better-supabase 0.9.0 → 0.11.0

package/dist/testing/index.js

@@ -1,26 +1,27 @@
 import { t as DbException } from "../db-exception-CnWcYPxL.js";
-import { n as dbError } from "../errors-8i6tSICm.js";
+import { n as dbError } from "../errors-BV1SKTVs.js";
 import { d as temporalText } from "../temporal-CB5Fpo5d.js";
-import { t as temporal } from "../temporal-required-DqRzr7i0.js";
-import { a as ok } from "../result-BlgnMB0H.js";
-import { t as BetterSupabase } from "../define-B2ln373W.js";
+import { t as temporal } from "../temporal-required-nfZ87U-0.js";
+import { a as ok } from "../result-DIeYscA3.js";
+import { t as BetterSupabase } from "../define-Bu1v781m.js";
 import { t as isList } from "../guards-6F2bCtQR.js";
-import { a as toBase64Url, r as fromBase64, t as base64ToText } from "../base64-BmeCBgGo.js";
-import { o as resolveConfig } from "../config-BA1K4OPk.js";
+import { a as toBase64Url, r as fromBase64, t as base64ToText } from "../base64-D4aqdnDR.js";
+import { o as resolveConfig } from "../config-NQmw_wsk.js";
+import { a as isScopeName, c as templateFunctions, l as templatePlaceholders, n as TEMPLATE_PLACEHOLDERS, s as scopeProblems, u as templateProblems } from "../access-sql-CTJPHjCL.js";
+import { i as seedLite, n as loadLite, r as migrateLite, t as LITE_INSTALL } from "../runtime-BOXURhEW.js";
 import { ENV_VARIABLES } from "../env/index.js";
 import { t as defineController } from "../controller-D6NyNrlZ.js";
 import "../replicas-BvIL4_jL.js";
-import { a as tenantCredentialRef } from "../provider-DKh2xFZb.js";
-import { n as rawError } from "../block-transport-G4t1umrR.js";
-import { t as postgresExecutor } from "../executor-D1kYY5BA.js";
-import { i as requestOf, n as checkPermission, r as defineAuthorizer } from "../authorizer-DH7DjkL3.js";
+import { a as tenantCredentialRef } from "../provider-C-Ti38J6.js";
+import { n as rawError } from "../block-transport-J7ZepTq2.js";
+import { t as postgresExecutor } from "../executor-CxGQiQN_.js";
+import { i as requestOf, n as checkPermission, r as defineAuthorizer } from "../authorizer-B3yyCVUF.js";
 import { n as parseDbStats } from "../timing-BMCWgpdZ.js";
 import { t as mailHeaders } from "../delivery-B1mKaOen.js";
 import { toCloudEvents } from "../events/index.js";
 import { d as money, l as isRate } from "../money-95Rff2vT.js";
-import { t as SHIPPING_LINE } from "../tax-D_kSCdWU.js";
-import { a as isScopeName, c as templateFunctions, l as templatePlaceholders, n as TEMPLATE_PLACEHOLDERS, s as scopeProblems, u as templateProblems } from "../access-sql-DUSSMaC3.js";
-import { t as buildApiModel } from "../build-Cm0T5MVG.js";
+import { t as SHIPPING_LINE } from "../tax-wm9g2mD2.js";
+import { t as buildApiModel } from "../build-CT6SPZkI.js";
 import { timestamps } from "../plugins/timestamps/index.js";
 import { softDelete } from "../plugins/soft-delete/index.js";
 import { tenant } from "../plugins/tenant/index.js";
@@ -184,7 +185,12 @@ async function signLocalJwt(claims, path) {
 //#region src/testing/as-user.ts
 /** The local CLI stack's default JWT secret. */
 const LOCAL_JWT_SECRET = "super-secret-jwt-token-with-at-least-32-characters-long";
-function env$1(...names) {
+const internals = /* @__PURE__ */ new WeakMap();
+/** The pool and identity behind a user from `asUser`, or `undefined` for any other object. */
+function internalsOf(user) {
+	return internals.get(user);
+}
+function env$2(...names) {
 	if (typeof process === "undefined") return;
 	for (const name of names) {
 		const value = process.env[name];
@@ -203,7 +209,7 @@ async function signFor(stack, url, claims) {
 		case "ES256": return signTestJwtWithKey(stack.signingKey ?? await localSigningKey(stack.signingKeysPath), claims);
 		case "HS256":
 			if (!LOCAL_HOSTS.has(new URL(url).hostname)) throw new TypeError(`asUser signs HS256 tokens only for a local stack, not ${url}. Use the ES256 key from \`better-supabase keys\`.`);
-			return signTestJwt(stack.jwtSecret ?? env$1("SUPABASE_JWT_SECRET") ?? "super-secret-jwt-token-with-at-least-32-characters-long", claims);
+			return signTestJwt(stack.jwtSecret ?? env$2("SUPABASE_JWT_SECRET") ?? "super-secret-jwt-token-with-at-least-32-characters-long", claims);
 		default: throw new TypeError(`asUser: unknown alg "${String(alg)}"`);
 	}
 }
@@ -219,8 +225,8 @@ async function signFor(stack, url, claims) {
 * ```
 */
 async function asUser(betterSupabase, claims, stack = {}) {
-	const url = stack.url ?? env$1(...ENV_VARIABLES.url) ?? "http://127.0.0.1:54321";
-	const publishableKey = stack.publishableKey ?? env$1(...ENV_VARIABLES.publishableKey, "SUPABASE_ANON_KEY");
+	const url = stack.url ?? env$2(...ENV_VARIABLES.url) ?? "http://127.0.0.1:54321";
+	const publishableKey = stack.publishableKey ?? env$2(...ENV_VARIABLES.publishableKey, "SUPABASE_ANON_KEY");
 	if (!publishableKey) throw new TypeError("asUser needs publishableKey or $SUPABASE_PUBLISHABLE_KEY. Run `better-supabase env` to write it to .env.local.");
 	const token = await signFor(stack, url, claims);
 	const full = {
@@ -238,59 +244,24 @@ async function asUser(betterSupabase, claims, stack = {}) {
 	};
 	const supabase = createClient(url, publishableKey, {
 		accessToken: () => Promise.resolve(token),
+		tracePropagation: stack.tracePropagation ?? false,
 		...stack.fetch ? { global: { fetch: stack.fetch } } : {}
 	});
-	return {
+	const user = {
 		token,
 		claims: full,
+		context,
 		supabase,
 		db: betterSupabase.connect(supabase, context),
 		sql: stack.postgres ? betterSupabase.connect(postgresExecutor(stack.postgres.asUser(full)), context) : void 0
 	};
-}
-//#endregion
-//#region src/lite/runtime.ts
-const LITE_INSTALL = "Supabase Lite is an optional peer: install it with `pnpm add -D @supabase/lite`";
-/**
-* `@supabase/lite` is an optional peer: variable specifiers keep bundlers
-* from resolving it, and a missing install returns `undefined` so callers
-* can say how to add it.
-*/
-async function loadLite() {
-	const root = "@supabase/lite";
-	const pglite = "@supabase/lite/pglite";
-	const sqlite = "@supabase/lite/sqlite";
-	try {
-		const [{ App }, pg, sq] = await Promise.all([
-			import(root),
-			import(pglite),
-			import(sqlite)
-		]);
-		return {
-			App,
-			createPgliteConnection: () => pg.createPgliteConnection(),
-			createSqliteConnection: (url) => sq.createConnection({ url })
-		};
-	} catch {
-		return;
-	}
-}
-/** Applies migrations, then declarative schemas, with Lite's migrator. */
-async function migrateLite(connection, sql) {
-	const ddl = sql.filter((part) => part.trim() !== "").join("\n;\n");
-	if (ddl !== "") await connection.createMigrator(ddl).migrate();
-}
-/** Runs seed SQL: as is on PGlite, translated to SQLite on `sqlite-postgres`. */
-async function seedLite(target, sql) {
-	if (sql.trim() === "") return;
-	if (target.driver === "pglite") {
-		await target.connection.driver.exec(sql);
-		return;
-	}
-	const { connection } = target;
-	const translated = await connection.translateDdl(sql);
-	const statements = typeof translated === "string" ? translated : typeof translated === "object" && translated !== null && "ddl" in translated && typeof translated.ddl === "string" ? translated.ddl : "";
-	if (statements !== "") await connection.transaction([statements]);
+	internals.set(user, {
+		connect: (client) => betterSupabase.connect(postgresExecutor(client), context),
+		postgres: stack.postgres,
+		claims: full,
+		context
+	});
+	return user;
 }
 //#endregion
 //#region src/testing/lite.ts
@@ -542,6 +513,224 @@ async function expectInstant(page, expectation) {
 	});
 }
 //#endregion
+//#region src/testing/seed.ts
+const SEED = Symbol.for("better-supabase.seed");
+function isSeed(value) {
+	return typeof value === "object" && value !== null && SEED in value;
+}
+const quote = (text) => `'${text.replaceAll("'", "''")}'`;
+function arrayLiteral(values) {
+	return `{${values.map((value) => {
+		if (value === null) return "NULL";
+		if (Array.isArray(value)) return arrayLiteral(value);
+		return `"${(temporalText(value) ?? String(value)).replaceAll(/[\\"]/g, "\\$&")}"`;
+	}).join(",")}}`;
+}
+function literal(value, column, where) {
+	if (value === null) return "null";
+	if (column.json) return quote(JSON.stringify(value));
+	if (Array.isArray(value)) return quote(arrayLiteral(value));
+	const temporalValue = temporalText(value);
+	if (temporalValue !== void 0) return quote(temporalValue);
+	const kind = typeof value;
+	switch (kind) {
+		case "string": return quote(value);
+		case "boolean":
+		case "bigint": return String(value);
+		case "number":
+			if (!Number.isFinite(value)) throw new TypeError(`${where}: ${String(value)} is not a finite number`);
+			return String(value);
+		case "object":
+		case "function":
+		case "symbol":
+		case "undefined": throw new TypeError(`${where}: unsupported value of type ${kind}`);
+		default: throw new TypeError(`${where}: unsupported value of type ${String(kind)}`);
+	}
+}
+const ident = (name) => `"${name.replaceAll("\"", "\"\"")}"`;
+/** Parents first (by forward relations), otherwise in the order given. */
+function order(meta, keys) {
+	const sorted = [];
+	const visiting = /* @__PURE__ */ new Set();
+	const visit = (key) => {
+		if (sorted.includes(key) || visiting.has(key)) return;
+		visiting.add(key);
+		for (const relation of Object.values(meta.tables[key]?.relations ?? {})) if (relation.direction === "forward" && relation.table !== key && keys.includes(relation.table)) visit(relation.table);
+		visiting.delete(key);
+		sorted.push(key);
+	};
+	for (const key of keys) visit(key);
+	return sorted;
+}
+function statement(table, rows) {
+	const entries = Object.entries(rows);
+	if (entries.length === 0) return;
+	const columns = [];
+	for (const [, row] of entries) for (const [key, value] of Object.entries(row)) {
+		if (value === void 0 || columns.includes(key)) continue;
+		const column = table.columns[key];
+		if (!column) throw new TypeError(`seed ${table.key}: unknown column "${key}"`);
+		if (column.generated) throw new TypeError(`seed ${table.key}: "${key}" is a generated column`);
+		columns.push(key);
+	}
+	const values = entries.map(([name, row]) => {
+		return `  (${columns.map((key) => row[key] === void 0 ? "default" : literal(row[key], table.columns[key], `seed ${table.key}.${name}.${key}`)).join(", ")})`;
+	});
+	return `insert into ${`${ident(table.schema)}.${ident(table.name)}`} (${columns.map((key) => ident(table.columns[key].db)).join(", ")}) values\n${values.join(",\n")}\non conflict do nothing;`;
+}
+/**
+* Typed fixtures shared by `supabase/seeds` and your tests. Rows use app
+* casing and Insert types; `better-supabase seed` renders them to SQL.
+*
+* ```ts
+* export const seed = defineSeed(betterSupabase, {
+*   organizations: { acme: { id: ACME, name: 'Acme' } },
+*   customers: { first: { organizationId: ACME, name: 'First customer' } },
+* });
+* ```
+*/
+function defineSeed(betterSupabase, fixtures) {
+	const meta = betterSupabase.meta;
+	const statements = () => {
+		const keys = Object.keys(fixtures).filter((key) => fixtures[key] !== void 0);
+		for (const key of keys) {
+			const table = meta.tables[key];
+			if (!table) throw new TypeError(`seed: unknown table "${key}"`);
+			if (table.kind === "view") throw new TypeError(`seed: "${key}" is a view`);
+		}
+		return order(meta, keys).flatMap((key) => {
+			const sql = statement(meta.tables[key], fixtures[key]);
+			return sql ? [sql] : [];
+		});
+	};
+	return {
+		[SEED]: true,
+		rows: fixtures,
+		statements,
+		sql: () => statements().join("\n\n"),
+		async insert(sql) {
+			for (const text of statements()) await sql.queryRaw(text);
+		}
+	};
+}
+//#endregion
+//#region src/testing/scope.ts
+function env$1(names) {
+	if (typeof process === "undefined") return;
+	for (const name of names) {
+		const value = process.env[name];
+		if (value) return value;
+	}
+}
+/**
+* Fresh rows for one test, so tests that run at the same time never share
+* data. It creates a new tenant id, inserts the fixtures that `build` returns
+* through the service role (RLS and plugins don't apply), and hands back the
+* inserted rows. Call `cleanup()` in `afterEach` (or `await using`) to delete
+* them. A user from `asUser` then reads them over PostgREST like any other.
+*
+* ```ts
+* const scope = await scopedSeed(
+*   betterSupabase,
+*   ({ tenant, id }) => ({
+*     customers: { first: { organizationId: tenant, name: `first-${id()}` } },
+*   }),
+*   { tenant: { table: 'organizations', row: (id) => ({ id, name: id, slug: id }) } },
+* );
+* const alice = await asUser(betterSupabase, { sub: aliceId, tenant_id: scope.tenant });
+* expect(await alice.db.customers.count().orThrow()).toBe(1);
+* await scope.cleanup();
+* ```
+*/
+async function scopedSeed(betterSupabase, build, options = {}) {
+	const stack = options.stack ?? {};
+	const url = stack.url ?? env$1(ENV_VARIABLES.url) ?? "http://127.0.0.1:54321";
+	const secretKey = stack.secretKey ?? env$1(ENV_VARIABLES.secretKey);
+	if (!secretKey) throw new TypeError("scopedSeed needs stack.secretKey or $SUPABASE_SECRET_KEY to insert rows.");
+	const bare = new BetterSupabase(betterSupabase.schema);
+	const admin = bare.connect(createClient(url, secretKey, { auth: {
+		persistSession: false,
+		autoRefreshToken: false
+	} }));
+	const tenant = crypto.randomUUID();
+	const fixtures = build({
+		tenant,
+		id: () => crypto.randomUUID()
+	});
+	const cleanup = [];
+	const insert = async (table, row) => {
+		const repository = admin[table];
+		if (!repository) throw new TypeError(`scopedSeed: unknown table "${table}"`);
+		const result = await repository.create(row);
+		if (!result.ok) throw new Error(`scopedSeed ${table}: ${result.error.message}`);
+		const meta = bare.meta.tables[table];
+		const created = result.data;
+		if (meta && meta.primaryKey.length > 0) {
+			const where = Object.fromEntries(meta.primaryKey.map((column) => [column, created[column]]));
+			cleanup.push(() => repository.deleteMany({ where }));
+		}
+		return created;
+	};
+	const remove = async () => {
+		const pending = cleanup.splice(0).reverse();
+		let failure;
+		for (const run of pending) try {
+			await run();
+		} catch (error) {
+			failure ??= error;
+		}
+		if (failure !== void 0) throw failure instanceof Error ? failure : new Error(String(failure));
+	};
+	const rows = {};
+	try {
+		if (options.tenant) await insert(options.tenant.table, options.tenant.row(tenant));
+		const byTable = fixtures;
+		for (const key of order(bare.meta, Object.keys(byTable).filter((name) => byTable[name] !== void 0))) {
+			rows[key] = {};
+			for (const [name, row] of Object.entries(byTable[key] ?? {})) rows[key][name] = await insert(key, row);
+		}
+	} catch (error) {
+		await remove().catch(() => void 0);
+		throw error;
+	}
+	return {
+		tenant,
+		rows,
+		cleanup: remove,
+		[Symbol.asyncDispose]: remove
+	};
+}
+/** The error `withRollback` throws to end its transaction; never reaches callers. */
+var Rollback = class extends Error {};
+/**
+* Runs `fn` as the user over direct Postgres inside one transaction and
+* always rolls it back, so the test leaves no rows behind. `fn` gets the same
+* repositories as `user.sql`. Only the `sql` path rolls back: `user.db` talks
+* to PostgREST over HTTP and commits on its own.
+*
+* ```ts
+* const alice = await asUser(betterSupabase, claims, { postgres });
+* await withRollback(alice, async (db) => {
+*   await db.customers.create({ organizationId, name: 'Temp' }).orThrow();
+*   expect(await db.customers.count().orThrow()).toBe(1);
+* });
+* ```
+*/
+async function withRollback(user, fn) {
+	const internal = internalsOf(user);
+	if (!internal?.postgres) throw new TypeError("withRollback needs a user from asUser(betterSupabase, claims, { postgres }): it rolls back over direct Postgres, not PostgREST.");
+	let outcome;
+	try {
+		await internal.postgres.transaction(async (client) => {
+			outcome = { value: await fn(internal.connect(client)) };
+			throw new Rollback("rollback");
+		}, { claims: internal.claims });
+	} catch (error) {
+		if (!(error instanceof Rollback) || !outcome) throw error;
+	}
+	return outcome.value;
+}
+//#endregion
 //#region src/testing/conformance.ts
 /** Thrown by a conformance kit when any check fails. Lists every failure, not just the first. */
 var ConformanceError = class extends Error {
@@ -1000,107 +1189,6 @@ const supabaseInvalidClaimFixtures = {
 	}
 };
 //#endregion
-//#region src/testing/seed.ts
-const SEED = Symbol.for("better-supabase.seed");
-function isSeed(value) {
-	return typeof value === "object" && value !== null && SEED in value;
-}
-const quote = (text) => `'${text.replaceAll("'", "''")}'`;
-function arrayLiteral(values) {
-	return `{${values.map((value) => {
-		if (value === null) return "NULL";
-		if (Array.isArray(value)) return arrayLiteral(value);
-		return `"${(temporalText(value) ?? String(value)).replaceAll(/[\\"]/g, "\\$&")}"`;
-	}).join(",")}}`;
-}
-function literal(value, column, where) {
-	if (value === null) return "null";
-	if (column.json) return quote(JSON.stringify(value));
-	if (Array.isArray(value)) return quote(arrayLiteral(value));
-	const temporalValue = temporalText(value);
-	if (temporalValue !== void 0) return quote(temporalValue);
-	const kind = typeof value;
-	switch (kind) {
-		case "string": return quote(value);
-		case "boolean":
-		case "bigint": return String(value);
-		case "number":
-			if (!Number.isFinite(value)) throw new TypeError(`${where}: ${String(value)} is not a finite number`);
-			return String(value);
-		case "object":
-		case "function":
-		case "symbol":
-		case "undefined": throw new TypeError(`${where}: unsupported value of type ${kind}`);
-		default: throw new TypeError(`${where}: unsupported value of type ${String(kind)}`);
-	}
-}
-const ident = (name) => `"${name.replaceAll("\"", "\"\"")}"`;
-/** Parents first (by forward relations), otherwise in the order given. */
-function order(meta, keys) {
-	const sorted = [];
-	const visiting = /* @__PURE__ */ new Set();
-	const visit = (key) => {
-		if (sorted.includes(key) || visiting.has(key)) return;
-		visiting.add(key);
-		for (const relation of Object.values(meta.tables[key]?.relations ?? {})) if (relation.direction === "forward" && relation.table !== key && keys.includes(relation.table)) visit(relation.table);
-		visiting.delete(key);
-		sorted.push(key);
-	};
-	for (const key of keys) visit(key);
-	return sorted;
-}
-function statement(table, rows) {
-	const entries = Object.entries(rows);
-	if (entries.length === 0) return;
-	const columns = [];
-	for (const [, row] of entries) for (const [key, value] of Object.entries(row)) {
-		if (value === void 0 || columns.includes(key)) continue;
-		const column = table.columns[key];
-		if (!column) throw new TypeError(`seed ${table.key}: unknown column "${key}"`);
-		if (column.generated) throw new TypeError(`seed ${table.key}: "${key}" is a generated column`);
-		columns.push(key);
-	}
-	const values = entries.map(([name, row]) => {
-		return `  (${columns.map((key) => row[key] === void 0 ? "default" : literal(row[key], table.columns[key], `seed ${table.key}.${name}.${key}`)).join(", ")})`;
-	});
-	return `insert into ${`${ident(table.schema)}.${ident(table.name)}`} (${columns.map((key) => ident(table.columns[key].db)).join(", ")}) values\n${values.join(",\n")}\non conflict do nothing;`;
-}
-/**
-* Typed fixtures shared by `supabase/seeds` and your tests. Rows use app
-* casing and Insert types; `better-supabase seed` renders them to SQL.
-*
-* ```ts
-* export const seed = defineSeed(betterSupabase, {
-*   organizations: { acme: { id: ACME, name: 'Acme' } },
-*   customers: { first: { organizationId: ACME, name: 'First customer' } },
-* });
-* ```
-*/
-function defineSeed(betterSupabase, fixtures) {
-	const meta = betterSupabase.meta;
-	const statements = () => {
-		const keys = Object.keys(fixtures).filter((key) => fixtures[key] !== void 0);
-		for (const key of keys) {
-			const table = meta.tables[key];
-			if (!table) throw new TypeError(`seed: unknown table "${key}"`);
-			if (table.kind === "view") throw new TypeError(`seed: "${key}" is a view`);
-		}
-		return order(meta, keys).flatMap((key) => {
-			const sql = statement(meta.tables[key], fixtures[key]);
-			return sql ? [sql] : [];
-		});
-	};
-	return {
-		[SEED]: true,
-		rows: fixtures,
-		statements,
-		sql: () => statements().join("\n\n"),
-		async insert(sql) {
-			for (const text of statements()) await sql.queryRaw(text);
-		}
-	};
-}
-//#endregion
 //#region src/testing/kits/executor.ts
 const recorder = (ops) => ({
 	name: "recorder",
@@ -3998,4 +4086,4 @@ const actCases = {
 	]
 };
 //#endregion
-export { ConformanceError, LOCAL_JWT_SECRET, PROBE_INITIAL, actCases, asUser, createTestSigner, defineSeed, expectDbBudget, expectInstant, expectTenantIsolation, isSeed, liteStack, localAuth, localSigningKey, signLocalJwt, signTestJwt, signTestJwtWithKey, staticAuthorizer, supabaseClaimFixtures, supabaseInvalidClaimFixtures, testAdapter, testAiTaskRunner, testAuthResolver, testAuthorizationHooks, testAuthorizationProvider, testAuthorizer, testBlockTransportMiddleware, testBuilderStarter, testCacheAdapter, testChatState, testControllerBinding, testCredentialProvider, testDeliveryTransport, testDocumentFormat, testEmbedder, testEveDocumentBackend, testEventSink, testExecutor, testGenerator, testGraphCompiler, testIncomingDestination, testNotificationChannel, testPaymentProvider, testPlugin, testQueueBackend, testStreamStore, testSupportSessionStore, testTaxProvider, testWebhookSecretStore, testWebhookSigner, testWebhookTransport };
+export { ConformanceError, LOCAL_JWT_SECRET, PROBE_INITIAL, actCases, asUser, createTestSigner, defineSeed, expectDbBudget, expectInstant, expectTenantIsolation, isSeed, liteStack, localAuth, localSigningKey, scopedSeed, signLocalJwt, signTestJwt, signTestJwtWithKey, staticAuthorizer, supabaseClaimFixtures, supabaseInvalidClaimFixtures, testAdapter, testAiTaskRunner, testAuthResolver, testAuthorizationHooks, testAuthorizationProvider, testAuthorizer, testBlockTransportMiddleware, testBuilderStarter, testCacheAdapter, testChatState, testControllerBinding, testCredentialProvider, testDeliveryTransport, testDocumentFormat, testEmbedder, testEveDocumentBackend, testEventSink, testExecutor, testGenerator, testGraphCompiler, testIncomingDestination, testNotificationChannel, testPaymentProvider, testPlugin, testQueueBackend, testStreamStore, testSupportSessionStore, testTaxProvider, testWebhookSecretStore, testWebhookSigner, testWebhookTransport, withRollback };

package/dist/{topic-cMS7UtM1.d.ts → topic-1WTkDnPd.d.ts}

@@ -1,10 +1,10 @@
-import { E as ValidationIssue, b as DbError, t as AsyncResult } from "./result-Cj3yWhjH.js";
-import { M as Row, a as AnyModels, i as AnyFunctions, r as AccessTopicPolicy, z as TableKey } from "./types-YfwpIE-d.js";
-import { t as AuthorizationFunctions } from "./authorization-DpRfs6Wx.js";
+import { D as ValidationIssue, b as DbError, t as AsyncResult } from "./result-BREt7qOh.js";
+import { B as TableKey, N as Row, a as AnyModels, i as AnyFunctions, r as AccessTopicPolicy } from "./types-BrpW5ixT.js";
+import { t as AuthorizationFunctions } from "./authorization-ClWBcXJi.js";
 import { t as RealtimeStatus } from "./realtime-status-DcsO00Gw.js";
-import { J as TemplateValues, q as TemplateParams } from "./storage-api-Cx-1iWBd.js";
-import { t as BetterSupabase } from "./define-DxHHbNEb.js";
-import { g as SubscriberPolicy, h as SubscriberEvent, i as AuthorizationHooks, m as Subscriber } from "./authorization-hooks-DkmrnDX7.js";
+import { D as TemplateParams, O as TemplateValues } from "./bucket-BBSNDFNH.js";
+import { t as BetterSupabase } from "./define-M_r1d2AT.js";
+import { g as SubscriberPolicy, h as SubscriberEvent, i as AuthorizationHooks, m as Subscriber } from "./authorization-hooks-mLi894KH.js";
 import { RealtimeChannel, SupabaseClient } from "@supabase/supabase-js";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 //#region src/realtime/fan-out.d.ts
@@ -234,18 +234,45 @@ interface TriggerOptions<M extends AnyModels, T extends keyof M, P extends strin
   }>>;
   /** More topics the row change goes to, each with its own values. */
   readonly topics?: readonly TriggerTopic<TriggerValue<M, T>>[];
+  /**
+   * Send an UPDATE only when one of these columns changed. Inserts and
+   * deletes always send.
+   */
+  readonly when?: {
+    readonly changed: readonly Extract<keyof Row<M, T>, string>[];
+  };
 }
-/** `topic.trigger()` with columns only. */
+interface TopicTriggerLookup {
+  readonly from: string;
+  readonly via: string | TopicTriggerLookup;
+  readonly select: string;
+  readonly key?: string;
+}
+type TopicTriggerValue = string | TopicTriggerLookup;
+/** `topic.trigger()` without `betterSupabase`: database names. */
 interface TopicTriggerOptions<P extends string> extends TriggerCommonOptions {
   /**
-   * The column that fills each placeholder. Defaults to the placeholder in
-   * snake_case (`{organizationId}` reads `organization_id`).
+   * The column or lookup that fills each placeholder. Defaults to the
+   * placeholder in snake_case (`{organizationId}` reads `organization_id`).
    */
-  readonly values?: { readonly [K in TemplateParams<P>]?: string; };
-  /** `"keys"` (default) or `"row"`, which bypasses column grants. */
-  readonly payload?: TriggerPayloadMode;
-  /** More topics the row change goes to, each with its own columns. */
-  readonly topics?: readonly TriggerTopic<string>[];
+  readonly values?: { readonly [K in TemplateParams<P>]?: TopicTriggerValue; };
+  /**
+   * `"keys"` (default), `"row"` (bypasses column grants), or the payload
+   * itself: each key is a column, a lookup, or `{ sql }`, an expression on
+   * the row `{row}` (`tg_op` is the operation).
+   */
+  readonly payload?: TriggerPayloadMode | Readonly<Record<string, TopicTriggerValue | {
+    readonly sql: string;
+  }>>;
+  /** More topics the row change goes to, each with its own values. */
+  readonly topics?: readonly TriggerTopic<TopicTriggerValue>[];
+  /**
+   * Send an UPDATE only when one of these columns (database names)
+   * changed. Inserts and deletes always send.
+   */
+  readonly when?: {
+    readonly changed: readonly string[];
+  };
 }
 /** A row change sent with `payload: "row"`. */
 interface RowChange<R> {
@@ -306,10 +333,11 @@ interface Topic<P extends string, E extends EventSchemas, R extends PresenceSche
    * a value topics don't allow skips that topic with a warning instead of
    * failing the write.
    *
-   * With `betterSupabase`, `table` is a table key and values can be
-   * lookups; the statement creates a function for the topic. Without it,
-   * `table` is `table` or `schema.table`, and a single topic calls
+   * With `betterSupabase`, `table`, columns and lookup tables are app keys.
+   * Without it they are database names, and a single topic whose values
+   * are columns, with a mode payload and one event name, calls
    * `better_supabase.broadcast_topic()` from the `realtime-tables` module.
+   * Every other trigger creates a function for the topic.
    *
    * The payload carries keys only unless `payload` says otherwise:
    * `payload: "row"` sends whole rows and bypasses column grants.
@@ -356,4 +384,4 @@ declare function rowKeys<M extends AnyModels, D, F extends AnyFunctions, X, T ex
  */
 declare function rowChange<M extends AnyModels, D, F extends AnyFunctions, X, T extends TableKey<M>>(betterSupabase: BetterSupabase<M, D, F, X>, table: T, message: TopicMessage): RowChange<Row<M, T>> | null;
 //#endregion
-export { defineTopic as A, TopicSubscription as C, TriggerPayloadMode as D, TriggerOptions as E, rowKeys as M, FanOutResult as N, TriggerTopic as O, TopicFanOutOptions as P, TopicSubscribeOptions as S, TriggerLookup as T, TopicMessage as _, PresenceOutput as a, TopicPermission as b, RealtimeClient as c, SubscribeOptions as d, Subscription as f, TopicHandlers as g, TopicEvent as h, PresenceOptions as i, rowChange as j, TriggerValue as k, RowChange as l, Topic as m, PresenceInput as n, PresenceSchema as o, SubscriptionStatus as p, PresenceMember as r, PresenceSubscription as s, EventSchemas as t, RowKeys as u, TopicOptions as v, TopicTriggerOptions as w, TopicSqlOptions as x, TopicPayload as y };
+export { TriggerTopic as A, TopicSubscription as C, TriggerLookup as D, TopicTriggerValue as E, FanOutResult as F, TopicFanOutOptions as I, defineTopic as M, rowChange as N, TriggerOptions as O, rowKeys as P, TopicSubscribeOptions as S, TopicTriggerOptions as T, TopicMessage as _, PresenceOutput as a, TopicPermission as b, RealtimeClient as c, SubscribeOptions as d, Subscription as f, TopicHandlers as g, TopicEvent as h, PresenceOptions as i, TriggerValue as j, TriggerPayloadMode as k, RowChange as l, Topic as m, PresenceInput as n, PresenceSchema as o, SubscriptionStatus as p, PresenceMember as r, PresenceSubscription as s, EventSchemas as t, RowKeys as u, TopicOptions as v, TopicTriggerLookup as w, TopicSqlOptions as x, TopicPayload as y };