better-supabase 0.7.0 → 0.8.0

package/dist/expo/index.d.ts

@@ -1,7 +1,7 @@
-import { a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
-import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { i as ServerContext, n as ContextOptions, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
-import { i as MiddlewareOptions, r as GuardOptions } from "../respond-DprrgyXX.js";
+import { a as AnyModels, i as AnyFunctions } from "../types-CoE5Zwy4.js";
+import { t as BetterSupabase } from "../define-DmcfoNXB.js";
+import { i as ServerContext, n as ContextOptions, s as ServerOptions, t as BetterServer } from "../server-types-CrAmZ8jv.js";
+import { i as MiddlewareOptions, r as GuardOptions } from "../respond-Cw-zanCm.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 import { ImmutableRequest, MiddlewareFunction } from "expo-server";

package/dist/expo/index.js

@@ -1,9 +1,9 @@
 import { t as DbException } from "../db-exception-CnWcYPxL.js";
-import { o as toProblem } from "../problem-BreOl8b8.js";
-import { a as unexpectedResponse, c as extendServer, s as createServer, y as refreshFor } from "../adapter-B-tL8hqg.js";
-import { m as serializeCookie } from "../resolve-tJZY3FEa.js";
-import { a as respond, r as guard, t as defaultExpose } from "../respond-BUgsXNgk.js";
-import { t as withBetterSupabase } from "../composite-C6I8ZyaF.js";
+import { s as toProblem } from "../problem-CJvFeGu7.js";
+import { a as unexpectedResponse, b as refreshFor, c as extendServer, s as createServer } from "../adapter-CN45ibbV.js";
+import { p as serializeCookie } from "../resolve-Bvgf3ut_.js";
+import { a as respond, r as guard, t as defaultExpose } from "../respond-volM3ByS.js";
+import { t as withBetterSupabase } from "../composite-zTe0TCqj.js";
 import { r as handoffOf } from "../shared-CBxosKK3.js";
 import { bufferRequest, pipeline, seedContext } from "@supabase/middleware";
 import { StatusError, setResponseHeaders } from "expo-server";
@@ -76,7 +76,7 @@ function createExpo(betterSupabase, options = {}) {
 		request,
 		loader(fn, loaderOptions) {
 			return async (incoming, params) => {
-				if (!incoming) throw new StatusError(500, "better-supabase: bs.loader() needs a request; static rendering has none (use createStaticLoader)");
+				if (!incoming) throw new StatusError(500, "better-supabase: bs.loader() needs a request, and static rendering has none. Turn on unstable_useServerRendering on Expo SDK 57, or read public data in a loader built with createStaticLoader from \"expo-server\".");
 				const ctx = await request(incoming, loaderOptions);
 				try {
 					return await fn(ctx, params, incoming);

package/dist/expo-sqlite/index.d.ts

@@ -1,6 +1,6 @@
-import { r as Executor } from "../executor-DvsBbNBS.js";
-import { n as PowerSyncExecutorOptions, t as PowerSyncDatabaseLike } from "../executor-CaWigTyR.js";
-import { i as checkSqlite, n as sqliteTables, r as watch, t as WatchOptions } from "../watch-DI34G86j.js";
+import { r as Executor } from "../executor-Drzu3dBK.js";
+import { n as PowerSyncExecutorOptions, t as PowerSyncDatabaseLike } from "../executor-DfEtf0cq.js";
+import { a as checkSqlite, n as sqliteTables, r as watch, t as WatchOptions } from "../watch-COzRWvVN.js";
 //#region src/expo-sqlite/executor.d.ts
 /** What an expo-sqlite database or exclusive transaction can run. */
 interface ExpoSqliteContextLike {

package/dist/expo-sqlite/index.js

@@ -1,5 +1,5 @@
-import { n as watch, t as sqliteTables } from "../watch-Xuxrvxq-.js";
-import { i as checkSqlite, r as powersyncExecutor } from "../executor-Bq28caBo.js";
+import { n as watch, t as sqliteTables } from "../watch-BcvtAHOd.js";
+import { i as checkSqlite, t as powersyncExecutor } from "../executor-B-fD7DLt.js";
 //#region src/expo-sqlite/executor.ts
 const DEFAULT_THROTTLE_MS = 30;
 /** A UUID v4 from SQLite's `randomblob`, for runtimes without `crypto.randomUUID`. */

package/dist/extra-CGQ2_q3S.js

@@ -0,0 +1,10 @@
+//#region src/server/extra.ts
+/** `{ ...base, ...extra }` that keeps lazy getters lazy. */
+function withExtra(base, extra) {
+	return Object.defineProperties({}, {
+		...Object.getOwnPropertyDescriptors(base),
+		...Object.getOwnPropertyDescriptors(extra)
+	});
+}
+//#endregion
+export { withExtra as t };

package/dist/{field-errors-BFOa7WhB.d.ts → field-errors-DIe9XYWL.d.ts}

@@ -1,9 +1,10 @@
-import { b as DbError } from "./result-D7y2fT87.js";
-import { it as QuerySpec } from "./define-CJJkkr1-.js";
-import { n as TemplateValues } from "./template-CwO38Do8.js";
-import { a as ClientAuth } from "./bind-Bu_ZNa3W.js";
-import { T as TopicMessage, _ as RealtimeClient, a as LiveSource, g as PresenceSubscription, p as PresenceOptions, r as LiveCountSeed, y as SubscribeOptions } from "./index-DunNRdnT.js";
+import { b as DbError } from "./result-BchM1XZn.js";
+import { J as TemplateValues } from "./storage-api-CB7Zl1Ci.js";
+import { at as QuerySpec } from "./define-DmcfoNXB.js";
+import { a as ClientAuth } from "./bind-CQ5mPyX1.js";
+import { T as TopicMessage, _ as RealtimeClient, a as LiveSource, g as PresenceSubscription, p as PresenceOptions, r as LiveCountSeed, y as SubscribeOptions } from "./index-BCHR4Ucl.js";
 import { SupabaseClient } from "@supabase/supabase-js";
+import { StandardSchemaV1 } from "@standard-schema/spec";
 import { QueryClient } from "@tanstack/query-core";
 //#region src/bindings/client.d.ts
 /** The parts of `createClient()` the bindings need. */
@@ -77,6 +78,15 @@ interface PresenceTopic<P extends string, I, O> {
   match(topic: string): TemplateValues<P> | null;
   subscribe(client: RealtimeClient, values: TemplateValues<P>, handlers: Readonly<Record<string, never>>, options?: SubscribeOptions & PresenceOptions<O>): PresenceSubscription<I, O>;
 }
+/** Who a subscription runs as. */
+/** The claims type of a client's `betterSupabase.claims(schema)`, `unknown` without one. */
+type ClaimsOf<B extends ClientLike> = B["betterSupabase"] extends {
+  readonly claimsSchema: StandardSchemaV1<unknown, infer C> | undefined;
+} ? C : unknown;
+/** The profile type of a client's `betterSupabase.userMetadata(schema)`, `unknown` without one. */
+type ProfileOf<B extends ClientLike> = B["betterSupabase"] extends {
+  readonly userMetadataSchema: StandardSchemaV1<unknown, infer P> | undefined;
+} ? P : unknown;
 /** A count spec or a `bs.liveCount()` seed. */
 type LiveCountSource = QuerySpec<string, "count", number> | LiveCountSeed | null | undefined;
 interface ActionState<I, T> {
@@ -92,8 +102,8 @@ interface ActionState<I, T> {
   readonly error: DbError | undefined;
 }
 //#endregion
-//#region src/react/field-errors.d.ts
+//#region src/bindings/field-errors.d.ts
 /** The first message per top-level field of a `validation` error. */
 declare function fieldErrorsOf(error: DbError | undefined): Readonly<Partial<Record<string, string>>>;
 //#endregion
-export { BroadcastOptions as a, LiveCountSource as c, PresenceTopic as d, UseActionOptions as f, ActionState as i, LiveQueryHookOptions as l, ActionInputOf as n, ClientLike as o, ActionResultOf as r, LiveCountHookOptions as s, fieldErrorsOf as t, PresenceHookOptions as u };
+export { BroadcastOptions as a, LiveCountHookOptions as c, PresenceHookOptions as d, PresenceTopic as f, ActionState as i, LiveCountSource as l, UseActionOptions as m, ActionInputOf as n, ClaimsOf as o, ProfileOf as p, ActionResultOf as r, ClientLike as s, fieldErrorsOf as t, LiveQueryHookOptions as u };

package/dist/{field-errors-VF1yb8yI.js → field-errors-DZVRWRkf.js}

@@ -1,4 +1,4 @@
-//#region src/react/field-errors.ts
+//#region src/bindings/field-errors.ts
 /** The first message per top-level field of a `validation` error. */
 function fieldErrorsOf(error) {
 	if (error?.kind !== "validation") return {};

package/dist/format-DTXdu8ya.d.ts

@@ -0,0 +1,70 @@
+import { t as ApiModel } from "./model-OgBxvk3N.js";
+//#region src/spec/format.d.ts
+/** How a version of a format is supported. `preview` follows a draft and is never a default. */
+type VersionStatus = "stable" | "legacy" | "preview";
+interface FormatVersion {
+  /** The exact version or commit the output follows (a `SPEC_PINS` value). */
+  readonly pin: string;
+  readonly status: VersionStatus;
+}
+type DiagnosticSeverity = "error" | "warning" | "info";
+/**
+ * A finding from building, lowering or checking a document. `code` is
+ * stable: tools and `--fail-on` read it, and a retired code stays reserved.
+ */
+interface SpecDiagnostic {
+  readonly code: string;
+  readonly severity: DiagnosticSeverity;
+  readonly message: string;
+  /** A JSON Pointer into the document or the model, when there is one. */
+  readonly pointer?: string;
+}
+interface LowerContext {
+  /** Records a diagnostic; lowering continues. */
+  report(diagnostic: SpecDiagnostic): void;
+}
+/**
+ * The plugin contract every document format implements, the first-party
+ * ones included (API v1). `lower` is pure: it reads the model and returns a
+ * new document, so the same model renders to every version. `Docs` maps
+ * each version to its document type, so `transform` hooks can switch on the
+ * version; it defaults to `Doc` for every version.
+ */
+interface DocumentFormat<Id extends string = string, V extends string = string, Doc = unknown, Docs extends Readonly<Record<V, Doc>> = Readonly<Record<V, Doc>>> {
+  readonly apiVersion: 1;
+  readonly id: Id;
+  readonly versions: Readonly<Record<V, FormatVersion>>;
+  readonly defaultVersion: V;
+  lower(model: ApiModel, version: V, ctx: LowerContext): Doc;
+  /** Semantic checks a schema cannot express (unique ids, resolvable references). */
+  lint?(doc: Doc, version: V): readonly SpecDiagnostic[];
+  /** Default file name for a version, e.g. `openapi.json`. */
+  fileName(version: V): string;
+  /** Phantom carrying the per-version document types. */
+  readonly "~documents"?: Docs;
+}
+type AnyDocumentFormat = DocumentFormat<string, any, any, any>;
+type VersionOf<F> = F extends DocumentFormat<string, infer V> ? V : never;
+type DocumentOf<F> = F extends DocumentFormat<string, any, infer D, any> ? D : never;
+/**
+ * What a `transform` hook receives: the document with its format and
+ * version, a union discriminated by `version`.
+ */
+type RenderedOf<F> = F extends DocumentFormat<infer Id, infer V, any, infer Docs> ? { [K in V]: {
+  readonly format: Id;
+  readonly version: K;
+  readonly document: K extends keyof Docs ? Docs[K] : never;
+}; }[V] : never;
+/** Identity helper that fixes `apiVersion` and checks that the default version exists. */
+declare function defineDocumentFormat<const Id extends string, const V extends string, Doc, Docs extends Readonly<Record<V, Doc>> = Readonly<Record<V, Doc>>>(format: {
+  readonly apiVersion?: 1;
+  readonly id: Id;
+  readonly versions: Readonly<Record<V, FormatVersion>>;
+  readonly defaultVersion: NoInfer<V>;
+  lower(model: ApiModel, version: NoInfer<V>, ctx: LowerContext): Doc;
+  lint?(doc: Doc, version: NoInfer<V>): readonly SpecDiagnostic[];
+  fileName(version: NoInfer<V>): string;
+  readonly "~documents"?: Docs;
+}): DocumentFormat<Id, V, Doc, Docs>;
+//#endregion
+export { FormatVersion as a, SpecDiagnostic as c, defineDocumentFormat as d, DocumentOf as i, VersionOf as l, DiagnosticSeverity as n, LowerContext as o, DocumentFormat as r, RenderedOf as s, AnyDocumentFormat as t, VersionStatus as u };

package/dist/{framework-KIPvRQJU.d.ts → framework-148t1m3C.d.ts}

@@ -1,8 +1,8 @@
-import { a as AnyModels, i as AnyFunctions } from "./types-6BdhkmZe.js";
-import { o as ServerOptions } from "./server-ZSJ9rCcV.js";
-import { t as AuthSession } from "./view-CF7ihnkg.js";
-import { a as SessionEntryConfig, n as BetterSupabaseContributions } from "./composite-CpHLEo-G.js";
-import { t as RefusalRedirects } from "./refusal-DhSU2Vvr.js";
+import { a as AnyModels, i as AnyFunctions } from "./types-CoE5Zwy4.js";
+import { s as ServerOptions } from "./server-types-CrAmZ8jv.js";
+import { t as AuthSession } from "./view-TpXEUcVN.js";
+import { a as SessionEntryConfig, n as BetterSupabaseContributions } from "./composite-CWAJTRBF.js";
+import { t as RefusalRedirects } from "./refusal-CFI8-5nf.js";
 //#region src/server/framework.d.ts
 /** What the framework factories (`createSvelteKit`, `createReactRouter`, `createTanStackStart`) take. */
 interface FrameworkOptions extends ServerOptions, RefusalRedirects, Pick<SessionEntryConfig, "checkSession" | "cookieScopes" | "encode"> {

package/dist/{framework-BDCpJI7o.js → framework-3ey3QmrO.js}

@@ -1,5 +1,5 @@
-import { n as toSession } from "./view-BeFcRV6G.js";
-import { t as withBetterSupabase } from "./composite-C6I8ZyaF.js";
+import { n as toSession } from "./view-D5ryq3gz.js";
+import { t as withBetterSupabase } from "./composite-zTe0TCqj.js";
 //#region src/server/framework.ts
 /** Every caller: the framework factories guard per loader, action or route instead. */
 const EVERY_CALLER = [

package/dist/function-contract-BcZenXMO.d.ts

@@ -0,0 +1,8 @@
+//#region src/core/function-contract.d.ts
+/** What a typed Edge Function takes and returns, as the caller sees them. */
+interface FunctionContract<In = unknown, Out = unknown> {
+  readonly input: In;
+  readonly output: Out;
+}
+//#endregion
+export { FunctionContract as t };

package/dist/{gateway-C1ssRHnf.d.ts → gateway-S9vicgeo.d.ts}

@@ -1,8 +1,8 @@
 /// <reference lib="esnext.temporal" />
-import { b as DbError } from "./result-D7y2fT87.js";
-import { m as JobHandler } from "./queue-CLJurhdy.js";
-import { g as AiModelInput, i as AiChat } from "./ai-chat-7amvXjmQ.js";
-import { i as Usage, m as UsageStatus, s as UsageEntry } from "./usage-CrvrL2vw.js";
+import { b as DbError } from "./result-BchM1XZn.js";
+import { m as JobHandler } from "./types-D__3EN0q.js";
+import { g as AiModelInput, i as AiChat } from "./ai-chat-DXkMy74O.js";
+import { i as Usage, m as UsageStatus, s as UsageEntry } from "./usage-D0NNUFfr.js";
 import { JSONValue, LanguageModelUsage } from "ai";
 //#region src/ai-sdk/gateway.d.ts
 /** Who a generation is for, as the AI Gateway reports spend. */

package/dist/{guards-BnzDvFrz.js → guards-6F2bCtQR.js}

@@ -6,5 +6,7 @@
 function isList(value) {
 	return Array.isArray(value);
 }
+/** A plain object: not null and not an array. */
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 //#endregion
-export { isList as t };
+export { isRecord as n, isList as t };

package/dist/h3/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../refusal-DhSU2Vvr.js";
+import { n as RouteGuardOptions } from "../refusal-CFI8-5nf.js";
 import { t as Validated } from "../shared-DDSjEGDR.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";
 //#region src/bridges/h3.d.ts

package/dist/h3/index.js

@@ -1,5 +1,5 @@
 import { i as toResponse, n as bufferInPlace, t as around } from "../shared-CBxosKK3.js";
-import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../refusal-CeJWxmkH.js";
+import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../refusal-K78A1Vmq.js";
 //#region src/bridges/h3.ts
 /**
 * Runs an entry array as H3 2 middleware (`app.use(...)`, Nitro and Nuxt

package/dist/h3/v1/index.d.ts

@@ -1,4 +1,4 @@
-import { n as RouteGuardOptions } from "../../refusal-DhSU2Vvr.js";
+import { n as RouteGuardOptions } from "../../refusal-CFI8-5nf.js";
 import { t as Validated } from "../../shared-DDSjEGDR.js";
 import { n as NodeRequestHead, t as NodeHeaderTarget } from "../../node-headers-AO06VhqH.js";
 import { AnyEntry, Contributions } from "@supabase/middleware";

package/dist/h3/v1/index.js

@@ -1,4 +1,4 @@
-import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../../refusal-CeJWxmkH.js";
+import { a as routeRefusal, n as guardedLocals, t as errorResponse } from "../../refusal-K78A1Vmq.js";
 import { t as beforeRoute } from "../../before-route-CnR0C0Jr.js";
 import { n as headRequest, t as applyWebHeaders } from "../../node-headers-C71zNQHe.js";
 //#region src/h3/v1/index.ts

package/dist/{message-CaKlqdsX.js → history-GH1HJWQV.js}

@@ -1,18 +1,8 @@
-import { d as isRecord } from "./block-helpers-DWHxHsEQ.js";
+import { n as isRecord } from "./guards-6F2bCtQR.js";
+import { t as AI_MESSAGE_PART_TYPES } from "./ai-message-DfaP8sis.js";
 //#region src/blocks/ai-chat/message.ts
 /** `$id` of `schemas/ai-message-v1.json`, the JSON Schema of `AiMessage`. */
 const AI_MESSAGE_SCHEMA_ID = "https://unpkg.com/better-supabase/schemas/ai-message-v1.json";
-const AI_MESSAGE_PART_TYPES = [
-	"text",
-	"reasoning",
-	"file",
-	"tool-call",
-	"tool-result",
-	"tool-approval",
-	"source",
-	"data",
-	"step"
-];
 const ROLES = /* @__PURE__ */ new Set([
 	"system",
 	"user",
@@ -216,4 +206,66 @@ function isAiMessage(value) {
 	return checkMessage(value).length === 0;
 }
 //#endregion
-export { isAiMessage as i, AI_MESSAGE_SCHEMA_ID as n, aiMessageSchema as r, AI_MESSAGE_PART_TYPES as t };
+//#region src/blocks/ai-chat/history.ts
+/** Checks an untrusted value (a request body) against the canonical format. */
+function validateMessage(value) {
+	const result = aiMessageSchema["~standard"].validate(value);
+	if (result instanceof Promise) throw new TypeError("aiMessageSchema validates synchronously");
+	return result.issues ? {
+		ok: false,
+		issues: result.issues
+	} : {
+		ok: true,
+		message: result.value
+	};
+}
+/** The canonical messages of a path, in order, without the tree's fields. */
+function pathToHistory(path) {
+	return path.map((message) => ({
+		id: message.id,
+		role: message.role,
+		parts: message.parts,
+		...message.metadata === void 0 ? {} : { metadata: message.metadata }
+	}));
+}
+/** The output a `tool-result` gets when its call never finished. */
+const INTERRUPTED_TOOL_OUTPUT = "The tool call was interrupted.";
+/**
+* Closes every tool call that has no result yet, so a provider accepts the
+* history after a crash or a stop mid-call: each gets a `tool-result` with
+* `isError` right after it. A call waiting for approval is left alone.
+*/
+function repairDanglingToolCalls(messages) {
+	const answered = /* @__PURE__ */ new Set();
+	const waiting = /* @__PURE__ */ new Set();
+	for (const message of messages) for (const part of message.parts) {
+		if (part.type === "tool-result") answered.add(part.toolCallId);
+		if (part.type === "tool-approval" && part.state === "requested") waiting.add(part.toolCallId);
+	}
+	return messages.map((message) => {
+		if (!message.parts.some((part) => dangling(part, answered, waiting))) return message;
+		const parts = [];
+		for (const part of message.parts) {
+			parts.push(part);
+			if (part.type === "tool-call" && dangling(part, answered, waiting)) {
+				const result = {
+					type: "tool-result",
+					toolCallId: part.toolCallId,
+					toolName: part.toolName,
+					output: INTERRUPTED_TOOL_OUTPUT,
+					isError: true
+				};
+				parts.push(result);
+			}
+		}
+		return {
+			...message,
+			parts
+		};
+	});
+}
+function dangling(part, answered, waiting) {
+	return part.type === "tool-call" && part.providerExecuted !== true && !answered.has(part.toolCallId) && !waiting.has(part.toolCallId);
+}
+//#endregion
+export { AI_MESSAGE_SCHEMA_ID as a, validateMessage as i, pathToHistory as n, aiMessageSchema as o, repairDanglingToolCalls as r, isAiMessage as s, INTERRUPTED_TOOL_OUTPUT as t };

package/dist/hmac-DCud0myt.js

@@ -0,0 +1,22 @@
+//#region src/core/hmac.ts
+const encoder = /* @__PURE__ */ new TextEncoder();
+/** Constant-time string comparison. */
+function timingSafeEqual(a, b) {
+	const left = encoder.encode(a);
+	const right = encoder.encode(b);
+	let diff = left.length ^ right.length;
+	for (let index = 0; index < Math.max(left.length, right.length); index++) diff |= (left[index] ?? 0) ^ (right[index] ?? 0);
+	return diff === 0;
+}
+/** Lowercase hex of a byte array. */
+const toHex = (bytes) => Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+/** The hex HMAC-SHA-256 of `message`, keyed with the UTF-8 bytes of `secret`. */
+async function hmacHex(secret, message) {
+	const key = await crypto.subtle.importKey("raw", encoder.encode(secret), {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign"]);
+	return toHex(new Uint8Array(await crypto.subtle.sign("HMAC", key, encoder.encode(message))));
+}
+//#endregion
+export { hmacHex as n, timingSafeEqual as r, encoder as t };

package/dist/hono/index.d.ts

@@ -1,11 +1,13 @@
-import { L as TableKey, a as AnyModels, i as AnyFunctions } from "../types-6BdhkmZe.js";
-import { r as AuthState } from "../resolve-ChTYeTEl.js";
-import { t as BetterSupabase } from "../define-CJJkkr1-.js";
-import { i as ServerContext, o as ServerOptions, t as BetterServer } from "../server-ZSJ9rCcV.js";
-import { t as AuthSession } from "../view-CF7ihnkg.js";
-import { i as MiddlewareOptions, r as GuardOptions } from "../respond-DprrgyXX.js";
-import { s as BlockRequireOptions } from "../kit-CkNzZUqv.js";
-import { a as ResourceRouteOptions } from "../resource-IPS5xi9q.js";
+import { L as TableKey, a as AnyModels, i as AnyFunctions } from "../types-CoE5Zwy4.js";
+import { r as AuthState } from "../resolve-MxXVWyhd.js";
+import { s as PermissionRef, t as AnyAuthorizer } from "../authorizer-eiOjo-3l.js";
+import { t as BetterSupabase } from "../define-DmcfoNXB.js";
+import { i as ServerContext, s as ServerOptions, t as BetterServer } from "../server-types-CrAmZ8jv.js";
+import { t as AuthSession } from "../view-TpXEUcVN.js";
+import { i as MiddlewareOptions, r as GuardOptions } from "../respond-Cw-zanCm.js";
+import { s as BlockRequireOptions } from "../kit-W99LCPBS.js";
+import { i as ResourceContext, l as ResourceRouteOptions, o as ResourceHooks, r as ResourceAction, t as ActionArgs } from "../resource-types-CqB6GWGT.js";
+import { t as defineAction } from "../resource-execute-rbKvuCsY.js";
 import { AnyEntry, Contributions, ValidateEntries } from "@supabase/middleware";
 import { Context, ErrorHandler, Hono, MiddlewareHandler } from "hono";
 //#region src/bridges/hono.d.ts
@@ -54,7 +56,7 @@ export interface HonoOptions extends ServerOptions {
    */
   readonly waitUntil?: (promise: Promise<unknown>) => void;
 }
-export interface BetterHono<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> extends BetterServer<M, F, E, C, P> {
+export interface BetterHono<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, Ref = string> extends BetterServer<M, F, E, C, P> {
   /**
    * The app's Hono `Env`, for `new Hono<typeof bs.Env>()` and
    * `Context<typeof bs.Env>`. Type only: `undefined` at runtime.
@@ -72,7 +74,7 @@ export interface BetterHono<M extends AnyModels, F extends AnyFunctions, E, C =
    * app.post('/invites', bs.require({ requireTenant: true, roles: ['admin'] }), handler)
    * ```
    */
-  require: (options?: BlockRequireOptions<C, P>) => MiddlewareHandler<HonoEnv<M, F, E, C, P>>;
+  require: (options?: BlockRequireOptions<C, P, boolean, Ref>) => MiddlewareHandler<HonoEnv<M, F, E, C, P>>;
   /**
    * Wraps a handler: `Result`s and `AsyncResult`s become JSON or Problem
    * Details, `undefined` becomes 204.
@@ -87,12 +89,15 @@ export interface BetterHono<M extends AnyModels, F extends AnyFunctions, E, C =
    */
   readonly onError: ErrorHandler<HonoEnv<M, F, E, C, P>>;
   /**
-   * REST routes for a table matching `createOpenApi`. Mount with
+   * REST routes for a table matching the API model: the collection, the
+   * item and each action's path. Mount with
    * `app.route('/customers', bs.resource('customers'))` behind `middleware()`.
    */
-  resource<T extends TableKey<M>>(table: T, options?: ResourceRouteOptions<M, T>): Hono<HonoEnv<M, F, E, C, P>>;
+  resource<T extends TableKey<M>>(table: T, options?: ResourceRouteOptions<M, T, Ref, ServerContext<M, F, E, C, P>["db"]>): Hono<HonoEnv<M, F, E, C, P>>;
 }
 /** Hono integration: a server plus middleware, handlers and REST resources. */
-export declare function createHono<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options?: HonoOptions): BetterHono<M, F, E, C, P>;
+export declare function createHono<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, A extends AnyAuthorizer | undefined = undefined>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options?: HonoOptions & {
+  readonly authorizer?: A;
+}): BetterHono<M, F, E, C, P, PermissionRef<A>>;
 //#endregion
-export type { BlockRequireOptions, GuardOptions, HonoBridge, MiddlewareOptions, ResourceRouteOptions };
+export { type ActionArgs, type BlockRequireOptions, type GuardOptions, type HonoBridge, type MiddlewareOptions, type ResourceAction, type ResourceContext, type ResourceHooks, type ResourceRouteOptions, defineAction };

package/dist/hono/index.js

@@ -1,11 +1,11 @@
-import { r as dbErrorOf } from "../errors-B11Duf73.js";
-import { a as problemResponse } from "../problem-BreOl8b8.js";
-import { a as unexpectedResponse, c as extendServer, n as flushEvents, s as createServer } from "../adapter-B-tL8hqg.js";
-import { n as toSession } from "../view-BeFcRV6G.js";
-import { a as respond, t as defaultExpose } from "../respond-BUgsXNgk.js";
-import { t as withBetterSupabase } from "../composite-C6I8ZyaF.js";
-import { t as defineResource } from "../resource-BsvzCMlX.js";
-import { i as requireCaller } from "../kit-Fm-Fv7q5.js";
+import { r as dbErrorOf } from "../errors-2M6CKMP4.js";
+import { o as problemResponse } from "../problem-CJvFeGu7.js";
+import { a as unexpectedResponse, c as extendServer, n as flushEvents, s as createServer } from "../adapter-CN45ibbV.js";
+import { n as toSession } from "../view-D5ryq3gz.js";
+import { a as respond, t as defaultExpose } from "../respond-volM3ByS.js";
+import { t as withBetterSupabase } from "../composite-zTe0TCqj.js";
+import { r as defineAction, t as defineResource } from "../resource-DA811u_4.js";
+import { i as requireCaller } from "../kit-BhHr9T9v.js";
 import { r as handoffOf } from "../shared-CBxosKK3.js";
 import { bufferRequest, pipeline, seedContext } from "@supabase/middleware";
 import { Hono } from "hono";
@@ -115,14 +115,17 @@ function createHono(betterSupabase, options = {}) {
 				c.set("tenant", tenant);
 			});
 			return async (c, next) => {
-				await run(c, next);
-				flushEvents(server, waitUntilOf(c));
+				try {
+					await run(c, next);
+				} finally {
+					flushEvents(server, waitUntilOf(c));
+				}
 			};
 		},
 		require: (requireOptions = {}) => {
 			return async (c, next) => {
 				const ctx = contextOf(c);
-				const caller = await requireCaller(ctx.auth, requireOptions, c.get("tenant"));
+				const caller = await requireCaller(ctx.auth, requireOptions, c.get("tenant"), options.authorizer);
 				if ("kind" in caller) return problemResponse(caller, {
 					instance: new URL(c.req.url).pathname,
 					expose
@@ -141,17 +144,19 @@ function createHono(betterSupabase, options = {}) {
 			};
 		},
 		resource(table, resourceOptions) {
-			const resource = defineResource(betterSupabase, table, resourceOptions);
+			const resource = defineResource(betterSupabase, table, resourceOptions, options.authorizer);
+			const { keyParam } = resource;
 			const app = new Hono();
-			const serve = (item) => (c) => resource.handle(c.req.raw, contextOf(c).db, item ? c.req.param("id") : void 0, {
+			const serve = (template) => (c) => resource.serve(c.req.raw, contextOf(c).db, template.map((segment) => segment.startsWith("{") && keyParam ? c.req.param(keyParam) ?? "" : segment), {
 				instance: new URL(c.req.url).pathname,
 				expose
 			});
-			app.all("/", serve(false));
-			if (resource.keyParam) app.all("/:id", serve(true));
+			app.all("/", serve([]));
+			for (const action of resource.plan.actions) app.all(`/${action.segments.map((segment) => segment.startsWith("{") ? `:${keyParam}` : segment).join("/")}`, serve(action.segments));
+			if (keyParam) app.all(`/:${keyParam}`, serve([`{${keyParam}}`]));
 			return app;
 		}
 	});
 }
 //#endregion
-export { createHono, toHono };
+export { createHono, defineAction, toHono };