better-supabase 0.17.0 → 0.18.0

package/dist/blocks/versions/index.js

@@ -1,5 +1,5 @@
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
-import { t as versionsSqlOptions } from "../../options-BQIYfx9F.js";
+import { t as versionsSqlOptions } from "../../options-DZLkeqWn.js";
 import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, H as rpcTransport, I as textOf, U as sqlTransport, d as enumOrThrow, k as recordsOf, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { n as entitySchema } from "../../entity-schema-BDv6w-OQ.js";

package/dist/blocks/waitlist/index.d.ts

@@ -7,7 +7,7 @@ import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { n as BlockOptions } from "../../block-helpers-CRpAHrp_.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
-import { c as BlockOf } from "../../define-block-Xxw8Hroe.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { n as VerifyOptions } from "../../signatures-Dkx9OE8j.js";
 //#region src/blocks/waitlist/waitlist.d.ts
 type WaitlistStatus = "waiting" | "approved" | "rejected" | "joined";

package/dist/blocks/waitlist/index.js

@@ -1,5 +1,5 @@
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
-import { t as waitlistSqlOptions } from "../../options-EsUh744F.js";
+import { t as waitlistSqlOptions } from "../../options-DKoQoRCy.js";
 import { B as dbTransport, C as optionalText, D as recordOf, H as rpcTransport, I as textOf, R as toInstant, S as optionalInstant, U as sqlTransport, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { n as event, t as defineEvents } from "../../event-map-CtPFhcOp.js";

package/dist/blocks/webhooks/index.d.ts

@@ -9,7 +9,7 @@ import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport,
 import { n as BlockHooks } from "../../block-hooks-DZN2w69m.js";
 import { t as BlockProblemOptions } from "../../problem-DNwN8iGz.js";
 import { g as JobHandler, x as QueueSchemas, y as Queue } from "../../types-Czq9Xtpa.js";
-import { c as BlockOf } from "../../define-block-Xxw8Hroe.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { i as EventSink, t as CloudEvent } from "../../cloud-event-CzZTJkXv.js";
 import { g as SubscriberPolicy, i as AuthorizationHooks } from "../../authorization-hooks-D_pwXlBs.js";
 import { a as verifySharedSecret, i as signWebhook, n as VerifyOptions, o as verifyWebhook, r as WebhookInput, t as VerifiedWebhook } from "../../signatures-Dkx9OE8j.js";

package/dist/blocks/webhooks/index.js

@@ -6,7 +6,7 @@ import { a as ok, r as err, s as toDbError, t as AsyncResult } from "../../resul
 import { i as toBase64, r as fromBase64 } from "../../base64-B9Wlsdj7.js";
 import { a as methodNotAllowed, o as problemResponse } from "../../problem-Bf0cJ7tk.js";
 import { t as MAX_BATCH } from "../../batch-limit-DKVQDz4o.js";
-import { n as webhooksOutSqlOptions, t as webhooksInSqlOptions } from "../../options-BvtnxHfK.js";
+import { n as webhooksOutSqlOptions, t as webhooksInSqlOptions } from "../../options-D96dScev.js";
 import { B as dbTransport, C as optionalText, D as recordOf, E as readBodyCapped, H as rpcTransport, L as toBlockError, M as seconds, R as toInstant, U as sqlTransport, c as chunksOf, f as errorText, i as batchResultsOf, k as recordsOf, n as applyTemporal, o as blockCall, r as asDbError, s as budget } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";
 import { a as stripTypePrefix } from "../../cloud-event-XsM53POL.js";

package/dist/blocks/workflow-editor/index.d.ts

@@ -3,11 +3,11 @@ import { t as StandardSchemaV1 } from "../../standard-DBV730sF.js";
 import { r as FieldsOf } from "../../block-fields-BE7pInWZ.js";
 import { Ct as Events, gt as WorkflowEventData } from "../../events-vcqenSYU.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
-import { c as BlockOf } from "../../define-block-Xxw8Hroe.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { g as Workflows, n as WorkflowRun } from "../../workflows-B0ZPAQu0.js";
-import { p as SubscriptionStatus } from "../../topic-BtLz-qTI.js";
-import { n as TopicPort } from "../../watch-topic-tnfOTa3-.js";
-import { n as Controller, t as AuthPort } from "../../controller-CJUXhshv.js";
+import { p as SubscriptionStatus } from "../../topic-nQYxoTaU.js";
+import { n as TopicPort } from "../../watch-topic-UGSEWAqR.js";
+import { n as Controller, t as AuthPort } from "../../controller-BR7CZ1R9.js";
 import { A as WorkflowVersionOwner, B as WorkflowGraphNode, C as WorkflowGrantPrincipal, D as WorkflowTrigger, E as WorkflowStepInfo, F as WorkflowFilterCondition, G as durationMs, H as WorkflowNodeKind, I as WorkflowFilterField, J as matchesFilter, K as evaluateCondition, L as WorkflowGraph, M as GraphScope, N as WorkflowCondition, O as WorkflowTriggerKind, P as WorkflowConditionOperator, R as WorkflowGraphDiff, S as WorkflowGrantAction, T as WorkflowNodeRunStatus, U as approved, V as WorkflowNodeCondition, W as diffGraphs, X as validateGraph, Y as topologicalOrder, _ as WorkflowCredential, a as CredentialInput, b as WorkflowDefinitionScope, c as GraphCompiler, d as RunInput, f as TestRunInput, g as WorkflowBuilderHooks, h as WorkflowAlert, i as BuilderStarter, j as WorkflowVersionStatus, k as WorkflowVersion, l as NodeRunRecord, m as VersionSaveOptions, n as BuilderOptions, o as DefinitionInput, p as TriggerInput, q as filterConditionOf, r as BuilderStartCall, s as GrantInput, t as AlertInput, u as PublishOptions, v as WorkflowDefinition, w as WorkflowNodeRun, x as WorkflowEditor, y as WorkflowDefinitionGrant, z as WorkflowGraphEdge } from "../../types-DsRfiQ0v.js";
 import { a as GraphSubject, c as graphRunFields, i as GraphStepCall, l as startNodeOf, n as GraphRunFields, o as approvalToken, r as GraphRuntime, s as executeGraph, t as GraphApprovalCall } from "../../executor-Bi056Cnj.js";
 //#region src/blocks/workflow-editor/workflow-editor.d.ts

package/dist/blocks/workflow-editor/index.js

@@ -1,7 +1,7 @@
 import { n as dbError } from "../../errors-BVFgt8BZ.js";
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
 import { a as ok, r as err, t as AsyncResult } from "../../result-ntFBW2p2.js";
-import { t as workflowEditorSqlOptions } from "../../options-DgQo80Xh.js";
+import { t as workflowEditorSqlOptions } from "../../options-DFpyP1bg.js";
 import { n as whileSignedIn, t as defineController } from "../../controller-BEliOBOv.js";
 import { A as requiredInstant, B as dbTransport, C as optionalText, D as recordOf, F as stringsOf, H as rpcTransport, I as textOf, M as seconds, O as recordOrEmpty, S as optionalInstant, T as randomToken, U as sqlTransport, d as enumOrThrow, k as recordsOf, n as applyTemporal, o as blockCall, p as injectableOf } from "../../block-helpers-CtBdjgO4.js";
 import { r as withBlockHooks } from "../../block-hooks-BfxX3682.js";

package/dist/blocks/workflows/index.d.ts

@@ -1,11 +1,11 @@
 import { b as DbError } from "../../result-DZeA5KS6.js";
 import { Ct as Events, _t as WorkflowRunEventData } from "../../events-vcqenSYU.js";
 import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DWZSJrwN.js";
-import { c as BlockOf } from "../../define-block-Xxw8Hroe.js";
+import { c as BlockOf } from "../../define-block-CJWiDWa5.js";
 import { _ as WorkflowsHooks, a as WorkflowRunStatus, c as WorkflowScheduleInput, d as WorkflowStartTicket, f as WorkflowStarter, g as Workflows, h as WorkflowTickResult, i as WorkflowRunRecord, l as WorkflowStartCall, m as WorkflowTickOptions, n as WorkflowRun, o as WorkflowRunsQuery, s as WorkflowSchedule, u as WorkflowStartRequest, v as WorkflowsOptions, y as createWorkflows } from "../../workflows-B0ZPAQu0.js";
-import { p as SubscriptionStatus } from "../../topic-BtLz-qTI.js";
-import { n as TopicPort } from "../../watch-topic-tnfOTa3-.js";
-import { n as Controller, t as AuthPort } from "../../controller-CJUXhshv.js";
+import { p as SubscriptionStatus } from "../../topic-nQYxoTaU.js";
+import { n as TopicPort } from "../../watch-topic-UGSEWAqR.js";
+import { n as Controller, t as AuthPort } from "../../controller-BR7CZ1R9.js";
 //#region src/blocks/workflows/client.d.ts
 interface WorkflowRunsControllerOptions {
   readonly client: {

package/dist/{channel-BjvGO39m.d.ts → channel-JcMd5lNP.d.ts}

@@ -7,6 +7,20 @@ interface NotificationSubject {
   /** Shown in the list, e.g. the task title, kept as it was at send time. */
   readonly label?: string;
 }
+/**
+ * A button on a notification, e.g. Approve. The app runs `operation` with
+ * `payload` when the recipient picks it, then calls `resolve` with the
+ * outcome.
+ */
+interface NotificationAction {
+  /** Unique within the notification: `[A-Za-z0-9_.:-]`, at most 64 characters. */
+  readonly key: string;
+  /** At most 100 characters. */
+  readonly label: string;
+  /** The app's name for what the action does, e.g. `approvals.approve`. */
+  readonly operation?: string;
+  readonly payload?: Readonly<Record<string, unknown>>;
+}
 /** One notification as its recipient sees it. */
 interface NotificationItem<K extends string = string, D = unknown> {
   /** The recipient row id: pass it to `markRead` and `dismiss`. */
@@ -20,10 +34,17 @@ interface NotificationItem<K extends string = string, D = unknown> {
   readonly subject: NotificationSubject | null;
   readonly summary: string | null;
   readonly actionPath: string | null;
+  /**
+   * Empty without the events table's `actions` column (notifications version
+   * 9).
+   */
+  readonly actions: readonly NotificationAction[];
   readonly priority: string | null;
   readonly createdAt: Temporal.Instant;
   readonly readAt: Temporal.Instant | null;
   readonly resolvedAt: Temporal.Instant | null;
+  /** What `resolve` stored for this recipient, e.g. `{ action: "approve" }`. */
+  readonly resolution: Readonly<Record<string, unknown>> | null;
   /** The events table's extra columns (`options.extraColumns`), by column name. */
   readonly fields: Readonly<Record<string, unknown>>;
 }
@@ -44,9 +65,16 @@ interface NotificationMessage {
   readonly userId: string;
   /** The recipient's `auth.users` email, for email channels. */
   readonly email: string | null;
+  /** The recipient's profile locale, when the profiles block is installed. */
+  readonly locale: string | null;
   readonly notification: NotificationItem;
-  /** What `render` returned for it, when `createNotifications` has one. */
+  /**
+   * What `render` returned for it in the recipient's locale, when
+   * `createNotifications` has one.
+   */
   readonly text?: RenderedText;
+  /** What `hydrate` returned for the batch, when `createNotifications` has one. */
+  readonly hydrated?: unknown;
 }
 interface NotificationSendResult {
   /** `skipped` when the channel decided not to send. Defaults to `sent`. */
@@ -74,4 +102,4 @@ interface NotificationChannel {
   send(message: NotificationMessage): NotificationSendResult | void | Promise<NotificationSendResult | void>;
 }
 //#endregion
-export { NotificationSubject as a, NotificationItem as i, NotificationMessage as n, RenderedText as o, NotificationSendResult as r, NotificationChannel as t };
+export { NotificationItem as a, NotificationAction as i, NotificationMessage as n, NotificationSubject as o, NotificationSendResult as r, RenderedText as s, NotificationChannel as t };

package/dist/cli/{add-DMcrsWjC.js → add-B1S3yK4L.js}

@@ -1,28 +1,28 @@
-import { a as list, p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { a as list, p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
-import { t as VERSION } from "./version-T507a49w.js";
+import { t as VERSION } from "./version-TgFM8sOd.js";
 import { a as parseNames, n as CliError } from "./errors-BTe6A15O.js";
 import { r as readIfExists, t as display } from "./io-DH1kcmmP.js";
-import { t as loadSnapshot } from "./snapshot-C6vh_n3t.js";
+import { t as loadSnapshot } from "./snapshot-BXmU3IXN.js";
 import { t as isRecord } from "./guards-CUlDNYZs.js";
-import { a as toCatalog } from "./source-BZbEK5if.js";
-import { f as dataMigration } from "./module-migration-mKhX88V_.js";
-import { a as findConfig, f as INTEGRATIONS, s as loadConfig } from "./config-2rwFHbwj.js";
+import { a as toCatalog } from "./source-irttnsEb.js";
+import { n as dataMigration } from "./migrations-BoIyGczt.js";
+import { a as findConfig, f as INTEGRATIONS, s as loadConfig } from "./config-BJSqMi04.js";
 import { i as changeLines, n as PLAN_ARGS, r as applyPlan, u as planResult } from "./files-CX71yBm8.js";
-import { a as wiringFiles, d as libEntry, f as needsLib, i as wiringChecklist, l as importFrom, n as latestMigrationVersion, o as wiringFor, p as resolveIntegrations, s as TEMPLATES, u as isIntegration } from "./migration-safety-NtB3dsRU.js";
+import { a as wiringFiles, d as libEntry, f as needsLib, i as wiringChecklist, l as importFrom, n as latestMigrationVersion, o as wiringFor, p as resolveIntegrations, s as TEMPLATES, u as isIntegration } from "./migration-safety-DYo1vVWC.js";
 import { n as installCommand, t as detectProject } from "./detect-D9JaAX20.js";
 import { d as setBlockInJson, f as setPathInConfig, h as setPresetInJson, m as setPresetInConfig, n as addBlocksToJson, p as setPathInJson, r as addBlocksToWiring, t as addBlocksToConfig, u as setBlockInConfig } from "./config-edit-CrWfk8s3.js";
-import { t as syncModules } from "./sync-CHGMZCJ5.js";
-import { t as addModules } from "./add-BinNYhFD.js";
-import { n as ident } from "./live-BvWGM4c3.js";
-import { t as blockNames } from "./blocks-DSgTifw0.js";
-import { i as sourceArgs, n as SOURCE_ARGS } from "./source-args-MTLYpifA.js";
+import { t as syncModules } from "./sync-s1iKFIos.js";
+import { t as addModules } from "./add-D7YIXslp.js";
+import { n as ident } from "./live-B38ePuRS.js";
+import { t as blockNames } from "./blocks-DDm1Zc2S.js";
+import { i as sourceArgs, n as SOURCE_ARGS } from "./source-args-DlckPVje.js";
 import { existsSync } from "node:fs";
 import { dirname, join, posix, resolve } from "node:path";
 import { readFile } from "node:fs/promises";
 import { INTEGRATION_INFO, blockEntrySource } from "better-supabase/config";
 import { DEFAULT_CONVENTIONS, PRESET_CATALOG, PRESET_FRAMEWORKS, PRESET_NAMES, PRESET_TENANT_NAMES, designConfig, diffAppTables, glueCommand, isPresetName, presetAndDesignOf, presetField, presetFromSpec, presetSpec, presetValueLabel, readDesignFile, resolvePreset } from "better-supabase/preset";
-import { SQL_MODULES, adoptedColumnProblems, migrationOptionUses, moduleBody, moduleIdType } from "better-supabase/sql";
+import { SQL_MODULES, adoptedColumnProblems, migrationOptionUses, moduleBody, moduleIdType, moduleWritesText } from "better-supabase/sql";
 import { toSnake } from "better-supabase";
 //#region src/cli/conventions.ts
 const arg = (key, description) => ({
@@ -395,6 +395,11 @@ function proposeAdoption(block, tables, options = {}) {
 				else warnings.push(`${name} has no column for ${logical}.${match.logical}, so the block's migration adds ${table.columns[match.logical]}. Map blocks.${block}.columns.${logical}.${match.logical} instead when another column holds it.`);
 				continue;
 			}
+			if ((table.optional?.includes(match.logical) === true && moduleWritesText(block, logical, match.logical) ? existing.columns.find((column) => column.name === match.column && column.isEnum === true) : void 0) !== void 0) {
+				mapped[match.logical] = null;
+				warnings.push(`${name}.${match.column} is an enum, and the block writes text into ${logical}.${match.logical}, so it leaves that column unmapped. Change ${match.column} to text with a check constraint, then map blocks.${block}.columns.${logical}.${match.logical} to it.`);
+				continue;
+			}
 			if (match.column !== table.columns[match.logical]) mapped[match.logical] = match.column;
 			if (match.logical === "tenant" && idType === void 0) {
 				const udt = existing.columns.find((column) => column.name === match.column)?.udt;

package/dist/cli/add-BQPJnapO.js

@@ -0,0 +1 @@
+export { t as addCommand } from "./add-B1S3yK4L.js";

package/dist/cli/{add-BinNYhFD.js → add-D7YIXslp.js}

@@ -1,8 +1,8 @@
 import { n as CliError } from "./errors-BTe6A15O.js";
-import { T as providerLabel, _ as layoutFor, h as MEMBERSHIP_CLAIM_MODULES, v as providerOwnsMemberships } from "./module-migration-mKhX88V_.js";
+import { c as layoutFor, g as providerLabel, l as providerOwnsMemberships, o as MEMBERSHIP_CLAIM_MODULES } from "./migrations-BoIyGczt.js";
 import { r as applyPlan } from "./files-CX71yBm8.js";
 import { n as addBlocksToJson, s as keyText, t as addBlocksToConfig } from "./config-edit-CrWfk8s3.js";
-import { a as write, i as unlistedModuleFiles, r as nextStep } from "./sync-CHGMZCJ5.js";
+import { a as write, i as unlistedModuleFiles, r as nextStep } from "./sync-s1iKFIos.js";
 import { basename, dirname } from "node:path";
 import { readFile } from "node:fs/promises";
 import { SQL_MODULES, resolveBlocks } from "better-supabase/sql";

package/dist/cli/{backfill-DxBB62Zr.js → backfill-BwkyNhlC.js}

@@ -1,10 +1,10 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CbuPvI2x.js";
-import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-2rwFHbwj.js";
+import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-BJSqMi04.js";
 import { t as connect } from "./db-CQCLx7cx.js";
-import { n as ident } from "./live-BvWGM4c3.js";
-import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-MTLYpifA.js";
+import { n as ident } from "./live-B38ePuRS.js";
+import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-DlckPVje.js";
 //#region src/cli/commands/backfill.ts
 const DEFAULT_BATCH = 1e3;
 const ARGS = {

package/dist/cli/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as run } from "./run-D48ZEU58.js";
+import { i as run } from "./run-x9ZY4Tm0.js";
 import { t as colorEnabled } from "./style-Bm2X5JrN.js";
 import { existsSync } from "node:fs";
 import { basename } from "node:path";

package/dist/cli/{blocks-rxOS-Mzz.js → blocks-CBqENu3C.js}

@@ -1 +1 @@
-export { n as blocksListCommand, r as blocksSearchCommand, i as blocksViewCommand } from "./blocks-DSgTifw0.js";
+export { n as blocksListCommand, r as blocksSearchCommand, i as blocksViewCommand } from "./blocks-DDm1Zc2S.js";

package/dist/cli/{blocks-DSgTifw0.js → blocks-DDm1Zc2S.js}

@@ -1,7 +1,7 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { t as SQL_ARGS } from "./args-UEwg0l-N.js";
-import { n as listModules, t as printModule } from "./print-Dh8iuPK3.js";
+import { n as listModules, t as printModule } from "./print-CRon4lXf.js";
 import { t as decodePresetInput } from "./preset-BwmIfFnh.js";
 import { BLOCK_CATEGORIES } from "better-supabase/blocks";
 import { PRESET_CATALOG, PRESET_NAMES, glueCommand } from "better-supabase/preset";

package/dist/cli/{cache-oU0yHKf0.js → cache-DE2IH1-C.js}

@@ -1,4 +1,4 @@
-import { t as VERSION } from "./version-T507a49w.js";
+import { t as VERSION } from "./version-TgFM8sOd.js";
 import { dirname, resolve } from "node:path";
 import { createHash } from "node:crypto";
 import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";

package/dist/cli/{codemod-Dsrv_3gQ.js → codemod-OHKhVV-v.js}

@@ -1,10 +1,10 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
-import { t as migrateCliCall } from "./moved-CsfDQcyk.js";
+import { t as migrateCliCall } from "./moved-DVwgE8lV.js";
 import { t as isRecord$1 } from "./guards-CUlDNYZs.js";
 import { a as changedFiles, i as changeLines, r as applyPlan, u as planResult } from "./files-CX71yBm8.js";
-import { i as schemasDirOf, n as migrationsDir, o as writtenByBlocks } from "./sql-layout-26LSoifK.js";
+import { i as schemasDirOf, n as migrationsDir, o as writtenByBlocks } from "./sql-layout-D8QrNvt4.js";
 import { a as configObject, c as mask, f as setPathInConfig, g as skipSpace, h as setPresetInJson, i as closingIndex, l as properties, m as setPresetInConfig, o as indentAt, p as setPathInJson, t as addBlocksToConfig, v as codeRanges } from "./config-edit-CrWfk8s3.js";
 import { i as legacyPrefixNames, n as LEGACY_PREFIXES, t as LEGACY_CLAIMS } from "./legacy-prefix-DkTA3Rhx.js";
 import { a as REVIEW_0_15, c as renameSubpaths, r as PLUGIN_IMPORT_RENAMES, s as SUBPATH_RENAMES_0_15, t as BLOCK_EXPORT_RENAMES } from "./codemod-block-renames-BuSaTE_G.js";
@@ -1845,7 +1845,7 @@ const CODEMODS = {
 				message: "Delegated tokens are narrowed inside `member_can`, `platform_can` and `tenant_ids_with`: a permission passes only when one of the token's scopes maps to it. Map scopes in `blocks.access.scopes` or `authorization.delegation.scopes`; a `token_scope_allows` check in a write policy is now covered by the cap"
 			},
 			{
-				pattern: /\b(has_organization_role|member_organization_ids|organization_member_role)\s*\(/,
+				pattern: /\b(has_organization_role|member_organization_ids|organization_member_roles?)\s*\(/,
 				message: "Under the provider model the role helpers take membership from the provider's `memberIds`, and a role name check skips the delegation cap (doctor BS334): check a permission with `tenant_ids_with('<permission>')` or `member_can()`"
 			},
 			{

package/dist/cli/{command-CQ61x6gN.js → command-BWEEXmtz.js}

@@ -516,6 +516,26 @@ const COMMANDS = [
 			MANAGEMENT_API
 		]
 	},
+	{
+		name: "powersync",
+		description: "Writes PowerSync sync streams, the PowerSync schema and the publication migration for the blocks that sync offline",
+		group: "generate",
+		docs: "/docs/cli/powersync",
+		effects: [FILES],
+		subcommands: [{
+			name: "streams",
+			description: "Writes sync-streams.yaml and schema.ts for the synced block instances, and a migration that adds their tables to the powersync publication",
+			docs: "/docs/cli/powersync",
+			examples: [{
+				command: "better-supabase powersync streams",
+				description: "Writes the files for gen.powersync.instances"
+			}, {
+				command: "better-supabase powersync streams --instance notifications --check",
+				description: "Exits 1 when a file for notifications is out of date"
+			}],
+			effects: [FILES]
+		}]
+	},
 	{
 		name: "spec",
 		description: "Writes, checks or validates the OpenAPI and other spec documents your defineApi() module renders",

package/dist/cli/{completion-Dlu5AdUW.js → completion-8EDK21xj.js}

@@ -1 +1 @@
-export { n as complete, r as completionLines } from "./completion-2Y3D_eNu.js";
+export { n as complete, r as completionLines } from "./completion-Bt7LMypX.js";

package/dist/cli/{completion-BwI0_Ap5.js → completion-BfnKI4QZ.js}

@@ -1,6 +1,6 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
-import { a as isShell, i as completionScript, t as SHELLS } from "./completion-2Y3D_eNu.js";
+import { a as isShell, i as completionScript, t as SHELLS } from "./completion-Bt7LMypX.js";
 //#region src/cli/commands/completion.ts
 const ARGS = { shell: {
 	type: "positional",

package/dist/cli/{completion-2Y3D_eNu.js → completion-Bt7LMypX.js}

@@ -1,5 +1,5 @@
-import { l as COMPLETE_COMMAND, n as completionValues, o as listArgs, t as GLOBAL_ARGS } from "./command-CQ61x6gN.js";
-import { o as isVariadic, r as commandArgs } from "./parse-B9Iv_-Pf.js";
+import { l as COMPLETE_COMMAND, n as completionValues, o as listArgs, t as GLOBAL_ARGS } from "./command-BWEEXmtz.js";
+import { o as isVariadic, r as commandArgs } from "./parse-B079x40m.js";
 //#region src/cli/core/completion.ts
 const SHELLS = [
 	"bash",

package/dist/cli/{config-2rwFHbwj.js → config-BJSqMi04.js}

@@ -740,6 +740,14 @@ const HOOK_FRAMEWORKS = [
 const INTEGRATIONS = INTEGRATION_NAMES;
 const isGenTask = (value) => GEN_TASKS.some((task) => task === value);
 //#endregion
+//#region src/cli/powersync/config-schema.ts
+/** `gen.powersync`. */
+const powersyncGenSchema = strictObject({
+	instances: pipe(array(string()), minLength(1, "lists at least one block instance")),
+	out: optional(string()),
+	import: optional(string())
+});
+//#endregion
 //#region src/cli/config-schema.ts
 const strings = array(string());
 const stringRecord = record(string(), string());
@@ -810,6 +818,10 @@ const disabledRow = strictObject({
 	status: optional(string()),
 	active: optional(strings)
 });
+const activeTenantSource = union([picklist(["claim", "resolver"]), strictObject({
+	profileColumn: string(),
+	key: optional(string())
+})]);
 const permissionsBlock = strictObject({
 	...blockEntries,
 	model: optional(picklist([
@@ -835,10 +847,7 @@ const permissionsBlock = strictObject({
 		user: optional(union([string(), disabledRow])),
 		userKey: optional(string())
 	})),
-	activeTenant: optional(union([picklist(["claim", "resolver"]), strictObject({
-		profileColumn: string(),
-		key: optional(string())
-	})]))
+	activeTenant: optional(activeTenantSource)
 });
 /**
 * `blocks`: a list of names, or each block's config. The schema checks the keys
@@ -907,7 +916,8 @@ const authorization = strictObject({
 		table: string(),
 		userColumn: string(),
 		scope: membershipScope,
-		idColumn: string()
+		idColumn: string(),
+		rolesTable: optional(string())
 	}))),
 	suspension: optional(strictObject({
 		user: optional(disabledRow),
@@ -928,6 +938,7 @@ const authorization = strictObject({
 	tokenHook: optional(strictObject({
 		function: string(),
 		tenantClaim: optional(string()),
+		activeOrganizationFrom: optional(activeTenantSource),
 		ownedClaims: pipe(strings, minLength(1, "List at least one claim")),
 		registeredClaims: optional(array(strictObject({
 			name: string(),
@@ -1354,6 +1365,7 @@ const ENTRIES = {
 		tasks: optional(array(picklist(GEN_TASKS))),
 		watchInterval: optional(pipe(number(), minValue(1, "must be a positive number of ms"))),
 		contentMapper: optional(boolean()),
+		powersync: optional(powersyncGenSchema),
 		...pickEntries([
 			"output",
 			"casing",

package/dist/cli/{config-C6XylzKz.js → config-BlfVh0IP.js}

@@ -1 +1 @@
-export { t as applyEnvironment, n as databaseUrl, r as defaultConfig, i as discoverConfig, a as findConfig, o as importExport, s as loadConfig, c as readSupabasePort, l as stdinDatabaseUrl } from "./config-2rwFHbwj.js";
+export { t as applyEnvironment, n as databaseUrl, r as defaultConfig, i as discoverConfig, a as findConfig, o as importExport, s as loadConfig, c as readSupabasePort, l as stdinDatabaseUrl } from "./config-BJSqMi04.js";

package/dist/cli/{config-CPux9Wa7.js → config-WKDixoGK.js}

@@ -1,4 +1,4 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as redact, r as redactUrl } from "./redact-KGAk2Ul9.js";
 import { t as display } from "./io-DH1kcmmP.js";
 import { n as presetInfo } from "./preset-BwmIfFnh.js";

package/dist/cli/{content-mapper-DLbXilBz.js → content-mapper-CaygHH_k.js}

@@ -1,6 +1,6 @@
 import { r as readIfExists } from "./io-DH1kcmmP.js";
-import { t as CACHE_DIR } from "./cache-oU0yHKf0.js";
-import { x as installedVersion } from "./snapshot-C6vh_n3t.js";
+import { t as CACHE_DIR } from "./cache-DE2IH1-C.js";
+import { x as installedVersion } from "./snapshot-BXmU3IXN.js";
 import { t as i } from "./jsonc-D5Fu67jw.js";
 import { resolve } from "node:path";
 import { createHash } from "node:crypto";

package/dist/cli/{db-Bwrr3GHM.js → db-DYU5hUcd.js}

@@ -1,12 +1,12 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CbuPvI2x.js";
 import { t as display } from "./io-DH1kcmmP.js";
-import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-2rwFHbwj.js";
+import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-BJSqMi04.js";
 import { d as readSupabaseToml, f as schemaPaths, n as declarativeSchemasDir, p as sqlWorkflow } from "./supabase-toml-CncmQbO0.js";
 import { r as supabaseCli } from "./exec--Q1ZEWUW.js";
 import { t as connect } from "./db-CQCLx7cx.js";
-import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-MTLYpifA.js";
+import { r as STACK_ARG, t as DB_URL_STDIN_ARG } from "./source-args-DlckPVje.js";
 import { a as migrationFiles, i as isShadowFailure, o as migrationVersion, r as inStackDiff, t as MIGRATION_HEADER } from "./in-stack-diff-DQTW53Vf.js";
 import { dirname, join, resolve } from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";

package/dist/cli/{doctor-CKt5Yyl4.js → doctor-D_nrsd9E.js}

@@ -1,35 +1,36 @@
-import { a as list, p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { a as list, p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
-import { t as VERSION } from "./version-T507a49w.js";
+import { t as VERSION } from "./version-TgFM8sOd.js";
 import { n as CliError, r as errorText } from "./errors-BTe6A15O.js";
 import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CbuPvI2x.js";
 import { a as sameText, t as display } from "./io-DH1kcmmP.js";
-import { t as CACHE_DIR } from "./cache-oU0yHKf0.js";
+import { t as CACHE_DIR } from "./cache-DE2IH1-C.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
-import { C as satisfies, S as peerVersions, c as isSqliteLiteDriver, n as managementTarget, o as snapshotFile, r as openSource, s as liteDriverOf, t as loadSnapshot, u as MetadataRejectedError } from "./snapshot-C6vh_n3t.js";
-import { d as configFor, r as renderFiles, u as notNullTag } from "./render-ChIwdIOJ.js";
+import { C as satisfies, S as peerVersions, c as isSqliteLiteDriver, n as managementTarget, o as snapshotFile, r as openSource, s as liteDriverOf, t as loadSnapshot, u as MetadataRejectedError } from "./snapshot-BXmU3IXN.js";
+import { d as configFor, r as renderFiles, u as notNullTag } from "./render-BJF9ytUi.js";
 import { t as isRecord } from "./guards-CUlDNYZs.js";
-import { i as request } from "./source-BZbEK5if.js";
-import { T as providerLabel, i as migrationHolds, o as migrationModules, r as latestMigration, t as MODULES_SUFFIX, y as compiledReadSets } from "./module-migration-mKhX88V_.js";
-import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-2rwFHbwj.js";
+import { i as request } from "./source-irttnsEb.js";
+import { g as providerLabel, u as compiledReadSets } from "./migrations-BoIyGczt.js";
+import { l as stdinDatabaseUrl, n as databaseUrl } from "./config-BJSqMi04.js";
 import { a as findRepoRoot, c as httpHooks, d as readSupabaseToml, f as schemaPaths, h as tomlGet, i as diffEngine, l as migrationCommand, n as declarativeSchemasDir, p as sqlWorkflow, u as pgFunctionHooks } from "./supabase-toml-CncmQbO0.js";
 import { t as PROCESS_ENV } from "./env-DMgjB_4y.js";
 import { n as readStackStatus } from "./stack-status-B_Ipd_-z.js";
 import { t as connect } from "./db-CQCLx7cx.js";
-import { a as hasContentMapper, c as supportsContentMappers, i as contentMapperSetup$1, n as TSCONFIG_SNIPPET, o as needsRunExternalCode, t as RUN_EXTERNAL_CODE } from "./content-mapper-DLbXilBz.js";
+import { a as hasContentMapper, c as supportsContentMappers, i as contentMapperSetup$1, n as TSCONFIG_SNIPPET, o as needsRunExternalCode, t as RUN_EXTERNAL_CODE } from "./content-mapper-CaygHH_k.js";
 import { c as insideRoot, i as changeLines, r as applyPlan } from "./files-CX71yBm8.js";
-import { C as splinterTables, S as advisorRule, _ as withoutStrings, a as METADATA_GAPS_TEXT, b as appTablesOf, c as accessModule, d as RLS_RULES, f as appliesTo, g as policyHelpers, h as functionObject, l as entitlementsModule, m as functionBody, p as escape$2, s as AUTHORIZATION_RULES, u as COMMANDS$2, v as BLOCK_PREFIX, x as appViewsOf, y as blockTargets } from "./run-CLSHSVYo.js";
-import { n as migrationsDir, r as moduleLayoutFor, t as blockDeclaredTables } from "./sql-layout-26LSoifK.js";
-import { a as permissionCatalogKeys, i as lineOf, l as tableObject, n as exposed, o as policyObject, r as exposedSchemas, s as qualified, t as catalogOf, u as workflowOf } from "./shared-D0XBFSlz.js";
-import { o as wiringFor, r as configInstances, t as MIGRATION_SAFETY_RULES } from "./migration-safety-NtB3dsRU.js";
+import { C as splinterTables, S as advisorRule, _ as withoutStrings, a as METADATA_GAPS_TEXT, b as appTablesOf, c as accessModule, d as RLS_RULES, f as appliesTo, g as policyHelpers, h as functionObject, l as entitlementsModule, m as functionBody, p as escape$2, s as AUTHORIZATION_RULES, u as COMMANDS$2, v as BLOCK_PREFIX, x as appViewsOf, y as blockTargets } from "./run-jeplMBOK.js";
+import { n as migrationsDir, r as moduleLayoutFor, t as blockDeclaredTables } from "./sql-layout-D8QrNvt4.js";
+import { a as permissionCatalogKeys, i as lineOf, l as tableObject, n as exposed, o as policyObject, r as exposedSchemas, s as qualified, t as catalogOf, u as workflowOf } from "./shared-B38Chjgd.js";
+import { i as migrationHolds, o as migrationModules, r as latestMigration, t as MODULES_SUFFIX } from "./module-migration-DXvo0EqU.js";
+import { o as wiringFor, r as configInstances, t as MIGRATION_SAFETY_RULES } from "./migration-safety-DYo1vVWC.js";
 import { t as orphanedBlockFiles } from "./orphans-BAboqyVM.js";
-import { i as reservedRoles, n as ident$1, r as literal$1, t as LIVE_RULES } from "./live-BvWGM4c3.js";
-import { a as sourceFlags, n as SOURCE_ARGS } from "./source-args-MTLYpifA.js";
+import { i as reservedRoles, n as ident$1, r as literal$1, t as LIVE_RULES } from "./live-B38ePuRS.js";
+import { a as sourceFlags, n as SOURCE_ARGS } from "./source-args-DlckPVje.js";
 import { i as PLUGIN_SUBPATH_RENAMES, n as BLOCK_SUBPATH_RENAMES, o as SPEC_SUBPATH_RENAMES, t as BLOCK_EXPORT_RENAMES } from "./codemod-block-renames-BuSaTE_G.js";
 import { n as PLATFORM_SCHEMAS } from "./in-stack-diff-DQTW53Vf.js";
 import { i as staleVariables, r as stackEnvValues, t as PREFIX_NAMES } from "./stack-env-6hS-WEmh.js";
 import { a as readSharedMemory, n as listStacks, t as branchName } from "./stacks-BYlQ96WS.js";
-import { i as refuseWithMetadata, r as readMetadataSnapshot } from "./metadata-BNSdPuKp.js";
+import { i as refuseWithMetadata, r as readMetadataSnapshot } from "./metadata-BTihErEc.js";
 import { existsSync } from "node:fs";
 import { dirname, resolve } from "node:path";
 import { createHash } from "node:crypto";

package/dist/cli/{env-BBl5L8Bf.js → env-BCgVZkcb.js}

@@ -1,4 +1,4 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { n as CliError } from "./errors-BTe6A15O.js";
 import { r as readIfExists, t as display } from "./io-DH1kcmmP.js";
 import { n as readStackStatus, t as parseStackStatus } from "./stack-status-B_Ipd_-z.js";

package/dist/cli/env-xhwXk5Ri.js

@@ -0,0 +1 @@
+export { n as envCommand } from "./env-BCgVZkcb.js";

package/dist/cli/{gen-CeG6lbka.js → gen-D7gMEwvg.js}

@@ -1,21 +1,22 @@
-import { a as list, p as commandMeta, r as defineCliCommand } from "./command-CQ61x6gN.js";
+import { a as list, p as commandMeta, r as defineCliCommand } from "./command-BWEEXmtz.js";
 import { i as plain } from "./style-Bm2X5JrN.js";
 import { a as parseNames, i as failedResult, n as CliError } from "./errors-BTe6A15O.js";
-import { u as catalogFingerprint } from "./cache-oU0yHKf0.js";
-import { a as serializeSnapshot, g as serializeGenerator, h as restrictSchemas, o as snapshotFile, r as openSource, t as loadSnapshot } from "./snapshot-C6vh_n3t.js";
-import { f as dataMigration } from "./module-migration-mKhX88V_.js";
-import { d as GEN_TASKS, p as isGenTask } from "./config-2rwFHbwj.js";
+import { u as catalogFingerprint } from "./cache-DE2IH1-C.js";
+import { a as serializeSnapshot, g as serializeGenerator, h as restrictSchemas, o as snapshotFile, r as openSource, t as loadSnapshot } from "./snapshot-BXmU3IXN.js";
+import { n as dataMigration } from "./migrations-BoIyGczt.js";
+import { d as GEN_TASKS, p as isGenTask } from "./config-BJSqMi04.js";
 import { c as insideRoot, r as applyPlan, u as planResult } from "./files-CX71yBm8.js";
-import { n as runGen } from "./run-CLSHSVYo.js";
-import { t as syncModules } from "./sync-CHGMZCJ5.js";
-import { t as addModules } from "./add-BinNYhFD.js";
-import { n as listModules, t as printModule } from "./print-Dh8iuPK3.js";
-import { a as sourceFlags, i as sourceArgs, n as SOURCE_ARGS } from "./source-args-MTLYpifA.js";
-import { a as runMetadataGen, n as checkMetadataFlags, t as EMITS } from "./metadata-BNSdPuKp.js";
-import { a as runEnv } from "./env-BBl5L8Bf.js";
-import { c as watchLoop, o as parseInterval, r as specOptionsFromConfig, s as stampFiles, t as runSpec } from "./spec-B4LhpI6t.js";
-import { t as runSeed } from "./seed-CG-pA-5N.js";
-import { t as upgrade } from "./upgrade-C0dVsqNX.js";
+import { n as runGen } from "./run-jeplMBOK.js";
+import { t as syncModules } from "./sync-s1iKFIos.js";
+import { t as addModules } from "./add-D7YIXslp.js";
+import { n as listModules, t as printModule } from "./print-CRon4lXf.js";
+import { a as sourceFlags, i as sourceArgs, n as SOURCE_ARGS } from "./source-args-DlckPVje.js";
+import { a as runMetadataGen, n as checkMetadataFlags, t as EMITS } from "./metadata-BTihErEc.js";
+import { a as runEnv } from "./env-BCgVZkcb.js";
+import { c as watchLoop, o as parseInterval, r as specOptionsFromConfig, s as stampFiles, t as runSpec } from "./spec-CDxfokey.js";
+import { n as runPowerSync } from "./powersync-D-0yV_L_.js";
+import { t as runSeed } from "./seed-D9mt8bnW.js";
+import { t as upgrade } from "./upgrade-B4FPlK-_.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 //#region src/cli/commands/sql.ts
@@ -60,6 +61,7 @@ function configuredTasks(config) {
 	const configured = {
 		types: () => true,
 		sql: () => config.blockNames.length > 0 || config.realtime.policies !== void 0,
+		powersync: () => config.gen.powersync !== void 0,
 		spec: () => exists(config.specs.entry),
 		seed: () => exists(config.seed.entry),
 		env: () => false
@@ -75,6 +77,7 @@ function stepInputs(config, tasks) {
 	const inputs = {
 		types: () => [],
 		sql: () => [],
+		powersync: () => [],
 		spec: () => [at(config.specs.entry), ...config.specs.outputs.flatMap((output) => (output.overlays ?? []).map(at))],
 		seed: () => [at(config.seed.entry)],
 		env: () => []
@@ -87,6 +90,10 @@ const STEPS = {
 		check,
 		"dry-run": dryRun
 	}, paint),
+	powersync: ({ config, check, dryRun }) => runPowerSync(config, {
+		check,
+		"dry-run": dryRun
+	}),
 	spec: ({ config, check, dryRun }) => runSpec(specOptionsFromConfig(config, check ? "check" : "emit", dryRun === true ? { dryRun } : {})),
 	seed: ({ config, check, dryRun, env }) => runSeed(config, {
 		check,