better-supabase 0.9.0 → 0.10.0

package/dist/workflow-sdk/index.js

@@ -1,5 +1,5 @@
 import { t as WORKFLOW_ATTRIBUTES } from "../attributes-D4mA7WhI.js";
-import { a as protectWebHandler, c as startOnEvent, i as hookMetadata, l as workflowContext, n as authorizeHook, r as contextAttributes, s as startFor, t as HookForbiddenError, u as workflowStarter } from "../workflow-sdk-BZ6qsRlY.js";
+import { a as protectWebHandler, c as startOnEvent, i as hookMetadata, l as workflowContext, n as authorizeHook, r as contextAttributes, s as startFor, t as HookForbiddenError, u as workflowStarter } from "../workflow-sdk-vjDWlnfX.js";
 import { resumeHook } from "workflow/api";
 import { createHook, sleep } from "workflow";
 //#region src/workflow-sdk/approval-waiter.ts

package/dist/workflow-sdk/world/index.d.ts

@@ -1,4 +1,4 @@
-import { o as EventHub } from "../../events-CTreRrgP.js";
+import { o as EventHub } from "../../events-CtAHxPal.js";
 import { n as Logger } from "../../logger-DWVYUmwi.js";
 import { Pool } from "pg";
 import { World } from "@workflow/world";

package/dist/workflow-sdk/world/index.js

@@ -1,10 +1,10 @@
 import { n as dbError } from "../../errors-8i6tSICm.js";
 import { o as problemResponse } from "../../problem-pIiL3WbE.js";
 import { i as sqlIdent } from "../../template-DdgYjIZ5.js";
+import { i as WORLD_POSTGRES_VERSION, r as WORKFLOW_VAULT_SECRETS } from "../../workflow-sdk-world-DPMdBfzn.js";
 import { n as hmacHex, r as timingSafeEqual } from "../../hmac-DCud0myt.js";
-import { t as watchPoolErrors } from "../../pool-errors-GMjlCN0d.js";
+import { t as watchPoolErrors } from "../../pool-errors-C94tPR_G.js";
 import { n as memoized } from "../../optional-peer-Dx8TaYXw.js";
-import { i as WORLD_POSTGRES_VERSION, r as WORKFLOW_VAULT_SECRETS } from "../../workflow-sdk-world-DPMdBfzn.js";
 import { Pool } from "pg";
 import { reenqueueActiveRuns } from "@workflow/world";
 import { createWorld as createWorld$1 } from "@workflow/world-postgres";

package/dist/{workflow-sdk-q8cLwW1K.d.ts → workflow-sdk-Di5pmCAu.d.ts}

@@ -1,6 +1,6 @@
-import { m as RequestContext } from "./plugin-CDLJRFFg.js";
-import { f as WorkflowStarter, l as WorkflowStartCall, p as WorkflowSubject, t as WorkflowPrincipalKind } from "./workflows-DFQeXDAI.js";
-import { a as OutboxEvent, o as OutboxHandler } from "./outbox-BTeqjbum.js";
+import { m as RequestContext } from "./plugin-D5OIaP93.js";
+import { f as WorkflowStarter, l as WorkflowStartCall, p as WorkflowSubject, t as WorkflowPrincipalKind } from "./workflows-DJXoxDZH.js";
+import { a as OutboxEvent, o as OutboxHandler } from "./outbox-BCGHl9X6.js";
 import { Hook, Run } from "workflow/api";
 import { World } from "@workflow/world";
 //#region src/workflow-sdk/workflow-sdk.d.ts

package/dist/{workflow-sdk-BZ6qsRlY.js → workflow-sdk-vjDWlnfX.js}

@@ -1,5 +1,5 @@
 import { n as PERMISSION_CAP_CLAIM } from "./delegation-Dt8hMJWu.js";
-import { n as withContext, t as unwrap } from "./envelope-CHYk5MXU.js";
+import { n as withContext, t as unwrap } from "./envelope--7d0Q3Se.js";
 import { n as subjectAttribute, t as WORKFLOW_ATTRIBUTES } from "./attributes-D4mA7WhI.js";
 import { getHookByToken, getRun, start } from "workflow/api";
 import { getWorld } from "workflow/runtime";

package/dist/{workflows-DFQeXDAI.d.ts → workflows-DJXoxDZH.d.ts}

@@ -1,9 +1,9 @@
 /// <reference lib="esnext.temporal" />
 import { t as AsyncResult, w as ErrorMapper } from "./result-Cj3yWhjH.js";
 import { n as Logger } from "./logger-DWVYUmwi.js";
-import { t as BlockTransport } from "./block-transport-DaGGXjIw.js";
-import { i as CursorPageOptions, r as BlockTemporalOptions } from "./block-helpers-C86hPEjI.js";
-import { n as BlockHooks } from "./block-hooks-BLPWD3Jt.js";
+import { t as BlockTransport } from "./block-transport-NbUJygA7.js";
+import { i as CursorPageOptions, r as BlockTemporalOptions } from "./block-helpers-7pMBVsE6.js";
+import { n as BlockHooks } from "./block-hooks-C_WaodoA.js";
 import { r as RunState } from "./run-state-CPo-1X2B.js";
 //#region src/blocks/workflows/workflows.d.ts
 /** A workflow run's state, in the words ai-chat and ai-tasks runs share. */

package/dist/{workflows-C-OvZpeg.js → workflows-DzdX28KN.js}

@@ -1,9 +1,9 @@
 import { t as temporal } from "./temporal-required-DqRzr7i0.js";
-import { a as ok, r as err } from "./result-BlgnMB0H.js";
+import { a as ok, r as err } from "./result-COkvI9t5.js";
 import { n as isRecord } from "./guards-6F2bCtQR.js";
-import { A as requiredInstant, C as optionalText, D as recordOf, I as textOf, M as seconds, S as optionalInstant, f as errorText, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall, w as pageOf } from "./block-helpers-CfG_MvDR.js";
+import { A as requiredInstant, C as optionalText, D as recordOf, I as textOf, M as seconds, S as optionalInstant, f as errorText, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall, w as pageOf } from "./block-helpers-BfVCR5Fc.js";
 import { n as nextCronRun, t as assertCron } from "./cron-CUaKTjWC.js";
-import { r as withBlockHooks } from "./block-hooks-BsXncUlZ.js";
+import { r as withBlockHooks } from "./block-hooks-ByKlh8Qy.js";
 //#region src/blocks/workflows/workflows.ts
 const STATUSES = /* @__PURE__ */ new Set([
 	"queued",

package/dist/yjs/index.d.ts

@@ -1,6 +1,6 @@
 import { t as AsyncResult } from "../result-Cj3yWhjH.js";
-import { c as RealtimeClient, r as PresenceMember } from "../topic-cMS7UtM1.js";
-import { c as OpenedDocument, n as DocumentRef, o as Documents } from "../documents-CWn2mtYf.js";
+import { c as RealtimeClient, r as PresenceMember } from "../topic-Dgs-eSYQ.js";
+import { c as OpenedDocument, n as DocumentRef, o as Documents } from "../documents-BYM2viS0.js";
 //#region src/yjs/yjs.d.ts
 type PresenceState = Readonly<Record<string, unknown>>;
 /** The part of a `Y.Doc` the provider uses. */

package/dist/yjs/index.js

@@ -1,8 +1,8 @@
-import { a as ok, r as err, t as AsyncResult } from "../result-BlgnMB0H.js";
+import { a as ok, r as err, t as AsyncResult } from "../result-COkvI9t5.js";
 import { n as isRecord } from "../guards-6F2bCtQR.js";
 import { i as toBase64, r as fromBase64 } from "../base64-BmeCBgGo.js";
 import { t as importOptionalPeer } from "../optional-peer-Dx8TaYXw.js";
-import { t as defineTopic } from "../topic-ByDz9edV.js";
+import { t as defineTopic } from "../topic-DB-1YTMj.js";
 //#region src/yjs/yjs.ts
 function isYjs(value) {
 	return isRecord(value) && typeof value["applyUpdate"] === "function" && typeof value["mergeUpdates"] === "function";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-supabase",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Strongly typed Supabase: generated schema, typed repositories, plugins, auth glue, framework integrations and the better-supabase CLI.",
   "keywords": [
     "cli",
@@ -55,6 +55,18 @@
       "types": "./dist/preset/index.d.ts",
       "default": "./dist/preset/index.js"
     },
+    "./create": {
+      "types": "./dist/create/index.d.ts",
+      "default": "./dist/create/index.js"
+    },
+    "./create/lite": {
+      "types": "./dist/create/lite/index.d.ts",
+      "default": "./dist/create/lite/index.js"
+    },
+    "./create/supabase": {
+      "types": "./dist/create/supabase/index.d.ts",
+      "default": "./dist/create/supabase/index.js"
+    },
     "./cli": {
       "types": "./dist/cli/index.d.ts",
       "default": "./dist/cli/index.js"
@@ -1205,10 +1217,10 @@
     "@supabase/ssr": "^0.12.7"
   },
   "devDependencies": {
-    "@ai-sdk/anthropic": "4.0.81",
-    "@ai-sdk/mcp": "2.0.77",
-    "@ai-sdk/react": "4.0.146",
-    "@ai-sdk/workflow": "2.0.74",
+    "@ai-sdk/anthropic": "4.0.82",
+    "@ai-sdk/mcp": "2.0.78",
+    "@ai-sdk/react": "4.0.147",
+    "@ai-sdk/workflow": "2.0.75",
     "@arethetypeswrong/cli": "0.18.5",
     "@better-supabase/typescript-config": "0.0.0",
     "@chat-adapter/tests": "4.42.0",
@@ -1220,9 +1232,9 @@
     "@next/playwright": "16.4.2",
     "@openfeature/server-sdk": "1.23.0",
     "@opentelemetry/api": "1.9.1",
-    "@orpc/contract": "2.0.0-beta.43",
-    "@orpc/openapi": "2.0.0-beta.43",
-    "@orpc/server": "2.0.0-beta.43",
+    "@orpc/contract": "2.0.0-beta.44",
+    "@orpc/openapi": "2.0.0-beta.44",
+    "@orpc/server": "2.0.0-beta.44",
     "@playwright/test": "1.64.1",
     "@powersync/common": "2.3.1",
     "@solidjs/start": "2.0.6",
@@ -1236,12 +1248,12 @@
     "@sveltejs/kit": "3.1.0",
     "@t3-oss/env-core": "0.13.11",
     "@tanstack/db": "0.15.0",
-    "@tanstack/query-core": "5.104.3",
-    "@tanstack/react-query": "5.104.3",
-    "@tanstack/react-start": "1.169.2",
+    "@tanstack/query-core": "5.104.4",
+    "@tanstack/react-query": "5.104.4",
+    "@tanstack/react-start": "1.169.3",
     "@types/express": "5.0.6",
     "@types/koa": "3.0.3",
-    "@types/node": "24.19.2",
+    "@types/node": "26.6.5",
     "@types/pg": "8.23.1",
     "@types/react": "19.3.0",
     "@types/react-dom": "19.3.0",
@@ -1252,7 +1264,7 @@
     "@workflow/world": "5.0.4",
     "@workflow/world-postgres": "5.0.4",
     "@workflow/world-testing": "5.0.5",
-    "ai": "7.0.142",
+    "ai": "7.0.143",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",
     "astro": "7.4.0",
@@ -1264,13 +1276,13 @@
     "diff": "9.0.0",
     "effect": "4.0.5",
     "elysia": "1.4.30",
-    "eve": "0.80.0",
+    "eve": "0.80.1",
     "expo-server": "57.0.3",
     "express": "5.3.0",
     "fastest-levenshtein": "1.0.16",
     "fastify": "5.12.7",
     "flags": "4.3.1",
-    "h3": "2.0.2",
+    "h3": "2.0.5",
     "hono": "4.13.13",
     "jsonpath-rfc9535": "1.3.0",
     "koa": "3.2.1",

package/schemas/config-v1.json

@@ -565,9 +565,9 @@
               "values": {
                 "type": "object",
                 "additionalProperties": {
-                  "type": "string"
+                  "$ref": "#/$defs/triggerValue"
                 },
-                "description": "The column per placeholder. Defaults to the placeholder in snake_case."
+                "description": "The column or lookup per placeholder. Defaults to the placeholder in snake_case. A row whose topic comes out null is not sent to it."
               },
               "events": {
                 "type": "array",
@@ -577,19 +577,88 @@
                 }
               },
               "event": {
-                "type": "string",
-                "description": "The broadcast event name. Defaults to the operation."
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "insert": {
+                        "type": "string"
+                      },
+                      "update": {
+                        "type": "string"
+                      },
+                      "delete": {
+                        "type": "string"
+                      }
+                    },
+                    "additionalProperties": false
+                  }
+                ],
+                "description": "The broadcast event name, or one per operation ({ insert, update, delete }). Defaults to the operation."
               },
               "payload": {
-                "enum": ["keys", "row"],
+                "anyOf": [
+                  {
+                    "enum": ["keys", "row"],
+                    "type": "string"
+                  },
+                  {
+                    "type": "object",
+                    "additionalProperties": {
+                      "anyOf": [
+                        {
+                          "$ref": "#/$defs/triggerValue"
+                        },
+                        {
+                          "type": "object",
+                          "properties": {
+                            "sql": {
+                              "type": "string"
+                            }
+                          },
+                          "required": ["sql"],
+                          "additionalProperties": false
+                        }
+                      ]
+                    }
+                  }
+                ],
+                "description": "keys (default) sends the primary key and the placeholder values; row sends the whole row, which bypasses column grants. An object is the payload itself: each key is a column, a lookup, or { sql }, an expression on the row {row} (tg_op is the operation)."
+              },
+              "topics": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "topic": {
+                      "type": "string",
+                      "description": "The template of a topic `policies.from` exports."
+                    },
+                    "values": {
+                      "type": "object",
+                      "additionalProperties": {
+                        "$ref": "#/$defs/triggerValue"
+                      },
+                      "description": "The column or lookup per placeholder. Defaults to the placeholder in snake_case."
+                    }
+                  },
+                  "required": ["topic"],
+                  "additionalProperties": false
+                },
+                "description": "More topics the row change goes to, each with its own values."
+              },
+              "functionSchema": {
                 "type": "string",
-                "description": "keys (default) sends the primary key and the placeholder values; row sends the whole row, which bypasses column grants."
+                "description": "Schema for a generated function. Defaults to better_supabase, which the Data API does not expose."
               }
             },
             "required": ["topic", "table"],
             "additionalProperties": false
           },
-          "description": "Broadcast triggers `sql sync` writes to `policies.output`: each calls better_supabase.broadcast_topic() (the realtime-tables module) for a topic `policies.from` exports."
+          "description": "Broadcast triggers `sql sync` writes to `policies.output` through the topic's trigger(), for topics `policies.from` exports. One topic with column values, a keys or row payload and one event name calls better_supabase.broadcast_topic() (the realtime-tables module); any other trigger gets a generated function."
         }
       },
       "additionalProperties": false,
@@ -1293,6 +1362,22 @@
             "required": ["column"],
             "additionalProperties": false,
             "description": "The rank key column and the column it is grouped by, for `move()`."
+          },
+          "versions": {
+            "type": "object",
+            "properties": {
+              "columns": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "auto": {
+                "type": "boolean"
+              }
+            },
+            "required": ["columns", "auto"],
+            "additionalProperties": false
           }
         },
         "required": ["table"],
@@ -1417,6 +1502,10 @@
                 "identity": {
                   "type": "boolean",
                   "description": "An integer or bigint the database numbers (generated by default as identity)."
+                },
+                "access": {
+                  "enum": ["read", "server"],
+                  "type": "string"
                 }
               },
               "required": ["type"],
@@ -1516,6 +1605,28 @@
               "softDelete": {
                 "type": "boolean",
                 "description": "Adds a deleted_at column that blocks treat as the soft-delete time."
+              },
+              "versions": {
+                "anyOf": [
+                  {
+                    "const": true
+                  },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "columns": {
+                        "type": "array",
+                        "items": {
+                          "type": "string"
+                        }
+                      },
+                      "auto": {
+                        "type": "boolean"
+                      }
+                    },
+                    "additionalProperties": false
+                  }
+                ]
               }
             },
             "required": ["type"],
@@ -1581,6 +1692,32 @@
               "additionalProperties": false
             },
             "description": "Columns of public.<table>_view read from the row a reference points at (ADR 0044)."
+          },
+          "events": {
+            "anyOf": [
+              {
+                "const": true
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "on": {
+                    "type": "array",
+                    "items": {
+                      "enum": ["created", "updated", "deleted"],
+                      "type": "string"
+                    }
+                  },
+                  "include": {
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    }
+                  }
+                },
+                "additionalProperties": false
+              }
+            ]
           }
         },
         "additionalProperties": false
@@ -2231,6 +2368,15 @@
         },
         "claimsLimit": {
           "type": "number"
+        },
+        "migrationSafety": {
+          "type": "object",
+          "properties": {
+            "since": {
+              "type": "string"
+            }
+          },
+          "additionalProperties": false
         }
       },
       "additionalProperties": false
@@ -2861,6 +3007,33 @@
       "pattern": "^(?:select|insert|update|delete|(?:select|insert|update)\\s*\\(\\s*(?:[a-z_][a-z0-9_$]*(?:\\s*,\\s*[a-z_][a-z0-9_$]*)*|\\*(?:\\s*,\\s*-\\s*[a-z_][a-z0-9_$]*)*)\\s*\\))$",
       "description": "select, insert, update or delete, a column privilege such as `update(title, body)`, or every declared column but some, such as `select(*, -token_hash)`."
     },
+    "triggerValue": {
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "object",
+          "properties": {
+            "from": {
+              "type": "string"
+            },
+            "via": {
+              "$ref": "#/$defs/triggerValue"
+            },
+            "select": {
+              "type": "string"
+            },
+            "key": {
+              "type": "string"
+            }
+          },
+          "required": ["from", "via", "select"],
+          "additionalProperties": false
+        }
+      ],
+      "description": "A column of the changed row, or a lookup: the `select` column of the `from` row (`table` or `schema.table`) whose `key` (default id) equals `via`, a column or another lookup."
+    },
     "blocks": {
       "access": {
         "$ref": "#/$defs/accessBlock",

package/schemas/doctor-report-v1.json

@@ -77,6 +77,12 @@
               "BS226",
               "BS227",
               "BS228",
+              "BS229",
+              "BS230",
+              "BS231",
+              "BS232",
+              "BS233",
+              "BS234",
               "BS301",
               "BS302",
               "BS303",
@@ -118,6 +124,7 @@
               "BS339",
               "BS340",
               "BS341",
+              "BS342",
               "BS401",
               "BS402",
               "BS403",

package/skills/better-supabase/SKILL.md

@@ -162,6 +162,7 @@ const customers = result.data;
 - `--json` prints one envelope on stdout: `status`, the result under `data`, Problem Details with a `code` under `error`, and the commands to run under `next`. `--yes` and `CI` turn prompts off.
 - Exit codes: 0 success, 1 a failure or finding (`--check` drift, doctor errors), 2 a usage, config or environment problem, 3 when the user has to act. Each error code is listed at https://bettersupabase.com/docs/cli/errors.
 - When the CLI detects an agent it prints JSON and never prompts. Exit code 3 with `input_required` lists `missing` flags and their `choices`; run the `next` command with the value filled in. `consent_required` means the user must agree first (`--force` over their files, `seed --apply` on a remote database): ask them, then run the `next` command with its `--confirm` token. Never pass `--confirm` without asking. See https://bettersupabase.com/docs/cli/agent-mode.
+- `better-supabase mcp` serves the same commands as MCP tools on stdio, read-only unless started with `--allow-writes`. A write tool first returns `consent_required` with a `token`; ask the user, then call it again with the same arguments and `confirm` set to the token. See https://bettersupabase.com/docs/cli/mcp.
 
 ## Don't