better-supabase 0.7.0 → 0.8.0

package/dist/{template--jDkl3UP.js → template-lPVh-EwW.js}

@@ -1,5 +1,5 @@
 import { t as DbException } from "./db-exception-CnWcYPxL.js";
-import { n as dbError } from "./errors-B11Duf73.js";
+import { n as dbError } from "./errors-2M6CKMP4.js";
 //#region src/core/template.ts
 const PLACEHOLDER = /\{(\.\.\.)?([A-Za-z_][A-Za-z0-9_]*)\}/g;
 function parseSegment(segment) {
@@ -110,5 +110,14 @@ function sqlIdent(value) {
 function slug(value) {
 	return value.replaceAll(/[^A-Za-z0-9]+/g, "_").replaceAll(/^_|_$/g, "").toLowerCase();
 }
+/** SQL for the JWT claim at a dotted path, or the first set one of several (`coalesce`). */
+function claimSql(claim) {
+	const expressions = (typeof claim === "string" ? [claim] : claim).map((path) => {
+		const keys = path.split(".");
+		const last = keys.pop();
+		return `(select auth.jwt())${keys.map((key) => ` -> ${sqlString(key)}`).join("")} ->> ${sqlString(last)}`;
+	});
+	return expressions.length === 1 ? expressions[0] : `coalesce(${expressions.join(", ")})`;
+}
 //#endregion
-export { sqlString as i, slug as n, sqlIdent as r, parseTemplate as t };
+export { sqlString as a, sqlIdent as i, parseTemplate as n, slug as r, claimSql as t };

package/dist/{temporal-required-BVvW7SYJ.js → temporal-required-BtynQtM-.js}

@@ -1,5 +1,5 @@
 import { t as DbException } from "./db-exception-CnWcYPxL.js";
-import { n as dbError } from "./errors-B11Duf73.js";
+import { n as dbError } from "./errors-2M6CKMP4.js";
 import { c as optionalTemporal, t as TEMPORAL_MISSING } from "./temporal-BJGitm-h.js";
 //#region src/core/temporal-required.ts
 /** The error for a runtime without Temporal, naming the polyfill to load. */

package/dist/{tenant-BxNFk9bx.d.ts → tenant-CM368LXb.d.ts}

@@ -1,5 +1,5 @@
-import { t as AuthSnapshot } from "./bind-Bu_ZNa3W.js";
-import { t as AuthSession } from "./view-CF7ihnkg.js";
+import { t as AuthSnapshot } from "./bind-CQ5mPyX1.js";
+import { t as AuthSession } from "./view-TpXEUcVN.js";
 //#region src/auth/tenant.d.ts
 /**
  * The active tenant of a user session: the `claim` claim (`tenant_id` by

package/dist/testing/index.d.ts

@@ -1,27 +1,31 @@
-import { H as Update, L as TableKey, P as SchemaMeta, a as AnyModels, i as AnyFunctions, x as Insert } from "../types-6BdhkmZe.js";
-import { r as Executor } from "../executor-DvsBbNBS.js";
-import { t as SqlClient } from "../executor-DbvExCFC.js";
-import { m as RequestContext, n as AnyPlugin } from "../plugin-FGY8UhYm.js";
-import { n as AuthResolver } from "../resolve-ChTYeTEl.js";
-import { a as CredentialSubject, i as CredentialRef, r as CredentialProvider } from "../provider-D-UEMvSD.js";
-import { k as QueueBackend } from "../queue-CLJurhdy.js";
-import { n as Embedder } from "../knowledge-BXBbT0Tr.js";
-import { o as StreamStore } from "../store-CGjgWu5n.js";
-import { B as DbStats, b as Db, t as BetterSupabase, u as CacheAdapter } from "../define-CJJkkr1-.js";
-import { r as EventSink, t as CloudEvent } from "../cloud-event-C1JCc1bH.js";
-import { t as BetterPostgres } from "../pool-CAu2nLrL.js";
-import { V as SupportSessionStore, i as ServerContext, o as ServerOptions } from "../server-ZSJ9rCcV.js";
-import { s as Impersonator } from "../mfa-Daak8ukG.js";
+import { H as Update, L as TableKey, P as SchemaMeta, a as AnyModels, i as AnyFunctions, x as Insert } from "../types-CoE5Zwy4.js";
+import { r as Executor } from "../executor-Drzu3dBK.js";
+import { t as SqlClient } from "../executor-ngjKL_Pe.js";
+import { m as RequestContext, n as AnyPlugin } from "../plugin-CPK2HsbY.js";
+import { t as BetterSupabaseEnv } from "../index-BUK7jUzR.js";
+import { n as AuthResolver } from "../resolve-MxXVWyhd.js";
+import { a as CredentialSubject, i as CredentialRef, r as CredentialProvider } from "../provider-ib9wzUDz.js";
+import { k as QueueBackend } from "../types-D__3EN0q.js";
+import { n as Embedder } from "../knowledge-CAReFpRA.js";
+import { o as StreamStore } from "../store-DsIYEBnv.js";
+import { t as ApiModel } from "../model-OgBxvk3N.js";
+import { l as VersionOf, t as AnyDocumentFormat } from "../format-DTXdu8ya.js";
+import { o as Authorizer } from "../authorizer-eiOjo-3l.js";
+import { i as EventSink, t as CloudEvent } from "../cloud-event-Dune0KI7.js";
+import { Wt as DbStats, _ as Db, s as CacheAdapter, t as BetterSupabase } from "../define-DmcfoNXB.js";
+import { s as Impersonator } from "../mfa-SZc9YYyb.js";
+import { t as BetterPostgres } from "../pool-gkhbGp2E.js";
+import { B as SupportSessionStore, i as ServerContext, s as ServerOptions } from "../server-types-CrAmZ8jv.js";
 import { n as SessionActor, r as SessionDelegation } from "../actor-CQTlc1Hh.js";
-import { r as GuardOptions } from "../respond-DprrgyXX.js";
+import { r as GuardOptions } from "../respond-Cw-zanCm.js";
 import { i as AuthorizationProvider } from "../authorization-BFCqamMs.js";
-import { i as AiTaskRun, o as AiTaskRunner, t as AiTask } from "../ai-tasks-Cd1HMFvB.js";
-import { D as ResolvedConfig, _ as GeneratorInput, h as Generator, v as GeneratorModel } from "../config-D44Y7PAv.js";
-import { a as BlockTransportMiddleware } from "../block-hooks-plbZ0AbJ.js";
+import { i as AiTaskRun, o as AiTaskRunner, t as AiTask } from "../ai-tasks-BRQ6iQLc.js";
+import { B as ResolvedConfig, D as GeneratorModel, E as GeneratorInput, w as Generator } from "../index-Ba1SI-uO.js";
+import { a as BlockTransportMiddleware } from "../block-hooks-DaOVC7SC.js";
 import { t as NotificationChannel } from "../channel-_2Mx1Oyu.js";
-import { c as WebhookSecretStore, i as WebhookSigner, m as WebhookTransport } from "../signers-4y62_VIi.js";
-import { T as WorkflowGraph, i as BuilderStarter, r as BuilderStartCall, s as GraphCompiler } from "../types-AYOvcyep.js";
-import { t as EveDocumentBackend } from "../eve-gT2Fpjut.js";
+import { c as WebhookSecretStore, i as WebhookSigner, m as WebhookTransport } from "../signers-cpdmZYrv.js";
+import { T as WorkflowGraph, i as BuilderStarter, r as BuilderStartCall, s as GraphCompiler } from "../types-CD6yCDx3.js";
+import { t as EveDocumentBackend } from "../eve-CoAIcCkq.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { Message, StateAdapter } from "chat";
 import { webcrypto } from "node:crypto";
@@ -98,6 +102,8 @@ interface LocalStack {
   readonly secretKey?: string;
   /** Enables `sql`: the same user over direct Postgres. */
   readonly postgres?: BetterPostgres;
+  /** `fetch` for the user's supabase-js client, e.g. `liteStack().fetch`. */
+  readonly fetch?: typeof fetch;
 }
 interface TestUser<M extends AnyModels, F extends AnyFunctions, E> {
   readonly token: string;
@@ -122,6 +128,55 @@ interface TestUser<M extends AnyModels, F extends AnyFunctions, E> {
  */
 export declare function asUser<M extends AnyModels, D, F extends AnyFunctions, E>(betterSupabase: BetterSupabase<M, D, F, E>, claims: TestJwtClaims, stack?: LocalStack): Promise<TestUser<M, F, E>>;
 //#endregion
+//#region src/testing/lite.d.ts
+interface LiteStackOptions {
+  /**
+   * `sqlite-postgres` (default) stores data in in-memory SQLite and
+   * translates your Postgres SQL, as `lite init` does. `pglite` runs real
+   * Postgres in-process, with `rpc()` and `DEFAULT auth.uid()`.
+   */
+  readonly driver?: "sqlite-postgres" | "pglite";
+  /** Migration SQL, applied in order before `schemas`. DDL only; put rows in `seed`. */
+  readonly migrations?: readonly string[];
+  /** Declarative schema SQL (`supabase/schemas/*.sql`), applied after `migrations`. */
+  readonly schemas?: readonly string[];
+  /** Seed SQL, run after the schema as the database owner (RLS does not apply). */
+  readonly seed?: string | readonly string[];
+  /** The shared HS256 secret. Defaults to a random one. */
+  readonly jwtSecret?: string;
+}
+interface LiteStack extends AsyncDisposable {
+  /** A placeholder URL: requests never leave the process. */
+  readonly url: string;
+  readonly publishableKey: string;
+  readonly secretKey: string;
+  readonly jwtSecret: string;
+  /** Routes requests to the in-process Lite app. Pass it as `fetch` to `createServer`. */
+  readonly fetch: typeof globalThis.fetch;
+  /** The settings `createServer(betterSupabase, { env, backend: "lite", fetch })` takes. */
+  readonly env: BetterSupabaseEnv;
+  /** supabase-js with the publishable key, as an anonymous caller. */
+  readonly supabase: SupabaseClient;
+  /** supabase-js with the secret key: bypasses RLS, for setup. */
+  readonly admin: SupabaseClient;
+  /** A user with an HS256 token, as `asUser` signs it, whose clients route through `fetch`. */
+  asUser<M extends AnyModels, D, F extends AnyFunctions, E>(betterSupabase: BetterSupabase<M, D, F, E>, claims: TestJwtClaims): Promise<TestUser<M, F, E>>;
+  /** Closes the database. */
+  close(): Promise<void>;
+}
+/**
+ * Supabase Lite in this process, for tests without Docker: an in-memory
+ * database with your schema, Auth with fresh API keys, and supabase-js
+ * clients whose requests go straight to Lite's `fetch` handler (no port).
+ *
+ * ```ts
+ * await using stack = await liteStack({ schemas: [await readFile("supabase/schemas/notes.sql", "utf8")] });
+ * const alice = await stack.asUser(betterSupabase, { sub: aliceId });
+ * expect(await alice.db.notes.count().orThrow()).toBe(1);
+ * ```
+ */
+export declare function liteStack(options?: LiteStackOptions): Promise<LiteStack>;
+//#endregion
 //#region src/testing/budget.d.ts
 /** The part of a Playwright `Request` the budget check reads. */
 interface BudgetRequest {
@@ -276,102 +331,6 @@ export declare class ConformanceError extends Error {
   readonly report: ConformanceReport;
   constructor(report: ConformanceReport);
 }
-type AnySupabase$1 = BetterSupabase<any, any, any, any>;
-interface TestExecutorOptions {
-  /** A definition whose schema matches the executor's database. Install no plugins. */
-  readonly betterSupabase: AnySupabase$1;
-  /** App key of a table with rows the executor can read. Defaults to the first table. */
-  readonly table?: string;
-  /** A row to insert and delete again, to check writes. Skips write checks when omitted. */
-  readonly create?: Readonly<Record<string, unknown>>;
-}
-/**
- * Proves an `Executor` meets the contract: rows keyed by the selection's
- * aliases, counts, `aborted` errors, failures returned as `Result`s rather
- * than thrown, and (with `create`) a write round trip and a `deleteMany`
- * that `maxAffected` refuses without deleting anything.
- *
- * ```ts
- * it('conforms', () => testExecutor(myExecutor, { betterSupabase, table: 'tags', create: { name: 'x' } }));
- * ```
- */
-export declare function testExecutor(executor: Executor, options: TestExecutorOptions): Promise<ConformanceReport>;
-/**
- * Proves a `CacheAdapter` accepts table and row targets, repeated and
- * concurrent calls, and never mutates its input.
- */
-export declare function testCacheAdapter(adapter: CacheAdapter, options?: {
-  readonly table?: string;
-}): Promise<ConformanceReport>;
-interface TestEventSinkOptions {
-  /** Events the sink delivered, for sinks that can be read back (an outbox, a test queue). */
-  readonly received?: () => readonly CloudEvent[] | Promise<readonly CloudEvent[]>;
-}
-/** Proves an `EventSink` accepts empty and full batches without mutating them, and delivers them when readable. */
-export declare function testEventSink(sink: EventSink, options?: TestEventSinkOptions): Promise<ConformanceReport>;
-interface TestQueueBackendOptions {
-  /** A queue the kit may fill and drain; use a fresh name per run. */
-  readonly queue: string;
-  /** Check that a repeated dedupe key returns the first id. Defaults to `backend.leases`. */
-  readonly dedupe?: boolean;
-}
-/**
- * Proves a `QueueBackend` round-trips payloads, hides claimed messages for
- * their lease, counts attempts, retries and dead-letters on `fail`, and
- * (when it has `leases`) rejects a stale attempt and extends a lease. It
- * writes to `options.queue` on the backend's real store.
- */
-export declare function testQueueBackend(backend: QueueBackend, options: TestQueueBackendOptions): Promise<ConformanceReport>;
-interface TestSupportSessionStoreOptions {
-  /** A user who may start support sessions in the store. */
-  readonly admin: {
-    readonly id: string;
-    readonly claims: Readonly<Record<string, unknown>>;
-  };
-  /** Two other users the admin may view the app as. */
-  readonly targets: readonly [string, string];
-}
-/**
- * Proves a `SupportSessionStore` starts sessions with the input it was
- * given, shows a running session only to its admin, ends the admin's
- * previous session on start, ends a session once, and lists sessions.
- * It writes sessions to the store; they are all ended when it returns.
- */
-export declare function testSupportSessionStore(store: SupportSessionStore, options: TestSupportSessionStoreOptions): Promise<ConformanceReport>;
-interface TestAuthResolverOptions {
-  /** Requests with credentials this resolver owns but that must not verify. */
-  readonly invalid: readonly Request[];
-  /** Requests that must resolve to a user or service, optionally with the expected user id. */
-  readonly valid?: readonly {
-    readonly request: Request;
-    readonly userId?: string;
-  }[];
-  /** A request without this resolver's credentials. Defaults to a bare GET. */
-  readonly unrelated?: Request;
-}
-/**
- * Proves an `AuthResolver` passes on requests it doesn't understand, fails
- * closed (`invalid`, never anon) on bad credentials, and never throws.
- */
-export declare function testAuthResolver(resolver: AuthResolver, options: TestAuthResolverOptions): Promise<ConformanceReport>;
-interface TestPluginOptions {
-  /** The definition without this plugin. */
-  readonly betterSupabase: AnySupabase$1;
-  /** Table to exercise. Defaults to the first table. */
-  readonly table?: string;
-  /** Context the plugin needs, such as `{ tenant }` for `tenant()`. */
-  readonly context?: RequestContext;
-  /** Row for `create`, to exercise `beforeMutation`. */
-  readonly create?: Readonly<Record<string, unknown>>;
-}
-/**
- * Proves a `Plugin` targets API v1, installs cleanly on its own and next to
- * the first-party plugins in either order, adds repository methods without
- * replacing base ones, keeps `context`, `transformQuery` and
- * `beforeMutation` pure and deterministic, and keeps executors'
- * results intact when it wraps them.
- */
-export declare function testPlugin(plugin: AnyPlugin, options: TestPluginOptions): Promise<ConformanceReport>;
 //#endregion
 //#region src/testing/isolation.d.ts
 interface IsolationTenant {
@@ -484,6 +443,117 @@ export declare function isSeed(value: unknown): value is Seed<unknown>;
  */
 export declare function defineSeed<M extends AnyModels, D, F extends AnyFunctions, E, const S extends SeedFixtures<M>>(betterSupabase: BetterSupabase<M, D, F, E>, fixtures: S & ExactSeed<M, S>): Seed<S>;
 //#endregion
+//#region src/testing/kits/auth-resolver.d.ts
+interface TestAuthResolverOptions {
+  /** Requests with credentials this resolver owns but that must not verify. */
+  readonly invalid: readonly Request[];
+  /** Requests that must resolve to a user or service, optionally with the expected user id. */
+  readonly valid?: readonly {
+    readonly request: Request;
+    readonly userId?: string;
+  }[];
+  /** A request without this resolver's credentials. Defaults to a bare GET. */
+  readonly unrelated?: Request;
+}
+/**
+ * Proves an `AuthResolver` passes on requests it doesn't understand, fails
+ * closed (`invalid`, never anon) on bad credentials, and never throws.
+ */
+export declare function testAuthResolver(resolver: AuthResolver, options: TestAuthResolverOptions): Promise<ConformanceReport>;
+//#endregion
+//#region src/testing/kits/cache-adapter.d.ts
+/**
+ * Proves a `CacheAdapter` accepts table and row targets, repeated and
+ * concurrent calls, and never mutates its input.
+ */
+export declare function testCacheAdapter(adapter: CacheAdapter, options?: {
+  readonly table?: string;
+}): Promise<ConformanceReport>;
+//#endregion
+//#region src/testing/kits/event-sink.d.ts
+interface TestEventSinkOptions {
+  /** Events the sink delivered, for sinks that can be read back (an outbox, a test queue). */
+  readonly received?: () => readonly CloudEvent[] | Promise<readonly CloudEvent[]>;
+}
+/** Proves an `EventSink` accepts empty and full batches without mutating them, and delivers them when readable. */
+export declare function testEventSink(sink: EventSink, options?: TestEventSinkOptions): Promise<ConformanceReport>;
+//#endregion
+//#region src/testing/kits/executor.d.ts
+type AnySupabase$1 = BetterSupabase<any, any, any, any>;
+interface TestExecutorOptions {
+  /** A definition whose schema matches the executor's database. Install no plugins. */
+  readonly betterSupabase: AnySupabase$1;
+  /** App key of a table with rows the executor can read. Defaults to the first table. */
+  readonly table?: string;
+  /** A row to insert and delete again, to check writes. Skips write checks when omitted. */
+  readonly create?: Readonly<Record<string, unknown>>;
+}
+/**
+ * Proves an `Executor` meets the contract: rows keyed by the selection's
+ * aliases, counts, `aborted` errors, failures returned as `Result`s rather
+ * than thrown, and (with `create`) a write round trip and a `deleteMany`
+ * that `maxAffected` refuses without deleting anything.
+ *
+ * ```ts
+ * it('conforms', () => testExecutor(myExecutor, { betterSupabase, table: 'tags', create: { name: 'x' } }));
+ * ```
+ */
+export declare function testExecutor(executor: Executor, options: TestExecutorOptions): Promise<ConformanceReport>;
+//#endregion
+//#region src/testing/kits/plugin.d.ts
+interface TestPluginOptions {
+  /** The definition without this plugin. */
+  readonly betterSupabase: AnySupabase$1;
+  /** Table to exercise. Defaults to the first table. */
+  readonly table?: string;
+  /** Context the plugin needs, such as `{ tenant }` for `tenant()`. */
+  readonly context?: RequestContext;
+  /** Row for `create`, to exercise `beforeMutation`. */
+  readonly create?: Readonly<Record<string, unknown>>;
+}
+/**
+ * Proves a `Plugin` targets API v1, installs cleanly on its own and next to
+ * the first-party plugins in either order, adds repository methods without
+ * replacing base ones, keeps `context`, `transformQuery` and
+ * `beforeMutation` pure and deterministic, and keeps executors'
+ * results intact when it wraps them.
+ */
+export declare function testPlugin(plugin: AnyPlugin, options: TestPluginOptions): Promise<ConformanceReport>;
+//#endregion
+//#region src/testing/kits/queue-backend.d.ts
+interface TestQueueBackendOptions {
+  /** A queue the kit may fill and drain; use a fresh name per run. */
+  readonly queue: string;
+  /** Check that a repeated dedupe key returns the first id. Defaults to `backend.leases`. */
+  readonly dedupe?: boolean;
+}
+/**
+ * Proves a `QueueBackend` round-trips payloads, hides claimed messages for
+ * their lease, counts attempts, retries and dead-letters on `fail`, and
+ * (when it has `leases`) rejects a stale attempt and extends a lease. It
+ * writes to `options.queue` on the backend's real store.
+ */
+export declare function testQueueBackend(backend: QueueBackend, options: TestQueueBackendOptions): Promise<ConformanceReport>;
+//#endregion
+//#region src/testing/kits/support-session-store.d.ts
+interface TestSupportSessionStoreOptions {
+  /** A user who may start support sessions in the store. */
+  readonly admin: {
+    readonly id: string;
+    readonly claims: Readonly<Record<string, unknown>>;
+  };
+  /** Two other users the admin may view the app as. */
+  readonly targets: readonly [string, string];
+}
+/**
+ * Proves a `SupportSessionStore` starts sessions with the input it was
+ * given, shows a running session only to its admin, ends the admin's
+ * previous session on start, ends a session once, lists sessions and, with
+ * `expire`, leaves running sessions alone.
+ * It writes sessions to the store; they are all ended when it returns.
+ */
+export declare function testSupportSessionStore(store: SupportSessionStore, options: TestSupportSessionStoreOptions): Promise<ConformanceReport>;
+//#endregion
 //#region src/testing/adapter.d.ts
 type AnySupabase = BetterSupabase<any, any, any, any>;
 /** What the adapter module asks a handler to do with the caller's context. */
@@ -540,6 +610,67 @@ export declare function testBlockTransportMiddleware(middleware: BlockTransportM
  */
 export declare function testAuthorizationProvider(provider: AuthorizationProvider): Promise<ConformanceReport>;
 //#endregion
+//#region src/testing/authorizer.d.ts
+interface TestAuthorizerOptions<Ref> {
+  /** Permission references to check; give at least one. */
+  readonly permissions: readonly Ref[];
+  /** A permission the authorizer grants for `context`, checked end to end. */
+  readonly granted?: {
+    readonly permission: Ref;
+    readonly context: RequestContext;
+  };
+  /** A permission reference the authorizer doesn't know; it must never be granted. */
+  readonly unknown?: Ref;
+}
+/**
+ * Proves an `Authorizer` targets API v1, keys every permission to the same
+ * string each time (and after a JSON round trip, so references are plain
+ * JSON), answers every request with a known outcome without mutating it,
+ * keeps the request order in `evaluations`, decides from the subject rather
+ * than the input (forged roles, claims and memberships in the resource
+ * properties or the context never turn a denial into a grant), never grants an unknown permission, and grants
+ * `options.granted` through `checkPermission`.
+ */
+export declare function testAuthorizer<Ref>(authorizer: Authorizer<Ref>, options: TestAuthorizerOptions<Ref>): Promise<ConformanceReport>;
+interface StaticAuthorizerOptions<Ref extends string> {
+  /**
+   * Permissions per role. The role is the subject's `role` property (the
+   * Postgres role: `authenticated`, `service_role`), or its type (`anon`).
+   */
+  readonly roles?: Readonly<Record<string, readonly Ref[]>>;
+  /** Permissions per subject id, on top of the role's. */
+  readonly grants?: Readonly<Record<string, readonly Ref[]>>;
+  /** Permissions that answer `approval-required` with the approval id `approval:<permission>`. */
+  readonly approvals?: readonly Ref[];
+}
+/**
+ * An in-memory `Authorizer` for tests and examples: permissions come from
+ * the subject's `role` and id only, never from the request's resource or
+ * context, and it ignores `subject.properties.claims`.
+ */
+export declare function staticAuthorizer<Ref extends string>(options: StaticAuthorizerOptions<Ref>): Authorizer<Ref>;
+//#endregion
+//#region src/testing/document-format.d.ts
+interface TestDocumentFormatOptions<V extends string = string> {
+  /**
+   * The model to lower. Defaults to a small model with a route, a stream,
+   * a webhook, a Realtime channel and a workflow.
+   */
+  readonly model?: ApiModel;
+  /** The versions to lower. Defaults to every version the format lists. */
+  readonly versions?: readonly V[];
+}
+/**
+ * Proves a `DocumentFormat` targets API v1, lists versions with pins and a
+ * known status, defaults to a version it lists that is not a preview, and,
+ * for every version: lowers the model without mutating it (also when the
+ * model is frozen), renders the same document twice, renders plain JSON or
+ * text, reports diagnostics with a kebab-case code, a severity and a
+ * message, finds no error in its own output with `lint`, and names a bare,
+ * stable file.
+ */
+export declare function testDocumentFormat<F extends AnyDocumentFormat>(format: F, options?: TestDocumentFormatOptions<VersionOf<F>>): Promise<ConformanceReport>;
+//#endregion
 //#region src/testing/generator.d.ts
 interface TestGeneratorOptions {
   /** Schema metadata to generate from: `schema.meta` from your generated module. */
@@ -719,4 +850,4 @@ interface TestCredentialProviderOptions {
  */
 export declare function testCredentialProvider(provider: CredentialProvider, options: TestCredentialProviderOptions): Promise<ConformanceReport>;
 //#endregion
-export type { AdapterRun, BudgetPage, BudgetRequest, BudgetResponse, ConformanceCheck, ConformanceReport, DbBudgetExpectation, ExactSeed, InstantBrowserContext, InstantExpectation, InstantLocator, InstantPage, IsolationTable, IsolationTables, IsolationTenant, LocalStack, MeasuredRender, ResponseBudgetExpectation, ResponseDbStats, Seed, SeedFixtures, SigningJwk, SupabaseClaimFixture, SupabaseClaimFixtureName, TenantIsolationOptions, TestAdapterOptions, TestAiTaskRunnerOptions, TestAuthResolverOptions, TestBuilderStarterOptions, TestChatStateOptions, TestCredentialProviderOptions, TestEmbedderOptions, TestEveDocumentBackendOptions, TestEventSinkOptions, TestExecutorOptions, TestGeneratorOptions, TestGraphCompilerOptions, TestJwtClaims, TestNotificationChannelOptions, TestPluginOptions, TestQueueBackendOptions, TestSigner, TestStreamStoreOptions, TestSupportSessionStoreOptions, TestUser, TestWebhookSecretStoreOptions, TestWebhookSignerOptions, TestWebhookTransportOptions };
+export type { AdapterRun, BudgetPage, BudgetRequest, BudgetResponse, ConformanceCheck, ConformanceReport, DbBudgetExpectation, ExactSeed, InstantBrowserContext, InstantExpectation, InstantLocator, InstantPage, IsolationTable, IsolationTables, IsolationTenant, LiteStack, LiteStackOptions, LocalStack, MeasuredRender, ResponseBudgetExpectation, ResponseDbStats, Seed, SeedFixtures, SigningJwk, StaticAuthorizerOptions, SupabaseClaimFixture, SupabaseClaimFixtureName, TenantIsolationOptions, TestAdapterOptions, TestAiTaskRunnerOptions, TestAuthResolverOptions, TestAuthorizerOptions, TestBuilderStarterOptions, TestChatStateOptions, TestCredentialProviderOptions, TestDocumentFormatOptions, TestEmbedderOptions, TestEveDocumentBackendOptions, TestEventSinkOptions, TestExecutorOptions, TestGeneratorOptions, TestGraphCompilerOptions, TestJwtClaims, TestNotificationChannelOptions, TestPluginOptions, TestQueueBackendOptions, TestSigner, TestStreamStoreOptions, TestSupportSessionStoreOptions, TestUser, TestWebhookSecretStoreOptions, TestWebhookSignerOptions, TestWebhookTransportOptions };