@palbase/backend 12.0.1 → 14.0.0

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError, U as User$1 } from './endpoint-Ck4hER_7.cjs';
-export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Materialized, o as Middleware, p as MiddlewareContext, q as MiddlewareHandler, N as NotFound, P as PBRequest, r as PalError, s as PalbaseAnalyticsClient, t as PalbaseAnalyticsManagementNamespace, u as PalbaseAnalyticsProperties, v as PalbaseAnalyticsQueryNamespace, w as PalbaseAttestAndroidParams, x as PalbaseAttestAndroidResult, y as PalbaseAttestiOSParams, z as PalbaseAttestiOSResult, G as PalbaseAuthClient, I as PalbaseBatchOverrideOperation, J as PalbaseBatchSetOverridesResult, K as PalbaseBindDeviceParams, O as PalbaseBucketClient, S as PalbaseClearAllOverridesResult, T as PalbaseClearOverrideResult, V as PalbaseCohortQueryInput, W as PalbaseCohortResult, X as PalbaseCollectionRef, Y as PalbaseCountQueryInput, Z as PalbaseCountResult, _ as PalbaseCreateLinkParams, $ as PalbaseDeviceInfo, a0 as PalbaseDeviceTokenView, a1 as PalbaseDocumentRef, a2 as PalbaseDocumentSnapshot, a3 as PalbaseEmailClient, a4 as PalbaseEmailSendParams, a5 as PalbaseEmailSendResponse, a6 as PalbaseEventNamesResult, a7 as PalbaseEventsQueryInput, a8 as PalbaseEventsResult, a9 as PalbaseFileObject, aa as PalbaseFlag, ab as PalbaseFlagContext, ac as PalbaseFlagSource, ad as PalbaseFlagValue, ae as PalbaseFlagVariant, af as PalbaseFlagsServiceClient, ag as PalbaseFunctionsClient, ah as PalbaseFunnelQueryInput, ai as PalbaseFunnelResult, aj as PalbaseIdentifyTraits, ak as PalbaseInboxClient, al as PalbaseInboxListOptions, am as PalbaseInboxListResult, an as PalbaseInboxMessage, ao as PalbaseInboxSendParams, ap as PalbaseInboxSendResponse, aq as PalbaseInitialLink, ar as PalbaseInvokeOptions, as as PalbaseLink, at as PalbaseLinkAnalytics, au as PalbaseLinkDetails, av as PalbaseLinksClient, aw as PalbaseListLinksOptions, ax as PalbaseListLinksResult, ay as PalbaseListOptions, az as PalbaseMatchParams, aA as PalbaseMultiChannelResponse, aB as PalbaseOverviewResult, aC as PalbasePreferences, aD as PalbasePreferencesClient, aE as PalbasePublicUrlResponse, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, aK as PalbaseRegisterDeviceParams, aL as PalbaseResult, aM as PalbaseRetentionQueryInput, aN as PalbaseRetentionResult, aO as PalbaseSession, aP as PalbaseSetOverrideResult, aQ as PalbaseSetOverridesResult, aR as PalbaseSignedUrlResponse, aS as PalbaseSmsClient, aT as PalbaseSmsSendParams, aU as PalbaseSmsSendResponse, aV as PalbaseTransformOptions, aW as PalbaseUpdateLinkParams, aX as PalbaseUploadOptions, aY as PalbaseUser, aZ as PalbaseUserDetailResult, a_ as PalbaseUsersQueryInput, a$ as PalbaseUsersResult, b0 as PalbaseVerifyRequestSignatureParams, b1 as PalbaseWhereOperator, b2 as Ref, b3 as TooManyRequests, b4 as TxColumnExpr, b5 as TxInsertShape, b6 as TxInsertValue, b7 as TxNow, b8 as TxPlanBody, b9 as TxPlanError, ba as TxPlanHandle, bb as TxPlanOpResult, bc as TxPlanRejection, bd as TxPlanResponse, be as TxRefError, bf as TxRow, bg as TxRows, bh as TxSelectOptions, bi as TxSetShape, bj as TxSetValue, bk as TxTable, bl as TxWhere, bm as TxWireExpr, bn as TxWireGuard, bo as TxWireOp, bp as TxWireRef, bq as TxWireValue, br as Unauthorized, bs as VerifiedDevice, bt as dec, bu as defineMiddleware, bv as inc, bw as now } from './endpoint-Ck4hER_7.cjs';
+import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError } from './endpoint-CAWdScEH.cjs';
+export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Materialized, o as Middleware, p as MiddlewareContext, q as MiddlewareHandler, N as NotFound, P as PBRequest, r as PalError, s as PalbaseAnalyticsClient, t as PalbaseAnalyticsManagementNamespace, u as PalbaseAnalyticsProperties, v as PalbaseAnalyticsQueryNamespace, w as PalbaseAttestAndroidParams, x as PalbaseAttestAndroidResult, y as PalbaseAttestiOSParams, z as PalbaseAttestiOSResult, G as PalbaseAuthClient, I as PalbaseBatchOverrideOperation, J as PalbaseBatchSetOverridesResult, K as PalbaseBindDeviceParams, O as PalbaseBucketClient, Q as PalbaseClearAllOverridesResult, S as PalbaseClearOverrideResult, T as PalbaseCohortQueryInput, V as PalbaseCohortResult, W as PalbaseCollectionRef, X as PalbaseCountQueryInput, Y as PalbaseCountResult, Z as PalbaseCreateLinkParams, _ as PalbaseDeviceInfo, $ as PalbaseDeviceTokenView, a0 as PalbaseDocumentRef, a1 as PalbaseDocumentSnapshot, a2 as PalbaseEmailClient, a3 as PalbaseEmailSendParams, a4 as PalbaseEmailSendResponse, a5 as PalbaseEventNamesResult, a6 as PalbaseEventsQueryInput, a7 as PalbaseEventsResult, a8 as PalbaseFileObject, a9 as PalbaseFlag, aa as PalbaseFlagContext, ab as PalbaseFlagSource, ac as PalbaseFlagValue, ad as PalbaseFlagVariant, ae as PalbaseFlagsServiceClient, af as PalbaseFunctionsClient, ag as PalbaseFunnelQueryInput, ah as PalbaseFunnelResult, ai as PalbaseIdentifyTraits, aj as PalbaseInboxClient, ak as PalbaseInboxListOptions, al as PalbaseInboxListResult, am as PalbaseInboxMessage, an as PalbaseInboxSendParams, ao as PalbaseInboxSendResponse, ap as PalbaseInitialLink, aq as PalbaseInvokeOptions, ar as PalbaseLink, as as PalbaseLinkAnalytics, at as PalbaseLinkDetails, au as PalbaseLinksClient, av as PalbaseListLinksOptions, aw as PalbaseListLinksResult, ax as PalbaseListOptions, ay as PalbaseMatchParams, az as PalbaseMultiChannelResponse, aA as PalbaseOverviewResult, aB as PalbasePreferences, aC as PalbasePreferencesClient, aD as PalbasePublicUrlResponse, aE as PalbasePushClient, aF as PalbasePushSendParams, aG as PalbasePushSendResponse, aH as PalbaseQrCodeOptions, aI as PalbaseQuerySnapshot, aJ as PalbaseRegisterDeviceParams, aK as PalbaseResult, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, b1 as Ref, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, b7 as TxPlanBody, b8 as TxPlanError, b9 as TxPlanHandle, ba as TxPlanOpResult, bb as TxPlanRejection, bc as TxPlanResponse, bd as TxRefError, be as TxRow, bf as TxRows, bg as TxSelectOptions, bh as TxSetShape, bi as TxSetValue, bj as TxTable, bk as TxWhere, bl as TxWireExpr, bm as TxWireGuard, bn as TxWireOp, bo as TxWireRef, bp as TxWireValue, bq as Unauthorized, U as UserT, br as VerifiedDevice, bs as dec, bt as defineMiddleware, bu as inc, bv as now } from './endpoint-CAWdScEH.cjs';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { E as EnvTypedDatabase, S as SchemaDef } from './index-BJAf1uPC.cjs';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, h as PalbaseExtension, i as PolicyBuilder, j as PolicyCommand, k as PolicyDef, l as PolicyMode, R as RawConstraintDef, m as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TxPlan, q as TxTables, r as TypedDB, s as TypedTable, t as TypedTx, u as bigint, v as boolean, w as defineSchema, x as enumType, y as integer, z as isPalbaseExtension, A as jsonb, B as makeTypedDB, D as numeric, F as policy, G as raw, H as text, J as timestamp, K as uuid } from './index-BJAf1uPC.cjs';
+import { E as EnvTypedDatabase, S as SchemaDef } from './index-CaRM7qe_.cjs';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, h as PalbaseExtension, i as PolicyBuilder, j as PolicyCommand, k as PolicyDef, l as PolicyMode, R as RawConstraintDef, m as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TxPlan, q as TxTables, r as TypedDB, s as TypedTable, t as TypedTx, u as bigint, v as boolean, w as defineSchema, x as enumType, y as integer, z as isPalbaseExtension, A as jsonb, B as makeTypedDB, D as numeric, F as policy, G as raw, H as text, J as timestamp, K as uuid } from './index-CaRM7qe_.cjs';
 import { EntitlementKey, LimitKey } from './purchases/keys.cjs';
 import { TableTypes, Tables } from './db/env.cjs';
 import { ZodTypeAny, z } from 'zod';
@@ -117,7 +117,6 @@ interface RuntimeServices {
     Documents: PalbaseDocsClient;
     Storage: PalbaseStorageClient;
     Cache: CacheClient;
-    Queue: QueueClient;
     Log: Logger;
     Notifications: PalbaseNotificationsClient;
     Flags: PalbaseFlagsClient;
@@ -199,8 +198,6 @@ declare const Documents: PalbaseDocsClient;
 declare const Storage: PalbaseStorageClient;
 /** JSON-typed cache (get/set/incr/getOrSet). */
 declare const Cache: CacheClient;
-/** Background job queue. */
-declare const Queue: QueueClient;
 /** Structured logger. */
 declare const Log: Logger;
 /** Push / email / SMS / in-app notifications. */
@@ -504,18 +501,20 @@ declare function defineStorage(input: StorageInput): StorageConfig;
 /**
  * egress.ts — the tenant outbound-HTTP allowlist config-as-code DSL.
  *
- * `defineEgress({ hosts })` declares the external hosts a backend may fetch().
- * config/egress.ts default-exports it; the deploy evals it to JSON
- * (SchemaExtractor.EvaluateConfigFile → config_extract.js) and bakes the
- * allowlist into the artifact manifest → the isolate loader → Tenant.egressAllow.
- * The tenantFetch capability rejects any host NOT on it. NO config/egress.ts (or
- * an empty list) ⇒ the backend has NO outbound network — fail-closed.
+ * `defineEgress({ hosts, timeoutMs })` declares the external hosts a backend may
+ * fetch(), and how long a single call may take. config/egress.ts default-exports
+ * it; the deploy evals it to JSON (SchemaExtractor.EvaluateConfigFile →
+ * config_extract.js) and bakes both into the artifact manifest → the isolate
+ * loader → Tenant.egressAllow / Tenant.egressTimeoutMs. The tenantFetch
+ * capability rejects any host NOT on the list. NO config/egress.ts (or an empty
+ * list) ⇒ the backend has NO outbound network — fail-closed.
  *
  * @example
  *   // config/egress.ts
  *   import { defineEgress } from "@palbase/backend";
  *   export default defineEgress({
- *     hosts: ["api.open-meteo.com", "restcountries.com", "zenquotes.io"],
+ *     hosts: ["api.openai.com"],
+ *     timeoutMs: 90_000, // a slow LLM call; default 30_000
  *   });
  *
  * Each host is a bare hostname (no scheme/port/path/wildcard). A leading dot,
@@ -523,18 +522,43 @@ declare function defineStorage(input: StorageInput): StorageConfig;
  * https-only on :443; the deploy REJECTS a malformed / IP-literal / internal host
  * (fail-closed — a security allowlist is never best-effort).
  *
- * Emits: { __config: "egress", hosts: [...] }
+ * `timeoutMs` is a CEILING, not a grant: the call still ends when the INVOCATION
+ * ends. A job may run up to its own `@Job({ timeout })` (max 300s), while a
+ * request is additionally bounded by the gateway. Setting 300_000 on a route
+ * whose request dies earlier buys nothing — size it to the caller.
+ *
+ * Response bodies are BUFFERED whole (5 MB cap) before your fetch() resolves, so
+ * a streaming/SSE upstream gives you no partial output and no earlier
+ * first-byte: the entire stream must complete inside `timeoutMs`.
+ *
+ * Emits: { __config: "egress", hosts: [...], timeoutMs?: number }
  */
 /** The discriminant written under `__config` so the deploy eval knows the kind. */
 declare const EGRESS_CONFIG_KIND: "egress";
+/**
+ * Bounds on `timeoutMs`, duplicated (deliberately) in the deploy's
+ * ParseEgressConfig. This copy shapes the authoring error; that one is
+ * authoritative and fail-closed. They must agree — a value this accepts and the
+ * deploy rejects is a broken deploy the author cannot see coming.
+ */
+declare const EGRESS_TIMEOUT_MIN_MS = 1000;
+declare const EGRESS_TIMEOUT_MAX_MS = 300000;
+/** Applied when `timeoutMs` is omitted. Also spelled in the isolate capability. */
+declare const EGRESS_TIMEOUT_DEFAULT_MS = 30000;
 /** The author-facing input to defineEgress. */
 interface EgressInput {
     hosts: string[];
+    /**
+     * Per-call ceiling for an outbound fetch, in milliseconds.
+     * 1_000..300_000; omitted ⇒ 30_000.
+     */
+    timeoutMs?: number;
 }
 /** The evaluated config/egress.ts default export (what the deploy reads). */
 interface EgressConfig {
     __config: typeof EGRESS_CONFIG_KIND;
     hosts: string[];
+    timeoutMs?: number;
 }
 /**
  * Declare the backend's outbound-HTTP allowlist. Client-side this only shapes +
@@ -1396,61 +1420,6 @@ interface DefinedError {
 declare function defineError<S extends ZodTypeAny>(code: string, status: number, dataSchema: S): DefinedErrorWithData<S>;
 declare function defineError(code: string, status: number): DefinedError;
 
-/** Non-service, per-invocation data for background worker handlers.
- * Services (Database, Log, …) are imported as singletons, not passed here. */
-interface WorkerMeta {
-    /** Environment-scoped env vars. */
-    env: Record<string, string>;
-    /** The user that enqueued the job, if any (background jobs are usually system-initiated). */
-    user: User$1 | null;
-    /** Per-invocation id for correlation. */
-    requestId: string;
-    /** The globally unique Environment runtime identifier. */
-    environmentId: string;
-}
-/** Backoff strategy for worker retries. */
-type BackoffStrategy = "exponential" | "linear" | "fixed";
-/** Configuration for a background worker. */
-interface WorkerConfig<TPayload = unknown> {
-    /** Worker name — must be unique across the project. */
-    name: string;
-    /** Maximum number of retries before sending to dead letter queue. Defaults to 3. */
-    retry?: number;
-    /** Execution timeout in seconds. Defaults to 30. */
-    timeout?: number;
-    /** Backoff strategy between retries. Defaults to "exponential". */
-    backoff?: BackoffStrategy;
-    /** Handler function that processes the job payload. */
-    handler: (payload: TPayload, meta: WorkerMeta) => Promise<void>;
-}
-/** Resolved worker configuration with defaults applied. */
-interface ResolvedWorkerConfig<TPayload = unknown> {
-    name: string;
-    retry: number;
-    timeout: number;
-    backoff: BackoffStrategy;
-    handler: (payload: TPayload, meta: WorkerMeta) => Promise<void>;
-}
-/**
- * Define a background worker that processes jobs from the queue.
- *
- * Workers are placed in the `workers/` directory and auto-discovered at deploy time.
- *
- * @example
- * ```ts
- * export default defineWorker({
- *   name: "send-email",
- *   retry: 5,
- *   timeout: 60,
- *   backoff: "exponential",
- *   handler: async (payload: { to: string; subject: string }, meta) => {
- *     await sendEmail(payload.to, payload.subject);
- *   },
- * });
- * ```
- */
-declare function defineWorker<TPayload = unknown>(config: WorkerConfig<TPayload>): ResolvedWorkerConfig<TPayload>;
-
 /** Non-service, per-invocation data for job handlers.
  * Services (Database, Log, …) are imported as singletons, not passed here. */
 interface JobMeta {
@@ -1746,4 +1715,4 @@ declare const documents: {
     onDocumentDeleted(handler: HookHandler<DocumentDeletedEvent>): ResolvedHook<DocumentDeletedEvent>;
 };
 
-export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, type EgressConfig, type EgressInput, EntitlementKey, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, Job, type JobMeta, type JobOptions, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, On, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderName, type ProviderOptions, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedHook, type ResolvedJob, type ResolvedWebhook, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SignatureSpec, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, User$1 as UserT, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineNotifications, defineStorage, defineTestUsers, defineWorker, documents, entitlementFor, flag, getErrorRegistry, getJobConfig, getRoutes, getWebhookConfig, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };
+export { type AcsOptions, type ApnsOptions, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, EGRESS_TIMEOUT_DEFAULT_MS, EGRESS_TIMEOUT_MAX_MS, EGRESS_TIMEOUT_MIN_MS, type EgressConfig, type EgressInput, EntitlementKey, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, Job, type JobMeta, type JobOptions, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, On, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderName, type ProviderOptions, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedHook, type ResolvedJob, type ResolvedWebhook, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SignatureSpec, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineNotifications, defineStorage, defineTestUsers, documents, entitlementFor, flag, getErrorRegistry, getJobConfig, getRoutes, getWebhookConfig, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError, U as User$1 } from './endpoint-Ck4hER_7.js';
-export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Materialized, o as Middleware, p as MiddlewareContext, q as MiddlewareHandler, N as NotFound, P as PBRequest, r as PalError, s as PalbaseAnalyticsClient, t as PalbaseAnalyticsManagementNamespace, u as PalbaseAnalyticsProperties, v as PalbaseAnalyticsQueryNamespace, w as PalbaseAttestAndroidParams, x as PalbaseAttestAndroidResult, y as PalbaseAttestiOSParams, z as PalbaseAttestiOSResult, G as PalbaseAuthClient, I as PalbaseBatchOverrideOperation, J as PalbaseBatchSetOverridesResult, K as PalbaseBindDeviceParams, O as PalbaseBucketClient, S as PalbaseClearAllOverridesResult, T as PalbaseClearOverrideResult, V as PalbaseCohortQueryInput, W as PalbaseCohortResult, X as PalbaseCollectionRef, Y as PalbaseCountQueryInput, Z as PalbaseCountResult, _ as PalbaseCreateLinkParams, $ as PalbaseDeviceInfo, a0 as PalbaseDeviceTokenView, a1 as PalbaseDocumentRef, a2 as PalbaseDocumentSnapshot, a3 as PalbaseEmailClient, a4 as PalbaseEmailSendParams, a5 as PalbaseEmailSendResponse, a6 as PalbaseEventNamesResult, a7 as PalbaseEventsQueryInput, a8 as PalbaseEventsResult, a9 as PalbaseFileObject, aa as PalbaseFlag, ab as PalbaseFlagContext, ac as PalbaseFlagSource, ad as PalbaseFlagValue, ae as PalbaseFlagVariant, af as PalbaseFlagsServiceClient, ag as PalbaseFunctionsClient, ah as PalbaseFunnelQueryInput, ai as PalbaseFunnelResult, aj as PalbaseIdentifyTraits, ak as PalbaseInboxClient, al as PalbaseInboxListOptions, am as PalbaseInboxListResult, an as PalbaseInboxMessage, ao as PalbaseInboxSendParams, ap as PalbaseInboxSendResponse, aq as PalbaseInitialLink, ar as PalbaseInvokeOptions, as as PalbaseLink, at as PalbaseLinkAnalytics, au as PalbaseLinkDetails, av as PalbaseLinksClient, aw as PalbaseListLinksOptions, ax as PalbaseListLinksResult, ay as PalbaseListOptions, az as PalbaseMatchParams, aA as PalbaseMultiChannelResponse, aB as PalbaseOverviewResult, aC as PalbasePreferences, aD as PalbasePreferencesClient, aE as PalbasePublicUrlResponse, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, aK as PalbaseRegisterDeviceParams, aL as PalbaseResult, aM as PalbaseRetentionQueryInput, aN as PalbaseRetentionResult, aO as PalbaseSession, aP as PalbaseSetOverrideResult, aQ as PalbaseSetOverridesResult, aR as PalbaseSignedUrlResponse, aS as PalbaseSmsClient, aT as PalbaseSmsSendParams, aU as PalbaseSmsSendResponse, aV as PalbaseTransformOptions, aW as PalbaseUpdateLinkParams, aX as PalbaseUploadOptions, aY as PalbaseUser, aZ as PalbaseUserDetailResult, a_ as PalbaseUsersQueryInput, a$ as PalbaseUsersResult, b0 as PalbaseVerifyRequestSignatureParams, b1 as PalbaseWhereOperator, b2 as Ref, b3 as TooManyRequests, b4 as TxColumnExpr, b5 as TxInsertShape, b6 as TxInsertValue, b7 as TxNow, b8 as TxPlanBody, b9 as TxPlanError, ba as TxPlanHandle, bb as TxPlanOpResult, bc as TxPlanRejection, bd as TxPlanResponse, be as TxRefError, bf as TxRow, bg as TxRows, bh as TxSelectOptions, bi as TxSetShape, bj as TxSetValue, bk as TxTable, bl as TxWhere, bm as TxWireExpr, bn as TxWireGuard, bo as TxWireOp, bp as TxWireRef, bq as TxWireValue, br as Unauthorized, bs as VerifiedDevice, bt as dec, bu as defineMiddleware, bv as inc, bw as now } from './endpoint-Ck4hER_7.js';
+import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError } from './endpoint-CAWdScEH.js';
+export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Materialized, o as Middleware, p as MiddlewareContext, q as MiddlewareHandler, N as NotFound, P as PBRequest, r as PalError, s as PalbaseAnalyticsClient, t as PalbaseAnalyticsManagementNamespace, u as PalbaseAnalyticsProperties, v as PalbaseAnalyticsQueryNamespace, w as PalbaseAttestAndroidParams, x as PalbaseAttestAndroidResult, y as PalbaseAttestiOSParams, z as PalbaseAttestiOSResult, G as PalbaseAuthClient, I as PalbaseBatchOverrideOperation, J as PalbaseBatchSetOverridesResult, K as PalbaseBindDeviceParams, O as PalbaseBucketClient, Q as PalbaseClearAllOverridesResult, S as PalbaseClearOverrideResult, T as PalbaseCohortQueryInput, V as PalbaseCohortResult, W as PalbaseCollectionRef, X as PalbaseCountQueryInput, Y as PalbaseCountResult, Z as PalbaseCreateLinkParams, _ as PalbaseDeviceInfo, $ as PalbaseDeviceTokenView, a0 as PalbaseDocumentRef, a1 as PalbaseDocumentSnapshot, a2 as PalbaseEmailClient, a3 as PalbaseEmailSendParams, a4 as PalbaseEmailSendResponse, a5 as PalbaseEventNamesResult, a6 as PalbaseEventsQueryInput, a7 as PalbaseEventsResult, a8 as PalbaseFileObject, a9 as PalbaseFlag, aa as PalbaseFlagContext, ab as PalbaseFlagSource, ac as PalbaseFlagValue, ad as PalbaseFlagVariant, ae as PalbaseFlagsServiceClient, af as PalbaseFunctionsClient, ag as PalbaseFunnelQueryInput, ah as PalbaseFunnelResult, ai as PalbaseIdentifyTraits, aj as PalbaseInboxClient, ak as PalbaseInboxListOptions, al as PalbaseInboxListResult, am as PalbaseInboxMessage, an as PalbaseInboxSendParams, ao as PalbaseInboxSendResponse, ap as PalbaseInitialLink, aq as PalbaseInvokeOptions, ar as PalbaseLink, as as PalbaseLinkAnalytics, at as PalbaseLinkDetails, au as PalbaseLinksClient, av as PalbaseListLinksOptions, aw as PalbaseListLinksResult, ax as PalbaseListOptions, ay as PalbaseMatchParams, az as PalbaseMultiChannelResponse, aA as PalbaseOverviewResult, aB as PalbasePreferences, aC as PalbasePreferencesClient, aD as PalbasePublicUrlResponse, aE as PalbasePushClient, aF as PalbasePushSendParams, aG as PalbasePushSendResponse, aH as PalbaseQrCodeOptions, aI as PalbaseQuerySnapshot, aJ as PalbaseRegisterDeviceParams, aK as PalbaseResult, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, b1 as Ref, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, b7 as TxPlanBody, b8 as TxPlanError, b9 as TxPlanHandle, ba as TxPlanOpResult, bb as TxPlanRejection, bc as TxPlanResponse, bd as TxRefError, be as TxRow, bf as TxRows, bg as TxSelectOptions, bh as TxSetShape, bi as TxSetValue, bj as TxTable, bk as TxWhere, bl as TxWireExpr, bm as TxWireGuard, bn as TxWireOp, bo as TxWireRef, bp as TxWireValue, bq as Unauthorized, U as UserT, br as VerifiedDevice, bs as dec, bt as defineMiddleware, bu as inc, bv as now } from './endpoint-CAWdScEH.js';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { E as EnvTypedDatabase, S as SchemaDef } from './index-l7DhBDtn.js';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, h as PalbaseExtension, i as PolicyBuilder, j as PolicyCommand, k as PolicyDef, l as PolicyMode, R as RawConstraintDef, m as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TxPlan, q as TxTables, r as TypedDB, s as TypedTable, t as TypedTx, u as bigint, v as boolean, w as defineSchema, x as enumType, y as integer, z as isPalbaseExtension, A as jsonb, B as makeTypedDB, D as numeric, F as policy, G as raw, H as text, J as timestamp, K as uuid } from './index-l7DhBDtn.js';
+import { E as EnvTypedDatabase, S as SchemaDef } from './index-EAlQyErf.js';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, h as PalbaseExtension, i as PolicyBuilder, j as PolicyCommand, k as PolicyDef, l as PolicyMode, R as RawConstraintDef, m as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TxPlan, q as TxTables, r as TypedDB, s as TypedTable, t as TypedTx, u as bigint, v as boolean, w as defineSchema, x as enumType, y as integer, z as isPalbaseExtension, A as jsonb, B as makeTypedDB, D as numeric, F as policy, G as raw, H as text, J as timestamp, K as uuid } from './index-EAlQyErf.js';
 import { EntitlementKey, LimitKey } from './purchases/keys.js';
 import { TableTypes, Tables } from './db/env.js';
 import { ZodTypeAny, z } from 'zod';
@@ -117,7 +117,6 @@ interface RuntimeServices {
     Documents: PalbaseDocsClient;
     Storage: PalbaseStorageClient;
     Cache: CacheClient;
-    Queue: QueueClient;
     Log: Logger;
     Notifications: PalbaseNotificationsClient;
     Flags: PalbaseFlagsClient;
@@ -199,8 +198,6 @@ declare const Documents: PalbaseDocsClient;
 declare const Storage: PalbaseStorageClient;
 /** JSON-typed cache (get/set/incr/getOrSet). */
 declare const Cache: CacheClient;
-/** Background job queue. */
-declare const Queue: QueueClient;
 /** Structured logger. */
 declare const Log: Logger;
 /** Push / email / SMS / in-app notifications. */
@@ -504,18 +501,20 @@ declare function defineStorage(input: StorageInput): StorageConfig;
 /**
  * egress.ts — the tenant outbound-HTTP allowlist config-as-code DSL.
  *
- * `defineEgress({ hosts })` declares the external hosts a backend may fetch().
- * config/egress.ts default-exports it; the deploy evals it to JSON
- * (SchemaExtractor.EvaluateConfigFile → config_extract.js) and bakes the
- * allowlist into the artifact manifest → the isolate loader → Tenant.egressAllow.
- * The tenantFetch capability rejects any host NOT on it. NO config/egress.ts (or
- * an empty list) ⇒ the backend has NO outbound network — fail-closed.
+ * `defineEgress({ hosts, timeoutMs })` declares the external hosts a backend may
+ * fetch(), and how long a single call may take. config/egress.ts default-exports
+ * it; the deploy evals it to JSON (SchemaExtractor.EvaluateConfigFile →
+ * config_extract.js) and bakes both into the artifact manifest → the isolate
+ * loader → Tenant.egressAllow / Tenant.egressTimeoutMs. The tenantFetch
+ * capability rejects any host NOT on the list. NO config/egress.ts (or an empty
+ * list) ⇒ the backend has NO outbound network — fail-closed.
  *
  * @example
  *   // config/egress.ts
  *   import { defineEgress } from "@palbase/backend";
  *   export default defineEgress({
- *     hosts: ["api.open-meteo.com", "restcountries.com", "zenquotes.io"],
+ *     hosts: ["api.openai.com"],
+ *     timeoutMs: 90_000, // a slow LLM call; default 30_000
  *   });
  *
  * Each host is a bare hostname (no scheme/port/path/wildcard). A leading dot,
@@ -523,18 +522,43 @@ declare function defineStorage(input: StorageInput): StorageConfig;
  * https-only on :443; the deploy REJECTS a malformed / IP-literal / internal host
  * (fail-closed — a security allowlist is never best-effort).
  *
- * Emits: { __config: "egress", hosts: [...] }
+ * `timeoutMs` is a CEILING, not a grant: the call still ends when the INVOCATION
+ * ends. A job may run up to its own `@Job({ timeout })` (max 300s), while a
+ * request is additionally bounded by the gateway. Setting 300_000 on a route
+ * whose request dies earlier buys nothing — size it to the caller.
+ *
+ * Response bodies are BUFFERED whole (5 MB cap) before your fetch() resolves, so
+ * a streaming/SSE upstream gives you no partial output and no earlier
+ * first-byte: the entire stream must complete inside `timeoutMs`.
+ *
+ * Emits: { __config: "egress", hosts: [...], timeoutMs?: number }
  */
 /** The discriminant written under `__config` so the deploy eval knows the kind. */
 declare const EGRESS_CONFIG_KIND: "egress";
+/**
+ * Bounds on `timeoutMs`, duplicated (deliberately) in the deploy's
+ * ParseEgressConfig. This copy shapes the authoring error; that one is
+ * authoritative and fail-closed. They must agree — a value this accepts and the
+ * deploy rejects is a broken deploy the author cannot see coming.
+ */
+declare const EGRESS_TIMEOUT_MIN_MS = 1000;
+declare const EGRESS_TIMEOUT_MAX_MS = 300000;
+/** Applied when `timeoutMs` is omitted. Also spelled in the isolate capability. */
+declare const EGRESS_TIMEOUT_DEFAULT_MS = 30000;
 /** The author-facing input to defineEgress. */
 interface EgressInput {
     hosts: string[];
+    /**
+     * Per-call ceiling for an outbound fetch, in milliseconds.
+     * 1_000..300_000; omitted ⇒ 30_000.
+     */
+    timeoutMs?: number;
 }
 /** The evaluated config/egress.ts default export (what the deploy reads). */
 interface EgressConfig {
     __config: typeof EGRESS_CONFIG_KIND;
     hosts: string[];
+    timeoutMs?: number;
 }
 /**
  * Declare the backend's outbound-HTTP allowlist. Client-side this only shapes +
@@ -1396,61 +1420,6 @@ interface DefinedError {
 declare function defineError<S extends ZodTypeAny>(code: string, status: number, dataSchema: S): DefinedErrorWithData<S>;
 declare function defineError(code: string, status: number): DefinedError;
 
-/** Non-service, per-invocation data for background worker handlers.
- * Services (Database, Log, …) are imported as singletons, not passed here. */
-interface WorkerMeta {
-    /** Environment-scoped env vars. */
-    env: Record<string, string>;
-    /** The user that enqueued the job, if any (background jobs are usually system-initiated). */
-    user: User$1 | null;
-    /** Per-invocation id for correlation. */
-    requestId: string;
-    /** The globally unique Environment runtime identifier. */
-    environmentId: string;
-}
-/** Backoff strategy for worker retries. */
-type BackoffStrategy = "exponential" | "linear" | "fixed";
-/** Configuration for a background worker. */
-interface WorkerConfig<TPayload = unknown> {
-    /** Worker name — must be unique across the project. */
-    name: string;
-    /** Maximum number of retries before sending to dead letter queue. Defaults to 3. */
-    retry?: number;
-    /** Execution timeout in seconds. Defaults to 30. */
-    timeout?: number;
-    /** Backoff strategy between retries. Defaults to "exponential". */
-    backoff?: BackoffStrategy;
-    /** Handler function that processes the job payload. */
-    handler: (payload: TPayload, meta: WorkerMeta) => Promise<void>;
-}
-/** Resolved worker configuration with defaults applied. */
-interface ResolvedWorkerConfig<TPayload = unknown> {
-    name: string;
-    retry: number;
-    timeout: number;
-    backoff: BackoffStrategy;
-    handler: (payload: TPayload, meta: WorkerMeta) => Promise<void>;
-}
-/**
- * Define a background worker that processes jobs from the queue.
- *
- * Workers are placed in the `workers/` directory and auto-discovered at deploy time.
- *
- * @example
- * ```ts
- * export default defineWorker({
- *   name: "send-email",
- *   retry: 5,
- *   timeout: 60,
- *   backoff: "exponential",
- *   handler: async (payload: { to: string; subject: string }, meta) => {
- *     await sendEmail(payload.to, payload.subject);
- *   },
- * });
- * ```
- */
-declare function defineWorker<TPayload = unknown>(config: WorkerConfig<TPayload>): ResolvedWorkerConfig<TPayload>;
-
 /** Non-service, per-invocation data for job handlers.
  * Services (Database, Log, …) are imported as singletons, not passed here. */
 interface JobMeta {
@@ -1746,4 +1715,4 @@ declare const documents: {
     onDocumentDeleted(handler: HookHandler<DocumentDeletedEvent>): ResolvedHook<DocumentDeletedEvent>;
 };
 
-export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, type EgressConfig, type EgressInput, EntitlementKey, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, Job, type JobMeta, type JobOptions, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, On, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderName, type ProviderOptions, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedHook, type ResolvedJob, type ResolvedWebhook, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SignatureSpec, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, User$1 as UserT, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineNotifications, defineStorage, defineTestUsers, defineWorker, documents, entitlementFor, flag, getErrorRegistry, getJobConfig, getRoutes, getWebhookConfig, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };
+export { type AcsOptions, type ApnsOptions, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, EGRESS_TIMEOUT_DEFAULT_MS, EGRESS_TIMEOUT_MAX_MS, EGRESS_TIMEOUT_MIN_MS, type EgressConfig, type EgressInput, EntitlementKey, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, Job, type JobMeta, type JobOptions, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, On, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderName, type ProviderOptions, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedHook, type ResolvedJob, type ResolvedWebhook, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SignatureSpec, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineNotifications, defineStorage, defineTestUsers, documents, entitlementFor, flag, getErrorRegistry, getJobConfig, getRoutes, getWebhookConfig, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };

package/dist/index.js

@@ -6,14 +6,13 @@ import {
   Log,
   Notifications,
   Purchases,
-  Queue,
   Realtime,
   Storage,
   __getRuntime,
   __requestALS,
   __runWithRuntime,
   __setRuntime
-} from "./chunk-XATG7BRC.js";
+} from "./chunk-I72YYSEI.js";
 import {
   EXTENSION_DEPENDENCIES,
   PALBASE_EXTENSIONS,
@@ -320,7 +319,13 @@ function baseTsType(def) {
       return "string";
     case "integer":
       return "number";
+    // Both are exact-precision in Postgres and lossy as a JSON number, so the
+    // database proxy serializes them as strings — measured: 9007199254740993
+    // used to arrive as ...992 and 41.00821234567890123 as 41.0082123456789.
+    // numeric had no case at all and fell through to `unknown`, which typed
+    // every numeric column out of existence.
     case "bigint":
+    case "numeric":
       return "string";
     case "boolean":
       return "boolean";
@@ -512,6 +517,9 @@ function defineStorage(input) {
 
 // src/config/egress.ts
 var EGRESS_CONFIG_KIND = "egress";
+var EGRESS_TIMEOUT_MIN_MS = 1e3;
+var EGRESS_TIMEOUT_MAX_MS = 3e5;
+var EGRESS_TIMEOUT_DEFAULT_MS = 3e4;
 function defineEgress(input) {
   if (input === null || typeof input !== "object" || !Array.isArray(input.hosts)) {
     throw new Error("defineEgress expects { hosts: string[] }");
@@ -523,7 +531,19 @@ function defineEgress(input) {
     }
     hosts.push(h.trim().toLowerCase());
   }
-  return { __config: EGRESS_CONFIG_KIND, hosts };
+  if (input.timeoutMs === void 0) {
+    return { __config: EGRESS_CONFIG_KIND, hosts };
+  }
+  const timeoutMs = input.timeoutMs;
+  if (typeof timeoutMs !== "number" || !Number.isInteger(timeoutMs)) {
+    throw new Error("defineEgress: timeoutMs must be an integer number of milliseconds");
+  }
+  if (timeoutMs < EGRESS_TIMEOUT_MIN_MS || timeoutMs > EGRESS_TIMEOUT_MAX_MS) {
+    throw new Error(
+      `defineEgress: timeoutMs must be between ${EGRESS_TIMEOUT_MIN_MS} and ${EGRESS_TIMEOUT_MAX_MS} (got ${timeoutMs})`
+    );
+  }
+  return { __config: EGRESS_CONFIG_KIND, hosts, timeoutMs };
 }
 
 // src/config/notifications.ts
@@ -839,38 +859,6 @@ function defineFlags(input) {
   return { __config: FLAGS_CONFIG_KIND, flags };
 }
 
-// src/decorators/controller.ts
-var CONTROLLER_META = /* @__PURE__ */ Symbol.for("palbase.backend.controllerMeta");
-function Controller(basePath, options = {}) {
-  return function(ctor) {
-    const normalized = basePath.replace(/\/+$/, "");
-    if (normalized === "/webhooks" || normalized.startsWith("/webhooks/")) {
-      throw new Error(
-        `@Controller("${basePath}") uses the reserved /webhooks path \u2014 inbound webhooks are served there`
-      );
-    }
-    const carrier = ctor;
-    const meta = {
-      __palbase: "controller",
-      basePath,
-      ...options.auth !== void 0 ? { defaultAuth: options.auth } : {}
-    };
-    Object.defineProperty(carrier, CONTROLLER_META, {
-      value: meta,
-      enumerable: false,
-      configurable: true,
-      writable: false
-    });
-    Object.defineProperty(carrier, "__palbase", {
-      value: "controller",
-      enumerable: false,
-      configurable: true,
-      writable: false
-    });
-    return ctor;
-  };
-}
-
 // src/decorators/registry.ts
 var ROUTES = /* @__PURE__ */ Symbol.for("palbase.backend.routes");
 var PARAM_BUFFER = /* @__PURE__ */ Symbol.for("palbase.backend.paramBuffer");
@@ -963,6 +951,48 @@ function getRoutes(ctor) {
   }));
 }
 
+// src/decorators/controller.ts
+var CONTROLLER_META = /* @__PURE__ */ Symbol.for("palbase.backend.controllerMeta");
+var RESERVED_FIRST_SEGMENT = "webhooks";
+function assertNotReserved(path, subject) {
+  const [first] = path.split("/").filter(Boolean);
+  if (first === RESERVED_FIRST_SEGMENT) {
+    throw new Error(
+      `${subject} resolves under the reserved /${RESERVED_FIRST_SEGMENT} path \u2014 inbound webhooks are served there and would shadow this route`
+    );
+  }
+}
+function Controller(basePath, options = {}) {
+  return function(ctor) {
+    assertNotReserved(basePath, `@Controller("${basePath}")`);
+    for (const route of getRoutes(ctor)) {
+      assertNotReserved(
+        `${basePath}${route.subpath}`,
+        `@${route.method}("${route.subpath}") in @Controller("${basePath}")`
+      );
+    }
+    const carrier = ctor;
+    const meta = {
+      __palbase: "controller",
+      basePath,
+      ...options.auth !== void 0 ? { defaultAuth: options.auth } : {}
+    };
+    Object.defineProperty(carrier, CONTROLLER_META, {
+      value: meta,
+      enumerable: false,
+      configurable: true,
+      writable: false
+    });
+    Object.defineProperty(carrier, "__palbase", {
+      value: "controller",
+      enumerable: false,
+      configurable: true,
+      writable: false
+    });
+    return ctor;
+  };
+}
+
 // src/decorators/methods.ts
 function makeMethodDecorator(method) {
   return function(subpath, options = {}) {
@@ -1206,40 +1236,6 @@ function humanize(code) {
   return s.charAt(0).toUpperCase() + s.slice(1);
 }
 
-// src/worker.ts
-var VALID_WORKER_NAME = /^[a-zA-Z0-9_-]+$/;
-var WORKER_DEFAULTS = {
-  retry: 3,
-  timeout: 30,
-  backoff: "exponential"
-};
-function defineWorker(config) {
-  if (!config.name || config.name.trim() === "") {
-    throw new Error("Worker name is required");
-  }
-  if (!VALID_WORKER_NAME.test(config.name)) {
-    throw new Error(
-      `Invalid worker name "${config.name}": must match [a-zA-Z0-9_-]+`
-    );
-  }
-  if (config.retry !== void 0 && (config.retry < 0 || !Number.isInteger(config.retry))) {
-    throw new Error("Worker retry must be a non-negative integer");
-  }
-  if (config.timeout !== void 0 && config.timeout <= 0) {
-    throw new Error("Worker timeout must be a positive number");
-  }
-  if (config.backoff !== void 0 && !["exponential", "linear", "fixed"].includes(config.backoff)) {
-    throw new Error(`Invalid backoff strategy: ${config.backoff}`);
-  }
-  return {
-    name: config.name,
-    retry: config.retry ?? WORKER_DEFAULTS.retry,
-    timeout: config.timeout ?? WORKER_DEFAULTS.timeout,
-    backoff: config.backoff ?? WORKER_DEFAULTS.backoff,
-    handler: config.handler
-  };
-}
-
 // src/decorators/webhook.ts
 var WEBHOOK_META = /* @__PURE__ */ Symbol.for("palbase.backend.webhookMeta");
 var WEBHOOK_EVENTS = /* @__PURE__ */ Symbol.for("palbase.backend.webhookEvents");
@@ -1292,6 +1288,11 @@ function getWebhookConfig(ctor) {
       "@Webhook requires either a `provider` preset or an explicit `signature` \u2014 an endpoint with no verification would accept forged deliveries"
     );
   }
+  if (meta.provider && meta.signature) {
+    throw new Error(
+      "@Webhook declares BOTH a `provider` preset and an explicit `signature` \u2014 these are alternatives; keep the one that describes the sender, because only `provider` would be used"
+    );
+  }
   if (meta.signature) {
     const sig = meta.signature;
     if (!sig.header) {
@@ -1544,6 +1545,9 @@ export {
   Delete,
   Documents,
   EGRESS_CONFIG_KIND,
+  EGRESS_TIMEOUT_DEFAULT_MS,
+  EGRESS_TIMEOUT_MAX_MS,
+  EGRESS_TIMEOUT_MIN_MS,
   EXTENSION_DEPENDENCIES,
   FLAGS_CONFIG_KIND,
   Flags,
@@ -1569,7 +1573,6 @@ export {
   Put,
   Query,
   QueryParams,
-  Queue,
   RESERVED_SECRET_PREFIX,
   Realtime,
   Req,
@@ -1610,7 +1613,6 @@ export {
   defineSchema,
   defineStorage,
   defineTestUsers,
-  defineWorker,
   documents,
   entitlementFor,
   enumType,