better-supabase 0.6.0 → 0.7.0

package/dist/expo/index.js

@@ -1,9 +1,9 @@
 import { t as DbException } from "../db-exception-CnWcYPxL.js";
 import { o as toProblem } from "../problem-BreOl8b8.js";
-import { a as unexpectedResponse, c as extendServer, s as createServer, y as refreshFor } from "../adapter-Bc1o3zyy.js";
-import { m as serializeCookie } from "../resolve-D_IcnvFd.js";
+import { a as unexpectedResponse, c as extendServer, s as createServer, y as refreshFor } from "../adapter-B-tL8hqg.js";
+import { m as serializeCookie } from "../resolve-tJZY3FEa.js";
 import { a as respond, r as guard, t as defaultExpose } from "../respond-BUgsXNgk.js";
-import { t as withBetterSupabase } from "../composite-DhE66P5u.js";
+import { t as withBetterSupabase } from "../composite-C6I8ZyaF.js";
 import { r as handoffOf } from "../shared-CBxosKK3.js";
 import { bufferRequest, pipeline, seedContext } from "@supabase/middleware";
 import { StatusError, setResponseHeaders } from "expo-server";

package/dist/{framework-CONDyPYx.js → framework-BDCpJI7o.js}

@@ -1,5 +1,5 @@
 import { n as toSession } from "./view-BeFcRV6G.js";
-import { t as withBetterSupabase } from "./composite-DhE66P5u.js";
+import { t as withBetterSupabase } from "./composite-C6I8ZyaF.js";
 //#region src/server/framework.ts
 /** Every caller: the framework factories guard per loader, action or route instead. */
 const EVERY_CALLER = [

package/dist/{framework-DuVb4Xa8.d.ts → framework-KIPvRQJU.d.ts}

@@ -1,8 +1,8 @@
 import { a as AnyModels, i as AnyFunctions } from "./types-6BdhkmZe.js";
-import { o as ServerOptions } from "./server-CeVeeXwz.js";
-import { t as AuthSession } from "./view-DbxLNu8L.js";
-import { a as SessionEntryConfig, n as BetterSupabaseContributions } from "./composite-Bt1YK3Ke.js";
-import { t as RefusalRedirects } from "./refusal-D1rgbzNq.js";
+import { o as ServerOptions } from "./server-ZSJ9rCcV.js";
+import { t as AuthSession } from "./view-CF7ihnkg.js";
+import { a as SessionEntryConfig, n as BetterSupabaseContributions } from "./composite-CpHLEo-G.js";
+import { t as RefusalRedirects } from "./refusal-DhSU2Vvr.js";
 //#region src/server/framework.d.ts
 /** What the framework factories (`createSvelteKit`, `createReactRouter`, `createTanStackStart`) take. */
 interface FrameworkOptions extends ServerOptions, RefusalRedirects, Pick<SessionEntryConfig, "checkSession" | "cookieScopes" | "encode"> {

package/dist/h3/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../refusal-D1rgbzNq.js";
+import { n as RouteGuardOptions } from "../refusal-DhSU2Vvr.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 //#region src/bridges/h3.d.ts

package/dist/h3/v1/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../../refusal-D1rgbzNq.js";
+import { n as RouteGuardOptions } from "../../refusal-DhSU2Vvr.js";
 import { t as Validated } from "../../shared-DDSjEGDR.js";
 import { n as NodeRequestHead, t as NodeHeaderTarget } from "../../node-headers-AO06VhqH.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";

package/dist/hono/index.d.ts

@@ -1,11 +1,11 @@
 import { L as TableKey, a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
-import { r as AuthState } from "../resolve-KW8nCeL6.js";
+import { r as AuthState } from "../resolve-ChTYeTEl.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-CeVeeXwz.js";
-import { t as AuthSession } from "../view-DbxLNu8L.js";
-import { i as MiddlewareOptions, r as GuardOptions } from "../respond-DoBijysA.js";
-import { s as BlockRequireOptions } from "../kit-B5tid-q5.js";
-import { a as ResourceRouteOptions } from "../resource-D6Uc7Sk7.js";
+import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { t as AuthSession } from "../view-CF7ihnkg.js";
+import { i as MiddlewareOptions, r as GuardOptions } from "../respond-DprrgyXX.js";
+import { s as BlockRequireOptions } from "../kit-CkNzZUqv.js";
+import { a as ResourceRouteOptions } from "../resource-IPS5xi9q.js";
 import { AnyEntry, Contributions, ValidateEntries } from "@supabase/middleware";
 import { Context, ErrorHandler, Hono, MiddlewareHandler } from "hono";
 //#region src/bridges/hono.d.ts

package/dist/hono/index.js

@@ -1,9 +1,9 @@
 import { r as dbErrorOf } from "../errors-B11Duf73.js";
 import { a as problemResponse } from "../problem-BreOl8b8.js";
-import { a as unexpectedResponse, c as extendServer, n as flushEvents, s as createServer } from "../adapter-Bc1o3zyy.js";
+import { a as unexpectedResponse, c as extendServer, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
 import { n as toSession } from "../view-BeFcRV6G.js";
 import { a as respond, t as defaultExpose } from "../respond-BUgsXNgk.js";
-import { t as withBetterSupabase } from "../composite-DhE66P5u.js";
+import { t as withBetterSupabase } from "../composite-C6I8ZyaF.js";
 import { t as defineResource } from "../resource-BsvzCMlX.js";
 import { i as requireCaller } from "../kit-Fm-Fv7q5.js";
 import { r as handoffOf } from "../shared-CBxosKK3.js";

package/dist/{index-DDrYaUcq.d.ts → index-CdZKQF98.d.ts}

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "./refusal-D1rgbzNq.js";
+import { n as RouteGuardOptions } from "./refusal-DhSU2Vvr.js";
 import { t as Validated } from "./shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { IncomingMessage, ServerResponse } from "node:http";

package/dist/{index-CtuakVRc.d.ts → index-CewnYSpv.d.ts}

@@ -3,7 +3,7 @@ import { it as QuerySpec } from "./define-CJJkkr1-.js";
 import { C as UrlOptions, S as UploadOptions, x as UploadBody } from "./bucket-Cl46E3jS.js";
 import { n as TemplateValues } from "./template-CwO38Do8.js";
 import { t as AuthSnapshot } from "./bind-Bu_ZNa3W.js";
-import { t as AuthSession } from "./view-DbxLNu8L.js";
+import { t as AuthSession } from "./view-CF7ihnkg.js";
 import { S as Topic, _ as RealtimeClient, f as PresenceMember, g as PresenceSubscription, p as PresenceOptions, r as LiveCountSeed, u as EventSchemas, w as TopicHandlers, x as SubscriptionStatus, y as SubscribeOptions } from "./index-DunNRdnT.js";
 import { a as BroadcastOptions, f as UseActionOptions, l as LiveQueryHookOptions, n as ActionInputOf, o as ClientLike, r as ActionResultOf, s as LiveCountHookOptions } from "./field-errors-BFOa7WhB.js";
 import { SupabaseClient } from "@supabase/supabase-js";

package/dist/{kit-B5tid-q5.d.ts → kit-CkNzZUqv.d.ts}

@@ -1,7 +1,7 @@
 import { b as DbError } from "./result-D7y2fT87.js";
-import { r as AuthState } from "./resolve-KW8nCeL6.js";
-import { t as AuthSession } from "./view-DbxLNu8L.js";
-import { r as GuardOptions } from "./respond-DoBijysA.js";
+import { r as AuthState } from "./resolve-ChTYeTEl.js";
+import { t as AuthSession } from "./view-CF7ihnkg.js";
+import { r as GuardOptions } from "./respond-DprrgyXX.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/server/kit.d.ts
 /** What a server action returns: plain data, safe across any serialization boundary. */

package/dist/mcp/index.d.ts

@@ -1,9 +1,9 @@
 import { L as TableKey, a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-CeVeeXwz.js";
-import { r as GuardOptions } from "../respond-DoBijysA.js";
+import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { r as GuardOptions } from "../respond-DprrgyXX.js";
 import { i as ResourceOperation } from "../index-Bxih3l0u.js";
-import { a as ResourceRouteOptions } from "../resource-D6Uc7Sk7.js";
+import { a as ResourceRouteOptions } from "../resource-IPS5xi9q.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/mcp/mcp.d.ts
 export declare const MCP_PROTOCOL_VERSION: string;

package/dist/mcp/index.js

@@ -4,7 +4,7 @@ import { n as validate } from "../standard-BK0cqJ7y.js";
 import { a as problemResponse, o as toProblem } from "../problem-BreOl8b8.js";
 import { t as SPEC_PINS } from "../spec-pins--j6mTok4.js";
 import { t as buildJsonSchema } from "../json-schema-CvER4kgT.js";
-import { c as extendServer, l as withExtra, n as flushEvents, s as createServer } from "../adapter-Bc1o3zyy.js";
+import { c as extendServer, l as withExtra, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
 import { n as jsonResponse, t as jsonReplacer } from "../json-CEnpTHlZ.js";
 import { o as settle, r as guard, t as defaultExpose } from "../respond-BUgsXNgk.js";
 import { t as defineResource } from "../resource-BsvzCMlX.js";

package/dist/mcp/sdk/index.d.ts

@@ -1,8 +1,8 @@
 import { a as AnyModels, i as AnyFunctions } from "../../types-6BdhkmZe.js";
-import { r as AuthState } from "../../resolve-KW8nCeL6.js";
+import { r as AuthState } from "../../resolve-ChTYeTEl.js";
 import { t as BetterSupabase } from "../../define-CJJkkr1-.js";
-import { i as ServerContext$1, o as ServerOptions, t as BetterServer } from "../../server-CeVeeXwz.js";
-import { r as GuardOptions, t as AllowedCaller } from "../../respond-DoBijysA.js";
+import { i as ServerContext$1, o as ServerOptions, t as BetterServer } from "../../server-ZSJ9rCcV.js";
+import { r as GuardOptions, t as AllowedCaller } from "../../respond-DprrgyXX.js";
 import { AuthInfo, CallToolResult, Icon, InputRequiredResult, OAuthTokenVerifier, RegisteredTool, ScopeChallengeHandler, ServerContext, StandardSchemaWithJSON, ToolAnnotations } from "@modelcontextprotocol/server";
 //#region src/mcp/sdk/sdk.d.ts
 interface McpAuthOptions extends ServerOptions, Omit<GuardOptions, "scopes"> {

package/dist/mcp/sdk/index.js

@@ -1,5 +1,5 @@
 import { o as delegationOf } from "../../impersonation-DcqaTBHx.js";
-import { c as extendServer, i as resolveToken, l as withExtra, n as flushEvents, s as createServer } from "../../adapter-Bc1o3zyy.js";
+import { c as extendServer, i as resolveToken, l as withExtra, n as flushEvents, s as createServer } from "../../adapter-B-tL8hqg.js";
 import { r as guard } from "../../respond-BUgsXNgk.js";
 import { a as withCors, i as metadataPreflight, n as endpointPreflight, r as isMetadataRequest, t as discovery } from "../../http-DdYadv-o.js";
 import { OAuthError, bearerAuthChallengeResponse, verifyBearerToken } from "@modelcontextprotocol/server";

package/dist/nestjs/index.d.ts

@@ -1,6 +1,6 @@
-import { n as RouteGuardOptions } from "../refusal-D1rgbzNq.js";
+import { n as RouteGuardOptions } from "../refusal-DhSU2Vvr.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
-import { l as ToNodeOptions } from "../index-DDrYaUcq.js";
+import { l as ToNodeOptions } from "../index-CdZKQF98.js";
 import { AnyEntry } from "@supabase/middleware";
 import { IncomingMessage, ServerResponse } from "node:http";
 //#region src/nestjs/index.d.ts

package/dist/next/index.d.ts

@@ -1,16 +1,16 @@
 import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
-import { r as AuthState } from "../resolve-KW8nCeL6.js";
+import { r as AuthState } from "../resolve-ChTYeTEl.js";
 import { B as DbStats, K as ReadSet, it as QuerySpec, t as BetterSupabase, u as CacheAdapter } from "../define-CJJkkr1-.js";
-import { C as SupportOptions, D as supportSessions, E as SupportStartRequest, T as SupportSessions, b as ActiveSupport, i as ServerContext, n as ContextOptions, o as ServerOptions, t as BetterServer, w as SupportPolicy } from "../server-CeVeeXwz.js";
+import { A as supportSessions, C as ActiveSupport, D as SupportPolicy, E as SupportOptions, O as SupportSessions, i as ServerContext, k as SupportStartRequest, n as ContextOptions, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
 import { n as AmrEntry, s as Impersonator, t as Aal } from "../mfa-Daak8ukG.js";
-import { t as tenantOf } from "../tenant-icPeuUBN.js";
-import { n as toSession, t as AuthSession } from "../view-DbxLNu8L.js";
-import { n as AuthKind, r as GuardOptions } from "../respond-DoBijysA.js";
-import { a as AuthorizedContext, c as Unwrapped, i as AuthorizeOptions, n as ActionParsed, r as ActionResult, t as ActionInput } from "../kit-B5tid-q5.js";
+import { t as tenantOf } from "../tenant-BxNFk9bx.js";
+import { n as toSession, t as AuthSession } from "../view-CF7ihnkg.js";
+import { n as AuthKind, r as GuardOptions } from "../respond-DprrgyXX.js";
+import { a as AuthorizedContext, c as Unwrapped, i as AuthorizeOptions, n as ActionParsed, r as ActionResult, t as ActionInput } from "../kit-CkNzZUqv.js";
 import { r as LiveCountSeed, t as CountRunner } from "../index-DunNRdnT.js";
-import { r as MembershipClaim } from "../entitlements-DHrY2UDZ.js";
+import { r as MembershipClaim } from "../entitlements-BKSVGtrG.js";
 import { i as tagFor, t as TagOptions } from "../tags-Cx-LnIQP.js";
-import { n as supportOf, t as SupportView } from "../support-view-33Oi07TT.js";
+import { n as supportOf, t as SupportView } from "../support-view-CVOJJLpc.js";
 import { NextRequest } from "next/server.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/next/collector.d.ts
@@ -78,6 +78,11 @@ interface ProxyOptions<C = unknown, P = unknown> {
 interface EndedSessionOptions {
   readonly paths?: readonly string[];
   readonly redirect?: string;
+  /** The `reason` query value on the redirect. Defaults to `session_ended` and `account_banned`. */
+  readonly reasons?: {
+    readonly ended?: string;
+    readonly banned?: string;
+  };
 }
 interface ActionOptions<S extends StandardSchemaV1 | undefined, C = unknown, P = unknown, R extends boolean = boolean> extends GuardOptions, AuthorizeOptions<ActionParsed<S>, C, P, R> {
   /** Validates the input (plain object or `FormData`) with any Standard Schema. */

package/dist/next/index.js

@@ -9,10 +9,10 @@ import { a as problemResponse } from "../problem-BreOl8b8.js";
 import { i as claimsOf } from "../claims-PqzCxaTD.js";
 import { t as supportOf } from "../support-view-g4YLBeqX.js";
 import { t as tenantOf } from "../tenant-I1TEZ_BX.js";
-import { C as serverCore, c as extendServer, l as withExtra, n as flushEvents, p as supportCookieMaxAge, r as handle, s as createServer, t as bearerRequest, v as isPrefetch } from "../adapter-Bc1o3zyy.js";
+import { C as serverCore, c as extendServer, l as withExtra, n as flushEvents, p as supportCookieMaxAge, r as handle, s as createServer, t as bearerRequest, v as isPrefetch } from "../adapter-B-tL8hqg.js";
 import { a as checkAal, n as toSession } from "../view-BeFcRV6G.js";
 import { o as settle, r as guard, t as defaultExpose } from "../respond-BUgsXNgk.js";
-import { t as supportSessions } from "../support-BivNqSpK.js";
+import { t as supportSessions } from "../support-DWwzVf-O.js";
 import { r as tagFor, t as cacheTagsOf } from "../tags-B99_U9Pp.js";
 import { n as formDataObject } from "../kit-Fm-Fv7q5.js";
 import { cache } from "react";
@@ -286,9 +286,9 @@ function requireAal(level, options = {}) {
 		return NextResponse.redirect(target);
 	};
 }
-function endedRedirect(request, path) {
+function endedRedirect(request, path, reason) {
 	const target = new URL(path, request.url);
-	target.searchParams.set("reason", "session_ended");
+	target.searchParams.set("reason", reason);
 	return NextResponse.redirect(target);
 }
 function shouldCheckSession(request, options = {}) {
@@ -485,7 +485,7 @@ function createNext(betterSupabase, options = {}) {
 			const rendersSignedOut = proxyOptions.expiredPrefetch === "render" && resolution.auth.kind === "anon" && resolution.auth.reason === "expired" && isPrefetch(request);
 			const protectMethods = proxyOptions.protectMethods;
 			const runsProtect = protectMethods === true ? true : (protectMethods ?? ["GET", "HEAD"]).includes(request.method);
-			const custom = (resolution.sessionEnded === true && sessionCheck?.redirect !== void 0 && request.nextUrl.pathname !== sessionCheck.redirect ? endedRedirect(request, sessionCheck.redirect) : void 0) ?? (rendersSignedOut || !runsProtect ? void 0 : await proxyOptions.protect?.(resolution.auth, request));
+			const custom = (resolution.sessionEnded === true && sessionCheck?.redirect !== void 0 && request.nextUrl.pathname !== sessionCheck.redirect ? endedRedirect(request, sessionCheck.redirect, resolution.sessionEndedReason === "banned" ? sessionCheck.reasons?.banned ?? "account_banned" : sessionCheck.reasons?.ended ?? "session_ended") : void 0) ?? (rendersSignedOut || !runsProtect ? void 0 : await proxyOptions.protect?.(resolution.auth, request));
 			const initial = custom ?? early;
 			if (!initial && resolution.cookies.length === 0 && !id && !proxyOptions.after && !proxyOptions.serverTiming) {
 				flushAfter();

package/dist/node/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../refusal-D1rgbzNq.js";
+import { n as RouteGuardOptions } from "../refusal-DhSU2Vvr.js";
 import { i as toWebHeaders, r as applyWebHeaders, t as NodeHeaderTarget } from "../node-headers-AO06VhqH.js";
-import { _ as toNodeHandler, a as FastifyReplyLike, b as toWebRequest, c as KoaMiddleware, d as guard, f as koaGuard, g as toKoa, h as toFastify, i as FastifyHook, l as ToNodeOptions, m as toExpress, n as ExpressMiddleware, o as FastifyRequestLike, p as problemErrorHandler, r as ExpressResponse, s as KoaContextLike, t as ExpressErrorHandler, u as fastifyGuard, v as WebRequestOptions, y as sendWebResponse } from "../index-DDrYaUcq.js";
+import { _ as toNodeHandler, a as FastifyReplyLike, b as toWebRequest, c as KoaMiddleware, d as guard, f as koaGuard, g as toKoa, h as toFastify, i as FastifyHook, l as ToNodeOptions, m as toExpress, n as ExpressMiddleware, o as FastifyRequestLike, p as problemErrorHandler, r as ExpressResponse, s as KoaContextLike, t as ExpressErrorHandler, u as fastifyGuard, v as WebRequestOptions, y as sendWebResponse } from "../index-CdZKQF98.js";
 export { ExpressErrorHandler, ExpressMiddleware, ExpressResponse, FastifyHook, FastifyReplyLike, FastifyRequestLike, KoaContextLike, KoaMiddleware, type NodeHeaderTarget, type RouteGuardOptions, ToNodeOptions, type WebRequestOptions, applyWebHeaders, fastifyGuard, guard, koaGuard, problemErrorHandler, sendWebResponse, toExpress, toFastify, toKoa, toNodeHandler, toWebHeaders, toWebRequest };

package/dist/orpc/index.d.ts

@@ -1,11 +1,11 @@
 import { b as DbError, f as Result } from "../result-D7y2fT87.js";
 import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
-import { r as AuthState } from "../resolve-KW8nCeL6.js";
+import { r as AuthState } from "../resolve-ChTYeTEl.js";
 import { i as ProblemDetails } from "../problem-DD8LZFjc.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-CeVeeXwz.js";
-import { i as MiddlewareOptions, r as GuardOptions } from "../respond-DoBijysA.js";
-import { s as BlockRequireOptions } from "../kit-B5tid-q5.js";
+import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { i as MiddlewareOptions, r as GuardOptions } from "../respond-DprrgyXX.js";
+import { s as BlockRequireOptions } from "../kit-CkNzZUqv.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { BuilderWithMiddlewares, DecoratedMiddleware, ORPCError } from "@orpc/server";

package/dist/orpc/index.js

@@ -2,7 +2,7 @@ import { r as dbErrorOf } from "../errors-B11Duf73.js";
 import { o as toProblem } from "../problem-BreOl8b8.js";
 import { i as claimsOf } from "../claims-PqzCxaTD.js";
 import { t as tenantOf } from "../tenant-I1TEZ_BX.js";
-import { c as extendServer, n as flushEvents, s as createServer, y as refreshFor } from "../adapter-Bc1o3zyy.js";
+import { c as extendServer, n as flushEvents, s as createServer, y as refreshFor } from "../adapter-B-tL8hqg.js";
 import { n as toSession } from "../view-BeFcRV6G.js";
 import { o as settle, r as guard, t as defaultExpose } from "../respond-BUgsXNgk.js";
 import { t as authorizeCaller } from "../kit-Fm-Fv7q5.js";

package/dist/otel/index.js

@@ -1,7 +1,7 @@
 import { r as definePlugin } from "../plugin-tfXW1-qO.js";
 import { t as SPEC_PINS } from "../spec-pins--j6mTok4.js";
 import { r as blockEventAttributes } from "../block-events-CrT8r7Fe.js";
-import "../version-Bvv6aLjZ.js";
+import "../version--AolB5ej.js";
 import { SpanKind, SpanStatusCode, context, metrics, propagation, trace } from "@opentelemetry/api";
 //#region src/otel/index.ts
 const INSTRUMENTATION_NAME = "better-supabase";
@@ -40,9 +40,9 @@ function systemOf(executor) {
 * ```
 */
 function otel(options = {}) {
-	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.6.0");
+	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.7.0");
 	let histogram;
-	if (options.metrics !== false) histogram = (options.meter ?? metrics.getMeter("better-supabase", "0.6.0")).createHistogram("db.client.operation.duration", {
+	if (options.metrics !== false) histogram = (options.meter ?? metrics.getMeter("better-supabase", "0.7.0")).createHistogram("db.client.operation.duration", {
 		unit: "s",
 		description: "Duration of database client operations.",
 		advice: { explicitBucketBoundaries: [
@@ -181,7 +181,7 @@ function otel(options = {}) {
 * Returns a function that stops listening.
 */
 function traceAuth(betterSupabase, options = {}) {
-	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.6.0");
+	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.7.0");
 	const offAuth = betterSupabase.events.on("auth", (event) => {
 		const span = tracer.startSpan("auth.resolve", {
 			kind: SpanKind.INTERNAL,
@@ -219,7 +219,7 @@ function traceAuth(betterSupabase, options = {}) {
 * set an error status. Returns a function that stops listening.
 */
 function traceBlockEvents(betterSupabase, options = {}) {
-	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.6.0");
+	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.7.0");
 	return betterSupabase.events.on("block", (event) => {
 		const attributes = {
 			...options.attributes,

package/dist/{provider-BH5UWZJ6.d.ts → provider-D-UEMvSD.d.ts}

@@ -1,6 +1,6 @@
 /// <reference lib="esnext.temporal" />
 import { b as DbError, t as AsyncResult } from "./result-D7y2fT87.js";
-import { r as AuthState } from "./resolve-KW8nCeL6.js";
+import { r as AuthState } from "./resolve-ChTYeTEl.js";
 //#region src/credentials/provider.d.ts
 /**
  * Names a credential without holding it. Tables store this as a

package/dist/react/index.d.ts

@@ -1,12 +1,12 @@
 import { t as escapeLike } from "../escape-like-ImTK0ps_.js";
 import { s as Impersonator } from "../mfa-Daak8ukG.js";
-import { t as tenantOf } from "../tenant-icPeuUBN.js";
-import { t as AuthSession } from "../view-DbxLNu8L.js";
+import { t as tenantOf } from "../tenant-BxNFk9bx.js";
+import { t as AuthSession } from "../view-CF7ihnkg.js";
 import { r as LiveCountSeed } from "../index-DunNRdnT.js";
-import { r as MembershipClaim } from "../entitlements-DHrY2UDZ.js";
-import { n as supportOf, t as SupportView } from "../support-view-33Oi07TT.js";
+import { r as MembershipClaim } from "../entitlements-BKSVGtrG.js";
+import { n as supportOf, t as SupportView } from "../support-view-CVOJJLpc.js";
 import { a as BroadcastOptions, f as UseActionOptions, l as LiveQueryHookOptions, n as ActionInputOf, o as ClientLike, r as ActionResultOf, s as LiveCountHookOptions, t as fieldErrorsOf } from "../field-errors-BFOa7WhB.js";
-import { A as useLiveCount, C as BetterSupabaseProviderProps, D as createHooks, E as ProfileOf, M as useSupabase, O as useAuth, S as BetterSupabaseProvider, T as LiveCount, _ as ActionHandle, a as UploadTarget, b as useActionForm, c as useUpload, d as useDebouncedSearch, f as Presence, g as ActionForm, h as usePresence, i as UploadStatus, j as useLiveQuery, k as useBroadcast, l as DebouncedSearch, m as PresenceTopic, n as SignedUrlSource, o as UseUploadOptions, p as PresenceHookOptions, r as Upload, s as useSignedUrl, t as SignedUrl, u as DebouncedSearchOptions, v as UseActionFormOptions, w as ClaimsOf, x as BetterHooks, y as useAction } from "../index-CtuakVRc.js";
+import { A as useLiveCount, C as BetterSupabaseProviderProps, D as createHooks, E as ProfileOf, M as useSupabase, O as useAuth, S as BetterSupabaseProvider, T as LiveCount, _ as ActionHandle, a as UploadTarget, b as useActionForm, c as useUpload, d as useDebouncedSearch, f as Presence, g as ActionForm, h as usePresence, i as UploadStatus, j as useLiveQuery, k as useBroadcast, l as DebouncedSearch, m as PresenceTopic, n as SignedUrlSource, o as UseUploadOptions, p as PresenceHookOptions, r as Upload, s as useSignedUrl, t as SignedUrl, u as DebouncedSearchOptions, v as UseActionFormOptions, w as ClaimsOf, x as BetterHooks, y as useAction } from "../index-CewnYSpv.js";
 import { SessionProvider, SessionProviderProps, useSession, useSupportSession } from "./session.js";
 import { a as useSignIn, i as SignOut, n as PendingState, o as useSignOut, r as SignIn, t as AuthHookOptions } from "../sign-in-BCV5S2WZ.js";
 export { type ActionForm, type ActionHandle, type ActionInputOf, type ActionResultOf, type AuthHookOptions, type AuthSession, type BetterHooks, BetterSupabaseProvider, type BetterSupabaseProviderProps, type BroadcastOptions, type ClaimsOf, type ClientLike, type DebouncedSearch, type DebouncedSearchOptions, type Impersonator, type LiveCount, type LiveCountHookOptions, type LiveCountSeed, type LiveQueryHookOptions, type MembershipClaim, type PendingState, type Presence, type PresenceHookOptions, type PresenceTopic, type ProfileOf, SessionProvider, type SessionProviderProps, type SignIn, type SignOut, type SignedUrl, type SignedUrlSource, type SupportView, type Upload, type UploadStatus, type UploadTarget, type UseActionFormOptions, type UseActionOptions, type UseUploadOptions, createHooks, escapeLike, fieldErrorsOf, supportOf, tenantOf, useAction, useActionForm, useAuth, useBroadcast, useDebouncedSearch, useLiveCount, useLiveQuery, usePresence, useSession, useSignIn, useSignOut, useSignedUrl, useSupabase, useSupportSession, useUpload };

package/dist/react/server.d.ts

@@ -1,13 +1,13 @@
 import { t as escapeLike } from "../escape-like-ImTK0ps_.js";
 import { it as QuerySpec } from "../define-CJJkkr1-.js";
 import { s as Impersonator } from "../mfa-Daak8ukG.js";
-import { t as tenantOf } from "../tenant-icPeuUBN.js";
-import { t as AuthSession } from "../view-DbxLNu8L.js";
+import { t as tenantOf } from "../tenant-BxNFk9bx.js";
+import { t as AuthSession } from "../view-CF7ihnkg.js";
 import { r as LiveCountSeed } from "../index-DunNRdnT.js";
-import { r as MembershipClaim } from "../entitlements-DHrY2UDZ.js";
-import { n as supportOf, t as SupportView } from "../support-view-33Oi07TT.js";
+import { r as MembershipClaim } from "../entitlements-BKSVGtrG.js";
+import { n as supportOf, t as SupportView } from "../support-view-CVOJJLpc.js";
 import { a as BroadcastOptions, f as UseActionOptions, l as LiveQueryHookOptions, n as ActionInputOf, o as ClientLike, r as ActionResultOf, s as LiveCountHookOptions, t as fieldErrorsOf } from "../field-errors-BFOa7WhB.js";
-import { C as BetterSupabaseProviderProps, E as ProfileOf, M as useSupabase, O as useAuth, S as BetterSupabaseProvider, T as LiveCount, _ as ActionHandle, a as UploadTarget, c as useUpload$1, d as useDebouncedSearch$1, f as Presence, g as ActionForm, h as usePresence$1, i as UploadStatus, j as useLiveQuery, k as useBroadcast, l as DebouncedSearch, m as PresenceTopic, n as SignedUrlSource, o as UseUploadOptions, p as PresenceHookOptions, r as Upload, s as useSignedUrl$1, t as SignedUrl, u as DebouncedSearchOptions, v as UseActionFormOptions, w as ClaimsOf, x as BetterHooks } from "../index-CtuakVRc.js";
+import { C as BetterSupabaseProviderProps, E as ProfileOf, M as useSupabase, O as useAuth, S as BetterSupabaseProvider, T as LiveCount, _ as ActionHandle, a as UploadTarget, c as useUpload$1, d as useDebouncedSearch$1, f as Presence, g as ActionForm, h as usePresence$1, i as UploadStatus, j as useLiveQuery, k as useBroadcast, l as DebouncedSearch, m as PresenceTopic, n as SignedUrlSource, o as UseUploadOptions, p as PresenceHookOptions, r as Upload, s as useSignedUrl$1, t as SignedUrl, u as DebouncedSearchOptions, v as UseActionFormOptions, w as ClaimsOf, x as BetterHooks } from "../index-CewnYSpv.js";
 import { SessionProvider, SessionProviderProps } from "./session.js";
 import { a as useSignIn$1, i as SignOut, n as PendingState, o as useSignOut$1, r as SignIn, t as AuthHookOptions } from "../sign-in-BCV5S2WZ.js";
 //#region src/react/server.d.ts

package/dist/react/session.d.ts

@@ -1,5 +1,5 @@
-import { t as AuthSession } from "../view-DbxLNu8L.js";
-import { t as SupportView } from "../support-view-33Oi07TT.js";
+import { t as AuthSession } from "../view-CF7ihnkg.js";
+import { t as SupportView } from "../support-view-CVOJJLpc.js";
 import { ReactNode } from "react";
 //#region src/react/session.d.ts
 export interface SessionProviderProps {

package/dist/react-router/index.d.ts

@@ -1,9 +1,9 @@
 import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { t as BetterServer } from "../server-CeVeeXwz.js";
-import { a as AuthorizedContext, c as Unwrapped, i as AuthorizeOptions, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-B5tid-q5.js";
-import { t as RefusalRedirects } from "../refusal-D1rgbzNq.js";
-import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-DuVb4Xa8.js";
+import { t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { a as AuthorizedContext, c as Unwrapped, i as AuthorizeOptions, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-CkNzZUqv.js";
+import { t as RefusalRedirects } from "../refusal-DhSU2Vvr.js";
+import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-KIPvRQJU.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { StandardSchemaV1 } from "@standard-schema/spec";

package/dist/react-router/index.js

@@ -1,9 +1,9 @@
 import { a as problemResponse } from "../problem-BreOl8b8.js";
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-Bc1o3zyy.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
 import { o as settle, t as defaultExpose } from "../respond-BUgsXNgk.js";
 import { i as requireCaller, o as runAction } from "../kit-Fm-Fv7q5.js";
 import { n as bufferInPlace, t as around } from "../shared-CBxosKK3.js";
-import { i as localsOf, n as actionInput, r as frameworkEntry } from "../framework-CONDyPYx.js";
+import { i as localsOf, n as actionInput, r as frameworkEntry } from "../framework-BDCpJI7o.js";
 import { r as refusalResponse } from "../refusal-CeJWxmkH.js";
 //#region src/bridges/react-router.ts
 /**

package/dist/{refusal-D1rgbzNq.d.ts → refusal-DhSU2Vvr.d.ts}

@@ -1,4 +1,4 @@
-import { s as BlockRequireOptions } from "./kit-B5tid-q5.js";
+import { s as BlockRequireOptions } from "./kit-CkNzZUqv.js";
 //#region src/server/refusal.d.ts
 /** Where refused callers go instead of a Problem Details response. */
 interface RefusalRedirects {

package/dist/{resolve-KW8nCeL6.d.ts → resolve-ChTYeTEl.d.ts}

@@ -147,7 +147,10 @@ interface AuthResolution<C = unknown, P = unknown> {
   readonly requestCookies: readonly CookieRecord[];
   /** Adds `cookies` and `headers` to a response. */
   apply(response: Response): Response;
+  /** The session was ended server-side (revoked, deleted or banned); the cookies are cleared. */
   readonly sessionEnded?: boolean;
+  /** Why `sessionEnded` is set: `banned` when Auth rejected the user as banned. */
+  readonly sessionEndedReason?: "ended" | "banned";
 }
 /** The first `x-forwarded-for` hop, the client as your edge saw it. */
 declare function clientIp(request: Request): string | undefined;

package/dist/{resolve-D_IcnvFd.js → resolve-tJZY3FEa.js}

@@ -164,8 +164,8 @@ async function sessionStatus(input, options) {
 			},
 			signal: AbortSignal.timeout(options.timeoutMs ?? DEFAULT_TIMEOUT_MS$1)
 		});
+		if (response.status === 401 || response.status === 403) return (await response.json().catch(() => null))?.["error_code"] === "user_banned" ? "banned" : "ended";
 		await response.body?.cancel();
-		if (response.status === 401 || response.status === 403) return "ended";
 		return response.ok ? "active" : "unknown";
 	} catch {
 		return "unknown";
@@ -237,6 +237,7 @@ async function request(refreshToken, options, now) {
 			ok: false,
 			reason: response.status >= 500 || response.status === 429 ? "network" : "rejected",
 			status: response.status,
+			...typeof body?.["error_code"] === "string" ? { code: body["error_code"] } : {},
 			message
 		};
 	}
@@ -502,12 +503,15 @@ async function verifyOnce(credentials, modes, options, source) {
 		reason: "none"
 	};
 }
-function resolution(auth, cookies, writes = [], ended = false) {
+function resolution(auth, cookies, writes = [], ended) {
 	const headers = writes.length > 0 ? AUTH_CACHE_HEADERS : {};
 	let requestCookies;
 	return {
 		auth,
-		...ended ? { sessionEnded: true } : {},
+		...ended ? {
+			sessionEnded: true,
+			sessionEndedReason: ended
+		} : {},
 		cookies: writes,
 		headers,
 		/** Parsed on first read: bearer requests rarely need their cookies. */
@@ -588,16 +592,17 @@ async function resolveAuth(request, options) {
 			token: session.access_token,
 			apikey: null
 		}, ["user"], options, "cookie");
-		if (state.kind === "user" && options.checkSession && await sessionStatus(state.token, {
+		const status = state.kind === "user" && options.checkSession ? await sessionStatus(state.token, {
 			url: options.env.url,
 			publishableKey: options.env.publishableKey,
 			...options.fetch ? { fetch: options.fetch } : {},
 			...options.refreshTimeoutMs === void 0 ? {} : { timeoutMs: options.refreshTimeoutMs },
 			...options.now ? { now: options.now } : {}
-		}) === "ended") return resolution({
+		}) : void 0;
+		if (status === "ended" || status === "banned") return resolution({
 			kind: "anon",
 			reason: "signed_out"
-		}, cookies, options.refresh ? writeSession(cookies(), name, null, options.cookie?.options, encoding) : [], true);
+		}, cookies, options.refresh ? writeSession(cookies(), name, null, options.cookie?.options, encoding) : [], status);
 		if (state.kind !== "invalid" || state.reason !== "token" || state.error.kind === "network") return resolution(state, cookies);
 		if (!options.refresh) return resolution({
 			kind: "anon",
@@ -643,7 +648,7 @@ async function resolveAuth(request, options) {
 		return resolution({
 			kind: "anon",
 			reason: "signed_out"
-		}, cookies, writeSession(cookies(), name, null, options.cookie?.options, encoding));
+		}, cookies, writeSession(cookies(), name, null, options.cookie?.options, encoding), outcome.code === "user_banned" ? "banned" : void 0);
 	}
 	const writes = writeSession(cookies(), name, outcome.session, options.cookie?.options, encoding);
 	return resolution(await verify({

package/dist/{resource-D6Uc7Sk7.d.ts → resource-IPS5xi9q.d.ts}

@@ -1,7 +1,7 @@
 import { E as ValidationIssue, f as Result } from "./result-D7y2fT87.js";
 import { H as Update, L as TableKey, R as TableMeta, a as AnyModels, i as AnyFunctions, x as Insert } from "./types-6BdhkmZe.js";
 import { It as SelectArg, t as BetterSupabase } from "./define-CJJkkr1-.js";
-import { a as RespondOptions } from "./respond-DoBijysA.js";
+import { a as RespondOptions } from "./respond-DprrgyXX.js";
 import { i as ResourceOperation } from "./index-Bxih3l0u.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/server/resource.d.ts

package/dist/{respond-DoBijysA.d.ts → respond-DprrgyXX.d.ts}

@@ -1,5 +1,5 @@
 import { b as DbError } from "./result-D7y2fT87.js";
-import { r as AuthState } from "./resolve-KW8nCeL6.js";
+import { r as AuthState } from "./resolve-ChTYeTEl.js";
 import { t as Aal } from "./mfa-Daak8ukG.js";
 //#region src/server/refresh.d.ts
 /** A router or browser prefetch, by its request headers. */