better-supabase 0.7.1 → 0.9.0

package/dist/ai-sdk/agents/index.js

@@ -1,16 +1,109 @@
 import { t as DbException } from "../../db-exception-CnWcYPxL.js";
-import { i as searchTool } from "../../embeddings-4ZvFzjsU.js";
+import { n as dbError } from "../../errors-8i6tSICm.js";
+import { r as agentClaims } from "../../actor-KHDOKGb1.js";
+import { n as operationMeta, r as operationPermission, t as OPERATION_PREFIXES } from "../../operations-CsIfMED7.js";
+import { t as gatewayOptions } from "../../gateway-options-DcLcWL5_.js";
+import { i as searchTool } from "../../embeddings-CVeOoufZ.js";
 import { ToolLoopAgent, stepCountIs } from "ai";
+//#region src/ai-sdk/agents/authorization.ts
+/**
+* The run context for an agent row, its caller and the tools it may call,
+* frozen. A read-only agent `actor` (the session's own agent level) makes
+* the run's `act` read-only too.
+*/
+function agentRunContext(agent, caller, tools = [], actor) {
+	const readOnly = actor?.kind === "agent" && actor.readOnly;
+	return Object.freeze({
+		userId: caller?.userId,
+		organizationId: caller?.organizationId ?? agent.organizationId,
+		actor: Object.freeze({
+			kind: "agent",
+			id: agent.id
+		}),
+		act: Object.freeze({
+			agent: agent.id,
+			tools: Object.freeze([...tools]),
+			...readOnly ? { readOnly: true } : {}
+		})
+	});
+}
+/** Whether an agent level that lists tools lists `toolName`; every other actor may call it. */
+function toolDelegated(actor, toolName) {
+	return actor?.kind !== "agent" || actor.tools === void 0 || actor.tools.includes(toolName);
+}
+/**
+* Throws a forbidden `DbException` (`AGENT_TOOL_NOT_DELEGATED`) when the
+* actor is an agent whose `act.tools` lists tools and not `toolName`.
+*/
+function assertToolDelegated(actor, toolName) {
+	if (!toolDelegated(actor, toolName)) throw new DbException(dbError("forbidden", `The agent was not delegated the tool ${toolName}.`, { code: "AGENT_TOOL_NOT_DELEGATED" }));
+}
+/**
+* The operation of the tool `name`: the provider's entry for the tool's
+* operation (from `toolOperations`, default `ai.tool.<name>`) first, then
+* the tool's own permission from `permissions`.
+*/
+function agentToolOperation(name, operations, permissions = {}, toolOperations = {}) {
+	const operation = (Object.hasOwn(toolOperations, name) ? toolOperations[name] : void 0) ?? `${OPERATION_PREFIXES.aiTool}${name}`;
+	const own = Object.hasOwn(permissions, name) ? permissions[name] : void 0;
+	const permission = operationPermission(operations, operation, typeof own === "string" ? own : void 0) ?? (own === false ? false : void 0);
+	const meta = operationMeta(operations, operation);
+	return {
+		operation,
+		permission,
+		...meta?.risk === void 0 ? {} : { risk: meta.risk },
+		...meta?.effects === void 0 ? {} : { effects: meta.effects },
+		...meta?.title === void 0 ? {} : { title: meta.title }
+	};
+}
+/** The id `authorizeModel` gets: the string itself, or the model's `modelId`. */
+function modelIdOf(model) {
+	return typeof model === "string" ? model : model.modelId;
+}
+const refused = (modelId) => new DbException(dbError("forbidden", `The model ${modelId} is not allowed.`, { code: "AI_MODEL_NOT_ALLOWED" }));
+/** Throws a forbidden `DbException` unless `authorize` allows the model; a throw refuses. */
+async function assertModelAllowed(authorize, model, context) {
+	const modelId = modelIdOf(model);
+	let allowed;
+	try {
+		allowed = await authorize(modelId, context);
+	} catch {
+		throw refused(modelId);
+	}
+	if (allowed !== true) throw refused(modelId);
+}
+/**
+* Whether the call may run as far as permissions go: a tool the run's
+* `act.tools` doesn't list is refused, a tool with no declared permission is
+* refused, a public one is allowed without a check, and a check that throws
+* refuses.
+*/
+async function toolPermitted(authorize, operation, context) {
+	if (!toolDelegated({
+		kind: "agent",
+		...context.act
+	}, context.toolName)) return false;
+	if (operation.permission === false) return true;
+	if (operation.permission === void 0) return false;
+	try {
+		return await authorize(operation.permission, context) === true;
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/ai-sdk/agents/agents.ts
 /**
 * The tools an agent may call: the ones it lists (every tool when it lists
-* none), without the tenant's `deny` tools.
+* none), without the tenant's `deny` tools and, when the session's `actor`
+* is an agent that lists tools, without the ones it wasn't delegated.
 */
-function agentTools(agent, available, policies = {}) {
+function agentTools(agent, available, policies = {}, actor) {
 	const allowed = agent.tools.length === 0 ? void 0 : new Set(agent.tools);
 	const tools = {};
 	for (const [name, tool] of Object.entries(available)) {
 		if (allowed !== void 0 && !allowed.has(name)) continue;
+		if (!toolDelegated(actor, name)) continue;
 		if (policies[name] === "deny") continue;
 		tools[name] = tool;
 	}
@@ -30,22 +123,46 @@ const APPROVAL_RANK = {
 };
 const approvalType = (status) => status === void 0 ? "not-applicable" : typeof status === "string" ? status : status.type;
 /**
-* The app's `toolApproval` with the tenant's `ask` tools: the app decides
-* first, and the stricter of the two answers wins (`denied`, then
-* `user-approval`). A function that throws denies the call.
+* The delegation check, the permission check, then the app's
+* `toolApproval`, then the `ask` tools: a tool the session's agent wasn't
+* delegated or a refused permission denies, and otherwise the stricter
+* answer wins (`denied`, then `user-approval`). A function that throws
+* denies the call.
 */
-function composedApproval(approve, tenant) {
+function composedApproval(checks) {
 	return async (options) => {
-		let status;
+		const { toolName } = options.toolCall;
+		const input = options.toolCall.input;
 		try {
-			status = await approve(options);
+			assertToolDelegated(checks.actor, toolName);
+		} catch (error) {
+			return {
+				type: "denied",
+				reason: error instanceof DbException ? error.error.message : "The tool was not delegated"
+			};
+		}
+		if (checks.authorizeTool !== void 0) {
+			const operation = checks.operation(toolName);
+			if (!await toolPermitted(checks.authorizeTool, operation, {
+				...checks.run,
+				toolName,
+				operation: operation.operation,
+				input
+			})) return {
+				type: "denied",
+				reason: "The caller may not use this tool"
+			};
+		}
+		let status = "not-applicable";
+		if (checks.approve !== void 0) try {
+			status = await checks.approve(options);
 		} catch {
 			return {
 				type: "denied",
 				reason: "The tool approval check failed"
 			};
 		}
-		return tenant[options.toolCall.toolName] !== void 0 && APPROVAL_RANK[approvalType(status)] < APPROVAL_RANK["user-approval"] ? "user-approval" : status;
+		return checks.ask[toolName] !== void 0 && APPROVAL_RANK[approvalType(status)] < APPROVAL_RANK["user-approval"] ? "user-approval" : status;
 	};
 }
 /** The knowledge scopes an agent searches; `agent` without an id is its own. */
@@ -58,22 +175,60 @@ function agentScopes(agent) {
 /** A `ToolLoopAgent` from an agent row. */
 function createAgentRuntime(options) {
 	const { agent } = options;
-	const tools = agentTools(agent, options.tools ?? {}, options.policies);
-	if (options.knowledge !== void 0 && agent.knowledgeScopes.length > 0) {
+	const tools = agentTools(agent, options.tools ?? {}, options.policies, options.actor);
+	const searchesKnowledge = options.knowledge !== void 0 && agent.knowledgeScopes.length > 0 && toolDelegated(options.actor, "search_knowledge");
+	const run = agentRunContext(agent, options.caller, [...Object.keys(tools), ...searchesKnowledge ? ["search_knowledge"] : []], options.actor);
+	if (searchesKnowledge) {
 		const { knowledge, organizationId, options: search = {} } = options.knowledge;
+		const filter = options.results;
 		tools["search_knowledge"] = searchTool(knowledge, organizationId, {
 			...search,
-			scopes: agentScopes(agent)
+			scopes: agentScopes(agent),
+			...filter === void 0 ? {} : { results: (hits, { query }) => filter(hits, {
+				...run,
+				toolName: "search_knowledge",
+				query
+			}) }
 		});
 	}
+	const operation = (name) => agentToolOperation(name, options.operations, options.permissions, options.toolOperations);
+	const ask = { ...agentToolApproval(tools, options.policies) };
+	for (const name of Object.keys(tools)) if (operation(name).risk === "high") ask[name] = "user-approval";
 	const instructions = [options.instructions, agent.instructions].filter((text) => text !== void 0 && text !== "").join("\n\n");
+	const gateway = options.gateway === void 0 && options.caller === void 0 ? void 0 : gatewayOptions({
+		...run.userId === void 0 ? {} : { userId: run.userId },
+		...run.organizationId === void 0 ? {} : { organizationId: run.organizationId },
+		...options.gateway?.chatId === void 0 ? {} : { chatId: options.gateway.chatId },
+		feature: options.gateway?.feature ?? "agent",
+		tags: [`agent:${agent.id}`, ...options.gateway?.tags ?? []]
+	}, options.gateway?.options);
+	const { authorizeModel } = options;
 	return new ToolLoopAgent({
 		id: agent.id,
 		model: options.model(agent.model),
 		tools,
-		toolApproval: options.toolApproval === void 0 ? agentToolApproval(tools, options.policies) : composedApproval(options.toolApproval, agentToolApproval(tools, options.policies)),
+		toolApproval: options.toolApproval === void 0 && options.authorizeTool === void 0 && options.actor === void 0 ? ask : composedApproval({
+			actor: options.actor,
+			approve: options.toolApproval,
+			ask,
+			authorizeTool: options.authorizeTool,
+			operation,
+			run
+		}),
 		...instructions === "" ? {} : { instructions },
-		stopWhen: options.stopWhen ?? stepCountIs(20)
+		stopWhen: options.stopWhen ?? stepCountIs(20),
+		runtimeContext: run,
+		prepareCall: (call) => ({
+			...call,
+			runtimeContext: {
+				...call.runtimeContext,
+				...run
+			}
+		}),
+		prepareStep: async ({ model }) => {
+			if (authorizeModel !== void 0) await assertModelAllowed(authorizeModel, model, run);
+			return gateway === void 0 ? void 0 : { providerOptions: gateway };
+		}
 	});
 }
 /** Thrown by the moderation middleware when a check blocks the input or output. */
@@ -104,7 +259,7 @@ function lastUserText(prompt) {
 */
 function moderationMiddleware(options) {
 	const judge = async (text, stage) => {
-		if (text.trim() === "") return void 0;
+		if (text.trim() === "") return;
 		const verdict = await options.check(text, stage);
 		if (verdict === void 0 || verdict.action === "allow") return verdict;
 		const recorded = await options.chats.moderation.record({
@@ -156,4 +311,4 @@ function moderationMiddleware(options) {
 	};
 }
 //#endregion
-export { ModerationBlockedError, agentScopes, agentToolApproval, agentTools, createAgentRuntime, moderationMiddleware };
+export { ModerationBlockedError, agentClaims, agentRunContext, agentScopes, agentToolApproval, agentToolOperation, agentTools, assertToolDelegated, createAgentRuntime, moderationMiddleware, toolDelegated };

package/dist/ai-sdk/batches/index.d.ts

@@ -1,7 +1,7 @@
-import { t as AsyncResult } from "../../result-D7y2fT87.js";
-import { i as CursorPageOptions } from "../../block-helpers-CKtbFcRv.js";
-import { m as JobHandler } from "../../queue-CLJurhdy.js";
-import { i as AiBatchItemInput, r as AiBatchItem, t as AiBatch, u as AiProviders } from "../../types-6rocye-y.js";
+import { t as AsyncResult } from "../../result-Cj3yWhjH.js";
+import { i as CursorPageOptions } from "../../block-helpers-C86hPEjI.js";
+import { g as JobHandler } from "../../types-CdP0z5tS.js";
+import { i as AiBatchItemInput, r as AiBatchItem, t as AiBatch, u as AiProviders } from "../../types-D0W4fnsc.js";
 import { Experimental_BatchItemResult, Experimental_BatchProvider, Experimental_BatchReference, Experimental_BatchStatus, Experimental_StartBatchOptions, Experimental_StartBatchResult } from "ai";
 //#region src/ai-sdk/batches/batches.d.ts
 /** The AI SDK batch calls, replaceable in tests. */

package/dist/ai-sdk/batches/index.js

@@ -1,8 +1,8 @@
-import { n as dbError } from "../../errors-B11Duf73.js";
-import { s as nowInstant } from "../../temporal-BJGitm-h.js";
-import { t as temporal } from "../../temporal-required-BVvW7SYJ.js";
-import { a as ok, r as err, t as AsyncResult } from "../../result-DzUbqgdW.js";
-import { c as errorText } from "../../block-helpers-DWHxHsEQ.js";
+import { n as dbError } from "../../errors-8i6tSICm.js";
+import { s as nowInstant } from "../../temporal-CB5Fpo5d.js";
+import { t as temporal } from "../../temporal-required-DqRzr7i0.js";
+import { a as ok, r as err, t as AsyncResult } from "../../result-BlgnMB0H.js";
+import { f as errorText } from "../../block-helpers-CfG_MvDR.js";
 import { experimental_cancelBatch, experimental_getBatchResults, experimental_getBatchStatus, experimental_startBatch } from "ai";
 //#region src/ai-sdk/batches/batches.ts
 const DEFAULT_API = {

package/dist/ai-sdk/cache/index.d.ts

@@ -1,5 +1,5 @@
-import { b as DbError } from "../../result-D7y2fT87.js";
-import { t as AiCache } from "../../ai-cache-DaDu_G5L.js";
+import { b as DbError } from "../../result-Cj3yWhjH.js";
+import { t as AiCache } from "../../ai-cache-Dps7aRu1.js";
 import { LanguageModelMiddleware } from "ai";
 //#region src/ai-sdk/cache/cache.d.ts
 type WrapGenerate = NonNullable<LanguageModelMiddleware["wrapGenerate"]>;

package/dist/ai-sdk/cache/index.js

@@ -1,5 +1,5 @@
-import { d as isRecord } from "../../block-helpers-DWHxHsEQ.js";
-import { t as cacheKey } from "../../ai-cache-CBWs1W0k.js";
+import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { t as cacheKey } from "../../ai-cache-zeUL94pB.js";
 import { simulateReadableStream } from "ai";
 //#region src/ai-sdk/cache/cache.ts
 const BYTES = "$bytes";

package/dist/ai-sdk/chat/index.d.ts

@@ -1,2 +1,2 @@
-import { a as AssistantOptions, c as AssistantRunResult, i as AssistantModeration, l as AssistantTurn, n as AssistantContext, o as AssistantRequestBody, r as AssistantFinish, s as AssistantRunArgs, t as Assistant, u as createAssistant } from "../../assistant-DwdpDH1q.js";
+import { a as AssistantOptions, c as AssistantRunResult, i as AssistantModeration, l as AssistantTurn, n as AssistantContext, o as AssistantRequestBody, r as AssistantFinish, s as AssistantRunArgs, t as Assistant, u as createAssistant } from "../../assistant-Bf2cA6RO.js";
 export { type Assistant, type AssistantContext, type AssistantFinish, type AssistantModeration, type AssistantOptions, type AssistantRequestBody, type AssistantRunArgs, type AssistantRunResult, type AssistantTurn, createAssistant };

package/dist/ai-sdk/chat/index.js

@@ -1,15 +1,14 @@
-import { n as dbError } from "../../errors-B11Duf73.js";
-import { a as problemResponse } from "../../problem-BreOl8b8.js";
-import { d as isRecord } from "../../block-helpers-DWHxHsEQ.js";
-import { n as pathToHistory, r as repairDanglingToolCalls } from "../../history-BZih6SFP.js";
-import { a as isUIMessage, f as problem429, h as usageOf, i as fromUIMessage, l as gatewayOptions, p as runRelease, s as toUIMessages, t as AI_SDK_UI_FORMAT } from "../../messages-B9-5887d.js";
-import { n as teeToStore, t as resumeFromStore } from "../../tee-CoEppCER.js";
-import { JsonToSseTransformStream, UI_MESSAGE_STREAM_HEADERS, convertToModelMessages } from "ai";
+import { n as dbError } from "../../errors-8i6tSICm.js";
+import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { o as problemResponse } from "../../problem-pIiL3WbE.js";
+import { n as pathToHistory, r as repairDanglingToolCalls } from "../../history-GH1HJWQV.js";
+import { t as gatewayOptions } from "../../gateway-options-DcLcWL5_.js";
+import { d as problem429, f as runRelease, i as isUIMessage, m as usageOf, r as fromUIMessage, s as toUIMessages, t as AI_SDK_UI_FORMAT } from "../../messages-Cx4ttLJJ.js";
+import { n as teeToStore, t as resumeFromStore } from "../../tee-Bsisfd7t.js";
+import { n as readJson, r as sse, t as badRequest } from "../../http-BF-V0CUF.js";
+import { JsonToSseTransformStream, convertToModelMessages } from "ai";
 //#region src/ai-sdk/chat/assistant.ts
 const TRIGGERS = /* @__PURE__ */ new Set(["submit-message", "regenerate-message"]);
-function badRequest(message) {
-	return problemResponse(dbError("invalid_request", message, { code: "AI_CHAT_BAD_REQUEST" }));
-}
 function parseBody(value) {
 	if (!isRecord(value)) return "Expected a JSON object.";
 	const { id, trigger, messageId, model } = value;
@@ -27,13 +26,6 @@ function parseBody(value) {
 		...typeof model === "string" ? { model } : {}
 	};
 }
-async function readJson(request) {
-	try {
-		return await request.json();
-	} catch {
-		return;
-	}
-}
 const settle = async (value) => {
 	try {
 		return await value;
@@ -41,9 +33,6 @@ const settle = async (value) => {
 		return;
 	}
 };
-function sse(stream) {
-	return new Response(stream.pipeThrough(new TextEncoderStream()), { headers: UI_MESSAGE_STREAM_HEADERS });
-}
 /**
 * A chat route for the AI SDK on the `ai-chat` block: `respond` stores the
 * user's message, picks an allowed model, checks the quota, claims the
@@ -80,7 +69,7 @@ function createAssistant(options) {
 			message,
 			chat
 		});
-		if (verdict === void 0 || verdict.action === "allow") return void 0;
+		if (verdict === void 0 || verdict.action === "allow") return;
 		await context.chats.moderation.record({
 			organizationId: chat.organizationId,
 			chatId: chat.id,

package/dist/ai-sdk/embeddings/index.d.ts

@@ -1,3 +1,3 @@
-import { n as Embedder, o as KnowledgeHit } from "../../knowledge-BXBbT0Tr.js";
-import { a as SupabaseAiSession, c as modelName, d as supabaseEmbed, f as toSourceParts, i as SearchToolResult, l as rerankWith, n as Reranker, o as SupabaseEmbedOptions, r as SearchToolOptions, s as embedWith, t as EmbedWithOptions, u as searchTool } from "../../embeddings-C9KGQnXt.js";
-export { type EmbedWithOptions, type Embedder, type KnowledgeHit, type Reranker, type SearchToolOptions, type SearchToolResult, type SupabaseAiSession, type SupabaseEmbedOptions, embedWith, modelName, rerankWith, searchTool, supabaseEmbed, toSourceParts };
+import { n as Embedder, o as KnowledgeHit } from "../../knowledge-BXQ2-V0a.js";
+import { a as SearchToolResult, c as embedWith, d as searchTool, f as supabaseEmbed, i as SearchToolOptions, l as modelName, n as Reranker, o as SupabaseAiSession, p as toSourceParts, r as ResultsFilter, s as SupabaseEmbedOptions, t as EmbedWithOptions, u as rerankWith } from "../../embeddings-C2S14foD.js";
+export { type EmbedWithOptions, type Embedder, type KnowledgeHit, type Reranker, type ResultsFilter, type SearchToolOptions, type SearchToolResult, type SupabaseAiSession, type SupabaseEmbedOptions, embedWith, modelName, rerankWith, searchTool, supabaseEmbed, toSourceParts };

package/dist/ai-sdk/embeddings/index.js

@@ -1,2 +1 @@
-import { a as supabaseEmbed, i as searchTool, n as modelName, o as toSourceParts, r as rerankWith, t as embedWith } from "../../embeddings-4ZvFzjsU.js";
-export { embedWith, modelName, rerankWith, searchTool, supabaseEmbed, toSourceParts };
+export { t as embedWith, n as modelName, r as rerankWith, i as searchTool, a as supabaseEmbed, o as toSourceParts } from "../../embeddings-CVeOoufZ.js";

package/dist/ai-sdk/files/index.d.ts

@@ -1,7 +1,7 @@
 /// <reference lib="esnext.temporal" />
-import { b as DbError, t as AsyncResult } from "../../result-D7y2fT87.js";
-import { i as AiFilePart } from "../../message-CfDoR0Y6.js";
-import { c as AiFileSource, f as AiFiles } from "../../types-C05bxW-W.js";
+import { b as DbError, t as AsyncResult } from "../../result-Cj3yWhjH.js";
+import { r as AiFilePart } from "../../message-B0fNJgq8.js";
+import { c as AiFileSource, f as AiFiles } from "../../types-pNY_UpDs.js";
 import { Experimental_DownloadFunction } from "ai";
 //#region src/ai-sdk/files/files.d.ts
 interface AiFileDownloadOptions {

package/dist/ai-sdk/files/index.js

@@ -1,7 +1,7 @@
-import { n as dbError } from "../../errors-B11Duf73.js";
-import { a as ok, r as err, t as AsyncResult } from "../../result-DzUbqgdW.js";
-import { c as errorText } from "../../block-helpers-DWHxHsEQ.js";
-import { r as parseAiFileUrl, t as aiFileUrl } from "../../ai-files-CSPNswUY.js";
+import { n as dbError } from "../../errors-8i6tSICm.js";
+import { a as ok, r as err, t as AsyncResult } from "../../result-BlgnMB0H.js";
+import { f as errorText } from "../../block-helpers-CfG_MvDR.js";
+import { r as parseAiFileUrl, t as aiFileUrl } from "../../ai-files-D2_9YLjF.js";
 import { createDownload } from "ai";
 //#region src/ai-sdk/files/files.ts
 /** Thrown by the download function, so the SDK reports a failed file part. */

package/dist/ai-sdk/index.d.ts

@@ -1,12 +1,41 @@
 /// <reference lib="esnext.temporal" />
-import { b as DbError, t as AsyncResult } from "../result-D7y2fT87.js";
-import { m as JobHandler } from "../queue-CLJurhdy.js";
-import { U as AiSandboxes } from "../ai-chat-7amvXjmQ.js";
-import { p as ResolvedProviderKey, u as AiProviders } from "../types-6rocye-y.js";
-import { i as Usage } from "../usage-CrvrL2vw.js";
-import { _ as usageOf, a as GatewayClient, c as GatewayOptions, d as costBackfill, f as gatewayOptions, g as usageEntries, h as problem429, i as CostBackfillPayload, l as ModelCatalogRefreshOptions, m as modelInputOf, n as AiUsageMeters, o as GatewayContext, p as modelCatalogRefresh, r as CostBackfillOptions, s as GatewayModelEntry, t as AiUsage, u as UsageSource, v as usageQuota } from "../gateway-C1ssRHnf.js";
-import { a as ModelSource, c as isUIMessage, i as ModelApproval, l as toUIMessage, n as DENIED_TOOL_OUTPUT, o as fromModelMessages, r as FromModelMessagesOptions, s as fromUIMessage, t as AI_SDK_UI_FORMAT, u as toUIMessages } from "../messages-DYP0sUTe.js";
-import { Experimental_SandboxSession, Telemetry } from "ai";
+import { b as DbError, t as AsyncResult } from "../result-Cj3yWhjH.js";
+import { i as AiMessage } from "../message-B0fNJgq8.js";
+import { g as JobHandler } from "../types-CdP0z5tS.js";
+import { U as AiSandboxes } from "../ai-chat-3GBSlFR4.js";
+import { n as GatewayOptions, r as gatewayOptions, t as GatewayContext } from "../gateway-options-ClvvfuuU.js";
+import { p as ResolvedProviderKey, u as AiProviders } from "../types-D0W4fnsc.js";
+import { a as Usage } from "../usage-DM2rzczj.js";
+import { a as GatewayClient, c as UsageSource, d as modelInputOf, f as problem429, h as usageQuota, i as CostBackfillPayload, l as costBackfill, m as usageOf, n as AiUsageMeters, o as GatewayModelEntry, p as usageEntries, r as CostBackfillOptions, s as ModelCatalogRefreshOptions, t as AiUsage, u as modelCatalogRefresh } from "../gateway-Cup00l0w.js";
+import { i as fromModelMessages, n as ModelApproval, r as ModelSource, t as FromModelMessagesOptions } from "../model-messages-D4GZllOD.js";
+import { Experimental_SandboxSession, Telemetry, UIMessage } from "ai";
+//#region src/ai-sdk/messages.d.ts
+/** The `format` the chat tree stores next to an AI SDK message it keeps as is. */
+export declare const AI_SDK_UI_FORMAT = "ai-sdk-ui";
+/** The output a denied tool call gets in the canonical history. */
+export declare const DENIED_TOOL_OUTPUT = "The tool call was denied.";
+/** Whether `value` has the shape of an AI SDK `UIMessage`. */
+export declare function isUIMessage(value: unknown): value is UIMessage;
+/**
+ * The canonical form of an AI SDK `UIMessage`. Tool parts become a
+ * `tool-call`, then a `tool-approval` and a `tool-result` as far as the
+ * call got; parts with no canonical counterpart become `data` parts named
+ * `ui.<type>`.
+ */
+export declare function fromUIMessage(message: UIMessage): AiMessage;
+/**
+ * The AI SDK form of a canonical message: the stored native message when the
+ * tree kept one (`format: "ai-sdk-ui"`), otherwise a conversion. A `tool`
+ * message becomes an assistant message.
+ */
+export declare function toUIMessage(message: AiMessage): UIMessage;
+/**
+ * Converts a history. Tool results and approvals in later messages, such as
+ * the `tool` messages of other SDKs, update the tool part of the assistant
+ * message that made the call.
+ */
+export declare function toUIMessages(messages: readonly AiMessage[]): UIMessage[];
+//#endregion
 //#region src/ai-sdk/providers.d.ts
 /** The `settings` key that names the credential field, `apiKey` unless set. */
 export declare const BYOK_FIELD = "credentialField";
@@ -142,4 +171,4 @@ export declare function spendReconciliation(options: SpendReconciliationOptions)
   readonly day?: string;
 } | undefined>;
 //#endregion
-export { AI_SDK_UI_FORMAT, type AiUsage, type AiUsageMeters, type CostBackfillOptions, type CostBackfillPayload, DENIED_TOOL_OUTPUT, type FromModelMessagesOptions, type GatewayClient, type GatewayContext, type GatewayModelEntry, type GatewayOptions, type MeterTelemetryOptions, type ModelApproval, type ModelCatalogRefreshOptions, type ModelSource, type SpendReconciliation, type SpendReconciliationOptions, type SpendReportClient, type SpendReportRow, type TelemetryMeters, type TelemetryStart, type TrackedSandboxOptions, type UsageSource, costBackfill, fromModelMessages, fromUIMessage, gatewayOptions, isUIMessage, modelCatalogRefresh, modelInputOf, problem429, toUIMessage, toUIMessages, usageEntries, usageOf, usageQuota };
+export { type AiUsage, type AiUsageMeters, type CostBackfillOptions, type CostBackfillPayload, type FromModelMessagesOptions, type GatewayClient, type GatewayContext, type GatewayModelEntry, type GatewayOptions, type MeterTelemetryOptions, type ModelApproval, type ModelCatalogRefreshOptions, type ModelSource, type SpendReconciliation, type SpendReconciliationOptions, type SpendReportClient, type SpendReportRow, type TelemetryMeters, type TelemetryStart, type TrackedSandboxOptions, type UsageSource, costBackfill, fromModelMessages, gatewayOptions, modelCatalogRefresh, modelInputOf, problem429, usageEntries, usageOf, usageQuota };

package/dist/ai-sdk/index.js

@@ -1,6 +1,8 @@
-import { s as nowInstant } from "../temporal-BJGitm-h.js";
-import { d as isRecord } from "../block-helpers-DWHxHsEQ.js";
-import { a as isUIMessage, c as costBackfill, d as modelInputOf, f as problem429, g as usageQuota, h as usageOf, i as fromUIMessage, l as gatewayOptions, m as usageEntries, n as DENIED_TOOL_OUTPUT, o as toUIMessage, r as fromModelMessages, s as toUIMessages, t as AI_SDK_UI_FORMAT, u as modelCatalogRefresh } from "../messages-B9-5887d.js";
+import { s as nowInstant } from "../temporal-CB5Fpo5d.js";
+import { n as isRecord } from "../guards-6F2bCtQR.js";
+import { t as gatewayOptions } from "../gateway-options-DcLcWL5_.js";
+import { c as costBackfill, d as problem429, h as usageQuota, i as isUIMessage, l as modelCatalogRefresh, m as usageOf, n as DENIED_TOOL_OUTPUT, o as toUIMessage, p as usageEntries, r as fromUIMessage, s as toUIMessages, t as AI_SDK_UI_FORMAT, u as modelInputOf } from "../messages-Cx4ttLJJ.js";
+import { t as fromModelMessages } from "../model-messages-CTu-6kBu.js";
 //#region src/ai-sdk/providers.ts
 /** The `settings` key that names the credential field, `apiKey` unless set. */
 const BYOK_FIELD = "credentialField";

package/dist/ai-sdk/mcp/index.d.ts

@@ -1,10 +1,11 @@
-import { b as DbError, t as AsyncResult } from "../../result-D7y2fT87.js";
-import { i as CredentialRef, r as CredentialProvider } from "../../provider-D-UEMvSD.js";
-import { r as ConnectorServer, s as Connectors } from "../../connectors-CrpknU0P.js";
-import { n as VaultCredentials } from "../../vault-wlbBhqm7.js";
+import { b as DbError, t as AsyncResult } from "../../result-Cj3yWhjH.js";
+import { i as CredentialRef, r as CredentialProvider } from "../../provider-9gBq9W6k.js";
+import { r as ConnectorServer, s as Connectors } from "../../connectors-CjD-R2ks.js";
+import { n as VaultCredentials } from "../../vault-tOkPLnMB.js";
+import { i as SupabaseMcpScope, n as SupabaseMcpModule, t as SupabaseMcpFeature } from "../../supabase-mcp-C6tMoEjn.js";
 import { ToolSet } from "ai";
 import { ElicitResult, ElicitationRequest, MCPClient, OAuthClientMetadata, OAuthClientProvider } from "@ai-sdk/mcp";
-//#region src/ai-sdk/mcp/mcp.d.ts
+//#region src/ai-sdk/mcp/oauth.d.ts
 /** The Vault ref of a user's OAuth connection to a server. */
 export declare function mcpOAuthRef(serverId: string): CredentialRef;
 interface VaultOAuthProviderOptions {
@@ -48,6 +49,36 @@ export declare function authorizeConnector(options: AuthorizeConnectorOptions):
 export declare function completeConnector(options: AuthorizeConnectorOptions & {
   readonly callback: URL | string;
 }): AsyncResult<void>;
+//#endregion
+//#region src/ai-sdk/mcp/supabase.d.ts
+/** Input and output schemas by tool name, as `MCPClient.tools({ schemas })` takes them. */
+type McpToolSchemas = Exclude<NonNullable<Parameters<MCPClient["toolsFromDefinitions"]>[1]>["schemas"], "automatic" | undefined>;
+/** Supabase's hosted MCP server. */
+export declare const SUPABASE_MCP_URL = "https://mcp.supabase.com/mcp";
+interface SupabaseMcpOptions extends SupabaseMcpScope {
+  /**
+   * The server URL. Defaults to `SUPABASE_MCP_URL`; the local stack serves
+   * it at `http://localhost:54321/mcp`.
+   */
+  readonly url?: string;
+}
+interface SupabaseMcp {
+  /** The server URL with the scope as query parameters, for a connector server's `url`. */
+  readonly url: string;
+  /**
+   * For `connectTools`: types each tool's input and output, and keeps only
+   * the tools the scope allows.
+   */
+  readonly schemas: McpToolSchemas;
+}
+/**
+ * Supabase's MCP server for an agent: the URL to register as a connector
+ * server, and the tool schemas `connectTools` types its tools with. Loads
+ * `@supabase/mcp-server-supabase` for the schemas.
+ */
+export declare function supabaseMcp(options?: SupabaseMcpOptions, load?: () => Promise<SupabaseMcpModule>): Promise<SupabaseMcp>;
+//#endregion
+//#region src/ai-sdk/mcp/mcp.d.ts
 interface ConnectToolsOptions {
   /** The connectors block as the user. */
   readonly connectors: Connectors;
@@ -67,6 +98,12 @@ interface ConnectToolsOptions {
   readonly elicit?: (request: ElicitationRequest) => Promise<ElicitResult>;
   /** Prefixes tool names, such as `github_`, so servers don't collide. */
   readonly prefix?: string;
+  /**
+   * Types the tools and keeps only the ones it names, such as
+   * `supabaseMcp().schemas`. The fingerprint still covers every tool the
+   * server lists.
+   */
+  readonly schemas?: McpToolSchemas;
 }
 interface ConnectedTools {
   readonly tools: ToolSet;
@@ -99,4 +136,4 @@ interface ConnectAllResult {
  */
 export declare function connectAll(servers: readonly ConnectorServer[], options: Omit<ConnectToolsOptions, "server" | "prefix">): Promise<ConnectAllResult>;
 //#endregion
-export type { AuthorizeConnectorOptions, ConnectAllResult, ConnectToolsOptions, ConnectedTools, VaultOAuthProvider, VaultOAuthProviderOptions };
+export type { AuthorizeConnectorOptions, ConnectAllResult, ConnectToolsOptions, ConnectedTools, McpToolSchemas, SupabaseMcp, SupabaseMcpFeature, SupabaseMcpOptions, SupabaseMcpScope, VaultOAuthProvider, VaultOAuthProviderOptions };

package/dist/ai-sdk/mcp/index.js

@@ -1,12 +1,14 @@
 import { t as DbException } from "../../db-exception-CnWcYPxL.js";
-import { n as dbError } from "../../errors-B11Duf73.js";
-import { s as nowInstant } from "../../temporal-BJGitm-h.js";
-import { a as ok, r as err, t as AsyncResult } from "../../result-DzUbqgdW.js";
-import { n as credentialRefInTenant, r as foreignCredentialRef } from "../../provider-Di3sRutW.js";
-import { T as sha256Hex, c as errorText, d as isRecord } from "../../block-helpers-DWHxHsEQ.js";
+import { n as dbError } from "../../errors-8i6tSICm.js";
+import { s as nowInstant } from "../../temporal-CB5Fpo5d.js";
+import { a as ok, r as err, t as AsyncResult } from "../../result-BlgnMB0H.js";
+import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { n as credentialRefInTenant, r as foreignCredentialRef } from "../../provider-DKh2xFZb.js";
+import { N as sha256Hex, f as errorText } from "../../block-helpers-CfG_MvDR.js";
+import { n as loadSupabaseMcp } from "../../supabase-mcp-DomZ-amK.js";
 import { fingerprintTools } from "ai";
 import { ElicitationRequestSchema, auth, createMCPClient, mcpAppClientCapabilities, splitMCPAppTools } from "@ai-sdk/mcp";
-//#region src/ai-sdk/mcp/mcp.ts
+//#region src/ai-sdk/mcp/oauth.ts
 /** The Vault ref of a user's OAuth connection to a server. */
 function mcpOAuthRef(serverId) {
 	return {
@@ -170,6 +172,8 @@ function completeConnector(options) {
 		return recordGrant(options, provider);
 	});
 }
+//#endregion
+//#region src/ai-sdk/mcp/mcp.ts
 const forbidden = (message, hint) => dbError("forbidden", message, { hint });
 async function authOf(options) {
 	const { server } = options;
@@ -314,7 +318,7 @@ function connectTools(options) {
 				return err(forbidden(`The tools of ${server.name} changed and wait for an admin's approval`, "CONNECTOR_TOOLS_CHANGED"));
 			}
 			return ok({
-				tools: prefixed(tools, options.prefix),
+				tools: prefixed(options.schemas === void 0 ? tools : client.toolsFromDefinitions(split.modelVisible, { schemas: options.schemas }), options.prefix),
 				appTools: prefixed(client.toolsFromDefinitions(split.appVisible), options.prefix),
 				client,
 				fingerprint,
@@ -359,4 +363,29 @@ async function connectAll(servers, options) {
 	};
 }
 //#endregion
-export { authorizeConnector, completeConnector, connectAll, connectTools, mcpOAuthRef, vaultOAuthProvider };
+//#region src/ai-sdk/mcp/supabase.ts
+/** Supabase's hosted MCP server. */
+const SUPABASE_MCP_URL = "https://mcp.supabase.com/mcp";
+/**
+* Supabase's MCP server for an agent: the URL to register as a connector
+* server, and the tool schemas `connectTools` types its tools with. Loads
+* `@supabase/mcp-server-supabase` for the schemas.
+*/
+async function supabaseMcp(options = {}, load = loadSupabaseMcp) {
+	const readOnly = options.readOnly ?? true;
+	const url = new URL(options.url ?? "https://mcp.supabase.com/mcp");
+	if (options.projectRef !== void 0) url.searchParams.set("project_ref", options.projectRef);
+	if (readOnly) url.searchParams.set("read_only", "true");
+	if (options.features !== void 0) url.searchParams.set("features", options.features.join(","));
+	const schemas = (await load()).createToolSchemas({
+		...options.features === void 0 ? {} : { features: options.features },
+		projectScoped: options.projectRef !== void 0,
+		readOnly
+	});
+	return {
+		url: url.href,
+		schemas
+	};
+}
+//#endregion
+export { SUPABASE_MCP_URL, authorizeConnector, completeConnector, connectAll, connectTools, mcpOAuthRef, supabaseMcp, vaultOAuthProvider };

package/dist/ai-sdk/memory/index.d.ts

@@ -1,5 +1,6 @@
-import { m as JobHandler } from "../../queue-CLJurhdy.js";
-import { n as MemoryCommand, o as MemoryNamespace, t as Memory } from "../../types-DGs5L0VN.js";
+import { g as JobHandler } from "../../types-CdP0z5tS.js";
+import { r as ResultsFilter } from "../../embeddings-C2S14foD.js";
+import { i as MemoryHit, n as MemoryCommand, s as MemoryNamespace, t as Memory } from "../../types-6oiy6rIa.js";
 import { LanguageModel, Tool } from "ai";
 //#region src/ai-sdk/memory/memory.d.ts
 /** The memory tool for any model, with the commands of Anthropic's memory tool. */
@@ -22,6 +23,8 @@ interface RecallToolOptions {
   readonly description?: string;
   /** Facts to return. Default 5. */
   readonly k?: number;
+  /** Drops the memories the caller may not read before the model sees them. */
+  readonly results?: ResultsFilter<MemoryHit>;
 }
 interface RecallToolResult {
   readonly memories: readonly {