better-supabase 0.9.0 → 0.11.0

package/dist/blocks/sessions/react/index.js

@@ -1,7 +1,7 @@
 "use client";
 import { n as useLatest, t as useController } from "../../../react-controller-Xn-IU44p.js";
 import { t as useBlockEnv } from "../../../react-env-Cc7Vf6eb.js";
-import { n as createOAuthGrantsController, t as createOAuthConsentController } from "../../../client-CiGjS6us.js";
+import { n as createOAuthGrantsController, t as createOAuthConsentController } from "../../../client-D7T7OLiw.js";
 //#region src/blocks/sessions/react/index.ts
 /**
 * The consent page of the Supabase Auth OAuth server: `request` holds the

package/dist/blocks/sessions/react/server.d.ts

@@ -1,4 +1,4 @@
-import { c as OAuthGrant, n as OAuthClientInfo, o as OAuthConsentRequest } from "../../../client-CzI4QpG3.js";
+import { c as OAuthGrant, n as OAuthClientInfo, o as OAuthConsentRequest } from "../../../client-DbxvLC9Y.js";
 import { OAuthConsentState, OAuthGrantsState, UseOAuthConsentOptions } from "./index.js";
 //#region src/blocks/sessions/react/server.d.ts
 /** The `react-server` build of `useOAuthConsent`: it runs in Client Components only. */

package/dist/blocks/sessions/solid/index.d.ts

@@ -1,6 +1,6 @@
 import { t as BlockOptions } from "../../../block-env-Dxl7rsI0.js";
-import { t as SolidController } from "../../../solid-controller-DqlvYFZa.js";
-import { a as OAuthConsentControllerOptions, d as OAuthGrantsControllerOptions, f as OAuthGrantsSnapshot, l as OAuthGrantsActions, r as OAuthConsentActions, s as OAuthConsentSnapshot } from "../../../client-CzI4QpG3.js";
+import { t as SolidController } from "../../../solid-controller-Uqi5ef6z.js";
+import { a as OAuthConsentControllerOptions, d as OAuthGrantsControllerOptions, f as OAuthGrantsSnapshot, l as OAuthGrantsActions, r as OAuthConsentActions, s as OAuthConsentSnapshot } from "../../../client-DbxvLC9Y.js";
 //#region src/blocks/sessions/solid/index.d.ts
 /**
  * `createOAuthConsentController` as a Solid primitive: `state()` reads the

package/dist/blocks/sessions/solid/index.js

@@ -1,5 +1,5 @@
 import { t as useBlockController } from "../../../solid-controller-DLsmrczT.js";
-import { n as createOAuthGrantsController, t as createOAuthConsentController } from "../../../client-CiGjS6us.js";
+import { n as createOAuthGrantsController, t as createOAuthConsentController } from "../../../client-D7T7OLiw.js";
 //#region src/blocks/sessions/solid/index.ts
 /**
 * `createOAuthConsentController` as a Solid primitive: `state()` reads the

package/dist/blocks/sessions/svelte/index.d.ts

@@ -1,6 +1,6 @@
 import { t as BlockOptions } from "../../../block-env-Dxl7rsI0.js";
-import { t as SvelteController } from "../../../svelte-controller-DxxHEHxD.js";
-import { a as OAuthConsentControllerOptions, d as OAuthGrantsControllerOptions, f as OAuthGrantsSnapshot, l as OAuthGrantsActions, r as OAuthConsentActions, s as OAuthConsentSnapshot } from "../../../client-CzI4QpG3.js";
+import { t as SvelteController } from "../../../svelte-controller-BQOIXWEw.js";
+import { a as OAuthConsentControllerOptions, d as OAuthGrantsControllerOptions, f as OAuthGrantsSnapshot, l as OAuthGrantsActions, r as OAuthConsentActions, s as OAuthConsentSnapshot } from "../../../client-DbxvLC9Y.js";
 //#region src/blocks/sessions/svelte/index.d.ts
 /**
  * `createOAuthConsentController` as a Svelte readable store of the snapshot,

package/dist/blocks/sessions/svelte/index.js

@@ -1,5 +1,5 @@
 import { t as useBlockController } from "../../../svelte-controller-CDAujo-_.js";
-import { n as createOAuthGrantsController, t as createOAuthConsentController } from "../../../client-CiGjS6us.js";
+import { n as createOAuthGrantsController, t as createOAuthConsentController } from "../../../client-D7T7OLiw.js";
 //#region src/blocks/sessions/svelte/index.ts
 /**
 * `createOAuthConsentController` as a Svelte readable store of the snapshot,

package/dist/blocks/sessions/vue/index.d.ts

@@ -1,6 +1,6 @@
 import { t as BlockOptions } from "../../../block-env-Dxl7rsI0.js";
-import { t as VueController } from "../../../vue-controller-HPfMTDa2.js";
-import { a as OAuthConsentControllerOptions, d as OAuthGrantsControllerOptions, f as OAuthGrantsSnapshot, l as OAuthGrantsActions, r as OAuthConsentActions, s as OAuthConsentSnapshot } from "../../../client-CzI4QpG3.js";
+import { t as VueController } from "../../../vue-controller-Cav6Wt_r.js";
+import { a as OAuthConsentControllerOptions, d as OAuthGrantsControllerOptions, f as OAuthGrantsSnapshot, l as OAuthGrantsActions, r as OAuthConsentActions, s as OAuthConsentSnapshot } from "../../../client-DbxvLC9Y.js";
 //#region src/blocks/sessions/vue/index.d.ts
 /**
  * `createOAuthConsentController` as a Vue composable: `state` is a shallow ref

package/dist/blocks/sessions/vue/index.js

@@ -1,5 +1,5 @@
 import { t as useBlockController } from "../../../vue-controller-C9tFzqAc.js";
-import { n as createOAuthGrantsController, t as createOAuthConsentController } from "../../../client-CiGjS6us.js";
+import { n as createOAuthGrantsController, t as createOAuthConsentController } from "../../../client-D7T7OLiw.js";
 //#region src/blocks/sessions/vue/index.ts
 /**
 * `createOAuthConsentController` as a Vue composable: `state` is a shallow ref

package/dist/blocks/settings/index.d.ts

@@ -1,7 +1,7 @@
-import { rt as SettingEventData, wt as Events } from "../../events-CTreRrgP.js";
-import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DaGGXjIw.js";
-import { s as BlockOf } from "../../define-block-CLZMEFeK.js";
-import { _ as createSettings, a as SettingsControllerOptions, c as settingFields, d as SettingInputs, f as SettingValues, g as SettingsSpec, h as SettingsOptions, i as SettingsController, l as SettingEntries, m as SettingsDefinition, n as SettingKind, o as SettingsSnapshot, p as Settings, r as SettingsActions, s as createSettingsController, t as SettingField, u as SettingEntry, v as defineSettings } from "../../client-DAHsEOVV.js";
+import { rt as SettingEventData, wt as Events } from "../../events-P3raDX2E.js";
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DezJPPA0.js";
+import { s as BlockOf } from "../../define-block-CPyJ95rq.js";
+import { _ as createSettings, a as SettingsControllerOptions, c as settingFields, d as SettingInputs, f as SettingValues, g as SettingsSpec, h as SettingsOptions, i as SettingsController, l as SettingEntries, m as SettingsDefinition, n as SettingKind, o as SettingsSnapshot, p as Settings, r as SettingsActions, s as createSettingsController, t as SettingField, u as SettingEntry, v as defineSettings } from "../../client-CrZKZVbb.js";
 //#region src/blocks/settings/events.d.ts
 /** The events of the `settings` block: type to data. */
 type SettingsEvents = {

package/dist/blocks/settings/index.js

@@ -1,9 +1,9 @@
+import { t as settingsSqlOptions } from "../../options-CVSWgZpY.js";
 import { n as event, t as defineEvents } from "../../event-map-Dy2vKHai.js";
-import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-G4t1umrR.js";
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-J7ZepTq2.js";
 import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
-import { n as defineSettings, t as createSettings } from "../../settings-BXFn9zpS.js";
-import { t as settingsSqlOptions } from "../../options-CVSWgZpY.js";
-import { n as settingFields, t as createSettingsController } from "../../client-01MAuqzW.js";
+import { n as defineSettings, t as createSettings } from "../../settings-BiHDFglz.js";
+import { n as settingFields, t as createSettingsController } from "../../client-DzTtOVRR.js";
 //#region src/blocks/settings/events.ts
 /** The `settings` block's event types, for its manifest and `onBlockEvent`. */
 const settingsEvents = defineEvents({

package/dist/blocks/settings/react/index.d.ts

@@ -1,4 +1,4 @@
-import { l as SettingEntries, m as SettingsDefinition, n as SettingKind, o as SettingsSnapshot, r as SettingsActions, t as SettingField } from "../../../client-DAHsEOVV.js";
+import { l as SettingEntries, m as SettingsDefinition, n as SettingKind, o as SettingsSnapshot, r as SettingsActions, t as SettingField } from "../../../client-CrZKZVbb.js";
 //#region src/blocks/settings/react/index.d.ts
 export interface UseSettingsOptions<S extends "user" | "organization"> {
   /** Which part of the definition the page edits. */

package/dist/blocks/settings/react/index.js

@@ -1,9 +1,9 @@
 "use client";
-import { r as rpcTransport } from "../../../block-transport-G4t1umrR.js";
+import { r as rpcTransport } from "../../../block-transport-J7ZepTq2.js";
 import { t as useController } from "../../../react-controller-Xn-IU44p.js";
 import { t as useBlockEnv } from "../../../react-env-Cc7Vf6eb.js";
-import { t as createSettings } from "../../../settings-BXFn9zpS.js";
-import { t as createSettingsController } from "../../../client-01MAuqzW.js";
+import { t as createSettings } from "../../../settings-BiHDFglz.js";
+import { t as createSettingsController } from "../../../client-DzTtOVRR.js";
 //#region src/blocks/settings/react/index.ts
 function useSettings(settings, options) {
 	const { supabase, auth } = useBlockEnv();

package/dist/blocks/settings/react/server.d.ts

@@ -1,4 +1,4 @@
-import { n as SettingKind, t as SettingField } from "../../../client-DAHsEOVV.js";
+import { n as SettingKind, t as SettingField } from "../../../client-CrZKZVbb.js";
 import { SettingsState, UseSettingsOptions, useSettings as useSettings$1 } from "./index.js";
 //#region src/blocks/settings/react/server.d.ts
 /** The `react-server` build of `useSettings`: call `createSettings(...).getUser()` instead. */

package/dist/blocks/settings/solid/index.d.ts

@@ -1,6 +1,6 @@
 import { t as BlockOptions } from "../../../block-env-Dxl7rsI0.js";
-import { t as SolidController } from "../../../solid-controller-DqlvYFZa.js";
-import { a as SettingsControllerOptions, l as SettingEntries, o as SettingsSnapshot, r as SettingsActions } from "../../../client-DAHsEOVV.js";
+import { t as SolidController } from "../../../solid-controller-Uqi5ef6z.js";
+import { a as SettingsControllerOptions, l as SettingEntries, o as SettingsSnapshot, r as SettingsActions } from "../../../client-CrZKZVbb.js";
 //#region src/blocks/settings/solid/index.d.ts
 /**
  * `createSettingsController` as a Solid primitive: `state()` reads the

package/dist/blocks/settings/solid/index.js

@@ -1,5 +1,5 @@
 import { t as useBlockController } from "../../../solid-controller-DLsmrczT.js";
-import { t as createSettingsController } from "../../../client-01MAuqzW.js";
+import { t as createSettingsController } from "../../../client-DzTtOVRR.js";
 //#region src/blocks/settings/solid/index.ts
 /**
 * `createSettingsController` as a Solid primitive: `state()` reads the

package/dist/blocks/settings/svelte/index.d.ts

@@ -1,6 +1,6 @@
 import { t as BlockOptions } from "../../../block-env-Dxl7rsI0.js";
-import { t as SvelteController } from "../../../svelte-controller-DxxHEHxD.js";
-import { a as SettingsControllerOptions, l as SettingEntries, o as SettingsSnapshot, r as SettingsActions } from "../../../client-DAHsEOVV.js";
+import { t as SvelteController } from "../../../svelte-controller-BQOIXWEw.js";
+import { a as SettingsControllerOptions, l as SettingEntries, o as SettingsSnapshot, r as SettingsActions } from "../../../client-CrZKZVbb.js";
 //#region src/blocks/settings/svelte/index.d.ts
 /**
  * `createSettingsController` as a Svelte readable store of the snapshot, with

package/dist/blocks/settings/svelte/index.js

@@ -1,5 +1,5 @@
 import { t as useBlockController } from "../../../svelte-controller-CDAujo-_.js";
-import { t as createSettingsController } from "../../../client-01MAuqzW.js";
+import { t as createSettingsController } from "../../../client-DzTtOVRR.js";
 //#region src/blocks/settings/svelte/index.ts
 /**
 * `createSettingsController` as a Svelte readable store of the snapshot, with

package/dist/blocks/settings/vue/index.d.ts

@@ -1,6 +1,6 @@
 import { t as BlockOptions } from "../../../block-env-Dxl7rsI0.js";
-import { t as VueController } from "../../../vue-controller-HPfMTDa2.js";
-import { a as SettingsControllerOptions, l as SettingEntries, o as SettingsSnapshot, r as SettingsActions } from "../../../client-DAHsEOVV.js";
+import { t as VueController } from "../../../vue-controller-Cav6Wt_r.js";
+import { a as SettingsControllerOptions, l as SettingEntries, o as SettingsSnapshot, r as SettingsActions } from "../../../client-CrZKZVbb.js";
 //#region src/blocks/settings/vue/index.d.ts
 /**
  * `createSettingsController` as a Vue composable: `state` is a shallow ref of

package/dist/blocks/settings/vue/index.js

@@ -1,5 +1,5 @@
 import { t as useBlockController } from "../../../vue-controller-C9tFzqAc.js";
-import { t as createSettingsController } from "../../../client-01MAuqzW.js";
+import { t as createSettingsController } from "../../../client-DzTtOVRR.js";
 //#region src/blocks/settings/vue/index.ts
 /**
 * `createSettingsController` as a Vue composable: `state` is a shallow ref of

package/dist/blocks/share-links/index.d.ts

@@ -1,12 +1,12 @@
 /// <reference lib="esnext.temporal" />
-import { t as AsyncResult } from "../../result-Cj3yWhjH.js";
-import { $ as SaasEventData, et as SaasSubjectEventData, wt as Events } from "../../events-CTreRrgP.js";
+import { t as AsyncResult } from "../../result-BREt7qOh.js";
+import { $ as SaasEventData, et as SaasSubjectEventData, wt as Events } from "../../events-P3raDX2E.js";
 import { n as Logger } from "../../logger-DWVYUmwi.js";
-import { t as StandardSchemaV1 } from "../../standard-C3_AAF3g.js";
-import { n as BlockOptions } from "../../block-helpers-C86hPEjI.js";
-import { n as BlockHooks } from "../../block-hooks-BLPWD3Jt.js";
-import { n as ExtraFields, r as FieldsOf } from "../../block-fields-5UA84ZUg.js";
-import { s as BlockOf } from "../../define-block-CLZMEFeK.js";
+import { t as StandardSchemaV1 } from "../../standard-BcUQuUgu.js";
+import { n as BlockOptions } from "../../block-helpers-CjcQM1yA.js";
+import { n as BlockHooks } from "../../block-hooks-DcPJHztl.js";
+import { n as ExtraFields, r as FieldsOf } from "../../block-fields-DnaDbgZS.js";
+import { s as BlockOf } from "../../define-block-CPyJ95rq.js";
 //#region src/blocks/share-links/share-links.d.ts
 interface ShareLinksOptions<S extends StandardSchemaV1 | undefined = undefined> extends BlockOptions {
   /**
@@ -52,6 +52,11 @@ interface CreateShareLinkOptions<F extends object = Record<never, never>> {
    * (`SHARE_EXPIRY_INVALID`); without it the link lives until revoked.
    */
   readonly expiresAt?: Temporal.Instant;
+  /**
+   * How many times `resolve` may open the link. Without it the link opens
+   * until it is revoked or expires.
+   */
+  readonly maxUses?: number;
 }
 /** What a live token points at. */
 interface ResolvedShareLink {
@@ -65,13 +70,15 @@ interface ResolvedShareLink {
   readonly versionId?: string;
   /** When the link stops resolving, when it has an expiry. */
   readonly expiresAt?: Temporal.Instant;
+  /** How many times the link may be opened, when it has a limit. */
+  readonly maxUses?: number;
 }
 interface ShareLinks<F extends object = Record<never, never>> {
   /** A role string is the same as `{ role }`. */
   create(organizationId: string, subjectType: string, subjectId: string, options?: string | CreateShareLinkOptions<F>): AsyncResult<CreatedShareLink<F>>;
   /** The link's creator, or a member with `share_links.create`. */
   revoke(id: string): AsyncResult<boolean>;
-  /** `null` for an unknown, revoked or expired token. */
+  /** `null` for an unknown, revoked, expired or used-up token. Each call counts one use. */
   resolve(token: string): AsyncResult<ResolvedShareLink | null>;
   /** A member of the organization records a view. */
   recordView(organizationId: string, subjectType: string, subjectId: string, viewerKind: string, viewer?: string): AsyncResult<boolean>;

package/dist/blocks/share-links/index.js

@@ -1,10 +1,10 @@
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { t as shareLinksSqlOptions } from "../../options-CAzVf-1T.js";
 import { n as event, t as defineEvents } from "../../event-map-Dy2vKHai.js";
-import { C as optionalText, D as recordOf, I as textOf, S as optionalInstant, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall, v as nullableInstant } from "../../block-helpers-CfG_MvDR.js";
-import { r as withBlockHooks } from "../../block-hooks-BsXncUlZ.js";
-import { n as blockFields } from "../../block-fields-ffD6Gxe4.js";
+import { C as optionalText, D as recordOf, I as textOf, S as optionalInstant, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall, v as nullableInstant } from "../../block-helpers-DkVZNDrj.js";
+import { r as withBlockHooks } from "../../block-hooks-C22vuIUd.js";
+import { n as blockFields } from "../../block-fields-Bv1hV855.js";
 import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
-import { t as shareLinksSqlOptions } from "../../options-CAzVf-1T.js";
 //#region src/blocks/share-links/share-links.ts
 const fieldsOf = (row) => isRecord(row["fields"]) ? row["fields"] : {};
 /** The `share-links` SQL module as typed calls. */
@@ -14,7 +14,7 @@ function createShareLinks(options) {
 	const fields = blockFields(options.fields, "share link fields");
 	return withBlockHooks({
 		create: (organizationId, subjectType, subjectId, link = {}) => {
-			const { role, versionId, expiresAt, fields: extra } = typeof link === "string" ? { role: link } : link;
+			const { role, versionId, expiresAt, maxUses, fields: extra } = typeof link === "string" ? { role: link } : link;
 			return fields.args(extra).andThen((checked) => call("create_share_link", {
 				tenant: organizationId,
 				subject_type: subjectType,
@@ -22,6 +22,7 @@ function createShareLinks(options) {
 				role: role ?? "view",
 				version_id: versionId ?? null,
 				expires_at: instantArg(expiresAt) ?? null,
+				max_uses: maxUses ?? null,
 				fields: checked
 			}, (value) => {
 				const row = recordOf(value, "create_share_link");
@@ -38,6 +39,7 @@ function createShareLinks(options) {
 			const row = recordOf(value, "resolve_share_link");
 			const versionId = optionalText(row["versionId"]);
 			const expiresAt = optionalInstant(row["expiresAt"]);
+			const maxUses = typeof row["maxUses"] === "number" ? row["maxUses"] : void 0;
 			return {
 				id: textOf(row["id"]),
 				organizationId: textOf(row["organizationId"]),
@@ -45,7 +47,8 @@ function createShareLinks(options) {
 				subjectId: textOf(row["subjectId"]),
 				role: textOf(row["role"]),
 				...versionId === void 0 ? {} : { versionId },
-				...expiresAt === void 0 ? {} : { expiresAt }
+				...expiresAt === void 0 ? {} : { expiresAt },
+				...maxUses === void 0 ? {} : { maxUses }
 			};
 		}),
 		recordView: (organizationId, subjectType, subjectId, viewerKind, viewer) => call("record_view", {

package/dist/blocks/shared-signals/index.d.ts

@@ -1,14 +1,14 @@
 /// <reference lib="esnext.temporal" />
-import { t as AsyncResult } from "../../result-Cj3yWhjH.js";
-import { wt as Events } from "../../events-CTreRrgP.js";
+import { t as AsyncResult } from "../../result-BREt7qOh.js";
+import { wt as Events } from "../../events-P3raDX2E.js";
 import { n as Logger } from "../../logger-DWVYUmwi.js";
-import { s as sqlTransport, t as BlockTransport } from "../../block-transport-DaGGXjIw.js";
-import { n as BlockOptions } from "../../block-helpers-C86hPEjI.js";
-import { n as BlockHooks } from "../../block-hooks-BLPWD3Jt.js";
-import { n as VaultCredentials } from "../../vault-tOkPLnMB.js";
-import { s as BlockOf } from "../../define-block-CLZMEFeK.js";
+import { s as sqlTransport, t as BlockTransport } from "../../block-transport-DezJPPA0.js";
+import { n as BlockOptions } from "../../block-helpers-CjcQM1yA.js";
+import { n as BlockHooks } from "../../block-hooks-DcPJHztl.js";
+import { n as VaultCredentials } from "../../vault-DR2-zOjz.js";
+import { s as BlockOf } from "../../define-block-CPyJ95rq.js";
 import { n as Jwks } from "../../jws-35a8VhFV.js";
-import { a as Signer } from "../../signing-keys-Bq9mMCTh.js";
+import { o as Signer } from "../../signing-keys-v2MRYkDF.js";
 //#region src/blocks/shared-signals/set.d.ts
 /** The `typ` header of a Security Event Token (RFC 8417 §2.3). */
 export declare const SET_TYP = "secevent+jwt";

package/dist/blocks/shared-signals/index.js

@@ -1,15 +1,15 @@
-import { n as dbError } from "../../errors-8i6tSICm.js";
-import { a as ok, r as err, t as AsyncResult } from "../../result-BlgnMB0H.js";
+import { n as dbError } from "../../errors-BV1SKTVs.js";
+import { a as ok, r as err, t as AsyncResult } from "../../result-DIeYscA3.js";
 import { t as consoleLogger } from "../../logger-glM28NVN.js";
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
-import { o as problemResponse } from "../../problem-pIiL3WbE.js";
+import { o as problemResponse } from "../../problem-JRCohp1j.js";
+import { n as SSF_PUSH, r as sharedSignalsSqlOptions, t as SSF_POLL } from "../../methods-7u6vSgz_.js";
 import { n as event, t as defineEvents } from "../../event-map-Dy2vKHai.js";
-import { i as sqlTransport } from "../../block-transport-G4t1umrR.js";
-import { A as requiredInstant, D as recordOf, E as readBodyCapped, F as stringsOf, I as textOf, f as errorText, k as recordsOf, n as applyTemporal, o as blockCall, y as nullableText } from "../../block-helpers-CfG_MvDR.js";
-import { a as jwksOf, c as verifyCompact, t as JwsError } from "../../jws-milwSg7E.js";
-import { r as withBlockHooks } from "../../block-hooks-BsXncUlZ.js";
+import { i as sqlTransport } from "../../block-transport-J7ZepTq2.js";
+import { A as requiredInstant, D as recordOf, E as readBodyCapped, F as stringsOf, I as textOf, f as errorText, k as recordsOf, n as applyTemporal, o as blockCall, y as nullableText } from "../../block-helpers-DkVZNDrj.js";
+import { a as jwksOf, c as verifyCompact, t as JwsError } from "../../jws-CwBB5QAT.js";
+import { r as withBlockHooks } from "../../block-hooks-C22vuIUd.js";
 import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
-import { n as SSF_POLL, r as SSF_PUSH, t as sharedSignalsSqlOptions } from "../../options-BQ07tTYr.js";
 //#region src/blocks/shared-signals/set.ts
 /** The `typ` header of a Security Event Token (RFC 8417 §2.3). */
 const SET_TYP = "secevent+jwt";

package/dist/blocks/signing-keys/index.d.ts

@@ -1,8 +1,8 @@
-import { wt as Events } from "../../events-CTreRrgP.js";
-import { s as sqlTransport, t as BlockTransport } from "../../block-transport-DaGGXjIw.js";
-import { s as BlockOf } from "../../define-block-CLZMEFeK.js";
+import { wt as Events } from "../../events-P3raDX2E.js";
+import { s as sqlTransport, t as BlockTransport } from "../../block-transport-DezJPPA0.js";
+import { s as BlockOf } from "../../define-block-CPyJ95rq.js";
 import { a as JwsError, c as VerifyCompactOptions, d as verifyCompact, i as JwsAlgorithm, l as jwkThumbprint, n as Jwks, o as SigningAlgorithm, s as VerifiedJws, t as Jwk, u as jwksOf } from "../../jws-35a8VhFV.js";
-import { a as Signer, c as SigningKeys, i as Signature, l as SigningKeysOptions, n as JwksOptions, o as SignerOptions, r as JwksResponseOptions, s as SigningKeyOwner, t as CreatedSigningKey, u as createSigningKeys } from "../../signing-keys-Bq9mMCTh.js";
+import { a as Signature, c as SigningKeyOwner, d as createSigningKeys, f as jwtType, i as PLATFORM_OWNER, l as SigningKeys, n as JwksOptions, o as Signer, r as JwksResponseOptions, s as SignerOptions, t as CreatedSigningKey, u as SigningKeysOptions } from "../../signing-keys-v2MRYkDF.js";
 //#region src/blocks/signing-keys/events.d.ts
 /** `signing_key.*`: the key's owner and kid, never key material. */
 interface SigningKeyEventData {
@@ -26,4 +26,4 @@ export declare const signingKeysEvents: Events<SigningKeysEvents>;
 /** The `signing-keys` block's manifest (ADR 0029). */
 export declare const signingKeysBlock: BlockOf<"signing-keys", typeof createSigningKeys, SigningKeysEvents>;
 //#endregion
-export { type BlockTransport, type CreatedSigningKey, type Jwk, type Jwks, type JwksOptions, type JwksResponseOptions, type JwsAlgorithm, JwsError, type Signature, type Signer, type SignerOptions, type SigningAlgorithm, type SigningKeyCreatedEventData, type SigningKeyEventData, type SigningKeyOwner, type SigningKeys, type SigningKeysEvents, type SigningKeysOptions, type VerifiedJws, type VerifyCompactOptions, createSigningKeys, jwkThumbprint, jwksOf, sqlTransport, verifyCompact };
+export { type BlockTransport, type CreatedSigningKey, type Jwk, type Jwks, type JwksOptions, type JwksResponseOptions, type JwsAlgorithm, JwsError, PLATFORM_OWNER, type Signature, type Signer, type SignerOptions, type SigningAlgorithm, type SigningKeyCreatedEventData, type SigningKeyEventData, type SigningKeyOwner, type SigningKeys, type SigningKeysEvents, type SigningKeysOptions, type VerifiedJws, type VerifyCompactOptions, createSigningKeys, jwkThumbprint, jwksOf, jwtType, sqlTransport, verifyCompact };

package/dist/blocks/signing-keys/index.js

@@ -1,16 +1,38 @@
-import { n as dbError } from "../../errors-8i6tSICm.js";
-import { t as temporal } from "../../temporal-required-DqRzr7i0.js";
-import { t as AsyncResult } from "../../result-BlgnMB0H.js";
+import { n as dbError } from "../../errors-BV1SKTVs.js";
+import { t as temporal } from "../../temporal-required-nfZ87U-0.js";
+import { t as AsyncResult } from "../../result-DIeYscA3.js";
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { t as signingKeysSqlOptions } from "../../options-CmraJhd9.js";
 import { n as event, t as defineEvents } from "../../event-map-Dy2vKHai.js";
-import { i as sqlTransport } from "../../block-transport-G4t1umrR.js";
-import { D as recordOf, I as textOf, d as enumOrThrow, j as run, n as applyTemporal, o as blockCall } from "../../block-helpers-CfG_MvDR.js";
-import { a as jwksOf, c as verifyCompact, i as jwkThumbprint, n as generateSigningKey, o as signBytes, r as importSigningKey, s as signCompact, t as JwsError } from "../../jws-milwSg7E.js";
-import { r as withBlockHooks } from "../../block-hooks-BsXncUlZ.js";
+import { i as sqlTransport } from "../../block-transport-J7ZepTq2.js";
+import { D as recordOf, I as textOf, d as enumOrThrow, j as run, n as applyTemporal, o as blockCall } from "../../block-helpers-DkVZNDrj.js";
+import { a as jwksOf, c as verifyCompact, i as jwkThumbprint, n as generateSigningKey, o as signBytes, r as importSigningKey, s as signCompact, t as JwsError } from "../../jws-CwBB5QAT.js";
+import { r as withBlockHooks } from "../../block-hooks-C22vuIUd.js";
 import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
-import { t as signingKeysSqlOptions } from "../../options-CmraJhd9.js";
 //#region src/blocks/signing-keys/signing-keys.ts
 const ALGORITHMS = ["Ed25519", "ES256"];
+/**
+* The owner of the platform's own keys, for a single authorization server
+* that signs for every tenant. A key per tenant uses `{ type, id }` of the
+* tenant instead, such as `{ type: "environment", id: environment.id }`.
+*/
+const PLATFORM_OWNER = {
+	type: "platform",
+	id: "default"
+};
+const TYPE_NAME = /^[a-z0-9][a-z0-9-]{0,62}$/;
+const JWT_TYPE = /^(?:JWT|[a-z0-9][a-z0-9.-]{0,126}\+jwt)$/i;
+/**
+* The `typ` header for a token kind of your own: `jwtType("invite")` is
+* `vnd.invite+jwt`. Sign with `{ typ }` and verify with `verifyCompact(...,
+* { typ })` so a token of one kind can't be replayed as another (RFC 8725
+* section 3.11). Throws a `TypeError` for a name outside lower-case letters,
+* digits and `-`.
+*/
+function jwtType(name) {
+	if (!TYPE_NAME.test(name)) throw new TypeError(`jwtType name must be lower-case letters, digits and "-", got ${JSON.stringify(name)}`);
+	return `vnd.${name}+jwt`;
+}
 const HOUR = 3600;
 const interval = (duration) => duration === void 0 ? null : `${String(duration.total({ unit: "seconds" }))} seconds`;
 const ownerArgs = (owner) => ({
@@ -118,19 +140,23 @@ function createSigningKeys(options) {
 				alg: jwsAlg(key.alg),
 				signature: await signBytes(key.key, key.alg, data)
 			}))),
-			signJwt: (claims, header = {}) => active(owner, signerOptions.create).andThen((key) => {
-				const exp = claims["exp"];
-				const until = typeof exp === "number" && Number.isFinite(exp) ? Math.ceil(exp / HOUR) * HOUR : void 0;
-				return (until !== void 0 && until > (noted.get(key.kid) ?? 0) ? noteExp(key.kid, temporal().Instant.fromEpochMilliseconds(until * 1e3)).map((known) => {
-					noted.set(key.kid, until);
-					return known;
-				}) : AsyncResult.ok(true)).andThen(() => run(() => signCompact(key.key, key.alg, {
-					alg: jwsAlg(key.alg),
-					kid: key.kid,
-					typ: "JWT",
-					...header
-				}, claims)));
-			})
+			signJwt: (claims, header = {}) => {
+				const typ = header["typ"];
+				if (typ !== void 0 && (typeof typ !== "string" || !JWT_TYPE.test(typ))) return AsyncResult.err(dbError("invalid_input", "The typ header is not a JWT media type", { hint: "SIGNING_TYP_INVALID" }));
+				return active(owner, signerOptions.create).andThen((key) => {
+					const exp = claims["exp"];
+					const until = typeof exp === "number" && Number.isFinite(exp) ? Math.ceil(exp / HOUR) * HOUR : void 0;
+					return (until !== void 0 && until > (noted.get(key.kid) ?? 0) ? noteExp(key.kid, temporal().Instant.fromEpochMilliseconds(until * 1e3)).map((known) => {
+						noted.set(key.kid, until);
+						return known;
+					}) : AsyncResult.ok(true)).andThen(() => run(() => signCompact(key.key, key.alg, {
+						alg: jwsAlg(key.alg),
+						kid: key.kid,
+						typ: "JWT",
+						...header
+					}, claims)));
+				});
+			}
 		})
 	};
 	return withBlockHooks(client, options.hooks, {
@@ -158,4 +184,4 @@ const signingKeysBlock = defineBlock({
 	recipes: ["signing-keys-rotation"]
 });
 //#endregion
-export { JwsError, createSigningKeys, jwkThumbprint, jwksOf, signingKeysBlock, signingKeysEvents, sqlTransport, verifyCompact };
+export { JwsError, PLATFORM_OWNER, createSigningKeys, jwkThumbprint, jwksOf, jwtType, signingKeysBlock, signingKeysEvents, sqlTransport, verifyCompact };

package/dist/blocks/sla/index.d.ts

@@ -1,14 +1,14 @@
 /// <reference lib="esnext.temporal" />
-import { t as AsyncResult } from "../../result-Cj3yWhjH.js";
-import { wt as Events } from "../../events-CTreRrgP.js";
-import { w as SlaEventData } from "../../index-BlqrGvb3.js";
+import { t as AsyncResult } from "../../result-BREt7qOh.js";
+import { wt as Events } from "../../events-P3raDX2E.js";
+import { w as SlaEventData } from "../../index-BpyBH5O2.js";
 import { n as Logger } from "../../logger-DWVYUmwi.js";
-import { t as StandardSchemaV1 } from "../../standard-C3_AAF3g.js";
-import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DaGGXjIw.js";
-import { n as BlockOptions } from "../../block-helpers-C86hPEjI.js";
-import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-BLPWD3Jt.js";
-import { n as ExtraFields, r as FieldsOf } from "../../block-fields-5UA84ZUg.js";
-import { s as BlockOf } from "../../define-block-CLZMEFeK.js";
+import { t as StandardSchemaV1 } from "../../standard-BcUQuUgu.js";
+import { a as dbTransport, i as RpcClient, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DezJPPA0.js";
+import { n as BlockOptions } from "../../block-helpers-CjcQM1yA.js";
+import { a as BlockTransportMiddleware, d as extendBlock, f as withBlockHooks, n as BlockHooks, p as wrapTransport } from "../../block-hooks-DcPJHztl.js";
+import { n as ExtraFields, r as FieldsOf } from "../../block-fields-DnaDbgZS.js";
+import { s as BlockOf } from "../../define-block-CPyJ95rq.js";
 //#region src/blocks/sla/sla.d.ts
 type SlaMetric = "first_response" | "next_response" | "resolution";
 type SlaState = "running" | "paused" | "met" | "breached";

package/dist/blocks/sla/index.js

@@ -1,12 +1,12 @@
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { t as slaSqlOptions } from "../../options-Blg8lAkz.js";
 import { n as event, t as defineEvents } from "../../event-map-Dy2vKHai.js";
-import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-G4t1umrR.js";
-import { A as requiredInstant, C as optionalText, D as recordOf, I as textOf, S as optionalInstant, d as enumOrThrow, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-CfG_MvDR.js";
-import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-BsXncUlZ.js";
-import { n as blockFields } from "../../block-fields-ffD6Gxe4.js";
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-J7ZepTq2.js";
+import { A as requiredInstant, C as optionalText, D as recordOf, I as textOf, S as optionalInstant, d as enumOrThrow, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall } from "../../block-helpers-DkVZNDrj.js";
+import { i as wrapTransport, n as extendBlock, r as withBlockHooks } from "../../block-hooks-C22vuIUd.js";
+import { n as blockFields } from "../../block-fields-Bv1hV855.js";
 import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
-import { n as compact } from "../../sales-shared-SblIgCgI.js";
-import { t as slaSqlOptions } from "../../options-Blg8lAkz.js";
+import { n as compact } from "../../sales-shared-CDSytDEn.js";
 //#region src/blocks/sla/sla.ts
 const METRICS = [
 	"first_response",

package/dist/blocks/sso/index.d.ts

@@ -1,11 +1,11 @@
 /// <reference lib="esnext.temporal" />
-import { f as Result } from "../../result-Cj3yWhjH.js";
-import { X as OrganizationDomainEventData, Z as OrganizationEventData, at as SsoProviderEventData, nt as ScimEventData, wt as Events } from "../../events-CTreRrgP.js";
-import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DaGGXjIw.js";
-import { r as BlockTemporalOptions } from "../../block-helpers-C86hPEjI.js";
-import { s as BlockOf } from "../../define-block-CLZMEFeK.js";
-import { l as ApiKeys } from "../../api-keys-BYoGCM9p.js";
-import { _ as dohResolver, a as SamlProviderInput, c as SsoAdmin, d as SsoDomain, f as SsoOptions, g as createSsoAdmin, h as createSso, i as SamlMetadata, l as SsoAdminOptions, m as TxtResolver, n as DomainRecord, o as Sso, p as SsoProvider, r as OrganizationDomain, s as SsoActor, t as DohResolverOptions, u as SsoAuthAdmin } from "../../sso-BN0LnMqE.js";
+import { f as Result } from "../../result-BREt7qOh.js";
+import { X as OrganizationDomainEventData, Z as OrganizationEventData, at as SsoProviderEventData, nt as ScimEventData, wt as Events } from "../../events-P3raDX2E.js";
+import { a as dbTransport, o as rpcTransport, s as sqlTransport, t as BlockTransport } from "../../block-transport-DezJPPA0.js";
+import { r as BlockTemporalOptions } from "../../block-helpers-CjcQM1yA.js";
+import { s as BlockOf } from "../../define-block-CPyJ95rq.js";
+import { l as ApiKeys } from "../../api-keys-qnM63qjS.js";
+import { _ as dohResolver, a as SamlProviderInput, c as SsoAdmin, d as SsoDomain, f as SsoOptions, g as createSsoAdmin, h as createSso, i as SamlMetadata, l as SsoAdminOptions, m as TxtResolver, n as DomainRecord, o as Sso, p as SsoProvider, r as OrganizationDomain, s as SsoActor, t as DohResolverOptions, u as SsoAuthAdmin } from "../../sso-Bu0mVh0V.js";
 //#region src/blocks/sso/scim-filter.d.ts
 type CompareOp = "eq" | "ne" | "co" | "sw" | "ew" | "gt" | "ge" | "lt" | "le";
 type ScimFilter = {

package/dist/blocks/sso/index.js

@@ -1,11 +1,11 @@
-import { a as ok } from "../../result-BlgnMB0H.js";
+import { a as ok } from "../../result-DIeYscA3.js";
 import { n as isRecord } from "../../guards-6F2bCtQR.js";
+import { t as ssoSqlOptions } from "../../options-CK5WiFwG.js";
 import { n as event, t as defineEvents } from "../../event-map-Dy2vKHai.js";
-import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-G4t1umrR.js";
-import { C as optionalText, D as recordOf, I as textOf, R as toInstant, k as recordsOf, n as applyTemporal, o as blockCall } from "../../block-helpers-CfG_MvDR.js";
+import { i as sqlTransport, r as rpcTransport, t as dbTransport } from "../../block-transport-J7ZepTq2.js";
+import { C as optionalText, D as recordOf, I as textOf, R as toInstant, k as recordsOf, n as applyTemporal, o as blockCall } from "../../block-helpers-DkVZNDrj.js";
 import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
-import { n as createSsoAdmin, r as dohResolver, t as createSso } from "../../sso-BDva_-4y.js";
-import { t as ssoSqlOptions } from "../../options-CK5WiFwG.js";
+import { n as createSsoAdmin, r as dohResolver, t as createSso } from "../../sso-BaU_6ePE.js";
 //#region src/blocks/sso/scim-filter.ts
 /** SCIM filters (RFC 7644 §3.4.2.2): parsing and evaluation over resource JSON. */
 /** A filter the service provider can't parse or apply: 400 `invalidFilter`. */

package/dist/blocks/state-machine/index.d.ts

@@ -1,10 +1,10 @@
 /// <reference lib="esnext.temporal" />
-import { t as AsyncResult } from "../../result-Cj3yWhjH.js";
-import { et as SaasSubjectEventData, wt as Events } from "../../events-CTreRrgP.js";
+import { t as AsyncResult } from "../../result-BREt7qOh.js";
+import { et as SaasSubjectEventData, wt as Events } from "../../events-P3raDX2E.js";
 import { n as Logger } from "../../logger-DWVYUmwi.js";
-import { i as CursorPageOptions, n as BlockOptions } from "../../block-helpers-C86hPEjI.js";
-import { n as BlockHooks } from "../../block-hooks-BLPWD3Jt.js";
-import { s as BlockOf } from "../../define-block-CLZMEFeK.js";
+import { i as CursorPageOptions, n as BlockOptions } from "../../block-helpers-CjcQM1yA.js";
+import { n as BlockHooks } from "../../block-hooks-DcPJHztl.js";
+import { s as BlockOf } from "../../define-block-CPyJ95rq.js";
 //#region src/blocks/state-machine/state-machine.d.ts
 interface StateMachineOptions<S extends string = string> extends BlockOptions {
   /** `withBlockHooks` hooks around the client's methods. */

package/dist/blocks/state-machine/index.js

@@ -1,8 +1,8 @@
+import { t as stateMachineSqlOptions } from "../../options-B0FcEKtH.js";
 import { n as event, t as defineEvents } from "../../event-map-Dy2vKHai.js";
-import { A as requiredInstant, C as optionalText, D as recordOf, F as stringsOf, I as textOf, S as optionalInstant, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall, w as pageOf } from "../../block-helpers-CfG_MvDR.js";
-import { r as withBlockHooks } from "../../block-hooks-BsXncUlZ.js";
+import { A as requiredInstant, C as optionalText, D as recordOf, F as stringsOf, I as textOf, S as optionalInstant, k as recordsOf, m as instantArg, n as applyTemporal, o as blockCall, w as pageOf } from "../../block-helpers-DkVZNDrj.js";
+import { r as withBlockHooks } from "../../block-hooks-C22vuIUd.js";
 import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
-import { t as stateMachineSqlOptions } from "../../options-B0FcEKtH.js";
 //#region src/blocks/state-machine/state-machine.ts
 const optionalNumber = (value) => value === null || value === void 0 ? void 0 : Number(value);
 function stateOf(value) {

package/dist/blocks/tags/index.d.ts

@@ -1,6 +1,6 @@
-import { $ as SaasEventData, et as SaasSubjectEventData, wt as Events } from "../../events-CTreRrgP.js";
-import { s as BlockOf } from "../../define-block-CLZMEFeK.js";
-import { a as TagInputSnapshot, c as Tags, i as TagInputControllerOptions, l as TagsOptions, n as TagInputActions, o as createTagInputController, r as TagInputController, s as Tag, t as TagChange, u as createTags } from "../../client-Co6BPmvr.js";
+import { $ as SaasEventData, et as SaasSubjectEventData, wt as Events } from "../../events-P3raDX2E.js";
+import { s as BlockOf } from "../../define-block-CPyJ95rq.js";
+import { a as TagInputSnapshot, c as Tags, i as TagInputControllerOptions, l as TagsOptions, n as TagInputActions, o as createTagInputController, r as TagInputController, s as Tag, t as TagChange, u as createTags } from "../../client-Bovn6-M9.js";
 //#region src/blocks/tags/events.d.ts
 /** The events of the `tags` block: type to data. */
 type TagsEvents = {

package/dist/blocks/tags/index.js

@@ -1,8 +1,8 @@
+import { t as tagsSqlOptions } from "../../options-I8zVkB_y.js";
 import { n as event, t as defineEvents } from "../../event-map-Dy2vKHai.js";
 import { n as defineBlock } from "../../define-block-B6Gjs57G.js";
-import { t as createTags } from "../../tags-PaG0Ns_9.js";
-import { t as createTagInputController } from "../../client-BOT2KVIp.js";
-import { t as tagsSqlOptions } from "../../options-I8zVkB_y.js";
+import { t as createTags } from "../../tags-BqgaxCnv.js";
+import { t as createTagInputController } from "../../client-BDO6i2Oe.js";
 //#region src/blocks/tags/events.ts
 /** The `tags` block's event types, for its manifest and `onBlockEvent`. */
 const tagsEvents = defineEvents({