better-supabase 0.7.0 → 0.8.0

package/dist/cli/spec-T_0Bcyw7.js

@@ -0,0 +1,2 @@
+import { n as specCommand } from "./spec-CzosTYm3.js";
+export { specCommand };

package/dist/cli/{sql-B8csQPyn.js → sql-BKOOQAX3.js}

@@ -1,53 +1,18 @@
-import { r as defineCliCommand } from "./command-CK14fP91.js";
-import { i as writeIfChanged, r as sameText, t as display } from "./io-DI1mTdSA.js";
-import { i as plain, r as painter } from "./style-C0NFdJRL.js";
-import { a as entitlementsMode, n as accessProviderMode, o as moduleKeyProblems, s as providerLabel, t as compiledReadSets } from "./read-sets-CETOSFx4.js";
+import { r as defineCliCommand } from "./command-DV-StG1x.js";
+import { a as writeIfChanged, i as sameText, t as display } from "./io-CFzJVJ68.js";
+import { i as plain, r as painter } from "./style-CB3vxgh0.js";
+import { a as entitlementsMode, n as accessProviderMode, o as moduleKeyProblems, s as providerLabel, t as compiledReadSets } from "./read-sets-DjJrm8Wj.js";
 import { t as importFresh } from "./fresh-import-BeYf9I3x.js";
 import { c as migrationCommand, d as schemaPaths, n as declarativeSchemasDir, u as readSupabaseToml } from "./supabase-toml-B-bIukQF.js";
-import { t as fileDiff } from "./diff-SjkO5rNr.js";
+import { t as fileDiff } from "./diff-D1jGdb3Y.js";
 import { n as moduleLayoutFor, t as migrationsDir } from "./sql-layout-D6cphHT3.js";
+import { r as writeLine } from "./files-BVupXPIC.js";
 import { resolve } from "node:path";
 import { existsSync } from "node:fs";
 import { readFile, readdir, rm } from "node:fs/promises";
+import { CONFIG_DEFAULTS } from "better-supabase/config";
 import { SQL_MODULES, contractSignature, customContracts, moduleBody, moduleFilePaths, moduleFileVersion, moduleLayout, modulePermissionKeys, moduleSchemaExtensions, moduleTopics, renderModules, resolveModules, sameModuleFile, upgradePlan } from "better-supabase/sql";
-//#region src/cli/topic-policies.ts
-const isTopic = (value) => typeof value === "object" && value !== null && "template" in value && typeof value.template === "string" && "sql" in value && typeof value.sql === "function" && "triggerSql" in value;
-const literalParts = (template) => template.replaceAll(/\{[^}]+\}/g, "{}");
-const owns = (owned, template) => owned.endsWith("*") ? template.startsWith(owned.slice(0, -1)) : literalParts(owned) === literalParts(template);
-const receivesOnly = (sql) => !sql.includes(" for insert ") && !sql.includes("'presence'");
-/** The file `realtime.policies` writes, or `undefined` when it isn't set. */
-async function topicPolicyFile(config, owned = []) {
-	const policies = config.realtime.policies;
-	if (policies === void 0) return void 0;
-	const topics = [];
-	for (const entry of policies.from) {
-		const loaded = await importFresh(resolve(config.root, entry));
-		const found = Object.values(loaded).filter(isTopic);
-		if (found.length === 0) throw new Error(`${entry} exports no topic (defineTopic)`);
-		for (const topic of found) if (!topics.includes(topic)) topics.push(topic);
-	}
-	topics.sort((a, b) => a.template < b.template ? -1 : a.template > b.template ? 1 : 0);
-	const functions = config.authorization?.functions;
-	const sqlOf = (topic) => topic.sql(functions === void 0 ? void 0 : { functions });
-	const skipped = [];
-	const written = topics.filter((topic) => {
-		const owner = owned.find((entry) => owns(entry.topic, topic.template));
-		if (owner === void 0 || !receivesOnly(sqlOf(topic))) return true;
-		skipped.push(`-- Skipped topic ${topic.template}: the ${owner.module} module writes its receive policy.`);
-		return false;
-	});
-	const header = [
-		"-- better-supabase: realtime topic policies",
-		`-- Written by \`better-supabase sql sync\` from ${policies.from.join(", ")}; edit the topics, not this file.`,
-		...skipped
-	].join("\n");
-	return {
-		path: policies.output,
-		contents: `${header}\n\n${written.map(sqlOf).join("\n")}`
-	};
-}
-//#endregion
-//#region src/cli/commands/sql.ts
+//#region src/cli/sql/args.ts
 const SQL_ARGS = {
 	action: {
 		type: "positional",
@@ -73,6 +38,8 @@ const SQL_ARGS = {
 	}
 };
 const USAGE = "Run `better-supabase sql --help` for the actions.";
+//#endregion
+//#region src/cli/sql/providers.ts
 /** Modules that fill the `memberships` claim, which a provider's hook may own. */
 const MEMBERSHIP_CLAIM_MODULES = /* @__PURE__ */ new Set(["tenant"]);
 /** Whether the provider's access token hook writes the `memberships` claim itself. */
@@ -142,26 +109,8 @@ async function layoutFor(config, args, names) {
 		permissionCatalog: permissionKeysFor(config)
 	});
 }
-const MODULE_TEST_MARKER = /^-- @bs-module-test ([a-z0-9-]+)$/m;
-/**
-* Test files a SQL module wrote for an earlier layout (a table that is no
-* longer audited), for the modules in `names`.
-*/
-async function staleModuleTests(config, names, sqlLayout, files) {
-	const dir = (sqlLayout.testsDir ?? "supabase/tests").replace(/\/$/, "");
-	const entries = await readdir(resolve(config.root, dir)).catch(() => []);
-	const current = new Set(files.map((file) => file.path));
-	const modules = new Set(resolveModules(names, sqlLayout).map((module) => module.name));
-	const stale = [];
-	for (const name of entries.toSorted()) {
-		const path = `${dir}/${name}`;
-		if (!name.endsWith(".test.sql") || current.has(path)) continue;
-		const text = await readFile(resolve(config.root, path), "utf8");
-		const module = MODULE_TEST_MARKER.exec(text)?.[1];
-		if (module !== void 0 && modules.has(module)) stale.push(path);
-	}
-	return stale;
-}
+//#endregion
+//#region src/cli/sql/migrations.ts
 /** `YYYYMMDDHHMMSS` in UTC, the Supabase CLI's migration prefix. */
 const migrationStamp = (now) => now.toISOString().replaceAll(/[-:T]/g, "").slice(0, 14);
 /**
@@ -174,35 +123,6 @@ function stampAfter(migrations, now) {
 	const at = Math.floor(now.getTime() / 1e3) * 1e3;
 	return migrationStamp(new Date(Math.max(at, newest + 1e3)));
 }
-async function write(config, args, names, sqlLayout, only) {
-	const lines = [];
-	const dryRun = args["dry-run"] === true;
-	let data = false;
-	const files = renderModules(names, sqlLayout).filter((file) => only === void 0 || only.includes(file.module));
-	for (const path of await staleModuleTests(config, only ?? names, sqlLayout, files)) {
-		const shown = display(config.root, path);
-		if (dryRun) {
-			lines.push(`Would remove ${shown}`);
-			continue;
-		}
-		await rm(resolve(config.root, path));
-		lines.push(`Removed ${shown}`);
-	}
-	for (const file of files) {
-		const path = resolve(config.root, file.path);
-		const shown = display(config.root, file.path);
-		if (dryRun) {
-			lines.push(`Would write ${shown} (${file.module})`);
-			continue;
-		}
-		const wrote = await writeIfChanged(path, file.contents);
-		if (wrote && file.kind === "data") data = true;
-		lines.push(`${wrote ? "Wrote" : "Unchanged"} ${shown} (${file.module})`);
-	}
-	lines.push(...await writeExtensionsMigration(config, files, dryRun));
-	if (data) lines.push("", DATA_NEXT);
-	return lines;
-}
 const EXTENSIONS_SUFFIX = "_better_supabase_extensions.sql";
 const MIGRATION_EXTENSION = /^\s*create\s+extension\s+(?:if\s+not\s+exists\s+)?"?([a-z_][a-z0-9_]*)"?/gim;
 async function unmigratedExtensions(config, files) {
@@ -220,10 +140,10 @@ async function unmigratedExtensions(config, files) {
 		missing: moduleSchemaExtensions(files).filter((extension) => !created.has(extension.name))
 	};
 }
-async function writeExtensionsMigration(config, files, dryRun) {
+async function writeExtensionsMigration(config, files, dryRun, now) {
 	const { dir, existing, missing } = await unmigratedExtensions(config, files);
 	if (missing.length === 0) return [];
-	const path = `${dir}/${stampAfter(existing, /* @__PURE__ */ new Date(Date.now() - 1e3))}${EXTENSIONS_SUFFIX}`;
+	const path = `${dir}/${stampAfter(existing, /* @__PURE__ */ new Date(now().getTime() - 1e3))}${EXTENSIONS_SUFFIX}`;
 	if (dryRun) return [`Would write ${path}`];
 	await writeIfChanged(resolve(config.root, path), `-- better-supabase sql: the extensions of ${missing.map((extension) => extension.name).join(", ")}, created before the schema migration that needs them.\n\n${missing.map((extension) => extension.statement).join("\n")}\n`);
 	return [`Wrote ${path}`, "It creates the extensions the module schemas need, so create the schema migration after it."];
@@ -235,7 +155,7 @@ const DATA_SUFFIX = "_better_supabase_module_data.sql";
 * the schema migration that creates their tables. Every statement is
 * idempotent, so the migration carries all of them, not only the changes.
 */
-async function dataMigration(config, args) {
+async function dataMigration(config, args, now) {
 	if (config.sql.moduleNames.length === 0) return {
 		code: 0,
 		output: "sql.modules is empty; nothing to write."
@@ -255,7 +175,7 @@ async function dataMigration(config, args) {
 		code: 0,
 		output: `${dir}/${latest} already has these rows; nothing to write.`
 	};
-	const path = `${dir}/${stampAfter(existing, /* @__PURE__ */ new Date())}${DATA_SUFFIX}`;
+	const path = `${dir}/${stampAfter(existing, now())}${DATA_SUFFIX}`;
 	if (args["dry-run"] === true) return {
 		code: 0,
 		output: `Would write ${path}`
@@ -266,6 +186,57 @@ async function dataMigration(config, args) {
 		output: `Wrote ${path}`
 	};
 }
+//#endregion
+//#region src/cli/sql/write.ts
+const MODULE_TEST_MARKER = /^-- @bs-module-test ([a-z0-9-]+)$/m;
+/**
+* Test files a SQL module wrote for an earlier layout (a table that is no
+* longer audited), for the modules in `names`.
+*/
+async function staleModuleTests(config, names, sqlLayout, files) {
+	const dir = (sqlLayout.testsDir ?? CONFIG_DEFAULTS.sql.testsDir).replace(/\/$/, "");
+	const entries = await readdir(resolve(config.root, dir)).catch(() => []);
+	const current = new Set(files.map((file) => file.path));
+	const modules = new Set(resolveModules(names, sqlLayout).map((module) => module.name));
+	const stale = [];
+	for (const name of entries.toSorted()) {
+		const path = `${dir}/${name}`;
+		if (!name.endsWith(".test.sql") || current.has(path)) continue;
+		const text = await readFile(resolve(config.root, path), "utf8");
+		const module = MODULE_TEST_MARKER.exec(text)?.[1];
+		if (module !== void 0 && modules.has(module)) stale.push(path);
+	}
+	return stale;
+}
+async function write(config, args, names, sqlLayout, now, only) {
+	const lines = [];
+	const dryRun = args["dry-run"] === true;
+	let data = false;
+	const files = renderModules(names, sqlLayout).filter((file) => only === void 0 || only.includes(file.module));
+	for (const path of await staleModuleTests(config, only ?? names, sqlLayout, files)) {
+		const shown = display(config.root, path);
+		if (dryRun) {
+			lines.push(`Would remove ${shown}`);
+			continue;
+		}
+		await rm(resolve(config.root, path));
+		lines.push(`Removed ${shown}`);
+	}
+	for (const file of files) {
+		const path = resolve(config.root, file.path);
+		const shown = display(config.root, file.path);
+		if (dryRun) {
+			lines.push(`Would write ${shown} (${file.module})`);
+			continue;
+		}
+		const { wrote, line } = await writeLine(path, file.contents, shown, ` (${file.module})`);
+		if (wrote && file.kind === "data") data = true;
+		lines.push(line);
+	}
+	lines.push(...await writeExtensionsMigration(config, files, dryRun, now));
+	if (data) lines.push("", DATA_NEXT);
+	return lines;
+}
 /** A note when migra's `schema_paths` is set and misses module files, which `supabase db diff` would then skip. */
 async function unlistedModuleFiles(config, names, sqlLayout) {
 	const toml = await readSupabaseToml(config.root);
@@ -285,12 +256,170 @@ async function unlistedModuleFiles(config, names, sqlLayout) {
 		"Or switch to pg-delta, which orders the files by dependency: add [experimental.pgdelta] with enabled = true and remove schema_paths (doctor BS316)."
 	];
 }
+//#endregion
+//#region src/cli/sql/add.ts
+async function addModules(config, args, names, now) {
+	if (names.length === 0) return {
+		code: 2,
+		error: `Name at least one module.\n${USAGE}`
+	};
+	const unknown = names.filter((name) => !(name in SQL_MODULES));
+	if (unknown.length > 0) return {
+		code: 2,
+		error: `Unknown module ${unknown.join(", ")}. Available: ${Object.keys(SQL_MODULES).join(", ")}`
+	};
+	const owner = config.authorization && providerOwnsMemberships(config) ? providerLabel(config.authorization) : void 0;
+	const hookModules = names.filter((name) => MEMBERSHIP_CLAIM_MODULES.has(name));
+	if (owner && hookModules.length > 0 && args.force !== true) return {
+		code: 1,
+		error: [
+			`The access token hook of ${owner} writes the memberships claim.`,
+			`${hookModules.join(" and ")} would add a second source for it. Use the provider's hook instead,`,
+			"or pass --force to write the modules anyway."
+		].join("\n")
+	};
+	const listed = [...config.sql.moduleNames, ...names.filter((name) => !config.sql.moduleNames.includes(name))];
+	const sqlLayout = await layoutFor(config, args, listed);
+	const lines = await write(config, args, listed, sqlLayout, now, resolveModules(names, sqlLayout).map((module) => module.name));
+	const pulledIn = resolveModules(names, sqlLayout).map((module) => module.name).filter((name) => MEMBERSHIP_CLAIM_MODULES.has(name) && !names.includes(name));
+	if (owner && pulledIn.length > 0) lines.push("", `${pulledIn.join(" and ")} came along as a dependency: its memberships table backs has_organization_role() and has_entitlement().`, `The hook of ${owner} still writes the memberships claim, so don't call better_supabase.membership_claims from a hook.`, "Make better_supabase.memberships one of the provider's membership sources if both should agree.");
+	const untracked = resolveModules(names, sqlLayout).map((module) => module.name).filter((name) => !config.sql.moduleNames.includes(name));
+	if (untracked.length > 0) lines.push("", `Add them to your config so \`sql sync --check\` keeps them current:`, `  sql: { modules: [${[...config.sql.moduleNames, ...untracked].map((name) => `'${name}'`).join(", ")}] }`);
+	if (args["dry-run"] !== true) lines.push(...await unlistedModuleFiles(config, names, sqlLayout));
+	lines.push("", `Then create a migration: ${migrationCommand(await readSupabaseToml(config.root), "better_supabase_module")}`);
+	return {
+		code: 0,
+		output: lines.join("\n")
+	};
+}
+//#endregion
+//#region src/cli/sql/list.ts
+async function listModules(config, args) {
+	const sqlLayout = await layout(config, args);
+	const files = moduleFilePaths(Object.keys(SQL_MODULES), sqlLayout);
+	return {
+		code: 0,
+		output: `${Object.values(SQL_MODULES).map((module) => {
+			const path = files.get(module.name);
+			const installed = path !== void 0 && existsSync(resolve(config.root, path));
+			const tracked = config.sql.moduleNames.includes(module.name);
+			const mark = path === void 0 ? "◇" : installed ? tracked ? "●" : "○" : " ";
+			const requires = sqlLayout.entitlementsProvider && module.providerRequires ? module.providerRequires : module.requires;
+			const needs = requires.length > 0 ? ` (needs ${requires.join(", ")})` : "";
+			const integrates = module.integrates ?? [];
+			const works = integrates.includes("*") ? " (works with every installed module)" : integrates.length > 0 ? ` (works with ${integrates.join(", ")})` : "";
+			return `${mark} ${module.name.padEnd(15)} ${module.description}${needs}${works}`;
+		}).join("\n")}\n\n● installed and in sql.modules   ○ installed, not in sql.modules   ◇ custom mode (the app implements it)`
+	};
+}
+//#endregion
+//#region src/cli/sql/print.ts
+async function printModule(config, args, names) {
+	const [name] = names;
+	const module = name ? SQL_MODULES[name] : void 0;
+	if (!module) return {
+		code: 2,
+		error: `Name one module: ${Object.keys(SQL_MODULES).join(", ")}`
+	};
+	const body = moduleBody(module.name, await layout(config, args, [module.name]));
+	if (body === void 0) return {
+		code: 0,
+		output: `-- sql.modules.${module.name} is in custom mode: the app writes these functions.\n${customContracts([module.name], await layout(config, args, [module.name])).flatMap((contract) => contract.functions.map((fn) => `-- ${contract.schema}.${fn.name}(${contractSignature(fn, contract.idType)}) returns ${fn.returns.replaceAll("{id}", contract.idType)}`)).join("\n")}`
+	};
+	return {
+		code: 0,
+		output: body
+	};
+}
+//#endregion
+//#region src/cli/topic-policies.ts
+const isTopic = (value) => typeof value === "object" && value !== null && "template" in value && typeof value.template === "string" && "sql" in value && typeof value.sql === "function" && "triggerSql" in value;
+const literalParts = (template) => template.replaceAll(/\{[^}]+\}/g, "{}");
+const owns = (owned, template) => owned.endsWith("*") ? template.startsWith(owned.slice(0, -1)) : literalParts(owned) === literalParts(template);
+const receivesOnly = (sql) => !sql.includes(" for insert ") && !sql.includes("'presence'");
+/** The file `realtime.policies` writes, or `undefined` when it isn't set. */
+async function topicPolicyFile(config, owned = []) {
+	const policies = config.realtime.policies;
+	if (policies === void 0) return void 0;
+	const topics = [];
+	for (const entry of policies.from) {
+		const loaded = await importFresh(resolve(config.root, entry));
+		const found = Object.values(loaded).filter(isTopic);
+		if (found.length === 0) throw new Error(`${entry} exports no topic (defineTopic)`);
+		for (const topic of found) if (!topics.includes(topic)) topics.push(topic);
+	}
+	topics.sort((a, b) => a.template < b.template ? -1 : a.template > b.template ? 1 : 0);
+	const functions = config.authorization?.functions;
+	const sqlOf = (topic) => topic.sql(functions === void 0 ? void 0 : { functions });
+	const skipped = [];
+	const written = topics.filter((topic) => {
+		const owner = owned.find((entry) => owns(entry.topic, topic.template));
+		if (owner === void 0 || !receivesOnly(sqlOf(topic))) return true;
+		skipped.push(`-- Skipped topic ${topic.template}: the ${owner.module} module writes its receive policy.`);
+		return false;
+	});
+	const header = [
+		"-- better-supabase: realtime topic policies",
+		`-- Written by \`better-supabase sql sync\` from ${policies.from.join(", ")}; edit the topics, not this file.`,
+		...skipped
+	].join("\n");
+	return {
+		path: policies.output,
+		contents: `${header}\n\n${written.map(sqlOf).join("\n")}`
+	};
+}
+//#endregion
+//#region src/cli/sql/sync.ts
+async function syncModules(config, args, paint, now) {
+	const topics = await topicPolicyFile(config, config.sql.moduleNames.length === 0 ? [] : moduleTopics(config.sql.moduleNames, await layoutFor(config, args, config.sql.moduleNames)));
+	if (config.sql.moduleNames.length === 0 && topics === void 0) return {
+		code: 0,
+		output: "sql.modules is empty; nothing to sync."
+	};
+	if (args.check !== true) {
+		const lines = config.sql.moduleNames.length === 0 ? [] : await write(config, args, config.sql.moduleNames, await layoutFor(config, args, config.sql.moduleNames), now);
+		if (topics !== void 0) {
+			const shown = display(config.root, topics.path);
+			if (args["dry-run"] === true) lines.push(`Would write ${shown} (topics)`);
+			else lines.push((await writeLine(resolve(config.root, topics.path), topics.contents, shown, " (topics)")).line);
+		}
+		return {
+			code: 0,
+			output: lines.join("\n")
+		};
+	}
+	const sqlLayout = await layoutFor(config, args, config.sql.moduleNames);
+	const files = [...renderModules(config.sql.moduleNames, sqlLayout), ...topics === void 0 ? [] : [{
+		...topics,
+		topics: true
+	}]];
+	const stale = (await staleModuleTests(config, config.sql.moduleNames, sqlLayout, renderModules(config.sql.moduleNames, sqlLayout))).map((path) => display(config.root, path));
+	const diffs = stale.map((path) => `${path} is no longer written; \`sql sync\` removes it.`);
+	for (const file of files) {
+		const current = await readFile(resolve(config.root, file.path), "utf8").catch(() => void 0);
+		if (file.topics ? !sameText(current, file.contents) : !sameModuleFile(current, file.contents)) {
+			const shown = display(config.root, file.path);
+			stale.push(shown);
+			diffs.push(fileDiff(shown, current, file.contents, paint));
+		}
+	}
+	return stale.length === 0 ? {
+		code: 0,
+		output: "SQL module files are up to date."
+	} : {
+		code: 1,
+		output: diffs.join("\n\n"),
+		error: `Out of date: ${stale.join(", ")}. Run \`better-supabase sql sync\`.`
+	};
+}
+//#endregion
+//#region src/cli/sql/upgrade.ts
 /**
 * Rewrites the module files of modules behind the current version, and writes
 * their upgrade steps (renames, backfills) as a migration that runs before
 * the one the schema diff creates.
 */
-async function upgrade(config, args, paint) {
+async function upgrade(config, args, paint, now) {
 	if (config.sql.moduleNames.length === 0) return {
 		code: 0,
 		output: "sql.modules is empty; nothing to upgrade."
@@ -339,7 +468,7 @@ async function upgrade(config, args, paint) {
 	const steps = plan.flatMap((entry) => entry.steps.filter((step) => step.sql !== "").map((step) => `-- ${entry.module}: version ${String(step.from)} to ${String(step.from + 1)}. ${step.description}\n${step.sql}`));
 	const dryRun = args["dry-run"] === true;
 	if (steps.length > 0) {
-		const path = `${migrationsDir(config)}/${migrationStamp(/* @__PURE__ */ new Date())}_better_supabase_block_upgrade.sql`;
+		const path = `${migrationsDir(config)}/${migrationStamp(now())}_better_supabase_block_upgrade.sql`;
 		const contents = `-- better-supabase sql upgrade: steps that run before the schema diff.\n\n${steps.join("\n\n")}\n`;
 		if (dryRun) lines.push(`Would write ${path}`);
 		else {
@@ -348,131 +477,24 @@ async function upgrade(config, args, paint) {
 		}
 	}
 	for (const entry of plan) lines.push(`${entry.module}: version ${String(entry.from)} to ${String(entry.to)}`, ...entry.steps.map((step) => `  ${step.description}`));
-	lines.push(...await write(config, args, config.sql.moduleNames, sqlLayout), "", `Then create a migration: ${migrationCommand(await readSupabaseToml(config.root), "better_supabase_module")}`);
+	lines.push(...await write(config, args, config.sql.moduleNames, sqlLayout, now), "", `Then create a migration: ${migrationCommand(await readSupabaseToml(config.root), "better_supabase_module")}`);
 	return {
 		code: 0,
 		output: lines.join("\n")
 	};
 }
-async function runSql(config, args, paint = plain) {
-	const [action, ...names] = args._;
+//#endregion
+//#region src/cli/commands/sql.ts
+const SYSTEM_DEPS = { now: () => /* @__PURE__ */ new Date() };
+async function runSql(config, args, paint = plain, deps = SYSTEM_DEPS) {
+	const [action, ...names] = args._ ?? [];
 	switch (action) {
-		case "list": {
-			const sqlLayout = await layout(config, args);
-			const files = moduleFilePaths(Object.keys(SQL_MODULES), sqlLayout);
-			return {
-				code: 0,
-				output: `${Object.values(SQL_MODULES).map((module) => {
-					const path = files.get(module.name);
-					const installed = path !== void 0 && existsSync(resolve(config.root, path));
-					const tracked = config.sql.moduleNames.includes(module.name);
-					const mark = path === void 0 ? "◇" : installed ? tracked ? "●" : "○" : " ";
-					const requires = sqlLayout.entitlementsProvider && module.providerRequires ? module.providerRequires : module.requires;
-					const needs = requires.length > 0 ? ` (needs ${requires.join(", ")})` : "";
-					const integrates = module.integrates ?? [];
-					const works = integrates.includes("*") ? " (works with every installed module)" : integrates.length > 0 ? ` (works with ${integrates.join(", ")})` : "";
-					return `${mark} ${module.name.padEnd(15)} ${module.description}${needs}${works}`;
-				}).join("\n")}\n\n● installed and in sql.modules   ○ installed, not in sql.modules   ◇ custom mode (the app implements it)`
-			};
-		}
-		case "add": {
-			if (names.length === 0) return {
-				code: 2,
-				error: `Name at least one module.\n${USAGE}`
-			};
-			const unknown = names.filter((name) => !(name in SQL_MODULES));
-			if (unknown.length > 0) return {
-				code: 2,
-				error: `Unknown module ${unknown.join(", ")}. Available: ${Object.keys(SQL_MODULES).join(", ")}`
-			};
-			const owner = config.authorization && providerOwnsMemberships(config) ? providerLabel(config.authorization) : void 0;
-			const hookModules = names.filter((name) => MEMBERSHIP_CLAIM_MODULES.has(name));
-			if (owner && hookModules.length > 0 && args.force !== true) return {
-				code: 1,
-				error: [
-					`The access token hook of ${owner} writes the memberships claim.`,
-					`${hookModules.join(" and ")} would add a second source for it. Use the provider's hook instead,`,
-					"or pass --force to write the modules anyway."
-				].join("\n")
-			};
-			const listed = [...config.sql.moduleNames, ...names.filter((name) => !config.sql.moduleNames.includes(name))];
-			const sqlLayout = await layoutFor(config, args, listed);
-			const lines = await write(config, args, listed, sqlLayout, resolveModules(names, sqlLayout).map((module) => module.name));
-			const pulledIn = resolveModules(names, sqlLayout).map((module) => module.name).filter((name) => MEMBERSHIP_CLAIM_MODULES.has(name) && !names.includes(name));
-			if (owner && pulledIn.length > 0) lines.push("", `${pulledIn.join(" and ")} came along as a dependency: its memberships table backs has_organization_role() and has_entitlement().`, `The hook of ${owner} still writes the memberships claim, so don't call better_supabase.membership_claims from a hook.`, "Make better_supabase.memberships one of the provider's membership sources if both should agree.");
-			const untracked = resolveModules(names, sqlLayout).map((module) => module.name).filter((name) => !config.sql.moduleNames.includes(name));
-			if (untracked.length > 0) lines.push("", `Add them to your config so \`sql sync --check\` keeps them current:`, `  sql: { modules: [${[...config.sql.moduleNames, ...untracked].map((name) => `'${name}'`).join(", ")}] }`);
-			if (args["dry-run"] !== true) lines.push(...await unlistedModuleFiles(config, names, sqlLayout));
-			lines.push("", `Then create a migration: ${migrationCommand(await readSupabaseToml(config.root), "better_supabase_module")}`);
-			return {
-				code: 0,
-				output: lines.join("\n")
-			};
-		}
-		case "sync": {
-			const topics = await topicPolicyFile(config, config.sql.moduleNames.length === 0 ? [] : moduleTopics(config.sql.moduleNames, await layoutFor(config, args, config.sql.moduleNames)));
-			if (config.sql.moduleNames.length === 0 && topics === void 0) return {
-				code: 0,
-				output: "sql.modules is empty; nothing to sync."
-			};
-			if (args.check !== true) {
-				const lines = config.sql.moduleNames.length === 0 ? [] : await write(config, args, config.sql.moduleNames, await layoutFor(config, args, config.sql.moduleNames));
-				if (topics !== void 0) {
-					const shown = display(config.root, topics.path);
-					if (args["dry-run"] === true) lines.push(`Would write ${shown} (topics)`);
-					else {
-						const wrote = await writeIfChanged(resolve(config.root, topics.path), topics.contents);
-						lines.push(`${wrote ? "Wrote" : "Unchanged"} ${shown} (topics)`);
-					}
-				}
-				return {
-					code: 0,
-					output: lines.join("\n")
-				};
-			}
-			const sqlLayout = await layoutFor(config, args, config.sql.moduleNames);
-			const files = [...renderModules(config.sql.moduleNames, sqlLayout), ...topics === void 0 ? [] : [{
-				...topics,
-				topics: true
-			}]];
-			const stale = (await staleModuleTests(config, config.sql.moduleNames, sqlLayout, renderModules(config.sql.moduleNames, sqlLayout))).map((path) => display(config.root, path));
-			const diffs = stale.map((path) => `${path} is no longer written; \`sql sync\` removes it.`);
-			for (const file of files) {
-				const current = await readFile(resolve(config.root, file.path), "utf8").catch(() => void 0);
-				if (file.topics ? !sameText(current, file.contents) : !sameModuleFile(current, file.contents)) {
-					const shown = display(config.root, file.path);
-					stale.push(shown);
-					diffs.push(fileDiff(shown, current, file.contents, paint));
-				}
-			}
-			return stale.length === 0 ? {
-				code: 0,
-				output: "SQL module files are up to date."
-			} : {
-				code: 1,
-				output: diffs.join("\n\n"),
-				error: `Out of date: ${stale.join(", ")}. Run \`better-supabase sql sync\`.`
-			};
-		}
-		case "upgrade": return upgrade(config, args, paint);
-		case "data": return dataMigration(config, args);
-		case "print": {
-			const [name] = names;
-			const module = name ? SQL_MODULES[name] : void 0;
-			if (!module) return {
-				code: 2,
-				error: `Name one module: ${Object.keys(SQL_MODULES).join(", ")}`
-			};
-			const body = moduleBody(module.name, await layout(config, args, [module.name]));
-			if (body === void 0) return {
-				code: 0,
-				output: `-- sql.modules.${module.name} is in custom mode: the app writes these functions.\n${customContracts([module.name], await layout(config, args, [module.name])).flatMap((contract) => contract.functions.map((fn) => `-- ${contract.schema}.${fn.name}(${contractSignature(fn, contract.idType)}) returns ${fn.returns.replaceAll("{id}", contract.idType)}`)).join("\n")}`
-			};
-			return {
-				code: 0,
-				output: body
-			};
-		}
+		case "list": return listModules(config, args);
+		case "add": return addModules(config, args, names, deps.now);
+		case "sync": return syncModules(config, args, paint, deps.now);
+		case "upgrade": return upgrade(config, args, paint, deps.now);
+		case "data": return dataMigration(config, args, deps.now);
+		case "print": return printModule(config, args, names);
 		case void 0: return {
 			code: 2,
 			error: `Name an action.\n${USAGE}`
@@ -492,4 +514,4 @@ const sqlCommand = defineCliCommand({
 	run: (args, { config, io }) => runSql(config, args, painter(io.color))
 });
 //#endregion
-export { sqlCommand };
+export { sqlCommand as n, runSql as t };

package/dist/cli/sql-DJrNDxQm.js

@@ -0,0 +1,3 @@
+import "./sql-layout-D6cphHT3.js";
+import { n as sqlCommand } from "./sql-BKOOQAX3.js";
+export { sqlCommand };

package/dist/cli/{style-C0NFdJRL.js → style-CB3vxgh0.js}

@@ -5,9 +5,9 @@ const colored = (format, text) => styleText(format, text, { validateStream: fals
 function painter(color) {
 	return color === true ? colored : plain;
 }
-/** Whether stdout takes colors: a TTY, and neither `NO_COLOR` nor `NODE_DISABLE_COLORS` set (`FORCE_COLOR` overrides). */
-function colorEnabled() {
-	return styleText("red", "x", { stream: process.stdout }) !== "x";
+/** Whether `stream` takes colors: a TTY, and neither `NO_COLOR` nor `NODE_DISABLE_COLORS` set (`FORCE_COLOR` overrides). */
+function colorEnabled(stream) {
+	return styleText("red", "x", { stream }) !== "x";
 }
 const VERBS = [
 	[/^(?:Wrote|Updated)\b/, "green"],