better-supabase 0.7.0 → 0.7.1

package/dist/{adapter-B-tL8hqg.js → adapter-iKgjHVPx.js}

@@ -203,6 +203,11 @@ function suspendAccount(service, sql, userId, options) {
 		if (suspended) {
 			const refused = await ban(client, userId, options.duration ?? FOREVER);
 			if (refused) return err(refused);
+			if (options.endSessions !== true) return ok({
+				userId,
+				suspended,
+				ended: 0
+			});
 		}
 		let ended;
 		try {

package/dist/astro/index.d.ts

@@ -1,10 +1,10 @@
 import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { t as BetterServer } from "../server-Bh0EVSwU.js";
 import { j as StorageImageOptions } from "../index-D48jVS-N.js";
 import { a as AuthorizedContext, c as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-CkNzZUqv.js";
 import { t as RefusalRedirects } from "../refusal-DhSU2Vvr.js";
-import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-KIPvRQJU.js";
+import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-BmzgK32X.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/astro/index.d.ts
 /** The part of Astro's `APIContext` (middleware, pages, endpoints, actions) the integration uses. */

package/dist/astro/index.js

@@ -1,9 +1,9 @@
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-iKgjHVPx.js";
 import { t as defaultExpose } from "../respond-BUgsXNgk.js";
 import { i as requireCaller, o as runAction } from "../kit-Fm-Fv7q5.js";
 import { t as storageImageUrl } from "../image-url-pIVlO6R1.js";
 import { t as around } from "../shared-CBxosKK3.js";
-import { i as localsOf, r as frameworkEntry } from "../framework-BDCpJI7o.js";
+import { i as localsOf, r as frameworkEntry } from "../framework-a7aRCIqv.js";
 import { r as refusalResponse } from "../refusal-CeJWxmkH.js";
 //#region src/astro/index.ts
 function runtimeEnv(locals) {

package/dist/cli/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as run } from "./run-BO052mki.js";
+import { i as run } from "./run-BqDPh9UH.js";
 import { t as colorEnabled } from "./style-C0NFdJRL.js";
 import { text } from "node:stream/consumers";
 //#region src/cli/bin.ts

package/dist/cli/{doctor-CVdnLahA.js → doctor-DJk0aeBi.js}

@@ -2,12 +2,12 @@ import { a as list, r as defineCliCommand } from "./command-CK14fP91.js";
 import { n as CliError } from "./errors-4v4DTtda.js";
 import { i as writeIfChanged, t as display } from "./io-DI1mTdSA.js";
 import { i as plain, r as painter } from "./style-C0NFdJRL.js";
-import { t as VERSION } from "./version-Bp4fyubI.js";
+import { t as VERSION } from "./version-59gcepIG.js";
 import { s as providerLabel, t as compiledReadSets } from "./read-sets-CETOSFx4.js";
 import { s as stdinDatabaseUrl } from "./config-NiPxAmUF.js";
 import { c as migrationCommand, d as schemaPaths, i as findRepoRoot, l as pgFunctionHooks, p as tomlGet, r as diffEngine, s as httpHooks, u as readSupabaseToml } from "./supabase-toml-B-bIukQF.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
-import { A as exposed, C as MetadataRejectedError, D as accessModule, E as AUTHORIZATION_RULES, F as qualified, I as tableObject, M as lineOf, N as permissionCatalogKeys, O as entitlementsModule, P as policyObject, S as configFor, _ as METADATA_GAPS_TEXT, a as renderFiles, c as loadSnapshot, j as exposedSchemas, k as catalogOf, l as managementTarget, p as snapshotFile, r as readMetadataSnapshot, u as openSource, v as CACHE_DIR } from "./gen-AIf4MREI.js";
+import { A as exposed, C as MetadataRejectedError, D as accessModule, E as AUTHORIZATION_RULES, F as qualified, I as tableObject, M as lineOf, N as permissionCatalogKeys, O as entitlementsModule, P as policyObject, S as configFor, _ as METADATA_GAPS_TEXT, a as renderFiles, c as loadSnapshot, j as exposedSchemas, k as catalogOf, l as managementTarget, p as snapshotFile, r as readMetadataSnapshot, u as openSource, v as CACHE_DIR } from "./gen-CCMc39Dx.js";
 import { n as withSpinner } from "./prompts-BNcNfAve.js";
 import { t as connect } from "./db-DOBPt660.js";
 import { n as moduleLayoutFor } from "./sql-layout-D6cphHT3.js";
@@ -2623,7 +2623,7 @@ const RULES = [
 			code: "BS106",
 			severity: "error",
 			title: "Table not granted to the Data API",
-			description: "Supabase no longer grants new tables to anon and authenticated. Without a grant, every Data API request fails with 42501 before RLS runs. Tables in `expose` need the privileges listed there; other tables need `select` for authenticated, except tables with no permissive policy under `sql.modules.grants.options.fromPolicies`, which are service-only. Tables marked `serviceRole` in `tables` must have no grants for either role.",
+			description: "Supabase no longer grants new tables to anon and authenticated. Without a grant, every Data API request fails with 42501 before RLS runs. Tables in `expose` need the privileges listed there; other tables need `select` for authenticated, except tables with RLS on and no permissive policy under `sql.modules.grants.options.fromPolicies`, which are service-only. Tables marked `serviceRole` in `tables` must have no grants for either role.",
 			check: (context) => {
 				const auto = context.configToml ? tomlGet(context.configToml.document, ["api", "auto_expose_new_tables"]) : void 0;
 				const note = auto === false || auto === "false" ? " config.toml sets [api] auto_expose_new_tables = false, so new tables start without grants." : "";

package/dist/cli/{gen-AIf4MREI.js → gen-CCMc39Dx.js}

@@ -2,7 +2,7 @@ import { r as defineCliCommand } from "./command-CK14fP91.js";
 import { n as CliError } from "./errors-4v4DTtda.js";
 import { i as writeIfChanged, n as importPath, r as sameText, t as display } from "./io-DI1mTdSA.js";
 import { r as painter } from "./style-C0NFdJRL.js";
-import { t as VERSION } from "./version-Bp4fyubI.js";
+import { t as VERSION } from "./version-59gcepIG.js";
 import { a as entitlementsMode, c as unsafeKey, i as entitlementRequirements, n as accessProviderMode, o as moduleKeyProblems, r as accessRequirements, s as providerLabel, t as compiledReadSets } from "./read-sets-CETOSFx4.js";
 import { s as stdinDatabaseUrl, t as databaseUrl } from "./config-NiPxAmUF.js";
 import { l as pgFunctionHooks, p as tomlGet, u as readSupabaseToml } from "./supabase-toml-B-bIukQF.js";

package/dist/cli/gen-DRmzPI75.js

@@ -0,0 +1,2 @@
+import { n as genCommand } from "./gen-CCMc39Dx.js";
+export { genCommand };

package/dist/cli/index.d.ts

@@ -527,6 +527,6 @@ export declare function emitModule(model: Model, options: EmitOptions): string;
 export declare function loadConfig(cwd: string, explicit?: string): Promise<ResolvedConfig>;
 //#endregion
 //#region src/cli/version.d.ts
-export declare const VERSION = "0.7.0";
+export declare const VERSION = "0.7.1";
 //#endregion
 export type { Catalog, CatalogCheck, CatalogColumn, CatalogColumnGrant, CatalogEnum, CatalogForeignKey, CatalogFunction, CatalogFunctionArg, CatalogGrant, CatalogIndex, CatalogPolicy, CatalogTable, CatalogTrigger, CatalogUnique, CliArgs, CliCommandDef, CliContext, CliEnv, CliErrorCode, CliErrorOptions, CliIo, CliProblem, CliProblemExtensions, Command, CommandContext, CommandResult, ExitCode, ExtrasFunction, ExtrasHook, ExtrasHookFunction, ExtrasTable, ForeignKeyAction, GeneratorMetadata, IntrospectionSource, ManagementSourceOptions, ParsedArgs, Queryable, RunOptions, RunResult, Snapshot, SnapshotBucket, SnapshotExtras };

package/dist/cli/index.js

@@ -1,9 +1,9 @@
 import { a as list, r as defineCliCommand } from "./command-CK14fP91.js";
 import { n as CliError, t as CLI_ERRORS_URL } from "./errors-4v4DTtda.js";
-import { i as run, n as help, r as registerCommand, t as commandNames } from "./run-BO052mki.js";
-import { t as VERSION } from "./version-Bp4fyubI.js";
+import { i as run, n as help, r as registerCommand, t as commandNames } from "./run-BqDPh9UH.js";
+import { t as VERSION } from "./version-59gcepIG.js";
 import { a as loadConfig } from "./config-NiPxAmUF.js";
-import { L as toCatalog, a as renderFiles, b as emitModule, c as loadSnapshot, d as parseSnapshot, f as serializeSnapshot, g as pgSource, h as managementSource, m as introspect, o as runGen, x as buildModel, y as GENERATED_HEADER } from "./gen-AIf4MREI.js";
+import { L as toCatalog, a as renderFiles, b as emitModule, c as loadSnapshot, d as parseSnapshot, f as serializeSnapshot, g as pgSource, h as managementSource, m as introspect, o as runGen, x as buildModel, y as GENERATED_HEADER } from "./gen-CCMc39Dx.js";
 //#region src/cli/introspect/from-catalog.ts
 /**
 * Builds a snapshot from catalog records: the inverse of `toCatalog`. Tests

package/dist/cli/{init-Cr6arjXU.js → init-BHuEQrQK.js}

@@ -1,6 +1,6 @@
 import { a as list, r as defineCliCommand } from "./command-CK14fP91.js";
 import { i as writeIfChanged, t as display } from "./io-DI1mTdSA.js";
-import { t as VERSION } from "./version-Bp4fyubI.js";
+import { t as VERSION } from "./version-59gcepIG.js";
 import { a as loadConfig, r as findConfig } from "./config-NiPxAmUF.js";
 import { a as findSupabaseRoot, p as tomlGet, r as diffEngine, t as PGDELTA_TABLE, u as readSupabaseToml } from "./supabase-toml-B-bIukQF.js";
 import { t as TYPEGEN_VERSION } from "./typegen-version-DeFbtzYI.js";

package/dist/cli/{introspect-Bzuv1HHj.js → introspect-DzR2nyQb.js}

@@ -2,7 +2,7 @@ import { r as defineCliCommand } from "./command-CK14fP91.js";
 import { i as writeIfChanged, r as sameText, t as display } from "./io-DI1mTdSA.js";
 import { r as painter } from "./style-C0NFdJRL.js";
 import { t as fileDiff } from "./diff-SjkO5rNr.js";
-import { T as serializeGenerator, c as loadSnapshot, f as serializeSnapshot, s as sourceArgs, t as SOURCE_ARGS, w as restrictSchemas } from "./gen-AIf4MREI.js";
+import { T as serializeGenerator, c as loadSnapshot, f as serializeSnapshot, s as sourceArgs, t as SOURCE_ARGS, w as restrictSchemas } from "./gen-CCMc39Dx.js";
 import { n as withSpinner } from "./prompts-BNcNfAve.js";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/cli/{run-BO052mki.js → run-BqDPh9UH.js}

@@ -2,7 +2,7 @@ import { n as __toESM } from "./rolldown-runtime-BPOCksWG.js";
 import { c as parseArgs$2, i as joinRepeated, l as renderUsage, n as cliContext, o as listArgs, s as defineCommand, t as GLOBAL_ARGS, u as runCommand } from "./command-CK14fP91.js";
 import { n as CliError, r as toCliError } from "./errors-4v4DTtda.js";
 import { n as highlight, r as painter } from "./style-C0NFdJRL.js";
-import { t as VERSION } from "./version-Bp4fyubI.js";
+import { t as VERSION } from "./version-59gcepIG.js";
 import { stripVTControlCharacters } from "node:util";
 import { resolve } from "node:path";
 //#region src/cli/legacy.ts
@@ -134,11 +134,11 @@ function renderError(error, options) {
 //#region src/cli/run.ts
 const COMMANDS = /* @__PURE__ */ new Map([
 	["init", {
-		load: () => import("./init-Cr6arjXU.js").then((m) => m.initCommand),
+		load: () => import("./init-BHuEQrQK.js").then((m) => m.initCommand),
 		description: "Writes better-supabase.config.ts, src/lib/supabase/index.ts and glue for the frameworks in package.json"
 	}],
 	["add", {
-		load: () => import("./init-Cr6arjXU.js").then((m) => m.addCommand),
+		load: () => import("./init-BHuEQrQK.js").then((m) => m.addCommand),
 		description: "Adds glue for an integration to an existing project"
 	}],
 	["env", {
@@ -154,11 +154,11 @@ const COMMANDS = /* @__PURE__ */ new Map([
 		description: "Installs the Agent Skills that ship with this version of better-supabase"
 	}],
 	["gen", {
-		load: () => import("./gen-DSrahEdX.js").then((m) => m.genCommand),
+		load: () => import("./gen-DRmzPI75.js").then((m) => m.genCommand),
 		description: "Writes database.types.ts, generated.ts and its metadata module from the database"
 	}],
 	["introspect", {
-		load: () => import("./introspect-Bzuv1HHj.js").then((m) => m.introspectCommand),
+		load: () => import("./introspect-DzR2nyQb.js").then((m) => m.introspectCommand),
 		description: "Saves the database schema as a snapshot for offline gen"
 	}],
 	["openapi", {
@@ -170,7 +170,7 @@ const COMMANDS = /* @__PURE__ */ new Map([
 		description: "Renders the fixtures from defineSeed() (better-supabase/testing) to SQL"
 	}],
 	["doctor", {
-		load: () => import("./doctor-CVdnLahA.js").then((m) => m.doctorCommand),
+		load: () => import("./doctor-DJk0aeBi.js").then((m) => m.doctorCommand),
 		description: "Checks RLS, indexes, drift, auth config and env files; exits 1 on errors, or on warnings with --strict"
 	}],
 	["sql", {

package/dist/cli/{version-Bp4fyubI.js → version-59gcepIG.js}

@@ -1,4 +1,4 @@
 //#region src/cli/version.ts
-const VERSION = "0.7.0";
+const VERSION = "0.7.1";
 //#endregion
 export { VERSION as t };

package/dist/{composite-CpHLEo-G.d.ts → composite--yqry7uW.d.ts}

@@ -3,7 +3,7 @@ import { a as EventHub } from "./events-DWDhx77e.js";
 import { i as CookieScope, s as SessionEncoding } from "./session-ChiXDZdZ.js";
 import { r as AuthState, t as AuthResolution } from "./resolve-ChTYeTEl.js";
 import { b as Db, t as BetterSupabase } from "./define-CJJkkr1-.js";
-import { C as ActiveSupport, i as ServerContext, n as ContextOptions, o as ServerOptions, t as BetterServer, y as ReplicaState } from "./server-ZSJ9rCcV.js";
+import { C as ActiveSupport, i as ServerContext, n as ContextOptions, o as ServerOptions, t as BetterServer, y as ReplicaState } from "./server-Bh0EVSwU.js";
 import { d as RefreshPolicy, r as GuardOptions } from "./respond-DprrgyXX.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { Entry, SingleKeyEntry } from "@supabase/middleware";

package/dist/{composite-C6I8ZyaF.js → composite-DXVUibdi.js}

@@ -1,5 +1,5 @@
 import { a as problemResponse } from "./problem-BreOl8b8.js";
-import { C as serverCore, S as withServerContext, _ as withSession, g as withSupport, h as withTenant, s as createServer } from "./adapter-B-tL8hqg.js";
+import { C as serverCore, S as withServerContext, _ as withSession, g as withSupport, h as withTenant, s as createServer } from "./adapter-iKgjHVPx.js";
 import { s as withPrimaryPin } from "./replicas-CwrYp5Zj.js";
 import { r as guard, t as defaultExpose } from "./respond-BUgsXNgk.js";
 import { a as withAuthMode, i as withAuth, o as withJwtClaims, s as withUserClaims } from "./claims-DDBQT6BK.js";

package/dist/edge/index.d.ts

@@ -1,6 +1,6 @@
 import { L as TableKey, a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-Bh0EVSwU.js";
 import { t as AuthSession } from "../view-CF7ihnkg.js";
 import { i as MiddlewareOptions, r as GuardOptions } from "../respond-DprrgyXX.js";
 import { s as BlockRequireOptions } from "../kit-CkNzZUqv.js";

package/dist/edge/index.js

@@ -1,12 +1,12 @@
 import { n as dbError } from "../errors-B11Duf73.js";
 import { r as err } from "../result-DzUbqgdW.js";
 import { a as problemResponse } from "../problem-BreOl8b8.js";
-import { a as unexpectedResponse, c as extendServer, l as withExtra, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
+import { a as unexpectedResponse, c as extendServer, l as withExtra, n as flushEvents, s as createServer } from "../adapter-iKgjHVPx.js";
 import { a as respond, t as defaultExpose } from "../respond-BUgsXNgk.js";
-import { t as withBetterSupabase } from "../composite-C6I8ZyaF.js";
+import { t as withBetterSupabase } from "../composite-DXVUibdi.js";
 import { t as defineResource } from "../resource-BsvzCMlX.js";
 import { i as requireCaller } from "../kit-Fm-Fv7q5.js";
-import { t as EVERY_CALLER } from "../framework-BDCpJI7o.js";
+import { t as EVERY_CALLER } from "../framework-a7aRCIqv.js";
 import { bufferRequest, pipeline, seedContext } from "@supabase/middleware";
 import { withCors } from "@supabase/middleware/cors";
 //#region src/bridges/edge.ts

package/dist/expo/index.d.ts

@@ -1,6 +1,6 @@
 import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { i as ServerContext, n as ContextOptions, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { i as ServerContext, n as ContextOptions, o as ServerOptions, t as BetterServer } from "../server-Bh0EVSwU.js";
 import { i as MiddlewareOptions, r as GuardOptions } from "../respond-DprrgyXX.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";

package/dist/expo/index.js

@@ -1,9 +1,9 @@
 import { t as DbException } from "../db-exception-CnWcYPxL.js";
 import { o as toProblem } from "../problem-BreOl8b8.js";
-import { a as unexpectedResponse, c as extendServer, s as createServer, y as refreshFor } from "../adapter-B-tL8hqg.js";
+import { a as unexpectedResponse, c as extendServer, s as createServer, y as refreshFor } from "../adapter-iKgjHVPx.js";
 import { m as serializeCookie } from "../resolve-tJZY3FEa.js";
 import { a as respond, r as guard, t as defaultExpose } from "../respond-BUgsXNgk.js";
-import { t as withBetterSupabase } from "../composite-C6I8ZyaF.js";
+import { t as withBetterSupabase } from "../composite-DXVUibdi.js";
 import { r as handoffOf } from "../shared-CBxosKK3.js";
 import { bufferRequest, pipeline, seedContext } from "@supabase/middleware";
 import { StatusError, setResponseHeaders } from "expo-server";

package/dist/{framework-KIPvRQJU.d.ts → framework-BmzgK32X.d.ts}

@@ -1,7 +1,7 @@
 import { a as AnyModels, i as AnyFunctions } from "./types-6BdhkmZe.js";
-import { o as ServerOptions } from "./server-ZSJ9rCcV.js";
+import { o as ServerOptions } from "./server-Bh0EVSwU.js";
 import { t as AuthSession } from "./view-CF7ihnkg.js";
-import { a as SessionEntryConfig, n as BetterSupabaseContributions } from "./composite-CpHLEo-G.js";
+import { a as SessionEntryConfig, n as BetterSupabaseContributions } from "./composite--yqry7uW.js";
 import { t as RefusalRedirects } from "./refusal-DhSU2Vvr.js";
 //#region src/server/framework.d.ts
 /** What the framework factories (`createSvelteKit`, `createReactRouter`, `createTanStackStart`) take. */

package/dist/{framework-BDCpJI7o.js → framework-a7aRCIqv.js}

@@ -1,5 +1,5 @@
 import { n as toSession } from "./view-BeFcRV6G.js";
-import { t as withBetterSupabase } from "./composite-C6I8ZyaF.js";
+import { t as withBetterSupabase } from "./composite-DXVUibdi.js";
 //#region src/server/framework.ts
 /** Every caller: the framework factories guard per loader, action or route instead. */
 const EVERY_CALLER = [

package/dist/hono/index.d.ts

@@ -1,7 +1,7 @@
 import { L as TableKey, a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { r as AuthState } from "../resolve-ChTYeTEl.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-Bh0EVSwU.js";
 import { t as AuthSession } from "../view-CF7ihnkg.js";
 import { i as MiddlewareOptions, r as GuardOptions } from "../respond-DprrgyXX.js";
 import { s as BlockRequireOptions } from "../kit-CkNzZUqv.js";

package/dist/hono/index.js

@@ -1,9 +1,9 @@
 import { r as dbErrorOf } from "../errors-B11Duf73.js";
 import { a as problemResponse } from "../problem-BreOl8b8.js";
-import { a as unexpectedResponse, c as extendServer, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
+import { a as unexpectedResponse, c as extendServer, n as flushEvents, s as createServer } from "../adapter-iKgjHVPx.js";
 import { n as toSession } from "../view-BeFcRV6G.js";
 import { a as respond, t as defaultExpose } from "../respond-BUgsXNgk.js";
-import { t as withBetterSupabase } from "../composite-C6I8ZyaF.js";
+import { t as withBetterSupabase } from "../composite-DXVUibdi.js";
 import { t as defineResource } from "../resource-BsvzCMlX.js";
 import { i as requireCaller } from "../kit-Fm-Fv7q5.js";
 import { r as handoffOf } from "../shared-CBxosKK3.js";

package/dist/mcp/index.d.ts

@@ -1,6 +1,6 @@
 import { L as TableKey, a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-Bh0EVSwU.js";
 import { r as GuardOptions } from "../respond-DprrgyXX.js";
 import { i as ResourceOperation } from "../index-Bxih3l0u.js";
 import { a as ResourceRouteOptions } from "../resource-IPS5xi9q.js";

package/dist/mcp/index.js

@@ -4,7 +4,7 @@ import { n as validate } from "../standard-BK0cqJ7y.js";
 import { a as problemResponse, o as toProblem } from "../problem-BreOl8b8.js";
 import { t as SPEC_PINS } from "../spec-pins--j6mTok4.js";
 import { t as buildJsonSchema } from "../json-schema-CvER4kgT.js";
-import { c as extendServer, l as withExtra, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
+import { c as extendServer, l as withExtra, n as flushEvents, s as createServer } from "../adapter-iKgjHVPx.js";
 import { n as jsonResponse, t as jsonReplacer } from "../json-CEnpTHlZ.js";
 import { o as settle, r as guard, t as defaultExpose } from "../respond-BUgsXNgk.js";
 import { t as defineResource } from "../resource-BsvzCMlX.js";

package/dist/mcp/sdk/index.d.ts

@@ -1,7 +1,7 @@
 import { a as AnyModels, i as AnyFunctions } from "../../types-6BdhkmZe.js";
 import { r as AuthState } from "../../resolve-ChTYeTEl.js";
 import { t as BetterSupabase } from "../../define-CJJkkr1-.js";
-import { i as ServerContext$1, o as ServerOptions, t as BetterServer } from "../../server-ZSJ9rCcV.js";
+import { i as ServerContext$1, o as ServerOptions, t as BetterServer } from "../../server-Bh0EVSwU.js";
 import { r as GuardOptions, t as AllowedCaller } from "../../respond-DprrgyXX.js";
 import { AuthInfo, CallToolResult, Icon, InputRequiredResult, OAuthTokenVerifier, RegisteredTool, ScopeChallengeHandler, ServerContext, StandardSchemaWithJSON, ToolAnnotations } from "@modelcontextprotocol/server";
 //#region src/mcp/sdk/sdk.d.ts

package/dist/mcp/sdk/index.js

@@ -1,5 +1,5 @@
 import { o as delegationOf } from "../../impersonation-DcqaTBHx.js";
-import { c as extendServer, i as resolveToken, l as withExtra, n as flushEvents, s as createServer } from "../../adapter-B-tL8hqg.js";
+import { c as extendServer, i as resolveToken, l as withExtra, n as flushEvents, s as createServer } from "../../adapter-iKgjHVPx.js";
 import { r as guard } from "../../respond-BUgsXNgk.js";
 import { a as withCors, i as metadataPreflight, n as endpointPreflight, r as isMetadataRequest, t as discovery } from "../../http-DdYadv-o.js";
 import { OAuthError, bearerAuthChallengeResponse, verifyBearerToken } from "@modelcontextprotocol/server";

package/dist/next/index.d.ts

@@ -1,7 +1,7 @@
 import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { r as AuthState } from "../resolve-ChTYeTEl.js";
 import { B as DbStats, K as ReadSet, it as QuerySpec, t as BetterSupabase, u as CacheAdapter } from "../define-CJJkkr1-.js";
-import { A as supportSessions, C as ActiveSupport, D as SupportPolicy, E as SupportOptions, O as SupportSessions, i as ServerContext, k as SupportStartRequest, n as ContextOptions, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { A as supportSessions, C as ActiveSupport, D as SupportPolicy, E as SupportOptions, O as SupportSessions, i as ServerContext, k as SupportStartRequest, n as ContextOptions, o as ServerOptions, t as BetterServer } from "../server-Bh0EVSwU.js";
 import { n as AmrEntry, s as Impersonator, t as Aal } from "../mfa-Daak8ukG.js";
 import { t as tenantOf } from "../tenant-BxNFk9bx.js";
 import { n as toSession, t as AuthSession } from "../view-CF7ihnkg.js";

package/dist/next/index.js

@@ -9,10 +9,10 @@ import { a as problemResponse } from "../problem-BreOl8b8.js";
 import { i as claimsOf } from "../claims-PqzCxaTD.js";
 import { t as supportOf } from "../support-view-g4YLBeqX.js";
 import { t as tenantOf } from "../tenant-I1TEZ_BX.js";
-import { C as serverCore, c as extendServer, l as withExtra, n as flushEvents, p as supportCookieMaxAge, r as handle, s as createServer, t as bearerRequest, v as isPrefetch } from "../adapter-B-tL8hqg.js";
+import { C as serverCore, c as extendServer, l as withExtra, n as flushEvents, p as supportCookieMaxAge, r as handle, s as createServer, t as bearerRequest, v as isPrefetch } from "../adapter-iKgjHVPx.js";
 import { a as checkAal, n as toSession } from "../view-BeFcRV6G.js";
 import { o as settle, r as guard, t as defaultExpose } from "../respond-BUgsXNgk.js";
-import { t as supportSessions } from "../support-DWwzVf-O.js";
+import { t as supportSessions } from "../support-ig_K4PvS.js";
 import { r as tagFor, t as cacheTagsOf } from "../tags-B99_U9Pp.js";
 import { n as formDataObject } from "../kit-Fm-Fv7q5.js";
 import { cache } from "react";

package/dist/orpc/index.d.ts

@@ -3,7 +3,7 @@ import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { r as AuthState } from "../resolve-ChTYeTEl.js";
 import { i as ProblemDetails } from "../problem-DD8LZFjc.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-Bh0EVSwU.js";
 import { i as MiddlewareOptions, r as GuardOptions } from "../respond-DprrgyXX.js";
 import { s as BlockRequireOptions } from "../kit-CkNzZUqv.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";

package/dist/orpc/index.js

@@ -2,7 +2,7 @@ import { r as dbErrorOf } from "../errors-B11Duf73.js";
 import { o as toProblem } from "../problem-BreOl8b8.js";
 import { i as claimsOf } from "../claims-PqzCxaTD.js";
 import { t as tenantOf } from "../tenant-I1TEZ_BX.js";
-import { c as extendServer, n as flushEvents, s as createServer, y as refreshFor } from "../adapter-B-tL8hqg.js";
+import { c as extendServer, n as flushEvents, s as createServer, y as refreshFor } from "../adapter-iKgjHVPx.js";
 import { n as toSession } from "../view-BeFcRV6G.js";
 import { o as settle, r as guard, t as defaultExpose } from "../respond-BUgsXNgk.js";
 import { t as authorizeCaller } from "../kit-Fm-Fv7q5.js";

package/dist/otel/index.js

@@ -1,7 +1,7 @@
 import { r as definePlugin } from "../plugin-tfXW1-qO.js";
 import { t as SPEC_PINS } from "../spec-pins--j6mTok4.js";
 import { r as blockEventAttributes } from "../block-events-CrT8r7Fe.js";
-import "../version--AolB5ej.js";
+import "../version-C6OfRAIn.js";
 import { SpanKind, SpanStatusCode, context, metrics, propagation, trace } from "@opentelemetry/api";
 //#region src/otel/index.ts
 const INSTRUMENTATION_NAME = "better-supabase";
@@ -40,9 +40,9 @@ function systemOf(executor) {
 * ```
 */
 function otel(options = {}) {
-	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.7.0");
+	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.7.1");
 	let histogram;
-	if (options.metrics !== false) histogram = (options.meter ?? metrics.getMeter("better-supabase", "0.7.0")).createHistogram("db.client.operation.duration", {
+	if (options.metrics !== false) histogram = (options.meter ?? metrics.getMeter("better-supabase", "0.7.1")).createHistogram("db.client.operation.duration", {
 		unit: "s",
 		description: "Duration of database client operations.",
 		advice: { explicitBucketBoundaries: [
@@ -181,7 +181,7 @@ function otel(options = {}) {
 * Returns a function that stops listening.
 */
 function traceAuth(betterSupabase, options = {}) {
-	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.7.0");
+	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.7.1");
 	const offAuth = betterSupabase.events.on("auth", (event) => {
 		const span = tracer.startSpan("auth.resolve", {
 			kind: SpanKind.INTERNAL,
@@ -219,7 +219,7 @@ function traceAuth(betterSupabase, options = {}) {
 * set an error status. Returns a function that stops listening.
 */
 function traceBlockEvents(betterSupabase, options = {}) {
-	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.7.0");
+	const tracer = options.tracer ?? trace.getTracer("better-supabase", "0.7.1");
 	return betterSupabase.events.on("block", (event) => {
 		const attributes = {
 			...options.attributes,

package/dist/react-router/index.d.ts

@@ -1,9 +1,9 @@
 import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { t as BetterServer } from "../server-Bh0EVSwU.js";
 import { a as AuthorizedContext, c as Unwrapped, i as AuthorizeOptions, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-CkNzZUqv.js";
 import { t as RefusalRedirects } from "../refusal-DhSU2Vvr.js";
-import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-KIPvRQJU.js";
+import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-BmzgK32X.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { StandardSchemaV1 } from "@standard-schema/spec";

package/dist/react-router/index.js

@@ -1,9 +1,9 @@
 import { a as problemResponse } from "../problem-BreOl8b8.js";
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-iKgjHVPx.js";
 import { o as settle, t as defaultExpose } from "../respond-BUgsXNgk.js";
 import { i as requireCaller, o as runAction } from "../kit-Fm-Fv7q5.js";
 import { n as bufferInPlace, t as around } from "../shared-CBxosKK3.js";
-import { i as localsOf, n as actionInput, r as frameworkEntry } from "../framework-BDCpJI7o.js";
+import { i as localsOf, n as actionInput, r as frameworkEntry } from "../framework-a7aRCIqv.js";
 import { r as refusalResponse } from "../refusal-CeJWxmkH.js";
 //#region src/bridges/react-router.ts
 /**

package/dist/server/index.d.ts

@@ -5,11 +5,11 @@ import { _ as writeSession, a as CookieWrite, c as StoredSession, h as sessionCo
 import { a as ResolveAuthOptions, c as clientIp, i as InvalidReason, l as resolveAuth, n as AuthResolver, o as ResolvedState, r as AuthState, s as authContext, t as AuthResolution } from "../resolve-ChTYeTEl.js";
 import { c as fromProblem, d as toProblem, i as ProblemDetails, l as isProblem, n as PROBLEM_CONTENT_TYPE, o as ProblemOptions, r as PROBLEM_TYPE_BASE, s as ProblemResponseOptions, u as problemResponse } from "../problem-DD8LZFjc.js";
 import { B as DbStats, b as Db, t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { A as supportSessions, B as SupportSession, C as ActiveSupport, D as SupportPolicy, E as SupportOptions, F as supportCookieValue, H as SupportStartInput, I as SqlSupportStoreOptions, L as SupportCallerClaims, M as SupportCookieOptions, N as clearSupportCookie, O as SupportSessions, P as supportCookie, R as SupportEndedBy, S as deleteAccount, T as SupportAuthorizeInput, U as sqlSupportStore, V as SupportSessionStore, W as supportClaims, _ as RequestIdOptions, a as ServerDbOptions, b as DeleteAccountOptions, c as createServer, d as LastSignIn, f as SuspendAccountOptions, g as suspendAccount, h as lastSignIns, i as ServerContext, j as SUPPORT_COOKIE, k as SupportStartRequest, l as extendServer, m as endSessions, n as ContextOptions, o as ServerOptions, p as SuspendAccountResult, r as ForContextOptions, s as TENANT_HEADER, t as BetterServer, u as EndSessionsResult, v as PRIMARY_COOKIE, w as SupportApi, x as DeleteAccountResult, y as ReplicaState, z as SupportListFilter } from "../server-ZSJ9rCcV.js";
+import { A as supportSessions, B as SupportSession, C as ActiveSupport, D as SupportPolicy, E as SupportOptions, F as supportCookieValue, H as SupportStartInput, I as SqlSupportStoreOptions, L as SupportCallerClaims, M as SupportCookieOptions, N as clearSupportCookie, O as SupportSessions, P as supportCookie, R as SupportEndedBy, S as deleteAccount, T as SupportAuthorizeInput, U as sqlSupportStore, V as SupportSessionStore, W as supportClaims, _ as RequestIdOptions, a as ServerDbOptions, b as DeleteAccountOptions, c as createServer, d as LastSignIn, f as SuspendAccountOptions, g as suspendAccount, h as lastSignIns, i as ServerContext, j as SUPPORT_COOKIE, k as SupportStartRequest, l as extendServer, m as endSessions, n as ContextOptions, o as ServerOptions, p as SuspendAccountResult, r as ForContextOptions, s as TENANT_HEADER, t as BetterServer, u as EndSessionsResult, v as PRIMARY_COOKIE, w as SupportApi, x as DeleteAccountResult, y as ReplicaState, z as SupportListFilter } from "../server-Bh0EVSwU.js";
 import { a as checkAal, c as impersonatorOf, i as amrOf, n as AmrEntry, o as ImpersonationOptions, r as aalOf, s as Impersonator, t as Aal } from "../mfa-Daak8ukG.js";
 import { n as SessionActor, r as SessionDelegation, t as ActClaim } from "../actor-CQTlc1Hh.js";
 import { n as toSession, t as AuthSession } from "../view-CF7ihnkg.js";
-import { a as SessionEntryConfig, c as withGuard, i as withBetterSupabase, l as ServerCore, n as BetterSupabaseContributions, o as withSession, r as BetterSupabaseEntry, s as GuardEntryConfig, t as BetterSupabaseConfig, u as serverCore } from "../composite-CpHLEo-G.js";
+import { a as SessionEntryConfig, c as withGuard, i as withBetterSupabase, l as ServerCore, n as BetterSupabaseContributions, o as withSession, r as BetterSupabaseEntry, s as GuardEntryConfig, t as BetterSupabaseConfig, u as serverCore } from "../composite--yqry7uW.js";
 import { a as RespondOptions, c as isResult, d as RefreshPolicy, f as isPrefetch, h as shouldRefresh, i as MiddlewareOptions, l as respond, m as shouldCheckSession, n as AuthKind, o as Settled, p as refreshFor, r as GuardOptions, s as guard, u as settle } from "../respond-DprrgyXX.js";
 import { a as AuthorizedContext, i as AuthorizeOptions, l as hasRole, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions, u as rolesAt } from "../kit-CkNzZUqv.js";
 import { a as ResourceRouteOptions, i as ResourcePagination, n as ResourceInput, o as defineResource, r as ResourceList, t as ResourceHandler } from "../resource-IPS5xi9q.js";

package/dist/server/index.js

@@ -4,14 +4,14 @@ import { i as userContext, r as impersonatorOf } from "../impersonation-DcqaTBHx
 import { t as supportOf } from "../support-view-g4YLBeqX.js";
 import { n as toCsv, t as csvColumns } from "../csv-DCK-PT1n.js";
 import { n as postgresExecutor } from "../executor-De1Of3m3.js";
-import { C as serverCore, D as suspendAccount, E as lastSignIns, O as deleteAccount, T as endSessions, _ as withSession, a as unexpectedResponse, b as shouldCheckSession, c as extendServer, d as clearSupportCookie, f as supportCookie, i as resolveToken, m as supportCookieValue, n as flushEvents, o as TENANT_HEADER, r as handle, s as createServer, u as SUPPORT_COOKIE, v as isPrefetch, w as SERVER_EVENT_SOURCE, x as shouldRefresh, y as refreshFor } from "../adapter-B-tL8hqg.js";
+import { C as serverCore, D as suspendAccount, E as lastSignIns, O as deleteAccount, T as endSessions, _ as withSession, a as unexpectedResponse, b as shouldCheckSession, c as extendServer, d as clearSupportCookie, f as supportCookie, i as resolveToken, m as supportCookieValue, n as flushEvents, o as TENANT_HEADER, r as handle, s as createServer, u as SUPPORT_COOKIE, v as isPrefetch, w as SERVER_EVENT_SOURCE, x as shouldRefresh, y as refreshFor } from "../adapter-iKgjHVPx.js";
 import { n as PRIMARY_COOKIE } from "../replicas-CwrYp5Zj.js";
 import { _ as writeSession, a as refreshSession, c as AUTH_CACHE_HEADERS, h as sessionCookieName, i as resolveAuth, n as clientIp, o as clearSessionCookies, p as readSession, s as sessionStatus, t as authContext } from "../resolve-tJZY3FEa.js";
 import { a as checkAal, i as amrOf, n as toSession, r as aalOf } from "../view-BeFcRV6G.js";
 import { a as respond, i as isResult, o as settle, r as guard } from "../respond-BUgsXNgk.js";
-import { n as sqlSupportStore, r as supportClaims, t as supportSessions } from "../support-DWwzVf-O.js";
+import { n as sqlSupportStore, r as supportClaims, t as supportSessions } from "../support-ig_K4PvS.js";
 import { n as jwtClaimsOf, r as userClaimsOf, t as authModeOf } from "../claims-DDBQT6BK.js";
-import { n as withGuard, t as withBetterSupabase } from "../composite-C6I8ZyaF.js";
+import { n as withGuard, t as withBetterSupabase } from "../composite-DXVUibdi.js";
 import { t as defineResource } from "../resource-BsvzCMlX.js";
 import { i as withServerTiming, n as parseDbStats, r as withDbStats, t as DB_CALLS_HEADER } from "../timing-CyTQPubY.js";
 import { n as tagCache, r as tagFor, t as cacheTagsOf } from "../tags-B99_U9Pp.js";

package/dist/{server-ZSJ9rCcV.d.ts → server-Bh0EVSwU.d.ts}

@@ -293,11 +293,24 @@ interface EndSessionsResult {
 }
 interface SuspendAccountOptions {
   readonly suspended: boolean;
+  /** A Go duration for the ban, such as `"24h"`. Defaults to 100 years. */
   readonly duration?: string;
+  /**
+   * Also end the sessions when suspending. Defaults to `false`: the sessions
+   * stay, so Auth answers refresh and `/user` with `user_banned` and the app
+   * can show why. Without the `sessions` SQL module, an access token keeps
+   * working against the Data API until it expires; set this to end the
+   * sessions at once instead.
+   */
+  readonly endSessions?: boolean;
 }
 interface SuspendAccountResult {
   readonly userId: string;
   readonly suspended: boolean;
+  /**
+   * The sessions deleted: `0` on a suspension (unless `endSessions` is set),
+   * and the user's remaining sessions when the ban is lifted.
+   */
   readonly ended: number;
 }
 declare function endSessions(sql: SqlClient, userId: string): AsyncResult<EndSessionsResult>;
@@ -507,6 +520,11 @@ interface BetterServer<M extends AnyModels, F extends AnyFunctions, E, C = unkno
    */
   deleteAccount(userId: string, options?: DeleteAccountOptions): AsyncResult<DeleteAccountResult>;
   endSessions(userId: string): AsyncResult<EndSessionsResult>;
+  /**
+   * Bans the user in Auth and keeps their sessions, so Auth answers with
+   * `user_banned` (`endSessions: true` deletes them too). Lifting the ban
+   * ends the sessions first, so the user signs in again.
+   */
   suspendAccount(userId: string, options: SuspendAccountOptions): AsyncResult<SuspendAccountResult>;
   /**
    * Repositories running as a user, with RLS, over direct Postgres. With

package/dist/solid-start/index.d.ts

@@ -1,9 +1,9 @@
 import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { t as BetterServer } from "../server-Bh0EVSwU.js";
 import { a as AuthorizedContext, c as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-CkNzZUqv.js";
 import { t as RefusalRedirects } from "../refusal-DhSU2Vvr.js";
-import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-KIPvRQJU.js";
+import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-BmzgK32X.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/solid-start/index.d.ts
 /** The part of a SolidStart `FetchEvent` the integration reads and writes. */

package/dist/solid-start/index.js

@@ -1,7 +1,7 @@
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-iKgjHVPx.js";
 import { t as defaultExpose } from "../respond-BUgsXNgk.js";
 import { i as requireCaller, o as runAction } from "../kit-Fm-Fv7q5.js";
-import { i as localsOf, r as frameworkEntry } from "../framework-BDCpJI7o.js";
+import { i as localsOf, r as frameworkEntry } from "../framework-a7aRCIqv.js";
 import { r as refusalResponse } from "../refusal-CeJWxmkH.js";
 import { t as beforeRoute } from "../before-route-CnR0C0Jr.js";
 //#region src/solid-start/index.ts

package/dist/sql/index.js

@@ -9,7 +9,7 @@ import { t as FINAL_RUN_STATES$1 } from "../run-state-CgBKzYMW.js";
 import { t as AI_MESSAGE_PART_TYPES } from "../message-CaKlqdsX.js";
 import { A as jwtClaim, B as replaceColumnCheck, C as canIn, D as disabledHelpersNeedLaterTables, E as disabledHelpers, F as pageSize, G as splitTable$1, H as serviceGrant, I as quotedTable, J as userGrant, K as tenantIn, L as raise$1, M as membershipDisabledAt, N as membershipSuspended, O as ensureCheck, P as organizationMissing, R as recordTrigger, S as addForeignKey, T as columnsObject, U as serviceOnly$1, V as schemaPreamble, W as sha256Hex, _ as SCHEMA, a as MODULE_PERMISSION_SCOPES, b as activeMembership, c as modulePermission, d as roleNames, f as roleScopeIs, g as NOTHING, h as EQUIVALENT_TRIGGERS, i as MODULE_PERMISSIONS, j as memberAddedRecord, k as jsonSchemaChecks, l as modulePermissionKey, m as tenantScope, n as WORKFLOW_SDK_WORLD, o as accessModel, p as rolesOf, q as updatedAt, s as hasPlatformRoles, u as providerPlatformRoles, v as SERVICE_CALLER, w as columnRef, x as addExtraColumns, y as accessDefinesDisabledHelpers, z as renameSql } from "../workflow-sdk-world-D-prir6O.js";
 import { c as templateFunctions, i as fillTemplate, o as resolveProviderSql, s as scopeProblems, t as SCOPE_ID_TYPES } from "../access-sql-B0dF-SoF.js";
-import { t as VERSION } from "../version--AolB5ej.js";
+import { t as VERSION } from "../version-C6OfRAIn.js";
 //#region src/sql/api-schema.ts
 /** The roles PostgREST runs a request as. */
 const API_ROLES = /* @__PURE__ */ new Set([

package/dist/{support-DWwzVf-O.js → support-ig_K4PvS.js}

@@ -3,7 +3,7 @@ import { t as temporal } from "./temporal-required-BVvW7SYJ.js";
 import { a as ok, r as err, s as toDbError, t as AsyncResult } from "./result-DzUbqgdW.js";
 import { n as validate } from "./standard-BK0cqJ7y.js";
 import { t as fromPgError } from "./executor-De1Of3m3.js";
-import { d as clearSupportCookie, f as supportCookie, m as supportCookieValue } from "./adapter-B-tL8hqg.js";
+import { d as clearSupportCookie, f as supportCookie, m as supportCookieValue } from "./adapter-iKgjHVPx.js";
 import { r as sqlIdent } from "./template--jDkl3UP.js";
 import { i as emitBlockEvent } from "./block-events-CrT8r7Fe.js";
 //#region src/auth/support.ts

package/dist/sveltekit/index.d.ts

@@ -1,9 +1,9 @@
 import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { t as BetterServer } from "../server-Bh0EVSwU.js";
 import { a as AuthorizedContext, c as Unwrapped, i as AuthorizeOptions, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-CkNzZUqv.js";
 import { t as RefusalRedirects } from "../refusal-DhSU2Vvr.js";
-import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-KIPvRQJU.js";
+import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-BmzgK32X.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { i as tagFor } from "../tags-Cx-LnIQP.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";

package/dist/sveltekit/index.js

@@ -1,12 +1,12 @@
 import { t as DbException } from "../db-exception-CnWcYPxL.js";
 import { r as dbErrorOf } from "../errors-B11Duf73.js";
 import { o as toProblem } from "../problem-BreOl8b8.js";
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-iKgjHVPx.js";
 import { t as defaultExpose } from "../respond-BUgsXNgk.js";
 import { r as tagFor } from "../tags-B99_U9Pp.js";
 import { i as requireCaller, o as runAction } from "../kit-Fm-Fv7q5.js";
 import { n as bufferInPlace, t as around } from "../shared-CBxosKK3.js";
-import { a as platformWaitUntil, i as localsOf, n as actionInput, r as frameworkEntry } from "../framework-BDCpJI7o.js";
+import { a as platformWaitUntil, i as localsOf, n as actionInput, r as frameworkEntry } from "../framework-a7aRCIqv.js";
 import { i as refusalTarget } from "../refusal-CeJWxmkH.js";
 //#region src/bridges/sveltekit.ts
 /**

package/dist/tanstack-start/index.d.ts

@@ -1,9 +1,9 @@
 import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
 import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { t as BetterServer } from "../server-ZSJ9rCcV.js";
+import { t as BetterServer } from "../server-Bh0EVSwU.js";
 import { a as AuthorizedContext, c as Unwrapped, i as AuthorizeOptions, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-CkNzZUqv.js";
 import { t as RefusalRedirects } from "../refusal-DhSU2Vvr.js";
-import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-KIPvRQJU.js";
+import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-BmzgK32X.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { StandardSchemaV1 } from "@standard-schema/spec";

package/dist/tanstack-start/index.js

@@ -1,8 +1,8 @@
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-iKgjHVPx.js";
 import { t as defaultExpose } from "../respond-BUgsXNgk.js";
 import { i as requireCaller, o as runAction } from "../kit-Fm-Fv7q5.js";
 import { n as bufferInPlace, t as around } from "../shared-CBxosKK3.js";
-import { i as localsOf, r as frameworkEntry } from "../framework-BDCpJI7o.js";
+import { i as localsOf, r as frameworkEntry } from "../framework-a7aRCIqv.js";
 import { r as refusalResponse } from "../refusal-CeJWxmkH.js";
 //#region src/bridges/tanstack-start.ts
 /** The `response` of a request middleware's `next()` result; server function results have none. */

package/dist/testing/index.d.ts

@@ -10,7 +10,7 @@ import { o as StreamStore } from "../store-CGjgWu5n.js";
 import { B as DbStats, b as Db, t as BetterSupabase, u as CacheAdapter } from "../define-CJJkkr1-.js";
 import { r as EventSink, t as CloudEvent } from "../cloud-event-C1JCc1bH.js";
 import { t as BetterPostgres } from "../pool-CAu2nLrL.js";
-import { V as SupportSessionStore, i as ServerContext, o as ServerOptions } from "../server-ZSJ9rCcV.js";
+import { V as SupportSessionStore, i as ServerContext, o as ServerOptions } from "../server-Bh0EVSwU.js";
 import { s as Impersonator } from "../mfa-Daak8ukG.js";
 import { n as SessionActor, r as SessionDelegation } from "../actor-CQTlc1Hh.js";
 import { r as GuardOptions } from "../respond-DprrgyXX.js";

package/dist/{version--AolB5ej.js → version-C6OfRAIn.js}

@@ -1,4 +1,4 @@
 //#region src/core/version.ts
-const VERSION = "0.7.0";
+const VERSION = "0.7.1";
 //#endregion
 export { VERSION as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-supabase",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Strongly typed Supabase: generated schema, typed repositories, plugins, auth glue, framework integrations and the better-supabase CLI.",
   "keywords": [
     "cli",

package/skills/better-supabase-auth/SKILL.md

@@ -115,10 +115,14 @@ A proxy or middleware with its own Supabase client calls
 Done when the irreversible action returns `SESSION_REVOKED` for a signed-out
 session in a test.
 
-To lock a user out, call `bs.suspendAccount(userId, { suspended: true })`
-(it bans the user in Auth and ends every session and refresh token), or
-`bs.endSessions(userId)` to sign them out everywhere without a ban. A ban
-alone leaves the refresh tokens, which work again once the ban is lifted. To
+To lock a user out, call `bs.suspendAccount(userId, { suspended: true })`.
+It bans the user in Auth and keeps the sessions, so Auth answers with
+`user_banned`, `sessionStatus` returns `"banned"` and the `session_active()`
+policy refuses the user's tokens. `{ suspended: false }` ends every session
+and refresh token, then lifts the ban. Without the `sessions` SQL module, pass
+`endSessions: true` to delete the sessions on suspension too (the app then
+sees `"ended"`). `bs.endSessions(userId)` signs a user out everywhere without
+a ban. To
 switch a member off in one organization only, use the organizations block's
 `suspendMember`.
 

package/dist/cli/gen-DSrahEdX.js

@@ -1,2 +0,0 @@
-import { n as genCommand } from "./gen-AIf4MREI.js";
-export { genCommand };