better-supabase 0.16.0 → 0.18.0

package/dist/blocks/vercel-marketplace/index.js

@@ -2,7 +2,7 @@ import { n as dbError, r as dbErrorOf } from "../../errors-BVFgt8BZ.js";
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
 import { a as ok, r as err, t as AsyncResult } from "../../result-ntFBW2p2.js";
 import { a as methodNotAllowed, o as problemResponse } from "../../problem-Bf0cJ7tk.js";
-import { t as vercelMarketplaceSqlOptions } from "../../options-RKYdmIdV.js";
+import { t as vercelMarketplaceSqlOptions } from "../../options-DZRpXKQE.js";
 import { C as optionalText, D as recordOf, I as textOf, U as sqlTransport, f as errorText, k as recordsOf, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { n as event, t as defineEvents } from "../../event-map-CtPFhcOp.js";

package/dist/blocks/versions/index.d.ts

@@ -8,7 +8,7 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { n as BlockOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
-import { Sn as EntitySchema, c as BlockOf, ln as RecordBindingWrite, mn as RecordRowInput, rn as RecordBinding } from "../../define-block-C1RHXz7L.js";
+import { Sn as EntitySchema, c as BlockOf, ln as RecordBindingWrite, mn as RecordRowInput, rn as RecordBinding } from "../../define-block-CJWiDWa5.js";
 //#region src/blocks/versions/json-patch.d.ts
 /** A JSON value, as a version's content holds it. */
 type JsonValue = null | boolean | number | string | readonly JsonValue[] | {

package/dist/blocks/versions/index.js

@@ -1,5 +1,5 @@
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
-import { t as versionsSqlOptions } from "../../options-BQIYfx9F.js";
+import { t as versionsSqlOptions } from "../../options-DZLkeqWn.js";
 import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, H as rpcTransport, I as textOf, U as sqlTransport, d as enumOrThrow, k as recordsOf, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { n as entitySchema } from "../../entity-schema-BDv6w-OQ.js";

package/dist/blocks/waitlist/index.d.ts

@@ -7,7 +7,7 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { n as BlockOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { n as VerifyOptions } from "../../signatures-Dkx9OE8j.js";
 //#region src/blocks/waitlist/waitlist.d.ts
 type WaitlistStatus = "waiting" | "approved" | "rejected" | "joined";

package/dist/blocks/waitlist/index.js

@@ -1,5 +1,5 @@
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
-import { t as waitlistSqlOptions } from "../../options-EsUh744F.js";
+import { t as waitlistSqlOptions } from "../../options-DKoQoRCy.js";
 import { B as dbTransport, C as optionalText, D as recordOf, H as rpcTransport, I as textOf, R as toInstant, S as optionalInstant, U as sqlTransport, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { n as event, t as defineEvents } from "../../event-map-CtPFhcOp.js";

package/dist/blocks/webhooks/index.d.ts

@@ -9,11 +9,11 @@ import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport,
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
 import { t as BlockProblemOptions } from "../../problem-DNwN8iGz.js";
 import { g as JobHandler, x as QueueSchemas, y as Queue } from "../../types-Czq9Xtpa.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { i as EventSink, t as CloudEvent } from "../../cloud-event-CzZTJkXv.js";
 import { g as SubscriberPolicy, i as AuthorizationHooks } from "../../authorization-hooks-D_pwXlBs.js";
 import { a as verifySharedSecret, i as signWebhook, n as VerifyOptions, o as verifyWebhook, r as WebhookInput, t as VerifiedWebhook } from "../../signatures-Dkx9OE8j.js";
-import { a as DatabaseWebhookPayload, c as hookError, d as stripeInboxVerify, f as verifyStripeWebhook, i as DatabaseChange, l as isDatabaseWebhook, n as AuthHookKind, o as authHook, r as AuthHooks, s as databaseChange, t as AuthHookError, u as signStripeWebhook } from "../../verify-CjvNLY7N.js";
+import { a as DatabaseWebhookPayload, c as hookError, d as stripeInboxVerify, f as verifyStripeWebhook, i as DatabaseChange, l as isDatabaseWebhook, n as AuthHookKind, o as authHook, r as AuthHooks, s as databaseChange, t as AuthHookError, u as signStripeWebhook } from "../../verify-DEqY__0N.js";
 import { A as IncomingVerify, C as isPublicAddress, D as IncomingDelivery, E as CreatedIncomingWebhook, F as UpdateIncomingWebhookInput, I as UpdatedIncomingWebhook, M as IncomingWebhooks, N as IncomingWebhooksOptions, O as IncomingDestination, P as RotatedIncomingSecret, S as ResolveHost, T as CreateIncomingWebhookInput, _ as WebhookResponse, a as WebhookSignInput, b as AllowUrl, c as standardWebhooks, d as RotateSecretOptions, f as WebhookSecretStore, g as WebhookRequest, h as WebhookPolicyError, i as StandardWebhooksOptions, j as IncomingWebhook, k as IncomingDestinationResult, l as standardWebhooksAsymmetric, m as FetchTransportOptions, n as HmacSignerOptions, o as WebhookSigner, p as sqlSecretStore, r as RawSigner, s as hmacSigner, t as AsymmetricWebhooksOptions, u as webhookPublicKey, v as WebhookTransport, w as publicUrl, x as PublicUrlOptions, y as fetchTransport } from "../../signers-BAEzvTJ0.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/core/hmac.d.ts

package/dist/blocks/webhooks/index.js

@@ -6,7 +6,7 @@ import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../../resul
 import { i as toBase64, r as fromBase64 } from "../../base64-B9Wlsdj7.js";
 import { a as methodNotAllowed, o as problemResponse } from "../../problem-Bf0cJ7tk.js";
 import { t as MAX_BATCH } from "../../batch-limit-DKVQDz4o.js";
-import { n as webhooksOutSqlOptions, t as webhooksInSqlOptions } from "../../options-BvtnxHfK.js";
+import { n as webhooksOutSqlOptions, t as webhooksInSqlOptions } from "../../options-D96dScev.js";
 import { B as dbTransport, C as optionalText, D as recordOf, E as readBodyCapped, H as rpcTransport, L as toBlockError, M as seconds, R as toInstant, U as sqlTransport, c as chunksOf, f as errorText, i as batchResultsOf, k as recordsOf, n as applyTemporal, o as blockCall, r as asDbError, s as budget } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { a as stripTypePrefix } from "../../cloud-event-XsM53POL.js";

package/dist/blocks/workflow-editor/index.d.ts

@@ -3,11 +3,11 @@ import { t as StandardSchemaV1 } from "../../standard-DBV730sF.js";
 import { r as FieldsOf } from "../../block-fields-BE7pInWZ.js";
 import { Ct as Events, gt as WorkflowEventData } from "../../events-vcqenSYU.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { g as Workflows, n as WorkflowRun } from "../../workflows-B0ZPAQu0.js";
-import { p as SubscriptionStatus } from "../../topic-CZXHhZye.js";
-import { n as TopicPort } from "../../watch-topic-BAxoPKZx.js";
-import { n as Controller, t as AuthPort } from "../../controller-BW-5Opig.js";
+import { p as SubscriptionStatus } from "../../topic-nQYxoTaU.js";
+import { n as TopicPort } from "../../watch-topic-UGSEWAqR.js";
+import { n as Controller, t as AuthPort } from "../../controller-BR7CZ1R9.js";
 import { A as WorkflowVersionOwner, B as WorkflowGraphNode, C as WorkflowGrantPrincipal, D as WorkflowTrigger, E as WorkflowStepInfo, F as WorkflowFilterCondition, G as durationMs, H as WorkflowNodeKind, I as WorkflowFilterField, J as matchesFilter, K as evaluateCondition, L as WorkflowGraph, M as GraphScope, N as WorkflowCondition, O as WorkflowTriggerKind, P as WorkflowConditionOperator, R as WorkflowGraphDiff, S as WorkflowGrantAction, T as WorkflowNodeRunStatus, U as approved, V as WorkflowNodeCondition, W as diffGraphs, X as validateGraph, Y as topologicalOrder, _ as WorkflowCredential, a as CredentialInput, b as WorkflowDefinitionScope, c as GraphCompiler, d as RunInput, f as TestRunInput, g as WorkflowBuilderHooks, h as WorkflowAlert, i as BuilderStarter, j as WorkflowVersionStatus, k as WorkflowVersion, l as NodeRunRecord, m as VersionSaveOptions, n as BuilderOptions, o as DefinitionInput, p as TriggerInput, q as filterConditionOf, r as BuilderStartCall, s as GrantInput, t as AlertInput, u as PublishOptions, v as WorkflowDefinition, w as WorkflowNodeRun, x as WorkflowEditor, y as WorkflowDefinitionGrant, z as WorkflowGraphEdge } from "../../types-DsRfiQ0v.js";
 import { a as GraphSubject, c as graphRunFields, i as GraphStepCall, l as startNodeOf, n as GraphRunFields, o as approvalToken, r as GraphRuntime, s as executeGraph, t as GraphApprovalCall } from "../../executor-Bi056Cnj.js";
 //#region src/blocks/workflow-editor/workflow-editor.d.ts

package/dist/blocks/workflow-editor/index.js

@@ -1,7 +1,7 @@
 import { n as dbError } from "../../errors-BVFgt8BZ.js";
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
 import { a as ok, r as err, t as AsyncResult } from "../../result-ntFBW2p2.js";
-import { t as workflowEditorSqlOptions } from "../../options-DgQo80Xh.js";
+import { t as workflowEditorSqlOptions } from "../../options-DFpyP1bg.js";
 import { n as whileSignedIn, t as defineController } from "../../controller-BEliOBOv.js";
 import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, F as stringsOf, H as rpcTransport, I as textOf, M as seconds, O as recordOrEmpty, S as optionalInstant, T as randomToken, U as sqlTransport, d as enumOrThrow, k as recordsOf, n as applyTemporal, o as blockCall, p as injectableOf } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";

package/dist/blocks/workflows/index.d.ts

@@ -1,11 +1,11 @@
 import { b as DbError } from "../../result-DZeA5KS6.js";
 import { Ct as Events, _t as WorkflowRunEventData } from "../../events-vcqenSYU.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
-import { c as BlockOf } from "../../define-block-C1RHXz7L.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { _ as WorkflowsHooks, a as WorkflowRunStatus, c as WorkflowScheduleInput, d as WorkflowStartTicket, f as WorkflowStarter, g as Workflows, h as WorkflowTickResult, i as WorkflowRunRecord, l as WorkflowStartCall, m as WorkflowTickOptions, n as WorkflowRun, o as WorkflowRunsQuery, s as WorkflowSchedule, u as WorkflowStartRequest, v as WorkflowsOptions, y as createWorkflows } from "../../workflows-B0ZPAQu0.js";
-import { p as SubscriptionStatus } from "../../topic-CZXHhZye.js";
-import { n as TopicPort } from "../../watch-topic-BAxoPKZx.js";
-import { n as Controller, t as AuthPort } from "../../controller-BW-5Opig.js";
+import { p as SubscriptionStatus } from "../../topic-nQYxoTaU.js";
+import { n as TopicPort } from "../../watch-topic-UGSEWAqR.js";
+import { n as Controller, t as AuthPort } from "../../controller-BR7CZ1R9.js";
 //#region src/blocks/workflows/client.d.ts
 interface WorkflowRunsControllerOptions {
   readonly client: {

package/dist/{channel-BjvGO39m.d.ts → channel-JcMd5lNP.d.ts}

@@ -7,6 +7,20 @@ interface NotificationSubject {
   /** Shown in the list, e.g. the task title, kept as it was at send time. */
   readonly label?: string;
 }
+/**
+ * A button on a notification, e.g. Approve. The app runs `operation` with
+ * `payload` when the recipient picks it, then calls `resolve` with the
+ * outcome.
+ */
+interface NotificationAction {
+  /** Unique within the notification: `[A-Za-z0-9_.:-]`, at most 64 characters. */
+  readonly key: string;
+  /** At most 100 characters. */
+  readonly label: string;
+  /** The app's name for what the action does, e.g. `approvals.approve`. */
+  readonly operation?: string;
+  readonly payload?: Readonly<Record<string, unknown>>;
+}
 /** One notification as its recipient sees it. */
 interface NotificationItem<K extends string = string, D = unknown> {
   /** The recipient row id: pass it to `markRead` and `dismiss`. */
@@ -20,10 +34,17 @@ interface NotificationItem<K extends string = string, D = unknown> {
   readonly subject: NotificationSubject | null;
   readonly summary: string | null;
   readonly actionPath: string | null;
+  /**
+   * Empty without the events table's `actions` column (notifications version
+   * 9).
+   */
+  readonly actions: readonly NotificationAction[];
   readonly priority: string | null;
   readonly createdAt: Temporal.Instant;
   readonly readAt: Temporal.Instant | null;
   readonly resolvedAt: Temporal.Instant | null;
+  /** What `resolve` stored for this recipient, e.g. `{ action: "approve" }`. */
+  readonly resolution: Readonly<Record<string, unknown>> | null;
   /** The events table's extra columns (`options.extraColumns`), by column name. */
   readonly fields: Readonly<Record<string, unknown>>;
 }
@@ -44,9 +65,16 @@ interface NotificationMessage {
   readonly userId: string;
   /** The recipient's `auth.users` email, for email channels. */
   readonly email: string | null;
+  /** The recipient's profile locale, when the profiles block is installed. */
+  readonly locale: string | null;
   readonly notification: NotificationItem;
-  /** What `render` returned for it, when `createNotifications` has one. */
+  /**
+   * What `render` returned for it in the recipient's locale, when
+   * `createNotifications` has one.
+   */
   readonly text?: RenderedText;
+  /** What `hydrate` returned for the batch, when `createNotifications` has one. */
+  readonly hydrated?: unknown;
 }
 interface NotificationSendResult {
   /** `skipped` when the channel decided not to send. Defaults to `sent`. */
@@ -74,4 +102,4 @@ interface NotificationChannel {
   send(message: NotificationMessage): NotificationSendResult | void | Promise<NotificationSendResult | void>;
 }
 //#endregion
-export { NotificationSubject as a, NotificationItem as i, NotificationMessage as n, RenderedText as o, NotificationSendResult as r, NotificationChannel as t };
+export { NotificationItem as a, NotificationAction as i, NotificationMessage as n, NotificationSubject as o, NotificationSendResult as r, RenderedText as s, NotificationChannel as t };

package/dist/cli/{add-D7TkPdco.js → add-B1S3yK4L.js}

@@ -1,28 +1,28 @@
-import { a as list, p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { a as list, p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
-import { t as VERSION } from "./version-B2Dr6VmJ.js";
+import { t as VERSION } from "./version-TgFM8sOd.js";
 import { a as parseNames, n as CliError } from "./errors-BTe6A15O.js";
 import { r as readIfExists, t as display } from "./io-DH1kcmmP.js";
-import { t as loadSnapshot } from "./snapshot-uTUlEzY2.js";
+import { t as loadSnapshot } from "./snapshot-BXmU3IXN.js";
 import { t as isRecord } from "./guards-CUlDNYZs.js";
-import { a as toCatalog } from "./source-D2gJHKwC.js";
-import { f as dataMigration } from "./module-migration-O_IxewFs.js";
-import { a as findConfig, f as INTEGRATIONS, s as loadConfig } from "./config-9t5ec_N7.js";
+import { a as toCatalog } from "./source-irttnsEb.js";
+import { n as dataMigration } from "./migrations-BoIyGczt.js";
+import { a as findConfig, f as INTEGRATIONS, s as loadConfig } from "./config-BJSqMi04.js";
 import { i as changeLines, n as PLAN_ARGS, r as applyPlan, u as planResult } from "./files-CX71yBm8.js";
-import { a as wiringFiles, d as libEntry, f as needsLib, i as wiringChecklist, l as importFrom, n as latestMigrationVersion, o as wiringFor, p as resolveIntegrations, s as TEMPLATES, u as isIntegration } from "./migration-safety-BnnXPAro.js";
+import { a as wiringFiles, d as libEntry, f as needsLib, i as wiringChecklist, l as importFrom, n as latestMigrationVersion, o as wiringFor, p as resolveIntegrations, s as TEMPLATES, u as isIntegration } from "./migration-safety-DYo1vVWC.js";
 import { n as installCommand, t as detectProject } from "./detect-D9JaAX20.js";
 import { d as setBlockInJson, f as setPathInConfig, h as setPresetInJson, m as setPresetInConfig, n as addBlocksToJson, p as setPathInJson, r as addBlocksToWiring, t as addBlocksToConfig, u as setBlockInConfig } from "./config-edit-CrWfk8s3.js";
-import { t as syncModules } from "./sync-CZMRB3aU.js";
-import { t as addModules } from "./add-I8OW-qJH.js";
-import { n as ident } from "./live-DGdLR41j.js";
-import { t as blockNames } from "./blocks-xk-SE8gS.js";
-import { i as sourceArgs, n as SOURCE_ARGS } from "./source-args-IpJRJO5t.js";
+import { t as syncModules } from "./sync-s1iKFIos.js";
+import { t as addModules } from "./add-D7YIXslp.js";
+import { n as ident } from "./live-B38ePuRS.js";
+import { t as blockNames } from "./blocks-DDm1Zc2S.js";
+import { i as sourceArgs, n as SOURCE_ARGS } from "./source-args-DlckPVje.js";
 import { existsSync } from "node:fs";
 import { dirname, join, posix, resolve } from "node:path";
 import { readFile } from "node:fs/promises";
 import { INTEGRATION_INFO, blockEntrySource } from "better-supabase/config";
 import { DEFAULT_CONVENTIONS, PRESET_CATALOG, PRESET_FRAMEWORKS, PRESET_NAMES, PRESET_TENANT_NAMES, designConfig, diffAppTables, glueCommand, isPresetName, presetAndDesignOf, presetField, presetFromSpec, presetSpec, presetValueLabel, readDesignFile, resolvePreset } from "better-supabase/preset";
-import { SQL_MODULES, adoptedColumnProblems, migrationOptionUses, moduleBody, moduleIdType } from "better-supabase/sql";
+import { SQL_MODULES, adoptedColumnProblems, migrationOptionUses, moduleBody, moduleIdType, moduleWritesText } from "better-supabase/sql";
 import { toSnake } from "better-supabase";
 //#region src/cli/conventions.ts
 const arg = (key, description) => ({
@@ -395,6 +395,11 @@ function proposeAdoption(block, tables, options = {}) {
 				else warnings.push(`${name} has no column for ${logical}.${match.logical}, so the block's migration adds ${table.columns[match.logical]}. Map blocks.${block}.columns.${logical}.${match.logical} instead when another column holds it.`);
 				continue;
 			}
+			if ((table.optional?.includes(match.logical) === true && moduleWritesText(block, logical, match.logical) ? existing.columns.find((column) => column.name === match.column && column.isEnum === true) : void 0) !== void 0) {
+				mapped[match.logical] = null;
+				warnings.push(`${name}.${match.column} is an enum, and the block writes text into ${logical}.${match.logical}, so it leaves that column unmapped. Change ${match.column} to text with a check constraint, then map blocks.${block}.columns.${logical}.${match.logical} to it.`);
+				continue;
+			}
 			if (match.column !== table.columns[match.logical]) mapped[match.logical] = match.column;
 			if (match.logical === "tenant" && idType === void 0) {
 				const udt = existing.columns.find((column) => column.name === match.column)?.udt;
@@ -405,6 +410,8 @@ function proposeAdoption(block, tables, options = {}) {
 		if (Object.keys(mapped).length > 0) entryColumns[logical] = mapped;
 	}
 	const current = options.blocks?.[block];
+	const governed = current?.ownTablePolicies === void 0 ? [...chosen.values()].filter((table) => table !== null && (table.policies ?? []).some((policy) => policy.permissive && !policy.name.startsWith("bsb_"))).map((table) => `${table.schema}.${table.name}`) : [];
+	if (governed.length > 0) warnings.push(`${governed.join(", ")} already ${governed.length === 1 ? "has" : "have"} permissive policies of your own. To keep the block's bsb_ policies off ${governed.length === 1 ? "it" : "them"}, set blocks.${block}.ownTablePolicies: "app"; otherwise the block adds a policy for each command yours don't cover, and doctor (BS347) reports one that is wider than yours.`);
 	const entry = {
 		...current,
 		tables: entryTables,

package/dist/cli/add-BQPJnapO.js

@@ -0,0 +1 @@
+export { t as addCommand } from "./add-B1S3yK4L.js";

package/dist/cli/{add-I8OW-qJH.js → add-D7YIXslp.js}

@@ -1,8 +1,8 @@
 import { n as CliError } from "./errors-BTe6A15O.js";
-import { T as providerLabel, _ as layoutFor, h as MEMBERSHIP_CLAIM_MODULES, v as providerOwnsMemberships } from "./module-migration-O_IxewFs.js";
+import { c as layoutFor, g as providerLabel, l as providerOwnsMemberships, o as MEMBERSHIP_CLAIM_MODULES } from "./migrations-BoIyGczt.js";
 import { r as applyPlan } from "./files-CX71yBm8.js";
 import { n as addBlocksToJson, s as keyText, t as addBlocksToConfig } from "./config-edit-CrWfk8s3.js";
-import { a as write, i as unlistedModuleFiles, r as nextStep } from "./sync-CZMRB3aU.js";
+import { a as write, i as unlistedModuleFiles, r as nextStep } from "./sync-s1iKFIos.js";
 import { basename, dirname } from "node:path";
 import { readFile } from "node:fs/promises";
 import { SQL_MODULES, resolveBlocks } from "better-supabase/sql";

package/dist/cli/{backfill-DIz5DnlQ.js → backfill-BwkyNhlC.js}

@@ -1,10 +1,10 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CbuPvI2x.js";
-import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-9t5ec_N7.js";
+import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-BJSqMi04.js";
 import { t as connect } from "./db-CQCLx7cx.js";
-import { n as ident } from "./live-DGdLR41j.js";
-import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-IpJRJO5t.js";
+import { n as ident } from "./live-B38ePuRS.js";
+import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-DlckPVje.js";
 //#region src/cli/commands/backfill.ts
 const DEFAULT_BATCH = 1e3;
 const ARGS = {

package/dist/cli/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as run } from "./run-MRET30vh.js";
+import { i as run } from "./run-x9ZY4Tm0.js";
 import { t as colorEnabled } from "./style-Bm2X5JrN.js";
 import { existsSync } from "node:fs";
 import { basename } from "node:path";

package/dist/cli/{blocks-Bp5RPoft.js → blocks-CBqENu3C.js}

@@ -1 +1 @@
-export { n as blocksListCommand, r as blocksSearchCommand, i as blocksViewCommand } from "./blocks-xk-SE8gS.js";
+export { n as blocksListCommand, r as blocksSearchCommand, i as blocksViewCommand } from "./blocks-DDm1Zc2S.js";

package/dist/cli/{blocks-xk-SE8gS.js → blocks-DDm1Zc2S.js}

@@ -1,7 +1,7 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { t as SQL_ARGS } from "./args-UEwg0l-N.js";
-import { n as listModules, t as printModule } from "./print-DosQIFSy.js";
+import { n as listModules, t as printModule } from "./print-CRon4lXf.js";
 import { t as decodePresetInput } from "./preset-BwmIfFnh.js";
 import { BLOCK_CATEGORIES } from "better-supabase/blocks";
 import { PRESET_CATALOG, PRESET_NAMES, glueCommand } from "better-supabase/preset";

package/dist/cli/{cache-AznIssjI.js → cache-DE2IH1-C.js}

@@ -1,4 +1,4 @@
-import { t as VERSION } from "./version-B2Dr6VmJ.js";
+import { t as VERSION } from "./version-TgFM8sOd.js";
 import { dirname, resolve } from "node:path";
 import { createHash } from "node:crypto";
 import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";

package/dist/cli/{codemod-Aewxza6i.js → codemod-OHKhVV-v.js}

@@ -1,10 +1,10 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
-import { t as migrateCliCall } from "./moved-CsfDQcyk.js";
+import { t as migrateCliCall } from "./moved-DVwgE8lV.js";
 import { t as isRecord$1 } from "./guards-CUlDNYZs.js";
 import { a as changedFiles, i as changeLines, r as applyPlan, u as planResult } from "./files-CX71yBm8.js";
-import { i as schemasDirOf, n as migrationsDir, o as writtenByBlocks } from "./sql-layout-lUWenjJw.js";
+import { i as schemasDirOf, n as migrationsDir, o as writtenByBlocks } from "./sql-layout-D8QrNvt4.js";
 import { a as configObject, c as mask, f as setPathInConfig, g as skipSpace, h as setPresetInJson, i as closingIndex, l as properties, m as setPresetInConfig, o as indentAt, p as setPathInJson, t as addBlocksToConfig, v as codeRanges } from "./config-edit-CrWfk8s3.js";
 import { i as legacyPrefixNames, n as LEGACY_PREFIXES, t as LEGACY_CLAIMS } from "./legacy-prefix-DkTA3Rhx.js";
 import { a as REVIEW_0_15, c as renameSubpaths, r as PLUGIN_IMPORT_RENAMES, s as SUBPATH_RENAMES_0_15, t as BLOCK_EXPORT_RENAMES } from "./codemod-block-renames-BuSaTE_G.js";
@@ -1845,7 +1845,7 @@ const CODEMODS = {
 				message: "Delegated tokens are narrowed inside `member_can`, `platform_can` and `tenant_ids_with`: a permission passes only when one of the token's scopes maps to it. Map scopes in `blocks.access.scopes` or `authorization.delegation.scopes`; a `token_scope_allows` check in a write policy is now covered by the cap"
 			},
 			{
-				pattern: /\b(has_organization_role|member_organization_ids|organization_member_role)\s*\(/,
+				pattern: /\b(has_organization_role|member_organization_ids|organization_member_roles?)\s*\(/,
 				message: "Under the provider model the role helpers take membership from the provider's `memberIds`, and a role name check skips the delegation cap (doctor BS334): check a permission with `tenant_ids_with('<permission>')` or `member_can()`"
 			},
 			{

package/dist/cli/{command-CQ61x6gN.js → command-BWEEXmtz.js}

@@ -516,6 +516,26 @@ const COMMANDS = [
 			MANAGEMENT_API
 		]
 	},
+	{
+		name: "powersync",
+		description: "Writes PowerSync sync streams, the PowerSync schema and the publication migration for the blocks that sync offline",
+		group: "generate",
+		docs: "/docs/cli/powersync",
+		effects: [FILES],
+		subcommands: [{
+			name: "streams",
+			description: "Writes sync-streams.yaml and schema.ts for the synced block instances, and a migration that adds their tables to the powersync publication",
+			docs: "/docs/cli/powersync",
+			examples: [{
+				command: "better-supabase powersync streams",
+				description: "Writes the files for gen.powersync.instances"
+			}, {
+				command: "better-supabase powersync streams --instance notifications --check",
+				description: "Exits 1 when a file for notifications is out of date"
+			}],
+			effects: [FILES]
+		}]
+	},
 	{
 		name: "spec",
 		description: "Writes, checks or validates the OpenAPI and other spec documents your defineApi() module renders",

package/dist/cli/{completion-Dlu5AdUW.js → completion-8EDK21xj.js}

@@ -1 +1 @@
-export { n as complete, r as completionLines } from "./completion-2Y3D_eNu.js";
+export { n as complete, r as completionLines } from "./completion-Bt7LMypX.js";

package/dist/cli/{completion-BwI0_Ap5.js → completion-BfnKI4QZ.js}

@@ -1,6 +1,6 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
-import { a as isShell, i as completionScript, t as SHELLS } from "./completion-2Y3D_eNu.js";
+import { a as isShell, i as completionScript, t as SHELLS } from "./completion-Bt7LMypX.js";
 //#region src/cli/commands/completion.ts
 const ARGS = { shell: {
 	type: "positional",

package/dist/cli/{completion-2Y3D_eNu.js → completion-Bt7LMypX.js}

@@ -1,5 +1,5 @@
-import { l as COMPLETE_COMMAND, n as completionValues, o as listArgs, t as GLOBAL_ARGS } from "./command-CQ61x6gN.js";
-import { o as isVariadic, r as commandArgs } from "./parse-B9Iv_-Pf.js";
+import { l as COMPLETE_COMMAND, n as completionValues, o as listArgs, t as GLOBAL_ARGS } from "./command-BWEEXmtz.js";
+import { o as isVariadic, r as commandArgs } from "./parse-B079x40m.js";
 //#region src/cli/core/completion.ts
 const SHELLS = [
 	"bash",

package/dist/cli/{config-9t5ec_N7.js → config-BJSqMi04.js}

@@ -740,6 +740,14 @@ const HOOK_FRAMEWORKS = [
 const INTEGRATIONS = INTEGRATION_NAMES;
 const isGenTask = (value) => GEN_TASKS.some((task) => task === value);
 //#endregion
+//#region src/cli/powersync/config-schema.ts
+/** `gen.powersync`. */
+const powersyncGenSchema = strictObject({
+	instances: pipe(array(string()), minLength(1, "lists at least one block instance")),
+	out: optional(string()),
+	import: optional(string())
+});
+//#endregion
 //#region src/cli/config-schema.ts
 const strings = array(string());
 const stringRecord = record(string(), string());
@@ -778,6 +786,7 @@ const blockEntries = {
 		"user",
 		"none"
 	])),
+	ownTablePolicies: optional(picklist(["block", "app"])),
 	functions: optional(stringRecord),
 	permissions: optional(stringRecord),
 	names: optional(union([entityName, record(string(), union([entityName, strictObject({
@@ -809,6 +818,10 @@ const disabledRow = strictObject({
 	status: optional(string()),
 	active: optional(strings)
 });
+const activeTenantSource = union([picklist(["claim", "resolver"]), strictObject({
+	profileColumn: string(),
+	key: optional(string())
+})]);
 const permissionsBlock = strictObject({
 	...blockEntries,
 	model: optional(picklist([
@@ -834,10 +847,7 @@ const permissionsBlock = strictObject({
 		user: optional(union([string(), disabledRow])),
 		userKey: optional(string())
 	})),
-	activeTenant: optional(union([picklist(["claim", "resolver"]), strictObject({
-		profileColumn: string(),
-		key: optional(string())
-	})]))
+	activeTenant: optional(activeTenantSource)
 });
 /**
 * `blocks`: a list of names, or each block's config. The schema checks the keys
@@ -906,7 +916,8 @@ const authorization = strictObject({
 		table: string(),
 		userColumn: string(),
 		scope: membershipScope,
-		idColumn: string()
+		idColumn: string(),
+		rolesTable: optional(string())
 	}))),
 	suspension: optional(strictObject({
 		user: optional(disabledRow),
@@ -927,6 +938,7 @@ const authorization = strictObject({
 	tokenHook: optional(strictObject({
 		function: string(),
 		tenantClaim: optional(string()),
+		activeOrganizationFrom: optional(activeTenantSource),
 		ownedClaims: pipe(strings, minLength(1, "List at least one claim")),
 		registeredClaims: optional(array(strictObject({
 			name: string(),
@@ -1261,7 +1273,8 @@ const FLAT = {
 			"tenant",
 			"user",
 			"none"
-		]))
+		])),
+		ownTablePolicies: optional(picklist(["block", "app"]))
 	})),
 	seed: optional(strictObject({
 		entry: optional(string()),
@@ -1352,6 +1365,7 @@ const ENTRIES = {
 		tasks: optional(array(picklist(GEN_TASKS))),
 		watchInterval: optional(pipe(number(), minValue(1, "must be a positive number of ms"))),
 		contentMapper: optional(boolean()),
+		powersync: optional(powersyncGenSchema),
 		...pickEntries([
 			"output",
 			"casing",

package/dist/cli/{config-CBqkQjjN.js → config-BlfVh0IP.js}

@@ -1 +1 @@
-export { t as applyEnvironment, n as databaseUrl, r as defaultConfig, i as discoverConfig, a as findConfig, o as importExport, s as loadConfig, c as readSupabasePort, l as stdinDatabaseUrl } from "./config-9t5ec_N7.js";
+export { t as applyEnvironment, n as databaseUrl, r as defaultConfig, i as discoverConfig, a as findConfig, o as importExport, s as loadConfig, c as readSupabasePort, l as stdinDatabaseUrl } from "./config-BJSqMi04.js";

package/dist/cli/{config-CPux9Wa7.js → config-WKDixoGK.js}

@@ -1,4 +1,4 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as redact, r as redactUrl } from "./redact-KGAk2Ul9.js";
 import { t as display } from "./io-DH1kcmmP.js";
 import { n as presetInfo } from "./preset-BwmIfFnh.js";

package/dist/cli/{content-mapper-DCrz6OIv.js → content-mapper-CaygHH_k.js}

@@ -1,6 +1,6 @@
 import { r as readIfExists } from "./io-DH1kcmmP.js";
-import { t as CACHE_DIR } from "./cache-AznIssjI.js";
-import { x as installedVersion } from "./snapshot-uTUlEzY2.js";
+import { t as CACHE_DIR } from "./cache-DE2IH1-C.js";
+import { x as installedVersion } from "./snapshot-BXmU3IXN.js";
 import { t as i } from "./jsonc-D5Fu67jw.js";
 import { resolve } from "node:path";
 import { createHash } from "node:crypto";

package/dist/cli/{db-DrBI_HNv.js → db-DYU5hUcd.js}

@@ -1,12 +1,12 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CbuPvI2x.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-9t5ec_N7.js";
+import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-BJSqMi04.js";
 import { d as readSupabaseToml, f as schemaPaths, n as declarativeSchemasDir, p as sqlWorkflow } from "./supabase-toml-CncmQbO0.js";
 import { r as supabaseCli } from "./exec--Q1ZEWUW.js";
 import { t as connect } from "./db-CQCLx7cx.js";
-import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-IpJRJO5t.js";
+import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-DlckPVje.js";
 import { a as migrationFiles, i as isShadowFailure, o as migrationVersion, r as inStackDiff, t as MIGRATION_HEADER } from "./in-stack-diff-DQTW53Vf.js";
 import { dirname, join, resolve } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";