better-supabase 0.7.1 → 0.9.0

package/dist/resource-BsvzCMlX.js

@@ -1,212 +0,0 @@
-import { n as dbError } from "./errors-B11Duf73.js";
-import { a as ok, r as err } from "./result-DzUbqgdW.js";
-import { n as validate } from "./standard-BK0cqJ7y.js";
-import { a as respond } from "./respond-BUgsXNgk.js";
-//#region src/server/resource.ts
-const INTEGER = /* @__PURE__ */ new Set([
-	"int2",
-	"int4",
-	"int8"
-]);
-function keyValue(table, raw) {
-	const invalid = err(dbError("invalid_input", `${JSON.stringify(raw)} is not a valid ${table.key} key`));
-	const column = table.columns[table.primaryKey[0]];
-	if (column && INTEGER.has(column.type)) {
-		const value = typeof raw === "string" ? Number(raw) : raw;
-		return typeof value === "number" && Number.isSafeInteger(value) ? ok(value) : invalid;
-	}
-	return typeof raw === "string" && raw !== "" ? ok(raw) : invalid;
-}
-/**
-* A cross-site browser request that needed no CORS preflight: a form post
-* riding on the session cookie. Bearer requests and JSON bodies (which need a
-* preflight) pass, as do requests without an `Origin` (not a browser).
-*/
-function crossSiteSimpleRequest(request) {
-	if (request.method === "GET" || request.method === "HEAD") return false;
-	if (request.headers.has("authorization")) return false;
-	const origin = request.headers.get("origin");
-	if (!origin || origin === new URL(request.url).origin) return false;
-	if (request.headers.get("sec-fetch-site") === "same-origin") return false;
-	const type = request.headers.get("content-type") ?? "";
-	return !/^application\/(?:[\w.+-]+\+)?json\b/iu.test(type);
-}
-async function readBody(request) {
-	try {
-		const body = await request.json();
-		if (typeof body === "object" && body !== null && !Array.isArray(body)) return ok(body);
-	} catch {}
-	return err(dbError("invalid_input", "The request body must be a JSON object"));
-}
-function pageArgs(query, max, pagination) {
-	const raw = (name) => {
-		const value = query instanceof URLSearchParams ? query.get(name) : query?.[name];
-		return value === null || value === "" ? void 0 : value;
-	};
-	const read = (name, fallback) => {
-		const value = raw(name);
-		if (value === void 0) return fallback;
-		const number = Number(value);
-		return Number.isSafeInteger(number) && number >= 1 ? number : void 0;
-	};
-	const issues = [];
-	const size = read("size", 50);
-	if (size === void 0 || size > max) issues.push({
-		message: `Must be between 1 and ${max}`,
-		path: ["size"]
-	});
-	const [used, unused] = pagination === "cursor" ? ["after", "page"] : ["page", "after"];
-	if (raw(unused) !== void 0) issues.push({
-		message: `This list pages with \`${used}\``,
-		path: [unused]
-	});
-	const page = read("page", 1);
-	if (pagination === "offset" && page === void 0) issues.push({
-		message: "Must be a positive integer",
-		path: ["page"]
-	});
-	const after = raw("after");
-	if (pagination === "cursor" && after !== void 0 && typeof after !== "string") issues.push({
-		message: "Must be text",
-		path: ["after"]
-	});
-	if (issues.length > 0 || size === void 0) return err(dbError("validation", "Invalid page parameters", { issues }));
-	return pagination === "cursor" ? ok({
-		after: typeof after === "string" ? after : null,
-		size
-	}) : ok({
-		page: page ?? 1,
-		size
-	});
-}
-function asObject(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value) ? ok(value) : err(dbError("invalid_input", "Expected an object of column values"));
-}
-async function settled(value) {
-	return await value;
-}
-function notAllowed(allowed) {
-	return new Response(null, {
-		status: 405,
-		headers: { allow: allowed.join(", ") }
-	});
-}
-/**
-* Operations over one table, matching the paths and responses of
-* `createOpenApi`: `GET/POST /<table>` and `GET/PATCH/DELETE /<table>/{id}`.
-* Shared by the HTTP adapters and the MCP table tools.
-*/
-function defineResource(betterSupabase, table, options = {}) {
-	const meta = betterSupabase.meta.tables[table];
-	if (!meta) throw new TypeError(`Unknown table "${table}"`);
-	if (options.list && options.list.table !== table) throw new TypeError(`The list query is for "${options.list.table}", not "${table}"`);
-	const operations = options.operations ?? (meta.kind === "view" ? ["list", "get"] : [
-		"list",
-		"get",
-		"create",
-		"update",
-		"delete"
-	]);
-	const keyParam = meta.primaryKey.length === 1 ? meta.primaryKey[0] : void 0;
-	const has = (operation) => operations.includes(operation);
-	const extra = options.select === void 0 ? {} : { select: options.select };
-	const maxPageSize = options.maxPageSize ?? 200;
-	const list = options.list;
-	const pagination = list ? list.pagination ?? "offset" : options.pagination ?? "offset";
-	const execute = async (db, operation, input = {}) => {
-		const repository = db[table];
-		if (!repository) throw new TypeError(`The db has no "${table}" repository`);
-		if (!has(operation)) return err(dbError("forbidden", `${operation} is not enabled for ${table}`));
-		const key = () => keyParam ? keyValue(meta, input.id) : err(dbError("invalid_request", `${table} has no single-column key`));
-		switch (operation) {
-			case "list": {
-				if (list) {
-					const query = list.parse(input.query ?? {});
-					if (!query.ok) return err(dbError("validation", "Invalid list query", { issues: query.issues }));
-					return settled(list.run(db, query.value, extra));
-				}
-				const page = pageArgs(input.query, maxPageSize, pagination);
-				if (!page.ok) return page;
-				return settled(repository.paginate({
-					...extra,
-					...page.data,
-					..."page" in page.data ? { count: "exact" } : {}
-				}));
-			}
-			case "get": {
-				const id = key();
-				if (!id.ok) return id;
-				return settled(repository.findById(id.data, extra));
-			}
-			case "create": {
-				const body = asObject(input.data);
-				if (!body.ok) return body;
-				const data = options.input?.create ? await validate(options.input.create, body.data, "data") : body;
-				if (!data.ok) return data;
-				return settled(repository.create(data.data, extra));
-			}
-			case "update": {
-				const id = key();
-				if (!id.ok) return id;
-				const body = asObject(input.data);
-				if (!body.ok) return body;
-				const data = options.input?.update ? await validate(options.input.update, body.data, "data") : body;
-				if (!data.ok) return data;
-				return settled(repository.update(id.data, data.data, extra));
-			}
-			case "delete": {
-				const id = key();
-				if (!id.ok) return id;
-				return settled(repository.delete(id.data));
-			}
-			default: throw new TypeError(`Unknown operation ${String(operation)}`);
-		}
-	};
-	const collectionMethods = [...has("list") ? ["GET"] : [], ...has("create") ? ["POST"] : []];
-	const itemMethods = [
-		...has("get") ? ["GET"] : [],
-		...has("update") ? ["PATCH"] : [],
-		...has("delete") ? ["DELETE"] : []
-	];
-	const route = async (request, db, id) => {
-		if (crossSiteSimpleRequest(request)) return err(dbError("forbidden", "Cross-site requests need Content-Type: application/json or a bearer token", { code: "CROSS_SITE_REQUEST" }));
-		if (id === void 0) {
-			if (request.method === "GET" && has("list")) return execute(db, "list", { query: new URL(request.url).searchParams });
-			if (request.method === "POST" && has("create")) {
-				const body = await readBody(request);
-				return body.ok ? execute(db, "create", { data: body.data }) : body;
-			}
-			return notAllowed(collectionMethods);
-		}
-		if (!keyParam) return new Response(null, { status: 404 });
-		if (request.method === "GET" && has("get")) return execute(db, "get", { id });
-		if (request.method === "PATCH" && has("update")) {
-			const body = await readBody(request);
-			return body.ok ? execute(db, "update", {
-				id,
-				data: body.data
-			}) : body;
-		}
-		if (request.method === "DELETE" && has("delete")) return execute(db, "delete", { id });
-		return notAllowed(itemMethods);
-	};
-	return {
-		table,
-		meta,
-		operations,
-		keyParam,
-		list,
-		pagination,
-		maxPageSize,
-		execute,
-		handle(request, db, id, respondOptions = {}) {
-			const status = id === void 0 && request.method === "POST" ? 201 : void 0;
-			return respond(() => route(request, db, id), status === void 0 ? respondOptions : {
-				...respondOptions,
-				status
-			});
-		}
-	};
-}
-//#endregion
-export { defineResource as t };

package/dist/resource-IPS5xi9q.d.ts

@@ -1,74 +0,0 @@
-import { E as ValidationIssue, f as Result } from "./result-D7y2fT87.js";
-import { H as Update, L as TableKey, R as TableMeta, a as AnyModels, i as AnyFunctions, x as Insert } from "./types-6BdhkmZe.js";
-import { It as SelectArg, t as BetterSupabase } from "./define-CJJkkr1-.js";
-import { a as RespondOptions } from "./respond-DprrgyXX.js";
-import { i as ResourceOperation } from "./index-Bxih3l0u.js";
-import { StandardSchemaV1 } from "@standard-schema/spec";
-//#region src/server/resource.d.ts
-/** What a resource needs from `defineListQuery`. */
-interface ResourceList {
-  readonly table: string;
-  readonly pagination?: ResourcePagination;
-  readonly openapi: readonly unknown[];
-  readonly jsonSchema: Readonly<Record<string, unknown>>;
-  parse(input: never): {
-    readonly ok: true;
-    readonly value: unknown;
-  } | {
-    readonly ok: false;
-    readonly issues: readonly ValidationIssue[];
-  };
-  run(db: never, query: never, extra?: never): PromiseLike<unknown>;
-}
-interface ResourceRouteOptions<M extends AnyModels, T extends TableKey<M>> {
-  /** Defaults to every operation for tables, `list` and `get` for views. */
-  readonly operations?: readonly ResourceOperation[];
-  /** Filters, search and sorts for `list`, from `defineListQuery`. */
-  readonly list?: ResourceList;
-  /** Columns returned by every operation. */
-  readonly select?: SelectArg<M, T>;
-  /** Validates request bodies before they reach the repository. */
-  readonly input?: {
-    readonly create?: StandardSchemaV1<unknown, Insert<M, T>>;
-    readonly update?: StandardSchemaV1<unknown, Update<M, T>>;
-  };
-  /**
-   * Paging of the default list: `offset` (`page` and `size`) or `cursor`
-   * (`after` and `size`, keyset). A `list` query brings its own. Defaults
-   * to `offset`.
-   */
-  readonly pagination?: ResourcePagination;
-  /** Largest page for the default list. Defaults to 200. */
-  readonly maxPageSize?: number;
-}
-type ResourcePagination = "offset" | "cursor";
-interface ResourceInput {
-  /** Primary key value; strings are converted for integer keys. */
-  readonly id?: unknown;
-  /** Body of `create` and `update`. */
-  readonly data?: unknown;
-  /** `list` parameters: URL params or typed values. */
-  readonly query?: URLSearchParams | Readonly<Record<string, unknown>>;
-}
-interface ResourceHandler {
-  readonly table: string;
-  readonly meta: TableMeta;
-  readonly operations: readonly ResourceOperation[];
-  /** Name of the key parameter, or `undefined` for tables without a single-column key. */
-  readonly keyParam: string | undefined;
-  readonly list: ResourceList | undefined;
-  readonly pagination: ResourcePagination;
-  readonly maxPageSize: number;
-  /** Runs one operation as whoever `db` is bound to. Resolves to a `Result`. */
-  execute(db: object, operation: ResourceOperation, input?: ResourceInput): Promise<Result<unknown>>;
-  /** Serves a collection request (`id` undefined) or an item request. */
-  handle(request: Request, db: object, id: string | undefined, options?: RespondOptions): Promise<Response>;
-}
-/**
- * Operations over one table, matching the paths and responses of
- * `createOpenApi`: `GET/POST /<table>` and `GET/PATCH/DELETE /<table>/{id}`.
- * Shared by the HTTP adapters and the MCP table tools.
- */
-declare function defineResource<M extends AnyModels, D, F extends AnyFunctions, E, T extends TableKey<M>>(betterSupabase: BetterSupabase<M, D, F, E>, table: T, options?: ResourceRouteOptions<M, T>): ResourceHandler;
-//#endregion
-export { ResourceRouteOptions as a, ResourcePagination as i, ResourceInput as n, defineResource as o, ResourceList as r, ResourceHandler as t };

package/dist/respond-BUgsXNgk.js

@@ -1,91 +0,0 @@
-import { n as dbError, o as isDbError, r as dbErrorOf } from "./errors-B11Duf73.js";
-import { s as toDbError } from "./result-DzUbqgdW.js";
-import { a as problemResponse } from "./problem-BreOl8b8.js";
-import { a as actorOf, o as delegationOf } from "./impersonation-DcqaTBHx.js";
-import { a as checkAal, t as isAnonymousUser } from "./view-BeFcRV6G.js";
-import { n as jsonResponse } from "./json-CEnpTHlZ.js";
-//#region src/server/respond.ts
-/**
-* The scopes a delegated user token lacks. Empty for the user's own session,
-* which a support or impersonated session counts as: only an `oauth-client`
-* actor is limited to what the user delegated.
-*/
-function missingScopes(auth, required) {
-	if (required.length === 0) return [];
-	const outcome = actorOf(auth.claims);
-	if (!outcome.ok || outcome.actor?.kind !== "oauth-client") return [];
-	const granted = new Set(delegationOf(auth.claims)?.scopes);
-	return required.filter((scope) => !granted.has(scope));
-}
-/** An API key's `*` scope grants every scope. */
-function missingKeyScopes(granted, required) {
-	if (granted.includes("*")) return [];
-	return required.filter((scope) => !granted.includes(scope));
-}
-/** `undefined` when `auth` may pass; otherwise the 401/403 error to send. */
-function guard(auth, allow = ["user"], aal = "aal1", scopes = []) {
-	if (auth.kind === "invalid") return auth.error;
-	const anonymous = auth.kind === "user" && isAnonymousUser(auth.claims);
-	if (anonymous ? allow.includes("anonymous") : allow.includes(auth.kind)) {
-		const denied = checkAal(auth, aal);
-		if (denied) return denied;
-		if (auth.kind !== "user" && auth.kind !== "apiKey") return void 0;
-		const missing = auth.kind === "apiKey" ? missingKeyScopes(auth.scopes, scopes) : missingScopes(auth, scopes);
-		return missing.length > 0 ? dbError("forbidden", `The token lacks the scope ${missing.join(" ")}`, {
-			code: "INSUFFICIENT_SCOPE",
-			scopes
-		}) : void 0;
-	}
-	if (anonymous) return dbError("forbidden", "Sign up to continue", { code: "ANONYMOUS_USER" });
-	return auth.kind === "anon" ? dbError("unauthorized", "Sign in to continue", { code: "MISSING_CREDENTIALS" }) : dbError("forbidden", `A ${auth.kind} caller is not allowed here`);
-}
-function isResult(value) {
-	return typeof value === "object" && value !== null && "ok" in value && "data" in value && "error" in value;
-}
-/**
-* Settles a handler's return value: `Result`s and `AsyncResult`s unwrap,
-* thrown `DbException`s (or errors whose `cause` is a `DbError`) become
-* errors, anything else is data. Other thrown
-* errors propagate.
-*/
-async function settle(run) {
-	try {
-		const value = await run();
-		if (!isResult(value)) return {
-			ok: true,
-			data: value
-		};
-		if (value.ok) return {
-			ok: true,
-			data: value.data
-		};
-		return {
-			ok: false,
-			error: isDbError(value.error) ? value.error : toDbError(value.error)
-		};
-	} catch (cause) {
-		const thrown = dbErrorOf(cause);
-		if (thrown) return {
-			ok: false,
-			error: thrown
-		};
-		throw cause;
-	}
-}
-/** A handler's value as a response: `Response` as is, data as JSON, errors as Problem Details. */
-async function respond(run, options = {}) {
-	const settled = await settle(run);
-	if (!settled.ok) return problemResponse(settled.error, options);
-	if (settled.data instanceof Response) return settled.data;
-	if (settled.data === void 0) return new Response(null, { status: 204 });
-	return jsonResponse(settled.data, { status: options.status ?? 200 });
-}
-/** Prefetching the JWKS would add a network call to every test that builds a server. */
-function defaultPrefetchJwks() {
-	return typeof process === "undefined" || process.env["NODE_ENV"] !== "test";
-}
-function defaultExpose() {
-	return typeof process !== "undefined" && process.env["NODE_ENV"] === "development";
-}
-//#endregion
-export { respond as a, isResult as i, defaultPrefetchJwks as n, settle as o, guard as r, defaultExpose as t };

package/dist/respond-DprrgyXX.d.ts

@@ -1,93 +0,0 @@
-import { b as DbError } from "./result-D7y2fT87.js";
-import { r as AuthState } from "./resolve-ChTYeTEl.js";
-import { t as Aal } from "./mfa-Daak8ukG.js";
-//#region src/server/refresh.d.ts
-/** A router or browser prefetch, by its request headers. */
-declare function isPrefetch(request: Request): boolean;
-/**
- * Whether a request should refresh an expired session cookie: page loads,
- * client navigations (`rsc`, `x-sveltekit-*`, `_data` loaders), form posts
- * and Server Actions. Prefetches, assets and `fetch` calls from scripts
- * read the session as it is, so a burst of parallel requests never races
- * on the single-use refresh token.
- */
-declare function shouldRefresh(request: Request): boolean;
-/**
- * Whether a request should ask the Auth server if the session still exists
- * (`checkSession`): full page loads, and `paths` you list for client
- * navigations. Never prefetches or mutations.
- */
-declare function shouldCheckSession(request: Request, paths?: readonly string[]): boolean;
-/** When a session entry refreshes: always, never, on navigations, or a predicate. */
-type RefreshPolicy = boolean | "navigation" | ((request: Request) => boolean);
-/** `policy` for one request. */
-declare function refreshFor(policy: RefreshPolicy | undefined, request: Request): boolean | undefined;
-//#endregion
-//#region src/server/respond.d.ts
-type AuthKind = AuthState["kind"];
-/**
- * An auth kind a guard lets through. `anonymous` admits users signed in with
- * `signInAnonymously()` (`is_anonymous`); `anon` admits callers without a
- * session only.
- */
-type AllowedCaller = Exclude<AuthKind, "invalid"> | "anonymous";
-interface GuardOptions {
-  /**
-   * Callers allowed through. Defaults to `['user']`, which refuses anonymous
-   * sign-ins. Only `'anonymous'` admits them: `['anonymous']` alone admits
-   * anonymous sign-ins and refuses other users, and `'anon'` (no session)
-   * never admits them.
-   */
-  readonly allow?: readonly AllowedCaller[];
-  /**
-   * Assurance level user sessions need. `aal2` answers 403 with
-   * `required: 'aal2'` until the user verifies a second factor.
-   */
-  readonly aal?: Aal;
-  /**
-   * OAuth scopes a delegated token (an OAuth client or an `act` chain) or an
-   * API key needs. A missing one answers 403 with `error="insufficient_scope"`.
-   * The user's own session is not limited by scopes.
-   */
-  readonly scopes?: readonly string[];
-}
-/** Guard options for middleware and fetch handlers that resolve the caller themselves. */
-interface MiddlewareOptions extends GuardOptions {
-  /**
-   * Refresh an expired cookie session and send the new cookies. Only for
-   * routes browsers call with cookies; bearer tokens never refresh.
-   * `'navigation'` refreshes page loads and form posts only (`shouldRefresh`).
-   */
-  readonly refresh?: RefreshPolicy;
-}
-/** `undefined` when `auth` may pass; otherwise the 401/403 error to send. */
-declare function guard(auth: AuthState, allow?: GuardOptions["allow"], aal?: Aal, scopes?: readonly string[]): DbError | undefined;
-declare function isResult(value: unknown): value is {
-  ok: boolean;
-  data: unknown;
-  error: unknown;
-};
-type Settled = {
-  readonly ok: true;
-  readonly data: unknown;
-} | {
-  readonly ok: false;
-  readonly error: DbError;
-};
-/**
- * Settles a handler's return value: `Result`s and `AsyncResult`s unwrap,
- * thrown `DbException`s (or errors whose `cause` is a `DbError`) become
- * errors, anything else is data. Other thrown
- * errors propagate.
- */
-declare function settle(run: () => unknown): Promise<Settled>;
-interface RespondOptions {
-  readonly instance?: string;
-  readonly expose?: boolean;
-  /** Status for data responses. Defaults to 200 (204 without data). */
-  readonly status?: number;
-}
-/** A handler's value as a response: `Response` as is, data as JSON, errors as Problem Details. */
-declare function respond(run: () => unknown, options?: RespondOptions): Promise<Response>;
-//#endregion
-export { RespondOptions as a, isResult as c, RefreshPolicy as d, isPrefetch as f, shouldRefresh as h, MiddlewareOptions as i, respond as l, shouldCheckSession as m, AuthKind as n, Settled as o, refreshFor as p, GuardOptions as r, guard as s, AllowedCaller as t, settle as u };