better-supabase 0.9.0 → 0.10.0

package/dist/cli/{run-DaHfUUO9.js → run-DliGNdjI.js}

@@ -1,19 +1,18 @@
 import { n as CliError, r as errorText } from "./errors-Caiz_0so.js";
 import { a as sameText, n as importPath, t as display } from "./io-BiPX-_J1.js";
-import { i as writeAtomic, n as cachedDatabaseTypes, t as CACHE_DIR } from "./cache-Cx6qlRDR.js";
+import { i as writeAtomic, n as cachedDatabaseTypes, t as CACHE_DIR } from "./cache-CPBYJAkb.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
 import { d as typegenVersion, f as typegenVersionNotice, i as oxfmtInstalled, l as stabilizeMetadata, r as generateDatabaseTypes } from "./typegen--TfvOPLh.js";
-import { t as toCatalog } from "./catalog-Di15TkM2.js";
-import { a as buildModel, i as metaPaths, l as prop, n as emitMeta, o as generatorModel, r as emitModule, t as GENERATED_HEADER, u as q } from "./emit-ZAYeh4Yn.js";
-import { C as accessRequirements, D as providerLabel, E as moduleKeyProblems, O as unsafeKey, S as accessProviderMode, T as entitlementsMode, c as writeLatestMigration, l as writesMigrations, n as READ_SETS_SUFFIX, r as latestMigration, s as sameModuleMigration, v as migrationsDir, w as entitlementRequirements, x as compiledReadSets } from "./module-migration-YFFdWC5X.js";
-import { h as tomlGet, p as sqlWorkflow, r as detectWorkflow } from "./supabase-toml-DjLgBYEo.js";
-import { t as loadSnapshot } from "./snapshot-DAxLi4hO.js";
+import { a as buildModel, i as metaPaths, l as prop, n as emitMeta, o as generatorModel, r as emitModule, t as GENERATED_HEADER, u as q } from "./emit-j0zZ6NE_.js";
+import { C as accessRequirements, D as providerLabel, E as moduleKeyProblems, O as unsafeKey, S as accessProviderMode, T as entitlementsMode, c as writeLatestMigration, l as writesMigrations, n as READ_SETS_SUFFIX, r as latestMigration, s as sameModuleMigration, v as migrationsDir, w as entitlementRequirements, x as compiledReadSets } from "./module-migration-CLkZ8jpw.js";
+import { t as loadSnapshot } from "./snapshot-Dvcx0BSl.js";
 import { a as hasConflicts, c as fileDiff, i as changedFiles, n as applyPlan, r as changeLines } from "./files-DDvAwTko.js";
+import { l as tableObject, n as exposed, o as policyObject, s as qualified, t as catalogOf } from "./shared-CNcvDOLt.js";
 import { existsSync } from "node:fs";
 import { basename, dirname, isAbsolute, posix, relative, resolve, sep } from "node:path";
 import { readFile } from "node:fs/promises";
 import { PRESET_CATALOG } from "better-supabase/preset";
-import { BLOCK_OPTION_SCHEMAS, SQL_MODULES, moduleHidingColumns, moduleLayout, modulePermissionKeys, renderModules, resolveModule, resolveModules, sameModuleFile } from "better-supabase/sql";
+import { BLOCK_OPTION_SCHEMAS, SQL_MODULES, appTableEventTypes, moduleHidingColumns, moduleLayout, modulePermissionKeys, renderModules, resolveModule, resolveModules, sameModuleFile } from "better-supabase/sql";
 //#region src/cli/gen/blocks.ts
 /** `blocks.generated.ts`, next to the main generated module. */
 function blockConfigPath(config) {
@@ -84,21 +83,48 @@ function literal(value, indent) {
 	}
 	return JSON.stringify(value);
 }
+/** Every event type the app tables emit, in config order. */
+function appTableEvents(config) {
+	return Object.entries(config.appTables).flatMap(([name, table]) => appTableEventTypes(name, table));
+}
+/** `appTableEvents` and `appTableEventSchemas`, for app tables that set `events`. */
+function appTableEventLines(types) {
+	if (types.length === 0) return [];
+	return [
+		"",
+		"/**",
+		" * The events `appTables.<table>.events` writes to the outbox, for `onBlockEvent` and the sinks.",
+		" * @public",
+		" */",
+		"export const appTableEvents = defineEvents({",
+		...types.map((type) => `  ${prop(type)}: event<AppTableEventData>(),`),
+		"});",
+		"",
+		"/**",
+		" * The app table events with an open payload, for AsyncAPI's `cloudEvents.blocks`.",
+		" * @public",
+		" */",
+		"export const appTableEventSchemas = {",
+		...types.map((type) => `  ${prop(type)}: true,`),
+		"} as const;"
+	];
+}
 /**
 * `blocks.generated.ts`: each installed block's schema, API schema and the
-* options its TypeScript side reads, for `defineBlocks(blockConfig, ...)`.
-* `undefined` when the config installs no blocks.
+* options its TypeScript side reads, for `defineBlocks(blockConfig, ...)`,
+* and the app table events. `undefined` when the config installs no blocks.
 */
 function emitBlockConfig(config, options = {}) {
 	if (config.blockNames.length === 0) return;
 	const entries = blockConfigEntries(config);
+	const events = appTableEvents(config);
 	const runtime = options.runtimeImport ?? "better-supabase";
 	return {
 		path: blockConfigPath(config),
 		contents: [
 			GENERATED_HEADER,
 			"",
-			`import type { GeneratedBlocks } from ${q(`${runtime}/blocks`)};`,
+			events.length === 0 ? `import type { GeneratedBlocks } from ${q(`${runtime}/blocks`)};` : `import {\n  type AppTableEventData,\n  defineEvents,\n  event,\n  type GeneratedBlocks,\n} from ${q(`${runtime}/blocks`)};`,
 			"",
 			"/**",
 			" * The installed blocks' settings from the `blocks` config, for",
@@ -106,6 +132,7 @@ function emitBlockConfig(config, options = {}) {
 			" * and the options its SQL and TypeScript halves share.",
 			" */",
 			`export const blockConfig = ${literal(entries, "")} as const satisfies GeneratedBlocks;`,
+			...appTableEventLines(events),
 			""
 		].join("\n")
 	};
@@ -294,65 +321,6 @@ async function splinterTables(context, lint) {
 	}));
 }
 //#endregion
-//#region src/cli/doctor/shared.ts
-const catalogs = /* @__PURE__ */ new WeakMap();
-/** The project's SQL workflow: `sql.workflow`, or the one `config.toml` and the schema files imply. */
-function workflowOf(context) {
-	const toml = context.configToml;
-	if (context.config.sql.workflow !== void 0 || toml === void 0) return sqlWorkflow(context.config, toml);
-	const schemas = `${toml.dir}/schemas/`;
-	return detectWorkflow(context.config.root, toml, (context.sqlFiles ?? []).some((file) => file.path.startsWith(schemas)));
-}
-/** The snapshot joined per table and function, computed once per snapshot. */
-function catalogOf(context) {
-	let catalog = catalogs.get(context.snapshot);
-	if (!catalog) {
-		catalog = toCatalog(context.snapshot);
-		catalogs.set(context.snapshot, catalog);
-	}
-	return catalog;
-}
-/** `[api] schemas` from `config.toml`, the schemas PostgREST serves, or `config.schemas` without one. */
-function exposedSchemas(context) {
-	const listed = context.configToml ? tomlGet(context.configToml.document, ["api", "schemas"]) : void 0;
-	return Array.isArray(listed) && listed.every((entry) => typeof entry === "string") ? listed : context.config.schemas;
-}
-const exposed = (context) => {
-	const schemas = exposedSchemas(context);
-	return catalogOf(context).tables.filter((table) => schemas.includes(table.schema));
-};
-const qualified = (table) => `${table.schema}.${table.name}`;
-const tableObject = (table) => ({
-	kind: "table",
-	schema: table.schema,
-	name: table.name
-});
-const policyObject = (table, policy) => ({
-	kind: "policy",
-	schema: table.schema,
-	name: policy.name,
-	table: table.name
-});
-const splitTexts = /* @__PURE__ */ new Map();
-const SPLIT_CACHE_SIZE = 64;
-/** `text` split into lines; doctor locates many objects in the same SQL files. */
-function linesOf(text) {
-	let lines = splitTexts.get(text);
-	if (!lines) {
-		if (splitTexts.size >= SPLIT_CACHE_SIZE) splitTexts.clear();
-		lines = text.split("\n");
-		splitTexts.set(text, lines);
-	}
-	return lines;
-}
-/** Line number (1-based) of the first line matching `pattern`. */
-function lineOf(text, pattern) {
-	const index = linesOf(text).findIndex((line) => pattern.test(line));
-	return index === -1 ? void 0 : index + 1;
-}
-/** The keys of `authorization.permissions`, for `api-keys` scopes `"catalog"`. */
-const permissionCatalogKeys = (context) => context.config.authorization?.permissions?.map((entry) => entry.key);
-//#endregion
 //#region src/cli/doctor/rls.ts
 const escape = (name) => name.replaceAll(/[.*+?^${}()|[\]\\]/g, "\\$&");
 /** `'it''s'` and other string literals, blanked so their text can't match. */
@@ -1536,4 +1504,4 @@ async function runGen(options) {
 	};
 }
 //#endregion
-export { renderFiles as A, policyObject as C, advisorRule as D, workflowOf as E, splinterTables as O, permissionCatalogKeys as S, tableObject as T, withoutStrings as _, METADATA_GAPS_TEXT as a, exposedSchemas as b, accessModule as c, RLS_RULES as d, appliesTo as f, policyHelpers as g, functionObject as h, generationNotices as i, emitBlockConfig as j, render as k, entitlementsModule as l, functionBody as m, runGen as n, fromMetadata as o, escape as p, UNFORMATTED as r, AUTHORIZATION_RULES as s, refuseRowConditionedBuckets as t, COMMANDS as u, catalogOf as v, qualified as w, lineOf as x, exposed as y };
+export { emitBlockConfig as S, withoutStrings as _, METADATA_GAPS_TEXT as a, render as b, accessModule as c, RLS_RULES as d, appliesTo as f, policyHelpers as g, functionObject as h, generationNotices as i, entitlementsModule as l, functionBody as m, runGen as n, fromMetadata as o, escape as p, UNFORMATTED as r, AUTHORIZATION_RULES as s, refuseRowConditionedBuckets as t, COMMANDS as u, advisorRule as v, renderFiles as x, splinterTables as y };

package/dist/cli/{scaffold-CFdDq36-.js → scaffold-6bv24GSP.js}

@@ -1,11 +1,11 @@
-import { a as list, p as commandMeta, r as defineCliCommand } from "./command-CK9Cn8HV.js";
+import { a as list, p as commandMeta, r as defineCliCommand } from "./command-D_HI1mp1.js";
 import { n as CliError } from "./errors-Caiz_0so.js";
 import { t as display } from "./io-BiPX-_J1.js";
-import { d as applyCasing, i as metaPaths } from "./emit-ZAYeh4Yn.js";
+import { t as isRecord } from "./guards-CUlDNYZs.js";
+import { d as applyCasing, i as metaPaths } from "./emit-j0zZ6NE_.js";
 import { t as importFresh } from "./fresh-import-BeYf9I3x.js";
 import { a as hasConflicts, n as applyPlan, r as changeLines, s as planResult, t as PLAN_ARGS } from "./files-DDvAwTko.js";
-import { t as isRecord } from "./guards-CUlDNYZs.js";
-import { t as detectProject } from "./detect-DYDUBLU4.js";
+import { t as detectProject } from "./detect-BeLVeNpA.js";
 import { existsSync } from "node:fs";
 import { posix, resolve } from "node:path";
 import { FIELD_FORMATS } from "better-supabase/config";

package/dist/cli/{scaffold-Dsjr7sOT.js → scaffold-DUz5fa-k.js}

@@ -1 +1 @@
-export { r as scaffoldApiCommand, i as scaffoldScreensCommand } from "./scaffold-CFdDq36-.js";
+export { r as scaffoldApiCommand, i as scaffoldScreensCommand } from "./scaffold-6bv24GSP.js";

package/dist/cli/{seed-DldDdXWO.js → seed-CIJaL1Ao.js}

@@ -1,11 +1,11 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CK9Cn8HV.js";
-import { n as databaseHost, r as isLocalDatabaseUrl } from "./agent-CCt_aXpJ.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-D_HI1mp1.js";
+import { i as isLocalDatabaseUrl, r as databaseHost } from "./agent-CCrTYK3W.js";
 import { t as display } from "./io-BiPX-_J1.js";
-import { l as stdinDatabaseUrl, n as databaseUrl, o as importExport } from "./config-CLHpTk9Y.js";
+import { l as stdinDatabaseUrl, n as databaseUrl, o as importExport } from "./config-Bi_UBxXl.js";
 import { m as supabaseDir } from "./supabase-toml-DjLgBYEo.js";
 import { t as connect } from "./db-DT1bGB02.js";
 import { a as hasConflicts, n as applyPlan, o as insideRoot, r as changeLines, s as planResult, t as PLAN_ARGS } from "./files-DDvAwTko.js";
-import { t as DB_URL_STDIN_ARG } from "./source-args-0I9zylYy.js";
+import { t as DB_URL_STDIN_ARG } from "./source-args-BNhagtpw.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/cli/seed-ClGWseBT.js

@@ -0,0 +1 @@
+export { n as seedCommand } from "./seed-CIJaL1Ao.js";

package/dist/cli/shared-CNcvDOLt.js

@@ -0,0 +1,145 @@
+import { t as toCatalog } from "./catalog-Di15TkM2.js";
+import { h as tomlGet, p as sqlWorkflow, r as detectWorkflow } from "./supabase-toml-DjLgBYEo.js";
+//#region src/cli/doctor/shared.ts
+const catalogs = /* @__PURE__ */ new WeakMap();
+/** The project's SQL workflow: `sql.workflow`, or the one `config.toml` and the schema files imply. */
+function workflowOf(context) {
+	const toml = context.configToml;
+	if (context.config.sql.workflow !== void 0 || toml === void 0) return sqlWorkflow(context.config, toml);
+	const schemas = `${toml.dir}/schemas/`;
+	return detectWorkflow(context.config.root, toml, (context.sqlFiles ?? []).some((file) => file.path.startsWith(schemas)));
+}
+/** The snapshot joined per table and function, computed once per snapshot. */
+function catalogOf(context) {
+	let catalog = catalogs.get(context.snapshot);
+	if (!catalog) {
+		catalog = toCatalog(context.snapshot);
+		catalogs.set(context.snapshot, catalog);
+	}
+	return catalog;
+}
+/** `[api] schemas` from `config.toml`, the schemas PostgREST serves, or `config.schemas` without one. */
+function exposedSchemas(context) {
+	const listed = context.configToml ? tomlGet(context.configToml.document, ["api", "schemas"]) : void 0;
+	return Array.isArray(listed) && listed.every((entry) => typeof entry === "string") ? listed : context.config.schemas;
+}
+const exposed = (context) => {
+	const schemas = exposedSchemas(context);
+	return catalogOf(context).tables.filter((table) => schemas.includes(table.schema));
+};
+const qualified = (table) => `${table.schema}.${table.name}`;
+const tableObject = (table) => ({
+	kind: "table",
+	schema: table.schema,
+	name: table.name
+});
+const policyObject = (table, policy) => ({
+	kind: "policy",
+	schema: table.schema,
+	name: policy.name,
+	table: table.name
+});
+const splitTexts = /* @__PURE__ */ new Map();
+const SPLIT_CACHE_SIZE = 64;
+/** `text` split into lines; doctor locates many objects in the same SQL files. */
+function linesOf(text) {
+	let lines = splitTexts.get(text);
+	if (!lines) {
+		if (splitTexts.size >= SPLIT_CACHE_SIZE) splitTexts.clear();
+		lines = text.split("\n");
+		splitTexts.set(text, lines);
+	}
+	return lines;
+}
+/** Line number (1-based) of the first line matching `pattern`. */
+function lineOf(text, pattern) {
+	const index = linesOf(text).findIndex((line) => pattern.test(line));
+	return index === -1 ? void 0 : index + 1;
+}
+/** The keys of `authorization.permissions`, for `api-keys` scopes `"catalog"`. */
+const permissionCatalogKeys = (context) => context.config.authorization?.permissions?.map((entry) => entry.key);
+const DOLLAR_TAG = /\$(?:[A-Za-z_][A-Za-z0-9_]*)?\$/uy;
+/**
+* `text` split into statements at the semicolons outside quotes, dollar
+* quotes and comments. Comments are dropped; strings and dollar-quoted
+* bodies stay as they are.
+*/
+function splitStatements(text) {
+	const statements = [];
+	let current = "";
+	let start = 1;
+	let line = 1;
+	let index = 0;
+	const push = () => {
+		const trimmed = current.trim();
+		if (trimmed !== "") statements.push({
+			text: trimmed,
+			line: start
+		});
+		current = "";
+	};
+	const advance = (until) => {
+		for (let at = index; at < until; at += 1) if (text[at] === "\n") line += 1;
+		index = until;
+	};
+	while (index < text.length) {
+		if (current.trim() === "") start = line;
+		const char = text[index];
+		if (text.startsWith("--", index)) {
+			const end = text.indexOf("\n", index);
+			advance(end === -1 ? text.length : end);
+			continue;
+		}
+		if (text.startsWith("/*", index)) {
+			let depth = 0;
+			let at = index;
+			while (at < text.length) if (text.startsWith("/*", at)) {
+				depth += 1;
+				at += 2;
+			} else if (text.startsWith("*/", at)) {
+				depth -= 1;
+				at += 2;
+				if (depth === 0) break;
+			} else at += 1;
+			current += " ";
+			advance(at);
+			continue;
+		}
+		if (char === "'" || char === "\"") {
+			let at = index + 1;
+			while (at < text.length) {
+				if (text[at] === char) {
+					if (text[at + 1] === char) {
+						at += 2;
+						continue;
+					}
+					break;
+				}
+				at += 1;
+			}
+			current += text.slice(index, at + 1);
+			advance(Math.min(at + 1, text.length));
+			continue;
+		}
+		DOLLAR_TAG.lastIndex = index;
+		const tag = char === "$" ? DOLLAR_TAG.exec(text)?.[0] : void 0;
+		if (tag !== void 0) {
+			const close = text.indexOf(tag, index + tag.length);
+			const end = close === -1 ? text.length : close + tag.length;
+			current += text.slice(index, end);
+			advance(end);
+			continue;
+		}
+		if (char === ";") {
+			push();
+			advance(index + 1);
+			continue;
+		}
+		current += char;
+		advance(index + 1);
+	}
+	push();
+	return statements;
+}
+//#endregion
+export { permissionCatalogKeys as a, splitStatements as c, lineOf as i, tableObject as l, exposed as n, policyObject as o, exposedSchemas as r, qualified as s, catalogOf as t, workflowOf as u };

package/dist/cli/{skills-v34NDb2D.js → skills-CaxIQhzW.js}

@@ -1,4 +1,4 @@
-import { a as list, p as commandMeta, r as defineCliCommand } from "./command-CK9Cn8HV.js";
+import { a as list, p as commandMeta, r as defineCliCommand } from "./command-D_HI1mp1.js";
 import { n as CliError } from "./errors-Caiz_0so.js";
 import { t as byCodePoint } from "./compare-BmIWVEui.js";
 import { n as applyPlan, s as planResult, t as PLAN_ARGS } from "./files-DDvAwTko.js";

package/dist/cli/{snapshot-DAxLi4hO.js → snapshot-Dvcx0BSl.js}

@@ -1,10 +1,10 @@
-import { t as VERSION } from "./version-DNRW4DAP.js";
+import { t as VERSION } from "./version-D1wM9DNb.js";
 import { n as CliError, r as errorText } from "./errors-Caiz_0so.js";
 import { r as redactUrl } from "./redact-PjNswZOs.js";
 import { n as HTTP_CHANNEL } from "./trace-VbdO6bcN.js";
-import { o as readExtras, r as cachedIntrospect } from "./cache-Cx6qlRDR.js";
+import { o as readExtras, r as cachedIntrospect } from "./cache-CPBYJAkb.js";
 import { l as stabilizeMetadata, n as TypegenMissingError, o as readGeneratorMetadata, p as validateGeneratorMetadata } from "./typegen--TfvOPLh.js";
-import { n as databaseUrl, u as accessToken } from "./config-CLHpTk9Y.js";
+import { n as databaseUrl, u as accessToken } from "./config-Bi_UBxXl.js";
 import { d as readSupabaseToml, f as schemaPaths, h as tomlGet, u as pgFunctionHooks } from "./supabase-toml-DjLgBYEo.js";
 import { t as connect } from "./db-DT1bGB02.js";
 import { channel } from "node:diagnostics_channel";

package/dist/cli/{source-args-0I9zylYy.js → source-args-BNhagtpw.js}

@@ -1,5 +1,5 @@
 import { n as CliError } from "./errors-Caiz_0so.js";
-import { l as stdinDatabaseUrl } from "./config-CLHpTk9Y.js";
+import { l as stdinDatabaseUrl } from "./config-Bi_UBxXl.js";
 //#region src/cli/commands/source-args.ts
 /** The connection string from stdin, for commands that connect but read no schema. */
 const DB_URL_STDIN_ARG = { "db-url-stdin": {

package/dist/cli/{spec-CaaSOYZS.js → spec-BewE6r6J.js}

@@ -1,13 +1,13 @@
 import { n as __require, t as __commonJSMin } from "./rolldown-runtime-kJ_i4yPo.js";
-import { p as commandMeta, r as defineCliCommand } from "./command-CK9Cn8HV.js";
-import { t as VERSION } from "./version-DNRW4DAP.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-D_HI1mp1.js";
+import { t as VERSION } from "./version-D1wM9DNb.js";
 import { i as failedResult, n as CliError, r as errorText } from "./errors-Caiz_0so.js";
 import { t as display } from "./io-BiPX-_J1.js";
-import { i as writeAtomic, t as CACHE_DIR } from "./cache-Cx6qlRDR.js";
+import { i as writeAtomic, t as CACHE_DIR } from "./cache-CPBYJAkb.js";
+import { t as isRecord } from "./guards-CUlDNYZs.js";
 import { t as importFresh } from "./fresh-import-BeYf9I3x.js";
 import { i as changedFiles, n as applyPlan, r as changeLines } from "./files-DDvAwTko.js";
-import { t as isRecord } from "./guards-CUlDNYZs.js";
-import { t as loadTopics } from "./topics-GJuIDwlY.js";
+import { t as loadTopics } from "./topics-BBE1-Vrg.js";
 import { existsSync } from "node:fs";
 import { basename, dirname, join, resolve } from "node:path";
 import { createHash } from "node:crypto";

package/dist/cli/{spec-De0cfceR.js → spec-DRDaIq8f.js}

@@ -1 +1 @@
-export { n as specEmitCommand, i as specValidateCommand } from "./spec-CaaSOYZS.js";
+export { n as specEmitCommand, i as specValidateCommand } from "./spec-BewE6r6J.js";

package/dist/cli/{sql-DDLWwzh9.js → sql-BBkchli4.js}

@@ -1,12 +1,12 @@
-import { p as commandMeta, r as defineCliCommand } from "./command-CK9Cn8HV.js";
+import { p as commandMeta, r as defineCliCommand } from "./command-D_HI1mp1.js";
 import { i as plain } from "./style-2JfIPVMQ.js";
 import { n as CliError } from "./errors-Caiz_0so.js";
 import { t as display } from "./io-BiPX-_J1.js";
-import { a as migrationModules, b as sqlPlan, d as dataMigration, f as migrationStamp, g as layoutFor, h as layout, l as writesMigrations, o as renderModuleMigration, r as latestMigration, s as sameModuleMigration, t as MODULES_SUFFIX, v as migrationsDir } from "./module-migration-YFFdWC5X.js";
+import { a as migrationModules, b as sqlPlan, d as dataMigration, f as migrationStamp, g as layoutFor, h as layout, l as writesMigrations, o as renderModuleMigration, r as latestMigration, s as sameModuleMigration, t as MODULES_SUFFIX, v as migrationsDir } from "./module-migration-CLkZ8jpw.js";
 import { c as fileDiff, n as applyPlan, r as changeLines } from "./files-DDvAwTko.js";
-import { a as write, n as nextStep, o as topicPolicyFile } from "./write-BS6F3Yvz.js";
-import { t as addModules } from "./add-Bd5M6uEZ.js";
-import { t as syncModules } from "./sync-DFx-6t5n.js";
+import { a as write, n as nextStep, o as topicPolicyFile } from "./write-Dp1XlAVM.js";
+import { t as addModules } from "./add-BhI_nXAo.js";
+import { t as syncModules } from "./sync-CJ-ft-tl.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/cli/{sql-0I1EQ3JG.js → sql-BCQt5TDs.js}

@@ -1,2 +1,2 @@
-import "./module-migration-YFFdWC5X.js";
-export { n as sqlAddCommand, r as sqlDataCommand, i as sqlListCommand, a as sqlPrintCommand, o as sqlSyncCommand, s as sqlUpgradeCommand } from "./sql-DDLWwzh9.js";
+import "./module-migration-CLkZ8jpw.js";
+export { n as sqlAddCommand, r as sqlDataCommand, i as sqlListCommand, a as sqlPrintCommand, o as sqlSyncCommand, s as sqlUpgradeCommand } from "./sql-BBkchli4.js";

package/dist/cli/{stack-status-CRanl-CN.js → stack-status-LeEoCtV1.js}

@@ -1,6 +1,6 @@
 import { n as CliError, r as errorText } from "./errors-Caiz_0so.js";
 import { t as EXEC_CHANNEL } from "./trace-VbdO6bcN.js";
-import { t as PROCESS_ENV } from "./env-DMw_MBe5.js";
+import { t as PROCESS_ENV } from "./env-Cf5OTqbK.js";
 import { s as findUp } from "./supabase-toml-DjLgBYEo.js";
 import { channel } from "node:diagnostics_channel";
 import { closeSync, existsSync, openSync, readSync, statSync } from "node:fs";

package/dist/cli/{sync-DFx-6t5n.js → sync-CJ-ft-tl.js}

@@ -1,7 +1,7 @@
 import { t as display } from "./io-BiPX-_J1.js";
-import { b as sqlPlan, g as layoutFor, l as writesMigrations, o as renderModuleMigration, r as latestMigration, s as sameModuleMigration, t as MODULES_SUFFIX, v as migrationsDir } from "./module-migration-YFFdWC5X.js";
+import { b as sqlPlan, g as layoutFor, l as writesMigrations, o as renderModuleMigration, r as latestMigration, s as sameModuleMigration, t as MODULES_SUFFIX, v as migrationsDir } from "./module-migration-CLkZ8jpw.js";
 import { c as fileDiff, n as applyPlan, r as changeLines, s as planResult } from "./files-DDvAwTko.js";
-import { a as write, o as topicPolicyFile, r as staleModuleTests, t as moduleFile } from "./write-BS6F3Yvz.js";
+import { a as write, o as topicPolicyFile, r as staleModuleTests, t as moduleFile } from "./write-Dp1XlAVM.js";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";
 import { moduleTopics, renderModules, sameModuleFile } from "better-supabase/sql";

package/dist/cli/{topics-GJuIDwlY.js → topics-BBE1-Vrg.js}

@@ -2,7 +2,7 @@ import { n as CliError } from "./errors-Caiz_0so.js";
 import { t as importFresh } from "./fresh-import-BeYf9I3x.js";
 import { resolve } from "node:path";
 //#region src/cli/topics.ts
-const isLoadedTopic = (value) => typeof value === "object" && value !== null && "template" in value && typeof value.template === "string" && "sql" in value && typeof value.sql === "function" && "trigger" in value && typeof value.trigger === "function" && "subscribe" in value && typeof value.subscribe === "function";
+const isLoadedTopic = (value) => typeof value === "object" && value !== null && "template" in value && typeof value.template === "string" && "params" in value && Array.isArray(value.params) && "private" in value && typeof value.private === "boolean" && "sql" in value && typeof value.sql === "function" && "trigger" in value && typeof value.trigger === "function" && "subscribe" in value && typeof value.subscribe === "function";
 /**
 * The topics the `from` modules export (`realtime.policies.from`), loaded
 * fresh, each once, sorted by template. Throws for a module that exports

package/dist/cli/{version-DNRW4DAP.js → version-D1wM9DNb.js}

@@ -1,4 +1,4 @@
 //#region src/cli/version.ts
-const VERSION = "0.9.0";
+const VERSION = "0.10.0";
 //#endregion
 export { VERSION as t };

package/dist/cli/{write-BS6F3Yvz.js → write-Dp1XlAVM.js}

@@ -1,9 +1,9 @@
 import { n as CliError } from "./errors-Caiz_0so.js";
 import { t as display } from "./io-BiPX-_J1.js";
-import { b as sqlPlan, c as writeLatestMigration, o as renderModuleMigration, p as writeExtensionsMigration, t as MODULES_SUFFIX, u as DATA_NEXT } from "./module-migration-YFFdWC5X.js";
+import { b as sqlPlan, c as writeLatestMigration, o as renderModuleMigration, p as writeExtensionsMigration, t as MODULES_SUFFIX, u as DATA_NEXT } from "./module-migration-CLkZ8jpw.js";
 import { d as readSupabaseToml, f as schemaPaths, h as tomlGet, i as diffEngine, l as migrationCommand, o as findSupabaseRoot, p as sqlWorkflow, t as PGDELTA_TABLE } from "./supabase-toml-DjLgBYEo.js";
 import { n as applyPlan, r as changeLines } from "./files-DDvAwTko.js";
-import { t as loadTopics } from "./topics-GJuIDwlY.js";
+import { t as loadTopics } from "./topics-BBE1-Vrg.js";
 import { dirname, join, resolve } from "node:path";
 import { readFile, readdir } from "node:fs/promises";
 import { APP_TABLES_MARKER, APP_TABLES_MODULE, moduleTopics, renderModules, resolveModules, sameModuleFile } from "better-supabase/sql";
@@ -40,6 +40,14 @@ async function enablePgDelta(root, dryRun, base = root) {
 const literalParts = (template) => template.replaceAll(/\{[^}]+\}/g, "{}");
 const owns = (owned, template) => owned.endsWith("*") ? template.startsWith(owned.slice(0, -1)) : literalParts(owned) === literalParts(template);
 const receivesOnly = (sql) => !sql.includes(" for insert ") && !sql.includes("'presence'");
+function triggerStatement(topic, table, options, index) {
+	try {
+		return topic.trigger(table, options);
+	} catch (error) {
+		if (error instanceof TypeError) throw new CliError("config_invalid", `realtime.triggers[${String(index)}]: ${error.message}`);
+		throw error;
+	}
+}
 /** The file `realtime.policies` writes, or `undefined` when it isn't set. */
 async function topicPolicyFile(config, owned = []) {
 	const policies = config.realtime.policies;
@@ -48,7 +56,6 @@ async function topicPolicyFile(config, owned = []) {
 		if (triggers.length > 0) throw new CliError("config_invalid", "realtime.triggers needs realtime.policies: the triggers go to its output, for topics its from files export");
 		return;
 	}
-	if (triggers.length > 0 && !config.blockNames.includes("realtime-tables")) throw new CliError("config_invalid", "realtime.triggers call better_supabase.broadcast_topic(): add realtime-tables to blocks");
 	const topics = (await loadTopics(config.root, policies.from)).map((each) => each.topic);
 	const functions = config.authorization?.functions;
 	const sqlOf = (topic) => topic.sql(functions === void 0 ? void 0 : { functions });
@@ -59,10 +66,21 @@ async function topicPolicyFile(config, owned = []) {
 		skipped.push(`-- Skipped topic ${topic.template}: the ${owner.module} module writes its receive policy.`);
 		return false;
 	});
-	const triggerSql = triggers.map(({ topic: template, table, ...options }) => {
+	const topicFor = (template, where) => {
 		const topic = topics.find((candidate) => candidate.template === template);
-		if (topic === void 0) throw new CliError("config_invalid", `realtime.triggers: no topic "${template}" in ${policies.from.join(", ")}`);
-		return topic.trigger(table, options);
+		if (topic === void 0) throw new CliError("config_invalid", `${where}: no topic "${template}" in ${policies.from.join(", ")}`);
+		return topic;
+	};
+	const triggerSql = triggers.map(({ topic: template, table, topics: extra, ...options }, index) => {
+		const statement = triggerStatement(topicFor(template, "realtime.triggers"), table, {
+			...options,
+			...extra === void 0 ? {} : { topics: extra.map((each) => ({
+				topic: topicFor(each.topic, `realtime.triggers[${String(index)}].topics`),
+				...each.values === void 0 ? {} : { values: each.values }
+			})) }
+		}, index);
+		if (statement.includes("better_supabase.broadcast_topic(") && !config.blockNames.includes("realtime-tables")) throw new CliError("config_invalid", `realtime.triggers: the trigger for ${template} on ${table} calls better_supabase.broadcast_topic(): add realtime-tables to blocks`);
+		return statement;
 	});
 	const header = [
 		"-- better-supabase: realtime topic policies",

package/dist/client/index.d.ts

@@ -1,7 +1,7 @@
-import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-EFpOIIDE.js";
-import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../ports-DAdQyjZz.js";
-import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../bind-a7sUgvf4.js";
-import { a as defineController, i as ControllerState, n as Controller, o as whileSignedIn, r as ControllerParts, t as AuthPort } from "../controller-D845qKh2.js";
+import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../watch-topic-D-rpUg5n.js";
+import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../ports-Dcnuo3HT.js";
+import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../bind-DkaP_0iS.js";
+import { a as defineController, i as ControllerState, n as Controller, o as whileSignedIn, r as ControllerParts, t as AuthPort } from "../controller-CCb9tHw_.js";
 import { n as FunctionContract } from "../function-contract-B4c0XuTU.js";
-import { a as webDeepLinks, c as webPorts, d as FunctionContracts, f as FunctionsHost, h as functions, i as WebPushTokenOptions, l as webPushToken, m as TypedFunctions, n as createClient, o as webFilePicker, p as InvokeOptions, r as PushRegistrationLike, s as webKeyboard, t as ClientOptions, u as webStorage } from "../index-BkzNUPId.js";
+import { a as webDeepLinks, c as webPorts, d as FunctionContracts, f as FunctionsHost, h as functions, i as WebPushTokenOptions, l as webPushToken, m as TypedFunctions, n as createClient, o as webFilePicker, p as InvokeOptions, r as PushRegistrationLike, s as webKeyboard, t as ClientOptions, u as webStorage } from "../index-BurdFUXr.js";
 export { type AuthPort, type AuthSnapshot, type AuthUser, type BetterClient, type BindClientOptions, type ClientAuth, ClientOptions, type ClientPorts, type Controller, type ControllerParts, type ControllerState, type DeepLinkPort, type FilePickerPort, type FunctionContract, type FunctionContracts, type FunctionsHost, type InvokeOptions, type KeyboardPort, type PickFilesOptions, type PickedFile, type PushRegistrationLike, type PushTokenPort, type Shortcut, type StoragePort, type TopicHandle, type TopicPort, type TopicWatch, type TypedFunctions, type UploadDestination, type UploadPort, type WebPushTokenOptions, bindClient, createClient, defineController, functions, memoryStorage, storageUpload, webDeepLinks, webFilePicker, webKeyboard, webPorts, webPushToken, webStorage, whileSignedIn };

package/dist/client/index.js

@@ -1,8 +1,8 @@
 import { n as dbError } from "../errors-8i6tSICm.js";
-import { a as ok, r as err, t as AsyncResult } from "../result-BlgnMB0H.js";
+import { a as ok, r as err, t as AsyncResult } from "../result-COkvI9t5.js";
 import { i as isProblem, r as fromProblem } from "../problem-pIiL3WbE.js";
 import { EnvValidationError, parseEnv } from "../env/index.js";
-import { n as storageUpload, r as bindClient, t as memoryStorage } from "../ports-DGK3KTDH.js";
+import { n as storageUpload, r as bindClient, t as memoryStorage } from "../ports-Bcdppx0G.js";
 import { n as whileSignedIn, t as defineController } from "../controller-D6NyNrlZ.js";
 import { createBrowserClient } from "@supabase/ssr";
 import { FunctionsFetchError, FunctionsHttpError, FunctionsRelayError, createClient as createClient$1 } from "@supabase/supabase-js";

package/dist/client/native/index.d.ts

@@ -1,9 +1,9 @@
 import { t as AsyncResult } from "../../result-Cj3yWhjH.js";
-import { H as UploadOptions, V as UploadBody } from "../../storage-api-Cx-1iWBd.js";
-import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../../watch-topic-EFpOIIDE.js";
-import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../../ports-DAdQyjZz.js";
-import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../../bind-a7sUgvf4.js";
-import { n as ExpoPushTokenOptions, r as expoPushToken, t as ExpoNotificationsLike } from "../../push-token-asrmi7-6.js";
+import { H as UploadOptions, V as UploadBody } from "../../storage-api-B4Ib2Zpo.js";
+import { n as TopicPort, r as TopicWatch, t as TopicHandle } from "../../watch-topic-D-rpUg5n.js";
+import { a as PickFilesOptions, c as Shortcut, d as UploadPort, f as memoryStorage, i as KeyboardPort, l as StoragePort, n as DeepLinkPort, o as PickedFile, p as storageUpload, r as FilePickerPort, s as PushTokenPort, t as ClientPorts, u as UploadDestination } from "../../ports-Dcnuo3HT.js";
+import { a as ClientAuth, i as BindClientOptions, n as AuthUser, o as bindClient, r as BetterClient, t as AuthSnapshot } from "../../bind-DkaP_0iS.js";
+import { n as ExpoPushTokenOptions, r as expoPushToken, t as ExpoNotificationsLike } from "../../push-token-CDMgWT13.js";
 import { a as OAuthSignInOptions, c as linkParams, i as OAuthClient, l as signInWithOAuthBrowser, n as AuthLinkClient, o as WebBrowserLike, r as AuthLinkResult, s as handleAuthDeepLink, t as AuthFailure } from "../../auth-link-BjFPqwLz.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 //#region src/client/native/auto-refresh.d.ts

package/dist/client/native/index.js

@@ -1,7 +1,7 @@
 import { n as dbError } from "../../errors-8i6tSICm.js";
-import { r as err, s as toDbError, t as AsyncResult } from "../../result-BlgnMB0H.js";
+import { r as err, s as toDbError, t as AsyncResult } from "../../result-COkvI9t5.js";
 import { i as toBase64, r as fromBase64 } from "../../base64-BmeCBgGo.js";
-import { n as storageUpload, r as bindClient, t as memoryStorage } from "../../ports-DGK3KTDH.js";
+import { n as storageUpload, r as bindClient, t as memoryStorage } from "../../ports-Bcdppx0G.js";
 import { n as linkParams, r as signInWithOAuthBrowser, t as handleAuthDeepLink } from "../../auth-link-DrDX9KOT.js";
 import { t as expoPushToken } from "../../push-token-D6REHMMw.js";
 //#region src/client/native/auto-refresh.ts

package/dist/{client-BYaOGCOG.js → client-13Ii0c0P.js}

@@ -1,5 +1,5 @@
 import { n as dbError } from "./errors-8i6tSICm.js";
-import { r as err } from "./result-BlgnMB0H.js";
+import { r as err } from "./result-COkvI9t5.js";
 import { n as whileSignedIn, t as defineController } from "./controller-D6NyNrlZ.js";
 //#region src/blocks/comments/client.ts
 /**

package/dist/{client-BxnLb9bz.d.ts → client-9zIKhf5D.d.ts}

@@ -1,6 +1,6 @@
 import { b as DbError, f as Result } from "./result-Cj3yWhjH.js";
-import { n as Controller, t as AuthPort } from "./controller-D845qKh2.js";
-import { d as CreateApiKeyInput, f as CreatedApiKey, l as ApiKeys, t as ApiKey } from "./api-keys-BYoGCM9p.js";
+import { n as Controller, t as AuthPort } from "./controller-CCb9tHw_.js";
+import { d as CreateApiKeyInput, f as CreatedApiKey, l as ApiKeys, t as ApiKey } from "./api-keys-EdSNjGIZ.js";
 //#region src/blocks/api-keys/client.d.ts
 /** What `create` takes: the organization comes from the controller. */
 type ApiKeyDraft = Omit<CreateApiKeyInput, "organizationId">;

package/dist/{client-PGRk3DGz.js → client-AxwF58Eo.js}

@@ -1,4 +1,4 @@
-import { s as toDbError } from "./result-BlgnMB0H.js";
+import { s as toDbError } from "./result-COkvI9t5.js";
 import { n as whileSignedIn, t as defineController } from "./controller-D6NyNrlZ.js";
 //#region src/blocks/api-keys/client.ts
 const newestFirst = (keys) => keys.toSorted((a, b) => b.createdAt.epochMilliseconds - a.createdAt.epochMilliseconds);

package/dist/{client-iDLLvGR4.d.ts → client-B0rvMvA8.d.ts}

@@ -1,6 +1,6 @@
-import { p as SubscriptionStatus } from "./topic-cMS7UtM1.js";
-import { n as TopicPort } from "./watch-topic-EFpOIIDE.js";
-import { n as Controller, t as AuthPort } from "./controller-D845qKh2.js";
+import { p as SubscriptionStatus } from "./topic-Dgs-eSYQ.js";
+import { n as TopicPort } from "./watch-topic-D-rpUg5n.js";
+import { n as Controller, t as AuthPort } from "./controller-CCb9tHw_.js";
 //#region src/blocks/notifications/client.d.ts
 /** Loads one list of items, e.g. a server action that calls `notifications.list()`. */
 type NotificationSource<T> = () => Promise<readonly T[]>;