better-supabase 0.7.1 → 0.8.0

package/dist/credentials/index.js

@@ -1,10 +1,11 @@
-import { n as dbError } from "../errors-B11Duf73.js";
-import { a as ok, r as err, t as AsyncResult } from "../result-DzUbqgdW.js";
-import { a as tenantCredentialRef, i as subjectFor, n as credentialRefInTenant, r as foreignCredentialRef } from "../provider-Di3sRutW.js";
-import { n as rpcTransport, r as sqlTransport } from "../block-transport-BLr-ZgLc.js";
-import { i as blockCall } from "../block-helpers-DWHxHsEQ.js";
-import { c as timingSafeEqual, d as verifyWebhook, l as verifySharedSecret } from "../verify-DL41hbvY.js";
-import { n as revokeIfConfigured, t as credentialRouter } from "../compose-BIBNgAnq.js";
+import { n as dbError } from "../errors-2M6CKMP4.js";
+import { a as ok, r as err, t as AsyncResult } from "../result-DEqHCMKP.js";
+import { a as tenantCredentialRef, i as subjectFor, n as credentialRefInTenant, r as foreignCredentialRef } from "../provider-DxRTex4x.js";
+import { n as hmacHex, r as timingSafeEqual } from "../hmac-DCud0myt.js";
+import { a as verifyWebhook, i as verifySharedSecret } from "../signatures-DsWv_bYR.js";
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../block-transport-bAKh-dGc.js";
+import { i as blockCall } from "../block-helpers-Cy3pB96I.js";
+import { n as revokeIfConfigured, t as credentialRouter } from "../compose-BHej1acw.js";
 //#region src/credentials/vault.ts
 const MAX_CACHED = 256;
 const invalidRef = (message) => err(dbError("invalid_input", message, { hint: "CREDENTIAL_REF_INVALID" }));
@@ -48,15 +49,6 @@ function headersFor(ref, token) {
 	const scheme = ref.scheme === void 0 ? "Bearer" : ref.scheme;
 	return { [(ref.header ?? "authorization").toLowerCase()]: scheme === null ? token : `${scheme} ${token}` };
 }
-const encoder = /* @__PURE__ */ new TextEncoder();
-async function hmacHex(secret, body) {
-	const key = await crypto.subtle.importKey("raw", encoder.encode(secret), {
-		name: "HMAC",
-		hash: "SHA-256"
-	}, false, ["sign"]);
-	const signature = new Uint8Array(await crypto.subtle.sign("HMAC", key, encoder.encode(body)));
-	return Array.from(signature, (byte) => byte.toString(16).padStart(2, "0")).join("");
-}
 async function verifyWith(ref, scheme, request, secret) {
 	switch (scheme) {
 		case "standard-webhooks": {
@@ -165,4 +157,4 @@ function vaultCredentials(options) {
 	};
 }
 //#endregion
-export { credentialRefInTenant, credentialRouter, foreignCredentialRef, revokeIfConfigured, rpcTransport, sqlTransport, subjectFor, tenantCredentialRef, vaultCredentials };
+export { credentialRefInTenant, credentialRouter, dbTransport, foreignCredentialRef, revokeIfConfigured, rpcTransport, sqlTransport, subjectFor, tenantCredentialRef, vaultCredentials };

package/dist/{cron-DVPUg5k3.js → cron-D25Ukpxy.js}

@@ -1,4 +1,4 @@
-import { t as temporal } from "./temporal-required-BVvW7SYJ.js";
+import { t as temporal } from "./temporal-required-BtynQtM-.js";
 //#region src/blocks/jobs/cron.ts
 const MACROS = {
 	"@yearly": "0 0 1 1 *",

package/dist/cron-route-D2AN9SA1.js

@@ -0,0 +1,24 @@
+import { n as dbError } from "./errors-2M6CKMP4.js";
+import { a as methodNotAllowed, o as problemResponse } from "./problem-CJvFeGu7.js";
+import { i as verifySharedSecret } from "./signatures-DsWv_bYR.js";
+//#region src/core/cron-route.ts
+/**
+* A `GET` or `POST` handler for a cron caller such as Vercel Cron. It throws
+* when the secret is missing, answers 405 to other methods and 401 without the
+* bearer secret, and only then calls `handle` with the request path.
+*/
+function cronRoute(guard, handle) {
+	const { name, secret } = guard;
+	if (!secret) throw new TypeError(`${name}Route needs a secret, such as process.env.CRON_SECRET`);
+	return async (request) => {
+		const instance = new URL(request.url).pathname;
+		if (request.method !== "GET" && request.method !== "POST") return methodNotAllowed(["GET", "POST"]);
+		if (!verifySharedSecret(request, secret)) return problemResponse(dbError("unauthorized", `The ${name} route needs its bearer secret`), {
+			instance,
+			format: guard.problem
+		});
+		return handle(request, instance);
+	};
+}
+//#endregion
+export { cronRoute as t };

package/dist/{csv-DCK-PT1n.js → csv-BZnHA1Py.js}

@@ -1,4 +1,4 @@
-//#region src/blocks/csv.ts
+//#region src/core/csv.ts
 const FORMULA = /^[=+\-@\t\r]/;
 function cell(value, escapeFormulas) {
 	if (value === null || value === void 0) return "";