better-supabase 0.17.0 → 0.18.1

package/dist/{refusal-CSntB_x8.d.ts → refusal-OrlI3g4H.d.ts}

@@ -1,6 +1,6 @@
 import { r as AuthState } from "./resolve-CXX6DHv3.js";
 import { t as AnyAuthorizer } from "./authorizer-B6X09otb.js";
-import { c as ResourceLoaderContext, s as BlockRequireOptions } from "./kit-DOwKpSkA.js";
+import { c as ResourceLoaderContext, s as BlockRequireOptions } from "./kit-CVgQCIBO.js";
 //#region src/server/refusal.d.ts
 /** Where refused callers go instead of a Problem Details response. */
 interface RefusalRedirects {

package/dist/{relay-gKvKJ3xf.js → relay-CIKcAVjf.js}

@@ -15,6 +15,10 @@ function globalEventSource() {
 	return typeof value === "function" ? value : void 0;
 }
 const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+async function problemDetail(response) {
+	const problem = await response.json().catch(() => void 0);
+	return isRecord(problem) && typeof problem["detail"] === "string" ? problem["detail"] : isRecord(problem) && typeof problem["title"] === "string" ? problem["title"] : response.statusText;
+}
 /**
 * A Realtime client that joins topics through `realtimeRelay` on the server
 * instead of a browser connection with the user's token: for support sessions
@@ -52,12 +56,10 @@ function relayRealtimeClient(url, options = {}) {
 				await response.body?.cancel();
 				return { success: true };
 			}
-			const problem = await response.json().catch(() => void 0);
-			const detail = isRecord(problem) && typeof problem["detail"] === "string" ? problem["detail"] : isRecord(problem) && typeof problem["title"] === "string" ? problem["title"] : response.statusText;
 			return {
 				success: false,
 				status: response.status,
-				error: detail
+				error: await problemDetail(response)
 			};
 		} catch (cause) {
 			return {
@@ -67,8 +69,24 @@ function relayRealtimeClient(url, options = {}) {
 			};
 		}
 	};
+	const failureOf = async (streamUrl) => {
+		const controller = new AbortController();
+		try {
+			const response = await (options.fetch ?? globalThis.fetch.bind(globalThis))(streamUrl, {
+				credentials: "include",
+				headers: { accept: "text/event-stream" },
+				signal: controller.signal
+			});
+			return response.ok ? void 0 : `${String(response.status)} ${await problemDetail(response)}`.trim();
+		} catch {
+			return;
+		} finally {
+			controller.abort();
+		}
+	};
 	const create = (name) => {
 		const topic = `realtime:${name}`;
+		const streamUrl = `${url}${url.includes("?") ? "&" : "?"}topic=${encodeURIComponent(name)}`;
 		const listeners = [];
 		let presence = {};
 		let source;
@@ -76,31 +94,54 @@ function relayRealtimeClient(url, options = {}) {
 		let subscribed = false;
 		let ending = false;
 		let removed = false;
+		let stopped = false;
+		let failed = false;
 		let backoff = 1e3;
 		let joinTimer;
 		let retryTimer;
 		const dispatch = (type, event, message) => {
 			for (const listener of listeners) if (listener.event === `${type}:*` || listener.event === `${type}:${event}`) listener.callback(message);
 		};
+		const timedOut = () => {
+			if (subscribed || removed) return;
+			stopped = true;
+			clearTimeout(retryTimer);
+			source?.close();
+			source = void 0;
+			if (!failed) {
+				status?.("TIMED_OUT");
+				return;
+			}
+			failureOf(streamUrl).then((failure) => {
+				if (!removed) status?.("TIMED_OUT", /* @__PURE__ */ new Error(failure === void 0 ? `The relay could not join ${name}` : `The relay could not join ${name}: ${failure}`));
+			});
+		};
 		const open = () => {
-			if (removed) return;
+			if (removed || stopped) return;
 			const Source = options.EventSource ?? globalEventSource();
 			if (Source === void 0) {
+				clearTimeout(joinTimer);
 				status?.("CHANNEL_ERROR", /* @__PURE__ */ new Error("relayRealtimeClient needs EventSource"));
 				return;
 			}
-			const next = new Source(`${url}${url.includes("?") ? "&" : "?"}topic=${encodeURIComponent(name)}`, { withCredentials: true });
+			const next = new Source(streamUrl, { withCredentials: true });
+			let joined = false;
+			const retry = (message) => {
+				next.close();
+				source = void 0;
+				failed = true;
+				status?.("CHANNEL_ERROR", new Error(message));
+				retryTimer = setTimeout(open, backoff);
+				backoff = Math.min(backoff * 2, maxBackoffMs);
+			};
 			source = next;
-			clearTimeout(joinTimer);
-			joinTimer = setTimeout(() => {
-				if (!subscribed && source === next) status?.("TIMED_OUT");
-			}, timeoutMs);
 			next.addEventListener("status", (event) => {
 				const data = parse(event);
 				if (!isRecord(data) || source !== next) return;
 				if (data["status"] === "subscribed") {
 					clearTimeout(joinTimer);
 					subscribed = true;
+					joined = true;
 					ending = false;
 					backoff = 1e3;
 					status?.("SUBSCRIBED");
@@ -121,8 +162,15 @@ function relayRealtimeClient(url, options = {}) {
 				presence = Object.fromEntries(Object.entries(data).filter((entry) => Array.isArray(entry[1])));
 				dispatch("presence", "sync", {});
 			});
-			next.addEventListener("end", () => {
-				ending = true;
+			next.addEventListener("end", (event) => {
+				if (removed || source !== next) return;
+				if (joined) {
+					ending = true;
+					return;
+				}
+				const data = parse(event);
+				const reason = isRecord(data) && typeof data["reason"] === "string" ? data["reason"] : "closed";
+				retry(`The relay could not join ${name} (${reason}); retrying`);
 			});
 			next.addEventListener("error", () => {
 				if (removed || source !== next) return;
@@ -130,16 +178,7 @@ function relayRealtimeClient(url, options = {}) {
 					if (subscribed && !ending) status?.("CHANNEL_ERROR", /* @__PURE__ */ new Error(`The relay connection for ${name} dropped`));
 					return;
 				}
-				next.close();
-				source = void 0;
-				if (!subscribed) {
-					clearTimeout(joinTimer);
-					status?.("CHANNEL_ERROR", /* @__PURE__ */ new Error(`The relay refused ${name}`));
-					return;
-				}
-				status?.("CHANNEL_ERROR", /* @__PURE__ */ new Error(`The relay closed ${name}; reconnecting`));
-				retryTimer = setTimeout(open, backoff);
-				backoff = Math.min(backoff * 2, maxBackoffMs);
+				retry(subscribed ? `The relay closed ${name}; reconnecting` : `The relay could not join ${name}; retrying`);
 			});
 		};
 		const close = () => {
@@ -161,6 +200,7 @@ function relayRealtimeClient(url, options = {}) {
 			subscribe(callback) {
 				if (status !== void 0 || removed) throw new Error(`tried to subscribe multiple times to ${name} on the relay`);
 				status = callback ?? (() => void 0);
+				joinTimer = setTimeout(timedOut, timeoutMs);
 				open();
 				return channel;
 			},

package/dist/{resource-DV2GC2dB.js → resource-R3KToNze.js}

@@ -4,7 +4,7 @@ import { a as ok, r as err, s as toDbError } from "./result-ntFBW2p2.js";
 import { n as validate } from "./standard-BA3mLh6w.js";
 import { a as methodNotAllowed } from "./problem-Bf0cJ7tk.js";
 import { n as checkEach, r as checkPermission } from "./authorizer-BGhXaDmo.js";
-import { a as respond, i as isResult } from "./respond-C3CcOZlA.js";
+import { a as isResult, o as respond } from "./respond-3RKp6VgU.js";
 import { n as matchAction, r as planResource, t as TABLE_VERBS } from "./resource-DvgXqZB_.js";
 //#region src/server/resource-execute.ts
 async function settled(value) {

package/dist/{resource-execute-DqWfEc56.d.ts → resource-execute-CKBtGL8-.d.ts}

@@ -1,5 +1,5 @@
 import { n as ResourceActionSpec } from "./resource-D8pzB5Qf.js";
-import { i as ResourceContext, n as Parsed, r as ResourceAction, t as ActionArgs } from "./resource-types-BIoz_ElD.js";
+import { i as ResourceContext, n as Parsed, r as ResourceAction, t as ActionArgs } from "./resource-types-8Q5Klkpa.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/server/resource-execute.d.ts
 /**

package/dist/{resource-types-BIoz_ElD.d.ts → resource-types-8Q5Klkpa.d.ts}

@@ -1,7 +1,7 @@
 import { D as ValidationIssue, f as Result } from "./result-DZeA5KS6.js";
 import { Ft as RequestContext, K as Insert, dt as TableMeta, ht as Update, it as Row, k as AnyModels, ut as TableKey } from "./types-DFdg_4yN.js";
 import { Wt as SelectArg } from "./define-Cgru0_kF.js";
-import { a as RespondOptions } from "./respond-Dn1_YhC1.js";
+import { a as RespondOptions } from "./respond-oZeJ342J.js";
 import { D as ResourceOperation, k as TableVerb } from "./model-hwpvole9.js";
 import { a as ResourcePlan, i as ResourcePagination, n as ResourceActionSpec, r as ResourceDescription } from "./resource-D8pzB5Qf.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";

package/dist/{resources-C02l_YBJ.js → resources-DqIwoQsP.js}

@@ -1,6 +1,6 @@
 import { n as dbError } from "./errors-BVFgt8BZ.js";
 import { o as problemResponse } from "./problem-Bf0cJ7tk.js";
-import { n as actionFits, t as defineResource } from "./resource-DV2GC2dB.js";
+import { n as actionFits, t as defineResource } from "./resource-R3KToNze.js";
 //#region src/server/resources.ts
 function split(path) {
 	return path.split("/").filter((segment) => segment !== "");

package/dist/{resources-Bt2PDKE7.d.ts → resources-DxpqenZA.d.ts}

@@ -1,5 +1,5 @@
 import { k as AnyModels, ut as TableKey } from "./types-DFdg_4yN.js";
-import { l as ResourceRouteOptions } from "./resource-types-BIoz_ElD.js";
+import { l as ResourceRouteOptions } from "./resource-types-8Q5Klkpa.js";
 //#region src/server/resources.d.ts
 /** Resources by table name; `true` serves a table with the defaults. */
 type ResourceMap<M extends AnyModels, Ref = string, DbT = unknown> = { readonly [T in TableKey<M>]?: ResourceRouteOptions<M, T, Ref, DbT> | true; };

package/dist/{respond-C3CcOZlA.js → respond-3RKp6VgU.js}

@@ -6,6 +6,13 @@ import { f as checkAal, t as isAnonymousUser } from "./view-C8Ve14ja.js";
 import { n as jsonResponse } from "./json-DaByVJpw.js";
 //#region src/server/respond.ts
 /**
+* Refuses `cookies: false` with a `refresh` policy at setup: a refresh reads
+* and writes the session cookie.
+*/
+function assertCookieRefresh(options) {
+	if (options.cookies === false && options.refresh !== void 0 && options.refresh !== false) throw new TypeError("better-supabase: `cookies: false` can't be combined with `refresh`; a refresh needs the session cookie");
+}
+/**
 * The scopes a delegated user token lacks. Empty for the user's own session,
 * which a support or impersonated session counts as: an `oauth-client` actor,
 * and an `agent` on a token with a `scope`, are limited to what the user
@@ -97,4 +104,4 @@ function defaultExpose() {
 	return typeof process !== "undefined" && process.env["NODE_ENV"] === "development";
 }
 //#endregion
-export { respond as a, isResult as i, defaultPrefetchJwks as n, settle as o, guard as r, defaultExpose as t };
+export { isResult as a, guard as i, defaultExpose as n, respond as o, defaultPrefetchJwks as r, settle as s, assertCookieRefresh as t };

package/dist/{respond-Dn1_YhC1.d.ts → respond-oZeJ342J.d.ts}

@@ -70,6 +70,12 @@ interface MiddlewareOptions extends GuardOptions {
    * refreshes page loads and form posts only (`shouldRefresh`).
    */
   readonly refresh?: RefreshPolicy;
+  /**
+   * Read the session cookie. Defaults to true; `false` resolves bearer tokens
+   * and API keys only, for routes that native apps and servers call. It can't
+   * be combined with `refresh`, which rewrites cookies.
+   */
+  readonly cookies?: boolean;
 }
 /** `undefined` when `auth` may pass; otherwise the 401/403 error to send. */
 declare function guard(auth: AuthState, allow?: GuardOptions["allow"], aal?: Aal, scopes?: readonly string[]): DbError | undefined;

package/dist/server/index.d.ts

@@ -13,18 +13,18 @@ import { A as isSessionSnapshot, C as DeleteAccountResult, D as SessionMemoStats
 import { n as Impersonator, r as impersonatorOf, t as ImpersonationOptions } from "../impersonation-YTa9dZUv.js";
 import { a as checkAal, i as amrOf, n as AmrEntry, r as aalOf, t as Aal } from "../mfa-oIOYTpvc.js";
 import { _ as SupportAuthorize, a as AutomationHooks, b as TicketSubject, c as ChatActionHook, d as IdentityRef, f as IdentityTarget, g as SubscriberPolicy, h as SubscriberEvent, i as AuthorizationHooks, l as DelegationPermissions, m as Subscriber, n as Approver, o as AutomationRef, p as PrincipalByIdentity, r as ApproverOf, s as ChatAction, t as ApprovalRequestRef, u as DelegationRef, v as SupportAuthorizeInput, x as defineAuthorizationHooks, y as SupportDecision } from "../authorization-hooks-D_pwXlBs.js";
-import { c as RealtimeClient } from "../topic-BtLz-qTI.js";
+import { c as RealtimeClient } from "../topic-nQYxoTaU.js";
 import { n as toSession, t as AuthSession } from "../view-DyFdMCqg.js";
 import { C as SupportSessionStore, E as supportClaims, S as SupportSession, T as sqlSupportStore, _ as SupportCallerClaims, a as SupportPolicy, b as SupportRequest, c as supportSessions, d as clearSupportCookie, f as supportCookie, g as SupportApprover, h as SupportApprovalQuery, i as SupportOptions, l as SUPPORT_COOKIE, m as SqlSupportStoreOptions, n as SupportApi, o as SupportSessions, p as supportCookieValue, r as SupportExpireRouteOptions, s as SupportStartRequest, t as ActiveSupport, u as SupportCookieOptions, v as SupportEndedBy, w as SupportStartInput, x as SupportRequestInput, y as SupportListFilter } from "../support-B4ZBVxt3.js";
-import { a as serverCore, i as ServerCore, n as SessionEntryConfig, r as withSession, t as AuthOutageHook } from "../session-C1OuXbtN.js";
-import { a as RespondOptions, c as isResult, d as RefreshPolicy, f as isPrefetch, h as shouldRefresh, i as MiddlewareOptions, l as respond, m as shouldCheckSession, n as AuthKind, o as Settled, p as refreshFor, r as GuardOptions, s as guard, u as settle } from "../respond-Dn1_YhC1.js";
-import { a as GuardEntryConfig, i as withBetterSupabase, n as BetterSupabaseContributions, o as withGuard, r as BetterSupabaseEntry, t as BetterSupabaseConfig } from "../composite-B7f1MMgr.js";
-import { a as AuthorizedContext, c as ResourceLoaderContext, d as rolesAt, i as AuthorizeOptions, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions, u as hasRole } from "../kit-DOwKpSkA.js";
+import { a as serverCore, i as ServerCore, n as SessionEntryConfig, r as withSession, t as AuthOutageHook } from "../session-Fcft5A39.js";
+import { a as RespondOptions, c as isResult, d as RefreshPolicy, f as isPrefetch, h as shouldRefresh, i as MiddlewareOptions, l as respond, m as shouldCheckSession, n as AuthKind, o as Settled, p as refreshFor, r as GuardOptions, s as guard, u as settle } from "../respond-oZeJ342J.js";
+import { a as GuardEntryConfig, i as withBetterSupabase, n as BetterSupabaseContributions, o as withGuard, r as BetterSupabaseEntry, t as BetterSupabaseConfig } from "../composite-C-8A8qzi.js";
+import { a as AuthorizedContext, c as ResourceLoaderContext, d as rolesAt, i as AuthorizeOptions, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions, u as hasRole } from "../kit-CVgQCIBO.js";
 import { n as subjectReaders, t as SubjectReadersOptions } from "../subject-readers-8GySC9Z8.js";
 import { i as toCsv, n as csvColumns, t as CsvOptions } from "../csv-DhHQS2x_.js";
 import { i as JwsAlgorithm, n as Jwks, r as JwksOfOptions } from "../jws-D0toeQlA.js";
 import { i as ResourcePagination } from "../resource-D8pzB5Qf.js";
-import { a as ResourceHandler, c as ResourceList, l as ResourceRouteOptions, s as ResourceInput } from "../resource-types-BIoz_ElD.js";
+import { a as ResourceHandler, c as ResourceList, l as ResourceRouteOptions, s as ResourceInput } from "../resource-types-8Q5Klkpa.js";
 import { a as claimsFingerprint, i as SessionWatchStatus, n as SessionStatusRouteOptions, o as sessionStatusRoute, r as SessionStatusServer, t as SessionStatusBody } from "../session-status-qQLm7jzh.js";
 import { i as tagFor, n as cacheTagsOf, r as tagCache, t as TagOptions } from "../tags-sM-CH9Mn.js";
 import { n as RefreshOutcome, r as refreshSession } from "../refresh-DT_ICaK-.js";
@@ -228,7 +228,8 @@ interface RelayAccessInput {
 }
 /**
  * Decides whether the caller may receive or send on a topic. A throw or
- * rejection denies.
+ * rejection is a failure that may pass: a join ends with `unavailable` and the
+ * client retries, a send answers 503.
  */
 type RelayAuthorize = (input: RelayAccessInput) => boolean | PromiseLike<boolean>;
 /**
@@ -296,7 +297,7 @@ interface RealtimeRelayOptions {
   readonly problem?: ProblemFormat;
 }
 /** Why the relay ended a stream, in its `end` event. */
-type RelayEndReason = "expired" | "max_duration" | "overflow" | "closed" | "upstream_error";
+type RelayEndReason = "expired" | "max_duration" | "overflow" | "closed" | "upstream_error" | "unavailable";
 /**
  * Whether `claims` may receive or send on `topic`, by the `realtime.messages`
  * policies, checked the way Realtime checks a join: a probe message is

package/dist/server/index.js

@@ -8,27 +8,27 @@ import { i as userContext, r as impersonatorOf } from "../impersonation-DM3oWNoD
 import { t as supportOf } from "../support-view-g4YLBeqX.js";
 import { t as joinTopic } from "../channels-CfcFPuo_.js";
 import { r as toCsv, t as csvColumns } from "../csv-2rXGPNtP.js";
-import { A as suspendAccount, C as shouldRefresh, D as SERVER_EVENT_SOURCE, E as defineAuthorizationHooks, O as endSessions, S as shouldCheckSession, T as serverCore, a as unexpectedResponse, b as isPrefetch, c as extendServer, d as clearSupportCookie, f as supportCookie, h as TENANT_HEADER, i as resolveToken, j as deleteAccount, k as lastSignIns, l as supportStorage, m as supportCookieValue, n as flushEvents, o as withFlush, r as handle, s as createServer, u as SUPPORT_COOKIE, x as refreshFor, y as withSession } from "../adapter-Dyks1lX1.js";
+import { A as suspendAccount, C as shouldRefresh, D as SERVER_EVENT_SOURCE, E as defineAuthorizationHooks, O as endSessions, S as shouldCheckSession, T as serverCore, a as unexpectedResponse, b as isPrefetch, c as extendServer, d as clearSupportCookie, f as supportCookie, h as TENANT_HEADER, i as resolveToken, j as deleteAccount, k as lastSignIns, l as supportStorage, m as supportCookieValue, n as flushEvents, o as withFlush, r as handle, s as createServer, u as SUPPORT_COOKIE, x as refreshFor, y as withSession } from "../adapter-CfuBICuG.js";
 import { n as PRIMARY_COOKIE } from "../replicas-Dyoh3CEg.js";
 import { t as authContext } from "../context-DBicfUNz.js";
 import { r as PERMISSION_CAP_CLAIM } from "../delegation-DGOIiT8k.js";
 import { a as refreshSession, c as AUTH_CACHE_HEADERS, g as sessionCookieName, i as resolveAuth, m as readSession, o as clearSessionCookies, s as sessionStatus, t as clientIp, v as writeSession } from "../resolve-B0mW2m7f.js";
 import { i as defineAuthorizer, o as requestMemo, t as bindAuthorizer } from "../authorizer-BGhXaDmo.js";
 import { a as isSessionSnapshot, c as sessionMemo, d as amrOf, f as checkAal, i as authzVersionOf, l as snapshotOf, n as toSession, o as issuedAtOf, s as sessionCacheKey, u as aalOf } from "../view-C8Ve14ja.js";
-import { a as respond, i as isResult, o as settle, r as guard } from "../respond-C3CcOZlA.js";
-import { a as sqlSupportStore, i as supportSessions, n as passwordGrant, o as supportClaims, r as safeRedirectPath } from "../sign-in-B64114O4.js";
+import { a as isResult, i as guard, o as respond, s as settle } from "../respond-3RKp6VgU.js";
+import { a as sqlSupportStore, i as supportSessions, n as passwordGrant, o as supportClaims, r as safeRedirectPath } from "../sign-in-BLkRU3lc.js";
 import { n as event, t as defineEvents } from "../event-map-CtPFhcOp.js";
 import { t as subjectReaders } from "../subject-readers-B-pQ9Mmo.js";
 import { t as postgresExecutor } from "../executor-3qcMhg6R.js";
 import { n as jwtClaimsOf, r as userClaimsOf, t as authModeOf } from "../claims-DTy6R6my.js";
-import { n as withGuard, t as withBetterSupabase } from "../composite-B3TIjId4.js";
+import { n as withGuard, t as withBetterSupabase } from "../composite-D24L5RIY.js";
 import { c as verifyCompact, t as JwsError } from "../jws-DOgHJKHb.js";
 import { t as jwksSource } from "../jwks-cache-DEsKI0hJ.js";
 import { i as rateLimitPolicyHeader, n as periodSeconds, r as rateLimitHeader, t as isRateLimitPolicyName } from "../ratelimit-headers-kEcXyO3H.js";
-import { t as defineResource } from "../resource-DV2GC2dB.js";
+import { t as defineResource } from "../resource-R3KToNze.js";
 import { i as withServerTiming, n as parseDbStats, r as withDbStats, t as DB_CALLS_HEADER } from "../timing-dypS0nxW.js";
 import { n as tagCache, r as tagFor, t as cacheTagsOf } from "../tags-CIZTqtlY.js";
-import { a as rolesAt, r as hasRole } from "../kit-5l-o8RxL.js";
+import { a as rolesAt, r as hasRole } from "../kit-DhlB-vv_.js";
 import { defineMiddleware } from "@supabase/middleware";
 //#region src/server/csv.ts
 function disposition(filename) {
@@ -214,6 +214,7 @@ async function realtimeTopicAccess(postgres, input) {
 const encoder = new TextEncoder();
 const frame = (event, data) => encoder.encode(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
 const PING = encoder.encode(": ping\n\n");
+const TRANSIENT_AUTH = /* @__PURE__ */ new Set(["network", "unexpected"]);
 const STREAM_HEADERS = {
 	"content-type": "text/event-stream; charset=utf-8",
 	"cache-control": "no-store, no-transform",
@@ -262,6 +263,10 @@ function realtimeRelay(server, options) {
 		return upstream;
 	};
 	const problem = (error) => problemResponse(error, { format: options.problem });
+	const unavailableStream = () => new Response(`retry: ${String(retryMs)}\n\nevent: end\ndata: ${JSON.stringify({ reason: "unavailable" })}\n\n`, {
+		status: 200,
+		headers: STREAM_HEADERS
+	});
 	const topicOf = (name) => options.topics.find((each) => each.match(name) !== null);
 	const allowed = async (input) => {
 		try {
@@ -273,7 +278,7 @@ function realtimeRelay(server, options) {
 				action: input.action
 			}) : false;
 		} catch {
-			return false;
+			return "unavailable";
 		}
 	};
 	const claimsOf = (auth, support) => {
@@ -293,16 +298,18 @@ function realtimeRelay(server, options) {
 		if (!topic) return { refusal: problem(dbError("not_found", `No relayed topic "${name}"`)) };
 		const ctx = await server.context(request, { refresh });
 		const { auth, support } = ctx;
-		if (auth.kind === "invalid") return { refusal: ctx.apply(problem(auth.error)) };
+		if (auth.kind === "invalid") return { refusal: ctx.apply(action === "receive" && TRANSIENT_AUTH.has(auth.error.kind) ? unavailableStream() : problem(auth.error)) };
 		if (!(auth.kind !== "anon") && (topic.private || action === "send")) return { refusal: ctx.apply(problem(dbError("unauthorized", "Sign in to join this topic"))) };
 		if (action === "send" && support?.session.readOnly === true) return { refusal: ctx.apply(problem(readOnlyError())) };
-		if (!(!topic.private && action === "receive" ? true : await allowed({
+		const ok = !topic.private && action === "receive" ? true : await allowed({
 			topic: name,
 			action,
 			auth,
 			support,
 			claims: claimsOf(auth, support)
-		}))) return { refusal: ctx.apply(problem(dbError("forbidden", `Not allowed to ${action} on "${name}"`))) };
+		});
+		if (ok === "unavailable") return { refusal: ctx.apply(action === "receive" ? unavailableStream() : problem(dbError("network", `Could not check access to "${name}"`))) };
+		if (!ok) return { refusal: ctx.apply(problem(dbError("forbidden", `Not allowed to ${action} on "${name}"`))) };
 		return {
 			topic,
 			ctx

package/dist/{session-C1OuXbtN.d.ts → session-Fcft5A39.d.ts}

@@ -3,7 +3,7 @@ import { n as AuthOutageEvent, o as EventHub } from "./events-vcqenSYU.js";
 import { g as SessionEncoding, o as ResolvePhase, p as CookieScope, r as AuthState, t as AuthResolution } from "./resolve-CXX6DHv3.js";
 import { a as ServerContext, r as ContextOptions } from "./server-types-gR4Q1aM0.js";
 import { t as ActiveSupport } from "./support-B4ZBVxt3.js";
-import { d as RefreshPolicy } from "./respond-Dn1_YhC1.js";
+import { d as RefreshPolicy } from "./respond-oZeJ342J.js";
 import { SingleKeyEntry } from "@supabase/middleware";
 //#region src/server/entries/core.d.ts
 /**

package/dist/{sign-in-B64114O4.js → sign-in-BLkRU3lc.js}

@@ -5,7 +5,7 @@ import { n as validate } from "./standard-BA3mLh6w.js";
 import { o as problemResponse } from "./problem-Bf0cJ7tk.js";
 import { i as sqlIdent } from "./template-Drgg3v2J.js";
 import { t as fromPgError } from "./pg-error-B5QLDcbG.js";
-import { d as clearSupportCookie, f as supportCookie, m as supportCookieValue } from "./adapter-Dyks1lX1.js";
+import { d as clearSupportCookie, f as supportCookie, m as supportCookieValue } from "./adapter-CfuBICuG.js";
 import { a as emitBlockEvent } from "./block-events-pBXPzwnW.js";
 import { t as cronRoute } from "./cron-route-UU9i5i9J.js";
 import { t as boundedTtlCache } from "./ttl-cache-Bhr9swjT.js";

package/dist/solid/index.d.ts

@@ -2,12 +2,12 @@ import { b as DbError } from "../result-DZeA5KS6.js";
 import { Ct as Events, D as BlockEventPattern, T as BlockEvent, bt as EventMap, k as BlockEventsMatching } from "../events-vcqenSYU.js";
 import { pt as QuerySpec } from "../define-Cgru0_kF.js";
 import { tt as TemplateValues } from "../bucket-vc-QRrva.js";
-import { g as TopicHandlers, m as Topic, p as SubscriptionStatus, r as PresenceMember, t as EventSchemas } from "../topic-BtLz-qTI.js";
-import { t as AuthSnapshot } from "../bind-C801IaK-.js";
+import { g as TopicHandlers, m as Topic, p as SubscriptionStatus, r as PresenceMember, t as EventSchemas } from "../topic-nQYxoTaU.js";
+import { t as AuthSnapshot } from "../bind-pu5TLrla.js";
 import { t as AuthSession } from "../view-DyFdMCqg.js";
-import { n as Controller } from "../controller-CJUXhshv.js";
-import { C as LiveCountSource, D as ProfileOf, E as PresenceTopic, O as UseActionOptions, S as LiveCountHookOptions, T as PresenceHookOptions, _ as ActionResultOf, a as DataRows, b as ClaimsOf, c as DataWrites, d as BlockMutationState, f as BlockQueryActions, g as ActionInputOf, h as BlockRefetchOn, i as DataRow, l as BlockEventSource, m as BlockQueryState, n as DataId, o as DataSource, p as BlockQueryOptions, r as DataListArgs, s as DataState, t as fieldErrorsOf, u as BlockMutationActions, v as ActionState, w as LiveQueryHookOptions, x as ClientLike, y as BroadcastOptions } from "../field-errors-DqlebtTE.js";
-import { n as BlockOptions } from "../block-env-BeG4DiiO.js";
+import { n as Controller } from "../controller-BR7CZ1R9.js";
+import { C as LiveCountSource, D as ProfileOf, E as PresenceTopic, O as UseActionOptions, S as LiveCountHookOptions, T as PresenceHookOptions, _ as ActionResultOf, a as DataRows, b as ClaimsOf, c as DataWrites, d as BlockMutationState, f as BlockQueryActions, g as ActionInputOf, h as BlockRefetchOn, i as DataRow, l as BlockEventSource, m as BlockQueryState, n as DataId, o as DataSource, p as BlockQueryOptions, r as DataListArgs, s as DataState, t as fieldErrorsOf, u as BlockMutationActions, v as ActionState, w as LiveQueryHookOptions, x as ClientLike, y as BroadcastOptions } from "../field-errors-DkAemDoc.js";
+import { n as BlockOptions } from "../block-env-CA65ulTD.js";
 import { n as BlockDataOf, r as BlockMethodName, t as BlockArgsOf } from "../block-method-CiVa2G-J.js";
 import { t as SupportView } from "../support-view-BYOgwXsJ.js";
 import { SupabaseClient } from "@supabase/supabase-js";

package/dist/solid-start/index.d.ts

@@ -2,9 +2,9 @@ import { O as AnyFunctions, k as AnyModels } from "../types-DFdg_4yN.js";
 import { l as PermissionRef, t as AnyAuthorizer } from "../authorizer-B6X09otb.js";
 import { t as BetterSupabase } from "../define-Cgru0_kF.js";
 import { n as BetterServer } from "../server-types-gR4Q1aM0.js";
-import { a as AuthorizedContext, l as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-DOwKpSkA.js";
-import { t as RefusalRedirects } from "../refusal-CSntB_x8.js";
-import { n as FrameworkOptions, r as LocalsResource, t as FrameworkLocals } from "../framework-CF6zFU7a.js";
+import { a as AuthorizedContext, l as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-CVgQCIBO.js";
+import { t as RefusalRedirects } from "../refusal-OrlI3g4H.js";
+import { n as FrameworkOptions, r as LocalsResource, t as FrameworkLocals } from "../framework-x9Y4uB1q.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/solid-start/index.d.ts
 /** The part of a SolidStart `FetchEvent` the integration reads and writes. */

package/dist/solid-start/index.js

@@ -1,9 +1,9 @@
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-Dyks1lX1.js";
-import { t as defaultExpose } from "../respond-C3CcOZlA.js";
-import { i as requireCaller, o as runAction } from "../kit-5l-o8RxL.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-CfuBICuG.js";
+import { n as defaultExpose } from "../respond-3RKp6VgU.js";
+import { i as requireCaller, o as runAction } from "../kit-DhlB-vv_.js";
 import { i as nitroCloudflareEnv } from "../shared-Bf-I13Ht.js";
-import { i as localsOf, r as frameworkEntry } from "../framework-BozTXRzt.js";
-import { r as refusalResponse } from "../refusal-ByBZcm0V.js";
+import { i as localsOf, r as frameworkEntry } from "../framework-CNhTg0th.js";
+import { r as refusalResponse } from "../refusal-D48CMqpQ.js";
 import { t as beforeRoute } from "../before-route-B23K2zYU.js";
 //#region src/solid-start/index.ts
 /** SolidStart integration: middleware, guards and server function actions. */

package/dist/spec/index.d.ts

@@ -1,8 +1,8 @@
 import { t as DescribedFunction } from "../function-contract-DxFNOmsm.js";
 import { C as ModelWebhook, D as ResourceOperation, E as OperationSource, O as SecurityRequirement, S as ModelTag, T as OAuthFlow, _ as ModelResponseOrRef, a as JsonSchema, b as ModelServer, c as ModelChannelOperation, d as ModelInfo, f as ModelMessage, g as ModelResponse, h as ModelParameter, i as JsonObject, k as TableVerb, l as ModelContent, m as ModelOperation, n as DataApiOperation, o as ModelBody, p as ModelMessageTrait, r as HttpMethod, s as ModelChannel, t as ApiModel, u as ModelExample, v as ModelSecurityProfileRequirement, w as ModelWorkflow, x as ModelStep, y as ModelSecurityScheme } from "../model-hwpvole9.js";
 import { a as ResourcePlan, o as StandardLike, r as ResourceDescription } from "../resource-D8pzB5Qf.js";
-import { t as SPEC_PINS } from "../spec-pins-DIx95afw.js";
-import { A as AnyOpenApiDocument, B as OpenApiSecurityRequirement, C as TopicInput, D as DEFAULT_ERRORS, E as CustomSecurity, F as OpenApi33PreviewDocument, H as RenderedOpenApi, I as OpenApiComponents, L as OpenApiDocument, M as OpenApi30Document, N as OpenApi31Document, O as PROBLEM_SCHEMA, P as OpenApi32Document, R as OpenApiDocuments, S as EventsOptions, T as DataApiOptions, V as OpenApiVersion, _ as WorkflowSource, a as OverlayEngine, b as CLOUD_EVENT_TRAIT, c as defineApi, d as BuiltModel, f as ComponentNameContext, g as RouteSpec, h as ResourceInput, i as OpenApiRenderResult, j as OPENAPI_33_PREVIEW_VERSION, k as SecurityPreset, l as ApiOptions, m as OperationIdContext, n as DefineApiOptions, o as RenderOptions, p as EnrichHooks, r as OpenApiRenderOptions, s as RenderResult, t as Api, u as ApiSource, v as BlockEventSchema, w as topicsFrom, x as CloudEventsInput, y as BlockEventSchemas, z as OpenApiInfo } from "../api-CpL3hm87.js";
+import { t as SPEC_PINS } from "../spec-pins-BZkKfwY8.js";
+import { A as AnyOpenApiDocument, B as OpenApiSecurityRequirement, C as TopicInput, D as DEFAULT_ERRORS, E as CustomSecurity, F as OpenApi33PreviewDocument, H as RenderedOpenApi, I as OpenApiComponents, L as OpenApiDocument, M as OpenApi30Document, N as OpenApi31Document, O as PROBLEM_SCHEMA, P as OpenApi32Document, R as OpenApiDocuments, S as EventsOptions, T as DataApiOptions, V as OpenApiVersion, _ as WorkflowSource, a as OverlayEngine, b as CLOUD_EVENT_TRAIT, c as defineApi, d as BuiltModel, f as ComponentNameContext, g as RouteSpec, h as ResourceInput, i as OpenApiRenderResult, j as OPENAPI_33_PREVIEW_VERSION, k as SecurityPreset, l as ApiOptions, m as OperationIdContext, n as DefineApiOptions, o as RenderOptions, p as EnrichHooks, r as OpenApiRenderOptions, s as RenderResult, t as Api, u as ApiSource, v as BlockEventSchema, w as topicsFrom, x as CloudEventsInput, y as BlockEventSchemas, z as OpenApiInfo } from "../api-B6zteBya.js";
 import { a as FormatVersion, c as SpecDiagnostic, d as defineDocumentFormat, i as DocumentOf, l as VersionOf, n as DiagnosticSeverity, o as LowerContext, r as DocumentFormat, s as RenderedOf, t as AnyDocumentFormat, u as VersionStatus } from "../format-u-65igKI.js";
 //#region src/spec/build.d.ts
 /**

package/dist/spec/index.js

@@ -1,6 +1,6 @@
 import { r as isPlainObject } from "../clone-CkG0-hlI.js";
 import { a as methodNotAllowed } from "../problem-Bf0cJ7tk.js";
-import { t as SPEC_PINS } from "../spec-pins-C1Vm8OBl.js";
+import { t as SPEC_PINS } from "../spec-pins-D3zDek-u.js";
 import { t as FUNCTION_DESCRIPTOR } from "../function-contract-pEmsaUIf.js";
 import { n as memoized, t as importOptionalPeer } from "../optional-peer-C1NbBRJm.js";
 import { a as topicsFrom, c as PROBLEM_SCHEMA, d as mergeJson, f as pointerToken, i as safeKey, l as convertStandard, n as publishedResources, o as publishedBlocks, r as CLOUD_EVENT_TRAIT, s as DEFAULT_ERRORS, t as buildApiModel, u as pascal } from "../build-QitPVzzO.js";

package/dist/{spec-pins-DIx95afw.d.ts → spec-pins-BZkKfwY8.d.ts}

@@ -39,6 +39,8 @@ declare const SPEC_PINS: {
   readonly scim: "2.0";
   readonly supabaseSdkCapabilities: "1.14.0";
   readonly aiMessage: "1";
+  /** The PowerSync sync streams config edition `powersync streams` writes. */
+  readonly powersyncSyncStreams: "2";
   readonly aiSdkUiMessageStream: "v1";
   readonly anthropicMemoryTool: "20250818";
   /** RFC 5545 recurrence rules expanded by the reminders block. */

package/dist/{spec-pins-C1Vm8OBl.js → spec-pins-D3zDek-u.js}

@@ -34,6 +34,7 @@ const SPEC_PINS = {
 	scim: "2.0",
 	supabaseSdkCapabilities: "1.14.0",
 	aiMessage: "1",
+	powersyncSyncStreams: "2",
 	aiSdkUiMessageStream: "v1",
 	anthropicMemoryTool: "20250818",
 	rfc5545: "2009-09",

package/dist/sql/index.d.ts

@@ -1,5 +1,5 @@
-import { M as BlockOptionsRegistry, j as BLOCK_OPTION_SCHEMAS, k as resolveBlock } from "../authorization-CNsvnwle.js";
-import { C as OwnView, Qn as auditRegistrations, S as BlockSqlUpgrade, T as notNullCheckName, Xn as sameTenantLayout, Yn as DeclaredForeignKey, Zn as AuditedTable, _ as BlockSqlDeprecation, a as BlockSqlContext, b as BlockSqlLayout, c as BlockSqlIdType, d as MODULE_ID_TYPES, f as contractSignature, g as BlockSqlAccessProvider, h as BlockSql, i as BlockSqlAudit, l as BlockSqlNames, m as moduleIdType, n as AuditCategory, o as BlockSqlContractFunction, p as isBlockSqlIdType, r as BlockSqlAction, s as BlockSqlEmit, t as AUDIT_CATEGORIES, u as BlockSqlTableSpec, v as BlockSqlEntitlementsProvider, w as blockSqlVersion, x as BlockSqlTestFile, y as BlockSqlFile } from "../context-CKCgjEDF.js";
-import { a as appTableEventTypes } from "../app-tables-dS02piE7.js";
-import { $ as moduleHidingColumns, A as expiredFlagsQuery, B as adoptedColumnProblems, C as declaredViews, Ct as renderBlocks, D as subjectColumns, E as rlsTables, F as dataExportPlan, G as appTablesFiles, H as adoptedViews, I as excludedColumns, J as SQL_MODULES, K as DEFAULT_ROLES, L as resolveExposeColumns, M as sameTenantTrigger, N as DataExportPlan, O as TenantQuery, P as SECRET_COLUMNS, Q as moduleEventTriggers, R as AdoptedTable, S as declaredUpdatedAtTriggers, St as moduleTopics, T as policyGrants, U as APP_TABLES_MARKER, V as adoptedTables, W as APP_TABLES_MODULE, X as BlockSqlExtension, Y as resolveBlocks, Z as BlockSqlPermissionKey, _ as templateFunctions, _t as moduleDeprecations, a as scopePolicyName, at as sameBlockFile, b as declaredTableColumns, bt as customContracts, c as compileReadSet, ct as EntityRenamePlan, d as MigrationOptionUse, dt as BLOCK_RENAMES, et as modulePermissionKeys, f as migrationOptionUses, ft as currentBlockName, g as scopeProblems, gt as InstalledBlock, h as resolveProviderSql, ht as BlockSqlUpgradePlan, i as TENANT_SCOPE_POLICY, it as moduleFileVersion, j as sameTenantColumn, k as tenantsQuery, l as compileReadSets, lt as EntityRenameStep, m as SCOPE_ID_TYPES, mt as renamedBlock, n as declaredPolicies, nt as blockFileState, o as hasColumnAccess, ot as moduleDataDir, p as moduleLayout, pt as formerBlockName, q as instanceFunctions, r as widenedCommands, rt as isModuleDataFile, s as CompiledReadSet, st as moduleFilePaths, t as appTablePolicyNotes, tt as moduleSchemaExtensions, u as sharedRolesProblems, ut as entityRenamePlan, v as DeclaredView, vt as upgradePlan, w as extensionSchema, x as declaredTables, xt as moduleBody, y as PolicyGrant, yt as BlockSqlTopic, z as AdoptedView } from "../index-Dbb7BQdi.js";
-export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, type AdoptedTable, type AdoptedView, type AuditCategory, type AuditedTable, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, type BlockOptionsRegistry, type BlockSql, type BlockSqlAccessProvider, type BlockSqlAction, type BlockSqlAudit, type BlockSqlContext, type BlockSqlContractFunction, type BlockSqlDeprecation, type BlockSqlEmit, type BlockSqlEntitlementsProvider, type BlockSqlExtension, type BlockSqlFile, type BlockSqlIdType, type BlockSqlLayout, type BlockSqlNames, type BlockSqlPermissionKey, type BlockSqlTableSpec, type BlockSqlTestFile, type BlockSqlTopic, type BlockSqlUpgrade, type BlockSqlUpgradePlan, type CompiledReadSet, DEFAULT_ROLES, type DataExportPlan, type DeclaredForeignKey, type DeclaredView, type EntityRenamePlan, type EntityRenameStep, type InstalledBlock, MODULE_ID_TYPES, type MigrationOptionUse, type OwnView, type PolicyGrant, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, type TenantQuery, adoptedColumnProblems, adoptedTables, adoptedViews, appTableEventTypes, appTablePolicyNotes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };
+import { M as BlockOptionsRegistry, j as BLOCK_OPTION_SCHEMAS, k as resolveBlock } from "../authorization-IiE__z2m.js";
+import { C as OwnView, Qn as auditRegistrations, S as BlockSqlUpgrade, T as notNullCheckName, Xn as sameTenantLayout, Yn as DeclaredForeignKey, Zn as AuditedTable, _ as BlockSqlDeprecation, a as BlockSqlContext, b as BlockSqlLayout, c as BlockSqlIdType, d as MODULE_ID_TYPES, f as contractSignature, g as BlockSqlAccessProvider, h as BlockSql, i as BlockSqlAudit, l as BlockSqlNames, m as moduleIdType, n as AuditCategory, o as BlockSqlContractFunction, p as isBlockSqlIdType, r as BlockSqlAction, s as BlockSqlEmit, t as AUDIT_CATEGORIES, u as BlockSqlTableSpec, v as BlockSqlEntitlementsProvider, w as blockSqlVersion, x as BlockSqlTestFile, y as BlockSqlFile } from "../context-D24k1Cpc.js";
+import { a as appTableEventTypes } from "../app-tables-XwCviyhP.js";
+import { $ as BlockSqlPermissionKey, A as tenantsQuery, B as AdoptedView, C as declaredUpdatedAtTriggers, Ct as moduleBody, D as rlsTables, E as policyGrants, F as SECRET_COLUMNS, G as APP_TABLES_MARKER, H as adoptedTables, I as dataExportPlan, J as DEFAULT_ROLES, K as APP_TABLES_MODULE, L as excludedColumns, M as sameTenantColumn, N as sameTenantTrigger, O as subjectColumns, P as DataExportPlan, Q as BlockSqlExtension, R as resolveExposeColumns, S as declaredTables, St as customContracts, T as extensionSchema, Tt as renderBlocks, U as adoptedViews, V as adoptedColumnProblems, W as moduleWritesText, X as SQL_MODULES, Y as instanceFunctions, Z as resolveBlocks, _ as templateFunctions, _t as BlockSqlUpgradePlan, a as scopePolicyName, at as isModuleDataFile, b as declaredColumnTypes, bt as upgradePlan, c as compileReadSet, ct as moduleDataDir, d as MigrationOptionUse, dt as EntityRenameStep, et as moduleEventTriggers, f as migrationOptionUses, ft as entityRenamePlan, g as scopeProblems, gt as renamedBlock, h as resolveProviderSql, ht as formerBlockName, i as TENANT_SCOPE_POLICY, it as blockFileState, j as expiredFlagsQuery, k as TenantQuery, l as compileReadSets, lt as moduleFilePaths, m as SCOPE_ID_TYPES, mt as currentBlockName, n as declaredPolicies, nt as modulePermissionKeys, o as hasColumnAccess, ot as moduleFileVersion, p as moduleLayout, pt as BLOCK_RENAMES, q as appTablesFiles, r as widenedCommands, rt as moduleSchemaExtensions, s as CompiledReadSet, st as sameBlockFile, t as appTablePolicyNotes, tt as moduleHidingColumns, u as sharedRolesProblems, ut as EntityRenamePlan, v as DeclaredView, vt as InstalledBlock, w as declaredViews, wt as moduleTopics, x as declaredTableColumns, xt as BlockSqlTopic, y as PolicyGrant, yt as moduleDeprecations, z as AdoptedTable } from "../index-4WT_uRRL.js";
+export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, type AdoptedTable, type AdoptedView, type AuditCategory, type AuditedTable, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, type BlockOptionsRegistry, type BlockSql, type BlockSqlAccessProvider, type BlockSqlAction, type BlockSqlAudit, type BlockSqlContext, type BlockSqlContractFunction, type BlockSqlDeprecation, type BlockSqlEmit, type BlockSqlEntitlementsProvider, type BlockSqlExtension, type BlockSqlFile, type BlockSqlIdType, type BlockSqlLayout, type BlockSqlNames, type BlockSqlPermissionKey, type BlockSqlTableSpec, type BlockSqlTestFile, type BlockSqlTopic, type BlockSqlUpgrade, type BlockSqlUpgradePlan, type CompiledReadSet, DEFAULT_ROLES, type DataExportPlan, type DeclaredForeignKey, type DeclaredView, type EntityRenamePlan, type EntityRenameStep, type InstalledBlock, MODULE_ID_TYPES, type MigrationOptionUse, type OwnView, type PolicyGrant, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, type TenantQuery, adoptedColumnProblems, adoptedTables, adoptedViews, appTableEventTypes, appTablePolicyNotes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredColumnTypes, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, moduleWritesText, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };

package/dist/sql/index.js

@@ -1,5 +1,5 @@
-import { A as resolveBlock, l as appTableEventTypes, v as hasColumnAccess } from "../app-tables-Q0TYfeih.js";
-import { c as templateFunctions, o as resolveProviderSql, s as scopeProblems, t as SCOPE_ID_TYPES } from "../access-sql-B-MkVARa.js";
-import { Y as notNullCheckName, a as DEFAULT_ROLES } from "../workflow-sdk-Bw6_u0ar.js";
-import { $ as MODULE_ID_TYPES, A as isModuleDataFile, B as excludedColumns, C as moduleFilePaths, D as scopePolicyName, E as appTablesFiles, F as modulePermissionKeys, G as sameTenantColumn, H as SECRET_COLUMNS, I as moduleSchemaExtensions, J as BLOCK_RENAMES, K as sameTenantTrigger, L as SQL_MODULES, M as sameBlockFile, N as moduleEventTriggers, O as blockSqlVersion, P as moduleHidingColumns, Q as AUDIT_CATEGORIES, R as resolveBlocks, S as moduleDataDir, T as APP_TABLES_MODULE, U as dataExportPlan, V as resolveExposeColumns, W as subjectColumns, X as formerBlockName, Y as currentBlockName, Z as renamedBlock, _ as moduleDeprecations, a as tenantsQuery, at as declaredTables, b as declaredPolicies, c as adoptedColumnProblems, ct as extensionSchema, d as instanceFunctions, dt as auditRegistrations, et as contractSignature, f as entityRenamePlan, g as renderBlocks, h as moduleTopics, i as moduleLayout, it as declaredTableColumns, j as moduleFileVersion, k as blockFileState, l as adoptedTables, lt as policyGrants, m as moduleBody, n as compileReadSets, nt as moduleIdType, o as expiredFlagsQuery, ot as declaredUpdatedAtTriggers, p as customContracts, q as migrationOptionUses, r as sharedRolesProblems, rt as BLOCK_OPTION_SCHEMAS, s as sameTenantLayout, st as declaredViews, t as compileReadSet, tt as isBlockSqlIdType, u as adoptedViews, ut as rlsTables, v as upgradePlan, w as APP_TABLES_MARKER, x as widenedCommands, y as appTablePolicyNotes, z as TENANT_SCOPE_POLICY } from "../sql-ClTmzHs8.js";
-export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, DEFAULT_ROLES, MODULE_ID_TYPES, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, adoptedColumnProblems, adoptedTables, adoptedViews, appTableEventTypes, appTablePolicyNotes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };
+import { A as resolveBlock, l as appTableEventTypes, v as hasColumnAccess } from "../app-tables-DyswUg6J.js";
+import { c as templateFunctions, o as resolveProviderSql, s as scopeProblems, t as SCOPE_ID_TYPES } from "../access-sql-CNIgUqWf.js";
+import { Y as notNullCheckName, a as DEFAULT_ROLES } from "../workflow-sdk-DELaQEp3.js";
+import { $ as AUDIT_CATEGORIES, A as blockFileState, B as TENANT_SCOPE_POLICY, C as moduleDataDir, D as appTablesFiles, E as APP_TABLES_MODULE, F as moduleHidingColumns, G as subjectColumns, H as resolveExposeColumns, I as modulePermissionKeys, J as migrationOptionUses, K as sameTenantColumn, L as moduleSchemaExtensions, M as moduleFileVersion, N as sameBlockFile, O as scopePolicyName, P as moduleEventTriggers, Q as renamedBlock, R as SQL_MODULES, S as widenedCommands, T as APP_TABLES_MARKER, U as SECRET_COLUMNS, V as excludedColumns, W as dataExportPlan, X as currentBlockName, Y as BLOCK_RENAMES, Z as formerBlockName, _ as renderBlocks, a as tenantsQuery, at as declaredColumnTypes, b as appTablePolicyNotes, c as adoptedColumnProblems, ct as declaredUpdatedAtTriggers, d as moduleWritesText, dt as policyGrants, et as MODULE_ID_TYPES, f as instanceFunctions, ft as rlsTables, g as moduleTopics, h as moduleBody, i as moduleLayout, it as BLOCK_OPTION_SCHEMAS, j as isModuleDataFile, k as blockSqlVersion, l as adoptedTables, lt as declaredViews, m as customContracts, n as compileReadSets, nt as isBlockSqlIdType, o as expiredFlagsQuery, ot as declaredTableColumns, p as entityRenamePlan, pt as auditRegistrations, q as sameTenantTrigger, r as sharedRolesProblems, rt as moduleIdType, s as sameTenantLayout, st as declaredTables, t as compileReadSet, tt as contractSignature, u as adoptedViews, ut as extensionSchema, v as moduleDeprecations, w as moduleFilePaths, x as declaredPolicies, y as upgradePlan, z as resolveBlocks } from "../sql-fHTjZGqR.js";
+export { APP_TABLES_MARKER, APP_TABLES_MODULE, AUDIT_CATEGORIES, BLOCK_OPTION_SCHEMAS, BLOCK_RENAMES, DEFAULT_ROLES, MODULE_ID_TYPES, SCOPE_ID_TYPES, SECRET_COLUMNS, SQL_MODULES, TENANT_SCOPE_POLICY, adoptedColumnProblems, adoptedTables, adoptedViews, appTableEventTypes, appTablePolicyNotes, appTablesFiles, auditRegistrations, blockFileState, blockSqlVersion, compileReadSet, compileReadSets, contractSignature, currentBlockName, customContracts, dataExportPlan, declaredColumnTypes, declaredPolicies, declaredTableColumns, declaredTables, declaredUpdatedAtTriggers, declaredViews, entityRenamePlan, excludedColumns, expiredFlagsQuery, extensionSchema, formerBlockName, hasColumnAccess, instanceFunctions, isBlockSqlIdType, isModuleDataFile, migrationOptionUses, moduleBody, moduleDataDir, moduleDeprecations, moduleEventTriggers, moduleFilePaths, moduleFileVersion, moduleHidingColumns, moduleIdType, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, moduleWritesText, notNullCheckName, policyGrants, renamedBlock, renderBlocks, resolveBlock, resolveBlocks, resolveExposeColumns, resolveProviderSql, rlsTables, sameBlockFile, sameTenantColumn, sameTenantLayout, sameTenantTrigger, scopePolicyName, scopeProblems, sharedRolesProblems, subjectColumns, templateFunctions, tenantsQuery, upgradePlan, widenedCommands };