better-supabase 0.2.0 → 0.4.0

package/dist/otel/index.js

@@ -1,6 +1,6 @@
 import { n as definePlugin } from "../plugin-BqR6wKMB.js";
 import { t as SPEC_PINS } from "../spec-pins-C3oc-Tdp.js";
-import "../version-Cqq1m3UY.js";
+import "../version-Bmf7_FzM.js";
 import { SpanKind, SpanStatusCode, context, metrics, propagation, trace } from "@opentelemetry/api";
 //#region src/otel/index.ts
 const INSTRUMENTATION_NAME = "better-supabase";
@@ -26,13 +26,13 @@ function systemOf(executor) {
 * never recorded; `db.query.summary` is `SELECT customers`.
 *
 * ```ts
-* const sb = defineSupabase(schema).use(otel());
+* const betterSupabase = defineSupabase(schema).use(otel());
 * ```
 */
 function otel(options = {}) {
-	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.0.0");
+	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.4.0");
 	let histogram;
-	if (options.metrics !== false) histogram = (options.meter ?? metrics.getMeter("better-supabase", "0.0.0")).createHistogram("db.client.operation.duration", {
+	if (options.metrics !== false) histogram = (options.meter ?? metrics.getMeter("better-supabase", "0.4.0")).createHistogram("db.client.operation.duration", {
 		unit: "s",
 		description: "Duration of database client operations.",
 		advice: { explicitBucketBoundaries: [
@@ -50,76 +50,95 @@ function otel(options = {}) {
 	return definePlugin({
 		name: "otel",
 		enforce: "post",
-		wrapExecutor: (executor) => ({
-			...executor,
-			name: executor.name,
-			execute(op, executeContext) {
+		wrapExecutor: (executor) => {
+			const system = systemOf(executor);
+			/** Span and metric attributes per table and operation, built once. */
+			const described = /* @__PURE__ */ new Map();
+			const describe = (op) => {
 				const operation = operationName(op);
-				const summary = `${operation} ${op.table.name}`;
-				const attributes = {
-					...options.attributes,
-					"db.system.name": systemOf(executor),
-					"db.namespace": op.table.schema,
-					"db.collection.name": op.table.name,
-					"db.operation.name": operation,
-					"db.query.summary": summary,
-					"better_supabase.executor": executor.name
-				};
-				const started = performance.now();
-				return tracer.startActiveSpan(summary, {
-					kind: SpanKind.CLIENT,
-					attributes
-				}, async (span) => {
-					const finish = (errorType) => {
-						const metricAttributes = {
-							"db.system.name": attributes["db.system.name"],
+				const key = `${op.table.key}:${operation}`;
+				let entry = described.get(key);
+				if (!entry) {
+					const summary = `${operation} ${op.table.name}`;
+					entry = {
+						summary,
+						attributes: {
+							...options.attributes,
+							"db.system.name": system,
+							"db.namespace": op.table.schema,
 							"db.collection.name": op.table.name,
 							"db.operation.name": operation,
-							...errorType ? { "error.type": errorType } : {}
-						};
-						histogram?.record((performance.now() - started) / 1e3, metricAttributes);
-						span.end();
+							"db.query.summary": summary,
+							"better_supabase.executor": executor.name
+						},
+						metric: {
+							"db.system.name": system,
+							"db.collection.name": op.table.name,
+							"db.operation.name": operation
+						}
 					};
-					try {
-						const result = await executor.execute(op, executeContext);
-						if (result.ok) {
-							span.setAttribute("db.response.returned_rows", result.data.rows.length);
-							finish();
-						} else {
-							span.setAttributes({
-								"error.type": result.error.kind,
-								...result.error.code ? { "db.response.status_code": result.error.code } : {}
-							});
+					described.set(key, entry);
+				}
+				return entry;
+			};
+			return {
+				...executor,
+				name: executor.name,
+				execute(op, executeContext) {
+					const { summary, attributes, metric } = describe(op);
+					const started = performance.now();
+					return tracer.startActiveSpan(summary, {
+						kind: SpanKind.CLIENT,
+						attributes
+					}, async (span) => {
+						const finish = (errorType) => {
+							histogram?.record((performance.now() - started) / 1e3, errorType ? {
+								...metric,
+								"error.type": errorType
+							} : metric);
+							span.end();
+						};
+						try {
+							const result = await executor.execute(op, executeContext);
+							if (result.ok) {
+								if (span.isRecording()) span.setAttribute("db.response.returned_rows", result.data.rows.length);
+								finish();
+							} else {
+								span.setAttributes({
+									"error.type": result.error.kind,
+									...result.error.code ? { "db.response.status_code": result.error.code } : {}
+								});
+								span.setStatus({
+									code: SpanStatusCode.ERROR,
+									message: result.error.message
+								});
+								finish(result.error.kind);
+							}
+							return result;
+						} catch (cause) {
+							const error = cause instanceof Error ? cause : new Error(String(cause));
+							span.recordException(error);
+							span.setAttribute("error.type", error.name);
 							span.setStatus({
 								code: SpanStatusCode.ERROR,
-								message: result.error.message
+								message: error.message
 							});
-							finish(result.error.kind);
+							finish(error.name);
+							throw cause;
 						}
-						return result;
-					} catch (cause) {
-						const error = cause instanceof Error ? cause : new Error(String(cause));
-						span.recordException(error);
-						span.setAttribute("error.type", error.name);
-						span.setStatus({
-							code: SpanStatusCode.ERROR,
-							message: error.message
-						});
-						finish(error.name);
-						throw cause;
-					}
-				});
-			}
-		})
+					});
+				}
+			};
+		}
 	});
 }
 /**
-* Spans for auth resolution and session refreshes, from `sb.events`.
+* Spans for auth resolution and session refreshes, from `betterSupabase.events`.
 * Returns a function that stops listening.
 */
-function traceAuth(sb, options = {}) {
-	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.0.0");
-	const offAuth = sb.events.on("auth", (event) => {
+function traceAuth(betterSupabase, options = {}) {
+	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.4.0");
+	const offAuth = betterSupabase.events.on("auth", (event) => {
 		const span = tracer.startSpan("auth.resolve", {
 			kind: SpanKind.INTERNAL,
 			attributes: {
@@ -131,7 +150,7 @@ function traceAuth(sb, options = {}) {
 		if (!event.ok) span.setStatus({ code: SpanStatusCode.ERROR });
 		span.end();
 	});
-	const offRefresh = sb.events.on("refresh", (event) => {
+	const offRefresh = betterSupabase.events.on("refresh", (event) => {
 		const end = Date.now();
 		const span = tracer.startSpan("auth.refresh", {
 			kind: SpanKind.CLIENT,
@@ -157,7 +176,9 @@ function traceAuth(sb, options = {}) {
 function tracedFetch(base = fetch) {
 	return (input, init) => {
 		const headers = new Headers(init?.headers ?? (input instanceof Request ? input.headers : void 0));
-		propagation.inject(context.active(), headers, { set: (carrier, key, value) => carrier.set(key, value) });
+		propagation.inject(context.active(), headers, { set: (carrier, key, value) => {
+			carrier.set(key, value);
+		} });
 		return base(input, {
 			...init,
 			headers

package/dist/{permdock-sql-CghlHPuH.js → permdock-sql-C4KFzLc9.js}

@@ -1,4 +1,4 @@
-import { n as dbError, t as DbException } from "./errors-Bl3rkOzo.js";
+import { n as dbError, t as DbException } from "./errors-L0xK41y_.js";
 //#region src/core/template.ts
 const PLACEHOLDER = /\{([A-Za-z_][A-Za-z0-9_]*)\}/g;
 function parseSegment(segment) {
@@ -21,7 +21,7 @@ function parseSegment(segment) {
 	});
 	return parts;
 }
-const escapeRegex = (text) => text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+const escapeRegex = (text) => text.replaceAll(/[.*+?^${}()|[\]\\]/g, "\\$&");
 function parseTemplate(source, separator, validate) {
 	const segments = source.split(separator).map(parseSegment);
 	const params = [];
@@ -87,7 +87,7 @@ function sqlIdent(value) {
 }
 /** Postgres identifier-safe name part: `customer-logos` → `customer_logos`. */
 function slug(value) {
-	return value.replace(/[^A-Za-z0-9]+/g, "_").replace(/^_|_$/g, "").toLowerCase();
+	return value.replaceAll(/[^A-Za-z0-9]+/g, "_").replaceAll(/^_|_$/g, "").toLowerCase();
 }
 //#endregion
 //#region src/core/permdock-sql.ts
@@ -101,17 +101,22 @@ const SPLIT_KEY = /#\d+$/;
 *
 * The helpers check role and scope, not a permission's row conditions, so
 * the condition is only correct for permissions whose grants have none
-* beyond the scope. `#n` keys are refused; other row-conditioned keys can't
-* be detected here.
+* beyond the scope. `#n` keys are refused, and so are keys the catalog marks
+* with `rowConditions: true` when one is passed.
 */
-function permdockCheck(where, target, key, id) {
+function permdockCheck(where, target, key, id, catalog) {
 	if (key === "") throw new TypeError(`${where}: a PermDock permission key is empty`);
 	if (SPLIT_KEY.test(key)) throw new TypeError(`${where}: "${key}" is one part of a permission PermDock splits by row condition. Use PermDock's generated policies for it.`);
+	if (catalog?.permissions.some((permission) => permission.key === key && permission.rowConditions === true)) throw new TypeError(`${where}: "${key}" has row conditions in PermDock's catalog (rowConditions: true), which the SQL helpers don't check. Use PermDock's generated policies for it.`);
 	const schema = sqlIdent(target.schema ?? "public");
 	if (target.scope === "global") return `(select ${schema}.permdock_has(${sqlString(key)}))`;
 	if (!SCOPE.test(target.scope)) throw new TypeError(`${where}: invalid PermDock scope "${target.scope}"`);
 	if (id === void 0) throw new TypeError(`${where}: scope "${target.scope}" needs a segment`);
 	return `${id} in (select t.id::text from ${schema}.${sqlIdent(`permitted_${target.scope}_ids`)}(${sqlString(key)}) as t(id))`;
 }
+/** The keys a bucket or topic PermDock policy names. */
+function permdockKeys(policy) {
+	return Object.values(policy.permdock).filter((key) => typeof key === "string");
+}
 //#endregion
-export { sqlString as a, sqlIdent as i, parseTemplate as n, slug as r, permdockCheck as t };
+export { sqlIdent as a, slug as i, permdockKeys as n, sqlString as o, parseTemplate as r, permdockCheck as t };

package/dist/permdock-sql-DImJULY-.d.ts

@@ -0,0 +1,17 @@
+//#region src/core/permdock-sql.d.ts
+/**
+ * The part of PermDock's `permissions.catalog.json` the Storage and Realtime
+ * builders read: `import catalog from './permissions.catalog.json'`.
+ */
+interface PermdockCatalog {
+  readonly permissions: readonly {
+    readonly key: string;
+    readonly rowConditions?: boolean;
+  }[];
+}
+/** The keys a bucket or topic PermDock policy names. */
+declare function permdockKeys(policy: {
+  readonly permdock: object;
+}): string[];
+//#endregion
+export { permdockKeys as n, PermdockCatalog as t };

package/dist/{plugin-C4TR9J0Z.d.ts → plugin-bNhvJwRh.d.ts}

@@ -1,6 +1,7 @@
-import { A as SchemaMeta, P as TableMeta, n as AnyModels } from "./types-C83v5SQz.js";
-import { g as Operation, h as MutationOp, r as Executor } from "./executor-CGdNQ27g.js";
-import { v as ErrorMapper } from "./result-CTkCZ6JA.js";
+/// <reference lib="esnext.temporal" />
+import { A as SchemaMeta, P as TableMeta, n as AnyModels } from "./types-DONv9SHN.js";
+import { g as Operation, h as MutationOp, r as Executor } from "./executor-B5IoUxLE.js";
+import { v as ErrorMapper } from "./result-CqEsbgYs.js";
 //#region src/core/plugin.d.ts
 /** Who is making the request. */
 interface Actor {
@@ -28,7 +29,7 @@ interface HookArgs {
   readonly schema: SchemaMeta;
   readonly context: RequestContext;
   readonly options: CallOptions;
-  readonly now: () => Date;
+  readonly now: () => Temporal.Instant;
 }
 type MutationKind = "insert" | "upsert" | "update" | "delete";
 interface MutationEvent {

package/dist/plugins/actor/index.d.ts

@@ -1,4 +1,4 @@
-import { f as Plugin, h as RequestContext } from "../../plugin-C4TR9J0Z.js";
+import { f as Plugin, h as RequestContext } from "../../plugin-bNhvJwRh.js";
 //#region src/plugins/actor/index.d.ts
 export interface ActorOptions {
   /** Custom actor id resolution. Defaults to `context.actor.id` for users and services. */

package/dist/plugins/actor/index.js

@@ -1,5 +1,5 @@
 import { n as definePlugin } from "../../plugin-BqR6wKMB.js";
-import { i as insertsOnly, l as withDefault, t as dbName } from "../../shared-_6-uPL7E.js";
+import { i as insertsOnly, l as withDefault, t as dbName } from "../../shared-DnoCdMDr.js";
 //#region src/plugins/actor/index.ts
 function defaultActor(context) {
 	const actor = context.actor;

package/dist/plugins/rules/index.d.ts

@@ -1,5 +1,5 @@
-import { g as Operation } from "../../executor-CGdNQ27g.js";
-import { f as Plugin, m as RepositoryExtension } from "../../plugin-C4TR9J0Z.js";
+import { g as Operation } from "../../executor-B5IoUxLE.js";
+import { f as Plugin, m as RepositoryExtension } from "../../plugin-bNhvJwRh.js";
 //#region src/plugins/rules/index.d.ts
 export type RuleLevel = "off" | "warn" | "error";
 /** A level, or a level with the rule's option: `['error', 500]`. */

package/dist/plugins/rules/index.js

@@ -1,6 +1,7 @@
-import { n as dbError, t as DbException } from "../../errors-Bl3rkOzo.js";
+import { n as dbError, t as DbException } from "../../errors-L0xK41y_.js";
+import { t as lookupOf } from "../../lookup-BaP5bI27.js";
 import { n as definePlugin } from "../../plugin-BqR6wKMB.js";
-import { n as claimAt, r as claimsOf } from "../../claims-CoTobNC-.js";
+import { n as claimAt, r as claimsOf } from "../../claims-BAf6c7is.js";
 //#region src/plugins/rules/index.ts
 /** Catches data-exposure and correctness mistakes; everything else off. */
 function safe() {
@@ -40,22 +41,42 @@ function levelOf(setting) {
 function optionOf(setting, fallback) {
 	return Array.isArray(setting) ? setting[1] : fallback;
 }
+const depths = /* @__PURE__ */ new WeakMap();
 function includeDepth(selection) {
+	let depth = depths.get(selection);
+	if (depth === void 0) {
+		depth = computeIncludeDepth(selection);
+		depths.set(selection, depth);
+	}
+	return depth;
+}
+function computeIncludeDepth(selection) {
 	let depth = 0;
 	for (const include of selection.includes) if (include.count !== void 0 || include.aggregate !== void 0) depth = Math.max(depth, 1);
 	else depth = Math.max(depth, 1 + includeDepth(include.selection));
 	return depth;
 }
+const sensitiveByTable = /* @__PURE__ */ new WeakMap();
+function sensitiveOf(table) {
+	let sensitive = sensitiveByTable.get(table);
+	if (!sensitive) {
+		sensitive = new Set(lookupOf(table).entries.filter(([, column]) => column.sensitive).map(([, column]) => column.db));
+		sensitiveByTable.set(table, sensitive);
+	}
+	return sensitive;
+}
 function sensitiveColumns(selection, table) {
 	const found = [];
-	const sensitive = new Set(Object.values(table.columns).filter((column) => column.sensitive).map((column) => column.db));
-	const columns = [...selection.columns, ...selection.aggregate?.measures ?? []];
-	for (const column of columns) if (sensitive.has(column.column)) found.push(`${table.key}.${column.column}`);
+	const sensitive = sensitiveOf(table);
+	if (sensitive.size > 0) {
+		for (const column of selection.columns) if (sensitive.has(column.column)) found.push(`${table.key}.${column.column}`);
+		for (const measure of selection.aggregate?.measures ?? []) if (sensitive.has(measure.column)) found.push(`${table.key}.${measure.column}`);
+	}
 	for (const include of selection.includes) found.push(...sensitiveColumns(include.selection, include.target));
 	return found;
 }
 function isBrowser() {
-	return typeof globalThis.window !== "undefined" && typeof globalThis.document !== "undefined";
+	return globalThis.window !== void 0 && globalThis.document !== void 0;
 }
 const TEXT_TYPES = /* @__PURE__ */ new Set([
 	"text",
@@ -68,16 +89,26 @@ const templatesBySchema = /* @__PURE__ */ new WeakMap();
 function bucketTemplates(schema) {
 	let templates = templatesBySchema.get(schema);
 	if (!templates) {
-		templates = Object.values(schema.buckets ?? {}).filter((bucket) => bucket.path.replace(/\{[^}]*\}|\//g, "").length > 0).map((bucket) => new RegExp(`^${bucket.path.split(/\{[^}]*\}/).map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("[^/]+")}$`));
+		templates = Object.values(schema.buckets ?? {}).filter((bucket) => bucket.path.replaceAll(/\{[^}]*\}|\//g, "").length > 0).map((bucket) => new RegExp(`^${bucket.path.split(/\{[^}]*\}/).map((part) => part.replaceAll(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("[^/]+")}$`));
 		templatesBySchema.set(schema, templates);
 	}
 	return templates;
 }
+const urlColumnsByTable = /* @__PURE__ */ new WeakMap();
+/** Scalar text columns named `*_url`, the only ones the rule inspects. */
+function urlColumns(table) {
+	let columns = urlColumnsByTable.get(table);
+	if (!columns) {
+		columns = lookupOf(table).entries.map(([, column]) => column).filter((column) => column.db.endsWith("_url") && !column.array && TEXT_TYPES.has(column.type));
+		urlColumnsByTable.set(table, columns);
+	}
+	return columns;
+}
 function storedObjectColumn(op, schema) {
 	const rows = op.kind === "insert" ? op.rows : op.kind === "update" ? [op.set] : [];
 	if (rows.length === 0) return void 0;
-	for (const column of Object.values(op.table.columns)) {
-		if (!rows.some((row) => column.db in row) || !column.db.endsWith("_url") || column.array || !TEXT_TYPES.has(column.type)) continue;
+	for (const column of urlColumns(op.table)) {
+		if (!rows.some((row) => column.db in row)) continue;
 		const path = `${column.db.slice(0, -4)}_path`;
 		if (column.storage !== void 0) return `"${column.db}" holds paths in bucket "${column.storage}"; name it "${path}"`;
 		if (rows.some((row) => {
@@ -87,27 +118,26 @@ function storedObjectColumn(op, schema) {
 	}
 }
 function checks(rules) {
+	const maxLimit = optionOf(rules.maxLimit, 1e3);
+	const maxDepth = optionOf(rules.maxIncludeDepth, 3);
 	return {
 		noUnboundedFindMany: (op) => op.kind === "select" && op.single === void 0 && !op.head && op.limit === void 0 ? "findMany without limit reads every visible row" : void 0,
-		maxLimit: (op) => {
-			const max = optionOf(rules.maxLimit, 1e3);
-			return op.kind === "select" && op.limit !== void 0 && op.limit > max ? `limit ${op.limit} is above the maximum of ${max}` : void 0;
-		},
+		maxLimit: (op) => op.kind === "select" && op.limit !== void 0 && op.limit > maxLimit ? `limit ${op.limit} is above the maximum of ${maxLimit}` : void 0,
 		requireOrderByForCursor: (op) => op.kind === "select" && !op.head && op.orderBy.length === 0 && (op.offset !== void 0 || op.limit !== void 0 && op.limit > 1) ? "paging without orderBy returns rows in no stable order" : void 0,
 		maxIncludeDepth: (op) => {
-			const max = optionOf(rules.maxIncludeDepth, 3);
+			const max = maxDepth;
 			const selection = op.kind === "select" ? op.selection : op.returning;
 			const depth = selection ? includeDepth(selection) : 0;
 			return depth > max ? `includes nest ${depth} levels deep (maximum ${max})` : void 0;
 		},
 		requireTenantContext: (op, { context, schema }) => {
-			if (!op.table.flags.tenant || context.actor?.kind === "service") return void 0;
+			if (!op.table.flags.tenant || context.actor?.kind === "service") return;
 			const claim = optionOf(rules.requireTenantContext, claimsOf(schema).tenant);
 			return context.tenant === void 0 && claimAt(context.claims, claim) === void 0 ? `"${op.table.key}" is tenant-scoped but the request has no tenant (context.tenant or claim "${claim}")` : void 0;
 		},
 		noAdminInBrowser: (_op, { context }) => context.actor?.kind === "service" && isBrowser() ? "a service-role connection is running in a browser" : void 0,
 		noSensitiveSelect: (op, { options }) => {
-			if (options["sensitive"] === true) return void 0;
+			if (options["sensitive"] === true) return;
 			const selection = op.kind === "select" ? op.selection : op.returning;
 			const columns = selection ? sensitiveColumns(selection, op.table) : [];
 			return columns.length > 0 ? `reads sensitive column(s) ${columns.join(", ")}; pass { sensitive: true } to allow` : void 0;

package/dist/plugins/soft-delete/index.d.ts

@@ -1,6 +1,6 @@
-import { C as PrimaryKeyValue } from "../../types-C83v5SQz.js";
-import { t as AsyncResult } from "../../result-CTkCZ6JA.js";
-import { f as Plugin, m as RepositoryExtension, o as HasFlag } from "../../plugin-C4TR9J0Z.js";
+import { C as PrimaryKeyValue } from "../../types-DONv9SHN.js";
+import { t as AsyncResult } from "../../result-CqEsbgYs.js";
+import { f as Plugin, m as RepositoryExtension, o as HasFlag } from "../../plugin-bNhvJwRh.js";
 //#region src/plugins/soft-delete/index.d.ts
 export interface SoftDeleteFindArgs {
   /** Include soft-deleted rows of the queried table. */

package/dist/plugins/soft-delete/index.js

@@ -1,8 +1,8 @@
 import { t as and } from "../../types-6cYK9pbJ.js";
-import { i as ok, t as AsyncResult } from "../../result-DWXatkd6.js";
+import { i as ok, t as AsyncResult } from "../../result-Bj6yt33D.js";
 import { n as definePlugin } from "../../plugin-BqR6wKMB.js";
 import { n as scopeOperation } from "../../scope-CDHcS7dE.js";
-import { a as isNotNull, o as isNull, t as dbName } from "../../shared-_6-uPL7E.js";
+import { a as isNotNull, o as isNull, t as dbName } from "../../shared-DnoCdMDr.js";
 //#region src/plugins/soft-delete/index.ts
 function deletedColumn(table) {
 	return dbName(table, table.flags.softDelete);
@@ -45,14 +45,14 @@ function softDelete() {
 			return {
 				kind: "update",
 				table,
-				set: { [column]: now().toISOString() },
+				set: { [column]: now().toString() },
 				where: op.where,
 				returning: void 0
 			};
 		},
 		repository({ table, base }) {
 			const flag = table.flags.softDelete;
-			if (!flag) return void 0;
+			if (!flag) return;
 			const update = base["update"];
 			return { restore: (key, args) => AsyncResult.from(async () => {
 				const result = await update(key, { [flag]: null }, {

package/dist/plugins/tenant/index.d.ts

@@ -1,5 +1,5 @@
-import { A as SchemaMeta } from "../../types-C83v5SQz.js";
-import { f as Plugin, h as RequestContext, m as RepositoryExtension, o as HasFlag } from "../../plugin-C4TR9J0Z.js";
+import { A as SchemaMeta } from "../../types-DONv9SHN.js";
+import { f as Plugin, h as RequestContext, m as RepositoryExtension, o as HasFlag } from "../../plugin-bNhvJwRh.js";
 //#region src/plugins/tenant/index.d.ts
 /**
  * Dotted paths to the string claims of `C` (up to three levels), e.g.
@@ -7,7 +7,7 @@ import { f as Plugin, h as RequestContext, m as RepositoryExtension, o as HasFla
  */
 export type ClaimPath<C> = unknown extends C ? string : StringPaths<C, [1, 2, 3]>;
 type StringPaths<T, Depth extends readonly unknown[]> = T extends object ? T extends readonly unknown[] ? never : { [K in keyof T & string]-?: (NonNullable<T[K]> extends string ? K : never) | (Depth extends readonly [unknown, ...infer Rest] ? `${K}.${StringPaths<NonNullable<T[K]>, Rest>}` : never); }[keyof T & string] : never;
-/** `C` is the claims type (`sb.claims(schema)`'s output); it types `claim`. */
+/** `C` is the claims type (`betterSupabase.claims(schema)`'s output); it types `claim`. */
 export interface TenantOptions<C = unknown> {
   /**
    * JWT claim path(s) holding the tenant id when `context.tenant` is not set.

package/dist/plugins/tenant/index.js

@@ -1,8 +1,8 @@
-import { n as dbError, t as DbException } from "../../errors-Bl3rkOzo.js";
+import { n as dbError, t as DbException } from "../../errors-L0xK41y_.js";
 import { n as definePlugin } from "../../plugin-BqR6wKMB.js";
 import { n as scopeOperation } from "../../scope-CDHcS7dE.js";
-import { i as tenantClaimPaths, n as claimAt, r as claimsOf } from "../../claims-CoTobNC-.js";
-import { n as equals, r as forbidden, t as dbName } from "../../shared-_6-uPL7E.js";
+import { i as tenantClaimPaths, n as claimAt, r as claimsOf } from "../../claims-BAf6c7is.js";
+import { n as equals, r as forbidden, t as dbName } from "../../shared-DnoCdMDr.js";
 //#region src/plugins/tenant/index.ts
 /**
 * The tenant for a request: `context.tenant`, then the configured claim.
@@ -30,8 +30,14 @@ function tenantColumn(table) {
 */
 function tenant(options = {}) {
 	const onMissing = options.onMissing ?? "error";
+	/** A context is fixed for a connection, so its tenant is resolved once. */
+	const resolved = /* @__PURE__ */ new WeakMap();
 	const current = (table, context, schema) => {
-		const id = resolveTenant(context, options, schema);
+		let id = resolved.get(context);
+		if (id === void 0 && !resolved.has(context)) {
+			id = resolveTenant(context, options, schema);
+			resolved.set(context, id);
+		}
 		if (id === void 0 && onMissing === "error" && tenantColumn(table)) throw new DbException(dbError("forbidden", `No tenant in the request context for "${table.key}"`));
 		return id;
 	};

package/dist/plugins/timestamps/index.d.ts

@@ -1,4 +1,4 @@
-import { f as Plugin } from "../../plugin-C4TR9J0Z.js";
+import { f as Plugin } from "../../plugin-bNhvJwRh.js";
 //#region src/plugins/timestamps/index.d.ts
 /**
  * Stamps the columns generated as `Flags.timestamps`: `createdAt` on insert,

package/dist/plugins/timestamps/index.js

@@ -1,5 +1,5 @@
 import { n as definePlugin } from "../../plugin-BqR6wKMB.js";
-import { i as insertsOnly, l as withDefault, t as dbName } from "../../shared-_6-uPL7E.js";
+import { i as insertsOnly, l as withDefault, t as dbName } from "../../shared-DnoCdMDr.js";
 //#region src/plugins/timestamps/index.ts
 /**
 * Stamps the columns generated as `Flags.timestamps`: `createdAt` on insert,
@@ -14,7 +14,7 @@ function timestamps() {
 			if (!flags) return op;
 			const created = dbName(table, flags.createdAt);
 			const updated = dbName(table, flags.updatedAt);
-			const stamp = now().toISOString();
+			const stamp = now().toString();
 			switch (op.kind) {
 				case "insert": {
 					const stampCreated = insertsOnly(op);

package/dist/plugins/validation/index.d.ts

@@ -1,5 +1,5 @@
-import { f as Plugin } from "../../plugin-C4TR9J0Z.js";
-import { t as StandardSchemaV1 } from "../../standard-CyhRzctb.js";
+import { f as Plugin } from "../../plugin-bNhvJwRh.js";
+import { t as StandardSchemaV1 } from "../../standard-BsaCYQJc.js";
 //#region src/plugins/validation/index.d.ts
 export interface TableValidators {
   /** Validates inserts and upserts, with app-cased keys. */

package/dist/plugins/validation/index.js

@@ -1,7 +1,7 @@
-import { n as dbError, t as DbException } from "../../errors-Bl3rkOzo.js";
+import { n as dbError, t as DbException } from "../../errors-L0xK41y_.js";
 import { n as definePlugin } from "../../plugin-BqR6wKMB.js";
-import { t as validate } from "../../standard-FUi3Z3-7.js";
-import { c as toDb, s as toApp } from "../../shared-_6-uPL7E.js";
+import { t as validate } from "../../standard-BRyBGTtp.js";
+import { c as toDb, s as toApp } from "../../shared-DnoCdMDr.js";
 //#region src/plugins/validation/index.ts
 async function check(schema, table, row, label, index) {
 	const result = await validate(schema, toApp(table, row), label);

package/dist/pool-DFwEQwmN.d.ts

@@ -0,0 +1,78 @@
+import { r as Executor } from "./executor-B5IoUxLE.js";
+import { t as SqlClient } from "./executor-CZ7ImRiD.js";
+//#region src/postgres/pool.d.ts
+/** The part of a `pg` pool client `createPostgres` uses. */
+interface PgPoolClient {
+  query(text: string, values?: unknown[]): Promise<{
+    rows: unknown[];
+  }>;
+  release(): void;
+}
+/** The part of a `pg.Pool` `createPostgres` uses. */
+interface PgPool {
+  connect(): Promise<PgPoolClient>;
+  end(): Promise<void>;
+}
+/** Statement timeouts in milliseconds by the role a transaction runs as. */
+interface PostgresTimeouts {
+  /** The connection-string role (`admin` and `transaction` without claims). Unset by default. */
+  readonly admin?: number;
+  /** Defaults to 8000, Supabase's setting for the role. */
+  readonly authenticated?: number;
+  /** Defaults to 3000, Supabase's setting for the role. */
+  readonly anon?: number;
+}
+interface PostgresOptions {
+  /** Defaults to `$SUPABASE_DB_URL`, then `$DATABASE_URL`. */
+  readonly connectionString?: string;
+  /** An existing pool to run on instead of opening one. `end()` ends it. */
+  readonly pool?: PgPool;
+  readonly max?: number;
+  /**
+   * Statement timeout in milliseconds, applied per transaction: one value
+   * for every role, or one per role. `set role` doesn't apply the role's own
+   * `statement_timeout`, so `authenticated` and `anon` get Supabase's 8 s
+   * and 3 s unless you set them.
+   */
+  readonly statementTimeout?: number | PostgresTimeouts;
+  /** Ends a session that stays idle inside a transaction this long, in milliseconds. */
+  readonly idleInTransactionTimeout?: number;
+  /** How long `connect` waits for a connection, in milliseconds. Defaults to 10000. */
+  readonly connectionTimeout?: number;
+  /** How long an unused connection stays open, in milliseconds. Defaults to 10000. */
+  readonly idleTimeout?: number;
+}
+/** JWT claims to run as. `role` must be `authenticated` or `anon`. */
+interface SqlClaims {
+  readonly sub?: string;
+  readonly role?: string;
+  readonly [claim: string]: unknown;
+}
+interface BetterPostgres {
+  /** Connects as the connection-string role. On Supabase that bypasses RLS. */
+  readonly admin: SqlClient;
+  /** Runs every query as the given user, with RLS, like PostgREST does. */
+  asUser(claims: SqlClaims): SqlClient;
+  /** Runs every query as `anon`. */
+  readonly anon: SqlClient;
+  /**
+   * Repositories' executor as the given user (`postgresExecutor(asUser(claims))`).
+   * `createServer` calls it for `ctx.sql`, so only apps that pass `postgres`
+   * bundle the SQL compiler.
+   */
+  executorFor(claims: SqlClaims): Executor;
+  /** Runs `fn` in one transaction. Pass claims to run it as a user. */
+  transaction<T>(fn: (client: SqlClient) => Promise<T>, options?: {
+    readonly claims?: SqlClaims;
+  }): Promise<T>;
+  end(): Promise<void>;
+  [Symbol.asyncDispose](): Promise<void>;
+}
+/**
+ * A pooled Postgres connection for jobs, scripts and tests. Each query (or
+ * transaction) runs in its own transaction; claims and role are
+ * transaction-local, so nothing leaks back into the pool.
+ */
+declare function createPostgres(options?: PostgresOptions): BetterPostgres;
+//#endregion
+export { PostgresTimeouts as a, PostgresOptions as i, PgPool as n, SqlClaims as o, PgPoolClient as r, createPostgres as s, BetterPostgres as t };