better-supabase 0.3.0 → 0.4.0

package/dist/realtime/index.js

@@ -1,9 +1,9 @@
-import { n as dbError } from "../errors-Bl3rkOzo.js";
-import { i as ok, n as err, t as AsyncResult } from "../result-DWXatkd6.js";
-import { i as tenantClaimPaths } from "../claims-CoTobNC-.js";
-import { n as liveQuery, r as liveTopic, t as liveCount } from "../live-D8rV1Ldw.js";
-import { s as toApp } from "../shared-_6-uPL7E.js";
-import { a as sqlIdent, i as slug, o as sqlString, r as parseTemplate, t as permdockCheck } from "../permdock-sql-Bta_G0v-.js";
+import { n as dbError } from "../errors-L0xK41y_.js";
+import { i as ok, n as err, t as AsyncResult } from "../result-Bj6yt33D.js";
+import { i as tenantClaimPaths } from "../claims-BAf6c7is.js";
+import { n as liveQuery, r as liveTopic, t as liveCount } from "../live-CdJBOc4f.js";
+import { s as toApp } from "../shared-DnoCdMDr.js";
+import { a as sqlIdent, i as slug, o as sqlString, r as parseTemplate, t as permdockCheck } from "../permdock-sql-C4KFzLc9.js";
 import { REALTIME_SUBSCRIBE_STATES } from "@supabase/supabase-js";
 //#region src/realtime/topic.ts
 const VALUE = /^[\w.@+=-]+$/;
@@ -119,8 +119,8 @@ function defineTopic(template, options = {}) {
 			}
 			return `${lines.join("\n")}\n`;
 		},
-		triggerSql(sb, table, trigger) {
-			const meta = sb.meta.tables[table];
+		triggerSql(betterSupabase, table, trigger) {
+			const meta = betterSupabase.meta.tables[table];
 			if (!meta) throw new TypeError(`defineTopic: unknown table "${table}"`);
 			const values = trigger.values;
 			const parts = template.split(/(\{[^}]+\})/).filter(Boolean).map((part) => {
@@ -236,13 +236,14 @@ function defineTopic(template, options = {}) {
 				const topic = topicOf(values);
 				const checked = await validate(schemas[event], payload);
 				if (!checked.ok) return err(dbError("validation", `Invalid payload for ${event}`, { issues: checked.issues }));
-				if (isPrivate) await client.realtime.setAuth();
+				const open = client.getChannels().some((existing) => existing.topic === `realtime:${topic}`);
+				if (isPrivate && !open) await client.realtime.setAuth();
 				const channel = client.channel(topic, { config: { private: isPrivate } });
 				try {
 					const response = await channel.httpSend(event, checked.value);
 					return response.success ? ok(void 0) : err(sendError(response.status, response.error));
 				} finally {
-					await client.removeChannel(channel);
+					if (!open) await client.removeChannel(channel);
 				}
 			});
 		}
@@ -252,8 +253,8 @@ function defineTopic(template, options = {}) {
 * Reads a `realtime.broadcast_changes` message as an app-cased row change.
 * Returns `null` for messages about other tables.
 */
-function rowChange(sb, table, message) {
-	const meta = sb.meta.tables[table];
+function rowChange(betterSupabase, table, message) {
+	const meta = betterSupabase.meta.tables[table];
 	const payload = message.payload;
 	if (!meta || !payload || payload.table !== meta.name || payload.schema && payload.schema !== meta.schema) return null;
 	const operation = payload.operation ?? message.event;

package/dist/{index-kpgopLNv.d.ts → refresh-BwYkyNOQ.d.ts}

@@ -1,6 +1,4 @@
-import { m as StoredSession } from "./resolve-BRciX2jK.js";
-import "./view-3Po_PVlr.js";
-import "./entitlements-DvJXoI02.js";
+import { m as StoredSession } from "./resolve-BAqQcwMW.js";
 //#region src/auth/refresh.d.ts
 interface RefreshOptions {
   readonly url: string;
@@ -14,6 +12,11 @@ interface RefreshOptions {
     readonly secretKey: string;
   };
   readonly fetch?: typeof fetch;
+  /**
+   * Milliseconds before a refresh counts as a network failure (the session is
+   * kept). 5000 by default.
+   */
+  readonly timeoutMs?: number;
   /** Epoch milliseconds, the unit JWT `exp` and `iat` math needs. */
   readonly now?: () => number;
 }

package/dist/{resolve-BRciX2jK.d.ts → resolve-BAqQcwMW.d.ts}

@@ -1,7 +1,7 @@
-import { p as DbError } from "./result-c2OYgCV2.js";
-import { f as Logger, l as RefreshEvent } from "./events-Do8jXh4D.js";
-import { h as RequestContext } from "./plugin-DVRB8qNE.js";
-import { t as StandardSchemaV1 } from "./standard-eudBiRk1.js";
+import { p as DbError } from "./result-CqEsbgYs.js";
+import { f as Logger, l as RefreshEvent } from "./events-B21UOhvP.js";
+import { h as RequestContext } from "./plugin-bNhvJwRh.js";
+import { t as StandardSchemaV1 } from "./standard-BsaCYQJc.js";
 import { t as BetterSupabaseEnv } from "./index-Dy6kuF0P.js";
 import { CookieOptions } from "@supabase/ssr";
 import { JWTClaims, SupabaseEnv, UserClaims } from "@supabase/server";
@@ -46,9 +46,9 @@ declare function applyCookieWrites(cookies: readonly CookieRecord[], writes: rea
 //#endregion
 //#region src/auth/resolve.d.ts
 /**
- * Who is calling. `C` is the claims type from `sb.claims(schema)`; the
+ * Who is calling. `C` is the claims type from `betterSupabase.claims(schema)`; the
  * verified payload keeps every JWT claim and adds the schema's output. `P`
- * is the `user_metadata` type from `sb.userMetadata(schema)`.
+ * is the `user_metadata` type from `betterSupabase.userMetadata(schema)`.
  */
 type AuthState<C = unknown, P = unknown> = {
   readonly kind: "user";
@@ -59,7 +59,7 @@ type AuthState<C = unknown, P = unknown> = {
   /** Seconds since epoch, from the token's `exp`. */
   readonly expiresAt: number | null;
   /**
-   * `user_metadata` parsed by `sb.userMetadata(schema)`; `undefined`
+   * `user_metadata` parsed by `betterSupabase.userMetadata(schema)`; `undefined`
    * without a schema or when the metadata fails it. Users can write this
    * data themselves: use it for display, never for access.
    */
@@ -101,8 +101,13 @@ interface ResolveAuthOptions {
   readonly env: BetterSupabaseEnv;
   /** Allow refreshing an expiring cookie session. Only where cookies can be written (proxy). */
   readonly refresh?: boolean;
-  /** Refresh when the token expires within this many seconds. Defaults to 60. */
+  /**
+   * With `refresh`, refresh when the token expires within this many seconds.
+   * Defaults to 60. Without `refresh` a token stays valid until its `exp`.
+   */
   readonly leeway?: number;
+  /** Milliseconds before a refresh counts as a network failure. Defaults to 5000. */
+  readonly refreshTimeoutMs?: number;
   /**
    * Accept `sb_secret_` keys (`apikey` header) as service callers: `true` for
    * any configured key, or the key names allowed (`['cron']`). Defaults to false.
@@ -117,12 +122,12 @@ interface ResolveAuthOptions {
   /** Inline JWKS instead of fetching `env.jwksUrl` (tests, air-gapped). */
   readonly jwks?: SupabaseEnv["jwks"];
   /**
-   * Validates the verified claims (`sb.claims(schema)` sets it). A failure
+   * Validates the verified claims (`betterSupabase.claims(schema)` sets it). A failure
    * resolves to `{ kind: 'invalid', reason: 'claims' }`.
    */
   readonly claims?: StandardSchemaV1;
   /**
-   * Parses `user_metadata` into `profile` (`sb.userMetadata(schema)` sets
+   * Parses `user_metadata` into `profile` (`betterSupabase.userMetadata(schema)` sets
    * it). A failure leaves `profile` undefined and warns once; the session
    * stays valid.
    */

package/dist/{resource-CwVgiI5q.d.ts → resource-BJcaIfxi.d.ts}

@@ -1,8 +1,8 @@
 import { N as TableKey, P as TableMeta, R as Update, g as Insert, n as AnyModels, t as AnyFunctions } from "./types-DONv9SHN.js";
-import { b as ValidationIssue, o as Result } from "./result-c2OYgCV2.js";
-import { t as BetterSupabase, xt as SelectArg } from "./define-DUbydmJa.js";
-import { r as RespondOptions } from "./respond-DAkPIdTH.js";
-import { i as ResourceOperation } from "./index-qriRM9cZ.js";
+import { b as ValidationIssue, o as Result } from "./result-CqEsbgYs.js";
+import { t as BetterSupabase, xt as SelectArg } from "./define-CRS2MRV3.js";
+import { i as RespondOptions } from "./respond-DgIbdrt8.js";
+import { i as ResourceOperation } from "./index-BhHEC04r.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/server/resource.d.ts
 /** What a resource needs from `defineListQuery`. */
@@ -69,6 +69,6 @@ interface ResourceHandler {
  * `createOpenApi`: `GET/POST /<table>` and `GET/PATCH/DELETE /<table>/{id}`.
  * Shared by the HTTP adapters and the MCP table tools.
  */
-declare function defineResource<M extends AnyModels, D, F extends AnyFunctions, E, T extends TableKey<M>>(sb: BetterSupabase<M, D, F, E>, table: T, options?: ResourceRouteOptions<M, T>): ResourceHandler;
+declare function defineResource<M extends AnyModels, D, F extends AnyFunctions, E, T extends TableKey<M>>(betterSupabase: BetterSupabase<M, D, F, E>, table: T, options?: ResourceRouteOptions<M, T>): ResourceHandler;
 //#endregion
 export { ResourceRouteOptions as a, ResourcePagination as i, ResourceInput as n, defineResource as o, ResourceList as r, ResourceHandler as t };

package/dist/{resource-D30rp0GN.js → resource-My_y-Syh.js}

@@ -1,7 +1,7 @@
-import { n as dbError } from "./errors-Bl3rkOzo.js";
-import { i as ok, n as err } from "./result-DWXatkd6.js";
-import { t as validate } from "./standard-FUi3Z3-7.js";
-import { i as respond } from "./respond-C44EZAJo.js";
+import { n as dbError } from "./errors-L0xK41y_.js";
+import { i as ok, n as err } from "./result-Bj6yt33D.js";
+import { t as validate } from "./standard-BRyBGTtp.js";
+import { s as respond } from "./server-BA75B0mT.js";
 //#region src/server/resource.ts
 const INTEGER = /* @__PURE__ */ new Set([
 	"int2",
@@ -82,8 +82,8 @@ function notAllowed(allowed) {
 * `createOpenApi`: `GET/POST /<table>` and `GET/PATCH/DELETE /<table>/{id}`.
 * Shared by the HTTP adapters and the MCP table tools.
 */
-function defineResource(sb, table, options = {}) {
-	const meta = sb.meta.tables[table];
+function defineResource(betterSupabase, table, options = {}) {
+	const meta = betterSupabase.meta.tables[table];
 	if (!meta) throw new TypeError(`Unknown table "${table}"`);
 	if (options.list && options.list.table !== table) throw new TypeError(`The list query is for "${options.list.table}", not "${table}"`);
 	const operations = options.operations ?? (meta.kind === "view" ? ["list", "get"] : [

package/dist/{respond-DAkPIdTH.d.ts → respond-DgIbdrt8.d.ts}

@@ -1,12 +1,12 @@
 import { n as AnyModels, t as AnyFunctions } from "./types-DONv9SHN.js";
-import { p as DbError, t as AsyncResult } from "./result-c2OYgCV2.js";
-import { I as StatsRecorder, P as DbStats, t as BetterSupabase, y as Db } from "./define-DUbydmJa.js";
-import { h as RequestContext } from "./plugin-DVRB8qNE.js";
+import { p as DbError, t as AsyncResult } from "./result-CqEsbgYs.js";
+import { I as StatsRecorder, P as DbStats, t as BetterSupabase, y as Db } from "./define-CRS2MRV3.js";
+import { h as RequestContext } from "./plugin-bNhvJwRh.js";
 import { t as BetterSupabaseEnv } from "./index-Dy6kuF0P.js";
-import { o as SqlClaims, r as Postgres } from "./pool-B9qsLyFR.js";
-import { o as ImpersonationOptions, t as Aal } from "./mfa-x3V3vGh-.js";
-import { a as ResolveAuthOptions, r as AuthState, t as AuthResolution } from "./resolve-BRciX2jK.js";
-import { n as Bucket } from "./index-CTTMS6_1.js";
+import { o as SqlClaims, t as BetterPostgres } from "./pool-DFwEQwmN.js";
+import { o as ImpersonationOptions, t as Aal } from "./mfa-C7MNQ1Ob.js";
+import { a as ResolveAuthOptions, r as AuthState, t as AuthResolution } from "./resolve-BAqQcwMW.js";
+import { n as Bucket } from "./index-528Ugmyp.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 //#region src/server/delete-account.d.ts
 interface DeleteAccountOptions {
@@ -40,7 +40,7 @@ interface ReplicaState {
   readonly pinned: boolean;
   /** This context wrote through its repositories (or called `pin()`). */
   readonly wrote: boolean;
-  /** Sends later reads to the primary, e.g. after a write through `$client` or `$sql`. */
+  /** Sends later reads to the primary, e.g. after a write through `$client` or `ctx.sql`. */
   pin(): void;
 }
 //#endregion
@@ -49,8 +49,14 @@ interface ServerOptions {
   /** Defaults to `loadEnv()`. */
   readonly env?: BetterSupabaseEnv;
   /** Enables `ctx.sql` and `actingAs()`. */
-  readonly postgres?: Postgres;
+  readonly postgres?: BetterPostgres;
   readonly auth?: Omit<ResolveAuthOptions, "env">;
+  /**
+   * Fetch the JWKS when the server is created, so the first request verifies
+   * its token without waiting for it. Applies when `env.jwksUrl` is set and
+   * `auth.jwks` is not. Defaults to true, except under `NODE_ENV=test`.
+   */
+  readonly prefetchJwks?: boolean;
   /**
    * Extra headers on the caller's PostgREST requests, readable in Postgres as
    * `current_setting('request.headers')` (channel, request id, client IP for audit).
@@ -98,6 +104,11 @@ interface BetterServer<M extends AnyModels, F extends AnyFunctions, E, C = unkno
    * cookie session only with `refresh: true`; send `ctx.resolution.apply(response)`.
    */
   context(request: Request, options?: ContextOptions): Promise<ServerContext<M, F, E, C, P>>;
+  /**
+   * The context for a resolution from `resolve(request)`, so one resolution
+   * can back several contexts without verifying the token again.
+   */
+  contextFromResolution(resolution: AuthResolution<C, P>, request: Request, options?: Omit<ContextOptions, "refresh">): ServerContext<M, F, E, C, P>;
   /** The context for an auth state resolved elsewhere (the proxy, a queue message). */
   contextFor(auth: AuthState<C, P>, options?: ContextOptions): ServerContext<M, F, E, C, P>;
   /** A stateless supabase-js client for an auth state, optionally with extra request headers. */
@@ -121,9 +132,9 @@ interface BetterServer<M extends AnyModels, F extends AnyFunctions, E, C = unkno
 }
 /**
  * Server-side entry point for APIs, jobs, MCP servers and framework
- * adapters. Holds the secrets; `sb` stays isomorphic.
+ * adapters. Holds the secrets; `betterSupabase` stays isomorphic.
  */
-declare function createServer<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown>(sb: BetterSupabase<M, D, F, E, C, P>, options?: ServerOptions): BetterServer<M, F, E, C, P>;
+declare function createServer<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options?: ServerOptions): BetterServer<M, F, E, C, P>;
 //#endregion
 //#region src/server/respond.d.ts
 type AuthKind = AuthState["kind"];
@@ -142,6 +153,14 @@ interface GuardOptions {
    */
   readonly scopes?: readonly string[];
 }
+/** Guard options for middleware and fetch handlers that resolve the caller themselves. */
+interface MiddlewareOptions extends GuardOptions {
+  /**
+   * Refresh an expired cookie session and send the new cookies. Only for
+   * routes browsers call with cookies; bearer tokens never refresh.
+   */
+  readonly refresh?: boolean;
+}
 /** `undefined` when `auth` may pass; otherwise the 401/403 error to send. */
 declare function guard(auth: AuthState, allow?: GuardOptions["allow"], aal?: Aal, scopes?: readonly string[]): DbError | undefined;
 declare function isResult(value: unknown): value is {
@@ -172,4 +191,4 @@ interface RespondOptions {
 /** A handler's value as a response: `Response` as is, data as JSON, errors as Problem Details. */
 declare function respond(run: () => unknown, options?: RespondOptions): Promise<Response>;
 //#endregion
-export { DeleteAccountResult as _, guard as a, settle as c, ServerContext as d, ServerOptions as f, DeleteAccountOptions as g, ReplicaState as h, Settled as i, BetterServer as l, PRIMARY_COOKIE as m, GuardOptions as n, isResult as o, createServer as p, RespondOptions as r, respond as s, AuthKind as t, ContextOptions as u };
+export { DeleteAccountOptions as _, Settled as a, respond as c, ContextOptions as d, ServerContext as f, ReplicaState as g, PRIMARY_COOKIE as h, RespondOptions as i, settle as l, createServer as m, GuardOptions as n, guard as o, ServerOptions as p, MiddlewareOptions as r, isResult as s, AuthKind as t, BetterServer as u, DeleteAccountResult as v };

package/dist/{result-DWXatkd6.js → result-Bj6yt33D.js}

@@ -1,4 +1,4 @@
-import { n as dbError, r as dbErrorOf, t as DbException } from "./errors-Bl3rkOzo.js";
+import { n as dbError, r as dbErrorOf, t as DbException } from "./errors-L0xK41y_.js";
 //#region src/core/result.ts
 const throwMappers = /* @__PURE__ */ new WeakMap();
 function inherit(from, next) {
@@ -49,7 +49,7 @@ var AsyncResult = class AsyncResult {
 	/**
 	* Resolves with the data, or rejects with a `DbException`. Pass `factory`
 	* to throw your own error instead, e.g. an HTTP error for your framework;
-	* without it, the mapper from `sb.mapError()` applies when one is set.
+	* without it, the mapper from `betterSupabase.mapError()` applies when one is set.
 	*/
 	async orThrow(factory) {
 		const result = await this.#promise;

package/dist/{result-c2OYgCV2.d.ts → result-CqEsbgYs.d.ts}

@@ -124,7 +124,7 @@ type ErrorMapper = (raw: RawDbError, fallback: DbError) => DbError | undefined;
 declare function mapDbError(raw: RawDbError, mappers?: readonly ErrorMapper[]): DbError;
 //#endregion
 //#region src/core/result.d.ts
-/** Turns a `DbError` into the error `.orThrow()` throws; set with `sb.mapError()`. */
+/** Turns a `DbError` into the error `.orThrow()` throws; set with `betterSupabase.mapError()`. */
 type ThrowMapper = (error: DbError) => unknown;
 type Ok<T> = {
   readonly ok: true;
@@ -153,7 +153,7 @@ declare class AsyncResult<T> implements PromiseLike<Result<T>> {
   /**
    * Resolves with the data, or rejects with a `DbException`. Pass `factory`
    * to throw your own error instead, e.g. an HTTP error for your framework;
-   * without it, the mapper from `sb.mapError()` applies when one is set.
+   * without it, the mapper from `betterSupabase.mapError()` applies when one is set.
    */
   orThrow(factory?: (error: DbError) => unknown): Promise<T>;
   /** Resolves with the data, or `fallback` when the result is an error. */
@@ -178,7 +178,7 @@ interface BetterResultApi<T, E> {
 /**
  * Builds a better-result value with the `Result` namespace you pass, so
  * better-result stays your dependency. Errors go through `mapError`, or, for a
- * result from a `db` of `sb.mapError(fn)`, through `fn` (typed `unknown`).
+ * result from a `db` of `betterSupabase.mapError(fn)`, through `fn` (typed `unknown`).
  * The value is a real `Ok`/`Err`: cast it (`as Result<T, E>`) for its
  * methods in types; the cast itself is not checked against `T`.
  *

package/dist/server/index.d.ts

@@ -1,14 +1,14 @@
 import { n as AnyModels, t as AnyFunctions } from "../types-DONv9SHN.js";
-import { p as DbError } from "../result-c2OYgCV2.js";
-import { t as BetterSupabase, y as Db } from "../define-DUbydmJa.js";
-import { h as RequestContext } from "../plugin-DVRB8qNE.js";
-import { a as checkAal, c as impersonatorOf, i as amrOf, n as AmrEntry, o as ImpersonationOptions, r as aalOf, s as Impersonator, t as Aal } from "../mfa-x3V3vGh-.js";
-import { _ as readSession, a as ResolveAuthOptions, b as writeSession, c as clientIp, d as CookieOptions, f as CookieRecord, i as InvalidReason, l as resolveAuth, m as StoredSession, n as AuthResolver, o as ResolvedState, p as CookieWrite, r as AuthState, s as authContext, t as AuthResolution, u as AUTH_CACHE_HEADERS, y as sessionCookieName } from "../resolve-BRciX2jK.js";
-import { _ as DeleteAccountResult, a as guard, c as settle, d as ServerContext, f as ServerOptions, g as DeleteAccountOptions, h as ReplicaState, i as Settled, l as BetterServer, m as PRIMARY_COOKIE, n as GuardOptions, o as isResult, p as createServer, r as RespondOptions, s as respond, t as AuthKind, u as ContextOptions } from "../respond-DAkPIdTH.js";
-import { a as ResourceRouteOptions, i as ResourcePagination, n as ResourceInput, o as defineResource, r as ResourceList, t as ResourceHandler } from "../resource-CwVgiI5q.js";
-import { a as ProblemResponseOptions, c as problemResponse, i as ProblemOptions, l as toProblem, n as PROBLEM_TYPE_BASE, o as fromProblem, r as ProblemDetails, s as isProblem, t as PROBLEM_CONTENT_TYPE } from "../problem-Z2RTQjZD.js";
-import { a as SessionDelegation, i as SessionActor, n as toSession, r as ActClaim, t as AuthSession } from "../view-3Po_PVlr.js";
-import { n as RefreshOutcome, r as refreshSession } from "../index-kpgopLNv.js";
+import { p as DbError } from "../result-CqEsbgYs.js";
+import { t as BetterSupabase, y as Db } from "../define-CRS2MRV3.js";
+import { h as RequestContext } from "../plugin-bNhvJwRh.js";
+import { a as checkAal, c as impersonatorOf, i as amrOf, n as AmrEntry, o as ImpersonationOptions, r as aalOf, s as Impersonator, t as Aal } from "../mfa-C7MNQ1Ob.js";
+import { _ as readSession, a as ResolveAuthOptions, b as writeSession, c as clientIp, d as CookieOptions, f as CookieRecord, i as InvalidReason, l as resolveAuth, m as StoredSession, n as AuthResolver, o as ResolvedState, p as CookieWrite, r as AuthState, s as authContext, t as AuthResolution, u as AUTH_CACHE_HEADERS, y as sessionCookieName } from "../resolve-BAqQcwMW.js";
+import { _ as DeleteAccountOptions, a as Settled, c as respond, d as ContextOptions, f as ServerContext, g as ReplicaState, h as PRIMARY_COOKIE, i as RespondOptions, l as settle, m as createServer, n as GuardOptions, o as guard, p as ServerOptions, r as MiddlewareOptions, s as isResult, t as AuthKind, u as BetterServer, v as DeleteAccountResult } from "../respond-DgIbdrt8.js";
+import { a as ResourceRouteOptions, i as ResourcePagination, n as ResourceInput, o as defineResource, r as ResourceList, t as ResourceHandler } from "../resource-BJcaIfxi.js";
+import { a as ProblemResponseOptions, c as problemResponse, i as ProblemOptions, l as toProblem, n as PROBLEM_TYPE_BASE, o as fromProblem, r as ProblemDetails, s as isProblem, t as PROBLEM_CONTENT_TYPE } from "../problem-U8UEKccv.js";
+import { a as SessionDelegation, i as SessionActor, n as toSession, r as ActClaim, t as AuthSession } from "../view-B64o81wp.js";
+import { n as RefreshOutcome, r as refreshSession } from "../refresh-BwYkyNOQ.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { Middleware } from "@supabase/middleware";
 import { AuthMode, JWTClaims, UserClaims } from "@supabase/server";
@@ -27,17 +27,17 @@ export declare function contextFromSupabase(ctx: SupabaseAuthContext): RequestCo
  * `ctx.supabase` (the caller-scoped client from `withSupabase`).
  *
  * ```ts
- * pipeline([withSupabase({ auth: 'user' }), withBetterSupabase(sb)()], (req, ctx) => ...)
+ * pipeline([withSupabase({ auth: 'user' }), withBetterSupabase(betterSupabase)()], (req, ctx) => ...)
  * ```
  */
-export declare function withBetterSupabase<M extends AnyModels, D, F extends AnyFunctions, E>(sb: BetterSupabase<M, D, F, E>): Middleware<"db", void, SupabaseAuthContext & {
+export declare function withBetterSupabase<M extends AnyModels, D, F extends AnyFunctions, E>(betterSupabase: BetterSupabase<M, D, F, E>): Middleware<"db", void, SupabaseAuthContext & {
   readonly supabase: SupabaseClient;
 }, Db<M, F, E, SupabaseClient>>;
 /**
  * Entry contributing `ctx.sql`: repositories over `ctx.postgres` from
  * `withPostgresClient`, which runs each query as the caller with RLS.
  */
-export declare function withBetterPostgres<M extends AnyModels, D, F extends AnyFunctions, E>(sb: BetterSupabase<M, D, F, E>): Middleware<"sql", void, SupabaseAuthContext & {
+export declare function withBetterPostgres<M extends AnyModels, D, F extends AnyFunctions, E>(betterSupabase: BetterSupabase<M, D, F, E>): Middleware<"sql", void, SupabaseAuthContext & {
   readonly postgres: PostgresApi;
 }, Db<M, F, E, undefined>>;
 //#endregion
@@ -64,4 +64,4 @@ export declare function checkSession(sql: SessionLookup, auth: {
   readonly kind: string;
 }): Promise<DbError | undefined>;
 //#endregion
-export { AUTH_CACHE_HEADERS, type Aal, type ActClaim, type AmrEntry, type AuthKind, type AuthResolution, type AuthResolver, type AuthSession, type AuthState, type BetterServer, type ContextOptions, type CookieOptions, type CookieRecord, type CookieWrite, type DeleteAccountOptions, type DeleteAccountResult, type GuardOptions, type ImpersonationOptions, type Impersonator, type InvalidReason, PRIMARY_COOKIE, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type ProblemDetails, type ProblemOptions, type ProblemResponseOptions, type RefreshOutcome, type ReplicaState, type ResolveAuthOptions, type ResolvedState, type ResourceHandler, type ResourceInput, type ResourceList, type ResourcePagination, type ResourceRouteOptions, type RespondOptions, type ServerContext, type ServerOptions, type SessionActor, type SessionDelegation, type SessionLookup, type Settled, type StoredSession, type SupabaseAuthContext, aalOf, amrOf, authContext, checkAal, clientIp, createServer, defineResource, fromProblem, guard, impersonatorOf, isProblem, isResult, problemResponse, readSession, refreshSession, resolveAuth, respond, sessionCookieName, settle, toProblem, toSession, writeSession };
+export { AUTH_CACHE_HEADERS, type Aal, type ActClaim, type AmrEntry, type AuthKind, type AuthResolution, type AuthResolver, type AuthSession, type AuthState, type BetterServer, type ContextOptions, type CookieOptions, type CookieRecord, type CookieWrite, type DeleteAccountOptions, type DeleteAccountResult, type GuardOptions, type ImpersonationOptions, type Impersonator, type InvalidReason, type MiddlewareOptions, PRIMARY_COOKIE, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type ProblemDetails, type ProblemOptions, type ProblemResponseOptions, type RefreshOutcome, type ReplicaState, type ResolveAuthOptions, type ResolvedState, type ResourceHandler, type ResourceInput, type ResourceList, type ResourcePagination, type ResourceRouteOptions, type RespondOptions, type ServerContext, type ServerOptions, type SessionActor, type SessionDelegation, type SessionLookup, type Settled, type StoredSession, type SupabaseAuthContext, aalOf, amrOf, authContext, checkAal, clientIp, createServer, defineResource, fromProblem, guard, impersonatorOf, isProblem, isResult, problemResponse, readSession, refreshSession, resolveAuth, respond, sessionCookieName, settle, toProblem, toSession, writeSession };

package/dist/server/index.js

@@ -1,10 +1,10 @@
-import { n as dbError } from "../errors-Bl3rkOzo.js";
-import { a as problemResponse, i as isProblem, n as PROBLEM_TYPE_BASE, o as toProblem, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "../problem-CGt1ADix.js";
-import { a as settle, i as respond, n as guard, o as createServer, r as isResult, u as PRIMARY_COOKIE } from "../respond-C44EZAJo.js";
-import { a as clientIp, f as sessionCookieName, i as authContext, m as refreshSession, n as amrOf, o as resolveAuth, p as writeSession, r as checkAal, s as AUTH_CACHE_HEADERS, t as aalOf, u as readSession, v as impersonatorOf } from "../mfa-BxoR1RkN.js";
-import { n as postgresExecutor } from "../executor-C57jx2pn.js";
-import { t as toSession } from "../view-wZ-9qIUz.js";
-import { t as defineResource } from "../resource-D30rp0GN.js";
+import { n as dbError } from "../errors-L0xK41y_.js";
+import { a as problemResponse, i as isProblem, n as PROBLEM_TYPE_BASE, o as toProblem, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "../problem-BihjPR0t.js";
+import { a as guard, c as settle, o as isResult, s as respond, t as createServer, u as PRIMARY_COOKIE } from "../server-BA75B0mT.js";
+import { a as clientIp, c as AUTH_CACHE_HEADERS, d as readSession, h as refreshSession, i as authContext, m as writeSession, n as amrOf, p as sessionCookieName, r as checkAal, s as resolveAuth, t as aalOf, y as impersonatorOf } from "../mfa-byfjruR9.js";
+import { n as postgresExecutor } from "../executor-CVt6dD0B.js";
+import { t as toSession } from "../view-BrJI2LKp.js";
+import { t as defineResource } from "../resource-My_y-Syh.js";
 import { defineMiddleware } from "@supabase/middleware";
 //#region src/server/middleware.ts
 /** Repository context from a `@supabase/server` context. */
@@ -50,23 +50,23 @@ function contextFromSupabase(ctx) {
 * `ctx.supabase` (the caller-scoped client from `withSupabase`).
 *
 * ```ts
-* pipeline([withSupabase({ auth: 'user' }), withBetterSupabase(sb)()], (req, ctx) => ...)
+* pipeline([withSupabase({ auth: 'user' }), withBetterSupabase(betterSupabase)()], (req, ctx) => ...)
 * ```
 */
-function withBetterSupabase(sb) {
+function withBetterSupabase(betterSupabase) {
 	return defineMiddleware({
 		key: "db",
-		run: (_config) => (_req, ctx) => Promise.resolve({ db: sb.connect(ctx.supabase, contextFromSupabase(ctx)) })
+		run: (_config) => (_req, ctx) => Promise.resolve({ db: betterSupabase.connect(ctx.supabase, contextFromSupabase(ctx)) })
 	});
 }
 /**
 * Entry contributing `ctx.sql`: repositories over `ctx.postgres` from
 * `withPostgresClient`, which runs each query as the caller with RLS.
 */
-function withBetterPostgres(sb) {
+function withBetterPostgres(betterSupabase) {
 	return defineMiddleware({
 		key: "sql",
-		run: (_config) => (_req, ctx) => Promise.resolve({ sql: sb.connect(postgresExecutor(ctx.postgres), contextFromSupabase(ctx)) })
+		run: (_config) => (_req, ctx) => Promise.resolve({ sql: betterSupabase.connect(postgresExecutor(ctx.postgres), contextFromSupabase(ctx)) })
 	});
 }
 //#endregion