better-supabase 0.8.0 → 0.9.0

package/dist/read-set-GEb-i0On.js

@@ -0,0 +1,314 @@
+import { n as dbError } from "./errors-8i6tSICm.js";
+import { i as tableMeta, t as builderFor } from "./build-Cx08LOT7.js";
+import { n as touchedTables } from "./tables-Cb-3_VWc.js";
+//#region src/core/spec.ts
+const READ_METHODS = [
+	"findMany",
+	"findFirst",
+	"findOnly",
+	"findUnique",
+	"findById",
+	"count",
+	"aggregate",
+	"exists",
+	"paginate"
+];
+function createSpecs(meta) {
+	const specs = {};
+	for (const table of Object.keys(meta.tables)) {
+		const methods = {};
+		for (const method of READ_METHODS) methods[method] = (...args) => ({
+			v: 1,
+			table,
+			method,
+			args: trimUndefined(args)
+		});
+		specs[table] = methods;
+	}
+	return specs;
+}
+function trimUndefined(args) {
+	const out = [...args];
+	while (out.length > 0 && out.at(-1) === void 0) out.pop();
+	return out;
+}
+function isQuerySpec(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const spec = value;
+	return spec.v === 1 && typeof spec.table === "string" && READ_METHODS.includes(spec.method) && Array.isArray(spec.args);
+}
+/** The argument object of a spec's method (`findById` takes it second). */
+function specOptions(spec) {
+	const value = spec.method === "findById" ? spec.args[1] : spec.args[0];
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+/**
+* App keys of every table a spec reads: its table, included relations and
+* relations used in `where`. Queries keyed by a spec go stale when any of
+* them changes. Invalid arguments yield just the spec's table; running the
+* spec reports the error.
+*/
+function specTables(meta, spec) {
+	const table = meta.tables[spec.table];
+	const args = specOptions(spec);
+	if (table && args?.["include"] === void 0 && !touchesRelations(table, args?.["where"])) return [spec.table];
+	const key = specKey(spec);
+	let byKey = tablesByMeta.get(meta);
+	if (!byKey) {
+		byKey = /* @__PURE__ */ new Map();
+		tablesByMeta.set(meta, byKey);
+	}
+	const known = key === void 0 ? void 0 : byKey.get(key);
+	if (known) return [...known];
+	let tables;
+	try {
+		tables = readTables(meta, spec);
+	} catch {
+		tables = [spec.table];
+	}
+	if (key !== void 0) {
+		if (byKey.size >= SPEC_CACHE_SIZE) byKey.clear();
+		byKey.set(key, tables);
+	}
+	return [...tables];
+}
+const SPEC_CACHE_SIZE = 500;
+const tablesByMeta = /* @__PURE__ */ new WeakMap();
+/** A text key for the spec, or `undefined` when its arguments do not serialize. */
+function specKey(spec) {
+	try {
+		return JSON.stringify([
+			spec.table,
+			spec.method,
+			spec.args
+		], (_key, value) => typeof value === "bigint" ? `${value}n` : value);
+	} catch {
+		return;
+	}
+}
+function touchesRelations(table, where) {
+	if (typeof where !== "object" || where === null) return false;
+	if (Array.isArray(where)) return where.some((item) => touchesRelations(table, item));
+	for (const [key, value] of Object.entries(where)) {
+		if (key in table.relations) return true;
+		if ((key === "AND" || key === "OR" || key === "NOT") && touchesRelations(table, value)) return true;
+	}
+	return false;
+}
+function readTables(meta, spec) {
+	const builder = builderFor(meta);
+	const table = tableMeta(meta, spec.table);
+	const args = specOptions(spec);
+	const counts = spec.method === "count" || spec.method === "exists" || spec.method === "aggregate";
+	return touchedTables({
+		kind: "select",
+		table,
+		selection: counts ? {
+			columns: [],
+			includes: []
+		} : builder.selection(table, args?.["select"], args?.["include"]),
+		where: builder.where(table, args?.["where"]),
+		orderBy: [],
+		limit: void 0,
+		offset: void 0,
+		count: void 0,
+		head: counts,
+		single: void 0
+	});
+}
+//#endregion
+//#region src/core/read-set.ts
+const NAME = /^[a-z][a-z0-9_]{0,59}$/;
+const PARAM = /^[a-z_][a-z0-9_]*$/i;
+const TYPE = /^(?:[a-z_][a-z0-9_]*\.)?[a-z_][a-z0-9_]*(?:\[\])?$/;
+/** `jsonb_build_object` takes at most 100 arguments. */
+const MAX_ENTRIES = 50;
+/**
+* Placeholders are `NUL bs:<name> NUL`: no real parameter value holds a NUL.
+* Auth placeholders start with `@`, which no parameter name can.
+*/
+const NUL = "\0";
+const SENTINEL = /* @__PURE__ */ new RegExp(`${NUL}bs:(@?[a-z_][a-z0-9_]*)${NUL}`, "gi");
+const EXACT = /* @__PURE__ */ new RegExp(`^${NUL}bs:(@?[a-z_][a-z0-9_]*)${NUL}$`, "i");
+function sentinel(name) {
+	return `${NUL}bs:${name}${NUL}`;
+}
+const AUTH = { uid: sentinel("@uid") };
+function tagged(name, array) {
+	if (!name.startsWith("@")) return {
+		kind: "param",
+		name,
+		array
+	};
+	return name === "@uid" ? {
+		kind: "auth",
+		name: "uid",
+		array
+	} : void 0;
+}
+/**
+* Registers reads that run as one round trip:
+*
+* ```ts
+* export const appChrome = defineReadSet(
+*   betterSupabase,
+*   'app_chrome',
+*   { params: { userId: 'uuid' } },
+*   (s, p) => ({
+*     unread: s.notifications.count({ where: { userId: p.userId, readAt: null } }),
+*     me: s.profiles.findFirst({ where: { id: p.userId } }),
+*   }),
+* );
+* ```
+*
+* `p` holds placeholders, not values: pass them straight into `where` (or
+* `in`), where the function reads them from its `p jsonb` argument.
+*/
+function defineReadSet(betterSupabase, name, options, build) {
+	if (!NAME.test(name)) throw new TypeError(`better-supabase: read set name "${name}" must be snake_case and at most 60 characters`);
+	const params = options.params ?? {};
+	const placeholders = {};
+	for (const [key, type] of Object.entries(params)) {
+		if (!PARAM.test(key)) throw new TypeError(`better-supabase: read set "${name}" has an invalid parameter name "${key}"`);
+		if (!TYPE.test(type)) throw new TypeError(`better-supabase: read set "${name}" parameter "${key}" has an invalid type "${type}"`);
+		placeholders[key] = type.endsWith("[]") ? [sentinel(key)] : sentinel(key);
+	}
+	const specs = build(betterSupabase.spec, placeholders, AUTH);
+	const entries = Object.entries(specs);
+	if (entries.length === 0 || entries.length > MAX_ENTRIES) throw new TypeError(`better-supabase: read set "${name}" needs between 1 and ${MAX_ENTRIES} reads`);
+	for (const [key, spec] of entries) if (!isQuerySpec(spec)) throw new TypeError(`better-supabase: read set "${name}" entry "${key}" is not a spec from betterSupabase.spec`);
+	warnUnscopedReads(betterSupabase, name, specs);
+	return {
+		kind: "read-set",
+		name,
+		functionName: `rs_${name}`,
+		params,
+		roles: options.roles ?? ["authenticated"],
+		specs,
+		definition: betterSupabase
+	};
+}
+/**
+* The generated function runs the reads as compiled at `gen` time, without
+* the runtime's `transformQuery` plugins, so tenant and soft-delete filters
+* that only those plugins add never reach it.
+*/
+function warnUnscopedReads(betterSupabase, name, specs) {
+	const filtering = betterSupabase.plugins.filter((plugin) => plugin.transformQuery !== void 0 && plugin.scopes?.length !== 0);
+	if (filtering.length === 0) return;
+	const { meta } = betterSupabase;
+	const filters = (plugin, key) => {
+		const flags = meta.tables[key]?.flags;
+		return plugin.scopes === void 0 || plugin.scopes.some((flag) => flags?.[flag] !== void 0);
+	};
+	const tables = [...new Set(Object.values(specs).flatMap((spec) => specTables(meta, spec)))].filter((key) => filtering.some((plugin) => filters(plugin, key)));
+	if (tables.length === 0) return;
+	const scoping = filtering.filter((plugin) => tables.some((key) => filters(plugin, key))).map((plugin) => plugin.name);
+	betterSupabase.events.logger.warn(`read set "${name}" reads ${tables.join(", ")}, which ${scoping.join(", ")} scope at runtime; its generated function only sees those filters when the specs spell them out (or RLS enforces them)`, {
+		readSet: name,
+		tables,
+		plugins: scoping
+	});
+}
+function isReadSet(value) {
+	return typeof value === "object" && value !== null && value.kind === "read-set" && typeof value.name === "string";
+}
+/** The placeholder a string or array carries, if it is exactly one. */
+function placeholderOf(value) {
+	if (typeof value === "string") {
+		const match = EXACT.exec(value);
+		return match ? tagged(match[1], false) : void 0;
+	}
+	if (Array.isArray(value) && value.length === 1) {
+		const inner = placeholderOf(value[0]);
+		return inner && !inner.array ? {
+			...inner,
+			array: true
+		} : inner;
+	}
+}
+/** Splits a string around the placeholders inside it. */
+function splitPlaceholders(value) {
+	const parts = [];
+	let last = 0;
+	for (const match of value.matchAll(SENTINEL)) {
+		if (match.index > last) parts.push({ text: value.slice(last, match.index) });
+		const placeholder = tagged(match[1], false);
+		parts.push(placeholder ?? { text: match[0] });
+		last = match.index + match[0].length;
+	}
+	if (last < value.length) parts.push({ text: value.slice(last) });
+	return parts;
+}
+function hasPlaceholder(value) {
+	return value.includes(`${NUL}bs:`);
+}
+/** Whether any string inside `value` is (or holds) a placeholder. */
+function containsPlaceholder(value) {
+	if (typeof value === "string") return hasPlaceholder(value);
+	if (Array.isArray(value)) return value.some(containsPlaceholder);
+	if (typeof value === "object" && value !== null) return Object.values(value).some(containsPlaceholder);
+	return false;
+}
+/** Whether the set's specs read the caller's identity. */
+function readSetUsesAuth(set) {
+	return Object.values(set.specs).some((spec) => usesAuth(spec.args));
+}
+function usesAuth(value) {
+	if (typeof value === "string") return [...value.matchAll(SENTINEL)].some((match) => match[1].startsWith("@"));
+	if (Array.isArray(value)) return value.some(usesAuth);
+	if (typeof value === "object" && value !== null) return Object.values(value).some(usesAuth);
+	return false;
+}
+/** Missing or wrongly typed parameters, as messages. */
+function checkParams(set, values) {
+	const problems = [];
+	for (const [key, type] of Object.entries(set.params)) {
+		const value = values?.[key];
+		if (value === void 0 || value === null) problems.push(`missing parameter "${key}"`);
+		else if (type.endsWith("[]") !== Array.isArray(value)) problems.push(`parameter "${key}" must be ${type.endsWith("[]") ? "an array" : "a single value"}`);
+	}
+	return problems;
+}
+/**
+* The specs with every placeholder replaced by its value; `auth.uid` takes
+* the `sub` claim, which must be verified. `noCaller` is set when the set
+* reads `auth.uid` and there is no `sub`: the specs then match no user, and
+* only the function, which reads `auth.uid()` itself, can run the set.
+*/
+function bindParams(set, values, context) {
+	const sub = context.claims?.["sub"];
+	const uid = typeof sub === "string" && sub !== "" ? sub : null;
+	const valueOf = (placeholder) => placeholder.kind === "auth" ? uid : values?.[placeholder.name];
+	const bind = (value) => {
+		const placeholder = placeholderOf(value);
+		if (placeholder) {
+			const bound = valueOf(placeholder);
+			return placeholder.kind === "auth" && placeholder.array ? [bound] : bound;
+		}
+		if (typeof value === "string") {
+			if (!hasPlaceholder(value)) return value;
+			return splitPlaceholders(value).map((part) => "text" in part ? part.text : String(valueOf(part) ?? "")).join("");
+		}
+		if (Array.isArray(value)) return value.map(bind);
+		if (typeof value === "object" && value !== null) {
+			if (Object.getPrototypeOf(value) !== Object.prototype) return value;
+			return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, bind(entry)]));
+		}
+		return value;
+	};
+	return {
+		specs: Object.fromEntries(Object.entries(set.specs).map(([key, spec]) => [key, {
+			...spec,
+			args: spec.args.map(bind)
+		}])),
+		noCaller: uid === null && readSetUsesAuth(set) ? dbError("invalid_request", `db.$many(${set.name}): the read set reads auth.uid, but this connection has no user claims. Connect with the user's verified claims ({ claims: { sub } }), or call it over PostgREST, where the function reads auth.uid().`) : void 0
+	};
+}
+/** App keys of every table the set reads. */
+function readSetTables(set, meta) {
+	const schema = meta ?? set.definition.meta;
+	return [...new Set(Object.values(set.specs).flatMap((spec) => specTables(schema, spec)))];
+}
+//#endregion
+export { hasPlaceholder as a, readSetTables as c, isQuerySpec as d, specTables as f, defineReadSet as i, splitPlaceholders as l, checkParams as n, isReadSet as o, containsPlaceholder as r, placeholderOf as s, bindParams as t, createSpecs as u };

package/dist/realtime/index.d.ts

@@ -1,4 +1,8 @@
-import { n as AccessPolicySql, r as AccessTopicPolicy } from "../types-CoE5Zwy4.js";
-import { J as TemplateValues, q as TemplateParams } from "../storage-api-CB7Zl1Ci.js";
-import { A as TopicSubscription, C as TopicEvent, D as TopicPayload, E as TopicOptions, F as rowChange, M as TriggerOptions, N as TriggerValue, O as TopicSqlOptions, P as defineTopic, S as Topic, T as TopicMessage, _ as RealtimeClient, a as LiveSource, b as Subscription, c as liveQuery, d as PresenceInput, f as PresenceMember, g as PresenceSubscription, h as PresenceSchema, i as LiveQueryOptions, j as TriggerLookup, k as TopicSubscribeOptions, l as liveTopic, m as PresenceOutput, n as LiveCountOptions, o as LiveSubscription, p as PresenceOptions, r as LiveCountSeed, s as liveCount, t as CountRunner, u as EventSchemas, v as RowChange, w as TopicHandlers, x as SubscriptionStatus, y as SubscribeOptions } from "../index-BCHR4Ucl.js";
-export { type AccessPolicySql, type AccessTopicPolicy, type CountRunner, type EventSchemas, type LiveCountOptions, type LiveCountSeed, type LiveQueryOptions, type LiveSource, type LiveSubscription, type PresenceInput, type PresenceMember, type PresenceOptions, type PresenceOutput, type PresenceSchema, type PresenceSubscription, type RealtimeClient, type RowChange, type SubscribeOptions, type Subscription, type SubscriptionStatus, type TemplateParams, type TemplateValues, type Topic, type TopicEvent, type TopicHandlers, type TopicMessage, type TopicOptions, type TopicPayload, type TopicSqlOptions, type TopicSubscribeOptions, type TopicSubscription, type TriggerLookup, type TriggerOptions, type TriggerValue, defineTopic, liveCount, liveQuery, liveTopic, rowChange };
+import { n as AccessPolicySql, r as AccessTopicPolicy } from "../types-YfwpIE-d.js";
+import { t as RealtimeStatus } from "../realtime-status-DcsO00Gw.js";
+import { J as TemplateValues, q as TemplateParams } from "../storage-api-Cx-1iWBd.js";
+import { A as defineTopic, C as TopicSubscription, D as TriggerPayloadMode, E as TriggerOptions, M as rowKeys, N as FanOutResult, O as TriggerTopic, P as TopicFanOutOptions, S as TopicSubscribeOptions, T as TriggerLookup, _ as TopicMessage, a as PresenceOutput, b as TopicPermission, c as RealtimeClient, d as SubscribeOptions, f as Subscription, g as TopicHandlers, h as TopicEvent, i as PresenceOptions, j as rowChange, k as TriggerValue, l as RowChange, m as Topic, n as PresenceInput, o as PresenceSchema, p as SubscriptionStatus, r as PresenceMember, s as PresenceSubscription, t as EventSchemas, u as RowKeys, v as TopicOptions, w as TopicTriggerOptions, x as TopicSqlOptions, y as TopicPayload } from "../topic-cMS7UtM1.js";
+import { a as watchTopic, i as topicPort, n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-EFpOIIDE.js";
+import { n as subjectReaders, t as SubjectReadersOptions } from "../subject-readers-fxP5wu0s.js";
+import { a as LiveSource, c as liveQuery, i as LiveQueryOptions, l as liveTopic, n as LiveCountOptions, o as LiveSubscription, r as LiveCountSeed, s as liveCount, t as CountRunner } from "../index-BIi8i6BO.js";
+export { type AccessPolicySql, type AccessTopicPolicy, type CountRunner, type EventSchemas, type FanOutResult, type LiveCountOptions, type LiveCountSeed, type LiveQueryOptions, type LiveSource, type LiveSubscription, type PresenceInput, type PresenceMember, type PresenceOptions, type PresenceOutput, type PresenceSchema, type PresenceSubscription, type RealtimeClient, type RealtimeStatus, type RowChange, type RowKeys, type SubjectReadersOptions, type SubscribeOptions, type Subscription, type SubscriptionStatus, type TemplateParams, type TemplateValues, type Topic, type TopicEvent, type TopicFanOutOptions, type TopicHandle, type TopicHandlers, type TopicMessage, type TopicOptions, type TopicPayload, type TopicPermission, type TopicPort, type TopicSqlOptions, type TopicSubscribeOptions, type TopicSubscription, type TopicTriggerOptions, type TopicWatch, type TriggerLookup, type TriggerOptions, type TriggerPayloadMode, type TriggerTopic, type TriggerValue, defineTopic, liveCount, liveQuery, liveTopic, rowChange, rowKeys, subjectReaders, topicPort, watchTopic };

package/dist/realtime/index.js

@@ -1,327 +1,5 @@
-import { n as dbError } from "../errors-2M6CKMP4.js";
-import { a as ok, r as err, t as AsyncResult } from "../result-DEqHCMKP.js";
-import { a as tenantClaimPaths } from "../claims-PqzCxaTD.js";
-import { i as refreshRealtimeAuth, n as liveQuery, r as liveTopic, t as liveCount } from "../live-CTAZQkwl.js";
-import { a as sqlString, i as sqlIdent, n as parseTemplate, r as slug, t as claimSql } from "../template-lPVh-EwW.js";
-import { t as joinTopic } from "../channels-CkgQ_X60.js";
-import { t as toApp } from "../casing-DdFWEtqr.js";
-import { o as resolveProviderSql, r as accessCheck } from "../access-sql-CrSbK1q-.js";
-import "@supabase/supabase-js";
-//#region src/realtime/topic-sql.ts
-function columnSql(meta, column, where) {
-	const db = meta.columns[column]?.db;
-	if (!db) throw new TypeError(`defineTopic: no column for ${where} on "${meta.key}" ("${column}")`);
-	return sqlIdent(db);
-}
-/** A trigger value as SQL on `rec`, with one subquery per lookup. */
-function triggerValueSql(tables, meta, value, where, depth = 0) {
-	if (typeof value === "string") return `rec.${columnSql(meta, value, where)}`;
-	const joined = tables[value.from];
-	if (!joined) throw new TypeError(`defineTopic: unknown table "${value.from}" for ${where}`);
-	const key = value.key ?? (joined.primaryKey.length === 1 ? joined.primaryKey[0] : void 0);
-	if (key === void 0) throw new TypeError(`defineTopic: "${value.from}" has no single-column primary key; name its key for ${where}`);
-	const alias = `j${String(depth)}`;
-	const via = triggerValueSql(tables, meta, value.via, where, depth + 1);
-	return `(select ${alias}.${columnSql(joined, value.select, where)} from ${sqlIdent(joined.schema)}.${sqlIdent(joined.name)} ${alias} where ${alias}.${columnSql(joined, key, where)} = ${via} limit 1)`;
-}
-/** The event name: one for every operation, one per operation, or the operation. */
-function eventSql(event) {
-	if (event === void 0) return "tg_op";
-	if (typeof event === "string") return sqlString(event);
-	const cases = Object.entries(event).filter((entry) => entry[1] !== void 0).map(([operation, name]) => ` when ${sqlString(operation.toUpperCase())} then ${sqlString(name)}`);
-	return cases.length === 0 ? "tg_op" : `case tg_op${cases.join("")} else tg_op end`;
-}
-//#endregion
-//#region src/realtime/topic.ts
-const VALUE = /^[\w.@+=-]+$/;
-function validateValue(_name, value) {
-	return VALUE.test(value) ? void 0 : "contains characters topics do not allow";
-}
-async function validate(schema, value) {
-	if (!schema) return {
-		ok: true,
-		value
-	};
-	const result = await schema["~standard"].validate(value);
-	if (result.issues) return {
-		ok: false,
-		issues: result.issues.map((issue) => ({
-			message: issue.message,
-			...issue.path ? { path: issue.path.map((part) => typeof part === "object" ? part.key : part) } : {}
-		}))
-	};
-	return {
-		ok: true,
-		value: result.value
-	};
-}
-function sendError(status, message) {
-	if (status === 401) return dbError("unauthorized", message);
-	if (status === 403) return dbError("forbidden", message);
-	if (status === 429 || status >= 500 || status === 0) return dbError("network", message, status ? { status } : {});
-	return dbError("invalid_request", message, { status });
-}
-/**
-* A typed Realtime broadcast topic: names from a template, RLS policies for
-* private channels, row-change triggers, and disposable subscriptions.
-*
-* ```ts
-* export const notifications = defineTopic('organization:{organizationId}:notifications:{userId}', {
-*   events: { created: v.object({ id: v.string(), title: v.string() }) },
-* });
-* using sub = notifications.subscribe(supabase, { organizationId, userId }, { created: (n) => toast(n.title) });
-* ```
-*/
-function defineTopic(template, options = {}) {
-	const parsed = parseTemplate(template, ":", validateValue);
-	const literal = template.replaceAll(/\{[^}]+\}/g, " ");
-	const name = slug(options.name ?? literal) || "topic";
-	const isPrivate = options.private ?? true;
-	const schemas = options.events ?? {};
-	const hasPresence = options.presence !== void 0 && options.presence !== false;
-	const presenceSchema = typeof options.presence === "object" ? options.presence : void 0;
-	const segment = (param, kind) => {
-		const index = parsed.segmentOf(param);
-		if (index === void 0) throw new TypeError(`defineTopic: the ${kind} check needs {${param}} as a whole segment in "${template}"`);
-		return index;
-	};
-	const checks = [];
-	const access = options.access;
-	const tenantParam = options.tenant === false ? void 0 : options.tenant?.param ?? "organizationId";
-	const accessChecksFor = (functions) => {
-		if (!access) return void 0;
-		const where = `defineTopic(${template})`;
-		const target = resolveProviderSql(where, access, functions);
-		const id = access.scope === "platform" ? void 0 : `split_part((select realtime.topic()), ':', ${String(access.segment ?? segment(tenantParam ?? "organizationId", "access"))})`;
-		const receive = accessCheck(where, target, access.receive, id);
-		return {
-			receive,
-			send: access.send === void 0 ? receive : accessCheck(where, target, access.send, id)
-		};
-	};
-	const fixedChecks = access?.sql === "provider" ? void 0 : accessChecksFor();
-	if (!access && tenantParam && (options.tenant || parsed.params.includes(tenantParam))) {
-		const tenant = options.tenant === false ? {} : options.tenant ?? {};
-		const expression = tenant.sql ?? claimSql(tenant.claim ?? tenantClaimPaths());
-		checks.push(`split_part((select realtime.topic()), ':', ${String(segment(tenantParam, "tenant"))}) = (${expression})`);
-	}
-	const ownerParam = options.owner === false ? void 0 : options.owner?.param ?? "userId";
-	if (ownerParam && (options.owner || parsed.params.includes(ownerParam))) checks.push(`split_part((select realtime.topic()), ':', ${String(segment(ownerParam, "owner"))}) = (select auth.uid())::text`);
-	const topicOf = (values) => parsed.build(values);
-	return {
-		template,
-		name,
-		params: parsed.params,
-		private: isPrivate,
-		presence: hasPresence,
-		topic: topicOf,
-		match: (topic) => parsed.match(topic),
-		sql(sqlOptions) {
-			const accessChecks = access?.sql === "provider" ? accessChecksFor(sqlOptions?.functions) : fixedChecks;
-			const extensions = hasPresence ? "('broadcast', 'presence')" : "('broadcast')";
-			const condition = (extra) => [
-				`(select realtime.topic()) ~ ${sqlString(parsed.sqlPattern)}`,
-				`realtime.messages.extension in ${extensions}`,
-				...checks,
-				...extra === void 0 ? [] : [extra]
-			].join("\n    and ");
-			const lines = [`-- better-supabase: topic ${template}`];
-			const policies = [[
-				"receive",
-				"select",
-				"using",
-				condition(accessChecks?.receive)
-			]];
-			if (options.send || hasPresence || access?.send !== void 0) policies.push([
-				"send",
-				"insert",
-				"with check",
-				condition(accessChecks?.send)
-			]);
-			for (const [suffix, command, clause, check] of policies) {
-				const policy = sqlIdent(`bs_topic_${name}_${suffix}`);
-				lines.push(`drop policy if exists ${policy} on realtime.messages;`, `create policy ${policy} on realtime.messages for ${command} to authenticated\n  ${clause} (\n    ${check}\n  );`);
-			}
-			return `${lines.join("\n")}\n`;
-		},
-		triggerSql(betterSupabase, table, trigger) {
-			const meta = betterSupabase.meta.tables[table];
-			if (!meta) throw new TypeError(`defineTopic: unknown table "${table}"`);
-			const values = trigger.values;
-			const tables = betterSupabase.meta.tables;
-			const parts = template.split(/(\{[^}]+\})/).filter(Boolean).map((part) => {
-				const param = /^\{(.+)\}$/.exec(part)?.[1];
-				if (param === void 0) return sqlString(part);
-				const value = values[param];
-				if (value === void 0) throw new TypeError(`defineTopic: no column for {${param}} on "${table}"`);
-				return `${triggerValueSql(tables, meta, value, `{${param}}`)}::text`;
-			});
-			const schema = trigger.functionSchema ?? "better_supabase";
-			const fn = `${sqlIdent(schema)}.${sqlIdent(`bs_broadcast_${name}_${slug(meta.name)}`)}`;
-			const triggerName = sqlIdent(`bs_broadcast_${name}`);
-			const target = `${sqlIdent(meta.schema)}.${sqlIdent(meta.name)}`;
-			const events = (trigger.events ?? [
-				"insert",
-				"update",
-				"delete"
-			]).join(" or ");
-			const event = eventSql(trigger.event);
-			const payload = trigger.payload;
-			const send = payload ? [
-				"  perform realtime.send(",
-				`    jsonb_build_object(${Object.entries(payload).map(([key, value]) => `${sqlString(key)}, ${typeof value === "object" && "sql" in value ? `(${value.sql.replaceAll("{row}", "rec")})` : triggerValueSql(tables, meta, value, `payload.${key}`)}`).join(", ")}),`,
-				`    ${event}, topic, ${String(isPrivate)}`,
-				"  );"
-			] : [
-				"  perform realtime.broadcast_changes(",
-				`    topic, ${event}, tg_op, tg_table_name, tg_table_schema, new, old`,
-				"  );"
-			];
-			return [
-				`-- better-supabase: broadcast ${meta.name} changes to ${template}`,
-				`create schema if not exists ${sqlIdent(schema)};`,
-				`create or replace function ${fn}()`,
-				"returns trigger",
-				"language plpgsql",
-				"security definer",
-				"set search_path = ''",
-				"as $$",
-				"declare",
-				"  rec record;",
-				"  topic text;",
-				"begin",
-				"  if tg_op = 'DELETE' then rec := old; else rec := new; end if;",
-				`  topic := ${parts.join(" || ")};`,
-				"  if topic is null then",
-				"    return null;",
-				"  end if;",
-				...send,
-				"  return null;",
-				"end;",
-				"$$;",
-				`revoke execute on function ${fn}() from public, anon, authenticated;`,
-				"",
-				`drop trigger if exists ${triggerName} on ${target};`,
-				`create trigger ${triggerName} after ${events} on ${target}`,
-				`  for each row execute function ${fn}();`,
-				""
-			].join("\n");
-		},
-		subscribe(client, values, handlers, given) {
-			const topic = topicOf(values);
-			const table = handlers;
-			const subscribeOptions = given ?? {};
-			let members = [];
-			let syncs = 0;
-			const sync = async (state) => {
-				const run = ++syncs;
-				const checked = await Promise.all(Object.entries(state).flatMap(([key, metas]) => metas.map(async ({ presence_ref: _ref, ...meta }) => ({
-					key,
-					meta,
-					checked: await validate(presenceSchema, meta)
-				}))));
-				if (run !== syncs) return;
-				const valid = [];
-				for (const each of checked) if (each.checked.ok) valid.push({
-					key: each.key,
-					state: each.checked.value
-				});
-				else subscribeOptions.onInvalid?.({
-					event: "presence",
-					payload: each.meta,
-					topic
-				}, each.checked.issues);
-				members = valid;
-				subscribeOptions.onPresence?.(valid);
-			};
-			const subscriber = {
-				onStatus: subscribeOptions.onStatus,
-				receive: (message) => {
-					const handler = table[message.event] ?? table["*"];
-					if (!handler) return;
-					validate(schemas[message.event], message.payload).then((checked) => {
-						if (checked.ok) handler(checked.value, message);
-						else subscribeOptions.onInvalid?.(message, checked.issues);
-					});
-				},
-				...hasPresence ? { sync: (state) => void sync(state) } : {}
-			};
-			const { shared, leave } = joinTopic(client, topic, isPrivate, subscribeOptions.self ?? false, hasPresence, subscriber);
-			let closed = false;
-			const unsubscribe = async () => {
-				if (closed) return;
-				closed = true;
-				await leave();
-			};
-			const presenceCall = (action, run) => AsyncResult.from(async () => {
-				if (closed) return err(dbError("invalid_request", `Presence ${action} after unsubscribe on ${topic}`));
-				try {
-					await shared.ready;
-				} catch (cause) {
-					return err(dbError("network", `Presence ${action} on ${topic}: the join failed`, { details: cause instanceof Error ? cause.message : String(cause) }));
-				}
-				const answer = await run();
-				return answer === "ok" ? ok(void 0) : err(dbError("network", `Presence ${action} ${answer} on ${topic}`));
-			});
-			const subscription = {
-				topic,
-				channel: shared.channel,
-				ready: shared.ready,
-				unsubscribe,
-				[Symbol.dispose]: () => void unsubscribe(),
-				[Symbol.asyncDispose]: unsubscribe
-			};
-			return hasPresence ? {
-				...subscription,
-				track: (state) => AsyncResult.from(async () => {
-					const checked = await validate(presenceSchema, state);
-					if (!checked.ok) return err(dbError("validation", `Invalid presence state for ${topic}`, { issues: checked.issues }));
-					return presenceCall("track", async () => {
-						shared.tracker = subscriber;
-						return shared.channel.track(checked.value);
-					});
-				}),
-				untrack: () => presenceCall("untrack", async () => {
-					if (shared.tracker === subscriber) shared.tracker = void 0;
-					return shared.channel.untrack();
-				}),
-				members: () => members
-			} : subscription;
-		},
-		send(client, values, event, payload) {
-			return AsyncResult.from(async () => {
-				const topic = topicOf(values);
-				const checked = await validate(schemas[event], payload);
-				if (!checked.ok) return err(dbError("validation", `Invalid payload for ${event}`, { issues: checked.issues }));
-				const open = client.getChannels().some((existing) => existing.topic === `realtime:${topic}`);
-				if (isPrivate && !open) await refreshRealtimeAuth(client);
-				const channel = client.channel(topic, { config: { private: isPrivate } });
-				try {
-					const response = await channel.httpSend(event, checked.value);
-					return response.success ? ok(void 0) : err(sendError(response.status, response.error));
-				} finally {
-					if (!open) await client.removeChannel(channel);
-				}
-			});
-		}
-	};
-}
-/**
-* Reads a `realtime.broadcast_changes` message as an app-cased row change.
-* Returns `null` for messages about other tables.
-*/
-function rowChange(betterSupabase, table, message) {
-	const meta = betterSupabase.meta.tables[table];
-	const payload = message.payload;
-	if (!meta || !payload || payload.table !== meta.name || payload.schema && payload.schema !== meta.schema) return null;
-	const operation = payload.operation ?? message.event;
-	if (operation !== "INSERT" && operation !== "UPDATE" && operation !== "DELETE") return null;
-	return {
-		operation,
-		table,
-		record: payload.record ? toApp(meta, payload.record) : null,
-		oldRecord: payload.old_record ? toApp(meta, payload.old_record) : null
-	};
-}
-//#endregion
-export { defineTopic, liveCount, liveQuery, liveTopic, rowChange };
+import { n as liveQuery, r as liveTopic, t as liveCount } from "../live-DwDreq1n.js";
+import { t as subjectReaders } from "../subject-readers-DiePmaYP.js";
+import { n as watchTopic, t as topicPort } from "../watch-topic-miuymrli.js";
+import { n as rowChange, r as rowKeys, t as defineTopic } from "../topic-ByDz9edV.js";
+export { defineTopic, liveCount, liveQuery, liveTopic, rowChange, rowKeys, subjectReaders, topicPort, watchTopic };

package/dist/realtime-status-D2dw1hOE.js

@@ -0,0 +1,12 @@
+//#region src/core/realtime-status.ts
+/**
+* The status of the Realtime features a topic relies on. A private topic
+* needs Realtime Authorization for broadcast and presence, which is in
+* public beta; public broadcast, presence and Postgres changes are
+* generally available.
+*/
+function topicStatus(topic) {
+	return topic.private ?? true ? "beta" : "ga";
+}
+//#endregion
+export { topicStatus as t };