@palbase/backend 10.3.0 → 12.0.0

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError, U as User$1 } from './endpoint-92kVepng.cjs';
-export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Middleware, o as MiddlewareContext, p as MiddlewareHandler, N as NotFound, P as PBRequest, q as PalError, r as PalbaseAnalyticsClient, s as PalbaseAnalyticsManagementNamespace, t as PalbaseAnalyticsProperties, u as PalbaseAnalyticsQueryNamespace, v as PalbaseAttestAndroidParams, w as PalbaseAttestAndroidResult, x as PalbaseAttestiOSParams, y as PalbaseAttestiOSResult, z as PalbaseAuthClient, G as PalbaseBatchOverrideOperation, I as PalbaseBatchSetOverridesResult, J as PalbaseBindDeviceParams, K as PalbaseBucketClient, O as PalbaseClearAllOverridesResult, S as PalbaseClearOverrideResult, T as PalbaseCohortQueryInput, V as PalbaseCohortResult, W as PalbaseCollectionRef, X as PalbaseCountQueryInput, Y as PalbaseCountResult, Z as PalbaseCreateLinkParams, _ as PalbaseDeviceInfo, $ as PalbaseDeviceTokenView, a0 as PalbaseDocumentRef, a1 as PalbaseDocumentSnapshot, a2 as PalbaseEmailClient, a3 as PalbaseEmailSendParams, a4 as PalbaseEmailSendResponse, a5 as PalbaseEventNamesResult, a6 as PalbaseEventsQueryInput, a7 as PalbaseEventsResult, a8 as PalbaseFileObject, a9 as PalbaseFlag, aa as PalbaseFlagContext, ab as PalbaseFlagSource, ac as PalbaseFlagValue, ad as PalbaseFlagVariant, ae as PalbaseFlagsServiceClient, af as PalbaseFunctionsClient, ag as PalbaseFunnelQueryInput, ah as PalbaseFunnelResult, ai as PalbaseIdentifyTraits, aj as PalbaseInboxClient, ak as PalbaseInboxListOptions, al as PalbaseInboxListResult, am as PalbaseInboxMessage, an as PalbaseInboxSendParams, ao as PalbaseInboxSendResponse, ap as PalbaseInitialLink, aq as PalbaseInvokeOptions, ar as PalbaseLink, as as PalbaseLinkAnalytics, at as PalbaseLinkDetails, au as PalbaseLinksClient, av as PalbaseListLinksOptions, aw as PalbaseListLinksResult, ax as PalbaseListOptions, ay as PalbaseMatchParams, az as PalbaseMultiChannelResponse, aA as PalbaseOverviewResult, aB as PalbasePreferences, aC as PalbasePreferencesClient, aD as PalbasePublicUrlResponse, aE as PalbasePushClient, aF as PalbasePushSendParams, aG as PalbasePushSendResponse, aH as PalbaseQrCodeOptions, aI as PalbaseQuerySnapshot, aJ as PalbaseRegisterDeviceParams, aK as PalbaseResult, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, b1 as TooManyRequests, b2 as TxClient, b3 as Unauthorized, b4 as VerifiedDevice, b5 as defineMiddleware } from './endpoint-92kVepng.cjs';
+import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError, U as User$1 } from './endpoint-Ck4hER_7.cjs';
+export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Materialized, o as Middleware, p as MiddlewareContext, q as MiddlewareHandler, N as NotFound, P as PBRequest, r as PalError, s as PalbaseAnalyticsClient, t as PalbaseAnalyticsManagementNamespace, u as PalbaseAnalyticsProperties, v as PalbaseAnalyticsQueryNamespace, w as PalbaseAttestAndroidParams, x as PalbaseAttestAndroidResult, y as PalbaseAttestiOSParams, z as PalbaseAttestiOSResult, G as PalbaseAuthClient, I as PalbaseBatchOverrideOperation, J as PalbaseBatchSetOverridesResult, K as PalbaseBindDeviceParams, O as PalbaseBucketClient, S as PalbaseClearAllOverridesResult, T as PalbaseClearOverrideResult, V as PalbaseCohortQueryInput, W as PalbaseCohortResult, X as PalbaseCollectionRef, Y as PalbaseCountQueryInput, Z as PalbaseCountResult, _ as PalbaseCreateLinkParams, $ as PalbaseDeviceInfo, a0 as PalbaseDeviceTokenView, a1 as PalbaseDocumentRef, a2 as PalbaseDocumentSnapshot, a3 as PalbaseEmailClient, a4 as PalbaseEmailSendParams, a5 as PalbaseEmailSendResponse, a6 as PalbaseEventNamesResult, a7 as PalbaseEventsQueryInput, a8 as PalbaseEventsResult, a9 as PalbaseFileObject, aa as PalbaseFlag, ab as PalbaseFlagContext, ac as PalbaseFlagSource, ad as PalbaseFlagValue, ae as PalbaseFlagVariant, af as PalbaseFlagsServiceClient, ag as PalbaseFunctionsClient, ah as PalbaseFunnelQueryInput, ai as PalbaseFunnelResult, aj as PalbaseIdentifyTraits, ak as PalbaseInboxClient, al as PalbaseInboxListOptions, am as PalbaseInboxListResult, an as PalbaseInboxMessage, ao as PalbaseInboxSendParams, ap as PalbaseInboxSendResponse, aq as PalbaseInitialLink, ar as PalbaseInvokeOptions, as as PalbaseLink, at as PalbaseLinkAnalytics, au as PalbaseLinkDetails, av as PalbaseLinksClient, aw as PalbaseListLinksOptions, ax as PalbaseListLinksResult, ay as PalbaseListOptions, az as PalbaseMatchParams, aA as PalbaseMultiChannelResponse, aB as PalbaseOverviewResult, aC as PalbasePreferences, aD as PalbasePreferencesClient, aE as PalbasePublicUrlResponse, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, aK as PalbaseRegisterDeviceParams, aL as PalbaseResult, aM as PalbaseRetentionQueryInput, aN as PalbaseRetentionResult, aO as PalbaseSession, aP as PalbaseSetOverrideResult, aQ as PalbaseSetOverridesResult, aR as PalbaseSignedUrlResponse, aS as PalbaseSmsClient, aT as PalbaseSmsSendParams, aU as PalbaseSmsSendResponse, aV as PalbaseTransformOptions, aW as PalbaseUpdateLinkParams, aX as PalbaseUploadOptions, aY as PalbaseUser, aZ as PalbaseUserDetailResult, a_ as PalbaseUsersQueryInput, a$ as PalbaseUsersResult, b0 as PalbaseVerifyRequestSignatureParams, b1 as PalbaseWhereOperator, b2 as Ref, b3 as TooManyRequests, b4 as TxColumnExpr, b5 as TxInsertShape, b6 as TxInsertValue, b7 as TxNow, b8 as TxPlanBody, b9 as TxPlanError, ba as TxPlanHandle, bb as TxPlanOpResult, bc as TxPlanRejection, bd as TxPlanResponse, be as TxRefError, bf as TxRow, bg as TxRows, bh as TxSelectOptions, bi as TxSetShape, bj as TxSetValue, bk as TxTable, bl as TxWhere, bm as TxWireExpr, bn as TxWireGuard, bo as TxWireOp, bp as TxWireRef, bq as TxWireValue, br as Unauthorized, bs as VerifiedDevice, bt as dec, bu as defineMiddleware, bv as inc, bw as now } from './endpoint-Ck4hER_7.cjs';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { E as EnvTypedDatabase, S as SchemaDef } from './index-BaHs33jr.cjs';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, h as EnvTypedTx, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, o as SchemaInput, T as TableDef, p as TableInput, q as TypedDB, r as TypedTable, s as TypedTx, t as bigint, u as boolean, v as defineSchema, w as enumType, x as integer, y as isPalbaseExtension, z as jsonb, A as makeTypedDB, B as numeric, D as policy, F as raw, G as text, H as timestamp, J as uuid } from './index-BaHs33jr.cjs';
+import { E as EnvTypedDatabase, S as SchemaDef } from './index-BJAf1uPC.cjs';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, h as PalbaseExtension, i as PolicyBuilder, j as PolicyCommand, k as PolicyDef, l as PolicyMode, R as RawConstraintDef, m as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TxPlan, q as TxTables, r as TypedDB, s as TypedTable, t as TypedTx, u as bigint, v as boolean, w as defineSchema, x as enumType, y as integer, z as isPalbaseExtension, A as jsonb, B as makeTypedDB, D as numeric, F as policy, G as raw, H as text, J as timestamp, K as uuid } from './index-BJAf1uPC.cjs';
 import { EntitlementKey, LimitKey } from './purchases/keys.cjs';
 import { TableTypes, Tables } from './db/env.cjs';
 import { ZodTypeAny, z } from 'zod';
@@ -1459,43 +1459,6 @@ interface JobMeta {
     /** The globally unique Environment runtime identifier. */
     environmentId: string;
 }
-/** Configuration for defining a scheduled job. */
-interface JobConfig {
-    /** Unique job name — alphanumeric, underscore, hyphen only. */
-    name: string;
-    /** Cron expression (e.g., "0 3 * * *"). */
-    schedule: string;
-    /** Execution timeout in seconds. Defaults to 30. */
-    timeout?: number;
-    /** Job handler function. */
-    handler: (meta: JobMeta) => Promise<void>;
-}
-/** Resolved job configuration with defaults applied. */
-interface ResolvedJobConfig {
-    name: string;
-    schedule: string;
-    timeout: number;
-    handler: (meta: JobMeta) => Promise<void>;
-}
-/**
- * Define a scheduled cron job.
- *
- * Jobs are placed in the `jobs/` directory and auto-discovered at deploy time.
- *
- * @example
- * ```ts
- * export default defineJob({
- *   name: "cleanup-expired",
- *   schedule: "0 3 * * *", // every day at 3 AM
- *   timeout: 60,
- *   handler: async (meta) => {
- *     await Database.delete("sessions", "expired < NOW()");
- *     Log.info("Cleaned up expired sessions");
- *   },
- * });
- * ```
- */
-declare function defineJob(config: JobConfig): ResolvedJobConfig;
 
 /** Supported webhook provider types. */
 type WebhookProvider = "stripe" | "github" | "twilio" | "sendgrid" | "slack" | "discord" | "livekit";
@@ -1509,135 +1472,70 @@ interface WebhookMeta {
     /** The globally unique Environment runtime identifier. */
     environmentId: string;
 }
-/** Secret reference — resolves from environment variables at runtime. */
-interface EnvSecretRef {
-    env: string;
-}
-/** Provider-specific event maps for type-safe event handlers. */
-interface ProviderEventMap {
-    stripe: {
-        "checkout.session.completed": Record<string, unknown>;
-        "payment_intent.succeeded": Record<string, unknown>;
-        "payment_intent.payment_failed": Record<string, unknown>;
-        "customer.subscription.created": Record<string, unknown>;
-        "customer.subscription.updated": Record<string, unknown>;
-        "customer.subscription.deleted": Record<string, unknown>;
-        "invoice.paid": Record<string, unknown>;
-        "invoice.payment_failed": Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    github: {
-        push: Record<string, unknown>;
-        pull_request: Record<string, unknown>;
-        issues: Record<string, unknown>;
-        "pull_request.opened": Record<string, unknown>;
-        "pull_request.closed": Record<string, unknown>;
-        "pull_request.merged": Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    twilio: {
-        "message.received": Record<string, unknown>;
-        "message.sent": Record<string, unknown>;
-        "call.completed": Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    sendgrid: {
-        delivered: Record<string, unknown>;
-        bounce: Record<string, unknown>;
-        open: Record<string, unknown>;
-        click: Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    slack: {
-        url_verification: Record<string, unknown>;
-        event_callback: Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    discord: {
-        PING: Record<string, unknown>;
-        MESSAGE_CREATE: Record<string, unknown>;
-        INTERACTION_CREATE: Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    livekit: {
-        "room.started": Record<string, unknown>;
-        "room.finished": Record<string, unknown>;
-        "participant.joined": Record<string, unknown>;
-        "participant.left": Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-}
-/** Event handler function type. */
-type WebhookEventHandler<TEvent = Record<string, unknown>> = (event: TEvent, meta: WebhookMeta) => Promise<void>;
-/** Provider-based webhook configuration. */
-interface ProviderWebhookConfig<P extends WebhookProvider = WebhookProvider> {
-    provider: P;
-    secret: EnvSecretRef;
-    events: {
-        [K in keyof ProviderEventMap[P]]?: WebhookEventHandler<ProviderEventMap[P][K]>;
-    };
-}
-/** Incoming request representation for custom verify functions. */
+/** Raw incoming request representation, read by signature verification. */
 interface WebhookRequest {
     headers: Record<string, string>;
     body: string;
     method: string;
     url: string;
 }
-/** Custom webhook configuration. */
-interface CustomWebhookConfig {
-    path: string;
-    verify?: (req: WebhookRequest) => Promise<boolean> | boolean;
-    handler: (payload: Record<string, unknown>, meta: WebhookMeta) => Promise<void>;
-}
-/** Resolved provider webhook (internal). */
-interface ResolvedProviderWebhook<P extends WebhookProvider = WebhookProvider> {
-    type: "provider";
-    provider: P;
-    secret: EnvSecretRef;
+
+/** A signature scheme spelled out, for a service with no preset. The presets
+ * (`provider`) are named configurations of this same shape. */
+interface SignatureSpec {
+    /** Header carrying the signature. */
+    header: string;
+    /** Stripped before comparison (e.g. `sha256=`). Omit when absent. */
+    prefix?: string;
+    algo: "hmac-sha256" | "hmac-sha1";
+    encoding: "hex" | "base64";
+    /** What the HMAC covers. Exactly two placeholders: `{body}` and `{ts}`.
+     * Everything else is literal. `{ts}` requires `timestampHeader` and brings
+     * the five-minute replay window with it. */
+    signs: string;
+    timestampHeader?: string;
+}
+interface WebhookOptions {
+    provider?: WebhookProvider;
+    signature?: SignatureSpec;
+    /** Env-var REFERENCE for the signing secret — the platform never holds it. */
+    secret: {
+        env: string;
+    };
+}
+type WebhookEventHandler = (event: unknown, meta: WebhookMeta) => Promise<void>;
+interface ResolvedWebhook {
+    provider?: WebhookProvider;
+    signature?: SignatureSpec;
+    secret: {
+        env: string;
+    };
     events: Record<string, WebhookEventHandler>;
 }
-/** Resolved custom webhook (internal). */
-interface ResolvedCustomWebhook {
-    type: "custom";
-    path: string;
-    verify?: (req: WebhookRequest) => Promise<boolean> | boolean;
-    handler: (payload: Record<string, unknown>, meta: WebhookMeta) => Promise<void>;
+/** Mark a class as an inbound webhook. The mount name is the FILE name — there
+ * is deliberately no `name` option, because the file name IS the public URL. */
+declare function Webhook(options: WebhookOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
+/** Bind a method to one event name. Any string is valid: presets provide
+ * autocomplete, never a constraint, because we do not carry provider catalogs. */
+declare function On(event: string): (target: object, fnName: string | symbol) => void;
+/** Read a decorated class back as the resolved config the runtime consumes.
+ * Every misuse throws HERE, at build time, rather than becoming a webhook that
+ * answers 200 and does nothing. */
+declare function getWebhookConfig(ctor: object): ResolvedWebhook;
+
+interface JobOptions {
+    /** Cron expression, five fields (e.g. "0 3 * * *"). */
+    schedule: string;
+    /** Execution timeout in seconds. Defaults to 30, ceiling 300 (sandbox limit). */
+    timeout?: number;
 }
-/** Union of resolved webhook types. */
-type ResolvedWebhookConfig = ResolvedProviderWebhook | ResolvedCustomWebhook;
-/**
- * Define a provider-based webhook.
- *
- * @example
- * ```ts
- * export default defineWebhook({
- *   provider: "stripe",
- *   secret: { env: "STRIPE_WEBHOOK_SECRET" },
- *   events: {
- *     "checkout.session.completed": async (event, meta) => {
- *       await Database.insert("orders", { status: "paid" });
- *     },
- *   },
- * });
- * ```
- */
-declare function defineWebhook<P extends WebhookProvider>(config: ProviderWebhookConfig<P>): ResolvedProviderWebhook<P>;
-/**
- * Define a custom webhook with optional verification.
- *
- * @example
- * ```ts
- * export default defineWebhook({
- *   path: "/webhooks/livekit",
- *   verify: async (req) => req.headers["x-api-key"] === "secret",
- *   handler: async (payload, meta) => {
- *     Log.info("Received webhook", payload);
- *   },
- * });
- * ```
- */
-declare function defineWebhook(config: CustomWebhookConfig): ResolvedCustomWebhook;
+interface ResolvedJob {
+    schedule: string;
+    timeout: number;
+    handler: (meta: JobMeta) => Promise<void>;
+}
+declare function Job(options: JobOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
+declare function getJobConfig(ctor: object): ResolvedJob;
 
 /**
  * resource.ts — external connections as lifecycle-managed classes.
@@ -1848,4 +1746,4 @@ declare const documents: {
     onDocumentDeleted(handler: HookHandler<DocumentDeletedEvent>): ResolvedHook<DocumentDeletedEvent>;
 };
 
-export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, type CustomWebhookConfig, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, type EgressConfig, type EgressInput, EntitlementKey, type EnvSecretRef, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, type JobConfig, type JobMeta, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderEventMap, type ProviderName, type ProviderOptions, type ProviderWebhookConfig, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedCustomWebhook, type ResolvedHook, type ResolvedJobConfig, type ResolvedProviderWebhook, type ResolvedWebhookConfig, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, User$1 as UserT, type WebhookEventHandler, type WebhookMeta, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineJob, defineNotifications, defineStorage, defineTestUsers, defineWebhook, defineWorker, documents, entitlementFor, flag, getErrorRegistry, getRoutes, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };
+export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, type EgressConfig, type EgressInput, EntitlementKey, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, Job, type JobMeta, type JobOptions, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, On, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderName, type ProviderOptions, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedHook, type ResolvedJob, type ResolvedWebhook, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SignatureSpec, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, User$1 as UserT, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineNotifications, defineStorage, defineTestUsers, defineWorker, documents, entitlementFor, flag, getErrorRegistry, getJobConfig, getRoutes, getWebhookConfig, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError, U as User$1 } from './endpoint-92kVepng.js';
-export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Middleware, o as MiddlewareContext, p as MiddlewareHandler, N as NotFound, P as PBRequest, q as PalError, r as PalbaseAnalyticsClient, s as PalbaseAnalyticsManagementNamespace, t as PalbaseAnalyticsProperties, u as PalbaseAnalyticsQueryNamespace, v as PalbaseAttestAndroidParams, w as PalbaseAttestAndroidResult, x as PalbaseAttestiOSParams, y as PalbaseAttestiOSResult, z as PalbaseAuthClient, G as PalbaseBatchOverrideOperation, I as PalbaseBatchSetOverridesResult, J as PalbaseBindDeviceParams, K as PalbaseBucketClient, O as PalbaseClearAllOverridesResult, S as PalbaseClearOverrideResult, T as PalbaseCohortQueryInput, V as PalbaseCohortResult, W as PalbaseCollectionRef, X as PalbaseCountQueryInput, Y as PalbaseCountResult, Z as PalbaseCreateLinkParams, _ as PalbaseDeviceInfo, $ as PalbaseDeviceTokenView, a0 as PalbaseDocumentRef, a1 as PalbaseDocumentSnapshot, a2 as PalbaseEmailClient, a3 as PalbaseEmailSendParams, a4 as PalbaseEmailSendResponse, a5 as PalbaseEventNamesResult, a6 as PalbaseEventsQueryInput, a7 as PalbaseEventsResult, a8 as PalbaseFileObject, a9 as PalbaseFlag, aa as PalbaseFlagContext, ab as PalbaseFlagSource, ac as PalbaseFlagValue, ad as PalbaseFlagVariant, ae as PalbaseFlagsServiceClient, af as PalbaseFunctionsClient, ag as PalbaseFunnelQueryInput, ah as PalbaseFunnelResult, ai as PalbaseIdentifyTraits, aj as PalbaseInboxClient, ak as PalbaseInboxListOptions, al as PalbaseInboxListResult, am as PalbaseInboxMessage, an as PalbaseInboxSendParams, ao as PalbaseInboxSendResponse, ap as PalbaseInitialLink, aq as PalbaseInvokeOptions, ar as PalbaseLink, as as PalbaseLinkAnalytics, at as PalbaseLinkDetails, au as PalbaseLinksClient, av as PalbaseListLinksOptions, aw as PalbaseListLinksResult, ax as PalbaseListOptions, ay as PalbaseMatchParams, az as PalbaseMultiChannelResponse, aA as PalbaseOverviewResult, aB as PalbasePreferences, aC as PalbasePreferencesClient, aD as PalbasePublicUrlResponse, aE as PalbasePushClient, aF as PalbasePushSendParams, aG as PalbasePushSendResponse, aH as PalbaseQrCodeOptions, aI as PalbaseQuerySnapshot, aJ as PalbaseRegisterDeviceParams, aK as PalbaseResult, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, b1 as TooManyRequests, b2 as TxClient, b3 as Unauthorized, b4 as VerifiedDevice, b5 as defineMiddleware } from './endpoint-92kVepng.js';
+import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError, U as User$1 } from './endpoint-Ck4hER_7.js';
+export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Materialized, o as Middleware, p as MiddlewareContext, q as MiddlewareHandler, N as NotFound, P as PBRequest, r as PalError, s as PalbaseAnalyticsClient, t as PalbaseAnalyticsManagementNamespace, u as PalbaseAnalyticsProperties, v as PalbaseAnalyticsQueryNamespace, w as PalbaseAttestAndroidParams, x as PalbaseAttestAndroidResult, y as PalbaseAttestiOSParams, z as PalbaseAttestiOSResult, G as PalbaseAuthClient, I as PalbaseBatchOverrideOperation, J as PalbaseBatchSetOverridesResult, K as PalbaseBindDeviceParams, O as PalbaseBucketClient, S as PalbaseClearAllOverridesResult, T as PalbaseClearOverrideResult, V as PalbaseCohortQueryInput, W as PalbaseCohortResult, X as PalbaseCollectionRef, Y as PalbaseCountQueryInput, Z as PalbaseCountResult, _ as PalbaseCreateLinkParams, $ as PalbaseDeviceInfo, a0 as PalbaseDeviceTokenView, a1 as PalbaseDocumentRef, a2 as PalbaseDocumentSnapshot, a3 as PalbaseEmailClient, a4 as PalbaseEmailSendParams, a5 as PalbaseEmailSendResponse, a6 as PalbaseEventNamesResult, a7 as PalbaseEventsQueryInput, a8 as PalbaseEventsResult, a9 as PalbaseFileObject, aa as PalbaseFlag, ab as PalbaseFlagContext, ac as PalbaseFlagSource, ad as PalbaseFlagValue, ae as PalbaseFlagVariant, af as PalbaseFlagsServiceClient, ag as PalbaseFunctionsClient, ah as PalbaseFunnelQueryInput, ai as PalbaseFunnelResult, aj as PalbaseIdentifyTraits, ak as PalbaseInboxClient, al as PalbaseInboxListOptions, am as PalbaseInboxListResult, an as PalbaseInboxMessage, ao as PalbaseInboxSendParams, ap as PalbaseInboxSendResponse, aq as PalbaseInitialLink, ar as PalbaseInvokeOptions, as as PalbaseLink, at as PalbaseLinkAnalytics, au as PalbaseLinkDetails, av as PalbaseLinksClient, aw as PalbaseListLinksOptions, ax as PalbaseListLinksResult, ay as PalbaseListOptions, az as PalbaseMatchParams, aA as PalbaseMultiChannelResponse, aB as PalbaseOverviewResult, aC as PalbasePreferences, aD as PalbasePreferencesClient, aE as PalbasePublicUrlResponse, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, aK as PalbaseRegisterDeviceParams, aL as PalbaseResult, aM as PalbaseRetentionQueryInput, aN as PalbaseRetentionResult, aO as PalbaseSession, aP as PalbaseSetOverrideResult, aQ as PalbaseSetOverridesResult, aR as PalbaseSignedUrlResponse, aS as PalbaseSmsClient, aT as PalbaseSmsSendParams, aU as PalbaseSmsSendResponse, aV as PalbaseTransformOptions, aW as PalbaseUpdateLinkParams, aX as PalbaseUploadOptions, aY as PalbaseUser, aZ as PalbaseUserDetailResult, a_ as PalbaseUsersQueryInput, a$ as PalbaseUsersResult, b0 as PalbaseVerifyRequestSignatureParams, b1 as PalbaseWhereOperator, b2 as Ref, b3 as TooManyRequests, b4 as TxColumnExpr, b5 as TxInsertShape, b6 as TxInsertValue, b7 as TxNow, b8 as TxPlanBody, b9 as TxPlanError, ba as TxPlanHandle, bb as TxPlanOpResult, bc as TxPlanRejection, bd as TxPlanResponse, be as TxRefError, bf as TxRow, bg as TxRows, bh as TxSelectOptions, bi as TxSetShape, bj as TxSetValue, bk as TxTable, bl as TxWhere, bm as TxWireExpr, bn as TxWireGuard, bo as TxWireOp, bp as TxWireRef, bq as TxWireValue, br as Unauthorized, bs as VerifiedDevice, bt as dec, bu as defineMiddleware, bv as inc, bw as now } from './endpoint-Ck4hER_7.js';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { E as EnvTypedDatabase, S as SchemaDef } from './index-DfryIw9U.js';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, h as EnvTypedTx, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, o as SchemaInput, T as TableDef, p as TableInput, q as TypedDB, r as TypedTable, s as TypedTx, t as bigint, u as boolean, v as defineSchema, w as enumType, x as integer, y as isPalbaseExtension, z as jsonb, A as makeTypedDB, B as numeric, D as policy, F as raw, G as text, H as timestamp, J as uuid } from './index-DfryIw9U.js';
+import { E as EnvTypedDatabase, S as SchemaDef } from './index-l7DhBDtn.js';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, h as PalbaseExtension, i as PolicyBuilder, j as PolicyCommand, k as PolicyDef, l as PolicyMode, R as RawConstraintDef, m as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TxPlan, q as TxTables, r as TypedDB, s as TypedTable, t as TypedTx, u as bigint, v as boolean, w as defineSchema, x as enumType, y as integer, z as isPalbaseExtension, A as jsonb, B as makeTypedDB, D as numeric, F as policy, G as raw, H as text, J as timestamp, K as uuid } from './index-l7DhBDtn.js';
 import { EntitlementKey, LimitKey } from './purchases/keys.js';
 import { TableTypes, Tables } from './db/env.js';
 import { ZodTypeAny, z } from 'zod';
@@ -1459,43 +1459,6 @@ interface JobMeta {
     /** The globally unique Environment runtime identifier. */
     environmentId: string;
 }
-/** Configuration for defining a scheduled job. */
-interface JobConfig {
-    /** Unique job name — alphanumeric, underscore, hyphen only. */
-    name: string;
-    /** Cron expression (e.g., "0 3 * * *"). */
-    schedule: string;
-    /** Execution timeout in seconds. Defaults to 30. */
-    timeout?: number;
-    /** Job handler function. */
-    handler: (meta: JobMeta) => Promise<void>;
-}
-/** Resolved job configuration with defaults applied. */
-interface ResolvedJobConfig {
-    name: string;
-    schedule: string;
-    timeout: number;
-    handler: (meta: JobMeta) => Promise<void>;
-}
-/**
- * Define a scheduled cron job.
- *
- * Jobs are placed in the `jobs/` directory and auto-discovered at deploy time.
- *
- * @example
- * ```ts
- * export default defineJob({
- *   name: "cleanup-expired",
- *   schedule: "0 3 * * *", // every day at 3 AM
- *   timeout: 60,
- *   handler: async (meta) => {
- *     await Database.delete("sessions", "expired < NOW()");
- *     Log.info("Cleaned up expired sessions");
- *   },
- * });
- * ```
- */
-declare function defineJob(config: JobConfig): ResolvedJobConfig;
 
 /** Supported webhook provider types. */
 type WebhookProvider = "stripe" | "github" | "twilio" | "sendgrid" | "slack" | "discord" | "livekit";
@@ -1509,135 +1472,70 @@ interface WebhookMeta {
     /** The globally unique Environment runtime identifier. */
     environmentId: string;
 }
-/** Secret reference — resolves from environment variables at runtime. */
-interface EnvSecretRef {
-    env: string;
-}
-/** Provider-specific event maps for type-safe event handlers. */
-interface ProviderEventMap {
-    stripe: {
-        "checkout.session.completed": Record<string, unknown>;
-        "payment_intent.succeeded": Record<string, unknown>;
-        "payment_intent.payment_failed": Record<string, unknown>;
-        "customer.subscription.created": Record<string, unknown>;
-        "customer.subscription.updated": Record<string, unknown>;
-        "customer.subscription.deleted": Record<string, unknown>;
-        "invoice.paid": Record<string, unknown>;
-        "invoice.payment_failed": Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    github: {
-        push: Record<string, unknown>;
-        pull_request: Record<string, unknown>;
-        issues: Record<string, unknown>;
-        "pull_request.opened": Record<string, unknown>;
-        "pull_request.closed": Record<string, unknown>;
-        "pull_request.merged": Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    twilio: {
-        "message.received": Record<string, unknown>;
-        "message.sent": Record<string, unknown>;
-        "call.completed": Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    sendgrid: {
-        delivered: Record<string, unknown>;
-        bounce: Record<string, unknown>;
-        open: Record<string, unknown>;
-        click: Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    slack: {
-        url_verification: Record<string, unknown>;
-        event_callback: Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    discord: {
-        PING: Record<string, unknown>;
-        MESSAGE_CREATE: Record<string, unknown>;
-        INTERACTION_CREATE: Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-    livekit: {
-        "room.started": Record<string, unknown>;
-        "room.finished": Record<string, unknown>;
-        "participant.joined": Record<string, unknown>;
-        "participant.left": Record<string, unknown>;
-        [key: string]: Record<string, unknown>;
-    };
-}
-/** Event handler function type. */
-type WebhookEventHandler<TEvent = Record<string, unknown>> = (event: TEvent, meta: WebhookMeta) => Promise<void>;
-/** Provider-based webhook configuration. */
-interface ProviderWebhookConfig<P extends WebhookProvider = WebhookProvider> {
-    provider: P;
-    secret: EnvSecretRef;
-    events: {
-        [K in keyof ProviderEventMap[P]]?: WebhookEventHandler<ProviderEventMap[P][K]>;
-    };
-}
-/** Incoming request representation for custom verify functions. */
+/** Raw incoming request representation, read by signature verification. */
 interface WebhookRequest {
     headers: Record<string, string>;
     body: string;
     method: string;
     url: string;
 }
-/** Custom webhook configuration. */
-interface CustomWebhookConfig {
-    path: string;
-    verify?: (req: WebhookRequest) => Promise<boolean> | boolean;
-    handler: (payload: Record<string, unknown>, meta: WebhookMeta) => Promise<void>;
-}
-/** Resolved provider webhook (internal). */
-interface ResolvedProviderWebhook<P extends WebhookProvider = WebhookProvider> {
-    type: "provider";
-    provider: P;
-    secret: EnvSecretRef;
+
+/** A signature scheme spelled out, for a service with no preset. The presets
+ * (`provider`) are named configurations of this same shape. */
+interface SignatureSpec {
+    /** Header carrying the signature. */
+    header: string;
+    /** Stripped before comparison (e.g. `sha256=`). Omit when absent. */
+    prefix?: string;
+    algo: "hmac-sha256" | "hmac-sha1";
+    encoding: "hex" | "base64";
+    /** What the HMAC covers. Exactly two placeholders: `{body}` and `{ts}`.
+     * Everything else is literal. `{ts}` requires `timestampHeader` and brings
+     * the five-minute replay window with it. */
+    signs: string;
+    timestampHeader?: string;
+}
+interface WebhookOptions {
+    provider?: WebhookProvider;
+    signature?: SignatureSpec;
+    /** Env-var REFERENCE for the signing secret — the platform never holds it. */
+    secret: {
+        env: string;
+    };
+}
+type WebhookEventHandler = (event: unknown, meta: WebhookMeta) => Promise<void>;
+interface ResolvedWebhook {
+    provider?: WebhookProvider;
+    signature?: SignatureSpec;
+    secret: {
+        env: string;
+    };
     events: Record<string, WebhookEventHandler>;
 }
-/** Resolved custom webhook (internal). */
-interface ResolvedCustomWebhook {
-    type: "custom";
-    path: string;
-    verify?: (req: WebhookRequest) => Promise<boolean> | boolean;
-    handler: (payload: Record<string, unknown>, meta: WebhookMeta) => Promise<void>;
+/** Mark a class as an inbound webhook. The mount name is the FILE name — there
+ * is deliberately no `name` option, because the file name IS the public URL. */
+declare function Webhook(options: WebhookOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
+/** Bind a method to one event name. Any string is valid: presets provide
+ * autocomplete, never a constraint, because we do not carry provider catalogs. */
+declare function On(event: string): (target: object, fnName: string | symbol) => void;
+/** Read a decorated class back as the resolved config the runtime consumes.
+ * Every misuse throws HERE, at build time, rather than becoming a webhook that
+ * answers 200 and does nothing. */
+declare function getWebhookConfig(ctor: object): ResolvedWebhook;
+
+interface JobOptions {
+    /** Cron expression, five fields (e.g. "0 3 * * *"). */
+    schedule: string;
+    /** Execution timeout in seconds. Defaults to 30, ceiling 300 (sandbox limit). */
+    timeout?: number;
 }
-/** Union of resolved webhook types. */
-type ResolvedWebhookConfig = ResolvedProviderWebhook | ResolvedCustomWebhook;
-/**
- * Define a provider-based webhook.
- *
- * @example
- * ```ts
- * export default defineWebhook({
- *   provider: "stripe",
- *   secret: { env: "STRIPE_WEBHOOK_SECRET" },
- *   events: {
- *     "checkout.session.completed": async (event, meta) => {
- *       await Database.insert("orders", { status: "paid" });
- *     },
- *   },
- * });
- * ```
- */
-declare function defineWebhook<P extends WebhookProvider>(config: ProviderWebhookConfig<P>): ResolvedProviderWebhook<P>;
-/**
- * Define a custom webhook with optional verification.
- *
- * @example
- * ```ts
- * export default defineWebhook({
- *   path: "/webhooks/livekit",
- *   verify: async (req) => req.headers["x-api-key"] === "secret",
- *   handler: async (payload, meta) => {
- *     Log.info("Received webhook", payload);
- *   },
- * });
- * ```
- */
-declare function defineWebhook(config: CustomWebhookConfig): ResolvedCustomWebhook;
+interface ResolvedJob {
+    schedule: string;
+    timeout: number;
+    handler: (meta: JobMeta) => Promise<void>;
+}
+declare function Job(options: JobOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
+declare function getJobConfig(ctor: object): ResolvedJob;
 
 /**
  * resource.ts — external connections as lifecycle-managed classes.
@@ -1848,4 +1746,4 @@ declare const documents: {
     onDocumentDeleted(handler: HookHandler<DocumentDeletedEvent>): ResolvedHook<DocumentDeletedEvent>;
 };
 
-export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, type CustomWebhookConfig, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, type EgressConfig, type EgressInput, EntitlementKey, type EnvSecretRef, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, type JobConfig, type JobMeta, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderEventMap, type ProviderName, type ProviderOptions, type ProviderWebhookConfig, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedCustomWebhook, type ResolvedHook, type ResolvedJobConfig, type ResolvedProviderWebhook, type ResolvedWebhookConfig, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, User$1 as UserT, type WebhookEventHandler, type WebhookMeta, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineJob, defineNotifications, defineStorage, defineTestUsers, defineWebhook, defineWorker, documents, entitlementFor, flag, getErrorRegistry, getRoutes, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };
+export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, type EgressConfig, type EgressInput, EntitlementKey, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, Job, type JobMeta, type JobOptions, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, On, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderName, type ProviderOptions, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedHook, type ResolvedJob, type ResolvedWebhook, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SignatureSpec, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, User$1 as UserT, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineNotifications, defineStorage, defineTestUsers, defineWorker, documents, entitlementFor, flag, getErrorRegistry, getJobConfig, getRoutes, getWebhookConfig, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };