@geekmidas/constructs 0.3.1 → 0.5.0

package/src/endpoints/EndpointFactory.ts

@@ -1,7 +1,7 @@
 import type {
-  AuditStorage,
-  AuditableAction,
-  ExtractStorageAuditAction,
+	AuditableAction,
+	AuditStorage,
+	ExtractStorageAuditAction,
 } from '@geekmidas/audit';
 import type { EventPublisher, MappedEvent } from '@geekmidas/events';
 import type { Logger } from '@geekmidas/logger';
@@ -10,13 +10,13 @@ import type { Service } from '@geekmidas/services';
 import uniqBy from 'lodash.uniqby';
 import type { HttpMethod } from '../types';
 import type {
-  Authorizer,
-  BuiltInSecuritySchemeId,
-  SecurityScheme,
+	Authorizer,
+	BuiltInSecuritySchemeId,
+	SecurityScheme,
 } from './Authorizer';
+import type { ActorExtractor } from './audit';
 import type { AuthorizeFn, SessionFn } from './Endpoint';
 import { EndpointBuilder } from './EndpointBuilder';
-import type { ActorExtractor } from './audit';
 import type { RlsConfig } from './rls';
 
 // Re-export SecurityScheme to make the type portable in declaration files
@@ -25,1107 +25,1105 @@ export type { SecurityScheme } from './Authorizer';
 const DEFAULT_LOGGER = new ConsoleLogger() as any;
 
 export class EndpointFactory<
-  TServices extends Service[] = [],
-  TBasePath extends string = '',
-  TLogger extends Logger = Logger,
-  TSession = unknown,
-  TEventPublisher extends EventPublisher<any> | undefined = undefined,
-  TEventPublisherServiceName extends string = string,
-  TAuthorizers extends readonly string[] = readonly string[],
-  TAuditStorage extends AuditStorage<any> | undefined = undefined,
-  TAuditStorageServiceName extends string = string,
-  TAuditAction extends AuditableAction<
-    string,
-    unknown
-  > = ExtractStorageAuditAction<NonNullable<TAuditStorage>>,
-  TDatabase = undefined,
-  TDatabaseServiceName extends string = string,
-  TSecuritySchemes extends Record<string, SecurityScheme> = Record<
-    string,
-    SecurityScheme
-  >,
-  TRlsConfig extends
-    | RlsConfig<TServices, TSession, TLogger>
-    | undefined = undefined,
+	TServices extends Service[] = [],
+	TBasePath extends string = '',
+	TLogger extends Logger = Logger,
+	TSession = unknown,
+	TEventPublisher extends EventPublisher<any> | undefined = undefined,
+	TEventPublisherServiceName extends string = string,
+	TAuthorizers extends readonly string[] = readonly string[],
+	TAuditStorage extends AuditStorage<any> | undefined = undefined,
+	TAuditStorageServiceName extends string = string,
+	TAuditAction extends AuditableAction<
+		string,
+		unknown
+	> = ExtractStorageAuditAction<NonNullable<TAuditStorage>>,
+	TDatabase = undefined,
+	TDatabaseServiceName extends string = string,
+	TSecuritySchemes extends Record<string, SecurityScheme> = Record<
+		string,
+		SecurityScheme
+	>,
+	TRlsConfig extends
+		| RlsConfig<TServices, TSession, TLogger>
+		| undefined = undefined,
 > {
-  // @ts-ignore
-  private defaultServices: TServices;
-  private basePath: TBasePath = '' as TBasePath;
-  private defaultAuthorizeFn?: AuthorizeFn<TServices, TLogger, TSession>;
-  private defaultEventPublisher:
-    | Service<TEventPublisherServiceName, TEventPublisher>
-    | undefined;
-  private defaultSessionExtractor?: SessionFn<
-    TServices,
-    TLogger,
-    TSession,
-    TDatabase
-  >;
-  private defaultLogger: TLogger = DEFAULT_LOGGER;
-  private availableAuthorizers: Authorizer[] = [];
-  private defaultAuthorizerName?: TAuthorizers[number];
-  private defaultAuditorStorage:
-    | Service<TAuditStorageServiceName, TAuditStorage>
-    | undefined;
-  private defaultDatabaseService:
-    | Service<TDatabaseServiceName, TDatabase>
-    | undefined;
-  private defaultActorExtractor?: ActorExtractor<TServices, TSession, TLogger>;
-  private customSecuritySchemes: TSecuritySchemes = {} as TSecuritySchemes;
-  private defaultRlsConfig?: TRlsConfig;
+	private defaultServices: TServices = [] as unknown as TServices;
+	private basePath: TBasePath = '' as TBasePath;
+	private defaultAuthorizeFn?: AuthorizeFn<TServices, TLogger, TSession>;
+	private defaultEventPublisher:
+		| Service<TEventPublisherServiceName, TEventPublisher>
+		| undefined;
+	private defaultSessionExtractor?: SessionFn<
+		TServices,
+		TLogger,
+		TSession,
+		TDatabase
+	>;
+	private defaultLogger: TLogger = DEFAULT_LOGGER;
+	private availableAuthorizers: Authorizer[] = [];
+	private defaultAuthorizerName?: TAuthorizers[number];
+	private defaultAuditorStorage:
+		| Service<TAuditStorageServiceName, TAuditStorage>
+		| undefined;
+	private defaultDatabaseService:
+		| Service<TDatabaseServiceName, TDatabase>
+		| undefined;
+	private defaultActorExtractor?: ActorExtractor<TServices, TSession, TLogger>;
+	private customSecuritySchemes: TSecuritySchemes = {} as TSecuritySchemes;
+	private defaultRlsConfig?: TRlsConfig;
 
-  constructor({
-    basePath,
-    defaultAuthorizeFn,
-    defaultLogger,
-    defaultSessionExtractor,
-    // @ts-ignore
-    defaultServices = [] as TServices,
-    defaultEventPublisher,
-    availableAuthorizers = [],
-    defaultAuthorizerName,
-    defaultAuditorStorage,
-    defaultDatabaseService,
-    defaultActorExtractor,
-    customSecuritySchemes = {} as TSecuritySchemes,
-    defaultRlsConfig,
-  }: EndpointFactoryOptions<
-    TServices,
-    TBasePath,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    TRlsConfig
-  > = {}) {
-    // Initialize default services
-    this.defaultServices = uniqBy(
-      defaultServices,
-      (s) => s.serviceName,
-    ) as TServices;
+	constructor({
+		basePath,
+		defaultAuthorizeFn,
+		defaultLogger,
+		defaultSessionExtractor,
+		// @ts-expect-error
+		defaultServices = [] as TServices,
+		defaultEventPublisher,
+		availableAuthorizers = [],
+		defaultAuthorizerName,
+		defaultAuditorStorage,
+		defaultDatabaseService,
+		defaultActorExtractor,
+		customSecuritySchemes = {} as TSecuritySchemes,
+		defaultRlsConfig,
+	}: EndpointFactoryOptions<
+		TServices,
+		TBasePath,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		TRlsConfig
+	> = {}) {
+		// Initialize default services
+		this.defaultServices = uniqBy(
+			defaultServices,
+			(s) => s.serviceName,
+		) as TServices;
 
-    this.basePath = basePath || ('' as TBasePath);
-    this.defaultAuthorizeFn = defaultAuthorizeFn;
-    this.defaultLogger = defaultLogger || (DEFAULT_LOGGER as TLogger);
-    this.defaultSessionExtractor = defaultSessionExtractor;
-    this.defaultEventPublisher = defaultEventPublisher;
-    this.availableAuthorizers = availableAuthorizers;
-    this.defaultAuthorizerName = defaultAuthorizerName;
-    this.defaultAuditorStorage = defaultAuditorStorage;
-    this.defaultDatabaseService = defaultDatabaseService;
-    this.defaultActorExtractor = defaultActorExtractor;
-    this.customSecuritySchemes = customSecuritySchemes;
-    this.defaultRlsConfig = defaultRlsConfig;
-  }
+		this.basePath = basePath || ('' as TBasePath);
+		this.defaultAuthorizeFn = defaultAuthorizeFn;
+		this.defaultLogger = defaultLogger || (DEFAULT_LOGGER as TLogger);
+		this.defaultSessionExtractor = defaultSessionExtractor;
+		this.defaultEventPublisher = defaultEventPublisher;
+		this.availableAuthorizers = availableAuthorizers;
+		this.defaultAuthorizerName = defaultAuthorizerName;
+		this.defaultAuditorStorage = defaultAuditorStorage;
+		this.defaultDatabaseService = defaultDatabaseService;
+		this.defaultActorExtractor = defaultActorExtractor;
+		this.customSecuritySchemes = customSecuritySchemes;
+		this.defaultRlsConfig = defaultRlsConfig;
+	}
 
-  static joinPaths<TBasePath extends string, P extends string>(
-    path: P,
-    basePath: TBasePath = '' as TBasePath,
-  ): JoinPaths<TBasePath, P> {
-    // Handle empty cases
-    if (!basePath && !path) return '/' as JoinPaths<TBasePath, P>;
-    if (!basePath)
-      return (path.startsWith('/') ? path : '/' + path) as JoinPaths<
-        TBasePath,
-        P
-      >;
-    if (!path)
-      return (
-        basePath.startsWith('/') ? basePath : '/' + basePath
-      ) as JoinPaths<TBasePath, P>;
+	static joinPaths<TBasePath extends string, P extends string>(
+		path: P,
+		basePath: TBasePath = '' as TBasePath,
+	): JoinPaths<TBasePath, P> {
+		// Handle empty cases
+		if (!basePath && !path) return '/' as JoinPaths<TBasePath, P>;
+		if (!basePath)
+			return (path.startsWith('/') ? path : `/${path}`) as JoinPaths<
+				TBasePath,
+				P
+			>;
+		if (!path)
+			return (
+				basePath.startsWith('/') ? basePath : `/${basePath}`
+			) as JoinPaths<TBasePath, P>;
 
-    const base = basePath.endsWith('/') ? basePath.slice(0, -1) : basePath;
-    const segment = path.startsWith('/') ? path : '/' + path;
+		const base = basePath.endsWith('/') ? basePath.slice(0, -1) : basePath;
+		const segment = path.startsWith('/') ? path : `/${path}`;
 
-    let result = base + segment;
+		let result = base + segment;
 
-    // Ensure leading slash
-    if (!result.startsWith('/')) {
-      result = '/' + result;
-    }
+		// Ensure leading slash
+		if (!result.startsWith('/')) {
+			result = `/${result}`;
+		}
 
-    // Normalize multiple slashes (except in the middle of the path where they might be intentional)
-    result = result.replace(/^\/+/g, '/');
+		// Normalize multiple slashes (except in the middle of the path where they might be intentional)
+		result = result.replace(/^\/+/g, '/');
 
-    // Remove trailing slash unless it's the root path "/"
-    if (result.length > 1 && result.endsWith('/')) {
-      result = result.slice(0, -1);
-    }
+		// Remove trailing slash unless it's the root path "/"
+		if (result.length > 1 && result.endsWith('/')) {
+			result = result.slice(0, -1);
+		}
 
-    return result as JoinPaths<TBasePath, P>;
-  }
+		return result as JoinPaths<TBasePath, P>;
+	}
 
-  // Configure available authorizers
-  authorizers<const T extends readonly string[]>(
-    authorizers: T,
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    T,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    TRlsConfig
-  > {
-    const authorizerConfigs = authorizers.map((name) => ({
-      name,
-    }));
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      TLogger,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      T,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      TRlsConfig
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: this.defaultSessionExtractor,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: authorizerConfigs,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this.defaultActorExtractor,
-      customSecuritySchemes: this.customSecuritySchemes,
-      defaultRlsConfig: this.defaultRlsConfig,
-    });
-  }
+	// Configure available authorizers
+	authorizers<const T extends readonly string[]>(
+		authorizers: T,
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		T,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		TRlsConfig
+	> {
+		const authorizerConfigs = authorizers.map((name) => ({
+			name,
+		}));
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			TLogger,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			T,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			TRlsConfig
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: authorizerConfigs,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig,
+		});
+	}
 
-  /**
-   * Define custom security schemes for this factory.
-   * These extend the built-in schemes (jwt, bearer, apiKey, oauth2, oidc).
-   *
-   * @example
-   * ```typescript
-   * const router = e.securitySchemes({
-   *   awsIamSigV4: {
-   *     type: 'apiKey',
-   *     in: 'header',
-   *     name: 'Authorization',
-   *     'x-amazon-apigateway-authtype': 'awsSigv4',
-   *   },
-   * });
-   * ```
-   */
-  securitySchemes<T extends Record<string, SecurityScheme>>(
-    schemes: T,
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes & T,
-    TRlsConfig
-  > {
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      TLogger,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes & T,
-      TRlsConfig
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: this.defaultSessionExtractor,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this.defaultActorExtractor,
-      customSecuritySchemes: {
-        ...this.customSecuritySchemes,
-        ...schemes,
-      } as TSecuritySchemes & T,
-      defaultRlsConfig: this.defaultRlsConfig,
-    });
-  }
+	/**
+	 * Define custom security schemes for this factory.
+	 * These extend the built-in schemes (jwt, bearer, apiKey, oauth2, oidc).
+	 *
+	 * @example
+	 * ```typescript
+	 * const router = e.securitySchemes({
+	 *   awsIamSigV4: {
+	 *     type: 'apiKey',
+	 *     in: 'header',
+	 *     name: 'Authorization',
+	 *     'x-amazon-apigateway-authtype': 'awsSigv4',
+	 *   },
+	 * });
+	 * ```
+	 */
+	securitySchemes<T extends Record<string, SecurityScheme>>(
+		schemes: T,
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes & T,
+		TRlsConfig
+	> {
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			TLogger,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes & T,
+			TRlsConfig
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: {
+				...this.customSecuritySchemes,
+				...schemes,
+			} as TSecuritySchemes & T,
+			defaultRlsConfig: this.defaultRlsConfig,
+		});
+	}
 
-  /**
-   * Set the default authorizer for all endpoints created from this factory.
-   * Individual endpoints can override this by calling `.authorizer()` on the builder.
-   * Use `'none'` to explicitly disable authorization for all endpoints.
-   *
-   * Accepts:
-   * - Built-in security scheme names: 'jwt', 'bearer', 'apiKey', 'oauth2', 'oidc'
-   * - Custom security scheme names defined via `.securitySchemes()`
-   * - 'none' to disable authorization
-   */
-  authorizer(
-    name:
-      | BuiltInSecuritySchemeId
-      | keyof TSecuritySchemes
-      | TAuthorizers[number]
-      | 'none',
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    TRlsConfig
-  > {
-    // Validate that the authorizer exists in available authorizers (if authorizers() was called)
-    if (name !== 'none' && this.availableAuthorizers.length > 0) {
-      const authorizerExists = this.availableAuthorizers.some(
-        (a) => a.name === name,
-      );
-      if (!authorizerExists) {
-        const available = this.availableAuthorizers
-          .map((a) => a.name)
-          .join(', ');
-        throw new Error(
-          `Authorizer "${name as string}" not found in available authorizers: ${available}`,
-        );
-      }
-    }
+	/**
+	 * Set the default authorizer for all endpoints created from this factory.
+	 * Individual endpoints can override this by calling `.authorizer()` on the builder.
+	 * Use `'none'` to explicitly disable authorization for all endpoints.
+	 *
+	 * Accepts:
+	 * - Built-in security scheme names: 'jwt', 'bearer', 'apiKey', 'oauth2', 'oidc'
+	 * - Custom security scheme names defined via `.securitySchemes()`
+	 * - 'none' to disable authorization
+	 */
+	authorizer(
+		name:
+			| BuiltInSecuritySchemeId
+			| keyof TSecuritySchemes
+			| TAuthorizers[number]
+			| 'none',
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		TRlsConfig
+	> {
+		// Validate that the authorizer exists in available authorizers (if authorizers() was called)
+		if (name !== 'none' && this.availableAuthorizers.length > 0) {
+			const authorizerExists = this.availableAuthorizers.some(
+				(a) => a.name === name,
+			);
+			if (!authorizerExists) {
+				const available = this.availableAuthorizers
+					.map((a) => a.name)
+					.join(', ');
+				throw new Error(
+					`Authorizer "${name as string}" not found in available authorizers: ${available}`,
+				);
+			}
+		}
 
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      TLogger,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      TRlsConfig
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: this.defaultSessionExtractor,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName:
-        name === 'none' ? undefined : (name as TAuthorizers[number]),
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this.defaultActorExtractor,
-      customSecuritySchemes: this.customSecuritySchemes,
-      defaultRlsConfig: this.defaultRlsConfig,
-    });
-  }
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			TLogger,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			TRlsConfig
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName:
+				name === 'none' ? undefined : (name as TAuthorizers[number]),
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig,
+		});
+	}
 
-  // Create a sub-router with a path prefix
-  route<TPath extends string>(
-    path: TPath,
-  ): EndpointFactory<
-    TServices,
-    JoinPaths<TBasePath, TPath>,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    TRlsConfig
-  > {
-    const newBasePath = EndpointFactory.joinPaths(path, this.basePath);
-    return new EndpointFactory<
-      TServices,
-      JoinPaths<TBasePath, TPath>,
-      TLogger,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      TRlsConfig
-    >({
-      defaultServices: this.defaultServices,
-      basePath: newBasePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: this.defaultSessionExtractor,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this.defaultActorExtractor,
-      customSecuritySchemes: this.customSecuritySchemes,
-      defaultRlsConfig: this.defaultRlsConfig,
-    });
-  }
+	// Create a sub-router with a path prefix
+	route<TPath extends string>(
+		path: TPath,
+	): EndpointFactory<
+		TServices,
+		JoinPaths<TBasePath, TPath>,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		TRlsConfig
+	> {
+		const newBasePath = EndpointFactory.joinPaths(path, this.basePath);
+		return new EndpointFactory<
+			TServices,
+			JoinPaths<TBasePath, TPath>,
+			TLogger,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			TRlsConfig
+		>({
+			defaultServices: this.defaultServices,
+			basePath: newBasePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig,
+		});
+	}
 
-  // Create a new factory with authorization
-  authorize(
-    fn: AuthorizeFn<TServices, TLogger, TSession>,
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    TRlsConfig
-  > {
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      TLogger,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      TRlsConfig
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: fn,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: this.defaultSessionExtractor,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this.defaultActorExtractor,
-      customSecuritySchemes: this.customSecuritySchemes,
-      defaultRlsConfig: this.defaultRlsConfig,
-    });
-  }
+	// Create a new factory with authorization
+	authorize(
+		fn: AuthorizeFn<TServices, TLogger, TSession>,
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		TRlsConfig
+	> {
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			TLogger,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			TRlsConfig
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: fn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig,
+		});
+	}
 
-  // Create a new factory with services
-  services<S extends Service[]>(
-    services: S,
-  ): EndpointFactory<
-    [...S, ...TServices],
-    TBasePath,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    undefined // Reset RLS config when services change - user should call .rls() after .services()
-  > {
-    return new EndpointFactory<
-      [...S, ...TServices],
-      TBasePath,
-      TLogger,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      undefined
-    >({
-      defaultServices: [...services, ...this.defaultServices],
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn as unknown as AuthorizeFn<
-        [...S, ...TServices],
-        TLogger,
-        TSession
-      >,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: this.defaultSessionExtractor as unknown as
-        | SessionFn<[...S, ...TServices], TLogger, TSession, TDatabase>
-        | undefined,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this.defaultActorExtractor as unknown as
-        | ActorExtractor<[...S, ...TServices], TSession, TLogger>
-        | undefined,
-      customSecuritySchemes: this.customSecuritySchemes,
-      // Reset RLS config when services change since it depends on TServices
-      defaultRlsConfig: undefined,
-    });
-  }
+	// Create a new factory with services
+	services<S extends Service[]>(
+		services: S,
+	): EndpointFactory<
+		[...S, ...TServices],
+		TBasePath,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		undefined // Reset RLS config when services change - user should call .rls() after .services()
+	> {
+		return new EndpointFactory<
+			[...S, ...TServices],
+			TBasePath,
+			TLogger,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			undefined
+		>({
+			defaultServices: [...services, ...this.defaultServices],
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn as unknown as AuthorizeFn<
+				[...S, ...TServices],
+				TLogger,
+				TSession
+			>,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor as unknown as
+				| SessionFn<[...S, ...TServices], TLogger, TSession, TDatabase>
+				| undefined,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this.defaultActorExtractor as unknown as
+				| ActorExtractor<[...S, ...TServices], TSession, TLogger>
+				| undefined,
+			customSecuritySchemes: this.customSecuritySchemes,
+			// Reset RLS config when services change since it depends on TServices
+			defaultRlsConfig: undefined,
+		});
+	}
 
-  logger<L extends Logger>(
-    logger: L,
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    L,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    undefined // Reset RLS config when logger type changes - user should call .rls() after .logger()
-  > {
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      L,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      undefined
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn as unknown as AuthorizeFn<
-        TServices,
-        L,
-        TSession
-      >,
-      defaultLogger: logger,
-      defaultSessionExtractor: this
-        .defaultSessionExtractor as unknown as SessionFn<
-        TServices,
-        L,
-        TSession
-      >,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this
-        .defaultActorExtractor as unknown as ActorExtractor<
-        TServices,
-        TSession,
-        L
-      >,
-      customSecuritySchemes: this.customSecuritySchemes,
-      // Reset RLS config when logger type changes since it depends on TLogger
-      defaultRlsConfig: undefined,
-    });
-  }
+	logger<L extends Logger>(
+		logger: L,
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		L,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		undefined // Reset RLS config when logger type changes - user should call .rls() after .logger()
+	> {
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			L,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			undefined
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn as unknown as AuthorizeFn<
+				TServices,
+				L,
+				TSession
+			>,
+			defaultLogger: logger,
+			defaultSessionExtractor: this
+				.defaultSessionExtractor as unknown as SessionFn<
+				TServices,
+				L,
+				TSession
+			>,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this
+				.defaultActorExtractor as unknown as ActorExtractor<
+				TServices,
+				TSession,
+				L
+			>,
+			customSecuritySchemes: this.customSecuritySchemes,
+			// Reset RLS config when logger type changes since it depends on TLogger
+			defaultRlsConfig: undefined,
+		});
+	}
 
-  publisher<
-    T extends EventPublisher<any>,
-    TServiceName extends string = string,
-  >(
-    publisher: Service<TServiceName, T>,
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    TLogger,
-    TSession,
-    T,
-    TServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    TRlsConfig
-  > {
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      TLogger,
-      TSession,
-      T,
-      TServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      TRlsConfig
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: this.defaultSessionExtractor,
-      defaultEventPublisher: publisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this.defaultActorExtractor,
-      customSecuritySchemes: this.customSecuritySchemes,
-      defaultRlsConfig: this.defaultRlsConfig,
-    });
-  }
+	publisher<
+		T extends EventPublisher<any>,
+		TServiceName extends string = string,
+	>(
+		publisher: Service<TServiceName, T>,
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		TLogger,
+		TSession,
+		T,
+		TServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		TRlsConfig
+	> {
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			TLogger,
+			TSession,
+			T,
+			TServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			TRlsConfig
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: publisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig,
+		});
+	}
 
-  session<T>(
-    session: SessionFn<TServices, TLogger, T, TDatabase>,
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    TLogger,
-    T,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    undefined // Reset RLS config when session type changes - user should call .rls() after .session()
-  > {
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      TLogger,
-      T,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      undefined
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn as unknown as AuthorizeFn<
-        TServices,
-        TLogger,
-        T
-      >,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: session,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this
-        .defaultActorExtractor as unknown as ActorExtractor<
-        TServices,
-        T,
-        TLogger
-      >,
-      customSecuritySchemes: this.customSecuritySchemes,
-      // Reset RLS config when session type changes since it depends on TSession
-      defaultRlsConfig: undefined,
-    });
-  }
+	session<T>(
+		session: SessionFn<TServices, TLogger, T, TDatabase>,
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		TLogger,
+		T,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		undefined // Reset RLS config when session type changes - user should call .rls() after .session()
+	> {
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			TLogger,
+			T,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			undefined
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn as unknown as AuthorizeFn<
+				TServices,
+				TLogger,
+				T
+			>,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: session,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this
+				.defaultActorExtractor as unknown as ActorExtractor<
+				TServices,
+				T,
+				TLogger
+			>,
+			customSecuritySchemes: this.customSecuritySchemes,
+			// Reset RLS config when session type changes since it depends on TSession
+			defaultRlsConfig: undefined,
+		});
+	}
 
-  /**
-   * Set the database service for endpoints created from this factory.
-   * The database will be available in handler context as `db`.
-   */
-  database<T, TName extends string>(
-    service: Service<TName, T>,
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    T,
-    TName,
-    TSecuritySchemes,
-    TRlsConfig
-  > {
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      TLogger,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      T,
-      TName,
-      TSecuritySchemes,
-      TRlsConfig
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn,
-      defaultLogger: this.defaultLogger,
-      // Reset session extractor when database changes - user should call .session() after .database()
-      // to get proper type inference for the new database type
-      defaultSessionExtractor: this.defaultSessionExtractor as unknown as
-        | SessionFn<TServices, TLogger, TSession, T>
-        | undefined,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: service,
-      customSecuritySchemes: this.customSecuritySchemes,
-      defaultRlsConfig: this.defaultRlsConfig,
-    });
-  }
+	/**
+	 * Set the database service for endpoints created from this factory.
+	 * The database will be available in handler context as `db`.
+	 */
+	database<T, TName extends string>(
+		service: Service<TName, T>,
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		T,
+		TName,
+		TSecuritySchemes,
+		TRlsConfig
+	> {
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			TLogger,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			T,
+			TName,
+			TSecuritySchemes,
+			TRlsConfig
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			// Reset session extractor when database changes - user should call .session() after .database()
+			// to get proper type inference for the new database type
+			defaultSessionExtractor: this.defaultSessionExtractor as unknown as
+				| SessionFn<TServices, TLogger, TSession, T>
+				| undefined,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: service,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig,
+		});
+	}
 
-  /**
-   * Set the auditor storage service for endpoints created from this factory.
-   * This enables audit functionality and makes `auditor` available in handler context.
-   * The audit action type is automatically inferred from the storage's generic parameter.
-   */
-  auditor<T extends AuditStorage<any>, TName extends string>(
-    storage: Service<TName, T>,
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    T,
-    TName,
-    ExtractStorageAuditAction<T>,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    TRlsConfig
-  > {
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      TLogger,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      T,
-      TName,
-      ExtractStorageAuditAction<T>,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      TRlsConfig
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: this.defaultSessionExtractor,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: storage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this
-        .defaultActorExtractor as unknown as ActorExtractor<
-        TServices,
-        TSession,
-        TLogger
-      >,
-      customSecuritySchemes: this.customSecuritySchemes,
-      defaultRlsConfig: this.defaultRlsConfig,
-    });
-  }
+	/**
+	 * Set the auditor storage service for endpoints created from this factory.
+	 * This enables audit functionality and makes `auditor` available in handler context.
+	 * The audit action type is automatically inferred from the storage's generic parameter.
+	 */
+	auditor<T extends AuditStorage<any>, TName extends string>(
+		storage: Service<TName, T>,
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		T,
+		TName,
+		ExtractStorageAuditAction<T>,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		TRlsConfig
+	> {
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			TLogger,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			T,
+			TName,
+			ExtractStorageAuditAction<T>,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			TRlsConfig
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: storage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this
+				.defaultActorExtractor as unknown as ActorExtractor<
+				TServices,
+				TSession,
+				TLogger
+			>,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig,
+		});
+	}
 
-  /**
-   * Set the actor extractor function for endpoints created from this factory.
-   * The actor is extracted from the request context and attached to all audits.
-   */
-  actor(
-    extractor: ActorExtractor<TServices, TSession, TLogger>,
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    TRlsConfig
-  > {
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      TLogger,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      TRlsConfig
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: this.defaultSessionExtractor,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: extractor,
-      customSecuritySchemes: this.customSecuritySchemes,
-      defaultRlsConfig: this.defaultRlsConfig,
-    });
-  }
+	/**
+	 * Set the actor extractor function for endpoints created from this factory.
+	 * The actor is extracted from the request context and attached to all audits.
+	 */
+	actor(
+		extractor: ActorExtractor<TServices, TSession, TLogger>,
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		TRlsConfig
+	> {
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			TLogger,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			TRlsConfig
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: extractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: this.defaultRlsConfig,
+		});
+	}
 
-  /**
-   * Set the RLS (Row-Level Security) configuration for endpoints created from this factory.
-   * This enables automatic PostgreSQL session variable setting for RLS policies.
-   *
-   * @example
-   * ```typescript
-   * const api = new EndpointFactory()
-   *   .database(databaseService)
-   *   .session(extractSession)
-   *   .rls({
-   *     extractor: ({ session }) => ({
-   *       user_id: session.userId,
-   *       tenant_id: session.tenantId,
-   *     }),
-   *     prefix: 'app',
-   *   });
-   * ```
-   */
-  rls<TConfig extends RlsConfig<TServices, TSession, TLogger>>(
-    config: TConfig,
-  ): EndpointFactory<
-    TServices,
-    TBasePath,
-    TLogger,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName,
-    TSecuritySchemes,
-    TConfig
-  > {
-    return new EndpointFactory<
-      TServices,
-      TBasePath,
-      TLogger,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName,
-      TSecuritySchemes,
-      TConfig
-    >({
-      defaultServices: this.defaultServices,
-      basePath: this.basePath,
-      defaultAuthorizeFn: this.defaultAuthorizeFn,
-      defaultLogger: this.defaultLogger,
-      defaultSessionExtractor: this.defaultSessionExtractor,
-      defaultEventPublisher: this.defaultEventPublisher,
-      availableAuthorizers: this.availableAuthorizers,
-      defaultAuthorizerName: this.defaultAuthorizerName,
-      defaultAuditorStorage: this.defaultAuditorStorage,
-      defaultDatabaseService: this.defaultDatabaseService,
-      defaultActorExtractor: this.defaultActorExtractor,
-      customSecuritySchemes: this.customSecuritySchemes,
-      defaultRlsConfig: config,
-    });
-  }
+	/**
+	 * Set the RLS (Row-Level Security) configuration for endpoints created from this factory.
+	 * This enables automatic PostgreSQL session variable setting for RLS policies.
+	 *
+	 * @example
+	 * ```typescript
+	 * const api = new EndpointFactory()
+	 *   .database(databaseService)
+	 *   .session(extractSession)
+	 *   .rls({
+	 *     extractor: ({ session }) => ({
+	 *       user_id: session.userId,
+	 *       tenant_id: session.tenantId,
+	 *     }),
+	 *     prefix: 'app',
+	 *   });
+	 * ```
+	 */
+	rls<TConfig extends RlsConfig<TServices, TSession, TLogger>>(
+		config: TConfig,
+	): EndpointFactory<
+		TServices,
+		TBasePath,
+		TLogger,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName,
+		TSecuritySchemes,
+		TConfig
+	> {
+		return new EndpointFactory<
+			TServices,
+			TBasePath,
+			TLogger,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName,
+			TSecuritySchemes,
+			TConfig
+		>({
+			defaultServices: this.defaultServices,
+			basePath: this.basePath,
+			defaultAuthorizeFn: this.defaultAuthorizeFn,
+			defaultLogger: this.defaultLogger,
+			defaultSessionExtractor: this.defaultSessionExtractor,
+			defaultEventPublisher: this.defaultEventPublisher,
+			availableAuthorizers: this.availableAuthorizers,
+			defaultAuthorizerName: this.defaultAuthorizerName,
+			defaultAuditorStorage: this.defaultAuditorStorage,
+			defaultDatabaseService: this.defaultDatabaseService,
+			defaultActorExtractor: this.defaultActorExtractor,
+			customSecuritySchemes: this.customSecuritySchemes,
+			defaultRlsConfig: config,
+		});
+	}
 
-  private createBuilder<TMethod extends HttpMethod, TPath extends string>(
-    method: TMethod,
-    path: TPath,
-  ): EndpointBuilder<
-    JoinPaths<TBasePath, TPath>,
-    TMethod,
-    {},
-    TServices,
-    TLogger,
-    undefined,
-    TSession,
-    TEventPublisher,
-    TEventPublisherServiceName,
-    TAuthorizers,
-    TAuditStorage,
-    TAuditStorageServiceName,
-    TAuditAction,
-    TDatabase,
-    TDatabaseServiceName
-  > {
-    const fullPath = EndpointFactory.joinPaths(path, this.basePath);
-    const builder = new EndpointBuilder<
-      JoinPaths<TBasePath, TPath>,
-      TMethod,
-      {},
-      TServices,
-      TLogger,
-      undefined,
-      TSession,
-      TEventPublisher,
-      TEventPublisherServiceName,
-      TAuthorizers,
-      TAuditStorage,
-      TAuditStorageServiceName,
-      TAuditAction,
-      TDatabase,
-      TDatabaseServiceName
-    >(fullPath, method);
+	private createBuilder<TMethod extends HttpMethod, TPath extends string>(
+		method: TMethod,
+		path: TPath,
+	): EndpointBuilder<
+		JoinPaths<TBasePath, TPath>,
+		TMethod,
+		{},
+		TServices,
+		TLogger,
+		undefined,
+		TSession,
+		TEventPublisher,
+		TEventPublisherServiceName,
+		TAuthorizers,
+		TAuditStorage,
+		TAuditStorageServiceName,
+		TAuditAction,
+		TDatabase,
+		TDatabaseServiceName
+	> {
+		const fullPath = EndpointFactory.joinPaths(path, this.basePath);
+		const builder = new EndpointBuilder<
+			JoinPaths<TBasePath, TPath>,
+			TMethod,
+			{},
+			TServices,
+			TLogger,
+			undefined,
+			TSession,
+			TEventPublisher,
+			TEventPublisherServiceName,
+			TAuthorizers,
+			TAuditStorage,
+			TAuditStorageServiceName,
+			TAuditAction,
+			TDatabase,
+			TDatabaseServiceName
+		>(fullPath, method);
 
-    if (this.defaultAuthorizeFn) {
-      // @ts-ignore
-      builder._authorize = this.defaultAuthorizeFn;
-    }
-    if (this.defaultServices.length) {
-      // Create a copy to avoid sharing references between builders
-      builder._services = [...this.defaultServices] as TServices;
-    }
+		if (this.defaultAuthorizeFn) {
+			builder._authorize = this.defaultAuthorizeFn;
+		}
+		if (this.defaultServices.length) {
+			// Create a copy to avoid sharing references between builders
+			builder._services = [...this.defaultServices] as TServices;
+		}
 
-    if (this.defaultLogger) {
-      builder._logger = this.defaultLogger as TLogger;
-    }
+		if (this.defaultLogger) {
+			builder._logger = this.defaultLogger as TLogger;
+		}
 
-    if (this.defaultSessionExtractor) {
-      builder._getSession = this.defaultSessionExtractor as SessionFn<
-        TServices,
-        TLogger,
-        TSession
-      >;
-    }
+		if (this.defaultSessionExtractor) {
+			builder._getSession = this.defaultSessionExtractor as SessionFn<
+				TServices,
+				TLogger,
+				TSession
+			>;
+		}
 
-    if (this.defaultEventPublisher) {
-      builder._setPublisher(this.defaultEventPublisher);
-    }
+		if (this.defaultEventPublisher) {
+			builder._setPublisher(this.defaultEventPublisher);
+		}
 
-    // Set available authorizers and default
-    builder._availableAuthorizers = this.availableAuthorizers;
-    if (this.defaultAuthorizerName) {
-      builder._authorizerName = this.defaultAuthorizerName;
-    }
+		// Set available authorizers and default
+		builder._availableAuthorizers = this.availableAuthorizers;
+		if (this.defaultAuthorizerName) {
+			builder._authorizerName = this.defaultAuthorizerName;
+		}
 
-    // Set auditor storage if configured
-    if (this.defaultAuditorStorage) {
-      builder._setAuditorStorage(this.defaultAuditorStorage as any);
-    }
+		// Set auditor storage if configured
+		if (this.defaultAuditorStorage) {
+			builder._setAuditorStorage(this.defaultAuditorStorage as any);
+		}
 
-    // Set database service if configured
-    if (this.defaultDatabaseService) {
-      builder._setDatabaseService(this.defaultDatabaseService as any);
-    }
+		// Set database service if configured
+		if (this.defaultDatabaseService) {
+			builder._setDatabaseService(this.defaultDatabaseService as any);
+		}
 
-    // Set actor extractor if configured
-    if (this.defaultActorExtractor) {
-      builder._actorExtractor = this.defaultActorExtractor;
-    }
+		// Set actor extractor if configured
+		if (this.defaultActorExtractor) {
+			builder._actorExtractor = this.defaultActorExtractor;
+		}
 
-    // Set custom security schemes
-    builder._customSecuritySchemes = this.customSecuritySchemes;
+		// Set custom security schemes
+		builder._customSecuritySchemes = this.customSecuritySchemes;
 
-    // Set RLS config if configured
-    if (this.defaultRlsConfig) {
-      builder._rlsConfig = this.defaultRlsConfig as any;
-    }
+		// Set RLS config if configured
+		if (this.defaultRlsConfig) {
+			builder._rlsConfig = this.defaultRlsConfig as any;
+		}
 
-    return builder;
-  }
+		return builder;
+	}
 
-  post<TPath extends string>(path: TPath) {
-    return this.createBuilder('POST', path);
-  }
+	post<TPath extends string>(path: TPath) {
+		return this.createBuilder('POST', path);
+	}
 
-  get<TPath extends string>(path: TPath) {
-    return this.createBuilder('GET', path);
-  }
+	get<TPath extends string>(path: TPath) {
+		return this.createBuilder('GET', path);
+	}
 
-  put<TPath extends string>(path: TPath) {
-    return this.createBuilder('PUT', path);
-  }
+	put<TPath extends string>(path: TPath) {
+		return this.createBuilder('PUT', path);
+	}
 
-  delete<TPath extends string>(path: TPath) {
-    return this.createBuilder('DELETE', path);
-  }
+	delete<TPath extends string>(path: TPath) {
+		return this.createBuilder('DELETE', path);
+	}
 
-  patch<TPath extends string>(path: TPath) {
-    return this.createBuilder('PATCH', path);
-  }
+	patch<TPath extends string>(path: TPath) {
+		return this.createBuilder('PATCH', path);
+	}
 
-  options<TPath extends string>(path: TPath) {
-    return this.createBuilder('OPTIONS', path);
-  }
+	options<TPath extends string>(path: TPath) {
+		return this.createBuilder('OPTIONS', path);
+	}
 }
 
 export type RemoveTrailingSlash<T extends string> = T extends `${infer Rest}/`
-  ? Rest extends ''
-    ? T // Keep "/" as is
-    : Rest
-  : T;
+	? Rest extends ''
+		? T // Keep "/" as is
+		: Rest
+	: T;
 
 export type JoinPaths<
-  TBasePath extends string,
-  TPath extends string,
+	TBasePath extends string,
+	TPath extends string,
 > = RemoveTrailingSlash<
-  TBasePath extends ''
-    ? TPath
-    : TPath extends ''
-      ? TBasePath
-      : TBasePath extends '/'
-        ? TPath extends `/${string}`
-          ? TPath
-          : `/${TPath}`
-        : TBasePath extends `${infer Base}/`
-          ? TPath extends `/${infer Rest}`
-            ? `${Base}/${Rest}`
-            : `${Base}/${TPath}`
-          : TPath extends `/${infer Rest}`
-            ? `${TBasePath}/${Rest}`
-            : `${TBasePath}/${TPath}`
+	TBasePath extends ''
+		? TPath
+		: TPath extends ''
+			? TBasePath
+			: TBasePath extends '/'
+				? TPath extends `/${string}`
+					? TPath
+					: `/${TPath}`
+				: TBasePath extends `${infer Base}/`
+					? TPath extends `/${infer Rest}`
+						? `${Base}/${Rest}`
+						: `${Base}/${TPath}`
+					: TPath extends `/${infer Rest}`
+						? `${TBasePath}/${Rest}`
+						: `${TBasePath}/${TPath}`
 >;
 
 export interface EndpointFactoryOptions<
-  TServices extends Service[] = [],
-  TBasePath extends string = '',
-  TLogger extends Logger = Logger,
-  TSession = unknown,
-  TEventPublisher extends EventPublisher<any> | undefined = undefined,
-  TEventPublisherServiceName extends string = string,
-  TAuthorizers extends readonly string[] = readonly string[],
-  TAuditStorage extends AuditStorage | undefined = undefined,
-  TAuditStorageServiceName extends string = string,
-  TDatabase = undefined,
-  TDatabaseServiceName extends string = string,
-  TSecuritySchemes extends Record<string, SecurityScheme> = Record<
-    string,
-    SecurityScheme
-  >,
-  TRlsConfig extends
-    | RlsConfig<TServices, TSession, TLogger>
-    | undefined = undefined,
+	TServices extends Service[] = [],
+	TBasePath extends string = '',
+	TLogger extends Logger = Logger,
+	TSession = unknown,
+	TEventPublisher extends EventPublisher<any> | undefined = undefined,
+	TEventPublisherServiceName extends string = string,
+	TAuthorizers extends readonly string[] = readonly string[],
+	TAuditStorage extends AuditStorage | undefined = undefined,
+	TAuditStorageServiceName extends string = string,
+	TDatabase = undefined,
+	TDatabaseServiceName extends string = string,
+	TSecuritySchemes extends Record<string, SecurityScheme> = Record<
+		string,
+		SecurityScheme
+	>,
+	TRlsConfig extends
+		| RlsConfig<TServices, TSession, TLogger>
+		| undefined = undefined,
 > {
-  defaultServices?: TServices;
-  basePath?: TBasePath;
-  defaultAuthorizeFn?: AuthorizeFn<TServices, TLogger, TSession>;
-  defaultLogger?: TLogger;
-  defaultSessionExtractor?: SessionFn<TServices, TLogger, TSession, TDatabase>;
-  defaultEventPublisher?: Service<TEventPublisherServiceName, TEventPublisher>;
-  defaultEvents?: MappedEvent<TEventPublisher, undefined>[];
-  availableAuthorizers?: Authorizer[];
-  defaultAuthorizerName?: TAuthorizers[number];
-  defaultAuditorStorage?: Service<TAuditStorageServiceName, TAuditStorage>;
-  defaultDatabaseService?: Service<TDatabaseServiceName, TDatabase>;
-  defaultActorExtractor?: ActorExtractor<TServices, TSession, TLogger>;
-  customSecuritySchemes?: TSecuritySchemes;
-  defaultRlsConfig?: TRlsConfig;
+	defaultServices?: TServices;
+	basePath?: TBasePath;
+	defaultAuthorizeFn?: AuthorizeFn<TServices, TLogger, TSession>;
+	defaultLogger?: TLogger;
+	defaultSessionExtractor?: SessionFn<TServices, TLogger, TSession, TDatabase>;
+	defaultEventPublisher?: Service<TEventPublisherServiceName, TEventPublisher>;
+	defaultEvents?: MappedEvent<TEventPublisher, undefined>[];
+	availableAuthorizers?: Authorizer[];
+	defaultAuthorizerName?: TAuthorizers[number];
+	defaultAuditorStorage?: Service<TAuditStorageServiceName, TAuditStorage>;
+	defaultDatabaseService?: Service<TDatabaseServiceName, TDatabase>;
+	defaultActorExtractor?: ActorExtractor<TServices, TSession, TLogger>;
+	customSecuritySchemes?: TSecuritySchemes;
+	defaultRlsConfig?: TRlsConfig;
 }
 
 export const e = new EndpointFactory();