better-supabase 0.7.0 → 0.8.0

package/dist/{block-transport-DvaoPuZ9.d.ts → block-transport-inD4fFq-.d.ts}

@@ -1,4 +1,5 @@
-import { t as SqlClient } from "./executor-DbvExCFC.js";
+import { r as Executor } from "./executor-Drzu3dBK.js";
+import { t as SqlClient } from "./executor-ngjKL_Pe.js";
 //#region src/core/block-transport.d.ts
 /**
  * Calls a block function as the current user and resolves with its result.
@@ -44,5 +45,26 @@ interface RpcTransportOptions {
  * has to be exposed.
  */
 declare function rpcTransport(client: RpcClient, options?: RpcTransportOptions): BlockTransport;
+/** Options for `dbTransport`. */
+interface DbTransportOptions {
+  /**
+   * The schema every call goes to instead of the module schema, such as the
+   * API schema from `sql.modules.<module>.api`. Over PostgREST it has to be
+   * exposed; over Postgres any schema the caller may use works.
+   */
+  readonly schema?: string;
+}
+/** The part of a `Db` that `dbTransport` uses. */
+interface DbTransportSource {
+  readonly $executor: Executor;
+}
+/**
+ * Calls the functions through a `Db`'s executor, so a block runs wherever
+ * the `Db` does: over PostgREST for `ctx.db` in a normal request, and over
+ * direct Postgres as the target in a support session or for an API key.
+ * Rejects with the raw database error, like the other transports, so the
+ * block's error mappers see the same codes and hints.
+ */
+declare function dbTransport(db: DbTransportSource, options?: DbTransportOptions): BlockTransport;
 //#endregion
-export { sqlTransport as i, RpcClient as n, rpcTransport as r, BlockTransport as t };
+export { dbTransport as a, RpcClient as i, DbTransportOptions as n, rpcTransport as o, DbTransportSource as r, sqlTransport as s, BlockTransport as t };

package/dist/blocks/agents/index.d.ts

@@ -1,3 +1,3 @@
-import { i as sqlTransport, r as rpcTransport, t as BlockTransport } from "../../block-transport-DvaoPuZ9.js";
-import { a as AgentSkill, c as AgentsOptions, i as AgentKnowledgeScope, l as NewAgent, n as AgentFields, o as AgentVisibility, r as AgentFilter, s as Agents, t as Agent, u as createAgents } from "../../agents-CVHGd7It.js";
-export { type Agent, type AgentFields, type AgentFilter, type AgentKnowledgeScope, type AgentSkill, type AgentVisibility, type Agents, type AgentsOptions, type BlockTransport, type NewAgent, createAgents, rpcTransport, sqlTransport };
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-inD4fFq-.js";
+import { a as AgentSkill, c as AgentsOptions, i as AgentKnowledgeScope, l as NewAgent, n as AgentFields, o as AgentVisibility, r as AgentFilter, s as Agents, t as Agent, u as createAgents } from "../../agents-BY_LQXtQ.js";
+export { type Agent, type AgentFields, type AgentFilter, type AgentKnowledgeScope, type AgentSkill, type AgentVisibility, type Agents, type AgentsOptions, type BlockTransport, type NewAgent, createAgents, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/agents/index.js

@@ -1,6 +1,7 @@
-import { t as AsyncResult } from "../../result-DzUbqgdW.js";
-import { n as rpcTransport, r as sqlTransport } from "../../block-transport-BLr-ZgLc.js";
-import { D as stringsOf, O as textOf, d as isRecord, f as notFoundError, h as optionalText, i as blockCall, k as toInstant, m as optionalInstant, n as applyTemporal, x as recordsOf, y as recordOf } from "../../block-helpers-DWHxHsEQ.js";
+import { t as AsyncResult } from "../../result-DEqHCMKP.js";
+import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-bAKh-dGc.js";
+import { A as stringsOf, N as toInstant, S as recordOf, _ as optionalInstant, i as blockCall, j as textOf, n as applyTemporal, p as notFoundError, v as optionalText, w as recordsOf } from "../../block-helpers-Cy3pB96I.js";
 //#region src/blocks/agents/agents.ts
 const VISIBILITIES = /* @__PURE__ */ new Set([
 	"private",
@@ -120,4 +121,4 @@ function createAgents(options) {
 	};
 }
 //#endregion
-export { createAgents, rpcTransport, sqlTransport };
+export { createAgents, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/ai-cache/index.d.ts

@@ -1,3 +1,3 @@
-import { i as sqlTransport, r as rpcTransport, t as BlockTransport } from "../../block-transport-DvaoPuZ9.js";
-import { a as AiCacheSetOptions, i as AiCacheOptions, n as AiCacheEntry, o as cacheKey, r as AiCacheKind, s as createAiCache, t as AiCache } from "../../ai-cache-DaDu_G5L.js";
-export { type AiCache, type AiCacheEntry, type AiCacheKind, type AiCacheOptions, type AiCacheSetOptions, type BlockTransport, cacheKey, createAiCache, rpcTransport, sqlTransport };
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-inD4fFq-.js";
+import { a as AiCacheSetOptions, i as AiCacheOptions, n as AiCacheEntry, o as cacheKey, r as AiCacheKind, s as createAiCache, t as AiCache } from "../../ai-cache-DrUMMgp6.js";
+export { type AiCache, type AiCacheEntry, type AiCacheKind, type AiCacheOptions, type AiCacheSetOptions, type BlockTransport, cacheKey, createAiCache, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/ai-cache/index.js

@@ -1,3 +1,3 @@
-import { n as rpcTransport, r as sqlTransport } from "../../block-transport-BLr-ZgLc.js";
-import { n as createAiCache, t as cacheKey } from "../../ai-cache-CBWs1W0k.js";
-export { cacheKey, createAiCache, rpcTransport, sqlTransport };
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-bAKh-dGc.js";
+import { n as createAiCache, t as cacheKey } from "../../ai-cache-Dfgk8nBT.js";
+export { cacheKey, createAiCache, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/ai-chat/index.d.ts

@@ -1,7 +1,12 @@
-import { i as sqlTransport, r as rpcTransport, t as BlockTransport } from "../../block-transport-DvaoPuZ9.js";
-import { _ as isAiMessage, a as AiMessage, c as AiMessageRole, d as AiStepPart, f as AiTextPart, g as aiMessageSchema, h as AiToolResultPart, i as AiFilePart, l as AiReasoningPart, m as AiToolCallPart, n as AI_MESSAGE_SCHEMA_ID, o as AiMessagePart, p as AiToolApprovalPart, r as AiDataPart, s as AiMessagePartType, t as AI_MESSAGE_PART_TYPES, u as AiSourcePart } from "../../message-CfDoR0Y6.js";
-import { $ as AiRunStep, A as AiStoredMessageStatus, B as AiSandbox, C as AiProject, D as AiSaveResult, E as AiRunStatus, F as AiUserMessageTrigger, G as AiHarnessSession, H as AiSandboxStopper, I as SharedAiChat, J as AiHarnessStatus, K as AiHarnessSessionPatch, L as aiChatListTopic, M as AiToolApproval, N as AiToolApprovalRequest, O as AiShareLink, P as AiToolPolicy, Q as AiRunState, R as aiChatTopic, S as AiPendingInputRequest, T as AiRunRelease, U as AiSandboxes, V as AiSandboxStatus, W as NewAiSandbox, X as AiRun, Y as AiPendingApproval, Z as AiRunQuery, _ as AiModerationAction, a as AiChatInput, b as AiModerationStage, c as AiChatPatch, d as AiChatShare, et as AiRunStepInput, f as AiChatVisibility, g as AiModelInput, h as AiModel, i as AiChat, j as AiStreamClaim, k as AiStoredMessage, l as AiChatQuery, m as AiMessageSibling, n as AiApprovalDecision, nt as AiRuns, o as AiChatOptions, p as AiFeedback, q as AiHarnessSessions, r as AiAssistantMessageOptions, rt as createHarnessSessions, s as AiChatPage, t as AiAppendResult, tt as AiRunStepStatus, u as AiChatRecord, v as AiModerationEvent, w as AiProjectInput, x as AiPendingInput, y as AiModerationInput, z as createAiChat } from "../../ai-chat-7amvXjmQ.js";
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-inD4fFq-.js";
+import { a as AiMessagePart, c as AiReasoningPart, d as AiTextPart, f as AiToolApprovalPart, g as isAiMessage, h as aiMessageSchema, i as AiMessage, l as AiSourcePart, m as AiToolResultPart, n as AiDataPart, o as AiMessagePartType, p as AiToolCallPart, r as AiFilePart, s as AiMessageRole, t as AI_MESSAGE_SCHEMA_ID, u as AiStepPart } from "../../message-B0fNJgq8.js";
+import { $ as AiRunStep, A as AiStoredMessageStatus, B as AiSandbox, C as AiProject, D as AiSaveResult, E as AiRunStatus, F as AiUserMessageTrigger, G as AiHarnessSession, H as AiSandboxStopper, I as SharedAiChat, J as AiHarnessStatus, K as AiHarnessSessionPatch, L as aiChatListTopic, M as AiToolApproval, N as AiToolApprovalRequest, O as AiShareLink, P as AiToolPolicy, Q as AiRunState, R as aiChatTopic, S as AiPendingInputRequest, T as AiRunRelease, U as AiSandboxes, V as AiSandboxStatus, W as NewAiSandbox, X as AiRun, Y as AiPendingApproval, Z as AiRunQuery, _ as AiModerationAction, a as AiChatInput, b as AiModerationStage, c as AiChatPatch, d as AiChatShare, et as AiRunStepInput, f as AiChatVisibility, g as AiModelInput, h as AiModel, i as AiChat, j as AiStreamClaim, k as AiStoredMessage, l as AiChatQuery, m as AiMessageSibling, n as AiApprovalDecision, nt as AiRuns, o as AiChatOptions, p as AiFeedback, q as AiHarnessSessions, r as AiAssistantMessageOptions, rt as createHarnessSessions, s as AiChatPage, t as AiAppendResult, tt as AiRunStepStatus, u as AiChatRecord, v as AiModerationEvent, w as AiProjectInput, x as AiPendingInput, y as AiModerationInput, z as createAiChat } from "../../ai-chat-DXkMy74O.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
+//#region src/core/contracts/ai-message.d.ts
+/** The `type` of each part in the canonical AI message (version 1); the SQL module and the message code both read it. */
+type AiMessagePartTypeName = "text" | "reasoning" | "file" | "tool-call" | "tool-result" | "tool-approval" | "source" | "data" | "step";
+export declare const AI_MESSAGE_PART_TYPES: readonly AiMessagePartTypeName[];
+//#endregion
 //#region src/blocks/ai-chat/history.d.ts
 /** What `validateMessage` returns: the message, or the schema's issues. */
 type AiMessageCheck = {
@@ -28,4 +33,4 @@ export declare const INTERRUPTED_TOOL_OUTPUT = "The tool call was interrupted.";
  */
 export declare function repairDanglingToolCalls(messages: readonly AiMessage[]): AiMessage[];
 //#endregion
-export { AI_MESSAGE_PART_TYPES, AI_MESSAGE_SCHEMA_ID, type AiAppendResult, type AiApprovalDecision, type AiAssistantMessageOptions, type AiChat, type AiChatInput, type AiChatOptions, type AiChatPage, type AiChatPatch, type AiChatQuery, type AiChatRecord, type AiChatShare, type AiChatVisibility, type AiDataPart, type AiFeedback, type AiFilePart, type AiHarnessSession, type AiHarnessSessionPatch, type AiHarnessSessions, type AiHarnessStatus, type AiMessage, type AiMessageCheck, type AiMessagePart, type AiMessagePartType, type AiMessageRole, type AiMessageSibling, type AiModel, type AiModelInput, type AiModerationAction, type AiModerationEvent, type AiModerationInput, type AiModerationStage, type AiPendingApproval, type AiPendingInput, type AiPendingInputRequest, type AiProject, type AiProjectInput, type AiReasoningPart, type AiRun, type AiRunQuery, type AiRunRelease, type AiRunState, type AiRunStatus, type AiRunStep, type AiRunStepInput, type AiRunStepStatus, type AiRuns, type AiSandbox, type AiSandboxStatus, type AiSandboxStopper, type AiSandboxes, type AiSaveResult, type AiShareLink, type AiSourcePart, type AiStepPart, type AiStoredMessage, type AiStoredMessageStatus, type AiStreamClaim, type AiTextPart, type AiToolApproval, type AiToolApprovalPart, type AiToolApprovalRequest, type AiToolCallPart, type AiToolPolicy, type AiToolResultPart, type AiUserMessageTrigger, type BlockTransport, type NewAiSandbox, type SharedAiChat, aiChatListTopic, aiChatTopic, aiMessageSchema, createAiChat, createHarnessSessions, isAiMessage, rpcTransport, sqlTransport };
+export { AI_MESSAGE_SCHEMA_ID, type AiAppendResult, type AiApprovalDecision, type AiAssistantMessageOptions, type AiChat, type AiChatInput, type AiChatOptions, type AiChatPage, type AiChatPatch, type AiChatQuery, type AiChatRecord, type AiChatShare, type AiChatVisibility, type AiDataPart, type AiFeedback, type AiFilePart, type AiHarnessSession, type AiHarnessSessionPatch, type AiHarnessSessions, type AiHarnessStatus, type AiMessage, type AiMessageCheck, type AiMessagePart, type AiMessagePartType, type AiMessageRole, type AiMessageSibling, type AiModel, type AiModelInput, type AiModerationAction, type AiModerationEvent, type AiModerationInput, type AiModerationStage, type AiPendingApproval, type AiPendingInput, type AiPendingInputRequest, type AiProject, type AiProjectInput, type AiReasoningPart, type AiRun, type AiRunQuery, type AiRunRelease, type AiRunState, type AiRunStatus, type AiRunStep, type AiRunStepInput, type AiRunStepStatus, type AiRuns, type AiSandbox, type AiSandboxStatus, type AiSandboxStopper, type AiSandboxes, type AiSaveResult, type AiShareLink, type AiSourcePart, type AiStepPart, type AiStoredMessage, type AiStoredMessageStatus, type AiStreamClaim, type AiTextPart, type AiToolApproval, type AiToolApprovalPart, type AiToolApprovalRequest, type AiToolCallPart, type AiToolPolicy, type AiToolResultPart, type AiUserMessageTrigger, type BlockTransport, type NewAiSandbox, type SharedAiChat, aiChatListTopic, aiChatTopic, aiMessageSchema, createAiChat, createHarnessSessions, dbTransport, isAiMessage, rpcTransport, sqlTransport };

package/dist/blocks/ai-chat/index.js

@@ -1,5 +1,5 @@
-import { n as rpcTransport, r as sqlTransport } from "../../block-transport-BLr-ZgLc.js";
-import { i as isAiMessage, n as AI_MESSAGE_SCHEMA_ID, r as aiMessageSchema, t as AI_MESSAGE_PART_TYPES } from "../../message-CaKlqdsX.js";
-import { i as createHarnessSessions, n as aiChatTopic, r as createAiChat, t as aiChatListTopic } from "../../ai-chat-B24UI962.js";
-import { i as validateMessage, n as pathToHistory, r as repairDanglingToolCalls, t as INTERRUPTED_TOOL_OUTPUT } from "../../history-BZih6SFP.js";
-export { AI_MESSAGE_PART_TYPES, AI_MESSAGE_SCHEMA_ID, INTERRUPTED_TOOL_OUTPUT, aiChatListTopic, aiChatTopic, aiMessageSchema, createAiChat, createHarnessSessions, isAiMessage, pathToHistory, repairDanglingToolCalls, rpcTransport, sqlTransport, validateMessage };
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-bAKh-dGc.js";
+import { t as AI_MESSAGE_PART_TYPES } from "../../ai-message-DfaP8sis.js";
+import { a as AI_MESSAGE_SCHEMA_ID, i as validateMessage, n as pathToHistory, o as aiMessageSchema, r as repairDanglingToolCalls, s as isAiMessage, t as INTERRUPTED_TOOL_OUTPUT } from "../../history-GH1HJWQV.js";
+import { i as createHarnessSessions, n as aiChatTopic, r as createAiChat, t as aiChatListTopic } from "../../ai-chat-CVLRWbtS.js";
+export { AI_MESSAGE_PART_TYPES, AI_MESSAGE_SCHEMA_ID, INTERRUPTED_TOOL_OUTPUT, aiChatListTopic, aiChatTopic, aiMessageSchema, createAiChat, createHarnessSessions, dbTransport, isAiMessage, pathToHistory, repairDanglingToolCalls, rpcTransport, sqlTransport, validateMessage };

package/dist/blocks/ai-chat/react/index.d.ts

@@ -1,6 +1,6 @@
-import { b as DbError } from "../../../result-D7y2fT87.js";
-import { O as AiShareLink, a as AiChatInput, c as AiChatPatch, d as AiChatShare, h as AiModel, k as AiStoredMessage, l as AiChatQuery, u as AiChatRecord } from "../../../ai-chat-7amvXjmQ.js";
-import { x as SubscriptionStatus } from "../../../index-DunNRdnT.js";
+import { b as DbError } from "../../../result-BchM1XZn.js";
+import { O as AiShareLink, a as AiChatInput, c as AiChatPatch, d as AiChatShare, h as AiModel, k as AiStoredMessage, l as AiChatQuery, u as AiChatRecord } from "../../../ai-chat-DXkMy74O.js";
+import { x as SubscriptionStatus } from "../../../index-BCHR4Ucl.js";
 //#region src/blocks/ai-chat/react/index.d.ts
 interface ClientOptions {
   /** The schema the calls go to: the module schema (default `better_supabase`), or the API schema from `sql.modules["ai-chat"].api`. */

package/dist/blocks/ai-chat/react/index.js

@@ -1,10 +1,10 @@
 "use client";
-import { a as ok } from "../../../result-DzUbqgdW.js";
-import { i as useAuth, l as useSupabase } from "../../../hooks-1BTCJsiw.js";
-import { n as rpcTransport } from "../../../block-transport-BLr-ZgLc.js";
-import { g as pageOf } from "../../../block-helpers-DWHxHsEQ.js";
+import { a as ok } from "../../../result-DEqHCMKP.js";
+import { i as useAuth, l as useSupabase } from "../../../hooks-Bhza9Hnr.js";
+import { r as rpcTransport } from "../../../block-transport-bAKh-dGc.js";
+import { y as pageOf } from "../../../block-helpers-Cy3pB96I.js";
 import { t as watchTopic } from "../../../react-topic-seAWjL3_.js";
-import { n as aiChatTopic, r as createAiChat, t as aiChatListTopic } from "../../../ai-chat-B24UI962.js";
+import { n as aiChatTopic, r as createAiChat, t as aiChatListTopic } from "../../../ai-chat-CVLRWbtS.js";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 //#region src/blocks/ai-chat/react/index.ts
 function useAiChatClient(schema) {

package/dist/blocks/ai-files/index.d.ts

@@ -1,5 +1,5 @@
-import { i as sqlTransport, r as rpcTransport, t as BlockTransport } from "../../block-transport-DvaoPuZ9.js";
-import { _ as NewAiFile, a as AiDocumentWithContent, c as AiFileSource, d as AiFileUpload, f as AiFiles, g as NewAiDocument, h as AiSuggestion, i as AiDocumentVersion, l as AiFileStatus, m as AiProviderFile, n as AiDocumentEdit, o as AiFile, p as AiFilesOptions, r as AiDocumentKind, s as AiFileBucket, t as AiDocument, u as AiFileStorage, v as StoredAiFile } from "../../types-C05bxW-W.js";
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-inD4fFq-.js";
+import { _ as NewAiFile, a as AiDocumentWithContent, c as AiFileSource, d as AiFileUpload, f as AiFiles, g as NewAiDocument, h as AiSuggestion, i as AiDocumentVersion, l as AiFileStatus, m as AiProviderFile, n as AiDocumentEdit, o as AiFile, p as AiFilesOptions, r as AiDocumentKind, s as AiFileBucket, t as AiDocument, u as AiFileStorage, v as StoredAiFile } from "../../types-Bb_4-vdW.js";
 //#region src/blocks/ai-files/ai-files.d.ts
 /** The URL a message stores for a file: `supabase-storage://{bucket}/{path}`. */
 export declare function aiFileUrl(file: Pick<AiFile, "bucket" | "path">): string;
@@ -11,4 +11,4 @@ export declare function parseAiFileUrl(url: string | URL): {
 /** Files and documents for AI chats, as the caller and as the service role. */
 export declare function createAiFiles(options: AiFilesOptions): AiFiles;
 //#endregion
-export { type AiDocument, type AiDocumentEdit, type AiDocumentKind, type AiDocumentVersion, type AiDocumentWithContent, type AiFile, type AiFileBucket, type AiFileSource, type AiFileStatus, type AiFileStorage, type AiFileUpload, type AiFiles, type AiFilesOptions, type AiProviderFile, type AiSuggestion, type BlockTransport, type NewAiDocument, type NewAiFile, type StoredAiFile, rpcTransport, sqlTransport };
+export { type AiDocument, type AiDocumentEdit, type AiDocumentKind, type AiDocumentVersion, type AiDocumentWithContent, type AiFile, type AiFileBucket, type AiFileSource, type AiFileStatus, type AiFileStorage, type AiFileUpload, type AiFiles, type AiFilesOptions, type AiProviderFile, type AiSuggestion, type BlockTransport, type NewAiDocument, type NewAiFile, type StoredAiFile, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/ai-files/index.js

@@ -1,3 +1,3 @@
-import { n as rpcTransport, r as sqlTransport } from "../../block-transport-BLr-ZgLc.js";
-import { n as createAiFiles, r as parseAiFileUrl, t as aiFileUrl } from "../../ai-files-CSPNswUY.js";
-export { aiFileUrl, createAiFiles, parseAiFileUrl, rpcTransport, sqlTransport };
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-bAKh-dGc.js";
+import { n as createAiFiles, r as parseAiFileUrl, t as aiFileUrl } from "../../ai-files-CioLu5du.js";
+export { aiFileUrl, createAiFiles, dbTransport, parseAiFileUrl, rpcTransport, sqlTransport };

package/dist/blocks/ai-providers/index.d.ts

@@ -1,7 +1,7 @@
-import { i as sqlTransport, r as rpcTransport, t as BlockTransport } from "../../block-transport-DvaoPuZ9.js";
-import { a as AiBatchItemStatus, c as AiProviderKey, d as AiProvidersOptions, f as NewAiBatch, i as AiBatchItemInput, l as AiProviderKeyInput, n as AiBatchCounts, o as AiBatchPatch, p as ResolvedProviderKey, r as AiBatchItem, s as AiBatchStatus, t as AiBatch, u as AiProviders } from "../../types-6rocye-y.js";
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-inD4fFq-.js";
+import { a as AiBatchItemStatus, c as AiProviderKey, d as AiProvidersOptions, f as NewAiBatch, i as AiBatchItemInput, l as AiProviderKeyInput, n as AiBatchCounts, o as AiBatchPatch, p as ResolvedProviderKey, r as AiBatchItem, s as AiBatchStatus, t as AiBatch, u as AiProviders } from "../../types-CbOUc5IH.js";
 //#region src/blocks/ai-providers/ai-providers.d.ts
 /** Per-tenant provider keys and provider batch jobs. */
 export declare function createAiProviders(options: AiProvidersOptions): AiProviders;
 //#endregion
-export { type AiBatch, type AiBatchCounts, type AiBatchItem, type AiBatchItemInput, type AiBatchItemStatus, type AiBatchPatch, type AiBatchStatus, type AiProviderKey, type AiProviderKeyInput, type AiProviders, type AiProvidersOptions, type BlockTransport, type NewAiBatch, type ResolvedProviderKey, rpcTransport, sqlTransport };
+export { type AiBatch, type AiBatchCounts, type AiBatchItem, type AiBatchItemInput, type AiBatchItemStatus, type AiBatchPatch, type AiBatchStatus, type AiProviderKey, type AiProviderKeyInput, type AiProviders, type AiProvidersOptions, type BlockTransport, type NewAiBatch, type ResolvedProviderKey, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/ai-providers/index.js

@@ -1,9 +1,10 @@
-import { n as dbError } from "../../errors-B11Duf73.js";
-import { a as ok, r as err, t as AsyncResult } from "../../result-DzUbqgdW.js";
-import { n as credentialRefInTenant, r as foreignCredentialRef } from "../../provider-Di3sRutW.js";
-import { n as rpcTransport, r as sqlTransport } from "../../block-transport-BLr-ZgLc.js";
-import { O as textOf, a as credentialRefOf, b as recordOrEmpty, d as isRecord, g as pageOf, h as optionalText, i as blockCall, k as toInstant, m as optionalInstant, n as applyTemporal, p as oneOf, u as instantArg, x as recordsOf, y as recordOf } from "../../block-helpers-DWHxHsEQ.js";
-import { n as revokeIfConfigured } from "../../compose-BIBNgAnq.js";
+import { n as dbError } from "../../errors-2M6CKMP4.js";
+import { a as ok, r as err, t as AsyncResult } from "../../result-DEqHCMKP.js";
+import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { n as credentialRefInTenant, r as foreignCredentialRef } from "../../provider-DxRTex4x.js";
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-bAKh-dGc.js";
+import { C as recordOrEmpty, N as toInstant, S as recordOf, _ as optionalInstant, d as instantArg, g as oneOf, i as blockCall, j as textOf, n as applyTemporal, o as credentialRefOf, v as optionalText, w as recordsOf, y as pageOf } from "../../block-helpers-Cy3pB96I.js";
+import { n as revokeIfConfigured } from "../../compose-BHej1acw.js";
 //#region src/blocks/ai-providers/rows.ts
 const BATCH_STATUSES = [
 	"pending",
@@ -208,4 +209,4 @@ function createAiProviders(options) {
 	};
 }
 //#endregion
-export { createAiProviders, rpcTransport, sqlTransport };
+export { createAiProviders, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/ai-tasks/index.d.ts

@@ -1,3 +1,3 @@
-import { i as sqlTransport, r as rpcTransport, t as BlockTransport } from "../../block-transport-DvaoPuZ9.js";
-import { a as AiTaskRunStatus, c as AiTasksOptions, i as AiTaskRun, l as NewAiTask, n as AiTaskFields, o as AiTaskRunner, r as AiTaskOutcome, s as AiTasks, t as AiTask, u as createAiTasks } from "../../ai-tasks-Cd1HMFvB.js";
-export { type AiTask, type AiTaskFields, type AiTaskOutcome, type AiTaskRun, type AiTaskRunStatus, type AiTaskRunner, type AiTasks, type AiTasksOptions, type BlockTransport, type NewAiTask, createAiTasks, rpcTransport, sqlTransport };
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-inD4fFq-.js";
+import { a as AiTaskRunStatus, c as AiTasksOptions, i as AiTaskRun, l as NewAiTask, n as AiTaskFields, o as AiTaskRunner, r as AiTaskOutcome, s as AiTasks, t as AiTask, u as createAiTasks } from "../../ai-tasks-BRQ6iQLc.js";
+export { type AiTask, type AiTaskFields, type AiTaskOutcome, type AiTaskRun, type AiTaskRunStatus, type AiTaskRunner, type AiTasks, type AiTasksOptions, type BlockTransport, type NewAiTask, createAiTasks, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/ai-tasks/index.js

@@ -1,10 +1,11 @@
 import { t as DbException } from "../../db-exception-CnWcYPxL.js";
-import { n as dbError } from "../../errors-B11Duf73.js";
+import { n as dbError } from "../../errors-2M6CKMP4.js";
 import { s as nowInstant } from "../../temporal-BJGitm-h.js";
-import { a as ok, r as err, t as AsyncResult } from "../../result-DzUbqgdW.js";
-import { n as nextCronRun, t as assertCron } from "../../cron-DVPUg5k3.js";
-import { n as rpcTransport, r as sqlTransport } from "../../block-transport-BLr-ZgLc.js";
-import { O as textOf, c as errorText, d as isRecord, h as optionalText, i as blockCall, k as toInstant, l as injectableOf, m as optionalInstant, n as applyTemporal, x as recordsOf, y as recordOf } from "../../block-helpers-DWHxHsEQ.js";
+import { a as ok, r as err, t as AsyncResult } from "../../result-DEqHCMKP.js";
+import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { n as nextCronRun, t as assertCron } from "../../cron-D25Ukpxy.js";
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-bAKh-dGc.js";
+import { N as toInstant, S as recordOf, _ as optionalInstant, i as blockCall, j as textOf, l as errorText, n as applyTemporal, u as injectableOf, v as optionalText, w as recordsOf } from "../../block-helpers-Cy3pB96I.js";
 import { n as runStateOf } from "../../run-state-CgBKzYMW.js";
 //#region src/blocks/ai-tasks/ai-tasks.ts
 const STATUSES = [
@@ -200,4 +201,4 @@ function createAiTasks(options) {
 	};
 }
 //#endregion
-export { createAiTasks, rpcTransport, sqlTransport };
+export { createAiTasks, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/announcements/index.d.ts

@@ -1,3 +1,3 @@
-import { i as sqlTransport, r as rpcTransport, t as BlockTransport } from "../../block-transport-DvaoPuZ9.js";
-import { a as Announcements, c as createAnnouncements, i as AnnouncementSeverity, n as AnnouncementAudience, o as AnnouncementsOptions, r as AnnouncementInput, s as ManagedAnnouncement, t as Announcement } from "../../announcements-ZRGnScWI.js";
-export { type Announcement, type AnnouncementAudience, type AnnouncementInput, type AnnouncementSeverity, type Announcements, type AnnouncementsOptions, type BlockTransport, type ManagedAnnouncement, createAnnouncements, rpcTransport, sqlTransport };
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-inD4fFq-.js";
+import { a as Announcements, c as createAnnouncements, i as AnnouncementSeverity, n as AnnouncementAudience, o as AnnouncementsOptions, r as AnnouncementInput, s as ManagedAnnouncement, t as Announcement } from "../../announcements-Bouy0Ski.js";
+export { type Announcement, type AnnouncementAudience, type AnnouncementInput, type AnnouncementSeverity, type Announcements, type AnnouncementsOptions, type BlockTransport, type ManagedAnnouncement, createAnnouncements, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/announcements/index.js

@@ -1,3 +1,3 @@
-import { n as rpcTransport, r as sqlTransport } from "../../block-transport-BLr-ZgLc.js";
-import { t as createAnnouncements } from "../../announcements-CiyOs-xP.js";
-export { createAnnouncements, rpcTransport, sqlTransport };
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-bAKh-dGc.js";
+import { t as createAnnouncements } from "../../announcements-p_BFofiR.js";
+export { createAnnouncements, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/announcements/react/index.d.ts

@@ -1,6 +1,6 @@
-import { b as DbError } from "../../../result-D7y2fT87.js";
-import { x as SubscriptionStatus } from "../../../index-DunNRdnT.js";
-import { t as Announcement } from "../../../announcements-ZRGnScWI.js";
+import { b as DbError } from "../../../result-BchM1XZn.js";
+import { x as SubscriptionStatus } from "../../../index-BCHR4Ucl.js";
+import { t as Announcement } from "../../../announcements-Bouy0Ski.js";
 //#region src/blocks/announcements/react/index.d.ts
 export interface UseAnnouncementsOptions {
   /** The active tenant, for tenant, role and plan audiences. */

package/dist/blocks/announcements/react/index.js

@@ -1,8 +1,8 @@
 "use client";
-import { i as useAuth, l as useSupabase } from "../../../hooks-1BTCJsiw.js";
-import { n as rpcTransport } from "../../../block-transport-BLr-ZgLc.js";
+import { i as useAuth, l as useSupabase } from "../../../hooks-Bhza9Hnr.js";
+import { r as rpcTransport } from "../../../block-transport-bAKh-dGc.js";
 import { t as watchTopic } from "../../../react-topic-seAWjL3_.js";
-import { t as createAnnouncements } from "../../../announcements-CiyOs-xP.js";
+import { t as createAnnouncements } from "../../../announcements-p_BFofiR.js";
 import { useCallback, useEffect, useMemo, useState } from "react";
 //#region src/blocks/announcements/react/index.ts
 /**

package/dist/blocks/api-keys/index.d.ts

@@ -1,7 +1,7 @@
-import { i as sqlTransport, r as rpcTransport, t as BlockTransport } from "../../block-transport-DvaoPuZ9.js";
-import { r as AuthState } from "../../resolve-ChTYeTEl.js";
-import { t as BlockProblemOptions } from "../../problem-DD8LZFjc.js";
-import { a as ApiKeyResolverOptions, c as ApiKeysOptions, d as ParsedApiKey, f as apiKeyChecksum, g as parseApiKey, h as createApiKeys, i as ApiKeyExtraClaim, l as CreateApiKeyInput, m as apiKeyResolver, n as ApiKeyCheck, o as ApiKeyState, p as apiKeyClaims, r as ApiKeyClaimsOptions, s as ApiKeys, t as ApiKey, u as CreatedApiKey } from "../../api-keys-CIjghYjV.js";
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-inD4fFq-.js";
+import { r as AuthState } from "../../resolve-MxXVWyhd.js";
+import { t as BlockProblemOptions } from "../../problem-TvGdxO1t.js";
+import { a as ApiKeyResolverOptions, c as ApiKeysOptions, d as ParsedApiKey, f as apiKeyChecksum, g as parseApiKey, h as createApiKeys, i as ApiKeyExtraClaim, l as CreateApiKeyInput, m as apiKeyResolver, n as ApiKeyCheck, o as ApiKeyState, p as apiKeyClaims, r as ApiKeyClaimsOptions, s as ApiKeys, t as ApiKey, u as CreatedApiKey } from "../../api-keys-C8BlF3L2.js";
 import { Entry } from "@supabase/middleware";
 import { AuthMode, JWTClaims, UserClaims } from "@supabase/server";
 //#region src/blocks/api-keys/pipeline.d.ts
@@ -32,4 +32,4 @@ interface ApiKeyContributions {
  */
 export declare function withApiKey(options: WithApiKeyOptions): Entry<ApiKeyContributions>;
 //#endregion
-export { type ApiKey, type ApiKeyAuth, type ApiKeyCheck, type ApiKeyClaimsOptions, type ApiKeyContributions, type ApiKeyExtraClaim, type ApiKeyResolverOptions, type ApiKeyState, type ApiKeys, type ApiKeysOptions, type BlockTransport, type CreateApiKeyInput, type CreatedApiKey, type ParsedApiKey, type WithApiKeyOptions, apiKeyChecksum, apiKeyClaims, apiKeyResolver, createApiKeys, parseApiKey, rpcTransport, sqlTransport };
+export { type ApiKey, type ApiKeyAuth, type ApiKeyCheck, type ApiKeyClaimsOptions, type ApiKeyContributions, type ApiKeyExtraClaim, type ApiKeyResolverOptions, type ApiKeyState, type ApiKeys, type ApiKeysOptions, type BlockTransport, type CreateApiKeyInput, type CreatedApiKey, type ParsedApiKey, type WithApiKeyOptions, apiKeyChecksum, apiKeyClaims, apiKeyResolver, createApiKeys, dbTransport, parseApiKey, rpcTransport, sqlTransport };

package/dist/blocks/api-keys/index.js

@@ -1,10 +1,10 @@
-import { n as dbError } from "../../errors-B11Duf73.js";
-import { t as temporal } from "../../temporal-required-BVvW7SYJ.js";
-import { a as ok, t as AsyncResult } from "../../result-DzUbqgdW.js";
-import { a as problemResponse } from "../../problem-BreOl8b8.js";
-import { a as withAuthMode, o as withJwtClaims, s as withUserClaims } from "../../claims-DDBQT6BK.js";
-import { n as rpcTransport, r as sqlTransport } from "../../block-transport-BLr-ZgLc.js";
-import { D as stringsOf, O as textOf, T as sha256Hex, h as optionalText, i as blockCall, m as optionalInstant, n as applyTemporal, u as instantArg, x as recordsOf, y as recordOf } from "../../block-helpers-DWHxHsEQ.js";
+import { n as dbError } from "../../errors-2M6CKMP4.js";
+import { t as temporal } from "../../temporal-required-BtynQtM-.js";
+import { a as ok, t as AsyncResult } from "../../result-DEqHCMKP.js";
+import { o as problemResponse } from "../../problem-CJvFeGu7.js";
+import { a as withAuthMode, o as withJwtClaims, s as withUserClaims } from "../../claims-0KZVT804.js";
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-bAKh-dGc.js";
+import { A as stringsOf, O as sha256Hex, S as recordOf, _ as optionalInstant, d as instantArg, i as blockCall, j as textOf, n as applyTemporal, v as optionalText, w as recordsOf } from "../../block-helpers-Cy3pB96I.js";
 import { defineComposite, defineMiddleware } from "@supabase/middleware";
 //#region src/blocks/api-keys/api-keys.ts
 const TOKEN = /^([a-z][a-z0-9]*)_([0-9a-f]{16})_([A-Za-z0-9_-]{32,})$/;
@@ -331,4 +331,4 @@ function withApiKey(options) {
 	] })();
 }
 //#endregion
-export { apiKeyChecksum, apiKeyClaims, apiKeyResolver, createApiKeys, parseApiKey, rpcTransport, sqlTransport, withApiKey };
+export { apiKeyChecksum, apiKeyClaims, apiKeyResolver, createApiKeys, dbTransport, parseApiKey, rpcTransport, sqlTransport, withApiKey };

package/dist/blocks/attachments/index.d.ts

@@ -1,9 +1,9 @@
 /// <reference lib="esnext.temporal" />
-import { t as AsyncResult, w as ErrorMapper } from "../../result-D7y2fT87.js";
-import { i as sqlTransport, r as rpcTransport, t as BlockTransport } from "../../block-transport-DvaoPuZ9.js";
-import { r as BlockTemporalOptions } from "../../block-helpers-CKtbFcRv.js";
-import { m as JobHandler } from "../../queue-CLJurhdy.js";
-import { r as EventSink } from "../../cloud-event-C1JCc1bH.js";
+import { t as AsyncResult, w as ErrorMapper } from "../../result-BchM1XZn.js";
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-inD4fFq-.js";
+import { r as BlockTemporalOptions } from "../../block-helpers-C0Xj8War.js";
+import { m as JobHandler } from "../../types-D__3EN0q.js";
+import { i as EventSink } from "../../cloud-event-Dune0KI7.js";
 //#region src/blocks/attachments/attachments.d.ts
 interface StorageReply<T> {
   readonly data: T | null;
@@ -92,7 +92,10 @@ interface AttachmentDownload {
   readonly signedUrl: string;
 }
 interface Attachments {
-  /** Creates the pending record and a signed upload URL for its path. */
+  /**
+   * Creates the pending record and a signed upload URL for its path. When
+   * Storage refuses the URL, the record is deleted again.
+   */
   upload(attachment: NewAttachment): AsyncResult<AttachmentUpload>;
   /** Marks the upload done after the file is stored; emits `attachment.uploaded`. */
   confirm(id: string): AsyncResult<Attachment>;
@@ -114,7 +117,8 @@ interface Attachments {
    * Creates the record, uploads `file` from the server and confirms it, for
    * files the server makes or fetches (an export, a generated PDF, an
    * import). Returns the confirmed attachment, which still waits for the
-   * scan when the module requires one.
+   * scan when the module requires one. When Storage refuses the upload,
+   * the record is deleted again, so no pending record is left behind.
    */
   put(attachment: NewAttachment, file: Blob | ArrayBuffer | Uint8Array): AsyncResult<Attachment>;
   /**
@@ -221,4 +225,4 @@ interface ObjectScanner {
  */
 export declare function createObjectScanner(options: ObjectScannerOptions): ObjectScanner;
 //#endregion
-export { type Attachment, type AttachmentBucket, type AttachmentDownload, type AttachmentScanJob, type AttachmentScanner, type AttachmentScannerOptions, type AttachmentStatus, type AttachmentStorage, type AttachmentUpload, type Attachments, type AttachmentsOptions, type BlockTransport, type NewAttachment, type ObjectScanJob, type ObjectScanner, type ObjectScannerOptions, type ScanVerdict, type ScannedObject, rpcTransport, sqlTransport };
+export { type Attachment, type AttachmentBucket, type AttachmentDownload, type AttachmentScanJob, type AttachmentScanner, type AttachmentScannerOptions, type AttachmentStatus, type AttachmentStorage, type AttachmentUpload, type Attachments, type AttachmentsOptions, type BlockTransport, type NewAttachment, type ObjectScanJob, type ObjectScanner, type ObjectScannerOptions, type ScanVerdict, type ScannedObject, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/attachments/index.js

@@ -1,8 +1,9 @@
-import { n as dbError } from "../../errors-B11Duf73.js";
-import { a as ok, r as err, t as AsyncResult } from "../../result-DzUbqgdW.js";
-import { n as rpcTransport, r as sqlTransport } from "../../block-transport-BLr-ZgLc.js";
-import { O as textOf, c as errorText, d as isRecord, h as optionalText, i as blockCall, k as toInstant, m as optionalInstant, n as applyTemporal, x as recordsOf, y as recordOf } from "../../block-helpers-DWHxHsEQ.js";
-import { t as fromStorageError } from "../../errors-DLjJHPLK.js";
+import { n as dbError } from "../../errors-2M6CKMP4.js";
+import { a as ok, r as err, t as AsyncResult } from "../../result-DEqHCMKP.js";
+import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-bAKh-dGc.js";
+import { N as toInstant, S as recordOf, _ as optionalInstant, i as blockCall, j as textOf, l as errorText, n as applyTemporal, v as optionalText, w as recordsOf } from "../../block-helpers-Cy3pB96I.js";
+import { t as fromStorageError } from "../../errors-rZ7VIqp6.js";
 //#region src/blocks/attachments/attachments.ts
 const STATUSES = [
 	"pending",
@@ -75,6 +76,10 @@ function createAttachments(options) {
 	const gate = (attachment) => {
 		return attachment.status === "clean" || !requireScan && attachment.status !== "infected" && attachment.uploadedAt !== void 0 ? void 0 : dbError("invalid_request", attachment.status === "infected" ? "The file failed the malware scan" : "The file is not scanned yet", { hint: "ATTACHMENT_NOT_SCANNED" });
 	};
+	const discard = async (created, error) => {
+		await call("delete_attachment", { id: created.id }, (value) => value);
+		return err(error);
+	};
 	const upload = (attachment) => call("create_attachment", {
 		tenant: attachment.organizationId,
 		name: attachment.name,
@@ -83,11 +88,15 @@ function createAttachments(options) {
 		subject_type: attachment.subjectType,
 		subject_id: attachment.subjectId,
 		metadata: attachment.metadata
-	}, attachmentOf).andThen((created) => stored(bucket(created).createSignedUploadUrl(created.path)).map((url) => ({
-		attachment: created,
-		signedUrl: url.signedUrl,
-		token: url.token
-	})));
+	}, attachmentOf).andThen(async (created) => {
+		const url = await stored(bucket(created).createSignedUploadUrl(created.path));
+		if (!url.ok) return discard(created, url.error);
+		return ok({
+			attachment: created,
+			signedUrl: url.data.signedUrl,
+			token: url.data.token
+		});
+	});
 	return {
 		upload,
 		confirm: (id) => call("confirm_attachment", { id }, attachmentOf),
@@ -107,12 +116,12 @@ function createAttachments(options) {
 		}),
 		put: (attachment, file) => upload(attachment).andThen(async ({ attachment: created }) => {
 			const target = bucket(created);
-			if (!target.upload) return err(dbError("invalid_request", "The storage client has no upload", { hint: "ATTACHMENT_STORAGE_CLIENT" }));
+			if (!target.upload) return discard(created, dbError("invalid_request", "The storage client has no upload", { hint: "ATTACHMENT_STORAGE_CLIENT" }));
 			const sent = await stored(target.upload(created.path, file, {
 				contentType: created.mimeType,
 				upsert: false
 			}));
-			if (!sent.ok) return sent;
+			if (!sent.ok) return discard(created, sent.error);
 			return call("confirm_attachment", { id: created.id }, attachmentOf);
 		}),
 		read: (id) => lookup(call, id).andThen((attachment) => {
@@ -231,4 +240,4 @@ function createObjectScanner(options) {
 	};
 }
 //#endregion
-export { createAttachmentScanner, createAttachments, createObjectScanner, rpcTransport, sqlTransport };
+export { createAttachmentScanner, createAttachments, createObjectScanner, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/audit/index.d.ts

@@ -1,13 +1,13 @@
 /// <reference lib="esnext.temporal" />
-import { t as AsyncResult, w as ErrorMapper } from "../../result-D7y2fT87.js";
-import { L as TableKey, a as AnyModels, i as AnyFunctions } from "../../types-6BdhkmZe.js";
-import { t as SqlClient } from "../../executor-DbvExCFC.js";
-import { i as sqlTransport, r as rpcTransport, t as BlockTransport } from "../../block-transport-DvaoPuZ9.js";
-import { r as BlockTemporalOptions } from "../../block-helpers-CKtbFcRv.js";
-import { t as BetterSupabase, zt as WhereInput } from "../../define-CJJkkr1-.js";
-import { r as EventSink, t as CloudEvent } from "../../cloud-event-C1JCc1bH.js";
-import { i as ListDefinition } from "../../list-query-BRt-zDF7.js";
-import { n as AuditCategory } from "../../context-BCrWe7ow.js";
+import { t as AsyncResult, w as ErrorMapper } from "../../result-BchM1XZn.js";
+import { L as TableKey, a as AnyModels, i as AnyFunctions } from "../../types-CoE5Zwy4.js";
+import { t as SqlClient } from "../../executor-ngjKL_Pe.js";
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-inD4fFq-.js";
+import { r as BlockTemporalOptions } from "../../block-helpers-C0Xj8War.js";
+import { i as EventSink, t as CloudEvent } from "../../cloud-event-Dune0KI7.js";
+import { Bt as WhereInput, t as BetterSupabase } from "../../define-DmcfoNXB.js";
+import { i as ListDefinition } from "../../list-query-D3JQeEL7.js";
+import { n as AuditCategory } from "../../context-DsV2SueA.js";
 //#region src/blocks/audit/audit.d.ts
 interface PurgeAuditLogOptions extends BlockTemporalOptions {
   /** How long entries are kept when `retention` has no answer. Defaults to `1 year`. */
@@ -160,6 +160,8 @@ interface AuditSinkOptions {
  * subject as the record, the tenant from the `tenant` or `partitionkey`
  * extension (or `data.organizationId`), and the data as metadata. The
  * idempotency key is the event's source and id, so a redelivery records once.
+ * A `support.*` event also fills the impersonation columns from its
+ * `sessionId`, `adminId` and `reason`.
  */
 export declare function auditEventOf(event: CloudEvent, options?: AuditSinkOptions): AuditEventInput;
 /**
@@ -320,6 +322,15 @@ interface AuditEventInput {
   readonly sessionId?: string;
   readonly requestId?: string;
   readonly scope?: string;
+  /**
+   * The support session the event belongs to, its admin and their reason,
+   * for the impersonation columns. Honoured for the service role; any other
+   * caller may only name itself as `impersonatedBy`, from a token without an
+   * `act` claim, and otherwise gets the claim's values.
+   */
+  readonly supportSessionId?: string;
+  readonly impersonatedBy?: string;
+  readonly impersonationReason?: string;
 }
 interface AuditLogOptions extends BlockTemporalOptions {
   /** `sqlTransport(ctx.postgres)` for members, or `rpcTransport` over an API schema. */
@@ -363,4 +374,4 @@ interface AuditLog<Columns extends AuditColumns = AuditColumns> {
  */
 export declare function createAuditLog<Columns extends AuditColumns = AuditColumns>(options: AuditLogOptions): AuditLog<Columns>;
 //#endregion
-export { type AuditColumns, type AuditCsvColumn, type AuditCsvOptions, type AuditCursor, type AuditDetails, type AuditEntry, type AuditEventInput, type AuditExportBucket, type AuditExportOptions, type AuditExportToStorageOptions, type AuditFacet, type AuditListDefinition, type AuditListOptions, type AuditLog, type AuditLogOptions, type AuditPage, type AuditRecord, type AuditRetentionSource, type AuditSinkOptions, type AuditSort, type BlockTransport, type ExportAuditLogOptions, type OcsfProduct, type PurgeAuditLogOptions, rpcTransport, sqlTransport };
+export { type AuditColumns, type AuditCsvColumn, type AuditCsvOptions, type AuditCursor, type AuditDetails, type AuditEntry, type AuditEventInput, type AuditExportBucket, type AuditExportOptions, type AuditExportToStorageOptions, type AuditFacet, type AuditListDefinition, type AuditListOptions, type AuditLog, type AuditLogOptions, type AuditPage, type AuditRecord, type AuditRetentionSource, type AuditSinkOptions, type AuditSort, type BlockTransport, type ExportAuditLogOptions, type OcsfProduct, type PurgeAuditLogOptions, dbTransport, rpcTransport, sqlTransport };

package/dist/blocks/audit/index.js

@@ -1,12 +1,13 @@
 import { t as DbException } from "../../db-exception-CnWcYPxL.js";
-import { n as dbError } from "../../errors-B11Duf73.js";
-import { t as temporal } from "../../temporal-required-BVvW7SYJ.js";
-import { a as ok, r as err, t as AsyncResult } from "../../result-DzUbqgdW.js";
-import { t as SPEC_PINS } from "../../spec-pins--j6mTok4.js";
-import { n as toCsv } from "../../csv-DCK-PT1n.js";
-import { r as sqlIdent } from "../../template--jDkl3UP.js";
-import { n as rpcTransport, r as sqlTransport } from "../../block-transport-BLr-ZgLc.js";
-import { C as run, D as stringsOf, O as textOf, d as isRecord, g as pageOf, h as optionalText, i as blockCall, m as optionalInstant, n as applyTemporal, u as instantArg, w as seconds } from "../../block-helpers-DWHxHsEQ.js";
+import { n as dbError } from "../../errors-2M6CKMP4.js";
+import { t as temporal } from "../../temporal-required-BtynQtM-.js";
+import { a as ok, r as err, t as AsyncResult } from "../../result-DEqHCMKP.js";
+import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { t as SPEC_PINS } from "../../spec-pins-DsLfUH7l.js";
+import { n as toCsv } from "../../csv-BZnHA1Py.js";
+import { i as sqlIdent } from "../../template-lPVh-EwW.js";
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-bAKh-dGc.js";
+import { A as stringsOf, D as seconds, E as run, _ as optionalInstant, d as instantArg, i as blockCall, j as textOf, n as applyTemporal, v as optionalText, y as pageOf } from "../../block-helpers-Cy3pB96I.js";
 import { n as defineListQuery } from "../../list-query-gl808ac1.js";
 //#region src/blocks/audit/audit.ts
 const RETENTION_MANY = /* @__PURE__ */ new WeakMap();
@@ -417,11 +418,25 @@ function csvPage(entries, options, details, first) {
 //#region src/blocks/audit/sink.ts
 const textIn = (value) => typeof value === "string" && value !== "" ? value : void 0;
 const defaultCategory = (eventType) => eventType.startsWith("account.") || eventType.startsWith("support.") ? "security" : void 0;
+/** The impersonation fields of a `support.*` event: its session, admin and reason. */
+function supportFields(eventType, data) {
+	if (!eventType.startsWith("support.") || data === void 0) return {};
+	const sessionId = textIn(data["sessionId"]);
+	const adminId = textIn(data["adminId"]);
+	const reason = textIn(data["reason"]);
+	return {
+		...sessionId === void 0 ? {} : { supportSessionId: sessionId },
+		...adminId === void 0 ? {} : { impersonatedBy: adminId },
+		...reason === void 0 ? {} : { impersonationReason: reason }
+	};
+}
 /**
 * The audit entry for one CloudEvent: its type without the prefix, its
 * subject as the record, the tenant from the `tenant` or `partitionkey`
 * extension (or `data.organizationId`), and the data as metadata. The
 * idempotency key is the event's source and id, so a redelivery records once.
+* A `support.*` event also fills the impersonation columns from its
+* `sessionId`, `adminId` and `reason`.
 */
 function auditEventOf(event, options = {}) {
 	const prefix = `${options.typePrefix ?? "dev.better-supabase"}.`;
@@ -438,7 +453,8 @@ function auditEventOf(event, options = {}) {
 		...event.subject === void 0 ? {} : { record: event.subject },
 		...organizationId === void 0 ? {} : { organizationId },
 		...actorId === void 0 ? {} : { actorId },
-		...metadata === void 0 ? {} : { metadata }
+		...metadata === void 0 ? {} : { metadata },
+		...supportFields(eventType, data)
 	};
 }
 /**
@@ -680,7 +696,10 @@ function createAuditLog(options) {
 		user_agent: event.userAgent,
 		session_id: event.sessionId,
 		request_id: event.requestId,
-		scope: event.scope
+		scope: event.scope,
+		support_session: event.supportSessionId,
+		impersonated_by: event.impersonatedBy,
+		impersonation_reason: event.impersonationReason
 	}, textOf);
 	return {
 		record,
@@ -711,4 +730,4 @@ function createAuditLog(options) {
 	};
 }
 //#endregion
-export { auditEventOf, auditListQuery, auditSink, createAuditLog, exportAuditLog, purgeAuditLog, rpcTransport, setAuditRetention, sqlTransport, toOcsf };
+export { auditEventOf, auditListQuery, auditSink, createAuditLog, dbTransport, exportAuditLog, purgeAuditLog, rpcTransport, setAuditRetention, sqlTransport, toOcsf };