@molecule/api-bonds-default-express 1.0.3 → 1.1.0

package/README.md

@@ -3,7 +3,7 @@ AUTO-GENERATED — DO NOT EDIT THIS FILE.
 Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json.
 Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates).
 To change this document, edit the module-level JSDoc in src/index.ts.
-Generated: 2026-10-06T05:03:56.372Z
+Generated: 2026-10-06T19:54:54.472Z
 -->
 
 # @molecule/api-bonds-default-express
@@ -79,7 +79,7 @@ const billingRouter = createBillingRouter<AppLimits>({
 ## Installation
 
 ```bash
-npm install @molecule/api-bonds-default-express @molecule/api-ai-anthropic @molecule/api-ai-embeddings @molecule/api-ai-embeddings-openai @molecule/api-ai-openai @molecule/api-ai-speech @molecule/api-ai-speech-openai @molecule/api-ai-vector-store @molecule/api-ai-vector-store-pgvector @molecule/api-analytics @molecule/api-audit @molecule/api-audit-database @molecule/api-bond @molecule/api-cache @molecule/api-cache-memory @molecule/api-cache-redis @molecule/api-config @molecule/api-config-env @molecule/api-cron @molecule/api-cron-node-cron @molecule/api-database @molecule/api-database-postgresql @molecule/api-emails @molecule/api-emails-capture @molecule/api-emails-mailgun @molecule/api-encryption @molecule/api-encryption-aes @molecule/api-entitlements @molecule/api-error-tracking @molecule/api-error-tracking-console @molecule/api-error-tracking-sentry @molecule/api-geolocation @molecule/api-geolocation-google @molecule/api-geolocation-mapbox @molecule/api-geolocation-nominatim @molecule/api-http @molecule/api-http-fetch @molecule/api-i18n @molecule/api-image @molecule/api-image-sharp @molecule/api-import-export @molecule/api-import-export-csv @molecule/api-jwt @molecule/api-jwt-jsonwebtoken @molecule/api-logger @molecule/api-media-streaming @molecule/api-media-streaming-hls @molecule/api-middleware-body-parser @molecule/api-middleware-body-parser-express @molecule/api-middleware-cookie-parser @molecule/api-middleware-cookie-parser-express @molecule/api-middleware-cors @molecule/api-middleware-cors-express @molecule/api-middleware-validation @molecule/api-notifications-webhook @molecule/api-password @molecule/api-password-bcrypt @molecule/api-payments @molecule/api-payments-stripe @molecule/api-pdf @molecule/api-pdf-pdfkit @molecule/api-permissions @molecule/api-permissions-custom @molecule/api-push-capture @molecule/api-push-notifications @molecule/api-push-notifications-web-push @molecule/api-queue @molecule/api-queue-memory @molecule/api-queue-redis @molecule/api-rate-limit @molecule/api-rate-limit-memory @molecule/api-realtime @molecule/api-realtime-socketio @molecule/api-realtime-sse @molecule/api-realtime-ws @molecule/api-reporting @molecule/api-reporting-database @molecule/api-resource @molecule/api-resource-device @molecule/api-resource-payment @molecule/api-resource-user @molecule/api-search @molecule/api-search-meilisearch @molecule/api-search-postgres @molecule/api-secrets @molecule/api-secrets-env @molecule/api-server-default-express @molecule/api-two-factor @molecule/api-two-factor-otplib @molecule/api-uploads @molecule/api-uploads-filesystem @molecule/api-uploads-s3 @molecule/api-webhook @molecule/api-webhook-http @molecule/api-workflow @molecule/api-workflow-database express zod
+npm install @molecule/api-bonds-default-express @molecule/api-ai-anthropic @molecule/api-ai-embeddings @molecule/api-ai-embeddings-openai @molecule/api-ai-openai @molecule/api-ai-speech @molecule/api-ai-speech-openai @molecule/api-ai-vector-store @molecule/api-ai-vector-store-pgvector @molecule/api-analytics @molecule/api-audit @molecule/api-audit-database @molecule/api-bond @molecule/api-cache @molecule/api-cache-memory @molecule/api-cache-redis @molecule/api-config @molecule/api-config-env @molecule/api-cron @molecule/api-cron-node-cron @molecule/api-database @molecule/api-database-pglite @molecule/api-database-postgresql @molecule/api-emails @molecule/api-emails-capture @molecule/api-emails-mailgun @molecule/api-encryption @molecule/api-encryption-aes @molecule/api-entitlements @molecule/api-error-tracking @molecule/api-error-tracking-console @molecule/api-error-tracking-sentry @molecule/api-geolocation @molecule/api-geolocation-google @molecule/api-geolocation-mapbox @molecule/api-geolocation-nominatim @molecule/api-http @molecule/api-http-fetch @molecule/api-i18n @molecule/api-image @molecule/api-image-sharp @molecule/api-import-export @molecule/api-import-export-csv @molecule/api-jwt @molecule/api-jwt-jsonwebtoken @molecule/api-logger @molecule/api-media-streaming @molecule/api-media-streaming-hls @molecule/api-middleware-body-parser @molecule/api-middleware-body-parser-express @molecule/api-middleware-cookie-parser @molecule/api-middleware-cookie-parser-express @molecule/api-middleware-cors @molecule/api-middleware-cors-express @molecule/api-middleware-validation @molecule/api-notifications-webhook @molecule/api-password @molecule/api-password-bcrypt @molecule/api-payments @molecule/api-payments-capture @molecule/api-payments-stripe @molecule/api-pdf @molecule/api-pdf-pdfkit @molecule/api-permissions @molecule/api-permissions-custom @molecule/api-push-capture @molecule/api-push-notifications @molecule/api-push-notifications-web-push @molecule/api-queue @molecule/api-queue-memory @molecule/api-queue-redis @molecule/api-rate-limit @molecule/api-rate-limit-memory @molecule/api-realtime @molecule/api-realtime-socketio @molecule/api-realtime-sse @molecule/api-realtime-ws @molecule/api-reporting @molecule/api-reporting-database @molecule/api-resource @molecule/api-resource-device @molecule/api-resource-payment @molecule/api-resource-user @molecule/api-search @molecule/api-search-meilisearch @molecule/api-search-postgres @molecule/api-secrets @molecule/api-secrets-env @molecule/api-server-default-express @molecule/api-two-factor @molecule/api-two-factor-otplib @molecule/api-uploads @molecule/api-uploads-filesystem @molecule/api-uploads-s3 @molecule/api-webhook @molecule/api-webhook-http @molecule/api-workflow @molecule/api-workflow-database express zod
 npm install -D @types/express
 ```
 
@@ -124,6 +124,30 @@ function createMigrator(migrationsDir: string): () => Promise<void>
 
 **Returns:** A no-arg `runMigrations()` that creates the database (if missing) and applies every migration file in lexical order.
 
+#### `createMigratorPglite(migrationsDir, extraDirs)`
+
+Returns a `runMigrations()` that applies every `*.sql` file in
+`migrationsDir`, in lexical order, to `@molecule/api-database-pglite`'s
+default pool — the pool `setupDatabasePglite()` bonds, so the schema
+lands in the database the app queries (an in-memory PGlite database exists
+only inside that one instance). Same files and same "already exists is a
+warning, anything else fails the boot" contract as `createMigrator`; there
+is no `CREATE DATABASE` step.
+
+Further directories run after it, each in its own lexical order — e.g. a
+scaffolded app's `__setup__/` (resource-package DDL such as `payments.sql`)
+after `migrations/`, the order the scaffolded Postgres runner uses. A
+directory that does not exist counts as empty.
+
+```typescript
+function createMigratorPglite(migrationsDir: string, extraDirs?: string[]): () => Promise<void>
+```
+
+- `migrationsDir` — Absolute path to the app's `migrations/` directory.
+- `extraDirs` — Absolute paths of further `*.sql` directories to apply after it, in order.
+
+**Returns:** A no-arg migration runner.
+
 #### `getParamId(req, name?)`
 
 Read a route param as a string, defending against the Express
@@ -419,6 +443,27 @@ Wires `@molecule/api-cron-node-cron` to `@molecule/api-cron`.
 function setupCronNodeCron(): Promise<void>
 ```
 
+#### `setupDatabasePglite()`
+
+Wires `@molecule/api-database-pglite` (real Postgres compiled to
+WebAssembly, in-process) to `@molecule/api-database` — the database half of
+the zero-server "browser" profile. Same SQL, placeholders and error codes as
+the postgresql bond, so app code and migrations do not change.
+
+Binds the pglite package's DEFAULT pool, whose data directory comes from
+`PGLITE_DATA_DIR` (`memory://`, `idb://<name>`, or a filesystem path; the
+bond's Node default is `./data/pglite`). Run migrations with
+{@link createMigratorPglite}, which targets the same default pool — an
+in-memory database exists only inside that one instance, so the migrator
+and the app must share it.
+
+`@molecule/api-database-pglite` is an OPTIONAL peer, imported lazily, so a
+postgres-only app never needs it installed.
+
+```typescript
+function setupDatabasePglite(): Promise<void>
+```
+
 #### `setupDatabasePostgresql()`
 
 Wires `@molecule/api-database-postgresql` to `@molecule/api-database`.
@@ -427,6 +472,18 @@ Wires `@molecule/api-database-postgresql` to `@molecule/api-database`.
 function setupDatabasePostgresql(): void
 ```
 
+#### `setupEmailsCapture()`
+
+Wires `@molecule/api-emails-capture` to `@molecule/api-emails`
+unconditionally — every message is captured in memory instead of sent.
+Unlike {@link setupEmailsMailgun}'s development fallback, this does not
+depend on `NODE_ENV` or on which env vars are missing, so a profile that
+selects it always gets it.
+
+```typescript
+function setupEmailsCapture(): void
+```
+
 #### `setupEmailsMailgun()`
 
 Wires `@molecule/api-emails-mailgun` to `@molecule/api-emails`.
@@ -562,6 +619,22 @@ Wires `@molecule/api-password-bcrypt` to `@molecule/api-password`.
 function setupPasswordBcrypt(): void
 ```
 
+#### `setupPaymentsCapture()`
+
+Registers `@molecule/api-payments-capture` (a payments vendor simulated in
+memory: checkouts complete at once, signed local webhooks) under the name
+`'stripe'` — the name {@link setupPaymentsStripe} uses — so the billing
+router, the `/users/:id/verify-payment/stripe` and
+`/users/payment-notification/stripe` routes, and the plan catalogue's
+`platformKey` work unchanged. Grants plans without taking money: bond it in
+a development / browser profile only, never in production.
+
+`@molecule/api-payments-capture` is an OPTIONAL peer, imported lazily.
+
+```typescript
+function setupPaymentsCapture(): Promise<void>
+```
+
 #### `setupPaymentsStripe()`
 
 Registers `@molecule/api-payments-stripe` as a named `'stripe'` payments provider.
@@ -835,6 +908,7 @@ Peer dependencies:
 - `@molecule/api-cron` ^1.0.1
 - `@molecule/api-cron-node-cron` ^1.0.1
 - `@molecule/api-database` ^1.0.1
+- `@molecule/api-database-pglite` ^1.0.0
 - `@molecule/api-database-postgresql` ^1.0.1
 - `@molecule/api-emails` ^1.0.1
 - `@molecule/api-emails-capture` ^1.0.1
@@ -872,6 +946,7 @@ Peer dependencies:
 - `@molecule/api-password` ^1.0.1
 - `@molecule/api-password-bcrypt` ^1.0.1
 - `@molecule/api-payments` ^1.0.1
+- `@molecule/api-payments-capture` ^1.0.0
 - `@molecule/api-payments-stripe` ^1.0.1
 - `@molecule/api-pdf` ^1.0.1
 - `@molecule/api-pdf-pdfkit` ^1.0.1
@@ -934,6 +1009,7 @@ Peer dependencies:
 - `@molecule/api-cron`
 - `@molecule/api-cron-node-cron`
 - `@molecule/api-database`
+- `@molecule/api-database-pglite`
 - `@molecule/api-database-postgresql`
 - `@molecule/api-emails`
 - `@molecule/api-emails-capture`
@@ -971,6 +1047,7 @@ Peer dependencies:
 - `@molecule/api-password`
 - `@molecule/api-password-bcrypt`
 - `@molecule/api-payments`
+- `@molecule/api-payments-capture`
 - `@molecule/api-payments-stripe`
 - `@molecule/api-pdf`
 - `@molecule/api-pdf-pdfkit`

package/dist/migrate.d.ts

@@ -1,17 +1,38 @@
 /**
- * Postgres migration runner factory — re-exported from the PostgreSQL
- * bond.
+ * Migration runner factories.
  *
- * The `createMigrator` implementation lives in
- * `@molecule/api-database-postgresql` because it is Postgres-specific
- * bootstrapping plumbing (`CREATE DATABASE`, the `pg_database` catalog
- * probe, raw `pg.Client` connections). This bond-setup package must not
- * import the concrete `pg` driver directly — it reaches Postgres only
- * through the `@molecule/api-database-postgresql` bond it already
- * peer-depends on. App `scripts/migrate.ts` files keep importing
+ * `createMigrator` (Postgres) is re-exported from the PostgreSQL bond: it is
+ * Postgres-specific bootstrapping plumbing (`CREATE DATABASE`, the
+ * `pg_database` catalog probe, raw `pg.Client` connections), and this
+ * bond-setup package must not import the concrete `pg` driver directly — it
+ * reaches Postgres only through the `@molecule/api-database-postgresql` bond
+ * it already peer-depends on. App `scripts/migrate.ts` files keep importing
  * `createMigrator` from here unchanged.
  *
+ * `createMigratorPglite` is the same contract for the PGlite bond (the
+ * zero-server "browser" profile), loaded lazily because that bond is an
+ * optional peer.
+ *
  * @module
  */
 export { createMigrator } from '@molecule/api-database-postgresql';
+/**
+ * Returns a `runMigrations()` that applies every `*.sql` file in
+ * `migrationsDir`, in lexical order, to `@molecule/api-database-pglite`'s
+ * default pool — the pool `setupDatabasePglite()` bonds, so the schema
+ * lands in the database the app queries (an in-memory PGlite database exists
+ * only inside that one instance). Same files and same "already exists is a
+ * warning, anything else fails the boot" contract as `createMigrator`; there
+ * is no `CREATE DATABASE` step.
+ *
+ * Further directories run after it, each in its own lexical order — e.g. a
+ * scaffolded app's `__setup__/` (resource-package DDL such as `payments.sql`)
+ * after `migrations/`, the order the scaffolded Postgres runner uses. A
+ * directory that does not exist counts as empty.
+ *
+ * @param migrationsDir - Absolute path to the app's `migrations/` directory.
+ * @param extraDirs - Absolute paths of further `*.sql` directories to apply after it, in order.
+ * @returns A no-arg migration runner.
+ */
+export declare function createMigratorPglite(migrationsDir: string, ...extraDirs: string[]): () => Promise<void>;
 //# sourceMappingURL=migrate.d.ts.map

package/dist/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../src/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAA"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../src/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAA;AAElE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,EACrB,GAAG,SAAS,EAAE,MAAM,EAAE,GACrB,MAAM,OAAO,CAAC,IAAI,CAAC,CAOrB"}

package/dist/migrate.js

@@ -1,16 +1,44 @@
 /**
- * Postgres migration runner factory — re-exported from the PostgreSQL
- * bond.
+ * Migration runner factories.
  *
- * The `createMigrator` implementation lives in
- * `@molecule/api-database-postgresql` because it is Postgres-specific
- * bootstrapping plumbing (`CREATE DATABASE`, the `pg_database` catalog
- * probe, raw `pg.Client` connections). This bond-setup package must not
- * import the concrete `pg` driver directly — it reaches Postgres only
- * through the `@molecule/api-database-postgresql` bond it already
- * peer-depends on. App `scripts/migrate.ts` files keep importing
+ * `createMigrator` (Postgres) is re-exported from the PostgreSQL bond: it is
+ * Postgres-specific bootstrapping plumbing (`CREATE DATABASE`, the
+ * `pg_database` catalog probe, raw `pg.Client` connections), and this
+ * bond-setup package must not import the concrete `pg` driver directly — it
+ * reaches Postgres only through the `@molecule/api-database-postgresql` bond
+ * it already peer-depends on. App `scripts/migrate.ts` files keep importing
  * `createMigrator` from here unchanged.
  *
+ * `createMigratorPglite` is the same contract for the PGlite bond (the
+ * zero-server "browser" profile), loaded lazily because that bond is an
+ * optional peer.
+ *
  * @module
  */
 export { createMigrator } from '@molecule/api-database-postgresql';
+/**
+ * Returns a `runMigrations()` that applies every `*.sql` file in
+ * `migrationsDir`, in lexical order, to `@molecule/api-database-pglite`'s
+ * default pool — the pool `setupDatabasePglite()` bonds, so the schema
+ * lands in the database the app queries (an in-memory PGlite database exists
+ * only inside that one instance). Same files and same "already exists is a
+ * warning, anything else fails the boot" contract as `createMigrator`; there
+ * is no `CREATE DATABASE` step.
+ *
+ * Further directories run after it, each in its own lexical order — e.g. a
+ * scaffolded app's `__setup__/` (resource-package DDL such as `payments.sql`)
+ * after `migrations/`, the order the scaffolded Postgres runner uses. A
+ * directory that does not exist counts as empty.
+ *
+ * @param migrationsDir - Absolute path to the app's `migrations/` directory.
+ * @param extraDirs - Absolute paths of further `*.sql` directories to apply after it, in order.
+ * @returns A no-arg migration runner.
+ */
+export function createMigratorPglite(migrationsDir, ...extraDirs) {
+    return async function runMigrations() {
+        const { createMigrator: createPgliteMigrator } = await import('@molecule/api-database-pglite');
+        for (const dir of [migrationsDir, ...extraDirs]) {
+            await createPgliteMigrator(dir)();
+        }
+    };
+}

package/dist/setup.d.ts

@@ -14,6 +14,23 @@
 export declare function setupConfigEnv(): void;
 /** Wires `@molecule/api-database-postgresql` to `@molecule/api-database`. */
 export declare function setupDatabasePostgresql(): void;
+/**
+ * Wires `@molecule/api-database-pglite` (real Postgres compiled to
+ * WebAssembly, in-process) to `@molecule/api-database` — the database half of
+ * the zero-server "browser" profile. Same SQL, placeholders and error codes as
+ * the postgresql bond, so app code and migrations do not change.
+ *
+ * Binds the pglite package's DEFAULT pool, whose data directory comes from
+ * `PGLITE_DATA_DIR` (`memory://`, `idb://<name>`, or a filesystem path; the
+ * bond's Node default is `./data/pglite`). Run migrations with
+ * {@link createMigratorPglite}, which targets the same default pool — an
+ * in-memory database exists only inside that one instance, so the migrator
+ * and the app must share it.
+ *
+ * `@molecule/api-database-pglite` is an OPTIONAL peer, imported lazily, so a
+ * postgres-only app never needs it installed.
+ */
+export declare function setupDatabasePglite(): Promise<void>;
 /** Wires `@molecule/api-jwt-jsonwebtoken` to `@molecule/api-jwt`. */
 export declare function setupJwtJsonwebtoken(): void;
 /** Wires `@molecule/api-middleware-body-parser-express` to `@molecule/api-middleware-body-parser`. */
@@ -32,8 +49,28 @@ export declare function setupServiceDevice(): void;
 export declare function setupTwoFactorOtplib(): void;
 /** Wires `@molecule/api-emails-mailgun` to `@molecule/api-emails`. */
 export declare function setupEmailsMailgun(): void;
+/**
+ * Wires `@molecule/api-emails-capture` to `@molecule/api-emails`
+ * unconditionally — every message is captured in memory instead of sent.
+ * Unlike {@link setupEmailsMailgun}'s development fallback, this does not
+ * depend on `NODE_ENV` or on which env vars are missing, so a profile that
+ * selects it always gets it.
+ */
+export declare function setupEmailsCapture(): void;
 /** Registers `@molecule/api-payments-stripe` as a named `'stripe'` payments provider. */
 export declare function setupPaymentsStripe(): void;
+/**
+ * Registers `@molecule/api-payments-capture` (a payments vendor simulated in
+ * memory: checkouts complete at once, signed local webhooks) under the name
+ * `'stripe'` — the name {@link setupPaymentsStripe} uses — so the billing
+ * router, the `/users/:id/verify-payment/stripe` and
+ * `/users/payment-notification/stripe` routes, and the plan catalogue's
+ * `platformKey` work unchanged. Grants plans without taking money: bond it in
+ * a development / browser profile only, never in production.
+ *
+ * `@molecule/api-payments-capture` is an OPTIONAL peer, imported lazily.
+ */
+export declare function setupPaymentsCapture(): Promise<void>;
 /** Registers the plan + paymentRecord services from `@molecule/api-resource-payment`. */
 export declare function setupServicePayment(): void;
 /** Wires `@molecule/api-search-meilisearch` to `@molecule/api-search`. */

package/dist/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoEH,kEAAkE;AAClE,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,IAAI,IAAI,CAG9C;AAED,qEAAqE;AACrE,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED,sGAAsG;AACtG,wBAAgB,gCAAgC,IAAI,IAAI,CAGvD;AAED,0GAA0G;AAC1G,wBAAgB,kCAAkC,IAAI,IAAI,CAGzD;AAED,wFAAwF;AACxF,wBAAgB,0BAA0B,IAAI,IAAI,CAGjD;AAED,yEAAyE;AACzE,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,oEAAoE;AACpE,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,IAAI,IAAI,CAOzC;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C;AAED,0EAA0E;AAC1E,wBAAgB,sBAAsB,IAAI,IAAI,CAO7C;AAED,mEAAmE;AACnE,wBAAgB,cAAc,IAAI,IAAI,CAYrC;AAED,kEAAkE;AAClE,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAMrD;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM5D;AAED,6EAA6E;AAC7E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM5D;AAED,2EAA2E;AAC3E,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAe3D;AAED,qEAAqE;AACrE,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAcrD;AAED,sEAAsE;AACtE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CActD;AAED,oEAAoE;AACpE,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMvD;AAED,0EAA0E;AAC1E,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMxD;AAED,+FAA+F;AAC/F,wBAAsB,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC,CAenE;AAED,gFAAgF;AAChF,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM1D;AAED,mFAAmF;AACnF,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGtD;AAED,qEAAqE;AACrE,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMxD;AAED,+DAA+D;AAC/D,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpD;AAED,2FAA2F;AAC3F,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAO9D;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAe5D;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM9D;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM/D;AAED,kEAAkE;AAClE,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAerD;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMtD;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAWrD;AAsBD,6EAA6E;AAC7E,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CASnD;AAED,mFAAmF;AACnF,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAU7D;AAED,qEAAqE;AACrE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMtD;AAED,yFAAyF;AACzF,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC,CAMhE;AAED,2EAA2E;AAC3E,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAWzD;AAED,2EAA2E;AAC3E,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM3D;AAED,gEAAgE;AAChE,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpD;AAED,qGAAqG;AACrG,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAG/D;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAe5D;AAED,oFAAoF;AACpF,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM5D;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM1D"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoEH,kEAAkE;AAClE,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,IAAI,IAAI,CAG9C;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAIzD;AAED,qEAAqE;AACrE,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED,sGAAsG;AACtG,wBAAgB,gCAAgC,IAAI,IAAI,CAGvD;AAED,0GAA0G;AAC1G,wBAAgB,kCAAkC,IAAI,IAAI,CAGzD;AAED,wFAAwF;AACxF,wBAAgB,0BAA0B,IAAI,IAAI,CAGjD;AAED,yEAAyE;AACzE,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,oEAAoE;AACpE,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,IAAI,IAAI,CAOzC;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAG1D;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C;AAED,0EAA0E;AAC1E,wBAAgB,sBAAsB,IAAI,IAAI,CAO7C;AAED,mEAAmE;AACnE,wBAAgB,cAAc,IAAI,IAAI,CAYrC;AAED,kEAAkE;AAClE,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAMrD;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM5D;AAED,6EAA6E;AAC7E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM5D;AAED,2EAA2E;AAC3E,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAe3D;AAED,qEAAqE;AACrE,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAcrD;AAED,sEAAsE;AACtE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CActD;AAED,oEAAoE;AACpE,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMvD;AAED,0EAA0E;AAC1E,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMxD;AAED,+FAA+F;AAC/F,wBAAsB,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC,CAenE;AAED,gFAAgF;AAChF,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM1D;AAED,mFAAmF;AACnF,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGtD;AAED,qEAAqE;AACrE,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMxD;AAED,+DAA+D;AAC/D,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpD;AAED,2FAA2F;AAC3F,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAO9D;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAe5D;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM9D;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM/D;AAED,kEAAkE;AAClE,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAerD;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMtD;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAWrD;AAsBD,6EAA6E;AAC7E,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CASnD;AAED,mFAAmF;AACnF,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAU7D;AAED,qEAAqE;AACrE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMtD;AAED,yFAAyF;AACzF,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC,CAMhE;AAED,2EAA2E;AAC3E,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAWzD;AAED,2EAA2E;AAC3E,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM3D;AAED,gEAAgE;AAChE,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpD;AAED,qGAAqG;AACrG,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAG/D;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAe5D;AAED,oFAAoF;AACpF,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM5D;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAM1D"}

package/dist/setup.js

@@ -73,6 +73,27 @@ export function setupDatabasePostgresql() {
     setPool(dbPool);
     setStore(dbStore);
 }
+/**
+ * Wires `@molecule/api-database-pglite` (real Postgres compiled to
+ * WebAssembly, in-process) to `@molecule/api-database` — the database half of
+ * the zero-server "browser" profile. Same SQL, placeholders and error codes as
+ * the postgresql bond, so app code and migrations do not change.
+ *
+ * Binds the pglite package's DEFAULT pool, whose data directory comes from
+ * `PGLITE_DATA_DIR` (`memory://`, `idb://<name>`, or a filesystem path; the
+ * bond's Node default is `./data/pglite`). Run migrations with
+ * {@link createMigratorPglite}, which targets the same default pool — an
+ * in-memory database exists only inside that one instance, so the migrator
+ * and the app must share it.
+ *
+ * `@molecule/api-database-pglite` is an OPTIONAL peer, imported lazily, so a
+ * postgres-only app never needs it installed.
+ */
+export async function setupDatabasePglite() {
+    const { pool, store } = await import('@molecule/api-database-pglite');
+    setPool(pool);
+    setStore(store);
+}
 /** Wires `@molecule/api-jwt-jsonwebtoken` to `@molecule/api-jwt`. */
 export function setupJwtJsonwebtoken() {
     setJwt(jwtProvider);
@@ -117,10 +138,35 @@ export function setupEmailsMailgun() {
     }
     setEmails(emailsMailgunProvider);
 }
+/**
+ * Wires `@molecule/api-emails-capture` to `@molecule/api-emails`
+ * unconditionally — every message is captured in memory instead of sent.
+ * Unlike {@link setupEmailsMailgun}'s development fallback, this does not
+ * depend on `NODE_ENV` or on which env vars are missing, so a profile that
+ * selects it always gets it.
+ */
+export function setupEmailsCapture() {
+    setEmails(emailsCaptureProvider);
+}
 /** Registers `@molecule/api-payments-stripe` as a named `'stripe'` payments provider. */
 export function setupPaymentsStripe() {
     bond('payments', 'stripe', stripePaymentProvider);
 }
+/**
+ * Registers `@molecule/api-payments-capture` (a payments vendor simulated in
+ * memory: checkouts complete at once, signed local webhooks) under the name
+ * `'stripe'` — the name {@link setupPaymentsStripe} uses — so the billing
+ * router, the `/users/:id/verify-payment/stripe` and
+ * `/users/payment-notification/stripe` routes, and the plan catalogue's
+ * `platformKey` work unchanged. Grants plans without taking money: bond it in
+ * a development / browser profile only, never in production.
+ *
+ * `@molecule/api-payments-capture` is an OPTIONAL peer, imported lazily.
+ */
+export async function setupPaymentsCapture() {
+    const { provider } = await import('@molecule/api-payments-capture');
+    bond('payments', 'stripe', provider);
+}
 /** Registers the plan + paymentRecord services from `@molecule/api-resource-payment`. */
 export function setupServicePayment() {
     bond('plans', planService);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/api-bonds-default-express",
-  "version": "1.0.3",
+  "version": "1.1.0",
   "description": "Default API bond setup for Express-based apps. Provides setup functions for the 10 byte-identical bond wirings shared across the molecule fleet — config-env, database-postgresql, jwt-jsonwebtoken, middleware-{body-parser,cookie-parser,cors}-express, password-bcrypt, secrets-env, service-device, two-factor-otplib.",
   "homepage": "https://www.molecule.dev/packages/api-bonds-default-express",
   "dependencies": {
@@ -57,6 +57,7 @@
     "@molecule/api-cron": "1.0.3",
     "@molecule/api-cron-node-cron": "1.0.2",
     "@molecule/api-database": "1.0.2",
+    "@molecule/api-database-pglite": "1.0.0",
     "@molecule/api-database-postgresql": "1.0.5",
     "@molecule/api-emails": "1.0.2",
     "@molecule/api-emails-capture": "1.0.3",
@@ -75,7 +76,7 @@
     "@molecule/api-http-fetch": "1.0.2",
     "@molecule/api-i18n": "1.0.3",
     "@molecule/api-image": "1.0.2",
-    "@molecule/api-image-sharp": "1.0.3",
+    "@molecule/api-image-sharp": "1.0.4",
     "@molecule/api-import-export": "1.0.3",
     "@molecule/api-import-export-csv": "1.0.2",
     "@molecule/api-jwt": "1.0.3",
@@ -94,6 +95,7 @@
     "@molecule/api-password": "1.0.2",
     "@molecule/api-password-bcrypt": "1.0.3",
     "@molecule/api-payments": "1.2.1",
+    "@molecule/api-payments-capture": "1.0.0",
     "@molecule/api-payments-stripe": "1.2.6",
     "@molecule/api-pdf": "1.0.2",
     "@molecule/api-pdf-pdfkit": "1.0.2",
@@ -159,6 +161,7 @@
     "@molecule/api-cron": "^1.0.1",
     "@molecule/api-cron-node-cron": "^1.0.1",
     "@molecule/api-database": "^1.0.1",
+    "@molecule/api-database-pglite": "^1.0.0",
     "@molecule/api-database-postgresql": "^1.0.1",
     "@molecule/api-emails": "^1.0.1",
     "@molecule/api-emails-capture": "^1.0.1",
@@ -196,6 +199,7 @@
     "@molecule/api-password": "^1.0.1",
     "@molecule/api-password-bcrypt": "^1.0.1",
     "@molecule/api-payments": "^1.0.1",
+    "@molecule/api-payments-capture": "^1.0.0",
     "@molecule/api-payments-stripe": "^1.0.1",
     "@molecule/api-pdf": "^1.0.1",
     "@molecule/api-pdf-pdfkit": "^1.0.1",
@@ -386,6 +390,12 @@
     },
     "@molecule/api-media-streaming-hls": {
       "optional": true
+    },
+    "@molecule/api-database-pglite": {
+      "optional": true
+    },
+    "@molecule/api-payments-capture": {
+      "optional": true
     }
   }
 }