better-supabase 0.9.0 → 0.11.0

package/dist/{signing-keys-Bq9mMCTh.d.ts → signing-keys-v2MRYkDF.d.ts}

@@ -1,8 +1,8 @@
 /// <reference lib="esnext.temporal" />
-import { t as AsyncResult } from "./result-Cj3yWhjH.js";
+import { t as AsyncResult } from "./result-BREt7qOh.js";
 import { n as Logger } from "./logger-DWVYUmwi.js";
-import { n as BlockOptions } from "./block-helpers-C86hPEjI.js";
-import { n as BlockHooks } from "./block-hooks-BLPWD3Jt.js";
+import { n as BlockOptions } from "./block-helpers-CjcQM1yA.js";
+import { n as BlockHooks } from "./block-hooks-DcPJHztl.js";
 import { i as JwsAlgorithm, n as Jwks, o as SigningAlgorithm, t as Jwk } from "./jws-35a8VhFV.js";
 //#region src/blocks/signing-keys/signing-keys.d.ts
 interface SigningKeysOptions extends BlockOptions {
@@ -24,6 +24,20 @@ interface SigningKeyOwner {
   readonly type: string;
   readonly id: string;
 }
+/**
+ * The owner of the platform's own keys, for a single authorization server
+ * that signs for every tenant. A key per tenant uses `{ type, id }` of the
+ * tenant instead, such as `{ type: "environment", id: environment.id }`.
+ */
+declare const PLATFORM_OWNER: SigningKeyOwner;
+/**
+ * The `typ` header for a token kind of your own: `jwtType("invite")` is
+ * `vnd.invite+jwt`. Sign with `{ typ }` and verify with `verifyCompact(...,
+ * { typ })` so a token of one kind can't be replayed as another (RFC 8725
+ * section 3.11). Throws a `TypeError` for a name outside lower-case letters,
+ * digits and `-`.
+ */
+declare function jwtType(name: string): string;
 /** What `create` and `rotate` return. The private key never leaves Vault again. */
 interface CreatedSigningKey {
   readonly kid: string;
@@ -45,7 +59,8 @@ interface Signer {
   sign(data: Uint8Array): AsyncResult<Signature>;
   /**
    * A compact JWS over `claims`, with `alg`, `kid` and `typ: "JWT"` in the
-   * header unless `header` sets them. A numeric `exp` keeps the key in the
+   * header unless `header` sets them. A custom `typ` has to be `JWT` or end in
+   * `+jwt` (see `jwtType`); anything else fails with `SIGNING_TYP_INVALID`. A numeric `exp` keeps the key in the
    * JWKS until then (`note_signing_key_exp`), so a rotation can't strand the token.
    */
   signJwt(claims: Readonly<Record<string, unknown>>, header?: Readonly<Record<string, unknown>>): AsyncResult<string>;
@@ -87,4 +102,4 @@ interface SigningKeys {
  */
 declare function createSigningKeys(options: SigningKeysOptions): SigningKeys;
 //#endregion
-export { Signer as a, SigningKeys as c, Signature as i, SigningKeysOptions as l, JwksOptions as n, SignerOptions as o, JwksResponseOptions as r, SigningKeyOwner as s, CreatedSigningKey as t, createSigningKeys as u };
+export { Signature as a, SigningKeyOwner as c, createSigningKeys as d, jwtType as f, PLATFORM_OWNER as i, SigningKeys as l, JwksOptions as n, Signer as o, JwksResponseOptions as r, SignerOptions as s, CreatedSigningKey as t, SigningKeysOptions as u };

package/dist/solid/index.d.ts

@@ -1,11 +1,11 @@
-import { b as DbError } from "../result-Cj3yWhjH.js";
-import { J as TemplateValues } from "../storage-api-Cx-1iWBd.js";
-import { at as QuerySpec } from "../define-DxHHbNEb.js";
-import { g as TopicHandlers, m as Topic, p as SubscriptionStatus, r as PresenceMember, t as EventSchemas } from "../topic-cMS7UtM1.js";
-import { t as AuthSnapshot } from "../bind-a7sUgvf4.js";
-import { t as AuthSession } from "../view-Dv0A949a.js";
-import { a as BroadcastOptions, c as LiveCountHookOptions, d as PresenceHookOptions, f as PresenceTopic, i as ActionState, l as LiveCountSource, m as UseActionOptions, n as ActionInputOf, o as ClaimsOf, p as ProfileOf, r as ActionResultOf, s as ClientLike, t as fieldErrorsOf, u as LiveQueryHookOptions } from "../field-errors-CWXN_h_E.js";
-import { t as SupportView } from "../support-view-BbcZR7Io.js";
+import { b as DbError } from "../result-BREt7qOh.js";
+import { O as TemplateValues } from "../bucket-BBSNDFNH.js";
+import { at as QuerySpec } from "../define-M_r1d2AT.js";
+import { g as TopicHandlers, m as Topic, p as SubscriptionStatus, r as PresenceMember, t as EventSchemas } from "../topic-1WTkDnPd.js";
+import { t as AuthSnapshot } from "../bind-CTNKpBM6.js";
+import { t as AuthSession } from "../view-Bf7e07rQ.js";
+import { a as BroadcastOptions, c as LiveCountHookOptions, d as PresenceHookOptions, f as PresenceTopic, i as ActionState, l as LiveCountSource, m as UseActionOptions, n as ActionInputOf, o as ClaimsOf, p as ProfileOf, r as ActionResultOf, s as ClientLike, t as fieldErrorsOf, u as LiveQueryHookOptions } from "../field-errors-DmJICh93.js";
+import { t as SupportView } from "../support-view-IRnDLuGN.js";
 import { SupabaseClient } from "@supabase/supabase-js";
 import { Accessor, JSX } from "solid-js";
 import { QueryClient } from "@tanstack/query-core";

package/dist/solid/index.js

@@ -1,5 +1,5 @@
 import { t as clearOnUserChange } from "../user-change-XzvgafU4.js";
-import { a as createActionRunner, c as liveKey, d as shownCount, f as startBroadcast, i as countSource, l as notJoined, m as startLiveQuery, n as assertInvalidateClient, o as joinPresence, p as startLiveCount, r as callerOf, s as keyed, t as NO_COUNT, u as plainCaller } from "../client-CvITjt-9.js";
+import { a as createActionRunner, c as liveKey, d as shownCount, f as startBroadcast, i as countSource, l as notJoined, m as startLiveQuery, n as assertInvalidateClient, o as joinPresence, p as startLiveCount, r as callerOf, s as keyed, t as NO_COUNT, u as plainCaller } from "../client-CHR8IBNG.js";
 import { t as supportOf } from "../support-view-g4YLBeqX.js";
 import { t as fieldErrorsOf } from "../field-errors-DZVRWRkf.js";
 import { n as useContext$1, t as ClientContext } from "../context-B8_p3MXo.js";

package/dist/{solid-controller-DqlvYFZa.d.ts → solid-controller-Uqi5ef6z.d.ts}

@@ -1,4 +1,4 @@
-import { n as Controller } from "./controller-D845qKh2.js";
+import { n as Controller } from "./controller-BBXX1RMw.js";
 import { Accessor } from "solid-js";
 //#region src/blocks/solid-controller.d.ts
 /** A block controller in a Solid component: `state` follows the controller. */

package/dist/solid-start/index.d.ts

@@ -1,9 +1,9 @@
-import { a as AnyModels, i as AnyFunctions } from "../types-YfwpIE-d.js";
-import { t as BetterSupabase } from "../define-DxHHbNEb.js";
-import { t as BetterServer } from "../server-types-OohhIQb2.js";
-import { a as AuthorizedContext, c as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-D5S7KNFe.js";
-import { t as RefusalRedirects } from "../refusal-oD3ISM9h.js";
-import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-DG5Bv39u.js";
+import { a as AnyModels, i as AnyFunctions } from "../types-BrpW5ixT.js";
+import { t as BetterSupabase } from "../define-M_r1d2AT.js";
+import { n as BetterServer } from "../server-types-BKN_R4Ws.js";
+import { a as AuthorizedContext, c as Unwrapped, n as ActionParsed, o as BlockActionOptions, r as ActionResult, s as BlockRequireOptions } from "../kit-BeZX2pR_.js";
+import { t as RefusalRedirects } from "../refusal-CufncwaN.js";
+import { n as FrameworkOptions, t as FrameworkLocals } from "../framework-D6IFkuAg.js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/solid-start/index.d.ts
 /** The part of a SolidStart `FetchEvent` the integration reads and writes. */
@@ -32,7 +32,7 @@ export interface SolidStartMiddleware {
   readonly onRequest: (event: SolidFetchEvent) => Promise<Response | undefined>;
   readonly onBeforeResponse: (event: SolidFetchEvent) => void;
 }
-export interface BetterSolidStart<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown> extends BetterServer<M, F, E, C, P> {
+export interface BetterSolidStart<M extends AnyModels, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown> extends BetterServer<M, F, E, C, P, B> {
   /**
    * Verifies the caller, refreshes the session cookie on navigations and
    * form posts, and puts `db`, `bs`, `auth`, `tenant` and `session` on
@@ -44,7 +44,7 @@ export interface BetterSolidStart<M extends AnyModels, F extends AnyFunctions, E
    */
   readonly middleware: SolidStartMiddleware;
   /** The current request's `locals`, inside a `"use server"` function. */
-  readonly locals: () => FrameworkLocals<M, F, E, C, P>;
+  readonly locals: () => FrameworkLocals<M, F, E, C, P, B>;
   /**
    * The caller inside a `"use server"` function (a `query`, an `action`,
    * an API route), or a thrown refusal: a redirect to `signIn` or `mfa`
@@ -58,14 +58,14 @@ export interface BetterSolidStart<M extends AnyModels, F extends AnyFunctions, E
    * }, "notes");
    * ```
    */
-  require<R extends boolean = false>(options?: BlockRequireOptions<C, P, R>): Promise<FrameworkLocals<M, F, E, C, P> & AuthorizedContext<C, P, R>>;
+  require<R extends boolean = false>(options?: BlockRequireOptions<C, P, R>): Promise<FrameworkLocals<M, F, E, C, P, B> & AuthorizedContext<C, P, R>>;
   /**
    * A server function returning an `ActionResult`, for `action()` from
    * `@solidjs/router`: `FormData` or a plain object, validated by `input`.
    */
-  action<S extends StandardSchemaV1 | undefined, T, R extends boolean = false>(options: BlockActionOptions<S, C, P, R>, fn: (input: ActionParsed<S>, ctx: FrameworkLocals<M, F, E, C, P> & AuthorizedContext<C, P, R>) => T): (input: unknown) => Promise<ActionResult<Unwrapped<Awaited<T>>>>;
+  action<S extends StandardSchemaV1 | undefined, T, R extends boolean = false>(options: BlockActionOptions<S, C, P, R>, fn: (input: ActionParsed<S>, ctx: FrameworkLocals<M, F, E, C, P, B> & AuthorizedContext<C, P, R>) => T): (input: unknown) => Promise<ActionResult<Unwrapped<Awaited<T>>>>;
 }
 /** SolidStart integration: middleware, guards and server function actions. */
-export declare function createSolidStart<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P>, options: SolidStartOptions): BetterSolidStart<M, F, E, C, P>;
+export declare function createSolidStart<M extends AnyModels, D, F extends AnyFunctions, E, C = unknown, P = unknown, B = unknown>(betterSupabase: BetterSupabase<M, D, F, E, C, P, B>, options: SolidStartOptions): BetterSolidStart<M, F, E, C, P, B>;
 //#endregion
 export type { ActionResult, RefusalRedirects };

package/dist/solid-start/index.js

@@ -1,9 +1,9 @@
-import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-CEjmtazZ.js";
-import { t as defaultExpose } from "../respond-DdhZ9Wbn.js";
-import { i as requireCaller, o as runAction } from "../kit-MUK34-ZG.js";
+import { c as extendServer, n as flushEvents, s as createServer } from "../adapter-B2WRsRIg.js";
+import { t as defaultExpose } from "../respond-Bhp3G__q.js";
+import { i as requireCaller, o as runAction } from "../kit-LTbHrWWD.js";
 import { i as nitroCloudflareEnv } from "../shared-BmMcMoW9.js";
-import { i as localsOf, r as frameworkEntry } from "../framework-INbjMZX1.js";
-import { r as refusalResponse } from "../refusal-br4Ma9Cf.js";
+import { i as localsOf, r as frameworkEntry } from "../framework-Ch8bMmQY.js";
+import { r as refusalResponse } from "../refusal-CFpfmjcS.js";
 import { t as beforeRoute } from "../before-route-B98js9m_.js";
 //#region src/solid-start/index.ts
 /** SolidStart integration: middleware, guards and server function actions. */

package/dist/spec/index.d.ts

@@ -1,8 +1,8 @@
 import { C as ModelWebhook, D as ResourceOperation, E as OperationSource, O as SecurityRequirement, S as ModelTag, T as OAuthFlow, _ as ModelResponseOrRef, a as JsonSchema, b as ModelServer, c as ModelChannelOperation, d as ModelInfo, f as ModelMessage, g as ModelResponse, h as ModelParameter, i as JsonObject, l as ModelContent, m as ModelOperation, n as DataApiOperation, o as ModelBody, p as ModelMessageTrait, r as HttpMethod, s as ModelChannel, t as ApiModel, u as ModelExample, v as ModelSecurityProfileRequirement, w as ModelWorkflow, x as ModelStep, y as ModelSecurityScheme } from "../model-lUafmeBQ.js";
 import { a as FormatVersion, c as SpecDiagnostic, d as defineDocumentFormat, i as DocumentOf, l as VersionOf, n as DiagnosticSeverity, o as LowerContext, r as DocumentFormat, s as RenderedOf, t as AnyDocumentFormat, u as VersionStatus } from "../format-CNwSjXUU.js";
-import { a as ResourcePlan, r as ResourceDescription } from "../resource-B4ka8dDH.js";
-import { B as DEFAULT_ERRORS, C as ApiSource, D as OperationIdContext, E as EnrichHooks, F as EventsOptions, H as SecurityPreset, I as TopicInput, L as topicsFrom, O as ResourceInput, R as DataApiOptions, S as ApiOptions, T as ComponentNameContext, V as PROBLEM_SCHEMA, a as OverlayEngine, c as defineApi, i as OpenApiRenderResult, k as RouteSpec, n as DefineApiOptions, o as RenderOptions, r as OpenApiRenderOptions, s as RenderResult, t as Api, w as BuiltModel, z as CustomSecurity } from "../api-TG3jE5aO.js";
-import { t as DescribedFunction } from "../function-contract-B4c0XuTU.js";
+import { a as ResourcePlan, r as ResourceDescription } from "../resource-DYEtc-KN.js";
+import { B as DEFAULT_ERRORS, C as ApiSource, D as OperationIdContext, E as EnrichHooks, F as EventsOptions, H as SecurityPreset, I as TopicInput, L as topicsFrom, O as ResourceInput, R as DataApiOptions, S as ApiOptions, T as ComponentNameContext, V as PROBLEM_SCHEMA, a as OverlayEngine, c as defineApi, i as OpenApiRenderResult, k as RouteSpec, n as DefineApiOptions, o as RenderOptions, r as OpenApiRenderOptions, s as RenderResult, t as Api, w as BuiltModel, z as CustomSecurity } from "../api-DoWK3dTw.js";
+import { t as DescribedFunction } from "../function-contract-DWqFl_QO.js";
 //#region src/spec/build.d.ts
 /**
  * Builds the version-neutral API model once per metadata, plugin list and

package/dist/spec/index.js

@@ -1,8 +1,8 @@
 import { r as isPlainObject } from "../clone-dN9XOL1K.js";
-import { a as methodNotAllowed } from "../problem-pIiL3WbE.js";
+import { a as methodNotAllowed } from "../problem-JRCohp1j.js";
 import { t as FUNCTION_DESCRIPTOR } from "../function-contract-DmkBg19r.js";
-import { o as defineDocumentFormat, t as defineApi } from "../api-CFjuYKFY.js";
-import { a as DEFAULT_ERRORS, i as topicsFrom, l as mergeJson, o as PROBLEM_SCHEMA, t as buildApiModel, u as pointerToken } from "../build-Cm0T5MVG.js";
+import { o as defineDocumentFormat, t as defineApi } from "../api-C43_FYDp.js";
+import { a as DEFAULT_ERRORS, i as topicsFrom, l as mergeJson, o as PROBLEM_SCHEMA, t as buildApiModel, u as pointerToken } from "../build-CT6SPZkI.js";
 //#region src/spec/function-route.ts
 function isDescriptor(value) {
 	return typeof value === "object" && value !== null && "input" in value;