better-supabase 0.3.0 → 0.5.0

package/dist/client/index.d.ts

@@ -1,2 +1,2 @@
-import { a as BrowserOptions, i as BrowserAuth, n as AuthUser, o as createBrowser, r as BetterBrowser, t as AuthSnapshot } from "../index-UJ-LUxtI.js";
-export { AuthSnapshot, AuthUser, BetterBrowser, BrowserAuth, BrowserOptions, createBrowser };
+import { a as ClientOptions, i as ClientAuth, n as AuthUser, o as createClient, r as BetterClient, t as AuthSnapshot } from "../index-DmXSxbLi.js";
+export { AuthSnapshot, AuthUser, BetterClient, ClientAuth, ClientOptions, createClient };

package/dist/client/index.js

@@ -1,8 +1,9 @@
-import { n as decodeJwtPayload } from "../base64-CQeB1eSf.js";
+import { n as decodeJwtPayload } from "../base64-D2gsioCY.js";
+import { r as userContext } from "../impersonation-VfaGc4Q_.js";
 import { EnvValidationError, parseEnv } from "../env/index.js";
-import { t as createQueries } from "../query-BdKLTPlj.js";
+import { t as createQueries } from "../query-CCbo44lG.js";
 import { createBrowserClient } from "@supabase/ssr";
-import { createClient } from "@supabase/supabase-js";
+import { createClient as createClient$1 } from "@supabase/supabase-js";
 //#region src/client/index.ts
 const LOADING = {
 	status: "loading",
@@ -37,25 +38,17 @@ function contextOf(snapshot) {
 		},
 		claims: { role: "anon" }
 	};
-	return {
-		actor: {
-			id: snapshot.user.id,
-			kind: "user",
-			...snapshot.user.role ? { role: snapshot.user.role } : {},
-			...snapshot.user.email ? { email: snapshot.user.email } : {}
-		},
-		claims: snapshot.claims
-	};
+	return userContext(snapshot.user, snapshot.claims);
 }
 function clientFor(options) {
 	if (options.client) return options.client;
-	if (!options.env) throw new TypeError("createBrowser needs `env` ({ url, publishableKey }) or `client`");
+	if (!options.env) throw new TypeError("createClient needs `env` ({ url, publishableKey }) or `client`");
 	const checked = parseEnv({
 		SUPABASE_URL: options.env.url,
 		SUPABASE_PUBLISHABLE_KEY: options.env.publishableKey
 	});
 	if (!checked.ok) throw new EnvValidationError(checked.issues);
-	if (options.storage === "local") return createClient(checked.env.url, checked.env.publishableKey);
+	if (options.storage === "local") return createClient$1(checked.env.url, checked.env.publishableKey);
 	return createBrowserClient(checked.env.url, checked.env.publishableKey);
 }
 /**
@@ -63,10 +56,10 @@ function clientFor(options) {
 * session, TanStack Query options and an auth store for UI state.
 *
 * ```ts
-* export const browser = createBrowser(sb, { env: { url, publishableKey } });
+* export const bs = createClient(betterSupabase, { env: { url, publishableKey } });
 * ```
 */
-function createBrowser(sb, options = {}) {
+function createClient(betterSupabase, options = {}) {
 	const supabase = clientFor(options);
 	let snapshot = LOADING;
 	let db;
@@ -78,14 +71,14 @@ function createBrowser(sb, options = {}) {
 		db = void 0;
 		for (const listener of listeners) listener();
 	});
-	const browser = {
-		sb,
+	const client = {
+		betterSupabase,
 		supabase,
 		get db() {
-			db ??= sb.connect(supabase, contextOf(snapshot));
+			db ??= betterSupabase.connect(supabase, contextOf(snapshot));
 			return db;
 		},
-		queries: createQueries(sb, () => browser.db),
+		queries: createQueries(betterSupabase, () => client.db),
 		auth: {
 			current: () => snapshot,
 			subscribe: (listener) => {
@@ -96,7 +89,7 @@ function createBrowser(sb, options = {}) {
 			}
 		}
 	};
-	return browser;
+	return client;
 }
 //#endregion
-export { createBrowser };
+export { createClient };

package/dist/clone-BfgmLU90.js

@@ -0,0 +1,21 @@
+//#region src/core/clone.ts
+function isPlainObject(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const proto = Object.getPrototypeOf(value);
+	return proto === Object.prototype || proto === null;
+}
+/**
+* Copies plain objects and arrays so hooks and listeners cannot change the
+* caller's result (invariant 5). Temporal values are immutable and stay shared.
+*/
+function cloneValue(value) {
+	if (Array.isArray(value)) return value.map(cloneValue);
+	if (isPlainObject(value)) {
+		const copy = {};
+		for (const [key, item] of Object.entries(value)) copy[key] = cloneValue(item);
+		return copy;
+	}
+	return value;
+}
+//#endregion
+export { isPlainObject as n, cloneValue as t };

package/dist/{compiler-2zqGzxVZ.d.ts → compiler-BXH_aZ7N.d.ts}

@@ -1,5 +1,5 @@
-import { g as Operation } from "./executor-DynmIWhq.js";
-import { i as PostgrestPlan } from "./postgrest-DmBlevh-.js";
+import { U as Operation } from "./executor-BunPOO-k.js";
+import { i as PostgrestPlan } from "./postgrest-CruYKAvV.js";
 //#region src/core/compiler.d.ts
 /**
  * Turns an IR operation into something a backend runs. An `Executor` for a

package/dist/config/index.d.ts

@@ -1,4 +1,4 @@
-import { a as Casing } from "../types-DONv9SHN.js";
-import { $ as GeneratorMetadata, A as VectorSearchConfig, B as CatalogFunction, C as SoftDeleteConfig, D as TenantConfig, E as TableConfig, F as CatalogCheck, G as CatalogTable, H as CatalogGrant, I as CatalogColumn, J as ExtrasFunction, K as CatalogTrigger, L as CatalogColumnGrant, M as resolveConfig, N as resolveJsonSchema, O as TimestampsConfig, P as Catalog, Q as ForeignKeyAction, R as CatalogEnum, S as SeedConfig, T as SqlConfig, U as CatalogIndex, V as CatalogFunctionArg, W as CatalogPolicy, X as ExtrasHookFunction, Y as ExtrasHook, Z as ExtrasTable, _ as PluginFlagsConfig, a as ClaimsConfig, b as ResolvedConfig, c as EntitlementsConfig, d as Generator, et as Snapshot, f as GeneratorInput, g as PermdockPathsConfig, h as OpenApiConfig, i as CONFIG_SCHEMA_URL, j as defineConfig, k as VectorDistance, l as ExposeConfig, m as JsonTypeConfig, n as BetterSupabaseConfig, nt as SnapshotExtras, o as CodecsConfig, p as JsonSchemaSource, q as CatalogUnique, r as BucketConfig, s as DoctorConfig, t as ActorConfig, tt as SnapshotBucket, u as GeneratedFile, v as Privilege, w as SourceConfig, x as ResolvedExpose, y as RealtimeConfig, z as CatalogForeignKey } from "../config-C1CYcm6o.js";
-import { a as JsonSchemaGeneratorOptions, c as DEFAULT_CLAIMS, i as valibot, l as tenantClaimPaths, n as zod, o as buildJsonSchema, r as ValibotGeneratorOptions, s as jsonSchema, t as ZodGeneratorOptions } from "../index-Cf-D2jk1.js";
-export { type ActorConfig, type BetterSupabaseConfig, type BucketConfig, CONFIG_SCHEMA_URL, type Casing, type Catalog, type CatalogCheck, type CatalogColumn, type CatalogColumnGrant, type CatalogEnum, type CatalogForeignKey, type CatalogFunction, type CatalogFunctionArg, type CatalogGrant, type CatalogIndex, type CatalogPolicy, type CatalogTable, type CatalogTrigger, type CatalogUnique, type ClaimsConfig, type CodecsConfig, DEFAULT_CLAIMS, type DoctorConfig, type EntitlementsConfig, type ExposeConfig, type ExtrasFunction, type ExtrasHook, type ExtrasHookFunction, type ExtrasTable, type ForeignKeyAction, type GeneratedFile, type Generator, type GeneratorInput, type GeneratorMetadata, type JsonSchemaGeneratorOptions, type JsonSchemaSource, type JsonTypeConfig, type OpenApiConfig, type PermdockPathsConfig, type PluginFlagsConfig, type Privilege, type RealtimeConfig, type ResolvedConfig, type ResolvedExpose, type SeedConfig, type Snapshot, type SnapshotBucket, type SnapshotExtras, type SoftDeleteConfig, type SourceConfig, type SqlConfig, type TableConfig, type TenantConfig, type TimestampsConfig, type ValibotGeneratorOptions, type VectorDistance, type VectorSearchConfig, type ZodGeneratorOptions, buildJsonSchema, defineConfig, jsonSchema, resolveConfig, resolveJsonSchema, tenantClaimPaths, valibot, zod };
+import { o as Casing } from "../types-Dnf_wRDz.js";
+import { $ as GeneratorMetadata, A as VectorSearchConfig, B as CatalogFunction, C as SoftDeleteConfig, D as TenantConfig, E as TableConfig, F as CatalogCheck, G as CatalogTable, H as CatalogGrant, I as CatalogColumn, J as ExtrasFunction, K as CatalogTrigger, L as CatalogColumnGrant, M as resolveConfig, N as resolveJsonSchema, O as TimestampsConfig, P as Catalog, Q as ForeignKeyAction, R as CatalogEnum, S as SeedConfig, T as SqlConfig, U as CatalogIndex, V as CatalogFunctionArg, W as CatalogPolicy, X as ExtrasHookFunction, Y as ExtrasHook, Z as ExtrasTable, _ as PluginFlagsConfig, a as ClaimsConfig, at as DEFAULT_ACTIVE_TENANT, b as ResolvedConfig, c as EntitlementsConfig, ct as KitsConfig, d as Generator, et as Snapshot, f as GeneratorInput, g as PermdockPathsConfig, h as OpenApiConfig, i as CONFIG_SCHEMA_URL, it as ActiveTenantSource, j as defineConfig, k as VectorDistance, l as ExposeConfig, m as JsonTypeConfig, n as BetterSupabaseConfig, nt as SnapshotExtras, o as CodecsConfig, ot as KitMode, p as JsonSchemaSource, q as CatalogUnique, r as BucketConfig, rt as AccessKitConfig, s as DoctorConfig, st as KitModuleConfig, t as ActorConfig, tt as SnapshotBucket, u as GeneratedFile, v as Privilege, w as SourceConfig, x as ResolvedExpose, y as RealtimeConfig, z as CatalogForeignKey } from "../config-T_ejwyd3.js";
+import { a as JsonSchemaGeneratorOptions, c as DEFAULT_CLAIMS, i as valibot, l as tenantClaimPaths, n as zod, o as buildJsonSchema, r as ValibotGeneratorOptions, s as jsonSchema, t as ZodGeneratorOptions } from "../index-Dxn2a5cw.js";
+export { type AccessKitConfig, type ActiveTenantSource, type ActorConfig, type BetterSupabaseConfig, type BucketConfig, CONFIG_SCHEMA_URL, type Casing, type Catalog, type CatalogCheck, type CatalogColumn, type CatalogColumnGrant, type CatalogEnum, type CatalogForeignKey, type CatalogFunction, type CatalogFunctionArg, type CatalogGrant, type CatalogIndex, type CatalogPolicy, type CatalogTable, type CatalogTrigger, type CatalogUnique, type ClaimsConfig, type CodecsConfig, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, type DoctorConfig, type EntitlementsConfig, type ExposeConfig, type ExtrasFunction, type ExtrasHook, type ExtrasHookFunction, type ExtrasTable, type ForeignKeyAction, type GeneratedFile, type Generator, type GeneratorInput, type GeneratorMetadata, type JsonSchemaGeneratorOptions, type JsonSchemaSource, type JsonTypeConfig, type KitMode, type KitModuleConfig, type KitsConfig, type OpenApiConfig, type PermdockPathsConfig, type PluginFlagsConfig, type Privilege, type RealtimeConfig, type ResolvedConfig, type ResolvedExpose, type SeedConfig, type Snapshot, type SnapshotBucket, type SnapshotExtras, type SoftDeleteConfig, type SourceConfig, type SqlConfig, type TableConfig, type TenantConfig, type TimestampsConfig, type ValibotGeneratorOptions, type VectorDistance, type VectorSearchConfig, type ZodGeneratorOptions, buildJsonSchema, defineConfig, jsonSchema, resolveConfig, resolveJsonSchema, tenantClaimPaths, valibot, zod };

package/dist/config/index.js

@@ -1,5 +1,5 @@
-import { i as tenantClaimPaths, t as DEFAULT_CLAIMS } from "../claims-CoTobNC-.js";
-import { i as resolveJsonSchema, n as defineConfig, r as resolveConfig, t as CONFIG_SCHEMA_URL } from "../config-Be4GwsqI.js";
-import { n as jsonSchema, t as buildJsonSchema } from "../json-schema--aOXAGfU.js";
-import { n as valibot, t as zod } from "../config-DOsGYSiT.js";
-export { CONFIG_SCHEMA_URL, DEFAULT_CLAIMS, buildJsonSchema, defineConfig, jsonSchema, resolveConfig, resolveJsonSchema, tenantClaimPaths, valibot, zod };
+import { i as tenantClaimPaths, t as DEFAULT_CLAIMS } from "../claims-BAf6c7is.js";
+import { a as resolveConfig, i as defineConfig, o as resolveJsonSchema, r as CONFIG_SCHEMA_URL, t as DEFAULT_ACTIVE_TENANT } from "../kits-CGLLrNPd.js";
+import { n as jsonSchema, t as buildJsonSchema } from "../json-schema-m1fiwKgN.js";
+import { n as valibot, t as zod } from "../config-DreERlKo.js";
+export { CONFIG_SCHEMA_URL, DEFAULT_ACTIVE_TENANT, DEFAULT_CLAIMS, buildJsonSchema, defineConfig, jsonSchema, resolveConfig, resolveJsonSchema, tenantClaimPaths, valibot, zod };

package/dist/{config-DOsGYSiT.js → config-DreERlKo.js}

@@ -1,4 +1,4 @@
-import { a as parseImport, c as schemaName, d as variantsFor, i as fieldsFor, l as siblingPath, o as propertyKey, r as HEADER, s as rowType, u as tableEntries } from "./json-schema--aOXAGfU.js";
+import { a as parseImport, c as schemaName, d as variantsFor, i as fieldsFor, l as siblingPath, o as propertyKey, r as HEADER, s as rowType, u as tableEntries } from "./json-schema-m1fiwKgN.js";
 //#region src/generators/valibot.ts
 function scalar$1(kind) {
 	switch (kind.kind) {

package/dist/{config-C1CYcm6o.d.ts → config-T_ejwyd3.d.ts}

@@ -1,6 +1,150 @@
 /// <reference lib="esnext.temporal" />
-import { A as SchemaMeta, a as Casing, b as PermdockBucketPolicy, i as BucketPolicyName } from "./types-DONv9SHN.js";
+import { a as BucketPolicyName, j as SchemaMeta, o as Casing, t as AccessBucketPolicy, x as PermdockBucketPolicy } from "./types-Dnf_wRDz.js";
 import { GeneratorMetadata } from "@supabase/postgrest-typegen";
+//#region src/config/kits.d.ts
+/**
+ * `kits` in `better-supabase.config.ts`: how each SQL kit module maps onto
+ * the app's database. A module's contract (the functions other modules and
+ * the TypeScript side call) stays the same in every mode; only the tables
+ * behind it change.
+ */
+/**
+ * `managed`: the kit owns its tables. `adopt`: the kit writes its functions
+ * and views over tables the app already has (`tables` and `columns`), never
+ * `create table`. `custom`: the app implements the contract functions itself;
+ * the kit writes nothing and doctor checks the signatures (BS307).
+ */
+type KitMode = "managed" | "adopt" | "custom";
+/** Options every module takes. */
+interface KitModuleConfig {
+  readonly mode?: KitMode;
+  /** Schema of the module's functions and managed tables. Defaults to `better_supabase`. */
+  readonly schema?: string;
+  /**
+   * Logical table to `table` or `schema.table`, e.g.
+   * `{ memberships: 'public.organization_users' }`. An unqualified name is in
+   * `schema`. `null` marks an optional table the app doesn't have.
+   */
+  readonly tables?: Readonly<Record<string, string | null>>;
+  /**
+   * Logical table to logical column to column name, e.g.
+   * `{ memberships: { tenant: 'organization_id', role: 'role_id' } }`.
+   * `null` marks an optional column the adopted table doesn't have.
+   */
+  readonly columns?: Readonly<Record<string, Readonly<Record<string, string | null>>>>;
+  /** Type of tenant ids: `uuid` (default), `text`, `bigint` or `integer`. */
+  readonly idType?: string;
+  /**
+   * Kit action to permission key, checked through the access contract, e.g.
+   * `{ invite: 'organization.members.invite' }`.
+   */
+  readonly permissions?: Readonly<Record<string, string>>;
+  /** Module-specific options; each module's docs page lists them. */
+  readonly options?: Readonly<Record<string, unknown>>;
+  /**
+   * The app's optional `before_*` and `after_*` functions the module calls
+   * when they exist, e.g. `after_organization_create(org, user)`. They are
+   * looked up in `schema` (default `public`); `functions` maps a hook name
+   * to another function, e.g. `{ after_organization_create: 'app.seed_org' }`.
+   */
+  readonly hooks?: {
+    readonly schema?: string;
+    readonly functions?: Readonly<Record<string, string>>;
+  };
+  /**
+   * Whether the module writes its events to the outbox (`emit_event`) when
+   * the `outbox` module is installed. Defaults to true.
+   */
+  readonly events?: boolean;
+}
+/**
+ * Where the active tenant of a request comes from. Every source counts only
+ * while the caller is a member, so a stale claim or setting grants nothing.
+ */
+type ActiveTenantSource = "claim" | "resolver" | {
+  readonly profileColumn: string;
+  readonly key?: string;
+};
+/** URL tenancy: the tenant comes from the request (a slug), not a stored setting. */
+declare const DEFAULT_ACTIVE_TENANT: ActiveTenantSource;
+/**
+ * The access contract every kit checks permissions through:
+ * `can(scope, id, permission)`, `tenant_ids_with(permission)`,
+ * `is_platform(permission)` and `can_user(user, scope, id, permission)`.
+ */
+interface AccessKitConfig extends KitModuleConfig {
+  /**
+   * `roles`: a fixed role list from `roles` (the default). `catalog`: role,
+   * permission and override tables (`tables.roles`, `permissions`,
+   * `rolePermissions`, `overrides`, `platformAssignments`). `permdock`:
+   * PermDock's `permitted_<scope>_ids` and `permdock_has`. `custom`:
+   * expression templates in `functions`.
+   */
+  readonly model?: "roles" | "catalog" | "permdock" | "custom";
+  /**
+   * `roles` model: role name to permission keys. `*` grants everything and
+   * `prefix.*` a prefix. Defaults to owner, admin, member and viewer.
+   */
+  readonly roles?: Readonly<Record<string, readonly string[]>>;
+  /**
+   * `custom` model: SQL expressions with `{scope}`, `{id}`, `{permission}`
+   * and `{user}` placeholders, e.g.
+   * `{ can: 'public.authorize_scope({scope}::public.scope_type, {id}, {permission})' }`.
+   */
+  readonly functions?: {
+    readonly can?: string;
+    readonly tenantIdsWith?: string;
+    readonly isPlatform?: string;
+    readonly canUser?: string;
+    /** `{tenant}` and `{role}`: whether the caller may assign the role. Defaults to true. */
+    readonly canAssign?: string;
+    /** `{user}`: the permission claim for the access token hook. */
+    readonly permissionClaims?: string;
+  };
+  /**
+   * `roles` model: the JWT claim holding the caller's platform permission
+   * keys (an array). Defaults to `platform_permissions`.
+   */
+  readonly platformClaim?: string;
+  /**
+   * Columns that disable a tenant or a user when set, as
+   * `schema.table.column`, keyed by the table's `id` (tenant) or the column
+   * named in `userKey` (user). Disabled tenants and users get no permissions.
+   */
+  readonly disabled?: {
+    readonly tenant?: string;
+    readonly user?: string;
+    readonly userKey?: string;
+  };
+  readonly activeTenant?: ActiveTenantSource;
+  /** `permdock` model: PermDock's `rls.schema` and the scope tenants are. */
+  readonly permdock?: {
+    readonly schema?: string;
+    readonly scope?: string;
+  };
+}
+/** `kits` in the config, keyed by module name. */
+interface KitsConfig {
+  readonly access?: AccessKitConfig;
+  /** `AccessKitConfig` is listed so an `access` literal passes the excess-property check. */
+  readonly [module: string]: KitModuleConfig | AccessKitConfig | undefined;
+}
+/** A module's config with defaults applied. */
+interface ResolvedKitModule {
+  readonly mode: KitMode;
+  readonly schema: string;
+  readonly tables: Readonly<Record<string, string | null>>;
+  readonly columns: Readonly<Record<string, Readonly<Record<string, string | null>>>>;
+  readonly idType?: string;
+  readonly permissions: Readonly<Record<string, string>>;
+  readonly options: Readonly<Record<string, unknown>>;
+  readonly hooks: {
+    readonly schema: string;
+    readonly functions: Readonly<Record<string, string>>;
+  };
+  readonly events: boolean;
+}
+//#endregion
 //#region src/config/snapshot.d.ts
 /**
  * What `better-supabase introspect` reads from Postgres. `generator` is the
@@ -330,6 +474,8 @@ interface ClaimsConfig {
 interface ActorConfig {
   readonly createdBy?: string;
   readonly updatedBy?: string;
+  /** Defaults to `impersonated_by`, the column the SQL kit's `track_actor` fills. */
+  readonly impersonatedBy?: string;
 }
 interface PluginFlagsConfig {
   readonly timestamps?: boolean | TimestampsConfig;
@@ -342,8 +488,11 @@ interface BucketConfig {
   readonly public?: boolean;
   /** Path template with `{placeholders}`, e.g. `{orgId}/{customerId}/logo.webp`. */
   readonly path: string;
-  /** Generated storage policy, or a PermDock policy (`{ permdock, scope }`). */
-  readonly policy?: BucketPolicyName | PermdockBucketPolicy;
+  /**
+   * Generated storage policy, a PermDock policy (`{ permdock, scope }`) or
+   * an access contract policy (`{ access }`).
+   */
+  readonly policy?: BucketPolicyName | PermdockBucketPolicy | AccessBucketPolicy;
   readonly fileSizeLimit?: string;
   readonly allowedMimeTypes?: readonly string[];
 }
@@ -443,12 +592,19 @@ interface RealtimeConfig {
    * triggers with `better-supabase sql add realtime-tables`.
    */
   readonly tables?: readonly string[];
+  /**
+   * Tables in `tables` without a tenant column. They broadcast on one topic
+   * every signed-in user receives. With the `tenant` plugin, a table that
+   * lacks the tenant column and is not listed here fails to install.
+   */
+  readonly global?: readonly string[];
 }
 interface EntitlementsConfig {
   /**
    * `table.column` (or `schema.table.column`) holding each tenant's Stripe
-   * customer id, read by the `entitlements` SQL kit module. Defaults to
-   * `organizations.stripe_customer_id`.
+   * customer id, read by the `entitlements` SQL kit module. Required
+   * without the `organizations` module; with it, defaults to the
+   * `stripe_customer_id` column that module adds.
    */
   readonly customer?: string;
   /** The tenant id column of that table. Defaults to `id`. */
@@ -457,8 +613,9 @@ interface EntitlementsConfig {
    * With a PermDock manifest, `has_entitlement` and `feature_claims` read
    * PermDock's memberships (`member_<scope>_ids()` and
    * `member_<scope>_ids_for(user)`) instead of `better_supabase.memberships`.
-   * `scope` is the PermDock scope tenants are (default `organization`);
-   * `false` keeps the kit's memberships table.
+   * `scope` is the PermDock scope tenants are. It defaults to the manifest's
+   * root scope (the `rls.scopes` entry without `within`); `false` keeps the
+   * kit's memberships table.
    */
   readonly permdock?: false | {
     readonly scope?: string;
@@ -558,6 +715,12 @@ interface BetterSupabaseConfig {
    */
   readonly vectorSearch?: Readonly<Record<string, VectorSearchConfig>>;
   readonly sql?: SqlConfig;
+  /**
+   * How each SQL kit module maps onto the database: `managed` tables, or
+   * `adopt` and `custom` over the app's own, with table, column and
+   * permission names, keyed by module name.
+   */
+  readonly kits?: KitsConfig;
   readonly seed?: SeedConfig;
   readonly openapi?: OpenApiConfig;
   readonly doctor?: DoctorConfig;
@@ -589,11 +752,12 @@ interface ResolvedConfig {
   readonly claims: Required<ClaimsConfig>;
   readonly buckets: Readonly<Record<string, BucketConfig>>;
   readonly entitlements: {
-    readonly table: string;
-    readonly column: string;
+    /** Unset without `entitlements.customer`. */
+    readonly table?: string;
+    readonly column?: string;
     readonly key: string;
     readonly permdock: false | {
-      readonly scope: string;
+      readonly scope?: string;
     };
   };
   readonly permdock: Required<PermdockPathsConfig>;
@@ -605,6 +769,7 @@ interface ResolvedConfig {
   readonly topics: Readonly<Record<string, string>>;
   readonly realtime: Required<RealtimeConfig>;
   readonly sql: Required<SqlConfig>;
+  readonly kits: KitsConfig;
   readonly seed: Required<SeedConfig>;
   readonly openapi: Required<OpenApiConfig>;
   readonly doctor: Required<Omit<DoctorConfig, "claimsLimit">> & Pick<DoctorConfig, "claimsLimit">;
@@ -615,4 +780,4 @@ declare function defineConfig(config: BetterSupabaseConfig): BetterSupabaseConfi
 /** Applies defaults. Paths stay relative to `root`. */
 declare function resolveConfig(config: BetterSupabaseConfig, root: string): ResolvedConfig;
 //#endregion
-export { GeneratorMetadata as $, VectorSearchConfig as A, CatalogFunction as B, SoftDeleteConfig as C, TenantConfig as D, TableConfig as E, CatalogCheck as F, CatalogTable as G, CatalogGrant as H, CatalogColumn as I, ExtrasFunction as J, CatalogTrigger as K, CatalogColumnGrant as L, resolveConfig as M, resolveJsonSchema as N, TimestampsConfig as O, Catalog as P, ForeignKeyAction as Q, CatalogEnum as R, SeedConfig as S, SqlConfig as T, CatalogIndex as U, CatalogFunctionArg as V, CatalogPolicy as W, ExtrasHookFunction as X, ExtrasHook as Y, ExtrasTable as Z, PluginFlagsConfig as _, ClaimsConfig as a, ResolvedConfig as b, EntitlementsConfig as c, Generator as d, Snapshot as et, GeneratorInput as f, PermdockPathsConfig as g, OpenApiConfig as h, CONFIG_SCHEMA_URL as i, defineConfig as j, VectorDistance as k, ExposeConfig as l, JsonTypeConfig as m, BetterSupabaseConfig as n, SnapshotExtras as nt, CodecsConfig as o, JsonSchemaSource as p, CatalogUnique as q, BucketConfig as r, DoctorConfig as s, ActorConfig as t, SnapshotBucket as tt, GeneratedFile as u, Privilege as v, SourceConfig as w, ResolvedExpose as x, RealtimeConfig as y, CatalogForeignKey as z };
+export { GeneratorMetadata as $, VectorSearchConfig as A, CatalogFunction as B, SoftDeleteConfig as C, TenantConfig as D, TableConfig as E, CatalogCheck as F, CatalogTable as G, CatalogGrant as H, CatalogColumn as I, ExtrasFunction as J, CatalogTrigger as K, CatalogColumnGrant as L, resolveConfig as M, resolveJsonSchema as N, TimestampsConfig as O, Catalog as P, ForeignKeyAction as Q, CatalogEnum as R, SeedConfig as S, SqlConfig as T, CatalogIndex as U, CatalogFunctionArg as V, CatalogPolicy as W, ExtrasHookFunction as X, ExtrasHook as Y, ExtrasTable as Z, PluginFlagsConfig as _, ClaimsConfig as a, DEFAULT_ACTIVE_TENANT as at, ResolvedConfig as b, EntitlementsConfig as c, KitsConfig as ct, Generator as d, Snapshot as et, GeneratorInput as f, PermdockPathsConfig as g, OpenApiConfig as h, CONFIG_SCHEMA_URL as i, ActiveTenantSource as it, defineConfig as j, VectorDistance as k, ExposeConfig as l, ResolvedKitModule as lt, JsonTypeConfig as m, BetterSupabaseConfig as n, SnapshotExtras as nt, CodecsConfig as o, KitMode as ot, JsonSchemaSource as p, CatalogUnique as q, BucketConfig as r, AccessKitConfig as rt, DoctorConfig as s, KitModuleConfig as st, ActorConfig as t, SnapshotBucket as tt, GeneratedFile as u, Privilege as v, SourceConfig as w, ResolvedExpose as x, RealtimeConfig as y, CatalogForeignKey as z };

package/dist/{define-DUbydmJa.d.ts → define-Bp_BZa5h.d.ts}

@@ -1,11 +1,10 @@
 /// <reference lib="esnext.temporal" />
-import { A as SchemaMeta, C as PrimaryKeyValue, D as Relations, E as RelationTypes, I as UniqueKeyName, L as UniqueWhere, N as TableKey, O as Row, P as TableMeta, R as Update, g as Insert, j as Simplify, k as Schema, n as AnyModels, t as AnyFunctions } from "./types-DONv9SHN.js";
-import { g as Operation, l as CountMode, r as Executor } from "./executor-DynmIWhq.js";
-import { p as DbError, s as ThrowMapper, t as AsyncResult, v as ErrorMapper } from "./result-c2OYgCV2.js";
-import { a as EventHub, f as Logger, i as EventHandler, o as EventName, s as MutationNotice, u as RpcNotice } from "./events-Do8jXh4D.js";
-import { a as ExtensionOf, g as WithExtension, h as RequestContext, n as AnyPlugin, r as ApplyExtension } from "./plugin-DVRB8qNE.js";
-import { t as StandardSchemaV1 } from "./standard-eudBiRk1.js";
-import { i as PostgrestPlan } from "./postgrest-DmBlevh-.js";
+import { A as Schema, D as RelationTypes, F as TableMeta, L as UniqueKeyName, M as Simplify, O as Relations, P as TableKey, R as UniqueWhere, _ as Insert, j as SchemaMeta, k as Row, n as AnyFunctions, r as AnyModels, w as PrimaryKeyValue, z as Update } from "./types-Dnf_wRDz.js";
+import { I as CountMode, S as ErrorMapper, U as Operation, _ as DbError, a as AsyncResult, d as ThrowMapper, r as Executor } from "./executor-BunPOO-k.js";
+import { E as Logger, a as EventHub, i as EventHandler, o as EventName, s as MutationNotice, u as RpcNotice } from "./events-aIO7vsIk.js";
+import { _ as WithExtension, a as ExtensionOf, g as RequestContext, n as AnyPlugin, r as ApplyExtension } from "./plugin-o144f322.js";
+import { t as StandardSchemaV1 } from "./standard-J4YgMOLm.js";
+import { i as PostgrestPlan } from "./postgrest-CruYKAvV.js";
 //#region src/ir/args.d.ts
 interface BaseOps<V> {
   readonly eq?: V;
@@ -178,13 +177,17 @@ type AggregateResult<M extends AnyModels, T extends keyof M, A> = A extends {
   readonly groupBy: readonly unknown[];
 } ? AggregateRow<M, T, A>[] : AggregateRow<M, T, A>;
 /** The row type returned for read arguments `A` on table `T`. */
-type Payload<M extends AnyModels, T extends keyof M, A> = Simplify<SelectPart<M, T, A> & IncludePart<M, T, A>>;
+type Payload<M extends AnyModels, T extends keyof M, A> = A extends {
+  readonly include: unknown;
+} ? Simplify<SelectPart<M, T, A> & IncludePart<M, T, A>> : A extends {
+  readonly select: readonly unknown[];
+} ? Simplify<SelectPart<M, T, A>> : Row<M, T>;
 //#endregion
 //#region src/core/spec.d.ts
 type ReadMethod = "findMany" | "findFirst" | "findUnique" | "findById" | "count" | "aggregate" | "exists" | "paginate";
 declare const resultType: unique symbol;
 /**
- * A read, described as plain JSON: build it with `sb.spec`, run it with
+ * A read, described as plain JSON: build it with `betterSupabase.spec`, run it with
  * `db.$run(spec)`, send it from a Server Component to the client, or hand it
  * to `/query` and `/next`. Args never carry a `signal`.
  */
@@ -269,7 +272,7 @@ interface ReadSetOptions<P extends ReadSetParamTypes> {
  *
  * ```ts
  * export const appChrome = defineReadSet(
- *   sb,
+ *   betterSupabase,
  *   'app_chrome',
  *   { params: { userId: 'uuid' } },
  *   (s, p) => ({
@@ -282,7 +285,7 @@ interface ReadSetOptions<P extends ReadSetParamTypes> {
  * `p` holds placeholders, not values: pass them straight into `where` (or
  * `in`), where the function reads them from its `p jsonb` argument.
  */
-declare function defineReadSet<M extends AnyModels, D, F extends AnyFunctions, E, const N extends string, const P extends ReadSetParamTypes, const S extends Readonly<Record<string, QuerySpec>>>(sb: BetterSupabase<M, D, F, E>, name: N, options: ReadSetOptions<P>, build: (specs: Specs<M, E>, params: ReadSetParams<P>) => S): ReadSet<N, P, S>;
+declare function defineReadSet<M extends AnyModels, D, F extends AnyFunctions, E, const N extends string, const P extends ReadSetParamTypes, const S extends Readonly<Record<string, QuerySpec>>>(betterSupabase: BetterSupabase<M, D, F, E>, name: N, options: ReadSetOptions<P>, build: (specs: Specs<M, E>, params: ReadSetParams<P>) => S): ReadSet<N, P, S>;
 declare function isReadSet(value: unknown): value is ReadSet;
 /** App keys of every table the set reads. */
 declare function readSetTables(set: ReadSet, meta?: SchemaMeta): string[];
@@ -333,6 +336,11 @@ type DeleteExt<E, M extends AnyModels, T extends keyof M> = ApplyExtension<E, M,
 interface WriteArgs<M extends AnyModels, T extends keyof M> extends ReadArgs<M, T> {
   /** `false` skips `RETURNING` (needed when RLS hides the written row). */
   readonly returning?: boolean;
+  /**
+   * Keep caller-supplied values for columns that `timestamps()`, `actor()`
+   * and `softDelete()` fill (imports, backfills). Without it they are refused.
+   */
+  readonly override?: boolean;
 }
 interface UpdateArgs<M extends AnyModels, T extends keyof M> extends WriteArgs<M, T> {
   /**
@@ -385,7 +393,7 @@ type PageOf<M extends AnyModels, T extends keyof M, A> = A extends {
   readonly after: unknown;
 } ? CursorPage<Payload<M, T, A>> : OffsetPage<Payload<M, T, A>>;
 interface Repository<M extends AnyModels, T extends TableKey<M>, E = unknown> {
-  readonly $table: T;
+  readonly $tableName: T;
   readonly $meta: TableMeta;
   findMany<const A extends FindManyArgs<M, T> & FindExt<E, M, T>>(args?: A): AsyncResult<Payload<M, T, A>[]>;
   findFirst<const A extends FindFirstArgs<M, T> & FindExt<E, M, T>>(args?: A): AsyncResult<Payload<M, T, A> | null>;
@@ -471,7 +479,7 @@ interface DbHelpers<M extends AnyModels, F extends AnyFunctions, E, C> {
   $table<T extends TableKey<M>>(name: T): RepositoryOf<M, T, E>;
   /** Calls, waves, tables and time for everything run through this `db`. */
   $stats(): DbStats;
-  /** Runs a `QuerySpec` built with `sb.spec`. */
+  /** Runs a `QuerySpec` built with `betterSupabase.spec`. */
   $run<S extends QuerySpec<TableKey<M>>>(spec: S, options?: {
     readonly signal?: AbortSignal;
   }): AsyncResult<InferResult<S>>;
@@ -516,7 +524,7 @@ interface CacheTarget {
 /**
  * Invalidates cached reads after a mutation. First-party adapters:
  * `nextCache()` (Next.js cache tags) and `queryCache(client)` (TanStack
- * Query). Attach one with `sb.cache(adapter)`; prove custom ones with
+ * Query). Attach one with `betterSupabase.cache(adapter)`; prove custom ones with
  * `testCacheAdapter`.
  */
 interface CacheAdapter {
@@ -550,20 +558,20 @@ declare function postgrestExecutor(client: PostgrestClientLike): Executor;
 declare function explainPostgrest(op: Operation): PostgrestPlan;
 //#endregion
 //#region src/core/define.d.ts
-interface DefineSupabaseOptions {
+interface SupabaseOptions {
   /** Clock used by plugins (timestamps, soft delete). */
   readonly now?: () => Temporal.Instant;
   /** Extra error mappers, run before plugin mappers. */
   readonly errors?: readonly ErrorMapper[];
   /** Receives errors from event handlers, hooks and cache adapters. Defaults to `console`. */
   readonly logger?: Logger;
-  /** RPCs that change tables, keyed by function name. Prefer `sb.defineRpc()`. */
+  /** RPCs that change tables, keyed by function name. Prefer `betterSupabase.defineRpc()`. */
   readonly rpc?: Readonly<Record<string, RpcDefinition>>;
-  /** Builds the error `.orThrow()` throws. Prefer `sb.mapError()`. */
+  /** Builds the error `.orThrow()` throws. Prefer `betterSupabase.mapError()`. */
   readonly throwAs?: ThrowMapper;
-  /** Validates verified JWT claims on the server. Prefer `sb.claims()`, which also types them. */
+  /** Validates verified JWT claims on the server. Prefer `betterSupabase.claims()`, which also types them. */
   readonly claims?: StandardSchemaV1;
-  /** Parses `user_metadata` into `session.profile`. Prefer `sb.userMetadata()`, which also types it. */
+  /** Parses `user_metadata` into `session.profile`. Prefer `betterSupabase.userMetadata()`, which also types it. */
   readonly userMetadata?: StandardSchemaV1;
   /**
    * PostgREST's `db-max-rows`: the most rows one read returns. An unbounded
@@ -594,8 +602,8 @@ declare class BetterSupabase<M extends AnyModels = AnyModels, D = unknown, F ext
   readonly schema: Schema<M, D, F>;
   readonly plugins: readonly AnyPlugin[];
   readonly events: EventHub;
-  readonly options: DefineSupabaseOptions;
-  constructor(schema: Schema<M, D, F>, plugins?: readonly AnyPlugin[], options?: DefineSupabaseOptions, events?: EventHub);
+  readonly options: SupabaseOptions;
+  constructor(schema: Schema<M, D, F>, plugins?: readonly AnyPlugin[], options?: SupabaseOptions, events?: EventHub);
   get meta(): SchemaMeta;
   /** The schema set by `claims()`; its output types `session.claims`. */
   get claimsSchema(): StandardSchemaV1<unknown, C> | undefined;
@@ -607,7 +615,7 @@ declare class BetterSupabase<M extends AnyModels = AnyModels, D = unknown, F ext
    * A token that fails it resolves to `{ kind: 'invalid', reason: 'claims' }`.
    *
    * ```ts
-   * const sb = defineSupabase(schema).claims(z.object({ tenant_id: z.uuid() }));
+   * const betterSupabase = defineSupabase(schema).claims(z.object({ tenant_id: z.uuid() }));
    * ```
    */
   claims<S extends StandardSchemaV1>(schema: S): BetterSupabase<M, D, F, E, StandardSchemaV1.InferOutput<S>, P>;
@@ -620,7 +628,7 @@ declare class BetterSupabase<M extends AnyModels = AnyModels, D = unknown, F ext
    * the verified claims, never from `profile`.
    *
    * ```ts
-   * const sb = defineSupabase(schema).userMetadata(z.object({ display_name: z.string() }));
+   * const betterSupabase = defineSupabase(schema).userMetadata(z.object({ display_name: z.string() }));
    * ```
    */
   userMetadata<S extends StandardSchemaV1>(schema: S): BetterSupabase<M, D, F, E, C, StandardSchemaV1.InferOutput<S>>;
@@ -630,13 +638,13 @@ declare class BetterSupabase<M extends AnyModels = AnyModels, D = unknown, F ext
    * Results themselves keep their `DbError`.
    *
    * ```ts
-   * const sb = defineSupabase(schema).mapError((error) => new AppError(error));
+   * const betterSupabase = defineSupabase(schema).mapError((error) => new AppError(error));
    * ```
    */
   mapError(mapper: (error: DbError) => unknown): BetterSupabase<M, D, F, E, C, P>;
   /**
    * Builds serializable `QuerySpec`s with the same arguments and result types
-   * as the repository: `sb.spec.customers.findMany({ select: ['id'] })`.
+   * as the repository: `betterSupabase.spec.customers.findMany({ select: ['id'] })`.
    */
   get spec(): Specs<M, E>;
   /** App keys of every table a spec reads; mutations of any of them make it stale. */
@@ -648,7 +656,7 @@ declare class BetterSupabase<M extends AnyModels = AnyModels, D = unknown, F ext
    * invalidate them after it succeeds.
    *
    * ```ts
-   * sb.defineRpc('archive_customer', { invalidates: ['customers', 'notes'] });
+   * betterSupabase.defineRpc('archive_customer', { invalidates: ['customers', 'notes'] });
    * ```
    */
   defineRpc(name: Extract<keyof F, string>, options: {
@@ -672,9 +680,9 @@ declare class BetterSupabase<M extends AnyModels = AnyModels, D = unknown, F ext
  * Creates the data-layer definition from the generated `schema`.
  *
  * ```ts
- * export const sb = defineSupabase(schema).use(timestamps()).use(softDelete());
+ * export const betterSupabase = defineSupabase(schema).use(timestamps()).use(softDelete());
  * ```
  */
-declare function defineSupabase<M extends AnyModels, D, F extends AnyFunctions>(schema: Schema<M, D, F>, options?: DefineSupabaseOptions): BetterSupabase<M, D, F>;
+declare function defineSupabase<M extends AnyModels, D, F extends AnyFunctions>(schema: Schema<M, D, F>, options?: SupabaseOptions): BetterSupabase<M, D, F>;
 //#endregion
-export { Specs as $, RpcOptions as A, ReadSet as B, FindExt as C, WhereInput as Ct, Repository as D, PageOf as E, EMPTY_STATS as F, ReadSetParams as G, ReadSetParamType as H, StatsRecorder as I, isReadSet as J, ReadSetResult as K, recordStats as L, UpsertArgs as M, WriteArgs as N, RepositoryOf as O, DbStats as P, ReadMethod as Q, SearchArgs as R, DeleteExt as S, SortDirection as St, OffsetPageArgs as T, ReadSetParamTypes as U, ReadSetOptions as V, ReadSetParamValue as W, InferResult as X, readSetTables as Y, QuerySpec as Z, CursorPage as _, OrderByInput as _t, defineSupabase as a, AggregateRow as at, DbHelpers as b, RelationMeasureArg as bt, postgrestExecutor as c, FieldFilter as ct, MemoryCache as d, IncludeArg as dt, TableSpecs as et, cacheTargetOf as f, IncludeArgs as ft, ConflictTarget as g, OrderByArg as gt, rpcCacheTargets as h, NumericMeasureArg as ht, RpcDefinition as i, AggregateResult as it, UpdateArgs as j, Returned as k, CacheAdapter as l, FindFirstArgs as lt, rowKey as m, MeasureKey as mt, ConnectOptions as n, specTables as nt, PostgrestClientLike as o, CountArg as ot, memoryCache as p, MeasureArg as pt, defineReadSet as q, DefineSupabaseOptions as r, AggregateArgs as rt, explainPostgrest as s, CountArgs as st, BetterSupabase as t, isQuerySpec as tt, CacheTarget as u, FindManyArgs as ut, CursorPageArgs as v, Payload as vt, OffsetPage as w, DeleteArgs as x, SelectArg as xt, Db as y, ReadArgs as yt, InferReadSetParams as z };
+export { Specs as $, RpcOptions as A, ReadSet as B, FindExt as C, WhereInput as Ct, Repository as D, PageOf as E, EMPTY_STATS as F, ReadSetParams as G, ReadSetParamType as H, StatsRecorder as I, isReadSet as J, ReadSetResult as K, recordStats as L, UpsertArgs as M, WriteArgs as N, RepositoryOf as O, DbStats as P, ReadMethod as Q, SearchArgs as R, DeleteExt as S, SortDirection as St, OffsetPageArgs as T, ReadSetParamTypes as U, ReadSetOptions as V, ReadSetParamValue as W, InferResult as X, readSetTables as Y, QuerySpec as Z, CursorPage as _, OrderByInput as _t, defineSupabase as a, AggregateRow as at, DbHelpers as b, RelationMeasureArg as bt, postgrestExecutor as c, FieldFilter as ct, MemoryCache as d, IncludeArg as dt, TableSpecs as et, cacheTargetOf as f, IncludeArgs as ft, ConflictTarget as g, OrderByArg as gt, rpcCacheTargets as h, NumericMeasureArg as ht, SupabaseOptions as i, AggregateResult as it, UpdateArgs as j, Returned as k, CacheAdapter as l, FindFirstArgs as lt, rowKey as m, MeasureKey as mt, ConnectOptions as n, specTables as nt, PostgrestClientLike as o, CountArg as ot, memoryCache as p, MeasureArg as pt, defineReadSet as q, RpcDefinition as r, AggregateArgs as rt, explainPostgrest as s, CountArgs as st, BetterSupabase as t, isQuerySpec as tt, CacheTarget as u, FindManyArgs as ut, CursorPageArgs as v, Payload as vt, OffsetPage as w, DeleteArgs as x, SelectArg as xt, Db as y, ReadArgs as yt, InferReadSetParams as z };