better-supabase 0.5.1 → 0.6.0

package/dist/chat-sdk/react/index.d.ts

@@ -0,0 +1,2 @@
+import { a as UseConversationOptions, c as useConversation, i as InboxWidgetState, l as useInbox, n as InboxListState, o as UseInboxOptions, r as InboxSource, s as UseInboxWidgetOptions, t as ConversationState, u as useInboxWidget } from "../../index-ACiNPN4Z.js";
+export { type ConversationState, type InboxListState, type InboxSource, type InboxWidgetState, type UseConversationOptions, type UseInboxOptions, type UseInboxWidgetOptions, useConversation, useInbox, useInboxWidget };

package/dist/chat-sdk/react/index.js

@@ -0,0 +1,3 @@
+"use client";
+import { useConversation, useInbox, useInboxWidget } from "../../blocks/inbox/react/index.js";
+export { useConversation, useInbox, useInboxWidget };

package/dist/chat-sdk/react/server.d.ts

@@ -0,0 +1,3 @@
+import { a as UseConversationOptions, i as InboxWidgetState, n as InboxListState, o as UseInboxOptions, r as InboxSource, s as UseInboxWidgetOptions, t as ConversationState } from "../../index-ACiNPN4Z.js";
+import { useConversation, useInbox, useInboxWidget } from "../../blocks/inbox/react/server.js";
+export { type ConversationState, type InboxListState, type InboxSource, type InboxWidgetState, type UseConversationOptions, type UseInboxOptions, type UseInboxWidgetOptions, useConversation, useInbox, useInboxWidget };

package/dist/chat-sdk/react/server.js

@@ -0,0 +1,2 @@
+import { useConversation, useInbox, useInboxWidget } from "../../blocks/inbox/react/server.js";
+export { useConversation, useInbox, useInboxWidget };

package/dist/claims-DDBQT6BK.js

@@ -0,0 +1,61 @@
+import { defineMiddleware } from "@supabase/middleware";
+//#region src/server/entries/claims.ts
+/** Entry contributing `ctx.auth`, the typed caller, from `ctx.bs`. */
+function withAuth() {
+	return defineMiddleware({
+		key: "auth",
+		run: () => (_request, ctx) => Promise.resolve({ auth: ctx.bs.auth })
+	})();
+}
+/** `jwtClaims` as `withSupabase` contributes it: the verified token's payload, or `null`. */
+function jwtClaimsOf(auth) {
+	if (auth.kind === "user") return auth.claims;
+	if (auth.kind === "apiKey") return auth.claims;
+	return null;
+}
+/** `userClaims` as `withSupabase` contributes it, or `null` without a user. */
+function userClaimsOf(auth) {
+	return auth.kind === "user" ? auth.user : null;
+}
+/**
+* `authMode` as `withSupabase` names it: `user` for a verified user token
+* or a user's API key, `secret` for a secret key or an organization's API
+* key, `none` otherwise (no credentials, or ones a
+* guard refuses).
+*/
+function authModeOf(auth) {
+	switch (auth.kind) {
+		case "user": return "user";
+		case "service": return "secret";
+		case "apiKey": return auth.userId ? "user" : "secret";
+		case "anon":
+		case "invalid": return "none";
+		default: return auth;
+	}
+}
+/**
+* Entry contributing `ctx.jwtClaims` under the `withSupabase` key, so
+* `withPostgresClient` and `withOpenFeature` compose downstream.
+*/
+function withJwtClaims() {
+	return defineMiddleware({
+		key: "jwtClaims",
+		run: () => (_request, ctx) => Promise.resolve({ jwtClaims: jwtClaimsOf(ctx.auth) })
+	})();
+}
+/** Entry contributing `ctx.userClaims` under the `withSupabase` key. */
+function withUserClaims() {
+	return defineMiddleware({
+		key: "userClaims",
+		run: () => (_request, ctx) => Promise.resolve({ userClaims: userClaimsOf(ctx.auth) })
+	})();
+}
+/** Entry contributing `ctx.authMode` under the `withSupabase` key. */
+function withAuthMode() {
+	return defineMiddleware({
+		key: "authMode",
+		run: () => (_request, ctx) => Promise.resolve({ authMode: authModeOf(ctx.auth) })
+	})();
+}
+//#endregion
+export { withAuthMode as a, withAuth as i, jwtClaimsOf as n, withJwtClaims as o, userClaimsOf as r, withUserClaims as s, authModeOf as t };

package/dist/{claims-BAf6c7is.js → claims-PqzCxaTD.js}

@@ -2,8 +2,25 @@
 const DEFAULT_CLAIMS = {
 	tenant: "tenant_id",
 	scope: "tenant",
-	features: "features"
+	features: "features",
+	memberships: "memberships"
 };
+/**
+* The claim paths for `config.claims`, with defaults. For a generated
+* schema, pass `claimsOf(meta)`.
+*/
+function claimPaths(claims) {
+	const resolved = {
+		...DEFAULT_CLAIMS,
+		...claims
+	};
+	return {
+		tenant: tenantClaimPaths(resolved.tenant),
+		features: resolved.features,
+		memberships: resolved.memberships,
+		scope: resolved.scope
+	};
+}
 /** The configured claim names, with defaults for the ones codegen left out. */
 function claimsOf(meta) {
 	if (!meta?.claims) return DEFAULT_CLAIMS;
@@ -28,6 +45,26 @@ function tenantClaimPaths(tenant = DEFAULT_CLAIMS.tenant) {
 	return paths;
 }
 const tenantPaths = /* @__PURE__ */ new Map();
+/**
+* The claim paths a tenant option names: one path, a list, or the configured
+* default (`config.claims.tenant`, then the same key in `app_metadata`).
+*/
+function tenantPathsFor(claim, meta) {
+	if (typeof claim === "string") return [claim];
+	return claim ?? tenantClaimPaths(claimsOf(meta).tenant);
+}
+/**
+* The tenant of a request: `context.tenant`, then the first of `paths` that
+* holds a non-empty string. Every tenant-aware module resolves through this,
+* so they agree on precedence.
+*/
+function tenantFrom(context, paths) {
+	if (typeof context.tenant === "string") return context.tenant;
+	for (const path of paths) {
+		const value = claimAt(context.claims, path);
+		if (value !== void 0) return value;
+	}
+}
 /** Claim paths come from configuration, so this stays small. */
 const segmentsByPath = /* @__PURE__ */ new Map();
 function segmentsOf(path) {
@@ -45,4 +82,4 @@ function claimAt(claims, path) {
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 //#endregion
-export { tenantClaimPaths as i, claimAt as n, claimsOf as r, DEFAULT_CLAIMS as t };
+export { tenantClaimPaths as a, claimsOf as i, claimAt as n, tenantFrom as o, claimPaths as r, tenantPathsFor as s, DEFAULT_CLAIMS as t };

package/dist/cli/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as run } from "./run-Bo_NLT5n.js";
+import { i as run } from "./run-DNWxHynX.js";
 import { t as colorEnabled } from "./style-C0NFdJRL.js";
 import { text } from "node:stream/consumers";
 //#region src/cli/bin.ts

package/dist/cli/{codemod-DqV7612m.js → codemod-Bl_tQpHn.js}

@@ -1,10 +1,16 @@
 import { r as defineCliCommand } from "./command-CK14fP91.js";
-import { r as writeIfChanged } from "./io-k41_z-jT.js";
+import { i as writeIfChanged } from "./io-DI1mTdSA.js";
 import { i as plain, r as painter } from "./style-C0NFdJRL.js";
 import { t as fileDiff } from "./diff-SjkO5rNr.js";
 import { extname, join, relative, resolve } from "node:path";
 import { readFile, readdir, stat } from "node:fs/promises";
+import { BLOCK_EVENT_RENAMES } from "better-supabase/events";
 //#region src/cli/codemod.ts
+/**
+* Source rewrites for `better-supabase codemod`. A small scanner masks
+* strings, template literals and comments, so renames only touch code; there
+* is no parser dependency, so each transform is a narrow, mechanical rename.
+*/
 const CODEMODS = {
 	"0.4": {
 		name: "0.4",
@@ -72,6 +78,91 @@ const CODEMODS = {
 			from: "scopes",
 			to: "advertisedScopes"
 		}]
+	},
+	"0.6": {
+		name: "0.6",
+		description: "Changes from 0.5 to 0.6: kits become blocks and modules, org becomes organization (in event types too), $rpc returns table rows and records in the configured casing, and bucket publicUrl() and path() return a Result",
+		strings: {
+			...BLOCK_EVENT_RENAMES,
+			"org.*": "organization.*"
+		},
+		imports: {
+			KitEvent: "BlockEvent",
+			KitEventMap: "BlockEventMap",
+			KitEventType: "BlockEventType",
+			KitEventMeta: "BlockEventMeta",
+			KitEventPattern: "BlockEventPattern",
+			KitEventsMatching: "BlockEventsMatching",
+			onKitEvent: "onBlockEvent",
+			forwardKitEvents: "forwardBlockEvents",
+			ForwardKitOptions: "ForwardBlockOptions",
+			KIT_ATTRIBUTES: "BLOCK_ATTRIBUTES",
+			kitCloudEvent: "blockCloudEvent",
+			kitEventAttributes: "blockEventAttributes",
+			traceKitEvents: "traceBlockEvents",
+			KitTransport: "BlockTransport",
+			OrgEventData: "OrganizationEventData",
+			createOrgs: "createOrganizations",
+			Orgs: "Organizations",
+			OrgsOptions: "OrganizationsOptions",
+			CreateOrgOptions: "CreateOrganizationOptions",
+			OrgAttributes: "OrganizationAttributes",
+			orgLogoBucket: "organizationLogoBucket",
+			OrgLogoBucketOptions: "OrganizationLogoBucketOptions",
+			KitsConfig: "ModulesConfig",
+			KitModuleConfig: "ModuleConfig",
+			KitMode: "ModuleMode",
+			AccessKitConfig: "AccessModuleConfig",
+			renderKit: "renderModules",
+			kitLayout: "moduleLayout",
+			kitPermissionKeys: "modulePermissionKeys",
+			kitDeprecations: "moduleDeprecations",
+			kitFilePaths: "moduleFilePaths",
+			kitFileVersion: "moduleFileVersion",
+			sameKitFile: "sameModuleFile",
+			kitIdType: "moduleIdType",
+			isKitIdType: "isModuleIdType",
+			KIT_ID_TYPES: "MODULE_ID_TYPES",
+			KitIdType: "ModuleIdType",
+			KitContext: "ModuleContext",
+			KitLayout: "ModuleLayout",
+			KitFile: "ModuleFile",
+			KitNames: "ModuleNames",
+			KitTableSpec: "ModuleTableSpec",
+			KitContractFunction: "ModuleContractFunction",
+			KitDeprecation: "ModuleDeprecation",
+			KitPermissionKey: "ModulePermissionKey",
+			KitUpgrade: "ModuleUpgrade",
+			KitUpgradePlan: "ModuleUpgradePlan",
+			InstalledKitModule: "InstalledModule"
+		},
+		options: [{
+			call: "defineSupabase",
+			from: "maxUrlLength",
+			to: "urlLengthLimit"
+		}],
+		review: [
+			{
+				pattern: /from\s*["']better-supabase\/(orgs|jobs|notifications|webhooks)["']/,
+				message: "This subpath moved under `better-supabase/blocks/` (`orgs` is `blocks/organizations`; the outbox, entitlements and audit retention left `jobs` for their own blocks); the 0.5 to 0.6 guide maps each export"
+			},
+			{
+				pattern: /\bcreateInbox\b[^\n]*from\s*["']better-supabase\/(blocks\/)?jobs["']/,
+				message: "The webhook inbox is `createWebhookInbox` from `better-supabase/blocks/jobs`; `createInbox` is now the conversation inbox in `blocks/inbox`"
+			},
+			{
+				pattern: /\$rpc\s*(<|\()/,
+				message: "`$rpc` now returns table rows and `returns table (...)` records in the configured casing, with codecs applied: drop a snake-to-camel mapping of the result, or pass `{ raw: true }` to keep database names. Scalar results and `returns table` columns are now `| null` unless `functions.<name>.notNull` says otherwise"
+			},
+			{
+				pattern: /\.publicUrl\s*\(/,
+				message: "A connected bucket's `publicUrl()` returns a `Result` instead of throwing: read `.data` (`null` on an error) or check `.ok`"
+			},
+			{
+				pattern: /\.path\s*\(\s*\{/,
+				message: "A bucket definition's `path(values)` returns a `Result` instead of throwing, like the connected client's `path()`: read `.data` (`null` on an error) or check `.ok`"
+			}
+		]
 	}
 };
 /** `[start, end)` ranges of code, outside strings, template literals and comments. */
@@ -170,6 +261,17 @@ function renameIdentifiers(text, renames) {
 		text: renames.get(match[0])
 	})));
 }
+function renameStrings(text, strings) {
+	const names = Object.keys(strings).map(escapeRegExp).join("|");
+	if (names === "") return text;
+	const ranges = codeRanges(text);
+	const pattern = new RegExp(`(["'\`])(${names})\\1`, "g");
+	return applyEdits(text, [...text.matchAll(pattern)].filter((match) => !inCode(ranges, match.index + 1)).map((match) => ({
+		start: match.index + 1,
+		end: match.index + 1 + match[2].length,
+		text: strings[match[2]]
+	})));
+}
 function renameMembers(text, members) {
 	const ranges = codeRanges(text);
 	return applyEdits(text, members.flatMap((member) => codeMatches(text, new RegExp(`\\.${escapeRegExp(member.from)}(?![\\w$])${member.notCalled === true ? "(?!\\s*\\()" : ""}`, "g"), ranges).map((match) => ({
@@ -276,6 +378,7 @@ function applyCodemod(codemod, source) {
 	if (codemod.members) text = renameMembers(text, codemod.members);
 	if (codemod.props) text = renameProps(text, codemod.props);
 	if (codemod.options) text = renameOptions(text, codemod.options);
+	if (codemod.strings) text = renameStrings(text, codemod.strings);
 	const review = (codemod.review ?? []).flatMap((hint) => text.split("\n").flatMap((line, index) => hint.pattern.test(line) ? [{
 		line: index + 1,
 		message: hint.message
@@ -291,7 +394,7 @@ const CODEMOD_ARGS = {
 	name: {
 		type: "positional",
 		required: false,
-		description: "The codemod (0.4 or 0.5), then the files or directories to rewrite (default: the project)"
+		description: "The codemod (0.4, 0.5 or 0.6), then the files or directories to rewrite (default: the project)"
 	},
 	"dry-run": {
 		type: "boolean",

package/dist/cli/config-B9HkL8nF.js

@@ -0,0 +1,2 @@
+import { a as loadConfig, i as importExport, n as discoverConfig, o as readSupabasePort, r as findConfig, s as stdinDatabaseUrl, t as databaseUrl } from "./config-NiPxAmUF.js";
+export { databaseUrl, discoverConfig, findConfig, importExport, loadConfig, readSupabasePort, stdinDatabaseUrl };

package/dist/cli/config-DU7EJImt.js

@@ -0,0 +1,49 @@
+import { r as defineCliCommand } from "./command-CK14fP91.js";
+import { t as display } from "./io-DI1mTdSA.js";
+//#region src/cli/commands/config.ts
+/** A connection string with its password replaced, so the printed config is safe to share. */
+function redactUrl(url) {
+	try {
+		const parsed = new URL(url);
+		if (parsed.password === "") return url;
+		parsed.password = "redacted";
+		return parsed.toString();
+	} catch {
+		return "<redacted>";
+	}
+}
+/** The resolved config as JSON: generators by name and version, the database password redacted. */
+function printableConfig(config) {
+	return {
+		...config,
+		source: {
+			...config.source,
+			...config.source.dbUrl ? { dbUrl: redactUrl(config.source.dbUrl) } : {}
+		},
+		generators: config.generators.map((generator) => ({
+			name: generator.name,
+			apiVersion: generator.apiVersion ?? null
+		}))
+	};
+}
+const configCommand = defineCliCommand({
+	meta: {
+		name: "config",
+		description: "Prints the resolved config: the file it came from and every option with its default"
+	},
+	args: {},
+	run: (_args, context) => {
+		const config = printableConfig(context.config);
+		const file = context.configFile ? display(context.cwd, context.configFile) : null;
+		return Promise.resolve({
+			code: 0,
+			output: `${file ? `# ${file}` : "# no config file, defaults only"}\n${JSON.stringify(config, null, 2)}`,
+			data: {
+				file,
+				config
+			}
+		});
+	}
+});
+//#endregion
+export { configCommand };