better-supabase 0.8.0 → 0.9.0

package/dist/verify-C91Wyp40.d.ts

@@ -1,142 +0,0 @@
-/// <reference lib="esnext.temporal" />
-import { f as Result } from "./result-BchM1XZn.js";
-import { L as TableKey, M as Row, a as AnyModels, i as AnyFunctions } from "./types-CoE5Zwy4.js";
-import { t as BetterSupabase } from "./define-DmcfoNXB.js";
-import { n as VerifyOptions, r as WebhookInput, t as VerifiedWebhook } from "./signatures-BRS_p3WD.js";
-//#region src/blocks/webhooks/verify.d.ts
-/** The `Stripe-Signature` header for `body`, for tests and local replays. */
-declare function signStripeWebhook(secret: string, body: string, timestamp?: Temporal.Instant): Promise<string>;
-/**
- * Verifies a `Stripe-Signature` header (`t=…,v1=…`) with the endpoint's
- * `whsec_…` secret and parses the event. Pass several secrets while rolling
- * the endpoint secret. Runs on WebCrypto, so it needs no `stripe` package.
- */
-declare function verifyStripeWebhook<T = unknown>(input: WebhookInput, secrets: string | readonly string[], options?: VerifyOptions): Promise<Result<VerifiedWebhook<T>>>;
-/**
- * `createWebhookInbox({ source: 'stripe', verify: stripeInboxVerify(secret) })`:
- * stores Stripe events keyed by their event id.
- */
-declare function stripeInboxVerify(secrets: string | readonly string[], options?: VerifyOptions): (request: Request, body: string) => Promise<Result<{
-  id: string;
-  payload: unknown;
-}>>;
-interface HookUser {
-  readonly id: string;
-  readonly email?: string;
-  readonly phone?: string;
-  readonly app_metadata?: Readonly<Record<string, unknown>>;
-  readonly user_metadata?: Readonly<Record<string, unknown>>;
-  readonly [key: string]: unknown;
-}
-interface AuthHookError {
-  readonly error: {
-    readonly http_code: number;
-    readonly message: string;
-  };
-}
-interface AuthHooks {
-  custom_access_token: {
-    input: {
-      readonly user_id: string;
-      readonly claims: Readonly<Record<string, unknown>> & {
-        readonly sub: string;
-        readonly role: string;
-      };
-      readonly authentication_method: string;
-    };
-    output: {
-      readonly claims: Readonly<Record<string, unknown>>;
-    };
-  };
-  send_email: {
-    input: {
-      readonly user: HookUser;
-      readonly email_data: {
-        readonly token: string;
-        readonly token_hash: string;
-        readonly redirect_to: string;
-        readonly email_action_type: string;
-        readonly site_url: string;
-        readonly token_new: string;
-        readonly token_hash_new: string;
-        /** Auth adds fields over time (`old_email`, `factor_type`, ...). */
-        readonly [key: string]: unknown;
-      };
-    };
-    output: Record<never, never>;
-  };
-  send_sms: {
-    input: {
-      readonly user: HookUser;
-      readonly sms: {
-        readonly otp: string;
-      };
-    };
-    output: Record<never, never>;
-  };
-  mfa_verification_attempt: {
-    input: {
-      readonly factor_id: string;
-      readonly factor_type: string;
-      readonly user_id: string;
-      readonly valid: boolean;
-    };
-    output: {
-      readonly decision: "continue" | "reject";
-      readonly message?: string;
-    };
-  };
-  password_verification_attempt: {
-    input: {
-      readonly user_id: string;
-      readonly valid: boolean;
-    };
-    output: {
-      readonly decision: "continue" | "reject";
-      readonly message?: string;
-      readonly should_logout_user?: boolean;
-    };
-  };
-  before_user_created: {
-    input: {
-      readonly metadata: Readonly<Record<string, unknown>>;
-      readonly user: HookUser;
-    };
-    output: Record<never, never>;
-  };
-}
-type AuthHookKind = keyof AuthHooks;
-/** Rejects a hook with a status and message Supabase Auth passes to the client. */
-declare function hookError(status: number, message: string): AuthHookError;
-/**
- * A `(request) => Response` handler for a Supabase Auth hook: verifies the
- * Standard Webhooks signature, types the payload and serializes the answer.
- *
- * ```ts
- * export const POST = authHook('custom_access_token', env.AUTH_HOOK_SECRET, async ({ claims, user_id }) => ({
- *   claims: { ...claims, tenant_id: await organizationFor(user_id) },
- * }));
- * ```
- */
-declare function authHook<K extends AuthHookKind>(_kind: K, secret: string | readonly string[], handler: (payload: AuthHooks[K]["input"], webhook: VerifiedWebhook<AuthHooks[K]["input"]>) => AuthHooks[K]["output"] | AuthHookError | Promise<AuthHooks[K]["output"] | AuthHookError>, options?: VerifyOptions): (request: Request) => Promise<Response>;
-interface DatabaseWebhookPayload {
-  readonly type: "INSERT" | "UPDATE" | "DELETE";
-  readonly table: string;
-  readonly schema: string;
-  readonly record: Readonly<Record<string, unknown>> | null;
-  readonly old_record: Readonly<Record<string, unknown>> | null;
-}
-interface DatabaseChange<R> {
-  readonly type: "INSERT" | "UPDATE" | "DELETE";
-  readonly table: string;
-  readonly record: R | null;
-  readonly oldRecord: Partial<R> | null;
-}
-declare function isDatabaseWebhook(value: unknown): value is DatabaseWebhookPayload;
-/**
- * Reads a database webhook payload for `table` as an app-cased change.
- * Returns `null` for other tables or payloads that aren't database webhooks.
- */
-declare function databaseChange<M extends AnyModels, D, F extends AnyFunctions, E, T extends TableKey<M>>(betterSupabase: BetterSupabase<M, D, F, E>, table: T, payload: unknown): DatabaseChange<Row<M, T>> | null;
-//#endregion
-export { DatabaseWebhookPayload as a, hookError as c, stripeInboxVerify as d, verifyStripeWebhook as f, DatabaseChange as i, isDatabaseWebhook as l, AuthHookKind as n, authHook as o, AuthHooks as r, databaseChange as s, AuthHookError as t, signStripeWebhook as u };

package/dist/verify-CJbYfADA.js

@@ -1,124 +0,0 @@
-import { n as dbError } from "./errors-2M6CKMP4.js";
-import { c as optionalTemporal, s as nowInstant } from "./temporal-BJGitm-h.js";
-import { n as temporalMissing } from "./temporal-required-BtynQtM-.js";
-import { a as ok, r as err } from "./result-DEqHCMKP.js";
-import { n as hmacHex, r as timingSafeEqual } from "./hmac-DCud0myt.js";
-import { a as verifyWebhook, r as unauthorized, t as header } from "./signatures-DsWv_bYR.js";
-import { t as toApp } from "./casing-DdFWEtqr.js";
-//#region src/blocks/webhooks/verify.ts
-/** Stripe signs with the endpoint secret's UTF-8 bytes, not its base64 decoding. */
-const stripeSignature = hmacHex;
-/** The `Stripe-Signature` header for `body`, for tests and local replays. */
-async function signStripeWebhook(secret, body, timestamp = nowInstant()) {
-	const seconds = String(Math.floor(timestamp.epochMilliseconds / 1e3));
-	return `t=${seconds},v1=${await stripeSignature(secret, `${seconds}.${body}`)}`;
-}
-/**
-* Verifies a `Stripe-Signature` header (`t=…,v1=…`) with the endpoint's
-* `whsec_…` secret and parses the event. Pass several secrets while rolling
-* the endpoint secret. Runs on WebCrypto, so it needs no `stripe` package.
-*/
-async function verifyStripeWebhook(input, secrets, options = {}) {
-	const value = header(input.headers, "stripe-signature");
-	if (!value) return err(unauthorized("WEBHOOK_MISSING_HEADERS", "Missing Stripe-Signature header"));
-	const parts = value.split(",").map((part) => {
-		const index = part.indexOf("=");
-		return [part.slice(0, index).trim(), part.slice(index + 1).trim()];
-	});
-	const timestamp = parts.find(([name]) => name === "t")?.[1] ?? "";
-	const offered = parts.filter(([name]) => name === "v1").map(([, sig]) => sig);
-	if (!/^\d+$/.test(timestamp)) return err(unauthorized("WEBHOOK_INVALID_TIMESTAMP", "Invalid webhook timestamp"));
-	const namespace = optionalTemporal();
-	if (namespace === void 0) return err(temporalMissing());
-	const seconds = Number(timestamp);
-	const now = (options.now?.() ?? namespace.Now.instant()).epochMilliseconds / 1e3;
-	if (Math.abs(now - seconds) > (options.tolerance ?? 300)) return err(unauthorized("WEBHOOK_TIMESTAMP_OUT_OF_RANGE", "Webhook timestamp is outside the tolerance"));
-	const body = input instanceof Request ? await input.text() : input.body;
-	let valid = false;
-	for (const secret of typeof secrets === "string" ? [secrets] : secrets) {
-		const expected = await stripeSignature(secret, `${timestamp}.${body}`);
-		for (const candidate of offered) if (timingSafeEqual(candidate, expected)) valid = true;
-	}
-	if (!valid) return err(unauthorized("WEBHOOK_INVALID_SIGNATURE", "Invalid webhook signature"));
-	let payload;
-	try {
-		payload = JSON.parse(body);
-	} catch {
-		return err(dbError("invalid_request", "Webhook body is not JSON"));
-	}
-	const id = typeof payload === "object" && payload !== null && "id" in payload ? String(payload.id) : "";
-	return ok({
-		id,
-		timestamp: namespace.Instant.fromEpochMilliseconds(seconds * 1e3),
-		payload,
-		body
-	});
-}
-/**
-* `createWebhookInbox({ source: 'stripe', verify: stripeInboxVerify(secret) })`:
-* stores Stripe events keyed by their event id.
-*/
-function stripeInboxVerify(secrets, options = {}) {
-	return async (request, body) => {
-		const verified = await verifyStripeWebhook({
-			headers: request.headers,
-			body
-		}, secrets, options);
-		return verified.ok ? ok({
-			id: verified.data.id,
-			payload: verified.data.payload
-		}) : verified;
-	};
-}
-/** Rejects a hook with a status and message Supabase Auth passes to the client. */
-function hookError(status, message) {
-	return { error: {
-		http_code: status,
-		message
-	} };
-}
-/**
-* A `(request) => Response` handler for a Supabase Auth hook: verifies the
-* Standard Webhooks signature, types the payload and serializes the answer.
-*
-* ```ts
-* export const POST = authHook('custom_access_token', env.AUTH_HOOK_SECRET, async ({ claims, user_id }) => ({
-*   claims: { ...claims, tenant_id: await organizationFor(user_id) },
-* }));
-* ```
-*/
-function authHook(_kind, secret, handler, options) {
-	return async (request) => {
-		const verified = await verifyWebhook(request, secret, options);
-		if (!verified.ok) return Response.json(hookError(verified.error.status, verified.error.message), { status: verified.error.status });
-		try {
-			const answer = await handler(verified.data.payload, verified.data);
-			const status = "error" in answer ? answer.error.http_code : 200;
-			return Response.json(answer, { status });
-		} catch (cause) {
-			console.error("better-supabase: auth hook failed", cause);
-			return Response.json(hookError(500, "Hook failed"), { status: 500 });
-		}
-	};
-}
-function isDatabaseWebhook(value) {
-	if (typeof value !== "object" || value === null) return false;
-	const payload = value;
-	return (payload["type"] === "INSERT" || payload["type"] === "UPDATE" || payload["type"] === "DELETE") && typeof payload["table"] === "string" && typeof payload["schema"] === "string";
-}
-/**
-* Reads a database webhook payload for `table` as an app-cased change.
-* Returns `null` for other tables or payloads that aren't database webhooks.
-*/
-function databaseChange(betterSupabase, table, payload) {
-	const meta = betterSupabase.meta.tables[table];
-	if (!meta || !isDatabaseWebhook(payload) || payload.table !== meta.name || payload.schema !== meta.schema) return null;
-	return {
-		type: payload.type,
-		table,
-		record: payload.record ? toApp(meta, payload.record) : null,
-		oldRecord: payload.old_record ? toApp(meta, payload.old_record) : null
-	};
-}
-//#endregion
-export { signStripeWebhook as a, isDatabaseWebhook as i, databaseChange as n, stripeInboxVerify as o, hookError as r, verifyStripeWebhook as s, authHook as t };

package/dist/version-Cq8gfDbd.js

@@ -1,4 +0,0 @@
-//#region src/core/version.ts
-const VERSION = "0.8.0";
-//#endregion
-export { VERSION as t };

package/dist/view-D5ryq3gz.js

@@ -1,99 +0,0 @@
-import { n as dbError } from "./errors-2M6CKMP4.js";
-import { a as actorOf, o as delegationOf, r as impersonatorOf } from "./impersonation-DcqaTBHx.js";
-//#region src/auth/mfa.ts
-/** The session's assurance level from its claims; anything but `aal2` reads as `aal1`. */
-function aalOf(claims) {
-	return claims["aal"] === "aal2" ? "aal2" : "aal1";
-}
-/** The `amr` claim as typed entries, skipping malformed ones. */
-function amrOf(claims) {
-	const amr = claims["amr"];
-	if (!Array.isArray(amr)) return [];
-	return amr.flatMap((entry) => {
-		if (typeof entry !== "object" || entry === null) return [];
-		const { method, timestamp, provider } = entry;
-		if (typeof method !== "string" || typeof timestamp !== "number") return [];
-		return [typeof provider === "string" ? {
-			method,
-			timestamp,
-			provider
-		} : {
-			method,
-			timestamp
-		}];
-	});
-}
-/**
-* `undefined` when a user session meets `required`; otherwise a `forbidden`
-* error with `required` and code `INSUFFICIENT_AAL`, for the client to start
-* an MFA challenge. Non-user sessions pass: `allow` decides about them.
-*/
-function checkAal(auth, required) {
-	if (required === "aal1" || auth.kind !== "user" || !("claims" in auth)) return void 0;
-	if (aalOf(auth.claims) === "aal2") return void 0;
-	return dbError("forbidden", "Verify a second factor to continue", {
-		code: "INSUFFICIENT_AAL",
-		required
-	});
-}
-//#endregion
-//#region src/auth/view.ts
-/** Whether the token belongs to an anonymous user (`signInAnonymously()`). */
-function isAnonymousUser(claims) {
-	return "is_anonymous" in claims && claims.is_anonymous === true;
-}
-/** Drops the token from an `AuthState`, leaving only serializable fields. */
-function toSession(auth) {
-	switch (auth.kind) {
-		case "user": {
-			const impersonator = impersonatorOf(auth.claims);
-			const outcome = actorOf(auth.claims);
-			const actor = outcome.ok ? outcome.actor : void 0;
-			const client = actor?.kind === "oauth-client" ? actor : void 0;
-			const scopes = client ? delegationOf(auth.claims)?.scopes : void 0;
-			const delegation = client && (scopes || client.chain) ? {
-				scopes: scopes ?? [],
-				...client.chain ? { chain: client.chain } : {}
-			} : void 0;
-			return {
-				kind: "user",
-				user: auth.user,
-				claims: auth.claims,
-				expiresAt: auth.expiresAt,
-				...auth.profile === void 0 ? {} : { profile: auth.profile },
-				aal: aalOf(auth.claims),
-				anonymous: isAnonymousUser(auth.claims),
-				amr: amrOf(auth.claims),
-				...impersonator ? { impersonator } : {},
-				...actor ? { actor } : {},
-				...delegation ? { delegation } : {}
-			};
-		}
-		case "service": return {
-			kind: "service",
-			keyName: auth.keyName
-		};
-		case "apiKey": return {
-			kind: "apiKey",
-			keyId: auth.keyId,
-			name: auth.name,
-			...auth.organizationId ? { organizationId: auth.organizationId } : {},
-			...auth.userId ? { userId: auth.userId } : {},
-			scopes: auth.scopes,
-			...auth.createdAt ? { createdAt: Math.floor(auth.createdAt.epochMilliseconds / 1e3) } : {},
-			...auth.createdBy ? { createdBy: auth.createdBy } : {}
-		};
-		case "anon": return {
-			kind: "anon",
-			reason: auth.reason
-		};
-		case "invalid": return {
-			kind: "invalid",
-			reason: auth.reason,
-			error: auth.error
-		};
-		default: return auth;
-	}
-}
-//#endregion
-export { checkAal as a, amrOf as i, toSession as n, aalOf as r, isAnonymousUser as t };

package/dist/view-TpXEUcVN.d.ts

@@ -1,87 +0,0 @@
-import { b as DbError } from "./result-BchM1XZn.js";
-import { i as InvalidReason, r as AuthState } from "./resolve-MxXVWyhd.js";
-import { n as AmrEntry, s as Impersonator, t as Aal } from "./mfa-SZc9YYyb.js";
-import { n as SessionActor, r as SessionDelegation } from "./actor-CQTlc1Hh.js";
-import { JWTClaims, UserClaims } from "@supabase/server";
-//#region src/auth/view.d.ts
-/**
- * The verified caller as plain data: no token, no clients. Safe to return
- * from a `'use cache: private'` function and to pass to Client Components.
- */
-type AuthSession<C = unknown, P = unknown> = {
-  readonly kind: "user";
-  /**
-   * Read from the verified claims (`sub`, `email`, `role`,
-   * `app_metadata`, `user_metadata`), never from the user object in the
-   * cookie, so it is the same with `tokens-only` cookies. Call
-   * `auth.getUser()` when a flow must see a revoked or changed user.
-   */
-  readonly user: UserClaims;
-  /**
-   * The verified JWT payload, including custom access token hook claims,
-   * typed and validated by `betterSupabase.claims(schema)`.
-   */
-  readonly claims: JWTClaims & C;
-  /** Seconds since epoch, from the token's `exp`. */
-  readonly expiresAt: number | null;
-  /**
-   * `user_metadata` parsed by `betterSupabase.userMetadata(schema)`, for display.
-   * Absent without a schema or when the metadata fails it. Users
-   * write this data with `auth.updateUser()`: never base access on it.
-   */
-  readonly profile?: P;
-  /** `aal2` once the user verified a second factor in this session. */
-  readonly aal: Aal;
-  /**
-   * Signed in with `signInAnonymously()` (the `is_anonymous` claim). Guards
-   * refuse these users unless `allow` lists `'anonymous'`; `'anon'` means
-   * no session and never admits them.
-   */
-  readonly anonymous: boolean;
-  /** How the user signed in (`password`, `totp`, `sso/saml`, ...). */
-  readonly amr: readonly AmrEntry[];
-  /**
-   * Set when an admin acts as this user in a support session or an
-   * impersonated session (`act.kind`), for a banner. Matches `actor`.
-   */
-  readonly impersonator?: Impersonator;
-  /**
-   * Who acts for the user: an OAuth client or agent (`client_id`, or an
-   * `act` chain without `kind`), a support session or an impersonated
-   * session, read from the `act` and `client_id` claims.
-   */
-  readonly actor?: SessionActor;
-  /**
-   * The scopes the user granted an `oauth-client` actor, plus its `act`
-   * chain. Never set for a support or impersonated session.
-   */
-  readonly delegation?: SessionDelegation;
-} | {
-  readonly kind: "service";
-  readonly keyName: string;
-} | {
-  readonly kind: "apiKey";
-  readonly keyId: string;
-  readonly name: string;
-  readonly organizationId?: string;
-  readonly userId?: string;
-  readonly scopes: readonly string[];
-  /** Seconds since epoch, when the key was created. */
-  readonly createdAt?: number;
-  /** The user who created the key. */
-  readonly createdBy?: string;
-} | {
-  readonly kind: "anon";
-  readonly reason: AnonReason;
-} | {
-  readonly kind: "invalid";
-  readonly reason: InvalidReason;
-  readonly error: DbError;
-};
-type AnonReason = Extract<AuthState, {
-  kind: "anon";
-}>["reason"];
-/** Drops the token from an `AuthState`, leaving only serializable fields. */
-declare function toSession<C, P>(auth: AuthState<C, P>): AuthSession<C, P>;
-//#endregion
-export { toSession as n, AuthSession as t };

package/dist/watch-BcvtAHOd.js

@@ -1,122 +0,0 @@
-import { r as isPlainObject } from "./clone-dN9XOL1K.js";
-import { r as err, s as toDbError } from "./result-DEqHCMKP.js";
-//#region src/core/share.ts
-function sameValue(prev, next) {
-	if (Object.is(prev, next)) return true;
-	if (typeof prev !== "object" || typeof next !== "object") return false;
-	if (prev === null || next === null) return false;
-	return Object.getPrototypeOf(prev) === Object.getPrototypeOf(next) && !Array.isArray(prev) && !isPlainObject(prev) && "toJSON" in prev && typeof prev.toJSON === "function" && JSON.stringify(prev) === JSON.stringify(next);
-}
-function idOf(value) {
-	return isPlainObject(value) ? value["id"] : void 0;
-}
-/**
-* `next` with every part that equals `prev` replaced by `prev`'s object, so
-* unchanged rows keep their identity and `memo` skips them. Array items
-* match by their `id` when they have one (a reordered list keeps its rows),
-* else by position. Returns `prev` itself when nothing changed.
-*/
-function shareStructure(prev, next) {
-	if (sameValue(prev, next)) return prev;
-	if (Array.isArray(prev) && Array.isArray(next)) {
-		const before = prev;
-		const after = next;
-		const byId = /* @__PURE__ */ new Map();
-		for (const item of before) {
-			const id = idOf(item);
-			if (id !== void 0) byId.set(id, item);
-		}
-		let same = before.length === after.length;
-		const shared = after.map((item, index) => {
-			const id = idOf(item);
-			const value = shareStructure(id === void 0 ? before[index] : byId.get(id), item);
-			if (value !== before[index]) same = false;
-			return value;
-		});
-		return same ? prev : shared;
-	}
-	if (isPlainObject(prev) && isPlainObject(next)) {
-		const keys = Object.keys(next);
-		let same = keys.length === Object.keys(prev).length;
-		const shared = {};
-		for (const key of keys) {
-			const value = shareStructure(prev[key], next[key]);
-			if (!Object.hasOwn(prev, key) || value !== prev[key]) same = false;
-			shared[key] = value;
-		}
-		return same ? prev : shared;
-	}
-	return next;
-}
-//#endregion
-//#region src/powersync/watch.ts
-/**
-* Reruns a repository call whenever PowerSync reports a change to one of
-* `tables`: local writes and synced rows alike. The same call works with
-* lists, aggregates and single rows. Unchanged rows keep their identity
-* between runs, and a run that changes nothing calls no `onResult`. Returns
-* a function that stops it.
-*
-* ```ts
-* const stop = watch(powersync, () => customerList.run(db, query), {
-*   tables: ['customers'],
-*   onResult: (page) => render(page),
-* });
-* ```
-*/
-function watch(db, query, options) {
-	if (!db.onChange) throw new TypeError("better-supabase: watch() needs a PowerSync database with onChange()");
-	const signal = options.signal;
-	if (signal?.aborted) return () => void 0;
-	const controller = new AbortController();
-	const stop = () => {
-		controller.abort();
-	};
-	signal?.addEventListener("abort", stop, { once: true });
-	let latest = 0;
-	let previous;
-	const sharing = options.structuralSharing ?? true;
-	const rerun = async () => {
-		latest += 1;
-		const run = latest;
-		let result;
-		try {
-			result = await query();
-		} catch (cause) {
-			result = err(toDbError(cause));
-		}
-		if (run !== latest || controller.signal.aborted) return;
-		if (sharing) {
-			const shared = shareStructure(previous, result);
-			if (shared === previous) return;
-			result = shared;
-		}
-		previous = result;
-		options.onResult(result);
-	};
-	rerun();
-	const unsubscribe = db.onChange({ onChange: rerun }, {
-		tables: [...options.tables],
-		signal: controller.signal,
-		...options.throttleMs === void 0 ? {} : { throttleMs: options.throttleMs }
-	});
-	return () => {
-		signal?.removeEventListener("abort", stop);
-		stop();
-		unsubscribe();
-	};
-}
-/**
-* The SQLite table names of app table keys (`customerTags` to
-* `customer_tags`). Pass the executor's `tableName` when it renames tables,
-* so `watch` listens to the names the queries read.
-*/
-function sqliteTables(betterSupabase, keys, options = {}) {
-	return keys.map((key) => {
-		const table = betterSupabase.meta.tables[key];
-		if (!table) throw new TypeError(`better-supabase: unknown table "${key}"`);
-		return options.tableName ? options.tableName(table) : table.name;
-	});
-}
-//#endregion
-export { watch as n, sqliteTables as t };

package/dist/watch-COzRWvVN.d.ts

@@ -1,74 +0,0 @@
-import { b as DbError, f as Result } from "./result-BchM1XZn.js";
-import { L as TableKey, P as SchemaMeta, a as AnyModels, i as AnyFunctions } from "./types-CoE5Zwy4.js";
-import { t as BetterSupabase } from "./define-DmcfoNXB.js";
-import { i as ListDefinition } from "./list-query-D3JQeEL7.js";
-import { c as SqliteCompilerOptions, p as SqlitePlan, t as PowerSyncDatabaseLike } from "./executor-DfEtf0cq.js";
-import { t as Compiler } from "./compiler-V1qvcST1.js";
-//#region src/powersync/compiler.d.ts
-declare const sqliteCompiler: Compiler<SqlitePlan>;
-interface CheckSqliteOptions extends SqliteCompilerOptions {
-  /**
-   * Return every error instead of the first, one per distinct message. With
-   * a `fallback` executor, these are the reads that run on the server.
-   */
-  readonly all?: boolean;
-}
-/**
- * Compiles every operation a list definition runs (the page, its count and
- * the facet counts) for SQLite, without a database. Returns the first
- * `unsupported` or `invalid_request` error, so a test or a dev build fails
- * before a native screen does. With `all: true`, returns every error, an
- * empty array when the whole list runs on SQLite.
- *
- * ```ts
- * expect(await checkSqlite(betterSupabase, customerList)).toEqual({ ok: true, data: undefined });
- * expect(await checkSqlite(betterSupabase, customerList, { all: true })).toEqual([]);
- * ```
- */
-declare function checkSqlite<M extends AnyModels, D, F extends AnyFunctions, E, T extends TableKey<M>, S extends string, Fa extends string, C extends boolean, P extends "offset" | "cursor">(betterSupabase: BetterSupabase<M, D, F, E>, list: ListDefinition<M, T, E, S, Fa, C, P>, options: CheckSqliteOptions & {
-  readonly all: true;
-}): Promise<readonly DbError[]>;
-declare function checkSqlite<M extends AnyModels, D, F extends AnyFunctions, E, T extends TableKey<M>, S extends string, Fa extends string, C extends boolean, P extends "offset" | "cursor">(betterSupabase: BetterSupabase<M, D, F, E>, list: ListDefinition<M, T, E, S, Fa, C, P>, options?: CheckSqliteOptions & {
-  readonly all?: false;
-}): Promise<Result<undefined>>;
-//#endregion
-//#region src/powersync/watch.d.ts
-interface WatchOptions<T> {
-  /** SQLite tables whose changes rerun the query (`sqliteTables()` maps app keys). */
-  readonly tables: readonly string[];
-  /** Called with the first result, then after every change to `tables`. */
-  readonly onResult: (result: Result<T>) => void;
-  readonly signal?: AbortSignal;
-  /** The least time between two runs. Defaults to PowerSync's 30 ms. */
-  readonly throttleMs?: number;
-  /**
-   * Keeps unchanged rows' object identity across runs and skips `onResult`
-   * when a run returns what the last one did. Defaults to true.
-   */
-  readonly structuralSharing?: boolean;
-}
-/**
- * Reruns a repository call whenever PowerSync reports a change to one of
- * `tables`: local writes and synced rows alike. The same call works with
- * lists, aggregates and single rows. Unchanged rows keep their identity
- * between runs, and a run that changes nothing calls no `onResult`. Returns
- * a function that stops it.
- *
- * ```ts
- * const stop = watch(powersync, () => customerList.run(db, query), {
- *   tables: ['customers'],
- *   onResult: (page) => render(page),
- * });
- * ```
- */
-declare function watch<T>(db: PowerSyncDatabaseLike, query: () => PromiseLike<Result<T>>, options: WatchOptions<T>): () => void;
-/**
- * The SQLite table names of app table keys (`customerTags` to
- * `customer_tags`). Pass the executor's `tableName` when it renames tables,
- * so `watch` listens to the names the queries read.
- */
-declare function sqliteTables(betterSupabase: {
-  readonly meta: SchemaMeta;
-}, keys: readonly string[], options?: SqliteCompilerOptions): string[];
-//#endregion
-export { checkSqlite as a, CheckSqliteOptions as i, sqliteTables as n, sqliteCompiler as o, watch as r, WatchOptions as t };