cloudflare-next-intl 0.9.63 → 0.10.1

package/README.md

@@ -807,6 +807,21 @@ export default setIntlConfig({
 - `disconnectTimeoutMs` — **deprecated, ignored since 0.8.23.** Client
   teardown is awaited or deferred to `ctx.waitUntil` without a timeout.
 
+#### Service role (`withServiceDb`)
+
+`withServiceDb` runs a query as the **service role** — it bypasses RLS
+entirely (`db.supabase.serviceRoleKey` in Supabase mode; no role downgrade in
+connection-string mode) and adds no auth wiring, since the service role isn't
+a signed-in user. Use it only on trusted server-side paths a request/user
+can't influence — admin actions, cron jobs, webhooks — never behind an
+ordinary request handler:
+
+```typescript
+import { withServiceDb } from "cloudflare-next-intl/db";
+
+const rows = await withServiceDb((db) => db.select().from(profiles));
+```
+
 #### Choosing a transport
 
 `db` reaches Postgres one of two ways, decided by which fields you set. The

package/bin/db_codegen.mjs

@@ -1,13 +1,15 @@
 #!/usr/bin/env node
-// Re-exec shim: `cfni-db-codegen` now lives in cloudflare-next-intl-db,
+// Re-exec shim: `cfni-db-codegen` now lives in cloudflare-next-intl-db-codegen,
 // installed as this package's dependency. Kept here so existing consumers'
 // `npx cfni-db-codegen` invocations keep working with no changes needed.
+import { createRequire } from 'node:module';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { dirname, join } from 'node:path';
 
-// Resolve via the package's root export (".") — its exports map doesn't
-// declare "./package.json", so that can't be resolved directly. The root
-// export ("dist/src/index.js") sits two directories below the package root.
-const indexPath = fileURLToPath(import.meta.resolve('cloudflare-next-intl-db'));
-const dbPackageRoot = join(dirname(indexPath), '..', '..');
-await import(pathToFileURL(join(dbPackageRoot, 'bin', 'db_codegen.mjs')).href);
+// cloudflare-next-intl-db-codegen declares no "exports" map, so its
+// package.json (and therefore its package root) resolves directly —
+// unlike the runtime db package, this one isn't trying to restrict its
+// public surface to a curated set of subpaths.
+const pkgPath = createRequire(import.meta.url).resolve('cloudflare-next-intl-db-codegen/package.json');
+const codegenPackageRoot = dirname(fileURLToPath(pathToFileURL(pkgPath)));
+await import(pathToFileURL(join(codegenPackageRoot, 'bin', 'db_codegen.mjs')).href);

package/bin/db_install_exec.mjs

@@ -1,13 +1,15 @@
 #!/usr/bin/env node
-// Re-exec shim: `cfni-db-install-exec` now lives in cloudflare-next-intl-db,
+// Re-exec shim: `cfni-db-install-exec` now lives in cloudflare-next-intl-db-codegen,
 // installed as this package's dependency. Kept here so existing consumers'
 // `npx cfni-db-install-exec` invocations keep working with no changes needed.
+import { createRequire } from 'node:module';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { dirname, join } from 'node:path';
 
-// Resolve via the package's root export (".") — its exports map doesn't
-// declare "./package.json", so that can't be resolved directly. The root
-// export ("dist/src/index.js") sits two directories below the package root.
-const indexPath = fileURLToPath(import.meta.resolve('cloudflare-next-intl-db'));
-const dbPackageRoot = join(dirname(indexPath), '..', '..');
-await import(pathToFileURL(join(dbPackageRoot, 'bin', 'db_install_exec.mjs')).href);
+// cloudflare-next-intl-db-codegen declares no "exports" map, so its
+// package.json (and therefore its package root) resolves directly —
+// unlike the runtime db package, this one isn't trying to restrict its
+// public surface to a curated set of subpaths.
+const pkgPath = createRequire(import.meta.url).resolve('cloudflare-next-intl-db-codegen/package.json');
+const codegenPackageRoot = dirname(fileURLToPath(pathToFileURL(pkgPath)));
+await import(pathToFileURL(join(codegenPackageRoot, 'bin', 'db_install_exec.mjs')).href);

package/dist/src/db/context.d.ts

@@ -2,4 +2,5 @@ import type { DbRoutingConfig, DrizzleDb, TransactionResult, UserDbCredentials }
 export type { DrizzleDb, TransactionResult, UserDbCredentials };
 export declare function withPublicDb<T>(fn: (db: DrizzleDb) => Promise<T>, dbOverride?: DbRoutingConfig): Promise<T>;
 export declare function withUserDb<T>(fn: (db: DrizzleDb) => Promise<T>, auth?: string | null | UserDbCredentials, dbOverride?: DbRoutingConfig): Promise<T>;
+export declare function withServiceDb<T>(fn: (db: DrizzleDb) => Promise<T>, dbOverride?: DbRoutingConfig): Promise<T>;
 export declare function resolveUserDbCredentials(dbOverride?: DbRoutingConfig): Promise<UserDbCredentials>;

package/dist/src/db/context.js

@@ -1,4 +1,4 @@
-import { withPublicDb as withPublicDbImpl, withUserDb as withUserDbImpl, resolveUserDbCredentials as resolveUserDbCredentialsImpl, } from 'cloudflare-next-intl-db';
+import { withPublicDb as withPublicDbImpl, withUserDb as withUserDbImpl, withServiceDb as withServiceDbImpl, resolveUserDbCredentials as resolveUserDbCredentialsImpl, } from 'cloudflare-next-intl-db';
 import resolveDbConfig from './resolve_db_config.js';
 export async function withPublicDb(fn, dbOverride) {
     const config = await resolveDbConfig(dbOverride);
@@ -8,6 +8,10 @@ export async function withUserDb(fn, auth, dbOverride) {
     const config = await resolveDbConfig(dbOverride);
     return withUserDbImpl(fn, auth, config);
 }
+export async function withServiceDb(fn, dbOverride) {
+    const config = await resolveDbConfig(dbOverride);
+    return withServiceDbImpl(fn, config);
+}
 export async function resolveUserDbCredentials(dbOverride) {
     const config = await resolveDbConfig(dbOverride);
     return resolveUserDbCredentialsImpl(config);

package/dist/src/db/index.d.ts

@@ -1,4 +1,4 @@
-export { withPublicDb, withUserDb, resolveUserDbCredentials } from './context.js';
+export { withPublicDb, withUserDb, withServiceDb, resolveUserDbCredentials } from './context.js';
 export type { UserDbCredentials } from './context.js';
 export type { DrizzleDb, TransactionResult } from './context.js';
 export { withDbClient, connectToPostgres, disconnectPostgres, resetConnectionState } from './connection.js';

package/dist/src/db/index.js

@@ -1,2 +1,2 @@
-export { withPublicDb, withUserDb, resolveUserDbCredentials } from './context.js';
+export { withPublicDb, withUserDb, withServiceDb, resolveUserDbCredentials } from './context.js';
 export { withDbClient, connectToPostgres, disconnectPostgres, resetConnectionState } from './connection.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudflare-next-intl",
-  "version": "0.9.63",
+  "version": "0.10.1",
   "description": "Optimized Next Intl Package Special for App Router and Cloudflare",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -358,7 +358,8 @@
   "homepage": "https://github.com/demian-ilnytskyi/cloudflare-next-intl#readme",
   "dependencies": {
     "@microsoft/clarity": "^1.0.2",
-    "cloudflare-next-intl-db": "^0.1.0",
+    "cloudflare-next-intl-db": "^0.2.0",
+    "cloudflare-next-intl-db-codegen": "^0.1.1",
     "jose": "^6.2.8",
     "sharp": "^0.34.5 || ^0.35.0"
   },