better-supabase 0.8.0 → 0.10.0

package/dist/pool-gkhbGp2E.d.ts

@@ -1,89 +0,0 @@
-import { r as Executor } from "./executor-Drzu3dBK.js";
-import { t as SqlClient } from "./executor-ngjKL_Pe.js";
-//#region src/postgres/pool.d.ts
-/** The part of a `pg` pool client `createPostgres` uses. */
-interface PgPoolClient {
-  query(text: string, values?: unknown[]): Promise<{
-    rows: unknown[];
-  }>;
-  release(): void;
-}
-/** The part of a `pg.Pool` `createPostgres` uses. */
-interface PgPool {
-  connect(): Promise<PgPoolClient>;
-  end(): Promise<void>;
-}
-/** Statement timeouts in milliseconds by the role a transaction runs as. */
-interface PostgresTimeouts {
-  /** The connection-string role (`admin` and `transaction` without claims). Unset by default. */
-  readonly admin?: number;
-  /** Defaults to 8000, Supabase's setting for the role. */
-  readonly authenticated?: number;
-  /** Defaults to 3000, Supabase's setting for the role. */
-  readonly anon?: number;
-}
-interface PostgresOptions {
-  /** Defaults to `$SUPABASE_DB_URL`, then `$DATABASE_URL`. */
-  readonly connectionString?: string;
-  /** An existing pool to run on instead of opening one. `end()` ends it. */
-  readonly pool?: PgPool;
-  readonly max?: number;
-  /**
-   * Statement timeout in milliseconds, applied per transaction: one value
-   * for every role, or one per role. `set role` doesn't apply the role's own
-   * `statement_timeout`, so `authenticated` and `anon` get Supabase's 8 s
-   * and 3 s unless you set them.
-   */
-  readonly statementTimeout?: number | PostgresTimeouts;
-  /** Ends a session that stays idle inside a transaction this long, in milliseconds. */
-  readonly idleInTransactionTimeout?: number;
-  /** How long `connect` waits for a connection, in milliseconds. Defaults to 10000. */
-  readonly connectionTimeout?: number;
-  /** How long an unused connection stays open, in milliseconds. Defaults to 10000. */
-  readonly idleTimeout?: number;
-}
-/** JWT claims to run as. `role` must be `authenticated` or `anon`. */
-interface SqlClaims {
-  readonly sub?: string;
-  readonly role?: string;
-  readonly [claim: string]: unknown;
-}
-/** What every transaction of a user session sets besides the claims and role. */
-interface SessionOptions {
-  /**
-   * Transaction-local settings, e.g. `{ 'better_supabase.tenant': id }`.
-   * Names need a dot (custom settings); `role` and `request.jwt.claims` are
-   * set from the claims.
-   */
-  readonly settings?: Readonly<Record<string, string>>;
-  /** Runs every transaction with `begin read only`: writes fail with 25006. */
-  readonly readOnly?: boolean;
-}
-interface BetterPostgres {
-  /** Connects as the connection-string role. On Supabase that bypasses RLS. */
-  readonly admin: SqlClient;
-  /** Runs every query as the given user, with RLS, like PostgREST does. */
-  asUser(claims: SqlClaims, options?: SessionOptions): SqlClient;
-  /** Runs every query as `anon`. */
-  readonly anon: SqlClient;
-  /**
-   * Repositories' executor as the given user (`postgresExecutor(asUser(claims))`).
-   * `createServer` calls it for `ctx.sql`, so only apps that pass `postgres`
-   * bundle the SQL compiler.
-   */
-  executorFor(claims: SqlClaims, options?: SessionOptions): Executor;
-  /** Runs `fn` in one transaction. Pass claims to run it as a user. */
-  transaction<T>(fn: (client: SqlClient) => Promise<T>, options?: {
-    readonly claims?: SqlClaims;
-  } & SessionOptions): Promise<T>;
-  end(): Promise<void>;
-  [Symbol.asyncDispose](): Promise<void>;
-}
-/**
- * A pooled Postgres connection for jobs, scripts and tests. Each query (or
- * transaction) runs in its own transaction; claims and role are
- * transaction-local, so nothing leaks back into the pool.
- */
-declare function createPostgres(options?: PostgresOptions): BetterPostgres;
-//#endregion
-export { PostgresTimeouts as a, createPostgres as c, PostgresOptions as i, PgPool as n, SessionOptions as o, PgPoolClient as r, SqlClaims as s, BetterPostgres as t };

package/dist/postgrest-BUqLag2Q.d.ts

@@ -1,53 +0,0 @@
-import { v as Operation } from "./executor-Drzu3dBK.js";
-//#region src/compile/postgrest.d.ts
-/**
- * A compiled PostgREST request, expressed as calls on the public
- * postgrest-js builder so it works with any supabase-js client.
- */
-interface PostgrestPlan {
-  /** `select` parameter, or `undefined` for mutations without returning. */
-  readonly select: string | undefined;
-  readonly filters: readonly PlanFilter[];
-  readonly orders: readonly PlanOrder[];
-  readonly limits: readonly PlanLimit[];
-  readonly range: {
-    readonly from: number;
-    readonly to: number;
-  } | undefined;
-  /** The condition can never match; skip the request. */
-  readonly never: boolean;
-  /** `Prefer: max-affected` on an update or delete (PostgREST 13 and later). */
-  readonly maxAffected?: number;
-}
-interface PostgrestCompileOptions {
-  /**
-   * The PostgREST version the request goes to, from `postgrestVersion` in
-   * the config. `maxAffected` needs 13 or later; older versions fail with
-   * `invalid_request` before any request. Defaults to `"13"`.
-   */
-  readonly postgrestVersion?: string;
-}
-type PlanFilter = {
-  readonly kind: "filter";
-  readonly path: string;
-  readonly operator: string;
-  readonly value: string;
-} | {
-  readonly kind: "or";
-  readonly expression: string;
-  readonly referencedTable: string | undefined;
-};
-interface PlanOrder {
-  readonly column: string;
-  readonly ascending: boolean;
-  readonly nullsFirst: boolean | undefined;
-  readonly referencedTable: string | undefined;
-}
-interface PlanLimit {
-  readonly count: number;
-  readonly referencedTable: string | undefined;
-}
-/** Compiles an operation into a PostgREST plan. */
-declare function compilePostgrest(op: Operation, options?: PostgrestCompileOptions): PostgrestPlan;
-//#endregion
-export { PostgrestPlan as a, PostgrestCompileOptions as i, PlanLimit as n, compilePostgrest as o, PlanOrder as r, PlanFilter as t };

package/dist/problem-CJvFeGu7.js

@@ -1,126 +0,0 @@
-import { n as dbError } from "./errors-2M6CKMP4.js";
-//#region src/core/problem.ts
-const PROBLEM_TYPE_BASE = "https://bettersupabase.com/problems/";
-const PROBLEM_CONTENT_TYPE = "application/problem+json";
-const TITLES = {
-	not_found: "Not found",
-	unauthorized: "Unauthorized",
-	forbidden: "Forbidden",
-	conflict: "Conflict",
-	foreign_key: "Referenced row missing or still referenced",
-	check: "Check constraint violated",
-	not_null: "Required value missing",
-	exclusion: "Exclusion constraint violated",
-	invalid_input: "Invalid input",
-	invalid_value: "Stored value not representable",
-	raised: "Request rejected",
-	timeout: "Timed out",
-	serialization: "Concurrent update, retry",
-	network: "Database unreachable",
-	aborted: "Aborted",
-	invalid_request: "Invalid request",
-	validation: "Validation failed",
-	multiple_rows: "More than one row matched",
-	stale: "Row changed since it was read",
-	max_affected: "Too many rows affected",
-	rate_limited: "Too many requests",
-	quota_exceeded: "Quota exceeded",
-	unsupported: "Not supported by this executor",
-	unexpected: "Unexpected error"
-};
-/** Kinds whose message may contain internals (SQL, hostnames), hidden unless `expose` is set. */
-const INTERNAL = /* @__PURE__ */ new Set([
-	"unexpected",
-	"network",
-	"invalid_request"
-]);
-/** Converts a `DbError` to Problem Details. */
-function toProblem(error, options = {}) {
-	const problem = {
-		type: `${PROBLEM_TYPE_BASE}${error.kind.replaceAll("_", "-")}`,
-		title: TITLES[error.kind],
-		status: error.status,
-		kind: error.kind
-	};
-	if (!INTERNAL.has(error.kind) || options.expose) problem["detail"] = error.message;
-	if (options.instance) problem["instance"] = options.instance;
-	if (error.code) problem["code"] = error.code;
-	if (error.hint) problem["hint"] = error.hint;
-	if ("constraint" in error && error.constraint) problem["constraint"] = error.constraint;
-	if ("columns" in error) problem["columns"] = error.columns;
-	if ("column" in error && error.column) problem["column"] = error.column;
-	if ("issues" in error) problem["issues"] = error.issues;
-	if ("required" in error) problem["required"] = error.required;
-	if ("scopes" in error) problem["scopes"] = error.scopes;
-	if ("permission" in error) problem["permission"] = error.permission;
-	if ("approval" in error) problem["approval"] = error.approval;
-	if ("retryAfter" in error) problem["retryAfter"] = error.retryAfter;
-	if ("meter" in error) problem["meter"] = error.meter;
-	if ("limit" in error) problem["limit"] = error.limit;
-	if ("maxAffected" in error) problem["maxAffected"] = error.maxAffected;
-	return problem;
-}
-/**
-* An `application/problem+json` response. A 401, and a 403 for a missing
-* OAuth scope, carry an RFC 6750 `WWW-Authenticate: Bearer` challenge.
-*/
-function problemResponse(error, options = {}) {
-	const headers = new Headers(options.headers);
-	headers.set("content-type", PROBLEM_CONTENT_TYPE);
-	const realm = (options.realm ?? "supabase").replaceAll("\"", "");
-	if (error.status === 401 && !headers.has("www-authenticate")) {
-		const params = error.code === "MISSING_CREDENTIALS" ? "" : ", error=\"invalid_token\"";
-		headers.set("www-authenticate", `Bearer realm="${realm}"${params}`);
-	}
-	if ("scopes" in error && error.code === "INSUFFICIENT_SCOPE" && !headers.has("www-authenticate")) {
-		const scope = error.scopes.join(" ").replaceAll("\"", "");
-		headers.set("www-authenticate", `Bearer realm="${realm}", error="insufficient_scope", scope="${scope}"`);
-	}
-	if ("retryAfter" in error && !headers.has("retry-after")) headers.set("retry-after", String(error.retryAfter));
-	const problem = toProblem(error, options);
-	const body = options.format ? options.format(problem, error) : problem;
-	return new Response(JSON.stringify(body), {
-		status: error.status,
-		headers
-	});
-}
-function isProblem(value) {
-	if (typeof value !== "object" || value === null) return false;
-	const problem = value;
-	return typeof problem["type"] === "string" && typeof problem["status"] === "number" && typeof problem["title"] === "string";
-}
-function isKind(value) {
-	return typeof value === "string" && value in TITLES;
-}
-/** Turns a Problem Details body back into a `DbError` (client side). */
-function fromProblem(problem) {
-	const kind = isKind(problem.kind) ? problem.kind : "unexpected";
-	const extra = { status: problem.status };
-	for (const key of [
-		"code",
-		"hint",
-		"constraint",
-		"columns",
-		"column",
-		"required",
-		"scopes",
-		"permission",
-		"approval",
-		"retryAfter",
-		"meter",
-		"limit",
-		"maxAffected"
-	]) if (problem[key] !== void 0) extra[key] = problem[key];
-	extra["issues"] = problem.issues ?? [];
-	if (kind !== "validation") delete extra["issues"];
-	return dbError(kind, problem.detail ?? problem.title, extra);
-}
-/** An empty `405` that lists the methods a route does accept. */
-function methodNotAllowed(allowed) {
-	return new Response(null, {
-		status: 405,
-		headers: { allow: allowed.join(", ") }
-	});
-}
-//#endregion
-export { methodNotAllowed as a, isProblem as i, PROBLEM_TYPE_BASE as n, problemResponse as o, fromProblem as r, toProblem as s, PROBLEM_CONTENT_TYPE as t };

package/dist/problem-TvGdxO1t.d.ts

@@ -1,73 +0,0 @@
-import { E as ValidationIssue, b as DbError, x as DbErrorKind } from "./result-BchM1XZn.js";
-//#region src/core/problem.d.ts
-/** RFC 9457 Problem Details, with the `DbError` fields as extension members. */
-interface ProblemDetails {
-  readonly type: string;
-  readonly title: string;
-  readonly status: number;
-  readonly detail?: string;
-  readonly instance?: string;
-  /** The `DbError` kind. */
-  readonly kind: DbErrorKind;
-  readonly code?: string;
-  readonly hint?: string;
-  readonly constraint?: string;
-  readonly columns?: readonly string[];
-  readonly column?: string;
-  readonly issues?: readonly ValidationIssue[];
-  /** The assurance level a `forbidden` answer needs (`aal2`). */
-  readonly required?: "aal1" | "aal2";
-  /** The OAuth scopes a `forbidden` answer needs. */
-  readonly scopes?: readonly string[];
-  /** The permission key an authorizer denied. */
-  readonly permission?: string;
-  /** The pending approval of an `APPROVAL_REQUIRED` answer. */
-  readonly approval?: {
-    readonly id: string;
-  };
-  /** Seconds until a `rate_limited` or `quota_exceeded` caller may retry. */
-  readonly retryAfter?: number;
-  /** The meter a `quota_exceeded` answer ran out of, and its limit. */
-  readonly meter?: string;
-  readonly limit?: number;
-  /** The row limit a `max_affected` write exceeded. */
-  readonly maxAffected?: number;
-}
-declare const PROBLEM_TYPE_BASE = "https://bettersupabase.com/problems/";
-declare const PROBLEM_CONTENT_TYPE = "application/problem+json";
-interface ProblemOptions {
-  /** URI reference for this occurrence, e.g. the request path. */
-  readonly instance?: string;
-  /** Include messages of internal errors. Defaults to false. */
-  readonly expose?: boolean;
-}
-/**
- * Rewrites the Problem Details a block answers with into the app's own error
- * body, such as its `type` URIs and error codes. The status, `Retry-After`
- * and `WWW-Authenticate` headers stay as they are.
- */
-type ProblemFormat = (problem: ProblemDetails, error: DbError) => Readonly<Record<string, unknown>>;
-/** The `problem` option of the blocks that answer HTTP requests. */
-interface BlockProblemOptions {
-  /** The app's error body for the block's error responses. Defaults to RFC 9457 Problem Details. */
-  readonly problem?: ProblemFormat;
-}
-interface ProblemResponseOptions extends ProblemOptions {
-  readonly headers?: ConstructorParameters<typeof Headers>[0];
-  /** `realm` of the RFC 6750 challenge on 401. */
-  readonly realm?: string;
-  /** Rewrites the body; see `ProblemFormat`. */
-  readonly format?: ProblemFormat | undefined;
-}
-/** Converts a `DbError` to Problem Details. */
-declare function toProblem(error: DbError, options?: ProblemOptions): ProblemDetails;
-/**
- * An `application/problem+json` response. A 401, and a 403 for a missing
- * OAuth scope, carry an RFC 6750 `WWW-Authenticate: Bearer` challenge.
- */
-declare function problemResponse(error: DbError, options?: ProblemResponseOptions): Response;
-declare function isProblem(value: unknown): value is ProblemDetails;
-/** Turns a Problem Details body back into a `DbError` (client side). */
-declare function fromProblem(problem: ProblemDetails): DbError;
-//#endregion
-export { ProblemFormat as a, fromProblem as c, toProblem as d, ProblemDetails as i, isProblem as l, PROBLEM_CONTENT_TYPE as n, ProblemOptions as o, PROBLEM_TYPE_BASE as r, ProblemResponseOptions as s, BlockProblemOptions as t, problemResponse as u };

package/dist/provider-DxRTex4x.js

@@ -1,57 +0,0 @@
-import { n as dbError } from "./errors-2M6CKMP4.js";
-//#region src/credentials/provider.ts
-/** `ref` bound to `tenant`'s namespace. */
-function tenantCredentialRef(tenant, ref) {
-	return {
-		...ref,
-		tenant
-	};
-}
-/**
-* Whether `ref` belongs to `tenant`: its `tenant` is exactly that tenant.
-* Without a tenant (an app-level row), only a ref without one belongs.
-*/
-function credentialRefInTenant(ref, tenant) {
-	const owner = ref.tenant;
-	return tenant === void 0 ? owner === void 0 : typeof owner === "string" && owner === tenant;
-}
-/** The error for a ref that names a credential outside the row's tenant. */
-function foreignCredentialRef(tenant) {
-	return dbError("forbidden", tenant === void 0 ? "An app-level credential_ref can't name a tenant's credential" : `The credential_ref names a credential outside tenant "${tenant}"`, { hint: "CREDENTIAL_REF_FOREIGN" });
-}
-/** Checks the provider's `apiVersion` before the server uses it. */
-function credentialProviderOf(provider) {
-	const version = provider.apiVersion;
-	if (version !== 1) throw new TypeError(`credentials "${provider.name}" targets credential provider API ${String(version)}; this better-supabase supports 1. Upgrade better-supabase or use a release of the provider for API 1.`);
-	return provider;
-}
-/**
-* The subject for a request: the user behind a session or a user-bound API
-* key, the app for the service role, and `undefined` for anyone else.
-*/
-function subjectFor(context) {
-	const { auth } = context;
-	switch (auth.kind) {
-		case "user": {
-			const issuer = auth.claims.iss;
-			return typeof issuer === "string" && issuer.length > 0 ? {
-				type: "user",
-				id: auth.claims.sub,
-				issuer
-			} : {
-				type: "user",
-				id: auth.claims.sub
-			};
-		}
-		case "apiKey": return auth.userId === void 0 ? void 0 : {
-			type: "user",
-			id: auth.userId
-		};
-		case "service": return { type: "app" };
-		case "anon":
-		case "invalid": return;
-		default: return auth;
-	}
-}
-//#endregion
-export { tenantCredentialRef as a, subjectFor as i, credentialRefInTenant as n, foreignCredentialRef as r, credentialProviderOf as t };

package/dist/provider-ib9wzUDz.d.ts

@@ -1,113 +0,0 @@
-/// <reference lib="esnext.temporal" />
-import { b as DbError, t as AsyncResult } from "./result-BchM1XZn.js";
-import { r as AuthState } from "./resolve-MxXVWyhd.js";
-//#region src/credentials/provider.d.ts
-/**
- * Names a credential without holding it. Tables store this as a
- * `credential_ref jsonb` column; `provider` picks the `CredentialProvider`
- * and the other keys are that provider's.
- */
-type CredentialRef = {
-  readonly provider: string;
-  /**
-   * The tenant that owns the credential. A provider resolves, sets and
-   * revokes a ref with `tenant` only inside that tenant's namespace, so a
-   * tenant admin who picks a ref can never name another tenant's or the
-   * app's secret.
-   */
-  readonly tenant?: string;
-} & Readonly<Record<string, unknown>>;
-/** `ref` bound to `tenant`'s namespace. */
-declare function tenantCredentialRef<R extends CredentialRef>(tenant: string, ref: R): R & {
-  readonly tenant: string;
-};
-/**
- * Whether `ref` belongs to `tenant`: its `tenant` is exactly that tenant.
- * Without a tenant (an app-level row), only a ref without one belongs.
- */
-declare function credentialRefInTenant(ref: CredentialRef, tenant: string | undefined): boolean;
-/** The error for a ref that names a credential outside the row's tenant. */
-declare function foreignCredentialRef(tenant: string | undefined): DbError;
-/** Whose credential to use: the app's own, or one a user connected. */
-type CredentialSubject = {
-  readonly type: "app";
-} | {
-  readonly type: "user";
-  readonly id: string;
-  readonly issuer?: string;
-};
-interface GetTokenOptions {
-  readonly subject: CredentialSubject;
-  readonly scopes?: readonly string[];
-  readonly installationId?: string;
-  readonly signal?: AbortSignal;
-}
-interface CredentialToken {
-  readonly token: string;
-  /** Unset when the provider doesn't know when the token expires. */
-  readonly expiresAt?: Temporal.Instant;
-  /** Headers that authenticate a request with this token. */
-  readonly headers: Readonly<Record<string, string>>;
-}
-interface CredentialCapabilities {
-  /** The ref holds one credential per user subject. */
-  readonly userSubjects: boolean;
-  /** `startAuthorization` can send the user to connect the account. */
-  readonly authorization: boolean;
-  readonly revoke: boolean;
-  /** `verifyInbound` can check requests the third party sends. */
-  readonly inbound: boolean;
-}
-interface StartAuthorizationOptions {
-  readonly subject: CredentialSubject;
-  readonly redirectUri: string;
-  readonly scopes?: readonly string[];
-  readonly state?: string;
-}
-interface CompleteAuthorizationOptions {
-  readonly subject: CredentialSubject;
-  /** The callback request, or its URL, that carries the code and state. */
-  readonly callback: Request | URL | string;
-}
-/**
- * Resolves `CredentialRef`s to tokens. Versioned: a breaking change to this
- * contract ships a new `apiVersion`. Errors are `DbError`s: `invalid_input`
- * for a ref the provider doesn't handle, `not_found` when no credential is
- * stored, `forbidden` when the subject may not use it.
- */
-interface CredentialProvider {
-  readonly apiVersion: 1;
-  readonly name: string;
-  getToken(ref: CredentialRef, options: GetTokenOptions): AsyncResult<CredentialToken>;
-  capabilities(ref: CredentialRef): CredentialCapabilities;
-  /** The URL to send the user to; only when `capabilities(ref).authorization`. */
-  startAuthorization?(ref: CredentialRef, options: StartAuthorizationOptions): AsyncResult<{
-    readonly url: string;
-  }>;
-  completeAuthorization?(ref: CredentialRef, options: CompleteAuthorizationOptions): AsyncResult<void>;
-  /** Forgets the stored credential; `false` when there was none. */
-  revoke(ref: CredentialRef, options: {
-    readonly subject: CredentialSubject;
-  }): AsyncResult<boolean>;
-  /** Checks a request the third party sent (a webhook) against the ref's secret. */
-  verifyInbound?(request: Request, ref: CredentialRef): AsyncResult<boolean>;
-  /**
-   * Stores or replaces the credential a ref names, for `subject` when the
-   * ref is per user. Optional: a provider without it can't take a secret
-   * from the app (an OAuth-only provider, say).
-   */
-  set?(ref: CredentialRef, value: string, options?: SetCredentialOptions): AsyncResult<void>;
-}
-interface SetCredentialOptions {
-  readonly subject?: CredentialSubject;
-  readonly description?: string;
-}
-/**
- * The subject for a request: the user behind a session or a user-bound API
- * key, the app for the service role, and `undefined` for anyone else.
- */
-declare function subjectFor(context: {
-  readonly auth: AuthState;
-}): CredentialSubject | undefined;
-//#endregion
-export { CredentialSubject as a, SetCredentialOptions as c, foreignCredentialRef as d, subjectFor as f, CredentialRef as i, StartAuthorizationOptions as l, CredentialCapabilities as n, CredentialToken as o, tenantCredentialRef as p, CredentialProvider as r, GetTokenOptions as s, CompleteAuthorizationOptions as t, credentialRefInTenant as u };