@palbase/backend 13.0.0 → 14.1.0

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError, U as User$1 } from './endpoint-Ck4hER_7.cjs';
-export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Materialized, o as Middleware, p as MiddlewareContext, q as MiddlewareHandler, N as NotFound, P as PBRequest, r as PalError, s as PalbaseAnalyticsClient, t as PalbaseAnalyticsManagementNamespace, u as PalbaseAnalyticsProperties, v as PalbaseAnalyticsQueryNamespace, w as PalbaseAttestAndroidParams, x as PalbaseAttestAndroidResult, y as PalbaseAttestiOSParams, z as PalbaseAttestiOSResult, G as PalbaseAuthClient, I as PalbaseBatchOverrideOperation, J as PalbaseBatchSetOverridesResult, K as PalbaseBindDeviceParams, O as PalbaseBucketClient, S as PalbaseClearAllOverridesResult, T as PalbaseClearOverrideResult, V as PalbaseCohortQueryInput, W as PalbaseCohortResult, X as PalbaseCollectionRef, Y as PalbaseCountQueryInput, Z as PalbaseCountResult, _ as PalbaseCreateLinkParams, $ as PalbaseDeviceInfo, a0 as PalbaseDeviceTokenView, a1 as PalbaseDocumentRef, a2 as PalbaseDocumentSnapshot, a3 as PalbaseEmailClient, a4 as PalbaseEmailSendParams, a5 as PalbaseEmailSendResponse, a6 as PalbaseEventNamesResult, a7 as PalbaseEventsQueryInput, a8 as PalbaseEventsResult, a9 as PalbaseFileObject, aa as PalbaseFlag, ab as PalbaseFlagContext, ac as PalbaseFlagSource, ad as PalbaseFlagValue, ae as PalbaseFlagVariant, af as PalbaseFlagsServiceClient, ag as PalbaseFunctionsClient, ah as PalbaseFunnelQueryInput, ai as PalbaseFunnelResult, aj as PalbaseIdentifyTraits, ak as PalbaseInboxClient, al as PalbaseInboxListOptions, am as PalbaseInboxListResult, an as PalbaseInboxMessage, ao as PalbaseInboxSendParams, ap as PalbaseInboxSendResponse, aq as PalbaseInitialLink, ar as PalbaseInvokeOptions, as as PalbaseLink, at as PalbaseLinkAnalytics, au as PalbaseLinkDetails, av as PalbaseLinksClient, aw as PalbaseListLinksOptions, ax as PalbaseListLinksResult, ay as PalbaseListOptions, az as PalbaseMatchParams, aA as PalbaseMultiChannelResponse, aB as PalbaseOverviewResult, aC as PalbasePreferences, aD as PalbasePreferencesClient, aE as PalbasePublicUrlResponse, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, aK as PalbaseRegisterDeviceParams, aL as PalbaseResult, aM as PalbaseRetentionQueryInput, aN as PalbaseRetentionResult, aO as PalbaseSession, aP as PalbaseSetOverrideResult, aQ as PalbaseSetOverridesResult, aR as PalbaseSignedUrlResponse, aS as PalbaseSmsClient, aT as PalbaseSmsSendParams, aU as PalbaseSmsSendResponse, aV as PalbaseTransformOptions, aW as PalbaseUpdateLinkParams, aX as PalbaseUploadOptions, aY as PalbaseUser, aZ as PalbaseUserDetailResult, a_ as PalbaseUsersQueryInput, a$ as PalbaseUsersResult, b0 as PalbaseVerifyRequestSignatureParams, b1 as PalbaseWhereOperator, b2 as Ref, b3 as TooManyRequests, b4 as TxColumnExpr, b5 as TxInsertShape, b6 as TxInsertValue, b7 as TxNow, b8 as TxPlanBody, b9 as TxPlanError, ba as TxPlanHandle, bb as TxPlanOpResult, bc as TxPlanRejection, bd as TxPlanResponse, be as TxRefError, bf as TxRow, bg as TxRows, bh as TxSelectOptions, bi as TxSetShape, bj as TxSetValue, bk as TxTable, bl as TxWhere, bm as TxWireExpr, bn as TxWireGuard, bo as TxWireOp, bp as TxWireRef, bq as TxWireValue, br as Unauthorized, bs as VerifiedDevice, bt as dec, bu as defineMiddleware, bv as inc, bw as now } from './endpoint-Ck4hER_7.cjs';
+import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError } from './endpoint-D2yR2RD1.cjs';
+export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Materialized, o as Middleware, p as MiddlewareContext, q as MiddlewareHandler, N as NotFound, P as PBRequest, r as PalError, s as PalbaseAnalyticsClient, t as PalbaseAnalyticsManagementNamespace, u as PalbaseAnalyticsProperties, v as PalbaseAnalyticsQueryNamespace, w as PalbaseAttestAndroidParams, x as PalbaseAttestAndroidResult, y as PalbaseAttestiOSParams, z as PalbaseAttestiOSResult, G as PalbaseAuthClient, I as PalbaseBatchOverrideOperation, J as PalbaseBatchSetOverridesResult, K as PalbaseBindDeviceParams, O as PalbaseBucketClient, Q as PalbaseClearAllOverridesResult, S as PalbaseClearOverrideResult, T as PalbaseCohortQueryInput, V as PalbaseCohortResult, W as PalbaseCollectionRef, X as PalbaseCountQueryInput, Y as PalbaseCountResult, Z as PalbaseCreateLinkParams, _ as PalbaseDeviceInfo, $ as PalbaseDeviceTokenView, a0 as PalbaseDocumentRef, a1 as PalbaseDocumentSnapshot, a2 as PalbaseEmailClient, a3 as PalbaseEmailSendParams, a4 as PalbaseEmailSendResponse, a5 as PalbaseEventNamesResult, a6 as PalbaseEventsQueryInput, a7 as PalbaseEventsResult, a8 as PalbaseFileObject, a9 as PalbaseFlag, aa as PalbaseFlagContext, ab as PalbaseFlagSource, ac as PalbaseFlagValue, ad as PalbaseFlagVariant, ae as PalbaseFlagsServiceClient, af as PalbaseFunctionsClient, ag as PalbaseFunnelQueryInput, ah as PalbaseFunnelResult, ai as PalbaseIdentifyTraits, aj as PalbaseInboxClient, ak as PalbaseInboxListOptions, al as PalbaseInboxListResult, am as PalbaseInboxMessage, an as PalbaseInboxSendParams, ao as PalbaseInboxSendResponse, ap as PalbaseInitialLink, aq as PalbaseInvokeOptions, ar as PalbaseLink, as as PalbaseLinkAnalytics, at as PalbaseLinkDetails, au as PalbaseLinksClient, av as PalbaseListLinksOptions, aw as PalbaseListLinksResult, ax as PalbaseListOptions, ay as PalbaseMatchParams, az as PalbaseMultiChannelResponse, aA as PalbaseOverviewResult, aB as PalbasePreferences, aC as PalbasePreferencesClient, aD as PalbasePublicUrlResponse, aE as PalbasePushClient, aF as PalbasePushSendParams, aG as PalbasePushSendResponse, aH as PalbaseQrCodeOptions, aI as PalbaseQuerySnapshot, aJ as PalbaseRegisterDeviceParams, aK as PalbaseResult, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, b1 as Ref, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, b7 as TxPlanBody, b8 as TxPlanError, b9 as TxPlanHandle, ba as TxPlanOpResult, bb as TxPlanRejection, bc as TxPlanResponse, bd as TxRefError, be as TxRow, bf as TxRows, bg as TxSelectOptions, bh as TxSetShape, bi as TxSetValue, bj as TxTable, bk as TxWhere, bl as TxWireExpr, bm as TxWireGuard, bn as TxWireOp, bo as TxWireRef, bp as TxWireValue, bq as Unauthorized, U as UserT, br as VerifiedDevice, bs as dec, bt as defineMiddleware, bu as inc, bv as now } from './endpoint-D2yR2RD1.cjs';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { E as EnvTypedDatabase, S as SchemaDef } from './index-BJAf1uPC.cjs';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, h as PalbaseExtension, i as PolicyBuilder, j as PolicyCommand, k as PolicyDef, l as PolicyMode, R as RawConstraintDef, m as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TxPlan, q as TxTables, r as TypedDB, s as TypedTable, t as TypedTx, u as bigint, v as boolean, w as defineSchema, x as enumType, y as integer, z as isPalbaseExtension, A as jsonb, B as makeTypedDB, D as numeric, F as policy, G as raw, H as text, J as timestamp, K as uuid } from './index-BJAf1uPC.cjs';
+import { E as EnvTypedDatabase, S as SchemaDef } from './index-BcA7wqur.cjs';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, h as PalbaseExtension, i as PolicyBuilder, j as PolicyCommand, k as PolicyDef, l as PolicyMode, R as RawConstraintDef, m as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TxPlan, q as TxTables, r as TypedDB, s as TypedTable, t as TypedTx, u as bigint, v as boolean, w as defineSchema, x as enumType, y as integer, z as isPalbaseExtension, A as jsonb, B as makeTypedDB, D as numeric, F as policy, G as raw, H as text, J as timestamp, K as uuid } from './index-BcA7wqur.cjs';
 import { EntitlementKey, LimitKey } from './purchases/keys.cjs';
 import { TableTypes, Tables } from './db/env.cjs';
 import { ZodTypeAny, z } from 'zod';
@@ -117,7 +117,6 @@ interface RuntimeServices {
     Documents: PalbaseDocsClient;
     Storage: PalbaseStorageClient;
     Cache: CacheClient;
-    Queue: QueueClient;
     Log: Logger;
     Notifications: PalbaseNotificationsClient;
     Flags: PalbaseFlagsClient;
@@ -199,8 +198,6 @@ declare const Documents: PalbaseDocsClient;
 declare const Storage: PalbaseStorageClient;
 /** JSON-typed cache (get/set/incr/getOrSet). */
 declare const Cache: CacheClient;
-/** Background job queue. */
-declare const Queue: QueueClient;
 /** Structured logger. */
 declare const Log: Logger;
 /** Push / email / SMS / in-app notifications. */
@@ -504,18 +501,20 @@ declare function defineStorage(input: StorageInput): StorageConfig;
 /**
  * egress.ts — the tenant outbound-HTTP allowlist config-as-code DSL.
  *
- * `defineEgress({ hosts })` declares the external hosts a backend may fetch().
- * config/egress.ts default-exports it; the deploy evals it to JSON
- * (SchemaExtractor.EvaluateConfigFile → config_extract.js) and bakes the
- * allowlist into the artifact manifest → the isolate loader → Tenant.egressAllow.
- * The tenantFetch capability rejects any host NOT on it. NO config/egress.ts (or
- * an empty list) ⇒ the backend has NO outbound network — fail-closed.
+ * `defineEgress({ hosts, timeoutMs })` declares the external hosts a backend may
+ * fetch(), and how long a single call may take. config/egress.ts default-exports
+ * it; the deploy evals it to JSON (SchemaExtractor.EvaluateConfigFile →
+ * config_extract.js) and bakes both into the artifact manifest → the isolate
+ * loader → Tenant.egressAllow / Tenant.egressTimeoutMs. The tenantFetch
+ * capability rejects any host NOT on the list. NO config/egress.ts (or an empty
+ * list) ⇒ the backend has NO outbound network — fail-closed.
  *
  * @example
  *   // config/egress.ts
  *   import { defineEgress } from "@palbase/backend";
  *   export default defineEgress({
- *     hosts: ["api.open-meteo.com", "restcountries.com", "zenquotes.io"],
+ *     hosts: ["api.openai.com"],
+ *     timeoutMs: 90_000, // a slow LLM call; default 30_000
  *   });
  *
  * Each host is a bare hostname (no scheme/port/path/wildcard). A leading dot,
@@ -523,18 +522,43 @@ declare function defineStorage(input: StorageInput): StorageConfig;
  * https-only on :443; the deploy REJECTS a malformed / IP-literal / internal host
  * (fail-closed — a security allowlist is never best-effort).
  *
- * Emits: { __config: "egress", hosts: [...] }
+ * `timeoutMs` is a CEILING, not a grant: the call still ends when the INVOCATION
+ * ends. A job may run up to its own `@Job({ timeout })` (max 300s), while a
+ * request is additionally bounded by the gateway. Setting 300_000 on a route
+ * whose request dies earlier buys nothing — size it to the caller.
+ *
+ * Response bodies are BUFFERED whole (5 MB cap) before your fetch() resolves, so
+ * a streaming/SSE upstream gives you no partial output and no earlier
+ * first-byte: the entire stream must complete inside `timeoutMs`.
+ *
+ * Emits: { __config: "egress", hosts: [...], timeoutMs?: number }
  */
 /** The discriminant written under `__config` so the deploy eval knows the kind. */
 declare const EGRESS_CONFIG_KIND: "egress";
+/**
+ * Bounds on `timeoutMs`, duplicated (deliberately) in the deploy's
+ * ParseEgressConfig. This copy shapes the authoring error; that one is
+ * authoritative and fail-closed. They must agree — a value this accepts and the
+ * deploy rejects is a broken deploy the author cannot see coming.
+ */
+declare const EGRESS_TIMEOUT_MIN_MS = 1000;
+declare const EGRESS_TIMEOUT_MAX_MS = 300000;
+/** Applied when `timeoutMs` is omitted. Also spelled in the isolate capability. */
+declare const EGRESS_TIMEOUT_DEFAULT_MS = 30000;
 /** The author-facing input to defineEgress. */
 interface EgressInput {
     hosts: string[];
+    /**
+     * Per-call ceiling for an outbound fetch, in milliseconds.
+     * 1_000..300_000; omitted ⇒ 30_000.
+     */
+    timeoutMs?: number;
 }
 /** The evaluated config/egress.ts default export (what the deploy reads). */
 interface EgressConfig {
     __config: typeof EGRESS_CONFIG_KIND;
     hosts: string[];
+    timeoutMs?: number;
 }
 /**
  * Declare the backend's outbound-HTTP allowlist. Client-side this only shapes +
@@ -1396,61 +1420,6 @@ interface DefinedError {
 declare function defineError<S extends ZodTypeAny>(code: string, status: number, dataSchema: S): DefinedErrorWithData<S>;
 declare function defineError(code: string, status: number): DefinedError;
 
-/** Non-service, per-invocation data for background worker handlers.
- * Services (Database, Log, …) are imported as singletons, not passed here. */
-interface WorkerMeta {
-    /** Environment-scoped env vars. */
-    env: Record<string, string>;
-    /** The user that enqueued the job, if any (background jobs are usually system-initiated). */
-    user: User$1 | null;
-    /** Per-invocation id for correlation. */
-    requestId: string;
-    /** The globally unique Environment runtime identifier. */
-    environmentId: string;
-}
-/** Backoff strategy for worker retries. */
-type BackoffStrategy = "exponential" | "linear" | "fixed";
-/** Configuration for a background worker. */
-interface WorkerConfig<TPayload = unknown> {
-    /** Worker name — must be unique across the project. */
-    name: string;
-    /** Maximum number of retries before sending to dead letter queue. Defaults to 3. */
-    retry?: number;
-    /** Execution timeout in seconds. Defaults to 30. */
-    timeout?: number;
-    /** Backoff strategy between retries. Defaults to "exponential". */
-    backoff?: BackoffStrategy;
-    /** Handler function that processes the job payload. */
-    handler: (payload: TPayload, meta: WorkerMeta) => Promise<void>;
-}
-/** Resolved worker configuration with defaults applied. */
-interface ResolvedWorkerConfig<TPayload = unknown> {
-    name: string;
-    retry: number;
-    timeout: number;
-    backoff: BackoffStrategy;
-    handler: (payload: TPayload, meta: WorkerMeta) => Promise<void>;
-}
-/**
- * Define a background worker that processes jobs from the queue.
- *
- * Workers are placed in the `workers/` directory and auto-discovered at deploy time.
- *
- * @example
- * ```ts
- * export default defineWorker({
- *   name: "send-email",
- *   retry: 5,
- *   timeout: 60,
- *   backoff: "exponential",
- *   handler: async (payload: { to: string; subject: string }, meta) => {
- *     await sendEmail(payload.to, payload.subject);
- *   },
- * });
- * ```
- */
-declare function defineWorker<TPayload = unknown>(config: WorkerConfig<TPayload>): ResolvedWorkerConfig<TPayload>;
-
 /** Non-service, per-invocation data for job handlers.
  * Services (Database, Log, …) are imported as singletons, not passed here. */
 interface JobMeta {
@@ -1746,4 +1715,4 @@ declare const documents: {
     onDocumentDeleted(handler: HookHandler<DocumentDeletedEvent>): ResolvedHook<DocumentDeletedEvent>;
 };
 
-export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, type EgressConfig, type EgressInput, EntitlementKey, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, Job, type JobMeta, type JobOptions, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, On, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderName, type ProviderOptions, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedHook, type ResolvedJob, type ResolvedWebhook, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SignatureSpec, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, User$1 as UserT, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineNotifications, defineStorage, defineTestUsers, defineWorker, documents, entitlementFor, flag, getErrorRegistry, getJobConfig, getRoutes, getWebhookConfig, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };
+export { type AcsOptions, type ApnsOptions, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, EGRESS_TIMEOUT_DEFAULT_MS, EGRESS_TIMEOUT_MAX_MS, EGRESS_TIMEOUT_MIN_MS, type EgressConfig, type EgressInput, EntitlementKey, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, Job, type JobMeta, type JobOptions, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, On, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderName, type ProviderOptions, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedHook, type ResolvedJob, type ResolvedWebhook, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SignatureSpec, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineNotifications, defineStorage, defineTestUsers, documents, entitlementFor, flag, getErrorRegistry, getJobConfig, getRoutes, getWebhookConfig, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError, U as User$1 } from './endpoint-Ck4hER_7.js';
-export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Materialized, o as Middleware, p as MiddlewareContext, q as MiddlewareHandler, N as NotFound, P as PBRequest, r as PalError, s as PalbaseAnalyticsClient, t as PalbaseAnalyticsManagementNamespace, u as PalbaseAnalyticsProperties, v as PalbaseAnalyticsQueryNamespace, w as PalbaseAttestAndroidParams, x as PalbaseAttestAndroidResult, y as PalbaseAttestiOSParams, z as PalbaseAttestiOSResult, G as PalbaseAuthClient, I as PalbaseBatchOverrideOperation, J as PalbaseBatchSetOverridesResult, K as PalbaseBindDeviceParams, O as PalbaseBucketClient, S as PalbaseClearAllOverridesResult, T as PalbaseClearOverrideResult, V as PalbaseCohortQueryInput, W as PalbaseCohortResult, X as PalbaseCollectionRef, Y as PalbaseCountQueryInput, Z as PalbaseCountResult, _ as PalbaseCreateLinkParams, $ as PalbaseDeviceInfo, a0 as PalbaseDeviceTokenView, a1 as PalbaseDocumentRef, a2 as PalbaseDocumentSnapshot, a3 as PalbaseEmailClient, a4 as PalbaseEmailSendParams, a5 as PalbaseEmailSendResponse, a6 as PalbaseEventNamesResult, a7 as PalbaseEventsQueryInput, a8 as PalbaseEventsResult, a9 as PalbaseFileObject, aa as PalbaseFlag, ab as PalbaseFlagContext, ac as PalbaseFlagSource, ad as PalbaseFlagValue, ae as PalbaseFlagVariant, af as PalbaseFlagsServiceClient, ag as PalbaseFunctionsClient, ah as PalbaseFunnelQueryInput, ai as PalbaseFunnelResult, aj as PalbaseIdentifyTraits, ak as PalbaseInboxClient, al as PalbaseInboxListOptions, am as PalbaseInboxListResult, an as PalbaseInboxMessage, ao as PalbaseInboxSendParams, ap as PalbaseInboxSendResponse, aq as PalbaseInitialLink, ar as PalbaseInvokeOptions, as as PalbaseLink, at as PalbaseLinkAnalytics, au as PalbaseLinkDetails, av as PalbaseLinksClient, aw as PalbaseListLinksOptions, ax as PalbaseListLinksResult, ay as PalbaseListOptions, az as PalbaseMatchParams, aA as PalbaseMultiChannelResponse, aB as PalbaseOverviewResult, aC as PalbasePreferences, aD as PalbasePreferencesClient, aE as PalbasePublicUrlResponse, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, aK as PalbaseRegisterDeviceParams, aL as PalbaseResult, aM as PalbaseRetentionQueryInput, aN as PalbaseRetentionResult, aO as PalbaseSession, aP as PalbaseSetOverrideResult, aQ as PalbaseSetOverridesResult, aR as PalbaseSignedUrlResponse, aS as PalbaseSmsClient, aT as PalbaseSmsSendParams, aU as PalbaseSmsSendResponse, aV as PalbaseTransformOptions, aW as PalbaseUpdateLinkParams, aX as PalbaseUploadOptions, aY as PalbaseUser, aZ as PalbaseUserDetailResult, a_ as PalbaseUsersQueryInput, a$ as PalbaseUsersResult, b0 as PalbaseVerifyRequestSignatureParams, b1 as PalbaseWhereOperator, b2 as Ref, b3 as TooManyRequests, b4 as TxColumnExpr, b5 as TxInsertShape, b6 as TxInsertValue, b7 as TxNow, b8 as TxPlanBody, b9 as TxPlanError, ba as TxPlanHandle, bb as TxPlanOpResult, bc as TxPlanRejection, bd as TxPlanResponse, be as TxRefError, bf as TxRow, bg as TxRows, bh as TxSelectOptions, bi as TxSetShape, bj as TxSetValue, bk as TxTable, bl as TxWhere, bm as TxWireExpr, bn as TxWireGuard, bo as TxWireOp, bp as TxWireRef, bq as TxWireValue, br as Unauthorized, bs as VerifiedDevice, bt as dec, bu as defineMiddleware, bv as inc, bw as now } from './endpoint-Ck4hER_7.js';
+import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError } from './endpoint-D2yR2RD1.js';
+export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Materialized, o as Middleware, p as MiddlewareContext, q as MiddlewareHandler, N as NotFound, P as PBRequest, r as PalError, s as PalbaseAnalyticsClient, t as PalbaseAnalyticsManagementNamespace, u as PalbaseAnalyticsProperties, v as PalbaseAnalyticsQueryNamespace, w as PalbaseAttestAndroidParams, x as PalbaseAttestAndroidResult, y as PalbaseAttestiOSParams, z as PalbaseAttestiOSResult, G as PalbaseAuthClient, I as PalbaseBatchOverrideOperation, J as PalbaseBatchSetOverridesResult, K as PalbaseBindDeviceParams, O as PalbaseBucketClient, Q as PalbaseClearAllOverridesResult, S as PalbaseClearOverrideResult, T as PalbaseCohortQueryInput, V as PalbaseCohortResult, W as PalbaseCollectionRef, X as PalbaseCountQueryInput, Y as PalbaseCountResult, Z as PalbaseCreateLinkParams, _ as PalbaseDeviceInfo, $ as PalbaseDeviceTokenView, a0 as PalbaseDocumentRef, a1 as PalbaseDocumentSnapshot, a2 as PalbaseEmailClient, a3 as PalbaseEmailSendParams, a4 as PalbaseEmailSendResponse, a5 as PalbaseEventNamesResult, a6 as PalbaseEventsQueryInput, a7 as PalbaseEventsResult, a8 as PalbaseFileObject, a9 as PalbaseFlag, aa as PalbaseFlagContext, ab as PalbaseFlagSource, ac as PalbaseFlagValue, ad as PalbaseFlagVariant, ae as PalbaseFlagsServiceClient, af as PalbaseFunctionsClient, ag as PalbaseFunnelQueryInput, ah as PalbaseFunnelResult, ai as PalbaseIdentifyTraits, aj as PalbaseInboxClient, ak as PalbaseInboxListOptions, al as PalbaseInboxListResult, am as PalbaseInboxMessage, an as PalbaseInboxSendParams, ao as PalbaseInboxSendResponse, ap as PalbaseInitialLink, aq as PalbaseInvokeOptions, ar as PalbaseLink, as as PalbaseLinkAnalytics, at as PalbaseLinkDetails, au as PalbaseLinksClient, av as PalbaseListLinksOptions, aw as PalbaseListLinksResult, ax as PalbaseListOptions, ay as PalbaseMatchParams, az as PalbaseMultiChannelResponse, aA as PalbaseOverviewResult, aB as PalbasePreferences, aC as PalbasePreferencesClient, aD as PalbasePublicUrlResponse, aE as PalbasePushClient, aF as PalbasePushSendParams, aG as PalbasePushSendResponse, aH as PalbaseQrCodeOptions, aI as PalbaseQuerySnapshot, aJ as PalbaseRegisterDeviceParams, aK as PalbaseResult, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, b1 as Ref, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, b7 as TxPlanBody, b8 as TxPlanError, b9 as TxPlanHandle, ba as TxPlanOpResult, bb as TxPlanRejection, bc as TxPlanResponse, bd as TxRefError, be as TxRow, bf as TxRows, bg as TxSelectOptions, bh as TxSetShape, bi as TxSetValue, bj as TxTable, bk as TxWhere, bl as TxWireExpr, bm as TxWireGuard, bn as TxWireOp, bo as TxWireRef, bp as TxWireValue, bq as Unauthorized, U as UserT, br as VerifiedDevice, bs as dec, bt as defineMiddleware, bu as inc, bv as now } from './endpoint-D2yR2RD1.js';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { E as EnvTypedDatabase, S as SchemaDef } from './index-l7DhBDtn.js';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, h as PalbaseExtension, i as PolicyBuilder, j as PolicyCommand, k as PolicyDef, l as PolicyMode, R as RawConstraintDef, m as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TxPlan, q as TxTables, r as TypedDB, s as TypedTable, t as TypedTx, u as bigint, v as boolean, w as defineSchema, x as enumType, y as integer, z as isPalbaseExtension, A as jsonb, B as makeTypedDB, D as numeric, F as policy, G as raw, H as text, J as timestamp, K as uuid } from './index-l7DhBDtn.js';
+import { E as EnvTypedDatabase, S as SchemaDef } from './index-CB8TARW4.js';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, h as PalbaseExtension, i as PolicyBuilder, j as PolicyCommand, k as PolicyDef, l as PolicyMode, R as RawConstraintDef, m as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TxPlan, q as TxTables, r as TypedDB, s as TypedTable, t as TypedTx, u as bigint, v as boolean, w as defineSchema, x as enumType, y as integer, z as isPalbaseExtension, A as jsonb, B as makeTypedDB, D as numeric, F as policy, G as raw, H as text, J as timestamp, K as uuid } from './index-CB8TARW4.js';
 import { EntitlementKey, LimitKey } from './purchases/keys.js';
 import { TableTypes, Tables } from './db/env.js';
 import { ZodTypeAny, z } from 'zod';
@@ -117,7 +117,6 @@ interface RuntimeServices {
     Documents: PalbaseDocsClient;
     Storage: PalbaseStorageClient;
     Cache: CacheClient;
-    Queue: QueueClient;
     Log: Logger;
     Notifications: PalbaseNotificationsClient;
     Flags: PalbaseFlagsClient;
@@ -199,8 +198,6 @@ declare const Documents: PalbaseDocsClient;
 declare const Storage: PalbaseStorageClient;
 /** JSON-typed cache (get/set/incr/getOrSet). */
 declare const Cache: CacheClient;
-/** Background job queue. */
-declare const Queue: QueueClient;
 /** Structured logger. */
 declare const Log: Logger;
 /** Push / email / SMS / in-app notifications. */
@@ -504,18 +501,20 @@ declare function defineStorage(input: StorageInput): StorageConfig;
 /**
  * egress.ts — the tenant outbound-HTTP allowlist config-as-code DSL.
  *
- * `defineEgress({ hosts })` declares the external hosts a backend may fetch().
- * config/egress.ts default-exports it; the deploy evals it to JSON
- * (SchemaExtractor.EvaluateConfigFile → config_extract.js) and bakes the
- * allowlist into the artifact manifest → the isolate loader → Tenant.egressAllow.
- * The tenantFetch capability rejects any host NOT on it. NO config/egress.ts (or
- * an empty list) ⇒ the backend has NO outbound network — fail-closed.
+ * `defineEgress({ hosts, timeoutMs })` declares the external hosts a backend may
+ * fetch(), and how long a single call may take. config/egress.ts default-exports
+ * it; the deploy evals it to JSON (SchemaExtractor.EvaluateConfigFile →
+ * config_extract.js) and bakes both into the artifact manifest → the isolate
+ * loader → Tenant.egressAllow / Tenant.egressTimeoutMs. The tenantFetch
+ * capability rejects any host NOT on the list. NO config/egress.ts (or an empty
+ * list) ⇒ the backend has NO outbound network — fail-closed.
  *
  * @example
  *   // config/egress.ts
  *   import { defineEgress } from "@palbase/backend";
  *   export default defineEgress({
- *     hosts: ["api.open-meteo.com", "restcountries.com", "zenquotes.io"],
+ *     hosts: ["api.openai.com"],
+ *     timeoutMs: 90_000, // a slow LLM call; default 30_000
  *   });
  *
  * Each host is a bare hostname (no scheme/port/path/wildcard). A leading dot,
@@ -523,18 +522,43 @@ declare function defineStorage(input: StorageInput): StorageConfig;
  * https-only on :443; the deploy REJECTS a malformed / IP-literal / internal host
  * (fail-closed — a security allowlist is never best-effort).
  *
- * Emits: { __config: "egress", hosts: [...] }
+ * `timeoutMs` is a CEILING, not a grant: the call still ends when the INVOCATION
+ * ends. A job may run up to its own `@Job({ timeout })` (max 300s), while a
+ * request is additionally bounded by the gateway. Setting 300_000 on a route
+ * whose request dies earlier buys nothing — size it to the caller.
+ *
+ * Response bodies are BUFFERED whole (5 MB cap) before your fetch() resolves, so
+ * a streaming/SSE upstream gives you no partial output and no earlier
+ * first-byte: the entire stream must complete inside `timeoutMs`.
+ *
+ * Emits: { __config: "egress", hosts: [...], timeoutMs?: number }
  */
 /** The discriminant written under `__config` so the deploy eval knows the kind. */
 declare const EGRESS_CONFIG_KIND: "egress";
+/**
+ * Bounds on `timeoutMs`, duplicated (deliberately) in the deploy's
+ * ParseEgressConfig. This copy shapes the authoring error; that one is
+ * authoritative and fail-closed. They must agree — a value this accepts and the
+ * deploy rejects is a broken deploy the author cannot see coming.
+ */
+declare const EGRESS_TIMEOUT_MIN_MS = 1000;
+declare const EGRESS_TIMEOUT_MAX_MS = 300000;
+/** Applied when `timeoutMs` is omitted. Also spelled in the isolate capability. */
+declare const EGRESS_TIMEOUT_DEFAULT_MS = 30000;
 /** The author-facing input to defineEgress. */
 interface EgressInput {
     hosts: string[];
+    /**
+     * Per-call ceiling for an outbound fetch, in milliseconds.
+     * 1_000..300_000; omitted ⇒ 30_000.
+     */
+    timeoutMs?: number;
 }
 /** The evaluated config/egress.ts default export (what the deploy reads). */
 interface EgressConfig {
     __config: typeof EGRESS_CONFIG_KIND;
     hosts: string[];
+    timeoutMs?: number;
 }
 /**
  * Declare the backend's outbound-HTTP allowlist. Client-side this only shapes +
@@ -1396,61 +1420,6 @@ interface DefinedError {
 declare function defineError<S extends ZodTypeAny>(code: string, status: number, dataSchema: S): DefinedErrorWithData<S>;
 declare function defineError(code: string, status: number): DefinedError;
 
-/** Non-service, per-invocation data for background worker handlers.
- * Services (Database, Log, …) are imported as singletons, not passed here. */
-interface WorkerMeta {
-    /** Environment-scoped env vars. */
-    env: Record<string, string>;
-    /** The user that enqueued the job, if any (background jobs are usually system-initiated). */
-    user: User$1 | null;
-    /** Per-invocation id for correlation. */
-    requestId: string;
-    /** The globally unique Environment runtime identifier. */
-    environmentId: string;
-}
-/** Backoff strategy for worker retries. */
-type BackoffStrategy = "exponential" | "linear" | "fixed";
-/** Configuration for a background worker. */
-interface WorkerConfig<TPayload = unknown> {
-    /** Worker name — must be unique across the project. */
-    name: string;
-    /** Maximum number of retries before sending to dead letter queue. Defaults to 3. */
-    retry?: number;
-    /** Execution timeout in seconds. Defaults to 30. */
-    timeout?: number;
-    /** Backoff strategy between retries. Defaults to "exponential". */
-    backoff?: BackoffStrategy;
-    /** Handler function that processes the job payload. */
-    handler: (payload: TPayload, meta: WorkerMeta) => Promise<void>;
-}
-/** Resolved worker configuration with defaults applied. */
-interface ResolvedWorkerConfig<TPayload = unknown> {
-    name: string;
-    retry: number;
-    timeout: number;
-    backoff: BackoffStrategy;
-    handler: (payload: TPayload, meta: WorkerMeta) => Promise<void>;
-}
-/**
- * Define a background worker that processes jobs from the queue.
- *
- * Workers are placed in the `workers/` directory and auto-discovered at deploy time.
- *
- * @example
- * ```ts
- * export default defineWorker({
- *   name: "send-email",
- *   retry: 5,
- *   timeout: 60,
- *   backoff: "exponential",
- *   handler: async (payload: { to: string; subject: string }, meta) => {
- *     await sendEmail(payload.to, payload.subject);
- *   },
- * });
- * ```
- */
-declare function defineWorker<TPayload = unknown>(config: WorkerConfig<TPayload>): ResolvedWorkerConfig<TPayload>;
-
 /** Non-service, per-invocation data for job handlers.
  * Services (Database, Log, …) are imported as singletons, not passed here. */
 interface JobMeta {
@@ -1746,4 +1715,4 @@ declare const documents: {
     onDocumentDeleted(handler: HookHandler<DocumentDeletedEvent>): ResolvedHook<DocumentDeletedEvent>;
 };
 
-export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, type EgressConfig, type EgressInput, EntitlementKey, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, Job, type JobMeta, type JobOptions, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, On, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderName, type ProviderOptions, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedHook, type ResolvedJob, type ResolvedWebhook, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SignatureSpec, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, User$1 as UserT, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineNotifications, defineStorage, defineTestUsers, defineWorker, documents, entitlementFor, flag, getErrorRegistry, getJobConfig, getRoutes, getWebhookConfig, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };
+export { type AcsOptions, type ApnsOptions, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, EGRESS_CONFIG_KIND, EGRESS_TIMEOUT_DEFAULT_MS, EGRESS_TIMEOUT_MAX_MS, EGRESS_TIMEOUT_MIN_MS, type EgressConfig, type EgressInput, EntitlementKey, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagJsonObject, type FlagJsonValue, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, Job, type JobMeta, type JobOptions, LimitKey, type LimitState, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, On, OptionalUser, type OwnedTablesOf, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type ParamKind, type ParamMeta, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderName, type ProviderOptions, Purchases, type PurchasesManifest, type PurchasesService, Put, Query, QueryParams, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type RequestStore, RequireEntitlement, type ResolvedHook, type ResolvedJob, type ResolvedWebhook, Resource, type ResourceEnv, type RouteMeta, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type Seed, type SeedFor, type SeedJson, type SeedRowFor, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SignatureSpec, type SmtpOptions, Spend, type SpendMeta, type SpendOptions, Storage, type StorageConfig, type StorageInput, type StoreEnv, TEST_USERS_CONFIG_KIND, type TableGraph, TableTypes, Tables, type TestUserDef, type TestUserOptions, type TestUsersConfig, type TestUsersInput, type ThrowDescriptor, TraceId, type TwilioOptions, Upload, type UploadConfig, UploadedObject, User, type UserCreatedEvent, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineEgress, defineError, defineFlags, defineNotifications, defineStorage, defineTestUsers, documents, entitlementFor, flag, getErrorRegistry, getJobConfig, getRoutes, getWebhookConfig, makeEnvDts, makePurchasesDts, parseFileSizeLimit, recordThrows, reservedSecretKey, spendFor, storage, testUser, validateUploadAgainstStorage };

package/dist/index.js

@@ -6,14 +6,13 @@ import {
   Log,
   Notifications,
   Purchases,
-  Queue,
   Realtime,
   Storage,
   __getRuntime,
   __requestALS,
   __runWithRuntime,
   __setRuntime
-} from "./chunk-XATG7BRC.js";
+} from "./chunk-I72YYSEI.js";
 import {
   EXTENSION_DEPENDENCIES,
   PALBASE_EXTENSIONS,
@@ -518,6 +517,9 @@ function defineStorage(input) {
 
 // src/config/egress.ts
 var EGRESS_CONFIG_KIND = "egress";
+var EGRESS_TIMEOUT_MIN_MS = 1e3;
+var EGRESS_TIMEOUT_MAX_MS = 3e5;
+var EGRESS_TIMEOUT_DEFAULT_MS = 3e4;
 function defineEgress(input) {
   if (input === null || typeof input !== "object" || !Array.isArray(input.hosts)) {
     throw new Error("defineEgress expects { hosts: string[] }");
@@ -529,7 +531,19 @@ function defineEgress(input) {
     }
     hosts.push(h.trim().toLowerCase());
   }
-  return { __config: EGRESS_CONFIG_KIND, hosts };
+  if (input.timeoutMs === void 0) {
+    return { __config: EGRESS_CONFIG_KIND, hosts };
+  }
+  const timeoutMs = input.timeoutMs;
+  if (typeof timeoutMs !== "number" || !Number.isInteger(timeoutMs)) {
+    throw new Error("defineEgress: timeoutMs must be an integer number of milliseconds");
+  }
+  if (timeoutMs < EGRESS_TIMEOUT_MIN_MS || timeoutMs > EGRESS_TIMEOUT_MAX_MS) {
+    throw new Error(
+      `defineEgress: timeoutMs must be between ${EGRESS_TIMEOUT_MIN_MS} and ${EGRESS_TIMEOUT_MAX_MS} (got ${timeoutMs})`
+    );
+  }
+  return { __config: EGRESS_CONFIG_KIND, hosts, timeoutMs };
 }
 
 // src/config/notifications.ts
@@ -1222,40 +1236,6 @@ function humanize(code) {
   return s.charAt(0).toUpperCase() + s.slice(1);
 }
 
-// src/worker.ts
-var VALID_WORKER_NAME = /^[a-zA-Z0-9_-]+$/;
-var WORKER_DEFAULTS = {
-  retry: 3,
-  timeout: 30,
-  backoff: "exponential"
-};
-function defineWorker(config) {
-  if (!config.name || config.name.trim() === "") {
-    throw new Error("Worker name is required");
-  }
-  if (!VALID_WORKER_NAME.test(config.name)) {
-    throw new Error(
-      `Invalid worker name "${config.name}": must match [a-zA-Z0-9_-]+`
-    );
-  }
-  if (config.retry !== void 0 && (config.retry < 0 || !Number.isInteger(config.retry))) {
-    throw new Error("Worker retry must be a non-negative integer");
-  }
-  if (config.timeout !== void 0 && config.timeout <= 0) {
-    throw new Error("Worker timeout must be a positive number");
-  }
-  if (config.backoff !== void 0 && !["exponential", "linear", "fixed"].includes(config.backoff)) {
-    throw new Error(`Invalid backoff strategy: ${config.backoff}`);
-  }
-  return {
-    name: config.name,
-    retry: config.retry ?? WORKER_DEFAULTS.retry,
-    timeout: config.timeout ?? WORKER_DEFAULTS.timeout,
-    backoff: config.backoff ?? WORKER_DEFAULTS.backoff,
-    handler: config.handler
-  };
-}
-
 // src/decorators/webhook.ts
 var WEBHOOK_META = /* @__PURE__ */ Symbol.for("palbase.backend.webhookMeta");
 var WEBHOOK_EVENTS = /* @__PURE__ */ Symbol.for("palbase.backend.webhookEvents");
@@ -1565,6 +1545,9 @@ export {
   Delete,
   Documents,
   EGRESS_CONFIG_KIND,
+  EGRESS_TIMEOUT_DEFAULT_MS,
+  EGRESS_TIMEOUT_MAX_MS,
+  EGRESS_TIMEOUT_MIN_MS,
   EXTENSION_DEPENDENCIES,
   FLAGS_CONFIG_KIND,
   Flags,
@@ -1590,7 +1573,6 @@ export {
   Put,
   Query,
   QueryParams,
-  Queue,
   RESERVED_SECRET_PREFIX,
   Realtime,
   Req,
@@ -1631,7 +1613,6 @@ export {
   defineSchema,
   defineStorage,
   defineTestUsers,
-  defineWorker,
   documents,
   entitlementFor,
   enumType,