better-supabase 0.7.1 → 0.9.0

package/dist/embeddings-4ZvFzjsU.js

@@ -1,127 +0,0 @@
-import { t as DbException } from "./db-exception-CnWcYPxL.js";
-import { embedMany, jsonSchema, rerank, tool } from "ai";
-//#region src/ai-sdk/embeddings/embeddings.ts
-/** The name of an SDK model: the string itself, or `provider/modelId`. */
-function modelName(model) {
-	return typeof model === "string" ? model : `${model.provider}/${model.modelId}`;
-}
-/** An `Embedder` for the knowledge and memory blocks over `embedMany`. */
-function embedWith(model, options = {}) {
-	return {
-		apiVersion: 1,
-		model: options.name ?? modelName(model),
-		embed: async (values, embedOptions) => {
-			if (values.length === 0) return [];
-			const { embeddings } = await embedMany({
-				model,
-				values: [...values],
-				maxParallelCalls: options.maxParallelCalls ?? 4,
-				...options.providerOptions === void 0 ? {} : { providerOptions: options.providerOptions },
-				...embedOptions?.signal === void 0 ? {} : { abortSignal: embedOptions.signal }
-			});
-			return embeddings;
-		}
-	};
-}
-/** Reorders search hits with a reranking model, keeping the best `topN`. */
-function rerankWith(model, options = {}) {
-	return async (query, hits, rerankOptions) => {
-		if (hits.length <= 1) return hits;
-		const { ranking } = await rerank({
-			model,
-			query,
-			documents: hits.map((hit) => hit.content),
-			...options.topN === void 0 ? {} : { topN: options.topN },
-			...rerankOptions?.signal === void 0 ? {} : { abortSignal: rerankOptions.signal }
-		});
-		return ranking.flatMap((entry) => {
-			const hit = hits[entry.originalIndex];
-			return hit === void 0 ? [] : [{
-				...hit,
-				score: entry.score
-			}];
-		});
-	};
-}
-/**
-* A tool that searches the knowledge base as the caller. Each result id
-* is `documentId#index`, the `sourceId` that `toSourceParts` gives it.
-*/
-function searchTool(knowledge, organizationId, options = {}) {
-	const { description, rerank: reorder, onHits, ...search } = options;
-	return tool({
-		description: description ?? "Search the knowledge base for passages relevant to a query. Cite results by their id.",
-		inputSchema: jsonSchema({
-			type: "object",
-			properties: { query: {
-				type: "string",
-				description: "What to look for"
-			} },
-			required: ["query"],
-			additionalProperties: false
-		}),
-		execute: async ({ query }, { abortSignal }) => {
-			const found = await knowledge.search(organizationId, query, {
-				...search,
-				...abortSignal === void 0 ? {} : { signal: abortSignal }
-			});
-			if (!found.ok) throw new DbException(found.error);
-			const hits = reorder ? await reorder(query, found.data, abortSignal === void 0 ? void 0 : { signal: abortSignal }) : found.data;
-			onHits?.(hits);
-			return { results: hits.map((hit) => ({
-				id: sourceId(hit),
-				title: hit.title,
-				content: hit.content
-			})) };
-		}
-	});
-}
-const sourceId = (hit) => `${hit.documentId}#${String(hit.index)}`;
-/** One `source-document` part per document among the hits, in hit order. */
-function toSourceParts(hits) {
-	const seen = /* @__PURE__ */ new Set();
-	const parts = [];
-	for (const hit of hits) {
-		if (seen.has(hit.documentId)) continue;
-		seen.add(hit.documentId);
-		parts.push({
-			type: "source-document",
-			sourceId: sourceId(hit),
-			mediaType: "text/plain",
-			title: hit.title
-		});
-	}
-	return parts;
-}
-function supabaseSession(model) {
-	const Session = globalThis.Supabase?.ai?.Session;
-	if (typeof Session !== "function") throw new TypeError("supabaseEmbed runs in Supabase Edge Functions, where Supabase.ai.Session exists; pass session elsewhere");
-	return new Session(model);
-}
-/**
-* An `Embedder` over the model built into Supabase Edge Functions. Set the
-* module's `dimensions` option to the model's size (384 for `gte-small`).
-*/
-function supabaseEmbed(options = {}) {
-	const name = options.model ?? "gte-small";
-	let session = options.session;
-	return {
-		apiVersion: 1,
-		model: `supabase/${name}`,
-		embed: async (values) => {
-			session ??= supabaseSession(name);
-			const vectors = [];
-			for (const value of values) {
-				const output = await session.run(value, {
-					mean_pool: true,
-					normalize: true
-				});
-				if (!Array.isArray(output) || !output.every((x) => typeof x === "number")) throw new TypeError(`Supabase.ai.Session returned no vector for ${name}`);
-				vectors.push(output);
-			}
-			return vectors;
-		}
-	};
-}
-//#endregion
-export { supabaseEmbed as a, searchTool as i, modelName as n, toSourceParts as o, rerankWith as r, embedWith as t };

package/dist/embeddings-C9KGQnXt.d.ts

@@ -1,68 +0,0 @@
-import { n as Embedder, o as KnowledgeHit, r as Knowledge, u as KnowledgeSearchOptions } from "./knowledge-BXBbT0Tr.js";
-import { EmbeddingModel, RerankingModel, SourceDocumentUIPart, Tool, embedMany } from "ai";
-//#region src/ai-sdk/embeddings/embeddings.d.ts
-type ProviderOptions = Parameters<typeof embedMany>[0]["providerOptions"];
-interface EmbedWithOptions {
-  /** Concurrent calls when the values need more than one. Default 4. */
-  readonly maxParallelCalls?: number;
-  readonly providerOptions?: ProviderOptions;
-  /** The name stored with each embedding; the provider and model id by default. */
-  readonly name?: string;
-}
-/** The name of an SDK model: the string itself, or `provider/modelId`. */
-declare function modelName(model: string | {
-  readonly provider: string;
-  readonly modelId: string;
-}): string;
-/** An `Embedder` for the knowledge and memory blocks over `embedMany`. */
-declare function embedWith(model: EmbeddingModel, options?: EmbedWithOptions): Embedder;
-type Reranker = (query: string, hits: readonly KnowledgeHit[], options?: {
-  readonly signal?: AbortSignal;
-}) => Promise<readonly KnowledgeHit[]>;
-/** Reorders search hits with a reranking model, keeping the best `topN`. */
-declare function rerankWith(model: RerankingModel, options?: {
-  readonly topN?: number;
-}): Reranker;
-interface SearchToolOptions extends Omit<KnowledgeSearchOptions, "signal"> {
-  readonly description?: string;
-  /** Reranks the hits before the model sees them. */
-  readonly rerank?: Reranker;
-  /** Called with the hits, to stream them as source parts. */
-  readonly onHits?: (hits: readonly KnowledgeHit[]) => void;
-}
-interface SearchToolResult {
-  readonly results: readonly {
-    readonly id: string;
-    readonly title: string;
-    readonly content: string;
-  }[];
-}
-/**
- * A tool that searches the knowledge base as the caller. Each result id
- * is `documentId#index`, the `sourceId` that `toSourceParts` gives it.
- */
-declare function searchTool(knowledge: Knowledge, organizationId: string, options?: SearchToolOptions): Tool<{
-  query: string;
-}, SearchToolResult>;
-/** One `source-document` part per document among the hits, in hit order. */
-declare function toSourceParts(hits: readonly KnowledgeHit[]): SourceDocumentUIPart[];
-/** `Supabase.ai.Session` in Supabase Edge Functions, typed structurally. */
-interface SupabaseAiSession {
-  run(input: string, options: {
-    readonly mean_pool: boolean;
-    readonly normalize: boolean;
-  }): Promise<unknown>;
-}
-interface SupabaseEmbedOptions {
-  /** The built-in model. Default `gte-small` (384 dimensions). */
-  readonly model?: string;
-  /** A session to use instead of `new Supabase.ai.Session(model)`. */
-  readonly session?: SupabaseAiSession;
-}
-/**
- * An `Embedder` over the model built into Supabase Edge Functions. Set the
- * module's `dimensions` option to the model's size (384 for `gte-small`).
- */
-declare function supabaseEmbed(options?: SupabaseEmbedOptions): Embedder;
-//#endregion
-export { SupabaseAiSession as a, modelName as c, supabaseEmbed as d, toSourceParts as f, SearchToolResult as i, rerankWith as l, Reranker as n, SupabaseEmbedOptions as o, SearchToolOptions as r, embedWith as s, EmbedWithOptions as t, searchTool as u };

package/dist/ended-XjeGQ5XW.d.ts

@@ -1,63 +0,0 @@
-import { c as StoredSession, n as CookieOptions } from "./session-ChiXDZdZ.js";
-//#region src/auth/refresh.d.ts
-interface RefreshOptions {
-  readonly url: string;
-  readonly publishableKey: string;
-  /**
-   * Sends `Sb-Forwarded-For: ip` with the secret key, so Auth rate-limits the
-   * refresh by the user's IP (when IP forwarding is on for the project).
-   */
-  readonly forwardedFor?: {
-    readonly ip: string;
-    readonly secretKey: string;
-  };
-  readonly fetch?: typeof fetch;
-  /**
-   * Milliseconds before a refresh counts as a network failure (the session is
-   * kept). 5000 by default.
-   */
-  readonly timeoutMs?: number;
-  /** Epoch milliseconds, the unit JWT `exp` and `iat` math needs. */
-  readonly now?: () => number;
-}
-type RefreshOutcome = {
-  readonly ok: true;
-  readonly session: StoredSession;
-  /** Served from a concurrent or just-finished refresh of the same token. */
-  readonly shared?: boolean;
-} | {
-  readonly ok: false;
-  /** `rejected`: the refresh token is dead, sign the user out. `network`: keep the session and retry later. */
-  readonly reason: "rejected" | "network";
-  readonly status?: number;
-  /** The Auth server's `error_code`, such as `user_banned` or `refresh_token_not_found`. */
-  readonly code?: string;
-  readonly message: string;
-};
-/**
- * Exchanges a refresh token for a new session. Concurrent calls with the same
- * token share one request, and a successful result is reused for a short
- * window so parallel requests carrying the old cookie converge on one session.
- */
-declare function refreshSession(refreshToken: string, options: RefreshOptions): Promise<RefreshOutcome>;
-//#endregion
-//#region src/auth/ended.d.ts
-/** `banned`: Auth rejected the token with `error_code: "user_banned"`. */
-type SessionStatus = "active" | "ended" | "banned" | "unknown";
-interface SessionStatusOptions {
-  readonly url: string;
-  readonly publishableKey: string;
-  readonly cookieName?: string;
-  readonly fetch?: typeof fetch;
-  readonly timeoutMs?: number;
-  readonly now?: () => number;
-}
-interface ClearSessionCookiesOptions {
-  readonly url: string;
-  readonly cookieName?: string;
-  readonly cookie?: CookieOptions;
-}
-declare function sessionStatus(input: Request | string, options: SessionStatusOptions): Promise<SessionStatus>;
-declare function clearSessionCookies<R extends Response>(request: Request, response: R, options: ClearSessionCookiesOptions): R;
-//#endregion
-export { sessionStatus as a, refreshSession as c, clearSessionCookies as i, SessionStatus as n, RefreshOptions as o, SessionStatusOptions as r, RefreshOutcome as s, ClearSessionCookiesOptions as t };

package/dist/entitlements-BKSVGtrG.d.ts

@@ -1,51 +0,0 @@
-import { t as AuthSession } from "./view-CF7ihnkg.js";
-//#region src/auth/entitlements.d.ts
-/**
- * One entry of the `memberships` claim when a hook writes it as a list.
- * Hooks strip `null`s, so optional fields are absent rather than `null`.
- */
-interface MembershipClaim {
-  /** The scope the membership is in, e.g. `tenant` or `organization`. */
-  readonly scope: string;
-  readonly id: string;
-  /** Parent scopes, e.g. `{ organization: '...' }` for a project membership. */
-  readonly within?: Readonly<Record<string, string>>;
-  readonly roles: readonly string[];
-  readonly via?: string;
-  /** Unix seconds. */
-  readonly expiresAt?: number;
-  readonly grantedBy?: string;
-  readonly reason?: string;
-  readonly member?: {
-    readonly group: string;
-  };
-  readonly managedBy?: "idp";
-  /** Seats, not plan features: those are in the `features` claim. */
-  readonly entitlements?: readonly string[];
-}
-/**
- * Entitlement keys of the `features` claim: the literal union when
- * `betterSupabase.claims(schema)` declares one (`z.enum([...])`), otherwise `string`.
- */
-type EntitlementKey<C> = C extends {
-  readonly features?: infer F;
-} ? NonNullable<F> extends Readonly<Record<string, readonly (infer K)[]>> ? K extends string ? K : string : string : string;
-/** Where `hasEntitlement` reads the features claim, and its short codes. */
-interface EntitlementClaimOptions {
-  /** `config.claims.features`, default `features`. */
-  readonly claim?: string;
-  /** `entitlements.claim.keys`: the short code written for each feature key. */
-  readonly keys?: Readonly<Record<string, string>>;
-}
-/**
- * Whether the session's plan-features claim grants `key` in `tenantId`.
- * `claim` is `config.claims.features` (default `features`), the claim
- * `better_supabase.feature_claims()` fills, or `{ claim, keys }` when
- * `entitlements.claim.keys` writes short codes. The claim is as fresh as the
- * token: enforce it in RLS with `better_supabase.has_entitlement()`, and
- * refresh the session after checkout. A tenant left out by
- * `entitlements.claim.maxTenants` reads as not granted.
- */
-declare function hasEntitlement<C>(session: AuthSession<C>, tenantId: string, key: EntitlementKey<C>, claim?: string | EntitlementClaimOptions): boolean;
-//#endregion
-export { hasEntitlement as i, EntitlementKey as n, MembershipClaim as r, EntitlementClaimOptions as t };

package/dist/entitlements-DRl6ZJUm.js

@@ -1,24 +0,0 @@
-import { t as AsyncResult } from "./result-DzUbqgdW.js";
-import { C as run } from "./block-helpers-DWHxHsEQ.js";
-//#region src/blocks/entitlements/entitlements.ts
-/** The Stripe event sent when a customer's active entitlements change. */
-const ENTITLEMENTS_UPDATED = "entitlements.active_entitlement_summary.updated";
-function stripeCustomerOf(payload) {
-	if (typeof payload !== "object" || payload === null) return void 0;
-	const customer = (payload.data?.object)?.customer;
-	if (typeof customer === "string") return customer;
-	const id = customer?.id;
-	return typeof id === "string" ? id : void 0;
-}
-/**
-* Users whose `memberships` claim carries the entitlements of the Stripe
-* customer in an `entitlements.active_entitlement_summary.updated` event, so
-* a job can invalidate their sessions. Empty for other payloads.
-*/
-function entitlementMembers(sql, payload) {
-	const customer = stripeCustomerOf(payload);
-	if (customer === void 0) return AsyncResult.ok([]);
-	return run(() => sql.queryRaw("select user_id from better_supabase.entitlement_members($1) as user_id", [customer])).map((rows) => rows.map((row) => row.user_id));
-}
-//#endregion
-export { entitlementMembers as n, ENTITLEMENTS_UPDATED as t };

package/dist/envelope-DqnYGRw7.js

@@ -1,47 +0,0 @@
-import { o as tenantFrom, s as tenantPathsFor } from "./claims-PqzCxaTD.js";
-import { n as impersonatorClaim, r as impersonatorOf } from "./impersonation-DcqaTBHx.js";
-//#region src/blocks/jobs/envelope.ts
-/** Marks a payload that carries a job context; pgmq stores it as the payload. */
-const ENVELOPE = "$bs";
-/** Wraps a payload with the actor and tenant of `context`, when it has either. */
-function withContext(payload, context) {
-	if (!context) return payload;
-	const tenant = tenantFrom(context, tenantPathsFor(void 0));
-	const impersonator = context.claims ? impersonatorOf(context.claims) : void 0;
-	const recorded = {
-		...context.actor ? { actor: context.actor } : {},
-		...tenant === void 0 ? {} : { tenant },
-		...impersonator ? { act: impersonatorClaim(impersonator) } : {}
-	};
-	if (!recorded.actor && recorded.tenant === void 0) return payload;
-	return {
-		[ENVELOPE]: 1,
-		context: recorded,
-		payload
-	};
-}
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isActor(value) {
-	return isRecord(value) && typeof value["id"] === "string" && (value["kind"] === "user" || value["kind"] === "service" || value["kind"] === "anon");
-}
-/** Splits a stored payload into the payload and its recorded context. */
-function unwrap(stored) {
-	if (!isRecord(stored) || stored[ENVELOPE] !== 1 || !Object.hasOwn(stored, "payload")) return {
-		payload: stored,
-		context: {}
-	};
-	const { actor, tenant, act } = isRecord(stored["context"]) ? stored["context"] : {};
-	const impersonator = act === void 0 ? void 0 : impersonatorOf({ act });
-	return {
-		payload: stored["payload"],
-		context: {
-			...isActor(actor) ? { actor } : {},
-			...typeof tenant === "string" && tenant.length > 0 ? { tenant } : {},
-			...impersonator ? { claims: { act: impersonatorClaim(impersonator) } } : {}
-		}
-	};
-}
-//#endregion
-export { withContext as n, unwrap as t };

package/dist/errors-B11Duf73.js

@@ -1,266 +0,0 @@
-import { t as DbException } from "./db-exception-CnWcYPxL.js";
-//#region src/core/errors.ts
-const STATUS = {
-	not_found: 404,
-	unauthorized: 401,
-	forbidden: 403,
-	conflict: 409,
-	foreign_key: 409,
-	check: 422,
-	not_null: 422,
-	exclusion: 409,
-	invalid_input: 400,
-	invalid_value: 500,
-	raised: 400,
-	timeout: 504,
-	serialization: 409,
-	network: 503,
-	aborted: 499,
-	invalid_request: 400,
-	validation: 422,
-	multiple_rows: 409,
-	stale: 412,
-	max_affected: 400,
-	rate_limited: 429,
-	quota_exceeded: 429,
-	unsupported: 501,
-	unexpected: 500
-};
-function statusOf(kind) {
-	return STATUS[kind];
-}
-/** Creates a `DbError` with the default status for its kind. */
-function dbError(kind, message, ...[extra]) {
-	const error = {
-		kind,
-		message,
-		status: STATUS[kind]
-	};
-	if (extra) {
-		for (const [key, value] of Object.entries(extra)) if (value !== void 0) error[key] = value;
-	}
-	return error;
-}
-function isDbError(value) {
-	return typeof value === "object" && value !== null && typeof value.kind === "string" && typeof value.message === "string" && typeof value.status === "number";
-}
-/**
-* The `DbError` in a `DbError`, a `DbException`, or an error whose `cause`
-* is a `DbError` (what `betterSupabase.mapError()` mappers should set).
-*/
-function dbErrorOf(value) {
-	if (value instanceof DbException) return value.error;
-	if (value instanceof Error && isDbError(value.cause)) return value.cause;
-	return isDbError(value) ? value : void 0;
-}
-function constraintGuard(kind) {
-	return (error, constraint) => {
-		const found = dbErrorOf(error);
-		if (found?.kind !== kind) return false;
-		return constraint === void 0 || found.constraint === constraint;
-	};
-}
-/**
-* A unique violation, optionally for one constraint. Accepts a `DbError` or a
-* `DbException`. Pass the generated `UniqueConstraint` type to check names:
-* `isConflict<UniqueConstraint>(error, 'customers_organization_id_kvk_key')`.
-*/
-const isConflict = constraintGuard("conflict");
-/** A CHECK violation, optionally for one constraint (`CheckConstraint`). */
-const isCheck = constraintGuard("check");
-/** A foreign key violation, optionally for one constraint (`ForeignKeyConstraint`). */
-const isForeignKey = constraintGuard("foreign_key");
-const CONSTRAINT_IN_MESSAGE = /constraint "([^"]+)"/;
-const KEY_COLUMNS_IN_DETAILS = /^Key \(([^)]+)\)=/;
-const COLUMN_IN_MESSAGE = /column "([^"]+)"/;
-const RETRY_AFTER = /retry after (\d+)/i;
-const PERMISSION_DENIED = /^permission denied for (table|view|sequence|function|schema) (\S+)/;
-/**
-* The SQL compiler fails a write past `maxAffected` by casting this text,
-* followed by `:<rows>`, to an integer: plain SQL has no `raise`.
-*/
-const MAX_AFFECTED_MARKER = "better_supabase:max_affected";
-const MAX_AFFECTED_COUNT = /better_supabase:max_affected:(\d+)/;
-function constraintOf(raw) {
-	return raw.constraint ?? CONSTRAINT_IN_MESSAGE.exec(raw.message ?? "")?.[1];
-}
-/** The hint `better_supabase.check_json_schema()` raises with (the `jsonb-schemas` module). */
-const JSON_SCHEMA_HINT = "JSON_SCHEMA_INVALID";
-/** The prefix of the `jsonb-schemas` check constraints and triggers. */
-const JSON_SCHEMA_CONSTRAINT = "bs_json_";
-const JSON_SCHEMA_COLUMN = /^[\w$]+\.([\w$]+) does not match its JSON Schema/;
-/**
-* One issue per pg_jsonschema error in DETAIL (a JSON array of strings), at
-* the column's database name. Without the list (the check constraint itself
-* failed), one issue for the whole value.
-*/
-function jsonSchemaIssues(raw) {
-	const column = raw.column ?? JSON_SCHEMA_COLUMN.exec(raw.message ?? "")?.[1];
-	const path = column === void 0 ? {} : { path: [column] };
-	let errors;
-	try {
-		errors = JSON.parse(raw.details ?? "");
-	} catch {
-		errors = void 0;
-	}
-	const messages = Array.isArray(errors) ? errors.filter((entry) => typeof entry === "string") : [];
-	return messages.length > 0 ? messages.map((message) => ({
-		message,
-		...path
-	})) : [{
-		message: "The value does not match its JSON Schema",
-		...path
-	}];
-}
-function columnsOf(raw) {
-	return KEY_COLUMNS_IN_DETAILS.exec(raw.details ?? "")?.[1]?.split(",").map((column) => column.trim());
-}
-function optional(raw) {
-	const out = {};
-	if (raw.code) out.code = raw.code;
-	if (raw.details) out.details = raw.details;
-	if (raw.hint) out.hint = raw.hint;
-	return out;
-}
-/** Adds the operation's limit to a `max_affected` error that doesn't name it. */
-function withMaxAffected(error, maxAffected) {
-	return error.kind === "max_affected" && maxAffected !== void 0 && error.maxAffected === void 0 ? {
-		...error,
-		maxAffected
-	} : error;
-}
-/**
-* Maps a PostgREST or Postgres error to a `DbError`. Custom mappers run
-* first; the first one that returns an error wins.
-*/
-function mapDbError(raw, mappers = []) {
-	const fallback = mapBuiltin(raw);
-	for (const mapper of mappers) {
-		const mapped = mapper(raw, fallback);
-		if (mapped) return mapped;
-	}
-	return fallback;
-}
-function mapBuiltin(raw) {
-	const message = raw.message ?? "Unknown database error";
-	const base = optional(raw);
-	const code = raw.code ?? "";
-	if (raw.name === "AbortError" || code === "20" || message.startsWith("AbortError:")) return dbError("aborted", message, base);
-	switch (code) {
-		case "23505": {
-			const extra = {};
-			const constraint = constraintOf(raw);
-			const columns = columnsOf(raw);
-			if (constraint) extra.constraint = constraint;
-			if (columns) extra.columns = columns;
-			return dbError("conflict", message, {
-				...base,
-				...extra
-			});
-		}
-		case "23503": {
-			const extra = {};
-			const constraint = constraintOf(raw);
-			const columns = columnsOf(raw);
-			if (constraint) extra.constraint = constraint;
-			if (columns) extra.columns = columns;
-			return dbError("foreign_key", message, {
-				...base,
-				...extra
-			});
-		}
-		case "23514": {
-			const constraint = constraintOf(raw);
-			if (base.hint === JSON_SCHEMA_HINT || constraint?.startsWith(JSON_SCHEMA_CONSTRAINT)) return dbError("validation", message, {
-				...base,
-				issues: jsonSchemaIssues(raw)
-			});
-			return dbError("check", message, {
-				...base,
-				...constraint ? { constraint } : {}
-			});
-		}
-		case "23502": {
-			const column = raw.column ?? COLUMN_IN_MESSAGE.exec(message)?.[1];
-			return dbError("not_null", message, {
-				...base,
-				...column ? { column } : {}
-			});
-		}
-		case "23P01": {
-			const constraint = constraintOf(raw);
-			return dbError("exclusion", message, {
-				...base,
-				...constraint ? { constraint } : {}
-			});
-		}
-		case "42501": {
-			const object = PERMISSION_DENIED.exec(message);
-			const postgrestHint = base.hint?.startsWith("Grant the required");
-			if (!object || base.hint && !postgrestHint) return dbError("forbidden", message, base);
-			const advice = object[1] === "table" || object[1] === "view" ? `Supabase no longer grants new tables to the Data API roles: add ${object[2]} to \`expose\` and run \`better-supabase sql add grants\`. \`better-supabase doctor\` (BS106) lists every missing grant.` : `Supabase no longer grants new objects to the Data API roles automatically; grant ${object[1] === "function" ? "execute" : "usage"} on ${object[1]} ${object[2]} to the role that needs it.`;
-			return dbError("forbidden", message, {
-				...base,
-				hint: postgrestHint ? `${base.hint} ${advice}` : advice
-			});
-		}
-		case "P0001": return dbError("raised", message, base);
-		case "P0002": return dbError("not_found", message, base);
-		case "57014": return dbError("timeout", message, base);
-		case "40001":
-		case "40P01": return dbError("serialization", message, base);
-		case "PGRST116": return /multiple|more than one/i.test(raw.details ?? message) ? dbError("multiple_rows", message, base) : dbError("not_found", message, base);
-		case "PGRST301":
-		case "PGRST302":
-		case "PGRST303": return dbError("unauthorized", message, base);
-		case "PGRST124": return dbError("max_affected", message, base);
-		case "22P02":
-			if (message.includes("better_supabase:max_affected")) {
-				const affected = MAX_AFFECTED_COUNT.exec(message)?.[1];
-				return dbError("max_affected", `The write affects ${affected ?? "more"} rows, more than maxAffected allows`, { code: "22P02" });
-			}
-			break;
-		case "PGRST123": return dbError("invalid_request", message, {
-			...base,
-			hint: base.hint ?? "PostgREST aggregates are off. Run `alter role authenticator set pgrst.db_aggregates_enabled = 'true'; notify pgrst, 'reload config';` (see BS210), or use better-supabase/postgres."
-		});
-		case "BS429":
-		case "PT429": {
-			const seconds = RETRY_AFTER.exec(raw.details ?? "")?.[1];
-			return dbError("rate_limited", message, {
-				...base,
-				...seconds ? { retryAfter: Number(seconds) } : {}
-			});
-		}
-		case "BSQ29": return dbError("quota_exceeded", message, {
-			...base,
-			...quotaDetails(raw.details)
-		});
-	}
-	if (code.startsWith("22")) return dbError("invalid_input", message, base);
-	if (code.startsWith("PGRST1") || code.startsWith("PGRST2")) return dbError("invalid_request", message, base);
-	if (code.startsWith("08") || /fetch failed|network/i.test(message)) return dbError("network", message, base);
-	return dbError("unexpected", message, base);
-}
-/** `consume_quota` puts `{ meter, limit, retry_after }` in the error's DETAIL. */
-function quotaDetails(details) {
-	let parsed;
-	try {
-		parsed = JSON.parse(details ?? "");
-	} catch {
-		return {};
-	}
-	if (typeof parsed !== "object" || parsed === null) return {};
-	const record = parsed;
-	const field = (key) => record[key];
-	const meter = field("meter");
-	const limit = field("limit");
-	const retryAfter = field("retry_after");
-	return {
-		...typeof meter === "string" ? { meter } : {},
-		...typeof limit === "number" ? { limit } : {},
-		...typeof retryAfter === "number" ? { retryAfter } : {}
-	};
-}
-//#endregion
-export { isConflict as a, mapDbError as c, isCheck as i, statusOf as l, dbError as n, isDbError as o, dbErrorOf as r, isForeignKey as s, MAX_AFFECTED_MARKER as t, withMaxAffected as u };