better-supabase 0.3.0 → 0.5.0

package/dist/{index-UJ-LUxtI.d.ts → index-DmXSxbLi.d.ts}

@@ -1,10 +1,10 @@
-import { n as AnyModels, t as AnyFunctions } from "./types-DONv9SHN.js";
-import { t as BetterSupabase, y as Db } from "./define-DUbydmJa.js";
-import { c as PublicEnv } from "./index-Dy6kuF0P.js";
-import { i as Queries } from "./index-CriFFJ_p.js";
+import { n as AnyFunctions, r as AnyModels } from "./types-Dnf_wRDz.js";
+import { t as BetterSupabase, y as Db } from "./define-Bp_BZa5h.js";
+import { l as PublicEnv } from "./index-CLg87OBW.js";
+import { r as BetterQueries } from "./index-DgILJRXj.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 //#region src/client/index.d.ts
-interface BrowserOptions {
+interface ClientOptions {
   /** URL and publishable key. Not needed when `client` is given. */
   readonly env?: PublicEnv;
   /** Bring your own supabase-js client (React Native, custom storage). */
@@ -34,29 +34,29 @@ type AuthSnapshot = {
   readonly user: AuthUser;
   readonly claims: Readonly<Record<string, unknown>>;
 };
-interface BrowserAuth {
+interface ClientAuth {
   readonly current: () => AuthSnapshot;
   /** `useSyncExternalStore`-compatible. */
   readonly subscribe: (listener: () => void) => () => void;
 }
-interface BetterBrowser<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> {
-  /** The definition the browser was created from (schema metadata, specs, live queries). */
-  readonly sb: BetterSupabase<M, unknown, F, E, C, P>;
+interface BetterClient<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> {
+  /** The definition the client was created from (schema metadata, specs, live queries). */
+  readonly betterSupabase: BetterSupabase<M, unknown, F, E, C, P>;
   readonly supabase: SupabaseClient;
   /** Repositories with the current session's actor and claims. */
   readonly db: Db<M, F, E, SupabaseClient>;
   /** TanStack Query option factories over `db`. */
-  readonly queries: Queries<M, E, F>;
-  readonly auth: BrowserAuth;
+  readonly queries: BetterQueries<M, E, F>;
+  readonly auth: ClientAuth;
 }
 /**
  * The browser side: a supabase-js client, repositories that follow the
  * session, TanStack Query options and an auth store for UI state.
  *
  * ```ts
- * export const browser = createBrowser(sb, { env: { url, publishableKey } });
+ * export const bs = createClient(betterSupabase, { env: { url, publishableKey } });
  * ```
  */
-declare function createBrowser<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown>(sb: BetterSupabase<M, D, F, E, C, P>, options?: BrowserOptions): BetterBrowser<M, F, E, C, P>;
+declare function createClient$1<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options?: ClientOptions): BetterClient<M, F, E, C, P>;
 //#endregion
-export { BrowserOptions as a, BrowserAuth as i, AuthUser as n, createBrowser as o, BetterBrowser as r, AuthSnapshot as t };
+export { ClientOptions as a, ClientAuth as i, AuthUser as n, createClient$1 as o, BetterClient as r, AuthSnapshot as t };

package/dist/{index-Cf-D2jk1.d.ts → index-Dxn2a5cw.d.ts}

@@ -1,5 +1,5 @@
-import { A as SchemaMeta, s as ClaimsMeta } from "./types-DONv9SHN.js";
-import { d as Generator } from "./config-C1CYcm6o.js";
+import { c as ClaimsMeta, j as SchemaMeta } from "./types-Dnf_wRDz.js";
+import { d as Generator } from "./config-T_ejwyd3.js";
 //#region src/core/claims.d.ts
 declare const DEFAULT_CLAIMS: ClaimsMeta;
 /** Where the active tenant is read from: the top-level claim, then `app_metadata`. */

package/dist/{index-CTTMS6_1.d.ts → index-SaTsEfGP.d.ts}

@@ -1,12 +1,13 @@
 /// <reference lib="esnext.temporal" />
-import { b as PermdockBucketPolicy, i as BucketPolicyName } from "./types-DONv9SHN.js";
-import { p as DbError, t as AsyncResult } from "./result-c2OYgCV2.js";
+import { a as BucketPolicyName, t as AccessBucketPolicy, x as PermdockBucketPolicy } from "./types-Dnf_wRDz.js";
+import { _ as DbError, a as AsyncResult, u as Result } from "./executor-BunPOO-k.js";
+import { g as RequestContext } from "./plugin-o144f322.js";
+import { n as PermdockCatalog } from "./permdock-sql-C2Inc6Xc.js";
 import { n as StoragePath, t as PathIn } from "./path-Cv__-OTj.js";
-import { t as PermdockCatalog } from "./permdock-sql-DImJULY-.js";
 import { n as TemplateValues, t as TemplateParams } from "./template-mbvlysOo.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 //#region src/storage/bucket.d.ts
-type BucketPolicy = BucketPolicyName | PermdockBucketPolicy;
+type BucketPolicy = BucketPolicyName | PermdockBucketPolicy | AccessBucketPolicy;
 interface BucketConfig<P extends string = string, Id extends string = string> {
   /** Bucket id, e.g. `customer-logos`. */
   readonly id: Id;
@@ -15,8 +16,11 @@ interface BucketConfig<P extends string = string, Id extends string = string> {
   readonly public?: boolean;
   /**
    * Generated `storage.objects` policies. `tenant` and `owner` match a path
-   * segment against the JWT; `public` allows reads; `none` leaves access to
-   * the secret key; `{ permdock, scope }` calls PermDock's SQL helpers.
+   * segment against the JWT; `public` allows reads (on a `public: true`
+   * bucket the public URLs need no policy, so none is written and nobody can
+   * list the objects); `none` leaves access to
+   * the secret key; `{ permdock, scope }` calls PermDock's SQL helpers;
+   * `{ access }` calls the SQL kit's access contract (`tenant_ids_with`).
    * Defaults to `none`.
    *
    * The helpers check role and scope only. Use `permdock` just for
@@ -29,13 +33,19 @@ interface BucketConfig<P extends string = string, Id extends string = string> {
   readonly policy?: BucketPolicy;
   /**
    * PermDock's `permissions.catalog.json`. With it, a `permdock` policy
-   * naming a permission with `rowConditions: true` throws.
+   * naming a permission without `rowConditions: false` (including one the
+   * catalog doesn't list) throws.
    */
   readonly catalog?: PermdockCatalog;
   /** `'5MiB'`, `'500KB'` or bytes. */
   readonly fileSizeLimit?: string | number;
   /** `['image/png', 'image/*']`. */
   readonly allowedMimeTypes?: readonly string[];
+  /**
+   * The tenant segment. Set it and connected clients only touch paths whose
+   * `param` holds the caller's tenant: pass `{ context }` or `{ tenant }` to
+   * `connect()`, or `{ allTenants: true }` for cross-tenant admin work.
+   */
   readonly tenant?: {
     /** Placeholder holding the tenant id. Defaults to `orgId`. */
     readonly param?: string;
@@ -145,6 +155,8 @@ interface ActualBucket {
 type StorageClient = Pick<SupabaseClient, "storage">;
 interface BucketClient<P extends string, Id extends string = string> {
   readonly bucket: Bucket<P, Id>;
+  /** The object path, checked against the template and, with `tenant`, the caller's tenant. */
+  path(target: ObjectTarget<P, Id>): Result<StoragePath<Id>>;
   upload(target: ObjectTarget<P, Id>, body: UploadBody, options?: UploadOptions): AsyncResult<{
     path: StoragePath<Id>;
   }>;
@@ -186,6 +198,8 @@ interface Bucket<P extends string, Id extends string = string> {
    * removes the objects it fills.
    */
   readonly owner: string | undefined;
+  /** Placeholder connected clients check against the caller's tenant; set by `tenant`. */
+  readonly tenant: string | undefined;
   readonly fileSizeLimit: number | undefined;
   readonly allowedMimeTypes: readonly string[] | undefined;
   path(values: TemplateValues<P>): StoragePath<Id>;
@@ -202,7 +216,27 @@ interface Bucket<P extends string, Id extends string = string> {
   /** A `[storage.buckets.<id>]` section for `supabase/config.toml`. */
   toml(): string;
   drift(actual: ActualBucket | undefined): readonly BucketDrift[];
-  connect(client: StorageClient): BucketClient<P, Id>;
+  connect(client: StorageClient, options?: BucketConnectOptions): BucketClient<P, Id>;
+}
+interface BucketConnectOptions {
+  /**
+   * Reuse a signed URL for the same path, `ttl`, `transform` and `download`
+   * until shortly before it expires (a tenth of the `ttl`, at most a minute).
+   * The cache belongs to this connection; connect once per request so URLs
+   * never cross users.
+   */
+  readonly cacheSignedUrls?: boolean;
+  /**
+   * The request context (`db.$context`, or what an adapter passes to
+   * `connect`). For a bucket with `tenant`, its tenant (`context.tenant`, the
+   * one `tenant()` resolved, or the `tenant.claim` claims) must fill the
+   * tenant segment of every path.
+   */
+  readonly context?: RequestContext;
+  /** The tenant every path must hold, instead of reading it from `context`. */
+  readonly tenant?: string;
+  /** Skip the tenant check, for admin jobs that work across tenants. */
+  readonly allTenants?: boolean;
 }
 declare function parseSize(value: string | number): number;
 /** Maps a Storage error (`StorageApiError`, fetch failures) to a `DbError`. */
@@ -224,4 +258,47 @@ declare function fromStorageError(raw: unknown, table?: string): DbError;
  */
 declare function defineBucket<const P extends string, const Id extends string = string>(config: BucketConfig<P, Id>): Bucket<P, Id>;
 //#endregion
-export { parseSize as C, fromStorageError as S, TtlPreset as _, BucketDrift as a, UrlOptions as b, ReplaceOptions as c, StorageClient as d, StoredObject as f, TransformOptions as g, TTL as h, BucketConfig as i, ReplaceResult as l, SweepResult as m, Bucket as n, BucketPolicy as o, SweepOptions as p, BucketClient as r, ObjectTarget as s, ActualBucket as t, Reservation as u, UploadBody as v, defineBucket as x, UploadOptions as y };
+//#region src/storage/presets.d.ts
+/** The image types browsers display everywhere. */
+declare const IMAGE_TYPES: readonly string[];
+interface ImageBucketOptions<P extends string, Id extends string> {
+  readonly id?: Id;
+  /** The path template; keep the preset's placeholders the policy relies on. */
+  readonly path?: P;
+  /** Defaults to `true`: images load from their public URL without signing. */
+  readonly public?: boolean;
+  readonly fileSizeLimit?: string | number;
+  readonly allowedMimeTypes?: readonly string[];
+  /** Replaces the preset's policy. */
+  readonly policy?: BucketPolicy;
+}
+type AvatarBucketOptions<P extends string, Id extends string> = ImageBucketOptions<P, Id>;
+interface OrgLogoBucketOptions<P extends string, Id extends string> extends ImageBucketOptions<P, Id> {
+  /**
+   * The permission that may upload, replace and delete a logo, checked
+   * through the access contract. Defaults to `organization.update`, the
+   * `organizations` module's update permission.
+   */
+  readonly permission?: string;
+  /**
+   * The tenant segment connected clients are held to. `false` lets one
+   * client upload for any organization the policy allows. Defaults to
+   * `{ param: 'orgId' }`.
+   */
+  readonly tenant?: BucketConfig["tenant"] | false;
+}
+declare const AVATAR_PATH = "{userId}/avatar-{version}.{ext}";
+declare const LOGO_PATH = "{orgId}/logo-{version}.{ext}";
+/**
+ * A bucket for profile pictures: `{userId}/avatar-{version}.{ext}`, public,
+ * 2 MiB of images, written only by their owner (the `owner` policy).
+ */
+declare function avatarBucket<const P extends string = typeof AVATAR_PATH, const Id extends string = "avatars">(options?: AvatarBucketOptions<P, Id>): Bucket<P, Id>;
+/**
+ * A bucket for organization logos: `{orgId}/logo-{version}.{ext}`, public,
+ * 2 MiB of images, written by members with the update permission through
+ * the access contract (`tenant_ids_with`), so it follows the app's roles.
+ */
+declare function orgLogoBucket<const P extends string = typeof LOGO_PATH, const Id extends string = "organization-logos">(options?: OrgLogoBucketOptions<P, Id>): Bucket<P, Id>;
+//#endregion
+export { parseSize as A, TransformOptions as C, UrlOptions as D, UploadOptions as E, defineBucket as O, TTL as S, UploadBody as T, Reservation as _, avatarBucket as a, SweepOptions as b, Bucket as c, BucketConnectOptions as d, BucketDrift as f, ReplaceResult as g, ReplaceOptions as h, OrgLogoBucketOptions as i, fromStorageError as k, BucketClient as l, ObjectTarget as m, IMAGE_TYPES as n, orgLogoBucket as o, BucketPolicy as p, ImageBucketOptions as r, ActualBucket as s, AvatarBucketOptions as t, BucketConfig as u, StorageClient as v, TtlPreset as w, SweepResult as x, StoredObject as y };

package/dist/{index-CADlNHK-.d.ts → index-fag8VJZ2.d.ts}

@@ -1,7 +1,6 @@
-import { N as TableKey, O as Row, n as AnyModels, t as AnyFunctions } from "./types-DONv9SHN.js";
-import { l as CountMode } from "./executor-DynmIWhq.js";
-import { b as ValidationIssue, t as AsyncResult } from "./result-c2OYgCV2.js";
-import { C as FindExt, Ct as WhereInput, O as RepositoryOf, T as OffsetPageArgs, _ as CursorPage, dt as IncludeArg, gt as OrderByArg, t as BetterSupabase, v as CursorPageArgs, vt as Payload, w as OffsetPage, xt as SelectArg } from "./define-DUbydmJa.js";
+import { P as TableKey, k as Row, n as AnyFunctions, r as AnyModels } from "./types-Dnf_wRDz.js";
+import { I as CountMode, a as AsyncResult, w as ValidationIssue } from "./executor-BunPOO-k.js";
+import { C as FindExt, Ct as WhereInput, O as RepositoryOf, T as OffsetPageArgs, _ as CursorPage, dt as IncludeArg, gt as OrderByArg, t as BetterSupabase, v as CursorPageArgs, vt as Payload, w as OffsetPage, xt as SelectArg } from "./define-Bp_BZa5h.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/list/list-query.d.ts
 /** Facet value meaning "not set": filters with `is null`. */
@@ -144,7 +143,7 @@ type ListParsers<S extends string, F extends string> = {
  * OpenAPI parameters and a JSON Schema derived from the same definition.
  *
  * ```ts
- * export const customerList = defineListQuery(sb, 'customers', {
+ * export const customerList = defineListQuery(betterSupabase, 'customers', {
  *   search: ['name', 'kvk'],
  *   facets: { status: 'status' },
  *   sorts: { name: { name: 'asc' }, newest: [{ createdAt: 'desc' }, { id: 'asc' }] },
@@ -152,6 +151,6 @@ type ListParsers<S extends string, F extends string> = {
  * });
  * ```
  */
-declare function defineListQuery<M extends AnyModels, D, Fn extends AnyFunctions, E, T extends TableKey<M>, const S extends string, const F extends string = never, const C extends boolean = false, const P extends ListPagination = "offset">(sb: BetterSupabase<M, D, Fn, E>, table: T, config: ListQueryConfig<M, T, S, F, C, P>): ListDefinition<M, T, E, S, F, C, P>;
+declare function defineListQuery<M extends AnyModels, D, Fn extends AnyFunctions, E, T extends TableKey<M>, const S extends string, const F extends string = never, const C extends boolean = false, const P extends ListPagination = "offset">(betterSupabase: BetterSupabase<M, D, Fn, E>, table: T, config: ListQueryConfig<M, T, S, F, C, P>): ListDefinition<M, T, E, S, F, C, P>;
 //#endregion
 export { ListPage as a, ListParsers as c, ListQueryInput as d, ListSearchParams as f, defineListQuery as g, UNSET as h, ListExtra as i, ListQuery as l, ParserSpec as m, FacetInfo as n, ListPagination as o, OpenApiParameter as p, ListDefinition as r, ListParseResult as s, FacetCounts as t, ListQueryConfig as u };

package/dist/index.d.ts

@@ -1,14 +1,13 @@
-import { A as SchemaMeta, C as PrimaryKeyValue, D as Relations, E as RelationTypes, F as UniqueConstraint, I as UniqueKeyName, L as UniqueWhere, M as TableFlags, N as TableKey, O as Row, P as TableMeta, R as Update, S as PrimaryKeyColumn, T as RelationMeta, _ as ModelFlags, a as Casing, b as PermdockBucketPolicy, c as Codec, d as Flags, f as ForeignKeyConstraint, g as Insert, h as FunctionsOf, i as BucketPolicyName, j as Simplify, k as Schema, l as ColumnMeta, m as FunctionTypes, n as AnyModels, o as CheckConstraint, p as FunctionMeta, r as BucketMeta, s as ClaimsMeta, t as AnyFunctions, u as DatabaseOf, v as ModelTypes, w as RealtimeTableMeta, x as PermdockTopicPolicy, y as ModelsOf } from "./types-DONv9SHN.js";
-import { C as and, E as or, S as UpdateOp, T as not, _ as OrderTerm, a as AggregateFn, b as SelectOp, c as Condition, d as FunctionSource, f as Include, g as Operation, h as MutationOp, i as RpcContext, l as CountMode, m as Measure, n as ExecuteResult, o as Aggregation, p as InsertOp, r as Executor, s as ColumnOp, t as ExecuteContext, u as DeleteOp, v as Quantifier, w as column, x as Selection, y as SelectColumn } from "./executor-DynmIWhq.js";
-import { C as isConflict, D as statusOf, E as mapDbError, S as isCheck, T as isForeignKey, _ as DbException, a as Ok, b as ValidationIssue, c as err, d as toBetterResult, f as toDbError, g as DbErrorOf, h as DbErrorKinds, i as Err, l as fromBetterResult, m as DbErrorKind, n as BetterResultApi, o as Result, p as DbError, r as BetterResultValue, t as AsyncResult, u as ok, v as ErrorMapper, w as isDbError, x as dbError, y as RawDbError } from "./result-c2OYgCV2.js";
-import { a as EventHub, c as QueryEvent, d as LogFields, f as Logger, i as EventHandler, l as RefreshEvent, m as silentLogger, n as BetterSupabaseEvents, o as EventName, p as consoleLogger, r as ErrorEvent, s as MutationNotice, t as AuthEvent, u as RpcNotice } from "./events-Do8jXh4D.js";
-import { $ as Specs, A as RpcOptions, B as ReadSet, C as FindExt, Ct as WhereInput, D as Repository, E as PageOf, F as EMPTY_STATS, G as ReadSetParams, H as ReadSetParamType, I as StatsRecorder, J as isReadSet, K as ReadSetResult, L as recordStats, M as UpsertArgs, N as WriteArgs, O as RepositoryOf, P as DbStats, Q as ReadMethod, R as SearchArgs, S as DeleteExt, St as SortDirection, T as OffsetPageArgs, U as ReadSetParamTypes, V as ReadSetOptions, W as ReadSetParamValue, X as InferResult, Y as readSetTables, Z as QuerySpec, _ as CursorPage, _t as OrderByInput, a as defineSupabase, at as AggregateRow, b as DbHelpers, bt as RelationMeasureArg, c as postgrestExecutor, ct as FieldFilter, d as MemoryCache, dt as IncludeArg, et as TableSpecs, f as cacheTargetOf, ft as IncludeArgs, g as ConflictTarget, gt as OrderByArg, h as rpcCacheTargets, ht as NumericMeasureArg, i as RpcDefinition, it as AggregateResult, j as UpdateArgs, k as Returned, l as CacheAdapter, lt as FindFirstArgs, m as rowKey, mt as MeasureKey, n as ConnectOptions, nt as specTables, o as PostgrestClientLike, ot as CountArg, p as memoryCache, pt as MeasureArg, q as defineReadSet, r as DefineSupabaseOptions, rt as AggregateArgs, s as explainPostgrest, st as CountArgs, t as BetterSupabase, tt as isQuerySpec, u as CacheTarget, ut as FindManyArgs, v as CursorPageArgs, vt as Payload, w as OffsetPage, x as DeleteArgs, xt as SelectArg, y as Db, yt as ReadArgs, z as InferReadSetParams } from "./define-DUbydmJa.js";
-import { _ as definePlugin, a as ExtensionOf, c as MutationEvent, d as PLUGIN_API_VERSION, f as Plugin, g as WithExtension, h as RequestContext, i as CallOptions, l as MutationKind, m as RepositoryExtension, n as AnyPlugin, o as HasFlag, p as RepositoryApi, r as ApplyExtension, s as HookArgs, t as Actor, u as NoExtension } from "./plugin-DVRB8qNE.js";
-import { n as validate, t as StandardSchemaV1 } from "./standard-eudBiRk1.js";
-import { a as compilePostgrest, i as PostgrestPlan, n as PlanLimit, r as PlanOrder, t as PlanFilter } from "./postgrest-DmBlevh-.js";
+import { A as Schema, C as PrimaryKeyColumn, D as RelationTypes, E as RelationMeta, F as TableMeta, I as UniqueConstraint, L as UniqueKeyName, M as Simplify, N as TableFlags, O as Relations, P as TableKey, R as UniqueWhere, S as PermdockTopicPolicy, T as RealtimeTableMeta, _ as Insert, a as BucketPolicyName, b as ModelsOf, c as ClaimsMeta, d as DatabaseOf, f as Flags, g as FunctionsOf, h as FunctionTypes, i as BucketMeta, j as SchemaMeta, k as Row, l as Codec, m as FunctionMeta, n as AnyFunctions, o as Casing, p as ForeignKeyConstraint, r as AnyModels, s as CheckConstraint, t as AccessBucketPolicy, u as ColumnMeta, v as ModelFlags, w as PrimaryKeyValue, x as PermdockBucketPolicy, y as ModelTypes, z as Update } from "./types-Dnf_wRDz.js";
+import { $ as or, A as mapDbError, B as InsertOp, C as RawDbError, D as isConflict, E as isCheck, F as Condition, G as Quantifier, H as MutationOp, I as CountMode, J as Selection, K as SelectColumn, L as DeleteOp, M as AggregateFn, N as Aggregation, O as isDbError, P as ColumnOp, Q as not, R as FunctionSource, S as ErrorMapper, T as dbError, U as Operation, V as Measure, W as OrderTerm, X as and, Y as UpdateOp, Z as column, _ as DbError, a as AsyncResult, b as DbErrorOf, c as Err, f as err, g as toDbError, h as toBetterResult, i as RpcContext, j as statusOf, k as isForeignKey, l as Ok, m as ok, n as ExecuteResult, o as BetterResultApi, p as fromBetterResult, q as SelectOp, r as Executor, s as BetterResultValue, t as ExecuteContext, u as Result, v as DbErrorKind, w as ValidationIssue, x as DbException, y as DbErrorKinds, z as Include } from "./executor-BunPOO-k.js";
+import { D as consoleLogger, E as Logger, O as silentLogger, T as LogFields, _ as KitEventType, a as EventHub, c as QueryEvent, i as EventHandler, l as RefreshEvent, m as KitEventMap, n as BetterSupabaseEvents, o as EventName, p as KitEvent, r as ErrorEvent, s as MutationNotice, t as AuthEvent, u as RpcNotice } from "./events-aIO7vsIk.js";
+import { $ as Specs, A as RpcOptions, B as ReadSet, C as FindExt, Ct as WhereInput, D as Repository, E as PageOf, F as EMPTY_STATS, G as ReadSetParams, H as ReadSetParamType, I as StatsRecorder, J as isReadSet, K as ReadSetResult, L as recordStats, M as UpsertArgs, N as WriteArgs, O as RepositoryOf, P as DbStats, Q as ReadMethod, R as SearchArgs, S as DeleteExt, St as SortDirection, T as OffsetPageArgs, U as ReadSetParamTypes, V as ReadSetOptions, W as ReadSetParamValue, X as InferResult, Y as readSetTables, Z as QuerySpec, _ as CursorPage, _t as OrderByInput, a as defineSupabase, at as AggregateRow, b as DbHelpers, bt as RelationMeasureArg, c as postgrestExecutor, ct as FieldFilter, d as MemoryCache, dt as IncludeArg, et as TableSpecs, f as cacheTargetOf, ft as IncludeArgs, g as ConflictTarget, gt as OrderByArg, h as rpcCacheTargets, ht as NumericMeasureArg, i as SupabaseOptions, it as AggregateResult, j as UpdateArgs, k as Returned, l as CacheAdapter, lt as FindFirstArgs, m as rowKey, mt as MeasureKey, n as ConnectOptions, nt as specTables, o as PostgrestClientLike, ot as CountArg, p as memoryCache, pt as MeasureArg, q as defineReadSet, r as RpcDefinition, rt as AggregateArgs, s as explainPostgrest, st as CountArgs, t as BetterSupabase, tt as isQuerySpec, u as CacheTarget, ut as FindManyArgs, v as CursorPageArgs, vt as Payload, w as OffsetPage, x as DeleteArgs, xt as SelectArg, y as Db, yt as ReadArgs, z as InferReadSetParams } from "./define-Bp_BZa5h.js";
+import { _ as WithExtension, a as ExtensionOf, c as MutationEvent, d as NoExtension, f as PLUGIN_API_VERSION, g as RequestContext, h as RepositoryExtension, i as CallOptions, l as MutationIntent, m as RepositoryApi, n as AnyPlugin, o as HasFlag, p as Plugin, r as ApplyExtension, s as HookArgs, t as Actor, u as MutationKind, v as definePlugin } from "./plugin-o144f322.js";
+import { n as validate, t as StandardSchemaV1 } from "./standard-J4YgMOLm.js";
+import { a as compilePostgrest, i as PostgrestPlan, n as PlanLimit, r as PlanOrder, t as PlanFilter } from "./postgrest-CruYKAvV.js";
 import { n as StoragePath } from "./path-Cv__-OTj.js";
-import { n as postgrestCompiler, t as Compiler } from "./compiler-2zqGzxVZ.js";
-import { a as ProblemResponseOptions, c as problemResponse, i as ProblemOptions, l as toProblem, n as PROBLEM_TYPE_BASE, o as fromProblem, r as ProblemDetails, s as isProblem, t as PROBLEM_CONTENT_TYPE } from "./problem-Z2RTQjZD.js";
+import { n as postgrestCompiler, t as Compiler } from "./compiler-BXH_aZ7N.js";
+import { a as ProblemResponseOptions, c as problemResponse, i as ProblemOptions, l as toProblem, n as PROBLEM_TYPE_BASE, o as fromProblem, r as ProblemDetails, s as isProblem, t as PROBLEM_CONTENT_TYPE } from "./problem-Blxe8S31.js";
 import { t as SPEC_PINS } from "./spec-pins-CqorWDnO.js";
 //#region src/core/define-repository.d.ts
 /** Adds `Methods` to the repository of `Table` only. */
@@ -20,14 +19,14 @@ interface TableRepositoryExtension<Table extends string, Methods> extends Reposi
  * repository at call time, with every other plugin's methods.
  *
  * ```ts
- * const customers = defineRepository(sb, 'customers', (base) => ({
+ * const customers = defineRepository(betterSupabase, 'customers', (base) => ({
  *   active: () => base.findMany({ where: { status: 'active' } }),
  * }));
- * export const app = sb.use(customers);
+ * export const app = betterSupabase.use(customers);
  * await app.connect(client).customers.active();
  * ```
  */
-export declare function defineRepository<M extends AnyModels, D, F extends AnyFunctions, E, const Table extends TableKey<M>, Methods extends object>(sb: BetterSupabase<M, D, F, E>, table: Table, build: (base: RepositoryOf<M, Table, E>) => Methods): Plugin<`repository:${Table}`, TableRepositoryExtension<Table, Methods>>;
+export declare function defineRepository<M extends AnyModels, D, F extends AnyFunctions, E, const Table extends TableKey<M>, Methods extends object>(betterSupabase: BetterSupabase<M, D, F, E>, table: Table, build: (base: RepositoryOf<M, Table, E>) => Methods): Plugin<`repository:${Table}`, TableRepositoryExtension<Table, Methods>>;
 //#endregion
 //#region src/ir/tables.d.ts
 /**
@@ -41,7 +40,23 @@ export declare function touchedTables(op: Operation): string[];
  * plus every table whose foreign key cascades or sets a value on delete,
  * followed through chains of cascades.
  */
-export declare function invalidationTargets(meta: SchemaMeta, table: string): string[];
+export declare function invalidationTargets(meta: SchemaMeta, table: string): readonly string[];
+//#endregion
+//#region src/core/policy.d.ts
+/**
+ * A callback that decides something a kit would otherwise allow or refuse
+ * by default: `authorize`, `canInvite`, `shouldDeliver`, `allowUrl`. Only
+ * `true` allows; `false`, any other value, a throw or a rejection denies.
+ */
+type Policy<A extends readonly unknown[]> = (...args: A) => boolean | PromiseLike<boolean>;
+type PolicyDecision = {
+  readonly allowed: true;
+} | {
+  readonly allowed: false;
+  /** `denied`: the policy returned something other than `true`. `threw`: it threw or rejected. */
+  readonly reason: "denied" | "threw";
+  readonly cause?: unknown;
+};
 //#endregion
 //#region src/core/cursor.d.ts
 /** Opaque, URL-safe keyset cursor. */
@@ -71,10 +86,12 @@ type EnrichDatabase<D, O> = { [S in keyof D]: S extends keyof O ? EnrichSchema<D
 export declare function escapeLike(value: string): string;
 //#endregion
 //#region src/ir/codec.d.ts
+/** Applies column codecs to returned rows, including embedded relations. */
+export declare function decodeRows(selection: Selection | undefined, rows: readonly Record<string, unknown>[], checked?: boolean): Record<string, unknown>[];
+//#endregion
+//#region src/ir/wire.d.ts
 /** Wire form of an app value: Temporal values to ISO text, `bigint` to decimal text. */
 export declare function encodeValue(value: unknown): unknown;
-/** Applies column codecs to returned rows, including embedded relations. */
-export declare function decodeRows(selection: Selection | undefined, rows: readonly Record<string, unknown>[]): Record<string, unknown>[];
 //#endregion
 //#region src/ir/scope.d.ts
 /** Returns the filter that always applies to rows of `table`, if any. */
@@ -107,4 +124,4 @@ export declare function toCamel(name: string): string;
 /** `firstName` to `first_name`. */
 export declare function toSnake(name: string): string;
 //#endregion
-export { type Actor, type AggregateArgs, type AggregateFn, type AggregateResult, type AggregateRow, type Aggregation, type AnyFunctions, type AnyModels, type AnyPlugin, type ApplyExtension, AsyncResult, type AuthEvent, type BetterResultApi, type BetterResultValue, BetterSupabase, type BetterSupabaseEvents, type BucketMeta, type BucketPolicyName, type CacheAdapter, type CacheTarget, type CallOptions, type Casing, type CheckConstraint, type ClaimsMeta, type Codec, type ColumnMeta, type ColumnOp, type Compiler, type Condition, type ConflictTarget, type ConnectOptions, type CountArg, type CountArgs, type CountMode, type CursorPage, type CursorPageArgs, type DatabaseOf, type Db, type DbError, type DbErrorKind, type DbErrorKinds, type DbErrorOf, DbException, type DbHelpers, type DbStats, type DefineSupabaseOptions, type DeleteArgs, type DeleteExt, type DeleteOp, EMPTY_STATS, type EnrichDatabase, type Err, type ErrorEvent, type ErrorMapper, type EventHandler, EventHub, type EventName, type ExecuteContext, type ExecuteResult, type Executor, type ExtensionOf, type FieldFilter, type FindExt, type FindFirstArgs, type FindManyArgs, type Flags, type ForeignKeyConstraint, type FunctionMeta, type FunctionSource, type FunctionTypes, type FunctionsOf, type HasFlag, type HookArgs, type Include, type IncludeArg, type IncludeArgs, type InferReadSetParams, type InferResult, type Insert, type InsertOp, type LogFields, type Logger, type Measure, type MeasureArg, type MeasureKey, type MemoryCache, type ModelFlags, type ModelTypes, type ModelsOf, type MutationEvent, type MutationKind, type MutationNotice, type MutationOp, type NoExtension, type NumericMeasureArg, type OffsetPage, type OffsetPageArgs, type Ok, type Operation, type OrderByArg, type OrderByInput, type OrderTerm, PLUGIN_API_VERSION, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type PageOf, type Payload, type PermdockBucketPolicy, type PermdockTopicPolicy, type PlanFilter, type PlanLimit, type PlanOrder, type Plugin, type PostgrestClientLike, type PostgrestPlan, type PrimaryKeyColumn, type PrimaryKeyValue, type ProblemDetails, type ProblemOptions, type ProblemResponseOptions, type Quantifier, type QueryEvent, type QuerySpec, type RawDbError, type ReadArgs, type ReadMethod, type ReadSet, type ReadSetOptions, type ReadSetParamType, type ReadSetParamTypes, type ReadSetParamValue, type ReadSetParams, type ReadSetResult, type RealtimeTableMeta, type RefreshEvent, type RelationMeasureArg, type RelationMeta, type RelationTypes, type Relations, type Repository, type RepositoryApi, type RepositoryExtension, type RepositoryOf, type RequestContext, type Result, type Returned, type Row, type RpcContext, type RpcDefinition, type RpcNotice, type RpcOptions, SPEC_PINS, type Schema, type SchemaMeta, type ScopeFor, type SearchArgs, type SelectArg, type SelectColumn, type SelectOp, type Selection, type Simplify, type SortDirection, type Specs, type StandardSchemaV1, StatsRecorder, type StoragePath, type TableFlags, type TableKey, type TableMeta, type TableRepositoryExtension, type TableSpecs, type UniqueConstraint, type UniqueKeyName, type UniqueWhere, type Update, type UpdateArgs, type UpdateOp, type UpsertArgs, type ValidationIssue, type WhereInput, type WithExtension, type WriteArgs, and, cacheTargetOf, column, compilePostgrest, consoleLogger, dbError, definePlugin, defineReadSet, defineSupabase, err, explainPostgrest, fromBetterResult, fromProblem, isCheck, isConflict, isDbError, isForeignKey, isProblem, isQuerySpec, isReadSet, mapDbError, memoryCache, not, ok, or, postgrestCompiler, postgrestExecutor, problemResponse, readSetTables, recordStats, rowKey, rpcCacheTargets, silentLogger, specTables, statusOf, toBetterResult, toDbError, toProblem, validate };
+export { type AccessBucketPolicy, type Actor, type AggregateArgs, type AggregateFn, type AggregateResult, type AggregateRow, type Aggregation, type AnyFunctions, type AnyModels, type AnyPlugin, type ApplyExtension, AsyncResult, type AuthEvent, type BetterResultApi, type BetterResultValue, BetterSupabase, type BetterSupabaseEvents, type BucketMeta, type BucketPolicyName, type CacheAdapter, type CacheTarget, type CallOptions, type Casing, type CheckConstraint, type ClaimsMeta, type Codec, type ColumnMeta, type ColumnOp, type Compiler, type Condition, type ConflictTarget, type ConnectOptions, type CountArg, type CountArgs, type CountMode, type CursorPage, type CursorPageArgs, type DatabaseOf, type Db, type DbError, type DbErrorKind, type DbErrorKinds, type DbErrorOf, DbException, type DbHelpers, type DbStats, type DeleteArgs, type DeleteExt, type DeleteOp, EMPTY_STATS, type EnrichDatabase, type Err, type ErrorEvent, type ErrorMapper, type EventHandler, EventHub, type EventName, type ExecuteContext, type ExecuteResult, type Executor, type ExtensionOf, type FieldFilter, type FindExt, type FindFirstArgs, type FindManyArgs, type Flags, type ForeignKeyConstraint, type FunctionMeta, type FunctionSource, type FunctionTypes, type FunctionsOf, type HasFlag, type HookArgs, type Include, type IncludeArg, type IncludeArgs, type InferReadSetParams, type InferResult, type Insert, type InsertOp, type KitEvent, type KitEventMap, type KitEventType, type LogFields, type Logger, type Measure, type MeasureArg, type MeasureKey, type MemoryCache, type ModelFlags, type ModelTypes, type ModelsOf, type MutationEvent, type MutationIntent, type MutationKind, type MutationNotice, type MutationOp, type NoExtension, type NumericMeasureArg, type OffsetPage, type OffsetPageArgs, type Ok, type Operation, type OrderByArg, type OrderByInput, type OrderTerm, PLUGIN_API_VERSION, PROBLEM_CONTENT_TYPE, PROBLEM_TYPE_BASE, type PageOf, type Payload, type PermdockBucketPolicy, type PermdockTopicPolicy, type PlanFilter, type PlanLimit, type PlanOrder, type Plugin, type Policy, type PolicyDecision, type PostgrestClientLike, type PostgrestPlan, type PrimaryKeyColumn, type PrimaryKeyValue, type ProblemDetails, type ProblemOptions, type ProblemResponseOptions, type Quantifier, type QueryEvent, type QuerySpec, type RawDbError, type ReadArgs, type ReadMethod, type ReadSet, type ReadSetOptions, type ReadSetParamType, type ReadSetParamTypes, type ReadSetParamValue, type ReadSetParams, type ReadSetResult, type RealtimeTableMeta, type RefreshEvent, type RelationMeasureArg, type RelationMeta, type RelationTypes, type Relations, type Repository, type RepositoryApi, type RepositoryExtension, type RepositoryOf, type RequestContext, type Result, type Returned, type Row, type RpcContext, type RpcDefinition, type RpcNotice, type RpcOptions, SPEC_PINS, type Schema, type SchemaMeta, type ScopeFor, type SearchArgs, type SelectArg, type SelectColumn, type SelectOp, type Selection, type Simplify, type SortDirection, type Specs, type StandardSchemaV1, StatsRecorder, type StoragePath, type SupabaseOptions, type TableFlags, type TableKey, type TableMeta, type TableRepositoryExtension, type TableSpecs, type UniqueConstraint, type UniqueKeyName, type UniqueWhere, type Update, type UpdateArgs, type UpdateOp, type UpsertArgs, type ValidationIssue, type WhereInput, type WithExtension, type WriteArgs, and, cacheTargetOf, column, compilePostgrest, consoleLogger, dbError, definePlugin, defineReadSet, defineSupabase, err, explainPostgrest, fromBetterResult, fromProblem, isCheck, isConflict, isDbError, isForeignKey, isProblem, isQuerySpec, isReadSet, mapDbError, memoryCache, not, ok, or, postgrestCompiler, postgrestExecutor, problemResponse, readSetTables, recordStats, rowKey, rpcCacheTargets, silentLogger, specTables, statusOf, toBetterResult, toDbError, toProblem, validate };

package/dist/index.js

@@ -1,15 +1,16 @@
-import { a as isConflict, c as mapDbError, i as isCheck, l as statusOf, n as dbError, o as isDbError, s as isForeignKey, t as DbException } from "./errors-Bl3rkOzo.js";
-import { i as escapeLike, l as defineSchema, o as decodeRows, s as encodeValue, t as simplify, u as tableMeta } from "./simplify-LakqK1vH.js";
+import { a as isConflict, c as mapDbError, i as isCheck, l as statusOf, n as dbError, o as isDbError, s as isForeignKey, t as DbException } from "./errors-DtwXa6b8.js";
+import { i as escapeLike, o as defineSchema, s as tableMeta, t as simplify } from "./simplify-_0oUKqCd.js";
 import { i as or, n as column, r as not, t as and } from "./types-6cYK9pbJ.js";
-import { a as toBetterResult, i as ok, n as err, o as toDbError, r as fromBetterResult, t as AsyncResult } from "./result-DWXatkd6.js";
-import { a as EventHub, c as rowKey, i as encodeCursor, l as rpcCacheTargets, n as defineSupabase, o as cacheTargetOf, r as decodeCursor, s as memoryCache, t as BetterSupabase } from "./define-DF341GDj.js";
-import { n as touchedTables, t as invalidationTargets } from "./tables-Dhha3BXM.js";
+import { r as encodeValue } from "./wire-D2dT86vi.js";
+import { a as toBetterResult, i as ok, n as err, o as toDbError, r as fromBetterResult, t as AsyncResult } from "./result-BKiliPY7.js";
+import { a as decodeRows, c as memoryCache, i as encodeCursor, l as rowKey, n as defineSupabase, o as EventHub, r as decodeCursor, s as cacheTargetOf, t as BetterSupabase, u as rpcCacheTargets } from "./define-cNKzqwL_.js";
+import { n as touchedTables, t as invalidationTargets } from "./tables-Cb-3_VWc.js";
 import { n as silentLogger, t as consoleLogger } from "./logger-glM28NVN.js";
-import { n as definePlugin, t as PLUGIN_API_VERSION } from "./plugin-BqR6wKMB.js";
-import { a as postgrestExecutor, i as explainPostgrest, n as StatsRecorder, o as compilePostgrest, r as recordStats, t as EMPTY_STATS } from "./stats-D78UQ8Yu.js";
-import { c as readSetTables, d as isQuerySpec, f as specTables, i as defineReadSet, o as isReadSet } from "./read-set-D0qBcboM.js";
-import { t as validate } from "./standard-FUi3Z3-7.js";
-import { a as problemResponse, i as isProblem, n as PROBLEM_TYPE_BASE, o as toProblem, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "./problem-CGt1ADix.js";
+import { r as definePlugin, t as PLUGIN_API_VERSION } from "./plugin-DwARMuQp.js";
+import { a as postgrestExecutor, i as explainPostgrest, n as StatsRecorder, o as compilePostgrest, r as recordStats, t as EMPTY_STATS } from "./stats-Bqob3WqT.js";
+import { c as readSetTables, d as isQuerySpec, f as specTables, i as defineReadSet, o as isReadSet } from "./read-set-DQFt1N_Y.js";
+import { t as validate } from "./standard-D7r6dMUu.js";
+import { a as problemResponse, i as isProblem, n as PROBLEM_TYPE_BASE, o as toProblem, r as fromProblem, t as PROBLEM_CONTENT_TYPE } from "./problem-BW1KhzSG.js";
 import { t as SPEC_PINS } from "./spec-pins-C3oc-Tdp.js";
 import { n as scopeOperation, r as scopeSelection, t as scopeCondition } from "./scope-CDHcS7dE.js";
 //#region src/core/define-repository.ts
@@ -18,15 +19,15 @@ import { n as scopeOperation, r as scopeSelection, t as scopeCondition } from ".
 * repository at call time, with every other plugin's methods.
 *
 * ```ts
-* const customers = defineRepository(sb, 'customers', (base) => ({
+* const customers = defineRepository(betterSupabase, 'customers', (base) => ({
 *   active: () => base.findMany({ where: { status: 'active' } }),
 * }));
-* export const app = sb.use(customers);
+* export const app = betterSupabase.use(customers);
 * await app.connect(client).customers.active();
 * ```
 */
-function defineRepository(sb, table, build) {
-	if (!(table in sb.meta.tables)) throw new TypeError(`better-supabase: defineRepository: unknown table "${table}"`);
+function defineRepository(betterSupabase, table, build) {
+	if (!(table in betterSupabase.meta.tables)) throw new TypeError(`better-supabase: defineRepository: unknown table "${table}"`);
 	return definePlugin({
 		name: `repository:${table}`,
 		repository: ({ table: meta, base }) => meta.key === table ? build(base) : void 0