const subscriberEventOf = (notification) => ({
-	type: notification.type,
-	tenant: notification.tenant,
-	actorId: notification.actorId,
-	payload: notification.data,
-	subject: notification.subject ? `${notification.subject.type}/${notification.subject.id}` : null
-});
 function createNotifications(options) {
 	applyTemporal(options);
 	const fields = blockFields(options.fields, "notification fields");
@@ -346,8 +380,8 @@ function createNotifications(options) {
 				attempts: Number(row["attempts"] ?? 1),
 				userId: String(row["user_id"]),
 				email: nullableText(row["email"]),
-				notification,
-				...options.render ? { text: options.render(notification, {}) } : {}
+				locale: nullableText(row["locale"]),
+				notification
 			},
 			suppressed: nullableText(row["suppressed"])
 		};
@@ -404,14 +438,48 @@ function createNotifications(options) {
 				continue;
 			}
 			const allowed = new Set(checked.allowed.map((subscriber) => subscriber.message));
-			for (const message of messages) outcomes.push(allowed.has(message) ? await deliverOne(channel, message, maxAttempts) : await skip(message, "audience"));
+			for (const message of messages) if (!allowed.has(message)) outcomes.push(await skip(message, "audience"));
+			for (const [locale, group] of byLocale(messages.filter((message) => allowed.has(message)))) {
+				const hydrated = await hydrateFor(group, locale);
+				for (const message of group) outcomes.push(await deliverOne(channel, message, maxAttempts, hydrated));
+			}
 		}
 		return outcomes;
 	}
-	async function deliverOne(channel, message, maxAttempts) {
+	/**
+	* `hydrate` once for a locale's messages. A throwing hydrate fails only those
+	* deliveries, inside `deliverOne`.
+	*/
+	const hydrateFor = async (messages, locale) => {
+		if (!options.hydrate) return {
+			ok: true,
+			value: void 0
+		};
+		try {
+			return {
+				ok: true,
+				value: await options.hydrate(messages.map((message) => message.notification), locale === null ? {} : { locale })
+			};
+		} catch (cause) {
+			return {
+				ok: false,
+				cause
+			};
+		}
+	};
+	async function deliverOne(channel, message, maxAttempts, hydration) {
 		const notification = message.notification;
 		try {
-			const result = await channel.send(message);
+			if (!hydration.ok) throw hydration.cause;
+			const text = options.render ? options.render(notification, {
+				...message.locale === null ? {} : { locale: message.locale },
+				...hydration.value === void 0 ? {} : { hydrated: hydration.value }
+			}) : void 0;
+			const result = await channel.send({
+				...message,
+				...text === void 0 ? {} : { text },
+				...hydration.value === void 0 ? {} : { hydrated: hydration.value }
+			});
 			const status = result?.status ?? "sent";
 			await call("complete_notification_delivery", {
 				delivery: message.deliveryId,
@@ -464,6 +532,7 @@ function createNotifications(options) {
 			subject_label: input.subject?.label,
 			summary: input.summary,
 			action_path: input.actionPath,
+			actions: input.actions,
 			priority: input.priority,
 			key: input.key,
 			channels: input.channels,
@@ -582,7 +651,8 @@ function createNotifications(options) {
 				type: input.type,
 				subject_type: input.subject.type,
 				subject_id: input.subject.id,
-				tenant: input.tenant ?? null
+				tenant: input.tenant ?? null,
+				...input.resolution === void 0 ? {} : { resolution: input.resolution }
 			}, updateOf);
 		},
 		subscribe(input) {

package/dist/blocks/numbering/index.d.ts

@@ -3,7 +3,7 @@ import { $ as SaasEventData, Ct as Events } from "../../events-vcqenSYU.js";
 import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 //#region src/blocks/numbering/numbering.d.ts
 interface NumberingOptions {
   readonly transport: BlockTransport;

package/dist/blocks/numbering/index.js

@@ -1,4 +1,4 @@
-import { t as numberingSqlOptions } from "../../options-D_bBVCXg.js";
+import { t as numberingSqlOptions } from "../../options-BzB2QxL3.js";
 import { o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { n as event, t as defineEvents } from "../../event-map-CtPFhcOp.js";

package/dist/blocks/oauth-server/index.d.ts

@@ -5,7 +5,7 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { n as BlockOptions } from "../../block-helpers-CRpAHrp_.js";
 import { s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 //#region src/blocks/oauth-server/oauth-server.d.ts
 declare const AUTH_METHODS: readonly ["none", "client_secret_basic", "client_secret_post"];
 declare const GRANT_TYPES: readonly ["authorization_code", "refresh_token", "client_credentials", "urn:ietf:params:oauth:grant-type:device_code"];

package/dist/blocks/oauth-server/index.js

@@ -2,7 +2,7 @@ import { n as dbError } from "../../errors-BVFgt8BZ.js";
 import { t as temporal } from "../../temporal-required-Dy0GGD8E.js";
 import { t as AsyncResult } from "../../result-ntFBW2p2.js";
 import { a as toBase64Url } from "../../base64-B9Wlsdj7.js";
-import { t as oauthServerSqlOptions } from "../../options-CEMawFrr.js";
+import { t as oauthServerSqlOptions } from "../../options-B685YSzQ.js";
 import { D as recordOf, F as stringsOf, I as textOf, N as sha256Hex, O as recordOrEmpty, T as randomToken, U as sqlTransport, d as enumOrThrow, h as instantOf, j as run, k as recordsOf, n as applyTemporal, o as blockCall, v as nullableInstant, y as nullableText } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { n as event, t as defineEvents } from "../../event-map-CtPFhcOp.js";

package/dist/blocks/onboarding/index.d.ts

@@ -4,8 +4,8 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { n as BlockOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
-import { n as Controller, t as AuthPort } from "../../controller-BW-5Opig.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
+import { n as Controller, t as AuthPort } from "../../controller-BR7CZ1R9.js";
 //#region src/blocks/onboarding/onboarding.d.ts
 type ChecklistScope = "user" | "organization";
 /** One step. `events` completes it when the outbox records one of those types. */

package/dist/blocks/onboarding/index.js

@@ -1,4 +1,4 @@
-import { t as onboardingSqlOptions } from "../../options-C_pb1Nd3.js";
+import { t as onboardingSqlOptions } from "../../options-Cb2FOFj5.js";
 import { n as whileSignedIn, t as defineController } from "../../controller-BEliOBOv.js";
 import { B as dbTransport, C as optionalText, H as rpcTransport, I as textOf, S as optionalInstant, U as sqlTransport, k as recordsOf, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";

package/dist/blocks/orders/index.d.ts

@@ -8,9 +8,9 @@ import { n as BlockOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-DZN2w69m.js";
 import { g as JobHandler } from "../../types-Czq9Xtpa.js";
-import { Bt as Action, c as BlockOf } from "../../define-block-C1RHXz7L.js";
+import { Bt as Action, c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { n as Money } from "../../money-BNRdJQzA.js";
-import { n as ConversionContext, t as ConversionClients } from "../../conversion-3iv2r7YC.js";
+import { n as ConversionContext, t as ConversionClients } from "../../conversion-BgtOfTaS.js";
 import { r as WebhookInput } from "../../signatures-Dkx9OE8j.js";
 import { i as PaymentEvent, n as Payment, o as PaymentProvider } from "../../payments-BYcN34Fp.js";
 import { n as MetricDefinition } from "../../metric-definition-EAYI1r2n.js";

package/dist/blocks/orders/index.js

@@ -1,7 +1,7 @@
 import { n as dbError } from "../../errors-BVFgt8BZ.js";
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
 import { a as ok, r as err, t as AsyncResult } from "../../result-ntFBW2p2.js";
-import { t as ordersSqlOptions } from "../../options-BZOliZvb.js";
+import { t as ordersSqlOptions } from "../../options-C3AdsFJ6.js";
 import { r as defineMetric } from "../../metric-definition-BjxVn4R5.js";
 import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, F as stringsOf, H as rpcTransport, I as textOf, S as optionalInstant, U as sqlTransport, d as enumOrThrow, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall, y as nullableText } from "../../block-helpers-CtBdjgO4.js";
 import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BfxX3682.js";

package/dist/blocks/organizations/index.d.ts

@@ -7,8 +7,9 @@ import { Ct as Events, W as InvitationEventData, Z as OrganizationEventData, o a
 import { r as BlockTemporalOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-DZN2w69m.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
-import { n as Controller, t as AuthPort } from "../../controller-BW-5Opig.js";
+import { N as PlatformRolesOption } from "../../authorization-IiE__z2m.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
+import { n as Controller, t as AuthPort } from "../../controller-BR7CZ1R9.js";
 //#region src/sql/modules/invitations-tables.d.ts
 declare const INVITATION_ERRORS: {
   readonly INVITATION_FORBIDDEN: "42501";
@@ -24,6 +25,8 @@ declare const INVITATION_ERRORS: {
   readonly INVITATION_SELF: "42501";
   readonly INVITATION_INVITER_REVOKED: "42501";
   readonly INVITATION_SCOPE_UNSUPPORTED: "0A000";
+  readonly INVITATION_ON_ACCEPT_INVALID: "22023";
+  readonly INVITATION_TEAM_UNKNOWN: "23514";
 };
 type InvitationError = keyof typeof INVITATION_ERRORS;
 //#endregion
@@ -59,6 +62,14 @@ interface InviteRequest<I extends object = Record<never, never>> {
    * `options.invitationFields`.
    */
   readonly fields?: Partial<I> & Readonly<Record<string, unknown>>;
+  /**
+   * Roles and teams granted on accept, with
+   * `blocks.invitations.options.onAccept`.
+   */
+  readonly onAccept?: {
+    readonly roles?: readonly string[];
+    readonly teams?: readonly string[];
+  };
 }
 /**
  * An invitation. `I` types the extra columns `options.invitationFields`
@@ -137,13 +148,18 @@ interface OrganizationMembership {
   readonly name: string;
   readonly slug?: string;
   readonly role: string;
+  /** Every role, with `blocks.memberships.options.roles.many`. */
+  readonly roles?: readonly string[];
   readonly disabledAt?: Temporal.Instant;
   readonly [column: string]: unknown;
 }
 /** A row `list_members` returns. */
 interface OrganizationMember {
   readonly userId: string;
+  /** The highest-ranked role when a member holds several. */
   readonly role: string;
+  /** Every role, with `blocks.memberships.options.roles.many`. */
+  readonly roles?: readonly string[];
   readonly disabledAt?: Temporal.Instant;
 }
 /** An open invitation `list_organization_invitations` returns. */
@@ -230,6 +246,17 @@ interface Organizations<F extends object = Record<never, never>, I extends objec
   /** Why a slug can't be used, or `undefined` when it can. */
   slugProblem(slug: string, exceptOrganizationId?: string): AsyncResult<SlugProblem | undefined>;
   updateMemberRole(organizationId: string, userId: string, role: string): AsyncResult<true>;
+  /**
+   * Adds a role to a member, with `blocks.memberships.options.roles.many`.
+   * `false` when they already held it.
+   */
+  addMemberRole(organizationId: string, userId: string, role: string): AsyncResult<boolean>;
+  /**
+   * Removes one of a member's roles, with
+   * `blocks.memberships.options.roles.many`. `false` when they didn't hold it;
+   * the last role and the last owner are refused.
+   */
+  removeMemberRole(organizationId: string, userId: string, role: string): AsyncResult<boolean>;
   removeMember(organizationId: string, userId: string): AsyncResult<true>;
   suspendMember(organizationId: string, userId: string): AsyncResult<boolean>;
   resumeMember(organizationId: string, userId: string): AsyncResult<boolean>;
@@ -260,9 +287,15 @@ interface Organizations<F extends object = Record<never, never>, I extends objec
   acceptInvitation(token: string): AsyncResult<{
     readonly organizationId: string | null;
   }>;
+  /**
+   * Emits `invitation.accepted` with the organization joined. The token calls
+   * don't know the invitation id, so they record the event only in the outbox,
+   * as `revokeInvitation` does for the organization id.
+   */
   acceptInvitationById(invitationId: string): AsyncResult<{
     readonly organizationId: string | null;
   }>;
+  /** Emits `invitation.declined` when the invitation was open. */
   declineInvitationById(invitationId: string): AsyncResult<boolean>;
   myInvitations(): AsyncResult<readonly Invitation<I>[]>;
 }
@@ -281,6 +314,8 @@ type OrganizationsEvents = {
   readonly "organization.member_suspended": OrganizationEventData;
   readonly "organization.member_resumed": OrganizationEventData;
   readonly "organization.role_changed": OrganizationEventData;
+  readonly "organization.role_added": OrganizationEventData;
+  readonly "organization.role_removed": OrganizationEventData;
   readonly "organization.ownership_transferred": OrganizationEventData;
   readonly "organization.switched": OrganizationEventData;
   readonly "invitation.created": InvitationEventData;
@@ -477,4 +512,4 @@ export declare function createInvitationsController<T extends {
   readonly id: string;
 } = OrganizationInvitationRow>(options: InvitationsControllerOptions<T>): InvitationsController<T>;
 //#endregion
-export { type BlockHooks, type BlockTransport, type BlockTransportMiddleware, type CreateOrganizationOptions, type Invitation, type InvitationChange, type InvitationChanges, type InvitationDraft, type InvitationErrorHint, type InvitationPreview, type InvitationSent, type InvitationStatus, type InvitationsActions, type InvitationsController, type InvitationsControllerOptions, type InvitationsSnapshot, type InviteRequest, type MemberChange, type MembersActions, type MembersController, type MembersControllerOptions, type MembersSnapshot, type OrganizationAttributes, type OrganizationInvitationRow, type OrganizationMember, type OrganizationMembership, type OrganizationRowSource, type OrganizationSource, type Organizations, type OrganizationsActions, type OrganizationsController, type OrganizationsControllerOptions, type OrganizationsEvents, type OrganizationsOptions, type OrganizationsSnapshot, type RpcClient, type SlugProblem, type SwitchResult, dbTransport, extendBlock, rpcTransport, sqlTransport, withBlockHooks, wrapTransport };
+export { type BlockHooks, type BlockTransport, type BlockTransportMiddleware, type CreateOrganizationOptions, type Invitation, type InvitationChange, type InvitationChanges, type InvitationDraft, type InvitationErrorHint, type InvitationPreview, type InvitationSent, type InvitationStatus, type InvitationsActions, type InvitationsController, type InvitationsControllerOptions, type InvitationsSnapshot, type InviteRequest, type MemberChange, type MembersActions, type MembersController, type MembersControllerOptions, type MembersSnapshot, type OrganizationAttributes, type OrganizationInvitationRow, type OrganizationMember, type OrganizationMembership, type OrganizationRowSource, type OrganizationSource, type Organizations, type OrganizationsActions, type OrganizationsController, type OrganizationsControllerOptions, type OrganizationsEvents, type OrganizationsOptions, type OrganizationsSnapshot, type PlatformRolesOption, type RpcClient, type SlugProblem, type SwitchResult, dbTransport, extendBlock, rpcTransport, sqlTransport, withBlockHooks, wrapTransport };

package/dist/blocks/organizations/index.js

@@ -2,7 +2,7 @@ import { n as dbError } from "../../errors-BVFgt8BZ.js";
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
 import { t as temporal } from "../../temporal-required-Dy0GGD8E.js";
 import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../../result-ntFBW2p2.js";
-import { n as organizationsSqlOptions, t as invitationsSqlOptions } from "../../options-Bp7sgKvl.js";
+import { n as organizationsSqlOptions, t as invitationsSqlOptions } from "../../options-CpZ2HlSU.js";
 import { n as whileSignedIn, t as defineController } from "../../controller-BEliOBOv.js";
 import { B as dbTransport, H as rpcTransport, U as sqlTransport, k as recordsOf, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
@@ -10,7 +10,7 @@ import { t as tenantOf } from "../../tenant-BgIiMQpo.js";
 import { r as blockEmitter } from "../../block-events-pBXPzwnW.js";
 import { a as readAllFields, n as blockFields, o as readFields, s as rowFields } from "../../block-fields-DE_FgpOU.js";
 import { n as defineBlock } from "../../define-block-BGqOO8B3.js";
-import { t as organizationsEvents } from "../../events-SqJLbb8q.js";
+import { t as organizationsEvents } from "../../events-DuLhzjP6.js";
 //#region src/blocks/organizations/organizations.ts
 const text = (value) => typeof value === "string" ? value : String(value);
 const optionalText = (value) => value === null || value === void 0 ? null : text(value);
@@ -80,6 +80,10 @@ function previewFrom(row) {
 		extra: extraOf(row, PREVIEW_KEYS)
 	};
 }
+const rolesOf = (row) => {
+	const roles = row["roles"];
+	return Array.isArray(roles) ? { roles: roles.map((role) => text(role)) } : {};
+};
 const disabledAtOf = (row) => {
 	const disabledAt = optionalText(row["disabled_at"]);
 	return disabledAt === null ? {} : { disabledAt: temporal().Instant.from(disabledAt) };
@@ -226,6 +230,34 @@ function organizationsClient(options) {
 				return true;
 			});
 		},
+		addMemberRole(organizationId, userId, role) {
+			return run("organizations", "add_member_role", {
+				organization: organizationId,
+				member: userId,
+				role
+			}, (value) => {
+				if (value === true) organizationEvent("organization.role_added", {
+					organizationId,
+					userId,
+					role
+				});
+				return value === true;
+			});
+		},
+		removeMemberRole(organizationId, userId, role) {
+			return run("organizations", "remove_member_role", {
+				organization: organizationId,
+				member: userId,
+				role
+			}, (value) => {
+				if (value === true) organizationEvent("organization.role_removed", {
+					organizationId,
+					userId,
+					role
+				});
+				return value === true;
+			});
+		},
 		removeMember(organizationId, userId) {
 			return run("organizations", "remove_member", {
 				organization: organizationId,
@@ -314,6 +346,7 @@ function organizationsClient(options) {
 						name: text(row["name"]),
 						...slug === null ? {} : { slug },
 						role: text(row["role"]),
+						...rolesOf(row),
 						...disabledAtOf(row)
 					});
 				}
@@ -324,6 +357,7 @@ function organizationsClient(options) {
 			return run("organizations", "list_members", { organization: organizationId }, (value) => recordsOf(value, "list_members").map((row) => ({
 				userId: text(row["user_id"]),
 				role: text(row["role"]),
+				...rolesOf(row),
 				...disabledAtOf(row)
 			})));
 		},
@@ -349,7 +383,8 @@ function organizationsClient(options) {
 					invitee_role: request.role,
 					valid_for: request.validFor,
 					prefill: request.prefill,
-					fields: checked.data
+					fields: checked.data,
+					...request.onAccept === void 0 ? {} : { on_accept: request.onAccept }
 				}, (value) => sent(value, "invite_member", false));
 			});
 		},
@@ -392,13 +427,23 @@ function organizationsClient(options) {
 			return run("invitations", "accept_invitation", { token }, accepted);
 		},
 		acceptInvitationById(invitationId) {
-			return run("invitations", "accept_invitation_by_id", { invitation_id: invitationId }, accepted);
+			return run("invitations", "accept_invitation_by_id", { invitation_id: invitationId }, (value) => {
+				const joined = accepted(value);
+				invitationEvent("invitation.accepted", {
+					invitationId,
+					...joined.organizationId === null ? {} : { organizationId: joined.organizationId }
+				});
+				return joined;
+			});
 		},
 		myInvitations() {
 			return run("invitations", "my_invitations", {}, (value) => (Array.isArray(value) ? value.filter(isRecord) : []).map(invitationFrom)).andThen((invitations) => readAllFields(invitationFields, invitations));
 		},
 		declineInvitationById(invitationId) {
-			return run("invitations", "decline_invitation_by_id", { invitation_id: invitationId }, (value) => value === true);
+			return run("invitations", "decline_invitation_by_id", { invitation_id: invitationId }, (value) => {
+				if (value === true) invitationEvent("invitation.declined", { invitationId });
+				return value === true;
+			});
 		}
 	};
 }

package/dist/blocks/outbox/index.d.ts

@@ -1,6 +1,6 @@
 import { n as SqlClient } from "../../executor-hGjrop3A.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { a as OutboxEvent, c as OutboxPurgeOptions, d as RegisterOptions, f as RelayOptions, h as outboxCloudEvent, i as OutboxDeadLetter, l as OutboxRouteOptions, m as createOutbox, n as HistoryFilter, o as OutboxHandler, p as RelayResult, r as Outbox, s as OutboxOptions, t as EmitOptions, u as OutboxRouteResult } from "../../outbox-HxjZTfF6.js";
 //#region src/blocks/outbox/manifest.d.ts
 /**

package/dist/blocks/outbox/index.js

@@ -1,6 +1,6 @@
 import { t as DbException } from "../../db-exception-Lngc1W49.js";
 import { s as toDbError } from "../../result-ntFBW2p2.js";
-import { t as outboxSqlOptions } from "../../options-SViK_2x2.js";
+import { t as outboxSqlOptions } from "../../options-62woPFn3.js";
 import { B as dbTransport, H as rpcTransport, R as toInstant, U as sqlTransport, j as run, n as applyTemporal, o as blockCall, r as asDbError, s as budget, w as pageOf, z as workerId } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import "../../cloud-event-XsM53POL.js";

package/dist/blocks/passes/index.d.ts

@@ -6,8 +6,8 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { a as BlockTenantOptions, r as BlockTemporalOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-DZN2w69m.js";
-import { n as passesSqlOptions, t as PassesSqlOptions } from "../../options-DcOx8_3X.js";
-import { Sn as EntitySchema, c as BlockOf, ln as RecordBindingWrite, mn as RecordRowInput, rn as RecordBinding } from "../../define-block-C1RHXz7L.js";
+import { n as passesSqlOptions, t as PassesSqlOptions } from "../../options-HnfETSHr.js";
+import { Sn as EntitySchema, c as BlockOf, ln as RecordBindingWrite, mn as RecordRowInput, rn as RecordBinding } from "../../define-block-CJWiDWa5.js";
 import { n as Booking } from "../../bookings-Dox2rced.js";
 import { n as Jwks } from "../../jws-D0toeQlA.js";
 import { o as Signer } from "../../signing-keys-BNDUxpQL.js";

package/dist/blocks/passes/index.js

@@ -1,7 +1,7 @@
 import { n as dbError } from "../../errors-BVFgt8BZ.js";
 import { t as temporal } from "../../temporal-required-Dy0GGD8E.js";
 import { t as AsyncResult } from "../../result-ntFBW2p2.js";
-import { t as passesSqlOptions } from "../../options-xD4_FRUq.js";
+import { t as passesSqlOptions } from "../../options-56zYYXxc.js";
 import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, H as rpcTransport, I as textOf, S as optionalInstant, U as sqlTransport, d as enumOrThrow, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { n as entitySchema } from "../../entity-schema-BDv6w-OQ.js";

package/dist/blocks/permissions/index.d.ts

@@ -3,9 +3,9 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { n as BlockOptions, o as BlockTenant } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
-import { B as PermissionFlags, H as can, U as permissionFlags, V as PermissionSet, W as permissionMatches } from "../../index-CcAmFNVi.js";
-import { n as Controller, t as AuthPort } from "../../controller-BW-5Opig.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
+import { B as PermissionFlags, H as can, U as permissionFlags, V as PermissionSet, W as permissionMatches } from "../../index-C0t-vNIt.js";
+import { n as Controller, t as AuthPort } from "../../controller-BR7CZ1R9.js";
 //#region src/blocks/permissions/permissions.d.ts
 interface PermissionsOptions extends BlockOptions {
   /** `withBlockHooks` hooks around the client's methods. */
@@ -45,7 +45,7 @@ interface Permissions<K extends string = string> {
 export declare function createPermissions<K extends string = string>(options: PermissionsOptions): Permissions<K>;
 //#endregion
 //#region src/blocks/permissions/manifest.d.ts
-/** The `access` block's manifest (ADR 0029). */
+/** The `permissions` block's manifest (ADR 0029). */
 export declare const permissionsBlock: BlockOf<"permissions", typeof createPermissions>;
 //#endregion
 //#region src/blocks/permissions/client.d.ts

package/dist/blocks/permissions/index.js

@@ -1,5 +1,5 @@
 import { a as ok, t as AsyncResult } from "../../result-ntFBW2p2.js";
-import { t as permissionsSqlOptions } from "../../options-CvD9vNvx.js";
+import { t as permissionsSqlOptions } from "../../options-DM1qaMMQ.js";
 import { t as currentTenant } from "../../tenant-source-bqWpSr86.js";
 import { n as whileSignedIn, t as defineController } from "../../controller-BEliOBOv.js";
 import { B as dbTransport, H as rpcTransport, U as sqlTransport, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
@@ -36,7 +36,7 @@ function createPermissions(options) {
 }
 //#endregion
 //#region src/blocks/permissions/manifest.ts
-/** The `access` block's manifest (ADR 0029). */
+/** The `permissions` block's manifest (ADR 0029). */
 const permissionsBlock = defineBlock({
 	name: "permissions",
 	sql: ["permissions"],

package/dist/blocks/pipelines/index.d.ts

@@ -8,7 +8,7 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { r as BlockTemporalOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-DZN2w69m.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { n as Money } from "../../money-BNRdJQzA.js";
 import { t as RankNeighbors } from "../../rank-result-Bwe7igy-.js";
 //#region src/blocks/pipelines/pipelines.d.ts

package/dist/blocks/pipelines/index.js

@@ -1,5 +1,5 @@
 import { t as AsyncResult } from "../../result-ntFBW2p2.js";
-import { t as pipelinesSqlOptions } from "../../options-BfLmA375.js";
+import { t as pipelinesSqlOptions } from "../../options-xq4MXG1M.js";
 import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, H as rpcTransport, I as textOf, U as sqlTransport, d as enumOrThrow, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { n as event, t as defineEvents } from "../../event-map-CtPFhcOp.js";

package/dist/blocks/posts/index.d.ts

@@ -7,8 +7,8 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { n as BlockOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-DZN2w69m.js";
-import { n as postsSqlOptions, t as PostsSqlOptions } from "../../options-D6as77gU.js";
-import { Sn as EntitySchema, c as BlockOf } from "../../define-block-C1RHXz7L.js";
+import { n as postsSqlOptions, t as PostsSqlOptions } from "../../options-DRIgHh4O.js";
+import { Sn as EntitySchema, c as BlockOf } from "../../define-block-CJWiDWa5.js";
 //#region src/blocks/posts/posts.d.ts
 declare const BOARD_KINDS: readonly ["forum", "feedback"];
 declare const POST_STATUSES: readonly ["open", "under_review", "planned", "in_progress", "done", "closed"];

package/dist/blocks/posts/index.js

@@ -1,6 +1,6 @@
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
 import { t as AsyncResult } from "../../result-ntFBW2p2.js";
-import { t as postsSqlOptions } from "../../options-Cyu0hgmN.js";
+import { t as postsSqlOptions } from "../../options-cVKZu9b0.js";
 import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, H as rpcTransport, I as textOf, S as optionalInstant, U as sqlTransport, d as enumOrThrow, k as recordsOf, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { n as entitySchema } from "../../entity-schema-BDv6w-OQ.js";