@palbase/backend 2.0.2 → 3.0.0

package/dist/db/index.js

@@ -4,248 +4,18 @@ import {
   enumType,
   integer,
   jsonb,
-  table,
+  makeTypedDB,
   text,
   timestamp,
   uuid
-} from "../chunk-4J3F32SH.js";
-
-// src/db/generator.ts
-function columnTypeToSQL(col) {
-  switch (col.type) {
-    case "uuid":
-      return "UUID";
-    case "text":
-      return "TEXT";
-    case "integer":
-      return "INTEGER";
-    case "boolean":
-      return "BOOLEAN";
-    case "timestamp":
-      return "TIMESTAMPTZ";
-    case "jsonb":
-      return "JSONB";
-    case "enum":
-      return col.enumName ?? "TEXT";
-    default:
-      return "TEXT";
-  }
-}
-function defaultClause(col) {
-  if (col.defaultRandom) {
-    return " DEFAULT gen_random_uuid()";
-  }
-  if (col.defaultNow) {
-    return " DEFAULT now()";
-  }
-  if (col.defaultValue !== void 0) {
-    if (typeof col.defaultValue === "string") {
-      const escaped = col.defaultValue.replace(/'/g, "''");
-      return ` DEFAULT '${escaped}'`;
-    }
-    if (typeof col.defaultValue === "boolean") {
-      return ` DEFAULT ${col.defaultValue ? "true" : "false"}`;
-    }
-    if (typeof col.defaultValue === "object" && col.defaultValue !== null) {
-      const escaped = JSON.stringify(col.defaultValue).replace(/'/g, "''");
-      return ` DEFAULT '${escaped}'::jsonb`;
-    }
-    return ` DEFAULT ${col.defaultValue}`;
-  }
-  return "";
-}
-function onDeleteSQL(action) {
-  switch (action) {
-    case "cascade":
-      return "CASCADE";
-    case "set null":
-      return "SET NULL";
-    case "restrict":
-      return "RESTRICT";
-    case "no action":
-      return "NO ACTION";
-  }
-}
-function generateEnumTypes(tables) {
-  const enums = /* @__PURE__ */ new Map();
-  for (const tableDef of Object.values(tables)) {
-    for (const col of Object.values(tableDef.columns)) {
-      if (col._def.type === "enum" && col._def.enumName && col._def.enumValues) {
-        enums.set(col._def.enumName, col._def.enumValues);
-      }
-    }
-  }
-  return Array.from(enums.entries()).map(([name, values]) => {
-    const vals = values.map((v) => `'${v.replace(/'/g, "''")}'`).join(", ");
-    return `CREATE TYPE ${name} AS ENUM (${vals});`;
-  });
-}
-function generateCreateTable(tableDef) {
-  const lines = [];
-  for (const [colName, colBuilder] of Object.entries(tableDef.columns)) {
-    const col = colBuilder._def;
-    let line = `  ${colName} ${columnTypeToSQL(col)}`;
-    if (col.primaryKey) {
-      line += " PRIMARY KEY";
-    }
-    if (!col.nullable && !col.primaryKey) {
-      line += " NOT NULL";
-    }
-    line += defaultClause(col);
-    if (col.references) {
-      line += ` REFERENCES ${col.references.table}(${col.references.column})`;
-      if (col.onDeleteAction) {
-        line += ` ON DELETE ${onDeleteSQL(col.onDeleteAction)}`;
-      }
-    }
-    lines.push(line);
-  }
-  return `CREATE TABLE ${tableDef.name} (
-${lines.join(",\n")}
-);`;
-}
-function generateDropTable(tableDef) {
-  return `DROP TABLE IF EXISTS ${tableDef.name};`;
-}
-function generateDropEnumTypes(tables) {
-  const enums = /* @__PURE__ */ new Set();
-  for (const tableDef of Object.values(tables)) {
-    for (const col of Object.values(tableDef.columns)) {
-      if (col._def.type === "enum" && col._def.enumName) {
-        enums.add(col._def.enumName);
-      }
-    }
-  }
-  return Array.from(enums).map((name) => `DROP TYPE IF EXISTS ${name};`);
-}
-function generateMigration(schema) {
-  const upParts = [];
-  const downParts = [];
-  const enumTypes = generateEnumTypes(schema.tables);
-  upParts.push(...enumTypes);
-  for (const tableDef of Object.values(schema.tables)) {
-    upParts.push(generateCreateTable(tableDef));
-  }
-  const tableNames = Object.values(schema.tables);
-  for (let i = tableNames.length - 1; i >= 0; i--) {
-    downParts.push(generateDropTable(tableNames[i]));
-  }
-  downParts.push(...generateDropEnumTypes(schema.tables));
-  return {
-    up: upParts.join("\n\n"),
-    down: downParts.join("\n\n")
-  };
-}
-function diffSchemas(oldSchema, newSchema) {
-  const addedTables = [];
-  const droppedTables = [];
-  const columnDiffs = [];
-  const oldTableNames = new Set(Object.keys(oldSchema.tables));
-  const newTableNames = new Set(Object.keys(newSchema.tables));
-  for (const name of newTableNames) {
-    if (!oldTableNames.has(name)) {
-      addedTables.push(newSchema.tables[name]);
-    }
-  }
-  for (const name of oldTableNames) {
-    if (!newTableNames.has(name)) {
-      droppedTables.push(oldSchema.tables[name]);
-    }
-  }
-  for (const name of newTableNames) {
-    if (!oldTableNames.has(name)) continue;
-    const oldTable = oldSchema.tables[name];
-    const newTable = newSchema.tables[name];
-    const oldCols = new Set(Object.keys(oldTable.columns));
-    const newCols = new Set(Object.keys(newTable.columns));
-    for (const col of newCols) {
-      if (!oldCols.has(col)) {
-        columnDiffs.push({
-          type: "add",
-          table: newTable.name,
-          column: col,
-          def: newTable.columns[col]._def
-        });
-      }
-    }
-    for (const col of oldCols) {
-      if (!newCols.has(col)) {
-        columnDiffs.push({
-          type: "drop",
-          table: oldTable.name,
-          column: col,
-          oldDef: oldTable.columns[col]._def
-        });
-      }
-    }
-  }
-  return { addedTables, droppedTables, columnDiffs };
-}
-function generateAddColumn(table2, column, col) {
-  let sql = `ALTER TABLE ${table2} ADD COLUMN ${column} ${columnTypeToSQL(col)}`;
-  if (!col.nullable) {
-    sql += " NOT NULL";
-  }
-  sql += defaultClause(col);
-  if (col.references) {
-    sql += ` REFERENCES ${col.references.table}(${col.references.column})`;
-    if (col.onDeleteAction) {
-      sql += ` ON DELETE ${onDeleteSQL(col.onDeleteAction)}`;
-    }
-  }
-  return `${sql};`;
-}
-function generateDropColumn(table2, column) {
-  return `ALTER TABLE ${table2} DROP COLUMN ${column};`;
-}
-function generateDiffMigration(oldSchema, newSchema) {
-  const { addedTables, droppedTables, columnDiffs } = diffSchemas(oldSchema, newSchema);
-  if (addedTables.length === 0 && droppedTables.length === 0 && columnDiffs.length === 0) {
-    return null;
-  }
-  const upParts = [];
-  const downParts = [];
-  const newEnums = generateEnumTypes(
-    Object.fromEntries(addedTables.map((t) => [t.name, t]))
-  );
-  upParts.push(...newEnums);
-  for (const table2 of addedTables) {
-    upParts.push(generateCreateTable(table2));
-    downParts.push(generateDropTable(table2));
-  }
-  for (const table2 of droppedTables) {
-    upParts.push(generateDropTable(table2));
-    downParts.push(generateCreateTable(table2));
-  }
-  for (const diff of columnDiffs) {
-    if (diff.type === "add" && diff.def) {
-      upParts.push(generateAddColumn(diff.table, diff.column, diff.def));
-      downParts.push(generateDropColumn(diff.table, diff.column));
-    } else if (diff.type === "drop") {
-      upParts.push(generateDropColumn(diff.table, diff.column));
-      if (diff.oldDef) {
-        downParts.push(generateAddColumn(diff.table, diff.column, diff.oldDef));
-      }
-    }
-  }
-  const droppedEnums = generateDropEnumTypes(
-    Object.fromEntries(droppedTables.map((t) => [t.name, t]))
-  );
-  downParts.push(...droppedEnums);
-  return {
-    up: upParts.join("\n\n"),
-    down: downParts.join("\n\n")
-  };
-}
+} from "../chunk-B7EUJP5W.js";
 export {
   boolean,
   defineSchema,
   enumType,
-  generateDiffMigration,
-  generateMigration,
   integer,
   jsonb,
-  table,
+  makeTypedDB,
   text,
   timestamp,
   uuid

package/dist/db/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/db/generator.ts"],"sourcesContent":["import type { ColumnDef, OnDeleteAction } from \"./columns.js\";\nimport type { SchemaDef, TableDef } from \"./schema.js\";\n\n/** Maps column types to their PostgreSQL SQL equivalents. */\nfunction columnTypeToSQL(col: ColumnDef): string {\n  switch (col.type) {\n    case \"uuid\":\n      return \"UUID\";\n    case \"text\":\n      return \"TEXT\";\n    case \"integer\":\n      return \"INTEGER\";\n    case \"boolean\":\n      return \"BOOLEAN\";\n    case \"timestamp\":\n      return \"TIMESTAMPTZ\";\n    case \"jsonb\":\n      return \"JSONB\";\n    case \"enum\":\n      return col.enumName ?? \"TEXT\";\n    default:\n      return \"TEXT\";\n  }\n}\n\n/** Generates the DEFAULT clause for a column. */\nfunction defaultClause(col: ColumnDef): string {\n  if (col.defaultRandom) {\n    return \" DEFAULT gen_random_uuid()\";\n  }\n  if (col.defaultNow) {\n    return \" DEFAULT now()\";\n  }\n  if (col.defaultValue !== undefined) {\n    if (typeof col.defaultValue === \"string\") {\n      // Escape single quotes in string defaults\n      const escaped = col.defaultValue.replace(/'/g, \"''\");\n      return ` DEFAULT '${escaped}'`;\n    }\n    if (typeof col.defaultValue === \"boolean\") {\n      return ` DEFAULT ${col.defaultValue ? \"true\" : \"false\"}`;\n    }\n    if (typeof col.defaultValue === \"object\" && col.defaultValue !== null) {\n      const escaped = JSON.stringify(col.defaultValue).replace(/'/g, \"''\");\n      return ` DEFAULT '${escaped}'::jsonb`;\n    }\n    return ` DEFAULT ${col.defaultValue}`;\n  }\n  return \"\";\n}\n\n/** Maps OnDeleteAction to SQL. */\nfunction onDeleteSQL(action: OnDeleteAction): string {\n  switch (action) {\n    case \"cascade\":\n      return \"CASCADE\";\n    case \"set null\":\n      return \"SET NULL\";\n    case \"restrict\":\n      return \"RESTRICT\";\n    case \"no action\":\n      return \"NO ACTION\";\n  }\n}\n\n/** Generates CREATE TYPE statements for enum columns. */\nfunction generateEnumTypes(tables: Record<string, TableDef>): string[] {\n  const enums = new Map<string, string[]>();\n  for (const tableDef of Object.values(tables)) {\n    for (const col of Object.values(tableDef.columns)) {\n      if (col._def.type === \"enum\" && col._def.enumName && col._def.enumValues) {\n        enums.set(col._def.enumName, col._def.enumValues);\n      }\n    }\n  }\n\n  return Array.from(enums.entries()).map(([name, values]) => {\n    const vals = values.map((v) => `'${v.replace(/'/g, \"''\")}'`).join(\", \");\n    return `CREATE TYPE ${name} AS ENUM (${vals});`;\n  });\n}\n\n/** Generates a CREATE TABLE statement for a single table. */\nfunction generateCreateTable(tableDef: TableDef): string {\n  const lines: string[] = [];\n\n  for (const [colName, colBuilder] of Object.entries(tableDef.columns)) {\n    const col = colBuilder._def;\n    let line = `  ${colName} ${columnTypeToSQL(col)}`;\n\n    if (col.primaryKey) {\n      line += \" PRIMARY KEY\";\n    }\n\n    if (!col.nullable && !col.primaryKey) {\n      line += \" NOT NULL\";\n    }\n\n    line += defaultClause(col);\n\n    if (col.references) {\n      line += ` REFERENCES ${col.references.table}(${col.references.column})`;\n      if (col.onDeleteAction) {\n        line += ` ON DELETE ${onDeleteSQL(col.onDeleteAction)}`;\n      }\n    }\n\n    lines.push(line);\n  }\n\n  return `CREATE TABLE ${tableDef.name} (\\n${lines.join(\",\\n\")}\\n);`;\n}\n\n/** Generates a DROP TABLE statement (for down migration). */\nfunction generateDropTable(tableDef: TableDef): string {\n  return `DROP TABLE IF EXISTS ${tableDef.name};`;\n}\n\n/** Generates DROP TYPE statements for enum columns (for down migration). */\nfunction generateDropEnumTypes(tables: Record<string, TableDef>): string[] {\n  const enums = new Set<string>();\n  for (const tableDef of Object.values(tables)) {\n    for (const col of Object.values(tableDef.columns)) {\n      if (col._def.type === \"enum\" && col._def.enumName) {\n        enums.add(col._def.enumName);\n      }\n    }\n  }\n  return Array.from(enums).map((name) => `DROP TYPE IF EXISTS ${name};`);\n}\n\n/** Result of migration generation. */\nexport interface MigrationResult {\n  up: string;\n  down: string;\n}\n\n/**\n * Generates a full migration (up + down) from a schema definition.\n * Used for initial schema creation.\n */\nexport function generateMigration(schema: SchemaDef): MigrationResult {\n  const upParts: string[] = [];\n  const downParts: string[] = [];\n\n  // Enum types first (up) / last (down)\n  const enumTypes = generateEnumTypes(schema.tables);\n  upParts.push(...enumTypes);\n\n  // Tables\n  for (const tableDef of Object.values(schema.tables)) {\n    upParts.push(generateCreateTable(tableDef));\n  }\n\n  // Down: reverse order — drop tables first, then types\n  const tableNames = Object.values(schema.tables);\n  for (let i = tableNames.length - 1; i >= 0; i--) {\n    downParts.push(generateDropTable(tableNames[i]!));\n  }\n  downParts.push(...generateDropEnumTypes(schema.tables));\n\n  return {\n    up: upParts.join(\"\\n\\n\"),\n    down: downParts.join(\"\\n\\n\"),\n  };\n}\n\n/** Column diff operation. */\ninterface ColumnDiff {\n  type: \"add\" | \"drop\" | \"alter\";\n  table: string;\n  column: string;\n  def?: ColumnDef;\n  oldDef?: ColumnDef;\n}\n\n/** Computes column-level diffs between two schemas. */\nfunction diffSchemas(\n  oldSchema: SchemaDef,\n  newSchema: SchemaDef,\n): { addedTables: TableDef[]; droppedTables: TableDef[]; columnDiffs: ColumnDiff[] } {\n  const addedTables: TableDef[] = [];\n  const droppedTables: TableDef[] = [];\n  const columnDiffs: ColumnDiff[] = [];\n\n  const oldTableNames = new Set(Object.keys(oldSchema.tables));\n  const newTableNames = new Set(Object.keys(newSchema.tables));\n\n  // New tables\n  for (const name of newTableNames) {\n    if (!oldTableNames.has(name)) {\n      addedTables.push(newSchema.tables[name]!);\n    }\n  }\n\n  // Dropped tables\n  for (const name of oldTableNames) {\n    if (!newTableNames.has(name)) {\n      droppedTables.push(oldSchema.tables[name]!);\n    }\n  }\n\n  // Column-level diffs for existing tables\n  for (const name of newTableNames) {\n    if (!oldTableNames.has(name)) continue;\n\n    const oldTable = oldSchema.tables[name]!;\n    const newTable = newSchema.tables[name]!;\n    const oldCols = new Set(Object.keys(oldTable.columns));\n    const newCols = new Set(Object.keys(newTable.columns));\n\n    for (const col of newCols) {\n      if (!oldCols.has(col)) {\n        columnDiffs.push({\n          type: \"add\",\n          table: newTable.name,\n          column: col,\n          def: newTable.columns[col]!._def,\n        });\n      }\n    }\n\n    for (const col of oldCols) {\n      if (!newCols.has(col)) {\n        columnDiffs.push({\n          type: \"drop\",\n          table: oldTable.name,\n          column: col,\n          oldDef: oldTable.columns[col]!._def,\n        });\n      }\n    }\n  }\n\n  return { addedTables, droppedTables, columnDiffs };\n}\n\n/** Generates an ALTER TABLE ADD COLUMN statement. */\nfunction generateAddColumn(table: string, column: string, col: ColumnDef): string {\n  let sql = `ALTER TABLE ${table} ADD COLUMN ${column} ${columnTypeToSQL(col)}`;\n  if (!col.nullable) {\n    sql += \" NOT NULL\";\n  }\n  sql += defaultClause(col);\n  if (col.references) {\n    sql += ` REFERENCES ${col.references.table}(${col.references.column})`;\n    if (col.onDeleteAction) {\n      sql += ` ON DELETE ${onDeleteSQL(col.onDeleteAction)}`;\n    }\n  }\n  return `${sql};`;\n}\n\n/** Generates an ALTER TABLE DROP COLUMN statement. */\nfunction generateDropColumn(table: string, column: string): string {\n  return `ALTER TABLE ${table} DROP COLUMN ${column};`;\n}\n\n/**\n * Generates a diff migration between two schemas.\n * Returns null if there are no changes.\n */\nexport function generateDiffMigration(\n  oldSchema: SchemaDef,\n  newSchema: SchemaDef,\n): MigrationResult | null {\n  const { addedTables, droppedTables, columnDiffs } = diffSchemas(oldSchema, newSchema);\n\n  if (addedTables.length === 0 && droppedTables.length === 0 && columnDiffs.length === 0) {\n    return null;\n  }\n\n  const upParts: string[] = [];\n  const downParts: string[] = [];\n\n  // New enum types from added tables\n  const newEnums = generateEnumTypes(\n    Object.fromEntries(addedTables.map((t) => [t.name, t])),\n  );\n  upParts.push(...newEnums);\n\n  // New tables\n  for (const table of addedTables) {\n    upParts.push(generateCreateTable(table));\n    downParts.push(generateDropTable(table));\n  }\n\n  // Dropped tables\n  for (const table of droppedTables) {\n    upParts.push(generateDropTable(table));\n    downParts.push(generateCreateTable(table));\n  }\n\n  // Column diffs\n  for (const diff of columnDiffs) {\n    if (diff.type === \"add\" && diff.def) {\n      upParts.push(generateAddColumn(diff.table, diff.column, diff.def));\n      downParts.push(generateDropColumn(diff.table, diff.column));\n    } else if (diff.type === \"drop\") {\n      upParts.push(generateDropColumn(diff.table, diff.column));\n      if (diff.oldDef) {\n        downParts.push(generateAddColumn(diff.table, diff.column, diff.oldDef));\n      }\n    }\n  }\n\n  // Drop enum types from dropped tables (down)\n  const droppedEnums = generateDropEnumTypes(\n    Object.fromEntries(droppedTables.map((t) => [t.name, t])),\n  );\n  downParts.push(...droppedEnums);\n\n  return {\n    up: upParts.join(\"\\n\\n\"),\n    down: downParts.join(\"\\n\\n\"),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;AAIA,SAAS,gBAAgB,KAAwB;AAC/C,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,IAAI,YAAY;AAAA,IACzB;AACE,aAAO;AAAA,EACX;AACF;AAGA,SAAS,cAAc,KAAwB;AAC7C,MAAI,IAAI,eAAe;AACrB,WAAO;AAAA,EACT;AACA,MAAI,IAAI,YAAY;AAClB,WAAO;AAAA,EACT;AACA,MAAI,IAAI,iBAAiB,QAAW;AAClC,QAAI,OAAO,IAAI,iBAAiB,UAAU;AAExC,YAAM,UAAU,IAAI,aAAa,QAAQ,MAAM,IAAI;AACnD,aAAO,aAAa,OAAO;AAAA,IAC7B;AACA,QAAI,OAAO,IAAI,iBAAiB,WAAW;AACzC,aAAO,YAAY,IAAI,eAAe,SAAS,OAAO;AAAA,IACxD;AACA,QAAI,OAAO,IAAI,iBAAiB,YAAY,IAAI,iBAAiB,MAAM;AACrE,YAAM,UAAU,KAAK,UAAU,IAAI,YAAY,EAAE,QAAQ,MAAM,IAAI;AACnE,aAAO,aAAa,OAAO;AAAA,IAC7B;AACA,WAAO,YAAY,IAAI,YAAY;AAAA,EACrC;AACA,SAAO;AACT;AAGA,SAAS,YAAY,QAAgC;AACnD,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EACX;AACF;AAGA,SAAS,kBAAkB,QAA4C;AACrE,QAAM,QAAQ,oBAAI,IAAsB;AACxC,aAAW,YAAY,OAAO,OAAO,MAAM,GAAG;AAC5C,eAAW,OAAO,OAAO,OAAO,SAAS,OAAO,GAAG;AACjD,UAAI,IAAI,KAAK,SAAS,UAAU,IAAI,KAAK,YAAY,IAAI,KAAK,YAAY;AACxE,cAAM,IAAI,IAAI,KAAK,UAAU,IAAI,KAAK,UAAU;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,MAAM,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,MAAM,MAAM;AACzD,UAAM,OAAO,OAAO,IAAI,CAAC,MAAM,IAAI,EAAE,QAAQ,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI;AACtE,WAAO,eAAe,IAAI,aAAa,IAAI;AAAA,EAC7C,CAAC;AACH;AAGA,SAAS,oBAAoB,UAA4B;AACvD,QAAM,QAAkB,CAAC;AAEzB,aAAW,CAAC,SAAS,UAAU,KAAK,OAAO,QAAQ,SAAS,OAAO,GAAG;AACpE,UAAM,MAAM,WAAW;AACvB,QAAI,OAAO,KAAK,OAAO,IAAI,gBAAgB,GAAG,CAAC;AAE/C,QAAI,IAAI,YAAY;AAClB,cAAQ;AAAA,IACV;AAEA,QAAI,CAAC,IAAI,YAAY,CAAC,IAAI,YAAY;AACpC,cAAQ;AAAA,IACV;AAEA,YAAQ,cAAc,GAAG;AAEzB,QAAI,IAAI,YAAY;AAClB,cAAQ,eAAe,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,MAAM;AACpE,UAAI,IAAI,gBAAgB;AACtB,gBAAQ,cAAc,YAAY,IAAI,cAAc,CAAC;AAAA,MACvD;AAAA,IACF;AAEA,UAAM,KAAK,IAAI;AAAA,EACjB;AAEA,SAAO,gBAAgB,SAAS,IAAI;AAAA,EAAO,MAAM,KAAK,KAAK,CAAC;AAAA;AAC9D;AAGA,SAAS,kBAAkB,UAA4B;AACrD,SAAO,wBAAwB,SAAS,IAAI;AAC9C;AAGA,SAAS,sBAAsB,QAA4C;AACzE,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,YAAY,OAAO,OAAO,MAAM,GAAG;AAC5C,eAAW,OAAO,OAAO,OAAO,SAAS,OAAO,GAAG;AACjD,UAAI,IAAI,KAAK,SAAS,UAAU,IAAI,KAAK,UAAU;AACjD,cAAM,IAAI,IAAI,KAAK,QAAQ;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,KAAK,EAAE,IAAI,CAAC,SAAS,uBAAuB,IAAI,GAAG;AACvE;AAYO,SAAS,kBAAkB,QAAoC;AACpE,QAAM,UAAoB,CAAC;AAC3B,QAAM,YAAsB,CAAC;AAG7B,QAAM,YAAY,kBAAkB,OAAO,MAAM;AACjD,UAAQ,KAAK,GAAG,SAAS;AAGzB,aAAW,YAAY,OAAO,OAAO,OAAO,MAAM,GAAG;AACnD,YAAQ,KAAK,oBAAoB,QAAQ,CAAC;AAAA,EAC5C;AAGA,QAAM,aAAa,OAAO,OAAO,OAAO,MAAM;AAC9C,WAAS,IAAI,WAAW,SAAS,GAAG,KAAK,GAAG,KAAK;AAC/C,cAAU,KAAK,kBAAkB,WAAW,CAAC,CAAE,CAAC;AAAA,EAClD;AACA,YAAU,KAAK,GAAG,sBAAsB,OAAO,MAAM,CAAC;AAEtD,SAAO;AAAA,IACL,IAAI,QAAQ,KAAK,MAAM;AAAA,IACvB,MAAM,UAAU,KAAK,MAAM;AAAA,EAC7B;AACF;AAYA,SAAS,YACP,WACA,WACmF;AACnF,QAAM,cAA0B,CAAC;AACjC,QAAM,gBAA4B,CAAC;AACnC,QAAM,cAA4B,CAAC;AAEnC,QAAM,gBAAgB,IAAI,IAAI,OAAO,KAAK,UAAU,MAAM,CAAC;AAC3D,QAAM,gBAAgB,IAAI,IAAI,OAAO,KAAK,UAAU,MAAM,CAAC;AAG3D,aAAW,QAAQ,eAAe;AAChC,QAAI,CAAC,cAAc,IAAI,IAAI,GAAG;AAC5B,kBAAY,KAAK,UAAU,OAAO,IAAI,CAAE;AAAA,IAC1C;AAAA,EACF;AAGA,aAAW,QAAQ,eAAe;AAChC,QAAI,CAAC,cAAc,IAAI,IAAI,GAAG;AAC5B,oBAAc,KAAK,UAAU,OAAO,IAAI,CAAE;AAAA,IAC5C;AAAA,EACF;AAGA,aAAW,QAAQ,eAAe;AAChC,QAAI,CAAC,cAAc,IAAI,IAAI,EAAG;AAE9B,UAAM,WAAW,UAAU,OAAO,IAAI;AACtC,UAAM,WAAW,UAAU,OAAO,IAAI;AACtC,UAAM,UAAU,IAAI,IAAI,OAAO,KAAK,SAAS,OAAO,CAAC;AACrD,UAAM,UAAU,IAAI,IAAI,OAAO,KAAK,SAAS,OAAO,CAAC;AAErD,eAAW,OAAO,SAAS;AACzB,UAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AACrB,oBAAY,KAAK;AAAA,UACf,MAAM;AAAA,UACN,OAAO,SAAS;AAAA,UAChB,QAAQ;AAAA,UACR,KAAK,SAAS,QAAQ,GAAG,EAAG;AAAA,QAC9B,CAAC;AAAA,MACH;AAAA,IACF;AAEA,eAAW,OAAO,SAAS;AACzB,UAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AACrB,oBAAY,KAAK;AAAA,UACf,MAAM;AAAA,UACN,OAAO,SAAS;AAAA,UAChB,QAAQ;AAAA,UACR,QAAQ,SAAS,QAAQ,GAAG,EAAG;AAAA,QACjC,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,aAAa,eAAe,YAAY;AACnD;AAGA,SAAS,kBAAkBA,QAAe,QAAgB,KAAwB;AAChF,MAAI,MAAM,eAAeA,MAAK,eAAe,MAAM,IAAI,gBAAgB,GAAG,CAAC;AAC3E,MAAI,CAAC,IAAI,UAAU;AACjB,WAAO;AAAA,EACT;AACA,SAAO,cAAc,GAAG;AACxB,MAAI,IAAI,YAAY;AAClB,WAAO,eAAe,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,MAAM;AACnE,QAAI,IAAI,gBAAgB;AACtB,aAAO,cAAc,YAAY,IAAI,cAAc,CAAC;AAAA,IACtD;AAAA,EACF;AACA,SAAO,GAAG,GAAG;AACf;AAGA,SAAS,mBAAmBA,QAAe,QAAwB;AACjE,SAAO,eAAeA,MAAK,gBAAgB,MAAM;AACnD;AAMO,SAAS,sBACd,WACA,WACwB;AACxB,QAAM,EAAE,aAAa,eAAe,YAAY,IAAI,YAAY,WAAW,SAAS;AAEpF,MAAI,YAAY,WAAW,KAAK,cAAc,WAAW,KAAK,YAAY,WAAW,GAAG;AACtF,WAAO;AAAA,EACT;AAEA,QAAM,UAAoB,CAAC;AAC3B,QAAM,YAAsB,CAAC;AAG7B,QAAM,WAAW;AAAA,IACf,OAAO,YAAY,YAAY,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAAA,EACxD;AACA,UAAQ,KAAK,GAAG,QAAQ;AAGxB,aAAWA,UAAS,aAAa;AAC/B,YAAQ,KAAK,oBAAoBA,MAAK,CAAC;AACvC,cAAU,KAAK,kBAAkBA,MAAK,CAAC;AAAA,EACzC;AAGA,aAAWA,UAAS,eAAe;AACjC,YAAQ,KAAK,kBAAkBA,MAAK,CAAC;AACrC,cAAU,KAAK,oBAAoBA,MAAK,CAAC;AAAA,EAC3C;AAGA,aAAW,QAAQ,aAAa;AAC9B,QAAI,KAAK,SAAS,SAAS,KAAK,KAAK;AACnC,cAAQ,KAAK,kBAAkB,KAAK,OAAO,KAAK,QAAQ,KAAK,GAAG,CAAC;AACjE,gBAAU,KAAK,mBAAmB,KAAK,OAAO,KAAK,MAAM,CAAC;AAAA,IAC5D,WAAW,KAAK,SAAS,QAAQ;AAC/B,cAAQ,KAAK,mBAAmB,KAAK,OAAO,KAAK,MAAM,CAAC;AACxD,UAAI,KAAK,QAAQ;AACf,kBAAU,KAAK,kBAAkB,KAAK,OAAO,KAAK,QAAQ,KAAK,MAAM,CAAC;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AAGA,QAAM,eAAe;AAAA,IACnB,OAAO,YAAY,cAAc,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAAA,EAC1D;AACA,YAAU,KAAK,GAAG,YAAY;AAE9B,SAAO;AAAA,IACL,IAAI,QAAQ,KAAK,MAAM;AAAA,IACvB,MAAM,UAAU,KAAK,MAAM;AAAA,EAC7B;AACF;","names":["table"]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{endpoint-Djk5L6G2.d.ts → endpoint-DJ98tQd6.d.cts}

@@ -1,12 +1,12 @@
 import { ZodSchema, z } from 'zod';
-import { S as SchemaDef } from './schema-BqfEhIC0.js';
 
 /** Supported HTTP methods for endpoints. */
 type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
 /** Authenticated user attached to the request context. */
 interface User {
     id: string;
-    email: string;
+    /** User's email, if they signed up with one (absent for phone-only users). */
+    email?: string;
     role: string;
     metadata: Record<string, unknown>;
 }
@@ -54,10 +54,10 @@ declare function defineMiddleware(fn: MiddlewareHandler): MiddlewareHandler;
  *   1. Directly: `throw new HttpError(404, "todo_not_found", "No such todo")`.
  *      Surfaces on the wire (and to iOS) as `BackendError.server(code, status,
  *      message, requestId)`.
- *   2. Via `ctx.errors.<name>(data?)` for declared errors — see
- *      `EndpointConfig.errors`. The endpoint's OpenAPI spec describes each
- *      one, and the CLI codegen emits a typed `<Endpoint>.Error` enum so iOS
- *      callers can `catch <Endpoint>.Error.<case>` directly.
+ *   2. Via `req.errors.<name>(data?)` for declared errors — see a handler's
+ *      `errors` map (`defineHandler`). The endpoint's OpenAPI spec describes
+ *      each one, and the CLI codegen emits a typed `<Endpoint>.Error` enum so
+ *      iOS callers can `catch <Endpoint>.Error.<case>` directly.
  *
  * The optional `data` field carries a structured payload alongside the
  * standard envelope — used by declared errors that need to ship extra context
@@ -1349,20 +1349,19 @@ type ErrorThrowers<TErrors extends ErrorMap | undefined> = TErrors extends Error
  * error throwers. Services (`Database`, `Documents`, `Cache`, …) are NOT on
  * the request: import them directly from `@palbase/backend` as singletons.
  *
- *   import { defineEndpoint, Database } from "@palbase/backend";
+ *   import { defineHandler, Database } from "@palbase/backend";
  *
- *   export default defineEndpoint({
- *     method: "POST",
+ *   export default defineHandler({
  *     handler: async (req) => Database.insert("todos", { title: req.input.title }),
  *   });
  *
  * Generic parameters:
  * - `TInput` — the validated `input` type (inferred from the `input` Zod
- *   schema by `defineEndpoint`). The user-facing form is single-generic:
+ *   schema by `defineHandler`). The user-facing form is single-generic:
  *   `PBRequest<TodoInput>`.
  * - `TAuthed` — whether `user` is non-null. DEFAULTS to `true` (the common
  *   case; the auth pipeline returns 401 before the handler when auth is
- *   required, so a non-null `user` is runtime-honest). `defineEndpoint` passes
+ *   required, so a non-null `user` is runtime-honest). `defineHandler` passes
  *   `IsAuthed<TAuth>` here, so `auth: false` → `User | null`.
  * - `TErrors` — the declared `errors` map, typing `req.errors.<name>(...)`.
  */
@@ -1377,7 +1376,7 @@ interface PBRequest<TInput = unknown, TAuthed extends boolean = true, TErrors ex
     headers: Record<string, string>;
     /** Authenticated user. Non-null (`User`) by default; `User | null` only when
      * the endpoint's `auth` config disables enforcement (driven by `TAuthed`,
-     * which `defineEndpoint` computes from the `auth` literal via {@link IsAuthed}). */
+     * which `defineHandler` computes from the `auth` literal via {@link IsAuthed}). */
     user: TAuthed extends true ? User : User | null;
     /** Calling-client metadata derived from request headers (all nullable). */
     client: ClientInfo;
@@ -1392,7 +1391,7 @@ interface PBRequest<TInput = unknown, TAuthed extends boolean = true, TErrors ex
     /** W3C span id for this handler invocation. */
     spanId: string;
     /** Typed throwers for the endpoint's declared errors. Empty when the
-     * `errors` block is absent on `defineEndpoint`. */
+     * `errors` block is absent on `defineHandler`. */
     errors: ErrorThrowers<TErrors>;
 }
 /** Middleware function signature — uses MiddlewareContext (no input, not yet validated). */
@@ -1407,64 +1406,27 @@ type AuthSpec = boolean | Partial<AuthConfig>;
 /** Compute, at the type level, whether an endpoint authenticates its caller —
  * i.e. whether `req.user` should be `User` (non-null) instead of `User | null`.
  *
- * This mirrors the Go pipeline's enforcement exactly (extract_meta.js + auth.go):
- * a request is authenticated ⟺ `auth === true` OR (`auth` is an object whose
- * `required` is not explicitly `false`). So `req.user` stays nullable ONLY when
- * `auth` is absent (`undefined`), `auth === false`, or `auth: { required: false }`.
+ * SECURE BY DEFAULT — mirrors the runtime (loader.go DefaultAuthConfig +
+ * pipeline/auth.go): an endpoint requires auth UNLESS it explicitly opts out.
+ * `req.user` is nullable ONLY for `auth: false` or `auth: { required: false }`.
+ * Omitting `auth` means AUTH REQUIRED (non-null `req.user`), so a handler that
+ * forgets `auth` fails safe (401) instead of silently exposing data.
  *
- * | `TAuth`                         | `IsAuthed<TAuth>` |
- * |---------------------------------|-------------------|
- * | `undefined`                     | `false`           |
- * | `true`                          | `true`            |
- * | `false`                         | `false`           |
- * | `{ required: true }`            | `true`            |
- * | `{ required: false }`           | `false`           |
- * | `{ role: 'admin' }` (no `required`) | `true` ⚠️     |
+ * | `TAuth`                          | `IsAuthed<TAuth>` |
+ * |----------------------------------|-------------------|
+ * | omitted (`undefined`)            | `true`  (secure)  |
+ * | `true`                           | `true`            |
+ * | `false`                          | `false` (public)  |
+ * | `{ required: true }`             | `true`            |
+ * | `{ required: false }`            | `false` (public)  |
+ * | `{ role: 'admin' }` (no `required`) | `true`         |
  *
- * Order matters: the `{ required: false }` branch is checked first so the
- * object case can't swallow it; `true` then `false` literals are handled
- * explicitly before the catch-all object branch (which encodes the
- * "required omitted ⇒ required" corner case).
+ * Order matters: the `{ required: false }` branch is checked first so the object
+ * case can't swallow it; `true`/`false` literals next; the catch-all (omitted)
+ * resolves to `true` (secure-by-default).
  */
 type IsAuthed<TAuth> = TAuth extends {
     required: false;
-} ? false : TAuth extends true ? true : TAuth extends false ? false : TAuth extends object ? true : false;
-/** Configuration for defining an endpoint.
- *
- * `TSchema` — optional `SchemaDef` carried on the `schema` field. The runtime
- * uses it to wire a typed `.tables.*` API; authors opt in per endpoint with
- * `typedDatabase(schema)` (see runtime.ts).
- *
- * `TAuth` — captures the literal type of the `auth` field (via the `const`
- * type parameter on `defineEndpoint`) so the handler's `req.user` can be
- * narrowed to non-null `User` when auth is required. See {@link IsAuthed}.
- *
- * `TErrors` — captures the literal `errors` map (via the `const` type
- * parameter on `defineEndpoint`) so `req.errors.<name>(...)` is typed per
- * declared entry. The OpenAPI generator emits each one as a discriminated
- * response under `responses[<status>]`, and the CLI codegen lowers them to
- * a typed `<Endpoint>.Error` enum on iOS.
- */
-interface EndpointConfig<TInputSchema extends ZodSchema = ZodSchema, TOutputSchema extends ZodSchema = ZodSchema, TSchema extends SchemaDef | undefined = undefined, TAuth extends AuthSpec | undefined = undefined, TErrors extends ErrorMap | undefined = undefined> {
-    method: HttpMethod;
-    auth?: TAuth;
-    rateLimit?: RateLimitConfig;
-    input?: TInputSchema;
-    output?: TOutputSchema;
-    schema?: TSchema;
-    errors?: TErrors;
-    middleware?: Middleware[];
-    handler: (req: PBRequest<z.infer<TInputSchema>, IsAuthed<TAuth>, TErrors>) => Promise<z.infer<TOutputSchema>>;
-}
-/** Define a type-safe endpoint. The input schema infers the `req.input` type.
- * Pass a `schema` (from `defineSchema`) and wrap `Database` with
- * `typedDatabase(schema)` in the handler for a typed `.tables.*` API.
- *
- * The `const TAuth` and `const TErrors` type parameters capture the `auth`
- * and `errors` fields as literals, so `req.user` narrows to non-null `User`
- * when auth is enforced and `req.errors.<name>(...)` is typed per declared
- * entry.
- */
-declare function defineEndpoint<TInputSchema extends ZodSchema, TOutputSchema extends ZodSchema, TSchema extends SchemaDef | undefined = undefined, const TAuth extends AuthSpec | undefined = undefined, const TErrors extends ErrorMap | undefined = undefined>(config: EndpointConfig<TInputSchema, TOutputSchema, TSchema, TAuth, TErrors>): EndpointConfig<TInputSchema, TOutputSchema, TSchema, TAuth, TErrors>;
+} ? false : TAuth extends true ? true : TAuth extends false ? false : TAuth extends object ? true : true;
 
-export { type PalbaseFileObject as $, type AuthConfig as A, type PalbaseCohortQueryInput as B, type CacheClient as C, type DBClient as D, type ErrorThrowers as E, type FileContext as F, type PalbaseCohortResult as G, HttpError as H, type PalbaseCollectionRef as I, type PalbaseCountQueryInput as J, type PalbaseCountResult as K, type Logger as L, type Middleware as M, type PalbaseCreateLinkParams as N, type PalbaseDeviceInfo as O, type PalbaseDocsClient as P, type QueueClient as Q, type PalbaseDeviceTokenView as R, type PalbaseDocumentRef as S, type PalbaseDocumentSnapshot as T, type User as U, type PalbaseEmailClient as V, type PalbaseEmailSendParams as W, type PalbaseEmailSendResponse as X, type PalbaseEventNamesResult as Y, type PalbaseEventsQueryInput as Z, type PalbaseEventsResult as _, type PalbaseFlagsClient as a, type PalbaseFlag as a0, type PalbaseFlagContext as a1, type PalbaseFlagVariant as a2, type PalbaseFunctionsClient as a3, type PalbaseFunnelQueryInput as a4, type PalbaseFunnelResult as a5, type PalbaseIdentifyTraits as a6, type PalbaseInboxClient as a7, type PalbaseInboxListOptions as a8, type PalbaseInboxListResult as a9, type PalbaseRegisterDeviceParams as aA, type PalbaseResult as aB, type PalbaseRetentionQueryInput as aC, type PalbaseRetentionResult as aD, type PalbaseSession as aE, type PalbaseSignedUrlResponse as aF, type PalbaseSmsClient as aG, type PalbaseSmsSendParams as aH, type PalbaseSmsSendResponse as aI, type PalbaseTransformOptions as aJ, type PalbaseUpdateLinkParams as aK, type PalbaseUploadOptions as aL, type PalbaseUser as aM, type PalbaseUserDetailResult as aN, type PalbaseUsersQueryInput as aO, type PalbaseUsersResult as aP, type PalbaseVerifyRequestSignatureParams as aQ, type PalbaseWhereOperator as aR, type RateLimitConfig as aS, type TxClient as aT, defineEndpoint as aU, defineMiddleware as aV, type PalbaseInboxMessage as aa, type PalbaseInboxSendParams as ab, type PalbaseInboxSendResponse as ac, type PalbaseInitialLink as ad, type PalbaseInvokeOptions as ae, type PalbaseLink as af, type PalbaseLinkAnalytics as ag, type PalbaseLinkDetails as ah, type PalbaseLinksClient as ai, type PalbaseListLinksOptions as aj, type PalbaseListLinksResult as ak, type PalbaseListOptions as al, type PalbaseMatchParams as am, type PalbaseMultiChannelResponse as an, type PalbaseOverviewResult as ao, type PalbasePreferences as ap, type PalbasePreferencesClient as aq, type PalbasePublicUrlResponse as ar, type PalbasePushClient as as, type PalbasePushSendParams as at, type PalbasePushSendResponse as au, type PalbaseQrCodeOptions as av, type PalbaseQuerySnapshot as aw, type PalbaseRealtimeChannel as ax, type PalbaseRealtimeClient as ay, type PalbaseRealtimeMessage as az, type PalbaseNotificationsClient as b, type PalbaseStorageClient as c, type PalbaseModuleClients as d, type ClientInfo as e, type EndpointConfig as f, type ErrorDef as g, type ErrorMap as h, type HttpMethod as i, type MiddlewareContext as j, type MiddlewareHandler as k, type PBRequest as l, type PalbaseAnalyticsClient as m, type PalbaseAnalyticsManagementNamespace as n, type PalbaseAnalyticsProperties as o, type PalbaseAnalyticsQueryNamespace as p, type PalbaseAttestAndroidParams as q, type PalbaseAttestAndroidResult as r, type PalbaseAttestiOSParams as s, type PalbaseAttestiOSResult as t, type PalbaseAuthClient as u, type PalbaseBindDeviceParams as v, type PalbaseBucketClient as w, type PalbaseCmsClient as x, type PalbaseCmsFindOneOptions as y, type PalbaseCmsFindOptions as z };
+export { type PalbaseEventsQueryInput as $, type AuthSpec as A, type PalbaseCohortQueryInput as B, type CacheClient as C, type DBClient as D, type ErrorMap as E, type FileContext as F, type PalbaseCohortResult as G, HttpError as H, type IsAuthed as I, type PalbaseCollectionRef as J, type PalbaseCountQueryInput as K, type Logger as L, type Middleware as M, type PalbaseCountResult as N, type PalbaseCreateLinkParams as O, type PBRequest as P, type QueueClient as Q, type RateLimitConfig as R, type PalbaseDeviceInfo as S, type PalbaseDeviceTokenView as T, type User as U, type PalbaseDocumentRef as V, type PalbaseDocumentSnapshot as W, type PalbaseEmailClient as X, type PalbaseEmailSendParams as Y, type PalbaseEmailSendResponse as Z, type PalbaseEventNamesResult as _, type PalbaseModuleClients as a, type PalbaseEventsResult as a0, type PalbaseFileObject as a1, type PalbaseFlag as a2, type PalbaseFlagContext as a3, type PalbaseFlagVariant as a4, type PalbaseFunctionsClient as a5, type PalbaseFunnelQueryInput as a6, type PalbaseFunnelResult as a7, type PalbaseIdentifyTraits as a8, type PalbaseInboxClient as a9, type PalbaseRealtimeClient as aA, type PalbaseRealtimeMessage as aB, type PalbaseRegisterDeviceParams as aC, type PalbaseResult as aD, type PalbaseRetentionQueryInput as aE, type PalbaseRetentionResult as aF, type PalbaseSession as aG, type PalbaseSignedUrlResponse as aH, type PalbaseSmsClient as aI, type PalbaseSmsSendParams as aJ, type PalbaseSmsSendResponse as aK, type PalbaseTransformOptions as aL, type PalbaseUpdateLinkParams as aM, type PalbaseUploadOptions as aN, type PalbaseUser as aO, type PalbaseUserDetailResult as aP, type PalbaseUsersQueryInput as aQ, type PalbaseUsersResult as aR, type PalbaseVerifyRequestSignatureParams as aS, type PalbaseWhereOperator as aT, type TxClient as aU, defineMiddleware as aV, type PalbaseInboxListOptions as aa, type PalbaseInboxListResult as ab, type PalbaseInboxMessage as ac, type PalbaseInboxSendParams as ad, type PalbaseInboxSendResponse as ae, type PalbaseInitialLink as af, type PalbaseInvokeOptions as ag, type PalbaseLink as ah, type PalbaseLinkAnalytics as ai, type PalbaseLinkDetails as aj, type PalbaseLinksClient as ak, type PalbaseListLinksOptions as al, type PalbaseListLinksResult as am, type PalbaseListOptions as an, type PalbaseMatchParams as ao, type PalbaseMultiChannelResponse as ap, type PalbaseOverviewResult as aq, type PalbasePreferences as ar, type PalbasePreferencesClient as as, type PalbasePublicUrlResponse as at, type PalbasePushClient as au, type PalbasePushSendParams as av, type PalbasePushSendResponse as aw, type PalbaseQrCodeOptions as ax, type PalbaseQuerySnapshot as ay, type PalbaseRealtimeChannel as az, type PalbaseDocsClient as b, type PalbaseFlagsClient as c, type PalbaseNotificationsClient as d, type PalbaseStorageClient as e, type AuthConfig as f, type ClientInfo as g, type ErrorDef as h, type ErrorThrowers as i, type HttpMethod as j, type MiddlewareContext as k, type MiddlewareHandler as l, type PalbaseAnalyticsClient as m, type PalbaseAnalyticsManagementNamespace as n, type PalbaseAnalyticsProperties as o, type PalbaseAnalyticsQueryNamespace as p, type PalbaseAttestAndroidParams as q, type PalbaseAttestAndroidResult as r, type PalbaseAttestiOSParams as s, type PalbaseAttestiOSResult as t, type PalbaseAuthClient as u, type PalbaseBindDeviceParams as v, type PalbaseBucketClient as w, type PalbaseCmsClient as x, type PalbaseCmsFindOneOptions as y, type PalbaseCmsFindOptions as z };

package/dist/{endpoint-BlcY2xNA.d.cts → endpoint-DJ98tQd6.d.ts}

@@ -1,12 +1,12 @@
 import { ZodSchema, z } from 'zod';
-import { S as SchemaDef } from './schema-BqfEhIC0.cjs';
 
 /** Supported HTTP methods for endpoints. */
 type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
 /** Authenticated user attached to the request context. */
 interface User {
     id: string;
-    email: string;
+    /** User's email, if they signed up with one (absent for phone-only users). */
+    email?: string;
     role: string;
     metadata: Record<string, unknown>;
 }
@@ -54,10 +54,10 @@ declare function defineMiddleware(fn: MiddlewareHandler): MiddlewareHandler;
  *   1. Directly: `throw new HttpError(404, "todo_not_found", "No such todo")`.
  *      Surfaces on the wire (and to iOS) as `BackendError.server(code, status,
  *      message, requestId)`.
- *   2. Via `ctx.errors.<name>(data?)` for declared errors — see
- *      `EndpointConfig.errors`. The endpoint's OpenAPI spec describes each
- *      one, and the CLI codegen emits a typed `<Endpoint>.Error` enum so iOS
- *      callers can `catch <Endpoint>.Error.<case>` directly.
+ *   2. Via `req.errors.<name>(data?)` for declared errors — see a handler's
+ *      `errors` map (`defineHandler`). The endpoint's OpenAPI spec describes
+ *      each one, and the CLI codegen emits a typed `<Endpoint>.Error` enum so
+ *      iOS callers can `catch <Endpoint>.Error.<case>` directly.
  *
  * The optional `data` field carries a structured payload alongside the
  * standard envelope — used by declared errors that need to ship extra context
@@ -1349,20 +1349,19 @@ type ErrorThrowers<TErrors extends ErrorMap | undefined> = TErrors extends Error
  * error throwers. Services (`Database`, `Documents`, `Cache`, …) are NOT on
  * the request: import them directly from `@palbase/backend` as singletons.
  *
- *   import { defineEndpoint, Database } from "@palbase/backend";
+ *   import { defineHandler, Database } from "@palbase/backend";
  *
- *   export default defineEndpoint({
- *     method: "POST",
+ *   export default defineHandler({
  *     handler: async (req) => Database.insert("todos", { title: req.input.title }),
  *   });
  *
  * Generic parameters:
  * - `TInput` — the validated `input` type (inferred from the `input` Zod
- *   schema by `defineEndpoint`). The user-facing form is single-generic:
+ *   schema by `defineHandler`). The user-facing form is single-generic:
  *   `PBRequest<TodoInput>`.
  * - `TAuthed` — whether `user` is non-null. DEFAULTS to `true` (the common
  *   case; the auth pipeline returns 401 before the handler when auth is
- *   required, so a non-null `user` is runtime-honest). `defineEndpoint` passes
+ *   required, so a non-null `user` is runtime-honest). `defineHandler` passes
  *   `IsAuthed<TAuth>` here, so `auth: false` → `User | null`.
  * - `TErrors` — the declared `errors` map, typing `req.errors.<name>(...)`.
  */
@@ -1377,7 +1376,7 @@ interface PBRequest<TInput = unknown, TAuthed extends boolean = true, TErrors ex
     headers: Record<string, string>;
     /** Authenticated user. Non-null (`User`) by default; `User | null` only when
      * the endpoint's `auth` config disables enforcement (driven by `TAuthed`,
-     * which `defineEndpoint` computes from the `auth` literal via {@link IsAuthed}). */
+     * which `defineHandler` computes from the `auth` literal via {@link IsAuthed}). */
     user: TAuthed extends true ? User : User | null;
     /** Calling-client metadata derived from request headers (all nullable). */
     client: ClientInfo;
@@ -1392,7 +1391,7 @@ interface PBRequest<TInput = unknown, TAuthed extends boolean = true, TErrors ex
     /** W3C span id for this handler invocation. */
     spanId: string;
     /** Typed throwers for the endpoint's declared errors. Empty when the
-     * `errors` block is absent on `defineEndpoint`. */
+     * `errors` block is absent on `defineHandler`. */
     errors: ErrorThrowers<TErrors>;
 }
 /** Middleware function signature — uses MiddlewareContext (no input, not yet validated). */
@@ -1407,64 +1406,27 @@ type AuthSpec = boolean | Partial<AuthConfig>;
 /** Compute, at the type level, whether an endpoint authenticates its caller —
  * i.e. whether `req.user` should be `User` (non-null) instead of `User | null`.
  *
- * This mirrors the Go pipeline's enforcement exactly (extract_meta.js + auth.go):
- * a request is authenticated ⟺ `auth === true` OR (`auth` is an object whose
- * `required` is not explicitly `false`). So `req.user` stays nullable ONLY when
- * `auth` is absent (`undefined`), `auth === false`, or `auth: { required: false }`.
+ * SECURE BY DEFAULT — mirrors the runtime (loader.go DefaultAuthConfig +
+ * pipeline/auth.go): an endpoint requires auth UNLESS it explicitly opts out.
+ * `req.user` is nullable ONLY for `auth: false` or `auth: { required: false }`.
+ * Omitting `auth` means AUTH REQUIRED (non-null `req.user`), so a handler that
+ * forgets `auth` fails safe (401) instead of silently exposing data.
  *
- * | `TAuth`                         | `IsAuthed<TAuth>` |
- * |---------------------------------|-------------------|
- * | `undefined`                     | `false`           |
- * | `true`                          | `true`            |
- * | `false`                         | `false`           |
- * | `{ required: true }`            | `true`            |
- * | `{ required: false }`           | `false`           |
- * | `{ role: 'admin' }` (no `required`) | `true` ⚠️     |
+ * | `TAuth`                          | `IsAuthed<TAuth>` |
+ * |----------------------------------|-------------------|
+ * | omitted (`undefined`)            | `true`  (secure)  |
+ * | `true`                           | `true`            |
+ * | `false`                          | `false` (public)  |
+ * | `{ required: true }`             | `true`            |
+ * | `{ required: false }`            | `false` (public)  |
+ * | `{ role: 'admin' }` (no `required`) | `true`         |
  *
- * Order matters: the `{ required: false }` branch is checked first so the
- * object case can't swallow it; `true` then `false` literals are handled
- * explicitly before the catch-all object branch (which encodes the
- * "required omitted ⇒ required" corner case).
+ * Order matters: the `{ required: false }` branch is checked first so the object
+ * case can't swallow it; `true`/`false` literals next; the catch-all (omitted)
+ * resolves to `true` (secure-by-default).
  */
 type IsAuthed<TAuth> = TAuth extends {
     required: false;
-} ? false : TAuth extends true ? true : TAuth extends false ? false : TAuth extends object ? true : false;
-/** Configuration for defining an endpoint.
- *
- * `TSchema` — optional `SchemaDef` carried on the `schema` field. The runtime
- * uses it to wire a typed `.tables.*` API; authors opt in per endpoint with
- * `typedDatabase(schema)` (see runtime.ts).
- *
- * `TAuth` — captures the literal type of the `auth` field (via the `const`
- * type parameter on `defineEndpoint`) so the handler's `req.user` can be
- * narrowed to non-null `User` when auth is required. See {@link IsAuthed}.
- *
- * `TErrors` — captures the literal `errors` map (via the `const` type
- * parameter on `defineEndpoint`) so `req.errors.<name>(...)` is typed per
- * declared entry. The OpenAPI generator emits each one as a discriminated
- * response under `responses[<status>]`, and the CLI codegen lowers them to
- * a typed `<Endpoint>.Error` enum on iOS.
- */
-interface EndpointConfig<TInputSchema extends ZodSchema = ZodSchema, TOutputSchema extends ZodSchema = ZodSchema, TSchema extends SchemaDef | undefined = undefined, TAuth extends AuthSpec | undefined = undefined, TErrors extends ErrorMap | undefined = undefined> {
-    method: HttpMethod;
-    auth?: TAuth;
-    rateLimit?: RateLimitConfig;
-    input?: TInputSchema;
-    output?: TOutputSchema;
-    schema?: TSchema;
-    errors?: TErrors;
-    middleware?: Middleware[];
-    handler: (req: PBRequest<z.infer<TInputSchema>, IsAuthed<TAuth>, TErrors>) => Promise<z.infer<TOutputSchema>>;
-}
-/** Define a type-safe endpoint. The input schema infers the `req.input` type.
- * Pass a `schema` (from `defineSchema`) and wrap `Database` with
- * `typedDatabase(schema)` in the handler for a typed `.tables.*` API.
- *
- * The `const TAuth` and `const TErrors` type parameters capture the `auth`
- * and `errors` fields as literals, so `req.user` narrows to non-null `User`
- * when auth is enforced and `req.errors.<name>(...)` is typed per declared
- * entry.
- */
-declare function defineEndpoint<TInputSchema extends ZodSchema, TOutputSchema extends ZodSchema, TSchema extends SchemaDef | undefined = undefined, const TAuth extends AuthSpec | undefined = undefined, const TErrors extends ErrorMap | undefined = undefined>(config: EndpointConfig<TInputSchema, TOutputSchema, TSchema, TAuth, TErrors>): EndpointConfig<TInputSchema, TOutputSchema, TSchema, TAuth, TErrors>;
+} ? false : TAuth extends true ? true : TAuth extends false ? false : TAuth extends object ? true : true;
 
-export { type PalbaseFileObject as $, type AuthConfig as A, type PalbaseCohortQueryInput as B, type CacheClient as C, type DBClient as D, type ErrorThrowers as E, type FileContext as F, type PalbaseCohortResult as G, HttpError as H, type PalbaseCollectionRef as I, type PalbaseCountQueryInput as J, type PalbaseCountResult as K, type Logger as L, type Middleware as M, type PalbaseCreateLinkParams as N, type PalbaseDeviceInfo as O, type PalbaseDocsClient as P, type QueueClient as Q, type PalbaseDeviceTokenView as R, type PalbaseDocumentRef as S, type PalbaseDocumentSnapshot as T, type User as U, type PalbaseEmailClient as V, type PalbaseEmailSendParams as W, type PalbaseEmailSendResponse as X, type PalbaseEventNamesResult as Y, type PalbaseEventsQueryInput as Z, type PalbaseEventsResult as _, type PalbaseFlagsClient as a, type PalbaseFlag as a0, type PalbaseFlagContext as a1, type PalbaseFlagVariant as a2, type PalbaseFunctionsClient as a3, type PalbaseFunnelQueryInput as a4, type PalbaseFunnelResult as a5, type PalbaseIdentifyTraits as a6, type PalbaseInboxClient as a7, type PalbaseInboxListOptions as a8, type PalbaseInboxListResult as a9, type PalbaseRegisterDeviceParams as aA, type PalbaseResult as aB, type PalbaseRetentionQueryInput as aC, type PalbaseRetentionResult as aD, type PalbaseSession as aE, type PalbaseSignedUrlResponse as aF, type PalbaseSmsClient as aG, type PalbaseSmsSendParams as aH, type PalbaseSmsSendResponse as aI, type PalbaseTransformOptions as aJ, type PalbaseUpdateLinkParams as aK, type PalbaseUploadOptions as aL, type PalbaseUser as aM, type PalbaseUserDetailResult as aN, type PalbaseUsersQueryInput as aO, type PalbaseUsersResult as aP, type PalbaseVerifyRequestSignatureParams as aQ, type PalbaseWhereOperator as aR, type RateLimitConfig as aS, type TxClient as aT, defineEndpoint as aU, defineMiddleware as aV, type PalbaseInboxMessage as aa, type PalbaseInboxSendParams as ab, type PalbaseInboxSendResponse as ac, type PalbaseInitialLink as ad, type PalbaseInvokeOptions as ae, type PalbaseLink as af, type PalbaseLinkAnalytics as ag, type PalbaseLinkDetails as ah, type PalbaseLinksClient as ai, type PalbaseListLinksOptions as aj, type PalbaseListLinksResult as ak, type PalbaseListOptions as al, type PalbaseMatchParams as am, type PalbaseMultiChannelResponse as an, type PalbaseOverviewResult as ao, type PalbasePreferences as ap, type PalbasePreferencesClient as aq, type PalbasePublicUrlResponse as ar, type PalbasePushClient as as, type PalbasePushSendParams as at, type PalbasePushSendResponse as au, type PalbaseQrCodeOptions as av, type PalbaseQuerySnapshot as aw, type PalbaseRealtimeChannel as ax, type PalbaseRealtimeClient as ay, type PalbaseRealtimeMessage as az, type PalbaseNotificationsClient as b, type PalbaseStorageClient as c, type PalbaseModuleClients as d, type ClientInfo as e, type EndpointConfig as f, type ErrorDef as g, type ErrorMap as h, type HttpMethod as i, type MiddlewareContext as j, type MiddlewareHandler as k, type PBRequest as l, type PalbaseAnalyticsClient as m, type PalbaseAnalyticsManagementNamespace as n, type PalbaseAnalyticsProperties as o, type PalbaseAnalyticsQueryNamespace as p, type PalbaseAttestAndroidParams as q, type PalbaseAttestAndroidResult as r, type PalbaseAttestiOSParams as s, type PalbaseAttestiOSResult as t, type PalbaseAuthClient as u, type PalbaseBindDeviceParams as v, type PalbaseBucketClient as w, type PalbaseCmsClient as x, type PalbaseCmsFindOneOptions as y, type PalbaseCmsFindOptions as z };
+export { type PalbaseEventsQueryInput as $, type AuthSpec as A, type PalbaseCohortQueryInput as B, type CacheClient as C, type DBClient as D, type ErrorMap as E, type FileContext as F, type PalbaseCohortResult as G, HttpError as H, type IsAuthed as I, type PalbaseCollectionRef as J, type PalbaseCountQueryInput as K, type Logger as L, type Middleware as M, type PalbaseCountResult as N, type PalbaseCreateLinkParams as O, type PBRequest as P, type QueueClient as Q, type RateLimitConfig as R, type PalbaseDeviceInfo as S, type PalbaseDeviceTokenView as T, type User as U, type PalbaseDocumentRef as V, type PalbaseDocumentSnapshot as W, type PalbaseEmailClient as X, type PalbaseEmailSendParams as Y, type PalbaseEmailSendResponse as Z, type PalbaseEventNamesResult as _, type PalbaseModuleClients as a, type PalbaseEventsResult as a0, type PalbaseFileObject as a1, type PalbaseFlag as a2, type PalbaseFlagContext as a3, type PalbaseFlagVariant as a4, type PalbaseFunctionsClient as a5, type PalbaseFunnelQueryInput as a6, type PalbaseFunnelResult as a7, type PalbaseIdentifyTraits as a8, type PalbaseInboxClient as a9, type PalbaseRealtimeClient as aA, type PalbaseRealtimeMessage as aB, type PalbaseRegisterDeviceParams as aC, type PalbaseResult as aD, type PalbaseRetentionQueryInput as aE, type PalbaseRetentionResult as aF, type PalbaseSession as aG, type PalbaseSignedUrlResponse as aH, type PalbaseSmsClient as aI, type PalbaseSmsSendParams as aJ, type PalbaseSmsSendResponse as aK, type PalbaseTransformOptions as aL, type PalbaseUpdateLinkParams as aM, type PalbaseUploadOptions as aN, type PalbaseUser as aO, type PalbaseUserDetailResult as aP, type PalbaseUsersQueryInput as aQ, type PalbaseUsersResult as aR, type PalbaseVerifyRequestSignatureParams as aS, type PalbaseWhereOperator as aT, type TxClient as aU, defineMiddleware as aV, type PalbaseInboxListOptions as aa, type PalbaseInboxListResult as ab, type PalbaseInboxMessage as ac, type PalbaseInboxSendParams as ad, type PalbaseInboxSendResponse as ae, type PalbaseInitialLink as af, type PalbaseInvokeOptions as ag, type PalbaseLink as ah, type PalbaseLinkAnalytics as ai, type PalbaseLinkDetails as aj, type PalbaseLinksClient as ak, type PalbaseListLinksOptions as al, type PalbaseListLinksResult as am, type PalbaseListOptions as an, type PalbaseMatchParams as ao, type PalbaseMultiChannelResponse as ap, type PalbaseOverviewResult as aq, type PalbasePreferences as ar, type PalbasePreferencesClient as as, type PalbasePublicUrlResponse as at, type PalbasePushClient as au, type PalbasePushSendParams as av, type PalbasePushSendResponse as aw, type PalbaseQrCodeOptions as ax, type PalbaseQuerySnapshot as ay, type PalbaseRealtimeChannel as az, type PalbaseDocsClient as b, type PalbaseFlagsClient as c, type PalbaseNotificationsClient as d, type PalbaseStorageClient as e, type AuthConfig as f, type ClientInfo as g, type ErrorDef as h, type ErrorThrowers as i, type HttpMethod as j, type MiddlewareContext as k, type MiddlewareHandler as l, type PalbaseAnalyticsClient as m, type PalbaseAnalyticsManagementNamespace as n, type PalbaseAnalyticsProperties as o, type PalbaseAnalyticsQueryNamespace as p, type PalbaseAttestAndroidParams as q, type PalbaseAttestAndroidResult as r, type PalbaseAttestiOSParams as s, type PalbaseAttestiOSResult as t, type PalbaseAuthClient as u, type PalbaseBindDeviceParams as v, type PalbaseBucketClient as w, type PalbaseCmsClient as x, type PalbaseCmsFindOneOptions as y, type PalbaseCmsFindOptions as z };