better-supabase 0.2.0 → 0.4.0

package/dist/client/index.d.ts

@@ -1,2 +1,2 @@
-import { a as BrowserOptions, i as BrowserAuth, n as AuthUser, o as createBrowser, r as BetterBrowser, t as AuthSnapshot } from "../index-D4v7sncu.js";
-export { AuthSnapshot, AuthUser, BetterBrowser, BrowserAuth, BrowserOptions, createBrowser };
+import { a as ClientOptions, i as ClientAuth, n as AuthUser, o as createClient, r as BetterClient, t as AuthSnapshot } from "../index-RlLXd8dL.js";
+export { AuthSnapshot, AuthUser, BetterClient, ClientAuth, ClientOptions, createClient };

package/dist/client/index.js

@@ -1,7 +1,8 @@
-import { a as parseEnv, n as EnvValidationError } from "../env-BEToab0I.js";
-import { t as createQueries } from "../query-ChvDbsDE.js";
+import { n as decodeJwtPayload } from "../base64-D2gsioCY.js";
+import { EnvValidationError, parseEnv } from "../env/index.js";
+import { t as createQueries } from "../query-BMMSWbI7.js";
 import { createBrowserClient } from "@supabase/ssr";
-import { createClient } from "@supabase/supabase-js";
+import { createClient as createClient$1 } from "@supabase/supabase-js";
 //#region src/client/index.ts
 const LOADING = {
 	status: "loading",
@@ -13,20 +14,9 @@ const SIGNED_OUT = {
 	user: null,
 	claims: null
 };
-function decodeClaims(token) {
-	const part = token.split(".")[1];
-	if (!part) return {};
-	try {
-		const bytes = Uint8Array.from(atob(part.replace(/-/g, "+").replace(/_/g, "/")), (char) => char.charCodeAt(0));
-		const parsed = JSON.parse(new TextDecoder().decode(bytes));
-		return typeof parsed === "object" && parsed !== null ? parsed : {};
-	} catch {
-		return {};
-	}
-}
 function snapshotOf(session) {
 	if (!session) return SIGNED_OUT;
-	const claims = decodeClaims(session.access_token);
+	const claims = decodeJwtPayload(session.access_token) ?? {};
 	const role = typeof claims["role"] === "string" ? claims["role"] : session.user.role;
 	return {
 		status: "signed-in",
@@ -59,13 +49,13 @@ function contextOf(snapshot) {
 }
 function clientFor(options) {
 	if (options.client) return options.client;
-	if (!options.env) throw new TypeError("createBrowser needs `env` ({ url, publishableKey }) or `client`");
+	if (!options.env) throw new TypeError("createClient needs `env` ({ url, publishableKey }) or `client`");
 	const checked = parseEnv({
 		SUPABASE_URL: options.env.url,
 		SUPABASE_PUBLISHABLE_KEY: options.env.publishableKey
 	});
 	if (!checked.ok) throw new EnvValidationError(checked.issues);
-	if (options.storage === "local") return createClient(checked.env.url, checked.env.publishableKey);
+	if (options.storage === "local") return createClient$1(checked.env.url, checked.env.publishableKey);
 	return createBrowserClient(checked.env.url, checked.env.publishableKey);
 }
 /**
@@ -73,10 +63,10 @@ function clientFor(options) {
 * session, TanStack Query options and an auth store for UI state.
 *
 * ```ts
-* export const browser = createBrowser(sb, { env: { url, publishableKey } });
+* export const bs = createClient(betterSupabase, { env: { url, publishableKey } });
 * ```
 */
-function createBrowser(sb, options = {}) {
+function createClient(betterSupabase, options = {}) {
 	const supabase = clientFor(options);
 	let snapshot = LOADING;
 	let db;
@@ -88,14 +78,14 @@ function createBrowser(sb, options = {}) {
 		db = void 0;
 		for (const listener of listeners) listener();
 	});
-	const browser = {
-		sb,
+	const client = {
+		betterSupabase,
 		supabase,
 		get db() {
-			db ??= sb.connect(supabase, contextOf(snapshot));
+			db ??= betterSupabase.connect(supabase, contextOf(snapshot));
 			return db;
 		},
-		queries: createQueries(sb, () => browser.db),
+		queries: createQueries(betterSupabase, () => client.db),
 		auth: {
 			current: () => snapshot,
 			subscribe: (listener) => {
@@ -106,7 +96,7 @@ function createBrowser(sb, options = {}) {
 			}
 		}
 	};
-	return browser;
+	return client;
 }
 //#endregion
-export { createBrowser };
+export { createClient };

package/dist/{compiler-CZ9nIuqy.d.ts → compiler-DB3aSFOA.d.ts}

@@ -1,5 +1,5 @@
-import { g as Operation } from "./executor-CGdNQ27g.js";
-import { i as PostgrestPlan } from "./postgrest-cAEQ_IQN.js";
+import { g as Operation } from "./executor-B5IoUxLE.js";
+import { i as PostgrestPlan } from "./postgrest-Bc-0Xw62.js";
 //#region src/core/compiler.d.ts
 /**
  * Turns an IR operation into something a backend runs. An `Executor` for a

package/dist/config/index.d.ts

@@ -1,3 +1,4 @@
-import { A as defineConfig, C as SourceConfig, D as TimestampsConfig, E as TenantConfig, F as ValibotGeneratorOptions, I as valibot, L as JsonSchemaGeneratorOptions, M as resolveJsonSchema, N as ZodGeneratorOptions, O as VectorDistance, P as zod, R as buildJsonSchema, S as SoftDeleteConfig, T as TableConfig, _ as Privilege, a as ClaimsConfig, b as ResolvedExpose, c as EntitlementsConfig, d as Generator, f as GeneratorInput, g as PluginFlagsConfig, h as OpenApiConfig, i as CONFIG_SCHEMA_URL, j as resolveConfig, k as VectorSearchConfig, l as ExposeConfig, m as JsonTypeConfig, n as BetterSupabaseConfig, o as CodecsConfig, p as JsonSchemaSource, r as BucketConfig, s as DoctorConfig, t as ActorConfig, u as GeneratedFile, v as RealtimeConfig, w as SqlConfig, x as SeedConfig, y as ResolvedConfig, z as jsonSchema } from "../index-DOsjFvMf.js";
-import { a as Casing } from "../types-C83v5SQz.js";
-export { ActorConfig, BetterSupabaseConfig, BucketConfig, CONFIG_SCHEMA_URL, type Casing, ClaimsConfig, CodecsConfig, DoctorConfig, EntitlementsConfig, ExposeConfig, GeneratedFile, Generator, GeneratorInput, type JsonSchemaGeneratorOptions, JsonSchemaSource, JsonTypeConfig, OpenApiConfig, PluginFlagsConfig, Privilege, RealtimeConfig, ResolvedConfig, ResolvedExpose, SeedConfig, SoftDeleteConfig, SourceConfig, SqlConfig, TableConfig, TenantConfig, TimestampsConfig, type ValibotGeneratorOptions, VectorDistance, VectorSearchConfig, type ZodGeneratorOptions, buildJsonSchema, defineConfig, jsonSchema, resolveConfig, resolveJsonSchema, valibot, zod };
+import { a as Casing } from "../types-DONv9SHN.js";
+import { $ as GeneratorMetadata, A as VectorSearchConfig, B as CatalogFunction, C as SoftDeleteConfig, D as TenantConfig, E as TableConfig, F as CatalogCheck, G as CatalogTable, H as CatalogGrant, I as CatalogColumn, J as ExtrasFunction, K as CatalogTrigger, L as CatalogColumnGrant, M as resolveConfig, N as resolveJsonSchema, O as TimestampsConfig, P as Catalog, Q as ForeignKeyAction, R as CatalogEnum, S as SeedConfig, T as SqlConfig, U as CatalogIndex, V as CatalogFunctionArg, W as CatalogPolicy, X as ExtrasHookFunction, Y as ExtrasHook, Z as ExtrasTable, _ as PluginFlagsConfig, a as ClaimsConfig, b as ResolvedConfig, c as EntitlementsConfig, d as Generator, et as Snapshot, f as GeneratorInput, g as PermdockPathsConfig, h as OpenApiConfig, i as CONFIG_SCHEMA_URL, j as defineConfig, k as VectorDistance, l as ExposeConfig, m as JsonTypeConfig, n as BetterSupabaseConfig, nt as SnapshotExtras, o as CodecsConfig, p as JsonSchemaSource, q as CatalogUnique, r as BucketConfig, s as DoctorConfig, t as ActorConfig, tt as SnapshotBucket, u as GeneratedFile, v as Privilege, w as SourceConfig, x as ResolvedExpose, y as RealtimeConfig, z as CatalogForeignKey } from "../config-C1CYcm6o.js";
+import { a as JsonSchemaGeneratorOptions, c as DEFAULT_CLAIMS, i as valibot, l as tenantClaimPaths, n as zod, o as buildJsonSchema, r as ValibotGeneratorOptions, s as jsonSchema, t as ZodGeneratorOptions } from "../index-Cf-D2jk1.js";
+export { type ActorConfig, type BetterSupabaseConfig, type BucketConfig, CONFIG_SCHEMA_URL, type Casing, type Catalog, type CatalogCheck, type CatalogColumn, type CatalogColumnGrant, type CatalogEnum, type CatalogForeignKey, type CatalogFunction, type CatalogFunctionArg, type CatalogGrant, type CatalogIndex, type CatalogPolicy, type CatalogTable, type CatalogTrigger, type CatalogUnique, type ClaimsConfig, type CodecsConfig, DEFAULT_CLAIMS, type DoctorConfig, type EntitlementsConfig, type ExposeConfig, type ExtrasFunction, type ExtrasHook, type ExtrasHookFunction, type ExtrasTable, type ForeignKeyAction, type GeneratedFile, type Generator, type GeneratorInput, type GeneratorMetadata, type JsonSchemaGeneratorOptions, type JsonSchemaSource, type JsonTypeConfig, type OpenApiConfig, type PermdockPathsConfig, type PluginFlagsConfig, type Privilege, type RealtimeConfig, type ResolvedConfig, type ResolvedExpose, type SeedConfig, type Snapshot, type SnapshotBucket, type SnapshotExtras, type SoftDeleteConfig, type SourceConfig, type SqlConfig, type TableConfig, type TenantConfig, type TimestampsConfig, type ValibotGeneratorOptions, type VectorDistance, type VectorSearchConfig, type ZodGeneratorOptions, buildJsonSchema, defineConfig, jsonSchema, resolveConfig, resolveJsonSchema, tenantClaimPaths, valibot, zod };

package/dist/config/index.js

@@ -1,3 +1,5 @@
-import { n as jsonSchema, t as buildJsonSchema } from "../json-schema-BpYqkCKf.js";
-import { a as zod, i as resolveJsonSchema, n as defineConfig, o as valibot, r as resolveConfig, t as CONFIG_SCHEMA_URL } from "../config-ClDXmVtY.js";
-export { CONFIG_SCHEMA_URL, buildJsonSchema, defineConfig, jsonSchema, resolveConfig, resolveJsonSchema, valibot, zod };
+import { i as tenantClaimPaths, t as DEFAULT_CLAIMS } from "../claims-BAf6c7is.js";
+import { i as resolveJsonSchema, n as defineConfig, r as resolveConfig, t as CONFIG_SCHEMA_URL } from "../config-BpxDfnbg.js";
+import { n as jsonSchema, t as buildJsonSchema } from "../json-schema-DP6V7cbr.js";
+import { n as valibot, t as zod } from "../config-CbvFmGD8.js";
+export { CONFIG_SCHEMA_URL, DEFAULT_CLAIMS, buildJsonSchema, defineConfig, jsonSchema, resolveConfig, resolveJsonSchema, tenantClaimPaths, valibot, zod };

package/dist/config-BpxDfnbg.js

@@ -0,0 +1,129 @@
+import { t as DEFAULT_CLAIMS } from "./claims-BAf6c7is.js";
+//#region src/config/config.ts
+/** The JSON Schema document for a `json[...].schema` entry. */
+function resolveJsonSchema(source) {
+	const standard = source["~standard"];
+	if (standard === void 0) return source;
+	const jsonSchema = standard.jsonSchema;
+	if (typeof jsonSchema?.input !== "function") throw new TypeError("json[...].schema: this Standard Schema library does not implement Standard JSON Schema; pass a JSON Schema object instead");
+	return jsonSchema.input({ target: "draft-2020-12" });
+}
+function entitlementsOf(config = {}) {
+	const customer = config.customer ?? "organizations.stripe_customer_id";
+	const dot = customer.lastIndexOf(".");
+	if (dot <= 0) throw new TypeError(`entitlements.customer must be "table.column", got "${customer}"`);
+	return {
+		table: customer.slice(0, dot),
+		column: customer.slice(dot + 1),
+		key: config.key ?? "id",
+		permdock: config.permdock === false ? false : { scope: config.permdock?.scope ?? "organization" }
+	};
+}
+function vectorSearchOf(config = {}) {
+	return Object.entries(config).map(([table, entry]) => typeof entry === "string" ? {
+		table,
+		column: entry,
+		distance: "cosine"
+	} : {
+		table,
+		column: entry.column,
+		distance: entry.distance ?? "cosine"
+	});
+}
+const CONFIG_SCHEMA_URL = "https://unpkg.com/better-supabase/schemas/config-v1.json";
+/** Identity helper that types `better-supabase.config.ts`. */
+function defineConfig(config) {
+	return config;
+}
+function pick(value, defaults) {
+	if (value === void 0 || value === false) return void 0;
+	if (value === true) return defaults;
+	return {
+		...defaults,
+		...value
+	};
+}
+function resolveExpose(entry) {
+	if (Array.isArray(entry)) return {
+		anon: [],
+		authenticated: entry
+	};
+	const roles = entry;
+	return {
+		anon: roles.anon ?? [],
+		authenticated: roles.authenticated ?? []
+	};
+}
+/** Applies defaults. Paths stay relative to `root`. */
+function resolveConfig(config, root) {
+	const output = config.output ?? "src/lib/supabase/generated.ts";
+	return {
+		root,
+		source: config.source ?? {},
+		schemas: config.schemas ?? ["public"],
+		casing: config.casing ?? "snake",
+		tables: config.tables ?? {},
+		output,
+		databaseTypesOutput: output.replace(/[^/]+$/, "database.types.ts"),
+		postgrestVersion: config.postgrestVersion ?? "13",
+		json: config.json ?? {},
+		codecs: {
+			timestamptz: config.codecs?.timestamptz ?? "string",
+			int8: config.codecs?.int8 ?? "number",
+			numeric: config.codecs?.numeric ?? "number"
+		},
+		sensitive: config.sensitive ?? [],
+		storagePaths: config.storagePaths ?? {},
+		expose: Object.fromEntries(Object.entries(config.expose ?? {}).map(([table, entry]) => [table, resolveExpose(entry)])),
+		readSets: config.readSets ?? [],
+		generators: config.generators ?? [],
+		plugins: {
+			timestamps: pick(config.plugins?.timestamps, {
+				createdAt: "created_at",
+				updatedAt: "updated_at"
+			}),
+			softDelete: pick(config.plugins?.softDelete, { column: "deleted_at" }),
+			tenant: pick(config.plugins?.tenant, { column: "organization_id" }),
+			actor: pick(config.plugins?.actor, {
+				createdBy: "created_by",
+				updatedBy: "updated_by"
+			})
+		},
+		claims: {
+			...DEFAULT_CLAIMS,
+			...config.claims
+		},
+		buckets: config.buckets ?? {},
+		topics: config.topics ?? {},
+		realtime: { tables: config.realtime?.tables ?? [] },
+		entitlements: entitlementsOf(config.entitlements),
+		permdock: {
+			manifest: config.permdock?.manifest ?? "permdock.manifest.json",
+			catalog: config.permdock?.catalog ?? "permissions.catalog.json"
+		},
+		vectorSearch: vectorSearchOf(config.vectorSearch),
+		sql: {
+			dir: config.sql?.dir ?? "supabase/schemas",
+			prefix: config.sql?.prefix ?? "900_better_supabase",
+			testsDir: config.sql?.testsDir ?? "supabase/tests",
+			kit: config.sql?.kit ?? []
+		},
+		seed: {
+			entry: config.seed?.entry ?? "supabase/seed.ts",
+			output: config.seed?.output ?? "supabase/seeds/000_better_supabase.sql"
+		},
+		openapi: {
+			entry: config.openapi?.entry ?? "src/lib/openapi.ts",
+			output: config.openapi?.output ?? "openapi.json"
+		},
+		doctor: {
+			ignore: config.doctor?.ignore ?? [],
+			strict: config.doctor?.strict ?? false,
+			sources: config.doctor?.sources ?? ["src/**/*.{ts,tsx}"],
+			policyHelperLimit: config.doctor?.policyHelperLimit ?? 5,
+			...config.doctor?.claimsLimit === void 0 ? {} : { claimsLimit: config.doctor.claimsLimit }
+		}
+	};
+}
+//#endregion
+export { resolveJsonSchema as i, defineConfig as n, resolveConfig as r, CONFIG_SCHEMA_URL as t };

package/dist/{index-DOsjFvMf.d.ts → config-C1CYcm6o.d.ts}

@@ -1,6 +1,7 @@
-import { A as SchemaMeta, a as Casing, b as PermdockBucketPolicy, i as BucketPolicyName } from "./types-C83v5SQz.js";
-import { GeneratorMetadata, Queryable } from "@supabase/postgrest-typegen";
-//#region src/cli/introspect/types.d.ts
+/// <reference lib="esnext.temporal" />
+import { A as SchemaMeta, a as Casing, b as PermdockBucketPolicy, i as BucketPolicyName } from "./types-DONv9SHN.js";
+import { GeneratorMetadata } from "@supabase/postgrest-typegen";
+//#region src/config/snapshot.d.ts
 /**
  * What `better-supabase introspect` reads from Postgres. `generator` is the
  * `@supabase/postgrest-typegen` contract (the same metadata behind
@@ -72,6 +73,8 @@ interface ExtrasFunction {
   readonly securityDefiner: boolean;
   /** `set` options, e.g. `{ statement_timeout: '5s' }`. */
   readonly settings: Readonly<Record<string, string>>;
+  /** Which of `anon` and `authenticated` may execute it. Absent in older snapshots. */
+  readonly execute?: readonly string[];
 }
 interface ExtrasTable {
   /** Table oid, matching `GeneratorMetadata.tables[].id`. */
@@ -91,6 +94,8 @@ interface ExtrasTable {
   readonly policies: readonly CatalogPolicy[];
   readonly triggers: readonly CatalogTrigger[];
   readonly grants: readonly CatalogGrant[];
+  /** Absent in snapshots taken before column grants were introspected. */
+  readonly columnGrants?: readonly CatalogColumnGrant[];
   /** Postgres estimates at least `LARGE_TABLE_ROWS` rows; the `unbounded-read` lint reads it. */
   readonly large?: true;
 }
@@ -109,6 +114,10 @@ interface CatalogIndex {
   readonly unique: boolean;
   readonly primary: boolean;
   readonly partial: boolean;
+  /** Access method (`btree`, `gin`, `gist`, ...). Absent in older snapshots. */
+  readonly method?: string;
+  /** The `where` of a partial index, as Postgres prints it. Absent in older snapshots. */
+  readonly predicate?: string | null;
 }
 interface CatalogPolicy {
   readonly name: string;
@@ -134,6 +143,12 @@ interface CatalogGrant {
   readonly role: string;
   readonly privileges: readonly string[];
 }
+/** A column-level `insert` or `update` grant to `anon` or `authenticated`. */
+interface CatalogColumnGrant {
+  readonly column: string;
+  readonly role: string;
+  readonly privileges: readonly string[];
+}
 interface SnapshotBucket {
   readonly id: string;
   readonly public: boolean;
@@ -175,6 +190,8 @@ interface CatalogTable {
   readonly policies: readonly CatalogPolicy[];
   readonly triggers: readonly CatalogTrigger[];
   readonly grants: readonly CatalogGrant[];
+  /** Absent in snapshots taken before column grants were introspected. */
+  readonly columnGrants?: readonly CatalogColumnGrant[];
 }
 interface CatalogColumn {
   readonly name: string;
@@ -237,49 +254,7 @@ interface CatalogFunctionArg {
   readonly hasDefault: boolean;
 }
 //#endregion
-//#region src/generators/shared.d.ts
-/** What field planning reads: the metadata and the typed-jsonb config. */
-interface SchemaSource {
-  readonly meta: SchemaMeta;
-  readonly config: {
-    readonly json: Readonly<Record<string, unknown>>;
-  };
-}
-//#endregion
-//#region src/generators/json-schema.d.ts
-interface JsonSchemaGeneratorOptions {
-  /** Output path relative to the project root. Defaults to `<output>.schema.json`. */
-  readonly output?: string;
-  /** `$id` of the document. */
-  readonly id?: string;
-}
-type JsonSchema = Record<string, unknown>;
-/** JSON Schema (2020-12) `$defs` for every table: `customersRow`, `customersInsert`, ... */
-declare function buildJsonSchema(input: SchemaSource, id?: string): JsonSchema;
-/** Writes the JSON Schema document; `createOpenApi` reuses the same `$defs`. */
-declare function jsonSchema(options?: JsonSchemaGeneratorOptions): Generator;
-//#endregion
-//#region src/generators/valibot.d.ts
-interface ValibotGeneratorOptions {
-  /** Output path relative to the project root. Defaults to `<output>.valibot.ts`. */
-  readonly output?: string;
-  /** Schemas for typed jsonb columns: `{ 'customers.metadata': './schemas.ts#metadata' }`. */
-  readonly json?: Readonly<Record<string, string>>;
-}
-/** Valibot schemas for every table's Row, Insert and Update shape. */
-declare function valibot(options?: ValibotGeneratorOptions): Generator;
-//#endregion
-//#region src/generators/zod.d.ts
-interface ZodGeneratorOptions {
-  /** Output path relative to the project root. Defaults to `<output>.zod.ts`. */
-  readonly output?: string;
-  /** Schemas for typed jsonb columns: `{ 'customers.metadata': './schemas.ts#metadata' }`. */
-  readonly json?: Readonly<Record<string, string>>;
-}
-/** Zod 4 schemas for every table's Row, Insert and Update shape. */
-declare function zod(options?: ZodGeneratorOptions): Generator;
-//#endregion
-//#region src/config/index.d.ts
+//#region src/config/config.d.ts
 /**
  * Where codegen reads the database from. Without any of these, `$DATABASE_URL`
  * and then the local stack (`supabase start`) are used.
@@ -423,8 +398,11 @@ interface DoctorConfig {
  * `numeric` as numbers.
  */
 interface CodecsConfig {
-  /** `'date'` decodes `timestamptz`/`timestamp` columns to `Date`. */
-  readonly timestamptz?: "string" | "date";
+  /**
+   * `'instant'` decodes `timestamptz` columns to `Temporal.Instant` and
+   * `timestamp` columns to `Temporal.PlainDateTime`.
+   */
+  readonly timestamptz?: "string" | "instant";
   /** `'bigint'` or `'string'` read `int8` exactly (above 2^53). */
   readonly int8?: "number" | "string" | "bigint";
   /** `'string'` reads `numeric` exactly. */
@@ -475,6 +453,22 @@ interface EntitlementsConfig {
   readonly customer?: string;
   /** The tenant id column of that table. Defaults to `id`. */
   readonly key?: string;
+  /**
+   * With a PermDock manifest, `has_entitlement` and `feature_claims` read
+   * PermDock's memberships (`member_<scope>_ids()` and
+   * `member_<scope>_ids_for(user)`) instead of `better_supabase.memberships`.
+   * `scope` is the PermDock scope tenants are (default `organization`);
+   * `false` keeps the kit's memberships table.
+   */
+  readonly permdock?: false | {
+    readonly scope?: string;
+  };
+}
+interface PermdockPathsConfig {
+  /** What `permdock supabase inspect --out` writes. Defaults to `permdock.manifest.json`. */
+  readonly manifest?: string;
+  /** What `permdock catalog` writes. Defaults to `permissions.catalog.json`. */
+  readonly catalog?: string;
 }
 /** pgvector distance: `<=>` (cosine), `<->` (l2) or `<#>` (negative inner product). */
 type VectorDistance = "cosine" | "l2" | "inner_product";
@@ -555,6 +549,8 @@ interface BetterSupabaseConfig {
   readonly topics?: Readonly<Record<string, string>>;
   readonly realtime?: RealtimeConfig;
   readonly entitlements?: EntitlementsConfig;
+  /** Where PermDock's JSON outputs are, for doctor, `gen` and the SQL kit. */
+  readonly permdock?: PermdockPathsConfig;
   /**
    * Embedding columns, keyed by `table` or `schema.table`. The
    * `vector-search` SQL kit module writes `search_<table>(query, k)` for each,
@@ -596,7 +592,11 @@ interface ResolvedConfig {
     readonly table: string;
     readonly column: string;
     readonly key: string;
+    readonly permdock: false | {
+      readonly scope: string;
+    };
   };
+  readonly permdock: Required<PermdockPathsConfig>;
   readonly vectorSearch: readonly {
     readonly table: string;
     readonly column: string;
@@ -615,4 +615,4 @@ declare function defineConfig(config: BetterSupabaseConfig): BetterSupabaseConfi
 /** Applies defaults. Paths stay relative to `root`. */
 declare function resolveConfig(config: BetterSupabaseConfig, root: string): ResolvedConfig;
 //#endregion
-export { ExtrasFunction as $, defineConfig as A, Catalog as B, SourceConfig as C, TimestampsConfig as D, TenantConfig as E, ValibotGeneratorOptions as F, CatalogFunction as G, CatalogColumn as H, valibot as I, CatalogIndex as J, CatalogFunctionArg as K, JsonSchemaGeneratorOptions as L, resolveJsonSchema as M, ZodGeneratorOptions as N, VectorDistance as O, zod as P, CatalogUnique as Q, buildJsonSchema as R, SoftDeleteConfig as S, TableConfig as T, CatalogEnum as U, CatalogCheck as V, CatalogForeignKey as W, CatalogTable as X, CatalogPolicy as Y, CatalogTrigger as Z, Privilege as _, ClaimsConfig as a, SnapshotBucket as at, ResolvedExpose as b, EntitlementsConfig as c, Queryable as ct, Generator as d, ExtrasHook as et, GeneratorInput as f, PluginFlagsConfig as g, OpenApiConfig as h, CONFIG_SCHEMA_URL as i, Snapshot as it, resolveConfig as j, VectorSearchConfig as k, ExposeConfig as l, JsonTypeConfig as m, BetterSupabaseConfig as n, ExtrasTable as nt, CodecsConfig as o, SnapshotExtras as ot, JsonSchemaSource as p, CatalogGrant as q, BucketConfig as r, ForeignKeyAction as rt, DoctorConfig as s, GeneratorMetadata as st, ActorConfig as t, ExtrasHookFunction as tt, GeneratedFile as u, RealtimeConfig as v, SqlConfig as w, SeedConfig as x, ResolvedConfig as y, jsonSchema as z };
+export { GeneratorMetadata as $, VectorSearchConfig as A, CatalogFunction as B, SoftDeleteConfig as C, TenantConfig as D, TableConfig as E, CatalogCheck as F, CatalogTable as G, CatalogGrant as H, CatalogColumn as I, ExtrasFunction as J, CatalogTrigger as K, CatalogColumnGrant as L, resolveConfig as M, resolveJsonSchema as N, TimestampsConfig as O, Catalog as P, ForeignKeyAction as Q, CatalogEnum as R, SeedConfig as S, SqlConfig as T, CatalogIndex as U, CatalogFunctionArg as V, CatalogPolicy as W, ExtrasHookFunction as X, ExtrasHook as Y, ExtrasTable as Z, PluginFlagsConfig as _, ClaimsConfig as a, ResolvedConfig as b, EntitlementsConfig as c, Generator as d, Snapshot as et, GeneratorInput as f, PermdockPathsConfig as g, OpenApiConfig as h, CONFIG_SCHEMA_URL as i, defineConfig as j, VectorDistance as k, ExposeConfig as l, JsonTypeConfig as m, BetterSupabaseConfig as n, SnapshotExtras as nt, CodecsConfig as o, JsonSchemaSource as p, CatalogUnique as q, BucketConfig as r, DoctorConfig as s, ActorConfig as t, SnapshotBucket as tt, GeneratedFile as u, Privilege as v, SourceConfig as w, ResolvedExpose as x, RealtimeConfig as y, CatalogForeignKey as z };

package/dist/{config-ClDXmVtY.js → config-CbvFmGD8.js}

@@ -1,5 +1,4 @@
-import { t as DEFAULT_CLAIMS } from "./claims-CoTobNC-.js";
-import { a as parseImport, c as schemaName, d as variantsFor, i as fieldsFor, l as siblingPath, o as propertyKey, r as HEADER, s as rowType, u as tableEntries } from "./json-schema-BpYqkCKf.js";
+import { a as parseImport, c as schemaName, d as variantsFor, i as fieldsFor, l as siblingPath, o as propertyKey, r as HEADER, s as rowType, u as tableEntries } from "./json-schema-DP6V7cbr.js";
 //#region src/generators/valibot.ts
 function scalar$1(kind) {
 	switch (kind.kind) {
@@ -10,7 +9,8 @@ function scalar$1(kind) {
 		case "boolean": return "v.boolean()";
 		case "datetime": return "v.pipe(v.string(), v.isoTimestamp())";
 		case "date": return "v.pipe(v.string(), v.isoDate())";
-		case "dateObject": return "v.date()";
+		case "instant": return "v.instance(Temporal.Instant)";
+		case "plainDateTime": return "v.instance(Temporal.PlainDateTime)";
 		case "bigint": return "v.bigint()";
 		case "json": return "json";
 		case "enum": return `v.picklist([${kind.values.map((value) => JSON.stringify(value)).join(", ")}])`;
@@ -19,7 +19,7 @@ function scalar$1(kind) {
 	}
 }
 function field$1(table, plan, jsonImports) {
-	let expr = jsonImports.get(`${table}.${plan.column.db}`) ?? (plan.customJson ? `v.custom<NonNullable<RowOf<'${table}'>['${plan.name}']>>((value) => value !== undefined)` : plan.column.storage !== void 0 ? `(v.string() as unknown as v.GenericSchema<${rowType(table, plan)}>)` : scalar$1(plan.scalar));
+	let expr = jsonImports.get(`${table}.${plan.column.db}`) ?? (plan.customJson ? `v.custom<NonNullable<RowOf<'${table}'>['${plan.name}']>>((value) => value !== undefined)` : plan.column.storage === void 0 ? scalar$1(plan.scalar) : `(v.string() as unknown as v.GenericSchema<${rowType(table, plan)}>)`);
 	if (plan.column.array) expr = `v.array(${expr})`;
 	if (plan.nullable) expr = `v.nullable(${expr})`;
 	if (plan.optional) expr = `v.exactOptional(${expr})`;
@@ -44,9 +44,9 @@ function valibot(options = {}) {
 			const lines = [
 				HEADER,
 				"import * as v from \"valibot\";",
-				""
+				"",
+				`import type { InsertOf, Json, RowOf, UpdateOf } from ${JSON.stringify(input.importPath(path, input.config.output))};`
 			];
-			lines.push(`import type { InsertOf, Json, RowOf, UpdateOf } from ${JSON.stringify(input.importPath(path, input.config.output))};`);
 			for (const [from, names] of imports) lines.push(`import { ${[...new Set(names)].sort().join(", ")} } from ${JSON.stringify(from)};`);
 			lines.push("", "const json: v.GenericSchema<Json> = v.lazy(() =>", "  v.union([v.string(), v.number(), v.boolean(), v.null(), v.array(json), v.record(v.string(), v.optional(json))]),", ");");
 			const validators = [];
@@ -67,8 +67,7 @@ function valibot(options = {}) {
 					validatorTypes.push(`  readonly ${propertyKey(key)}: { readonly insert: typeof ${insert}; readonly update: typeof ${update} };`);
 				}
 			}
-			lines.push("", "/** Write validators for the validation plugin. */");
-			lines.push("export const validators: {", ...validatorTypes, "} = {", ...validators, "};", "");
+			lines.push("", "/** Write validators for the validation plugin. */", "export const validators: {", ...validatorTypes, "} = {", ...validators, "};", "");
 			return [{
 				path,
 				contents: lines.join("\n")
@@ -87,7 +86,8 @@ function scalar(kind) {
 		case "boolean": return "z.boolean()";
 		case "datetime": return "z.iso.datetime({ offset: true })";
 		case "date": return "z.iso.date()";
-		case "dateObject": return "z.date()";
+		case "instant": return "z.instanceof(Temporal.Instant)";
+		case "plainDateTime": return "z.instanceof(Temporal.PlainDateTime)";
 		case "bigint": return "z.bigint()";
 		case "json": return "z.json()";
 		case "enum": return `z.enum([${kind.values.map((value) => JSON.stringify(value)).join(", ")}])`;
@@ -96,7 +96,7 @@ function scalar(kind) {
 	}
 }
 function field(table, plan, jsonImports) {
-	let expr = jsonImports.get(`${table}.${plan.column.db}`) ?? (plan.customJson ? `z.custom<NonNullable<RowOf<'${table}'>['${plan.name}']>>((value) => value !== undefined)` : plan.column.storage !== void 0 ? `(z.string() as unknown as z.ZodType<${rowType(table, plan)}>)` : scalar(plan.scalar));
+	let expr = jsonImports.get(`${table}.${plan.column.db}`) ?? (plan.customJson ? `z.custom<NonNullable<RowOf<'${table}'>['${plan.name}']>>((value) => value !== undefined)` : plan.column.storage === void 0 ? scalar(plan.scalar) : `(z.string() as unknown as z.ZodType<${rowType(table, plan)}>)`);
 	if (plan.column.array) expr = `z.array(${expr})`;
 	if (plan.nullable) expr = `${expr}.nullable()`;
 	if (plan.optional) expr = `${expr}.exactOptional()`;
@@ -121,9 +121,9 @@ function zod(options = {}) {
 			const lines = [
 				HEADER,
 				"import { z } from \"zod\";",
-				""
+				"",
+				`import type { InsertOf, RowOf, UpdateOf } from ${JSON.stringify(input.importPath(path, input.config.output))};`
 			];
-			lines.push(`import type { InsertOf, RowOf, UpdateOf } from ${JSON.stringify(input.importPath(path, input.config.output))};`);
 			for (const [from, names] of imports) lines.push(`import { ${[...new Set(names)].sort().join(", ")} } from ${JSON.stringify(from)};`);
 			const validators = [];
 			for (const [key, table] of tableEntries(input)) {
@@ -137,8 +137,7 @@ function zod(options = {}) {
 				}
 				if (variants.includes("Insert")) validators.push(`  ${propertyKey(key)}: { insert: ${schemaName(key, "Insert")}, update: ${schemaName(key, "Update")} },`);
 			}
-			lines.push("", "/** Write validators for the validation plugin. */");
-			lines.push("export const validators: {");
+			lines.push("", "/** Write validators for the validation plugin. */", "export const validators: {");
 			for (const [key, table] of tableEntries(input)) {
 				if (!variantsFor(table).includes("Insert")) continue;
 				lines.push(`  readonly ${propertyKey(key)}: { readonly insert: typeof ${schemaName(key, "Insert")}; readonly update: typeof ${schemaName(key, "Update")} };`);
@@ -152,126 +151,4 @@ function zod(options = {}) {
 	};
 }
 //#endregion
-//#region src/config/index.ts
-/** The JSON Schema document for a `json[...].schema` entry. */
-function resolveJsonSchema(source) {
-	const standard = source["~standard"];
-	if (standard === void 0) return source;
-	const jsonSchema = standard.jsonSchema;
-	if (typeof jsonSchema?.input !== "function") throw new TypeError("json[...].schema: this Standard Schema library does not implement Standard JSON Schema; pass a JSON Schema object instead");
-	return jsonSchema.input({ target: "draft-2020-12" });
-}
-function entitlementsOf(config = {}) {
-	const customer = config.customer ?? "organizations.stripe_customer_id";
-	const dot = customer.lastIndexOf(".");
-	if (dot <= 0) throw new TypeError(`entitlements.customer must be "table.column", got "${customer}"`);
-	return {
-		table: customer.slice(0, dot),
-		column: customer.slice(dot + 1),
-		key: config.key ?? "id"
-	};
-}
-function vectorSearchOf(config = {}) {
-	return Object.entries(config).map(([table, entry]) => typeof entry === "string" ? {
-		table,
-		column: entry,
-		distance: "cosine"
-	} : {
-		table,
-		column: entry.column,
-		distance: entry.distance ?? "cosine"
-	});
-}
-const CONFIG_SCHEMA_URL = "https://unpkg.com/better-supabase/schemas/config-v1.json";
-/** Identity helper that types `better-supabase.config.ts`. */
-function defineConfig(config) {
-	return config;
-}
-function pick(value, defaults) {
-	if (value === void 0 || value === false) return void 0;
-	if (value === true) return defaults;
-	return {
-		...defaults,
-		...value
-	};
-}
-function resolveExpose(entry) {
-	if (Array.isArray(entry)) return {
-		anon: [],
-		authenticated: entry
-	};
-	const roles = entry;
-	return {
-		anon: roles.anon ?? [],
-		authenticated: roles.authenticated ?? []
-	};
-}
-/** Applies defaults. Paths stay relative to `root`. */
-function resolveConfig(config, root) {
-	const output = config.output ?? "src/lib/supabase/generated.ts";
-	return {
-		root,
-		source: config.source ?? {},
-		schemas: config.schemas ?? ["public"],
-		casing: config.casing ?? "snake",
-		tables: config.tables ?? {},
-		output,
-		databaseTypesOutput: output.replace(/[^/]+$/, "database.types.ts"),
-		postgrestVersion: config.postgrestVersion ?? "13",
-		json: config.json ?? {},
-		codecs: {
-			timestamptz: config.codecs?.timestamptz ?? "string",
-			int8: config.codecs?.int8 ?? "number",
-			numeric: config.codecs?.numeric ?? "number"
-		},
-		sensitive: config.sensitive ?? [],
-		storagePaths: config.storagePaths ?? {},
-		expose: Object.fromEntries(Object.entries(config.expose ?? {}).map(([table, entry]) => [table, resolveExpose(entry)])),
-		readSets: config.readSets ?? [],
-		generators: config.generators ?? [],
-		plugins: {
-			timestamps: pick(config.plugins?.timestamps, {
-				createdAt: "created_at",
-				updatedAt: "updated_at"
-			}),
-			softDelete: pick(config.plugins?.softDelete, { column: "deleted_at" }),
-			tenant: pick(config.plugins?.tenant, { column: "organization_id" }),
-			actor: pick(config.plugins?.actor, {
-				createdBy: "created_by",
-				updatedBy: "updated_by"
-			})
-		},
-		claims: {
-			...DEFAULT_CLAIMS,
-			...config.claims
-		},
-		buckets: config.buckets ?? {},
-		topics: config.topics ?? {},
-		realtime: { tables: config.realtime?.tables ?? [] },
-		entitlements: entitlementsOf(config.entitlements),
-		vectorSearch: vectorSearchOf(config.vectorSearch),
-		sql: {
-			dir: config.sql?.dir ?? "supabase/schemas",
-			prefix: config.sql?.prefix ?? "900_better_supabase",
-			testsDir: config.sql?.testsDir ?? "supabase/tests",
-			kit: config.sql?.kit ?? []
-		},
-		seed: {
-			entry: config.seed?.entry ?? "supabase/seed.ts",
-			output: config.seed?.output ?? "supabase/seeds/000_better_supabase.sql"
-		},
-		openapi: {
-			entry: config.openapi?.entry ?? "src/lib/openapi.ts",
-			output: config.openapi?.output ?? "openapi.json"
-		},
-		doctor: {
-			ignore: config.doctor?.ignore ?? [],
-			strict: config.doctor?.strict ?? false,
-			sources: config.doctor?.sources ?? ["src/**/*.{ts,tsx}"],
-			policyHelperLimit: config.doctor?.policyHelperLimit ?? 5,
-			...config.doctor?.claimsLimit === void 0 ? {} : { claimsLimit: config.doctor.claimsLimit }
-		}
-	};
-}
-//#endregion
-export { zod as a, resolveJsonSchema as i, defineConfig as n, valibot as o, resolveConfig as r, CONFIG_SCHEMA_URL as t };
+export { valibot as n, zod as t };