@palbase/backend 12.0.0 → 13.0.0

package/docs/events.md

@@ -62,7 +62,11 @@ export default class StripeWebhook {
 ```
 
 `provider` selects a preset signature scheme; a service with no preset spells
-one out with `signature` instead — one of the two is required. The signing
+one out with `signature` instead — EXACTLY one of the two is required (neither
+is an unverifiable endpoint; both is ambiguous, and only `provider` would be
+used, so both are refused at build). `/webhooks` is a reserved path: a
+controller route resolving under it is refused too, because the platform matches
+that path before controller dispatch. The signing
 secret is resolved by the runtime from `secret: { env: "NAME" }`; your
 handlers access Environment variables via `meta.env`. The runtime verifies the
 signature before dispatching to your event handlers.

package/docs/llms-full.txt

@@ -1401,9 +1401,8 @@ to drive live chat, presence, dashboards, and other push features.
 
 A `Resource` models one external connection — a pooled datastore, a stateless
 API client, or a per-user factory. You put it in `resources/`, export an
-instance, and **do not register it**: the framework discovers it, sets it up
-once at boot, and drains it on shutdown. On top of that lifecycle you expose
-your own clean facade.
+instance, and **do not register it**: the framework discovers it and sets it up
+once at boot. On top of that lifecycle you expose your own clean facade.
 
 ```ts
 import { Resource } from "@palbase/backend";
@@ -1413,13 +1412,20 @@ import { Resource } from "@palbase/backend";
 
 A resource is created once at process boot — NOT per request. The framework:
 
-1. calls `init(env)` **once**, with only the secrets the resource declared;
-2. (optionally) calls `shutdown()` on SIGTERM, in reverse boot order.
+1. calls `init(env)` **once**, with only the secrets the resource declared.
+
+That is the whole lifecycle — there is no teardown counterpart. The runtime
+recycles an environment by disposing its isolate outright, with no signal
+delivered into your code first, so a `shutdown()` you declare is **never
+called**. Do not buffer in memory intending to flush on the way out; treat a
+write as durable when the call that made it returns. The optional `shutdown()`
+member survives in the type because the older process-based runtime did invoke
+it on SIGTERM.
 
 The instance lives for the whole process; your facade methods are called
 per-request. This makes "reconnect on every request" structurally impossible.
 
-## Pooled datastore — `init` + `shutdown`
+## Pooled datastore
 
 ```ts
 import { Resource } from "@palbase/backend";
@@ -1431,9 +1437,6 @@ export class Neo4jResource extends Resource {
   async init(env: { NEO4J_URL: string; NEO4J_USER: string; NEO4J_PASSWORD: string }) {
     this.driver = neo4j.driver(env.NEO4J_URL, neo4j.auth.basic(env.NEO4J_USER, env.NEO4J_PASSWORD));
   }
-  async shutdown() {
-    await this.driver.close();
-  }
   session(): Session {
     return this.driver.session();
   }
@@ -1685,7 +1688,11 @@ export default class StripeWebhook {
 ```
 
 `provider` selects a preset signature scheme; a service with no preset spells
-one out with `signature` instead — one of the two is required. The signing
+one out with `signature` instead — EXACTLY one of the two is required (neither
+is an unverifiable endpoint; both is ambiguous, and only `provider` would be
+used, so both are refused at build). `/webhooks` is a reserved path: a
+controller route resolving under it is refused too, because the platform matches
+that path before controller dispatch. The signing
 secret is resolved by the runtime from `secret: { env: "NAME" }`; your
 handlers access Environment variables via `meta.env`. The runtime verifies the
 signature before dispatching to your event handlers.

package/docs/resources.md

@@ -2,9 +2,8 @@
 
 A `Resource` models one external connection — a pooled datastore, a stateless
 API client, or a per-user factory. You put it in `resources/`, export an
-instance, and **do not register it**: the framework discovers it, sets it up
-once at boot, and drains it on shutdown. On top of that lifecycle you expose
-your own clean facade.
+instance, and **do not register it**: the framework discovers it and sets it up
+once at boot. On top of that lifecycle you expose your own clean facade.
 
 ```ts
 import { Resource } from "@palbase/backend";
@@ -14,13 +13,20 @@ import { Resource } from "@palbase/backend";
 
 A resource is created once at process boot — NOT per request. The framework:
 
-1. calls `init(env)` **once**, with only the secrets the resource declared;
-2. (optionally) calls `shutdown()` on SIGTERM, in reverse boot order.
+1. calls `init(env)` **once**, with only the secrets the resource declared.
+
+That is the whole lifecycle — there is no teardown counterpart. The runtime
+recycles an environment by disposing its isolate outright, with no signal
+delivered into your code first, so a `shutdown()` you declare is **never
+called**. Do not buffer in memory intending to flush on the way out; treat a
+write as durable when the call that made it returns. The optional `shutdown()`
+member survives in the type because the older process-based runtime did invoke
+it on SIGTERM.
 
 The instance lives for the whole process; your facade methods are called
 per-request. This makes "reconnect on every request" structurally impossible.
 
-## Pooled datastore — `init` + `shutdown`
+## Pooled datastore
 
 ```ts
 import { Resource } from "@palbase/backend";
@@ -32,9 +38,6 @@ export class Neo4jResource extends Resource {
   async init(env: { NEO4J_URL: string; NEO4J_USER: string; NEO4J_PASSWORD: string }) {
     this.driver = neo4j.driver(env.NEO4J_URL, neo4j.auth.basic(env.NEO4J_USER, env.NEO4J_PASSWORD));
   }
-  async shutdown() {
-    await this.driver.close();
-  }
   session(): Session {
     return this.driver.session();
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@palbase/backend",
-  "version": "12.0.0",
+  "version": "13.0.0",
   "description": "Palbase Backend SDK — class controllers (@Controller/@Get/@Post + @Body/@QueryParams/@Param), error classes, schema DSL",
   "license": "MIT",
   "repository": {